@okta/okta-auth-js 6.0.0 → 6.1.0

package/cjs/idx/headers.js

@@ -1,11 +1,16 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
 
 exports.setGlobalRequestInterceptor = setGlobalRequestInterceptor;
+exports.clearGlobalRequestInterceptor = clearGlobalRequestInterceptor;
 exports.createGlobalRequestInterceptor = createGlobalRequestInterceptor;
 
-var _oktaIdxJs = _interopRequireDefault(require("@okta/okta-idx-js"));
+var _assign = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/assign"));
+
+var _keys = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/keys"));
+
+var _idxJs = _interopRequireDefault(require("./idx-js"));
 
 /*!
  * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
@@ -24,7 +29,11 @@ var _oktaIdxJs = _interopRequireDefault(require("@okta/okta-idx-js"));
 // This means that multiple instances of OktaAuth will see the same header modifications
 // TODO: use AuthJS http agent for IDX API requests. OKTA-417473
 function setGlobalRequestInterceptor(fn) {
-  _oktaIdxJs.default.client.interceptors.request.use(fn);
+  _idxJs.default.client.interceptors.request.use(fn);
+}
+
+function clearGlobalRequestInterceptor() {
+  _idxJs.default.client.interceptors.request.clear();
 } // A factory which returns a function that can be passed to `setGlobalRequestInterceptor`
 
 
@@ -33,9 +42,16 @@ function createGlobalRequestInterceptor(sdk) {
     // Set user-agent and any other custom headers set in the options
     var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();
 
-    const headers = Object.assign({ ...oktaUserAgentHeader
+    const headers = (0, _assign.default)({ ...oktaUserAgentHeader
     }, sdk.options.headers);
-    Object.keys(headers).forEach(name => {
+    (0, _keys.default)(headers).forEach(name => {
+      // X-Device-Token may only be specified if the /interact request includes a `client_secret`
+      // which indicates a trusted client which is allowed to present this information on behalf of the end user. 
+      // https://oktainc.atlassian.net/browse/OKTA-441021
+      if (!sdk.options.clientSecret && name === 'X-Device-Token') {
+        return;
+      }
+
       requestConfig.headers[name] = headers[name];
     });
   };

package/cjs/idx/headers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../lib/idx/headers.ts"],"names":["setGlobalRequestInterceptor","fn","idx","client","interceptors","request","use","createGlobalRequestInterceptor","sdk","requestConfig","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","headers","Object","assign","options","keys","forEach","name"],"mappings":";;;;;;;AAkBA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAGO,SAASA,2BAAT,CAAqCC,EAArC,EAAyC;AAC9CC,qBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCC,GAAhC,CAAoCL,EAApC;AACD,C,CAED;;;AACO,SAASM,8BAAT,CAAwCC,GAAxC,EAAuD;AAC5D,SAAO,UAAUC,aAAV,EAAyB;AAC9B;AACA,QAAIC,mBAAmB,GAAGF,GAAG,CAACG,cAAJ,CAAmBC,aAAnB,EAA1B;;AACA,UAAMC,OAAO,GAAGC,MAAM,CAACC,MAAP,CAAc,EAC5B,GAAGL;AADyB,KAAd,EAEbF,GAAG,CAACQ,OAAJ,CAAYH,OAFC,CAAhB;AAGAC,IAAAA,MAAM,CAACG,IAAP,CAAYJ,OAAZ,EAAqBK,OAArB,CAA6BC,IAAI,IAAI;AACnCV,MAAAA,aAAa,CAACI,OAAd,CAAsBM,IAAtB,IAA8BN,OAAO,CAACM,IAAD,CAArC;AACD,KAFD;AAGD,GATD;AAUD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n// BETA - SUBJECT TO CHANGE\n// Currently we must modify request headers using the single instance of `idx.client.interceptors` exported from IDX-JS\n// This means that multiple instances of OktaAuth will see the same header modifications\n// TODO: use AuthJS http agent for IDX API requests. OKTA-417473\nimport { OktaAuth } from '../types';\nimport idx from '@okta/okta-idx-js';\nexport function setGlobalRequestInterceptor(fn) {\n  idx.client.interceptors.request.use(fn);\n}\n\n// A factory which returns a function that can be passed to `setGlobalRequestInterceptor`\nexport function createGlobalRequestInterceptor(sdk: OktaAuth) {\n  return function (requestConfig) {\n    // Set user-agent and any other custom headers set in the options\n    var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n    const headers = Object.assign({\n      ...oktaUserAgentHeader\n    }, sdk.options.headers);\n    Object.keys(headers).forEach(name => {\n      requestConfig.headers[name] = headers[name];\n    });\n  };\n}\n"],"file":"headers.js"}
+{"version":3,"sources":["../../../lib/idx/headers.ts"],"names":["setGlobalRequestInterceptor","fn","idx","client","interceptors","request","use","clearGlobalRequestInterceptor","clear","createGlobalRequestInterceptor","sdk","requestConfig","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","headers","options","forEach","name","clientSecret"],"mappings":";;;;;;;;;;;;AAkBA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAGO,SAASA,2BAAT,CAAqCC,EAArC,EAAyC;AAC9CC,iBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCC,GAAhC,CAAoCL,EAApC;AACD;;AAEM,SAASM,6BAAT,GAAyC;AAC9CL,iBAAIC,MAAJ,CAAWC,YAAX,CAAwBC,OAAxB,CAAgCG,KAAhC;AACD,C,CAED;;;AACO,SAASC,8BAAT,CAAwCC,GAAxC,EAAgE;AACrE,SAAO,UAAUC,aAAV,EAAyB;AAC9B;AACA,QAAIC,mBAAmB,GAAGF,GAAG,CAACG,cAAJ,CAAmBC,aAAnB,EAA1B;;AACA,UAAMC,OAAO,GAAG,qBAAc,EAC5B,GAAGH;AADyB,KAAd,EAEbF,GAAG,CAACM,OAAJ,CAAYD,OAFC,CAAhB;AAGA,uBAAYA,OAAZ,EAAqBE,OAArB,CAA6BC,IAAI,IAAI;AACnC;AACA;AACA;AACA,UAAI,CAACR,GAAG,CAACM,OAAJ,CAAYG,YAAb,IAA6BD,IAAI,KAAK,gBAA1C,EAA4D;AAC1D;AACD;;AACDP,MAAAA,aAAa,CAACI,OAAd,CAAsBG,IAAtB,IAA8BH,OAAO,CAACG,IAAD,CAArC;AACD,KARD;AASD,GAfD;AAgBD","sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n// BETA - SUBJECT TO CHANGE\n// Currently we must modify request headers using the single instance of `idx.client.interceptors` exported from IDX-JS\n// This means that multiple instances of OktaAuth will see the same header modifications\n// TODO: use AuthJS http agent for IDX API requests. OKTA-417473\nimport { OktaAuthInterface } from '../types';\nimport idx from './idx-js';\nexport function setGlobalRequestInterceptor(fn) {\n  idx.client.interceptors.request.use(fn);\n}\n\nexport function clearGlobalRequestInterceptor() {\n  idx.client.interceptors.request.clear();\n}\n\n// A factory which returns a function that can be passed to `setGlobalRequestInterceptor`\nexport function createGlobalRequestInterceptor(sdk: OktaAuthInterface) {\n  return function (requestConfig) {\n    // Set user-agent and any other custom headers set in the options\n    var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n    const headers = Object.assign({\n      ...oktaUserAgentHeader\n    }, sdk.options.headers);\n    Object.keys(headers).forEach(name => {\n      // X-Device-Token may only be specified if the /interact request includes a `client_secret`\n      // which indicates a trusted client which is allowed to present this information on behalf of the end user. \n      // https://oktainc.atlassian.net/browse/OKTA-441021\n      if (!sdk.options.clientSecret && name === 'X-Device-Token') {\n        return;\n      }\n      requestConfig.headers[name] = headers[name];\n    });\n  };\n}\n"],"file":"headers.js"}

