@okta/okta-auth-js 7.9.0 → 7.10.1

package/CHANGELOG.md

@@ -1,8 +1,21 @@
 # Changelog
 
+# 7.10.1
+
+### Other
+
+- [#1562](https://github.com/okta/okta-auth-js/pull/1562) chore: Remove `ua-parser-js`. Change `isMobileSafari18` to `isSafari18`
+
+# 7.10.0
+
+### Bug Fix
+
+- [#1552](https://github.com/okta/okta-auth-js/pull/1552) fix: start poll request when document is visible and awaken in Mobile Safari 18.x
+
 # 7.8.1
 
 ### Bug Fix
+
 - [#1547](https://github.com/okta/okta-auth-js/pull/1547) fix: replaces `jsonpath-plus` module
   - Address https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884
 

package/cjs/authn/util/poll.js

@@ -68,12 +68,13 @@ function getPollFn(sdk, res, ref) {
       var href = pollLink.href + (0, _util.toQueryString)(opts);
       return (0, _http.post)(sdk, href, (0, _stateToken.getStateToken)(res), {
         saveAuthnState: false,
-        withCredentials: true
+        withCredentials: true,
+        pollingIntent: true
       });
     }
     const delayNextPoll = ms => {
       // no need for extra logic in non-iOS environments, just continue polling
-      if (!(0, _features.isIOS)()) {
+      if (!(0, _features.isSafari18)()) {
         return (0, _util.delay)(ms);
       }
       let timeoutId;
@@ -114,7 +115,7 @@ function getPollFn(sdk, res, ref) {
       }
 
       // don't trigger polling request if page is hidden wait until window is visible again
-      if ((0, _features.isIOS)() && document.hidden) {
+      if ((0, _features.isSafari18)() && document.hidden) {
         let handler;
         return new Promise(resolve => {
           handler = () => {

