@okta/okta-auth-js 7.10.1 → 7.11.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/cjs/authn/util/poll.js +2 -53
- package/cjs/authn/util/poll.js.map +1 -1
- package/cjs/base/types.js.map +1 -1
- package/cjs/constants.js +1 -3
- package/cjs/constants.js.map +1 -1
- package/cjs/features.js +0 -17
- package/cjs/features.js.map +1 -1
- package/cjs/http/OktaUserAgent.js +2 -2
- package/cjs/http/options.js +1 -0
- package/cjs/http/options.js.map +1 -1
- package/cjs/http/request.js +6 -5
- package/cjs/http/request.js.map +1 -1
- package/cjs/http/types.js.map +1 -1
- package/cjs/myaccount/request.js +24 -5
- package/cjs/myaccount/request.js.map +1 -1
- package/cjs/myaccount/transactions/Base.js.map +1 -1
- package/cjs/myaccount/types.js.map +1 -1
- package/dist/okta-auth-js.authn.min.analyzer.html +2 -2
- package/dist/okta-auth-js.authn.min.js +1 -1
- package/dist/okta-auth-js.authn.min.js.map +1 -1
- package/dist/okta-auth-js.core.min.analyzer.html +2 -2
- package/dist/okta-auth-js.core.min.js +1 -1
- package/dist/okta-auth-js.core.min.js.map +1 -1
- package/dist/okta-auth-js.idx.min.analyzer.html +2 -2
- package/dist/okta-auth-js.idx.min.js +1 -1
- package/dist/okta-auth-js.idx.min.js.map +1 -1
- package/dist/okta-auth-js.min.analyzer.html +2 -2
- package/dist/okta-auth-js.min.js +1 -1
- package/dist/okta-auth-js.min.js.map +1 -1
- package/dist/okta-auth-js.myaccount.min.analyzer.html +2 -2
- package/dist/okta-auth-js.myaccount.min.js +1 -1
- package/dist/okta-auth-js.myaccount.min.js.map +1 -1
- package/esm/browser/authn/util/poll.js +6 -55
- package/esm/browser/authn/util/poll.js.map +1 -1
- package/esm/browser/constants.js +1 -2
- package/esm/browser/constants.js.map +1 -1
- package/esm/browser/exports/exports/authn.js +1 -1
- package/esm/browser/exports/exports/core.js +1 -1
- package/esm/browser/exports/exports/default.js +1 -1
- package/esm/browser/exports/exports/idx.js +1 -1
- package/esm/browser/exports/exports/myaccount.js +1 -1
- package/esm/browser/features.js +1 -14
- package/esm/browser/features.js.map +1 -1
- package/esm/browser/http/OktaUserAgent.js +2 -2
- package/esm/browser/http/options.js +1 -0
- package/esm/browser/http/options.js.map +1 -1
- package/esm/browser/http/request.js +8 -7
- package/esm/browser/http/request.js.map +1 -1
- package/esm/browser/myaccount/request.js +21 -3
- package/esm/browser/myaccount/request.js.map +1 -1
- package/esm/browser/myaccount/transactions/Base.js.map +1 -1
- package/esm/browser/myaccount/types.js.map +1 -1
- package/esm/browser/package.json +1 -1
- package/esm/node/authn/util/poll.js +7 -55
- package/esm/node/authn/util/poll.js.map +1 -1
- package/esm/node/constants.js +1 -2
- package/esm/node/constants.js.map +1 -1
- package/esm/node/exports/exports/authn.js +1 -1
- package/esm/node/exports/exports/core.js +1 -1
- package/esm/node/exports/exports/default.js +1 -1
- package/esm/node/exports/exports/idx.js +1 -1
- package/esm/node/exports/exports/myaccount.js +1 -1
- package/esm/node/features.js +1 -14
- package/esm/node/features.js.map +1 -1
- package/esm/node/http/OktaUserAgent.js +2 -2
- package/esm/node/http/options.js +1 -0
- package/esm/node/http/options.js.map +1 -1
- package/esm/node/http/request.js +8 -7
- package/esm/node/http/request.js.map +1 -1
- package/esm/node/myaccount/request.js +21 -3
- package/esm/node/myaccount/request.js.map +1 -1
- package/esm/node/myaccount/transactions/Base.js.map +1 -1
- package/esm/node/myaccount/types.js.map +1 -1
- package/esm/node/package.json +1 -1
- package/package.json +3 -3
- package/types/lib/base/types.d.ts +0 -1
- package/types/lib/constants.d.ts +0 -1
- package/types/lib/core/options.d.ts +1 -0
- package/types/lib/features.d.ts +0 -1
- package/types/lib/http/options.d.ts +1 -0
- package/types/lib/http/types.d.ts +1 -0
- package/types/lib/idx/options.d.ts +1 -0
- package/types/lib/myaccount/request.d.ts +2 -2
- package/types/lib/myaccount/transactions/Base.d.ts +2 -1
- package/types/lib/myaccount/types.d.ts +2 -2
- package/types/lib/oidc/options/OAuthOptionsConstructor.d.ts +1 -0
- package/umd/authn.js +1 -1
- package/umd/authn.js.map +1 -1
- package/umd/core.js +1 -1
- package/umd/core.js.map +1 -1
- package/umd/default.js +1 -1
- package/umd/default.js.map +1 -1
- package/umd/idx.js +1 -1
- package/umd/idx.js.map +1 -1
- package/umd/myaccount.js +1 -1
- package/umd/myaccount.js.map +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
# 7.11.1
|
|
4
|
+
|
|
5
|
+
### Fixes
|
|
6
|
+
|
|
7
|
+
- [#1572](https://github.com/okta/okta-auth-js/pull/1572) fix: adds DPoP support to MyAccount API client
|
|
8
|
+
|
|
9
|
+
# 7.11.0
|
|
10
|
+
|
|
11
|
+
### Features
|
|
12
|
+
|
|
13
|
+
- [#1571](https://github.com/okta/okta-auth-js/pull/1571) add: `pollDelay` option for `OktaAuth` contructor to fix polling issue in Mobile Safari 17.x and 18.x
|
|
14
|
+
|
|
3
15
|
# 7.10.1
|
|
4
16
|
|
|
5
17
|
### Other
|
package/cjs/authn/util/poll.js
CHANGED
|
@@ -9,7 +9,6 @@ var _AuthSdkError = _interopRequireDefault(require("../../errors/AuthSdkError"))
|
|
|
9
9
|
var _AuthPollStopError = _interopRequireDefault(require("../../errors/AuthPollStopError"));
|
|
10
10
|
var _types = require("../types");
|
|
11
11
|
var _stateToken = require("./stateToken");
|
|
12
|
-
var _features = require("../../features");
|
|
13
12
|
/*!
|
|
14
13
|
* Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
|
|
15
14
|
* The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
|
|
@@ -72,40 +71,6 @@ function getPollFn(sdk, res, ref) {
|
|
|
72
71
|
pollingIntent: true
|
|
73
72
|
});
|
|
74
73
|
}
|
|
75
|
-
const delayNextPoll = ms => {
|
|
76
|
-
// no need for extra logic in non-iOS environments, just continue polling
|
|
77
|
-
if (!(0, _features.isSafari18)()) {
|
|
78
|
-
return (0, _util.delay)(ms);
|
|
79
|
-
}
|
|
80
|
-
let timeoutId;
|
|
81
|
-
const cancelableDelay = () => {
|
|
82
|
-
return new Promise(resolve => {
|
|
83
|
-
timeoutId = setTimeout(resolve, ms);
|
|
84
|
-
});
|
|
85
|
-
};
|
|
86
|
-
const delayForFocus = () => {
|
|
87
|
-
let pageVisibilityHandler;
|
|
88
|
-
return new Promise(resolve => {
|
|
89
|
-
let pageDidHide = false;
|
|
90
|
-
pageVisibilityHandler = () => {
|
|
91
|
-
if (document.hidden) {
|
|
92
|
-
clearTimeout(timeoutId);
|
|
93
|
-
pageDidHide = true;
|
|
94
|
-
} else if (pageDidHide) {
|
|
95
|
-
resolve();
|
|
96
|
-
}
|
|
97
|
-
};
|
|
98
|
-
document.addEventListener('visibilitychange', pageVisibilityHandler);
|
|
99
|
-
}).then(() => {
|
|
100
|
-
document.removeEventListener('visibilitychange', pageVisibilityHandler);
|
|
101
|
-
});
|
|
102
|
-
};
|
|
103
|
-
return Promise.race([
|
|
104
|
-
// this function will never resolve if the page changes to hidden because the timeout gets cleared
|
|
105
|
-
cancelableDelay(),
|
|
106
|
-
// this function won't resolve until the page becomes visible after being hidden
|
|
107
|
-
delayForFocus()]);
|
|
108
|
-
};
|
|
109
74
|
ref.isPolling = true;
|
|
110
75
|
var retryCount = 0;
|
|
111
76
|
var recursivePoll = function () {
|
|
@@ -113,22 +78,6 @@ function getPollFn(sdk, res, ref) {
|
|
|
113
78
|
if (!ref.isPolling) {
|
|
114
79
|
return Promise.reject(new _AuthPollStopError.default());
|
|
115
80
|
}
|
|
116
|
-
|
|
117
|
-
// don't trigger polling request if page is hidden wait until window is visible again
|
|
118
|
-
if ((0, _features.isSafari18)() && document.hidden) {
|
|
119
|
-
let handler;
|
|
120
|
-
return new Promise(resolve => {
|
|
121
|
-
handler = () => {
|
|
122
|
-
if (!document.hidden) {
|
|
123
|
-
resolve();
|
|
124
|
-
}
|
|
125
|
-
};
|
|
126
|
-
document.addEventListener('visibilitychange', handler);
|
|
127
|
-
}).then(() => {
|
|
128
|
-
document.removeEventListener('visibilitychange', handler);
|
|
129
|
-
return recursivePoll();
|
|
130
|
-
});
|
|
131
|
-
}
|
|
132
81
|
return pollFn().then(function (pollRes) {
|
|
133
82
|
// Reset our retry counter on success
|
|
134
83
|
retryCount = 0;
|
|
@@ -144,7 +93,7 @@ function getPollFn(sdk, res, ref) {
|
|
|
144
93
|
}
|
|
145
94
|
|
|
146
95
|
// Continue poll
|
|
147
|
-
return
|
|
96
|
+
return (0, _util.delay)(delay).then(recursivePoll);
|
|
148
97
|
} else {
|
|
149
98
|
// Any non-waiting result, even if polling was stopped
|
|
150
99
|
// during a request, will return
|
|
@@ -156,7 +105,7 @@ function getPollFn(sdk, res, ref) {
|
|
|
156
105
|
if (err.xhr && (err.xhr.status === 0 || err.xhr.status === 429) && retryCount <= 4) {
|
|
157
106
|
var delayLength = Math.pow(2, retryCount) * 1000;
|
|
158
107
|
retryCount++;
|
|
159
|
-
return
|
|
108
|
+
return (0, _util.delay)(delayLength).then(recursivePoll);
|
|
160
109
|
}
|
|
161
110
|
throw err;
|
|
162
111
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"poll.js","names":["getPollFn","sdk","res","ref","options","delay","rememberDevice","autoPush","transactionCallBack","isNumber","isObject","DEFAULT_POLLING_DELAY","pollLink","getLink","pollFn","opts","e","Promise","reject","AuthSdkError","undefined","href","toQueryString","post","getStateToken","saveAuthnState","withCredentials","pollingIntent","delayNextPoll","ms","isSafari18","delayFn","timeoutId","cancelableDelay","resolve","setTimeout","delayForFocus","pageVisibilityHandler","pageDidHide","document","hidden","clearTimeout","addEventListener","then","removeEventListener","race","isPolling","retryCount","recursivePoll","AuthPollStopError","handler","pollRes","factorResult","tx","createTransaction","catch","err","xhr","status","delayLength","Math","pow"],"sources":["../../../../lib/authn/util/poll.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { post } from '../../http';\nimport { isNumber, isObject, getLink, toQueryString, delay as delayFn } from '../../util';\nimport { DEFAULT_POLLING_DELAY } from '../../constants';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport AuthPollStopError from '../../errors/AuthPollStopError';\nimport { AuthnTransactionState } from '../types';\nimport { getStateToken } from './stateToken';\nimport { isSafari18 } from '../../features';\n\ninterface PollOptions {\n delay?: number;\n rememberDevice?: boolean;\n autoPush?: boolean;\n transactionCallBack?: (AuthnTransactionState) => void;\n}\n\nexport function getPollFn(sdk, res: AuthnTransactionState, ref) {\n return function (options: PollOptions | number) {\n var delay;\n var rememberDevice;\n var autoPush;\n var transactionCallBack;\n\n if (isNumber(options)) {\n delay = options;\n } else if (isObject(options)) {\n options = options as PollOptions;\n delay = options.delay;\n rememberDevice = options.rememberDevice;\n autoPush = options.autoPush;\n transactionCallBack = options.transactionCallBack;\n }\n\n if (!delay && delay !== 0) {\n delay = DEFAULT_POLLING_DELAY;\n }\n\n // Get the poll function\n var pollLink = getLink(res, 'next', 'poll');\n // eslint-disable-next-line complexity\n function pollFn() {\n var opts = {} as PollOptions;\n if (typeof autoPush === 'function') {\n try {\n opts.autoPush = !!autoPush();\n }\n catch (e) {\n return Promise.reject(new AuthSdkError('AutoPush resulted in an error.'));\n }\n }\n else if (autoPush !== undefined && autoPush !== null) {\n opts.autoPush = !!autoPush;\n }\n if (typeof rememberDevice === 'function') {\n try {\n opts.rememberDevice = !!rememberDevice();\n }\n catch (e) {\n return Promise.reject(new AuthSdkError('RememberDevice resulted in an error.'));\n }\n }\n else if (rememberDevice !== undefined && rememberDevice !== null) {\n opts.rememberDevice = !!rememberDevice;\n }\n\n var href = pollLink.href + toQueryString(opts);\n return post(sdk, href, getStateToken(res), {\n saveAuthnState: false,\n withCredentials: true,\n pollingIntent: true,\n });\n }\n\n const delayNextPoll = (ms) => {\n // no need for extra logic in non-iOS environments, just continue polling\n if (!isSafari18()) {\n return delayFn(ms);\n }\n\n let timeoutId: ReturnType<typeof setTimeout>;\n const cancelableDelay = () => {\n return new Promise((resolve) => {\n timeoutId = setTimeout(resolve, ms);\n });\n };\n\n const delayForFocus = () => {\n let pageVisibilityHandler;\n return new Promise<void>((resolve) => {\n let pageDidHide = false;\n pageVisibilityHandler = () => {\n if (document.hidden) {\n clearTimeout(timeoutId);\n pageDidHide = true;\n }\n else if (pageDidHide) {\n resolve();\n }\n };\n\n document.addEventListener('visibilitychange', pageVisibilityHandler);\n })\n .then(() => {\n document.removeEventListener('visibilitychange', pageVisibilityHandler);\n });\n };\n\n return Promise.race([\n // this function will never resolve if the page changes to hidden because the timeout gets cleared\n cancelableDelay(),\n // this function won't resolve until the page becomes visible after being hidden\n delayForFocus(),\n ]);\n };\n\n ref.isPolling = true;\n\n var retryCount = 0;\n var recursivePoll = function () {\n // If the poll was manually stopped during the delay\n if (!ref.isPolling) {\n return Promise.reject(new AuthPollStopError());\n }\n\n // don't trigger polling request if page is hidden wait until window is visible again\n if (isSafari18() && document.hidden) {\n let handler;\n return new Promise<void>((resolve) => {\n handler = () => {\n if (!document.hidden) {\n resolve();\n }\n };\n document.addEventListener('visibilitychange', handler);\n })\n .then(() => {\n document.removeEventListener('visibilitychange', handler);\n return recursivePoll();\n });\n }\n\n return pollFn()\n .then(function (pollRes) {\n // Reset our retry counter on success\n retryCount = 0;\n\n // If we're still waiting\n if (pollRes.factorResult && pollRes.factorResult === 'WAITING') {\n\n // If the poll was manually stopped while the pollFn was called\n if (!ref.isPolling) {\n throw new AuthPollStopError();\n }\n\n if (typeof transactionCallBack === 'function') {\n transactionCallBack(pollRes);\n }\n\n // Continue poll\n return delayNextPoll(delay).then(recursivePoll);\n\n } else {\n // Any non-waiting result, even if polling was stopped\n // during a request, will return\n ref.isPolling = false;\n return sdk.tx.createTransaction(pollRes);\n }\n })\n .catch(function(err) {\n // Exponential backoff, up to 16 seconds\n if (err.xhr &&\n (err.xhr.status === 0 || err.xhr.status === 429) &&\n retryCount <= 4) {\n var delayLength = Math.pow(2, retryCount) * 1000;\n retryCount++;\n return delayNextPoll(delayLength)\n .then(recursivePoll);\n }\n throw err;\n });\n };\n return recursivePoll()\n .catch(function(err) {\n ref.isPolling = false;\n throw err;\n });\n };\n}\n"],"mappings":";;;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBO,SAASA,SAAS,CAACC,GAAG,EAAEC,GAA0B,EAAEC,GAAG,EAAE;EAC9D,OAAO,UAAUC,OAA6B,EAAE;IAC9C,IAAIC,KAAK;IACT,IAAIC,cAAc;IAClB,IAAIC,QAAQ;IACZ,IAAIC,mBAAmB;IAEvB,IAAI,IAAAC,cAAQ,EAACL,OAAO,CAAC,EAAE;MACrBC,KAAK,GAAGD,OAAO;IACjB,CAAC,MAAM,IAAI,IAAAM,cAAQ,EAACN,OAAO,CAAC,EAAE;MAC5BA,OAAO,GAAGA,OAAsB;MAChCC,KAAK,GAAGD,OAAO,CAACC,KAAK;MACrBC,cAAc,GAAGF,OAAO,CAACE,cAAc;MACvCC,QAAQ,GAAGH,OAAO,CAACG,QAAQ;MAC3BC,mBAAmB,GAAGJ,OAAO,CAACI,mBAAmB;IACnD;IAEA,IAAI,CAACH,KAAK,IAAIA,KAAK,KAAK,CAAC,EAAE;MACzBA,KAAK,GAAGM,gCAAqB;IAC/B;;IAEA;IACA,IAAIC,QAAQ,GAAG,IAAAC,aAAO,EAACX,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;IAC3C;IACA,SAASY,MAAM,GAAG;MAChB,IAAIC,IAAI,GAAG,CAAC,CAAgB;MAC5B,IAAI,OAAOR,QAAQ,KAAK,UAAU,EAAE;QAClC,IAAI;UACFQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ,EAAE;QAC9B,CAAC,CACD,OAAOS,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,gCAAgC,CAAC,CAAC;QAC3E;MACF,CAAC,MACI,IAAIZ,QAAQ,KAAKa,SAAS,IAAIb,QAAQ,KAAK,IAAI,EAAE;QACpDQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ;MAC5B;MACA,IAAI,OAAOD,cAAc,KAAK,UAAU,EAAE;QACxC,IAAI;UACFS,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc,EAAE;QAC1C,CAAC,CACD,OAAOU,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,sCAAsC,CAAC,CAAC;QACjF;MACF,CAAC,MACI,IAAIb,cAAc,KAAKc,SAAS,IAAId,cAAc,KAAK,IAAI,EAAE;QAChES,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc;MACxC;MAEA,IAAIe,IAAI,GAAGT,QAAQ,CAACS,IAAI,GAAG,IAAAC,mBAAa,EAACP,IAAI,CAAC;MAC9C,OAAO,IAAAQ,UAAI,EAACtB,GAAG,EAAEoB,IAAI,EAAE,IAAAG,yBAAa,EAACtB,GAAG,CAAC,EAAE;QACzCuB,cAAc,EAAE,KAAK;QACrBC,eAAe,EAAE,IAAI;QACrBC,aAAa,EAAE;MACjB,CAAC,CAAC;IACJ;IAEA,MAAMC,aAAa,GAAIC,EAAE,IAAK;MAC5B;MACA,IAAI,CAAC,IAAAC,oBAAU,GAAE,EAAE;QACjB,OAAO,IAAAC,WAAO,EAACF,EAAE,CAAC;MACpB;MAEA,IAAIG,SAAwC;MAC5C,MAAMC,eAAe,GAAG,MAAM;QAC5B,OAAO,IAAIhB,OAAO,CAAEiB,OAAO,IAAK;UAC9BF,SAAS,GAAGG,UAAU,CAACD,OAAO,EAAEL,EAAE,CAAC;QACrC,CAAC,CAAC;MACJ,CAAC;MAED,MAAMO,aAAa,GAAG,MAAM;QAC1B,IAAIC,qBAAqB;QACzB,OAAO,IAAIpB,OAAO,CAAQiB,OAAO,IAAK;UACpC,IAAII,WAAW,GAAG,KAAK;UACvBD,qBAAqB,GAAG,MAAM;YAC5B,IAAIE,QAAQ,CAACC,MAAM,EAAE;cACnBC,YAAY,CAACT,SAAS,CAAC;cACvBM,WAAW,GAAG,IAAI;YACpB,CAAC,MACI,IAAIA,WAAW,EAAE;cACpBJ,OAAO,EAAE;YACX;UACF,CAAC;UAEDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEL,qBAAqB,CAAC;QACtE,CAAC,CAAC,CACDM,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEP,qBAAqB,CAAC;QACzE,CAAC,CAAC;MACJ,CAAC;MAED,OAAOpB,OAAO,CAAC4B,IAAI,CAAC;MAClB;MACAZ,eAAe,EAAE;MACjB;MACAG,aAAa,EAAE,CAChB,CAAC;IACJ,CAAC;IAEDjC,GAAG,CAAC2C,SAAS,GAAG,IAAI;IAEpB,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,aAAa,GAAG,YAAY;MAC9B;MACA,IAAI,CAAC7C,GAAG,CAAC2C,SAAS,EAAE;QAClB,OAAO7B,OAAO,CAACC,MAAM,CAAC,IAAI+B,0BAAiB,EAAE,CAAC;MAChD;;MAEA;MACA,IAAI,IAAAnB,oBAAU,GAAE,IAAIS,QAAQ,CAACC,MAAM,EAAE;QACnC,IAAIU,OAAO;QACX,OAAO,IAAIjC,OAAO,CAAQiB,OAAO,IAAK;UACpCgB,OAAO,GAAG,MAAM;YACd,IAAI,CAACX,QAAQ,CAACC,MAAM,EAAE;cACpBN,OAAO,EAAE;YACX;UACF,CAAC;UACDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEQ,OAAO,CAAC;QACxD,CAAC,CAAC,CACDP,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEM,OAAO,CAAC;UACzD,OAAOF,aAAa,EAAE;QACxB,CAAC,CAAC;MACJ;MAEA,OAAOlC,MAAM,EAAE,CACZ6B,IAAI,CAAC,UAAUQ,OAAO,EAAE;QACvB;QACAJ,UAAU,GAAG,CAAC;;QAEd;QACA,IAAII,OAAO,CAACC,YAAY,IAAID,OAAO,CAACC,YAAY,KAAK,SAAS,EAAE;UAE9D;UACA,IAAI,CAACjD,GAAG,CAAC2C,SAAS,EAAE;YAClB,MAAM,IAAIG,0BAAiB,EAAE;UAC/B;UAEA,IAAI,OAAOzC,mBAAmB,KAAK,UAAU,EAAE;YAC7CA,mBAAmB,CAAC2C,OAAO,CAAC;UAC9B;;UAEA;UACA,OAAOvB,aAAa,CAACvB,KAAK,CAAC,CAACsC,IAAI,CAACK,aAAa,CAAC;QAEjD,CAAC,MAAM;UACL;UACA;UACA7C,GAAG,CAAC2C,SAAS,GAAG,KAAK;UACrB,OAAO7C,GAAG,CAACoD,EAAE,CAACC,iBAAiB,CAACH,OAAO,CAAC;QAC1C;MACF,CAAC,CAAC,CACDI,KAAK,CAAC,UAASC,GAAG,EAAE;QACnB;QACA,IAAIA,GAAG,CAACC,GAAG,KACND,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,CAAC,IAAIF,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,GAAG,CAAC,IAChDX,UAAU,IAAI,CAAC,EAAE;UACnB,IAAIY,WAAW,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEd,UAAU,CAAC,GAAG,IAAI;UAChDA,UAAU,EAAE;UACZ,OAAOnB,aAAa,CAAC+B,WAAW,CAAC,CAC9BhB,IAAI,CAACK,aAAa,CAAC;QACxB;QACA,MAAMQ,GAAG;MACX,CAAC,CAAC;IACN,CAAC;IACD,OAAOR,aAAa,EAAE,CACnBO,KAAK,CAAC,UAASC,GAAG,EAAE;MACnBrD,GAAG,CAAC2C,SAAS,GAAG,KAAK;MACrB,MAAMU,GAAG;IACX,CAAC,CAAC;EACN,CAAC;AACH"}
|
|
1
|
+
{"version":3,"file":"poll.js","names":["getPollFn","sdk","res","ref","options","delay","rememberDevice","autoPush","transactionCallBack","isNumber","isObject","DEFAULT_POLLING_DELAY","pollLink","getLink","pollFn","opts","e","Promise","reject","AuthSdkError","undefined","href","toQueryString","post","getStateToken","saveAuthnState","withCredentials","pollingIntent","isPolling","retryCount","recursivePoll","AuthPollStopError","then","pollRes","factorResult","delayFn","tx","createTransaction","catch","err","xhr","status","delayLength","Math","pow"],"sources":["../../../../lib/authn/util/poll.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { post } from '../../http';\nimport { isNumber, isObject, getLink, toQueryString, delay as delayFn } from '../../util';\nimport { DEFAULT_POLLING_DELAY } from '../../constants';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport AuthPollStopError from '../../errors/AuthPollStopError';\nimport { AuthnTransactionState } from '../types';\nimport { getStateToken } from './stateToken';\n\ninterface PollOptions {\n delay?: number;\n rememberDevice?: boolean;\n autoPush?: boolean;\n transactionCallBack?: (AuthnTransactionState) => void;\n}\n\nexport function getPollFn(sdk, res: AuthnTransactionState, ref) {\n return function (options: PollOptions | number) {\n var delay;\n var rememberDevice;\n var autoPush;\n var transactionCallBack;\n\n if (isNumber(options)) {\n delay = options;\n } else if (isObject(options)) {\n options = options as PollOptions;\n delay = options.delay;\n rememberDevice = options.rememberDevice;\n autoPush = options.autoPush;\n transactionCallBack = options.transactionCallBack;\n }\n\n if (!delay && delay !== 0) {\n delay = DEFAULT_POLLING_DELAY;\n }\n\n // Get the poll function\n var pollLink = getLink(res, 'next', 'poll');\n // eslint-disable-next-line complexity\n function pollFn() {\n var opts = {} as PollOptions;\n if (typeof autoPush === 'function') {\n try {\n opts.autoPush = !!autoPush();\n }\n catch (e) {\n return Promise.reject(new AuthSdkError('AutoPush resulted in an error.'));\n }\n }\n else if (autoPush !== undefined && autoPush !== null) {\n opts.autoPush = !!autoPush;\n }\n if (typeof rememberDevice === 'function') {\n try {\n opts.rememberDevice = !!rememberDevice();\n }\n catch (e) {\n return Promise.reject(new AuthSdkError('RememberDevice resulted in an error.'));\n }\n }\n else if (rememberDevice !== undefined && rememberDevice !== null) {\n opts.rememberDevice = !!rememberDevice;\n }\n\n var href = pollLink.href + toQueryString(opts);\n return post(sdk, href, getStateToken(res), {\n saveAuthnState: false,\n withCredentials: true,\n pollingIntent: true,\n });\n }\n\n ref.isPolling = true;\n\n var retryCount = 0;\n var recursivePoll = function () {\n // If the poll was manually stopped during the delay\n if (!ref.isPolling) {\n return Promise.reject(new AuthPollStopError());\n }\n\n return pollFn()\n .then(function (pollRes) {\n // Reset our retry counter on success\n retryCount = 0;\n\n // If we're still waiting\n if (pollRes.factorResult && pollRes.factorResult === 'WAITING') {\n\n // If the poll was manually stopped while the pollFn was called\n if (!ref.isPolling) {\n throw new AuthPollStopError();\n }\n\n if (typeof transactionCallBack === 'function') {\n transactionCallBack(pollRes);\n }\n\n // Continue poll\n return delayFn(delay).then(recursivePoll);\n\n } else {\n // Any non-waiting result, even if polling was stopped\n // during a request, will return\n ref.isPolling = false;\n return sdk.tx.createTransaction(pollRes);\n }\n })\n .catch(function(err) {\n // Exponential backoff, up to 16 seconds\n if (err.xhr &&\n (err.xhr.status === 0 || err.xhr.status === 429) &&\n retryCount <= 4) {\n var delayLength = Math.pow(2, retryCount) * 1000;\n retryCount++;\n return delayFn(delayLength)\n .then(recursivePoll);\n }\n throw err;\n });\n };\n return recursivePoll()\n .catch(function(err) {\n ref.isPolling = false;\n throw err;\n });\n };\n}\n"],"mappings":";;;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA;AAnBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiBO,SAASA,SAAS,CAACC,GAAG,EAAEC,GAA0B,EAAEC,GAAG,EAAE;EAC9D,OAAO,UAAUC,OAA6B,EAAE;IAC9C,IAAIC,KAAK;IACT,IAAIC,cAAc;IAClB,IAAIC,QAAQ;IACZ,IAAIC,mBAAmB;IAEvB,IAAI,IAAAC,cAAQ,EAACL,OAAO,CAAC,EAAE;MACrBC,KAAK,GAAGD,OAAO;IACjB,CAAC,MAAM,IAAI,IAAAM,cAAQ,EAACN,OAAO,CAAC,EAAE;MAC5BA,OAAO,GAAGA,OAAsB;MAChCC,KAAK,GAAGD,OAAO,CAACC,KAAK;MACrBC,cAAc,GAAGF,OAAO,CAACE,cAAc;MACvCC,QAAQ,GAAGH,OAAO,CAACG,QAAQ;MAC3BC,mBAAmB,GAAGJ,OAAO,CAACI,mBAAmB;IACnD;IAEA,IAAI,CAACH,KAAK,IAAIA,KAAK,KAAK,CAAC,EAAE;MACzBA,KAAK,GAAGM,gCAAqB;IAC/B;;IAEA;IACA,IAAIC,QAAQ,GAAG,IAAAC,aAAO,EAACX,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;IAC3C;IACA,SAASY,MAAM,GAAG;MAChB,IAAIC,IAAI,GAAG,CAAC,CAAgB;MAC5B,IAAI,OAAOR,QAAQ,KAAK,UAAU,EAAE;QAClC,IAAI;UACFQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ,EAAE;QAC9B,CAAC,CACD,OAAOS,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,gCAAgC,CAAC,CAAC;QAC3E;MACF,CAAC,MACI,IAAIZ,QAAQ,KAAKa,SAAS,IAAIb,QAAQ,KAAK,IAAI,EAAE;QACpDQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ;MAC5B;MACA,IAAI,OAAOD,cAAc,KAAK,UAAU,EAAE;QACxC,IAAI;UACFS,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc,EAAE;QAC1C,CAAC,CACD,OAAOU,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,sCAAsC,CAAC,CAAC;QACjF;MACF,CAAC,MACI,IAAIb,cAAc,KAAKc,SAAS,IAAId,cAAc,KAAK,IAAI,EAAE;QAChES,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc;MACxC;MAEA,IAAIe,IAAI,GAAGT,QAAQ,CAACS,IAAI,GAAG,IAAAC,mBAAa,EAACP,IAAI,CAAC;MAC9C,OAAO,IAAAQ,UAAI,EAACtB,GAAG,EAAEoB,IAAI,EAAE,IAAAG,yBAAa,EAACtB,GAAG,CAAC,EAAE;QACzCuB,cAAc,EAAE,KAAK;QACrBC,eAAe,EAAE,IAAI;QACrBC,aAAa,EAAE;MACjB,CAAC,CAAC;IACJ;IAEAxB,GAAG,CAACyB,SAAS,GAAG,IAAI;IAEpB,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,aAAa,GAAG,YAAY;MAC9B;MACA,IAAI,CAAC3B,GAAG,CAACyB,SAAS,EAAE;QAClB,OAAOX,OAAO,CAACC,MAAM,CAAC,IAAIa,0BAAiB,EAAE,CAAC;MAChD;MAEA,OAAOjB,MAAM,EAAE,CACZkB,IAAI,CAAC,UAAUC,OAAO,EAAE;QACvB;QACAJ,UAAU,GAAG,CAAC;;QAEd;QACA,IAAII,OAAO,CAACC,YAAY,IAAID,OAAO,CAACC,YAAY,KAAK,SAAS,EAAE;UAE9D;UACA,IAAI,CAAC/B,GAAG,CAACyB,SAAS,EAAE;YAClB,MAAM,IAAIG,0BAAiB,EAAE;UAC/B;UAEA,IAAI,OAAOvB,mBAAmB,KAAK,UAAU,EAAE;YAC7CA,mBAAmB,CAACyB,OAAO,CAAC;UAC9B;;UAEA;UACA,OAAO,IAAAE,WAAO,EAAC9B,KAAK,CAAC,CAAC2B,IAAI,CAACF,aAAa,CAAC;QAE3C,CAAC,MAAM;UACL;UACA;UACA3B,GAAG,CAACyB,SAAS,GAAG,KAAK;UACrB,OAAO3B,GAAG,CAACmC,EAAE,CAACC,iBAAiB,CAACJ,OAAO,CAAC;QAC1C;MACF,CAAC,CAAC,CACDK,KAAK,CAAC,UAASC,GAAG,EAAE;QACnB;QACA,IAAIA,GAAG,CAACC,GAAG,KACND,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,CAAC,IAAIF,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,GAAG,CAAC,IAChDZ,UAAU,IAAI,CAAC,EAAE;UACnB,IAAIa,WAAW,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEf,UAAU,CAAC,GAAG,IAAI;UAChDA,UAAU,EAAE;UACZ,OAAO,IAAAM,WAAO,EAACO,WAAW,CAAC,CACxBV,IAAI,CAACF,aAAa,CAAC;QACxB;QACA,MAAMS,GAAG;MACX,CAAC,CAAC;IACN,CAAC;IACD,OAAOT,aAAa,EAAE,CACnBQ,KAAK,CAAC,UAASC,GAAG,EAAE;MACnBpC,GAAG,CAACyB,SAAS,GAAG,KAAK;MACrB,MAAMW,GAAG;IACX,CAAC,CAAC;EACN,CAAC;AACH"}
|
package/cjs/base/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","names":[],"sources":["../../../lib/base/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport * as constants from '../constants';\n\nexport declare class EventEmitter {\n on (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n once (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n emit (event: string, ...args: any[]): EventEmitter;\n off (event: string, callback?: (...args: any[]) => any): EventEmitter;\n}\n\nexport interface FeaturesAPI {\n isLocalhost(): boolean;\n isHTTPS(): boolean;\n isPopupPostMessageSupported(): boolean;\n hasTextEncoder(): boolean;\n isTokenVerifySupported(): boolean;\n isPKCESupported(): boolean;\n isIE11OrLess(): boolean;\n isDPoPSupported(): boolean;\n isIOS(): boolean;\n
|
|
1
|
+
{"version":3,"file":"types.js","names":[],"sources":["../../../lib/base/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport * as constants from '../constants';\n\nexport declare class EventEmitter {\n on (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n once (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n emit (event: string, ...args: any[]): EventEmitter;\n off (event: string, callback?: (...args: any[]) => any): EventEmitter;\n}\n\nexport interface FeaturesAPI {\n isLocalhost(): boolean;\n isHTTPS(): boolean;\n isPopupPostMessageSupported(): boolean;\n hasTextEncoder(): boolean;\n isTokenVerifySupported(): boolean;\n isPKCESupported(): boolean;\n isIE11OrLess(): boolean;\n isDPoPSupported(): boolean;\n isIOS(): boolean;\n}\n\n\nexport interface FingerprintOptions {\n timeout?: number;\n container?: Element | null;\n}\nexport type FingerprintAPI = (options?: FingerprintOptions) => Promise<string>;\n\n// options that can be passed to AuthJS\nexport interface OktaAuthBaseOptions {\n devMode?: boolean;\n}\n\n// a class that constructs options\nexport interface OktaAuthOptionsConstructor<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n new(args: any): O;\n}\n\n// a \"base\" instance of AuthJS\nexport interface OktaAuthBaseInterface<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n options: O;\n emitter: EventEmitter;\n features: FeaturesAPI;\n}\n\n// a constructor that returns an instance of AuthJS\nexport interface OktaAuthConstructor\n<\n I extends OktaAuthBaseInterface = OktaAuthBaseInterface\n> \n{\n new(...args: any[]): I;\n features: FeaturesAPI; // static class member\n constants: typeof constants;\n}\n"],"mappings":""}
|
package/cjs/constants.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
|
|
3
|
-
exports.TRANSACTION_STORAGE_NAME = exports.TOKEN_STORAGE_NAME = exports.STATE_TOKEN_KEY_NAME = exports.SHARED_TRANSACTION_STORAGE_NAME = exports.REFRESH_TOKEN_STORAGE_KEY = exports.REFERRER_PATH_STORAGE_KEY = exports.PKCE_STORAGE_NAME = exports.ORIGINAL_URI_STORAGE_NAME = exports.MIN_VERIFIER_LENGTH = exports.MAX_VERIFIER_LENGTH = exports.
