npm - @okta/okta-auth-js - Versions diffs - 7.14.0 → 8.0.0 - Mend

@okta/okta-auth-js 7.14.0 → 8.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4323) hide show

package/cjs/oidc/types/TokenManager.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"TokenManager.js","names":["EVENT_EXPIRED","EVENT_RENEWED","EVENT_ADDED","EVENT_REMOVED","EVENT_ERROR","EVENT_SET_STORAGE"],"sources":["../../../../lib/oidc/types/TokenManager.ts"],"sourcesContent":["/* eslint-disable max-len */\nimport { StorageProvider } from '../../storage/types';\nimport { TokenManagerOptions } from './options';\nimport { AccessToken, IDToken, RefreshToken, Token, Tokens, TokenType } from './Token';\n\nexport interface TokenManagerError {\n errorSummary: string;\n errorCode: string;\n message: string;\n name: string;\n tokenKey: string;\n}\n\nexport declare type AccessTokenCallback = (key: string, token: AccessToken) => void;\nexport declare type IDTokenCallback = (key: string, token: IDToken) => void;\nexport declare type RefreshTokenCallback = (key: string, token: RefreshToken) => void;\n\nexport const EVENT_EXPIRED = 'expired';\nexport const EVENT_RENEWED = 'renewed';\nexport const EVENT_ADDED = 'added';\nexport const EVENT_REMOVED = 'removed';\nexport const EVENT_ERROR = 'error';\nexport const EVENT_SET_STORAGE = 'set_storage';\n\nexport declare type TokenManagerErrorEventHandler = (error: TokenManagerError) => void;\nexport declare type TokenManagerEventHandler = (key: string, token: Token) => void;\nexport declare type TokenManagerRenewEventHandler = (key: string, token: Token, oldtoken: Token) => void;\nexport declare type TokenManagerSetStorageEventHandler = (storage: Tokens) => void;\n\nexport declare type TokenManagerAnyEventHandler = TokenManagerErrorEventHandler \| TokenManagerRenewEventHandler \| TokenManagerSetStorageEventHandler \| TokenManagerEventHandler;\nexport declare type TokenManagerAnyEvent = typeof EVENT_RENEWED \| typeof EVENT_ERROR \| typeof EVENT_SET_STORAGE \| typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED;\n\n// only add methods needed internally\nexport interface TokenManagerInterface {\n on(event: typeof EVENT_RENEWED, handler: TokenManagerRenewEventHandler, context?: object): void;\n on(event: typeof EVENT_ERROR, handler: TokenManagerErrorEventHandler, context?: object): void;\n on(event: typeof EVENT_SET_STORAGE, handler: TokenManagerSetStorageEventHandler, context?: object): void;\n on(event: typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED, handler: TokenManagerEventHandler, context?: object): void;\n\n off(event: typeof EVENT_RENEWED, handler?: TokenManagerRenewEventHandler): void;\n off(event: typeof EVENT_ERROR, handler?: TokenManagerErrorEventHandler): void;\n off(event: typeof EVENT_SET_STORAGE, handler?: TokenManagerSetStorageEventHandler): void;\n off(event: typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED, handler?: TokenManagerEventHandler): void;\n\n clear(): void;\n setExpireEventTimeout(key: string, token: Token): void;\n clearExpireEventTimeout(key: string): void;\n clearExpireEventTimeoutAll(): void;\n emitAdded(key: string, token: Token): void;\n emitError(error: Error): void;\n emitRemoved(key: string, token: Token): void;\n emitRenewed(key: string, token: Token, oldToken?: Token): void;\n renew(key: string): Promise<Token \| undefined>;\n remove(key: string): void;\n hasExpired(token: Token): boolean;\n getExpireTime(token: Token): number;\n\n get(key): Promise<Token \| undefined>;\n getSync(key): Token \| undefined;\n getTokens(): Promise<Tokens>;\n getTokensSync(): Tokens;\n setTokens({ accessToken, idToken, refreshToken }: Tokens, accessTokenCb?: AccessTokenCallback, idTokenCb?: IDTokenCallback, refreshTokenCb?: RefreshTokenCallback): void;\n getStorageKeyByType(type: TokenType): string;\n add(key: any, token: Token): void;\n updateRefreshToken(token: RefreshToken);\n removeRefreshToken(): void;\n clearPendingRemoveTokens(): void;\n\n getOptions(): TokenManagerOptions;\n getStorage(): StorageProvider;\n\n start();\n stop();\n isStarted(): boolean;\n}\n"],"mappings":";;;AAAA;;AAiBO,MAAMA,aAAa,GAAG,SAAS;~~AAAC;AAChC~~,~~MAAMC~~,aAAa,GAAG,SAAS;~~AAAC;AAChC~~,MAAMC,WAAW,GAAG,OAAO;~~AAAC;AAC5B~~,MAAMC,aAAa,GAAG,SAAS;~~AAAC;AAChC~~,MAAMC,WAAW,GAAG,OAAO;~~AAAC;AAC5B~~,MAAMC,iBAAiB,GAAG,aAAa~~;AAAC~~"}
1	+ {"version":3,"file":"TokenManager.js","names":["EVENT_EXPIRED","exports","EVENT_RENEWED","EVENT_ADDED","EVENT_REMOVED","EVENT_ERROR","EVENT_SET_STORAGE"],"sources":["../../../../lib/oidc/types/TokenManager.ts"],"sourcesContent":["/* eslint-disable max-len */\nimport { StorageProvider } from '../../storage/types';\nimport { TokenManagerOptions } from './options';\nimport { AccessToken, IDToken, RefreshToken, Token, Tokens, TokenType } from './Token';\n\nexport interface TokenManagerError {\n errorSummary: string;\n errorCode: string;\n message: string;\n name: string;\n tokenKey: string;\n}\n\nexport declare type AccessTokenCallback = (key: string, token: AccessToken) => void;\nexport declare type IDTokenCallback = (key: string, token: IDToken) => void;\nexport declare type RefreshTokenCallback = (key: string, token: RefreshToken) => void;\n\nexport const EVENT_EXPIRED = 'expired';\nexport const EVENT_RENEWED = 'renewed';\nexport const EVENT_ADDED = 'added';\nexport const EVENT_REMOVED = 'removed';\nexport const EVENT_ERROR = 'error';\nexport const EVENT_SET_STORAGE = 'set_storage';\n\nexport declare type TokenManagerErrorEventHandler = (error: TokenManagerError) => void;\nexport declare type TokenManagerEventHandler = (key: string, token: Token) => void;\nexport declare type TokenManagerRenewEventHandler = (key: string, token: Token, oldtoken: Token) => void;\nexport declare type TokenManagerSetStorageEventHandler = (storage: Tokens) => void;\n\nexport declare type TokenManagerAnyEventHandler = TokenManagerErrorEventHandler \| TokenManagerRenewEventHandler \| TokenManagerSetStorageEventHandler \| TokenManagerEventHandler;\nexport declare type TokenManagerAnyEvent = typeof EVENT_RENEWED \| typeof EVENT_ERROR \| typeof EVENT_SET_STORAGE \| typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED;\n\n// only add methods needed internally\nexport interface TokenManagerInterface {\n on(event: typeof EVENT_RENEWED, handler: TokenManagerRenewEventHandler, context?: object): void;\n on(event: typeof EVENT_ERROR, handler: TokenManagerErrorEventHandler, context?: object): void;\n on(event: typeof EVENT_SET_STORAGE, handler: TokenManagerSetStorageEventHandler, context?: object): void;\n on(event: typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED, handler: TokenManagerEventHandler, context?: object): void;\n\n off(event: typeof EVENT_RENEWED, handler?: TokenManagerRenewEventHandler): void;\n off(event: typeof EVENT_ERROR, handler?: TokenManagerErrorEventHandler): void;\n off(event: typeof EVENT_SET_STORAGE, handler?: TokenManagerSetStorageEventHandler): void;\n off(event: typeof EVENT_EXPIRED \| typeof EVENT_ADDED \| typeof EVENT_REMOVED, handler?: TokenManagerEventHandler): void;\n\n clear(): void;\n setExpireEventTimeout(key: string, token: Token): void;\n clearExpireEventTimeout(key: string): void;\n clearExpireEventTimeoutAll(): void;\n emitAdded(key: string, token: Token): void;\n emitError(error: Error): void;\n emitRemoved(key: string, token: Token): void;\n emitRenewed(key: string, token: Token, oldToken?: Token): void;\n renew(key: string): Promise<Token \| undefined>;\n remove(key: string): void;\n hasExpired(token: Token): boolean;\n getExpireTime(token: Token): number;\n\n get(key): Promise<Token \| undefined>;\n getSync(key): Token \| undefined;\n getTokens(): Promise<Tokens>;\n getTokensSync(): Tokens;\n setTokens({ accessToken, idToken, refreshToken }: Tokens, accessTokenCb?: AccessTokenCallback, idTokenCb?: IDTokenCallback, refreshTokenCb?: RefreshTokenCallback): void;\n getStorageKeyByType(type: TokenType): string;\n add(key: any, token: Token): void;\n updateRefreshToken(token: RefreshToken);\n removeRefreshToken(): void;\n clearPendingRemoveTokens(): void;\n\n getOptions(): TokenManagerOptions;\n getStorage(): StorageProvider;\n\n start();\n stop();\n isStarted(): boolean;\n}\n"],"mappings":";;;AAAA;;AAiBO,MAAMA,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,SAAS;AAC/B,MAAME,aAAa,GAAAD,OAAA,CAAAC,aAAA,GAAG,SAAS;AAC/B,MAAMC,WAAW,GAAAF,OAAA,CAAAE,WAAA,GAAG,OAAO;AAC3B,MAAMC,aAAa,GAAAH,OAAA,CAAAG,aAAA,GAAG,SAAS;AAC/B,MAAMC,WAAW,GAAAJ,OAAA,CAAAI,WAAA,GAAG,OAAO;AAC3B,MAAMC,iBAAiB,GAAAL,OAAA,CAAAK,iBAAA,GAAG,aAAa;;AAU9C","ignoreList":[]}

package/cjs/oidc/types/Transaction.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Transaction.js","names":["isObjectWithProperties","obj","Object","values","length","isOAuthTransactionMeta","redirectUri","responseType","isPKCETransactionMeta","codeVerifier","isIdxTransactionMeta","interactionHandle","isCustomAuthTransactionMeta","isAllStringValues","find","value","undefined","isTransactionMeta"],"sources":["../../../../lib/oidc/types/Transaction.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { IdxTransactionMeta } from '../../idx/types/meta';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\nimport { OAuthStorageManagerInterface } from './storage';\n\nexport interface TransactionManagerOptions\n{\n storageManager?: OAuthStorageManagerInterface;\n enableSharedStorage?: boolean; // default true\n saveNonceCookie?: boolean; // default true\n saveStateCookie?: boolean; // default true\n saveParamsCookie?: boolean; // default true\n saveLastResponse?: boolean; // default true\n}\n\n\nexport type CustomAuthTransactionMeta = Record<string, string \| undefined>;\n\nexport type TransactionMeta =\n IdxTransactionMeta \|\n PKCETransactionMeta \|\n OAuthTransactionMeta \|\n CustomAuthTransactionMeta;\n\n\nfunction isObjectWithProperties(obj) {\n if (!obj \|\| typeof obj !== 'object' \|\| Object.values(obj).length === 0) {\n return false;\n }\n return true;\n}\n\nexport function isOAuthTransactionMeta(obj: any): obj is OAuthTransactionMeta {\n if (!isObjectWithProperties(obj)) {\n return false;\n }\n return !!obj.redirectUri \|\| !!obj.responseType;\n}\n\nexport function isPKCETransactionMeta(obj: any): obj is PKCETransactionMeta {\n if (!isOAuthTransactionMeta(obj)) {\n return false;\n }\n return !!(obj as any).codeVerifier;\n}\n\nexport function isIdxTransactionMeta(obj: any): obj is IdxTransactionMeta {\n if (!isPKCETransactionMeta(obj)) {\n return false;\n }\n return !!(obj as any).interactionHandle;\n}\n\nexport function isCustomAuthTransactionMeta(obj: any): obj is CustomAuthTransactionMeta {\n if (!isObjectWithProperties(obj)) {\n return false;\n }\n const isAllStringValues = Object.values(obj).find((value) => (typeof value !== 'string')) === undefined;\n return isAllStringValues;\n}\n\nexport function isTransactionMeta(obj: any): obj is TransactionMeta {\n if (isOAuthTransactionMeta(obj) \|\| isCustomAuthTransactionMeta(obj)) {\n return true;\n }\n return false;\n}\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA2BA,SAASA,~~sBAAsB~~,CAACC,GAAG,EAAE;EACnC,IAAI,CAACA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAIC,MAAM,CAACC,MAAM,CAACF,GAAG,CAAC,CAACG,MAAM,KAAK,CAAC,EAAE;IACtE,OAAO,KAAK;EACd;EACA,OAAO,IAAI;AACb;AAEO,SAASC,~~sBAAsB~~,CAACJ,GAAQ,EAA+B;EAC5E,IAAI,CAACD,sBAAsB,CAACC,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAACA,GAAG,CAACK,WAAW,IAAI,CAAC,CAACL,GAAG,CAACM,YAAY;AAChD;AAEO,SAASC,~~qBAAqB~~,CAACP,GAAQ,EAA8B;EAC1E,IAAI,CAACI,sBAAsB,CAACJ,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAAEA,GAAG,CAASQ,YAAY;AACpC;AAEO,SAASC,~~oBAAoB~~,CAACT,GAAQ,EAA6B;EACxE,IAAI,CAACO,qBAAqB,CAACP,GAAG,CAAC,EAAE;IAC/B,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAAEA,GAAG,CAASU,iBAAiB;AACzC;AAEO,SAASC,~~2BAA2B~~,CAACX,GAAQ,EAAoC;EACtF,IAAI,CAACD,sBAAsB,CAACC,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,MAAMY,iBAAiB,GAAGX,MAAM,CAACC,MAAM,CAACF,GAAG,CAAC,CAACa,IAAI,CAAEC,KAAK,IAAM,OAAOA,KAAK,KAAK,QAAS,CAAC,KAAKC,SAAS;EACvG,OAAOH,iBAAiB;AAC1B;AAEO,SAASI,~~iBAAiB~~,CAAChB,GAAQ,EAA0B;EAClE,IAAII,sBAAsB,CAACJ,GAAG,CAAC,IAAIW,2BAA2B,CAACX,GAAG,CAAC,EAAE;IACnE,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd"}
1	+ {"version":3,"file":"Transaction.js","names":["isObjectWithProperties","obj","Object","values","length","isOAuthTransactionMeta","redirectUri","responseType","isPKCETransactionMeta","codeVerifier","isIdxTransactionMeta","interactionHandle","isCustomAuthTransactionMeta","isAllStringValues","find","value","undefined","isTransactionMeta"],"sources":["../../../../lib/oidc/types/Transaction.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { IdxTransactionMeta } from '../../idx/types/meta';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\nimport { OAuthStorageManagerInterface } from './storage';\n\nexport interface TransactionManagerOptions\n{\n storageManager?: OAuthStorageManagerInterface;\n enableSharedStorage?: boolean; // default true\n saveNonceCookie?: boolean; // default true\n saveStateCookie?: boolean; // default true\n saveParamsCookie?: boolean; // default true\n saveLastResponse?: boolean; // default true\n}\n\n\nexport type CustomAuthTransactionMeta = Record<string, string \| undefined>;\n\nexport type TransactionMeta =\n IdxTransactionMeta \|\n PKCETransactionMeta \|\n OAuthTransactionMeta \|\n CustomAuthTransactionMeta;\n\n\nfunction isObjectWithProperties(obj) {\n if (!obj \|\| typeof obj !== 'object' \|\| Object.values(obj).length === 0) {\n return false;\n }\n return true;\n}\n\nexport function isOAuthTransactionMeta(obj: any): obj is OAuthTransactionMeta {\n if (!isObjectWithProperties(obj)) {\n return false;\n }\n return !!obj.redirectUri \|\| !!obj.responseType;\n}\n\nexport function isPKCETransactionMeta(obj: any): obj is PKCETransactionMeta {\n if (!isOAuthTransactionMeta(obj)) {\n return false;\n }\n return !!(obj as any).codeVerifier;\n}\n\nexport function isIdxTransactionMeta(obj: any): obj is IdxTransactionMeta {\n if (!isPKCETransactionMeta(obj)) {\n return false;\n }\n return !!(obj as any).interactionHandle;\n}\n\nexport function isCustomAuthTransactionMeta(obj: any): obj is CustomAuthTransactionMeta {\n if (!isObjectWithProperties(obj)) {\n return false;\n }\n const isAllStringValues = Object.values(obj).find((value) => (typeof value !== 'string')) === undefined;\n return isAllStringValues;\n}\n\nexport function isTransactionMeta(obj: any): obj is TransactionMeta {\n if (isOAuthTransactionMeta(obj) \|\| isCustomAuthTransactionMeta(obj)) {\n return true;\n }\n return false;\n}\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA2BA,SAASA,sBAAsBA,CAACC,GAAG,EAAE;EACnC,IAAI,CAACA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAIC,MAAM,CAACC,MAAM,CAACF,GAAG,CAAC,CAACG,MAAM,KAAK,CAAC,EAAE;IACtE,OAAO,KAAK;EACd;EACA,OAAO,IAAI;AACb;AAEO,SAASC,sBAAsBA,CAACJ,GAAQ,EAA+B;EAC5E,IAAI,CAACD,sBAAsB,CAACC,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAACA,GAAG,CAACK,WAAW,IAAI,CAAC,CAACL,GAAG,CAACM,YAAY;AAChD;AAEO,SAASC,qBAAqBA,CAACP,GAAQ,EAA8B;EAC1E,IAAI,CAACI,sBAAsB,CAACJ,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAAEA,GAAG,CAASQ,YAAY;AACpC;AAEO,SAASC,oBAAoBA,CAACT,GAAQ,EAA6B;EACxE,IAAI,CAACO,qBAAqB,CAACP,GAAG,CAAC,EAAE;IAC/B,OAAO,KAAK;EACd;EACA,OAAO,CAAC,CAAEA,GAAG,CAASU,iBAAiB;AACzC;AAEO,SAASC,2BAA2BA,CAACX,GAAQ,EAAoC;EACtF,IAAI,CAACD,sBAAsB,CAACC,GAAG,CAAC,EAAE;IAChC,OAAO,KAAK;EACd;EACA,MAAMY,iBAAiB,GAAGX,MAAM,CAACC,MAAM,CAACF,GAAG,CAAC,CAACa,IAAI,CAAEC,KAAK,IAAM,OAAOA,KAAK,KAAK,QAAS,CAAC,KAAKC,SAAS;EACvG,OAAOH,iBAAiB;AAC1B;AAEO,SAASI,iBAAiBA,CAAChB,GAAQ,EAA0B;EAClE,IAAII,sBAAsB,CAACJ,GAAG,CAAC,IAAIW,2BAA2B,CAACX,GAAG,CAAC,EAAE;IACnE,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd","ignoreList":[]}

