@frontegg/redux-store 6.75.0-alpha.2 → 6.75.0-alpha.4

package/auth/AcceptInvitationState/index.d.ts

@@ -45,6 +45,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -86,6 +87,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/AccountSettingsState/index.d.ts

@@ -46,6 +46,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -87,6 +88,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/ActivateState/index.d.ts

@@ -25,10 +25,7 @@ declare const reducers: {
             activateState: ActivateAccountState;
             acceptInvitationState: import("..").AcceptInvitationState;
             forgotPasswordState: import("..").ForgotPasswordState;
-            resetPhoneNumberState: import("..").ResetPhoneNumberState; /**
-             *  if you see error in matcher that's mean the DispatchAction does not
-             *  contains the same functions in reducers and actions
-             */
+            resetPhoneNumberState: import("..").ResetPhoneNumberState;
             ssoState: import("..").SSOState;
             profileState: import("..").ProfileState;
             mfaState: import("..").MFAState;
@@ -49,6 +46,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -69,10 +67,7 @@ declare const reducers: {
         activateState: ActivateAccountState;
         acceptInvitationState: import("..").AcceptInvitationState;
         forgotPasswordState: import("..").ForgotPasswordState;
-        resetPhoneNumberState: import("..").ResetPhoneNumberState; /**
-         *  if you see error in matcher that's mean the DispatchAction does not
-         *  contains the same functions in reducers and actions
-         */
+        resetPhoneNumberState: import("..").ResetPhoneNumberState;
         ssoState: import("..").SSOState;
         profileState: import("..").ProfileState;
         mfaState: import("..").MFAState;
@@ -93,6 +88,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -119,10 +115,7 @@ declare const reducers: {
             activateState: ActivateAccountState;
             acceptInvitationState: import("..").AcceptInvitationState;
             forgotPasswordState: import("..").ForgotPasswordState;
-            resetPhoneNumberState: import("..").ResetPhoneNumberState; /**
-             *  if you see error in matcher that's mean the DispatchAction does not
-             *  contains the same functions in reducers and actions
-             */
+            resetPhoneNumberState: import("..").ResetPhoneNumberState;
             ssoState: import("..").SSOState;
             profileState: import("..").ProfileState;
             mfaState: import("..").MFAState;
@@ -143,6 +136,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;

package/auth/ApiTokensState/index.d.ts

@@ -63,6 +63,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -104,6 +105,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/ForgotPasswordState/index.d.ts

@@ -46,6 +46,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -87,6 +88,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/GroupsState/groupsDialogsState.d.ts

@@ -44,6 +44,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -85,6 +86,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -125,6 +127,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -165,6 +168,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -212,6 +216,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -253,6 +258,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -321,6 +327,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -362,6 +369,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -402,6 +410,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -442,6 +451,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;
@@ -489,6 +499,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -530,6 +541,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/GroupsState/index.d.ts

@@ -62,6 +62,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -103,6 +104,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/ImpersonationState/index.d.ts

@@ -45,6 +45,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -86,6 +87,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/LoginState/index.d.ts

@@ -47,6 +47,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -88,6 +89,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/LoginState/interfaces.d.ts

@@ -13,7 +13,8 @@ export declare enum LoginStep {
     'loginWithSSOFailed' = "loginWithSSOFailed",
     'success' = "success",
     'forceTwoFactor' = "forceTwoFactor",
-    'recoverTwoFactor' = "recoverTwoFactor"
+    'recoverTwoFactor' = "recoverTwoFactor",
+    'promptPasskeys' = "promptPasskeys"
 }
 export declare enum LoginFlow {
     Login = "login",

package/auth/LoginState/interfaces.js

@@ -13,6 +13,7 @@ export let LoginStep;
   LoginStep["success"] = "success";
   LoginStep["forceTwoFactor"] = "forceTwoFactor";
   LoginStep["recoverTwoFactor"] = "recoverTwoFactor";
+  LoginStep["promptPasskeys"] = "promptPasskeys";
 })(LoginStep || (LoginStep = {}));
 export let LoginFlow;
 (function (LoginFlow) {

package/auth/LoginState/saga.d.ts

@@ -1,9 +1,9 @@
 import { CallEffect } from 'redux-saga/effects';
-import { ILoginResponse, ISamlMetadata } from '@frontegg/rest-api';
+import { ILoginResponse, ISamlMetadata, IWebAuthnDevices } from '@frontegg/rest-api';
 import { AuthState } from '../interfaces';
 import { LoginFlow, LoginStep, QuickLoginStrategy } from './interfaces';
 import { MFAState } from '../MfaState/interfaces';
-export declare function afterAuthNavigation(): Generator<import("redux-saga/effects").SelectEffect | CallEffect<true>, void, {
+export declare function afterAuthNavigation(): Generator<Promise<unknown> | import("redux-saga/effects").SelectEffect, void, {
     routes: any;
     includeQueryParam: any;
 }>;
@@ -50,5 +50,11 @@ export declare function getMfaRequiredState(user: any): Generator<import("redux-
 }>;
 export declare function refreshToken(): Generator<import("redux-saga/effects").SelectEffect | CallEffect<any>, void, AuthState>;
 export declare function refreshTokenForSocialLogins(): Generator<import("redux-saga/effects").SelectEffect | CallEffect<any>, void, AuthState>;
+export declare function shouldShowPromptPasskeys(): Generator<import("redux-saga/effects").SelectEffect | CallEffect<IWebAuthnDevices> | import("redux-saga/effects").PutEffect<{
+    payload: Partial<import("../..").PasskeysState>;
+    type: string;
+}>, boolean, {
+    publicAuthStrategyPolicy: any;
+} & IWebAuthnDevices>;
 export declare function loginSagas(): Generator<import("redux-saga/effects").ForkEffect<never>, void, unknown>;
 export declare function loginSagasMock(): Generator<import("redux-saga/effects").ForkEffect<never>, void, unknown>;

