@okta/okta-auth-js 5.9.1 → 6.0.0

package/lib/tx/AuthTransaction.d.ts

@@ -42,7 +42,7 @@ export declare class AuthTransaction implements TransactionState, AuthTransactio
     activate?: AuthTransactionFunction;
     poll?: AuthTransactionFunction;
     prev?: AuthTransactionFunction;
-    data: TransactionState;
+    data?: TransactionState;
     stateToken?: string;
     sessionToken?: string;
     status: string | IdxStatus;
@@ -53,6 +53,6 @@ export declare class AuthTransaction implements TransactionState, AuthTransactio
     scopes?: Array<Record<string, any>>;
     target?: Record<string, any>;
     authentication?: Record<string, any>;
-    constructor(sdk: any, res?: any);
+    constructor(sdk: any, res?: TransactionState | null);
 }
 export {};

package/lib/tx/TransactionState.d.ts

@@ -9,8 +9,17 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-export declare class TransactionState {
+export interface TransactionLink {
+    name?: string;
+    type: string;
+    href: string;
+    hints?: {
+        allow?: string[];
+    };
+}
+export interface TransactionState {
     interactionHandle?: string;
+    status: string;
     stateToken?: string;
     type?: string;
     expiresAt?: string;
@@ -24,4 +33,5 @@ export declare class TransactionState {
     profile?: {
         updatePhone?: boolean;
     };
+    _links?: Record<string, TransactionLink>;
 }

package/lib/tx/api.d.ts

@@ -11,9 +11,9 @@
  *
  */
 import { AuthTransaction } from './AuthTransaction';
-declare function transactionStatus(sdk: any, args: any): Promise<any>;
-declare function resumeTransaction(sdk: any, args: any): any;
-declare function introspect(sdk: any, args: any): Promise<AuthTransaction>;
-declare function transactionExists(sdk: any): boolean;
-declare function postToTransaction(sdk: any, url: any, args: any, options?: any): Promise<AuthTransaction>;
-export { transactionStatus, resumeTransaction, transactionExists, postToTransaction, introspect, };
+export declare function transactionStatus(sdk: any, args: any): Promise<any>;
+export declare function resumeTransaction(sdk: any, args: any): any;
+export declare function introspectAuthn(sdk: any, args: any): Promise<AuthTransaction>;
+export declare function transactionStep(sdk: any, args: any): Promise<any>;
+export declare function transactionExists(sdk: any): boolean;
+export declare function postToTransaction(sdk: any, url: any, args: any, options?: any): Promise<AuthTransaction>;

package/lib/types/OktaAuthOptions.d.ts

@@ -20,6 +20,7 @@ import OktaAuth from '../OktaAuth';
 export interface TokenManagerOptions {
     autoRenew?: boolean;
     autoRemove?: boolean;
+    clearPendingRemoveTokens?: boolean;
     secure?: boolean;
     storage?: string | SimpleStorage;
     storageKey?: string;
@@ -27,10 +28,6 @@ export interface TokenManagerOptions {
     syncStorage?: boolean;
     _storageEventDelay?: number;
 }
-export interface CustomUserAgent {
-    template?: string;
-    value?: string;
-}
 export interface CustomUrls {
     issuer?: string;
     authorizeUrl?: string;
@@ -55,16 +52,19 @@ export interface OktaAuthOptions extends CustomUrls {
     storageUtil?: StorageUtil;
     ajaxRequest?: object;
     httpRequestClient?: HttpRequestClient;
-    userAgent?: CustomUserAgent;
     cookies?: CookieOptions;
     transformErrorXHR?: (xhr: object) => any;
     headers?: object;
     maxClockSkew?: number;
     transformAuthState?: (oktaAuth: OktaAuth, authState: AuthState) => Promise<AuthState>;
-    restoreOriginalUri?: (oktaAuth: OktaAuth, originalUri: string) => Promise<void>;
+    restoreOriginalUri?: (oktaAuth: OktaAuth, originalUri?: string) => Promise<void>;
     devMode?: boolean;
     storageManager?: StorageManagerOptions;
     transactionManager?: TransactionManagerOptions;
     flow?: FlowIdentifier;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    recoveryToken?: string;
+    activationToken?: string;
     clientSecret?: string;
 }

