@frontegg/js 7.124.0-alpha.1 → 7.125.0-alpha.0

package/FronteggApp/FronteggApp.js

@@ -19,7 +19,9 @@ export var FronteggApp = /*#__PURE__*/function () {
     var _this = this,
       _this$options$authOpt3,
       _options$authOptions,
-      _options$authOptions2;
+      _options$authOptions2,
+      _options$authOptions3,
+      _options$authOptions4;
     var iframeRendering = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
     var allowMultipleRenderers = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
     _classCallCheck(this, FronteggApp);
@@ -478,9 +480,10 @@ export var FronteggApp = /*#__PURE__*/function () {
     var contextHolder = ContextHolder["for"](appName);
     contextHolder.setAppName(appName);
     this.setEntitlementsOptions(_options.entitlementsOptions);
+    // Tenant selection needs the user and tenants loaded, so it takes precedence over skipUserLoading
     this.setSessionContext({
       enableSessionPerTenant: (_options$authOptions = _options.authOptions) == null ? void 0 : _options$authOptions.enableSessionPerTenant,
-      skipUserLoading: (_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading
+      skipUserLoading: ((_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading) && ((_options$authOptions3 = _options.authOptions) == null ? void 0 : (_options$authOptions4 = _options$authOptions3.tenantSelection) == null ? void 0 : _options$authOptions4.enabled) !== true
     });
 
     // pay attention: basename is used from the router base name, then if it's empty it will be the frontegg options basename

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v7.124.0-alpha.1
+/** @license Frontegg v7.125.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/node/FronteggApp/FronteggApp.js

@@ -26,7 +26,9 @@ var FronteggApp = /*#__PURE__*/function () {
     var _this = this,
       _this$options$authOpt3,
       _options$authOptions,
-      _options$authOptions2;
+      _options$authOptions2,
+      _options$authOptions3,
+      _options$authOptions4;
     var iframeRendering = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
     var allowMultipleRenderers = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
     (0, _classCallCheck2["default"])(this, FronteggApp);
@@ -485,9 +487,10 @@ var FronteggApp = /*#__PURE__*/function () {
     var contextHolder = FronteggRestApi.ContextHolder["for"](appName);
     contextHolder.setAppName(appName);
     this.setEntitlementsOptions(_options.entitlementsOptions);
+    // Tenant selection needs the user and tenants loaded, so it takes precedence over skipUserLoading
     this.setSessionContext({
       enableSessionPerTenant: (_options$authOptions = _options.authOptions) == null ? void 0 : _options$authOptions.enableSessionPerTenant,
-      skipUserLoading: (_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading
+      skipUserLoading: ((_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading) && ((_options$authOptions3 = _options.authOptions) == null ? void 0 : (_options$authOptions4 = _options$authOptions3.tenantSelection) == null ? void 0 : _options$authOptions4.enabled) !== true
     });
 
     // pay attention: basename is used from the router base name, then if it's empty it will be the frontegg options basename

package/node/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v7.124.0-alpha.1
+/** @license Frontegg v7.125.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/node/version.js

@@ -5,6 +5,6 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports["default"] = void 0;
 var _default = {
-  cdnVersion: '7.124.0-alpha.1'
+  cdnVersion: '7.125.0-alpha.0'
 };
 exports["default"] = _default;

