{ "version": 3, "sources": ["../../node_modules/base64-js/index.js", "../../src/flow/stages/authenticator_validate/base.ts", "../../src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts", "../../src/flow/stages/authenticator_validate/AuthenticatorValidateStageDuo.ts", "../../src/common/helpers/webauthn.ts", "../../src/flow/stages/authenticator_validate/AuthenticatorValidateStageWebAuthn.ts", "../../src/flow/stages/authenticator_validate/AuthenticatorValidateStage.ts"], "sourcesContent": ["'use strict'\n\nexports.byteLength = byteLength\nexports.toByteArray = toByteArray\nexports.fromByteArray = fromByteArray\n\nvar lookup = []\nvar revLookup = []\nvar Arr = typeof Uint8Array !== 'undefined' ? Uint8Array : Array\n\nvar code = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'\nfor (var i = 0, len = code.length; i < len; ++i) {\n lookup[i] = code[i]\n revLookup[code.charCodeAt(i)] = i\n}\n\n// Support decoding URL-safe base64 strings, as Node.js does.\n// See: https://en.wikipedia.org/wiki/Base64#URL_applications\nrevLookup['-'.charCodeAt(0)] = 62\nrevLookup['_'.charCodeAt(0)] = 63\n\nfunction getLens (b64) {\n var len = b64.length\n\n if (len % 4 > 0) {\n throw new Error('Invalid string. Length must be a multiple of 4')\n }\n\n // Trim off extra bytes after placeholder bytes are found\n // See: https://github.com/beatgammit/base64-js/issues/42\n var validLen = b64.indexOf('=')\n if (validLen === -1) validLen = len\n\n var placeHoldersLen = validLen === len\n ? 0\n : 4 - (validLen % 4)\n\n return [validLen, placeHoldersLen]\n}\n\n// base64 is 4/3 + up to two characters of the original data\nfunction byteLength (b64) {\n var lens = getLens(b64)\n var validLen = lens[0]\n var placeHoldersLen = lens[1]\n return ((validLen + placeHoldersLen) * 3 / 4) - placeHoldersLen\n}\n\nfunction _byteLength (b64, validLen, placeHoldersLen) {\n return ((validLen + placeHoldersLen) * 3 / 4) - placeHoldersLen\n}\n\nfunction toByteArray (b64) {\n var tmp\n var lens = getLens(b64)\n var validLen = lens[0]\n var placeHoldersLen = lens[1]\n\n var arr = new Arr(_byteLength(b64, validLen, placeHoldersLen))\n\n var curByte = 0\n\n // if there are placeholders, only get up to the last complete 4 chars\n var len = placeHoldersLen > 0\n ? validLen - 4\n : validLen\n\n var i\n for (i = 0; i < len; i += 4) {\n tmp =\n (revLookup[b64.charCodeAt(i)] << 18) |\n (revLookup[b64.charCodeAt(i + 1)] << 12) |\n (revLookup[b64.charCodeAt(i + 2)] << 6) |\n revLookup[b64.charCodeAt(i + 3)]\n arr[curByte++] = (tmp >> 16) & 0xFF\n arr[curByte++] = (tmp >> 8) & 0xFF\n arr[curByte++] = tmp & 0xFF\n }\n\n if (placeHoldersLen === 2) {\n tmp =\n (revLookup[b64.charCodeAt(i)] << 2) |\n (revLookup[b64.charCodeAt(i + 1)] >> 4)\n arr[curByte++] = tmp & 0xFF\n }\n\n if (placeHoldersLen === 1) {\n tmp =\n (revLookup[b64.charCodeAt(i)] << 10) |\n (revLookup[b64.charCodeAt(i + 1)] << 4) |\n (revLookup[b64.charCodeAt(i + 2)] >> 2)\n arr[curByte++] = (tmp >> 8) & 0xFF\n arr[curByte++] = tmp & 0xFF\n }\n\n return arr\n}\n\nfunction tripletToBase64 (num) {\n return lookup[num >> 18 & 0x3F] +\n lookup[num >> 12 & 0x3F] +\n lookup[num >> 6 & 0x3F] +\n lookup[num & 0x3F]\n}\n\nfunction encodeChunk (uint8, start, end) {\n var tmp\n var output = []\n for (var i = start; i < end; i += 3) {\n tmp =\n ((uint8[i] << 16) & 0xFF0000) +\n ((uint8[i + 1] << 8) & 0xFF00) +\n (uint8[i + 2] & 0xFF)\n output.push(tripletToBase64(tmp))\n }\n return output.join('')\n}\n\nfunction fromByteArray (uint8) {\n var tmp\n var len = uint8.length\n var extraBytes = len % 3 // if we have 1 byte left, pad 2 bytes\n var parts = []\n var maxChunkLength = 16383 // must be multiple of 3\n\n // go through the array every three bytes, we'll deal with trailing stuff later\n for (var i = 0, len2 = len - extraBytes; i < len2; i += maxChunkLength) {\n parts.push(encodeChunk(uint8, i, (i + maxChunkLength) > len2 ? len2 : (i + maxChunkLength)))\n }\n\n // pad the end with zeros, but make sure to not forget the extra bytes\n if (extraBytes === 1) {\n tmp = uint8[len - 1]\n parts.push(\n lookup[tmp >> 2] +\n lookup[(tmp << 4) & 0x3F] +\n '=='\n )\n } else if (extraBytes === 2) {\n tmp = (uint8[len - 2] << 8) + uint8[len - 1]\n parts.push(\n lookup[tmp >> 10] +\n lookup[(tmp >> 4) & 0x3F] +\n lookup[(tmp << 2) & 0x3F] +\n '='\n )\n }\n\n return parts.join('')\n}\n", "import { AuthenticatorValidateStage } from \"@goauthentik/flow/stages/authenticator_validate/AuthenticatorValidateStage\";\nimport { BaseStage, FlowInfoChallenge, PendingUserChallenge } from \"@goauthentik/flow/stages/base\";\n\nimport { msg } from \"@lit/localize\";\nimport { CSSResult, css, html, nothing } from \"lit\";\nimport { property } from \"lit/decorators.js\";\n\nimport PFButton from \"@patternfly/patternfly/components/Button/button.css\";\nimport PFForm from \"@patternfly/patternfly/components/Form/form.css\";\nimport PFFormControl from \"@patternfly/patternfly/components/FormControl/form-control.css\";\nimport PFLogin from \"@patternfly/patternfly/components/Login/login.css\";\nimport PFTitle from \"@patternfly/patternfly/components/Title/title.css\";\nimport PFBase from \"@patternfly/patternfly/patternfly-base.css\";\n\nimport { DeviceChallenge } from \"@goauthentik/api\";\n\nexport class BaseDeviceStage<\n Tin extends FlowInfoChallenge & PendingUserChallenge,\n Tout,\n> extends BaseStage {\n @property({ attribute: false })\n deviceChallenge?: DeviceChallenge;\n\n @property({ type: Boolean })\n showBackButton = false;\n\n static get styles(): CSSResult[] {\n return [\n PFBase,\n PFLogin,\n PFForm,\n PFFormControl,\n PFTitle,\n PFButton,\n css`\n .pf-c-form__group.pf-m-action {\n display: flex;\n gap: 16px;\n margin-top: 0;\n margin-bottom: calc(var(--pf-c-form__group--m-action--MarginTop) / 2);\n flex-direction: column;\n }\n `,\n ];\n }\n\n submit(payload: Tin): Promise {\n return this.host?.submit(payload) || Promise.resolve();\n }\n\n renderReturnToDevicePicker() {\n if (!this.showBackButton) {\n return nothing;\n }\n return html` {\n if (!this.host) return;\n (this.host as AuthenticatorValidateStage).selectedDeviceChallenge = undefined;\n }}\n >\n ${msg(\"Select another authentication method\")}\n `;\n }\n}\n", "import \"@goauthentik/elements/EmptyState\";\nimport \"@goauthentik/elements/forms/FormElement\";\nimport { BaseDeviceStage } from \"@goauthentik/flow/stages/authenticator_validate/base\";\nimport { PasswordManagerPrefill } from \"@goauthentik/flow/stages/identification/IdentificationStage\";\n\nimport { msg, str } from \"@lit/localize\";\nimport { CSSResult, TemplateResult, css, html } from \"lit\";\nimport { customElement } from \"lit/decorators.js\";\n\nimport {\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest,\n DeviceClassesEnum,\n} from \"@goauthentik/api\";\n\n@customElement(\"ak-stage-authenticator-validate-code\")\nexport class AuthenticatorValidateStageWebCode extends BaseDeviceStage<\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest\n> {\n static get styles(): CSSResult[] {\n return super.styles.concat(css`\n .icon-description {\n display: flex;\n }\n .icon-description i {\n font-size: 2em;\n padding: 0.25em;\n padding-right: 0.5em;\n }\n `);\n }\n\n deviceMessage(): string {\n switch (this.deviceChallenge?.deviceClass) {\n case DeviceClassesEnum.Email: {\n const email = this.deviceChallenge.challenge?.email;\n return msg(str`A code has been sent to you via email${email ? ` ${email}` : \"\"}`);\n }\n case DeviceClassesEnum.Sms:\n return msg(\"A code has been sent to you via SMS.\");\n case DeviceClassesEnum.Totp:\n return msg(\n \"Open your two-factor authenticator app to view your authentication code.\",\n );\n case DeviceClassesEnum.Static:\n return msg(\"Enter a one-time recovery code for this user.\");\n }\n\n return msg(\"Enter the code from your authenticator device.\");\n }\n\n deviceIcon(): string {\n switch (this.deviceChallenge?.deviceClass) {\n case DeviceClassesEnum.Email:\n return \"fa-envelope-o\";\n case DeviceClassesEnum.Sms:\n return \"fa-mobile-alt\";\n case DeviceClassesEnum.Totp:\n return \"fa-clock\";\n case DeviceClassesEnum.Static:\n return \"fa-key\";\n }\n\n return \"fa-mobile-alt\";\n }\n\n render(): TemplateResult {\n if (!this.challenge) {\n return html` `;\n }\n return html``;\n }\n}\n\ndeclare global {\n interface HTMLElementTagNameMap {\n \"ak-stage-authenticator-validate-code\": AuthenticatorValidateStageWebCode;\n }\n}\n", "import \"@goauthentik/elements/EmptyState\";\nimport \"@goauthentik/elements/forms/FormElement\";\nimport { BaseDeviceStage } from \"@goauthentik/flow/stages/authenticator_validate/base\";\n\nimport { msg } from \"@lit/localize\";\nimport { PropertyValues, TemplateResult, html } from \"lit\";\nimport { customElement, property, state } from \"lit/decorators.js\";\n\nimport {\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest,\n DeviceChallenge,\n} from \"@goauthentik/api\";\n\n@customElement(\"ak-stage-authenticator-validate-duo\")\nexport class AuthenticatorValidateStageWebDuo extends BaseDeviceStage<\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest\n> {\n @property({ attribute: false })\n deviceChallenge?: DeviceChallenge;\n\n @property({ type: Boolean })\n showBackButton = false;\n\n @state()\n authenticating = false;\n\n updated(changedProperties: PropertyValues) {\n if (changedProperties.has(\"challenge\") && this.challenge !== undefined) {\n this.authenticating = true;\n this.host\n ?.submit(\n {\n duo: this.deviceChallenge?.deviceUid,\n },\n { invisible: true },\n )\n .then(() => {\n this.authenticating = false;\n })\n .catch(() => {\n this.authenticating = false;\n });\n }\n }\n\n render(): TemplateResult {\n if (!this.challenge) {\n return html` `;\n }\n const errors = this.challenge.responseErrors?.duo || [];\n const errorMessage = errors.map((err) => err.string);\n return html``;\n }\n}\n\ndeclare global {\n interface HTMLElementTagNameMap {\n \"ak-stage-authenticator-validate-duo\": AuthenticatorValidateStageWebDuo;\n }\n}\n", "import * as base64js from \"base64-js\";\n\nimport { msg } from \"@lit/localize\";\n\nexport function b64enc(buf: Uint8Array): string {\n return base64js.fromByteArray(buf).