@descope/web-component 3.70.6 → 4.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/README.md +61 -0
  2. package/dist/cjs/constants/customScreens.js +1 -1
  3. package/dist/cjs/constants/customScreens.js.map +1 -1
  4. package/dist/cjs/descope-wc/BaseDescopeWc.js +1 -1
  5. package/dist/cjs/helpers/helpers.js +1 -1
  6. package/dist/cjs/helpers/helpers.js.map +1 -1
  7. package/dist/cjs/types.js.map +1 -1
  8. package/dist/esm/constants/customScreens.js +1 -1
  9. package/dist/esm/constants/customScreens.js.map +1 -1
  10. package/dist/esm/descope-wc/BaseDescopeWc.js +1 -1
  11. package/dist/esm/helpers/helpers.js +1 -1
  12. package/dist/esm/helpers/helpers.js.map +1 -1
  13. package/dist/esm/types.js.map +1 -1
  14. package/dist/index.d.ts +105 -1
  15. package/dist/index.js +2 -2
  16. package/package.json +3 -3
package/dist/esm/descope-wc/BaseDescopeWc.js CHANGED
@@ -1,2 +1,2 @@
1
- import{__classPrivateFieldGet as t,__awaiter as e,__classPrivateFieldSet as i}from"tslib";import{compose as r}from"@descope/sdk-helpers";import{staticResourcesMixin as o}from"@descope/sdk-mixins/static-resources-mixin";import{themeMixin as s}from"@descope/sdk-mixins/theme-mixin";import{injectStyleMixin as n}from"@descope/sdk-mixins/inject-style-mixin";import{createSdk as a}from"@descope/web-js-sdk";import{ELEMENTS_TO_IGNORE_ENTER_KEY_ON as u}from"../constants/index.js";import{handleUrlParams as l,clearRunIdsFromUrl as d,camelCase as c,getRunIdsFromUrl as h,getContentUrl as f,fetchContent as g,withRetry as p}from"../helpers/helpers.js";import m from"../helpers/state.js";import"@descope/escape-markdown";import"../helpers/webauthn.js";import{setCustomStorage as b}from"../helpers/storage.js";import{transformFlowInputFormData as v,extractNestedAttribute as w}from"../helpers/flowInputs.js";import{formMountMixin as k}from"../mixins/formMountMixin.js";import{componentConditionsMixin as C}from"../mixins/componentConditionsMixin.js";import{duplicateFlowWarningMixin as y}from"../mixins/duplicateFlowWarningMixin.js";import{passwordManagerMixin as A}from"../mixins/passwordManagerMixin.js";import{CONFIG_FILENAME as x,PREV_VER_ASSETS_FOLDER as j}from"../constants/content.js";import{FETCH_EXCEPTION_ERROR_CODE as I}from"../constants/general.js";var E,M,L,S,U,O,W,D,P,N,F,K,R,T,B,H,J,V,q,$,z,Q;const G=r(s,o,k,C,y,A,n)(HTMLElement);class X extends G{static get observedAttributes(){return["project-id","flow-id","base-url","tenant","locale","debug","storage-prefix","preview","redirect-url","auto-focus","store-last-authenticated-user","refresh-cookie-name","keep-last-authenticated-user-after-logout","validate-on-blur","style-id"]}constructor(r){super(),E.add(this),L.set(this,!1),S.set(this,void 0),this.flowStatus="initial",this.loggerWrapper={error:(e,i="")=>{this.logger.error(e,i,new Error),t(this,E,"m",Q).call(this,e,i)},warn:(t,e="")=>{this.logger.warn(t,e)},info:(t,e="",i={})=>{this.logger.info(t,e,i)},debug:(t,e="")=>{this.logger.debug(t,e)}},U.set(this,new m),O.set(this,new m),W.set(this,{}),this.getComponentsContext=()=>t(this,W,"f"),this.nextRequestStatus=new m({isLoading:!1}),D.set(this,void 0),P.set(this,{popstate:t(this,E,"m",T).bind(this),componentsContext:t(this,E,"m",q).bind(this)}),N.set(this,void 0),this.getConfig=()=>e(this,void 0,void 0,(function*(){return(yield this.config)||{isMissingConfig:!0}})),i(this,N,r,"f"),t(this,E,"m",K).call(this)}get flowId(){return this.getAttribute("flow-id")}get client(){try{return JSON.parse(this.getAttribute("client"))||{}}catch(t){return{}}}get redirectUrl(){return this.getAttribute("redirect-url")||void 0}get debug(){return"true"===this.getAttribute("debug")}get locale(){return this.getAttribute("locale")||void 0}get autoFocus(){var t;const e=null!==(t=this.getAttribute("auto-focus"))&&void 0!==t?t:"true";return"skipFirstScreen"===e?e:"true"===e}get validateOnBlur(){return"true"===this.getAttribute("validate-on-blur")}get storeLastAuthenticatedUser(){var t;return"true"===(null!==(t=this.getAttribute("store-last-authenticated-user"))&&void 0!==t?t:"true")}get refreshCookieName(){return this.getAttribute("refresh-cookie-name")||""}get keepLastAuthenticatedUserAfterLogout(){return"true"===this.getAttribute("keep-last-authenticated-user-after-logout")}get storagePrefix(){return this.getAttribute("storage-prefix")||""}get preview(){return!!this.getAttribute("preview")}get formConfig(){return v(this.form)}get form(){return this.getAttribute("form")}get formConfigValues(){return w(this.formConfig,"value")}get outboundAppId(){return this.getAttribute("outbound-app-id")}get outboundAppScopes(){try{const t=JSON.parse(this.getAttribute("outbound-app-scopes"));return t||null}catch(t){return null}}get popupOrigin(){return this.getAttribute("popup-origin")}get customStorage(){return t(this,S,"f")}set customStorage(t){if(t&&"function"!=typeof t.getItem)throw new Error("Custom storage must have a getItem method");if(t&&"function"!=typeof t.setItem)throw new Error("Custom storage must have a setItem method");if(t&&"function"!=typeof t.removeItem)throw new Error("Custom storage must have a removeItem method");i(this,S,t,"f"),b(t)}get isRestartOnError(){return"true"===this.getAttribute("restart-on-error")}getExecutionContext(){return e(this,void 0,void 0,(function*(){const t=yield this.getConfig();return"executionContext"in t?t.executionContext:void 0}))}getProjectConfig(){return e(this,void 0,void 0,(function*(){const t=yield this.getConfig();return"projectConfig"in t?t.projectConfig:void 0}))}getFlowConfig(){return e(this,void 0,void 0,(function*(){var t,e;const i=yield this.getProjectConfig(),r=(null===(t=null==i?void 0:i.flows)||void 0===t?void 0:t[this.flowId])||{};return null!==(e=r.version)&&void 0!==e||(r.version=0),r}))}getTargetLocales(){return e(this,void 0,void 0,(function*(){const t=yield this.getFlowConfig();return((null==t?void 0:t.targetLocales)||[]).map((t=>t.toLowerCase()))}))}handleKeyPress(){this.logger.debug("Enable key press handler"),this.rootElement.onkeydown=t=>{var e,i,r;const o=!!(null===(e=this.shadowRoot.activeElement)||void 0===e?void 0:e.getAttribute("href")),s=u.includes(null!==(r=null===(i=this.shadowRoot.activeElement)||void 0===i?void 0:i.localName)&&void 0!==r?r:"");if("Enter"!==t.key||o||s)return;t.preventDefault();const n=this.rootElement.querySelectorAll("descope-button");if(1===n.length&&"false"!==n[0].getAttribute("auto-submit"))return void n[0].click();const a=Array.from(n).filter((t=>"true"===t.getAttribute("auto-submit")));if(1===a.length)return void a[0].click();const l=Array.from(n).filter((t=>"button"===t.getAttribute("data-type")));if(1===l.length)"false"!==l[0].getAttribute("auto-submit")&&l[0].click();else if(0===l.length){const t=Array.from(n).filter((t=>"sso"===t.getAttribute("data-type")));1===t.length&&"false"!==t[0].getAttribute("auto-submit")&&t[0].click()}}}disableKeyPressHandler(){this.logger.debug("Disable key press handler"),this.rootElement.onkeydown=null}getComponentsVersion(){return e(this,void 0,void 0,(function*(){var t;const e=yield this.getConfig(),i="projectConfig"in e?null===(t=e.projectConfig)||void 0===t?void 0:t.componentsVersion:{};return i||(this.logger.error("Did not get components version, using latest version"),"latest")}))}init(){const r=Object.create(null,{init:{get:()=>super.init}});return e(this,void 0,void 0,(function*(){var e;if(this.flowStatus="loading",["ready","error","success"].forEach((t=>this.addEventListener(t,(()=>{this.flowStatus=t})))),yield null===(e=r.init)||void 0===e?void 0:e.call(this),t(this,O,"f").subscribe(t(this,E,"m",z).bind(this)),t(this,O,"f").update({isDebug:this.debug}),t(this,E,"m",R).call(this),yield t(this,E,"m",J).call(this))return void this.loggerWrapper.error("This SDK version does not support your flows version","Make sure to upgrade your flows to the latest version or use an older SDK version");const o=yield this.getConfig();if("isMissingConfig"in o&&o.isMissingConfig)return void this.loggerWrapper.error("Cannot get config file","Make sure that your projectId & flowId are correct");const{executionId:s,stepId:n,token:a,code:u,isPopup:d,exchangeError:c,redirectAuthCallbackUrl:h,redirectAuthBackupCallbackUri:f,redirectAuthCodeChallenge:g,redirectAuthInitiator:p,ssoQueryParams:m}=l(this.flowId,this.loggerWrapper);window.addEventListener("popstate",t(this,P,"f").popstate),window.addEventListener("components-context",t(this,P,"f").componentsContext),t(this,U,"f").subscribe(t(this,E,"m",H).bind(this)),t(this,U,"f").update(Object.assign({projectId:this.projectId,flowId:this.flowId,baseUrl:this.baseUrl,tenant:this.tenantId,redirectUrl:this.redirectUrl,locale:this.locale,stepId:n,executionId:s,token:a,code:u,isPopup:d,exchangeError:c,redirectAuthCallbackUrl:h,redirectAuthBackupCallbackUri:f,redirectAuthCodeChallenge:g,redirectAuthInitiator:p},m)),i(this,L,!0,"f")}))}disconnectedCallback(){var e;t(this,U,"f").unsubscribeAll(),t(this,O,"f").unsubscribeAll(),t(this,E,"m",$).call(this),window.removeEventListener("popstate",t(this,P,"f").popstate),window.removeEventListener("components-context",t(this,P,"f").componentsContext),null===(e=super.disconnectedCallback)||void 0===e||e.call(this)}attributeChangedCallback(e,i,r){var o;if(null===(o=super.attributeChangedCallback)||void 0===o||o.call(this,e,i,r),this.shadowRoot.isConnected&&t(this,L,"f")&&i!==r&&M.observedAttributes.includes(e)){t(this,E,"m",R).call(this);const o=null===i;t(this,U,"f").update((({stepId:t,executionId:i})=>{let s=t,n=i;return o||(n=null,s=null,d()),{[c(e)]:r,stepId:s,executionId:n}})),t(this,O,"f").update({isDebug:this.debug})}}}M=X,L=new WeakMap,S=new WeakMap,U=new WeakMap,O=new WeakMap,W=new WeakMap,D=new WeakMap,P=new WeakMap,N=new WeakMap,E=new WeakSet,F=function(){this.injectStyle("\n :host {\n\t\t\twidth: 100%;\n display: block;\n\t\t}\n\n\t\t#root {\n\t\t\theight: 100%;\n display: flex;\n flex-direction: column;\n\t\t}\n\n #content-root {\n all: initial;\n transition: opacity 200ms ease-in-out;\n }\n\n\t\t#root[data-theme] {\n\t\t\tbackground-color: transparent;\n\t\t}\n\n\t\t.fade-out {\n\t\t\topacity: 0.1!important;\n\t\t}\n\n .hidden {\n display: none;\n }\n ")},K=function(){t(this,E,"m",F).call(this),this.slotElement=document.createElement("slot"),this.slotElement.classList.add("hidden"),this.rootElement.appendChild(this.slotElement)},R=function(){const t=["base-url","tenant","locale","debug","redirect-url","auto-focus","store-last-authenticated-user","refresh-cookie-name","keep-last-authenticated-user-after-logout","preview","storage-prefix","form","client","validate-on-blur","style-id","outbound-app-id","outbound-app-scopes","theme-override"];M.observedAttributes.forEach((e=>{if(!t.includes(e)&&!this[c(e)])throw Error(`${e} cannot be empty`)}))},T=function(){const{stepId:e,executionId:i}=h(this.flowId);t(this,U,"f").update({stepId:e,executionId:i})},B=function(i,r){a&&"function"==typeof a||this.logger.error("SDK was not loaded properly",a,JSON.stringify(a));const o=Object.assign(Object.assign({persistTokens:!0,preview:this.preview,storagePrefix:this.storagePrefix,storeLastAuthenticatedUser:this.storeLastAuthenticatedUser,keepLastAuthenticatedUserAfterLogout:this.keepLastAuthenticatedUserAfterLogout,refreshCookieName:this.refreshCookieName},M.sdkConfigOverrides),{projectId:i,baseUrl:r});t(this,S,"f")&&(o.customStorage=t(this,S,"f")),this.sdk=a(o),["start","next"].forEach((t=>{const i=this.sdk.flow[t],r=p(i,1e3,3);this.sdk.flow[t]=(...i)=>e(this,void 0,void 0,(function*(){try{return yield r(...i)}catch(e){return this.logger.error(`Error in sdk flow ${t} function`,e),{error:{errorCode:I,errorDescription:e.toString()}}}}))}))},H=function(i,r,o){return e(this,void 0,void 0,(function*(){const{projectId:e,baseUrl:r}=i;if(o("projectId")||o("baseUrl")){if(!e)return;t(this,E,"m",B).call(this,e,r)}t(this,N,"f").call(this,i)}))},J=function(){return e(this,void 0,void 0,(function*(){const e=yield this.getConfig();return"isMissingConfig"in e&&e.isMissingConfig&&(yield t(this,E,"m",V).call(this))}))},V=function(){return e(this,void 0,void 0,(function*(){const t=f({projectId:this.projectId,filename:x,assetsFolder:j,baseUrl:this.baseStaticUrl});try{return yield g(t,"json"),!0}catch(t){return!1}}))},q=function(e){i(this,W,Object.assign(Object.assign({},t(this,W,"f")),e.detail),"f")},$=function(){var e;null===(e=t(this,D,"f"))||void 0===e||e.remove(),i(this,D,null,"f")},z=function(r){return e(this,arguments,void 0,(function*({isDebug:e}){e?(i(this,D,document.createElement("descope-debugger"),"f"),Object.assign(t(this,D,"f").style,{position:"fixed",top:"0",right:"0",height:"100vh",width:"100vw",pointerEvents:"none",zIndex:99999}),yield import("../debugger-wc.js"),document.body.appendChild(t(this,D,"f"))):t(this,E,"m",$).call(this)}))},Q=function(e,i){var r;e&&this.debug&&(null===(r=t(this,D,"f"))||void 0===r||r.updateData({title:e,description:i}))},X.sdkConfigOverrides={baseHeaders:{"x-descope-sdk-name":"web-component","x-descope-sdk-version":"3.70.6"}};export{X as default};
