@okta/okta-auth-js 5.11.0 → 6.0.0

package/esm/index.js

@@ -27,14 +27,14 @@ import _toConsumableArray from '@babel/runtime/helpers/toConsumableArray';
 import _defineProperty from '@babel/runtime/helpers/defineProperty';
 import _get from '@babel/runtime/helpers/get';
 
-function _createSuper$r(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$r(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$u(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$u(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$r() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$u() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 var CustomError = /*#__PURE__*/function (_Error) {
   _inherits(CustomError, _Error);
 
-  var _super = _createSuper$r(CustomError);
+  var _super = _createSuper$u(CustomError);
 
   function CustomError(message) {
     var _this;
@@ -49,14 +49,14 @@ var CustomError = /*#__PURE__*/function (_Error) {
   return CustomError;
 }( /*#__PURE__*/_wrapNativeSuper(Error));
 
-function _createSuper$q(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$q(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$t(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$t(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$q() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$t() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 var AuthApiError = /*#__PURE__*/function (_CustomError) {
   _inherits(AuthApiError, _CustomError);
 
-  var _super = _createSuper$q(AuthApiError);
+  var _super = _createSuper$t(AuthApiError);
 
   function AuthApiError(err, xhr) {
     var _this;
@@ -82,14 +82,14 @@ var AuthApiError = /*#__PURE__*/function (_CustomError) {
   return AuthApiError;
 }(CustomError);
 
-function _createSuper$p(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$p(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$s(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$s(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$p() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$s() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 var AuthPollStopError = /*#__PURE__*/function (_CustomError) {
   _inherits(AuthPollStopError, _CustomError);
 
-  var _super = _createSuper$p(AuthPollStopError);
+  var _super = _createSuper$s(AuthPollStopError);
 
   function AuthPollStopError() {
     _classCallCheck(this, AuthPollStopError);
@@ -101,14 +101,14 @@ var AuthPollStopError = /*#__PURE__*/function (_CustomError) {
   return AuthPollStopError;
 }(CustomError);
 
-function _createSuper$o(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$o(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$r(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$r(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$o() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$r() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 var AuthSdkError = /*#__PURE__*/function (_CustomError) {
   _inherits(AuthSdkError, _CustomError);
 
-  var _super = _createSuper$o(AuthSdkError);
+  var _super = _createSuper$r(AuthSdkError);
 
   function AuthSdkError(msg, xhr) {
     var _this;
@@ -133,14 +133,14 @@ var AuthSdkError = /*#__PURE__*/function (_CustomError) {
   return AuthSdkError;
 }(CustomError);
 
-function _createSuper$n(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$n(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$q(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$q(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$n() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$q() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 var OAuthError = /*#__PURE__*/function (_CustomError) {
   _inherits(OAuthError, _CustomError);
 
-  var _super = _createSuper$n(OAuthError);
+  var _super = _createSuper$q(OAuthError);
 
   function OAuthError(errorCode, summary) {
     var _this;
@@ -268,49 +268,6 @@ function deprecateWrap(text, fn) {
   };
 }
 
-function urlParamsToObject(hashOrSearch) {
-  var plus2space = /\+/g;
-  var paramSplit = /([^&=]+)=?([^&]*)/g;
-  var fragment = hashOrSearch || '';
-
-  if (fragment.charAt(0) === '#' && fragment.charAt(1) === '/') {
-    fragment = fragment.substring(2);
-  }
-
-  if (fragment.charAt(0) === '#' || fragment.charAt(0) === '?') {
-    fragment = fragment.substring(1);
-  }
-
-  var obj = {};
-  var param;
-
-  while (true) {
-    param = paramSplit.exec(fragment);
-
-    if (!param) {
-      break;
-    }
-
-    var key = param[1];
-    var value = param[2];
-
-    if (key === 'id_token' || key === 'access_token' || key === 'code') {
-      obj[key] = value;
-    } else {
-      obj[key] = decodeURIComponent(value.replace(plus2space, ' '));
-    }
-  }
-
-  return obj;
-}
-
-function isEmailVerifyCallback(urlPath) {
-  return /(stateTokenExternalId=)/i.test(urlPath) && /(state=)/i.test(urlPath);
-}
-function parseEmailVerifyCallback(urlPath) {
-  return urlParamsToObject(urlPath);
-}
-
 function isoToUTCString(str) {
   var parts = str.match(/\d+/g),
       isoTime = Date.UTC(parts[0], parts[1] - 1, parts[2], parts[3], parts[4], parts[5]),
@@ -852,6 +809,9 @@ var AuthTransaction = function AuthTransaction(sdk) {
 
   _classCallCheck(this, AuthTransaction);
 
+  this.data = undefined;
+  this.status = undefined;
+
   if (res) {
     this.data = res;
 
@@ -1036,7 +996,6 @@ function transactionStatus(sdk, args) {
     withCredentials: true
   });
 }
-
 function resumeTransaction(sdk, args) {
   if (!args || !args.stateToken) {
     var stateToken = sdk.tx.exists._get(STATE_TOKEN_KEY_NAME);
@@ -1054,8 +1013,7 @@ function resumeTransaction(sdk, args) {
     return new AuthTransaction(sdk, res);
   });
 }
-
-function introspect$1(sdk, args) {
+function introspectAuthn(sdk, args) {
   if (!args || !args.stateToken) {
     var stateToken = sdk.tx.exists._get(STATE_TOKEN_KEY_NAME);
 
@@ -1072,18 +1030,15 @@ function introspect$1(sdk, args) {
     return new AuthTransaction(sdk, res);
   });
 }
-
 function transactionStep(sdk, args) {
   args = addStateToken(sdk, args);
   return post(sdk, sdk.getIssuerOrigin() + '/api/v1/authn/introspect', args, {
     withCredentials: true
   });
 }
-
 function transactionExists(sdk) {
   return !!sdk.tx.exists._get(STATE_TOKEN_KEY_NAME);
 }
-
 function postToTransaction(sdk, url, args, options) {
   options = Object.assign({
     withCredentials: true
@@ -1093,10 +1048,6 @@ function postToTransaction(sdk, url, args, options) {
   });
 }
 
-var TransactionState = function TransactionState() {
-  _classCallCheck(this, TransactionState);
-};
-
 function dec2hex(dec) {
   return ('0' + dec.toString(16)).substr(-2);
 }
@@ -1466,13 +1417,18 @@ function isBrowser() {
   return typeof document !== 'undefined' && typeof window !== 'undefined';
 }
 function isIE11OrLess() {
-  return isBrowser() && !!document.documentMode && document.documentMode <= 11;
+  if (!isBrowser()) {
+    return false;
+  }
+
+  var documentMode = document.documentMode;
+  return !!documentMode && documentMode <= 11;
 }
-function getUserAgent$1() {
+function getUserAgent() {
   return navigator.userAgent;
 }
 function isFingerprintSupported() {
-  var agent = getUserAgent$1();
+  var agent = getUserAgent();
   return agent && !isWindowsPhone.test(agent);
 }
 function isPopupPostMessageSupported() {
@@ -1480,9 +1436,10 @@ function isPopupPostMessageSupported() {
     return false;
   }
 
-  var isIE8or9 = document.documentMode && document.documentMode < 10;
+  var documentMode = document.documentMode;
+  var isIE8or9 = documentMode && documentMode < 10;
 
-  if (window.postMessage && !isIE8or9) {
+  if (typeof window.postMessage !== 'undefined' && !isIE8or9) {
     return true;
   }
 
@@ -1512,7 +1469,7 @@ var features = /*#__PURE__*/Object.freeze({
   __proto__: null,
   isBrowser: isBrowser,
   isIE11OrLess: isIE11OrLess,
-  getUserAgent: getUserAgent$1,
+  getUserAgent: getUserAgent,
   isFingerprintSupported: isFingerprintSupported,
   isPopupPostMessageSupported: isPopupPostMessageSupported,
   isTokenVerifySupported: isTokenVerifySupported,
@@ -1579,7 +1536,12 @@ function hasErrorInUrl(hashOrSearch) {
 }
 function isRedirectUri(uri, sdk) {
   var authParams = sdk.options;
-  return uri && uri.indexOf(authParams.redirectUri) === 0;
+
+  if (!uri || !authParams.redirectUri) {
+    return false;
+  }
+
+  return uri.indexOf(authParams.redirectUri) === 0;
 }
 function isCodeFlow(options) {
   return options.pkce || options.responseType === 'code' || options.responseMode === 'query';
@@ -1620,14 +1582,35 @@ function isInteractionRequired(sdk, hashOrSearch) {
   return /(error=interaction_required)/i.test(hashOrSearch);
 }
 
-function prepareTokenParams(sdk, tokenParams) {
-  var defaults = getDefaultTokenParams(sdk);
-  tokenParams = Object.assign({}, defaults, clone(tokenParams));
+function createOAuthMeta(sdk, tokenParams) {
+  var issuer = sdk.options.issuer;
+  var urls = getOAuthUrls(sdk, tokenParams);
+  var oauthMeta = {
+    issuer: issuer,
+    urls: urls,
+    clientId: tokenParams.clientId,
+    redirectUri: tokenParams.redirectUri,
+    responseType: tokenParams.responseType,
+    responseMode: tokenParams.responseMode,
+    scopes: tokenParams.scopes,
+    state: tokenParams.state,
+    nonce: tokenParams.nonce,
+    ignoreSignature: tokenParams.ignoreSignature
+  };
 
   if (tokenParams.pkce === false) {
-    return Promise.resolve(tokenParams);
+    return oauthMeta;
   }
 
+  var pkceMeta = Object.assign(Object.assign({}, oauthMeta), {
+    codeVerifier: tokenParams.codeVerifier,
+    codeChallengeMethod: tokenParams.codeChallengeMethod,
+    codeChallenge: tokenParams.codeChallenge
+  });
+  return pkceMeta;
+}
+
+function assertPKCESupport(sdk) {
   if (!sdk.features.isPKCESupported()) {
     var errorMessage = 'PKCE requires a modern browser with encryption support running in a secure context.';
 
@@ -1639,33 +1622,135 @@ function prepareTokenParams(sdk, tokenParams) {
       errorMessage += '\n"TextEncoder" is not defined. To use PKCE, you may need to include a polyfill/shim for this browser.';
     }
 
-    return Promise.reject(new AuthSdkError(errorMessage));
+    throw new AuthSdkError(errorMessage);
   }
+}
+function validateCodeChallengeMethod(_x, _x2) {
+  return _validateCodeChallengeMethod.apply(this, arguments);
+}
 
-  if (!tokenParams.codeChallengeMethod) {
-    tokenParams.codeChallengeMethod = DEFAULT_CODE_CHALLENGE_METHOD;
-  }
+function _validateCodeChallengeMethod() {
+  _validateCodeChallengeMethod = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(sdk, codeChallengeMethod) {
+    var wellKnownResponse, methods;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            codeChallengeMethod = codeChallengeMethod || sdk.options.codeChallengeMethod || DEFAULT_CODE_CHALLENGE_METHOD;
+            _context.next = 3;
+            return getWellKnown(sdk);
 
-  tokenParams.responseType = 'code';
-  return getWellKnown(sdk, null).then(function (res) {
-    var methods = res['code_challenge_methods_supported'] || [];
+          case 3:
+            wellKnownResponse = _context.sent;
+            methods = wellKnownResponse['code_challenge_methods_supported'] || [];
 
-    if (methods.indexOf(tokenParams.codeChallengeMethod) === -1) {
-      throw new AuthSdkError('Invalid code_challenge_method');
-    }
-  }).then(function () {
-    if (!tokenParams.codeVerifier) {
-      tokenParams.codeVerifier = PKCE.generateVerifier();
-    }
+            if (!(methods.indexOf(codeChallengeMethod) === -1)) {
+              _context.next = 7;
+              break;
+            }
 
-    return PKCE.computeChallenge(tokenParams.codeVerifier);
-  }).then(function (codeChallenge) {
-    var clonedParams = clone(tokenParams) || {};
-    Object.assign(clonedParams, tokenParams, {
-      codeChallenge: codeChallenge
-    });
-    return clonedParams;
-  });
+            throw new AuthSdkError('Invalid code_challenge_method');
+
+          case 7:
+            return _context.abrupt("return", codeChallengeMethod);
+
+          case 8:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+  return _validateCodeChallengeMethod.apply(this, arguments);
+}
+
+function preparePKCE(_x3, _x4) {
+  return _preparePKCE.apply(this, arguments);
+}
+
+function _preparePKCE() {
+  _preparePKCE = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee2(sdk, tokenParams) {
+    var _tokenParams, codeVerifier, codeChallenge, codeChallengeMethod;
+
+    return _regeneratorRuntime.wrap(function _callee2$(_context2) {
+      while (1) {
+        switch (_context2.prev = _context2.next) {
+          case 0:
+            _tokenParams = tokenParams, codeVerifier = _tokenParams.codeVerifier, codeChallenge = _tokenParams.codeChallenge, codeChallengeMethod = _tokenParams.codeChallengeMethod;
+            codeChallenge = codeChallenge || sdk.options.codeChallenge;
+
+            if (codeChallenge) {
+              _context2.next = 8;
+              break;
+            }
+
+            assertPKCESupport(sdk);
+            codeVerifier = codeVerifier || PKCE.generateVerifier();
+            _context2.next = 7;
+            return PKCE.computeChallenge(codeVerifier);
+
+          case 7:
+            codeChallenge = _context2.sent;
+
+          case 8:
+            _context2.next = 10;
+            return validateCodeChallengeMethod(sdk, codeChallengeMethod);
+
+          case 10:
+            codeChallengeMethod = _context2.sent;
+            tokenParams = Object.assign(Object.assign({}, tokenParams), {
+              responseType: 'code',
+              codeVerifier: codeVerifier,
+              codeChallenge: codeChallenge,
+              codeChallengeMethod: codeChallengeMethod
+            });
+            return _context2.abrupt("return", tokenParams);
+
+          case 13:
+          case "end":
+            return _context2.stop();
+        }
+      }
+    }, _callee2);
+  }));
+  return _preparePKCE.apply(this, arguments);
+}
+
+function prepareTokenParams(_x5) {
+  return _prepareTokenParams.apply(this, arguments);
+}
+
+function _prepareTokenParams() {
+  _prepareTokenParams = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee3(sdk) {
+    var tokenParams,
+        defaults,
+        _args3 = arguments;
+    return _regeneratorRuntime.wrap(function _callee3$(_context3) {
+      while (1) {
+        switch (_context3.prev = _context3.next) {
+          case 0:
+            tokenParams = _args3.length > 1 && _args3[1] !== undefined ? _args3[1] : {};
+            defaults = getDefaultTokenParams(sdk);
+            tokenParams = Object.assign({}, defaults, clone(tokenParams));
+
+            if (!(tokenParams.pkce === false)) {
+              _context3.next = 5;
+              break;
+            }
+
+            return _context3.abrupt("return", tokenParams);
+
+          case 5:
+            return _context3.abrupt("return", preparePKCE(sdk, tokenParams));
+
+          case 6:
+          case "end":
+            return _context3.stop();
+        }
+      }
+    }, _callee3);
+  }));
+  return _prepareTokenParams.apply(this, arguments);
 }
 
 function isSameRefreshToken(a, b) {
@@ -1689,6 +1774,42 @@ function isRefreshTokenError(err) {
   return false;
 }
 
