@leapdev/auth-agent 2.2.13-beta.1 → 2.2.13-beta.2

package/src/index.umd.js

@@ -44,7 +44,12 @@
         if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
         if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
         return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-    }
+    }
+
+    typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
+        var e = new Error(message);
+        return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+    };
 
     var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
 
@@ -3824,11 +3829,9 @@
           throw Error('Missing config parameter : ' + p);
         }
       });
-
       if (!lodash.isArray(options.scopes)) {
         throw Error('Scopes must be an array with string values');
       }
-
       const config = Object.assign(Object.assign({}, DEFAULT_CONFIG), options);
       return config;
     };
@@ -3838,9 +3841,7 @@
     class LeapAuthService {
       constructor(authHost, clientId) {
         _LeapAuthService_authHost.set(this, void 0);
-
         _LeapAuthService_clientId.set(this, void 0);
-
         this.getAccessTokenByJti = jti => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3859,7 +3860,6 @@
             });
           });
         };
-
         this.getRedirections = () => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3872,7 +3872,6 @@
             });
           });
         };
-
         this.exchangeAuthCodeForAccessToken = params => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3893,7 +3892,6 @@
             });
           });
         };
-
         this.renewAccessToken = params => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3913,7 +3911,6 @@
             });
           });
         };
-
         this.userInfo = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3926,7 +3923,6 @@
             });
           });
         };
-
         this.linkUser = params => {
           const {
             jti,
@@ -3935,14 +3931,12 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/link?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&prompt=none&jti=${jti}&callback=${redirectUrl}`;
-
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
-
         this.unlinkUser = params => {
           const {
             jti,
@@ -3951,14 +3945,12 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/unlink?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&jti=${jti}&callback=${redirectUrl}`;
-
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
-
         this.getCloudProviderToken = (token, jti) => {
           const url = `${__classPrivateFieldGet(this, _LeapAuthService_authHost, "f")}/cloudprovider/accesstoken` + (jti ? '/' + jti : '');
           return new Promise((resolve, reject) => {
@@ -3972,7 +3964,6 @@
             });
           });
         };
-
         this.cloudProviderUserInfo = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3985,7 +3976,6 @@
             });
           });
         };
-
         this.cloudProviderReauthenticate = params => {
           const {
             nonce,
@@ -3994,14 +3984,12 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/reauthenticate?nonce=${nonce}&redirectUrl=${redirectUrl}`;
-
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
-
         this.cloudProviderReauthenticateLink = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4014,7 +4002,6 @@
             });
           });
         };
-
         this.cloudProviderUpdate = params => {
           const {
             firmId,
@@ -4037,7 +4024,6 @@
             });
           });
         };
-
         this.statusAdminConsent = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4050,7 +4036,6 @@
             });
           });
         };
-
         this.getAdminConsent = params => {
           const {
             domain,
@@ -4059,14 +4044,12 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/adminconsent?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&redirectUrl=${redirectUrl}${domain ? '&domain=' + domain : ''}`;
-
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
-
         this.revokeAdminConsent = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4079,7 +4062,6 @@
             });
           });
         };
-
         this.getLinkMap = (token, allUsers) => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4092,7 +4074,6 @@
             });
           });
         };
-
         this.setLinkMap = (token, linkMap) => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4107,7 +4088,6 @@
             });
           });
         };
-
         this.authoriseSupport = (token, params) => {
           const {
             code,
@@ -4130,7 +4110,6 @@
             });
           });
         };
-
         this.changePassword = params => {
           const {
             newWindow,
@@ -4140,7 +4119,6 @@
           let changePasswordUrl = `/oauth/changepassword?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}`;
           let redirect_uri = '';
           let noListener = false;
-
           if (newWindow) {
             if (!!callback && typeof callback === 'function') {
               redirect_uri = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL;
@@ -4151,11 +4129,9 @@
           } else {
             redirect_uri = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + '/oauth/logout?force=true' + '&redirect_uri=' + (redirectUrl || window.location.href);
           }
-
           if (redirect_uri) {
             changePasswordUrl += `&redirect_uri=${encodeURIComponent(redirect_uri)}`;
           }
-
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl: changePasswordUrl,
             newWindow,
@@ -4163,7 +4139,6 @@
             noListener
           });
         };
-
         _LeapAuthService_xhr.set(this, (params, onload) => {
           const {
             method,
@@ -4183,7 +4158,6 @@
           xhr.setRequestHeader('Content-type', options.contentType);
           xhr.setRequestHeader('Access-Control-Allow-Origin', options.accessControlAllowOrigin);
           if (accessToken) xhr.setRequestHeader('Authorization', 'Bearer ' + accessToken);
-
           xhr.onload = () => {
             try {
               let resp;
@@ -4193,11 +4167,9 @@
               onload(xhr.response, xhr.status);
             }
           };
-
           if (options.body) options.body = JSON.stringify(options.body);
           xhr.send(options.body);
         });
-
         _LeapAuthService_redirectUrl.set(this, params => {
           const {
             requestUrl,
@@ -4206,21 +4178,17 @@
             noListener
           } = params;
           const fullUrl = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + requestUrl;
-
           if (newWindow) {
             const childWindow = window.open(fullUrl, '_blank');
-
             const eventHandler = event => {
               if (event && event.data === 'closeMe' && childWindow) {
                 childWindow.close();
-
                 if (lodash.isFunction(callback)) {
                   callback();
                   window.removeEventListener('message', eventHandler, false);
                 }