1
+ import{__classPrivateFieldGet as t,__awaiter as e,__classPrivateFieldSet as i}from"tslib";import{compose as r}from"@descope/sdk-helpers";import{staticResourcesMixin as o}from"@descope/sdk-mixins/static-resources-mixin";import{themeMixin as s}from"@descope/sdk-mixins/theme-mixin";import{injectStyleMixin as n}from"@descope/sdk-mixins/inject-style-mixin";import{createSdk as a}from"@descope/web-js-sdk";import{ELEMENTS_TO_IGNORE_ENTER_KEY_ON as u}from"../constants/index.js";import{handleUrlParams as l,clearRunIdsFromUrl as d,camelCase as c,getRunIdsFromUrl as h,getContentUrl as f,fetchContent as g,withRetry as p}from"../helpers/helpers.js";import m from"../helpers/state.js";import"@descope/escape-markdown";import"../helpers/webauthn.js";import{setCustomStorage as b}from"../helpers/storage.js";import{transformFlowInputFormData as v,extractNestedAttribute as w}from"../helpers/flowInputs.js";import{formMountMixin as k}from"../mixins/formMountMixin.js";import{componentConditionsMixin as C}from"../mixins/componentConditionsMixin.js";import{duplicateFlowWarningMixin as y}from"../mixins/duplicateFlowWarningMixin.js";import{passwordManagerMixin as A}from"../mixins/passwordManagerMixin.js";import{CONFIG_FILENAME as x,PREV_VER_ASSETS_FOLDER as j}from"../constants/content.js";import{FETCH_EXCEPTION_ERROR_CODE as I}from"../constants/general.js";var E,M,L,S,U,O,W,D,P,N,F,K,R,T,B,H,J,V,q,$,z,Q;const G=r(s,o,k,C,y,A,n)(HTMLElement);class X extends G{static get observedAttributes(){return["project-id","flow-id","base-url","tenant","locale","debug","storage-prefix","preview","redirect-url","auto-focus","store-last-authenticated-user","refresh-cookie-name","keep-last-authenticated-user-after-logout","validate-on-blur","style-id"]}constructor(r){super(),E.add(this),L.set(this,!1),S.set(this,void 0),this.flowStatus="initial",this.loggerWrapper={error:(e,i="")=>{this.logger.error(e,i,new Error),t(this,E,"m",Q).call(this,e,i)},warn:(t,e="")=>{this.logger.warn(t,e)},info:(t,e="",i={})=>{this.logger.info(t,e,i)},debug:(t,e="")=>{this.logger.debug(t,e)}},U.set(this,new m),O.set(this,new m),W.set(this,{}),this.getComponentsContext=()=>t(this,W,"f"),this.nextRequestStatus=new m({isLoading:!1}),D.set(this,void 0),P.set(this,{popstate:t(this,E,"m",T).bind(this),componentsContext:t(this,E,"m",q).bind(this)}),N.set(this,void 0),this.getConfig=()=>e(this,void 0,void 0,(function*(){return(yield this.config)||{isMissingConfig:!0}})),i(this,N,r,"f"),t(this,E,"m",K).call(this)}get flowId(){return this.getAttribute("flow-id")}get client(){try{return JSON.parse(this.getAttribute("client"))||{}}catch(t){return{}}}get redirectUrl(){return this.getAttribute("redirect-url")||void 0}get debug(){return"true"===this.getAttribute("debug")}get locale(){return this.getAttribute("locale")||void 0}get autoFocus(){var t;const e=null!==(t=this.getAttribute("auto-focus"))&&void 0!==t?t:"true";return"skipFirstScreen"===e?e:"true"===e}get validateOnBlur(){return"true"===this.getAttribute("validate-on-blur")}get storeLastAuthenticatedUser(){var t;return"true"===(null!==(t=this.getAttribute("store-last-authenticated-user"))&&void 0!==t?t:"true")}get refreshCookieName(){return this.getAttribute("refresh-cookie-name")||""}get keepLastAuthenticatedUserAfterLogout(){return"true"===this.getAttribute("keep-last-authenticated-user-after-logout")}get storagePrefix(){return this.getAttribute("storage-prefix")||""}get preview(){return!!this.getAttribute("preview")}get formConfig(){return v(this.form)}get form(){return this.getAttribute("form")}get formConfigValues(){return w(this.formConfig,"value")}get outboundAppId(){return this.getAttribute("outbound-app-id")}get outboundAppScopes(){try{const t=JSON.parse(this.getAttribute("outbound-app-scopes"));return t||null}catch(t){return null}}get popupOrigin(){return this.getAttribute("popup-origin")}get customStorage(){return t(this,S,"f")}set customStorage(t){if(t&&"function"!=typeof t.getItem)throw new Error("Custom storage must have a getItem method");if(t&&"function"!=typeof t.setItem)throw new Error("Custom storage must have a setItem method");if(t&&"function"!=typeof t.removeItem)throw new Error("Custom storage must have a removeItem method");i(this,S,t,"f"),b(t)}get isRestartOnError(){return"true"===this.getAttribute("restart-on-error")}getExecutionContext(){return e(this,void 0,void 0,(function*(){const t=yield this.getConfig();return"executionContext"in t?t.executionContext:void 0}))}getProjectConfig(){return e(this,void 0,void 0,(function*(){const t=yield this.getConfig();return"projectConfig"in t?t.projectConfig:void 0}))}getFlowConfig(){return e(this,void 0,void 0,(function*(){var t,e;const i=yield this.getProjectConfig(),r=(null===(t=null==i?void 0:i.flows)||void 0===t?void 0:t[this.flowId])||{};return null!==(e=r.version)&&void 0!==e||(r.version=0),r}))}getTargetLocales(){return e(this,void 0,void 0,(function*(){const t=yield this.getFlowConfig();return((null==t?void 0:t.targetLocales)||[]).map((t=>t.toLowerCase()))}))}handleKeyPress(){this.logger.debug("Enable key press handler"),this.rootElement.onkeydown=t=>{var e,i,r;const o=!!(null===(e=this.shadowRoot.activeElement)||void 0===e?void 0:e.getAttribute("href")),s=u.includes(null!==(r=null===(i=this.shadowRoot.activeElement)||void 0===i?void 0:i.localName)&&void 0!==r?r:"");if("Enter"!==t.key||o||s)return;t.preventDefault();const n=this.rootElement.querySelectorAll("descope-button");if(1===n.length&&"false"!==n[0].getAttribute("auto-submit"))return void n[0].click();const a=Array.from(n).filter((t=>"true"===t.getAttribute("auto-submit")));if(1===a.length)return void a[0].click();const l=Array.from(n).filter((t=>"button"===t.getAttribute("data-type")));if(1===l.length)"false"!==l[0].getAttribute("auto-submit")&&l[0].click();else if(0===l.length){const t=Array.from(n).filter((t=>"sso"===t.getAttribute("data-type")));1===t.length&&"false"!==t[0].getAttribute("auto-submit")&&t[0].click()}}}disableKeyPressHandler(){this.logger.debug("Disable key press handler"),this.rootElement.onkeydown=null}getComponentsVersion(){return e(this,void 0,void 0,(function*(){var t;const e=yield this.getConfig(),i="projectConfig"in e?null===(t=e.projectConfig)||void 0===t?void 0:t.componentsVersion:{};return i||(this.logger.error("Did not get components version, using latest version"),"latest")}))}init(){const r=Object.create(null,{init:{get:()=>super.init}});return e(this,void 0,void 0,(function*(){var e;if(this.flowStatus="loading",["ready","error","success"].forEach((t=>this.addEventListener(t,(()=>{this.flowStatus=t})))),yield null===(e=r.init)||void 0===e?void 0:e.call(this),t(this,O,"f").subscribe(t(this,E,"m",z).bind(this)),t(this,O,"f").update({isDebug:this.debug}),t(this,E,"m",R).call(this),yield t(this,E,"m",J).call(this))return void this.loggerWrapper.error("This SDK version does not support your flows version","Make sure to upgrade your flows to the latest version or use an older SDK version");const o=yield this.getConfig();if("isMissingConfig"in o&&o.isMissingConfig)return void this.loggerWrapper.error("Cannot get config file","Make sure that your projectId & flowId are correct");const{executionId:s,stepId:n,token:a,code:u,isPopup:d,exchangeError:c,redirectAuthCallbackUrl:h,redirectAuthBackupCallbackUri:f,redirectAuthCodeChallenge:g,redirectAuthInitiator:p,ssoQueryParams:m}=l(this.flowId,this.loggerWrapper);window.addEventListener("popstate",t(this,P,"f").popstate),window.addEventListener("components-context",t(this,P,"f").componentsContext),t(this,U,"f").subscribe(t(this,E,"m",H).bind(this)),t(this,U,"f").update(Object.assign({projectId:this.projectId,flowId:this.flowId,baseUrl:this.baseUrl,tenant:this.tenantId,redirectUrl:this.redirectUrl,locale:this.locale,stepId:n,executionId:s,token:a,code:u,isPopup:d,exchangeError:c,redirectAuthCallbackUrl:h,redirectAuthBackupCallbackUri:f,redirectAuthCodeChallenge:g,redirectAuthInitiator:p},m)),i(this,L,!0,"f")}))}disconnectedCallback(){var e;t(this,U,"f").unsubscribeAll(),t(this,O,"f").unsubscribeAll(),t(this,E,"m",$).call(this),window.removeEventListener("popstate",t(this,P,"f").popstate),window.removeEventListener("components-context",t(this,P,"f").componentsContext),null===(e=super.disconnectedCallback)||void 0===e||e.call(this)}attributeChangedCallback(e,i,r){var o;if(null===(o=super.attributeChangedCallback)||void 0===o||o.call(this,e,i,r),this.shadowRoot.isConnected&&t(this,L,"f")&&i!