package/auth/LoginState/saga.js

@@ -18,8 +18,8 @@ const _excluded = ["callback"],
   _excluded16 = ["callback", "deviceId"],
   _excluded17 = ["callback", "deviceId"],
   _excluded18 = ["callback", "deviceId"];
-import { all, call, delay, put, select, takeLeading } from 'redux-saga/effects';
-import { api, AuthStrategyEnum, ContextHolder, fetch, MFAStrategyEnum } from '@frontegg/rest-api';
+import { all, call, put, select, takeLeading } from 'redux-saga/effects';
+import { api, AuthStrategyEnum, ContextHolder, fetch, MFAStrategyEnum, WebAuthnDeviceType } from '@frontegg/rest-api';
 import { actions } from '../reducer';
 import { FRONTEGG_AFTER_AUTH_REDIRECT_URL, HOSTED_LOGIN_VERIFIER_KEY } from '../../constants';
 import { UserVeirifedOriginTypes } from '../interfaces';
@@ -29,10 +29,11 @@ import { MFAStep } from '../MfaState/interfaces';
 import { dummyIps, userDemo } from '../dummy';
 import { SamlVendors } from '../SSOState/interfaces';
 import { loadVendorPublicInfo } from '../../vendor/saga';
-import { createRandomString, generateCodeChallenge } from '../../helpers';
+import { createRandomString, generateCodeChallenge, useFeatureFlags } from '../../helpers';
 import { ResetPhoneNumberStep } from '../ResetPhoneNumberState/interfaces';
-import { base64urlDecode, publicKeyCredentialToJSON } from '../utils';
+import { base64urlDecode, delay, publicKeyCredentialToJSON } from '../utils';
 import { loadPublicAuthStrategiesPolicy } from '../SecurityPolicyState/saga';
+import { useIsPasskeysEnabled } from '../PasskeysState/helpers';
 const authStrategyLoginStepMap = {
   [AuthStrategyEnum.Code]: LoginStep.loginWithOtc,
   [AuthStrategyEnum.EmailAndPassword]: LoginStep.loginWithPassword,
@@ -361,25 +362,43 @@ function* refreshTokenEmbeddedSocialLogins() {
         preserveQueryParams: true
       });
     } else {
-      var _ref3;
-      if (user.id) {
-        localStorage.setItem('userId', user.id);
+      const shouldShowPrompt = yield call(shouldShowPromptPasskeys);
+      if (shouldShowPrompt) {
+        yield put(actions.setLoginState({
+          step: LoginStep.promptPasskeys,
+          loading: false
+        }));
+        yield put(actions.setTenantsState({
+          tenants,
+          loading: false
+        }));
+        yield put(actions.setState({
+          user
+        }));
+        onRedirectTo(routes.loginUrl, {
+          preserveQueryParams: true
+        });
+      } else {
+        var _ref3;
+        if (user.id) {
+          localStorage.setItem('userId', user.id);
+        }
+        const quickLoginToRegister = (_ref3 = localStorage.getItem('register-quick-login')) != null ? _ref3 : loginState.quickLoginToRegister;
+        const shouldNavigateToRegisterQuickLogin = yield shouldNevigateToRegisterQuickLogin(user);
+        yield put(actions.setTenantsState({
+          tenants,
+          loading: false
+        }));
+        yield put(actions.setState({
+          user,
+          isAuthenticated: true,
+          loginState: _extends({}, loginState, {
+            quickLoginToRegister,
+            flow: shouldNavigateToRegisterQuickLogin ? LoginFlow.RegisterQuickLogin : LoginFlow.Login
+          })
+        }));
+        yield handleRedirectRefreshToken(shouldNavigateToRegisterQuickLogin);
       }
-      const quickLoginToRegister = (_ref3 = localStorage.getItem('register-quick-login')) != null ? _ref3 : loginState.quickLoginToRegister;
-      const shouldNavigateToRegisterQuickLogin = yield shouldNevigateToRegisterQuickLogin(user);
-      yield put(actions.setTenantsState({
-        tenants,
-        loading: false
-      }));
-      yield put(actions.setState({
-        user,
-        isAuthenticated: true,
-        loginState: _extends({}, loginState, {
-          quickLoginToRegister,
-          flow: shouldNavigateToRegisterQuickLogin ? LoginFlow.RegisterQuickLogin : LoginFlow.Login
-        })
-      }));
-      yield handleRedirectRefreshToken(shouldNavigateToRegisterQuickLogin);
     }
   } catch (e) {
     ContextHolder.setAccessToken(null);
@@ -574,6 +593,13 @@ function* requestHostedLoginAuthorize(additionalParams) {
     code_challenge_method: 'S256',
     nonce
   }, additionalParams);
+  if (context.tenantResolver) {
+    var _context$tenantResolv;
+    const resolvedTenantResult = yield (_context$tenantResolv = context.tenantResolver) == null ? void 0 : _context$tenantResolv.call(context);
+    if (resolvedTenantResult != null && resolvedTenantResult.tenant) {
+      params['organization'] = resolvedTenantResult.tenant;
+    }
+  }
   const searchParams = new URLSearchParams(params);
   const url = `${oauthUrl}?${searchParams.toString()}`;
   onRedirectTo(url, {
@@ -748,6 +774,30 @@ function* passwordlessPreLogin(_ref7) {
     callback == null ? void 0 : callback();
   }
 }
+export function* shouldShowPromptPasskeys() {
+  const {
+    publicAuthStrategyPolicy
+  } = yield select(state => state.auth.securityPolicyState);
+  const {
+    policy
+  } = publicAuthStrategyPolicy;
+  const isPasskeysEnabledByVendor = useIsPasskeysEnabled(policy);
+  const isLoggedInWithPasskeys = localStorage.getItem('preferred-login-method') === 'Passkeys';
+  const isMarkedDontShowAgainPrompt = localStorage.getItem('dont-show-again-prompt-passkeys') === 'true';
+  const [showPasskeys] = useFeatureFlags(['show-passkeys']);
+  if (!showPasskeys || !isPasskeysEnabledByVendor || isLoggedInWithPasskeys || isMarkedDontShowAgainPrompt) {
+    return false;
+  } else {
+    const {
+      devices
+    } = yield call(api.auth.getWebAuthnDevices);
+    yield put(actions.setPasskeysState({
+      devices: devices != null ? devices : []
+    }));
+    const numOfDevices = !(devices != null && devices.length) ? 0 : devices.length;
+    return numOfDevices === 0;
+  }
+}
 function* passwordlessPostLogin(_ref8) {
   let {
       payload: {
@@ -791,15 +841,31 @@ function* passwordlessPostLogin(_ref8) {
         localStorage.setItem('userId', user.id);
       }
       yield put(actions.setState({
-        user,
-        isAuthenticated: true
+        user
       }));
       yield put(actions.setLoginState({
         error: undefined
       }));
       yield put(actions.loadTenants());
+      yield put(actions.setState({
+        isLoading: false
+      }));
       if (loginState.flow === LoginFlow.Login) {
-        yield afterAuthNavigation();
+        const shouldShowPrompt = yield call(shouldShowPromptPasskeys);
+        if (shouldShowPrompt) {
+          yield put(actions.setLoginState({
+            step: LoginStep.promptPasskeys,
+            loading: false
+          }));
+          onRedirectTo(routes.loginUrl, {
+            preserveQueryParams: true
+          });
+        } else {
+          yield put(actions.setState({
+            isAuthenticated: true
+          }));
+          yield afterAuthNavigation();
+        }
       } else {
         onRedirectTo(routes.loginUrl, {
           preserveQueryParams: true
@@ -989,9 +1055,11 @@ function* webAuthnVerifyNewDeviceSession(_ref10) {
       loading: true
     }));
     const publicKey = publicKeyCredentialToJSON(body.publicKey);
+    const deviceType = (publicKey == null ? void 0 : publicKey.authenticatorAttachment) === 'platform' ? WebAuthnDeviceType.Platform : WebAuthnDeviceType.CrossPlatform;
     yield call(api.auth.verifyNewDeviceSession, {
       id: publicKey.id,
-      response: publicKey.response
+      response: publicKey.response,
+      deviceType: deviceType
     });
     callback == null ? void 0 : callback(true);
   } catch (e) {
@@ -1191,7 +1259,18 @@ function* login({
       }));
       yield put(actions.loadTenants());
       if (isAuthenticated && loginState.flow === LoginFlow.Login) {
-        yield afterAuthNavigation();
+        const shouldShowPrompt = yield call(shouldShowPromptPasskeys);
+        if (shouldShowPrompt) {
+          yield put(actions.setLoginState({
+            step: LoginStep.promptPasskeys,
+            loading: false
+          }));
+          onRedirectTo(routes.loginUrl, {
+            preserveQueryParams: true
+          });
+        } else {
+          yield afterAuthNavigation();
+        }
       }
     }
 
