@okta/okta-auth-js 5.11.0 → 6.2.0

package/lib/options/node.d.ts

@@ -0,0 +1,16 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+import { StorageManagerOptions, OktaAuthOptions } from '../types';
+export { default as storage } from '../server/serverStorage';
+export declare const STORAGE_MANAGER_OPTIONS: StorageManagerOptions;
+export declare const enableSharedStorage = false;
+export declare function getCookieSettings(args?: OktaAuthOptions, isHTTPS?: boolean): import("../types").CookieOptions | undefined;

package/lib/server/serverStorage.d.ts

@@ -18,7 +18,7 @@ declare class ServerStorage implements StorageUtil {
     testStorageType(storageType: StorageType): boolean;
     getStorageByType(storageType: StorageType): SimpleStorage;
     findStorageType(): StorageType;
-    getHttpCache(): any;
+    getHttpCache(): null;
     getStorage(): SimpleStorage;
 }
 declare const _default: ServerStorage;

package/lib/services/AutoRenewService.d.ts

@@ -0,0 +1,27 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+import { TokenManager } from '../TokenManager';
+import { ServiceInterface, ServiceManagerOptions } from '../types';
+export declare class AutoRenewService implements ServiceInterface {
+    private tokenManager;
+    private options;
+    private renewTimeQueue;
+    private started;
+    constructor(tokenManager: TokenManager, options?: ServiceManagerOptions);
+    private shouldThrottleRenew;
+    requiresLeadership(): boolean;
+    private onTokenExpiredHandler;
+    canStart(): boolean;
+    start(): void;
+    stop(): void;
+    isStarted(): boolean;
+}

package/lib/services/{TokenService.d.ts → SyncStorageService.d.ts}

@@ -10,14 +10,17 @@
  * See the License for the specific language governing permissions and limitations under the License.
  */
 import { TokenManager } from '../TokenManager';
-import { TokenManagerOptions } from '../types';
-export declare class TokenService {
+import { ServiceManagerOptions, ServiceInterface } from '../types';
+export declare class SyncStorageService implements ServiceInterface {
     private tokenManager;
     private options;
-    private storageListener;
-    private onTokenExpiredHandler;
     private syncTimeout;
-    constructor(tokenManager: TokenManager, options?: TokenManagerOptions);
+    private started;
+    constructor(tokenManager: TokenManager, options?: ServiceManagerOptions);
+    private storageListener;
+    requiresLeadership(): boolean;
+    isStarted(): boolean;
+    canStart(): boolean;
     start(): void;
     stop(): void;
 }

package/lib/services/index.d.ts

@@ -0,0 +1,13 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+export * from './AutoRenewService';
+export * from './SyncStorageService';

package/lib/tx/AuthTransaction.d.ts

@@ -42,7 +42,7 @@ export declare class AuthTransaction implements TransactionState, AuthTransactio
     activate?: AuthTransactionFunction;
     poll?: AuthTransactionFunction;
     prev?: AuthTransactionFunction;
-    data: TransactionState;
+    data?: TransactionState;
     stateToken?: string;
     sessionToken?: string;
     status: string | IdxStatus;
@@ -53,6 +53,6 @@ export declare class AuthTransaction implements TransactionState, AuthTransactio
     scopes?: Array<Record<string, any>>;
     target?: Record<string, any>;
     authentication?: Record<string, any>;
-    constructor(sdk: any, res?: any);
+    constructor(sdk: any, res?: TransactionState | null);
 }
 export {};

package/lib/tx/TransactionState.d.ts

@@ -9,8 +9,17 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-export declare class TransactionState {
+export interface TransactionLink {
+    name?: string;
+    type: string;
+    href: string;
+    hints?: {
+        allow?: string[];
+    };
+}
+export interface TransactionState {
     interactionHandle?: string;
+    status: string;
     stateToken?: string;
     type?: string;
     expiresAt?: string;
@@ -24,4 +33,5 @@ export declare class TransactionState {
     profile?: {
         updatePhone?: boolean;
     };
+    _links?: Record<string, TransactionLink>;
 }

