@frontegg/redux-store 5.59.1 → 5.61.1

package/auth/index.js

@@ -37,7 +37,66 @@ const errorsReducerForKey = (key) => ({
         return (Object.assign(Object.assign({}, state), { [key]: Object.assign(Object.assign({}, state[key]), { errors: Object.assign(Object.assign({}, state[key].errors), { [payload.key]: (_a = payload.value) !== null && _a !== void 0 ? _a : true }) }) }));
     },
 });
-const delay = (delayTime = 500) => new Promise((resolve) => setTimeout(resolve, delayTime));
+const delay = (delayTime = 500) => new Promise((resolve) => setTimeout(resolve, delayTime));
+const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+const lookup = new Uint8Array(256);
+for (let i = 0; i < chars.length; i++) {
+    lookup[chars.charCodeAt(i)] = i;
+}
+const base64urlEncode = (arraybuffer) => {
+    const bytes = new Uint8Array(arraybuffer);
+    const len = bytes.length;
+    let i;
+    let base64url = '';
+    for (i = 0; i < len; i += 3) {
+        base64url += chars[bytes[i] >> 2];
+        base64url += chars[((bytes[i] & 3) << 4) | (bytes[i + 1] >> 4)];
+        base64url += chars[((bytes[i + 1] & 15) << 2) | (bytes[i + 2] >> 6)];
+        base64url += chars[bytes[i + 2] & 63];
+    }
+    if (len % 3 === 2) {
+        base64url = base64url.substring(0, base64url.length - 1);
+    }
+    else if (len % 3 === 1) {
+        base64url = base64url.substring(0, base64url.length - 2);
+    }
+    return base64url;
+};
+const base64urlDecode = (base64string) => {
+    const bufferLength = base64string.length * 0.75;
+    let len = base64string.length, i, p = 0, encoded1, encoded2, encoded3, encoded4;
+    const bytes = new Uint8Array(bufferLength);
+    for (i = 0; i < len; i += 4) {
+        encoded1 = lookup[base64string.charCodeAt(i)];
+        encoded2 = lookup[base64string.charCodeAt(i + 1)];
+        encoded3 = lookup[base64string.charCodeAt(i + 2)];
+        encoded4 = lookup[base64string.charCodeAt(i + 3)];
+        bytes[p++] = (encoded1 << 2) | (encoded2 >> 4);
+        bytes[p++] = ((encoded2 & 15) << 4) | (encoded3 >> 2);
+        bytes[p++] = ((encoded3 & 3) << 6) | (encoded4 & 63);
+    }
+    return bytes.buffer;
+};
+const publicKeyCredentialToJSON = (pubKeyCred) => {
+    if (pubKeyCred instanceof Array) {
+        const arr = [];
+        for (const i of pubKeyCred) {
+            arr.push(publicKeyCredentialToJSON(i));
+        }
+        return arr;
+    }
+    else if (pubKeyCred instanceof ArrayBuffer) {
+        return base64urlEncode(pubKeyCred);
+    }
+    else if (pubKeyCred instanceof Object) {
+        const obj = {};
+        for (const key in pubKeyCred) {
+            obj[key] = publicKeyCredentialToJSON(pubKeyCred[key]);
+        }
+        return obj;
+    }
+    return pubKeyCred;
+};
 
 var LoginStep;
 (function (LoginStep) {
@@ -52,9 +111,22 @@ var LoginStep;
     LoginStep["success"] = "success";
     LoginStep["forceTwoFactor"] = "forceTwoFactor";
     LoginStep["recoverTwoFactor"] = "recoverTwoFactor";
-})(LoginStep || (LoginStep = {}));
+})(LoginStep || (LoginStep = {}));
+var LoginFlow;
+(function (LoginFlow) {
+    LoginFlow["Login"] = "login";
+    LoginFlow["RegisterQuickLogin"] = "registerQuickLogin";
+})(LoginFlow || (LoginFlow = {}));
+var QuickLoginStrategy;
+(function (QuickLoginStrategy) {
+    QuickLoginStrategy["Internal"] = "internal";
+    QuickLoginStrategy["UsbKey"] = "usb-key";
+    QuickLoginStrategy["Android"] = "android";
+    QuickLoginStrategy["Sms"] = "sms";
+})(QuickLoginStrategy || (QuickLoginStrategy = {}));
 
 const loginState = {
+    flow: LoginFlow.Login,
     step: LoginStep.preLogin,
     loading: false,
     email: '',
@@ -81,6 +153,10 @@ const actions$g = {
     passwordlessPreLogin: createAction(`${authStoreName}/passwordlessPreLogin`, (payload) => ({ payload })),
     passwordlessPostLogin: createAction(`${authStoreName}/passwordlessPostLogin`, (payload) => ({ payload })),
     verifyInviteToken: createAction(`${authStoreName}/verifyInviteToken`, (payload) => ({ payload })),
+    webAuthnPrelogin: createAction(`${authStoreName}/webAuthnPrelogin`, (payload) => ({ payload })),
+    webAuthnPostLogin: createAction(`${authStoreName}/webAuthnPostLogin`, (payload) => ({ payload })),
+    webAuthnCreateNewDeviceSession: createAction(`${authStoreName}/webAuthnCreateNewDeviceSession`, (payload) => ({ payload })),
+    webAuthnVerifyNewDeviceSession: createAction(`${authStoreName}/webAuthnVerifyNewDeviceSession`, (payload) => ({ payload })),
 };
 
 var ActivateAccountStep;
@@ -271,11 +347,19 @@ const teamState = {
     pageSize: 20,
     errors: {},
     users: [],
+    allUsers: [],
     roles: [],
     permissions: [],
     totalPages: 0,
     filter: [],
     sort: [],
+    allUsersQueryParams: {
+        _filter: null,
+        _offset: 0,
+        _limit: 20,
+        _order: 'DESC',
+        _sortBy: 'name',
+    },
     addUserDialogState: {
         loading: false,
         open: false,
@@ -284,6 +368,10 @@ const teamState = {
         loading: false,
         open: false,
     },
+    lockUserDialogState: {
+        loading: false,
+        open: false,
+    },
 };
 const reducers$7 = {
     setTeamLoader: loadersReducerForKey('teamState'),
@@ -293,12 +381,17 @@ const reducers$7 = {
 };
 const actions$8 = {
     loadUsers: createAction(`${authStoreName}/loadUsers`, (payload) => ({ payload })),
+    loadAllSubTenantsUsers: createAction(`${authStoreName}/loadAllSubTenantsUsers`, (payload) => ({ payload })),
     loadRoles: createAction(`${authStoreName}/loadRoles`, (payload) => ({ payload })),
     addUser: createAction(`${authStoreName}/addUser`, (payload) => ({ payload })),
+    addUserToSubTenants: createAction(`${authStoreName}/addUserToSubTenants`, (payload) => ({ payload })),
     updateUser: createAction(`${authStoreName}/updateUser`, (payload) => ({
         payload,
