@dynamic-labs/sdk-react-core 4.67.2 → 4.68.0

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.cjs

@@ -3,152 +3,44 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var _tslib = require('../../../../../_virtual/_tslib.cjs');
 var React = require('react');
-var client$1 = require('@dynamic-labs-sdk/client');
 var sdkApiCore = require('@dynamic-labs/sdk-api-core');
-var utils = require('@dynamic-labs/utils');
 require('@dynamic-labs-sdk/client/core');
-var client = require('../../../client/client.cjs');
+require('../../../client/client.cjs');
+require('@dynamic-labs-sdk/client');
 require('../../../config/ApiEndpoint.cjs');
 require('@dynamic-labs/iconic');
 require('@dynamic-labs/wallet-connector-core');
 require('react/jsx-runtime');
-var ViewContext = require('../../../context/ViewContext/ViewContext.cjs');
-var logger = require('../../../shared/logger.cjs');
+require('../../../context/ViewContext/ViewContext.cjs');
+require('../../../shared/logger.cjs');
 require('@dynamic-labs/wallet-book');
+require('@dynamic-labs/utils');
 require('../../constants/colors.cjs');
 require('../../constants/values.cjs');
 require('../../../shared/consts/index.cjs');
+require('../../../../../_virtual/_tslib.cjs');
 require('@dynamic-labs/multi-wallet');
 require('react-international-phone');
 require('../../../store/state/nonce/nonce.cjs');
 require('@dynamic-labs/locale');
-var dynamicContextProps = require('../../../store/state/dynamicContextProps/dynamicContextProps.cjs');
+require('../../../store/state/dynamicContextProps/dynamicContextProps.cjs');
 require('../../../store/state/primaryWalletId/primaryWalletId.cjs');
 require('../../../store/state/connectedWalletsInfo/connectedWalletsInfo.cjs');
 require('../../functions/getWaasAddressTypeLabel/getWaasAddressTypeLabel.cjs');
-var dynamicEvents = require('../../../events/dynamicEvents.cjs');
-var useUser = require('../../../client/extension/user/useUser/useUser.cjs');
+require('../../../events/dynamicEvents.cjs');
+var getProjectSettings = require('../../../client/extension/projectSettings/getProjectSettings/getProjectSettings.cjs');
 var hasElevatedAccessToken = require('../../../client/extension/functions/hasElevatedAccessToken/hasElevatedAccessToken.cjs');
-require('../../../context/DynamicContext/DynamicContext.cjs');
-require('../../../store/state/loadingAndLifecycle/loadingAndLifecycle.cjs');
-var useConnectAndSign = require('../authenticationHooks/useConnectAndSign/useConnectAndSign.cjs');
-require('../../../context/ErrorContext/ErrorContext.cjs');
-require('../../../context/AccessDeniedContext/AccessDeniedContext.cjs');
-require('../../../context/AccountExistsContext/AccountExistsContext.cjs');
-var UserWalletsContext = require('../../../context/UserWalletsContext/UserWalletsContext.cjs');
-require('../../../store/state/authMode/authMode.cjs');
-require('../../../context/CaptchaContext/CaptchaContext.cjs');
-require('../../../context/VerificationContext/VerificationContext.cjs');
-require('react-dom');
-require('../../functions/compareChains/compareChains.cjs');
-require('../../../views/Passkey/utils/findPrimaryEmbeddedChain/findPrimaryEmbeddedChain.cjs');
-require('../../../context/ThemeContext/ThemeContext.cjs');
-require('../useUserUpdateRequest/useUpdateUser/userFieldsSchema.cjs');
-require('bs58');
-require('@dynamic-labs/types');
-require('../../../context/SocialRedirectContext/SocialRedirectContext.cjs');
-require('../../../context/LoadingContext/LoadingContext.cjs');
-require('../../../context/WalletContext/WalletContext.cjs');
-require('../useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs');
-require('yup');
-require('../../../context/MockContext/MockContext.cjs');
-require('../../../views/CollectUserDataView/useFields.cjs');
-require('../../../context/FieldsStateContext/FieldsStateContext.cjs');