               }
             };
-
             if (!noListener) {
               window.addEventListener('message', eventHandler, false);
             }
@@ -4228,17 +4196,13 @@
             window.location.href = fullUrl;
           }
         });
-
         __classPrivateFieldSet(this, _LeapAuthService_authHost, authHost, "f");
-
         __classPrivateFieldSet(this, _LeapAuthService_clientId, clientId, "f");
       }
-
     }
     _LeapAuthService_authHost = new WeakMap(), _LeapAuthService_clientId = new WeakMap(), _LeapAuthService_xhr = new WeakMap(), _LeapAuthService_redirectUrl = new WeakMap();
 
     var HookName;
-
     (function (HookName) {
       HookName["afterLogin"] = "afterLogin";
       HookName["beforeLogout"] = "beforeLogout";
@@ -4256,13 +4220,9 @@
     class Notification {
       constructor() {
         _Notification_pubnubKeys.set(this, void 0);
-
         _Notification_pubnub.set(this, void 0);
-
         _Notification_eventListeners.set(this, []);
-
         _Notification_uniqueSessionTriggerHook.set(this, undefined);
-
         this.init = params => __awaiter(this, void 0, void 0, function* () {
           const {
             authHost,
@@ -4272,15 +4232,11 @@
             uniqueSession,
             hooks
           } = params;
-
           if (!!hooks && hooks.uniqueSessionTrigger) {
             __classPrivateFieldSet(this, _Notification_uniqueSessionTriggerHook, hooks.uniqueSessionTrigger, "f");
           }
-
           __classPrivateFieldGet(this, _Notification_initFirmChannel, "f").call(this, firmId, userId);
-
           __classPrivateFieldGet(this, _Notification_initUserChannel, "f").call(this, userId);
-
           if (uniqueSession) {
             yield __classPrivateFieldGet(this, _Notification_initUniqueSessionChannel, "f").call(this, {
               authHost,
@@ -4288,37 +4244,30 @@
             });
           }
         });
-
         this.destroy = () => {
           if (__classPrivateFieldGet(this, _Notification_pubnub, "f")) {
             __classPrivateFieldGet(this, _Notification_pubnub, "f").unsubscribeAll();
-
             __classPrivateFieldSet(this, _Notification_eventListeners, [], "f");
           }
         };
-
         this.registerEventListenerForUserChannel = params => {
           const {
             topic,
             messageType,
             callback
           } = params;
-
           if (!lodash.isFunction(callback)) {
             throw Error(`Registering Event Listener ${topic} ${messageType}: callback needs to be a function`);
           }
-
           __classPrivateFieldGet(this, _Notification_eventListeners, "f").push({
             topic,
             messageType,
             callback
           });
         };
-
         this.setUniqueSessionTriggerHook = hook => {
           __classPrivateFieldSet(this, _Notification_uniqueSessionTriggerHook, hook, "f");
         };
-
         _Notification_initFirmChannel.set(this, (firmId, userId) => {
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             presence: presenceEvent => {
@@ -4326,38 +4275,32 @@
                 action,
                 uuid
               } = presenceEvent;
-
               if (uuid === __classPrivateFieldGet(this, _Notification_pubnubKeys, "f").uuid) {
                 return;
               }
-
               if (action === 'leave' || action === 'timeout') {
                 const valuesUUID = uuid.split('~');
                 const userIdFromPresence = valuesUUID[0] || '';
                 const instanceGuidFromPresence = valuesUUID[1] || '';
                 const userActionFromPresence = valuesUUID[2] || '';
                 const isUserActionRequiredLogout = userActionFromPresence === USER_ACTION.USERNAME_CHANGED || userActionFromPresence === USER_ACTION.PASSWORD_CHANGED || userActionFromPresence === USER_ACTION.USER_DISABLED;
-
                 if (userIdFromPresence === userId && instanceGuidFromPresence === EMPTY_GUID && isUserActionRequiredLogout) {
                   AuthAgent.logout(true);
                 }
               }
             }
           });
-
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [firmId],
             withPresence: true
           });
         });
-
         _Notification_initUserChannel.set(this, userId => {
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             message: data => {
               const {
                 content
               } = data.message;
-
               if (content && content.topic && content.messageType && content.data) {
                 for (const eventListener of __classPrivateFieldGet(this, _Notification_eventListeners, "f")) {
                   if (eventListener.topic === content.topic && eventListener.messageType === content.messageType && eventListener.callback && lodash.isFunction(eventListener.callback)) {
@@ -4367,13 +4310,11 @@
               }
             }
           });
-
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [`user_${userId}`],
             withPresence: false
           });
         });
-
         _Notification_initUniqueSessionChannel.set(this, params => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield AuthAgent.getDecodedAccessToken();
           const {
@@ -4385,36 +4326,29 @@
             sessionId: mySessionId,
             impersonatorId: myImpersonatorId
           } = decodedToken;
-
           if (!decodedToken) {
             return;
           }
-
           const channel = `auth-session-${myUserId}`;
-
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             message: data => __awaiter(this, void 0, void 0, function* () {
               const decodedToken = yield AuthAgent.getDecodedAccessToken();
-
               if (!decodedToken) {
                 AuthAgent.logout(true);
               }
-
               const {
                 sessionId: mySessionId,
                 impersonatorId: myImpersonatorId,
                 userId: myUserId
               } = decodedToken;
               const myAgentId = localStorage.getItem('leap-auth-agent-id');
-
               if (myAgentId && data && data.message) {
                 const sessionId = data.message.sessionId,
-                      authHost = data.message.authHost,
-                      clientId = data.message.clientId,
-                      logout = data.message.logout;
-                      data.message.agentId;
-                      const impersonatorId = myImpersonatorId ? myImpersonatorId : data.message.impersonatorId;
-
+                  authHost = data.message.authHost,
+                  clientId = data.message.clientId,
+                  logout = data.message.logout;
+                  data.message.agentId;
+                  const impersonatorId = myImpersonatorId ? myImpersonatorId : data.message.impersonatorId;
                 if (authHost === myAuthHost) {
                   if (clientId === myClientId && sessionId !== mySessionId || clientId !== myClientId && sessionId === mySessionId && logout) {
                     if (impersonatorId !== undefined && impersonatorId !== '') {
@@ -4431,19 +4365,15 @@
               }
             })
