@descope/core-js-sdk 0.0.41-alpha.9 → 1.0.0

package/dist/index.d.ts

@@ -1,27 +1,177 @@
-declare type SdkFn = (...args: any[]) => Promise<SdkResponse>;
+declare type JSONSerializable = string | number | boolean | null | Array<JSONSerializable>;
+declare type FlowInput = Record<string, JSONSerializable>;
+
+declare type SdkFn$1 = (...args: any[]) => Promise<SdkResponse<ResponseData>>;
+declare type DeviceInfo = {
+    webAuthnSupport?: boolean;
+};
+declare type LastAuth = {
+    authMethod?: AuthMethod;
+    oauthProvider?: string;
+    name?: string;
+    loginId?: string;
+};
+declare type AuthMethod = 'magiclink' | 'enchantedlink' | 'otp' | 'totp' | 'oauth' | 'saml' | 'webauthn';
+/** User base details from Descope API */
 declare type User = {
     email?: string;
     name?: string;
     phone?: string;
 };
+/** User extended details from Descope API */
+declare type UserResponse = User & {
+    loginIds: string[];
+    userId: string;
+    verifiedEmail?: boolean;
+    verifiedPhone?: boolean;
+    picture?: string;
+    roleNames?: string[];
+    userTenants?: UserTenant[];
+};
+/** A tenant association mapping  */
+declare type UserTenant = {
+    tenantId: string;
+    roleNames?: string[];
+};
+/** Login options to be added to the different authentication methods */
+declare type LoginOptions = {
+    stepup?: boolean;
+    mfa?: boolean;
+    customClaims?: Record<string, any>;
+};
+/** Authentication info result from the various JWT validations  */
+declare type JWTResponse = {
+    sessionJwt: string;
+    refreshJwt?: string;
+    cookieDomain?: string;
+    cookiePath?: string;
+    cookieMaxAge?: number;
+    cookieExpiration?: number;
+    user?: UserResponse;
+    firstSeen?: boolean;
+};
+/** Authentication info result from exchanging access keys for a session */
+declare type ExchangeAccessKeyResponse = {
+    keyId: string;
+    sessionJwt: string;
+    expiration: number;
+};
+/** The response returned from the various start webauthn functions */
+declare type WebAuthnStartResponse = {
+    transactionId: string;
+    options: string;
+    create: boolean;
+};
+/** Enchanted link response */
+declare type EnchantedLinkResponse = {
+    /** Pending reference URL to poll while waiting for user to click magic link */
+    pendingRef: string;
+    /** Link id, on which link the user should click */
+    linkId: string;
+};
+/** URL response to redirect user in case of OAuth or SSO */
+declare type URLResponse = {
+    url: string;
+};
+/** TOTP response with the TOTP details */
+declare type TOTPResponse = {
+    provisioningURL: string;
+    image: string;
+    key: string;
+};
+/** All delivery methods currently supported */
 declare enum DeliveryMethods {
     email = "email",
     sms = "sms",
     whatsapp = "whatsapp"
 }
-declare type Deliveries<T extends SdkFn> = Record<DeliveryMethods, T>;
-declare type SdkResponse = {
+/** All flow execution statuses
+ *  - waiting - flow execution is waiting for user interaction
+ *  - running - flow execution is currently running
+ *  - completed - flow execution completed successfully
+ *  - failed - flow execution failed
+ */
+declare enum FlowStatus {
+    waiting = "waiting",
+    running = "running",
+    completed = "completed",
+    failed = "failed"
+}
+/** All flow response action
+ *  - screen - next action is to render  screen
+ *  - poll - next action is poll for next after timeout
+ *  - redirect - next action is to redirect (redirection details in 'redirect' attribute)
+ *  - webauthnCreate/webauthnGet - next action is to prompt webauthn (details in 'webauthn' attribute)
+ *  - none - no next action
+ */
+declare type FlowAction = 'screen' | 'poll' | 'redirect' | 'webauthnCreate' | 'webauthnGet' | 'none';
+/** Flow response with flow execution details */
+declare type FlowResponse = {
+    executionId: string;
+    stepId: string;
+    status: FlowStatus;
+    action: FlowAction;
+    screen?: {
+        id: string;
+        state: Record<string, any>;
+    };
+    redirect?: {
+        url: string;
+    };
+    webauthn?: {
+        transactionId: string;
+        options: string;
+        create: boolean;
+    };
+    error?: {
+        code: string;
+        description: string;
+        message: string;
+    };
+    authInfo?: JWTResponse;
+    lastAuth?: Pick<LastAuth, 'authMethod' | 'oauthProvider'>;
+};
+declare type Options = {
+    redirectUrl?: string;
+    tenant?: string;
+    deviceInfo?: DeviceInfo;
+    lastAuth?: LastAuth;
+};
+declare type ResponseData = Record<string, any>;
+/**
+ * Response from our SDK calls which includes the result (ok, code, error).
+ * The relevant data is provided in the more specific interfaces extending SdkResponse.
