@frontegg/redux-store 4.39.1 → 4.39.2-dashboard

package/audits/index.js

@@ -1,5 +1,5 @@
-import { b as auditsStoreName } from '../constants-f7891ee3.js';
-export { b as auditsStoreName } from '../constants-f7891ee3.js';
+import { b as auditsStoreName } from '../constants-4d9682b2.js';
+export { b as auditsStoreName } from '../constants-4d9682b2.js';
 import { createAction, createSlice } from '@reduxjs/toolkit';
 import { takeEvery, select as select$1, put, call, all } from 'redux-saga/effects';
 import { api } from '@frontegg/rest-api';

package/auth/LoginState/index.d.ts

@@ -1,5 +1,5 @@
 import { ILogin, ILoginWithMfa, IPasswordlessPostLogin, IPasswordlessPreLogin, IPostLogin, IPreLogin, IRecoverMFAToken } from '@frontegg/rest-api';
-import { LoginState } from './interfaces';
+import { HostedLoginCallback, LoginState } from './interfaces';
 import { WithCallback } from '../../interfaces';
 import { IVerifyInviteToken } from '@frontegg/rest-api';
 declare const loginState: LoginState;
@@ -71,6 +71,8 @@ declare const reducers: {
 };
 declare const actions: {
     requestAuthorize: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[(boolean | undefined)?], boolean, string, never, never>;
+    requestHostedLoginAuthorize: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
+    handleHostedLoginCallback: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[HostedLoginCallback], HostedLoginCallback, string, never, never>;
     afterAuthNavigation: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
     preLogin: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[WithCallback<IPreLogin & {
         recaptchaToken?: string | undefined;
@@ -100,6 +102,8 @@ declare type DispatchedActions = {
     setLoginState: (state: Partial<LoginState>) => void;
     resetLoginState: () => void;
     requestAuthorize: (payload?: boolean) => void;
+    requestHostedLoginAuthorize: () => void;
+    handleHostedLoginCallback: (payload: HostedLoginCallback) => void;
     afterAuthNavigation: () => void;
     preLogin: (payload: WithCallback<IPreLogin & {
         recaptchaToken?: string;

package/auth/LoginState/interfaces.d.ts

@@ -28,3 +28,8 @@ export interface LoginState {
     inviteTokenError?: string;
     isNewUser?: boolean;
 }
+export interface HostedLoginCallback {
+    code: string;
+    state?: string;
+    nonce?: string;
+}

package/auth/LoginState/saga.d.ts

@@ -1,5 +1,5 @@
 import { CallEffect } from 'redux-saga/effects';
-import { ILoginResponse, ISamlMetadata, IAllowedToRememberMfaDevice } from '@frontegg/rest-api';
+import { IAllowedToRememberMfaDevice, ILoginResponse, ISamlMetadata } from '@frontegg/rest-api';
 import { AuthState } from '../interfaces';
 import { LoginStep } from './interfaces';
 export declare function afterAuthNavigation(): Generator<import("redux-saga/effects").SelectEffect | CallEffect<true>, void, {
@@ -19,7 +19,7 @@ export declare function loadSSOPublicConfigurationFunction(): Generator<import("
     isActive: any;
 }>;
 export declare const isMfaRequired: (user: ILoginResponse) => boolean;
-export declare function getMfaRequiredState(user: any): Generator<CallEffect<IAllowedToRememberMfaDevice>, {
+export declare function getMfaRequiredState(user: any): Generator<import("redux-saga/effects").SelectEffect | CallEffect<IAllowedToRememberMfaDevice>, {
     loginState: {
         mfaToken: any;
         mfaRequired: any;
@@ -30,10 +30,15 @@ export declare function getMfaRequiredState(user: any): Generator<CallEffect<IAl
         tenants: never[];
         allowRememberMfaDevice: any;
         mfaDeviceExpiration: any;
+        ssoRedirectUrl?: string | undefined;
+        email?: string | undefined;
+        inviteTokenTenantName?: string | undefined;
+        inviteTokenError?: string | undefined;
+        isNewUser?: boolean | undefined;
     };
     user: undefined;
     isAuthenticated: boolean;
-}, {
+}, AuthState & {
     isAllowedToRemember: any;
     mfaDeviceExpiration: any;
 }>;
@@ -43,7 +48,7 @@ export declare function refreshToken(): Generator<import("redux-saga/effects").S
 }> | import("redux-saga/effects").PutEffect<{
     payload: Partial<AuthState>;
     type: string;
-}> | Generator<CallEffect<IAllowedToRememberMfaDevice>, {
+}> | Generator<import("redux-saga/effects").SelectEffect | CallEffect<IAllowedToRememberMfaDevice>, {
     loginState: {
         mfaToken: any;
         mfaRequired: any;
@@ -54,10 +59,15 @@ export declare function refreshToken(): Generator<import("redux-saga/effects").S
         tenants: never[];
         allowRememberMfaDevice: any;
         mfaDeviceExpiration: any;
+        ssoRedirectUrl?: string | undefined;
+        email?: string | undefined;
+        inviteTokenTenantName?: string | undefined;
+        inviteTokenError?: string | undefined;
+        isNewUser?: boolean | undefined;
     };
     user: undefined;
     isAuthenticated: boolean;
-}, {
+}, AuthState & {
     isAllowedToRemember: any;
     mfaDeviceExpiration: any;
 }> | CallEffect<ILoginResponse> | import("redux-saga/effects").PutEffect<{
@@ -65,9 +75,7 @@ export declare function refreshToken(): Generator<import("redux-saga/effects").S
         callback?: ((data: import("@frontegg/rest-api").ITenantsResponse[] | null, error?: string | undefined) => void) | undefined;
     } | undefined;
     type: string;
-}>, void, {
-    routes: any;
-} & import("@frontegg/rest-api").IUserProfile & {
+}>, void, AuthState & import("@frontegg/rest-api").IUserProfile & {
     mfaRequired: boolean;
     accessToken: string;
     refreshToken: string;

