@azure/msal-browser 5.0.0-alpha.0 → 5.0.0-beta.0

package/src/custom_auth/core/interaction_client/mfa/result/MfaActionResult.ts

@@ -0,0 +1,48 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import { AuthenticationResult } from "../../../../../response/AuthenticationResult.js";
+
+interface MfaActionResult {
+    type: string;
+    correlationId: string;
+}
+
+export interface MfaVerificationRequiredResult extends MfaActionResult {
+    type: typeof MFA_VERIFICATION_REQUIRED_RESULT_TYPE;
+    continuationToken: string;
+    challengeChannel: string;
+    challengeTargetLabel: string;
+    codeLength: number;
+    bindingMethod: string;
+}
+
+export interface MfaCompletedResult extends MfaActionResult {
+    type: typeof MFA_COMPLETED_RESULT_TYPE;
+    authenticationResult: AuthenticationResult;
+}
+
+// Result type constants
+export const MFA_VERIFICATION_REQUIRED_RESULT_TYPE =
+    "MfaVerificationRequiredResult";
+export const MFA_COMPLETED_RESULT_TYPE = "MfaCompletedResult";
+
+export function createMfaVerificationRequiredResult(
+    input: Omit<MfaVerificationRequiredResult, "type">
+): MfaVerificationRequiredResult {
+    return {
+        type: MFA_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+
+export function createMfaCompletedResult(
+    input: Omit<MfaCompletedResult, "type">
+): MfaCompletedResult {
+    return {
+        type: MFA_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}

package/src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts

@@ -47,7 +47,8 @@ export class CustomAuthApiClient implements ICustomAuthApiClient {
         this.registerApi = new RegisterApiClient(
             customAuthApiBaseUrl,
             clientId,
-            httpClient
+            httpClient,
+            customAuthApiQueryParams
         );
     }
 }

package/src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiEndpoint.ts

@@ -6,6 +6,7 @@
 export const SIGNIN_INITIATE = "/oauth2/v2.0/initiate";
 export const SIGNIN_CHALLENGE = "/oauth2/v2.0/challenge";
 export const SIGNIN_TOKEN = "/oauth2/v2.0/token";
+export const SIGNIN_INTROSPECT = "/oauth2/v2.0/introspect";
 
 export const SIGNUP_START = "/signup/v1.0/start";
 export const SIGNUP_CHALLENGE = "/signup/v1.0/challenge";

package/src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts

@@ -14,12 +14,14 @@ import {
     SignInChallengeRequest,
     SignInContinuationTokenRequest,
     SignInInitiateRequest,
+    SignInIntrospectRequest,
     SignInOobTokenRequest,
     SignInPasswordTokenRequest,
 } from "./types/ApiRequestTypes.js";
 import {
     SignInChallengeResponse,
     SignInInitiateResponse,
+    SignInIntrospectResponse,
     SignInTokenResponse,
 } from "./types/ApiResponseTypes.js";
 
@@ -128,7 +130,7 @@ export class SignInApiClient extends BaseApiClient {
                 continuation_token: params.continuation_token,
                 scope: params.scope,
                 oob: params.oob,
-                grant_type: GrantType.OOB,
+                grant_type: params.grant_type,
                 ...(params.claims && { claims: params.claims }),
             },
             params.telemetryManager,
@@ -153,6 +155,30 @@ export class SignInApiClient extends BaseApiClient {
         );
     }
 
+    /**
+     * Requests available authentication methods for MFA
+     * @param continuationToken Token from previous response
+     */
+    async requestAuthMethods(
+        params: SignInIntrospectRequest
+    ): Promise<SignInIntrospectResponse> {
+        const result = await this.request<SignInIntrospectResponse>(
+            CustomAuthApiEndpoint.SIGNIN_INTROSPECT,
+            {
+                continuation_token: params.continuation_token,
+            },
+            params.telemetryManager,
+            params.correlationId
+        );
+
+        this.ensureContinuationTokenIsValid(
+            result.continuation_token,
+            params.correlationId
+        );
+
+        return result;
+    }
+
     private async requestTokens(
         requestData: Record<string, string | boolean>,
         telemetryManager: ServerTelemetryManager,