     })),
     deleteUser: createAction(`${authStoreName}/deleteUser`, (payload) => ({ payload })),
+    setUserRolesForSubTenants: createAction(`${authStoreName}/setUserRolesForSubTenants`, (payload) => ({ payload })),
+    deleteUserFromSubTenants: createAction(`${authStoreName}/deleteUserFromSubTenants`, (payload) => ({ payload })),
+    lockUser: createAction(`${authStoreName}/lockUser`, (payload) => ({ payload })),
     resendActivationLink: createAction(`${authStoreName}/resendActivationLink`, (payload) => ({ payload })),
     resendInvitationLink: createAction(`${authStoreName}/resendInvitationLink`, (payload) => ({ payload })),
     getInvitationLink: createAction(`${authStoreName}/getInvitationLink`),
@@ -311,6 +404,10 @@ const actions$8 = {
         payload,
     })),
     closeDeleteUserDialog: createAction(`${authStoreName}/closeDeleteUserDialog`, (payload) => ({ payload })),
+    openLockUserDialog: createAction(`${authStoreName}/openLockUserDialog`, (payload) => ({
+        payload,
+    })),
+    closeLockUserDialog: createAction(`${authStoreName}/closeLockUserDialog`, (payload) => ({ payload })),
 };
 
 const socialLoginState = {
@@ -420,11 +517,15 @@ const securityPolicyState = {
     passwordPolicy: {
         loading: true,
     },
+    publicAuthStrategyPolicy: {
+        loading: true,
+    },
 };
 const reducers$3 = {
     setSecurityPolicyState: typeReducerForKey('securityPolicyState'),
     setSecurityPolicyGlobalState: typeReducerNestedKey('securityPolicyState', 'globalPolicy'),
     setSecurityPolicyPublicState: typeReducerNestedKey('securityPolicyState', 'publicPolicy'),
+    setSecurityPolicyAuthStrategyPublicState: typeReducerNestedKey('securityPolicyState', 'publicAuthStrategyPolicy'),
     setSecurityPolicyMfaState: typeReducerNestedKey('securityPolicyState', 'mfaPolicy'),
     setSecurityPolicyVendorMfaState: typeReducerNestedKey('securityPolicyState', 'vendorMfaPolicy'),
     setSecurityPolicyLockoutState: typeReducerNestedKey('securityPolicyState', 'lockoutPolicy'),
@@ -445,6 +546,7 @@ const actions$4 = {
     loadSecurityPolicyPasswordHistory: createAction(`${authStoreName}/loadSecurityPolicyPasswordHistory`),
     saveSecurityPolicyPasswordHistory: createAction(`${authStoreName}/saveSecurityPolicyPasswordHistory`, (payload) => ({ payload })),
     loadVendorPasswordConfig: createAction(`${authStoreName}/loadVendorPasswordConfig`),
+    loadPublicAuthStrategiesPolicy: createAction(`${authStoreName}/loadPublicAuthStrategiesPolicy`),
 };
 
 const accountSettingsState = {
@@ -463,6 +565,7 @@ const tenantsState = {
     tenants: [],
     subTenants: [],
     loading: true,
+    tenantTree: null,
 };
 const reducers$1 = {
     setTenantsState: typeReducerForKey('tenantsState'),
@@ -476,6 +579,9 @@ const actions$2 = {
     loadSubTenants: createAction(`${authStoreName}/loadSubTenants`, (payload) => ({
         payload,
     })),
+    loadSubTenantsTree: createAction(`${authStoreName}/loadSubTenantsTree`, (payload) => ({
+        payload,
+    })),
 };
 
 const rolesState = {
@@ -805,7 +911,26 @@ const userTeamDemo = {
     mfaEnabled: undefined,
     roles: [],
 };
+const userSubTenantDemo = {
+    metadata: '',
+    mfaEnrolled: false,
+    permissions: [],
+    provider: '',
+    sub: '',
+    tenantIds: [],
+    tenants: [],
+    verified: false,
+    id: 'id',
+    email: 'email',
+    name: 'name',
+    tenantId: 'tenantId',
+    activatedForTenant: true,
+    createdAt: new Date(),
+    lastLogin: new Date(),
+    roles: [],
+};
 const usersDemo = [userTeamDemo, userTeamDemo2];
+const allUsersDemo = [userSubTenantDemo];
 const tenantsDemo = [
     {
         id: 'my-tenant-id',
@@ -997,6 +1122,7 @@ function* getMfaRequiredState(user) {
     return Object.assign(Object.assign({ user: undefined, isAuthenticated: false }, setMfaState), { loginState: Object.assign(Object.assign({}, loginState), { mfaToken: user.mfaToken, mfaRequired: user.mfaRequired, loading: false, error: undefined, step, tenantsLoading: true, tenants: [], allowRememberMfaDevice: isAllowedToRemember, mfaDeviceExpiration }) });
 }
 function* refreshToken() {
+    var _a;
     try {
         const onRedirectTo = ContextHolder.onRedirectTo;
         const { routes, loginState } = yield select((state) => state.auth);
@@ -1007,18 +1133,23 @@ function* refreshToken() {
             onRedirectTo(routes.loginUrl, { preserveQueryParams: true });
         }
         else {
+            if (user.email) {
+                localStorage.setItem('email', user.email);
+            }
+            const quickLoginToRegister = (_a = localStorage.getItem('register-quick-login')) !== null && _a !== void 0 ? _a : loginState.quickLoginToRegister;
+            const shouldNavigateToRegisterQuicKLogin = quickLoginToRegister && localStorage.getItem(`${user.email}-${quickLoginToRegister}`) !== 'true';
             yield put(actions.setTenantsState({ tenants, loading: false }));
-            yield put(actions.setState({ user, isAuthenticated: true }));
-            if ([
-                routes.loginUrl,
-                routes.socialLoginCallbackUrl,
-                routes.signUpUrl,
-                routes.oidcRedirectUrl,
-                routes.samlCallbackUrl,
-            ].some((url) => url && window.location.pathname.endsWith(url))) {
-                if (loginState.isNewUser &&
-                    routes.signUpSuccessUrl &&
-                    routes.socialLoginCallbackUrl === window.location.pathname) {
+            yield put(actions.setState({
+                user,
+                isAuthenticated: true,
+                loginState: Object.assign(Object.assign({}, loginState), { quickLoginToRegister, flow: shouldNavigateToRegisterQuicKLogin ? LoginFlow.RegisterQuickLogin : LoginFlow.Login })
+            }));
+            if (shouldNavigateToRegisterQuicKLogin) {
