@azure/msal-browser 5.0.0-alpha.0 → 5.0.1

package/src/custom_auth/sign_in/interaction_client/SignInClient.ts

@@ -6,10 +6,14 @@
 import {
     ChallengeType,
     DefaultCustomAuthApiCodeLength,
+    GrantType,
 } from "../../CustomAuthConstants.js";
 import { CustomAuthApiError } from "../../core/error/CustomAuthApiError.js";
 import * as CustomAuthApiErrorCode from "../../core/network_client/custom_auth_api/types/ApiErrorCodes.js";
-import { REGISTRATION_REQUIRED } from "../../core/network_client/custom_auth_api/types/ApiSuberrors.js";
+import {
+    MFA_REQUIRED,
+    REGISTRATION_REQUIRED,
+} from "../../core/network_client/custom_auth_api/types/ApiSuberrors.js";
 
 import { CustomAuthInteractionClientBase } from "../../core/interaction_client/CustomAuthInteractionClientBase.js";
 import {
@@ -29,6 +33,8 @@ import {
     SignInCompletedResult,
     SignInPasswordRequiredResult,
     SignInJitRequiredResult,
+    SignInMfaRequiredResult,
+    createSignInMfaRequiredResult,
 } from "./result/SignInActionResult.js";
 import * as PublicApiId from "../../core/telemetry/PublicApiId.js";
 import {
@@ -38,6 +44,7 @@ import {
     SignInOobTokenRequest,
     SignInPasswordTokenRequest,
     RegisterIntrospectRequest,
+    SignInIntrospectRequest,
 } from "../../core/network_client/custom_auth_api/types/ApiRequestTypes.js";
 import { SignInTokenResponse } from "../../core/network_client/custom_auth_api/types/ApiResponseTypes.js";
 import {
@@ -58,26 +65,27 @@ export class SignInClient extends CustomAuthInteractionClientBase {
     async start(
         parameters: SignInStartParams
     ): Promise<SignInPasswordRequiredResult | SignInCodeSendResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = !parameters.password
             ? PublicApiId.SIGN_IN_WITH_CODE_START
             : PublicApiId.SIGN_IN_WITH_PASSWORD_START;
         const telemetryManager = initializeServerTelemetryManager(
             apiId,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger
         );
 
         this.logger.verbose(
             "Calling initiate endpoint for sign in.",
-            parameters.correlationId
+            correlationId
         );
 
         const initReq: SignInInitiateRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             username: parameters.username,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -86,13 +94,13 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Initiate endpoint called for sign in.",
-            parameters.correlationId
+            initiateResponse.correlation_id || correlationId
         );
 
         const challengeReq: SignInChallengeRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             continuation_token: initiateResponse.continuation_token ?? "",
-            correlationId: initiateResponse.correlation_id,
+            correlationId: initiateResponse.correlation_id || correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -107,11 +115,12 @@ export class SignInClient extends CustomAuthInteractionClientBase {
     async resendCode(
         parameters: SignInResendCodeParams
     ): Promise<SignInCodeSendResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.SIGN_IN_RESEND_CODE;
         const telemetryManager = initializeServerTelemetryManager(
             apiId,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger
         );
@@ -119,7 +128,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         const challengeReq: SignInChallengeRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             continuation_token: parameters.continuationToken ?? "",
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -128,13 +137,13 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         if (result.type === SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE) {
             this.logger.error(
                 "Resend code operation failed due to the challenge type 'password' is not supported.",
-                parameters.correlationId
+                result.correlationId || correlationId
             );
 
             throw new CustomAuthApiError(
                 CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
                 "Unsupported challenge type 'password'.",
-                result.correlationId
+                result.correlationId || correlationId
             );
         }
 
@@ -148,18 +157,23 @@ export class SignInClient extends CustomAuthInteractionClientBase {
      */
     async submitCode(
         parameters: SignInSubmitCodeParams
-    ): Promise<SignInCompletedResult> {
+    ): Promise<
+        | SignInCompletedResult
+        | SignInJitRequiredResult
+        | SignInMfaRequiredResult
+    > {
+        const correlationId = parameters.correlationId || this.correlationId;
         ensureArgumentIsNotEmptyString(
             "parameters.code",
             parameters.code,
-            parameters.correlationId
+            correlationId
         );
 
         const apiId = PublicApiId.SIGN_IN_SUBMIT_CODE;
         const telemetryManager = initializeServerTelemetryManager(
             apiId,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger
         );
@@ -168,26 +182,24 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         const request: SignInOobTokenRequest = {
             continuation_token: parameters.continuationToken,
             oob: parameters.code,
+            grant_type: GrantType.OOB,
             scope: scopes.join(" "),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
             }),
         };
 