package/cjs/oidc/types/TransactionManager.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"TransactionManager.js","names":[],"sources":["../../../../lib/oidc/types/TransactionManager.ts"],"sourcesContent":["import { OAuthTransactionMeta, TransactionMetaOptions } from './meta';\nimport { TransactionManagerOptions, TransactionMeta } from './Transaction';\n\nexport interface ClearTransactionMetaOptions extends TransactionMetaOptions {\n clearSharedStorage?: boolean; // true by default\n clearIdxResponse?: boolean; // true by default\n}\n\nexport interface TransactionManagerInterface {\n clear(options?: ClearTransactionMetaOptions);\n save(meta: OAuthTransactionMeta, options?: TransactionMetaOptions);\n exists(options?: TransactionMetaOptions);\n load(options?: TransactionMetaOptions): TransactionMeta \| null\n}\n\n\nexport interface TransactionManagerConstructor\n<\n TM extends TransactionManagerInterface = TransactionManagerInterface\n>\n{\n new (options: TransactionManagerOptions): TM;\n}\n"],"mappings":""}
1	+ {"version":3,"file":"TransactionManager.js","names":[],"sources":["../../../../lib/oidc/types/TransactionManager.ts"],"sourcesContent":["import { OAuthTransactionMeta, TransactionMetaOptions } from './meta';\nimport { TransactionManagerOptions, TransactionMeta } from './Transaction';\n\nexport interface ClearTransactionMetaOptions extends TransactionMetaOptions {\n clearSharedStorage?: boolean; // true by default\n clearIdxResponse?: boolean; // true by default\n}\n\nexport interface TransactionManagerInterface {\n clear(options?: ClearTransactionMetaOptions);\n save(meta: OAuthTransactionMeta, options?: TransactionMetaOptions);\n exists(options?: TransactionMetaOptions);\n load(options?: TransactionMetaOptions): TransactionMeta \| null\n}\n\n\nexport interface TransactionManagerConstructor\n<\n TM extends TransactionManagerInterface = TransactionManagerInterface\n>\n{\n new (options: TransactionManagerOptions): TM;\n}\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/UserClaims.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"UserClaims.js","names":[],"sources":["../../../../lib/oidc/types/UserClaims.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n /\n\n/\n \n * This interface represents the union of possible known claims that are in an\n * ID Token or returned from the /userinfo response and depend on the\n * response_type and scope parameters in the authorize request\n /\n\n / eslint-disable camelcase */\nexport type CustomUserClaimValue = string \| boolean \| number;\nexport type CustomUserClaim = CustomUserClaimValue \| Record<string, CustomUserClaimValue>;\nexport type CustomUserClaims = Record<string, CustomUserClaim \| CustomUserClaim[]>;\n\nexport type UserClaims<T extends CustomUserClaims = CustomUserClaims> = T & {\n auth_time?: number;\n aud?: string;\n email?: string;\n email_verified?: boolean;\n exp?: number;\n family_name?: string;\n given_name?: string;\n iat?: number;\n iss?: string;\n jti?: string;\n locale?: string;\n name?: string;\n nonce?: string;\n preferred_username?: string;\n sub: string;\n updated_at?: number;\n ver?: number;\n zoneinfo?: string;\n at_hash?: string;\n acr?: string;\n}"],"mappings":""}
1	+ {"version":3,"file":"UserClaims.js","names":[],"sources":["../../../../lib/oidc/types/UserClaims.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n /\n\n/\n \n * This interface represents the union of possible known claims that are in an\n * ID Token or returned from the /userinfo response and depend on the\n * response_type and scope parameters in the authorize request\n /\n\n / eslint-disable camelcase */\nexport type CustomUserClaimValue = string \| boolean \| number;\nexport type CustomUserClaim = CustomUserClaimValue \| Record<string, CustomUserClaimValue>;\nexport type CustomUserClaims = Record<string, CustomUserClaim \| CustomUserClaim[]>;\n\nexport type UserClaims<T extends CustomUserClaims = CustomUserClaims> = T & {\n auth_time?: number;\n aud?: string;\n email?: string;\n email_verified?: boolean;\n exp?: number;\n family_name?: string;\n given_name?: string;\n iat?: number;\n iss?: string;\n jti?: string;\n locale?: string;\n name?: string;\n nonce?: string;\n preferred_username?: string;\n sub: string;\n updated_at?: number;\n ver?: number;\n zoneinfo?: string;\n at_hash?: string;\n acr?: string;\n}"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"api.js","names":[],"sources":["../../../../lib/oidc/types/api.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { JWTObject } from './JWT';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\nimport { CustomUrls, OktaAuthOAuthOptions, SigninWithRedirectOptions, TokenParams, RenewTokensParams } from './options';\nimport { OAuthResponseType } from './proto';\nimport { OAuthStorageManagerInterface } from './storage';\nimport { AccessToken, IDToken, RefreshToken, RevocableToken, Token, Tokens, TokenKind } from './Token';\nimport { TokenManagerInterface } from './TokenManager';\nimport { CustomUserClaims, UserClaims } from './UserClaims';\nimport { TransactionManagerInterface } from './TransactionManager';\nimport { OktaAuthSessionInterface } from '../../session/types';\nimport { Endpoints } from './endpoints';\n\nexport interface PopupParams {\n popupTitle?: string;\n popupWindow?: Window;\n idpPopup?: boolean;\n channel?: BroadcastChannel;\n}\n\nexport interface TokenResponse {\n tokens: Tokens;\n state: string;\n code?: string;\n responseType?: OAuthResponseType \| OAuthResponseType[] \| 'none';\n}\n\nexport interface ParseFromUrlOptions {\n url?: string;\n responseMode?: string;\n}\n\nexport type ParseFromUrlFunction = (options?: string \| ParseFromUrlOptions) => Promise<TokenResponse>;\n\nexport interface ParseFromUrlInterface extends ParseFromUrlFunction {\n _getDocument: () => Document;\n _getLocation: () => Location;\n _getHistory: () => History;\n}\n\nexport type GetWithRedirectFunction = (params?: TokenParams) => Promise<void>;\n\nexport type SetLocationFunction = (loc: string) => void;\n\nexport interface BaseTokenAPI {\n decode(token: string): JWTObject;\n prepareTokenParams(params?: TokenParams): Promise<TokenParams>;\n exchangeCodeForTokens(params: TokenParams, urls?: CustomUrls): Promise<TokenResponse>;\n}\n\nexport interface TokenAPI extends BaseTokenAPI {\n getUserInfo<S extends CustomUserClaims = CustomUserClaims>(\n accessToken?: AccessToken,\n idToken?: IDToken\n ): Promise<UserClaims<S>>;\n getWithRedirect: GetWithRedirectFunction;\n parseFromUrl: ParseFromUrlInterface;\n getWithoutPrompt(params?: TokenParams): Promise<TokenResponse>;\n getWithPopup(params?: TokenParams): Promise<TokenResponse>;\n getWithIDPPopup(params?: TokenParams): { cancel: () => void, promise: Promise<TokenResponse> };\n revoke(token: RevocableToken): Promise<object>;\n renew(token: Token): Promise<Token \| undefined>;\n renewTokens(options?: RenewTokensParams): Promise<Tokens>;\n renewTokensWithRefresh(tokenParams: TokenParams, refreshTokenObject: RefreshToken): Promise<Tokens>;\n verify(token: IDToken, params?: object): Promise<IDToken>;\n isLoginRedirect(): boolean;\n introspect(kind: TokenKind, token?: Token): any; // TODO: make real return type\n}\n\nexport interface TokenVerifyParams {\n clientId: string;\n issuer: string;\n ignoreSignature?: boolean;\n nonce?: string;\n accessToken?: string; // raw access token string\n acrValues?: string;\n}\n\nexport interface IDTokenAPI {\n authorize: {\n _getLocationHref: () => string;\n };\n}\n\nexport interface PkceAPI {\n DEFAULT_CODE_CHALLENGE_METHOD: string;\n generateVerifier(prefix: string): string;\n computeChallenge(str: string): PromiseLike<any>;\n}\n\nexport interface IsAuthenticatedOptions {\n onExpiredToken?: 'renew' \| 'remove' \| 'none';\n}\n\nexport interface SignoutRedirectUrlOptions {\n postLogoutRedirectUri?: string \| null;\n idToken?: IDToken;\n state?: string;\n}\n\nexport interface SignoutOptions extends SignoutRedirectUrlOptions {\n revokeAccessToken?: boolean;\n revokeRefreshToken?: boolean;\n accessToken?: AccessToken;\n refreshToken?: RefreshToken;\n clearTokensBeforeRedirect?: boolean;\n}\n\nexport interface OriginalUriApi {\n getOriginalUri(state?: string): string \| undefined;\n setOriginalUri(originalUri: string, state?: string): void;\n removeOriginalUri(state?: string): void;\n}\n\nexport interface DPoPRequest {\n url: string;\n method: string;\n nonce?: string;\n accessToken?: AccessToken;\n}\n\nexport interface DPoPHeaders {\n Authorization: string;\n Dpop: string;\n}\n\nexport interface MinimalOktaOAuthInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions,\n TM extends TransactionManagerInterface = TransactionManagerInterface\n> \n extends OktaAuthSessionInterface<S, O>\n{\n token: BaseTokenAPI;\n transactionManager: TM;\n\n isPKCE(): boolean;\n isLoginRedirect(): boolean;\n isAuthorizationCodeFlow(): boolean;\n}\n\nexport interface OktaAuthOAuthInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions,\n TM extends TransactionManagerInterface = TransactionManagerInterface\n> \n extends OktaAuthSessionInterface<S, O>,\n OriginalUriApi\n{\n token: TokenAPI;\n tokenManager: TokenManagerInterface;\n pkce: PkceAPI;\n transactionManager: TM;\n endpoints: Endpoints;\n \n isPKCE(): boolean;\n getIdToken(): string \| undefined;\n getAccessToken(): string \| undefined;\n getRefreshToken(): string \| undefined;\n getOrRenewAccessToken(): Promise<string \| null>;\n\n isAuthenticated(options?: IsAuthenticatedOptions): Promise<boolean>;\n signOut(opts?: SignoutOptions): Promise<boolean>;\n isLoginRedirect(): boolean;\n isAuthorizationCodeFlow(): boolean;\n storeTokensFromRedirect(): Promise<void>;\n getUser<T extends CustomUserClaims = CustomUserClaims>(): Promise<UserClaims<T>>;\n signInWithRedirect(opts?: SigninWithRedirectOptions): Promise<void>;\n \n revokeAccessToken(accessToken?: AccessToken): Promise<unknown>;\n revokeRefreshToken(refreshToken?: RefreshToken): Promise<unknown>;\n\n getDPoPAuthorizationHeaders(params: DPoPRequest): Promise<DPoPHeaders>;\n clearDPoPStorage(clearAll: boolean): Promise<void>;\n parseUseDPoPNonceError(headers: HeadersInit): string \| null;\n}\n"],"mappings":""}
1	+ {"version":3,"file":"api.js","names":[],"sources":["../../../../lib/oidc/types/api.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { JWTObject } from './JWT';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\nimport { CustomUrls, OktaAuthOAuthOptions, SigninWithRedirectOptions, TokenParams, RenewTokensParams } from './options';\nimport { OAuthResponseType } from './proto';\nimport { OAuthStorageManagerInterface } from './storage';\nimport { AccessToken, IDToken, RefreshToken, RevocableToken, Token, Tokens, TokenKind } from './Token';\nimport { TokenManagerInterface } from './TokenManager';\nimport { CustomUserClaims, UserClaims } from './UserClaims';\nimport { TransactionManagerInterface } from './TransactionManager';\nimport { OktaAuthSessionInterface } from '../../session/types';\nimport { Endpoints } from './endpoints';\n\nexport interface PopupParams {\n popupTitle?: string;\n popupWindow?: Window;\n idpPopup?: boolean;\n channel?: BroadcastChannel;\n}\n\nexport interface TokenResponse {\n tokens: Tokens;\n state: string;\n code?: string;\n responseType?: OAuthResponseType \| OAuthResponseType[] \| 'none';\n}\n\nexport interface ParseFromUrlOptions {\n url?: string;\n responseMode?: string;\n}\n\nexport type ParseFromUrlFunction = (options?: string \| ParseFromUrlOptions) => Promise<TokenResponse>;\n\nexport interface ParseFromUrlInterface extends ParseFromUrlFunction {\n _getDocument: () => Document;\n _getLocation: () => Location;\n _getHistory: () => History;\n}\n\nexport type GetWithRedirectFunction = (params?: TokenParams) => Promise<void>;\n\nexport type SetLocationFunction = (loc: string) => void;\n\nexport interface BaseTokenAPI {\n decode(token: string): JWTObject;\n prepareTokenParams(params?: TokenParams): Promise<TokenParams>;\n exchangeCodeForTokens(params: TokenParams, urls?: CustomUrls): Promise<TokenResponse>;\n}\n\nexport interface TokenAPI extends BaseTokenAPI {\n getUserInfo<S extends CustomUserClaims = CustomUserClaims>(\n accessToken?: AccessToken,\n idToken?: IDToken\n ): Promise<UserClaims<S>>;\n getWithRedirect: GetWithRedirectFunction;\n parseFromUrl: ParseFromUrlInterface;\n getWithoutPrompt(params?: TokenParams): Promise<TokenResponse>;\n getWithPopup(params?: TokenParams): Promise<TokenResponse>;\n getWithIDPPopup(params?: TokenParams): { cancel: () => void, promise: Promise<TokenResponse> };\n revoke(token: RevocableToken): Promise<object>;\n renew(token: Token): Promise<Token \| undefined>;\n renewTokens(options?: RenewTokensParams): Promise<Tokens>;\n renewTokensWithRefresh(tokenParams: TokenParams, refreshTokenObject: RefreshToken): Promise<Tokens>;\n verify(token: IDToken, params?: object): Promise<IDToken>;\n isLoginRedirect(): boolean;\n introspect(kind: TokenKind, token?: Token): any; // TODO: make real return type\n}\n\nexport interface TokenVerifyParams {\n clientId: string;\n issuer: string;\n ignoreSignature?: boolean;\n nonce?: string;\n accessToken?: string; // raw access token string\n acrValues?: string;\n}\n\nexport interface IDTokenAPI {\n authorize: {\n _getLocationHref: () => string;\n };\n}\n\nexport interface PkceAPI {\n DEFAULT_CODE_CHALLENGE_METHOD: string;\n generateVerifier(prefix: string): string;\n computeChallenge(str: string): PromiseLike<any>;\n}\n\nexport interface IsAuthenticatedOptions {\n onExpiredToken?: 'renew' \| 'remove' \| 'none';\n}\n\nexport interface SignoutRedirectUrlOptions {\n postLogoutRedirectUri?: string \| null;\n idToken?: IDToken;\n state?: string;\n}\n\nexport interface SignoutOptions extends SignoutRedirectUrlOptions {\n revokeAccessToken?: boolean;\n revokeRefreshToken?: boolean;\n accessToken?: AccessToken;\n refreshToken?: RefreshToken;\n clearTokensBeforeRedirect?: boolean;\n}\n\nexport interface OriginalUriApi {\n getOriginalUri(state?: string): string \| undefined;\n setOriginalUri(originalUri: string, state?: string): void;\n removeOriginalUri(state?: string): void;\n}\n\nexport interface DPoPRequest {\n url: string;\n method: string;\n nonce?: string;\n accessToken?: AccessToken;\n}\n\nexport interface DPoPHeaders {\n Authorization: string;\n Dpop: string;\n}\n\nexport interface MinimalOktaOAuthInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions,\n TM extends TransactionManagerInterface = TransactionManagerInterface\n> \n extends OktaAuthSessionInterface<S, O>\n{\n token: BaseTokenAPI;\n transactionManager: TM;\n\n isPKCE(): boolean;\n isLoginRedirect(): boolean;\n isAuthorizationCodeFlow(): boolean;\n}\n\nexport interface OktaAuthOAuthInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta,\n S extends OAuthStorageManagerInterface<M> = OAuthStorageManagerInterface<M>,\n O extends OktaAuthOAuthOptions = OktaAuthOAuthOptions,\n TM extends TransactionManagerInterface = TransactionManagerInterface\n> \n extends OktaAuthSessionInterface<S, O>,\n OriginalUriApi\n{\n token: TokenAPI;\n tokenManager: TokenManagerInterface;\n pkce: PkceAPI;\n transactionManager: TM;\n endpoints: Endpoints;\n \n isPKCE(): boolean;\n getIdToken(): string \| undefined;\n getAccessToken(): string \| undefined;\n getRefreshToken(): string \| undefined;\n getOrRenewAccessToken(): Promise<string \| null>;\n\n isAuthenticated(options?: IsAuthenticatedOptions): Promise<boolean>;\n signOut(opts?: SignoutOptions): Promise<boolean>;\n isLoginRedirect(): boolean;\n isAuthorizationCodeFlow(): boolean;\n storeTokensFromRedirect(): Promise<void>;\n getUser<T extends CustomUserClaims = CustomUserClaims>(): Promise<UserClaims<T>>;\n signInWithRedirect(opts?: SigninWithRedirectOptions): Promise<void>;\n \n revokeAccessToken(accessToken?: AccessToken): Promise<unknown>;\n revokeRefreshToken(refreshToken?: RefreshToken): Promise<unknown>;\n\n getDPoPAuthorizationHeaders(params: DPoPRequest): Promise<DPoPHeaders>;\n clearDPoPStorage(clearAll: boolean): Promise<void>;\n parseUseDPoPNonceError(headers: HeadersInit): string \| null;\n}\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/endpoints.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"endpoints.js","names":[],"sources":["../../../../lib/oidc/types/endpoints.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport {\n EnrollAuthenticatorOptions\n} from './options';\n\nexport type EnrollAuthenticatorFunction = (params: EnrollAuthenticatorOptions) => void;\n\nexport interface Endpoints {\n authorize: {\n enrollAuthenticator: EnrollAuthenticatorFunction;\n }\n}\n"],"mappings":""}
1	+ {"version":3,"file":"endpoints.js","names":[],"sources":["../../../../lib/oidc/types/endpoints.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport {\n EnrollAuthenticatorOptions\n} from './options';\n\nexport type EnrollAuthenticatorFunction = (params: EnrollAuthenticatorOptions) => void;\n\nexport interface Endpoints {\n authorize: {\n enrollAuthenticator: EnrollAuthenticatorFunction;\n }\n}\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","names":[],"sources":["../../../../lib/oidc/types/index.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n /\n\nexport from './api';\nexport * from './JWT';\nexport * from './meta';\nexport * from './options';\nexport * from './proto';\nexport * from './storage';\nexport * from './Token';\nexport * from './TokenManager';\nexport * from './Transaction';\nexport * from './TransactionManager';\nexport * from './UserClaims';\nexport * from './endpoints';\n"],"mappings":";;AAYA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA"}
1	+ {"version":3,"file":"index.js","names":["_api","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_JWT","_meta","_options","_proto","_storage","_Token","_TokenManager","_Transaction","_TransactionManager","_UserClaims","_endpoints"],"sources":["../../../../lib/oidc/types/index.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n /\n\nexport from './api';\nexport * from './JWT';\nexport * from './meta';\nexport * from './options';\nexport * from './proto';\nexport * from './storage';\nexport * from './Token';\nexport * from './TokenManager';\nexport * from './Transaction';\nexport * from './TransactionManager';\nexport * from './UserClaims';\nexport * from './endpoints';\n"],"mappings":";;AAYA,IAAAA,IAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,IAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,IAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,IAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,IAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,IAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,IAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,IAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,KAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,KAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,KAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,KAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,QAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,QAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,QAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,QAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AACA,IAAAQ,MAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,MAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,MAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,MAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,QAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,QAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,QAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,QAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,MAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,MAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,MAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,MAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,aAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,aAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,aAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,aAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,YAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,YAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,YAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,YAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AACA,IAAAa,mBAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,mBAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,mBAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,mBAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,WAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,WAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,WAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,WAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,UAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,UAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,UAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,UAAA,CAAAf,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/cjs/oidc/types/meta.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"meta.js","names":[],"sources":["../../../../lib/oidc/types/meta.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { CustomUrls, TokenParams } from './options';\n\n// formerly known as \"Redirect OAuth Params\"\nexport interface OAuthTransactionMeta extends\n Pick<TokenParams,\n 'issuer' \|\n 'clientId' \|\n 'redirectUri' \|\n 'responseType' \|\n 'responseMode' \|\n 'scopes' \|\n 'state' \|\n 'pkce' \|\n 'ignoreSignature' \|\n 'nonce' \|\n 'acrValues' \|\n 'enrollAmrValues' \|\n 'extraParams'\n >\n{\n urls: CustomUrls;\n originalUri?: string;\n}\n\nexport interface PKCETransactionMeta extends\n OAuthTransactionMeta,\n Pick<TokenParams,\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'codeVerifier'\n >\n{}\n\nexport interface TransactionMetaOptions extends\n Pick<PKCETransactionMeta,\n 'state' \|\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'codeVerifier'\n >\n{\n muteWarning?: boolean;\n}\n"],"mappings":""}
1	+ {"version":3,"file":"meta.js","names":[],"sources":["../../../../lib/oidc/types/meta.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { CustomUrls, TokenParams } from './options';\n\n// formerly known as \"Redirect OAuth Params\"\nexport interface OAuthTransactionMeta extends\n Pick<TokenParams,\n 'issuer' \|\n 'clientId' \|\n 'redirectUri' \|\n 'responseType' \|\n 'responseMode' \|\n 'scopes' \|\n 'state' \|\n 'pkce' \|\n 'ignoreSignature' \|\n 'nonce' \|\n 'acrValues' \|\n 'enrollAmrValues' \|\n 'extraParams'\n >\n{\n urls: CustomUrls;\n originalUri?: string;\n}\n\nexport interface PKCETransactionMeta extends\n OAuthTransactionMeta,\n Pick<TokenParams,\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'codeVerifier'\n >\n{}\n\nexport interface TransactionMetaOptions extends\n Pick<PKCETransactionMeta,\n 'state' \|\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'codeVerifier'\n >\n{\n muteWarning?: boolean;\n}\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/options.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"options.js","names":[],"sources":["../../../../lib/oidc/types/options.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { OktaAuthOptionsConstructor } from '../../base/types';\nimport { OktaAuthHttpOptions } from '../../http/types';\nimport { SimpleStorage } from '../../storage/types';\nimport { OktaAuthOAuthInterface, SetLocationFunction } from './api';\nimport { OAuthResponseMode, OAuthResponseType } from './proto';\nimport { Tokens } from './Token';\nimport { TransactionManagerOptions } from './Transaction';\n\nexport interface CustomUrls {\n issuer?: string;\n authorizeUrl?: string;\n userinfoUrl?: string;\n tokenUrl?: string;\n revokeUrl?: string;\n logoutUrl?: string;\n}\n\nexport interface TokenParams extends CustomUrls {\n pkce?: boolean;\n clientId?: string;\n redirectUri?: string;\n responseType?: OAuthResponseType \| OAuthResponseType[] \| 'none';\n responseMode?: OAuthResponseMode;\n state?: string;\n nonce?: string;\n scopes?: string[];\n enrollAmrValues?: string \| string[];\n display?: string;\n ignoreSignature?: boolean;\n codeVerifier?: string;\n authorizationCode?: string;\n codeChallenge?: string;\n codeChallengeMethod?: string;\n interactionCode?: string;\n idp?: string;\n idpScope?: string \| string[];\n loginHint?: string;\n maxAge?: string \| number;\n acrValues?: string;\n prompt?: string;\n sessionToken?: string;\n timeout?: number;\n extraParams?: { [propName: string]: string }; // custom authorize query params\n // TODO: remove in the next major version\n popupTitle?: string;\n dpop?: boolean;\n dpopPairId?: string;\n}\n\nexport interface TokenManagerOptions {\n autoRenew?: boolean;\n autoRemove?: boolean;\n clearPendingRemoveTokens?: boolean;\n secure?: boolean;\n storage?: string \| SimpleStorage;\n storageKey?: string;\n expireEarlySeconds?: number;\n syncStorage?: boolean;\n}\n\nexport interface EnrollAuthenticatorOptions extends TokenParams {\n enrollAmrValues: string \| string[];\n acrValues: string;\n}\n\nexport interface SigninWithRedirectOptions extends TokenParams {\n originalUri?: string;\n}\n\nexport interface RenewTokensParams extends TokenParams {\n tokens?: Tokens\n}\n\nexport interface DPoPOptions {\n allowBearerTokens: boolean;\n}\n\nexport interface OktaAuthOAuthOptions extends\n OktaAuthHttpOptions,\n CustomUrls,\n Pick<TokenParams,\n 'issuer' \|\n 'clientId' \|\n 'redirectUri' \|\n 'responseType' \|\n 'responseMode' \|\n 'scopes' \|\n 'state' \|\n 'pkce' \|\n 'ignoreSignature' \|\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'maxAge' \|\n 'acrValues'\n >\n{\n ignoreLifetime?: boolean;\n tokenManager?: TokenManagerOptions;\n postLogoutRedirectUri?: string;\n maxClockSkew?: number;\n restoreOriginalUri?: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n dpop?: boolean;\n dpopOptions?: DPoPOptions;\n\n transactionManager?: TransactionManagerOptions;\n\n // For server-side web applications ONLY!\n clientSecret?: string;\n setLocation?: SetLocationFunction;\n}\n\nexport type OktaAuthOauthOptionsConstructor = OktaAuthOptionsConstructor<OktaAuthOAuthOptions>;\n"],"mappings":""}
1	+ {"version":3,"file":"options.js","names":[],"sources":["../../../../lib/oidc/types/options.ts"],"sourcesContent":["/!\n Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { OktaAuthOptionsConstructor } from '../../base/types';\nimport { OktaAuthHttpOptions } from '../../http/types';\nimport { SimpleStorage } from '../../storage/types';\nimport { OktaAuthOAuthInterface, SetLocationFunction } from './api';\nimport { OAuthResponseMode, OAuthResponseType } from './proto';\nimport { Tokens } from './Token';\nimport { TransactionManagerOptions } from './Transaction';\n\nexport interface CustomUrls {\n issuer?: string;\n authorizeUrl?: string;\n userinfoUrl?: string;\n tokenUrl?: string;\n revokeUrl?: string;\n logoutUrl?: string;\n}\n\nexport interface TokenParams extends CustomUrls {\n pkce?: boolean;\n clientId?: string;\n redirectUri?: string;\n responseType?: OAuthResponseType \| OAuthResponseType[] \| 'none';\n responseMode?: OAuthResponseMode;\n state?: string;\n nonce?: string;\n scopes?: string[];\n enrollAmrValues?: string \| string[];\n display?: string;\n ignoreSignature?: boolean;\n codeVerifier?: string;\n authorizationCode?: string;\n codeChallenge?: string;\n codeChallengeMethod?: string;\n interactionCode?: string;\n idp?: string;\n idpScope?: string \| string[];\n loginHint?: string;\n maxAge?: string \| number;\n acrValues?: string;\n prompt?: string;\n sessionToken?: string;\n timeout?: number;\n extraParams?: { [propName: string]: string }; // custom authorize query params\n // TODO: remove in the next major version\n popupTitle?: string;\n dpop?: boolean;\n dpopPairId?: string;\n}\n\nexport interface TokenManagerOptions {\n autoRenew?: boolean;\n autoRemove?: boolean;\n clearPendingRemoveTokens?: boolean;\n secure?: boolean;\n storage?: string \| SimpleStorage;\n storageKey?: string;\n expireEarlySeconds?: number;\n syncStorage?: boolean;\n}\n\nexport interface EnrollAuthenticatorOptions extends TokenParams {\n enrollAmrValues: string \| string[];\n acrValues: string;\n}\n\nexport interface SigninWithRedirectOptions extends TokenParams {\n originalUri?: string;\n}\n\nexport interface RenewTokensParams extends TokenParams {\n tokens?: Tokens\n}\n\nexport interface DPoPOptions {\n allowBearerTokens: boolean;\n}\n\nexport interface OktaAuthOAuthOptions extends\n OktaAuthHttpOptions,\n CustomUrls,\n Pick<TokenParams,\n 'issuer' \|\n 'clientId' \|\n 'redirectUri' \|\n 'responseType' \|\n 'responseMode' \|\n 'scopes' \|\n 'state' \|\n 'pkce' \|\n 'ignoreSignature' \|\n 'codeChallenge' \|\n 'codeChallengeMethod' \|\n 'maxAge' \|\n 'acrValues'\n >\n{\n decodeAccessTokens?: boolean;\n ignoreLifetime?: boolean;\n tokenManager?: TokenManagerOptions;\n postLogoutRedirectUri?: string;\n maxClockSkew?: number;\n restoreOriginalUri?: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n dpop?: boolean;\n dpopOptions?: DPoPOptions;\n\n transactionManager?: TransactionManagerOptions;\n\n // For server-side web applications ONLY!\n clientSecret?: string;\n setLocation?: SetLocationFunction;\n}\n\nexport type OktaAuthOauthOptionsConstructor = OktaAuthOptionsConstructor<OktaAuthOAuthOptions>;\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/proto.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"proto.js","names":[],"sources":["../../../../lib/oidc/types/proto.ts"],"sourcesContent":["/* eslint-disable camelcase /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport interface OAuthParams {\n client_id?: string;\n code_challenge?: string;\n code_challenge_method?: string;\n display?: string;\n idp?: string;\n idp_scope?: string \| string[];\n login_hint?: string;\n max_age?: string \| number;\n nonce?: string;\n prompt?: string;\n redirect_uri?: string;\n response_mode?: string;\n response_type?: string \| string[];\n scope?: string;\n sessionToken?: string;\n state?: string;\n grant_type?: string;\n code?: string;\n interaction_code?: string;\n acr_values?: string;\n enroll_amr_values?: string \| string[];\n}\n\nexport interface OAuthResponse {\n state?: string;\n code?: string;\n interaction_code?: string;\n expires_in?: string;\n token_type?: string;\n access_token?: string;\n id_token?: string;\n refresh_token?: string;\n scope?: string;\n error?: string;\n error_description?: string;\n}\n\nexport interface WellKnownResponse {\n issuer: string;\n authorization_endpoint: string;\n userinfo_endpoint: string;\n jwks_uri: string;\n response_types_supported: string[];\n response_modes_supported: string[];\n grant_types_supported: string[];\n subject_types_supported: string[];\n id_token_signing_alg_values_supported: string[];\n scopes_supported: string[];\n claims_supported: string[];\n introspection_endpoint: string;\n}\n\n\nexport type OAuthResponseMode = 'okta_post_message' \|'fragment' \|'query' \|'form_post';\n\nexport type OAuthResponseType = 'code' \|'token' \|'id_token' \| 'refresh_token';\n"],"mappings":""}
1	+ {"version":3,"file":"proto.js","names":[],"sources":["../../../../lib/oidc/types/proto.ts"],"sourcesContent":["/* eslint-disable camelcase /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport interface OAuthParams {\n client_id?: string;\n code_challenge?: string;\n code_challenge_method?: string;\n display?: string;\n idp?: string;\n idp_scope?: string \| string[];\n login_hint?: string;\n max_age?: string \| number;\n nonce?: string;\n prompt?: string;\n redirect_uri?: string;\n response_mode?: string;\n response_type?: string \| string[];\n scope?: string;\n sessionToken?: string;\n state?: string;\n grant_type?: string;\n code?: string;\n interaction_code?: string;\n acr_values?: string;\n enroll_amr_values?: string \| string[];\n}\n\nexport interface OAuthResponse {\n state?: string;\n code?: string;\n interaction_code?: string;\n expires_in?: string;\n token_type?: string;\n access_token?: string;\n id_token?: string;\n refresh_token?: string;\n scope?: string;\n error?: string;\n error_description?: string;\n}\n\nexport interface WellKnownResponse {\n issuer: string;\n authorization_endpoint: string;\n userinfo_endpoint: string;\n jwks_uri: string;\n response_types_supported: string[];\n response_modes_supported: string[];\n grant_types_supported: string[];\n subject_types_supported: string[];\n id_token_signing_alg_values_supported: string[];\n scopes_supported: string[];\n claims_supported: string[];\n introspection_endpoint: string;\n}\n\n\nexport type OAuthResponseMode = 'okta_post_message' \|'fragment' \|'query' \|'form_post';\n\nexport type OAuthResponseType = 'code' \|'token' \|'id_token' \| 'refresh_token';\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/types/storage.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"storage.js","names":[],"sources":["../../../../lib/oidc/types/storage.ts"],"sourcesContent":["import {\n StorageManagerConstructor,\n StorageManagerInterface,\n StorageOptions,\n StorageProvider\n} from '../../storage/types';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\n\nexport interface TransactionStorage<M extends OAuthTransactionMeta = OAuthTransactionMeta> extends StorageProvider {\n setStorage(obj: M): void;\n getStorage(): M;\n}\n\nexport interface OAuthStorageManagerInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta\n>\nextends StorageManagerInterface\n{\n getTransactionStorage(options?: StorageOptions): TransactionStorage<M>;\n getSharedTansactionStorage(options?: StorageOptions): TransactionStorage<M>;\n getOriginalUriStorage(options?: StorageOptions): TransactionStorage<M>;\n getTokenStorage(options?: StorageOptions): StorageProvider\n}\n\nexport type OAuthStorageManagerConstructor<M extends OAuthTransactionMeta = PKCETransactionMeta>\n = StorageManagerConstructor<OAuthStorageManagerInterface<M>>;\n"],"mappings":""}
1	+ {"version":3,"file":"storage.js","names":[],"sources":["../../../../lib/oidc/types/storage.ts"],"sourcesContent":["import {\n StorageManagerConstructor,\n StorageManagerInterface,\n StorageOptions,\n StorageProvider\n} from '../../storage/types';\nimport { OAuthTransactionMeta, PKCETransactionMeta } from './meta';\n\nexport interface TransactionStorage<M extends OAuthTransactionMeta = OAuthTransactionMeta> extends StorageProvider {\n setStorage(obj: M): void;\n getStorage(): M;\n}\n\nexport interface OAuthStorageManagerInterface\n<\n M extends OAuthTransactionMeta = PKCETransactionMeta\n>\nextends StorageManagerInterface\n{\n getTransactionStorage(options?: StorageOptions): TransactionStorage<M>;\n getSharedTansactionStorage(options?: StorageOptions): TransactionStorage<M>;\n getOriginalUriStorage(options?: StorageOptions): TransactionStorage<M>;\n getTokenStorage(options?: StorageOptions): StorageProvider\n}\n\nexport type OAuthStorageManagerConstructor<M extends OAuthTransactionMeta = PKCETransactionMeta>\n = StorageManagerConstructor<OAuthStorageManagerInterface<M>>;\n"],"mappings":"","ignoreList":[]}

