1(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,698637,292930,e=>{"use strict";let t,n,r,o,i;var a=e.i(824627);class s extends Error{}function l(e,t){let n;if("string"!=typeof e)throw new s("Invalid token specified: must be a string");t||(t={});let r=+(!0!==t.header),o=e.split(".")[r];if("string"!=typeof o)throw new s(`Invalid token specified: missing part #${r+1}`);try{n=function(e){let t=e.replace(/-/g,"+").replace(/_/g,"/");switch(t.length%4){case 0:break;case 2:t+="==";break;case 3:t+="=";break;default:throw Error("base64 string is not of the correct length")}try{var n;return n=t,decodeURIComponent(atob(n).replace(/(.)/g,(e,t)=>{let n=t.charCodeAt(0).toString(16).toUpperCase();return n.length<2&&(n="0"+n),"%"+n}))}catch(e){return atob(t)}}(o)}catch(e){throw new s(`Invalid token specified: invalid base64 for part #${r+1} (${e.message})`)}try{return JSON.parse(n)}catch(e){throw new s(`Invalid token specified: invalid json for part #${r+1} (${e.message})`)}}s.prototype.name="InvalidTokenError";var u="/v1/auth/accesskey/exchange",d="/v1/auth/otp/verify",c="/v1/auth/otp/signin",p="/v1/auth/otp/signup",g={email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},h="/v1/auth/otp/signup-in",f="/v1/auth/magiclink/verify",v="/v1/auth/magiclink/signin",w="/v1/auth/magiclink/signup",m={email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},y="/v1/auth/magiclink/signup-in",b="/v1/auth/enchantedlink/verify",k="/v1/auth/enchantedlink/signin",I="/v1/auth/enchantedlink/signup",O="/v1/auth/enchantedlink/pending-session",S={email:"/v1/auth/enchantedlink/update/email"},j="/v1/auth/enchantedlink/signup-in",_="/v1/auth/oauth/authorize",U="/v1/auth/oauth/exchange",T="v1/auth/oauth/native/start",R="v1/auth/oauth/native/finish",x={getOneTapClientId:"/v1/auth/onetap/clientid/{provider}",exchangeOneTapIDToken:"/v1/auth/onetap/idtoken/exchange",verifyOneTapIDToken:"/v1/auth/onetap/idtoken/verify"},C="/v1/outbound/oauth/connect",D="/v1/auth/saml/authorize",A="/v1/auth/saml/exchange",E="/v1/auth/totp/verify",P="/v1/auth/totp/signup",$="/v1/auth/totp/update",q="/v1/auth/notp/whatsapp/signin",N="/v1/auth/notp/whatsapp/signup",L="/v1/auth/notp/whatsapp/signup-in",J="/v1/auth/notp/pending-session",M={start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},K={start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},F={start:"/v1/auth/webauthn/signup-in/start"},V={start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"},B="/v1/auth/password/signup",H="/v1/auth/password/signin",z="/v1/auth/password/reset",Z="/v1/auth/password/update",G="/v1/auth/password/replace",W="/v1/auth/password/policy",X="/v1/flow/start",Y="/v1/flow/next";let Q="<region>",ee=`https://api.${Q}descope.com`,et=()=>{let e={};return{headers(t){return e.Headers=JSON.stringify("function"==typeof t.entries?Object.fromEntries(t.entries()):t),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},retries(t){return e.Retries=t,this},build:()=>Object.keys(e).flatMap(t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[]).join("\n")}},en=[503,520,521,522,524,530],er=[100,5e3,5e3],eo=e=>new Promise(t=>setTimeout(t,e)),ei=e=>async function(...t){let n=await e(...t),r=0;for(;en.includes(n.status)&&r<er.length;)await eo(er[r]),n=await e(...t),r++;r>0&&(n.retries=r);let o=await n.text();return n.text=()=>Promise.resolve(o),n.json=()=>Promise.resolve(JSON.parse(o)),n.clone=()=>n,n};(tS=tT||(tT={})).get="GET",tS.delete="DELETE",tS.post="POST",tS.put="PUT",tS.patch="PATCH";let ea=({path:e,baseUrl:t,queryParams:n,projectId:r})=>{let o=r.slice(1,-27);t=t.replace(Q,o?o+".":"");let i=e?`${t.replace(/\/$/,"")}/${null==e?void 0:e.replace(/^\//,"")}`:t;if(n){let e=Object.keys(n);e.forEach((t,r)=>{i=`${i}${0===r?"?":""}${t}=${encodeURIComponent(n[t])}${r===e.length-1?"":"&"}`})}return i},es={"Content-Type":"application/json"};var el=(o=({baseUrl:e,projectId:n,baseConfig:r,refreshCookieName:o,logger:i,hooks:a,cookiePolicy:s,fetch:l})=>{let u,d=e||ee,c=((u=l||fetch)||null==i||i.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),i?async function(...e){if(!u)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");i.log(et().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build());let t=await ei(u)(...e);return i[t.ok?"log":"error"](await (async e=>{let t=await e.text();return et().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).retries(e.retries).build()})(t)),t}:ei(u)),p=async e=>{var i;let l,{path:u,body:p,headers:g,queryParams:h,method:f,token:v}=(null==a?void 0:a.beforeRequest)?a.beforeRequest(e):e,w=void 0===p?void 0:JSON.stringify(p),m={headers:((...e)=>new Headers(e.reduce((e,t)=>
1((Array.isArray(t)?t:t instanceof Headers?Array.from(t.entries()):t?Object.entries(t):[]).forEach(([t,n])=>{e[t]="function"==typeof n?n():n}),e),{})))(((e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}})(n,v),(l={"x-descope-sdk-session-id":(()=>{if(t)return t;let e=new Date,n=`${e.getUTCFullYear().toString()}-${(e.getUTCMonth()+1).toString().padStart(2,"0")}-${e.getUTCDate().toString().padStart(2,"0")}-${e.getUTCHours().toString().padStart(2,"0")}:${e.getUTCMinutes().toString().padStart(2,"0")}:${e.getUTCSeconds().toString().padStart(2,"0")}:${e.getUTCMilliseconds().toString()}`,r=Math.floor(1e3+9e3*Math.random());return t=`${n}-${r}`})(),"x-descope-sdk-name":"core-js","x-descope-sdk-version":"2.67.0","x-descope-project-id":n},o&&(l["x-descope-refresh-cookie-name"]=o),l),(null==r?void 0:r.baseHeaders)||{},(e=>{try{e=JSON.parse(e)}catch(e){return!1}return"object"==typeof e&&null!==e})(w)?es:{},g),method:f,body:w};null!==s&&(m.credentials=s||"include");let y=await c(ea({path:u,baseUrl:d,queryParams:h,projectId:n}),m);