|
|
3
|
+
exports.TRANSACTION_STORAGE_NAME = exports.TOKEN_STORAGE_NAME = exports.STATE_TOKEN_KEY_NAME = exports.SHARED_TRANSACTION_STORAGE_NAME = exports.REFRESH_TOKEN_STORAGE_KEY = exports.REFERRER_PATH_STORAGE_KEY = exports.PKCE_STORAGE_NAME = exports.ORIGINAL_URI_STORAGE_NAME = exports.MIN_VERIFIER_LENGTH = exports.MAX_VERIFIER_LENGTH = exports.IOS_MAX_RETRY_COUNT = exports.ID_TOKEN_STORAGE_KEY = exports.IDX_RESPONSE_STORAGE_NAME = exports.IDX_API_VERSION = exports.DEFAULT_POLLING_DELAY = exports.DEFAULT_MAX_CLOCK_SKEW = exports.DEFAULT_CODE_CHALLENGE_METHOD = exports.DEFAULT_CACHE_DURATION = exports.CACHE_STORAGE_NAME = exports.ACCESS_TOKEN_STORAGE_KEY = void 0;
|
|
4
4
|
/*!
|
|
5
5
|
* Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
|
|
6
6
|
* The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
|
|
@@ -17,8 +17,6 @@ const STATE_TOKEN_KEY_NAME = 'oktaStateToken';
|
|
|
17
17
|
exports.STATE_TOKEN_KEY_NAME = STATE_TOKEN_KEY_NAME;
|
|
18
18
|
const DEFAULT_POLLING_DELAY = 500;
|
|
19
19
|
exports.DEFAULT_POLLING_DELAY = DEFAULT_POLLING_DELAY;
|
|
20
|
-
const IOS_PAGE_AWAKEN_TIMEOUT = 500;
|
|
21
|
-
exports.IOS_PAGE_AWAKEN_TIMEOUT = IOS_PAGE_AWAKEN_TIMEOUT;
|
|
22
20
|
const IOS_MAX_RETRY_COUNT = 3;
|
|
23
21
|
exports.IOS_MAX_RETRY_COUNT = IOS_MAX_RETRY_COUNT;
|
|
24
22
|
const DEFAULT_MAX_CLOCK_SKEW = 300;
|
package/cjs/constants.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.js","names":["STATE_TOKEN_KEY_NAME","DEFAULT_POLLING_DELAY","
|
|
1
|
+
{"version":3,"file":"constants.js","names":["STATE_TOKEN_KEY_NAME","DEFAULT_POLLING_DELAY","IOS_MAX_RETRY_COUNT","DEFAULT_MAX_CLOCK_SKEW","DEFAULT_CACHE_DURATION","TOKEN_STORAGE_NAME","CACHE_STORAGE_NAME","PKCE_STORAGE_NAME","TRANSACTION_STORAGE_NAME","SHARED_TRANSACTION_STORAGE_NAME","ORIGINAL_URI_STORAGE_NAME","IDX_RESPONSE_STORAGE_NAME","ACCESS_TOKEN_STORAGE_KEY","ID_TOKEN_STORAGE_KEY","REFRESH_TOKEN_STORAGE_KEY","REFERRER_PATH_STORAGE_KEY","MIN_VERIFIER_LENGTH","MAX_VERIFIER_LENGTH","DEFAULT_CODE_CHALLENGE_METHOD","IDX_API_VERSION"],"sources":["../../lib/constants.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport const STATE_TOKEN_KEY_NAME = 'oktaStateToken';\nexport const DEFAULT_POLLING_DELAY = 500;\nexport const IOS_MAX_RETRY_COUNT = 3;\nexport const DEFAULT_MAX_CLOCK_SKEW = 300;\nexport const DEFAULT_CACHE_DURATION = 86400;\nexport const TOKEN_STORAGE_NAME = 'okta-token-storage';\nexport const CACHE_STORAGE_NAME = 'okta-cache-storage';\nexport const PKCE_STORAGE_NAME = 'okta-pkce-storage';\nexport const TRANSACTION_STORAGE_NAME = 'okta-transaction-storage';\nexport const SHARED_TRANSACTION_STORAGE_NAME = 'okta-shared-transaction-storage';\nexport const ORIGINAL_URI_STORAGE_NAME = 'okta-original-uri-storage';\nexport const IDX_RESPONSE_STORAGE_NAME = 'okta-idx-response-storage';\nexport const ACCESS_TOKEN_STORAGE_KEY = 'accessToken';\nexport const ID_TOKEN_STORAGE_KEY = 'idToken';\nexport const REFRESH_TOKEN_STORAGE_KEY = 'refreshToken';\nexport const REFERRER_PATH_STORAGE_KEY = 'referrerPath';\n\n// Code verifier: Random URL-safe string with a minimum length of 43 characters.\n// Code challenge: Base64 URL-encoded SHA-256 hash of the code verifier.\nexport const MIN_VERIFIER_LENGTH = 43;\nexport const MAX_VERIFIER_LENGTH = 128;\nexport const DEFAULT_CODE_CHALLENGE_METHOD = 'S256';\n\nexport const IDX_API_VERSION = '1.0.0';"],"mappings":";;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMA,oBAAoB,GAAG,gBAAgB;AAAC;AAC9C,MAAMC,qBAAqB,GAAG,GAAG;AAAC;AAClC,MAAMC,mBAAmB,GAAG,CAAC;AAAC;AAC9B,MAAMC,sBAAsB,GAAG,GAAG;AAAC;AACnC,MAAMC,sBAAsB,GAAG,KAAK;AAAC;AACrC,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,iBAAiB,GAAG,mBAAmB;AAAC;AAC9C,MAAMC,wBAAwB,GAAG,0BAA0B;AAAC;AAC5D,MAAMC,+BAA+B,GAAG,iCAAiC;AAAC;AAC1E,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,wBAAwB,GAAG,aAAa;AAAC;AAC/C,MAAMC,oBAAoB,GAAI,SAAS;AAAC;AACxC,MAAMC,yBAAyB,GAAI,cAAc;AAAC;AAClD,MAAMC,yBAAyB,GAAG,cAAc;;AAEvD;AACA;AAAA;AACO,MAAMC,mBAAmB,GAAG,EAAE;AAAC;AAC/B,MAAMC,mBAAmB,GAAG,GAAG;AAAC;AAChC,MAAMC,6BAA6B,GAAG,MAAM;AAAC;AAE7C,MAAMC,eAAe,GAAG,OAAO;AAAC"}
|
package/cjs/features.js
CHANGED
|
@@ -11,7 +11,6 @@ exports.isIOS = isIOS;
|
|
|
11
11
|
exports.isLocalhost = isLocalhost;
|
|
12
12
|
exports.isPKCESupported = isPKCESupported;
|
|
13
13
|
exports.isPopupPostMessageSupported = isPopupPostMessageSupported;
|
|
14
|
-
exports.isSafari18 = isSafari18;
|
|
15
14
|
exports.isTokenVerifySupported = isTokenVerifySupported;
|
|
16
15
|
var _crypto = require("./crypto");
|
|
17
16
|
/*!
|
|
@@ -91,20 +90,4 @@ function isIOS() {
|
|
|
91
90
|
// @ts-expect-error - MSStream is not in `window` type, unsurprisingly
|
|
92
91
|
/iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream;
|
|
93
92
|
}
|
|
94
|
-
const isIOSRegex = /iPad|iPhone|iPod/;
|
|
95
|
-
const v18Regex = /Version\/18(\.| |$)/;
|
|
96
|
-
const notSafariRegex = /EdgiOS|CriOS|Chrome/;
|
|
97
|
-
|
|
98
|
-
/* eslint complexity:[0,8] */
|
|
99
|
-
function isSafari18() {
|
|
100
|
-
if (isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined') {
|
|
101
|
-
const isIOS = isIOSRegex.test(navigator.userAgent);
|
|
102
|
-
// Mobile Safari in desktop mode emulates Macintosh in user agent
|
|
103
|
-
const isDesktop = navigator.userAgent.includes('Macintosh');
|
|
104
|
-
const isSafari18 = navigator.userAgent.includes('Safari/') && v18Regex.test(navigator.userAgent);
|
|
105
|
-
const isOtherBrowser = notSafariRegex.test(navigator.userAgent);
|
|
106
|
-
return isSafari18 && !isOtherBrowser && (isIOS || isDesktop);
|
|
107
|
-
}
|
|
108
|
-
return false;
|
|
109
|
-
}
|
|
110
93
|
//# sourceMappingURL=features.js.map
|
package/cjs/features.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"features.js","names":["isWindowsPhone","isBrowser","document","window","isIE11OrLess","documentMode","getUserAgent","navigator","userAgent","isFingerprintSupported","agent","test","isPopupPostMessageSupported","isIE8or9","postMessage","isWebCryptoSubtleSupported","webcrypto","subtle","Uint8Array","isTokenVerifySupported","hasTextEncoder","TextEncoder","isPKCESupported","isHTTPS","location","protocol","isLocalhost","hostname","isDPoPSupported","indexedDB","isIOS","MSStream"
|
|
1
|
+
{"version":3,"file":"features.js","names":["isWindowsPhone","isBrowser","document","window","isIE11OrLess","documentMode","getUserAgent","navigator","userAgent","isFingerprintSupported","agent","test","isPopupPostMessageSupported","isIE8or9","postMessage","isWebCryptoSubtleSupported","webcrypto","subtle","Uint8Array","isTokenVerifySupported","hasTextEncoder","TextEncoder","isPKCESupported","isHTTPS","location","protocol","isLocalhost","hostname","isDPoPSupported","indexedDB","isIOS","MSStream"],"sources":["../../lib/features.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable node/no-unsupported-features/node-builtins */\n/* global document, window, TextEncoder, navigator */\n\nimport { webcrypto } from './crypto';\n\nconst isWindowsPhone = /windows phone|iemobile|wpdesktop/i;\t\n\nexport function isBrowser() {\n return typeof document !== 'undefined' && typeof window !== 'undefined';\n}\n\nexport function isIE11OrLess() {\n if (!isBrowser()) {\n return false;\n }\n const documentMode = (document as any).documentMode;\n return !!documentMode && documentMode <= 11;\n}\n\nexport function getUserAgent() {\n return navigator.userAgent;\n}\n\nexport function isFingerprintSupported() {\n const agent = getUserAgent();\n return agent && !isWindowsPhone.test(agent);\t\n}\n\nexport function isPopupPostMessageSupported() {\n if (!isBrowser()) {\n return false;\n }\n const documentMode = (document as any).documentMode;\n var isIE8or9 = documentMode && documentMode < 10;\n if (typeof window.postMessage !== 'undefined' && !isIE8or9) {\n return true;\n }\n return false;\n}\n\nfunction isWebCryptoSubtleSupported () {\n return typeof webcrypto !== 'undefined'\n && webcrypto !== null\n && typeof webcrypto.subtle !== 'undefined'\n && typeof Uint8Array !== 'undefined';\n}\n\nexport function isTokenVerifySupported() {\n return isWebCryptoSubtleSupported();\n}\n\nexport function hasTextEncoder() {\n return typeof TextEncoder !== 'undefined';\n}\n\nexport function isPKCESupported() {\n return isTokenVerifySupported() && hasTextEncoder();\n}\n\nexport function isHTTPS() {\n if (!isBrowser()) {\n return false;\n }\n return window.location.protocol === 'https:';\n}\n\nexport function isLocalhost() {\n // eslint-disable-next-line compat/compat\n return isBrowser() && window.location.hostname === 'localhost';\n}\n\n// For now, DPoP is only supported on browsers\nexport function isDPoPSupported () {\n return !isIE11OrLess() &&\n typeof window.indexedDB !== 'undefined' &&\n hasTextEncoder() &&\n isWebCryptoSubtleSupported();\n}\n\nexport function isIOS () {\n // iOS detection from: http://stackoverflow.com/a/9039885/177710\n return isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined' &&\n // @ts-expect-error - MSStream is not in `window` type, unsurprisingly\n (/iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream);\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAIA,MAAMA,cAAc,GAAG,mCAAmC;AAEnD,SAASC,SAAS,GAAG;EAC1B,OAAO,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOC,MAAM,KAAK,WAAW;AACzE;AAEO,SAASC,YAAY,GAAG;EAC7B,IAAI,CAACH,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,OAAO,CAAC,CAACA,YAAY,IAAIA,YAAY,IAAI,EAAE;AAC7C;AAEO,SAASC,YAAY,GAAG;EAC7B,OAAOC,SAAS,CAACC,SAAS;AAC5B;AAEO,SAASC,sBAAsB,GAAG;EACvC,MAAMC,KAAK,GAAGJ,YAAY,EAAE;EAC5B,OAAOI,KAAK,IAAI,CAACV,cAAc,CAACW,IAAI,CAACD,KAAK,CAAC;AAC7C;AAEO,SAASE,2BAA2B,GAAG;EAC5C,IAAI,CAACX,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,IAAIQ,QAAQ,GAAGR,YAAY,IAAIA,YAAY,GAAG,EAAE;EAChD,IAAI,OAAOF,MAAM,CAACW,WAAW,KAAK,WAAW,IAAI,CAACD,QAAQ,EAAE;IAC1D,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd;AAEA,SAASE,0BAA0B,GAAI;EACrC,OAAO,OAAOC,iBAAS,KAAK,WAAW,IAClCA,iBAAS,KAAK,IAAI,IAClB,OAAOA,iBAAS,CAACC,MAAM,KAAK,WAAW,IACvC,OAAOC,UAAU,KAAK,WAAW;AACxC;AAEO,SAASC,sBAAsB,GAAG;EACvC,OAAOJ,0BAA0B,EAAE;AACrC;AAEO,SAASK,cAAc,GAAG;EAC/B,OAAO,OAAOC,WAAW,KAAK,WAAW;AAC3C;AAEO,SAASC,eAAe,GAAG;EAChC,OAAOH,sBAAsB,EAAE,IAAIC,cAAc,EAAE;AACrD;AAEO,SAASG,OAAO,GAAG;EACxB,IAAI,CAACtB,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,OAAOE,MAAM,CAACqB,QAAQ,CAACC,QAAQ,KAAK,QAAQ;AAC9C;AAEO,SAASC,WAAW,GAAG;EAC5B;EACA,OAAOzB,SAAS,EAAE,IAAIE,MAAM,CAACqB,QAAQ,CAACG,QAAQ,KAAK,WAAW;AAChE;;AAEA;AACO,SAASC,eAAe,GAAI;EACjC,OAAO,CAACxB,YAAY,EAAE,IACpB,OAAOD,MAAM,CAAC0B,SAAS,KAAK,WAAW,IACvCT,cAAc,EAAE,IAChBL,0BAA0B,EAAE;AAChC;AAEO,SAASe,KAAK,GAAI;EACvB;EACA,OAAO7B,SAAS,EAAE,IAAI,OAAOM,SAAS,KAAK,WAAW,IAAI,OAAOA,SAAS,CAACC,SAAS,KAAK,WAAW;EAClG;EACC,kBAAkB,CAACG,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC,IAAI,CAACL,MAAM,CAAC4B,QAAS;AACtE"}
|
|
@@ -20,7 +20,7 @@ var _features = require("../features");
|
|
|
20
20
|
class OktaUserAgent {
|
|
21
21
|
constructor() {
|
|
22
22
|
// add base sdk env
|
|
23
|
-
this.environments = [`okta-auth-js/${"7.
