@azure/msal-browser 4.24.1 → 4.25.1

package/src/custom_auth/sign_in/auth_flow/result/SignInSubmitPasswordResult.ts

@@ -9,6 +9,13 @@ import { SignInFailedState } from "../state/SignInFailedState.js";
 import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.js";
 import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { MfaAwaitingState } from "../../../core/auth_flow/mfa/state/MfaState.js";
+import {
+    SIGN_IN_FAILED_STATE_TYPE,
+    SIGN_IN_COMPLETED_STATE_TYPE,
+    AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE,
+    MFA_AWAITING_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-in submit password operation.
@@ -33,7 +40,7 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
     isFailed(): this is SignInSubmitPasswordResult & {
         state: SignInFailedState;
     } {
-        return this.state instanceof SignInFailedState;
+        return this.state.stateType === SIGN_IN_FAILED_STATE_TYPE;
     }
 
     /**
@@ -42,7 +49,7 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
     isCompleted(): this is SignInSubmitPasswordResult & {
         state: SignInCompletedState;
     } {
-        return this.state instanceof SignInCompletedState;
+        return this.state.stateType === SIGN_IN_COMPLETED_STATE_TYPE;
     }
 
     /**
@@ -52,7 +59,20 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
     isAuthMethodRegistrationRequired(): this is SignInSubmitPasswordResult & {
         state: AuthMethodRegistrationRequiredState;
     } {
-        return this.state instanceof AuthMethodRegistrationRequiredState;
+        return (
+            this.state.stateType ===
+            AUTH_METHOD_REGISTRATION_REQUIRED_STATE_TYPE
+        );
+    }
+
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired(): this is SignInSubmitPasswordResult & {
+        state: MfaAwaitingState;
+    } {
+        return this.state.stateType === MFA_AWAITING_STATE_TYPE;
     }
 }
 
@@ -62,8 +82,10 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
  * - SignInCompletedState: The sign-in process has completed successfully.
  * - SignInFailedState: The sign-in process has failed.
  * - AuthMethodRegistrationRequiredState: The sign-in process requires authentication method registration.
+ * - MfaAwaitingState: The sign-in process requires MFA.
  */
 export type SignInSubmitPasswordResultState =
     | SignInCompletedState
     | SignInFailedState
-    | AuthMethodRegistrationRequiredState;
+    | AuthMethodRegistrationRequiredState
+    | MfaAwaitingState;

package/src/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.ts

@@ -3,7 +3,6 @@
  * Licensed under the MIT License.
  */
 
-import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
 import {
     SignInResendCodeParams,
     SignInSubmitCodeParams,
@@ -12,13 +11,17 @@ import { SignInResendCodeResult } from "../result/SignInResendCodeResult.js";
 import { SignInSubmitCodeResult } from "../result/SignInSubmitCodeResult.js";
 import { SignInCodeRequiredStateParameters } from "./SignInStateParameters.js";
 import { SignInState } from "./SignInState.js";
-import { SignInCompletedState } from "./SignInCompletedState.js";
-import { SIGN_IN_COMPLETED_RESULT_TYPE } from "../../interaction_client/result/SignInActionResult.js";
+import { SIGN_IN_CODE_REQUIRED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Sign-in code required state.
  */
 export class SignInCodeRequiredState extends SignInState<SignInCodeRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_IN_CODE_REQUIRED_STATE_TYPE;
+
     /**
      * Once user configures email one-time passcode as a authentication method in Microsoft Entra, a one-time passcode will be sent to the user’s email.
      * Submit this one-time passcode to continue sign-in flow.
@@ -56,27 +59,19 @@ export class SignInCodeRequiredState extends SignInState<SignInCodeRequiredState
                 this.stateParameters.correlationId
             );
 
-            if (submitCodeResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                const accountInfo = new CustomAuthAccountData(
-                    submitCodeResult.authenticationResult.account,
-                    this.stateParameters.config,
-                    this.stateParameters.cacheClient,
-                    this.stateParameters.logger,
-                    this.stateParameters.correlationId
-                );
+            const nextState = this.handleSignInResult(
+                submitCodeResult,
+                this.stateParameters.scopes
+            );
 