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiErrorCodes.ts

@@ -24,3 +24,4 @@ export const PASSWORD_CHANGE_FAILED = "password_change_failed";
 export const PASSWORD_RESET_TIMEOUT = "password_reset_timeout";
 export const CLIENT_INFO_MISSING = "client_info_missing";
 export const EXPIRED_TOKEN = "expired_token";
+export const ACCESS_DENIED = "access_denied";

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.ts

@@ -3,6 +3,7 @@
  * Licensed under the MIT License.
  */
 
+import { GrantType } from "../../../../CustomAuthConstants.js";
 import { ApiRequestBase } from "./ApiTypesBase.js";
 
 /* Sign-in API request types */
@@ -29,12 +30,17 @@ export interface SignInPasswordTokenRequest extends SignInTokenRequestBase {
 
 export interface SignInOobTokenRequest extends SignInTokenRequestBase {
     oob: string;
+    grant_type: typeof GrantType.OOB | typeof GrantType.MFA_OOB;
 }
 
 export interface SignInContinuationTokenRequest extends SignInTokenRequestBase {
     username?: string;
 }
 
+export interface SignInIntrospectRequest extends ApiRequestBase {
+    continuation_token: string;
+}
+
 /* Sign-up API request types */
 export interface SignUpStartRequest extends ApiRequestBase {
     username: string;

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiResponseTypes.ts

@@ -42,7 +42,12 @@ export interface AuthenticationMethod {
     id: string;
     challenge_type: string;
     challenge_channel: string;
-    login_hint: string;
+    login_hint?: string;
+}
+
+export interface SignInIntrospectResponse extends ApiResponseBase {
+    continuation_token: string;
+    methods: AuthenticationMethod[];
 }
 
 /* Sign-up API response types */

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiSuberrors.ts

@@ -13,3 +13,5 @@ export const INVALID_OOB_VALUE = "invalid_oob_value";
 export const ATTRIBUTE_VALIATION_FAILED = "attribute_validation_failed";
 export const NATIVEAUTHAPI_DISABLED = "nativeauthapi_disabled";
 export const REGISTRATION_REQUIRED = "registration_required";
+export const MFA_REQUIRED = "mfa_required";
+export const PROVIDER_BLOCKED_BY_REPUTATION = "provider_blocked_by_rep";

package/src/custom_auth/core/telemetry/PublicApiId.ts

@@ -37,6 +37,9 @@ export const ACCOUNT_SIGN_OUT = 100062;
 export const ACCOUNT_GET_ACCESS_TOKEN = 100063;
 
 // JIT (Just-In-Time) Auth Method Registration
-export const JIT_GET_AUTH_METHODS = 100081;
-export const JIT_CHALLENGE_AUTH_METHOD = 100082;
-export const JIT_SUBMIT_CHALLENGE = 100083;
+export const JIT_CHALLENGE_AUTH_METHOD = 100081;
+export const JIT_SUBMIT_CHALLENGE = 100082;
+
+// MFA
+export const MFA_REQUEST_CHALLENGE = 100101;
+export const MFA_SUBMIT_CHALLENGE = 100102;

package/src/custom_auth/get_account/auth_flow/result/GetAccessTokenResult.ts

@@ -10,6 +10,10 @@ import {
     GetAccessTokenCompletedState,
     GetAccessTokenFailedState,
 } from "../state/GetAccessTokenState.js";
+import {
+    GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE,
+    GET_ACCESS_TOKEN_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of getting an access token.
@@ -48,7 +52,7 @@ export class GetAccessTokenResult extends AuthFlowResultBase<
     isCompleted(): this is GetAccessTokenResult & {
         state: GetAccessTokenCompletedState;
     } {
-        return this.state instanceof GetAccessTokenCompletedState;
+        return this.state.stateType === GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE;
     }
 
