@frontegg/js 6.155.0-alpha.2 → 6.155.0-alpha.3

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v6.155.0-alpha.2
+/** @license Frontegg v6.155.0-alpha.3
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/node/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v6.155.0-alpha.2
+/** @license Frontegg v6.155.0-alpha.3
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/node/version.js

@@ -5,6 +5,6 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports["default"] = void 0;
 var _default = {
-  cdnVersion: '6.155.0-alpha.2'
+  cdnVersion: '6.155.0-alpha.3'
 };
 exports["default"] = _default;

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@frontegg/js",
-  "version": "6.155.0-alpha.2",
+  "version": "6.155.0-alpha.3",
   "main": "./node/index.js",
   "license": "MIT",
   "author": "Frontegg LTD",
   "dependencies": {
     "@babel/runtime": "^7.18.6",
-    "@frontegg/types": "6.155.0-alpha.2"
+    "@frontegg/types": "6.155.0-alpha.3"
   },
   "browserslist": {
     "production": [

package/umd/frontegg.development.js

@@ -1414,7 +1414,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   "default": () => (__WEBPACK_DEFAULT_EXPORT__)
 /* harmony export */ });
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = ({
-  cdnVersion: '6.155.0-alpha.2'
+  cdnVersion: '6.155.0-alpha.3'
 });
 
 /***/ }),
@@ -7552,10 +7552,14 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */ });
 /* harmony import */ var _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! @frontegg/rest-api */ "../../node_modules/@frontegg/rest-api/ContextHolder/index.js");
 /* harmony import */ var redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! redux-saga/effects */ "../../node_modules/redux-saga/dist/redux-saga-effects-npm-proxy.esm.js");
-/* harmony import */ var _CustomLoginState_saga__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ../../CustomLoginState/saga */ "../../dist/@frontegg/redux-store/auth/CustomLoginState/saga.js");
-/* harmony import */ var _reducer__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ../../reducer */ "../../dist/@frontegg/redux-store/auth/reducer.js");
+/* harmony import */ var _CustomLoginState_saga__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(/*! ../../CustomLoginState/saga */ "../../dist/@frontegg/redux-store/auth/CustomLoginState/saga.js");
+/* harmony import */ var _reducer__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ../../reducer */ "../../dist/@frontegg/redux-store/auth/reducer.js");
 /* harmony import */ var _utils__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ../utils */ "../../dist/@frontegg/redux-store/auth/LoginState/utils.js");
 /* harmony import */ var _constants__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ../../../constants */ "../../dist/@frontegg/redux-store/constants.js");
+/* harmony import */ var _StepUpState__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ../../StepUpState */ "../../dist/@frontegg/redux-store/auth/StepUpState/utils.js");
+/* harmony import */ var _StepUpState_consts__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ../../StepUpState/consts */ "../../dist/@frontegg/redux-store/auth/StepUpState/consts.js");
+
+
 
 
 
@@ -7595,16 +7599,26 @@ function* getUrlForAfterAuthNavigation(customLoginAuthenticatedUrl) {
     allowedRedirectOrigins
   });
 }
-
 /**
  * Utility to share after auth navigation flow between login and step up
  * @param resetStateAction reset state action
  * @param customLoginAuthenticatedUrl custom login authenticated url if exists
  */
-function* afterAuthNavigationUtil(resetStateAction, customLoginAuthenticatedUrl) {
+function* afterAuthNavigationUtil(resetStateAction, {
+  customLoginAuthenticatedUrl,
+  forceStepUpUrl
+} = {}) {
   const onRedirectTo = _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_3__.ContextHolder.onRedirectTo;
-  const redirectUrl = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(getUrlForAfterAuthNavigation, customLoginAuthenticatedUrl);
-  window.localStorage.removeItem(_constants__WEBPACK_IMPORTED_MODULE_2__.FRONTEGG_AFTER_AUTH_REDIRECT_URL);
+  let redirectUrl;
+  if (forceStepUpUrl) {
+    // scenario to get to here: invalid max age, try to step up -> logout, login with magic code/link -> redirect to step up page for email code as the second factor
+    // we don't want to remove the FRONTEGG_AFTER_AUTH_REDIRECT_URL when we are in the step up flow
+    redirectUrl = forceStepUpUrl;
+  } else {
+    var _window;
+    redirectUrl = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(getUrlForAfterAuthNavigation, customLoginAuthenticatedUrl);
+    (_window = window) == null ? void 0 : _window.localStorage.removeItem(_constants__WEBPACK_IMPORTED_MODULE_2__.FRONTEGG_AFTER_AUTH_REDIRECT_URL);
+  }
   yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.delay)(200);
   (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(resetStateAction());
   onRedirectTo(redirectUrl, {
@@ -7614,29 +7628,50 @@ function* afterAuthNavigationUtil(resetStateAction, customLoginAuthenticatedUrl)
 