==r&&M.observedAttributes.includes(e)){t(this,E,"m",R).call(this);const o=null===i;t(this,U,"f").update((({stepId:t,executionId:i})=>{let s=t,n=i;return o||(n=null,s=null,d()),{[c(e)]:r,stepId:s,executionId:n}})),t(this,O,"f").update({isDebug:this.debug})}}}M=X,L=new WeakMap,S=new WeakMap,U=new WeakMap,O=new WeakMap,W=new WeakMap,D=new WeakMap,P=new WeakMap,N=new WeakMap,E=new WeakSet,F=function(){this.injectStyle("\n :host {\n\t\t\twidth: 100%;\n display: block;\n\t\t}\n\n\t\t#root {\n\t\t\theight: 100%;\n display: flex;\n flex-direction: column;\n\t\t}\n\n #content-root {\n all: initial;\n transition: opacity 200ms ease-in-out;\n }\n\n\t\t#root[data-theme] {\n\t\t\tbackground-color: transparent;\n\t\t}\n\n\t\t.fade-out {\n\t\t\topacity: 0.1!important;\n\t\t}\n\n .hidden {\n display: none;\n }\n ")},K=function(){t(this,E,"m",F).call(this),this.slotElement=document.createElement("slot"),this.slotElement.classList.add("hidden"),this.rootElement.appendChild(this.slotElement)},R=function(){const t=["base-url","tenant","locale","debug","redirect-url","auto-focus","store-last-authenticated-user","refresh-cookie-name","keep-last-authenticated-user-after-logout","preview","storage-prefix","form","client","validate-on-blur","style-id","outbound-app-id","outbound-app-scopes","theme-override"];M.observedAttributes.forEach((e=>{if(!t.includes(e)&&!this[c(e)])throw Error(`${e} cannot be empty`)}))},T=function(){const{stepId:e,executionId:i}=h(this.flowId);t(this,U,"f").update({stepId:e,executionId:i})},B=function(i,r){a&&"function"==typeof a||this.logger.error("SDK was not loaded properly",a,JSON.stringify(a));const o=Object.assign(Object.assign({persistTokens:!0,preview:this.preview,storagePrefix:this.storagePrefix,storeLastAuthenticatedUser:this.storeLastAuthenticatedUser,keepLastAuthenticatedUserAfterLogout:this.keepLastAuthenticatedUserAfterLogout,refreshCookieName:this.refreshCookieName},M.sdkConfigOverrides),{projectId:i,baseUrl:r});t(this,S,"f")&&(o.customStorage=t(this,S,"f")),this.sdk=a(o),["start","next"].forEach((t=>{const i=this.sdk.flow[t],r=p(i,1e3,3);this.sdk.flow[t]=(...i)=>e(this,void 0,void 0,(function*(){try{return yield r(...i)}catch(e){return this.logger.error(`Error in sdk flow ${t} function`,e),{error:{errorCode:I,errorDescription:e.toString()}}}}))}))},H=function(i,r,o){return e(this,void 0,void 0,(function*(){const{projectId:e,baseUrl:r}=i;if(o("projectId")||o("baseUrl")){if(!e)return;t(this,E,"m",B).call(this,e,r)}t(this,N,"f").call(this,i)}))},J=function(){return e(this,void 0,void 0,(function*(){const e=yield this.getConfig();return"isMissingConfig"in e&&e.isMissingConfig&&(yield t(this,E,"m",V).call(this))}))},V=function(){return e(this,void 0,void 0,(function*(){const t=f({projectId:this.projectId,filename:x,assetsFolder:j,baseUrl:this.baseStaticUrl});try{return yield g(t,"json"),!0}catch(t){return!1}}))},q=function(e){i(this,W,Object.assign(Object.assign({},t(this,W,"f")),e.detail),"f")},$=function(){var e;null===(e=t(this,D,"f"))||void 0===e||e.remove(),i(this,D,null,"f")},z=function(r){return e(this,arguments,void 0,(function*({isDebug:e}){e?(i(this,D,document.createElement("descope-debugger"),"f"),Object.assign(t(this,D,"f").style,{position:"fixed",top:"0",right:"0",height:"100vh",width:"100vw",pointerEvents:"none",zIndex:99999}),yield import("../debugger-wc.js"),document.body.appendChild(t(this,D,"f"))):t(this,E,"m",$).call(this)}))},Q=function(e,i){var r;e&&this.debug&&(null===(r=t(this,D,"f"))||void 0===r||r.updateData({title:e,description:i}))},X.sdkConfigOverrides={baseHeaders:{"x-descope-sdk-name":"web-component","x-descope-sdk-version":"4.0.0"}};export{X as default};
2
2
  //# sourceMappingURL=BaseDescopeWc.js.map
package/dist/esm/helpers/helpers.js CHANGED
@@ -1,2 +1,2 @@
1
- import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as c,SAML_IDP_STATE_ID_PARAM_NAME as u,WSFED_IDP_STATE_ID_PARAM_NAME as d,SAML_IDP_USERNAME_PARAM_NAME as s,DESCOPE_IDP_INITIATED_PARAM_NAME as a,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as h,OIDC_LOGIN_HINT_PARAM_NAME as v,OIDC_PROMPT_PARAM_NAME as w,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as S,OIDC_RESOURCE_PARAM_NAME as g,DESCOPE_ATTRIBUTE_PREFIX as y,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as b,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as I,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as E}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as k}from"../types.js";import{OVERRIDE_CONTENT_URL as x,BASE_CONTENT_URL as T,ASSETS_FOLDER as U}from"../constants/content.js";const L=["descope-enriched-text"];function $(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let c=0;c<i;c++)try{return yield e(...r)}catch(e){t=e,c<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,c+1))})))}throw t}))}function O(t){return new URLSearchParams(window.location.search).get(t)}function j(t){if(window.history.replaceState&&O(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function R(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function F({projectId:t,filename:e,assetsFolder:n=U,baseUrl:o}){const r=new URL(x||o||T);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function N(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?k.forward:n<o?k.backward:void 0}const B=t=>{let[n="",o=""]=(O(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function H(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function M(){j(e)}function W(){return O(n)||void 0}function q(){j(n)}function _(){return O(o)||void 0}function Q(){return"popup"===O(r)}function z(){return O(i)||void 0}function D(){j(o)}function G(){j(r)}function V(){j(i)}function J(){return{redirectAuthCodeChallenge:O(b),redirectAuthCallbackUrl:O(I),redirectAuthBackupCallbackUri:O(C),redirectAuthInitiator:O(E)}}function K(){return O(c)}function X(){j(c)}function Y(){return O(u)}function Z(){j(u)}function tt(){return O(d)}function et(){j(d)}function nt(){return O(s)}function ot(){j(s)}function rt(){return O(a)}function it(){j(a)}function ct(){return O(l)}function ut(){return O(p)}function dt(){return O(m)}function st(){j(l)}function at(){j(p)}function lt(){j(m)}function pt(){return O(f)}function mt(){j(f)}function ft(){return O(h)}function ht(){j(h)}function vt(){return O(v)}function wt(){j(v)}function St(){return O(w)}function gt(){j(w)}function yt(){return O(S)}function At(){j(S)}function bt(){return O(g)}function It(){j(g)}const Ct=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),Et=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${y}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),kt=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=B(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&M();const i=W();i&&q();const c=_();c&&D();const u=Q();u&&G();const d=z();d&&V();const{redirectAuthCodeChallenge:s,redirectAuthCallbackUrl:a,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const h=tt();h&&et();const v=nt();f&&ot();const w=rt();w&&it();const S=ct();S&&st();const g=ut();g&&at();const y=dt();y&&lt();const A=pt();A&&mt();const b=ft();b&&ht();const I=vt();I&&wt();const C=St();C&&gt();const E=yt();E&&At();const P=bt();P&&It();return{executionId:n,stepId:o,token:i,code:c,isPopup:u,exchangeError:d,redirectAuthCodeChallenge:s,redirectAuthCallbackUrl:a,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:h,samlIdpUsername:v,descopeIdpInitiated:"true"===w,ssoAppId:S,customAppId:g,oidcLoginHint:I,oidcPrompt:C,oidcErrorRedirectUri:E,oidcResource:P,thirdPartyAppId:y,thirdPartyAppStateId:A,applicationScopes:b}}},xt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Tt='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',Ut=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Tt);setTimeout((()=>{null==e||e.focus()}))}},Lt=t=>{t.querySelectorAll("*[name]").forEach((e=>{e.addEventListener("blur",(()=>{var n;const o=()=>{var t;const n=e.focus;e.focus=()=>{},null===(t=e.reportValidity)||void 0===t||t.call(e),setTimeout((()=>{e.focus=n}))};if("true"===e.getAttribute("invalid")||(null===(n=e.value)||void 0===n?void 0:n.length))return void o();const r={timer:void 0},i=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(r.timer),r.timer=void 0)};r.timer=setTimeout((()=>{t.removeEventListener("click",i),o(),r.timer=void 0}),150),t.addEventListener("click",i,{once:!0})}))}))};function $t(t,e,n){return new Promise(((o,r)=>{let i=!1;const c=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(c),o(t))})).catch((t=>{i||(clearTimeout(c),r(t))}))}))}const Ot=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},jt=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:c,oidcLoginHint:u,oidcPrompt:d,oidcErrorRedirectUri:s,oidcResource:a,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||c||u||d||s||a||l||p||m),Rt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.innerHTML=`\n <input type="hidden" role="saml-response" name="SAMLResponse" value="${e}" />\n <input type="hidden" role="saml-relay-state" name="RelayState" value="${n}" />\n <input style="display: none;" id="SAMLSubmitButton" type="submit" value="Continue" />\n `,document.body.appendChild(r),o(r)},Ft=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t;const i=(t,e)=>{const n=document.createElement("input");return n.type="hidden",n.name=t,n.value=e,n};r.appendChild(i("wa","wsignin1.0")),r.appendChild(i("wresult",e)),r.appendChild(i("wctx",n));const c=document.createElement("input");c.type="submit",c.id="WSFedSubmitButton",c.value="Continue",c.style.display="none",r.appendChild(c),document.body.appendChild(r),o(r)},Nt=t=>null==t?void 0:t.submit(),Bt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},Ht=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Mt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Wt=t=>L.includes(t),qt=t=>{var e,n,o;const r=(i=t.screenState,c=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(i).filter((([t,e])=>!c(e,t)))));var i,c;const{screenState:{errorText:u,errorType:d}}=t;return(u||d)&&(r.error={text:u,type:d}),t.action&&(r.action=t.action),(null===(o=null===(n=null===(e=t.screenState)||void 0===e?void 0:e.componentsConfig)||void 0===n?void 0:n.thirdPartyAppApproveScopes)||void 0===o?void 0:o.data)&&(r.inboundAppApproveScopes=t.screenState.componentsConfig.thirdPartyAppApproveScopes.data),r},_t=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function Qt(t,e){return`${A}.${e?`${t}_${e}`:t}`}const zt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,c=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,u=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,d=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",s=window.open(d,e,`width=${n},height=${o},top=${u},left=${c},scrollbars=yes,resizable=yes`);return s.location.href=t,s.focus(),s};export{Tt as FOCUSABLE_INPUTS_SELECTOR,Ct as camelCase,ht as clearApplicationScopesParamFromUrl,D as clearCodeFromUrl,at as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,V as clearExchangeErrorFromUrl,G as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,wt as clearOIDCLoginHintParamFromUrl,gt as clearOIDCPromptParamFromUrl,It as clearOIDCResourceParamFromUrl,Mt as clearPreviousExternalInputs,M as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,st as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,q as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,Et as createIsChanged,R as fetchContent,N as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Ot as getChromiumVersion,_ as getCodeFromUrl,F as getContentUrl,ut as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,z as getExchangeErrorFromUrl,Bt as getFirstNonEmptyValue,Q as getIsPopupFromUrl,yt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,vt as getOIDCLoginHintParamFromUrl,St as getOIDCPromptParamFromUrl,bt as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,B as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,ct as getSSOAppIdParamFromUrl,Qt as getScriptResultPath,dt as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,W as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,Ut as handleAutoFocus,Lt as handleReportValidityOnBlur,kt as handleUrlParams,Rt as injectSamlIdpForm,Ft as injectWsFedIdpForm,H as isChromium,Ht as leadingDebounce,zt as openCenteredPopup,Wt as shouldHandleMarkdown,jt as showFirstScreenOnExecutionInit,Nt as submitForm,$t as timeoutPromise,_t as transformScreenInputs,qt as transformStepStateForCustomScreen,xt as withMemCache,$ as withRetry};
1