|
|
23
|
+
this.environments = [`okta-auth-js/${"7.11.1"}`];
|
|
24
24
|
this.maybeAddNodeEnvironment();
|
|
25
25
|
}
|
|
26
26
|
addEnvironment(env) {
|
|
@@ -32,7 +32,7 @@ class OktaUserAgent {
|
|
|
32
32
|
};
|
|
33
33
|
}
|
|
34
34
|
getVersion() {
|
|
35
|
-
return "7.
|
|
35
|
+
return "7.11.1";
|
|
36
36
|
}
|
|
37
37
|
maybeAddNodeEnvironment() {
|
|
38
38
|
if ((0, _features.isBrowser)() || !process || !process.versions) {
|
package/cjs/http/options.js
CHANGED
|
@@ -26,6 +26,7 @@ function createHttpOptionsConstructor() {
|
|
|
26
26
|
this.headers = args.headers;
|
|
27
27
|
this.httpRequestClient = args.httpRequestClient || _fetchRequest.default;
|
|
28
28
|
this.httpRequestInterceptors = args.httpRequestInterceptors;
|
|
29
|
+
this.pollDelay = args.pollDelay;
|
|
29
30
|
}
|
|
30
31
|
};
|
|
31
32
|
}
|
package/cjs/http/options.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"options.js","names":["createHttpOptionsConstructor","StorageOptionsConstructor","createStorageOptionsConstructor","HttpOptionsConstructor","constructor","args","issuer","transformErrorXHR","headers","httpRequestClient","fetchRequest","httpRequestInterceptors"],"sources":["../../../lib/http/options.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { createStorageOptionsConstructor } from '../storage';\nimport { HttpRequestClient, OktaAuthHttpOptions, RequestOptions } from './types';\nimport fetchRequest from '../fetch/fetchRequest';\n\nexport function createHttpOptionsConstructor() {\n const StorageOptionsConstructor = createStorageOptionsConstructor();\n return class HttpOptionsConstructor extends StorageOptionsConstructor implements Required<OktaAuthHttpOptions> {\n issuer: string;\n transformErrorXHR: (xhr: object) => any;\n headers: object;\n httpRequestClient: HttpRequestClient;\n httpRequestInterceptors: ((request: RequestOptions) => void)[];\n \n constructor(args: any) {\n super(args);\n this.issuer = args.issuer;\n this.transformErrorXHR = args.transformErrorXHR;\n this.headers = args.headers;\n this.httpRequestClient = args.httpRequestClient || fetchRequest;\n this.httpRequestInterceptors = args.httpRequestInterceptors;\n }\n };\n}\n"],"mappings":";;;;AAYA;AAEA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASA,4BAA4B,GAAG;EAC7C,MAAMC,yBAAyB,GAAG,IAAAC,wCAA+B,GAAE;EACnE,OAAO,MAAMC,sBAAsB,SAASF,yBAAyB,CAA0C;
|
|
1
|
+
{"version":3,"file":"options.js","names":["createHttpOptionsConstructor","StorageOptionsConstructor","createStorageOptionsConstructor","HttpOptionsConstructor","constructor","args","issuer","transformErrorXHR","headers","httpRequestClient","fetchRequest","httpRequestInterceptors","pollDelay"],"sources":["../../../lib/http/options.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { createStorageOptionsConstructor } from '../storage';\nimport { HttpRequestClient, OktaAuthHttpOptions, RequestOptions } from './types';\nimport fetchRequest from '../fetch/fetchRequest';\n\nexport function createHttpOptionsConstructor() {\n const StorageOptionsConstructor = createStorageOptionsConstructor();\n return class HttpOptionsConstructor extends StorageOptionsConstructor implements Required<OktaAuthHttpOptions> {\n issuer: string;\n transformErrorXHR: (xhr: object) => any;\n headers: object;\n httpRequestClient: HttpRequestClient;\n httpRequestInterceptors: ((request: RequestOptions) => void)[];\n pollDelay: number;\n \n constructor(args: any) {\n super(args);\n this.issuer = args.issuer;\n this.transformErrorXHR = args.transformErrorXHR;\n this.headers = args.headers;\n this.httpRequestClient = args.httpRequestClient || fetchRequest;\n this.httpRequestInterceptors = args.httpRequestInterceptors;\n this.pollDelay = args.pollDelay;\n }\n };\n}\n"],"mappings":";;;;AAYA;AAEA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASA,4BAA4B,GAAG;EAC7C,MAAMC,yBAAyB,GAAG,IAAAC,wCAA+B,GAAE;EACnE,OAAO,MAAMC,sBAAsB,SAASF,yBAAyB,CAA0C;IAQ7GG,WAAW,CAACC,IAAS,EAAE;MACrB,KAAK,CAACA,IAAI,CAAC;MACX,IAAI,CAACC,MAAM,GAAGD,IAAI,CAACC,MAAM;MACzB,IAAI,CAACC,iBAAiB,GAAGF,IAAI,CAACE,iBAAiB;MAC/C,IAAI,CAACC,OAAO,GAAGH,IAAI,CAACG,OAAO;MAC3B,IAAI,CAACC,iBAAiB,GAAGJ,IAAI,CAACI,iBAAiB,IAAIC,qBAAY;MAC/D,IAAI,CAACC,uBAAuB,GAAGN,IAAI,CAACM,uBAAuB;MAC3D,IAAI,CAACC,SAAS,GAAGP,IAAI,CAACO,SAAS;IACjC;EACF,CAAC;AACH"}
|
package/cjs/http/request.js
CHANGED
|
@@ -26,7 +26,7 @@ var _features = require("../features");
|
|
|
26
26
|
// For iOS track last date when document became visible
|
|
27
27
|
let dateDocumentBecameVisible = 0;
|
|
28
28
|
let trackDateDocumentBecameVisible;
|
|
29
|
-
if ((0, _features.
|
|
29
|
+
if ((0, _features.isBrowser)()) {
|
|
30
30
|
dateDocumentBecameVisible = Date.now();
|
|
31
31
|
trackDateDocumentBecameVisible = () => {
|
|
32
32
|
if (!document.hidden) {
|
|
@@ -123,7 +123,8 @@ function httpRequest(sdk, options) {
|
|
|
123
123
|
storageUtil = sdk.options.storageUtil,
|
|
124
124
|
storage = storageUtil.storage,
|
|
125
125
|
httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies),
|
|
126
|
-
pollingIntent = options.pollingIntent
|
|
126
|
+
pollingIntent = options.pollingIntent,
|
|
127
|
+
pollDelay = sdk.options.pollDelay ?? 0;
|
|
127
128
|
if (options.cacheResponse) {
|
|
128
129
|
var cacheContents = httpCache.getStorage();
|
|
129
130
|
var cachedResponse = cacheContents[url];
|
|
@@ -148,7 +149,7 @@ function httpRequest(sdk, options) {
|
|
|
148
149
|
withCredentials
|
|
149
150
|
};
|
|
150
151
|
var err, res, promise;
|
|
151
|
-
if (pollingIntent && (0, _features.
|
|
152
|
+
if (pollingIntent && (0, _features.isBrowser)() && pollDelay > 0) {
|
|
152
153
|
let waitForVisibleAndAwakenDocument;
|
|
153
154
|
let waitForAwakenDocument;
|
|
154
155
|
let recursiveFetch;
|
|
@@ -159,14 +160,14 @@ function httpRequest(sdk, options) {
|
|
|
159
160
|
// Running fetch after short timeout fixes this issue.
|
|
160
161
|
waitForAwakenDocument = () => {
|
|
161
162
|
const timeSinceDocumentIsVisible = Date.now() - dateDocumentBecameVisible;
|
|
162
|
-
if (timeSinceDocumentIsVisible <
|
|
163
|
+
if (timeSinceDocumentIsVisible < pollDelay) {
|
|
163
164
|
return new Promise(resolve => setTimeout(() => {
|
|
164
165
|
if (!document.hidden) {
|
|
165
166
|
resolve();
|
|
166
167
|
} else {
|
|
167
168
|
resolve(waitForVisibleAndAwakenDocument());
|
|
168
169
|
}
|
|
169
|
-
},
|
|
170
|
+
}, pollDelay - timeSinceDocumentIsVisible));
|
|
170
171
|
} else {
|
|
171
172
|
return Promise.resolve();
|
|
172
173
|
}
|
package/cjs/http/request.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request.js","names":["dateDocumentBecameVisible","trackDateDocumentBecameVisible","isSafari18","Date","now","document","hidden","addEventListener","formatError","sdk","error","Error","AuthApiError","errorSummary","message","resp","err","serverErr","responseText","isString","JSON","parse","e","status","options","transformErrorXHR","clone","wwwAuthHeader","WWWAuthError","getWWWAuthenticateHeader","headers","error_description","OAuthError","wwwAuthErr","parseHeader","max_age","acr_values","parameters","errorCauses","errorDescription","scheme","httpRequest","httpRequestInterceptors","interceptor","url","method","args","saveAuthnState","accessToken","withCredentials","storageUtil","storage","httpCache","storageManager","getHttpCache","cookies","pollingIntent","cacheResponse","cacheContents","getStorage","cachedResponse","expiresAt","Promise","resolve","response","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","Object","assign","removeNils","ajaxOptions","data","undefined","res","promise","waitForVisibleAndAwakenDocument","waitForAwakenDocument","recursiveFetch","retryCount","timeSinceDocumentIsVisible","IOS_PAGE_AWAKEN_TIMEOUT","setTimeout","pageVisibilityHandler","removeEventListener","retryableFetch","httpRequestClient","catch","isNetworkError","IOS_MAX_RETRY_COUNT","then","Array","isArray","forEach","item","stateToken","delete","STATE_TOKEN_KEY_NAME","set","updateStorage","Math","floor","DEFAULT_CACHE_DURATION","errorCode","get","isAbsoluteUrl","getIssuerOrigin","getOptions","post","postOptions"],"sources":["../../../lib/http/request.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* eslint-disable complexity */\nimport { isString, clone, isAbsoluteUrl, removeNils } from '../util';\nimport {\n STATE_TOKEN_KEY_NAME,\n DEFAULT_CACHE_DURATION,\n IOS_MAX_RETRY_COUNT,\n IOS_PAGE_AWAKEN_TIMEOUT\n} from '../constants';\nimport {\n OktaAuthHttpInterface,\n RequestOptions,\n FetchOptions,\n RequestData,\n HttpResponse\n} from './types';\nimport { AuthApiError, OAuthError, APIError, WWWAuthError } from '../errors';\nimport { isSafari18 } from '../features';\n\n\n// For iOS track last date when document became visible\nlet dateDocumentBecameVisible = 0;\nlet trackDateDocumentBecameVisible: () => void;\nif (isSafari18()) {\n dateDocumentBecameVisible = Date.now();\n trackDateDocumentBecameVisible = () => {\n if (!document.hidden) {\n dateDocumentBecameVisible = Date.now();\n }\n };\n document.addEventListener('visibilitychange', trackDateDocumentBecameVisible);\n}\n\nconst formatError = (sdk: OktaAuthHttpInterface, error: HttpResponse | Error): AuthApiError | OAuthError => {\n if (error instanceof Error) {\n // fetch() can throw exceptions\n // see https://developer.mozilla.org/en-US/docs/Web/API/fetch#exceptions\n return new AuthApiError({\n errorSummary: error.message,\n });\n }\n\n let resp: HttpResponse = error;\n let err: AuthApiError | OAuthError | WWWAuthError;\n let serverErr: Record<string, any> = {};\n if (resp.responseText && isString(resp.responseText)) {\n try {\n serverErr = JSON.parse(resp.responseText);\n } catch (e) {\n serverErr = {\n errorSummary: 'Unknown error'\n };\n }\n }\n\n if (resp.status >= 500) {\n serverErr.errorSummary = 'Unknown error';\n }\n\n if (sdk.options.transformErrorXHR) {\n resp = sdk.options.transformErrorXHR(clone(resp));\n }\n\n // \n const wwwAuthHeader = WWWAuthError.getWWWAuthenticateHeader(resp?.headers) ?? '';\n\n if (serverErr.error && serverErr.error_description) {\n err = new OAuthError(serverErr.error, serverErr.error_description, resp);\n } else {\n err = new AuthApiError(serverErr as APIError, resp, { wwwAuthHeader });\n }\n\n if (wwwAuthHeader && resp?.status >= 400 && resp?.status < 500) {\n const wwwAuthErr = WWWAuthError.parseHeader(wwwAuthHeader);\n // check for 403 to avoid breaking change\n if (resp.status === 403 && wwwAuthErr?.error === 'insufficient_authentication_context') {\n // eslint-disable-next-line camelcase\n const { max_age, acr_values } = wwwAuthErr.parameters;\n err = new AuthApiError(\n {\n errorSummary: wwwAuthErr.error,\n errorCauses: [{ errorSummary: wwwAuthErr.errorDescription }]\n },\n resp,\n {\n // eslint-disable-next-line camelcase\n max_age: +max_age,\n // eslint-disable-next-line camelcase\n ...