package/lib/tx/api.d.ts

@@ -11,9 +11,9 @@
  *
  */
 import { AuthTransaction } from './AuthTransaction';
-declare function transactionStatus(sdk: any, args: any): Promise<any>;
-declare function resumeTransaction(sdk: any, args: any): any;
-declare function introspect(sdk: any, args: any): Promise<AuthTransaction>;
-declare function transactionExists(sdk: any): boolean;
-declare function postToTransaction(sdk: any, url: any, args: any, options?: any): Promise<AuthTransaction>;
-export { transactionStatus, resumeTransaction, transactionExists, postToTransaction, introspect, };
+export declare function transactionStatus(sdk: any, args: any): Promise<any>;
+export declare function resumeTransaction(sdk: any, args: any): any;
+export declare function introspectAuthn(sdk: any, args: any): Promise<AuthTransaction>;
+export declare function transactionStep(sdk: any, args: any): Promise<any>;
+export declare function transactionExists(sdk: any): boolean;
+export declare function postToTransaction(sdk: any, url: any, args: any, options?: any): Promise<AuthTransaction>;

package/lib/types/OktaAuthOptions.d.ts

@@ -9,14 +9,17 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-import { StorageManagerOptions, StorageUtil } from './Storage';
+import { StorageManagerOptions, StorageUtil, SimpleStorage } from './Storage';
 import { CookieOptions } from './Cookies';
 import { HttpRequestClient } from './http';
 import { AuthState } from './AuthState';
 import { TransactionManagerOptions } from './Transaction';
-import { SimpleStorage } from './Storage';
 import { FlowIdentifier } from '../idx/types';
+import { ServiceManagerOptions } from './Service';
 import OktaAuth from '../OktaAuth';
+export interface IsAuthenticatedOptions {
+    onExpiredToken?: 'renew' | 'remove' | 'none';
+}
 export interface TokenManagerOptions {
     autoRenew?: boolean;
     autoRemove?: boolean;
@@ -28,10 +31,6 @@ export interface TokenManagerOptions {
     syncStorage?: boolean;
     _storageEventDelay?: number;
 }
-export interface CustomUserAgent {
-    template?: string;
-    value?: string;
-}
 export interface CustomUrls {
     issuer?: string;
     authorizeUrl?: string;
@@ -56,16 +55,20 @@ export interface OktaAuthOptions extends CustomUrls {
     storageUtil?: StorageUtil;
     ajaxRequest?: object;
     httpRequestClient?: HttpRequestClient;
-    userAgent?: CustomUserAgent;
     cookies?: CookieOptions;
     transformErrorXHR?: (xhr: object) => any;
     headers?: object;
     maxClockSkew?: number;
     transformAuthState?: (oktaAuth: OktaAuth, authState: AuthState) => Promise<AuthState>;
-    restoreOriginalUri?: (oktaAuth: OktaAuth, originalUri: string) => Promise<void>;
+    restoreOriginalUri?: (oktaAuth: OktaAuth, originalUri?: string) => Promise<void>;
     devMode?: boolean;
     storageManager?: StorageManagerOptions;
+    services?: ServiceManagerOptions;
     transactionManager?: TransactionManagerOptions;
     flow?: FlowIdentifier;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    recoveryToken?: string;
+    activationToken?: string;
     clientSecret?: string;
 }

package/lib/types/Service.d.ts

@@ -0,0 +1,23 @@
+export interface ServiceManagerInterface {
+    isLeader(): boolean;
+    start(): void;
+    stop(): void;
+    getService(name: string): ServiceInterface | undefined;
+}
+export interface ServiceInterface {
+    start(): void;
+    stop(): void;
+    isStarted(): boolean;
+    canStart(): boolean;
+    requiresLeadership(): boolean;
+}
+export interface AutoRenewServiceOptions {
+    autoRenew?: boolean;
+    autoRemove?: boolean;
+}
+export interface SyncStorageServiceOptions {
+    syncStorage?: boolean;
+}
+export declare type ServiceManagerOptions = AutoRenewServiceOptions & SyncStorageServiceOptions & {
+    broadcastChannelName?: string;
+};

