@everymatrix/player-step-up-auth 1.76.7 → 1.76.9

package/dist/cjs/index.cjs.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-const playerStepUpAuth = require('./player-step-up-auth-80ad5fa5.js');
+const playerStepUpAuth = require('./player-step-up-auth-d5d44be3.js');
 require('./index-bf4d774c.js');
 
 

package/dist/cjs/loader.cjs.js

@@ -8,7 +8,7 @@ const appGlobals = require('./app-globals-3a1e7e63.js');
 const defineCustomElements = async (win, options) => {
   if (typeof window === 'undefined') return undefined;
   await appGlobals.globalScripts();
-  return index.bootstrapLazy([["player-step-up-auth.cjs",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
+  return index.bootstrapLazy([["player-step-up-auth.cjs",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32],"inputDisabled":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
 };
 
 exports.setNonce = index.setNonce;

package/dist/cjs/{player-step-up-auth-80ad5fa5.js → player-step-up-auth-d5d44be3.js}

@@ -368,16 +368,17 @@ const PlayerStepUpAuth = class {
         this.flow = '';
         this.showResendOtp = false;
         this.isLastWarning = false;
+        this.inputDisabled = false;
         this.handleResendOtp = this.handleResendOtp.bind(this);
         this.submitOtp = this.submitOtp.bind(this);
-        this.setOtpContainerRef = this.setOtpContainerRef.bind(this);
         this.handleCloseWidget = this.handleCloseWidget.bind(this);
         this.manualClosePopup = this.manualClosePopup.bind(this);
     }
     /**
-     * Fetches OTP configuration from the endpoint.
-     * Updates the OTP state, expiration time, and starts the countdown timer.
-     */
+       * Fetches OTP configuration from the endpoint.
+       * Updates the OTP state, expiration time, and starts the countdown timer.
+       * Handles specific errors like max attempts exceeded by closing the widget.
+       */
     async getConfig() {
         if (!this.endpoint)
             return;
@@ -385,29 +386,41 @@ const PlayerStepUpAuth = class {
             const url = new URL(`/api/v1/mfa/challenge/${this.token}/config`, this.endpoint);
             this.isLoading = true;
             const response = await fetch(url.href);
-            if (!response.ok)
-                throw new Error(`HTTP error! Status: ${response.status}`);
-            this.config = await response.json();
-            this.otp = new Array(this.config.inputLength).fill('');
-            this.isLoading = false;
-            this.showResendOtp = false;
-            this.expirationTime = this.config.expirationTime;
-            this.serverTime = this.config.serverTime;
-            /**
-             * `numberOfValidateAttempts` indicates how many times the user has previously attempted to enter the OTP.
-             * A non-zero value means at least one failed attempt occurred, so an error message should be displayed.
-             */
-            if (this.config.numberOfValidateAttempts !== 0) {
-                this.hasErrors = true;
-                this.errorMessage = translate('invalidOtp', this.language);
+            const result = await response.json(); // Parse JSON regardless of status
+            if (response.ok) {
+                //--- Success Path (2xx status) ---
+                this.config = result;
+                this.otp = Array(this.config.inputLength).fill('');
+                this.isLoading = false;
+                this.showResendOtp = false;
+                this.expirationTime = this.config.expirationTime;
+                this.serverTime = this.config.serverTime;
+                if (this.config.numberOfValidateAttempts !== 0) {
+                    this.hasErrors = true;
+                    this.errorMessage = translate('invalidOtp', this.language);
+                }
+                if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
+                    this.isLastWarning = true;
+                }
+                this.calculateTimeLeft();
+                this.startCountdown();
             }
-            if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
-                this.isLastWarning = true;
+            else {
+                //--- Error Path (non-2xx status) ---
+                // Check for result existence before accessing properties for compatibility.
+                if (result && result.details === 'gm.twofa.token_max_attempts_exceeded') {
+                    // Specific "max attempts" error: close the widget.
+                    this.handleCloseWidget();
+                }
+                else {
+                    // Any other configuration error: throw to be handled by the catch block.
+                    const errorMessage = (result && result.message) || `Failed to load config. Status: ${response.status}`;
+                    throw new Error(errorMessage);
+                }
             }
-            this.calculateTimeLeft();
-            this.startCountdown();
         }
         catch (error) {
+            //--- Catch block for network errors or thrown exceptions ---
             this.isLoading = false;
             this.hasConfigErrors = true;
             this.errorMessage = translate('configError', this.language);
@@ -440,6 +453,7 @@ const PlayerStepUpAuth = class {
             const now = Date.now();
             const timeRemaining = Math.max(0, Math.floor((this.expirationTimestamp - now) / 1000));
             this.timeLeft = timeRemaining;
+            this.inputDisabled = timeRemaining <= 0;
             if (timeRemaining <= 0) {
                 clearInterval(this.countdownTimer);
                 this.countdownTimer = null;
@@ -460,15 +474,6 @@ const PlayerStepUpAuth = class {
         const remainingSeconds = seconds % 60;
         return `${minutes.toString().padStart(2, '0')}:${remainingSeconds.toString().padStart(2, '0')}`;
     }
-    /**
-     * Sets a reference to the OTP input container.
-     *
-     * @param el - The OTP input container element.
-     */
-    setOtpContainerRef(el) {
-        if (el)
-            this.otpContainer = el;
-    }
     /**
      * Sets a reference to the OTP inputs.
      *
@@ -479,6 +484,18 @@ const PlayerStepUpAuth = class {
             this.otpInputs[index] = el;
         }
     }
+    /**
+     * update otp state
+     * by creating new array and assign to state, to make the UI trigger
+     *
+     * @param index - The index of the input field being updated.
+     * @param value - The inputted value.
+     */
+    updateOtpState(index, value) {
+        const updated = [...this.otp];
+        updated[index] = value.toUpperCase();
+        this.otp = updated;
+    }
     /**
      * Handles pasting an OTP directly into the input fields.
      * Extracts characters from the clipboard and populates the OTP fields.
@@ -486,24 +503,15 @@ const PlayerStepUpAuth = class {
      * @param e - The clipboard event containing pasted data.
      */
     handleOnPasteOtp(e) {
-        var _a;
+        var _a, _b, _c;
         e.preventDefault();
-        const data = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text').trim();
-        if (!data)
-            return;
-        const value = data.slice(0, this.config.inputLength).split(""); // Limit to OTP length
-        this.otp = [...value, ...new Array(this.config.inputLength - value.length).fill('')];
-        const inputs = Array.from(this.otpContainer.children);
-        if (inputs) {
-            value.forEach((char, index) => {
-                inputs[index].value = char;
-            });
-            // Move focus to the last input or trigger submit
-            const lastInput = inputs[value.length - 1];
-            lastInput === null || lastInput === void 0 ? void 0 : lastInput.focus();
-            if (value.length === this.config.inputLength) {
-                this.submitOtp();
-            }
+        const data = ((_b = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text')) === null || _b === void 0 ? void 0 : _b.trim()) || '';
+        const values = data.slice(0, this.config.inputLength).split('');
+        this.otp = [...values, ...Array(this.config.inputLength - values.length).fill('')];
+        // Move focus to the one after last input or trigger submit
+        (_c = this.otpInputs[values.length]) === null || _c === void 0 ? void 0 : _c.focus();
+        if (values.length === this.config.inputLength) {
+            this.submitOtp();
         }
     }
     /**
@@ -515,14 +523,14 @@ const PlayerStepUpAuth = class {
      */
     handleOtpInput(e, index) {
         const input = e.target;
-        let value = input.value.replace(/[^0-9a-zA-Z]/gi, '').toUpperCase();
-        input.value = value.charAt(0);
-        if (!value)
-            return;
-        this.otp[index] = value[0];
-        // Move focus using stored refs
-        const nextInput = this.otpInputs[index + 1];
-        nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        const value = input.value;
+        if (/^[a-z0-9]$/i.test(value)) {
+            this.updateOtpState(index, value);
+            // Move focus using stored refs
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        input.value = '';
     }
     /**
      * Handles key press events for OTP inputs.
@@ -532,9 +540,21 @@ const PlayerStepUpAuth = class {
      * @param index - The index of the input field.
      */
     handleKeyDown(e, index) {
-        if (e.key === "Backspace") {
-            this.otp[index] = '';
-            this.otpInputs[index].value = ''; // Clear input field
+        const key = e.key;
+        const isCommandOrControlKey = e.ctrlKey || e.metaKey;
+        if (/^[a-z0-9]$/i.test(key)) {
+            if (isCommandOrControlKey && key.toLowerCase() === 'v')
+                return;
+            e.preventDefault();
+            this.updateOtpState(index, key);
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        else if (key === 'Backspace') {
+            e.preventDefault();
+            if (this.otp[index] !== '') {
+                this.updateOtpState(index, '');
+            }
             const prevInput = this.otpInputs[index - 1];
             prevInput === null || prevInput === void 0 ? void 0 : prevInput.focus();
         }
@@ -601,7 +621,7 @@ const PlayerStepUpAuth = class {
             throw new Error(result.message);
         }
         catch (error) {
-            if (error.message === 'gm.multifactorauthentication.challenge') {
+            if (error.message === 'gm.multifactorauthentication.internal_server_error') {
                 if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
                     window.dispatchEvent(new CustomEvent('otpSetTimeout'));
                     //Trigger notification
@@ -656,8 +676,8 @@ const PlayerStepUpAuth = class {
         (_a = this.stylingSubscription) === null || _a === void 0 ? void 0 : _a.unsubscribe();
     }
     /**
-    * Lifecycle method: Fetch translations on component load
-    */
+     * Lifecycle method: Fetch translations on component load
+     */
     async componentWillLoad() {
         if (this.translationUrl.length > 2) {
             await getTranslations(this.translationUrl);
@@ -684,9 +704,9 @@ const PlayerStepUpAuth = class {
      * Displays the OTP popup, input fields, timer, and action buttons.
      */
     render() {
-        return (index.h("div", { key: '9afac9d2e248a06828ce17dcb8dc6902fe4ec8cf', ref: el => this.stylingContainer = el }, this.showPopup && (index.h("div", { key: '48bab2747dcba4c64cb97a973a5f9961856126b8', class: "OtpPopupOverlay" }, index.h("div", { key: '89c38b7dbeb7a151f3c172d6913ea2e6884f2c40', class: "OtpPopupContent" }, this.isLoading ? (index.h("div", { class: "OtpLoaderContainer" }, index.h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (index.h("div", { class: "OtpError" }, index.h("div", { class: "OtpErrorHeader" }, index.h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, index.h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), index.h("h2", null, translate('errorHeader', this.language))), index.h("p", null, this.errorMessage), index.h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (index.h(index.Fragment, null, index.h("div", { class: "otp-description" }, this.showResendOtp ? (index.h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (index.h(index.Fragment, null, index.h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (index.h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), index.h("div", { class: "OtpFieldWrapper" }, index.h("h2", null, translate('otpHeading', this.language)), index.h("div", { class: "OtpField", ref: this.setOtpContainerRef }, this.otp.map((char, index$1) => {
+        return (index.h("div", { key: '481fb2d579925de2fb472f3d715712625fb7aba9', ref: el => this.stylingContainer = el }, this.showPopup && (index.h("div", { key: 'd9d55ab487c8bd11ed72d18e7eed49fdb59bab8b', class: "OtpPopupOverlay" }, index.h("div", { key: 'c42458b9f43f03dd88cb9ec8706826739cb2ee4c', class: "OtpPopupContent" }, this.isLoading ? (index.h("div", { class: "OtpLoaderContainer" }, index.h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (index.h("div", { class: "OtpError" }, index.h("div", { class: "OtpErrorHeader" }, index.h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, index.h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), index.h("h2", null, translate('errorHeader', this.language))), index.h("p", null, this.errorMessage), index.h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (index.h(index.Fragment, null, index.h("div", { class: "otp-description" }, this.showResendOtp ? (index.h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (index.h(index.Fragment, null, index.h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (index.h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), index.h("div", { class: "OtpFieldWrapper" }, index.h("h2", null, translate('otpHeading', this.language)), index.h("div", { class: "OtpField" }, this.otp.map((char, index$1) => {
             const isHalfway = this.config.inputLength % 2 === 0 && index$1 === (this.config.inputLength / 2) - 1;
-            return (index.h("input", { key: index$1, ref: el => this.setOtpInputRef(el, index$1), id: `otp-input-${index$1}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index$1), onKeyDown: (event) => this.handleKeyDown(event, index$1), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.timeLeft <= 0 }));
+            return (index.h("input", { key: index$1, ref: el => this.setOtpInputRef(el, index$1), id: `otp-input-${index$1}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index$1), onKeyDown: (event) => this.handleKeyDown(event, index$1), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.inputDisabled, autoComplete: 'off' }));
         })), index.h("div", { class: "otp-timer" }, this.formatTime(this.timeLeft), " ", translate('minutes', this.language))), index.h("div", { class: "OtpActionButtons" }, this.showResendOtp ? (index.h("button", { class: "OtpButton", onClick: this.handleResendOtp }, translate('resendOtp', this.language))) : (index.h("button", { class: "OtpButton", onClick: this.submitOtp, disabled: this.otp.join('').length !== this.config.inputLength }, translate('submit', this.language))), index.h("button", { class: "OtpButton", onClick: this.manualClosePopup }, translate('close', this.language)))))))))));
     }
     get el() { return index.getElement(this); }

package/dist/cjs/player-step-up-auth.cjs.entry.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-const playerStepUpAuth = require('./player-step-up-auth-80ad5fa5.js');
+const playerStepUpAuth = require('./player-step-up-auth-d5d44be3.js');
 require('./index-bf4d774c.js');
 
