@frontegg/redux-store 7.104.0-alpha.0 → 7.104.0

package/auth/ForgotPasswordState/actions.d.ts

@@ -7,7 +7,15 @@ declare const _default: (store: FronteggState, api: RestApi, sharedActions: Shar
     resetForgotPasswordState: () => void;
     forgotPassword: (payload: IForgotPasswordPayload) => Promise<void>;
     resetPassword: (payload: IResetPasswordPayload) => Promise<void>;
-    loadPasswordConfig: (payload?: IGetUserPasswordConfig) => Promise<void>;
+    loadPasswordConfig: (payload?: IGetUserPasswordConfig & {
+        signal?: AbortSignal;
+    }) => Promise<void>;
+    validateResetPasswordToken: (payload: {
+        userId: string;
+        token: string;
+        skipValidation?: boolean;
+        signal?: AbortSignal;
+    }) => Promise<void>;
     determinePasswordRecoveryStrategy: (payload: IDeterminePasswordRecoveryStrategyPayload) => Promise<void>;
     sendPasswordRecoveryEmail: () => Promise<void>;
     sendPasswordRecoverySms: () => Promise<void>;

package/auth/ForgotPasswordState/actions.js

@@ -3,7 +3,7 @@ const _excluded = ["callback"];
 import { PasswordRecoveryStrategyEnum } from '@frontegg/rest-api';
 import { ForgotPasswordStep } from './interfaces';
 import { initialState } from './state';
-import { errorHandler, deepResetState } from '../../helpers';
+import { errorHandler, deepResetState, isFronteggApiError } from '../../helpers';
 import { FORGOT_PASSWORD_ERROR_KEYS } from './consts';
 export default ((store, api, sharedActions) => {
   const actions = sharedActions;
@@ -129,7 +129,8 @@ export default ((store, api, sharedActions) => {
         error: undefined,
         userId: response.userId,
         token: response.token,
-        step: ForgotPasswordStep.resetPasswordPage
+        step: ForgotPasswordStep.resetPasswordPage,
+        resetTokenValidationStatus: 'valid'
       });
     } catch (e) {
       setForgotPasswordState({
@@ -206,18 +207,81 @@ export default ((store, api, sharedActions) => {
       loading: true
     });
     try {
-      const passwordConfig = await api.auth.loadPasswordConfig(payload);
+      var _payload$signal;
+      const passwordConfig = await api.auth.loadPasswordConfig(payload ? {
+        userId: payload.userId
+      } : undefined);
+      if (payload != null && (_payload$signal = payload.signal) != null && _payload$signal.aborted) return;
       setForgotPasswordState({
         loading: false,
         passwordConfig
       });
     } catch (e) {
+      var _payload$signal2;
+      if (payload != null && (_payload$signal2 = payload.signal) != null && _payload$signal2.aborted) return;
       setForgotPasswordState({
         loading: false,
         error: errorHandler(e)
       });
     }
   };
+  const validateResetPasswordToken = async payload => {
+    if (payload.skipValidation || store.auth.forgotPasswordState.resetTokenValidationStatus === 'valid') {
+      var _payload$signal3;
+      if (!((_payload$signal3 = payload.signal) != null && _payload$signal3.aborted)) {
+        setForgotPasswordState({
+          resetTokenValidationStatus: 'valid',
+          error: undefined
+        });
+      }
+      return;
+    }
+    setForgotPasswordState({
+      resetTokenValidationStatus: 'pending',
+      error: undefined
+    });
+    try {
+      var _payload$signal4;
+      await api.auth.validateResetPasswordToken({
+        userId: payload.userId,
+        token: payload.token
+      });
+      if ((_payload$signal4 = payload.signal) != null && _payload$signal4.aborted) return;
+      setForgotPasswordState({
+        resetTokenValidationStatus: 'valid',
+        error: undefined
+      });
+    } catch (e) {
+      var _payload$signal5;
+      if ((_payload$signal5 = payload.signal) != null && _payload$signal5.aborted) return;
+      const handled = errorHandler(e);
+      if (isFronteggApiError(handled)) {
+        const status = handled.statusCode;
+        // Identity: 400 = bad request / missing input; 410 = expired or consumed. Both use the same link-expired screen (invalid).
+        // 403/422 included if the API or gateway uses them for invalid tokens.
+        const tokenInvalid = status === 400 || status === 403 || status === 410 || status === 422;
+        const degradeToLegacyFlow = status === 401 || status === 404 || status >= 500;
+        if (tokenInvalid) {
+          setForgotPasswordState({
+            resetTokenValidationStatus: 'invalid',
+            error: undefined
+          });
+          return;
+        }
+        if (degradeToLegacyFlow) {
+          setForgotPasswordState({
+            resetTokenValidationStatus: 'valid',
+            error: undefined
+          });
+          return;
+        }
+      }
+      setForgotPasswordState({
+        resetTokenValidationStatus: 'valid',
+        error: undefined
+      });
+    }
+  };
   return {
     loadPasswordRecoveryStrategies,
     setForgotPasswordState,
@@ -225,6 +289,7 @@ export default ((store, api, sharedActions) => {
     forgotPassword,
     resetPassword,
     loadPasswordConfig,
+    validateResetPasswordToken,
     determinePasswordRecoveryStrategy,
     sendPasswordRecoveryEmail,
     sendPasswordRecoverySms,

package/auth/ForgotPasswordState/interfaces.d.ts

@@ -1,5 +1,6 @@
 import type { EIdentifierType, IForgotPassword, IResetPassword, IPasswordRecoveryStrategy } from '@frontegg/rest-api';
 import type { WithCallback } from '../../interfaces';
+export type ResetTokenValidationStatus = 'idle' | 'pending' | 'valid' | 'invalid';
 export declare enum ForgotPasswordStep {
     'forgotPassword' = "forgotPassword",
     'resetPasswordViaSms' = "resetPasswordViaSms",
@@ -26,6 +27,7 @@ export interface ForgotPasswordState {
     token?: string;
     error?: any;
     activeStrategies?: IPasswordRecoveryStrategy[];
+    resetTokenValidationStatus: ResetTokenValidationStatus;
 }
 export interface IForgotPasswordPayload extends WithCallback<IForgotPassword> {
     recaptchaToken?: string;

package/auth/ForgotPasswordState/state.js

@@ -9,6 +9,7 @@ export const initialState = {
   sessionId: '',
   userId: '',
   token: '',
-  passwordConfig: null
+  passwordConfig: null,
+  resetTokenValidationStatus: 'idle'
 };
 export default (overrideState => createProxy(initialState, overrideState));

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v7.104.0-alpha.0
+/** @license Frontegg v7.104.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/mocks/auth-mocks/forgotPasswordActions.mocks.d.ts

@@ -6,7 +6,15 @@ declare const _default: (store: FronteggState, api: RestApi, actions: SharedActi
     resetForgotPasswordState: () => void;
     forgotPassword: (payload: import("../..").IForgotPasswordPayload) => Promise<void>;
     resetPassword: (payload: import("../..").IResetPasswordPayload) => Promise<void>;
-    loadPasswordConfig: (payload?: IGetUserPasswordConfig) => Promise<void>;
+    loadPasswordConfig: (payload?: IGetUserPasswordConfig & {
+        signal?: AbortSignal;
+    }) => Promise<void>;
+    validateResetPasswordToken: (payload: {
+        userId: string;
+        token: string;
+        skipValidation?: boolean;
+        signal?: AbortSignal;
+    }) => Promise<void>;
     determinePasswordRecoveryStrategy: (payload: import("../..").IDeterminePasswordRecoveryStrategyPayload) => Promise<void>;
     sendPasswordRecoveryEmail: () => Promise<void>;
     sendPasswordRecoverySms: () => Promise<void>;

package/mocks/auth-mocks/forgotPasswordActions.mocks.js

@@ -26,5 +26,19 @@ export default ((store, api, actions) => {
       });
     }
   };
+  mockedActions.validateResetPasswordToken = async payload => {
+    if (payload.skipValidation) {
+      mockedActions.setForgotPasswordState({
+        resetTokenValidationStatus: 'valid'
+      });
+      return;
+    }
+    mockedActions.setForgotPasswordState({
+      resetTokenValidationStatus: 'pending'
+    });
+    mockedActions.setForgotPasswordState({
+      resetTokenValidationStatus: 'valid'
+    });
+  };
   return mockedActions;
 });