package/lib/types/Storage.d.ts

@@ -49,13 +49,13 @@ export interface StorageOptions extends CookieOptions {
     storageTypes?: StorageType[];
     storageProvider?: SimpleStorage;
     storageKey?: string;
-    useMultipleCookies?: boolean;
+    useSeparateCookies?: boolean;
 }
 export declare type StorageType = 'memory' | 'sessionStorage' | 'localStorage' | 'cookie' | 'custom' | 'auto';
 export interface StorageUtil {
     storage: TxStorage;
     testStorageType(storageType: StorageType): boolean;
-    getStorageByType(storageType: StorageType, options: StorageOptions): SimpleStorage;
+    getStorageByType(storageType: StorageType, options?: StorageOptions): SimpleStorage;
     findStorageType(types: StorageType[]): StorageType;
 }
 export interface BrowserStorageUtil extends StorageUtil {
@@ -79,7 +79,7 @@ export interface NodeStorageUtil extends StorageUtil {
     getStorage(): SimpleStorage;
 }
 export interface CookieStorage extends SimpleStorage {
-    setItem(key: string, value: any, expiresAt?: string): void;
+    setItem(key: string, value: any, expiresAt?: string | null): void;
     getItem(key?: string): any;
     removeItem(key: string): any;
 }

package/lib/types/Transaction.d.ts

@@ -9,9 +9,9 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-import StorageManager from '../StorageManager';
+import { StorageManager } from '../StorageManager';
 import { CustomUrls } from './OktaAuthOptions';
-import { FlowIdentifier } from '../idx/types';
+import { FlowIdentifier, IdxTransactionMeta } from '../idx/types';
 export interface TransactionManagerOptions {
     storageManager?: StorageManager;
     enableSharedStorage?: boolean;
@@ -19,12 +19,19 @@ export interface TransactionManagerOptions {
     saveNonceCookie?: boolean;
     saveStateCookie?: boolean;
     saveParamsCookie?: boolean;
+    saveLastResponse?: boolean;
 }
 export interface TransactionMetaOptions {
     pkce?: boolean;
     oauth?: boolean;
     muteWarning?: boolean;
     state?: string;
+    flow?: FlowIdentifier;
+    codeVerifier?: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    activationToken?: string;
+    recoveryToken?: string;
 }
 export interface OAuthTransactionMeta {
     issuer: string;
@@ -32,6 +39,7 @@ export interface OAuthTransactionMeta {
     state: string;
     nonce: string;
     responseType: string | string[];
+    responseMode?: string;
     scopes: string[];
     clientId: string;
     urls: CustomUrls;
@@ -43,11 +51,6 @@ export interface PKCETransactionMeta extends OAuthTransactionMeta {
     codeChallengeMethod: string;
     codeChallenge: string;
 }
-export interface IdxTransactionMeta extends PKCETransactionMeta {
-    interactionHandle?: string;
-    remediations?: string[];
-    flow?: FlowIdentifier;
-}
 export declare type CustomAuthTransactionMeta = Record<string, string | undefined>;
 export declare type TransactionMeta = IdxTransactionMeta | PKCETransactionMeta | OAuthTransactionMeta | CustomAuthTransactionMeta;
 export declare function isOAuthTransactionMeta(obj: any): obj is OAuthTransactionMeta;

package/lib/types/UserClaims.d.ts

@@ -15,7 +15,7 @@
  * ID Token or returned from the /userinfo response and depend on the
  * response_type and scope parameters in the authorize request
  */
-export interface UserClaims {
+export declare type UserClaims<T = {}> = T & {
     auth_time?: number;
     aud?: string;
     email?: string;
@@ -34,5 +34,5 @@ export interface UserClaims {
     updated_at?: number;
     ver?: number;
     zoneinfo?: string;
-    [propName: string]: any;
-}
+    at_hash?: string;
+};

