@okta/okta-auth-js 6.8.1 → 7.0.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 7.0.0
+
+### Breaking Changes
+
+- [#1181](https://github.com/okta/okta-auth-js/pull/1181) Removes legacy PKCE/OAuth storage
+- [#1271](https://github.com/okta/okta-auth-js/pull/1271) Removes `options` field from `NextStep` of IDX transaction
+- [#1274](https://github.com/okta/okta-auth-js/pull/1274) Removes shouldProceedWithEmailAuthenticator option from idx module
+
+## 6.9
+
+- [#1307](https://github.com/okta/okta-auth-js/pull/1307) Adds `nonce` param to `idx.interact` (and `idx.start`) 
+
 ## 6.8.1
 
 ### Fixes

package/README.md

@@ -41,7 +41,8 @@ This library uses semantic versioning and follows Okta's [library version policy
 
 | Version   | Status                           |
 | -------   | -------------------------------- |
-| `6.x`     | :heavy_check_mark: Stable        |
+| `7.x`     | :heavy_check_mark: Stable        |
+| `6.x`     | :warning: Retiring on 2023-09-30 |
 | `5.x`     | :warning: Retiring on 2022-10-31 |
 | `4.x`     | :x: Retired                      |
 | `3.x`     | :x: Retired                      |
@@ -94,7 +95,7 @@ require('@okta/okta-auth-js/polyfill');
 The built polyfill bundle is also available on our global CDN. Include the following script in your HTML file to load before any other scripts:
 
 ```html
-<script src="https://global.oktacdn.com/okta-auth-js/5.2.2/okta-auth-js.polyfill.js" type="text/javascript"></script>
+<script src="https://global.oktacdn.com/okta-auth-js/7.0.0/okta-auth-js.polyfill.js" type="text/javascript"></script>
 ```
 
 > :warning: The version shown in this sample may be older than the current version. We recommend using the highest version available
@@ -169,7 +170,7 @@ If you are using the JS on a web page from the browser, you can copy the `node_m
 The built library bundle is also available on our global CDN. Include the following script in your HTML file to load before your application script:
 
 ```html
-<script src="https://global.oktacdn.com/okta-auth-js/5.2.2/okta-auth-js.min.js" type="text/javascript"></script>
+<script src="https://global.oktacdn.com/okta-auth-js/7.0.0/okta-auth-js.min.js" type="text/javascript"></script>
 ```
 
 > :warning: The version shown in this sample may be older than the current version. We recommend using the highest version available
@@ -182,7 +183,7 @@ const oktaAuth = new OktaAuth({
 })
 ```
 
-However, if you're using a bundler like [Webpack](https://webpack.github.io/) or [Browserify](http://browserify.org/), you can simply import the module or require using CommonJS.
+However, if you're using a bundler like [Webpack](https://webpack.github.io/) or [Rollup](https://rollupjs.org/) you can simply import or require the module.
 
 ```javascript
 // ES module
@@ -198,7 +199,7 @@ var authClient = new OktaAuth(/* configOptions */);
 
 ## Usage guide
 
-For an overview of the client's features and authentication flows, check out [our developer docs](https://developer.okta.com/code/javascript/okta_auth_sdk). There, you will learn how to use the Auth SDK on a simple static page to:
+For an overview of the client's features and authentication flows, check out [our developer docs](https://developer.okta.com/docs/guides/auth-js/main/). There, you will learn how to use the Auth SDK on a simple static page to:
 
 * Retrieve and store an OpenID Connect (OIDC) token
 * Get an Okta session
@@ -213,20 +214,9 @@ You can also browse the full [API reference documentation](#api-reference).
 
 ```javascript
 var config = {
-  // Required config
   issuer: 'https://{yourOktaDomain}/oauth2/default',
-
-  // Required for login flow using getWithRedirect()
   clientId: 'GHtf9iJdr60A9IYrR0jw',
   redirectUri: 'https://acme.com/oauth2/callback/home',
-
-  // Parse authorization code from hash fragment instead of search query
-  responseMode: 'fragment',
-
-  // Configure TokenManager to use sessionStorage instead of localStorage
-  tokenManager: {
-    storage: 'sessionStorage'
-  }
 };
 
 var authClient = new OktaAuth(config);
@@ -242,37 +232,37 @@ By default, creating a new instance of `OktaAuth` will not create any asynchrono
   await authClient.stop(); // stop the service
 ```
 
-Starting the service will also call [authStateManager.updateAuthState](#authstatemanagerupdateauthstate).
+> **Note:** Starting the service will also call [authStateManager.updateAuthState](#authstatemanagerupdateauthstate).
 
 ### Usage with Typescript
 
-Types are implicitly provided by this library through the `types` entry in `package.json`. Types can also be referenced explicitly by importing them.
+Type definitions are provided implicitly through the `types` entry in `package.json`. Types can also be referenced explicitly by importing them.
 
 ```typescript
 import {
   OktaAuth,
   OktaAuthOptions,
-  TokenManager,
+  TokenManagerInterface,
   AccessToken,
   IDToken,
   UserClaims,
   TokenParams
-} from '@okta/okta-auth-js'
+} from '@okta/okta-auth-js';
 
 const config: OktaAuthOptions = {
   issuer: 'https://{yourOktaDomain}'
-}
+};
 
-const authClient: OktaAuth = new OktaAuth(config)
-const tokenManager: TokenManager = authClient.tokenManager;
+const authClient: OktaAuth = new OktaAuth(config);
+const tokenManager: TokenManagerInterface = authClient.tokenManager;
 const accessToken: AccessToken = await tokenManager.get('accessToken') as AccessToken;
 const idToken: IDToken = await tokenManager.get('idToken') as IDToken;
-const userInfo: UserClaims = await authClient.getUserInfo(accessToken, idToken);
+const userInfo: UserClaims = await authClient.token.getUserInfo(accessToken, idToken);
 
 if (!userInfo) {
   const tokenParams: TokenParams = {
     scopes: ['openid', 'email', 'custom_scope'],
-  }
+  };
   authClient.token.getWithRedirect(tokenParams);
 }
 ```
@@ -280,14 +270,14 @@ if (!userInfo) {
 #### Usage with Typescript < 3.6
 
 Typescript versions prior to 3.6 have no type definitions for WebAuthn. 
-Support for WebAuthn in IDX API was introduced in `OktaAuth 6.1.0`. 
+Support for WebAuthn in IDX API was introduced in `@okta/okta-auth-js@6.1.0`. 
 To solve this issue please install package `@types/webappsec-credential-management` version `^0.5.1`. 
 
