@okta/okta-auth-js 5.11.0 → 6.2.0

package/cjs/idx/flow/FlowSpecification.js

@@ -8,24 +8,43 @@ var _PasswordRecoveryFlow = require("./PasswordRecoveryFlow");
 
 var _RegistrationFlow = require("./RegistrationFlow");
 
-function getFlowSpecification(oktaAuth, flow = 'proceed') {
-  let remediators, actions;
+var _AccountUnlockFlow = require("./AccountUnlockFlow");
+
+// eslint-disable-next-line complexity
+function getFlowSpecification(oktaAuth, flow = 'default') {
+  let remediators,
+      actions,
+      withCredentials = true;
 
   switch (flow) {
     case 'register':
     case 'signup':
     case 'enrollProfile':
       remediators = _RegistrationFlow.RegistrationFlow;
+      withCredentials = false;
       break;
 
     case 'recoverPassword':
     case 'resetPassword':
       remediators = _PasswordRecoveryFlow.PasswordRecoveryFlow;
       actions = ['currentAuthenticator-recover', 'currentAuthenticatorEnrollment-recover'];
+      withCredentials = false;
+      break;
+
+    case 'unlockAccount':
+      remediators = _AccountUnlockFlow.AccountUnlockFlow;
+      withCredentials = false;
+      actions = ['unlock-account'];
+      break;
+
+    case 'authenticate':
+    case 'login':
+    case 'signin':
+      remediators = _AuthenticationFlow.AuthenticationFlow;
       break;
 
     default:
-      // authenticate
+      // default case has no flow monitor
       remediators = _AuthenticationFlow.AuthenticationFlow;
       break;
   }
@@ -33,7 +52,8 @@ function getFlowSpecification(oktaAuth, flow = 'proceed') {
   return {
     flow,
     remediators,
-    actions
+    actions,
+    withCredentials
   };
 }
 //# sourceMappingURL=FlowSpecification.js.map

package/cjs/idx/flow/FlowSpecification.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../lib/idx/flow/FlowSpecification.ts"],"names":["getFlowSpecification","oktaAuth","flow","remediators","actions","RegistrationFlow","PasswordRecoveryFlow","AuthenticationFlow"],"mappings":";;;;AACA;;AACA;;AACA;;AASO,SAASA,oBAAT,CAA8BC,QAA9B,EAAkDC,IAAoB,GAAG,SAAzE,EAAuG;AAC5G,MAAIC,WAAJ,EAAiBC,OAAjB;;AACA,UAAQF,IAAR;AACE,SAAK,UAAL;AACA,SAAK,QAAL;AACA,SAAK,eAAL;AACEC,MAAAA,WAAW,GAAGE,kCAAd;AACA;;AACF,SAAK,iBAAL;AACA,SAAK,eAAL;AACEF,MAAAA,WAAW,GAAGG,0CAAd;AACAF,MAAAA,OAAO,GAAG,CACR,8BADQ,EAER,wCAFQ,CAAV;AAIA;;AACF;AACE;AACAD,MAAAA,WAAW,GAAGI,sCAAd;AACA;AAjBJ;;AAmBA,SAAO;AAAEL,IAAAA,IAAF;AAAQC,IAAAA,WAAR;AAAqBC,IAAAA;AAArB,GAAP;AACD","sourcesContent":["import { OktaAuth, FlowIdentifier } from '../../types';\nimport { AuthenticationFlow } from './AuthenticationFlow';\nimport { PasswordRecoveryFlow } from './PasswordRecoveryFlow';\nimport { RegistrationFlow } from './RegistrationFlow';\nimport { RemediationFlow } from './RemediationFlow';\n\nexport interface FlowSpecification {\n  flow: FlowIdentifier;\n  remediators: RemediationFlow;\n  actions?: string[];\n}\n\nexport function getFlowSpecification(oktaAuth: OktaAuth, flow: FlowIdentifier = 'proceed'): FlowSpecification {\n  let remediators, actions;\n  switch (flow) {\n    case 'register':\n    case 'signup':\n    case 'enrollProfile':\n      remediators = RegistrationFlow;\n      break;\n    case 'recoverPassword':\n    case 'resetPassword':\n      remediators = PasswordRecoveryFlow;\n      actions = [\n        'currentAuthenticator-recover', \n        'currentAuthenticatorEnrollment-recover'\n      ];\n      break;\n    default:\n      // authenticate\n      remediators = AuthenticationFlow;\n      break;\n  }\n  return { flow, remediators, actions };\n}\n"],"file":"FlowSpecification.js"}
+{"version":3,"sources":["../../../../lib/idx/flow/FlowSpecification.ts"],"names":["getFlowSpecification","oktaAuth","flow","remediators","actions","withCredentials","RegistrationFlow","PasswordRecoveryFlow","AccountUnlockFlow","AuthenticationFlow"],"mappings":";;;;AACA;;AACA;;AACA;;AACA;;AAUA;AACO,SAASA,oBAAT,CAA8BC,QAA9B,EAA2DC,IAAoB,GAAG,SAAlF,EAAgH;AACrH,MAAIC,WAAJ;AAAA,MAAiBC,OAAjB;AAAA,MAA0BC,eAAe,GAAG,IAA5C;;AACA,UAAQH,IAAR;AACE,SAAK,UAAL;AACA,SAAK,QAAL;AACA,SAAK,eAAL;AACEC,MAAAA,WAAW,GAAGG,kCAAd;AACAD,MAAAA,eAAe,GAAG,KAAlB;AACA;;AACF,SAAK,iBAAL;AACA,SAAK,eAAL;AACEF,MAAAA,WAAW,GAAGI,0CAAd;AACAH,MAAAA,OAAO,GAAG,CACR,8BADQ,EAER,wCAFQ,CAAV;AAIAC,MAAAA,eAAe,GAAG,KAAlB;AACA;;AACF,SAAK,eAAL;AACEF,MAAAA,WAAW,GAAGK,oCAAd;AACAH,MAAAA,eAAe,GAAG,KAAlB;AACAD,MAAAA,OAAO,GAAG,CACR,gBADQ,CAAV;AAGA;;AACF,SAAK,cAAL;AACA,SAAK,OAAL;AACA,SAAK,QAAL;AACED,MAAAA,WAAW,GAAGM,sCAAd;AACA;;AACF;AACE;AACAN,MAAAA,WAAW,GAAGM,sCAAd;AACA;AA/BJ;;AAiCA,SAAO;AAAEP,IAAAA,IAAF;AAAQC,IAAAA,WAAR;AAAqBC,IAAAA,OAArB;AAA8BC,IAAAA;AAA9B,GAAP;AACD","sourcesContent":["import { OktaAuthInterface, FlowIdentifier } from '../../types';\nimport { AuthenticationFlow } from './AuthenticationFlow';\nimport { PasswordRecoveryFlow } from './PasswordRecoveryFlow';\nimport { RegistrationFlow } from './RegistrationFlow';\nimport { AccountUnlockFlow } from './AccountUnlockFlow';\nimport { RemediationFlow } from './RemediationFlow';\n\nexport interface FlowSpecification {\n  flow: FlowIdentifier;\n  remediators: RemediationFlow;\n  actions?: string[];\n  withCredentials?: boolean;\n}\n\n// eslint-disable-next-line complexity\nexport function getFlowSpecification(oktaAuth: OktaAuthInterface, flow: FlowIdentifier = 'default'): FlowSpecification {\n  let remediators, actions, withCredentials = true;\n  switch (flow) {\n    case 'register':\n    case 'signup':\n    case 'enrollProfile':\n      remediators = RegistrationFlow;\n      withCredentials = false;\n      break;\n    case 'recoverPassword':\n    case 'resetPassword':\n      remediators = PasswordRecoveryFlow;\n      actions = [\n        'currentAuthenticator-recover', \n        'currentAuthenticatorEnrollment-recover'\n      ];\n      withCredentials = false;\n      break;\n    case 'unlockAccount':\n      remediators = AccountUnlockFlow;\n      withCredentials = false;\n      actions = [\n        'unlock-account'\n      ];\n      break;\n    case 'authenticate':\n    case 'login':\n    case 'signin':\n      remediators = AuthenticationFlow;\n      break;\n    default:\n      // default case has no flow monitor\n      remediators = AuthenticationFlow;\n      break;\n  }\n  return { flow, remediators, actions, withCredentials };\n}\n"],"file":"FlowSpecification.js"}

