@descope/web-component 4.4.0 → 4.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/dist/cjs/constants/index.js +1 -1
  2. package/dist/cjs/constants/index.js.map +1 -1
  3. package/dist/cjs/descope-wc/BaseDescopeWc.js +1 -1
  4. package/dist/cjs/descope-wc/DescopeWc.js +1 -1
  5. package/dist/cjs/descope-wc/DescopeWc.js.map +1 -1
  6. package/dist/cjs/helpers/helpers.js +1 -1
  7. package/dist/cjs/helpers/helpers.js.map +1 -1
  8. package/dist/esm/constants/index.js +1 -1
  9. package/dist/esm/constants/index.js.map +1 -1
  10. package/dist/esm/descope-wc/BaseDescopeWc.js +1 -1
  11. package/dist/esm/descope-wc/DescopeWc.js +1 -1
  12. package/dist/esm/descope-wc/DescopeWc.js.map +1 -1
  13. package/dist/esm/helpers/helpers.js +1 -1
  14. package/dist/esm/helpers/helpers.js.map +1 -1
  15. package/dist/index.js +2 -2
  16. package/package.json +3 -3
package/dist/esm/helpers/helpers.js CHANGED
@@ -1,2 +1,2 @@
1
- import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as s,SAML_IDP_STATE_ID_PARAM_NAME as c,WSFED_IDP_STATE_ID_PARAM_NAME as a,SAML_IDP_USERNAME_PARAM_NAME as u,DESCOPE_IDP_INITIATED_PARAM_NAME as d,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as v,OIDC_LOGIN_HINT_PARAM_NAME as h,OIDC_PROMPT_PARAM_NAME as y,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as g,OIDC_RESOURCE_PARAM_NAME as w,DESCOPE_ATTRIBUTE_PREFIX as b,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as S,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as k,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as I}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as E}from"../types.js";import{OVERRIDE_CONTENT_URL as T,BASE_CONTENT_URL as O,ASSETS_FOLDER as j}from"../constants/content.js";const x=["descope-enriched-text"];function U(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let s=0;s<i;s++)try{return yield e(...r)}catch(e){t=e,s<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,s+1))})))}throw t}))}function L(t){return new URLSearchParams(window.location.search).get(t)}function $(t){if(window.history.replaceState&&L(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function R(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function M({projectId:t,filename:e,assetsFolder:n=j,baseUrl:o}){const r=new URL(T||o||O);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function F(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?E.forward:n<o?E.backward:void 0}const N=t=>{let[n="",o=""]=(L(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function q(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function B(){$(e)}function H(){return L(n)||void 0}function D(){$(n)}function Q(){return L(o)||void 0}function W(){return"popup"===L(r)}function G(){return L(i)||void 0}function V(){$(o)}function _(){$(r)}function z(){$(i)}function J(){return{redirectAuthCodeChallenge:L(S),redirectAuthCallbackUrl:L(C),redirectAuthBackupCallbackUri:L(k),redirectAuthInitiator:L(I)}}function K(){return L(s)}function X(){$(s)}function Y(){return L(c)}function Z(){$(c)}function tt(){return L(a)}function et(){$(a)}function nt(){return L(u)}function ot(){$(u)}function rt(){return L(d)}function it(){$(d)}function st(){return L(l)}function ct(){return L(p)}function at(){return L(m)}function ut(){$(l)}function dt(){$(p)}function lt(){$(m)}function pt(){return L(f)}function mt(){$(f)}function ft(){return L(v)}function vt(){$(v)}function ht(){return L(h)}function yt(){$(h)}function gt(){return L(y)}function wt(){$(y)}function bt(){return L(g)}function At(){$(g)}function St(){return L(w)}function Ct(){$(w)}const kt=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),It=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${b}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),Et=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=N(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&B();const i=H();i&&D();const s=Q();s&&V();const c=W();c&&_();const a=G();a&&z();const{redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const v=tt();v&&et();const h=nt();f&&ot();const y=rt();y&&it();const g=st();g&&ut();const w=ct();w&&dt();const b=at();b&&lt();const A=pt();A&&mt();const S=ft();S&&vt();const C=ht();C&&yt();const k=gt();k&&wt();const I=bt();I&&At();const P=St();P&&Ct();return{executionId:n,stepId:o,token:i,code:s,isPopup:c,exchangeError:a,redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:v,samlIdpUsername:h,descopeIdpInitiated:"true"===y,ssoAppId:g,customAppId:w,oidcLoginHint:C,oidcPrompt:k,oidcErrorRedirectUri:I,oidcResource:P,thirdPartyAppId:b,thirdPartyAppStateId:A,applicationScopes:S}}},Tt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Ot='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',jt=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Ot);setTimeout((()=>{null==e||e.focus()}))}},xt=(t,e)=>{t.querySelectorAll("*[name]").forEach((n=>{n.addEventListener("blur",(()=>{var o;const r=()=>{var t;const o=n.focus;n.focus=()=>{};const r=null===(t=n.reportValidity)||void 0===t?void 0:t.call(n);e&&!1===r&&e(n),setTimeout((()=>{n.focus=o}))};if("true"===n.getAttribute("invalid")||(null===(o=n.value)||void 0===o?void 0:o.length))return void r();const i={timer:void 0},s=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(i.timer),i.timer=void 0)};i.timer=setTimeout((()=>{t.removeEventListener("click",s),r(),i.timer=void 0}),150),t.addEventListener("click",s,{once:!0})}))}))};function Ut(t,e,n){return new Promise(((o,r)=>{let i=!1;const s=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(s),o(t))})).catch((t=>{i||(clearTimeout(s),r(t))}))}))}const