package/auth/index.d.ts

@@ -170,6 +170,8 @@ declare const _default: {
         loginViaSocialLogin: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("@frontegg/rest-api").ILoginViaSocialLogin], import("@frontegg/rest-api").ILoginViaSocialLogin, string, never, never>;
         setSocialLoginError: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("@frontegg/rest-api").ISetSocialLoginError], import("@frontegg/rest-api").ISetSocialLoginError, string, never, never>;
         requestAuthorize: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[(boolean | undefined)?], boolean, string, never, never>;
+        requestHostedLoginAuthorize: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
+        handleHostedLoginCallback: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("./LoginState/interfaces").HostedLoginCallback], import("./LoginState/interfaces").HostedLoginCallback, string, never, never>;
         afterAuthNavigation: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
         preLogin: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("../interfaces").WithCallback<import("@frontegg/rest-api").IPreLogin & {
             recaptchaToken?: string | undefined;

package/auth/index.js

@@ -1,11 +1,11 @@
 import { createAction, createSlice } from '@reduxjs/toolkit';
-import { a as authStoreName, F as FRONTEGG_AFTER_AUTH_REDIRECT_URL } from '../constants-f7891ee3.js';
-export { a as authStoreName } from '../constants-f7891ee3.js';
-import { __rest } from 'tslib';
+import { a as authStoreName, F as FRONTEGG_AFTER_AUTH_REDIRECT_URL, H as HOSTED_LOGIN_VERIFIER_KEY } from '../constants-4d9682b2.js';
+export { a as authStoreName } from '../constants-4d9682b2.js';
+import { __awaiter, __rest } from 'tslib';
 import { takeLeading, put, select, call, takeEvery, delay as delay$1, all, retry, takeLatest } from 'redux-saga/effects';
 import { AuthStrategyEnum, api, ContextHolder } from '@frontegg/rest-api';
 export { AuthStrategyEnum } from '@frontegg/rest-api';
-import { l as loadVendorPublicInfo } from '../saga-afaced62.js';
+import { l as loadVendorPublicInfo } from '../saga-b6529ffb.js';
 import { v4 } from 'uuid';
 
 const resetStateByKey = (key, initialState) => (state) => (Object.assign(Object.assign({}, state), { [key]: initialState[key] }));
@@ -65,6 +65,8 @@ const reducers$e = {
 };
 const actions$f = {
     requestAuthorize: createAction(`${authStoreName}/requestAuthorize`, (payload = false) => ({ payload })),
+    requestHostedLoginAuthorize: createAction(`${authStoreName}/requestHostedLoginAuthorize`),
+    handleHostedLoginCallback: createAction(`${authStoreName}/handleHostedLoginCallback`, (payload) => ({ payload })),
     afterAuthNavigation: createAction(`${authStoreName}/afterAuthNavigation`),
     preLogin: createAction(`${authStoreName}/preLogin`, (payload) => ({ payload })),
     postLogin: createAction(`${authStoreName}/postLogin`, (payload) => ({ payload })),
@@ -479,7 +481,8 @@ const initialState = Object.assign({ routes: {
         socialLoginCallbackUrl: '/account/social/success',
         signUpUrl: '/account/sign-up',
         oidcRedirectUrl: '/account/oidc/callback',
-        magicLinkCallbackUrl: '/account/login/magic-link'
+        magicLinkCallbackUrl: '/account/login/magic-link',
+        hostedLoginRedirectUrl: '/oauth/callback'
     }, onRedirectTo: () => { } }, reinitializeState);
 