package/lib/types/Storage.d.ts

@@ -49,13 +49,13 @@ export interface StorageOptions extends CookieOptions {
     storageTypes?: StorageType[];
     storageProvider?: SimpleStorage;
     storageKey?: string;
-    useMultipleCookies?: boolean;
+    useSeparateCookies?: boolean;
 }
 export declare type StorageType = 'memory' | 'sessionStorage' | 'localStorage' | 'cookie' | 'custom' | 'auto';
 export interface StorageUtil {
     storage: TxStorage;
     testStorageType(storageType: StorageType): boolean;
-    getStorageByType(storageType: StorageType, options: StorageOptions): SimpleStorage;
+    getStorageByType(storageType: StorageType, options?: StorageOptions): SimpleStorage;
     findStorageType(types: StorageType[]): StorageType;
 }
 export interface BrowserStorageUtil extends StorageUtil {
@@ -79,7 +79,7 @@ export interface NodeStorageUtil extends StorageUtil {
     getStorage(): SimpleStorage;
 }
 export interface CookieStorage extends SimpleStorage {
-    setItem(key: string, value: any, expiresAt?: string): void;
+    setItem(key: string, value: any, expiresAt?: string | null): void;
     getItem(key?: string): any;
     removeItem(key: string): any;
 }

package/lib/types/Token.d.ts

@@ -14,6 +14,7 @@ export interface AbstractToken {
     expiresAt: number;
     authorizeUrl: string;
     scopes: string[];
+    pendingRemove?: boolean;
 }
 export interface AccessToken extends AbstractToken {
     accessToken: string;

package/lib/types/Transaction.d.ts

@@ -19,12 +19,19 @@ export interface TransactionManagerOptions {
     saveNonceCookie?: boolean;
     saveStateCookie?: boolean;
     saveParamsCookie?: boolean;
+    saveLastResponse?: boolean;
 }
 export interface TransactionMetaOptions {
     pkce?: boolean;
     oauth?: boolean;
     muteWarning?: boolean;
     state?: string;
+    flow?: FlowIdentifier;
+    codeVerifier?: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    activationToken?: string;
+    recoveryToken?: string;
 }
 export interface OAuthTransactionMeta {
     issuer: string;
@@ -32,6 +39,7 @@ export interface OAuthTransactionMeta {
     state: string;
     nonce: string;
     responseType: string | string[];
+    responseMode?: string;
     scopes: string[];
     clientId: string;
     urls: CustomUrls;
@@ -47,6 +55,9 @@ export interface IdxTransactionMeta extends PKCETransactionMeta {
     interactionHandle?: string;
     remediations?: string[];
     flow?: FlowIdentifier;
+    withCredentials?: boolean;
+    activationToken?: string;
+    recoveryToken?: string;
 }
 export declare type CustomAuthTransactionMeta = Record<string, string | undefined>;
 export declare type TransactionMeta = IdxTransactionMeta | PKCETransactionMeta | OAuthTransactionMeta | CustomAuthTransactionMeta;

package/lib/types/UserClaims.d.ts

@@ -15,7 +15,7 @@
  * ID Token or returned from the /userinfo response and depend on the
  * response_type and scope parameters in the authorize request
  */
-export interface UserClaims {
+export declare type UserClaims<T = {}> = T & {
     auth_time?: number;
     aud?: string;
     email?: string;
@@ -34,5 +34,5 @@ export interface UserClaims {
     updated_at?: number;
     ver?: number;
     zoneinfo?: string;
-    [propName: string]: any;
-}
+    at_hash?: string;
+};