package/lib/types/api.d.ts

@@ -14,27 +14,28 @@ import { Token, Tokens, RevocableToken, AccessToken, IDToken, RefreshToken } fro
 import { JWTObject } from './JWT';
 import { UserClaims } from './UserClaims';
 import { CustomUrls, OktaAuthOptions } from './OktaAuthOptions';
-import StorageManager from '../StorageManager';
+import { StorageManager } from '../StorageManager';
 import TransactionManager from '../TransactionManager';
 import { TokenManagerInterface } from './TokenManager';
+import { ServiceManagerInterface } from './Service';
 import { OktaUserAgent } from '../OktaUserAgent';
-import { FlowIdentifier, IdxPollOptions } from '../idx/types';
-import { AuthenticationOptions, RegistrationOptions as IdxRegistrationOptions, PasswordRecoveryOptions, ProceedOptions, CancelOptions, IdxOptions, IdxTransaction } from '../idx/types';
+import { AuthenticationOptions, RegistrationOptions as IdxRegistrationOptions, PasswordRecoveryOptions, AccountUnlockOptions, ProceedOptions, CancelOptions, IdxOptions, IdxTransaction, IdxTransactionMeta, EmailVerifyCallbackResponse, IdxAuthenticator, ChallengeData, ActivationData, WebauthnEnrollValues, WebauthnVerificationValues, FlowIdentifier, IdxPollOptions } from '../idx/types';
 import { InteractOptions, InteractResponse } from '../idx/interact';
 import { IntrospectOptions } from '../idx/introspect';
 import { IdxResponse } from '../idx/types/idx-js';
-export interface OktaAuth {
+import { TransactionMetaOptions } from './Transaction';
+export interface OktaAuthInterface {
     options: OktaAuthOptions;
-    userAgent: string;
     getIssuerOrigin(): string;
-    getOriginalUri(): string;
+    getOriginalUri(): string | undefined;
     _oktaUserAgent: OktaUserAgent;
     storageManager: StorageManager;
     transactionManager: TransactionManager;
     tokenManager: TokenManagerInterface;
+    serviceManager: ServiceManagerInterface;
     idx: IdxAPI;
-    features?: FeaturesAPI;
-    token?: TokenAPI;
+    features: FeaturesAPI;
+    token: TokenAPI;
 }
 export interface APIError {
     errorSummary: string;
@@ -83,11 +84,10 @@ export interface TokenParams extends CustomUrls {
     scopes?: string[];
     display?: string;
     ignoreSignature?: boolean;
-    codeChallengeMethod?: string;
     codeVerifier?: string;
     authorizationCode?: string;
     codeChallenge?: string;
-    grantType?: string;
+    codeChallengeMethod?: string;
     interactionCode?: string;
     idp?: string;
     idpScope?: string | string[];
@@ -136,8 +136,8 @@ export interface TokenAPI extends BaseTokenAPI {
     getWithoutPrompt(params?: TokenParams): Promise<TokenResponse>;
     getWithPopup(params?: TokenParams): Promise<TokenResponse>;
     revoke(token: RevocableToken): Promise<object>;
-    renew(token: Token): Promise<Token>;
-    renewTokens(): Promise<Tokens>;
+    renew(token: Token): Promise<Token | undefined>;
+    renewTokens(options?: TokenParams): Promise<Tokens>;
     renewTokensWithRefresh(tokenParams: TokenParams, refreshTokenObject: RefreshToken): Promise<Tokens>;
     verify(token: IDToken, params?: object): Promise<IDToken>;
     isLoginRedirect(): boolean;
@@ -163,20 +163,33 @@ export interface FeaturesAPI {
     isPKCESupported(): boolean;
     isIE11OrLess(): boolean;
 }
+export interface CryptoAPI {
+    base64UrlToBuffer(b64u: string): Uint8Array;
+    bufferToBase64Url(bin: Uint8Array): string;
+}
+export interface WebauthnAPI {
+    getAssertion(credential: PublicKeyCredential): WebauthnVerificationValues;
