https://uxpressia.com/_nuxt/855b1a6.js

1(window.webpackJsonp=window.webpackJsonp||[]).push([[166],{1414:function(Xe,ue,w){"use strict";Object.defineProperty(ue,"__esModule",{value:!0});var L=w(2),h=w(782);function i(M){return M&&typeof M=="object"&&"default"in M?M:{default:M}}var p=i(L);/*! *****************************************************************************
2Copyright (c) Microsoft Corporation.
3
4Permission to use, copy, modify, and/or distribute this software for any
5purpose with or without fee is hereby granted.
6
7THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
8REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
10INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
11LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
12OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
13PERFORMANCE OF THIS SOFTWARE.
14***************************************************************************** */function d(M,F,W,te){function Q(N){return N instanceof W?N:new W(function(fe){fe(N)})}return new(W||(W=Promise))(function(N,fe){function b(me){try{re(te.next(me))}catch(v){fe(v)}}function ve(me){try{re(te.throw(me))}catch(v){fe(v)}}function re(me){me.done?N(me.value):Q(me.value).then(b,ve)}re((te=te.apply(M,F||[])).next())})}function x(M,F){var W={label:0,sent:function(){if(N[0]&1)throw N[1];return N[1]},trys:[],ops:[]},te,Q,N,fe;return fe={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(fe[Symbol.iterator]=function(){return this}),fe;function b(re){return function(me){return ve([re,me])}}function ve(re){if(te)throw new TypeError("Generator is already executing.");for(;W;)try{if(te=1,Q&&(N=re[0]&2?Q.return:re[0]?Q.throw||((N=Q.return)&&N.call(Q),0):Q.next)&&!(N=N.call(Q,re[1])).done)return N;switch(Q=0,N&&(re=[re[0]&2,N.value]),re[0]){case 0:case 1:N=re;break;case 4:return W.label++,{value:re[1],done:!1};case 5:W.label++,Q=re[1],re=[0];continue;case 7:re=W.ops.pop(),W.trys.pop();continue;default:if(N=W.trys,!(N=N.length>0&&N[N.length-1])&&(re[0]===6||re[0]===2)){W=0;continue}if(re[0]===3&&(!N||re[1]>N[0]&&re[1]<N[3])){W.label=re[1];break}if(re[0]===6&&W.label<N[1]){W.label=N[1],N=re;break}if(N&&W.label<N[2]){W.label=N[2],W.ops.push(re);break}N[2]&&W.ops.pop(),W.trys.pop();continue}re=F.call(M,W)}catch(me){re=[6,me],Q=0}finally{te=N=0}if(re[0]&5)throw re[1];return{value:re[0]?re[1]:void 0,done:!0}}}/*!
15 * Copyright (c) 2017-Present, Okta, Inc. and/or its affiliates. All rights reserved.
16 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
17 *
18 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
19 * Unless required by applicable law or agreed to in writing, software
20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22 *
23 * See the License for the specific language governing permissions and limitations under the License.
24 */var y,z,$,j,q=function(M){return d(void 0,void 0,void 0,function(){return x(this,function(F){switch(F.label){case 0:return M.isAuthenticated?[3,4]:(y.setOriginalUri(j),z?[4,z(y)]:[3,2]);case 1:return F.sent(),[3,4];case 2:return[4,y.signInWithRedirect()];case 3:F.sent(),F.label=4;case 4:return[2]}})})},oe=p.default.extend({data:function(){return{authState:y.authStateManager.getAuthState()}},created:function(){y.authStateManager.subscribe(this.$_oktaVue_handleAuthStateUpdate),y.token.isLoginRedirect()||y.authStateManager.updateAuthState()},beforeDestroy:function(){y.authStateManager.unsubscribe(this.$_oktaVue_handleAuthStateUpdate)},methods:{$_oktaVue_handleAuthStateUpdate:function(M){return d(this,void 0,void 0,function(){return x(this,function(F){return this.authState=Object.assign(this.authState,M),[2]})})}}}),I=p.default.extend({beforeCreate:function(){$=this.$router},beforeRouteEnter:function(M,F,W){return d(this,void 0,void 0,function(){var te,Q;return x(this,function(N){switch(N.label){case 0:return M.matched.some(function(fe){return fe.meta.requiresAuth})?(j=M.fullPath,y.authStateManager.subscribe(q),[4,y.isAuthenticated()]):[3,5];case 1:return te=N.sent(),te?[3,3]:(Q=y.authStateManager.getAuthState(),[4,q(Q)]);case 2:return N.sent(),[3,4];case 3:W(),N.label=4;case 4:return[3,6];case 5:W(),N.label=6;case 6:return[2]}})})},beforeRouteLeave:function(M,F,W){y.authStateManager.unsubscribe(q),W()}});function B(M,F){var W=this,te=F===void 0?{}:F,Q=te.oktaAuth,N=te.onAuthRequired;if(!Q)throw new h.AuthSdkError("No oktaAuth instance passed to OktaVue.");Q.userAgent="@okta/okta-vue/3.1.2 "+Q.userAgent,Q.options.restoreOriginalUri||(Q.options.restoreOriginalUri=function(fe,b){return d(W,void 0,void 0,function(){var ve;return x(this,function(re){return $?(ve=h.toRelativeUrl(b,window.location.origin),$.replace({path:ve}),[2]):[2]})})}),y=Q,z=N,M.mixin(oe),M.mixin(I),M.prototype.$oktaAuth=Q}var K={install:B},U=p.default.extend({name:"LoginCallback",beforeMount:function(){return d(this,void 0,void 0,function(){return x(this,function(M){switch(M.label){case 0:return[4,this.$oktaAuth.handleLoginRedirect()];case 1:return M.sent(),[2]}})})},render:function(){return this.$scopedSlots.default&&this.$scopedSlots.default({})}});U.__file="src/components/LoginCallback.vue",ue.LoginCallback=U,ue.NavigationGuardMixin=I,ue.default=K},309:function(Xe,ue,w){"use strict";w.d(ue,"a",function(){return D}),w.d(ue,"b",function(){return X}),w.d(ue,"c",function(){return Qe}),w.d(ue,"d",function(){return _});var L=w(686),h=w.n(L),i=w(2),p=w(842),d=w.n(p),x=w(843),y=w.n(x),z=w(492),$=w.n(z);const j=S=>typeof S>"u"||S===null,q=S=>!j(S),oe=(S,o,s)=>F(o,S)===F(s,S);function I(S){return S&&S.length&&new RegExp(["^\\/([a-zA-Z0-9@\\-%_~.:]","[/a-zA-Z0-9@\\-%_~.:]*)?","([?][^#]*)?(#[^#]*)?$"].join("")).test(S)}function B(S){const o={},s=S.split("&");for(let g=0;g<s.length;g++){const O=s[g].split("=");o[decodeURIComponent(O[0])]=decodeURIComponent(O[1]||"")}return o}function K(S){return Object.entries(S).filter(([o,s])=>typeof s<"u").map(([o,s])=>encodeURIComponent(o)+(s!=null?"="+encodeURIComponent(s):"")).join("&")}function U(S,o,s){return S.matched.some(g=>Object.values(g.components).some(O=>

24O.options&&O.options[o]===s))}function M(S,o=[]){return[].concat(...S.matched.map(function(s,g){return Object.keys(s.components).map(function(O){return o.push(g),s.components[O]})}))}function F(S="",o){let s=S.split("?")[0];return o&&o.base&&(s=s.replace(o.base,"/")),s.charAt(s.length-1)==="/"&&(s=s.slice(0,-1)),s=s.replace(/\/+/g,"/"),s}function W(S){return typeof S=="string"?S:JSON.stringify(S)}function te(S){if(typeof S=="string")try{return JSON.parse(S)}catch{}return S}function Q(S,o){if(!o||!S||typeof S!="object")return S;if(o in S)return S[o];const s=Array.isArray(o)?o:(o+"").split(".");let g=S;for(;s.length&&g;)g=g[s.shift()];return g}function N(S,o){return!S||!o||typeof S!="string"||S.startsWith(o)?S:o+" "+S}function fe(S,o){return!S||!o||typeof S!="string"?S:S.replace(o+" ","")}function b(...S){return S.join("/").replace(/[/]+/g,"/").replace(/^(.+):\//,"$1://").replace(/^file:/,"file:/").replace(/\/(\?|&|#[^!])/g,"$1").replace(/\?/g,"&").replace("&","?")}function ve(S){for(const o in S)S[o]===void 0&&delete S[o];return S}const re="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";function me(S){let o="";const s=re.length;for(let g=0;g<S;g++)o+=re.charAt(Math.floor(Math.random()*s));return o}class v{constructor(o,s){this.ctx=o,this.options=s,this._initState()}setUniversal(o,s){return j(s)?this.removeUniversal(o):(this.setCookie(o,s),this.setLocalStorage(o,s),this.setState(o,s),s)}getUniversal(o){let s;return j(s)&&(s=this.getCookie(o)),j(s)&&(s=this.getLocalStorage(o)),j(s)&&(s=this.getState(o)),s}syncUniversal(o,s){let g=this.getUniversal(o);return j(g)&&q(s)&&(g=s),q(g)&&this.setUniversal(o,g),g}removeUniversal(o){this.removeState(o),this.removeLocalStorage(o),this.removeCookie(o)}_initState(){if(i.default.set(this,"_state",{}),this._useVuex=this.options.vuex&&!!this.ctx.store,this._useVuex){const o={namespaced:!0,state:()=>this.options.initialState,mutations:{SET(s,g){i.default.set(s,g.key,g.value)}}};this.ctx.store.registerModule(this.options.vuex.namespace,o,{preserveState:Boolean(this.ctx.store.state[this.options.vuex.namespace])}),this.state=this.ctx.store.state[this.options.vuex.namespace]}else i.default.set(this,"state",{}),console.warn("[AUTH] The Vuex Store is not activated. This might cause issues in auth module behavior, like redirects not working properly.To activate it, see https://nuxtjs.org/docs/2.x/directory-structure/store")}setState(o,s){return o[0]==="_"?i.default.set(this._state,o,s):this._useVuex?this.ctx.store.commit(this.options.vuex.namespace+"/SET",{key:o,value:s}):i.default.set(this.state,o,s),s}getState(o){return o[0]!=="_"?this.state[o]:this._state[o]}watchState(o,s){if(this._useVuex)return this.ctx.store.watch(g=>Q(g[this.options.vuex.namespace],o),s)}removeState(o){this.setState(o,void 0)}setLocalStorage(o,s){if(j(s))return this.removeLocalStorage(o);if(!this.isLocalStorageEnabled())return;const g=this.getPrefix()+o;try{localStorage.setItem(g,W(s))}catch(O){if(!this.options.ignoreExceptions)throw O}return s}getLocalStorage(o){if(!this.isLocalStorageEnabled())return;const s=this.getPrefix()+o,g=localStorage.getItem(s);return te(g)}removeLocalStorage(o){if(!this.isLocalStorageEnabled())return;const s=this.getPrefix()+o;localStorage.removeItem(s)}

24getCookies(){if(!this.isCookiesEnabled())return;const o=document.cookie;return d.a.parse(o||"")||{}}setCookie(o,s,g={}){if(!this.options.cookie||!this.isCookiesEnabled())return;const Y=(g.prefix!==void 0?g.prefix:this.options.cookie.prefix)+o,A=Object.assign({},this.options.cookie.options,g),ie=W(s);j(s)&&(A.maxAge=-1),typeof A.expires=="number"&&(A.expires=new Date(Date.now()+A.expires*864e5));const be=d.a.serialize(Y,ie,A);return document.cookie=be,s}getCookie(o){if(!this.options.cookie||!this.isCookiesEnabled())return;const s=this.options.cookie.prefix+o,g=this.getCookies(),O=g[s]?decodeURIComponent(g[s]):void 0;return te(O)}removeCookie(o,s){this.setCookie(o,void 0,s)}getPrefix(){if(!this.options.localStorage)throw new Error("Cannot get prefix; localStorage is off");return this.options.localStorage.prefix}isLocalStorageEnabled(){if(!this.options.localStorage)return!1;const o="test";try{return localStorage.setItem(o,o),localStorage.removeItem(o),!0}catch{return this.options.ignoreExceptions||console.warn("[AUTH] Local storage is enabled in config, but browser doesn't support it"),!1}}isCookiesEnabled(){return this.options.cookie?window.navigator.cookieEnabled?!0:(console.warn("[AUTH] Cookies is enabled in config, but browser doesn't support it"),!1):!1}}class D{constructor(o,s){this.strategies={},this._errorListeners=[],this._redirectListeners=[],this.ctx=o,this.options=s;const g={user:null,loggedIn:!1},O=new v(o,{...s,initialState:g});this.$storage=O,this.$state=O.state}get state(){return this._stateWarnShown||(this._stateWarnShown=!0,console.warn("[AUTH] $auth.state is deprecated. Please use $auth.$state or top level props like $auth.loggedIn")),this.$state}get strategy(){return this.getStrategy()}getStrategy(o=!0){if(o){if(!this.$state.strategy)throw new Error("No strategy is set!");if(!this.strategies[this.$state.strategy])throw new Error("Strategy not supported: "+this.$state.strategy)}return this.strategies[this.$state.strategy]}get user(){return this.$state.user}get loggedIn(){return this.$state.loggedIn}get busy(){return this.$storage.getState("busy")}

24async init(){if(this.options.resetOnError&&this.onError((...o)=>{(typeof this.options.resetOnError!="function"||this.options.resetOnError(...o))&&this.reset()}),this.$storage.syncUniversal("strategy",this.options.defaultStrategy),!this.getStrategy(!1)&&(this.$storage.setUniversal("strategy",this.options.defaultStrategy),!this.getStrategy(!1)))return Promise.resolve();try{await this.mounted()}catch(o){this.callOnError(o)}finally{this.options.watchLoggedIn&&this.$storage.watchState("loggedIn",o=>{U(this.ctx.route,"auth",!1)||this.redirect(o?"home":"logout")})}}getState(o){return this._getStateWarnShown||(this._getStateWarnShown=!0,console.warn("[AUTH] $auth.getState is deprecated. Please use $auth.$storage.getState() or top level props like $auth.loggedIn")),this.$storage.getState(o)}registerStrategy(o,s){this.strategies[o]=s}setStrategy(o){if(o===this.$storage.getUniversal("strategy"))return Promise.resolve();if(!this.strategies[o])throw new Error(`Strategy ${o} is not defined!`);return this.reset(),this.$storage.setUniversal("strategy",o),this.mounted()}mounted(...o){return this.getStrategy().mounted?Promise.resolve(this.getStrategy().mounted(...o)).catch(s=>(this.callOnError(s,{method:"mounted"}),Promise.reject(s))):this.fetchUserOnce()}loginWith(o,...s){return this.setStrategy(o).then(()=>this.login(...s))}login(...o){return this.getStrategy().login?this.wrapLogin(this.getStrategy().login(...o)).catch(s=>(this.callOnError(s,{method:"login"}),Promise.reject(s))):Promise.resolve()}fetchUser(...o){return this.getStrategy().fetchUser?Promise.resolve(this.getStrategy().fetchUser(...o)).catch(s=>(this.callOnError(s,{method:"fetchUser"}),Promise.reject(s))):Promise.resolve()}logout(...o){return this.getStrategy().logout?Promise.resolve(this.getStrategy().logout(...o)).catch(s=>(this.callOnError(s,{method:"logout"}),Promise.reject(s))):(this.reset(),Promise.resolve())}setUserToken(o,s){return this.getStrategy().setUserToken?Promise.resolve(this.getStrategy().setUserToken(o,s)).catch(g=>(this.callOnError(g,{method:"setUserToken"}),Promise.reject(g))):(this.getStrategy().token.set(o),Promise.resolve())}reset(...o){return this.getStrategy().reset||(this.setUser(!1),this.get

24Strategy().token.reset(),this.getStrategy().refreshToken.reset()),this.getStrategy().reset(...o)}refreshTokens(){return this.getStrategy().refreshController?Promise.resolve(this.getStrategy().refreshController.handleRefresh()).catch(o=>(this.callOnError(o,{method:"refreshTokens"}),Promise.reject(o))):Promise.resolve()}check(...o){return this.getStrategy().check?this.getStrategy().check(...o):{valid:!0}}fetchUserOnce(...o){return this.$state.user?Promise.resolve():this.fetchUser(...o)}setUser(o){this.$storage.setState("user",o);let s={valid:Boolean(o)};s.valid&&(s=this.check()),this.$storage.setState("loggedIn",s.valid)}request(o,s={}){const g=typeof s=="object"?Object.assign({},s,o):o;if(g.baseURL===""&&(g.baseURL=h()(this.ctx.req)),!this.ctx.app.$axios){console.error("[AUTH] add the @nuxtjs/axios module to nuxt.config file");return}return this.ctx.app.$axios.request(g).catch(O=>(this.callOnError(O,{method:"request"}),Promise.reject(O)))}requestWith(o,s,g){const O=this.getStrategy().token.get(),Y=Object.assign({},g,s),A=this.strategies[o].options.token.name||"Authorization";return Y.headers||(Y.headers={}),!Y.headers[A]&&q(O)&&O&&typeof O=="string"&&(Y.headers[A]=O),this.request(Y)}wrapLogin(o){return this.$storage.setState("busy",!0),this.error=null,Promise.resolve(o).then(s=>(this.$storage.setState("busy",!1),s)).catch(s=>(this.$storage.setState("busy",!1),Promise.reject(s)))}onError(o){this._errorListeners.push(o)}callOnError(o,s={}){this.error=o;for(const g of this._errorListeners)g(o,s)}redirect(o,s=!1){if(!this.options.redirect)return;const g=this.options.fullPathRedirect?this.ctx.route.fullPath:this.ctx.route.path;let O=this.options.redirect[o];if(O){if(this.options.rewriteRedirects&&(o==="login"&&I(g)&&!oe(this.ctx,O,g)&&this.$storage.setUniversal("redirect",g),o==="home")){const Y=this.$storage.getUniversal("redirect");this.$storage.setUniversal("redirect",null),I(Y)&&(O=Y)}O=this.callOnRedirect(O,g)||O,!oe(this.ctx,O,g)&&(s?(I(O)&&!O.includes(this.ctx.base)&&(O=F("/"+this.ctx.base+"/"+O)),window.location.replace(O)):this.ctx.redirect(O,this.ctx.query))}}onRedirect(o){this._redirectListeners.push(o)}callOnRedirect(o,s){for(const g of this._redirectListeners)o=g(o,s)||o;return o}hasScope(o){const s=this.$state.user&&Q(this.$state.user,this.options.scopeKey);return s?Array.isArray(s)?s.includes(o):Boolean(Q(s,o)):!1}}const _=async S=>{if(U(S.route,"auth",!1))return;const o=[];if(!M(S.route,o).length)return;const{login:g,callback:O}=S.$auth.options.redirect,Y=U(S.route,"auth","guest"),A=ie=>F(S.route.path,S)===F(ie,S);if(S.$auth.$state.loggedIn){const{tokenExpired:ie,refreshTokenExpired:be,isRefreshable:ze}=S.$auth.check(!0);if((!g||A(g)||Y)&&S.$auth.redirect("home"),be)S.$auth.reset();else if(ie)if(ze)try{await S.$auth.refreshTokens()}catch{S.$auth.reset()}else S.$auth.reset()}else!Y&&(!O||!A(O))&&S.$auth.redirect("login")};class T extends Error{constructor(){super("Error loading OpenIDConnect configuration document"),this.name="ConfigurationDocumentRequestError"}}const J=S=>console.warn(`[AUTH] [OPENID CONNECT] Invalid configuration. ${S}`);class V{constructor(o,s){this.scheme=o,this.$storage=s,this.key="_configuration_document."+this.scheme.name}_set(o){return this.$storage.setState(this.key,o)}get(){return this.$storage.getState(this.key)}set(o){return this._set(o),o}async request(){var o,s,g,O;const Y=(O=(g=(s=(o=this.scheme.$auth.ctx)==null?void 0:o.nuxtState)==null?void 0:s.$auth)==null?void 0:g.openIDConnect)==null?void 0:O.configurationDocument;if(Y&&this.set(Y),!this.get()){const A=await this.scheme.requestHandler.axios.$get(this.scheme.options.endpoints.configuration).catch(ie=>Promise.reject(ie));this.set(A)}}validate(){const o={responseType:"response_type_supported",scope:"scopes_supported",grantType:"grant_types_supported",acrValues:"acr_values_supported"};Object.keys(o).forEach(s=>{const g=this.get(),O=o[s],Y=g[O],A=this.scheme.options[s];typeof Y<"u"&&(Array.isArray(A)&&Array.isArray(Y)&&A.forEach(ie=>{Y.includes(ie)||J(`A value of scheme options ${s} is not supported by ${O} of by Authorization Server.`)}),!Array.isArray(A)&&Array.isArray(Y)&&!Y.includes(A)&&J(`Value of scheme option ${s} is not supported by ${O} of by Authorization Server.`),!Array.isArray(A)&&!Array.isArray(Y)&&Y!==A&&J(`Value of scheme option ${s} is not supported by ${O} of by Authorization Server.`))})}

24async init(){await this.request().catch(()=>{throw new T}),this.validate(),this.setSchemeEndpoints()}setSchemeEndpoints(){const o=this.get();this.scheme.options.endpoints=y()(this.scheme.options.endpoints,{authorization:o.authorization_endpoint,token:o.token_endpoint,userInfo:o.userinfo_endpoint,logout:o.end_session_endpoint})}reset(){this._set(!1)}}class X extends Error{constructor(){super("Both token and refresh token have expired. Your request was aborted."),this.name="ExpiredAuthSessionError"}}class ce{constructor(o){this.scheme=o,this._refreshPromise=null,this.$auth=o.$auth}handleRefresh(){return this._refreshPromise?this._refreshPromise:this._doRefresh()}_doRefresh(){return this._refreshPromise=new Promise((o,s)=>{this.scheme.refreshTokens().then(g=>{this._refreshPromise=null,o(g)}).catch(g=>{this._refreshPromise=null,s(g)})}),this._refreshPromise}}var le;(function(S){S.UNKNOWN="UNKNOWN",S.VALID="VALID",S.EXPIRED="EXPIRED"})(le||(le={}));class Te{constructor(o,s){this._status=this._calculate(o,s)}unknown(){return le.UNKNOWN===this._status}valid(){return le.VALID===this._status}expired(){return le.EXPIRED===this._status}_calculate(o,s){const g=Date.now();try{if(!o||!s)return le.UNKNOWN}catch{return le.UNKNOWN}return s-=500,g<s?le.VALID:le.EXPIRED}}class Oe{constructor(o,s){this.scheme=o,this.$storage=s}get(){const o=this.scheme.options.refreshToken.prefix+this.scheme.name;return this.$storage.getUniversal(o)}set(o){const s=N(o,this.scheme.options.refreshToken.type);return this._setToken(s),this._updateExpiration(s),s}sync(){const o=this._syncToken();return this._syncExpiration(),o}reset(){this._setToken(!1),this._setExpiration(!1)}status(){return new Te(this.get(),this._getExpiration())}_getExpiration(){const o=this.scheme.options.refreshToken.expirationPrefix+this.scheme.name;return this.$storage.getUniversal(o)}_setExpiration(o){const s=this.scheme.options.refreshToken.expirationPrefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncExpiration(){const o=this.scheme.options.refreshToken.expirationPrefix+this.scheme.name;return this.$storage.syncUniversal(o)}_updateExpiration(o){let s;const g=Date.now(),O=Number(this.scheme.options.refreshToken.maxAge)*1e3,Y=O?g+O:0;try{s=$()(o+"").exp*1e3||Y}catch(A){if(s=Y,!(A&&A.name==="InvalidTokenError"))throw A}return this._setExpiration(s||!1)}_setToken(o){const s=this.scheme.options.refreshToken.prefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncToken(){const o=this.scheme.options.refreshToken.prefix+this.scheme.name;return this.$storage.syncUniversal(o)}}class he{constructor(o,s){this.scheme=o,this.axios=s,this.interceptor=null}setHeader(o){this.scheme.options.token.global&&this.axios.setHeader(this.scheme.options.token.name,o)}clearHeader(){this.scheme.options.token.global&&this.axios.setHeader(this.scheme.options.token.name,!1)}initializeRequestInterceptor(o){this.interceptor=this.axios.interceptors.request.use(async s=>{if(!this._needToken(s)||s.url===o)return s;const{valid:g,tokenExpired:O,refreshTokenExpired:Y,isRefreshable:A}=this.scheme.check(!0);let ie=g;if(Y)throw this.scheme.reset(),new X;if(O){if(!A)throw this.scheme.reset(),new X;ie=await this.scheme.refreshTokens().then(()=>!0).catch(()=>{throw this.scheme.reset(),new X})}const be=this.scheme.token.get();if(!ie){if(!be&&this._requestHasAuthorizationHeader(s))throw new X;return s}return this._getUpdatedRequestConfig(s,be)})}reset(){this.axios.interceptors.request.eject(this.interceptor),this.interceptor=null}_needToken(o){const s=this.scheme.options;return s.token.global||Object.values(s.endpoints).some(g=>typeof g=="object"?g.url===o.url:g===o.url)}_getUpdatedRequestConfig(o,s){return typeof s=="string"&&(o.headers[this.scheme.options.token.name]=s),o}_requestHasAuthorizationHeader(o){return!!o.headers.common[this.scheme.options.token.name]}}class _e{constructor(o,s){this.scheme=o,this.$storage=s}get(){const o=this.scheme.options.token.prefix+this.scheme.name;return this.$storage.getUniversal(o)}set(o){const s=N(o,this.scheme.options.token.type);return this._setToken(s),this._updateExpiration(s),typeof s=="string"&&this.scheme.requestHandler.setHeader(s),s}sync(){const o=this._syncToken();