 /**
  * After auth navigation for login flow
+ * Handling also step up scenario when user silently logout to continue to step up
  */
 function* afterAuthNavigation() {
+  var _window2;
   const {
     routes: {
-      customLoginAuthenticatedUrl
+      customLoginAuthenticatedUrl,
+      stepUpUrl
     }
   } = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.select)(state => state.auth);
+
+  // login with magic code, try to step up, no other mfa, invalid max age, force_enroll -> logout, login with first factor, not-stepped up jwt -> navigate to step up
+  const shouldStepUp = (_window2 = window) == null ? void 0 : _window2.localStorage.getItem(_StepUpState_consts__WEBPACK_IMPORTED_MODULE_4__.SHOULD_STEP_UP_KEY);
+  const user = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.select)(({
+    auth
+  }) => auth.user);
+  if (shouldStepUp) {
+    var _window3;
+    (_window3 = window) == null ? void 0 : _window3.localStorage.removeItem(_StepUpState_consts__WEBPACK_IMPORTED_MODULE_4__.SHOULD_STEP_UP_KEY);
+  }
+  if (stepUpUrl && shouldStepUp && !(0,_StepUpState__WEBPACK_IMPORTED_MODULE_5__.isSteppedUp)(user)) {
+    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(afterAuthNavigationUtil, _reducer__WEBPACK_IMPORTED_MODULE_6__.actions.resetLoginState, {
+      forceStepUpUrl: stepUpUrl
+    });
+    return;
+  }
   let customLoginURL = customLoginAuthenticatedUrl;
   if (!customLoginAuthenticatedUrl) {
-    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_CustomLoginState_saga__WEBPACK_IMPORTED_MODULE_4__.loadCustomLoginRoutes);
+    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_CustomLoginState_saga__WEBPACK_IMPORTED_MODULE_7__.loadCustomLoginRoutes);
     customLoginURL = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.select)(state => {
       var _state$auth$routes;
       return (_state$auth$routes = state.auth.routes) == null ? void 0 : _state$auth$routes.customLoginAuthenticatedUrl;
     });
   }
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(afterAuthNavigationUtil, _reducer__WEBPACK_IMPORTED_MODULE_5__.actions.resetLoginState, customLoginURL);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(afterAuthNavigationUtil, _reducer__WEBPACK_IMPORTED_MODULE_6__.actions.resetLoginState, {
+    customLoginAuthenticatedUrl: customLoginURL
+  });
 }
 
 /**
  * After auth navigation for step up flow
  */
 function* afterStepUpAuthNavigation() {
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(afterAuthNavigationUtil, _reducer__WEBPACK_IMPORTED_MODULE_5__.actions.resetStepUpState);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(afterAuthNavigationUtil, _reducer__WEBPACK_IMPORTED_MODULE_6__.actions.resetStepUpState);
 }
 
 /***/ }),
@@ -9904,6 +9939,7 @@ let MFAStep;
   MFAStep["smsSetPhoneNumber"] = "smsSetPhoneNumber";
   MFAStep["smsVerifyCode"] = "smsVerifyCode";
   MFAStep["emailVerifyCode"] = "emailVerifyCode";
+  MFAStep["noMFAEnrolledStepUp"] = "noMFAEnrolledStepUp";
 })(MFAStep || (MFAStep = {}));
 
