@azure/msal-browser 4.24.1 → 4.25.1

package/src/custom_auth/controller/CustomAuthStandardController.ts

@@ -31,6 +31,7 @@ import {
     SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE,
     SIGN_IN_COMPLETED_RESULT_TYPE,
     SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
+    SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
 } from "../sign_in/interaction_client/result/SignInActionResult.js";
 import { SignUpClient } from "../sign_up/interaction_client/SignUpClient.js";
 import { CustomAuthInterationClientFactory } from "../core/interaction_client/CustomAuthInterationClientFactory.js";
@@ -43,6 +44,7 @@ import { CustomAuthApiClient } from "../core/network_client/custom_auth_api/Cust
 import { FetchHttpClient } from "../core/network_client/http_client/FetchHttpClient.js";
 import { ResetPasswordClient } from "../reset_password/interaction_client/ResetPasswordClient.js";
 import { JitClient } from "../core/interaction_client/jit/JitClient.js";
+import { MfaClient } from "../core/interaction_client/mfa/MfaClient.js";
 import { NoCachedAccountFoundError } from "../core/error/NoCachedAccountFoundError.js";
 import * as ArgumentValidator from "../core/utils/ArgumentValidator.js";
 import { UserAlreadySignedInError } from "../core/error/UserAlreadySignedInError.js";
@@ -52,6 +54,7 @@ import { SignInCodeRequiredState } from "../sign_in/auth_flow/state/SignInCodeRe
 import { SignInPasswordRequiredState } from "../sign_in/auth_flow/state/SignInPasswordRequiredState.js";
 import { SignInCompletedState } from "../sign_in/auth_flow/state/SignInCompletedState.js";
 import { AuthMethodRegistrationRequiredState } from "../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { MfaAwaitingState } from "../core/auth_flow/mfa/state/MfaState.js";
 import { SignUpCodeRequiredState } from "../sign_up/auth_flow/state/SignUpCodeRequiredState.js";
 import { SignUpPasswordRequiredState } from "../sign_up/auth_flow/state/SignUpPasswordRequiredState.js";
 import { ResetPasswordCodeRequiredState } from "../reset_password/auth_flow/state/ResetPasswordCodeRequiredState.js";
@@ -68,6 +71,7 @@ export class CustomAuthStandardController
     private readonly signUpClient: SignUpClient;
     private readonly resetPasswordClient: ResetPasswordClient;
     private readonly jitClient: JitClient;
+    private readonly mfaClient: MfaClient;
     private readonly cacheClient: CustomAuthSilentCacheClient;
     private readonly customAuthConfig: CustomAuthBrowserConfiguration;
     private readonly authority: CustomAuthAuthority;
@@ -129,6 +133,7 @@ export class CustomAuthStandardController
         this.resetPasswordClient =
             interactionClientFactory.create(ResetPasswordClient);
         this.jitClient = interactionClientFactory.create(JitClient);
+        this.mfaClient = interactionClientFactory.create(MfaClient);
         this.cacheClient = interactionClientFactory.create(
             CustomAuthSilentCacheClient
         );
@@ -242,6 +247,7 @@ export class CustomAuthStandardController
                         signInClient: this.signInClient,
                         cacheClient: this.cacheClient,
                         jitClient: this.jitClient,
+                        mfaClient: this.mfaClient,
                         username: signInInputs.username,
                         codeLength: startResult.codeLength,
                         scopes: signInInputs.scopes ?? [],
@@ -272,6 +278,7 @@ export class CustomAuthStandardController
                             signInClient: this.signInClient,
                             cacheClient: this.cacheClient,
                             jitClient: this.jitClient,
+                            mfaClient: this.mfaClient,
                             username: signInInputs.username,
                             scopes: signInInputs.scopes ?? [],
                             claims: signInInputs.claims,
@@ -344,6 +351,29 @@ export class CustomAuthStandardController
                             claims: signInInputs.claims,
                         })
                     );
+                } else if (
+                    submitPasswordResult.type ===
+                    SIGN_IN_MFA_REQUIRED_RESULT_TYPE
+                ) {
+                    // MFA is required - create MfaAwaitingState
+                    this.logger.verbose(
+                        "MFA required for sign-in.",
+                        correlationId
+                    );
+
+                    return new SignInResult(
+                        new MfaAwaitingState({
+                            correlationId: correlationId,
+                            continuationToken:
+                                submitPasswordResult.continuationToken,
+                            logger: this.logger,
+                            config: this.customAuthConfig,
+                            mfaClient: this.mfaClient,
+                            cacheClient: this.cacheClient,
+                            scopes: signInInputs.scopes ?? [],
+                            authMethods: submitPasswordResult.authMethods ?? [],
+                        })
+                    );
                 } else {
                     // Unexpected result type
                     const result = submitPasswordResult as { type: string };
@@ -437,6 +467,7 @@ export class CustomAuthStandardController
                         signUpClient: this.signUpClient,
                         cacheClient: this.cacheClient,
                         jitClient: this.jitClient,
+                        mfaClient: this.mfaClient,
                         username: signUpInputs.username,
                         codeLength: startResult.codeLength,
                         codeResendInterval: startResult.interval,
@@ -461,6 +492,7 @@ export class CustomAuthStandardController
                         signUpClient: this.signUpClient,
                         cacheClient: this.cacheClient,
                         jitClient: this.jitClient,
+                        mfaClient: this.mfaClient,
                         username: signUpInputs.username,
                     })
                 );
@@ -531,6 +563,7 @@ export class CustomAuthStandardController
                     resetPasswordClient: this.resetPasswordClient,
                     cacheClient: this.cacheClient,
                     jitClient: this.jitClient,
+                    mfaClient: this.mfaClient,
                     username: resetPasswordInputs.username,
                     codeLength: startResult.codeLength,
                 })