24return this._syncExpiration(),typeof o=="string"&&this.scheme.requestHandler.setHeader(o),o}reset(){this.scheme.requestHandler.clearHeader(),this._setToken(!1),this._setExpiration(!1)}status(){return new Te(this.get(),this._getExpiration())}_getExpiration(){const o=this.scheme.options.token.expirationPrefix+this.scheme.name;return this.$storage.getUniversal(o)}_setExpiration(o){const s=this.scheme.options.token.expirationPrefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncExpiration(){const o=this.scheme.options.token.expirationPrefix+this.scheme.name;return this.$storage.syncUniversal(o)}_updateExpiration(o){let s;const g=Date.now(),O=Number(this.scheme.options.token.maxAge)*1e3,Y=O?g+O:0;try{s=$()(o+"").exp*1e3||Y}catch(A){if(s=Y,!(A&&A.name==="InvalidTokenError"))throw A}return this._setExpiration(s||!1)}_setToken(o){const s=this.scheme.options.token.prefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncToken(){const o=this.scheme.options.token.prefix+this.scheme.name;return this.$storage.syncUniversal(o)}}class we{constructor(o,s){this.scheme=o,this.$storage=s}get(){const o=this.scheme.options.idToken.prefix+this.scheme.name;return this.$storage.getUniversal(o)}set(o){const s=N(o,this.scheme.options.idToken.type);return this._setToken(s),this._updateExpiration(s),s}sync(){const o=this._syncToken();return this._syncExpiration(),o}reset(){this._setToken(!1),this._setExpiration(!1)}status(){return new Te(this.get(),this._getExpiration())}_getExpiration(){const o=this.scheme.options.idToken.expirationPrefix+this.scheme.name;return this.$storage.getUniversal(o)}_setExpiration(o){const s=this.scheme.options.idToken.expirationPrefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncExpiration(){const o=this.scheme.options.idToken.expirationPrefix+this.scheme.name;return this.$storage.syncUniversal(o)}_updateExpiration(o){let s;const g=Date.now(),O=Number(this.scheme.options.idToken.maxAge)*1e3,Y=O?g+O:0;try{s=$()(o+"").exp*1e3||Y}catch(A){if(s=Y,!(A&&A.name==="InvalidTokenError"))throw A}return this._setExpiration(s||!1)}_setToken(o){const s=this.scheme.options.idToken.prefix+this.scheme.name;return this.$storage.setUniversal(s,o)}_syncToken(){const o=this.scheme.options.idToken.prefix+this.scheme.name;return this.$storage.syncUniversal(o)}userInfo(){const o=this.get();if(typeof o=="string")return $()(o)}}class Ae{constructor(o,...s){this.$auth=o,this.options=s.reduce((g,O)=>y()(g,O),{})}get name(){return this.options.name}}const Se={name:"local",endpoints:{login:{url:"/api/auth/login",method:"post"},logout:{url:"/api/auth/logout",method:"post"},user:{url:"/api/auth/user",method:"get"}},token:{property:"token",type:"Bearer",name:"Authorization",maxAge:1800,global:!0,required:!0,prefix:"_token.",expirationPrefix:"_token_expiration."},user:{property:"user",autoFetch:!0},clientId:!1,grantType:!1,scope:!1};class ye extends Ae{constructor(o,s,...g){super(o,s,...g,Se),this.token=new _e(this,this.$auth.$storage),this.requestHandler=new he(this,this.$auth.ctx.$axios)}check(o=!1){const s={valid:!1,tokenExpired:!1};return this.token.sync()?o&&this.token.status().expired()?(s.tokenExpired=!0,s):(s.valid=!0,s):s}mounted({tokenCallback:o=()=>this.$auth.reset(),refreshTokenCallback:s=void 0}={}){const{tokenExpired:g,refreshTokenExpired:O}=this.check(!0);return O&&typeof s=="function"?s():g&&typeof o=="function"&&o(),this.initializeRequestInterceptor(),this.$auth.fetchUserOnce()}async login(o,{reset:s=!0}={}){if(!this.options.endpoints.login)return;s&&this.$auth.reset({resetInterceptor:!1}),this.options.clientId&&(o.data.client_id=this.options.clientId),this.options.grantType&&(o.data.grant_type=this.options.grantType),this.options.scope&&(o.data.scope=this.options.scope);const g=await this.$auth.request(o,this.options.endpoints.login);return this.updateTokens(g),this.requestHandler.interceptor||this.initializeRequestInterceptor(),this.options.user.autoFetch&&await this.fetchUser(),g}setUserToken(o){return this.token.set(o),this.fetchUser()}fetchUser(o){return this.check().valid?this.options.endpoints.user?this.$auth.requestWith(this.name,o,this.options.endpoints.user).then(s=>{const g=Q(s.data,this.options.user.property);if(!g){const O=new Error(`User Data response does not contain field ${this.options.user.property}`);return Promise.reject(O)}return this.$auth.setUser(g),s}).catch(s=>(this.$auth.callOnError(s,{method:"fetchUser"}),Promise.reject(s))):(this.$auth.setUser({}),Promise.resolve()):Promise.resolve()}async logout(o={}){return this.options.endpoints.logout&&await this.$auth.requestWith(this.name,o,this.options.endpoints.logout).catch(()=>{}),this.$auth.reset()}reset({resetInterceptor:o=!0}={}){this.$auth.setUser(!1),this.token.reset(),o&&this.requestHandler.reset()}updateTokens(o){const s=this.options.token.required?Q(o.data,this.options.token.property):!0;this.token.set(s)}initializeRequestInterceptor(){this.requestHandler.initializeRequestInterceptor()}}const ke={name:"cookie",cookie:{name:null},token:{type:"",property:"",maxAge:!1,global:!1,required:!1},endpoints:{csrf:null}};class Pe extends ye{constructor(o,s){super(o,s,ke)}mounted(){return super.mounted()}check(){const o={valid:!1};if(!super.check().valid)return o;if(this.options.cookie.name){const s=this.$auth.$storage.getCookies();return o.valid=Boolean(s[this.options.cookie.name]),o}return o.valid=!0,o}async login(o){return this.$auth.reset(),this.options.endpoints.csrf&&await this.$auth.request(this.options.endpoints.csrf,{maxRedirects:0}),super.login(o,{reset:!1})}reset(){return this.options.cookie.name&&this.$auth.$storage.setCookie(this.options.cookie.name,null,{prefix:""}),super.reset()}}const Fe={name:"oauth2",accessType:null,redirectUri:null,logoutRedirectUri:null,clientId:null,audie

24nce:null,grantType:null,responseMode:null,acrValues:null,autoLogout:!1,endpoints:{logout:null,authorization:null,token:null,userInfo:null},scope:[],token:{property:"access_token",type:"Bearer",name:"Authorization",maxAge:1800,global:!0,prefix:"_token.",expirationPrefix:"_token_expiration."},refreshToken:{property:"refresh_token",maxAge:60*60*24*30,prefix:"_refresh_token.",expirationPrefix:"_refresh_token_expiration."},user:{property:!1},responseType:"token",codeChallengeMethod:"implicit"};class Qe extends Ae{constructor(o,s,...g){super(o,s,...g,Fe),this.req=o.ctx.req,this.token=new _e(this,this.$auth.$storage),this.refreshToken=new Oe(this,this.$auth.$storage),this.refreshController=new ce(this),this.requestHandler=new he(this,this.$auth.ctx.$axios)}get scope(){return Array.isArray(this.options.scope)?this.options.scope.join(" "):this.options.scope}get redirectURI(){const o=this.$auth.ctx.base||"",s=F(o+"/"+this.$auth.options.redirect.callback);return this.options.redirectUri||b(h()(this.req),s)}get logoutRedirectURI(){return this.options.logoutRedirectUri||b(h()(this.req),this.$auth.options.redirect.logout)}check(o=!1){const s={valid:!1,tokenExpired:!1,refreshTokenExpired:!1,isRefreshable:!0},g=this.token.sync();if(this.refreshToken.sync(),!g)return s;if(!o)return s.valid=!0,s;const O=this.token.status();return this.refreshToken.status().expired()?(s.refreshTokenExpired=!0,s):O.expired()?(s.tokenExpired=!0,s):(s.valid=!0,s)}async mounted(){const{tokenExpired:o,refreshTokenExpired:s}=this.check(!0);if((s||o&&this.options.autoLogout)&&this.$auth.reset(),this.requestHandler.initializeRequestInterceptor(this.options.endpoints.token),!await this._handleCallback())return this.$auth.fetchUserOnce()}reset(){this.$auth.setUser(!1),this.token.reset(),this.refreshToken.reset(),this.requestHandler.reset()}async login(o={}){const s={protocol:"oauth2",response_type:this.options.responseType,access_type:this.options.accessType,client_id:this.options.clientId,redirect_uri:this.redirectURI,scope:this.scope,state:o.state||me(10),code_challenge_method:this.options.codeChallengeMethod,...o.params};if(this.options.audience&&(s.audience=this.options.audience),(s.response_type.includes("token")||s.response_type.includes("id_token"))&&(s.nonce=o.nonce||me(10)),s.code_challenge_method)switch(s.code_challenge_method){case"plain":case"S256":{const O=this.generateRandomString();this.$auth.$storage.setUniversal(this.name+".pkce_state",O);const Y=this.generateRandomString();this.$auth.$storage.setUniversal(this.name+".pkce_code_verifier",Y);const A=await this.pkceChallengeFromVerifier(Y,s.code_challenge_method==="S256");s.code_challenge=window.encodeURIComponent(A)}break}this.options.responseMode&&(s.response_mode=this.options.responseMode),this.options.acrValues&&(s.acr_values=this.options.acrValues),this.$auth.$storage.setUniversal(this.name+".state",s.state);const g=this.options.endpoints.authorization+"?"+K(s);window.location.replace(g)}logout(){if(this.options.endpoints.logout){const o={client_id:this.options.clientId+"",logout_uri:this.logoutRedirectURI},s=this.options.endpoints.logout+"?"+K(o);window.location.replace(s)}return this.$auth.reset()}async fetchUser(){if(!this.check().valid)return;if(!this.options.endpoints.userInfo){this.$auth.setUser({});return}const o=await this.$auth.requestWith(this.name,{url:this.options.endpoints.userInfo});this.$auth.setUser(Q(o.data,this.options.user.property))}async _handleCallback(){if(this.$auth.options.redirect&&F(this.$auth.ctx.route.path,this.$auth.ctx)!==F(this.$auth.options.redirect.callback,this.$auth.ctx))return;const o=B(this.$auth.ctx.route.hash.substr(1)),s=Object.assign({},this.$auth.ctx.route.query,o);let g=s[this.options.token.property],O;this.options.refreshToken.property&&(O=s[this.options.refreshToken.property]);const Y=this.$auth.$storage.getUniversal(this.name+".state");if(this.$auth.$storage.setUniversal(this.name+".state",null),!(Y&&s.state!==Y)){if(this.options.responseType==="code"&&s.code){let A;this.options.codeChallengeMethod&&this.options.codeChallengeMethod!=="implicit"&&(A=this.$auth.$storage.getUniversal(this.name+".pkce_code_verifier"),this.$auth.$storage.setUniversal(this.name+".pkce_code_verifier",null));const ie=await this.$auth.request({method:"post",url:this.options.endpoints.token,baseURL:"",data:K({code:s.code,client_id:this.options.clientId+"",redirect_uri:this.redirectURI,response_type:this.options.responseType,audience:this.options.audience,grant_type:this.options.grantType,code_verifier:A})});g=Q(ie.data,this.options.token.property)||g,O=Q(ie.data,this.options.refreshToken.property)||O}if(!(!g||!g.length)&&(this.token.set(g),O&&O.length&&this.refreshToken.set(O),this.$auth.options.watchLoggedIn))return this.$auth.redirect("home",!0),!0}}async refreshTokens(){const o=this.refreshToken.get();if(!o)return;if(this.refreshToken.status().expired())throw this.$auth.reset(),new X;this.requestHandler.clearHeader();const g=await this.$auth.request({method:"post",url:this.options.endpoints.token,baseURL:"",headers:{"Content-Type":"application/x-www-form-urlencoded"},data:K({refresh_token:fe(o,this.options.token.type),scopes:this.scope,client_id:this.options.clientId+"",grant_type:"refresh_token"})}).catch(O=>(this.$auth.callOnError(O,{method:"refreshToken"}),Promise.reject(O)));return this.updateTokens(g),g}updateTokens(o){const s=Q(o.data,this.options.token.property),g=Q(o.data,this.options.refreshToken.property);this.token.set(s),g&&this.refreshToken.set(g)}async pkceChallengeFromVerifier(o,s){if(s){const g=await this._sha256(o);return this._base64UrlEncode(g)}return o}generateRandomString(){const o=new Uint32Array(28);return window.crypto.getRandomValues(o),Array.from(o,s=>("0"+s.toString(16)).substr(-2)).join("")}_sha256(o){const g=new TextEncoder().encode(o);return window.crypto.subtle.digest("SHA-256",g)}_base64UrlEncode(o){return btoa(String.fromCharCode.apply(null,new Uint8Array(o))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}}const Me={name:"openIDConnect",responseType:"code",grantType:"authorization_code",scope:["openid","profile","offline_access"],idToken:{property:"id_token",maxAge:1800,prefix:"_id_token.",expirationPrefix:"_id_token_expiration."}

24,codeChallengeMethod:"S256"};class Ve extends Qe{constructor(o,s,...g){super(o,s,...g,Me),this.idToken=new we(this,this.$auth.$storage),this.configurationDocument=new V(this,this.$auth.$storage)}updateTokens(o){super.updateTokens(o);const s=Q(o.data,this.options.idToken.property);s&&this.idToken.set(s)}check(o=!1){const s={valid:!1,tokenExpired:!1,refreshTokenExpired:!1,idTokenExpired:!1,isRefreshable:!0},g=this.token.sync();if(this.refreshToken.sync(),this.idToken.sync(),!g)return s;if(!o)return s.valid=!0,s;const O=this.token.status(),Y=this.refreshToken.status(),A=this.idToken.status();return Y.expired()?(s.refreshTokenExpired=!0,s):O.expired()?(s.tokenExpired=!0,s):A.expired()?(s.idTokenExpired=!0,s):(s.valid=!0,s)}async mounted(){await this.configurationDocument.init();const{tokenExpired:o,refreshTokenExpired:s}=this.check(!0);if((s||o&&this.options.autoLogout)&&this.$auth.reset(),this.requestHandler.initializeRequestInterceptor(this.options.endpoints.token),!await this._handleCallback())return this.$auth.fetchUserOnce()}reset(){this.$auth.setUser(!1),this.token.reset(),this.idToken.reset(),this.refreshToken.reset(),this.requestHandler.reset(),this.configurationDocument.reset()}logout(){if(this.options.endpoints.logout){const o={id_token_hint:this.idToken.get(),post_logout_redirect_uri:this.logoutRedirectURI},s=this.options.endpoints.logout+"?"+K(o);window.location.replace(s)}return this.$auth.reset()}async fetchUser(){if(!this.check().valid)return;if(this.idToken.get()){const s=this.idToken.userInfo();this.$auth.setUser(s);return}if(!this.options.endpoints.userInfo){this.$auth.setUser({});return}const{data:o}=await this.$auth.requestWith(this.name,{url:this.options.endpoints.userInfo});this.$auth.setUser(o)}async _handleCallback(){if(this.$auth.options.redirect&&F(this.$auth.ctx.route.path)!==F(this.$auth.options.redirect.callback))return;const o=B(this.$auth.ctx.route.hash.substr(1)),s=Object.assign({},this.$auth.ctx.route.query,o);let g=s[this.options.token.property],O;this.options.refreshToken.property&&(O=s[this.options.refreshToken.property]);let Y=s[this.options.idToken.property];const A=this.$auth.$storage.getUniversal(this.name+".state");if(this.$auth.$storage.setUniversal(this.name+".state",null),!(A&&s.state!==A)){if(this.options.responseType==="code"&&s.code){let ie;this.options.codeChallengeMethod&&this.options.codeChallengeMethod!=="implicit"&&(ie=this.$auth.$storage.getUniversal(this.name+".pkce_code_verifier"),this.$auth.$storage.setUniversal(this.name+".pkce_code_verifier",null));const be=await this.$auth.request({method:"post",url:this.options.endpoints.token,baseURL:"",data:K({code:s.code,client_id:this.options.clientId,redirect_uri:this.redirectURI,response_type:this.options.responseType,audience:this.options.audience,grant_type:this.options.grantType,code_verifier:ie})});g=Q(be.data,this.options.token.property)||g,O=Q(be.data,this.options.refreshToken.property)||O,Y=Q(be.data,this.options.idToken.property)||Y}if(!(!g||!g.length))return this.token.set(g),O&&O.length&&this.refreshToken.set(O),Y&&Y.length&&this.idToken.set(Y),this.$auth.redirect("home",!0),!0}}}const Ze={name:"refresh",endpoints:{refresh:{url:"/api/auth/refresh",method:"post"}},refreshToken:{property:"refresh_token",data:"refresh_token",maxAge:60*60*24*30,required:!0,tokenRequired:!1,prefix:"_refresh_token.",expirationPrefix:"_refresh_token_expiration."},autoLogout:!1};class Ot extends ye{constructor(o,s){super(o,s,Ze),this.refreshToken=new Oe(this,this.$auth.$storage),this.refreshController=new ce(this)}check(o=!1){const s={valid:!1,tokenExpired:!1,refreshTokenExpired:!1,isRefreshable:!0},g=this.token.sync(),O=this.refreshToken.sync();if(!g||!O)return s;if(!o)return s.valid=!0,s;const Y=this.token.status();return this.refreshToken.status().expired()?(s.refreshTokenExpired=!0,s):Y.expired()?(s.tokenExpired=!0,s):(s.valid=!0,s)}mounted(){return super.mounted({tokenCallback:()=>{this.options.autoLogout&&this.$auth.reset()},refreshTokenCallback:()=>{this.$auth.reset()}})}refreshTokens(){if(!this.options.endpoints.refresh||!this.check().valid)return Promise.resolve();if(this.refreshToken.status().expired())throw this.$auth.reset(),new X;this.options.refreshToken.tokenRequired||this.requestHandler.clearHeader();const s={data:{client_id:void 0,grant_type:void 0}};return this.options.refreshToken.required&&this.options.refreshToken.data&&(s.data[this.options.refreshToken.data]=this.refreshToken.get()),this.options.clientId&&(s.data.client_id=this.options.clientId),this.options.grantType&&(s.data.grant_type="refresh_token"),ve(s.data),this.$auth.request(s,this.options.endpoints.refresh).then(g=>(this.updateTokens(g,{isRefreshing:!0}),g)).catch(g=>(this.$auth.callOnError(g,{method:"refreshToken"}),Promise.reject(g)))}setUserToken(o,s){return this.token.set(o),s&&this.refreshToken.set(s),this.fetchUser()}reset({resetInterceptor:o=!0}={}){this.$auth.setUser(!1),this.token.reset(),this.refreshToken.reset(),o&&this.requestHandler.reset()}updateTokens(o,{isRefreshing:s=!1,updateOnRefresh:g=!0}={}){const O=this.options.token.required?Q(o.data,this.options.token.property):!0,Y=this.options.refreshToken.required?Q(o.data,this.options.refreshToken.property):!0;this.token.set(O),Y&&(!s||s&&g)&&this.refreshToken.set(Y)}initializeRequestInterceptor(){this.requestHandler.initializeRequestInterceptor(this.options.endpoints.refresh.url)}}class xe extends Qe{logout(){this.$auth.reset();const o={client_id:this.options.clientId+"",returnTo:this.logoutRedirectURI},s=this.options.endpoints.logout+"?"+K(o);window.location.replace(s)}}class mt extends Ot{updateTokens(o,{isRefreshing:s=!1,updateOnRefresh:g=!1}={}){super.updateTokens(o,{isRefreshing:s,updateOnRefresh:g})}}},312:function(Xe,ue,w){"use strict";w.d(ue,"b",function(){return Pt}),w.d(ue,"d",function(){return It}),w.d(ue,"k",function(){return Xt}),w.d(ue,"n",function(){return Tt}),w.d(ue,"o",function(){return wt}),w.d(ue,"p",function(){return Zt}),w.d(ue,"q",function(){return dt}),w.d(ue,"r",function(){return er});var L=w(362),h=w.n(L),i=w(363),p=w.n(i),d=w(364),x=w.n(d),y=w(365),z=w.n(y),$=w(366),j=w.n($),q=w(367),oe=w.n(q),I=w(368),B=w.n(I),K=w(369),U=w.n(K),M=w(370),F=w.n(M),W=w(371),te=w.n(W),Q=w(372),N=w.n(Q),fe=w(373),b=w.n(fe),ve=w(374),re=w.n(ve),me=w(344),v=w.n(me),D=w(345),_=w.n(D),T=w(346),J=w.n(T),V=w(347),X=w.n(V),ce=w(348),le=w.n(ce),Te=w(349),Oe=w.n(Te),he=w(350),_e=w.n(he),we=w(351),Ae=w.n(we),Se=w(352),ye=w.n(Se),ke=w(353),Pe=w.n(ke),Fe=w(354),Qe=w.n(Fe),Me=w(355),Ve=w.n(Me),Ze=w(356),Ot=w.n(Ze),xe=w(357),mt=w.n(xe),S=w(358),o=w.n(S),s=w(359),g=w.n(s),O=w(898),Y=w.n(O),A=w(2);w.d(ue,"a",function(){return A.computed}),w.d(ue,"c",function(){return A.getCurrentInstance}),w.d(ue,"e",function(){return A.nextTick}),w.d(ue,"f",function(){return A.onBeforeUnmount}),w.d(ue,"g",function(){return A.onMounted}),w.d(ue,"h",function(){return A.onUnmounted}),w.d(ue,"i",function(){return A.reactive}),w.d(ue,"j",function(){return A.ref}),w.d(ue,"l",function(){return A.toRef}),w.d(ue,"m",function(){return A.unref}