           });
-
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [channel],
             withPresence: true
           });
-
           let agentId = localStorage.getItem('leap-auth-agent-id');
-
           if (!agentId) {
             agentId = uuid.v4();
             localStorage.setItem('leap-auth-agent-id', agentId);
           }
-
           __classPrivateFieldGet(this, _Notification_pubnub, "f").publish({
             message: {
               authHost: myAuthHost,
@@ -4459,16 +4389,13 @@
             }
           });
         }));
-
         __classPrivateFieldSet(this, _Notification_pubnubKeys, {
           publishKey: 'pub-13f5288e-cd88-4ef9-9e68-0c11cd03ddb8',
           subscribeKey: 'sub-a456f002-0095-11e2-9638-9581afc33ebf',
           uuid: uuid.v4()
         }, "f");
-
         __classPrivateFieldSet(this, _Notification_pubnub, new Pubnub__default["default"](__classPrivateFieldGet(this, _Notification_pubnubKeys, "f")), "f");
       }
-
     }
     _Notification_pubnubKeys = new WeakMap(), _Notification_pubnub = new WeakMap(), _Notification_eventListeners = new WeakMap(), _Notification_uniqueSessionTriggerHook = new WeakMap(), _Notification_initFirmChannel = new WeakMap(), _Notification_initUserChannel = new WeakMap(), _Notification_initUniqueSessionChannel = new WeakMap();
 
@@ -5908,7 +5835,6 @@
     const deleteQueryParameter = (windowLocation, name, value) => {
       const nameValue = name + '=' + value;
       let toReplace = nameValue;
-
       if (windowLocation.indexOf('?' + nameValue) >= 0) {
         if (windowLocation.indexOf('?' + nameValue + '&') >= 0) {
           toReplace += '&';
@@ -5918,16 +5844,13 @@
       } else if (windowLocation.indexOf('&' + nameValue) >= 0) {
         toReplace = '&' + toReplace;
       }
-
       return windowLocation.replace(toReplace, '');
     };
     const getQueryParameter = name => {
       const paramsForSearch = parseParams(window.location.search.substring(1));
-
       if (paramsForSearch[name]) {
         return paramsForSearch[name];
       }
-
       return undefined;
     };
     const createCodeChallenge = verifier => __awaiter(void 0, void 0, void 0, function* () {
@@ -5955,41 +5878,33 @@
       randomValues.forEach(v => random += charset[v % charset.length]);
       return random;
     };
-
     const sha256 = s => __awaiter(void 0, void 0, void 0, function* () {
       const digestOp = getCryptoSubtle().digest({
         name: 'SHA-256'
       }, new TextEncoder().encode(s));
-
       if (window.msCrypto) {
         return new Promise((res, rej) => {
           digestOp.oncomplete = e => {
             res(e.target.result);
           };
-
           digestOp.onerror = e => {
             rej(e.error);
           };
-
           digestOp.onabort = () => {
             rej('The digest operation was aborted');
           };
         });
       }
-
       return yield digestOp;
     });
-
     const getCryptoSubtle = () => {
       const crypto = getCrypto();
       return crypto.subtle || crypto.webkitSubtle;
     };
-
     const bufferToBase64UrlEncoded = input => {
       const ie11SafeInput = new Uint8Array(input);
       return urlEncodeB64(window.btoa(String.fromCharCode(...Array.from(ie11SafeInput))));
     };
-
     const urlEncodeB64 = input => {
       const b64Chars = {
         '+': '-',
@@ -5998,17 +5913,14 @@
       };
       return input.replace(/[+/=]/g, m => b64Chars[m]);
     };
-
     const parseParams = url => {
       const result = {};
       const params = url.split('&');
-
       for (let i = 0; i < params.length; i++) {
         const param = params[i].split('=', 2);
         if (param.length !== 2) continue;
         result[param[0]] = decodeURIComponent(param[1].replace(/\+/g, " "));
       }
-
       return result;
     };
 
@@ -6119,42 +6031,33 @@
       const redirections = redirectionConfig.environments;
       const suffix = topLevelDomains.find(suffix => origin.endsWith(suffix));
       const environmentVariables = redirectionConfig.environmentVariables;
-
       if (suffix) {
         for (let i = 0; i < redirections.length; i++) {
           redirection = redirections[i];
           const tokenCriteriaMatched = containsKeys(decodedToken, redirection.criteria);
-
           if (tokenCriteriaMatched && !!containsApplication(redirection.applications, origin)) {
             if (redirection.topLevelDomain !== suffix) {
               redirectUrl = origin.replace(suffix, redirection.topLevelDomain);
             }
-
             const envVariables = environmentVariables[redirection.criteria.environment];
-
             if (envVariables) {
               const prefixMappings = envVariables['prefixMappings'];
               const keys = Object.keys(prefixMappings);
               const needToUpdatePrefixKey = containsApplication(keys, origin);
-
               if (needToUpdatePrefixKey) {
                 const prefixValue = prefixMappings[needToUpdatePrefixKey];
                 redirectUrl = redirectUrl ? redirectUrl.replace(needToUpdatePrefixKey, prefixValue) : origin.replace(needToUpdatePrefixKey, prefixValue);
               }
             }
-
             break;
           }
         }
-
         if (!!redirection && !!redirectUrl) {
           result = `${redirection.authHost}/oauth/passthrough?jti=${decodedToken.jti}&redirect=${encodeURIComponent(redirectUrl)}`;
         }
       }
-
       return result;
     };
-
     const containsKeys = (obj1, obj2) => {
       let result = true;
       Object.keys(obj2).forEach(key => {
@@ -6164,12 +6067,11 @@
       });
       return result;
     };
-
     const containsApplication = (list, app) => {
       return list.find(appName => app.startsWith(`http://${appName}`) || app.startsWith(`https://${appName}`));
     };
 
-    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_refreshInfo, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken;
+    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_popupLogin, _Authentication_refreshInfo, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_handlePopupLogin;
     const SECONDS_BEFORE_EXPIRE = 30;
     const MAX_SETTIME_OUT = 2147483647;
     const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
@@ -6178,32 +6080,25 @@
     class Authentication {
       constructor(options) {
         _Authentication_accessToken.set(this, void 0);
-
         _Authentication_config.set(this, void 0);
-
         _Authentication_leapAuthService.set(this, void 0);
-
         _Authentication_notification.set(this, void 0);
-
+        _Authentication_popupLogin.set(this, void 0);
         _Authentication_refreshInfo.set(this, void 0);
-
         this.registerEventListenerForUserChannel = params => {
           const {
             topic,
             messageType,
             callback
           } = params;
-
           __classPrivateFieldGet(this, _Authentication_notification, "f").registerEventListenerForUserChannel({
             topic,
             messageType,
             callback
           });
         };
-
         this.initNotification = () => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield this.getDecodedRefreshedAccessToken();