 const { reducer, actions: sliceActions } = createSlice({
@@ -505,6 +508,24 @@ function omitProps(props, keys) {
     });
     return newProps;
 }
+function generateCodeChallenge(codeVerifier) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const digest = yield crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+        // @ts-ignore
+        return btoa(String.fromCharCode(...new Uint8Array(digest)))
+            .replace(/=/g, '')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_');
+    });
+}
+function createRandomString(length = 16) {
+    let text = '';
+    const possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+    for (let i = 0; i < length; i++) {
+        text += possible.charAt(Math.floor(Math.random() * possible.length));
+    }
+    return text;
+}
 const readFileAsText = (file) => new Promise((resolve, reject) => {
     const reader = new FileReader();
     reader.readAsText(file);
@@ -1028,6 +1049,7 @@ const isMfaRequired = (user) => {
 function* getMfaRequiredState(user) {
     let setMfaState = {};
     let step = LoginStep.loginWithTwoFactor;
+    const { loginState } = yield select((state) => state.auth);
     const { isAllowedToRemember, mfaDeviceExpiration } = yield call(api.auth.checkIfAllowToRememberMfaDevice, user.mfaToken);
     if (user.hasOwnProperty('mfaEnrolled') && !user.mfaEnrolled) {
         setMfaState = {
@@ -1041,22 +1063,12 @@ function* getMfaRequiredState(user) {
         };
         step = LoginStep.forceTwoFactor;
     }
-    return Object.assign(Object.assign({ user: undefined, isAuthenticated: false }, setMfaState), { loginState: {
-            mfaToken: user.mfaToken,
-            mfaRequired: user.mfaRequired,
-            loading: false,
-            error: undefined,
-            step,
-            tenantsLoading: true,
-            tenants: [],
-            allowRememberMfaDevice: isAllowedToRemember,
-            mfaDeviceExpiration,
-        } });
+    return Object.assign(Object.assign({ user: undefined, isAuthenticated: false }, setMfaState), { loginState: Object.assign(Object.assign({}, loginState), { mfaToken: user.mfaToken, mfaRequired: user.mfaRequired, loading: false, error: undefined, step, tenantsLoading: true, tenants: [], allowRememberMfaDevice: isAllowedToRemember, mfaDeviceExpiration }) });
 }
 function* refreshToken() {
     try {
         const onRedirectTo = ContextHolder.onRedirectTo;
-        const { routes } = yield select((state) => state.auth);
+        const { routes, loginState } = yield select((state) => state.auth);
         const user = yield call(api.auth.refreshToken);
         if (isMfaRequired(user)) {
             const mfaRequiredState = yield getMfaRequiredState(user);
@@ -1066,9 +1078,14 @@ function* refreshToken() {
         else {
             yield put(actions.loadTenants());
             yield put(actions.setState({ user, isAuthenticated: true }));
-            if ([routes.loginUrl, routes.socialLoginCallbackUrl, routes.signupUrl, routes.oidcRedirectUrl].includes(window.location.pathname) ||
+            if ([routes.loginUrl, routes.socialLoginCallbackUrl, routes.signUpUrl, routes.oidcRedirectUrl].includes(window.location.pathname) ||
                 (window.location.pathname.endsWith(routes.activateUrl) && user.verified)) {
-                yield afterAuthNavigation();
+                if (loginState.isNewUser && routes.signUpSuccessUrl && routes.socialLoginCallbackUrl === window.location.pathname) {
+                    onRedirectTo(routes.signUpSuccessUrl, { refresh: routes.signUpSuccessUrl.startsWith('http') });
+                }
+                else {
+                    yield afterAuthNavigation();
+                }
             }
         }
     }
@@ -1093,6 +1110,47 @@ function* requestAuthorize({ payload: firstTime }) {
     yield all(calls);
     yield put(actions.setState({ isLoading: false }));
 }
+function* requestHostedLoginAuthorize() {
+    const { routes, baseUrl, clientId, onRedirectTo } = yield select((state) => (Object.assign({ routes: state.auth.routes, onRedirectTo: state.auth.onRedirectTo }, state.root.context)));
+    // Generate the relevant params for the redirect
+    const nonce = createRandomString();
+    const code_verifier = createRandomString();
+    const code_challenge = yield call(generateCodeChallenge, code_verifier);
+    // We are saving the verifier in session storage to be able to validate the response
+    sessionStorage.setItem(HOSTED_LOGIN_VERIFIER_KEY, code_verifier);
+    const redirectUrl = `${window.location.origin}${routes.hostedLoginRedirectUrl}`;
+    // Hard coded for now
+    const oauthUrl = `${baseUrl}/oauth/authorize`;
+    const params = {
+        response_type: 'code',
+        client_id: clientId || 'INVALID-CLIENT-ID',
+        scope: 'openid email profile',
+        redirect_uri: redirectUrl,
+        code_challenge: code_challenge,
+        code_challenge_method: 'S256',
+        nonce,
+    };
+    const searchParams = new URLSearchParams(params);
+    const url = `${oauthUrl}?${searchParams.toString()}`;
+    onRedirectTo(url, { refresh: true });
+}
+function* handleHostedLoginCallback({ payload }) {
+    // Hard coded for now
+    const code_verifier = sessionStorage.getItem(HOSTED_LOGIN_VERIFIER_KEY) || 'INVALID-CODE-VERIFIER';
+    const routes = yield select((state) => state.auth.routes);
+    const redirectUrl = `${window.location.origin}${routes.hostedLoginRedirectUrl}`;
+    const body = {
+        code: payload.code,
+        redirect_uri: redirectUrl,
+        code_verifier,
+        grant_type: 'authorization_code',
+    };
+    const user = yield call(api.auth.exchangeOAuthTokens, body);
+    // TODO: Validate nonce and aud
+    yield put(actions.setState({ user, isAuthenticated: true }));
+    yield put(actions.loadTenants());
+    yield afterAuthNavigation();
+}
 function* passwordlessPreLogin(_a) {
     var _b = _a.payload, { callback } = _b, payload = __rest(_b, ["callback"]);
     try {
@@ -1325,6 +1383,8 @@ function* silentLogout({ payload }) {
 }
 function* loginSagas() {
     yield takeLeading(actions.requestAuthorize, requestAuthorize);
+    yield takeLeading(actions.requestHostedLoginAuthorize, requestHostedLoginAuthorize);
+    yield takeLeading(actions.handleHostedLoginCallback, handleHostedLoginCallback);
     yield takeLeading(actions.preLogin, preLogin);
     yield takeLeading(actions.postLogin, postLogin);
     yield takeLeading(actions.login, login);
@@ -2448,6 +2508,7 @@ function* loginViaSocialLogin({ payload }) {
         const { email, isNewUser } = yield call(api.auth.loginViaSocialLogin, payload);
         yield put(actions.setLoginState({ email, isNewUser }));
         yield refreshToken();
+        yield put(actions.setSocialLoginsState({ loading: false }));
     }
     catch (e) {
         yield put(actions.setSocialLoginsState({ loading: false, error: (_a = e.message) !== null && _a !== void 0 ? _a : 'Failed to authenticate', firstLoad: false }));

