@auth0/auth0-spa-js 2.17.1 → 2.18.0

package/README.md

@@ -30,7 +30,7 @@ npm install @auth0/auth0-spa-js
 From the CDN:
 
 ```html
-<script src="https://cdn.auth0.com/js/auth0-spa-js/2.17/auth0-spa-js.production.js"></script>
+<script src="https://cdn.auth0.com/js/auth0-spa-js/2.18/auth0-spa-js.production.js"></script>
 ```
 
 ### Configure Auth0

package/dist/auth0-spa-js.development.js

@@ -15,7 +15,7 @@
         var e = new Error(message);
         return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
     };
-    var version = "2.17.1";
+    var version = "2.18.0";
     const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
     const DEFAULT_POPUP_CONFIG_OPTIONS = {
         timeoutInSeconds: DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS
@@ -218,9 +218,16 @@
     const getCrypto = () => window.crypto;
     const createRandomString = () => {
         const charset = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_~.";
+        const validMax = 256 - 256 % charset.length;
         let random = "";
-        const randomValues = Array.from(getCrypto().getRandomValues(new Uint8Array(43)));
-        randomValues.forEach(v => random += charset[v % charset.length]);
+        while (random.length < 43) {
+            const bytes = getCrypto().getRandomValues(new Uint8Array(43 - random.length));
+            for (const byte of bytes) {
+                if (random.length < 43 && byte < validMax) {
+                    random += charset[byte % charset.length];
+                }
+            }
+        }
         return random;
     };
     const encode$2 = value => btoa(value);
@@ -2484,55 +2491,40 @@
         };
     }
     function AsyncGenerator(e) {
-        var r, t;
-        function resume(r, t) {
+        var t, n;
+        function resume(t, n) {
             try {
-                var n = e[r](t), o = n.value, u = o instanceof _OverloadYield;
-                Promise.resolve(u ? o.v : o).then(function(t) {
+                var r = e[t](n), o = r.value, u = o instanceof _OverloadYield;
+                Promise.resolve(u ? o.v : o).then(function(n) {
                     if (u) {
-                        var i = "return" === r ? "return" : "next";
-                        if (!o.k || t.done) return resume(i, t);
-                        t = e[i](t).value;
+                        var i = "return" === t && o.k ? t : "next";
+                        if (!o.k || n.done) return resume(i, n);
+                        n = e[i](n).value;
                     }
-                    settle(n.done ? "return" : "normal", t);
+                    settle(!!r.done, n);
                 }, function(e) {
                     resume("throw", e);
                 });
             } catch (e) {
-                settle("throw", e);
+                settle(2, e);
             }
         }
-        function settle(e, n) {
-            switch (e) {
-              case "return":
-                r.resolve({
-                    value: n,
-                    done: !0
-                });
-                break;
-
-              case "throw":
-                r.reject(n);
-                break;
-
-              default:
-                r.resolve({
-                    value: n,
-                    done: !1
-                });
-            }
-            (r = r.next) ? resume(r.key, r.arg) : t = null;
+        function settle(e, r) {
+            2 === e ? t.reject(r) : t.resolve({
+                value: r,
+                done: e
+            }), (t = t.next) ? resume(t.key, t.arg) : n = null;
         }
-        this._invoke = function(e, n) {
+        this._invoke = function(e, r) {
             return new Promise(function(o, u) {
                 var i = {
                     key: e,
-                    arg: n,
+                    arg: r,
                     resolve: o,
                     reject: u,
                     next: null
                 };
-                t ? t = t.next = i : (r = t = i, resume(e, n));
+                n ? n = n.next = i : (t = n = i, resume(e, r));
             });
         }, "function" != typeof e.return && (this.return = void 0);
     }
@@ -6333,7 +6325,7 @@
     let USER_AGENT;
     if (typeof navigator === "undefined" || !((_navigator$userAgent = navigator.userAgent) !== null && _navigator$userAgent !== void 0 && (_navigator$userAgent$ = _navigator$userAgent.startsWith) !== null && _navigator$userAgent$ !== void 0 && _navigator$userAgent$.call(_navigator$userAgent, "Mozilla/5.0 "))) {
         const NAME = "jose";
-        const VERSION = "v6.2.1";
+        const VERSION = "v6.2.2";
         USER_AGENT = "".concat(NAME, "/").concat(VERSION);
     }
     const customFetch = Symbol();
@@ -7699,6 +7691,31 @@
                 });
             }
         }
+        _extractSessionTransferToken(paramName) {
+            const params = new URLSearchParams(window.location.search);
+            return params.get(paramName) || undefined;
+        }
+        _clearSessionTransferTokenFromUrl(paramName) {
+            try {
+                const url = new URL(window.location.href);
+                if (url.searchParams.has(paramName)) {
+                    url.searchParams.delete(paramName);
+                    window.history.replaceState({}, "", url.toString());
+                }
+            } catch (_a) {}
+        }
+        _applySessionTransferToken(authorizationParams) {
+            const paramName = this.options.sessionTransferTokenQueryParamName;
+            if (!paramName || authorizationParams.session_transfer_token) {
+                return authorizationParams;
+            }
+            const token = this._extractSessionTransferToken(paramName);
+            if (!token) return authorizationParams;
+            this._clearSessionTransferTokenFromUrl(paramName);
+            return Object.assign(Object.assign({}, authorizationParams), {
+                session_transfer_token: token
+            });
+        }
         async _prepareAuthorizeUrl(authorizationParams, authorizeOptions, fallbackRedirectUri) {
             var _a;
             const state = encode$2(createRandomString());
@@ -7729,7 +7746,8 @@
                     throw new PopupOpenError;
                 }
             }
-            const params = await this._prepareAuthorizeUrl(options.authorizationParams || {}, {
+            const authorizationParams = this._applySessionTransferToken(options.authorizationParams || {});
+            const params = await this._prepareAuthorizeUrl(authorizationParams, {
                 response_mode: "web_message"
             }, window.location.origin);
             config.popup.location.href = params.url;
@@ -7767,7 +7785,8 @@
             var _a;
             const _b = patchOpenUrlWithOnRedirect(options), {openUrl: openUrl, fragment: fragment, appState: appState} = _b, urlOptions = __rest(_b, [ "openUrl", "fragment", "appState" ]);
             const organization = ((_a = urlOptions.authorizationParams) === null || _a === void 0 ? void 0 : _a.organization) || this.options.authorizationParams.organization;
-            const _c = await this._prepareAuthorizeUrl(urlOptions.authorizationParams || {}), {url: url} = _c, transaction = __rest(_c, [ "url" ]);
+            const authorizationParams = this._applySessionTransferToken(urlOptions.authorizationParams || {});
+            const _c = await this._prepareAuthorizeUrl(authorizationParams), {url: url} = _c, transaction = __rest(_c, [ "url" ]);
             this.transactionManager.create(Object.assign(Object.assign(Object.assign({}, transaction), {
                 appState: appState,
                 response_type: exports.ResponseType.Code