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@frontegg/js",
-  "version": "7.124.0-alpha.1",
+  "version": "7.125.0-alpha.0",
   "main": "./node/index.js",
   "license": "MIT",
   "author": "Frontegg LTD",
   "dependencies": {
     "@babel/runtime": "^7.18.6",
-    "@frontegg/types": "7.124.0-alpha.1"
+    "@frontegg/types": "7.125.0-alpha.0"
   },
   "browserslist": {
     "production": [

package/umd/frontegg.development.js

@@ -383,7 +383,9 @@ var FronteggApp = /*#__PURE__*/function () {
     var _this = this,
       _this$options$authOpt3,
       _options$authOptions,
-      _options$authOptions2;
+      _options$authOptions2,
+      _options$authOptions3,
+      _options$authOptions4;
     var iframeRendering = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
     var allowMultipleRenderers = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
     (0,_babel_runtime_helpers_esm_classCallCheck__WEBPACK_IMPORTED_MODULE_2__["default"])(this, FronteggApp);
@@ -842,9 +844,10 @@ var FronteggApp = /*#__PURE__*/function () {
     var contextHolder = _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_17__.ContextHolder["for"](appName);
     contextHolder.setAppName(appName);
     this.setEntitlementsOptions(_options.entitlementsOptions);
+    // Tenant selection needs the user and tenants loaded, so it takes precedence over skipUserLoading
     this.setSessionContext({
       enableSessionPerTenant: (_options$authOptions = _options.authOptions) == null ? void 0 : _options$authOptions.enableSessionPerTenant,
-      skipUserLoading: (_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading
+      skipUserLoading: ((_options$authOptions2 = _options.authOptions) == null ? void 0 : _options$authOptions2.skipUserLoading) && ((_options$authOptions3 = _options.authOptions) == null ? void 0 : (_options$authOptions4 = _options$authOptions3.tenantSelection) == null ? void 0 : _options$authOptions4.enabled) !== true
     });
 
     // pay attention: basename is used from the router base name, then if it's empty it will be the frontegg options basename
@@ -1924,7 +1927,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   "default": () => (__WEBPACK_DEFAULT_EXPORT__)
 /* harmony export */ });
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = ({
-  cdnVersion: '7.124.0-alpha.1'
+  cdnVersion: '7.125.0-alpha.0'
 });
 
 /***/ }),
@@ -14347,6 +14350,7 @@ const _excluded = ["callback"],
 
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = ((store, api, sharedActions) => {
   const actions = sharedActions;
+  let pendingRoleAssignmentPolicyRequest = null;
 
   /**
    * @protected
@@ -14440,6 +14444,9 @@ const _excluded = ["callback"],
   const setSecurityPolicyAuthStrategyPublicState = state => {
     Object.assign(store.auth.securityPolicyState.publicAuthStrategyPolicy, state);
   };
+  const setRoleAssignmentPolicyState = state => {