-        const result = this.performTokenRequest(
+        return this.performTokenRequest(
             () =>
                 this.customAuthApiClient.signInApi.requestTokensWithOob(
                     request
                 ),
             scopes,
-            parameters.correlationId,
-            telemetryManager,
-            false // Don't handle JIT for code submission
+            correlationId,
+            telemetryManager
         );
-
-        return result as Promise<SignInCompletedResult>;
     }
 
     /**
@@ -197,18 +209,23 @@ export class SignInClient extends CustomAuthInteractionClientBase {
      */
     async submitPassword(
         parameters: SignInSubmitPasswordParams
-    ): Promise<SignInCompletedResult | SignInJitRequiredResult> {
+    ): Promise<
+        | SignInCompletedResult
+        | SignInJitRequiredResult
+        | SignInMfaRequiredResult
+    > {
+        const correlationId = parameters.correlationId || this.correlationId;
         ensureArgumentIsNotEmptyString(
             "parameters.password",
             parameters.password,
-            parameters.correlationId
+            correlationId
         );
 
         const apiId = PublicApiId.SIGN_IN_SUBMIT_PASSWORD;
         const telemetryManager = initializeServerTelemetryManager(
             apiId,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger
         );
@@ -218,7 +235,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             continuation_token: parameters.continuationToken,
             password: parameters.password,
             scope: scopes.join(" "),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
@@ -231,9 +248,8 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                     request
                 ),
             scopes,
-            parameters.correlationId,
-            telemetryManager,
-            true // Handle JIT for password submission
+            correlationId,
+            telemetryManager
         );
     }
 
@@ -244,15 +260,20 @@ export class SignInClient extends CustomAuthInteractionClientBase {
      */
     async signInWithContinuationToken(
         parameters: SignInContinuationTokenParams
-    ): Promise<SignInCompletedResult | SignInJitRequiredResult> {
+    ): Promise<
+        | SignInCompletedResult
+        | SignInJitRequiredResult
+        | SignInMfaRequiredResult
+    > {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = this.getPublicApiIdBySignInScenario(
             parameters.signInScenario,
-            parameters.correlationId
+            correlationId
         );
         const telemetryManager = initializeServerTelemetryManager(
             apiId,
             this.config.auth.clientId,
-            this.correlationId,
+            correlationId,
             this.browserStorage,
             this.logger
         );
@@ -262,7 +283,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         const request: SignInContinuationTokenRequest = {
             continuation_token: parameters.continuationToken,
             username: parameters.username,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             scope: scopes.join(" "),
             ...(parameters.claims && {
@@ -277,10 +298,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                     request
                 ),
             scopes,
-            parameters.correlationId,
-            telemetryManager,
-            true // Handle JIT for continuation token sign-in (e.g., after sign-up or SSPR)
-        ) as Promise<SignInCompletedResult | SignInJitRequiredResult>;
+            correlationId,
+            telemetryManager
+        );
     }
 
     /**
@@ -288,16 +308,19 @@ export class SignInClient extends CustomAuthInteractionClientBase {
      * @param tokenEndpointCaller Function that calls the specific token endpoint
      * @param scopes Scopes for the token request
      * @param correlationId Correlation ID for logging and result
-     * @param handleJit Whether to handle JIT required errors or throw them
-     * @returns SignInCompletedResult with authentication result
+     * @param telemetryManager Telemetry manager for telemetry logging
+     * @returns SignInCompletedResult | SignInJitRequiredResult | SignInMfaRequiredResult with authentication result
      */
     private async performTokenRequest(
         tokenEndpointCaller: () => Promise<SignInTokenResponse>,
         scopes: string[],
         correlationId: string,
-        telemetryManager: ServerTelemetryManager,
-        handleJit: boolean
-    ): Promise<SignInCompletedResult | SignInJitRequiredResult> {
+        telemetryManager: ServerTelemetryManager
+    ): Promise<
+        | SignInCompletedResult
+        | SignInJitRequiredResult
+        | SignInMfaRequiredResult
+    > {
         this.logger.verbose(
             "Calling token endpoint for sign in.",
             correlationId
@@ -308,49 +331,38 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
             this.logger.verbose(
                 "Token endpoint response received for sign in.",
-                correlationId
+                tokenResponse.correlation_id || correlationId
             );
 