package/cjs/idx/idx-js/client.js

@@ -0,0 +1,91 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.request = exports.HttpClient = exports.Interceptor = void 0;
+
+var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs3/helpers/defineProperty"));
+
+var _crossFetch = _interopRequireDefault(require("cross-fetch"));
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+// @ts-nocheck
+
+/**
+ * Reusable interceptor interface
+ */
+class Interceptor {
+  constructor() {
+    (0, _defineProperty2.default)(this, "handlers", []);
+  }
+
+  // Adds a new interceptor to our HttpClient
+  use(before) {
+    this.handlers.push({
+      before
+    });
+  } // Clears all interceptors
+
+
+  clear() {
+    this.handlers = [];
+  }
+
+}
+/**
+ * Singleton instance of the IdX HTTP Client
+ *
+ * Invoke the `use` method to add a new interceptor:
+ *   - client.interceptors.request.use((requestConfig) => { some logic });
+ */
+
+
+exports.Interceptor = Interceptor;
+const HttpClient = {
+  interceptors: {
+    request: new Interceptor()
+  }
+};
+exports.HttpClient = HttpClient;
+
+const request = async (target, {
+  method = 'POST',
+  headers = {},
+  credentials = 'include',
+  body
+}) => {
+  const requestOptions = {
+    url: target,
+    method,
+    headers: { ...headers
+    },
+    credentials,
+    body
+  };
+
+  if (HttpClient.interceptors) {
+    HttpClient.interceptors.request.handlers.forEach(interceptor => {
+      interceptor.before(requestOptions);
+    });
+  } // Extract the URL to adhere to the fetch API
+
+
+  const {
+    url
+  } = requestOptions;
+  delete requestOptions.url;
+  return (0, _crossFetch.default)(url, requestOptions);
+};
+
+exports.request = request;
+//# sourceMappingURL=client.js.map