 /***/ }),
@@ -16188,6 +16224,168 @@ function* socialLoginsSaga() {
 
 /***/ }),
 
+/***/ "../../dist/@frontegg/redux-store/auth/StepUpState/consts.js":
+/*!*******************************************************************!*\
+  !*** ../../dist/@frontegg/redux-store/auth/StepUpState/consts.js ***!
+  \*******************************************************************/
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+"use strict";
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   "ACR_VALUE": () => (/* binding */ ACR_VALUE),
+/* harmony export */   "AMR_ADDITIONAL_VALUE": () => (/* binding */ AMR_ADDITIONAL_VALUE),
+/* harmony export */   "AMR_MFA_VALUE": () => (/* binding */ AMR_MFA_VALUE),
+/* harmony export */   "SHOULD_STEP_UP_KEY": () => (/* binding */ SHOULD_STEP_UP_KEY)
+/* harmony export */ });
+/**
+ * The required ACR (Authorization Context Reference) value for the step up flow
+ */
+const ACR_VALUE = 'http://schemas.openid.net/pape/policies/2007/06/multi-factor';
+
+/**
+ * One of the required AMR (Authentication Methods References) values for the step up flow
+ */
+const AMR_MFA_VALUE = 'mfa';
+
+/**
+ * One of the required AMR (Authentication Methods References) values should be from the array for the step up flow
+ */
+const AMR_ADDITIONAL_VALUE = ['otp', 'sms', 'hwk'];
+
+/**
+ * SHOULD_STEP_UP_KEY local storage key
+ * Used for scenarios when we logout for re-login and then should redirect to step up page
+ */
+const SHOULD_STEP_UP_KEY = 'SHOULD_STEP_UP';
+
+/***/ }),
+
+/***/ "../../dist/@frontegg/redux-store/auth/StepUpState/generateStepUpSession.saga.js":
+/*!***************************************************************************************!*\
+  !*** ../../dist/@frontegg/redux-store/auth/StepUpState/generateStepUpSession.saga.js ***!
+  \***************************************************************************************/
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+"use strict";
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   "generateStepUpSession": () => (/* binding */ generateStepUpSession)
+/* harmony export */ });
+/* harmony import */ var redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! redux-saga/effects */ "../../node_modules/redux-saga/dist/redux-saga-effects-npm-proxy.esm.js");
+/* harmony import */ var _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(/*! @frontegg/rest-api */ "../../node_modules/@frontegg/rest-api/ContextHolder/index.js");
+/* harmony import */ var _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(/*! @frontegg/rest-api */ "../../node_modules/@frontegg/rest-api/index.js");
+/* harmony import */ var _reducer__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ../reducer */ "../../dist/@frontegg/redux-store/auth/reducer.js");
+/* harmony import */ var _LoginState_utils__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ../LoginState/utils */ "../../dist/@frontegg/redux-store/auth/LoginState/utils.js");
+/* harmony import */ var _MfaState_interfaces__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ../MfaState/interfaces */ "../../dist/@frontegg/redux-store/auth/MfaState/interfaces.js");
+/* harmony import */ var _LoginState_sagas__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ../LoginState/sagas */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/afterAuthNavigation.saga.js");
+/* harmony import */ var _LoginState_saga_utils__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ../LoginState/saga.utils */ "../../dist/@frontegg/redux-store/auth/LoginState/saga.utils.js");
+/* harmony import */ var _consts__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ./consts */ "../../dist/@frontegg/redux-store/auth/StepUpState/consts.js");
+
+
+
+
+
+
+
+
+
+/**
+ * Error returned from the BE when the user is not enrolled to MFA and logged in with email magic code/link
+ */
+const MFA_IS_NOT_ENROLLED_ERROR = 'MFA is not enrolled';
+
+/**
+ * @param error API error
+ * @returns true when the error is MFA is not enrolled error
+ */
+const isMfaIsNotEnrolledError = error => (error == null ? void 0 : error['message']) === MFA_IS_NOT_ENROLLED_ERROR;
+
+/**
+ * Handle an edge case when the user should NOT step up, so the response including the generated stepped-up jwt
+ * Relevant for scenarios like login with magic code, no other mfa enrolled, allowed to skip mfa and max age is valid
+ * @param generateResponse
+ */