package/cjs/authn/util/poll.js.map

@@ -1 +1 @@
-{"version":3,"file":"poll.js","names":["getPollFn","sdk","res","ref","options","delay","rememberDevice","autoPush","transactionCallBack","isNumber","isObject","DEFAULT_POLLING_DELAY","pollLink","getLink","pollFn","opts","e","Promise","reject","AuthSdkError","undefined","href","toQueryString","post","getStateToken","saveAuthnState","withCredentials","delayNextPoll","ms","isIOS","delayFn","timeoutId","cancelableDelay","resolve","setTimeout","delayForFocus","pageVisibilityHandler","pageDidHide","document","hidden","clearTimeout","addEventListener","then","removeEventListener","race","isPolling","retryCount","recursivePoll","AuthPollStopError","handler","pollRes","factorResult","tx","createTransaction","catch","err","xhr","status","delayLength","Math","pow"],"sources":["../../../../lib/authn/util/poll.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { post } from '../../http';\nimport { isNumber, isObject, getLink, toQueryString, delay as delayFn } from '../../util';\nimport { DEFAULT_POLLING_DELAY } from '../../constants';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport AuthPollStopError from '../../errors/AuthPollStopError';\nimport { AuthnTransactionState } from '../types';\nimport { getStateToken } from './stateToken';\nimport { isIOS } from '../../features';\n\ninterface PollOptions {\n  delay?: number;\n  rememberDevice?: boolean;\n  autoPush?: boolean;\n  transactionCallBack?: (AuthnTransactionState) => void;\n}\n\nexport function getPollFn(sdk, res: AuthnTransactionState, ref) {\n  return function (options: PollOptions | number) {\n    var delay;\n    var rememberDevice;\n    var autoPush;\n    var transactionCallBack;\n\n    if (isNumber(options)) {\n      delay = options;\n    } else if (isObject(options)) {\n      options = options as PollOptions;\n      delay = options.delay;\n      rememberDevice = options.rememberDevice;\n      autoPush = options.autoPush;\n      transactionCallBack = options.transactionCallBack;\n    }\n\n    if (!delay && delay !== 0) {\n      delay = DEFAULT_POLLING_DELAY;\n    }\n\n    // Get the poll function\n    var pollLink = getLink(res, 'next', 'poll');\n    // eslint-disable-next-line complexity\n    function pollFn() {\n      var opts = {} as PollOptions;\n      if (typeof autoPush === 'function') {\n        try {\n          opts.autoPush = !!autoPush();\n        }\n        catch (e) {\n          return Promise.reject(new AuthSdkError('AutoPush resulted in an error.'));\n        }\n      }\n      else if (autoPush !== undefined && autoPush !== null) {\n        opts.autoPush = !!autoPush;\n      }\n      if (typeof rememberDevice === 'function') {\n        try {\n          opts.rememberDevice = !!rememberDevice();\n        }\n        catch (e) {\n          return Promise.reject(new AuthSdkError('RememberDevice resulted in an error.'));\n        }\n      }\n      else if (rememberDevice !== undefined && rememberDevice !== null) {\n        opts.rememberDevice = !!rememberDevice;\n      }\n\n      var href = pollLink.href + toQueryString(opts);\n      return post(sdk, href, getStateToken(res), {\n        saveAuthnState: false,\n        withCredentials: true\n      });\n    }\n\n    const delayNextPoll = (ms) => {\n      // no need for extra logic in non-iOS environments, just continue polling\n      if (!isIOS()) {\n        return delayFn(ms);\n      }\n\n      let timeoutId: ReturnType<typeof setTimeout>;\n      const cancelableDelay = () => {\n        return new Promise((resolve) => {\n          timeoutId = setTimeout(resolve, ms);\n        });\n      };\n\n      const delayForFocus = () => {\n        let pageVisibilityHandler;\n        return new Promise<void>((resolve) => {\n          let pageDidHide = false;\n          pageVisibilityHandler = () => {\n            if (document.hidden) {\n              clearTimeout(timeoutId);\n              pageDidHide = true;\n            }\n            else if (pageDidHide) {\n              resolve();\n            }\n          };\n\n          document.addEventListener('visibilitychange', pageVisibilityHandler);\n        })\n        .then(() => {\n          document.removeEventListener('visibilitychange', pageVisibilityHandler);\n        });\n      };\n\n      return Promise.race([\n        // this function will never resolve if the page changes to hidden because the timeout gets cleared\n        cancelableDelay(),\n        // this function won't resolve until the page becomes visible after being hidden\n        delayForFocus(),\n      ]);\n    };\n\n    ref.isPolling = true;\n\n    var retryCount = 0;\n    var recursivePoll = function () {\n      // If the poll was manually stopped during the delay\n      if (!ref.isPolling) {\n        return Promise.reject(new AuthPollStopError());\n      }\n\n      // don't trigger polling request if page is hidden wait until window is visible again\n      if (isIOS() && document.hidden) {\n        let handler;\n        return new Promise<void>((resolve) => {\n          handler = () => {\n            if (!document.hidden) {\n              resolve();\n            }\n          };\n          document.addEventListener('visibilitychange', handler);\n        })\n        .then(() => {\n          document.removeEventListener('visibilitychange', handler);\n          return recursivePoll();\n        });\n      }\n\n      return pollFn()\n        .then(function (pollRes) {\n          // Reset our retry counter on success\n          retryCount = 0;\n\n          // If we're still waiting\n          if (pollRes.factorResult && pollRes.factorResult === 'WAITING') {\n\n            // If the poll was manually stopped while the pollFn was called\n            if (!ref.isPolling) {\n              throw new AuthPollStopError();\n            }\n\n            if (typeof transactionCallBack === 'function') {\n              transactionCallBack(pollRes);\n            }\n\n            // Continue poll\n            return delayNextPoll(delay).then(recursivePoll);\n\n          } else {\n            // Any non-waiting result, even if polling was stopped\n            // during a request, will return\n            ref.isPolling = false;\n            return sdk.tx.createTransaction(pollRes);\n          }\n        })\n        .catch(function(err) {\n          // Exponential backoff, up to 16 seconds\n          if (err.xhr &&\n              (err.xhr.status === 0 || err.xhr.status === 429) &&\n              retryCount <= 4) {\n            var delayLength = Math.pow(2, retryCount) * 1000;\n            retryCount++;\n            return delayNextPoll(delayLength)\n              .then(recursivePoll);\n          }\n          throw err;\n        });\n    };\n    return recursivePoll()\n      .catch(function(err) {\n        ref.isPolling = false;\n        throw err;\n      });\n  };\n}\n"],"mappings":";;;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBO,SAASA,SAAS,CAACC,GAAG,EAAEC,GAA0B,EAAEC,GAAG,EAAE;EAC9D,OAAO,UAAUC,OAA6B,EAAE;IAC9C,IAAIC,KAAK;IACT,IAAIC,cAAc;IAClB,IAAIC,QAAQ;IACZ,IAAIC,mBAAmB;IAEvB,IAAI,IAAAC,cAAQ,EAACL,OAAO,CAAC,EAAE;MACrBC,KAAK,GAAGD,OAAO;IACjB,CAAC,MAAM,IAAI,IAAAM,cAAQ,EAACN,OAAO,CAAC,EAAE;MAC5BA,OAAO,GAAGA,OAAsB;MAChCC,KAAK,GAAGD,OAAO,CAACC,KAAK;MACrBC,cAAc,GAAGF,OAAO,CAACE,cAAc;MACvCC,QAAQ,GAAGH,OAAO,CAACG,QAAQ;MAC3BC,mBAAmB,GAAGJ,OAAO,CAACI,mBAAmB;IACnD;IAEA,IAAI,CAACH,KAAK,IAAIA,KAAK,KAAK,CAAC,EAAE;MACzBA,KAAK,GAAGM,gCAAqB;IAC/B;;IAEA;IACA,IAAIC,QAAQ,GAAG,IAAAC,aAAO,EAACX,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;IAC3C;IACA,SAASY,MAAM,GAAG;MAChB,IAAIC,IAAI,GAAG,CAAC,CAAgB;MAC5B,IAAI,OAAOR,QAAQ,KAAK,UAAU,EAAE;QAClC,IAAI;UACFQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ,EAAE;QAC9B,CAAC,CACD,OAAOS,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,gCAAgC,CAAC,CAAC;QAC3E;MACF,CAAC,MACI,IAAIZ,QAAQ,KAAKa,SAAS,IAAIb,QAAQ,KAAK,IAAI,EAAE;QACpDQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ;MAC5B;MACA,IAAI,OAAOD,cAAc,KAAK,UAAU,EAAE;QACxC,IAAI;UACFS,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc,EAAE;QAC1C,CAAC,CACD,OAAOU,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,sCAAsC,CAAC,CAAC;QACjF;MACF,CAAC,MACI,IAAIb,cAAc,KAAKc,SAAS,IAAId,cAAc,KAAK,IAAI,EAAE;QAChES,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc;MACxC;MAEA,IAAIe,IAAI,GAAGT,QAAQ,CAACS,IAAI,GAAG,IAAAC,mBAAa,EAACP,IAAI,CAAC;MAC9C,OAAO,IAAAQ,UAAI,EAACtB,GAAG,EAAEoB,IAAI,EAAE,IAAAG,yBAAa,EAACtB,GAAG,CAAC,EAAE;QACzCuB,cAAc,EAAE,KAAK;QACrBC,eAAe,EAAE;MACnB,CAAC,CAAC;IACJ;IAEA,MAAMC,aAAa,GAAIC,EAAE,IAAK;MAC5B;MACA,IAAI,CAAC,IAAAC,eAAK,GAAE,EAAE;QACZ,OAAO,IAAAC,WAAO,EAACF,EAAE,CAAC;MACpB;MAEA,IAAIG,SAAwC;MAC5C,MAAMC,eAAe,GAAG,MAAM;QAC5B,OAAO,IAAIf,OAAO,CAAEgB,OAAO,IAAK;UAC9BF,SAAS,GAAGG,UAAU,CAACD,OAAO,EAAEL,EAAE,CAAC;QACrC,CAAC,CAAC;MACJ,CAAC;MAED,MAAMO,aAAa,GAAG,MAAM;QAC1B,IAAIC,qBAAqB;QACzB,OAAO,IAAInB,OAAO,CAAQgB,OAAO,IAAK;UACpC,IAAII,WAAW,GAAG,KAAK;UACvBD,qBAAqB,GAAG,MAAM;YAC5B,IAAIE,QAAQ,CAACC,MAAM,EAAE;cACnBC,YAAY,CAACT,SAAS,CAAC;cACvBM,WAAW,GAAG,IAAI;YACpB,CAAC,MACI,IAAIA,WAAW,EAAE;cACpBJ,OAAO,EAAE;YACX;UACF,CAAC;UAEDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEL,qBAAqB,CAAC;QACtE,CAAC,CAAC,CACDM,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEP,qBAAqB,CAAC;QACzE,CAAC,CAAC;MACJ,CAAC;MAED,OAAOnB,OAAO,CAAC2B,IAAI,CAAC;MAClB;MACAZ,eAAe,EAAE;MACjB;MACAG,aAAa,EAAE,CAChB,CAAC;IACJ,CAAC;IAEDhC,GAAG,CAAC0C,SAAS,GAAG,IAAI;IAEpB,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,aAAa,GAAG,YAAY;MAC9B;MACA,IAAI,CAAC5C,GAAG,CAAC0C,SAAS,EAAE;QAClB,OAAO5B,OAAO,CAACC,MAAM,CAAC,IAAI8B,0BAAiB,EAAE,CAAC;MAChD;;MAEA;MACA,IAAI,IAAAnB,eAAK,GAAE,IAAIS,QAAQ,CAACC,MAAM,EAAE;QAC9B,IAAIU,OAAO;QACX,OAAO,IAAIhC,OAAO,CAAQgB,OAAO,IAAK;UACpCgB,OAAO,GAAG,MAAM;YACd,IAAI,CAACX,QAAQ,CAACC,MAAM,EAAE;cACpBN,OAAO,EAAE;YACX;UACF,CAAC;UACDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEQ,OAAO,CAAC;QACxD,CAAC,CAAC,CACDP,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEM,OAAO,CAAC;UACzD,OAAOF,aAAa,EAAE;QACxB,CAAC,CAAC;MACJ;MAEA,OAAOjC,MAAM,EAAE,CACZ4B,IAAI,CAAC,UAAUQ,OAAO,EAAE;QACvB;QACAJ,UAAU,GAAG,CAAC;;QAEd;QACA,IAAII,OAAO,CAACC,YAAY,IAAID,OAAO,CAACC,YAAY,KAAK,SAAS,EAAE;UAE9D;UACA,IAAI,CAAChD,GAAG,CAAC0C,SAAS,EAAE;YAClB,MAAM,IAAIG,0BAAiB,EAAE;UAC/B;UAEA,IAAI,OAAOxC,mBAAmB,KAAK,UAAU,EAAE;YAC7CA,mBAAmB,CAAC0C,OAAO,CAAC;UAC9B;;UAEA;UACA,OAAOvB,aAAa,CAACtB,KAAK,CAAC,CAACqC,IAAI,CAACK,aAAa,CAAC;QAEjD,CAAC,MAAM;UACL;UACA;UACA5C,GAAG,CAAC0C,SAAS,GAAG,KAAK;UACrB,OAAO5C,GAAG,CAACmD,EAAE,CAACC,iBAAiB,CAACH,OAAO,CAAC;QAC1C;MACF,CAAC,CAAC,CACDI,KAAK,CAAC,UAASC,GAAG,EAAE;QACnB;QACA,IAAIA,GAAG,CAACC,GAAG,KACND,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,CAAC,IAAIF,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,GAAG,CAAC,IAChDX,UAAU,IAAI,CAAC,EAAE;UACnB,IAAIY,WAAW,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEd,UAAU,CAAC,GAAG,IAAI;UAChDA,UAAU,EAAE;UACZ,OAAOnB,aAAa,CAAC+B,WAAW,CAAC,CAC9BhB,IAAI,CAACK,aAAa,CAAC;QACxB;QACA,MAAMQ,GAAG;MACX,CAAC,CAAC;IACN,CAAC;IACD,OAAOR,aAAa,EAAE,CACnBO,KAAK,CAAC,UAASC,GAAG,EAAE;MACnBpD,GAAG,CAAC0C,SAAS,GAAG,KAAK;MACrB,MAAMU,GAAG;IACX,CAAC,CAAC;EACN,CAAC;AACH"}