package/cjs/idx/idx-js/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/client.ts"],"names":["Interceptor","use","before","handlers","push","clear","HttpClient","interceptors","request","target","method","headers","credentials","body","requestOptions","url","forEach","interceptor"],"mappings":";;;;;;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;AAGA;AACA;AACA;AACO,MAAMA,WAAN,CAAkB;AAAA;AAAA,oDACZ,EADY;AAAA;;AAGvB;AACAC,EAAAA,GAAG,CAACC,MAAD,EAAS;AACV,SAAKC,QAAL,CAAcC,IAAd,CAAmB;AACjBF,MAAAA;AADiB,KAAnB;AAGD,GARsB,CAUvB;;;AACAG,EAAAA,KAAK,GAAG;AACN,SAAKF,QAAL,GAAgB,EAAhB;AACD;;AAbsB;AAgBzB;AACA;AACA;AACA;AACA;AACA;;;;AACO,MAAMG,UAAU,GAAG;AACxBC,EAAAA,YAAY,EAAE;AACZC,IAAAA,OAAO,EAAE,IAAIR,WAAJ;AADG;AADU,CAAnB;;;AAMA,MAAMQ,OAAO,GAAG,OACrBC,MADqB,EAErB;AACEC,EAAAA,MAAM,GAAG,MADX;AAEEC,EAAAA,OAAO,GAAG,EAFZ;AAGEC,EAAAA,WAAW,GAAG,SAHhB;AAIEC,EAAAA;AAJF,CAFqB,KAQlB;AACH,QAAMC,cAAc,GAAG;AACrBC,IAAAA,GAAG,EAAEN,MADgB;AAErBC,IAAAA,MAFqB;AAGrBC,IAAAA,OAAO,EAAE,EACP,GAAGA;AADI,KAHY;AAMrBC,IAAAA,WANqB;AAOrBC,IAAAA;AAPqB,GAAvB;;AAUA,MAAIP,UAAU,CAACC,YAAf,EAA6B;AAC3BD,IAAAA,UAAU,CAACC,YAAX,CAAwBC,OAAxB,CAAgCL,QAAhC,CAAyCa,OAAzC,CAAkDC,WAAW,IAAI;AAC/DA,MAAAA,WAAW,CAACf,MAAZ,CAAmBY,cAAnB;AACD,KAFD;AAGD,GAfE,CAiBH;;;AACA,QAAM;AAAEC,IAAAA;AAAF,MAAUD,cAAhB;AACA,SAAOA,cAAc,CAACC,GAAtB;AAEA,SAAO,yBAAOA,GAAP,EAAYD,cAAZ,CAAP;AACD,CA9BM","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// @ts-nocheck\nimport fetch from 'cross-fetch';\n\n/**\n * Reusable interceptor interface\n */\nexport class Interceptor {\n  handlers = [];\n\n  // Adds a new interceptor to our HttpClient\n  use(before) {\n    this.handlers.push({\n      before,\n    });\n  }\n\n  // Clears all interceptors\n  clear() {\n    this.handlers = [];\n  }\n}\n\n/**\n * Singleton instance of the IdX HTTP Client\n *\n * Invoke the `use` method to add a new interceptor:\n *   - client.interceptors.request.use((requestConfig) => { some logic });\n */\nexport const HttpClient = {\n  interceptors: {\n    request: new Interceptor(),\n  },\n};\n\nexport const request = async (\n  target, \n  { \n    method = 'POST', \n    headers = {}, \n    credentials = 'include', \n    body \n  }\n) => {\n  const requestOptions = {\n    url: target,\n    method,\n    headers: {\n      ...headers,\n    },\n    credentials,\n    body,\n  };\n\n  if (HttpClient.interceptors) {\n    HttpClient.interceptors.request.handlers.forEach( interceptor => {\n      interceptor.before(requestOptions);\n    });\n  }\n\n  // Extract the URL to adhere to the fetch API\n  const { url } = requestOptions;\n  delete requestOptions.url;\n\n  return fetch( url, requestOptions );\n};\n"],"file":"client.js"}

package/cjs/idx/idx-js/index.js

@@ -0,0 +1,162 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.default = void 0;
+
+var _indexOf = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/index-of"));
+
+var _promise = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/promise"));
+
+var _url = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/url"));
+
+var _introspect = _interopRequireDefault(require("./introspect"));
+
+var _interact = _interopRequireDefault(require("./interact"));
+
+var _parsers = _interopRequireDefault(require("./parsers"));
+
+var _client = require("./client");
+
+var _util = require("./util");
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+/* eslint-disable complexity, max-statements, max-len, camelcase */
+// @ts-nocheck
+const LATEST_SUPPORTED_IDX_API_VERSION = '1.0.0';
+
+const start = async function start({
+  withCredentials,
+  clientId,
+  domain,
+  issuer,
+  stateHandle,
+  interactionHandle,
+  version,
+  redirectUri,
+  state,
+  scopes,
+  codeChallenge,
+  codeChallengeMethod,
+  activationToken,
+  recoveryToken
+}) {
+  var _issuer, _issuer2;
+
+  issuer = (_issuer = issuer) === null || _issuer === void 0 ? void 0 : _issuer.replace(/\/+$/, '');
+  const baseUrl = ((_issuer2 = issuer) === null || _issuer2 === void 0 ? void 0 : (0, _indexOf.default)(_issuer2).call(_issuer2, '/oauth2')) > 0 ? issuer : issuer + '/oauth2'; // org AS uses domain as AS, but we need the base url for calls
+
+  const toPersist = {
+    baseUrl,
+    clientId,
+    state,
+    withCredentials
+  };
+
+  if (!domain && !issuer) {
+    return _promise.default.reject({
+      error: 'issuer is required'
+    });
+  }
+
+  if (!stateHandle && !clientId) {
+    // redirectUri is only required on self-hosted flow
+    return _promise.default.reject({
+      error: 'clientId is required'
+    });
+  }
+
+  if (!stateHandle && !redirectUri) {
+    // redirectUri is only required on self-hosted flow
+    return _promise.default.reject({
+      error: 'redirectUri is required'
+    });
+  }
+
+  if (!stateHandle && !(codeChallenge && codeChallengeMethod)) {
+    return _promise.default.reject({
+      error: 'PKCE params (codeChallenge, codeChallengeMethod) are required'
+    });
+  }
+
+  if (!domain) {
+    domain = new _url.default(issuer).origin;
+  }
+
+  (0, _util.validateVersionConfig)(version);
+
+  if (!stateHandle && !interactionHandle) {
+    // start a new transaction
+    try {
+      const interactParams = {
+        withCredentials,
+        clientId,
+        baseUrl,
+        scopes,
+        redirectUri,
+        codeChallenge,
+        codeChallengeMethod,
+        state,
+        activationToken,
+        recoveryToken
+      };
+      const interaction_handle = await (0, _interact.default)(interactParams);
+      interactionHandle = interaction_handle;
+      toPersist.interactionHandle = interactionHandle;
+    } catch (error) {
+      return _promise.default.reject({
+        error
+      });
+    }
+  }
+
+  try {
+    const {
+      makeIdxState
+    } = (0, _parsers.default)(version);
+    const idxResponse = await (0, _introspect.default)({
+      withCredentials,
+      domain,
+      interactionHandle,
+      stateHandle,
+      version
+    }).catch(err => _promise.default.reject({
+      error: 'introspect call failed',
+      // Transform all errors into an IdX State object.
+      // This allows IdX based errors (messages) to optionally proceed with remediation forms
+      details: makeIdxState(err, toPersist)
+    }));
+    const idxState = makeIdxState(idxResponse, toPersist);
+    return idxState;
+  } catch (error) {
+    return _promise.default.reject({
+      error
+    });
+  }
+};
+
+const {
+  makeIdxState
+} = (0, _parsers.default)(LATEST_SUPPORTED_IDX_API_VERSION);
+var _default = {
+  start,
+  introspect: _introspect.default,
+  interact: _interact.default,
+  makeIdxState,
+  client: _client.HttpClient,
+  LATEST_SUPPORTED_IDX_API_VERSION
+};
+exports.default = _default;
+module.exports = exports.default;
+//# sourceMappingURL=index.js.map