+    getAttestation(credential: PublicKeyCredential): WebauthnEnrollValues;
+    buildCredentialRequestOptions(challengeData: ChallengeData, authenticatorEnrollments: IdxAuthenticator[]): CredentialRequestOptions;
+    buildCredentialCreationOptions(activationData: ActivationData, authenticatorEnrollments: IdxAuthenticator[]): CredentialCreationOptions;
+}
 export interface SupportsCodeFlow {
     useInteractionCodeFlow?: boolean;
 }
 export interface SigninOptions extends SupportsCodeFlow, AuthenticationOptions {
     relayState?: string;
-    context?: string;
+    context?: {
+        deviceToken?: string;
+    };
     sendFingerprint?: boolean;
+    stateToken?: string;
 }
 export interface SigninWithRedirectOptions extends SigninOptions, TokenParams {
     originalUri?: string;
 }
 export interface SigninWithCredentialsOptions extends SigninOptions {
-    username: string;
-    password: string;
+    username?: string;
+    password?: string;
 }
 export interface SigninAPI {
     signIn(opts: SigninOptions): Promise<AuthTransaction>;
@@ -192,7 +205,7 @@ export interface SignoutOptions extends SignoutRedirectUrlOptions {
     revokeRefreshToken?: boolean;
     accessToken?: AccessToken;
     refreshToken?: RefreshToken;
-    clearTokensAfterRedirect?: boolean;
+    clearTokensBeforeRedirect?: boolean;
 }
 export interface SignoutAPI {
     signOut(opts: SignoutOptions): any;
@@ -215,15 +228,29 @@ export interface IdxAPI {
     introspect: (options?: IntrospectOptions) => Promise<IdxResponse>;
     authenticate: (options?: AuthenticationOptions) => Promise<IdxTransaction>;
     register: (options?: IdxRegistrationOptions) => Promise<IdxTransaction>;
+    recoverPassword: (options?: PasswordRecoveryOptions) => Promise<IdxTransaction>;
+    unlockAccount: (options?: AccountUnlockOptions) => Promise<IdxTransaction>;
     poll: (options?: IdxPollOptions) => Promise<IdxTransaction>;
+    start: (options?: IdxOptions) => Promise<IdxTransaction>;
+    canProceed(options?: {
+        state?: string;
+    }): boolean;
     proceed: (options?: ProceedOptions) => Promise<IdxTransaction>;
     cancel: (options?: CancelOptions) => Promise<IdxTransaction>;
+    getFlow(): FlowIdentifier | undefined;
+    setFlow(flow: FlowIdentifier): void;
     startTransaction: (options?: IdxOptions) => Promise<IdxTransaction>;
-    recoverPassword: (options?: PasswordRecoveryOptions) => Promise<IdxTransaction>;
+    isInteractionRequired: (hashOrSearch?: string) => boolean;
+    isInteractionRequiredError: (error: Error) => boolean;
     handleInteractionCodeRedirect: (url: string) => Promise<void>;
-    getFlow(): FlowIdentifier;
-    setFlow(flow: FlowIdentifier): void;
-    canProceed(options?: {
-        state?: string;
-    }): boolean;
+    isEmailVerifyCallback: (search: string) => boolean;
+    parseEmailVerifyCallback: (search: string) => EmailVerifyCallbackResponse;
+    handleEmailVerifyCallback: (search: string) => Promise<IdxTransaction | undefined>;
+    isEmailVerifyCallbackError: (error: Error) => boolean;
+    getSavedTransactionMeta: (options?: TransactionMetaOptions) => IdxTransactionMeta | undefined;
+    createTransactionMeta: (options?: TransactionMetaOptions) => Promise<IdxTransactionMeta>;
+    getTransactionMeta: (options?: TransactionMetaOptions) => Promise<IdxTransactionMeta>;
+    saveTransactionMeta: (meta: unknown) => void;
+    clearTransactionMeta: () => void;
+    isTransactionMetaValid: (meta: unknown) => boolean;
 }

