@frontegg/redux-store 7.58.0 → 7.60.0-alpha.0

package/auth/LoginState/actions/handleVerifyMFAResponse.actions.d.ts

@@ -1,8 +1,8 @@
-import { ILoginResponseV3 } from '@frontegg/rest-api';
+import { ILoginResponse, ILoginResponseV3 } from '@frontegg/rest-api';
 import { FronteggState, RestApi, SharedActions } from '../../../interfaces';
 export default function (store: FronteggState, api: RestApi, sharedActions: SharedActions): {
     postHandleVerifyMFAResponseForStepUp: () => Promise<void>;
-    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean) => Promise<void>;
+    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean, user: ILoginResponse) => Promise<void>;
     handleVerifyMFAResponse: (payload: ILoginResponseV3, isStepUp?: boolean) => Promise<void>;
     getFeatureFlags: (flags: string[]) => Promise<boolean[]>;
 };

package/auth/LoginState/actions/handleVerifyMFAResponse.actions.js

@@ -1,6 +1,7 @@
 import { FeatureFlags } from '@frontegg/rest-api';
 import { MFAStep } from '../../MfaState/interfaces';
 import { LoginFlow, LoginStep } from '../interfaces';
+import { isResetPasswordRequired, shouldShowPasswordRotationPromptFunc } from '../../helpers';
 export default function (store, api, sharedActions) {
   const actions = sharedActions;
 
@@ -25,26 +26,42 @@ export default function (store, api, sharedActions) {
    * Additional steps for after MFA authentication with authenticator app handler for login flow
    * @param isAuthenticated
    */
-  const postHandleVerifyMFAResponseForLogin = async isAuthenticated => {
+  const postHandleVerifyMFAResponseForLogin = async (isAuthenticated, user) => {
     const loginState = store.auth.loginState;
     const mfaStep = store.auth.mfaState.step;
-    const [securityCenterLoginFlows] = await getFeatureFlags(['security-center-show-login-flows']);
+    const [securityCenterLoginFlows, passwordRotationFlagEnabled] = await actions.getFeatureFlags(['security-center-show-login-flows', 'password-rotation']);
     if (loginState.flow === LoginFlow.Login) {
       if (securityCenterLoginFlows && loginState.isBreachedPassword && !isAuthenticated) {
         actions.setLoginState({
           step: LoginStep.breachedPassword,
           loading: false
         });
+        return;
+      }
+      if (passwordRotationFlagEnabled && isResetPasswordRequired(user, store.root.appName)) {
+        actions.setLoginState({
+          step: LoginStep.passwordRotationExpired,
+          loading: false,
+          resetPasswordToken: user.resetPasswordToken,
+          userId: user.userId
+        });
+        return;
+      }
+      if (passwordRotationFlagEnabled && shouldShowPasswordRotationPromptFunc(user)) {
+        actions.setLoginState({
+          step: LoginStep.passwordRotationNotification,
+          loading: false
+        });
+        return;
+      }
+      const shouldShowPasskeysPrompt = await actions.__shouldShowPromptPasskeys();
+      if (mfaStep === MFAStep.smsVerifyCode && shouldShowPasskeysPrompt) {
+        actions.setLoginState({
+          step: LoginStep.promptPasskeys,
+          loading: false
+        });
       } else {
-        const shouldShowPrompt = await actions.__shouldShowPromptPasskeys();
-        if (mfaStep === MFAStep.smsVerifyCode && shouldShowPrompt) {
-          actions.setLoginState({
-            step: LoginStep.promptPasskeys,
-            loading: false
-          });
-        } else {
-          await actions.afterAuthNavigation();
-        }
+        await actions.afterAuthNavigation();
       }
     }
   };
@@ -81,7 +98,7 @@ export default function (store, api, sharedActions) {
     if (isStepUp) {
       return await postHandleVerifyMFAResponseForStepUp();
     }
-    return await postHandleVerifyMFAResponseForLogin(isAuthenticated);
+    return await postHandleVerifyMFAResponseForLogin(isAuthenticated, user);
   };
   return {
     postHandleVerifyMFAResponseForStepUp,