package/auth/interfaces.d.ts

@@ -106,5 +106,9 @@ export declare type AuthPageRoutes = {
     * after sign up success url
     */
     signUpSuccessUrl?: string;
+    /**
+     * hosted login callback redirect url
+     */
+    hostedLoginRedirectUrl?: string;
 };
 export {};

package/auth/reducer.d.ts

@@ -144,6 +144,8 @@ declare const actions: {
     loginViaSocialLogin: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("@frontegg/rest-api").ILoginViaSocialLogin], import("@frontegg/rest-api").ILoginViaSocialLogin, string, never, never>;
     setSocialLoginError: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("@frontegg/rest-api").ISetSocialLoginError], import("@frontegg/rest-api").ISetSocialLoginError, string, never, never>;
     requestAuthorize: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[(boolean | undefined)?], boolean, string, never, never>;
+    requestHostedLoginAuthorize: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
+    handleHostedLoginCallback: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import(".").HostedLoginCallback], import(".").HostedLoginCallback, string, never, never>;
     afterAuthNavigation: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
     preLogin: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[import("../interfaces").WithCallback<import("@frontegg/rest-api").IPreLogin & {
         recaptchaToken?: string | undefined;

package/connectivity/index.js

@@ -1,5 +1,5 @@
-import { c as connectivityStoreName } from '../constants-f7891ee3.js';
-export { c as connectivityStoreName } from '../constants-f7891ee3.js';
+import { c as connectivityStoreName } from '../constants-4d9682b2.js';
+export { c as connectivityStoreName } from '../constants-4d9682b2.js';
 import { createAction, createSlice } from '@reduxjs/toolkit';
 import { __rest } from 'tslib';
 import { takeEvery, takeLatest, put, all, call, select } from 'redux-saga/effects';

package/{constants-f7891ee3.js → constants-4d9682b2.js}

@@ -1,8 +1,9 @@
 const FRONTEGG_AFTER_AUTH_REDIRECT_URL = 'FRONTEGG_AFTER_AUTH_REDIRECT_URL';
+const HOSTED_LOGIN_VERIFIER_KEY = 'HOSTED_LOGIN_VERIFIER_KEY';
 const authStoreName = 'auth';
 const connectivityStoreName = 'connectivity';
 const auditsStoreName = 'auditLogs';
 const subscriptionsStoreName = 'subscriptions';
 const vendorStoreName = 'vendor';
 