 

package/dist/cjs/player-step-up-auth.cjs.js

@@ -19,7 +19,7 @@ var patchBrowser = () => {
 
 patchBrowser().then(async (options) => {
   await appGlobals.globalScripts();
-  return index.bootstrapLazy([["player-step-up-auth.cjs",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
+  return index.bootstrapLazy([["player-step-up-auth.cjs",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32],"inputDisabled":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
 });
 
 exports.setNonce = index.setNonce;

package/dist/collection/components/player-step-up-auth/player-step-up-auth.js

@@ -104,16 +104,17 @@ export class PlayerStepUpAuth {
         this.flow = '';
         this.showResendOtp = false;
         this.isLastWarning = false;
+        this.inputDisabled = false;
         this.handleResendOtp = this.handleResendOtp.bind(this);
         this.submitOtp = this.submitOtp.bind(this);
-        this.setOtpContainerRef = this.setOtpContainerRef.bind(this);
         this.handleCloseWidget = this.handleCloseWidget.bind(this);
         this.manualClosePopup = this.manualClosePopup.bind(this);
     }
     /**
-     * Fetches OTP configuration from the endpoint.
-     * Updates the OTP state, expiration time, and starts the countdown timer.
-     */
+       * Fetches OTP configuration from the endpoint.
+       * Updates the OTP state, expiration time, and starts the countdown timer.
+       * Handles specific errors like max attempts exceeded by closing the widget.
+       */
     async getConfig() {
         if (!this.endpoint)
             return;
@@ -121,29 +122,41 @@ export class PlayerStepUpAuth {
             const url = new URL(`/api/v1/mfa/challenge/${this.token}/config`, this.endpoint);
             this.isLoading = true;
             const response = await fetch(url.href);
-            if (!response.ok)
-                throw new Error(`HTTP error! Status: ${response.status}`);
-            this.config = await response.json();
-            this.otp = new Array(this.config.inputLength).fill('');
-            this.isLoading = false;
-            this.showResendOtp = false;
-            this.expirationTime = this.config.expirationTime;
-            this.serverTime = this.config.serverTime;
-            /**
-             * `numberOfValidateAttempts` indicates how many times the user has previously attempted to enter the OTP.
-             * A non-zero value means at least one failed attempt occurred, so an error message should be displayed.
-             */
-            if (this.config.numberOfValidateAttempts !== 0) {
-                this.hasErrors = true;
-                this.errorMessage = translate('invalidOtp', this.language);
+            const result = await response.json(); // Parse JSON regardless of status
+            if (response.ok) {
+                //--- Success Path (2xx status) ---
+                this.config = result;
+                this.otp = Array(this.config.inputLength).fill('');
+                this.isLoading = false;
+                this.showResendOtp = false;
+                this.expirationTime = this.config.expirationTime;
+                this.serverTime = this.config.serverTime;
+                if (this.config.numberOfValidateAttempts !== 0) {
+                    this.hasErrors = true;
+                    this.errorMessage = translate('invalidOtp', this.language);
+                }
+                if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
+                    this.isLastWarning = true;
+                }
+                this.calculateTimeLeft();
+                this.startCountdown();
             }
-            if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
-                this.isLastWarning = true;
+            else {
+                //--- Error Path (non-2xx status) ---
+                // Check for result existence before accessing properties for compatibility.
+                if (result && result.details === 'gm.twofa.token_max_attempts_exceeded') {
+                    // Specific "max attempts" error: close the widget.
+                    this.handleCloseWidget();
+                }
+                else {
+                    // Any other configuration error: throw to be handled by the catch block.
+                    const errorMessage = (result && result.message) || `Failed to load config. Status: ${response.status}`;
+                    throw new Error(errorMessage);
+                }
             }
-            this.calculateTimeLeft();
-            this.startCountdown();
         }
         catch (error) {
+            //--- Catch block for network errors or thrown exceptions ---
             this.isLoading = false;
             this.hasConfigErrors = true;
             this.errorMessage = translate('configError', this.language);
@@ -176,6 +189,7 @@ export class PlayerStepUpAuth {
             const now = Date.now();
             const timeRemaining = Math.max(0, Math.floor((this.expirationTimestamp - now) / 1000));
             this.timeLeft = timeRemaining;
+            this.inputDisabled = timeRemaining <= 0;
             if (timeRemaining <= 0) {
                 clearInterval(this.countdownTimer);
                 this.countdownTimer = null;
@@ -196,15 +210,6 @@ export class PlayerStepUpAuth {
         const remainingSeconds = seconds % 60;
         return `${minutes.toString().padStart(2, '0')}:${remainingSeconds.toString().padStart(2, '0')}`;
     }
-    /**
-     * Sets a reference to the OTP input container.
-     *
-     * @param el - The OTP input container element.
-     */
-    setOtpContainerRef(el) {
-        if (el)
-            this.otpContainer = el;
-    }
     /**
      * Sets a reference to the OTP inputs.
      *
@@ -215,6 +220,18 @@ export class PlayerStepUpAuth {
             this.otpInputs[index] = el;
         }
     }
+    /**
+     * update otp state
+     * by creating new array and assign to state, to make the UI trigger
+     *
+     * @param index - The index of the input field being updated.
+     * @param value - The inputted value.
+     */
+    updateOtpState(index, value) {
+        const updated = [...this.otp];
+        updated[index] = value.toUpperCase();
+        this.otp = updated;
+    }
     /**
      * Handles pasting an OTP directly into the input fields.
      * Extracts characters from the clipboard and populates the OTP fields.
@@ -222,24 +239,15 @@ export class PlayerStepUpAuth {
      * @param e - The clipboard event containing pasted data.
      */
     handleOnPasteOtp(e) {
-        var _a;
+        var _a, _b, _c;
         e.preventDefault();
-        const data = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text').trim();
-        if (!data)
-            return;
-        const value = data.slice(0, this.config.inputLength).split(""); // Limit to OTP length
-        this.otp = [...value, ...new Array(this.config.inputLength - value.length).fill('')];
-        const inputs = Array.from(this.otpContainer.children);
-        if (inputs) {
-            value.forEach((char, index) => {
-                inputs[index].value = char;
-            });
-            // Move focus to the last input or trigger submit
-            const lastInput = inputs[value.length - 1];
-            lastInput === null || lastInput === void 0 ? void 0 : lastInput.focus();
-            if (value.length === this.config.inputLength) {
-                this.submitOtp();
-            }
+        const data = ((_b = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text')) === null || _b === void 0 ? void 0 : _b.trim()) || '';
+        const values = data.slice(0, this.config.inputLength).split('');
+        this.otp = [...values, ...Array(this.config.inputLength - values.length).fill('')];
+        // Move focus to the one after last input or trigger submit
+        (_c = this.otpInputs[values.length]) === null || _c === void 0 ? void 0 : _c.focus();
+        if (values.length === this.config.inputLength) {
+            this.submitOtp();
         }
     }
     /**
@@ -251,14 +259,14 @@ export class PlayerStepUpAuth {
      */
     handleOtpInput(e, index) {
         const input = e.target;
-        let value = input.value.replace(/[^0-9a-zA-Z]/gi, '').toUpperCase();
-        input.value = value.charAt(0);
-        if (!value)
-            return;
-        this.otp[index] = value[0];
-        // Move focus using stored refs
-        const nextInput = this.otpInputs[index + 1];
-        nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        const value = input.value;
+        if (/^[a-z0-9]$/i.test(value)) {
+            this.updateOtpState(index, value);
+            // Move focus using stored refs
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        input.value = '';
     }
     /**
      * Handles key press events for OTP inputs.
@@ -268,9 +276,21 @@ export class PlayerStepUpAuth {
      * @param index - The index of the input field.
      */
     handleKeyDown(e, index) {
-        if (e.key === "Backspace") {
-            this.otp[index] = '';
-            this.otpInputs[index].value = ''; // Clear input field
+        const key = e.key;
+        const isCommandOrControlKey = e.ctrlKey || e.metaKey;
+        if (/^[a-z0-9]$/i.test(key)) {
+            if (isCommandOrControlKey && key.toLowerCase() === 'v')
+                return;
+            e.preventDefault();
+            this.updateOtpState(index, key);
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        else if (key === 'Backspace') {
+            e.preventDefault();
+            if (this.otp[index] !== '') {
+                this.updateOtpState(index, '');
+            }
             const prevInput = this.otpInputs[index - 1];
             prevInput === null || prevInput === void 0 ? void 0 : prevInput.focus();
         }
@@ -337,7 +357,7 @@ export class PlayerStepUpAuth {
             throw new Error(result.message);
         }
         catch (error) {
-            if (error.message === 'gm.multifactorauthentication.challenge') {
+            if (error.message === 'gm.multifactorauthentication.internal_server_error') {
                 if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
                     window.dispatchEvent(new CustomEvent('otpSetTimeout'));
                     //Trigger notification
@@ -392,8 +412,8 @@ export class PlayerStepUpAuth {
         (_a = this.stylingSubscription) === null || _a === void 0 ? void 0 : _a.unsubscribe();
     }
     /**
-    * Lifecycle method: Fetch translations on component load
-    */
+     * Lifecycle method: Fetch translations on component load
+     */
     async componentWillLoad() {
         if (this.translationUrl.length > 2) {
             await getTranslations(this.translationUrl);
@@ -420,9 +440,9 @@ export class PlayerStepUpAuth {
      * Displays the OTP popup, input fields, timer, and action buttons.
      */
     render() {
-        return (h("div", { key: '9afac9d2e248a06828ce17dcb8dc6902fe4ec8cf', ref: el => this.stylingContainer = el }, this.showPopup && (h("div", { key: '48bab2747dcba4c64cb97a973a5f9961856126b8', class: "OtpPopupOverlay" }, h("div", { key: '89c38b7dbeb7a151f3c172d6913ea2e6884f2c40', class: "OtpPopupContent" }, this.isLoading ? (h("div", { class: "OtpLoaderContainer" }, h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (h("div", { class: "OtpError" }, h("div", { class: "OtpErrorHeader" }, h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), h("h2", null, translate('errorHeader', this.language))), h("p", null, this.errorMessage), h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (h(Fragment, null, h("div", { class: "otp-description" }, this.showResendOtp ? (h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (h(Fragment, null, h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), h("div", { class: "OtpFieldWrapper" }, h("h2", null, translate('otpHeading', this.language)), h("div", { class: "OtpField", ref: this.setOtpContainerRef }, this.otp.map((char, index) => {
+        return (h("div", { key: '481fb2d579925de2fb472f3d715712625fb7aba9', ref: el => this.stylingContainer = el }, this.showPopup && (h("div", { key: 'd9d55ab487c8bd11ed72d18e7eed49fdb59bab8b', class: "OtpPopupOverlay" }, h("div", { key: 'c42458b9f43f03dd88cb9ec8706826739cb2ee4c', class: "OtpPopupContent" }, this.isLoading ? (h("div", { class: "OtpLoaderContainer" }, h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (h("div", { class: "OtpError" }, h("div", { class: "OtpErrorHeader" }, h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), h("h2", null, translate('errorHeader', this.language))), h("p", null, this.errorMessage), h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (h(Fragment, null, h("div", { class: "otp-description" }, this.showResendOtp ? (h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (h(Fragment, null, h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), h("div", { class: "OtpFieldWrapper" }, h("h2", null, translate('otpHeading', this.language)), h("div", { class: "OtpField" }, this.otp.map((char, index) => {
             const isHalfway = this.config.inputLength % 2 === 0 && index === (this.config.inputLength / 2) - 1;
-            return (h("input", { key: index, ref: el => this.setOtpInputRef(el, index), id: `otp-input-${index}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index), onKeyDown: (event) => this.handleKeyDown(event, index), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.timeLeft <= 0 }));
+            return (h("input", { key: index, ref: el => this.setOtpInputRef(el, index), id: `otp-input-${index}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index), onKeyDown: (event) => this.handleKeyDown(event, index), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.inputDisabled, autoComplete: 'off' }));
         })), h("div", { class: "otp-timer" }, this.formatTime(this.timeLeft), " ", translate('minutes', this.language))), h("div", { class: "OtpActionButtons" }, this.showResendOtp ? (h("button", { class: "OtpButton", onClick: this.handleResendOtp }, translate('resendOtp', this.language))) : (h("button", { class: "OtpButton", onClick: this.submitOtp, disabled: this.otp.join('').length !== this.config.inputLength }, translate('submit', this.language))), h("button", { class: "OtpButton", onClick: this.manualClosePopup }, translate('close', this.language)))))))))));
     }
     static get is() { return "player-step-up-auth"; }
@@ -577,7 +597,8 @@ export class PlayerStepUpAuth {
             "token": {},
             "flow": {},
             "showResendOtp": {},
-            "isLastWarning": {}
+            "isLastWarning": {},
+            "inputDisabled": {}
         };
     }
     static get elementRef() { return "el"; }