package/cjs/idx/idx-js/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/index.ts"],"names":["LATEST_SUPPORTED_IDX_API_VERSION","start","withCredentials","clientId","domain","issuer","stateHandle","interactionHandle","version","redirectUri","state","scopes","codeChallenge","codeChallengeMethod","activationToken","recoveryToken","replace","baseUrl","toPersist","reject","error","origin","interactParams","interaction_handle","makeIdxState","idxResponse","catch","err","details","idxState","introspect","interact","client","HttpClient"],"mappings":";;;;;;;;;;;;AAcA;;AACA;;AACA;;AACA;;AACA;;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AAOA,MAAMA,gCAAgC,GAAG,OAAzC;;AAEA,MAAMC,KAAK,GAAG,eAAeA,KAAf,CAAqB;AACjCC,EAAAA,eADiC;AAEjCC,EAAAA,QAFiC;AAGjCC,EAAAA,MAHiC;AAIjCC,EAAAA,MAJiC;AAKjCC,EAAAA,WALiC;AAMjCC,EAAAA,iBANiC;AAOjCC,EAAAA,OAPiC;AAQjCC,EAAAA,WARiC;AASjCC,EAAAA,KATiC;AAUjCC,EAAAA,MAViC;AAWjCC,EAAAA,aAXiC;AAYjCC,EAAAA,mBAZiC;AAajCC,EAAAA,eAbiC;AAcjCC,EAAAA;AAdiC,CAArB,EAeX;AAAA;;AAEDV,EAAAA,MAAM,cAAGA,MAAH,4CAAG,QAAQW,OAAR,CAAgB,MAAhB,EAAwB,EAAxB,CAAT;AACA,QAAMC,OAAO,GAAG,aAAAZ,MAAM,UAAN,kFAAgB,SAAhB,KAA6B,CAA7B,GAAiCA,MAAjC,GAA0CA,MAAM,GAAG,SAAnE,CAHC,CAG6E;;AAC9E,QAAMa,SAAS,GAAG;AAChBD,IAAAA,OADgB;AAEhBd,IAAAA,QAFgB;AAGhBO,IAAAA,KAHgB;AAIhBR,IAAAA;AAJgB,GAAlB;;AAOA,MAAK,CAACE,MAAD,IAAW,CAACC,MAAjB,EAAyB;AACvB,WAAO,iBAAQc,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAACd,WAAD,IAAgB,CAACH,QAAtB,EAAiC;AAAE;AACjC,WAAO,iBAAQgB,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAACd,WAAD,IAAgB,CAACG,WAAtB,EAAoC;AAAE;AACpC,WAAO,iBAAQU,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAI,CAACd,WAAD,IAAgB,EAAEM,aAAa,IAAIC,mBAAnB,CAApB,EAA6D;AAC3D,WAAO,iBAAQM,MAAR,CAAe;AAAEC,MAAAA,KAAK,EAAE;AAAT,KAAf,CAAP;AACD;;AAED,MAAK,CAAChB,MAAN,EAAe;AACbA,IAAAA,MAAM,GAAG,iBAAQC,MAAR,EAAgBgB,MAAzB;AACD;;AAED,mCAAsBb,OAAtB;;AAEA,MAAK,CAACF,WAAD,IAAgB,CAACC,iBAAtB,EAA0C;AAAE;AAC1C,QAAI;AACF,YAAMe,cAAc,GAAG;AACrBpB,QAAAA,eADqB;AAErBC,QAAAA,QAFqB;AAGrBc,QAAAA,OAHqB;AAIrBN,QAAAA,MAJqB;AAKrBF,QAAAA,WALqB;AAMrBG,QAAAA,aANqB;AAOrBC,QAAAA,mBAPqB;AAQrBH,QAAAA,KARqB;AASrBI,QAAAA,eATqB;AAUrBC,QAAAA;AAVqB,OAAvB;AAaA,YAAMQ,kBAAkB,GAAG,MAAM,uBAAUD,cAAV,CAAjC;AACAf,MAAAA,iBAAiB,GAAGgB,kBAApB;AACAL,MAAAA,SAAS,CAACX,iBAAV,GAA8BA,iBAA9B;AACD,KAjBD,CAiBE,OAAOa,KAAP,EAAc;AACd,aAAO,iBAAQD,MAAR,CAAe;AAAEC,QAAAA;AAAF,OAAf,CAAP;AACD;AACF;;AAED,MAAI;AACF,UAAM;AAAEI,MAAAA;AAAF,QAAmB,sBAAkBhB,OAAlB,CAAzB;AACA,UAAMiB,WAAW,GAAG,MAAM,yBAAW;AAAEvB,MAAAA,eAAF;AAAmBE,MAAAA,MAAnB;AAA2BG,MAAAA,iBAA3B;AAA8CD,MAAAA,WAA9C;AAA2DE,MAAAA;AAA3D,KAAX,EACvBkB,KADuB,CAChBC,GAAG,IAAI,iBAAQR,MAAR,CAAe;AAC5BC,MAAAA,KAAK,EAAE,wBADqB;AAE5B;AACA;AACAQ,MAAAA,OAAO,EAAEJ,YAAY,CAAEG,GAAF,EAAOT,SAAP;AAJO,KAAf,CADS,CAA1B;AAOA,UAAMW,QAAQ,GAAGL,YAAY,CAAEC,WAAF,EAAeP,SAAf,CAA7B;AACA,WAAOW,QAAP;AACD,GAXD,CAWE,OAAOT,KAAP,EAAc;AACd,WAAO,iBAAQD,MAAR,CAAe;AAAEC,MAAAA;AAAF,KAAf,CAAP;AACD;AACF,CArFD;;AAsFA,MAAM;AAAEI,EAAAA;AAAF,IAAmB,sBAAkBxB,gCAAlB,CAAzB;eAEe;AACbC,EAAAA,KADa;AAEb6B,EAAAA,UAAU,EAAVA,mBAFa;AAGbC,EAAAA,QAAQ,EAARA,iBAHa;AAIbP,EAAAA,YAJa;AAKbQ,EAAAA,MAAM,EAAEC,kBALK;AAMbjC,EAAAA;AANa,C","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable complexity, max-statements, max-len, camelcase */\n// @ts-nocheck\nimport introspect from './introspect';\nimport interact from './interact';\nimport parsersForVersion from './parsers';\nimport { HttpClient } from './client';\nimport { validateVersionConfig } from './util';\n\nconst LATEST_SUPPORTED_IDX_API_VERSION = '1.0.0';\n\nconst start = async function start({\n  withCredentials,\n  clientId,\n  domain,\n  issuer,\n  stateHandle,\n  interactionHandle,\n  version,\n  redirectUri,\n  state,\n  scopes,\n  codeChallenge,\n  codeChallengeMethod,\n  activationToken,\n  recoveryToken\n}) {\n\n  issuer = issuer?.replace(/\\/+$/, '');\n  const baseUrl = issuer?.indexOf('/oauth2') > 0 ? issuer : issuer + '/oauth2'; // org AS uses domain as AS, but we need the base url for calls\n  const toPersist = {\n    baseUrl,\n    clientId,\n    state,\n    withCredentials\n  };\n\n  if ( !domain && !issuer) {\n    return Promise.reject({ error: 'issuer is required' });\n  }\n\n  if ( !stateHandle && !clientId ) { // redirectUri is only required on self-hosted flow\n    return Promise.reject({ error: 'clientId is required' });\n  }\n\n  if ( !stateHandle && !redirectUri ) { // redirectUri is only required on self-hosted flow\n    return Promise.reject({ error: 'redirectUri is required' });\n  }\n\n  if (!stateHandle && !(codeChallenge && codeChallengeMethod)) {\n    return Promise.reject({ error: 'PKCE params (codeChallenge, codeChallengeMethod) are required' });\n  }\n\n  if ( !domain ) {\n    domain = new URL(issuer).origin;\n  }\n\n  validateVersionConfig(version);\n\n  if ( !stateHandle && !interactionHandle ) { // start a new transaction\n    try {\n      const interactParams = {\n        withCredentials,\n        clientId,\n        baseUrl,\n        scopes,\n        redirectUri,\n        codeChallenge,\n        codeChallengeMethod,\n        state,\n        activationToken,\n        recoveryToken\n      };\n\n      const interaction_handle = await interact( interactParams );\n      interactionHandle = interaction_handle;\n      toPersist.interactionHandle = interactionHandle;\n    } catch (error) {\n      return Promise.reject({ error });\n    }\n  }\n\n  try {\n    const { makeIdxState } = parsersForVersion(version);\n    const idxResponse = await introspect({ withCredentials, domain, interactionHandle, stateHandle, version })\n      .catch( err => Promise.reject({\n        error: 'introspect call failed',\n        // Transform all errors into an IdX State object.\n        // This allows IdX based errors (messages) to optionally proceed with remediation forms\n        details: makeIdxState( err, toPersist )\n      }) );\n    const idxState = makeIdxState( idxResponse, toPersist );\n    return idxState;\n  } catch (error) {\n    return Promise.reject({ error });\n  }\n};\nconst { makeIdxState } = parsersForVersion(LATEST_SUPPORTED_IDX_API_VERSION);\n\nexport default {\n  start,\n  introspect,\n  interact,\n  makeIdxState,\n  client: HttpClient,\n  LATEST_SUPPORTED_IDX_API_VERSION,\n};\n"],"file":"index.js"}