+                onRedirectTo(routes.loginUrl);
+            }
+            else if ([routes.loginUrl, routes.socialLoginCallbackUrl, routes.signUpUrl, routes.oidcRedirectUrl, routes.samlCallbackUrl]
+                .some(url => url && window.location.pathname.endsWith(url))) {
+                if (loginState.isNewUser && routes.signUpSuccessUrl && routes.socialLoginCallbackUrl === window.location.pathname) {
                     onRedirectTo(routes.signUpSuccessUrl, { refresh: routes.signUpSuccessUrl.startsWith('http') });
                 }
                 else {
@@ -1166,14 +1297,15 @@ function* passwordlessPostLogin(_a) {
     try {
         yield put(actions.setLoginState({ loading: true }));
         const data = yield call(api.auth.passwordlessPostLogin, payload);
+        const onRedirectTo = ContextHolder.onRedirectTo;
+        const { routes } = yield select((state) => state.auth);
         if (isMfaRequired(data)) {
-            const onRedirectTo = ContextHolder.onRedirectTo;
-            const { routes } = yield select((state) => state.auth);
             const mfaRequiredState = yield getMfaRequiredState(data);
             yield put(actions.setState(mfaRequiredState));
             onRedirectTo(routes.loginUrl, { preserveQueryParams: true });
         }
         else {
+            const { loginState } = yield select((state) => state.auth);
             const user = yield call(api.auth.generateLoginResponse, data);
             if (data.emailVerified) {
                 (_b = events === null || events === void 0 ? void 0 : events.userVerified) === null || _b === void 0 ? void 0 : _b.call(events, {
@@ -1185,9 +1317,17 @@ function* passwordlessPostLogin(_a) {
                     name: user.name,
                 });
             }
-            yield put(actions.loadTenants());
+            if (user.email) {
+                localStorage.setItem('email', user.email);
+            }
             yield put(actions.setState({ user, isAuthenticated: true }));
-            yield afterAuthNavigation();
+            yield put(actions.loadTenants());
+            if (loginState.flow === LoginFlow.Login) {
+                yield afterAuthNavigation();
+            }
+            else {
+                onRedirectTo(routes.loginUrl, { preserveQueryParams: true });
+            }
         }
         callback === null || callback === void 0 ? void 0 : callback(true);
     }
@@ -1213,14 +1353,14 @@ function* verifyInviteToken({ payload }) {
         yield put(actions.setLoginState({ loading: false }));
     }
 }
-function* preLogin({ payload: { email, recaptchaToken, invitationToken, callback }, }) {
+function* preLogin({ payload: { email, recaptchaToken, invitationToken, callback, }, }) {
     yield put(actions.setLoginState({ loading: true }));
     try {
         const onRedirectTo = yield select(({ auth: { onRedirectTo } }) => onRedirectTo);
         let { address, idpType } = yield call(api.auth.preLoginV2, { email });
         if (address) {
             if (idpType === SamlVendors.Oidc && !address.includes('redirect_uri')) {
-                const { routes: { oidcRedirectUrl }, } = yield select(({ auth: { routes } }) => ({ routes }));
+                const { routes: { oidcRedirectUrl } } = yield select(({ auth: { routes } }) => ({ routes }));
                 address += `&redirect_uri=${window.location.origin}${oidcRedirectUrl}`;
             }
             yield put(actions.setLoginState({ step: LoginStep.redirectToSSO, loading: false, ssoRedirectUrl: address }));
@@ -1238,7 +1378,7 @@ function* preLogin({ payload: { email, recaptchaToken, invitationToken, callback
 }
 function* ssoPreloginFailed(_a) {
     var { callback } = _a, body = __rest(_a, ["callback"]);
-    const publicPolicy = yield select(({ auth: { securityPolicyState: { publicPolicy: { policy: publicPolicy }, }, }, }) => publicPolicy);
+    const publicPolicy = yield select(({ auth: { securityPolicyState: { publicPolicy: { policy: publicPolicy } } } }) => publicPolicy);
     if (!(publicPolicy === null || publicPolicy === void 0 ? void 0 : publicPolicy.authStrategy)) {
         yield put(actions.setLoginState({ step: LoginStep.loginWithPassword, loading: false }));
         callback === null || callback === void 0 ? void 0 : callback();
@@ -1256,6 +1396,90 @@ function* ssoPreloginFailed(_a) {
         callback === null || callback === void 0 ? void 0 : callback();
     }
 }
+function* webAuthnCreateNewDeviceSession({ payload: { callback } }) {
+    try {
+        yield put(actions.setLoginState({ loading: true }));
+        const { options } = yield call(api.auth.webAuthnCreateNewDeviceSession);
+        options.user.id = base64urlDecode(options.user.id);
+        options.challenge = base64urlDecode(options.challenge);
+        options.excludeCredentials = [];
+        callback === null || callback === void 0 ? void 0 : callback(options);
+    }
+    catch (e) {
+        yield put(actions.setLoginState({ error: e.message }));
+        callback === null || callback === void 0 ? void 0 : callback(null);
+    }
+    finally {
+        yield put(actions.setLoginState({ loading: false }));
+    }
+}
+function* webAuthnVerifyNewDeviceSession(_a) {
+    var _b = _a.payload, { callback } = _b, body = __rest(_b, ["callback"]);
+    try {
+        yield put(actions.setLoginState({ loading: true }));
+        const publicKey = publicKeyCredentialToJSON(body.publicKey);
+        yield call(api.auth.verifyNewDeviceSession, {
+            id: publicKey.id,
+            response: publicKey.response
+        });
+        callback === null || callback === void 0 ? void 0 : callback(true);
+    }
+    catch (e) {
+        yield put(actions.setLoginState({ error: e.message }));
+        callback === null || callback === void 0 ? void 0 : callback(null);
+    }