package/cjs/oidc/util/browser.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"browser.js","names":["DEFAULT_TIMEOUT","addListener","eventTarget","name","fn","addEventListener","attachEvent","removeListener","removeEventListener","detachEvent","loadFrame","src","iframe","document","createElement","style","display","body","appendChild","loadPopup","options","title","popupTitle","appearance","window","open","addPostMessageListener","sdk","timeout","state","responseHandler","timeoutId","msgReceivedOrTimeout","Promise","resolve","reject","e","data","origin","getIssuerOrigin","AuthSdkError","setTimeout","finally","clearTimeout","addIDPPopupLisenter","channel","promise","onmessage","event","isTrusted","close"],"sources":["../../../../lib/oidc/util/browser.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* global window, document /\n/ eslint-disable complexity, max-statements */\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface } from '../types';\n\nconst DEFAULT_TIMEOUT = 120000;\n\nexport function addListener(eventTarget, name, fn) {\n if (eventTarget.addEventListener) {\n eventTarget.addEventListener(name, fn);\n } else {\n eventTarget.attachEvent('on' + name, fn);\n }\n}\n\nexport function removeListener(eventTarget, name, fn) {\n if (eventTarget.removeEventListener) {\n eventTarget.removeEventListener(name, fn);\n } else {\n eventTarget.detachEvent('on' + name, fn);\n }\n}\n\nexport function loadFrame(src) {\n var iframe = document.createElement('iframe');\n iframe.style.display = 'none';\n iframe.src = src;\n\n return document.body.appendChild(iframe);\n}\n\nexport function loadPopup(src, options) {\n var title = options.popupTitle \|\| 'External Identity Provider User Authentication';\n var appearance = 'toolbar=no, scrollbars=yes, resizable=yes, ' +\n 'top=100, left=500, width=600, height=600';\n return window.open(src, title, appearance);\n}\n\nexport function addPostMessageListener(sdk: OktaAuthOAuthInterface, timeout, state) {\n var responseHandler;\n var timeoutId;\n var msgReceivedOrTimeout = new Promise(function (resolve, reject) {\n\n responseHandler = function responseHandler(e) {\n if (!e.data \|\| e.data.state !== state) {\n // A message not meant for us\n return;\n }\n\n // Configuration mismatch between saved token and current app instance\n // This may happen if apps with different issuers are running on the same host url\n // If they share the same storage key, they may read and write tokens in the same location.\n // Common when developing against http://localhost\n if (e.origin !== sdk.getIssuerOrigin()) {\n return reject(new AuthSdkError('The request does not match client configuration'));\n }\n resolve(e.data);\n };\n\n addListener(window, 'message', responseHandler);\n\n timeoutId = setTimeout(function () {\n reject(new AuthSdkError('OAuth flow timed out'));\n }, timeout \|\| DEFAULT_TIMEOUT);\n });\n\n return msgReceivedOrTimeout\n .finally(function () {\n clearTimeout(timeoutId);\n removeListener(window, 'message', responseHandler);\n });\n}\n\nexport function addIDPPopupLisenter (\n sdk: OktaAuthOAuthInterface,\n timeout: number \| undefined,\n channel: BroadcastChannel,\n state: string\n) {\n let timeoutId;\n\n const promise = new Promise((resolve, reject) => {\n channel.onmessage = (event) => {\n // ignore invalid or untrusted events\n if (!event.isTrusted \|\| !event.data) {\n return;\n }\n\n if (typeof event.data === 'object' && state === event.data.state) {\n return resolve({ ...event.data });\n }\n\n reject(new AuthSdkError('Unable to complete auth code exchange'));\n };\n\n timeoutId = setTimeout(function () {\n reject(new AuthSdkError('OAuth flow timed out'));\n }, timeout \|\| DEFAULT_TIMEOUT);\n });\n\n return promise\n .finally(() => {\n clearTimeout(timeoutId);\n channel.close();\n });\n}\n"],"mappings":";;;;;;;;AAcA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,~~MAAMA~~,eAAe,GAAG,MAAM;AAEvB,SAASC,~~WAAW~~,CAACC,WAAW,EAAEC,IAAI,EAAEC,EAAE,EAAE;EACjD,IAAIF,WAAW,CAACG,gBAAgB,EAAE;IAChCH,WAAW,CAACG,gBAAgB,CAACF,IAAI,EAAEC,EAAE,CAAC;EACxC,CAAC,MAAM;IACLF,WAAW,CAACI,WAAW,CAAC,IAAI,GAAGH,IAAI,EAAEC,EAAE,CAAC;EAC1C;AACF;AAEO,SAASG,~~cAAc~~,CAACL,WAAW,EAAEC,IAAI,EAAEC,EAAE,EAAE;EACpD,IAAIF,WAAW,CAACM,mBAAmB,EAAE;IACnCN,WAAW,CAACM,mBAAmB,CAACL,IAAI,EAAEC,EAAE,CAAC;EAC3C,CAAC,MAAM;IACLF,WAAW,CAACO,WAAW,CAAC,IAAI,GAAGN,IAAI,EAAEC,EAAE,CAAC;EAC1C;AACF;AAEO,SAASM,~~SAAS~~,CAACC,GAAG,EAAE;EAC7B,IAAIC,MAAM,GAAGC,QAAQ,CAACC,aAAa,CAAC,QAAQ,CAAC;EAC7CF,MAAM,CAACG,KAAK,CAACC,OAAO,GAAG,MAAM;EAC7BJ,MAAM,CAACD,GAAG,GAAGA,GAAG;EAEhB,OAAOE,QAAQ,CAACI,IAAI,CAACC,WAAW,CAACN,MAAM,CAAC;AAC1C;AAEO,SAASO,~~SAAS~~,CAACR,GAAG,EAAES,OAAO,EAAE;EACtC,IAAIC,KAAK,GAAGD,OAAO,CAACE,UAAU,IAAI,gDAAgD;EAClF,IAAIC,UAAU,GAAG,6CAA6C,GAC5D,0CAA0C;EAC5C,OAAOC,MAAM,CAACC,IAAI,CAACd,GAAG,EAAEU,KAAK,EAAEE,UAAU,CAAC;AAC5C;AAEO,SAASG,~~sBAAsB~~,CAACC,GAA2B,EAAEC,OAAO,EAAEC,KAAK,EAAE;EAClF,IAAIC,eAAe;EACnB,IAAIC,SAAS;EACb,IAAIC,oBAAoB,GAAG,IAAIC,OAAO,CAAC,UAAUC,OAAO,EAAEC,MAAM,EAAE;IAEhEL,eAAe,GAAG,SAASA,~~eAAe~~,CAACM,CAAC,EAAE;MAC5C,IAAI,CAACA,CAAC,CAACC,IAAI,IAAID,CAAC,CAACC,IAAI,CAACR,KAAK,KAAKA,KAAK,EAAE;QACrC;QACA;MACF;;MAEA;MACA;MACA;MACA;MACA,IAAIO,CAAC,CAACE,MAAM,KAAKX,GAAG,CAACY,eAAe,~~EAAE~~,EAAE;QACtC,OAAOJ,MAAM,CAAC,IAAIK,oBAAY,CAAC,iDAAiD,CAAC,CAAC;MACpF;MACAN,OAAO,CAACE,CAAC,CAACC,IAAI,CAAC;IACjB,CAAC;IAEDpC,WAAW,CAACuB,MAAM,EAAE,SAAS,EAAEM,eAAe,CAAC;IAE/CC,SAAS,GAAGU,UAAU,CAAC,YAAY;MACjCN,MAAM,CAAC,IAAIK,oBAAY,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,EAAEZ,OAAO,IAAI5B,eAAe,CAAC;EAChC,CAAC,CAAC;EAEF,OAAOgC,oBAAoB,CACxBU,OAAO,CAAC,YAAY;IACnBC,YAAY,CAACZ,SAAS,CAAC;IACvBxB,cAAc,CAACiB,MAAM,EAAE,SAAS,EAAEM,eAAe,CAAC;EACpD,CAAC,CAAC;AACN;AAEO,SAASc,~~mBAAmB~~,CACjCjB,GAA2B,EAC3BC,OAA2B,EAC3BiB,OAAyB,EACzBhB,KAAa,EACb;EACA,IAAIE,SAAS;EAEb,MAAMe,OAAO,GAAG,IAAIb,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IAC/CU,OAAO,CAACE,SAAS,GAAIC,KAAK,IAAK;MAC7B;MACA,IAAI,CAACA,KAAK,CAACC,SAAS,IAAI,CAACD,KAAK,CAACX,IAAI,EAAE;QACnC;MACF;MAEA,IAAI,OAAOW,KAAK,CAACX,IAAI,KAAK,QAAQ,IAAIR,KAAK,KAAKmB,KAAK,CAACX,IAAI,CAACR,KAAK,EAAE;QAChE,OAAOK,OAAO,CAAC;UAAE,GAAGc,KAAK,CAACX;QAAK,CAAC,CAAC;MACnC;MAEAF,MAAM,CAAC,IAAIK,oBAAY,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC;IAEDT,SAAS,GAAGU,UAAU,CAAC,YAAY;MACjCN,MAAM,CAAC,IAAIK,oBAAY,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,EAAEZ,OAAO,IAAI5B,eAAe,CAAC;EAChC,CAAC,CAAC;EAEF,OAAO8C,OAAO,CACbJ,OAAO,CAAC,MAAM;IACbC,YAAY,CAACZ,SAAS,CAAC;IACvBc,OAAO,CAACK,KAAK,~~EAAE~~;EACjB,CAAC,CAAC;AACJ"}
1	+ {"version":3,"file":"browser.js","names":["_errors","require","DEFAULT_TIMEOUT","addListener","eventTarget","name","fn","addEventListener","attachEvent","removeListener","removeEventListener","detachEvent","loadFrame","src","iframe","document","createElement","style","display","body","appendChild","loadPopup","options","title","popupTitle","appearance","window","open","addPostMessageListener","sdk","timeout","state","responseHandler","timeoutId","msgReceivedOrTimeout","Promise","resolve","reject","e","data","origin","getIssuerOrigin","AuthSdkError","setTimeout","finally","clearTimeout","addIDPPopupLisenter","channel","promise","onmessage","event","isTrusted","close"],"sources":["../../../../lib/oidc/util/browser.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* global window, document /\n/ eslint-disable complexity, max-statements */\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface } from '../types';\n\nconst DEFAULT_TIMEOUT = 120000;\n\nexport function addListener(eventTarget, name, fn) {\n if (eventTarget.addEventListener) {\n eventTarget.addEventListener(name, fn);\n } else {\n eventTarget.attachEvent('on' + name, fn);\n }\n}\n\nexport function removeListener(eventTarget, name, fn) {\n if (eventTarget.removeEventListener) {\n eventTarget.removeEventListener(name, fn);\n } else {\n eventTarget.detachEvent('on' + name, fn);\n }\n}\n\nexport function loadFrame(src) {\n var iframe = document.createElement('iframe');\n iframe.style.display = 'none';\n iframe.src = src;\n\n return document.body.appendChild(iframe);\n}\n\nexport function loadPopup(src, options) {\n var title = options.popupTitle \|\| 'External Identity Provider User Authentication';\n var appearance = 'toolbar=no, scrollbars=yes, resizable=yes, ' +\n 'top=100, left=500, width=600, height=600';\n return window.open(src, title, appearance);\n}\n\nexport function addPostMessageListener(sdk: OktaAuthOAuthInterface, timeout, state) {\n var responseHandler;\n var timeoutId;\n var msgReceivedOrTimeout = new Promise(function (resolve, reject) {\n\n responseHandler = function responseHandler(e) {\n if (!e.data \|\| e.data.state !== state) {\n // A message not meant for us\n return;\n }\n\n // Configuration mismatch between saved token and current app instance\n // This may happen if apps with different issuers are running on the same host url\n // If they share the same storage key, they may read and write tokens in the same location.\n // Common when developing against http://localhost\n if (e.origin !== sdk.getIssuerOrigin()) {\n return reject(new AuthSdkError('The request does not match client configuration'));\n }\n resolve(e.data);\n };\n\n addListener(window, 'message', responseHandler);\n\n timeoutId = setTimeout(function () {\n reject(new AuthSdkError('OAuth flow timed out'));\n }, timeout \|\| DEFAULT_TIMEOUT);\n });\n\n return msgReceivedOrTimeout\n .finally(function () {\n clearTimeout(timeoutId);\n removeListener(window, 'message', responseHandler);\n });\n}\n\nexport function addIDPPopupLisenter (\n sdk: OktaAuthOAuthInterface,\n timeout: number \| undefined,\n channel: BroadcastChannel,\n state: string\n) {\n let timeoutId;\n\n const promise = new Promise((resolve, reject) => {\n channel.onmessage = (event) => {\n // ignore invalid or untrusted events\n if (!event.isTrusted \|\| !event.data) {\n return;\n }\n\n if (typeof event.data === 'object' && state === event.data.state) {\n return resolve({ ...event.data });\n }\n\n reject(new AuthSdkError('Unable to complete auth code exchange'));\n };\n\n timeoutId = setTimeout(function () {\n reject(new AuthSdkError('OAuth flow timed out'));\n }, timeout \|\| DEFAULT_TIMEOUT);\n });\n\n return promise\n .finally(() => {\n clearTimeout(timeoutId);\n channel.close();\n });\n}\n"],"mappings":";;;;;;;;AAcA,IAAAA,OAAA,GAAAC,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,MAAMC,eAAe,GAAG,MAAM;AAEvB,SAASC,WAAWA,CAACC,WAAW,EAAEC,IAAI,EAAEC,EAAE,EAAE;EACjD,IAAIF,WAAW,CAACG,gBAAgB,EAAE;IAChCH,WAAW,CAACG,gBAAgB,CAACF,IAAI,EAAEC,EAAE,CAAC;EACxC,CAAC,MAAM;IACLF,WAAW,CAACI,WAAW,CAAC,IAAI,GAAGH,IAAI,EAAEC,EAAE,CAAC;EAC1C;AACF;AAEO,SAASG,cAAcA,CAACL,WAAW,EAAEC,IAAI,EAAEC,EAAE,EAAE;EACpD,IAAIF,WAAW,CAACM,mBAAmB,EAAE;IACnCN,WAAW,CAACM,mBAAmB,CAACL,IAAI,EAAEC,EAAE,CAAC;EAC3C,CAAC,MAAM;IACLF,WAAW,CAACO,WAAW,CAAC,IAAI,GAAGN,IAAI,EAAEC,EAAE,CAAC;EAC1C;AACF;AAEO,SAASM,SAASA,CAACC,GAAG,EAAE;EAC7B,IAAIC,MAAM,GAAGC,QAAQ,CAACC,aAAa,CAAC,QAAQ,CAAC;EAC7CF,MAAM,CAACG,KAAK,CAACC,OAAO,GAAG,MAAM;EAC7BJ,MAAM,CAACD,GAAG,GAAGA,GAAG;EAEhB,OAAOE,QAAQ,CAACI,IAAI,CAACC,WAAW,CAACN,MAAM,CAAC;AAC1C;AAEO,SAASO,SAASA,CAACR,GAAG,EAAES,OAAO,EAAE;EACtC,IAAIC,KAAK,GAAGD,OAAO,CAACE,UAAU,IAAI,gDAAgD;EAClF,IAAIC,UAAU,GAAG,6CAA6C,GAC5D,0CAA0C;EAC5C,OAAOC,MAAM,CAACC,IAAI,CAACd,GAAG,EAAEU,KAAK,EAAEE,UAAU,CAAC;AAC5C;AAEO,SAASG,sBAAsBA,CAACC,GAA2B,EAAEC,OAAO,EAAEC,KAAK,EAAE;EAClF,IAAIC,eAAe;EACnB,IAAIC,SAAS;EACb,IAAIC,oBAAoB,GAAG,IAAIC,OAAO,CAAC,UAAUC,OAAO,EAAEC,MAAM,EAAE;IAEhEL,eAAe,GAAG,SAASA,eAAeA,CAACM,CAAC,EAAE;MAC5C,IAAI,CAACA,CAAC,CAACC,IAAI,IAAID,CAAC,CAACC,IAAI,CAACR,KAAK,KAAKA,KAAK,EAAE;QACrC;QACA;MACF;;MAEA;MACA;MACA;MACA;MACA,IAAIO,CAAC,CAACE,MAAM,KAAKX,GAAG,CAACY,eAAe,CAAC,CAAC,EAAE;QACtC,OAAOJ,MAAM,CAAC,IAAIK,oBAAY,CAAC,iDAAiD,CAAC,CAAC;MACpF;MACAN,OAAO,CAACE,CAAC,CAACC,IAAI,CAAC;IACjB,CAAC;IAEDpC,WAAW,CAACuB,MAAM,EAAE,SAAS,EAAEM,eAAe,CAAC;IAE/CC,SAAS,GAAGU,UAAU,CAAC,YAAY;MACjCN,MAAM,CAAC,IAAIK,oBAAY,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,EAAEZ,OAAO,IAAI5B,eAAe,CAAC;EAChC,CAAC,CAAC;EAEF,OAAOgC,oBAAoB,CACxBU,OAAO,CAAC,YAAY;IACnBC,YAAY,CAACZ,SAAS,CAAC;IACvBxB,cAAc,CAACiB,MAAM,EAAE,SAAS,EAAEM,eAAe,CAAC;EACpD,CAAC,CAAC;AACN;AAEO,SAASc,mBAAmBA,CACjCjB,GAA2B,EAC3BC,OAA2B,EAC3BiB,OAAyB,EACzBhB,KAAa,EACb;EACA,IAAIE,SAAS;EAEb,MAAMe,OAAO,GAAG,IAAIb,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IAC/CU,OAAO,CAACE,SAAS,GAAIC,KAAK,IAAK;MAC7B;MACA,IAAI,CAACA,KAAK,CAACC,SAAS,IAAI,CAACD,KAAK,CAACX,IAAI,EAAE;QACnC;MACF;MAEA,IAAI,OAAOW,KAAK,CAACX,IAAI,KAAK,QAAQ,IAAIR,KAAK,KAAKmB,KAAK,CAACX,IAAI,CAACR,KAAK,EAAE;QAChE,OAAOK,OAAO,CAAC;UAAE,GAAGc,KAAK,CAACX;QAAK,CAAC,CAAC;MACnC;MAEAF,MAAM,CAAC,IAAIK,oBAAY,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC;IAEDT,SAAS,GAAGU,UAAU,CAAC,YAAY;MACjCN,MAAM,CAAC,IAAIK,oBAAY,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,EAAEZ,OAAO,IAAI5B,eAAe,CAAC;EAChC,CAAC,CAAC;EAEF,OAAO8C,OAAO,CACbJ,OAAO,CAAC,MAAM;IACbC,YAAY,CAACZ,SAAS,CAAC;IACvBc,OAAO,CAACK,KAAK,CAAC,CAAC;EACjB,CAAC,CAAC;AACJ","ignoreList":[]}