package/dist/esm/index.js

@@ -1,2 +1,2 @@
-export { P as PlayerStepUpAuth } from './player-step-up-auth-045726cf.js';
+export { P as PlayerStepUpAuth } from './player-step-up-auth-e624c40c.js';
 import './index-c6eee6d8.js';

package/dist/esm/loader.js

@@ -5,7 +5,7 @@ import { g as globalScripts } from './app-globals-0f993ce5.js';
 const defineCustomElements = async (win, options) => {
   if (typeof window === 'undefined') return undefined;
   await globalScripts();
-  return bootstrapLazy([["player-step-up-auth",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
+  return bootstrapLazy([["player-step-up-auth",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32],"inputDisabled":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
 };
 
 export { defineCustomElements };

package/dist/esm/{player-step-up-auth-045726cf.js → player-step-up-auth-e624c40c.js}

@@ -366,16 +366,17 @@ const PlayerStepUpAuth = class {
         this.flow = '';
         this.showResendOtp = false;
         this.isLastWarning = false;
+        this.inputDisabled = false;
         this.handleResendOtp = this.handleResendOtp.bind(this);
         this.submitOtp = this.submitOtp.bind(this);
-        this.setOtpContainerRef = this.setOtpContainerRef.bind(this);
         this.handleCloseWidget = this.handleCloseWidget.bind(this);
         this.manualClosePopup = this.manualClosePopup.bind(this);
     }
     /**
-     * Fetches OTP configuration from the endpoint.
-     * Updates the OTP state, expiration time, and starts the countdown timer.
-     */
+       * Fetches OTP configuration from the endpoint.
+       * Updates the OTP state, expiration time, and starts the countdown timer.
+       * Handles specific errors like max attempts exceeded by closing the widget.
+       */
     async getConfig() {
         if (!this.endpoint)
             return;
@@ -383,29 +384,41 @@ const PlayerStepUpAuth = class {
             const url = new URL(`/api/v1/mfa/challenge/${this.token}/config`, this.endpoint);
             this.isLoading = true;
             const response = await fetch(url.href);
-            if (!response.ok)
-                throw new Error(`HTTP error! Status: ${response.status}`);
-            this.config = await response.json();
-            this.otp = new Array(this.config.inputLength).fill('');
-            this.isLoading = false;
-            this.showResendOtp = false;
-            this.expirationTime = this.config.expirationTime;
-            this.serverTime = this.config.serverTime;
-            /**
-             * `numberOfValidateAttempts` indicates how many times the user has previously attempted to enter the OTP.
-             * A non-zero value means at least one failed attempt occurred, so an error message should be displayed.
-             */
-            if (this.config.numberOfValidateAttempts !== 0) {
-                this.hasErrors = true;
-                this.errorMessage = translate('invalidOtp', this.language);
+            const result = await response.json(); // Parse JSON regardless of status
+            if (response.ok) {
+                //--- Success Path (2xx status) ---
+                this.config = result;
+                this.otp = Array(this.config.inputLength).fill('');
+                this.isLoading = false;
+                this.showResendOtp = false;
+                this.expirationTime = this.config.expirationTime;
+                this.serverTime = this.config.serverTime;
+                if (this.config.numberOfValidateAttempts !== 0) {
+                    this.hasErrors = true;
+                    this.errorMessage = translate('invalidOtp', this.language);
+                }
+                if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
+                    this.isLastWarning = true;
+                }
+                this.calculateTimeLeft();
+                this.startCountdown();
             }
-            if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
-                this.isLastWarning = true;
+            else {
+                //--- Error Path (non-2xx status) ---
+                // Check for result existence before accessing properties for compatibility.
+                if (result && result.details === 'gm.twofa.token_max_attempts_exceeded') {
+                    // Specific "max attempts" error: close the widget.
+                    this.handleCloseWidget();
+                }
+                else {
+                    // Any other configuration error: throw to be handled by the catch block.
+                    const errorMessage = (result && result.message) || `Failed to load config. Status: ${response.status}`;
+                    throw new Error(errorMessage);
+                }
             }
-            this.calculateTimeLeft();
-            this.startCountdown();
         }
         catch (error) {
+            //--- Catch block for network errors or thrown exceptions ---
             this.isLoading = false;
             this.hasConfigErrors = true;
             this.errorMessage = translate('configError', this.language);
@@ -438,6 +451,7 @@ const PlayerStepUpAuth = class {
             const now = Date.now();
             const timeRemaining = Math.max(0, Math.floor((this.expirationTimestamp - now) / 1000));
             this.timeLeft = timeRemaining;
+            this.inputDisabled = timeRemaining <= 0;
             if (timeRemaining <= 0) {
                 clearInterval(this.countdownTimer);
                 this.countdownTimer = null;
@@ -458,15 +472,6 @@ const PlayerStepUpAuth = class {
         const remainingSeconds = seconds % 60;
         return `${minutes.toString().padStart(2, '0')}:${remainingSeconds.toString().padStart(2, '0')}`;
     }
-    /**
-     * Sets a reference to the OTP input container.
-     *
-     * @param el - The OTP input container element.
-     */
-    setOtpContainerRef(el) {
-        if (el)
-            this.otpContainer = el;
-    }
     /**
      * Sets a reference to the OTP inputs.
      *
@@ -477,6 +482,18 @@ const PlayerStepUpAuth = class {
             this.otpInputs[index] = el;
         }
     }
+    /**
+     * update otp state
+     * by creating new array and assign to state, to make the UI trigger
+     *
+     * @param index - The index of the input field being updated.
+     * @param value - The inputted value.
+     */
+    updateOtpState(index, value) {
+        const updated = [...this.otp];
+        updated[index] = value.toUpperCase();
+        this.otp = updated;
+    }
     /**
      * Handles pasting an OTP directly into the input fields.
      * Extracts characters from the clipboard and populates the OTP fields.
@@ -484,24 +501,15 @@ const PlayerStepUpAuth = class {
      * @param e - The clipboard event containing pasted data.
      */
     handleOnPasteOtp(e) {
-        var _a;
+        var _a, _b, _c;
         e.preventDefault();
-        const data = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text').trim();
-        if (!data)
-            return;
-        const value = data.slice(0, this.config.inputLength).split(""); // Limit to OTP length
-        this.otp = [...value, ...new Array(this.config.inputLength - value.length).fill('')];
-        const inputs = Array.from(this.otpContainer.children);
-        if (inputs) {
-            value.forEach((char, index) => {
-                inputs[index].value = char;
-            });
-            // Move focus to the last input or trigger submit
-            const lastInput = inputs[value.length - 1];
-            lastInput === null || lastInput === void 0 ? void 0 : lastInput.focus();
-            if (value.length === this.config.inputLength) {
-                this.submitOtp();
-            }
+        const data = ((_b = (_a = e.clipboardData) === null || _a === void 0 ? void 0 : _a.getData('text')) === null || _b === void 0 ? void 0 : _b.trim()) || '';
+        const values = data.slice(0, this.config.inputLength).split('');
+        this.otp = [...values, ...Array(this.config.inputLength - values.length).fill('')];
+        // Move focus to the one after last input or trigger submit
+        (_c = this.otpInputs[values.length]) === null || _c === void 0 ? void 0 : _c.focus();
+        if (values.length === this.config.inputLength) {
+            this.submitOtp();
         }
     }
     /**
@@ -513,14 +521,14 @@ const PlayerStepUpAuth = class {
      */
     handleOtpInput(e, index) {
         const input = e.target;
-        let value = input.value.replace(/[^0-9a-zA-Z]/gi, '').toUpperCase();
-        input.value = value.charAt(0);
-        if (!value)
-            return;
-        this.otp[index] = value[0];
-        // Move focus using stored refs
-        const nextInput = this.otpInputs[index + 1];
-        nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        const value = input.value;
+        if (/^[a-z0-9]$/i.test(value)) {
+            this.updateOtpState(index, value);
+            // Move focus using stored refs
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        input.value = '';
     }
     /**
      * Handles key press events for OTP inputs.
@@ -530,9 +538,21 @@ const PlayerStepUpAuth = class {
      * @param index - The index of the input field.
      */
     handleKeyDown(e, index) {
-        if (e.key === "Backspace") {
-            this.otp[index] = '';
-            this.otpInputs[index].value = ''; // Clear input field
+        const key = e.key;
+        const isCommandOrControlKey = e.ctrlKey || e.metaKey;
+        if (/^[a-z0-9]$/i.test(key)) {
+            if (isCommandOrControlKey && key.toLowerCase() === 'v')
+                return;
+            e.preventDefault();
+            this.updateOtpState(index, key);
+            const nextInput = this.otpInputs[index + 1];
+            nextInput === null || nextInput === void 0 ? void 0 : nextInput.focus();
+        }
+        else if (key === 'Backspace') {
+            e.preventDefault();
+            if (this.otp[index] !== '') {
+                this.updateOtpState(index, '');
+            }
             const prevInput = this.otpInputs[index - 1];
             prevInput === null || prevInput === void 0 ? void 0 : prevInput.focus();
         }
@@ -599,7 +619,7 @@ const PlayerStepUpAuth = class {
             throw new Error(result.message);
         }
         catch (error) {
-            if (error.message === 'gm.multifactorauthentication.challenge') {
+            if (error.message === 'gm.multifactorauthentication.internal_server_error') {
                 if (this.config.numberOfValidateAttempts === (this.config.maxValidationAttempts - 1)) {
                     window.dispatchEvent(new CustomEvent('otpSetTimeout'));
                     //Trigger notification
@@ -654,8 +674,8 @@ const PlayerStepUpAuth = class {
         (_a = this.stylingSubscription) === null || _a === void 0 ? void 0 : _a.unsubscribe();
     }
     /**
-    * Lifecycle method: Fetch translations on component load
-    */
+     * Lifecycle method: Fetch translations on component load
+     */
     async componentWillLoad() {
         if (this.translationUrl.length > 2) {
             await getTranslations(this.translationUrl);
@@ -682,9 +702,9 @@ const PlayerStepUpAuth = class {
      * Displays the OTP popup, input fields, timer, and action buttons.
      */
     render() {
-        return (h("div", { key: '9afac9d2e248a06828ce17dcb8dc6902fe4ec8cf', ref: el => this.stylingContainer = el }, this.showPopup && (h("div", { key: '48bab2747dcba4c64cb97a973a5f9961856126b8', class: "OtpPopupOverlay" }, h("div", { key: '89c38b7dbeb7a151f3c172d6913ea2e6884f2c40', class: "OtpPopupContent" }, this.isLoading ? (h("div", { class: "OtpLoaderContainer" }, h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (h("div", { class: "OtpError" }, h("div", { class: "OtpErrorHeader" }, h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), h("h2", null, translate('errorHeader', this.language))), h("p", null, this.errorMessage), h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (h(Fragment, null, h("div", { class: "otp-description" }, this.showResendOtp ? (h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (h(Fragment, null, h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), h("div", { class: "OtpFieldWrapper" }, h("h2", null, translate('otpHeading', this.language)), h("div", { class: "OtpField", ref: this.setOtpContainerRef }, this.otp.map((char, index) => {
+        return (h("div", { key: '481fb2d579925de2fb472f3d715712625fb7aba9', ref: el => this.stylingContainer = el }, this.showPopup && (h("div", { key: 'd9d55ab487c8bd11ed72d18e7eed49fdb59bab8b', class: "OtpPopupOverlay" }, h("div", { key: 'c42458b9f43f03dd88cb9ec8706826739cb2ee4c', class: "OtpPopupContent" }, this.isLoading ? (h("div", { class: "OtpLoaderContainer" }, h("span", { class: "OtpLoader" }))) : (this.hasConfigErrors ? (h("div", { class: "OtpError" }, h("div", { class: "OtpErrorHeader" }, h("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 512 512" }, h("path", { d: "M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z" })), h("h2", null, translate('errorHeader', this.language))), h("p", null, this.errorMessage), h("button", { class: "OtpButton error", onClick: this.manualClosePopup }, translate('close', this.language)))) : (h(Fragment, null, h("div", { class: "otp-description" }, this.showResendOtp ? (h("p", { class: "OtpNoticeMessage", role: "alert" }, translate('otpExpiredMessage', this.language))) : (h(Fragment, null, h("p", { class: this.isLastWarning ? 'LastWarningMessage' : '' }, translate(this.isLastWarning ? 'popupMessageLastWarning' : 'popupMessage', this.language)), this.hasErrors && (h("p", { class: "OtpErrorMessage", role: "alert" }, this.errorMessage))))), h("div", { class: "OtpFieldWrapper" }, h("h2", null, translate('otpHeading', this.language)), h("div", { class: "OtpField" }, this.otp.map((char, index) => {
             const isHalfway = this.config.inputLength % 2 === 0 && index === (this.config.inputLength / 2) - 1;
-            return (h("input", { key: index, ref: el => this.setOtpInputRef(el, index), id: `otp-input-${index}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index), onKeyDown: (event) => this.handleKeyDown(event, index), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.timeLeft <= 0 }));
+            return (h("input", { key: index, ref: el => this.setOtpInputRef(el, index), id: `otp-input-${index}`, type: "text", class: `otp-box ${isHalfway ? 'space' : ''}`, maxLength: 1, value: char, onInput: (event) => this.handleOtpInput(event, index), onKeyDown: (event) => this.handleKeyDown(event, index), onPaste: (event) => this.handleOnPasteOtp(event), disabled: this.inputDisabled, autoComplete: 'off' }));
         })), h("div", { class: "otp-timer" }, this.formatTime(this.timeLeft), " ", translate('minutes', this.language))), h("div", { class: "OtpActionButtons" }, this.showResendOtp ? (h("button", { class: "OtpButton", onClick: this.handleResendOtp }, translate('resendOtp', this.language))) : (h("button", { class: "OtpButton", onClick: this.submitOtp, disabled: this.otp.join('').length !== this.config.inputLength }, translate('submit', this.language))), h("button", { class: "OtpButton", onClick: this.manualClosePopup }, translate('close', this.language)))))))))));
     }
     get el() { return getElement(this); }