-                return new SignInSubmitCodeResult(
-                    new SignInCompletedState(),
-                    accountInfo
-                );
-            } else {
-                // Unexpected result type
-                const result = submitCodeResult as { type: string };
-                const error = new Error(
-                    `Unexpected result type: ${result.type}`
-                );
-                return SignInSubmitCodeResult.createWithError(error);
+            if (nextState.error) {
+                return SignInSubmitCodeResult.createWithError(nextState.error);
             }
+
+            return new SignInSubmitCodeResult(
+                nextState.state,
+                nextState.accountInfo
+            );
         } catch (error) {
             this.stateParameters.logger.errorPii(
                 `Failed to submit code for sign-in. Error: ${error}.`,
@@ -125,6 +120,7 @@ export class SignInCodeRequiredState extends SignInState<SignInCodeRequiredState
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     codeLength: result.codeLength,
                     scopes: this.stateParameters.scopes,

package/src/custom_auth/sign_in/auth_flow/state/SignInCompletedState.ts

@@ -4,9 +4,15 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import { SIGN_IN_COMPLETED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * Represents the completed state of the sign-in operation.
  * This state indicates that the sign-in process has finished successfully.
  */
-export class SignInCompletedState extends AuthFlowStateBase {}
+export class SignInCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_IN_COMPLETED_STATE_TYPE;
+}

package/src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts

@@ -3,24 +3,23 @@
  * Licensed under the MIT License.
  */
 
-import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { SignInContinuationTokenParams } from "../../interaction_client/parameter/SignInParams.js";
 import { SignInResult } from "../result/SignInResult.js";
 import { SignInWithContinuationTokenInputs } from "../../../CustomAuthActionInputs.js";
 import { SignInContinuationStateParameters } from "./SignInStateParameters.js";
 import { SignInState } from "./SignInState.js";
-import { SignInCompletedState } from "./SignInCompletedState.js";
-import {
-    SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
-    SIGN_IN_COMPLETED_RESULT_TYPE,
-} from "../../interaction_client/result/SignInActionResult.js";
-import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
 import * as ArgumentValidator from "../../../core/utils/ArgumentValidator.js";
+import { SIGN_IN_CONTINUATION_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Sign-in continuation state.
  */
 export class SignInContinuationState extends SignInState<SignInContinuationStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_IN_CONTINUATION_STATE_TYPE;
+
     /**
      * Initiates the sign-in flow with continuation token.
      * @param {SignInWithContinuationTokenInputs} signInWithContinuationTokenInputs - The result of the operation.
@@ -65,51 +64,16 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
                 this.stateParameters.correlationId
             );
 
-            if (signInResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                // Sign-in completed successfully
-                const accountInfo = new CustomAuthAccountData(
-                    signInResult.authenticationResult.account,
-                    this.stateParameters.config,
-                    this.stateParameters.cacheClient,
-                    this.stateParameters.logger,
-                    this.stateParameters.correlationId
-                );
-
-                return new SignInResult(
-                    new SignInCompletedState(),
-                    accountInfo
-                );
-            } else if (signInResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
-                // JIT is required
-                this.stateParameters.logger.warning(
-                    "Auth method registration required during continuation token sign-in.",
-                    this.stateParameters.correlationId
-                );
-
-                // Return AuthMethodRegistrationRequiredState to handle JIT scenario
-                const authMethodRegistrationState =
-                    new AuthMethodRegistrationRequiredState({
-                        correlationId: this.stateParameters.correlationId,
-                        continuationToken: signInResult.continuationToken,
-                        logger: this.stateParameters.logger,
-                        config: this.stateParameters.config,
-                        jitClient: this.stateParameters.jitClient,
-                        cacheClient: this.stateParameters.cacheClient,
-                        authMethods: signInResult.authMethods,
-                        username: this.stateParameters.username,
-                        scopes: signInWithContinuationTokenInputs?.scopes ?? [],
-                        claims: this.stateParameters.claims,
-                    });
+            const nextState = this.handleSignInResult(
+                signInResult,
+                signInWithContinuationTokenInputs?.scopes
+            );
 