+{"version":3,"file":"poll.js","names":["getPollFn","sdk","res","ref","options","delay","rememberDevice","autoPush","transactionCallBack","isNumber","isObject","DEFAULT_POLLING_DELAY","pollLink","getLink","pollFn","opts","e","Promise","reject","AuthSdkError","undefined","href","toQueryString","post","getStateToken","saveAuthnState","withCredentials","pollingIntent","delayNextPoll","ms","isSafari18","delayFn","timeoutId","cancelableDelay","resolve","setTimeout","delayForFocus","pageVisibilityHandler","pageDidHide","document","hidden","clearTimeout","addEventListener","then","removeEventListener","race","isPolling","retryCount","recursivePoll","AuthPollStopError","handler","pollRes","factorResult","tx","createTransaction","catch","err","xhr","status","delayLength","Math","pow"],"sources":["../../../../lib/authn/util/poll.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport { post } from '../../http';\nimport { isNumber, isObject, getLink, toQueryString, delay as delayFn } from '../../util';\nimport { DEFAULT_POLLING_DELAY } from '../../constants';\nimport AuthSdkError from '../../errors/AuthSdkError';\nimport AuthPollStopError from '../../errors/AuthPollStopError';\nimport { AuthnTransactionState } from '../types';\nimport { getStateToken } from './stateToken';\nimport { isSafari18 } from '../../features';\n\ninterface PollOptions {\n  delay?: number;\n  rememberDevice?: boolean;\n  autoPush?: boolean;\n  transactionCallBack?: (AuthnTransactionState) => void;\n}\n\nexport function getPollFn(sdk, res: AuthnTransactionState, ref) {\n  return function (options: PollOptions | number) {\n    var delay;\n    var rememberDevice;\n    var autoPush;\n    var transactionCallBack;\n\n    if (isNumber(options)) {\n      delay = options;\n    } else if (isObject(options)) {\n      options = options as PollOptions;\n      delay = options.delay;\n      rememberDevice = options.rememberDevice;\n      autoPush = options.autoPush;\n      transactionCallBack = options.transactionCallBack;\n    }\n\n    if (!delay && delay !== 0) {\n      delay = DEFAULT_POLLING_DELAY;\n    }\n\n    // Get the poll function\n    var pollLink = getLink(res, 'next', 'poll');\n    // eslint-disable-next-line complexity\n    function pollFn() {\n      var opts = {} as PollOptions;\n      if (typeof autoPush === 'function') {\n        try {\n          opts.autoPush = !!autoPush();\n        }\n        catch (e) {\n          return Promise.reject(new AuthSdkError('AutoPush resulted in an error.'));\n        }\n      }\n      else if (autoPush !== undefined && autoPush !== null) {\n        opts.autoPush = !!autoPush;\n      }\n      if (typeof rememberDevice === 'function') {\n        try {\n          opts.rememberDevice = !!rememberDevice();\n        }\n        catch (e) {\n          return Promise.reject(new AuthSdkError('RememberDevice resulted in an error.'));\n        }\n      }\n      else if (rememberDevice !== undefined && rememberDevice !== null) {\n        opts.rememberDevice = !!rememberDevice;\n      }\n\n      var href = pollLink.href + toQueryString(opts);\n      return post(sdk, href, getStateToken(res), {\n        saveAuthnState: false,\n        withCredentials: true,\n        pollingIntent: true,\n      });\n    }\n\n    const delayNextPoll = (ms) => {\n      // no need for extra logic in non-iOS environments, just continue polling\n      if (!isSafari18()) {\n        return delayFn(ms);\n      }\n\n      let timeoutId: ReturnType<typeof setTimeout>;\n      const cancelableDelay = () => {\n        return new Promise((resolve) => {\n          timeoutId = setTimeout(resolve, ms);\n        });\n      };\n\n      const delayForFocus = () => {\n        let pageVisibilityHandler;\n        return new Promise<void>((resolve) => {\n          let pageDidHide = false;\n          pageVisibilityHandler = () => {\n            if (document.hidden) {\n              clearTimeout(timeoutId);\n              pageDidHide = true;\n            }\n            else if (pageDidHide) {\n              resolve();\n            }\n          };\n\n          document.addEventListener('visibilitychange', pageVisibilityHandler);\n        })\n        .then(() => {\n          document.removeEventListener('visibilitychange', pageVisibilityHandler);\n        });\n      };\n\n      return Promise.race([\n        // this function will never resolve if the page changes to hidden because the timeout gets cleared\n        cancelableDelay(),\n        // this function won't resolve until the page becomes visible after being hidden\n        delayForFocus(),\n      ]);\n    };\n\n    ref.isPolling = true;\n\n    var retryCount = 0;\n    var recursivePoll = function () {\n      // If the poll was manually stopped during the delay\n      if (!ref.isPolling) {\n        return Promise.reject(new AuthPollStopError());\n      }\n\n      // don't trigger polling request if page is hidden wait until window is visible again\n      if (isSafari18() && document.hidden) {\n        let handler;\n        return new Promise<void>((resolve) => {\n          handler = () => {\n            if (!document.hidden) {\n              resolve();\n            }\n          };\n          document.addEventListener('visibilitychange', handler);\n        })\n        .then(() => {\n          document.removeEventListener('visibilitychange', handler);\n          return recursivePoll();\n        });\n      }\n\n      return pollFn()\n        .then(function (pollRes) {\n          // Reset our retry counter on success\n          retryCount = 0;\n\n          // If we're still waiting\n          if (pollRes.factorResult && pollRes.factorResult === 'WAITING') {\n\n            // If the poll was manually stopped while the pollFn was called\n            if (!ref.isPolling) {\n              throw new AuthPollStopError();\n            }\n\n            if (typeof transactionCallBack === 'function') {\n              transactionCallBack(pollRes);\n            }\n\n            // Continue poll\n            return delayNextPoll(delay).then(recursivePoll);\n\n          } else {\n            // Any non-waiting result, even if polling was stopped\n            // during a request, will return\n            ref.isPolling = false;\n            return sdk.tx.createTransaction(pollRes);\n          }\n        })\n        .catch(function(err) {\n          // Exponential backoff, up to 16 seconds\n          if (err.xhr &&\n              (err.xhr.status === 0 || err.xhr.status === 429) &&\n              retryCount <= 4) {\n            var delayLength = Math.pow(2, retryCount) * 1000;\n            retryCount++;\n            return delayNextPoll(delayLength)\n              .then(recursivePoll);\n          }\n          throw err;\n        });\n    };\n    return recursivePoll()\n      .catch(function(err) {\n        ref.isPolling = false;\n        throw err;\n      });\n  };\n}\n"],"mappings":";;;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBO,SAASA,SAAS,CAACC,GAAG,EAAEC,GAA0B,EAAEC,GAAG,EAAE;EAC9D,OAAO,UAAUC,OAA6B,EAAE;IAC9C,IAAIC,KAAK;IACT,IAAIC,cAAc;IAClB,IAAIC,QAAQ;IACZ,IAAIC,mBAAmB;IAEvB,IAAI,IAAAC,cAAQ,EAACL,OAAO,CAAC,EAAE;MACrBC,KAAK,GAAGD,OAAO;IACjB,CAAC,MAAM,IAAI,IAAAM,cAAQ,EAACN,OAAO,CAAC,EAAE;MAC5BA,OAAO,GAAGA,OAAsB;MAChCC,KAAK,GAAGD,OAAO,CAACC,KAAK;MACrBC,cAAc,GAAGF,OAAO,CAACE,cAAc;MACvCC,QAAQ,GAAGH,OAAO,CAACG,QAAQ;MAC3BC,mBAAmB,GAAGJ,OAAO,CAACI,mBAAmB;IACnD;IAEA,IAAI,CAACH,KAAK,IAAIA,KAAK,KAAK,CAAC,EAAE;MACzBA,KAAK,GAAGM,gCAAqB;IAC/B;;IAEA;IACA,IAAIC,QAAQ,GAAG,IAAAC,aAAO,EAACX,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;IAC3C;IACA,SAASY,MAAM,GAAG;MAChB,IAAIC,IAAI,GAAG,CAAC,CAAgB;MAC5B,IAAI,OAAOR,QAAQ,KAAK,UAAU,EAAE;QAClC,IAAI;UACFQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ,EAAE;QAC9B,CAAC,CACD,OAAOS,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,gCAAgC,CAAC,CAAC;QAC3E;MACF,CAAC,MACI,IAAIZ,QAAQ,KAAKa,SAAS,IAAIb,QAAQ,KAAK,IAAI,EAAE;QACpDQ,IAAI,CAACR,QAAQ,GAAG,CAAC,CAACA,QAAQ;MAC5B;MACA,IAAI,OAAOD,cAAc,KAAK,UAAU,EAAE;QACxC,IAAI;UACFS,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc,EAAE;QAC1C,CAAC,CACD,OAAOU,CAAC,EAAE;UACR,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIC,qBAAY,CAAC,sCAAsC,CAAC,CAAC;QACjF;MACF,CAAC,MACI,IAAIb,cAAc,KAAKc,SAAS,IAAId,cAAc,KAAK,IAAI,EAAE;QAChES,IAAI,CAACT,cAAc,GAAG,CAAC,CAACA,cAAc;MACxC;MAEA,IAAIe,IAAI,GAAGT,QAAQ,CAACS,IAAI,GAAG,IAAAC,mBAAa,EAACP,IAAI,CAAC;MAC9C,OAAO,IAAAQ,UAAI,EAACtB,GAAG,EAAEoB,IAAI,EAAE,IAAAG,yBAAa,EAACtB,GAAG,CAAC,EAAE;QACzCuB,cAAc,EAAE,KAAK;QACrBC,eAAe,EAAE,IAAI;QACrBC,aAAa,EAAE;MACjB,CAAC,CAAC;IACJ;IAEA,MAAMC,aAAa,GAAIC,EAAE,IAAK;MAC5B;MACA,IAAI,CAAC,IAAAC,oBAAU,GAAE,EAAE;QACjB,OAAO,IAAAC,WAAO,EAACF,EAAE,CAAC;MACpB;MAEA,IAAIG,SAAwC;MAC5C,MAAMC,eAAe,GAAG,MAAM;QAC5B,OAAO,IAAIhB,OAAO,CAAEiB,OAAO,IAAK;UAC9BF,SAAS,GAAGG,UAAU,CAACD,OAAO,EAAEL,EAAE,CAAC;QACrC,CAAC,CAAC;MACJ,CAAC;MAED,MAAMO,aAAa,GAAG,MAAM;QAC1B,IAAIC,qBAAqB;QACzB,OAAO,IAAIpB,OAAO,CAAQiB,OAAO,IAAK;UACpC,IAAII,WAAW,GAAG,KAAK;UACvBD,qBAAqB,GAAG,MAAM;YAC5B,IAAIE,QAAQ,CAACC,MAAM,EAAE;cACnBC,YAAY,CAACT,SAAS,CAAC;cACvBM,WAAW,GAAG,IAAI;YACpB,CAAC,MACI,IAAIA,WAAW,EAAE;cACpBJ,OAAO,EAAE;YACX;UACF,CAAC;UAEDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEL,qBAAqB,CAAC;QACtE,CAAC,CAAC,CACDM,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEP,qBAAqB,CAAC;QACzE,CAAC,CAAC;MACJ,CAAC;MAED,OAAOpB,OAAO,CAAC4B,IAAI,CAAC;MAClB;MACAZ,eAAe,EAAE;MACjB;MACAG,aAAa,EAAE,CAChB,CAAC;IACJ,CAAC;IAEDjC,GAAG,CAAC2C,SAAS,GAAG,IAAI;IAEpB,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,aAAa,GAAG,YAAY;MAC9B;MACA,IAAI,CAAC7C,GAAG,CAAC2C,SAAS,EAAE;QAClB,OAAO7B,OAAO,CAACC,MAAM,CAAC,IAAI+B,0BAAiB,EAAE,CAAC;MAChD;;MAEA;MACA,IAAI,IAAAnB,oBAAU,GAAE,IAAIS,QAAQ,CAACC,MAAM,EAAE;QACnC,IAAIU,OAAO;QACX,OAAO,IAAIjC,OAAO,CAAQiB,OAAO,IAAK;UACpCgB,OAAO,GAAG,MAAM;YACd,IAAI,CAACX,QAAQ,CAACC,MAAM,EAAE;cACpBN,OAAO,EAAE;YACX;UACF,CAAC;UACDK,QAAQ,CAACG,gBAAgB,CAAC,kBAAkB,EAAEQ,OAAO,CAAC;QACxD,CAAC,CAAC,CACDP,IAAI,CAAC,MAAM;UACVJ,QAAQ,CAACK,mBAAmB,CAAC,kBAAkB,EAAEM,OAAO,CAAC;UACzD,OAAOF,aAAa,EAAE;QACxB,CAAC,CAAC;MACJ;MAEA,OAAOlC,MAAM,EAAE,CACZ6B,IAAI,CAAC,UAAUQ,OAAO,EAAE;QACvB;QACAJ,UAAU,GAAG,CAAC;;QAEd;QACA,IAAII,OAAO,CAACC,YAAY,IAAID,OAAO,CAACC,YAAY,KAAK,SAAS,EAAE;UAE9D;UACA,IAAI,CAACjD,GAAG,CAAC2C,SAAS,EAAE;YAClB,MAAM,IAAIG,0BAAiB,EAAE;UAC/B;UAEA,IAAI,OAAOzC,mBAAmB,KAAK,UAAU,EAAE;YAC7CA,mBAAmB,CAAC2C,OAAO,CAAC;UAC9B;;UAEA;UACA,OAAOvB,aAAa,CAACvB,KAAK,CAAC,CAACsC,IAAI,CAACK,aAAa,CAAC;QAEjD,CAAC,MAAM;UACL;UACA;UACA7C,GAAG,CAAC2C,SAAS,GAAG,KAAK;UACrB,OAAO7C,GAAG,CAACoD,EAAE,CAACC,iBAAiB,CAACH,OAAO,CAAC;QAC1C;MACF,CAAC,CAAC,CACDI,KAAK,CAAC,UAASC,GAAG,EAAE;QACnB;QACA,IAAIA,GAAG,CAACC,GAAG,KACND,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,CAAC,IAAIF,GAAG,CAACC,GAAG,CAACC,MAAM,KAAK,GAAG,CAAC,IAChDX,UAAU,IAAI,CAAC,EAAE;UACnB,IAAIY,WAAW,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEd,UAAU,CAAC,GAAG,IAAI;UAChDA,UAAU,EAAE;UACZ,OAAOnB,aAAa,CAAC+B,WAAW,CAAC,CAC9BhB,IAAI,CAACK,aAAa,CAAC;QACxB;QACA,MAAMQ,GAAG;MACX,CAAC,CAAC;IACN,CAAC;IACD,OAAOR,aAAa,EAAE,CACnBO,KAAK,CAAC,UAASC,GAAG,EAAE;MACnBrD,GAAG,CAAC2C,SAAS,GAAG,KAAK;MACrB,MAAMU,GAAG;IACX,CAAC,CAAC;EACN,CAAC;AACH"}