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=/g, \"\");\n}\n\nexport function b64RawEnc(buf: Uint8Array): string {\n return base64js.fromByteArray(buf).replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\nexport function u8arr(input: string): Uint8Array {\n return Uint8Array.from(atob(input.replace(/_/g, \"/\").replace(/-/g, \"+\")), (c) =>\n c.charCodeAt(0),\n );\n}\n\nexport function checkWebAuthnSupport() {\n if (\"credentials\" in navigator) {\n return;\n }\n if (window.location.protocol === \"http:\" && window.location.hostname !== \"localhost\") {\n throw new Error(msg(\"WebAuthn requires this page to be accessed via HTTPS.\"));\n }\n throw new Error(msg(\"WebAuthn not supported by browser.\"));\n}\n\n/**\n * Transforms items in the credentialCreateOptions generated on the server\n * into byte arrays expected by the navigator.credentials.create() call\n */\nexport function transformCredentialCreateOptions(\n credentialCreateOptions: PublicKeyCredentialCreationOptions,\n userId: string,\n): PublicKeyCredentialCreationOptions {\n const user = credentialCreateOptions.user;\n // Because json can't contain raw bytes, the server base64-encodes the User ID\n // So to get the base64 encoded byte array, we first need to convert it to a regular\n // string, then a byte array, re-encode it and wrap that in an array.\n const stringId = decodeURIComponent(window.atob(userId));\n user.id = u8arr(b64enc(u8arr(stringId)));\n const challenge = u8arr(credentialCreateOptions.challenge.toString());\n\n return {\n ...credentialCreateOptions,\n challenge,\n user,\n };\n}\n\nexport interface Assertion {\n id: string;\n rawId: string;\n type: string;\n registrationClientExtensions: string;\n response: {\n clientDataJSON: string;\n attestationObject: string;\n };\n}\n\n/**\n * Transforms the binary data in the credential into base64 strings\n * for posting to the server.\n * @param {PublicKeyCredential} newAssertion\n */\nexport function transformNewAssertionForServer(newAssertion: PublicKeyCredential): Assertion {\n const attObj = new Uint8Array(\n (newAssertion.response as AuthenticatorAttestationResponse).attestationObject,\n );\n const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);\n const rawId = new Uint8Array(newAssertion.rawId);\n\n const registrationClientExtensions = newAssertion.getClientExtensionResults();\n return {\n id: newAssertion.id,\n rawId: b64enc(rawId),\n type: newAssertion.type,\n registrationClientExtensions: JSON.stringify(registrationClientExtensions),\n response: {\n clientDataJSON: b64enc(clientDataJSON),\n attestationObject: b64enc(attObj),\n },\n };\n}\n\nexport function transformCredentialRequestOptions(\n credentialRequestOptions: PublicKeyCredentialRequestOptions,\n): PublicKeyCredentialRequestOptions {\n const challenge = u8arr(credentialRequestOptions.challenge.toString());\n\n const allowCredentials = (credentialRequestOptions.allowCredentials || []).map(\n (credentialDescriptor) => {\n const id = u8arr(credentialDescriptor.id.toString());\n return Object.assign({}, credentialDescriptor, { id });\n },\n );\n\n return {\n ...credentialRequestOptions,\n challenge,\n allowCredentials,\n };\n}\n\nexport interface AuthAssertion {\n id: string;\n rawId: string;\n type: string;\n assertionClientExtensions: string;\n response: {\n clientDataJSON: string;\n authenticatorData: string;\n signature: string;\n userHandle: string | null;\n };\n}\n\n/**\n * Encodes the binary data in the assertion into strings for posting to the server.\n * @param {PublicKeyCredential} newAssertion\n */\nexport function transformAssertionForServer(newAssertion: PublicKeyCredential): AuthAssertion {\n const response = newAssertion.response as AuthenticatorAssertionResponse;\n const authData = new Uint8Array(response.authenticatorData);\n const clientDataJSON = new Uint8Array(response.clientDataJSON);\n const rawId = new Uint8Array(newAssertion.rawId);\n const sig = new Uint8Array(response.signature);\n const assertionClientExtensions = newAssertion.getClientExtensionResults();\n\n return {\n id: newAssertion.id,\n rawId: b64enc(rawId),\n type: newAssertion.type,\n assertionClientExtensions: JSON.stringify(assertionClientExtensions),\n\n response: {\n clientDataJSON: b64RawEnc(clientDataJSON),\n signature: b64RawEnc(sig),\n authenticatorData: b64RawEnc(authData),\n userHandle: null,\n },\n };\n}\n", "import {\n checkWebAuthnSupport,\n transformAssertionForServer,\n transformCredentialRequestOptions,\n} from \"@goauthentik/common/helpers/webauthn\";\nimport \"@goauthentik/elements/EmptyState\";\nimport { BaseDeviceStage } from \"@goauthentik/flow/stages/authenticator_validate/base\";\n\nimport { msg } from \"@lit/localize\";\nimport { PropertyValues, TemplateResult, html, nothing } from \"lit\";\nimport { customElement, property, state } from \"lit/decorators.js\";\n\nimport {\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest,\n DeviceChallenge,\n} from \"@goauthentik/api\";\n\n@customElement(\"ak-stage-authenticator-validate-webauthn\")\nexport class AuthenticatorValidateStageWebAuthn extends BaseDeviceStage<\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest\n> {\n @property({ attribute: false })\n deviceChallenge?: DeviceChallenge;\n\n @property()\n errorMessage?: string;\n\n @property({ type: Boolean })\n showBackButton = false;\n\n @state()\n authenticating = false;\n\n transformedCredentialRequestOptions?: PublicKeyCredentialRequestOptions;\n\n async authenticate(): Promise {\n // request the authenticator to create an assertion signature using the\n // credential private key\n let assertion;\n checkWebAuthnSupport();\n try {\n assertion = await navigator.credentials.get({\n publicKey: this.transformedCredentialRequestOptions,\n });\n if (!assertion) {\n throw new Error(\"Assertions is empty\");\n }\n } catch (err) {\n throw new Error(`Error when creating credential: ${err}`);\n }\n\n // we now have an authentication assertion! encode the byte arrays contained\n // in the assertion data as strings for posting to the server\n const transformedAssertionForServer = transformAssertionForServer(\n assertion as PublicKeyCredential,\n );\n\n // post the assertion to the server for verification.\n try {\n await this.host?.submit(\n {\n webauthn: transformedAssertionForServer,\n },\n {\n invisible: true,\n },\n );\n } catch (err) {\n throw new Error(`Error when validating assertion on server: ${err}`);\n }\n }\n\n updated(changedProperties: PropertyValues) {\n if (changedProperties.has(\"challenge\") && this.challenge !== undefined) {\n // convert certain members of the PublicKeyCredentialRequestOptions into\n // byte arrays as expected by the spec.\n const credentialRequestOptions = this.deviceChallenge\n ?.challenge as PublicKeyCredentialRequestOptions;\n this.transformedCredentialRequestOptions =\n transformCredentialRequestOptions(credentialRequestOptions);\n this.authenticateWrapper();\n }\n }\n\n async authenticateWrapper(): Promise {\n if (this.authenticating) {\n return;\n }\n this.authenticating = true;\n this.authenticate()\n .catch((e: Error) => {\n console.warn(\"authentik/flows/authenticator_validate/webauthn: failed to auth\", e);\n this.errorMessage = msg(\"Authentication failed. Please try again.\");\n })\n .finally(() => {\n this.authenticating = false;\n });\n }\n\n render(): TemplateResult {\n return html``;\n }\n}\n\ndeclare global {\n interface HTMLElementTagNameMap {\n \"ak-stage-authenticator-validate-webauthn\": AuthenticatorValidateStageWebAuthn;\n }\n}\n", "import { DEFAULT_CONFIG } from \"@goauthentik/common/api/config\";\nimport \"@goauthentik/flow/stages/authenticator_validate/AuthenticatorValidateStageCode\";\nimport \"@goauthentik/flow/stages/authenticator_validate/AuthenticatorValidateStageDuo\";\nimport \"@goauthentik/flow/stages/authenticator_validate/AuthenticatorValidateStageWebAuthn\";\nimport { BaseStage, StageHost, SubmitOptions } from \"@goauthentik/flow/stages/base\";\nimport { PasswordManagerPrefill } from \"@goauthentik/flow/stages/identification/IdentificationStage\";\n\nimport { msg } from \"@lit/localize\";\nimport { CSSResult, PropertyValues, TemplateResult, css, html, nothing } from \"lit\";\nimport { customElement, state } from \"lit/decorators.js\";\n\nimport PFButton from \"@patternfly/patternfly/components/Button/button.css\";\nimport PFForm from \"@patternfly/patternfly/components/Form/form.css\";\nimport PFFormControl from \"@patternfly/patternfly/components/FormControl/form-control.css\";\nimport PFLogin from \"@patternfly/patternfly/components/Login/login.css\";\nimport PFTitle from \"@patternfly/patternfly/components/Title/title.css\";\nimport PFBase from \"@patternfly/patternfly/patternfly-base.css\";\n\nimport {\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest,\n CurrentBrand,\n DeviceChallenge,\n DeviceClassesEnum,\n FlowsApi,\n} from \"@goauthentik/api\";\n\nconst customCSS = css`\n ul {\n padding-top: 1rem;\n }\n ul > li:not(:last-child) {\n padding-bottom: 1rem;\n }\n .authenticator-button {\n display: flex;\n align-items: center;\n }\n :host([theme=\"dark\"]) .authenticator-button {\n color: var(--ak-dark-foreground) !important;\n }\n i {\n font-size: 1.5rem;\n padding: 1rem 0;\n width: 3rem;\n }\n .right {\n display: flex;\n flex-direction: column;\n justify-content: space-between;\n height: 100%;\n text-align: left;\n }\n .right > * {\n height: 50%;\n }\n`;\n\n@customElement(\"ak-stage-authenticator-validate\")\nexport