             const authResult = await this.handleTokenResponse(
                 tokenResponse,
                 scopes,
-                correlationId
+                tokenResponse.correlation_id || correlationId
             );
 
             return createSignInCompleteResult({
-                correlationId: tokenResponse.correlation_id ?? correlationId,
+                correlationId: tokenResponse.correlation_id || correlationId,
                 authenticationResult: authResult,
             });
         } catch (error) {
             if (
-                handleJit &&
                 error instanceof CustomAuthApiError &&
                 error.subError === REGISTRATION_REQUIRED
             ) {
-                this.logger.verbose(
-                    "Auth method registration required for sign in.",
-                    correlationId
+                return this.handleJitRequiredError(
+                    error,
+                    telemetryManager,
+                    error.correlationId || correlationId
                 );
-
-                // Call register introspect endpoint to get available authentication methods
-                const introspectRequest: RegisterIntrospectRequest = {
-                    continuation_token: error.continuationToken ?? "",
-                    correlationId: error.correlationId ?? correlationId,
+            } else if (
+                error instanceof CustomAuthApiError &&
+                error.subError === MFA_REQUIRED
+            ) {
+                return this.handleMfaRequiredError(
+                    error,
                     telemetryManager,
-                };
-
-                const introspectResponse =
-                    await this.customAuthApiClient.registerApi.introspect(
-                        introspectRequest
-                    );
-
-                return createSignInJitRequiredResult({
-                    correlationId:
-                        introspectResponse.correlation_id ?? correlationId,
-                    continuationToken:
-                        introspectResponse.continuation_token ?? "",
-                    authMethods: introspectResponse.methods,
-                });
+                    error.correlationId || correlationId
+                );
             }
 
             // Re-throw any other errors or JIT errors when handleJit is false
@@ -371,18 +383,19 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Challenge endpoint called for sign in.",
-            request.correlationId
+            challengeResponse.correlation_id || request.correlationId
         );
 
         if (challengeResponse.challenge_type === ChallengeType.OOB) {
             // Code is required
             this.logger.verbose(
                 "Challenge type is oob for sign in.",
-                request.correlationId
+                challengeResponse.correlation_id || request.correlationId
             );
 
             return createSignInCodeSendResult({
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || request.correlationId,
                 continuationToken: challengeResponse.continuation_token ?? "",
                 challengeChannel: challengeResponse.challenge_channel ?? "",
                 challengeTargetLabel:
@@ -398,24 +411,25 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             // Password is required
             this.logger.verbose(
                 "Challenge type is password for sign in.",
-                request.correlationId
+                challengeResponse.correlation_id || request.correlationId
             );
 
             return createSignInPasswordRequiredResult({
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || request.correlationId,
                 continuationToken: challengeResponse.continuation_token ?? "",
             });
         }
 
         this.logger.error(
             `Unsupported challenge type '${challengeResponse.challenge_type}' for sign in.`,
-            request.correlationId
+            challengeResponse.correlation_id || request.correlationId
         );
 
         throw new CustomAuthApiError(
             CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
             `Unsupported challenge type '${challengeResponse.challenge_type}'.`,
-            challengeResponse.correlation_id
+            challengeResponse.correlation_id || request.correlationId
         );
     }
 