+    Object.assign(store.auth.securityPolicyState.roleAssignmentPolicy, state);
+  };
   const resetSecurityPolicyState = () => {
     (0,_helpers__WEBPACK_IMPORTED_MODULE_2__.deepResetState)(store, ['auth', 'securityPolicyState'], _state__WEBPACK_IMPORTED_MODULE_3__.initialState);
   };
@@ -14492,6 +14499,34 @@ const _excluded = ["callback"],
       });
     }
   };
+  const loadRoleAssignmentPolicy = async payload => {
+    // Several role pickers can mount at once, all before the first response lands.
+    // Share the in-flight request so they do not each trigger their own call.
+    if (pendingRoleAssignmentPolicyRequest) {
+      return pendingRoleAssignmentPolicyRequest;
+    }
+    setRoleAssignmentPolicyState({
+      loading: true,
+      error: null
+    });
+    pendingRoleAssignmentPolicyRequest = (async () => {
+      try {
+        const policy = await (0,_helpers__WEBPACK_IMPORTED_MODULE_2__.retryIfNeeded)(() => api.auth.getRoleAssignmentPolicy(), payload == null ? void 0 : payload.retryConfig);
+        setRoleAssignmentPolicyState({
+          policy,
+          loading: false
+        });
+      } catch (e) {
+        setRoleAssignmentPolicyState({
+          error: (0,_helpers__WEBPACK_IMPORTED_MODULE_4__.errorHandler)(e),
+          loading: false
+        });
+      } finally {
+        pendingRoleAssignmentPolicyRequest = null;
+      }
+    })();
+    return pendingRoleAssignmentPolicyRequest;
+  };
   const loadVendorPasswordConfig = async payload => {
     setSecurityPolicyPasswordState({
       loading: true,
@@ -14806,10 +14841,12 @@ const _excluded = ["callback"],
     resetSecurityPolicyState,
     setSecurityPolicyPasswordState,
     setSecurityPolicyAuthStrategyPublicState,
+    setRoleAssignmentPolicyState,
     // actions
     loadSecurityPolicy,
     loadGlobalSecurityPolicy,
     loadPublicSecurityPolicy,
+    loadRoleAssignmentPolicy,
     loadVendorPasswordConfig,
     loadSecurityPolicyMfa,
     loadSecurityPolicyVendorMfa,
@@ -14891,6 +14928,9 @@ const initialState = {
   publicPolicy: {
     loading: false
   },
+  roleAssignmentPolicy: {
+    loading: false
+  },
   vendorMfaPolicy: {
     loading: true
   },
@@ -21089,7 +21129,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _subscriptions_interfaces__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ./subscriptions/interfaces */ "../../dist/@frontegg/redux-store/subscriptions/interfaces.js");
 /* harmony import */ var _vendor__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(/*! ./vendor */ "../../dist/@frontegg/redux-store/vendor/index.js");
 /* harmony import */ var _audits__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(/*! ./audits */ "../../dist/@frontegg/redux-store/audits/index.js");
-/** @license Frontegg v7.124.0-alpha.1
+/** @license Frontegg v7.125.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
@@ -23511,7 +23551,7 @@ const _excluded = ["callback"],
 
