@authsignal/browser 0.5.10 → 0.6.0

package/dist/api/helpers.d.ts

@@ -1,4 +1,4 @@
-declare type BuildHeadersParams = {
+type BuildHeadersParams = {
     token?: string;
     tenantId: string;
 };

package/dist/api/passkey-api-client.d.ts

@@ -16,6 +16,8 @@ export declare class PasskeyApiClient {
     verify({ token, challengeId, authenticationCredential, deviceId, }: {
         token?: string;
     } & VerifyRequest): Promise<AuthsignalResponse<VerifyResponse>>;
-    getPasskeyAuthenticator(credentialId: string): Promise<AuthsignalResponse<PasskeyAuthenticatorResponse>>;
+    getPasskeyAuthenticator({ credentialIds, }: {
+        credentialIds: string[];
+    }): Promise<AuthsignalResponse<PasskeyAuthenticatorResponse>>;
     challenge(action: string): Promise<AuthsignalResponse<ChallengeResponse>>;
 }

package/dist/api/types/passkey.d.ts

@@ -1,34 +1,35 @@
 import { AuthenticationResponseJSON, AuthenticatorAttachment, PublicKeyCredentialCreationOptionsJSON, RegistrationResponseJSON } from "@simplewebauthn/types";
-export declare type RegistrationOptsRequest = {
+export type RegistrationOptsRequest = {
     username?: string;
     authenticatorAttachment?: AuthenticatorAttachment | null;
 };
-export declare type RegistrationOptsResponse = {
+export type RegistrationOptsResponse = {
     challengeId: string;
     options: PublicKeyCredentialCreationOptionsJSON;
 };
-export declare type AuthenticationOptsRequest = {
+export type AuthenticationOptsRequest = {
     challengeId?: string;
 };
-export declare type AuthenticationOptsResponse = {
+export type AuthenticationOptsResponse = {
     challengeId: string;
     options: PublicKeyCredentialCreationOptionsJSON;
 };
-export declare type AddAuthenticatorRequest = {
+export type AddAuthenticatorRequest = {
     challengeId: string;
     registrationCredential: RegistrationResponseJSON;
 };
-export declare type AddAuthenticatorResponse = {
+export type AddAuthenticatorResponse = {
     isVerified: boolean;
     accessToken?: string;
     userAuthenticatorId?: string;
+    userId?: string;
 };
-export declare type VerifyRequest = {
+export type VerifyRequest = {
     challengeId: string;
     authenticationCredential: AuthenticationResponseJSON;
     deviceId?: string;
 };
-export declare type VerifyResponse = {
+export type VerifyResponse = {
     isVerified: boolean;
     accessToken?: string;
     userId?: string;
@@ -36,7 +37,7 @@ export declare type VerifyResponse = {
     username?: string;
     userDisplayName?: string;
 };
-export declare type PasskeyAuthenticatorResponse = {
+export type PasskeyAuthenticatorResponse = {
     credentialId: string;
     verifiedAt: string;
 };

package/dist/api/types/shared.d.ts

@@ -1,20 +1,21 @@
-export declare type ApiClientOptions = {
+export type ApiClientOptions = {
     baseUrl: string;
     tenantId: string;
 };
-export declare type EnrollResponse = {
+export type EnrollResponse = {
     userAuthenticatorId: string;
+    userId: string;
 };
-export declare type ChallengeResponse = {
+export type ChallengeResponse = {
     challengeId: string;
 };
-export declare type VerifyResponse = {
+export type VerifyResponse = {
     isVerified: boolean;
     accessToken?: string;
     failureReason?: string;
 };
-export declare type ErrorResponse = {
+export type ErrorResponse = {
     error: string;
     errorDescription?: string;
 };
-export declare type AuthsignalResponse<T> = T | ErrorResponse;
+export type AuthsignalResponse<T> = T | ErrorResponse;

package/dist/api/types/totp.d.ts

@@ -1,5 +1,6 @@
-export declare type EnrollResponse = {
-    userAuthenticatorID: string;
+export type EnrollResponse = {
+    userAuthenticatorId: string;
+    userId: string;
     uri: string;
     secret: string;
 };

package/dist/email.d.ts

@@ -1,12 +1,12 @@
 import { AuthsignalResponse, ChallengeResponse, EnrollResponse, VerifyResponse } from "./api/types/shared";
-declare type EmailOptions = {
+type EmailOptions = {
     baseUrl: string;
     tenantId: string;
 };
-declare type EnrollParams = {
+type EnrollParams = {
     email: string;
 };
-declare type VerifyParams = {
+type VerifyParams = {
     code: string;
 };
 export declare class Email {

package/dist/handlers/popup-handler.d.ts

@@ -1,8 +1,8 @@
 import { A11yDialogEvent } from "a11y-dialog";
-declare type PopupShowInput = {
+type PopupShowInput = {
     url: string;
 };
-declare type PopupHandlerOptions = {
+type PopupHandlerOptions = {
     width?: string;
     isClosable?: boolean;
 };

package/dist/handlers/window-handler.d.ts

@@ -1,4 +1,4 @@
-declare type WindowShowInput = {
+type WindowShowInput = {
     url: string;
     width?: number;
     height?: number;

package/dist/helpers.d.ts

@@ -1,5 +1,5 @@
 import { ErrorResponse } from "./api/types/shared";
-declare type CookieOptions = {
+type CookieOptions = {
     name: string;
     value: string;
     expire: number;

package/dist/index.js

@@ -109,6 +109,17 @@ OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THIS SOFTWARE.
 ***************************************************************************** */
 
+var __assign = function() {
+    __assign = Object.assign || function __assign(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+
 function __awaiter(thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -147,11 +158,7 @@ function __generator(thisArg, body) {
     }
 }
 
-/* [@simplewebauthn/browser@9.0.1] */
-function utf8StringToBuffer(value) {
-    return new TextEncoder().encode(value);
-}
-
+/* [@simplewebauthn/browser@10.0.0] */
 function bufferToBase64URLString(buffer) {
     const bytes = new Uint8Array(buffer);
     let str = '';
@@ -330,18 +337,18 @@ function toAuthenticatorAttachment(attachment) {
     return attachment;
 }
 
-async function startRegistration(creationOptionsJSON) {
+async function startRegistration(optionsJSON) {
     if (!browserSupportsWebAuthn()) {
         throw new Error('WebAuthn is not supported in this browser');
     }
     const publicKey = {
-        ...creationOptionsJSON,
-        challenge: base64URLStringToBuffer(creationOptionsJSON.challenge),
+        ...optionsJSON,
+        challenge: base64URLStringToBuffer(optionsJSON.challenge),
         user: {
-            ...creationOptionsJSON.user,
-            id: utf8StringToBuffer(creationOptionsJSON.user.id),
+            ...optionsJSON.user,
+            id: base64URLStringToBuffer(optionsJSON.user.id),
         },
-        excludeCredentials: creationOptionsJSON.excludeCredentials?.map(toPublicKeyCredentialDescriptor),
+        excludeCredentials: optionsJSON.excludeCredentials?.map(toPublicKeyCredentialDescriptor),
     };
     const options = { publicKey };
     options.signal = WebAuthnAbortService.createNewAbortSignal();
@@ -410,11 +417,10 @@ function warnOnBrokenImplementation(methodName, cause) {
     console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${methodName}. You should report this error to them.\n`, cause);
 }
 
-function bufferToUTF8String(value) {
-    return new TextDecoder('utf-8').decode(value);
-}
-
 function browserSupportsWebAuthnAutofill() {
+    if (!browserSupportsWebAuthn()) {
+        return new Promise((resolve) => resolve(false));
+    }
     const globalPublicKeyCredential = window
         .PublicKeyCredential;
     if (globalPublicKeyCredential.isConditionalMediationAvailable === undefined) {
@@ -471,17 +477,17 @@ function identifyAuthenticationError({ error, options, }) {
     return error;
 }
 
-async function startAuthentication(requestOptionsJSON, useBrowserAutofill = false) {
+async function startAuthentication(optionsJSON, useBrowserAutofill = false) {
     if (!browserSupportsWebAuthn()) {
         throw new Error('WebAuthn is not supported in this browser');
     }
     let allowCredentials;
-    if (requestOptionsJSON.allowCredentials?.length !== 0) {
-        allowCredentials = requestOptionsJSON.allowCredentials?.map(toPublicKeyCredentialDescriptor);
+    if (optionsJSON.allowCredentials?.length !== 0) {
+        allowCredentials = optionsJSON.allowCredentials?.map(toPublicKeyCredentialDescriptor);
     }
     const publicKey = {
-        ...requestOptionsJSON,
-        challenge: base64URLStringToBuffer(requestOptionsJSON.challenge),
+        ...optionsJSON,
+        challenge: base64URLStringToBuffer(optionsJSON.challenge),
         allowCredentials,
     };
     const options = {};
@@ -489,7 +495,7 @@ async function startAuthentication(requestOptionsJSON, useBrowserAutofill = fals
         if (!(await browserSupportsWebAuthnAutofill())) {
             throw Error('Browser does not support WebAuthn autofill');
         }
-        const eligibleInputs = document.querySelectorAll('input[autocomplete$=\'webauthn\']');
+        const eligibleInputs = document.querySelectorAll("input[autocomplete$='webauthn']");
         if (eligibleInputs.length < 1) {
             throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');
         }
@@ -511,7 +517,7 @@ async function startAuthentication(requestOptionsJSON, useBrowserAutofill = fals
     const { id, rawId, response, type } = credential;
     let userHandle = undefined;
     if (response.userHandle) {
-        userHandle = bufferToUTF8String(response.userHandle);
+        userHandle = bufferToBase64URLString(response.userHandle);
     }
     return {
         id,
@@ -533,7 +539,7 @@ function buildHeaders(_a) {
     var authorizationHeader = token ? "Bearer ".concat(token) : "Basic ".concat(window.btoa(encodeURIComponent(tenantId)));
     return {
         "Content-Type": "application/json",
-        Authorization: authorizationHeader
+        Authorization: authorizationHeader,
     };
 }
 
