@descope/core-js-sdk 2.59.1 → 2.61.0

package/dist/index.d.ts

@@ -36,6 +36,8 @@ type NativeOptions = {
     oauthProvider?: string;
     /** An override for web OAuth that sets the address to redirect to after authentication succeeds at the OAuth provider website */
     oauthRedirect?: string;
+    /** An override for external authentication that sets the address to redirect to after authentication succeeds at the external auth provider */
+    externalAuthRedirect?: string;
 };
 type AuthMethod = 'magiclink' | 'enchantedlink' | 'otp' | 'totp' | 'oauth' | 'saml' | 'webauthn';
 type SdkFn$1 = (...args: any[]) => Promise<SdkResponse<ResponseData>>;
@@ -104,6 +106,7 @@ type LoginOptions = {
     customClaims?: Record<string, any>;
     templateId?: string;
     templateOptions?: TemplateOptions;
+    tenantId?: string;
 };
 /** Access key login options to be added to the different authentication methods */
 type AccessKeyLoginOptions = {
@@ -115,6 +118,7 @@ type SignUpOptions = {
     customClaims?: Record<string, any>;
     templateId?: string;
     templateOptions?: TemplateOptions;
+    tenantId?: string;
 };
 type Claims = Record<string, any>;
 /** Authentication info result from the various JWT validations  */
@@ -661,7 +665,7 @@ declare const _default: ((config: {
     };
     webauthn: {
         signUp: {
-            start: (loginId: string, origin: string, name: string, passkeyOptions?: PasskeyOptions) => Promise<SdkResponse<WebAuthnStartResponse>>;
+            start: (loginId: string, origin: string, name: string, passkeyOptions?: PasskeyOptions, loginOptions?: LoginOptions) => Promise<SdkResponse<WebAuthnStartResponse>>;
             finish: (transactionId: string, response: string) => Promise<SdkResponse<JWTResponse>>;
         };
         signIn: {
@@ -669,7 +673,7 @@ declare const _default: ((config: {
             finish: (transactionId: string, response: string) => Promise<SdkResponse<JWTResponse>>;
         };
         signUpOrIn: {
-            start: (loginId: string, origin: string, passkeyOptions?: PasskeyOptions) => Promise<SdkResponse<WebAuthnStartResponse>>;
+            start: (loginId: string, origin: string, passkeyOptions?: PasskeyOptions, loginOptions?: LoginOptions) => Promise<SdkResponse<WebAuthnStartResponse>>;
         };
         update: {
             start: (loginId: string, origin: string, token?: string, passkeyOptions?: PasskeyOptions) => Promise<SdkResponse<WebAuthnStartResponse>>;

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import{jwtDecode as e}from"jwt-decode";import{__rest as t}from"tslib";var n={accessKey:{exchange:"/v1/auth/accesskey/exchange"},otp:{verify:"/v1/auth/otp/verify",signIn:"/v1/auth/otp/signin",signUp:"/v1/auth/otp/signup",update:{email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},signUpOrIn:"/v1/auth/otp/signup-in"},magicLink:{verify:"/v1/auth/magiclink/verify",signIn:"/v1/auth/magiclink/signin",signUp:"/v1/auth/magiclink/signup",update:{email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},signUpOrIn:"/v1/auth/magiclink/signup-in"},enchantedLink:{verify:"/v1/auth/enchantedlink/verify",signIn:"/v1/auth/enchantedlink/signin",signUp:"/v1/auth/enchantedlink/signup",session:"/v1/auth/enchantedlink/pending-session",update:{email:"/v1/auth/enchantedlink/update/email"},signUpOrIn:"/v1/auth/enchantedlink/signup-in"},oauth:{start:"/v1/auth/oauth/authorize",exchange:"/v1/auth/oauth/exchange",startNative:"v1/auth/oauth/native/start",finishNative:"v1/auth/oauth/native/finish",oneTap:{getOneTapClientId:"/v1/auth/onetap/clientid/{provider}",exchangeOneTapIDToken:"/v1/auth/onetap/idtoken/exchange",verifyOneTapIDToken:"/v1/auth/onetap/idtoken/verify"}},outbound:{connect:"/v1/outbound/oauth/connect"},saml:{start:"/v1/auth/saml/authorize",exchange:"/v1/auth/saml/exchange"},totp:{verify:"/v1/auth/totp/verify",signUp:"/v1/auth/totp/signup",update:"/v1/auth/totp/update"},notp:{signIn:"/v1/auth/notp/whatsapp/signin",signUp:"/v1/auth/notp/whatsapp/signup",signUpOrIn:"/v1/auth/notp/whatsapp/signup-in",session:"/v1/auth/notp/pending-session"},webauthn:{signUp:{start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},signIn:{start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},signUpOrIn:{start:"/v1/auth/webauthn/signup-in/start"},update:{start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"}},password:{signUp:"/v1/auth/password/signup",signIn:"/v1/auth/password/signin",sendReset:"/v1/auth/password/reset",update:"/v1/auth/password/update",replace:"/v1/auth/password/replace",policy:"/v1/auth/password/policy"},refresh:"/v1/auth/refresh",tryRefresh:"/v1/auth/try-refresh",selectTenant:"/v1/auth/tenant/select",logout:"/v1/auth/logout",logoutAll:"/v1/auth/logoutall",me:"/v1/auth/me",myTenants:"/v1/auth/me/tenants",history:"/v1/auth/me/history",flow:{start:"/v1/flow/start",next:"/v1/flow/next"}};const o="<region>",s=`https://api.${o}descope.com`,r=1e3,i=6e5,a="dct",d=()=>{const e={};return{headers(t){const n="function"==typeof t.entries?Object.fromEntries(t.entries()):t;return e.Headers=JSON.stringify(n),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},retries(t){return e.Retries=t,this},build:()=>Object.keys(e).flatMap((t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[])).join("\n")}},p=[503,521,522,524,530],u=[100,5e3,5e3],l=e=>new Promise((t=>setTimeout(t,e))),c=e=>async(...t)=>{let n=await e(...t),o=0;for(;p.includes(n.status)&&o<u.length;)await l(u[o]),n=await e(...t),o++;o>0&&(n.retries=o);const s=await n.text();return n.text=()=>Promise.resolve(s),n.json=()=>Promise.resolve(JSON.parse(s)),n.clone=()=>n,n},g=(e,t)=>{const n=t||fetch;return n||null==e||e.