-require('../../../context/UserFieldEditorContext/UserFieldEditorContext.cjs');
-require('@dynamic-labs/rpc-providers');
-require('../../../store/state/walletOptions/walletOptions.cjs');
-require('react-i18next');
-require('../../../components/Accordion/components/AccordionItem/AccordionItem.cjs');
-require('../../../components/Alert/Alert.cjs');
-require('../../../components/ShadowDOM/ShadowDOM.cjs');
-require('../../../components/IconButton/IconButton.cjs');
-require('../../../components/InlineWidget/InlineWidget.cjs');
-require('../../../components/Input/Input.cjs');
-require('../../../components/IsBrowser/IsBrowser.cjs');
-require('../../../components/MenuList/Dropdown/Dropdown.cjs');
-require('../../../components/OverlayCard/OverlayCard.cjs');
-require('../../../components/Transition/ZoomTransition/ZoomTransition.cjs');
-require('../../../components/Transition/SlideInUpTransition/SlideInUpTransition.cjs');
-require('../../../components/Transition/OpacityTransition/OpacityTransition.cjs');
-require('../../../components/PasskeyCreatedSuccessBanner/PasskeyCreatedSuccessBanner.cjs');
-require('../../../components/Popper/Popper/Popper.cjs');
-require('../../../components/Popper/PopperContext/PopperContext.cjs');
-require('react-focus-lock');
-require('qrcode');
-require('formik');
-require('../useSubdomainCheck/useSubdomainCheck.cjs');
-require('../../../context/WalletGroupContext/WalletGroupContext.cjs');
-require('../../../widgets/DynamicWidget/context/DynamicWidgetContext.cjs');
-require('../useWalletBackup/useWalletBackup.cjs');
-require('../useWalletBackup/types.cjs');
-require('../useWalletBackup/cloudProviders.cjs');
-require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
-require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
-require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
-require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
-require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');
-require('../../../context/FooterAnimationContext/index.cjs');
-require('../../../views/MfaChooseDeviceView/useGetMfaOptions/useGetMfaOptions.cjs');
-require('../../../context/PasskeyContext/PasskeyContext.cjs');
-require('../../../context/OnrampContext/OnrampContext.cjs');
-require('../../../store/state/sendBalances.cjs');
-require('../../../store/state/connectorsInitializing/connectorsInitializing.cjs');
-require('../../../components/OverlayCardBase/OverlayCardTarget/OverlayCardTarget.cjs');
-require('../../../widgets/DynamicWidget/components/DynamicWidgetHeader/DynamicWidgetHeader.cjs');
-require('../../../views/TransactionConfirmationView/TransactionConfirmationView.cjs');
-require('../../../widgets/DynamicWidget/components/PasskeyCard/PasskeyCard.cjs');
-require('../../../widgets/DynamicWidget/views/CryptoComOnramp/CryptoComOnramp.cjs');
-require('../../../../index.cjs');
-require('../../../widgets/DynamicWidget/views/ReceiveWalletFunds/ReceiveWalletFunds.cjs');
-require('../../../store/state/tokenBalances.cjs');
-require('../../../store/state/multichainBalances.cjs');
-var useGetUserMfaMethods = require('../useGetUserMfaMethods/useGetUserMfaMethods.cjs');
-var useAuthenticatePasskeyMFA = require('../useAuthenticatePasskeyMFA/useAuthenticatePasskeyMFA.cjs');
-require('../../../shared/utils/functions/getInitialUrl/getInitialUrl.cjs');
-var useInternalDynamicContext = require('../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext/useInternalDynamicContext.cjs');
+var useStepUpState = require('./useStepUpState.cjs');
+var useStepUpOtp = require('./useStepUpOtp.cjs');
+var useStepUpWallet = require('./useStepUpWallet.cjs');
+var useStepUpMfa = require('./useStepUpMfa.cjs');
+var useStepUpPromptMfa = require('./useStepUpPromptMfa.cjs');
+var useStepUpPromptReauth = require('./useStepUpPromptReauth.cjs');
+var usePromptStepUpAuth = require('./usePromptStepUpAuth.cjs');
 
-const INITIAL_STATE = {
-    error: null,