package/cjs/oidc/util/defaultEnrollAuthenticatorParams.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"defaultEnrollAuthenticatorParams.js","names":["getDefaultEnrollAuthenticatorParams","sdk","clientId","redirectUri","responseMode","state","options","defaultRedirectUri","isBrowser","window","location","href","undefined","removeNils","generateState","responseType","prompt"],"sources":["../../../../lib/oidc/util/defaultEnrollAuthenticatorParams.ts"],"sourcesContent":["\n/* global window /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { generateState } from './oauth';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { isBrowser } from '../../features';\nimport { removeNils } from '../../util';\n\nexport function getDefaultEnrollAuthenticatorParams(sdk: OktaAuthOAuthInterface): TokenParams {\n const {\n clientId,\n redirectUri,\n responseMode,\n state,\n } = sdk.options;\n const defaultRedirectUri = isBrowser() ? window.location.href : undefined;\n return removeNils({\n clientId,\n redirectUri: redirectUri \|\| defaultRedirectUri,\n responseMode,\n state: state \|\| generateState(),\n responseType: 'none',\n prompt: 'enroll_authenticator',\n });\n}"],"mappings":";;;AAcA;AAEA;AACA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,~~SAASA~~,~~mCAAmC~~,CAACC,GAA2B,EAAe;EAC5F,MAAM;IACJC,QAAQ;IACRC,WAAW;IACXC,YAAY;IACZC;EACF,CAAC,GAAGJ,GAAG,CAACK,OAAO;EACf,MAAMC,kBAAkB,GAAG,IAAAC,mBAAS,~~GAAE~~,GAAGC,MAAM,CAACC,QAAQ,CAACC,IAAI,GAAGC,SAAS;EACzE,OAAO,IAAAC,gBAAU,EAAC;IAChBX,QAAQ;IACRC,WAAW,EAAEA,WAAW,IAAII,kBAAkB;IAC9CH,YAAY;IACZC,KAAK,EAAEA,KAAK,IAAI,IAAAS,oBAAa,~~GAAE~~;IAC/BC,YAAY,EAAE,MAAM;IACpBC,MAAM,EAAE;EACV,CAAC,CAAC;AACJ"}
1	+ {"version":3,"file":"defaultEnrollAuthenticatorParams.js","names":["_oauth","require","_features","_util","getDefaultEnrollAuthenticatorParams","sdk","clientId","redirectUri","responseMode","state","options","defaultRedirectUri","isBrowser","window","location","href","undefined","removeNils","generateState","responseType","prompt"],"sources":["../../../../lib/oidc/util/defaultEnrollAuthenticatorParams.ts"],"sourcesContent":["\n/* global window /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { generateState } from './oauth';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { isBrowser } from '../../features';\nimport { removeNils } from '../../util';\n\nexport function getDefaultEnrollAuthenticatorParams(sdk: OktaAuthOAuthInterface): TokenParams {\n const {\n clientId,\n redirectUri,\n responseMode,\n state,\n } = sdk.options;\n const defaultRedirectUri = isBrowser() ? window.location.href : undefined;\n return removeNils({\n clientId,\n redirectUri: redirectUri \|\| defaultRedirectUri,\n responseMode,\n state: state \|\| generateState(),\n responseType: 'none',\n prompt: 'enroll_authenticator',\n });\n}"],"mappings":";;;AAcA,IAAAA,MAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASG,mCAAmCA,CAACC,GAA2B,EAAe;EAC5F,MAAM;IACJC,QAAQ;IACRC,WAAW;IACXC,YAAY;IACZC;EACF,CAAC,GAAGJ,GAAG,CAACK,OAAO;EACf,MAAMC,kBAAkB,GAAG,IAAAC,mBAAS,EAAC,CAAC,GAAGC,MAAM,CAACC,QAAQ,CAACC,IAAI,GAAGC,SAAS;EACzE,OAAO,IAAAC,gBAAU,EAAC;IAChBX,QAAQ;IACRC,WAAW,EAAEA,WAAW,IAAII,kBAAkB;IAC9CH,YAAY;IACZC,KAAK,EAAEA,KAAK,IAAI,IAAAS,oBAAa,EAAC,CAAC;IAC/BC,YAAY,EAAE,MAAM;IACpBC,MAAM,EAAE;EACV,CAAC,CAAC;AACJ","ignoreList":[]}

package/cjs/oidc/util/defaultTokenParams.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"defaultTokenParams.js","names":["getDefaultTokenParams","sdk","pkce","clientId","redirectUri","responseType","responseMode","scopes","acrValues","maxAge","state","ignoreSignature","dpop","options","defaultRedirectUri","isBrowser","window","location","href","undefined","removeNils","generateState","nonce","generateNonce"],"sources":["../../../../lib/oidc/util/defaultTokenParams.ts"],"sourcesContent":["\n/* global window /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { generateNonce, generateState } from './oauth';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { isBrowser } from '../../features';\nimport { removeNils } from '../../util';\n\nexport function getDefaultTokenParams(sdk: OktaAuthOAuthInterface): TokenParams {\n const {\n pkce,\n clientId,\n redirectUri,\n responseType,\n responseMode,\n scopes,\n acrValues,\n maxAge,\n state,\n ignoreSignature,\n dpop\n } = sdk.options;\n const defaultRedirectUri = isBrowser() ? window.location.href : undefined;\n return removeNils({\n pkce,\n clientId,\n redirectUri: redirectUri \|\| defaultRedirectUri,\n responseType: responseType \|\| ['token', 'id_token'],\n responseMode,\n state: state \|\| generateState(),\n nonce: generateNonce(),\n scopes: scopes \|\| ['openid', 'email'],\n acrValues,\n maxAge,\n ignoreSignature,\n dpop,\n });\n}"],"mappings":";;;AAcA;AAEA;AACA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,~~SAASA~~,~~qBAAqB~~,CAACC,GAA2B,EAAe;EAC9E,MAAM;IACJC,IAAI;IACJC,QAAQ;IACRC,WAAW;IACXC,YAAY;IACZC,YAAY;IACZC,MAAM;IACNC,SAAS;IACTC,MAAM;IACNC,KAAK;IACLC,eAAe;IACfC;EACF,CAAC,GAAGX,GAAG,CAACY,OAAO;EACf,MAAMC,kBAAkB,GAAG,IAAAC,mBAAS,~~GAAE~~,GAAGC,MAAM,CAACC,QAAQ,CAACC,IAAI,GAAGC,SAAS;EACzE,OAAO,IAAAC,gBAAU,EAAC;IAChBlB,IAAI;IACJC,QAAQ;IACRC,WAAW,EAAEA,WAAW,IAAIU,kBAAkB;IAC9CT,YAAY,EAAEA,YAAY,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;IACnDC,YAAY;IACZI,KAAK,EAAEA,KAAK,IAAI,IAAAW,oBAAa,~~GAAE~~;IAC/BC,KAAK,EAAE,IAAAC,oBAAa,~~GAAE~~;IACtBhB,MAAM,EAAEA,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;IACrCC,SAAS;IACTC,MAAM;IACNE,eAAe;IACfC;EACF,CAAC,CAAC;AACJ"}
1	+ {"version":3,"file":"defaultTokenParams.js","names":["_oauth","require","_features","_util","getDefaultTokenParams","sdk","pkce","clientId","redirectUri","responseType","responseMode","scopes","acrValues","maxAge","state","ignoreSignature","dpop","options","defaultRedirectUri","isBrowser","window","location","href","undefined","removeNils","generateState","nonce","generateNonce"],"sources":["../../../../lib/oidc/util/defaultTokenParams.ts"],"sourcesContent":["\n/* global window /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { generateNonce, generateState } from './oauth';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { isBrowser } from '../../features';\nimport { removeNils } from '../../util';\n\nexport function getDefaultTokenParams(sdk: OktaAuthOAuthInterface): TokenParams {\n const {\n pkce,\n clientId,\n redirectUri,\n responseType,\n responseMode,\n scopes,\n acrValues,\n maxAge,\n state,\n ignoreSignature,\n dpop\n } = sdk.options;\n const defaultRedirectUri = isBrowser() ? window.location.href : undefined;\n return removeNils({\n pkce,\n clientId,\n redirectUri: redirectUri \|\| defaultRedirectUri,\n responseType: responseType \|\| ['token', 'id_token'],\n responseMode,\n state: state \|\| generateState(),\n nonce: generateNonce(),\n scopes: scopes \|\| ['openid', 'email'],\n acrValues,\n maxAge,\n ignoreSignature,\n dpop,\n });\n}"],"mappings":";;;AAcA,IAAAA,MAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASG,qBAAqBA,CAACC,GAA2B,EAAe;EAC9E,MAAM;IACJC,IAAI;IACJC,QAAQ;IACRC,WAAW;IACXC,YAAY;IACZC,YAAY;IACZC,MAAM;IACNC,SAAS;IACTC,MAAM;IACNC,KAAK;IACLC,eAAe;IACfC;EACF,CAAC,GAAGX,GAAG,CAACY,OAAO;EACf,MAAMC,kBAAkB,GAAG,IAAAC,mBAAS,EAAC,CAAC,GAAGC,MAAM,CAACC,QAAQ,CAACC,IAAI,GAAGC,SAAS;EACzE,OAAO,IAAAC,gBAAU,EAAC;IAChBlB,IAAI;IACJC,QAAQ;IACRC,WAAW,EAAEA,WAAW,IAAIU,kBAAkB;IAC9CT,YAAY,EAAEA,YAAY,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;IACnDC,YAAY;IACZI,KAAK,EAAEA,KAAK,IAAI,IAAAW,oBAAa,EAAC,CAAC;IAC/BC,KAAK,EAAE,IAAAC,oBAAa,EAAC,CAAC;IACtBhB,MAAM,EAAEA,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;IACrCC,SAAS;IACTC,MAAM;IACNE,eAAe;IACfC;EACF,CAAC,CAAC;AACJ","ignoreList":[]}

package/cjs/oidc/util/enrollAuthenticatorMeta.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"enrollAuthenticatorMeta.js","names":["createEnrollAuthenticatorMeta","sdk","params","issuer","options","urls","getOAuthUrls","oauthMeta","clientId","redirectUri","responseType","responseMode","state","acrValues","enrollAmrValues"],"sources":["../../../../lib/oidc/util/enrollAuthenticatorMeta.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\nimport { OAuthTransactionMeta, OktaAuthOAuthInterface, EnrollAuthenticatorOptions } from '../types';\nimport { getOAuthUrls } from './oauth';\n\nexport function createEnrollAuthenticatorMeta(\n sdk: OktaAuthOAuthInterface, \n params: EnrollAuthenticatorOptions\n): OAuthTransactionMeta {\n const issuer = sdk.options.issuer!;\n const urls = getOAuthUrls(sdk, params);\n const oauthMeta: OAuthTransactionMeta = {\n issuer,\n urls,\n clientId: params.clientId!,\n redirectUri: params.redirectUri!,\n responseType: params.responseType!,\n responseMode: params.responseMode!,\n state: params.state!,\n acrValues: params.acrValues,\n enrollAmrValues: params.enrollAmrValues,\n };\n\n return oauthMeta;\n}\n"],"mappings":";;;AAEA;AAFA;;AAIO,~~SAASA~~,~~6BAA6B~~,CAC3CC,GAA2B,EAC3BC,MAAkC,EACZ;EACtB,MAAMC,MAAM,GAAGF,GAAG,CAACG,OAAO,CAACD,MAAO;EAClC,MAAME,IAAI,GAAG,IAAAC,mBAAY,EAACL,GAAG,EAAEC,MAAM,CAAC;EACtC,MAAMK,SAA+B,GAAG;IACtCJ,MAAM;IACNE,IAAI;IACJG,QAAQ,EAAEN,MAAM,CAACM,QAAS;IAC1BC,WAAW,EAAEP,MAAM,CAACO,WAAY;IAChCC,YAAY,EAAER,MAAM,CAACQ,YAAa;IAClCC,YAAY,EAAET,MAAM,CAACS,YAAa;IAClCC,KAAK,EAAEV,MAAM,CAACU,KAAM;IACpBC,SAAS,EAAEX,MAAM,CAACW,SAAS;IAC3BC,eAAe,EAAEZ,MAAM,CAACY;EAC1B,CAAC;EAED,OAAOP,SAAS;AAClB"}
1	+ {"version":3,"file":"enrollAuthenticatorMeta.js","names":["_oauth","require","createEnrollAuthenticatorMeta","sdk","params","issuer","options","urls","getOAuthUrls","oauthMeta","clientId","redirectUri","responseType","responseMode","state","acrValues","enrollAmrValues"],"sources":["../../../../lib/oidc/util/enrollAuthenticatorMeta.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\nimport { OAuthTransactionMeta, OktaAuthOAuthInterface, EnrollAuthenticatorOptions } from '../types';\nimport { getOAuthUrls } from './oauth';\n\nexport function createEnrollAuthenticatorMeta(\n sdk: OktaAuthOAuthInterface, \n params: EnrollAuthenticatorOptions\n): OAuthTransactionMeta {\n const issuer = sdk.options.issuer!;\n const urls = getOAuthUrls(sdk, params);\n const oauthMeta: OAuthTransactionMeta = {\n issuer,\n urls,\n clientId: params.clientId!,\n redirectUri: params.redirectUri!,\n responseType: params.responseType!,\n responseMode: params.responseMode!,\n state: params.state!,\n acrValues: params.acrValues,\n enrollAmrValues: params.enrollAmrValues,\n };\n\n return oauthMeta;\n}\n"],"mappings":";;;AAEA,IAAAA,MAAA,GAAAC,OAAA;AAFA;;AAIO,SAASC,6BAA6BA,CAC3CC,GAA2B,EAC3BC,MAAkC,EACZ;EACtB,MAAMC,MAAM,GAAGF,GAAG,CAACG,OAAO,CAACD,MAAO;EAClC,MAAME,IAAI,GAAG,IAAAC,mBAAY,EAACL,GAAG,EAAEC,MAAM,CAAC;EACtC,MAAMK,SAA+B,GAAG;IACtCJ,MAAM;IACNE,IAAI;IACJG,QAAQ,EAAEN,MAAM,CAACM,QAAS;IAC1BC,WAAW,EAAEP,MAAM,CAACO,WAAY;IAChCC,YAAY,EAAER,MAAM,CAACQ,YAAa;IAClCC,YAAY,EAAET,MAAM,CAACS,YAAa;IAClCC,KAAK,EAAEV,MAAM,CAACU,KAAM;IACpBC,SAAS,EAAEX,MAAM,CAACW,SAAS;IAC3BC,eAAe,EAAEZ,MAAM,CAACY;EAC1B,CAAC;EAED,OAAOP,SAAS;AAClB","ignoreList":[]}