 ### Strategies for Obtaining Tokens
 
 #### Authorization Code flow for web and native client types
 
-Web and native clients can obtain tokens using the `authorization_code` flow which uses a client secret stored in a secure location. SPA applications should use the `PKCE` flow which does not use a client secret. To use the `authorization_code` flow, set `responseType` to `"code"` and `pkce` to `false`:
+Web and native clients can obtain tokens using the `authorization_code` flow which uses a client secret stored in a secure location. (SPA applications should use the `PKCE` flow which does not use a client secret) To use the `authorization_code` flow, set `responseType` to `"code"` and `pkce` to `false`:
 
 ```javascript
 var config = {
@@ -306,7 +296,7 @@ var authClient = new OktaAuth(config);
 
 #### PKCE OAuth 2.0 flow
 
-The PKCE OAuth flow will be used by default. This library includes built-in support for Node applications. PKCE is widely supported by most modern browsers when running on an HTTPS connection. PKCE requires that the browser implements `crypto.subtle` (also known as `webcrypto`). [Most modern browsers provide this](https://caniuse.com/#feat=cryptography) when running in a secure context (on an HTTPS connection). PKCE also requires the [TextEncoder](https://caniuse.com/#feat=textencoder) object. This is available on all major browsers except IE Edge. In this case, we recommend using a polyfill/shim such as [text-encoding](https://www.npmjs.com/package/text-encoding).
+The PKCE OAuth flow will be used by default. This library supports PKCE for both browser and NodeJS applications. PKCE is widely supported by most modern browsers when running on an HTTPS connection. PKCE requires that the browser implements `crypto.subtle` (also known as `webcrypto`). [Most modern browsers provide this](https://caniuse.com/#feat=cryptography) when running in a secure context (on an HTTPS connection). PKCE also requires the [TextEncoder](https://caniuse.com/#feat=textencoder) object. This is [available on all major browsers except IE 11 and Edge < v79](https://caniuse.com/textencoder). To add support, we recommend using a polyfill/shim such as [text-encoding](https://www.npmjs.com/package/text-encoding).
 
 If the user's browser does not support PKCE, an exception will be thrown. You can test if a browser supports PKCE before construction with this static method:
 
@@ -314,6 +304,8 @@ If the user's browser does not support PKCE, an exception will be thrown. You ca
 
 #### Implicit OAuth 2.0 flow
 
+> :warning: We strongly discourage using the implicit flow. Use PKCE and/or client credentials if possible.
+
 Implicit OAuth flow is available as an option if PKCE flow cannot be supported in your deployment. It is widely supported by most browsers, and can work over an insecure HTTP connection. Note that implicit flow is less secure than PKCE flow, even over HTTPS, since raw tokens are exposed in the browser's history. For this reason, we highly recommending using the PKCE flow if possible.
 
 Implicit flow can be enabled by setting the `pkce` option to `false`
@@ -332,7 +324,6 @@ var authClient = new OktaAuth(config);
 
 ### Redirects and Routing
 
-**!** Routing is **optional** for the callback portion of the redirect strategy. Instead you can use [popup](#tokengetwithpopupoptions) or [sign widget](https://github.com/okta/okta-signin-widget).
 
 To sign a user in, your application must redirect the browser to the Okta-hosted sign-in page.
 > **Note:** Initial redirect to Okta-hosted sign-in page starts a transaction with a stateToken lifetime set to one hour.
@@ -342,10 +333,46 @@ Depending on your preferences it is possible to use the following callback strat
 
 #### Handling the callback without routing
 
+Most applications will handle an OAuth callback using a special route/page, separate from the signin page. However some SPA applications have no routing logic and will want to handle everything in a single page.
+
+
 1. Create / configure your auth-js instance
-2. Before making **any other calls with auth-js** at the VERY BEGINNING of the app call *token.isLoginRedirect* - if this returns true, call *parseFromUrl* and save tokens in storage manager.
+2. Before starting the OktaAuth service, or making **any other API calls with auth-js** , call *token.isLoginRedirect* - if this returns true, call *token.parseFromUrl* and save tokens using *tokenManager.setTokens*.
       **It’s important that no other app logic runs until the async parseFromUrl / token manager logic is complete**
-3. After continue normal app logic
+3. After this, continue normal app logic