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = ((store, api, actions) => {
   const originalActions = (0,_auth_Security_SecurityPolicyState__WEBPACK_IMPORTED_MODULE_2__["default"])(store, api, actions);
-  const mockedActions = (0,_helpers__WEBPACK_IMPORTED_MODULE_3__.mockActionsExpect)(originalActions, ['setSecurityPolicyState', 'setSecurityPolicyGlobalState', 'setSecurityPolicyPublicState', 'setSecurityPolicyMfaState', 'setSecurityPolicyVendorMfaState', 'setSecurityPolicyLockoutState', 'setSecurityPolicyVendorLockoutState', 'setSecurityPolicyCaptchaState', 'setSecurityPolicyPasswordHistoryState', 'setSecurityPolicyVendorPasswordHistoryState', 'resetSecurityPolicyState', 'setSecurityPolicyPasswordState', 'setSecurityPolicyAuthStrategyPublicState']);
+  const mockedActions = (0,_helpers__WEBPACK_IMPORTED_MODULE_3__.mockActionsExpect)(originalActions, ['setSecurityPolicyState', 'setSecurityPolicyGlobalState', 'setSecurityPolicyPublicState', 'setSecurityPolicyMfaState', 'setSecurityPolicyVendorMfaState', 'setSecurityPolicyLockoutState', 'setSecurityPolicyVendorLockoutState', 'setSecurityPolicyCaptchaState', 'setSecurityPolicyPasswordHistoryState', 'setSecurityPolicyVendorPasswordHistoryState', 'resetSecurityPolicyState', 'setSecurityPolicyPasswordState', 'setSecurityPolicyAuthStrategyPublicState', 'setRoleAssignmentPolicyState']);
   mockedActions.loadSecurityPolicy = async () => {
     mockedActions.setSecurityPolicyGlobalState({
       loading: true,
@@ -23541,6 +23581,25 @@ const _excluded = ["callback"],
       });
     }
   };
+  mockedActions.loadRoleAssignmentPolicy = async () => {
+    mockedActions.setRoleAssignmentPolicyState({
+      loading: true,
+      error: null
+    });
+    try {
+      mockedActions.setRoleAssignmentPolicyState({
+        policy: {
+          restrictEqualLevelRoleAssignment: false
+        },
+        loading: false
+      });
+    } catch (e) {
+      mockedActions.setRoleAssignmentPolicyState({
+        error: (0,_helpers__WEBPACK_IMPORTED_MODULE_6__.errorHandler)(e),
+        loading: false
+      });
+    }
+  };
   mockedActions.saveSecurityPolicyMfa = async payload => {
     var _newSecurityPolicy$id;
     const {
@@ -24717,6 +24776,7 @@ const publicSecurityPolicy = {
   allowNotVerifiedUsersLogin: false,
   apiTokensEnabled: true,
   forcePermissions: false,
+  restrictEqualLevelRoleAssignment: false,
   authStrategy: _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_1__.AuthStrategyEnum.EmailAndPassword,
   machineToMachineAuthStrategy: _frontegg_rest_api__WEBPACK_IMPORTED_MODULE_1__.MachineToMachineAuthStrategy.ClientCredentials
 };
@@ -29036,11 +29096,9 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */ });
 /* harmony import */ var _babel_runtime_helpers_esm_extends__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! @babel/runtime/helpers/esm/extends */ "../../node_modules/@babel/runtime/helpers/esm/extends.js");
 /* harmony import */ var _ContextHolder__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ./ContextHolder */ "../../dist/@frontegg/rest-api/ContextHolder/index.js");
-/* harmony import */ var _error__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ./error */ "../../dist/@frontegg/rest-api/error.js");
-/* harmony import */ var _constants__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ./constants */ "../../dist/@frontegg/rest-api/constants.js");
-/* harmony import */ var _interfaces__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ./interfaces */ "../../dist/@frontegg/rest-api/interfaces.js");
-/* harmony import */ var _jwt__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ./jwt */ "../../dist/@frontegg/rest-api/jwt.js");
-
+/* harmony import */ var _error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(/*! ./error */ "../../dist/@frontegg/rest-api/error.js");
+/* harmony import */ var _constants__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/*! ./constants */ "../../dist/@frontegg/rest-api/constants.js");
+/* harmony import */ var _interfaces__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ./interfaces */ "../../dist/@frontegg/rest-api/interfaces.js");
 