-                return new SignInResult(authMethodRegistrationState);
-            } else {
-                // Unexpected result type
-                const result = signInResult as { type: string };
-                const error = new Error(
-                    `Unexpected result type: ${result.type}`
-                );
-                return SignInResult.createWithError(error);
+            if (nextState.error) {
+                return SignInResult.createWithError(nextState.error);
             }
+
+            return new SignInResult(nextState.state, nextState.accountInfo);
         } catch (error) {
             this.stateParameters.logger.errorPii(
                 `Failed to sign in with continuation token. Error: ${error}.`,

package/src/custom_auth/sign_in/auth_flow/state/SignInFailedState.ts

@@ -4,8 +4,14 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import { SIGN_IN_FAILED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * Represents the state of a sign-in operation that has been failed.
  */
-export class SignInFailedState extends AuthFlowStateBase {}
+export class SignInFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_IN_FAILED_STATE_TYPE;
+}

package/src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts

@@ -3,22 +3,21 @@
  * Licensed under the MIT License.
  */
 
-import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
 import { SignInSubmitPasswordParams } from "../../interaction_client/parameter/SignInParams.js";
 import { SignInSubmitPasswordResult } from "../result/SignInSubmitPasswordResult.js";
-import { SignInCompletedState } from "./SignInCompletedState.js";
 import { SignInState } from "./SignInState.js";
 import { SignInPasswordRequiredStateParameters } from "./SignInStateParameters.js";
-import {
-    SIGN_IN_COMPLETED_RESULT_TYPE,
-    SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
-} from "../../interaction_client/result/SignInActionResult.js";
-import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { SIGN_IN_PASSWORD_REQUIRED_STATE_TYPE } from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Sign-in password required state.
  */
 export class SignInPasswordRequiredState extends SignInState<SignInPasswordRequiredStateParameters> {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_IN_PASSWORD_REQUIRED_STATE_TYPE;
+
     /**
      * Once user configures email with password as a authentication method in Microsoft Entra, user submits a password to continue sign-in flow.
      * @param {string} password - The password to submit.
@@ -57,51 +56,21 @@ export class SignInPasswordRequiredState extends SignInState<SignInPasswordRequi
                 this.stateParameters.correlationId
             );
 
-            if (submitPasswordResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                const accountInfo = new CustomAuthAccountData(
-                    submitPasswordResult.authenticationResult.account,
-                    this.stateParameters.config,
-                    this.stateParameters.cacheClient,
-                    this.stateParameters.logger,
-                    this.stateParameters.correlationId
-                );
-
-                return new SignInSubmitPasswordResult(
-                    new SignInCompletedState(),
-                    accountInfo
-                );
-            } else if (
-                submitPasswordResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE
-            ) {
-                // JIT is required - return AuthMethodRegistrationRequiredState
-                this.stateParameters.logger.verbose(
-                    "Authentication method registration required after password submission.",
-                    this.stateParameters.correlationId
-                );
+            const nextState = this.handleSignInResult(
+                submitPasswordResult,
+                this.stateParameters.scopes
+            );
 
-                return new SignInSubmitPasswordResult(
-                    new AuthMethodRegistrationRequiredState({
-                        correlationId: this.stateParameters.correlationId,
-                        continuationToken:
-                            submitPasswordResult.continuationToken,
-                        logger: this.stateParameters.logger,
-                        config: this.stateParameters.config,
-                        jitClient: this.stateParameters.jitClient,
-                        cacheClient: this.stateParameters.cacheClient,
-                        authMethods: submitPasswordResult.authMethods,
-                        username: this.stateParameters.username,
-                        scopes: this.stateParameters.scopes ?? [],
-                        claims: this.stateParameters.claims,
-                    })
-                );
-            } else {
-                // Unexpected result type
-                const result = submitPasswordResult as { type: string };
-                const error = new Error(
-                    `Unexpected result type: ${result.type}`
+            if (nextState.error) {
+                return SignInSubmitPasswordResult.createWithError(
+                    nextState.error
                 );
-                return SignInSubmitPasswordResult.createWithError(error);
             }
+
+            return new SignInSubmitPasswordResult(
+                nextState.state,
+                nextState.accountInfo
+            );
         } catch (error) {
             this.stateParameters.logger.errorPii(
                 `Failed to sign in after submitting password. Error: ${error}.`,