package/auth/LoginState/actions/index.d.ts

@@ -1,6 +1,6 @@
 import { FronteggState, RestApi, SharedActions, WithCallback } from '../../../interfaces';
 import { FronteggNextJSSession, IEnrollMFAWebAuthnPayload, IPasswordlessPostLoginPayload, IPreEnrollMFAWebAuthNForLoginResponse, IQuickSmsPasswordlessPreLoginPayload, IRecoverMFATokenPayload, IVerifyNewWebAuthnDevicePayload, IWebAuthnPostLoginPayload, LoginState } from '../interfaces';
-import { IChangePhoneNumberWithVerification, ICreateNewDeviceSessionResponse, IEnrollMFAAuthenticatorApp, IEnrollMFASMS, IForgotPassword, ILogin, ILoginResponseV3, IPasswordlessPreLogin, IPostLogin, IPreEnrollMFA, IPreEnrollMFASMS, IPreLogin, IVerifyChangePhoneNumber, IVerifyInviteToken, IWebAuthnPreLogin, IWebAuthnPreLoginResponse } from '@frontegg/rest-api';
+import { IChangePhoneNumberWithVerification, ICreateNewDeviceSessionResponse, IEnrollMFAAuthenticatorApp, IEnrollMFASMS, IForgotPassword, ILogin, ILoginResponse, ILoginResponseV3, IPasswordlessPreLogin, IPostLogin, IPreEnrollMFA, IPreEnrollMFASMS, IPreLogin, IVerifyChangePhoneNumber, IVerifyInviteToken, IWebAuthnPreLogin, IWebAuthnPreLoginResponse } from '@frontegg/rest-api';
 import { AuthState, UserIPData } from '../../interfaces';
 import { MFAState } from '../../MfaState/interfaces';
 declare const _default: (store: FronteggState, api: RestApi, sharedActions: SharedActions) => {
@@ -23,7 +23,7 @@ declare const _default: (store: FronteggState, api: RestApi, sharedActions: Shar
         loginState: Partial<LoginState>;
     }>;
     postHandleVerifyMFAResponseForStepUp: () => Promise<void>;
-    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean) => Promise<void>;
+    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean, user: ILoginResponse) => Promise<void>;
     handleVerifyMFAResponse: (payload: ILoginResponseV3, isStepUp?: boolean) => Promise<void>;
     getFeatureFlags: (flags: string[]) => Promise<boolean[]>;
     afterAuthNavigationUtil: (resetStateAction: (() => void) | (() => Promise<void>), options?: import("../interfaces").AfterAuthNavigationUtilOptions) => Promise<void>;