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),e?async(...t)=>{if(!n)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");e.log((e=>d().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build())(t));const o=await c(n)(...t);return e[o.ok?"log":"error"](await(async e=>{const t=await e.text();return d().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).retries(e.retries).build()})(o)),o}:c(n)};let h;const v=()=>{if(h)return h;const e=new Date,t=`${e.getUTCFullYear().toString()}-${(e.getUTCMonth()+1).toString().padStart(2,"0")}-${e.getUTCDate().toString().padStart(2,"0")}-${e.getUTCHours().toString().padStart(2,"0")}:${e.getUTCMinutes().toString().padStart(2,"0")}:${e.getUTCSeconds().toString().padStart(2,"0")}:${e.getUTCMilliseconds().toString()}`,n=Math.floor(1e3+9e3*Math.random());return h=`${t}-${n}`,h};var I;!function(e){e.get="GET",e.delete="DELETE",e.post="POST",e.put="PUT",e.patch="PATCH"}(I||(I={}));const f=({path:e,baseUrl:t,queryParams:n,projectId:s})=>{const r=s.slice(1,-27);t=t.replace(o,r?r+".":"");let i=e?`${t.replace(/\/$/,"")}/${null==e?void 0:e.replace(/^\//,"")}`:t;if(n){const e=Object.keys(n);e.forEach(((t,o)=>{i=`${i}${0===o?"?":""}${t}=${encodeURIComponent(n[t])}${o===e.length-1?"":"&"}`}))}return i},m=(...e)=>new Headers(e.reduce(((e,t)=>((e=>Array.isArray(e)?e:e instanceof Headers?Array.from(e.entries()):e?Object.entries(e):[])(t).forEach((([t,n])=>{e[t]="function"==typeof n?n():n})),e)),{})),b={"Content-Type":"application/json"},k=(e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}},y=(e,t)=>{const n={"x-descope-sdk-session-id":v(),"x-descope-sdk-name":"core-js","x-descope-sdk-version":"2.59.1","x-descope-project-id":e};return t&&(n["x-descope-refresh-cookie-name"]=t),n},O=e=>{try{e=JSON.parse(e)}catch(e){return!1}return"object"==typeof e&&null!==e};var w=(e=>t=>{var n;return e(Object.assign(Object.assign({},t),{hooks:{beforeRequest:e=>{var n;const o=[].concat((null===(n=t.hooks)||void 0===n?void 0:n.beforeRequest)||[]);return null==o?void 0:o.reduce(((e,t)=>t(e)),e)},afterRequest:async(e,n)=>{var o;const s=[].concat((null===(o=t.hooks)||void 0===o?void 0:o.afterRequest)||[]);if(0==s.length)return;(await Promise.allSettled(null==s?void 0:s.map((t=>t(e,null==n?void 0:n.clone()))))).forEach((e=>{var n;return"rejected"===e.status&&(null===(n=t.logger)||void 0===n?void 0:n.error(e.reason))}))},transformResponse:null===(n=t.hooks)||void 0===n?void 0:n.transformResponse}}))})((({baseUrl:e,projectId:t,baseConfig:n,refreshCookieName:o,logger:r,hooks:i,cookiePolicy:a,fetch:d})=>{const p=e||s,u=g(r,d),l=async e=>{var s;const r=(null==i?void 0:i.beforeRequest)?i.beforeRequest(e):e,{path:d,body:l,headers:c,queryParams:g,method:h,token:v}=r,I=(e=>void 0===e?void 0:JSON.stringify(e))(l),w={headers:m(k(t,v),y(t,o),(null==n?void 0:n.baseHeaders)||{},O(I)?b:{},c),method:h,body:I};null!==a&&(w.credentials=a||"include");const j=await u(f({path:d,baseUrl:p,queryParams:g,projectId:t}),w);if((null==i?void 0:i.afterRequest)&&await i.afterRequest(e,null==j?void 0:j.clone()),null==i?void 0:i.transformResponse){const e=await j.json(),t=(U=(null===(s=j.headers)||void 0===s?void 0:s.get("set-cookie"))||"",Object.fromEntries(function(e){if(!e)return[];const t=[];let n=0;function o(){for(;n<e.length&&/\s/.test(e.charAt(n));)n+=1;return n<e.length}function s(){const t=e.charAt(n);return"="!==t&&";"!==t&&","!==t}for(;n<e.length;){const r=n;let i,a,d=!1;for(;o();)if(","===e.charAt(n)){for(i=n,n+=1,o(),a=n;n<e.length&&s();)n+=1;if(n<e.length&&"="===e.charAt(n)){d=!0,n=a,t.push(e.substring(r,i));break}n=i+1}else n+=1;(!d||n>=e.length)&&t.push(e.substring(r,e.length))}return t}(U).map((e=>{const t=e.split(";")[0],n=t.indexOf("=");return n<1?null:[t.substring(0,n).trim(),t.substring(n+1).trim()]})).filter(Boolean))),n=Object.assign(Object.assign({},j),{json:()=>Promise.resolve(e),cookies:t});return n.clone=()=>n,i.transformResponse(n)}var U;return j};return{get:(e,{headers:t,queryParams:n,token:o}={})=>l({path:e,headers:t,queryParams:n,body:void 0,method:I.get,token:o}),post:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.post,token:s}),patch:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.patch,token:s}),put:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.put,token:s}),delete:(e,{headers:t,queryParams:n,token:o}={})=>l({path:e,headers:t,queryParams:n,body:void 0,method:I.delete,token:o}),hooks:i,buildUrl:(e,n)=>f({projectId:t,baseUrl:p,path:e,queryParams:n})}})),j={TOO_MANY_REQUESTS:429};function U(e,t,n){var o;let s=T(e);if(t){if(!(null==s?void 0:s.tenants)&&(null==s?void 0:s[a])===t)return(null==s?void 0:s[n])||[];s=null===(o=null==s?void 0:s.tenants)||void 0===o?void 0:o[t]}const r=null==s?void 0:s[n];return Array.isArray(r)?r:[]}function T(t){if("string"!=typeof t||!t)throw new Error("Invalid token provided");return e(t)}function R(e){const{exp:t}=T(e);return(new Date).getTime()/1e3>t}function x(e){let t=T(e);const n=Object.keys(null==t?void 0:t.tenants);return Array.isArray(n)?n:[]}function P(e,t){return U(e,t,"permissions")}function $(e,t){return U(e,t,"roles")}const q=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function S(e,t){var n;const o=await e,s={code:o.status,ok:o.ok,response:o},r=await o.clone().json();return o.ok?s.data=t?t(r):r:(s.error=r,o.status===j.TOO_MANY_REQUESTS&&Object.assign(s.error,{retryAfter:Number.parseInt(null===(n=o.headers)||void 0===n?void 0:n.get("retry-after"))||0})),s}function A(e){var t;return(null===(t=T(e))||void 0===t?void 0:t[a])||""}const C=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),E=(e,t)=>(n=t)=>t=>{const o=e.filter((e=>e(t)));return!