-
           if (decodedToken) {
             yield __classPrivateFieldGet(this, _Authentication_notification, "f").init({
               authHost: __classPrivateFieldGet(this, _Authentication_config, "f").authHost,
@@ -6215,43 +6110,44 @@
             });
           }
         });
-
         this.destroyNotification = () => {
           __classPrivateFieldGet(this, _Authentication_notification, "f").destroy();
         };
-
-        this.login = noPrompt => __awaiter(this, void 0, void 0, function* () {
+        this.login = params => __awaiter(this, void 0, void 0, function* () {
           const done = yield this.checkAuthCode();
-
           if (done && !!__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           } else {
+            const {
+              noPrompt,
+              force_2fa,
+              popup
+            } = params;
             const code_verifier = createRandomString(64);
             const state = createRandomString(6);
+            const nonce = createRandomString(6);
             window.sessionStorage.setItem(state, code_verifier);
             const {
               code_challenge,
               code_challenge_method
             } = yield createCodeChallenge(code_verifier);
-
             const scope = __classPrivateFieldGet(this, _Authentication_config, "f").scopes.join(',');
-
             const prompt = noPrompt ? 'none' : '';
-            const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&scope=${scope}&client_id=${__classPrivateFieldGet(this, _Authentication_config, "f").clientId}&redirect_uri=${encodeURIComponent(window.location.href)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&state=${state}&prompt=${prompt}&remember_me=${__classPrivateFieldGet(this, _Authentication_config, "f").rememberMe}`;
-            window.location.assign(url);
-            return;
+            const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&scope=${scope}&client_id=${__classPrivateFieldGet(this, _Authentication_config, "f").clientId}&redirect_uri=${encodeURIComponent(window.location.href)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&force_2fa=${force_2fa}&nonce=${nonce}&state=${state}&prompt=${prompt}&remember_me=${__classPrivateFieldGet(this, _Authentication_config, "f").rememberMe}`;
+            if (popup) {
+              return __classPrivateFieldGet(this, _Authentication_handlePopupLogin, "f").call(this, url);
+            } else {
+              window.location.assign(url);
+              return;
+            }
           }
         });
-
         this.logout = (force = false, redirectUrl) => {
           __classPrivateFieldSet(this, _Authentication_accessToken, undefined, "f");
-
           const redirectUri = encodeURIComponent(redirectUrl || window.location.href);
           window.location.href = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/logout?force=${force}&redirect_uri=${redirectUri}`;
-
           __classPrivateFieldGet(this, _Authentication_destroyRefreshAccessTokenProcess, "f").call(this);
         };
-
         this.getAccessToken = () => {
           if (__classPrivateFieldGet(this, _Authentication_accessToken, "f") === undefined || !__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return '';
@@ -6259,20 +6155,17 @@
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }
         };
-
         this.getRefreshedAccessToken = force => __awaiter(this, void 0, void 0, function* () {
           if (__classPrivateFieldGet(this, _Authentication_accessToken, "f") === undefined || !__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return '';
           } else {
             if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f") && __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").accessTokenExpireIn) {
               const decoded = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_accessToken, "f"));
-
               if (force || !!decoded && (decoded.exp - SECONDS_BEFORE_EXPIRE) * 1000 < Date.now()) {
                 const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").renewAccessToken({
                   refreshToken: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").refreshToken,
                   verifier: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").verifier
                 });
-
                 if (data) {
                   if (data.refresh_token && data.expires_in) {
                     __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
@@ -6280,37 +6173,28 @@
                       accessTokenExpireIn: data.expires_in
                     }), "f");
                   }
-
                   __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
-
                   yield this.triggerHooks(HookName.afterRefreshToken);
                   return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
                 }
               }
             }
-
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }
         });
-
         this.getDecodedAccessToken = () => {
           if (!__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return undefined;
           }
-
           return __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_accessToken, "f"));
         };
-
         this.getDecodedRefreshedAccessToken = force => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken(force);
-
           if (!token) {
             return undefined;
           }
-
           return __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, token);
         });
-
         this.getHooks = () => {
           if (__classPrivateFieldGet(this, _Authentication_config, "f")) {
             return __classPrivateFieldGet(this, _Authentication_config, "f").hooks;
@@ -6318,56 +6202,44 @@
             return undefined;
           }
         };
-
         this.setHook = params => {
           const {
             name,
             callback
           } = params;
-
           if (!Object.values(HookName).find(h => h === name)) {
             throw Error('Unsupported hook: ' + name);
           }
-
           if (!lodash.isFunction(callback)) {
             throw Error('hook must be a function: ' + name);
           }
-
           __classPrivateFieldSet(this, _Authentication_config, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_config, "f")), {
             hooks: Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_config, "f").hooks), {
               [name]: callback
             })
           }), "f");
-
           if (name === HookName.uniqueSessionTrigger) {
             __classPrivateFieldGet(this, _Authentication_notification, "f").setUniqueSessionTriggerHook(callback);
           }
-
           return;
         };
-
         this.autoLogin = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").autoLogin || false : false;
         };
-
         this.autoLogout = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").autoLogout || false : false;
         };
-
         this.idleTimeoutInMinutes = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").idleTimeoutInMinutes || 30 : 30;
         };
-