package/auth/LoginState/actions/index.js

@@ -25,13 +25,13 @@ import mfaWithWebAuthnActions from './mfaWithWebAuthn.actions';
 import { LoginFlow, LoginStep } from '../interfaces';
 import { base64urlDecode, deepResetState, delay, errorHandler, errorTraceId, GTMEventAction, publicKeyCredentialToJSON, reportGTMEvent, retryIfNeeded, withRetryConfig } from '../../../helpers';
 import { initialState } from '../state';
-import { getSearchParam, isEmailPayload, TENANT_ID_PARAM_KEY } from '../helpers';
+import { getSearchParam, isEmailPayload, shouldShowPasswordRotationPromptFunc, TENANT_ID_PARAM_KEY } from '../helpers';
 import { AuthStrategyEnum, ContextHolder, removeTabTenantFromSessionStorage, WebAuthnDeviceType } from '@frontegg/rest-api';
 import hostedLoginAuthorizeActions from './hostedLoginAuthorize.actions';
 import { FronteggNativeModule, isEntitlementsDeeplyEqual } from '../../../toolkit';
 import { REQUEST_NAME, UserVerifiedOriginTypes } from '../../interfaces';
 import { authStrategyLoginStepMap } from '../consts';
-import { isMfaRequired } from '../../helpers';
+import { isMfaRequired, isResetPasswordRequired } from '../../helpers';
 import { MFAStep } from '../../MfaState/interfaces';
 import { SamlVendors } from '../../SSOState/interfaces';
 import { DEFAULT_RETRY_CONFIG } from '../../../constants';
@@ -465,50 +465,67 @@ export default ((store, api, sharedActions) => {
           preserveQueryParams: true
         });
       } else {
-        const loginState = store.auth.loginState;
-        const isAuthenticated = !!user.accessToken;
-        if (user.id) {
-          localStorage.setItem('userId', user.id);
-        }
-        actions.afterAuthenticationStateUpdate({
-          user,
-          tenants,
-          activeTenant
-        }, {
-          loginState: {
-            flow: loginState.flow,
-            quickLoginToRegister: loginState.quickLoginToRegister,
-            email,
+        const [securityCenterLoginFlows, passwordRotationFlagEnabled] = await actions.getFeatureFlags(['security-center-show-login-flows', 'password-rotation']);
+        if (passwordRotationFlagEnabled && isResetPasswordRequired(user, store.root.appName)) {
+          setLoginState({
+            step: LoginStep.passwordRotationExpired,
             loading: false,
-            error: undefined,
-            mfaToken: user.mfaToken,
-            step: loginState.flow === LoginFlow.Login ? LoginStep.success : loginState.step,
+            resetPasswordToken: user.resetPasswordToken,
+            userId: user.userId
+          });
+        } else {
+          const loginState = store.auth.loginState;
+          const isAuthenticated = !!user.accessToken;
+          if (user.id) {
+            localStorage.setItem('userId', user.id);
+          }
+          actions.afterAuthenticationStateUpdate({
+            user,
             tenants,
-            tenantsLoading: true,
-            isBreachedPassword: user.isBreachedPassword
-          },
-          isAuthenticated
-        });
-        const [securityCenterLoginFlows] = await actions.getFeatureFlags(['security-center-show-login-flows']);
-        if (loginState.flow === LoginFlow.Login) {
-          if (securityCenterLoginFlows && user.isBreachedPassword && !isAuthenticated) {
-            setLoginState({
-              step: LoginStep.breachedPassword,
-              loading: false
-            });
-          } else {
-            if (isAuthenticated) {
-              const shouldShowPrompt = await actions.__shouldShowPromptPasskeys();
-              if (shouldShowPrompt) {
-                setLoginState({
-                  step: LoginStep.promptPasskeys,
-                  loading: false
-                });
-                onRedirectTo(routes.loginUrl, {
-                  preserveQueryParams: true
-                });
-              } else {
-                await actions.afterAuthNavigation();
+            activeTenant
+          }, {
+            loginState: {
+              flow: loginState.flow,
+              quickLoginToRegister: loginState.quickLoginToRegister,
+              email,
+              loading: false,
+              error: undefined,
+              mfaToken: user.mfaToken,
+              step: loginState.flow === LoginFlow.Login ? LoginStep.success : loginState.step,
+              tenants,
+              tenantsLoading: true,
+              isBreachedPassword: user.isBreachedPassword
+            },
+            isAuthenticated
+          });
+          if (loginState.flow === LoginFlow.Login) {
+            if (securityCenterLoginFlows && user.isBreachedPassword && !isAuthenticated) {
+              setLoginState({
+                step: LoginStep.breachedPassword,
+                loading: false
+              });
+            } else {
+              if (isAuthenticated) {
+                const shouldShowPasswordRotationPrompt = shouldShowPasswordRotationPromptFunc(user);
+                if (passwordRotationFlagEnabled && shouldShowPasswordRotationPrompt) {
+                  setLoginState({
+                    step: LoginStep.passwordRotationNotification,
+                    loading: false
+                  });
+                } else {
+                  const shouldShowPromptPasskeys = await actions.__shouldShowPromptPasskeys();
+                  if (shouldShowPromptPasskeys) {
+                    setLoginState({
+                      step: LoginStep.promptPasskeys,
+                      loading: false
+                    });
+                    onRedirectTo(routes.loginUrl, {
+                      preserveQueryParams: true
+                    });
+                  } else {
+                    await actions.afterAuthNavigation();
+                  }
+                }
               }
             }
           }

package/auth/LoginState/actions/mfaWithAuthenticator.actions.js

@@ -3,6 +3,7 @@ import _extends from "@babel/runtime/helpers/esm/extends";
 const _excluded = ["callback"];
 import { LoginFlow, LoginStep } from '../interfaces';
 import { errorHandler } from '../../../helpers';
+import { isResetPasswordRequired, shouldShowPasswordRotationPromptFunc } from '../../helpers';
 export default ((store, api, sharedActions) => {
   const actions = sharedActions;
 