package/lib/types/api.d.ts

@@ -18,23 +18,23 @@ import StorageManager from '../StorageManager';
 import TransactionManager from '../TransactionManager';
 import { TokenManagerInterface } from './TokenManager';
 import { OktaUserAgent } from '../OktaUserAgent';
-import { FlowIdentifier } from '../idx/types';
-import { AuthenticationOptions, RegistrationOptions as IdxRegistrationOptions, PasswordRecoveryOptions, ProceedOptions, CancelOptions, IdxOptions, IdxTransaction } from '../idx/types';
+import { FlowIdentifier, IdxPollOptions } from '../idx/types';
+import { AuthenticationOptions, RegistrationOptions as IdxRegistrationOptions, PasswordRecoveryOptions, ProceedOptions, CancelOptions, IdxOptions, IdxTransaction, IdxTransactionMeta, EmailVerifyCallbackResponse } from '../idx/types';
 import { InteractOptions, InteractResponse } from '../idx/interact';
 import { IntrospectOptions } from '../idx/introspect';
 import { IdxResponse } from '../idx/types/idx-js';
+import { TransactionMetaOptions } from './Transaction';
 export interface OktaAuth {
     options: OktaAuthOptions;
-    userAgent: string;
     getIssuerOrigin(): string;
-    getOriginalUri(): string;
+    getOriginalUri(): string | undefined;
     _oktaUserAgent: OktaUserAgent;
     storageManager: StorageManager;
     transactionManager: TransactionManager;
     tokenManager: TokenManagerInterface;
     idx: IdxAPI;
-    features?: FeaturesAPI;
-    token?: TokenAPI;
+    features: FeaturesAPI;
+    token: TokenAPI;
 }
 export interface APIError {
     errorSummary: string;
@@ -83,11 +83,10 @@ export interface TokenParams extends CustomUrls {
     scopes?: string[];
     display?: string;
     ignoreSignature?: boolean;
-    codeChallengeMethod?: string;
     codeVerifier?: string;
     authorizationCode?: string;
     codeChallenge?: string;
-    grantType?: string;
+    codeChallengeMethod?: string;
     interactionCode?: string;
     idp?: string;
     idpScope?: string | string[];
@@ -136,8 +135,8 @@ export interface TokenAPI extends BaseTokenAPI {
     getWithoutPrompt(params?: TokenParams): Promise<TokenResponse>;
     getWithPopup(params?: TokenParams): Promise<TokenResponse>;
     revoke(token: RevocableToken): Promise<object>;
-    renew(token: Token): Promise<Token>;
-    renewTokens(): Promise<Tokens>;
+    renew(token: Token): Promise<Token | undefined>;
+    renewTokens(options?: TokenParams): Promise<Tokens>;
     renewTokensWithRefresh(tokenParams: TokenParams, refreshTokenObject: RefreshToken): Promise<Tokens>;
     verify(token: IDToken, params?: object): Promise<IDToken>;
     isLoginRedirect(): boolean;
@@ -188,10 +187,11 @@ export interface SignoutRedirectUrlOptions {
     state?: string;
 }
 export interface SignoutOptions extends SignoutRedirectUrlOptions {
-    accessToken?: AccessToken;
     revokeAccessToken?: boolean;
     revokeRefreshToken?: boolean;
+    accessToken?: AccessToken;
     refreshToken?: RefreshToken;
+    clearTokensBeforeRedirect?: boolean;
 }
 export interface SignoutAPI {
     signOut(opts: SignoutOptions): any;
@@ -214,14 +214,28 @@ export interface IdxAPI {
     introspect: (options?: IntrospectOptions) => Promise<IdxResponse>;
     authenticate: (options?: AuthenticationOptions) => Promise<IdxTransaction>;
     register: (options?: IdxRegistrationOptions) => Promise<IdxTransaction>;
-    proceed: (options?: ProceedOptions) => Promise<IdxTransaction>;
-    cancel: (options?: CancelOptions) => Promise<IdxTransaction>;
-    startTransaction: (options?: IdxOptions) => Promise<IdxTransaction>;
     recoverPassword: (options?: PasswordRecoveryOptions) => Promise<IdxTransaction>;
-    handleInteractionCodeRedirect: (url: string) => Promise<void>;
-    getFlow(): FlowIdentifier;
-    setFlow(flow: FlowIdentifier): void;
+    poll: (options?: IdxPollOptions) => Promise<IdxTransaction>;
+    start: (options?: IdxOptions) => Promise<IdxTransaction>;
     canProceed(options?: {
         state?: string;
     }): boolean;
+    proceed: (options?: ProceedOptions) => Promise<IdxTransaction>;
+    cancel: (options?: CancelOptions) => Promise<IdxTransaction>;
+    getFlow(): FlowIdentifier | undefined;
+    setFlow(flow: FlowIdentifier): void;
+    startTransaction: (options?: IdxOptions) => Promise<IdxTransaction>;
+    isInteractionRequired: (hashOrSearch?: string) => boolean;
+    isInteractionRequiredError: (error: Error) => boolean;
+    handleInteractionCodeRedirect: (url: string) => Promise<void>;
+    isEmailVerifyCallback: (search: string) => boolean;
+    parseEmailVerifyCallback: (search: string) => EmailVerifyCallbackResponse;
+    handleEmailVerifyCallback: (search: string) => Promise<IdxTransaction | undefined>;
+    isEmailVerifyCallbackError: (error: Error) => boolean;
+    getSavedTransactionMeta: (options?: TransactionMetaOptions) => IdxTransactionMeta | undefined;
+    createTransactionMeta: (options?: TransactionMetaOptions) => Promise<IdxTransactionMeta>;
+    getTransactionMeta: (options?: TransactionMetaOptions) => Promise<IdxTransactionMeta>;
+    saveTransactionMeta: (meta: unknown) => void;
+    clearTransactionMeta: () => void;
+    isTransactionMetaValid: (meta: unknown) => boolean;
 }

package/lib/util/console.d.ts

@@ -9,7 +9,7 @@
  *
  * See the License for the specific language governing permissions and limitations under the License.
  */
-export declare function getNativeConsole(): Console;
+export declare function getNativeConsole(): Console | undefined;
 export declare function getConsole(): Console | {
     log: () => void;
     warn: () => void;

package/lib/util/index.d.ts

@@ -10,7 +10,6 @@
  * See the License for the specific language governing permissions and limitations under the License.
  */
 export * from './console';
-export * from './emailVerify';
 export * from './misc';
 export * from './object';
 export * from './types';