package/cjs/oidc/util/errors.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"errors.js","names":["isInteractionRequiredError","error","name","oauthError","errorCode","isAuthorizationCodeError","sdk","authApiError","errorResponse","xhr","responseJSON","options","pkce","isRefreshTokenInvalidError","isOAuthError","errorSummary"],"sources":["../../../../lib/oidc/util/errors.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaAuthOAuthInterface } from '../types';\nimport { OAuthError, AuthApiError, isOAuthError } from '../../errors';\n\nexport function isInteractionRequiredError(error: Error) {\n if (error.name !== 'OAuthError') {\n return false;\n }\n const oauthError = error as OAuthError;\n return (oauthError.errorCode === 'interaction_required');\n}\n\nexport function isAuthorizationCodeError(sdk: OktaAuthOAuthInterface, error: Error) {\n if (error.name !== 'AuthApiError') {\n return false;\n }\n const authApiError = error as AuthApiError;\n // xhr property doesn't seem to match XMLHttpRequest type\n const errorResponse = authApiError.xhr as unknown as Record<string, unknown>;\n const responseJSON = errorResponse?.responseJSON as Record<string, unknown>;\n return sdk.options.pkce && (responseJSON?.error as string === 'invalid_grant');\n}\n\nexport function isRefreshTokenInvalidError(error: unknown): boolean {\n // error: {\"error\":\"invalid_grant\",\"error_description\":\"The refresh token is invalid or expired.\"}\n return isOAuthError(error) &&\n error.errorCode === 'invalid_grant' &&\n error.errorSummary === 'The refresh token is invalid or expired.';\n}\n"],"mappings":";;;;;AAcA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,~~SAASA~~,~~0BAA0B~~,CAACC,KAAY,EAAE;EACvD,IAAIA,KAAK,CAACC,IAAI,KAAK,YAAY,EAAE;IAC/B,OAAO,KAAK;EACd;EACA,MAAMC,UAAU,GAAGF,KAAmB;EACtC,OAAQE,UAAU,CAACC,SAAS,KAAK,sBAAsB;AACzD;AAEO,SAASC,~~wBAAwB~~,CAACC,GAA2B,EAAEL,KAAY,EAAE;EAClF,IAAIA,KAAK,CAACC,IAAI,KAAK,cAAc,EAAE;IACjC,OAAO,KAAK;EACd;EACA,MAAMK,YAAY,GAAGN,KAAqB;EAC1C;EACA,MAAMO,aAAa,GAAGD,YAAY,CAACE,GAAyC;EAC5E,MAAMC,YAAY,GAAGF,aAAa,EAAEE,YAAuC;EAC3E,OAAOJ,GAAG,CAACK,OAAO,CAACC,IAAI,IAAKF,YAAY,EAAET,KAAK,KAAe,eAAgB;AAChF;AAEO,SAASY,~~0BAA0B~~,CAACZ,KAAc,EAAW;EAClE;EACA,OAAO,IAAAa,oBAAY,EAACb,KAAK,CAAC,IACxBA,KAAK,CAACG,SAAS,KAAK,eAAe,IACnCH,KAAK,CAACc,YAAY,KAAK,0CAA0C;AACrE"}
1	+ {"version":3,"file":"errors.js","names":["_errors","require","isInteractionRequiredError","error","name","oauthError","errorCode","isAuthorizationCodeError","sdk","authApiError","errorResponse","xhr","responseJSON","options","pkce","isRefreshTokenInvalidError","isOAuthError","errorSummary"],"sources":["../../../../lib/oidc/util/errors.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaAuthOAuthInterface } from '../types';\nimport { OAuthError, AuthApiError, isOAuthError } from '../../errors';\n\nexport function isInteractionRequiredError(error: Error) {\n if (error.name !== 'OAuthError') {\n return false;\n }\n const oauthError = error as OAuthError;\n return (oauthError.errorCode === 'interaction_required');\n}\n\nexport function isAuthorizationCodeError(sdk: OktaAuthOAuthInterface, error: Error) {\n if (error.name !== 'AuthApiError') {\n return false;\n }\n const authApiError = error as AuthApiError;\n // xhr property doesn't seem to match XMLHttpRequest type\n const errorResponse = authApiError.xhr as unknown as Record<string, unknown>;\n const responseJSON = errorResponse?.responseJSON as Record<string, unknown>;\n return sdk.options.pkce && (responseJSON?.error as string === 'invalid_grant');\n}\n\nexport function isRefreshTokenInvalidError(error: unknown): boolean {\n // error: {\"error\":\"invalid_grant\",\"error_description\":\"The refresh token is invalid or expired.\"}\n return isOAuthError(error) &&\n error.errorCode === 'invalid_grant' &&\n error.errorSummary === 'The refresh token is invalid or expired.';\n}\n"],"mappings":";;;;;AAcA,IAAAA,OAAA,GAAAC,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASC,0BAA0BA,CAACC,KAAY,EAAE;EACvD,IAAIA,KAAK,CAACC,IAAI,KAAK,YAAY,EAAE;IAC/B,OAAO,KAAK;EACd;EACA,MAAMC,UAAU,GAAGF,KAAmB;EACtC,OAAQE,UAAU,CAACC,SAAS,KAAK,sBAAsB;AACzD;AAEO,SAASC,wBAAwBA,CAACC,GAA2B,EAAEL,KAAY,EAAE;EAClF,IAAIA,KAAK,CAACC,IAAI,KAAK,cAAc,EAAE;IACjC,OAAO,KAAK;EACd;EACA,MAAMK,YAAY,GAAGN,KAAqB;EAC1C;EACA,MAAMO,aAAa,GAAGD,YAAY,CAACE,GAAyC;EAC5E,MAAMC,YAAY,GAAGF,aAAa,EAAEE,YAAuC;EAC3E,OAAOJ,GAAG,CAACK,OAAO,CAACC,IAAI,IAAKF,YAAY,EAAET,KAAK,KAAe,eAAgB;AAChF;AAEO,SAASY,0BAA0BA,CAACZ,KAAc,EAAW;EAClE;EACA,OAAO,IAAAa,oBAAY,EAACb,KAAK,CAAC,IACxBA,KAAK,CAACG,SAAS,KAAK,eAAe,IACnCH,KAAK,CAACc,YAAY,KAAK,0CAA0C;AACrE","ignoreList":[]}

package/cjs/oidc/util/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","names":[],"sources":["../../../../lib/oidc/util/index.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n\n\nexport * from './browser';\nexport * from './defaultTokenParams';\nexport * from './defaultEnrollAuthenticatorParams';\nexport * from './errors';\nexport * from './loginRedirect';\nexport * from './oauth';\nexport * from './oauthMeta';\nexport * from './enrollAuthenticatorMeta';\nimport pkce from './pkce';\nexport { pkce };\nexport * from './prepareTokenParams';\nexport * from './prepareEnrollAuthenticatorParams';\nexport * from './refreshToken';\nexport * from './urlParams';\nexport * from './validateClaims';\nexport * from './validateToken';\n"],"mappings":";;;;;;;;;;;;AAcA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;AAEA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA;AACA;~~AAAA~~;EAAA;EAAA;EAAA;~~EAAA~~;~~IAAA~~;~~IAAA~~;MAAA;IAAA;EAAA;AAAA"}
1	+ {"version":3,"file":"index.js","names":["_browser","require","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_defaultTokenParams","_defaultEnrollAuthenticatorParams","_errors","_loginRedirect","_oauth","_oauthMeta","_enrollAuthenticatorMeta","_pkce","_interopRequireDefault","_prepareTokenParams","_prepareEnrollAuthenticatorParams","_refreshToken","_urlParams","_validateClaims","_validateToken"],"sources":["../../../../lib/oidc/util/index.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n\n\nexport * from './browser';\nexport * from './defaultTokenParams';\nexport * from './defaultEnrollAuthenticatorParams';\nexport * from './errors';\nexport * from './loginRedirect';\nexport * from './oauth';\nexport * from './oauthMeta';\nexport * from './enrollAuthenticatorMeta';\nimport pkce from './pkce';\nexport { pkce };\nexport * from './prepareTokenParams';\nexport * from './prepareEnrollAuthenticatorParams';\nexport * from './refreshToken';\nexport * from './urlParams';\nexport * from './validateClaims';\nexport * from './validateToken';\n"],"mappings":";;;;;;;;;;;;AAcA,IAAAA,QAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,QAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAL,QAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAb,QAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,mBAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,mBAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,mBAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,mBAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,iCAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,iCAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAU,iCAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,iCAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,OAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,OAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAW,OAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,OAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,cAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,cAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAY,cAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,cAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AACA,IAAAa,MAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,MAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAa,MAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,MAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,UAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,UAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAc,UAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,UAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,wBAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,wBAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAe,wBAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,wBAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,KAAA,GAAAC,sBAAA,CAAArB,OAAA;AAEA,IAAAsB,mBAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,mBAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAkB,mBAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,mBAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAmB,iCAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,iCAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAmB,iCAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,iCAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAoB,aAAA,GAAAxB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAsB,aAAA,EAAArB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAoB,aAAA,CAAApB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,aAAA,CAAApB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAqB,UAAA,GAAAzB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAuB,UAAA,EAAAtB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAqB,UAAA,CAAArB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,UAAA,CAAArB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAsB,eAAA,GAAA1B,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAwB,eAAA,EAAAvB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAsB,eAAA,CAAAtB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,eAAA,CAAAtB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAuB,cAAA,GAAA3B,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAyB,cAAA,EAAAxB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAuB,cAAA,CAAAvB,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,cAAA,CAAAvB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/cjs/oidc/util/loginRedirect.js CHANGED Viewed

@@ -26,20 +26,20 @@ exports.isRedirectUri = isRedirectUri;
 /* eslint-disable complexity, max-statements */
 function hasTokensInHash(hash) {
-  return /((id|access)_token=)/i.test(hash);
+  return /[?&#](id|access)_token=/.test(hash);
 }
 // authorization_code
 function hasAuthorizationCode(hashOrSearch) {
-  return /(code=)/i.test(hashOrSearch);
+  return /[?&#]code=/.test(hashOrSearch);
 }
 // interaction_code
 function hasInteractionCode(hashOrSearch) {
-  return /(interaction_code=)/i.test(hashOrSearch);
+  return /[?&#]interaction_code=/.test(hashOrSearch);
 }
 function hasErrorInUrl(hashOrSearch) {
-  return /(error=)/i.test(hashOrSearch) || /(error_description)/i.test(hashOrSearch);
+  return /[?&#]error=/.test(hashOrSearch) || /[?&#]error_description/.test(hashOrSearch);
 }
 function isRedirectUri(uri, sdk) {
   var authParams = sdk.options;

package/cjs/oidc/util/loginRedirect.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"loginRedirect.js","names":["hasTokensInHash","hash","test","hasAuthorizationCode","hashOrSearch","hasInteractionCode","hasErrorInUrl","isRedirectUri","uri","sdk","authParams","options","redirectUri","indexOf","isCodeFlow","pkce","responseType","responseMode","hasResponseType","Array","isArray","length","getHashOrSearch","codeFlow","useQuery","window","location","search","isLoginRedirect","href","hasCode","isInteractionRequired"],"sources":["../../../../lib/oidc/util/loginRedirect.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* global window /\n/ eslint-disable complexity, max-statements /\nimport { OktaAuthOAuthOptions, OktaAuthOAuthInterface, OAuthResponseType } from '../types';\n\nexport function hasTokensInHash(hash: string): boolean {\n return /((id\|access)_token~~=)/i.~~test(hash);\n}\n\n// authorization_code\nexport function hasAuthorizationCode(hashOrSearch: string): boolean {\n return /(code~~=)/i.~~test(hashOrSearch);\n}\n\n// interaction_code\nexport function hasInteractionCode(hashOrSearch: string): boolean {\n return /(interaction_code~~=)/i.~~test(hashOrSearch);\n}\n\nexport function hasErrorInUrl(hashOrSearch: string): boolean {\n return /(error~~=)/i.~~test(hashOrSearch) \|\| /(error_description~~)/i.~~test(hashOrSearch);\n}\n\nexport function isRedirectUri(uri: string, sdk: OktaAuthOAuthInterface): boolean {\n var authParams = sdk.options;\n if (!uri \|\| !authParams.redirectUri) {\n return false;\n }\n return uri.indexOf(authParams.redirectUri) === 0;\n}\n\nexport function isCodeFlow(options: OktaAuthOAuthOptions) {\n return options.pkce \|\| options.responseType === 'code' \|\| options.responseMode === 'query';\n}\n\nexport function hasResponseType(responseType: OAuthResponseType, options: OktaAuthOAuthOptions): boolean {\n let hasResponseType = false;\n if (Array.isArray(options.responseType) && options.responseType.length) {\n hasResponseType = options.responseType.indexOf(responseType) >= 0;\n } else {\n hasResponseType = options.responseType === responseType;\n }\n return hasResponseType;\n}\n\nexport function getHashOrSearch(options: OktaAuthOAuthOptions) {\n var codeFlow = isCodeFlow(options);\n var useQuery = codeFlow && options.responseMode !== 'fragment';\n return useQuery ? window.location.search : window.location.hash;\n}\n\n/\n Check if tokens or a code have been passed back into the url, which happens in\n * the OIDC (including social auth IDP) redirect flow.\n /\nexport function isLoginRedirect (sdk: OktaAuthOAuthInterface) {\n // First check, is this a redirect URI?\n if (!isRedirectUri(window.location.href, sdk)){\n return false;\n }\n\n // The location contains either a code, token, or an error + error_description\n var codeFlow = isCodeFlow(sdk.options);\n var hashOrSearch = getHashOrSearch(sdk.options);\n\n if (hasErrorInUrl(hashOrSearch)) {\n return true;\n }\n\n if (codeFlow) {\n var hasCode = hasAuthorizationCode(hashOrSearch) \|\| hasInteractionCode(hashOrSearch);\n return hasCode;\n }\n\n // implicit flow, will always be hash fragment\n return hasTokensInHash(window.location.hash);\n}\n\n/\n Check if error=interaction_required has been passed back in the url, which happens in\n * the social auth IDP redirect flow.\n */\nexport function isInteractionRequired (sdk: OktaAuthOAuthInterface, hashOrSearch?: string) {\n if (!hashOrSearch) { // web only\n // First check, is this a redirect URI?\n if (!isLoginRedirect(sdk)){\n return false;\n }\n \n hashOrSearch = getHashOrSearch(sdk.options);\n }\n return /(error=interaction_required)/i.test(hashOrSearch);\n}"],"mappings":";;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGO,SAASA,~~eAAe~~,CAACC,IAAY,EAAW;EACrD,OAAO,~~uBAAuB~~,CAACC,IAAI,CAACD,IAAI,CAAC;~~AAC3C~~;;AAEA;AACO,SAASE,~~oBAAoB~~,CAACC,YAAoB,EAAW;EAClE,OAAO,~~UAAU~~,CAACF,IAAI,CAACE,YAAY,CAAC;~~AACtC~~;;AAEA;AACO,SAASC,~~kBAAkB~~,CAACD,YAAoB,EAAW;EAChE,OAAO,~~sBAAsB~~,CAACF,IAAI,CAACE,YAAY,CAAC;~~AAClD~~;AAEO,SAASE,~~aAAa~~,CAACF,YAAoB,EAAW;EAC3D,OAAO,~~WAAW~~,CAACF,IAAI,CAACE,YAAY,CAAC,IAAI,~~sBAAsB~~,CAACF,IAAI,CAACE,YAAY,CAAC;~~AACpF~~;AAEO,SAASG,~~aAAa~~,CAACC,GAAW,EAAEC,GAA2B,EAAW;EAC/E,IAAIC,UAAU,GAAGD,GAAG,CAACE,OAAO;EAC5B,IAAI,CAACH,GAAG,IAAI,CAACE,UAAU,CAACE,WAAW,EAAE;IACnC,OAAO,KAAK;EACd;EACA,OAAOJ,GAAG,CAACK,OAAO,CAACH,UAAU,CAACE,WAAW,CAAC,KAAK,CAAC;AAClD;AAEO,SAASE,~~UAAU~~,CAACH,OAA6B,EAAE;EACxD,OAAOA,OAAO,CAACI,IAAI,IAAIJ,OAAO,CAACK,YAAY,KAAK,MAAM,IAAIL,OAAO,CAACM,YAAY,KAAK,OAAO;AAC5F;AAEO,SAASC,~~eAAe~~,CAACF,YAA+B,EAAEL,OAA6B,EAAW;EACvG,IAAIO,eAAe,GAAG,KAAK;EAC3B,IAAIC,KAAK,CAACC,OAAO,CAACT,OAAO,CAACK,YAAY,CAAC,IAAIL,OAAO,CAACK,YAAY,CAACK,MAAM,EAAE;IACtEH,eAAe,GAAGP,OAAO,CAACK,YAAY,CAACH,OAAO,CAACG,YAAY,CAAC,IAAI,CAAC;EACnE,CAAC,MAAM;IACLE,eAAe,GAAGP,OAAO,CAACK,YAAY,KAAKA,YAAY;EACzD;EACA,OAAOE,eAAe;AACxB;AAEO,SAASI,~~eAAe~~,CAACX,OAA6B,EAAE;EAC7D,IAAIY,QAAQ,GAAGT,UAAU,CAACH,OAAO,CAAC;EAClC,IAAIa,QAAQ,GAAGD,QAAQ,IAAIZ,OAAO,CAACM,YAAY,KAAK,UAAU;EAC9D,OAAOO,QAAQ,GAAGC,MAAM,CAACC,QAAQ,CAACC,MAAM,GAAGF,MAAM,CAACC,QAAQ,CAACzB,IAAI;AACjE;;AAEA;AACA;AACA;AACA;AACO,SAAS2B,~~eAAe~~,CAAEnB,GAA2B,EAAE;EAC5D;EACA,IAAI,CAACF,aAAa,CAACkB,MAAM,CAACC,QAAQ,CAACG,IAAI,EAAEpB,GAAG,CAAC,EAAC;IAC5C,OAAO,KAAK;EACd;;EAEA;EACA,IAAIc,QAAQ,GAAGT,UAAU,CAACL,GAAG,CAACE,OAAO,CAAC;EACtC,IAAIP,YAAY,GAAGkB,eAAe,CAACb,GAAG,CAACE,OAAO,CAAC;EAE/C,IAAIL,aAAa,CAACF,YAAY,CAAC,EAAE;IAC/B,OAAO,IAAI;EACb;EAEA,IAAImB,QAAQ,EAAE;IACZ,IAAIO,OAAO,GAAI3B,oBAAoB,CAACC,YAAY,CAAC,IAAIC,kBAAkB,CAACD,YAAY,CAAC;IACrF,OAAO0B,OAAO;EAChB;;EAEA;EACA,OAAO9B,eAAe,CAACyB,MAAM,CAACC,QAAQ,CAACzB,IAAI,CAAC;AAC9C;;AAEA;AACA;AACA;AACA;AACO,SAAS8B,~~qBAAqB~~,CAAEtB,GAA2B,EAAEL,YAAqB,EAAE;EACzF,IAAI,CAACA,YAAY,EAAE;IAAE;IACnB;IACA,IAAI,CAACwB,eAAe,CAACnB,GAAG,CAAC,EAAC;MACxB,OAAO,KAAK;IACd;IAEAL,YAAY,GAAGkB,eAAe,CAACb,GAAG,CAACE,OAAO,CAAC;EAC7C;EACA,OAAO,+BAA+B,CAACT,IAAI,CAACE,YAAY,CAAC;AAC3D"}
1	+ {"version":3,"file":"loginRedirect.js","names":["hasTokensInHash","hash","test","hasAuthorizationCode","hashOrSearch","hasInteractionCode","hasErrorInUrl","isRedirectUri","uri","sdk","authParams","options","redirectUri","indexOf","isCodeFlow","pkce","responseType","responseMode","hasResponseType","Array","isArray","length","getHashOrSearch","codeFlow","useQuery","window","location","search","isLoginRedirect","href","hasCode","isInteractionRequired"],"sources":["../../../../lib/oidc/util/loginRedirect.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* global window /\n/ eslint-disable complexity, max-statements /\nimport { OktaAuthOAuthOptions, OktaAuthOAuthInterface, OAuthResponseType } from '../types';\n\nexport function hasTokensInHash(hash: string): boolean {\n return /[?&#](id\|access)_token=/.test(hash);\n}\n\n// authorization_code\nexport function hasAuthorizationCode(hashOrSearch: string): boolean {\n return /[?&#]code=/.test(hashOrSearch);\n}\n\n// interaction_code\nexport function hasInteractionCode(hashOrSearch: string): boolean {\n return /[?&#]interaction_code=/.test(hashOrSearch);\n}\n\nexport function hasErrorInUrl(hashOrSearch: string): boolean {\n return /[?&#]error=/.test(hashOrSearch) \|\| /[?&#]error_description/.test(hashOrSearch);\n}\n\nexport function isRedirectUri(uri: string, sdk: OktaAuthOAuthInterface): boolean {\n var authParams = sdk.options;\n if (!uri \|\| !authParams.redirectUri) {\n return false;\n }\n return uri.indexOf(authParams.redirectUri) === 0;\n}\n\nexport function isCodeFlow(options: OktaAuthOAuthOptions) {\n return options.pkce \|\| options.responseType === 'code' \|\| options.responseMode === 'query';\n}\n\nexport function hasResponseType(responseType: OAuthResponseType, options: OktaAuthOAuthOptions): boolean {\n let hasResponseType = false;\n if (Array.isArray(options.responseType) && options.responseType.length) {\n hasResponseType = options.responseType.indexOf(responseType) >= 0;\n } else {\n hasResponseType = options.responseType === responseType;\n }\n return hasResponseType;\n}\n\nexport function getHashOrSearch(options: OktaAuthOAuthOptions) {\n var codeFlow = isCodeFlow(options);\n var useQuery = codeFlow && options.responseMode !== 'fragment';\n return useQuery ? window.location.search : window.location.hash;\n}\n\n/\n Check if tokens or a code have been passed back into the url, which happens in\n * the OIDC (including social auth IDP) redirect flow.\n /\nexport function isLoginRedirect (sdk: OktaAuthOAuthInterface) {\n // First check, is this a redirect URI?\n if (!isRedirectUri(window.location.href, sdk)){\n return false;\n }\n\n // The location contains either a code, token, or an error + error_description\n var codeFlow = isCodeFlow(sdk.options);\n var hashOrSearch = getHashOrSearch(sdk.options);\n\n if (hasErrorInUrl(hashOrSearch)) {\n return true;\n }\n\n if (codeFlow) {\n var hasCode = hasAuthorizationCode(hashOrSearch) \|\| hasInteractionCode(hashOrSearch);\n return hasCode;\n }\n\n // implicit flow, will always be hash fragment\n return hasTokensInHash(window.location.hash);\n}\n\n/\n Check if error=interaction_required has been passed back in the url, which happens in\n * the social auth IDP redirect flow.\n */\nexport function isInteractionRequired (sdk: OktaAuthOAuthInterface, hashOrSearch?: string) {\n if (!hashOrSearch) { // web only\n // First check, is this a redirect URI?\n if (!isLoginRedirect(sdk)){\n return false;\n }\n \n hashOrSearch = getHashOrSearch(sdk.options);\n }\n return /(error=interaction_required)/i.test(hashOrSearch);\n}"],"mappings":";;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGO,SAASA,eAAeA,CAACC,IAAY,EAAW;EACrD,OAAO,yBAAyB,CAACC,IAAI,CAACD,IAAI,CAAC;AAC7C;;AAEA;AACO,SAASE,oBAAoBA,CAACC,YAAoB,EAAW;EAClE,OAAO,YAAY,CAACF,IAAI,CAACE,YAAY,CAAC;AACxC;;AAEA;AACO,SAASC,kBAAkBA,CAACD,YAAoB,EAAW;EAChE,OAAO,wBAAwB,CAACF,IAAI,CAACE,YAAY,CAAC;AACpD;AAEO,SAASE,aAAaA,CAACF,YAAoB,EAAW;EAC3D,OAAO,aAAa,CAACF,IAAI,CAACE,YAAY,CAAC,IAAI,wBAAwB,CAACF,IAAI,CAACE,YAAY,CAAC;AACxF;AAEO,SAASG,aAAaA,CAACC,GAAW,EAAEC,GAA2B,EAAW;EAC/E,IAAIC,UAAU,GAAGD,GAAG,CAACE,OAAO;EAC5B,IAAI,CAACH,GAAG,IAAI,CAACE,UAAU,CAACE,WAAW,EAAE;IACnC,OAAO,KAAK;EACd;EACA,OAAOJ,GAAG,CAACK,OAAO,CAACH,UAAU,CAACE,WAAW,CAAC,KAAK,CAAC;AAClD;AAEO,SAASE,UAAUA,CAACH,OAA6B,EAAE;EACxD,OAAOA,OAAO,CAACI,IAAI,IAAIJ,OAAO,CAACK,YAAY,KAAK,MAAM,IAAIL,OAAO,CAACM,YAAY,KAAK,OAAO;AAC5F;AAEO,SAASC,eAAeA,CAACF,YAA+B,EAAEL,OAA6B,EAAW;EACvG,IAAIO,eAAe,GAAG,KAAK;EAC3B,IAAIC,KAAK,CAACC,OAAO,CAACT,OAAO,CAACK,YAAY,CAAC,IAAIL,OAAO,CAACK,YAAY,CAACK,MAAM,EAAE;IACtEH,eAAe,GAAGP,OAAO,CAACK,YAAY,CAACH,OAAO,CAACG,YAAY,CAAC,IAAI,CAAC;EACnE,CAAC,MAAM;IACLE,eAAe,GAAGP,OAAO,CAACK,YAAY,KAAKA,YAAY;EACzD;EACA,OAAOE,eAAe;AACxB;AAEO,SAASI,eAAeA,CAACX,OAA6B,EAAE;EAC7D,IAAIY,QAAQ,GAAGT,UAAU,CAACH,OAAO,CAAC;EAClC,IAAIa,QAAQ,GAAGD,QAAQ,IAAIZ,OAAO,CAACM,YAAY,KAAK,UAAU;EAC9D,OAAOO,QAAQ,GAAGC,MAAM,CAACC,QAAQ,CAACC,MAAM,GAAGF,MAAM,CAACC,QAAQ,CAACzB,IAAI;AACjE;;AAEA;AACA;AACA;AACA;AACO,SAAS2B,eAAeA,CAAEnB,GAA2B,EAAE;EAC5D;EACA,IAAI,CAACF,aAAa,CAACkB,MAAM,CAACC,QAAQ,CAACG,IAAI,EAAEpB,GAAG,CAAC,EAAC;IAC5C,OAAO,KAAK;EACd;;EAEA;EACA,IAAIc,QAAQ,GAAGT,UAAU,CAACL,GAAG,CAACE,OAAO,CAAC;EACtC,IAAIP,YAAY,GAAGkB,eAAe,CAACb,GAAG,CAACE,OAAO,CAAC;EAE/C,IAAIL,aAAa,CAACF,YAAY,CAAC,EAAE;IAC/B,OAAO,IAAI;EACb;EAEA,IAAImB,QAAQ,EAAE;IACZ,IAAIO,OAAO,GAAI3B,oBAAoB,CAACC,YAAY,CAAC,IAAIC,kBAAkB,CAACD,YAAY,CAAC;IACrF,OAAO0B,OAAO;EAChB;;EAEA;EACA,OAAO9B,eAAe,CAACyB,MAAM,CAACC,QAAQ,CAACzB,IAAI,CAAC;AAC9C;;AAEA;AACA;AACA;AACA;AACO,SAAS8B,qBAAqBA,CAAEtB,GAA2B,EAAEL,YAAqB,EAAE;EACzF,IAAI,CAACA,YAAY,EAAE;IAAE;IACnB;IACA,IAAI,CAACwB,eAAe,CAACnB,GAAG,CAAC,EAAC;MACxB,OAAO,KAAK;IACd;IAEAL,YAAY,GAAGkB,eAAe,CAACb,GAAG,CAACE,OAAO,CAAC;EAC7C;EACA,OAAO,+BAA+B,CAACT,IAAI,CAACE,YAAY,CAAC;AAC3D","ignoreList":[]}