(o.length<e.length)&&(n?n.replace("{val}",t):o.join(" OR "))},L=(...e)=>({validate:t=>(e.forEach((e=>{const n=e(t);if(n)throw new Error(n)})),!0)}),M=e=>t=>e.test(t),N=M(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),D=M(/^\+[1-9]{1}[0-9]{3,14}$/),H=(e,t)=>n=>L(...t).validate(((e,t,n)=>{const o=(Array.isArray(t)?t.join("."):String(t)).replace(/\[\\?("|')?(\w|d)+\\?("|')?\]/g,((e,t,n)=>"."+n)).split("."),s=o.length;let r=0,i=e===Object(e)?e:void 0;for(;null!=i&&r<s;)i=i[o[r++]];return r&&r===s&&void 0!==i?i:n})(n,e)),J=C(N,'"{val}" is not a valid email'),z=C(D,'"{val}" is not a valid phone number'),_=C((F=1,e=>e.length>=F),"Minimum length is 1");var F;const K=C((e=>"string"==typeof e),"Input is not a string"),B=C((e=>Array.isArray(e)),"Input is not an array"),V=C((e=>"boolean"==typeof e),"Input is not a boolean"),Y=C((e=>void 0===e),"Input is defined"),Z=E([K(),Y()],"Input is not a string or undefined"),Q=E([B(),V()],"Input is not an array or boolean"),G=(...e)=>t=>(...n)=>(e.forEach(((e,t)=>L(...e).validate(n[t]))),t(...n)),W=e=>[K(`"${e}" must be a string`)],X=e=>[Z(`"${e}" must be string or undefined`)],ee=e=>[K(`"${e}" must be a string`),_(`"${e}" must not be empty`)],te=e=>[K(`"${e}" must be a string`),J()],ne=e=>[K(`"${e}" must be a string`),z()],oe=G(ee("accessKey")),se=e=>({exchange:oe(((t,o)=>S(e.post(n.accessKey.exchange,{loginOptions:o},{token:t}))))}),re=(e,t,n)=>(t.forEach((t=>{const o=t.split(".");let s=o.shift(),r=e;for(;o.length>0;){if(r=r[s],!s||!r)throw Error(`Invalid path "${t}", "${s}" is missing or has no value`);s=o.shift()}if("function"!=typeof r[s])throw Error(`"${t}" is not a function`);const i=r[s];r[s]=n(i)})),e),ie=({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||r,r),timeoutMs:Math.min(t||i,i)});var ae,de;!function(e){e.sms="sms",e.voice="voice",e.whatsapp="whatsapp",e.im="im"}(ae||(ae={})),function(e){e.email="email"}(de||(de={}));const pe=Object.assign(Object.assign({},ae),de);var ue;!function(e){e.waiting="waiting",e.running="running",e.completed="completed",e.failed="failed"}(ue||(ue={}));const le=ee("loginId"),ce=G(ee("token")),ge=G(le),he=G(ee("pendingRef")),ve=G(le,te("email")),Ie=e=>({verify:ce((t=>S(e.post(n.enchantedLink.verify,{token:t})))),signIn:ge(((o,s,r={},i)=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(q(n.enchantedLink.signIn,pe.email),{loginId:o,URI:s,loginOptions:d,providerId:a},{token:i}))})),signUpOrIn:ge(((o,s,r={})=>{var{providerId:i}=r,a=t(r,["providerId"]);return S(e.post(q(n.enchantedLink.signUpOrIn,pe.email),{loginId:o,URI:s,loginOptions:a,providerId:i}))})),signUp:ge(((o,s,r,i={})=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(q(n.enchantedLink.signUp,pe.email),{loginId:o,URI:s,user:r,loginOptions:d,providerId:a}))})),waitForSession:he(((t,o)=>new Promise((s=>{const{pollingIntervalMs:r,timeoutMs:i}=ie(o);let a;const d=setInterval((async()=>{const o=await e.post(n.enchantedLink.session,{pendingRef:t});o.ok&&(clearInterval(d),a&&clearTimeout(a),s(S(Promise.resolve(o))))}),r);a=setTimeout((()=>{s({error:{errorDescription:`Session polling timeout exceeded: ${i}ms`,errorCode:"0"},ok:!1}),clearInterval(d)}),i)})))),update:{email:ve(((t,o,s,r,i)=>S(e.post(n.enchantedLink.update.email,Object.assign({loginId:t,email:o,URI:s},i),{token:r}))))}}),fe=G(ee("flowId")),me=G(ee("executionId"),ee("stepId"),ee("interactionId")),be=e=>({start:fe(((t,o,s,r,i,a,d,p=!1)=>S(e.post(n.flow.start,{flowId:t,options:o,conditionInteractionId:s,interactionId:r,componentsVersion:i,flowVersions:a,input:d,isCustomScreen:p})))),next:me(((t,o,s,r,i,a,d=!1)=>S(e.post(n.flow.next,{executionId:t,stepId:o,interactionId:s,version:r,componentsVersion:i,input:a,isCustomScreen:d}))))}),ke=ee("loginId"),ye=G(ee("token")),Oe=G(ke),we=G(ke,ne("phone")),je=G(ke,te("email")),Ue=Object.keys(pe).filter((e=>e!==ae.voice&&e!==ae.im)),Te=e=>({verify:ye((t=>S(e.post(n.magicLink.verify,{token:t})))),signIn:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,r,i={},a)=>{var{providerId:d}=i,p=t(i,["providerId"]);return S(e.post(q(n.magicLink.signIn,s),{loginId:o,URI:r,loginOptions:p,providerId:d},{token:a}))}))})),{}),signUp:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,r,i,a={})=>{var{providerId:d}=a,p=t(a,["providerId"]);return S(e.post(q(n.magicLink.signUp,s),{loginId:o,URI:r,user:i,loginOptions:p,providerId:d}))}))})),{}),signUpOrIn:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,r,i={})=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(q(n.magicLink.signUpOrIn,s),{loginId:o,URI:r,loginOptions:d,providerId:a}))}))})),{}),update:{email:je(((t,o,s,r,i)=>S(e.post(n.magicLink.update.email,Object.assign({loginId:t,email:o,URI:s},i),{token:r})))),phone:Object.keys(ae).filter((e=>e!==ae.voice)).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:we(((t,s,r,i,a)=>S(e.post(q(n.magicLink.update.phone,o),Object.assign({loginId:t,phone:s,URI:r},a),{token:i}))))})),{})}});var Re;!function(e){e.facebook="facebook",e.github="github",e.google="google",e.microsoft="microsoft",e.gitlab="gitlab",e.apple="apple",e.discord="discord",e.linkedin="linkedin",e.slack="slack"}(Re||(Re={}));const xe=G(ee("code")),Pe=e=>({start:Object.assign(((t,o,s,r,i)=>S(e.post(n.oauth.start,s||{},{queryParams:Object.assign(Object.assign({provider:t},o&&{redirectURL:o}),i&&{loginHint:i}),token:r}))),Object.keys(Re).