package/cjs/idx/idx-js/interact.js

@@ -0,0 +1,83 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.default = void 0;
+
+var _promise = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/promise"));
+
+var _map = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/map"));
+
+var _entries = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/entries"));
+
+var _client = require("./client");
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+/* eslint-disable camelcase */
+// @ts-nocheck
+const parseAndReject = response => response.json().then(err => _promise.default.reject(err));
+
+const interact = async function interact({
+  withCredentials,
+  clientId,
+  baseUrl,
+  scopes = ['openid', 'email'],
+  redirectUri,
+  codeChallenge,
+  codeChallengeMethod,
+  state,
+  activationToken,
+  recoveryToken,
+  clientSecret
+}) {
+  var _context;
+
+  const target = `${baseUrl}/v1/interact`;
+  const params = {
+    client_id: clientId,
+    scope: scopes.join(' '),
+    redirect_uri: redirectUri,
+    code_challenge: codeChallenge,
+    code_challenge_method: codeChallengeMethod,
+    state
+  };
+
+  if (activationToken) {
+    params.activation_token = activationToken;
+  }
+
+  if (recoveryToken) {
+    params.recovery_token = recoveryToken;
+  }
+
+  if (clientSecret) {
+    params.client_secret = clientSecret;
+  }
+
+  const body = (0, _map.default)(_context = (0, _entries.default)(params)).call(_context, ([param, value]) => `${param}=${encodeURIComponent(value)}`).join('&');
+  const headers = {
+    'content-type': 'application/x-www-form-urlencoded'
+  };
+  const credentials = withCredentials === false ? 'omit' : 'include';
+  return (0, _client.request)(target, {
+    credentials,
+    headers,
+    body
+  }).then(response => response.ok ? response.json() : parseAndReject(response)).then(data => data.interaction_handle);
+};
+
+var _default = interact;
+exports.default = _default;
+module.exports = exports.default;
+//# sourceMappingURL=interact.js.map

package/cjs/idx/idx-js/interact.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/interact.ts"],"names":["parseAndReject","response","json","then","err","reject","interact","withCredentials","clientId","baseUrl","scopes","redirectUri","codeChallenge","codeChallengeMethod","state","activationToken","recoveryToken","clientSecret","target","params","client_id","scope","join","redirect_uri","code_challenge","code_challenge_method","activation_token","recovery_token","client_secret","body","param","value","encodeURIComponent","headers","credentials","ok","data","interaction_handle"],"mappings":";;;;;;;;;;;;AAcA;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AAGA,MAAMA,cAAc,GAAGC,QAAQ,IAAIA,QAAQ,CAACC,IAAT,GAAgBC,IAAhB,CAAsBC,GAAG,IAAI,iBAAQC,MAAR,CAAeD,GAAf,CAA7B,CAAnC;;AAEA,MAAME,QAAQ,GAAG,eAAeA,QAAf,CAAwB;AACvCC,EAAAA,eADuC;AAEvCC,EAAAA,QAFuC;AAGvCC,EAAAA,OAHuC;AAIvCC,EAAAA,MAAM,GAAG,CAAC,QAAD,EAAW,OAAX,CAJ8B;AAKvCC,EAAAA,WALuC;AAMvCC,EAAAA,aANuC;AAOvCC,EAAAA,mBAPuC;AAQvCC,EAAAA,KARuC;AASvCC,EAAAA,eATuC;AAUvCC,EAAAA,aAVuC;AAWvCC,EAAAA;AAXuC,CAAxB,EAYd;AAAA;;AAED,QAAMC,MAAM,GAAI,GAAET,OAAQ,cAA1B;AACA,QAAMU,MAAM,GAAG;AACbC,IAAAA,SAAS,EAAEZ,QADE;AAEba,IAAAA,KAAK,EAAEX,MAAM,CAACY,IAAP,CAAY,GAAZ,CAFM;AAGbC,IAAAA,YAAY,EAAEZ,WAHD;AAIba,IAAAA,cAAc,EAAEZ,aAJH;AAKba,IAAAA,qBAAqB,EAAEZ,mBALV;AAMbC,IAAAA;AANa,GAAf;;AAQA,MAAIC,eAAJ,EAAqB;AACnBI,IAAAA,MAAM,CAACO,gBAAP,GAA0BX,eAA1B;AACD;;AACD,MAAIC,aAAJ,EAAmB;AACjBG,IAAAA,MAAM,CAACQ,cAAP,GAAwBX,aAAxB;AACD;;AACD,MAAIC,YAAJ,EAAkB;AAChBE,IAAAA,MAAM,CAACS,aAAP,GAAuBX,YAAvB;AACD;;AACD,QAAMY,IAAI,GAAG,mDAAeV,MAAf,kBACL,CAAC,CAACW,KAAD,EAAQC,KAAR,CAAD,KAAqB,GAAED,KAAM,IAAGE,kBAAkB,CAACD,KAAD,CAAQ,EADrD,EAEVT,IAFU,CAEL,GAFK,CAAb;AAGA,QAAMW,OAAO,GAAG;AACd,oBAAgB;AADF,GAAhB;AAGA,QAAMC,WAAW,GAAG3B,eAAe,KAAK,KAApB,GAA4B,MAA5B,GAAqC,SAAzD;AACA,SAAO,qBAAQW,MAAR,EAAgB;AAAEgB,IAAAA,WAAF;AAAeD,IAAAA,OAAf;AAAwBJ,IAAAA;AAAxB,GAAhB,EACJ1B,IADI,CACEF,QAAQ,IAAIA,QAAQ,CAACkC,EAAT,GAAclC,QAAQ,CAACC,IAAT,EAAd,GAAgCF,cAAc,CAAEC,QAAF,CAD5D,EAEJE,IAFI,CAEEiC,IAAI,IAAIA,IAAI,CAACC,kBAFf,CAAP;AAGD,CA1CD;;eA4Ce/B,Q","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable camelcase */\n// @ts-nocheck\nimport { request } from './client';\n\nconst parseAndReject = response => response.json().then( err => Promise.reject(err) );\n\nconst interact = async function interact({\n  withCredentials,\n  clientId,\n  baseUrl,\n  scopes = ['openid', 'email'],\n  redirectUri,\n  codeChallenge,\n  codeChallengeMethod,\n  state,\n  activationToken,\n  recoveryToken,\n  clientSecret,\n}) {\n\n  const target = `${baseUrl}/v1/interact`;\n  const params = {\n    client_id: clientId,\n    scope: scopes.join(' '),\n    redirect_uri: redirectUri,\n    code_challenge: codeChallenge,\n    code_challenge_method: codeChallengeMethod,\n    state,\n  };\n  if (activationToken) {\n    params.activation_token = activationToken;\n  }\n  if (recoveryToken) {\n    params.recovery_token = recoveryToken;\n  }\n  if (clientSecret) {\n    params.client_secret = clientSecret;\n  }\n  const body = Object.entries(params)\n    .map( ([param, value]) => `${param}=${encodeURIComponent(value)}` )\n    .join('&');\n  const headers = {\n    'content-type': 'application/x-www-form-urlencoded',\n  };\n  const credentials = withCredentials === false ? 'omit' : 'include';\n  return request(target, { credentials, headers, body })\n    .then( response => response.ok ? response.json() : parseAndReject( response ) )\n    .then( data => data.interaction_handle);\n};\n\nexport default interact;\n"],"file":"interact.js"}