+    finally {
+        yield put(actions.setLoginState({ loading: false }));
+    }
+}
+function* webAuthnPrelogin(_a) {
+    var _b;
+    var _c = _a.payload, { callback } = _c, body = __rest(_c, ["callback"]);
+    try {
+        yield put(actions.setLoginState({ loading: true }));
+        const { options } = yield call(api.auth.webAuthnPreLogin, body);
+        options.challenge = base64urlDecode(options.challenge);
+        options.allowCredentials = (_b = options.allowCredentials) === null || _b === void 0 ? void 0 : _b.map((credentials) => (Object.assign(Object.assign({}, credentials), { id: base64urlDecode(credentials.id) })));
+        callback === null || callback === void 0 ? void 0 : callback(options);
+    }
+    catch (e) {
+        yield put(actions.setLoginState({ error: e.message }));
+        callback === null || callback === void 0 ? void 0 : callback(null);
+    }
+    finally {
+        yield put(actions.setLoginState({ loading: false }));
+    }
+}
+function* webAuthnPostLogin(_a) {
+    var _b;
+    var _c = _a.payload, { callback } = _c, body = __rest(_c, ["callback"]);
+    try {
+        yield put(actions.setLoginState({ loading: true }));
+        const publicKey = publicKeyCredentialToJSON(body.publicKey);
+        const data = yield call(api.auth.webAuthnPostLogin, Object.assign(Object.assign({}, publicKey), { response: Object.assign(Object.assign({}, publicKey.response), { userHandle: (_b = publicKey.response.userHandle) !== null && _b !== void 0 ? _b : undefined }), recaptchaToken: body.recaptchaToken, invitationToken: body.invitationToken }));
+        if (isMfaRequired(data)) {
+            const onRedirectTo = ContextHolder.onRedirectTo;
+            const { routes } = yield select((state) => state.auth);
+            const mfaRequiredState = yield getMfaRequiredState(data);
+            yield put(actions.setState(mfaRequiredState));
+            onRedirectTo(routes.loginUrl, { preserveQueryParams: true });
+        }
+        else {
+            const user = yield call(api.auth.generateLoginResponse, data);
+            yield put(actions.loadTenants());
+            yield put(actions.setState({ user, isAuthenticated: true }));
+            yield afterAuthNavigation();
+        }
+        callback === null || callback === void 0 ? void 0 : callback(true);
+    }
+    catch (e) {
+        yield put(actions.setLoginState({ error: e.message }));
+        callback === null || callback === void 0 ? void 0 : callback(null);
+    }
+    finally {
+        yield put(actions.setLoginState({ loading: false }));
+    }
+}
 function* postLogin({ payload }) {
     const { onRedirectTo, routes } = yield select(({ auth: { onRedirectTo, routes } }) => ({ onRedirectTo, routes }));
     yield put(actions.setLoginState({ loading: true }));
@@ -1276,7 +1500,7 @@ function* postLogin({ payload }) {
         yield put(actions.setLoginState({ step: LoginStep.loginWithSSOFailed, loading: false }));
     }
 }
-function* login({ payload: { email, password, recaptchaToken, invitationToken, callback }, }) {
+function* login({ payload: { email, password, recaptchaToken, invitationToken, callback, }, }) {
     yield put(actions.setLoginState({ loading: true }));
     try {
         const user = yield call(api.auth.login, {
@@ -1304,26 +1528,35 @@ function* login({ payload: { email, password, recaptchaToken, invitationToken, c
                 step = LoginStep.forceTwoFactor;
             }
         }
-        const isAuthenticated = step === LoginStep.success && !!user.accessToken;
-        const loggedInUser = step === LoginStep.success && step === LoginStep.success ? user : undefined;
+        const { loginState } = yield select((state) => state.auth);
+        const isLoginSucceeded = step === LoginStep.success;
+        const isAuthenticated = isLoginSucceeded && !!user.accessToken;
+        const loggedInUser = isLoginSucceeded ? user : undefined;
         let allowRememberDevice = { isAllowedToRemember: false, mfaDeviceExpiration: 0 };
         if (user.mfaRequired && user.mfaToken) {
             allowRememberDevice = yield call(api.auth.checkIfAllowToRememberMfaDevice, user.mfaToken);
         }
         const { isAllowedToRemember, mfaDeviceExpiration } = allowRememberDevice;
+        if (user.email) {
+            localStorage.setItem('email', user.email);
+        }
         yield put(actions.setState(Object.assign(Object.assign({ user: loggedInUser, isAuthenticated }, setMfaState), { loginState: {
+                flow: loginState.flow,
+                quickLoginToRegister: loginState.quickLoginToRegister,
                 email,
                 loading: false,
                 error: undefined,
                 mfaToken: user.mfaToken,
-                step,
+                step: (!isLoginSucceeded || loginState.flow === LoginFlow.Login) ? step : loginState.step,
                 tenants: [],
                 tenantsLoading: true,
                 allowRememberMfaDevice: isAllowedToRemember,
                 mfaDeviceExpiration,
             } })));
-        if (step === LoginStep.success) {
+        if (isLoginSucceeded) {
             yield put(actions.loadTenants());
+        }
+        if (isAuthenticated && loginState.flow === LoginFlow.Login) {
             yield afterAuthNavigation();
         }
         callback === null || callback === void 0 ? void 0 : callback(true);
@@ -1342,17 +1575,21 @@ function* loginWithMfa({ payload: { mfaToken, value, rememberDevice, callback },
     yield put(actions.setLoginState({ loading: true }));
     try {
         const user = yield call(api.auth.loginWithMfa, { mfaToken, value, rememberDevice });
-        const step = LoginStep.success;
+        const { loginState } = yield select((state) => state.auth);
+        const step = loginState.flow === LoginFlow.Login ? LoginStep.success : loginState.step;