class AuthenticatorValidateStage\n extends BaseStage<\n AuthenticatorValidationChallenge,\n AuthenticatorValidationChallengeResponseRequest\n >\n implements StageHost\n{\n static get styles(): CSSResult[] {\n return [PFBase, PFLogin, PFForm, PFFormControl, PFTitle, PFButton, customCSS];\n }\n\n flowSlug = \"\";\n\n set loading(value: boolean) {\n this.host.loading = value;\n }\n\n get loading(): boolean {\n return this.host.loading;\n }\n\n get brand(): CurrentBrand | undefined {\n return this.host.brand;\n }\n\n @state()\n _firstInitialized: boolean = false;\n\n @state()\n _selectedDeviceChallenge?: DeviceChallenge;\n\n set selectedDeviceChallenge(value: DeviceChallenge | undefined) {\n const previousChallenge = this._selectedDeviceChallenge;\n this._selectedDeviceChallenge = value;\n if (value === undefined || value === previousChallenge) {\n return;\n }\n // We don't use this.submit here, as we don't want to advance the flow.\n // We just want to notify the backend which challenge has been selected.\n new FlowsApi(DEFAULT_CONFIG).flowsExecutorSolve({\n flowSlug: this.host?.flowSlug || \"\",\n query: window.location.search.substring(1),\n flowChallengeResponseRequest: {\n // @ts-ignore\n component: this.challenge.component || \"\",\n selectedChallenge: value,\n },\n });\n }\n\n get selectedDeviceChallenge(): DeviceChallenge | undefined {\n return this._selectedDeviceChallenge;\n }\n\n submit(\n payload: AuthenticatorValidationChallengeResponseRequest,\n options?: SubmitOptions,\n ): Promise {\n return this.host?.submit(payload, options) || Promise.resolve();\n }\n\n willUpdate(_changed: PropertyValues) {\n if (this._firstInitialized || !this.challenge) {\n return;\n }\n\n this._firstInitialized = true;\n\n // If user only has a single device, autoselect that device.\n if (this.challenge.deviceChallenges.length === 1) {\n this.selectedDeviceChallenge = this.challenge.deviceChallenges[0];\n return;\n }\n\n // If TOTP is allowed from the backend and we have a pre-filled value\n // from the password manager, autoselect TOTP.\n const totpChallenge = this.challenge.deviceChallenges.find(\n (challenge) => challenge.deviceClass === DeviceClassesEnum.Totp,\n );\n if (PasswordManagerPrefill.totp && totpChallenge) {\n console.debug(\n \"authentik/stages/authenticator_validate: found prefill totp code, selecting totp challenge\",\n );\n this.selectedDeviceChallenge = totpChallenge;\n return;\n }\n\n // If the last used device is not Static, autoselect that device.\n const lastUsedChallenge = this.challenge.deviceChallenges\n .filter((deviceChallenge) => deviceChallenge.lastUsed)\n .sort((a, b) => b.lastUsed!.valueOf() - a.lastUsed!.valueOf())[0];\n if (lastUsedChallenge && lastUsedChallenge.deviceClass !== DeviceClassesEnum.Static) {\n this.selectedDeviceChallenge = lastUsedChallenge;\n }\n }\n\n renderDevicePickerSingle(deviceChallenge: DeviceChallenge) {\n switch (deviceChallenge.deviceClass) {\n case DeviceClassesEnum.Duo:\n return html`\n
\n

${msg(\"Duo push-notifications\")}

\n ${msg(\"Receive a push notification on your device.\")}\n
`;\n case DeviceClassesEnum.Webauthn:\n return html`\n
\n

${msg(\"Authenticator\")}

\n ${msg(\"Use a security key to prove your identity.\")}\n
`;\n case DeviceClassesEnum.Totp:\n return html`\n
\n

${msg(\"Traditional authenticator\")}

\n ${msg(\"Use a code-based authenticator.\")}\n
`;\n case DeviceClassesEnum.Static:\n return html`\n
\n

${msg(\"Recovery keys\")}

\n ${msg(\"In case you can't access any other method.\")}\n
`;\n case DeviceClassesEnum.Sms:\n return html`\n
\n

${msg(\"SMS\")}

\n ${msg(\"Tokens sent via SMS.\")}\n
`;\n case DeviceClassesEnum.Email:\n return html`\n
\n

${msg(\"Email\")}

\n ${msg(\"Tokens sent via email.\")}\n
`;\n default:\n break;\n }\n return nothing;\n }\n\n renderDevicePicker(): TemplateResult {\n return html`
    \n ${this.challenge?.deviceChallenges.map((challenges) => {\n return html`
  • \n {\n this.selectedDeviceChallenge = challenges;\n }}\n >\n ${this.renderDevicePickerSingle(challenges)}\n \n
    • `;\n })}\n
`;\n }\n\n renderStagePicker(): TemplateResult {\n return html`
    \n ${this.challenge?.configurationStages.map((stage) => {\n return html`
  • \n {\n this.submit({\n component: this.challenge.component || \"\",\n selectedStage: stage.pk,\n });\n }}\n >\n
    \n

    ${stage.name}

    \n ${stage.verboseName}\n
    \n \n
    • `;\n })}\n
`;\n }\n\n renderDeviceChallenge() {\n if (!this.selectedDeviceChallenge) {\n return nothing;\n }\n switch (this.selectedDeviceChallenge?.deviceClass) {\n case DeviceClassesEnum.Static:\n case DeviceClassesEnum.Totp:\n case DeviceClassesEnum.Email:\n case DeviceClassesEnum.Sms:\n return html` 1}\n >\n `;\n case DeviceClassesEnum.Webauthn:\n return html` 1}\n >\n `;\n case DeviceClassesEnum.Duo:\n return html` 1}\n >\n `;\n }\n return nothing;\n }\n\n render(): TemplateResult {\n return this.challenge\n ? html`\n ${this.selectedDeviceChallenge\n ? this.renderDeviceChallenge()\n : html`\n