         this.checkTokenInUrl = () => {
           const accessTokenQuery = getQueryParameter('access_token') || getQueryParameter('auth') || getQueryParameter('authToken') || getQueryParameter('token') || getQueryParameter('jwt');
-
           if (accessTokenQuery) {
             const {
               aud,
               firmId,
               userId
             } = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, accessTokenQuery);
-
             if (!!firmId && !!userId && aud === '8MBJWOFS4RRRSZQC') {
               const queryParameterValue = accessTokenQuery;
               let myselfWithoutToken = deleteQueryParameter(window.location.href, 'access_token', queryParameterValue);
@@ -6379,38 +6251,30 @@
               window.location.href = __classPrivateFieldGet(this, _Authentication_config, "f").authHost + '/oauth/passthrough?token=' + queryParameterValue + '&redirect=' + myselfEncoded;
               return true;
             }
-
             return false;
           }
-
           return false;
         };
-
         this.checkTokenInInit = () => {
           if (__classPrivateFieldGet(this, _Authentication_config, "f") && __classPrivateFieldGet(this, _Authentication_config, "f").initToken) {
             const {
               jti
             } = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_config, "f").initToken);
-
             if (jti) {
               const windowPassthroughSession = window.sessionStorage.getItem(PASSTHROUGH_SESSION_KEY);
-
               if (windowPassthroughSession) {
                 window.sessionStorage.removeItem(PASSTHROUGH_SESSION_KEY);
                 return false;
               }
-
               window.sessionStorage.setItem(PASSTHROUGH_SESSION_KEY, jti);
               const myselfEncoded = encodeURIComponent(window.location.href);
               window.location.href = __classPrivateFieldGet(this, _Authentication_config, "f").authHost + '/oauth/passthrough?jti=' + jti + '&redirect=' + myselfEncoded;
               return true;
             }
           }
-
           window.sessionStorage.removeItem(PASSTHROUGH_SESSION_KEY);
           return false;
         };
-
         this.verifySession = () => __awaiter(this, void 0, void 0, function* () {
           const code_verifier = createRandomString(64);
           const state = createRandomString(6);
@@ -6419,17 +6283,13 @@
             code_challenge,
             code_challenge_method
           } = yield createCodeChallenge(code_verifier);
-
           const scope = __classPrivateFieldGet(this, _Authentication_config, "f").scopes.join(',');
-
           const redirectUri = `${window.location.protocol}//${window.location.host}${window.location.pathname}`;
           const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&response_mode=web_message&scope=${scope}&client_id=${__classPrivateFieldGet(this, _Authentication_config, "f").clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&state=${state}&prompt=none`;
           const resp = yield this.runIframe(url, state);
-
           if (resp && resp.state) {
             const verifier = window.sessionStorage.getItem(resp.state);
             window.sessionStorage.removeItem(resp.state);
-
             if (resp.code && verifier) {
               return __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
                 code: resp.code,
@@ -6437,50 +6297,54 @@
                 redirectUri
               });
             }
-
             return false;
           } else {
             return false;
           }
         });
-
         this.checkAuthCode = () => __awaiter(this, void 0, void 0, function* () {
           const search = window.location.search;
           const queryParams = new URLSearchParams(search);
           const code = queryParams.get('code');
           const state = queryParams.get('state');
-
           if (!!code && !!state) {
-            const verifier = window.sessionStorage.getItem(state);
-            window.sessionStorage.removeItem(state);
-            let newUrl = window.location.href;
-            newUrl = deleteQueryParameter(newUrl, 'code', code);
-            newUrl = deleteQueryParameter(newUrl, 'state', state);
-            window.history.pushState(null, '', newUrl);
-            return __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
-              code,
-              verifier,
-              redirectUri: newUrl
-            });
+            const isPopupLogin = window.sessionStorage.getItem('leap-auth-popup-login');
+            if (isPopupLogin === 'true' && window.opener) {
+              window.sessionStorage.removeItem('leap-auth-popup-login');
+              window.opener.postMessage({
+                source: 'leap-auth-popup-login',
+                code,
+                state
+              }, '*');
+              window.close();
+              return false;
+            } else {
+              const verifier = window.sessionStorage.getItem(state);
+              window.sessionStorage.removeItem(state);
+              let newUrl = window.location.href;
+              newUrl = deleteQueryParameter(newUrl, 'code', code);
+              newUrl = deleteQueryParameter(newUrl, 'state', state);
+              window.history.pushState(null, '', newUrl);
+              return __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
+                code,
+                verifier,
+                redirectUri: newUrl
+              });
+            }
           } else {
             return false;
           }
         });
-
         this.getUserInfo = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").userInfo(token);
         });
-
         this.linkUser = params => __awaiter(this, void 0, void 0, function* () {
           const decodeToken = yield this.getDecodedRefreshedAccessToken();
-
           if (!decodeToken) {
             return;
           }
-
           const redirectUrl = params.redirectUrl || window.location.href;
-
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").linkUser({
             redirectUrl,
             jti: decodeToken.jti,
@@ -6488,16 +6352,12 @@
             callback: params.callback
           });
         });
-
         this.unlinkUser = params => __awaiter(this, void 0, void 0, function* () {
           const decodeToken = yield this.getDecodedRefreshedAccessToken();
-
           if (!decodeToken) {
             return;
           }
-
           const redirectUrl = params.redirectUrl || window.location.href;
-
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").unlinkUser({
             redirectUrl,
             jti: decodeToken.jti,
@@ -6505,34 +6365,25 @@
             callback: params.callback
           });
         });
-
         this.getCloudProviderToken = jti => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getCloudProviderToken(token, jti);
         });
-
         this.cloudProviderUserInfo = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderUserInfo(token);
         });
-
         this.cloudProviderReauthenticate = params => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           let {
             nonce,