package/cjs/idx/flow/PasswordRecoveryFlow.js

@@ -19,10 +19,13 @@ const PasswordRecoveryFlow = {
   'identify': _remediators.Identify,
   'identify-recovery': _remediators.Identify,
   'select-authenticator-authenticate': _remediators.SelectAuthenticatorAuthenticate,
+  'select-authenticator-enroll': _remediators.SelectAuthenticatorEnroll,
   'challenge-authenticator': _remediators.ChallengeAuthenticator,
   'authenticator-verification-data': _remediators.AuthenticatorVerificationData,
+  'authenticator-enrollment-data': _remediators.AuthenticatorEnrollmentData,
   'reset-authenticator': _remediators.ResetAuthenticator,
-  'reenroll-authenticator': _remediators.ReEnrollAuthenticator
+  'reenroll-authenticator': _remediators.ReEnrollAuthenticator,
+  'enroll-poll': _remediators.EnrollPoll
 };
 exports.PasswordRecoveryFlow = PasswordRecoveryFlow;
 //# sourceMappingURL=PasswordRecoveryFlow.js.map

package/cjs/idx/flow/PasswordRecoveryFlow.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../lib/idx/flow/PasswordRecoveryFlow.ts"],"names":["PasswordRecoveryFlow","Identify","SelectAuthenticatorAuthenticate","ChallengeAuthenticator","AuthenticatorVerificationData","ResetAuthenticator","ReEnrollAuthenticator"],"mappings":";;;;AAcA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAaO,MAAMA,oBAAqC,GAAG;AACnD,cAAYC,qBADuC;AAEnD,uBAAqBA,qBAF8B;AAGnD,uCAAqCC,4CAHc;AAInD,6BAA2BC,mCAJwB;AAKnD,qCAAmCC,0CALgB;AAMnD,yBAAuBC,+BAN4B;AAOnD,4BAA0BC;AAPyB,CAA9C","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { RemediationFlow } from './RemediationFlow';\nimport {\n  Identify,\n  SelectAuthenticatorAuthenticate,\n  ChallengeAuthenticator,\n  AuthenticatorVerificationData,\n  ResetAuthenticator,\n  ReEnrollAuthenticator,\n} from '../remediators';\n\nexport const PasswordRecoveryFlow: RemediationFlow = {\n  'identify': Identify,\n  'identify-recovery': Identify,\n  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,\n  'challenge-authenticator': ChallengeAuthenticator,\n  'authenticator-verification-data': AuthenticatorVerificationData,\n  'reset-authenticator': ResetAuthenticator,\n  'reenroll-authenticator': ReEnrollAuthenticator,\n};\n"],"file":"PasswordRecoveryFlow.js"}
+{"version":3,"sources":["../../../../lib/idx/flow/PasswordRecoveryFlow.ts"],"names":["PasswordRecoveryFlow","Identify","SelectAuthenticatorAuthenticate","SelectAuthenticatorEnroll","ChallengeAuthenticator","AuthenticatorVerificationData","AuthenticatorEnrollmentData","ResetAuthenticator","ReEnrollAuthenticator","EnrollPoll"],"mappings":";;;;AAcA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAgBO,MAAMA,oBAAqC,GAAG;AACnD,cAAYC,qBADuC;AAEnD,uBAAqBA,qBAF8B;AAGnD,uCAAqCC,4CAHc;AAInD,iCAA+BC,sCAJoB;AAKnD,6BAA2BC,mCALwB;AAMnD,qCAAmCC,0CANgB;AAOnD,mCAAiCC,wCAPkB;AAQnD,yBAAuBC,+BAR4B;AASnD,4BAA0BC,kCATyB;AAUnD,iBAAeC;AAVoC,CAA9C","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { RemediationFlow } from './RemediationFlow';\nimport {\n  Identify,\n  SelectAuthenticatorAuthenticate,\n  ChallengeAuthenticator,\n  AuthenticatorVerificationData,\n  ResetAuthenticator,\n  ReEnrollAuthenticator,\n  SelectAuthenticatorEnroll,\n  AuthenticatorEnrollmentData,\n  EnrollPoll\n} from '../remediators';\n\nexport const PasswordRecoveryFlow: RemediationFlow = {\n  'identify': Identify,\n  'identify-recovery': Identify,\n  'select-authenticator-authenticate': SelectAuthenticatorAuthenticate,\n  'select-authenticator-enroll': SelectAuthenticatorEnroll,\n  'challenge-authenticator': ChallengeAuthenticator,\n  'authenticator-verification-data': AuthenticatorVerificationData,\n  'authenticator-enrollment-data': AuthenticatorEnrollmentData,\n  'reset-authenticator': ResetAuthenticator,\n  'reenroll-authenticator': ReEnrollAuthenticator,\n  'enroll-poll': EnrollPoll,\n};\n"],"file":"PasswordRecoveryFlow.js"}

package/cjs/idx/flow/RegistrationFlow.js

@@ -21,6 +21,8 @@ const RegistrationFlow = {
   'authenticator-enrollment-data': _remediators.AuthenticatorEnrollmentData,
   'select-authenticator-enroll': _remediators.SelectAuthenticatorEnroll,
   'enroll-poll': _remediators.EnrollPoll,
+  'select-enrollment-channel': _remediators.SelectEnrollmentChannel,
+  'enrollment-channel-data': _remediators.EnrollmentChannelData,
   'enroll-authenticator': _remediators.EnrollAuthenticator,
   'skip': _remediators.Skip
 };