-export { FRONTEGG_AFTER_AUTH_REDIRECT_URL as F, authStoreName as a, auditsStoreName as b, connectivityStoreName as c, subscriptionsStoreName as s, vendorStoreName as v };
+export { FRONTEGG_AFTER_AUTH_REDIRECT_URL as F, HOSTED_LOGIN_VERIFIER_KEY as H, authStoreName as a, auditsStoreName as b, connectivityStoreName as c, subscriptionsStoreName as s, vendorStoreName as v };

package/constants.d.ts

@@ -1,4 +1,5 @@
 export declare const FRONTEGG_AFTER_AUTH_REDIRECT_URL = "FRONTEGG_AFTER_AUTH_REDIRECT_URL";
+export declare const HOSTED_LOGIN_VERIFIER_KEY = "HOSTED_LOGIN_VERIFIER_KEY";
 export declare const authStoreName = "auth";
 export declare const connectivityStoreName = "connectivity";
 export declare const auditsStoreName = "auditLogs";

package/helpers.d.ts

@@ -1,3 +1,5 @@
 export declare function omitProps<T>(props: any, keys: string[]): T;
 export declare function generateActionCreator(storeName: string): <Payload>(key: string, withPayload?: boolean | undefined) => import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[Payload], Payload, string, never, never> | import("@reduxjs/toolkit").ActionCreatorWithoutPayload<string>;
+export declare function generateCodeChallenge(codeVerifier: string): Promise<string>;
+export declare function createRandomString(length?: number): string;
 export declare const readFileAsText: (file: File) => Promise<string>;

package/index.d.ts

@@ -4,6 +4,7 @@ import { AuditsState } from './audits/interfaces';
 import { IConnectivityState } from './connectivity/interfaces';
 import { SubscriptionsState } from './subscriptions/interfaces';
 import { VendorState } from './vendor/interfaces';
+import { OldAuditsState } from './audits/backward-compatibility';
 export { default as auth } from './auth';
 export { default as audits } from './audits';
 export { default as connectivity } from './connectivity';
@@ -19,7 +20,8 @@ export * from './toolkit';
 export declare type FronteggState = {
     root: RootState;
     auth: AuthState;
-    audits: AuditsState;
+    auditLogs: AuditsState;
+    audits: OldAuditsState;
     connectivity: IConnectivityState;
     subscriptions: SubscriptionsState;
     vendor: VendorState;

package/index.js

@@ -5,9 +5,9 @@ export { CheckoutEvent, CheckoutStatus, PaymentMethodType, PaymentProvider, Subs
 export { default as vendor } from './vendor/index.js';
 export { createFronteggStore } from './toolkit/index.js';
 export { AuthStrategyEnum } from '@frontegg/rest-api';
-export { b as auditsStoreName, a as authStoreName, c as connectivityStoreName, s as subscriptionsStoreName, v as vendorStoreName } from './constants-f7891ee3.js';
+export { b as auditsStoreName, a as authStoreName, c as connectivityStoreName, s as subscriptionsStoreName, v as vendorStoreName } from './constants-4d9682b2.js';
 export { a as actions, d as defaultItemsPerPage, i as initialState, r as reducer, b as sagas, s as storeName } from './saga-7a267fe0.js';
-export { a as vendorActions, i as vendorInitialState, r as vendorReducers, s as vendorSagas } from './saga-afaced62.js';
+export { a as vendorActions, i as vendorInitialState, r as vendorReducers, s as vendorSagas } from './saga-b6529ffb.js';
 export { bindActionCreators, combineReducers, configureStore, createSelector, createSlice, getDefaultMiddleware } from '@reduxjs/toolkit';
 export { all, call, delay, put, select, takeEvery, takeLatest } from 'redux-saga/effects';
 export { default as createSagaMiddleware } from 'redux-saga';

package/node/audits/index.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var constants = require('../constants-b305f261.js');
+var constants = require('../constants-52e37c08.js');
 var toolkit = require('@reduxjs/toolkit');
 var effects = require('redux-saga/effects');
 var restApi = require('@frontegg/rest-api');

package/node/auth/index.js

@@ -4,10 +4,10 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var toolkit = require('@reduxjs/toolkit');
 var restApi = require('@frontegg/rest-api');
-var constants = require('../constants-b305f261.js');
+var constants = require('../constants-52e37c08.js');
 var tslib = require('tslib');
 var effects = require('redux-saga/effects');
-var saga = require('../saga-508b308b.js');
+var saga = require('../saga-633c17d2.js');
 var uuid = require('uuid');
 
 const resetStateByKey = (key, initialState) => (state) => (Object.assign(Object.assign({}, state), { [key]: initialState[key] }));
@@ -67,6 +67,8 @@ const reducers$e = {
 };
 const actions$f = {
     requestAuthorize: toolkit.createAction(`${constants.authStoreName}/requestAuthorize`, (payload = false) => ({ payload })),
+    requestHostedLoginAuthorize: toolkit.createAction(`${constants.authStoreName}/requestHostedLoginAuthorize`),
+    handleHostedLoginCallback: toolkit.createAction(`${constants.authStoreName}/handleHostedLoginCallback`, (payload) => ({ payload })),
     afterAuthNavigation: toolkit.createAction(`${constants.authStoreName}/afterAuthNavigation`),
     preLogin: toolkit.createAction(`${constants.authStoreName}/preLogin`, (payload) => ({ payload })),
     postLogin: toolkit.createAction(`${constants.authStoreName}/postLogin`, (payload) => ({ payload })),
@@ -481,7 +483,8 @@ const initialState = Object.assign({ routes: {
         socialLoginCallbackUrl: '/account/social/success',
         signUpUrl: '/account/sign-up',
         oidcRedirectUrl: '/account/oidc/callback',
-        magicLinkCallbackUrl: '/account/login/magic-link'
+        magicLinkCallbackUrl: '/account/login/magic-link',
+        hostedLoginRedirectUrl: '/oauth/callback'
     }, onRedirectTo: () => { } }, reinitializeState);
 