@@ -544,11 +550,11 @@ var PasskeyApiClient = /** @class */ (function () {
         this.baseUrl = baseUrl;
     }
     PasskeyApiClient.prototype.registrationOptions = function (_a) {
-        var token = _a.token, username = _a.username, authenticatorAttachment = _a.authenticatorAttachment;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, username = _b.username, authenticatorAttachment = _b.authenticatorAttachment;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = Boolean(authenticatorAttachment)
                             ? { username: username, authenticatorAttachment: authenticatorAttachment }
@@ -556,85 +562,86 @@ var PasskeyApiClient = /** @class */ (function () {
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/passkey/registration-options"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     PasskeyApiClient.prototype.authenticationOptions = function (_a) {
-        var token = _a.token, challengeId = _a.challengeId;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, challengeId = _b.challengeId;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { challengeId: challengeId };
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/passkey/authentication-options"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     PasskeyApiClient.prototype.addAuthenticator = function (_a) {
-        var token = _a.token, challengeId = _a.challengeId, registrationCredential = _a.registrationCredential;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, challengeId = _b.challengeId, registrationCredential = _b.registrationCredential;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = {
                             challengeId: challengeId,
-                            registrationCredential: registrationCredential
+                            registrationCredential: registrationCredential,
                         };
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/passkey"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     PasskeyApiClient.prototype.verify = function (_a) {
-        var token = _a.token, challengeId = _a.challengeId, authenticationCredential = _a.authenticationCredential, deviceId = _a.deviceId;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, challengeId = _b.challengeId, authenticationCredential = _b.authenticationCredential, deviceId = _b.deviceId;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { challengeId: challengeId, authenticationCredential: authenticationCredential, deviceId: deviceId };
                         response = fetch("".concat(this.baseUrl, "/client/verify/passkey"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
-    PasskeyApiClient.prototype.getPasskeyAuthenticator = function (credentialId) {
-        return __awaiter(this, void 0, void 0, function () {
+    PasskeyApiClient.prototype.getPasskeyAuthenticator = function (_a) {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, fetch("".concat(this.baseUrl, "/client/user-authenticators/passkey?credentialId=").concat(credentialId), {
+            var credentialIds = _b.credentialIds;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0: return [4 /*yield*/, fetch("".concat(this.baseUrl, "/client/user-authenticators/passkey?credentialIds=").concat(credentialIds), {
                             method: "GET",
-                            headers: buildHeaders({ tenantId: this.tenantId })
+                            headers: buildHeaders({ tenantId: this.tenantId }),
                         })];
                     case 1:
-                        response = _a.sent();
+                        response = _c.sent();
                         if (!response.ok) {
                             throw new Error(response.statusText);
                         }
@@ -652,7 +659,7 @@ var PasskeyApiClient = /** @class */ (function () {
                         response = fetch("".concat(this.baseUrl, "/client/challenge"), {
                             method: "POST",
                             headers: buildHeaders({ tenantId: this.tenantId }),
-                            body: JSON.stringify({ action: action })
+                            body: JSON.stringify({ action: action }),
                         });
                         return [4 /*yield*/, response];
                     case 1: return [2 /*return*/, (_a.sent()).json()];
@@ -673,7 +680,7 @@ var TokenCache = /** @class */ (function () {
         console.error("Error: ".concat(error));
         return {
             error: errorCode,
-            errorDescription: error
+            errorDescription: error,
         };
     };
     TokenCache.shared = new TokenCache();
@@ -683,17 +690,17 @@ var TokenCache = /** @class */ (function () {
 var Passkey = /** @class */ (function () {
     function Passkey(_a) {
         var baseUrl = _a.baseUrl, tenantId = _a.tenantId, anonymousId = _a.anonymousId;
-        this.passkeyLocalStorageKey = "as_passkey_credential_id";
+        this.passkeyLocalStorageKey = "as_user_passkey_map";
         this.cache = TokenCache.shared;
         this.api = new PasskeyApiClient({ baseUrl: baseUrl, tenantId: tenantId });
         this.anonymousId = anonymousId;
     }
     Passkey.prototype.signUp = function (_a) {
-        var userName = _a.userName, userDisplayName = _a.userDisplayName, token = _a.token, _b = _a.authenticatorAttachment, authenticatorAttachment = _b === void 0 ? "platform" : _b;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var userToken, optionsInput, optionsResponse, registrationResponse, addAuthenticatorResponse;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
+            var userName = _b.userName, userDisplayName = _b.userDisplayName, token = _b.token, _c = _b.authenticatorAttachment, authenticatorAttachment = _c === void 0 ? "platform" : _c;
+            return __generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
                         userToken = token !== null && token !== void 0 ? token : this.cache.token;
                         if (!userToken) {
@@ -703,37 +710,38 @@ var Passkey = /** @class */ (function () {
                             username: userName,
                             displayName: userDisplayName,
                             token: userToken,
-                            authenticatorAttachment: authenticatorAttachment
+                            authenticatorAttachment: authenticatorAttachment,
                         };
                         return [4 /*yield*/, this.api.registrationOptions(optionsInput)];
                     case 1:
-                        optionsResponse = _c.sent();
+                        optionsResponse = _d.sent();
                         if ("error" in optionsResponse) {
                             logErrorResponse(optionsResponse);
                             return [2 /*return*/, optionsResponse];
                         }
                         return [4 /*yield*/, startRegistration(optionsResponse.options)];
                     case 2:
-                        registrationResponse = _c.sent();
+                        registrationResponse = _d.sent();
                         return [4 /*yield*/, this.api.addAuthenticator({
                                 challengeId: optionsResponse.challengeId,
                                 registrationCredential: registrationResponse,
-                                token: userToken
+                                token: userToken,
                             })];
                     case 3:
-                        addAuthenticatorResponse = _c.sent();
+                        addAuthenticatorResponse = _d.sent();
                         if ("error" in addAuthenticatorResponse) {
                             logErrorResponse(addAuthenticatorResponse);
                             return [2 /*return*/, addAuthenticatorResponse];
                         }
                         if (addAuthenticatorResponse.isVerified) {
-                            this.storeCredentialAgainstDevice(registrationResponse);
+                            this.storeCredentialAgainstDevice(__assign(__assign({}, registrationResponse), { userId: addAuthenticatorResponse.userId }));
                         }
                         if (addAuthenticatorResponse.accessToken) {
                             this.cache.token = addAuthenticatorResponse.accessToken;
                         }
                         return [2 /*return*/, {
-                                token: addAuthenticatorResponse.accessToken
+                                token: addAuthenticatorResponse.accessToken,
+                                registrationResponse: registrationResponse,
                             }];
                 }
             });
@@ -767,7 +775,7 @@ var Passkey = /** @class */ (function () {
                         }
                         return [4 /*yield*/, this.api.authenticationOptions({
                                 token: params === null || params === void 0 ? void 0 : params.token,
-                                challengeId: challengeResponse === null || challengeResponse === void 0 ? void 0 : challengeResponse.challengeId
+                                challengeId: challengeResponse === null || challengeResponse === void 0 ? void 0 : challengeResponse.challengeId,
                             })];
                     case 4:
                         optionsResponse = _b.sent();
@@ -785,7 +793,7 @@ var Passkey = /** @class */ (function () {
                                 challengeId: optionsResponse.challengeId,
                                 authenticationCredential: authenticationResponse,
                                 token: params === null || params === void 0 ? void 0 : params.token,
-                                deviceId: this.anonymousId
+                                deviceId: this.anonymousId,
                             })];
                     case 6:
                         verifyResponse = _b.sent();
@@ -794,7 +802,7 @@ var Passkey = /** @class */ (function () {
                             return [2 /*return*/, verifyResponse];
                         }
                         if (verifyResponse.isVerified) {
-                            this.storeCredentialAgainstDevice(authenticationResponse);
+                            this.storeCredentialAgainstDevice(__assign(__assign({}, authenticationResponse), { userId: verifyResponse.userId }));
                         }
                         if (verifyResponse.accessToken) {
                             this.cache.token = verifyResponse.accessToken;
@@ -805,31 +813,42 @@ var Passkey = /** @class */ (function () {
                                 userId: userId,
                                 userAuthenticatorId: userAuthenticatorId,
                                 userName: userName,
-                                userDisplayName: userDisplayName
+                                userDisplayName: userDisplayName,
+                                authenticationResponse: authenticationResponse,
                             }];
                 }
             });
         });
     };
-    Passkey.prototype.isAvailableOnDevice = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var credentialId;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+    Passkey.prototype.isAvailableOnDevice = function (_a) {
+        return __awaiter(this, arguments, void 0, function (_b) {
+            var storedCredentials, credentialsMap, credentialIds;
+            var _d;
+            var userId = _b.userId;
+            return __generator(this, function (_e) {
+                switch (_e.label) {
                     case 0:
-                        credentialId = localStorage.getItem(this.passkeyLocalStorageKey);
-                        if (!credentialId) {
+                        if (!userId) {
+                            throw new Error("userId is required");
+                        }
+                        storedCredentials = localStorage.getItem(this.passkeyLocalStorageKey);
+                        if (!storedCredentials) {
+                            return [2 /*return*/, false];
+                        }
+                        credentialsMap = JSON.parse(storedCredentials);
+                        credentialIds = (_d = credentialsMap[userId]) !== null && _d !== void 0 ? _d : [];
+                        if (credentialIds.length === 0) {
                             return [2 /*return*/, false];
                         }
-                        _b.label = 1;
+                        _e.label = 1;
                     case 1:
-                        _b.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.api.getPasskeyAuthenticator(credentialId)];
+                        _e.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.api.getPasskeyAuthenticator({ credentialIds: credentialIds })];
                     case 2:
-                        _b.sent();
+                        _e.sent();
                         return [2 /*return*/, true];
                     case 3:
-                        _b.sent();
+                        _e.sent();
                         return [2 /*return*/, false];
                     case 4: return [2 /*return*/];
                 }
@@ -837,11 +856,21 @@ var Passkey = /** @class */ (function () {
         });
     };
     Passkey.prototype.storeCredentialAgainstDevice = function (_a) {
-        var id = _a.id, authenticatorAttachment = _a.authenticatorAttachment;
+        var id = _a.id, authenticatorAttachment = _a.authenticatorAttachment, _b = _a.userId, userId = _b === void 0 ? "" : _b;
         if (authenticatorAttachment === "cross-platform") {
             return;
         }
-        localStorage.setItem(this.passkeyLocalStorageKey, id);
+        var storedCredentials = localStorage.getItem(this.passkeyLocalStorageKey);
+        var credentialsMap = storedCredentials ? JSON.parse(storedCredentials) : {};
+        if (credentialsMap[userId]) {
+            if (!credentialsMap[userId].includes(id)) {
+                credentialsMap[userId].push(id);
+            }
+        }
+        else {
+            credentialsMap[userId] = [id];
+        }
+        localStorage.setItem(this.passkeyLocalStorageKey, JSON.stringify(credentialsMap));
     };
     return Passkey;
 }());
@@ -1415,37 +1444,37 @@ var TotpApiClient = /** @class */ (function () {
         this.baseUrl = baseUrl;
     }
     TotpApiClient.prototype.enroll = function (_a) {
-        var token = _a.token;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/totp"), {
                             method: "POST",
-                            headers: buildHeaders({ token: token, tenantId: this.tenantId })
+                            headers: buildHeaders({ token: token, tenantId: this.tenantId }),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     TotpApiClient.prototype.verify = function (_a) {
-        var token = _a.token, code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { verificationCode: code };
                         response = fetch("".concat(this.baseUrl, "/client/verify/totp"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
@@ -1470,18 +1499,18 @@ var Totp = /** @class */ (function () {
         });
     };
     Totp.prototype.verify = function (_a) {
-        var code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var verifyResponse;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         if (!this.cache.token) {
                             return [2 /*return*/, this.cache.handleTokenNotSetError()];
                         }
                         return [4 /*yield*/, this.api.verify({ token: this.cache.token, code: code })];
                     case 1:
-                        verifyResponse = _b.sent();
+                        verifyResponse = _c.sent();
                         if (verifyResponse.accessToken) {
                             this.cache.token = verifyResponse.accessToken;
                         }
@@ -1500,56 +1529,56 @@ var EmailApiClient = /** @class */ (function () {
         this.baseUrl = baseUrl;
     }
     EmailApiClient.prototype.enroll = function (_a) {
-        var token = _a.token, email = _a.email;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, email = _b.email;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { email: email };
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/email-otp"), {
                             method: "POST",
                             headers: this.buildHeaders(token),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     EmailApiClient.prototype.challenge = function (_a) {
-        var token = _a.token;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         response = fetch("".concat(this.baseUrl, "/client/challenge/email-otp"), {
                             method: "POST",
-                            headers: this.buildHeaders(token)
+                            headers: this.buildHeaders(token),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     EmailApiClient.prototype.verify = function (_a) {
-        var token = _a.token, code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { verificationCode: code };
                         response = fetch("".concat(this.baseUrl, "/client/verify/email-otp"), {
                             method: "POST",
                             headers: this.buildHeaders(token),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
@@ -1558,7 +1587,7 @@ var EmailApiClient = /** @class */ (function () {
         var authorizationHeader = token ? "Bearer ".concat(token) : "Basic ".concat(window.btoa(encodeURIComponent(this.tenantId)));
         return {
             "Content-Type": "application/json",
-            Authorization: authorizationHeader
+            Authorization: authorizationHeader,
         };
     };
     return EmailApiClient;
@@ -1571,9 +1600,9 @@ var Email = /** @class */ (function () {
         this.api = new EmailApiClient({ baseUrl: baseUrl, tenantId: tenantId });
     }
     Email.prototype.enroll = function (_a) {
-        var email = _a.email;
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_b) {
+        return __awaiter(this, arguments, void 0, function (_b) {
+            var email = _b.email;
+            return __generator(this, function (_c) {
                 if (!this.cache.token) {
                     return [2 /*return*/, this.cache.handleTokenNotSetError()];
                 }
@@ -1592,18 +1621,18 @@ var Email = /** @class */ (function () {
         });
     };
     Email.prototype.verify = function (_a) {
-        var code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var verifyResponse;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         if (!this.cache.token) {
                             return [2 /*return*/, this.cache.handleTokenNotSetError()];
                         }
                         return [4 /*yield*/, this.api.verify({ token: this.cache.token, code: code })];
                     case 1:
-                        verifyResponse = _b.sent();
+                        verifyResponse = _c.sent();
                         if (verifyResponse.accessToken) {
                             this.cache.token = verifyResponse.accessToken;
                         }
@@ -1622,56 +1651,56 @@ var SmsApiClient = /** @class */ (function () {
         this.baseUrl = baseUrl;
     }
     SmsApiClient.prototype.enroll = function (_a) {
-        var token = _a.token, phoneNumber = _a.phoneNumber;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, phoneNumber = _b.phoneNumber;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { phoneNumber: phoneNumber };
                         response = fetch("".concat(this.baseUrl, "/client/user-authenticators/sms"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     SmsApiClient.prototype.challenge = function (_a) {
-        var token = _a.token;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         response = fetch("".concat(this.baseUrl, "/client/challenge/sms"), {
                             method: "POST",
-                            headers: buildHeaders({ token: token, tenantId: this.tenantId })
+                            headers: buildHeaders({ token: token, tenantId: this.tenantId }),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
     };
     SmsApiClient.prototype.verify = function (_a) {
-        var token = _a.token, code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var body, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token = _b.token, code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         body = { verificationCode: code };
                         response = fetch("".concat(this.baseUrl, "/client/verify/sms"), {
                             method: "POST",
                             headers: buildHeaders({ token: token, tenantId: this.tenantId }),
-                            body: JSON.stringify(body)
+                            body: JSON.stringify(body),
                         });
                         return [4 /*yield*/, response];
-                    case 1: return [2 /*return*/, (_b.sent()).json()];
+                    case 1: return [2 /*return*/, (_c.sent()).json()];
                 }
             });
         });
@@ -1686,9 +1715,9 @@ var Sms = /** @class */ (function () {
         this.api = new SmsApiClient({ baseUrl: baseUrl, tenantId: tenantId });
     }
     Sms.prototype.enroll = function (_a) {
-        var phoneNumber = _a.phoneNumber;
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_b) {
+        return __awaiter(this, arguments, void 0, function (_b) {
+            var phoneNumber = _b.phoneNumber;
+            return __generator(this, function (_c) {
                 if (!this.cache.token) {
                     return [2 /*return*/, this.cache.handleTokenNotSetError()];
                 }
@@ -1707,18 +1736,18 @@ var Sms = /** @class */ (function () {
         });
     };
     Sms.prototype.verify = function (_a) {
-        var code = _a.code;
-        return __awaiter(this, void 0, void 0, function () {
+        return __awaiter(this, arguments, void 0, function (_b) {
             var verifyResponse;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var code = _b.code;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         if (!this.cache.token) {
                             return [2 /*return*/, this.cache.handleTokenNotSetError()];
                         }
                         return [4 /*yield*/, this.api.verify({ token: this.cache.token, code: code })];
                     case 1:
-                        verifyResponse = _b.sent();
+                        verifyResponse = _c.sent();
                         if (verifyResponse.accessToken) {
                             this.cache.token = verifyResponse.accessToken;
                         }
@@ -1757,7 +1786,7 @@ var Authsignal = /** @class */ (function () {
                 value: this.anonymousId,
                 expire: Infinity,
                 domain: this.cookieDomain,
-                secure: document.location.protocol !== "http:"
+                secure: document.location.protocol !== "http:",
             });
         }
         this.passkey = new Passkey({ tenantId: tenantId, baseUrl: baseUrl, anonymousId: this.anonymousId });
@@ -1787,7 +1816,7 @@ var Authsignal = /** @class */ (function () {
             value: profilingId,
             expire: Infinity,
             domain: this.cookieDomain,
-            secure: document.location.protocol !== "http:"
+            secure: document.location.protocol !== "http:",
         });
         var tmxProfilingScruiptUrl = baseUrl
             ? "".concat(baseUrl, "/fp/tags.js?org_id=").concat(TMX_ORG_ID, "&session_id=").concat(profilingId)