package/node/auth/ForgotPasswordState/actions.js

@@ -136,7 +136,8 @@ var _default = (store, api, sharedActions) => {
         error: undefined,
         userId: response.userId,
         token: response.token,
-        step: _interfaces.ForgotPasswordStep.resetPasswordPage
+        step: _interfaces.ForgotPasswordStep.resetPasswordPage,
+        resetTokenValidationStatus: 'valid'
       });
     } catch (e) {
       setForgotPasswordState({
@@ -213,18 +214,81 @@ var _default = (store, api, sharedActions) => {
       loading: true
     });
     try {
-      const passwordConfig = await api.auth.loadPasswordConfig(payload);
+      var _payload$signal;
+      const passwordConfig = await api.auth.loadPasswordConfig(payload ? {
+        userId: payload.userId
+      } : undefined);
+      if (payload != null && (_payload$signal = payload.signal) != null && _payload$signal.aborted) return;
       setForgotPasswordState({
         loading: false,
         passwordConfig
       });
     } catch (e) {
+      var _payload$signal2;
+      if (payload != null && (_payload$signal2 = payload.signal) != null && _payload$signal2.aborted) return;
       setForgotPasswordState({
         loading: false,
         error: (0, _helpers.errorHandler)(e)
       });
     }
   };
+  const validateResetPasswordToken = async payload => {
+    if (payload.skipValidation || store.auth.forgotPasswordState.resetTokenValidationStatus === 'valid') {
+      var _payload$signal3;
+      if (!((_payload$signal3 = payload.signal) != null && _payload$signal3.aborted)) {
+        setForgotPasswordState({
+          resetTokenValidationStatus: 'valid',
+          error: undefined
+        });
+      }
+      return;
+    }
+    setForgotPasswordState({
+      resetTokenValidationStatus: 'pending',
+      error: undefined
+    });
+    try {
+      var _payload$signal4;
+      await api.auth.validateResetPasswordToken({
+        userId: payload.userId,
+        token: payload.token
+      });
+      if ((_payload$signal4 = payload.signal) != null && _payload$signal4.aborted) return;
+      setForgotPasswordState({
+        resetTokenValidationStatus: 'valid',
+        error: undefined
+      });
+    } catch (e) {
+      var _payload$signal5;
+      if ((_payload$signal5 = payload.signal) != null && _payload$signal5.aborted) return;
+      const handled = (0, _helpers.errorHandler)(e);
+      if ((0, _helpers.isFronteggApiError)(handled)) {
+        const status = handled.statusCode;
+        // Identity: 400 = bad request / missing input; 410 = expired or consumed. Both use the same link-expired screen (invalid).
+        // 403/422 included if the API or gateway uses them for invalid tokens.
+        const tokenInvalid = status === 400 || status === 403 || status === 410 || status === 422;
+        const degradeToLegacyFlow = status === 401 || status === 404 || status >= 500;
+        if (tokenInvalid) {
+          setForgotPasswordState({
+            resetTokenValidationStatus: 'invalid',
+            error: undefined
+          });
+          return;
+        }
+        if (degradeToLegacyFlow) {
+          setForgotPasswordState({
+            resetTokenValidationStatus: 'valid',
+            error: undefined
+          });
+          return;
+        }
+      }
+      setForgotPasswordState({
+        resetTokenValidationStatus: 'valid',
+        error: undefined
+      });
+    }
+  };
   return {
     loadPasswordRecoveryStrategies,
     setForgotPasswordState,
@@ -232,6 +296,7 @@ var _default = (store, api, sharedActions) => {
     forgotPassword,
     resetPassword,
     loadPasswordConfig,
+    validateResetPasswordToken,
     determinePasswordRecoveryStrategy,
     sendPasswordRecoveryEmail,
     sendPasswordRecoverySms,

package/node/auth/ForgotPasswordState/state.js

@@ -15,7 +15,8 @@ const initialState = {
   sessionId: '',
   userId: '',
   token: '',
-  passwordConfig: null
+  passwordConfig: null,
+  resetTokenValidationStatus: 'idle'
 };
 exports.initialState = initialState;
 var _default = overrideState => (0, _proxy.createProxy)(initialState, overrideState);

package/node/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v7.104.0-alpha.0
+/** @license Frontegg v7.104.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/node/mocks/auth-mocks/forgotPasswordActions.mocks.js

@@ -32,6 +32,20 @@ var _default = (store, api, actions) => {
       });
     }
   };
+  mockedActions.validateResetPasswordToken = async payload => {
+    if (payload.skipValidation) {
+      mockedActions.setForgotPasswordState({
+        resetTokenValidationStatus: 'valid'
+      });
+      return;
+    }
+    mockedActions.setForgotPasswordState({
+      resetTokenValidationStatus: 'pending'
+    });
+    mockedActions.setForgotPasswordState({
+      resetTokenValidationStatus: 'valid'
+    });
+  };
   return mockedActions;
 };
 exports.default = _default;

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@frontegg/redux-store",
-  "version": "7.104.0-alpha.0",
+  "version": "7.104.0",
   "main": "./node/index.js",
   "license": "MIT",
   "author": "Frontegg LTD",
   "dependencies": {
     "@babel/runtime": "^7.18.6",
     "@frontegg/entitlements-javascript-commons": "1.1.2",
-    "@frontegg/rest-api": "7.104.0-alpha.0",
+    "@frontegg/rest-api": "7.104.0",
     "fast-deep-equal": "3.1.3",
     "get-value": "^3.0.1",
     "proxy-compare": "^3.0.0",