24),w.d(ue,"s",function(){return A.watch});var ie=w(140),be=w(1373),ze=w.n(be);function De(l){if(!l)throw new Error("You must provide a key. You can have it generated automatically by adding '@nuxtjs/composition-api/dist/babel-plugin' to your Babel plugins.")}const Ce=()=>{const l=Object(A.getCurrentInstance)();if(l)return l.proxy};function Je(l){return l instanceof Function?l():l}let et={};function bt(l){et=Object.assign({},{}),l.context.ssrContext.nuxt.globalRefs=et}const tt=()=>{const l=Ce(),P=l?"ssrRefs":"globalRefs";let R;return{type:P,setData:(H,ne)=>{const pe=R||et;pe[H]=yt(ne)}}},ut=l=>!!l&&typeof l=="object",yt=l=>l&&JSON.parse(JSON.stringify(l))||l,rt=(l,P,R="globalRefs")=>{var G,H,ne,pe;return(pe=(ne=(H=window[ie.a])==null?void 0:H[R])==null?void 0:ne[P])!=null?pe:Je(l)},Le=(l,P)=>{De(P);const{type:R,setData:G}=tt();let H=rt(l,P,R);return Object(A.ref)(H)},vt=(l,P)=>{De(P);const{type:R,setData:G}=tt();return Object(A.shallowRef)(rt(l,P,R))},At=(l,P)=>{De(P);const{type:R,setData:G}=tt(),H=rt(l,P,R);return Promise.resolve(H)},_t=(l,P)=>{var R;De(P);const G=Object(A.isRef)(P)?P:Le(null,P);return G.value===null&&Promise.resolve(l()).then(ne=>G.value=ne),G};function kt(){return{titleTemplate:null,__dangerouslyDisableSanitizers:[],__dangerouslyDisableSanitizersByTagID:{},title:void 0,htmlAttrs:{},headAttrs:{},bodyAttrs:{},base:void 0,meta:[],link:[],style:[],script:[],noscript:[],changed:void 0,afterNavigation:void 0}}const Ee=l=>({head:function(){const R=l.head instanceof Function?l.head.call(this):l.head;if(!this._computedHead)return R;const G=this._computedHead.map(H=>Object(A.isReactive)(H)?Object(A.toRaw)(H):Object(A.isRef)(H)?H.value:H);return ze()({},...G.reverse(),R)}}),ct=l=>{const P=Ce();if(!P)throw new Error("useMeta must be called within a component.");if(!("head"in P.$options))throw new Error("In order to enable `useMeta`, please make sure you include `head: {}` within your component definition, and you are using the `defineComponent` exported from @nuxtjs/composition-api.");const R=()=>P.$meta().refresh();if(!P._computedHead){const G=Object(A.reactive)(kt());P._computedHead=[G],P._metaRefs=Object(A.toRefs)(G),Object(A.watch)(Object.values(P._metaRefs),R,{immediate:!0})}if(l){const G=l instanceof Function?Object(A.computed)(l):Object(A.ref)(l);P._computedHead.push(G),Object(A.watch)(G,R,{immediate:!0})}return P._metaRefs},Pt=l=>"head"in l?{...l,...Ee(l)}:l,Sr=l=>{const P=Ce();if(!P)throw new Error("This must be called within a setup function.");l((P[ie.b]||P.$options).context)},Tt=()=>{const l=Ce();if(!l)throw new Error("This must be called within a setup function.");return{...(l[ie.b]||l.$options).context,route:Object(A.computed)(()=>l.$route),query:Object(A.computed)(()=>l.$route.query),from:Object(A.computed)(()=>(l[ie.b]||l.$options).context.from),params:Object(A.computed)(()=>l.$route.params)}},zt=l=>l,ht=l=>l,Ut=window[ie.a];function ft(l){let P;if(l.message||typeof l=="string")P=l.message||l;else try{P=JSON.stringify(l,null,2)}catch{P=`[${l.constructor.name}]`}return{...l,message:P,statusCode:l.statusCode||l.status||l.response&&l.response.status||500}}function Rt(l,P=""){return function(G=P){return l[G]===void 0&&(l[G]=0),l[G]++}}const lt=new WeakMap,nt=new Map,Ct=l=>{var P,R,G;return(G=(R=(P=l.$vnode)==null?void 0:P.elm)==null?void 0:R.dataset)==null?void 0:G.fetchKey};function $e(l,P){const R=lt.get(l)||[];lt.set(l,[...R,P])}async function Et(){const l=lt.get(this);if(!l)return;this[ie.b].nbFetching++,this.$fetchState.pending=!0,this.$fetchState.error=null,this._hydrated=!1;let P=null;const R=Date.now();try{await Promise.all(l.map(H=>{if(nt.has(H))return nt.get(H);const ne=Promise.resolve(H(this)).finally(()=>nt.delete(H));return nt.set(H,ne),ne}))}catch(H){P=ft(H)}const G=(this._fetchDelay||0)-(Date.now()-R);G>0&&await new Promise(H=>setTimeout(H,G)),this.$fetchState.error=P,this.$fetchState.pending=!1,this.$fetchState.timestamp=Date.now(),this.$nextTick(()=>this[ie.b].nbFetching--)}const jt=l=>{l.$fetchState=l.$fetchState||Object(A.reactive)({error:null,pending:!1,timestamp:0})},Ne=l=>{const P=Ce();if(!P)throw new Error("This must be called within a setup function.");Object(A.onBeforeMount)(()=>{const R=P._setupProxy||P;for(const G in l)try{if(G in R){const H=G;if(R[H]===l[G]||typeof R[H]=="function")continue;if(Object(A.isReactive)(R[H])){for(const ne in R[H])ne in l[G]||delete R[H][ne];Object.assign(R[H],l[G]);continue}}Object(A.set)(R,G,l[G])}catch{}})},ot=l=>{l._fetchKey=Mt(l);const{fetchOnServer:P}=l.$options,R=typeof P=="function"?P.call(l)!==!1:P!==!1,G=l[ie.b];if(!R||G?.isPreview||!G?._pagePayload)return;l._hydrated=!0;const H=G._pagePayload.fetch[l._fetchKey];if(H&&H._error){l.$fetchState.error=H._error;return}Ne(H)};async function Jt(l){if(!l._fetchOnServer)return;jt(l);try{await Et.call(l)}catch(H){l.$fetchState.error=ft(H)}l.$fetchState.pending=!1,l._fetchKey="push"in l.$ssrContext.nuxt.fetch?l.$ssrContext.nuxt.fetch.length:l._fetchKey||l.$ssrContext.fetchCounters[""]++,l.$vnode.data||(l.$vnode.data={});const P=l.$vnode.data.attrs=l.$vnode.data.attrs||{};P["data-fetch-key"]=l._fetchKey;const R=Object.fromEntries(Object.entries(l?._setupProxy||l?._setupState).filter(([H,ne])=>!(ne&&typeof ne=="object"&&"_compiled"in ne||ne instanceof Function||ne instanceof Promise)).map(([H,ne])=>[H,Object(A.isRef)(ne)?ne.value:ne])),G=l.$fetchState.error?{_error:l.$fetchState.error}:JSON.parse(JSON.stringify(R));"push"in l.$ssrContext.nuxt.fetch?l.$ssrContext.nuxt.fetch.push(G):l.$

24ssrContext.nuxt.fetch[l._fetchKey]=G}function Mt(l){const P=l[ie.b];if("_payloadFetchIndex"in P)return P._payloadFetchIndex=P._payloadFetchIndex||0,P._payloadFetchIndex++;const R=l.$options._scopeId||l.$options.name||"",G=Rt(l[ie.b]._fetchCounters,R),H=l.$options;if(typeof H.fetchKey=="function")return H.fetchKey.call(l,G);{const ne=typeof H.fetchKey=="string"?H.fetchKey:R;return ne?ne+":"+G(ne):String(G(ne))}}const wt=l=>{var P;const R=Ce();if(!R)throw new Error("This must be called within a setup function.");$e(R,l),typeof R.$options.fetchOnServer=="function"?R._fetchOnServer=R.$options.fetchOnServer.call(R)!==!1:R._fetchOnServer=R.$options.fetchOnServer!==!1,jt(R),Object(A.onServerPrefetch)(()=>Jt(R));function G(){return{fetch:R.$fetch,fetchState:R.$fetchState,$fetch:R.$fetch,$fetchState:R.$fetchState}}if(R._fetchDelay=typeof R.$options.fetchDelay=="number"?R.$options.fetchDelay:0,R.$fetch=Et.bind(R),Object(A.onBeforeMount)(()=>!R._hydrated&&Et.call(R)),!Ct(R))return ie.c&&ot(R),G();R._hydrated=!0,R._fetchKey=((P=R.$vnode.elm)==null?void 0:P.dataset.fetchKey)||Mt(R);const H=Ut.fetch[R._fetchKey];return H&&H._error?(R.$fetchState.error=H._error,G()):(Ne(H),G())},xr=new Set,Gt=l=>Object(A.ref)(l),qt=(l,P)=>Le(l,P);let Ke;const Yt=l=>{Ke.add(l)},Xt=l=>{const{head:P}=l.app;Object.assign(l.app,Ee({head:P}))},It=l=>{const{setup:P}=l.app;Ke=new Set,l.app.setup=function(...R){let G={};P instanceof Function&&(G=P(...R)||{});for(const H of Ke)G={...G,...H.call(this,...R)||{}};return G}},Be={};function Qt(l,P){return;try{R(G(ie.e,`${l}.json`),P)}catch(H){console.log(H)}}const st=(l,P=Object(A.ref)(""),R)=>{var G,H;const ne=Object(A.computed)(()=>`${R}-${P.value}`),pe=Le(null,ne.value);pe.value&&(Be[ne.value]=pe.value);{const Ue=((H=(G=window[ie.a].$config)==null?void 0:G.app)==null?void 0:H.cdnURL)||ie.d,We=()=>l(P.value,ne.value).then(je=>{Be[ne.value]=je,pe.value=je});Object(A.watch)(ne,je=>{if(je in Be){pe.value=Be[je];return}We()},{immediate:!0,flush:"post"})}return pe},Ie=(l,P)=>()=>{const R=Ce();if(!R)throw new Error("This must be called within a setup function.");return P!==!1?Object(A.computed)(()=>R[l]):R[l]},dt=Ie("$router",!1),Zt=Ie("$route"),er=l=>{const P=Ce();if(!P)throw new Error("This must be called within a setup function.");return P.$store},Or=()=>console.warn("`warn` is not exported by Vue 2.7"),tr=()=>console.warn("`createApp` is not exported by Vue 2.7"),rr=()=>console.warn("`createRef` is not exported by Vue 2.7"),br=()=>console.warn("`defineAsyncComponent` is not exported by Vue 2.7"),nr=()=>console.warn("`isRaw` is not exported by Vue 2.7")},782:function(Xe,ue,w){/*!
25 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
26 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
27 * 
28 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
29 * Unless required by applicable law or agreed to in writing, software
30 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
31 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
32 * 
33 * See the License for the specific language governing permissions and limitations under the License.
34 * 
35 */(function(L,h){Xe.exports=h()})(window,function(){return function(L){var h={};function i(p){if(h[p])return h[p].exports;var d=h[p]={i:p,l:!1,exports:{}};return L[p].call(d.exports,d,d.exports,i),d.l=!0,d.exports}return i.m=L,i.c=h,i.d=function(p,d,x){i.o(p,d)||Object.defineProperty(p,d,{enumerable:!0,get:x})},i.r=function(p){typeof Symbol<"u"&&Symbol.toStringTag&&Object.defineProperty(p,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(p,"__esModule",{value:!0})},i.t=function(p,d){if(1&d&&(p=i(p)),8&d||4&d&&typeof p=="object"&&p&&p.__esModule)return p;var x=Object.create(null);if(i.r(x),Object.defineProperty(x,"default",{enumerable:!0,value:p}),2&d&&typeof p!="string")for(var y in p)i.d(x,y,function(z){return p[z]}.bind(null,y));return x},i.n=function(p){var d=p&&p.__esModule?function(){return p.default}:function(){return p};return i.d(d,"a",d),d},i.o=function(p,d){return Object.prototype.hasOwnProperty.call(p,d)},i.p="",i(i.s=27)}([function(L,h){L.exports=function(i,p){if(!(i instanceof p))throw new TypeError("Cannot call a class as a function")}},function(L,h,i){L.exports=i(14)},function(L,h){L.exports=function(i){if(i===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return i}}

35,function(L,h){function i(p){return L.exports=i=Object.setPrototypeOf?Object.getPrototypeOf:function(d){return d.__proto__||Object.getPrototypeOf(d)},i(p)}L.exports=i},function(L,h){function i(p,d){for(var x=0;x<d.length;x++){var y=d[x];y.enumerable=y.enumerable||!1,y.configurable=!0,"value"in y&&(y.writable=!0),Object.defineProperty(p,y.key,y)}}L.exports=function(p,d,x){return d&&i(p.prototype,d),x&&i(p,x),p}},function(L,h,i){var p=i(9);L.exports=function(d,x){if(typeof x!="function"&&x!==null)throw new TypeError("Super expression must either be null or a function");d.prototype=Object.create(x&&x.prototype,{constructor:{value:d,writable:!0,configurable:!0}}),x&&p(d,x)}},function(L,h,i){var p=i(7),d=i(2);L.exports=function(x,y){return!y||p(y)!=="object"&&typeof y!="function"?d(x):y}},function(L,h){function i(p){return typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?L.exports=i=function(d){return typeof d}:L.exports=i=function(d){return d&&typeof Symbol=="function"&&d.constructor===Symbol&&d!==Symbol.prototype?"symbol":typeof d},i(p)}L.exports=i},function(L,h){L.exports=function(i,p,d){return p in i?Object.defineProperty(i,p,{value:d,enumerable:!0,configurable:!0,writable:!0}):i[p]=d,i}},function(L,h){function i(p,d){return L.exports=i=Object.setPrototypeOf||function(x,y){return x.__proto__=y,x},i(p,d)}L.exports=i},function(L,h,i){var p=i(3),d=i(9),x=i(15),y=i(16);function z($){var j=typeof Map=="function"?new Map:void 0;return L.exports=z=function(q){if(q===null||!x(q))return q;if(typeof q!="function")throw new TypeError("Super expression must either be null or a function");if(j!==void 0){if(j.has(q))return j.get(q);j.set(q,oe)}function oe(){return y(q,arguments,p(this).constructor)}return oe.prototype=Object.create(q.prototype,{constructor:{value:oe,enumerable:!1,writable:!0,configurable:!0}}),d(oe,q)},z($)}L.exports=z},function(L,h,i){"use strict";(function(p){var d=i(7),x=i.n(d),y=i(12),z=i.n(y);h.a=function($,j,q){var oe=q.data,I=q.headers||{};(I["Content-Type"]||I["content-type"]||"")==="application/json"&&oe&&typeof oe!="string"&&(oe=JSON.stringify(oe));var B=(p.fetch||z.a)(j,{method:$,headers:q.headers,body:oe,credentials:q.withCredentials?"include":"omit"});return B.finally||(B=Promise.resolve(B)),B.then(function(K){var U=!K.ok,M=K.status;/*!
36 * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.
37 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
38 *
39 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
40 * Unless required by applicable law or agreed to in writing, software
41 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
42 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
43 *
44 * See the License for the specific language governing permissions and limitations under the License.
45 */return function(F){return F.headers.get("Content-Type")&&F.headers.get("Content-Type").toLowerCase().indexOf("application/json")>=0?F.json().catch(function(W){return{error:W,errorSummary:"Could not parse server response"}}):F.text()}(K).then(function(F){return function(W,te){var Q=x()(te)==="object",N={responseText:Q?JSON.stringify(te):te,status:W};return Q&&(N.responseType="json",N.responseJSON=te),N}(M,F)}).then(function(F){if(U)throw F;return F})})}}).call(this,i(18))},function(L,h){var i=function(p){function d(){this.fetch=!1,this.DOMException=p.DOMException}return d.prototype=p,new d}(typeof self<"u"?self:this);(function(p){(function(d){var x="URLSearchParams"in p,y="Symbol"in p&&"iterator"in Symbol,z="FileReader"in p&&"Blob"in p&&function(){try{return new Blob,!0}catch{return!1}}(),$="FormData"in p,j="ArrayBuffer"in p;if(j)var q=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],oe=ArrayBuffer.isView||function(v){return v&&q.indexOf(Object.prototype.toString.call(v))>-1};function I(v){if(typeof v!="string"&&(v=String(v)),/[^a-z0-9\-#$%&'*+.^_`|~]/i.test(v))throw new TypeError("Invalid character in header field name");return v.toLowerCase()}function B(v){return typeof v!="string"&&(v=String(v)),v}function K(v){var D={next:function(){var _=v.shift();return{done:_===void 0,value:_}}};return y&&(D[Symbol.iterator]=function(){return D}),D}function U(v){this.map={},v instanceof U?v.forEach(function(D,_){this.append(_,D)},this):Array.isArray(v)?v.forEach(function(D){this.append(D[0],D[1])},this):v&&Object.getOwnPropertyNames(v).forEach(function(D){this.append(D,v[D])},this)}function M(v){if(v.bodyUsed)return Promise.reject(new TypeError("Already read"));v.bodyUsed=!0}function F(v){return new Promise(function(D,_){v.onload=function(){D(v.result)},v.onerror=function(){_(v.error)}})}function W(v){var D=new FileReader,_=F(D);return D.readAsArrayBuffer(v),_}function te(v){if(v.slice)return v.slice(0);var D=new Uint8Array(v.byteLength);return D.set(new Uint8Array(v)),D.buffer}function Q(){return this.bodyUsed=!1,this._initBody=function(v){var D;this._bodyInit=v,v?typeof v=="string"?this._bodyText=v:z&&Blob.prototype.isPrototypeOf(v)?this._bodyBlob=v:$&&FormData.prototype.isPrototypeOf(v)?this._bodyFormData=v:x&&URLSearchParams.prototype.isPrototypeOf(v)?this._bodyText=v.toString():j&&z&&(D=v)&&DataView.prototype.isPrototypeOf(D)?(this._bodyArrayBuffer=te(v.buffer),this._bodyInit=new Blob([this._bodyArrayBuffer])):j&&(ArrayBuffer.prototype.isPrototypeOf(v)||oe(v))?this._bodyArrayBuffer=te(v):this._bodyText=v=Object.prototype.toString.call(v):this._bodyText="",this.headers.get("content-type")||(typeof v=="string"?this.headers.set("content-type","text/plain;charset=UTF-8"):this._bodyBlob&&this._bodyBlob.type?this.headers.set("content-type",this._bodyBlob.type):x&&URLSearchParams.prototype.isPrototypeOf(v)&&this.headers.set("content-type","application/x-www-form-urlencoded;charset=UTF-8"))},z&&(this.blob=function(){var v=M(this);if(v)return v;if(this._bodyBlob)return Promise.resolve(this._bodyBlob);if(this._bodyArrayBuffer)return Promise.resolve(new Blob([this._bodyArrayBuffer]));if(this._bodyFormData)throw new Error("could not read FormData body as blob");return Promise.resolve(new Blob([this._bodyText]))},this.arrayBuffer=function(){return this._bodyArrayBuffer?M(this)||Promise.resolve(this._bodyArrayBuffer):this.blob().then(W)}),this.text=function(){var v,D,_,T=M(this);if(T)return T;if(this._bodyBlob)return v=this._bodyBlob,D=new FileReader,_=F(D),D.readAsText(v),_;if(this._bodyArrayBuffer)return Promise.resolve(function(J){for(var V=new Uint8Array(J),X=new Array(V.length),ce=0;ce<V.length;ce++)X[ce]=String.fromCharCode(V[ce]);return X.join("")}(this._bodyArrayBuffer));if(this._bodyFormData)throw new Error("could not read FormData body as text");return Promise.resolve(this._bodyText)},$&&(this.formData=function(){return this.text().then(b)}),this.json=function(){return this.text().then(JSON.parse)},this}U.prototype.append=function(v,D){v=I(v),D=B(D);var _=this.map[v];this.map[v]=_?_+", "+D:D},U.prototype.delete=function(v){delete this.map[I(v)]},U.prototype.get=function(v){return v=I(v),this.has(v)?this.map[v]:null},U.prototype.has=function(v){return this.map.hasOwnProperty(I(v))},U.prototype.set=function(v,D){this.map[I(v)]=B(D)},U.prototype.forEach=function(v,D){for(var _ in this.map)this.map.hasOwnProperty(_)&&v.call(D,this.map[_],_,this)},U.prototype.keys=function(){var v=[];return this.forEach(function(D,_){v.push(_)}),K(v)},U.prototype.values=function(){var v=[];return this.forEach(function(D){v.push(D)}),K(v)},U.prototype.entries=function(){var v=[];return this.forEach(function(D,_){v.push([_,D])}),K(v)},y&&(U.prototype[Symbol.iterator]=U.prototype.entries);