     /**
@@ -57,7 +61,7 @@ export class GetAccessTokenResult extends AuthFlowResultBase<
     isFailed(): this is GetAccessTokenResult & {
         state: GetAccessTokenFailedState;
     } {
-        return this.state instanceof GetAccessTokenFailedState;
+        return this.state.stateType === GET_ACCESS_TOKEN_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/get_account/auth_flow/result/GetAccountResult.ts

@@ -10,6 +10,10 @@ import {
     GetAccountCompletedState,
     GetAccountFailedState,
 } from "../state/GetAccountState.js";
+import {
+    GET_ACCOUNT_COMPLETED_STATE_TYPE,
+    GET_ACCOUNT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of getting an account.
@@ -47,14 +51,14 @@ export class GetAccountResult extends AuthFlowResultBase<
     isCompleted(): this is GetAccountResult & {
         state: GetAccountCompletedState;
     } {
-        return this.state instanceof GetAccountCompletedState;
+        return this.state.stateType === GET_ACCOUNT_COMPLETED_STATE_TYPE;
     }
 
     /**
      * Checks if the result is in a failed state.
      */
     isFailed(): this is GetAccountResult & { state: GetAccountFailedState } {
-        return this.state instanceof GetAccountFailedState;
+        return this.state.stateType === GET_ACCOUNT_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/get_account/auth_flow/result/SignOutResult.ts

@@ -9,6 +9,10 @@ import {
     SignOutCompletedState,
     SignOutFailedState,
 } from "../state/SignOutState.js";
+import {
+    SIGN_OUT_COMPLETED_STATE_TYPE,
+    SIGN_OUT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-out operation.
@@ -42,14 +46,14 @@ export class SignOutResult extends AuthFlowResultBase<
      * Checks if the sign-out operation is completed.
      */
     isCompleted(): this is SignOutResult & { state: SignOutCompletedState } {
-        return this.state instanceof SignOutCompletedState;
+        return this.state.stateType === SIGN_OUT_COMPLETED_STATE_TYPE;
     }
 
     /**
      * Checks if the sign-out operation failed.
      */
     isFailed(): this is SignOutResult & { state: SignOutFailedState } {
-        return this.state instanceof SignOutFailedState;
+        return this.state.stateType === SIGN_OUT_FAILED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/get_account/auth_flow/state/GetAccessTokenState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE,
+    GET_ACCESS_TOKEN_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the get access token flow.
  */
-export class GetAccessTokenCompletedState extends AuthFlowStateBase {}
+export class GetAccessTokenCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCESS_TOKEN_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the get access token flow.
  */
-export class GetAccessTokenFailedState extends AuthFlowStateBase {}
+export class GetAccessTokenFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCESS_TOKEN_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/auth_flow/state/GetAccountState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    GET_ACCOUNT_COMPLETED_STATE_TYPE,
+    GET_ACCOUNT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the get account flow.
  */
-export class GetAccountCompletedState extends AuthFlowStateBase {}
+export class GetAccountCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCOUNT_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the get account flow.
  */
-export class GetAccountFailedState extends AuthFlowStateBase {}
+export class GetAccountFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = GET_ACCOUNT_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/auth_flow/state/SignOutState.ts

@@ -4,13 +4,27 @@
  */
 
 import { AuthFlowStateBase } from "../../../core/auth_flow/AuthFlowState.js";
+import {
+    SIGN_OUT_COMPLETED_STATE_TYPE,
+    SIGN_OUT_FAILED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /**
  * The completed state of the sign-out flow.
  */
-export class SignOutCompletedState extends AuthFlowStateBase {}
+export class SignOutCompletedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_OUT_COMPLETED_STATE_TYPE;
+}
 
 /**
  * The failed state of the sign-out flow.
  */
-export class SignOutFailedState extends AuthFlowStateBase {}
+export class SignOutFailedState extends AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    stateType = SIGN_OUT_FAILED_STATE_TYPE;
+}

package/src/custom_auth/get_account/interaction_client/CustomAuthSilentCacheClient.ts