+function urlParamsToObject(hashOrSearch) {
+  var plus2space = /\+/g;
+  var paramSplit = /([^&=]+)=?([^&]*)/g;
+  var fragment = hashOrSearch || '';
+
+  if (fragment.charAt(0) === '#' && fragment.charAt(1) === '/') {
+    fragment = fragment.substring(2);
+  }
+
+  if (fragment.charAt(0) === '#' || fragment.charAt(0) === '?') {
+    fragment = fragment.substring(1);
+  }
+
+  var obj = {};
+  var param;
+
+  while (true) {
+    param = paramSplit.exec(fragment);
+
+    if (!param) {
+      break;
+    }
+
+    var key = param[1];
+    var value = param[2];
+
+    if (key === 'id_token' || key === 'access_token' || key === 'code') {
+      obj[key] = value;
+    } else {
+      obj[key] = decodeURIComponent(value.replace(plus2space, ' '));
+    }
+  }
+
+  return obj;
+}
+
 function validateClaims(sdk, claims, validationParams) {
   var aud = validationParams.clientId;
   var iss = validationParams.issuer;
@@ -1798,9 +1919,9 @@ var AuthenticatorKey;
 var IdxFeature;
 
 (function (IdxFeature) {
-  IdxFeature[IdxFeature["PASSWORD_RECOVERY"] = 0] = "PASSWORD_RECOVERY";
-  IdxFeature[IdxFeature["REGISTRATION"] = 1] = "REGISTRATION";
-  IdxFeature[IdxFeature["SOCIAL_IDP"] = 2] = "SOCIAL_IDP";
+  IdxFeature["PASSWORD_RECOVERY"] = "recover-password";
+  IdxFeature["REGISTRATION"] = "enroll-profile";
+  IdxFeature["SOCIAL_IDP"] = "redirect-idp";
 })(IdxFeature || (IdxFeature = {}));
 
 function isToken(obj) {
@@ -1855,40 +1976,65 @@ function decodeToken(token) {
   return decodedToken;
 }
 
-function revokeToken(sdk, token) {
-  return Promise.resolve().then(function () {
-    var accessToken;
-    var refreshToken;
+function revokeToken(_x, _x2) {
+  return _revokeToken.apply(this, arguments);
+}
 
-    if (token) {
-      accessToken = token.accessToken;
-      refreshToken = token.refreshToken;
-    }
+function _revokeToken() {
+  _revokeToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(sdk, token) {
+    var accessToken, refreshToken, clientId, clientSecret, revokeUrl, args, creds;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            accessToken = '';
+            refreshToken = '';
 
-    if (!accessToken && !refreshToken) {
-      throw new AuthSdkError('A valid access or refresh token object is required');
-    }
+            if (token) {
+              accessToken = token.accessToken;
+              refreshToken = token.refreshToken;
+            }
+
+            if (!(!accessToken && !refreshToken)) {
+              _context.next = 5;
+              break;
+            }
 
-    var clientId = sdk.options.clientId;
-    var clientSecret = sdk.options.clientSecret;
+            throw new AuthSdkError('A valid access or refresh token object is required');
 
-    if (!clientId) {
-      throw new AuthSdkError('A clientId must be specified in the OktaAuth constructor to revoke a token');
-    }
+          case 5:
+            clientId = sdk.options.clientId;
+            clientSecret = sdk.options.clientSecret;
+
+            if (clientId) {
+              _context.next = 9;
+              break;
+            }
+
+            throw new AuthSdkError('A clientId must be specified in the OktaAuth constructor to revoke a token');
+
+          case 9:
+            revokeUrl = getOAuthUrls(sdk).revokeUrl;
+            args = toQueryString({
+              token_type_hint: refreshToken ? 'refresh_token' : 'access_token',
+              token: refreshToken || accessToken
+            }).slice(1);
+            creds = clientSecret ? b("".concat(clientId, ":").concat(clientSecret)) : b(clientId);
+            return _context.abrupt("return", post(sdk, revokeUrl, args, {
+              headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Authorization': 'Basic ' + creds
+              }
+            }));
 
-    var revokeUrl = getOAuthUrls(sdk).revokeUrl;
-    var args = toQueryString({
-      token_type_hint: refreshToken ? 'refresh_token' : 'access_token',
-      token: refreshToken || accessToken
-    }).slice(1);
-    var creds = clientSecret ? b("".concat(clientId, ":").concat(clientSecret)) : b(clientId);
-    return post(sdk, revokeUrl, args, {
-      headers: {
-        'Content-Type': 'application/x-www-form-urlencoded',
-        'Authorization': 'Basic ' + creds
+          case 13:
+          case "end":
+            return _context.stop();
+        }
       }
-    });
-  });
+    }, _callee);
+  }));
+  return _revokeToken.apply(this, arguments);
 }
 
 function exchangeCodeForTokens(sdk, tokenParams, urls) {
@@ -2029,7 +2175,7 @@ function _verifyToken() {
 }
 
 function validateResponse(res, oauthParams) {
-  if (res['error'] || res['error_description']) {
+  if (res['error'] && res['error_description']) {
     throw new OAuthError(res['error'], res['error_description']);
   }
 
@@ -2038,112 +2184,141 @@ function validateResponse(res, oauthParams) {
   }
 }
 
-function handleOAuthResponse(sdk, tokenParams, res, urls) {
-  var pkce = sdk.options.pkce !== false;
+function handleOAuthResponse(_x, _x2, _x3, _x4) {
+  return _handleOAuthResponse.apply(this, arguments);
+}
 
-  if (pkce && (res.code || res.interaction_code)) {
-    return exchangeCodeForTokens(sdk, Object.assign({}, tokenParams, {
-      authorizationCode: res.code,
-      interactionCode: res.interaction_code
-    }), urls);
-  }
+function _handleOAuthResponse() {
+  _handleOAuthResponse = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(sdk, tokenParams, res, urls) {
+    var pkce, responseType, scopes, clientId, tokenDict, expiresIn, tokenType, accessToken, idToken, refreshToken, now, accessJwt, idJwt, idTokenObj, validationParams;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            pkce = sdk.options.pkce !== false;
 
-  tokenParams = tokenParams || getDefaultTokenParams(sdk);
-  urls = urls || getOAuthUrls(sdk, tokenParams);
-  var responseType = tokenParams.responseType;
+            if (!(pkce && (res.code || res.interaction_code))) {
+              _context.next = 3;
+              break;
+            }
 
-  if (!Array.isArray(responseType)) {
-    responseType = [responseType];
-  }
+            return _context.abrupt("return", exchangeCodeForTokens(sdk, Object.assign({}, tokenParams, {
+              authorizationCode: res.code,
+              interactionCode: res.interaction_code
+            }), urls));
 
-  var scopes;
+          case 3:
+            tokenParams = tokenParams || getDefaultTokenParams(sdk);
+            urls = urls || getOAuthUrls(sdk, tokenParams);
+            responseType = tokenParams.responseType || [];
 
-  if (res.scope) {
-    scopes = res.scope.split(' ');
-  } else {
-    scopes = clone(tokenParams.scopes);
-  }
-
-  var clientId = tokenParams.clientId || sdk.options.clientId;
-  return Promise.resolve().then(function () {
-    validateResponse(res, tokenParams);
-  }).then(function () {
-    var tokenDict = {};
-    var expiresIn = res.expires_in;
-    var tokenType = res.token_type;
-    var accessToken = res.access_token;
-    var idToken = res.id_token;
-    var refreshToken = res.refresh_token;
-    var now = Math.floor(Date.now() / 1000);
-
-    if (accessToken) {
-      var accessJwt = sdk.token.decode(accessToken);
-      tokenDict.accessToken = {
-        accessToken: accessToken,
-        claims: accessJwt.payload,
-        expiresAt: Number(expiresIn) + now,
-        tokenType: tokenType,
-        scopes: scopes,
-        authorizeUrl: urls.authorizeUrl,
-        userinfoUrl: urls.userinfoUrl
-      };
-    }
+            if (!Array.isArray(responseType)) {
+              responseType = [responseType];
+            }
 
-    if (refreshToken) {
-      tokenDict.refreshToken = {
-        refreshToken: refreshToken,
-        expiresAt: Number(expiresIn) + now,
-        scopes: scopes,
-        tokenUrl: urls.tokenUrl,
-        authorizeUrl: urls.authorizeUrl,
-        issuer: urls.issuer
-      };
-    }
+            if (res.scope) {
+              scopes = res.scope.split(' ');
+            } else {
+              scopes = clone(tokenParams.scopes);
+            }
 
-    if (idToken) {
-      var idJwt = sdk.token.decode(idToken);
-      var idTokenObj = {
-        idToken: idToken,
-        claims: idJwt.payload,
-        expiresAt: idJwt.payload.exp - idJwt.payload.iat + now,
-        scopes: scopes,
-        authorizeUrl: urls.authorizeUrl,
-        issuer: urls.issuer,
-        clientId: clientId
-      };
-      var validationParams = {
-        clientId: clientId,
-        issuer: urls.issuer,
-        nonce: tokenParams.nonce,
-        accessToken: accessToken
-      };
+            clientId = tokenParams.clientId || sdk.options.clientId;
+            validateResponse(res, tokenParams);
+            tokenDict = {};
+            expiresIn = res.expires_in;
+            tokenType = res.token_type;
+            accessToken = res.access_token;
+            idToken = res.id_token;
+            refreshToken = res.refresh_token;
+            now = Math.floor(Date.now() / 1000);
+
+            if (accessToken) {
+              accessJwt = sdk.token.decode(accessToken);
+              tokenDict.accessToken = {
+                accessToken: accessToken,
+                claims: accessJwt.payload,
+                expiresAt: Number(expiresIn) + now,
+                tokenType: tokenType,
+                scopes: scopes,
+                authorizeUrl: urls.authorizeUrl,
+                userinfoUrl: urls.userinfoUrl
+              };
+            }
 
-      if (tokenParams.ignoreSignature !== undefined) {
-        validationParams.ignoreSignature = tokenParams.ignoreSignature;
-      }
+            if (refreshToken) {
+              tokenDict.refreshToken = {
+                refreshToken: refreshToken,
+                expiresAt: Number(expiresIn) + now,
+                scopes: scopes,
+                tokenUrl: urls.tokenUrl,
+                authorizeUrl: urls.authorizeUrl,
+                issuer: urls.issuer
+              };
+            }
 
-      return verifyToken(sdk, idTokenObj, validationParams).then(function () {
-        tokenDict.idToken = idTokenObj;
-        return tokenDict;
-      });
-    }
+            if (!idToken) {
+              _context.next = 27;
+              break;
+            }
 
-    return tokenDict;
-  }).then(function (tokenDict) {
-    if (responseType.indexOf('token') !== -1 && !tokenDict.accessToken) {
-      throw new AuthSdkError('Unable to parse OAuth flow response: response type "token" was requested but "access_token" was not returned.');
-    }
+            idJwt = sdk.token.decode(idToken);
+            idTokenObj = {
+              idToken: idToken,
+              claims: idJwt.payload,
+              expiresAt: idJwt.payload.exp - idJwt.payload.iat + now,
+              scopes: scopes,
+              authorizeUrl: urls.authorizeUrl,
+              issuer: urls.issuer,
+              clientId: clientId
+            };
+            validationParams = {
+              clientId: clientId,
+              issuer: urls.issuer,
+              nonce: tokenParams.nonce,
+              accessToken: accessToken
+            };
 
-    if (responseType.indexOf('id_token') !== -1 && !tokenDict.idToken) {
-      throw new AuthSdkError('Unable to parse OAuth flow response: response type "id_token" was requested but "id_token" was not returned.');
-    }
+            if (tokenParams.ignoreSignature !== undefined) {
+              validationParams.ignoreSignature = tokenParams.ignoreSignature;
+            }
 
-    return {
-      tokens: tokenDict,
-      state: res.state,
-      code: res.code
-    };
-  });
+            _context.next = 26;
+            return verifyToken(sdk, idTokenObj, validationParams);
+
+          case 26:
+            tokenDict.idToken = idTokenObj;
+
+          case 27:
+            if (!(responseType.indexOf('token') !== -1 && !tokenDict.accessToken)) {
+              _context.next = 29;
+              break;
+            }
+
+            throw new AuthSdkError('Unable to parse OAuth flow response: response type "token" was requested but "access_token" was not returned.');
+
+          case 29:
+            if (!(responseType.indexOf('id_token') !== -1 && !tokenDict.idToken)) {
+              _context.next = 31;
+              break;
+            }
+
+            throw new AuthSdkError('Unable to parse OAuth flow response: response type "id_token" was requested but "id_token" was not returned.');
+
+          case 31:
+            return _context.abrupt("return", {
+              tokens: tokenDict,
+              state: res.state,
+              code: res.code
+            });
+
+          case 32:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+  return _handleOAuthResponse.apply(this, arguments);
 }
 
 function getToken(sdk, options) {
@@ -2191,8 +2366,10 @@ function getToken(sdk, options) {
         return iframePromise.then(function (res) {
           return handleOAuthResponse(sdk, tokenParams, res, urls);
         }).finally(function () {
+          var _a;
+
           if (document.body.contains(iframeEl)) {
-            iframeEl.parentElement.removeChild(iframeEl);
+            (_a = iframeEl.parentElement) === null || _a === void 0 ? void 0 : _a.removeChild(iframeEl);
           }
         });
 
@@ -2405,7 +2582,7 @@ function _renewTokens() {
               break;
             }
 
-            return _context.abrupt("return", renewTokensWithRefresh(sdk, options, tokens.refreshToken));
+            return _context.abrupt("return", renewTokensWithRefresh(sdk, options || {}, tokens.refreshToken));
 
           case 3:
             if (!(!tokens.accessToken && !tokens.idToken)) {
@@ -2578,46 +2755,50 @@ function getWithPopup(sdk, options) {
   return getToken(sdk, options);
 }
 
-function getWithRedirect(sdk, options) {
-  if (arguments.length > 2) {
-    return Promise.reject(new AuthSdkError('As of version 3.0, "getWithRedirect" takes only a single set of options'));
-  }
+function getWithRedirect(_x, _x2) {
+  return _getWithRedirect.apply(this, arguments);
+}
 
-  options = clone(options) || {};
-  return prepareTokenParams(sdk, options).then(function (tokenParams) {
-    var urls = getOAuthUrls(sdk, options);
-    var requestUrl = urls.authorizeUrl + buildAuthorizeParams(tokenParams);
-    var issuer = sdk.options.issuer;
-    var responseType = tokenParams.responseType,
-        state = tokenParams.state,
-        nonce = tokenParams.nonce,
-        scopes = tokenParams.scopes,
-        clientId = tokenParams.clientId,
-        ignoreSignature = tokenParams.ignoreSignature,
-        redirectUri = tokenParams.redirectUri,
-        codeVerifier = tokenParams.codeVerifier,
-        codeChallenge = tokenParams.codeChallenge,
-        codeChallengeMethod = tokenParams.codeChallengeMethod;
-    var oauthMeta = {
-      issuer: issuer,
-      responseType: responseType,
-      state: state,
-      nonce: nonce,
-      scopes: scopes,
-      clientId: clientId,
-      urls: urls,
-      ignoreSignature: ignoreSignature,
-      redirectUri: redirectUri,
-      codeVerifier: codeVerifier,
-      codeChallenge: codeChallenge,
-      codeChallengeMethod: codeChallengeMethod
-    };
-    sdk.transactionManager.save(oauthMeta, {
-      oauth: true
-    });
+function _getWithRedirect() {
+  _getWithRedirect = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(sdk, options) {
+    var tokenParams,
+        meta,
+        requestUrl,
+        _args = arguments;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            if (!(_args.length > 2)) {
+              _context.next = 2;
+              break;
+            }
 
