@newskit-render/core 4.66.3 → 4.67.0

package/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [4.67.0](https://github.com/newscorp-ghfb/ncu-newskit-render/compare/@newskit-render/core@4.66.4...@newskit-render/core@4.67.0) (2026-07-14)
+
+
+### Features
+
+* **SVRS-6204:** limit MFA to certain pages ([#2062](https://github.com/newscorp-ghfb/ncu-newskit-render/issues/2062)) ([16de08d](https://github.com/newscorp-ghfb/ncu-newskit-render/commit/16de08d3bdbe6cefaf43e4a8d617e4a1fddaff8b))
+
+
+
+
+
+## [4.66.4](https://github.com/newscorp-ghfb/ncu-newskit-render/compare/@newskit-render/core@4.66.3...@newskit-render/core@4.66.4) (2026-06-30)
+
+
+### Bug Fixes
+
+* **SVRS-6168:** UI updates to Sun OCJ ([#2060](https://github.com/newscorp-ghfb/ncu-newskit-render/issues/2060)) ([a3b32bc](https://github.com/newscorp-ghfb/ncu-newskit-render/commit/a3b32bc1119de0c088b0daaf3fb3d4c6a224c1a5))
+
+
+
+
+
 ## [4.66.3](https://github.com/newscorp-ghfb/ncu-newskit-render/compare/@newskit-render/core@4.66.2...@newskit-render/core@4.66.3) (2026-06-30)
 
 **Note:** Version bump only for package @newskit-render/core

package/cypress/support/commands.js

@@ -38,7 +38,8 @@ Cypress.Commands.add('GetAcsSession', (user = 'default') => {
     method: 'POST',
     url: 'https://login.staging-thesun.co.uk/services/session',
     headers: {
-      'Content-Type': 'application/vnd.newsuk.acs.createsession-v1+json',
+      'Content-Type': 'application/vnd.newsuk.acs.createsession-v1+json','x-nuk-waf-bypass':
+            '3739ebe98d7fc43bb0de9b70db0a424c5484599bb1325dfc2c1b3c88c5150db6',
     },
     body: {
       rememberMe: false,
@@ -62,7 +63,8 @@ Cypress.Commands.add('GetTnlAcsSession', (user = 'tnl') => {
     method: 'POST',
     url: 'https://login.staging-thetimes.com/services/session',
     headers: {
-      'Content-Type': 'application/vnd.newsuk.acs.createsession-v1+json',
+      'Content-Type': 'application/vnd.newsuk.acs.createsession-v1+json','x-nuk-waf-bypass':
+            '3739ebe98d7fc43bb0de9b70db0a424c5484599bb1325dfc2c1b3c88c5150db6',
     },
     body: {
       rememberMe: false,

package/helpers/getProviderPropsUtil.ts

@@ -4,17 +4,40 @@ import {
 } from '@newskit-render/my-account'
 import { publisher } from '../config'
 
+/**
+ * Playground allow-list of page providers that require step-up MFA.
+ * Mirrors the consumer-owned config (e.g. sun-myaccount `config/mfaPages`).
+ * Any provider not listed defaults to NO MFA. ANDed with the global
+ * ENABLE_STEPUP_MFA env flag which acts as a master kill-switch.
+ */
+const MFA_ENABLED_PROVIDERS = new Set([
+  'PersonalDetails',
+  'SubscriptionAndBilling',
+  'Payment',
+  'PaymentMethods',
+])
+
+const isMfaEnabledForProvider = (provider?: string): boolean =>
+  process.env.ENABLE_STEPUP_MFA === 'true' &&
+  !!provider &&
+  MFA_ENABLED_PROVIDERS.has(provider)
+
 export const getProviderPropsUtil = (context, options?) => {
   if (process.env.NODE_ENV === 'development' && publisher === 'TIMES') {
     return getProviderPropsTimes({
       context,
+      enableStepUpMfa: isMfaEnabledForProvider(context?.provider),
       options: {
         ...options,
       },
     })
   }
 
-  return getProviderProps(context, {
-    ...options,
-  })
+  return getProviderProps(
+    context,
+    {
+      ...options,
+    },
+    { enableStepUpMfa: isMfaEnabledForProvider(context?.provider) }
+  )
 }

package/next-env.d.ts

@@ -2,4 +2,4 @@
 /// <reference types="next/image-types/global" />
 
 // NOTE: This file should not be edited
-// see https://nextjs.org/docs/basic-features/typescript for more information.
+// see https://nextjs.org/docs/pages/building-your-application/configuring/typescript for more information.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newskit-render/core",
-  "version": "4.66.3",
+  "version": "4.67.0",
   "description": "Newskit Render - Core package",
   "author": "",
   "license": "UNLICENSED",
@@ -44,12 +44,12 @@
     "@newrelic/winston-enricher": "4.0.1",
     "@newskit-render/api": "^1.20.0",
     "@newskit-render/auth": "^1.11.0",
-    "@newskit-render/checkout": "^3.14.4",
+    "@newskit-render/checkout": "^3.14.5",
     "@newskit-render/feature-flags": "^1.16.0",
     "@newskit-render/feed": "^1.11.0",
-    "@newskit-render/my-account": "^7.193.1",
-    "@newskit-render/shared-components": "^4.75.2",
-    "@newskit-render/standalone-components": "^3.29.4",
+    "@newskit-render/my-account": "^7.193.2",
+    "@newskit-render/shared-components": "^4.75.3",
+    "@newskit-render/standalone-components": "^3.29.5",
     "@newskit-render/validation": "^1.27.0",
     "cross-fetch": "3.1.5",
     "graphql": "16.6.0",
@@ -123,5 +123,5 @@
     "@types/pino-std-serializers": "2.4.1",
     "@types/pino-pretty": "4.7.5"
   },
-  "gitHead": "2a62a53063abefb09789a1668ce9dfd4f4c03778"
+  "gitHead": "a4bba8eb0896c0060fa17207d7ee20f0f9da7ed7"
 }