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:(t,s,r,i)=>S(e.post(n.oauth.start,s||{},{queryParams:Object.assign(Object.assign({provider:o},t&&{redirectURL:t}),i&&{loginHint:i}),token:r}))})),{})),exchange:xe((t=>S(e.post(n.oauth.exchange,{code:t})))),startNative:(t,o,s)=>S(e.post(n.oauth.startNative,{provider:t,loginOptions:o,implicit:s})),finishNative:(t,o,s,r,i)=>S(e.post(n.oauth.finishNative,{provider:t,stateId:o,user:s,code:r,idToken:i})),getOneTapClientId:t=>S(e.get(n.oauth.oneTap.getOneTapClientId.replace("{provider}",t))),verifyOneTapIDToken:(t,o,s,r)=>S(e.post(n.oauth.oneTap.verifyOneTapIDToken,{provider:t,idToken:o,nonce:s,loginOptions:r})),exchangeOneTapIDToken:(t,o,s,r)=>S(e.post(n.oauth.oneTap.exchangeOneTapIDToken,{provider:t,idToken:o,nonce:s,loginOptions:r}))}),$e=ee("appId"),qe=G($e),Se=e=>({connect:qe(((t,o,s)=>{const r=null==o?void 0:o.tenantId,i=null==o?void 0:o.tenantLevel;return null==o||delete o.tenantId,null==o||delete o.tenantLevel,S(e.post(n.outbound.connect,{appId:t,tenantId:r,tenantLevel:i,options:o},{token:s}))}))}),Ae=ee("loginId"),Ce=G(Ae,ee("code")),Ee=G(Ae),Le=G(Ae,ne("phone")),Me=G(Ae,te("email")),Ne=e=>({verify:Object.keys(pe).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:Ce(((t,s)=>S(e.post(q(n.otp.verify,o),{code:s,loginId:t}))))})),{}),signIn:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,r={},i)=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(q(n.otp.signIn,s),{loginId:o,loginOptions:d,providerId:a},{token:i}))}))})),{}),signUp:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,r,i={})=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(q(n.otp.signUp,s),{loginId:o,user:r,loginOptions:d,providerId:a}))}))})),{}),signUpOrIn:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,r={})=>{var{providerId:i}=r,a=t(r,["providerId"]);return S(e.post(q(n.otp.signUpOrIn,s),{loginId:o,loginOptions:a,providerId:i}))}))})),{}),update:{email:Me(((t,o,s,r)=>S(e.post(n.otp.update.email,Object.assign({loginId:t,email:o},r),{token:s})))),phone:Object.keys(ae).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:Le(((t,s,r,i)=>S(e.post(q(n.otp.update.phone,o),Object.assign({loginId:t,phone:s},i),{token:r}))))})),{})}}),De=G(ee("tenant")),He=G(ee("code")),Je=e=>({start:De(((t,o,s,r,i,a,d,p)=>S(e.post(n.saml.start,s||{},Object.assign({queryParams:Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({tenant:t},o&&{redirectURL:o}),i&&{ssoId:i}),a&&{forceAuthn:"true"}),d&&{loginHint:d}),p&&{initiatedEmail:t})},r&&{token:r}))))),exchange:He((t=>S(e.post(n.saml.exchange,{code:t}))))}),ze=ee("loginId"),_e=G(ze,ee("code")),Fe=G(ze),Ke=G(ze),Be=e=>({signUp:Fe(((t,o)=>S(e.post(n.totp.signUp,{loginId:t,user:o})))),verify:_e(((t,o,s,r)=>S(e.post(n.totp.verify,{loginId:t,code:o,loginOptions:s},{token:r})))),update:Ke(((t,o)=>S(e.post(n.totp.update,{loginId:t},{token:o}))))}),Ve=ee("loginId"),Ye=ee("newPassword"),Ze=G(Ve,ee("password")),Qe=G(Ve),Ge=G(Ve,Ye),We=G(Ve,ee("oldPassword"),Ye),Xe=e=>({signUp:Ze(((o,s,r,i={})=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(n.password.signUp,{loginId:o,password:s,user:r,loginOptions:d,providerId:a}))})),signIn:Ze(((o,s,r={})=>{var{providerId:i}=r,a=t(r,["providerId"]);return S(e.post(n.password.signIn,{loginId:o,password:s,loginOptions:a,providerId:i}))})),sendReset:Qe(((t,o,s)=>S(e.post(n.password.sendReset,{loginId:t,redirectUrl:o,templateOptions:s})))),update:Ge(((t,o,s)=>S(e.post(n.password.update,{loginId:t,newPassword:o},{token:s})))),replace:We(((t,o,s)=>S(e.post(n.password.replace,{loginId:t,oldPassword:o,newPassword:s})))),policy:()=>S(e.get(n.password.policy))}),et=W("loginId"),tt=ee("loginId"),nt=ee("origin"),ot=G(tt,nt,ee("name")),st=G(tt,nt),rt=G(et,nt),it=G(tt,nt,X("token")),at=G(ee("transactionId"),ee("response")),dt=e=>({signUp:{start:ot(((t,o,s,r)=>S(e.post(n.webauthn.signUp.start,{user:{loginId:t,name:s},origin:o,passkeyOptions:r})))),finish:at(((t,o)=>S(e.post(n.webauthn.signUp.finish,{transactionId:t,response:o}))))},signIn:{start:rt(((t,o,s,r,i)=>S(e.post(n.webauthn.signIn.start,{loginId:t,origin:o,loginOptions:s,passkeyOptions:i},{token:r})))),finish:at(((t,o)=>S(e.post(n.webauthn.signIn.finish,{transactionId:t,response:o}))))},signUpOrIn:{start:st(((t,o,s)=>S(e.post(n.webauthn.signUpOrIn.start,{loginId:t,origin:o,passkeyOptions:s}))))},update:{start:it(((t,o,s,r)=>S(e.post(n.webauthn.update.start,{loginId:t,origin:o,passkeyOptions:r},{token:s})))),finish:at(((t,o)=>S(e.post(n.webauthn.update.finish,{transactionId:t,response:o}))))}}),pt=W("loginId"),ut=G(pt),lt=G(ee("pendingRef")),ct=e=>({signUpOrIn:ut(((o,s={})=>{var{providerId:r}=s,i=t(s,["providerId"]);return S(e.post(n.notp.signUpOrIn,{loginId:o,loginOptions:i,providerId:r}))})),signUp:ut(((o,s,r={})=>{var{providerId:i}=r,a=t(r,["providerId"]);return S(e.post(n.notp.signUp,{loginId:o,user:s,providerId:i,loginOptions:a}))})),signIn:ut(((o,s={},r)=>{var{providerId:i}=s,a=t(s,["providerId"]);return S(e.post(n.notp.signIn,{loginId:o,loginOptions:a,providerId:i},{token:r}))})),waitForSession:lt(((t,o)=>new Promise((s=>{const{pollingIntervalMs:r,timeoutMs:i}=ie(o);let a;const d=setInterval((async()=>{const o=await e.post(n.notp.session,{pendingRef:t});o.ok&&(clearInterval(d),a&&clearTimeout(a),s(S(Promise.resolve(o))))}),r);a=setTimeout((()=>{s({error:{errorDescription:`Session polling timeout exceeded: ${i}ms`,errorCode:"0"},ok:!1}),clearInterval(d)}),i)}))))}),gt=G(ee("token")),ht=G(X("token"));var vt,It,ft=G([(vt="projectId",It=ee("projectId"),C(H(vt,It))())])((e=>{const{projectId:t,logger:o,baseUrl:s,cookiePolicy:r,baseHeaders:i={},refreshCookieName:a,fetch:d}=e;return p=w({baseUrl:s,projectId:t,logger:o,hooks:{get beforeRequest(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.beforeRequest},get afterRequest(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.afterRequest},get