-    sdk.token.getWithRedirect._setLocation(requestUrl);
-  });
+            return _context.abrupt("return", Promise.reject(new AuthSdkError('As of version 3.0, "getWithRedirect" takes only a single set of options')));
+
+          case 2:
+            options = clone(options) || {};
+            _context.next = 5;
+            return prepareTokenParams(sdk, options);
+
+          case 5:
+            tokenParams = _context.sent;
+            meta = createOAuthMeta(sdk, tokenParams);
+            requestUrl = meta.urls.authorizeUrl + buildAuthorizeParams(tokenParams);
+            sdk.transactionManager.save(meta, {
+              oauth: true
+            });
+
+            sdk.token.getWithRedirect._setLocation(requestUrl);
+
+          case 10:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+  return _getWithRedirect.apply(this, arguments);
 }
 
 function removeHash(sdk) {
@@ -2806,7 +2987,7 @@ var storageUtil = {
     return supported;
   },
   getStorageByType: function getStorageByType(storageType, options) {
-    var storageProvider = null;
+    var storageProvider;
 
     switch (storageType) {
       case 'sessionStorage':
@@ -2879,7 +3060,7 @@ var storageUtil = {
       }
     };
 
-    if (!options.useMultipleCookies) {
+    if (!options.useSeparateCookies) {
       return storage;
     }
 
@@ -2972,45 +3153,6 @@ var storageUtil = {
   }
 };
 
-function assertValidConfig(args) {
-  args = args || {};
-  var scopes = args.scopes;
-
-  if (scopes && !Array.isArray(scopes)) {
-    throw new AuthSdkError('scopes must be a array of strings. ' + 'Required usage: new OktaAuth({scopes: ["openid", "email"]})');
-  }
-
-  var issuer = args.issuer;
-
-  if (!issuer) {
-    throw new AuthSdkError('No issuer passed to constructor. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
-  }
-
-  var isUrlRegex = new RegExp('^http?s?://.+');
-
-  if (!isUrlRegex.test(args.issuer)) {
-    throw new AuthSdkError('Issuer must be a valid URL. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
-  }
-
-  if (issuer.indexOf('-admin.') !== -1) {
-    throw new AuthSdkError('Issuer URL passed to constructor contains "-admin" in subdomain. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com})');
-  }
-}
-
-function getUserAgent(args, sdkValue) {
-  var userAgent = args.userAgent || {};
-
-  if (userAgent.value) {
-    return userAgent.value;
-  }
-
-  if (userAgent.template) {
-    return userAgent.template.replace('$OKTA_AUTH_JS', sdkValue);
-  }
-
-  return sdkValue;
-}
-
 var SdkClock = /*#__PURE__*/function () {
   function SdkClock(localOffset) {
     _classCallCheck(this, SdkClock);
@@ -3056,6 +3198,8 @@ var TokenService = /*#__PURE__*/function () {
 
     this.tokenManager = tokenManager;
     this.options = options;
+    this.storageListener = undefined;
+    this.onTokenExpiredHandler = undefined;
   }
 
   _createClass(TokenService, [{
@@ -3158,6 +3302,7 @@ var TokenManager = /*#__PURE__*/function () {
       throw new AuthSdkError('Emitter should be initialized before TokenManager');
     }
 
+    this.service = null;
     options = Object.assign({}, DEFAULT_OPTIONS, removeNils(options));
 
     if (isIE11OrLess()) {
@@ -3180,7 +3325,9 @@ var TokenManager = /*#__PURE__*/function () {
       storageOptions.storageType = options.storage;
     }
 
-    this.storage = sdk.storageManager.getTokenStorage(storageOptions);
+    this.storage = sdk.storageManager.getTokenStorage(Object.assign(Object.assign({}, storageOptions), {
+      useSeparateCookies: true
+    }));
     this.clock = SdkClock.create();
     this.state = defaultState();
     this.on = this.emitter.on.bind(this.emitter);
@@ -3217,7 +3364,8 @@ var TokenManager = /*#__PURE__*/function () {
   }, {
     key: "getExpireTime",
     value: function getExpireTime(token) {
-      var expireTime = token.expiresAt - this.options.expireEarlySeconds;
+      var expireEarlySeconds = this.options.expireEarlySeconds || 0;
+      var expireTime = token.expiresAt - expireEarlySeconds;
       return expireTime;
     }
   }, {
@@ -3536,11 +3684,13 @@ var TokenManager = /*#__PURE__*/function () {
     key: "renewToken",
     value: function () {
       var _renewToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee3(token) {
+        var _a;
+
         return _regeneratorRuntime.wrap(function _callee3$(_context3) {
           while (1) {
             switch (_context3.prev = _context3.next) {
               case 0:
-                return _context3.abrupt("return", this.sdk.token.renew(token));
+                return _context3.abrupt("return", (_a = this.sdk.token) === null || _a === void 0 ? void 0 : _a.renew(token));
 
               case 1:
               case "end":
@@ -3676,6 +3826,10 @@ var PromiseQueue = /*#__PURE__*/function () {
       }
 
       return new Promise(function (resolve, reject) {
+        if (_this.queue.length > 0) {
+          warn('Async method is being called but another async method is already running. ' + 'The new method will be delayed until the previous method completes.');
+        }
+
         _this.queue.push({
           method: method,
           thisObject: thisObject,
@@ -3766,7 +3920,7 @@ function fingerprint(sdk, options) {
     document.body.appendChild(iframe);
     timeout = setTimeout(function () {
       reject(new AuthSdkError('Fingerprinting timed out'));
-    }, options.timeout || 15000);
+    }, (options === null || options === void 0 ? void 0 : options.timeout) || 15000);
   });
   return promise.finally(function () {
     clearTimeout(timeout);
@@ -3810,6 +3964,7 @@ var AuthStateManager = /*#__PURE__*/function () {
     this._pending = Object.assign({}, DEFAULT_PENDING);
     this._authState = INITIAL_AUTH_STATE;
     this._logOptions = {};
+    this._prevAuthState = null;
     sdk.tokenManager.on(EVENT_ADDED, function (key, token) {
       _this._setLogOptions({
         event: EVENT_ADDED,
@@ -4120,7 +4275,7 @@ var StorageManager = /*#__PURE__*/function () {
 
         if (idx >= 0) {
           storageTypes = storageTypes.slice(idx);
-          storageType = null;
+          storageType = undefined;
         }
       }
 
@@ -4308,6 +4463,7 @@ var TransactionManager = /*#__PURE__*/function () {
     this.saveStateCookie = options.saveStateCookie === false ? false : true;
     this.saveParamsCookie = options.saveParamsCookie === false ? false : true;
     this.enableSharedStorage = options.enableSharedStorage === false ? false : true;
+    this.saveLastResponse = options.saveLastResponse === false ? false : true;
     this.options = options;
   }
 
@@ -4320,7 +4476,7 @@ var TransactionManager = /*#__PURE__*/function () {
       transactionStorage.clearStorage();
       this.clearIdxResponse();
 
-      if (this.enableSharedStorage && options.clearSharedStorage) {
+      if (this.enableSharedStorage && options.clearSharedStorage !== false) {
         var state = options.state || (meta === null || meta === void 0 ? void 0 : meta.state);
 
         if (state) {
@@ -4504,7 +4660,7 @@ var TransactionManager = /*#__PURE__*/function () {
         }
       }
 
-      throw new AuthSdkError('Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.', null);
+      throw new AuthSdkError('Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.', undefined);
     }
   }, {
     key: "clearLegacyOAuthParams",
@@ -4558,6 +4714,10 @@ var TransactionManager = /*#__PURE__*/function () {
   }, {
     key: "saveIdxResponse",
     value: function saveIdxResponse(idxResponse) {
+      if (!this.saveLastResponse) {
+        return;
+      }
+
       var storage = this.storageManager.getIdxResponseStorage();
 
       if (!storage) {
@@ -4569,6 +4729,10 @@ var TransactionManager = /*#__PURE__*/function () {
   }, {
     key: "loadIdxResponse",
     value: function loadIdxResponse() {
+      if (!this.saveLastResponse) {
+        return null;
+      }
+
       var storage = this.storageManager.getIdxResponseStorage();
 
       if (!storage) {
@@ -4586,6 +4750,10 @@ var TransactionManager = /*#__PURE__*/function () {
   }, {
     key: "clearIdxResponse",
     value: function clearIdxResponse() {
+      if (!this.saveLastResponse) {
+        return;
+      }
+
       var storage = this.storageManager.getIdxResponseStorage();
       storage === null || storage === void 0 ? void 0 : storage.clearStorage();
     }
@@ -4594,6 +4762,31 @@ var TransactionManager = /*#__PURE__*/function () {
   return TransactionManager;
 }();
 
+function assertValidConfig(args) {
+  args = args || {};
+  var scopes = args.scopes;
+
+  if (scopes && !Array.isArray(scopes)) {
+    throw new AuthSdkError('scopes must be a array of strings. ' + 'Required usage: new OktaAuth({scopes: ["openid", "email"]})');
+  }
+
+  var issuer = args.issuer;
+
+  if (!issuer) {
+    throw new AuthSdkError('No issuer passed to constructor. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
+  }
+
+  var isUrlRegex = new RegExp('^http?s?://.+');
+
+  if (!isUrlRegex.test(issuer)) {
+    throw new AuthSdkError('Issuer must be a valid URL. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
+  }
+
+  if (issuer.indexOf('-admin.') !== -1) {
+    throw new AuthSdkError('Issuer URL passed to constructor contains "-admin" in subdomain. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com})');
+  }
+}
+
 function _createForOfIteratorHelper$4(o, allowArrayLike) { var it = typeof Symbol !== "undefined" && o[Symbol.iterator] || o["@@iterator"]; if (!it) { if (Array.isArray(o) || (it = _unsupportedIterableToArray$4(o)) || allowArrayLike && o && typeof o.length === "number") { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if (i >= o.length) return { done: true }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var normalCompletion = true, didErr = false, err; return { s: function s() { it = it.call(o); }, n: function n() { var step = it.next(); normalCompletion = step.done; return step; }, e: function e(_e2) { didErr = true; err = _e2; }, f: function f() { try { if (!normalCompletion && it.return != null) it.return(); } finally { if (didErr) throw err; } } }; }
 
 function _unsupportedIterableToArray$4(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray$4(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" || n === "Set") return Array.from(o); if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _arrayLikeToArray$4(o, minLen); }
@@ -4745,7 +4938,7 @@ var ServerStorage = /*#__PURE__*/function () {
   }, {
     key: "getStorageByType",
     value: function getStorageByType(storageType) {
-      var storageProvider = null;
+      var storageProvider;
 
       switch (storageType) {
         case 'memory':
@@ -4789,8 +4982,7 @@ var serverStorage = new ServerStorage(sharedStorage);
 
 var BROWSER_STORAGE = {
   token: {
-    storageTypes: ['localStorage', 'sessionStorage', 'cookie'],
-    useMultipleCookies: true
+    storageTypes: ['localStorage', 'sessionStorage', 'cookie']
   },
   cache: {
     storageTypes: ['localStorage', 'sessionStorage', 'cookie']
@@ -4894,51 +5086,58 @@ function buildOptions() {
     storageManager: args.storageManager,
     transactionManager: args.transactionManager,
     cookies: isBrowser() ? getCookieSettings(args, isHTTPS()) : args.cookies,
+    flow: args.flow,
+    codeChallenge: args.codeChallenge,
+    codeChallengeMethod: args.codeChallengeMethod,
+    recoveryToken: args.recoveryToken,
+    activationToken: args.activationToken,
     ignoreSignature: !!args.ignoreSignature,
     clientSecret: args.clientSecret
   });
 }
 
-function createTransactionMeta(_x, _x2) {
+function createTransactionMeta(_x) {
   return _createTransactionMeta.apply(this, arguments);
 }
 
 function _createTransactionMeta() {
-  _createTransactionMeta = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient, options) {
-    var tokenParams, pkce, clientId, redirectUri, responseType, responseMode, scopes, state, nonce, ignoreSignature, codeVerifier, codeChallengeMethod, codeChallenge, urls, flow, issuer, meta;
+  _createTransactionMeta = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
+    var options,
+        tokenParams,
+        pkceMeta,
+        _Object$assign,
+        _Object$assign$flow,
+        flow,
+        _Object$assign$withCr,
+        withCredentials,
+        _Object$assign$activa,
+        activationToken,
+        _Object$assign$recove,
+        recoveryToken,
+        meta,
+        _args = arguments;
+
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
-            _context.next = 2;
+            options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
+            _context.next = 3;
             return authClient.token.prepareTokenParams(options);
 
-          case 2:
+          case 3:
             tokenParams = _context.sent;
-            pkce = tokenParams.pkce, clientId = tokenParams.clientId, redirectUri = tokenParams.redirectUri, responseType = tokenParams.responseType, responseMode = tokenParams.responseMode, scopes = tokenParams.scopes, state = tokenParams.state, nonce = tokenParams.nonce, ignoreSignature = tokenParams.ignoreSignature, codeVerifier = tokenParams.codeVerifier, codeChallengeMethod = tokenParams.codeChallengeMethod, codeChallenge = tokenParams.codeChallenge;
-            urls = getOAuthUrls(authClient, tokenParams);
-            flow = authClient.idx.getFlow() || 'default';
-            issuer = authClient.options.issuer;
-            meta = {
+            pkceMeta = createOAuthMeta(authClient, tokenParams);
+            _Object$assign = Object.assign(Object.assign({}, authClient.options), options), _Object$assign$flow = _Object$assign.flow, flow = _Object$assign$flow === void 0 ? 'default' : _Object$assign$flow, _Object$assign$withCr = _Object$assign.withCredentials, withCredentials = _Object$assign$withCr === void 0 ? true : _Object$assign$withCr, _Object$assign$activa = _Object$assign.activationToken, activationToken = _Object$assign$activa === void 0 ? undefined : _Object$assign$activa, _Object$assign$recove = _Object$assign.recoveryToken, recoveryToken = _Object$assign$recove === void 0 ? undefined : _Object$assign$recove;
+            meta = Object.assign(Object.assign({}, pkceMeta), {
               flow: flow,
-              issuer: issuer,
-              pkce: pkce,
-              clientId: clientId,
-              redirectUri: redirectUri,
-              responseType: responseType,
-              responseMode: responseMode,
-              scopes: scopes,
-              state: state,
-              nonce: nonce,
-              urls: urls,
-              ignoreSignature: ignoreSignature,
-              codeVerifier: codeVerifier,
-              codeChallengeMethod: codeChallengeMethod,
-              codeChallenge: codeChallenge
-            };
+              withCredentials: withCredentials,
+              activationToken: activationToken,
+              recoveryToken: recoveryToken
+            });
             return _context.abrupt("return", meta);
 
-          case 9:
+          case 8:
           case "end":
             return _context.stop();
         }
@@ -4948,28 +5147,35 @@ function _createTransactionMeta() {
   return _createTransactionMeta.apply(this, arguments);
 }
 
-function transactionMetaExist(authClient, options) {
-  if (authClient.transactionManager.exists(options)) {
-    var existing = authClient.transactionManager.load(options);
+function hasSavedInteractionHandle(authClient, options) {
+  var savedMeta = getSavedTransactionMeta(authClient, options);
 
-    if (isTransactionMetaValid(authClient, existing) && existing.interactionHandle) {
-      return true;
-    }
+  if (savedMeta === null || savedMeta === void 0 ? void 0 : savedMeta.interactionHandle) {
+    return true;
   }
 
   return false;
 }
 function getSavedTransactionMeta(authClient, options) {
-  var state = (options === null || options === void 0 ? void 0 : options.state) || authClient.options.state;
-  var existing = authClient.transactionManager.load({
-    state: state
-  });
+  options = removeNils(options);
+  options = Object.assign(Object.assign({}, authClient.options), options);
+  var savedMeta;
+
+  try {
+    savedMeta = authClient.transactionManager.load(options);
+  } catch (e) {}
 
