@azure/msal-browser 4.24.1 → 4.25.1

package/src/custom_auth/get_account/auth_flow/state/GetAccessTokenState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE,
+    GET_ACCESS_TOKEN_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the get access token flow.
  */
-export class GetAccessTokenCompletedState extends AuthFlowStateBase {}
+export class GetAccessTokenCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the get access token flow.
  */
-export class GetAccessTokenFailedState extends AuthFlowStateBase {}
+export class GetAccessTokenFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCESS_TOKEN_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/auth_flow/state/GetAccountState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    GET_ACCOUNT_COMPLETED_STATE_TYPE,
+    GET_ACCOUNT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the get account flow.
  */
-export class GetAccountCompletedState extends AuthFlowStateBase {}
+export class GetAccountCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCOUNT_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the get account flow.
  */
-export class GetAccountFailedState extends AuthFlowStateBase {}
+export class GetAccountFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCOUNT_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/auth_flow/state/SignOutState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    SIGN_OUT_COMPLETED_STATE_TYPE,
+    SIGN_OUT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the sign-out flow.
  */
-export class SignOutCompletedState extends AuthFlowStateBase {}
+export class SignOutCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_OUT_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the sign-out flow.
  */
-export class SignOutFailedState extends AuthFlowStateBase {}
+export class SignOutFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_OUT_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/interaction_client/CustomAuthSilentCacheClient.ts

@@ -37,12 +37,14 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
     override async acquireToken(
         silentRequest: CommonSilentFlowRequest
     ): Promise<AuthenticationResult> {
+        const correlationId = silentRequest.correlationId || this.correlationId;
         const telemetryManager = this.initializeServerTelemetryManager(
             PublicApiId.ACCOUNT_GET_ACCESS_TOKEN
         );
         const clientConfig = this.getCustomAuthClientConfiguration(
             telemetryManager,
-            this.customAuthAuthority
+            this.customAuthAuthority,
+            correlationId
         );
         const silentFlowClient = new SilentFlowClient(
             clientConfig,
@@ -52,7 +54,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
         try {
             this.logger.verbose(
                 "Starting silent flow to acquire token from cache",
-                this.correlationId
+                correlationId
             );
 
             const result = await silentFlowClient.acquireCachedToken(
@@ -61,7 +63,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
             this.logger.verbose(
                 "Silent flow to acquire token from cache is completed and token is found",
-                this.correlationId
+                correlationId
             );
 
             return result[0] as AuthenticationResult;
@@ -72,7 +74,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
             ) {
                 this.logger.verbose(
                     "Token refresh is required to acquire token silently",
-                    this.correlationId
+                    correlationId
                 );
 
                 const refreshTokenClient = new RefreshTokenClient(
@@ -82,7 +84,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
                 this.logger.verbose(
                     "Starting refresh flow to refresh token",
-                    this.correlationId
+                    correlationId
                 );
 
                 const refreshTokenResult =
@@ -92,7 +94,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
                 this.logger.verbose(
                     "Refresh flow to refresh token is completed",
-                    this.correlationId
+                    correlationId
                 );
 
                 return refreshTokenResult as AuthenticationResult;
@@ -103,18 +105,17 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
     }
 
     override async logout(logoutRequest?: ClearCacheRequest): Promise<void> {
+        const correlationId =
+            logoutRequest?.correlationId || this.correlationId;
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
 
         // Clear the cache
-        this.logger.verbose(
-            "Start to clear the cache",
-            logoutRequest?.correlationId
-        );
+        this.logger.verbose("Start to clear the cache", correlationId);
         await this.clearCacheOnLogout(
-            validLogoutRequest.correlationId,
+            correlationId,
             validLogoutRequest?.account
         );
-        this.logger.verbose("Cache cleared", logoutRequest?.correlationId);
+        this.logger.verbose("Cache cleared", correlationId);
 
         const postLogoutRedirectUri = this.config.auth.postLogoutRedirectUri;
 
@@ -126,7 +127,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
             this.logger.verbose(
                 "Post logout redirect uri is set, redirecting to uri",
-                logoutRequest?.correlationId
+                correlationId
             );
 
             // Redirect to post logout redirect uri
@@ -173,7 +174,8 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
     private getCustomAuthClientConfiguration(
         serverTelemetryManager: ServerTelemetryManager,
-        customAuthAuthority: CustomAuthAuthority
+        customAuthAuthority: CustomAuthAuthority,
+        correlationId: string
     ): ClientConfiguration {
         const logger = this.config.system.loggerOptions;
 
@@ -193,7 +195,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
                 loggerCallback: logger.loggerCallback,
                 piiLoggingEnabled: logger.piiLoggingEnabled,
                 logLevel: logger.logLevel,
-                correlationId: this.correlationId,
+                correlationId: correlationId,
             },
             cacheOptions: {
                 claimsBasedCachingEnabled:

package/src/custom_auth/index.ts

@@ -212,5 +212,27 @@ export {
 // Auth Method Registration Types
 export { AuthMethodDetails } from "./core/auth_flow/jit/AuthMethodDetails.js";
 