@@ -41,17 +41,19 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
     override async acquireToken(
         silentRequest: CommonSilentFlowRequest
     ): Promise<AuthenticationResult> {
+        const correlationId = silentRequest.correlationId || this.correlationId;
         const telemetryManager = initializeServerTelemetryManager(
             PublicApiId.ACCOUNT_GET_ACCESS_TOKEN,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger,
             silentRequest.forceRefresh
         );
         const clientConfig = this.getCustomAuthClientConfiguration(
             telemetryManager,
-            this.customAuthAuthority
+            this.customAuthAuthority,
+            correlationId
         );
         const silentFlowClient = new SilentFlowClient(
             clientConfig,
@@ -61,7 +63,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
         try {
             this.logger.verbose(
                 "Starting silent flow to acquire token from cache",
-                this.correlationId
+                correlationId
             );
 
             const result = await silentFlowClient.acquireCachedToken(
@@ -70,7 +72,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
             this.logger.verbose(
                 "Silent flow to acquire token from cache is completed and token is found",
-                this.correlationId
+                correlationId
             );
 
             return result[0] as AuthenticationResult;
@@ -81,7 +83,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
             ) {
                 this.logger.verbose(
                     "Token refresh is required to acquire token silently",
-                    this.correlationId
+                    correlationId
                 );
 
                 const refreshTokenClient = new RefreshTokenClient(
@@ -91,7 +93,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
                 this.logger.verbose(
                     "Starting refresh flow to refresh token",
-                    this.correlationId
+                    correlationId
                 );
 
                 const refreshTokenResult =
@@ -101,7 +103,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
                 this.logger.verbose(
                     "Refresh flow to refresh token is completed",
-                    this.correlationId
+                    correlationId
                 );
 
                 return refreshTokenResult as AuthenticationResult;
@@ -113,17 +115,19 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
     override async logout(logoutRequest?: ClearCacheRequest): Promise<void> {
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
+        const correlationId =
+            logoutRequest?.correlationId || this.correlationId;
 
         // Clear the cache
-        this.logger.verbose("Start to clear the cache", this.correlationId);
+        this.logger.verbose("Start to clear the cache", correlationId);
         await clearCacheOnLogout(
             this.browserStorage,
             this.browserCrypto,
             this.logger,
-            this.correlationId,
+            correlationId,
             validLogoutRequest?.account
         );
-        this.logger.verbose("Cache cleared", this.correlationId);
+        this.logger.verbose("Cache cleared", correlationId);
 
         const postLogoutRedirectUri = this.config.auth.postLogoutRedirectUri;
 
@@ -135,7 +139,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
             this.logger.verbose(
                 "Post logout redirect uri is set, redirecting to uri",
-                this.correlationId
+                correlationId
             );
 
             // Redirect to post logout redirect uri
@@ -182,7 +186,8 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
 
     private getCustomAuthClientConfiguration(
         serverTelemetryManager: ServerTelemetryManager,
-        customAuthAuthority: CustomAuthAuthority
+        customAuthAuthority: CustomAuthAuthority,
+        correlationId: string
     ): ClientConfiguration {
         const logger = this.config.system.loggerOptions;
 
@@ -202,7 +207,7 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
                 loggerCallback: logger.loggerCallback,
                 piiLoggingEnabled: logger.piiLoggingEnabled,
                 logLevel: logger.logLevel,
-                correlationId: this.correlationId,
+                correlationId: correlationId,
             },
             cryptoInterface: this.browserCrypto,
             networkInterface: this.networkClient,

package/src/custom_auth/index.ts

@@ -212,5 +212,27 @@ export {
 // Auth Method Registration Types
 export { AuthMethodDetails } from "./core/auth_flow/jit/AuthMethodDetails.js";
 