-  if (existing && isTransactionMetaValid(authClient, existing)) {
-    return existing;
+  if (!savedMeta) {
+    return;
+  }
+
+  if (isTransactionMetaValid(savedMeta, options)) {
+    return savedMeta;
   }
+
+  warn('Saved transaction meta does not match the current configuration. ' + 'This may indicate that two apps are sharing a storage key.');
 }
-function getTransactionMeta(_x3, _x4) {
+function getTransactionMeta(_x2, _x3) {
   return _getTransactionMeta.apply(this, arguments);
 }
 
@@ -4980,23 +5186,17 @@ function _getTransactionMeta() {
       while (1) {
         switch (_context2.prev = _context2.next) {
           case 0:
-            if (!authClient.transactionManager.exists(options)) {
-              _context2.next = 5;
-              break;
-            }
-
+            options = removeNils(options);
+            options = Object.assign(Object.assign({}, authClient.options), options);
             validExistingMeta = getSavedTransactionMeta(authClient, options);
 
             if (!validExistingMeta) {
-              _context2.next = 4;
+              _context2.next = 5;
               break;
             }
 
             return _context2.abrupt("return", validExistingMeta);
 
-          case 4:
-            warn('Saved transaction meta does not match the current configuration. ' + 'This may indicate that two apps are sharing a storage key.');
-
           case 5:
             return _context2.abrupt("return", createTransactionMeta(authClient, options));
 
@@ -5015,23 +5215,26 @@ function saveTransactionMeta(authClient, meta) {
     muteWarning: true
   });
 }
-function isTransactionMetaValid(authClient, meta) {
-  var keys = ['issuer', 'clientId', 'redirectUri'];
+function clearTransactionMeta(authClient) {
+  authClient.transactionManager.clear();
+}
+function isTransactionMetaValid(meta) {
+  var options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+  var keys = ['issuer', 'clientId', 'redirectUri', 'state', 'codeChallenge', 'codeChallengeMethod', 'activationToken', 'recoveryToken'];
 
-  if (keys.some(function (key) {
-    return authClient.options[key] !== meta[key];
-  })) {
+  if (isTransactionMetaValidForOptions(meta, options, keys) === false) {
     return false;
   }
 
-  var _authClient$options = authClient.options,
-      flow = _authClient$options.flow,
-      state = _authClient$options.state;
+  var flow = options.flow;
 
-  if (state && state !== meta.state) {
+  if (isTransactionMetaValidForFlow(meta, flow) === false) {
     return false;
   }
 
+  return true;
+}
+function isTransactionMetaValidForFlow(meta, flow) {
   var shouldValidateFlow = flow && flow !== 'default' && flow !== 'proceed';
 
   if (shouldValidateFlow) {
@@ -5042,6 +5245,16 @@ function isTransactionMetaValid(authClient, meta) {
 
   return true;
 }
+function isTransactionMetaValidForOptions(meta, options, keys) {
+  var mismatch = keys.some(function (key) {
+    var value = options[key];
+
+    if (value && value !== meta[key]) {
+      return true;
+    }
+  });
+  return !mismatch;
+}
 
 function getResponse(meta) {
   return {
@@ -5058,16 +5271,20 @@ function interact(_x) {
 function _interact() {
   _interact = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
     var options,
-        state,
         meta,
-        codeChallenge,
-        codeChallengeMethod,
-        _authClient$options,
+        baseUrl,
+        _meta,
         clientId,
         redirectUri,
+        state,
         scopes,
+        withCredentials,
+        codeChallenge,
+        codeChallengeMethod,
         activationToken,
-        baseUrl,
+        recoveryToken,
+        interactionHandle,
+        newMeta,
         _args = arguments;
 
     return _regeneratorRuntime.wrap(function _callee$(_context) {
@@ -5075,30 +5292,27 @@ function _interact() {
         switch (_context.prev = _context.next) {
           case 0:
             options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
-            state = options.state || authClient.options.state;
-            _context.next = 4;
-            return getTransactionMeta(authClient, {
-              state: state
-            });
-
-          case 4:
-            meta = _context.sent;
+            options = removeNils(options);
+            meta = getSavedTransactionMeta(authClient, options);
 
-            if (!meta.interactionHandle) {
-              _context.next = 7;
+            if (!(meta === null || meta === void 0 ? void 0 : meta.interactionHandle)) {
+              _context.next = 5;
               break;
             }
 
             return _context.abrupt("return", getResponse(meta));
 
+          case 5:
+            _context.next = 7;
+            return createTransactionMeta(authClient, Object.assign(Object.assign({}, meta), options));
+
           case 7:
-            codeChallenge = meta.codeChallenge, codeChallengeMethod = meta.codeChallengeMethod;
-            _authClient$options = authClient.options, clientId = _authClient$options.clientId, redirectUri = _authClient$options.redirectUri;
-            state = state || meta.state;
-            scopes = options.scopes || authClient.options.scopes || meta.scopes;
-            activationToken = options.activationToken;
+            meta = _context.sent;
             baseUrl = getOAuthBaseUrl(authClient);
-            return _context.abrupt("return", idx.interact({
+            _meta = meta, clientId = _meta.clientId, redirectUri = _meta.redirectUri, state = _meta.state, scopes = _meta.scopes, withCredentials = _meta.withCredentials, codeChallenge = _meta.codeChallenge, codeChallengeMethod = _meta.codeChallengeMethod, activationToken = _meta.activationToken, recoveryToken = _meta.recoveryToken;
+            _context.next = 12;
+            return idx.interact({
+              withCredentials: withCredentials,
               clientId: clientId,
               baseUrl: baseUrl,
               scopes: scopes,
@@ -5106,18 +5320,24 @@ function _interact() {
               redirectUri: redirectUri,
               codeChallenge: codeChallenge,
               codeChallengeMethod: codeChallengeMethod,
+              activationToken: activationToken,
+              recoveryToken: recoveryToken
+            });
+
+          case 12:
+            interactionHandle = _context.sent;
+            newMeta = Object.assign(Object.assign({}, meta), {
+              interactionHandle: interactionHandle,
+              withCredentials: withCredentials,
+              state: state,
+              scopes: scopes,
+              recoveryToken: recoveryToken,
               activationToken: activationToken
-            }).then(function (interactionHandle) {
-              var newMeta = Object.assign(Object.assign({}, meta), {
-                interactionHandle: interactionHandle,
-                state: state,
-                scopes: scopes
-              });
-              saveTransactionMeta(authClient, newMeta);
-              return getResponse(newMeta);
-            }));
+            });
+            saveTransactionMeta(authClient, newMeta);
+            return _context.abrupt("return", getResponse(newMeta));
 
-          case 14:
+          case 16:
           case "end":
             return _context.stop();
         }
@@ -5127,36 +5347,39 @@ function _interact() {
   return _interact.apply(this, arguments);
 }
 
-function introspect(_x, _x2) {
+function introspect(_x) {
   return _introspect.apply(this, arguments);
 }
 
 function _introspect() {
-  _introspect = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient, options) {
-    var useLastResponse, rawIdxResponse, version, domain;
+  _introspect = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
+    var options,
+        rawIdxResponse,
+        version,
+        domain,
+        withCredentials,
+        _args = arguments;
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
-            useLastResponse = !options.stateTokenExternalId;
-
-            if (useLastResponse) {
-              rawIdxResponse = authClient.transactionManager.loadIdxResponse();
-            }
+            options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
+            rawIdxResponse = authClient.transactionManager.loadIdxResponse();
 
             if (rawIdxResponse) {
               _context.next = 18;
               break;
             }
 
-            version = IDX_API_VERSION;
+            version = options.version || IDX_API_VERSION;
             domain = getOAuthDomain(authClient);
             _context.prev = 5;
             _context.next = 8;
-            return idx.introspect(Object.assign({
-              domain: domain,
+            return idx.introspect(Object.assign(Object.assign({
+              domain: domain
+            }, options), {
               version: version
-            }, options));
+            }));
 
           case 8:
             rawIdxResponse = _context.sent;
@@ -5180,9 +5403,12 @@ function _introspect() {
             throw _context.t0;
 
           case 18:
-            return _context.abrupt("return", idx.makeIdxState(rawIdxResponse));
+            withCredentials = options.withCredentials;
+            return _context.abrupt("return", idx.makeIdxState(rawIdxResponse, {
+              withCredentials: withCredentials
+            }));
 
-          case 19:
+          case 20:
           case "end":
             return _context.stop();
         }
@@ -5193,12 +5419,16 @@ function _introspect() {
 }
 
 function getAllValues(idxRemediation) {
-  return idxRemediation.value.map(function (r) {
+  var _a;
+
+  return (_a = idxRemediation.value) === null || _a === void 0 ? void 0 : _a.map(function (r) {
     return r.name;
   });
 }
 function getRequiredValues(idxRemediation) {
-  return idxRemediation.value.reduce(function (required, cur) {
+  var _a;
+
+  return (_a = idxRemediation.value) === null || _a === void 0 ? void 0 : _a.reduce(function (required, cur) {
     if (cur.required) {
       required.push(cur.name);
     }
@@ -5474,13 +5704,13 @@ var Authenticator = function Authenticator(authenticator) {
   this.meta = authenticator;
 };
 
-function _createSuper$m(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$m(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$p(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$p(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$m() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$p() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var VerificationCodeAuthenticator = /*#__PURE__*/function (_Authenticator) {
   _inherits(VerificationCodeAuthenticator, _Authenticator);
 
-  var _super = _createSuper$m(VerificationCodeAuthenticator);
+  var _super = _createSuper$p(VerificationCodeAuthenticator);
 
   function VerificationCodeAuthenticator() {
     _classCallCheck(this, VerificationCodeAuthenticator);
@@ -5491,13 +5721,13 @@ var VerificationCodeAuthenticator = /*#__PURE__*/function (_Authenticator) {
   _createClass(VerificationCodeAuthenticator, [{
     key: "canVerify",
     value: function canVerify(values) {
-      return !!values.verificationCode;
+      return values.verificationCode || values.otp;
     }
   }, {
     key: "mapCredentials",
     value: function mapCredentials(values) {
       return {
-        passcode: values.verificationCode
+        passcode: values.verificationCode || values.otp
       };
     }
   }, {
@@ -5516,13 +5746,13 @@ var VerificationCodeAuthenticator = /*#__PURE__*/function (_Authenticator) {
   return VerificationCodeAuthenticator;
 }(Authenticator);
 
-function _createSuper$l(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$l(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$o(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$o(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$l() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$o() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var OktaVerifyTotp = /*#__PURE__*/function (_VerificationCodeAuth) {
   _inherits(OktaVerifyTotp, _VerificationCodeAuth);
 
-  var _super = _createSuper$l(OktaVerifyTotp);
+  var _super = _createSuper$o(OktaVerifyTotp);
 
   function OktaVerifyTotp() {
     _classCallCheck(this, OktaVerifyTotp);
@@ -5542,13 +5772,13 @@ var OktaVerifyTotp = /*#__PURE__*/function (_VerificationCodeAuth) {
   return OktaVerifyTotp;
 }(VerificationCodeAuthenticator);
 
-function _createSuper$k(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$k(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$n(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$n(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$k() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$n() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var OktaPassword = /*#__PURE__*/function (_Authenticator) {
   _inherits(OktaPassword, _Authenticator);
 
-  var _super = _createSuper$k(OktaPassword);
+  var _super = _createSuper$n(OktaPassword);
 
   function OktaPassword() {
     _classCallCheck(this, OktaPassword);
@@ -5584,13 +5814,13 @@ var OktaPassword = /*#__PURE__*/function (_Authenticator) {
   return OktaPassword;
 }(Authenticator);
 
-function _createSuper$j(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$j(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$m(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$m(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$j() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$m() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var SecurityQuestionEnrollment = /*#__PURE__*/function (_Authenticator) {
   _inherits(SecurityQuestionEnrollment, _Authenticator);
 
-  var _super = _createSuper$j(SecurityQuestionEnrollment);
+  var _super = _createSuper$m(SecurityQuestionEnrollment);
 
   function SecurityQuestionEnrollment() {
     _classCallCheck(this, SecurityQuestionEnrollment);
@@ -5641,13 +5871,13 @@ var SecurityQuestionEnrollment = /*#__PURE__*/function (_Authenticator) {
   return SecurityQuestionEnrollment;
 }(Authenticator);
 
-function _createSuper$i(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$i(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$l(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$l(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$i() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$l() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var SecurityQuestionVerification = /*#__PURE__*/function (_Authenticator) {
   _inherits(SecurityQuestionVerification, _Authenticator);
 
-  var _super = _createSuper$i(SecurityQuestionVerification);
+  var _super = _createSuper$l(SecurityQuestionVerification);
 
   function SecurityQuestionVerification() {
     _classCallCheck(this, SecurityQuestionVerification);
@@ -5684,16 +5914,17 @@ var SecurityQuestionVerification = /*#__PURE__*/function (_Authenticator) {
 }(Authenticator);
 
 function getAuthenticator(remediation) {
-  var _remediation$relatesT = remediation.relatesTo;
-  _remediation$relatesT = _remediation$relatesT === void 0 ? {} : _remediation$relatesT;
-  var value = _remediation$relatesT.value;
+  var _a;
+
+  var relatesTo = remediation.relatesTo;
+  var value = (relatesTo === null || relatesTo === void 0 ? void 0 : relatesTo.value) || {};
 
   switch (value.key) {
     case AuthenticatorKey.OKTA_PASSWORD:
       return new OktaPassword(value);
 
     case AuthenticatorKey.SECURITY_QUESTION:
-      if (value.contextualData.enrolledQuestion) {
+      if ((_a = value.contextualData) === null || _a === void 0 ? void 0 : _a.enrolledQuestion) {
         return new SecurityQuestionVerification(value);
       } else {
         return new SecurityQuestionEnrollment(value);
@@ -5707,13 +5938,13 @@ function getAuthenticator(remediation) {
   }
 }
 
-function _createSuper$h(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$h(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$k(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$k(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$h() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$k() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var VerifyAuthenticator = /*#__PURE__*/function (_Remediator) {
   _inherits(VerifyAuthenticator, _Remediator);
 
-  var _super = _createSuper$h(VerifyAuthenticator);
+  var _super = _createSuper$k(VerifyAuthenticator);
 
   function VerifyAuthenticator(remediation) {
     var _this;
@@ -5750,13 +5981,13 @@ var VerifyAuthenticator = /*#__PURE__*/function (_Remediator) {
   return VerifyAuthenticator;
 }(Remediator);
 
-function _createSuper$g(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$g(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$j(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$j(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$g() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$j() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var EnrollAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
   _inherits(EnrollAuthenticator, _VerifyAuthenticator);
 
-  var _super = _createSuper$g(EnrollAuthenticator);
+  var _super = _createSuper$j(EnrollAuthenticator);
 
   function EnrollAuthenticator() {
     _classCallCheck(this, EnrollAuthenticator);
@@ -5768,13 +5999,13 @@ var EnrollAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
 }(VerifyAuthenticator);
 EnrollAuthenticator.remediationName = 'enroll-authenticator';
 
-function _createSuper$f(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$f(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$i(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$i(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$f() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$i() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var EnrollPoll = /*#__PURE__*/function (_Remediator) {
   _inherits(EnrollPoll, _Remediator);
 
-  var _super = _createSuper$f(EnrollPoll);
+  var _super = _createSuper$i(EnrollPoll);
 
   function EnrollPoll() {
     _classCallCheck(this, EnrollPoll);
@@ -5790,21 +6021,21 @@ var EnrollPoll = /*#__PURE__*/function (_Remediator) {
   }, {
     key: "getNextStep",
     value: function getNextStep(context) {
-      var name = this.getName();
+      var common = _get(_getPrototypeOf(EnrollPoll.prototype), "getNextStep", this).call(this, context);
+
       var authenticator = this.getAuthenticator();
 
       if (!authenticator && (context === null || context === void 0 ? void 0 : context.currentAuthenticator)) {
         authenticator = context.currentAuthenticator.value;
       }
 