+ */
+declare type SdkResponse<T extends ResponseData> = {
     code?: number;
     ok: boolean;
     response?: Response;
     error?: {
-        message: string;
-        code: string;
+        errorCode: string;
+        errorDescription: string;
+        errorMessage?: string;
+        retryAfter?: string;
     };
-    data?: any;
+    data?: T;
 };
-declare type Logger = Pick<Console, 'debug' | 'log' | 'error'>;
+/** Different delivery method */
+declare type Deliveries<T extends SdkFn$1> = Record<keyof typeof DeliveryMethods, T>;
+/** Logger type that supports the given levels (debug, log, error) */
+declare type Logger = Pick<Console, 'debug' | 'log' | 'error' | 'warn'>;
 
+declare type EnchantedLinkSignInFn = (loginId: string, uri: string) => Promise<SdkResponse<EnchantedLinkResponse>>;
+declare type EnchantedLinkSignUpFn = (loginId: string, uri: string, user?: User) => Promise<SdkResponse<EnchantedLinkResponse>>;
+/** Polling configuration for session waiting */
+declare type WaitForSessionConfig = {
+    pollingIntervalMs: number;
+    timeoutMs: number;
+};
+
+declare type SignInFn = (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+declare type SignUpFn = (loginId: string, uri: string, user?: User) => Promise<SdkResponse<never>>;
+declare type UpdatePhoneFn = (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+
+/** Request configuration including headers, query params and token */
 declare type HttpClientReqConfig = {
     headers?: HeadersInit;
     queryParams?: {
@@ -29,19 +179,38 @@ declare type HttpClientReqConfig = {
     };
     token?: string;
 };
+/** HTTP methods we use in the client */
+declare enum HTTPMethods {
+    get = "GET",
+    delete = "DELETE",
+    post = "POST",
+    put = "PUT"
+}
+/** HTTP Client type that implements the HTTP method calls. Descopers can provide their own HTTP client although required only in rare cases. */
 declare type HttpClient = {
     get: (path: string, config?: HttpClientReqConfig) => Promise<Response>;
     post: (path: string, body?: any, config?: HttpClientReqConfig) => Promise<Response>;
     put: (path: string, body?: any, config?: HttpClientReqConfig) => Promise<Response>;
     delete: (path: string, body?: any, config?: HttpClientReqConfig) => Promise<Response>;
+    hooks?: Hooks;
 };
-
-declare type SignInFn = (identifier: string, uri: string) => Promise<SdkResponse>;
-declare type SignUpFn = (identifier: string, uri: string, user?: User) => Promise<SdkResponse>;
-declare type UpdatePhoneFn = (identifier: string, phone: string) => Promise<SdkResponse>;
-declare type WaitForSessionConfig = {
-    pollingIntervalMs: number;
-    timeoutMs: number;
+/** For before-request hook allows overriding parts of the request */
+declare type RequestConfig = {
+    path: string;
+    headers?: HeadersInit;
+    queryParams?: {
+        [key: string]: string;
+    };
+    body?: any;
+    method: HTTPMethods;
+    token?: string;
+};
+declare type BeforeRequest = (config: RequestConfig) => RequestConfig;
+declare type AfterRequest = (req: RequestConfig, res: Response) => void | Promise<void>;
+/** Hooks before and after the request is made */
+declare type Hooks = {
+    beforeRequest?: BeforeRequest;
+    afterRequest?: AfterRequest;
 };
 
 declare enum OAuthProviders {
@@ -50,120 +219,249 @@ declare enum OAuthProviders {
     google = "google",
     microsoft = "microsoft",
     gitlab = "gitlab",
-    apple = "apple"
+    apple = "apple",
+    discord = "discord",
+    linkedin = "linkedin"
 }
 
-declare const sdkWithAttributes: ((args_0: {
+/** Transform the Promise Response to our internal SdkResponse implementation
+ * @param response The Response promise from fetch
+ * @param transform Optionally transform the response JSON to another type
+ */
+declare function transformResponse<T extends ResponseData, S extends ResponseData = T>(response: Promise<Response>, transform?: (data: T) => S): Promise<SdkResponse<S>>;
+
+declare type IsObject<T> = T extends Array<any> ? false : T extends Function ? false : T extends object ? true : false;
+declare type Tail<T extends ReadonlyArray<string>> = T extends readonly [head: any, ...tail: infer Tail_] ? Tail_ : never;
+declare type Head<T extends ReadonlyArray<string>> = T extends readonly [] ? never : T[0];
+declare type SdkResponseType<F extends SdkFn<ResponseData>> = F extends SdkFn<infer U> ? U : never;
+declare type SdkFnWrapperInternal<F extends SdkFn<ResponseData>, R extends ResponseData> = (fn: (...args: Parameters<F>) => ReturnType<F>) => (...args: Parameters<F>) => Promise<SdkResponse<R extends Record<string, never> ? SdkResponseType<F> : SdkResponseType<F> & R>>;
+declare type PrependDot<T extends string> = [T] extends [never] ? '' : `.${T}`;
+declare type SdkFnsPaths<T extends object> = keyof T extends infer K ? K extends string & keyof T ? IsObject<T> extends false ? never : T[K] extends SdkFn<ResponseData> ? K : IsObject<T[K]> extends false ? never : T[K] extends object ? `${K}${PrependDot<SdkFnsPaths<T[K]>>}` : never : never : never;
+declare type ReplacePaths<Obj extends object, Paths extends ReadonlyArray<string>, WrapperData extends Record<string, any>> = Head<Paths> extends never ? Obj : Tail<Paths> extends ReadonlyArray<string> ? ReplacePaths<ReplacePath<Obj, Head<Paths>, WrapperData>, Tail<Paths>, WrapperData> : ReplacePath<Obj, Head<Paths>, WrapperData>;
+declare type ReplacePath<Obj, Path extends string, WrapperData extends Record<string, any>> = Path extends `${infer Head}.${infer Tail}` ? {
+    [Key in keyof Obj]: Key extends Head ? ReplacePath<Obj[Key], Tail, WrapperData> : Obj[Key];
+} : {
+    [Key in keyof Obj]: Key extends Path ? Obj[Key] extends SdkFn<ResponseData> ? ReturnType<SdkFnWrapperInternal<Obj[Key], WrapperData>> : Obj[Key] : Obj[Key];
+};
+declare type SdkFn<T extends ResponseData> = (...args: any) => Promise<SdkResponse<T>>;
+declare type SdkFnWrapper<Z extends ResponseData> = <A extends any[], R extends ResponseData>(fn: (...args: A) => Promise<SdkResponse<R>>) => (...args: A) => Promise<SdkResponse<Z extends Record<string, never> ? R : Z & R>>;
+
+/**
+ * A wrapper function that allows to wrap multiple Sdk function
+ * @param obj: The Sdk instance you want to wrap
+ * @param paths: A readonly list of paths of the functions you want to wrap
+ * @param wrapper: Your wrapper function, it should gets an Sdk function and return a new Sdk function
+ * @returns a mutated instance of the Sdk with updated type definitions based on your wrapper return type
+ *
+ * Usage example:
+ *
+ * // Assuming this is our SDK instance
+ * const sdk = {
+ *    me: (token) => {...}
+ *    flow: {
+ *       start: (...params) => {...}
+ *       next: (...params) => {...}
+ *    }
+ *    ...
+ * }
+ *
+ * // This is our wrapper
+ * const wrapper = (sdkFn) => async (...args) => {
+ *    const sdkResponse = await sdkFn(...args)
+ *
+ *    // Modify return value
+ *    return {...sdkResponse, data: {...sdkResponse.data, myCustomAttribute: 'hello'}}
+ * }
+ *
+ * // And those are the paths we want to wrap
+ * const paths = ['flow.start', 'flow.next'] as const // You MUST add as const!