package/cjs/idx/idx-js/introspect.js

@@ -0,0 +1,58 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.default = void 0;
+
+var _promise = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/promise"));
+
+var _stringify = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/json/stringify"));
+
+var _client = require("./client");
+
+var _util = require("./util");
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+const parseAndReject = response => response.json().then(err => _promise.default.reject(err));
+
+const introspect = async function introspect({
+  withCredentials,
+  domain,
+  interactionHandle,
+  stateHandle,
+  version
+}) {
+  (0, _util.validateVersionConfig)(version);
+  const target = `${domain}/idp/idx/introspect`;
+  const body = stateHandle ? {
+    stateToken: stateHandle
+  } : {
+    interactionHandle
+  };
+  const headers = {
+    'content-type': `application/ion+json; okta-version=${version}`,
+    // Server wants this version info
+    accept: `application/ion+json; okta-version=${version}`
+  };
+  const credentials = withCredentials === false ? 'omit' : 'include';
+  return (0, _client.request)(target, {
+    credentials,
+    headers,
+    body: (0, _stringify.default)(body)
+  }).then(response => response.ok ? response.json() : parseAndReject(response));
+};
+
+var _default = introspect;
+exports.default = _default;
+module.exports = exports.default;
+//# sourceMappingURL=introspect.js.map

package/cjs/idx/idx-js/introspect.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/introspect.ts"],"names":["parseAndReject","response","json","then","err","reject","introspect","withCredentials","domain","interactionHandle","stateHandle","version","target","body","stateToken","headers","accept","credentials","ok"],"mappings":";;;;;;;;;;AAYA;;AACA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAaA,MAAMA,cAAc,GAAGC,QAAQ,IAAIA,QAAQ,CAACC,IAAT,GAAgBC,IAAhB,CAAsBC,GAAG,IAAI,iBAAQC,MAAR,CAAeD,GAAf,CAA7B,CAAnC;;AAEA,MAAME,UAAU,GAAG,eAAeA,UAAf,CAA0B;AAC3CC,EAAAA,eAD2C;AAE3CC,EAAAA,MAF2C;AAG3CC,EAAAA,iBAH2C;AAI3CC,EAAAA,WAJ2C;AAK3CC,EAAAA;AAL2C,CAA1B,EAMG;AACpB,mCAAsBA,OAAtB;AACA,QAAMC,MAAM,GAAI,GAAEJ,MAAO,qBAAzB;AACA,QAAMK,IAAI,GAAGH,WAAW,GAAG;AAAEI,IAAAA,UAAU,EAAEJ;AAAd,GAAH,GAAiC;AAAED,IAAAA;AAAF,GAAzD;AACA,QAAMM,OAAO,GAAG;AACd,oBAAiB,sCAAqCJ,OAAQ,EADhD;AACmD;AACjEK,IAAAA,MAAM,EAAG,sCAAqCL,OAAQ;AAFxC,GAAhB;AAIA,QAAMM,WAAW,GAAGV,eAAe,KAAK,KAApB,GAA4B,MAA5B,GAAqC,SAAzD;AACA,SAAO,qBAAQK,MAAR,EAAgB;AAAEK,IAAAA,WAAF;AAAeF,IAAAA,OAAf;AAAwBF,IAAAA,IAAI,EAAE,wBAAeA,IAAf;AAA9B,GAAhB,EACJV,IADI,CACEF,QAAQ,IAAIA,QAAQ,CAACiB,EAAT,GAAcjB,QAAQ,CAACC,IAAT,EAAd,GAAgCF,cAAc,CAAEC,QAAF,CAD5D,CAAP;AAED,CAjBD;;eAmBeK,U","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { request } from './client';\nimport { validateVersionConfig } from './util';\n\nexport interface IntrospectOptions {\n  domain: string;\n  withCredentials?: boolean;\n  interactionHandle?: string;\n  stateHandle?: string;\n  version?: string;\n}\n\nconst parseAndReject = response => response.json().then( err => Promise.reject(err) );\n\nconst introspect = async function introspect({\n  withCredentials,\n  domain,\n  interactionHandle,\n  stateHandle,\n  version,\n}: IntrospectOptions) {\n  validateVersionConfig(version);\n  const target = `${domain}/idp/idx/introspect`;\n  const body = stateHandle ? { stateToken: stateHandle } : { interactionHandle };\n  const headers = {\n    'content-type': `application/ion+json; okta-version=${version}`, // Server wants this version info\n    accept: `application/ion+json; okta-version=${version}`,\n  };\n  const credentials = withCredentials === false ? 'omit' : 'include';\n  return request(target, { credentials, headers, body: JSON.stringify(body) })\n    .then( response => response.ok ? response.json() : parseAndReject( response ) );\n};\n\nexport default introspect;\n"],"file":"introspect.js"}