package/cjs/idx/flow/RegistrationFlow.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../lib/idx/flow/RegistrationFlow.ts"],"names":["RegistrationFlow","SelectEnrollProfile","EnrollProfile","AuthenticatorEnrollmentData","SelectAuthenticatorEnroll","EnrollPoll","EnrollAuthenticator","Skip"],"mappings":";;;;AAcA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAcO,MAAMA,gBAAiC,GAAG;AAC/C,2BAAyBC,gCADsB;AAE/C,oBAAkBC,0BAF6B;AAG/C,mCAAiCC,wCAHc;AAI/C,iCAA+BC,sCAJgB;AAK/C,iBAAeC,uBALgC;AAM/C,0BAAwBC,gCANuB;AAO/C,UAAQC;AAPuC,CAA1C","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { RemediationFlow } from './RemediationFlow';\nimport { \n  SelectEnrollProfile,\n  EnrollPoll,\n  EnrollProfile,\n  SelectAuthenticatorEnroll,\n  EnrollAuthenticator,\n  AuthenticatorEnrollmentData,\n  Skip,\n} from '../remediators';\n\nexport const RegistrationFlow: RemediationFlow = {\n  'select-enroll-profile': SelectEnrollProfile,\n  'enroll-profile': EnrollProfile,\n  'authenticator-enrollment-data': AuthenticatorEnrollmentData,\n  'select-authenticator-enroll': SelectAuthenticatorEnroll,\n  'enroll-poll': EnrollPoll,\n  'enroll-authenticator': EnrollAuthenticator,\n  'skip': Skip,\n};\n"],"file":"RegistrationFlow.js"}
+{"version":3,"sources":["../../../../lib/idx/flow/RegistrationFlow.ts"],"names":["RegistrationFlow","SelectEnrollProfile","EnrollProfile","AuthenticatorEnrollmentData","SelectAuthenticatorEnroll","EnrollPoll","SelectEnrollmentChannel","EnrollmentChannelData","EnrollAuthenticator","Skip"],"mappings":";;;;AAcA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAgBO,MAAMA,gBAAiC,GAAG;AAC/C,2BAAyBC,gCADsB;AAE/C,oBAAkBC,0BAF6B;AAG/C,mCAAiCC,wCAHc;AAI/C,iCAA+BC,sCAJgB;AAK/C,iBAAeC,uBALgC;AAM/C,+BAA6BC,oCANkB;AAO/C,6BAA2BC,kCAPoB;AAQ/C,0BAAwBC,gCARuB;AAS/C,UAAQC;AATuC,CAA1C","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { RemediationFlow } from './RemediationFlow';\nimport { \n  SelectEnrollProfile,\n  EnrollPoll,\n  SelectEnrollmentChannel,\n  EnrollmentChannelData,\n  EnrollProfile,\n  SelectAuthenticatorEnroll,\n  EnrollAuthenticator,\n  AuthenticatorEnrollmentData,\n  Skip,\n} from '../remediators';\n\nexport const RegistrationFlow: RemediationFlow = {\n  'select-enroll-profile': SelectEnrollProfile,\n  'enroll-profile': EnrollProfile,\n  'authenticator-enrollment-data': AuthenticatorEnrollmentData,\n  'select-authenticator-enroll': SelectAuthenticatorEnroll,\n  'enroll-poll': EnrollPoll,\n  'select-enrollment-channel': SelectEnrollmentChannel,\n  'enrollment-channel-data': EnrollmentChannelData,\n  'enroll-authenticator': EnrollAuthenticator,\n  'skip': Skip,\n};\n"],"file":"RegistrationFlow.js"}

package/cjs/idx/flow/index.js

@@ -1,8 +1,10 @@
 "use strict";
 
+var _Object$keys = require("@babel/runtime-corejs3/core-js-stable/object/keys");
+
 var _AuthenticationFlow = require("./AuthenticationFlow");
 
-Object.keys(_AuthenticationFlow).forEach(function (key) {
+_Object$keys(_AuthenticationFlow).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
   if (key in exports && exports[key] === _AuthenticationFlow[key]) return;
   Object.defineProperty(exports, key, {
@@ -15,7 +17,7 @@ Object.keys(_AuthenticationFlow).forEach(function (key) {
 
 var _FlowSpecification = require("./FlowSpecification");
 
-Object.keys(_FlowSpecification).forEach(function (key) {
+_Object$keys(_FlowSpecification).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
   if (key in exports && exports[key] === _FlowSpecification[key]) return;
   Object.defineProperty(exports, key, {
@@ -28,7 +30,7 @@ Object.keys(_FlowSpecification).forEach(function (key) {
 
 var _PasswordRecoveryFlow = require("./PasswordRecoveryFlow");
 
-Object.keys(_PasswordRecoveryFlow).forEach(function (key) {
+_Object$keys(_PasswordRecoveryFlow).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
   if (key in exports && exports[key] === _PasswordRecoveryFlow[key]) return;
   Object.defineProperty(exports, key, {
@@ -41,7 +43,7 @@ Object.keys(_PasswordRecoveryFlow).forEach(function (key) {
 
 var _RegistrationFlow = require("./RegistrationFlow");
 
-Object.keys(_RegistrationFlow).forEach(function (key) {
+_Object$keys(_RegistrationFlow).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
   if (key in exports && exports[key] === _RegistrationFlow[key]) return;
   Object.defineProperty(exports, key, {
@@ -52,9 +54,22 @@ Object.keys(_RegistrationFlow).forEach(function (key) {
   });
 });
 
+var _AccountUnlockFlow = require("./AccountUnlockFlow");
+
+_Object$keys(_AccountUnlockFlow).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _AccountUnlockFlow[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _AccountUnlockFlow[key];
+    }
+  });
+});
+
 var _RemediationFlow = require("./RemediationFlow");
 
-Object.keys(_RemediationFlow).forEach(function (key) {
+_Object$keys(_RemediationFlow).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
   if (key in exports && exports[key] === _RemediationFlow[key]) return;
   Object.defineProperty(exports, key, {

package/cjs/idx/flow/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../lib/idx/flow/index.ts"],"names":[],"mappings":";;AAYA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport * from './AuthenticationFlow';\nexport * from './FlowSpecification';\nexport * from './PasswordRecoveryFlow';\nexport * from './RegistrationFlow';\nexport * from './RemediationFlow';\n"],"file":"index.js"}
+{"version":3,"sources":["../../../../lib/idx/flow/index.ts"],"names":[],"mappings":";;;;AAYA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AACA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport * from './AuthenticationFlow';\nexport * from './FlowSpecification';\nexport * from './PasswordRecoveryFlow';\nexport * from './RegistrationFlow';\nexport * from './AccountUnlockFlow';\nexport * from './RemediationFlow';\n"],"file":"index.js"}

package/cjs/idx/handleInteractionCodeRedirect.js

@@ -1,7 +1,11 @@
 "use strict";
 
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
 exports.handleInteractionCodeRedirect = handleInteractionCodeRedirect;
 
+var _url = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/url"));
+
 var _errors = require("../errors");
 
 /*!
@@ -30,13 +34,14 @@ async function handleInteractionCodeRedirect(authClient, url) {
     searchParams // URL API has been added to the polyfill
     // eslint-disable-next-line compat/compat
 