 
 
@@ -29113,20 +29171,6 @@ class FetchClient {
       }
       return output;
     };
-    this.getApplicationId = (context, accessToken) => {
-      if (context.appId) {
-        return context.appId;
-      }
-      if (!accessToken) {
-        return undefined;
-      }
-      try {
-        const decodedContent = (0,_jwt__WEBPACK_IMPORTED_MODULE_2__.jwtDecode)(accessToken);
-        return (decodedContent == null ? void 0 : decodedContent.applicationId) || undefined;
-      } catch {
-        return undefined;
-      }
-    };
     this.buildRequestHeaders = async contentType => {
       var _context$tokenResolve;
       const fronteggContext = this.getFronteggContext();
@@ -29135,21 +29179,17 @@ class FetchClient {
       const authToken = await ((_context$tokenResolve = context == null ? void 0 : context.tokenResolver) != null ? _context$tokenResolve : fronteggContext.getAccessToken)();
       const requestSource = fronteggContext.getRequestSource();
       const scopedTenant = FetchClient.getScopedTenant();
-      const applicationId = this.getApplicationId(context, authToken);
       if (contentType) {
-        headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.contentType] = contentType;
+        headers[_interfaces__WEBPACK_IMPORTED_MODULE_2__.fronteggHeaders.contentType] = contentType;
       }
       if (requestSource) {
-        headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.source] = requestSource;
+        headers[_interfaces__WEBPACK_IMPORTED_MODULE_2__.fronteggHeaders.source] = requestSource;
       }
       if (authToken) {
         headers.Authorization = `Bearer ${authToken}`;
       }
-      if (applicationId) {
-        headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.applicationId] = applicationId;
-      }
       if (scopedTenant) {
-        headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.scopedTenant] = scopedTenant;
+        headers[_interfaces__WEBPACK_IMPORTED_MODULE_2__.fronteggHeaders.scopedTenant] = scopedTenant;
       }
       for (const additionalHeader of await this.getAdditionalHeaders(context)) {
         headers[`${additionalHeader.key}`] = `${additionalHeader.value}`;
@@ -29158,7 +29198,7 @@ class FetchClient {
     };
     this.getResponseTraceId = response => {
       var _response$headers, _response$headers$get;
-      return response == null ? void 0 : (_response$headers = response.headers) == null ? void 0 : (_response$headers$get = _response$headers.get) == null ? void 0 : _response$headers$get.call(_response$headers, _constants__WEBPACK_IMPORTED_MODULE_4__.FRONTEGG_TRACE_ID);
+      return response == null ? void 0 : (_response$headers = response.headers) == null ? void 0 : (_response$headers$get = _response$headers.get) == null ? void 0 : _response$headers$get.call(_response$headers, _constants__WEBPACK_IMPORTED_MODULE_3__.FRONTEGG_TRACE_ID);
     };
     this.sendRequest = async opts => {
       var _opts$method, _ref, _opts$credentials;
@@ -29181,7 +29221,7 @@ class FetchClient {
       if (!response.ok) {
         var _errorMessage, _errorMessage2, _errorMessage3, _errorMessage4, _context$logLevel, _context$logLevel2, _errorCode;
         if (response.status === 413) {
-          throw new _error__WEBPACK_IMPORTED_MODULE_5__.FronteggApiError('Error request is too large', response.status, this.getResponseTraceId(response), undefined);
+          throw new _error__WEBPACK_IMPORTED_MODULE_4__.FronteggApiError('Error request is too large', response.status, this.getResponseTraceId(response), undefined);
         }
         let errorMessage;
         let errorCode;
@@ -29213,7 +29253,7 @@ class FetchClient {
           errorMessage = `Error ${response.status} - ${response.statusText}`;
         }