package/src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts

@@ -153,11 +153,9 @@ export abstract class AuthFlowErrorBase {
     protected isVerificationContactBlockedError(): boolean {
         return (
             this.errorData instanceof CustomAuthApiError &&
-            this.errorData.error === CustomAuthApiErrorCode.INVALID_REQUEST &&
-            this.errorData.errorCodes?.includes(550024) === true &&
-            this.errorData.errorDescription?.includes(
-                "multi-factor authentication method is blocked"
-            ) === true
+            this.errorData.error === CustomAuthApiErrorCode.ACCESS_DENIED &&
+            this.errorData.subError ===
+                CustomAuthApiSuberror.PROVIDER_BLOCKED_BY_REPUTATION
         );
     }
 }

package/src/custom_auth/core/auth_flow/AuthFlowState.ts

@@ -19,7 +19,12 @@ export interface AuthFlowActionRequiredStateParameters {
 /**
  * Base class for the state of an authentication flow.
  */
-export abstract class AuthFlowStateBase {}
+export abstract class AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    abstract stateType: string;
+}
 
 /**
  * Base class for the action requried state in an authentication flow.

package/src/custom_auth/core/auth_flow/AuthFlowStateTypes.ts

@@ -0,0 +1,60 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+// Sign in state types
+export const SIGN_IN_CODE_REQUIRED_STATE_TYPE = "SignInCodeRequiredState";
+export const SIGN_IN_PASSWORD_REQUIRED_STATE_TYPE =
+    "SignInPasswordRequiredState";
+export const SIGN_IN_CONTINUATION_STATE_TYPE = "SignInContinuationState";
+export const SIGN_IN_COMPLETED_STATE_TYPE = "SignInCompletedState";
+export const SIGN_IN_FAILED_STATE_TYPE = "SignInFailedState";
+
+// Sign up state types
+export const SIGN_UP_CODE_REQUIRED_STATE_TYPE = "SignUpCodeRequiredState";
+export const SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE =
+    "SignUpPasswordRequiredState";
+export const SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE =
+    "SignUpAttributesRequiredState";
+export const SIGN_UP_COMPLETED_STATE_TYPE = "SignUpCompletedState";
+export const SIGN_UP_FAILED_STATE_TYPE = "SignUpFailedState";
+
+// Reset password state types
+export const RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE =
+    "ResetPasswordCodeRequiredState";
+export const RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE =
+    "ResetPasswordPasswordRequiredState";
+export const RESET_PASSWORD_COMPLETED_STATE_TYPE =
+    "ResetPasswordCompletedState";
+export const RESET_PASSWORD_FAILED_STATE_TYPE = "ResetPasswordFailedState";
+
+// Get account state types
+export const GET_ACCOUNT_COMPLETED_STATE_TYPE = "GetAccountCompletedState";
+export const GET_ACCOUNT_FAILED_STATE_TYPE = "GetAccountFailedState";
+
+// Get access token state types
+export const GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE =
+    "GetAccessTokenCompletedState";
+export const GET_ACCESS_TOKEN_FAILED_STATE_TYPE = "GetAccessTokenFailedState";
+
+// Sign out state types
+export const SIGN_OUT_COMPLETED_STATE_TYPE = "SignOutCompletedState";
+export const SIGN_OUT_FAILED_STATE_TYPE = "SignOutFailedState";
+
+// MFA state types
+export const MFA_AWAITING_STATE_TYPE = "MfaAwaitingState";
+export const MFA_VERIFICATION_REQUIRED_STATE_TYPE =
+    "MfaVerificationRequiredState";
+export const MFA_COMPLETED_STATE_TYPE = "MfaCompletedState";
+export const MFA_FAILED_STATE_TYPE = "MfaFailedState";
+
+// Auth method registration (JIT) state types
+export const AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE =
+    "AuthMethodRegistrationRequiredState";
+export const AUTH_METHOD_VERIFICATION_REQUIRED_STATE_TYPE =
+    "AuthMethodVerificationRequiredState";
+export const AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE =
+    "AuthMethodRegistrationCompletedState";
+export const AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE =
+    "AuthMethodRegistrationFailedState";

package/src/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationChallengeMethodResult.ts

@@ -9,6 +9,11 @@ import type { AuthMethodVerificationRequiredState } from "../state/AuthMethodReg
 import { CustomAuthAccountData } from "../../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { AuthMethodRegistrationCompletedState } from "../state/AuthMethodRegistrationCompletedState.js";
 import { AuthMethodRegistrationFailedState } from "../state/AuthMethodRegistrationFailedState.js";
+import {
+    AUTH_METHOD_VERIFICATION_REQUIRED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 /**
  * Result of challenging an authentication method for registration.
@@ -41,10 +46,12 @@ export class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultB
      * @returns true if verification is required, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isVerificationRequired(): boolean {
+    isVerificationRequired(): this is AuthMethodRegistrationChallengeMethodResult & {
+        state: AuthMethodVerificationRequiredState;
+    } {
         return (
-            this.state.constructor?.name ===
-            "AuthMethodVerificationRequiredState"
+            this.state.stateType ===
+            AUTH_METHOD_VERIFICATION_REQUIRED_STATE_TYPE
         );
     }
 
@@ -53,10 +60,12 @@ export class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultB
      * @returns true if registration is completed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isCompleted(): boolean {
+    isCompleted(): this is AuthMethodRegistrationChallengeMethodResult & {
+        state: AuthMethodRegistrationCompletedState;
+    } {
         return (
-            this.state.constructor?.name ===
-            "AuthMethodRegistrationCompletedState"
+            this.state.stateType ===
+            AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE
         );
     }
 
@@ -65,8 +74,12 @@ export class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultB
      * @returns true if the result is failed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isFailed(): boolean {
-        return this.state instanceof AuthMethodRegistrationFailedState;
+    isFailed(): this is AuthMethodRegistrationChallengeMethodResult & {
+        state: AuthMethodRegistrationFailedState;
+    } {
+        return (
+            this.state.stateType === AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE
+        );
     }
 }
 

package/src/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationSubmitChallengeResult.ts

@@ -8,6 +8,10 @@ import { AuthMethodRegistrationSubmitChallengeError } from "../error_type/AuthMe
 import { CustomAuthAccountData } from "../../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { AuthMethodRegistrationFailedState } from "../state/AuthMethodRegistrationFailedState.js";
 import { AuthMethodRegistrationCompletedState } from "../state/AuthMethodRegistrationCompletedState.js";
+import {
+    AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 /**
  * Result of submitting a challenge for authentication method registration.
@@ -39,10 +43,12 @@ export class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultB
      * @returns true if registration is completed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isCompleted(): boolean {
+    isCompleted(): this is AuthMethodRegistrationSubmitChallengeResult & {
+        state: AuthMethodRegistrationCompletedState;
+    } {
         return (
-            this.state.constructor?.name ===
-            "AuthMethodRegistrationCompletedState"
+            this.state.stateType ===
+            AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE
         );
     }
 