+ *
+ * // We can wrap our SDK functions with the wrapper we created in this way
+ * const newlyTypedSdk = wrapWith(sdk, paths, wrapper)
+ *
+ * Now the 2 wrapped functions will have the updated type based on the wrapper return value
+ */
+declare const wrapWith: <Obj extends object, Paths extends readonly SdkFnsPaths<Obj>[], WrapperData extends ResponseData>(obj: Obj, paths: Paths, wrapper: SdkFnWrapper<WrapperData>) => ReplacePaths<Obj, Paths, WrapperData>;
+
+/**
+ * Add hooks to an existing core-sdk config
+ */
+declare const addHooksToConfig: <Config extends Omit<{
+    projectId: string;
+    logger?: Logger;
+    baseUrl?: string;
+    hooks?: Hooks;
+    cookiePolicy?: RequestCredentials;
+    baseHeaders?: HeadersInit;
+    fetch?: typeof fetch;
+}, "hooks"> & {
+    hooks?: {
+        beforeRequest?: BeforeRequest | BeforeRequest[];
+        afterRequest?: AfterRequest | AfterRequest[];
+    };
+}>(config: Config, hooks: Config["hooks"]) => Config;
+
+declare const _default$1: {
+    TOO_MANY_REQUESTS: number;
+};
+
+/** Descope SDK client with delivery methods enum.
+ *
+ * Please see full documentation at {@link https://docs.descope.com/guides Descope Docs}
+ * @example Usage
+ *
+ * ```js
+ * import descopeSdk from '@descope/core-js-sdk';
+ *
+ * const myProjectId = 'xxx';
+ * const sdk = descopeSdk({ projectId: myProjectId });
+ *
+ * const userLoginId = 'loginId';
+ * sdk.otp.signIn.email(userLoginId);
+ * const jwtResponse = sdk.otp.verify.email(userIdentifier, codeFromEmail);
+ * ```
+ */
+declare const _default: ((config: Omit<{
     projectId: string;
     logger?: Logger;
     baseUrl?: string;
+    hooks?: Hooks;
+    cookiePolicy?: RequestCredentials;
+    baseHeaders?: HeadersInit;
+    fetch?: typeof fetch;
+}, "hooks"> & {
+    hooks?: {
+        beforeRequest?: BeforeRequest | BeforeRequest[];
+        afterRequest?: AfterRequest | AfterRequest[];
+    };
 }) => {
+    accessKey: {
+        exchange: (accessKey: string) => Promise<SdkResponse<ExchangeAccessKeyResponse>>;
+    };
     otp: {
-        verify: Deliveries<(identifier: string, code: string) => Promise<SdkResponse>>;
-        signIn: Deliveries<(identifier: string) => Promise<SdkResponse>>;
-        signUp: Deliveries<(identifier: string, user?: User) => Promise<SdkResponse>>;
-        signUpOrIn: Deliveries<(identifier: string) => Promise<SdkResponse>>;
+        verify: Deliveries<(loginId: string, code: string) => Promise<SdkResponse<JWTResponse>>>;
+        signIn: Deliveries<(loginId: string) => Promise<SdkResponse<never>>>;
+        signUp: Deliveries<(loginId: string, user?: User) => Promise<SdkResponse<never>>>;
+        signUpOrIn: Deliveries<(loginId: string) => Promise<SdkResponse<never>>>;
         update: {
-            email: (identifier: string, email: string, token?: string) => Promise<SdkResponse>;
-            phone: Deliveries<(identifier: string, phone: string) => Promise<SdkResponse>>;
+            email: (loginId: string, email: string, token?: string) => Promise<SdkResponse<never>>;
+            phone: Deliveries<(loginId: string, phone: string) => Promise<SdkResponse<never>>>;
         };
     };
     magicLink: {
-        verify: (token: string) => Promise<SdkResponse>;
+        verify: (token: string) => Promise<SdkResponse<JWTResponse>>;
         signIn: Deliveries<SignInFn>;
         signUp: Deliveries<SignUpFn>;
         signUpOrIn: Deliveries<SignInFn>;
         update: {
-            email: (identifier: string, email: string, uri: string, token?: string) => Promise<SdkResponse>;
+            email: (loginId: string, email: string, URI?: string, token?: string) => Promise<SdkResponse<never>>;
             phone: Deliveries<UpdatePhoneFn>;
         };
-        crossDevice: {
-            verify: (token: string) => Promise<SdkResponse>;
-            signIn: Deliveries<SignInFn>;
-            signUpOrIn: Deliveries<SignInFn>;
-            signUp: Deliveries<SignUpFn>;
-            waitForSession: (pendingRef: string, config?: WaitForSessionConfig) => Promise<SdkResponse>;
-            update: {
-                email: (identifier: string, email: string, uri: string, token?: string) => Promise<SdkResponse>;
-                phone: Deliveries<UpdatePhoneFn>;
-            };
+    };
+    enchantedLink: {
+        verify: (token: string) => Promise<SdkResponse<never>>;
+        signIn: EnchantedLinkSignInFn;
+        signUpOrIn: EnchantedLinkSignInFn;
+        signUp: EnchantedLinkSignUpFn;
+        waitForSession: (pendingRef: string, config?: WaitForSessionConfig) => Promise<SdkResponse<JWTResponse>>;
+        update: {
+            email: (loginId: string, email: string, URI?: string, token?: string) => Promise<SdkResponse<EnchantedLinkResponse>>;
         };
     };
     oauth: {
-        exchange: (code: string) => Promise<SdkResponse>;
         start: {
             facebook: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
             github: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
             google: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
             microsoft: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
             gitlab: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
             apple: <B extends {
                 redirect: boolean;
             }>(redirectURL?: string, config?: B) => Promise<B extends {
                 redirect: true;
-            } ? undefined : SdkResponse>;