package/dist/esm/player-step-up-auth.entry.js

@@ -1,2 +1,2 @@
-export { P as player_step_up_auth } from './player-step-up-auth-045726cf.js';
+export { P as player_step_up_auth } from './player-step-up-auth-e624c40c.js';
 import './index-c6eee6d8.js';

package/dist/esm/player-step-up-auth.js

@@ -16,5 +16,5 @@ var patchBrowser = () => {
 
 patchBrowser().then(async (options) => {
   await globalScripts();
-  return bootstrapLazy([["player-step-up-auth",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
+  return bootstrapLazy([["player-step-up-auth",[[1,"player-step-up-auth",{"mbSource":[513,"mb-source"],"clientStyling":[513,"client-styling"],"clientStylingUrl":[513,"client-styling-url"],"language":[513],"endpoint":[513],"userSession":[513,"user-session"],"translationUrl":[513,"translation-url"],"showPopup":[32],"otp":[32],"isLoading":[32],"config":[32],"timeLeft":[32],"expirationTime":[32],"serverTime":[32],"hasErrors":[32],"hasConfigErrors":[32],"errorMessage":[32],"token":[32],"flow":[32],"showResendOtp":[32],"isLastWarning":[32],"inputDisabled":[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{"translationUrl":["handleNewTranslations"],"clientStyling":["handleClientStylingChange"],"clientStylingUrl":["handleClientStylingUrlChange"]}]]]], options);
 });

package/dist/player-step-up-auth/index.esm.js

@@ -1 +1 @@
-export{P as PlayerStepUpAuth}from"./player-step-up-auth-045726cf.js";import"./index-c6eee6d8.js";
+export{P as PlayerStepUpAuth}from"./player-step-up-auth-e624c40c.js";import"./index-c6eee6d8.js";

package/dist/player-step-up-auth/{player-step-up-auth-045726cf.js → player-step-up-auth-e624c40c.js}