package/dist/index.min.js

@@ -1 +1 @@
-var authsignal=function(t){"use strict";let e;const n=new Uint8Array(16);function o(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(n)}const i=[];for(let t=0;t<256;++t)i.push((t+256).toString(16).slice(1));var r={randomUUID:"undefined"!=typeof crypto&&crypto.randomUUID&&crypto.randomUUID.bind(crypto)};function a(t,e,n){if(r.randomUUID&&!e&&!t)return r.randomUUID();const a=(t=t||{}).random||(t.rng||o)();if(a[6]=15&a[6]|64,a[8]=63&a[8]|128,e){n=n||0;for(let t=0;t<16;++t)e[n+t]=a[t];return e}return function(t,e=0){return(i[t[e+0]]+i[t[e+1]]+i[t[e+2]]+i[t[e+3]]+"-"+i[t[e+4]]+i[t[e+5]]+"-"+i[t[e+6]]+i[t[e+7]]+"-"+i[t[e+8]]+i[t[e+9]]+"-"+i[t[e+10]]+i[t[e+11]]+i[t[e+12]]+i[t[e+13]]+i[t[e+14]]+i[t[e+15]]).toLowerCase()}(a)}function s(t){var e=t.name,n=t.value,o=t.expire,i=t.domain,r=t.secure,a=o===1/0?" expires=Fri, 31 Dec 9999 23:59:59 GMT":"; max-age="+o;document.cookie=encodeURIComponent(e)+"="+n+"; path=/;"+a+(i?"; domain="+i:"")+(r?"; secure":"")}function c(t){var e;console.error(null!==(e=t.errorDescription)&&void 0!==e?e:t.error)}function u(t,e,n,o){return new(n||(n=Promise))((function(i,r){function a(t){try{c(o.next(t))}catch(t){r(t)}}function s(t){try{c(o.throw(t))}catch(t){r(t)}}function c(t){var e;t.done?i(t.value):(e=t.value,e instanceof n?e:new n((function(t){t(e)}))).then(a,s)}c((o=o.apply(t,e||[])).next())}))}function l(t,e){var n,o,i,r,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return r={next:s(0),throw:s(1),return:s(2)},"function"==typeof Symbol&&(r[Symbol.iterator]=function(){return this}),r;function s(r){return function(s){return function(r){if(n)throw new TypeError("Generator is already executing.");for(;a;)try{if(n=1,o&&(i=2&r[0]?o.return:r[0]?o.throw||((i=o.return)&&i.call(o),0):o.next)&&!(i=i.call(o,r[1])).done)return i;switch(o=0,i&&(r=[2&r[0],i.value]),r[0]){case 0:case 1:i=r;break;case 4:return a.label++,{value:r[1],done:!1};case 5:a.label++,o=r[1],r=[0];continue;case 7:r=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])||6!==r[0]&&2!==r[0])){a=0;continue}if(3===r[0]&&(!i||r[1]>i[0]&&r[1]<i[3])){a.label=r[1];break}if(6===r[0]&&a.label<i[1]){a.label=i[1],i=r;break}if(i&&a.label<i[2]){a.label=i[2],a.ops.push(r);break}i[2]&&a.ops.pop(),a.trys.pop();continue}r=e.call(t,a)}catch(t){r=[6,t],o=0}finally{n=i=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,s])}}}function h(t){const e=new Uint8Array(t);let n="";for(const t of e)n+=String.fromCharCode(t);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function d(t){const e=t.replace(/-/g,"+").replace(/_/g,"/"),n=(4-e.length%4)%4,o=e.padEnd(e.length+n,"="),i=atob(o),r=new ArrayBuffer(i.length),a=new Uint8Array(r);for(let t=0;t<i.length;t++)a[t]=i.charCodeAt(t);return r}function p(){return void 0!==window?.PublicKeyCredential&&"function"==typeof window.PublicKeyCredential}function f(t){const{id:e}=t;return{...t,id:d(e),transports:t.transports}}function m(t){return"localhost"===t||/^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(t)}t.AuthsignalWindowMessage=void 0,(t.AuthsignalWindowMessage||(t.AuthsignalWindowMessage={})).AUTHSIGNAL_CLOSE_POPUP="AUTHSIGNAL_CLOSE_POPUP";class v extends Error{constructor({message:t,code:e,cause:n,name:o}){super(t,{cause:n}),this.name=o??n.name,this.code=e}}const y=new class{createNewAbortSignal(){if(this.controller){const t=new Error("Cancelling existing WebAuthn API call for new one");t.name="AbortError",this.controller.abort(t)}const t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){const t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0}}},w=["cross-platform","platform"];function g(t){if(t&&!(w.indexOf(t)<0))return t}async function b(t){if(!p())throw new Error("WebAuthn is not supported in this browser");var e;const n={publicKey:{...t,challenge:d(t.challenge),user:{...t.user,id:(e=t.user.id,(new TextEncoder).encode(e))},excludeCredentials:t.excludeCredentials?.map(f)}};let o;n.signal=y.createNewAbortSignal();try{o=await navigator.credentials.create(n)}catch(t){throw function({error:t,options:e}){const{publicKey:n}=e;if(!n)throw Error("options was missing required publicKey property");if("AbortError"===t.name){if(e.signal instanceof AbortSignal)return new v({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:t})}else if("ConstraintError"===t.name){if(!0===n.authenticatorSelection?.requireResidentKey)return new v({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:t});if("required"===n.authenticatorSelection?.userVerification)return new v({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:t})}else{if("InvalidStateError"===t.name)return new v({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:t});if("NotAllowedError"===t.name)return new v({message:t.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:t});if("NotSupportedError"===t.name)return 0===n.pubKeyCredParams.filter((t=>"public-key"===t.type)).length?new v({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:t}):new v({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:t});if("SecurityError"===t.name){const e=window.location.hostname;if(!m(e))return new v({message:`${window.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:t});if(n.rp.id!==e)return new v({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:t})}else if("TypeError"===t.name){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new v({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:t})}else if("UnknownError"===t.name)return new v({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:t})}return t}({error:t,options:n})}if(!o)throw new Error("Registration was not completed");const{id:i,rawId:r,response:a,type:s}=o;let c,u,l,w;if("function"==typeof a.getTransports&&(c=a.getTransports()),"function"==typeof a.getPublicKeyAlgorithm)try{u=a.getPublicKeyAlgorithm()}catch(t){E("getPublicKeyAlgorithm()",t)}if("function"==typeof a.getPublicKey)try{const t=a.getPublicKey();null!==t&&(l=h(t))}catch(t){E("getPublicKey()",t)}if("function"==typeof a.getAuthenticatorData)try{w=h(a.getAuthenticatorData())}catch(t){E("getAuthenticatorData()",t)}return{id:i,rawId:h(r),response:{attestationObject:h(a.attestationObject),clientDataJSON:h(a.clientDataJSON),transports:c,publicKeyAlgorithm:u,publicKey:l,authenticatorData:w},type:s,clientExtensionResults:o.getClientExtensionResults(),authenticatorAttachment:g(o.authenticatorAttachment)}}function E(t,e){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${t}. You should report this error to them.\n`,e)}async function k(t,e=!1){if(!p())throw new Error("WebAuthn is not supported in this browser");let n;0!==t.allowCredentials?.length&&(n=t.allowCredentials?.map(f));const o={...t,challenge:d(t.challenge),allowCredentials:n},i={};if(e){if(!await function(){const t=window.PublicKeyCredential;return void 0===t.isConditionalMediationAvailable?new Promise((t=>t(!1))):t.isConditionalMediationAvailable()}())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');i.mediation="conditional",o.allowCredentials=[]}let r;i.publicKey=o,i.signal=y.createNewAbortSignal();try{r=await navigator.credentials.get(i)}catch(t){throw function({error:t,options:e}){const{publicKey:n}=e;if(!n)throw Error("options was missing required publicKey property");if("AbortError"===t.name){if(e.signal instanceof AbortSignal)return new v({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:t})}else{if("NotAllowedError"===t.name)return new v({message:t.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:t});if("SecurityError"===t.name){const e=window.location.hostname;if(!m(e))return new v({message:`${window.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:t});if(n.rpId!==e)return new v({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:t})}else if("UnknownError"===t.name)return new v({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:t})}return t}({error:t,options:i})}if(!r)throw new Error("Authentication was not completed");const{id:a,rawId:s,response:c,type:u}=r;let l;var w;return c.userHandle&&(w=c.userHandle,l=new TextDecoder("utf-8").decode(w)),{id:a,rawId:h(s),response:{authenticatorData:h(c.authenticatorData),clientDataJSON:h(c.clientDataJSON),signature:h(c.signature),userHandle:l},type:u,clientExtensionResults:r.getClientExtensionResults(),authenticatorAttachment:g(r.authenticatorAttachment)}}function I(t){var e=t.token,n=t.tenantId;return{"Content-Type":"application/json",Authorization:e?"Bearer ".concat(e):"Basic ".concat(window.btoa(encodeURIComponent(n)))}}var A=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.registrationOptions=function(t){var e=t.token,n=t.username,o=t.authenticatorAttachment;return u(this,void 0,void 0,(function(){var t;return l(this,(function(i){switch(i.label){case 0:return t=Boolean(o)?{username:n,authenticatorAttachment:o}:{username:n},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey/registration-options"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,i.sent().json()]}}))}))},t.prototype.authenticationOptions=function(t){var e=t.token,n=t.challengeId;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={challengeId:n},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey/authentication-options"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t.prototype.addAuthenticator=function(t){var e=t.token,n=t.challengeId,o=t.registrationCredential;return u(this,void 0,void 0,(function(){var t;return l(this,(function(i){switch(i.label){case 0:return t={challengeId:n,registrationCredential:o},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,i.sent().json()]}}))}))},t.prototype.verify=function(t){var e=t.token,n=t.challengeId,o=t.authenticationCredential,i=t.deviceId;return u(this,void 0,void 0,(function(){var t;return l(this,(function(r){switch(r.label){case 0:return t={challengeId:n,authenticationCredential:o,deviceId:i},[4,fetch("".concat(this.baseUrl,"/client/verify/passkey"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,r.sent().json()]}}))}))},t.prototype.getPasskeyAuthenticator=function(t){return u(this,void 0,void 0,(function(){var e;return l(this,(function(n){switch(n.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey?credentialId=").concat(t),{method:"GET",headers:I({tenantId:this.tenantId})})];case 1:if(!(e=n.sent()).ok)throw new Error(e.statusText);return[2,e.json()]}}))}))},t.prototype.challenge=function(t){return u(this,void 0,void 0,(function(){return l(this,(function(e){switch(e.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge"),{method:"POST",headers:I({tenantId:this.tenantId}),body:JSON.stringify({action:t})})];case 1:return[2,e.sent().json()]}}))}))},t}(),R=function(){function t(){this.token=null}return t.prototype.handleTokenNotSetError=function(){var t="A token has not been set. Call 'setToken' first.";return console.error("Error: ".concat(t)),{error:"TOKEN_NOT_SET",errorDescription:t}},t.shared=new t,t}(),S=function(){function t(t){var e=t.baseUrl,n=t.tenantId,o=t.anonymousId;this.passkeyLocalStorageKey="as_passkey_credential_id",this.cache=R.shared,this.api=new A({baseUrl:e,tenantId:n}),this.anonymousId=o}return t.prototype.signUp=function(t){var e=t.userName,n=t.userDisplayName,o=t.token,i=t.authenticatorAttachment,r=void 0===i?"platform":i;return u(this,void 0,void 0,(function(){var t,i,a,s,u;return l(this,(function(l){switch(l.label){case 0:return(t=null!=o?o:this.cache.token)?(i={username:e,displayName:n,token:t,authenticatorAttachment:r},[4,this.api.registrationOptions(i)]):[2,this.cache.handleTokenNotSetError()];case 1:return"error"in(a=l.sent())?(c(a),[2,a]):[4,b(a.options)];case 2:return s=l.sent(),[4,this.api.addAuthenticator({challengeId:a.challengeId,registrationCredential:s,token:t})];case 3:return"error"in(u=l.sent())?