@auth0/auth0-spa-js 2.10.0 → 2.11.1

package/README.md

@@ -30,7 +30,7 @@ npm install @auth0/auth0-spa-js
 From the CDN:
 
 ```html
-<script src="https://cdn.auth0.com/js/auth0-spa-js/2.10/auth0-spa-js.production.js"></script>
+<script src="https://cdn.auth0.com/js/auth0-spa-js/2.11/auth0-spa-js.production.js"></script>
 ```
 
 ### Configure Auth0

package/dist/auth0-spa-js.development.js

@@ -540,7 +540,7 @@
         exports.default = SuperTokensLock;
     }));
     var Lock = unwrapExports(browserTabsLock);
-    var version = "2.10.0";
+    var version = "2.11.1";
     const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
     const DEFAULT_POPUP_CONFIG_OPTIONS = {
         timeoutInSeconds: DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS
@@ -2808,6 +2808,7 @@
             }
         }
         async _requestToken(options, additionalParameters) {
+            var _a, _b;
             const {nonceIn: nonceIn, organization: organization, scopesToRequest: scopesToRequest} = additionalParameters || {};
             const authResult = await oauthToken(Object.assign(Object.assign({
                 baseUrl: this.domainUrl,
@@ -2821,6 +2822,13 @@
                 scope: scopesToRequest || options.scope
             }), this.worker);
             const decodedToken = await this._verifyIdToken(authResult.id_token, nonceIn, organization);
+            if (options.grant_type === "authorization_code") {
+                const existingIdToken = await this._getIdTokenFromCache();
+                if (((_b = (_a = existingIdToken === null || existingIdToken === void 0 ? void 0 : existingIdToken.decodedToken) === null || _a === void 0 ? void 0 : _a.claims) === null || _b === void 0 ? void 0 : _b.sub) && existingIdToken.decodedToken.claims.sub !== decodedToken.claims.sub) {
+                    await this.cacheManager.clear(this.options.clientId);
+                    this.userCache.remove(CACHE_KEY_ID_TOKEN_SUFFIX);
+                }
+            }
             await this._saveEntryInCache(Object.assign(Object.assign(Object.assign(Object.assign({}, authResult), {
                 decodedToken: decodedToken,
                 scope: options.scope,
@@ -2845,7 +2853,8 @@
                 subject_token: options.subject_token,
                 subject_token_type: options.subject_token_type,
                 scope: scopesToRequest(this.scope, options.scope, options.audience || this.options.authorizationParams.audience),
-                audience: options.audience || this.options.authorizationParams.audience
+                audience: options.audience || this.options.authorizationParams.audience,
+                organization: options.organization || this.options.authorizationParams.organization
             });
         }
         _assertDpop(dpop) {