package/lib/util/types.d.ts

@@ -13,4 +13,4 @@ export declare function isString(obj: any): obj is string;
 export declare function isObject(obj: any): obj is object;
 export declare function isNumber(obj: any): obj is number;
 export declare function isFunction(fn: any): fn is Function;
-export declare function isPromise(obj: any): boolean;
+export declare function isPromise(obj: any): any;

package/lib/util/url.d.ts

@@ -10,7 +10,7 @@
  * See the License for the specific language governing permissions and limitations under the License.
  */
 export declare function isAbsoluteUrl(url: any): boolean;
-export declare function toAbsoluteUrl(url: string, baseUrl: any): string;
-export declare function toRelativeUrl(url: string, baseUrl: any): string;
+export declare function toAbsoluteUrl(url: string | undefined, baseUrl: any): string;
+export declare function toRelativeUrl(url: string | undefined, baseUrl: any): string;
 export declare function toQueryString(obj: any): string;
 export declare function removeTrailingSlash(path: any): any;

package/package.json

@@ -2,14 +2,12 @@
   "private": false,
   "name": "@okta/okta-auth-js",
   "description": "The Okta Auth SDK",
-  "version": "5.9.1",
+  "version": "6.0.0",
   "homepage": "https://github.com/okta/okta-auth-js",
   "license": "Apache-2.0",
   "main": "cjs/index.js",
   "module": "esm/index.js",
-  "browser": {
-    "cjs/index.js": "./dist/okta-auth-js.umd.js"
-  },
+  "browser": "dist/okta-auth-js.umd.js",
   "types": "lib/index.d.ts",
   "repository": {
     "type": "git",
@@ -72,7 +70,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "@okta/okta-idx-js": "0.22.0",
+    "@okta/okta-idx-js": "0.24.0",
     "@peculiar/webcrypto": "1.1.6",
     "Base64": "1.1.0",
     "atob": "^2.1.2",
@@ -171,8 +169,8 @@
     }
   },
   "okta": {
-    "commitSha": "77c767240cef539a3afbe21c8e8117d8c1121d7b",
-    "fullVersion": "5.9.1-g77c7672",
-    "testedSha": "16065f291239478bf5c8b76717ad42aecd42b6e5"
+    "commitSha": "e9538b625a2a6be20f0f3dcdabb0f6858499b1df",
+    "fullVersion": "6.0.0-ge9538b6",
+    "testedSha": "f1b290b3b133a0bae4fe77b4d51e747949326777"
   }
 }

package/cjs/idx/flow/AuthenticationFlowMonitor.js

@@ -1,45 +0,0 @@
-"use strict";
-
-exports.AuthenticationFlowMonitor = void 0;
-
-var _FlowMonitor = require("./FlowMonitor");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class AuthenticationFlowMonitor extends _FlowMonitor.FlowMonitor {
-  isRemediatorCandidate(remediator, remediations, values) {
-    var _this$previousRemedia;
-
-    const prevRemediatorName = (_this$previousRemedia = this.previousRemediator) === null || _this$previousRemedia === void 0 ? void 0 : _this$previousRemedia.getName();
-    const remediatorName = remediator.getName();
-
-    if (remediatorName === 'select-authenticator-authenticate' && ['select-authenticator-authenticate'].includes(prevRemediatorName)) {
-      return false;
-    }
-
-    if (remediatorName === 'select-authenticator-authenticate' && remediations.some(({
-      name
-    }) => name === 'challenge-authenticator')) {
-      return false;
-    }
-
-    if (remediatorName === 'select-authenticator-enroll' && ['select-authenticator-enroll', 'authenticator-enrollment-data'].includes(prevRemediatorName)) {
-      return false;
-    }
-
-    return super.isRemediatorCandidate(remediator, remediations, values);
-  }
-
-}
-
-exports.AuthenticationFlowMonitor = AuthenticationFlowMonitor;
-//# sourceMappingURL=AuthenticationFlowMonitor.js.map