-  } = new URL(url);
+  } = new _url.default(url);
   const state = searchParams.get('state');
   const interactionCode = searchParams.get('interaction_code'); // Error handling
 
   const error = searchParams.get('error');
 
   if (error) {
+    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
     throw new _errors.OAuthError(error, searchParams.get('error_description'));
   }
 

package/cjs/idx/handleInteractionCodeRedirect.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../lib/idx/handleInteractionCodeRedirect.ts"],"names":["handleInteractionCodeRedirect","authClient","url","meta","transactionManager","load","AuthSdkError","codeVerifier","state","savedState","searchParams","URL","get","interactionCode","error","OAuthError","tokens","token","exchangeCodeForTokens","tokenManager","setTokens"],"mappings":";;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAOO,eAAeA,6BAAf,CACLC,UADK,EAELC,GAFK,EAGU;AACf,QAAMC,IAAI,GAAGF,UAAU,CAACG,kBAAX,CAA8BC,IAA9B,EAAb;;AACA,MAAI,CAACF,IAAL,EAAW;AACT,UAAM,IAAIG,oBAAJ,CAAiB,0CAAjB,CAAN;AACD;;AAED,QAAM;AACJC,IAAAA,YADI;AAEJC,IAAAA,KAAK,EAAEC;AAFH,MAGFN,IAHJ;AAIA,QAAM;AACJO,IAAAA,YADI,CAEN;AACA;;AAHM,MAIF,IAAIC,GAAJ,CAAQT,GAAR,CAJJ;AAKA,QAAMM,KAAK,GAAGE,YAAY,CAACE,GAAb,CAAiB,OAAjB,CAAd;AACA,QAAMC,eAAe,GAAGH,YAAY,CAACE,GAAb,CAAiB,kBAAjB,CAAxB,CAhBe,CAkBf;;AACA,QAAME,KAAK,GAAGJ,YAAY,CAACE,GAAb,CAAiB,OAAjB,CAAd;;AACA,MAAIE,KAAJ,EAAW;AACT,UAAM,IAAIC,kBAAJ,CAAeD,KAAf,EAAsBJ,YAAY,CAACE,GAAb,CAAiB,mBAAjB,CAAtB,CAAN;AACD;;AACD,MAAIJ,KAAK,KAAKC,UAAd,EAA0B;AACxB,UAAM,IAAIH,oBAAJ,CAAiB,6DAAjB,CAAN;AACD;;AACD,MAAI,CAACO,eAAL,EAAsB;AACpB,UAAM,IAAIP,oBAAJ,CAAiB,+CAAjB,CAAN;AACD,GA5Bc,CA8Bf;;;AACA,QAAM;AAAEU,IAAAA;AAAF,MAAa,MAAMf,UAAU,CAACgB,KAAX,CAAiBC,qBAAjB,CAAuC;AAAEL,IAAAA,eAAF;AAAmBN,IAAAA;AAAnB,GAAvC,CAAzB;AACAN,EAAAA,UAAU,CAACkB,YAAX,CAAwBC,SAAxB,CAAkCJ,MAAlC;AACD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { AuthSdkError, OAuthError } from '../errors';\nimport { OktaAuth } from '..';\nimport {IdxTransactionMeta} from '../types';\n\nexport async function handleInteractionCodeRedirect(\n  authClient: OktaAuth, \n  url: string\n): Promise<void> {\n  const meta = authClient.transactionManager.load() as IdxTransactionMeta;\n  if (!meta) {\n    throw new AuthSdkError('No transaction data was found in storage');\n  }\n\n  const { \n    codeVerifier,\n    state: savedState \n  } = meta;\n  const { \n    searchParams\n  // URL API has been added to the polyfill\n  // eslint-disable-next-line compat/compat\n  } = new URL(url); \n  const state = searchParams.get('state');\n  const interactionCode = searchParams.get('interaction_code');\n\n  // Error handling\n  const error = searchParams.get('error');\n  if (error) {\n    throw new OAuthError(error, searchParams.get('error_description'));\n  }\n  if (state !== savedState) {\n    throw new AuthSdkError('State in redirect uri does not match with transaction state');\n  }\n  if (!interactionCode) {\n    throw new AuthSdkError('Unable to parse interaction_code from the url');\n  }\n  \n  // Save tokens to storage\n  const { tokens } = await authClient.token.exchangeCodeForTokens({ interactionCode, codeVerifier });\n  authClient.tokenManager.setTokens(tokens);\n}"],"file":"handleInteractionCodeRedirect.js"}
+{"version":3,"sources":["../../../lib/idx/handleInteractionCodeRedirect.ts"],"names":["handleInteractionCodeRedirect","authClient","url","meta","transactionManager","load","AuthSdkError","codeVerifier","state","savedState","searchParams","get","interactionCode","error","OAuthError","tokens","token","exchangeCodeForTokens","tokenManager","setTokens"],"mappings":";;;;;;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAOO,eAAeA,6BAAf,CACLC,UADK,EAELC,GAFK,EAGU;AACf,QAAMC,IAAI,GAAGF,UAAU,CAACG,kBAAX,CAA8BC,IAA9B,EAAb;;AACA,MAAI,CAACF,IAAL,EAAW;AACT,UAAM,IAAIG,oBAAJ,CAAiB,0CAAjB,CAAN;AACD;;AAED,QAAM;AACJC,IAAAA,YADI;AAEJC,IAAAA,KAAK,EAAEC;AAFH,MAGFN,IAHJ;AAIA,QAAM;AACJO,IAAAA,YADI,CAEN;AACA;;AAHM,MAIF,iBAAQR,GAAR,CAJJ;AAKA,QAAMM,KAAK,GAAGE,YAAY,CAACC,GAAb,CAAiB,OAAjB,CAAd;AACA,QAAMC,eAAe,GAAGF,YAAY,CAACC,GAAb,CAAiB,kBAAjB,CAAxB,CAhBe,CAkBf;;AACA,QAAME,KAAK,GAAGH,YAAY,CAACC,GAAb,CAAiB,OAAjB,CAAd;;AACA,MAAIE,KAAJ,EAAW;AACT;AACA,UAAM,IAAIC,kBAAJ,CAAeD,KAAf,EAAsBH,YAAY,CAACC,GAAb,CAAiB,mBAAjB,CAAtB,CAAN;AACD;;AACD,MAAIH,KAAK,KAAKC,UAAd,EAA0B;AACxB,UAAM,IAAIH,oBAAJ,CAAiB,6DAAjB,CAAN;AACD;;AACD,MAAI,CAACM,eAAL,EAAsB;AACpB,UAAM,IAAIN,oBAAJ,CAAiB,+CAAjB,CAAN;AACD,GA7Bc,CA+Bf;;;AACA,QAAM;AAAES,IAAAA;AAAF,MAAa,MAAMd,UAAU,CAACe,KAAX,CAAiBC,qBAAjB,CAAuC;AAAEL,IAAAA,eAAF;AAAmBL,IAAAA;AAAnB,GAAvC,CAAzB;AACAN,EAAAA,UAAU,CAACiB,YAAX,CAAwBC,SAAxB,CAAkCJ,MAAlC;AACD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { AuthSdkError, OAuthError } from '../errors';\nimport { OktaAuth } from '..';\nimport {IdxTransactionMeta} from '../types';\n\nexport async function handleInteractionCodeRedirect(\n  authClient: OktaAuth, \n  url: string\n): Promise<void> {\n  const meta = authClient.transactionManager.load() as IdxTransactionMeta;\n  if (!meta) {\n    throw new AuthSdkError('No transaction data was found in storage');\n  }\n\n  const { \n    codeVerifier,\n    state: savedState \n  } = meta;\n  const { \n    searchParams\n  // URL API has been added to the polyfill\n  // eslint-disable-next-line compat/compat\n  } = new URL(url); \n  const state = searchParams.get('state');\n  const interactionCode = searchParams.get('interaction_code');\n\n  // Error handling\n  const error = searchParams.get('error');\n  if (error) {\n    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n    throw new OAuthError(error, searchParams.get('error_description')!);\n  }\n  if (state !== savedState) {\n    throw new AuthSdkError('State in redirect uri does not match with transaction state');\n  }\n  if (!interactionCode) {\n    throw new AuthSdkError('Unable to parse interaction_code from the url');\n  }\n  \n  // Save tokens to storage\n  const { tokens } = await authClient.token.exchangeCodeForTokens({ interactionCode, codeVerifier });\n  authClient.tokenManager.setTokens(tokens);\n}"],"file":"handleInteractionCodeRedirect.js"}