Lt=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},$t=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:s,oidcLoginHint:c,oidcPrompt:a,oidcErrorRedirectUri:u,oidcResource:d,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||s||c||a||u||d||l||p||m),Rt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.innerHTML=`\n <input type="hidden" role="saml-response" name="SAMLResponse" value="${e}" />\n <input type="hidden" role="saml-relay-state" name="RelayState" value="${n}" />\n <input style="display: none;" id="SAMLSubmitButton" type="submit" value="Continue" />\n `,document.body.appendChild(r),o(r)},Mt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t;const i=(t,e)=>{const n=document.createElement("input");return n.type="hidden",n.name=t,n.value=e,n};r.appendChild(i("wa","wsignin1.0")),r.appendChild(i("wresult",e)),r.appendChild(i("wctx",n));const s=document.createElement("input");s.type="submit",s.id="WSFedSubmitButton",s.value="Continue",s.style.display="none",r.appendChild(s),document.body.appendChild(r),o(r)},Ft=t=>null==t?void 0:t.submit(),Nt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},qt=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Bt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Ht=t=>x.includes(t),Dt={minLength:"data-password-policy-value-minlength",strength:"data-password-policy-value-passwordstrength",disallowedChars:"data-password-policy-value-disallowedchars",email:"data-password-policy-value-email",activePolicies:"active-policies",availablePolicies:"available-policies"},Qt=(t,e)=>{var n;const o=null==t?void 0:t.componentsDynamicAttrs;if(!o)return;const r=Object.entries(o).find((([t])=>(t=>{var e;return null===(e=t.match(/\[data-name=["']([^"']+)["']\]/))||void 0===e?void 0:e[1]})(t)===e));return null===(n=null==r?void 0:r[1])||void 0===n?void 0:n.attributes},Wt=[{key:"totp",from:t=>t.totp},{key:"notp",from:t=>t.notp},{key:"sentTo",from:t=>t.sentTo},{key:"sso",from:t=>t.sso},{key:"selfProvisionDomains",from:t=>t.selfProvisionDomains},{key:"inboundAppApproveScopes",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.thirdPartyAppApproveScopes)||void 0===n?void 0:n.data}},{key:"securityQuestionsSetup",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqSetup}},{key:"securityQuestionsVerify",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqVerify}},{key:"userTenants",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userSelectedTenant)||void 0===n?void 0:n.data}},{key:"userRoles",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userRoles)||void 0===n?void 0:n.data}},{key:"ssoApplications",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoApplications)||void 0===n?void 0:n.data}},{key:"ssoConfigurations",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoConfigurations)||void 0===n?void 0:n.data}},{key:"samlAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlMappings)||void 0===n?void 0:n.options}},{key:"oidcAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.oidcMappings)||void 0===n?void 0:n.options}},{key:"samlGroupMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlGroupMappings)||void 0===n?void 0:n.options}},{key:"passwordPolicy",from:t=>{var e;return(t=>{if(!t)return;const e=Object.fromEntries(Object.entries(Dt).map((([e,n])=>[e,t[n]])).filter((([,t])=>void 0!==t)));return Object.keys(e).length?e:void 0})(null===(e=t.componentsConfig)||void 0===e?void 0:e.newPassword)}},{key:"recoveryCodes",from:t=>(t=>{const e=Qt(t,"recoveryCodes");if(e)return Array.isArray(e.data)?e.data.map((t=>t.value)):[]})(t.componentsConfig)},{key:"outboundApp",from:t=>(t=>{const e=Qt(t,"outboundApp");if(e)return{label:e.label,iconSrc:e["icon-src"],appId:e["data-descope-outbound-oauth-app-id"]}})(t.componentsConfig)}],Gt=t=>{const e=(n=t.screenState,o=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(n).filter((([t,e])=>!o(e,t)))));var n,o;const{screenState:{errorText:r,errorType:i}}=t;(r||i)&&(e.error={text:r,type:i}),t.action&&(e.action=t.action);const s=(t=>{if(!t)return;const e={};return Wt.forEach((({key:n,from:o})=>{const r=o(t);void 0!==r&&(e[n]=r)})),Object.keys(e).length?e:void 0})(t.screenState);return s&&(e.data=s),e},Vt=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function _t(t,e){return`${A}.${e?`${t}_${e}`:t}`}const zt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,s=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,c=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,a=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",u=window.open(a,e,`width=${n},height=${o},top=${c},left=${s},scrollbars=yes,resizable=yes`);return u.location.href=t,u.focus(),u};export{Ot as FOCUSABLE_INPUTS_SELECTOR,kt as camelCase,vt as clearApplicationScopesParamFromUrl,V as clearCodeFromUrl,dt as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,z as clearExchangeErrorFromUrl,_ as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,yt as clearOIDCLoginHintParamFromUrl,wt as clearOIDCPromptParamFromUrl,Ct as clearOIDCResourceParamFromUrl,Bt as clearPreviousExternalInputs,B as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,ut as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,D as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,It as createIsChanged,R as fetchContent,F as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Lt as getChromiumVersion,Q as getCodeFromUrl,M as getContentUrl,ct as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,G as getExchangeErrorFromUrl,Nt as getFirstNonEmptyValue,W as getIsPopupFromUrl,bt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,ht as getOIDCLoginHintParamFromUrl,gt as getOIDCPromptParamFromUrl,St as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,N as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,st as getSSOAppIdParamFromUrl,_t as getScriptResultPath,at as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,H as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,jt as handleAutoFocus,xt as handleReportValidityOnBlur,Et as handleUrlParams,Rt as injectSamlIdpForm,Mt as injectWsFedIdpForm,q as isChromium,qt as leadingDebounce,zt as openCenteredPopup,Ht as shouldHandleMarkdown,$t as showFirstScreenOnExecutionInit,Ft as submitForm,Ut as timeoutPromise,Vt as transformScreenInputs,Gt as transformStepStateForCustomScreen,Tt as withMemCache,U as withRetry};