-    isLoading: false,
-    otpVerification: null,
-};
-const isCountryCode = (value) => value !== undefined && value in client$1.supportedCountries;
-const isOtpCapableCredential = (cred) => cred.format === sdkApiCore.JwtVerifiedCredentialFormatEnum.Email ||
-    cred.format === sdkApiCore.JwtVerifiedCredentialFormatEnum.PhoneNumber;
-const resolveTargetCredential = (credentials, credentialId) => {
-    var _a, _b;
-    if (credentialId) {
-        return ((_a = credentials.find((cred) => cred.id === credentialId)) !== null && _a !== void 0 ? _a : `Credential with id "${credentialId}" not found`);
-    }
-    return ((_b = credentials.find((cred) => cred.signInEnabled && isOtpCapableCredential(cred))) !== null && _b !== void 0 ? _b : 'No sign-in enabled email or SMS credential found for step-up authentication');
-};
-const sendEmailOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-    if (!credential.email) {
-        throw new Error('Email credential is missing email address');
-    }
-    return client$1.sendEmailOTP({ email: credential.email });
-});
-const sendSmsOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-    var _a;
-    const normalizedPhoneCountryCode = (_a = credential.phoneCountryCode) === null || _a === void 0 ? void 0 : _a.replace(/^\+/, '');
-    const matchedCountryCode = Object.keys(client$1.supportedCountries).find((key) => client$1.supportedCountries[key].code === normalizedPhoneCountryCode);
-    const isoCountryCode = isCountryCode(credential.isoCountryCode)
-        ? credential.isoCountryCode
-        : matchedCountryCode;
-    if (!credential.phoneNumber || !isoCountryCode) {
-        throw new Error('SMS credential is missing phone number or country code');
-    }
-    return client$1.sendSmsOTP({ isoCountryCode, phoneNumber: credential.phoneNumber });
-});
-const dispatchOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-    return credential.format === sdkApiCore.JwtVerifiedCredentialFormatEnum.Email
-        ? sendEmailOtp(credential)
-        : sendSmsOtp(credential);
-});
+// MinSdkVersionEnum values are formatted as "v<number>" (e.g. "v4", "v5")
+const parseSdkVersionNum = (version) => parseInt(version.replace(/\D/g, ''), 10);
 /**
  * Perform step-up authentication for an already-authenticated user.
  *
@@ -157,6 +49,8 @@ const dispatchOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, fun
  * - **Wallet**: `verifyWallet()` for wallet signature verification
  * - **Passkey MFA**: `verifyPasskeyMfa()` for passkey-based MFA
  * - **TOTP MFA**: `verifyTotpMfa()` for authenticator app codes
+ * - **Recovery codes**: `verifyRecoveryCode()` for backup recovery codes
+ * - **Prompt MFA**: `promptMfa()` to show Dynamic's built-in MFA UI
  *
  * For OTP and wallet methods, automatically selects the first sign-in enabled
  * credential, or targets a specific one when `credentialId` is provided.
@@ -182,260 +76,42 @@ const dispatchOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, fun
  * ```
  */
 const useStepUpAuthentication = ({ credentialId, } = {}) => {
-    const user = useUser.useUser();
-    const environmentId = dynamicContextProps.useEnvironmentId();
-    const [state, setState] = React.useState(INITIAL_STATE);
-    const connectAndSign = useConnectAndSign.useConnectAndSign();
-    const { userWallets } = UserWalletsContext.useInternalUserWallets();
-    const { setShowAuthFlow } = useInternalDynamicContext.useInternalDynamicContext();
-    const { pushView } = ViewContext.useViewContext();
-    const getUserMfaMethods = useGetUserMfaMethods.useGetUserMfaMethods();
-    const authenticatePasskeyMFA = useAuthenticatePasskeyMFA.useAuthenticatePasskeyMFA();
-    const dynamicClient = client.useDynamicClient();
-    // Ref keeps the latest otpVerification available inside the verifyOtp
-    // callback without creating a stale closure over state.
