@auth0/auth0-spa-js 2.16.0 → 2.17.0

package/dist/lib/auth0-spa-js.cjs.js

@@ -18,7 +18,7 @@ typeof SuppressedError === "function" ? SuppressedError : function(error, suppre
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
-var version = "2.16.0";
+var version = "2.17.0";
 
 const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
 
@@ -40,6 +40,8 @@ const INVALID_REFRESH_TOKEN_ERROR_MESSAGE = "invalid refresh token";
 
 const USER_BLOCKED_ERROR_MESSAGE = "user is blocked";
 
+const MFA_STEP_UP_ERROR_DESCRIPTION = "Multifactor authentication required";
+
 const DEFAULT_SCOPE = "openid profile email";
 
 const DEFAULT_SESSION_CHECK_EXPIRY_DAYS = 1;
@@ -8325,7 +8327,10 @@ class Auth0Client {
         }
     }
     _isInteractiveError(error) {
-        return error instanceof MfaRequiredError;
+        return error instanceof MfaRequiredError || error instanceof GenericError && this._isIframeMfaError(error);
+    }
+    _isIframeMfaError(error) {
+        return error.error === "login_required" && error.error_description === MFA_STEP_UP_ERROR_DESCRIPTION;
     }
     async _handleInteractiveErrorWithPopup(options) {
         try {
@@ -8450,9 +8455,12 @@ class Auth0Client {
             }));
         } catch (e) {
             if (e.error === "login_required") {
-                this.logout({
-                    openUrl: false
-                });
+                const shouldSkipLogoutForMfaStepUp = e instanceof GenericError && this._isIframeMfaError(e) && this.options.interactiveErrorHandler === "popup";
+                if (!shouldSkipLogoutForMfaStepUp) {
+                    this.logout({
+                        openUrl: false
+                    });
+                }
             }
             throw e;
         }