package/cjs/idx/headers.js

@@ -1,11 +1,16 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
 
 exports.setGlobalRequestInterceptor = setGlobalRequestInterceptor;
+exports.clearGlobalRequestInterceptor = clearGlobalRequestInterceptor;
 exports.createGlobalRequestInterceptor = createGlobalRequestInterceptor;
 
-var _oktaIdxJs = _interopRequireDefault(require("@okta/okta-idx-js"));
+var _assign = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/assign"));
+
+var _keys = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/keys"));
+
+var _idxJs = _interopRequireDefault(require("./idx-js"));
 
 /*!
  * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
@@ -24,7 +29,11 @@ var _oktaIdxJs = _interopRequireDefault(require("@okta/okta-idx-js"));
 // This means that multiple instances of OktaAuth will see the same header modifications
 // TODO: use AuthJS http agent for IDX API requests. OKTA-417473
 function setGlobalRequestInterceptor(fn) {
-  _oktaIdxJs.default.client.interceptors.request.use(fn);
+  _idxJs.default.client.interceptors.request.use(fn);
+}
+
+function clearGlobalRequestInterceptor() {
+  _idxJs.default.client.interceptors.request.clear();
 } // A factory which returns a function that can be passed to `setGlobalRequestInterceptor`
 
 
@@ -33,9 +42,16 @@ function createGlobalRequestInterceptor(sdk) {
     // Set user-agent and any other custom headers set in the options
     var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();
 
-    const headers = Object.assign({ ...oktaUserAgentHeader
+    const headers = (0, _assign.default)({ ...oktaUserAgentHeader
     }, sdk.options.headers);
-    Object.keys(headers).forEach(name => {
+    (0, _keys.default)(headers).forEach(name => {
+      // X-Device-Token may only be specified if the /interact request includes a `client_secret`
+      // which indicates a trusted client which is allowed to present this information on behalf of the end user. 
+      // https://oktainc.atlassian.net/browse/OKTA-441021
+      if (!sdk.options.clientSecret && name === 'X-Device-Token') {
+        return;
+      }
+
       requestConfig.headers[name] = headers[name];
     });
   };

package/cjs/idx/headers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../lib/idx/headers.ts"],"names":["setGlobalRequestInterceptor","fn","idx","client","interceptors","request","use","createGlobalRequestInterceptor","sdk","requestConfig","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","headers","Object","assign","options","keys","forEach","name"],"mappings":";;;;;;;AAkBA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAGO,SAASA,2BAAT,CAAqCC,EAArC,EAAyC;AAC9CC,qBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCC,GAAhC,CAAoCL,EAApC;AACD,C,CAED;;;AACO,SAASM,8BAAT,CAAwCC,GAAxC,EAAuD;AAC5D,SAAO,UAAUC,aAAV,EAAyB;AAC9B;AACA,QAAIC,mBAAmB,GAAGF,GAAG,CAACG,cAAJ,CAAmBC,aAAnB,EAA1B;;AACA,UAAMC,OAAO,GAAGC,MAAM,CAACC,MAAP,CAAc,EAC5B,GAAGL;AADyB,KAAd,EAEbF,GAAG,CAACQ,OAAJ,CAAYH,OAFC,CAAhB;AAGAC,IAAAA,MAAM,CAACG,IAAP,CAAYJ,OAAZ,EAAqBK,OAArB,CAA6BC,IAAI,IAAI;AACnCV,MAAAA,aAAa,CAACI,OAAd,CAAsBM,IAAtB,IAA8BN,OAAO,CAACM,IAAD,CAArC;AACD,KAFD;AAGD,GATD;AAUD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n// BETA - SUBJECT TO CHANGE\n// Currently we must modify request headers using the single instance of `idx.client.interceptors` exported from IDX-JS\n// This means that multiple instances of OktaAuth will see the same header modifications\n// TODO: use AuthJS http agent for IDX API requests. OKTA-417473\nimport { OktaAuth } from '../types';\nimport idx from '@okta/okta-idx-js';\nexport function setGlobalRequestInterceptor(fn) {\n  idx.client.interceptors.request.use(fn);\n}\n\n// A factory which returns a function that can be passed to `setGlobalRequestInterceptor`\nexport function createGlobalRequestInterceptor(sdk: OktaAuth) {\n  return function (requestConfig) {\n    // Set user-agent and any other custom headers set in the options\n    var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n    const headers = Object.assign({\n      ...oktaUserAgentHeader\n    }, sdk.options.headers);\n    Object.keys(headers).forEach(name => {\n      requestConfig.headers[name] = headers[name];\n    });\n  };\n}\n"],"file":"headers.js"}
+{"version":3,"sources":["../../../lib/idx/headers.ts"],"names":["setGlobalRequestInterceptor","fn","idx","client","interceptors","request","use","clearGlobalRequestInterceptor","clear","createGlobalRequestInterceptor","sdk","requestConfig","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","headers","options","forEach","name","clientSecret"],"mappings":";;;;;;;;;;;;AAkBA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAGO,SAASA,2BAAT,CAAqCC,EAArC,EAAyC;AAC9CC,iBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCC,GAAhC,CAAoCL,EAApC;AACD;;AAEM,SAASM,6BAAT,GAAyC;AAC9CL,iBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCG,KAAhC;AACD,C,CAED;;;AACO,SAASC,8BAAT,CAAwCC,GAAxC,EAAgE;AACrE,SAAO,UAAUC,aAAV,EAAyB;AAC9B;AACA,QAAIC,mBAAmB,GAAGF,GAAG,CAACG,cAAJ,CAAmBC,aAAnB,EAA1B;;AACA,UAAMC,OAAO,GAAG,qBAAc,EAC5B,GAAGH;AADyB,KAAd,EAEbF,GAAG,CAACM,OAAJ,CAAYD,OAFC,CAAhB;AAGA,uBAAYA,OAAZ,EAAqBE,OAArB,CAA6BC,IAAI,IAAI;AACnC;AACA;AACA;AACA,UAAI,CAACR,GAAG,CAACM,OAAJ,CAAYG,YAAb,IAA6BD,IAAI,KAAK,gBAA1C,EAA4D;AAC1D;AACD;;AACDP,MAAAA,aAAa,CAACI,OAAd,CAAsBG,IAAtB,IAA8BH,OAAO,CAACG,IAAD,CAArC;AACD,KARD;AASD,GAfD;AAgBD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n// BETA - SUBJECT TO CHANGE\n// Currently we must modify request headers using the single instance of `idx.client.interceptors` exported from IDX-JS\n// This means that multiple instances of OktaAuth will see the same header modifications\n// TODO: use AuthJS http agent for IDX API requests. OKTA-417473\nimport { OktaAuthInterface } from '../types';\nimport idx from './idx-js';\nexport function setGlobalRequestInterceptor(fn) {\n  idx.client.interceptors.request.use(fn);\n}\n\nexport function clearGlobalRequestInterceptor() {\n  idx.client.interceptors.request.clear();\n}\n\n// A factory which returns a function that can be passed to `setGlobalRequestInterceptor`\nexport function createGlobalRequestInterceptor(sdk: OktaAuthInterface) {\n  return function (requestConfig) {\n    // Set user-agent and any other custom headers set in the options\n    var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n    const headers = Object.assign({\n      ...oktaUserAgentHeader\n    }, sdk.options.headers);\n    Object.keys(headers).forEach(name => {\n      // X-Device-Token may only be specified if the /interact request includes a `client_secret`\n      // which indicates a trusted client which is allowed to present this information on behalf of the end user. \n      // https://oktainc.atlassian.net/browse/OKTA-441021\n      if (!sdk.options.clientSecret && name === 'X-Device-Token') {\n        return;\n      }\n      requestConfig.headers[name] = headers[name];\n    });\n  };\n}\n"],"file":"headers.js"}