-      return {
-        name: name,
+      return Object.assign(Object.assign({}, common), {
         authenticator: authenticator,
         poll: {
           required: true,
           refresh: this.remediation.refresh
         }
-      };
+      });
     }
   }, {
     key: "getValuesAfterProceed",
@@ -5824,13 +6055,170 @@ var EnrollPoll = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 EnrollPoll.remediationName = 'enroll-poll';
 
-function _createSuper$e(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$e(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$h(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$h(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$e() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$h() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+var SelectEnrollmentChannel = /*#__PURE__*/function (_Remediator) {
+  _inherits(SelectEnrollmentChannel, _Remediator);
+
+  var _super = _createSuper$h(SelectEnrollmentChannel);
+
+  function SelectEnrollmentChannel() {
+    _classCallCheck(this, SelectEnrollmentChannel);
+
+    return _super.apply(this, arguments);
+  }
+
+  _createClass(SelectEnrollmentChannel, [{
+    key: "canRemediate",
+    value: function canRemediate() {
+      return Boolean(this.values.channel);
+    }
+  }, {
+    key: "getNextStep",
+    value: function getNextStep(context) {
+      var common = _get(_getPrototypeOf(SelectEnrollmentChannel.prototype), "getNextStep", this).call(this);
+
+      var options = this.getChannels();
+      var authenticator = context.currentAuthenticator.value;
+      return Object.assign(Object.assign(Object.assign({}, common), options && {
+        options: options
+      }), {
+        authenticator: authenticator
+      });
+    }
+  }, {
+    key: "getChannels",
+    value: function getChannels() {
+      var _a;
+
+      var authenticator = getAuthenticatorFromRemediation(this.remediation);
+      var remediationValue = authenticator.value;
+      return (_a = remediationValue.form.value.find(function (_ref) {
+        var name = _ref.name;
+        return name === 'channel';
+      })) === null || _a === void 0 ? void 0 : _a.options;
+    }
+  }, {
+    key: "getData",
+    value: function getData() {
+      var remediationValue = this.remediation.value[0].value;
+      return {
+        authenticator: {
+          id: remediationValue.form.value[0].value,
+          channel: this.values.channel
+        },
+        stateHandle: this.values.stateHandle
+      };
+    }
+  }, {
+    key: "getValuesAfterProceed",
+    value: function getValuesAfterProceed() {
+      var _this = this;
+
+      var trimmedValues = Object.keys(this.values).filter(function (valueKey) {
+        return valueKey !== 'channel';
+      });
+      return trimmedValues.reduce(function (values, valueKey) {
+        return Object.assign(Object.assign({}, values), _defineProperty({}, valueKey, _this.values[valueKey]));
+      }, {});
+    }
+  }]);
+
+  return SelectEnrollmentChannel;
+}(Remediator);
+SelectEnrollmentChannel.remediationName = 'select-enrollment-channel';
+
+function _createSuper$g(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$g(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+
+function _isNativeReflectConstruct$g() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+var EnrollmentChannelData = /*#__PURE__*/function (_Remediator) {
+  _inherits(EnrollmentChannelData, _Remediator);
+
+  var _super = _createSuper$g(EnrollmentChannelData);
+
+  function EnrollmentChannelData() {
+    var _this;
+
+    _classCallCheck(this, EnrollmentChannelData);
+
+    _this = _super.apply(this, arguments);
+    _this.map = {
+      email: [],
+      phoneNumber: []
+    };
+    return _this;
+  }
+
+  _createClass(EnrollmentChannelData, [{
+    key: "getInputEmail",
+    value: function getInputEmail() {
+      return [{
+        name: 'email',
+        type: 'string',
+        required: true,
+        label: 'Email'
+      }];
+    }
+  }, {
+    key: "getInputPhoneNumber",
+    value: function getInputPhoneNumber() {
+      return [{
+        name: 'phoneNumber',
+        type: 'string',
+        required: true,
+        label: 'Phone Number'
+      }];
+    }
+  }, {
+    key: "canRemediate",
+    value: function canRemediate() {
+      return Boolean(this.values.email || this.values.phoneNumber);
+    }
+  }, {
+    key: "getNextStep",
+    value: function getNextStep(context) {
+      var common = _get(_getPrototypeOf(EnrollmentChannelData.prototype), "getNextStep", this).call(this);
+
+      var authenticator = context.currentAuthenticator.value;
+      return Object.assign(Object.assign({}, common), {
+        authenticator: authenticator
+      });
+    }
+  }, {
+    key: "getData",
+    value: function getData() {
+      return {
+        stateHandle: this.values.stateHandle,
+        email: this.values.email,
+        phoneNumber: this.values.phoneNumber
+      };
+    }
+  }, {
+    key: "getValuesAfterProceed",
+    value: function getValuesAfterProceed() {
+      var _this2 = this;
+
+      var trimmedValues = Object.keys(this.values).filter(function (valueKey) {
+        return !['email', 'phoneNumber'].includes(valueKey);
+      });
+      return trimmedValues.reduce(function (values, valueKey) {
+        return Object.assign(Object.assign({}, values), _defineProperty({}, valueKey, _this2.values[valueKey]));
+      }, {});
+    }
+  }]);
+
+  return EnrollmentChannelData;
+}(Remediator);
+EnrollmentChannelData.remediationName = 'enrollment-channel-data';
+
+function _createSuper$f(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$f(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+
+function _isNativeReflectConstruct$f() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var ChallengeAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
   _inherits(ChallengeAuthenticator, _VerifyAuthenticator);
 
-  var _super = _createSuper$e(ChallengeAuthenticator);
+  var _super = _createSuper$f(ChallengeAuthenticator);
 
   function ChallengeAuthenticator() {
     _classCallCheck(this, ChallengeAuthenticator);
@@ -5842,13 +6230,13 @@ var ChallengeAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
 }(VerifyAuthenticator);
 ChallengeAuthenticator.remediationName = 'challenge-authenticator';
 
-function _createSuper$d(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$d(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$e(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$e(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$d() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$e() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var ChallengePoll = /*#__PURE__*/function (_EnrollPoll) {
   _inherits(ChallengePoll, _EnrollPoll);
 
-  var _super = _createSuper$d(ChallengePoll);
+  var _super = _createSuper$e(ChallengePoll);
 
   function ChallengePoll() {
     _classCallCheck(this, ChallengePoll);
@@ -5860,13 +6248,13 @@ var ChallengePoll = /*#__PURE__*/function (_EnrollPoll) {
 }(EnrollPoll);
 ChallengePoll.remediationName = 'challenge-poll';
 
-function _createSuper$c(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$c(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$d(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$d(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$c() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$d() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var ResetAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
   _inherits(ResetAuthenticator, _VerifyAuthenticator);
 
-  var _super = _createSuper$c(ResetAuthenticator);
+  var _super = _createSuper$d(ResetAuthenticator);
 
   function ResetAuthenticator() {
     _classCallCheck(this, ResetAuthenticator);
@@ -5878,13 +6266,13 @@ var ResetAuthenticator = /*#__PURE__*/function (_VerifyAuthenticator) {
 }(VerifyAuthenticator);
 ResetAuthenticator.remediationName = 'reset-authenticator';
 
-function _createSuper$b(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$b(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$c(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$c(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$b() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$c() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var EnrollProfile = /*#__PURE__*/function (_Remediator) {
   _inherits(EnrollProfile, _Remediator);
 
-  var _super = _createSuper$b(EnrollProfile);
+  var _super = _createSuper$c(EnrollProfile);
 
   function EnrollProfile() {
     var _this;
@@ -5950,13 +6338,13 @@ var EnrollProfile = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 EnrollProfile.remediationName = 'enroll-profile';
 
-function _createSuper$a(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$a(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$b(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$b(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$a() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$b() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var Identify = /*#__PURE__*/function (_Remediator) {
   _inherits(Identify, _Remediator);
 
-  var _super = _createSuper$a(Identify);
+  var _super = _createSuper$b(Identify);
 
   function Identify() {
     var _this;
@@ -6001,13 +6389,13 @@ var Identify = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 Identify.remediationName = 'identify';
 
-function _createSuper$9(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$9(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$a(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$a(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$9() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$a() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var ReEnrollAuthenticator = /*#__PURE__*/function (_Remediator) {
   _inherits(ReEnrollAuthenticator, _Remediator);
 
-  var _super = _createSuper$9(ReEnrollAuthenticator);
+  var _super = _createSuper$a(ReEnrollAuthenticator);
 
   function ReEnrollAuthenticator() {
     var _this;
@@ -6043,13 +6431,13 @@ var ReEnrollAuthenticator = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 ReEnrollAuthenticator.remediationName = 'reenroll-authenticator';
 
-function _createSuper$8(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$8(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$9(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$9(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$8() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$9() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var RedirectIdp = /*#__PURE__*/function (_Remediator) {
   _inherits(RedirectIdp, _Remediator);
 
-  var _super = _createSuper$8(RedirectIdp);
+  var _super = _createSuper$9(RedirectIdp);
 
   function RedirectIdp() {
     _classCallCheck(this, RedirectIdp);
@@ -6083,9 +6471,9 @@ var RedirectIdp = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 RedirectIdp.remediationName = 'redirect-idp';
 
-function _createSuper$7(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$7(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$8(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$8(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$7() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$8() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 
 function _createForOfIteratorHelper$2(o, allowArrayLike) { var it = typeof Symbol !== "undefined" && o[Symbol.iterator] || o["@@iterator"]; if (!it) { if (Array.isArray(o) || (it = _unsupportedIterableToArray$2(o)) || allowArrayLike && o && typeof o.length === "number") { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if (i >= o.length) return { done: true }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var normalCompletion = true, didErr = false, err; return { s: function s() { it = it.call(o); }, n: function n() { var step = it.next(); normalCompletion = step.done; return step; }, e: function e(_e2) { didErr = true; err = _e2; }, f: function f() { try { if (!normalCompletion && it.return != null) it.return(); } finally { if (didErr) throw err; } } }; }
 
@@ -6129,7 +6517,7 @@ function findMatchedOption(authenticators, options) {
 var SelectAuthenticator = /*#__PURE__*/function (_Remediator) {
   _inherits(SelectAuthenticator, _Remediator);
 
-  var _super = _createSuper$7(SelectAuthenticator);
+  var _super = _createSuper$8(SelectAuthenticator);
 
   function SelectAuthenticator() {
     var _this;
@@ -6170,7 +6558,8 @@ var SelectAuthenticator = /*#__PURE__*/function (_Remediator) {
       var authenticatorFromRemediation = getAuthenticatorFromRemediation(this.remediation);
       var options = authenticatorFromRemediation.options.map(function (option) {
         var label = option.label,
-            key = option.relatesTo.key;
+            relatesTo = option.relatesTo;
+        var key = relatesTo.key;
         return {
           label: label,
           value: key
@@ -6220,13 +6609,13 @@ var SelectAuthenticator = /*#__PURE__*/function (_Remediator) {
   return SelectAuthenticator;
 }(Remediator);
 
-function _createSuper$6(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$6(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$7(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$7(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$6() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$7() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var SelectAuthenticatorAuthenticate = /*#__PURE__*/function (_SelectAuthenticator) {
   _inherits(SelectAuthenticatorAuthenticate, _SelectAuthenticator);
 
-  var _super = _createSuper$6(SelectAuthenticatorAuthenticate);
+  var _super = _createSuper$7(SelectAuthenticatorAuthenticate);
 
   function SelectAuthenticatorAuthenticate(remediation) {
     var _this;
@@ -6240,11 +6629,11 @@ var SelectAuthenticatorAuthenticate = /*#__PURE__*/function (_SelectAuthenticato
     _this = _super.call(this, remediation, values);
     var hasPasswordInOptions = (_a = getAuthenticatorFromRemediation(remediation).options) === null || _a === void 0 ? void 0 : _a.some(function (_ref) {
       var relatesTo = _ref.relatesTo;
-      return relatesTo.key === AuthenticatorKey.OKTA_PASSWORD;
+      return (relatesTo === null || relatesTo === void 0 ? void 0 : relatesTo.key) === AuthenticatorKey.OKTA_PASSWORD;
     });
 
     if (hasPasswordInOptions && (_this.values.flow === 'recoverPassword' || _this.values.password)) {
-      _this.values.authenticators = [].concat(_toConsumableArray(_this.values.authenticators), [{
+      _this.values.authenticators = [].concat(_toConsumableArray(_this.values.authenticators || []), [{
         key: AuthenticatorKey.OKTA_PASSWORD
       }]);
     }
@@ -6256,13 +6645,13 @@ var SelectAuthenticatorAuthenticate = /*#__PURE__*/function (_SelectAuthenticato
 }(SelectAuthenticator);
 SelectAuthenticatorAuthenticate.remediationName = 'select-authenticator-authenticate';
 
-function _createSuper$5(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$5(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$6(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$6(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$5() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$6() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var SelectAuthenticatorEnroll = /*#__PURE__*/function (_SelectAuthenticator) {
   _inherits(SelectAuthenticatorEnroll, _SelectAuthenticator);
 
-  var _super = _createSuper$5(SelectAuthenticatorEnroll);
+  var _super = _createSuper$6(SelectAuthenticatorEnroll);
 
   function SelectAuthenticatorEnroll() {
     _classCallCheck(this, SelectAuthenticatorEnroll);
@@ -6274,13 +6663,13 @@ var SelectAuthenticatorEnroll = /*#__PURE__*/function (_SelectAuthenticator) {
 }(SelectAuthenticator);
 SelectAuthenticatorEnroll.remediationName = 'select-authenticator-enroll';
 
-function _createSuper$4(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$4(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$5(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$5(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$4() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$5() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var SelectEnrollProfile = /*#__PURE__*/function (_Remediator) {
   _inherits(SelectEnrollProfile, _Remediator);
 
-  var _super = _createSuper$4(SelectEnrollProfile);
+  var _super = _createSuper$5(SelectEnrollProfile);
 
   function SelectEnrollProfile() {
     _classCallCheck(this, SelectEnrollProfile);
@@ -6299,13 +6688,13 @@ var SelectEnrollProfile = /*#__PURE__*/function (_Remediator) {
 }(Remediator);
 SelectEnrollProfile.remediationName = 'select-enroll-profile';
 
-function _createSuper$3(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$3(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$4(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$4(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$3() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$4() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var AuthenticatorData = /*#__PURE__*/function (_Remediator) {
   _inherits(AuthenticatorData, _Remediator);
 
-  var _super = _createSuper$3(AuthenticatorData);
+  var _super = _createSuper$4(AuthenticatorData);
 
   function AuthenticatorData(remediation) {
     var _this;
@@ -6426,13 +6815,13 @@ var AuthenticatorData = /*#__PURE__*/function (_Remediator) {
   return AuthenticatorData;
 }(Remediator);
 
-function _createSuper$2(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$2(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$3(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$3(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$2() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$3() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var AuthenticatorVerificationData = /*#__PURE__*/function (_AuthenticatorData) {
   _inherits(AuthenticatorVerificationData, _AuthenticatorData);
 
-  var _super = _createSuper$2(AuthenticatorVerificationData);
+  var _super = _createSuper$3(AuthenticatorVerificationData);
 
   function AuthenticatorVerificationData() {
     _classCallCheck(this, AuthenticatorVerificationData);
@@ -6486,13 +6875,13 @@ var AuthenticatorVerificationData = /*#__PURE__*/function (_AuthenticatorData) {
 }(AuthenticatorData);
 AuthenticatorVerificationData.remediationName = 'authenticator-verification-data';
 
-function _createSuper$1(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$1(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$2(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$2(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct$1() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$2() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var AuthenticatorEnrollmentData = /*#__PURE__*/function (_AuthenticatorData) {
   _inherits(AuthenticatorEnrollmentData, _AuthenticatorData);
 