@@ -51,8 +57,12 @@ export class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultB
      * @returns true if the result is failed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isFailed(): boolean {
-        return this.state instanceof AuthMethodRegistrationFailedState;
+    isFailed(): this is AuthMethodRegistrationSubmitChallengeResult & {
+        state: AuthMethodRegistrationFailedState;
+    } {
+        return (
+            this.state.stateType === AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE
+        );
     }
 }
 

package/src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.ts

@@ -4,5 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../AuthFlowState.js";
+import { AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE } from "../../AuthFlowStateTypes.js";
 
-export class AuthMethodRegistrationCompletedState extends AuthFlowStateBase {}
+/**
+ * State indicating that the auth method registration flow has completed successfully.
+ */
+export class AuthMethodRegistrationCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE;
+}

package/src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.ts

@@ -4,5 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../AuthFlowState.js";
+import { AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE } from "../../AuthFlowStateTypes.js";
 
-export class AuthMethodRegistrationFailedState extends AuthFlowStateBase {}
+/**
+ * State indicating that the auth method registration flow has failed.
+ */
+export class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE;
+}

package/src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.ts

@@ -25,6 +25,10 @@ import { GrantType } from "../../../../CustomAuthConstants.js";
 import { AuthMethodRegistrationChallengeMethodResult } from "../result/AuthMethodRegistrationChallengeMethodResult.js";
 import { AuthMethodRegistrationSubmitChallengeResult } from "../result/AuthMethodRegistrationSubmitChallengeResult.js";
 import { AuthMethodRegistrationCompletedState } from "./AuthMethodRegistrationCompletedState.js";
+import {
+    AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE,
+    AUTH_METHOD_VERIFICATION_REQUIRED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 /**
  * Abstract base class for authentication method registration states.
@@ -134,6 +138,11 @@ abstract class AuthMethodRegistrationState<
  * State indicating that authentication method registration is required.
  */
 export class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState<AuthMethodRegistrationRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE;
+
     /**
      * Gets the available authentication methods for registration.
      * @returns Array of available authentication methods.
@@ -160,6 +169,11 @@ export class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationS
  * State indicating that verification is required for the challenged authentication method.
  */
 export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState<AuthMethodVerificationRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = AUTH_METHOD_VERIFICATION_REQUIRED_STATE_TYPE;
+
     /**
      * Gets the length of the expected verification code.
      * @returns The code length.

package/src/custom_auth/core/auth_flow/mfa/error_type/MfaError.ts

@@ -16,6 +16,14 @@ export class MfaRequestChallengeError extends AuthActionErrorBase {
     isInvalidInput(): boolean {
         return this.isInvalidInputError();
     }
+
+    /**
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider contacting customer support for assistance.
+     * @returns true if the error is due to the verification contact being blocked, false otherwise.
+     */
+    isVerificationContactBlocked(): boolean {
+        return this.isVerificationContactBlockedError();
+    }
 }
 
 /**

package/src/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../AuthFlowResultBase.js";
 import { MfaRequestChallengeError } from "../error_type/MfaError.js";
 import { MfaFailedState } from "../state/MfaFailedState.js";
 import type { MfaVerificationRequiredState } from "../state/MfaState.js";
+import {
+    MFA_VERIFICATION_REQUIRED_STATE_TYPE,
+    MFA_FAILED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 /**
  * Result of requesting an MFA challenge.
@@ -34,8 +38,10 @@ export class MfaRequestChallengeResult extends AuthFlowResultBase<
      * @returns true if verification is required, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isVerificationRequired(): boolean {
-        return this.state.constructor?.name === "MfaVerificationRequiredState";
+    isVerificationRequired(): this is MfaRequestChallengeResult & {
+        state: MfaVerificationRequiredState;
+    } {
+        return this.state.stateType === MFA_VERIFICATION_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -43,8 +49,10 @@ export class MfaRequestChallengeResult extends AuthFlowResultBase<
      * @returns true if the result is failed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isFailed(): boolean {
-        return this.state instanceof MfaFailedState;
+    isFailed(): this is MfaRequestChallengeResult & {
+        state: MfaFailedState;
+    } {
+        return this.state.stateType === MFA_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.ts