+ import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as s,SAML_IDP_STATE_ID_PARAM_NAME as c,WSFED_IDP_STATE_ID_PARAM_NAME as a,SAML_IDP_USERNAME_PARAM_NAME as u,DESCOPE_IDP_INITIATED_PARAM_NAME as d,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as v,OIDC_LOGIN_HINT_PARAM_NAME as h,OIDC_PROMPT_PARAM_NAME as y,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as g,OIDC_RESOURCE_PARAM_NAME as w,DESCOPE_ATTRIBUTE_PREFIX as b,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as S,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as k,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as I}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as E}from"../types.js";import{OVERRIDE_CONTENT_URL as T,BASE_CONTENT_URL as O,ASSETS_FOLDER as j}from"../constants/content.js";const x=["descope-enriched-text"];function U(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let s=0;s<i;s++)try{return yield e(...r)}catch(e){t=e,s<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,s+1))})))}throw t}))}function L(t){return new URLSearchParams(window.location.search).get(t)}function $(t){if(window.history.replaceState&&L(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function R(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function M({projectId:t,filename:e,assetsFolder:n=j,baseUrl:o}){const r=new URL(T||o||O);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function F(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?E.forward:n<o?E.backward:void 0}const N=t=>{let[n="",o=""]=(L(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function q(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function B(){$(e)}function H(){return L(n)||void 0}function D(){$(n)}function Q(){return L(o)||void 0}function W(){return"popup"===L(r)}function G(){return L(i)||void 0}function V(){$(o)}function _(){$(r)}function z(){$(i)}function J(){return{redirectAuthCodeChallenge:L(S),redirectAuthCallbackUrl:L(C),redirectAuthBackupCallbackUri:L(k),redirectAuthInitiator:L(I)}}function K(){return L(s)}function X(){$(s)}function Y(){return L(c)}function Z(){$(c)}function tt(){return L(a)}function et(){$(a)}function nt(){return L(u)}function ot(){$(u)}function rt(){return L(d)}function it(){$(d)}function st(){return L(l)}function ct(){return L(p)}function at(){return L(m)}function ut(){$(l)}function dt(){$(p)}function lt(){$(m)}function pt(){return L(f)}function mt(){$(f)}function ft(){return L(v)}function vt(){$(v)}function ht(){return L(h)}function yt(){$(h)}function gt(){return L(y)}function wt(){$(y)}function bt(){return L(g)}function At(){$(g)}function St(){return L(w)}function Ct(){$(w)}const kt=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),It=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${b}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),Et=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=N(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&B();const i=H();i&&D();const s=Q();s&&V();const c=W();c&&_();const a=G();a&&z();const{redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const v=tt();v&&et();const h=nt();f&&ot();const y=rt();y&&it();const g=st();g&&ut();const w=ct();w&&dt();const b=at();b&&lt();const A=pt();A&&mt();const S=ft();S&&vt();const C=ht();C&&yt();const k=gt();k&&wt();const I=bt();I&&At();const P=St();P&&Ct();return{executionId:n,stepId:o,token:i,code:s,isPopup:c,exchangeError:a,redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:v,samlIdpUsername:h,descopeIdpInitiated:"true"===y,ssoAppId:g,customAppId:w,oidcLoginHint:C,oidcPrompt:k,oidcErrorRedirectUri:I,oidcResource:P,thirdPartyAppId:b,thirdPartyAppStateId:A,applicationScopes:S}}},Tt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Ot='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',jt=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Ot);setTimeout((()=>{null==e||e.focus()}))}},xt=t=>{t.querySelectorAll("*[name]").forEach((e=>{e.addEventListener("blur",(()=>{var n;const o=()=>{var t;const n=e.focus;e.focus=()=>{},null===(t=e.reportValidity)||void 0===t||t.call(e),setTimeout((()=>{e.focus=n}))};if("true"===e.getAttribute("invalid")||(null===(n=e.value)||void 0===n?void 0:n.length))return void o();const r={timer:void 0},i=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(r.timer),r.timer=void 0)};r.timer=setTimeout((()=>{t.removeEventListener("click",i),o(),r.timer=void 0}),150),t.addEventListener("click",i,{once:!0})}))}))};function Ut(t,e,n){return new Promise(((o,r)=>{let i=!1;const s=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(s),o(t))})).catch((t=>{i||(clearTimeout(s),r(t))}))}))}const Lt=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},$t=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:s,oidcLoginHint:c,oidcPrompt:a,oidcErrorRedirectUri:u,oidcResource:d,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||s||c||a||u||d||l||p||m),Rt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.innerHTML=`\n <input type="hidden" role="saml-response" name="SAMLResponse" value="${e}" />\n <input type="hidden" role="saml-relay-state" name="RelayState" value="${n}" />\n <input style="display: none;" id="SAMLSubmitButton" type="submit" value="Continue" />\n `,document.body.appendChild(r),o(r)},Mt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t;const i=(t,e)=>{const n=document.createElement("input");return n.type="hidden",n.name=t,n.value=e,n};r.appendChild(i("wa","wsignin1.0")),r.appendChild(i("wresult",e)),r.appendChild(i("wctx",n));const s=document.createElement("input");s.type="submit",s.id="WSFedSubmitButton",s.value="Continue",s.style.display="none",r.appendChild(s),document.body.appendChild(r),o(r)},Ft=t=>null==t?void 0:t.submit(),Nt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},qt=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Bt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Ht=t=>x.includes(t),Dt={minLength:"data-password-policy-value-minlength",strength:"data-password-policy-value-passwordstrength",disallowedChars:"data-password-policy-value-disallowedchars",email:"data-password-policy-value-email",activePolicies:"active-policies",availablePolicies:"available-policies"},Qt=(t,e)=>{var n;const o=null==t?void 0:t.componentsDynamicAttrs;if(!o)return;const r=Object.entries(o).find((([t])=>(t=>{var e;return null===(e=t.match(/\[data-name=["']([^"']+)["']\]/))||void 0===e?void 0:e[1]})(t)===e));return null===(n=null==r?void 0:r[1])||void 0===n?void 0:n.attributes},Wt=[{key:"totp",from:t=>t.totp},{key:"notp",from:t=>t.notp},{key:"sentTo",from:t=>t.sentTo},{key:"sso",from:t=>t.sso},{key:"selfProvisionDomains",from:t=>t.selfProvisionDomains},{key:"inboundAppApproveScopes",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.thirdPartyAppApproveScopes)||void 0===n?void 0:n.data}},{key:"securityQuestionsSetup",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqSetup}},{key:"securityQuestionsVerify",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqVerify}},{key:"userTenants",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userSelectedTenant)||void 0===n?void 0:n.data}},{key:"userRoles",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userRoles)||void 0===n?void 0:n.data}},{key:"ssoApplications",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoApplications)||void 0===n?void 0:n.data}},{key:"ssoConfigurations",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoConfigurations)||void 0===n?void 0:n.data}},{key:"samlAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlMappings)||void 0===n?void 0:n.options}},{key:"oidcAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.oidcMappings)||void 0===n?void 0:n.options}},{key:"samlGroupMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlGroupMappings)||void 0===n?void 0:n.options}},{key:"passwordPolicy",from:t=>{var e;return(t=>{if(!t)return;const e=Object.fromEntries(Object.entries(Dt).map((([e,n])=>[e,t[n]])).filter((([,t])=>void 0!==t)));return Object.keys(e).length?e:void 0})(null===(e=t.componentsConfig)||void 0===e?void 0:e.newPassword)}},{key:"recoveryCodes",from:t=>(t=>{const e=Qt(t,"recoveryCodes");if(e)return Array.isArray(e.data)?e.data.map((t=>t.value)):[]})(t.componentsConfig)},{key:"outboundApp",from:t=>(t=>{const e=Qt(t,"outboundApp");if(e)return{label:e.label,iconSrc:e["icon-src"],appId:e["data-descope-outbound-oauth-app-id"]}})(t.componentsConfig)}],Gt=t=>{const e=(n=t.screenState,o=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(n).filter((([t,e])=>!o(e,t)))));var n,o;const{screenState:{errorText:r,errorType:i}}=t;(r||i)&&(e.error={text:r,type:i}),t.action&&(e.action=t.action);const s=(t=>{if(!t)return;const e={};return Wt.forEach((({key:n,from:o})=>{const r=o(t);void 0!==r&&(e[n]=r)})),Object.keys(e).length?e:void 0})(t.screenState);return s&&(e.data=s),e},Vt=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function _t(t,e){return`${A}.${e?`${t}_${e}`:t}`}const zt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,s=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,c=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,a=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",u=window.open(a,e,`width=${n},height=${o},top=${c},left=${s},scrollbars=yes,resizable=yes`);return u.location.href=t,u.focus(),u};export{Ot as FOCUSABLE_INPUTS_SELECTOR,kt as camelCase,vt as clearApplicationScopesParamFromUrl,V as clearCodeFromUrl,dt as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,z as clearExchangeErrorFromUrl,_ as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,yt as clearOIDCLoginHintParamFromUrl,wt as clearOIDCPromptParamFromUrl,Ct as clearOIDCResourceParamFromUrl,Bt as clearPreviousExternalInputs,B as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,ut as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,D as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,It as createIsChanged,R as fetchContent,F as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Lt as getChromiumVersion,Q as getCodeFromUrl,M as getContentUrl,ct as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,G as getExchangeErrorFromUrl,Nt as getFirstNonEmptyValue,W as getIsPopupFromUrl,bt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,ht as getOIDCLoginHintParamFromUrl,gt as getOIDCPromptParamFromUrl,St as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,N as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,st as getSSOAppIdParamFromUrl,_t as getScriptResultPath,at as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,H as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,jt as handleAutoFocus,xt as handleReportValidityOnBlur,Et as handleUrlParams,Rt as injectSamlIdpForm,Mt as injectWsFedIdpForm,q as isChromium,qt as leadingDebounce,zt as openCenteredPopup,Ht as shouldHandleMarkdown,$t as showFirstScreenOnExecutionInit,Ft as submitForm,Ut as timeoutPromise,Vt as transformScreenInputs,Gt as transformStepStateForCustomScreen,Tt as withMemCache,U as withRetry};
2
2
  //# sourceMappingURL=helpers.js.map