package/cjs/idx/idx-js/parsers.js

@@ -0,0 +1,41 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.default = void 0;
+
+var _parsers = _interopRequireDefault(require("./v1/parsers"));
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+// We load all the current parsers, because we won't know in advance which version(s) we need to parse
+// Expect to only support current major - 1 (also suspect that this limit may never be hit)
+// @ts-nocheck
+// More granularity to be defined as needed
+const parsersForVersion = function parsersForVersion(version) {
+  switch (version) {
+    case '1.0.0':
+      return _parsers.default;
+
+    case undefined:
+    case null:
+      throw new Error('Api version is required');
+
+    default:
+      throw new Error(`Unknown api version: ${version}.  Use an exact semver version.`);
+  }
+};
+
+var _default = parsersForVersion;
+exports.default = _default;
+module.exports = exports.default;
+//# sourceMappingURL=parsers.js.map

package/cjs/idx/idx-js/parsers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/parsers.ts"],"names":["parsersForVersion","version","v1","undefined","Error"],"mappings":";;;;;;AAiBA;;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AAEA;AAC+B;AAE/B,MAAMA,iBAAiB,GAAG,SAASA,iBAAT,CAA4BC,OAA5B,EAAsC;AAC9D,UAAQA,OAAR;AACE,SAAK,OAAL;AACE,aAAOC,gBAAP;;AACF,SAAKC,SAAL;AACA,SAAK,IAAL;AACE,YAAM,IAAIC,KAAJ,CAAU,yBAAV,CAAN;;AACF;AACE,YAAM,IAAIA,KAAJ,CAAW,wBAAuBH,OAAQ,iCAA1C,CAAN;AAPJ;AASD,CAVD;;eAYeD,iB","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\n// We load all the current parsers, because we won't know in advance which version(s) we need to parse\n// Expect to only support current major - 1 (also suspect that this limit may never be hit)\n\n// @ts-nocheck\nimport v1 from './v1/parsers'; // More granularity to be defined as needed\n\nconst parsersForVersion = function parsersForVersion( version ) {\n  switch (version) {\n    case '1.0.0':\n      return v1;\n    case undefined:\n    case null:\n      throw new Error('Api version is required');\n    default:\n      throw new Error(`Unknown api version: ${version}.  Use an exact semver version.`);\n  }\n};\n\nexport default parsersForVersion;\n"],"file":"parsers.js"}

package/cjs/idx/idx-js/util.js

@@ -0,0 +1,34 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
+
+exports.validateVersionConfig = validateVersionConfig;
+
+var _parsers = _interopRequireDefault(require("./parsers"));
+
+/*!
+ * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+// @ts-nocheck
+function validateVersionConfig(version) {
+  if (!version) {
+    throw new Error('version is required');
+  }
+
+  const cleanVersion = (version !== null && version !== void 0 ? version : '').replace(/[^0-9a-zA-Z._-]/, '');
+
+  if (cleanVersion !== version || !version) {
+    throw new Error('invalid version supplied - version is required and uses semver syntax');
+  }
+
+  (0, _parsers.default)(version); // will throw for invalid version
+}
+//# sourceMappingURL=util.js.map

package/cjs/idx/idx-js/util.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../lib/idx/idx-js/util.ts"],"names":["validateVersionConfig","version","Error","cleanVersion","replace"],"mappings":";;;;;;AAaA;;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AAIO,SAASA,qBAAT,CAA+BC,OAA/B,EAAwC;AAC7C,MAAK,CAACA,OAAN,EAAgB;AACd,UAAM,IAAIC,KAAJ,CAAU,qBAAV,CAAN;AACD;;AAED,QAAMC,YAAY,GAAG,CAACF,OAAD,aAACA,OAAD,cAACA,OAAD,GAAY,EAAZ,EAAgBG,OAAhB,CAAwB,iBAAxB,EAA2C,EAA3C,CAArB;;AACA,MAAKD,YAAY,KAAKF,OAAjB,IAA4B,CAACA,OAAlC,EAA4C;AAC1C,UAAM,IAAIC,KAAJ,CAAU,uEAAV,CAAN;AACD;;AAED,wBAAkBD,OAAlB,EAV6C,CAUjB;AAC7B","sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// @ts-nocheck\nimport parsersForVersion from './parsers';\n\n\nexport function validateVersionConfig(version) {\n  if ( !version ) {\n    throw new Error('version is required');\n  }\n\n  const cleanVersion = (version ?? '').replace(/[^0-9a-zA-Z._-]/, '');\n  if ( cleanVersion !== version || !version ) {\n    throw new Error('invalid version supplied - version is required and uses semver syntax');\n  }\n\n  parsersForVersion(version); // will throw for invalid version\n}\n"],"file":"util.js"}