package/cjs/base/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../../lib/base/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport * as constants from '../constants';\n\nexport declare class EventEmitter {\n  on   (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n  once (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n  emit (event: string, ...args: any[]): EventEmitter;\n  off  (event: string, callback?: (...args: any[]) => any): EventEmitter;\n}\n\nexport interface FeaturesAPI {\n  isLocalhost(): boolean;\n  isHTTPS(): boolean;\n  isPopupPostMessageSupported(): boolean;\n  hasTextEncoder(): boolean;\n  isTokenVerifySupported(): boolean;\n  isPKCESupported(): boolean;\n  isIE11OrLess(): boolean;\n  isDPoPSupported(): boolean;\n  isIOS(): boolean;\n}\n\n\nexport interface FingerprintOptions {\n  timeout?: number;\n  container?: Element | null;\n}\nexport type FingerprintAPI = (options?: FingerprintOptions) => Promise<string>;\n\n// options that can be passed to AuthJS\nexport interface OktaAuthBaseOptions {\n  devMode?: boolean;\n}\n\n// a class that constructs options\nexport interface OktaAuthOptionsConstructor<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n  new(args: any): O;\n}\n\n// a \"base\" instance of AuthJS\nexport interface OktaAuthBaseInterface<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n  options: O;\n  emitter: EventEmitter;\n  features: FeaturesAPI;\n}\n\n// a constructor that returns an instance of AuthJS\nexport interface OktaAuthConstructor\n<\n  I extends OktaAuthBaseInterface = OktaAuthBaseInterface\n> \n{\n  new(...args: any[]): I;\n  features: FeaturesAPI; // static class member\n  constants: typeof constants;\n}\n"],"mappings":""}
+{"version":3,"file":"types.js","names":[],"sources":["../../../lib/base/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport * as constants from '../constants';\n\nexport declare class EventEmitter {\n  on   (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n  once (event: string, callback: (...args: any[]) => any, ctx?: any): EventEmitter;\n  emit (event: string, ...args: any[]): EventEmitter;\n  off  (event: string, callback?: (...args: any[]) => any): EventEmitter;\n}\n\nexport interface FeaturesAPI {\n  isLocalhost(): boolean;\n  isHTTPS(): boolean;\n  isPopupPostMessageSupported(): boolean;\n  hasTextEncoder(): boolean;\n  isTokenVerifySupported(): boolean;\n  isPKCESupported(): boolean;\n  isIE11OrLess(): boolean;\n  isDPoPSupported(): boolean;\n  isIOS(): boolean;\n  isSafari18(): boolean;\n}\n\n\nexport interface FingerprintOptions {\n  timeout?: number;\n  container?: Element | null;\n}\nexport type FingerprintAPI = (options?: FingerprintOptions) => Promise<string>;\n\n// options that can be passed to AuthJS\nexport interface OktaAuthBaseOptions {\n  devMode?: boolean;\n}\n\n// a class that constructs options\nexport interface OktaAuthOptionsConstructor<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n  new(args: any): O;\n}\n\n// a \"base\" instance of AuthJS\nexport interface OktaAuthBaseInterface<O extends OktaAuthBaseOptions = OktaAuthBaseOptions> {\n  options: O;\n  emitter: EventEmitter;\n  features: FeaturesAPI;\n}\n\n// a constructor that returns an instance of AuthJS\nexport interface OktaAuthConstructor\n<\n  I extends OktaAuthBaseInterface = OktaAuthBaseInterface\n> \n{\n  new(...args: any[]): I;\n  features: FeaturesAPI; // static class member\n  constants: typeof constants;\n}\n"],"mappings":""}