1
+ import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as s,SAML_IDP_STATE_ID_PARAM_NAME as c,WSFED_IDP_STATE_ID_PARAM_NAME as a,SAML_IDP_USERNAME_PARAM_NAME as d,DESCOPE_IDP_INITIATED_PARAM_NAME as u,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as v,OIDC_LOGIN_HINT_PARAM_NAME as h,OIDC_PROMPT_PARAM_NAME as y,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as g,OIDC_RESOURCE_PARAM_NAME as w,DESCOPE_ATTRIBUTE_PREFIX as b,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as S,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as k,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as I}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as E}from"../types.js";import{OVERRIDE_CONTENT_URL as T,BASE_CONTENT_URL as O,ASSETS_FOLDER as j}from"../constants/content.js";const x=["descope-enriched-text"];function U(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let s=0;s<i;s++)try{return yield e(...r)}catch(e){t=e,s<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,s+1))})))}throw t}))}function L(t){return new URLSearchParams(window.location.search).get(t)}function R(t){if(window.history.replaceState&&L(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function $(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function M({projectId:t,filename:e,assetsFolder:n=j,baseUrl:o}){const r=new URL(T||o||O);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function F(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?E.forward:n<o?E.backward:void 0}const N=t=>{let[n="",o=""]=(L(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function q(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function B(){R(e)}function D(){return L(n)||void 0}function H(){R(n)}function Q(){return L(o)||void 0}function W(){return"popup"===L(r)}function G(){return L(i)||void 0}function V(){R(o)}function _(){R(r)}function z(){R(i)}function J(){return{redirectAuthCodeChallenge:L(S),redirectAuthCallbackUrl:L(C),redirectAuthBackupCallbackUri:L(k),redirectAuthInitiator:L(I)}}function K(){return L(s)}function X(){R(s)}function Y(){return L(c)}function Z(){R(c)}function tt(){return L(a)}function et(){R(a)}function nt(){return L(d)}function ot(){R(d)}function rt(){return L(u)}function it(){R(u)}function st(){return L(l)}function ct(){return L(p)}function at(){return L(m)}function dt(){R(l)}function ut(){R(p)}function lt(){R(m)}function pt(){return L(f)}function mt(){R(f)}function ft(){return L(v)}function vt(){R(v)}function ht(){return L(h)}function yt(){R(h)}function gt(){return L(y)}function wt(){R(y)}function bt(){return L(g)}function At(){R(g)}function St(){return L(w)}function Ct(){R(w)}const kt=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),It=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${b}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),Et=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=N(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&B();const i=D();i&&H();const s=Q();s&&V();const c=W();c&&_();const a=G();a&&z();const{redirectAuthCodeChallenge:d,redirectAuthCallbackUrl:u,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const v=tt();v&&et();const h=nt();f&&ot();const y=rt();y&&it();const g=st();g&&dt();const w=ct();w&&ut();const b=at();b&&lt();const A=pt();A&&mt();const S=ft();S&&vt();const C=ht();C&&yt();const k=gt();k&&wt();const I=bt();I&&At();const P=St();P&&Ct();return{executionId:n,stepId:o,token:i,code:s,isPopup:c,exchangeError:a,redirectAuthCodeChallenge:d,redirectAuthCallbackUrl:u,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:v,samlIdpUsername:h,descopeIdpInitiated:"true"===y,ssoAppId:g,customAppId:w,oidcLoginHint:C,oidcPrompt:k,oidcErrorRedirectUri:I,oidcResource:P,thirdPartyAppId:b,thirdPartyAppStateId:A,applicationScopes:S}}},Tt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Ot='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',jt=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Ot);setTimeout((()=>{null==e||e.focus()}))}},xt=(t,e)=>{t.querySelectorAll("*[name]").forEach((n=>{n.addEventListener("blur",(()=>{var o;const r=()=>{var t;const o=n.focus;n.focus=()=>{};const r=null===(t=n.reportValidity)||void 0===t?void 0:t.call(n);e&&!1===r&&e(n),setTimeout((()=>{n.focus=o}))};if("true"===n.getAttribute("invalid")||(null===(o=n.value)||void 0===o?void 0:o.length))return void r();const i={timer:void 0},s=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(i.timer),i.timer=void 0)};i.timer=setTimeout((()=>{t.removeEventListener("click",s),r(),i.timer=void 0}),150),t.addEventListener("click",s,{once:!0})}))}))};function Ut(t,e,n){return new Promise(((o,r)=>{let i=!1;const s=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(s),o(t))})).catch((t=>{i||(clearTimeout(s),r(t))}))}))}const Lt=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},Rt=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:s,oidcLoginHint:c,oidcPrompt:a,oidcErrorRedirectUri:d,oidcResource:u,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||s||c||a||d||u||l||p||m),$t=(t,e,n)=>{const