 const { reducer, actions: sliceActions } = toolkit.createSlice({
@@ -507,6 +510,24 @@ function omitProps(props, keys) {
     });
     return newProps;
 }
+function generateCodeChallenge(codeVerifier) {
+    return tslib.__awaiter(this, void 0, void 0, function* () {
+        const digest = yield crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+        // @ts-ignore
+        return btoa(String.fromCharCode(...new Uint8Array(digest)))
+            .replace(/=/g, '')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_');
+    });
+}
+function createRandomString(length = 16) {
+    let text = '';
+    const possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+    for (let i = 0; i < length; i++) {
+        text += possible.charAt(Math.floor(Math.random() * possible.length));
+    }
+    return text;
+}
 const readFileAsText = (file) => new Promise((resolve, reject) => {
     const reader = new FileReader();
     reader.readAsText(file);
@@ -1030,6 +1051,7 @@ const isMfaRequired = (user) => {
 function* getMfaRequiredState(user) {
     let setMfaState = {};
     let step = exports.LoginStep.loginWithTwoFactor;
+    const { loginState } = yield effects.select((state) => state.auth);
     const { isAllowedToRemember, mfaDeviceExpiration } = yield effects.call(restApi.api.auth.checkIfAllowToRememberMfaDevice, user.mfaToken);
     if (user.hasOwnProperty('mfaEnrolled') && !user.mfaEnrolled) {
         setMfaState = {
@@ -1043,22 +1065,12 @@ function* getMfaRequiredState(user) {
         };
         step = exports.LoginStep.forceTwoFactor;
     }
-    return Object.assign(Object.assign({ user: undefined, isAuthenticated: false }, setMfaState), { loginState: {
-            mfaToken: user.mfaToken,
-            mfaRequired: user.mfaRequired,
-            loading: false,
-            error: undefined,
-            step,
-            tenantsLoading: true,
-            tenants: [],
-            allowRememberMfaDevice: isAllowedToRemember,
-            mfaDeviceExpiration,
-        } });
+    return Object.assign(Object.assign({ user: undefined, isAuthenticated: false }, setMfaState), { loginState: Object.assign(Object.assign({}, loginState), { mfaToken: user.mfaToken, mfaRequired: user.mfaRequired, loading: false, error: undefined, step, tenantsLoading: true, tenants: [], allowRememberMfaDevice: isAllowedToRemember, mfaDeviceExpiration }) });
 }
 function* refreshToken() {
     try {
         const onRedirectTo = restApi.ContextHolder.onRedirectTo;
-        const { routes } = yield effects.select((state) => state.auth);
+        const { routes, loginState } = yield effects.select((state) => state.auth);
         const user = yield effects.call(restApi.api.auth.refreshToken);
         if (isMfaRequired(user)) {
             const mfaRequiredState = yield getMfaRequiredState(user);
@@ -1068,9 +1080,14 @@ function* refreshToken() {
         else {
             yield effects.put(actions.loadTenants());
             yield effects.put(actions.setState({ user, isAuthenticated: true }));
-            if ([routes.loginUrl, routes.socialLoginCallbackUrl, routes.signupUrl, routes.oidcRedirectUrl].includes(window.location.pathname) ||
+            if ([routes.loginUrl, routes.socialLoginCallbackUrl, routes.signUpUrl, routes.oidcRedirectUrl].includes(window.location.pathname) ||
                 (window.location.pathname.endsWith(routes.activateUrl) && user.verified)) {
-                yield afterAuthNavigation();
+                if (loginState.isNewUser && routes.signUpSuccessUrl && routes.socialLoginCallbackUrl === window.location.pathname) {
+                    onRedirectTo(routes.signUpSuccessUrl, { refresh: routes.signUpSuccessUrl.startsWith('http') });
+                }
+                else {
+                    yield afterAuthNavigation();
+                }
             }
         }
     }
@@ -1095,6 +1112,47 @@ function* requestAuthorize({ payload: firstTime }) {
     yield effects.all(calls);
     yield effects.put(actions.setState({ isLoading: false }));
 }
+function* requestHostedLoginAuthorize() {
+    const { routes, baseUrl, clientId, onRedirectTo } = yield effects.select((state) => (Object.assign({ routes: state.auth.routes, onRedirectTo: state.auth.onRedirectTo }, state.root.context)));
+    // Generate the relevant params for the redirect
+    const nonce = createRandomString();
+    const code_verifier = createRandomString();
+    const code_challenge = yield effects.call(generateCodeChallenge, code_verifier);
+    // We are saving the verifier in session storage to be able to validate the response
+    sessionStorage.setItem(constants.HOSTED_LOGIN_VERIFIER_KEY, code_verifier);
+    const redirectUrl = `${window.location.origin}${routes.hostedLoginRedirectUrl}`;
+    // Hard coded for now
+    const oauthUrl = `${baseUrl}/oauth/authorize`;
+    const params = {
+        response_type: 'code',
+        client_id: clientId || 'INVALID-CLIENT-ID',
+        scope: 'openid email profile',
+        redirect_uri: redirectUrl,
+        code_challenge: code_challenge,
+        code_challenge_method: 'S256',
+        nonce,
+    };
+    const searchParams = new URLSearchParams(params);
+    const url = `${oauthUrl}?${searchParams.toString()}`;
+    onRedirectTo(url, { refresh: true });
+}
+function* handleHostedLoginCallback({ payload }) {
+    // Hard coded for now
+    const code_verifier = sessionStorage.getItem(constants.HOSTED_LOGIN_VERIFIER_KEY) || 'INVALID-CODE-VERIFIER';
+    const routes = yield effects.select((state) => state.auth.routes);
+    const redirectUrl = `${window.location.origin}${routes.hostedLoginRedirectUrl}`;
+    const body = {
+        code: payload.code,
+        redirect_uri: redirectUrl,
+        code_verifier,
+        grant_type: 'authorization_code',
+    };
+    const user = yield effects.call(restApi.api.auth.exchangeOAuthTokens, body);
+    // TODO: Validate nonce and aud
+    yield effects.put(actions.setState({ user, isAuthenticated: true }));
+    yield effects.put(actions.loadTenants());
+    yield afterAuthNavigation();
+}
 function* passwordlessPreLogin(_a) {
     var _b = _a.payload, { callback } = _b, payload = tslib.__rest(_b, ["callback"]);
     try {
@@ -1327,6 +1385,8 @@ function* silentLogout({ payload }) {
 }
 function* loginSagas() {
     yield effects.takeLeading(actions.requestAuthorize, requestAuthorize);
+    yield effects.takeLeading(actions.requestHostedLoginAuthorize, requestHostedLoginAuthorize);
+    yield effects.takeLeading(actions.handleHostedLoginCallback, handleHostedLoginCallback);
     yield effects.takeLeading(actions.preLogin, preLogin);
     yield effects.takeLeading(actions.postLogin, postLogin);
     yield effects.takeLeading(actions.login, login);
@@ -2450,6 +2510,7 @@ function* loginViaSocialLogin({ payload }) {
         const { email, isNewUser } = yield effects.call(restApi.api.auth.loginViaSocialLogin, payload);
         yield effects.put(actions.setLoginState({ email, isNewUser }));
         yield refreshToken();
+        yield effects.put(actions.setSocialLoginsState({ loading: false }));
     }
     catch (e) {
         yield effects.put(actions.setSocialLoginsState({ loading: false, error: (_a = e.message) !== null && _a !== void 0 ? _a : 'Failed to authenticate', firstLoad: false }));