1if((null==a?void 0:a.afterRequest)&&await a.afterRequest(e,null==y?void 0:y.clone()),null==a?void 0:a.transformResponse){let e=await y.json(),t=Object.fromEntries((function(e){if(!e)return[];let t=[],n=0;function r(){for(;n<e.length&&/\s/.test(e.charAt(n));)n+=1;return n<e.length}for(;n<e.length;){let o=n,i,a,s=!1;for(;r();)if(","===e.charAt(n)){for(i=n,n+=1,r(),a=n;n<e.length&&function(){let t=e.charAt(n);return"="!==t&&";"!==t&&","!==t}();)n+=1;if(n<e.length&&"="===e.charAt(n)){s=!0,n=a,t.push(e.substring(o,i));break}n=i+1}else n+=1;(!s||n>=e.length)&&t.push(e.substring(o,e.length))}return t})((null==(i=y.headers)?void 0:i.get("set-cookie"))||"").map(e=>{let t=e.split(";")[0],n=t.indexOf("=");return n<1?null:[t.substring(0,n).trim(),t.substring(n+1).trim()]}).filter(Boolean)),n=Object.assign(Object.assign({},y),{json:()=>Promise.resolve(e),cookies:t});return n.clone=()=>n,a.transformResponse(n)}return y};return{get:(e,{headers:t,queryParams:n,token:r}={})=>p({path:e,headers:t,queryParams:n,body:void 0,method:tT.get,token:r}),post:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tT.post,token:o}),patch:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tT.patch,token:o}),put:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tT.put,token:o}),delete:(e,{headers:t,queryParams:n,token:r}={})=>p({path:e,headers:t,queryParams:n,body:void 0,method:tT.delete,token:r}),hooks:a,buildUrl:(e,t)=>ea({projectId:n,baseUrl:d,path:e,queryParams:t})}},e=>{var t;return o(Object.assign(Object.assign({},e),{hooks:{beforeRequest:t=>{var n;let r=[].concat((null==(n=e.hooks)?void 0:n.beforeRequest)||[]);return null==r?void 0:r.reduce((e,t)=>t(e),t)},afterRequest:async(t,n)=>{var r;let o=[].concat((null==(r=e.hooks)?void 0:r.afterRequest)||[]);0!=o.length&&(await Promise.allSettled(null==o?void 0:o.map(e=>e(t,null==n?void 0:n.clone())))).forEach(t=>{var n;return"rejected"===t.status&&(null==(n=e.logger)?void 0:n.error(t.reason))})},transformResponse:null==(t=e.hooks)?void 0:t.transformResponse}}))});function eu(e,t,n){var r;let o=ed(e);if(t){if(!(null==o?void 0:o.tenants)&&(null==o?void 0:o.dct)===t)return(null==o?void 0:o[n])||[];o=null==(r=null==o?void 0:o.tenants)?void 0:r[t]}let i=null==o?void 0:o[n];return Array.isArray(i)?i:[]}function ed(e){if("string"!=typeof e||!e)throw Error("Invalid token provided");return l(e)}function ec(e){let{exp:t}=ed(e);return(new Date).getTime()/1e3>t}function ep(e){let t=ed(e),n=Object.keys(null==t?void 0:t.tenants);return Array.isArray(n)?n:[]}function eg(e,t){return eu(e,t,"permissions")}function eh(e,t){return eu(e,t,"roles")}let ef=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function ev(e,t){var n;let r=await e,o={code:r.status,ok:r.ok,response:r},i=await r.clone().json();return r.ok?o.data=t?t(i):i:(o.error=i,429===r.status&&Object.assign(o.error,{retryAfter:Number.parseInt(null==(n=r.headers)?void 0:n.get("retry-after"))||0})),o}function ew(e){var t;return(null==(t=ed(e))?void 0:t.dct)||""}let em=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),ey=(e,t)=>(n=t)=>t=>{let r=e.filter(e=>e(t));return!(r.length<e.length)&&(n?n.replace("{val}",t):r.join(" OR "))},eb=(...e)=>({validate:t=>(e.forEach(e=>{let n=e(t);if(n)throw Error(n)}),!0)}),ek=e=>t=>e.test(t),eI=ek(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),eO=ek(/^\+[1-9]{1}[0-9]{3,14}$/),eS=em(eI,'"{val}" is not a valid email'),ej=em(eO,'"{val}" is not a valid phone number'),e_=em(e=>e.length>=1,"Minimum length is 1"),eU=em(e=>"string"==typeof e,"Input is not a string"),eT=em(e=>Array.isArray(e),"Input is not an array"),eR=em(e=>"boolean"==typeof e,"Input is not a boolean"),ex=em(e=>void 0===e,"Input is defined"),eC=ey([eU(),ex()],"Input is not a string or undefined"),eD=ey([eT(),eR()],"Input is not an array or boolean"),eA=(...e)=>t=>(...n)=>(e.forEach((e,t)=>eb(...e).validate(n[t])),t(...n)),eE=e=>[eU(`"${e}" must be a string`)],eP=e=>[eC(`"${e}" must be string or undefined`)],e$=e=>[eU(`"${e}" must be a string`),e_(`"${e}" must not be empty`)],eq=e=>[eU(`"${e}" must be a string`),eS()],eN=e=>[eU(`"${e}
1" must be a string`),ej()],eL=eA(e$("accessKey")),eJ=(e,t,n)=>(t.forEach(t=>{let r=t.split("."),o=r.shift(),i=e;for(;r.length>0;){if(i=i[o],!o||!i)throw Error(`Invalid path "${t}", "${o}" is missing or has no value`);o=r.shift()}if("function"!=typeof i[o])throw Error(`"${t}" is not a function`);let a=i[o];i[o]=n(a)}),e),eM=({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||1e3,1e3),timeoutMs:Math.min(t||6e5,6e5)});(tj=tR||(tR={})).sms="sms",tj.voice="voice",tj.whatsapp="whatsapp",tj.im="im",(tx||(tx={})).email="email";let eK=Object.assign(Object.assign({},tR),tx);(t_=tC||(tC={})).waiting="waiting",t_.running="running",t_.completed="completed",t_.failed="failed";let eF=e$("loginId"),eV=eA(e$("token")),eB=eA(eF),eH=eA(e$("pendingRef")),ez=eA(eF,eq("email")),eZ=eA(e$("flowId")),eG=eA(e$("executionId"),e$("stepId"),e$("interactionId")),eW=e$("loginId"),eX=eA(e$("token")),eY=eA(eW),eQ=eA(eW,eN("phone")),e0=eA(eW,eq("email")),e1=Object.keys(eK).filter(e=>e!==tR.voice&&e!==tR.im);(tU=tD||(tD={})).facebook="facebook",tU.github="github",tU.google="google",tU.microsoft="microsoft",tU.gitlab="gitlab",tU.apple="apple",tU.discord="discord",tU.linkedin="linkedin",tU.slack="slack";let e3=eA(e$("code")),e2=eA(e$("appId")),e6=e$("loginId"),e5=eA(e6,e$("code")),e4=eA(e6),e9=eA(e6,eN("phone")),e7=eA(e6,eq("email")),e8=eA(e$("tenant")),te=eA(e$("code")),tt=e=>({start:e8((t,n,r,o,i,a,s,l)=>ev(e.post(D,r||{},Object.assign({queryParams:Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({tenant:t},n&&{redirectURL:n}),i&&{ssoId:i}),a&&{forceAuthn:"true"}),s&&{loginHint:s}),l&&{initiatedEmail:t})},o&&{token:o})))),exchange:te(t=>ev(e.post(A,{code:t})))}),tn=e$("loginId"),tr=eA(tn,e$("code")),to=eA(tn),ti=eA(tn),ta=e$("loginId"),ts=e$("newPassword"),tl=eA(ta,e$("password")),tu=eA(ta),td=eA(ta,ts),tc=eA(ta,e$("oldPassword"),ts),tp=eE("loginId"),tg=e$("loginId"),th=e$("origin"),tf=eA(tg,th,e$("name")),tv=eA(tg,th),tw=eA(tp,th),tm=eA(tg,th,eP("token")),ty=eA(e$("transactionId"),e$("response")),tb=eA(eE("loginId")),tk=eA(e$("pendingRef")),tI=eA(e$("token")),tO=eA(eP("token"));var tS,tj,t_,tU,tT,tR,tx,tC,tD,tA=Object.assign(eA([em((i=e$("projectId"),e=>eb(...i).validate(((e,t,n)=>{let r=(Array.isArray(t)?t.join("."):String(t)).replace(/\[\\?("|')?(\w|d)+\\?("|')?\]/g,(e,t,n)=>"."+n).split("."),o=r.length,i=0,a=e===Object(e)?e:void 0;for(;null!=a&&i<o;)a=a[r[i++]];return i&&i===o&&void 0!==a?a:n})(e,"projectId"))))()])(e=>{var t;let n,{projectId:r,logger:o,baseUrl:i,cookiePolicy:s,baseHeaders:l={},refreshCookieName:D,fetch:A}=e;return{accessKey:(n=t=el({baseUrl:i,projectId:r,logger:o,hooks:{get beforeRequest(){var Q;return null==(Q=e.hooks)?void 0:Q.beforeRequest}