transformResponse(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.transformResponse}},cookiePolicy:r,baseConfig:{baseHeaders:i},refreshCookieName:a,fetch:d}),{accessKey:se(p),otp:Ne(p),magicLink:Te(p),enchantedLink:Ie(p),oauth:Pe(p),outbound:Se(p),saml:Je(p),totp:Be(p),notp:ct(p),webauthn:dt(p),password:Xe(p),flow:be(p),refresh:ht(((e,t,o,s)=>{const r={};o&&(r.externalToken=o);const i=s?n.tryRefresh:n.refresh;return S(p.post(i,r,{token:e,queryParams:t}))})),selectTenant:G([K("tenantId")],[Z('"token" must be string or undefined')])(((e,t)=>S(p.post(n.selectTenant,{tenant:e},{token:t})))),logout:ht((e=>S(p.post(n.logout,{},{token:e})))),logoutAll:ht((e=>S(p.post(n.logoutAll,{},{token:e})))),me:ht((e=>S(p.get(n.me,{token:e})))),myTenants:G([Q('"tenants" must a string array or a boolean')],[Z('"token" must be string or undefined')])(((e,t)=>{const o={};return"boolean"==typeof e?o.dct=e:o.ids=e,S(p.post(n.myTenants,o,{token:t}))})),history:ht((e=>S(p.get(n.history,{token:e})))),isJwtExpired:gt(R),getTenants:gt(x),getJwtPermissions:gt(P),getJwtRoles:gt($),getCurrentTenant:gt(A),httpClient:p};var p})),mt=Object.assign(ft,{DeliveryMethods:pe});export{j as HttpStatusCodes,w as createHttpClient,mt as default,ie as normalizeWaitForSessionConfig,S as transformResponse,re as wrapWith};
+import{jwtDecode as e}from"jwt-decode";import{__rest as t}from"tslib";var n={accessKey:{exchange:"/v1/auth/accesskey/exchange"},otp:{verify:"/v1/auth/otp/verify",signIn:"/v1/auth/otp/signin",signUp:"/v1/auth/otp/signup",update:{email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},signUpOrIn:"/v1/auth/otp/signup-in"},magicLink:{verify:"/v1/auth/magiclink/verify",signIn:"/v1/auth/magiclink/signin",signUp:"/v1/auth/magiclink/signup",update:{email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},signUpOrIn:"/v1/auth/magiclink/signup-in"},enchantedLink:{verify:"/v1/auth/enchantedlink/verify",signIn:"/v1/auth/enchantedlink/signin",signUp:"/v1/auth/enchantedlink/signup",session:"/v1/auth/enchantedlink/pending-session",update:{email:"/v1/auth/enchantedlink/update/email"},signUpOrIn:"/v1/auth/enchantedlink/signup-in"},oauth:{start:"/v1/auth/oauth/authorize",exchange:"/v1/auth/oauth/exchange",startNative:"v1/auth/oauth/native/start",finishNative:"v1/auth/oauth/native/finish",oneTap:{getOneTapClientId:"/v1/auth/onetap/clientid/{provider}",exchangeOneTapIDToken:"/v1/auth/onetap/idtoken/exchange",verifyOneTapIDToken:"/v1/auth/onetap/idtoken/verify"}},outbound:{connect:"/v1/outbound/oauth/connect"},saml:{start:"/v1/auth/saml/authorize",exchange:"/v1/auth/saml/exchange"},totp:{verify:"/v1/auth/totp/verify",signUp:"/v1/auth/totp/signup",update:"/v1/auth/totp/update"},notp:{signIn:"/v1/auth/notp/whatsapp/signin",signUp:"/v1/auth/notp/whatsapp/signup",signUpOrIn:"/v1/auth/notp/whatsapp/signup-in",session:"/v1/auth/notp/pending-session"},webauthn:{signUp:{start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},signIn:{start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},signUpOrIn:{start:"/v1/auth/webauthn/signup-in/start"},update:{start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"}},password:{signUp:"/v1/auth/password/signup",signIn:"/v1/auth/password/signin",sendReset:"/v1/auth/password/reset",update:"/v1/auth/password/update",replace:"/v1/auth/password/replace",policy:"/v1/auth/password/policy"},refresh:"/v1/auth/refresh",tryRefresh:"/v1/auth/try-refresh",selectTenant:"/v1/auth/tenant/select",logout:"/v1/auth/logout",logoutAll:"/v1/auth/logoutall",me:"/v1/auth/me",myTenants:"/v1/auth/me/tenants",history:"/v1/auth/me/history",flow:{start:"/v1/flow/start",next:"/v1/flow/next"}};const o="<region>",s=`https://api.${o}descope.com`,i=1e3,r=6e5,a="dct",d=()=>{const e={};return{headers(t){const n="function"==typeof t.entries?Object.fromEntries(t.entries()):t;return e.Headers=JSON.stringify(n),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},retries(t){return e.Retries=t,this},build:()=>Object.keys(e).flatMap((t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[])).join("\n")}},p=[503,521,522,524,530],u=[100,5e3,5e3],l=e=>new Promise((t=>setTimeout(t,e))),c=e=>async(...t)=>{let n=await e(...t),o=0;for(;p.includes(n.status)&&o<u.length;)await l(u[o]),n=await e(...t),o++;o>0&&(n.retries=o);const s=await n.text();return n.text=()=>Promise.resolve(s),n.json=()=>Promise.resolve(JSON.parse(s)),n.clone=()=>n,n},g=(e,t)=>{const n=t||fetch;return n||null==e||e.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),e?async(...t)=>{if(!n)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");e.log((e=>d().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build())(t));const o=await c(n)(...t);return e[o.ok?"log":"error"](await(async e=>{const t=await e.text();return d().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).retries(e.retries).build()})(o)),o}:c(n)};let h;const v=()=>{if(h)return h;const e=new Date,t=`${e.getUTCFullYear().toString()}-${(e.getUTCMonth()+1).toString().padStart(2,"0")}-${e.getUTCDate().toString().padStart(2,"0")}-${e.getUTCHours().toString().padStart(2,"0")}:${e.getUTCMinutes().toString().padStart(2,"0")}:${e.getUTCSeconds().toString().padStart(2,"0")}:${e.getUTCMilliseconds().toString()}`,n=Math.floor(1e3+9e3*Math.random());return h=`${t}-${n}`,h};var I;!function(e){e.get="GET",e.delete="DELETE",e.post="POST",e.put="PUT",e.patch="PATCH"}(I||(I={}));const f=({path:e,baseUrl:t,queryParams:n,projectId:s})=>{const i=s.slice(1,-27);t=t.replace(o,i?i+".":"");let r=e?`${t.replace(/\/$/,"")}/${null==e?void 0:e.replace(/^\//,"")}`:t;if(n){const e=Object.keys(n);e.forEach(((t,o)=>{r=`${r}${0===o?"