package/cjs/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 
-exports.TRANSACTION_STORAGE_NAME = exports.TOKEN_STORAGE_NAME = exports.STATE_TOKEN_KEY_NAME = exports.SHARED_TRANSACTION_STORAGE_NAME = exports.REFRESH_TOKEN_STORAGE_KEY = exports.REFERRER_PATH_STORAGE_KEY = exports.PKCE_STORAGE_NAME = exports.ORIGINAL_URI_STORAGE_NAME = exports.MIN_VERIFIER_LENGTH = exports.MAX_VERIFIER_LENGTH = exports.ID_TOKEN_STORAGE_KEY = exports.IDX_RESPONSE_STORAGE_NAME = exports.IDX_API_VERSION = exports.DEFAULT_POLLING_DELAY = exports.DEFAULT_MAX_CLOCK_SKEW = exports.DEFAULT_CODE_CHALLENGE_METHOD = exports.DEFAULT_CACHE_DURATION = exports.CACHE_STORAGE_NAME = exports.ACCESS_TOKEN_STORAGE_KEY = void 0;
+exports.TRANSACTION_STORAGE_NAME = exports.TOKEN_STORAGE_NAME = exports.STATE_TOKEN_KEY_NAME = exports.SHARED_TRANSACTION_STORAGE_NAME = exports.REFRESH_TOKEN_STORAGE_KEY = exports.REFERRER_PATH_STORAGE_KEY = exports.PKCE_STORAGE_NAME = exports.ORIGINAL_URI_STORAGE_NAME = exports.MIN_VERIFIER_LENGTH = exports.MAX_VERIFIER_LENGTH = exports.IOS_PAGE_AWAKEN_TIMEOUT = exports.IOS_MAX_RETRY_COUNT = exports.ID_TOKEN_STORAGE_KEY = exports.IDX_RESPONSE_STORAGE_NAME = exports.IDX_API_VERSION = exports.DEFAULT_POLLING_DELAY = exports.DEFAULT_MAX_CLOCK_SKEW = exports.DEFAULT_CODE_CHALLENGE_METHOD = exports.DEFAULT_CACHE_DURATION = exports.CACHE_STORAGE_NAME = exports.ACCESS_TOKEN_STORAGE_KEY = void 0;
 /*!
  * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
  * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
@@ -17,6 +17,10 @@ const STATE_TOKEN_KEY_NAME = 'oktaStateToken';
 exports.STATE_TOKEN_KEY_NAME = STATE_TOKEN_KEY_NAME;
 const DEFAULT_POLLING_DELAY = 500;
 exports.DEFAULT_POLLING_DELAY = DEFAULT_POLLING_DELAY;
+const IOS_PAGE_AWAKEN_TIMEOUT = 500;
+exports.IOS_PAGE_AWAKEN_TIMEOUT = IOS_PAGE_AWAKEN_TIMEOUT;
+const IOS_MAX_RETRY_COUNT = 3;
+exports.IOS_MAX_RETRY_COUNT = IOS_MAX_RETRY_COUNT;
 const DEFAULT_MAX_CLOCK_SKEW = 300;
 exports.DEFAULT_MAX_CLOCK_SKEW = DEFAULT_MAX_CLOCK_SKEW;
 const DEFAULT_CACHE_DURATION = 86400;