1,get afterRequest(){var ee;return null==(ee=e.hooks)?void 0:ee.afterRequest},get transformResponse(){var et;return null==(et=e.hooks)?void 0:et.transformResponse}},cookiePolicy:s,baseConfig:{baseHeaders:l},refreshCookieName:D,fetch:A}),{exchange:eL((e,t)=>ev(n.post(u,{loginOptions:t},{token:e})))}),otp:{verify:Object.keys(eK).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e5((e,r)=>ev(t.post(ef(d,n),{code:r,loginId:e})))}),{}),signIn:Object.keys(eK).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e4((e,r={},o)=>{var{providerId:i}=r,s=(0,a.__rest)(r,["providerId"]);return ev(t.post(ef(c,n),{loginId:e,loginOptions:s,providerId:i},{token:o}))})}),{}),signUp:Object.keys(eK).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e4((e,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return ev(t.post(ef(p,n),{loginId:e,user:r,loginOptions:s,providerId:i}))})}),{}),signUpOrIn:Object.keys(eK).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e4((e,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return ev(t.post(ef(h,n),{loginId:e,loginOptions:i,providerId:o}))})}),{}),update:{email:e7((e,n,r,o)=>ev(t.post(g.email,Object.assign({loginId:e,email:n},o),{token:r}))),phone:Object.keys(tR).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e9((e,r,o,i)=>ev(t.post(ef(g.phone,n),Object.assign({loginId:e,phone:r},i),{token:o})))}),{})}},magicLink:{verify:eX(e=>ev(t.post(f,{token:e}))),signIn:e1.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eY((e,r,o={},i)=>{var{providerId:s}=o,l=(0,a.__rest)(o,["providerId"]);return ev(t.post(ef(v,n),{loginId:e,URI:r,loginOptions:l,providerId:s},{token:i}))})}),{}),signUp:e1.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eY((e,r,o,i={})=>{var{providerId:s}=i,l=(0,a.__rest)(i,["providerId"]);return ev(t.post(ef(w,n),{loginId:e,URI:r,user:o,loginOptions:l,providerId:s}))})}),{}),signUpOrIn:e1.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eY((e,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return ev(t.post(ef(y,n),{loginId:e,URI:r,loginOptions:s,providerId:i}))})}),{}),update:{email:e0((e,n,r,o,i)=>ev(t.post(m.email,Object.assign({loginId:e,email:n,URI:r},i),{token:o}))),phone:Object.keys(tR).filter(e=>e!==tR.voice).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eQ((e,r,o,i,a)=>ev(t.post(ef(m.phone,n),Object.assign({loginId:e,phone:r,URI:o},a),{token:i})))}),{})}},enchantedLink:{verify:eV(e=>ev(t.post(b,{token:e}))),signIn:eB((e,n,r={},o)=>{var{providerId:i}=r,s=(0,a.__rest)(r,["providerId"]);return ev(t.post(ef(k,eK.email),{loginId:e,URI:n,loginOptions:s,providerId:i},{token:o}))}),signUpOrIn:eB((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return ev(t.post(ef(j,eK.email),{loginId:e,URI:n,loginOptions:i,providerId:o}))}),signUp:eB((e,n,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return ev(t.post(ef(I,eK.email),{loginId:e,URI:n,user:r,loginOptions:s,providerId:i}))}),waitForSession:eH((e,n)=>new Promise(r=>{let o,{pollingIntervalMs:i,timeoutMs:a}=eM(n),s=setInterval(async()=>{let n=await t.post(O,{pendingRef:e});n.ok&&(clearInterval(s),o&&clearTimeout(o),r(ev(Promise.resolve(n))))},i);o=setTimeout(()=>{r({error:{errorDescription:`Session polling timeout exceeded: ${a}ms`,errorCode:"0"},ok:!1}),clearInterval(s)},a)})),update:{email:ez((e,n,r,o,i)=>ev(t.post(S.email,Object.assign({loginId:e,email:n,URI:r},i),{token:o})))}},oauth:{start:Object.assign((e,n,r,o,i)=>ev(t.post(_,r||{},{queryParams:Object.assign(Object.assign({provider:e},n&&{redirectURL:n}),i&&{loginHint:i}),token:o})),Object.keys(tD).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:(e,r,o,i)=>ev(t.post(_,r||{},{queryParams:Object.assign(Object.assign({provider:n},e&&{redirectURL:e}),i&&{loginHint:i}),token:o}))}),{})),exchange:e3(e=>ev(t.post(U,{code:e}))),startNative:(e,n,r)=>ev(t.post(T,{provider:e,loginOptions:n,implicit:r})),finishNative:(e,n,r,o,i)=>ev(t.post(R,{provider:e,stateId:n,user:r,code:o,idToken:i})),getOneTapClientId:e=>ev(t.get(x.getOneTapClientId.replace("{provider}",e))),verifyOneTapIDToken:(e,n,r,o)=>ev(t.post(x.verifyOneTapIDToken,{provider:e,idToken:n,nonce:r,loginOptions:o}
1)),exchangeOneTapIDToken:(e,n,r,o)=>ev(t.post(x.exchangeOneTapIDToken,{provider:e,idToken:n,nonce:r,loginOptions:o}))},outbound:{connect:e2((e,n,r)=>{let o=null==n?void 0:n.tenantId,i=null==n?void 0:n.tenantLevel;return null==n||delete n.tenantId,null==n||delete n.tenantLevel,ev(t.post(C,{appId:e,tenantId:o,tenantLevel:i,options:n},{token:r}))})},sso:tt(t),saml:tt(t),totp:{signUp:to((e,n)=>ev(t.post(P,{loginId:e,user:n}))),verify:tr((e,n,r,o)=>ev(t.post(E,{loginId:e,code:n,loginOptions:r},{token:o}))),update:ti((e,n)=>ev(t.post($,{loginId:e},{token:n})))},notp:{signUpOrIn:tb((e,n={})=>{var{providerId:r}=n,o=(0,a.__rest)(n,["providerId"]);return ev(t.post(L,{loginId:e,loginOptions:o,providerId:r}))}),signUp:tb((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return ev(t.post(N,{loginId:e,user:n,providerId:o,loginOptions:i}))}),signIn:tb((e,n={},r)=>{var{providerId:o}=n,i=(0,a.__rest)(n,["providerId"]);return ev(t.post(q,{loginId:e,loginOptions:i,providerId:o},{token:r}))}),waitForSession:tk((e,n)=>new Promise(r=>{let o,{pollingIntervalMs:i,timeoutMs:a}=eM(n),s=setInterval(async()=>{let n=await t.post(J,{pendingRef:e});n.ok&&(clearInterval(s),o&&clearTimeout(o),r(ev(Promise.resolve(n))))},i);o=setTimeout(()=>{r({error:{errorDescription:`Session polling timeout exceeded: ${a}ms`,errorCode:"0"},ok:!1}),clearInterval(s)},a)}))},webauthn:{signUp:{start:tf((e,n,r,o,i)=>ev(t.post(M.start,{user:{loginId:e,name:r},origin:n,loginOptions:i,passkeyOptions:o}))),finish:ty((e,n)=>ev(t.post(M.finish,{transactionId:e,response:n})))},signIn:{start:tw((e,n,r,o,i)=>ev(t.post(K.start,{loginId:e,origin:n,loginOptions:r,passkeyOptions:i},{token:o}))),finish:ty((e,n)=>ev(t.post(K.finish,{transactionId:e,response:n})))},signUpOrIn:{start:tv((e,n,r,o)=>ev(t.post(F.start,{loginId:e,origin:n,loginOptions:o,passkeyOptions:r})))},update:{start:tm((e,n,r,o,i)=>ev(t.post(V.start,{loginId:e,origin:n,passkeyOptions:o,mfa:i},{token:r}))),finish:ty((e,n)=>ev(t.post(V.finish,{transactionId:e,response:n})))}},password:{signUp:tl((e,n,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return ev(t.post(B,{loginId:e,password:n,user:r,loginOptions:s,providerId:i}))}),signIn:tl((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return ev(t.post(H,{loginId:e,password:n,loginOptions:i,providerId:o}))}),sendReset:tu((e,n,r)=>ev(t.post(z,{loginId:e,redirectUrl:n,templateOptions:r}))),update:td((e,n,r)=>ev(t.post(Z,{loginId:e,newPassword:n},{token:r}))),replace:tc((e,n,r)=>ev(t.post(G,{loginId:e,oldPassword:n,newPassword:r}))),policy:()=>ev(t.get(W))},flow:{start:eZ((e,n,r,o,i,a,s,l=!1)=>ev(t.post(X,{flowId:e,options:n,conditionInteractionId:r,interactionId:o,componentsVersion:i,flowVersions:a,input:s,isCustomScreen:l}))),next:eG((e,n,r,o,i,a,s=!1)=>ev(t.post(Y,{executionId:e,stepId:n,interactionId:r,version:o,componentsVersion:i,input:a,isCustomScreen:s})))},refresh:tO((e,n,r,o)=>{let i={};return r&&(i.externalToken=r),ev(t.post(o?"