?":""}${t}=${encodeURIComponent(n[t])}${o===e.length-1?"":"&"}`}))}return r},m=(...e)=>new Headers(e.reduce(((e,t)=>((e=>Array.isArray(e)?e:e instanceof Headers?Array.from(e.entries()):e?Object.entries(e):[])(t).forEach((([t,n])=>{e[t]="function"==typeof n?n():n})),e)),{})),b={"Content-Type":"application/json"},k=(e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}},y=(e,t)=>{const n={"x-descope-sdk-session-id":v(),"x-descope-sdk-name":"core-js","x-descope-sdk-version":"2.61.0","x-descope-project-id":e};return t&&(n["x-descope-refresh-cookie-name"]=t),n},O=e=>{try{e=JSON.parse(e)}catch(e){return!1}return"object"==typeof e&&null!==e};var w=(e=>t=>{var n;return e(Object.assign(Object.assign({},t),{hooks:{beforeRequest:e=>{var n;const o=[].concat((null===(n=t.hooks)||void 0===n?void 0:n.beforeRequest)||[]);return null==o?void 0:o.reduce(((e,t)=>t(e)),e)},afterRequest:async(e,n)=>{var o;const s=[].concat((null===(o=t.hooks)||void 0===o?void 0:o.afterRequest)||[]);if(0==s.length)return;(await Promise.allSettled(null==s?void 0:s.map((t=>t(e,null==n?void 0:n.clone()))))).forEach((e=>{var n;return"rejected"===e.status&&(null===(n=t.logger)||void 0===n?void 0:n.error(e.reason))}))},transformResponse:null===(n=t.hooks)||void 0===n?void 0:n.transformResponse}}))})((({baseUrl:e,projectId:t,baseConfig:n,refreshCookieName:o,logger:i,hooks:r,cookiePolicy:a,fetch:d})=>{const p=e||s,u=g(i,d),l=async e=>{var s;const i=(null==r?void 0:r.beforeRequest)?r.beforeRequest(e):e,{path:d,body:l,headers:c,queryParams:g,method:h,token:v}=i,I=(e=>void 0===e?void 0:JSON.stringify(e))(l),w={headers:m(k(t,v),y(t,o),(null==n?void 0:n.baseHeaders)||{},O(I)?b:{},c),method:h,body:I};null!==a&&(w.credentials=a||"include");const j=await u(f({path:d,baseUrl:p,queryParams:g,projectId:t}),w);if((null==r?void 0:r.afterRequest)&&await r.afterRequest(e,null==j?void 0:j.clone()),null==r?void 0:r.transformResponse){const e=await j.json(),t=(U=(null===(s=j.headers)||void 0===s?void 0:s.get("set-cookie"))||"",Object.fromEntries(function(e){if(!e)return[];const t=[];let n=0;function o(){for(;n<e.length&&/\s/.test(e.charAt(n));)n+=1;return n<e.length}function s(){const t=e.charAt(n);return"="!==t&&";"!==t&&","!==t}for(;n<e.length;){const i=n;let r,a,d=!1;for(;o();)if(","===e.charAt(n)){for(r=n,n+=1,o(),a=n;n<e.length&&s();)n+=1;if(n<e.length&&"="===e.charAt(n)){d=!0,n=a,t.push(e.substring(i,r));break}n=r+1}else n+=1;(!d||n>=e.length)&&t.push(e.substring(i,e.length))}return t}(U).map((e=>{const t=e.split(";")[0],n=t.indexOf("=");return n<1?null:[t.substring(0,n).trim(),t.substring(n+1).trim()]})).filter(Boolean))),n=Object.assign(Object.assign({},j),{json:()=>Promise.resolve(e),cookies:t});return n.clone=()=>n,r.transformResponse(n)}var U;return j};return{get:(e,{headers:t,queryParams:n,token:o}={})=>l({path:e,headers:t,queryParams:n,body:void 0,method:I.get,token:o}),post:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.post,token:s}),patch:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.patch,token:s}),put:(e,t,{headers:n,queryParams:o,token:s}={})=>l({path:e,headers:n,queryParams:o,body:t,method:I.put,token:s}),delete:(e,{headers:t,queryParams:n,token:o}={})=>l({path:e,headers:t,queryParams:n,body:void 0,method:I.delete,token:o}),hooks:r,buildUrl:(e,n)=>f({projectId:t,baseUrl:p,path:e,queryParams:n})}})),j={TOO_MANY_REQUESTS:429};function U(e,t,n){var o;let s=T(e);if(t){if(!(null==s?void 0:s.tenants)&&(null==s?void 0:s[a])===t)return(null==s?void 0:s[n])||[];s=null===(o=null==s?void 0:s.tenants)||void 0===o?void 0:o[t]}const i=null==s?void 0:s[n];return Array.isArray(i)?i:[]}function T(t){if("string"!=typeof t||!t)throw new Error("Invalid token provided");return e(t)}function R(e){const{exp:t}=T(e);return(new Date).getTime()/1e3>t}function x(e){let t=T(e);const n=Object.keys(null==t?void 0:t.tenants);return Array.isArray(n)?n:[]}function P(e,t){return U(e,t,"permissions")}function $(e,t){return U(e,t,"roles")}const q=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function S(e,t){var n;const o=await e,s={code:o.status,ok:o.ok,response:o},i=await o.clone().json();return o.ok?s.data=t?t(i):i:(s.error=i,o.status===j.TOO_MANY_REQUESTS&&Object.assign(s.error,{retryAfter:Number.parseInt(null===(n=o.headers)||void 0===n?void 0:n.get("retry-after"))||0})),s}function A(e){var t;return(null===(t=T(e))||void 0===t?void 0:t[a])||""}const C=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),E=(e,t)=>(n=t)=>t=>{const o=e.filter((e=>e(t)));return!(o.length<e.length)&&(n?n.replace("{val}",t):o.join(" OR "))},L=(...e)=>({validate:t=>(e.forEach((e=>{const n=e(t);if(n)throw new Error(n)})),!0)}),M=e=>t=>e.test(t),N=M(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),D=M(/^\+[1-9]{1}[0-9]{3,14}$/),H=(e,t)=>n=>L(...t).validate(((e,t,n)=>{const o=(Array.isArray(t)?t.join("."):String(t)).replace(/\[\\?("|')?(\w|d)+\\?("|')?\]/g,((e,t,n)=>"."+n)).split("."),s=o.length;let i=0,r=e===Object(e)?e:void 0;for(;null!=r&&i<s;)r=r[o[i++]];return i&&i===s&&void 0!==r?r:n})(n,e)),J=C(N,'"{val}" is not a valid email'),z=C(D,'"{val}" is not a valid phone number'),_=C((F=1,e=>e.length>=F),"Minimum length is 1");var F;const K=C((e=>"string"==typeof e),"Input is not a string"),B=C((e=>Array.isArray(e)),"Input is not an array"),V=C((e=>"boolean"==typeof e),"Input is not a boolean"),Y=C((e=>void 0===e),"Input is defined"),Z=E([K(),Y()],"Input is not a string or undefined"),Q=E([B(),V()],"Input is not an array or boolean"),G=(...e)=>t=>(...n)=>(e.forEach(((e,t)=>L(...e).validate(n[t]))),t(...n)),W=e=>[K(`"${e}" must be a string`)],X=e=>[Z(`"${e}" must be string or undefined`)],ee=e=>[K(`"${e}" must be a string`),_(`"${e}" must not be empty`)],te=e=>[K(`"${e}" must be a string`),J()],ne=e=>[K(`"${e}" must be a string`),z()],oe=G(ee("accessKey")),se=e=>({exchange:oe(((t,o)=>S(e.post(n.accessKey.exchange,{loginOptions:o},{token:t}))))}),ie=(e,t,n)=>(t.forEach((t=>{const o=t.split(".");let s=o.shift(),i=e;for(;o.length>0;){if(i=i[s],!s||!i)throw Error(`Invalid path "${t}", "${s}" is missing or has no value`);s=o.shift()}if("function"!