(acr_values && { acr_values })\n }\n );\n }\n else if (wwwAuthErr?.scheme === 'DPoP') {\n err = wwwAuthErr;\n }\n // else {\n // // WWWAuthError.parseHeader may return null, only overwrite if !null\n // err = wwwAuthErr ?? err;\n // }\n }\n\n return err;\n};\n\n// eslint-disable-next-line max-statements\nexport function httpRequest(sdk: OktaAuthHttpInterface, options: RequestOptions): Promise<any> {\n options = options || {};\n\n if (sdk.options.httpRequestInterceptors) {\n for (const interceptor of sdk.options.httpRequestInterceptors) {\n interceptor(options);\n }\n }\n\n var url = options.url,\n method = options.method,\n args = options.args,\n saveAuthnState = options.saveAuthnState,\n accessToken = options.accessToken,\n withCredentials = options.withCredentials === true, // default value is false\n storageUtil = sdk.options.storageUtil,\n storage = storageUtil!.storage,\n httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies),\n pollingIntent = options.pollingIntent;\n\n if (options.cacheResponse) {\n var cacheContents = httpCache.getStorage();\n var cachedResponse = cacheContents[url as string];\n if (cachedResponse && Date.now()/1000 < cachedResponse.expiresAt) {\n return Promise.resolve(cachedResponse.response);\n }\n }\n\n var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n var headers: HeadersInit = {\n 'Accept': 'application/json',\n 'Content-Type': 'application/json',\n ...oktaUserAgentHeader\n };\n Object.assign(headers, sdk.options.headers, options.headers);\n headers = removeNils(headers) as HeadersInit;\n\n if (accessToken && isString(accessToken)) {\n headers['Authorization'] = 'Bearer ' + accessToken;\n }\n\n var ajaxOptions: FetchOptions = {\n headers,\n data: args || undefined,\n withCredentials\n };\n\n var err, res, promise;\n\n if (pollingIntent && isSafari18()) {\n let waitForVisibleAndAwakenDocument: () => Promise<void>;\n let waitForAwakenDocument: () => Promise<void>;\n let recursiveFetch: () => Promise<HttpResponse>;\n let retryCount = 0;\n\n // Safari on iOS has a bug:\n // Performing `fetch` right after document became visible can fail with `Load failed` error.\n // Running fetch after short timeout fixes this issue.\n waitForAwakenDocument = () => {\n const timeSinceDocumentIsVisible = Date.now() - dateDocumentBecameVisible;\n if (timeSinceDocumentIsVisible < IOS_PAGE_AWAKEN_TIMEOUT) {\n return new Promise<void>((resolve) => setTimeout(() => {\n if (!document.hidden) {\n resolve();\n } else {\n resolve(waitForVisibleAndAwakenDocument());\n }\n }, IOS_PAGE_AWAKEN_TIMEOUT - timeSinceDocumentIsVisible));\n } else {\n return Promise.resolve();\n }\n };\n\n // Returns a promise that resolves when document is visible for 500 ms\n waitForVisibleAndAwakenDocument = () => {\n if (document.hidden) {\n let pageVisibilityHandler: () => void;\n return new Promise<void>((resolve) => {\n pageVisibilityHandler = () => {\n if (!document.hidden) {\n document.removeEventListener('visibilitychange', pageVisibilityHandler);\n resolve(waitForAwakenDocument());\n }\n };\n document.addEventListener('visibilitychange', pageVisibilityHandler);\n });\n } else {\n return waitForAwakenDocument();\n }\n };\n\n // Restarts fetch on 'Load failed' error\n // This error can occur when `fetch` does not respond\n // (due to CORS error, non-existing host, or network error)\n const retryableFetch = (): Promise<HttpResponse> => {\n return sdk.options.httpRequestClient!(method!, url!, ajaxOptions).catch((err) => {\n const isNetworkError = err?.message === 'Load failed';\n if (isNetworkError && retryCount < IOS_MAX_RETRY_COUNT) {\n retryCount++;\n return recursiveFetch();\n }\n throw err;\n });\n };\n\n // Final promise to fetch that wraps logic with waiting for visible document\n // and retrying fetch request on network error\n recursiveFetch = (): Promise<HttpResponse> => {\n return waitForVisibleAndAwakenDocument().then(retryableFetch);\n };\n\n promise = recursiveFetch();\n } else {\n promise = sdk.options.httpRequestClient!(method!, url!, ajaxOptions);\n }\n\n return promise\n .then(function(resp) {\n res = resp.responseText;\n if (res && isString(res)) {\n res = JSON.parse(res);\n if (res && typeof res === 'object' && !res.headers) {\n if (Array.isArray(res)) {\n res.forEach(item => {\n item.headers = resp.headers;\n });\n } else {\n res.headers = resp.headers;\n }\n }\n }\n\n if (saveAuthnState) {\n if (!res.stateToken) {\n storage.delete(STATE_TOKEN_KEY_NAME);\n }\n }\n\n if (res && res.stateToken && res.expiresAt) {\n storage.set(STATE_TOKEN_KEY_NAME, res.stateToken, res.expiresAt, sdk.options.cookies!);\n }\n\n if (res && options.cacheResponse) {\n httpCache.updateStorage(url!, {\n expiresAt: Math.floor(Date.now()/1000) + DEFAULT_CACHE_DURATION,\n response: res\n });\n }\n \n return res;\n })\n .catch(function(resp) {\n err = formatError(sdk, resp);\n\n if (err.errorCode === 'E0000011') {\n storage.delete(STATE_TOKEN_KEY_NAME);\n }\n\n throw err;\n });\n}\n\nexport function get(sdk: OktaAuthHttpInterface, url: string, options?: RequestOptions) {\n url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n var getOptions = {\n url: url,\n method: 'GET'\n };\n Object.assign(getOptions, options);\n return httpRequest(sdk, getOptions);\n}\n\nexport function post(sdk: OktaAuthHttpInterface, url: string, args?: RequestData, options?: RequestOptions) {\n url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n var postOptions = {\n url: url,\n method: 'POST',\n args: args,\n saveAuthnState: true\n };\n Object.assign(postOptions, options);\n return httpRequest(sdk, postOptions);\n}\n"],"mappings":";;;;;AAeA;AACA;AAaA;AACA;AA9BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAmBA;AACA,IAAIA,yBAAyB,GAAG,CAAC;AACjC,IAAIC,8BAA0C;AAC9C,IAAI,IAAAC,oBAAU,GAAE,EAAE;EAChBF,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;EACtCH,8BAA8B,GAAG,MAAM;IACrC,IAAI,CAACI,QAAQ,CAACC,MAAM,EAAE;MACpBN,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;IACxC;EACF,CAAC;EACDC,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEN,8BAA8B,CAAC;AAC/E;AAEA,MAAMO,WAAW,GAAG,CAACC,GAA0B,EAAEC,KAA2B,KAAgC;EAC1G,IAAIA,KAAK,YAAYC,KAAK,EAAE;IAC1B;IACA;IACA,OAAO,IAAIC,oBAAY,CAAC;MACtBC,YAAY,EAAEH,KAAK,CAACI;IACtB,CAAC,CAAC;EACJ;EAEA,IAAIC,IAAkB,GAAGL,KAAK;EAC9B,IAAIM,GAA6C;EACjD,IAAIC,SAA8B,GAAG,CAAC,CAAC;EACvC,IAAIF,IAAI,CAACG,YAAY,IAAI,IAAAC,cAAQ,EAACJ,IAAI,CAACG,YAAY,CAAC,EAAE;IACpD,IAAI;MACFD,SAAS,GAAGG,IAAI,CAACC,KAAK,CAACN,IAAI,CAACG,YAAY,CAAC;IAC3C,CAAC,CAAC,OAAOI,CAAC,EAAE;MACVL,SAAS,GAAG;QACVJ,YAAY,EAAE;MAChB,CAAC;IACH;EACF;EAEA,IAAIE,IAAI,CAACQ,MAAM,IAAI,GAAG,EAAE;IACtBN,SAAS,CAACJ,YAAY,GAAG,eAAe;EAC1C;EAEA,IAAIJ,GAAG,CAACe,OAAO,CAACC,iBAAiB,EAAE;IACjCV,IAAI,GAAGN,GAAG,CAACe,OAAO,CAACC,iBAAiB,CAAC,IAAAC,WAAK,EAACX,IAAI,CAAC,CAAC;EACnD;;EAEA;EACA,MAAMY,aAAa,GAAGC,oBAAY,CAACC,wBAAwB,CAACd,IAAI,EAAEe,OAAO,CAAC,IAAI,EAAE;EAEhF,IAAIb,SAAS,CAACP,KAAK,IAAIO,SAAS,CAACc,iBAAiB,EAAE;IAClDf,GAAG,GAAG,IAAIgB,kBAAU,CAACf,SAAS,CAACP,KAAK,EAAEO,SAAS,CAACc,iBAAiB,EAAEhB,IAAI,CAAC;EAC1E,CAAC,MAAM;IACLC,GAAG,GAAG,IAAIJ,oBAAY,CAACK,SAAS,EAAcF,IAAI,EAAE;MAAEY;IAAc,CAAC,CAAC;EACxE;EAEA,IAAIA,aAAa,IAAIZ,IAAI,EAAEQ,MAAM,IAAI,GAAG,IAAIR,IAAI,EAAEQ,MAAM,GAAG,GAAG,EAAE;IAC9D,MAAMU,UAAU,GAAGL,oBAAY,CAACM,WAAW,CAACP,aAAa,CAAC;IAC1D;IACA,IAAIZ,IAAI,CAACQ,MAAM,KAAK,GAAG,IAAIU,UAAU,EAAEvB,KAAK,KAAK,qCAAqC,EAAE;MACtF;MACA,MAAM;QAAEyB,OAAO;QAAEC;MAAW,CAAC,GAAGH,UAAU,CAACI,UAAU;MACrDrB,GAAG,GAAG,IAAIJ,oBAAY,CACpB;QACEC,YAAY,EAAEoB,UAAU,CAACvB,KAAK;QAC9B4B,WAAW,EAAE,CAAC;UAAEzB,YAAY,EAAEoB,UAAU,CAACM;QAAiB,CAAC;MAC7D,CAAC,EACDxB,IAAI,EACJ;QACE;QACAoB,OAAO,EAAE,CAACA,OAAO;QACjB;QACA,IAAIC,UAAU,IAAI;UAAEA;QAAW,CAAC;MAClC,CAAC,CACF;IACH,CAAC,MACI,IAAIH,UAAU,EAAEO,MAAM,KAAK,MAAM,EAAE;MACtCxB,GAAG,GAAGiB,UAAU;IAClB;IACA;IACA;IACA;IACA;EACF;;EAEA,OAAOjB,GAAG;AACZ,CAAC;;AAED;AACO,SAASyB,WAAW,CAAChC,GAA0B,EAAEe,OAAuB,EAAgB;EAC7FA,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;EAEvB,IAAIf,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;IACvC,KAAK,MAAMC,WAAW,IAAIlC,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;MAC7DC,WAAW,CAACnB,OAAO,CAAC;IACtB;EACF;EAEA,IAAIoB,GAAG,GAAGpB,OAAO,CAACoB,GAAG;IACjBC,MAAM,GAAGrB,OAAO,CAACqB,MAAM;IACvBC,IAAI,GAAGtB,OAAO,CAACsB,IAAI;IACnBC,cAAc,GAAGvB,OAAO,CAACuB,cAAc;IACvCC,WAAW,GAAGxB,OAAO,CAACwB,WAAW;IACjCC,eAAe,GAAGzB,OAAO,CAACyB,eAAe,KAAK,IAAI;IAAE;IACpDC,WAAW,GAAGzC,GAAG,CAACe,OAAO,CAAC0B,WAAW;IACrCC,OAAO,GAAGD,WAAW,CAAEC,OAAO;IAC9BC,SAAS,GAAG3C,GAAG,CAAC4C,cAAc,CAACC,YAAY,CAAC7C,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAC;IAChEC,aAAa,GAAGhC,OAAO,CAACgC,aAAa;EAEzC,IAAIhC,OAAO,CAACiC,aAAa,EAAE;IACzB,IAAIC,aAAa,GAAGN,SAAS,CAACO,UAAU,EAAE;IAC1C,IAAIC,cAAc,GAAGF,aAAa,CAACd,GAAG,CAAW;IACjD,IAAIgB,cAAc,IAAIzD,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,GAAGwD,cAAc,CAACC,SAAS,EAAE;MAChE,OAAOC,OAAO,CAACC,OAAO,CAACH,cAAc,CAACI,QAAQ,CAAC;IACjD;EACF;EAEA,IAAIC,mBAAmB,GAAGxD,GAAG,CAACyD,cAAc,CAACC,aAAa,EAAE;EAC5D,IAAIrC,OAAoB,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGmC;EACL,CAAC;EACDG,MAAM,CAACC,MAAM,CAACvC,OAAO,EAAErB,GAAG,CAACe,OAAO,CAACM,OAAO,EAAEN,OAAO,CAACM,OAAO,CAAC;EAC5DA,OAAO,GAAG,IAAAwC,gBAAU,EAACxC,OAAO,CAAgB;EAE5C,IAAIkB,WAAW,IAAI,IAAA7B,cAAQ,EAAC6B,WAAW,CAAC,EAAE;IACxClB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGkB,WAAW;EACpD;EAEA,IAAIuB,WAAyB,GAAG;IAC9BzC,OAAO;IACP0C,IAAI,EAAE1B,IAAI,IAAI2B,SAAS;IACvBxB;EACF,CAAC;EAED,IAAIjC,GAAG,EAAE0D,GAAG,EAAEC,OAAO;EAErB,IAAInB,aAAa,IAAI,IAAAtD,oBAAU,GAAE,EAAE;IACjC,IAAI0E,+BAAoD;IACxD,IAAIC,qBAA0C;IAC9C,IAAIC,cAA2C;IAC/C,IAAIC,UAAU,GAAG,CAAC;;IAElB;IACA;IACA;IACAF,qBAAqB,GAAG,MAAM;MAC5B,MAAMG,0BAA0B,GAAG7E,IAAI,CAACC,GAAG,EAAE,GAAGJ,yBAAyB;MACzE,IAAIgF,0BAA0B,GAAGC,kCAAuB,EAAE;QACxD,OAAO,IAAInB,OAAO,CAAQC,OAAO,IAAKmB,UAAU,CAAC,MAAM;UACrD,IAAI,CAAC7E,QAAQ,CAACC,MAAM,EAAE;YACpByD,OAAO,EAAE;UACX,CAAC,MAAM;YACLA,OAAO,CAACa,+BAA+B,EAAE,CAAC;UAC5C;QACF,CAAC,EAAEK,kCAAuB,GAAGD,0BAA0B,CAAC,CAAC;MAC3D,CAAC,MAAM;QACL,OAAOlB,OAAO,CAACC,OAAO,EAAE;MAC1B;IACF,CAAC;;IAED;IACAa,+BAA+B,GAAG,MAAM;MACtC,IAAIvE,QAAQ,CAACC,MAAM,EAAE;QACnB,IAAI6E,qBAAiC;QACrC,OAAO,IAAIrB,OAAO,CAAQC,OAAO,IAAK;UACpCoB,qBAAqB,GAAG,MAAM;YAC5B,IAAI,CAAC9E,QAAQ,CAACC,MAAM,EAAE;cACpBD,QAAQ,CAAC+E,mBAAmB,CAAC,kBAAkB,EAAED,qBAAqB,CAAC;cACvEpB,OAAO,CAACc,qBAAqB,EAAE,CAAC;YAClC;UACF,CAAC;UACDxE,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAE4E,qBAAqB,CAAC;QACtE,CAAC,CAAC;MACJ,CAAC,MAAM;QACL,OAAON,qBAAqB,EAAE;MAChC;IACF,CAAC;;IAED;IACA;IACA;IACA,MAAMQ,cAAc,GAAG,MAA6B;MAClD,OAAO5E,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG2B,WAAW,CAAC,CAACgB,KAAK,CAAEvE,GAAG,IAAK;QAC/E,MAAMwE,cAAc,GAAGxE,GAAG,EAAEF,OAAO,KAAK,aAAa;QACrD,IAAI0E,cAAc,IAAIT,UAAU,GAAGU,8BAAmB,EAAE;UACtDV,UAAU,EAAE;UACZ,OAAOD,cAAc,EAAE;QACzB;QACA,MAAM9D,GAAG;MACX,CAAC,CAAC;IACJ,CAAC;;IAED;IACA;IACA8D,cAAc,GAAG,MAA6B;MAC5C,OAAOF,+BAA+B,EAAE,CAACc,IAAI,CAACL,cAAc,CAAC;IAC/D,CAAC;IAEDV,OAAO,GAAGG,cAAc,EAAE;EAC5B,CAAC,MAAM;IACLH,OAAO,GAAGlE,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG2B,WAAW,CAAC;EACtE;EAEA,OAAOI,OAAO,CACXe,IAAI,CAAC,UAAS3E,IAAI,EAAE;IACnB2D,GAAG,GAAG3D,IAAI,CAACG,YAAY;IACvB,IAAIwD,GAAG,IAAI,IAAAvD,cAAQ,EAACuD,GAAG,CAAC,EAAE;MACxBA,GAAG,GAAGtD,IAAI,CAACC,KAAK,CAACqD,GAAG,CAAC;MACrB,IAAIA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACA,GAAG,CAAC5C,OAAO,EAAE;QAClD,IAAI6D,KAAK,CAACC,OAAO,CAAClB,GAAG,CAAC,EAAE;UACtBA,GAAG,CAACmB,OAAO,CAACC,IAAI,IAAI;YAClBA,IAAI,CAAChE,OAAO,GAAGf,IAAI,CAACe,OAAO;UAC7B,CAAC,CAAC;QACJ,CAAC,MAAM;UACL4C,GAAG,CAAC5C,OAAO,GAAGf,IAAI,CAACe,OAAO;QAC5B;MACF;IACF;IAEA,IAAIiB,cAAc,EAAE;MAClB,IAAI,CAAC2B,GAAG,CAACqB,UAAU,EAAE;QACnB5C,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;MACtC;IACF;IAEA,IAAIvB,GAAG,IAAIA,GAAG,CAACqB,UAAU,IAAIrB,GAAG,CAACb,SAAS,EAAE;MAC1CV,OAAO,CAAC+C,GAAG,CAACD,+BAAoB,EAAEvB,GAAG,CAACqB,UAAU,EAAErB,GAAG,CAACb,SAAS,EAAEpD,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAE;IACxF;IAEA,IAAImB,GAAG,IAAIlD,OAAO,CAACiC,aAAa,EAAE;MAChCL,SAAS,CAAC+C,aAAa,CAACvD,GAAG,EAAG;QAC5BiB,SAAS,EAAEuC,IAAI,CAACC,KAAK,CAAClG,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,CAAC,GAAGkG,iCAAsB;QAC/DtC,QAAQ,EAAEU;MACZ,CAAC,CAAC;IACJ;IAEA,OAAOA,GAAG;EACZ,CAAC,CAAC,CACDa,KAAK,CAAC,UAASxE,IAAI,EAAE;IACpBC,GAAG,GAAGR,WAAW,CAACC,GAAG,EAAEM,IAAI,CAAC;IAE5B,IAAIC,GAAG,CAACuF,SAAS,KAAK,UAAU,EAAE;MAChCpD,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;IACtC;IAEA,MAAMjF,GAAG;EACX,CAAC,CAAC;AACN;AAEO,SAASwF,GAAG,CAAC/F,GAA0B,EAAEmC,GAAW,EAAEpB,OAAwB,EAAE;EACrFoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAI+D,UAAU,GAAG;IACf/D,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE;EACV,CAAC;EACDuB,MAAM,CAACC,MAAM,CAACsC,UAAU,EAAEnF,OAAO,CAAC;EAClC,OAAOiB,WAAW,CAAChC,GAAG,EAAEkG,UAAU,CAAC;AACrC;AAEO,SAASC,IAAI,CAACnG,GAA0B,EAAEmC,GAAW,EAAEE,IAAkB,EAAEtB,OAAwB,EAAE;EAC1GoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAIiE,WAAW,GAAG;IAChBjE,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE,MAAM;IACdC,IAAI,EAAEA,IAAI;IACVC,cAAc,EAAE;EAClB,CAAC;EACDqB,MAAM,CAACC,MAAM,CAACwC,WAAW,EAAErF,OAAO,CAAC;EACnC,OAAOiB,WAAW,CAAChC,GAAG,EAAEoG,WAAW,CAAC;AACtC"}