package/cjs/idx/flow/AuthenticationFlowMonitor.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../lib/idx/flow/AuthenticationFlowMonitor.ts"],"names":["AuthenticationFlowMonitor","FlowMonitor","isRemediatorCandidate","remediator","remediations","values","prevRemediatorName","previousRemediator","getName","remediatorName","includes","some","name"],"mappings":";;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAKO,MAAMA,yBAAN,SAAwCC,wBAAxC,CAAoD;AACzDC,EAAAA,qBAAqB,CAACC,UAAD,EAAaC,YAAb,EAA4BC,MAA5B,EAAqC;AAAA;;AACxD,UAAMC,kBAAkB,4BAAG,KAAKC,kBAAR,0DAAG,sBAAyBC,OAAzB,EAA3B;AACA,UAAMC,cAAc,GAAGN,UAAU,CAACK,OAAX,EAAvB;;AAEA,QAAIC,cAAc,KAAK,mCAAnB,IACC,CAAC,mCAAD,EAAsCC,QAAtC,CAA+CJ,kBAA/C,CADL,EACyE;AACvE,aAAO,KAAP;AACD;;AAED,QAAIG,cAAc,KAAK,mCAAnB,IACCL,YAAY,CAACO,IAAb,CAAkB,CAAC;AAAEC,MAAAA;AAAF,KAAD,KAAcA,IAAI,KAAK,yBAAzC,CADL,EAC0E;AACxE,aAAO,KAAP;AACD;;AAED,QAAIH,cAAc,KAAK,6BAAnB,IACC,CACC,6BADD,EAEC,+BAFD,EAGCC,QAHD,CAGUJ,kBAHV,CADL,EAIoC;AAClC,aAAO,KAAP;AACD;;AAED,WAAO,MAAMJ,qBAAN,CAA4BC,UAA5B,EAAwCC,YAAxC,EAAsDC,MAAtD,CAAP;AACD;;AAxBwD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { FlowMonitor } from './FlowMonitor';\n\nexport class AuthenticationFlowMonitor extends FlowMonitor {\n  isRemediatorCandidate(remediator, remediations?, values?) {\n    const prevRemediatorName = this.previousRemediator?.getName();\n    const remediatorName = remediator.getName();\n    \n    if (remediatorName === 'select-authenticator-authenticate' \n      && ['select-authenticator-authenticate'].includes(prevRemediatorName)) {\n      return false;\n    }\n\n    if (remediatorName === 'select-authenticator-authenticate' \n      && remediations.some(({ name }) => name === 'challenge-authenticator')) {\n      return false;\n    }\n\n    if (remediatorName === 'select-authenticator-enroll' \n      && [\n          'select-authenticator-enroll', \n          'authenticator-enrollment-data'\n        ].includes(prevRemediatorName)) {\n      return false;\n    }\n\n    return super.isRemediatorCandidate(remediator, remediations, values);\n  }\n}\n"],"file":"AuthenticationFlowMonitor.js"}

package/cjs/idx/flow/FlowMonitor.js

@@ -1,69 +0,0 @@
-"use strict";
-
-exports.FlowMonitor = void 0;
-
-var _transactionMeta = require("../transactionMeta");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class FlowMonitor {
-  constructor(authClient) {
-    this.authClient = authClient;
-  } // detect in-memory loop
-
-
-  loopDetected(remediator) {
-    if (!this.previousRemediator) {
-      this.previousRemediator = remediator;
-      return false;
-    }
-
-    if (this.previousRemediator.getName() === remediator.getName()) {
-      return true;
-    }
-
-    this.previousRemediator = remediator;
-    return false;
-  }
-
-  isRemediatorCandidate( // eslint-disable-next-line no-unused-vars, @typescript-eslint/no-unused-vars
-  remediator, remediations, values) {
-    const remediatorName = remediator.getName();
-
-    if (!values.skip && remediatorName === 'skip') {
-      return false;
-    }
-
-    if (values.skip && remediatorName !== 'skip') {
-      return false;
-    }
-
-    return true;
-  }
-
-  async trackRemediations(name) {
-    let meta = await (0, _transactionMeta.getTransactionMeta)(this.authClient);
-    const remediations = meta.remediations || [];
-    meta = { ...meta,
-      remediations: [...remediations, name]
-    };
-    (0, _transactionMeta.saveTransactionMeta)(this.authClient, meta);
-  }
-
-  isFinished() {
-    return Promise.resolve(true);
-  }
-
-}
-
-exports.FlowMonitor = FlowMonitor;
-//# sourceMappingURL=FlowMonitor.js.map