45var N=["DELETE","GET","HEAD","OPTIONS","POST","PUT"];function fe(v,D){var _,T,J=(D=D||{}).body;if(v instanceof fe){if(v.bodyUsed)throw new TypeError("Already read");this.url=v.url,this.credentials=v.credentials,D.headers||(this.headers=new U(v.headers)),this.method=v.method,this.mode=v.mode,this.signal=v.signal,J||v._bodyInit==null||(J=v._bodyInit,v.bodyUsed=!0)}else this.url=String(v);if(this.credentials=D.credentials||this.credentials||"same-origin",!D.headers&&this.headers||(this.headers=new U(D.headers)),this.method=(_=D.method||this.method||"GET",T=_.toUpperCase(),N.indexOf(T)>-1?T:_),this.mode=D.mode||this.mode||null,this.signal=D.signal||this.signal,this.referrer=null,(this.method==="GET"||this.method==="HEAD")&&J)throw new TypeError("Body not allowed for GET or HEAD requests");this._initBody(J)}function b(v){var D=new FormData;return v.trim().split("&").forEach(function(_){if(_){var T=_.split("="),J=T.shift().replace(/\+/g," "),V=T.join("=").replace(/\+/g," ");D.append(decodeURIComponent(J),decodeURIComponent(V))}}),D}function ve(v,D){D||(D={}),this.type="default",this.status=D.status===void 0?200:D.status,this.ok=this.status>=200&&this.status<300,this.statusText="statusText"in D?D.statusText:"OK",this.headers=new U(D.headers),this.url=D.url||"",this._initBody(v)}fe.prototype.clone=function(){return new fe(this,{body:this._bodyInit})},Q.call(fe.prototype),Q.call(ve.prototype),ve.prototype.clone=function(){return new ve(this._bodyInit,{status:this.status,statusText:this.statusText,headers:new U(this.headers),url:this.url})},ve.error=function(){var v=new ve(null,{status:0,statusText:""});return v.type="error",v};var re=[301,302,303,307,308];ve.redirect=function(v,D){if(re.indexOf(D)===-1)throw new RangeError("Invalid status code");return new ve(null,{status:D,headers:{location:v}})},d.DOMException=p.DOMException;try{new d.DOMException}catch{d.DOMException=function(D,_){this.message=D,this.name=_;var T=Error(D);this.stack=T.stack},d.DOMException.prototype=Object.create(Error.prototype),d.DOMException.prototype.constructor=d.DOMException}function me(v,D){return new Promise(function(_,T){var J=new fe(v,D);if(J.signal&&J.signal.aborted)return T(new d.DOMException("Aborted","AbortError"));var V=new XMLHttpRequest;function X(){V.abort()}V.onload=function(){var ce,le,Te={status:V.status,statusText:V.statusText,headers:(ce=V.getAllResponseHeaders()||"",le=new U,ce.replace(/\r?\n[\t ]+/g," ").split(/\r?\n/).forEach(function(he){var _e=he.split(":"),we=_e.shift().trim();if(we){var Ae=_e.join(":").trim();le.append(we,Ae)}}),le)};Te.url="responseURL"in V?V.responseURL:Te.headers.get("X-Request-URL");var Oe="response"in V?V.response:V.responseText;_(new ve(Oe,Te))},V.onerror=function(){T(new TypeError("Network request failed"))},V.ontimeout=function(){T(new TypeError("Network request failed"))},V.onabort=function(){T(new d.DOMException("Aborted","AbortError"))},V.open(J.method,J.url,!0),J.credentials==="include"?V.withCredentials=!0:J.credentials==="omit"&&(V.withCredentials=!1),"responseType"in V&&z&&(V.responseType="blob"),J.headers.forEach(function(ce,le){V.setRequestHeader(le,ce)}),J.signal&&(J.signal.addEventListener("abort",X),V.onreadystatechange=function(){V.readyState===4&&J.signal.removeEventListener("abort",X)}),V.send(J._bodyInit===void 0?null:J._bodyInit)})}me.polyfill=!0,p.fetch||(p.fetch=me,p.Headers=U,p.Request=fe,p.Response=ve),d.Headers=U,d.Request=fe,d.Response=ve,d.fetch=me})({})})(i),delete i.fetch.polyfill,(h=i.fetch).default=i.fetch,h.fetch=i.fetch,h.Headers=i.Headers,h.Request=i.Request,h.Response=i.Response,L.exports=h},function(L,h,i){var p=i(20),d=i(21),x=i(22),y=i(24);L.exports=function(z,$){return p(z)||d(z,$)||x(z,$)||y()}},function(L,h,i){var p=function(d){"use strict";var x=Object.prototype,y=x.hasOwnProperty,z=typeof Symbol=="function"?Symbol:{},$=z.iterator||"@@iterator",j=z.asyncIterator||"@@asyncIterator",q=z.toStringTag||"@@toStringTag";function oe(_,T,J,V){var X=T&&T.prototype instanceof K?T:K,ce=Object.create(X.prototype),le=new me(V||[]);return ce._invoke=function(Te,Oe,he){var _e="suspendedStart";return function(we,Ae){if(_e==="executing")throw new Error("Generator is already running");if(_e==="completed"){if(we==="throw")throw Ae;return D()}for(he.method=we,he.arg=Ae;;){var Se=he.delegate;if(Se){var ye=b(Se,he);if(ye){if(ye===B)continue;return ye}}if(he.method==="next")he.sent=he._sent=he.arg;else if(he.method==="throw"){if(_e==="suspendedStart")throw _e="completed",he.arg;he.dispatchException(he.arg)}else he.method==="return"&&he.abrupt("return",he.arg);_e="executing";var ke=I(Te,Oe,he);if(ke.type==="normal"){if(_e=he.done?"completed":"suspendedYield",ke.arg===B)continue;return{value:ke.arg,done:he.done}}

45ke.type==="throw"&&(_e="completed",he.method="throw",he.arg=ke.arg)}}}(_,J,le),ce}function I(_,T,J){try{return{type:"normal",arg:_.call(T,J)}}catch(V){return{type:"throw",arg:V}}}d.wrap=oe;var B={};function K(){}function U(){}function M(){}var F={};F[$]=function(){return this};var W=Object.getPrototypeOf,te=W&&W(W(v([])));te&&te!==x&&y.call(te,$)&&(F=te);var Q=M.prototype=K.prototype=Object.create(F);function N(_){["next","throw","return"].forEach(function(T){_[T]=function(J){return this._invoke(T,J)}})}function fe(_,T){var J;this._invoke=function(V,X){function ce(){return new T(function(le,Te){(function Oe(he,_e,we,Ae){var Se=I(_[he],_,_e);if(Se.type!=="throw"){var ye=Se.arg,ke=ye.value;return ke&&typeof ke=="object"&&y.call(ke,"__await")?T.resolve(ke.__await).then(function(Pe){Oe("next",Pe,we,Ae)},function(Pe){Oe("throw",Pe,we,Ae)}):T.resolve(ke).then(function(Pe){ye.value=Pe,we(ye)},function(Pe){return Oe("throw",Pe,we,Ae)})}Ae(Se.arg)})(V,X,le,Te)})}return J=J?J.then(ce,ce):ce()}}function b(_,T){var J=_.iterator[T.method];if(J===void 0){if(T.delegate=null,T.method==="throw"){if(_.iterator.return&&(T.method="return",T.arg=void 0,b(_,T),T.method==="throw"))return B;T.method="throw",T.arg=new TypeError("The iterator does not provide a 'throw' method")}return B}var V=I(J,_.iterator,T.arg);if(V.type==="throw")return T.method="throw",T.arg=V.arg,T.delegate=null,B;var X=V.arg;return X?X.done?(T[_.resultName]=X.value,T.next=_.nextLoc,T.method!=="return"&&(T.method="next",T.arg=void 0),T.delegate=null,B):X:(T.method="throw",T.arg=new TypeError("iterator result is not an object"),T.delegate=null,B)}function ve(_){var T={tryLoc:_[0]};1 in _&&(T.catchLoc=_[1]),2 in _&&(T.finallyLoc=_[2],T.afterLoc=_[3]),this.tryEntries.push(T)}function re(_){var T=_.completion||{};T.type="normal",delete T.arg,_.completion=T}function me(_){this.tryEntries=[{tryLoc:"root"}],_.forEach(ve,this),this.reset(!0)}function v(_){if(_){var T=_[$];if(T)return T.call(_);if(typeof _.next=="function")return _;if(!isNaN(_.length)){var J=-1,V=function X(){for(;++J<_.length;)if(y.call(_,J))return X.value=_[J],X.done=!1,X;return X.value=void 0,X.done=!0,X};return V.next=V}}return{next:D}}function D(){return{value:void 0,done:!0}}return U.prototype=Q.constructor=M,M.constructor=U,M[q]=U.displayName="GeneratorFunction",d.isGeneratorFunction=function(_){var T=typeof _=="function"&&_.constructor;return!!T&&(T===U||(T.displayName||T.name)==="GeneratorFunction")},d.mark=function(_){return Object.setPrototypeOf?Object.setPrototypeOf(_,M):(_.__proto__=M,q in _||(_[q]="GeneratorFunction")),_.prototype=Object.create(Q),_},d.awrap=function(_){return{__await:_}},N(fe.prototype),fe.prototype[j]=function(){return this},d.AsyncIterator=fe,d.async=function(_,T,J,V,X){X===void 0&&(X=Promise);var ce=new fe(oe(_,T,J,V),X);return d.isGeneratorFunction(T)?ce:ce.next().then(function(le){return le.done?le.value:ce.next()})},N(Q),Q[q]="Generator",Q[$]=function(){return this},Q.toString=function(){return"[object Generator]"},d.keys=function(_){var T=[];for(var J in _)T.push(J);return T.reverse(),function V(){for(;T.length;){var X=T.pop();if(X in _)return V.value=X,V.done=!1,V}return V.done=!0,V}},d.values=v,me.prototype={constructor:me,reset:function(_){if(this.prev=0,this.next=0,this.sent=this._sent=void 0,this.done=!1,this.delegate=null,this.method="next",this.arg=void 0,this.tryEntries.forEach(re),!_)for(var T in this)T.charAt(0)==="t"&&y.call(this,T)&&!isNaN(+T.slice(1))&&(this[T]=void 0)},stop:function(){this.done=!0;var _=this.tryEntries[0].completion;if(_.type==="throw")throw _.arg;return this.rval},dispatchException:function(_){if(this.done)throw _;var T=this;function J(Oe,he){return ce.type="throw",ce.arg=_,T.next=Oe,he&&(T.method="next",T.arg=void 0),!!he}for(var V=this.tryEntries.length-1;V>=0;--V){var X=this.tryEntries[V],ce=X.completion;if(X.tryLoc==="root")return J("end");if(X.tryLoc<=this.prev){var le=y.call(X,"catchLoc"),Te=y.call(X,"finallyLoc");if(le&&Te){if(this.prev<X.catchLoc)return J(X.catchLoc,!0);if(this.prev<X.finallyLoc)return J(X.finallyLoc)}else if(le){if(this.prev<X.catchLoc)return J(X.catchLoc,!0)}else{if(!Te)throw new Error("try statement without catch or finally");if(this.prev<X.finallyLoc)return J(X.finallyLoc)}}}},abrupt:function(_,T){for(var J=this.tryEntries.length-1;J>=0;--J){var V=this.tryEntries[J];if(V.tryLoc<=this.prev&&y.call(V,"finallyLoc")&&this.prev<V.finallyLoc){var X=V;break}}

45X&&(_==="break"||_==="continue")&&X.tryLoc<=T&&T<=X.finallyLoc&&(X=null);var ce=X?X.completion:{};return ce.type=_,ce.arg=T,X?(this.method="next",this.next=X.finallyLoc,B):this.complete(ce)},complete:function(_,T){if(_.type==="throw")throw _.arg;return _.type==="break"||_.type==="continue"?this.next=_.arg:_.type==="return"?(this.rval=this.arg=_.arg,this.method="return",this.next="end"):_.type==="normal"&&T&&(this.next=T),B},finish:function(_){for(var T=this.tryEntries.length-1;T>=0;--T){var J=this.tryEntries[T];if(J.finallyLoc===_)return this.complete(J.completion,J.afterLoc),re(J),B}},catch:function(_){for(var T=this.tryEntries.length-1;T>=0;--T){var J=this.tryEntries[T];if(J.tryLoc===_){var V=J.completion;if(V.type==="throw"){var X=V.arg;re(J)}return X}}throw new Error("illegal catch attempt")},delegateYield:function(_,T,J){return this.delegate={iterator:v(_),resultName:T,nextLoc:J},this.method==="next"&&(this.arg=void 0),B}},d}(L.exports);try{regeneratorRuntime=p}catch{Function("r","regeneratorRuntime = r")(p)}},function(L,h){L.exports=function(i){return Function.toString.call(i).indexOf("[native code]")!==-1}},function(L,h,i){var p=i(9),d=i(17);function x(y,z,$){return d()?L.exports=x=Reflect.construct:L.exports=x=function(j,q,oe){var I=[null];I.push.apply(I,q);var B=new(Function.bind.apply(j,I));return oe&&p(B,oe.prototype),B},x.apply(null,arguments)}L.exports=x},function(L,h){L.exports=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}},function(L,h){var i;i=function(){return this}();try{i=i||new Function("return this")()}catch{typeof window=="object"&&(i=window)}L.exports=i},function(L,h,i){var p,d;/*!
46 * JavaScript Cookie v2.2.1
47 * https://github.com/js-cookie/js-cookie
48 *
49 * Copyright 2006, 2015 Klaus Hartl & Fagner Brack
50 * Released under the MIT license
51 */(function(x){if((d=typeof(p=x)=="function"?p.call(h,i,h,L):p)===void 0||(L.exports=d),L.exports=x(),!1)var y,z})(function(){function x(){for(var z=0,$={};z<arguments.length;z++){var j=arguments[z];for(var q in j)$[q]=j[q]}return $}function y(z){return z.replace(/(%[0-9A-Z]{2}

51)+/g,decodeURIComponent)}return function z($){function j(){}function q(I,B,K){if(typeof document<"u"){typeof(K=x({path:"/"},j.defaults,K)).expires=="number"&&(K.expires=new Date(1*new Date+864e5*K.expires)),K.expires=K.expires?K.expires.toUTCString():"";try{var U=JSON.stringify(B);/^[\{\[]/.test(U)&&(B=U)}catch{}B=$.write?$.write(B,I):encodeURIComponent(String(B)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),I=encodeURIComponent(String(I)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[\(\)]/g,escape);var M="";for(var F in K)K[F]&&(M+="; "+F,K[F]!==!0&&(M+="="+K[F].split(";")[0]));return document.cookie=I+"="+B+M}}function oe(I,B){if(typeof document<"u"){for(var K={},U=document.cookie?document.cookie.split("; "):[],M=0;M<U.length;M++){var F=U[M].split("="),W=F.slice(1).join("=");B||W.charAt(0)!=='"'||(W=W.slice(1,-1));try{var te=y(F[0]);if(W=($.read||$)(W,te)||y(W),B)try{W=JSON.parse(W)}catch{}if(K[te]=W,I===te)break}catch{}}return I?K[I]:K}}return j.set=q,j.get=function(I){return oe(I,!1)},j.getJSON=function(I){return oe(I,!0)},j.remove=function(I,B){q(I,"",x(B,{expires:-1}))},j.defaults={},j.withConverter=z,j}(function(){})})},function(L,h){L.exports=function(i){if(Array.isArray(i))return i}},function(L,h){L.exports=function(i,p){if(typeof Symbol<"u"&&Symbol.iterator in Object(i)){var d=[],x=!0,y=!1,z=void 0;try{for(var $,j=i[Symbol.iterator]();!(x=($=j.next()).done)&&(d.push($.value),!p||d.length!==p);x=!0);}catch(q){y=!0,z=q}finally{try{x||j.return==null||j.return()}finally{if(y)throw z}}return d}}},function(L,h,i){var p=i(23);L.exports=function(d,x){if(d){if(typeof d=="string")return p(d,x);var y=Object.prototype.toString.call(d).slice(8,-1);return y==="Object"&&d.constructor&&(y=d.constructor.name),y==="Map"||y==="Set"?Array.from(d):y==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(y)?p(d,x):void 0}}},function(L,h){L.exports=function(i,p){(p==null||p>i.length)&&(p=i.length);for(var d=0,x=new Array(p);d<p;d++)x[d]=i[d];return x}},function(L,h){L.exports=function(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
52In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}},function(L,h,i){"use strict";var p=i(0),d=i(4),x=i(5),y=i(6),z=i(3);function $(B,K){var U;if(typeof Symbol>"u"||B[Symbol.iterator]==null){if(Array.isArray(B)||(U=function(N,fe){if(N){if(typeof N=="string")return j(N,fe);var b=Object.prototype.toString.call(N).slice(8,-1);if(b==="Object"&&N.constructor&&(b=N.constructor.name),b==="Map"||b==="Set")return Array.from(N);if(b==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(b))return j(N,fe)}}(B))||K&&B&&typeof B.length=="number"){U&&(B=U);var M=0,F=function(){};return{s:F,n:function(){return M>=B.length?{done:!0}:{done:!1,value:B[M++]}},e:function(N){throw N},f:F}}throw new TypeError(`Invalid attempt to iterate non-iterable instance.
53In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var W,te=!0,Q=!1;return{s:function(){U=B[Symbol.iterator]()},n:function(){var N=U.next();return te=N.done,N},e:function(N){Q=!0,W=N},f:function(){try{te||U.return==null||U.return()}finally{if(Q)throw W}}}}function j(B,K){(K==null||K>B.length)&&(K=B.length);for(var U=0,M=new Array(K);U<K;U++)M[U]=B[U];return M}function q(B){var K=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var U,M=z(B);if(K){var F=z(this).constructor;U=Reflect.construct(M,arguments,F)}else U=M.apply(this,arguments);return y(this,U)}}var oe=function(B){x(U,B);var K=q(U);function U(M){var F;return p(this,U),(F=K.call(this,M||"Promise was canceled")).name="CancelError",F}return d(U,[{key:"isCanceled",get:function(){return!0}}]),U}(i(10)(Error)),I=function(){function B(K){var U=this;p(this,B),this._cancelHandlers=[],this._isPending=!0,this._isCanceled=!1,this._rejectOnCancel=!0,this._promise=new Promise(function(M,F){U._reject=F;var W=function(te){if(!U._isPending)throw new Error("The `onCancel` handler was attached after the promise settled.");U._cancelHandlers.push(te)};return Object.defineProperties(W,{shouldReject:{get:function(){return U._rejectOnCancel},set:function(te){U._rejectOnCancel=te}}}),K(function(te){U._isPending=!1,M(te)},function(te){U._isPending=!1,F(te)},W)})}return d(B,null,[{key:"fn",value:function(K){return function(){for(var U=arguments.length,M=new Array(U),F=0;F<U;F++)M[F]=arguments[F];return new B(function(W,te,Q){M.push(Q),K.apply(void 0,M).then(W,te)})}}}]),d(B,[{key:"then",value:function(K,U){return this._promise.then(K,U)}},{key:"catch",value:function(K){return this._promise.catch(K)}},{key:"finally",value:function(K){return this._promise.finally(K)}},{key:"cancel",value:function(K){if(this._isPending&&!this._isCanceled){if(this._cancelHandlers.length>0)try{var U,M=$(this._cancelHandlers);try{for(M.s();!(U=M.n()).done;)(0,U.value)()}catch(F){M.e(F)}finally{M.f()}}catch(F){this._reject(F)}this._isCanceled=!0,this._rejectOnCancel&&this._reject(new oe(K))}}},{key:"isCanceled",get:function(){return this._isCanceled}}]),B}();Object.setPrototypeOf(I.prototype,Promise.prototype),L.exports=I,L.exports.CancelError=oe},function(L,h){function i(){}i.prototype={on:function(p,d,x){var y=this.e||(this.e={});return(y[p]||(y[p]=[])).push({fn:d,ctx:x}),this},once:function(p,d,x){var y=this;function z(){y.off(p,z),d.apply(x,arguments)}return z._=d,this.on(p,z,x)}

53,emit:function(p){for(var d=[].slice.call(arguments,1),x=((this.e||(this.e={}))[p]||[]).slice(),y=0,z=x.length;y<z;y++)x[y].fn.apply(x[y].ctx,d);return this},off:function(p,d){var x=this.e||(this.e={}),y=x[p],z=[];if(y&&d)for(var $=0,j=y.length;$<j;$++)y[$].fn!==d&&y[$].fn._!==d&&z.push(y[$]);return z.length?x[p]=z:delete x[p],this}},L.exports=i},function(L,h,i){"use strict";i.r(h),i.d(h,"OktaAuth",function(){return $n}),i.d(h,"STATE_TOKEN_KEY_NAME",function(){return Y}),i.d(h,"DEFAULT_POLLING_DELAY",function(){return A}),i.d(h,"DEFAULT_MAX_CLOCK_SKEW",function(){return ie}),i.d(h,"DEFAULT_CACHE_DURATION",function(){return be}),i.d(h,"REDIRECT_OAUTH_PARAMS_NAME",function(){return ze}),i.d(h,"REDIRECT_STATE_COOKIE_NAME",function(){return De}),i.d(h,"REDIRECT_NONCE_COOKIE_NAME",function(){return Ce}),i.d(h,"TOKEN_STORAGE_NAME",function(){return Je}),i.d(h,"CACHE_STORAGE_NAME",function(){return et}),i.d(h,"PKCE_STORAGE_NAME",function(){return bt}),i.d(h,"TRANSACTION_STORAGE_NAME",function(){return tt}),i.d(h,"ACCESS_TOKEN_STORAGE_KEY",function(){return ut}),i.d(h,"ID_TOKEN_STORAGE_KEY",function(){return yt}),i.d(h,"REFRESH_TOKEN_STORAGE_KEY",function(){return rt}),i.d(h,"REFERRER_PATH_STORAGE_KEY",function(){return Le}),i.d(h,"MIN_VERIFIER_LENGTH",function(){return vt}),i.d(h,"MAX_VERIFIER_LENGTH",function(){return At}),i.d(h,"DEFAULT_CODE_CHALLENGE_METHOD",function(){return _t}),i.d(h,"isOAuthTransactionMeta",function(){return Ke}),i.d(h,"isPKCETransactionMeta",function(){return Yt}),i.d(h,"isIdxTransactionMeta",function(){return Xt}),i.d(h,"isCustomAuthTransactionMeta",function(){return It}),i.d(h,"isTransactionMeta",function(){return Be}),i.d(h,"isToken",function(){return Qt}),i.d(h,"isAccessToken",function(){return st}),i.d(h,"isIDToken",function(){return Ie}),i.d(h,"isRefreshToken",function(){return dt}),i.d(h,"transactionStatus",function(){return Rt}),i.d(h,"resumeTransaction",function(){return lt}),i.d(h,"transactionExists",function(){return Ct}),i.d(h,"postToTransaction",function(){return $e}),i.d(h,"introspect",function(){return nt}),i.d(h,"AuthTransaction",function(){return ht}),i.d(h,"getPollFn",function(){return zt}),i.d(h,"TransactionState",function(){return Et}),i.d(h,"addStateToken",function(){return ct}),i.d(h,"getStateToken",function(){return Pt}),i.d(h,"AuthApiError",function(){return O}),i.d(h,"AuthPollStopError",function(){return Tt}),i.d(h,"AuthSdkError",function(){return b}),i.d(h,"OAuthError",function(){return wt}),i.d(h,"convertTokenParamsToOAuthParams",function(){return Dt}),i.d(h,"buildAuthorizeParams",function(){return or}),i.d(h,"postToTokenEndpoint",function(){return Ar}),i.d(h,"postRefreshToken",function(){return Pr}),i.d(h,"getWellKnown",function(){return Lt}),i.d(h,"getKey",function(){return Ur}),i.d(h,"addListener",function(){return sr}),i.d(h,"removeListener",function(){return ir}),i.d(h,"loadFrame",function(){return Rr}),i.d(h,"loadPopup",function(){return Cr}),i.d(h,"addPostMessageListener",function(){return ar}),i.d(h,"getDefaultTokenParams",function(){return St}),i.d(h,"isInteractionRequiredError",function(){return $t}),i.d(h,"isAuthorizationCodeError",function(){return dn}),i.d(h,"hasTokensInHash",function(){return Ir}),i.d(h,"hasAuthorizationCode",function(){return Dr}),i.d(h,"hasInteractionCode",function(){return Lr}),i.d(h,"hasErrorInUrl",function(){return $r}),i.d(h,"isRedirectUri",function(){return Nr}),i.d(h,"isCodeFlow",function(){return ur}),i.d(h,"getHashOrSearch",function(){return cr}),i.d(h,"isLoginRedirect",function(){return Nt}),i.d(h,"isInteractionRequired",function(){return Kr}),i.d(h,"generateState",function(){return jr}),i.d(h,"generateNonce",function(){return Mr}),i.d(h,"getOAuthUrls",function(){return qe}),i.d(h,"pkce",function(){return Ne}),i.d(h,"prepareTokenParams",function(){return Kt}),i.d(h,"urlParamsToObject",function(){return Br}),i.d(h,"validateClaims",function(){return Wr}),i.d(h,"decodeToken",function(){return hr}),i.d(h,"revokeToken",function(){return Hr}),i.d(h,"renewToken",function(){return Fr}),i.d(h,"renewTokensWithRefresh",function(){return pr}),i.d(h,"renewTokens",function(){return Vr}),i.d(h,"verifyToken",function(){return lr}),i.d(h,"getUserInfo",function(){return zr}),i.d(h,"handleOAuthResponse",function(){return pt}),i.d(h,"exchangeCodeForTokens",function(){return fr}),i.d(h,"getToken",function(){return dr}),i.d(h,"getWithoutPrompt",function(){return Bt}),i.d(h,"getWithPopup",function(){return Jr}),i.d(h,"getWithRedirect",function(){return Gr}),i.d(h,"parseFromUrl",function(){return qr}),i.d(h,"EVENT_EXPIRED",function(){return mr}),i.d(h,"EVENT_RENEWED",function(){return Yr}),i.d(h,"EVENT_ADDED",function(){return Wt}),i.d(h,"EVENT_REMOVED",function(){return Ht}),i.d(h,"EVENT_ERROR",function(){return Xr}),i.d(h,"TokenManager",function(){return an}),i.d(h,"stringToBase64Url",function(){return re}),i.d(h,"base64ToBase64Url",function(){return me}),i.d(h,"base64UrlToBase64",function(){return v}),i.d(h,"base64UrlToString",function(){return D}),i.d(h,"stringToBuffer",function(){return _}),i.d(h,"base64UrlDecode",function(){return T}),i.d(h,"bind",function(){return J}),i.d(h,"isAbsoluteUrl",function(){return V}),i.d(h,"toAbsoluteUrl",function(){return X}),i.d(h,"toRelativeUrl",function(){return ce}),i.d(h,"isString",function(){return le}),i.d(h,"isObject",function(){return Te}),i.d(h,"isNumber",function(){return Oe}),i.d(h,"isoToUTCString",function(){return he}),i.d(h,"toQueryString",function(){return _e}),i.d(h,"genRandomString",function(){return we}),i.d(h,"extend",function(){return Ae}),i.d(h,"removeNils",function(){return Se}),i.d(h,"clone",function(){return ye}),i.d(h,"omit",function(){return ke}),i.d(h,"find",function(){return Pe}),i.d(h,"getLink",function(){return Fe}),i.d(h,"getNativeConsole",function(){return Qe}),i.d(h,"getConsole",function(){return Me}),i.d(h,"warn",function(){return Ve}),i.d(h,"deprecate",function(){return Ze}),i.d(h,"deprecateWrap",function(){return Ot}),i.d(h,"removeTrailingSlash",function(){return xe}),i.d(h,"isIE11OrLess",function(){return mt}),i.d(h,"isFunction",function(){return S}),i.d(h,"delay",function(){return o}