package/cjs/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","names":["STATE_TOKEN_KEY_NAME","DEFAULT_POLLING_DELAY","DEFAULT_MAX_CLOCK_SKEW","DEFAULT_CACHE_DURATION","TOKEN_STORAGE_NAME","CACHE_STORAGE_NAME","PKCE_STORAGE_NAME","TRANSACTION_STORAGE_NAME","SHARED_TRANSACTION_STORAGE_NAME","ORIGINAL_URI_STORAGE_NAME","IDX_RESPONSE_STORAGE_NAME","ACCESS_TOKEN_STORAGE_KEY","ID_TOKEN_STORAGE_KEY","REFRESH_TOKEN_STORAGE_KEY","REFERRER_PATH_STORAGE_KEY","MIN_VERIFIER_LENGTH","MAX_VERIFIER_LENGTH","DEFAULT_CODE_CHALLENGE_METHOD","IDX_API_VERSION"],"sources":["../../lib/constants.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport const STATE_TOKEN_KEY_NAME = 'oktaStateToken';\nexport const DEFAULT_POLLING_DELAY = 500;\nexport const DEFAULT_MAX_CLOCK_SKEW = 300;\nexport const DEFAULT_CACHE_DURATION = 86400;\nexport const TOKEN_STORAGE_NAME = 'okta-token-storage';\nexport const CACHE_STORAGE_NAME = 'okta-cache-storage';\nexport const PKCE_STORAGE_NAME = 'okta-pkce-storage';\nexport const TRANSACTION_STORAGE_NAME = 'okta-transaction-storage';\nexport const SHARED_TRANSACTION_STORAGE_NAME = 'okta-shared-transaction-storage';\nexport const ORIGINAL_URI_STORAGE_NAME = 'okta-original-uri-storage';\nexport const IDX_RESPONSE_STORAGE_NAME = 'okta-idx-response-storage';\nexport const ACCESS_TOKEN_STORAGE_KEY = 'accessToken';\nexport const ID_TOKEN_STORAGE_KEY =  'idToken';\nexport const REFRESH_TOKEN_STORAGE_KEY =  'refreshToken';\nexport const REFERRER_PATH_STORAGE_KEY = 'referrerPath';\n\n// Code verifier: Random URL-safe string with a minimum length of 43 characters.\n// Code challenge: Base64 URL-encoded SHA-256 hash of the code verifier.\nexport const MIN_VERIFIER_LENGTH = 43;\nexport const MAX_VERIFIER_LENGTH = 128;\nexport const DEFAULT_CODE_CHALLENGE_METHOD = 'S256';\n\nexport const IDX_API_VERSION = '1.0.0';"],"mappings":";;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMA,oBAAoB,GAAG,gBAAgB;AAAC;AAC9C,MAAMC,qBAAqB,GAAG,GAAG;AAAC;AAClC,MAAMC,sBAAsB,GAAG,GAAG;AAAC;AACnC,MAAMC,sBAAsB,GAAG,KAAK;AAAC;AACrC,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,iBAAiB,GAAG,mBAAmB;AAAC;AAC9C,MAAMC,wBAAwB,GAAG,0BAA0B;AAAC;AAC5D,MAAMC,+BAA+B,GAAG,iCAAiC;AAAC;AAC1E,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,wBAAwB,GAAG,aAAa;AAAC;AAC/C,MAAMC,oBAAoB,GAAI,SAAS;AAAC;AACxC,MAAMC,yBAAyB,GAAI,cAAc;AAAC;AAClD,MAAMC,yBAAyB,GAAG,cAAc;;AAEvD;AACA;AAAA;AACO,MAAMC,mBAAmB,GAAG,EAAE;AAAC;AAC/B,MAAMC,mBAAmB,GAAG,GAAG;AAAC;AAChC,MAAMC,6BAA6B,GAAG,MAAM;AAAC;AAE7C,MAAMC,eAAe,GAAG,OAAO;AAAC"}
+{"version":3,"file":"constants.js","names":["STATE_TOKEN_KEY_NAME","DEFAULT_POLLING_DELAY","IOS_PAGE_AWAKEN_TIMEOUT","IOS_MAX_RETRY_COUNT","DEFAULT_MAX_CLOCK_SKEW","DEFAULT_CACHE_DURATION","TOKEN_STORAGE_NAME","CACHE_STORAGE_NAME","PKCE_STORAGE_NAME","TRANSACTION_STORAGE_NAME","SHARED_TRANSACTION_STORAGE_NAME","ORIGINAL_URI_STORAGE_NAME","IDX_RESPONSE_STORAGE_NAME","ACCESS_TOKEN_STORAGE_KEY","ID_TOKEN_STORAGE_KEY","REFRESH_TOKEN_STORAGE_KEY","REFERRER_PATH_STORAGE_KEY","MIN_VERIFIER_LENGTH","MAX_VERIFIER_LENGTH","DEFAULT_CODE_CHALLENGE_METHOD","IDX_API_VERSION"],"sources":["../../lib/constants.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport const STATE_TOKEN_KEY_NAME = 'oktaStateToken';\nexport const DEFAULT_POLLING_DELAY = 500;\nexport const IOS_PAGE_AWAKEN_TIMEOUT = 500;\nexport const IOS_MAX_RETRY_COUNT = 3;\nexport const DEFAULT_MAX_CLOCK_SKEW = 300;\nexport const DEFAULT_CACHE_DURATION = 86400;\nexport const TOKEN_STORAGE_NAME = 'okta-token-storage';\nexport const CACHE_STORAGE_NAME = 'okta-cache-storage';\nexport const PKCE_STORAGE_NAME = 'okta-pkce-storage';\nexport const TRANSACTION_STORAGE_NAME = 'okta-transaction-storage';\nexport const SHARED_TRANSACTION_STORAGE_NAME = 'okta-shared-transaction-storage';\nexport const ORIGINAL_URI_STORAGE_NAME = 'okta-original-uri-storage';\nexport const IDX_RESPONSE_STORAGE_NAME = 'okta-idx-response-storage';\nexport const ACCESS_TOKEN_STORAGE_KEY = 'accessToken';\nexport const ID_TOKEN_STORAGE_KEY =  'idToken';\nexport const REFRESH_TOKEN_STORAGE_KEY =  'refreshToken';\nexport const REFERRER_PATH_STORAGE_KEY = 'referrerPath';\n\n// Code verifier: Random URL-safe string with a minimum length of 43 characters.\n// Code challenge: Base64 URL-encoded SHA-256 hash of the code verifier.\nexport const MIN_VERIFIER_LENGTH = 43;\nexport const MAX_VERIFIER_LENGTH = 128;\nexport const DEFAULT_CODE_CHALLENGE_METHOD = 'S256';\n\nexport const IDX_API_VERSION = '1.0.0';"],"mappings":";;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMA,oBAAoB,GAAG,gBAAgB;AAAC;AAC9C,MAAMC,qBAAqB,GAAG,GAAG;AAAC;AAClC,MAAMC,uBAAuB,GAAG,GAAG;AAAC;AACpC,MAAMC,mBAAmB,GAAG,CAAC;AAAC;AAC9B,MAAMC,sBAAsB,GAAG,GAAG;AAAC;AACnC,MAAMC,sBAAsB,GAAG,KAAK;AAAC;AACrC,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,kBAAkB,GAAG,oBAAoB;AAAC;AAChD,MAAMC,iBAAiB,GAAG,mBAAmB;AAAC;AAC9C,MAAMC,wBAAwB,GAAG,0BAA0B;AAAC;AAC5D,MAAMC,+BAA+B,GAAG,iCAAiC;AAAC;AAC1E,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,yBAAyB,GAAG,2BAA2B;AAAC;AAC9D,MAAMC,wBAAwB,GAAG,aAAa;AAAC;AAC/C,MAAMC,oBAAoB,GAAI,SAAS;AAAC;AACxC,MAAMC,yBAAyB,GAAI,cAAc;AAAC;AAClD,MAAMC,yBAAyB,GAAG,cAAc;;AAEvD;AACA;AAAA;AACO,MAAMC,mBAAmB,GAAG,EAAE;AAAC;AAC/B,MAAMC,mBAAmB,GAAG,GAAG;AAAC;AAChC,MAAMC,6BAA6B,GAAG,MAAM;AAAC;AAE7C,MAAMC,eAAe,GAAG,OAAO;AAAC"}