o=document.createElement("input");return o.type="hidden",o.name=t,o.value=e,n&&o.setAttribute("role",n),o},Mt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.appendChild($t("SAMLResponse",e,"saml-response")),r.appendChild($t("RelayState",n,"saml-relay-state"));const i=document.createElement("input");i.type="submit",i.id="SAMLSubmitButton",i.value="Continue",i.style.display="none",r.appendChild(i),document.body.appendChild(r),o(r)},Ft=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.appendChild($t("wa","wsignin1.0")),r.appendChild($t("wresult",e)),r.appendChild($t("wctx",n));const i=document.createElement("input");i.type="submit",i.id="WSFedSubmitButton",i.value="Continue",i.style.display="none",r.appendChild(i),document.body.appendChild(r),o(r)},Nt=t=>null==t?void 0:t.submit(),qt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},Bt=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Dt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Ht=t=>x.includes(t),Qt={minLength:"data-password-policy-value-minlength",strength:"data-password-policy-value-passwordstrength",disallowedChars:"data-password-policy-value-disallowedchars",email:"data-password-policy-value-email",activePolicies:"active-policies",availablePolicies:"available-policies"},Wt=(t,e)=>{var n;const o=null==t?void 0:t.componentsDynamicAttrs;if(!o)return;const r=Object.entries(o).find((([t])=>(t=>{var e;return null===(e=t.match(/\[data-name=["']([^"']+)["']\]/))||void 0===e?void 0:e[1]})(t)===e));return null===(n=null==r?void 0:r[1])||void 0===n?void 0:n.attributes},Gt=[{key:"totp",from:t=>t.totp},{key:"notp",from:t=>t.notp},{key:"sentTo",from:t=>t.sentTo},{key:"sso",from:t=>t.sso},{key:"selfProvisionDomains",from:t=>t.selfProvisionDomains},{key:"inboundAppApproveScopes",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.thirdPartyAppApproveScopes)||void 0===n?void 0:n.data}},{key:"securityQuestionsSetup",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqSetup}},{key:"securityQuestionsVerify",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqVerify}},{key:"userTenants",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userSelectedTenant)||void 0===n?void 0:n.data}},{key:"userRoles",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userRoles)||void 0===n?void 0:n.data}},{key:"ssoApplications",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoApplications)||void 0===n?void 0:n.data}},{key:"ssoConfigurations",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoConfigurations)||void 0===n?void 0:n.data}},{key:"samlAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlMappings)||void 0===n?void 0:n.options}},{key:"oidcAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.oidcMappings)||void 0===n?void 0:n.options}},{key:"samlGroupMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlGroupMappings)||void 0===n?void 0:n.options}},{key:"passwordPolicy",from:t=>{var e;return(t=>{if(!t)return;const e=Object.fromEntries(Object.entries(Qt).map((([e,n])=>[e,t[n]])).filter((([,t])=>void 0!==t)));return Object.keys(e).length?e:void 0})(null===(e=t.componentsConfig)||void 0===e?void 0:e.newPassword)}},{key:"recoveryCodes",from:t=>(t=>{const e=Wt(t,"recoveryCodes");if(e)return Array.isArray(e.data)?e.data.map((t=>t.value)):[]})(t.componentsConfig)},{key:"outboundApp",from:t=>(t=>{const e=Wt(t,"outboundApp");if(e)return{label:e.label,iconSrc:e["icon-src"],appId:e["data-descope-outbound-oauth-app-id"]}})(t.componentsConfig)}],Vt=t=>{const e=(n=t.screenState,o=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(n).filter((([t,e])=>!o(e,t)))));var n,o;const{screenState:{errorText:r,errorType:i}}=t;(r||i)&&(e.error={text:r,type:i}),t.action&&(e.action=t.action);const s=(t=>{if(!t)return;const e={};return Gt.forEach((({key:n,from:o})=>{const r=o(t);void 0!==r&&(e[n]=r)})),Object.keys(e).length?e:void 0})(t.screenState);return s&&(e.data=s),e},_t=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function zt(t,e){return`${A}.${e?`${t}_${e}`:t}`}const Jt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,s=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,c=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,a=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",d=window.open(a,e,`width=${n},height=${o},top=${c},left=${s},scrollbars=yes,resizable=yes`);return d.location.href=t,d.focus(),d};export{Ot as FOCUSABLE_INPUTS_SELECTOR,kt as camelCase,vt as clearApplicationScopesParamFromUrl,V as clearCodeFromUrl,ut as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,z as clearExchangeErrorFromUrl,_ as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,yt as clearOIDCLoginHintParamFromUrl,wt as clearOIDCPromptParamFromUrl,Ct as clearOIDCResourceParamFromUrl,Dt as clearPreviousExternalInputs,B as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,dt as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,H as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,It as createIsChanged,$ as fetchContent,F as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Lt as getChromiumVersion,Q as getCodeFromUrl,M as getContentUrl,ct as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,G as getExchangeErrorFromUrl,qt as getFirstNonEmptyValue,W as getIsPopupFromUrl,bt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,ht as getOIDCLoginHintParamFromUrl,gt as getOIDCPromptParamFromUrl,St as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,N as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,st as getSSOAppIdParamFromUrl,zt as getScriptResultPath,at as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,D as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,jt as handleAutoFocus,xt as handleReportValidityOnBlur,Et as handleUrlParams,Mt as injectSamlIdpForm,Ft as injectWsFedIdpForm,q as isChromium,Bt as leadingDebounce,Jt as openCenteredPopup,Ht as shouldHandleMarkdown,Rt as showFirstScreenOnExecutionInit,Nt as submitForm,Ut as timeoutPromise,_t as transformScreenInputs,Vt as transformStepStateForCustomScreen,Tt as withMemCache,U as withRetry};