@@ -1 +1 @@
-import{r as e,h as t,F as i,g as r}from"./index-c6eee6d8.js";function o(e,t){if(e){const i=document.createElement("style");i.innerHTML=t,e.appendChild(i)}}function a(e,t){const i=new URL(t);fetch(i.href).then((e=>e.text())).then((t=>{const i=document.createElement("style");i.innerHTML=t,e&&e.appendChild(i)})).catch((e=>{console.error("There was an error while trying to load client styling from URL",e)}))}const s={en:{popupMessage:"Please enter the security code received on your email address to perform the update.",popupMessageLastWarning:"If the next validation attempt is failed, you will be logged out and blocked temporarily.",minutes:"minutes",errorHeader:"Error",configError:"Unable to load OTP data. Please try again later.",otpHeading:"Enter OTP",resendOtp:"Resent OTP",submit:"Submit",close:"Close",invalidOtp:"The code you've sent is not valid. Please try again.",accountBlocked:"Too many attempts for OTP. Your account has been blocked for one hour.",submissionError:"Something went wrong. Please try again.",otpExpiredMessage:"Validation code has expired, please request a new one to continue."},ro:{popupMessage:"Introduceți codul de securitate primit pe adresa dvs. de e-mail pentru a efectua actualizarea.",popupMessageLastWarning:"Dacă următoarea încercare de validare eșuează, veți fi delogat și blocat temporar.",minutes:"minute",errorHeader:"Eroare",configError:"Nu s-a putut încărca datele OTP. Vă rugăm să încercați din nou mai târziu.",otpHeading:"Introduceți OTP",resendOtp:"Retrimitere OTP",submit:"Trimite",close:"Închide",invalidOtp:"Codul introdus nu este valid. Vă rugăm să încercați din nou.",accountBlocked:"Prea multe încercări de OTP. Contul dvs. a fost blocat timp de o oră.",submissionError:"Ceva a mers prost. Vă rugăm să încercați din nou.",otpExpiredMessage:"Codul de validare a expirat, vă rugăm să solicitați unul nou pentru a continua."},fr:{popupMessage:"Veuillez entrer le code de sécurité reçu sur votre adresse e-mail pour effectuer la mise à jour.",popupMessageLastWarning:"Si la prochaine tentative de validation échoue, vous serez déconnecté et temporairement bloqué.",minutes:"minutes",errorHeader:"Erreur",configError:"Impossible de charger les données OTP. Veuillez réessayer plus tard.",otpHeading:"Entrez OTP",resendOtp:"Renvoyer OTP",submit:"Soumettre",close:"Fermer",invalidOtp:"Le code que vous avez saisi n’est pas valide. Veuillez réessayer.",accountBlocked:"Trop de tentatives OTP. Votre compte a été bloqué pendant une heure.",submissionError:"Quelque chose s'est mal passé. Veuillez réessayer.",otpExpiredMessage:"Le code de validation a expiré, veuillez en demander un nouveau pour continuer."},hu:{popupMessage:"Kérjük, adja meg az e-mail címére küldött biztonsági kódot a frissítés végrehajtásához.",popupMessageLastWarning:"Ha a következő érvényesítési kísérlet sikertelen, ki lesz jelentkeztetve és ideiglenesen letiltva.",minutes:"perc",errorHeader:"Hiba",configError:"Nem sikerült betölteni az OTP adatokat. Kérjük, próbálja újra később.",otpHeading:"OTP megadása",resendOtp:"Újraküldés",submit:"Beküldés",close:"Bezárás",invalidOtp:"A megadott kód érvénytelen. Kérjük, próbálja újra.",accountBlocked:"Túl sok OTP próbálkozás. A fiókja egy órára zárolva lett.",submissionError:"Valami hiba történt. Kérjük, próbálja újra.",otpExpiredMessage:"A megerősítő kód lejárt, kérjük, kérjen egy újat a folytatáshoz."},tr:{popupMessage:"Güncellemeyi gerçekleştirmek için e-posta adresinize gelen güvenlik kodunu girin.",popupMessageLastWarning:"Bir sonraki doğrulama girişimi başarısız olursa, oturumunuz kapatılacak ve geçici olarak engelleneceksiniz.",minutes:"dakika",errorHeader:"Hata",configError:"OTP verisi yüklenemedi. Lütfen daha sonra tekrar deneyin.",otpHeading:"OTP Girin",resendOtp:"OTP'yi Yeniden Gönder",submit:"Gönder",close:"Kapat",invalidOtp:"Gönderdiğiniz kod geçersiz. Lütfen tekrar deneyin.",accountBlocked:"Çok fazla OTP denemesi yapıldı. Hesabınız bir saat boyunca kilitlendi.",submissionError:"Bir şeyler yanlış gitti. Lütfen tekrar deneyin.",otpExpiredMessage:"Doğrulama kodunun süresi doldu, devam etmek için lütfen yeni bir tane isteyin."},el:{popupMessage:"Παρακαλώ εισάγετε τον κωδικό ασφαλείας που λάβατε στο email σας για να ολοκληρώσετε την ενημέρωση.",popupMessageLastWarning:"Αν η επόμενη προσπάθεια επικύρωσης αποτύχει, θα αποσυνδεθείτε και θα αποκλειστείτε προσωρινά.",minutes:"λεπτά",errorHeader:"Σφάλμα",configError:"Δεν ήταν δυνατή η φόρτωση των δεδομένων OTP. Παρακαλούμε προσπαθήστε ξανά αργότερα.",otpHeading:"Εισαγωγή OTP",resendOtp:"Αποστολή ξανά OTP",submit:"Υποβολή",close:"Κλείσιμο",invalidOtp:"Ο κωδικός που εισαγάγατε δεν είναι έγκυρος. Παρακαλώ προσπαθήστε ξανά.",accountBlocked:"Πάρα πολλές προσπάθειες OTP. Ο λογαριασμός σας έχει αποκλειστεί για μία ώρα.",submissionError:"Κάτι πήγε στραβά. Παρακαλώ προσπαθήστε ξανά.",otpExpiredMessage:"Ο κωδικός επαλήθευσης έχει λήξει, παρακαλώ ζητήστε έναν νέο για να συνεχίσετε."},es:{popupMessage:"Por favor, introduzca el código de seguridad recibido en su correo electrónico para realizar la actualización.",popupMessageLastWarning:"Si el siguiente intento de validación falla, se cerrará tu sesión y serás bloqueado temporalmente.",minutes:"minutos",errorHeader:"Error",configError:"No se pudo cargar los datos del OTP. Por favor, inténtelo de nuevo más tarde.",otpHeading:"Introducir OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Cerrar",invalidOtp:"El código que ingresaste no es válido. Por favor, inténtalo de nuevo.",accountBlocked:"Demasiados intentos de OTP. Su cuenta ha sido bloqueada por una hora.",submissionError:"Algo salió mal. Por favor, inténtelo de nuevo.",otpExpiredMessage:"El código de validación ha expirado, por favor solicite uno nuevo para continuar."},pt:{popupMessage:"Por favor, insira o código de segurança recebido no seu e-mail para realizar a atualização.",popupMessageLastWarning:"Se a próxima tentativa de validação falhar, será desconectado e temporariamente bloqueado.",minutes:"minutos",errorHeader:"Erro",configError:"Não foi possível carregar os dados do OTP. Tente novamente mais tarde.",otpHeading:"Insira o OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Fechar",invalidOtp:"O código inserido não é válido. Por favor, tente novamente.",accountBlocked:"Muitas tentativas de OTP. Sua conta foi bloqueada por uma hora.",submissionError:"Algo deu errado. Por favor, tente novamente.",otpExpiredMessage:"O código de validação expirou, por favor solicite um novo para continuar."},hr:{popupMessage:"Unesite sigurnosni kod primljen na vašu e-mail adresu kako biste izvršili ažuriranje.",popupMessageLastWarning:"Ako sljedeći pokušaj provjere ne uspije, bit ćete odjavljeni i privremeno blokirani.",minutes:"minute",errorHeader:"Greška",configError:"Nije moguće učitati OTP podatke. Pokušajte ponovno kasnije.",otpHeading:"Unesite OTP",resendOtp:"Ponovno pošalji OTP",submit:"Pošalji",close:"Zatvori",invalidOtp:"Uneseni kod nije valjan. Molimo pokušajte ponovo.",accountBlocked:"Previše pokušaja unosa OTP-a. Vaš račun je blokiran na jedan sat.",submissionError:"Nešto je pošlo po zlu. Molimo pokušajte ponovo.",otpExpiredMessage:"Kod za potvrdu je istekao, molimo zatražite novi kako biste nastavili."},de:{popupMessage:"Bitte geben Sie den Sicherheitscode ein, den Sie an Ihre E-Mail-Adresse erhalten haben, um das Update durchzuführen.",popupMessageLastWarning:"Wenn der nächste Validierungsversuch fehlschlägt, werden Sie abgemeldet und vorübergehend gesperrt.",minutes:"Minuten",errorHeader:"Fehler",configError:"OTP-Daten konnten nicht geladen werden. Bitte versuchen Sie es später erneut.",otpHeading:"OTP eingeben",resendOtp:"OTP erneut senden",submit:"Absenden",close:"Schließen",invalidOtp:"Der eingegebene Code ist ungültig. Bitte versuchen Sie es erneut.",accountBlocked:"Zu viele OTP-Versuche. Ihr Konto wurde für eine Stunde gesperrt.",submissionError:"Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut.",otpExpiredMessage:"Der Bestätigungscode ist abgelaufen, bitte fordern Sie einen neuen an, um fortzufahren."},"es-mx":{popupMessage:"Por favor, ingrese el código de seguridad recibido en su correo electrónico para realizar la actualización.",popupMessageLastWarning:"Si el siguiente intento de validación falla, se cerrará tu sesión y serás bloqueado temporalmente.",minutes:"minutos",errorHeader:"Error",configError:"No se pudieron cargar los datos del OTP. Inténtelo de nuevo más tarde.",otpHeading:"Ingrese OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Cerrar",invalidOtp:"El código que ingresó no es válido. Inténtelo de nuevo.",accountBlocked:"Demasiados intentos de OTP. Su cuenta ha sido bloqueada por una hora.",submissionError:"Algo salió mal. Por favor, inténtelo de nuevo.",otpExpiredMessage:"El código de validación ha expirado, por favor solicite uno nuevo para continuar."},"pt-br":{popupMessage:"Por favor, digite o código de segurança recebido no seu e-mail para realizar a atualização.",popupMessageLastWarning:"Se a próxima tentativa de validação falhar, você será desconectado e bloqueado temporariamente.",minutes:"minutos",errorHeader:"Erro",configError:"Não foi possível carregar os dados do OTP. Tente novamente mais tarde.",otpHeading:"Digite o OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Fechar",invalidOtp:"O código informado não é válido. Tente novamente.",accountBlocked:"Muitas tentativas de OTP. Sua conta foi bloqueada por uma hora.",submissionError:"Algo deu errado. Por favor, tente novamente.",otpExpiredMessage:"O código de validação expirou, por favor solicite um novo para continuar."}},n=e=>new Promise((t=>{fetch(e).then((e=>e.json())).then((e=>{Object.keys(e).forEach((t=>{for(let i in e[t])s[t][i]=e[t][i]})),t(!0)}))})),l=(e,t)=>s[void 0!==t?t:"en"][e],d=class{handleNewTranslations(){n(this.translationUrl)}handleClientStylingChange(e,t){e!==t&&o(this.el,this.clientStyling)}handleClientStylingUrlChange(e,t){e!=t&&this.clientStylingUrl&&a(this.stylingContainer,this.clientStylingUrl)}async handleStepUpAuthEvent(e){var t;if(null===(t=e.detail)||void 0===t?void 0:t["x-step-up-required"]){if(this.hasConfigErrors=!1,this.hasErrors=!1,this.errorMessage="",this.showPopup=!0,this.token=e.detail["x-step-up-token"],this.flow=e.detail.flow,!this.token||!this.flow)return this.isLoading=!1,this.hasConfigErrors=!0,void(this.errorMessage=l("configError",this.language));await this.getConfig()}}handleCloseWidget(){this.countdownTimer&&(clearInterval(this.countdownTimer),this.countdownTimer=null),this.hasErrors=!1,this.hasConfigErrors=!1,this.errorMessage="",this.showPopup=!1,this.isLastWarning=!1}constructor(t){e(this,t),this.otpInputs=[],this.countdownTimer=null,this.expirationTimestamp=0,this.mbSource=void 0,this.clientStyling=void 0,this.clientStylingUrl=void 0,this.language="en",this.endpoint=void 0,this.userSession=void 0,this.translationUrl="",this.showPopup=!1,this.otp=void 0,this.isLoading=!0,this.config=null,this.timeLeft=0,this.expirationTime="",this.serverTime="",this.hasErrors=!1,this.hasConfigErrors=!1,this.errorMessage="",this.token="",this.flow="",this.showResendOtp=!1,this.isLastWarning=!1,this.handleResendOtp=this.handleResendOtp.bind(this),this.submitOtp=this.submitOtp.bind(this),this.setOtpContainerRef=this.setOtpContainerRef.bind(this),this.handleCloseWidget=this.handleCloseWidget.bind(this),this.manualClosePopup=this.manualClosePopup.bind(this)}async getConfig(){if(this.endpoint)try{const e=new URL(`/api/v1/mfa/challenge/${this.token}/config`,this.endpoint);this.isLoading=!0;const t=await fetch(e.href);if(!t.ok)throw new Error(`HTTP error! Status: ${t.status}`);this.config=await t.json(),this.otp=new Array(this.config.inputLength).fill(""),this.isLoading=!1,this.showResendOtp=!1,this.expirationTime=this.config.expirationTime,this.serverTime=this.config.serverTime,0!==this.config.numberOfValidateAttempts&&(this.hasErrors=!0,this.errorMessage=l("invalidOtp",this.language)),this.config.numberOfValidateAttempts===this.config.maxValidationAttempts-1&&(this.isLastWarning=!0),this.calculateTimeLeft(),this.startCountdown()}catch(e){this.isLoading=!1,this.hasConfigErrors=!0,this.errorMessage=l("configError",this.language),console.error("Error loading 2FA config:",e)}}calculateTimeLeft(){const e=new Date(this.expirationTime),t=new Date(this.serverTime),i=new Date,r=t.getTime()-i.getTime();this.expirationTimestamp=e.getTime()-r;const o=Date.now(),a=Math.max(0,Math.floor((this.expirationTimestamp-o)/1e3));this.timeLeft=a}startCountdown(){this.countdownTimer&&clearInterval(this.countdownTimer),this.countdownTimer=setInterval((()=>{const e=Date.now(),t=Math.max(0,Math.floor((this.expirationTimestamp-e)/1e3));this.timeLeft=t,t<=0&&(clearInterval(this.countdownTimer),this.countdownTimer=null,this.showResendOtp=!0,this.hasErrors=!1,this.isLastWarning=!1)}),1e3)}formatTime(e){const t=e%60;return`${Math.floor(e/60).toString().padStart(2,"0")}:${t.toString().padStart(2,"0")}`}setOtpContainerRef(e){e&&(this.otpContainer=e)}setOtpInputRef(e,t){e&&(this.otpInputs[t]=e)}handleOnPasteOtp(e){var t;e.preventDefault();const i=null===(t=e.clipboardData)||void 0===t?void 0:t.getData("text").trim();if(!i)return;const r=i.slice(0,this.config.inputLength).split("");this.otp=[...r,...new Array(this.config.inputLength-r.length).fill("")];const o=Array.from(this.otpContainer.children);if(o){r.forEach(((e,t)=>{o[t].value=e}));const e=o[r.length-1];null==e||e.focus(),r.length===this.config.inputLength&&this.submitOtp()}}handleOtpInput(e,t){const i=e.target;let r=i.value.replace(/[^0-9a-zA-Z]/gi,"").toUpperCase();if(i.value=r.charAt(0),!r)return;this.otp[t]=r[0];const o=this.otpInputs[t+1];null==o||o.focus()}handleKeyDown(e,t){if("Backspace"===e.key){this.otp[t]="",this.otpInputs[t].value="";const e=this.otpInputs[t-1];null==e||e.focus()}}handleResendOtp(){const e=new CustomEvent("otpResendRequested");window.dispatchEvent(e)}async submitOtp(){if(this.otp.join("").length!