-    const otpVerificationRef = React.useRef(null);
-    const isStepUpRequired = React.useCallback(({ scope }) => !hasElevatedAccessToken.hasElevatedAccessToken(scope), []);
-    const resetState = React.useCallback(() => {
-        otpVerificationRef.current = null;
-        setState(INITIAL_STATE);
-    }, []);
-    const setError = React.useCallback((errorMessage) => {
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-        logger.logger.error(errorMessage, { environmentId, userId: user === null || user === void 0 ? void 0 : user.id });
-    }, [environmentId, user === null || user === void 0 ? void 0 : user.id]);
-    const sendOtp = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        const credentials = user === null || user === void 0 ? void 0 : user.verifiedCredentials;
-        if (!(credentials === null || credentials === void 0 ? void 0 : credentials.length)) {
-            setError('No verified credentials found for the authenticated user');
-            return null;
-        }
-        const result = resolveTargetCredential(credentials, credentialId);
-        if (typeof result === 'string') {
-            setError(result);
-            return null;
-        }
-        if (!isOtpCapableCredential(result)) {
-            setError(`Credential format "${result.format}" does not support OTP verification. Only email and SMS credentials are supported`);
-            return null;
-        }
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        try {
-            const otpVerification = yield dispatchOtp(result);
-            otpVerificationRef.current = otpVerification;
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: false, otpVerification })));
-            return otpVerification;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : 'Failed to send OTP';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to send OTP for step-up authentication', {
-                environmentId,
-                error,
-                userId: user === null || user === void 0 ? void 0 : user.id,
-            });
-            return null;
-        }
-    }), [
+    const stateActions = useStepUpState.useStepUpState();
+    const { resetOtpRef, sendOtp, verifyOtp } = useStepUpOtp.useStepUpOtp({
         credentialId,
-        environmentId,
-        setError,
-        user === null || user === void 0 ? void 0 : user.id,
-        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
-    ]);
-    const verifyOtp = React.useCallback((_a) => _tslib.__awaiter(void 0, [_a], void 0, function* ({ requestedScopes, verificationToken, }) {
-        const otpVerification = otpVerificationRef.current;
-        if (!otpVerification) {
-            setError('OTP verification has not been initiated. Call sendOtp() first');
-            return null;
-        }
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        try {
-            const response = yield client$1.verifyOTP({
-                otpVerification,
-                requestedScopes,
-                verificationToken,
-            });
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: false })));
-            return response;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : 'Failed to verify OTP';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to verify OTP for step-up authentication', {
-                environmentId,
-                error,
-                userId: user === null || user === void 0 ? void 0 : user.id,
-            });
-            return null;
-        }
-    }), [environmentId, setError, user === null || user === void 0 ? void 0 : user.id]);
-    const verifyWallet = React.useCallback((_b) => _tslib.__awaiter(void 0, [_b], void 0, function* ({ requestedScopes }) {
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        const wallet = userWallets.find((w) => w.id === credentialId);
-        if (!wallet) {
-            setError(`Wallet with id "${credentialId}" not found`);
-            return;
-        }
-        try {
-            yield connectAndSign({
-                requestedScopes,
-                walletConnector: wallet.connector,
-            });
-            setState((prev) => (Object.assign(Object.assign({}, prev), { isLoading: false })));
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error
-                ? error.message
-                : 'Failed to verify wallet for step-up authentication';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to verify wallet for step-up authentication', {
-                environmentId,
-                error,
-                userId: user === null || user === void 0 ? void 0 : user.id,
-            });
-        }
-    }), [connectAndSign, credentialId, environmentId, setError, user, userWallets]);
-    const verifyPasskeyMfa = React.useCallback((_c) => _tslib.__awaiter(void 0, [_c], void 0, function* ({ requestedScopes, }) {
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        try {
-            const response = yield client$1.authenticatePasskeyMFA({
-                requestedScopes,
-            });
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: false })));
-            return response;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error