@@ -435,4 +449,79 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                 );
         }
     }
+
+    private async handleJitRequiredError(
+        error: CustomAuthApiError,
+        telemetryManager: ServerTelemetryManager,
+        correlationId: string
+    ): Promise<SignInJitRequiredResult> {
+        this.logger.verbose(
+            "Auth method registration required for sign in.",
+            correlationId
+        );
+
+        // Call register introspect endpoint to get available authentication methods
+        const introspectRequest: RegisterIntrospectRequest = {
+            continuation_token: error.continuationToken ?? "",
+            correlationId: correlationId,
+            telemetryManager,
+        };
+
+        this.logger.verbose(
+            "Calling introspect endpoint for getting auth methods.",
+            correlationId
+        );
+
+        const introspectResponse =
+            await this.customAuthApiClient.registerApi.introspect(
+                introspectRequest
+            );
+
+        this.logger.verbose(
+            "Introspect endpoint called for getting auth methods.",
+            introspectResponse.correlation_id || correlationId
+        );
+
+        return createSignInJitRequiredResult({
+            correlationId: introspectResponse.correlation_id || correlationId,
+            continuationToken: introspectResponse.continuation_token ?? "",
+            authMethods: introspectResponse.methods,
+        });
+    }
+
+    private async handleMfaRequiredError(
+        error: CustomAuthApiError,
+        telemetryManager: ServerTelemetryManager,
+        correlationId: string
+    ): Promise<SignInMfaRequiredResult> {
+        this.logger.verbose("MFA required for sign in.", correlationId);
+
+        // Call sign-in introspect endpoint to get available MFA methods
+        const introspectRequest: SignInIntrospectRequest = {
+            continuation_token: error.continuationToken ?? "",
+            correlationId: correlationId,
+            telemetryManager,
+        };
+
+        this.logger.verbose(
+            "Calling introspect endpoint for MFA auth methods.",
+            correlationId
+        );
+
+        const introspectResponse =
+            await this.customAuthApiClient.signInApi.requestAuthMethods(
+                introspectRequest
+            );
+
+        this.logger.verbose(
+            "Introspect endpoint called for MFA auth methods.",
+            introspectResponse.correlation_id || correlationId
+        );
+
+        return createSignInMfaRequiredResult({
+            correlationId: introspectResponse.correlation_id || correlationId,
+            continuationToken: introspectResponse.continuation_token ?? "",
+            authMethods: introspectResponse.methods,
+        });
+    }
 }

package/src/custom_auth/sign_in/interaction_client/result/SignInActionResult.ts

@@ -38,11 +38,17 @@ export interface SignInJitRequiredResult extends SignInContinuationTokenResult {
     authMethods: AuthenticationMethod[];
 }
 
+export interface SignInMfaRequiredResult extends SignInContinuationTokenResult {
+    type: typeof SIGN_IN_MFA_REQUIRED_RESULT_TYPE;
+    authMethods: AuthenticationMethod[];
+}
+
 export const SIGN_IN_CODE_SEND_RESULT_TYPE = "SignInCodeSendResult";
 export const SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE =
     "SignInPasswordRequiredResult";
 export const SIGN_IN_COMPLETED_RESULT_TYPE = "SignInCompletedResult";
 export const SIGN_IN_JIT_REQUIRED_RESULT_TYPE = "SignInJitRequiredResult";
+export const SIGN_IN_MFA_REQUIRED_RESULT_TYPE = "SignInMfaRequiredResult";
 
 export function createSignInCompleteResult(
     input: Omit<SignInCompletedResult, "type">
@@ -79,3 +85,12 @@ export function createSignInJitRequiredResult(
         ...input,
     };
 }
+
+export function createSignInMfaRequiredResult(
+    input: Omit<SignInMfaRequiredResult, "type">
+): SignInMfaRequiredResult {
+    return {
+        type: SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}

package/src/custom_auth/sign_up/auth_flow/result/SignUpResendCodeResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { SignUpResendCodeError } from "../error_type/SignUpError.js";
 import type { SignUpCodeRequiredState } from "../state/SignUpCodeRequiredState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_CODE_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of resending code in a sign-up operation.
@@ -42,7 +46,7 @@ export class SignUpResendCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpResendCodeResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -51,11 +55,7 @@ export class SignUpResendCodeResult extends AuthFlowResultBase<
     isCodeRequired(): this is SignUpResendCodeResult & {
         state: SignUpCodeRequiredState;
     } {
-        /*
-         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
-         * So we are using the constructor name to check the state type.
-         */
-        return this.state.constructor?.name === "SignUpCodeRequiredState";
+        return this.state.stateType === SIGN_UP_CODE_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpResult.ts