package/lib/types/index.d.ts

@@ -22,5 +22,5 @@ export * from './OktaAuthOptions';
 export * from './Storage';
 export * from './Token';
 export * from './TokenManager';
+export * from './Service';
 export * from './UserClaims';
-export * from './AuthState';

package/lib/util/console.d.ts

@@ -9,7 +9,7 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-export declare function getNativeConsole(): Console;
+export declare function getNativeConsole(): Console | undefined;
 export declare function getConsole(): Console | {
     log: () => void;
     warn: () => void;

package/lib/util/index.d.ts

@@ -10,7 +10,6 @@
  * See the License for the specific language governing permissions and limitations under the License.
  */
 export * from './console';
-export * from './emailVerify';
 export * from './misc';
 export * from './object';
 export * from './types';

package/lib/util/sharedStorage.d.ts

@@ -1,5 +1,5 @@
 import { TransactionMeta } from '../types';
-import StorageManager from '../StorageManager';
+import { StorageManager } from '../StorageManager';
 export declare function pruneSharedStorage(storageManager: StorageManager): void;
 export declare function saveTransactionToSharedStorage(storageManager: StorageManager, state: string, meta: TransactionMeta): void;
 export declare function loadTransactionFromSharedStorage(storageManager: StorageManager, state: string): any;

package/lib/util/types.d.ts

@@ -13,4 +13,4 @@ export declare function isString(obj: any): obj is string;
 export declare function isObject(obj: any): obj is object;
 export declare function isNumber(obj: any): obj is number;
 export declare function isFunction(fn: any): fn is Function;
-export declare function isPromise(obj: any): boolean;
+export declare function isPromise(obj: any): any;

package/lib/util/url.d.ts

@@ -10,7 +10,7 @@
  * See the License for the specific language governing permissions and limitations under the License.
  */
 export declare function isAbsoluteUrl(url: any): boolean;
-export declare function toAbsoluteUrl(url: string, baseUrl: any): string;
-export declare function toRelativeUrl(url: string, baseUrl: any): string;
+export declare function toAbsoluteUrl(url: string | undefined, baseUrl: any): string;
+export declare function toRelativeUrl(url: string | undefined, baseUrl: any): string;
 export declare function toQueryString(obj: any): string;
 export declare function removeTrailingSlash(path: any): any;