+// MFA State
+export { MfaAwaitingState } from "./core/auth_flow/mfa/state/MfaState.js";
+export { MfaVerificationRequiredState } from "./core/auth_flow/mfa/state/MfaState.js";
+export { MfaCompletedState } from "./core/auth_flow/mfa/state/MfaCompletedState.js";
+export { MfaFailedState } from "./core/auth_flow/mfa/state/MfaFailedState.js";
+
+// MFA Results
+export {
+    MfaRequestChallengeResult,
+    MfaRequestChallengeResultState,
+} from "./core/auth_flow/mfa/result/MfaRequestChallengeResult.js";
+export {
+    MfaSubmitChallengeResult,
+    MfaSubmitChallengeResultState,
+} from "./core/auth_flow/mfa/result/MfaSubmitChallengeResult.js";
+
+// MFA Errors
+export {
+    MfaRequestChallengeError,
+    MfaSubmitChallengeError,
+} from "./core/auth_flow/mfa/error_type/MfaError.js";
+
 // Components from msal_browser
 export { LogLevel } from "@azure/msal-common/browser";

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordResendCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordResendCodeError } from "../error_type/ResetPasswordError.js";
 import type { ResetPasswordCodeRequiredState } from "../state/ResetPasswordCodeRequiredState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of resending code in a reset password operation.
@@ -46,7 +50,7 @@ export class ResetPasswordResendCodeResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordResendCodeResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,13 +59,7 @@ export class ResetPasswordResendCodeResult extends AuthFlowResultBase<
     isCodeRequired(): this is ResetPasswordResendCodeResult & {
         state: ResetPasswordCodeRequiredState;
     } {
-        /*
-         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
-         * So we are using the constructor name to check the state type.
-         */
-        return (
-            this.state.constructor?.name === "ResetPasswordCodeRequiredState"
-        );
+        return this.state.stateType === RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordStartResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordCodeRequiredState } from "../state/ResetPasswordCodeRequiredState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation.
@@ -46,7 +50,7 @@ export class ResetPasswordStartResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordStartResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,7 @@ export class ResetPasswordStartResult extends AuthFlowResultBase<
     isCodeRequired(): this is ResetPasswordStartResult & {
         state: ResetPasswordCodeRequiredState;
     } {
-        return this.state instanceof ResetPasswordCodeRequiredState;
+        return this.state.stateType === RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordSubmitCodeError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
 import { ResetPasswordPasswordRequiredState } from "../state/ResetPasswordPasswordRequiredState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation that requires a code.
@@ -46,7 +50,7 @@ export class ResetPasswordSubmitCodeResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordSubmitCodeResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,9 @@ export class ResetPasswordSubmitCodeResult extends AuthFlowResultBase<
     isPasswordRequired(): this is ResetPasswordSubmitCodeResult & {
         state: ResetPasswordPasswordRequiredState;
     } {
-        return this.state instanceof ResetPasswordPasswordRequiredState;
+        return (
+            this.state.stateType === RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE
+        );
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitPasswordResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordSubmitPasswordError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordCompletedState } from "../state/ResetPasswordCompletedState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation that requires a password.
@@ -41,7 +45,7 @@ export class ResetPasswordSubmitPasswordResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordSubmitPasswordResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -50,7 +54,7 @@ export class ResetPasswordSubmitPasswordResult extends AuthFlowResultBase<
     isCompleted(): this is ResetPasswordSubmitPasswordResult & {
         state: ResetPasswordCompletedState;
     } {
-        return this.state instanceof ResetPasswordCompletedState;
+        return this.state.stateType === RESET_PASSWORD_COMPLETED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordCodeRequiredState.ts

@@ -8,11 +8,17 @@ import { ResetPasswordSubmitCodeResult } from "../result/ResetPasswordSubmitCode
 import { ResetPasswordCodeRequiredStateParameters } from "./ResetPasswordStateParameters.js";
 import { ResetPasswordState } from "./ResetPasswordState.js";
 import { ResetPasswordPasswordRequiredState } from "./ResetPasswordPasswordRequiredState.js";
+import { RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Reset password code required state.
  */
 export class ResetPasswordCodeRequiredState extends ResetPasswordState<ResetPasswordCodeRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE;
+
     /**
      * Submits a one-time passcode that the customer user received in their email in order to continue password reset flow.
      * @param {string} code - The code to submit.
@@ -56,6 +62,7 @@ export class ResetPasswordCodeRequiredState extends ResetPasswordState<ResetPass
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                 })
             );
@@ -108,6 +115,7 @@ export class ResetPasswordCodeRequiredState extends ResetPasswordState<ResetPass
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     codeLength: result.codeLength,
                 })