@@ -8,6 +8,10 @@ import { MfaSubmitChallengeError } from "../error_type/MfaError.js";
 import { CustomAuthAccountData } from "../../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { MfaCompletedState } from "../state/MfaCompletedState.js";
 import { MfaFailedState } from "../state/MfaFailedState.js";
+import {
+    MFA_COMPLETED_STATE_TYPE,
+    MFA_FAILED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 /**
  * Result of submitting an MFA challenge.
@@ -35,8 +39,10 @@ export class MfaSubmitChallengeResult extends AuthFlowResultBase<
      * @returns true if completed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isCompleted(): boolean {
-        return this.state instanceof MfaCompletedState;
+    isCompleted(): this is MfaSubmitChallengeResult & {
+        state: MfaCompletedState;
+    } {
+        return this.state.stateType === MFA_COMPLETED_STATE_TYPE;
     }
 
     /**
@@ -44,8 +50,10 @@ export class MfaSubmitChallengeResult extends AuthFlowResultBase<
      * @returns true if the result is failed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isFailed(): boolean {
-        return this.state instanceof MfaFailedState;
+    isFailed(): this is MfaSubmitChallengeResult & {
+        state: MfaFailedState;
+    } {
+        return this.state.stateType === MFA_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/core/auth_flow/mfa/state/MfaCompletedState.ts

@@ -4,8 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../AuthFlowState.js";
+import { MFA_COMPLETED_STATE_TYPE } from "../../AuthFlowStateTypes.js";
 
 /**
  * State indicating that the MFA flow has completed successfully.
  */
-export class MfaCompletedState extends AuthFlowStateBase {}
+export class MfaCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = MFA_COMPLETED_STATE_TYPE;
+}

package/src/custom_auth/core/auth_flow/mfa/state/MfaFailedState.ts

@@ -4,8 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../AuthFlowState.js";
+import { MFA_FAILED_STATE_TYPE } from "../../AuthFlowStateTypes.js";
 
 /**
  * State indicating that the MFA flow has failed.
  */
-export class MfaFailedState extends AuthFlowStateBase {}
+export class MfaFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = MFA_FAILED_STATE_TYPE;
+}

package/src/custom_auth/core/auth_flow/mfa/state/MfaState.ts

@@ -19,6 +19,10 @@ import { MfaCompletedState } from "./MfaCompletedState.js";
 import { ensureArgumentIsNotEmptyString } from "../../../utils/ArgumentValidator.js";
 import { AuthenticationMethod } from "../../../network_client/custom_auth_api/types/ApiResponseTypes.js";
 import { AuthFlowActionRequiredStateBase } from "../../AuthFlowState.js";
+import {
+    MFA_AWAITING_STATE_TYPE,
+    MFA_VERIFICATION_REQUIRED_STATE_TYPE,
+} from "../../AuthFlowStateTypes.js";
 
 abstract class MfaState<
     TParameters extends MfaStateParameters
@@ -89,6 +93,11 @@ abstract class MfaState<
  * This state allows the developer to pause execution before sending the code to the user's email.
  */
 export class MfaAwaitingState extends MfaState<MfaAwaitingStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = MFA_AWAITING_STATE_TYPE;
+
     /**
      * Gets the available authentication methods for MFA.
      * @returns Array of available authentication methods.
@@ -104,6 +113,11 @@ export class MfaAwaitingState extends MfaState<MfaAwaitingStateParameters> {
  * The challenge has been sent and the user needs to provide the code.
  */
 export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = MFA_VERIFICATION_REQUIRED_STATE_TYPE;
+
     /**
      * Gets the length of the code that the user needs to provide.
      * @returns The expected code length.

package/src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts

@@ -47,7 +47,8 @@ export class CustomAuthApiClient implements ICustomAuthApiClient {
         this.registerApi = new RegisterApiClient(
             customAuthApiBaseUrl,
             clientId,
-            httpClient
+            httpClient,
+            customAuthApiQueryParams
         );
     }
 }

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiErrorCodes.ts

@@ -24,3 +24,4 @@ export const PASSWORD_CHANGE_FAILED = "password_change_failed";
 export const PASSWORD_RESET_TIMEOUT = "password_reset_timeout";
 export const CLIENT_INFO_MISSING = "client_info_missing";
 export const EXPIRED_TOKEN = "expired_token";
+export const ACCESS_DENIED = "access_denied";

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiSuberrors.ts

@@ -14,3 +14,4 @@ export const ATTRIBUTE_VALIATION_FAILED = "attribute_validation_failed";
 export const NATIVEAUTHAPI_DISABLED = "nativeauthapi_disabled";
 export const REGISTRATION_REQUIRED = "registration_required";
 export const MFA_REQUIRED = "mfa_required";
+export const PROVIDER_BLOCKED_BY_REPUTATION = "provider_blocked_by_rep";

package/src/custom_auth/get_account/auth_flow/result/GetAccessTokenResult.ts

@@ -10,6 +10,10 @@ import {
     GetAccessTokenCompletedState,
     GetAccessTokenFailedState,
 } from "../state/GetAccessTokenState.js";
+import {
+    GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE,
+    GET_ACCESS_TOKEN_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of getting an access token.
@@ -48,7 +52,7 @@ export class GetAccessTokenResult extends AuthFlowResultBase<
     isCompleted(): this is GetAccessTokenResult & {
         state: GetAccessTokenCompletedState;
     } {
-        return this.state instanceof GetAccessTokenCompletedState;
+        return this.state.stateType === GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE;
     }
 
     /**
@@ -57,7 +61,7 @@ export class GetAccessTokenResult extends AuthFlowResultBase<
     isFailed(): this is GetAccessTokenResult & {
         state: GetAccessTokenFailedState;
     } {
-        return this.state instanceof GetAccessTokenFailedState;
+        return this.state.stateType === GET_ACCESS_TOKEN_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/get_account/auth_flow/result/GetAccountResult.ts

@@ -10,6 +10,10 @@ import {
     GetAccountCompletedState,
     GetAccountFailedState,
 } from "../state/GetAccountState.js";
+import {
+    GET_ACCOUNT_COMPLETED_STATE_TYPE,
+    GET_ACCOUNT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of getting an account.
@@ -47,14 +51,14 @@ export class GetAccountResult extends AuthFlowResultBase<
     isCompleted(): this is GetAccountResult & {
         state: GetAccountCompletedState;
     } {
-        return this.state instanceof GetAccountCompletedState;
+        return this.state.stateType === GET_ACCOUNT_COMPLETED_STATE_TYPE;
     }
 
     /**
      * Checks if the result is in a failed state.
      */
     isFailed(): this is GetAccountResult & { state: GetAccountFailedState } {
-        return this.state instanceof GetAccountFailedState;
+        return this.state.stateType === GET_ACCOUNT_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/get_account/auth_flow/result/SignOutResult.ts

@@ -9,6 +9,10 @@ import {
     SignOutCompletedState,
     SignOutFailedState,
 } from "../state/SignOutState.js";
+import {
+    SIGN_OUT_COMPLETED_STATE_TYPE,
+    SIGN_OUT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-out operation.
@@ -42,14 +46,14 @@ export class SignOutResult extends AuthFlowResultBase<
      * Checks if the sign-out operation is completed.
      */
     isCompleted(): this is SignOutResult & { state: SignOutCompletedState } {
-        return this.state instanceof SignOutCompletedState;
+        return this.state.stateType === SIGN_OUT_COMPLETED_STATE_TYPE;
     }
 
     /**
      * Checks if the sign-out operation failed.
      */
     isFailed(): this is SignOutResult & { state: SignOutFailedState } {
-        return this.state instanceof SignOutFailedState;
+        return this.state.stateType === SIGN_OUT_FAILED_STATE_TYPE;
     }
 }