package/cjs/idx/idx-js/client.js

@@ -0,0 +1,91 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.request = exports.HttpClient = exports.Interceptor = void 0;
+
+var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs3/helpers/defineProperty"));
+
+var _crossFetch = _interopRequireDefault(require("cross-fetch"));
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+// @ts-nocheck
+
+/**
+ * Reusable interceptor interface
+ */
+class Interceptor {
+  constructor() {
+    (0, _defineProperty2.default)(this, "handlers", []);
+  }
+
+  // Adds a new interceptor to our HttpClient
+  use(before) {
+    this.handlers.push({
+      before
+    });
+  } // Clears all interceptors
+
+
+  clear() {
+    this.handlers = [];
+  }
+
+}
+/**
+ * Singleton instance of the IdX HTTP Client
+ *
+ * Invoke the `use` method to add a new interceptor:
+ *   - client.interceptors.request.use((requestConfig) => { some logic });
+ */
+
+
+exports.Interceptor = Interceptor;
+const HttpClient = {
+  interceptors: {
+    request: new Interceptor()
+  }
+};
+exports.HttpClient = HttpClient;
+
+const request = async (target, {
+  method = 'POST',
+  headers = {},
+  credentials = 'include',
+  body
+}) => {
+  const requestOptions = {
+    url: target,
+    method,
+    headers: { ...headers
+    },
+    credentials,
+    body
+  };
+
+  if (HttpClient.interceptors) {
+    HttpClient.interceptors.request.handlers.forEach(interceptor => {
+      interceptor.before(requestOptions);
+    });
+  } // Extract the URL to adhere to the fetch API
+
+
+  const {
+    url
+  } = requestOptions;
+  delete requestOptions.url;
+  return (0, _crossFetch.default)(url, requestOptions);
+};
+
+exports.request = request;
+//# sourceMappingURL=client.js.map

package/cjs/idx/idx-js/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/client.ts"],"names":["Interceptor","use","before","handlers","push","clear","HttpClient","interceptors","request","target","method","headers","credentials","body","requestOptions","url","forEach","interceptor"],"mappings":";;;;;;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;AAGA;AACA;AACA;AACO,MAAMA,WAAN,CAAkB;AAAA;AAAA,oDACZ,EADY;AAAA;;AAGvB;AACAC,EAAAA,GAAG,CAACC,MAAD,EAAS;AACV,SAAKC,QAAL,CAAcC,IAAd,CAAmB;AACjBF,MAAAA;AADiB,KAAnB;AAGD,GARsB,CAUvB;;;AACAG,EAAAA,KAAK,GAAG;AACN,SAAKF,QAAL,GAAgB,EAAhB;AACD;;AAbsB;AAgBzB;AACA;AACA;AACA;AACA;AACA;;;;AACO,MAAMG,UAAU,GAAG;AACxBC,EAAAA,YAAY,EAAE;AACZC,IAAAA,OAAO,EAAE,IAAIR,WAAJ;AADG;AADU,CAAnB;;;AAMA,MAAMQ,OAAO,GAAG,OACrBC,MADqB,EAErB;AACEC,EAAAA,MAAM,GAAG,MADX;AAEEC,EAAAA,OAAO,GAAG,EAFZ;AAGEC,EAAAA,WAAW,GAAG,SAHhB;AAIEC,EAAAA;AAJF,CAFqB,KAQlB;AACH,QAAMC,cAAc,GAAG;AACrBC,IAAAA,GAAG,EAAEN,MADgB;AAErBC,IAAAA,MAFqB;AAGrBC,IAAAA,OAAO,EAAE,EACP,GAAGA;AADI,KAHY;AAMrBC,IAAAA,WANqB;AAOrBC,IAAAA;AAPqB,GAAvB;;AAUA,MAAIP,UAAU,CAACC,YAAf,EAA6B;AAC3BD,IAAAA,UAAU,CAACC,YAAX,CAAwBC,OAAxB,CAAgCL,QAAhC,CAAyCa,OAAzC,CAAkDC,WAAW,IAAI;AAC/DA,MAAAA,WAAW,CAACf,MAAZ,CAAmBY,cAAnB;AACD,KAFD;AAGD,GAfE,CAiBH;;;AACA,QAAM;AAAEC,IAAAA;AAAF,MAAUD,cAAhB;AACA,SAAOA,cAAc,CAACC,GAAtB;AAEA,SAAO,yBAAOA,GAAP,EAAYD,cAAZ,CAAP;AACD,CA9BM","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// @ts-nocheck\nimport fetch from 'cross-fetch';\n\n/**\n * Reusable interceptor interface\n */\nexport class Interceptor {\n  handlers = [];\n\n  // Adds a new interceptor to our HttpClient\n  use(before) {\n    this.handlers.push({\n      before,\n    });\n  }\n\n  // Clears all interceptors\n  clear() {\n    this.handlers = [];\n  }\n}\n\n/**\n * Singleton instance of the IdX HTTP Client\n *\n * Invoke the `use` method to add a new interceptor:\n *   - client.interceptors.request.use((requestConfig) => { some logic });\n */\nexport const HttpClient = {\n  interceptors: {\n    request: new Interceptor(),\n  },\n};\n\nexport const request = async (\n  target, \n  { \n    method = 'POST', \n    headers = {}, \n    credentials = 'include', \n    body \n  }\n) => {\n  const requestOptions = {\n    url: target,\n    method,\n    headers: {\n      ...headers,\n    },\n    credentials,\n    body,\n  };\n\n  if (HttpClient.interceptors) {\n    HttpClient.interceptors.request.handlers.forEach( interceptor => {\n      interceptor.before(requestOptions);\n    });\n  }\n\n  // Extract the URL to adhere to the fetch API\n  const { url } = requestOptions;\n  delete requestOptions.url;\n\n  return fetch( url, requestOptions );\n};\n"],"file":"client.js"}