2
2
  //# sourceMappingURL=helpers.js.map
package/dist/esm/helpers/helpers.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n ComponentsConfig,\n CustomScreenData,\n CustomScreenState,\n Direction,\n ScreenState,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (\n rootEle: HTMLElement,\n // Best-effort callback invoked with the input that failed validation on\n // blur, so callers can track client-side validation errors. Never throws\n // into the blur handler.\n onInvalid?: (input: HTMLInputElement) => void,\n) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n const valid = ele.reportValidity?.();\n if (onInvalid && valid === false) {\n onInvalid(ele);\n }\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n formEle.innerHTML = `\n <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n `;\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n const createHiddenInput = (name: string, value: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n return input;\n };\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n minLength: 'data-password-policy-value-minlength',\n strength: 'data-password-policy-value-passwordstrength',\n disallowedChars: 'data-password-policy-value-disallowedchars',\n email: 'data-password-policy-value-email',\n activePolicies: 'active-policies',\n availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n if (!newPassword) return undefined;\n const policy = Object.fromEntries(\n Object.entries(PASSWORD_POLICY_KEYS)\n .map(([clean, raw]) => [clean, newPassword[raw]])\n .filter(([, v]) => v !== undefined),\n );\n return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n componentsConfig: ComponentsConfig | undefined,\n name: string,\n): Record<string, any> | undefined => {\n const entries = componentsConfig?.componentsDynamicAttrs;\n if (!entries) return undefined;\n const match = Object.entries(entries).find(\n ([selector]) => dataNameOf(selector) === name,\n );\n return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n if (!attributes) return undefined;\n return Array.isArray(attributes.data)\n ? attributes.data.map((code: { value: string }) => code.value)\n : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n if (!attributes) return undefined;\n return {\n label: attributes.label,\n iconSrc: attributes['icon-src'],\n appId: attributes['data-descope-outbound-oauth-app-id'],\n };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n key: string;\n from: (screenState: ScreenState) => unknown;\n}[] = [\n // moved verbatim from the top level of the screen state\n { key: 'totp', from: (s) => s.totp },\n { key: 'notp', from: (s) => s.notp },\n { key: 'sentTo', from: (s) => s.sentTo },\n { key: 'sso', from: (s) => s.sso },\n { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n {\n key: 'inboundAppApproveScopes',\n from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n },\n { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n {\n key: 'userTenants',\n from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n },\n { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n {\n key: 'ssoApplications',\n from: (s) => s.componentsConfig?.ssoApplications?.data,\n },\n {\n key: 'ssoConfigurations',\n from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n },\n {\n key: 'samlAttributeMappings',\n from: (s) => s.componentsConfig?.samlMappings?.options,\n },\n {\n key: 'oidcAttributeMappings',\n from: (s) => s.componentsConfig?.oidcMappings?.options,\n },\n {\n key: 'samlGroupMappings',\n from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n },\n {\n key: 'passwordPolicy',\n from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n },\n // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n if (!screenState) return undefined;\n\n const data: Record<string, unknown> = {};\n DATA_FIELDS.forEach(({ key, from }) => {\n const value = from(screenState);\n if (value !== undefined) data[key] = value;\n });\n\n return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n // so a backend-provided `data` never leaks through — we always set our own below.\n const data = buildCustomScreenData(state.screenState);\n if (data) {\n sanitizedState.data = data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","onInvalid","querySelectorAll","forEach","addEventListener","onBlur","origFocus","valid","reportValidity","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA6B,CACxCC,EAIAC,KAEAD,EAAQE,iBAAiB,WAAWC,SAAStD,IAC3CA,EAAIuD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYzD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACZ,MAAMS,UAAQ5I,EAAAkF,EAAI2D,6CACdP,IAAuB,IAAVM,GACfN,EAAUpD,GAEZhJ,YAAW,KAETgJ,EAAIiD,MAAQQ,CAAS,GACrB,EAKJ,GAFmE,SAAhCzD,EAAI4D,aAAa,aAEP,QAAX9I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAiB,IAQF,MAAMK,EAAM,CAAEC,WAAOrI,GAEfsI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQrI,EACb,EAGHoI,EAAIC,MAAQ9M,YAAW,KACrBmM,EAAQgB,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQrI,CAAS,GACpB,KAEH0H,EAAQI,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAI1N,SAAQ,CAACC,EAAS0N,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ9M,YAAW,KACvB0N,GAAU,OACOjJ,IAAb+I,EACFzN,EAAQyN,GAERC,EAAO,IAAIhM,MAAM,2BAA2B6L,QAC7C,GACAA,GAEHC,EACGI,MAAM/D,IACA8D,IACHR,aAAaJ,GACb/M,EAAQ6J,GACT,IAEFgE,OAAO/N,IACD6N,IACHR,aAAaJ,GACbW,EAAO5N,GACR,GACD,GAER,CAEO,MAAMgO,GAAqB,WAChC,MAAMC,EAA4C,QAAlChK,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB4J,qBAAe,IAAAjK,OAAA,EAAAA,EAAAgK,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEjE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAwD,GACDjE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUyD,GAAoB,CAC/BpN,EACAqN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS5N,EACjBwN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAASjN,KAAKsN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC/N,EACAgO,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS5N,EAGjB,MAAMkO,EAAoB,CAAC3F,EAAcE,KACvC,MAAM0F,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM5F,KAAOA,EACb4F,EAAM1F,MAAQA,EACP0F,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU5F,MAAQ,WAClB4F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAASjN,KAAKsN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B/N,GAC7B+N,GAAS8C,EAAKE,MAAM7Q,KAAMF,GAC/B2N,aAAaI,GACbA,EAAUtN,YAAW,KACnBsN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAAStD,GAAQA,EAAIwH,UAAS,EAGtBC,GAAwBC,GACnCxR,EAAcyR,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACA1H,WAEA,MAAM3H,EAAUqP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKtP,EAAS,OACd,MAAMuP,EAAQzP,OAAOE,QAAQA,GAASkM,MACpC,EAAEsD,KAnCa,CAACA,IAAwC,IAAAzN,EAC1D,OAAgD,QAAhDA,EAAAyN,EAASD,MAAM,yCAAiC,IAAAxN,OAAA,EAAAA,EAAG,EAAE,EAkCnC0N,CAAWD,KAAc7H,IAE3C,OAAmB,QAAZ5F,EAAAwN,aAAK,EAALA,EAAQ,UAAI,IAAAxN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBsI,GAGA,CAEJ,CAAEvB,IAAK,OAAQhH,KAAOV,GAAMA,EAAEkJ,MAC9B,CAAExB,IAAK,OAAQhH,KAAOV,GAAMA,EAAEmJ,MAC9B,CAAEzB,IAAK,SAAUhH,KAAOV,GAAMA,EAAEoJ,QAChC,CAAE1B,IAAK,MAAOhH,KAAOV,GAAMA,EAAEqJ,KAC7B,CAAE3B,IAAK,uBAAwBhH,KAAOV,GAAMA,EAAEsJ,sBAE9C,CACE5B,IAAK,0BACLhH,KAAOV,YAAM,OAAgD,QAAhDuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEkO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0BhH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE4I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2BhH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE4I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACLhH,KAAOV,YAAM,OAAwC,QAAxCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEsO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAahH,KAAOV,IAAK,IAAA1E,EAAAiO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEuO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACLhH,KAAOV,YAAM,OAAqC,QAArCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEwO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACLhH,KAAOV,YAAM,OAAuC,QAAvCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEyO,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACLhH,KAAOV,YAAM,OAAkC,QAAlCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE0O,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACLhH,KAAOV,YAAM,OAAkC,QAAlCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE4O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACLhH,KAAOV,YAAM,OAAuC,QAAvCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE6O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACLhH,KAAOV,UAAM,MAhGe,CAC9BoK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAAShR,OAAOC,YACpBD,OAAOE,QAAQ6O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAazO,IAANyO,KAEvB,OAAOrR,OAAOmO,KAAK6C,GAAQtH,OAASsH,OAASpO,CAAS,EAuFvC0O,SAAwBrP,EAAA0E,EAAE4I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiBhH,KAAOV,GAzET,CAAC4I,IACvB,MAAMjI,EAAagI,GAAeC,EAAkB,iBACpD,GAAKjI,EACL,OAAOF,MAAMmK,QAAQjK,EAAW8I,MAC5B9I,EAAW8I,KAAKa,KAAK5I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+ByJ,CAAgB7K,EAAE4I,mBACvD,CAAElB,IAAK,cAAehH,KAAOV,GAlET,CAAC4I,IACrB,MAAMjI,EAAagI,GAAeC,EAAkB,eACpD,GAAKjI,EACL,MAAO,CACLmK,MAAOnK,EAAWmK,MAClBC,QAASpK,EAAW,YACpBqK,MAAOrK,EAAW,sCACnB,EA2DkCsK,CAAcjL,EAAE4I,oBAuBxCsC,GACX9K,IAEA,MAAM+K,GAtJN5D,EAuJEnH,EAAMgL,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlEnS,OAAOC,YACLD,OAAOE,QAAQgO,GAAKkD,QAClB,EAAE/C,EAAKtG,MAAYiK,EAAUjK,EAAOsG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBtL,GAEAqL,GAAaC,KACfP,EAAe9T,MAAQ,CAAEsU,KAAMF,EAAW1E,KAAM2E,IAG9CtL,EAAMmG,SACR4E,EAAe5E,OAASnG,EAAMmG,QAKhC,MAAMkD,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYnF,SAAQ,EAAG4D,MAAKhH,WAC1B,MAAMU,EAAQV,EAAK0K,QACLnP,IAAVmF,IAAqBqI,EAAK/B,GAAOtG,EAAK,IAGrC/H,OAAOmO,KAAKiC,GAAM1G,OAAU0G,OAA4BxN,CAAS,EAyB3D2P,CAAsBxL,EAAMgL,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMjT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ2K,GAMjB,OAJIA,EAAOC,0BACTlT,EAAI2Q,2BAA6BsC,EAAOC,yBAGnClT,CAAG,EAGI,SAAAmT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/BzT,EACA0T,EACAC,EACAC,KAEA,MAAMC,OACkBvQ,IAAtBnE,OAAO2U,WACH3U,OAAO2U,WACN3U,OAAO4U,OAAeC,KACvBC,OACiB3Q,IAArBnE,OAAO+U,UACH/U,OAAO+U,UACN/U,OAAO4U,OAAeI,IAWvBH,IARJ7U,OAAOiV,YACP3G,SAAS4G,gBAAgBC,aACzBnV,OAAO4U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJhV,OAAOqV,aACP/G,SAAS4G,gBAAgBI,cACzBtV,OAAO4U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EAl2BR,WACE,MAAMC,EAAK5R,UAAUC,WAAa,GAC5B4R,EAAW,eAAe9R,KAAK6R,GAE/BE,EACJ,SAAS/R,KAAK6R,KAAQ,2CAA2C7R,KAAK6R,GAExE,OAAOC,GAAYC,CACrB,CA01BqBC,GAAmB,cAAgB,GAChDC,EAAQ7V,OAAO8V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM5V,SAASQ,KAAOI,EACtBgV,EAAMlK,QAECkK,CAAK"}
1