package/cjs/idx/flow/FlowMonitor.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../lib/idx/flow/FlowMonitor.ts"],"names":["FlowMonitor","constructor","authClient","loopDetected","remediator","previousRemediator","getName","isRemediatorCandidate","remediations","values","remediatorName","skip","trackRemediations","name","meta","isFinished","Promise","resolve"],"mappings":";;;;AAeA;;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAQO,MAAMA,WAAN,CAAkB;AAIvBC,EAAAA,WAAW,CAACC,UAAD,EAAa;AACtB,SAAKA,UAAL,GAAkBA,UAAlB;AACD,GANsB,CAQvB;;;AACAC,EAAAA,YAAY,CAACC,UAAD,EAAkC;AAC5C,QAAI,CAAC,KAAKC,kBAAV,EAA8B;AAC5B,WAAKA,kBAAL,GAA0BD,UAA1B;AACA,aAAO,KAAP;AACD;;AAED,QAAI,KAAKC,kBAAL,CAAwBC,OAAxB,OAAsCF,UAAU,CAACE,OAAX,EAA1C,EAAgE;AAC9D,aAAO,IAAP;AACD;;AAED,SAAKD,kBAAL,GAA0BD,UAA1B;AACA,WAAO,KAAP;AACD;;AAEDG,EAAAA,qBAAqB,EACnB;AACAH,EAAAA,UAFmB,EAEKI,YAFL,EAEsCC,MAFtC,EAGV;AACT,UAAMC,cAAc,GAAGN,UAAU,CAACE,OAAX,EAAvB;;AACA,QAAI,CAACG,MAAM,CAACE,IAAR,IAAgBD,cAAc,KAAK,MAAvC,EAA+C;AAC7C,aAAO,KAAP;AACD;;AACD,QAAID,MAAM,CAACE,IAAP,IAAeD,cAAc,KAAK,MAAtC,EAA8C;AAC5C,aAAO,KAAP;AACD;;AACD,WAAO,IAAP;AACD;;AAEsB,QAAjBE,iBAAiB,CAACC,IAAD,EAAe;AACpC,QAAIC,IAAI,GAAG,MAAM,yCAAmB,KAAKZ,UAAxB,CAAjB;AACA,UAAMM,YAAY,GAAGM,IAAI,CAACN,YAAL,IAAqB,EAA1C;AACAM,IAAAA,IAAI,GAAG,EACL,GAAGA,IADE;AAELN,MAAAA,YAAY,EAAE,CAAC,GAAGA,YAAJ,EAAkBK,IAAlB;AAFT,KAAP;AAIA,8CAAoB,KAAKX,UAAzB,EAAqCY,IAArC;AACD;;AAEDC,EAAAA,UAAU,GAAqB;AAC7B,WAAOC,OAAO,CAACC,OAAR,CAAgB,IAAhB,CAAP;AACD;;AAjDsB","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaAuth } from '../../types';\nimport { Remediator, RemediationValues, SkipValues } from '../remediators';\nimport { getTransactionMeta, saveTransactionMeta } from '../transactionMeta';\nimport { IdxRemediation } from '../types/idx-js';\n\nexport class FlowMonitor {\n  previousRemediator: Remediator;\n  authClient: OktaAuth;\n\n  constructor(authClient) {\n    this.authClient = authClient;\n  }\n\n  // detect in-memory loop\n  loopDetected(remediator: Remediator): boolean {\n    if (!this.previousRemediator) {\n      this.previousRemediator = remediator;\n      return false;\n    }\n\n    if (this.previousRemediator.getName() === remediator.getName()) {\n      return true;\n    }\n\n    this.previousRemediator = remediator;\n    return false;\n  }\n\n  isRemediatorCandidate(\n    // eslint-disable-next-line no-unused-vars, @typescript-eslint/no-unused-vars\n    remediator: Remediator, remediations?: IdxRemediation[], values?: RemediationValues & SkipValues\n  ): boolean {\n    const remediatorName = remediator.getName();\n    if (!values.skip && remediatorName === 'skip') {\n      return false;\n    }\n    if (values.skip && remediatorName !== 'skip') {\n      return false;\n    }\n    return true;\n  }\n\n  async trackRemediations(name: string) {\n    let meta = await getTransactionMeta(this.authClient);\n    const remediations = meta.remediations || [];\n    meta = { \n      ...meta, \n      remediations: [...remediations, name]\n    };\n    saveTransactionMeta(this.authClient, meta);\n  }\n\n  isFinished(): Promise<boolean> {\n    return Promise.resolve(true);\n  }\n}\n"],"file":"FlowMonitor.js"}

package/cjs/idx/flow/PasswordRecoveryFlowMonitor.js

@@ -1,55 +0,0 @@
-"use strict";
-
-exports.PasswordRecoveryFlowMonitor = void 0;
-
-var _FlowMonitor = require("./FlowMonitor");
-
-var _transactionMeta = require("../transactionMeta");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class PasswordRecoveryFlowMonitor extends _FlowMonitor.FlowMonitor {
-  isRemediatorCandidate(remediator, remediations, values) {
-    var _this$previousRemedia;
-
-    const prevRemediatorName = (_this$previousRemedia = this.previousRemediator) === null || _this$previousRemedia === void 0 ? void 0 : _this$previousRemedia.getName();
-    const remediatorName = remediator.getName();
-
-    if (remediatorName === 'select-authenticator-authenticate' && ['select-authenticator-authenticate', 'reenroll-authenticator'].includes(prevRemediatorName)) {
-      return false;
-    }
-
-    if (remediatorName === 'select-authenticator-authenticate' && remediations.some(({
-      name
-    }) => name === 'challenge-authenticator')) {
-      return false;
-    }
-
-    return super.isRemediatorCandidate(remediator, remediations, values);
-  }
-
-  async isFinished() {
-    const {
-      remediations
-    } = await (0, _transactionMeta.getTransactionMeta)(this.authClient);
-
-    if (!remediations.includes('reset-authenticator')) {
-      return false;
-    }
-
-    return await super.isFinished();
-  }
-
-}
-
-exports.PasswordRecoveryFlowMonitor = PasswordRecoveryFlowMonitor;
-//# sourceMappingURL=PasswordRecoveryFlowMonitor.js.map

