@auth0/auth0-spa-js 2.15.0 → 2.17.0

package/dist/lib/auth0-spa-js.cjs.js

@@ -18,7 +18,7 @@ typeof SuppressedError === "function" ? SuppressedError : function(error, suppre
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
-var version = "2.15.0";
+var version = "2.17.0";
 
 const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
 
@@ -40,6 +40,8 @@ const INVALID_REFRESH_TOKEN_ERROR_MESSAGE = "invalid refresh token";
 
 const USER_BLOCKED_ERROR_MESSAGE = "user is blocked";
 
+const MFA_STEP_UP_ERROR_DESCRIPTION = "Multifactor authentication required";
+
 const DEFAULT_SCOPE = "openid profile email";
 
 const DEFAULT_SESSION_CHECK_EXPIRY_DAYS = 1;
@@ -8293,29 +8295,60 @@ class Auth0Client {
             return;
         }
         const lockKey = buildGetTokenSilentlyLockKey(this.options.clientId, getTokenOptions.authorizationParams.audience || "default");
-        return await this.lockManager.runWithLock(lockKey, 5e3, (async () => {
-            if (cacheMode !== "off") {
-                const entry = await this._getEntryFromCache({
-                    scope: getTokenOptions.authorizationParams.scope,
-                    audience: getTokenOptions.authorizationParams.audience || DEFAULT_AUDIENCE,
-                    clientId: this.options.clientId
-                });
-                if (entry) {
-                    return entry;
+        try {
+            return await this.lockManager.runWithLock(lockKey, 5e3, (async () => {
+                if (cacheMode !== "off") {
+                    const entry = await this._getEntryFromCache({
+                        scope: getTokenOptions.authorizationParams.scope,
+                        audience: getTokenOptions.authorizationParams.audience || DEFAULT_AUDIENCE,
+                        clientId: this.options.clientId
+                    });
+                    if (entry) {
+                        return entry;
+                    }
                 }
+                const authResult = this.options.useRefreshTokens ? await this._getTokenUsingRefreshToken(getTokenOptions) : await this._getTokenFromIFrame(getTokenOptions);
+                const {id_token: id_token, token_type: token_type, access_token: access_token, oauthTokenScope: oauthTokenScope, expires_in: expires_in} = authResult;
+                return Object.assign(Object.assign({
+                    id_token: id_token,
+                    token_type: token_type,
+                    access_token: access_token
+                }, oauthTokenScope ? {
+                    scope: oauthTokenScope
+                } : null), {
+                    expires_in: expires_in
+                });
+            }));
+        } catch (error) {
+            if (this._isInteractiveError(error) && this.options.interactiveErrorHandler === "popup") {
+                return await this._handleInteractiveErrorWithPopup(getTokenOptions);
             }
-            const authResult = this.options.useRefreshTokens ? await this._getTokenUsingRefreshToken(getTokenOptions) : await this._getTokenFromIFrame(getTokenOptions);
-            const {id_token: id_token, token_type: token_type, access_token: access_token, oauthTokenScope: oauthTokenScope, expires_in: expires_in} = authResult;
-            return Object.assign(Object.assign({
-                id_token: id_token,
-                token_type: token_type,
-                access_token: access_token
-            }, oauthTokenScope ? {
-                scope: oauthTokenScope
-            } : null), {
-                expires_in: expires_in
+            throw error;
+        }
+    }
+    _isInteractiveError(error) {
+        return error instanceof MfaRequiredError || error instanceof GenericError && this._isIframeMfaError(error);
+    }
+    _isIframeMfaError(error) {
+        return error.error === "login_required" && error.error_description === MFA_STEP_UP_ERROR_DESCRIPTION;
+    }
+    async _handleInteractiveErrorWithPopup(options) {
+        try {
+            await this.loginWithPopup({
+                authorizationParams: options.authorizationParams
             });
-        }));
+            const entry = await this._getEntryFromCache({
+                scope: options.authorizationParams.scope,
+                audience: options.authorizationParams.audience || DEFAULT_AUDIENCE,
+                clientId: this.options.clientId
+            });
+            if (!entry) {
+                throw new GenericError("interactive_handler_cache_miss", "Token not found in cache after interactive authentication");
+            }
+            return entry;
+        } catch (error) {
+            throw error;
+        }
     }
     async getTokenWithPopup() {
         let options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
@@ -8422,9 +8455,12 @@ class Auth0Client {
             }));
         } catch (e) {
             if (e.error === "login_required") {
-                this.logout({
-                    openUrl: false
-                });
+                const shouldSkipLogoutForMfaStepUp = e instanceof GenericError && this._isIframeMfaError(e) && this.options.interactiveErrorHandler === "popup";
+                if (!shouldSkipLogoutForMfaStepUp) {
+                    this.logout({
+                        openUrl: false
+                    });
+                }
             }
             throw e;
         }