/v1/auth/try-refresh":"/v1/auth/refresh",i,{token:e,queryParams:n}))}),selectTenant:eA([eU("tenantId")],[eC('"token" must be string or undefined')])((e,n)=>ev(t.post("/v1/auth/tenant/select",{tenant:e},{token:n}))),logout:tO(e=>ev(t.post("/v1/auth/logout",{},{token:e}))),logoutAll:tO(e=>ev(t.post("/v1/auth/logoutall",{},{token:e}))),me:tO(e=>ev(t.get("/v1/auth/me",{token:e}))),myTenants:eA([eD('"tenants" must a string array or a boolean')],[eC('"token" must be string or undefined')])((e,n)=>{let r={};return"boolean"==typeof e?r.dct=e:r.ids=e,ev(t.post("/v1/auth/me/tenants",r,{token:n}))}),history:tO(e=>ev(t.get("/v1/auth/me/history",{token:e}))),isJwtExpired:tI(ec),getTenants:tI(ep),getJwtPermissions:tI(eg),getJwtRoles:tI(eh),getCurrentTenant:tI(ew),httpClient:t}}),{DeliveryMethods:eK});function tE(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)"__proto__"!==r&&(e[r]=n[r])}return e}e.s(["default",0,tA,"wrapWith",0,eJ],292930);var tP=function e(t,n){function r(e,r,o){if("u">typeof document){"number"==typeof(o=tE({},n,o)).expires&&(o.expires=new Date(Date.now()+864e5*o.expires)),o.expires&&(o.expires=o.expires.toUTCString()),e=encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g,decode
1URIComponent).replace(/[()]/g,escape);var i="";for(var a in o)o[a]&&(i+="; "+a,!0!==o[a]&&(i+="="+o[a].split(";")[0]));return document.cookie=e+"="+t.write(r,e)+i}}return Object.create({set:r,get:function(e){if("u">typeof document&&(!arguments.length||e)){for(var n=document.cookie?document.cookie.split("; "):[],r={},o=0;o<n.length;o++){var i=n[o].split("="),a=i.slice(1).join("=");try{var s=decodeURIComponent(i[0]);if(s in r||(r[s]=t.read(a,s)),e===s)break}catch(e){}}return e?r[e]:r}},remove:function(e,t){r(e,"",tE({},t,{expires:-1}))},withAttributes:function(t){return e(this.converter,tE({},this.attributes,t))},withConverter:function(t){return e(tE({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(n)},converter:{value:Object.freeze(t)}})}({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,decodeURIComponent)}},{path:"/"}),t$={default:"endpoint"},tq="Blocked by CSP",tN="The endpoint parameter is not a valid URL",tL="Failed to load the JS script of the agent",tJ="9319",tM="https://fpnpmcdn.net/v<version>/<apiKey>/loader_v<loaderVersion>.js";function tK(e){var t,n,r,o,i,a,s;return(t=function(){return new Promise(function(t,n){if(function(e){if(URL.prototype)try{return new URL(e,location.href),!1}catch(e){if(e instanceof Error&&"TypeError"===e.name)return!0;throw e}}(e))throw Error(tN);var r=document.createElement("script"),o=function(){var e;return null==(e=r.parentNode)?void 0:e.removeChild(r)},i=document.head||document.getElementsByTagName("head")[0];r.onload=function(){o(),t()},r.onerror=function(){o(),n(Error(tL))},r.async=!0,r.src=e,i.appendChild(r)})},n=function(){throw Error(tq)},o=document,i="securitypolicyviolation",a=function(t){var n=new URL(e,location.href),o=t.blockedURI;o!==n.href&&o!==n.protocol.slice(0,-1)&&o!==n.origin||(r=t,s())},o.addEventListener(i,a),s=function(){return o.removeEventListener(i,a)},Promise.resolve().then(t).then(function(e){return s(),e},function(e){return new Promise(function(e){var t=new MessageChannel;t.port1.onmessage=function(){return e()},t.port2.postMessage(null)}).then(function(){if(s(),r)return n(r);throw e})})).then(tF)}function tF(){var e,t,n=window,r="__fpjs_p_l_b",o=n[r];if((null==(t=null==(e=Object.getOwnPropertyDescriptor)?void 0:e.call(Object,n,r))?void 0:t.configurable)?delete n[r]:t&&!t.writable||(n[r]=void 0),"function"!=typeof(null==o?void 0:o.load))throw Error(tJ);return o}let tV="3.2.0",tB="u">typeof window,tH=`https://descopecdn.com/npm/oidc-client-ts@${tV}/dist/browser/oidc-client-ts.min.js`,tz=`https://cdn.jsdelivr.net/npm/oidc-client-ts@${tV}/dist/browser/oidc-client-ts.min.js`,tZ=["/v1/auth/refresh","/v1/auth/try-refresh","/v1/auth/me","/v1/auth/me/tenants","/v1/auth/me/history"],tG=e=>{try{return l(e).exp}catch(e){return null}},tW=e=>{let{access_token:t,id_token:n,refresh_token:r,refresh_expire_in:o}=e,i=(0,a.__rest)(e,["access_token","id_token","refresh_token","refresh_expire_in"]);return Object.assign({sessionJwt:e.sessionJwt||t,idToken:n,refreshJwt:e.refreshJwt||r,sessionExpiration:e.sessionExpiration||(e=>{let{expires_in:t,expires_at:n,access_token:r}=e;return n||(t?Math.floor(Date.now()/1e3)+t:r?tG(r):void 0)})(e),cookieExpiration:e.cookieExpiration||(e=>{let{refresh_expire_in:t,refresh_token:n}=e;return t?Math.floor(Date.now()/1e3)+t:tG(n)})(e)},i)},tX=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce((n,r)=>{var o;return n[r]=[].concat((null==(o=e.hooks)?void 0:o[r])||[]).concat((null==t?void 0:t[r])||[]),n},null!=(n=e.hooks)?n:e.hooks={}),e},tY=async e=>{if(!(null==e?void 0:e.ok))return{};let t=await (null==e?void 0:e.clone().json());return tW((null==t?void 0:t.authInfo)||t||{})},tQ=(e,t)=>{if(!((null==t?void 0:t.status)>=400&&(null==t?void 0:t.status)<500))return!1;let n=(null==e?void 0:e.path)||"";return tZ.includes(n)},t0=void 0!==n||tB&&void 0!==window.localStorage,t1=(e,t)=>{var r,o;return null==(o=null==(r=n||tB&&window.localStorage)?void 0:r.setItem)?void 0:o.call(r,e,t)},t3=e=>{var t,r;return null==(r=null==(t=n||tB&&window.localStorage)?void 0:t.getItem)?void 0:r.call(t,e)},t2=e=>{var t,r;return null==(r=null==(t=n||tB&&window.localStorage)?void 0:t.removeItem)?void 0:r.call(t,e)},t6=e=>{var t,r,o,i,a;return null!=(a=null!