+ {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n ComponentsConfig,\n CustomScreenData,\n CustomScreenState,\n Direction,\n ScreenState,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (\n rootEle: HTMLElement,\n // Best-effort callback invoked with the input that failed validation on\n // blur, so callers can track client-side validation errors. Never throws\n // into the blur handler.\n onInvalid?: (input: HTMLInputElement) => void,\n) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n const valid = ele.reportValidity?.();\n if (onInvalid && valid === false) {\n onInvalid(ele);\n }\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\n// Use DOM APIs to set values safely - these are server-provided values (raw XML,\n// base64, opaque relay state) that would break innerHTML interpolation\nconst createHiddenInput = (name: string, value: string, role?: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n if (role) {\n input.setAttribute('role', role);\n }\n return input;\n};\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n formEle.appendChild(\n createHiddenInput('SAMLResponse', samlResponse, 'saml-response'),\n );\n formEle.appendChild(\n createHiddenInput('RelayState', relayState, 'saml-relay-state'),\n );\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'SAMLSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n minLength: 'data-password-policy-value-minlength',\n strength: 'data-password-policy-value-passwordstrength',\n disallowedChars: 'data-password-policy-value-disallowedchars',\n email: 'data-password-policy-value-email',\n activePolicies: 'active-policies',\n availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n if (!newPassword) return undefined;\n const policy = Object.fromEntries(\n Object.entries(PASSWORD_POLICY_KEYS)\n .map(([clean, raw]) => [clean, newPassword[raw]])\n .filter(([, v]) => v !== undefined),\n );\n return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n componentsConfig: ComponentsConfig | undefined,\n name: string,\n): Record<string, any> | undefined => {\n const entries = componentsConfig?.componentsDynamicAttrs;\n if (!entries) return undefined;\n const match = Object.entries(entries).find(\n ([selector]) => dataNameOf(selector) === name,\n );\n return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n if (!attributes) return undefined;\n return Array.isArray(attributes.data)\n ? attributes.data.map((code: { value: string }) => code.value)\n : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n if (!attributes) return undefined;\n return {\n label: attributes.label,\n iconSrc: attributes['icon-src'],\n appId: attributes['data-descope-outbound-oauth-app-id'],\n };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n key: string;\n from: (screenState: ScreenState) => unknown;\n}[] = [\n // moved verbatim from the top level of the screen state\n { key: 'totp', from: (s) => s.totp },\n { key: 'notp', from: (s) => s.notp },\n { key: 'sentTo', from: (s) => s.sentTo },\n { key: 'sso', from: (s) => s.sso },\n { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n {\n key: 'inboundAppApproveScopes',\n from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n },\n { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n {\n key: 'userTenants',\n from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n },\n { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n {\n key: 'ssoApplications',\n from: (s) => s.componentsConfig?.ssoApplications?.data,\n },\n {\n key: 'ssoConfigurations',\n from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n },\n {\n key: 'samlAttributeMappings',\n from: (s) => s.componentsConfig?.samlMappings?.options,\n },\n {\n key: 'oidcAttributeMappings',\n from: (s) => s.componentsConfig?.oidcMappings?.options,\n },\n {\n key: 'samlGroupMappings',\n from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n },\n {\n key: 'passwordPolicy',\n from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n },\n // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n if (!screenState) return undefined;\n\n const data: Record<string, unknown> = {};\n DATA_FIELDS.forEach(({ key, from }) => {\n const value = from(screenState);\n if (value !== undefined) data[key] = value;\n });\n\n return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n // so a backend-provided `data` never leaks through — we always set our own below.\n const data = buildCustomScreenData(state.screenState);\n if (data) {\n sanitizedState.data = data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","onInvalid","querySelectorAll","forEach","addEventListener","onBlur","origFocus","valid","reportValidity","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","createHiddenInput","role","input","document","createElement","type","setAttribute","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","method","action","appendChild","submitBtn","id","style","display","injectWsFedIdpForm","wresult","wctx","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA6B,CACxCC,EAIAC,KAEAD,EAAQE,iBAAiB,WAAWC,SAAStD,IAC3CA,EAAIuD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYzD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACZ,MAAMS,UAAQ5I,EAAAkF,EAAI2D,6CACdP,IAAuB,IAAVM,GACfN,EAAUpD,GAEZhJ,YAAW,KAETgJ,EAAIiD,MAAQQ,CAAS,GACrB,EAKJ,GAFmE,SAAhCzD,EAAI4D,aAAa,aAEP,QAAX9I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAiB,IAQF,MAAMK,EAAM,CAAEC,WAAOrI,GAEfsI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQrI,EACb,EAGHoI,EAAIC,MAAQ9M,YAAW,KACrBmM,EAAQgB,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQrI,CAAS,GACpB,KAEH0H,EAAQI,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAI1N,SAAQ,CAACC,EAAS0N,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ9M,YAAW,KACvB0N,GAAU,OACOjJ,IAAb+I,EACFzN,EAAQyN,GAERC,EAAO,IAAIhM,MAAM,2BAA2B6L,QAC7C,GACAA,GAEHC,EACGI,MAAM/D,IACA8D,IACHR,aAAaJ,GACb/M,EAAQ6J,GACT,IAEFgE,OAAO/N,IACD6N,IACHR,aAAaJ,GACbW,EAAO5N,GACR,GACD,GAER,CAEO,MAAMgO,GAAqB,WAChC,MAAMC,EAA4C,QAAlChK,