+            } ? undefined : SdkResponse<URLResponse>>;
+            discord: <B extends {
+                redirect: boolean;
+            }>(redirectURL?: string, config?: B) => Promise<B extends {
+                redirect: true;
+            } ? undefined : SdkResponse<URLResponse>>;
+            linkedin: <B extends {
+                redirect: boolean;
+            }>(redirectURL?: string, config?: B) => Promise<B extends {
+                redirect: true;
+            } ? undefined : SdkResponse<URLResponse>>;
         };
+        exchange: (code: string) => Promise<SdkResponse<JWTResponse>>;
     };
     saml: {
-        exchange: (code: string) => Promise<SdkResponse>;
         start: <B_1 extends {
             redirect: boolean;
         }>(tenantNameOrEmail: string, config?: B_1) => Promise<B_1 extends {
             redirect: true;
-        } ? undefined : SdkResponse>;
+        } ? undefined : SdkResponse<URLResponse>>;
+        exchange: (code: string) => Promise<SdkResponse<JWTResponse>>;
     };
     totp: {
-        signUp: (identifier: string, user?: User) => Promise<SdkResponse>;
-        verify: (identifier: string, code: string) => Promise<SdkResponse>;
-        update: (identifier: string, token?: string) => Promise<SdkResponse>;
+        signUp: (loginId: string, user?: User) => Promise<SdkResponse<TOTPResponse>>;
+        verify: (loginId: string, code: string, loginOptions?: LoginOptions, token?: string) => Promise<SdkResponse<JWTResponse>>;
+        update: (loginId: string, token?: string) => Promise<SdkResponse<TOTPResponse>>;
     };
     webauthn: {
         signUp: {
-            start: (identifier: string, origin: string, name: string) => Promise<SdkResponse>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse>;
+            start: (loginId: string, origin: string, name: string) => Promise<SdkResponse<WebAuthnStartResponse>>;
+            finish: (transactionId: string, response: string) => Promise<SdkResponse<JWTResponse>>;
         };
         signIn: {
-            start: (identifier: string, origin: string) => Promise<SdkResponse>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse>;
+            start: (loginId: string, origin: string, loginOptions?: LoginOptions, token?: string) => Promise<SdkResponse<WebAuthnStartResponse>>;
+            finish: (transactionId: string, response: string) => Promise<SdkResponse<JWTResponse>>;
         };
-        add: {
-            start: (identifier: string, origin: string, token: string) => Promise<SdkResponse>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse>;
+        signUpOrIn: {
+            start: (loginId: string, origin: string) => Promise<SdkResponse<WebAuthnStartResponse>>;
+        };
+        update: {
+            start: (loginId: string, origin: string, token: string) => Promise<SdkResponse<WebAuthnStartResponse>>;
+            finish: (transactionId: string, response: string) => Promise<SdkResponse<ResponseData>>;
         };
     };
     flow: {
-        start: (flowId: string) => Promise<SdkResponse>;
-        next: (executionId: string, stepId: string, actionId: string, input?: Record<string, FormDataEntryValue>) => Promise<SdkResponse>;
+        start: (flowId: string, options?: Options, conditionInteractionId?: string, interactionId?: string, input?: FlowInput) => Promise<SdkResponse<FlowResponse>>;
+        next: (executionId: string, stepId: string, interactionId: string, input?: FlowInput) => Promise<SdkResponse<FlowResponse>>;
     };
-    refresh: (token?: string) => Promise<SdkResponse>;
-    logout: (token?: string) => Promise<SdkResponse>;
+    refresh: (token?: string) => Promise<SdkResponse<JWTResponse>>;
+    logout: (token?: string) => Promise<SdkResponse<never>>;
+    logoutAll: (token?: string) => Promise<SdkResponse<never>>;
+    me: (token?: string) => Promise<SdkResponse<UserResponse>>;
     isJwtExpired: (token: string) => boolean;
+    getJwtPermissions: (token: string, tenant?: string) => string[];
+    getJwtRoles: (token: string, tenant?: string) => string[];
     httpClient: HttpClient;
 }) & {
     DeliveryMethods: typeof DeliveryMethods;
 };
 
+/** Type to restrict to valid delivery methods */
 declare type DeliveryMethod = keyof typeof DeliveryMethods;
+/** Type to restrict to valid OAuth providers */
 declare type OAuthProvider = keyof typeof OAuthProviders;
 
-export { DeliveryMethod, OAuthProvider, SdkResponse, sdkWithAttributes as default };
+export { DeliveryMethod, EnchantedLinkResponse, ExchangeAccessKeyResponse, FlowAction, FlowResponse, FlowStatus, HTTPMethods, _default$1 as HttpStatusCodes, JWTResponse, OAuthProvider, RequestConfig, ResponseData, SdkFnWrapper, SdkResponse, TOTPResponse, URLResponse, UserResponse, addHooksToConfig, _default as default, transformResponse, wrapWith };