+function* handleNoNeedToStepUpFlow(generateResponse) {
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_LoginState_saga_utils__WEBPACK_IMPORTED_MODULE_1__.afterAuthenticationStateUpdate, generateResponse);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_LoginState_sagas__WEBPACK_IMPORTED_MODULE_2__.afterStepUpAuthNavigation);
+}
+
+/**
+ * Handle the common scenario when the user should step up by the mfa token and devices returned from the generate req
+ * @param generateStepUpSessionResponse
+ */
+function* handleNeedToStepUpFlow({
+  mfaToken,
+  mfaDevices
+}) {
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_3__.actions.setStepUpState({
+    mfaDevices,
+    mfaToken
+  }));
+
+  // to handle scenarios when sms, email or authenticator are the only options - show immediately the enrolled one
+  const step = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_LoginState_utils__WEBPACK_IMPORTED_MODULE_4__.getMfaStepForEnrolledUsers, mfaDevices);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_3__.actions.setMfaState({
+    step
+  }));
+}
+
+/**
+ * Handle step up generation request error
+ * @param error
+ */
+function* handleError(error) {
+  if (isMfaIsNotEnrolledError(error)) {
+    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_3__.actions.setMfaState({
+      step: _MfaState_interfaces__WEBPACK_IMPORTED_MODULE_5__.MFAStep.noMFAEnrolledStepUp
+    }));
+    return;
+  }
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_3__.actions.logout());
+  window.localStorage.setItem(_consts__WEBPACK_IMPORTED_MODULE_6__.SHOULD_STEP_UP_KEY, 'true');
+  const {
+    routes
+  } = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.select)(state => state.auth);
+  _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_7__.ContextHolder.onRedirectTo(routes.loginUrl);
+}
+
+/**
+ * Generate step up session
+ * Logout on error and redirecting to the login page
+ * @param payload.maxAge - The max age of the session in seconds
+ * @param payload.callback - The callback function to be called after the request is done
+ */
+function* generateStepUpSession({
+  payload: {
+    maxAge,
+    callback
+  }
+}) {
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_3__.actions.setStepUpState({
+    mfaDevices: undefined,
+    mfaToken: ''
+  }));
+  try {
+    const response = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_frontegg_rest_api__WEBPACK_IMPORTED_MODULE_8__.api.auth.generateStepupSession, {
+      maxAge
+    });
+    if (response['user']) {
+      // got stepped up jwt, no need to continue step up by a second factor
+      yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(handleNoNeedToStepUpFlow, response);
+    } else {
+      // regular step up flow
+      yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(handleNeedToStepUpFlow, response);
+    }
+    callback == null ? void 0 : callback(true);
+  } catch (e) {
+    callback == null ? void 0 : callback(false);
+    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(handleError, e);
+  }
+}
+
+/***/ }),
+
 /***/ "../../dist/@frontegg/redux-store/auth/StepUpState/index.js":
 /*!******************************************************************!*\
   !*** ../../dist/@frontegg/redux-store/auth/StepUpState/index.js ***!
@@ -16197,6 +16395,7 @@ function* socialLoginsSaga() {
 "use strict";
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   "isSteppedUp": () => (/* reexport safe */ _utils__WEBPACK_IMPORTED_MODULE_3__.isSteppedUp),
 /* harmony export */   "stepUpActions": () => (/* binding */ actions),
 /* harmony export */   "stepUpReducers": () => (/* binding */ reducers),
 /* harmony export */   "stepUpState": () => (/* binding */ stepUpState)
@@ -16204,6 +16403,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _reduxjs_toolkit__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! @reduxjs/toolkit */ "../../node_modules/@reduxjs/toolkit/dist/redux-toolkit.esm.js");
 /* harmony import */ var _utils__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ../utils */ "../../dist/@frontegg/redux-store/auth/utils.js");
 /* harmony import */ var _constants__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ../../constants */ "../../dist/@frontegg/redux-store/constants.js");
+/* harmony import */ var _utils__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ./utils */ "../../dist/@frontegg/redux-store/auth/StepUpState/utils.js");
 