53),i.d(h,"isPromise",function(){return s});var p={};i.r(p),i.d(p,"STATE_TOKEN_KEY_NAME",function(){return Y}),i.d(p,"DEFAULT_POLLING_DELAY",function(){return A}),i.d(p,"DEFAULT_MAX_CLOCK_SKEW",function(){return ie}),i.d(p,"DEFAULT_CACHE_DURATION",function(){return be}),i.d(p,"REDIRECT_OAUTH_PARAMS_NAME",function(){return ze}),i.d(p,"REDIRECT_STATE_COOKIE_NAME",function(){return De}),i.d(p,"REDIRECT_NONCE_COOKIE_NAME",function(){return Ce}),i.d(p,"TOKEN_STORAGE_NAME",function(){return Je}),i.d(p,"CACHE_STORAGE_NAME",function(){return et}),i.d(p,"PKCE_STORAGE_NAME",function(){return bt}),i.d(p,"TRANSACTION_STORAGE_NAME",function(){return tt}),i.d(p,"ACCESS_TOKEN_STORAGE_KEY",function(){return ut}),i.d(p,"ID_TOKEN_STORAGE_KEY",function(){return yt}),i.d(p,"REFRESH_TOKEN_STORAGE_KEY",function(){return rt}),i.d(p,"REFERRER_PATH_STORAGE_KEY",function(){return Le}),i.d(p,"MIN_VERIFIER_LENGTH",function(){return vt}),i.d(p,"MAX_VERIFIER_LENGTH",function(){return At}),i.d(p,"DEFAULT_CODE_CHALLENGE_METHOD",function(){return _t});var d={};i.r(d),i.d(d,"getUserAgent",function(){return tr}),i.d(d,"isFingerprintSupported",function(){return rr}),i.d(d,"isPopupPostMessageSupported",function(){return br}),i.d(d,"isTokenVerifySupported",function(){return nr}),i.d(d,"hasTextEncoder",function(){return l}),i.d(d,"isPKCESupported",function(){return P}),i.d(d,"isHTTPS",function(){return R}),i.d(d,"isLocalhost",function(){return G});var x=i(1),y=i.n(x),z=i(0),$=i.n(z),j=i(4),q=i.n(j),oe=i(2),I=i.n(oe),B=i(5),K=i.n(B),U=i(6),M=i.n(U),F=i(3),W=i.n(F),te=i(10);function Q(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var N=function(t){K()(r,t);var e=Q(r);function r(n){var a;return $()(this,r),a=e.call(this,n),Object.setPrototypeOf(I()(a),(this instanceof r?this.constructor:void 0).prototype),a}return r}(i.n(te)()(Error));function fe(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var b=function(t){K()(r,t);var e=fe(r);function r(n,a){var u;return $()(this,r),(u=e.call(this,n)).name="AuthSdkError",u.errorCode="INTERNAL",u.errorSummary=n,u.errorLink="INTERNAL",u.errorId="INTERNAL",u.errorCauses=[],a&&(u.xhr=a),u}return r}(N);/*!
54 * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.
55 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
56 *
57 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
58 * Unless required by applicable law or agreed to in writing, software
59 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
60 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
61 *
62 * See the License for the specific language governing permissions and limitations under the License.
63 */function ve(t,e){var r=t.userAgent||{};return r.value?r.value:r.template?r.template.replace("$OKTA_AUTH_JS",e):e}/*!
64 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
65 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
66 *
67 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
68 * Unless required by applicable law or agreed to in writing, software
69 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
70 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
71 *
72 * See the License for the specific language governing permissions and limitations under the License.
73 */function re(t){return me(btoa(t))}function me(t){return t.replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function v(t){return t.replace(/-/g,"+").replace(/_/g,"/")}function D(t){var e=v(t);switch(e.length%4){case 0:break;case 2:e+="==";break;case 3:e+="=";break;default:throw"Not a valid Base64Url"}var r=atob(e);try{return decodeURIComponent(escape(r))}catch{return r}}function _(t){for(var e=new Uint8Array(t.length),r=0;r<t.length;r++)e[r]=t.charCodeAt(r);return e}function T(t){return atob(v(t))}function J(t,e){var r=Array.prototype.slice.call(arguments,2);return function(){var n=Array.prototype.slice.call(arguments);return n=r.concat(n),t.apply(e,n)}}function V(t){return/^(?:[a-z]+:)?\/\//i.test(t)}function X(){var t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:"",e=arguments.length>1?arguments[1]:void 0;return V(t)?t:(e=xe(e),t[0]==="/"?"".concat(e).concat(t):"".concat(e,"/").concat(t))}function ce(){var t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:"",e=arguments.length>1?arguments[1]:void 0;

73return V(t)&&(t=t.substring(e.length)),t[0]==="/"?t:"/".concat(t)}function le(t){return Object.prototype.toString.call(t)==="[object String]"}function Te(t){return Object.prototype.toString.call(t)==="[object Object]"}function Oe(t){return Object.prototype.toString.call(t)==="[object Number]"}function he(t){var e=t.match(/\d+/g),r=Date.UTC(e[0],e[1]-1,e[2],e[3],e[4],e[5]);return new Date(r).toUTCString()}function _e(t){var e=[];if(t!==null)for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&t[r]!==void 0&&t[r]!==null&&e.push(r+"="+encodeURIComponent(t[r]));return e.length?"?"+e.join("&"):""}function we(t){for(var e="abcdefghijklnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789",r="",n=0,a=e.length;n<t;++n)r+=e[Math.floor(Math.random()*a)];return r}function Ae(){var t=arguments[0],e=[].slice.call(arguments,1);return e.forEach(function(r){for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&r[n]!==void 0&&(t[n]=r[n])}),t}function Se(t){var e={};for(var r in t)if(Object.prototype.hasOwnProperty.call(t,r)){var n=t[r];n!=null&&(e[r]=n)}return e}function ye(t){if(t){var e=JSON.stringify(t);if(e)return JSON.parse(e)}return t}function ke(t){for(var e={},r=arguments.length,n=new Array(r>1?r-1:0),a=1;a<r;a++)n[a-1]=arguments[a];for(var u in t)Object.prototype.hasOwnProperty.call(t,u)&&n.indexOf(u)==-1&&(e[u]=t[u]);return ye(e)}function Pe(t,e){for(var r=t.length;r--;){var n=t[r],a=!0;for(var u in e)if(Object.prototype.hasOwnProperty.call(e,u)&&n[u]!==e[u]){a=!1;break}if(a)return n}}function Fe(t,e,r){if(t&&t._links){var n=ye(t._links[e]);return n&&n.name&&r?n.name===r?n:void 0:n}}function Qe(){return typeof window<"u"?window.console:typeof console<"u"?console:void 0}function Me(){var t=Qe();return t&&t.log?t:{log:function(){},warn:function(){},group:function(){},groupEnd:function(){}}}function Ve(t){Me().warn("[okta-auth-sdk] WARN: "+t)}function Ze(t){Me().warn("[okta-auth-sdk] DEPRECATION: "+t)}function Ot(t,e){return function(){return Ze(t),e.apply(null,arguments)}}function xe(t){if(t){var e=t.replace(/^\s+|\s+$/gm,"");return e=e.replace(/\/+$/,"")}}function mt(){return!!document.documentMode&&document.documentMode<=11}function S(t){return!!t&&{}.toString.call(t)==="[object Function]"}function o(t){return new Promise(function(e){setTimeout(e,t)})}function s(t){return t&&t.finally&&typeof t.finally=="function"}function g(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var O=function(t){K()(r,t);var e=g(r);function r(n,a){var u;$()(this,r);var c=n.errorSummary;return(u=e.call(this,c)).name="AuthApiError",u.errorSummary=n.errorSummary,u.errorCode=n.errorCode,u.errorLink=n.errorLink,u.errorId=n.errorId,u.errorCauses=n.errorCauses,a&&(u.xhr=a),u}return r}(N),Y="oktaStateToken",A=500,ie=300,be=86400,ze="okta-oauth-redirect-params",De="okta-oauth-state",Ce="okta-oauth-nonce",Je="okta-token-storage",et="okta-cache-storage",bt="okta-pkce-storage",tt="okta-transaction-storage",ut="accessToken",yt="idToken",rt="refreshToken",Le="referrerPath",vt=43,At=128,_t="S256";/*!
74 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
75 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
76 *
77 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
78 * Unless required by applicable law or agreed to in writing, software
79 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
80 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
81 *
82 * See the License for the specific language governing permissions and limitations under the License.
83 *//*!
84 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
85 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
86 *
87 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
88 * Unless required by applicable law or agreed to in writing, softw

88are
89 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
90 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
91 *
92 * See the License for the specific language governing permissions and limitations under the License.
93 *
94 */function kt(t,e){var r=(e=e||{}).url,n=e.method,a=e.args,u=e.saveAuthnState,c=e.accessToken,f=e.withCredentials!==!1,m=t.options.storageUtil.storage,E=t.storageManager.getHttpCache(t.options.cookies);if(e.cacheResponse){var k=E.getStorage()[r];if(k&&Date.now()/1e3<k.expiresAt)return Promise.resolve(k.response)}var C={Accept:"application/json","Content-Type":"application/json","X-Okta-User-Agent-Extended":t.userAgent};Object.assign(C,t.options.headers,e.headers),C=Se(C),c&&le(c)&&(C.Authorization="Bearer "+c);var Z,ee,se={headers:C,data:a||void 0,withCredentials:f};return t.options.httpRequestClient(n,r,se).then(function(ge){return(ee=ge.responseText)&&le(ee)&&(ee=JSON.parse(ee)),u&&(ee.stateToken||m.delete(Y)),ee&&ee.stateToken&&ee.expiresAt&&m.set(Y,ee.stateToken,ee.expiresAt,t.options.cookies),ee&&e.cacheResponse&&E.updateStorage(r,{expiresAt:Math.floor(Date.now()/1e3)+be,response:ee}),ee}).catch(function(ge){var de=ge.responseText||{};if(le(de))try{de=JSON.parse(de)}catch{de={errorSummary:"Unknown error"}}throw ge.status>=500&&(de.errorSummary="Unknown error"),t.options.transformErrorXHR&&(ge=t.options.transformErrorXHR(ye(ge))),(Z=new O(de,ge)).errorCode==="E0000011"&&m.delete(Y),Z})}var Ee={get:function(t,e,r){var n={url:e=V(e)?e:t.getIssuerOrigin()+e,method:"GET"};return Object.assign(n,r),kt(t,n)},post:function(t,e,r,n){var a={url:e=V(e)?e:t.getIssuerOrigin()+e,method:"POST",args:r,saveAuthnState:!0};return Object.assign(a,n),kt(t,a)},httpRequest:kt};/*!
95 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
96 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
97 *
98 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
99 * Unless required by applicable law or agreed to in writing, software
100 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
101 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
102 *
103 * See the License for the specific language governing permissions and limitations under the License.
104 *
105 */function ct(t,e){var r={};return Object.assign(r,e),!r.stateToken&&t.stateToken&&(r.stateToken=t.stateToken),r}function Pt(t){return ct(t)}function Sr(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var Tt=function(t){K()(r,t);var e=Sr(r);function r(){return $()(this,r),e.call(this,"The poll was stopped by the sdk")}return r}(N);/*!
106 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
107 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
108 *
109 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
110 * Unless required by applicable law or agreed to in writing, software
111 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
112 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
113 *
114 * See the License for the specific language governing permissions and limitations under the License.
115 *
116 */function zt(t,e,r){return function(n){var a,u,c,f;Oe(n)?a=n:Te(n)&&(a=(n=n).delay,u=n.rememberDevice,c=n.autoPush,f=n.transactionCallBack),a||a===0||(a=A);var m=Fe(e,"next","poll");r.isPolling=!0;var E=0;return function k(){return r.isPolling?function(){var C={};if(typeof c=="function")try{C.autoPush=!!c()}catch{return Promise.reject(new b("AutoPush resulted in an error."))}else c!=null&&(C.autoPush=!!c);if(typeof u=="function")try{C.rememberDevice=!!u()}catch{return Promise.reject(new b("RememberDevice resulted in an error."))}else u!=null&&(C.rememberDevice=!!u);var Z=m.href+_e(C);return Ee.post(t,Z,Pt(e),{saveAuthnState:!1})}().then(function(C){if(E=0,C.factorResult&&C.factorResult==="WAITING"){if(!r.isPolling)throw new Tt;return typeof f=="function"&&f(C),o(a).then(k)}return r.isPolling=!1,new ht(t,C)}).catch(function(C){if(C.xhr&&(C.xhr.status===0||C.xhr.status===429)&&E<=4){var Z=1e3*Math.pow(2,E);return E++,o(Z).then(k)}throw C}):Promise.reject(new Tt)}().catch(function(k){throw r.isPolling=!1,k})}}/*!
117 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
118 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
119 *
120 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
121 * Unless required by applicable law or agreed to in writing, softw

121are
122 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
123 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
124 *
125 * See the License for the specific language governing permissions and limitations under the License.
126 *
127 */var ht=function t(e){var r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:null;$()(this,t),r&&(this.data=r,Object.assign(this,ft(e,r,r,{})),delete this.stateToken,r.status!=="RECOVERY_CHALLENGE"||r._links||(this.cancel=function(){return Promise.resolve(new t(e))}))};function Ut(t,e,r,n,a){if(Array.isArray(n))return function(u,c){if(!u)throw new b("Must provide a link name");var f=Pe(n,{name:u});if(!f)throw new b("No link found for that name");return Ut(t,e,r,f,a)(c)};if(n.hints&&n.hints.allow&&n.hints.allow.length===1)switch(n.hints.allow[0]){case"GET":return function(){return Ee.get(t,n.href)};case"POST":return function(u){a&&a.isPolling&&(a.isPolling=!1);var c=ct(e,u);e.status!=="MFA_ENROLL"&&e.status!=="FACTOR_ENROLL"||Object.assign(c,{factorType:r.factorType,provider:r.provider});var f={},m=c.autoPush;if(m!==void 0){if(typeof m=="function")try{f.autoPush=!!m()}catch{return Promise.reject(new b("AutoPush resulted in an error."))}else m!==null&&(f.autoPush=!!m);c=ke(c,"autoPush")}var E=c.rememberDevice;if(E!==void 0){if(typeof E=="function")try{f.rememberDevice=!!E()}catch{return Promise.reject(new b("RememberDevice resulted in an error."))}else E!==null&&(f.rememberDevice=!!E);c=ke(c,"rememberDevice")}else c.profile&&c.profile.updatePhone!==void 0&&(c.profile.updatePhone&&(f.updatePhone=!0),c.profile=ke(c.profile,"updatePhone"));var k=n.href+_e(f);return $e(t,k,c)}}}function ft(t,e,r,n){if(r=ye(r=r||e),Array.isArray(r)){for(var a=[],u=0,c=r.length;u<c;u++)a.push(ft(t,e,r[u],n));return a}var f=r._embedded||{};for(var m in f)Object.prototype.hasOwnProperty.call(f,m)&&(Te(f[m])||Array.isArray(f[m]))&&(f[m]=ft(t,e,f[m],n));var E=function(k,C,Z,ee){var se={};for(var ge in Z._links)if(Object.prototype.hasOwnProperty.call(Z._links,ge)){var de=Z._links[ge];if(ge==="next"&&(ge=de.name),de.type)se[ge]=de;else switch(ge){case"poll":se.poll=zt(k,C,ee);break;default:var ae=Ut(k,C,Z,de,ee);ae&&(se[ge]=ae)}}return se}(t,e,r,n);return Object.assign(f,E),r=ke(r,"_embedded","_links"),Object.assign(r,f),r}/*!
128 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
129 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
130 *
131 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
132 * Unless required by applicable law or agreed to in writing, software
133 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
134 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
135 *
136 * See the License for the specific language governing permissions and limitations under the License.
137 *
138 */function Rt(t,e){return e=ct(t,e),Ee.post(t,t.getIssuerOrigin()+"/api/v1/authn",e)}function lt(t,e){if(!e||!e.stateToken){var r=t.tx.exists._get(Y);if(!r)return Promise.reject(new b("No transaction to resume"));e={stateToken:r}}return t.tx.status(e).then(function(n){return new ht(t,n)})}function nt(t,e){if(!e||!e.stateToken){var r=t.tx.exists._get(Y);if(!r)return Promise.reject(new b("No transaction to evaluate"));e={stateToken:r}}return function(n,a){return a=ct(n,a),Ee.post(n,n.getIssuerOrigin()+"/api/v1/authn/introspect",a)}(t,e).then(function(n){return new ht(t,n)})}function Ct(t){return!!t.tx.exists._get(Y)}function $e(t,e,r,n){return Ee.post(t,e,r,n).then(function(a){return new ht(t,a)})}var Et=function t(){$()(this,t)};/*!
139 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
140 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
141 *
142 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
143 * Unless required by applicable law or agreed to in writing, software
144 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
145 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
146 *
147 * See the License for the specific language governing permissions and limitations under the License.
148 *
149 *//*!
150 * Copyright (c) 2019-present, Okta, Inc. and/or its affiliates. All rights reserved.
151 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
152 *
153 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
154 * Unless required by applicable law or agreed to in writing, softw

154are
155 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
156 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
157 *
158 * See the License for the specific language governing permissions and limitations under the License.
159 *
160 */function jt(t){return("0"+t.toString(16)).substr(-2)}var Ne={DEFAULT_CODE_CHALLENGE_METHOD:_t,generateVerifier:function(t){var e,r,n=t||"";return n.length<vt&&(n+=(e=vt-n.length,r=new Uint8Array(Math.ceil(e/2)),crypto.getRandomValues(r),Array.from(r,jt).join("").slice(0,e))),encodeURIComponent(n).slice(0,At)},computeChallenge:function(t){var e=new TextEncoder().encode(t);return crypto.subtle.digest("SHA-256",e).then(function(r){return re(String.fromCharCode.apply(null,new Uint8Array(r)))})}},ot=function(){function t(e,r){if($()(this,t),!e)throw new b('"storage" is required');if(typeof r!="string"||!r.length)throw new b('"storageName" is required');this.storageName=r,this.storageProvider=e}return q()(t,[{key:"getItem",value:function(e){return this.getStorage()[e]}},{key:"setItem",value:function(e,r){return this.updateStorage(e,r)}},{key:"removeItem",value:function(e){return this.clearStorage(e)}},{key:"getStorage",value:function(){var e=this.storageProvider.getItem(this.storageName);e=e||"{}";try{return JSON.parse(e)}catch{throw new b("Unable to parse storage string: "+this.storageName)}}},{key:"setStorage",value:function(e){try{var r=e?JSON.stringify(e):"{}";this.storageProvider.setItem(this.storageName,r)}catch{throw new b("Unable to set storage: "+this.storageName)}}},{key:"clearStorage",value:function(e){if(e){var r=this.getStorage();delete r[e],this.setStorage(r)}else this.storageProvider.removeItem?this.storageProvider.removeItem(this.storageName):this.setStorage()}},{key:"updateStorage",value:function(e,r){var n=this.getStorage();n[e]=r,this.setStorage(n)}}]),t}(),Jt=function(){function t(e,r,n){$()(this,t),this.storageManagerOptions=e,this.cookieOptions=r,this.storageUtil=n}return q()(t,[{key:"getOptionsForSection",value:function(e,r){return Object.assign({},this.storageManagerOptions[e],r)}},{key:"getStorage",value:function(e){if((e=Object.assign({},this.cookieOptions,e)).storageProvider)return e.storageProvider;var r=e,n=r.storageType,a=r.storageTypes;if(n&&a){var u=a.indexOf(n);u>=0&&(a=a.slice(u),n=null)}return n||(n=this.storageUtil.findStorageType(a)),this.storageUtil.getStorageByType(n,e)}},{key:"getTransactionStorage",value:function(e){e=this.getOptionsForSection("transaction",e);var r=this.getStorage(e),n=e.storageKey||tt;return new ot(r,n)}},{key:"getTokenStorage",value:function(e){e=this.getOptionsForSection("token",e);var r=this.getStorage(e),n=e.storageKey||Je;return new ot(r,n)}},{key:"getHttpCache",value:function(e){e=this.getOptionsForSection("cache",e);var r=this.getStorage(e),n=e.storageKey||et;return new ot(r,n)}},{key:"getLegacyPKCEStorage",value:function(e){e=this.getOptionsForSection("legacy-pkce",e);var r=this.getStorage(e),n=e.storageKey||bt;return new ot(r,n)}},{key:"getLegacyOAuthParamsStorage",value:function(e){e=this.getOptionsForSection("legacy-oauth-params",e);var r=this.getStorage(e),n=e.storageKey||ze;return new ot(r,n)}}]),t}();/*!
161 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
162 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
163 *
164 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
165 * Unless required by applicable law or agreed to in writing, software
166 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
167 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
168 *
169 * See the License for the specific language governing permissions and limitations under the License.
170 *
171 */function Mt(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var wt=function(t){K()(r,t);var e=Mt(r);function r(n,a){var u;return $()(this,r),(u=e.call(this,a)).name="OAuthError",u.errorCode=n,u.errorSummary=a,u}return r}(N),xr=i(7),Gt=i.n(xr);/*!
172 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
173 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
174 *
175 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
176 * Unless required by applicable law or agreed to in writing, softw

176are
177 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
178 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
179 *
180 * See the License for the specific language governing permissions and limitations under the License.
181 *//*!
182 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
183 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
184 *
185 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
186 * Unless required by applicable law or agreed to in writing, software
187 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
188 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
189 *
190 * See the License for the specific language governing permissions and limitations under the License.
191 */function qt(t){return!(!t||Gt()(t)!=="object"||Object.values(t).length===0)}function Ke(t){return!!qt(t)&&(!!t.redirectUri||!!t.responseType)}function Yt(t){return!!Ke(t)&&!!t.codeVerifier}function Xt(t){return!!Yt(t)&&!!t.interactionHandle}function It(t){return!!qt(t)&&Object.values(t).find(function(e){return typeof e!="string"})===void 0}function Be(t){return!(!Ke(t)&&!It(t))}/*!
192 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
193 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
194 *
195 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
196 * Unless required by applicable law or agreed to in writing, software
197 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
198 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
199 *
200 * See the License for the specific language governing permissions and limitations under the License.
201 *//*!
202 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
203 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
204 *
205 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
206 * Unless required by applicable law or agreed to in writing, software
207 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
208 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
209 *
210 * See the License for the specific language governing permissions and limitations under the License.
211 *//*!
212 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
213 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
214 *
215 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
216 * Unless required by applicable law or agreed to in writing, software
217 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
218 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
219 *
220 * See the License for the specific language governing permissions and limitations under the License.
221 *//*!
222 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
223 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
224 *
225 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
226 * Unless required by applicable law or agreed to in writing, software
227 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
228 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
229 *
230 * See the License for the specific language governing permissions and limitations under the License.
231 *//*!
232 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
233 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
234 *
235 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
236 * Unless required by applicable law or agreed to in writing, softw