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import{__awaiter as e}from"tslib";import t from"jwt-decode";import s from"lodash.get";var n={verify:"/v1/auth/code/verify",signIn:"/v1/auth/signin/otp",signUp:"/v1/auth/signup/otp",update:{email:"/v1/user/update/email/otp",phone:"/v1/user/update/phone/otp"},signUpOrIn:"/v1/auth/sign-up-or-in/otp"},i={verify:"/v1/auth/magiclink/verify",signIn:"/v1/auth/signin/magiclink",signUp:"/v1/auth/signup/magiclink",session:"/v1/auth/magiclink/session",update:{email:"/v1/user/update/email/magiclink",phone:"/v1/user/update/phone/magiclink"},signUpOrIn:"/v1/auth/sign-up-or-in/magiclink"},r={start:"/v1/oauth/authorize"},o={start:"/v1/auth/saml/authorize"},a={verify:"/v1/auth/verify/totp",signUp:"/v1/auth/signup/totp",update:"/v1/user/update/totp"},d={signUp:{start:"/v1/webauthn/signup/start",finish:"/v1/webauthn/signup/finish"},signIn:{start:"/v1/webauthn/signin/start",finish:"/v1/webauthn/signin/finish"},add:{start:"/v1/webauthn/device/add/start",finish:"/v1/webauthn/device/add/finish"}},p="/v1/auth/refresh",c="/v1/auth/logoutall",u={start:"/v1/flow/start",next:"/v1/flow/next"},g="/v1/auth/exchange";const l=()=>{const e={};return{headers(t){const s="function"==typeof t.entries?Object.fromEntries(t.entries()):t;return e.Headers=JSON.stringify(s),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},build:()=>Object.keys(e).flatMap((t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[])).join("\n")}},h=(t,s)=>{const n=s||fetch;if(!n)throw new Error("fetch is not defined");return t?(...s)=>e(void 0,void 0,void 0,(function*(){t.log((e=>l().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build())(s));const i=yield n(...s);return t[i.ok?"log":"error"](yield(t=>e(void 0,void 0,void 0,(function*(){const e=yield t.text();return t.text=()=>Promise.resolve(e),t.json=()=>Promise.resolve(JSON.parse(e)),l().title("Response").url(t.url.toString()).status(`${t.status} ${t.statusText}`).headers(t.headers).body(e).build()})))(i)),i})):n},v=(...e)=>new Headers(e.reduce(((e,t)=>{const s=(e=>Array.isArray(e)?e:e instanceof Headers?Array.from(e.entries()):e?Object.entries(e):[])(t);return s.reduce(((t,[s,n])=>(e[s]=n,e)),e),e}),{})),m=e=>void 0===e?void 0:JSON.stringify(e);var b;!function(e){e.get="GET",e.delete="DELETE",e.post="POST",e.put="PUT"}(b||(b={}));const f=(e,t="")=>{let s=e;return""!==t&&(s=s+":"+t),{Authorization:`Bearer ${s}`}},I=({baseUrl:e,projectId:t,baseConfig:s,logger:n})=>{const i=h(n),r=({path:n,body:r,headers:o,queryParams:a,method:d,token:p})=>i((({path:e,baseUrl:t,queryParams:s})=>{const n=new URL(e,t);return s&&(n.search=new URLSearchParams(s).toString()),n})({path:n,baseUrl:e,queryParams:a}),{headers:v(f(t,p),(null==s?void 0:s.baseHeaders)||{},o),method:d,body:m(r)});return{get:(e,{headers:t,queryParams:s,token:n}={})=>r({path:e,headers:t,queryParams:s,body:void 0,method:b.get,token:n}),post:(e,t,{headers:s,queryParams:n,token:i}={})=>r({path:e,headers:s,queryParams:n,body:t,method:b.post,token:i}),put:(e,t,{headers:s,queryParams:n,token:i}={})=>r({path:e,headers:s,queryParams:n,body:t,method:b.put,token:i}),delete:(e,t,{headers:s,queryParams:n,token:i}={})=>r({path:e,headers:s,queryParams:n,body:t,method:b.delete,token:i})}},y=e=>{if("string"!=typeof e||!e)throw new Error("Invalid token provided");const{exp:s}=t(e);return(new Date).getTime()/1e3>s},j=(...e)=>e.join("/").replace(/\/{2,}/g,"/"),O=t=>e(void 0,void 0,void 0,(function*(){const e=yield t,s={code:e.status,ok:e.ok,response:e},n=yield e.json();return e.ok?s.data=n:s.error=n,s}));var k,U,x;!function(e){e.sms="sms",e.whatsapp="whatsapp"}(k||(k={})),function(e){e.email="email",e.sms="sms",e.whatsapp="whatsapp"}(U||(U={})),function(e){e.signUp="signup",e.signIn="signin",e.verify="verify"}(x||(x={}));const w=(e,t)=>(s=t)=>t=>!e(t)&&s.replace("{val}",t),P=(...e)=>({validate:t=>(e.forEach((e=>{const s=e(t);if(s)throw new Error(s)})),!0)}),R=e=>t=>e.test(t),q=R(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),$=R(/^\+[1-9]{1}[0-9]{3,14}$/),M=w(q,'"{val}" is not a valid email'),E=w($,'"{val}" is not a valid phone number'),S=w((T=1,e=>e.length>=T),"Minimum length is 1");var T;const D=w((e=>"string"==typeof e),"Input is not a string"),A=(...e)=>t=>(...s)=>(e.forEach(((e,t)=>P(...e).validate(s[t]))),t(...s)),z=e=>[D(`"${e}" must be a string`),S(`"${e}" must not be empty`)],L=e=>[D(`"${e}" must be a string`),M()],H=e=>[D(`"${e}" must be a string`),E()];var J;!function(e){e.signUp="signup",e.signIn="signin",e.verify="verify",e.updatePhone="updatePhone"}(J||(J={}));const N=z("identifier"),Z=A(N,z("code")),B=A(N),C=A(N,H("phone")),F=A(N,L("email")),G=e=>({verify:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:Z(((t,i)=>O(e.post(j(n.verify,s),{code:i,externalId:t}))))})),{}),signIn:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:B((t=>O(e.post(j(n.signIn,s),{externalId:t}))))})),{}),signUp:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:B(((t,i)=>O(e.post(j(n.signUp,s),{externalId:t,user:i}))))})),{}),signUpOrIn:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:B((t=>O(e.post(j(n.signUpOrIn,s),{externalId:t}))))})),{}),update:{email:F(((t,s,i)=>O(e.post(n.update.email,{externalId:t,email:s},{token:i})))),phone:Object.keys(k).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:C(((t,i,r)=>O(e.post(j(n.update.phone,s),{externalId:t,phone:i},{token:r}))))})),{})}}),_=z("identifier"),K=z("uri"),Q=A(z("token")),V=A(_,K),W=A(z("pendingRef")),X=A(_,H("phone"),K),Y=A(_,L("email"),K),ee=t=>({verify:Q((e=>O(t.post(i.verify,{token:e})))),signIn:Object.keys(U).reduce(((e,s)=>Object.assign(Object.assign({},e),{[s]:V(((e,n)=>O(t.post(j(i.signIn,s),{externalId:e,URI:n,crossDevice:!0}))))})),{}),signUpOrIn:Object.keys(U).reduce(((e,s)=>Object.assign(Object.assign({},e),{[s]:V(((e,n)=>O(t.post(j(i.signUpOrIn,s),{externalId:e,URI:n,crossDevice:!0}))))})),{}),signUp:Object.keys(U).reduce(((e,s)=>Object.assign(Object.assign({},e),{[s]:V(((e,n,r)=>O(t.post(j(i.signUp,s),{externalId:e,URI:n,user:r,crossDevice:!0}))))})),{}),waitForSession:W(((s,n)=>new Promise((r=>{const{pollingIntervalMs:o,timeoutMs:a}=(({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||1e3,1e3),timeoutMs:Math.min(t||6e5,6e5)}))(n);let