==this.config.inputLength)return this.hasErrors=!0,void(this.errorMessage=l("invalidOtp",this.language));this.isLoading=!0,this.hasErrors=!1,this.errorMessage="";const e=this.otp.join("");"stateless"===this.flow&&this.handleOtpStateless(e),"stateful"===this.flow&&await this.handleOtpStateful(e)}handleOtpStateless(e){window.dispatchEvent(new CustomEvent("otpSubmitted",{detail:{code:e,maxAttempts:this.config.maxValidationAttempts,validatedAttempts:this.config.numberOfValidateAttempts}}))}async handleOtpStateful(e){const t=new URL(`/api/v1/mfa/challenge/${this.token}/validate`,this.endpoint);t.searchParams.append("input",e);try{const e=await fetch(t.href,{method:"POST"});if(200===e.status)return void this.handleSuccess();const i=await e.json();throw new Error(i.message)}catch(e){if("gm.multifactorauthentication.challenge"===e.message)return this.config.numberOfValidateAttempts===this.config.maxValidationAttempts-1?(window.dispatchEvent(new CustomEvent("otpSetTimeout")),window.postMessage({type:"WidgetNotification",data:{type:"error",message:l("accountBlocked",this.language)}},window.location.href),void this.handleCloseWidget()):(this.hasErrors=!0,this.errorMessage=l("invalidOtp",this.language),void this.getConfig());console.error("OTP submission failed:",e),this.hasErrors=!0,this.errorMessage=l("submissionError",this.language)}finally{this.isLoading=!1}}handleSuccess(){window.dispatchEvent(new CustomEvent("otpSuccess",{detail:{message:"User successfully authenticated"}})),this.handleCloseWidget()}manualClosePopup(){window.dispatchEvent(new CustomEvent("manualClosePopup")),this.handleCloseWidget()}disconnectedCallback(){var e;this.countdownTimer&&clearInterval(this.countdownTimer),null===(e=this.stylingSubscription)||void 0===e||e.unsubscribe()}async componentWillLoad(){this.translationUrl.length>2&&await n(this.translationUrl)}componentDidLoad(){this.stylingContainer&&(null!=window.emMessageBuss?function(e,t){if(window.emMessageBus){const i=document.createElement("style");window.emMessageBus.subscribe(t,(t=>{i.innerHTML=t,e&&e.appendChild(i)}))}}(this.stylingContainer,`${this.mbSource}.Style`):(this.clientStyling&&o(this.stylingContainer,this.clientStyling),this.clientStylingUrl&&a(this.stylingContainer,this.clientStylingUrl)))}render(){return t("div",{key:"9afac9d2e248a06828ce17dcb8dc6902fe4ec8cf",ref:e=>this.stylingContainer=e},this.showPopup&&t("div",{key:"48bab2747dcba4c64cb97a973a5f9961856126b8",class:"OtpPopupOverlay"},t("div",{key:"89c38b7dbeb7a151f3c172d6913ea2e6884f2c40",class:"OtpPopupContent"},this.isLoading?t("div",{class:"OtpLoaderContainer"},t("span",{class:"OtpLoader"})):this.hasConfigErrors?t("div",{class:"OtpError"},t("div",{class:"OtpErrorHeader"},t("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 512 512"},t("path",{d:"M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z"})),t("h2",null,l("errorHeader",this.language))),t("p",null,this.errorMessage),t("button",{class:"OtpButton error",onClick:this.manualClosePopup},l("close",this.language))):t(i,null,t("div",{class:"otp-description"},this.showResendOtp?t("p",{class:"OtpNoticeMessage",role:"alert"},l("otpExpiredMessage",this.language)):t(i,null,t("p",{class:this.isLastWarning?"LastWarningMessage":""},l(this.isLastWarning?"popupMessageLastWarning":"popupMessage",this.language)),this.hasErrors&&t("p",{class:"OtpErrorMessage",role:"alert"},this.errorMessage))),t("div",{class:"OtpFieldWrapper"},t("h2",null,l("otpHeading",this.language)),t("div",{class:"OtpField",ref:this.setOtpContainerRef},this.otp.map(((e,i)=>t("input",{key:i,ref:e=>this.setOtpInputRef(e,i),id:`otp-input-${i}`,type:"text",class:"otp-box "+(this.config.inputLength%2==0&&i===this.config.inputLength/2-1?"space":""),maxLength:1,value:e,onInput:e=>this.handleOtpInput(e,i),onKeyDown:e=>this.handleKeyDown(e,i),onPaste:e=>this.handleOnPasteOtp(e),disabled:this.timeLeft<=0})))),t("div",{class:"otp-timer"},this.formatTime(this.timeLeft)," ",l("minutes",this.language))),t("div",{class:"OtpActionButtons"},this.showResendOtp?t("button",{class:"OtpButton",onClick:this.handleResendOtp},l("resendOtp",this.language)):t("button",{class:"OtpButton",onClick:this.submitOtp,disabled:this.otp.join("").length!==this.config.inputLength},l("submit",this.language)),t("button",{class:"OtpButton",onClick:this.manualClosePopup},l("close",this.language)))))))}get el(){return r(this)}static get watchers(){return{translationUrl:["handleNewTranslations"],clientStyling:["handleClientStylingChange"],clientStylingUrl:["handleClientStylingUrlChange"]}}};d.style=".OtpPopupOverlay{position:fixed;top:0;left:0;width:100%;height:100%;background:var(--emw--color-overlay, rgba(0, 0, 0, 0.5));display:flex;align-items:center;justify-content:center}.OtpButton{font-family:var(--emw--button-typography);border:var(--emw--button-border, none);border-radius:var(--emw--button-border-radius, 3px);border-color:var(--emw--button-border-color);background-color:var(--emw--button-background-color, var(--emw--color-primary, #007bff));color:var(--emw--button-typography, var(--emw--color-white, #fff));padding:10px 20px;cursor:pointer;font-size:16px}.OtpButton.error{background:var(--emw--color-error, #dd3434)}.OtpPopupContent{position:relative;background:var(--emw--color-white, #fff);padding:20px;border-radius:5px;text-align:center;min-width:25%;min-height:200px;display:flex;flex-direction:column;justify-content:center;gap:20px}.OtpPopupContent .OtpError{display:flex;flex-direction:column;gap:20px;align-items:center}.OtpPopupContent .OtpError .OtpErrorHeader{display:flex;justify-content:center;gap:5px}.OtpPopupContent .OtpError h2{margin:0}.OtpPopupContent .OtpError svg{width:25px;fill:var(--emw--color-error, #dd3434)}.OtpFieldWrapper{display:flex;flex-direction:column;gap:10px}.OtpFieldWrapper h2{margin:0}.OtpField{display:flex;justify-content:center}.OtpField input{width:24px;font-size:32px;padding:10px;text-align:center;border-radius:5px;margin:2px;border:2px solid var(--emw--otp-border-color, #55525c);font-weight:bold;outline:none;transition:all 0.1s}.OtpField input.space{margin-right:1rem !important}.OtpField input:focus{border:2px solid var(--emw--color-primary, #007bff);box-shadow:0 0 2px 2px var(--emw--color-primary, #007bff)}.OtpActionButtons{display:flex;justify-content:space-between}.OtpErrorMessage{color:var(--emw--color-error, #dd3434);font-weight:bold}.OtpLoaderContainer{width:100%;height:100%;display:flex;justify-content:center;align-items:center}.OtpLoader{width:48px;height:48px;border:5px solid var(--emw--color-secondary, #b3d8ff);border-bottom-color:var(--emw--color-primary, #007bff);border-radius:50%;display:inline-block;box-sizing:border-box;animation:rotation 1s linear infinite}@keyframes rotation{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}";export{d as P}
+import{r as e,h as t,F as i,g as o}from"./index-c6eee6d8.js";function r(e,t){if(e){const i=document.createElement("style");i.innerHTML=t,e.appendChild(i)}}function a(e,t){const i=new URL(t);fetch(i.href).then((e=>e.text())).then((t=>{const i=document.createElement("style");i.innerHTML=t,e&&e.appendChild(i)})).catch((e=>{console.error("There was an error while trying to load client styling from URL",e)}))}const s={en:{popupMessage:"Please enter the security code received on your email address to perform the update.",popupMessageLastWarning:"If the next validation attempt is failed, you will be logged out and blocked temporarily.",minutes:"minutes",errorHeader:"Error",configError:"Unable to load OTP data. Please try again later.",otpHeading:"Enter OTP",resendOtp:"Resent OTP",submit:"Submit",close:"Close",invalidOtp:"The code you've sent is not valid. Please try again.",accountBlocked:"Too many attempts for OTP. Your account has been blocked for one hour.",submissionError:"Something went wrong. Please try again.",otpExpiredMessage:"Validation code has expired, please request a new one to continue."},ro:{popupMessage:"Introduceți codul de securitate primit pe adresa dvs. de e-mail pentru a efectua actualizarea.",popupMessageLastWarning:"Dacă următoarea încercare de validare eșuează, veți fi delogat și blocat temporar.",minutes:"minute",errorHeader:"Eroare",configError:"Nu s-a putut încărca datele OTP. Vă rugăm să încercați din nou mai târziu.",otpHeading:"Introduceți OTP",resendOtp:"Retrimitere OTP",submit:"Trimite",close:"Închide",invalidOtp:"Codul introdus nu este valid. Vă rugăm să încercați din nou.",accountBlocked:"Prea multe încercări de OTP. Contul dvs. a fost blocat timp de o oră.",submissionError:"Ceva a mers prost. Vă rugăm să încercați din nou.",otpExpiredMessage:"Codul de validare a expirat, vă rugăm să solicitați unul nou pentru a continua."},fr:{popupMessage:"Veuillez entrer le code de sécurité reçu sur votre adresse e-mail pour effectuer la mise à jour.",popupMessageLastWarning:"Si la prochaine tentative de validation échoue, vous serez déconnecté et temporairement bloqué.",minutes:"minutes",errorHeader:"Erreur",configError:"Impossible de charger les données OTP. Veuillez réessayer plus tard.",otpHeading:"Entrez OTP",resendOtp:"Renvoyer OTP",submit:"Soumettre",close:"Fermer",invalidOtp:"Le code que vous avez saisi n’est pas valide. Veuillez réessayer.",accountBlocked:"Trop de tentatives OTP. Votre compte a été bloqué pendant une heure.",submissionError:"Quelque chose s'est mal passé. Veuillez réessayer.",otpExpiredMessage:"Le code de validation a expiré, veuillez en demander un nouveau pour continuer."},hu:{popupMessage:"Kérjük, adja meg az e-mail címére küldött biztonsági kódot a frissítés végrehajtásához.",popupMessageLastWarning:"Ha a következő érvényesítési kísérlet sikertelen, ki lesz jelentkeztetve és ideiglenesen letiltva.",minutes:"perc",errorHeader:"Hiba",configError:"Nem sikerült betölteni az OTP adatokat. Kérjük, próbálja újra később.",otpHeading:"OTP megadása",resendOtp:"Újraküldés",submit:"Beküldés",close:"Bezárás",invalidOtp:"A megadott kód érvénytelen. Kérjük, próbálja újra.",accountBlocked:"Túl sok OTP próbálkozás. A fiókja egy órára zárolva lett.",submissionError:"Valami hiba történt. Kérjük, próbálja újra.",otpExpiredMessage:"A megerősítő kód lejárt, kérjük, kérjen egy újat a folytatáshoz."},tr:{popupMessage:"Güncellemeyi gerçekleştirmek için e-posta adresinize gelen güvenlik kodunu girin.",popupMessageLastWarning:"Bir sonraki doğrulama girişimi başarısız olursa, oturumunuz kapatılacak ve geçici olarak engelleneceksiniz.",minutes:"dakika",errorHeader:"Hata",configError:"OTP verisi yüklenemedi. Lütfen daha sonra tekrar deneyin.",otpHeading:"OTP Girin",resendOtp:"OTP'yi Yeniden Gönder",submit:"Gönder",close:"Kapat",invalidOtp:"Gönderdiğiniz kod geçersiz. Lütfen tekrar deneyin.",accountBlocked:"Çok fazla OTP denemesi yapıldı. Hesabınız bir saat boyunca kilitlendi.",submissionError:"Bir şeyler yanlış gitti. Lütfen tekrar deneyin.",otpExpiredMessage:"Doğrulama kodunun süresi doldu, devam etmek için lütfen yeni bir tane isteyin."},el:{popupMessage:"Παρακαλώ εισάγετε τον κωδικό ασφαλείας που λάβατε στο email σας για να ολοκληρώσετε την ενημέρωση.",popupMessageLastWarning:"Αν η επόμενη προσπάθεια επικύρωσης αποτύχει, θα αποσυνδεθείτε και θα αποκλειστείτε προσωρινά.",minutes:"λεπτά",errorHeader:"Σφάλμα",configError:"Δεν ήταν δυνατή η φόρτωση των δεδομένων OTP. Παρακαλούμε προσπαθήστε ξανά αργότερα.",otpHeading:"Εισαγωγή OTP",resendOtp:"Αποστολή ξανά OTP",submit:"Υποβολή",close:"Κλείσιμο",invalidOtp:"Ο κωδικός που εισαγάγατε δεν είναι έγκυρος. Παρακαλώ προσπαθήστε ξανά.",accountBlocked:"Πάρα πολλές προσπάθειες OTP. Ο λογαριασμός σας έχει αποκλειστεί για μία ώρα.",submissionError:"Κάτι πήγε στραβά. Παρακαλώ προσπαθήστε ξανά.",otpExpiredMessage:"Ο κωδικός επαλήθευσης έχει λήξει, παρακαλώ ζητήστε έναν νέο για να συνεχίσετε."},es:{popupMessage:"Por favor, introduzca el código de seguridad recibido en su correo electrónico para realizar la actualización.",popupMessageLastWarning:"Si el siguiente intento de validación falla, se cerrará tu sesión y serás bloqueado temporalmente.",minutes:"minutos",errorHeader:"Error",configError:"No se pudo cargar los datos del OTP. Por favor, inténtelo de nuevo más tarde.",otpHeading:"Introducir OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Cerrar",invalidOtp:"El código que ingresaste no es válido. Por favor, inténtalo de nuevo.",accountBlocked:"Demasiados intentos de OTP. Su cuenta ha sido bloqueada por una hora.",submissionError:"Algo salió mal. Por favor, inténtelo de nuevo.",otpExpiredMessage:"El código de validación ha expirado, por favor solicite uno nuevo para continuar."},pt:{popupMessage:"Por favor, insira o código de segurança recebido no seu e-mail para realizar a atualização.",popupMessageLastWarning:"Se a próxima tentativa de validação falhar, será desconectado e temporariamente bloqueado.",minutes:"minutos",errorHeader:"Erro",configError:"Não foi possível carregar os dados do OTP. Tente novamente mais tarde.",otpHeading:"Insira o OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Fechar",invalidOtp:"O código inserido não é válido. Por favor, tente novamente.",accountBlocked:"Muitas tentativas de OTP. Sua conta foi bloqueada por uma hora.",submissionError:"Algo deu errado. Por favor, tente novamente.",otpExpiredMessage:"O código de validação expirou, por favor solicite um novo para continuar."},hr:{popupMessage:"Unesite sigurnosni kod primljen na vašu e-mail adresu kako biste izvršili ažuriranje.",popupMessageLastWarning:"Ako sljedeći pokušaj provjere ne uspije, bit ćete odjavljeni i privremeno blokirani.",minutes:"minute",errorHeader:"Greška",configError:"Nije moguće učitati OTP podatke. Pokušajte ponovno kasnije.",otpHeading:"Unesite OTP",resendOtp:"Ponovno pošalji OTP",submit:"Pošalji",close:"Zatvori",invalidOtp:"Uneseni kod nije valjan. Molimo pokušajte ponovo.",accountBlocked:"Previše pokušaja unosa OTP-a. Vaš račun je blokiran na jedan sat.",submissionError:"Nešto je pošlo po zlu. Molimo pokušajte ponovo.",otpExpiredMessage:"Kod za potvrdu je istekao, molimo zatražite novi kako biste nastavili."