=(r=null==(t=null==n?void 0:n.key)?void 0:t.call(n,e))?r:tB&&(null==(i=null==(o=window.localStorage)?void 0:o.key)?void 0:i.call(o,e)))?a:null},t5=e=>{var t,n;return tB&&(null==(n=null==(t=window.localStorage)?void 0:t.getItem)?void 0:n.call(t,e))||null},t4=e=>{var t,n;try{tB&&(null==(n=null==(t=window.localStorage)?void 0:t.removeItem)||n.call(t,e))}catch(e){}},t9=(...e)=>{console.debug(...e)},t7=(...e)=>{console.warn(...e)},t8="DSRCN";function ne(e,t,n){if(t){let{cookieDomain:r,cookiePath:o,cookieSameSite:i,cookieExpiration:a,cookieSecure:s}=n,l=new Date(1e3*a),u=nt(r);tP.set(e,t,{path:o,domain:u?r:void 0,expires:l,sameSite:i,secure:s})}}function nt(e){let t=window.location.hostname.split("."),n=null==e?void 0:e.split(".");return t.slice(-(null==n?void 0:n.length)).join(".")===e}let nn=e=>(null==e?void 0:e.cookieName)||"DS",nr=e=>(null==e?void 0:e.cookieName)||"DSR";function no(e="",t){return tP.get(nr(t))||t3(`${e}DSR`)||""}function ni(e="",t){return tP.get(nn(t))||t3(`${e}DS`)||""}function na(e=""){return t3(`${e}DSI`)||""}function ns(e="",t,n,r){t2(`${e}DSR`),t2(`${e}DS`),t2(`${e}DSI`),t2(`${e}${t8}`);let o=nn(t);tP.remove(o,null==r?void 0:r.session);let i=nr(n);tP.remove(i,null==r?void 0:r.refresh)}let nl=tB&&(null==localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",nu=(e=!1)=>{let t=t3("fp");if(!t)return null;let n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},nd=async(e,t=nl)=>{try{var n,r,o,i,s,l,u,d,c,p,g,h,f,v,w,m;let y;
1if(nu())return;let b=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),k=new URL(t);k.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";let I=new URL(t);I.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";let O=I.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",S=((n={apiKey:e,endpoint:[k.toString(),t$],scriptUrlPattern:[O,tM]}).scriptUrlPattern,c=n.token,p=n.apiKey,g=void 0===p?c:p,h=(0,a.__rest)(n,["scriptUrlPattern","token","apiKey"]),f=null!==(r="scriptUrlPattern",d=Object.prototype.hasOwnProperty.call(n,r)?n[r]:void 0)&&void 0!==d?d:tM,w=(s=[],l=function(){s.push({time:new Date,state:document.visibilityState})},o=document,i="visibilitychange",o.addEventListener(i,l,void 0),u=function(){return o.removeEventListener(i,l,void 0)},l(),v=[s,u])[0],m=v[1],Promise.resolve().then(function(){if(!g||"string"!=typeof g)throw Error("API key required");return function(e,t){var n,r,o,i,s,l,u=[],d=(n=(0,a.__spreadArray)([],e,!0),r={current:function(){return n[0]},postpone:function(){var e=n.shift();void 0!==e&&n.push(e)},exclude:function(){n.shift()}},s=0,o=function(){return Math.random()*Math.min(3e3,100*Math.pow(2,s++))},i=new Set,[r.current(),function(e,t){var n,a=t instanceof Error?t.message:"";if(a===tq||a===tN)r.exclude(),n=0;else if(a===tJ)r.exclude();else if(a===tL){var s=Date.now()-e.getTime()<50,l=r.current();l&&s&&!i.has(l)&&(i.add(l),n=0),r.postpone()}else r.postpone();var u=r.current();return void 0===u?void 0:[u,null!=n?n:e.getTime()+o()-Date.now()]}]),c=d[0],p=d[1];if(void 0===c)return Promise.reject(TypeError("The list of script URL patterns is empty"));var g=function(e){var n=new Date,r=function(t){return u.push({url:e,startedAt:n,finishedAt:new Date,error:t})},o=t(e);return o.then(function(){return r()},r),o.catch(function(e){if(null!=l||(l=e),u.length>=5)throw l;var t=p(n,e);if(!t)throw l;var r=t[0],o=t[1];return new Promise(function(e){return setTimeout(e,o)}).then(function(){return g(r)})})};return g(c).then(function(e){return[e,u]})}((Array.isArray(f)?f:[f]).map(function(e){var t,n;return t=String(e),n=encodeURIComponent,t.replace(/<[^<>]+>/g,function(e){return"<version>"===e?"3":"<apiKey>"===e?n(g):"<loaderVersion>"===e?n("3.11.6"):e})}),tK)}).catch(function(e){throw m(),e instanceof Error&&e.message===tJ?Error(tL):e}).then(function(e){var t=e[0],n=e[1];return m(),t.load((0,a.__assign)((0,a.__assign)({},h),{ldi:{attempts:n,visibilityStates:w}}))})),j=await S,{requestId:_}=await j.get({linkedId:b});y={value:{vsid:b,vrid:_},expiry:(new Date).getTime()+864e5},t1("fp",JSON.stringify(y))}catch(e){console.warn("Could not load fingerprint",e)}},nc=e=>{let t=nu(!0);return t&&e.body&&(e.body.fpData=t),e},np="descopeFlowNonce",ng="X-Descope-Flow-Nonce",nh="/v1/flow/start",nf="/v1/flow/next",nv=(e,t=np)=>`${t}${e}`,nw=e=>{var t;return(null==(t=/.*\|#\|(.*)/.exec(e))?void 0:t[1])||null},nm=e=>{var t;return e.path===nf&&(null==(t=e.body)?void 0:t.executionId)?nw(e.body.executionId):null},ny="dls_last_user_login_id",nb="dls_last_user_display_name",nk=()=>t3(ny),nI=()=>t3(nb),nO=e=>async(...t)=>{t[1]=t[1]||{};let[,n={}]=t,r=nk(),o=nI();return r&&(null!=n.lastAuth||(n.lastAuth={}),n.lastAuth.loginId=r,n.lastAuth.name=o),await e(...t)},nS="DSLI",nj=e=>async(...t)=>{let n=await e(...t);return t4(nS),n};function n_(){let e=[];return{pub:t=>{e.forEach(e=>e(t))},sub:t=>{let n=e.push(t)-1;return()=>e.splice(n,1)}}}async function nU(e){var t;let n,r=((n=JSON.parse(e)).publicKey.challenge=nE(n.publicKey.challenge),n.publicKey.user.id=nE(n.publicKey.user.id),null==(t=n.publicKey.excludeCredentials)||t.forEach(e=>{e.id=nE(e.id)}),n);try{let e=await navigator.credentials.create(r);return JSON.stringify({id:e.id,rawId:nP(e.rawId),type:e.type,response:{attestationObject:nP(e.response.attestationObject),clientDataJSON:nP(e.response.clientDataJSON)}})}catch(e){throw await nx(e,r,!0)}}async function nT(e){let t=nD(e);try{return nA(await navigator.credentials.get(t))}catch(e){throw await nx(e,t,!1)}}async function nR(e,t){let n=nD(e);n.signal=t.signal,n.mediation="conditional";try{return nA(await navigator.credentials.get(n))}catch(e){throw await nx(e,n,!1)}}async function nx(e,t,n){if(e&&"object"==typeof e)try{e.reason=await async function(e,t,n){var r,o;let i=null==e?void 0:e.name;if("AbortError"===i&&(null==t?void 0:t.signal)instanceof AbortSignal)return"aborted";if("InvalidStateError"===i&&n)return"authenticator_already_registered";if("NotSupportedError"===i)return"no_supported_algorithm";if("ConstraintError"===i)return"authenticator_constraints_unsupported";if("SecurityError"===i){let e=window.location.hostname;return"localhost"===e||/^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}