d;const p=setInterval((()=>e(void 0,void 0,void 0,(function*(){const e=yield t.post(i.session,{pendingRef:s});e.ok&&(clearInterval(p),d&&clearTimeout(d),r(O(Promise.resolve(e))))}))),o);d=setTimeout((()=>{r({error:{message:`Session polling timeout exceeded: ${a}ms`,code:"0"},ok:!1}),clearInterval(p)}),a)})))),update:{email:Y(((e,s,n,r)=>O(t.post(i.update.email,{externalId:e,email:s,URI:n,crossDevice:!0},{token:r})))),phone:Object.keys(k).reduce(((e,s)=>Object.assign(Object.assign({},e),{[s]:X(((e,n,r,o)=>O(t.post(j(i.update.phone,s),{externalId:e,phone:n,URI:r,crossDevice:!0},{token:o}))))})),{})}}),te=e=>({verify:Q((t=>O(e.post(i.verify,{token:t})))),signIn:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:V(((t,n)=>O(e.post(j(i.signIn,s),{externalId:t,URI:n}))))})),{}),signUp:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:V(((t,n,r)=>O(e.post(j(i.signUp,s),{externalId:t,URI:n,user:r}))))})),{}),signUpOrIn:Object.keys(U).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:V(((t,n)=>O(e.post(j(i.signUpOrIn,s),{externalId:t,URI:n}))))})),{}),update:{email:Y(((t,s,n,r)=>O(e.post(i.update.email,{externalId:t,email:s,URI:n},{token:r})))),phone:Object.keys(k).reduce(((t,s)=>Object.assign(Object.assign({},t),{[s]:X(((t,n,r,o)=>O(e.post(j(i.update.phone,s),{externalId:t,phone:n,URI:r},{token:o}))))})),{})},crossDevice:ee(e)}),se=A(z("code")),ne=e=>({exchange:se((t=>O(e.get(g,{queryParams:{code:t}}))))});var ie;!function(e){e.facebook="facebook",e.github="github",e.google="google",e.microsoft="microsoft",e.gitlab="gitlab",e.apple="apple"}(ie||(ie={}));const re=t=>Object.assign({start:Object.keys(ie).reduce(((s,n)=>Object.assign(Object.assign({},s),{[n]:(s,{redirect:i=!1}={})=>e(void 0,void 0,void 0,(function*(){const e=yield t.get(r.start,{queryParams:Object.assign({provider:n},s&&{redirectURL:s})});if(!i||!e.ok)return O(Promise.resolve(e));const{url:o}=yield e.json();window.location.href=o}))})),{})},ne(t)),oe=A(z("flowId")),ae=A(z("executionId"),z("stepId"),z("actionId")),de=e=>({start:oe((t=>O(e.post(u.start,{flowId:t})))),next:ae(((t,s,n,i)=>O(e.post(u.next,{executionId:t,stepId:s,actionId:n,input:i}))))}),pe=A(z("tenant")),ce=t=>Object.assign({start:pe(((s,n,{redirect:i=!1}={})=>e(void 0,void 0,void 0,(function*(){const e=yield t.get(o.start,{queryParams:{tenant:s,redirectURL:n}});if(!i||!e.ok)return O(Promise.resolve(e));const{url:r}=yield e.json();window.location.href=r}))))},ne(t)),ue=z("identifier"),ge=A(ue,z("code")),le=A(ue),he=A(ue),ve=e=>({signUp:le(((t,s)=>O(e.post(a.signUp,{externalId:t,user:s})))),verify:ge(((t,s)=>O(e.post(a.verify,{externalId:t,code:s})))),update:he(((t,s)=>O(e.post(a.update,{externalId:t},{token:s}))))}),me=z("identifier"),be=z("origin"),fe=A(me,be,z("name")),Ie=A(me,be),ye=A(me,be,z("token")),je=A(z("transactionId"),z("response")),Oe=e=>({signUp:{start:fe(((t,s,n)=>O(e.post(d.signUp.start,{user:{externalId:t,name:n},origin:s})))),finish:je(((t,s)=>O(e.post(d.signUp.finish,{transactionId:t,response:s}))))},signIn:{start:Ie(((t,s)=>O(e.post(d.signIn.start,{externalId:t,origin:s})))),finish:je(((t,s)=>O(e.post(d.signIn.finish,{transactionId:t,response:s}))))},add:{start:ye(((t,s,n)=>O(e.post(d.add.start,{externalId:t,origin:s},{token:n})))),finish:je(((t,s)=>O(e.post(d.add.finish,{transactionId:t,response:s}))))}}),ke=A(z("token"));var Ue,xe;const we=A([(Ue="projectId",xe=z("projectId"),w(((e,t)=>n=>P(...t).validate(s(n,e)))(Ue,xe))())])((({projectId:e,logger:t,baseUrl:s})=>{return n=I({baseUrl:s||"https://api.descope.com",projectId:e,logger:t}),{otp:G(n),magicLink:te(n),oauth:re(n),saml:ce(n),totp:ve(n),webauthn:Oe(n),flow:de(n),refresh:e=>O(n.get(p,{token:e})),logout:e=>O(n.get(c,{token:e})),isJwtExpired:ke(y),httpClient:n};var n}));we.DeliveryMethods=U;export{we as default};
+import e from"jwt-decode";import t from"lodash.get";var n={exchange:"/v1/auth/accesskey/exchange"},s={verify:"/v1/auth/otp/verify",signIn:"/v1/auth/otp/signin",signUp:"/v1/auth/otp/signup",update:{email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},signUpOrIn:"/v1/auth/otp/signup-in"},o={verify:"/v1/auth/magiclink/verify",signIn:"/v1/auth/magiclink/signin",signUp:"/v1/auth/magiclink/signup",update:{email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},signUpOrIn:"/v1/auth/magiclink/signup-in"},i={verify:"/v1/auth/enchantedlink/verify",signIn:"/v1/auth/enchantedlink/signin",signUp:"/v1/auth/enchantedlink/signup",session:"/v1/auth/enchantedlink/pending-session",update:{email:"/v1/auth/enchantedlink/update/email"},signUpOrIn:"/v1/auth/enchantedlink/signup-in"},a={start:"/v1/auth/oauth/authorize",exchange:"/v1/auth/oauth/exchange"},r={start:"/v1/auth/saml/authorize",exchange:"/v1/auth/saml/exchange"},u={verify:"/v1/auth/totp/verify",signUp:"/v1/auth/totp/signup",update:"/v1/auth/totp/update"},d={signUp:{start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},signIn:{start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},signUpOrIn:{start:"/v1/auth/webauthn/signup-in/start"},update:{start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"}},l="/v1/auth/refresh",c="/v1/auth/logout",p="/v1/auth/logoutall",g="/v1/auth/me",h={start:"/v1/flow/start",next:"/v1/flow/next"};const v=()=>{const e={};return{headers(t){const n="function"==typeof t.entries?Object.fromEntries(t.entries()):t;return e.Headers=JSON.stringify(n),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},build:()=>Object.keys(e).flatMap((t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[])).join("\n")}},f=(e,t)=>{const n=t||fetch;return n||null==e||e.