+
+```
+
+async function main() {
+  // create OktaAuth instance
+  var config = {
+    issuer: 'https://{yourOktaDomain}/oauth2/default',
+    clientId: 'GHtf9iJdr60A9IYrR0jw',
+    redirectUri: 'https://acme.com/oauth2/callback/home',
+  };
+  authClient = new OktaAuth(config);
+
+  // Subscribe to authState change event.
+  authClient.authStateManager.subscribe(function(authState) {
+    // Logic based on authState is done here.
+    if (!authState.isAuthenticated) {
+      // render unathenticated view
+      return;
+    }
+
+    // Render authenticated view
+  });
+
+  // Handle callback
+  if (authClient.token.isLoginRedirect()) {
+    const { tokens } = await authClient.token.parseFromUrl(); // remember to "await" this async call
+    authClient.tokenManager.setTokens(tokens);
+  }
+
+  // normal app startup
+  authClient.start(); // will update auth state and call event listeners
+}
+```
 
 #### Handling the callback with hash routing
 
@@ -356,11 +383,14 @@ Additionally, if using hash routing, we recommend using PKCE and responseMode "q
 
 #### Handling the callback with path routing (on a dedicated route)
 
-1. Right before redirect, save the route you are on (we recommend sessionStorage)
-2. Do the redirect to okta
-3. Redirect back to a dedicated route
-4. Call *parseFromUrl()*, retrieve tokens, add to `tokenManager`
-5. Read saved route and redirect to it
+1. Define a [redirectUri](#redirecturi) that maps to a dedicated route in your app
+2. Before redirect, save the current route: [setOriginalUri](#setoriginaluriuri)
+3. Do the redirect to okta: [token.getWithRedirect](#tokengetwithredirectoptions)
+4. After successful authentication, Okta will redirect back to the configured [redirectUri](#redirecturi), your app should load on the dedicated callback route
+5. On this callback page:
+   1. call [token.parseFromUrl](#tokenparsefromurloptions) to retrieve tokens
+   2. Add tokens to the  `TokenManager`: [tokenManager.setTokens](#tokenmanagersettokenstokens)
+6. Read saved route and redirect to it: [getOriginalUri](#getoriginaluristate)
 
 ## Configuration reference
 
@@ -532,10 +562,6 @@ if (oktaAuth.isLoginRedirect()) {
 
 Default to `false`. It enables debugging logs when set to `true`.
 
-#### `useInteractionCodeFlow`
-
-Enables interaction code flow for direct auth clients.
-
 #### `clientSecret`
 
 Used in authorization and interaction code flows by server-side web applications to obtain OAuth tokens. In a production application, this value should **never** be visible on the client side.
@@ -835,7 +861,7 @@ When `tokenManager.autoRenew` is `true` both renew strategies are enabled. To di
 By default, the library will attempt to remove expired tokens when `autoRemove` is `true`. If you wish to disable auto removal of tokens, set `autoRemove` to `false`.
 
 #### `syncStorage`
-Automatically syncs tokens across browser tabs when token storage is `localStorage` or `cookie`. To disable this behavior, set `syncStorage` to false.
+Automatically syncs tokens across browser tabs when it's supported in browser (browser supports native broadcastchannel API, IndexDB or localStorage). To disable this behavior, set `syncStorage` to false.
 
 This is accomplished by selecting a single tab to handle the network requests to refresh the tokens and broadcasting to the other tabs. This is done to avoid all tabs sending refresh requests simultaneously, which can cause rate limiting/throttling issues.
 
@@ -1890,6 +1916,15 @@ We have implemented a small SPA app, located at `./test/app/` which is used inte
 
 The [CHANGELOG](CHANGELOG.md) contains details for all changes and links to the original PR.
 
+### From 6.x to 7.x
+
+* Requires Node version 14 or higher.
+* If using OIDC redirect flows with an embedded or Okta-hosted [Okta Sign-in Widget](https://github.com/okta/okta-signin-widget) widget version 5.4.0 or greater is required. [#1181](https://github.com/okta/okta-auth-js/pull/1181)
+* If using direct authentication with the IDX API:
+  * Server responses with a non-200 status code will not be thrown as exceptions. If a request results in an error response from the server, the `requestDidSucceed` property on the returned `IdxTransaction` will be set to `false`. [#1205](https://github.com/okta/okta-auth-js/pull/1205)
+  * `options` field is removed from the `nextStep` property of `IdxTransaction`. [#1271](https://github.com/okta/okta-auth-js/pull/1271)
+  * `shoudldProceedWithEmailAuthenticator` option is removed. [#1274](https://github.com/okta/okta-auth-js/pull/1274)
+
 ### From 5.x to 6.x
 
 * All async [IDX API](docs/idx.md) methods will either resolve with an IDX transaction object or throw an exception. In the previous version some exceptions were caught and returned as the `error` property on an IDX transaction object.

package/cjs/authn/AuthnTransactionImpl.js

@@ -0,0 +1,44 @@
+"use strict";
+
+exports.AuthnTransactionImpl = void 0;
+
+var _flattenEmbedded = require("./util/flattenEmbedded");
+
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ *
+ */
+class AuthnTransactionImpl {
+  constructor(sdk, tx, res = null) {
+    this.data = undefined;
+    this.status = undefined;
+
+    if (res) {
+      this.data = res; // Parse response from Authn V1
+
+      Object.assign(this, (0, _flattenEmbedded.flattenEmbedded)(sdk, tx, res, res, {}));
+      delete this.stateToken; // RECOVERY_CHALLENGE has some responses without _links.
+      // Without _links, we emulate cancel to make it intuitive
+      // to return to the starting state. We may remove this
+      // when OKTA-75434 is resolved
+
+      if (res.status === 'RECOVERY_CHALLENGE' && !res._links) {
+        this.cancel = function () {
+          return Promise.resolve(tx.createTransaction());
+        };
+      }
+    }
+  }
+
+}
+
+exports.AuthnTransactionImpl = AuthnTransactionImpl;
+//# sourceMappingURL=AuthnTransactionImpl.js.map

package/cjs/authn/AuthnTransactionImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthnTransactionImpl.js","names":["AuthnTransactionImpl","constructor","sdk","tx","res","data","undefined","status","Object","assign","flattenEmbedded","stateToken","_links","cancel","Promise","resolve","createTransaction"],"sources":["../../../lib/authn/AuthnTransactionImpl.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { OktaAuthHttpInterface } from '../http/types';\nimport {\n  AuthnTransactionFunction,\n  AuthnTransaction,\n  AuthnTransactionAPI,\n  AuthnTransactionState\n} from './types';\nimport { flattenEmbedded } from './util/flattenEmbedded';\n\nexport class AuthnTransactionImpl implements AuthnTransaction {\n  next?: AuthnTransactionFunction;\n  cancel?: AuthnTransactionFunction;\n  skip?: AuthnTransactionFunction;\n  unlock?: AuthnTransactionFunction;\n  changePassword?: AuthnTransactionFunction;\n  resetPassword?: AuthnTransactionFunction;\n  answer?: AuthnTransactionFunction;\n  recovery?: AuthnTransactionFunction;\n  verify?: AuthnTransactionFunction;\n  resend?: AuthnTransactionFunction;\n  activate?: AuthnTransactionFunction;\n  poll?: AuthnTransactionFunction;\n  prev?: AuthnTransactionFunction;\n\n  data?: AuthnTransactionState;\n  stateToken?: string;\n  sessionToken?: string;\n  status: string;\n  user?: Record<string, any>;\n  factor?: Record<string, any>;\n  factors?: Array<Record<string, any> >;\n  policy?: Record<string, any>;\n  scopes?: Array<Record<string, any> >;\n  target?: Record<string, any>;\n  authentication?: Record<string, any>;\n  constructor(sdk: OktaAuthHttpInterface, tx: AuthnTransactionAPI, res: AuthnTransactionState | null = null) {\n    this.data = undefined;\n    this.status = undefined as unknown as string;\n    if (res) {\n      this.data = res;\n\n      // Parse response from Authn V1\n      Object.assign(this, flattenEmbedded(sdk, tx, res, res, {}));\n      delete this.stateToken;\n\n      // RECOVERY_CHALLENGE has some responses without _links.\n      // Without _links, we emulate cancel to make it intuitive\n      // to return to the starting state. We may remove this\n      // when OKTA-75434 is resolved\n      if (res.status === 'RECOVERY_CHALLENGE' && !res._links) {\n        this.cancel = function() {\n          return Promise.resolve(tx.createTransaction());\n        };\n      }\n    }\n  }\n}\n"],"mappings":";;;;AAoBA;;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAWO,MAAMA,oBAAN,CAAuD;EA0B5DC,WAAW,CAACC,GAAD,EAA6BC,EAA7B,EAAsDC,GAAiC,GAAG,IAA1F,EAAgG;IACzG,KAAKC,IAAL,GAAYC,SAAZ;IACA,KAAKC,MAAL,GAAcD,SAAd;;IACA,IAAIF,GAAJ,EAAS;MACP,KAAKC,IAAL,GAAYD,GAAZ,CADO,CAGP;;MACAI,MAAM,CAACC,MAAP,CAAc,IAAd,EAAoB,IAAAC,gCAAA,EAAgBR,GAAhB,EAAqBC,EAArB,EAAyBC,GAAzB,EAA8BA,GAA9B,EAAmC,EAAnC,CAApB;MACA,OAAO,KAAKO,UAAZ,CALO,CAOP;MACA;MACA;MACA;;MACA,IAAIP,GAAG,CAACG,MAAJ,KAAe,oBAAf,IAAuC,CAACH,GAAG,CAACQ,MAAhD,EAAwD;QACtD,KAAKC,MAAL,GAAc,YAAW;UACvB,OAAOC,OAAO,CAACC,OAAR,CAAgBZ,EAAE,CAACa,iBAAH,EAAhB,CAAP;QACD,CAFD;MAGD;IACF;EACF;;AA9C2D"}

package/cjs/authn/api.js

@@ -0,0 +1,105 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+exports.getSavedStateToken = getSavedStateToken;
+exports.introspectAuthn = introspectAuthn;
+exports.postToTransaction = postToTransaction;
+exports.resumeTransaction = resumeTransaction;
+exports.transactionExists = transactionExists;
+exports.transactionStatus = transactionStatus;
+exports.transactionStep = transactionStep;
+
+var _http = require("../http");
+
+var _AuthSdkError = _interopRequireDefault(require("../errors/AuthSdkError"));
+
+var _constants = require("../constants");
+
+var _stateToken = require("./util/stateToken");
+
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ *
+ */
+
+/* eslint-disable complexity, max-statements */
+function transactionStatus(sdk, args) {
+  args = (0, _stateToken.addStateToken)(sdk, args);
+  return (0, _http.post)(sdk, sdk.getIssuerOrigin() + '/api/v1/authn', args, {
+    withCredentials: true
+  });
+}
+
+function resumeTransaction(sdk, tx, args) {
+  if (!args || !args.stateToken) {
+    var stateToken = getSavedStateToken(sdk);
+
+    if (stateToken) {
+      args = {
+        stateToken: stateToken
+      };
+    } else {
+      return Promise.reject(new _AuthSdkError.default('No transaction to resume'));
+    }
+  }
+
+  return transactionStatus(sdk, args).then(function (res) {
+    return tx.createTransaction(res);
+  });
+}
+
+function introspectAuthn(sdk, tx, args) {
+  if (!args || !args.stateToken) {
+    var stateToken = getSavedStateToken(sdk);
+
+    if (stateToken) {
+      args = {
+        stateToken: stateToken
+      };
+    } else {
+      return Promise.reject(new _AuthSdkError.default('No transaction to evaluate'));
+    }
+  }
+
+  return transactionStep(sdk, args).then(function (res) {
+    return tx.createTransaction(res);
+  });
+}
+
+function transactionStep(sdk, args) {
+  args = (0, _stateToken.addStateToken)(sdk, args); // v1 pipeline introspect API
+
+  return (0, _http.post)(sdk, sdk.getIssuerOrigin() + '/api/v1/authn/introspect', args, {
+    withCredentials: true
+  });
+}
+
+function transactionExists(sdk) {
+  // We have a cookie state token
+  return !!getSavedStateToken(sdk);
+}
+
+function postToTransaction(sdk, tx, url, args, options) {
+  options = Object.assign({
+    withCredentials: true
+  }, options);
+  return (0, _http.post)(sdk, url, args, options).then(function (res) {
+    return tx.createTransaction(res);
+  });
+}
+
+function getSavedStateToken(sdk) {
+  // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+  const storage = sdk.options.storageUtil.storage;
+  return storage.get(_constants.STATE_TOKEN_KEY_NAME);
+}
+//# sourceMappingURL=api.js.map

package/cjs/authn/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","names":["transactionStatus","sdk","args","addStateToken","post","getIssuerOrigin","withCredentials","resumeTransaction","tx","stateToken","getSavedStateToken","Promise","reject","AuthSdkError","then","res","createTransaction","introspectAuthn","transactionStep","transactionExists","postToTransaction","url","options","Object","assign","storage","storageUtil","get","STATE_TOKEN_KEY_NAME"],"sources":["../../../lib/authn/api.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* eslint-disable complexity, max-statements */\nimport { post } from '../http';\nimport AuthSdkError from '../errors/AuthSdkError';\nimport { STATE_TOKEN_KEY_NAME } from '../constants';\nimport { OktaAuthHttpInterface } from '../http/types';\nimport { OktaAuthStorageOptions } from '../storage/types';\nimport { addStateToken } from './util/stateToken';\nimport { AuthnTransactionAPI } from './types';\nimport { OktaAuthBaseInterface } from '../base/types';\n\nexport function transactionStatus(sdk: OktaAuthHttpInterface, args) {\n  args = addStateToken(sdk, args);\n  return post(sdk, sdk.getIssuerOrigin() + '/api/v1/authn', args, { withCredentials: true });\n}\n\nexport function resumeTransaction(sdk: OktaAuthHttpInterface, tx: AuthnTransactionAPI, args) {\n  if (!args || !args.stateToken) {\n    var stateToken = getSavedStateToken(sdk);\n    if (stateToken) {\n      args = {\n        stateToken: stateToken\n      };\n    } else {\n      return Promise.reject(new AuthSdkError('No transaction to resume'));\n    }\n  }\n  return transactionStatus(sdk, args)\n    .then(function(res) {\n      return tx.createTransaction(res);\n    });\n}\n\nexport function introspectAuthn (sdk: OktaAuthHttpInterface, tx: AuthnTransactionAPI, args) {\n  if (!args || !args.stateToken) {\n    var stateToken = getSavedStateToken(sdk);\n    if (stateToken) {\n      args = {\n        stateToken: stateToken\n      };\n    } else {\n      return Promise.reject(new AuthSdkError('No transaction to evaluate'));\n    }\n  }\n  return transactionStep(sdk, args)\n    .then(function (res) {\n      return tx.createTransaction(res);\n    });\n}\n\nexport function transactionStep(sdk: OktaAuthHttpInterface, args) {\n  args = addStateToken(sdk, args);\n  // v1 pipeline introspect API\n  return post(sdk, sdk.getIssuerOrigin() + '/api/v1/authn/introspect', args, { withCredentials: true });\n}\n\nexport function transactionExists(sdk: OktaAuthBaseInterface<OktaAuthStorageOptions>) {\n  // We have a cookie state token\n  return !!getSavedStateToken(sdk);\n}\n\nexport function postToTransaction(sdk: OktaAuthHttpInterface, tx: AuthnTransactionAPI, url: string, args, options?) {\n  options = Object.assign({ withCredentials: true }, options);\n  return post(sdk, url, args, options)\n    .then(function(res) {\n      return tx.createTransaction(res);\n    });\n}\n\nexport function getSavedStateToken(sdk: OktaAuthBaseInterface<OktaAuthStorageOptions>) {\n    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n    const storage = sdk.options.storageUtil!.storage;\n    return storage.get(STATE_TOKEN_KEY_NAME);\n}\n"],"mappings":";;;;;;;;;;;;AAcA;;AACA;;AACA;;AAGA;;AAnBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AAUO,SAASA,iBAAT,CAA2BC,GAA3B,EAAuDC,IAAvD,EAA6D;EAClEA,IAAI,GAAG,IAAAC,yBAAA,EAAcF,GAAd,EAAmBC,IAAnB,CAAP;EACA,OAAO,IAAAE,UAAA,EAAKH,GAAL,EAAUA,GAAG,CAACI,eAAJ,KAAwB,eAAlC,EAAmDH,IAAnD,EAAyD;IAAEI,eAAe,EAAE;EAAnB,CAAzD,CAAP;AACD;;AAEM,SAASC,iBAAT,CAA2BN,GAA3B,EAAuDO,EAAvD,EAAgFN,IAAhF,EAAsF;EAC3F,IAAI,CAACA,IAAD,IAAS,CAACA,IAAI,CAACO,UAAnB,EAA+B;IAC7B,IAAIA,UAAU,GAAGC,kBAAkB,CAACT,GAAD,CAAnC;;IACA,IAAIQ,UAAJ,EAAgB;MACdP,IAAI,GAAG;QACLO,UAAU,EAAEA;MADP,CAAP;IAGD,CAJD,MAIO;MACL,OAAOE,OAAO,CAACC,MAAR,CAAe,IAAIC,qBAAJ,CAAiB,0BAAjB,CAAf,CAAP;IACD;EACF;;EACD,OAAOb,iBAAiB,CAACC,GAAD,EAAMC,IAAN,CAAjB,CACJY,IADI,CACC,UAASC,GAAT,EAAc;IAClB,OAAOP,EAAE,CAACQ,iBAAH,CAAqBD,GAArB,CAAP;EACD,CAHI,CAAP;AAID;;AAEM,SAASE,eAAT,CAA0BhB,GAA1B,EAAsDO,EAAtD,EAA+EN,IAA/E,EAAqF;EAC1F,IAAI,CAACA,IAAD,IAAS,CAACA,IAAI,CAACO,UAAnB,EAA+B;IAC7B,IAAIA,UAAU,GAAGC,kBAAkB,CAACT,GAAD,CAAnC;;IACA,IAAIQ,UAAJ,EAAgB;MACdP,IAAI,GAAG;QACLO,UAAU,EAAEA;MADP,CAAP;IAGD,CAJD,MAIO;MACL,OAAOE,OAAO,CAACC,MAAR,CAAe,IAAIC,qBAAJ,CAAiB,4BAAjB,CAAf,CAAP;IACD;EACF;;EACD,OAAOK,eAAe,CAACjB,GAAD,EAAMC,IAAN,CAAf,CACJY,IADI,CACC,UAAUC,GAAV,EAAe;IACnB,OAAOP,EAAE,CAACQ,iBAAH,CAAqBD,GAArB,CAAP;EACD,CAHI,CAAP;AAID;;AAEM,SAASG,eAAT,CAAyBjB,GAAzB,EAAqDC,IAArD,EAA2D;EAChEA,IAAI,GAAG,IAAAC,yBAAA,EAAcF,GAAd,EAAmBC,IAAnB,CAAP,CADgE,CAEhE;;EACA,OAAO,IAAAE,UAAA,EAAKH,GAAL,EAAUA,GAAG,CAACI,eAAJ,KAAwB,0BAAlC,EAA8DH,IAA9D,EAAoE;IAAEI,eAAe,EAAE;EAAnB,CAApE,CAAP;AACD;;AAEM,SAASa,iBAAT,CAA2BlB,GAA3B,EAA+E;EACpF;EACA,OAAO,CAAC,CAACS,kBAAkB,CAACT,GAAD,CAA3B;AACD;;AAEM,SAASmB,iBAAT,CAA2BnB,GAA3B,EAAuDO,EAAvD,EAAgFa,GAAhF,EAA6FnB,IAA7F,EAAmGoB,OAAnG,EAA6G;EAClHA,OAAO,GAAGC,MAAM,CAACC,MAAP,CAAc;IAAElB,eAAe,EAAE;EAAnB,CAAd,EAAyCgB,OAAzC,CAAV;EACA,OAAO,IAAAlB,UAAA,EAAKH,GAAL,EAAUoB,GAAV,EAAenB,IAAf,EAAqBoB,OAArB,EACJR,IADI,CACC,UAASC,GAAT,EAAc;IAClB,OAAOP,EAAE,CAACQ,iBAAH,CAAqBD,GAArB,CAAP;EACD,CAHI,CAAP;AAID;;AAEM,SAASL,kBAAT,CAA4BT,GAA5B,EAAgF;EACnF;EACA,MAAMwB,OAAO,GAAGxB,GAAG,CAACqB,OAAJ,CAAYI,WAAZ,CAAyBD,OAAzC;EACA,OAAOA,OAAO,CAACE,GAAR,CAAYC,+BAAZ,CAAP;AACH"}

package/cjs/authn/factory.js

@@ -0,0 +1,45 @@
+"use strict";
+
+exports.createAuthnTransactionAPI = createAuthnTransactionAPI;
+
+var _api = require("./api");
+
+var _AuthnTransactionImpl = require("./AuthnTransactionImpl");
+
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ *
+ */
+// Factory
+function createAuthnTransactionAPI(sdk) {
+  const tx = {
+    status: _api.transactionStatus.bind(null, sdk),
+
+    resume(args) {
+      return (0, _api.resumeTransaction)(sdk, tx, args);
+    },
+
+    exists: _api.transactionExists.bind(null, sdk),
+
+    introspect(args) {
+      return (0, _api.introspectAuthn)(sdk, tx, args);
+    },
+
+    createTransaction: res => {
+      return new _AuthnTransactionImpl.AuthnTransactionImpl(sdk, tx, res);
+    },
+    postToTransaction: (url, args, options) => {
+      return (0, _api.postToTransaction)(sdk, tx, url, args, options);
+    }
+  };
+  return tx;
+}
+//# sourceMappingURL=factory.js.map

package/cjs/authn/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","names":["createAuthnTransactionAPI","sdk","tx","status","transactionStatus","bind","resume","args","resumeTransaction","exists","transactionExists","introspect","introspectAuthn","createTransaction","res","AuthnTransactionImpl","postToTransaction","url","options"],"sources":["../../../lib/authn/factory.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { RequestData, RequestOptions, OktaAuthHttpInterface } from '../http/types';\nimport {\n  introspectAuthn,\n  transactionStatus,\n  transactionExists,\n  resumeTransaction,\n  postToTransaction\n} from './api';\nimport { AuthnTransactionImpl } from './AuthnTransactionImpl';\nimport { AuthnTransactionAPI, AuthnTransactionState } from './types';\n\n// Factory\nexport function createAuthnTransactionAPI(sdk: OktaAuthHttpInterface): AuthnTransactionAPI {\n  const tx: AuthnTransactionAPI = {\n    status: transactionStatus.bind(null, sdk),\n    resume(args) {\n      return resumeTransaction(sdk, tx, args);\n    },\n    exists: transactionExists.bind(null, sdk),\n    introspect(args) {\n      return introspectAuthn(sdk, tx, args);\n    },\n    createTransaction: (res?: AuthnTransactionState) => {\n      return new AuthnTransactionImpl(sdk, tx, res);\n    },\n    postToTransaction: (url: string, args?: RequestData, options?: RequestOptions) => {\n      return postToTransaction(sdk, tx, url, args, options);\n    }\n  };\n  return tx;\n}\n"],"mappings":";;;;AAcA;;AAOA;;AArBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAaA;AACO,SAASA,yBAAT,CAAmCC,GAAnC,EAAoF;EACzF,MAAMC,EAAuB,GAAG;IAC9BC,MAAM,EAAEC,sBAAA,CAAkBC,IAAlB,CAAuB,IAAvB,EAA6BJ,GAA7B,CADsB;;IAE9BK,MAAM,CAACC,IAAD,EAAO;MACX,OAAO,IAAAC,sBAAA,EAAkBP,GAAlB,EAAuBC,EAAvB,EAA2BK,IAA3B,CAAP;IACD,CAJ6B;;IAK9BE,MAAM,EAAEC,sBAAA,CAAkBL,IAAlB,CAAuB,IAAvB,EAA6BJ,GAA7B,CALsB;;IAM9BU,UAAU,CAACJ,IAAD,EAAO;MACf,OAAO,IAAAK,oBAAA,EAAgBX,GAAhB,EAAqBC,EAArB,EAAyBK,IAAzB,CAAP;IACD,CAR6B;;IAS9BM,iBAAiB,EAAGC,GAAD,IAAiC;MAClD,OAAO,IAAIC,0CAAJ,CAAyBd,GAAzB,EAA8BC,EAA9B,EAAkCY,GAAlC,CAAP;IACD,CAX6B;IAY9BE,iBAAiB,EAAE,CAACC,GAAD,EAAcV,IAAd,EAAkCW,OAAlC,KAA+D;MAChF,OAAO,IAAAF,sBAAA,EAAkBf,GAAlB,EAAuBC,EAAvB,EAA2Be,GAA3B,EAAgCV,IAAhC,EAAsCW,OAAtC,CAAP;IACD;EAd6B,CAAhC;EAgBA,OAAOhB,EAAP;AACD"}

package/cjs/authn/index.js

@@ -0,0 +1,41 @@
+"use strict";
+
+var _factory = require("./factory");
+
+Object.keys(_factory).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _factory[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _factory[key];
+    }
+  });
+});
+
+var _mixin = require("./mixin");
+
+Object.keys(_mixin).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _mixin[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _mixin[key];
+    }
+  });
+});
+
+var _types = require("./types");
+
+Object.keys(_types).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _types[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _types[key];
+    }
+  });
+});
+//# sourceMappingURL=index.js.map

package/cjs/authn/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../lib/authn/index.ts"],"sourcesContent":["export * from './factory';\nexport * from './mixin';\nexport * from './types';\n"],"mappings":";;AAAA;;AAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA;;AACA;;AAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA;;AACA;;AAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA"}

package/cjs/authn/mixin.js

@@ -0,0 +1,82 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+exports.mixinAuthn = mixinAuthn;
+
+var _util = require("../util");
+
+var _fingerprint = _interopRequireDefault(require("../browser/fingerprint"));
+
+var _factory = require("./factory");
+
+/* eslint-disable max-statements */
+
+/* eslint-disable complexity */
+
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+function mixinAuthn(Base) {
+  return class OktaAuthTx extends Base {
+    // legacy, may be removed in future version
+    constructor(...args) {
+      super(...args);
+      this.authn = this.tx = (0, _factory.createAuthnTransactionAPI)(this); // Fingerprint API
+
+      this.fingerprint = _fingerprint.default.bind(null, this);
+    } // Authn  V1
+
+
+    async signIn(opts) {
+      opts = (0, _util.clone)(opts || {});
+
+      const _postToTransaction = options => {
+        delete opts.sendFingerprint;
+        return this.tx.postToTransaction('/api/v1/authn', opts, options);
+      };
+
+      if (!opts.sendFingerprint) {
+        return _postToTransaction();
+      }
+
+      return this.fingerprint().then(function (fingerprint) {
+        return _postToTransaction({
+          headers: {
+            'X-Device-Fingerprint': fingerprint
+          }
+        });
+      });
+    } // Authn  V1
+
+
+    async signInWithCredentials(opts) {
+      return this.signIn(opts);
+    } // { username, (relayState) }
+
+
+    forgotPassword(opts) {
+      return this.tx.postToTransaction('/api/v1/authn/recovery/password', opts);
+    } // { username, (relayState) }
+
+
+    unlockAccount(opts) {
+      return this.tx.postToTransaction('/api/v1/authn/recovery/unlock', opts);
+    } // { recoveryToken }
+
+
+    verifyRecoveryToken(opts) {
+      return this.tx.postToTransaction('/api/v1/authn/recovery/token', opts);
+    }
+
+  };
+}
+//# sourceMappingURL=mixin.js.map