package/src/custom_auth/sign_in/auth_flow/state/SignInState.ts

@@ -4,7 +4,20 @@
  */
 
 import { AuthFlowActionRequiredStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import { AuthMethodRegistrationRequiredState } from "../../../core/auth_flow/jit/state/AuthMethodRegistrationState.js";
+import { MfaAwaitingState } from "../../../core/auth_flow/mfa/state/MfaState.js";
 import { ensureArgumentIsNotEmptyString } from "../../../core/utils/ArgumentValidator.js";
+import { CustomAuthAccountData } from "../../../get_account/auth_flow/CustomAuthAccountData.js";
+import {
+    SIGN_IN_COMPLETED_RESULT_TYPE,
+    SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
+    SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
+    SignInCompletedResult,
+    SignInJitRequiredResult,
+    SignInMfaRequiredResult,
+} from "../../interaction_client/result/SignInActionResult.js";
+import { SignInCompletedState } from "./SignInCompletedState.js";
+import { SignInFailedState } from "./SignInFailedState.js";
 import { SignInStateParameters } from "./SignInStateParameters.js";
 
 /*
@@ -31,4 +44,99 @@ export abstract class SignInState<
             stateParameters.correlationId
         );
     }
+
+    /**
+     * Handles the result of a sign-in attempt.
+     * @param result - The result of the sign-in attempt.
+     * @param scopes - The scopes requested for the sign-in.
+     * @returns An object containing the next state and account information, if applicable.
+     */
+    protected handleSignInResult(
+        result:
+            | SignInCompletedResult
+            | SignInJitRequiredResult
+            | SignInMfaRequiredResult,
+        scopes?: string[]
+    ): {
+        state:
+            | SignInCompletedState
+            | AuthMethodRegistrationRequiredState
+            | MfaAwaitingState;
+        accountInfo?: CustomAuthAccountData;
+        error?: Error;
+    } {
+        const correlationId =
+            result.correlationId || this.stateParameters.correlationId;
+
+        if (result.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+            // Sign-in completed - return SignInCompletedState
+            this.stateParameters.logger.verbose(
+                "Sign-in completed successfully.",
+                correlationId
+            );
+
+            const accountInfo = new CustomAuthAccountData(
+                result.authenticationResult.account,
+                this.stateParameters.config,
+                this.stateParameters.cacheClient,
+                this.stateParameters.logger,
+                correlationId
+            );
+
+            return {
+                state: new SignInCompletedState(),
+                accountInfo: accountInfo,
+            };
+        } else if (result.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
+            // JIT is required - return AuthMethodRegistrationRequiredState
+            this.stateParameters.logger.verbose(
+                "Authentication method registration is required during sign-in.",
+                correlationId
+            );
+
+            return {
+                state: new AuthMethodRegistrationRequiredState({
+                    correlationId: correlationId,
+                    continuationToken: result.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    authMethods: result.authMethods,
+                    username: this.stateParameters.username,
+                    scopes: scopes ?? [],
+                    claims: this.stateParameters.claims,
+                }),
+            };
+        } else if (result.type === SIGN_IN_MFA_REQUIRED_RESULT_TYPE) {
+            // MFA is required - return MfaAwaitingState
+            this.stateParameters.logger.verbose(
+                "MFA is required during the sign-in.",
+                correlationId
+            );
+
+            return {
+                state: new MfaAwaitingState({
+                    correlationId: correlationId,
+                    continuationToken: result.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    mfaClient: this.stateParameters.mfaClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    scopes: scopes ?? [],
+                    authMethods: result.authMethods ?? [],
+                }),
+            };
+        } else {
+            // Unexpected result type
+            const unexpectedResult = result as { type: string };
+            const error = new Error(
+                `Unexpected result type: ${unexpectedResult.type}`
+            );
+            return {
+                state: new SignInFailedState(),
+                error: error,
+            };
+        }
+    }
 }

package/src/custom_auth/sign_in/auth_flow/state/SignInStateParameters.ts

@@ -8,6 +8,7 @@ import { CustomAuthSilentCacheClient } from "../../../get_account/interaction_cl
 import { SignInClient } from "../../interaction_client/SignInClient.js";
 import { SignInScenarioType } from "../SignInScenario.js";
 import { JitClient } from "../../../core/interaction_client/jit/JitClient.js";
+import { MfaClient } from "../../../core/interaction_client/mfa/MfaClient.js";
 