package/dist/esm/helpers/helpers.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n CustomScreenState,\n Direction,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (rootEle: HTMLElement) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n ele.reportValidity?.();\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n formEle.innerHTML = `\n <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n `;\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n const createHiddenInput = (name: string, value: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n return input;\n };\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n if (state.screenState?.componentsConfig?.thirdPartyAppApproveScopes?.data) {\n sanitizedState.inboundAppApproveScopes =\n state.screenState.componentsConfig.thirdPartyAppApproveScopes.data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","querySelectorAll","forEach","addEventListener","onBlur","origFocus","reportValidity","call","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","filter","errorText","errorType","text","_c","_b","componentsConfig","thirdPartyAppApproveScopes","data","inboundAppApproveScopes","transformScreenInputs","inputs","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCAuCA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA8BC,IACzCA,EAAQC,iBAAiB,WAAWC,SAASrD,IAC3CA,EAAIsD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYxD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACM,QAAlBnI,EAAAkF,EAAIyD,sBAAc,IAAA3I,GAAAA,EAAA4I,KAAA1D,GAClBhJ,YAAW,KAETgJ,EAAIiD,MAAQO,CAAS,GACrB,EAKJ,GAFmE,SAAhCxD,EAAI2D,aAAa,aAEP,QAAX7I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAgB,IAQF,MAAMK,EAAM,CAAEC,WAAOpI,GAEfqI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQpI,EACb,EAGHmI,EAAIC,MAAQ7M,YAAW,KACrBmM,EAAQe,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQpI,CAAS,GACpB,KAEH0H,EAAQG,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAIzN,SAAQ,CAACC,EAASyN,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ7M,YAAW,KACvByN,GAAU,OACOhJ,IAAb8I,EACFxN,EAAQwN,GAERC,EAAO,IAAI/L,MAAM,2BAA2B4L,QAC7C,GACAA,GAEHC,EACGI,MAAM9D,IACA6D,IACHR,aAAaJ,GACb9M,EAAQ6J,GACT,IAEF+D,OAAO9N,IACD4N,IACHR,aAAaJ,GACbW,EAAO3N,GACR,GACD,GAER,CAEO,MAAM+N,GAAqB,WAChC,MAAMC,EAA4C,QAAlC/J,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB2J,qBAAe,IAAAhK,OAAA,EAAAA,EAAA+J,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEhE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAuD,GACDhE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUwD,GAAoB,CAC/BnN,EACAoN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EACjBuN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC9N,EACA+N,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EAGjB,MAAMiO,EAAoB,CAAC1F,EAAcE,KACvC,MAAMyF,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM3F,KAAOA,EACb2F,EAAMzF,MAAQA,EACPyF,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU3F,MAAQ,WAClB2F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B9N,GAC7B8N,GAAS8C,EAAKE,MAAM5Q,KAAMF,GAC/B0N,aAAaI,GACbA,EAAUrN,YAAW,KACnBqN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAASrD,GAAQA,EAAIuH,UAAS,EAGtBC,GAAwBC,GACnCvR,EAAcwR,SAASD,GAYZE,GACX/H,cAEA,MAAMgI,GAZNd,EAaElH,EAAMiI,YAZRC,EAaE,CAACC,EAAGd,IAAQe,EAAoBN,SAAST,IAAQA,EAAIgB,WAAW,KAXlEpP,OAAOC,YACLD,OAAOE,QAAQ+N,GAAKoB,QAClB,EAAEjB,EAAKrG,MAAYkH,EAAUlH,EAAOqG,OAN3B,IACbH,EACAgB,EAgBA,MACED,aAAaM,UAAEA,EAASC,UAAEA,IACxBxI,EAeJ,OAbIuI,GAAaC,KACfR,EAAe/Q,MAAQ,CAAEwR,KAAMF,EAAW7B,KAAM8B,IAG9CxI,EAAMkG,SACR8B,EAAe9B,OAASlG,EAAMkG,SAGqC,QAAjEwC,EAAqC,QAArCC,EAAmB,QAAnBzN,EAAA8E,EAAMiI,mBAAa,IAAA/M,OAAA,EAAAA,EAAA0N,wBAAkB,IAAAD,OAAA,EAAAA,EAAAE,kCAA4B,IAAAH,OAAA,EAAAA,EAAAI,QACnEd,EAAee,wBACb/I,EAAMiI,YAAYW,iBAAiBC,2BAA2BC,MAG3Dd,CAAc,EAGVgB,GAAyBC,IACpC,MAAMxQ,EAAGQ,OAAA8H,OAAA,CAAA,EAAQkI,GAMjB,OAJIA,EAAOF,0BACTtQ,EAAIoQ,2BAA6BI,EAAOF,yBAGnCtQ,CAAG,EAGI,SAAAyQ,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/B/Q,EACAgR,EACAC,EACAC,KAEA,MAAMC,OACkB7N,IAAtBnE,OAAOiS,WACHjS,OAAOiS,WACNjS,OAAOkS,OAAeC,KACvBC,OACiBjO,IAArBnE,OAAOqS,UACHrS,OAAOqS,UACNrS,OAAOkS,OAAeI,IAWvBH,IARJnS,OAAOuS,YACPlE,SAASmE,gBAAgBC,aACzBzS,OAAOkS,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJtS,OAAO2S,aACPtE,SAASmE,gBAAgBI,cACzB5S,OAAOkS,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EA7sBR,WACE,MAAMC,EAAKlP,UAAUC,WAAa,GAC5BkP,EAAW,eAAepP,KAAKmP,GAE/BE,EACJ,SAASrP,KAAKmP,KAAQ,2CAA2CnP,KAAKmP,GAExE,OAAOC,GAAYC,CACrB,CAqsBqBC,GAAmB,cAAgB,GAChDC,EAAQnT,OAAOoT,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAMlT,SAASQ,KAAOI,EACtBsS,EAAMxH,QAECwH,CAAK"}
1
+ {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n ComponentsConfig,\n CustomScreenData,\n CustomScreenState,\n Direction,\n ScreenState,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (rootEle: HTMLElement) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n ele.reportValidity?.();\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n formEle.innerHTML = `\n <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n `;\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n const createHiddenInput = (name: string, value: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n return input;\n };\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n minLength: 'data-password-policy-value-minlength',\n strength: 'data-password-policy-value-passwordstrength',\n disallowedChars: 'data-password-policy-value-disallowedchars',\n email: 'data-password-policy-value-email',\n activePolicies: 'active-policies',\n availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n if (!newPassword) return undefined;\n const policy = Object.fromEntries(\n Object.entries(PASSWORD_POLICY_KEYS)\n .map(([clean, raw]) => [clean, newPassword[raw]])\n .filter(([, v]) => v !== undefined),\n );\n return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n componentsConfig: ComponentsConfig | undefined,\n name: string,\n): Record<string, any> | undefined => {\n const entries = componentsConfig?.componentsDynamicAttrs;\n if (!entries) return undefined;\n const match = Object.entries(entries).find(\n ([selector]) => dataNameOf(selector) === name,\n );\n return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n if (!attributes) return undefined;\n return Array.isArray(attributes.data)\n ? attributes.data.map((code: { value: string }) => code.value)\n : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n if (!attributes) return undefined;\n return {\n label: attributes.label,\n iconSrc: attributes['icon-src'],\n appId: attributes['data-descope-outbound-oauth-app-id'],\n };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n key: string;\n from: (screenState: ScreenState) => unknown;\n}[] = [\n // moved verbatim from the top level of the screen state\n { key: 'totp', from: (s) => s.totp },\n { key: 'notp', from: (s) => s.notp },\n { key: 'sentTo', from: (s) => s.sentTo },\n { key: 'sso', from: (s) => s.sso },\n { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n {\n key: 'inboundAppApproveScopes',\n from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n },\n { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n {\n key: 'userTenants',\n from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n },\n { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n {\n key: 'ssoApplications',\n from: (s) => s.componentsConfig?.ssoApplications?.data,\n },\n {\n key: 'ssoConfigurations',\n from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n },\n {\n key: 'samlAttributeMappings',\n from: (s) => s.componentsConfig?.samlMappings?.options,\n },\n {\n key: 'oidcAttributeMappings',\n from: (s) => s.componentsConfig?.oidcMappings?.options,\n },\n {\n key: 'samlGroupMappings',\n from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n },\n {\n key: 'passwordPolicy',\n from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n },\n // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n if (!screenState) return undefined;\n\n const data: Record<string, unknown> = {};\n DATA_FIELDS.forEach(({ key, from }) => {\n const value = from(screenState);\n if (value !== undefined) data[key] = value;\n });\n\n return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n // so a backend-provided `data` never leaks through — we always set our own below.\n const data = buildCustomScreenData(state.screenState);\n if (data) {\n sanitizedState.data = data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","querySelectorAll","forEach","addEventListener","onBlur","origFocus","reportValidity","call","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA8BC,IACzCA,EAAQC,iBAAiB,WAAWC,SAASrD,IAC3CA,EAAIsD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYxD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACM,QAAlBnI,EAAAkF,EAAIyD,sBAAc,IAAA3I,GAAAA,EAAA4I,KAAA1D,GAClBhJ,YAAW,KAETgJ,EAAIiD,MAAQO,CAAS,GACrB,EAKJ,GAFmE,SAAhCxD,EAAI2D,aAAa,aAEP,QAAX7I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAgB,IAQF,MAAMK,EAAM,CAAEC,WAAOpI,GAEfqI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQpI,EACb,EAGHmI,EAAIC,MAAQ7M,YAAW,KACrBmM,EAAQe,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQpI,CAAS,GACpB,KAEH0H,EAAQG,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAIzN,SAAQ,CAACC,EAASyN,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ7M,YAAW,KACvByN,GAAU,OACOhJ,IAAb8I,EACFxN,EAAQwN,GAERC,EAAO,IAAI/L,MAAM,2BAA2B4L,QAC7C,GACAA,GAEHC,EACGI,MAAM9D,IACA6D,IACHR,aAAaJ,GACb9M,EAAQ6J,GACT,IAEF+D,OAAO9N,IACD4N,IACHR,aAAaJ,GACbW,EAAO3N,GACR,GACD,GAER,CAEO,MAAM+N,GAAqB,WAChC,MAAMC,EAA4C,QAAlC/J,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB2J,qBAAe,IAAAhK,OAAA,EAAAA,EAAA+J,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEhE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAuD,GACDhE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUwD,GAAoB,CAC/BnN,EACAoN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EACjBuN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC9N,EACA+N,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EAGjB,MAAMiO,EAAoB,CAAC1F,EAAcE,KACvC,MAAMyF,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM3F,KAAOA,EACb2F,EAAMzF,MAAQA,EACPyF,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU3F,MAAQ,WAClB2F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B9N,GAC7B8N,GAAS8C,EAAKE,MAAM5Q,KAAMF,GAC/B0N,aAAaI,GACbA,EAAUrN,YAAW,KACnBqN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAASrD,GAAQA,EAAIuH,UAAS,EAGtBC,GAAwBC,GACnCvR,EAAcwR,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACAzH,WAEA,MAAM3H,EAAUoP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKrP,EAAS,OACd,MAAMsP,EAAQxP,OAAOE,QAAQA,GAASiM,MACpC,EAAEsD,KAnCa,CAACA,IAAwC,IAAAxN,EAC1D,OAAgD,QAAhDA,EAAAwN,EAASD,MAAM,yCAAiC,IAAAvN,OAAA,EAAAA,EAAG,EAAE,EAkCnCyN,CAAWD,KAAc5H,IAE3C,OAAmB,QAAZ5F,EAAAuN,aAAK,EAALA,EAAQ,UAAI,IAAAvN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBqI,GAGA,CAEJ,CAAEvB,IAAK,OAAQ/G,KAAOV,GAAMA,EAAEiJ,MAC9B,CAAExB,IAAK,OAAQ/G,KAAOV,GAAMA,EAAEkJ,MAC9B,CAAEzB,IAAK,SAAU/G,KAAOV,GAAMA,EAAEmJ,QAChC,CAAE1B,IAAK,MAAO/G,KAAOV,GAAMA,EAAEoJ,KAC7B,CAAE3B,IAAK,uBAAwB/G,KAAOV,GAAMA,EAAEqJ,sBAE9C,CACE5B,IAAK,0BACL/G,KAAOV,YAAM,OAAgD,QAAhDsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEiO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0B/G,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE2I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2B/G,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE2I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACL/G,KAAOV,YAAM,OAAwC,QAAxCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEqO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAa/G,KAAOV,IAAK,IAAA1E,EAAAgO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEsO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACL/G,KAAOV,YAAM,OAAqC,QAArCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEuO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACL/G,KAAOV,YAAM,OAAuC,QAAvCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEwO,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACL/G,KAAOV,YAAM,OAAkC,QAAlCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEyO,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACL/G,KAAOV,YAAM,OAAkC,QAAlCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAE2O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACL/G,KAAOV,YAAM,OAAuC,QAAvCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAE4O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACL/G,KAAOV,UAAM,MAhGe,CAC9BmK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAAS/Q,OAAOC,YACpBD,OAAOE,QAAQ4O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAaxO,IAANwO,KAEvB,OAAOpR,OAAOkO,KAAK6C,GAAQrH,OAASqH,OAASnO,CAAS,EAuFvCyO,SAAwBpP,EAAA0E,EAAE2I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiB/G,KAAOV,GAzET,CAAC2I,IACvB,MAAMhI,EAAa+H,GAAeC,EAAkB,iBACpD,GAAKhI,EACL,OAAOF,MAAMkK,QAAQhK,EAAW6I,MAC5B7I,EAAW6I,KAAKa,KAAK3I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+BwJ,CAAgB5K,EAAE2I,mBACvD,CAAElB,IAAK,cAAe/G,KAAOV,GAlET,CAAC2I,IACrB,MAAMhI,EAAa+H,GAAeC,EAAkB,eACpD,GAAKhI,EACL,MAAO,CACLkK,MAAOlK,EAAWkK,MAClBC,QAASnK,EAAW,YACpBoK,MAAOpK,EAAW,sCACnB,EA2DkCqK,CAAchL,EAAE2I,oBAuBxCsC,GACX7K,IAEA,MAAM8K,GAtJN5D,EAuJElH,EAAM+K,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlElS,OAAOC,YACLD,OAAOE,QAAQ+N,GAAKkD,QAClB,EAAE/C,EAAKrG,MAAYgK,EAAUhK,EAAOqG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBrL,GAEAoL,GAAaC,KACfP,EAAe7T,MAAQ,CAAEqU,KAAMF,EAAW1E,KAAM2E,IAG9CrL,EAAMkG,SACR4E,EAAe5E,OAASlG,EAAMkG,QAKhC,MAAMkD,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYnF,SAAQ,EAAG4D,MAAK/G,WAC1B,MAAMU,EAAQV,EAAKyK,QACLlP,IAAVmF,IAAqBoI,EAAK/B,GAAOrG,EAAK,IAGrC/H,OAAOkO,KAAKiC,GAAMzG,OAAUyG,OAA4BvN,CAAS,EAyB3D0P,CAAsBvL,EAAM+K,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMhT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ0K,GAMjB,OAJIA,EAAOC,0BACTjT,EAAI0Q,2BAA6BsC,EAAOC,yBAGnCjT,CAAG,EAGI,SAAAkT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/BxT,EACAyT,EACAC,EACAC,KAEA,MAAMC,OACkBtQ,IAAtBnE,OAAO0U,WACH1U,OAAO0U,WACN1U,OAAO2U,OAAeC,KACvBC,OACiB1Q,IAArBnE,OAAO8U,UACH9U,OAAO8U,UACN9U,OAAO2U,OAAeI,IAWvBH,IARJ5U,OAAOgV,YACP3G,SAAS4G,gBAAgBC,aACzBlV,OAAO2U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJ/U,OAAOoV,aACP/G,SAAS4G,gBAAgBI,cACzBrV,OAAO2U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EAz1BR,WACE,MAAMC,EAAK3R,UAAUC,WAAa,GAC5B2R,EAAW,eAAe7R,KAAK4R,GAE/BE,EACJ,SAAS9R,KAAK4R,KAAQ,2CAA2C5R,KAAK4R,GAExE,OAAOC,GAAYC,CACrB,CAi1BqBC,GAAmB,cAAgB,GAChDC,EAAQ5V,OAAO6V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM3V,SAASQ,KAAOI,EACtB+U,EAAMjK,QAECiK,CAAK"}
package/dist/esm/types.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"types.js","sources":["../../src/lib/types.ts"],"sourcesContent":["/* istanbul ignore file */\n\nimport type { JWTResponse } from '@descope/web-js-sdk';\nimport { createSdk } from '@descope/web-js-sdk';\n\nexport type SdkConfig = Parameters<typeof createSdk>[0];\nexport type Sdk = ReturnType<typeof createSdk>;\n\nexport type SdkFlowNext = Sdk['flow']['next'];\n\nexport type ComponentsDynamicAttrs = {\n attributes: Record<string, any>;\n};\n\nexport type ComponentsConfig = Record<string, any> & {\n componentsDynamicAttrs?: Record<string, ComponentsDynamicAttrs>;\n};\nexport type CssVars = Record<string, any>;\n\ntype KeepArgsByIndex<F, Indices extends readonly number[]> = F extends (\n ...args: infer A\n) => infer R\n ? (...args: PickArgsByIndex<A, Indices>) => R\n : never;\n\ntype PickArgsByIndex<\n All extends readonly any[],\n Indices extends readonly number[],\n> = {\n [K in keyof Indices]: Indices[K] extends keyof All ? All[Indices[K]] : never;\n};\n\ntype Project = {\n name: string;\n};\n\nexport enum Direction {\n backward = 'backward',\n forward = 'forward',\n}\n\nexport type LastAuthState = NonNullable<\n NextFnReturnPromiseValue['data']['lastAuth']\n> & {\n loginId?: string;\n name?: string;\n lastUsedPerScreen?: Record<string, string>;\n};\n\nexport type RealtimeOperandKind = 'value' | 'form' | 'list';\n\n// Operators the SDK is allowed to evaluate locally. The server's\n// clientSupportedRealtimeOperators must stay in sync — anything outside this\n// list is pre-evaluated server-side and shipped as a value operand.\n//\n// is-email / is-phone are intentionally absent: the server validates them\n// with dedicated libraries (contact.IsValid*); the client has no equivalent,\n// so the server keeps these CCs server-only.\nexport type RealtimeOperator =\n | 'equal'\n | 'not-equal'\n | 'contains'\n | 'doesnt-contains'\n | 'greater-than'\n | 'greater-than-or-equal'\n | 'less-than'\n | 'less-than-or-equal'\n | 'empty'\n | 'not-empty'\n | 'is-true'\n | 'is-false'\n | 'in'\n | 'not-in'\n | 'matches';\n\nexport interface RealtimeOperand {\n kind: RealtimeOperandKind;\n // Form is the context key the client looks up from the live form snapshot\n // (e.g. \"form.phone\"). Set only when kind === 'form'.\n form?: string;\n // Items is the operand list when kind === 'list'. Each element is a nested\n // operand — either a form placeholder or a resolved literal. Used when the\n // server detects an `in` / `not-in` / `contains` predicate whose array\n // contains `{{form.X}}` references; the client resolves them at eval time.\n items?: RealtimeOperand[];\n // Pre-resolved literal. Set only when kind === 'value', and may legitimately\n // be false / 0 / \"\" — do not treat absence as \"no value\" without checking\n // kind first.\n value?: unknown;\n}\n\nexport interface RealtimeAtomicCondition {\n operator: RealtimeOperator;\n target?: RealtimeOperand;\n predicate?: RealtimeOperand;\n}\n\nexport interface RealtimeRule {\n logicalOr?: boolean;\n atomicConditions: RealtimeAtomicCondition[];\n}\n\nexport interface RealtimeComponentsCondition {\n id?: string;\n componentIds: string[];\n action: string;\n rules: RealtimeRule[];\n}\n\n// the server sends the full user object; only the fields the SDK reads are\n// typed here\nexport interface ScreenStateUser {\n email?: string;\n loginIds?: string[];\n [key: string]: unknown;\n}\n\nexport interface ScreenState {\n errorText?: string;\n errorType?: string;\n componentsConfig?: ComponentsConfig;\n cssVars?: CssVars;\n form?: Record<string, string>;\n inputs?: Record<string, string>; // Backward compatibility\n lastAuth?: LastAuthState;\n project?: Project;\n totp?: { image?: string; provisionUrl?: string };\n notp?: { image?: string; redirectUrl?: string };\n selfProvisionDomains?: unknown;\n user?: ScreenStateUser;\n sso?: unknown;\n dynamicSelects?: unknown;\n keysInUse?: unknown;\n genericForm?: unknown;\n linkId?: unknown;\n sentTo?: unknown;\n clientScripts?: ClientScript[];\n // map of component IDs to their state — the FULL last-wins verdict over\n // all CCs (server-only + client-eligible) the BE evaluated at screen-init.\n // Used by `applyComponentsState` for the first DOM paint.\n componentsState?: Record<string, string>;\n // Subset of `componentsState` contributed by SERVER-ONLY CCs — those the\n // client cannot re-evaluate locally (operators on the server-only\n // allow-list like `is-email`, or rules referencing context the client\n // doesn't have). Parallels `componentsState` in structure but excludes\n // contributions from client-eligible CCs that also ship in\n // `realtimeComponentsConditions`.\n //\n // The realtime layer uses this as the fallback action to restore when a\n // realtime CC stops firing on a touched component — without it the SDK\n // can't tell whether the action in `componentsState` came from a\n // server-only CC (must persist) or from a realtime CC also re-shipped\n // (must clear).\n //\n // Absent on old backends; new SDKs fall back to a legacy heuristic that\n // infers the same information from `componentsState`, so the old-BE /\n // new-SDK combination still works correctly.\n serverOnlyComponentsState?: Record<string, string>;\n // Client-evaluable visibility conditions, populated only by new backends.\n // Absent on old backends; new SDKs ignore when absent.\n realtimeComponentsConditions?: RealtimeComponentsCondition[];\n}\n\nexport type SSOQueryParams = {\n oidcIdpStateId?: string;\n samlIdpStateId?: string;\n wsfedIdpStateId?: string;\n samlIdpUsername?: string;\n descopeIdpInitiated?: boolean;\n ssoAppId?: string;\n customAppId?: string;\n thirdPartyAppId: string;\n thirdPartyAppStateId?: string;\n applicationScopes?: string;\n} & OIDCOptions;\n\nexport type OIDCOptions = {\n oidcLoginHint?: string;\n oidcPrompt?: string;\n oidcErrorRedirectUri?: string;\n oidcResource?: string;\n};\n\nexport type FlowState = {\n flowId: string;\n projectId: string;\n baseUrl: string;\n tenant: string;\n stepId: string;\n stepName: string;\n executionId: string;\n action: string;\n redirectTo: string;\n redirectIsPopup: boolean;\n openInNewTabUrl?: string;\n redirectUrl: string;\n screenId: string;\n screenState: ScreenState;\n token: string;\n code: string;\n isPopup: boolean;\n exchangeError: string;\n webauthnTransactionId: string;\n webauthnOptions: string;\n redirectAuthCodeChallenge: string;\n redirectAuthCallbackUrl: string;\n redirectAuthBackupCallbackUri: string;\n redirectAuthInitiator: string;\n deferredRedirect: boolean;\n deferredPolling: boolean;\n locale: string;\n samlIdpResponseUrl: string;\n samlIdpResponseSamlResponse: string;\n samlIdpResponseRelayState: string;\n wsFedIdpResponseUrl: string;\n wsFedIdpResponseWresult: string;\n wsFedIdpResponseWctx: string;\n nativeResponseType: string;\n nativePayload: Record<string, any>;\n reqTimestamp: number;\n} & SSOQueryParams;\n\nexport type StepState = {\n screenState: ScreenState;\n screenId: string;\n stepName: string;\n htmlFilename: string;\n htmlLocaleFilename: string;\n next: NextFn;\n direction: Direction | undefined;\n samlIdpUsername: string;\n action?: string;\n locale?: string;\n} & OIDCOptions;\n\nexport type CustomScreenState = Omit<\n ScreenState,\n 'cssVars' | 'componentsConfig' | 'inputs'\n> & {\n error?: {\n text: ScreenState['errorText'];\n type: ScreenState['errorType'];\n };\n action?: string;\n inboundAppApproveScopes?: {\n desc: string;\n id: string;\n required: boolean;\n }[];\n};\n\nexport type DebugState = {\n isDebug: boolean;\n};\n\nexport interface ScriptElement extends HTMLDivElement {\n moduleRes?: ScriptModule;\n}\n\nexport type ScriptModule = {\n /**\n * Unique identifier of the module.\n */\n id: string;\n /**\n * Notifies the module that it should start any profiling or monitoring.\n */\n start?: () => void;\n /**\n * Notifies the module that it should stop any profiling or monitoring.\n */\n stop?: () => void;\n /**\n * Presents the user with any required interaction to get a refreshed token or state,\n * e.g., a challenge or captcha.\n *\n * Modules should return a value of true if the presentation completed successfully,\n * false if it was cancelled by the user, and throw an error in case of failure.\n *\n * This is called before form submission (via a next call) after a button click.\n */\n present?: () => Promise<boolean>;\n /**\n * Refreshes any tokens or state that might be needed before form submission.\n *\n * Modules should throw an error in case of failure.