package/cjs/oidc/util/oauth.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"oauth.js","names":["generateState","genRandomString","generateNonce","getIssuer","sdk","options","issuer","removeTrailingSlash","getOAuthBaseUrl","baseUrl","indexOf","getOAuthDomain","domain","split","getOAuthUrls","arguments","length","AuthSdkError","authorizeUrl","userinfoUrl","tokenUrl","logoutUrl","revokeUrl"],"sources":["../../../../lib/oidc/util/oauth.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* eslint-disable complexity, max-statements */\nimport { genRandomString, removeTrailingSlash } from '../../util';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport { OktaAuthOAuthInterface, CustomUrls } from '../types';\n\nexport function generateState() {\n return genRandomString(64);\n}\n\nexport function generateNonce() {\n return genRandomString(64);\n}\n\nfunction getIssuer(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = removeTrailingSlash(options.issuer) \|\| sdk.options.issuer;\n return issuer;\n}\n\nexport function getOAuthBaseUrl(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = getIssuer(sdk, options);\n const baseUrl = issuer.indexOf('/oauth2') > 0 ? issuer : issuer + '/oauth2';\n return baseUrl;\n}\n\nexport function getOAuthDomain(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = getIssuer(sdk, options);\n const domain = issuer.split('/oauth2')[0];\n return domain;\n}\n\nexport function getOAuthUrls(sdk: OktaAuthOAuthInterface, options?: CustomUrls): CustomUrls {\n if (arguments.length > 2) {\n throw new AuthSdkError('As of version 3.0, \"getOAuthUrls\" takes only a single set of options');\n }\n options = options \|\| {};\n\n // Get user-supplied arguments\n var authorizeUrl = removeTrailingSlash(options.authorizeUrl) \|\| sdk.options.authorizeUrl;\n var issuer = getIssuer(sdk, options);\n var userinfoUrl = removeTrailingSlash(options.userinfoUrl) \|\| sdk.options.userinfoUrl;\n var tokenUrl = removeTrailingSlash(options.tokenUrl) \|\| sdk.options.tokenUrl;\n var logoutUrl = removeTrailingSlash(options.logoutUrl) \|\| sdk.options.logoutUrl;\n var revokeUrl = removeTrailingSlash(options.revokeUrl) \|\| sdk.options.revokeUrl;\n\n var baseUrl = getOAuthBaseUrl(sdk, options);\n\n authorizeUrl = authorizeUrl \|\| baseUrl + '/v1/authorize';\n userinfoUrl = userinfoUrl \|\| baseUrl + '/v1/userinfo';\n tokenUrl = tokenUrl \|\| baseUrl + '/v1/token';\n revokeUrl = revokeUrl \|\| baseUrl + '/v1/revoke';\n logoutUrl = logoutUrl \|\| baseUrl + '/v1/logout';\n\n return {\n issuer: issuer,\n authorizeUrl: authorizeUrl,\n userinfoUrl: userinfoUrl,\n tokenUrl: tokenUrl,\n revokeUrl: revokeUrl,\n logoutUrl: logoutUrl\n };\n}\n"],"mappings":";;;;;;;;AAaA;AACA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKO,~~SAASA~~,~~aAAa~~,~~GAAG~~;EAC9B,OAAO,IAAAC,qBAAe,EAAC,EAAE,CAAC;AAC5B;AAEO,SAASC,~~aAAa~~,~~GAAG~~;EAC9B,OAAO,IAAAD,qBAAe,EAAC,EAAE,CAAC;AAC5B;AAEA,SAASE,~~SAAS~~,CAACC,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACxE,MAAMC,MAAM,GAAG,IAAAC,yBAAmB,EAACF,OAAO,CAACC,MAAM,CAAC,IAAIF,GAAG,CAACC,OAAO,CAACC,MAAM;EACxE,OAAOA,MAAM;AACf;AAEO,SAASE,~~eAAe~~,CAACJ,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACrF,MAAMC,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACtC,MAAMI,OAAO,GAAGH,MAAM,CAACI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAGJ,MAAM,GAAGA,MAAM,GAAG,SAAS;EAC3E,OAAOG,OAAO;AAChB;AAEO,SAASE,~~cAAc~~,CAACP,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACpF,MAAMC,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACtC,MAAMO,MAAM,GAAGN,MAAM,CAACO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;EACzC,OAAOD,MAAM;AACf;AAEO,SAASE,~~YAAY~~,CAACV,GAA2B,EAAEC,OAAoB,EAAc;EAC1F,IAAIU,SAAS,CAACC,MAAM,GAAG,CAAC,EAAE;IACxB,MAAM,IAAIC,qBAAY,CAAC,sEAAsE,CAAC;EAChG;EACAZ,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;;EAEvB;EACA,IAAIa,YAAY,GAAG,IAAAX,yBAAmB,EAACF,OAAO,CAACa,YAAY,CAAC,IAAId,GAAG,CAACC,OAAO,CAACa,YAAY;EACxF,IAAIZ,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACpC,IAAIc,WAAW,GAAG,IAAAZ,yBAAmB,EAACF,OAAO,CAACc,WAAW,CAAC,IAAIf,GAAG,CAACC,OAAO,CAACc,WAAW;EACrF,IAAIC,QAAQ,GAAG,IAAAb,yBAAmB,EAACF,OAAO,CAACe,QAAQ,CAAC,IAAIhB,GAAG,CAACC,OAAO,CAACe,QAAQ;EAC5E,IAAIC,SAAS,GAAG,IAAAd,yBAAmB,EAACF,OAAO,CAACgB,SAAS,CAAC,IAAIjB,GAAG,CAACC,OAAO,CAACgB,SAAS;EAC/E,IAAIC,SAAS,GAAG,IAAAf,yBAAmB,EAACF,OAAO,CAACiB,SAAS,CAAC,IAAIlB,GAAG,CAACC,OAAO,CAACiB,SAAS;EAE/E,IAAIb,OAAO,GAAGD,eAAe,CAACJ,GAAG,EAAEC,OAAO,CAAC;EAE3Ca,YAAY,GAAGA,YAAY,IAAIT,OAAO,GAAG,eAAe;EACxDU,WAAW,GAAGA,WAAW,IAAIV,OAAO,GAAG,cAAc;EACrDW,QAAQ,GAAGA,QAAQ,IAAIX,OAAO,GAAG,WAAW;EAC5Ca,SAAS,GAAGA,SAAS,IAAIb,OAAO,GAAG,YAAY;EAC/CY,SAAS,GAAGA,SAAS,IAAIZ,OAAO,GAAG,YAAY;EAE/C,OAAO;IACLH,MAAM,EAAEA,MAAM;IACdY,YAAY,EAAEA,YAAY;IAC1BC,WAAW,EAAEA,WAAW;IACxBC,QAAQ,EAAEA,QAAQ;IAClBE,SAAS,EAAEA,SAAS;IACpBD,SAAS,EAAEA;EACb,CAAC;AACH"}
1	+ {"version":3,"file":"oauth.js","names":["_util","require","_AuthSdkError","_interopRequireDefault","generateState","genRandomString","generateNonce","getIssuer","sdk","options","issuer","removeTrailingSlash","getOAuthBaseUrl","baseUrl","indexOf","getOAuthDomain","domain","split","getOAuthUrls","arguments","length","AuthSdkError","authorizeUrl","userinfoUrl","tokenUrl","logoutUrl","revokeUrl"],"sources":["../../../../lib/oidc/util/oauth.ts"],"sourcesContent":["/!\n Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n/* eslint-disable complexity, max-statements */\nimport { genRandomString, removeTrailingSlash } from '../../util';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport { OktaAuthOAuthInterface, CustomUrls } from '../types';\n\nexport function generateState() {\n return genRandomString(64);\n}\n\nexport function generateNonce() {\n return genRandomString(64);\n}\n\nfunction getIssuer(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = removeTrailingSlash(options.issuer) \|\| sdk.options.issuer;\n return issuer;\n}\n\nexport function getOAuthBaseUrl(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = getIssuer(sdk, options);\n const baseUrl = issuer.indexOf('/oauth2') > 0 ? issuer : issuer + '/oauth2';\n return baseUrl;\n}\n\nexport function getOAuthDomain(sdk: OktaAuthOAuthInterface, options: CustomUrls = {}) {\n const issuer = getIssuer(sdk, options);\n const domain = issuer.split('/oauth2')[0];\n return domain;\n}\n\nexport function getOAuthUrls(sdk: OktaAuthOAuthInterface, options?: CustomUrls): CustomUrls {\n if (arguments.length > 2) {\n throw new AuthSdkError('As of version 3.0, \"getOAuthUrls\" takes only a single set of options');\n }\n options = options \|\| {};\n\n // Get user-supplied arguments\n var authorizeUrl = removeTrailingSlash(options.authorizeUrl) \|\| sdk.options.authorizeUrl;\n var issuer = getIssuer(sdk, options);\n var userinfoUrl = removeTrailingSlash(options.userinfoUrl) \|\| sdk.options.userinfoUrl;\n var tokenUrl = removeTrailingSlash(options.tokenUrl) \|\| sdk.options.tokenUrl;\n var logoutUrl = removeTrailingSlash(options.logoutUrl) \|\| sdk.options.logoutUrl;\n var revokeUrl = removeTrailingSlash(options.revokeUrl) \|\| sdk.options.revokeUrl;\n\n var baseUrl = getOAuthBaseUrl(sdk, options);\n\n authorizeUrl = authorizeUrl \|\| baseUrl + '/v1/authorize';\n userinfoUrl = userinfoUrl \|\| baseUrl + '/v1/userinfo';\n tokenUrl = tokenUrl \|\| baseUrl + '/v1/token';\n revokeUrl = revokeUrl \|\| baseUrl + '/v1/revoke';\n logoutUrl = logoutUrl \|\| baseUrl + '/v1/logout';\n\n return {\n issuer: issuer,\n authorizeUrl: authorizeUrl,\n userinfoUrl: userinfoUrl,\n tokenUrl: tokenUrl,\n revokeUrl: revokeUrl,\n logoutUrl: logoutUrl\n };\n}\n"],"mappings":";;;;;;;;AAaA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,aAAA,GAAAC,sBAAA,CAAAF,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKO,SAASG,aAAaA,CAAA,EAAG;EAC9B,OAAO,IAAAC,qBAAe,EAAC,EAAE,CAAC;AAC5B;AAEO,SAASC,aAAaA,CAAA,EAAG;EAC9B,OAAO,IAAAD,qBAAe,EAAC,EAAE,CAAC;AAC5B;AAEA,SAASE,SAASA,CAACC,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACxE,MAAMC,MAAM,GAAG,IAAAC,yBAAmB,EAACF,OAAO,CAACC,MAAM,CAAC,IAAIF,GAAG,CAACC,OAAO,CAACC,MAAM;EACxE,OAAOA,MAAM;AACf;AAEO,SAASE,eAAeA,CAACJ,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACrF,MAAMC,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACtC,MAAMI,OAAO,GAAGH,MAAM,CAACI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAGJ,MAAM,GAAGA,MAAM,GAAG,SAAS;EAC3E,OAAOG,OAAO;AAChB;AAEO,SAASE,cAAcA,CAACP,GAA2B,EAAEC,OAAmB,GAAG,CAAC,CAAC,EAAE;EACpF,MAAMC,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACtC,MAAMO,MAAM,GAAGN,MAAM,CAACO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;EACzC,OAAOD,MAAM;AACf;AAEO,SAASE,YAAYA,CAACV,GAA2B,EAAEC,OAAoB,EAAc;EAC1F,IAAIU,SAAS,CAACC,MAAM,GAAG,CAAC,EAAE;IACxB,MAAM,IAAIC,qBAAY,CAAC,sEAAsE,CAAC;EAChG;EACAZ,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;;EAEvB;EACA,IAAIa,YAAY,GAAG,IAAAX,yBAAmB,EAACF,OAAO,CAACa,YAAY,CAAC,IAAId,GAAG,CAACC,OAAO,CAACa,YAAY;EACxF,IAAIZ,MAAM,GAAGH,SAAS,CAACC,GAAG,EAAEC,OAAO,CAAC;EACpC,IAAIc,WAAW,GAAG,IAAAZ,yBAAmB,EAACF,OAAO,CAACc,WAAW,CAAC,IAAIf,GAAG,CAACC,OAAO,CAACc,WAAW;EACrF,IAAIC,QAAQ,GAAG,IAAAb,yBAAmB,EAACF,OAAO,CAACe,QAAQ,CAAC,IAAIhB,GAAG,CAACC,OAAO,CAACe,QAAQ;EAC5E,IAAIC,SAAS,GAAG,IAAAd,yBAAmB,EAACF,OAAO,CAACgB,SAAS,CAAC,IAAIjB,GAAG,CAACC,OAAO,CAACgB,SAAS;EAC/E,IAAIC,SAAS,GAAG,IAAAf,yBAAmB,EAACF,OAAO,CAACiB,SAAS,CAAC,IAAIlB,GAAG,CAACC,OAAO,CAACiB,SAAS;EAE/E,IAAIb,OAAO,GAAGD,eAAe,CAACJ,GAAG,EAAEC,OAAO,CAAC;EAE3Ca,YAAY,GAAGA,YAAY,IAAIT,OAAO,GAAG,eAAe;EACxDU,WAAW,GAAGA,WAAW,IAAIV,OAAO,GAAG,cAAc;EACrDW,QAAQ,GAAGA,QAAQ,IAAIX,OAAO,GAAG,WAAW;EAC5Ca,SAAS,GAAGA,SAAS,IAAIb,OAAO,GAAG,YAAY;EAC/CY,SAAS,GAAGA,SAAS,IAAIZ,OAAO,GAAG,YAAY;EAE/C,OAAO;IACLH,MAAM,EAAEA,MAAM;IACdY,YAAY,EAAEA,YAAY;IAC1BC,WAAW,EAAEA,WAAW;IACxBC,QAAQ,EAAEA,QAAQ;IAClBE,SAAS,EAAEA,SAAS;IACpBD,SAAS,EAAEA;EACb,CAAC;AACH","ignoreList":[]}