1$/i.test(e)?"invalid_rpid":"invalid_domain"}if(!await nC())return"webauthn_unsupported";let a="platform"===(null==(o=null==(r=null==t?void 0:t.publicKey)?void 0:r.authenticatorSelection)?void 0:o.authenticatorAttachment);return n&&a&&!await nC(!0)?"platform_authenticator_unsupported":"NotAllowedError"===i?"not_allowed":"unknown"}(e,t,n)}catch(e){}return e}async function nC(e=!1){var t,n;if(!tB)return Promise.resolve(!1);if(tB&&window.descopeBridge){let e=null==(n=null==(t=window.descopeBridge)?void 0:t.hostInfo)?void 0:n.webauthn;if("boolean"==typeof e)return e}let r=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return r&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():r}function nD(e){var t;let n=JSON.parse(e);return n.publicKey.challenge=nE(n.publicKey.challenge),null==(t=n.publicKey.allowCredentials)||t.forEach(e=>{e.id=nE(e.id)}),n}function nA(e){return JSON.stringify({id:e.id,rawId:nP(e.rawId),type:e.type,response:{authenticatorData:nP(e.response.authenticatorData),clientDataJSON:nP(e.response.clientDataJSON),signature:nP(e.response.signature),userHandle:e.response.userHandle?nP(e.response.userHandle):void 0}})}function nE(e){let t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),e=>e.charCodeAt(0)).buffer}function nP(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var n$,nq=(n$=e=>({async signUp(t,n,r){let o=await e.webauthn.signUp.start(t,window.location.origin,n,r);if(!o.ok)return o;let i=await nU(o.data.options);
1return await e.webauthn.signUp.finish(o.data.transactionId,i)},async signIn(t,n){let r=await e.webauthn.signIn.start(t,window.location.origin,void 0,void 0,n);if(!r.ok)return r;let o=await nT(r.data.options);return await e.webauthn.signIn.finish(r.data.transactionId,o)},async signUpOrIn(t,n){var r;let o=await e.webauthn.signUpOrIn.start(t,window.location.origin,n);if(!o.ok)return o;if(null==(r=o.data)?void 0:r.create){let t=await nU(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,t)}{let t=await nT(o.data.options);return await e.webauthn.signIn.finish(o.data.transactionId,t)}},async update(t,n,r){let o=await e.webauthn.update.start(t,window.location.origin,n,r);if(!o.ok)return o;let i=await nU(o.data.options);return await e.webauthn.update.finish(o.data.transactionId,i)},helpers:{create:nU,get:nT,isSupported:nC,conditional:nR}}),(...e)=>{let t=n$(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});let nN="/fedcm/config";async function nL(e,t){var n;try{await nJ(e,t)}catch(e){null==(n=null==t?void 0:t.onFailed)||n.call(t,e)}}async function nJ(e,t){var n,r;let o=await async function(e,t="google",n,r,o){let i=(()=>{if(window.crypto&&window.crypto.getRandomValues){let e=new Uint8Array(16);return window.crypto.getRandomValues(e),Array.from(e,e=>e.toString(16).padStart(2,"0")).join("")}return Math.random().toString(36).substring(2)})(),a=await async function(){return new Promise((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}})}(),s=await e.oauth.getOneTapClientId(t);if(!s.ok)throw Error("Failed to get OneTap client ID for provider "+t);let l=s.data.clientId;return new Promise(e=>{var s,u;let d=n=>{e({provider:t,nonce:i,credential:null==n?void 0:n.credential})};a.initialize(Object.assign(Object.assign({},n),{itp_support:null==(s=null==n?void 0:n.itp_support)||s,use_fedcm_for_prompt:null==(u=null==n?void 0:n.use_fedcm_for_prompt)||u,client_id:l,callback:d,nonce:i})),a.prompt(e=>{var t,n;if(o&&(null==e?void 0:e.isDismissedMoment())){let n=null==(t=e.getDismissedReason)?void 0:t.call(e);return null==o||o(n),void d()}if(r&&(null==e?void 0:e.isSkippedMoment())){let t=null==(n=e.getSkippedReason)?void 0:n.call(e);return null==r||r(t),void d()}})})}(e,t.provider,t.oneTapConfig,t.onSkipped,t.onDismissed);if(!o.credential)return null;if(null==t?void 0:t.onCodeReceived){let r=await e.oauth.verifyOneTapIDToken(o.provider,o.credential,o.nonce,null==t?void 0:t.loginOptions);if(!r.ok||!r.data)throw Error("Failed to verify OneTap client ID for provider "+o.provider);null==(n=null==t?void 0:t.onCodeReceived)||n.call(t,r.data.code)}else{let n=await e.oauth.exchangeOneTapIDToken(o.provider,o.credential,o.nonce,null==t?void 0:t.loginOptions);if(!n.ok||!n.data)throw Error("Failed to exchange OneTap client ID for provider "+o.provider);null==(r=null==t?void 0:t.onAuthenticated)||r.call(t,n.data)}}let nM=(e,t)=>new Promise((n,r)=>{if(!e.length)return r(Error("No URLs provided to loadScriptWithFallback"));let o=t();if(o)return n(o);let i=e.shift(),a=document.createElement("script");a.src=i,a.id=(e=>{let t=0;for(let n=0;n<e.length;n++)t=(t<<5)-t+e.charCodeAt(n)|0;return Math.abs(t).toString(16)})(i),a.onload=()=>{let e=t();if(e)return n(e);throw Error("Could not get entry after loading script from URL")},a.addEventListener("error",()=>{nM(e,t),a.setAttribute("data-error","true")}),document.body.appendChild(a)}),nK=async(e,t,n)=>{let o,i,a,s;r||(r=(async()=>{try{let e=Error("Cannot find module 'oidc-client-ts'");throw e.code="MODULE_NOT_FOUND",e}catch(e){return nM([tH,tz],()=>window.oidc)}})());let{OidcClient:l,WebStorageStateStore:u}=await r;if(!l)throw Error("oidc-client-ts is not installed. Please install it by running `npm install oidc-client-ts`");let d=(null==n?void 0:n.redirectUri)||window.location.href;if(null==n?void 0:n.issuer){if(!n.clientId)throw Error("clientId is required when providing a custom issuer/authority");o=n.issuer,i=n.clientId,a=`${i}_user`,s="openid"}else(null==n?void 0:n.applicationId)?(o=e.httpClient.buildUrl(t),o=`${o}/${n.applicationId}`):o=e.httpClient.buildUrl(t),i=t,a=`${i}_user`,s="openid email roles descope.custom_claims offline_access";