\n */\n refresh?: () => Promise<void>;\n};\n\nexport type ClientScript = {\n id: string;\n initArgs: Record<string, any>;\n resultKey?: string;\n};\n\nexport type NextFn = KeepArgsByIndex<SdkFlowNext, [2, 5]> & {\n isCustomScreen?: boolean;\n};\nexport type NextFnReturnPromiseValue = Awaited<ReturnType<NextFn>>;\n\nexport type DebuggerMessage = {\n title: string;\n description?: string;\n};\n\nexport type FlowStateUpdateFn = (state: FlowState) => void;\n\ntype Operator =\n | 'equal'\n | 'not-equal'\n | 'contains'\n | 'greater-than'\n | 'greater-than-or-equal'\n | 'less-than'\n | 'less-than-or-equal'\n | 'empty'\n | 'not-empty'\n | 'is-true'\n | 'is-false'\n | 'in'\n | 'not-in'\n | 'in-range'\n | 'not-in-range'\n | 'devised-by';\n\nexport interface ClientConditionResult {\n screenId: string;\n screenName: string;\n clientScripts?: ClientScript[];\n componentsConfig?: ComponentsConfig;\n interactionId: string;\n}\n\nexport interface ClientCondition {\n operator: Operator;\n key: string;\n predicate?: string | number;\n met: ClientConditionResult;\n unmet?: ClientConditionResult;\n}\n\nexport type AutoFocusOptions = true | false | 'skipFirstScreen';\n\nexport type ThemeOptions = 'light' | 'dark' | 'os';\n\nexport type Key =\n | 'lastAuth.loginId'\n | 'idpInitiated'\n | 'externalToken'\n | 'abTestingKey';\n\ntype CheckFunction = (ctx: Context, predicate?: string | number) => boolean;\n\nexport type ConditionsMap = {\n [key in Key]: {\n [operator in Operator]?: CheckFunction;\n };\n};\n\nexport interface Context {\n loginId?: string;\n code?: string;\n token?: string;\n abTestingKey?: number;\n lastAuth?: LastAuthState;\n}\n\nexport type DescopeUI = Record<string, () => Promise<void>> & {\n componentsThemeManager: Record<string, any>;\n};\n\ntype Font = {\n family: string[];\n label: string;\n url?: string;\n};\n\ntype ThemeTemplate = {\n fonts: {\n font1: Font;\n font2: Font;\n };\n};\n\ntype ThemeColor = {\n main: string;\n dark: string;\n light: string;\n highlight: string;\n contrast: string;\n};\n\nexport type OverrideTheme = {\n globals?: {\n colors?: {\n primary?: ThemeColor;\n secondary?: ThemeColor;\n };\n };\n};\n\nexport type OverrideThemes = {\n dark?: OverrideTheme;\n light?: OverrideTheme;\n};\n\nexport type FlowConfig = {\n startScreenId?: string;\n startScreenName?: string;\n version: number;\n targetLocales?: string[];\n conditions?: ClientCondition[];\n condition?: ClientCondition;\n fingerprintEnabled?: boolean;\n fingerprintKey?: string;\n sdkScripts?: [\n {\n id: string;\n initArgs: Record<string, any>;\n resultKey?: string;\n },\n ];\n clientScripts?: ClientScript[];\n componentsConfig?: ComponentsConfig;\n};\n\nexport interface ProjectConfiguration {\n componentsVersion: string;\n cssTemplate: {\n dark: ThemeTemplate;\n light: ThemeTemplate;\n };\n flows: {\n [key: string]: FlowConfig; // dynamic key names for flows\n };\n}\n\nexport type FlowStatus = 'loading' | 'error' | 'success' | 'ready' | 'initial';\n\nexport type CustomStorage = {\n getItem: (key: string) => string | null;\n setItem: (key: string, value: string) => void;\n removeItem: (key: string) => void;\n};\n\nexport type FlowJWTResponse = JWTResponse & {\n flowOutput?: Record<string, any>;\n};\n"],"names":["Direction"],"mappings":"IAoCYA,GAAZ,SAAYA,GACVA,EAAA,SAAA,WACAA,EAAA,QAAA,SACD,CAHD,CAAYA,IAAAA,EAGX,CAAA"}
1
+ {"version":3,"file":"types.js","sources":["../../src/lib/types.ts"],"sourcesContent":["/* istanbul ignore file */\n\nimport type { JWTResponse } from '@descope/web-js-sdk';\nimport { createSdk } from '@descope/web-js-sdk';\n\nexport type SdkConfig = Parameters<typeof createSdk>[0];\nexport type Sdk = ReturnType<typeof createSdk>;\n\nexport type SdkFlowNext = Sdk['flow']['next'];\n\nexport type ComponentsDynamicAttrs = {\n attributes: Record<string, any>;\n};\n\nexport type ComponentsConfig = Record<string, any> & {\n componentsDynamicAttrs?: Record<string, ComponentsDynamicAttrs>;\n};\nexport type CssVars = Record<string, any>;\n\ntype KeepArgsByIndex<F, Indices extends readonly number[]> = F extends (\n ...args: infer A\n) => infer R\n ? (...args: PickArgsByIndex<A, Indices>) => R\n : never;\n\ntype PickArgsByIndex<\n All extends readonly any[],\n Indices extends readonly number[],\n> = {\n [K in keyof Indices]: Indices[K] extends keyof All ? All[Indices[K]] : never;\n};\n\ntype Project = {\n name: string;\n};\n\nexport enum Direction {\n backward = 'backward',\n forward = 'forward',\n}\n\nexport type LastAuthState = NonNullable<\n NextFnReturnPromiseValue['data']['lastAuth']\n> & {\n loginId?: string;\n name?: string;\n lastUsedPerScreen?: Record<string, string>;\n};\n\nexport type RealtimeOperandKind = 'value' | 'form' | 'list';\n\n// Operators the SDK is allowed to evaluate locally. The server's\n// clientSupportedRealtimeOperators must stay in sync — anything outside this\n// list is pre-evaluated server-side and shipped as a value operand.\n//\n// is-email / is-phone are intentionally absent: the server validates them\n// with dedicated libraries (contact.IsValid*); the client has no equivalent,\n// so the server keeps these CCs server-only.\nexport type RealtimeOperator =\n | 'equal'\n | 'not-equal'\n | 'contains'\n | 'doesnt-contains'\n | 'greater-than'\n | 'greater-than-or-equal'\n | 'less-than'\n | 'less-than-or-equal'\n | 'empty'\n | 'not-empty'\n | 'is-true'\n | 'is-false'\n | 'in'\n | 'not-in'\n | 'matches';\n\nexport interface RealtimeOperand {\n kind: RealtimeOperandKind;\n // Form is the context key the client looks up from the live form snapshot\n // (e.g. \"form.phone\"). Set only when kind === 'form'.\n form?: string;\n // Items is the operand list when kind === 'list'. Each element is a nested\n // operand — either a form placeholder or a resolved literal. Used when the\n // server detects an `in` / `not-in` / `contains` predicate whose array\n // contains `{{form.X}}` references; the client resolves them at eval time.\n items?: RealtimeOperand[];\n // Pre-resolved literal. Set only when kind === 'value', and may legitimately\n // be false / 0 / \"\" — do not treat absence as \"no value\" without checking\n // kind first.\n value?: unknown;\n}\n\nexport interface RealtimeAtomicCondition {\n operator: RealtimeOperator;\n target?: RealtimeOperand;\n predicate?: RealtimeOperand;\n}\n\nexport interface RealtimeRule {\n logicalOr?: boolean;\n atomicConditions: RealtimeAtomicCondition[];\n}\n\nexport interface RealtimeComponentsCondition {\n id?: string;\n componentIds: string[];\n action: string;\n rules: RealtimeRule[];\n}\n\n// the server sends the full user object; only the fields the SDK reads are\n// typed here\nexport interface ScreenStateUser {\n email?: string;\n loginIds?: string[];\n [key: string]: unknown;\n}\n\nexport interface ScreenState {\n errorText?: string;\n errorType?: string;\n componentsConfig?: ComponentsConfig;\n cssVars?: CssVars;\n form?: Record<string, string>;\n inputs?: Record<string, string>; // Backward compatibility\n lastAuth?: LastAuthState;\n project?: Project;\n totp?: { image?: string; provisionUrl?: string };\n notp?: { image?: string; redirectUrl?: string };\n selfProvisionDomains?: unknown;\n user?: ScreenStateUser;\n sso?: unknown;\n dynamicSelects?: unknown;\n keysInUse?: unknown;\n genericForm?: unknown;\n linkId?: unknown;\n sentTo?: unknown;\n clientScripts?: ClientScript[];\n // map of component IDs to their state — the FULL last-wins verdict over\n // all CCs (server-only + client-eligible) the BE evaluated at screen-init.\n // Used by `applyComponentsState` for the first DOM paint.\n componentsState?: Record<string, string>;\n // Subset of `componentsState` contributed by SERVER-ONLY CCs — those the\n // client cannot re-evaluate locally (operators on the server-only\n // allow-list like `is-email`, or rules referencing context the client\n // doesn't have). Parallels `componentsState` in structure but excludes\n // contributions from client-eligible CCs that also ship in\n // `realtimeComponentsConditions`.\n //\n // The realtime layer uses this as the fallback action to restore when a\n // realtime CC stops firing on a touched component — without it the SDK\n // can't tell whether the action in `componentsState` came from a\n // server-only CC (must persist) or from a realtime CC also re-shipped\n // (must clear).\n //\n // Absent on old backends; new SDKs fall back to a legacy heuristic that\n // infers the same information from `componentsState`, so the old-BE /\n // new-SDK combination still works correctly.\n serverOnlyComponentsState?: Record<string, string>;\n // Client-evaluable visibility conditions, populated only by new backends.\n // Absent on old backends; new SDKs ignore when absent.\n realtimeComponentsConditions?: RealtimeComponentsCondition[];\n}\n\nexport type SSOQueryParams = {\n oidcIdpStateId?: string;\n samlIdpStateId?: string;\n wsfedIdpStateId?: string;\n samlIdpUsername?: string;\n descopeIdpInitiated?: boolean;\n ssoAppId?: string;\n customAppId?: string;\n thirdPartyAppId: string;\n thirdPartyAppStateId?: string;\n applicationScopes?: string;\n} & OIDCOptions;\n\nexport type OIDCOptions = {\n oidcLoginHint?: string;\n oidcPrompt?: string;\n oidcErrorRedirectUri?: string;\n oidcResource?: string;\n};\n\nexport type FlowState = {\n flowId: string;\n projectId: string;\n baseUrl: string;\n tenant: string;\n stepId: string;\n stepName: string;\n executionId: string;\n action: string;\n redirectTo: string;\n redirectIsPopup: boolean;\n openInNewTabUrl?: string;\n redirectUrl: string;\n screenId: string;\n screenState: ScreenState;\n token: string;\n code: string;\n isPopup: boolean;\n exchangeError: string;\n webauthnTransactionId: string;\n webauthnOptions: string;\n redirectAuthCodeChallenge: string;\n redirectAuthCallbackUrl: string;\n redirectAuthBackupCallbackUri: string;\n redirectAuthInitiator: string;\n deferredRedirect: boolean;\n deferredPolling: boolean;\n locale: string;\n samlIdpResponseUrl: string;\n samlIdpResponseSamlResponse: string;\n samlIdpResponseRelayState: string;\n wsFedIdpResponseUrl: string;\n wsFedIdpResponseWresult: string;\n wsFedIdpResponseWctx: string;\n nativeResponseType: string;\n nativePayload: Record<string, any>;\n reqTimestamp: number;\n} & SSOQueryParams;\n\nexport type StepState = {\n screenState: ScreenState;\n screenId: string;\n stepName: string;\n htmlFilename: string;\n htmlLocaleFilename: string;\n next: NextFn;\n direction: Direction | undefined;\n samlIdpUsername: string;\n action?: string;\n locale?: string;\n} & OIDCOptions;\n\nexport type CustomScreenState = Omit<\n ScreenState,\n // Removed from the top level of the custom-screen context:\n // - cssVars/componentsConfig/inputs/clientScripts: internal.\n // - errorText/errorType: reshaped into `error`.\n // - the rest: server-produced screen data, relocated under `data`.\n | 'cssVars'\n | 'componentsConfig'\n | 'inputs'\n | 'errorText'\n | 'errorType'\n | 'clientScripts'\n | 'totp'\n | 'notp'\n | 'sentTo'\n | 'sso'\n | 'selfProvisionDomains'\n> & {\n error?: {\n text: ScreenState['errorText'];\n type: ScreenState['errorType'];\n };\n action?: string;\n /**\n * All server-produced screen data, in one place. Previously this data was spread\n * across the top level and a deeply-nested, selector-keyed `componentsConfig`.\n * Only known, documented fields are exposed (renamed/normalized); anything else is\n * dropped. SDK-owned/reserved — a value with this key coming from the backend is ignored.\n */\n data?: CustomScreenData;\n};\n\n/**\n * Cleaned view of the flow screen's `componentsConfig`. Every field is optional and\n * only present when the screen actually produces it.