=typeof i[s])throw Error(`"${t}" is not a function`);const r=i[s];i[s]=n(r)})),e),re=({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||i,i),timeoutMs:Math.min(t||r,r)});var ae,de;!function(e){e.sms="sms",e.voice="voice",e.whatsapp="whatsapp",e.im="im"}(ae||(ae={})),function(e){e.email="email"}(de||(de={}));const pe=Object.assign(Object.assign({},ae),de);var ue;!function(e){e.waiting="waiting",e.running="running",e.completed="completed",e.failed="failed"}(ue||(ue={}));const le=ee("loginId"),ce=G(ee("token")),ge=G(le),he=G(ee("pendingRef")),ve=G(le,te("email")),Ie=e=>({verify:ce((t=>S(e.post(n.enchantedLink.verify,{token:t})))),signIn:ge(((o,s,i={},r)=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(q(n.enchantedLink.signIn,pe.email),{loginId:o,URI:s,loginOptions:d,providerId:a},{token:r}))})),signUpOrIn:ge(((o,s,i={})=>{var{providerId:r}=i,a=t(i,["providerId"]);return S(e.post(q(n.enchantedLink.signUpOrIn,pe.email),{loginId:o,URI:s,loginOptions:a,providerId:r}))})),signUp:ge(((o,s,i,r={})=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(q(n.enchantedLink.signUp,pe.email),{loginId:o,URI:s,user:i,loginOptions:d,providerId:a}))})),waitForSession:he(((t,o)=>new Promise((s=>{const{pollingIntervalMs:i,timeoutMs:r}=re(o);let a;const d=setInterval((async()=>{const o=await e.post(n.enchantedLink.session,{pendingRef:t});o.ok&&(clearInterval(d),a&&clearTimeout(a),s(S(Promise.resolve(o))))}),i);a=setTimeout((()=>{s({error:{errorDescription:`Session polling timeout exceeded: ${r}ms`,errorCode:"0"},ok:!1}),clearInterval(d)}),r)})))),update:{email:ve(((t,o,s,i,r)=>S(e.post(n.enchantedLink.update.email,Object.assign({loginId:t,email:o,URI:s},r),{token:i}))))}}),fe=G(ee("flowId")),me=G(ee("executionId"),ee("stepId"),ee("interactionId")),be=e=>({start:fe(((t,o,s,i,r,a,d,p=!1)=>S(e.post(n.flow.start,{flowId:t,options:o,conditionInteractionId:s,interactionId:i,componentsVersion:r,flowVersions:a,input:d,isCustomScreen:p})))),next:me(((t,o,s,i,r,a,d=!1)=>S(e.post(n.flow.next,{executionId:t,stepId:o,interactionId:s,version:i,componentsVersion:r,input:a,isCustomScreen:d}))))}),ke=ee("loginId"),ye=G(ee("token")),Oe=G(ke),we=G(ke,ne("phone")),je=G(ke,te("email")),Ue=Object.keys(pe).filter((e=>e!==ae.voice&&e!==ae.im)),Te=e=>({verify:ye((t=>S(e.post(n.magicLink.verify,{token:t})))),signIn:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,i,r={},a)=>{var{providerId:d}=r,p=t(r,["providerId"]);return S(e.post(q(n.magicLink.signIn,s),{loginId:o,URI:i,loginOptions:p,providerId:d},{token:a}))}))})),{}),signUp:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,i,r,a={})=>{var{providerId:d}=a,p=t(a,["providerId"]);return S(e.post(q(n.magicLink.signUp,s),{loginId:o,URI:i,user:r,loginOptions:p,providerId:d}))}))})),{}),signUpOrIn:Ue.reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Oe(((o,i,r={})=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(q(n.magicLink.signUpOrIn,s),{loginId:o,URI:i,loginOptions:d,providerId:a}))}))})),{}),update:{email:je(((t,o,s,i,r)=>S(e.post(n.magicLink.update.email,Object.assign({loginId:t,email:o,URI:s},r),{token:i})))),phone:Object.keys(ae).filter((e=>e!==ae.voice)).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:we(((t,s,i,r,a)=>S(e.post(q(n.magicLink.update.phone,o),Object.assign({loginId:t,phone:s,URI:i},a),{token:r}))))})),{})}});var Re;!function(e){e.facebook="facebook",e.github="github",e.google="google",e.microsoft="microsoft",e.gitlab="gitlab",e.apple="apple",e.discord="discord",e.linkedin="linkedin",e.slack="slack"}(Re||(Re={}));const xe=G(ee("code")),Pe=e=>({start:Object.assign(((t,o,s,i,r)=>S(e.post(n.oauth.start,s||{},{queryParams:Object.assign(Object.assign({provider:t},o&&{redirectURL:o}),r&&{loginHint:r}),token:i}))),Object.keys(Re).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:(t,s,i,r)=>S(e.post(n.oauth.start,s||{},{queryParams:Object.assign(Object.assign({provider:o},t&&{redirectURL:t}),r&&{loginHint:r}),token:i}))})),{})),exchange:xe((t=>S(e.post(n.oauth.exchange,{code:t})))),startNative:(t,o,s)=>S(e.post(n.oauth.startNative,{provider:t,loginOptions:o,implicit:s})),finishNative:(t,o,s,i,r)=>S(e.post(n.oauth.finishNative,{provider:t,stateId:o,user:s,code:i,idToken:r})),getOneTapClientId:t=>S(e.get(n.oauth.oneTap.getOneTapClientId.replace("{provider}",t))),verifyOneTapIDToken:(t,o,s,i)=>S(e.post(n.oauth.oneTap.verifyOneTapIDToken,{provider:t,idToken:o,nonce:s,loginOptions:i})),exchangeOneTapIDToken:(t,o,s,i)=>S(e.post(n.oauth.oneTap.exchangeOneTapIDToken,{provider:t,idToken:o,nonce:s,loginOptions:i}))}),$e=ee("appId"),qe=G($e),Se=e=>({connect:qe(((t,o,s)=>{const i=null==o?void 0:o.tenantId,r=null==o?void 0:o.tenantLevel;return null==o||delete o.tenantId,null==o||delete o.tenantLevel,S(e.post(n.outbound.connect,{appId:t,tenantId:i,tenantLevel:r,options:o},{token:s}))}))}),Ae=ee("loginId"),Ce=G(Ae,ee("code")),Ee=G(Ae),Le=G(Ae,ne("phone")),Me=G(Ae,te("email")),Ne=e=>({verify:Object.keys(pe).