1let c={authority:o,client_id:i,redirect_uri:d,response_type:"code",scope:(null==n?void 0:n.scope)||s,stateStore:new u({store:window.localStorage,prefix:i}),loadUserInfo:!0,fetchRequestCredentials:"same-origin"};return(null==n?void 0:n.redirectUri)&&(c.redirect_uri=n.redirectUri),{client:new l(c),stateUserKey:a}},nF=(function(...e){return t=>e.reduce((e,t)=>t(e),t)})(e=>t=>(n=t.customStorage,e(t)),e=>t=>{var{fpKey:n,fpLoad:r}=t,o=(0,a.__rest)(t,["fpKey","fpLoad"]);return tB?(n&&r&&nd(n).catch(()=>null),e(tX(o,{beforeRequest:nc}))):e(o)},e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.51.3"},t.baseHeaders)})),e=>t=>{let n=n_(),r=n_(),o=n_(),i=n_();return Object.assign(eJ(e(tX(t,{afterRequest:async(e,t)=>{if(tQ(e,t))t9("Session invalidated, notifying subscribers with empty values"),r.pub(null),o.pub(null),n.pub(null),i.pub(null);else{let e=await (async e=>{let t=await tY(e);return(null==t?void 0:t.user)||((null==t?void 0:t.hasOwnProperty("userId"))?t:void 0)})(t);e&&o.pub(e);let{sessionJwt:a,sessionExpiration:s,claims:l}=await tY(t);a&&r.pub(a),l&&i.pub(l),(s||a)&&n.pub(s||42)}}})),["logout","logoutAll","oidc.logout"],e=>async(...t)=>{let a=await e(...t);return r.pub(null),o.pub(null),n.pub(null),i.pub(null),a}),{onSessionTokenChange:r.sub,onUserChange:o.sub,onClaimsChange:i.sub,onIsAuthenticatedChange:e=>n.sub(t=>{e(!!t)})})},e=>t=>{var r;let{enableFlowNonce:o=!0,nonceStoragePrefix:i=np}=t,s=(0,a.__rest)(t,["enableFlowNonce","nonceStoragePrefix"]);if(!o)return e(s);((e=np)=>{var t,r,o;try{if(!t0)return;for(let i=0;i<(t=void 0,r=void 0,o=void 0,null!=(o=null!=(t=null==n?void 0:n.length)?t:tB&&(null==(r=window.localStorage)?void 0:r.length))?o:0);i++){let t=t6(i);if(t&&t.startsWith(e)){let e=t3(t);if(e)try{JSON.parse(e).expiry<Date.now()&&t2(t)}catch(e){t2(t)}}}}catch(e){console.error("Error cleaning up expired nonces:",e)}})(i);let l=e(tX(s,{afterRequest:async(e,t)=>{if(e.path!==nh&&e.path!==nf)return;let{nonce:n,executionId:r}=await (async(e,t)=>{try{let n=t.headers.get(ng),r=await t.clone().json().then(e=>(null==e?void 0:e.executionId)||null).catch(()=>null);return r||(r=nm(e)),{nonce:n,executionId:nw(r)}}catch(e){return{nonce:null,executionId:null}}})(e,t);n&&r&&((e,t,n,r=np)=>{try{let o=nv(e,r),i={value:t,expiry:Date.now()+1e3*(n?172800:10800),isStart:n};t1(o,JSON.stringify(i))}catch(e){console.error("Error setting flow nonce:",e)}})(r,n,e.path===nh,i)},beforeRequest:e=>{if(e.path===nf){let t=nm(e);if(t){let n=((e,t=np)=>{try{let n=nv(e,t),r=t3(n);if(!r)return null;let o=JSON.parse(r);return o.expiry<Date.now()?(((e,t=np)=>{try{let n=nv(e,t);t2(n)}catch(e){console.error("Error removing flow nonce:",e)}})(e,t),null):o.value}catch(e){return console.error("Error getting flow nonce:",e),null}})(t,i);n&&(e.headers=e.headers||{},e.headers[ng]=n)}}return e}}));if(null==(r=l.flow)?void 0:r.next){let e=Promise.resolve(),t=l.flow.next.bind(l.flow);l.flow.next=async(...n)=>{let r,o=e;e=new Promise(e=>{r=e}),await o;try{return await t(...n)}finally{r()}}}return l},e=>t=>eJ(e(tX(t,{afterRequest:async(e,t)=>{if(tQ(e,t))return void t4(nS);let n=await tY(t);(null==n?void 0:n.sessionExpiration)&&((e,t)=>{var n,r;try{tB&&(null==(r=null==(n=window.localStorage)?void 0:n.setItem)||r.call(n,e,t))}catch(e){}})(nS,String(n.sessionExpiration))}})),["logout","logoutAll","oidc.logout"],nj),e=>t=>{let n,r;var{autoRefresh:o}=t,i=(0,a.__rest)(t,["autoRefresh"]);let s=!!o,u="object"==typeof o&&(null==o?void 0:o.customActivityTracking);if(!s||tB&&window.descopeBridge)return Object.assign(e(i),{markUserActive:()=>{t7("markUserActive() called but has no effect")}});let{clearAllTimers:d,setTimer:c}=(n=[],{clearAllTimers:()=>{for(;n.length;)clearTimeout(n.pop())},setTimer:(e,t)=>{n.push(setTimeout(e,t))}}),p,g,h=null,f=!1,v=!1;u&&(t9("Activity-based refresh enabled"),r=!0,h={hadActivity:()=>r,reset:()=>{r=!1},markActive:()=>{r=!0}}),tB&&document.addEventListener("visibilitychange",()=>{"visible"===document.visibilityState&&p&&new Date>p&&(t9("Expiration time passed, refreshing session"),w.refresh(no()||g))});let w=e(tX(i,{afterRequest:async(e,t)=>{let{sessionJwt:n,refreshJwt:r,sessionExpiration:o,nextRefreshSeconds:i}=await tY(t);
1if(tQ(e,t))t9("Session invalidated, canceling all timers"),d();else if(n||o){var a,s;let e;if(!(p=((e,t)=>{if(t)return new Date(1e3*t);t9("Could not extract expiration time from session token, trying to decode the token");try{let t=l(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(n,o)))return void t9("Could not extract expiration time from session token");g=r,f=i>0;let t=(a=p,(s=i)>0?(e=1e3*s,t9(`Using provided nextRefreshSeconds: ${s}s`)):e=(a?a.getTime()-(new Date).getTime():0)-2e4,e>0x7fffffff&&(t9(`Timeout is too large (${e}ms), setting it to 2147483647ms`),e=0x7fffffff),e);if(d(),t<=2e4)return void t9("Session is too close to expiration, not setting refresh timer");let u=new Date(Date.now()+t).toLocaleTimeString("en-US",{hour12:!1});t9(`Setting refresh timer for ${u}. (${t}ms)`),h&&(h.reset(),v=!1),c(()=>{if(tB&&"hidden"===document.visibilityState)t9("Skipping refresh due to timer - document is hidden");else{if(h&&f&&!h.hadActivity())return t9("Skipping refresh due to timer - user is idle"),void(v=!0);t9("Refreshing session due to timer"),w.refresh(no()||r)}},t)}}}));return Object.assign(eJ(w,["logout","logoutAll","oidc.logout"],e=>async(...t)=>{let n=await e(...t);return t9("Clearing all timers"),d(),n}),{markUserActive:h?()=>{t9("markUserActive() called"),f||t9("markUserActive() called but server does not have inactivity timeout configured (no nextRefreshSeconds)"),h.markActive(),v&&(t9("User became active after skipped refresh, triggering refresh"),v=!1,d(),w.refresh(no()||g))}:()=>{t7("markUserActive() called but customActivityTracking is not enabled â this call has no effect")}})},e=>t=>{var{storeLastAuthenticatedUser:n=!0,keepLastAuthenticatedUserAfterLogout:r=!1}=t,o=(0,a.__rest)(t,["storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout"]);if(!n)return Object.assign(e(o),{getLastUserLoginId:nk,getLastUserDisplayName:nI});let i=eJ(e(tX(o,{afterRequest:async(e,t)=>{var n;let{userInfo:r,lastAuth:o}=await (async e=>{if(!(null==e?void 0:e.ok))return{userInfo:void 0,lastAuth:void 0};let t=await (null==e?void 0:e.clone().json()),n=tW((null==t?void 0:t.authInfo)||t||{});return{userInfo:(null==n?void 0:n.user)||((null==n?void 0:n.hasOwnProperty("userId"))?n:void 0),lastAuth:t.lastAuth}})(t),i=null==(n=null==r?void 0:r.loginIds)?void 0:n[0],a=null==r?void 0:r.name;i?(t1(ny,i),t1(nb,a)):(null==o?void 0:o.loginId)&&t1(ny,o.loginId)}})),["flow.start"],nO);return Object.assign(i=eJ(i,["logout","logoutAll"],e=>async(...t)=>{let n=await e(...t);return r||(t2(ny),t2(nb)),n}),{getLastUserLoginId:nk,getLastUserDisplayName:nI})},e=>t=>{let n,r;var{persistTokens:o,sessionTokenViaCookie:i,refreshTokenViaCookie:s,storagePrefix:l,refreshCookieName:u}=t,d=(0,a.