\n */\nexport type CustomScreenData = {\n /** TOTP MFA setup: QR image + provisioning URL. */\n totp?: { image?: string; provisionUrl?: string };\n /** Notification-OTP setup: image + redirect URL. */\n notp?: { image?: string; redirectUrl?: string };\n /** Where the OTP/code was sent — masked email and/or phone. */\n sentTo?: { maskedEmail?: string; maskedPhone?: string };\n /** SSO (SAML) service-provider config for SSO-setup screens. */\n sso?: { acsUrl?: string; descopeEntityId?: string; spMetadataUrl?: string };\n /** Email domains allowed to self-provision into the tenant. */\n selfProvisionDomains?: string;\n /** OAuth scopes an inbound (third-party) app is asking the user to approve. */\n inboundAppApproveScopes?: { desc: string; id: string; required: boolean }[];\n /** Password rules to show/enforce on a password screen. */\n passwordPolicy?: {\n minLength?: string;\n strength?: string;\n disallowedChars?: string;\n email?: string;\n activePolicies?: string;\n availablePolicies?: string;\n };\n /** Security questions to set up, plus how many are required. */\n securityQuestionsSetup?: {\n questions?: { id: string; text: string }[];\n count?: number;\n };\n /** Security questions to verify the user against. */\n securityQuestionsVerify?: { questions?: { id: string; text: string }[] };\n /** Tenants the user can pick from (tenant-selection screen). */\n userTenants?: { label: string; value: string }[];\n /** SSO applications the user can pick from. */\n ssoApplications?: { label: string; value: string }[];\n /** SSO configurations the user can pick from. */\n ssoConfigurations?: { label: string; value: string }[];\n /** Roles the user can pick from. */\n userRoles?: { label: string; value: string }[];\n /** SAML attribute-mapping options (SSO-setup screens). */\n samlAttributeMappings?: { label: string; value: string }[];\n /** OIDC attribute-mapping options (SSO-setup screens). */\n oidcAttributeMappings?: { label: string; value: string }[];\n /** SAML group-mapping options (SSO-setup screens). */\n samlGroupMappings?: { label: string; value: string }[];\n /** Generated MFA recovery codes to display to the user. */\n recoveryCodes?: string[];\n /** Outbound OAuth app button info (label, icon, app id). */\n outboundApp?: { label?: string; iconSrc?: string; appId?: string };\n\n // Contract rule: every key on `data` is an SDK-owned, documented name. We never\n // place arbitrary, flow-author-controlled keys directly on `data`, so adding new\n // named fields stays backwards-compatible (no collisions, no reshape).\n //\n // Reserved for a future addition: dynamic-select options. Their keys are the\n // flow's own select field names (e.g. \"country\"), so they can't be named here —\n // when exposed, they'll go under their own sub-map to keep them collision-free:\n // selects?: Record<string, { label: string; value: string }[]>;\n // Not populated yet (see README). Adding it later is additive, not breaking.\n};\n\nexport type DebugState = {\n isDebug: boolean;\n};\n\nexport interface ScriptElement extends HTMLDivElement {\n moduleRes?: ScriptModule;\n}\n\nexport type ScriptModule = {\n /**\n * Unique identifier of the module.\n */\n id: string;\n /**\n * Notifies the module that it should start any profiling or monitoring.\n */\n start?: () => void;\n /**\n * Notifies the module that it should stop any profiling or monitoring.\n */\n stop?: () => void;\n /**\n * Presents the user with any required interaction to get a refreshed token or state,\n * e.g., a challenge or captcha.\n *\n * Modules should return a value of true if the presentation completed successfully,\n * false if it was cancelled by the user, and throw an error in case of failure.\n *\n * This is called before form submission (via a next call) after a button click.\n */\n present?: () => Promise<boolean>;\n /**\n * Refreshes any tokens or state that might be needed before form submission.\n *\n * Modules should throw an error in case of failure.\n */\n refresh?: () => Promise<void>;\n};\n\nexport type ClientScript = {\n id: string;\n initArgs: Record<string, any>;\n resultKey?: string;\n};\n\nexport type NextFn = KeepArgsByIndex<SdkFlowNext, [2, 5]> & {\n isCustomScreen?: boolean;\n};\nexport type NextFnReturnPromiseValue = Awaited<ReturnType<NextFn>>;\n\nexport type DebuggerMessage = {\n title: string;\n description?: string;\n};\n\nexport type FlowStateUpdateFn = (state: FlowState) => void;\n\ntype Operator =\n | 'equal'\n | 'not-equal'\n | 'contains'\n | 'greater-than'\n | 'greater-than-or-equal'\n | 'less-than'\n | 'less-than-or-equal'\n | 'empty'\n | 'not-empty'\n | 'is-true'\n | 'is-false'\n | 'in'\n | 'not-in'\n | 'in-range'\n | 'not-in-range'\n | 'devised-by';\n\nexport interface ClientConditionResult {\n screenId: string;\n screenName: string;\n clientScripts?: ClientScript[];\n componentsConfig?: ComponentsConfig;\n interactionId: string;\n}\n\nexport interface ClientCondition {\n operator: Operator;\n key: string;\n predicate?: string | number;\n met: ClientConditionResult;\n unmet?: ClientConditionResult;\n}\n\nexport type AutoFocusOptions = true | false | 'skipFirstScreen';\n\nexport type ThemeOptions = 'light' | 'dark' | 'os';\n\nexport type Key =\n | 'lastAuth.loginId'\n | 'idpInitiated'\n | 'externalToken'\n | 'abTestingKey';\n\ntype CheckFunction = (ctx: Context, predicate?: string | number) => boolean;\n\nexport type ConditionsMap = {\n [key in Key]: {\n [operator in Operator]?: CheckFunction;\n };\n};\n\nexport interface Context {\n loginId?: string;\n code?: string;\n token?: string;\n abTestingKey?: number;\n lastAuth?: LastAuthState;\n}\n\nexport type DescopeUI = Record<string, () => Promise<void>> & {\n componentsThemeManager: Record<string, any>;\n};\n\ntype Font = {\n family: string[];\n label: string;\n url?: string;\n};\n\ntype ThemeTemplate = {\n fonts: {\n font1: Font;\n font2: Font;\n };\n};\n\ntype ThemeColor = {\n main: string;\n dark: string;\n light: string;\n highlight: string;\n contrast: string;\n};\n\nexport type OverrideTheme = {\n globals?: {\n colors?: {\n primary?: ThemeColor;\n secondary?: ThemeColor;\n };\n };\n};\n\nexport type OverrideThemes = {\n dark?: OverrideTheme;\n light?: OverrideTheme;\n};\n\nexport type FlowConfig = {\n startScreenId?: string;\n startScreenName?: string;\n version: number;\n targetLocales?: string[];\n conditions?: ClientCondition[];\n condition?: ClientCondition;\n fingerprintEnabled?: boolean;\n fingerprintKey?: string;\n sdkScripts?: [\n {\n id: string;\n initArgs: Record<string, any>;\n resultKey?: string;\n },\n ];\n clientScripts?: ClientScript[];\n componentsConfig?: ComponentsConfig;\n};\n\nexport interface ProjectConfiguration {\n componentsVersion: string;\n cssTemplate: {\n dark: ThemeTemplate;\n light: ThemeTemplate;\n };\n flows: {\n [key: string]: FlowConfig; // dynamic key names for flows\n };\n}\n\nexport type FlowStatus = 'loading' | 'error' | 'success' | 'ready' | 'initial';\n\nexport type CustomStorage = {\n getItem: (key: string) => string | null;\n setItem: (key: string, value: string) => void;\n removeItem: (key: string) => void;\n};\n\nexport type FlowJWTResponse = JWTResponse & {\n flowOutput?: Record<string, any>;\n};\n"],"names":["Direction"],"mappings":"IAoCYA,GAAZ,SAAYA,GACVA,EAAA,SAAA,WACAA,EAAA,QAAA,SACD,CAHD,CAAYA,IAAAA,EAGX,CAAA"}
package/dist/index.d.ts CHANGED
@@ -153,17 +153,121 @@ type StepState = {
153
153
  action?: string;
154
154
  locale?: string;
155
155
  } & OIDCOptions;
156
- type CustomScreenState = Omit<ScreenState, 'cssVars' | 'componentsConfig' | 'inputs'> & {
156
+ type CustomScreenState = Omit<ScreenState, 'cssVars' | 'componentsConfig' | 'inputs' | 'errorText' | 'errorType' | 'clientScripts' | 'totp' | 'notp' | 'sentTo' | 'sso' | 'selfProvisionDomains'> & {
157
157
  error?: {
158
158
  text: ScreenState['errorText'];
159
159
  type: ScreenState['errorType'];
160
160
  };
161
161
  action?: string;
162
+ /**
163
+ * All server-produced screen data, in one place. Previously this data was spread
164
+ * across the top level and a deeply-nested, selector-keyed `componentsConfig`.
165
+ * Only known, documented fields are exposed (renamed/normalized); anything else is
166
+ * dropped. SDK-owned/reserved — a value with this key coming from the backend is ignored.
167
+ */
168
+ data?: CustomScreenData;
169
+ };
170
+ /**
171
+ * Cleaned view of the flow screen's `componentsConfig`. Every field is optional and
172
+ * only present when the screen actually produces it.
173
+ */
174
+ type CustomScreenData = {
175
+ /** TOTP MFA setup: QR image + provisioning URL. */
176
+ totp?: {
177
+ image?: string;
178
+ provisionUrl?: string;
179
+ };
180
+ /** Notification-OTP setup: image + redirect URL. */
181
+ notp?: {
182
+ image?: string;
183
+ redirectUrl?: string;
184
+ };
185
+ /** Where the OTP/code was sent — masked email and/or phone. */
186
+ sentTo?: {
187
+ maskedEmail?: string;
188
+ maskedPhone?: string;
189
+ };
190
+ /** SSO (SAML) service-provider config for SSO-setup screens. */
191
+ sso?: {
192
+ acsUrl?: string;
193
+ descopeEntityId?: string;
194
+ spMetadataUrl?: string;
195
+ };
196
+ /** Email domains allowed to self-provision into the tenant. */
197
+ selfProvisionDomains?: string;
198
+ /** OAuth scopes an inbound (third-party) app is asking the user to approve. */
162
199
  inboundAppApproveScopes?: {
163
200
  desc: string;
164
201
  id: string;
165
202
  required: boolean;
166
203
  }[];
204
+ /** Password rules to show/enforce on a password screen. */
205
+ passwordPolicy?: {
206
+ minLength?: string;
207
+ strength?: string;
208
+ disallowedChars?: string;
209
+ email?: string;
210
+ activePolicies?: string;
211
+ availablePolicies?: string;
212
+ };
213
+ /** Security questions to set up, plus how many are required. */
214
+ securityQuestionsSetup?: {
215
+ questions?: {
216
+ id: string;
217
+ text: string;
218
+ }[];
219
+ count?: number;
220
+ };
221
+ /** Security questions to verify the user against. */
222
+ securityQuestionsVerify?: {
223
+ questions?: {
224
+ id: string;
225
+ text: string;
226
+ }[];
227
+ };
228
+ /** Tenants the user can pick from (tenant-selection screen). */
229
+ userTenants?: {
230
+ label: string;
231
+ value: string;
232
+ }[];
233
+ /** SSO applications the user can pick from. */
234
+ ssoApplications?: {
235
+ label: string;
236
+ value: string;
237
+ }[];
238
+ /** SSO configurations the user can pick from. */
239
+ ssoConfigurations?: {
240
+ label: string;
241
+ value: string;
242
+ }[];
243
+ /** Roles the user can pick from. */
244
+ userRoles?: {
245
+ label: string;
246
+ value: string;
247
+ }[];
248
+ /** SAML attribute-mapping options (SSO-setup screens). */
249
+ samlAttributeMappings?: {
250
+ label: string;
251
+ value: string;
252
+ }[];
253
+ /** OIDC attribute-mapping options (SSO-setup screens). */
254
+ oidcAttributeMappings?: {
255
+ label: string;
256
+ value: string;
257
+ }[];
258
+ /** SAML group-mapping options (SSO-setup screens). */
259
+ samlGroupMappings?: {
260
+ label: string;
261
+ value: string;
262
+ }[];
263
+ /** Generated MFA recovery codes to display to the user. */
264
+ recoveryCodes?: string[];
265
+ /** Outbound OAuth app button info (label, icon, app id). */
266
+ outboundApp?: {
267
+ label?: string;
268
+ iconSrc?: string;
269
+ appId?: string;
270
+ };
167
271
  };
168
272
  type ScriptModule = {
169
273
  /**