 export interface SignInStateParameters
     extends AuthFlowActionRequiredStateParameters {
@@ -16,6 +17,7 @@ export interface SignInStateParameters
     cacheClient: CustomAuthSilentCacheClient;
     claims?: string;
     jitClient: JitClient;
+    mfaClient: MfaClient;
 }
 
 export interface SignInPasswordRequiredStateParameters

package/src/custom_auth/sign_up/auth_flow/result/SignUpResendCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { SignUpResendCodeError } from "../error_type/SignUpError.js";
 import type { SignUpCodeRequiredState } from "../state/SignUpCodeRequiredState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of resending code in a sign-up operation.
@@ -42,7 +46,7 @@ export class SignUpResendCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpResendCodeResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -51,11 +55,7 @@ export class SignUpResendCodeResult extends AuthFlowResultBase<
     isCodeRequired(): this is SignUpResendCodeResult & {
         state: SignUpCodeRequiredState;
     } {
-        /*
-         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
-         * So we are using the constructor name to check the state type.
-         */
-        return this.state.constructor?.name === "SignUpCodeRequiredState";
+        return this.state.stateType === SIGN_UP_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpResult.ts

@@ -9,6 +9,12 @@ import { SignUpAttributesRequiredState } from "../state/SignUpAttributesRequired
 import { SignUpCodeRequiredState } from "../state/SignUpCodeRequiredState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
 import { SignUpPasswordRequiredState } from "../state/SignUpPasswordRequiredState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_CODE_REQUIRED_STATE_TYPE,
+    SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE,
+    SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation.
@@ -42,7 +48,7 @@ export class SignUpResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -51,7 +57,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isCodeRequired(): this is SignUpResult & {
         state: SignUpCodeRequiredState;
     } {
-        return this.state instanceof SignUpCodeRequiredState;
+        return this.state.stateType === SIGN_UP_CODE_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -60,7 +66,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isPasswordRequired(): this is SignUpResult & {
         state: SignUpPasswordRequiredState;
     } {
-        return this.state instanceof SignUpPasswordRequiredState;
+        return this.state.stateType === SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -69,7 +75,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isAttributesRequired(): this is SignUpResult & {
         state: SignUpAttributesRequiredState;
     } {
-        return this.state instanceof SignUpAttributesRequiredState;
+        return this.state.stateType === SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpSubmitAttributesResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { SignUpSubmitAttributesError } from "../error_type/SignUpError.js";
 import { SignUpCompletedState } from "../state/SignUpCompletedState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation that requires attributes.
@@ -46,7 +50,7 @@ export class SignUpSubmitAttributesResult extends AuthFlowResultBase<
     isFailed(): this is SignUpSubmitAttributesResult & {
         state: SignUpFailedState;
     } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,7 @@ export class SignUpSubmitAttributesResult extends AuthFlowResultBase<
     isCompleted(): this is SignUpSubmitAttributesResult & {
         state: SignUpCompletedState;
     } {
-        return this.state instanceof SignUpCompletedState;
+        return this.state.stateType === SIGN_UP_COMPLETED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpSubmitCodeResult.ts

@@ -9,6 +9,12 @@ import { SignUpAttributesRequiredState } from "../state/SignUpAttributesRequired
 import { SignUpPasswordRequiredState } from "../state/SignUpPasswordRequiredState.js";
 import { SignUpCompletedState } from "../state/SignUpCompletedState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE,
+    SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE,
+    SIGN_UP_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation that requires a code.
@@ -44,7 +50,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpSubmitCodeResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -53,7 +59,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isPasswordRequired(): this is SignUpSubmitCodeResult & {
         state: SignUpPasswordRequiredState;
     } {
-        return this.state instanceof SignUpPasswordRequiredState;
+        return this.state.stateType === SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -62,7 +68,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isAttributesRequired(): this is SignUpSubmitCodeResult & {
         state: SignUpAttributesRequiredState;
     } {
-        return this.state instanceof SignUpAttributesRequiredState;
+        return this.state.stateType === SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -71,7 +77,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isCompleted(): this is SignUpSubmitCodeResult & {
         state: SignUpCompletedState;
     } {
-        return this.state instanceof SignUpCompletedState;
+        return this.state.stateType === SIGN_UP_COMPLETED_STATE_TYPE;
     }
 }