 
 
@@ -16258,6 +16458,7 @@ const actions = {
 const Matcher = {};
 
 
+
 /***/ }),
 
 /***/ "../../dist/@frontegg/redux-store/auth/StepUpState/saga.js":
@@ -16269,7 +16470,6 @@ const Matcher = {};
 "use strict";
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   "generateStepUpSession": () => (/* binding */ generateStepUpSession),
 /* harmony export */   "preVerifyMFAEmailCodeForStepUp": () => (/* binding */ preVerifyMFAEmailCodeForStepUp),
 /* harmony export */   "preVerifyMFASMSForStepUp": () => (/* binding */ preVerifyMFASMSForStepUp),
 /* harmony export */   "preVerifyMFAWebAuthnForStepUp": () => (/* binding */ preVerifyMFAWebAuthnForStepUp),
@@ -16280,14 +16480,12 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   "verifyMFAWebAuthnForStepUp": () => (/* binding */ verifyMFAWebAuthnForStepUp)
 /* harmony export */ });
 /* harmony import */ var redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! redux-saga/effects */ "../../node_modules/redux-saga/dist/redux-saga-effects-npm-proxy.esm.js");
-/* harmony import */ var _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! @frontegg/rest-api */ "../../node_modules/@frontegg/rest-api/index.js");
-/* harmony import */ var _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! @frontegg/rest-api */ "../../node_modules/@frontegg/rest-api/ContextHolder/index.js");
-/* harmony import */ var _reducer__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ../reducer */ "../../dist/@frontegg/redux-store/auth/reducer.js");
-/* harmony import */ var _LoginState_saga__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ../LoginState/saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithAuthenticator.saga.js");
-/* harmony import */ var _LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithSMS.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithSMS.saga.js");
-/* harmony import */ var _LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithWebAuthn.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithWebAuthn.saga.js");
-/* harmony import */ var _LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithEmailCode.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithEmailCode.saga.js");
-/* harmony import */ var _LoginState_utils__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ../LoginState/utils */ "../../dist/@frontegg/redux-store/auth/LoginState/utils.js");
+/* harmony import */ var _reducer__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ../reducer */ "../../dist/@frontegg/redux-store/auth/reducer.js");
+/* harmony import */ var _LoginState_saga__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ../LoginState/saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithAuthenticator.saga.js");
+/* harmony import */ var _LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithSMS.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithSMS.saga.js");
+/* harmony import */ var _LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithWebAuthn.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithWebAuthn.saga.js");
+/* harmony import */ var _LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ../LoginState/sagas/mfaWithEmailCode.saga */ "../../dist/@frontegg/redux-store/auth/LoginState/sagas/mfaWithEmailCode.saga.js");
+/* harmony import */ var _generateStepUpSession_saga__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ./generateStepUpSession.saga */ "../../dist/@frontegg/redux-store/auth/StepUpState/generateStepUpSession.saga.js");
 
 
 
@@ -16296,50 +16494,6 @@ __webpack_require__.r(__webpack_exports__);
 
 
 
-/**
- * Generate step up session
- * Logout on error and redirecting to the login page
- * @param payload.maxAge - The max age of the session in seconds
- * @param payload.callback - The callback function to be called after the request is done
- */
-function* generateStepUpSession({
-  payload: {
-    maxAge,
-    callback
-  }
-}) {
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState({
-    mfaDevices: undefined,
-    mfaToken: ''
-  }));
-  try {
-    const {
-      mfaToken,
-      mfaDevices
-    } = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_frontegg_rest_api__WEBPACK_IMPORTED_MODULE_2__.api.auth.generateStepupSession, {
-      maxAge
-    });
-    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState({
-      mfaDevices,
-      mfaToken
-    }));
-
-    // to handle scenarios when sms, email or authenticator are the only options - show immediately the enrolled one
-    const step = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.call)(_LoginState_utils__WEBPACK_IMPORTED_MODULE_3__.getMfaStepForEnrolledUsers, mfaDevices);
-    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setMfaState({
-      step
-    }));
-    callback == null ? void 0 : callback(true);
-  } catch (e) {
-    callback == null ? void 0 : callback(false);
-    yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.put)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.logout());
-    const {
-      routes
-    } = yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.select)(state => state.auth);
-    _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_4__.ContextHolder.onRedirectTo(routes.loginUrl);
-  }
-}
-
 /**
  * Step up with authenticator app
  * @param payload.callback - callback function to be called after the verification is done
@@ -16349,7 +16503,7 @@ function* generateStepUpSession({
 function* stepUpWithAuthenticator({
   payload
 }) {
-  yield (0,_LoginState_saga__WEBPACK_IMPORTED_MODULE_5__.mfaWithAuthenticator)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState, true);
+  yield (0,_LoginState_saga__WEBPACK_IMPORTED_MODULE_1__.mfaWithAuthenticator)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState, true);
 }
 
 /**
@@ -16361,7 +16515,7 @@ function* stepUpWithAuthenticator({
 function* preVerifyMFAWebAuthnForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_6__.preVerifyMFAWebAuthn)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState);
+  yield (0,_LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_3__.preVerifyMFAWebAuthn)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState);
 }
 