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:Ce(((t,s)=>S(e.post(q(n.otp.verify,o),{code:s,loginId:t}))))})),{}),signIn:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,i={},r)=>{var{providerId:a}=i,d=t(i,["providerId"]);return S(e.post(q(n.otp.signIn,s),{loginId:o,loginOptions:d,providerId:a},{token:r}))}))})),{}),signUp:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,i,r={})=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(q(n.otp.signUp,s),{loginId:o,user:i,loginOptions:d,providerId:a}))}))})),{}),signUpOrIn:Object.keys(pe).reduce(((o,s)=>Object.assign(Object.assign({},o),{[s]:Ee(((o,i={})=>{var{providerId:r}=i,a=t(i,["providerId"]);return S(e.post(q(n.otp.signUpOrIn,s),{loginId:o,loginOptions:a,providerId:r}))}))})),{}),update:{email:Me(((t,o,s,i)=>S(e.post(n.otp.update.email,Object.assign({loginId:t,email:o},i),{token:s})))),phone:Object.keys(ae).reduce(((t,o)=>Object.assign(Object.assign({},t),{[o]:Le(((t,s,i,r)=>S(e.post(q(n.otp.update.phone,o),Object.assign({loginId:t,phone:s},r),{token:i}))))})),{})}}),De=G(ee("tenant")),He=G(ee("code")),Je=e=>({start:De(((t,o,s,i,r,a,d,p)=>S(e.post(n.saml.start,s||{},Object.assign({queryParams:Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({tenant:t},o&&{redirectURL:o}),r&&{ssoId:r}),a&&{forceAuthn:"true"}),d&&{loginHint:d}),p&&{initiatedEmail:t})},i&&{token:i}))))),exchange:He((t=>S(e.post(n.saml.exchange,{code:t}))))}),ze=ee("loginId"),_e=G(ze,ee("code")),Fe=G(ze),Ke=G(ze),Be=e=>({signUp:Fe(((t,o)=>S(e.post(n.totp.signUp,{loginId:t,user:o})))),verify:_e(((t,o,s,i)=>S(e.post(n.totp.verify,{loginId:t,code:o,loginOptions:s},{token:i})))),update:Ke(((t,o)=>S(e.post(n.totp.update,{loginId:t},{token:o}))))}),Ve=ee("loginId"),Ye=ee("newPassword"),Ze=G(Ve,ee("password")),Qe=G(Ve),Ge=G(Ve,Ye),We=G(Ve,ee("oldPassword"),Ye),Xe=e=>({signUp:Ze(((o,s,i,r={})=>{var{providerId:a}=r,d=t(r,["providerId"]);return S(e.post(n.password.signUp,{loginId:o,password:s,user:i,loginOptions:d,providerId:a}))})),signIn:Ze(((o,s,i={})=>{var{providerId:r}=i,a=t(i,["providerId"]);return S(e.post(n.password.signIn,{loginId:o,password:s,loginOptions:a,providerId:r}))})),sendReset:Qe(((t,o,s)=>S(e.post(n.password.sendReset,{loginId:t,redirectUrl:o,templateOptions:s})))),update:Ge(((t,o,s)=>S(e.post(n.password.update,{loginId:t,newPassword:o},{token:s})))),replace:We(((t,o,s)=>S(e.post(n.password.replace,{loginId:t,oldPassword:o,newPassword:s})))),policy:()=>S(e.get(n.password.policy))}),et=W("loginId"),tt=ee("loginId"),nt=ee("origin"),ot=G(tt,nt,ee("name")),st=G(tt,nt),it=G(et,nt),rt=G(tt,nt,X("token")),at=G(ee("transactionId"),ee("response")),dt=e=>({signUp:{start:ot(((t,o,s,i,r)=>S(e.post(n.webauthn.signUp.start,{user:{loginId:t,name:s},origin:o,loginOptions:r,passkeyOptions:i})))),finish:at(((t,o)=>S(e.post(n.webauthn.signUp.finish,{transactionId:t,response:o}))))},signIn:{start:it(((t,o,s,i,r)=>S(e.post(n.webauthn.signIn.start,{loginId:t,origin:o,loginOptions:s,passkeyOptions:r},{token:i})))),finish:at(((t,o)=>S(e.post(n.webauthn.signIn.finish,{transactionId:t,response:o}))))},signUpOrIn:{start:st(((t,o,s,i)=>S(e.post(n.webauthn.signUpOrIn.start,{loginId:t,origin:o,loginOptions:i,passkeyOptions:s}))))},update:{start:rt(((t,o,s,i)=>S(e.post(n.webauthn.update.start,{loginId:t,origin:o,passkeyOptions:i},{token:s})))),finish:at(((t,o)=>S(e.post(n.webauthn.update.finish,{transactionId:t,response:o}))))}}),pt=W("loginId"),ut=G(pt),lt=G(ee("pendingRef")),ct=e=>({signUpOrIn:ut(((o,s={})=>{var{providerId:i}=s,r=t(s,["providerId"]);return S(e.post(n.notp.signUpOrIn,{loginId:o,loginOptions:r,providerId:i}))})),signUp:ut(((o,s,i={})=>{var{providerId:r}=i,a=t(i,["providerId"]);return S(e.post(n.notp.signUp,{loginId:o,user:s,providerId:r,loginOptions:a}))})),signIn:ut(((o,s={},i)=>{var{providerId:r}=s,a=t(s,["providerId"]);return S(e.post(n.notp.signIn,{loginId:o,loginOptions:a,providerId:r},{token:i}))})),waitForSession:lt(((t,o)=>new Promise((s=>{const{pollingIntervalMs:i,timeoutMs:r}=re(o);let a;const d=setInterval((async()=>{const o=await e.post(n.notp.session,{pendingRef:t});o.ok&&(clearInterval(d),a&&clearTimeout(a),s(S(Promise.resolve(o))))}),i);a=setTimeout((()=>{s({error:{errorDescription:`Session polling timeout exceeded: ${r}ms`,errorCode:"0"},ok:!1}),clearInterval(d)}),r)}))))}),gt=G(ee("token")),ht=G(X("token"));var vt,It,ft=G([(vt="projectId",It=ee("projectId"),C(H(vt,It))())])((e=>{const{projectId:t,logger:o,baseUrl:s,cookiePolicy:i,baseHeaders:r={},refreshCookieName:a,fetch:d}=e;return p=w({baseUrl:s,projectId:t,logger:o,hooks:{get beforeRequest(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.beforeRequest},get afterRequest(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.afterRequest},get transformResponse(){var t;return null===(t=e.hooks)||void 0===t?void 0:t.transformResponse}},cookiePolicy:i,baseConfig:{baseHeaders:r},refreshCookieName:a,fetch:d}),{accessKey:se(p),otp:Ne(p),magicLink:Te(p),enchantedLink:Ie(p),oauth:Pe(p),outbound:Se(p),saml:Je(p),totp:Be(p),notp:ct(p),webauthn:dt(p),password:Xe(p),flow:be(p),refresh:ht(((e,t,o,s)=>{const i={};o&&(i.externalToken=o);const r=s?n.tryRefresh:n.refresh;return S(p.post(r,i,{token:e,queryParams:t}))})),selectTenant:G([K("tenantId")],[Z('"token" must be string or undefined')])(((e,t)=>S(p.post(n.selectTenant,{tenant:e},{token:t})))),logout:ht((e=>S(p.post(n.logout,{},{token:e})))),logoutAll:ht((e=>S(p.post(n.logoutAll,{},{token:e})))),me:ht((e=>S(p.get(n.me,{token:e})))),myTenants:G([Q('"tenants" must a string array or a boolean')],[Z('"token" must be string or undefined')])(((e,t)=>{const o={};return"boolean"==typeof e?o.dct=e:o.ids=e,S(p.post(n.myTenants,o,{token:t}))})),history:ht((e=>S(p.get(n.history,{token:e})))),isJwtExpired:gt(R),getTenants:gt(x),getJwtPermissions:gt(P),getJwtRoles:gt($),getCurrentTenant:gt(A),httpClient:p};var p})),mt=Object.assign(ft,{DeliveryMethods:pe});export{j as HttpStatusCodes,w as createHttpClient,mt as default,re as normalizeWaitForSessionConfig,S as transformResponse,ie as wrapWith};
 //# sourceMappingURL=index.esm.js.map