             redirectUrl
@@ -6542,12 +6393,10 @@
             callback
           } = params;
           redirectUrl = redirectUrl || window.location.href;
-
           if (!nonce) {
             const reauthticateLink = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderReauthenticateLink(token);
             nonce = reauthticateLink.nonce;
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderReauthenticate({
             redirectUrl,
             nonce,
@@ -6555,16 +6404,12 @@
             callback
           });
         });
-
         this.cloudProviderUpdate = cloudProviderId => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           const decodedToken = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, token);
-
           const {
             firmId
           } = decodedToken;
@@ -6574,89 +6419,65 @@
             token: token
           });
         });
-
         this.statusAdminConsent = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").statusAdminConsent(token);
         });
-
         this.getAdminConsent = params => {
           const redirectUrl = params.redirectUrl || window.location.href;
-
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getAdminConsent(Object.assign(Object.assign({}, params), {
             redirectUrl
           }));
         };
-
         this.revokeAdminConsent = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").revokeAdminConsent(token);
         });
-
         this.getLinkMap = (allUsers = false) => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getLinkMap(token, allUsers);
         });
-
         this.setLinkMap = linkMap => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           const verifyFormat = () => {
             if (Array.isArray(linkMap)) {
               for (const link of linkMap) {
                 if (!(link.internalUser && link.externalUser && link.externalUser.id)) return false;
               }
-
               return true;
             }
-
             return false;
           };
-
           if (!verifyFormat()) throw Error('linkmap in wrong format');
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").setLinkMap(token, linkMap);
         });
-
         this.authoriseSupport = params => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
-
           if (!token) {
             throw Error('Not authenticated yet');
           }
-
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").authoriseSupport(token, params);
         });
-
         this.changePassword = params => {
           const redirectUrl = params.redirectUrl || window.location.href;
-
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").changePassword(Object.assign(Object.assign({}, params), {
             redirectUrl
           }));
         };
-
         this.passthrough = params => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield this.getDecodedRefreshedAccessToken();
-
           if (decodedToken && decodedToken.jti) {
             const {
               url,
@@ -6665,31 +6486,26 @@
             } = params;
             const encodedRedirectUrl = encodeURIComponent(url);
             const passthroughUrl = `${authHost || __classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/passthrough?jti=${decodedToken.jti}&redirect=${encodedRedirectUrl}&output=embed`;
-
             if (newWindow) {
               window.open(passthroughUrl, '_blank');
             } else {
               window.location.assign(passthroughUrl);
             }
           }
-
           return;
         });
-
         this.triggerHooks = hookName => __awaiter(this, void 0, void 0, function* () {
           const hooks = this.getHooks();
           const token = yield this.getRefreshedAccessToken();
           const hookFn = hooks && !!hooks[hookName] && lodash.isFunction(hooks[hookName]) ? hooks[hookName](token) : false;
           return Promise.resolve(hookFn);
         });
-
         this.afterAuthenticated = () => {
           return this.triggerHooks(HookName.afterLogin).then(() => __awaiter(this, void 0, void 0, function* () {
             yield this.initNotification();
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }));
         };
-
         this.runIframe = (authorizeUrl, state, timeoutInSeconds = DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS) => {
           return new Promise((res, rej) => {
             const iframe = window.document.createElement('iframe');
@@ -6697,20 +6513,17 @@
             iframe.setAttribute('height', '0');
             iframe.setAttribute('id', 'agent-iframe');
             iframe.style.display = 'none';
-
             const removeIframe = () => {
               if (window.document.body.contains(iframe)) {
                 window.document.body.removeChild(iframe);
                 window.removeEventListener('message', iframeEventHandler, false);
               }
             };
-
             const timeoutSetTimeoutId = setTimeout(() => {
               rej('agent-iframe timeout');
               removeIframe();
               window.sessionStorage.removeItem(state);
             }, timeoutInSeconds * 1000);
-
             const iframeEventHandler = e => {
               const {
                 data,
@@ -6719,30 +6532,25 @@
               } = e;
               if (origin !== __classPrivateFieldGet(this, _Authentication_config, "f").authHost) return;
               if (!data || data.type !== 'authorization_response') return;
-
               if (source) {
                 source.close();
               }
-
               res(data.response);
               clearTimeout(timeoutSetTimeoutId);
               window.removeEventListener('message', iframeEventHandler, false);
               setTimeout(removeIframe, CLEANUP_IFRAME_TIMEOUT_IN_SECONDS * 1000);
             };
-
             window.addEventListener('message', iframeEventHandler, false);
             window.document.body.appendChild(iframe);
             iframe.setAttribute('src', authorizeUrl);
           });
         };
-
         _Authentication_exchangeAuthCodeForAccessToken.set(this, params => __awaiter(this, void 0, void 0, function* () {
           const {
             verifier,
             code,
             redirectUri
           } = params;
-
           if (verifier) {
             const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").exchangeAuthCodeForAccessToken({
               code,
@@ -6750,11 +6558,9 @@
               redirectUri
             });
             const redirectTriggered = yield __classPrivateFieldGet(this, _Authentication_verifyAndPerformRedirections, "f").call(this, data.access_token);
-
             if (redirectTriggered) {
               return true;
             }
-
             if (data.refresh_token && data.expires_in) {
               __classPrivateFieldSet(this, _Authentication_refreshInfo, {
                 refreshToken: data.refresh_token,
@@ -6762,105 +6568,79 @@
                 verifier: verifier,
                 timer: undefined
               }, "f");
-
               if (__classPrivateFieldGet(this, _Authentication_config, "f").autoRefreshToken) {