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),e?async(...t)=>{if(!n)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");e.log((e=>v().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build())(t));const s=await n(...t);return e[s.ok?"log":"error"](await(async e=>{const t=await(e.clone?e.clone().text():e.text());return e.text=()=>Promise.resolve(t),e.json=()=>Promise.resolve(JSON.parse(t)),v().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).build()})(s)),s}:n};var m;!function(e){e.get="GET",e.delete="DELETE",e.post="POST",e.put="PUT"}(m||(m={}));const I=(...e)=>new Headers(e.reduce(((e,t)=>{const n=(e=>Array.isArray(e)?e:e instanceof Headers?Array.from(e.entries()):e?Object.entries(e):[])(t);return n.reduce(((t,[n,s])=>(e[n]=s,e)),e),e}),{})),b=e=>void 0===e?void 0:JSON.stringify(e),k=(e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}},y=({baseUrl:e,projectId:t,baseConfig:n,logger:s,hooks:o,cookiePolicy:i,fetch:a})=>{const r=f(s,a),u=async s=>{const a=(null==o?void 0:o.beforeRequest)?o.beforeRequest(s):s,{path:u,body:d,headers:l,queryParams:c,method:p,token:g}=a,h=await r((({path:e,baseUrl:t,queryParams:n})=>{const s=new URL(e,t);return n&&(s.search=new URLSearchParams(n).toString()),s})({path:u,baseUrl:e,queryParams:c}),{headers:I(k(t,g),{"x-descope-sdk-name":"core-js","x-descope-sdk-version":"1.0.0"},(null==n?void 0:n.baseHeaders)||{},l),method:p,body:b(d),credentials:i||"include"});return(null==o?void 0:o.afterRequest)&&await o.afterRequest(s,null==h?void 0:h.clone()),h};return{get:(e,{headers:t,queryParams:n,token:s}={})=>u({path:e,headers:t,queryParams:n,body:void 0,method:m.get,token:s}),post:(e,t,{headers:n,queryParams:s,token:o}={})=>u({path:e,headers:n,queryParams:s,body:t,method:m.post,token:o}),put:(e,t,{headers:n,queryParams:s,token:o}={})=>u({path:e,headers:n,queryParams:s,body:t,method:m.put,token:o}),delete:(e,t,{headers:n,queryParams:s,token:o}={})=>u({path:e,headers:n,queryParams:s,body:t,method:m.delete,token:o}),hooks:o}};var O={TOO_MANY_REQUESTS:429};function w(e,t,n){var s;let o=j(e);t&&(o=null===(s=null==o?void 0:o.tenants)||void 0===s?void 0:s[t]);const i=null==o?void 0:o[n];return Array.isArray(i)?i:[]}function j(t){if("string"!=typeof t||!t)throw new Error("Invalid token provided");return e(t)}function U(e){const{exp:t}=j(e);return(new Date).getTime()/1e3>t}function R(e,t){return w(e,t,"permissions")}function x(e,t){return w(e,t,"roles")}const P=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function q(e,t){var n;const s=await e,o={code:s.status,ok:s.ok,response:s},i=await s.clone().json();return s.ok?o.data=t?t(i):i:(o.error=i,s.status===O.TOO_MANY_REQUESTS&&Object.assign(o.error,{retryAfter:Number.parseInt(null===(n=s.headers)||void 0===n?void 0:n.get("retry-after"))||0})),o}const E=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),$=(...e)=>({validate:t=>(e.forEach((e=>{const n=e(t);if(n)throw new Error(n)})),!0)}),S=e=>t=>e.test(t),M=S(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),T=S(/^\+[1-9]{1}[0-9]{3,14}$/),A=E(M,'"{val}" is not a valid email'),L=E(T,'"{val}" is not a valid phone number'),z=E((H=1,e=>e.length>=H),"Minimum length is 1");var H;const J=E((e=>"string"==typeof e),"Input is not a string"),N=(...e)=>t=>(...n)=>(e.forEach(((e,t)=>$(...e).validate(n[t]))),t(...n)),C=e=>[J(`"${e}" must be a string`),z(`"${e}" must not be empty`)],_=e=>[J(`"${e}" must be a string`),A()],D=e=>[J(`"${e}" must be a string`),L()],Z=N(C("accessKey")),B=e=>({exchange:Z((t=>q(e.post(n.exchange,{},{token:t}))))});var F,K,Q,Y;!function(e){e.sms="sms",e.whatsapp="whatsapp"}(F||(F={})),function(e){e.email="email",e.sms="sms",e.whatsapp="whatsapp"}(K||(K={})),function(e){e.waiting="waiting",e.running="running",e.completed="completed",e.failed="failed"}(Q||(Q={})),function(e){e.signUp="signup",e.signIn="signin",e.verify="verify"}(Y||(Y={}));const G=C("loginId"),V=N(C("token")),W=N(G),X=N(C("pendingRef")),ee=N(G,_("email")),te=e=>({verify:V((t=>q(e.post(i.verify,{token:t})))),signIn:W(((t,n,s,o)=>q(e.post(P(i.signIn,K.email),{loginId:t,URI:n,loginOptions:s},{token:o})))),signUpOrIn:W(((t,n)=>q(e.post(P(i.signUpOrIn,K.email),{loginId:t,URI:n})))),signUp:W(((t,n,s)=>q(e.post(P(i.signUp,K.email),{loginId:t,URI:n,user:s})))),waitForSession:X(((t,n)=>new Promise((s=>{const{pollingIntervalMs:o,timeoutMs:a}=(({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||1e3,1e3),timeoutMs:Math.min(t||6e5,6e5)}))(n);let r;const u=setInterval((async()=>{const n=await e.post(i.session,{pendingRef:t});n.ok&&(clearInterval(u),r&&clearTimeout(r),s(q(Promise.resolve(n))))}),o);r=setTimeout((()=>{s({error:{errorDescription:`Session polling timeout exceeded: ${a}ms`,errorCode:"0"},ok:!1}),clearInterval(u)}),a)})))),update:{email:ee(((t,n,s,o)=>q(e.post(i.update.email,{loginId:t,email:n,URI:s},{token:o}))))}}),ne=N(C("flowId")),se=N(C("executionId"),C("stepId"),C("interactionId")),oe=e=>({start:ne(((t,n,s,o,i)=>q(e.post(h.start,{flowId:t,options:n,conditionInteractionId:s,interactionId:o,input:i})))),next:se(((t,n,s,o)=>q(e.post(h.next,{executionId:t,stepId:n,interactionId:s,input:o}))))}),ie=C("loginId"),ae=N(C("token")),re=N(ie),ue=N(ie,D("phone")),de=N(ie,_("email")),le=e=>({verify:ae((t=>q(e.post(o.verify,{token:t})))),signIn:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:re(((t,s,i,a)=>q(e.post(P(o.signIn,n),{loginId:t,URI:s,loginOptions:i},{token:a}))))})),{}),signUp:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:re(((t,s,i)=>q(e.post(P(o.signUp,n),{loginId:t,URI:s,user:i}))))})),{}),signUpOrIn:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:re(((t,s)=>q(e.post(P(o.signUpOrIn,n),{loginId:t,URI:s}))))})),{}),update:{email:de(((t,n,s,i)=>q(e.post(o.update.email,{loginId:t,email:n,URI:s},{token:i})))),phone:Object.keys(F).