@@ -38,24 +39,41 @@ export default ((store, api, sharedActions) => {
    * Handle after MFA authentication with authenticator app for login
    * @private
    */
-  async function __postLoginMfaAuthenticator(isAuthenticated, callback) {
+  async function __postLoginMfaAuthenticator(isAuthenticated, user, callback) {
     const loginState = store.auth.loginState;
     if (loginState.flow !== LoginFlow.Login) return;
-    const [securityCenterLoginFlows] = await actions.getFeatureFlags(['security-center-show-login-flows']);
+    const [securityCenterLoginFlows, passwordRotationFlagEnabled] = await actions.getFeatureFlags(['security-center-show-login-flows', 'password-rotation']);
     if (securityCenterLoginFlows && loginState.isBreachedPassword && !isAuthenticated) {
       actions.setLoginState({
         step: LoginStep.breachedPassword,
         loading: false
       });
     } else {
-      const shouldShowPrompt = await actions.__shouldShowPromptPasskeys();
-      if (shouldShowPrompt) {
+      if (passwordRotationFlagEnabled && isResetPasswordRequired(user, store.root.appName)) {
         actions.setLoginState({
-          step: LoginStep.promptPasskeys,
-          loading: false
+          step: LoginStep.passwordRotationExpired,
+          loading: false,
+          resetPasswordToken: user.resetPasswordToken,
+          userId: user.userId
         });
       } else {
-        await actions.afterAuthNavigation();
+        const shouldShowPasswordRotationPrompt = shouldShowPasswordRotationPromptFunc(user);
+        if (passwordRotationFlagEnabled && shouldShowPasswordRotationPrompt) {
+          actions.setLoginState({
+            step: LoginStep.passwordRotationNotification,
+            loading: false
+          });
+        } else {
+          const shouldShowPrompt = await actions.__shouldShowPromptPasskeys();
+          if (shouldShowPrompt) {
+            actions.setLoginState({
+              step: LoginStep.promptPasskeys,
+              loading: false
+            });
+          } else {
+            await actions.afterAuthNavigation();
+          }
+        }
       }
     }
     callback == null ? void 0 : callback(true);
@@ -109,7 +127,7 @@ export default ((store, api, sharedActions) => {
       if (isStepUp) {
         return await __postStepUpMfaAuthenticator(callback);
       }
-      return await __postLoginMfaAuthenticator(isAuthenticated, callback);
+      return await __postLoginMfaAuthenticator(isAuthenticated, user, callback);
     } catch (e) {
       setLoadingAction({
         loading: false,

package/auth/LoginState/helpers.d.ts

@@ -1,6 +1,7 @@
-import { IEmailPasswordlessPreLogin, IPasswordlessPreLogin, MFAStrategyEnum, UserMFADevicesResponse } from '@frontegg/rest-api';
-import { MFAStep } from '../MfaState/interfaces';
+import { IEmailPasswordlessPreLogin, ILoginResponse, IPasswordlessPreLogin, MFAStrategyEnum, UserMFADevicesResponse } from '@frontegg/rest-api';
 import { FronteggState } from '../../interfaces';
+import { User } from '../interfaces';
+import { MFAStep } from '../MfaState/interfaces';
 export declare const isAbsoluteUrl: (path: string) => boolean;
 export declare const getRedirectUrl: ({ authenticatedUrl, enforceRedirectToSameSite, allowedRedirectOrigins, includeQueryParam, }: {
     authenticatedUrl: string;
@@ -29,3 +30,4 @@ export declare const getMfaStepForNotEnrolledUsers: (mfaStrategies: MFAStrategyE
 export declare const isOauthCallbackRoute: (activeUri: string) => boolean;
 export declare function isEmailPayload(payload: IPasswordlessPreLogin): payload is IEmailPasswordlessPreLogin;
 export declare const getBaseNameWithoutSlashSuffix: (state: FronteggState) => string | null;
+export declare const shouldShowPasswordRotationPromptFunc: (user: ILoginResponse | User) => boolean;

package/auth/LoginState/helpers.js

@@ -132,4 +132,7 @@ export const getBaseNameWithoutSlashSuffix = state => {
     return basename.slice(0, -1);
   }
   return basename;
+};
+export const shouldShowPasswordRotationPromptFunc = user => {
+  return user.passwordExpiresIn !== undefined && user.notificationPeriod !== undefined && user.passwordExpiresIn <= user.notificationPeriod;
 };

package/auth/LoginState/interfaces.d.ts

@@ -17,6 +17,8 @@ export declare enum LoginStep {
     'promptPasskeys' = "promptPasskeys",
     'breachedPassword' = "breachedPassword",
     'breachedPasswordSuccess' = "breachedPasswordSuccess",
+    'passwordRotationExpired' = "passwordRotationExpired",
+    'passwordRotationNotification' = "passwordRotationNotification",
     'magicLinkPostLoginSuccess' = "magicLinkPostLoginSuccess"
 }
 export declare enum LoginFlow {
@@ -49,6 +51,10 @@ export interface LoginState {
     quickLoginToRegister?: QuickLoginStrategy;
     changePhoneId?: string;
     isBreachedPassword?: boolean;
+    resetPasswordToken?: string;
+    passwordExpiresIn?: number;
+    notificationPeriod?: number;
+    userId?: string;
 }
 export interface HostedLoginCallback {
     code: string;

