@auth0/auth0-spa-js 2.13.1 → 2.14.0

package/dist/lib/auth0-spa-js.cjs.js

@@ -551,7 +551,7 @@ var SuperTokensLock = function() {
 
 var _default = browserTabsLock.default = SuperTokensLock;
 
-var version = "2.13.1";
+var version = "2.14.0";
 
 const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
 
@@ -571,6 +571,8 @@ const MISSING_REFRESH_TOKEN_ERROR_MESSAGE = "Missing Refresh Token";
 
 const INVALID_REFRESH_TOKEN_ERROR_MESSAGE = "invalid refresh token";
 
+const USER_BLOCKED_ERROR_MESSAGE = "user is blocked";
+
 const DEFAULT_SCOPE = "openid profile email";
 
 const DEFAULT_SESSION_CHECK_EXPIRY_DAYS = 1;
@@ -8443,8 +8445,16 @@ class Auth0Client {
                 audience: options.authorizationParams.audience || DEFAULT_AUDIENCE
             });
         } catch (e) {
-            if ((e.message.indexOf(MISSING_REFRESH_TOKEN_ERROR_MESSAGE) > -1 || e.message && e.message.indexOf(INVALID_REFRESH_TOKEN_ERROR_MESSAGE) > -1) && this.options.useRefreshTokensFallback) {
-                return await this._getTokenFromIFrame(options);
+            if (e.message) {
+                if (e.message.includes(USER_BLOCKED_ERROR_MESSAGE)) {
+                    await this.logout({
+                        openUrl: false
+                    });
+                    throw e;
+                }
+                if ((e.message.includes(MISSING_REFRESH_TOKEN_ERROR_MESSAGE) || e.message.includes(INVALID_REFRESH_TOKEN_ERROR_MESSAGE)) && this.options.useRefreshTokensFallback) {
+                    return await this._getTokenFromIFrame(options);
+                }
             }
             if (e instanceof MfaRequiredError) {
                 this.mfa.setMFAAuthDetails(e.mfa_token, (_a = options.authorizationParams) === null || _a === void 0 ? void 0 : _a.scope, (_b = options.authorizationParams) === null || _b === void 0 ? void 0 : _b.audience, e.mfa_requirements);
@@ -8537,7 +8547,7 @@ class Auth0Client {
             decodedToken: decodedToken
         });
     }
-    async exchangeToken(options) {
+    async loginWithCustomTokenExchange(options) {
         return this._requestToken(Object.assign(Object.assign({}, options), {
             grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
             subject_token: options.subject_token,
@@ -8547,6 +8557,9 @@ class Auth0Client {
             organization: options.organization || this.options.authorizationParams.organization
         }));
     }
+    async exchangeToken(options) {
+        return this.loginWithCustomTokenExchange(options);
+    }
     _assertDpop(dpop) {
         if (!dpop) {
             throw new Error("`useDpop` option must be enabled before using DPoP.");