236are
237 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
238 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
239 *
240 * See the License for the specific language governing permissions and limitations under the License.
241 *//*!
242 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
243 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
244 *
245 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
246 * Unless required by applicable law or agreed to in writing, software
247 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
248 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
249 *
250 * See the License for the specific language governing permissions and limitations under the License.
251 */function Qt(t){return!!(t&&(t.accessToken||t.idToken||t.refreshToken)&&Array.isArray(t.scopes))}function st(t){return t&&t.accessToken}function Ie(t){return t&&t.idToken}function dt(t){return t&&t.refreshToken}/*!
252 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
253 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
254 *
255 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
256 * Unless required by applicable law or agreed to in writing, software
257 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
258 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
259 *
260 * See the License for the specific language governing permissions and limitations under the License.
261 *//*!
262 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
263 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
264 *
265 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
266 * Unless required by applicable law or agreed to in writing, software
267 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
268 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
269 *
270 * See the License for the specific language governing permissions and limitations under the License.
271 */var Zt=function(){function t(e){$()(this,t),this.storageManager=e.storageManager,this.legacyWidgetSupport=e.legacyWidgetSupport!==!1,this.saveNonceCookie=e.saveNonceCookie!==!1,this.saveStateCookie=e.saveStateCookie!==!1,this.saveParamsCookie=e.saveParamsCookie!==!1,this.options=e}return q()(t,[{key:"clear",value:function(){var e=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},r=this.storageManager.getTransactionStorage();r.clearStorage(),this.legacyWidgetSupport&&(e.oauth&&this.clearLegacyOAuthParams(),e.pkce&&this.clearLegacyPKCE())}},{key:"save",value:function(e){var r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},n=this.storageManager.getTransactionStorage(),a=n.getStorage();if(Be(a)&&Ve("a saved auth transaction exists in storage. This may indicate another auth flow is already in progress."),n.setStorage(e),r.oauth&&(this.saveNonceCookie||this.saveStateCookie||this.saveParamsCookie)){var u=this.storageManager.getStorage({storageType:"cookie"});if(this.saveParamsCookie){var c=e.responseType,f=e.state,m=e.nonce,E=e.scopes,k=e.clientId,C=e.urls,Z=e.ignoreSignature,ee={responseType:c,state:f,nonce:m,scopes:E,clientId:k,urls:C,ignoreSignature:Z};u.setItem(ze,JSON.stringify(ee),null)}this.saveNonceCookie&&e.nonce&&u.setItem(Ce,e.nonce,null),this.saveStateCookie&&e.state&&u.setItem(De,e.state,null)}}},{key:"exists",value:function(){var e=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};try{var r=this.load(e);return!!r}catch{return!1}}},{key:"load",value:function(){var e=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},r=this.storageManager.getTransactionStorage(),n=r.getStorage();if(Be(n))return n;if(!this.legacyWidgetSupport)return null;if(e.oauth)try{var a=this.loadLegacyOAuthParams();Object.assign(n,a)}finally{this.clearLegacyOAuthParams()}if(e.pkce)try{var u=this.loadLegacyPKCE();Object.assign(n,u)}finally{this.clearLegacyPKCE()}return Be(n)?n:null}},{key:"clearLegacyPKCE",value:function(){this.storageManager.storageUtil.testStorageType("localStorage")&&this.storageManager.getLegacyPKCEStorage({storageType:"localStorage"}).clearStorage(),this.storageManager.storageUtil.testStorageType("sessionStorage")&&this.storageManager.getLegacyPKCEStorage({storageType:"sessionStorage"}).clearStorage()}},{key:"loadLegacyPKCE",value:function(){var e;if(this.storageManager.storageUtil.testStorageType("localStorage")&&(e=this.storageManager.getLegacyPKCEStorage({storageType:"localStorage"}).getStorage())&&e.codeVerifier||this.storageManager.storageUtil.testStorageType("sessionStorage")&&(e=this.storageManager.getLegacyPKCEStorage({storageType:"sessionStorage"}).getStorage())&&e.codeVerifier)return e;throw new b("Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.",null)}},{key:"clearLegacyOAuthParams",value:function(){this.storageManager.storageUtil.testStorageType("sessionStorage")&&this.storageManager.getLegacyOAuthParamsStorage({storageType:"sessionStorage"}).clearStorage(),this.storageManager.storageUtil.testStorageType("cookie")&&this.storageManager.getLegacyOAuthParamsStorage({storageType:"cookie"}).clearStorage()}},{key:"loadLegacyOAuthParams",value:function(){var e;if(this.storageManager.storageUtil.testStorageType("sessionStorage")&&(e=this.storageManager.getLegacyOAuthParamsStorage({storageType:"sessionStorage"}).getStorage()),Ke(e)||(this.storageManager.storageUtil.testStorageType("cookie")&&(e=this.storageManager.getLegacyOAuthParamsStorage({storageType:"cookie"}).getStorage()),Ke(e)))return e;throw new b("Unable to retrieve OAuth redirect params from storage")}}]),t}(),er=function(){function t(e){$()(this,t),function(c){var f=(c=c||{}).issuer;if(!f)throw new b('No issuer passed to constructor. Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');

271if(!new RegExp("^http?s?://.+").test(c.issuer))throw new b('Issuer must be a valid URL. Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');if(f.indexOf("-admin.")!==-1)throw new b('Issuer URL passed to constructor contains "-admin" in subdomain. Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com})');var m=c.userAgent;if(m&&m.template&&m.template.indexOf("$OKTA_AUTH_JS")===-1)throw new b('UserAgentTemplate must include "$OKTA_AUTH_JS" placeholder. Required usage: new OktaAuth({userAgentTemplate: "xxx $OKTA_AUTH_JS xxx"})')}(e),this.options={issuer:xe(e.issuer),tokenUrl:xe(e.tokenUrl),authorizeUrl:xe(e.authorizeUrl),userinfoUrl:xe(e.userinfoUrl),revokeUrl:xe(e.revokeUrl),logoutUrl:xe(e.logoutUrl),clientId:e.clientId,redirectUri:e.redirectUri,state:e.state,scopes:e.scopes,postLogoutRedirectUri:e.postLogoutRedirectUri,responseMode:e.responseMode,responseType:e.responseType,pkce:e.pkce,httpRequestClient:e.httpRequestClient,transformErrorXHR:e.transformErrorXHR,transformAuthState:e.transformAuthState,restoreOriginalUri:e.restoreOriginalUri,storageUtil:e.storageUtil,headers:e.headers,devMode:e.devMode||!1,storageManager:Object.assign({token:{},transaction:{}},e.storageManager),cookies:e.cookies,ignoreSignature:!!e.ignoreSignature};var r=this.options,n=r.storageManager,a=r.cookies,u=r.storageUtil;this.storageManager=new Jt(n,a,u),this.transactionManager=new Zt(Object.assign({storageManager:this.storageManager},e.transactionManager)),this.tx={status:Rt.bind(null,this),resume:lt.bind(null,this),exists:Object.assign(Ct.bind(null,this),{_get:function(c){return u.storage.get(c)}}),introspect:nt.bind(null,this)},this.pkce={DEFAULT_CODE_CHALLENGE_METHOD:Ne.DEFAULT_CODE_CHALLENGE_METHOD,generateVerifier:Ne.generateVerifier,computeChallenge:Ne.computeChallenge}}return q()(t,[{key:"signIn",value:function(e){return $e(this,"/api/v1/authn",e)}},{key:"getIssuerOrigin",value:function(){return this.options.issuer.split("/oauth2/")[0]}},{key:"forgotPassword",value:function(e){return $e(this,"/api/v1/authn/recovery/password",e)}},{key:"unlockAccount",value:function(e){return $e(this,"/api/v1/authn/recovery/unlock",e)}},{key:"verifyRecoveryToken",value:function(e){return $e(this,"/api/v1/authn/recovery/token",e)}}]),t}(),Or=/windows phone|iemobile|wpdesktop/i;/*!
272 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
273 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
274 *
275 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
276 * Unless required by applicable law or agreed to in writing, software
277 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
278 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
279 *
280 * See the License for the specific language governing permissions and limitations under the License.
281 */function tr(){return navigator.userAgent}function rr(){var t=tr();return t&&!Or.test(t)}function br(){var t=document.documentMode&&document.documentMode<10;return!(!window.postMessage||t)}function nr(){return typeof crypto<"u"&&crypto.subtle&&typeof Uint8Array<"u"}function l(){return typeof TextEncoder<"u"}function P(){return nr()&&l()}function R(){return window.location.protocol==="https:"}function G(){return window.location.hostname==="localhost"}var H=i(11),ne=i(19),pe={getHttpCache:function(){return null},getPKCEStorage:function(){return null},browserHasLocalStorage:function(){try{var t=pe.getLocalStorage();return pe.testStorage(t)}catch{return!1}},browserHasSessionStorage:function(){try{var t=pe.getSessionStorage();return pe.testStorage(t)}catch{return!1}},testStorageType:function(t){var e=!1;switch(t){case"sessionStorage":e=pe.browserHasSessionStorage();break;case"localStorage":e=pe.browserHasLocalStorage();break;case"cookie":case"memory":e=!0;break;default:e=!1}return e},getStorageByType:function(t,e){var r=null;switch(t){case"sessionStorage":r=pe.getSessionStorage();break;case"localStorage":r=pe.getLocalStorage();break;case"cookie":r=pe.getCookieStorage(e);break;case"memory":r=pe.getInMemoryStorage();break;default:throw new b("Unrecognized storage option: ".concat(t))}return r},findStorageType:function(t){var e,r;return e=(t=t.slice()).shift(),(r=t.length?t[0]:null)?pe.testStorageType(e)?e:(Ve("This browser doesn't support ".concat(e,". Switching to ").concat(r,".")),pe.findStorageType(t)):e},getLocalStorage:function(){return localStorage},getSessionStorage:function(){return sessionStorage},getCookieStorage:function(t){var e=t.secure,r=t.sameSite;if(e===void 0||r===void 0)throw new b('getCookieStorage: "secure" and "sameSite" options must be provided');var n={getItem:pe.storage.get,setItem:function(a,u,c){c=c===void 0?"2200-01-01T00:00:00.000Z":c,pe.storage.set(a,u,c,{secure:e,sameSite:r})},removeItem:function(a){pe.storage.delete(a)}};return t.useMultipleCookies?{getItem:function(a){var u=n.getItem(),c={};return Object.keys(u).forEach(function(f){f.indexOf(a)===0&&(c[f.replace("".concat(a,"_"),"")]=JSON.parse(u[f]))}),JSON.stringify(c)},setItem:function(a,u){var c=JSON.parse(this.getItem(a));u=JSON.parse(u),Object.keys(u).forEach(function(f){var m=a+"_"+f,E=JSON.stringify(u[f]);n.setItem(m,E),delete c[f]}

281),Object.keys(c).forEach(function(f){n.removeItem(a+"_"+f)})},removeItem:function(a){var u=JSON.parse(this.getItem(a));Object.keys(u).forEach(function(c){n.removeItem(a+"_"+c)})}}:n},getInMemoryStorage:function(){var t={};return{getItem:function(e){return t[e]},setItem:function(e,r){t[e]=r}}},testStorage:function(t){var e="okta-test-storage";try{return t.setItem(e,e),t.removeItem(e),!0}catch{return!1}},storage:{set:function(t,e,r,n){var a=n.secure,u=n.sameSite;if(a===void 0||u===void 0)throw new b('storage.set: "secure" and "sameSite" options must be provided');var c={path:n.path||"/",secure:a,sameSite:u};return Date.parse(r)&&(c.expires=new Date(r)),ne.set(t,e,c),pe.storage.get(t)},get:function(t){return ne.get(t)},delete:function(t){return ne.remove(t,{path:"/"})}}},Ue=pe;/*!
282 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
283 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
284 *
285 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
286 * Unless required by applicable law or agreed to in writing, software
287 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
288 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
289 *
290 * See the License for the specific language governing permissions and limitations under the License.
291 *
292 *//*!
293 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
294 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
295 *
296 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
297 * Unless required by applicable law or agreed to in writing, software
298 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
299 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
300 *
301 * See the License for the specific language governing permissions and limitations under the License.
302 *
303 */function We(t){return t.session.get().then(function(e){return e.status==="ACTIVE"}).catch(function(){return!1})}function je(t){return Ee.get(t,"/api/v1/sessions/me").then(function(e){var r=ke(e,"_links");return r.refresh=function(){return Ee.post(t,Fe(e,"refresh").href)},r.user=function(){return Ee.get(t,Fe(e,"user").href)},r}).catch(function(){return{status:"INACTIVE"}})}function Ge(t){return Ee.httpRequest(t,{url:t.getIssuerOrigin()+"/api/v1/sessions/me",method:"DELETE"})}function it(t){return Ee.post(t,"/api/v1/sessions/me/lifecycle/refresh")}function at(t,e,r){r=r||window.location.href,window.location.assign(t.getIssuerOrigin()+"/login/sessionCookieRedirect"+_e({checkAccountSetupComplete:!0,token:e,redirectUrl:r}))}function Dt(t){if(!t.clientId)throw new b("A clientId must be specified in the OktaAuth constructor to get a token");if(le(t.responseType)&&t.responseType.indexOf(" ")!==-1)throw new b("Multiple OAuth responseTypes must be defined as an array");var e={client_id:t.clientId,code_challenge:t.codeChallenge,code_challenge_method:t.codeChallengeMethod,display:t.display,idp:t.idp,idp_scope:t.idpScope,login_hint:t.loginHint,max_age:t.maxAge,nonce:t.nonce,prompt:t.prompt,redirect_uri:t.redirectUri,response_mode:t.responseMode,response_type:t.responseType,sessionToken:t.sessionToken,state:t.state};if(e=Se(e),["idp_scope","response_type"].forEach(function(r){Array.isArray(e[r])&&(e[r]=e[r].join(" "))}),t.responseType.indexOf("id_token")!==-1&&t.scopes.indexOf("openid")===-1)throw new b("openid scope must be specified in the scopes argument when requesting an id_token");return e.scope=t.scopes.join(" "),e}function or(t){return _e(Dt(t))}var fn=i(13),ln=i.n(fn);function Ar(t,e,r){(function(a){if(!a.clientId)throw new b("A clientId must be specified in the OktaAuth constructor to get a token");if(!a.redirectUri)throw new b("The redirectUri passed to /authorize must also be passed to /token");if(!a.authorizationCode&&!a.interactionCode)throw new b("An authorization code (returned from /authorize) must be passed to /token");if(!a.codeVerifier)throw new b('The "codeVerifier" (generated and saved by your app) must be passed to /token')})(e);var n=function(a){var u=Se({client_id:a.clientId,redirect_uri:a.redirectUri,grant_type:a.interactionCode?"interaction_code":"authorization_code",code_verifier:a.codeVerifier});return a.interactionCode?u.interaction_code=a.interactionCode:a.authorizationCode&&(u.code=a.authorizationCode),_e(u).slice(1)}(e);return Ee.httpRequest(t,{url:r.tokenUrl,method:"POST",args:n,withCredentials:!1,headers:{"Content-Type":"application/x-www-form-urlencoded"}})}function Pr(t,e,r){return Ee.httpRequest(t,{url:r.tokenUrl,method:"POST",withCredentials:!1,headers:{"Content-Type":"application/x-www-form-urlencoded"},args:Object.entries({client_id:e.clientId,grant_type:"refresh_token",scope:r.scopes.join(" "),refresh_token:r.refreshToken}).map(function(n){var a=ln()(n,2),u=a[0],c=a[1];return u+"="+encodeURIComponent(c)}).join("&")})}/*!
304 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
305 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
306 *
307 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
308 * Unless required by applicable law or agreed to in writing, softw

308are
309 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
310 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
311 *
312 * See the License for the specific language governing permissions and limitations under the License.
313 *
314 */function Lt(t,e){var r=e||t.options.issuer;return Ee.get(t,r+"/.well-known/openid-configuration",{cacheResponse:!0})}function Ur(t,e,r){var n=t.storageManager.getHttpCache(t.options.cookies);return Lt(t,e).then(function(a){var u=a.jwks_uri,c=n.getStorage()[u];if(c&&Date.now()/1e3<c.expiresAt){var f=Pe(c.response.keys,{kid:r});if(f)return f}return n.clearStorage(u),Ee.get(t,u,{cacheResponse:!0}).then(function(m){var E=Pe(m.keys,{kid:r});if(E)return E;throw new b("The key id, "+r+", was not found in the server's keys")})})}/*!
315 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
316 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
317 *
318 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
319 * Unless required by applicable law or agreed to in writing, software
320 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
321 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
322 *
323 * See the License for the specific language governing permissions and limitations under the License.
324 *
325 */function sr(t,e,r){t.addEventListener?t.addEventListener(e,r):t.attachEvent("on"+e,r)}function ir(t,e,r){t.removeEventListener?t.removeEventListener(e,r):t.detachEvent("on"+e,r)}function Rr(t){var e=document.createElement("iframe");return e.style.display="none",e.src=t,document.body.appendChild(e)}function Cr(t,e){var r=e.popupTitle||"External Identity Provider User Authentication",n="toolbar=no, scrollbars=yes, resizable=yes, top=100, left=500, width=600, height=600";if(mt()){var a=window.open("/",r,n);return a.location.href=t,a}return window.open(t,r,n)}function ar(t,e,r){var n,a;return new Promise(function(u,c){n=function(f){if(f.data&&f.data.state===r)return f.origin!==t.getIssuerOrigin()?c(new b("The request does not match client configuration")):void u(f.data)},sr(window,"message",n),a=setTimeout(function(){c(new b("OAuth flow timed out"))},e||12e4)}).finally(function(){clearTimeout(a),ir(window,"message",n)})}/*!
326 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
327 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
328 *
329 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
330 * Unless required by applicable law or agreed to in writing, software
331 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
332 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
333 *
334 * See the License for the specific language governing permissions and limitations under the License.
335 *
336 */function jr(){return we(64)}function Mr(){return we(64)}function qe(t,e){if(arguments.length>2)throw new b('As of version 3.0, "getOAuthUrls" takes only a single set of options');var r=xe((e=e||{}).authorizeUrl)||t.options.authorizeUrl,n=xe(e.issuer)||t.options.issuer,a=xe(e.userinfoUrl)||t.options.userinfoUrl,u=xe(e.tokenUrl)||t.options.tokenUrl,c=xe(e.logoutUrl)||t.options.logoutUrl,f=xe(e.revokeUrl)||t.options.revokeUrl,m=n.indexOf("/oauth2")>0?n:n+"/oauth2";return{issuer:n,authorizeUrl:r=r||m+"/v1/authorize",userinfoUrl:a=a||m+"/v1/userinfo",tokenUrl:u=u||m+"/v1/token",revokeUrl:f=f||m+"/v1/revoke",logoutUrl:c=c||m+"/v1/logout"}}/*!
337 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
338 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
339 *
340 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
341 * Unless required by applicable law or agreed to in writing, software
342 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
343 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
344 *
345 * See the License for the specific language governing permissions and limitations under the License.
346 *
347 */function St(t){var e=t.options,r=e.pkce,n=e.clientId,a=e.redirectUri,u=e.responseType,c=e.responseMode,f=e.scopes,m=e.state,E=e.ignoreSignature;return{pkce:r,clientId:n,redirectUri:a||window.location.href,responseType:u||["token","id_token"],responseMode:c,state:m||jr(),nonce:Mr(),scopes:f||["openid","email"],ignoreSignature:E}}function $t(t){return t.name==="OAuthError"&&t.errorCode==="interaction_required"}function dn(t,e){if(e.name!=="AuthApiError")return!1;var r=e.xhr,n=r?.responseJSON;return t.options.pkce&&n?.error==="invalid_grant"}function Ir(t){return/((id|access)_token=)/i.test(t)}function Dr(t){return/(code=)/i.test(t)}function Lr(t){return/(interaction_code=)/i.test(t)}function $r(t){return/(error=)/i.test(t)||/(error_description)/i.test(t)}function Nr(t,e){var r=e.options;return t&&t.indexOf(r.redirectUri)===0}function ur(t){return t.pkce||t.responseType==="code"||t.responseMode==="query"}function cr(t){return ur(t)&&t.responseMode!=="fragment"?window.location.search:window.location.hash}function Nt(t){if(!Nr(window.location.href,t))return!1;var e=ur(t.options),r=cr(t.options);return!!$r(r)||(e?Dr(r)||Lr(r):Ir(window.location.hash))}function Kr(t){if(!Nt(t))return!1;var e=cr(t.options);return/(error=interaction_required)/i.test(e)}/*!
348 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
349 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
350 *
351 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
352 * Unless required by applicable law or agreed to in writing, softw

352are
353 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
354 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
355 *
356 * See the License for the specific language governing permissions and limitations under the License.
357 *
358 */function Kt(t,e){var r=St(t);if((e=Object.assign({},r,ye(e))).pkce===!1)return Promise.resolve(e);if(!t.features.isPKCESupported()){var n="PKCE requires a modern browser with encryption support running in a secure context.";return t.features.isHTTPS()||(n+=`
359The current page is not being served with HTTPS protocol. PKCE requires secure HTTPS protocol.`),t.features.hasTextEncoder()||(n+=`
360"TextEncoder" is not defined. To use PKCE, you may need to include a polyfill/shim for this browser.`),Promise.reject(new b(n))}return e.codeChallengeMethod||(e.codeChallengeMethod=_t),e.responseType="code",Lt(t,null).then(function(a){if((a.code_challenge_methods_supported||[]).indexOf(e.codeChallengeMethod)===-1)throw new b("Invalid code_challenge_method")}).then(function(){return e.codeVerifier||(e.codeVerifier=Ne.generateVerifier()),Ne.computeChallenge(e.codeVerifier)}).then(function(a){var u=ye(e)||{};return Object.assign(u,e,{codeChallenge:a}),u})}/*!
361 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
362 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
363 *
364 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
365 * Unless required by applicable law or agreed to in writing, software
366 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
367 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
368 *
369 * See the License for the specific language governing permissions and limitations under the License.
370 *
371 */function Br(t){var e=/\+/g,r=/([^&=]+)=?([^&]*)/g,n=t;n.charAt(0)==="#"&&n.charAt(1)==="/"&&(n=n.substring(2)),n.charAt(0)!=="#"&&n.charAt(0)!=="?"||(n=n.substring(1));for(var a,u={};a=r.exec(n);){var c=a[1],f=a[2];u[c]=c==="id_token"||c==="access_token"||c==="code"?f:decodeURIComponent(f.replace(e," "))}return u}/*!
372 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
373 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
374 *
375 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
376 * Unless required by applicable law or agreed to in writing, software
377 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
378 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
379 *
380 * See the License for the specific language governing permissions and limitations under the License.
381 *
382 */function Wr(t,e,r){var n=r.clientId,a=r.issuer,u=r.nonce;if(!e||!a||!n)throw new b("The jwt, iss, and aud arguments are all required");if(u&&e.nonce!==u)throw new b("OAuth flow response nonce doesn't match request nonce");var c=Math.floor(Date.now()/1e3);if(e.iss!==a)throw new b("The issuer ["+e.iss+"] does not match ["+a+"]");if(e.aud!==n)throw new b("The audience ["+e.aud+"] does not match ["+n+"]");if(e.iat>e.exp)throw new b("The JWT expired before it was issued");if(c-t.options.maxClockSkew>e.exp)throw new b("The JWT expired and is no longer valid");if(e.iat>c+t.options.maxClockSkew)throw new b("The JWT was issued in the future")}/*!
383 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
384 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
385 *
386 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
387 * Unless required by applicable law or agreed to in writing, software
388 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
389 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
390 *
391 * See the License for the specific language governing permissions and limitations under the License.
392 *
393 *//*!
394 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
395 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
396 *
397 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
398 * Unless required by applicable law or agreed to in writing, softw