+// MFA State
+export { MfaAwaitingState } from "./core/auth_flow/mfa/state/MfaState.js";
+export { MfaVerificationRequiredState } from "./core/auth_flow/mfa/state/MfaState.js";
+export { MfaCompletedState } from "./core/auth_flow/mfa/state/MfaCompletedState.js";
+export { MfaFailedState } from "./core/auth_flow/mfa/state/MfaFailedState.js";
+
+// MFA Results
+export {
+    MfaRequestChallengeResult,
+    MfaRequestChallengeResultState,
+} from "./core/auth_flow/mfa/result/MfaRequestChallengeResult.js";
+export {
+    MfaSubmitChallengeResult,
+    MfaSubmitChallengeResultState,
+} from "./core/auth_flow/mfa/result/MfaSubmitChallengeResult.js";
+
+// MFA Errors
+export {
+    MfaRequestChallengeError,
+    MfaSubmitChallengeError,
+} from "./core/auth_flow/mfa/error_type/MfaError.js";
+
 // Components from msal_browser
 export { LogLevel } from "@azure/msal-common/browser";

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordResendCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordResendCodeError } from "../error_type/ResetPasswordError.js";
 import type { ResetPasswordCodeRequiredState } from "../state/ResetPasswordCodeRequiredState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of resending code in a reset password operation.
@@ -46,7 +50,7 @@ export class ResetPasswordResendCodeResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordResendCodeResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,13 +59,7 @@ export class ResetPasswordResendCodeResult extends AuthFlowResultBase<
     isCodeRequired(): this is ResetPasswordResendCodeResult & {
         state: ResetPasswordCodeRequiredState;
     } {
-        /*
-         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
-         * So we are using the constructor name to check the state type.
-         */
-        return (
-            this.state.constructor?.name === "ResetPasswordCodeRequiredState"
-        );
+        return this.state.stateType === RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordStartResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordCodeRequiredState } from "../state/ResetPasswordCodeRequiredState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation.
@@ -46,7 +50,7 @@ export class ResetPasswordStartResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordStartResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,7 @@ export class ResetPasswordStartResult extends AuthFlowResultBase<
     isCodeRequired(): this is ResetPasswordStartResult & {
         state: ResetPasswordCodeRequiredState;
     } {
-        return this.state instanceof ResetPasswordCodeRequiredState;
+        return this.state.stateType === RESET_PASSWORD_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordSubmitCodeError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
 import { ResetPasswordPasswordRequiredState } from "../state/ResetPasswordPasswordRequiredState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation that requires a code.
@@ -46,7 +50,7 @@ export class ResetPasswordSubmitCodeResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordSubmitCodeResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,9 @@ export class ResetPasswordSubmitCodeResult extends AuthFlowResultBase<
     isPasswordRequired(): this is ResetPasswordSubmitCodeResult & {
         state: ResetPasswordPasswordRequiredState;
     } {
-        return this.state instanceof ResetPasswordPasswordRequiredState;
+        return (
+            this.state.stateType === RESET_PASSWORD_PASSWORD_REQUIRED_STATE_TYPE
+        );
     }
 }
 

package/src/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitPasswordResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { ResetPasswordSubmitPasswordError } from "../error_type/ResetPasswordError.js";
 import { ResetPasswordCompletedState } from "../state/ResetPasswordCompletedState.js";
 import { ResetPasswordFailedState } from "../state/ResetPasswordFailedState.js";
+import {
+    RESET_PASSWORD_FAILED_STATE_TYPE,
+    RESET_PASSWORD_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a reset password operation that requires a password.
@@ -41,7 +45,7 @@ export class ResetPasswordSubmitPasswordResult extends AuthFlowResultBase<
     isFailed(): this is ResetPasswordSubmitPasswordResult & {
         state: ResetPasswordFailedState;
     } {
-        return this.state instanceof ResetPasswordFailedState;
+        return this.state.stateType === RESET_PASSWORD_FAILED_STATE_TYPE;
     }
 
     /**
@@ -50,7 +54,7 @@ export class ResetPasswordSubmitPasswordResult extends AuthFlowResultBase<
     isCompleted(): this is ResetPasswordSubmitPasswordResult & {
         state: ResetPasswordCompletedState;
     } {
-        return this.state instanceof ResetPasswordCompletedState;
+        return this.state.stateType === RESET_PASSWORD_COMPLETED_STATE_TYPE;
     }
 }