\n \n
`}`\n : html` `;\n }\n}\n\ndeclare global {\n interface HTMLElementTagNameMap {\n \"ak-stage-authenticator-validate\": AuthenticatorValidateStage;\n }\n}\n"], "mappings": "oeAAA,IAAAA,EAAAC,EAAAC,GAAA,cAEAA,EAAQ,WAAaC,EACrBD,EAAQ,YAAcE,GACtBF,EAAQ,cAAgBG,GAExB,IAAIC,EAAS,CAAC,EACVC,EAAY,CAAC,EACbC,EAAM,OAAO,WAAe,IAAc,WAAa,MAEvDC,EAAO,mEACX,IAASC,EAAI,EAAGC,EAAMF,EAAK,OAAQC,EAAIC,EAAK,EAAED,EAC5CJ,EAAOI,CAAC,EAAID,EAAKC,CAAC,EAClBH,EAAUE,EAAK,WAAWC,CAAC,CAAC,EAAIA,EAFzB,IAAAA,EAAOC,EAOhBJ,EAAU,EAAiB,EAAI,GAC/BA,EAAU,EAAiB,EAAI,GAE/B,SAASK,EAASC,EAAK,CACrB,IAAIF,EAAME,EAAI,OAEd,GAAIF,EAAM,EAAI,EACZ,MAAM,IAAI,MAAM,gDAAgD,EAKlE,IAAIG,EAAWD,EAAI,QAAQ,GAAG,EAC1BC,IAAa,KAAIA,EAAWH,GAEhC,IAAII,EAAkBD,IAAaH,EAC/B,EACA,EAAKG,EAAW,EAEpB,MAAO,CAACA,EAAUC,CAAe,CACnC,CAGA,SAASZ,EAAYU,EAAK,CACxB,IAAIG,EAAOJ,EAAQC,CAAG,EAClBC,EAAWE,EAAK,CAAC,EACjBD,EAAkBC,EAAK,CAAC,EAC5B,OAASF,EAAWC,GAAmB,EAAI,EAAKA,CAClD,CAEA,SAASE,EAAaJ,EAAKC,EAAUC,EAAiB,CACpD,OAASD,EAAWC,GAAmB,EAAI,EAAKA,CAClD,CAEA,SAASX,GAAaS,EAAK,CACzB,IAAIK,EACAF,EAAOJ,EAAQC,CAAG,EAClBC,EAAWE,EAAK,CAAC,EACjBD,EAAkBC,EAAK,CAAC,EAExBG,EAAM,IAAIX,EAAIS,EAAYJ,EAAKC,EAAUC,CAAe,CAAC,EAEzDK,EAAU,EAGVT,EAAMI,EAAkB,EACxBD,EAAW,EACXA,EAEAJ,EACJ,IAAKA,EAAI,EAAGA,EAAIC,EAAKD,GAAK,EACxBQ,EACGX,EAAUM,EAAI,WAAWH,CAAC,CAAC,GAAK,GAChCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,GAAK,GACpCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,GAAK,EACrCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,EACjCS,EAAIC,GAAS,EAAKF,GAAO,GAAM,IAC/BC,EAAIC,GAAS,EAAKF,GAAO,EAAK,IAC9BC,EAAIC,GAAS,EAAIF,EAAM,IAGzB,OAAIH,IAAoB,IACtBG,EACGX,EAAUM,EAAI,WAAWH,CAAC,CAAC,GAAK,EAChCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,GAAK,EACvCS,EAAIC,GAAS,EAAIF,EAAM,KAGrBH,IAAoB,IACtBG,EACGX,EAAUM,EAAI,WAAWH,CAAC,CAAC,GAAK,GAChCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,GAAK,EACpCH,EAAUM,EAAI,WAAWH,EAAI,CAAC,CAAC,GAAK,EACvCS,EAAIC,GAAS,EAAKF,GAAO,EAAK,IAC9BC,EAAIC,GAAS,EAAIF,EAAM,KAGlBC,CACT,CAEA,SAASE,GAAiBC,EAAK,CAC7B,OAAOhB,EAAOgB,GAAO,GAAK,EAAI,EAC5BhB,EAAOgB,GAAO,GAAK,EAAI,EACvBhB,EAAOgB,GAAO,EAAI,EAAI,EACtBhB,EAAOgB,EAAM,EAAI,CACrB,CAEA,SAASC,GAAaC,EAAOC,EAAOC,EAAK,CAGvC,QAFIR,EACAS,EAAS,CAAC,EACLjB,EAAIe,EAAOf,EAAIgB,EAAKhB,GAAK,EAChCQ,GACIM,EAAMd,CAAC,GAAK,GAAM,WAClBc,EAAMd,EAAI,CAAC,GAAK,EAAK,QACtBc,EAAMd,EAAI,CAAC,EAAI,KAClBiB,EAAO,KAAKN,GAAgBH,CAAG,CAAC,EAElC,OAAOS,EAAO,KAAK,EAAE,CACvB,CAEA,SAAStB,GAAemB,EAAO,CAQ7B,QAPIN,EACAP,EAAMa,EAAM,OACZI,EAAajB,EAAM,EACnBkB,EAAQ,CAAC,EACTC,EAAiB,MAGZpB,EAAI,EAAGqB,EAAOpB,EAAMiB,EAAYlB,EAAIqB,EAAMrB,GAAKoB,EACtDD,EAAM,KAAKN,GAAYC,EAAOd,EAAIA,EAAIoB,EAAkBC,EAAOA,EAAQrB,EAAIoB,CAAe,CAAC,EAI7F,OAAIF,IAAe,GACjBV,EAAMM,EAAMb,EAAM,CAAC,EACnBkB,EAAM,KACJvB,EAAOY,GAAO,CAAC,EACfZ,EAAQY,GAAO,EAAK,EAAI,EACxB,IACF,GACSU,IAAe,IACxBV,GAAOM,EAAMb,EAAM,CAAC,GAAK,GAAKa,EAAMb,EAAM,CAAC,EAC3CkB,EAAM,KACJvB,EAAOY,GAAO,EAAE,EAChBZ,EAAQY,GAAO,EAAK,EAAI,EACxBZ,EAAQY,GAAO,EAAK,EAAI,EACxB,GACF,GAGKW,EAAM,KAAK,EAAE,CACtB,ICrIO,IAAMG,EAAN,cAGGC,CAAqB,CAHxB,kCAQH,oBAAiB,GAEjB,WAAW,QAAsB,CAC7B,MAAO,CACHC,EACAC,EACAC,EACAC,EACAC,EACAC,EACAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aASJ,CACJ,CAEA,OAAOC,EAAgC,CACnC,OAAO,KAAK,MAAM,OAAOA,CAAO,GAAK,QAAQ,QAAQ,CACzD,CAEA,4BAA6B,CACzB,OAAK,KAAK,eAGHC;AAAA;AAAA,qBAEM,IAAM,CACN,KAAK,OACT,KAAK,KAAoC,wBAA0B,OACxE,CAAC;AAAA;AAAA,cAECC,EAAI,sCAAsC,CAAC;AAAA,mBATtCC,CAWf,CACJ,EA3CIC,EAAA,CADCC,EAAS,CAAE,UAAW,EAAM,CAAC,GAJrBd,EAKT,+BAGAa,EAAA,CADCC,EAAS,CAAE,KAAM,OAAQ,CAAC,GAPlBd,EAQT,8BCRG,IAAMe,EAAN,cAAgDC,CAGrD,CACE,WAAW,QAAsB,CAC7B,OAAO,MAAM,OAAO,OAAOC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAS1B,CACL,CAEA,eAAwB,CACpB,OAAQ,KAAK,iBAAiB,YAAa,CACvC,KAAKC,EAAkB,MAAO,CAC1B,IAAMC,EAAQ,KAAK,gBAAgB,WAAW,MAC9C,OAAOC,EAAIC,yCAA2CF,EAAQ,IAAIA,CAAK,GAAK,EAAE,EAAE,CACpF,CACA,KAAKD,EAAkB,IACnB,OAAOE,EAAI,sCAAsC,EACrD,KAAKF,EAAkB,KACnB,OAAOE,EACH,0EACJ,EACJ,KAAKF,EAAkB,OACnB,OAAOE,EAAI,+CAA+C,CAClE,CAEA,OAAOA,EAAI,gDAAgD,CAC/D,CAEA,YAAqB,CACjB,OAAQ,KAAK,iBAAiB,YAAa,CACvC,KAAKF,EAAkB,MACnB,MAAO,gBACX,KAAKA,EAAkB,IACnB,MAAO,gBACX,KAAKA,EAAkB,KACnB,MAAO,WACX,KAAKA,EAAkB,OACnB,MAAO,QACf,CAEA,MAAO,eACX,CAEA,QAAyB,CACrB,OAAK,KAAK,UAGHI;AAAA;AAAA;AAAA,0BAGYC,GAAa,CACpB,KAAK,WAAWA,CAAC,CACrB,CAAC;AAAA;AAAA,kBAEC,KAAK,eAAe,CAAC;AAAA;AAAA,mCAEJ,KAAK,WAAW,CAAC;AAAA,yBAC3B,KAAK,cAAc,CAAC;AAAA;AAAA;AAAA,6BAGhB,KAAK,iBAAiB,cAAgBL,EAAkB,OAC3DE,EAAI,cAAc,EAClBA,EAAI,qBAAqB,CAAC;AAAA;AAAA;AAAA,+BAGrB,KAAK,WAAW,gBAAkB,CAAC,GAAG,IAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qCAMvC,KAAK,iBAAiB,cAAgBF,EAAkB,OAC/D,OACA,SAAS;AAAA,mCACJ,KAAK,iBAAiB,cAAgBA,EAAkB,OAC7D,eACA,QAAQ;AAAA,uCACCE,EAAI,wBAAwB,CAAC;AAAA;AAAA;AAAA;AAAA,iCAInCI,EAAuB,MAAQ,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAOxCJ,EAAI,UAAU,CAAC;AAAA;AAAA,sBAEnB,KAAK,2BAA2B,CAAC;AAAA;AAAA;AAAA,gBA7CpCE,6CAiDf,CACJ,EAvGaP,EAANU,EAAA,CADNC,EAAc,sCAAsC,GACxCX,GCDN,IAAMY,EAAN,cAA+CC,CAGpD,CAHK,kCAQH,oBAAiB,GAGjB,oBAAiB,GAEjB,QAAQC,EAAyC,CACzCA,EAAkB,IAAI,WAAW,GAAK,KAAK,YAAc,SACzD,KAAK,eAAiB,GACtB,KAAK,MACC,OACE,CACI,IAAK,KAAK,iBAAiB,SAC/B,EACA,CAAE,UAAW,EAAK,CACtB,EACC,KAAK,IAAM,CACR,KAAK,eAAiB,EAC1B,CAAC,EACA,MAAM,IAAM,CACT,KAAK,eAAiB,EAC1B,CAAC,EAEb,CAEA,QAAyB,CACrB,GAAI,CAAC,KAAK,UACN,OAAOC,8CAGX,IAAMC,GADS,KAAK,UAAU,gBAAgB,KAAO,CAAC,GAC1B,IAAKC,GAAQA,EAAI,MAAM,EACnD,OAAOF;AAAA;AAAA;AAAA,0BAGYG,GAAa,CACpB,KAAK,WAAWA,CAAC,CACrB,CAAC;AAAA;AAAA,kBAEC,KAAK,eAAe,CAAC;AAAA;AAAA,gCAEP,KAAK,cAAc;AAAA,6BACtB,KAAK,eACRC,EAAI,kCAAkC,EACtCH,EAAa,KAAK,IAAI,GAAKG,EAAI,wBAAwB,CAAC;AAAA;AAAA;AAAA;AAAA,4DAItB,KAAK,2BAA2B,CAAC;AAAA;AAAA,eAGzF,CACJ,EArDIC,EAAA,CADCC,EAAS,CAAE,UAAW,EAAM,CAAC,GAJrBT,EAKT,+BAGAQ,EAAA,CADCC,EAAS,CAAE,KAAM,OAAQ,CAAC,GAPlBT,EAQT,8BAGAQ,EAAA,CADCE,EAAM,GAVEV,EAWT,8BAXSA,EAANQ,EAAA,CADNG,EAAc,qCAAqC,GACvCX,GCfb,IAAAY,EAA0B,SAInB,SAASC,EAAOC,EAAyB,CAC5C,OAAgB,gBAAcA,CAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,KAAM,EAAE,CAC/F,CAEO,SAASC,EAAUD,EAAyB,CAC/C,OAAgB,gBAAcA,CAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,CAC7E,CAEO,SAASE,EAAMC,EAA2B,CAC7C,OAAO,WAAW,KAAK,KAAKA,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,CAAC,EAAIC,GACvEA,EAAE,WAAW,CAAC,CAClB,CACJ,CAEO,SAASC,GAAuB,CACnC,GAAI,kBAAiB,WAGrB,MAAI,OAAO,SAAS,WAAa,SAAW,OAAO,SAAS,WAAa,YAC/D,IAAI,MAAMC,EAAI,uDAAuD,CAAC,EAE1E,IAAI,MAAMA,EAAI,oCAAoC,CAAC,CAC7D,CAMO,SAASC,GACZC,EACAC,EACkC,CAClC,IAAMC,EAAOF,EAAwB,KAI/BG,EAAW,mBAAmB,OAAO,KAAKF,CAAM,CAAC,EACvDC,EAAK,GAAKR,EAAMH,EAAOG,EAAMS,CAAQ,CAAC,CAAC,EACvC,IAAMC,EAAYV,EAAMM,EAAwB,UAAU,SAAS,CAAC,EAEpE,MAAO,CACH,GAAGA,EACH,UAAAI,EACA,KAAAF,CACJ,CACJ,CAkBO,SAASG,GAA+BC,EAA8C,CACzF,IAAMC,EAAS,IAAI,WACdD,EAAa,SAA8C,iBAChE,EACME,EAAiB,IAAI,WAAWF,EAAa,SAAS,cAAc,EACpEG,EAAQ,IAAI,WAAWH,EAAa,KAAK,EAEzCI,EAA+BJ,EAAa,0BAA0B,EAC5E,MAAO,CACH,GAAIA,EAAa,GACjB,MAAOf,EAAOkB,CAAK,EACnB,KAAMH,EAAa,KACnB,6BAA8B,KAAK,UAAUI,CAA4B,EACzE,SAAU,CACN,eAAgBnB,EAAOiB,CAAc,EACrC,kBAAmBjB,EAAOgB,CAAM,CACpC,CACJ,CACJ,CAEO,SAASI,EACZC,EACiC,CACjC,IAAMR,EAAYV,EAAMkB,EAAyB,UAAU,SAAS,CAAC,EAE/DC,GAAoBD,EAAyB,kBAAoB,CAAC,GAAG,IACtEE,GAAyB,CACtB,IAAMC,EAAKrB,EAAMoB,EAAqB,GAAG,SAAS,CAAC,EACnD,OAAO,OAAO,OAAO,CAAC,EAAGA,EAAsB,CAAE,GAAAC,CAAG,CAAC,CACzD,CACJ,EAEA,MAAO,CACH,GAAGH,EACH,UAAAR,EACA,iBAAAS,CACJ,CACJ,CAmBO,SAASG,EAA4BV,EAAkD,CAC1F,IAAMW,EAAWX,EAAa,SACxBY,EAAW,IAAI,WAAWD,EAAS,iBAAiB,EACpDT,EAAiB,IAAI,WAAWS,EAAS,cAAc,EACvDR,EAAQ,IAAI,WAAWH,EAAa,KAAK,EACzCa,EAAM,IAAI,WAAWF,EAAS,SAAS,EACvCG,EAA4Bd,EAAa,0BAA0B,EAEzE,MAAO,CACH,GAAIA,EAAa,GACjB,MAAOf,EAAOkB,CAAK,EACnB,KAAMH,EAAa,KACnB,0BAA2B,KAAK,UAAUc,CAAyB,EAEnE,SAAU,CACN,eAAgB3B,EAAUe,CAAc,EACxC,UAAWf,EAAU0B,CAAG,EACxB,kBAAmB1B,EAAUyB,CAAQ,EACrC,WAAY,IAChB,CACJ,CACJ,CC7HO,IAAMG,EAAN,cAAiDC,CAGtD,CAHK,kCAWH,oBAAiB,GAGjB,oBAAiB,GAIjB,MAAM,cAA8B,CAGhC,IAAIC,EACJC,EAAqB,EACrB,GAAI,CAIA,GAHAD,EAAY,MAAM,UAAU,YAAY,IAAI,CACxC,UAAW,KAAK,mCACpB,CAAC,EACG,CAACA,EACD,MAAM,IAAI,MAAM,qBAAqB,CAE7C,OAASE,EAAK,CACV,MAAM,IAAI,MAAM,mCAAmCA,CAAG,EAAE,CAC5D,CAIA,IAAMC,EAAgCC,EAClCJ,CACJ,EAGA,GAAI,CACA,MAAM,KAAK,MAAM,OACb,CACI,SAAUG,CACd,EACA,CACI,UAAW,EACf,CACJ,CACJ,OAASD,EAAK,CACV,MAAM,IAAI,MAAM,8CAA8CA,CAAG,EAAE,CACvE,CACJ,CAEA,QAAQG,EAAyC,CAC7C,GAAIA,EAAkB,IAAI,WAAW,GAAK,KAAK,YAAc,OAAW,CAGpE,IAAMC,EAA2B,KAAK,iBAChC,UACN,KAAK,oCACDC,EAAkCD,CAAwB,EAC9D,KAAK,oBAAoB,CAC7B,CACJ,CAEA,MAAM,qBAAqC,CACnC,KAAK,iBAGT,KAAK,eAAiB,GACtB,KAAK,aAAa,EACb,MAAOE,GAAa,CACjB,QAAQ,KAAK,kEAAmEA,CAAC,EACjF,KAAK,aAAeC,EAAI,0CAA0C,CACtE,CAAC,EACA,QAAQ,IAAM,CACX,KAAK,eAAiB,EAC1B,CAAC,EACT,CAEA,QAAyB,CACrB,OAAOC;AAAA;AAAA,kBAEG,KAAK,eAAe,CAAC;AAAA;AAAA,gCAEP,KAAK,cAAc;AAAA,6BACtB,KAAK,eACRD,EAAI,mBAAmB,EACvB,KAAK,cAAgBA,EAAI,SAAS,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,sBAKtC,KAAK,eAUFE,EATAD;AAAA;AAAA,uCAEa,IAAM,CACX,KAAK,oBAAoB,CAC7B,CAAC;AAAA;AAAA;AAAA,gCAGCD,EAAI,sBAAsB,CAAC;AAAA,oCAE1B;AAAA,sBACX,KAAK,2BAA2B,CAAC;AAAA;AAAA;AAAA,eAInD,CACJ,EA1GIG,EAAA,CADCC,EAAS,CAAE,UAAW,EAAM,CAAC,GAJrBf,EAKT,+BAGAc,EAAA,CADCC,EAAS,GAPDf,EAQT,4BAGAc,EAAA,CADCC,EAAS,CAAE,KAAM,OAAQ,CAAC,GAVlBf,EAWT,8BAGAc,EAAA,CADCE,EAAM,GAbEhB,EAcT,8BAdSA,EAANc,EAAA,CADNG,EAAc,0CAA0C,GAC5CjB,GCQb,IAAMkB,GAAYC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgCLC,EAAN,cACKC,CAKZ,CANO,kCAWH,cAAW,GAeX,uBAA6B,GAnB7B,WAAW,QAAsB,CAC7B,MAAO,CAACC,EAAQC,EAASC,EAAQC,EAAeC,EAASC,EAAUT,EAAS,CAChF,CAIA,IAAI,QAAQU,EAAgB,CACxB,KAAK,KAAK,QAAUA,CACxB,CAEA,IAAI,SAAmB,CACnB,OAAO,KAAK,KAAK,OACrB,CAEA,IAAI,OAAkC,CAClC,OAAO,KAAK,KAAK,KACrB,CAQA,IAAI,wBAAwBA,EAAoC,CAC5D,IAAMC,EAAoB,KAAK,yBAC/B,KAAK,yBAA2BD,EAC5B,EAAAA,IAAU,QAAaA,IAAUC,IAKrC,IAAIC,EAASC,CAAc,EAAE,mBAAmB,CAC5C,SAAU,KAAK,MAAM,UAAY,GACjC,MAAO,OAAO,SAAS,OAAO,UAAU,CAAC,EACzC,6BAA8B,CAE1B,UAAW,KAAK,UAAU,WAAa,GACvC,kBAAmBH,CACvB,CACJ,CAAC,CACL,CAEA,IAAI,yBAAuD,CACvD,OAAO,KAAK,wBAChB,CAEA,OACII,EACAC,EACgB,CAChB,OAAO,KAAK,MAAM,OAAOD,EAASC,CAAO,GAAK,QAAQ,QAAQ,CAClE,CAEA,WAAWC,EAAgC,CACvC,GAAI,KAAK,mBAAqB,CAAC,KAAK,UAChC,OAMJ,GAHA,KAAK,kBAAoB,GAGrB,KAAK,UAAU,iBAAiB,SAAW