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordCompletedState.ts

@@ -4,8 +4,14 @@
  */
 
 import { SignInContinuationState } from "../../../sign_in/auth_flow/state/SignInContinuationState.js";
+import { RESET_PASSWORD_COMPLETED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * Represents the state that indicates the successful completion of a password reset operation.
  */
-export class ResetPasswordCompletedState extends SignInContinuationState {}
+export class ResetPasswordCompletedState extends SignInContinuationState {
+    /**
+     * The type of the state.
+     */
+    stateType = RESET_PASSWORD_COMPLETED_STATE_TYPE;
+}

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordFailedState.ts

@@ -4,8 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import { RESET_PASSWORD_FAILED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * State of a reset password operation that has failed.
  */
-export class ResetPasswordFailedState extends AuthFlowStateBase {}
+export class ResetPasswordFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = RESET_PASSWORD_FAILED_STATE_TYPE;
+}

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordPasswordRequiredState.ts

@@ -8,11 +8,17 @@ import { ResetPasswordState } from "./ResetPasswordState.js";
 import { ResetPasswordPasswordRequiredStateParameters } from "./ResetPasswordStateParameters.js";
 import { ResetPasswordCompletedState } from "./ResetPasswordCompletedState.js";
 import { SignInScenario } from "../../../sign_in/auth_flow/SignInScenario.js";
+import { RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Reset password password required state.
  */
 export class ResetPasswordPasswordRequiredState extends ResetPasswordState<ResetPasswordPasswordRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE;
+
     /**
      * Submits a new password for reset password flow.
      * @param {string} password - The password to submit.
@@ -59,6 +65,7 @@ export class ResetPasswordPasswordRequiredState extends ResetPasswordState<Reset
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     signInScenario: SignInScenario.SignInAfterPasswordReset,
                 })
             );

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordStateParameters.ts

@@ -8,6 +8,7 @@ import { SignInClient } from "../../../sign_in/interaction_client/SignInClient.j
 import { CustomAuthSilentCacheClient } from "../../../get_account/interaction_client/CustomAuthSilentCacheClient.js";
 import { AuthFlowActionRequiredStateParameters } from "../../../core/auth_flow/AuthFlowState.js";
 import { JitClient } from "../../../core/interaction_client/jit/JitClient.js";
+import { MfaClient } from "../../../core/interaction_client/mfa/MfaClient.js";
 
 export interface ResetPasswordStateParameters
     extends AuthFlowActionRequiredStateParameters {
@@ -16,6 +17,7 @@ export interface ResetPasswordStateParameters
     signInClient: SignInClient;
     cacheClient: CustomAuthSilentCacheClient;
     jitClient: JitClient;
+    mfaClient: MfaClient;
 }
 
 export type ResetPasswordPasswordRequiredStateParameters =

package/src/custom_auth/sign_in/auth_flow/result/SignInResendCodeResult.ts

@@ -4,6 +4,10 @@
  */
 
 import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.js";
+import {
+    SIGN_IN_CODE_REQUIRED_STATE_TYPE,
+    SIGN_IN_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 import { SignInResendCodeError } from "../error_type/SignInError.js";
 import type { SignInCodeRequiredState } from "../state/SignInCodeRequiredState.js";
 import { SignInFailedState } from "../state/SignInFailedState.js";
@@ -39,7 +43,7 @@ export class SignInResendCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignInResendCodeResult & { state: SignInFailedState } {
-        return this.state instanceof SignInFailedState;
+        return this.state.stateType === SIGN_IN_FAILED_STATE_TYPE;
     }
 
     /**
@@ -52,7 +56,7 @@ export class SignInResendCodeResult extends AuthFlowResultBase<
          * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
          * So we are using the constructor name to check the state type.
          */
-        return this.state.constructor?.name === "SignInCodeRequiredState";
+        return this.state.stateType === SIGN_IN_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_in/auth_flow/result/SignInResult.ts

@@ -11,6 +11,15 @@ import { SignInPasswordRequiredState } from "../state/SignInPasswordRequiredStat
 import { SignInFailedState } from "../state/SignInFailedState.js";
 import { SignInCompletedState } from "../state/SignInCompletedState.js";
 import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { MfaAwaitingState } from "../../../core/auth_flow/mfa/state/MfaState.js";
+import {
+    SIGN_IN_CODE_REQUIRED_STATE_TYPE,
+    SIGN_IN_PASSWORD_REQUIRED_STATE_TYPE,
+    SIGN_IN_FAILED_STATE_TYPE,
+    SIGN_IN_COMPLETED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE,
+    MFA_AWAITING_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-in operation.
@@ -44,7 +53,7 @@ export class SignInResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignInResult & { state: SignInFailedState } {
-        return this.state instanceof SignInFailedState;
+        return this.state.stateType === SIGN_IN_FAILED_STATE_TYPE;
     }
 