},de:{popupMessage:"Bitte geben Sie den Sicherheitscode ein, den Sie an Ihre E-Mail-Adresse erhalten haben, um das Update durchzuführen.",popupMessageLastWarning:"Wenn der nächste Validierungsversuch fehlschlägt, werden Sie abgemeldet und vorübergehend gesperrt.",minutes:"Minuten",errorHeader:"Fehler",configError:"OTP-Daten konnten nicht geladen werden. Bitte versuchen Sie es später erneut.",otpHeading:"OTP eingeben",resendOtp:"OTP erneut senden",submit:"Absenden",close:"Schließen",invalidOtp:"Der eingegebene Code ist ungültig. Bitte versuchen Sie es erneut.",accountBlocked:"Zu viele OTP-Versuche. Ihr Konto wurde für eine Stunde gesperrt.",submissionError:"Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut.",otpExpiredMessage:"Der Bestätigungscode ist abgelaufen, bitte fordern Sie einen neuen an, um fortzufahren."},"es-mx":{popupMessage:"Por favor, ingrese el código de seguridad recibido en su correo electrónico para realizar la actualización.",popupMessageLastWarning:"Si el siguiente intento de validación falla, se cerrará tu sesión y serás bloqueado temporalmente.",minutes:"minutos",errorHeader:"Error",configError:"No se pudieron cargar los datos del OTP. Inténtelo de nuevo más tarde.",otpHeading:"Ingrese OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Cerrar",invalidOtp:"El código que ingresó no es válido. Inténtelo de nuevo.",accountBlocked:"Demasiados intentos de OTP. Su cuenta ha sido bloqueada por una hora.",submissionError:"Algo salió mal. Por favor, inténtelo de nuevo.",otpExpiredMessage:"El código de validación ha expirado, por favor solicite uno nuevo para continuar."},"pt-br":{popupMessage:"Por favor, digite o código de segurança recebido no seu e-mail para realizar a atualização.",popupMessageLastWarning:"Se a próxima tentativa de validação falhar, você será desconectado e bloqueado temporariamente.",minutes:"minutos",errorHeader:"Erro",configError:"Não foi possível carregar os dados do OTP. Tente novamente mais tarde.",otpHeading:"Digite o OTP",resendOtp:"Reenviar OTP",submit:"Enviar",close:"Fechar",invalidOtp:"O código informado não é válido. Tente novamente.",accountBlocked:"Muitas tentativas de OTP. Sua conta foi bloqueada por uma hora.",submissionError:"Algo deu errado. Por favor, tente novamente.",otpExpiredMessage:"O código de validação expirou, por favor solicite um novo para continuar."}},n=e=>new Promise((t=>{fetch(e).then((e=>e.json())).then((e=>{Object.keys(e).forEach((t=>{for(let i in e[t])s[t][i]=e[t][i]})),t(!0)}))})),d=(e,t)=>s[void 0!==t?t:"en"][e],l=class{handleNewTranslations(){n(this.translationUrl)}handleClientStylingChange(e,t){e!==t&&r(this.el,this.clientStyling)}handleClientStylingUrlChange(e,t){e!=t&&this.clientStylingUrl&&a(this.stylingContainer,this.clientStylingUrl)}async handleStepUpAuthEvent(e){var t;if(null===(t=e.detail)||void 0===t?void 0:t["x-step-up-required"]){if(this.hasConfigErrors=!1,this.hasErrors=!1,this.errorMessage="",this.showPopup=!0,this.token=e.detail["x-step-up-token"],this.flow=e.detail.flow,!this.token||!this.flow)return this.isLoading=!1,this.hasConfigErrors=!0,void(this.errorMessage=d("configError",this.language));await this.getConfig()}}handleCloseWidget(){this.countdownTimer&&(clearInterval(this.countdownTimer),this.countdownTimer=null),this.hasErrors=!1,this.hasConfigErrors=!1,this.errorMessage="",this.showPopup=!1,this.isLastWarning=!1}constructor(t){e(this,t),this.otpInputs=[],this.countdownTimer=null,this.expirationTimestamp=0,this.mbSource=void 0,this.clientStyling=void 0,this.clientStylingUrl=void 0,this.language="en",this.endpoint=void 0,this.userSession=void 0,this.translationUrl="",this.showPopup=!1,this.otp=void 0,this.isLoading=!0,this.config=null,this.timeLeft=0,this.expirationTime="",this.serverTime="",this.hasErrors=!1,this.hasConfigErrors=!1,this.errorMessage="",this.token="",this.flow="",this.showResendOtp=!1,this.isLastWarning=!1,this.inputDisabled=!1,this.handleResendOtp=this.handleResendOtp.bind(this),this.submitOtp=this.submitOtp.bind(this),this.handleCloseWidget=this.handleCloseWidget.bind(this),this.manualClosePopup=this.manualClosePopup.bind(this)}async getConfig(){if(this.endpoint)try{const e=new URL(`/api/v1/mfa/challenge/${this.token}/config`,this.endpoint);this.isLoading=!0;const t=await fetch(e.href),i=await t.json();if(t.ok)this.config=i,this.otp=Array(this.config.inputLength).fill(""),this.isLoading=!1,this.showResendOtp=!1,this.expirationTime=this.config.expirationTime,this.serverTime=this.config.serverTime,0!==this.config.numberOfValidateAttempts&&(this.hasErrors=!0,this.errorMessage=d("invalidOtp",this.language)),this.config.numberOfValidateAttempts===this.config.maxValidationAttempts-1&&(this.isLastWarning=!0),this.calculateTimeLeft(),this.startCountdown();else{if(!i||"gm.twofa.token_max_attempts_exceeded"!==i.details){const e=i&&i.message||`Failed to load config. Status: ${t.status}`;throw new Error(e)}this.handleCloseWidget()}}catch(e){this.isLoading=!1,this.hasConfigErrors=!0,this.errorMessage=d("configError",this.language),console.error("Error loading 2FA config:",e)}}calculateTimeLeft(){const e=new Date(this.expirationTime),t=new Date(this.serverTime),i=new Date,o=t.getTime()-i.getTime();this.expirationTimestamp=e.getTime()-o;const r=Date.now(),a=Math.max(0,Math.floor((this.expirationTimestamp-r)/1e3));this.timeLeft=a}startCountdown(){this.countdownTimer&&clearInterval(this.countdownTimer),this.countdownTimer=setInterval((()=>{const e=Date.now(),t=Math.max(0,Math.floor((this.expirationTimestamp-e)/1e3));this.timeLeft=t,this.inputDisabled=t<=0,t<=0&&(clearInterval(this.countdownTimer),this.countdownTimer=null,this.showResendOtp=!0,this.hasErrors=!1,this.isLastWarning=!1)}),1e3)}formatTime(e){const t=e%60;return`${Math.floor(e/60).toString().padStart(2,"0")}:${t.toString().padStart(2,"0")}`}setOtpInputRef(e,t){e&&(this.otpInputs[t]=e)}updateOtpState(e,t){const i=[...this.otp];i[e]=t.toUpperCase(),this.otp=i}handleOnPasteOtp(e){var t,i,o;e.preventDefault();const r=((null===(i=null===(t=e.clipboardData)||void 0===t?void 0:t.getData("text"))||void 0===i?void 0:i.trim())||"").slice(0,this.config.inputLength).split("");this.otp=[...r,...Array(this.config.inputLength-r.length).fill("")],null===(o=this.otpInputs[r.length])||void 0===o||o.focus(),r.length===this.config.inputLength&&this.submitOtp()}handleOtpInput(e,t){const i=e.target,o=i.value;if(/^[a-z0-9]$/i.test(o)){this.updateOtpState(t,o);const e=this.otpInputs[t+1];null==e||e.focus()}i.value=""}handleKeyDown(e,t){const i=e.key,o=e.ctrlKey||e.metaKey;if(/^[a-z0-9]$/i.test(i)){if(o&&"v"===i.toLowerCase())return;e.preventDefault(),this.updateOtpState(t,i);const r=this.otpInputs[t+1];null==r||r.focus()}else if("Backspace"===i){e.preventDefault(),""!==this.otp[t]&&this.updateOtpState(t,"");const i=this.otpInputs[t-1];null==i||i.focus()}}handleResendOtp(){const e=new CustomEvent("otpResendRequested");window.dispatchEvent(e)}async submitOtp(){if(this.otp.join("").length!==this.config.inputLength)return this.hasErrors=!0,void(this.errorMessage=d("invalidOtp",this.language));this.isLoading=!0,this.hasErrors=!1,this.errorMessage="";const e=this.otp.join("");"stateless"===this.flow&&this.handleOtpStateless(e),"stateful"===this.flow&&await this.handleOtpStateful(e)}handleOtpStateless(e){window.dispatchEvent(new CustomEvent("otpSubmitted",{detail:{code:e,maxAttempts:this.config.maxValidationAttempts,validatedAttempts:this.config.numberOfValidateAttempts}}))}async handleOtpStateful(e){const t=new URL(`/api/v1/mfa/challenge/${this.token}/validate`,this.endpoint);t.searchParams.append("input",e);try{const e=await fetch(t.href,{method:"POST"});if(200===e.status)return void this.handleSuccess();const i=await e.json();throw new Error(i.message)}catch(e){if("gm.multifactorauthentication.internal_server_error"===e.message)return this.config.numberOfValidateAttempts===this.config.maxValidationAttempts-1?(window.dispatchEvent(new CustomEvent("otpSetTimeout")),window.postMessage({type:"WidgetNotification",data:{type:"error",message:d("accountBlocked",this.language)}},window.location.href),void this.handleCloseWidget()):(this.hasErrors=!0,this.errorMessage=d("invalidOtp",this.language),void this.getConfig());console.error("OTP submission failed:",e),this.hasErrors=!0,this.errorMessage=d("submissionError",this.language)}finally{this.isLoading=!1}}handleSuccess(){window.dispatchEvent(new CustomEvent("otpSuccess",{detail:{message:"User successfully authenticated"}})),this.handleCloseWidget()}manualClosePopup(){window.dispatchEvent(new CustomEvent("manualClosePopup")),this.handleCloseWidget()}disconnectedCallback(){var e;this.countdownTimer&&clearInterval(this.countdownTimer),null===(e=this.stylingSubscription)||void 0===e||e.unsubscribe()}async componentWillLoad(){this.translationUrl.length>2&&await n(this.translationUrl)}componentDidLoad(){this.stylingContainer&&(null!=window.emMessageBuss?function(e,t){if(window.emMessageBus){const i=document.createElement("style");window.emMessageBus.subscribe(t,(t=>{i.innerHTML=t,e&&e.appendChild(i)}))}}(this.stylingContainer,`${this.mbSource}.Style`):(this.clientStyling&&r(this.stylingContainer,this.clientStyling),this.clientStylingUrl&&a(this.stylingContainer,this.clientStylingUrl)))}render(){return t("div",{key:"481fb2d579925de2fb472f3d715712625fb7aba9",ref:e=>this.stylingContainer=e},this.showPopup&&t("div",{key:"d9d55ab487c8bd11ed72d18e7eed49fdb59bab8b",class:"OtpPopupOverlay"},t("div",{key:"c42458b9f43f03dd88cb9ec8706826739cb2ee4c",class:"OtpPopupContent"},this.isLoading?t("div",{class:"OtpLoaderContainer"},t("span",{class:"OtpLoader"})):this.hasConfigErrors?t("div",{class:"OtpError"},t("div",{class:"OtpErrorHeader"},t("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 512 512"},t("path",{d:"M256 512A256 256 0 1 0 256 0a256 256 0 1 0 0 512zm0-384c13.3 0 24 10.7 24 24l0 112c0 13.3-10.7 24-24 24s-24-10.7-24-24l0-112c0-13.3 10.7-24 24-24zM224 352a32 32 0 1 1 64 0 32 32 0 1 1 -64 0z"})),t("h2",null,d("errorHeader",this.language))),t("p",null,this.errorMessage),t("button",{class:"OtpButton error",onClick:this.manualClosePopup},d("close",this.language))):t(i,null,t("div",{class:"otp-description"},this.showResendOtp?t("p",{class:"OtpNoticeMessage",role:"alert"},d("otpExpiredMessage",this.language)):t(i,null,t("p",{class:this.isLastWarning?"LastWarningMessage":""},d(this.isLastWarning?"popupMessageLastWarning":"popupMessage",this.language)),this.hasErrors&&t("p",{class:"OtpErrorMessage",role:"alert"},this.errorMessage))),t("div",{class:"OtpFieldWrapper"},t("h2",null,d("otpHeading",this.language)),t("div",{class:"OtpField"},this.otp.map(((e,i)=>t("input",{key:i,ref:e=>this.setOtpInputRef(e,i),id:`otp-input-${i}`,type:"text",class:"otp-box "+(this.config.inputLength%2==0&&i===this.config.inputLength/2-1?"space":""),maxLength:1,value:e,onInput:e=>this.handleOtpInput(e,i),onKeyDown:e=>this.handleKeyDown(e,i),onPaste:e=>this.handleOnPasteOtp(e),disabled:this.inputDisabled,autoComplete:"off"})))),t("div",{class:"otp-timer"},this.formatTime(this.timeLeft)," ",d("minutes",this.language))),t("div",{class:"OtpActionButtons"},this.showResendOtp?t("button",{class:"OtpButton",onClick:this.handleResendOtp},d("resendOtp",this.language)):t("button",{class:"OtpButton",onClick:this.submitOtp,disabled:this.otp.join("").length!==this.config.inputLength},d("submit",this.language)),t("button",{class:"OtpButton",onClick:this.manualClosePopup},d("close",this.language)))))))}get el(){return o(this)}static get watchers(){return{translationUrl:["handleNewTranslations"],clientStyling:["handleClientStylingChange"],clientStylingUrl:["handleClientStylingUrlChange"]}}};l.style=".OtpPopupOverlay{position:fixed;top:0;left:0;width:100%;height:100%;background:var(--emw--color-overlay, rgba(0, 0, 0, 0.5));display:flex;align-items:center;justify-content:center}.OtpButton{font-family:var(--emw--button-typography);border:var(--emw--button-border, none);border-radius:var(--emw--button-border-radius, 3px);border-color:var(--emw--button-border-color);background-color:var(--emw--button-background-color, var(--emw--color-primary, #007bff));color:var(--emw--button-typography, var(--emw--color-white, #fff));padding:10px 20px;cursor:pointer;font-size:16px}.OtpButton.error{background:var(--emw--color-error, #dd3434)}.OtpPopupContent{position:relative;background:var(--emw--color-white, #fff);padding:20px;border-radius:5px;text-align:center;min-width:25%;min-height:200px;display:flex;flex-direction:column;justify-content:center;gap:20px}.OtpPopupContent .OtpError{display:flex;flex-direction:column;gap:20px;align-items:center}.OtpPopupContent .OtpError .OtpErrorHeader{display:flex;justify-content:center;gap:5px}.OtpPopupContent .OtpError h2{margin:0}.OtpPopupContent .OtpError svg{width:25px;fill:var(--emw--color-error, #dd3434)}.OtpFieldWrapper{display:flex;flex-direction:column;gap:10px}.OtpFieldWrapper h2{margin:0}.OtpField{display:flex;justify-content:center}.OtpField input{width:24px;font-size:32px;padding:10px;text-align:center;border-radius:5px;margin:2px;border:2px solid var(--emw--otp-border-color, #55525c);font-weight:bold;outline:none;transition:all 0.1s}.OtpField input.space{margin-right:1rem !important}.OtpField input:focus{border:2px solid var(--emw--color-primary, #007bff);box-shadow:0 0 2px 2px var(--emw--color-primary, #007bff)}.OtpActionButtons{display:flex;justify-content:space-between}.OtpErrorMessage{color:var(--emw--color-error, #dd3434);font-weight:bold}.OtpLoaderContainer{width:100%;height:100%;display:flex;justify-content:center;align-items:center}.OtpLoader{width:48px;height:48px;border:5px solid var(--emw--color-secondary, #b3d8ff);border-bottom-color:var(--emw--color-primary, #007bff);border-radius:50%;display:inline-block;box-sizing:border-box;animation:rotation 1s linear infinite}@keyframes rotation{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}";export{l as P}