|
|
1
|
+
{"version":3,"file":"request.js","names":["dateDocumentBecameVisible","trackDateDocumentBecameVisible","isBrowser","Date","now","document","hidden","addEventListener","formatError","sdk","error","Error","AuthApiError","errorSummary","message","resp","err","serverErr","responseText","isString","JSON","parse","e","status","options","transformErrorXHR","clone","wwwAuthHeader","WWWAuthError","getWWWAuthenticateHeader","headers","error_description","OAuthError","wwwAuthErr","parseHeader","max_age","acr_values","parameters","errorCauses","errorDescription","scheme","httpRequest","httpRequestInterceptors","interceptor","url","method","args","saveAuthnState","accessToken","withCredentials","storageUtil","storage","httpCache","storageManager","getHttpCache","cookies","pollingIntent","pollDelay","cacheResponse","cacheContents","getStorage","cachedResponse","expiresAt","Promise","resolve","response","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","Object","assign","removeNils","ajaxOptions","data","undefined","res","promise","waitForVisibleAndAwakenDocument","waitForAwakenDocument","recursiveFetch","retryCount","timeSinceDocumentIsVisible","setTimeout","pageVisibilityHandler","removeEventListener","retryableFetch","httpRequestClient","catch","isNetworkError","IOS_MAX_RETRY_COUNT","then","Array","isArray","forEach","item","stateToken","delete","STATE_TOKEN_KEY_NAME","set","updateStorage","Math","floor","DEFAULT_CACHE_DURATION","errorCode","get","isAbsoluteUrl","getIssuerOrigin","getOptions","post","postOptions"],"sources":["../../../lib/http/request.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* eslint-disable complexity */\nimport { isString, clone, isAbsoluteUrl, removeNils } from '../util';\nimport {\n STATE_TOKEN_KEY_NAME,\n DEFAULT_CACHE_DURATION,\n IOS_MAX_RETRY_COUNT,\n} from '../constants';\nimport {\n OktaAuthHttpInterface,\n RequestOptions,\n FetchOptions,\n RequestData,\n HttpResponse\n} from './types';\nimport { AuthApiError, OAuthError, APIError, WWWAuthError } from '../errors';\nimport { isBrowser } from '../features';\n\n\n// For iOS track last date when document became visible\nlet dateDocumentBecameVisible = 0;\nlet trackDateDocumentBecameVisible: () => void;\nif (isBrowser()) {\n dateDocumentBecameVisible = Date.now();\n trackDateDocumentBecameVisible = () => {\n if (!document.hidden) {\n dateDocumentBecameVisible = Date.now();\n }\n };\n document.addEventListener('visibilitychange', trackDateDocumentBecameVisible);\n}\n\nconst formatError = (sdk: OktaAuthHttpInterface, error: HttpResponse | Error): AuthApiError | OAuthError => {\n if (error instanceof Error) {\n // fetch() can throw exceptions\n // see https://developer.mozilla.org/en-US/docs/Web/API/fetch#exceptions\n return new AuthApiError({\n errorSummary: error.message,\n });\n }\n\n let resp: HttpResponse = error;\n let err: AuthApiError | OAuthError | WWWAuthError;\n let serverErr: Record<string, any> = {};\n if (resp.responseText && isString(resp.responseText)) {\n try {\n serverErr = JSON.parse(resp.responseText);\n } catch (e) {\n serverErr = {\n errorSummary: 'Unknown error'\n };\n }\n }\n\n if (resp.status >= 500) {\n serverErr.errorSummary = 'Unknown error';\n }\n\n if (sdk.options.transformErrorXHR) {\n resp = sdk.options.transformErrorXHR(clone(resp));\n }\n\n // \n const wwwAuthHeader = WWWAuthError.getWWWAuthenticateHeader(resp?.headers) ?? '';\n\n if (serverErr.error && serverErr.error_description) {\n err = new OAuthError(serverErr.error, serverErr.error_description, resp);\n } else {\n err = new AuthApiError(serverErr as APIError, resp, { wwwAuthHeader });\n }\n\n if (wwwAuthHeader && resp?.status >= 400 && resp?.status < 500) {\n const wwwAuthErr = WWWAuthError.parseHeader(wwwAuthHeader);\n // check for 403 to avoid breaking change\n if (resp.status === 403 && wwwAuthErr?.error === 'insufficient_authentication_context') {\n // eslint-disable-next-line camelcase\n const { max_age, acr_values } = wwwAuthErr.parameters;\n err = new AuthApiError(\n {\n errorSummary: wwwAuthErr.error,\n errorCauses: [{ errorSummary: wwwAuthErr.errorDescription }]\n },\n resp,\n {\n // eslint-disable-next-line camelcase\n max_age: +max_age,\n // eslint-disable-next-line camelcase\n ...(acr_values && { acr_values })\n }\n );\n }\n else if (wwwAuthErr?.scheme === 'DPoP') {\n err = wwwAuthErr;\n }\n // else {\n // // WWWAuthError.parseHeader may return null, only overwrite if !null\n // err = wwwAuthErr ?? err;\n // }\n }\n\n return err;\n};\n\n// eslint-disable-next-line max-statements\nexport function httpRequest(sdk: OktaAuthHttpInterface, options: RequestOptions): Promise<any> {\n options = options || {};\n\n if (sdk.options.httpRequestInterceptors) {\n for (const interceptor of sdk.options.httpRequestInterceptors) {\n interceptor(options);\n }\n }\n\n var url = options.url,\n method = options.method,\n args = options.args,\n saveAuthnState = options.saveAuthnState,\n accessToken = options.accessToken,\n withCredentials = options.withCredentials === true, // default value is false\n storageUtil = sdk.options.storageUtil,\n storage = storageUtil!.storage,\n httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies),\n pollingIntent = options.pollingIntent,\n pollDelay = sdk.options.pollDelay ?? 0;\n\n if (options.cacheResponse) {\n var cacheContents = httpCache.getStorage();\n var cachedResponse = cacheContents[url as string];\n if (cachedResponse && Date.now()/1000 < cachedResponse.expiresAt) {\n return Promise.resolve(cachedResponse.response);\n }\n }\n\n var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n var headers: HeadersInit = {\n 'Accept': 'application/json',\n 'Content-Type': 'application/json',\n ...oktaUserAgentHeader\n };\n Object.assign(headers, sdk.options.headers, options.headers);\n headers = removeNils(headers) as HeadersInit;\n\n if (accessToken && isString(accessToken)) {\n headers['Authorization'] = 'Bearer ' + accessToken;\n }\n\n var ajaxOptions: FetchOptions = {\n headers,\n data: args || undefined,\n withCredentials\n };\n\n var err, res, promise;\n\n if (pollingIntent && isBrowser() && pollDelay > 0) {\n let waitForVisibleAndAwakenDocument: () => Promise<void>;\n let waitForAwakenDocument: () => Promise<void>;\n let recursiveFetch: () => Promise<HttpResponse>;\n let retryCount = 0;\n\n // Safari on iOS has a bug:\n // Performing `fetch` right after document became visible can fail with `Load failed` error.\n // Running fetch after short timeout fixes this issue.\n waitForAwakenDocument = () => {\n const timeSinceDocumentIsVisible = Date.now() - dateDocumentBecameVisible;\n if (timeSinceDocumentIsVisible < pollDelay) {\n return new Promise<void>((resolve) => setTimeout(() => {\n if (!document.hidden) {\n resolve();\n } else {\n resolve(waitForVisibleAndAwakenDocument());\n }\n }, pollDelay - timeSinceDocumentIsVisible));\n } else {\n return Promise.resolve();\n }\n };\n\n // Returns a promise that resolves when document is visible for 500 ms\n waitForVisibleAndAwakenDocument = () => {\n if (document.hidden) {\n let pageVisibilityHandler: () => void;\n return new Promise<void>((resolve) => {\n pageVisibilityHandler = () => {\n if (!document.hidden) {\n document.removeEventListener('visibilitychange', pageVisibilityHandler);\n resolve(waitForAwakenDocument());\n }\n };\n document.addEventListener('visibilitychange', pageVisibilityHandler);\n });\n } else {\n return waitForAwakenDocument();\n }\n };\n\n // Restarts fetch on 'Load failed' error\n // This error can occur when `fetch` does not respond\n // (due to CORS error, non-existing host, or network error)\n const retryableFetch = (): Promise<HttpResponse> => {\n return sdk.options.httpRequestClient!(method!, url!, ajaxOptions).catch((err) => {\n const isNetworkError = err?.message === 'Load failed';\n if (isNetworkError && retryCount < IOS_MAX_RETRY_COUNT) {\n retryCount++;\n return recursiveFetch();\n }\n throw err;\n });\n };\n\n // Final promise to fetch that wraps logic with waiting for visible document\n // and retrying fetch request on network error\n recursiveFetch = (): Promise<HttpResponse> => {\n return waitForVisibleAndAwakenDocument().then(retryableFetch);\n };\n\n promise = recursiveFetch();\n } else {\n promise = sdk.options.httpRequestClient!(method!, url!, ajaxOptions);\n }\n\n return promise\n .then(function(resp) {\n res = resp.responseText;\n if (res && isString(res)) {\n res = JSON.parse(res);\n if (res && typeof res === 'object' && !res.headers) {\n if (Array.isArray(res)) {\n res.forEach(item => {\n item.headers = resp.headers;\n });\n } else {\n res.headers = resp.headers;\n }\n }\n }\n\n if (saveAuthnState) {\n if (!res.stateToken) {\n storage.delete(STATE_TOKEN_KEY_NAME);\n }\n }\n\n if (res && res.stateToken && res.expiresAt) {\n storage.set(STATE_TOKEN_KEY_NAME, res.stateToken, res.expiresAt, sdk.options.cookies!);\n }\n\n if (res && options.cacheResponse) {\n httpCache.updateStorage(url!, {\n expiresAt: Math.floor(Date.now()/1000) + DEFAULT_CACHE_DURATION,\n response: res\n });\n }\n \n return res;\n })\n .catch(function(resp) {\n err = formatError(sdk, resp);\n\n if (err.errorCode === 'E0000011') {\n storage.delete(STATE_TOKEN_KEY_NAME);\n }\n\n throw err;\n });\n}\n\nexport function get(sdk: OktaAuthHttpInterface, url: string, options?: RequestOptions) {\n url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n var getOptions = {\n url: url,\n method: 'GET'\n };\n Object.assign(getOptions, options);\n return httpRequest(sdk, getOptions);\n}\n\nexport function post(sdk: OktaAuthHttpInterface, url: string, args?: RequestData, options?: RequestOptions) {\n url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n var postOptions = {\n url: url,\n method: 'POST',\n args: args,\n saveAuthnState: true\n };\n Object.assign(postOptions, options);\n return