package/cjs/idx/flow/PasswordRecoveryFlowMonitor.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../lib/idx/flow/PasswordRecoveryFlowMonitor.ts"],"names":["PasswordRecoveryFlowMonitor","FlowMonitor","isRemediatorCandidate","remediator","remediations","values","prevRemediatorName","previousRemediator","getName","remediatorName","includes","some","name","isFinished","authClient"],"mappings":";;;;AAaA;;AACA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAMO,MAAMA,2BAAN,SAA0CC,wBAA1C,CAAsD;AAC3DC,EAAAA,qBAAqB,CAACC,UAAD,EAAaC,YAAb,EAA4BC,MAA5B,EAAqC;AAAA;;AACxD,UAAMC,kBAAkB,4BAAG,KAAKC,kBAAR,0DAAG,sBAAyBC,OAAzB,EAA3B;AACA,UAAMC,cAAc,GAAGN,UAAU,CAACK,OAAX,EAAvB;;AAEA,QAAIC,cAAc,KAAK,mCAAnB,IACC,CACD,mCADC,EAED,wBAFC,EAGDC,QAHC,CAGQJ,kBAHR,CADL,EAIkC;AAChC,aAAO,KAAP;AACD;;AAED,QAAIG,cAAc,KAAK,mCAAnB,IACCL,YAAY,CAACO,IAAb,CAAkB,CAAC;AAAEC,MAAAA;AAAF,KAAD,KAAcA,IAAI,KAAK,yBAAzC,CADL,EAC0E;AACxE,aAAO,KAAP;AACD;;AAED,WAAO,MAAMV,qBAAN,CAA4BC,UAA5B,EAAwCC,YAAxC,EAAsDC,MAAtD,CAAP;AACD;;AAEe,QAAVQ,UAAU,GAAG;AACjB,UAAM;AAAET,MAAAA;AAAF,QAAoB,MAAM,yCAAmB,KAAKU,UAAxB,CAAhC;;AACA,QAAI,CAACV,YAAY,CAACM,QAAb,CAAsB,qBAAtB,CAAL,EAAmD;AACjD,aAAO,KAAP;AACD;;AAED,WAAO,MAAM,MAAMG,UAAN,EAAb;AACD;;AA5B0D","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { FlowMonitor } from './FlowMonitor';\nimport { getTransactionMeta } from '../transactionMeta';\n\nexport class PasswordRecoveryFlowMonitor extends FlowMonitor {\n  isRemediatorCandidate(remediator, remediations?, values?) {\n    const prevRemediatorName = this.previousRemediator?.getName();\n    const remediatorName = remediator.getName();\n    \n    if (remediatorName === 'select-authenticator-authenticate' \n      && [\n        'select-authenticator-authenticate',\n        'reenroll-authenticator'\n      ].includes(prevRemediatorName)) {\n      return false;\n    }\n\n    if (remediatorName === 'select-authenticator-authenticate' \n      && remediations.some(({ name }) => name === 'challenge-authenticator')) {\n      return false;\n    }\n\n    return super.isRemediatorCandidate(remediator, remediations, values);\n  }\n\n  async isFinished() {\n    const { remediations }  = await getTransactionMeta(this.authClient);\n    if (!remediations.includes('reset-authenticator')) {\n      return false;\n    }\n\n    return await super.isFinished();\n  }\n}\n"],"file":"PasswordRecoveryFlowMonitor.js"}

package/cjs/idx/flow/RegistrationFlowMonitor.js

@@ -1,35 +0,0 @@
-"use strict";
-
-exports.RegistrationFlowMonitor = void 0;
-
-var _FlowMonitor = require("./FlowMonitor");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class RegistrationFlowMonitor extends _FlowMonitor.FlowMonitor {
-  isRemediatorCandidate(remediator, remediations, values) {
-    var _this$previousRemedia;
-
-    const prevRemediatorName = (_this$previousRemedia = this.previousRemediator) === null || _this$previousRemedia === void 0 ? void 0 : _this$previousRemedia.getName();
-    const remediatorName = remediator.getName();
-
-    if (remediatorName === 'select-authenticator-enroll' && ['select-authenticator-enroll', 'authenticator-enrollment-data'].includes(prevRemediatorName)) {
-      return false;
-    }
-
-    return super.isRemediatorCandidate(remediator, remediations, values);
-  }
-
-}
-
-exports.RegistrationFlowMonitor = RegistrationFlowMonitor;
-//# sourceMappingURL=RegistrationFlowMonitor.js.map