package/cjs/oidc/util/oauthMeta.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"oauthMeta.js","names":["createOAuthMeta","sdk","tokenParams","issuer","options","urls","getOAuthUrls","oauthMeta","clientId","redirectUri","responseType","responseMode","scopes","state","nonce","ignoreSignature","acrValues","extraParams","pkce","pkceMeta","codeVerifier","codeChallengeMethod","codeChallenge"],"sources":["../../../../lib/oidc/util/oauthMeta.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\nimport { OAuthTransactionMeta, OktaAuthOAuthInterface, PKCETransactionMeta, TokenParams } from '../types';\nimport { getOAuthUrls } from './oauth';\n\nexport function createOAuthMeta(\n sdk: OktaAuthOAuthInterface, \n tokenParams: TokenParams\n): OAuthTransactionMeta \| PKCETransactionMeta {\n const issuer = sdk.options.issuer!;\n const urls = getOAuthUrls(sdk, tokenParams);\n const oauthMeta: OAuthTransactionMeta = {\n issuer,\n urls,\n clientId: tokenParams.clientId!,\n redirectUri: tokenParams.redirectUri!,\n responseType: tokenParams.responseType!,\n responseMode: tokenParams.responseMode!,\n scopes: tokenParams.scopes!,\n state: tokenParams.state!,\n nonce: tokenParams.nonce!,\n ignoreSignature: tokenParams.ignoreSignature!,\n acrValues: tokenParams.acrValues,\n extraParams: tokenParams.extraParams\n };\n\n if (tokenParams.pkce === false) {\n // Implicit flow or authorization_code without PKCE\n return oauthMeta;\n }\n\n const pkceMeta: PKCETransactionMeta = {\n ...oauthMeta,\n codeVerifier: tokenParams.codeVerifier!,\n codeChallengeMethod: tokenParams.codeChallengeMethod!,\n codeChallenge: tokenParams.codeChallenge!,\n };\n\n return pkceMeta;\n}\n"],"mappings":";;;AAEA;AAFA;;AAIO,~~SAASA~~,~~eAAe~~,CAC7BC,GAA2B,EAC3BC,WAAwB,EACoB;EAC5C,MAAMC,MAAM,GAAGF,GAAG,CAACG,OAAO,CAACD,MAAO;EAClC,MAAME,IAAI,GAAG,IAAAC,mBAAY,EAACL,GAAG,EAAEC,WAAW,CAAC;EAC3C,MAAMK,SAA+B,GAAG;IACtCJ,MAAM;IACNE,IAAI;IACJG,QAAQ,EAAEN,WAAW,CAACM,QAAS;IAC/BC,WAAW,EAAEP,WAAW,CAACO,WAAY;IACrCC,YAAY,EAAER,WAAW,CAACQ,YAAa;IACvCC,YAAY,EAAET,WAAW,CAACS,YAAa;IACvCC,MAAM,EAAEV,WAAW,CAACU,MAAO;IAC3BC,KAAK,EAAEX,WAAW,CAACW,KAAM;IACzBC,KAAK,EAAEZ,WAAW,CAACY,KAAM;IACzBC,eAAe,EAAEb,WAAW,CAACa,eAAgB;IAC7CC,SAAS,EAAEd,WAAW,CAACc,SAAS;IAChCC,WAAW,EAAEf,WAAW,CAACe;EAC3B,CAAC;EAED,IAAIf,WAAW,CAACgB,IAAI,KAAK,KAAK,EAAE;IAC9B;IACA,OAAOX,SAAS;EAClB;EAEA,MAAMY,QAA6B,GAAG;IACpC,GAAGZ,SAAS;IACZa,YAAY,EAAElB,WAAW,CAACkB,YAAa;IACvCC,mBAAmB,EAAEnB,WAAW,CAACmB,mBAAoB;IACrDC,aAAa,EAAEpB,WAAW,CAACoB;EAC7B,CAAC;EAED,OAAOH,QAAQ;AACjB"}
1	+ {"version":3,"file":"oauthMeta.js","names":["_oauth","require","createOAuthMeta","sdk","tokenParams","issuer","options","urls","getOAuthUrls","oauthMeta","clientId","redirectUri","responseType","responseMode","scopes","state","nonce","ignoreSignature","acrValues","extraParams","pkce","pkceMeta","codeVerifier","codeChallengeMethod","codeChallenge"],"sources":["../../../../lib/oidc/util/oauthMeta.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\nimport { OAuthTransactionMeta, OktaAuthOAuthInterface, PKCETransactionMeta, TokenParams } from '../types';\nimport { getOAuthUrls } from './oauth';\n\nexport function createOAuthMeta(\n sdk: OktaAuthOAuthInterface, \n tokenParams: TokenParams\n): OAuthTransactionMeta \| PKCETransactionMeta {\n const issuer = sdk.options.issuer!;\n const urls = getOAuthUrls(sdk, tokenParams);\n const oauthMeta: OAuthTransactionMeta = {\n issuer,\n urls,\n clientId: tokenParams.clientId!,\n redirectUri: tokenParams.redirectUri!,\n responseType: tokenParams.responseType!,\n responseMode: tokenParams.responseMode!,\n scopes: tokenParams.scopes!,\n state: tokenParams.state!,\n nonce: tokenParams.nonce!,\n ignoreSignature: tokenParams.ignoreSignature!,\n acrValues: tokenParams.acrValues,\n extraParams: tokenParams.extraParams\n };\n\n if (tokenParams.pkce === false) {\n // Implicit flow or authorization_code without PKCE\n return oauthMeta;\n }\n\n const pkceMeta: PKCETransactionMeta = {\n ...oauthMeta,\n codeVerifier: tokenParams.codeVerifier!,\n codeChallengeMethod: tokenParams.codeChallengeMethod!,\n codeChallenge: tokenParams.codeChallenge!,\n };\n\n return pkceMeta;\n}\n"],"mappings":";;;AAEA,IAAAA,MAAA,GAAAC,OAAA;AAFA;;AAIO,SAASC,eAAeA,CAC7BC,GAA2B,EAC3BC,WAAwB,EACoB;EAC5C,MAAMC,MAAM,GAAGF,GAAG,CAACG,OAAO,CAACD,MAAO;EAClC,MAAME,IAAI,GAAG,IAAAC,mBAAY,EAACL,GAAG,EAAEC,WAAW,CAAC;EAC3C,MAAMK,SAA+B,GAAG;IACtCJ,MAAM;IACNE,IAAI;IACJG,QAAQ,EAAEN,WAAW,CAACM,QAAS;IAC/BC,WAAW,EAAEP,WAAW,CAACO,WAAY;IACrCC,YAAY,EAAER,WAAW,CAACQ,YAAa;IACvCC,YAAY,EAAET,WAAW,CAACS,YAAa;IACvCC,MAAM,EAAEV,WAAW,CAACU,MAAO;IAC3BC,KAAK,EAAEX,WAAW,CAACW,KAAM;IACzBC,KAAK,EAAEZ,WAAW,CAACY,KAAM;IACzBC,eAAe,EAAEb,WAAW,CAACa,eAAgB;IAC7CC,SAAS,EAAEd,WAAW,CAACc,SAAS;IAChCC,WAAW,EAAEf,WAAW,CAACe;EAC3B,CAAC;EAED,IAAIf,WAAW,CAACgB,IAAI,KAAK,KAAK,EAAE;IAC9B;IACA,OAAOX,SAAS;EAClB;EAEA,MAAMY,QAA6B,GAAG;IACpC,GAAGZ,SAAS;IACZa,YAAY,EAAElB,WAAW,CAACkB,YAAa;IACvCC,mBAAmB,EAAEnB,WAAW,CAACmB,mBAAoB;IACrDC,aAAa,EAAEpB,WAAW,CAACoB;EAC7B,CAAC;EAED,OAAOH,QAAQ;AACjB","ignoreList":[]}

package/cjs/oidc/util/pkce.js CHANGED Viewed

@@ -23,7 +23,7 @@ function dec2hex(dec) {
 }
 function getRandomString(length) {
   var a = new Uint8Array(Math.ceil(length / 2));
-  _crypto.webcrypto.getRandomValues(a);
+  a = crypto.getRandomValues(a);
   var str = Array.from(a, dec2hex).join('');
   return str.slice(0, length);
 }
@@ -36,17 +36,16 @@ function generateVerifier(prefix) {
 }
 function computeChallenge(str) {
   var buffer = new TextEncoder().encode(str);
-  return _crypto.webcrypto.subtle.digest('SHA-256', buffer).then(function (arrayBuffer) {
+  return crypto.subtle.digest('SHA-256', buffer).then(function (arrayBuffer) {
     var hash = String.fromCharCode.apply(null, new Uint8Array(arrayBuffer));
     var b64u = (0, _crypto.stringToBase64Url)(hash); // url-safe base64 variant
     return b64u;
   });
 }
-var _default = {
+var _default = exports.default = {
   DEFAULT_CODE_CHALLENGE_METHOD: _constants.DEFAULT_CODE_CHALLENGE_METHOD,
   generateVerifier,
   computeChallenge
 };
-exports.default = _default;
 module.exports = exports.default;
 //# sourceMappingURL=pkce.js.map

package/cjs/oidc/util/pkce.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"pkce.js","names":["dec2hex","dec","toString","substr","getRandomString","length","a","Uint8Array","Math","ceil","~~webcrypto~~","getRandomValues","str","Array","from","join","slice","generateVerifier","prefix","verifier","MIN_VERIFIER_LENGTH","encodeURIComponent","MAX_VERIFIER_LENGTH","computeChallenge","buffer","TextEncoder","encode","subtle","digest","then","arrayBuffer","hash","String","fromCharCode","apply","b64u","stringToBase64Url","DEFAULT_CODE_CHALLENGE_METHOD"],"sources":["../../../../lib/oidc/util/pkce.ts"],"sourcesContent":["/!\n Copyright (c) 2019-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n\n /* eslint-disable complexity, max-statements */\nimport { stringToBase64Url, ~~webcrypto~~ } from '../../crypto';\nimport { MIN_VERIFIER_LENGTH, MAX_VERIFIER_LENGTH, DEFAULT_CODE_CHALLENGE_METHOD } from '../../constants';\n\nfunction dec2hex (dec) {\n return ('0' + dec.toString(16)).substr(-2);\n}\n\nfunction getRandomString(length) {\n var a = new Uint8Array(Math.ceil(length / 2));\n ~~webcrypto~~.getRandomValues(a);\n var str = Array.from(a, dec2hex).join('');\n return str.slice(0, length);\n}\n\nfunction generateVerifier(prefix?: string): string {\n var verifier = prefix \|\| '';\n if (verifier.length < MIN_VERIFIER_LENGTH) {\n verifier = verifier + getRandomString(MIN_VERIFIER_LENGTH - verifier.length);\n }\n return encodeURIComponent(verifier).slice(0, MAX_VERIFIER_LENGTH);\n}\n\nfunction computeChallenge(str: string): PromiseLike<any> { \n var buffer = new TextEncoder().encode(str);\n return ~~webcrypto~~.subtle.digest('SHA-256', buffer).then(function(arrayBuffer) {\n var hash = String.fromCharCode.apply(null, new Uint8Array(arrayBuffer) as unknown as number[]);\n var b64u = stringToBase64Url(hash); // url-safe base64 variant\n return b64u;\n });\n}\n\nexport default {\n DEFAULT_CODE_CHALLENGE_METHOD,\n generateVerifier,\n computeChallenge\n};\n"],"mappings":";;;AAcA;AACA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEC;;AAID,~~SAASA~~,~~OAAO~~,CAAEC,GAAG,EAAE;EACrB,OAAO,CAAC,GAAG,GAAGA,GAAG,CAACC,QAAQ,CAAC,EAAE,CAAC,EAAEC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5C;AAEA,SAASC,~~eAAe~~,CAACC,MAAM,EAAE;EAC/B,IAAIC,CAAC,GAAG,IAAIC,UAAU,CAACC,IAAI,CAACC,IAAI,CAACJ,MAAM,GAAG,CAAC,CAAC,CAAC;~~EAC7CK~~,~~iBAAS~~,CAACC,eAAe,CAACL,CAAC,CAAC;~~EAC5B~~,IAAIM,GAAG,GAAGC,KAAK,CAACC,IAAI,CAACR,CAAC,EAAEN,OAAO,CAAC,CAACe,IAAI,CAAC,EAAE,CAAC;EACzC,OAAOH,GAAG,CAACI,KAAK,CAAC,CAAC,EAAEX,MAAM,CAAC;AAC7B;AAEA,SAASY,~~gBAAgB~~,CAACC,MAAe,EAAU;EACjD,IAAIC,QAAQ,GAAGD,MAAM,IAAI,EAAE;EAC3B,IAAIC,QAAQ,CAACd,MAAM,GAAGe,8BAAmB,EAAE;IACzCD,QAAQ,GAAGA,QAAQ,GAAGf,eAAe,CAACgB,8BAAmB,GAAGD,QAAQ,CAACd,MAAM,CAAC;EAC9E;EACA,OAAOgB,kBAAkB,CAACF,QAAQ,CAAC,CAACH,KAAK,CAAC,CAAC,EAAEM,8BAAmB,CAAC;AACnE;AAEA,SAASC,~~gBAAgB~~,CAACX,GAAW,EAAoB;EACvD,IAAIY,MAAM,GAAG,IAAIC,WAAW,~~EAAE~~,CAACC,MAAM,CAACd,GAAG,CAAC;EAC1C,OAAOF,~~iBAAS~~,CAACiB,MAAM,CAACC,MAAM,CAAC,SAAS,EAAEJ,MAAM,CAAC,CAACK,IAAI,CAAC,UAASC,WAAW,EAAE;~~IAC3E~~,IAAIC,IAAI,GAAGC,MAAM,CAACC,YAAY,CAACC,KAAK,CAAC,IAAI,EAAE,IAAI3B,UAAU,CAACuB,WAAW,CAAC~~,CAAwB~~;IAC9F,IAAIK,IAAI,GAAG,IAAAC,yBAAiB,EAACL,IAAI,CAAC,CAAC,CAAC;IACpC,OAAOI,IAAI;EACb,CAAC,CAAC;AACJ;AAAC,~~eAEc~~;~~EACbE~~,6BAA6B,EAA7BA,wCAA6B;~~EAC7BpB~~,gBAAgB;EAChBM;AACF,CAAC;~~AAAA;AAAA~~"}
1	+ {"version":3,"file":"pkce.js","names":["_crypto","require","_constants","dec2hex","dec","toString","substr","getRandomString","length","a","Uint8Array","Math","ceil","crypto","getRandomValues","str","Array","from","join","slice","generateVerifier","prefix","verifier","MIN_VERIFIER_LENGTH","encodeURIComponent","MAX_VERIFIER_LENGTH","computeChallenge","buffer","TextEncoder","encode","subtle","digest","then","arrayBuffer","hash","String","fromCharCode","apply","b64u","stringToBase64Url","_default","exports","default","DEFAULT_CODE_CHALLENGE_METHOD","module"],"sources":["../../../../lib/oidc/util/pkce.ts"],"sourcesContent":["/!\n Copyright (c) 2019-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\n\n /* eslint-disable complexity, max-statements */\nimport { stringToBase64Url } from '../../crypto';\nimport { MIN_VERIFIER_LENGTH, MAX_VERIFIER_LENGTH, DEFAULT_CODE_CHALLENGE_METHOD } from '../../constants';\n\nfunction dec2hex (dec) {\n return ('0' + dec.toString(16)).substr(-2);\n}\n\nfunction getRandomString(length) {\n var a = new Uint8Array(Math.ceil(length / 2));\n a = crypto.getRandomValues(a);\n var str = Array.from(a, dec2hex).join('');\n return str.slice(0, length);\n}\n\nfunction generateVerifier(prefix?: string): string {\n var verifier = prefix \|\| '';\n if (verifier.length < MIN_VERIFIER_LENGTH) {\n verifier = verifier + getRandomString(MIN_VERIFIER_LENGTH - verifier.length);\n }\n return encodeURIComponent(verifier).slice(0, MAX_VERIFIER_LENGTH);\n}\n\nfunction computeChallenge(str: string): PromiseLike<any> { \n var buffer = new TextEncoder().encode(str);\n return crypto.subtle.digest('SHA-256', buffer).then(function(arrayBuffer) {\n var hash = String.fromCharCode.apply(null, new Uint8Array(arrayBuffer) as unknown as number[]);\n var b64u = stringToBase64Url(hash); // url-safe base64 variant\n return b64u;\n });\n}\n\nexport default {\n DEFAULT_CODE_CHALLENGE_METHOD,\n generateVerifier,\n computeChallenge\n};\n"],"mappings":";;;AAcA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEC;;AAID,SAASE,OAAOA,CAAEC,GAAG,EAAE;EACrB,OAAO,CAAC,GAAG,GAAGA,GAAG,CAACC,QAAQ,CAAC,EAAE,CAAC,EAAEC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5C;AAEA,SAASC,eAAeA,CAACC,MAAM,EAAE;EAC/B,IAAIC,CAAC,GAAG,IAAIC,UAAU,CAACC,IAAI,CAACC,IAAI,CAACJ,MAAM,GAAG,CAAC,CAAC,CAAC;EAC7CC,CAAC,GAAGI,MAAM,CAACC,eAAe,CAACL,CAAC,CAAC;EAC7B,IAAIM,GAAG,GAAGC,KAAK,CAACC,IAAI,CAACR,CAAC,EAAEN,OAAO,CAAC,CAACe,IAAI,CAAC,EAAE,CAAC;EACzC,OAAOH,GAAG,CAACI,KAAK,CAAC,CAAC,EAAEX,MAAM,CAAC;AAC7B;AAEA,SAASY,gBAAgBA,CAACC,MAAe,EAAU;EACjD,IAAIC,QAAQ,GAAGD,MAAM,IAAI,EAAE;EAC3B,IAAIC,QAAQ,CAACd,MAAM,GAAGe,8BAAmB,EAAE;IACzCD,QAAQ,GAAGA,QAAQ,GAAGf,eAAe,CAACgB,8BAAmB,GAAGD,QAAQ,CAACd,MAAM,CAAC;EAC9E;EACA,OAAOgB,kBAAkB,CAACF,QAAQ,CAAC,CAACH,KAAK,CAAC,CAAC,EAAEM,8BAAmB,CAAC;AACnE;AAEA,SAASC,gBAAgBA,CAACX,GAAW,EAAoB;EACvD,IAAIY,MAAM,GAAG,IAAIC,WAAW,CAAC,CAAC,CAACC,MAAM,CAACd,GAAG,CAAC;EAC1C,OAAOF,MAAM,CAACiB,MAAM,CAACC,MAAM,CAAC,SAAS,EAAEJ,MAAM,CAAC,CAACK,IAAI,CAAC,UAASC,WAAW,EAAE;IACxE,IAAIC,IAAI,GAAGC,MAAM,CAACC,YAAY,CAACC,KAAK,CAAC,IAAI,EAAE,IAAI3B,UAAU,CAACuB,WAAW,CAAwB,CAAC;IAC9F,IAAIK,IAAI,GAAG,IAAAC,yBAAiB,EAACL,IAAI,CAAC,CAAC,CAAC;IACpC,OAAOI,IAAI;EACb,CAAC,CAAC;AACJ;AAAC,IAAAE,QAAA,GAAAC,OAAA,CAAAC,OAAA,GAEc;EACbC,6BAA6B,EAA7BA,wCAA6B;EAC7BvB,gBAAgB;EAChBM;AACF,CAAC;AAAAkB,MAAA,CAAAH,OAAA,GAAAA,OAAA,CAAAC,OAAA","ignoreList":[]}

package/cjs/oidc/util/prepareEnrollAuthenticatorParams.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"prepareEnrollAuthenticatorParams.js","names":["prepareParams","params","responseType","prompt","maxAge","enrollAmrValues","AuthSdkError","acrValues","scopes","nonce","prepareEnrollAuthenticatorParams","sdk","options","getDefaultEnrollAuthenticatorParams"],"sources":["../../../../lib/oidc/util/prepareEnrollAuthenticatorParams.ts"],"sourcesContent":["/* eslint-disable complexity /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface, EnrollAuthenticatorOptions } from '../types';\nimport { getDefaultEnrollAuthenticatorParams } from './defaultEnrollAuthenticatorParams';\n\nfunction prepareParams(\n params: EnrollAuthenticatorOptions\n): EnrollAuthenticatorOptions {\n params = {\n ...params,\n // forced params:\n responseType: 'none',\n prompt: 'enroll_authenticator',\n maxAge: 0,\n };\n\n if (!params.enrollAmrValues) {\n throw new AuthSdkError('enroll_amr_values must be specified');\n }\n if (!params.acrValues) {\n // `acr_values` is required and should equal 'urn:okta:2fa:any:ifpossible'\n // But this can be changed in future\n throw new AuthSdkError('acr_values must be specified');\n }\n\n // `scope`, `nonce` must be omitted\n delete params.scopes;\n delete params.nonce;\n\n return params;\n}\n\n// Prepares params for a call to /authorize\nexport function prepareEnrollAuthenticatorParams(\n sdk: OktaAuthOAuthInterface,\n options: EnrollAuthenticatorOptions\n): EnrollAuthenticatorOptions {\n return prepareParams({\n ...getDefaultEnrollAuthenticatorParams(sdk),\n ...options\n });\n}\n"],"mappings":";;;AAaA;AAEA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,~~SAASA~~,~~aAAa~~,CACpBC,MAAkC,EACN;EAC5BA,MAAM,GAAG;IACP,GAAGA,MAAM;IACT;IACAC,YAAY,EAAE,MAAM;IACpBC,MAAM,EAAE,sBAAsB;IAC9BC,MAAM,EAAE;EACV,CAAC;EAED,IAAI,CAACH,MAAM,CAACI,eAAe,EAAE;IAC3B,MAAM,IAAIC,oBAAY,CAAC,qCAAqC,CAAC;EAC/D;EACA,IAAI,CAACL,MAAM,CAACM,SAAS,EAAE;IACrB;IACA;IACA,MAAM,IAAID,oBAAY,CAAC,8BAA8B,CAAC;EACxD;;EAEA;EACA,OAAOL,MAAM,CAACO,MAAM;EACpB,OAAOP,MAAM,CAACQ,KAAK;EAEnB,OAAOR,MAAM;AACf;;AAEA;AACO,SAASS,~~gCAAgC~~,CAC9CC,GAA2B,EAC3BC,OAAmC,EACP;EAC5B,OAAOZ,aAAa,CAAC;IACnB,GAAG,IAAAa,qEAAmC,EAACF,GAAG,CAAC;IAC3C,GAAGC;EACL,CAAC,CAAC;AACJ"}
1	+ {"version":3,"file":"prepareEnrollAuthenticatorParams.js","names":["_errors","require","_defaultEnrollAuthenticatorParams","prepareParams","params","responseType","prompt","maxAge","enrollAmrValues","AuthSdkError","acrValues","scopes","nonce","prepareEnrollAuthenticatorParams","sdk","options","getDefaultEnrollAuthenticatorParams"],"sources":["../../../../lib/oidc/util/prepareEnrollAuthenticatorParams.ts"],"sourcesContent":["/* eslint-disable complexity /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface, EnrollAuthenticatorOptions } from '../types';\nimport { getDefaultEnrollAuthenticatorParams } from './defaultEnrollAuthenticatorParams';\n\nfunction prepareParams(\n params: EnrollAuthenticatorOptions\n): EnrollAuthenticatorOptions {\n params = {\n ...params,\n // forced params:\n responseType: 'none',\n prompt: 'enroll_authenticator',\n maxAge: 0,\n };\n\n if (!params.enrollAmrValues) {\n throw new AuthSdkError('enroll_amr_values must be specified');\n }\n if (!params.acrValues) {\n // `acr_values` is required and should equal 'urn:okta:2fa:any:ifpossible'\n // But this can be changed in future\n throw new AuthSdkError('acr_values must be specified');\n }\n\n // `scope`, `nonce` must be omitted\n delete params.scopes;\n delete params.nonce;\n\n return params;\n}\n\n// Prepares params for a call to /authorize\nexport function prepareEnrollAuthenticatorParams(\n sdk: OktaAuthOAuthInterface,\n options: EnrollAuthenticatorOptions\n): EnrollAuthenticatorOptions {\n return prepareParams({\n ...getDefaultEnrollAuthenticatorParams(sdk),\n ...options\n });\n}\n"],"mappings":";;;AAaA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,iCAAA,GAAAD,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,SAASE,aAAaA,CACpBC,MAAkC,EACN;EAC5BA,MAAM,GAAG;IACP,GAAGA,MAAM;IACT;IACAC,YAAY,EAAE,MAAM;IACpBC,MAAM,EAAE,sBAAsB;IAC9BC,MAAM,EAAE;EACV,CAAC;EAED,IAAI,CAACH,MAAM,CAACI,eAAe,EAAE;IAC3B,MAAM,IAAIC,oBAAY,CAAC,qCAAqC,CAAC;EAC/D;EACA,IAAI,CAACL,MAAM,CAACM,SAAS,EAAE;IACrB;IACA;IACA,MAAM,IAAID,oBAAY,CAAC,8BAA8B,CAAC;EACxD;;EAEA;EACA,OAAOL,MAAM,CAACO,MAAM;EACpB,OAAOP,MAAM,CAACQ,KAAK;EAEnB,OAAOR,MAAM;AACf;;AAEA;AACO,SAASS,gCAAgCA,CAC9CC,GAA2B,EAC3BC,OAAmC,EACP;EAC5B,OAAOZ,aAAa,CAAC;IACnB,GAAG,IAAAa,qEAAmC,EAACF,GAAG,CAAC;IAC3C,GAAGC;EACL,CAAC,CAAC;AACJ","ignoreList":[]}