httpRequest(sdk, postOptions);\n}\n"],"mappings":";;;;;AAeA;AACA;AAYA;AACA;AA7BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAkBA;AACA,IAAIA,yBAAyB,GAAG,CAAC;AACjC,IAAIC,8BAA0C;AAC9C,IAAI,IAAAC,mBAAS,GAAE,EAAE;EACfF,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;EACtCH,8BAA8B,GAAG,MAAM;IACrC,IAAI,CAACI,QAAQ,CAACC,MAAM,EAAE;MACpBN,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;IACxC;EACF,CAAC;EACDC,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEN,8BAA8B,CAAC;AAC/E;AAEA,MAAMO,WAAW,GAAG,CAACC,GAA0B,EAAEC,KAA2B,KAAgC;EAC1G,IAAIA,KAAK,YAAYC,KAAK,EAAE;IAC1B;IACA;IACA,OAAO,IAAIC,oBAAY,CAAC;MACtBC,YAAY,EAAEH,KAAK,CAACI;IACtB,CAAC,CAAC;EACJ;EAEA,IAAIC,IAAkB,GAAGL,KAAK;EAC9B,IAAIM,GAA6C;EACjD,IAAIC,SAA8B,GAAG,CAAC,CAAC;EACvC,IAAIF,IAAI,CAACG,YAAY,IAAI,IAAAC,cAAQ,EAACJ,IAAI,CAACG,YAAY,CAAC,EAAE;IACpD,IAAI;MACFD,SAAS,GAAGG,IAAI,CAACC,KAAK,CAACN,IAAI,CAACG,YAAY,CAAC;IAC3C,CAAC,CAAC,OAAOI,CAAC,EAAE;MACVL,SAAS,GAAG;QACVJ,YAAY,EAAE;MAChB,CAAC;IACH;EACF;EAEA,IAAIE,IAAI,CAACQ,MAAM,IAAI,GAAG,EAAE;IACtBN,SAAS,CAACJ,YAAY,GAAG,eAAe;EAC1C;EAEA,IAAIJ,GAAG,CAACe,OAAO,CAACC,iBAAiB,EAAE;IACjCV,IAAI,GAAGN,GAAG,CAACe,OAAO,CAACC,iBAAiB,CAAC,IAAAC,WAAK,EAACX,IAAI,CAAC,CAAC;EACnD;;EAEA;EACA,MAAMY,aAAa,GAAGC,oBAAY,CAACC,wBAAwB,CAACd,IAAI,EAAEe,OAAO,CAAC,IAAI,EAAE;EAEhF,IAAIb,SAAS,CAACP,KAAK,IAAIO,SAAS,CAACc,iBAAiB,EAAE;IAClDf,GAAG,GAAG,IAAIgB,kBAAU,CAACf,SAAS,CAACP,KAAK,EAAEO,SAAS,CAACc,iBAAiB,EAAEhB,IAAI,CAAC;EAC1E,CAAC,MAAM;IACLC,GAAG,GAAG,IAAIJ,oBAAY,CAACK,SAAS,EAAcF,IAAI,EAAE;MAAEY;IAAc,CAAC,CAAC;EACxE;EAEA,IAAIA,aAAa,IAAIZ,IAAI,EAAEQ,MAAM,IAAI,GAAG,IAAIR,IAAI,EAAEQ,MAAM,GAAG,GAAG,EAAE;IAC9D,MAAMU,UAAU,GAAGL,oBAAY,CAACM,WAAW,CAACP,aAAa,CAAC;IAC1D;IACA,IAAIZ,IAAI,CAACQ,MAAM,KAAK,GAAG,IAAIU,UAAU,EAAEvB,KAAK,KAAK,qCAAqC,EAAE;MACtF;MACA,MAAM;QAAEyB,OAAO;QAAEC;MAAW,CAAC,GAAGH,UAAU,CAACI,UAAU;MACrDrB,GAAG,GAAG,IAAIJ,oBAAY,CACpB;QACEC,YAAY,EAAEoB,UAAU,CAACvB,KAAK;QAC9B4B,WAAW,EAAE,CAAC;UAAEzB,YAAY,EAAEoB,UAAU,CAACM;QAAiB,CAAC;MAC7D,CAAC,EACDxB,IAAI,EACJ;QACE;QACAoB,OAAO,EAAE,CAACA,OAAO;QACjB;QACA,IAAIC,UAAU,IAAI;UAAEA;QAAW,CAAC;MAClC,CAAC,CACF;IACH,CAAC,MACI,IAAIH,UAAU,EAAEO,MAAM,KAAK,MAAM,EAAE;MACtCxB,GAAG,GAAGiB,UAAU;IAClB;IACA;IACA;IACA;IACA;EACF;;EAEA,OAAOjB,GAAG;AACZ,CAAC;;AAED;AACO,SAASyB,WAAW,CAAChC,GAA0B,EAAEe,OAAuB,EAAgB;EAC7FA,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;EAEvB,IAAIf,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;IACvC,KAAK,MAAMC,WAAW,IAAIlC,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;MAC7DC,WAAW,CAACnB,OAAO,CAAC;IACtB;EACF;EAEA,IAAIoB,GAAG,GAAGpB,OAAO,CAACoB,GAAG;IACjBC,MAAM,GAAGrB,OAAO,CAACqB,MAAM;IACvBC,IAAI,GAAGtB,OAAO,CAACsB,IAAI;IACnBC,cAAc,GAAGvB,OAAO,CAACuB,cAAc;IACvCC,WAAW,GAAGxB,OAAO,CAACwB,WAAW;IACjCC,eAAe,GAAGzB,OAAO,CAACyB,eAAe,KAAK,IAAI;IAAE;IACpDC,WAAW,GAAGzC,GAAG,CAACe,OAAO,CAAC0B,WAAW;IACrCC,OAAO,GAAGD,WAAW,CAAEC,OAAO;IAC9BC,SAAS,GAAG3C,GAAG,CAAC4C,cAAc,CAACC,YAAY,CAAC7C,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAC;IAChEC,aAAa,GAAGhC,OAAO,CAACgC,aAAa;IACrCC,SAAS,GAAGhD,GAAG,CAACe,OAAO,CAACiC,SAAS,IAAI,CAAC;EAE1C,IAAIjC,OAAO,CAACkC,aAAa,EAAE;IACzB,IAAIC,aAAa,GAAGP,SAAS,CAACQ,UAAU,EAAE;IAC1C,IAAIC,cAAc,GAAGF,aAAa,CAACf,GAAG,CAAW;IACjD,IAAIiB,cAAc,IAAI1D,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,GAAGyD,cAAc,CAACC,SAAS,EAAE;MAChE,OAAOC,OAAO,CAACC,OAAO,CAACH,cAAc,CAACI,QAAQ,CAAC;IACjD;EACF;EAEA,IAAIC,mBAAmB,GAAGzD,GAAG,CAAC0D,cAAc,CAACC,aAAa,EAAE;EAC5D,IAAItC,OAAoB,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGoC;EACL,CAAC;EACDG,MAAM,CAACC,MAAM,CAACxC,OAAO,EAAErB,GAAG,CAACe,OAAO,CAACM,OAAO,EAAEN,OAAO,CAACM,OAAO,CAAC;EAC5DA,OAAO,GAAG,IAAAyC,gBAAU,EAACzC,OAAO,CAAgB;EAE5C,IAAIkB,WAAW,IAAI,IAAA7B,cAAQ,EAAC6B,WAAW,CAAC,EAAE;IACxClB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGkB,WAAW;EACpD;EAEA,IAAIwB,WAAyB,GAAG;IAC9B1C,OAAO;IACP2C,IAAI,EAAE3B,IAAI,IAAI4B,SAAS;IACvBzB;EACF,CAAC;EAED,IAAIjC,GAAG,EAAE2D,GAAG,EAAEC,OAAO;EAErB,IAAIpB,aAAa,IAAI,IAAAtD,mBAAS,GAAE,IAAIuD,SAAS,GAAG,CAAC,EAAE;IACjD,IAAIoB,+BAAoD;IACxD,IAAIC,qBAA0C;IAC9C,IAAIC,cAA2C;IAC/C,IAAIC,UAAU,GAAG,CAAC;;IAElB;IACA;IACA;IACAF,qBAAqB,GAAG,MAAM;MAC5B,MAAMG,0BAA0B,GAAG9E,IAAI,CAACC,GAAG,EAAE,GAAGJ,yBAAyB;MACzE,IAAIiF,0BAA0B,GAAGxB,SAAS,EAAE;QAC1C,OAAO,IAAIM,OAAO,CAAQC,OAAO,IAAKkB,UAAU,CAAC,MAAM;UACrD,IAAI,CAAC7E,QAAQ,CAACC,MAAM,EAAE;YACpB0D,OAAO,EAAE;UACX,CAAC,MAAM;YACLA,OAAO,CAACa,+BAA+B,EAAE,CAAC;UAC5C;QACF,CAAC,EAAEpB,SAAS,GAAGwB,0BAA0B,CAAC,CAAC;MAC7C,CAAC,MAAM;QACL,OAAOlB,OAAO,CAACC,OAAO,EAAE;MAC1B;IACF,CAAC;;IAED;IACAa,+BAA+B,GAAG,MAAM;MACtC,IAAIxE,QAAQ,CAACC,MAAM,EAAE;QACnB,IAAI6E,qBAAiC;QACrC,OAAO,IAAIpB,OAAO,CAAQC,OAAO,IAAK;UACpCmB,qBAAqB,GAAG,MAAM;YAC5B,IAAI,CAAC9E,QAAQ,CAACC,MAAM,EAAE;cACpBD,QAAQ,CAAC+E,mBAAmB,CAAC,kBAAkB,EAAED,qBAAqB,CAAC;cACvEnB,OAAO,CAACc,qBAAqB,EAAE,CAAC;YAClC;UACF,CAAC;UACDzE,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAE4E,qBAAqB,CAAC;QACtE,CAAC,CAAC;MACJ,CAAC,MAAM;QACL,OAAOL,qBAAqB,EAAE;MAChC;IACF,CAAC;;IAED;IACA;IACA;IACA,MAAMO,cAAc,GAAG,MAA6B;MAClD,OAAO5E,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG4B,WAAW,CAAC,CAACe,KAAK,CAAEvE,GAAG,IAAK;QAC/E,MAAMwE,cAAc,GAAGxE,GAAG,EAAEF,OAAO,KAAK,aAAa;QACrD,IAAI0E,cAAc,IAAIR,UAAU,GAAGS,8BAAmB,EAAE;UACtDT,UAAU,EAAE;UACZ,OAAOD,cAAc,EAAE;QACzB;QACA,MAAM/D,GAAG;MACX,CAAC,CAAC;IACJ,CAAC;;IAED;IACA;IACA+D,cAAc,GAAG,MAA6B;MAC5C,OAAOF,+BAA+B,EAAE,CAACa,IAAI,CAACL,cAAc,CAAC;IAC/D,CAAC;IAEDT,OAAO,GAAGG,cAAc,EAAE;EAC5B,CAAC,MAAM;IACLH,OAAO,GAAGnE,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG4B,WAAW,CAAC;EACtE;EAEA,OAAOI,OAAO,CACXc,IAAI,CAAC,UAAS3E,IAAI,EAAE;IACnB4D,GAAG,GAAG5D,IAAI,CAACG,YAAY;IACvB,IAAIyD,GAAG,IAAI,IAAAxD,cAAQ,EAACwD,GAAG,CAAC,EAAE;MACxBA,GAAG,GAAGvD,IAAI,CAACC,KAAK,CAACsD,GAAG,CAAC;MACrB,IAAIA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACA,GAAG,CAAC7C,OAAO,EAAE;QAClD,IAAI6D,KAAK,CAACC,OAAO,CAACjB,GAAG,CAAC,EAAE;UACtBA,GAAG,CAACkB,OAAO,CAACC,IAAI,IAAI;YAClBA,IAAI,CAAChE,OAAO,GAAGf,IAAI,CAACe,OAAO;UAC7B,CAAC,CAAC;QACJ,CAAC,MAAM;UACL6C,GAAG,CAAC7C,OAAO,GAAGf,IAAI,CAACe,OAAO;QAC5B;MACF;IACF;IAEA,IAAIiB,cAAc,EAAE;MAClB,IAAI,CAAC4B,GAAG,CAACoB,UAAU,EAAE;QACnB5C,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;MACtC;IACF;IAEA,IAAItB,GAAG,IAAIA,GAAG,CAACoB,UAAU,IAAIpB,GAAG,CAACb,SAAS,EAAE;MAC1CX,OAAO,CAAC+C,GAAG,CAACD,+BAAoB,EAAEtB,GAAG,CAACoB,UAAU,EAAEpB,GAAG,CAACb,SAAS,EAAErD,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAE;IACxF;IAEA,IAAIoB,GAAG,IAAInD,OAAO,CAACkC,aAAa,EAAE;MAChCN,SAAS,CAAC+C,aAAa,CAACvD,GAAG,EAAG;QAC5BkB,SAAS,EAAEsC,IAAI,CAACC,KAAK,CAAClG,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,CAAC,GAAGkG,iCAAsB;QAC/DrC,QAAQ,EAAEU;MACZ,CAAC,CAAC;IACJ;IAEA,OAAOA,GAAG;EACZ,CAAC,CAAC,CACDY,KAAK,CAAC,UAASxE,IAAI,EAAE;IACpBC,GAAG,GAAGR,WAAW,CAACC,GAAG,EAAEM,IAAI,CAAC;IAE5B,IAAIC,GAAG,CAACuF,SAAS,KAAK,UAAU,EAAE;MAChCpD,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;IACtC;IAEA,MAAMjF,GAAG;EACX,CAAC,CAAC;AACN;AAEO,SAASwF,GAAG,CAAC/F,GAA0B,EAAEmC,GAAW,EAAEpB,OAAwB,EAAE;EACrFoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAI+D,UAAU,GAAG;IACf/D,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE;EACV,CAAC;EACDwB,MAAM,CAACC,MAAM,CAACqC,UAAU,EAAEnF,OAAO,CAAC;EAClC,OAAOiB,WAAW,CAAChC,GAAG,EAAEkG,UAAU,CAAC;AACrC;AAEO,SAASC,IAAI,CAACnG,GAA0B,EAAEmC,GAAW,EAAEE,IAAkB,EAAEtB,OAAwB,EAAE;EAC1GoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAIiE,WAAW,GAAG;IAChBjE,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE,MAAM;IACdC,IAAI,EAAEA,IAAI;IACVC,cAAc,EAAE;EAClB,CAAC;EACDsB,MAAM,CAACC,MAAM,CAACuC,WAAW,EAAErF,OAAO,CAAC;EACnC,OAAOiB,WAAW,CAAChC,GAAG,EAAEoG,WAAW,CAAC;AACtC"}
|
package/cjs/http/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","names":[],"sources":["../../../lib/http/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaUserAgent } from './OktaUserAgent';\nimport {\n OktaAuthStorageInterface,\n OktaAuthStorageOptions,\n StorageManagerInterface,\n StorageUtil\n} from '../storage/types';\n\nexport type RequestHeaders = Record<string, string>;\n\nexport type RequestData = Record<string, string> | string | object;\n\nexport interface RequestOptions {\n url?: string;\n method?: string;\n args?: RequestData;\n saveAuthnState?: boolean;\n accessToken?: string;\n withCredentials?: boolean;\n storageUtil?: StorageUtil;\n cacheResponse?: boolean;\n headers?: RequestHeaders;\n pollingIntent?: boolean;\n}\n\nexport interface FetchOptions {\n headers?: HeadersInit;\n data?: RequestData;\n withCredentials?: boolean;\n}\n\nexport interface FetchResponse {\n headers: {\n get(key: string): string;\n };\n json(): Promise<object>;\n text(): Promise<string>;\n}\n\nexport interface HttpResponse {\n responseText: string;\n status: number;\n responseType?: string;\n responseJSON?: {\n [propName: string]: any;\n };\n headers: HeadersInit;\n}\n\nexport type HttpRequestClient = (method: string, url: string, options: FetchOptions) => Promise<HttpResponse>;\n\n// HTTP API\nexport interface HttpAPI {\n setRequestHeader(name: string, value: string): void;\n}\n\n// options that can be passed to AuthJS\nexport interface OktaAuthHttpOptions extends OktaAuthStorageOptions \n{\n issuer?: string;\n transformErrorXHR?: (xhr: object) => any;\n headers?: object;\n httpRequestClient?: HttpRequestClient;\n httpRequestInterceptors?: ((request: RequestOptions) => void)[];\n}\n\n// an instance of AuthJS with HTTP capabilities\nexport interface OktaAuthHttpInterface\n<\n S extends StorageManagerInterface = StorageManagerInterface,\n O extends OktaAuthHttpOptions = OktaAuthHttpOptions,\n> \n extends OktaAuthStorageInterface<S, O>\n{\n _oktaUserAgent: OktaUserAgent;\n http: HttpAPI;\n \n setHeaders(headers): void;\n getIssuerOrigin(): string;\n webfinger(opts): Promise<object>;\n}\n"],"mappings":""}
|
|
1
|
+
{"version":3,"file":"types.js","names":[],"sources":["../../../lib/http/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaUserAgent } from './OktaUserAgent';\nimport {\n OktaAuthStorageInterface,\n OktaAuthStorageOptions,\n StorageManagerInterface,\n StorageUtil\n} from '../storage/types';\n\nexport type RequestHeaders = Record<string, string>;\n\nexport type RequestData = Record<string, string> | string | object;\n\nexport interface RequestOptions {\n url?: string;\n method?: string;\n args?: RequestData;\n saveAuthnState?: boolean;\n accessToken?: string;\n withCredentials?: boolean;\n storageUtil?: StorageUtil;\n cacheResponse?: boolean;\n headers?: RequestHeaders;\n pollingIntent?: boolean;\n}\n\nexport interface FetchOptions {\n headers?: HeadersInit;\n data?: RequestData;\n withCredentials?: boolean;\n}\n\nexport interface FetchResponse {\n headers: {\n get(key: string): string;\n };\n json(): Promise<object>;\n text(): Promise<string>;\n}\n\nexport interface HttpResponse {\n responseText: string;\n status: number;\n responseType?: string;\n responseJSON?: {\n [propName: string]: any;\n };\n headers: HeadersInit;\n}\n\nexport type HttpRequestClient = (method: string, url: string, options: FetchOptions) => Promise<HttpResponse>;\n\n// HTTP API\nexport interface HttpAPI {\n setRequestHeader(name: string, value: string): void;\n}\n\n// options that can be passed to AuthJS\nexport interface OktaAuthHttpOptions extends OktaAuthStorageOptions \n{\n issuer?: string;\n transformErrorXHR?: (xhr: object) => any;\n headers?: object;\n httpRequestClient?: HttpRequestClient;\n httpRequestInterceptors?: ((request: RequestOptions) => void)[];\n pollDelay?: number;\n}\n\n// an instance of AuthJS with HTTP capabilities\nexport interface OktaAuthHttpInterface\n<\n S extends StorageManagerInterface = StorageManagerInterface,\n O extends OktaAuthHttpOptions = OktaAuthHttpOptions,\n> \n extends OktaAuthStorageInterface<S, O>\n{\n _oktaUserAgent: OktaUserAgent;\n http: HttpAPI;\n \n setHeaders(headers): void;\n getIssuerOrigin(): string;\n webfinger(opts): Promise<object>;\n}\n"],"mappings":""}
|
package/cjs/myaccount/request.js
CHANGED
|
@@ -11,7 +11,7 @@ async function sendRequest(oktaAuth, options, TransactionClass = _Base.default)
|
|
|
11
11
|
const {
|
|
12
12
|
accessToken: accessTokenObj
|
|
13
13
|
} = oktaAuth.tokenManager.getTokensSync();
|
|
14
|
-
const
|
|
14
|
+
const atToken = options.accessToken || accessTokenObj;
|
|
15
15
|
const issuer = oktaAuth.getIssuerOrigin();
|
|
16
16
|
const {
|
|
17
17
|
url,
|
|
@@ -19,20 +19,39 @@ async function sendRequest(oktaAuth, options, TransactionClass = _Base.default)
|
|
|
19
19
|
payload
|
|
20
20
|
} = options;
|
|
21
21
|
const requestUrl = url.startsWith(issuer) ? url : `${issuer}${url}`;
|
|
22
|
-
if (!