         yield put(actions.setState({
-            loginState: { loading: false, error: undefined, step, tenantsLoading: true, tenants: [] },
+            loginState: { flow: loginState.flow, quickLoginToRegister: loginState.quickLoginToRegister, loading: false, step, error: undefined, tenantsLoading: true, tenants: [] },
             user,
             isAuthenticated: true,
         }));
+        if (user.email) {
+            localStorage.setItem('email', user.email);
+        }
         yield put(actions.loadTenants());
-        callback === null || callback === void 0 ? void 0 : callback(true);
-        if (step === LoginStep.success) {
+        if (loginState.flow === LoginFlow.Login) {
             yield afterAuthNavigation();
         }
+        callback === null || callback === void 0 ? void 0 : callback(true);
     }
     catch (e) {
         yield put(actions.setLoginState({ error: e.message, loading: false }));
@@ -1375,7 +1612,8 @@ function* logout({ payload }) {
     try {
         yield call(api.auth.logout);
     }
-    catch (_a) { }
+    catch (_a) {
+    }
     yield put(actions.resetState());
     yield put(actions.requestAuthorize(true));
     payload === null || payload === void 0 ? void 0 : payload();
@@ -1384,7 +1622,8 @@ function* silentLogout({ payload }) {
     try {
         yield call(api.auth.logout);
     }
-    catch (_a) { }
+    catch (_a) {
+    }
     setTimeout(() => payload === null || payload === void 0 ? void 0 : payload(), 500);
 }
 function* loginSagas() {
@@ -1402,6 +1641,11 @@ function* loginSagas() {
     yield takeLeading(actions.passwordlessPreLogin, passwordlessPreLogin);
     yield takeLeading(actions.passwordlessPostLogin, passwordlessPostLogin);
     yield takeLeading(actions.verifyInviteToken, verifyInviteToken);
+    yield takeLeading(actions.webAuthnPrelogin, webAuthnPrelogin);
+    yield takeLeading(actions.webAuthnPostLogin, webAuthnPostLogin);
+    yield takeLeading(actions.webAuthnCreateNewDeviceSession, webAuthnCreateNewDeviceSession);
+    yield takeLeading(actions.webAuthnVerifyNewDeviceSession, webAuthnVerifyNewDeviceSession);
+    yield takeLeading(actions.afterAuthNavigation, afterAuthNavigation);
 }
 /*********************************
  *  Preview Sagas
@@ -2448,6 +2692,48 @@ function* loadUsers({ payload }) {
     }
     yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: false }));
 }
+function* loadAllSubTenantsUsers({ payload, }) {
+    var _a, _b, _c, _d, _e;
+    const { silentLoading, callback } = payload;
+    const teamState = yield selectTeamState();
+    const _limit = (_a = payload._limit) !== null && _a !== void 0 ? _a : teamState.allUsersQueryParams._limit;
+    const _offset = (_b = payload._offset) !== null && _b !== void 0 ? _b : teamState.allUsersQueryParams._offset;
+    const _filter = (_c = payload._filter) !== null && _c !== void 0 ? _c : teamState.allUsersQueryParams._filter;
+    const _sortBy = (_d = payload._sortBy) !== null && _d !== void 0 ? _d : teamState.allUsersQueryParams._sortBy;
+    const _order = (_e = payload._order) !== null && _e !== void 0 ? _e : teamState.allUsersQueryParams._order;
+    const allUsersQueryParams = {
+        _limit: _limit || 20,
+        _offset: _offset || 0,
+        _filter: _filter || '',
+        _sortBy: _sortBy || 'name',
+        _order: _order || 'DESC',
+    };
+    yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: !silentLoading }));
+    yield put(actions.setTeamState({
+        allUsersQueryParams,
+    }));
+    try {
+        const [{ items: users, _metadata: { totalPages, totalItems }, }, { items: roles }, { items: permissions },] = yield all([
+            call(api.subTenants.loadAllUsers, Object.assign({}, allUsersQueryParams)),
+            call(api.teams.loadAvailableRoles),
+            call(api.teams.loadAvailablePermissions),
+        ]);
+        yield put(actions.setTeamState({
+            allUsers: users,
+            totalPages,
+            totalItems,
+            roles,
+            permissions,
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(users);
+    }
+    catch (e) {
+        yield put(actions.setTeamError({ key: TeamStateKeys.USERS, value: e.message }));
+        yield put(actions.setTeamState({ totalPages: 0, users: [] }));
+        callback === null || callback === void 0 ? void 0 : callback(null, e);
+    }
+    yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: false }));
+}
 function* loadRoles({ payload }) {
     var _a, _b;
     yield put(actions.setTeamLoader({ key: TeamStateKeys.ROLES_AND_PERMISSIONS, value: true }));
@@ -2487,6 +2773,34 @@ function* addUser({ payload }) {
         callback === null || callback === void 0 ? void 0 : callback(null, e.message);
     }
 }
+function* addUserToSubTenants({ payload }) {
+    const { callback } = payload, body = __rest(payload, ["callback"]);
+    const teamState = yield selectTeamState();
+    yield put(actions.setTeamState({ addUserDialogState: Object.assign(Object.assign({}, teamState.addUserDialogState), { loading: true }) }));
+    try {
+        yield call(api.subTenants.addUserToTenantAndSubTenants, body);
+        const { items: users, _metadata: { totalPages, totalItems }, } = yield call(api.subTenants.loadAllUsers, {
+            _limit: 20,
+            _offset: 0,
+            _filter: '',
+            _sortBy: 'name',
+            _order: 'DESC',
+        });
+        yield put(actions.setTeamState({
+            allUsers: users,
+            totalPages,
+            totalItems,
+            addUserDialogState: { open: false, loading: false },
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(null);
+    }
+    catch (e) {
+        yield put(actions.setTeamState({
+            addUserDialogState: Object.assign(Object.assign({}, teamState.addUserDialogState), { loading: false, error: e.message }),