,EAAG,CAC9C,KAAK,wBAA0B,KAAK,UAAU,iBAAiB,CAAC,EAChE,MACJ,CAIA,IAAMC,EAAgB,KAAK,UAAU,iBAAiB,KACjDC,GAAcA,EAAU,cAAgBC,EAAkB,IAC/D,EACA,GAAIC,EAAuB,MAAQH,EAAe,CAC9C,QAAQ,MACJ,4FACJ,EACA,KAAK,wBAA0BA,EAC/B,MACJ,CAGA,IAAMI,EAAoB,KAAK,UAAU,iBACpC,OAAQC,GAAoBA,EAAgB,QAAQ,EACpD,KAAK,CAACC,EAAGC,IAAMA,EAAE,SAAU,QAAQ,EAAID,EAAE,SAAU,QAAQ,CAAC,EAAE,CAAC,EAChEF,GAAqBA,EAAkB,cAAgBF,EAAkB,SACzE,KAAK,wBAA0BE,EAEvC,CAEA,yBAAyBC,EAAkC,CACvD,OAAQA,EAAgB,YAAa,CACjC,KAAKH,EAAkB,IACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,wBAAwB,CAAC;AAAA,iCACzBA,EAAI,6CAA6C,CAAC;AAAA,4BAEvE,KAAKP,EAAkB,SACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,eAAe,CAAC;AAAA,iCAChBA,EAAI,4CAA4C,CAAC;AAAA,4BAEtE,KAAKP,EAAkB,KACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,2BAA2B,CAAC;AAAA,iCAC5BA,EAAI,iCAAiC,CAAC;AAAA,4BAE3D,KAAKP,EAAkB,OACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,eAAe,CAAC;AAAA,iCAChBA,EAAI,4CAA4C,CAAC;AAAA,4BAEtE,KAAKP,EAAkB,IACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,KAAK,CAAC;AAAA,iCACNA,EAAI,sBAAsB,CAAC;AAAA,4BAEhD,KAAKP,EAAkB,MACnB,OAAOM;AAAA;AAAA,6BAEMC,EAAI,OAAO,CAAC;AAAA,iCACRA,EAAI,wBAAwB,CAAC;AAAA,4BAElD,QACI,KACR,CACA,OAAOC,CACX,CAEA,oBAAqC,CACjC,OAAOF;AAAA,cACD,KAAK,WAAW,iBAAiB,IAAKG,GAC7BH;AAAA;AAAA;AAAA;AAAA,iCAIU,IAAM,CACX,KAAK,wBAA0BG,CACnC,CAAC;AAAA;AAAA,0BAEC,KAAK,yBAAyBA,CAAU,CAAC;AAAA;AAAA,sBAGtD,CAAC;AAAA,cAEV,CAEA,mBAAoC,CAChC,OAAOH;AAAA,cACD,KAAK,WAAW,oBAAoB,IAAKI,GAChCJ;AAAA;AAAA;AAAA;AAAA,iCAIU,IAAM,CACX,KAAK,OAAO,CACR,UAAW,KAAK,UAAU,WAAa,GACvC,cAAeI,EAAM,EACzB,CAAC,CACL,CAAC;AAAA;AAAA;AAAA,iCAGQA,EAAM,IAAI;AAAA,qCACNA,EAAM,WAAW;AAAA;AAAA;AAAA,sBAIzC,CAAC;AAAA,cAEV,CAEA,uBAAwB,CACpB,GAAI,CAAC,KAAK,wBACN,OAAOF,EAEX,OAAQ,KAAK,yBAAyB,YAAa,CAC/C,KAAKR,EAAkB,OACvB,KAAKA,EAAkB,KACvB,KAAKA,EAAkB,MACvB,KAAKA,EAAkB,IACnB,OAAOM;AAAA,4BACK,IAAI;AAAA,iCACC,KAAK,SAAS;AAAA,uCACR,KAAK,uBAAuB;AAAA,uCAC5B,KAAK,WAAW,kBAAoB,CAAC,GAAG,OAAS,CAAC;AAAA;AAAA,yDAG7E,KAAKN,EAAkB,SACnB,OAAOM;AAAA,4BACK,IAAI;AAAA,iCACC,KAAK,SAAS;AAAA,uCACR,KAAK,uBAAuB;AAAA,uCAC5B,KAAK,WAAW,kBAAoB,CAAC,GAAG,OAAS,CAAC;AAAA;AAAA,6DAG7E,KAAKN,EAAkB,IACnB,OAAOM;AAAA,4BACK,IAAI;AAAA,iCACC,KAAK,SAAS;AAAA,uCACR,KAAK,uBAAuB;AAAA,uCAC5B,KAAK,WAAW,kBAAoB,CAAC,GAAG,OAAS,CAAC;AAAA;AAAA,uDAGjF,CACA,OAAOE,CACX,CAEA,QAAyB,CACrB,OAAO,KAAK,UACNF;AAAA,wDAC0C,KAAK,UAAU,UAAU,KAAK;AAAA;AAAA,oBAElE,KAAK,wBACD,KAAK,sBAAsB,EAC3BA;AAAA;AAAA,sCAEc,KAAK,eAAe,CAAC;AAAA,sCACrB,KAAK,wBACD,GACAA,OAAUC,EAAI,kCAAkC,CAAC,MAAM;AAAA,sCAC3D,KAAK,UAAU,oBAAoB,OAAS,EACxC,KAAK,kBAAkB,EACvBD,GAAM;AAAA;AAAA,kCAEd,KAAK,mBAAmB,CAAC;AAAA;AAAA;AAAA;AAAA,sCAIrB,GACxBA,6CACV,CACJ,EAxNIK,EAAA,CADCC,EAAM,GAzBE7B,EA0BT,iCAGA4B,EAAA,CADCC,EAAM,GA5BE7B,EA6BT,wCA7BSA,EAAN4B,EAAA,CADNE,EAAc,iCAAiC,GACnC9B", "names": ["require_base64_js", "__commonJSMin", "exports", "byteLength", "toByteArray", "fromByteArray", "lookup", "revLookup", "Arr", "code", "i", "len", "getLens", "b64", "validLen", "placeHoldersLen", "lens", "_byteLength", "tmp", "arr", "curByte", "tripletToBase64", "num", "encodeChunk", "uint8", "start", "end", "output", "extraBytes", "parts", "maxChunkLength", "len2", "BaseDeviceStage", "BaseStage", "patternfly_base_default", "login_default", "form_default", "form_control_default", "title_default", "button_default", "i", "payload", "ke", "msg", "D", "__decorateClass", "n", "AuthenticatorValidateStageWebCode", "BaseDeviceStage", "i", "DeviceClassesEnum", "email", "msg", "str", "ke", "e", "PasswordManagerPrefill", "__decorateClass", "t", "AuthenticatorValidateStageWebDuo", "BaseDeviceStage", "changedProperties", "ke", "errorMessage", "err", "e", "msg", "__decorateClass", "n", "r", "t", "base64js", "b64enc", "buf", "b64RawEnc", "u8arr", "input", "c", "checkWebAuthnSupport", "msg", "transformCredentialCreateOptions", "credentialCreateOptions", "userId", "user", "stringId", "challenge", "transformNewAssertionForServer", "newAssertion", "attObj", "clientDataJSON", "rawId", "registrationClientExtensions", "transformCredentialRequestOptions", "credentialRequestOptions", "allowCredentials", "credentialDescriptor", "id", "transformAssertionForServer", "response", "authData", "sig", "assertionClientExtensions", "AuthenticatorValidateStageWebAuthn", "BaseDeviceStage", "assertion", "checkWebAuthnSupport", "err", "transformedAssertionForServer", "transformAssertionForServer", "changedProperties", "credentialRequestOptions", "transformCredentialRequestOptions", "e", "msg", "ke", "D", "__decorateClass", "n", "r", "t", "customCSS", "i", "AuthenticatorValidateStage", "BaseStage", "patternfly_base_default", "login_default", "form_default", "form_control_default", "title_default", "button_default", "value", "previousChallenge", "FlowsApi", "DEFAULT_CONFIG", "payload", "options", "_changed", "totpChallenge", "challenge", "DeviceClassesEnum", "PasswordManagerPrefill", "lastUsedChallenge", "deviceChallenge", "a", "b", "ke", "msg", "D", "challenges", "stage", "__decorateClass", "r", "t"] }