package/cjs/oidc/util/prepareTokenParams.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"prepareTokenParams.js","names":["assertPKCESupport","sdk","features","isPKCESupported","errorMessage","isHTTPS","hasTextEncoder","AuthSdkError","validateCodeChallengeMethod","codeChallengeMethod","options","DEFAULT_CODE_CHALLENGE_METHOD","wellKnownResponse","getWellKnown","methods","indexOf","preparePKCE","tokenParams","codeVerifier","codeChallenge","PKCE","generateVerifier","computeChallenge","responseType","prepareTokenParams","defaults","getDefaultTokenParams","dpop","isDPoPSupported","pkce"],"sources":["../../../../lib/oidc/util/prepareTokenParams.ts"],"sourcesContent":["/* eslint-disable complexity /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { getWellKnown } from '../endpoints/well-known';\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { getDefaultTokenParams } from './defaultTokenParams';\nimport { DEFAULT_CODE_CHALLENGE_METHOD } from '../../constants';\nimport PKCE from './pkce';\nimport { OktaAuthBaseInterface } from '../../base/types';\n\nexport function assertPKCESupport(sdk: OktaAuthBaseInterface) {\n if (!sdk.features.isPKCESupported()) {\n var errorMessage = 'PKCE requires a modern browser with encryption support running in a secure context.';\n if (!sdk.features.isHTTPS()) {\n // eslint-disable-next-line max-len\n errorMessage += '\\nThe current page is not being served with HTTPS protocol. PKCE requires secure HTTPS protocol.';\n }\n if (!sdk.features.hasTextEncoder()) {\n // eslint-disable-next-line max-len\n errorMessage += '\\n\"TextEncoder\" is not defined. To use PKCE, you may need to include a polyfill/shim for this browser.';\n }\n throw new AuthSdkError(errorMessage);\n }\n}\n\nexport async function validateCodeChallengeMethod(sdk: OktaAuthOAuthInterface, codeChallengeMethod?: string) {\n // set default code challenge method, if none provided\n codeChallengeMethod = codeChallengeMethod \|\| sdk.options.codeChallengeMethod \|\| DEFAULT_CODE_CHALLENGE_METHOD;\n\n // validate against .well-known/openid-configuration\n const wellKnownResponse = await getWellKnown(sdk);\n var methods = wellKnownResponse['code_challenge_methods_supported'] \|\| [];\n if (methods.indexOf(codeChallengeMethod) === -1) {\n throw new AuthSdkError('Invalid code_challenge_method');\n }\n return codeChallengeMethod;\n}\n\nexport async function preparePKCE(\n sdk: OktaAuthOAuthInterface, \n tokenParams: TokenParams\n): Promise<TokenParams> {\n let {\n codeVerifier,\n codeChallenge,\n codeChallengeMethod\n } = tokenParams;\n\n // PKCE calculations can be avoided by passing a codeChallenge\n codeChallenge = codeChallenge \|\| sdk.options.codeChallenge;\n if (!codeChallenge) {\n assertPKCESupport(sdk);\n codeVerifier = codeVerifier \|\| PKCE.generateVerifier();\n codeChallenge = await PKCE.computeChallenge(codeVerifier);\n }\n codeChallengeMethod = await validateCodeChallengeMethod(sdk, codeChallengeMethod);\n\n // Clone/copy the params. Set PKCE values\n tokenParams = {\n ...tokenParams,\n responseType: 'code', // responseType is forced\n codeVerifier,\n codeChallenge,\n codeChallengeMethod\n };\n\n return tokenParams;\n}\n\n// Prepares params for a call to /authorize or /token\nexport async function prepareTokenParams(\n sdk: OktaAuthOAuthInterface,\n tokenParams: TokenParams = {}\n): Promise<TokenParams> {\n // build params using defaults + options\n const defaults = getDefaultTokenParams(sdk);\n tokenParams = { ...defaults, ...tokenParams };\n\n if (tokenParams.dpop && !sdk.features.isDPoPSupported()) {\n throw new AuthSdkError('DPoP has been configured, but is not supported by browser');\n }\n\n if (tokenParams.pkce === false) {\n // Implicit flow or authorization_code without PKCE\n return tokenParams;\n }\n\n return preparePKCE(sdk, tokenParams);\n}"],"mappings":";;;;;;;AAaA;AACA;AAEA;AACA;AACA;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASO,~~SAASA~~,~~iBAAiB~~,CAACC,GAA0B,EAAE;EAC5D,IAAI,CAACA,GAAG,CAACC,QAAQ,CAACC,eAAe,~~EAAE~~,EAAE;IACnC,IAAIC,YAAY,GAAG,qFAAqF;IACxG,IAAI,CAACH,GAAG,CAACC,QAAQ,CAACG,OAAO,~~EAAE~~,EAAE;MAC3B;MACAD,YAAY,IAAI,kGAAkG;IACpH;IACA,IAAI,CAACH,GAAG,CAACC,QAAQ,CAACI,cAAc,~~EAAE~~,EAAE;MAClC;MACAF,YAAY,IAAI,wGAAwG;IAC1H;IACA,MAAM,IAAIG,oBAAY,CAACH,YAAY,CAAC;EACtC;AACF;AAEO,eAAeI,~~2BAA2B~~,CAACP,GAA2B,EAAEQ,mBAA4B,EAAE;EAC3G;EACAA,mBAAmB,GAAGA,mBAAmB,IAAIR,GAAG,CAACS,OAAO,CAACD,mBAAmB,IAAIE,wCAA6B;;EAE7G;EACA,MAAMC,iBAAiB,GAAG,MAAM,IAAAC,uBAAY,EAACZ,GAAG,CAAC;EACjD,IAAIa,OAAO,GAAGF,iBAAiB,CAAC,kCAAkC,CAAC,IAAI,EAAE;EACzE,IAAIE,OAAO,CAACC,OAAO,CAACN,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE;IAC/C,MAAM,IAAIF,oBAAY,CAAC,+BAA+B,CAAC;EACzD;EACA,OAAOE,mBAAmB;AAC5B;AAEO,eAAeO,~~WAAW~~,CAC/Bf,GAA2B,EAC3BgB,WAAwB,EACF;EACtB,IAAI;IACFC,YAAY;IACZC,aAAa;IACbV;EACF,CAAC,GAAGQ,WAAW;;EAEf;EACAE,aAAa,GAAGA,aAAa,IAAIlB,GAAG,CAACS,OAAO,CAACS,aAAa;EAC1D,IAAI,CAACA,aAAa,EAAE;IAClBnB,iBAAiB,CAACC,GAAG,CAAC;IACtBiB,YAAY,GAAGA,YAAY,IAAIE,aAAI,CAACC,gBAAgB,~~EAAE~~;IACtDF,aAAa,GAAG,MAAMC,aAAI,CAACE,gBAAgB,CAACJ,YAAY,CAAC;EAC3D;EACAT,mBAAmB,GAAG,MAAMD,2BAA2B,CAACP,GAAG,EAAEQ,mBAAmB,CAAC;;EAEjF;EACAQ,WAAW,GAAG;IACZ,GAAGA,WAAW;IACdM,YAAY,EAAE,MAAM;IAAE;IACtBL,YAAY;IACZC,aAAa;IACbV;EACF,CAAC;EAED,OAAOQ,WAAW;AACpB;;AAEA;AACO,eAAeO,~~kBAAkB~~,CACtCvB,GAA2B,EAC3BgB,WAAwB,GAAG,CAAC,CAAC,EACP;EACtB;EACA,MAAMQ,QAAQ,GAAG,IAAAC,yCAAqB,EAACzB,GAAG,CAAC;EAC3CgB,WAAW,GAAG;IAAE,GAAGQ,QAAQ;IAAE,GAAGR;EAAY,CAAC;EAE7C,IAAIA,WAAW,CAACU,IAAI,IAAI,CAAC1B,GAAG,CAACC,QAAQ,CAAC0B,eAAe,~~EAAE~~,EAAE;IACvD,MAAM,IAAIrB,oBAAY,CAAC,2DAA2D,CAAC;EACrF;EAEA,IAAIU,WAAW,CAACY,IAAI,KAAK,KAAK,EAAE;IAC9B;IACA,OAAOZ,WAAW;EACpB;EAEA,OAAOD,WAAW,CAACf,GAAG,EAAEgB,WAAW,CAAC;AACtC"}
1	+ {"version":3,"file":"prepareTokenParams.js","names":["_wellKnown","require","_errors","_defaultTokenParams","_constants","_pkce","_interopRequireDefault","assertPKCESupport","sdk","features","isPKCESupported","errorMessage","isHTTPS","hasTextEncoder","AuthSdkError","validateCodeChallengeMethod","codeChallengeMethod","options","DEFAULT_CODE_CHALLENGE_METHOD","wellKnownResponse","getWellKnown","methods","indexOf","preparePKCE","tokenParams","codeVerifier","codeChallenge","PKCE","generateVerifier","computeChallenge","responseType","prepareTokenParams","defaults","getDefaultTokenParams","dpop","isDPoPSupported","pkce"],"sources":["../../../../lib/oidc/util/prepareTokenParams.ts"],"sourcesContent":["/* eslint-disable complexity /\n/!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n \n You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n \n See the License for the specific language governing permissions and limitations under the License.\n \n /\nimport { getWellKnown } from '../endpoints/well-known';\nimport { AuthSdkError } from '../../errors';\nimport { OktaAuthOAuthInterface, TokenParams } from '../types';\nimport { getDefaultTokenParams } from './defaultTokenParams';\nimport { DEFAULT_CODE_CHALLENGE_METHOD } from '../../constants';\nimport PKCE from './pkce';\nimport { OktaAuthBaseInterface } from '../../base/types';\n\nexport function assertPKCESupport(sdk: OktaAuthBaseInterface) {\n if (!sdk.features.isPKCESupported()) {\n var errorMessage = 'PKCE requires a modern browser with encryption support running in a secure context.';\n if (!sdk.features.isHTTPS()) {\n // eslint-disable-next-line max-len\n errorMessage += '\\nThe current page is not being served with HTTPS protocol. PKCE requires secure HTTPS protocol.';\n }\n if (!sdk.features.hasTextEncoder()) {\n // eslint-disable-next-line max-len\n errorMessage += '\\n\"TextEncoder\" is not defined. To use PKCE, you may need to include a polyfill/shim for this browser.';\n }\n throw new AuthSdkError(errorMessage);\n }\n}\n\nexport async function validateCodeChallengeMethod(sdk: OktaAuthOAuthInterface, codeChallengeMethod?: string) {\n // set default code challenge method, if none provided\n codeChallengeMethod = codeChallengeMethod \|\| sdk.options.codeChallengeMethod \|\| DEFAULT_CODE_CHALLENGE_METHOD;\n\n // validate against .well-known/openid-configuration\n const wellKnownResponse = await getWellKnown(sdk);\n var methods = wellKnownResponse['code_challenge_methods_supported'] \|\| [];\n if (methods.indexOf(codeChallengeMethod) === -1) {\n throw new AuthSdkError('Invalid code_challenge_method');\n }\n return codeChallengeMethod;\n}\n\nexport async function preparePKCE(\n sdk: OktaAuthOAuthInterface, \n tokenParams: TokenParams\n): Promise<TokenParams> {\n let {\n codeVerifier,\n codeChallenge,\n codeChallengeMethod\n } = tokenParams;\n\n // PKCE calculations can be avoided by passing a codeChallenge\n codeChallenge = codeChallenge \|\| sdk.options.codeChallenge;\n if (!codeChallenge) {\n assertPKCESupport(sdk);\n codeVerifier = codeVerifier \|\| PKCE.generateVerifier();\n codeChallenge = await PKCE.computeChallenge(codeVerifier);\n }\n codeChallengeMethod = await validateCodeChallengeMethod(sdk, codeChallengeMethod);\n\n // Clone/copy the params. Set PKCE values\n tokenParams = {\n ...tokenParams,\n responseType: 'code', // responseType is forced\n codeVerifier,\n codeChallenge,\n codeChallengeMethod\n };\n\n return tokenParams;\n}\n\n// Prepares params for a call to /authorize or /token\nexport async function prepareTokenParams(\n sdk: OktaAuthOAuthInterface,\n tokenParams: TokenParams = {}\n): Promise<TokenParams> {\n // build params using defaults + options\n const defaults = getDefaultTokenParams(sdk);\n tokenParams = { ...defaults, ...tokenParams };\n\n if (tokenParams.dpop && !sdk.features.isDPoPSupported()) {\n throw new AuthSdkError('DPoP has been configured, but is not supported by browser');\n }\n\n if (tokenParams.pkce === false) {\n // Implicit flow or authorization_code without PKCE\n return tokenParams;\n }\n\n return preparePKCE(sdk, tokenParams);\n}"],"mappings":";;;;;;;AAaA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,mBAAA,GAAAF,OAAA;AACA,IAAAG,UAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAC,sBAAA,CAAAL,OAAA;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASO,SAASM,iBAAiBA,CAACC,GAA0B,EAAE;EAC5D,IAAI,CAACA,GAAG,CAACC,QAAQ,CAACC,eAAe,CAAC,CAAC,EAAE;IACnC,IAAIC,YAAY,GAAG,qFAAqF;IACxG,IAAI,CAACH,GAAG,CAACC,QAAQ,CAACG,OAAO,CAAC,CAAC,EAAE;MAC3B;MACAD,YAAY,IAAI,kGAAkG;IACpH;IACA,IAAI,CAACH,GAAG,CAACC,QAAQ,CAACI,cAAc,CAAC,CAAC,EAAE;MAClC;MACAF,YAAY,IAAI,wGAAwG;IAC1H;IACA,MAAM,IAAIG,oBAAY,CAACH,YAAY,CAAC;EACtC;AACF;AAEO,eAAeI,2BAA2BA,CAACP,GAA2B,EAAEQ,mBAA4B,EAAE;EAC3G;EACAA,mBAAmB,GAAGA,mBAAmB,IAAIR,GAAG,CAACS,OAAO,CAACD,mBAAmB,IAAIE,wCAA6B;;EAE7G;EACA,MAAMC,iBAAiB,GAAG,MAAM,IAAAC,uBAAY,EAACZ,GAAG,CAAC;EACjD,IAAIa,OAAO,GAAGF,iBAAiB,CAAC,kCAAkC,CAAC,IAAI,EAAE;EACzE,IAAIE,OAAO,CAACC,OAAO,CAACN,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE;IAC/C,MAAM,IAAIF,oBAAY,CAAC,+BAA+B,CAAC;EACzD;EACA,OAAOE,mBAAmB;AAC5B;AAEO,eAAeO,WAAWA,CAC/Bf,GAA2B,EAC3BgB,WAAwB,EACF;EACtB,IAAI;IACFC,YAAY;IACZC,aAAa;IACbV;EACF,CAAC,GAAGQ,WAAW;;EAEf;EACAE,aAAa,GAAGA,aAAa,IAAIlB,GAAG,CAACS,OAAO,CAACS,aAAa;EAC1D,IAAI,CAACA,aAAa,EAAE;IAClBnB,iBAAiB,CAACC,GAAG,CAAC;IACtBiB,YAAY,GAAGA,YAAY,IAAIE,aAAI,CAACC,gBAAgB,CAAC,CAAC;IACtDF,aAAa,GAAG,MAAMC,aAAI,CAACE,gBAAgB,CAACJ,YAAY,CAAC;EAC3D;EACAT,mBAAmB,GAAG,MAAMD,2BAA2B,CAACP,GAAG,EAAEQ,mBAAmB,CAAC;;EAEjF;EACAQ,WAAW,GAAG;IACZ,GAAGA,WAAW;IACdM,YAAY,EAAE,MAAM;IAAE;IACtBL,YAAY;IACZC,aAAa;IACbV;EACF,CAAC;EAED,OAAOQ,WAAW;AACpB;;AAEA;AACO,eAAeO,kBAAkBA,CACtCvB,GAA2B,EAC3BgB,WAAwB,GAAG,CAAC,CAAC,EACP;EACtB;EACA,MAAMQ,QAAQ,GAAG,IAAAC,yCAAqB,EAACzB,GAAG,CAAC;EAC3CgB,WAAW,GAAG;IAAE,GAAGQ,QAAQ;IAAE,GAAGR;EAAY,CAAC;EAE7C,IAAIA,WAAW,CAACU,IAAI,IAAI,CAAC1B,GAAG,CAACC,QAAQ,CAAC0B,eAAe,CAAC,CAAC,EAAE;IACvD,MAAM,IAAIrB,oBAAY,CAAC,2DAA2D,CAAC;EACrF;EAEA,IAAIU,WAAW,CAACY,IAAI,KAAK,KAAK,EAAE;IAC9B;IACA,OAAOZ,WAAW;EACpB;EAEA,OAAOD,WAAW,CAACf,GAAG,EAAEgB,WAAW,CAAC;AACtC","ignoreList":[]}

package/cjs/oidc/util/refreshToken.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"refreshToken.js","names":["isSameRefreshToken","a","b","refreshToken","isRefreshTokenError","err","isAuthApiError","xhr","responseJSON","error"],"sources":["../../../../lib/oidc/util/refreshToken.ts"],"sourcesContent":["import { RefreshToken } from '../types';\nimport { isAuthApiError } from '../../errors';\n\nexport function isSameRefreshToken(a: RefreshToken, b: RefreshToken) {\n return (a.refreshToken === b.refreshToken);\n}\n\nexport function isRefreshTokenError(err: Error) {\n if (!isAuthApiError(err)) {\n return false;\n }\n\n if (!err.xhr \|\| !err.xhr.responseJSON) {\n return false;\n }\n\n const { responseJSON } = err.xhr;\n if (responseJSON.error === 'invalid_grant') {\n return true;\n }\n\n return false;\n}"],"mappings":";;;;AACA;AAEO,~~SAASA~~,~~kBAAkB~~,CAACC,CAAe,EAAEC,CAAe,EAAE;EACnE,OAAQD,CAAC,CAACE,YAAY,KAAKD,CAAC,CAACC,YAAY;AAC3C;AAEO,SAASC,~~mBAAmB~~,CAACC,GAAU,EAAE;EAC9C,IAAI,CAAC,IAAAC,sBAAc,EAACD,GAAG,CAAC,EAAE;IACxB,OAAO,KAAK;EACd;EAEA,IAAI,CAACA,GAAG,CAACE,GAAG,IAAI,CAACF,GAAG,CAACE,GAAG,CAACC,YAAY,EAAE;IACrC,OAAO,KAAK;EACd;EAEA,MAAM;IAAEA;EAAa,CAAC,GAAGH,GAAG,CAACE,GAAG;EAChC,IAAIC,YAAY,CAACC,KAAK,KAAK,eAAe,EAAE;IAC1C,OAAO,IAAI;EACb;EAEA,OAAO,KAAK;AACd"}
1	+ {"version":3,"file":"refreshToken.js","names":["_errors","require","isSameRefreshToken","a","b","refreshToken","isRefreshTokenError","err","isAuthApiError","xhr","responseJSON","error"],"sources":["../../../../lib/oidc/util/refreshToken.ts"],"sourcesContent":["import { RefreshToken } from '../types';\nimport { isAuthApiError } from '../../errors';\n\nexport function isSameRefreshToken(a: RefreshToken, b: RefreshToken) {\n return (a.refreshToken === b.refreshToken);\n}\n\nexport function isRefreshTokenError(err: Error) {\n if (!isAuthApiError(err)) {\n return false;\n }\n\n if (!err.xhr \|\| !err.xhr.responseJSON) {\n return false;\n }\n\n const { responseJSON } = err.xhr;\n if (responseJSON.error === 'invalid_grant') {\n return true;\n }\n\n return false;\n}"],"mappings":";;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAEO,SAASC,kBAAkBA,CAACC,CAAe,EAAEC,CAAe,EAAE;EACnE,OAAQD,CAAC,CAACE,YAAY,KAAKD,CAAC,CAACC,YAAY;AAC3C;AAEO,SAASC,mBAAmBA,CAACC,GAAU,EAAE;EAC9C,IAAI,CAAC,IAAAC,sBAAc,EAACD,GAAG,CAAC,EAAE;IACxB,OAAO,KAAK;EACd;EAEA,IAAI,CAACA,GAAG,CAACE,GAAG,IAAI,CAACF,GAAG,CAACE,GAAG,CAACC,YAAY,EAAE;IACrC,OAAO,KAAK;EACd;EAEA,MAAM;IAAEA;EAAa,CAAC,GAAGH,GAAG,CAACE,GAAG;EAChC,IAAIC,YAAY,CAACC,KAAK,KAAK,eAAe,EAAE;IAC1C,OAAO,IAAI;EACb;EAEA,OAAO,KAAK;AACd","ignoreList":[]}