         if (response.status >= 400 && response.status < 500 && ['warn'].includes((_context$logLevel = context.logLevel) != null ? _context$logLevel : '')) console.warn(errorMessage);else if (response.status === 500 && ['warn', 'error'].includes((_context$logLevel2 = context.logLevel) != null ? _context$logLevel2 : '')) console.error(errorMessage);
-        throw new _error__WEBPACK_IMPORTED_MODULE_5__.FronteggApiError(isJsonResponse ? errorMessage : _constants__WEBPACK_IMPORTED_MODULE_4__.GENERIC_ERROR_MESSAGE, response.status, this.getResponseTraceId(response), (_errorCode = errorCode) != null ? _errorCode : _constants__WEBPACK_IMPORTED_MODULE_4__.GENERIC_ERROR_CODE, errorContext, errors, errorCodes);
+        throw new _error__WEBPACK_IMPORTED_MODULE_4__.FronteggApiError(isJsonResponse ? errorMessage : _constants__WEBPACK_IMPORTED_MODULE_3__.GENERIC_ERROR_MESSAGE, response.status, this.getResponseTraceId(response), (_errorCode = errorCode) != null ? _errorCode : _constants__WEBPACK_IMPORTED_MODULE_3__.GENERIC_ERROR_CODE, errorContext, errors, errorCodes);
       }
       if (opts.responseType === 'stream') {
         return response.body;
@@ -29323,10 +29363,10 @@ FetchClient.getMetadataHeaders = context => {
   var _context$metadataHead, _context$metadataHead2;
   const headers = {};
   if (context != null && (_context$metadataHead = context.metadataHeaders) != null && _context$metadataHead.fronteggSdkVersion) {
-    headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.fronteggSdkVersion] = context.metadataHeaders.fronteggSdkVersion;
+    headers[_interfaces__WEBPACK_IMPORTED_MODULE_2__.fronteggHeaders.fronteggSdkVersion] = context.metadataHeaders.fronteggSdkVersion;
   }
   if (context != null && (_context$metadataHead2 = context.metadataHeaders) != null && _context$metadataHead2.framework) {
-    headers[_interfaces__WEBPACK_IMPORTED_MODULE_3__.fronteggHeaders.frameWork] = context.metadataHeaders.framework;
+    headers[_interfaces__WEBPACK_IMPORTED_MODULE_2__.fronteggHeaders.frameWork] = context.metadataHeaders.framework;
   }
   return headers;
 };
@@ -30100,6 +30140,9 @@ class AuthenticationApi extends _BaseApiClient__WEBPACK_IMPORTED_MODULE_6__.Base
     this.getVendorConfig = async () => {
       return this.get(`${_constants__WEBPACK_IMPORTED_MODULE_11__.urls.identity.configurations.v1}/public`);
     };
+    this.getRoleAssignmentPolicy = async () => {
+      return this.get(`${_constants__WEBPACK_IMPORTED_MODULE_11__.urls.identity.configurations.v1}/role-assignment-policy`);
+    };
     this.signUp = async (signUpUrl, body) => {
       const {
         shouldActivate,
@@ -30956,8 +30999,10 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   FRONTEGG_TRACE_ID: () => (/* binding */ FRONTEGG_TRACE_ID),
 /* harmony export */   GENERIC_ERROR_CODE: () => (/* binding */ GENERIC_ERROR_CODE),
 /* harmony export */   GENERIC_ERROR_MESSAGE: () => (/* binding */ GENERIC_ERROR_MESSAGE),
+/* harmony export */   INVALID_SSO_EMAIL_DOMAIN_ERROR_CODE: () => (/* binding */ INVALID_SSO_EMAIL_DOMAIN_ERROR_CODE),
 /* harmony export */   INVITATION_LINK_CREATION_TENANT_LOCKED_ERROR_CODE: () => (/* binding */ INVITATION_LINK_CREATION_TENANT_LOCKED_ERROR_CODE),
 /* harmony export */   INVITATION_TENANT_LOCKED_ERROR_CODE: () => (/* binding */ INVITATION_TENANT_LOCKED_ERROR_CODE),
+/* harmony export */   SSO_EMAIL_MISMATCH_ERROR_CODE: () => (/* binding */ SSO_EMAIL_MISMATCH_ERROR_CODE),
 /* harmony export */   urls: () => (/* binding */ urls)
 /* harmony export */ });
 const urls = {
@@ -31283,6 +31328,12 @@ const INVITATION_TENANT_LOCKED_ERROR_CODE = 'ER-01239';
 // locked tenant (HTTP 400 Bad Request, IdentityErrorCodes.InvitationLinkCreationTenantLockedException).
 const INVITATION_LINK_CREATION_TENANT_LOCKED_ERROR_CODE = 'ER-01240';
 