package/cjs/features.js

@@ -11,6 +11,7 @@ exports.isIOS = isIOS;
 exports.isLocalhost = isLocalhost;
 exports.isPKCESupported = isPKCESupported;
 exports.isPopupPostMessageSupported = isPopupPostMessageSupported;
+exports.isSafari18 = isSafari18;
 exports.isTokenVerifySupported = isTokenVerifySupported;
 var _crypto = require("./crypto");
 /*!
@@ -90,4 +91,20 @@ function isIOS() {
   // @ts-expect-error - MSStream is not in `window` type, unsurprisingly
   /iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream;
 }
+const isIOSRegex = /iPad|iPhone|iPod/;
+const v18Regex = /Version\/18(\.| |$)/;
+const notSafariRegex = /EdgiOS|CriOS|Chrome/;
+
+/* eslint complexity:[0,8] */
+function isSafari18() {
+  if (isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined') {
+    const isIOS = isIOSRegex.test(navigator.userAgent);
+    // Mobile Safari in desktop mode emulates Macintosh in user agent
+    const isDesktop = navigator.userAgent.includes('Macintosh');
+    const isSafari18 = navigator.userAgent.includes('Safari/') && v18Regex.test(navigator.userAgent);
+    const isOtherBrowser = notSafariRegex.test(navigator.userAgent);
+    return isSafari18 && !isOtherBrowser && (isIOS || isDesktop);
+  }
+  return false;
+}
 //# sourceMappingURL=features.js.map

