@asgardeo/javascript 0.18.0 → 0.18.1

package/dist/models/v2/embedded-signin-flow-v2.d.ts

@@ -155,6 +155,11 @@ export interface ExtendedEmbeddedSignInFlowResponse {
  * @experimental This interface is part of the new Asgardeo platform
  */
 export interface EmbeddedSignInFlowResponse extends ExtendedEmbeddedSignInFlowResponse {
+    /**
+     * Per-step challenge token for replay protection.
+     * Must be included in the next request to continue this flow.
+     */
+    challengeToken?: string;
     /**
      * Core response data containing UI components and flow metadata.
      * Includes both modern meta.components structure and legacy fields for compatibility.
@@ -302,6 +307,11 @@ export interface EmbeddedSignInFlowRequest extends Partial<EmbeddedSignInFlowIni
      * Corresponds to action components in the UI (e.g., submit button, social login).
      */
     action?: string;
+    /**
+     * Per-step challenge token received from the previous flow response.
+     * Required when continuing an existing flow to prevent replay attacks.
+     */
+    challengeToken?: string;
     /**
      * Identifier of the flow instance to continue.
      * Required when submitting data for an existing flow.

package/dist/models/v2/embedded-signup-flow-v2.d.ts

@@ -130,6 +130,11 @@ export interface ExtendedEmbeddedSignUpFlowResponse {
  * @see {@link EmbeddedSignUpFlowStatus} for available flow statuses
  */
 export interface EmbeddedSignUpFlowResponse extends ExtendedEmbeddedSignUpFlowResponse {
+    /**
+     * Per-step challenge token for replay protection.
+     * Must be included in the next request to continue this flow.
+     */
+    challengeToken?: string;
     /**
      * Flow data containing form inputs and available actions.
      * This is transformed to component-driven format by the React transformer.
@@ -191,6 +196,7 @@ export type EmbeddedSignUpFlowInitiateRequest = {
  */
 export interface EmbeddedSignUpFlowRequest extends Partial<EmbeddedSignUpFlowInitiateRequest> {
     action?: string;
+    challengeToken?: string;
     executionId?: string;
     inputs?: Record<string, any>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asgardeo/javascript",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Framework agnostic JavaScript SDK for Asgardeo.",
   "keywords": [
     "asgardeo",