398are
399 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
400 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
401 *
402 * See the License for the specific language governing permissions and limitations under the License.
403 *
404 */function hr(t){var e,r=t.split(".");try{e={header:JSON.parse(D(r[0])),payload:JSON.parse(D(r[1])),signature:r[2]}}catch{throw new b("Malformed token")}return e}/*!
405 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
406 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
407 *
408 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
409 * Unless required by applicable law or agreed to in writing, software
410 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
411 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
412 *
413 * See the License for the specific language governing permissions and limitations under the License.
414 *
415 */function Hr(t,e){return Promise.resolve().then(function(){var r,n;if(e&&(r=e.accessToken,n=e.refreshToken),!r&&!n)throw new b("A valid access or refresh token object is required");var a=t.options.clientId;if(!a)throw new b("A clientId must be specified in the OktaAuth constructor to revoke a token");var u=qe(t).revokeUrl,c=_e({token_type_hint:n?"refresh_token":"access_token",token:n||r}).slice(1),f=btoa(a);return Ee.post(t,u,c,{headers:{"Content-Type":"application/x-www-form-urlencoded",Authorization:"Basic "+f}})})}/*!
416 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
417 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
418 *
419 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
420 * Unless required by applicable law or agreed to in writing, software
421 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
422 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
423 *
424 * See the License for the specific language governing permissions and limitations under the License.
425 *
426 */function fr(t,e,r){r=r||qe(t,e);var n=e=Object.assign({},St(t),ye(e)),a=n.authorizationCode,u=n.interactionCode,c=n.codeVerifier,f=n.clientId,m=n.redirectUri,E=n.scopes,k=n.ignoreSignature;return Ar(t,{clientId:f,redirectUri:m,authorizationCode:a,interactionCode:u,codeVerifier:c},r).then(function(C){var Z=["token"];return E.indexOf("openid")!==-1&&Z.push("id_token"),pt(t,{clientId:f,redirectUri:m,scopes:E,responseType:Z,ignoreSignature:k},C,r).then(function(ee){return ee.code=a,ee})})}/*!
427 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
428 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
429 *
430 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
431 * Unless required by applicable law or agreed to in writing, software
432 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
433 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
434 *
435 * See the License for the specific language governing permissions and limitations under the License.
436 */function pn(t,e){e=ye(e);var r={name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}};return delete e.use,crypto.subtle.importKey("jwk",e,r,!0,["verify"]).then(function(n){var a=t.split("."),u=_(a[0]+"."+a[1]),c=_(T(a[2]));return crypto.subtle.verify(r,n,c,u)})}var gn=function(t,e,r,n){return new(r||(r=Promise))(function(a,u){function c(E){try{m(n.next(E))}catch(k){u(k)}}function f(E){try{m(n.throw(E))}catch(k){u(k)}}function m(E){var k;E.done?a(E.value):(k=E.value,k instanceof r?k:new r(function(C){C(k)})).then(c,f)}m((n=n.apply(t,e||[])).next())})};/*!
437 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
438 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
439 *
440 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
441 * Unless required by applicable law or agreed to in writing, softw

441are
442 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
443 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
444 *
445 * See the License for the specific language governing permissions and limitations under the License.
446 *
447 */function lr(t,e,r){return gn(this,void 0,void 0,y.a.mark(function n(){var a,u,c,f;return y.a.wrap(function(m){for(;;)switch(m.prev=m.next){case 0:if(e&&e.idToken){m.next=2;break}throw new b("Only idTokens may be verified");case 2:return a=hr(e.idToken),m.next=5,Lt(t);case 5:if(u=m.sent,c={issuer:u.issuer,clientId:t.options.clientId,ignoreSignature:t.options.ignoreSignature},Object.assign(c,r),Wr(t,a.payload,c),c.ignoreSignature!=1&&t.features.isTokenVerifySupported()){m.next=11;break}return m.abrupt("return",e);case 11:return m.next=13,Ur(t,e.issuer,a.header.kid);case 13:return f=m.sent,m.next=16,pn(e.idToken,f);case 16:if(m.sent){m.next=19;break}throw new b("The token signature is not valid");case 19:if(!(r&&r.accessToken&&e.claims.at_hash)){m.next=25;break}return m.next=22,E=r.accessToken,k=void 0,k=new TextEncoder().encode(E),crypto.subtle.digest("SHA-256",k).then(function(C){var Z=new Uint8Array(C).slice(0,16);return re(String.fromCharCode.apply(null,Z))});case 22:if(m.sent===e.claims.at_hash){m.next=25;break}throw new b("Token hash verification failed");case 25:return m.abrupt("return",e);case 26:case"end":return m.stop()}var E,k},n)}))}/*!
448 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
449 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
450 *
451 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
452 * Unless required by applicable law or agreed to in writing, software
453 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
454 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
455 *
456 * See the License for the specific language governing permissions and limitations under the License.
457 *
458 */function pt(t,e,r,n){if(t.options.pkce!==!1&&(r.code||r.interaction_code))return fr(t,Object.assign({},e,{authorizationCode:r.code,interactionCode:r.interaction_code}),n);e=e||St(t),n=n||qe(t,e);var a,u=e.responseType;Array.isArray(u)||(u=[u]),a=r.scope?r.scope.split(" "):ye(e.scopes);var c=e.clientId||t.options.clientId;return Promise.resolve().then(function(){(function(f,m){if(f.error||f.error_description)throw new wt(f.error,f.error_description);if(f.state!==m.state)throw new b("OAuth flow response state doesn't match request state")})(r,e)}).then(function(){var f={},m=r.expires_in,E=r.token_type,k=r.access_token,C=r.id_token,Z=r.refresh_token;if(k){var ee=t.token.decode(k);f.accessToken={value:k,accessToken:k,claims:ee.payload,expiresAt:Number(m)+Math.floor(Date.now()/1e3),tokenType:E,scopes:a,authorizeUrl:n.authorizeUrl,userinfoUrl:n.userinfoUrl}}if(Z&&(f.refreshToken={value:Z,refreshToken:Z,expiresAt:Number(m)+Math.floor(Date.now()/1e3),scopes:a,tokenUrl:n.tokenUrl,authorizeUrl:n.authorizeUrl,issuer:n.issuer}),C){var se=t.token.decode(C),ge={value:C,idToken:C,claims:se.payload,expiresAt:se.payload.exp,scopes:a,authorizeUrl:n.authorizeUrl,issuer:n.issuer,clientId:c},de={clientId:c,issuer:n.issuer,nonce:e.nonce,accessToken:k};return e.ignoreSignature!==void 0&&(de.ignoreSignature=e.ignoreSignature),lr(t,ge,de).then(function(){return f.idToken=ge,f})}return f}).then(function(f){if(u.indexOf("token")!==-1&&!f.accessToken)throw new b('Unable to parse OAuth flow response: response type "token" was requested but "access_token" was not returned.');if(u.indexOf("id_token")!==-1&&!f.idToken)throw new b('Unable to parse OAuth flow response: response type "id_token" was requested but "id_token" was not returned.');return{tokens:f,state:r.state,code:r.code}})}/*!
459 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
460 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
461 *
462 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
463 * Unless required by applicable law or agreed to in writing, softw

463are
464 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
465 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
466 *
467 * See the License for the specific language governing permissions and limitations under the License.
468 *
469 */function dr(t,e){return arguments.length>2?Promise.reject(new b('As of version 3.0, "getToken" takes only a single set of options')):Kt(t,e=e||{}).then(function(r){var n,a;switch(e.sessionToken?Object.assign(r,{prompt:"none",responseMode:"okta_post_message",display:null}):e.idp&&Object.assign(r,{display:"popup"}),a=qe(t,r),n=(e.codeVerifier?a.tokenUrl:a.authorizeUrl)+or(r),r.sessionToken||r.display===null?"IFRAME":r.display==="popup"?"POPUP":"IMPLICIT"){case"IFRAME":var u=ar(t,e.timeout,r.state),c=Rr(n);return u.then(function(E){return pt(t,r,E,a)}).finally(function(){document.body.contains(c)&&c.parentElement.removeChild(c)});case"POPUP":var f;if(r.responseMode==="okta_post_message"){if(!t.features.isPopupPostMessageSupported())throw new b("This browser doesn't have full postMessage support");f=ar(t,e.timeout,r.state)}var m=Cr(n,{popupTitle:e.popupTitle});return new Promise(function(E,k){var C=setInterval(function(){m&&!m.closed||(clearInterval(C),k(new b("Unable to parse OAuth flow response")))},100);f.then(function(Z){clearInterval(C),E(Z)}).catch(function(Z){clearInterval(C),k(Z)})}).then(function(E){return pt(t,r,E,a)}).finally(function(){m&&!m.closed&&m.close()});default:throw new b("The full page redirect flow is not supported")}})}/*!
470 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
471 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
472 *
473 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
474 * Unless required by applicable law or agreed to in writing, software
475 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
476 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
477 *
478 * See the License for the specific language governing permissions and limitations under the License.
479 *
480 */function Bt(t,e){return arguments.length>2?Promise.reject(new b('As of version 3.0, "getWithoutPrompt" takes only a single set of options')):(e=ye(e)||{},Object.assign(e,{prompt:"none",responseMode:"okta_post_message",display:null}),dr(t,e))}/*!
481 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
482 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
483 *
484 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
485 * Unless required by applicable law or agreed to in writing, software
486 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
487 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
488 *
489 * See the License for the specific language governing permissions and limitations under the License.
490 *
491 */function Fr(t,e){return Qt(e)?Bt(t,{responseType:t.options.pkce?"code":st(e)?"token":"id_token",scopes:e.scopes,authorizeUrl:e.authorizeUrl,userinfoUrl:e.userinfoUrl,issuer:e.issuer}).then(function(r){var n=r.tokens;return Ie(e)?n.idToken:n.accessToken}):Promise.reject(new b("Renew must be passed a token with an array of scopes and an accessToken or idToken"))}var mn=function(t,e,r,n){return new(r||(r=Promise))(function(a,u){function c(E){try{m(n.next(E))}catch(k){u(k)}}function f(E){try{m(n.throw(E))}catch(k){u(k)}}function m(E){var k;E.done?a(E.value):(k=E.value,k instanceof r?k:new r(function(C){C(k)})).then(c,f)}m((n=n.apply(t,e||[])).next())})};/*!
492 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
493 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
494 *
495 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
496 * Unless required by applicable law or agreed to in writing, software
497 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
498 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
499 *
500 * See the License for the specific language governing permissions and limitations under the License.
501 *
502 */function pr(t,e,r){return mn(this,void 0,void 0,y.a.mark(function n(){var a,u,c,f,m,E;return y.a.wrap(function(k){for(;;)switch(k.prev=k.next){case 0:if(a=t.options.clientId){k.next=3;break}throw new b("A clientId must be specified in the OktaAuth constructor to renew tokens");case 3:return u=Object.assign({},e,{clientId:a}),k.next=6,Pr(t,u,r);case 6:return c=k.sent,f=qe(t,e),k.next=10,pt(t,u,c,f);case 10:return m=k.sent,E=m.tokens,k.abrupt("return",E);case 13:case"end":return k.stop()}},n)}))}function Vr(t,e){return t.tokenManager.getTokens().then(function(r){return r.refreshToken}).then(function(r){if(r)return pr(t,e,r);

502if(e=Object.assign({scopes:t.options.scopes,authorizeUrl:t.options.authorizeUrl,userinfoUrl:t.options.userinfoUrl,issuer:t.options.issuer},e),t.options.pkce)e.responseType="code";else{var n=St(t).responseType;e.responseType=n}return Bt(t,e).then(function(a){return a.tokens})})}var yn=function(t,e,r,n){return new(r||(r=Promise))(function(a,u){function c(E){try{m(n.next(E))}catch(k){u(k)}}function f(E){try{m(n.throw(E))}catch(k){u(k)}}function m(E){var k;E.done?a(E.value):(k=E.value,k instanceof r?k:new r(function(C){C(k)})).then(c,f)}m((n=n.apply(t,e||[])).next())})};/*!
503 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
504 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
505 *
506 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
507 * Unless required by applicable law or agreed to in writing, software
508 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
509 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
510 *
511 * See the License for the specific language governing permissions and limitations under the License.
512 *
513 */function zr(t,e,r){return yn(this,void 0,void 0,y.a.mark(function n(){return y.a.wrap(function(a){for(;;)switch(a.prev=a.next){case 0:if(e){a.next=4;break}return a.next=3,t.tokenManager.getTokens();case 3:e=a.sent.accessToken;case 4:if(r){a.next=8;break}return a.next=7,t.tokenManager.getTokens();case 7:r=a.sent.idToken;case 8:if(e&&st(e)){a.next=10;break}return a.abrupt("return",Promise.reject(new b("getUserInfo requires an access token object")));case 10:if(r&&Ie(r)){a.next=12;break}return a.abrupt("return",Promise.reject(new b("getUserInfo requires an ID token object")));case 12:return a.abrupt("return",Ee.httpRequest(t,{url:e.userinfoUrl,method:"GET",accessToken:e.accessToken}).then(function(u){return u.sub===r.claims.sub?u:Promise.reject(new b("getUserInfo request was rejected due to token mismatch"))}).catch(function(u){var c;if(u.xhr&&(u.xhr.status===401||u.xhr.status===403)&&(u.xhr.headers&&S(u.xhr.headers.get)&&u.xhr.headers.get("WWW-Authenticate")?c=u.xhr.headers.get("WWW-Authenticate"):S(u.xhr.getResponseHeader)&&(c=u.xhr.getResponseHeader("WWW-Authenticate")),c)){var f=c.match(/error="(.*?)"/)||[],m=c.match(/error_description="(.*?)"/)||[],E=f[1],k=m[1];E&&k&&(u=new wt(E,k))}throw u}));case 13:case"end":return a.stop()}},n)}))}/*!
514 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
515 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
516 *
517 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
518 * Unless required by applicable law or agreed to in writing, software
519 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
520 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
521 *
522 * See the License for the specific language governing permissions and limitations under the License.
523 *
524 */function Jr(t,e){return arguments.length>2?Promise.reject(new b('As of version 3.0, "getWithPopup" takes only a single set of options')):(e=ye(e)||{},Object.assign(e,{display:"popup",responseMode:"okta_post_message"}),dr(t,e))}/*!
525 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
526 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
527 *
528 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
529 * Unless required by applicable law or agreed to in writing, software
530 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
531 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
532 *
533 * See the License for the specific language governing permissions and limitations under the License.
534 *
535 */function Gr(t,e){return arguments.length>2?Promise.reject(new b('As of version 3.0, "getWithRedirect" takes only a single set of options')):(e=ye(e)||{},Kt(t,e).then(function(r){var n=qe(t,e),a=n.authorizeUrl+or(r),u={responseType:r.responseType,state:r.state,nonce:r.nonce,scopes:r.scopes,clientId:r.clientId,urls:n,ignoreSignature:r.ignoreSignature,redirectUri:r.redirectUri,codeVerifier:r.codeVerifier,codeChallenge:r.codeChallenge,codeChallengeMethod:r.codeChallengeMethod};t.transactionManager.save(u,{oauth:!0}),t.token.getWithRedirect._setLocation(a)}))}/*!
536 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
537 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
538 *
539 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
540 * Unless required by applicable law or agreed to in writing, softw

540are
541 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
542 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
543 *
544 * See the License for the specific language governing permissions and limitations under the License.
545 *
546 */function qr(t,e){e=le(e=e||{})?{url:e}:e;var r,n=t.options.pkce?"query":"fragment",a=e.url,u=e.responseMode||t.options.responseMode||n,c=t.token.parseFromUrl._getLocation();if(!(r=u==="query"?a?a.substring(a.indexOf("?")):c.search:a?a.substring(a.indexOf("#")):c.hash))return Promise.reject(new b("Unable to parse a token from the url"));var f=t.transactionManager.load({oauth:!0,pkce:t.options.pkce}),m=f.urls;return delete f.urls,Promise.resolve(Br(r)).then(function(E){return a||(u==="query"?function(k){var C=k.token.parseFromUrl._getHistory(),Z=k.token.parseFromUrl._getDocument(),ee=k.token.parseFromUrl._getLocation();C&&C.replaceState?C.replaceState(null,Z.title,ee.pathname+ee.hash):ee.search=""}(t):function(k){var C=k.token.parseFromUrl._getHistory(),Z=k.token.parseFromUrl._getDocument(),ee=k.token.parseFromUrl._getLocation();C&&C.replaceState?C.replaceState(null,Z.title,ee.pathname+ee.search):ee.hash=""}(t)),pt(t,f,E,m).catch(function(k){throw $t(k)||t.transactionManager.clear(),k}).then(function(k){return t.transactionManager.clear(),k})})}/*!
547 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
548 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
549 *
550 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
551 * Unless required by applicable law or agreed to in writing, software
552 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
553 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
554 *
555 * See the License for the specific language governing permissions and limitations under the License.
556 *
557 */var vn=i(8),gr=i.n(vn),_n=function(){function t(e){$()(this,t),this.localOffset=parseInt(e||0)}return q()(t,[{key:"now",value:function(){var e=(Date.now()+this.localOffset)/1e3;return e}}],[{key:"create",value:function(){return new t(0)}}]),t}(),kn={autoRenew:!0,autoRemove:!0,storage:"localStorage",expireEarlySeconds:30,storageKey:Je,_storageEventDelay:0},mr="expired",Yr="renewed",Wt="added",Ht="removed",Xr="error";function Qr(t,e){return e.expiresAt-t.options.expireEarlySeconds}function Zr(t,e){return Qr(t,e)<=t.clock.now()}function yr(t,e,r){t.emitter.emit(Wt,e,r)}function xt(t,e,r){t.emitter.emit(Ht,e,r)}function vr(t,e){t.emitter.emit(Xr,e)}function Tn(t,e,r){var n=sn(r),a=sn(e);Object.keys(a).forEach(function(u){var c=n[u],f=a[u];JSON.stringify(c)!==JSON.stringify(f)&&yr(t,u,f)}),Object.keys(n).forEach(function(u){var c=n[u];a[u]||xt(t,u,c)})}function gt(t,e){clearTimeout(t.expireTimeouts[e]),delete t.expireTimeouts[e],delete t.renewPromise[e]}function _r(t){var e=t.expireTimeouts;for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&gt(t,r)}function kr(t,e,r,n){var a=Qr(e,n),u=1e3*Math.max(a-e.clock.now(),0);gt(e,r);var c=setTimeout(function(){(function(f,m,E){f.emitter.emit(mr,m,E)})(e,r,n)},u);e.expireTimeouts[r]=c}function en(t,e,r){try{var n=r.getStorage()}catch(u){return void vr(e,u)}for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&kr(0,e,a,n[a])}function En(t,e,r){_r(e),en(0,e,r)}function Tr(t){if(!Te(t)||!t.scopes||!t.expiresAt&&t.expiresAt!==0||!Ie(t)&&!st(t)&&!dt(t))throw new b("Token must be an Object with scopes, expiresAt, and one of: an idToken, accessToken, or refreshToken property")}function tn(t,e,r,n,a){var u=r.getStorage();Tr(a),u[n]=a,r.setStorage(u),yr(e,n,a),kr(0,e,n,a)}function wn(t,e,r,n,a){t.features.isLocalhost()&&Ve(`Use setTokens() instead if you want to add a set of tokens at same time.
558It prevents current tab from emitting unnecessary StorageEvent,
559which may cause false-positive authState change cross tabs.`),tn(0,e,r,n,a)}function rn(t,e){return t.getStorage()[e]}function Ft(t,e){var r=t.getStorage();return Object.keys(r).filter(function(n){var a=r[n];return st(a)&&e==="accessToken"||Ie(a)&&e==="idToken"||dt(a)&&e==="refreshToken"})[0]}function Sn(t,e){return new Promise(function(r){return r(rn(t,e))})}function nn(t){var e={},r=t.getStorage();return Object.keys(r).forEach(function(n){var a=r[n];st(a)?e.accessToken=a:Ie(a)?e.idToken=a:dt(a)&&(e.refreshToken=a)}),e}function xn(t){return new Promise(function(e){return e(nn(t))})}function On(t,e,r,n,a,u,c){var f=n.accessToken,m=n.idToken,E=n.refreshToken,k=function(ae,Re,Ye){yr(e,ae,Re),kr(0,e,ae,Re),Ye&&Ye(ae,Re)},C=function(ae,Re,Ye){gt(e,ae),xt(e,ae,Re),Ye&&Ye(ae,Re)};m&&Tr(m),f&&Tr(f);var Z=Ft(r,"idToken")||yt,ee=Ft(r,"accessToken")||ut,se=Ft(r,"refreshToken")||rt,ge=Object.assign(Object.assign(Object.assign({},m&&gr()({},Z,m)),f&&gr()({},ee,f)),E&&gr()({},se,E));r.setStorage(ge);var de=nn(r);m?k(Z,m,u):de.idToken&&C(Z,de.idToken,u),f?k(ee,f,a):de.accessToken&&C(ee,de.accessToken,a),E?k(se,E,c):de.refreshToken&&C(se,de.refreshToken,c)}function on(t,e,r){gt(t,r);var n=e.getStorage(),a=n[r];delete n[r],e.setStorage(n),xt(t,r,a)}function bn(t,e){return this.getTokens().then(function(r){return r.refreshToken}).then(function(r){return r?t.token.renewTokensWithRefresh({scopes:e.scopes},r).then(function(n){return Ie(e)?n.idToken:n.accessToken}):t.token.renew(e)})}function An(t,e,r,n){var a=e.renewPromise[n];if(a)return a;try{var u=rn(r,n);if(!u)throw new b("The tokenManager has no token for the key: "+n)}catch(c){return Promise.reject(c)}return gt(e,n),e.renewPromise[n]=bn.call(this,t,u).then(function(c){var f=r.getStorage();return on(e,r,n),tn(0,e,r,n,c),function(m,E,k,C){m.emitter.emit(Yr,E,k,C)}(e,n,c,f[n]),c}).catch(function(c){if(c.name==="OAuthError"||c.name==="AuthSdkError"){var f=r.getStorage(),m=f[n];