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:ue(((t,s,i,a)=>q(e.post(P(o.update.phone,n),{loginId:t,phone:s,URI:i},{token:a}))))})),{})}});var ce;!function(e){e.facebook="facebook",e.github="github",e.google="google",e.microsoft="microsoft",e.gitlab="gitlab",e.apple="apple",e.discord="discord",e.linkedin="linkedin"}(ce||(ce={}));const pe=N(C("code")),ge=e=>({start:Object.keys(ce).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:async(t,{redirect:s=!1}={},o,i)=>{const r=await e.post(a.start,o||{},{queryParams:Object.assign({provider:n},t&&{redirectURL:t}),token:i});if(!s||!r.ok)return q(Promise.resolve(r));const{url:u}=await r.json();window.location.href=u}})),{}),exchange:pe((t=>q(e.post(a.exchange,{code:t}))))});var he;!function(e){e.signUp="signup",e.signIn="signin",e.verify="verify",e.updatePhone="updatePhone"}(he||(he={}));const ve=C("loginId"),fe=N(ve,C("code")),me=N(ve),Ie=N(ve,D("phone")),be=N(ve,_("email")),ke=e=>({verify:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:fe(((t,o)=>q(e.post(P(s.verify,n),{code:o,loginId:t}))))})),{}),signIn:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:me(((t,o,i)=>q(e.post(P(s.signIn,n),{loginId:t,loginOptions:o},{token:i}))))})),{}),signUp:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:me(((t,o)=>q(e.post(P(s.signUp,n),{loginId:t,user:o}))))})),{}),signUpOrIn:Object.keys(K).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:me((t=>q(e.post(P(s.signUpOrIn,n),{loginId:t}))))})),{}),update:{email:be(((t,n,o)=>q(e.post(s.update.email,{loginId:t,email:n},{token:o})))),phone:Object.keys(F).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:Ie(((t,o,i)=>q(e.post(P(s.update.phone,n),{loginId:t,phone:o},{token:i}))))})),{})}}),ye=N(C("tenant")),Oe=N(C("code")),we=e=>({start:ye((async(t,n,{redirect:s=!1}={},o,i)=>{const a=await e.post(r.start,o||{},{queryParams:{tenant:t,redirectURL:n},token:i});if(!s||!a.ok)return q(Promise.resolve(a));const{url:u}=await a.json();window.location.href=u})),exchange:Oe((t=>q(e.post(r.exchange,{code:t}))))}),je=C("loginId"),Ue=N(je,C("code")),Re=N(je),xe=N(je),Pe=e=>({signUp:Re(((t,n)=>q(e.post(u.signUp,{loginId:t,user:n})))),verify:Ue(((t,n,s,o)=>q(e.post(u.verify,{loginId:t,code:n,loginOptions:s},{token:o})))),update:xe(((t,n)=>q(e.post(u.update,{loginId:t},{token:n}))))}),qe=[J(`"${"loginId"}" must be a string`)];const Ee=C("loginId"),$e=C("origin"),Se=N(Ee,$e,C("name")),Me=N(Ee,$e),Te=N(qe,$e),Ae=N(Ee,$e,C("token")),Le=N(C("transactionId"),C("response")),ze=e=>({signUp:{start:Se(((t,n,s)=>q(e.post(d.signUp.start,{user:{loginId:t,name:s},origin:n})))),finish:Le(((t,n)=>q(e.post(d.signUp.finish,{transactionId:t,response:n}))))},signIn:{start:Te(((t,n,s,o)=>q(e.post(d.signIn.start,{loginId:t,origin:n,loginOptions:s},{token:o})))),finish:Le(((t,n)=>q(e.post(d.signIn.finish,{transactionId:t,response:n}))))},signUpOrIn:{start:Me(((t,n)=>q(e.post(d.signUpOrIn.start,{loginId:t,origin:n}))))},update:{start:Ae(((t,n,s)=>q(e.post(d.update.start,{loginId:t,origin:n},{token:s})))),finish:Le(((t,n)=>q(e.post(d.update.finish,{transactionId:t,response:n}))))}}),He=N(C("token"));var Je,Ne;var Ce=N([(Je="projectId",Ne=C("projectId"),E(((e,n)=>s=>$(...n).validate(t(s,e)))(Je,Ne))())])((e=>t=>{var n,s;const o=[].concat((null===(n=t.hooks)||void 0===n?void 0:n.beforeRequest)||[]),i=[].concat((null===(s=t.hooks)||void 0===s?void 0:s.afterRequest)||[]);return e(Object.assign(Object.assign({},t),{hooks:{beforeRequest:e=>null==o?void 0:o.reduce(((e,t)=>t(e)),e),afterRequest:async(e,n)=>{(await Promise.allSettled(null==i?void 0:i.map((t=>t(e,null==n?void 0:n.clone()))))).forEach((e=>{var n;return"rejected"===e.status&&(null===(n=t.logger)||void 0===n?void 0:n.error(e.reason))}))}}}))})((({projectId:e,logger:t,baseUrl:n,hooks:s,cookiePolicy:o,baseHeaders:i={},fetch:a})=>{return r=y({baseUrl:n||"https://api.descope.com",projectId:e,logger:t,hooks:s,cookiePolicy:o,baseConfig:{baseHeaders:i},fetch:a}),{accessKey:B(r),otp:ke(r),magicLink:le(r),enchantedLink:te(r),oauth:ge(r),saml:we(r),totp:Pe(r),webauthn:ze(r),flow:oe(r),refresh:e=>q(r.post(l,{},{token:e})),logout:e=>q(r.post(c,{},{token:e})),logoutAll:e=>q(r.post(p,{},{token:e})),me:e=>q(r.get(g,{token:e})),isJwtExpired:He(U),getJwtPermissions:He(R),getJwtRoles:He(x),httpClient:r};var r})));const _e=(e,t,n)=>(t.forEach((t=>{const s=t.split(".");let o=s.shift(),i=e;for(;s.length>0;){if(i=i[o],!o||!i)throw Error(`Invalid path "${t}", "${o}" is missing or has no value`);o=s.shift()}if("function"!=typeof i[o])throw Error(`"${t}" is not a function`);const a=i[o];i[o]=n(a)})),e),De=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,s)=>{var o;return n[s]=[].concat((null===(o=e.hooks)||void 0===o?void 0:o[s])||[]).concat((null==t?void 0:t[s])||[]),n}),null!==(n=e.hooks)&&void 0!==n?n:e.hooks={}),e};var Ze=Object.assign(Ce,{DeliveryMethods:K});export{O as HttpStatusCodes,De as addHooksToConfig,Ze as default,q as transformResponse,_e as wrapWith};
 //# sourceMappingURL=index.esm.js.map