__rest)(t,["persistTokens","sessionTokenViaCookie","refreshTokenViaCookie","storagePrefix","refreshCookieName"]);return o&&tB?Object.assign(eJ(e(tX(Object.assign({refreshCookieName:u},d),{beforeRequest:e=>{let t=Object.assign(e,{token:e.token||no(l,s)});if(!u){let e=function(e=""){return t3(`${e}${t8}`)}(l);e&&(t.headers=Object.assign(Object.assign({},t.headers||{}),{"x-descope-refresh-cookie-name":e}))}let n=function(e=""){return t3(`${e}DTD`)||""}(l);return n&&(t.headers=Object.assign(Object.assign({},t.headers||{}),{"x-descope-trusted-device-token":n})),t},afterRequest:async(e,t)=>{if(tQ(e,t))t9("Session invalidated, clearing persisted tokens"),ns(l,i,s,n);else{let e=await tY(t);e.cookieName?t1(`${l||""}${t8}`,e.cookieName):e.refreshJwt&&t2(`${l||""}${t8}`);let r=((e={},t=!1,n="",r=!1)=>{var o,i,a,s;let l,{sessionJwt:u,refreshJwt:d,trustedDeviceJwt:c}=e;if(d)if(r){t2(`${n}DSR`);let t=r.sameSite||"Strict",a=null==(o=r.secure)||o,s=null!=(i=r.domain)?i:e.cookieDomain,u=nr(r);a&&"https:"!==window.location.protocol&&t7("Refresh token cookie is configured with secure=true but the page is not using HTTPS. The cookie will not be set. To fix this, pass refreshTokenViaCookie: { secure: process.env['NODE_ENV'] !== 'development' }");let c=Object.assign(Object.assign({},e),{cookieSameSite:t,cookieSecure:a,cookieDomain:s});ne(u,d,c);let p=nt(s);l=Object.assign(Object.assign({},l),{refresh:{path:c.cookiePath,domain:p?s:void 0}})}else{let e=nr(r);tP.remove(e),t1(`${n}DSR`,d)}if(u)if(t){let n=t.sameSite||"Strict",r=null==(a=t.secure)||a,o=null!=(s=t.domain)?s:e.cookieDomain,i=nn(t);r&&"https:"!==window.location.protocol&&t7("Session token cookie is configured with secure=true but the page is not using HTTPS. The cookie will not be set. To fix this, pass sessionTokenViaCookie: { secure: process.env['NODE_ENV'] !== 'development' }");let d=Object.assign(Object.assign({},e),{cookieSameSite:n,cookieSecure:r,cookieDomain:o});ne(i,u,d);let c=nt(o);l=Object.assign(Object.assign({},l),{session:{path:d.cookiePath,domain:c?o:void 0}})}else t1(`${n}DS`,u);return e.idToken&&t1(`${n}DSI`,e.idToken),c&&t1(`${n}DTD`,c),l})(e,i,l,s);r&&(n=r)}}})),["logout","logoutAll","oidc.logout"],(r=()=>n,e=>async(...t)=>{let n=await e(...t);return ns(l,i,s,null==r?void 0:r()),n})),{getRefreshToken:()=>no(l,s),getSessionToken:()=>ni(l,i),getIdToken:()=>na(l)}):e(Object.assign({refreshCookieName:u},d))})(e=>{var t,n,r;let o,i,a=tA(e),s=(n=e.projectId,r=e.oidcConfig,o=async()=>{let e,t;return e&&t||({client:e,stateUserKey:t}=await nK(a,n,r)),{client:e,stateUserKey:t}},{loginWithRedirect:async(e={},t=!1)=>{var n;let{client:r}=await o(),i=await r.createSigninRequest(e),{url:s}=i;return t||(await (null==(n=a.httpClient.hooks)?void 0:n.afterRequest
1({},new Response(JSON.stringify(i)))),window.location.href=s),{ok:!0,data:i}},finishLogin:i=async(e="")=>{var t;let n,{client:r,stateUserKey:i}=await o(),s=await r.processSigninResponse(e||window.location.href);return await (null==(t=a.httpClient.hooks)?void 0:t.afterRequest({},new Response(JSON.stringify(s)))),t1(i,JSON.stringify({id_token:s.id_token,session_state:s.session_state,profile:s.profile})),(n=new URL(window.location.href)).searchParams.delete("code"),n.searchParams.delete("state"),window.history.replaceState({},document.title,n.toString()),s},finishLoginIfNeed:async(e="")=>{if(window.location.search.includes("code")&&window.location.search.includes("state"))return await i(e)},refreshToken:async e=>{var t;let n,{client:r,stateUserKey:i}=await o(),s=(n=t3(i))?JSON.parse(n):null;if(!s)throw Error("User not found in storage to refresh token");let l=e;if(!l){let e={};a.httpClient.hooks.beforeRequest(e),l=e.token}let u=await r.useRefreshToken({state:{refresh_token:l,session_state:s.session_state,profile:s.profile}});return await (null==(t=a.httpClient.hooks)?void 0:t.afterRequest
1({},new Response(JSON.stringify(u)))),u},logout:async(e,t=!1)=>{let{client:n,stateUserKey:r}=await o();e||(e={}),e.id_token_hint=e.id_token_hint||na(),e.post_logout_redirect_uri=e.post_logout_redirect_uri||window.location.href;let i=await n.createSignoutRequest(e),{url:a}=i;return t2(r),t||window.location.replace(a),i}});return Object.assign(Object.assign({},a),{refresh:async(t,n)=>{var r;if(tB&&window.descopeBridge)return t9(`Refresh called in native flow: ${Error().stack}`),Promise.resolve({ok:!1,error:{errorCode:"J171000",errorDescription:"Refresh is not supported in native flows via the web SDK"}});if(e.oidcConfig)try{return await s.refreshToken(t),Promise.resolve({ok:!0})}catch(e){return Promise.resolve({ok:!1,error:{errorCode:"J161001",errorDescription:e.toString()}})}if(n&&tB&&void 0!==window.localStorage&&!t5(nS)&&!t3(ny)&&!t5("DSLI_DISABLED"))return Promise.resolve({ok:!0});let o=ni(),i=no(),l="";if(e.getExternalToken)try{l=await (null==(r=e.getExternalToken)?void 0:r.call(e))}catch(e){t9("Error getting external token while refreshing",e)}return a.refresh(t,{dcs:o?"t":"f",dcr:i?"t":"f"},l,n)},logout:async t=>{if(e.oidcConfig)try{return await s.logout({id_token_hint:t}),Promise.resolve({ok:!0})}catch(e){return Promise.resolve({ok:!1,error:{errorCode:"J161000",errorDescription:e.toString()}})}return a.logout(t)},flow:Object.assign(Object.assign({},a.flow),{start:async(...e)=>{let t=await nC(),n=Object.assign(Object.assign({location:window.location.href},e[1]),{deviceInfo:{webAuthnSupport:t},startOptionsVersion:1});return e[1]=n,a.flow.start(...e)}}),webauthn:nq(a),fedcm:(t=e.projectId,{onetap:{requestExchangeCode(e){nL(a,e)},requestAuthentication(e){nL(a,e)}},async oneTap(e,t,n,r,o){await nJ(a,{provider:e,oneTapConfig:t,loginOptions:n,onSkipped:r,onDismissed:o})},async launch(e){var n;let r={identity:{context:e||"signin",providers:[{configURL:a.httpClient.buildUrl(t+nN),clientId:t}]}},o=await (null==(n=navigator.credentials)?void 0:n.get(r));return a.refresh(o.token)},isSupported:()=>tB&&"IdentityCredential"in window,async isLoggedIn(e){var n;let r=a.httpClient.buildUrl(t+nN);try{let o=await (null==(n=navigator.credentials)?void 0:n.get({identity:{context:e||"signin",providers:[{configURL:r,clientId:t}]}}));return!!o&&!!o.token}catch(e){return!1}}}),oidc:s})});e.s(["clearFingerprintData",0,()=>{t2("fp")},"createSdk",0,nF,"default",0,nF,"ensureFingerprintIds",0,nd,"getSessionToken",0,ni],698637)}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.