 /**
@@ -16376,7 +16530,7 @@ function* preVerifyMFAWebAuthnForStepUp({
 function* verifyMFAWebAuthnForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_6__.verifyMFAWebAuthn)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState, true);
+  yield (0,_LoginState_sagas_mfaWithWebAuthn_saga__WEBPACK_IMPORTED_MODULE_3__.verifyMFAWebAuthn)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState, true);
 }
 
 /**
@@ -16388,7 +16542,7 @@ function* verifyMFAWebAuthnForStepUp({
 function* preVerifyMFASMSForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_7__.preVerifyMFASMS)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState);
+  yield (0,_LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_4__.preVerifyMFASMS)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState);
 }
 
 /**
@@ -16401,7 +16555,7 @@ function* preVerifyMFASMSForStepUp({
 function* verifyMFASMSForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_7__.verifyMFASMS)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState, true);
+  yield (0,_LoginState_sagas_mfaWithSMS_saga__WEBPACK_IMPORTED_MODULE_4__.verifyMFASMS)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState, true);
 }
 
 /**
@@ -16413,7 +16567,7 @@ function* verifyMFASMSForStepUp({
 function* verifyMFAEmailCodeForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_8__.verifyMFAEmailCode)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState);
+  yield (0,_LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_5__.verifyMFAEmailCode)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState);
 }
 
 /**
@@ -16424,21 +16578,60 @@ function* verifyMFAEmailCodeForStepUp({
 function* preVerifyMFAEmailCodeForStepUp({
   payload
 }) {
-  yield (0,_LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_8__.preVerifyMFAEmailCode)(payload, _reducer__WEBPACK_IMPORTED_MODULE_1__.actions.setStepUpState);
+  yield (0,_LoginState_sagas_mfaWithEmailCode_saga__WEBPACK_IMPORTED_MODULE_5__.preVerifyMFAEmailCode)(payload, _reducer__WEBPACK_IMPORTED_MODULE_2__.actions.setStepUpState);
 }
 function* stepUpSagas() {
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.generateStepUpSession, generateStepUpSession);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.stepUpWithAuthenticator, stepUpWithAuthenticator);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.preVerifyMFASMSForStepUp, preVerifyMFASMSForStepUp);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.verifyMFASMSForStepUp, verifyMFASMSForStepUp);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.preVerifyMFAWebAuthnForStepUp, preVerifyMFAWebAuthnForStepUp);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.verifyMFAWebAuthnForStepUp, verifyMFAWebAuthnForStepUp);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.verifyMFAEmailCodeForStepUp, verifyMFAEmailCodeForStepUp);
-  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_1__.actions.preVerifyMFAEmailCodeForStepUp, preVerifyMFAEmailCodeForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.generateStepUpSession, _generateStepUpSession_saga__WEBPACK_IMPORTED_MODULE_6__.generateStepUpSession);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.stepUpWithAuthenticator, stepUpWithAuthenticator);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.preVerifyMFASMSForStepUp, preVerifyMFASMSForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.verifyMFASMSForStepUp, verifyMFASMSForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.preVerifyMFAWebAuthnForStepUp, preVerifyMFAWebAuthnForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.verifyMFAWebAuthnForStepUp, verifyMFAWebAuthnForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.verifyMFAEmailCodeForStepUp, verifyMFAEmailCodeForStepUp);
+  yield (0,redux_saga_effects__WEBPACK_IMPORTED_MODULE_0__.takeLeading)(_reducer__WEBPACK_IMPORTED_MODULE_2__.actions.preVerifyMFAEmailCodeForStepUp, preVerifyMFAEmailCodeForStepUp);
 }
 