(c(u),[2,u]):(u.isVerified&&this.storeCredentialAgainstDevice(s),u.accessToken&&(this.cache.token=u.accessToken),[2,{token:u.accessToken}])}}))}))},t.prototype.signIn=function(t){return u(this,void 0,void 0,(function(){var e,n,o,i,r,a,s,u,h,d;return l(this,(function(l){switch(l.label){case 0:if((null==t?void 0:t.token)&&t.autofill)throw new Error("autofill is not supported when providing a token");if((null==t?void 0:t.action)&&t.token)throw new Error("action is not supported when providing a token");return(null==t?void 0:t.action)?[4,this.api.challenge(t.action)]:[3,2];case 1:return n=l.sent(),[3,3];case 2:n=null,l.label=3;case 3:return(e=n)&&"error"in e?(c(e),[2,e]):[4,this.api.authenticationOptions({token:null==t?void 0:t.token,challengeId:null==e?void 0:e.challengeId})];case 4:return"error"in(o=l.sent())?(c(o),[2,o]):[4,k(o.options,null==t?void 0:t.autofill)];case 5:return i=l.sent(),(null==t?void 0:t.onVerificationStarted)&&t.onVerificationStarted(),[4,this.api.verify({challengeId:o.challengeId,authenticationCredential:i,token:null==t?void 0:t.token,deviceId:this.anonymousId})];case 6:return"error"in(r=l.sent())?(c(r),[2,r]):(r.isVerified&&this.storeCredentialAgainstDevice(i),r.accessToken&&(this.cache.token=r.accessToken),a=r.accessToken,s=r.userId,u=r.userAuthenticatorId,h=r.username,d=r.userDisplayName,[2,{token:a,userId:s,userAuthenticatorId:u,userName:h,userDisplayName:d}])}}))}))},t.prototype.isAvailableOnDevice=function(){return u(this,void 0,void 0,(function(){var t;return l(this,(function(e){switch(e.label){case 0:if(!(t=localStorage.getItem(this.passkeyLocalStorageKey)))return[2,!1];e.label=1;case 1:return e.trys.push([1,3,,4]),[4,this.api.getPasskeyAuthenticator(t)];case 2:return e.sent(),[2,!0];case 3:return e.sent(),[2,!1];case 4:return[2]}}))}))},t.prototype.storeCredentialAgainstDevice=function(t){var e=t.id;"cross-platform"!==t.authenticatorAttachment&&localStorage.setItem(this.passkeyLocalStorageKey,e)},t}(),_=function(){function t(){this.windowRef=null}return t.prototype.show=function(t){var e=t.url,n=t.width,o=void 0===n?400:n,i=t.height,r=function(t){var e=t.url,n=t.width,o=t.height,i=t.win;if(!i.top)return null;var r=i.top.outerHeight/2+i.top.screenY-o/2,a=i.top.outerWidth/2+i.top.screenX-n/2;return window.open(e,"","toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=no, resizable=no, copyhistory=no, width=".concat(n,", height=").concat(o,", top=").concat(r,", left=").concat(a))}({url:e,width:o,height:void 0===i?500:i,win:window});if(!r)throw new Error("Window is not initialized");return this.windowRef=r,r},t.prototype.close=function(){if(!this.windowRef)throw new Error("Window is not initialized");this.windowRef.close()},t}();const T=":not([inert]):not([inert] *)",O=':not([tabindex^="-"])',C=":not(:disabled)";var U=[`a[href]${T}${O}`,`area[href]${T}${O}`,`input:not([type="hidden"]):not([type="radio"])${T}${O}${C}`,`input[type="radio"]${T}${O}${C}`,`select${T}${O}${C}`,`textarea${T}${O}${C}`,`button${T}${O}${C}`,`details${T} > summary:first-of-type${O}`,`iframe${T}${O}`,`audio[controls]${T}${O}`,`video[controls]${T}${O}`,`[contenteditable]${T}${O}`,`[tabindex]${T}${O}`];function N(t){(t.querySelector("[autofocus]")||t).focus()}function P(t,e){if(e&&x(t))return t;if(!((n=t).shadowRoot&&"-1"===n.getAttribute("tabindex")||n.matches(":disabled,[hidden],[inert]")))if(t.shadowRoot){let n=$(t.shadowRoot,e);for(;n;){const t=P(n,e);if(t)return t;n=D(n,e)}}else if("slot"===t.localName){const n=t.assignedElements({flatten:!0});e||n.reverse();for(const t of n){const n=P(t,e);if(n)return n}}else{let n=$(t,e);for(;n;){const t=P(n,e);if(t)return t;n=D(n,e)}}var n;return!e&&x(t)?t:null}function $(t,e){return e?t.firstElementChild:t.lastElementChild}function D(t,e){return e?t.nextElementSibling:t.previousElementSibling}const x=t=>!t.shadowRoot?.delegatesFocus&&(t.matches(U.join(","))&&!(t=>!(!t.matches("details:not([open]) *")||t.matches("details>summary:first-of-type"))||!(t.offsetWidth||t.offsetHeight||t.getClientRects().length))(t));function L(t=document){const e=t.activeElement;return e?e.shadowRoot?L(e.shadowRoot)||document.activeElement:e:null}function K(t,e){const[n,o]=function(t){const e=P(t,!0);return[e,e?P(t,!1)||e:null]}(t);if(!n)return e.preventDefault();const i=L();e.shiftKey&&i===n?(o.focus(),e.preventDefault()):e.shiftKey||i!==o||(n.focus(),e.preventDefault())}class j{$el;id;previouslyFocused;shown;constructor(t){this.$el=t,this.id=this.$el.getAttribute("data-a11y-dialog")||this.$el.id,this.previouslyFocused=null,this.shown=!1,this.maintainFocus=this.maintainFocus.bind(this),this.bindKeypress=this.bindKeypress.bind(this),this.handleTriggerClicks=this.handleTriggerClicks.bind(this),this.show=this.show.bind(this),this.hide=this.hide.bind(this),this.$el.setAttribute("aria-hidden","true"),this.$el.setAttribute("aria-modal","true"),this.$el.setAttribute("tabindex","-1"),this.$el.hasAttribute("role")||this.$el.setAttribute("role","dialog"),document.addEventListener("click",this.handleTriggerClicks,!0)}destroy(){return this.hide(),document.removeEventListener("click",this.handleTriggerClicks,!0),this.$el.replaceWith(this.$el.cloneNode(!0)),this.fire("destroy"),this}show(t){return this.shown||(this.shown=!0,this.$el.removeAttribute("aria-hidden"),this.previouslyFocused=L(),"BODY"===this.previouslyFocused?.tagName&&t?.target&&(this.previouslyFocused=t.target),"focus"===t?.type?this.maintainFocus(t):N(this.$el),document.body.addEventListener("focus",this.maintainFocus,!0),this.$el.addEventListener("keydown",this.bindKeypress,!0),this.fire("show",t)),this}hide(t){return this.shown?(this.shown=!1,this.$el.setAttribute("aria-hidden","true"),this.previouslyFocused?.focus?.(),document.body.removeEventListener("focus",this.maintainFocus,!0),this.$el.removeEventListener("keydown",this.bindKeypress,!0),this.fire("hide",t),this):this}on(t,e,n){return this.$el.addEventListener(t,e,n),this}off(t,e,n){return this.$el.removeEventListener(t,e,n),this}fire(t,e){this.$el.dispatchEvent(new CustomEvent(t,{detail:e,cancelable:!0}))}handleTriggerClicks(t){const e=t.target;e.closest(`[data-a11y-dialog-show="${this.id}"]`)&&this.show(t),(e.closest(`[data-a11y-dialog-hide="${this.id}"]`)||e.closest("[data-a11y-dialog-hide]")&&e.closest('[aria-modal="true"]')===this.$el)&&this.hide(t)}bindKeypress(t){if(document.activeElement?.closest('[aria-modal="true"]')!==this.$el)return;let e=!1;try{e=!!this.$el.querySelector('[popover]:not([popover="manual"]):popover-open')}catch{}"Escape"!==t.key||"alertdialog"===this.$el.getAttribute("role")||e||(t.preventDefault(),this.hide(t)),"Tab"===t.key&&K(this.$el,t)}maintainFocus(t){t.target.closest('[aria-modal="true"], [data-a11y-dialog-ignore-focus-trap]')||N(this.$el)}}function H(){for(const t of document.querySelectorAll("[data-a11y-dialog]"))new j(t)}"undefined"!=typeof document&&("loading"===document.readyState?document.addEventListener("DOMContentLoaded",H):H());var W="__authsignal-popup-container",M="__authsignal-popup-content",q="__authsignal-popup-overlay",F="__authsignal-popup-style",G="__authsignal-popup-iframe",J="385px",V=function(){function t(t){var e=t.width,n=t.isClosable;if(this.popup=null,document.querySelector("#".concat(W)))throw new Error("Multiple instances of Authsignal popup is not supported.");this.create({width:e,isClosable:n})}return t.prototype.create=function(t){var e=this,n=t.width,o=void 0===n?J:n,i=t.isClosable,r=void 0===i||i,a=o;CSS.supports("width",o)||(console.warn("Invalid CSS value for `popupOptions.width`. Using default value instead."),a=J);var s=document.createElement("div");s.setAttribute("id",W),s.setAttribute("aria-hidden","true"),r||s.setAttribute("role","alertdialog");var c=document.createElement("div");c.setAttribute("id",q),r&&c.setAttribute("data-a11y-dialog-hide","true");var u=document.createElement("div");u.setAttribute("id",M),document.body.appendChild(s);var l=document.createElement("style");l.setAttribute("id",F),l.textContent="\n      #".concat(W,",\n      #").concat(q," {\n        position: fixed;\n        top: 0;\n        right: 0;\n        bottom: 0;\n        left: 0;\n      }\n\n      #").concat(W," {\n        z-index: 2147483647;\n        display: flex;\n      }\n\n      #").concat(W,"[aria-hidden='true'] {\n        display: none;\n      }\n\n      #").concat(q," {\n        background-color: rgba(0, 0, 0, 0.18);\n      }\n\n      #").concat(M," {\n        margin: auto;\n        z-index: 2147483647;\n        position: relative;\n        background-color: transparent;\n        border-radius: 8px;\n        width: ").concat(a,";\n      }\n\n      #").concat(M," iframe {\n        width: 1px;\n        min-width: 100%;\n        border-radius: inherit;\n        max-height: 95vh;\n        height: ").concat("384px",";\n      }\n    "),document.head.insertAdjacentElement("beforeend",l),s.appendChild(c),s.appendChild(u),this.popup=new j(s),s.focus(),this.popup.on("hide",(function(){e.destroy()}))},t.prototype.destroy=function(){var t=document.querySelector("#".concat(W)),e=document.querySelector("#".concat(F));t&&e&&(document.body.removeChild(t),document.head.removeChild(e)),window.removeEventListener("message",z)},t.prototype.show=function(t){var e,n=t.url;if(!this.popup)throw new Error("Popup is not initialized");var o=document.createElement("iframe");o.setAttribute("id",G),o.setAttribute("name","authsignal"),o.setAttribute("title","Authsignal multi-factor authentication"),o.setAttribute("src",n),o.setAttribute("frameborder","0"),o.setAttribute("allow","publickey-credentials-get *; publickey-credentials-create *; clipboard-write");var i=document.querySelector("#".concat(M));i&&i.appendChild(o),window.addEventListener("message",z),null===(e=this.popup)||void 0===e||e.show()},t.prototype.close=function(){if(!this.popup)throw new Error("Popup is not initialized");this.popup.hide()},t.prototype.on=function(t,e){if(!this.popup)throw new Error("Popup is not initialized");this.popup.on(t,e)},t}();function z(t){var e=document.querySelector("#".concat(G));e&&t.data.height&&(e.style.height=t.data.height+"px")}var B=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){var e=t.token;return u(this,void 0,void 0,(function(){return l(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/totp"),{method:"POST",headers:I({token:e,tenantId:this.tenantId})})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){var e=t.token,n=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={verificationCode:n},[4,fetch("".concat(this.baseUrl,"/client/verify/totp"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t}(),Y=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=R.shared,this.api=new B({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(){return u(this,void 0,void 0,(function(){return l(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){var e=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(n){switch(n.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:e})]:[2,this.cache.handleTokenNotSetError()];case 1:return(t=n.sent()).accessToken&&(this.cache.token=t.accessToken),[2,t]}}))}))},t}(),X=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){var e=t.token,n=t.email;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={email:n},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/email-otp"),{method:"POST",headers:this.buildHeaders(e),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t.prototype.challenge=function(t){var e=t.token;return u(this,void 0,void 0,(function(){return l(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge/email-otp"),{method:"POST",headers:this.buildHeaders(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){var e=t.token,n=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={verificationCode:n},[4,fetch("".concat(this.baseUrl,"/client/verify/email-otp"),{method:"POST",headers:this.buildHeaders(e),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t.prototype.buildHeaders=function(t){return{"Content-Type":"application/json",Authorization:t?"Bearer ".concat(t):"Basic ".concat(window.btoa(encodeURIComponent(this.tenantId)))}},t}(),Q=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=R.shared,this.api=new X({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(t){var e=t.email;return u(this,void 0,void 0,(function(){return l(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token,email:e})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.challenge=function(){return u(this,void 0,void 0,(function(){return l(this,(function(t){return this.cache.token?