-  var _super = _createSuper$1(AuthenticatorEnrollmentData);
+  var _super = _createSuper$2(AuthenticatorEnrollmentData);
 
   function AuthenticatorEnrollmentData() {
     _classCallCheck(this, AuthenticatorEnrollmentData);
@@ -6544,13 +6933,13 @@ var AuthenticatorEnrollmentData = /*#__PURE__*/function (_AuthenticatorData) {
 }(AuthenticatorData);
 AuthenticatorEnrollmentData.remediationName = 'authenticator-enrollment-data';
 
-function _createSuper(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+function _createSuper$1(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct$1(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
 
-function _isNativeReflectConstruct() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+function _isNativeReflectConstruct$1() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
 var Skip = /*#__PURE__*/function (_Remediator) {
   _inherits(Skip, _Remediator);
 
-  var _super = _createSuper(Skip);
+  var _super = _createSuper$1(Skip);
 
   function Skip() {
     var _this;
@@ -6580,6 +6969,8 @@ var remediators = /*#__PURE__*/Object.freeze({
   Remediator: Remediator,
   EnrollAuthenticator: EnrollAuthenticator,
   EnrollPoll: EnrollPoll,
+  SelectEnrollmentChannel: SelectEnrollmentChannel,
+  EnrollmentChannelData: EnrollmentChannelData,
   ChallengeAuthenticator: ChallengeAuthenticator,
   ChallengePoll: ChallengePoll,
   ResetAuthenticator: ResetAuthenticator,
@@ -6603,6 +6994,16 @@ function _arrayLikeToArray$1(arr, len) { if (len == null || len > arr.length) le
 function getRemediator(idxRemediations, values, options) {
   var remediators = options.remediators;
   var remediator;
+
+  if (options.step) {
+    var remediation = idxRemediations.find(function (_ref) {
+      var name = _ref.name;
+      return name === options.step;
+    });
+    var T = remediators[remediation.name];
+    return new T(remediation, values);
+  }
+
   var remediatorCandidates = [];
 
   var _iterator = _createForOfIteratorHelper$1(idxRemediations),
@@ -6610,15 +7011,15 @@ function getRemediator(idxRemediations, values, options) {
 
   try {
     for (_iterator.s(); !(_step = _iterator.n()).done;) {
-      var remediation = _step.value;
-      var isRemeditionInFlow = Object.keys(remediators).includes(remediation.name);
+      var _remediation = _step.value;
+      var isRemeditionInFlow = Object.keys(remediators).includes(_remediation.name);
 
       if (!isRemeditionInFlow) {
         continue;
       }
 
-      var T = remediators[remediation.name];
-      remediator = new T(remediation, values);
+      var _T = remediators[_remediation.name];
+      remediator = new _T(_remediation, values);
 
       if (remediator.canRemediate()) {
         return remediator;
@@ -6642,8 +7043,8 @@ function isTerminalResponse(idxResponse) {
 }
 
 function canSkipFn(idxResponse) {
-  return idxResponse.neededToProceed.some(function (_ref) {
-    var name = _ref.name;
+  return idxResponse.neededToProceed.some(function (_ref2) {
+    var name = _ref2.name;
     return name === 'skip';
   });
 }
@@ -6742,14 +7143,14 @@ function remediate(_x, _x2, _x3) {
 
 function _remediate() {
   _remediate = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(idxResponse, values, options) {
-    var _idxResponse, neededToProceed, interactionCode, remediators, terminal, messages, remediator, nextStep, actionFromValues, actions, _iterator3, _step3, action, valuesWithoutExecutedAction, _nextStep, name, data;
+    var _idxResponse, neededToProceed, interactionCode, remediators, flow, terminal, messages, remediator, nextStep, actionFromValues, actions, _iterator3, _step3, action, valuesWithoutExecutedAction, _nextStep, name, data;
 
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
             _idxResponse = idxResponse, neededToProceed = _idxResponse.neededToProceed, interactionCode = _idxResponse.interactionCode;
-            remediators = options.remediators;
+            remediators = options.remediators, flow = options.flow;
 
             if (!interactionCode) {
               _context.next = 4;
@@ -6777,18 +7178,28 @@ function _remediate() {
           case 8:
             remediator = getRemediator(neededToProceed, values, options);
 
-            if (remediator) {
+            if (!(!remediator && flow === 'default')) {
               _context.next = 11;
               break;
             }
 
+            return _context.abrupt("return", {
+              idxResponse: idxResponse
+            });
+
+          case 11:
+            if (remediator) {
+              _context.next = 13;
+              break;
+            }
+
             throw new AuthSdkError("\n      No remediation can match current flow, check policy settings in your org.\n      Remediations: [".concat(neededToProceed.reduce(function (acc, curr) {
               return acc ? acc + ' ,' + curr.name : curr.name;
             }, ''), "]\n    "));
 
-          case 11:
+          case 13:
             if (!messages.length) {
-              _context.next = 14;
+              _context.next = 16;
               break;
             }
 
@@ -6798,23 +7209,23 @@ function _remediate() {
               messages: messages
             });
 
-          case 14:
+          case 16:
             actionFromValues = getActionFromValues(values, idxResponse);
             actions = [].concat(_toConsumableArray(options.actions || []), _toConsumableArray(actionFromValues && [actionFromValues] || []));
 
             if (!actions) {
-              _context.next = 46;
+              _context.next = 48;
               break;
             }
 
             _iterator3 = _createForOfIteratorHelper$1(actions);
-            _context.prev = 18;
+            _context.prev = 20;
 
             _iterator3.s();
 
-          case 20:
+          case 22:
             if ((_step3 = _iterator3.n()).done) {
-              _context.next = 38;
+              _context.next = 40;
               break;
             }
 
@@ -6822,27 +7233,27 @@ function _remediate() {
             valuesWithoutExecutedAction = removeActionFromValues(values);
 
             if (!(typeof idxResponse.actions[action] === 'function')) {
-              _context.next = 36;
+              _context.next = 38;
               break;
             }
 
-            _context.prev = 24;
-            _context.next = 27;
+            _context.prev = 26;
+            _context.next = 29;
             return idxResponse.actions[action]();
 
-          case 27:
+          case 29:
             idxResponse = _context.sent;
-            _context.next = 33;
+            _context.next = 35;
             break;
 
-          case 30:
-            _context.prev = 30;
-            _context.t0 = _context["catch"](24);
+          case 32:
+            _context.prev = 32;
+            _context.t0 = _context["catch"](26);
             return _context.abrupt("return", handleIdxError(_context.t0, remediators));
 
-          case 33:
+          case 35:
             if (!(action === 'cancel')) {
-              _context.next = 35;
+              _context.next = 37;
               break;
             }
 
@@ -6850,33 +7261,33 @@ function _remediate() {
               canceled: true
             });
 
-          case 35:
+          case 37:
             return _context.abrupt("return", remediate(idxResponse, valuesWithoutExecutedAction, options));
 
-          case 36:
-            _context.next = 20;
-            break;
-
           case 38:
-            _context.next = 43;
+            _context.next = 22;
             break;
 
           case 40:
-            _context.prev = 40;
-            _context.t1 = _context["catch"](18);
+            _context.next = 45;
+            break;
+
+          case 42:
+            _context.prev = 42;
+            _context.t1 = _context["catch"](20);
 
             _iterator3.e(_context.t1);
 
-          case 43:
-            _context.prev = 43;
+          case 45:
+            _context.prev = 45;
 
             _iterator3.f();
 
-            return _context.finish(43);
+            return _context.finish(45);
 
-          case 46:
+          case 48:
             if (remediator.canRemediate()) {
-              _context.next = 49;
+              _context.next = 51;
               break;
             }
 
@@ -6886,33 +7297,110 @@ function _remediate() {
               nextStep: _nextStep
             });
 
-          case 49:
+          case 51:
             name = remediator.getName();
             data = remediator.getData();
-            _context.prev = 51;
-            _context.next = 54;
+            _context.prev = 53;
+            _context.next = 56;
             return idxResponse.proceed(name, data);
 
-          case 54:
+          case 56:
             idxResponse = _context.sent;
             values = remediator.getValuesAfterProceed();
             return _context.abrupt("return", remediate(idxResponse, values, options));
 
-          case 59:
-            _context.prev = 59;
-            _context.t2 = _context["catch"](51);
+          case 61:
+            _context.prev = 61;
+            _context.t2 = _context["catch"](53);
             return _context.abrupt("return", handleIdxError(_context.t2, remediator));
 
-          case 62:
+          case 64:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[18, 40, 43, 46], [24, 30], [51, 59]]);
+    }, _callee, null, [[20, 42, 45, 48], [26, 32], [53, 61]]);
   }));
   return _remediate.apply(this, arguments);
 }
 
+var AuthenticationFlow = {
+  'identify': Identify,
+  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,
+  'select-authenticator-enroll': SelectAuthenticatorEnroll,
+  'authenticator-enrollment-data': AuthenticatorEnrollmentData,
+  'authenticator-verification-data': AuthenticatorVerificationData,
+  'enroll-authenticator': EnrollAuthenticator,
+  'challenge-authenticator': ChallengeAuthenticator,
+  'challenge-poll': ChallengePoll,
+  'reenroll-authenticator': ReEnrollAuthenticator,
+  'enroll-poll': EnrollPoll,
+  'redirect-idp': RedirectIdp,
+  'skip': Skip
+};
+
+var PasswordRecoveryFlow = {
+  'identify': Identify,
+  'identify-recovery': Identify,
+  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,
+  'challenge-authenticator': ChallengeAuthenticator,
+  'authenticator-verification-data': AuthenticatorVerificationData,
+  'reset-authenticator': ResetAuthenticator,
+  'reenroll-authenticator': ReEnrollAuthenticator
+};
+
+var RegistrationFlow = {
+  'select-enroll-profile': SelectEnrollProfile,
+  'enroll-profile': EnrollProfile,
+  'authenticator-enrollment-data': AuthenticatorEnrollmentData,
+  'select-authenticator-enroll': SelectAuthenticatorEnroll,
+  'enroll-poll': EnrollPoll,
+  'select-enrollment-channel': SelectEnrollmentChannel,
+  'enrollment-channel-data': EnrollmentChannelData,
+  'enroll-authenticator': EnrollAuthenticator,
+  'skip': Skip
+};
+
+function getFlowSpecification(oktaAuth) {
+  var flow = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'default';
+  var remediators,
+      actions,
+      withCredentials = true;
+
+  switch (flow) {
+    case 'register':
+    case 'signup':
+    case 'enrollProfile':
+      remediators = RegistrationFlow;
+      withCredentials = false;
+      break;
+
+    case 'recoverPassword':
+    case 'resetPassword':
+      remediators = PasswordRecoveryFlow;
+      actions = ['currentAuthenticator-recover', 'currentAuthenticatorEnrollment-recover'];
+      withCredentials = false;
+      break;
+
+    case 'authenticate':
+    case 'login':
+    case 'signin':
+      remediators = AuthenticationFlow;
+      break;
+
+    default:
+      remediators = AuthenticationFlow;
+      break;
+  }
+
+  return {
+    flow: flow,
+    remediators: remediators,
+    actions: actions,
+    withCredentials: withCredentials
+  };
+}
+
 function _createForOfIteratorHelper(o, allowArrayLike) { var it = typeof Symbol !== "undefined" && o[Symbol.iterator] || o["@@iterator"]; if (!it) { if (Array.isArray(o) || (it = _unsupportedIterableToArray(o)) || allowArrayLike && o && typeof o.length === "number") { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if (i >= o.length) return { done: true }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var normalCompletion = true, didErr = false, err; return { s: function s() { it = it.call(o); }, n: function n() { var step = it.next(); normalCompletion = step.done; return step; }, e: function e(_e2) { didErr = true; err = _e2; }, f: function f() { try { if (!normalCompletion && it.return != null) it.return(); } finally { if (didErr) throw err; } } }; }
 
 function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" || n === "Set") return Array.from(o); if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _arrayLikeToArray(o, minLen); }
@@ -6945,7 +7433,7 @@ function getEnabledFeatures(idxResponse) {
   return res;
 }
 
-function getAvailableSteps(remediations) {
+function getAvailableSteps(idxResponse) {
   var res = [];
   var remediatorMap = Object.values(remediators).reduce(function (map, remediatorClass) {
     if (remediatorClass.remediationName) {
@@ -6955,7 +7443,7 @@ function getAvailableSteps(remediations) {
     return map;
   }, {});
 
-  var _iterator = _createForOfIteratorHelper(remediations),
+  var _iterator = _createForOfIteratorHelper(idxResponse.neededToProceed),
       _step;
 
   try {
@@ -6965,7 +7453,7 @@ function getAvailableSteps(remediations) {
 
       if (T) {
         var remediator = new T(remediation);
-        res.push(remediator.getNextStep());
+        res.push(remediator.getNextStep(idxResponse.context));
       }
     }
   } catch (err) {
@@ -6993,12 +7481,22 @@ function _run() {
         availableSteps,
         status,
         shouldClearTransaction,
+        clearSharedStorage,
         idxResponse,
         interactionHandle,
         metaFromResp,
+        interactionCode,
         flow,
-        stateTokenExternalId,
         state,
+        scopes,
+        version,
+        _remediators,
+        _actions,
+        withCredentials,
+        exchangeCodeForTokens,
+        autoRemediate,
+        step,
+        flowSpec,
         interactResponse,
         values,
         _yield$remediate,
@@ -7013,7 +7511,13 @@ function _run() {
         ignoreSignature,
         redirectUri,
         urls,
-        scopes,
+        _scopes,
+        _ref3,
+        actions,
+        context,
+        neededToProceed,
+        proceed,
+        rawIdxState,
         _args = arguments;
 
     return _regeneratorRuntime.wrap(function _callee$(_context) {
@@ -7023,11 +7527,17 @@ function _run() {
             options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
             status = IdxStatus.PENDING;
             shouldClearTransaction = false;
-            _context.prev = 3;
-            flow = options.flow, stateTokenExternalId = options.stateTokenExternalId, state = options.state;
+            clearSharedStorage = true;
+            _context.prev = 4;
+            flow = options.flow, state = options.state, scopes = options.scopes, version = options.version, _remediators = options.remediators, _actions = options.actions, withCredentials = options.withCredentials, exchangeCodeForTokens = options.exchangeCodeForTokens, autoRemediate = options.autoRemediate, step = options.step;
+            flow = flow || authClient.idx.getFlow() || 'default';
 
             if (flow) {
               authClient.idx.setFlow(flow);
+              flowSpec = getFlowSpecification(authClient, flow);
+              withCredentials = typeof withCredentials !== 'undefined' ? withCredentials : flowSpec.withCredentials;
+              _remediators = _remediators || flowSpec.remediators;
+              _actions = _actions || flowSpec.actions;
             }
 
             metaFromResp = getSavedTransactionMeta(authClient, {
@@ -7035,117 +7545,153 @@ function _run() {
             });
             interactionHandle = metaFromResp === null || metaFromResp === void 0 ? void 0 : metaFromResp.interactionHandle;
 
-            if (!(!interactionHandle && !stateTokenExternalId)) {
-              _context.next = 15;
+            if (interactionHandle) {
+              _context.next = 18;
               break;
             }
 
             authClient.transactionManager.clear();
-            _context.next = 12;
-            return interact(authClient, options);
+            _context.next = 14;
+            return interact(authClient, {
+              withCredentials: withCredentials,
+              state: state,
+              scopes: scopes
+            });
 
-          case 12:
+          case 14:
             interactResponse = _context.sent;
             interactionHandle = interactResponse.interactionHandle;
             metaFromResp = interactResponse.meta;
+            withCredentials = metaFromResp.withCredentials;
 