559m&&Zr(e,m)?(delete f[n],gt(e,n),r.setStorage(f),xt(e,n,m)):xt(e,n),c.tokenKey=n,vr(e,c)}throw c}).finally(function(){delete e.renewPromise[n]}),e.renewPromise[n]}function Pn(t,e){_r(t),e.clearStorage()}function sn(t){var e;try{e=JSON.parse(t)||{}}catch{e={}}return e}var an=function t(e,r){var n=this;$()(this,t),r=Object.assign({},kn,Se(r));var a=e.emitter;if(!a)throw new b("Emitter should be initialized before TokenManager");mt()&&(r._storageEventDelay=r._storageEventDelay||1e3);var u=Se({storageKey:r.storageKey,secure:r.secure});Gt()(r.storage)==="object"?u.storageProvider=r.storage:r.storage&&(u.storageType=r.storage);var c=e.storageManager.getTokenStorage(u),f={clock:_n.create(),options:r,emitter:a,expireTimeouts:{},renewPromise:{}};this.add=wn.bind(this,e,f,c),this.get=Sn.bind(this,c),this.remove=on.bind(this,f,c),this.clear=Pn.bind(this,f,c),this.renew=An.bind(this,e,f,c),this.on=f.emitter.on.bind(f.emitter),this.off=f.emitter.off.bind(f.emitter),this.hasExpired=Zr.bind(this,f),this.getTokens=xn.bind(this,c),this.setTokens=On.bind(this,e,f,c),this._getStorageKeyByType=Ft.bind(this,c),this._clearExpireEventTimeoutAll=_r.bind(this,f),this._getOptions=function(){return ye(r)},this._resetExpireEventTimeoutAll=En.bind(this,e,f,c),this._emitEventsForCrossTabsStorageUpdate=Tn.bind(this,f);var m=[];this.on(mr,function(E){if(r.autoRenew)if(function(C){var Z=!1;if(C.push(Date.now()),C.length>=10){var ee=C.shift();Z=C[C.length-1]-ee<3e4}return Z}(m)){var k=new b("Too many token renew requests");vr(f,k)}else n.renew(E).catch(function(){});else r.autoRemove&&n.remove(E)}),en(0,f,c),window.addEventListener("storage",function(E){var k=E.key,C=E.newValue,Z=E.oldValue;(!k||k===r.storageKey&&C!==Z)&&setTimeout(function(){return n._resetExpireEventTimeoutAll(),void n._emitEventsForCrossTabsStorageUpdate(C,Z)},r._storageEventDelay)})},un=function(){function t(){$()(this,t),this.queue=[],this.running=!1}return q()(t,[{key:"push",value:function(e,r){for(var n=this,a=arguments.length,u=new Array(a>2?a-2:0),c=2;c<a;c++)u[c-2]=arguments[c];return new Promise(function(f,m){n.queue.push({method:e,thisObject:r,args:u,resolve:f,reject:m}),n.run()})}},{key:"run",value:function(){var e=this;if(!this.running&&this.queue.length!==0){this.running=!0;var r=this.queue.shift(),n=r.method.apply(r.thisObject,r.args);s(n)?n.then(r.resolve,r.reject).finally(function(){e.running=!1,e.run()}):(r.resolve(n),this.running=!1,this.run())}}}]),t}();/*!
560 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
561 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
562 *
563 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
564 * Unless required by applicable law or agreed to in writing, software
565 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
566 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
567 *
568 * See the License for the specific language governing permissions and limitations under the License.
569 */function Un(t,e){return e=e||{},rr()?new Promise(function(u,c){(n=document.createElement("iframe")).style.display="none",a=function(f){if(f&&f.data&&f.origin===t.getIssuerOrigin()){try{var m=JSON.parse(f.data)}catch{return}if(m)return m.type==="FingerprintAvailable"?u(m.fingerprint):void(m.type==="FingerprintServiceReady"&&f.source.postMessage(JSON.stringify({type:"GetFingerprint"}),f.origin))}},sr(window,"message",a),n.src=t.getIssuerOrigin()+"/auth/services/devicefingerprint",document.body.appendChild(n),r=setTimeout(function(){c(new b("Fingerprinting timed out"))},e.timeout||15e3)}).finally(function(){clearTimeout(r),ir(window,"message",a),document.body.contains(n)&&n.parentElement.removeChild(n)}):Promise.reject(new b("Fingerprinting is not supported on this device"));var r,n,a}var Rn=i(25),Cn={isPending:!0,isAuthenticated:!1,idToken:null,accessToken:null,refreshToken:null},cn={updateAuthStatePromise:null,canceledTimes:0},jn=function(){function t(e){var r=this;if($()(this,t),!e.emitter)throw new b("Emitter should be initialized before AuthStateManager");this._sdk=e,this._pending=Object.assign({},cn),this._authState=Object.assign({},Cn),this._logOptions={},e.tokenManager.on(Wt,function(n,a){r._setLogOptions({event:Wt,key:n,token:a}),r.updateAuthState()}),e.tokenManager.on(Ht,function(n,a){r._setLogOptions({event:Ht,key:n,token:a}),r.updateAuthState()})}

569return q()(t,[{key:"_setLogOptions",value:function(e){this._logOptions=e}},{key:"getAuthState",value:function(){return this._authState}},{key:"updateAuthState",value:function(){var e=this;this._sdk.emitter.e&&this._sdk.emitter.e.authStateChange&&this._sdk.emitter.e.authStateChange.length||Ve("updateAuthState is an asynchronous method with no return, please subscribe to the latest authState update with authStateManager.subscribe(handler) method before calling updateAuthState.");var r=this._sdk.options,n=r.transformAuthState,a=r.devMode,u=this._sdk.tokenManager._getOptions(),c=u.autoRenew,f=u.autoRemove,m=function(Z){var ee=e._logOptions,se=ee.event,ge=ee.key,de=ee.token;Me().group("OKTA-AUTH-JS:updateAuthState: Event:".concat(se," Status:").concat(Z)),Me().log(ge,de),Me().log("Current authState",e._authState),Me().groupEnd(),e._logOptions={}},E=function(Z){var ee,se;ee=e._authState,se=Z,ee.isPending!==se.isPending||ee.isAuthenticated!==se.isAuthenticated||JSON.stringify(ee.idToken)!==JSON.stringify(se.idToken)||JSON.stringify(ee.accessToken)!==JSON.stringify(se.accessToken)||ee.error!==se.error?(e._authState=Z,e._sdk.emitter.emit("authStateChange",Object.assign({},Z)),a&&m("emitted")):a&&m("unchanged")},k=function(){return c||f};if(this._pending.updateAuthStatePromise){if(this._pending.canceledTimes>=10)return void(a&&m("terminated"));this._pending.updateAuthStatePromise.cancel()}var C=new Rn(function(Z,ee,se){se.shouldReject=!1,se(function(){e._pending.updateAuthStatePromise=null,e._pending.canceledTimes=e._pending.canceledTimes+1,a&&m("canceled")});var ge=function(de){C.isCanceled||(E(de),e._pending=Object.assign({},cn)),Z()};e._sdk.tokenManager.getTokens().then(function(de){var ae=de.accessToken,Re=de.idToken,Ye=de.refreshToken;if(C.isCanceled)Z();else{var Er=!1;ae&&e._sdk.tokenManager.hasExpired(ae)&&((Er=k())||(ae=null)),Re&&e._sdk.tokenManager.hasExpired(Re)&&((Er=k())||(Re=null));var hn={accessToken:ae,idToken:Re,refreshToken:Ye,isPending:Er,isAuthenticated:!(!ae||!Re)};(n?n(e._sdk,hn):Promise.resolve(hn)).then(function(wr){return ge(wr)}).catch(function(wr){return ge({accessToken:ae,idToken:Re,refreshToken:Ye,isAuthenticated:!1,isPending:!1,error:wr})})}})});this._pending.updateAuthStatePromise=C}},{key:"subscribe",value:function(e){this._sdk.emitter.on("authStateChange",e)}},{key:"unsubscribe",value:function(e){this._sdk.emitter.off("authStateChange",e)}}]),t}();function Mn(t){var e=function(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch{return!1}}();return function(){var r,n=W()(t);if(e){var a=W()(this).constructor;r=Reflect.construct(n,arguments,a)}else r=n.apply(this,arguments);return M()(this,r)}}var He=function(t,e,r,n){return new(r||(r=Promise))(function(a,u){function c(E){try{m(n.next(E))}catch(k){u(k)}}function f(E){try{m(n.throw(E))}catch(k){u(k)}}function m(E){var k;E.done?a(E.value):(k=E.value,k instanceof r?k:new r(function(C){C(k)})).then(c,f)}m((n=n.apply(t,e||[])).next())})},In=function(t,e){var r={};for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&e.indexOf(n)<0&&(r[n]=t[n]);if(t!=null&&typeof Object.getOwnPropertySymbols=="function"){var a=0;for(n=Object.getOwnPropertySymbols(t);a<n.length;a++)e.indexOf(n[a])<0&&Object.prototype.propertyIsEnumerable.call(t,n[a])&&(r[n[a]]=t[n[a]])}return r},Dn=i(26);function Ln(){var t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},e=arguments.length>1?arguments[1]:void 0,r=t.cookies||{};return r.secure===void 0&&(r.secure=e),r.sameSite===void 0&&(r.sameSite=r.secure?"none":"lax"),r.secure&&!e&&(Ve(`The current page is not being served with the HTTPS protocol.
570For security reasons, we strongly recommend using HTTPS.
571If you cannot use HTTPS, set "cookies.secure" option to false.`),r.secure=!1),r.sameSite!=="none"||r.secure||(r.sameSite="lax"),r}var Vt=function(t){K()(r,t);var e=Mn(r);function r(){var n,a=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};$()(this,r),n=e.call(this,Object.assign({httpRequestClient:H.a,storageUtil:a.storageUtil||Ue,cookies:Ln(a,r.features.isHTTPS()),storageManager:Object.assign({token:{storageTypes:["localStorage","sessionStorage","cookie"],useMultipleCookies:!0},cache:{storageTypes:["localStorage","sessionStorage","cookie"]},transaction:{storageTypes:["sessionStorage","localStorage","cookie"]}},a.storageManager)},a)),Object.assign(n.options.storageUtil,{getPKCEStorage:n.storageManager.getLegacyPKCEStorage.bind(n.storageManager),getHttpCache:n.storageManager.getHttpCache.bind(n.storageManager)}),n._pending={handleLogin:!1},n.options=Object.assign(n.options,{pkce:a.pkce!==!1,redirectUri:X(a.redirectUri,window.location.origin)}),n.userAgent=ve(a,"okta-auth-js/".concat("4.9.2")),a.maxClockSkew||a.maxClockSkew===0?n.options.maxClockSkew=a.maxClockSkew:n.options.maxClockSkew=ie,n.session={close:Ge.bind(null,I()(n)),exists:We.bind(null,I()(n)),get:je.bind(null,I()(n)),refresh:it.bind(null,I()(n)),setCookieAndRedirect:at.bind(null,I()(n))},n._tokenQueue=new un,n.token={prepareTokenParams:Kt.bind(null,I()(n)),exch

571angeCodeForTokens:fr.bind(null,I()(n)),getWithoutPrompt:Bt.bind(null,I()(n)),getWithPopup:Jr.bind(null,I()(n)),getWithRedirect:Gr.bind(null,I()(n)),parseFromUrl:qr.bind(null,I()(n)),decode:hr,revoke:Hr.bind(null,I()(n)),renew:Fr.bind(null,I()(n)),renewTokensWithRefresh:pr.bind(null,I()(n)),renewTokens:Vr.bind(null,I()(n)),getUserInfo:zr.bind(null,I()(n)),verify:lr.bind(null,I()(n)),isLoginRedirect:Nt.bind(null,I()(n))};var u=["decode","isLoginRedirect"];return Object.keys(n.token).forEach(function(c){if(!(u.indexOf(c)>=0)){var f=n.token[c];n.token[c]=un.prototype.push.bind(n._tokenQueue,f,null)}}),Object.assign(n.token.getWithRedirect,{_setLocation:function(c){window.location=c}}),Object.assign(n.token.parseFromUrl,{_getHistory:function(){return window.history},_getLocation:function(){return window.location},_getDocument:function(){return window.document}}),n.fingerprint=Un.bind(null,I()(n)),n.emitter=new Dn,n.tokenManager=new an(I()(n),a.tokenManager),n.authStateManager=new jn(I()(n)),n}return q()(r,[{key:"isInteractionRequired",value:function(){return Kr(this)}},{key:"isInteractionRequiredError",value:function(n){return $t(n)}},{key:"signIn",value:function(n){return this.features.isLocalhost()&&Ze("This method has been deprecated, please use signInWithCredentials() instead."),this.signInWithCredentials(n)}},{key:"signInWithCredentials",value:function(n){var a=this;n=ye(n||{});var u=function(c){return delete n.sendFingerprint,$e(a,"/api/v1/authn",n,c)};return n.sendFingerprint?this.fingerprint().then(function(c){return u({headers:{"X-Device-Fingerprint":c}})}):u()}},{key:"signInWithRedirect",value:function(){var n=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};return He(this,void 0,void 0,y.a.mark(function a(){var u,c,f;return y.a.wrap(function(m){for(;;)switch(m.prev=m.next){case 0:if(u=n.originalUri,c=In(n,["originalUri"]),!this._pending.handleLogin){m.next=3;break}return m.abrupt("return");case 3:return this._pending.handleLogin=!0,m.prev=4,u&&this.setOriginalUri(u),f=Object.assign({scopes:this.options.scopes||["openid","email","profile"]},c),m.next=9,this.token.getWithRedirect(f);case 9:return m.prev=9,this._pending.handleLogin=!1,m.finish(9);case 12:case"end":return m.stop()}},a,this,[[4,,9,12]])}))}},{key:"closeSession",value:function(){return this.tokenManager.clear(),this.session.close().catch(function(n){if(n.name==="AuthApiError"&&n.errorCode==="E0000007")return null;throw n})}},{key:"revokeAccessToken",value:function(n){return He(this,void 0,void 0,y.a.mark(function a(){var u;return y.a.wrap(function(c){for(;;)switch(c.prev=c.next){case 0:if(n){c.next=6;break}return c.next=3,this.tokenManager.getTokens();case 3:n=c.sent.accessToken,u=this.tokenManager._getStorageKeyByType("accessToken"),this.tokenManager.remove(u);case 6:if(n){c.next=8;break}return c.abrupt("return",Promise.resolve(null));case 8:return c.abrupt("return",this.token.revoke(n));case 9:case"end":return c.stop()}},a,this)}))}},{key:"revokeRefreshToken",value:function(n){return He(this,void 0,void 0,y.a.mark(function a(){var u;return y.a.wrap(function(c){for(;;)switch(c.prev=c.next){case 0:if(n){c.next=6;break}return c.next=3,this.tokenManager.getTokens();case 3:n=c.sent.refreshToken,u=this.tokenManager._getStorageKeyByType("refreshToken"),this.tokenManager.remove(u);case 6:if(n){c.next=8;break}return c.abrupt("return",Promise.resolve(null));case 8:return c.abrupt("return",this.token.revoke(n));case 9:case"end":return c.stop()}},a,this)}))}},{key:"signOut",value:function(n){return He(this,void 0,void 0,y.a.mark(function a(){var u,c,f,m,E,k,C,Z,ee,se,ge,de;return y.a.wrap(function(ae){for(;;)switch(ae.prev=ae.next){case 0:if(n=Object.assign({},n),u=window.location.origin,c=window.location.href,f=n.postLogoutRedirectUri||this.options.postLogoutRedirectUri||u,m=n.accessToken,E=n.refreshToken,k=n.revokeAccessToken!==!1,C=n.revokeRefreshToken!==!1,Z=n.idToken,ee=qe(this).logoutUrl,Z!==void 0){ae.next=14;break}return ae.next=13,this.tokenManager.getTokens();case 13:Z=ae.sent.idToken;case 14:if(!C||E!==void 0){ae.next=18;break}return ae.next=17,this.tokenManager.getTokens();case 17:E=ae.sent.refreshToken;case 18:if(!k||m!==void 0){ae.next=22;break}return ae.next=21,this.tokenManager.getTokens();case 21:m=ae.sent.accessToken;case 22:if(this.tokenManager.clear(),!C||!E){ae.next=26;break}return ae.next=26,this.revokeRefreshToken(E);case 26:if(!k||!m){ae.next=29;break}return ae.next=29,this.revokeAccessToken(m);case 29:if(Z){ae.next=31;break}return ae.abrupt("return",this.closeSession().then(function(){f===c?window.location.reload():window.location.assign(f)}));case 31:se=n.state,ge=Z.idToken,de=ee+"?id_token_hint="+encodeURIComponent(ge)+"&post_logout_redirect_uri="+encodeURIComponent(f),se&&(de+="&state="+encodeURIComponent(se)),window.location.assign(de);case 36:case"end":return ae.stop()}},a,this)}))}},{key:"webfinger",value:function(n){var a="/.well-known/webfinger"+_e(n);return Ee.get(this,a,{headers:{Accept:"application/jrd+json"}})}},{key:"isAuthenticated",value:function(n){return He(this,void 0,void 0,y.a.mark(function a(){var u,c,f,m,E=this;return y.a.wrap(function(k){for(;;)switch(k.prev=k.next){case 0:if((u=this.authStateManager.getAuthState()).isPending){k.next=3;break}return k.abrupt("return",Promise.resolve(u.isAuthenticated));case 3:return k.abrupt("return",new Promise(function(C){c=function(){E.authStateManager.unsubscribe(f),clearTimeout(m)},f=function(Z){var ee=Z.isAuthenticated;Z.isPending||(C(ee),c())},m=setTimeout(function(){C(!1),c()}

571,n||6e4),E.authStateManager.subscribe(f),E.authStateManager.updateAuthState()}));case 4:case"end":return k.stop()}},a,this)}))}},{key:"getUser",value:function(){return He(this,void 0,void 0,y.a.mark(function n(){var a,u,c;return y.a.wrap(function(f){for(;;)switch(f.prev=f.next){case 0:return a=this.authStateManager.getAuthState(),u=a.idToken,c=a.accessToken,f.abrupt("return",this.token.getUserInfo(c,u));case 2:case"end":return f.stop()}},n,this)}))}},{key:"getIdToken",value:function(){var n=this.authStateManager.getAuthState().idToken;return n?n.idToken:void 0}},{key:"getAccessToken",value:function(){var n=this.authStateManager.getAuthState().accessToken;return n?n.accessToken:void 0}},{key:"getRefreshToken",value:function(){var n=this.authStateManager.getAuthState().refreshToken;return n?n.refreshToken:void 0}},{key:"storeTokensFromRedirect",value:function(){return He(this,void 0,void 0,y.a.mark(function n(){var a,u;return y.a.wrap(function(c){for(;;)switch(c.prev=c.next){case 0:return c.next=2,this.token.parseFromUrl();case 2:a=c.sent,u=a.tokens,this.tokenManager.setTokens(u);case 5:case"end":return c.stop()}},n,this)}))}},{key:"setOriginalUri",value:function(n){n=n||window.location.href,Ue.getSessionStorage().setItem(Le,n)}},{key:"getOriginalUri",value:function(){return Ue.getSessionStorage().getItem(Le)||window.location.origin}},{key:"removeOriginalUri",value:function(){Ue.getSessionStorage().removeItem(Le)}},{key:"isLoginRedirect",value:function(){return Nt(this)}},{key:"handleLoginRedirect",value:function(n){return He(this,void 0,void 0,y.a.mark(function a(){var u,c=this;return y.a.wrap(function(f){for(;;)switch(f.prev=f.next){case 0:if(u=function m(E){var k=E.isPending;return He(c,void 0,void 0,y.a.mark(function C(){var Z,ee;return y.a.wrap(function(se){for(;;)switch(se.prev=se.next){case 0:if(!k){se.next=2;break}return se.abrupt("return");case 2:if(this.authStateManager.unsubscribe(m),Z=this.getOriginalUri(),this.removeOriginalUri(),!(ee=this.options.restoreOriginalUri)){se.next=11;break}return se.next=9,ee(this,Z);case 9:se.next=12;break;case 11:window.location.replace(Z);case 12:case"end":return se.stop()}},C,this)}))},this.authStateManager.subscribe(u),!n){f.next=6;break}this.tokenManager.setTokens(n),f.next=19;break;case 6:if(!this.isLoginRedirect()){f.next=18;break}return f.prev=7,f.next=10,this.storeTokensFromRedirect();case 10:f.next=16;break;case 12:throw f.prev=12,f.t0=f.catch(7),this.authStateManager.unsubscribe(u),f.t0;case 16:f.next=19;break;case 18:this.authStateManager.unsubscribe(u);case 19:case"end":return f.stop()}},a,this,[[7,12]])}))}},{key:"isPKCE",value:function(){return!!this.options.pkce}},{key:"hasResponseType",value:function(n){var a=!1;return a=Array.isArray(this.options.responseType)&&this.options.responseType.length?this.options.responseType.indexOf(n)>=0:this.options.responseType===n,a}},{key:"isAuthorizationCodeFlow",value:function(){return this.hasResponseType("code")}}]),r}(er);Vt.features=Vt.prototype.features=d,Object.assign(Vt,{constants:p,isInteractionRequiredError:$t});var $n=Vt;/*!
572 * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
573 * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
574 *
575 * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
576 * Unless required by applicable law or agreed to in writing, software
577 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
578 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
579 *
580 * See the License for the specific language governing permissions and limitations under the License.
581 *
582 */}])})},842:function(Xe,ue,w){"use strict";/*!
583 * cookie
584 * Copyright(c) 2012-2014 Roman Shtylman
585 * Copyright(c) 2015 Douglas Christopher Wilson
586 * MIT Licensed
587 */ue.parse=p,ue.serialize=d;var L=decodeURIComponent,h=encodeURIComponent,i=/^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;function p(y,z){if(typeof y!="string")throw new TypeError("argument str must be a string");for(var $={},j=z||{},q=y.split(";"),oe=j.decode||L,I=0;I<q.length;I++){var B=q[I],K=B.indexOf("=");if(!(K<0)){var U=B.substring(0,K).trim();if($[U]==null){var M=B.substring(K+1,B.length).trim();M[0]==='"'&&(M=M.slice(1,-1)),$[U]=x(M,oe)}}}return $}function d(y,z,$){var j=$||{},q=j.encode||h;if(typeof q!="function")throw new TypeError("option encode is invali

587d");if(!i.test(y))throw new TypeError("argument name is invalid");var oe=q(z);if(oe&&!i.test(oe))throw new TypeError("argument val is invalid");var I=y+"="+oe;if(j.maxAge!=null){var B=j.maxAge-0;if(isNaN(B)||!isFinite(B))throw new TypeError("option maxAge is invalid");I+="; Max-Age="+Math.floor(B)}if(j.domain){if(!i.test(j.domain))throw new TypeError("option domain is invalid");I+="; Domain="+j.domain}if(j.path){if(!i.test(j.path))throw new TypeError("option path is invalid");I+="; Path="+j.path}if(j.expires){if(typeof j.expires.toUTCString!="function")throw new TypeError("option expires is invalid");I+="; Expires="+j.expires.toUTCString()}if(j.httpOnly&&(I+="; HttpOnly"),j.secure&&(I+="; Secure"),j.sameSite){var K=typeof j.sameSite=="string"?j.sameSite.toLowerCase():j.sameSite;switch(K){case!0:I+="; SameSite=Strict";break;case"lax":I+="; SameSite=Lax";break;case"strict":I+="; SameSite=Strict";break;case"none":I+="; SameSite=None";break;default:throw new TypeError("option sameSite is invalid")}}return I}function x(y,z){try{return z(y)}catch{return y}}},843:function(Xe,ue,w){"use strict";function L(d){return d!==null&&typeof d=="object"}function h(d,x,y=".",z){if(!L(x))return h(d,{},y,z);const $=Object.assign({},x);for(const j in d){if(j==="__proto__"||j==="constructor")continue;const q=d[j];q!=null&&(z&&z($,j,q,y)||(Array.isArray(q)&&Array.isArray($[j])?$[j]=$[j].concat(q):L(q)&&L($[j])?$[j]=h(q,$[j],(y?`${y}.`:"")+j.toString(),z):$[j]=q))}return $}function i(d){return(...x)=>x.reduce((y,z)=>h(y,z,"",d),{})}const p=i();p.fn=i((d,x,y,z)=>{if(typeof d[x]<"u"&&typeof y=="function")return d[x]=y(d[x]),!0}),p.arrayFn=i((d,x,y,z)=>{if(Array.isArray(d[x])&&typeof y=="function")return d[x]=y(d[x]),!0}),p.extend=i,Xe.exports=p}}]);