[2,this.api.challenge({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){var e=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(n){switch(n.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:e})]:[2,this.cache.handleTokenNotSetError()];case 1:return(t=n.sent()).accessToken&&(this.cache.token=t.accessToken),[2,t]}}))}))},t}(),Z=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){var e=t.token,n=t.phoneNumber;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={phoneNumber:n},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/sms"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t.prototype.challenge=function(t){var e=t.token;return u(this,void 0,void 0,(function(){return l(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge/sms"),{method:"POST",headers:I({token:e,tenantId:this.tenantId})})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){var e=t.token,n=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(o){switch(o.label){case 0:return t={verificationCode:n},[4,fetch("".concat(this.baseUrl,"/client/verify/sms"),{method:"POST",headers:I({token:e,tenantId:this.tenantId}),body:JSON.stringify(t)})];case 1:return[2,o.sent().json()]}}))}))},t}(),tt=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=R.shared,this.api=new Z({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(t){var e=t.phoneNumber;return u(this,void 0,void 0,(function(){return l(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token,phoneNumber:e})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.challenge=function(){return u(this,void 0,void 0,(function(){return l(this,(function(t){return this.cache.token?[2,this.api.challenge({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){var e=t.code;return u(this,void 0,void 0,(function(){var t;return l(this,(function(n){switch(n.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:e})]:[2,this.cache.handleTokenNotSetError()];case 1:return(t=n.sent()).accessToken&&(this.cache.token=t.accessToken),[2,t]}}))}))},t}(),et="4a08uqve",nt=function(){function e(t){var e=t.cookieDomain,n=t.cookieName,o=void 0===n?"__as_aid":n,i=t.baseUrl,r=void 0===i?"https://api.authsignal.com/v1":i,c=t.tenantId;if(this.anonymousId="",this.profilingId="",this.cookieDomain="",this.anonymousIdCookieName="",this.cookieDomain=e||document.location.hostname.replace("www.",""),this.anonymousIdCookieName=o,!c)throw new Error("tenantId is required");var u,l=(u=this.anonymousIdCookieName)&&decodeURIComponent(document.cookie.replace(new RegExp("(?:(?:^|.*;)\\s*"+encodeURIComponent(u).replace(/[\-\.\+\*]/g,"\\$&")+"\\s*\\=\\s*([^;]*).*$)|^.*$"),"$1"))||null;l?this.anonymousId=l:(this.anonymousId=a(),s({name:this.anonymousIdCookieName,value:this.anonymousId,expire:1/0,domain:this.cookieDomain,secure:"http:"!==document.location.protocol})),this.passkey=new S({tenantId:c,baseUrl:r,anonymousId:this.anonymousId}),this.totp=new Y({tenantId:c,baseUrl:r}),this.email=new Q({tenantId:c,baseUrl:r}),this.sms=new tt({tenantId:c,baseUrl:r})}return e.prototype.setToken=function(t){R.shared.token=t},e.prototype.launch=function(t,e){switch(null==e?void 0:e.mode){case"window":return this.launchWithWindow(t,e);case"popup":return this.launchWithPopup(t,e);default:this.launchWithRedirect(t)}},e.prototype.initAdvancedProfiling=function(t){var e=a();this.profilingId=e,s({name:"__as_pid",value:e,expire:1/0,domain:this.cookieDomain,secure:"http:"!==document.location.protocol});var n=t?"".concat(t,"/fp/tags.js?org_id=").concat(et,"&session_id=").concat(e):"https://h.online-metrix.net/fp/tags.js?org_id=".concat(et,"&session_id=").concat(e),o=document.createElement("script");o.src=n,o.async=!1,o.id="as_adv_profile",document.head.appendChild(o);var i=document.createElement("noscript");i.setAttribute("id","as_adv_profile_pixel"),i.setAttribute("aria-hidden","true");var r=document.createElement("iframe"),c=t?"".concat(t,"/fp/tags?org_id=").concat(et,"&session_id=").concat(e):"https://h.online-metrix.net/fp/tags?org_id=".concat(et,"&session_id=").concat(e);r.setAttribute("id","as_adv_profile_pixel"),r.setAttribute("src",c),r.setAttribute("style","width: 100px; height: 100px; border: 0; position: absolute; top: -5000px;"),i&&(i.appendChild(r),document.body.prepend(i))},e.prototype.launchWithRedirect=function(t){window.location.href=t},e.prototype.launchWithPopup=function(e,n){var o=n.popupOptions,i=new V({width:null==o?void 0:o.width,isClosable:null==o?void 0:o.isClosable}),r="".concat(e,"&mode=popup");return i.show({url:r}),new Promise((function(e){var n=void 0;i.on("hide",(function(){e({token:n})})),window.addEventListener("message",(function(e){var o=null;try{o=JSON.parse(e.data)}catch(t){}(null==o?void 0:o.event)===t.AuthsignalWindowMessage.AUTHSIGNAL_CLOSE_POPUP&&(n=o.token,i.close())}),!1)}))},e.prototype.launchWithWindow=function(e,n){var o=n.windowOptions,i=new _,r="".concat(e,"&mode=popup");return i.show({url:r,width:null==o?void 0:o.width,height:null==o?void 0:o.height}),new Promise((function(e){window.addEventListener("message",(function(n){var o=null;try{o=JSON.parse(n.data)}catch(t){}(null==o?void 0:o.event)===t.AuthsignalWindowMessage.AUTHSIGNAL_CLOSE_POPUP&&(i.close(),e({token:o.token}))}),!1)}))},e}();return t.Authsignal=nt,Object.defineProperty(t,"__esModule",{value:!0}),t}({});
+var authsignal=function(t){"use strict";let e;const n=new Uint8Array(16);function o(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(n)}const i=[];for(let t=0;t<256;++t)i.push((t+256).toString(16).slice(1));var r={randomUUID:"undefined"!=typeof crypto&&crypto.randomUUID&&crypto.randomUUID.bind(crypto)};function a(t,e,n){if(r.randomUUID&&!e&&!t)return r.randomUUID();const a=(t=t||{}).random||(t.rng||o)();if(a[6]=15&a[6]|64,a[8]=63&a[8]|128,e){n=n||0;for(let t=0;t<16;++t)e[n+t]=a[t];return e}return function(t,e=0){return(i[t[e+0]]+i[t[e+1]]+i[t[e+2]]+i[t[e+3]]+"-"+i[t[e+4]]+i[t[e+5]]+"-"+i[t[e+6]]+i[t[e+7]]+"-"+i[t[e+8]]+i[t[e+9]]+"-"+i[t[e+10]]+i[t[e+11]]+i[t[e+12]]+i[t[e+13]]+i[t[e+14]]+i[t[e+15]]).toLowerCase()}(a)}function s(t){var e=t.name,n=t.value,o=t.expire,i=t.domain,r=t.secure,a=o===1/0?" expires=Fri, 31 Dec 9999 23:59:59 GMT":"; max-age="+o;document.cookie=encodeURIComponent(e)+"="+n+"; path=/;"+a+(i?"; domain="+i:"")+(r?"; secure":"")}function c(t){var e;console.error(null!==(e=t.errorDescription)&&void 0!==e?e:t.error)}t.AuthsignalWindowMessage=void 0,(t.AuthsignalWindowMessage||(t.AuthsignalWindowMessage={})).AUTHSIGNAL_CLOSE_POPUP="AUTHSIGNAL_CLOSE_POPUP";var u=function(){return u=Object.assign||function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var i in e=arguments[n])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t},u.apply(this,arguments)};function l(t,e,n,o){return new(n||(n=Promise))((function(i,r){function a(t){try{c(o.next(t))}catch(t){r(t)}}function s(t){try{c(o.throw(t))}catch(t){r(t)}}function c(t){var e;t.done?i(t.value):(e=t.value,e instanceof n?e:new n((function(t){t(e)}))).then(a,s)}c((o=o.apply(t,e||[])).next())}))}function h(t,e){var n,o,i,r,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return r={next:s(0),throw:s(1),return:s(2)},"function"==typeof Symbol&&(r[Symbol.iterator]=function(){return this}),r;function s(r){return function(s){return function(r){if(n)throw new TypeError("Generator is already executing.");for(;a;)try{if(n=1,o&&(i=2&r[0]?o.return:r[0]?o.throw||((i=o.return)&&i.call(o),0):o.next)&&!(i=i.call(o,r[1])).done)return i;switch(o=0,i&&(r=[2&r[0],i.value]),r[0]){case 0:case 1:i=r;break;case 4:return a.label++,{value:r[1],done:!1};case 5:a.label++,o=r[1],r=[0];continue;case 7:r=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])||6!==r[0]&&2!==r[0])){a=0;continue}if(3===r[0]&&(!i||r[1]>i[0]&&r[1]<i[3])){a.label=r[1];break}if(6===r[0]&&a.label<i[1]){a.label=i[1],i=r;break}if(i&&a.label<i[2]){a.label=i[2],a.ops.push(r);break}i[2]&&a.ops.pop(),a.trys.pop();continue}r=e.call(t,a)}catch(t){r=[6,t],o=0}finally{n=i=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,s])}}}function d(t){const e=new Uint8Array(t);let n="";for(const t of e)n+=String.fromCharCode(t);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function p(t){const e=t.replace(/-/g,"+").replace(/_/g,"/"),n=(4-e.length%4)%4,o=e.padEnd(e.length+n,"="),i=atob(o),r=new ArrayBuffer(i.length),a=new Uint8Array(r);for(let t=0;t<i.length;t++)a[t]=i.charCodeAt(t);return r}function f(){return void 0!==window?.PublicKeyCredential&&"function"==typeof window.PublicKeyCredential}function m(t){const{id:e}=t;return{...t,id:p(e),transports:t.transports}}function y(t){return"localhost"===t||/^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(t)}class w extends Error{constructor({message:t,code:e,cause:n,name:o}){super(t,{cause:n}),this.name=o??n.name,this.code=e}}const g=new class{createNewAbortSignal(){if(this.controller){const t=new Error("Cancelling existing WebAuthn API call for new one");t.name="AbortError",this.controller.abort(t)}const t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){const t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0}}},v=["cross-platform","platform"];function b(t){if(t&&!(v.indexOf(t)<0))return t}async function E(t){if(!f())throw new Error("WebAuthn is not supported in this browser");const e={publicKey:{...t,challenge:p(t.challenge),user:{...t.user,id:p(t.user.id)},excludeCredentials:t.excludeCredentials?.map(m)}};let n;e.signal=g.createNewAbortSignal();try{n=await navigator.credentials.create(e)}catch(t){throw function({error:t,options:e}){const{publicKey:n}=e;if(!n)throw Error("options was missing required publicKey property");if("AbortError"===t.name){if(e.signal instanceof AbortSignal)return new w({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:t})}else if("ConstraintError"===t.name){if(!0===n.authenticatorSelection?.requireResidentKey)return new w({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:t});if("required"===n.authenticatorSelection?.userVerification)return new w({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:t})}else{if("InvalidStateError"===t.name)return new w({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:t});if("NotAllowedError"===t.name)return new w({message:t.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:t});if("NotSupportedError"===t.name)return 0===n.pubKeyCredParams.filter((t=>"public-key"===t.type)).length?new w({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:t}):new w({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:t});if("SecurityError"===t.name){const e=window.location.hostname;if(!y(e))return new w({message:`${window.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:t});if(n.rp.id!==e)return new w({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:t})}else if("TypeError"===t.name){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new w({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:t})}else if("UnknownError"===t.name)return new w({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:t})}return t}({error:t,options:e})}if(!n)throw new Error("Registration was not completed");const{id:o,rawId:i,response:r,type:a}=n;let s,c,u,l;if("function"==typeof r.getTransports&&(s=r.getTransports()),"function"==typeof r.getPublicKeyAlgorithm)try{c=r.getPublicKeyAlgorithm()}catch(t){I("getPublicKeyAlgorithm()",t)}if("function"==typeof r.getPublicKey)try{const t=r.getPublicKey();null!