|
|
22
|
+
if (!atToken) {
|
|
23
23
|
throw new _errors.AuthSdkError('AccessToken is required to request MyAccount API endpoints.');
|
|
24
24
|
}
|
|
25
|
-
|
|
25
|
+
let accessToken = atToken;
|
|
26
|
+
const httpOptions = {
|
|
26
27
|
headers: {
|
|
27
28
|
'Accept': '*/*;okta-version=1.0.0'
|
|
28
29
|
},
|
|
29
|
-
accessToken,
|
|
30
30
|
url: requestUrl,
|
|
31
31
|
method,
|
|
32
32
|
...(payload && {
|
|
33
33
|
args: payload
|
|
34
34
|
})
|
|
35
|
-
}
|
|
35
|
+
};
|
|
36
|
+
if (oktaAuth.options.dpop) {
|
|
37
|
+
if (typeof accessToken === 'string') {
|
|
38
|
+
throw new _errors.AuthSdkError('AccessToken object must be provided when using dpop');
|
|
39
|
+
}
|
|
40
|
+
const {
|
|
41
|
+
Authorization,
|
|
42
|
+
Dpop
|
|
43
|
+
} = await oktaAuth.getDPoPAuthorizationHeaders({
|
|
44
|
+
method,
|
|
45
|
+
url: requestUrl,
|
|
46
|
+
accessToken
|
|
47
|
+
});
|
|
48
|
+
httpOptions.headers.Authorization = Authorization;
|
|
49
|
+
httpOptions.headers.Dpop = Dpop;
|
|
50
|
+
} else {
|
|
51
|
+
accessToken = typeof accessToken === 'string' ? accessToken : accessToken.accessToken;
|
|
52
|
+
httpOptions.accessToken = accessToken;
|
|
53
|
+
}
|
|
54
|
+
const res = await (0, _http.httpRequest)(oktaAuth, httpOptions);
|
|
36
55
|
let ret;
|
|
37
56
|
if (Array.isArray(res)) {
|
|
38
57
|
ret = res.map(item => new TransactionClass(oktaAuth, {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request.js","names":["sendRequest","oktaAuth","options","TransactionClass","BaseTransaction","accessToken","accessTokenObj","tokenManager","getTokensSync","issuer","getIssuerOrigin","url","method","payload","requestUrl","startsWith","AuthSdkError","
|
|
1
|
+
{"version":3,"file":"request.js","names":["sendRequest","oktaAuth","options","TransactionClass","BaseTransaction","accessToken","accessTokenObj","tokenManager","getTokensSync","atToken","issuer","getIssuerOrigin","url","method","payload","requestUrl","startsWith","AuthSdkError","httpOptions","headers","args","dpop","Authorization","Dpop","getDPoPAuthorizationHeaders","res","httpRequest","ret","Array","isArray","map","item","generateRequestFnFromLinks","methodName","links","toLowerCase","link","self","href","hints","allow"],"sources":["../../../lib/myaccount/request.ts"],"sourcesContent":["import { \n default as BaseTransaction,\n TransactionType,\n TransactionLinks\n} from './transactions/Base';\nimport { httpRequest } from '../http';\nimport { AuthSdkError } from '../errors';\nimport { MyAccountRequestOptions as RequestOptions } from './types';\nimport { RequestOptions as HttpRequestOptions } from '../http/types';\nimport { AccessToken, OktaAuthOAuthInterface } from '../oidc/types';\n\ntype SendRequestOptions = RequestOptions & {\n url: string;\n method: string;\n}\n\n/* eslint-disable complexity */\nexport async function sendRequest<\n T extends BaseTransaction = BaseTransaction,\n N extends 'plural' | 'single' = 'single',\n NT = N extends 'plural' ? T[] : T\n> (\n oktaAuth: OktaAuthOAuthInterface, \n options: SendRequestOptions,\n TransactionClass: TransactionType<T> = BaseTransaction as TransactionType<T>,\n): Promise<NT> {\n const {\n accessToken: accessTokenObj\n } = oktaAuth.tokenManager.getTokensSync();\n\n const atToken = options.accessToken || accessTokenObj;\n const issuer = oktaAuth.getIssuerOrigin();\n const { url, method, payload } = options;\n const requestUrl = url.startsWith(issuer!) ? url : `${issuer}${url}`;\n\n if (!atToken) {\n throw new AuthSdkError('AccessToken is required to request MyAccount API endpoints.');\n }\n\n let accessToken: string | AccessToken = atToken;\n\n const httpOptions: HttpRequestOptions = {\n headers: { 'Accept': '*/*;okta-version=1.0.0' },\n url: requestUrl,\n method,\n ...(payload && { args: payload })\n };\n\n if (oktaAuth.options.dpop) {\n if (typeof accessToken === 'string') {\n throw new AuthSdkError('AccessToken object must be provided when using dpop');\n }\n\n const { Authorization, Dpop } = await oktaAuth.getDPoPAuthorizationHeaders({\n method,\n url: requestUrl,\n accessToken\n });\n httpOptions.headers!.Authorization = Authorization;\n httpOptions.headers!.Dpop = Dpop;\n }\n else {\n accessToken = typeof accessToken === 'string' ? accessToken : accessToken.accessToken;\n httpOptions.accessToken = accessToken;\n }\n\n const res = await httpRequest(oktaAuth, httpOptions);\n\n let ret: T | T[];\n if (Array.isArray(res)) {\n ret = res.map(item => new TransactionClass(oktaAuth, { \n res: item, \n accessToken\n }));\n } else {\n ret = new TransactionClass(oktaAuth, { \n res, \n accessToken\n });\n }\n return ret as NT;\n}\n/* eslint-enable complexity */\n\nexport type GenerateRequestFnFromLinksOptions = {\n oktaAuth: OktaAuthOAuthInterface;\n accessToken: string | AccessToken;\n methodName: string;\n links: TransactionLinks;\n}\n\ntype IRequestFnFromLinks<T extends BaseTransaction> = (payload?) => Promise<T>;\n\nexport function generateRequestFnFromLinks<T extends BaseTransaction>(\n {\n oktaAuth, \n accessToken,\n methodName,\n links,\n }: GenerateRequestFnFromLinksOptions,\n TransactionClass: TransactionType<T> = BaseTransaction as TransactionType<T>,\n): IRequestFnFromLinks<T> {\n for (const method of ['GET', 'POST', 'PUT', 'DELETE']) {\n if (method.toLowerCase() === methodName) {\n const link = links.self;\n return (async (payload?) => sendRequest<T, 'single'>(oktaAuth, {\n accessToken,\n url: link.href,\n method,\n payload,\n }, TransactionClass));\n }\n }\n \n const link = links[methodName];\n if (!link) {\n throw new AuthSdkError(`No link is found with methodName: ${methodName}`);\n }\n\n return (async (payload?) => sendRequest<T, 'single'>(oktaAuth, {\n accessToken,\n url: link.href,\n method: link.hints!.allow![0],\n payload,\n }, TransactionClass));\n}\n"],"mappings":";;;;;AAAA;AAKA;AACA;AAUA;AACO,eAAeA,WAAW,CAK/BC,QAAgC,EAChCC,OAA2B,EAC3BC,gBAAoC,GAAGC,aAAqC,EAC/D;EACb,MAAM;IACJC,WAAW,EAAEC;EACf,CAAC,GAAGL,QAAQ,CAACM,YAAY,CAACC,aAAa,EAAE;EAEzC,MAAMC,OAAO,GAAGP,OAAO,CAACG,WAAW,IAAIC,cAAc;EACrD,MAAMI,MAAM,GAAGT,QAAQ,CAACU,eAAe,EAAE;EACzC,MAAM;IAAEC,GAAG;IAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAGZ,OAAO;EACxC,MAAMa,UAAU,GAAGH,GAAG,CAACI,UAAU,CAACN,MAAM,CAAE,GAAGE,GAAG,GAAI,GAAEF,MAAO,GAAEE,GAAI,EAAC;EAEpE,IAAI,CAACH,OAAO,EAAE;IACZ,MAAM,IAAIQ,oBAAY,CAAC,6DAA6D,CAAC;EACvF;EAEA,IAAIZ,WAAiC,GAAGI,OAAO;EAE/C,MAAMS,WAA+B,GAAG;IACtCC,OAAO,EAAE;MAAE,QAAQ,EAAE;IAAyB,CAAC;IAC/CP,GAAG,EAAEG,UAAU;IACfF,MAAM;IACN,IAAIC,OAAO,IAAI;MAAEM,IAAI,EAAEN;IAAQ,CAAC;EAClC,CAAC;EAED,IAAIb,QAAQ,CAACC,OAAO,CAACmB,IAAI,EAAE;IACzB,IAAI,OAAOhB,WAAW,KAAK,QAAQ,EAAE;MACnC,MAAM,IAAIY,oBAAY,CAAC,qDAAqD,CAAC;IAC/E;IAEA,MAAM;MAAEK,aAAa;MAAEC;IAAK,CAAC,GAAG,MAAMtB,QAAQ,CAACuB,2BAA2B,CAAC;MACzEX,MAAM;MACND,GAAG,EAAEG,UAAU;MACfV;IACF,CAAC,CAAC;IACFa,WAAW,CAACC,OAAO,CAAEG,aAAa,GAAGA,aAAa;IAClDJ,WAAW,CAACC,OAAO,CAAEI,IAAI,GAAGA,IAAI;EAClC,CAAC,MACI;IACHlB,WAAW,GAAG,OAAOA,WAAW,KAAK,QAAQ,GAAGA,WAAW,GAAGA,WAAW,CAACA,WAAW;IACrFa,WAAW,CAACb,WAAW,GAAGA,WAAW;EACvC;EAEA,MAAMoB,GAAG,GAAG,MAAM,IAAAC,iBAAW,EAACzB,QAAQ,EAAEiB,WAAW,CAAC;EAEpD,IAAIS,GAAY;EAChB,IAAIC,KAAK,CAACC,OAAO,CAACJ,GAAG,CAAC,EAAE;IACtBE,GAAG,GAAGF,GAAG,CAACK,GAAG,CAACC,IAAI,IAAI,IAAI5B,gBAAgB,CAACF,QAAQ,EAAE;MACnDwB,GAAG,EAAEM,IAAI;MACT1B;IACF,CAAC,CAAC,CAAC;EACL,CAAC,MAAM;IACLsB,GAAG,GAAG,IAAIxB,gBAAgB,CAACF,QAAQ,EAAE;MACnCwB,GAAG;MACHpB;IACF,CAAC,CAAC;EACJ;EACA,OAAOsB,GAAG;AACZ;AACA;;AAWO,SAASK,0BAA0B,CACxC;EACE/B,QAAQ;EACRI,WAAW;EACX4B,UAAU;EACVC;AACiC,CAAC,EACpC/B,gBAAoC,GAAGC,aAAqC,EACpD;EACxB,KAAK,MAAMS,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE;IACrD,IAAIA,MAAM,CAACsB,WAAW,EAAE,KAAKF,UAAU,EAAE;MACvC,MAAMG,IAAI,GAAGF,KAAK,CAACG,IAAI;MACvB,OAAQ,MAAOvB,OAAQ,IAAKd,WAAW,CAAcC,QAAQ,EAAE;QAC7DI,WAAW;QACXO,GAAG,EAAEwB,IAAI,CAACE,IAAI;QACdzB,MAAM;QACNC;MACF,CAAC,EAAEX,gBAAgB,CAAC;IACtB;EACF;EAEA,MAAMiC,IAAI,GAAGF,KAAK,CAACD,UAAU,CAAC;EAC9B,IAAI,CAACG,IAAI,EAAE;IACT,MAAM,IAAInB,oBAAY,CAAE,qCAAoCgB,UAAW,EAAC,CAAC;EAC3E;EAEA,OAAQ,MAAOnB,OAAQ,IAAKd,WAAW,CAAcC,QAAQ,EAAE;IAC7DI,WAAW;IACXO,GAAG,EAAEwB,IAAI,CAACE,IAAI;IACdzB,MAAM,EAAEuB,IAAI,CAACG,KAAK,CAAEC,KAAK,CAAE,CAAC,CAAC;IAC7B1B;EACF,CAAC,EAAEX,gBAAgB,CAAC;AACtB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Base.js","names":["BaseTransaction","constructor","oktaAuth","options","res","headers","rest","Object","keys","forEach","key"],"sources":["../../../../lib/myaccount/transactions/Base.ts"],"sourcesContent":["import { OktaAuthHttpInterface } from '../../http/types';\n\nexport type TransactionLink = {\n href: string;\n hints?: {\n allow?: string[];\n };\n}\n\nexport type TransactionLinks = {\n self: TransactionLink;\n [property: string]: TransactionLink;\n}\n\ntype TransactionOptions = {\n // TODO: move res type to http module\n res: {\n headers: Record<string, string>;\n _links?: Record<string, TransactionLink>;\n [property: string]: unknown;\n };\n accessToken: string;\n};\n\nexport default class BaseTransaction {\n // Deprecated\n headers?: Record<string, string>;\n\n constructor(oktaAuth: OktaAuthHttpInterface, options: TransactionOptions) {\n const { res } = options;\n const { headers, ...rest } = res;\n \n // assign required fields from res\n if (headers) {\n this.headers = headers;\n }\n\n // add all rest fields from res\n Object.keys(rest).forEach(key => {\n if (key === '_links') {\n return;\n }\n this[key] = rest[key];\n });\n }\n}\n\nexport interface TransactionType<T extends BaseTransaction = BaseTransaction> extends Function {\n new (oktaAuth: OktaAuthHttpInterface, options: TransactionOptions): T;\n prototype: T;\n}\n"],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"Base.js","names":["BaseTransaction","constructor","oktaAuth","options","res","headers","rest","Object","keys","forEach","key"],"sources":["../../../../lib/myaccount/transactions/Base.ts"],"sourcesContent":["import { OktaAuthHttpInterface } from '../../http/types';\nimport { AccessToken } from '../../oidc/types';\n\nexport type TransactionLink = {\n href: string;\n hints?: {\n allow?: string[];\n };\n}\n\nexport type TransactionLinks = {\n self: TransactionLink;\n [property: string]: TransactionLink;\n}\n\ntype TransactionOptions = {\n // TODO: move res type to http module\n res: {\n headers: Record<string, string>;\n _links?: Record<string, TransactionLink>;\n [property: string]: unknown;\n };\n accessToken: string | AccessToken;\n};\n\nexport default class BaseTransaction {\n // Deprecated\n headers?: Record<string, string>;\n\n constructor(oktaAuth: OktaAuthHttpInterface, options: TransactionOptions) {\n const { res } = options;\n const { headers, ...rest } = res;\n \n // assign required fields from res\n if (headers) {\n this.headers = headers;\n }\n\n // add all rest fields from res\n Object.keys(rest).forEach(key => {\n if (key === '_links') {\n return;\n }\n this[key] = rest[key];\n });\n }\n}\n\nexport interface TransactionType<T extends BaseTransaction = BaseTransaction> extends Function {\n new (oktaAuth: OktaAuthHttpInterface, options: TransactionOptions): T;\n prototype: T;\n}\n"],"mappings":";;;AAyBe,MAAMA,eAAe,CAAC;EACnC;;EAGAC,WAAW,CAACC,QAA+B,EAAEC,OAA2B,EAAE;IACxE,MAAM;MAAEC;IAAI,CAAC,GAAGD,OAAO;IACvB,MAAM;MAAEE,OAAO;MAAE,GAAGC;IAAK,CAAC,GAAGF,GAAG;;IAEhC;IACA,IAAIC,OAAO,EAAE;MACX,IAAI,CAACA,OAAO,GAAGA,OAAO;IACxB;;IAEA;IACAE,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAACG,OAAO,CAACC,GAAG,IAAI;MAC/B,IAAIA,GAAG,KAAK,QAAQ,EAAE;QACpB;MACF;MACA,IAAI,CAACA,GAAG,CAAC,GAAGJ,IAAI,CAACI,GAAG,CAAC;IACvB,CAAC,CAAC;EACJ;AACF;AAAC;AAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","names":["EmailRole","Status","PasswordStatus"],"sources":["../../../lib/myaccount/types.ts"],"sourcesContent":["import {\n OAuthStorageManagerInterface,\n OAuthTransactionMeta,\n OktaAuthOAuthInterface,\n OktaAuthOAuthOptions,\n PKCETransactionMeta\n} from '../oidc/types';\n\nexport type { \n EmailTransaction, \n EmailStatusTransaction,\n EmailChallengeTransaction,\n PhoneTransaction,\n ProfileTransaction,\n ProfileSchemaTransaction,\n PasswordTransaction,\n BaseTransaction\n} from './transactions';\n\nexport enum EmailRole {\n PRIMARY = 'PRIMARY',\n SECONDARY = 'SECONDARY'\n}\n\nexport enum Status {\n VERIFIED = 'VERIFIED',\n UNVERIFIED = 'UNVERIFIED'\n}\n\nexport enum PasswordStatus {\n NOT_ENROLLED = 'NOT_ENROLLED',\n ACTIVE = 'ACTIVE'\n}\n\nexport type EmailProfile = {\n email: string;\n}\n\nexport type AddEmailPayload = {\n profile: {\n email: string;\n };\n sendEmail: boolean;\n role: EmailRole;\n}\n\nexport type PhoneProfile = {\n profile: {\n phoneNumber: string;\n };\n}\n\nexport type AddPhonePayload = {\n profile: {\n phoneNumber: string;\n };\n sendCode: boolean;\n method: string;\n};\n\nexport type ChallengePhonePayload = {\n method: string;\n}\n\nexport type VerificationPayload = {\n verificationCode: string;\n};\n\nexport type EnrollPasswordPayload = {\n profile: {\n password: string;\n }\n}\n\nexport type UpdatePasswordPayload = {\n profile: {\n password: string;\n currentPassword?: string;\n }\n}\n\nexport type UpdateProfilePayload = {\n profile: {\n firstName?: string;\n lastName?: string;\n email?: string;\n login?: string;\n [property: string]: any;\n };\n};\n\nexport type MyAccountRequestOptions = {\n id?: string;\n emailId?: string;\n challengeId?: string;\n payload?: AddEmailPayload \n | AddPhonePayload \n | ChallengePhonePayload\n | VerificationPayload \n | UpdateProfilePayload\n | EnrollPasswordPayload\n | UpdatePasswordPayload;\n accessToken?: string;\n}\n\nexport type IAPIFunction<T> = (\n oktaAuth: OktaAuthOAuthInterface, \n options?: MyAccountRequestOptions\n) => Promise<T>;\n\nexport interface OktaAuthMyAccountInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions\n> \n extends OktaAuthOAuthInterface<M, S, O>\n{\n myaccount;\n}\n"],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"types.js","names":["EmailRole","Status","PasswordStatus"],"sources":["../../../lib/myaccount/types.ts"],"sourcesContent":["import {\n OAuthStorageManagerInterface,\n OAuthTransactionMeta,\n OktaAuthOAuthInterface,\n OktaAuthOAuthOptions,\n PKCETransactionMeta,\n AccessToken\n} from '../oidc/types';\n\nexport type { \n EmailTransaction, \n EmailStatusTransaction,\n EmailChallengeTransaction,\n PhoneTransaction,\n ProfileTransaction,\n ProfileSchemaTransaction,\n PasswordTransaction,\n BaseTransaction\n} from './transactions';\n\nexport enum EmailRole {\n PRIMARY = 'PRIMARY',\n SECONDARY = 'SECONDARY'\n}\n\nexport enum Status {\n VERIFIED = 'VERIFIED',\n UNVERIFIED = 'UNVERIFIED'\n}\n\nexport enum PasswordStatus {\n NOT_ENROLLED = 'NOT_ENROLLED',\n ACTIVE = 'ACTIVE'\n}\n\nexport type EmailProfile = {\n email: string;\n}\n\nexport type AddEmailPayload = {\n profile: {\n email: string;\n };\n sendEmail: boolean;\n role: EmailRole;\n}\n\nexport type PhoneProfile = {\n profile: {\n phoneNumber: string;\n };\n}\n\nexport type AddPhonePayload = {\n profile: {\n phoneNumber: string;\n };\n sendCode: boolean;\n method: string;\n};\n\nexport type ChallengePhonePayload = {\n method: string;\n}\n\nexport type VerificationPayload = {\n verificationCode: string;\n};\n\nexport type EnrollPasswordPayload = {\n profile: {\n password: string;\n }\n}\n\nexport type UpdatePasswordPayload = {\n profile: {\n password: string;\n currentPassword?: string;\n }\n}\n\nexport type UpdateProfilePayload = {\n profile: {\n firstName?: string;\n lastName?: string;\n email?: string;\n login?: string;\n [property: string]: any;\n };\n};\n\nexport type MyAccountRequestOptions = {\n id?: string;\n emailId?: string;\n challengeId?: string;\n payload?: AddEmailPayload \n | AddPhonePayload \n | ChallengePhonePayload\n | VerificationPayload \n | UpdateProfilePayload\n | EnrollPasswordPayload\n | UpdatePasswordPayload;\n accessToken?: string | AccessToken;\n}\n\nexport type IAPIFunction<T> = (\n oktaAuth: OktaAuthOAuthInterface, \n options?: MyAccountRequestOptions\n) => Promise<T>;\n\nexport interface OktaAuthMyAccountInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions\n> \n extends OktaAuthOAuthInterface<M, S, O>\n{\n myaccount;\n}\n"],"mappings":";;;IAoBYA,SAAS;AAAA;AAAA,WAATA,SAAS;EAATA,SAAS;EAATA,SAAS;AAAA,GAATA,SAAS,yBAATA,SAAS;AAAA,IAKTC,MAAM;AAAA;AAAA,WAANA,MAAM;EAANA,MAAM;EAANA,MAAM;AAAA,GAANA,MAAM,sBAANA,MAAM;AAAA,IAKNC,cAAc;AAAA;AAAA,WAAdA,cAAc;EAAdA,cAAc;EAAdA,cAAc;AAAA,GAAdA,cAAc,8BAAdA,cAAc"}
|