+// Returned on the SAML callback when the email domain returned by the IdP is not configured for SSO.
+const INVALID_SSO_EMAIL_DOMAIN_ERROR_CODE = 'ER-01248';
+
+// Returned on the SAML callback when the email returned by the IdP differs from the one that started the login.
+const SSO_EMAIL_MISMATCH_ERROR_CODE = 'ER-01249';
+
 /***/ }),
 
 /***/ "../../dist/@frontegg/rest-api/directory/index.js":
@@ -31697,6 +31748,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   GetUsersFilterPreset: () => (/* reexport safe */ _users_interfaces__WEBPACK_IMPORTED_MODULE_14__.GetUsersFilterPreset),
 /* harmony export */   GroupManagedByEnum: () => (/* reexport safe */ _groups_enums__WEBPACK_IMPORTED_MODULE_13__.GroupManagedByEnum),
 /* harmony export */   GroupRelations: () => (/* reexport safe */ _groups_enums__WEBPACK_IMPORTED_MODULE_13__.GroupRelations),
+/* harmony export */   INVALID_SSO_EMAIL_DOMAIN_ERROR_CODE: () => (/* reexport safe */ _constants__WEBPACK_IMPORTED_MODULE_18__.INVALID_SSO_EMAIL_DOMAIN_ERROR_CODE),
 /* harmony export */   INVITATION_LINK_CREATION_TENANT_LOCKED_ERROR_CODE: () => (/* reexport safe */ _constants__WEBPACK_IMPORTED_MODULE_18__.INVITATION_LINK_CREATION_TENANT_LOCKED_ERROR_CODE),
 /* harmony export */   INVITATION_TENANT_LOCKED_ERROR_CODE: () => (/* reexport safe */ _constants__WEBPACK_IMPORTED_MODULE_18__.INVITATION_TENANT_LOCKED_ERROR_CODE),
 /* harmony export */   ISubscriptionCancellationPolicy: () => (/* reexport safe */ _subscriptions__WEBPACK_IMPORTED_MODULE_48__.ISubscriptionCancellationPolicy),
@@ -31717,6 +31769,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   RecommendationSeverity: () => (/* reexport safe */ _security_center_interfaces__WEBPACK_IMPORTED_MODULE_16__.RecommendationSeverity),
 /* harmony export */   RequestSource: () => (/* reexport safe */ _interfaces__WEBPACK_IMPORTED_MODULE_0__.RequestSource),
 /* harmony export */   RestrictionType: () => (/* reexport safe */ _auth_interfaces__WEBPACK_IMPORTED_MODULE_1__.RestrictionType),
+/* harmony export */   SSO_EMAIL_MISMATCH_ERROR_CODE: () => (/* reexport safe */ _constants__WEBPACK_IMPORTED_MODULE_18__.SSO_EMAIL_MISMATCH_ERROR_CODE),
 /* harmony export */   ScimConnectionSource: () => (/* reexport safe */ _directory_interfaces__WEBPACK_IMPORTED_MODULE_12__.ScimConnectionSource),
 /* harmony export */   SecondaryAuthStrategy: () => (/* reexport safe */ _auth_interfaces__WEBPACK_IMPORTED_MODULE_1__.SecondaryAuthStrategy),
 /* harmony export */   SecurityCategory: () => (/* reexport safe */ _security_center_interfaces__WEBPACK_IMPORTED_MODULE_16__.SecurityCategory),
@@ -31795,7 +31848,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _security_center_interfaces__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(/*! ./security-center/interfaces */ "../../dist/@frontegg/rest-api/security-center/interfaces.js");
 /* harmony import */ var _applications_interfaces__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(/*! ./applications/interfaces */ "../../dist/@frontegg/rest-api/applications/interfaces.js");
 /* harmony import */ var _constants__WEBPACK_IMPORTED_MODULE_18__ = __webpack_require__(/*! ./constants */ "../../dist/@frontegg/rest-api/constants.js");
-/** @license Frontegg v7.124.0-alpha.1
+/** @license Frontegg v7.125.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
@@ -31971,8 +32024,7 @@ const fronteggHeaders = {
   fronteggSdkVersion: 'x-frontegg-sdk',
   contentType: 'Content-Type',
   source: 'frontegg-source',
-  scopedTenant: 'frontegg-scoped-tenant',
-  applicationId: 'frontegg-application-id'
+  scopedTenant: 'frontegg-scoped-tenant'
 };
 let RequestSource;
 (function (RequestSource) {
@@ -34638,7 +34690,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */ });
 /* harmony import */ var _ThemeOptions__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ./ThemeOptions */ "../../dist/@frontegg/types/ThemeOptions/index.js");
 /* harmony import */ var _Metadata__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ./Metadata */ "../../dist/@frontegg/types/Metadata/index.js");
-/** @license Frontegg v7.124.0-alpha.1
+/** @license Frontegg v7.125.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.