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(null, e.message);
+    }
+}
 function* updateUser({ payload }) {
     var _a;
     const { callback, profileImage } = payload, body = __rest(payload, ["callback", "profileImage"]);
@@ -2544,6 +2858,58 @@ function* deleteUser({ payload }) {
         callback === null || callback === void 0 ? void 0 : callback(null, e.message);
     }
 }
+function* setUserRolesForSubTenants({ payload, }) {
+    const { callback, userId } = payload, body = __rest(payload, ["callback", "userId"]);
+    const teamState = yield selectTeamState();
+    yield put(actions.setTeamState({ addUserDialogState: Object.assign(Object.assign({}, teamState.addUserDialogState), { loading: true }) }));
+    try {
+        yield call(api.subTenants.setUserRolesForSubTenants, userId, body);
+        const updatedUser = teamState.allUsers.find((user) => user.id === userId);
+        if (updatedUser) {
+            updatedUser.tenants = updatedUser.tenants.map((tenant) => {
+                var _a;
+                return (Object.assign(Object.assign({}, tenant), { roles: ((_a = body.subTenantsRoles
+                        .find((roleUpdate) => roleUpdate.tenantId === tenant.tenantId)) === null || _a === void 0 ? void 0 : _a.roleIds.map((roleId) => {
+                        const role = teamState.roles.find(({ id }) => roleId === id);
+                        return role;
+                    }).filter((role) => role)) || tenant.roles }));
+            });
+        }
+        yield put(actions.setTeamState({
+            allUsers: [
+                ...teamState.allUsers.filter((user) => user.id !== userId),
+                ...(updatedUser ? [updatedUser] : []),
+            ],
+            addUserDialogState: { open: false, loading: false },
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(true);
+    }
+    catch (e) {
+        yield put(actions.setTeamState({
+            addUserDialogState: Object.assign(Object.assign({}, teamState.addUserDialogState), { loading: false, error: e.message }),
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(null, e.message);
+    }
+}
+function* deleteUserFromSubTenants({ payload }) {
+    const { callback } = payload, body = __rest(payload, ["callback"]);
+    const teamState = yield selectTeamState();
+    yield put(actions.setTeamState({ deleteUserDialogState: Object.assign(Object.assign({}, teamState.deleteUserDialogState), { loading: true }) }));
+    try {
+        yield call(api.subTenants.removeUserFromTenantAndSubTenants, body);
+        callback === null || callback === void 0 ? void 0 : callback(true);
+        yield put(actions.setTeamState({
+            allUsers: teamState.allUsers.filter((user) => user.id !== body.userId && user.tenants.length === body.subTenants.length),
+            deleteUserDialogState: { open: false, loading: false },
+        }));
+    }
+    catch (e) {
+        yield put(actions.setTeamState({
+            deleteUserDialogState: Object.assign(Object.assign({}, teamState.deleteUserDialogState), { loading: false, error: e.message }),
+        }));
+        callback === null || callback === void 0 ? void 0 : callback(null, e.message);
+    }
+}
 function* resendActivationLink({ payload }) {
     const { callback } = payload, body = __rest(payload, ["callback"]);
     yield put(actions.setTeamLoader({ key: TeamStateKeys.RESEND_ACTIVATE_LINK, value: body.userId }));
@@ -2592,7 +2958,7 @@ function* getInvitationLink() {
         yield put(actions.setTeamError({ key: TeamStateKeys.GET_TOKEN_LINK, value: e.message }));
     }
 }
-function* createInvitationLink({ payload: { callback } }) {
+function* createInvitationLink({ payload: { callback }, }) {
     yield put(actions.setTeamError({ key: TeamStateKeys.CREATE_TOKEN_LINK, value: false }));
     const { inviteTokenState } = yield selectTeamState();
     try {
@@ -2605,7 +2971,7 @@ function* createInvitationLink({ payload: { callback } }) {
         yield put(actions.setTeamError({ key: TeamStateKeys.CREATE_TOKEN_LINK, value: e.message }));
     }
 }
-function* updateInvitationLink({ payload: { callback, expiresInMinutes, shouldSendEmail } }) {
+function* updateInvitationLink({ payload: { callback, expiresInMinutes, shouldSendEmail }, }) {
     const { inviteTokenState } = yield selectTeamState();
     yield put(actions.setTeamError({ key: TeamStateKeys.UPDATE_TOKEN_LINK, value: false }));
     try {
@@ -2638,7 +3004,7 @@ function* openAddUserDialog({ payload }) {
 }
 function* closeAddUserDialog({ payload }) {
     const teamState = yield selectTeamState();
-    const { addUserDialogState: { onClose } } = teamState;
+    const { addUserDialogState: { onClose }, } = teamState;
     onClose === null || onClose === void 0 ? void 0 : onClose(payload);
     yield put(actions.setTeamState({
         addUserDialogState: {
@@ -2655,7 +3021,7 @@ function* openDeleteUserDialog({ payload }) {
 }
 function* closeDeleteUserDialog({ payload }) {
     const teamState = yield selectTeamState();
-    const { deleteUserDialogState: { onClose } } = teamState;
+    const { deleteUserDialogState: { onClose }, } = teamState;
     onClose === null || onClose === void 0 ? void 0 : onClose(payload);
     yield put(actions.setTeamState({
         deleteUserDialogState: {
@@ -2667,10 +3033,14 @@ function* closeDeleteUserDialog({ payload }) {
 }
 function* teamSagas() {
     yield takeLatest(actions.loadUsers, loadUsers);
+    yield takeLatest(actions.loadAllSubTenantsUsers, loadAllSubTenantsUsers);
     yield takeLatest(actions.loadRoles, loadRoles);
     yield takeEvery(actions.addUser, addUser);
+    yield takeEvery(actions.addUserToSubTenants, addUserToSubTenants);
     yield takeEvery(actions.updateUser, updateUser);
+    yield takeEvery(actions.setUserRolesForSubTenants, setUserRolesForSubTenants);