package/auth/LoginState/interfaces.js

@@ -16,6 +16,8 @@ export let LoginStep;
   LoginStep["promptPasskeys"] = "promptPasskeys";
   LoginStep["breachedPassword"] = "breachedPassword";
   LoginStep["breachedPasswordSuccess"] = "breachedPasswordSuccess";
+  LoginStep["passwordRotationExpired"] = "passwordRotationExpired";
+  LoginStep["passwordRotationNotification"] = "passwordRotationNotification";
   LoginStep["magicLinkPostLoginSuccess"] = "magicLinkPostLoginSuccess";
 })(LoginStep || (LoginStep = {}));
 export let LoginFlow;

package/auth/PasswordRotationState/actions.d.ts

@@ -0,0 +1,6 @@
+import type { FronteggState, RestApi, SharedActions } from '../../interfaces';
+import { PasswordRotationStep } from './interfaces';
+declare const _default: (store: FronteggState, api: RestApi, sharedActions: SharedActions) => {
+    setStep: (step: PasswordRotationStep) => void;
+};
+export default _default;

package/auth/PasswordRotationState/actions.js

@@ -0,0 +1,13 @@
+export default ((store, api, sharedActions) => {
+  const setPasswordRotationState = payload => {
+    Object.assign(store.auth.passwordRotationState, payload);
+  };
+  const setStep = step => {
+    setPasswordRotationState({
+      step
+    });
+  };
+  return {
+    setStep
+  };
+});

package/auth/PasswordRotationState/index.d.ts

@@ -0,0 +1,3 @@
+import createPasswordRotationState from './state';
+import buildPasswordRotationActions from './actions';
+export { createPasswordRotationState, buildPasswordRotationActions };

package/auth/PasswordRotationState/index.js

@@ -0,0 +1,3 @@
+import createPasswordRotationState from './state';
+import buildPasswordRotationActions from './actions';
+export { createPasswordRotationState, buildPasswordRotationActions };

package/auth/PasswordRotationState/interfaces.d.ts

@@ -0,0 +1,7 @@
+export declare enum PasswordRotationStep {
+    'success' = "success",
+    'notification' = "notification"
+}
+export interface PasswordRotationState {
+    step: PasswordRotationStep;
+}

package/auth/PasswordRotationState/interfaces.js

@@ -0,0 +1,5 @@
+export let PasswordRotationStep;
+(function (PasswordRotationStep) {
+  PasswordRotationStep["success"] = "success";
+  PasswordRotationStep["notification"] = "notification";
+})(PasswordRotationStep || (PasswordRotationStep = {}));

package/auth/PasswordRotationState/state.d.ts

@@ -0,0 +1,4 @@
+import { PasswordRotationState } from './interfaces';
+export declare const initialState: PasswordRotationState;
+declare const _default: (overrideState?: Partial<PasswordRotationState>) => PasswordRotationState;
+export default _default;

package/auth/PasswordRotationState/state.js

@@ -0,0 +1,6 @@
+import { PasswordRotationStep } from './interfaces';
+import { createProxy } from '../../toolkit/proxy';
+export const initialState = {
+  step: PasswordRotationStep.notification
+};
+export default (overrideState => createProxy(initialState, overrideState));

package/auth/helpers.d.ts

@@ -1,10 +1,11 @@
 import { CommitChangeDto, ILoginResponse, ISignUpUser } from '@frontegg/rest-api';
 import { FronteggState } from '../interfaces';
 import { AuthPageRoutes } from './interfaces';
+export * from './Entitlements/helpers';
 export * from './LoginState/helpers';
 export * from './StepUpState/helpers';
-export * from './Entitlements/helpers';
 export declare const isMfaRequired: (user: ILoginResponse, appName: string) => boolean;
+export declare const isResetPasswordRequired: (user: ILoginResponse, appName: string) => boolean;
 export declare const mapMetaDataObjectToActions: (obj: any, path?: string[]) => CommitChangeDto[];
 export declare const getUri: (urlStrategy: FronteggState["root"]["urlStrategy"]) => string;
 export declare const extractPhoneNumber: ({ phoneNumber, ...rest }: ISignUpUser) => {