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB4J,qBAAe,IAAAjK,OAAA,EAAAA,EAAAgK,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEjE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAwD,GACDjE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAIGyD,GAAoB,CAAC7E,EAAcE,EAAe4E,KACtD,MAAMC,EAAQC,SAASC,cAAc,SAOrC,OANAF,EAAMG,KAAO,SACbH,EAAM/E,KAAOA,EACb+E,EAAM7E,MAAQA,EACV4E,GACFC,EAAMI,aAAa,OAAQL,GAEtBC,CAAK,EAGDK,GAAoB,CAC/B3N,EACA4N,EACAC,EACAC,KAEA,MAAMC,EAAUR,SAASC,cAAc,QACvCO,EAAQC,OAAS,OACjBD,EAAQE,OAASjO,EAEjB+N,EAAQG,YACNd,GAAkB,eAAgBQ,EAAc,kBAElDG,EAAQG,YACNd,GAAkB,aAAcS,EAAY,qBAG9C,MAAMM,EAAYZ,SAASC,cAAc,SACzCW,EAAUV,KAAO,SACjBU,EAAUC,GAAK,mBACfD,EAAU1F,MAAQ,WAClB0F,EAAUE,MAAMC,QAAU,OAC1BP,EAAQG,YAAYC,GAEpBZ,SAAS/M,KAAK0N,YAAYH,GAE1BD,EAAeC,EAAQ,EAGZQ,GAAqB,CAChCvO,EACAwO,EACAC,EACAX,KAEA,MAAMC,EAAUR,SAASC,cAAc,QACvCO,EAAQC,OAAS,OACjBD,EAAQE,OAASjO,EAEjB+N,EAAQG,YAAYd,GAAkB,KAAM,eAC5CW,EAAQG,YAAYd,GAAkB,UAAWoB,IACjDT,EAAQG,YAAYd,GAAkB,OAAQqB,IAE9C,MAAMN,EAAYZ,SAASC,cAAc,SACzCW,EAAUV,KAAO,SACjBU,EAAUC,GAAK,oBACfD,EAAU1F,MAAQ,WAClB0F,EAAUE,MAAMC,QAAU,OAC1BP,EAAQG,YAAYC,GAEpBZ,SAAS/M,KAAK0N,YAAYH,GAE1BD,EAAeC,EAAQ,EAGZW,GAAcX,GAA6BA,aAAO,EAAPA,EAASY,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAKhC,MAAMkC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAIhD,EACJ,OAAO,YAA6B/N,GAC7B+N,GAAS+C,EAAKE,MAAM9Q,KAAMF,GAC/B2N,aAAaI,GACbA,EAAUtN,YAAW,KACnBsN,EAAU,IAAI,GACbgD,EACL,CAAM,EAGKE,GAA8B,KACzC9B,SACGrC,iBAAiB,8BACjBC,SAAStD,GAAQA,EAAIyH,UAAS,EAGtBC,GAAwBC,GACnCzR,EAAc0R,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACA3H,WAEA,MAAM3H,EAAUsP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKvP,EAAS,OACd,MAAMwP,EAAQ1P,OAAOE,QAAQA,GAASkM,MACpC,EAAEuD,KAnCa,CAACA,IAAwC,IAAA1N,EAC1D,OAAgD,QAAhDA,EAAA0N,EAASD,MAAM,yCAAiC,IAAAzN,OAAA,EAAAA,EAAG,EAAE,EAkCnC2N,CAAWD,KAAc9H,IAE3C,OAAmB,QAAZ5F,EAAAyN,aAAK,EAALA,EAAQ,UAAI,IAAAzN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBuI,GAGA,CAEJ,CAAEvB,IAAK,OAAQjH,KAAOV,GAAMA,EAAEmJ,MAC9B,CAAExB,IAAK,OAAQjH,KAAOV,GAAMA,EAAEoJ,MAC9B,CAAEzB,IAAK,SAAUjH,KAAOV,GAAMA,EAAEqJ,QAChC,CAAE1B,IAAK,MAAOjH,KAAOV,GAAMA,EAAEsJ,KAC7B,CAAE3B,IAAK,uBAAwBjH,KAAOV,GAAMA,EAAEuJ,sBAE9C,CACE5B,IAAK,0BACLjH,KAAOV,YAAM,OAAgD,QAAhDwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEmO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0BjH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE6I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2BjH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE6I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACLjH,KAAOV,YAAM,OAAwC,QAAxCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEuO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAajH,KAAOV,IAAK,IAAA1E,EAAAkO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEwO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACLjH,KAAOV,YAAM,OAAqC,QAArCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEyO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACLjH,KAAOV,YAAM,OAAuC,QAAvCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE0O,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACLjH,KAAOV,YAAM,OAAkC,QAAlCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE2O,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACLjH,KAAOV,YAAM,OAAkC,QAAlCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE6O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACLjH,KAAOV,YAAM,OAAuC,QAAvCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE8O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACLjH,KAAOV,UAAM,MAhGe,CAC9BqK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAASjR,OAAOC,YACpBD,OAAOE,QAAQ8O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAa1O,IAAN0O,KAEvB,OAAOtR,OAAOoO,KAAK6C,GAAQvH,OAASuH,OAASrO,CAAS,EAuFvC2O,SAAwBtP,EAAA0E,EAAE6I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiBjH,KAAOV,GAzET,CAAC6I,IACvB,MAAMlI,EAAaiI,GAAeC,EAAkB,iBACpD,GAAKlI,EACL,OAAOF,MAAMoK,QAAQlK,EAAW+I,MAC5B/I,EAAW+I,KAAKa,KAAK7I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+B0J,CAAgB9K,EAAE6I,mBACvD,CAAElB,IAAK,cAAejH,KAAOV,GAlET,CAAC6I,IACrB,MAAMlI,EAAaiI,GAAeC,EAAkB,eACpD,GAAKlI,EACL,MAAO,CACLoK,MAAOpK,EAAWoK,MAClBC,QAASrK,EAAW,YACpBsK,MAAOtK,EAAW,sCACnB,EA2DkCuK,CAAclL,EAAE6I,oBAuBxCsC,GACX/K,IAEA,MAAMgL,GAtJN5D,EAuJEpH,EAAMiL,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlEpS,OAAOC,YACLD,OAAOE,QAAQiO,GAAKkD,QAClB,EAAE/C,EAAKvG,MAAYkK,EAAUlK,EAAOuG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBvL,GAEAsL,GAAaC,KACfP,EAAe/T,MAAQ,CAAEuU,KAAMF,EAAWtF,KAAMuF,IAG9CvL,EAAMwG,SACRwE,EAAexE,OAASxG,EAAMwG,QAKhC,MAAM8C,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYpF,SAAQ,EAAG6D,MAAKjH,WAC1B,MAAMU,EAAQV,EAAK2K,QACLpP,IAAVmF,IAAqBsI,EAAK/B,GAAOvG,EAAK,IAGrC/H,OAAOoO,KAAKiC,GAAM3G,OAAU2G,OAA4BzN,CAAS,EAyB3D4P,CAAsBzL,EAAMiL,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMlT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ4K,GAMjB,OAJIA,EAAOC,0BACTnT,EAAI4Q,2BAA6BsC,EAAOC,yBAGnCnT,CAAG,EAGI,SAAAoT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/B1T,EACA2T,EACAC,EACAC,KAEA,MAAMC,OACkBxQ,IAAtBnE,OAAO4U,WACH5U,OAAO4U,WACN5U,OAAO6U,OAAeC,KACvBC,OACiB5Q,IAArBnE,OAAOgV,UACHhV,OAAOgV,UACNhV,OAAO6U,OAAeI,IAWvBH,IARJ9U,OAAOkV,YACP9G,SAAS+G,gBAAgBC,aACzBpV,OAAO6U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJjV,OAAOsV,aACPlH,SAAS+G,gBAAgBI,cACzBvV,OAAO6U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EA/2BR,WACE,MAAMC,EAAK7R,UAAUC,WAAa,GAC5B6R,EAAW,eAAe/R,KAAK8R,GAE/BE,EACJ,SAAShS,KAAK8R,KAAQ,2CAA2C9R,KAAK8R,GAExE,OAAOC,GAAYC,CACrB,CAu2BqBC,GAAmB,cAAgB,GAChDC,EAAQ9V,OAAO+V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM7V,SAASQ,KAAOI,EACtBiV,EAAMnK,QAECmK,CAAK"}