 /***/ }),
 
+/***/ "../../dist/@frontegg/redux-store/auth/StepUpState/utils.js":
+/*!******************************************************************!*\
+  !*** ../../dist/@frontegg/redux-store/auth/StepUpState/utils.js ***!
+  \******************************************************************/
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+"use strict";
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   "isSteppedUp": () => (/* binding */ isSteppedUp)
+/* harmony export */ });
+/* harmony import */ var _consts__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ./consts */ "../../dist/@frontegg/redux-store/auth/StepUpState/consts.js");
+
+/**
+ * @param options.amr
+ * @param options.acr
+ * @param options.auth_time - auth time of the user (last login time)
+ * @param options.maxAge - max age of step up
+ * @returns true when the user is stepped up, false otherwise
+ */
+const isSteppedUp = ({
+  amr = [],
+  acr = '',
+  auth_time,
+  maxAge
+} = {}) => {
+  if (maxAge && auth_time) {
+    // when user is logged in for a long time (more than maxAge, but jwt is still valid because it's not refreshed yet)
+    const isMaxAgeValid = Date.now() / 1000 - auth_time <= maxAge;
+    if (!isMaxAgeValid) return false;
+  }
+  const isACRValid = acr === _consts__WEBPACK_IMPORTED_MODULE_0__.ACR_VALUE;
+  const isAMRIncludesMFA = amr.indexOf(_consts__WEBPACK_IMPORTED_MODULE_0__.AMR_MFA_VALUE) !== -1;
+  const isAMRIncludesMethod = _consts__WEBPACK_IMPORTED_MODULE_0__.AMR_ADDITIONAL_VALUE.find(method => amr.indexOf(method)) !== undefined;
+  return isACRValid && isAMRIncludesMFA && isAMRIncludesMethod;
+};
+
+/***/ }),
+
 /***/ "../../dist/@frontegg/redux-store/auth/TeamState/index.js":
 /*!****************************************************************!*\
   !*** ../../dist/@frontegg/redux-store/auth/TeamState/index.js ***!
@@ -18861,6 +19054,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   "impersonateState": () => (/* reexport safe */ _ImpersonationState__WEBPACK_IMPORTED_MODULE_7__.impersonateState),
 /* harmony export */   "isAuthRoute": () => (/* reexport safe */ _Helpers__WEBPACK_IMPORTED_MODULE_45__.isAuthRoute),
 /* harmony export */   "isEntitlementsDeeplyEqual": () => (/* reexport safe */ _Entitlements__WEBPACK_IMPORTED_MODULE_37__.isEntitlementsDeeplyEqual),
+/* harmony export */   "isSteppedUp": () => (/* reexport safe */ _StepUpState__WEBPACK_IMPORTED_MODULE_3__.isSteppedUp),
 /* harmony export */   "loadEntitlements": () => (/* reexport safe */ _Entitlements__WEBPACK_IMPORTED_MODULE_37__.loadEntitlements),
 /* harmony export */   "loginActions": () => (/* reexport safe */ _LoginState__WEBPACK_IMPORTED_MODULE_2__.loginActions),
 /* harmony export */   "loginReducers": () => (/* reexport safe */ _LoginState__WEBPACK_IMPORTED_MODULE_2__.loginReducers),
@@ -24147,7 +24341,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */ });
 /* harmony import */ var _ThemeOptions__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ./ThemeOptions */ "../../dist/@frontegg/types/ThemeOptions/index.js");
 /* harmony import */ var _Metadata__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ./Metadata */ "../../dist/@frontegg/types/Metadata/index.js");
-/** @license Frontegg v6.155.0-alpha.2
+/** @license Frontegg v6.155.0-alpha.3
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
@@ -26492,7 +26686,13 @@ async function getMeAndEntitlements() {
   });
 }
 async function generateStepupSession(body) {
-  return (0,_fetch__WEBPACK_IMPORTED_MODULE_11__.Post)(`${_constants__WEBPACK_IMPORTED_MODULE_12__.urls.identity.auth.v1}/user/step-up/generate`, body);
+  const data = await (0,_fetch__WEBPACK_IMPORTED_MODULE_11__.Post)(`${_constants__WEBPACK_IMPORTED_MODULE_12__.urls.identity.auth.v1}/user/step-up/generate`, body);
+
+  if (!data.accessToken) {
+    return data;
+  }
+
+  return generateLoginResponseV3(data);
 }
 
 /***/ }),
@@ -27898,7 +28098,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _users_interfaces__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(/*! ./users/interfaces */ "../../node_modules/@frontegg/rest-api/users/interfaces.js");
 /* harmony import */ var _entitlements_interfaces__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(/*! ./entitlements/interfaces */ "../../node_modules/@frontegg/rest-api/entitlements/interfaces.js");
 /* harmony import */ var _security_center_interfaces__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(/*! ./security-center/interfaces */ "../../node_modules/@frontegg/rest-api/security-center/interfaces.js");
-/** @license Frontegg v3.1.48
+/** @license Frontegg v3.1.49
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.