@@ -9,6 +9,12 @@ import { SignUpAttributesRequiredState } from "../state/SignUpAttributesRequired
 import { SignUpCodeRequiredState } from "../state/SignUpCodeRequiredState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
 import { SignUpPasswordRequiredState } from "../state/SignUpPasswordRequiredState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_CODE_REQUIRED_STATE_TYPE,
+    SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE,
+    SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation.
@@ -42,7 +48,7 @@ export class SignUpResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -51,7 +57,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isCodeRequired(): this is SignUpResult & {
         state: SignUpCodeRequiredState;
     } {
-        return this.state instanceof SignUpCodeRequiredState;
+        return this.state.stateType === SIGN_UP_CODE_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -60,7 +66,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isPasswordRequired(): this is SignUpResult & {
         state: SignUpPasswordRequiredState;
     } {
-        return this.state instanceof SignUpPasswordRequiredState;
+        return this.state.stateType === SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -69,7 +75,7 @@ export class SignUpResult extends AuthFlowResultBase<
     isAttributesRequired(): this is SignUpResult & {
         state: SignUpAttributesRequiredState;
     } {
-        return this.state instanceof SignUpAttributesRequiredState;
+        return this.state.stateType === SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpSubmitAttributesResult.ts

@@ -7,6 +7,10 @@ import { AuthFlowResultBase } from "../../../core/auth_flow/AuthFlowResultBase.j
 import { SignUpSubmitAttributesError } from "../error_type/SignUpError.js";
 import { SignUpCompletedState } from "../state/SignUpCompletedState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation that requires attributes.
@@ -46,7 +50,7 @@ export class SignUpSubmitAttributesResult extends AuthFlowResultBase<
     isFailed(): this is SignUpSubmitAttributesResult & {
         state: SignUpFailedState;
     } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -55,7 +59,7 @@ export class SignUpSubmitAttributesResult extends AuthFlowResultBase<
     isCompleted(): this is SignUpSubmitAttributesResult & {
         state: SignUpCompletedState;
     } {
-        return this.state instanceof SignUpCompletedState;
+        return this.state.stateType === SIGN_UP_COMPLETED_STATE_TYPE;
     }
 }
 

package/src/custom_auth/sign_up/auth_flow/result/SignUpSubmitCodeResult.ts

@@ -9,6 +9,12 @@ import { SignUpAttributesRequiredState } from "../state/SignUpAttributesRequired
 import { SignUpPasswordRequiredState } from "../state/SignUpPasswordRequiredState.js";
 import { SignUpCompletedState } from "../state/SignUpCompletedState.js";
 import { SignUpFailedState } from "../state/SignUpFailedState.js";
+import {
+    SIGN_UP_FAILED_STATE_TYPE,
+    SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE,
+    SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE,
+    SIGN_UP_COMPLETED_STATE_TYPE,
+} from "../../../core/auth_flow/AuthFlowStateTypes.js";
 
 /*
  * Result of a sign-up operation that requires a code.
@@ -44,7 +50,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
      * Checks if the result is in a failed state.
      */
     isFailed(): this is SignUpSubmitCodeResult & { state: SignUpFailedState } {
-        return this.state instanceof SignUpFailedState;
+        return this.state.stateType === SIGN_UP_FAILED_STATE_TYPE;
     }
 
     /**
@@ -53,7 +59,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isPasswordRequired(): this is SignUpSubmitCodeResult & {
         state: SignUpPasswordRequiredState;
     } {
-        return this.state instanceof SignUpPasswordRequiredState;
+        return this.state.stateType === SIGN_UP_PASSWORD_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -62,7 +68,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isAttributesRequired(): this is SignUpSubmitCodeResult & {
         state: SignUpAttributesRequiredState;
     } {
-        return this.state instanceof SignUpAttributesRequiredState;
+        return this.state.stateType === SIGN_UP_ATTRIBUTES_REQUIRED_STATE_TYPE;
     }
 
     /**
@@ -71,7 +77,7 @@ export class SignUpSubmitCodeResult extends AuthFlowResultBase<
     isCompleted(): this is SignUpSubmitCodeResult & {
         state: SignUpCompletedState;
     } {
-        return this.state instanceof SignUpCompletedState;
+        return this.state.stateType === SIGN_UP_COMPLETED_STATE_TYPE;
     }
 }