package/node/connectivity/index.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var constants = require('../constants-b305f261.js');
+var constants = require('../constants-52e37c08.js');
 var toolkit = require('@reduxjs/toolkit');
 var tslib = require('tslib');
 var effects = require('redux-saga/effects');

package/node/{constants-b305f261.js → constants-52e37c08.js}

@@ -1,6 +1,7 @@
 'use strict';
 
 const FRONTEGG_AFTER_AUTH_REDIRECT_URL = 'FRONTEGG_AFTER_AUTH_REDIRECT_URL';
+const HOSTED_LOGIN_VERIFIER_KEY = 'HOSTED_LOGIN_VERIFIER_KEY';
 const authStoreName = 'auth';
 const connectivityStoreName = 'connectivity';
 const auditsStoreName = 'auditLogs';
@@ -8,6 +9,7 @@ const subscriptionsStoreName = 'subscriptions';
 const vendorStoreName = 'vendor';
 
 exports.FRONTEGG_AFTER_AUTH_REDIRECT_URL = FRONTEGG_AFTER_AUTH_REDIRECT_URL;
+exports.HOSTED_LOGIN_VERIFIER_KEY = HOSTED_LOGIN_VERIFIER_KEY;
 exports.auditsStoreName = auditsStoreName;
 exports.authStoreName = authStoreName;
 exports.connectivityStoreName = connectivityStoreName;

package/node/index.js

@@ -10,8 +10,8 @@ var vendor_index = require('./vendor/index.js');
 var saga = require('./saga-b0d1a607.js');
 var toolkit_index = require('./toolkit/index.js');
 var restApi = require('@frontegg/rest-api');
-var constants = require('./constants-b305f261.js');
-var saga$1 = require('./saga-508b308b.js');
+var constants = require('./constants-52e37c08.js');
+var saga$1 = require('./saga-633c17d2.js');
 var toolkit = require('@reduxjs/toolkit');
 var effects = require('redux-saga/effects');
 var createSagaMiddleware = require('redux-saga');