==t&&(u=d(t))}catch(t){I("getPublicKey()",t)}if("function"==typeof r.getAuthenticatorData)try{l=d(r.getAuthenticatorData())}catch(t){I("getAuthenticatorData()",t)}return{id:o,rawId:d(i),response:{attestationObject:d(r.attestationObject),clientDataJSON:d(r.clientDataJSON),transports:s,publicKeyAlgorithm:c,publicKey:u,authenticatorData:l},type:a,clientExtensionResults:n.getClientExtensionResults(),authenticatorAttachment:b(n.authenticatorAttachment)}}function I(t,e){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${t}. You should report this error to them.\n`,e)}async function k(t,e=!1){if(!f())throw new Error("WebAuthn is not supported in this browser");let n;0!==t.allowCredentials?.length&&(n=t.allowCredentials?.map(m));const o={...t,challenge:p(t.challenge),allowCredentials:n},i={};if(e){if(!await function(){if(!f())return new Promise((t=>t(!1)));const t=window.PublicKeyCredential;return void 0===t.isConditionalMediationAvailable?new Promise((t=>t(!1))):t.isConditionalMediationAvailable()}())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');i.mediation="conditional",o.allowCredentials=[]}let r;i.publicKey=o,i.signal=g.createNewAbortSignal();try{r=await navigator.credentials.get(i)}catch(t){throw function({error:t,options:e}){const{publicKey:n}=e;if(!n)throw Error("options was missing required publicKey property");if("AbortError"===t.name){if(e.signal instanceof AbortSignal)return new w({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:t})}else{if("NotAllowedError"===t.name)return new w({message:t.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:t});if("SecurityError"===t.name){const e=window.location.hostname;if(!y(e))return new w({message:`${window.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:t});if(n.rpId!==e)return new w({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:t})}else if("UnknownError"===t.name)return new w({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:t})}return t}({error:t,options:i})}if(!r)throw new Error("Authentication was not completed");const{id:a,rawId:s,response:c,type:u}=r;let l;return c.userHandle&&(l=d(c.userHandle)),{id:a,rawId:d(s),response:{authenticatorData:d(c.authenticatorData),clientDataJSON:d(c.clientDataJSON),signature:d(c.signature),userHandle:l},type:u,clientExtensionResults:r.getClientExtensionResults(),authenticatorAttachment:b(r.authenticatorAttachment)}}function A(t){var e=t.token,n=t.tenantId;return{"Content-Type":"application/json",Authorization:e?"Bearer ".concat(e):"Basic ".concat(window.btoa(encodeURIComponent(n)))}}var R=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.registrationOptions=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.username,i=t.authenticatorAttachment;return h(this,(function(t){switch(t.label){case 0:return e=Boolean(i)?{username:o,authenticatorAttachment:i}:{username:o},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey/registration-options"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.authenticationOptions=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.challengeId;return h(this,(function(t){switch(t.label){case 0:return e={challengeId:o},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey/authentication-options"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.addAuthenticator=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.challengeId,i=t.registrationCredential;return h(this,(function(t){switch(t.label){case 0:return e={challengeId:o,registrationCredential:i},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.challengeId,i=t.authenticationCredential,r=t.deviceId;return h(this,(function(t){switch(t.label){case 0:return e={challengeId:o,authenticationCredential:i,deviceId:r},[4,fetch("".concat(this.baseUrl,"/client/verify/passkey"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.getPasskeyAuthenticator=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.credentialIds;return h(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/passkey?credentialIds=").concat(n),{method:"GET",headers:A({tenantId:this.tenantId})})];case 1:if(!(e=t.sent()).ok)throw new Error(e.statusText);return[2,e.json()]}}))}))},t.prototype.challenge=function(t){return l(this,void 0,void 0,(function(){return h(this,(function(e){switch(e.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge"),{method:"POST",headers:A({tenantId:this.tenantId}),body:JSON.stringify({action:t})})];case 1:return[2,e.sent().json()]}}))}))},t}(),S=function(){function t(){this.token=null}return t.prototype.handleTokenNotSetError=function(){var t="A token has not been set. Call 'setToken' first.";return console.error("Error: ".concat(t)),{error:"TOKEN_NOT_SET",errorDescription:t}},t.shared=new t,t}(),O=function(){function t(t){var e=t.baseUrl,n=t.tenantId,o=t.anonymousId;this.passkeyLocalStorageKey="as_user_passkey_map",this.cache=S.shared,this.api=new R({baseUrl:e,tenantId:n}),this.anonymousId=o}return t.prototype.signUp=function(t){return l(this,arguments,void 0,(function(t){var e,n,o,i,r,a=t.userName,s=t.userDisplayName,l=t.token,d=t.authenticatorAttachment,p=void 0===d?"platform":d;return h(this,(function(t){switch(t.label){case 0:return(e=null!=l?l:this.cache.token)?(n={username:a,displayName:s,token:e,authenticatorAttachment:p},[4,this.api.registrationOptions(n)]):[2,this.cache.handleTokenNotSetError()];case 1:return"error"in(o=t.sent())?(c(o),[2,o]):[4,E(o.options)];case 2:return i=t.sent(),[4,this.api.addAuthenticator({challengeId:o.challengeId,registrationCredential:i,token:e})];case 3:return"error"in(r=t.sent())?(c(r),[2,r]):(r.isVerified&&this.storeCredentialAgainstDevice(u(u({},i),{userId:r.userId})),r.accessToken&&(this.cache.token=r.accessToken),[2,{token:r.accessToken,registrationResponse:i}])}}))}))},t.prototype.signIn=function(t){return l(this,void 0,void 0,(function(){var e,n,o,i,r,a,s,l,d,p;return h(this,(function(h){switch(h.label){case 0:if((null==t?void 0:t.token)&&t.autofill)throw new Error("autofill is not supported when providing a token");if((null==t?void 0:t.action)&&t.token)throw new Error("action is not supported when providing a token");return(null==t?void 0:t.action)?[4,this.api.challenge(t.action)]:[3,2];case 1:return n=h.sent(),[3,3];case 2:n=null,h.label=3;case 3:return(e=n)&&"error"in e?(c(e),[2,e]):[4,this.api.authenticationOptions({token:null==t?void 0:t.token,challengeId:null==e?void 0:e.challengeId})];case 4:return"error"in(o=h.sent())?(c(o),[2,o]):[4,k(o.options,null==t?void 0:t.autofill)];case 5:return i=h.sent(),(null==t?void 0:t.onVerificationStarted)&&t.onVerificationStarted(),[4,this.api.verify({challengeId:o.challengeId,authenticationCredential:i,token:null==t?void 0:t.token,deviceId:this.anonymousId})];case 6:return"error"in(r=h.sent())?(c(r),[2,r]):(r.isVerified&&this.storeCredentialAgainstDevice(u(u({},i),{userId:r.userId})),r.accessToken&&(this.cache.token=r.accessToken),a=r.accessToken,s=r.userId,l=r.userAuthenticatorId,d=r.username,p=r.userDisplayName,[2,{token:a,userId:s,userAuthenticatorId:l,userName:d,userDisplayName:p,authenticationResponse:i}])}}))}))},t.prototype.isAvailableOnDevice=function(t){return l(this,arguments,void 0,(function(t){var e,n,o,i,r=t.userId;return h(this,(function(t){switch(t.label){case 0:if(!r)throw new Error("userId is required");if(!(e=localStorage.getItem(this.passkeyLocalStorageKey)))return[2,!1];if(n=JSON.parse(e),0===(o=null!==(i=n[r])&&void 0!==i?i:[]).length)return[2,!1];t.label=1;case 1:return t.trys.push([1,3,,4]),[4,this.api.getPasskeyAuthenticator({credentialIds:o})];case 2:return t.sent(),[2,!0];case 3:return t.sent(),[2,!1];case 4:return[2]}}))}))},t.prototype.storeCredentialAgainstDevice=function(t){var e=t.id,n=t.authenticatorAttachment,o=t.userId,i=void 0===o?"":o;if("cross-platform"!==n){var r=localStorage.getItem(this.passkeyLocalStorageKey),a=r?JSON.parse(r):{};a[i]?a[i].includes(e)||a[i].push(e):a[i]=[e],localStorage.setItem(this.passkeyLocalStorageKey,JSON.stringify(a))}},t}(),_=function(){function t(){this.windowRef=null}return t.prototype.show=function(t){var e=t.url,n=t.width,o=void 0===n?400:n,i=t.height,r=function(t){var e=t.url,n=t.width,o=t.height,i=t.win;if(!i.top)return null;var r=i.top.outerHeight/2+i.top.screenY-o/2,a=i.top.outerWidth/2+i.top.screenX-n/2;return window.open(e,"","toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=no, resizable=no, copyhistory=no, width=".concat(n,", height=").concat(o,", top=").concat(r,", left=").concat(a))}({url:e,width:o,height:void 0===i?500:i,win:window});if(!r)throw new Error("Window is not initialized");return this.windowRef=r,r},t.prototype.close=function(){if(!this.windowRef)throw new Error("Window is not initialized");this.windowRef.close()},t}();const T=":not([inert]):not([inert] *)",C=':not([tabindex^="-"])',N=":not(:disabled)";var U=[`a[href]${T}${C}`,`area[href]${T}${C}`,`input:not([type="hidden"]):not([type="radio"])${T}${C}${N}`,`input[type="radio"]${T}${C}${N}`,`select${T}${C}${N}`,`textarea${T}${C}${N}`,`button${T}${C}${N}`,`details${T} > summary:first-of-type${C}`,`iframe${T}${C}`,`audio[controls]${T}${C}`,`video[controls]${T}${C}`,`[contenteditable]${T}${C}`,`[tabindex]${T}${C}`];function P(t){(t.querySelector("[autofocus]")||t).focus()}function $(t,e){if(e&&L(t))return t;if(!((n=t).shadowRoot&&"-1"===n.getAttribute("tabindex")||n.matches(":disabled,[hidden],[inert]")))if(t.shadowRoot){let n=D(t.shadowRoot,e);for(;n;){const t=$(n,e);if(t)return t;n=x(n,e)}}else if("slot"===t.localName){const n=t.assignedElements({flatten:!0});e||n.reverse();for(const t of n){const n=$(t,e);if(n)return n}}else{let n=D(t,e);for(;n;){const t=$(n,e);if(t)return t;n=x(n,e)}}var n;return!e&&L(t)?t:null}function D(t,e){return e?t.firstElementChild:t.lastElementChild}function x(t,e){return e?t.nextElementSibling:t.previousElementSibling}const L=t=>!t.shadowRoot?.delegatesFocus&&(t.matches(U.join(","))&&!(t=>!(!t.matches("details:not([open]) *")||t.matches("details>summary:first-of-type"))||!(t.offsetWidth||t.offsetHeight||t.getClientRects().length))(t));function K(t=document){const e=t.activeElement;return e?e.shadowRoot?K(e.shadowRoot)||document.activeElement:e:null}function j(t,e){const[n,o]=function(t){const e=$(t,!0);return[e,e?$(t,!1)||e:null]}(t);if(!n)return e.preventDefault();const i=K();e.shiftKey&&i===n?(o.focus(),e.preventDefault()):e.shiftKey||i!==o||(n.focus(),e.preventDefault())}class H{$el;id;previouslyFocused;shown;constructor(t){this.$el=t,this.id=this.$el.getAttribute("data-a11y-dialog")||this.$el.id,this.previouslyFocused=null,this.shown=!1,this.maintainFocus=this.maintainFocus.bind(this),this.bindKeypress=this.bindKeypress.bind(this),this.handleTriggerClicks=this.handleTriggerClicks.bind(this),this.show=this.show.bind(this),this.hide=this.hide.bind(this),this.$el.setAttribute("aria-hidden","true"),this.$el.setAttribute("aria-modal","true"),this.$el.setAttribute("tabindex","-1"),this.$el.hasAttribute("role")||this.$el.setAttribute("role","dialog"),document.addEventListener("click",this.handleTriggerClicks,!0)}destroy(){return this.hide(),document.removeEventListener("click",this.handleTriggerClicks,!0),this.$el.replaceWith(this.$el.cloneNode(!0)),this.fire("destroy"),this}show(t){return this.shown||(this.shown=!0,this.$el.removeAttribute("aria-hidden"),this.previouslyFocused=K(),"BODY"===this.previouslyFocused?.tagName&&t?.target&&(this.previouslyFocused=t.target),"focus"===t?.type?this.maintainFocus(t):P(this.$el),document.body.addEventListener("focus",this.maintainFocus,!0),this.$el.addEventListener("keydown",this.bindKeypress,!0),this.fire("show",t)),this}hide(t){return this.shown?(this.shown=!1,this.$el.setAttribute("aria-hidden","true"),this.previouslyFocused?.focus?.(),document.body.removeEventListener("focus",this.maintainFocus,!0),this.$el.removeEventListener("keydown",this.bindKeypress,!0),this.fire("hide",t),this):this}on(t,e,n){return this.$el.addEventListener(t,e,n),this}off(t,e,n){return this.$el.removeEventListener(t,e,n),this}fire(t,e){this.