@nibssplc/cams-sdk-react 0.0.1-beta.94 → 0.0.1-beta.96

package/dist/index.esm.js

@@ -1843,32 +1843,48 @@ var MFAOptions = function (_a) {
     var idToken = context.authMode === "MSAL" ? context.idToken : "";
     var authenticate = useWebAuthn().authenticate;
     var handleFIDOLogin = function () { return __awaiter(void 0, void 0, void 0, function () {
-        var options, assertionResponse, error_1;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
+        var options, fixedOptions, assertionResponse, error_1;
+        var _a, _b, _c, _d, _e, _f;
+        return __generator(this, function (_g) {
+            switch (_g.label) {
                 case 0:
-                    _a.trys.push([0, 4, , 5]);
+                    _g.trys.push([0, 4, , 5]);
                     // 1. Fetch authentication challenge from your server
                     console.log("Requesting authentication challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RetrieveAuthChallenge)];
+                    return [4 /*yield*/, axios.post(MFAEndpoints.RetrieveAuthChallenge, {}, {
+                            headers: {
+                                "X-DEVICE-ID": GenerateDeviceId(),
+                                "X-API-VERSION": "1.0",
+                            },
+                        })];
                 case 1:
-                    options = (_a.sent()).data;
+                    options = (_g.sent()).data;
                     console.log("Received challenge:", options);
+                    fixedOptions = __assign(__assign({}, options), { pubKeyCredParams: (_a = options.pubKeyCredParams) === null || _a === void 0 ? void 0 : _a.map(function (param) { return ({
+                            type: "public-key",
+                            alg: param.alg
+                        }); }), attestation: ((_b = options.attestation) === null || _b === void 0 ? void 0 : _b.toLowerCase()) || "none", authenticatorSelection: __assign(__assign({}, options.authenticatorSelection), { residentKey: ((_d = (_c = options.authenticatorSelection) === null || _c === void 0 ? void 0 : _c.residentKey) === null || _d === void 0 ? void 0 : _d.toLowerCase()) || "discouraged", userVerification: ((_f = (_e = options.authenticatorSelection) === null || _e === void 0 ? void 0 : _e.userVerification) === null || _f === void 0 ? void 0 : _f.toLowerCase()) || "preferred" }) });
                     // 2. Call the SDK to trigger the browser's passkey authentication UI
                     console.log("Calling SDK authenticate function...");
-                    return [4 /*yield*/, authenticate(options)];
+                    return [4 /*yield*/, authenticate(fixedOptions)];
                 case 2:
-                    assertionResponse = _a.sent();
+                    assertionResponse = _g.sent();
                     console.log("Authentication assertion received from client:", assertionResponse);
                     // 3. Send the assertion back to the server for verification
                     console.log("Sending assertion to server for verification...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.AuthChallengeVerify, assertionResponse)];
+                    return [4 /*yield*/, axios.post(MFAEndpoints.AuthChallengeVerify, assertionResponse, {
+                            headers: {
+                                "X-DEVICE-ID": GenerateDeviceId(),
+                                "X-API-VERSION": "1.0",
+                            },
+                            withCredentials: true, // credentials: 'include'
+                        })];
                 case 3:
-                    _a.sent();
+                    _g.sent();
                     toast.success("🔑 Sign-in successful!");
                     return [3 /*break*/, 5];
                 case 4:
-                    error_1 = _a.sent();
+                    error_1 = _g.sent();
                     console.error("Authentication failed:", error_1);
                     toast.error("❌ Could not sign in.");
                     return [3 /*break*/, 5];
@@ -2086,7 +2102,12 @@ var DefaultLoginPage = function (_a) {
                     _a.trys.push([0, 4, , 5]);
                     // 1. Fetch challenge from your server
                     console.log("Requesting registration challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data))];
+                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data), {
+                            headers: {
+                                "X-DEVICE-ID": GenerateDeviceId(),
+                                "X-API-VERSION": "1.0",
+                            },
+                        })];
                 case 1:
                     options = (_a.sent()).data;
                     console.log("Received challenge:", options);
@@ -2099,7 +2120,10 @@ var DefaultLoginPage = function (_a) {
                     // 3. Send the response back to the server for verification
                     console.log("Sending attestation to server for verification...");
                     return [4 /*yield*/, axios.post(MFAEndpoints.RegisterVerify, attestationResponse, {
-                            headers: { "Content-Type": "application/json" },
+                            headers: {
+                                "X-DEVICE-ID": GenerateDeviceId(),
+                                "X-API-VERSION": "1.0",
+                            },
                             withCredentials: true, // credentials: 'include'
                         })];
                 case 3: