@okta/okta-auth-js 6.9.0 → 7.0.0

package/cjs/TransactionManager.js

@@ -1,373 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
-
-exports.default = void 0;
-
-var _stringify = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/json/stringify"));
-
-var _assign = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/assign"));
-
-var _errors = require("./errors");
-
-var _constants = require("./constants");
-
-var _types = require("./types");
-
-var _idxJs = require("./idx/types/idx-js");
-
-var _util = require("./util");
-
-var _sharedStorage = require("./util/sharedStorage");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class TransactionManager {
-  constructor(options) {
-    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-    this.storageManager = options.storageManager;
-    this.legacyWidgetSupport = options.legacyWidgetSupport === false ? false : true;
-    this.saveNonceCookie = options.saveNonceCookie === false ? false : true;
-    this.saveStateCookie = options.saveStateCookie === false ? false : true;
-    this.saveParamsCookie = options.saveParamsCookie === false ? false : true;
-    this.enableSharedStorage = options.enableSharedStorage === false ? false : true;
-    this.saveLastResponse = options.saveLastResponse === false ? false : true;
-    this.options = options;
-  } // eslint-disable-next-line complexity
-
-
-  clear(options = {}) {
-    const transactionStorage = this.storageManager.getTransactionStorage();
-    const meta = transactionStorage.getStorage(); // Clear primary storage (by default, sessionStorage on browser)
-
-    transactionStorage.clearStorage(); // Usually we want to also clear shared storage unless another tab may need it to continue/complete a flow
-
-    if (this.enableSharedStorage && options.clearSharedStorage !== false) {
-      const state = options.state || (meta === null || meta === void 0 ? void 0 : meta.state);
-
-      if (state) {
-        (0, _sharedStorage.clearTransactionFromSharedStorage)(this.storageManager, state);
-      }
-    }
-
-    if (options.clearIdxResponse !== false) {
-      this.clearIdxResponse();
-    }
-
-    if (!this.legacyWidgetSupport) {
-      return;
-    } // This is for compatibility with older versions of the signin widget. OKTA-304806
-
-
-    if (options.oauth) {
-      this.clearLegacyOAuthParams();
-    }
-
-    if (options.pkce) {
-      this.clearLegacyPKCE();
-    }
-  } // eslint-disable-next-line complexity
-
-
-  save(meta, options = {}) {
-    // There must be only one transaction executing at a time.
-    // Before saving, check to see if a transaction is already stored.
-    // An existing transaction indicates a concurrency/race/overlap condition
-    let storage = this.storageManager.getTransactionStorage();
-    const obj = storage.getStorage(); // oie process may need to update transaction in the middle of process for tracking purpose
-    // false alarm might be caused 
-    // TODO: revisit for a better solution, https://oktainc.atlassian.net/browse/OKTA-430919
-
-    if ((0, _types.isTransactionMeta)(obj) && !options.muteWarning) {
-      // eslint-disable-next-line max-len
-      (0, _util.warn)('a saved auth transaction exists in storage. This may indicate another auth flow is already in progress.');
-    }
-
-    storage.setStorage(meta); // Shared storage allows continuation of transaction in another tab
-
-    if (this.enableSharedStorage && meta.state) {
-      (0, _sharedStorage.saveTransactionToSharedStorage)(this.storageManager, meta.state, meta);
-    }
-
-    if (!options.oauth) {
-      return;
-    } // Legacy cookie storage
-
-
-    if (this.saveNonceCookie || this.saveStateCookie || this.saveParamsCookie) {
-      const cookieStorage = this.storageManager.getStorage({
-        storageType: 'cookie'
-      });
-
-      if (this.saveParamsCookie) {
-        const {
-          responseType,
-          state,
-          nonce,
-          scopes,
-          clientId,
-          urls,
-          ignoreSignature
-        } = meta;
-        const oauthParams = {
-          responseType,
-          state,
-          nonce,
-          scopes,
-          clientId,
-          urls,
-          ignoreSignature
-        };
-        cookieStorage.setItem(_constants.REDIRECT_OAUTH_PARAMS_NAME, (0, _stringify.default)(oauthParams), null);
-      }
-
-      if (this.saveNonceCookie && meta.nonce) {
-        // Set nonce cookie for servers to validate nonce in id_token
-        cookieStorage.setItem(_constants.REDIRECT_NONCE_COOKIE_NAME, meta.nonce, null);
-      }
-
-      if (this.saveStateCookie && meta.state) {
-        // Set state cookie for servers to validate state
-        cookieStorage.setItem(_constants.REDIRECT_STATE_COOKIE_NAME, meta.state, null);
-      }
-    }
-  }
-
-  exists(options = {}) {
-    try {
-      const meta = this.load(options);
-      return !!meta;
-    } catch {
-      return false;
-    }
-  } // load transaction meta from storage
-  // eslint-disable-next-line complexity,max-statements
-
-
-  load(options = {}) {
-    let meta; // If state was passed, try loading transaction data from shared storage
-
-    if (this.enableSharedStorage && options.state) {
-      (0, _sharedStorage.pruneSharedStorage)(this.storageManager); // prune before load
-
-      meta = (0, _sharedStorage.loadTransactionFromSharedStorage)(this.storageManager, options.state);
-
-      if ((0, _types.isTransactionMeta)(meta)) {
-        return meta;
-      }
-    }
-
-    let storage = this.storageManager.getTransactionStorage();
-    meta = storage.getStorage();
-
-    if ((0, _types.isTransactionMeta)(meta)) {
-      // if we have meta in the new location, there is no need to go further
-      return meta;
-    }
-
-    if (!this.legacyWidgetSupport) {
-      return null;
-    } // This is for compatibility with older versions of the signin widget. OKTA-304806
-
-
-    if (options.oauth) {
-      try {
-        const oauthParams = this.loadLegacyOAuthParams();
-        (0, _assign.default)(meta, oauthParams);
-      } finally {
-        this.clearLegacyOAuthParams();
-      }
-    }
-
-    if (options.pkce) {
-      try {
-        const pkceMeta = this.loadLegacyPKCE();
-        (0, _assign.default)(meta, pkceMeta);
-      } finally {
-        this.clearLegacyPKCE();
-      }
-    }
-
-    if ((0, _types.isTransactionMeta)(meta)) {
-      return meta;
-    }
-
-    return null;
-  } // This is for compatibility with older versions of the signin widget. OKTA-304806
-
-
-  clearLegacyPKCE() {
-    // clear storages
-    let storage;
-
-    if (this.storageManager.storageUtil.testStorageType('localStorage')) {
-      storage = this.storageManager.getLegacyPKCEStorage({
-        storageType: 'localStorage'
-      });
-      storage.clearStorage();
-    }
-
-    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {
-      storage = this.storageManager.getLegacyPKCEStorage({
-        storageType: 'sessionStorage'
-      });
-      storage.clearStorage();
-    }
-  }
-
-  loadLegacyPKCE() {
-    let storage;
-    let obj; // Try reading from localStorage first.
-
-    if (this.storageManager.storageUtil.testStorageType('localStorage')) {
-      storage = this.storageManager.getLegacyPKCEStorage({
-        storageType: 'localStorage'
-      });
-      obj = storage.getStorage();
-
-      if (obj && obj.codeVerifier) {
-        return obj;
-      }
-    } // If meta is not valid, read from sessionStorage. This is expected for more recent versions of the widget.
-
-
-    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {
-      storage = this.storageManager.getLegacyPKCEStorage({
-        storageType: 'sessionStorage'
-      });
-      obj = storage.getStorage();
-
-      if (obj && obj.codeVerifier) {
-        return obj;
-      }
-    } // If meta is not valid, throw an exception to avoid misleading server-side error
-    // The most likely cause of this error is trying to handle a callback twice
-    // eslint-disable-next-line max-len
-
-
-    throw new _errors.AuthSdkError('Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.', undefined);
-  }
-
-  clearLegacyOAuthParams() {
-    // clear storages
-    let storage;
-
-    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {
-      storage = this.storageManager.getLegacyOAuthParamsStorage({
-        storageType: 'sessionStorage'
-      });
-      storage.clearStorage();
-    }
-
-    if (this.storageManager.storageUtil.testStorageType('cookie')) {
-      storage = this.storageManager.getLegacyOAuthParamsStorage({
-        storageType: 'cookie'
-      });
-      storage.clearStorage();
-    }
-  }
-
-  loadLegacyOAuthParams() {
-    let storage;
-    let oauthParams; // load first from session storage
-
-    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {
-      storage = this.storageManager.getLegacyOAuthParamsStorage({
-        storageType: 'sessionStorage'
-      });
-      oauthParams = storage.getStorage();
-    }
-
-    if ((0, _types.isOAuthTransactionMeta)(oauthParams)) {
-      return oauthParams;
-    } // try to load from cookie
-
-
-    if (this.storageManager.storageUtil.testStorageType('cookie')) {
-      storage = this.storageManager.getLegacyOAuthParamsStorage({
-        storageType: 'cookie'
-      });
-      oauthParams = storage.getStorage();
-    }
-
-    if ((0, _types.isOAuthTransactionMeta)(oauthParams)) {
-      return oauthParams;
-    }
-
-    throw new _errors.AuthSdkError('Unable to retrieve OAuth redirect params from storage'); // Something is there but we don't recognize it
-    // throw new AuthSdkError('Unable to parse the ' + REDIRECT_OAUTH_PARAMS_NAME + ' value from storage');
-  }
-
-  saveIdxResponse(data) {
-    if (!this.saveLastResponse) {
-      return;
-    }
-
-    const storage = this.storageManager.getIdxResponseStorage();
-
-    if (!storage) {
-      return;
-    }
-
-    storage.setStorage(data);
-  } // eslint-disable-next-line complexity
-
-
-  loadIdxResponse(options) {
-    if (!this.saveLastResponse) {
-      return null;
-    }
-
-    const storage = this.storageManager.getIdxResponseStorage();
-
-    if (!storage) {
-      return null;
-    }
-
-    const storedValue = storage.getStorage();
-
-    if (!storedValue || !(0, _idxJs.isRawIdxResponse)(storedValue.rawIdxResponse)) {
-      return null;
-    }
-
-    if (options) {
-      const {
-        stateHandle,
-        interactionHandle
-      } = options;
-
-      if (stateHandle && storedValue.stateHandle !== stateHandle) {
-        return null;
-      }
-
-      if (interactionHandle && storedValue.interactionHandle !== interactionHandle) {
-        return null;
-      }
-    }
-
-    return storedValue;
-  }
-
-  clearIdxResponse() {
-    if (!this.saveLastResponse) {
-      return;
-    }
-
-    const storage = this.storageManager.getIdxResponseStorage();
-    storage === null || storage === void 0 ? void 0 : storage.clearStorage();
-  }
-
-}
-
-exports.default = TransactionManager;
-module.exports = exports.default;
-//# sourceMappingURL=TransactionManager.js.map

package/cjs/TransactionManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TransactionManager.js","names":["TransactionManager","constructor","options","storageManager","legacyWidgetSupport","saveNonceCookie","saveStateCookie","saveParamsCookie","enableSharedStorage","saveLastResponse","clear","transactionStorage","getTransactionStorage","meta","getStorage","clearStorage","clearSharedStorage","state","clearTransactionFromSharedStorage","clearIdxResponse","oauth","clearLegacyOAuthParams","pkce","clearLegacyPKCE","save","storage","obj","isTransactionMeta","muteWarning","warn","setStorage","saveTransactionToSharedStorage","cookieStorage","storageType","responseType","nonce","scopes","clientId","urls","ignoreSignature","oauthParams","setItem","REDIRECT_OAUTH_PARAMS_NAME","REDIRECT_NONCE_COOKIE_NAME","REDIRECT_STATE_COOKIE_NAME","exists","load","pruneSharedStorage","loadTransactionFromSharedStorage","loadLegacyOAuthParams","pkceMeta","loadLegacyPKCE","storageUtil","testStorageType","getLegacyPKCEStorage","codeVerifier","AuthSdkError","undefined","getLegacyOAuthParamsStorage","isOAuthTransactionMeta","saveIdxResponse","data","getIdxResponseStorage","loadIdxResponse","storedValue","isRawIdxResponse","rawIdxResponse","stateHandle","interactionHandle"],"sources":["../../lib/TransactionManager.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { AuthSdkError } from './errors';\nimport { REDIRECT_NONCE_COOKIE_NAME, REDIRECT_OAUTH_PARAMS_NAME, REDIRECT_STATE_COOKIE_NAME } from './constants';\nimport { StorageManager } from './StorageManager';\nimport {\n  StorageProvider,\n  TransactionMeta,\n  isTransactionMeta,\n  isOAuthTransactionMeta,\n  PKCETransactionMeta,\n  OAuthTransactionMeta,\n  TransactionMetaOptions,\n  TransactionManagerOptions,\n  CookieStorage,\n  SavedIdxResponse,\n  IntrospectOptions\n} from './types';\nimport { isRawIdxResponse } from './idx/types/idx-js';\nimport { warn } from './util';\nimport {\n  clearTransactionFromSharedStorage,\n  loadTransactionFromSharedStorage,\n  pruneSharedStorage,\n  saveTransactionToSharedStorage\n} from './util/sharedStorage';\n\nexport interface ClearTransactionMetaOptions extends TransactionMetaOptions {\n  clearSharedStorage?: boolean; // true by default\n  clearIdxResponse?: boolean; // true by default\n}\nexport default class TransactionManager {\n  options: TransactionManagerOptions;\n  storageManager: StorageManager;\n  legacyWidgetSupport: boolean;\n  saveNonceCookie: boolean;\n  saveStateCookie: boolean;\n  saveParamsCookie: boolean;\n  enableSharedStorage: boolean;\n  saveLastResponse: boolean;\n\n  constructor(options: TransactionManagerOptions) {\n    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n    this.storageManager = options.storageManager!;\n    this.legacyWidgetSupport = options.legacyWidgetSupport === false ? false : true;\n    this.saveNonceCookie = options.saveNonceCookie === false ? false : true;\n    this.saveStateCookie = options.saveStateCookie === false ? false : true;\n    this.saveParamsCookie = options.saveParamsCookie === false ? false : true;\n    this.enableSharedStorage = options.enableSharedStorage === false ? false : true;\n    this.saveLastResponse = options.saveLastResponse === false ? false : true;\n    this.options = options;\n  }\n\n  // eslint-disable-next-line complexity\n  clear(options: ClearTransactionMetaOptions = {}) {\n    const transactionStorage: StorageProvider = this.storageManager.getTransactionStorage();\n    const meta = transactionStorage.getStorage();\n\n    // Clear primary storage (by default, sessionStorage on browser)\n    transactionStorage.clearStorage();\n\n    // Usually we want to also clear shared storage unless another tab may need it to continue/complete a flow\n    if (this.enableSharedStorage && options.clearSharedStorage !== false) {\n      const state = options.state || meta?.state;\n      if (state) {\n        clearTransactionFromSharedStorage(this.storageManager, state);\n      }\n    }\n\n    if (options.clearIdxResponse !== false) {\n      this.clearIdxResponse();\n    }\n    \n    if (!this.legacyWidgetSupport) {\n      return;\n    }\n\n    // This is for compatibility with older versions of the signin widget. OKTA-304806\n    if (options.oauth) {\n      this.clearLegacyOAuthParams();\n    }\n\n    if (options.pkce) {\n      this.clearLegacyPKCE();\n    }\n  }\n\n  // eslint-disable-next-line complexity\n  save(meta: TransactionMeta, options: TransactionMetaOptions = {}) {\n    // There must be only one transaction executing at a time.\n    // Before saving, check to see if a transaction is already stored.\n    // An existing transaction indicates a concurrency/race/overlap condition\n\n    let storage: StorageProvider = this.storageManager.getTransactionStorage();\n    const obj = storage.getStorage();\n    // oie process may need to update transaction in the middle of process for tracking purpose\n    // false alarm might be caused \n    // TODO: revisit for a better solution, https://oktainc.atlassian.net/browse/OKTA-430919\n    if (isTransactionMeta(obj) && !options.muteWarning) {\n      // eslint-disable-next-line max-len\n      warn('a saved auth transaction exists in storage. This may indicate another auth flow is already in progress.');\n    }\n\n    storage.setStorage(meta);\n\n    // Shared storage allows continuation of transaction in another tab\n    if (this.enableSharedStorage && meta.state) {\n      saveTransactionToSharedStorage(this.storageManager, meta.state, meta);\n    }\n\n    if (!options.oauth) {\n      return;\n    }\n  \n    // Legacy cookie storage\n    if (this.saveNonceCookie || this.saveStateCookie || this.saveParamsCookie) {\n      const cookieStorage: CookieStorage = this.storageManager.getStorage({ storageType: 'cookie' }) as CookieStorage;\n\n      if (this.saveParamsCookie) {\n        const { \n          responseType,\n          state,\n          nonce,\n          scopes,\n          clientId,\n          urls,\n          ignoreSignature\n        } = meta;\n        const oauthParams = {\n          responseType,\n          state,\n          nonce,\n          scopes,\n          clientId,\n          urls,\n          ignoreSignature\n        };\n        cookieStorage.setItem(REDIRECT_OAUTH_PARAMS_NAME, JSON.stringify(oauthParams), null);\n      }\n\n      if (this.saveNonceCookie && meta.nonce) {\n        // Set nonce cookie for servers to validate nonce in id_token\n        cookieStorage.setItem(REDIRECT_NONCE_COOKIE_NAME, meta.nonce, null);\n      }\n\n      if (this.saveStateCookie && meta.state) {\n        // Set state cookie for servers to validate state\n        cookieStorage.setItem(REDIRECT_STATE_COOKIE_NAME, meta.state, null);\n      }\n    }\n  }\n\n  exists(options: TransactionMetaOptions = {}): boolean {\n    try {\n      const meta = this.load(options);\n      return !!meta;\n    } catch {\n      return false;\n    }\n  }\n\n  // load transaction meta from storage\n  // eslint-disable-next-line complexity,max-statements\n  load(options: TransactionMetaOptions = {}): TransactionMeta | null {\n\n    let meta: TransactionMeta;\n\n    // If state was passed, try loading transaction data from shared storage\n    if (this.enableSharedStorage && options.state) {\n      pruneSharedStorage(this.storageManager); // prune before load\n      meta = loadTransactionFromSharedStorage(this.storageManager, options.state);\n      if (isTransactionMeta(meta)) {\n        return meta;\n      }\n    }\n\n    let storage: StorageProvider = this.storageManager.getTransactionStorage();\n    meta = storage.getStorage();\n    if (isTransactionMeta(meta)) {\n      // if we have meta in the new location, there is no need to go further\n      return meta;\n    }\n\n    if (!this.legacyWidgetSupport) {\n      return null;\n    }\n\n    // This is for compatibility with older versions of the signin widget. OKTA-304806\n    if (options.oauth) {\n      try {\n        const oauthParams = this.loadLegacyOAuthParams();\n        Object.assign(meta, oauthParams);\n      } finally {\n        this.clearLegacyOAuthParams();\n      }\n    }\n\n    if (options.pkce) {\n      try {\n        const pkceMeta: PKCETransactionMeta = this.loadLegacyPKCE();\n        Object.assign(meta, pkceMeta);\n      } finally {\n        this.clearLegacyPKCE();\n      }\n    }\n\n    if (isTransactionMeta(meta)) {\n      return meta;\n    }\n    return null;\n  }\n\n  // This is for compatibility with older versions of the signin widget. OKTA-304806\n  clearLegacyPKCE(): void {\n    // clear storages\n    let storage: StorageProvider;\n\n    if (this.storageManager.storageUtil.testStorageType('localStorage')) {\n      storage = this.storageManager.getLegacyPKCEStorage({ storageType: 'localStorage' });\n      storage.clearStorage();\n    }\n\n    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {\n      storage = this.storageManager.getLegacyPKCEStorage({ storageType: 'sessionStorage' });\n      storage.clearStorage();\n    }\n  }\n\n  loadLegacyPKCE(): PKCETransactionMeta {\n    let storage: StorageProvider;\n    let obj;\n    \n    // Try reading from localStorage first.\n    if (this.storageManager.storageUtil.testStorageType('localStorage')) {\n      storage = this.storageManager.getLegacyPKCEStorage({ storageType: 'localStorage' });\n      obj = storage.getStorage();\n      if (obj && obj.codeVerifier) {\n        return obj;\n      }\n    }\n\n    // If meta is not valid, read from sessionStorage. This is expected for more recent versions of the widget.\n    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {\n      storage = this.storageManager.getLegacyPKCEStorage({ storageType: 'sessionStorage' });\n      obj = storage.getStorage();\n      if (obj && obj.codeVerifier) {\n        return obj;\n      }\n    }\n    \n    // If meta is not valid, throw an exception to avoid misleading server-side error\n    // The most likely cause of this error is trying to handle a callback twice\n    // eslint-disable-next-line max-len\n    throw new AuthSdkError('Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.', undefined);\n  }\n\n  clearLegacyOAuthParams(): void {\n    // clear storages\n    let storage: StorageProvider;\n\n    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {\n      storage = this.storageManager.getLegacyOAuthParamsStorage({ storageType: 'sessionStorage' });\n      storage.clearStorage();\n    }\n\n    if (this.storageManager.storageUtil.testStorageType('cookie')) {\n      storage = this.storageManager.getLegacyOAuthParamsStorage({ storageType: 'cookie' });\n      storage.clearStorage();\n    }\n  }\n\n  loadLegacyOAuthParams(): OAuthTransactionMeta {\n    let storage: StorageProvider;\n    let oauthParams;\n  \n    // load first from session storage\n    if (this.storageManager.storageUtil.testStorageType('sessionStorage')) {\n      storage = this.storageManager.getLegacyOAuthParamsStorage({ storageType: 'sessionStorage' });\n      oauthParams = storage.getStorage();\n    }\n    if (isOAuthTransactionMeta(oauthParams)) {\n      return oauthParams;\n    }\n\n    // try to load from cookie\n    if (this.storageManager.storageUtil.testStorageType('cookie')) {\n      storage = this.storageManager.getLegacyOAuthParamsStorage({ storageType: 'cookie' });\n      oauthParams = storage.getStorage();\n    }\n\n    if (isOAuthTransactionMeta(oauthParams)) {\n      return oauthParams;\n    }\n\n\n    throw new AuthSdkError('Unable to retrieve OAuth redirect params from storage');\n\n    // Something is there but we don't recognize it\n    // throw new AuthSdkError('Unable to parse the ' + REDIRECT_OAUTH_PARAMS_NAME + ' value from storage');\n  }\n\n  saveIdxResponse(data: SavedIdxResponse): void {\n    if (!this.saveLastResponse) {\n      return;\n    }\n    const storage = this.storageManager.getIdxResponseStorage();\n    if (!storage) {\n      return;\n    }\n    storage.setStorage(data);\n  }\n\n  // eslint-disable-next-line complexity\n  loadIdxResponse(options?: IntrospectOptions): SavedIdxResponse | null {\n    if (!this.saveLastResponse) {\n      return null;\n    }\n    const storage = this.storageManager.getIdxResponseStorage();\n    if (!storage) {\n      return null;\n    }\n    const storedValue = storage.getStorage();\n    if (!storedValue || !isRawIdxResponse(storedValue.rawIdxResponse)) {\n      return null;\n    }\n\n    if (options) {\n      const { stateHandle, interactionHandle } = options;\n      if (stateHandle && storedValue.stateHandle !== stateHandle) {\n        return null;\n      }\n      if (interactionHandle && storedValue.interactionHandle !== interactionHandle) {\n        return null;\n      }\n    }\n\n    return storedValue;\n  }\n\n  clearIdxResponse(): void {\n    if (!this.saveLastResponse) {\n      return;\n    }\n    const storage = this.storageManager.getIdxResponseStorage();\n    storage?.clearStorage();\n  }\n}"],"mappings":";;;;;;;;;;AAaA;;AACA;;AAEA;;AAaA;;AACA;;AACA;;AA/BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAgCe,MAAMA,kBAAN,CAAyB;EAUtCC,WAAW,CAACC,OAAD,EAAqC;IAC9C;IACA,KAAKC,cAAL,GAAsBD,OAAO,CAACC,cAA9B;IACA,KAAKC,mBAAL,GAA2BF,OAAO,CAACE,mBAAR,KAAgC,KAAhC,GAAwC,KAAxC,GAAgD,IAA3E;IACA,KAAKC,eAAL,GAAuBH,OAAO,CAACG,eAAR,KAA4B,KAA5B,GAAoC,KAApC,GAA4C,IAAnE;IACA,KAAKC,eAAL,GAAuBJ,OAAO,CAACI,eAAR,KAA4B,KAA5B,GAAoC,KAApC,GAA4C,IAAnE;IACA,KAAKC,gBAAL,GAAwBL,OAAO,CAACK,gBAAR,KAA6B,KAA7B,GAAqC,KAArC,GAA6C,IAArE;IACA,KAAKC,mBAAL,GAA2BN,OAAO,CAACM,mBAAR,KAAgC,KAAhC,GAAwC,KAAxC,GAAgD,IAA3E;IACA,KAAKC,gBAAL,GAAwBP,OAAO,CAACO,gBAAR,KAA6B,KAA7B,GAAqC,KAArC,GAA6C,IAArE;IACA,KAAKP,OAAL,GAAeA,OAAf;EACD,CApBqC,CAsBtC;;;EACAQ,KAAK,CAACR,OAAoC,GAAG,EAAxC,EAA4C;IAC/C,MAAMS,kBAAmC,GAAG,KAAKR,cAAL,CAAoBS,qBAApB,EAA5C;IACA,MAAMC,IAAI,GAAGF,kBAAkB,CAACG,UAAnB,EAAb,CAF+C,CAI/C;;IACAH,kBAAkB,CAACI,YAAnB,GAL+C,CAO/C;;IACA,IAAI,KAAKP,mBAAL,IAA4BN,OAAO,CAACc,kBAAR,KAA+B,KAA/D,EAAsE;MACpE,MAAMC,KAAK,GAAGf,OAAO,CAACe,KAAR,KAAiBJ,IAAjB,aAAiBA,IAAjB,uBAAiBA,IAAI,CAAEI,KAAvB,CAAd;;MACA,IAAIA,KAAJ,EAAW;QACT,IAAAC,gDAAA,EAAkC,KAAKf,cAAvC,EAAuDc,KAAvD;MACD;IACF;;IAED,IAAIf,OAAO,CAACiB,gBAAR,KAA6B,KAAjC,EAAwC;MACtC,KAAKA,gBAAL;IACD;;IAED,IAAI,CAAC,KAAKf,mBAAV,EAA+B;MAC7B;IACD,CArB8C,CAuB/C;;;IACA,IAAIF,OAAO,CAACkB,KAAZ,EAAmB;MACjB,KAAKC,sBAAL;IACD;;IAED,IAAInB,OAAO,CAACoB,IAAZ,EAAkB;MAChB,KAAKC,eAAL;IACD;EACF,CAtDqC,CAwDtC;;;EACAC,IAAI,CAACX,IAAD,EAAwBX,OAA+B,GAAG,EAA1D,EAA8D;IAChE;IACA;IACA;IAEA,IAAIuB,OAAwB,GAAG,KAAKtB,cAAL,CAAoBS,qBAApB,EAA/B;IACA,MAAMc,GAAG,GAAGD,OAAO,CAACX,UAAR,EAAZ,CANgE,CAOhE;IACA;IACA;;IACA,IAAI,IAAAa,wBAAA,EAAkBD,GAAlB,KAA0B,CAACxB,OAAO,CAAC0B,WAAvC,EAAoD;MAClD;MACA,IAAAC,UAAA,EAAK,yGAAL;IACD;;IAEDJ,OAAO,CAACK,UAAR,CAAmBjB,IAAnB,EAfgE,CAiBhE;;IACA,IAAI,KAAKL,mBAAL,IAA4BK,IAAI,CAACI,KAArC,EAA4C;MAC1C,IAAAc,6CAAA,EAA+B,KAAK5B,cAApC,EAAoDU,IAAI,CAACI,KAAzD,EAAgEJ,IAAhE;IACD;;IAED,IAAI,CAACX,OAAO,CAACkB,KAAb,EAAoB;MAClB;IACD,CAxB+D,CA0BhE;;;IACA,IAAI,KAAKf,eAAL,IAAwB,KAAKC,eAA7B,IAAgD,KAAKC,gBAAzD,EAA2E;MACzE,MAAMyB,aAA4B,GAAG,KAAK7B,cAAL,CAAoBW,UAApB,CAA+B;QAAEmB,WAAW,EAAE;MAAf,CAA/B,CAArC;;MAEA,IAAI,KAAK1B,gBAAT,EAA2B;QACzB,MAAM;UACJ2B,YADI;UAEJjB,KAFI;UAGJkB,KAHI;UAIJC,MAJI;UAKJC,QALI;UAMJC,IANI;UAOJC;QAPI,IAQF1B,IARJ;QASA,MAAM2B,WAAW,GAAG;UAClBN,YADkB;UAElBjB,KAFkB;UAGlBkB,KAHkB;UAIlBC,MAJkB;UAKlBC,QALkB;UAMlBC,IANkB;UAOlBC;QAPkB,CAApB;QASAP,aAAa,CAACS,OAAd,CAAsBC,qCAAtB,EAAkD,wBAAeF,WAAf,CAAlD,EAA+E,IAA/E;MACD;;MAED,IAAI,KAAKnC,eAAL,IAAwBQ,IAAI,CAACsB,KAAjC,EAAwC;QACtC;QACAH,aAAa,CAACS,OAAd,CAAsBE,qCAAtB,EAAkD9B,IAAI,CAACsB,KAAvD,EAA8D,IAA9D;MACD;;MAED,IAAI,KAAK7B,eAAL,IAAwBO,IAAI,CAACI,KAAjC,EAAwC;QACtC;QACAe,aAAa,CAACS,OAAd,CAAsBG,qCAAtB,EAAkD/B,IAAI,CAACI,KAAvD,EAA8D,IAA9D;MACD;IACF;EACF;;EAED4B,MAAM,CAAC3C,OAA+B,GAAG,EAAnC,EAAgD;IACpD,IAAI;MACF,MAAMW,IAAI,GAAG,KAAKiC,IAAL,CAAU5C,OAAV,CAAb;MACA,OAAO,CAAC,CAACW,IAAT;IACD,CAHD,CAGE,MAAM;MACN,OAAO,KAAP;IACD;EACF,CAhIqC,CAkItC;EACA;;;EACAiC,IAAI,CAAC5C,OAA+B,GAAG,EAAnC,EAA+D;IAEjE,IAAIW,IAAJ,CAFiE,CAIjE;;IACA,IAAI,KAAKL,mBAAL,IAA4BN,OAAO,CAACe,KAAxC,EAA+C;MAC7C,IAAA8B,iCAAA,EAAmB,KAAK5C,cAAxB,EAD6C,CACJ;;MACzCU,IAAI,GAAG,IAAAmC,+CAAA,EAAiC,KAAK7C,cAAtC,EAAsDD,OAAO,CAACe,KAA9D,CAAP;;MACA,IAAI,IAAAU,wBAAA,EAAkBd,IAAlB,CAAJ,EAA6B;QAC3B,OAAOA,IAAP;MACD;IACF;;IAED,IAAIY,OAAwB,GAAG,KAAKtB,cAAL,CAAoBS,qBAApB,EAA/B;IACAC,IAAI,GAAGY,OAAO,CAACX,UAAR,EAAP;;IACA,IAAI,IAAAa,wBAAA,EAAkBd,IAAlB,CAAJ,EAA6B;MAC3B;MACA,OAAOA,IAAP;IACD;;IAED,IAAI,CAAC,KAAKT,mBAAV,EAA+B;MAC7B,OAAO,IAAP;IACD,CAtBgE,CAwBjE;;;IACA,IAAIF,OAAO,CAACkB,KAAZ,EAAmB;MACjB,IAAI;QACF,MAAMoB,WAAW,GAAG,KAAKS,qBAAL,EAApB;QACA,qBAAcpC,IAAd,EAAoB2B,WAApB;MACD,CAHD,SAGU;QACR,KAAKnB,sBAAL;MACD;IACF;;IAED,IAAInB,OAAO,CAACoB,IAAZ,EAAkB;MAChB,IAAI;QACF,MAAM4B,QAA6B,GAAG,KAAKC,cAAL,EAAtC;QACA,qBAActC,IAAd,EAAoBqC,QAApB;MACD,CAHD,SAGU;QACR,KAAK3B,eAAL;MACD;IACF;;IAED,IAAI,IAAAI,wBAAA,EAAkBd,IAAlB,CAAJ,EAA6B;MAC3B,OAAOA,IAAP;IACD;;IACD,OAAO,IAAP;EACD,CAnLqC,CAqLtC;;;EACAU,eAAe,GAAS;IACtB;IACA,IAAIE,OAAJ;;IAEA,IAAI,KAAKtB,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,cAAhD,CAAJ,EAAqE;MACnE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBmD,oBAApB,CAAyC;QAAErB,WAAW,EAAE;MAAf,CAAzC,CAAV;MACAR,OAAO,CAACV,YAAR;IACD;;IAED,IAAI,KAAKZ,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,gBAAhD,CAAJ,EAAuE;MACrE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBmD,oBAApB,CAAyC;QAAErB,WAAW,EAAE;MAAf,CAAzC,CAAV;MACAR,OAAO,CAACV,YAAR;IACD;EACF;;EAEDoC,cAAc,GAAwB;IACpC,IAAI1B,OAAJ;IACA,IAAIC,GAAJ,CAFoC,CAIpC;;IACA,IAAI,KAAKvB,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,cAAhD,CAAJ,EAAqE;MACnE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBmD,oBAApB,CAAyC;QAAErB,WAAW,EAAE;MAAf,CAAzC,CAAV;MACAP,GAAG,GAAGD,OAAO,CAACX,UAAR,EAAN;;MACA,IAAIY,GAAG,IAAIA,GAAG,CAAC6B,YAAf,EAA6B;QAC3B,OAAO7B,GAAP;MACD;IACF,CAXmC,CAapC;;;IACA,IAAI,KAAKvB,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,gBAAhD,CAAJ,EAAuE;MACrE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBmD,oBAApB,CAAyC;QAAErB,WAAW,EAAE;MAAf,CAAzC,CAAV;MACAP,GAAG,GAAGD,OAAO,CAACX,UAAR,EAAN;;MACA,IAAIY,GAAG,IAAIA,GAAG,CAAC6B,YAAf,EAA6B;QAC3B,OAAO7B,GAAP;MACD;IACF,CApBmC,CAsBpC;IACA;IACA;;;IACA,MAAM,IAAI8B,oBAAJ,CAAiB,yJAAjB,EAA4KC,SAA5K,CAAN;EACD;;EAEDpC,sBAAsB,GAAS;IAC7B;IACA,IAAII,OAAJ;;IAEA,IAAI,KAAKtB,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,gBAAhD,CAAJ,EAAuE;MACrE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBuD,2BAApB,CAAgD;QAAEzB,WAAW,EAAE;MAAf,CAAhD,CAAV;MACAR,OAAO,CAACV,YAAR;IACD;;IAED,IAAI,KAAKZ,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,QAAhD,CAAJ,EAA+D;MAC7D5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBuD,2BAApB,CAAgD;QAAEzB,WAAW,EAAE;MAAf,CAAhD,CAAV;MACAR,OAAO,CAACV,YAAR;IACD;EACF;;EAEDkC,qBAAqB,GAAyB;IAC5C,IAAIxB,OAAJ;IACA,IAAIe,WAAJ,CAF4C,CAI5C;;IACA,IAAI,KAAKrC,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,gBAAhD,CAAJ,EAAuE;MACrE5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBuD,2BAApB,CAAgD;QAAEzB,WAAW,EAAE;MAAf,CAAhD,CAAV;MACAO,WAAW,GAAGf,OAAO,CAACX,UAAR,EAAd;IACD;;IACD,IAAI,IAAA6C,6BAAA,EAAuBnB,WAAvB,CAAJ,EAAyC;MACvC,OAAOA,WAAP;IACD,CAX2C,CAa5C;;;IACA,IAAI,KAAKrC,cAAL,CAAoBiD,WAApB,CAAgCC,eAAhC,CAAgD,QAAhD,CAAJ,EAA+D;MAC7D5B,OAAO,GAAG,KAAKtB,cAAL,CAAoBuD,2BAApB,CAAgD;QAAEzB,WAAW,EAAE;MAAf,CAAhD,CAAV;MACAO,WAAW,GAAGf,OAAO,CAACX,UAAR,EAAd;IACD;;IAED,IAAI,IAAA6C,6BAAA,EAAuBnB,WAAvB,CAAJ,EAAyC;MACvC,OAAOA,WAAP;IACD;;IAGD,MAAM,IAAIgB,oBAAJ,CAAiB,uDAAjB,CAAN,CAxB4C,CA0B5C;IACA;EACD;;EAEDI,eAAe,CAACC,IAAD,EAA+B;IAC5C,IAAI,CAAC,KAAKpD,gBAAV,EAA4B;MAC1B;IACD;;IACD,MAAMgB,OAAO,GAAG,KAAKtB,cAAL,CAAoB2D,qBAApB,EAAhB;;IACA,IAAI,CAACrC,OAAL,EAAc;MACZ;IACD;;IACDA,OAAO,CAACK,UAAR,CAAmB+B,IAAnB;EACD,CAvRqC,CAyRtC;;;EACAE,eAAe,CAAC7D,OAAD,EAAuD;IACpE,IAAI,CAAC,KAAKO,gBAAV,EAA4B;MAC1B,OAAO,IAAP;IACD;;IACD,MAAMgB,OAAO,GAAG,KAAKtB,cAAL,CAAoB2D,qBAApB,EAAhB;;IACA,IAAI,CAACrC,OAAL,EAAc;MACZ,OAAO,IAAP;IACD;;IACD,MAAMuC,WAAW,GAAGvC,OAAO,CAACX,UAAR,EAApB;;IACA,IAAI,CAACkD,WAAD,IAAgB,CAAC,IAAAC,uBAAA,EAAiBD,WAAW,CAACE,cAA7B,CAArB,EAAmE;MACjE,OAAO,IAAP;IACD;;IAED,IAAIhE,OAAJ,EAAa;MACX,MAAM;QAAEiE,WAAF;QAAeC;MAAf,IAAqClE,OAA3C;;MACA,IAAIiE,WAAW,IAAIH,WAAW,CAACG,WAAZ,KAA4BA,WAA/C,EAA4D;QAC1D,OAAO,IAAP;MACD;;MACD,IAAIC,iBAAiB,IAAIJ,WAAW,CAACI,iBAAZ,KAAkCA,iBAA3D,EAA8E;QAC5E,OAAO,IAAP;MACD;IACF;;IAED,OAAOJ,WAAP;EACD;;EAED7C,gBAAgB,GAAS;IACvB,IAAI,CAAC,KAAKV,gBAAV,EAA4B;MAC1B;IACD;;IACD,MAAMgB,OAAO,GAAG,KAAKtB,cAAL,CAAoB2D,qBAApB,EAAhB;IACArC,OAAO,SAAP,IAAAA,OAAO,WAAP,YAAAA,OAAO,CAAEV,YAAT;EACD;;AA1TqC"}

package/cjs/builderUtil.js

@@ -1,49 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
-
-exports.assertValidConfig = assertValidConfig;
-
-var _indexOf = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/index-of"));
-
-var _AuthSdkError = _interopRequireDefault(require("./errors/AuthSdkError"));
-
-/*!
- * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- *
- * See the License for the specific language governing permissions and limitations under the License.
- */
-// TODO: use @okta/configuration-validation (move module to this monorepo?)
-// eslint-disable-next-line complexity
-function assertValidConfig(args) {
-  args = args || {};
-  var scopes = args.scopes;
-
-  if (scopes && !Array.isArray(scopes)) {
-    throw new _AuthSdkError.default('scopes must be a array of strings. ' + 'Required usage: new OktaAuth({scopes: ["openid", "email"]})');
-  } // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-
-
-  var issuer = args.issuer;
-
-  if (!issuer) {
-    throw new _AuthSdkError.default('No issuer passed to constructor. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
-  }
-
-  var isUrlRegex = new RegExp('^http?s?://.+');
-
-  if (!isUrlRegex.test(issuer)) {
-    throw new _AuthSdkError.default('Issuer must be a valid URL. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com/oauth2/{authServerId}"})');
-  }
-
-  if ((0, _indexOf.default)(issuer).call(issuer, '-admin.') !== -1) {
-    throw new _AuthSdkError.default('Issuer URL passed to constructor contains "-admin" in subdomain. ' + 'Required usage: new OktaAuth({issuer: "https://{yourOktaDomain}.com})');
-  }
-}
-//# sourceMappingURL=builderUtil.js.map

package/cjs/builderUtil.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"builderUtil.js","names":["assertValidConfig","args","scopes","Array","isArray","AuthSdkError","issuer","isUrlRegex","RegExp","test"],"sources":["../../lib/builderUtil.ts"],"sourcesContent":["/*!\n * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport AuthSdkError from './errors/AuthSdkError';\nimport { OktaAuthOptions } from './types';\n\n// TODO: use @okta/configuration-validation (move module to this monorepo?)\n// eslint-disable-next-line complexity\nfunction assertValidConfig(args: OktaAuthOptions) {\n  args = args || {};\n\n  var scopes = args.scopes;\n  if (scopes && !Array.isArray(scopes)) {\n    throw new AuthSdkError('scopes must be a array of strings. ' +\n      'Required usage: new OktaAuth({scopes: [\"openid\", \"email\"]})');\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n  var issuer = args.issuer!;\n  if (!issuer) {\n    throw new AuthSdkError('No issuer passed to constructor. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  var isUrlRegex = new RegExp('^http?s?://.+');\n  if (!isUrlRegex.test(issuer)) {\n    throw new AuthSdkError('Issuer must be a valid URL. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  if (issuer.indexOf('-admin.') !== -1) {\n    throw new AuthSdkError('Issuer URL passed to constructor contains \"-admin\" in subdomain. ' +\n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com})');\n  }\n}\n\nexport {\n  assertValidConfig\n};\n"],"mappings":";;;;;;;;AAYA;;AAZA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAKA;AACA;AACA,SAASA,iBAAT,CAA2BC,IAA3B,EAAkD;EAChDA,IAAI,GAAGA,IAAI,IAAI,EAAf;EAEA,IAAIC,MAAM,GAAGD,IAAI,CAACC,MAAlB;;EACA,IAAIA,MAAM,IAAI,CAACC,KAAK,CAACC,OAAN,CAAcF,MAAd,CAAf,EAAsC;IACpC,MAAM,IAAIG,qBAAJ,CAAiB,wCACrB,6DADI,CAAN;EAED,CAP+C,CAShD;;;EACA,IAAIC,MAAM,GAAGL,IAAI,CAACK,MAAlB;;EACA,IAAI,CAACA,MAAL,EAAa;IACX,MAAM,IAAID,qBAAJ,CAAiB,sCACrB,8FADI,CAAN;EAED;;EAED,IAAIE,UAAU,GAAG,IAAIC,MAAJ,CAAW,eAAX,CAAjB;;EACA,IAAI,CAACD,UAAU,CAACE,IAAX,CAAgBH,MAAhB,CAAL,EAA8B;IAC5B,MAAM,IAAID,qBAAJ,CAAiB,iCACrB,8FADI,CAAN;EAED;;EAED,IAAI,sBAAAC,MAAM,MAAN,CAAAA,MAAM,EAAS,SAAT,CAAN,KAA8B,CAAC,CAAnC,EAAsC;IACpC,MAAM,IAAID,qBAAJ,CAAiB,sEACrB,uEADI,CAAN;EAED;AACF"}

package/cjs/cdnEntry.js

@@ -1,52 +0,0 @@
-"use strict";
-
-var _WeakMap = require("@babel/runtime-corejs3/core-js-stable/weak-map");
-
-var _Object$getOwnPropertyDescriptor = require("@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor");
-
-var _interopRequireDefault = require("@babel/runtime-corejs3/helpers/interopRequireDefault");
-
-exports.default = void 0;
-
-var _reduce = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/reduce"));
-
-var _filter = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/instance/filter"));
-
-var _entries = _interopRequireDefault(require("@babel/runtime-corejs3/core-js-stable/object/entries"));
-
-var _OktaAuth = _interopRequireDefault(require("./OktaAuth"));
-
-var MyAccountMethods = _interopRequireWildcard(require("./myaccount/api"));
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof _WeakMap !== "function") return null; var cacheBabelInterop = new _WeakMap(); var cacheNodeInterop = new _WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && _Object$getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? _Object$getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * 
- * See the License for the specific language governing permissions and limitations under the License.
- */
-class OktaAuthCDN extends _OktaAuth.default {
-  constructor(args) {
-    var _context, _context2;
-
-    super(args);
-    this.myaccount = (0, _reduce.default)(_context = (0, _filter.default)(_context2 = (0, _entries.default)(MyAccountMethods)).call(_context2, ([name]) => name !== 'default')).call(_context, (acc, [name, fn]) => {
-      acc[name] = fn.bind(null, this);
-      return acc;
-    }, {});
-  }
-
-}
-
-var _default = OktaAuthCDN;
-exports.default = _default;
-module.exports = exports.default;
-//# sourceMappingURL=cdnEntry.js.map

package/cjs/cdnEntry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cdnEntry.js","names":["OktaAuthCDN","OktaAuth","constructor","args","myaccount","MyAccountMethods","name","acc","fn","bind"],"sources":["../../lib/cdnEntry.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport OktaAuth from './OktaAuth';\nimport * as MyAccountMethods from './myaccount/api';\nimport { OktaAuthOptions } from './types';\n\nclass OktaAuthCDN extends OktaAuth {\n  myaccount;\n\n  constructor(args: OktaAuthOptions) {\n    super(args);\n\n    this.myaccount = Object.entries(MyAccountMethods)\n      .filter(([ name ]) => name !== 'default')\n      .reduce((acc, [name, fn]) => {\n        acc[name] = (fn as any).bind(null, this);\n        return acc;\n      }, {});\n  }\n}\n\nexport default OktaAuthCDN;\n"],"mappings":";;;;;;;;;;;;;;;;AAaA;;AACA;;;;;;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAOA,MAAMA,WAAN,SAA0BC,iBAA1B,CAAmC;EAGjCC,WAAW,CAACC,IAAD,EAAwB;IAAA;;IACjC,MAAMA,IAAN;IAEA,KAAKC,SAAL,GAAiB,uFAAeC,gBAAf,mBACP,CAAC,CAAEC,IAAF,CAAD,KAAcA,IAAI,KAAK,SADhB,kBAEP,CAACC,GAAD,EAAM,CAACD,IAAD,EAAOE,EAAP,CAAN,KAAqB;MAC3BD,GAAG,CAACD,IAAD,CAAH,GAAaE,EAAD,CAAYC,IAAZ,CAAiB,IAAjB,EAAuB,IAAvB,CAAZ;MACA,OAAOF,GAAP;IACD,CALc,EAKZ,EALY,CAAjB;EAMD;;AAZgC;;eAepBP,W"}

package/cjs/crypto/webauthn.js

@@ -1,101 +0,0 @@
-"use strict";
-
-exports.getAttestation = exports.getAssertion = exports.buildCredentialRequestOptions = exports.buildCredentialCreationOptions = void 0;
-
-var _base = require("./base64");
-
-/*!
- * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
- * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
- *
- * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- *
- * See the License for the specific language governing permissions and limitations under the License.
- */
-// Get known credentials from list of enrolled authenticators
-const getEnrolledCredentials = (authenticatorEnrollments = []) => {
-  const credentials = [];
-  authenticatorEnrollments.forEach(enrollement => {
-    if (enrollement.key === 'webauthn') {
-      credentials.push({
-        type: 'public-key',
-        id: (0, _base.base64UrlToBuffer)(enrollement.credentialId)
-      });
-    }
-  });
-  return credentials;
-}; // Build options for navigator.credentials.create
-// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/create
-
-
-const buildCredentialCreationOptions = (activationData, authenticatorEnrollments) => {
-  return {
-    publicKey: {
-      rp: activationData.rp,
-      user: {
-        id: (0, _base.base64UrlToBuffer)(activationData.user.id),
-        name: activationData.user.name,
-        displayName: activationData.user.displayName
-      },
-      challenge: (0, _base.base64UrlToBuffer)(activationData.challenge),
-      pubKeyCredParams: activationData.pubKeyCredParams,
-      attestation: activationData.attestation,
-      authenticatorSelection: activationData.authenticatorSelection,
-      excludeCredentials: getEnrolledCredentials(authenticatorEnrollments)
-    }
-  };
-}; // Build options for navigator.credentials.get
-// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get
-
-
-exports.buildCredentialCreationOptions = buildCredentialCreationOptions;
-
-const buildCredentialRequestOptions = (challengeData, authenticatorEnrollments) => {
-  return {
-    publicKey: {
-      challenge: (0, _base.base64UrlToBuffer)(challengeData.challenge),
-      userVerification: challengeData.userVerification,
-      allowCredentials: getEnrolledCredentials(authenticatorEnrollments)
-    }
-  };
-}; // Build attestation for webauthn enroll
-// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAttestationResponse
-
-
-exports.buildCredentialRequestOptions = buildCredentialRequestOptions;
-
-const getAttestation = credential => {
-  const response = credential.response;
-  const id = credential.id;
-  const clientData = (0, _base.bufferToBase64Url)(response.clientDataJSON);
-  const attestation = (0, _base.bufferToBase64Url)(response.attestationObject);
-  return {
-    id,
-    clientData,
-    attestation
-  };
-}; // Build assertion for webauthn verification
-// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAssertionResponse
-
-
-exports.getAttestation = getAttestation;
-
-const getAssertion = credential => {
-  const response = credential.response;
-  const id = credential.id;
-  const clientData = (0, _base.bufferToBase64Url)(response.clientDataJSON);
-  const authenticatorData = (0, _base.bufferToBase64Url)(response.authenticatorData);
-  const signatureData = (0, _base.bufferToBase64Url)(response.signature);
-  return {
-    id,
-    clientData,
-    authenticatorData,
-    signatureData
-  };
-};
-
-exports.getAssertion = getAssertion;
-//# sourceMappingURL=webauthn.js.map

package/cjs/crypto/webauthn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"webauthn.js","names":["getEnrolledCredentials","authenticatorEnrollments","credentials","forEach","enrollement","key","push","type","id","base64UrlToBuffer","credentialId","buildCredentialCreationOptions","activationData","publicKey","rp","user","name","displayName","challenge","pubKeyCredParams","attestation","authenticatorSelection","excludeCredentials","buildCredentialRequestOptions","challengeData","userVerification","allowCredentials","getAttestation","credential","response","clientData","bufferToBase64Url","clientDataJSON","attestationObject","getAssertion","authenticatorData","signatureData","signature"],"sources":["../../../lib/crypto/webauthn.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { base64UrlToBuffer, bufferToBase64Url } from './base64';\nimport { ActivationData, ChallengeData, IdxAuthenticator } from '../idx/types';\n\n// Get known credentials from list of enrolled authenticators\nconst getEnrolledCredentials = (authenticatorEnrollments: IdxAuthenticator[] = []) => {\n  const credentials: PublicKeyCredentialDescriptor[] = [];\n  authenticatorEnrollments.forEach((enrollement) => {\n    if (enrollement.key === 'webauthn') {\n      credentials.push({\n        type: 'public-key',\n        id: base64UrlToBuffer(enrollement.credentialId),\n      });\n    }\n  });\n  return credentials;\n};\n\n// Build options for navigator.credentials.create\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/create\nexport const buildCredentialCreationOptions = (\n  activationData: ActivationData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n  return {\n    publicKey: {\n      rp: activationData.rp,\n      user: {\n        id: base64UrlToBuffer(activationData.user.id),\n        name: activationData.user.name,\n        displayName: activationData.user.displayName\n      },\n      challenge: base64UrlToBuffer(activationData.challenge),\n      pubKeyCredParams: activationData.pubKeyCredParams,\n      attestation: activationData.attestation,\n      authenticatorSelection: activationData.authenticatorSelection,\n      excludeCredentials: getEnrolledCredentials(authenticatorEnrollments),\n    }\n  } as CredentialCreationOptions;\n};\n\n\n// Build options for navigator.credentials.get\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get\nexport const buildCredentialRequestOptions = (\n  challengeData: ChallengeData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n  return {\n    publicKey: {\n      challenge: base64UrlToBuffer(challengeData.challenge),\n      userVerification: challengeData.userVerification,\n      allowCredentials: getEnrolledCredentials(authenticatorEnrollments),\n    }\n  } as CredentialRequestOptions;\n};\n\n// Build attestation for webauthn enroll\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAttestationResponse\nexport const getAttestation = (credential: PublicKeyCredential) => {\n  const response = credential.response as AuthenticatorAttestationResponse;\n  const id = credential.id;\n  const clientData = bufferToBase64Url(response.clientDataJSON);\n  const attestation = bufferToBase64Url(response.attestationObject);\n  return {\n    id,\n    clientData,\n    attestation\n  };\n};\n\n// Build assertion for webauthn verification\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAssertionResponse\nexport const getAssertion = (credential: PublicKeyCredential) => {\n  const response = credential.response as AuthenticatorAssertionResponse;\n  const id = credential.id;\n  const clientData = bufferToBase64Url(response.clientDataJSON);\n  const authenticatorData = bufferToBase64Url(response.authenticatorData);\n  const signatureData = bufferToBase64Url(response.signature);\n  return {\n    id,\n    clientData,\n    authenticatorData,\n    signatureData\n  };\n};\n"],"mappings":";;;;AAYA;;AAZA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAKA;AACA,MAAMA,sBAAsB,GAAG,CAACC,wBAA4C,GAAG,EAAhD,KAAuD;EACpF,MAAMC,WAA4C,GAAG,EAArD;EACAD,wBAAwB,CAACE,OAAzB,CAAkCC,WAAD,IAAiB;IAChD,IAAIA,WAAW,CAACC,GAAZ,KAAoB,UAAxB,EAAoC;MAClCH,WAAW,CAACI,IAAZ,CAAiB;QACfC,IAAI,EAAE,YADS;QAEfC,EAAE,EAAE,IAAAC,uBAAA,EAAkBL,WAAW,CAACM,YAA9B;MAFW,CAAjB;IAID;EACF,CAPD;EAQA,OAAOR,WAAP;AACD,CAXD,C,CAaA;AACA;;;AACO,MAAMS,8BAA8B,GAAG,CAC5CC,cAD4C,EACZX,wBADY,KAEzC;EACH,OAAO;IACLY,SAAS,EAAE;MACTC,EAAE,EAAEF,cAAc,CAACE,EADV;MAETC,IAAI,EAAE;QACJP,EAAE,EAAE,IAAAC,uBAAA,EAAkBG,cAAc,CAACG,IAAf,CAAoBP,EAAtC,CADA;QAEJQ,IAAI,EAAEJ,cAAc,CAACG,IAAf,CAAoBC,IAFtB;QAGJC,WAAW,EAAEL,cAAc,CAACG,IAAf,CAAoBE;MAH7B,CAFG;MAOTC,SAAS,EAAE,IAAAT,uBAAA,EAAkBG,cAAc,CAACM,SAAjC,CAPF;MAQTC,gBAAgB,EAAEP,cAAc,CAACO,gBARxB;MASTC,WAAW,EAAER,cAAc,CAACQ,WATnB;MAUTC,sBAAsB,EAAET,cAAc,CAACS,sBAV9B;MAWTC,kBAAkB,EAAEtB,sBAAsB,CAACC,wBAAD;IAXjC;EADN,CAAP;AAeD,CAlBM,C,CAqBP;AACA;;;;;AACO,MAAMsB,6BAA6B,GAAG,CAC3CC,aAD2C,EACbvB,wBADa,KAExC;EACH,OAAO;IACLY,SAAS,EAAE;MACTK,SAAS,EAAE,IAAAT,uBAAA,EAAkBe,aAAa,CAACN,SAAhC,CADF;MAETO,gBAAgB,EAAED,aAAa,CAACC,gBAFvB;MAGTC,gBAAgB,EAAE1B,sBAAsB,CAACC,wBAAD;IAH/B;EADN,CAAP;AAOD,CAVM,C,CAYP;AACA;;;;;AACO,MAAM0B,cAAc,GAAIC,UAAD,IAAqC;EACjE,MAAMC,QAAQ,GAAGD,UAAU,CAACC,QAA5B;EACA,MAAMrB,EAAE,GAAGoB,UAAU,CAACpB,EAAtB;EACA,MAAMsB,UAAU,GAAG,IAAAC,uBAAA,EAAkBF,QAAQ,CAACG,cAA3B,CAAnB;EACA,MAAMZ,WAAW,GAAG,IAAAW,uBAAA,EAAkBF,QAAQ,CAACI,iBAA3B,CAApB;EACA,OAAO;IACLzB,EADK;IAELsB,UAFK;IAGLV;EAHK,CAAP;AAKD,CAVM,C,CAYP;AACA;;;;;AACO,MAAMc,YAAY,GAAIN,UAAD,IAAqC;EAC/D,MAAMC,QAAQ,GAAGD,UAAU,CAACC,QAA5B;EACA,MAAMrB,EAAE,GAAGoB,UAAU,CAACpB,EAAtB;EACA,MAAMsB,UAAU,GAAG,IAAAC,uBAAA,EAAkBF,QAAQ,CAACG,cAA3B,CAAnB;EACA,MAAMG,iBAAiB,GAAG,IAAAJ,uBAAA,EAAkBF,QAAQ,CAACM,iBAA3B,CAA1B;EACA,MAAMC,aAAa,GAAG,IAAAL,uBAAA,EAAkBF,QAAQ,CAACQ,SAA3B,CAAtB;EACA,OAAO;IACL7B,EADK;IAELsB,UAFK;IAGLK,iBAHK;IAILC;EAJK,CAAP;AAMD,CAZM"}