                 __classPrivateFieldGet(this, _Authentication_startRefreshAccessTokenProcess, "f").call(this);
               }
             }
-
             __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
-
             return true;
           } else {
             return false;
           }
         }));
-
         _Authentication_verifyAndPerformRedirections.set(this, accessToken => __awaiter(this, void 0, void 0, function* () {
           const redirectionConfig = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getRedirections();
           const origin = window.location.origin;
-
           const decodedToken = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, accessToken);
-
           const redirectUri = getRedirectUri(origin, decodedToken, redirectionConfig);
-
           if (redirectUri) {
             this.logout(false, redirectUri);
             return true;
           }
-
           return false;
         }));
-
         _Authentication_startRefreshAccessTokenProcess.set(this, () => {
           if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
             return;
           }
-
           if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer) {
             clearTimeout(__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer);
-
             __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
               timer: undefined
             }), "f");
           }
-
           const waitBeforeExecuting = (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").accessTokenExpireIn - SECONDS_BEFORE_EXPIRE) * 1000;
-
           if (waitBeforeExecuting > MAX_SETTIME_OUT) {
             return;
           }
-
           const timer = setTimeout(() => __awaiter(this, void 0, void 0, function* () {
             if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
               return;
             }
-
             const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").renewAccessToken({
               refreshToken: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").refreshToken,
               verifier: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").verifier
             });
-
             if (data) {
               if (data.refresh_token && data.expires_in) {
                 __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
                   refreshToken: data.refresh_token,
                   accessTokenExpireIn: data.expires_in
                 }), "f");
-
                 __classPrivateFieldGet(this, _Authentication_startRefreshAccessTokenProcess, "f").call(this);
               }
-
               __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
-
               yield this.triggerHooks(HookName.afterRefreshToken);
             }
           }), waitBeforeExecuting);
-
           __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
             timer
           }), "f");
         });
-
         _Authentication_destroyRefreshAccessTokenProcess.set(this, () => {
           if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
             return;
           }
-
           if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer) {
             clearTimeout(__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer);
           }
-
           __classPrivateFieldSet(this, _Authentication_refreshInfo, undefined, "f");
         });
-
         _Authentication_decodeAccessToken.set(this, accessToken => {
           if (!accessToken) {
             return undefined;
           }
-
           const payload = accessToken.split('.')[1];
-
           if (payload) {
             try {
               const result = window.atob(payload);
@@ -6869,31 +6649,52 @@
               throw Error('Fail to decode access token.');
             }
           }
-
           return undefined;
         });
-
+        _Authentication_handlePopupLogin.set(this, url => {
+          return new Promise(resolve => {
+            __classPrivateFieldSet(this, _Authentication_popupLogin, true, "f");
+            window.sessionStorage.setItem('leap-auth-popup-login', 'true');
+            window.open(url, '_blank', 'menubar=0,top=500,left=0,width=600,height=600');
+            window.addEventListener('message', event => __awaiter(this, void 0, void 0, function* () {
+              if (event.data && event.data.source && event.data.source === 'leap-auth-popup-login') {
+                const code = event.data.code;
+                const state = event.data.state;
+                const verifier = window.sessionStorage.getItem(state);
+                window.sessionStorage.removeItem(state);
+                let newUrl = window.location.href;
+                newUrl = deleteQueryParameter(newUrl, 'code', code);
+                newUrl = deleteQueryParameter(newUrl, 'state', state);
+                window.history.pushState(null, '', newUrl);
+                const done = yield __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
+                  code,
+                  verifier,
+                  redirectUri: newUrl
+                });
+                if (done) {
+                  resolve(__classPrivateFieldGet(this, _Authentication_accessToken, "f"));
+                } else {
+                  resolve(undefined);
+                }
+              }
+            }));
+          });
+        });
         __classPrivateFieldSet(this, _Authentication_accessToken, undefined, "f");
-
         __classPrivateFieldSet(this, _Authentication_config, init$1(options), "f");
-
         __classPrivateFieldSet(this, _Authentication_leapAuthService, new LeapAuthService(__classPrivateFieldGet(this, _Authentication_config, "f").authHost, __classPrivateFieldGet(this, _Authentication_config, "f").clientId), "f");
-
         __classPrivateFieldSet(this, _Authentication_notification, new Notification(), "f");
+        __classPrivateFieldSet(this, _Authentication_popupLogin, false, "f");
       }
-
     }
-    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap();
+    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_popupLogin = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_handlePopupLogin = new WeakMap();
 
     var _IdleTimer_timeoutInMinutes, _IdleTimer_timer, _IdleTimer_onTimeout, _IdleTimer_cleanUpTracker, _IdleTimer_clearTimeout, _IdleTimer_resetTimer;
     class IdleTimer {
       constructor(params) {
         _IdleTimer_timeoutInMinutes.set(this, void 0);
-
         _IdleTimer_timer.set(this, void 0);
-
         _IdleTimer_onTimeout.set(this, void 0);
-
         this.tracker = () => {
           window.addEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.addEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
@@ -6901,7 +6702,6 @@
           window.addEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.addEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
         };
-
         _IdleTimer_cleanUpTracker.set(this, () => {
           window.removeEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.removeEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
@@ -6909,49 +6709,36 @@
           window.removeEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.removeEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