package/cjs/idx/idx-js/index.js

@@ -0,0 +1,162 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.default = void 0;
+
+var _indexOf = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/index-of"));
+
+var _promise = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/promise"));
+
+var _url = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/url"));
+
+var _introspect = _interopRequireDefault(require("./introspect"));
+
+var _interact = _interopRequireDefault(require("./interact"));
+
+var _parsers = _interopRequireDefault(require("./parsers"));
+
+var _client = require("./client");
+
+var _util = require("./util");
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+/* eslint-disable complexity, max-statements, max-len, camelcase */
+// @ts-nocheck
+const LATEST_SUPPORTED_IDX_API_VERSION = '1.0.0';
+
+const start = async function start({
+  withCredentials,
+  clientId,
+  domain,
+  issuer,
+  stateHandle,
+  interactionHandle,
+  version,
+  redirectUri,
+  state,
+  scopes,
+  codeChallenge,
+  codeChallengeMethod,
+  activationToken,
+  recoveryToken
+}) {
+  var _issuer, _issuer2;
+
+  issuer = (_issuer = issuer) === null || _issuer === void 0 ? void 0 : _issuer.replace(/\/+$/, '');
+  const baseUrl = ((_issuer2 = issuer) === null || _issuer2 === void 0 ? void 0 : (0, _indexOf.default)(_issuer2).call(_issuer2, '/oauth2')) > 0 ? issuer : issuer + '/oauth2'; // org AS uses domain as AS, but we need the base url for calls
+
+  const toPersist = {
+    baseUrl,
+    clientId,
+    state,
+    withCredentials
+  };
+
+  if (!domain && !issuer) {
+    return _promise.default.reject({
+      error: 'issuer is required'
+    });
+  }
+
+  if (!stateHandle && !clientId) {
+    // redirectUri is only required on self-hosted flow
+    return _promise.default.reject({
+      error: 'clientId is required'
+    });
+  }
+
+  if (!stateHandle && !redirectUri) {
+    // redirectUri is only required on self-hosted flow
+    return _promise.default.reject({
+      error: 'redirectUri is required'
+    });
+  }
+
+  if (!stateHandle && !(codeChallenge && codeChallengeMethod)) {
+    return _promise.default.reject({
+      error: 'PKCE params (codeChallenge, codeChallengeMethod) are required'
+    });
+  }
+
+  if (!domain) {
+    domain = new _url.default(issuer).origin;
+  }
+
+  (0, _util.validateVersionConfig)(version);
+
+  if (!stateHandle && !interactionHandle) {
+    // start a new transaction
+    try {
+      const interactParams = {
+        withCredentials,
+        clientId,
+        baseUrl,
+        scopes,
+        redirectUri,
+        codeChallenge,
+        codeChallengeMethod,
+        state,
+        activationToken,
+        recoveryToken
+      };
+      const interaction_handle = await (0, _interact.default)(interactParams);
+      interactionHandle = interaction_handle;
+      toPersist.interactionHandle = interactionHandle;
+    } catch (error) {
+      return _promise.default.reject({
+        error
+      });
+    }
+  }
+
+  try {
+    const {
+      makeIdxState
+    } = (0, _parsers.default)(version);
+    const idxResponse = await (0, _introspect.default)({
+      withCredentials,
+      domain,
+      interactionHandle,
+      stateHandle,
+      version
+    }).catch(err => _promise.default.reject({
+      error: 'introspect call failed',
+      // Transform all errors into an IdX State object.
+      // This allows IdX based errors (messages) to optionally proceed with remediation forms
+      details: makeIdxState(err, toPersist)
+    }));
+    const idxState = makeIdxState(idxResponse, toPersist);
+    return idxState;
+  } catch (error) {
+    return _promise.default.reject({
+      error
+    });
+  }
+};
+
+const {
+  makeIdxState
+} = (0, _parsers.default)(LATEST_SUPPORTED_IDX_API_VERSION);
+var _default = {
+  start,
+  introspect: _introspect.default,
+  interact: _interact.default,
+  makeIdxState,
+  client: _client.HttpClient,
+  LATEST_SUPPORTED_IDX_API_VERSION
+};
+exports.default = _default;
+module.exports = exports.default;
+//# sourceMappingURL=index.js.map