-                ? error.message
-                : 'Failed to authenticate passkey for step-up authentication';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to authenticate passkey for step-up authentication', { environmentId, error, userId: user === null || user === void 0 ? void 0 : user.id });
-            return null;
-        }
-    }), [environmentId, user]);
-    const verifyTotpMfa = React.useCallback((_d) => _tslib.__awaiter(void 0, [_d], void 0, function* ({ code, deviceId, requestedScopes, }) {
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        try {
-            const response = yield client$1.authenticateTotpMfaDevice({
-                code,
-                deviceId,
-                requestedScopes,
-            });
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: false })));
-            return response;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error
-                ? error.message
-                : 'Failed to authenticate TOTP device for step-up authentication';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to authenticate TOTP device for step-up authentication', { environmentId, error, userId: user === null || user === void 0 ? void 0 : user.id });
-            return null;
-        }
-    }), [environmentId, user]);
-    const verifyRecoveryCode = React.useCallback((_e) => _tslib.__awaiter(void 0, [_e], void 0, function* ({ code, requestedScopes, }) {
-        setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: true })));
-        try {
-            const response = yield client$1.authenticateMfaRecoveryCode({
-                code,
-                requestedScopes,
-            });
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: null, isLoading: false })));
-            return response;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error
-                ? error.message
-                : 'Failed to authenticate recovery code for step-up authentication';
-            setState((prev) => (Object.assign(Object.assign({}, prev), { error: errorMessage, isLoading: false })));
-            logger.logger.error('Failed to authenticate recovery code for step-up authentication', { environmentId, error, userId: user === null || user === void 0 ? void 0 : user.id });
-            return null;
-        }
-    }), [environmentId, user]);
-    const promptMfa = React.useCallback((props) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _f;
-        const methods = yield getUserMfaMethods();
-        const allMethods = [
-            ...methods.passkeys.map((passkey) => (Object.assign(Object.assign({}, passkey), { type: sdkApiCore.MFADeviceType.Passkey }))),
-            ...methods.devices.map((device) => (Object.assign(Object.assign({}, device), { type: sdkApiCore.MFADeviceType.Totp }))),
-        ];
-        if (!methods.userHasVerifiedMfaMethods || allMethods.length === 0) {
-            setShowAuthFlow(true);
-            pushView('mfa-choose-device', {
-                createMfaToken: props === null || props === void 0 ? void 0 : props.createMfaToken,
-                requestedScopes: props === null || props === void 0 ? void 0 : props.requestedScopes,
-            });
-            return;
-        }
-        const lastCreatedMethod = allMethods.reduce((a, b) => {
-            if (!a)
-                return b;
-            if (!b)
-                return a;
-            if (a.createdAt && b.createdAt) {
-                return a.createdAt >= b.createdAt ? a : b;
-            }
-            if (b.createdAt) {
-                return b;
-            }
-            return a;
-        }, allMethods[0]);
-        switch (lastCreatedMethod.type) {
-            case sdkApiCore.MFADeviceType.Passkey: {
-                const createMfaTokenOptions = (props === null || props === void 0 ? void 0 : props.createMfaToken)
-                    ? { singleUse: true }
-                    : undefined;
-                const authenticatePasskeyPromise = authenticatePasskeyMFA({
-                    createMfaToken: createMfaTokenOptions,
-                    requestedScopes: props === null || props === void 0 ? void 0 : props.requestedScopes,
-                });
-                setShowAuthFlow(true);
-                pushView('passkey-confirm', {
-                    authenticatePasskeyPromise,
-                    createMfaToken: props === null || props === void 0 ? void 0 : props.createMfaToken,
-                    requestedScopes: props === null || props === void 0 ? void 0 : props.requestedScopes,
-                });
-                return authenticatePasskeyPromise;
-            }
-            case sdkApiCore.MFADeviceType.Totp: {
-                if ((dynamicClient === null || dynamicClient === void 0 ? void 0 : dynamicClient.mfaToken) && !((_f = props === null || props === void 0 ? void 0 : props.requestedScopes) === null || _f === void 0 ? void 0 : _f.length)) {
-                    return dynamicClient === null || dynamicClient === void 0 ? void 0 : dynamicClient.mfaToken;
-                }
-                const deferred = new utils.DeferredPromise();
-                setShowAuthFlow(true);
-                pushView('mfa-verification', {