package/dist/player-step-up-auth/player-step-up-auth.entry.js

@@ -1 +1 @@
-export{P as player_step_up_auth}from"./player-step-up-auth-045726cf.js";import"./index-c6eee6d8.js";
+export{P as player_step_up_auth}from"./player-step-up-auth-e624c40c.js";import"./index-c6eee6d8.js";

package/dist/player-step-up-auth/player-step-up-auth.esm.js

@@ -1 +1 @@
-import{p as e,b as n}from"./index-c6eee6d8.js";export{s as setNonce}from"./index-c6eee6d8.js";import{g as t}from"./app-globals-0f993ce5.js";(()=>{const n=import.meta.url,t={};return""!==n&&(t.resourcesUrl=new URL(".",n).href),e(t)})().then((async e=>(await t(),n([["player-step-up-auth",[[1,"player-step-up-auth",{mbSource:[513,"mb-source"],clientStyling:[513,"client-styling"],clientStylingUrl:[513,"client-styling-url"],language:[513],endpoint:[513],userSession:[513,"user-session"],translationUrl:[513,"translation-url"],showPopup:[32],otp:[32],isLoading:[32],config:[32],timeLeft:[32],expirationTime:[32],serverTime:[32],hasErrors:[32],hasConfigErrors:[32],errorMessage:[32],token:[32],flow:[32],showResendOtp:[32],isLastWarning:[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{translationUrl:["handleNewTranslations"],clientStyling:["handleClientStylingChange"],clientStylingUrl:["handleClientStylingUrlChange"]}]]]],e))));
+import{p as e,b as n}from"./index-c6eee6d8.js";export{s as setNonce}from"./index-c6eee6d8.js";import{g as t}from"./app-globals-0f993ce5.js";(()=>{const n=import.meta.url,t={};return""!==n&&(t.resourcesUrl=new URL(".",n).href),e(t)})().then((async e=>(await t(),n([["player-step-up-auth",[[1,"player-step-up-auth",{mbSource:[513,"mb-source"],clientStyling:[513,"client-styling"],clientStylingUrl:[513,"client-styling-url"],language:[513],endpoint:[513],userSession:[513,"user-session"],translationUrl:[513,"translation-url"],showPopup:[32],otp:[32],isLoading:[32],config:[32],timeLeft:[32],expirationTime:[32],serverTime:[32],hasErrors:[32],hasConfigErrors:[32],errorMessage:[32],token:[32],flow:[32],showResendOtp:[32],isLastWarning:[32],inputDisabled:[32]},[[8,"stepUpAuthRequired","handleStepUpAuthEvent"],[8,"closePopup","handleCloseWidget"]],{translationUrl:["handleNewTranslations"],clientStyling:["handleClientStylingChange"],clientStylingUrl:["handleClientStylingUrlChange"]}]]]],e))));

package/dist/types/Users/adrian.pripon/Documents/Work/widgets-monorepo/packages/stencil/player-step-up-auth/.stencil/packages/stencil/player-step-up-auth/stencil.config.d.ts

@@ -0,0 +1,2 @@
+import { Config } from '../../../../../../../../../../../../stencil-public-runtime';
+export declare const config: Config;

package/dist/types/Users/adrian.pripon/Documents/Work/widgets-monorepo/packages/stencil/player-step-up-auth/.stencil/packages/stencil/player-step-up-auth/stencil.config.dev.d.ts

@@ -0,0 +1,2 @@
+import { Config } from '../../../../../../../../../../../../stencil-public-runtime';
+export declare const config: Config;

package/dist/types/components/player-step-up-auth/player-step-up-auth.d.ts

@@ -42,9 +42,9 @@ export declare class PlayerStepUpAuth {
     flow: string;
     showResendOtp: boolean;
     isLastWarning: boolean;
+    inputDisabled: boolean;
     private stylingContainer;
     private stylingSubscription;
-    private otpContainer;
     private otpInputs;
     private countdownTimer;
     private expirationTimestamp;
@@ -89,9 +89,10 @@ export declare class PlayerStepUpAuth {
      */
     constructor();
     /**
-     * Fetches OTP configuration from the endpoint.
-     * Updates the OTP state, expiration time, and starts the countdown timer.
-     */
+       * Fetches OTP configuration from the endpoint.
+       * Updates the OTP state, expiration time, and starts the countdown timer.
+       * Handles specific errors like max attempts exceeded by closing the widget.
+       */
     getConfig(): Promise<void>;
     /**
      * Calculates the remaining time for OTP expiration.
@@ -111,17 +112,19 @@ export declare class PlayerStepUpAuth {
      */
     formatTime(seconds: number): string;
     /**
-     * Sets a reference to the OTP input container.
+     * Sets a reference to the OTP inputs.
      *
      * @param el - The OTP input container element.
      */
-    setOtpContainerRef(el: HTMLDivElement | null): void;
+    setOtpInputRef(el: HTMLInputElement | null, index: number): void;
     /**
-     * Sets a reference to the OTP inputs.
+     * update otp state
+     * by creating new array and assign to state, to make the UI trigger
      *
-     * @param el - The OTP input container element.
+     * @param index - The index of the input field being updated.
+     * @param value - The inputted value.
      */
-    setOtpInputRef(el: HTMLInputElement | null, index: number): void;
+    updateOtpState(index: number, value: string): void;
     /**
      * Handles pasting an OTP directly into the input fields.
      * Extracts characters from the clipboard and populates the OTP fields.
@@ -181,8 +184,8 @@ export declare class PlayerStepUpAuth {
      */
     disconnectedCallback(): void;
     /**
-    * Lifecycle method: Fetch translations on component load
-    */
+     * Lifecycle method: Fetch translations on component load
+     */
     componentWillLoad(): Promise<void>;
     /**
      * Lifecycle method: Set up event listeners after the component is rendered

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everymatrix/player-step-up-auth",
-  "version": "1.76.7",
+  "version": "1.76.9",
   "main": "./dist/index.cjs.js",
   "module": "./dist/index.js",
   "es2015": "./dist/esm/index.mjs",

package/dist/types/builds/emfe-widgets/widgets-monorepo/packages/stencil/player-step-up-auth/.stencil/packages/stencil/player-step-up-auth/stencil.config.d.ts

@@ -1,2 +0,0 @@
-import { Config } from '../../../../../../../../../../stencil-public-runtime';
-export declare const config: Config;

package/dist/types/builds/emfe-widgets/widgets-monorepo/packages/stencil/player-step-up-auth/.stencil/packages/stencil/player-step-up-auth/stencil.config.dev.d.ts

@@ -1,2 +0,0 @@
-import { Config } from '../../../../../../../../../../stencil-public-runtime';
-export declare const config: Config;