package/auth/helpers.js

@@ -4,20 +4,29 @@ const _excluded = ["phoneNumber"],
   _excluded2 = ["authenticatedUrl"];
 import { ContextHolder } from '@frontegg/rest-api';
 import { defaultFronteggRoutes } from './LoginState/consts';
+export * from './Entitlements/helpers';
 export * from './LoginState/helpers';
 export * from './StepUpState/helpers';
-export * from './Entitlements/helpers';
 export const isMfaRequired = (user, appName) => {
   const contextHolder = ContextHolder.for(appName);
   if (user.mfaRequired && user.mfaToken) {
     contextHolder.setAccessToken(null);
     contextHolder.setUser(null);
     return true;
-  } else {
-    contextHolder.setAccessToken(user.accessToken);
-    contextHolder.setUser(user);
-    return false;
   }
+  contextHolder.setAccessToken(user.accessToken);
+  contextHolder.setUser(user);
+  return false;
+};
+export const isResetPasswordRequired = (user, appName) => {
+  const contextHolder = ContextHolder.for(appName);
+  if (user.resetPasswordToken) {
+    contextHolder.setAccessToken(null);
+    return true;
+  }
+  contextHolder.setAccessToken(user.accessToken);
+  contextHolder.setUser(user);
+  return false;
 };
 export const mapMetaDataObjectToActions = (obj, path = []) => {
   return Object.entries(obj).reduce((acc, [key, value]) => {

package/auth/index.d.ts

@@ -8,6 +8,7 @@ import { buildApiTokensActions } from './ApiTokensState';
 import { buildApplicationsActions } from './ApplicationsState';
 import { buildCustomLoginActions } from './CustomLoginState';
 import { buildForgotPasswordActions } from './ForgotPasswordState';
+import { buildPasswordRotationActions } from './PasswordRotationState';
 import { buildGroupsActions } from './GroupsState';
 import { buildGroupsDialogsActions } from './GroupsDialogsState';
 import { buildImpersonateActions } from './ImpersonateState';
@@ -42,6 +43,7 @@ export * from './CustomLoginState/interfaces';
 export * from './Entitlements/interfaces';
 export * from './Entitlements/helpers';
 export * from './ForgotPasswordState/interfaces';
+export * from './PasswordRotationState/interfaces';
 export * from './GroupsState/interfaces';
 export * from './GroupsDialogsState/interfaces';
 export * from './ImpersonateState/interfaces';
@@ -77,6 +79,7 @@ export type ApplicationsActions = ReturnType<typeof buildApplicationsActions>;
 export type CustomLoginActions = ReturnType<typeof buildCustomLoginActions>;
 export type EntitlementsActions = ReturnType<typeof buildEntitlementsActions>;
 export type ForgotPasswordActions = ReturnType<typeof buildForgotPasswordActions>;
+export type PasswordRotationActions = ReturnType<typeof buildPasswordRotationActions>;
 export type GroupsActions = ReturnType<typeof buildGroupsActions>;
 export type GroupsDialogsActions = ReturnType<typeof buildGroupsDialogsActions>;
 export type ImpersonateActions = ReturnType<typeof buildImpersonateActions>;
@@ -111,6 +114,7 @@ export type AuthStateActions = {
     customLoginActions: CustomLoginActions;
     entitlementsActions: EntitlementsActions;
     forgotPasswordActions: ForgotPasswordActions;
+    passwordRotationActions: PasswordRotationActions;
     groupsActions: GroupsActions;
     groupsDialogsActions: GroupsDialogsActions;
     impersonateActions: ImpersonateActions;
@@ -143,4 +147,4 @@ export type AuthActions = {
     setErrorByRequestName: (payload: SingleErrorByRequestDataPayload) => void;
     resetAuthState: () => void;
     setUser: (user: User | null) => void;
-} & AcceptInvitationActions & AccountSettingsActions & UnlockAccountActions & ActivateAccountActions & ApiTokensActions & ApplicationsActions & CustomLoginActions & EntitlementsActions & ForgotPasswordActions & GroupsActions & GroupsDialogsActions & ImpersonateActions & LoginActions & MfaActions & AllAccountsActions & AllAccountsDialogActions & PasskeysActions & ProfileActions & ProvisioningActions & ResetPhoneNumberActions & RolesActions & RestrictionsActions & SecurityCenterActions & SecurityPolicyActions & SessionsPolicyActions & SessionsActions & SignUpActions & SmsActions & SocialLoginActions & SSOActions & StepUpActions & TeamActions & TenantsActions;
+} & AcceptInvitationActions & AccountSettingsActions & UnlockAccountActions & ActivateAccountActions & ApiTokensActions & ApplicationsActions & CustomLoginActions & EntitlementsActions & ForgotPasswordActions & PasswordRotationActions & GroupsActions & GroupsDialogsActions & ImpersonateActions & LoginActions & MfaActions & AllAccountsActions & AllAccountsDialogActions & PasskeysActions & ProfileActions & ProvisioningActions & ResetPhoneNumberActions & RolesActions & RestrictionsActions & SecurityCenterActions & SecurityPolicyActions & SessionsPolicyActions & SessionsActions & SignUpActions & SmsActions & SocialLoginActions & SSOActions & StepUpActions & TeamActions & TenantsActions;