@@ -1251,7 +1330,15 @@ function* loginWithMfa({
       loading: false
     }));
     if (loginState.flow === LoginFlow.Login) {
-      yield afterAuthNavigation();
+      const shouldShowPrompt = yield call(shouldShowPromptPasskeys);
+      if (shouldShowPrompt) {
+        yield put(actions.setLoginState({
+          step: LoginStep.promptPasskeys,
+          loading: false
+        }));
+      } else {
+        yield afterAuthNavigation();
+      }
     }
     callback == null ? void 0 : callback(true);
   } catch (e) {
@@ -1357,7 +1444,15 @@ function* handleVerifyMFAResponse({
     localStorage.setItem('userId', user.id);
   }
   if (loginState.flow === LoginFlow.Login) {
-    yield afterAuthNavigation();
+    const shouldShowPrompt = yield call(shouldShowPromptPasskeys);
+    if (shouldShowPrompt) {
+      yield put(actions.setLoginState({
+        step: LoginStep.promptPasskeys,
+        loading: false
+      }));
+    } else {
+      yield afterAuthNavigation();
+    }
   }
   yield put(actions.setState({
     isAuthenticated: true

package/auth/MfaState/index.d.ts

@@ -47,6 +47,7 @@ declare const reducers: {
             disableSilentRefresh?: boolean | undefined;
             sessionsPolicyState: import("..").SessionsPolicyState;
             impersonateState?: import("..").ImpersonateState | undefined;
+            passkeysState?: import("..").PasskeysState | undefined;
             routes: import("..").AuthPageRoutes;
             header?: any;
             loaderComponent?: any;
@@ -88,6 +89,7 @@ declare const reducers: {
         disableSilentRefresh?: boolean | undefined;
         sessionsPolicyState: import("..").SessionsPolicyState;
         impersonateState?: import("..").ImpersonateState | undefined;
+        passkeysState?: import("..").PasskeysState | undefined;
         routes: import("..").AuthPageRoutes;
         header?: any;
         loaderComponent?: any;

package/auth/PasskeysState/helpers.d.ts

@@ -0,0 +1,2 @@
+import { IAuthStrategiesConfig } from '@frontegg/rest-api';
+export declare const useIsPasskeysEnabled: (policy: IAuthStrategiesConfig) => boolean;

package/auth/PasskeysState/helpers.js

@@ -0,0 +1,7 @@
+import { SecondaryAuthStrategy } from '@frontegg/rest-api';
+export const useIsPasskeysEnabled = policy => {
+  return !!(policy != null && policy.secondaryAuthStrategies.some(({
+    isActive,
+    strategy
+  }) => isActive && strategy === SecondaryAuthStrategy.Passkeys));
+};