package/cjs/idx/flow/RegistrationFlowMonitor.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../lib/idx/flow/RegistrationFlowMonitor.ts"],"names":["RegistrationFlowMonitor","FlowMonitor","isRemediatorCandidate","remediator","remediations","values","prevRemediatorName","previousRemediator","getName","remediatorName","includes"],"mappings":";;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAKO,MAAMA,uBAAN,SAAsCC,wBAAtC,CAAkD;AACvDC,EAAAA,qBAAqB,CAACC,UAAD,EAAaC,YAAb,EAA4BC,MAA5B,EAAqC;AAAA;;AACxD,UAAMC,kBAAkB,4BAAG,KAAKC,kBAAR,0DAAG,sBAAyBC,OAAzB,EAA3B;AACA,UAAMC,cAAc,GAAGN,UAAU,CAACK,OAAX,EAAvB;;AACA,QAAIC,cAAc,KAAK,6BAAnB,IACC,CACC,6BADD,EAEC,+BAFD,EAGCC,QAHD,CAGUJ,kBAHV,CADL,EAIoC;AAClC,aAAO,KAAP;AACD;;AAED,WAAO,MAAMJ,qBAAN,CAA4BC,UAA5B,EAAwCC,YAAxC,EAAsDC,MAAtD,CAAP;AACD;;AAbsD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { FlowMonitor } from './FlowMonitor';\n\nexport class RegistrationFlowMonitor extends FlowMonitor {\n  isRemediatorCandidate(remediator, remediations?, values?) {\n    const prevRemediatorName = this.previousRemediator?.getName();\n    const remediatorName = remediator.getName();\n    if (remediatorName === 'select-authenticator-enroll' \n      && [\n          'select-authenticator-enroll', \n          'authenticator-enrollment-data'\n        ].includes(prevRemediatorName)) {\n      return false;\n    }\n\n    return super.isRemediatorCandidate(remediator, remediations, values);\n  }\n}\n"],"file":"RegistrationFlowMonitor.js"}

package/cjs/util/emailVerify.js

@@ -1,28 +0,0 @@
-"use strict";
-
-exports.isEmailVerifyCallback = isEmailVerifyCallback;
-exports.parseEmailVerifyCallback = parseEmailVerifyCallback;
-
-var _urlParams = require("../oidc/util/urlParams");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- *
- * See the License for the specific language governing permissions and limitations under the License.
- */
-// Check if state && stateTokenExternalId have been passed back in the url
-function isEmailVerifyCallback(urlPath) {
-  return /(stateTokenExternalId=)/i.test(urlPath) && /(state=)/i.test(urlPath);
-} // Parse state and stateTokenExternalId from a urlPath (should be either a search or fragment from the URL)
-
-
-function parseEmailVerifyCallback(urlPath) {
-  return (0, _urlParams.urlParamsToObject)(urlPath);
-}
-//# sourceMappingURL=emailVerify.js.map

package/cjs/util/emailVerify.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../lib/util/emailVerify.ts"],"names":["isEmailVerifyCallback","urlPath","test","parseEmailVerifyCallback"],"mappings":";;;;;AAaA;;AAZA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AASA;AACO,SAASA,qBAAT,CAAgCC,OAAhC,EAA0D;AAC/D,SAAO,2BAA2BC,IAA3B,CAAgCD,OAAhC,KAA4C,YAAYC,IAAZ,CAAiBD,OAAjB,CAAnD;AACD,C,CAED;;;AACO,SAASE,wBAAT,CAAkCF,OAAlC,EAAgF;AACrF,SAAO,kCAAkBA,OAAlB,CAAP;AACD","sourcesContent":["\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { urlParamsToObject  } from '../oidc/util/urlParams';\n\nexport interface EmailVerifyCallbackResponse {\n  state: string;\n  stateTokenExternalId: string;\n}\n\n// Check if state && stateTokenExternalId have been passed back in the url\nexport function isEmailVerifyCallback (urlPath: string): boolean {\n  return /(stateTokenExternalId=)/i.test(urlPath) && /(state=)/i.test(urlPath);\n}\n\n// Parse state and stateTokenExternalId from a urlPath (should be either a search or fragment from the URL)\nexport function parseEmailVerifyCallback(urlPath: string): EmailVerifyCallbackResponse {\n  return urlParamsToObject(urlPath) as EmailVerifyCallbackResponse;\n}\n"],"file":"emailVerify.js"}