package/cjs/idx/idx-js/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/index.ts"],"names":["LATEST_SUPPORTED_IDX_API_VERSION","start","withCredentials","clientId","domain","issuer","stateHandle","interactionHandle","version","redirectUri","state","scopes","codeChallenge","codeChallengeMethod","activationToken","recoveryToken","replace","baseUrl","toPersist","reject","error","origin","interactParams","interaction_handle","makeIdxState","idxResponse","catch","err","details","idxState","introspect","interact","client","HttpClient"],"mappings":";;;;;;;;;;;;AAcA;;AACA;;AACA;;AACA;;AACA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AAOA,MAAMA,gCAAgC,GAAG,OAAzC;;AAEA,MAAMC,KAAK,GAAG,eAAeA,KAAf,CAAqB;AACjCC,EAAAA,eADiC;AAEjCC,EAAAA,QAFiC;AAGjCC,EAAAA,MAHiC;AAIjCC,EAAAA,MAJiC;AAKjCC,EAAAA,WALiC;AAMjCC,EAAAA,iBANiC;AAOjCC,EAAAA,OAPiC;AAQjCC,EAAAA,WARiC;AASjCC,EAAAA,KATiC;AAUjCC,EAAAA,MAViC;AAWjCC,EAAAA,aAXiC;AAYjCC,EAAAA,mBAZiC;AAajCC,EAAAA,eAbiC;AAcjCC,EAAAA;AAdiC,CAArB,EAeX;AAAA;;AAEDV,EAAAA,MAAM,cAAGA,MAAH,4CAAG,QAAQW,OAAR,CAAgB,MAAhB,EAAwB,EAAxB,CAAT;AACA,QAAMC,OAAO,GAAG,aAAAZ,MAAM,UAAN,kFAAgB,SAAhB,KAA6B,CAA7B,GAAiCA,MAAjC,GAA0CA,MAAM,GAAG,SAAnE,CAHC,CAG6E;;AAC9E,QAAMa,SAAS,GAAG;AAChBD,IAAAA,OADgB;AAEhBd,IAAAA,QAFgB;AAGhBO,IAAAA,KAHgB;AAIhBR,IAAAA;AAJgB,GAAlB;;AAOA,MAAK,CAACE,MAAD,IAAW,CAACC,MAAjB,EAAyB;AACvB,WAAO,iBAAQc,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAACd,WAAD,IAAgB,CAACH,QAAtB,EAAiC;AAAE;AACjC,WAAO,iBAAQgB,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAACd,WAAD,IAAgB,CAACG,WAAtB,EAAoC;AAAE;AACpC,WAAO,iBAAQU,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAI,CAACd,WAAD,IAAgB,EAAEM,aAAa,IAAIC,mBAAnB,CAApB,EAA6D;AAC3D,WAAO,iBAAQM,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAAChB,MAAN,EAAe;AACbA,IAAAA,MAAM,GAAG,iBAAQC,MAAR,EAAgBgB,MAAzB;AACD;;AAED,mCAAsBb,OAAtB;;AAEA,MAAK,CAACF,WAAD,IAAgB,CAACC,iBAAtB,EAA0C;AAAE;AAC1C,QAAI;AACF,YAAMe,cAAc,GAAG;AACrBpB,QAAAA,eADqB;AAErBC,QAAAA,QAFqB;AAGrBc,QAAAA,OAHqB;AAIrBN,QAAAA,MAJqB;AAKrBF,QAAAA,WALqB;AAMrBG,QAAAA,aANqB;AAOrBC,QAAAA,mBAPqB;AAQrBH,QAAAA,KARqB;AASrBI,QAAAA,eATqB;AAUrBC,QAAAA;AAVqB,OAAvB;AAaA,YAAMQ,kBAAkB,GAAG,MAAM,uBAAUD,cAAV,CAAjC;AACAf,MAAAA,iBAAiB,GAAGgB,kBAApB;AACAL,MAAAA,SAAS,CAACX,iBAAV,GAA8BA,iBAA9B;AACD,KAjBD,CAiBE,OAAOa,KAAP,EAAc;AACd,aAAO,iBAAQD,MAAR,CAAe;AAAEC,QAAAA;AAAF,OAAf,CAAP;AACD;AACF;;AAED,MAAI;AACF,UAAM;AAAEI,MAAAA;AAAF,QAAmB,sBAAkBhB,OAAlB,CAAzB;AACA,UAAMiB,WAAW,GAAG,MAAM,yBAAW;AAAEvB,MAAAA,eAAF;AAAmBE,MAAAA,MAAnB;AAA2BG,MAAAA,iBAA3B;AAA8CD,MAAAA,WAA9C;AAA2DE,MAAAA;AAA3D,KAAX,EACvBkB,KADuB,CAChBC,GAAG,IAAI,iBAAQR,MAAR,CAAe;AAC5BC,MAAAA,KAAK,EAAE,wBADqB;AAE5B;AACA;AACAQ,MAAAA,OAAO,EAAEJ,YAAY,CAAEG,GAAF,EAAOT,SAAP;AAJO,KAAf,CADS,CAA1B;AAOA,UAAMW,QAAQ,GAAGL,YAAY,CAAEC,WAAF,EAAeP,SAAf,CAA7B;AACA,WAAOW,QAAP;AACD,GAXD,CAWE,OAAOT,KAAP,EAAc;AACd,WAAO,iBAAQD,MAAR,CAAe;AAAEC,MAAAA;AAAF,KAAf,CAAP;AACD;AACF,CArFD;;AAsFA,MAAM;AAAEI,EAAAA;AAAF,IAAmB,sBAAkBxB,gCAAlB,CAAzB;eAEe;AACbC,EAAAA,KADa;AAEb6B,EAAAA,UAAU,EAAVA,mBAFa;AAGbC,EAAAA,QAAQ,EAARA,iBAHa;AAIbP,EAAAA,YAJa;AAKbQ,EAAAA,MAAM,EAAEC,kBALK;AAMbjC,EAAAA;AANa,C","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable complexity, max-statements, max-len, camelcase */\n// @ts-nocheck\nimport introspect from './introspect';\nimport interact from './interact';\nimport parsersForVersion from './parsers';\nimport { HttpClient } from './client';\nimport { validateVersionConfig } from './util';\n\nconst LATEST_SUPPORTED_IDX_API_VERSION = '1.0.0';\n\nconst start = async function start({\n  withCredentials,\n  clientId,\n  domain,\n  issuer,\n  stateHandle,\n  interactionHandle,\n  version,\n  redirectUri,\n  state,\n  scopes,\n  codeChallenge,\n  codeChallengeMethod,\n  activationToken,\n  recoveryToken\n}) {\n\n  issuer = issuer?.replace(/\\/+$/, '');\n  const baseUrl = issuer?.indexOf('/oauth2') > 0 ? issuer : issuer + '/oauth2'; // org AS uses domain as AS, but we need the base url for calls\n  const toPersist = {\n    baseUrl,\n    clientId,\n    state,\n    withCredentials\n  };\n\n  if ( !domain && !issuer) {\n    return Promise.reject({ error: 'issuer is required' });\n  }\n\n  if ( !stateHandle && !clientId ) { // redirectUri is only required on self-hosted flow\n    return Promise.reject({ error: 'clientId is required' });\n  }\n\n  if ( !stateHandle && !redirectUri ) { // redirectUri is only required on self-hosted flow\n    return Promise.reject({ error: 'redirectUri is required' });\n  }\n\n  if (!stateHandle && !(codeChallenge && codeChallengeMethod)) {\n    return Promise.reject({ error: 'PKCE params (codeChallenge, codeChallengeMethod) are required' });\n  }\n\n  if ( !domain ) {\n    domain = new URL(issuer).origin;\n  }\n\n  validateVersionConfig(version);\n\n  if ( !stateHandle && !interactionHandle ) { // start a new transaction\n    try {\n      const interactParams = {\n        withCredentials,\n        clientId,\n        baseUrl,\n        scopes,\n        redirectUri,\n        codeChallenge,\n        codeChallengeMethod,\n        state,\n        activationToken,\n        recoveryToken\n      };\n\n      const interaction_handle = await interact( interactParams );\n      interactionHandle = interaction_handle;\n      toPersist.interactionHandle = interactionHandle;\n    } catch (error) {\n      return Promise.reject({ error });\n    }\n  }\n\n  try {\n    const { makeIdxState } = parsersForVersion(version);\n    const idxResponse = await introspect({ withCredentials, domain, interactionHandle, stateHandle, version })\n      .catch( err => Promise.reject({\n        error: 'introspect call failed',\n        // Transform all errors into an IdX State object.\n        // This allows IdX based errors (messages) to optionally proceed with remediation forms\n        details: makeIdxState( err, toPersist )\n      }) );\n    const idxState = makeIdxState( idxResponse, toPersist );\n    return idxState;\n  } catch (error) {\n    return Promise.reject({ error });\n  }\n};\nconst { makeIdxState } = parsersForVersion(LATEST_SUPPORTED_IDX_API_VERSION);\n\nexport default {\n  start,\n  introspect,\n  interact,\n  makeIdxState,\n  client: HttpClient,\n  LATEST_SUPPORTED_IDX_API_VERSION,\n};\n"],"file":"index.js"}