$el.dispatchEvent(new CustomEvent(t,{detail:e,cancelable:!0}))}handleTriggerClicks(t){const e=t.target;e.closest(`[data-a11y-dialog-show="${this.id}"]`)&&this.show(t),(e.closest(`[data-a11y-dialog-hide="${this.id}"]`)||e.closest("[data-a11y-dialog-hide]")&&e.closest('[aria-modal="true"]')===this.$el)&&this.hide(t)}bindKeypress(t){if(document.activeElement?.closest('[aria-modal="true"]')!==this.$el)return;let e=!1;try{e=!!this.$el.querySelector('[popover]:not([popover="manual"]):popover-open')}catch{}"Escape"!==t.key||"alertdialog"===this.$el.getAttribute("role")||e||(t.preventDefault(),this.hide(t)),"Tab"===t.key&&j(this.$el,t)}maintainFocus(t){t.target.closest('[aria-modal="true"], [data-a11y-dialog-ignore-focus-trap]')||P(this.$el)}}function W(){for(const t of document.querySelectorAll("[data-a11y-dialog]"))new H(t)}"undefined"!=typeof document&&("loading"===document.readyState?document.addEventListener("DOMContentLoaded",W):W());var M="__authsignal-popup-container",J="__authsignal-popup-content",q="__authsignal-popup-overlay",F="__authsignal-popup-style",G="__authsignal-popup-iframe",V="385px",z=function(){function t(t){var e=t.width,n=t.isClosable;if(this.popup=null,document.querySelector("#".concat(M)))throw new Error("Multiple instances of Authsignal popup is not supported.");this.create({width:e,isClosable:n})}return t.prototype.create=function(t){var e=this,n=t.width,o=void 0===n?V:n,i=t.isClosable,r=void 0===i||i,a=o;CSS.supports("width",o)||(console.warn("Invalid CSS value for `popupOptions.width`. Using default value instead."),a=V);var s=document.createElement("div");s.setAttribute("id",M),s.setAttribute("aria-hidden","true"),r||s.setAttribute("role","alertdialog");var c=document.createElement("div");c.setAttribute("id",q),r&&c.setAttribute("data-a11y-dialog-hide","true");var u=document.createElement("div");u.setAttribute("id",J),document.body.appendChild(s);var l=document.createElement("style");l.setAttribute("id",F),l.textContent="\n      #".concat(M,",\n      #").concat(q," {\n        position: fixed;\n        top: 0;\n        right: 0;\n        bottom: 0;\n        left: 0;\n      }\n\n      #").concat(M," {\n        z-index: 2147483647;\n        display: flex;\n      }\n\n      #").concat(M,"[aria-hidden='true'] {\n        display: none;\n      }\n\n      #").concat(q," {\n        background-color: rgba(0, 0, 0, 0.18);\n      }\n\n      #").concat(J," {\n        margin: auto;\n        z-index: 2147483647;\n        position: relative;\n        background-color: transparent;\n        border-radius: 8px;\n        width: ").concat(a,";\n      }\n\n      #").concat(J," iframe {\n        width: 1px;\n        min-width: 100%;\n        border-radius: inherit;\n        max-height: 95vh;\n        height: ").concat("384px",";\n      }\n    "),document.head.insertAdjacentElement("beforeend",l),s.appendChild(c),s.appendChild(u),this.popup=new H(s),s.focus(),this.popup.on("hide",(function(){e.destroy()}))},t.prototype.destroy=function(){var t=document.querySelector("#".concat(M)),e=document.querySelector("#".concat(F));t&&e&&(document.body.removeChild(t),document.head.removeChild(e)),window.removeEventListener("message",B)},t.prototype.show=function(t){var e,n=t.url;if(!this.popup)throw new Error("Popup is not initialized");var o=document.createElement("iframe");o.setAttribute("id",G),o.setAttribute("name","authsignal"),o.setAttribute("title","Authsignal multi-factor authentication"),o.setAttribute("src",n),o.setAttribute("frameborder","0"),o.setAttribute("allow","publickey-credentials-get *; publickey-credentials-create *; clipboard-write");var i=document.querySelector("#".concat(J));i&&i.appendChild(o),window.addEventListener("message",B),null===(e=this.popup)||void 0===e||e.show()},t.prototype.close=function(){if(!this.popup)throw new Error("Popup is not initialized");this.popup.hide()},t.prototype.on=function(t,e){if(!this.popup)throw new Error("Popup is not initialized");this.popup.on(t,e)},t}();function B(t){var e=document.querySelector("#".concat(G));e&&t.data.height&&(e.style.height=t.data.height+"px")}var Y=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){return l(this,arguments,void 0,(function(t){var e=t.token;return h(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/totp"),{method:"POST",headers:A({token:e,tenantId:this.tenantId})})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.code;return h(this,(function(t){switch(t.label){case 0:return e={verificationCode:o},[4,fetch("".concat(this.baseUrl,"/client/verify/totp"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t}(),X=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=S.shared,this.api=new Y({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(){return l(this,void 0,void 0,(function(){return h(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.code;return h(this,(function(t){switch(t.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:n})]:[2,this.cache.handleTokenNotSetError()];case 1:return(e=t.sent()).accessToken&&(this.cache.token=e.accessToken),[2,e]}}))}))},t}(),Q=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.email;return h(this,(function(t){switch(t.label){case 0:return e={email:o},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/email-otp"),{method:"POST",headers:this.buildHeaders(n),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.challenge=function(t){return l(this,arguments,void 0,(function(t){var e=t.token;return h(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge/email-otp"),{method:"POST",headers:this.buildHeaders(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.code;return h(this,(function(t){switch(t.label){case 0:return e={verificationCode:o},[4,fetch("".concat(this.baseUrl,"/client/verify/email-otp"),{method:"POST",headers:this.buildHeaders(n),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.buildHeaders=function(t){return{"Content-Type":"application/json",Authorization:t?"Bearer ".concat(t):"Basic ".concat(window.btoa(encodeURIComponent(this.tenantId)))}},t}(),Z=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=S.shared,this.api=new Q({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(t){return l(this,arguments,void 0,(function(t){var e=t.email;return h(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token,email:e})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.challenge=function(){return l(this,void 0,void 0,(function(){return h(this,(function(t){return this.cache.token?[2,this.api.challenge({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.code;return h(this,(function(t){switch(t.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:n})]:[2,this.cache.handleTokenNotSetError()];case 1:return(e=t.sent()).accessToken&&(this.cache.token=e.accessToken),[2,e]}}))}))},t}(),tt=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.tenantId=n,this.baseUrl=e}return t.prototype.enroll=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.phoneNumber;return h(this,(function(t){switch(t.label){case 0:return e={phoneNumber:o},[4,fetch("".concat(this.baseUrl,"/client/user-authenticators/sms"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.challenge=function(t){return l(this,arguments,void 0,(function(t){var e=t.token;return h(this,(function(t){switch(t.label){case 0:return[4,fetch("".concat(this.baseUrl,"/client/challenge/sms"),{method:"POST",headers:A({token:e,tenantId:this.tenantId})})];case 1:return[2,t.sent().json()]}}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.token,o=t.code;return h(this,(function(t){switch(t.label){case 0:return e={verificationCode:o},[4,fetch("".concat(this.baseUrl,"/client/verify/sms"),{method:"POST",headers:A({token:n,tenantId:this.tenantId}),body:JSON.stringify(e)})];case 1:return[2,t.sent().json()]}}))}))},t}(),et=function(){function t(t){var e=t.baseUrl,n=t.tenantId;this.cache=S.shared,this.api=new tt({baseUrl:e,tenantId:n})}return t.prototype.enroll=function(t){return l(this,arguments,void 0,(function(t){var e=t.phoneNumber;return h(this,(function(t){return this.cache.token?[2,this.api.enroll({token:this.cache.token,phoneNumber:e})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.challenge=function(){return l(this,void 0,void 0,(function(){return h(this,(function(t){return this.cache.token?[2,this.api.challenge({token:this.cache.token})]:[2,this.cache.handleTokenNotSetError()]}))}))},t.prototype.verify=function(t){return l(this,arguments,void 0,(function(t){var e,n=t.code;return h(this,(function(t){switch(t.label){case 0:return this.cache.token?[4,this.api.verify({token:this.cache.token,code:n})]:[2,this.cache.handleTokenNotSetError()];case 1:return(e=t.sent()).accessToken&&(this.cache.token=e.accessToken),[2,e]}}))}))},t}(),nt="4a08uqve",ot=function(){function e(t){var e=t.cookieDomain,n=t.cookieName,o=void 0===n?"__as_aid":n,i=t.baseUrl,r=void 0===i?"https://api.authsignal.com/v1":i,c=t.tenantId;if(this.anonymousId="",this.profilingId="",this.cookieDomain="",this.anonymousIdCookieName="",this.cookieDomain=e||document.location.hostname.replace("www.",""),this.anonymousIdCookieName=o,!c)throw new Error("tenantId is required");var u,l=(u=this.anonymousIdCookieName)&&decodeURIComponent(document.cookie.replace(new RegExp("(?:(?:^|.*;)\\s*"+encodeURIComponent(u).replace(/[\-\.\+\*]/g,"\\$&")+"\\s*\\=\\s*([^;]*).*$)|^.*$"),"$1"))||null;l?this.anonymousId=l:(this.anonymousId=a(),s({name:this.anonymousIdCookieName,value:this.anonymousId,expire:1/0,domain:this.cookieDomain,secure:"http:"!==document.location.protocol})),this.passkey=new O({tenantId:c,baseUrl:r,anonymousId:this.anonymousId}),this.totp=new X({tenantId:c,baseUrl:r}),this.email=new Z({tenantId:c,baseUrl:r}),this.sms=new et({tenantId:c,baseUrl:r})}return e.prototype.setToken=function(t){S.shared.token=t},e.prototype.launch=function(t,e){switch(null==e?void 0:e.mode){case"window":return this.launchWithWindow(t,e);case"popup":return this.launchWithPopup(t,e);default:this.launchWithRedirect(t)}},e.prototype.initAdvancedProfiling=function(t){var e=a();this.profilingId=e,s({name:"__as_pid",value:e,expire:1/0,domain:this.cookieDomain,secure:"http:"!==document.location.protocol});var n=t?"".concat(t,"/fp/tags.js?org_id=").concat(nt,"&session_id=").concat(e):"https://h.online-metrix.net/fp/tags.js?org_id=".concat(nt,"&session_id=").concat(e),o=document.createElement("script");o.src=n,o.async=!1,o.id="as_adv_profile",document.head.appendChild(o);var i=document.createElement("noscript");i.setAttribute("id","as_adv_profile_pixel"),i.setAttribute("aria-hidden","true");var r=document.createElement("iframe"),c=t?"".concat(t,"/fp/tags?org_id=").concat(nt,"&session_id=").concat(e):"https://h.online-metrix.net/fp/tags?org_id=".concat(nt,"&session_id=").concat(e);r.setAttribute("id","as_adv_profile_pixel"),r.setAttribute("src",c),r.setAttribute("style","width: 100px; height: 100px; border: 0; position: absolute; top: -5000px;"),i&&(i.appendChild(r),document.body.prepend(i))},e.prototype.launchWithRedirect=function(t){window.location.href=t},e.prototype.launchWithPopup=function(e,n){var o=n.popupOptions,i=new z({width:null==o?void 0:o.width,isClosable:null==o?void 0:o.isClosable}),r="".concat(e,"&mode=popup");return i.show({url:r}),new Promise((function(e){var n=void 0;i.on("hide",(function(){e({token:n})})),window.addEventListener("message",(function(e){var o=null;try{o=JSON.parse(e.data)}catch(t){}(null==o?void 0:o.event)===t.AuthsignalWindowMessage.AUTHSIGNAL_CLOSE_POPUP&&(n=o.token,i.close())}),!1)}))},e.prototype.launchWithWindow=function(e,n){var o=n.windowOptions,i=new _,r="".concat(e,"&mode=popup");return i.show({url:r,width:null==o?void 0:o.width,height:null==o?void 0:o.height}),new Promise((function(e){window.addEventListener("message",(function(n){var o=null;try{o=JSON.parse(n.data)}catch(t){}(null==o?void 0:o.event)===t.AuthsignalWindowMessage.AUTHSIGNAL_CLOSE_POPUP&&(i.close(),e({token:o.token}))}),!1)}))},e}();return t.Authsignal=ot,Object.defineProperty(t,"__esModule",{value:!0}),t}({});