     /**
@@ -53,7 +62,7 @@ export class SignInResult extends AuthFlowResultBase<
     isCodeRequired(): this is SignInResult & {
         state: SignInCodeRequiredState;
     } {
-        return this.state instanceof SignInCodeRequiredState;
+        return this.state.stateType === SIGN_IN_CODE_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -62,14 +71,14 @@ export class SignInResult extends AuthFlowResultBase<
     isPasswordRequired(): this is SignInResult & {
         state: SignInPasswordRequiredState;
     } {
-        return this.state instanceof SignInPasswordRequiredState;
+        return this.state.stateType === SIGN_IN_PASSWORD_REQUIRED_STATE_TYPE;
     }
 
     /**
      * Checks if the result is in a completed state.
      */
     isCompleted(): this is SignInResult & { state: SignInCompletedState } {
-        return this.state instanceof SignInCompletedState;
+        return this.state.stateType === SIGN_IN_COMPLETED_STATE_TYPE;
     }
 
     /**
@@ -79,7 +88,18 @@ export class SignInResult extends AuthFlowResultBase<
     isAuthMethodRegistrationRequired(): this is SignInResult & {
         state: AuthMethodRegistrationRequiredState;
     } {
-        return this.state instanceof AuthMethodRegistrationRequiredState;
+        return (
+            this.state.stateType ===
+            AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE
+        );
+    }
+
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired(): this is SignInResult & { state: MfaAwaitingState } {
+        return this.state.stateType === MFA_AWAITING_STATE_TYPE;
     }
 }
 
@@ -91,10 +111,12 @@ export class SignInResult extends AuthFlowResultBase<
  * - SignInFailedState: The sign-in process has failed.
  * - SignInCompletedState: The sign-in process is completed.
  * - AuthMethodRegistrationRequiredState: The sign-in process requires authentication method registration.
+ * - MfaAwaitingState: The sign-in process requires MFA.
  */
 export type SignInResultState =
     | SignInCodeRequiredState
     | SignInPasswordRequiredState
     | SignInFailedState
     | SignInCompletedState
-    | AuthMethodRegistrationRequiredState;
+    | AuthMethodRegistrationRequiredState
+    | MfaAwaitingState;

package/src/custom_auth/sign_in/auth_flow/result/SignInSubmitCodeResult.ts

@@ -8,6 +8,14 @@ import { SignInCompletedState } from "../state/SignInCompletedState.js";
 import { SignInFailedState } from "../state/SignInFailedState.js";
 import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.js";
 import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
+import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { MfaAwaitingState } from "../../../core/auth_flow/mfa/state/MfaState.js";
+import {
+    SIGN_IN_FAILED_STATE_TYPE,
+    SIGN_IN_COMPLETED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE,
+    MFA_AWAITING_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-in submit code operation.
@@ -35,7 +43,7 @@ export class SignInSubmitCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignInSubmitCodeResult & { state: SignInFailedState } {
-        return this.state instanceof SignInFailedState;
+        return this.state.stateType === SIGN_IN_FAILED_STATE_TYPE;
     }
 
     /**
@@ -44,7 +52,30 @@ export class SignInSubmitCodeResult extends AuthFlowResultBase<
     isCompleted(): this is SignInSubmitCodeResult & {
         state: SignInCompletedState;
     } {
-        return this.state instanceof SignInCompletedState;
+        return this.state.stateType === SIGN_IN_COMPLETED_STATE_TYPE;
+    }
+
+    /**
+     * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isAuthMethodRegistrationRequired(): this is SignInSubmitCodeResult & {
+        state: AuthMethodRegistrationRequiredState;
+    } {
+        return (
+            this.state.stateType ===
+            AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE
+        );
+    }
+
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired(): this is SignInSubmitCodeResult & {
+        state: MfaAwaitingState;
+    } {
+        return this.state.stateType === MFA_AWAITING_STATE_TYPE;
     }
 }
 
@@ -53,7 +84,11 @@ export class SignInSubmitCodeResult extends AuthFlowResultBase<
  * This includes:
  * - SignInCompletedState: The sign-in process has completed successfully.
  * - SignInFailedState: The sign-in process has failed.
+ * - AuthMethodRegistrationRequiredState: The user needs to register an authentication method.
+ * - MfaAwaitingState: The user is in a multi-factor authentication (MFA) waiting state.
  */
 export type SignInSubmitCodeResultState =
     | SignInCompletedState
-    | SignInFailedState;
+    | SignInFailedState
+    | AuthMethodRegistrationRequiredState
+    | MfaAwaitingState;