package/cjs/authn/mixin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixin.js","names":["mixinAuthn","Base","OktaAuthTx","constructor","args","authn","tx","createAuthnTransactionAPI","fingerprint","bind","signIn","opts","clone","_postToTransaction","options","sendFingerprint","postToTransaction","then","headers","signInWithCredentials","forgotPassword","unlockAccount","verifyRecoveryToken"],"sources":["../../../lib/authn/mixin.ts"],"sourcesContent":["/* eslint-disable max-statements */\n/* eslint-disable complexity */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { \n  clone,\n} from '../util';\nimport fingerprint from '../browser/fingerprint';\nimport {\n  FingerprintAPI,\n  SigninWithCredentialsOptions,\n  ForgotPasswordOptions,\n  VerifyRecoveryTokenOptions,\n  SigninOptions,\n  OktaAuthTxInterface,\n  AuthnTransaction,\n  AuthnTransactionAPI\n} from './types';\nimport {\n  createAuthnTransactionAPI,\n} from './factory';\nimport { StorageManagerInterface } from '../storage/types';\nimport { OktaAuthHttpInterface, OktaAuthHttpOptions } from '../http/types';\nimport { OktaAuthConstructor } from '../base/types';\n\nexport function mixinAuthn\n<\n  S extends StorageManagerInterface = StorageManagerInterface,\n  O extends OktaAuthHttpOptions = OktaAuthHttpOptions,\n  TBase extends OktaAuthConstructor<OktaAuthHttpInterface<S, O>>\n    = OktaAuthConstructor<OktaAuthHttpInterface<S, O>>\n>\n(Base: TBase): TBase & OktaAuthConstructor<OktaAuthTxInterface<S, O>>\n{\n  return class OktaAuthTx extends Base implements OktaAuthTxInterface<S, O> {\n    tx: AuthnTransactionAPI; // legacy, may be removed in future version\n    authn: AuthnTransactionAPI;\n    fingerprint: FingerprintAPI;\n\n    constructor(...args: any[]) {\n      super(...args);\n\n      this.authn = this.tx = createAuthnTransactionAPI(this);\n      \n      // Fingerprint API\n      this.fingerprint = fingerprint.bind(null, this);\n    }\n\n    // Authn  V1\n    async signIn(opts: SigninOptions): Promise<AuthnTransaction> {\n      opts = clone(opts || {});\n      const _postToTransaction = (options?) => {\n        delete opts.sendFingerprint;\n        return this.tx.postToTransaction('/api/v1/authn', opts, options);\n      };\n      if (!opts.sendFingerprint) {\n        return _postToTransaction();\n      }\n      return this.fingerprint()\n      .then(function(fingerprint) {\n        return _postToTransaction({\n          headers: {\n            'X-Device-Fingerprint': fingerprint\n          }\n        });\n      });\n    }\n\n    // Authn  V1\n    async signInWithCredentials(opts: SigninWithCredentialsOptions): Promise<AuthnTransaction> {\n      return this.signIn(opts);\n    }\n\n    // { username, (relayState) }\n    forgotPassword(opts): Promise<AuthnTransaction> {\n      return this.tx.postToTransaction('/api/v1/authn/recovery/password', opts);\n    }\n\n    // { username, (relayState) }\n    unlockAccount(opts: ForgotPasswordOptions): Promise<AuthnTransaction> {\n      return this.tx.postToTransaction('/api/v1/authn/recovery/unlock', opts);\n    }\n\n    // { recoveryToken }\n    verifyRecoveryToken(opts: VerifyRecoveryTokenOptions): Promise<AuthnTransaction> {\n      return this.tx.postToTransaction('/api/v1/authn/recovery/token', opts);\n    }\n\n  };\n}\n"],"mappings":";;;;;;AAcA;;AAGA;;AAWA;;AA5BA;;AACA;;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAuBO,SAASA,UAAT,CAONC,IAPM,EAQP;EACE,OAAO,MAAMC,UAAN,SAAyBD,IAAzB,CAAmE;IAC/C;IAIzBE,WAAW,CAAC,GAAGC,IAAJ,EAAiB;MAC1B,MAAM,GAAGA,IAAT;MAEA,KAAKC,KAAL,GAAa,KAAKC,EAAL,GAAU,IAAAC,kCAAA,EAA0B,IAA1B,CAAvB,CAH0B,CAK1B;;MACA,KAAKC,WAAL,GAAmBA,oBAAA,CAAYC,IAAZ,CAAiB,IAAjB,EAAuB,IAAvB,CAAnB;IACD,CAZuE,CAcxE;;;IACY,MAANC,MAAM,CAACC,IAAD,EAAiD;MAC3DA,IAAI,GAAG,IAAAC,WAAA,EAAMD,IAAI,IAAI,EAAd,CAAP;;MACA,MAAME,kBAAkB,GAAIC,OAAD,IAAc;QACvC,OAAOH,IAAI,CAACI,eAAZ;QACA,OAAO,KAAKT,EAAL,CAAQU,iBAAR,CAA0B,eAA1B,EAA2CL,IAA3C,EAAiDG,OAAjD,CAAP;MACD,CAHD;;MAIA,IAAI,CAACH,IAAI,CAACI,eAAV,EAA2B;QACzB,OAAOF,kBAAkB,EAAzB;MACD;;MACD,OAAO,KAAKL,WAAL,GACNS,IADM,CACD,UAAST,WAAT,EAAsB;QAC1B,OAAOK,kBAAkB,CAAC;UACxBK,OAAO,EAAE;YACP,wBAAwBV;UADjB;QADe,CAAD,CAAzB;MAKD,CAPM,CAAP;IAQD,CAhCuE,CAkCxE;;;IAC2B,MAArBW,qBAAqB,CAACR,IAAD,EAAgE;MACzF,OAAO,KAAKD,MAAL,CAAYC,IAAZ,CAAP;IACD,CArCuE,CAuCxE;;;IACAS,cAAc,CAACT,IAAD,EAAkC;MAC9C,OAAO,KAAKL,EAAL,CAAQU,iBAAR,CAA0B,iCAA1B,EAA6DL,IAA7D,CAAP;IACD,CA1CuE,CA4CxE;;;IACAU,aAAa,CAACV,IAAD,EAAyD;MACpE,OAAO,KAAKL,EAAL,CAAQU,iBAAR,CAA0B,+BAA1B,EAA2DL,IAA3D,CAAP;IACD,CA/CuE,CAiDxE;;;IACAW,mBAAmB,CAACX,IAAD,EAA8D;MAC/E,OAAO,KAAKL,EAAL,CAAQU,iBAAR,CAA0B,8BAA1B,EAA0DL,IAA1D,CAAP;IACD;;EApDuE,CAA1E;AAuDD"}

package/cjs/authn/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map