     yield takeEvery(actions.deleteUser, deleteUser);
+    yield takeEvery(actions.deleteUserFromSubTenants, deleteUserFromSubTenants);
     yield takeEvery(actions.resendActivationLink, resendActivationLink);
     yield takeEvery(actions.resendInvitationLink, resendInvitationLink);
     yield takeEvery(actions.getInvitationLink, getInvitationLink);
@@ -2707,6 +3077,38 @@ function* loadUsersMock({ payload }) {
     yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: false }));
     callback === null || callback === void 0 ? void 0 : callback(usersDemo);
 }
+function* loadAllSubTenantsUsersMock({ payload, }) {
+    var _a, _b, _c, _d, _e;
+    const { silentLoading, callback } = payload;
+    const teamState = yield selectTeamState();
+    const _limit = (_a = payload._limit) !== null && _a !== void 0 ? _a : teamState.allUsersQueryParams._limit;
+    const _offset = (_b = payload._offset) !== null && _b !== void 0 ? _b : teamState.allUsersQueryParams._offset;
+    const _filter = (_c = payload._filter) !== null && _c !== void 0 ? _c : teamState.allUsersQueryParams._filter;
+    const _sortBy = (_d = payload._sortBy) !== null && _d !== void 0 ? _d : teamState.allUsersQueryParams._sortBy;
+    const _order = (_e = payload._order) !== null && _e !== void 0 ? _e : teamState.allUsersQueryParams._order;
+    yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: !silentLoading }));
+    yield put(actions.setTeamState({
+        allUsersQueryParams: {
+            _limit,
+            _offset,
+            _filter,
+            _sortBy,
+            _order,
+        },
+    }));
+    const totalPages = 2;
+    const totalItems = 10;
+    yield delay();
+    yield put(actions.setTeamState({
+        allUsers: allUsersDemo,
+        totalPages,
+        totalItems,
+        roles: rolesDemo,
+        permissions: permissionsDemo,
+    }));
+    yield put(actions.setTeamLoader({ key: TeamStateKeys.USERS, value: false }));
+    callback === null || callback === void 0 ? void 0 : callback(allUsersDemo);
+}
 function* loadRolesMock({ payload }) {
     var _a;
     yield put(actions.setTeamLoader({ key: TeamStateKeys.ROLES_AND_PERMISSIONS, value: true }));
@@ -2727,6 +3129,18 @@ function* addUserMock({ payload }) {
         addUserDialogState: { open: false, loading: false },
     }));
 }
+function* addUserToSubTenantsMock({ payload }) {
+    const { callback } = payload, body = __rest(payload, ["callback"]);
+    const teamState = yield selectTeamState();
+    yield put(actions.setTeamState({ addUserDialogState: Object.assign(Object.assign({}, teamState.addUserDialogState), { loading: true }) }));
+    yield delay();
+    const newUser = Object.assign(Object.assign(Object.assign({}, userTeamDemo), body), { id: `${v4()}` });
+    yield put(actions.setTeamState({
+        users: [newUser, ...teamState.users],
+        addUserDialogState: { open: false, loading: false },
+    }));
+    callback === null || callback === void 0 ? void 0 : callback(null);
+}
 function* updateUserMock({ payload }) {
     var _a;
     const { callback, profileImage } = payload, body = __rest(payload, ["callback", "profileImage"]);
@@ -2767,6 +3181,17 @@ function* deleteUserMock({ payload }) {
         deleteUserDialogState: { open: false, loading: false },
     }));
 }
+function* deleteUserFromSubTenantsMock({ payload }) {
+    const { callback } = payload, body = __rest(payload, ["callback"]);
+    const teamState = yield selectTeamState();
+    yield put(actions.setTeamState({ deleteUserDialogState: Object.assign(Object.assign({}, teamState.deleteUserDialogState), { loading: true }) }));
+    yield delay();
+    callback === null || callback === void 0 ? void 0 : callback(true);
+    yield put(actions.setTeamState({
+        allUsers: teamState.allUsers.filter((user) => user.id !== body.userId),
+        deleteUserDialogState: { open: false, loading: false },
+    }));
+}
 function* resendActivationLinkMock({ payload }) {
     const { callback } = payload, body = __rest(payload, ["callback"]);
     yield put(actions.setTeamLoader({ key: TeamStateKeys.RESEND_ACTIVATE_LINK, value: body.userId }));
@@ -2783,10 +3208,13 @@ function* resendInvitationLinkMock({ payload }) {
 }
 function* teamSagasMock() {
     yield takeLatest(actions.loadUsers, loadUsersMock);
+    yield takeLatest(actions.loadAllSubTenantsUsers, loadAllSubTenantsUsersMock);
     yield takeLatest(actions.loadRoles, loadRolesMock);
     yield takeEvery(actions.addUser, addUserMock);
+    yield takeEvery(actions.addUserToSubTenants, addUserToSubTenantsMock);
     yield takeEvery(actions.updateUser, updateUserMock);
     yield takeEvery(actions.deleteUser, deleteUserMock);
+    yield takeEvery(actions.deleteUserFromSubTenants, deleteUserFromSubTenantsMock);
     yield takeEvery(actions.resendActivationLink, resendActivationLinkMock);
     yield takeEvery(actions.resendInvitationLink, resendInvitationLinkMock);
     yield takeEvery(actions.openAddUserDialog, openAddUserDialog);
@@ -2847,6 +3275,9 @@ function* loginViaSocialLogin(_a) {
                 name,
             });
         }
+        if (email) {
+            localStorage.setItem('email', email);
+        }
         yield put(actions.setLoginState({ email, isNewUser }));
         yield refreshToken();
         yield put(actions.setSocialLoginsState({ loading: false }));
@@ -3085,6 +3516,7 @@ function* loadSecurityPolicy() {
     yield put(actions.loadSecurityPolicyVendorMfa());
     yield put(actions.loadSecurityPolicyLockout());
     yield put(actions.loadSecurityPolicyCaptcha());
+    yield put(actions.loadPublicAuthStrategiesPolicy());
 }
 function* loadPublicSecurityPolicy() {
     yield put(actions.setSecurityPolicyPublicState({ loading: true, error: null }));
@@ -3096,6 +3528,16 @@ function* loadPublicSecurityPolicy() {