package/dist/passkey.d.ts

@@ -1,32 +1,34 @@
 import { PasskeyApiClient } from "./api";
-import { AuthenticatorAttachment } from "@simplewebauthn/types";
+import { AuthenticationResponseJSON, RegistrationResponseJSON, AuthenticatorAttachment } from "@simplewebauthn/types";
 import { AuthsignalResponse } from "./api/types/shared";
-declare type PasskeyOptions = {
+type PasskeyOptions = {
     baseUrl: string;
     tenantId: string;
     anonymousId: string;
 };
-declare type SignUpParams = {
+type SignUpParams = {
     userName?: string;
     userDisplayName?: string;
     token?: string;
     authenticatorAttachment?: AuthenticatorAttachment | null;
 };
-declare type SignUpResponse = {
+type SignUpResponse = {
     token?: string;
+    registrationResponse?: RegistrationResponseJSON;
 };
-declare type SignInParams = {
+type SignInParams = {
     token?: string;
     autofill?: boolean;
     action?: string;
     onVerificationStarted?: () => unknown;
 };
-declare type SignInResponse = {
+type SignInResponse = {
     token?: string;
     userId?: string;
     userAuthenticatorId?: string;
     userName?: string;
     userDisplayName?: string;
+    authenticationResponse?: AuthenticationResponseJSON;
 };
 export declare class Passkey {
     api: PasskeyApiClient;
@@ -36,7 +38,9 @@ export declare class Passkey {
     constructor({ baseUrl, tenantId, anonymousId }: PasskeyOptions);
     signUp({ userName, userDisplayName, token, authenticatorAttachment, }: SignUpParams): Promise<AuthsignalResponse<SignUpResponse>>;
     signIn(params?: SignInParams): Promise<AuthsignalResponse<SignInResponse>>;
-    isAvailableOnDevice(): Promise<boolean>;
+    isAvailableOnDevice({ userId }: {
+        userId: string;
+    }): Promise<boolean>;
     private storeCredentialAgainstDevice;
 }
 export {};

package/dist/sms.d.ts

@@ -1,12 +1,12 @@
 import { AuthsignalResponse, ChallengeResponse, EnrollResponse, VerifyResponse } from "./api/types/shared";
-declare type SmsOptions = {
+type SmsOptions = {
     baseUrl: string;
     tenantId: string;
 };
-declare type EnrollParams = {
+type EnrollParams = {
     phoneNumber: string;
 };
-declare type VerifyParams = {
+type VerifyParams = {
     code: string;
 };
 export declare class Sms {

package/dist/totp.d.ts

@@ -1,10 +1,10 @@
 import { AuthsignalResponse, VerifyResponse } from "./api/types/shared";
 import { EnrollResponse } from "./api/types/totp";
-declare type TotpOptions = {
+type TotpOptions = {
     baseUrl: string;
     tenantId: string;
 };
-declare type VerifyParams = {
+type VerifyParams = {
     code: string;
 };
 export declare class Totp {

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-declare type BaseLaunchOptions = {
+type BaseLaunchOptions = {
     /**
      *  How the Authsignal Prebuilt MFA page should launch.
      *  `popup` will cause it to open in a overlay, whilst `redirect`
@@ -7,10 +7,10 @@ declare type BaseLaunchOptions = {
      */
     mode?: "popup" | "redirect" | "window";
 };
-export declare type RedirectLaunchOptions = BaseLaunchOptions & {
+export type RedirectLaunchOptions = BaseLaunchOptions & {
     mode: "redirect";
 };
-export declare type PopupLaunchOptions = BaseLaunchOptions & {
+export type PopupLaunchOptions = BaseLaunchOptions & {
     mode: "popup";
     popupOptions?: {
         /** Any valid CSS value for the `width` property. */
@@ -25,15 +25,15 @@ export declare type PopupLaunchOptions = BaseLaunchOptions & {
         isClosable?: boolean;
     };
 };
-export declare type WindowLaunchOptions = BaseLaunchOptions & {
+export type WindowLaunchOptions = BaseLaunchOptions & {
     mode: "window";
     windowOptions?: {
         width?: number;
         height?: number;
     };
 };
-export declare type LaunchOptions = RedirectLaunchOptions | PopupLaunchOptions | WindowLaunchOptions;
-export declare type AuthsignalOptions = {
+export type LaunchOptions = RedirectLaunchOptions | PopupLaunchOptions | WindowLaunchOptions;
+export type AuthsignalOptions = {
     /**
      * Cookie domain that will be used to identify
      * users. If not set, location.hostname will be used
@@ -56,11 +56,11 @@ export declare type AuthsignalOptions = {
 export declare enum AuthsignalWindowMessage {
     AUTHSIGNAL_CLOSE_POPUP = "AUTHSIGNAL_CLOSE_POPUP"
 }
-export declare type AuthsignalWindowMessageData = {
+export type AuthsignalWindowMessageData = {
     event: AuthsignalWindowMessage;
     token: string;
 };
-export declare type TokenPayload = {
+export type TokenPayload = {
     token?: string;
 };
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authsignal/browser",
-  "version": "0.5.10",
+  "version": "0.6.0",
   "type": "module",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@fingerprintjs/fingerprintjs": "^3.3.6",
-    "@simplewebauthn/browser": "^9.0.1",
-    "@simplewebauthn/types": "^9.0.1",
+    "@simplewebauthn/browser": "^10.0.0",
+    "@simplewebauthn/types": "^10.0.0",
     "a11y-dialog": "8.0.4",
     "uuid": "^9.0.0"
   },
@@ -37,7 +37,6 @@
     "@rollup/plugin-node-resolve": "^14.1.0",
     "@rollup/plugin-terser": "^0.4.3",
     "@rollup/plugin-typescript": "^8.5.0",
-    "@simplewebauthn/typescript-types": "^8.0.0",
     "@types/iframe-resizer": "^3.5.9",
     "@types/uuid": "^8.3.4",
     "@typescript-eslint/eslint-plugin": "^5.39.0",
@@ -48,7 +47,7 @@
     "prettier": "^2.7.1",
     "rollup": "^2.79.1",
     "tslib": "^2.4.0",
-    "typescript": "^4.8.4"
+    "typescript": "^5.6.2"
   },
   "files": [
     "dist"