package/node/{saga-508b308b.js → saga-633c17d2.js}

@@ -2,7 +2,7 @@
 
 var effects = require('redux-saga/effects');
 var restApi = require('@frontegg/rest-api');
-var constants = require('./constants-b305f261.js');
+var constants = require('./constants-52e37c08.js');
 var toolkit = require('@reduxjs/toolkit');
 
 const reducers = {

package/node/subscriptions/index.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var constants = require('../constants-b305f261.js');
+var constants = require('../constants-52e37c08.js');
 var toolkit = require('@reduxjs/toolkit');
 var effects = require('redux-saga/effects');
 var restApi = require('@frontegg/rest-api');

package/node/toolkit/index.js

@@ -12,9 +12,9 @@ var saga = require('../saga-b0d1a607.js');
 var connectivity_index = require('../connectivity/index.js');
 var subscriptions_index = require('../subscriptions/index.js');
 var vendor_index = require('../vendor/index.js');
-require('../constants-b305f261.js');
+require('../constants-52e37c08.js');
 require('tslib');
-require('../saga-508b308b.js');
+require('../saga-633c17d2.js');
 require('uuid');
 
 function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }

package/node/vendor/index.js

@@ -2,8 +2,8 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var saga = require('../saga-508b308b.js');
-var constants = require('../constants-b305f261.js');
+var saga = require('../saga-633c17d2.js');
+var constants = require('../constants-52e37c08.js');
 require('redux-saga/effects');
 require('@frontegg/rest-api');
 require('@reduxjs/toolkit');

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@frontegg/redux-store",
   "libName": "FronteggReduxStore",
-  "version": "4.39.1",
+  "version": "4.39.2-dashboard",
   "author": "Frontegg LTD",
   "main": "./node/index.js",
   "module": "./index.js",
   "types": "./index.d.ts",
   "dependencies": {
-    "@frontegg/rest-api": "2.10.46",
+    "@frontegg/rest-api": "2.10.47",
     "@reduxjs/toolkit": "^1.5.0",
     "redux-saga": "^1.1.0",
     "tslib": "^2.3.1",
     "uuid": "^8.3.0"
   }
-}
+}

package/{saga-afaced62.js → saga-b6529ffb.js}

@@ -1,6 +1,6 @@
 import { takeEvery, put } from 'redux-saga/effects';
 import { api } from '@frontegg/rest-api';
-import { v as vendorStoreName } from './constants-f7891ee3.js';
+import { v as vendorStoreName } from './constants-4d9682b2.js';
 import { createAction, createSlice } from '@reduxjs/toolkit';
 
 const reducers = {

package/subscriptions/index.js

@@ -1,5 +1,5 @@
-import { s as subscriptionsStoreName } from '../constants-f7891ee3.js';
-export { s as subscriptionsStoreName } from '../constants-f7891ee3.js';
+import { s as subscriptionsStoreName } from '../constants-4d9682b2.js';
+export { s as subscriptionsStoreName } from '../constants-4d9682b2.js';
 import { createSlice, createAction, combineReducers } from '@reduxjs/toolkit';
 import { takeEvery, select, put, call, delay, all } from 'redux-saga/effects';
 import { ISubscriptionStatus, PaymentMethodType as PaymentMethodType$1, api, ProviderType } from '@frontegg/rest-api';

package/toolkit/index.js

@@ -11,9 +11,9 @@ import connectivityStore from '../connectivity/index.js';
 import subscriptionsStore from '../subscriptions/index.js';
 import vendorStore from '../vendor/index.js';
 import { s as storeName, i as initialState$1, r as reducer, b as sagas } from '../saga-7a267fe0.js';
-import '../constants-f7891ee3.js';
+import '../constants-4d9682b2.js';
 import 'tslib';
-import '../saga-afaced62.js';
+import '../saga-b6529ffb.js';
 import 'uuid';
 
 const initialState = {

package/vendor/index.js

@@ -1,7 +1,7 @@
-import { s as sagas, i as initialState, r as reducer, a as actions } from '../saga-afaced62.js';
-export { a as vendorActions, i as vendorInitialState, r as vendorReducers, s as vendorSagas } from '../saga-afaced62.js';
-import { v as vendorStoreName } from '../constants-f7891ee3.js';
-export { v as vendorStoreName } from '../constants-f7891ee3.js';
+import { s as sagas, i as initialState, r as reducer, a as actions } from '../saga-b6529ffb.js';
+export { a as vendorActions, i as vendorInitialState, r as vendorReducers, s as vendorSagas } from '../saga-b6529ffb.js';
+import { v as vendorStoreName } from '../constants-4d9682b2.js';
+export { v as vendorStoreName } from '../constants-4d9682b2.js';
 import 'redux-saga/effects';
 import '@frontegg/rest-api';
 import '@reduxjs/toolkit';