         yield put(actions.setSecurityPolicyPublicState({ error: e.message, loading: false }));
     }
 }
+function* loadPublicAuthStrategiesPolicy() {
+    yield put(actions.setSecurityPolicyAuthStrategyPublicState({ loading: true, error: null }));
+    try {
+        const policy = yield call(api.auth.getVendorPublicAuthStrategiesConfig);
+        yield put(actions.setSecurityPolicyAuthStrategyPublicState({ policy, loading: false }));
+    }
+    catch (e) {
+        yield put(actions.setSecurityPolicyAuthStrategyPublicState({ error: e.message, loading: false }));
+    }
+}
 function* loadSecurityPolicyMfa() {
     yield put(actions.setSecurityPolicyMfaState({ loading: true, error: null }));
     try {
@@ -3207,6 +3649,7 @@ function* securityPolicySagas() {
     yield takeEvery(actions.loadSecurityPolicyPasswordHistory, loadSecurityPolicyPasswordHistory);
     yield takeEvery(actions.loadVendorPasswordConfig, loadVendorPasswordConfig);
     yield takeEvery(actions.loadPublicSecurityPolicy, loadPublicSecurityPolicy);
+    yield takeEvery(actions.loadPublicAuthStrategiesPolicy, loadPublicAuthStrategiesPolicy);
 }
 /*********************************
  *  Preview Sagas
@@ -3402,10 +3845,24 @@ function* loadSubTenants({ payload }) {
         (_b = payload === null || payload === void 0 ? void 0 : payload.callback) === null || _b === void 0 ? void 0 : _b.call(payload, null, e);
     }
 }
+function* loadSubTenantsTree({ payload }) {
+    var _a, _b;
+    yield put(actions.setTenantsState({ loading: true }));
+    try {
+        const tenantTree = yield call(api.tenants.getSubTenantsAsTree);
+        yield put(actions.setTenantsState({ tenantTree, loading: false }));
+        (_a = payload === null || payload === void 0 ? void 0 : payload.callback) === null || _a === void 0 ? void 0 : _a.call(payload, true);
+    }
+    catch (e) {
+        yield put(actions.setTenantsState({ loading: false }));
+        (_b = payload === null || payload === void 0 ? void 0 : payload.callback) === null || _b === void 0 ? void 0 : _b.call(payload, null, e);
+    }
+}
 function* tenantsSagas() {
     yield takeEvery(actions.loadTenants, loadTenants);
     yield takeEvery(actions.loadSubTenants, loadSubTenants);
     yield takeEvery(actions.switchTenant, switchTenant);
+    yield takeEvery(actions.loadSubTenantsTree, loadSubTenantsTree);
 }
 /*********************************
  *  Preview Sagas
@@ -3618,4 +4075,4 @@ var authStore = {
     actions,
 };
 
-export { AcceptInvitationStep, ActivateAccountStep, ApiStateKeys, AuthenticationTypes, ForgotPasswordStep, LoginStep, MFAStep, ResetPhoneNumberStep, SSOStateKeys, SamlVendors, SignUpStage, TeamStateKeys, UserVeirifedOriginTypes, actions$e as acceptInvitationActions, reducers$d as acceptInvitationReducers, acceptInvitationState, actions$3 as accountSettingsActions, reducers$2 as accountSettingsReducers, accountSettingsState, actions$f as activateAccountActions, reducers$e as activateAccountReducers, activateState, actions$5 as apiTokensActions, reducers$4 as apiTokensReducers, apiTokensState, actions as authActions, initialState as authInitialState, mockSagas as authMockSagas, reducer as authReducers, sagas as authSagas, authStore as default, actions$d as forgotPasswordActions, reducers$c as forgotPasswordReducers, forgotPasswordState, actions$g as loginActions, reducers$f as loginReducers, loginState, actions$9 as mfaActions, reducers$8 as mfaReducers, mfaState, actions$a as profileActions, reducers$9 as profileReducers, profileState, actions$c as resetPhoneNumberActions, reducers$b as resetPhoneNumberReducers, resetPhoneNumberState, actions$1 as rolesActions, reducers as rolesReducers, rolesState, actions$4 as securityPolicyActions, reducers$3 as securityPolicyReducers, securityPolicyState, actions$6 as signUpActions, reducers$5 as signUpReducers, signUpState, socialLoginState, actions$7 as socialLoginsActions, reducers$6 as socialLoginsReducer, actions$b as ssoActions, reducers$a as ssoReducers, ssoState, actions$8 as teamActions, reducers$7 as teamReducers, teamState, actions$2 as tenantsActions, reducers$1 as tenantsReducers, tenantsState };
+export { AcceptInvitationStep, ActivateAccountStep, ApiStateKeys, AuthenticationTypes, ForgotPasswordStep, LoginFlow, LoginStep, MFAStep, QuickLoginStrategy, ResetPhoneNumberStep, SSOStateKeys, SamlVendors, SignUpStage, TeamStateKeys, UserVeirifedOriginTypes, actions$e as acceptInvitationActions, reducers$d as acceptInvitationReducers, acceptInvitationState, actions$3 as accountSettingsActions, reducers$2 as accountSettingsReducers, accountSettingsState, actions$f as activateAccountActions, reducers$e as activateAccountReducers, activateState, actions$5 as apiTokensActions, reducers$4 as apiTokensReducers, apiTokensState, actions as authActions, initialState as authInitialState, mockSagas as authMockSagas, reducer as authReducers, sagas as authSagas, authStore as default, actions$d as forgotPasswordActions, reducers$c as forgotPasswordReducers, forgotPasswordState, actions$g as loginActions, reducers$f as loginReducers, loginState, actions$9 as mfaActions, reducers$8 as mfaReducers, mfaState, actions$a as profileActions, reducers$9 as profileReducers, profileState, actions$c as resetPhoneNumberActions, reducers$b as resetPhoneNumberReducers, resetPhoneNumberState, actions$1 as rolesActions, reducers as rolesReducers, rolesState, actions$4 as securityPolicyActions, reducers$3 as securityPolicyReducers, securityPolicyState, actions$6 as signUpActions, reducers$5 as signUpReducers, signUpState, socialLoginState, actions$7 as socialLoginsActions, reducers$6 as socialLoginsReducer, actions$b as ssoActions, reducers$a as ssoReducers, ssoState, actions$8 as teamActions, reducers$7 as teamReducers, teamState, actions$2 as tenantsActions, reducers$1 as tenantsReducers, tenantsState };