package/auth/index.js

@@ -10,6 +10,7 @@ import { buildApiTokensActions, createApiTokensState } from './ApiTokensState';
 import { buildApplicationsActions, createApplicationsState } from './ApplicationsState';
 import { buildCustomLoginActions, createCustomLoginState } from './CustomLoginState';
 import { buildForgotPasswordActions, createForgotPasswordState } from './ForgotPasswordState';
+import { buildPasswordRotationActions, createPasswordRotationState } from './PasswordRotationState';
 import { buildGroupsActions, createGroupsState } from './GroupsState';
 import { buildGroupsDialogsActions, createGroupsDialogsState } from './GroupsDialogsState';
 import { buildImpersonateActions, createImpersonateState } from './ImpersonateState';
@@ -47,6 +48,7 @@ export * from './CustomLoginState/interfaces';
 export * from './Entitlements/interfaces';
 export * from './Entitlements/helpers';
 export * from './ForgotPasswordState/interfaces';
+export * from './PasswordRotationState/interfaces';
 export * from './GroupsState/interfaces';
 export * from './GroupsDialogsState/interfaces';
 export * from './ImpersonateState/interfaces';
@@ -100,6 +102,7 @@ export const createAuthState = _overrideState => {
     applicationsState: createApplicationsState(overrideState == null ? void 0 : overrideState.applicationsState),
     customLoginState: createCustomLoginState(overrideState == null ? void 0 : overrideState.customLoginState),
     forgotPasswordState: createForgotPasswordState(overrideState == null ? void 0 : overrideState.forgotPasswordState),
+    passwordRotationState: createPasswordRotationState(overrideState == null ? void 0 : overrideState.passwordRotationState),
     groupsState: createGroupsState(overrideState == null ? void 0 : overrideState.groupsState),
     groupsDialogsState: createGroupsDialogsState(overrideState == null ? void 0 : overrideState.groupsDialogsState),
     impersonateState: createImpersonateState(overrideState == null ? void 0 : overrideState.impersonateState),
@@ -165,6 +168,7 @@ export const buildAuthActions = (store, api, actions, snapshotAuthState) => {
   const customLoginActions = buildCustomLoginActions(store, api, actions);
   const entitlementsActions = buildEntitlementsActions(store, api, actions);
   const forgotPasswordActions = buildForgotPasswordActions(store, api, actions);
+  const passwordRotationActions = buildPasswordRotationActions(store, api, actions);
   const groupsActions = buildGroupsActions(store, api, actions);
   const groupsDialogsActions = buildGroupsDialogsActions(store, api, actions);
   const impersonateActions = buildImpersonateActions(store, api, actions);
@@ -199,6 +203,7 @@ export const buildAuthActions = (store, api, actions, snapshotAuthState) => {
     customLoginActions,
     entitlementsActions,
     forgotPasswordActions,
+    passwordRotationActions,
     groupsActions,
     groupsDialogsActions,
     impersonateActions,

package/auth/interfaces.d.ts

@@ -30,6 +30,7 @@ import type { TenantsState } from './TenantsState/interfaces';
 import type { IAllAccountsDialogsState, IAllAccountsState } from './MSP/interfaces';
 import { ApplicationsState } from './ApplicationsState/interfaces';
 import { UnlockAccountState } from './UnlockAccountState/interfaces';
+import { PasswordRotationState } from '../toolkit';
 export declare enum REQUEST_NAME {
     LOAD_FEATURE_FLAGS = "LOAD_FEATURE_FLAGS,",
     LOAD_ADMIN_BOX_METADATA = "LOAD_ADMIN_BOX_METADATA,",
@@ -80,6 +81,7 @@ export interface AuthState extends Routes, PluginOptions {
     apiTokensState: ApiTokensState;
     customLoginState: CustomLoginState;
     forgotPasswordState: ForgotPasswordState;
+    passwordRotationState: PasswordRotationState;
     groupsState: GroupsState;
     groupsDialogsState: GroupsDialogsState;
     impersonateState: ImpersonateState;
@@ -124,6 +126,11 @@ export interface User extends IUserProfile {
     amr?: string[];
     acr?: string;
     auth_time?: number;
+    resetToken?: string;
+    passwordExpiresIn?: number;
+    notificationPeriod?: number;
+    resetPasswordToken?: string;
+    userId?: string;
 }
 export interface Routes {
     routes: AuthPageRoutes;