         });
-
         _IdleTimer_clearTimeout.set(this, () => {
           if (__classPrivateFieldGet(this, _IdleTimer_timer, "f")) {
             clearTimeout(__classPrivateFieldGet(this, _IdleTimer_timer, "f"));
           }
         });
-
         _IdleTimer_resetTimer.set(this, () => {
           __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
-
           __classPrivateFieldSet(this, _IdleTimer_timer, setTimeout(() => {
             __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
-
             __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
-
             __classPrivateFieldGet(this, _IdleTimer_onTimeout, "f").call(this);
           }, __classPrivateFieldGet(this, _IdleTimer_timeoutInMinutes, "f") * 60 * 1000), "f");
         });
-
         const {
           timeoutInMinutes,
           onTimeout: onTimeout
         } = params;
-
         __classPrivateFieldSet(this, _IdleTimer_timeoutInMinutes, timeoutInMinutes, "f");
-
         __classPrivateFieldSet(this, _IdleTimer_onTimeout, onTimeout, "f");
       }
-
     }
     _IdleTimer_timeoutInMinutes = new WeakMap(), _IdleTimer_timer = new WeakMap(), _IdleTimer_onTimeout = new WeakMap(), _IdleTimer_cleanUpTracker = new WeakMap(), _IdleTimer_clearTimeout = new WeakMap(), _IdleTimer_resetTimer = new WeakMap();
 
     let auth;
-
     const init = options => __awaiter(void 0, void 0, void 0, function* () {
       auth = new Authentication(options);
-
       if (!auth) {
         return false;
       }
-
       const autoLogout = auth.autoLogout();
-
       if (autoLogout) {
         const timeoutInMinutes = auth.idleTimeoutInMinutes();
         const idleTimer = new IdleTimer({
@@ -6960,162 +6747,133 @@
         });
         idleTimer.tracker();
       }
-
       const done = yield auth.checkAuthCode();
-
       if (done) {
         return auth.afterAuthenticated();
       }
-
       const hasAuthSession = yield verifySession();
-
       if (hasAuthSession) {
         return auth.afterAuthenticated();
       }
-
       const passthrough = auth.checkTokenInUrl() || auth.checkTokenInInit();
-
       if (passthrough) {
         return false;
       }
-
       const autoLogin = auth.autoLogin();
-
       if (autoLogin) {
         yield login();
       }
-
       return true;
     });
-
     const verifySession = () => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return yield auth.verifySession();
     });
-
     const getAccessToken = () => {
       return !auth ? '' : auth.getAccessToken();
     };
-
     const getRefreshedAccessToken = force => __awaiter(void 0, void 0, void 0, function* () {
       return !auth ? '' : yield auth.getRefreshedAccessToken(force);
     });
-
-    const login = () => __awaiter(void 0, void 0, void 0, function* () {
+    const login = (params = {}) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
-      return auth.login().then(token => {
+      const {
+        force_2fa,
+        popup
+      } = params;
+      return auth.login({
+        noPrompt: false,
+        force_2fa: !!force_2fa,
+        popup: !!popup
+      }).then(token => {
         return token && auth ? auth.afterAuthenticated() : undefined;
       });
     });
-
     const logout = (force = false, redirectUrl) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.triggerHooks(HookName.beforeLogout).then(() => {
         if (auth) {
           auth.destroyNotification();
           auth.logout(force, redirectUrl);
         }
-
         return;
       }).catch(function (err) {
         console.error('Error while logging out : ', err);
         throw Error(err);
       });
     });
-
     const registerHook = (hookName, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       if (auth) {
         auth.setHook({
           name: hookName,
           callback
         });
       }
-
       return;
     };
-
     const getDecodedAccessToken = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.getDecodedAccessToken();
     };
-
     const getDecodedRefreshedAccessToken = force => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return yield auth.getDecodedRefreshedAccessToken(force);
     });
-
     const userInfo = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.getUserInfo();
     };
-
     const linkUser = (redirectUrl, newWindow, callback) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       yield auth.linkUser({
         redirectUrl,
         newWindow,
         callback
       });
     });
-
     const unlinkUser = (redirectUrl, newWindow, callback) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       yield auth.unlinkUser({
         redirectUrl,
         newWindow,
         callback
       });
     });
-
     const getCloudProviderToken = jti => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.getCloudProviderToken(jti);
     };
-
     const cloudProviderUserInfo = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.cloudProviderUserInfo();
     };
-
     const cloudProviderReauthenticate = (nonce, redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.cloudProviderReauthenticate({
         redirectUrl,
         nonce,
@@ -7123,32 +6881,25 @@
         callback
       });
     };
-
     const cloudProviderUpdate = cloudProviderId => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       if (!cloudProviderId) {
         throw Error('cloudProviderId is required');
       }
-
       return auth.cloudProviderUpdate(cloudProviderId);
     };
-
     const statusAdminConsent = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.statusAdminConsent();
     };
-
     const getAdminConsent = (domain, redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       auth.getAdminConsent({
         domain,
         redirectUrl,
@@ -7156,78 +6907,63 @@
         callback
       });
     };
-
     const revokeAdminConsent = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.revokeAdminConsent();
     };
-
     const getLinkMap = allUsers => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.getLinkMap(allUsers);
     };
-
     const setLinkMap = linkMap => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.setLinkMap(linkMap);
     };
-
     const authoriseSupport = (code, duration) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       return auth.authoriseSupport({
         code,
         duration
       });
     };
-
     const changePassword = (redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       auth.changePassword({
         redirectUrl,
         newWindow,
         callback
       });
     };
-
     const registerEventListener = (topic, messageType, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       auth.registerEventListenerForUserChannel({
         topic,
         messageType,
         callback
       });
     };
-
     const passthrough = (url, newWindow = false, authHost) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
-
       yield auth.passthrough({
         url,
         newWindow,
         authHost
       });
     });
-
     const AuthAgent = {
       init,
       registerHook,