-          case 15:
-            _context.next = 17;
+          case 18:
+            _context.next = 20;
             return introspect(authClient, {
-              interactionHandle: interactionHandle,
-              stateTokenExternalId: stateTokenExternalId
+              withCredentials: withCredentials,
+              version: version,
+              interactionHandle: interactionHandle
             });
 
-          case 17:
+          case 20:
             idxResponse = _context.sent;
+            enabledFeatures = getEnabledFeatures(idxResponse);
+            availableSteps = getAvailableSteps(idxResponse);
+            meta = metaFromResp;
 
-            if (!(!options.remediators && !options.actions)) {
-              _context.next = 24;
+            if (!(autoRemediate !== false && (_remediators || _actions))) {
+              _context.next = 57;
               break;
             }
 
-            meta = metaFromResp;
-            enabledFeatures = getEnabledFeatures(idxResponse);
-            availableSteps = getAvailableSteps(idxResponse.neededToProceed);
-            _context.next = 49;
-            break;
-
-          case 24:
             values = Object.assign(Object.assign({}, options), {
               stateHandle: idxResponse.rawIdxState.stateHandle
             });
-            _context.next = 27;
-            return remediate(idxResponse, values, options);
+            _context.next = 28;
+            return remediate(idxResponse, values, {
+              remediators: _remediators,
+              actions: _actions,
+              flow: flow,
+              step: step
+            });
 
-          case 27:
+          case 28:
             _yield$remediate = _context.sent;
             idxResponseFromResp = _yield$remediate.idxResponse;
             nextStepFromResp = _yield$remediate.nextStep;
             terminal = _yield$remediate.terminal;
             canceled = _yield$remediate.canceled;
             messagesFromResp = _yield$remediate.messages;
+            idxResponse = idxResponseFromResp || idxResponse;
             nextStep = nextStepFromResp;
             messages = messagesFromResp;
 
-            if (nextStep && idxResponseFromResp) {
-              authClient.transactionManager.saveIdxResponse(idxResponseFromResp.rawIdxState);
+            if (nextStep) {
+              authClient.transactionManager.saveIdxResponse(idxResponse.rawIdxState);
+              availableSteps = getAvailableSteps(idxResponse);
             }
 
             if (terminal) {
               status = IdxStatus.TERMINAL;
               shouldClearTransaction = true;
+              clearSharedStorage = false;
             }
 
             if (!canceled) {
-              _context.next = 42;
+              _context.next = 44;
               break;
             }
 
             status = IdxStatus.CANCELED;
             shouldClearTransaction = true;
-            _context.next = 49;
+            _context.next = 57;
             break;
 
-          case 42:
-            if (!(idxResponseFromResp === null || idxResponseFromResp === void 0 ? void 0 : idxResponseFromResp.interactionCode)) {
-              _context.next = 49;
+          case 44:
+            if (!(idxResponse === null || idxResponse === void 0 ? void 0 : idxResponse.interactionCode)) {
+              _context.next = 57;
+              break;
+            }
+
+            interactionCode = idxResponse.interactionCode;
+
+            if (!(exchangeCodeForTokens === false)) {
+              _context.next = 51;
               break;
             }
 
-            _metaFromResp = metaFromResp, clientId = _metaFromResp.clientId, codeVerifier = _metaFromResp.codeVerifier, ignoreSignature = _metaFromResp.ignoreSignature, redirectUri = _metaFromResp.redirectUri, urls = _metaFromResp.urls, scopes = _metaFromResp.scopes;
-            _context.next = 46;
+            status = IdxStatus.SUCCESS;
+            shouldClearTransaction = false;
+            _context.next = 57;
+            break;
+
+          case 51:
+            _metaFromResp = metaFromResp, clientId = _metaFromResp.clientId, codeVerifier = _metaFromResp.codeVerifier, ignoreSignature = _metaFromResp.ignoreSignature, redirectUri = _metaFromResp.redirectUri, urls = _metaFromResp.urls, _scopes = _metaFromResp.scopes;
+            _context.next = 54;
             return authClient.token.exchangeCodeForTokens({
-              interactionCode: idxResponseFromResp.interactionCode,
+              interactionCode: interactionCode,
               clientId: clientId,
               codeVerifier: codeVerifier,
               ignoreSignature: ignoreSignature,
               redirectUri: redirectUri,
-              scopes: scopes
+              scopes: _scopes
             }, urls);
 
-          case 46:
+          case 54:
             tokens = _context.sent;
             status = IdxStatus.SUCCESS;
             shouldClearTransaction = true;
 
-          case 49:
-            _context.next = 56;
+          case 57:
+            _context.next = 68;
             break;
 
-          case 51:
-            _context.prev = 51;
-            _context.t0 = _context["catch"](3);
+          case 59:
+            _context.prev = 59;
+            _context.t0 = _context["catch"](4);
+
+            if (!isIdxResponse(_context.t0)) {
+              _context.next = 67;
+              break;
+            }
+
             error = _context.t0;
             status = IdxStatus.FAILURE;
             shouldClearTransaction = true;
+            _context.next = 68;
+            break;
 
-          case 56:
+          case 67:
+            throw _context.t0;
+
+          case 68:
             if (shouldClearTransaction) {
-              authClient.transactionManager.clear();
+              authClient.transactionManager.clear({
+                clearSharedStorage: clearSharedStorage
+              });
             }
 
-            return _context.abrupt("return", Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({
-              _idxResponse: idxResponse,
+            _ref3 = idxResponse || {}, actions = _ref3.actions, context = _ref3.context, neededToProceed = _ref3.neededToProceed, proceed = _ref3.proceed, rawIdxState = _ref3.rawIdxState;
+            return _context.abrupt("return", Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({
               status: status
             }, meta && {
               meta: meta
@@ -7161,97 +7707,48 @@ function _run() {
               messages: messages
             }), error && {
               error: error
+            }), {
+              interactionCode: interactionCode,
+              actions: actions,
+              context: context,
+              neededToProceed: neededToProceed,
+              proceed: proceed,
+              rawIdxState: rawIdxState
             }));
 
-          case 58:
+          case 71:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[3, 51]]);
+    }, _callee, null, [[4, 59]]);
   }));
   return _run.apply(this, arguments);
 }
 
-var AuthenticationFlow = {
-  'identify': Identify,
-  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,
-  'select-authenticator-enroll': SelectAuthenticatorEnroll,
-  'authenticator-enrollment-data': AuthenticatorEnrollmentData,
-  'authenticator-verification-data': AuthenticatorVerificationData,
-  'enroll-authenticator': EnrollAuthenticator,
-  'challenge-authenticator': ChallengeAuthenticator,
-  'challenge-poll': ChallengePoll,
-  'reenroll-authenticator': ReEnrollAuthenticator,
-  'enroll-poll': EnrollPoll,
-  'redirect-idp': RedirectIdp,
-  'skip': Skip
-};
-
-var PasswordRecoveryFlow = {
-  'identify': Identify,
-  'identify-recovery': Identify,
-  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,
-  'challenge-authenticator': ChallengeAuthenticator,
-  'authenticator-verification-data': AuthenticatorVerificationData,
-  'reset-authenticator': ResetAuthenticator,
-  'reenroll-authenticator': ReEnrollAuthenticator
-};
-
-var RegistrationFlow = {
-  'select-enroll-profile': SelectEnrollProfile,
-  'enroll-profile': EnrollProfile,
-  'authenticator-enrollment-data': AuthenticatorEnrollmentData,
-  'select-authenticator-enroll': SelectAuthenticatorEnroll,
-  'enroll-poll': EnrollPoll,
-  'enroll-authenticator': EnrollAuthenticator,
-  'skip': Skip
-};
-
-function getFlowSpecification(oktaAuth) {
-  var flow = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'proceed';
-  var remediators, actions;
-
-  switch (flow) {
-    case 'register':
-    case 'signup':
-    case 'enrollProfile':
-      remediators = RegistrationFlow;
-      break;
-
-    case 'recoverPassword':
-    case 'resetPassword':
-      remediators = PasswordRecoveryFlow;
-      actions = ['currentAuthenticator-recover', 'currentAuthenticatorEnrollment-recover'];
-      break;
-
-    default:
-      remediators = AuthenticationFlow;
-      break;
-  }
-
-  return {
-    flow: flow,
-    remediators: remediators,
-    actions: actions
-  };
-}
-
-function authenticate(_x, _x2) {
+function authenticate(_x) {
   return _authenticate.apply(this, arguments);
 }
 
 function _authenticate() {
-  _authenticate = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient, options) {
-    var flowSpec;
+  _authenticate = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
+    var options,
+        _args = arguments;
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
-            flowSpec = getFlowSpecification(authClient, 'authenticate');
-            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), flowSpec)));
+            options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
 
-          case 2:
+            if (options.password && !options.authenticator) {
+              options.authenticator = AuthenticatorKey.OKTA_PASSWORD;
+            }
+
+            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), {
+              flow: 'authenticate'
+            })));
+
+          case 3:
           case "end":
             return _context.stop();
         }
@@ -7288,6 +7785,85 @@ function _cancel() {
   return _cancel.apply(this, arguments);
 }
 
+function _createSuper(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }
+
+function _isNativeReflectConstruct() { if (typeof Reflect === "undefined" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === "function") return true; try { Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); return true; } catch (e) { return false; } }
+var EmailVerifyCallbackError = /*#__PURE__*/function (_CustomError) {
+  _inherits(EmailVerifyCallbackError, _CustomError);
+
+  var _super = _createSuper(EmailVerifyCallbackError);
+
+  function EmailVerifyCallbackError(state, otp) {
+    var _this;
+
+    _classCallCheck(this, EmailVerifyCallbackError);
+
+    _this = _super.call(this, "Enter the OTP code in the originating client: ".concat(otp));
+    _this.name = 'EmailVerifyCallbackError';
+    _this.state = state;
+    _this.otp = otp;
+    return _this;
+  }
+
+  return EmailVerifyCallbackError;
+}(CustomError);
+function isEmailVerifyCallbackError(error) {
+  return error.name === 'EmailVerifyCallbackError';
+}
+function isEmailVerifyCallback(urlPath) {
+  return /(otp=)/i.test(urlPath) && /(state=)/i.test(urlPath);
+}
+function parseEmailVerifyCallback(urlPath) {
+  return urlParamsToObject(urlPath);
+}
+function handleEmailVerifyCallback(_x, _x2) {
+  return _handleEmailVerifyCallback.apply(this, arguments);
+}
+
+function _handleEmailVerifyCallback() {
+  _handleEmailVerifyCallback = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient, search) {
+    var _parseEmailVerifyCall, state, otp;
+
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            if (!isEmailVerifyCallback(search)) {
+              _context.next = 9;
+              break;
+            }
+
+            _parseEmailVerifyCall = parseEmailVerifyCallback(search), state = _parseEmailVerifyCall.state, otp = _parseEmailVerifyCall.otp;
+
+            if (!authClient.idx.canProceed({
+              state: state
+            })) {
+              _context.next = 8;
+              break;
+            }
+
+            _context.next = 5;
+            return authClient.idx.proceed({
+              state: state,
+              otp: otp
+            });
+
+          case 5:
+            return _context.abrupt("return", _context.sent);
+
+          case 8:
+            throw new EmailVerifyCallbackError(state, otp);
+
+          case 9:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+  return _handleEmailVerifyCallback.apply(this, arguments);
+}
+
 function canProceed(authClient, options) {
   var meta = getSavedTransactionMeta(authClient, options);
   return !!meta;
@@ -7299,22 +7875,21 @@ function proceed(_x) {
 function _proceed() {
   _proceed = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
     var options,
-        stateTokenExternalId,
         state,
         meta,
-        flowSpec,
+        flow,
         _args = arguments;
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
             options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
-            stateTokenExternalId = options.stateTokenExternalId, state = options.state;
+            state = options.state;
             meta = getSavedTransactionMeta(authClient, {
               state: state
             });
 
-            if (!(!meta && !stateTokenExternalId)) {
+            if (meta) {
               _context.next = 5;
               break;
             }
@@ -7322,8 +7897,10 @@ function _proceed() {
             throw new AuthSdkError('Unable to proceed: saved transaction could not be loaded');
 
           case 5:
-            flowSpec = getFlowSpecification(authClient, meta === null || meta === void 0 ? void 0 : meta.flow);
-            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), flowSpec)));
+            flow = meta === null || meta === void 0 ? void 0 : meta.flow;
+            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), {
+              flow: flow
+            })));
 
           case 7:
           case "end":
@@ -7432,7 +8009,9 @@ function _startTransaction() {
           case 0:
             options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
             authClient.transactionManager.clear();
-            return _context.abrupt("return", run(authClient, options));
+            return _context.abrupt("return", run(authClient, Object.assign({
+              exchangeCodeForTokens: false
+            }, options)));
 
           case 3:
           case "end":
@@ -7456,7 +8035,6 @@ function _register() {
         availableSteps,
         error,
         _error,
-        flowSpec,
         _args = arguments;
 
     return _regeneratorRuntime.wrap(function _callee$(_context) {
@@ -7465,15 +8043,16 @@ function _register() {
           case 0:
             options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
 
-            if (transactionMetaExist(authClient)) {
+            if (hasSavedInteractionHandle(authClient)) {
               _context.next = 13;
               break;
             }
 
             _context.next = 4;
-            return startTransaction(authClient, Object.assign({
-              flow: 'register'
-            }, options));
+            return startTransaction(authClient, Object.assign(Object.assign({}, options), {
+              flow: 'register',
+              autoRemediate: false
+            }));
 
           case 4:
             _yield$startTransacti = _context.sent;
@@ -7486,10 +8065,7 @@ function _register() {
             }
 
             error = new AuthSdkError('Registration is not supported based on your current org configuration.');
-            return _context.abrupt("return", {
-              status: IdxStatus.FAILURE,
-              error: error
-            });
+            throw error;
 
           case 10:
             if (!(options.activationToken && (availableSteps === null || availableSteps === void 0 ? void 0 : availableSteps.some(function (_ref) {
@@ -7501,16 +8077,14 @@ function _register() {
             }
 
             _error = new AuthSdkError('activationToken is not supported based on your current org configuration.');
-            return _context.abrupt("return", {
-              status: IdxStatus.FAILURE,
-              error: _error
-            });
+            throw _error;
 
           case 13:
-            flowSpec = getFlowSpecification(authClient, 'register');
-            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), flowSpec)));
+            return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), {
+              flow: 'register'
+            })));
 
-          case 15:
+          case 14:
           case "end":
             return _context.stop();
         }
@@ -7520,21 +8094,24 @@ function _register() {
   return _register.apply(this, arguments);
 }
 
-function recoverPassword(_x, _x2) {
+function recoverPassword(_x) {
   return _recoverPassword.apply(this, arguments);
 }
 
 function _recoverPassword() {
-  _recoverPassword = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient, options) {
-    var flowSpec;
+  _recoverPassword = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(authClient) {
+    var options,
+        flowSpec,
+        _args = arguments;
     return _regeneratorRuntime.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
+            options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
             flowSpec = getFlowSpecification(authClient, 'recoverPassword');
             return _context.abrupt("return", run(authClient, Object.assign(Object.assign({}, options), flowSpec)));
 
-          case 2:
+          case 3:
           case "end":
             return _context.stop();
         }
@@ -7635,7 +8212,7 @@ var OktaUserAgent = /*#__PURE__*/function () {
   function OktaUserAgent() {
     _classCallCheck(this, OktaUserAgent);
 
-    this.environments = ["okta-auth-js/".concat("5.11.0")];
+    this.environments = ["okta-auth-js/".concat("6.0.0")];
   }
 