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v7.58.0
+/** @license Frontegg v7.60.0-alpha.0
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/mocks/auth-mocks/index.js

@@ -12,6 +12,7 @@ import buildApplicationsActions from './applicationsActions.mocks';
 import buildCustomLoginActions from './customLoginActions.mocks';
 import buildEntitlementsActions from './entitlementsActions.mocks';
 import buildForgotPasswordActions from './forgotPasswordActions.mocks';
+import buildPasswordRotationActions from './passwordRotationActions.mocks';
 import buildGroupsActions from './groupsActions.mocks';
 /* contains reducers only no need to mock */
 import { buildGroupsDialogsActions } from '../../auth/GroupsDialogsState';
@@ -49,6 +50,7 @@ export const buildAuthActions = (store, api, actions, snapshotAuthState) => {
   const customLoginActions = buildCustomLoginActions(store, api, actions);
   const entitlementsActions = buildEntitlementsActions(store, api, actions);
   const forgotPasswordActions = buildForgotPasswordActions(store, api, actions);
+  const passwordRotationActions = buildPasswordRotationActions(store, api, actions);
   const groupsActions = buildGroupsActions(store, api, actions);
   const groupsDialogsActions = buildGroupsDialogsActions(store, api, actions);
   const impersonateActions = buildImpersonateActions(store, api, actions);
@@ -83,6 +85,7 @@ export const buildAuthActions = (store, api, actions, snapshotAuthState) => {
     customLoginActions,
     entitlementsActions,
     forgotPasswordActions,
+    passwordRotationActions,
     groupsActions,
     groupsDialogsActions,
     impersonateActions,
@@ -142,7 +145,7 @@ export const buildAuthActions = (store, api, actions, snapshotAuthState) => {
     setErrorByRequestName,
     resetAuthState,
     setUser
-  }, acceptInvitationActions, accountSettingsActions, activateAccountActions, unlockAccountActions, allAccountsActions, allAccountsDialogActions, apiTokensActions, applicationsActions, customLoginActions, entitlementsActions, forgotPasswordActions, groupsActions, groupsDialogsActions, impersonateActions, loginActions, mfaActions, passkeysActions, profileActions, provisioningActions, resetPhoneNumberActions, restrictionsActions, rolesActions, securityCenterActions, securityPolicyActions, sessionsActions, sessionsPolicyActions, signUpActions, smsActions, socialLoginActions, ssoActions, stepUpActions, teamActions, tenantsActions);
+  }, acceptInvitationActions, accountSettingsActions, activateAccountActions, unlockAccountActions, allAccountsActions, allAccountsDialogActions, apiTokensActions, applicationsActions, customLoginActions, entitlementsActions, forgotPasswordActions, passwordRotationActions, groupsActions, groupsDialogsActions, impersonateActions, loginActions, mfaActions, passkeysActions, profileActions, provisioningActions, resetPhoneNumberActions, restrictionsActions, rolesActions, securityCenterActions, securityPolicyActions, sessionsActions, sessionsPolicyActions, signUpActions, smsActions, socialLoginActions, ssoActions, stepUpActions, teamActions, tenantsActions);
   return {
     authActions,
     authStateActions

package/mocks/auth-mocks/loginActions.mocks.d.ts

@@ -19,7 +19,7 @@ declare const _default: (store: FronteggState, api: RestApi, sharedActions: Shar
         loginState: Partial<import("../..").LoginState>;
     }>;
     postHandleVerifyMFAResponseForStepUp: () => Promise<void>;
-    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean) => Promise<void>;
+    postHandleVerifyMFAResponseForLogin: (isAuthenticated: boolean, user: import("dist/@frontegg/rest-api").ILoginResponse) => Promise<void>;
     handleVerifyMFAResponse: (payload: import("dist/@frontegg/rest-api").ILoginResponseV3, isStepUp?: boolean) => Promise<void>;
     getFeatureFlags: (flags: string[]) => Promise<boolean[]>;
     afterAuthNavigationUtil: (resetStateAction: (() => void) | (() => Promise<void>), options?: import("../..").AfterAuthNavigationUtilOptions) => Promise<void>;

package/mocks/auth-mocks/passwordRotationActions.mocks.d.ts

@@ -0,0 +1,6 @@
+import { FronteggState, RestApi, SharedActions } from '../../interfaces';
+import { PasswordRotationStep } from '../../toolkit';
+declare const _default: (store: FronteggState, api: RestApi, actions: SharedActions) => {
+    setStep: (step: PasswordRotationStep) => void;
+};
+export default _default;