-                    createMfaToken: props === null || props === void 0 ? void 0 : props.createMfaToken,
-                    requestedScopes: props === null || props === void 0 ? void 0 : props.requestedScopes,
-                });
-                const mfaCompletionSuccessOff = client$1.onEvent({
-                    event: 'mfaCompletionSuccess',
-                    listener: ({ mfaToken }) => deferred.resolve(mfaToken),
-                }, dynamicClient);
-                const onAuthFlowCloseHandler = () => deferred.reject(new Error('MFA view closed'));
-                dynamicEvents.dynamicEvents.on('authFlowClose', onAuthFlowCloseHandler);
-                deferred.promise.finally(() => {
-                    mfaCompletionSuccessOff();
-                    dynamicEvents.dynamicEvents.off('authFlowClose', onAuthFlowCloseHandler);
-                });
-                return deferred.promise;
-            }
-            default:
-                throw new Error('Error determining MFA method to use');
-        }
-    }), [
-        authenticatePasskeyMFA,
-        dynamicClient,
-        getUserMfaMethods,
-        pushView,
-        setShowAuthFlow,
-    ]);
+        stateActions,
+    });
+    const { verifyWallet } = useStepUpWallet.useStepUpWallet({
+        credentialId,
+        stateActions,
+    });
+    const { verifyPasskeyMfa, verifyRecoveryCode, verifyTotpMfa } = useStepUpMfa.useStepUpMfa({
+        stateActions,
+    });
+    const { promptMfa } = useStepUpPromptMfa.useStepUpPromptMfa();
+    const { promptReauthenticate } = useStepUpPromptReauth.useStepUpPromptReauth();
+    const { promptStepUpAuth } = usePromptStepUpAuth.usePromptStepUpAuth();
+    const isStepUpRequired = React.useCallback(({ scope }) => {
+        var _a, _b;
+        const { minSdkVersion } = (_b = (_a = getProjectSettings.getProjectSettings()) === null || _a === void 0 ? void 0 : _a.sdk) !== null && _b !== void 0 ? _b : {};
+        if (!minSdkVersion ||
+            parseSdkVersionNum(minSdkVersion) <
+                parseSdkVersionNum(sdkApiCore.MinSdkVersionEnum.V5))
+            return false;
+        return !hasElevatedAccessToken.hasElevatedAccessToken(scope);
+    }, []);
+    const resetState = React.useCallback(() => {
+        resetOtpRef();
+        stateActions.resetState();
+    }, [resetOtpRef, stateActions.resetState]);
     return {
         isStepUpRequired,
         promptMfa,
+        promptReauthenticate,
+        promptStepUpAuth,
         resetState,
         sendOtp,
-        state,
+        state: stateActions.state,
         verifyOtp,
         verifyPasskeyMfa,
         verifyRecoveryCode,

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.d.ts

@@ -1,51 +1,4 @@
-import type { OTPVerification } from '@dynamic-labs-sdk/client';
-import { TokenScope, VerifyResponse } from '@dynamic-labs/sdk-api-core';
-export type StepUpAuthenticationState = {
-    error: string | null;
-    isLoading: boolean;
-    otpVerification: OTPVerification | null;
-};
-export type VerifyOtpParams = {
-    requestedScopes?: TokenScope[];
-    verificationToken: string;
-};
-export type VerifyWalletParams = {
-    requestedScopes?: TokenScope[];
-};
-export type VerifyPasskeyMfaParams = {
-    requestedScopes?: TokenScope[];
-};
-export type VerifyTotpMfaParams = {
-    code: string;
-    deviceId?: string;
-    requestedScopes?: TokenScope[];
-};
-export type VerifyRecoveryCodeParams = {
-    code: string;
-    requestedScopes?: TokenScope[];
-};
-export type IsStepUpRequiredParams = {
-    scope: TokenScope;
-};
-export type UseStepUpAuthenticationParams = {
-    credentialId?: string;
-};
-export type UseStepUpAuthenticationReturn = {
-    isStepUpRequired: (params: IsStepUpRequiredParams) => boolean;
-    promptMfa: (props?: PromptMfaParams) => Promise<string | undefined>;
-    resetState: () => void;
-    sendOtp: () => Promise<OTPVerification | null>;
-    state: StepUpAuthenticationState;
-    verifyOtp: (params: VerifyOtpParams) => Promise<VerifyResponse | null>;
-    verifyPasskeyMfa: (params: VerifyPasskeyMfaParams) => Promise<VerifyResponse | null>;
-    verifyRecoveryCode: (params: VerifyRecoveryCodeParams) => Promise<VerifyResponse | null>;
-    verifyTotpMfa: (params: VerifyTotpMfaParams) => Promise<VerifyResponse | null>;
-    verifyWallet: (params: VerifyWalletParams) => Promise<void>;
-};
-export type PromptMfaParams = {
-    createMfaToken?: boolean;
-    requestedScopes?: TokenScope[];
-};
+import type { UseStepUpAuthenticationParams, UseStepUpAuthenticationReturn } from './useStepUpAuthentication.types';
 /**
  * Perform step-up authentication for an already-authenticated user.
  *
@@ -54,6 +7,8 @@ export type PromptMfaParams = {
  * - **Wallet**: `verifyWallet()` for wallet signature verification
  * - **Passkey MFA**: `verifyPasskeyMfa()` for passkey-based MFA
  * - **TOTP MFA**: `verifyTotpMfa()` for authenticator app codes
+ * - **Recovery codes**: `verifyRecoveryCode()` for backup recovery codes
+ * - **Prompt MFA**: `promptMfa()` to show Dynamic's built-in MFA UI
  *
  * For OTP and wallet methods, automatically selects the first sign-in enabled
  * credential, or targets a specific one when `credentialId` is provided.