   _createClass(OktaUserAgent, [{
@@ -7654,7 +8231,7 @@ var OktaUserAgent = /*#__PURE__*/function () {
   }, {
     key: "getVersion",
     value: function getVersion() {
-      return "5.11.0";
+      return "6.0.0";
     }
   }, {
     key: "maybeAddNodeEnvironment",
@@ -7694,7 +8271,7 @@ var OktaAuth = /*#__PURE__*/function () {
           return storage.get(name);
         }
       }),
-      introspect: introspect$1.bind(null, this)
+      introspect: introspectAuthn.bind(null, this)
     };
     this.pkce = {
       DEFAULT_CODE_CHALLENGE_METHOD: PKCE.DEFAULT_CODE_CHALLENGE_METHOD,
@@ -7713,9 +8290,6 @@ var OktaAuth = /*#__PURE__*/function () {
       this.options = Object.assign(this.options, {
         redirectUri: toAbsoluteUrl(args.redirectUri, window.location.origin)
       });
-      this.userAgent = getUserAgent(args, "okta-auth-js/".concat("5.11.0"));
-    } else {
-      this.userAgent = getUserAgent(args, "okta-auth-js-server/".concat("5.11.0"));
     }
 
     if (!args.maxClockSkew && args.maxClockSkew !== 0) {
@@ -7733,13 +8307,36 @@ var OktaAuth = /*#__PURE__*/function () {
       setCookieAndRedirect: setCookieAndRedirect.bind(null, this)
     };
     this._tokenQueue = new PromiseQueue();
+
+    var useQueue = function useQueue(method) {
+      return PromiseQueue.prototype.push.bind(_this._tokenQueue, method, null);
+    };
+
+    var getWithRedirectFn = useQueue(getWithRedirect.bind(null, this));
+    var getWithRedirectApi = Object.assign(getWithRedirectFn, {
+      _setLocation: function _setLocation(url) {
+        window.location = url;
+      }
+    });
+    var parseFromUrlFn = useQueue(parseFromUrl.bind(null, this));
+    var parseFromUrlApi = Object.assign(parseFromUrlFn, {
+      _getHistory: function _getHistory() {
+        return window.history;
+      },
+      _getLocation: function _getLocation() {
+        return window.location;
+      },
+      _getDocument: function _getDocument() {
+        return window.document;
+      }
+    });
     this.token = {
       prepareTokenParams: prepareTokenParams.bind(null, this),
       exchangeCodeForTokens: exchangeCodeForTokens.bind(null, this),
       getWithoutPrompt: getWithoutPrompt.bind(null, this),
       getWithPopup: getWithPopup.bind(null, this),
-      getWithRedirect: getWithRedirect.bind(null, this),
-      parseFromUrl: parseFromUrl.bind(null, this),
+      getWithRedirect: getWithRedirectApi,
+      parseFromUrl: parseFromUrlApi,
       decode: decodeToken,
       revoke: revokeToken.bind(null, this),
       renew: renewToken.bind(null, this),
@@ -7749,7 +8346,7 @@ var OktaAuth = /*#__PURE__*/function () {
       verify: verifyToken.bind(null, this),
       isLoginRedirect: isLoginRedirect.bind(null, this)
     };
-    var syncMethods = ['decode', 'isLoginRedirect'];
+    var syncMethods = ['decode', 'isLoginRedirect', 'getWithRedirect', 'parseFromUrl'];
     Object.keys(this.token).forEach(function (key) {
       if (syncMethods.indexOf(key) >= 0) {
         return;
@@ -7758,33 +8355,31 @@ var OktaAuth = /*#__PURE__*/function () {
       var method = _this.token[key];
       _this.token[key] = PromiseQueue.prototype.push.bind(_this._tokenQueue, method, null);
     });
-    Object.assign(this.token.getWithRedirect, {
-      _setLocation: function _setLocation(url) {
-        window.location = url;
-      }
-    });
-    Object.assign(this.token.parseFromUrl, {
-      _getHistory: function _getHistory() {
-        return window.history;
-      },
-      _getLocation: function _getLocation() {
-        return window.location;
-      },
-      _getDocument: function _getDocument() {
-        return window.document;
-      }
-    });
+    var boundStartTransaction = startTransaction.bind(null, this);
     this.idx = {
       interact: interact.bind(null, this),
       introspect: introspect.bind(null, this),
       authenticate: authenticate.bind(null, this),
       register: register.bind(null, this),
+      start: boundStartTransaction,
+      startTransaction: boundStartTransaction,
       poll: poll.bind(null, this),
       proceed: proceed.bind(null, this),
       cancel: cancel.bind(null, this),
       recoverPassword: recoverPassword.bind(null, this),
       handleInteractionCodeRedirect: handleInteractionCodeRedirect.bind(null, this),
-      startTransaction: startTransaction.bind(null, this),
+      isInteractionRequired: isInteractionRequired.bind(null, this),
+      isInteractionRequiredError: isInteractionRequiredError,
+      handleEmailVerifyCallback: handleEmailVerifyCallback.bind(null, this),
+      isEmailVerifyCallback: isEmailVerifyCallback,
+      parseEmailVerifyCallback: parseEmailVerifyCallback,
+      isEmailVerifyCallbackError: isEmailVerifyCallbackError,
+      getSavedTransactionMeta: getSavedTransactionMeta.bind(null, this),
+      createTransactionMeta: createTransactionMeta.bind(null, this),
+      getTransactionMeta: getTransactionMeta.bind(null, this),
+      saveTransactionMeta: saveTransactionMeta.bind(null, this),
+      clearTransactionMeta: clearTransactionMeta.bind(null, this),
+      isTransactionMetaValid: isTransactionMetaValid,
       setFlow: function setFlow(flow) {
         _this.options.flow = flow;
       },
@@ -7822,26 +8417,6 @@ var OktaAuth = /*#__PURE__*/function () {
     value: function setHeaders(headers) {
       this.options.headers = Object.assign({}, this.options.headers, headers);
     }
-  }, {
-    key: "isInteractionRequired",
-    value: function isInteractionRequired$1(hashOrSearch) {
-      return isInteractionRequired(this, hashOrSearch);
-    }
-  }, {
-    key: "isInteractionRequiredError",
-    value: function isInteractionRequiredError$1(error) {
-      return isInteractionRequiredError(error);
-    }
-  }, {
-    key: "isEmailVerifyCallback",
-    value: function isEmailVerifyCallback$1(urlPath) {
-      return isEmailVerifyCallback(urlPath);
-    }
-  }, {
-    key: "parseEmailVerifyCallback",
-    value: function parseEmailVerifyCallback$1(urlPath) {
-      return parseEmailVerifyCallback(urlPath);
-    }
   }, {
     key: "signIn",
     value: function () {
@@ -8191,10 +8766,10 @@ var OktaAuth = /*#__PURE__*/function () {
                 }));
 
               case 22:
-                if (options.clearTokensAfterRedirect) {
-                  this.tokenManager.addPendingRemoveFlags();
-                } else {
+                if (options.clearTokensBeforeRedirect) {
                   this.tokenManager.clear();
+                } else {
+                  this.tokenManager.addPendingRemoveFlags();
                 }
 
                 window.location.assign(logoutUri);
@@ -8242,7 +8817,7 @@ var OktaAuth = /*#__PURE__*/function () {
                   break;
                 }
 
-                accessToken = null;
+                accessToken = undefined;
 
                 if (!autoRenew) {
                   _context8.next = 15;
@@ -8277,7 +8852,7 @@ var OktaAuth = /*#__PURE__*/function () {
                   break;
                 }
 
-                idToken = null;
+                idToken = undefined;
 
                 if (!autoRenew) {
                   _context8.next = 29;
@@ -8433,7 +9008,7 @@ var OktaAuth = /*#__PURE__*/function () {
       }
 
       var storage = storageUtil.getSessionStorage();
-      return storage ? storage.getItem(REFERRER_PATH_STORAGE_KEY) : undefined;
+      return storage ? storage.getItem(REFERRER_PATH_STORAGE_KEY) || undefined : undefined;
     }
   }, {
     key: "removeOriginalUri",
@@ -8444,7 +9019,7 @@ var OktaAuth = /*#__PURE__*/function () {
 
       if (state) {
         var sharedStorage = this.storageManager.getOriginalUriStorage();
-        sharedStorage.removeItem(state);
+        sharedStorage.removeItem && sharedStorage.removeItem(state);
       }
     }
   }, {
@@ -8517,7 +9092,9 @@ var OktaAuth = /*#__PURE__*/function () {
                 break;
 
               case 26:
-                window.location.replace(originalUri);
+                if (originalUri) {
+                  window.location.replace(originalUri);
+                }
 
               case 27:
               case "end":
@@ -8583,9 +9160,8 @@ var OktaAuth = /*#__PURE__*/function () {
 
 OktaAuth.features = OktaAuth.prototype.features = features;
 Object.assign(OktaAuth, {
-  constants: constants,
-  isInteractionRequiredError: isInteractionRequiredError
+  constants: constants
 });
 
-export { ACCESS_TOKEN_STORAGE_KEY, AuthApiError, AuthPollStopError, AuthSdkError, AuthStateManager, AuthTransaction, AuthenticatorKey, CACHE_STORAGE_NAME, DEFAULT_CACHE_DURATION, DEFAULT_CODE_CHALLENGE_METHOD, DEFAULT_MAX_CLOCK_SKEW, DEFAULT_POLLING_DELAY, EVENT_ADDED, EVENT_ERROR, EVENT_EXPIRED, EVENT_REMOVED, EVENT_RENEWED, IDX_API_VERSION, IDX_RESPONSE_STORAGE_NAME, ID_TOKEN_STORAGE_KEY, INITIAL_AUTH_STATE, IdxFeature, IdxStatus, MAX_VERIFIER_LENGTH, MIN_VERIFIER_LENGTH, OAuthError, ORIGINAL_URI_STORAGE_NAME, OktaAuth, PKCE_STORAGE_NAME, REDIRECT_NONCE_COOKIE_NAME, REDIRECT_OAUTH_PARAMS_NAME, REDIRECT_STATE_COOKIE_NAME, REFERRER_PATH_STORAGE_KEY, REFRESH_TOKEN_STORAGE_KEY, SHARED_TRANSACTION_STORAGE_NAME, STATE_TOKEN_KEY_NAME, TOKEN_STORAGE_NAME, TRANSACTION_STORAGE_NAME, TokenManager, TransactionState, addListener, addPostMessageListener, addStateToken, bind, buildAuthorizeParams, clone, convertTokenParamsToOAuthParams, index as crypto, decodeToken, delay, deprecate, deprecateWrap, exchangeCodeForTokens, extend, find, genRandomString, generateNonce, generateState, getConsole, getDefaultTokenParams, getHashOrSearch, getKey, getLink, getNativeConsole, getOAuthBaseUrl, getOAuthDomain, getOAuthUrls, getPollFn, getStateToken, getToken, getUserInfo, getWellKnown, getWithPopup, getWithRedirect, getWithoutPrompt, handleOAuthResponse, hasAuthorizationCode, hasErrorInUrl, hasInteractionCode, hasTokensInHash, introspect$1 as introspect, isAbsoluteUrl, isAccessToken, isAuthApiError, isAuthorizationCodeError, isCodeFlow, isCustomAuthTransactionMeta, isEmailVerifyCallback, isFunction, isIDToken, isIdxTransactionMeta, isInteractionRequired, isInteractionRequiredError, isLoginRedirect, isNumber, isOAuthTransactionMeta, isObject, isPKCETransactionMeta, isPromise, isRedirectUri, isRefreshToken, isRefreshTokenError, isSameRefreshToken, isString, isToken, isTransactionMeta, isoToUTCString, loadFrame, loadPopup, omit, parseEmailVerifyCallback, parseFromUrl, PKCE as pkce, postRefreshToken, postToTokenEndpoint, postToTransaction, prepareTokenParams, removeListener, removeNils, removeTrailingSlash, renewToken, renewTokens, renewTokensWithRefresh, resumeTransaction, revokeToken, toAbsoluteUrl, toQueryString, toRelativeUrl, transactionExists, transactionStatus, urlParamsToObject, validateClaims, validateToken, verifyToken, warn };
+export { ACCESS_TOKEN_STORAGE_KEY, AuthApiError, AuthPollStopError, AuthSdkError, AuthStateManager, AuthTransaction, AuthenticatorKey, CACHE_STORAGE_NAME, DEFAULT_CACHE_DURATION, DEFAULT_CODE_CHALLENGE_METHOD, DEFAULT_MAX_CLOCK_SKEW, DEFAULT_POLLING_DELAY, EVENT_ADDED, EVENT_ERROR, EVENT_EXPIRED, EVENT_REMOVED, EVENT_RENEWED, EmailVerifyCallbackError, IDX_API_VERSION, IDX_RESPONSE_STORAGE_NAME, ID_TOKEN_STORAGE_KEY, INITIAL_AUTH_STATE, IdxFeature, IdxStatus, MAX_VERIFIER_LENGTH, MIN_VERIFIER_LENGTH, OAuthError, ORIGINAL_URI_STORAGE_NAME, OktaAuth, PKCE_STORAGE_NAME, REDIRECT_NONCE_COOKIE_NAME, REDIRECT_OAUTH_PARAMS_NAME, REDIRECT_STATE_COOKIE_NAME, REFERRER_PATH_STORAGE_KEY, REFRESH_TOKEN_STORAGE_KEY, SHARED_TRANSACTION_STORAGE_NAME, STATE_TOKEN_KEY_NAME, TOKEN_STORAGE_NAME, TRANSACTION_STORAGE_NAME, TokenManager, addListener, addPostMessageListener, addStateToken, assertPKCESupport, authenticate, bind, buildAuthorizeParams, canProceed, cancel, clearTransactionMeta, clone, convertTokenParamsToOAuthParams, createOAuthMeta, createTransactionMeta, index as crypto, decodeToken, delay, deprecate, deprecateWrap, exchangeCodeForTokens, extend, find, genRandomString, generateNonce, generateState, getConsole, getDefaultTokenParams, getHashOrSearch, getKey, getLink, getNativeConsole, getOAuthBaseUrl, getOAuthDomain, getOAuthUrls, getPollFn, getSavedTransactionMeta, getStateToken, getToken, getTransactionMeta, getUserInfo, getWellKnown, getWithPopup, getWithRedirect, getWithoutPrompt, handleEmailVerifyCallback, handleInteractionCodeRedirect, handleOAuthResponse, hasAuthorizationCode, hasErrorInUrl, hasInteractionCode, hasSavedInteractionHandle, hasTokensInHash, interact, introspect, introspectAuthn, isAbsoluteUrl, isAccessToken, isAuthApiError, isAuthorizationCodeError, isCodeFlow, isCustomAuthTransactionMeta, isEmailVerifyCallback, isEmailVerifyCallbackError, isFunction, isIDToken, isIdxTransactionMeta, isInteractionRequired, isInteractionRequiredError, isLoginRedirect, isNumber, isOAuthTransactionMeta, isObject, isPKCETransactionMeta, isPromise, isRedirectUri, isRefreshToken, isRefreshTokenError, isSameRefreshToken, isString, isToken, isTransactionMeta, isTransactionMetaValid, isTransactionMetaValidForFlow, isTransactionMetaValidForOptions, isoToUTCString, loadFrame, loadPopup, omit, parseEmailVerifyCallback, parseFromUrl, PKCE as pkce, poll, postRefreshToken, postToTokenEndpoint, postToTransaction, preparePKCE, prepareTokenParams, proceed, recoverPassword, register, removeListener, removeNils, removeTrailingSlash, renewToken, renewTokens, renewTokensWithRefresh, resumeTransaction, revokeToken, saveTransactionMeta, startTransaction, toAbsoluteUrl, toQueryString, toRelativeUrl, transactionExists, transactionStatus, transactionStep, urlParamsToObject, validateClaims, validateCodeChallengeMethod, validateToken, verifyToken, warn };
 //# sourceMappingURL=index.js.map