package/package.json

@@ -2,13 +2,23 @@
   "private": false,
   "name": "@okta/okta-auth-js",
   "description": "The Okta Auth SDK",
-  "version": "5.11.0",
+  "version": "6.2.0",
   "homepage": "https://github.com/okta/okta-auth-js",
   "license": "Apache-2.0",
   "main": "cjs/index.js",
-  "module": "esm/index.js",
+  "module": "esm/esm.node.mjs",
   "browser": "dist/okta-auth-js.umd.js",
   "types": "lib/index.d.ts",
+  "exports": {
+    "node": {
+      "import": "./esm/esm.node.mjs",
+      "require": "./cjs/index.js"
+    },
+    "browser": {
+      "import": "./esm/esm.browser.js"
+    },
+    "default": "./dist/okta-auth-js.umd.js"
+  },
   "repository": {
     "type": "git",
     "url": "https://github.com/okta/okta-auth-js.git"
@@ -20,7 +30,7 @@
     "banners": "node ./scripts/maintain-banners.js",
     "clean": "yarn clean:build",
     "clean:build": "rimraf build && rimraf build2",
-    "dev": "webpack --config webpack.dev.config.js",
+    "dev": "NODE_ENV=development yarn build:esm --watch",
     "lint": "eslint .",
     "tsd": "tsd",
     "lint:report": "eslint -f checkstyle -o ./build2/reports/lint/eslint-checkstyle-result.xml .",
@@ -36,6 +46,9 @@
     "test:report": "yarn test --ci --silent || true",
     "test:samples": "yarn workspace @okta/test.e2e.samples start",
     "test:integration": "jest --config ./jest.integration.js",
+    "test:bundle:esm:browser": "cross-env BUNDLE_ENV=browser NODE_OPTIONS=--experimental-vm-modules jest --config ./jest.esm.mjs",
+    "test:bundle:esm:node": "cross-env BUNDLE_ENV=node NODE_OPTIONS=--experimental-vm-modules jest --config ./jest.esm.mjs",
+    "test:bundle:cjs": "cross-env BUNDLE_ENV=node jest --config ./jest.cjs.js",
     "build": "node scripts/build.js",
     "build:cdn": "cross-env NODE_ENV=production webpack --config webpack.cdn.config.js",
     "build:web": "cross-env NODE_ENV=production webpack --config webpack.config.js",
@@ -70,14 +83,16 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "@okta/okta-idx-js": "0.23.0",
+    "@babel/runtime-corejs3": "^7.17.0",
     "@peculiar/webcrypto": "1.1.6",
     "Base64": "1.1.0",
     "atob": "^2.1.2",
+    "broadcast-channel": "^4.10.0",
     "btoa": "^1.2.1",
     "core-js": "^3.6.5",
-    "cross-fetch": "^3.0.6",
-    "js-cookie": "2.2.1",
+    "cross-fetch": "^3.1.5",
+    "js-cookie": "^3.0.1",
+    "jsonpath-plus": "^6.0.1",
     "node-cache": "^5.1.2",
     "p-cancelable": "^2.0.0",
     "text-encoding": "^0.7.0",
@@ -94,11 +109,11 @@
     "@babel/plugin-transform-typescript": "^7.10.5",
     "@babel/preset-env": "^7.8.2",
     "@babel/preset-typescript": "^7.10.4",
-    "@okta/okta-signin-widget": "5.13.0",
+    "@okta/okta-signin-widget": "6.0.0",
     "@rollup/plugin-alias": "^3.1.8",
     "@rollup/plugin-babel": "^5.3.0",
     "@rollup/plugin-replace": "^3.0.0",
-    "@types/jest": "^25.2.3",
+    "@types/jest": "^27.4.0",
     "@types/node": "^14.0.3",
     "@typescript-eslint/eslint-plugin": "^2.34.0",
     "@typescript-eslint/parser": "^2.34.0",
@@ -109,14 +124,16 @@
     "chalk": "2.4.2",
     "cross-env": "^5.1.1",
     "eslint": "^7.1.0",
+    "eslint-import-resolver-typescript": "^2.5.0",
     "eslint-plugin-compat": "^3.3.0",
+    "eslint-plugin-import": "^2.25.4",
     "eslint-plugin-jasmine": "^2.10.1",
     "eslint-plugin-jsdoc": "^25.4.2",
     "eslint-plugin-node": "^11.1.0",
     "globby": "^6.1.0",
     "istanbul-instrumenter-loader": "^3.0.1",
     "jasmine-ajax": "^4.0.0",
-    "jest": "^26.6.3",
+    "jest": "^27.5.1",
     "jest-junit": "^9.0.0",
     "json-loader": "0.5.4",
     "lodash": "4.17.20",
@@ -125,7 +142,7 @@
     "rollup-plugin-license": "^2.6.0",
     "rollup-plugin-typescript2": "^0.30.0",
     "shelljs": "0.8.4",
-    "ts-jest": "^26.4.3",
+    "ts-jest": "^27.1.3",
     "ts-loader": "^9.2.6",
     "tsd": "^0.17.0",
     "typescript": "^4.2.3",
@@ -169,8 +186,8 @@
     }
   },
   "okta": {
-    "commitSha": "260aa263e5979e25661158077403d10a8c3ae12b",
-    "fullVersion": "5.11.0-g260aa26",
-    "testedSha": "d3d7b7449d91a1591ce9512732b5b26e9b9e875d"
+    "commitSha": "c1146b767599072407241c5d85486f00a5a3d0b1",
+    "fullVersion": "6.2.0-gc1146b7",
+    "testedSha": "f1acdd465de85c20d3ac73cdba345c926a94caf4"
   }
 }

package/polyfill/index.js

@@ -14,6 +14,7 @@
 // Polyfills objects needed to support IE 11+
 require('core-js/features/object/assign');
 require('core-js/features/object/values');
+require('core-js/features/object/from-entries');
 require('core-js/es/promise');
 require('core-js/es/typed-array/uint8-array');
 require('core-js/features/array/from');