package/cjs/features.js.map

@@ -1 +1 @@
-{"version":3,"file":"features.js","names":["isWindowsPhone","isBrowser","document","window","isIE11OrLess","documentMode","getUserAgent","navigator","userAgent","isFingerprintSupported","agent","test","isPopupPostMessageSupported","isIE8or9","postMessage","isWebCryptoSubtleSupported","webcrypto","subtle","Uint8Array","isTokenVerifySupported","hasTextEncoder","TextEncoder","isPKCESupported","isHTTPS","location","protocol","isLocalhost","hostname","isDPoPSupported","indexedDB","isIOS","MSStream"],"sources":["../../lib/features.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable node/no-unsupported-features/node-builtins */\n/* global document, window, TextEncoder, navigator */\n\nimport { webcrypto } from './crypto';\n\nconst isWindowsPhone = /windows phone|iemobile|wpdesktop/i;\t\n\nexport function isBrowser() {\n  return typeof document !== 'undefined' && typeof window !== 'undefined';\n}\n\nexport function isIE11OrLess() {\n  if (!isBrowser()) {\n    return false;\n  }\n  const documentMode = (document as any).documentMode;\n  return !!documentMode && documentMode <= 11;\n}\n\nexport function getUserAgent() {\n  return navigator.userAgent;\n}\n\nexport function isFingerprintSupported() {\n  const agent = getUserAgent();\n  return agent && !isWindowsPhone.test(agent);\t\n}\n\nexport function isPopupPostMessageSupported() {\n  if (!isBrowser()) {\n    return false;\n  }\n  const documentMode = (document as any).documentMode;\n  var isIE8or9 = documentMode && documentMode < 10;\n  if (typeof window.postMessage !== 'undefined' && !isIE8or9) {\n    return true;\n  }\n  return false;\n}\n\nfunction isWebCryptoSubtleSupported () {\n  return typeof webcrypto !== 'undefined'\n    && webcrypto !== null\n    && typeof webcrypto.subtle !== 'undefined'\n    && typeof Uint8Array !== 'undefined';\n}\n\nexport function isTokenVerifySupported() {\n  return isWebCryptoSubtleSupported();\n}\n\nexport function hasTextEncoder() {\n  return typeof TextEncoder !== 'undefined';\n}\n\nexport function isPKCESupported() {\n  return isTokenVerifySupported() && hasTextEncoder();\n}\n\nexport function isHTTPS() {\n  if (!isBrowser()) {\n    return false;\n  }\n  return window.location.protocol === 'https:';\n}\n\nexport function isLocalhost() {\n  // eslint-disable-next-line compat/compat\n  return isBrowser() && window.location.hostname === 'localhost';\n}\n\n// For now, DPoP is only supported on browsers\nexport function isDPoPSupported () {\n  return !isIE11OrLess() &&\n    typeof window.indexedDB !== 'undefined' &&\n    hasTextEncoder() &&\n    isWebCryptoSubtleSupported();\n}\n\nexport function isIOS () {\n  // iOS detection from: http://stackoverflow.com/a/9039885/177710\n  return isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined' &&\n    // @ts-expect-error - MSStream is not in `window` type, unsurprisingly\n    (/iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream);\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAIA,MAAMA,cAAc,GAAG,mCAAmC;AAEnD,SAASC,SAAS,GAAG;EAC1B,OAAO,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOC,MAAM,KAAK,WAAW;AACzE;AAEO,SAASC,YAAY,GAAG;EAC7B,IAAI,CAACH,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,OAAO,CAAC,CAACA,YAAY,IAAIA,YAAY,IAAI,EAAE;AAC7C;AAEO,SAASC,YAAY,GAAG;EAC7B,OAAOC,SAAS,CAACC,SAAS;AAC5B;AAEO,SAASC,sBAAsB,GAAG;EACvC,MAAMC,KAAK,GAAGJ,YAAY,EAAE;EAC5B,OAAOI,KAAK,IAAI,CAACV,cAAc,CAACW,IAAI,CAACD,KAAK,CAAC;AAC7C;AAEO,SAASE,2BAA2B,GAAG;EAC5C,IAAI,CAACX,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,IAAIQ,QAAQ,GAAGR,YAAY,IAAIA,YAAY,GAAG,EAAE;EAChD,IAAI,OAAOF,MAAM,CAACW,WAAW,KAAK,WAAW,IAAI,CAACD,QAAQ,EAAE;IAC1D,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd;AAEA,SAASE,0BAA0B,GAAI;EACrC,OAAO,OAAOC,iBAAS,KAAK,WAAW,IAClCA,iBAAS,KAAK,IAAI,IAClB,OAAOA,iBAAS,CAACC,MAAM,KAAK,WAAW,IACvC,OAAOC,UAAU,KAAK,WAAW;AACxC;AAEO,SAASC,sBAAsB,GAAG;EACvC,OAAOJ,0BAA0B,EAAE;AACrC;AAEO,SAASK,cAAc,GAAG;EAC/B,OAAO,OAAOC,WAAW,KAAK,WAAW;AAC3C;AAEO,SAASC,eAAe,GAAG;EAChC,OAAOH,sBAAsB,EAAE,IAAIC,cAAc,EAAE;AACrD;AAEO,SAASG,OAAO,GAAG;EACxB,IAAI,CAACtB,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,OAAOE,MAAM,CAACqB,QAAQ,CAACC,QAAQ,KAAK,QAAQ;AAC9C;AAEO,SAASC,WAAW,GAAG;EAC5B;EACA,OAAOzB,SAAS,EAAE,IAAIE,MAAM,CAACqB,QAAQ,CAACG,QAAQ,KAAK,WAAW;AAChE;;AAEA;AACO,SAASC,eAAe,GAAI;EACjC,OAAO,CAACxB,YAAY,EAAE,IACpB,OAAOD,MAAM,CAAC0B,SAAS,KAAK,WAAW,IACvCT,cAAc,EAAE,IAChBL,0BAA0B,EAAE;AAChC;AAEO,SAASe,KAAK,GAAI;EACvB;EACA,OAAO7B,SAAS,EAAE,IAAI,OAAOM,SAAS,KAAK,WAAW,IAAI,OAAOA,SAAS,CAACC,SAAS,KAAK,WAAW;EAClG;EACC,kBAAkB,CAACG,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC,IAAI,CAACL,MAAM,CAAC4B,QAAS;AACtE"}
+{"version":3,"file":"features.js","names":["isWindowsPhone","isBrowser","document","window","isIE11OrLess","documentMode","getUserAgent","navigator","userAgent","isFingerprintSupported","agent","test","isPopupPostMessageSupported","isIE8or9","postMessage","isWebCryptoSubtleSupported","webcrypto","subtle","Uint8Array","isTokenVerifySupported","hasTextEncoder","TextEncoder","isPKCESupported","isHTTPS","location","protocol","isLocalhost","hostname","isDPoPSupported","indexedDB","isIOS","MSStream","isIOSRegex","v18Regex","notSafariRegex","isSafari18","isDesktop","includes","isOtherBrowser"],"sources":["../../lib/features.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable node/no-unsupported-features/node-builtins */\n/* global document, window, TextEncoder, navigator */\n\nimport { webcrypto } from './crypto';\n\nconst isWindowsPhone = /windows phone|iemobile|wpdesktop/i;\t\n\nexport function isBrowser() {\n  return typeof document !== 'undefined' && typeof window !== 'undefined';\n}\n\nexport function isIE11OrLess() {\n  if (!isBrowser()) {\n    return false;\n  }\n  const documentMode = (document as any).documentMode;\n  return !!documentMode && documentMode <= 11;\n}\n\nexport function getUserAgent() {\n  return navigator.userAgent;\n}\n\nexport function isFingerprintSupported() {\n  const agent = getUserAgent();\n  return agent && !isWindowsPhone.test(agent);\t\n}\n\nexport function isPopupPostMessageSupported() {\n  if (!isBrowser()) {\n    return false;\n  }\n  const documentMode = (document as any).documentMode;\n  var isIE8or9 = documentMode && documentMode < 10;\n  if (typeof window.postMessage !== 'undefined' && !isIE8or9) {\n    return true;\n  }\n  return false;\n}\n\nfunction isWebCryptoSubtleSupported () {\n  return typeof webcrypto !== 'undefined'\n    && webcrypto !== null\n    && typeof webcrypto.subtle !== 'undefined'\n    && typeof Uint8Array !== 'undefined';\n}\n\nexport function isTokenVerifySupported() {\n  return isWebCryptoSubtleSupported();\n}\n\nexport function hasTextEncoder() {\n  return typeof TextEncoder !== 'undefined';\n}\n\nexport function isPKCESupported() {\n  return isTokenVerifySupported() && hasTextEncoder();\n}\n\nexport function isHTTPS() {\n  if (!isBrowser()) {\n    return false;\n  }\n  return window.location.protocol === 'https:';\n}\n\nexport function isLocalhost() {\n  // eslint-disable-next-line compat/compat\n  return isBrowser() && window.location.hostname === 'localhost';\n}\n\n// For now, DPoP is only supported on browsers\nexport function isDPoPSupported () {\n  return !isIE11OrLess() &&\n    typeof window.indexedDB !== 'undefined' &&\n    hasTextEncoder() &&\n    isWebCryptoSubtleSupported();\n}\n\nexport function isIOS () {\n  // iOS detection from: http://stackoverflow.com/a/9039885/177710\n  return isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined' &&\n    // @ts-expect-error - MSStream is not in `window` type, unsurprisingly\n    (/iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream);\n}\n\nconst isIOSRegex = /iPad|iPhone|iPod/;\nconst v18Regex = /Version\\/18(\\.| |$)/;\nconst notSafariRegex = /EdgiOS|CriOS|Chrome/;\n\n/* eslint complexity:[0,8] */\nexport function isSafari18 () {\n  if (isBrowser() && typeof navigator !== 'undefined' && typeof navigator.userAgent !== 'undefined') {\n    const isIOS = isIOSRegex.test(navigator.userAgent);\n    // Mobile Safari in desktop mode emulates Macintosh in user agent\n    const isDesktop = navigator.userAgent.includes('Macintosh');\n    const isSafari18 = navigator.userAgent.includes('Safari/') && v18Regex.test(navigator.userAgent);\n    const isOtherBrowser = notSafariRegex.test(navigator.userAgent);\n    return isSafari18 && !isOtherBrowser && (isIOS || isDesktop);\n  }\n  return false;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAIA,MAAMA,cAAc,GAAG,mCAAmC;AAEnD,SAASC,SAAS,GAAG;EAC1B,OAAO,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOC,MAAM,KAAK,WAAW;AACzE;AAEO,SAASC,YAAY,GAAG;EAC7B,IAAI,CAACH,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,OAAO,CAAC,CAACA,YAAY,IAAIA,YAAY,IAAI,EAAE;AAC7C;AAEO,SAASC,YAAY,GAAG;EAC7B,OAAOC,SAAS,CAACC,SAAS;AAC5B;AAEO,SAASC,sBAAsB,GAAG;EACvC,MAAMC,KAAK,GAAGJ,YAAY,EAAE;EAC5B,OAAOI,KAAK,IAAI,CAACV,cAAc,CAACW,IAAI,CAACD,KAAK,CAAC;AAC7C;AAEO,SAASE,2BAA2B,GAAG;EAC5C,IAAI,CAACX,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,MAAMI,YAAY,GAAIH,QAAQ,CAASG,YAAY;EACnD,IAAIQ,QAAQ,GAAGR,YAAY,IAAIA,YAAY,GAAG,EAAE;EAChD,IAAI,OAAOF,MAAM,CAACW,WAAW,KAAK,WAAW,IAAI,CAACD,QAAQ,EAAE;IAC1D,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd;AAEA,SAASE,0BAA0B,GAAI;EACrC,OAAO,OAAOC,iBAAS,KAAK,WAAW,IAClCA,iBAAS,KAAK,IAAI,IAClB,OAAOA,iBAAS,CAACC,MAAM,KAAK,WAAW,IACvC,OAAOC,UAAU,KAAK,WAAW;AACxC;AAEO,SAASC,sBAAsB,GAAG;EACvC,OAAOJ,0BAA0B,EAAE;AACrC;AAEO,SAASK,cAAc,GAAG;EAC/B,OAAO,OAAOC,WAAW,KAAK,WAAW;AAC3C;AAEO,SAASC,eAAe,GAAG;EAChC,OAAOH,sBAAsB,EAAE,IAAIC,cAAc,EAAE;AACrD;AAEO,SAASG,OAAO,GAAG;EACxB,IAAI,CAACtB,SAAS,EAAE,EAAE;IAChB,OAAO,KAAK;EACd;EACA,OAAOE,MAAM,CAACqB,QAAQ,CAACC,QAAQ,KAAK,QAAQ;AAC9C;AAEO,SAASC,WAAW,GAAG;EAC5B;EACA,OAAOzB,SAAS,EAAE,IAAIE,MAAM,CAACqB,QAAQ,CAACG,QAAQ,KAAK,WAAW;AAChE;;AAEA;AACO,SAASC,eAAe,GAAI;EACjC,OAAO,CAACxB,YAAY,EAAE,IACpB,OAAOD,MAAM,CAAC0B,SAAS,KAAK,WAAW,IACvCT,cAAc,EAAE,IAChBL,0BAA0B,EAAE;AAChC;AAEO,SAASe,KAAK,GAAI;EACvB;EACA,OAAO7B,SAAS,EAAE,IAAI,OAAOM,SAAS,KAAK,WAAW,IAAI,OAAOA,SAAS,CAACC,SAAS,KAAK,WAAW;EAClG;EACC,kBAAkB,CAACG,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC,IAAI,CAACL,MAAM,CAAC4B,QAAS;AACtE;AAEA,MAAMC,UAAU,GAAG,kBAAkB;AACrC,MAAMC,QAAQ,GAAG,qBAAqB;AACtC,MAAMC,cAAc,GAAG,qBAAqB;;AAE5C;AACO,SAASC,UAAU,GAAI;EAC5B,IAAIlC,SAAS,EAAE,IAAI,OAAOM,SAAS,KAAK,WAAW,IAAI,OAAOA,SAAS,CAACC,SAAS,KAAK,WAAW,EAAE;IACjG,MAAMsB,KAAK,GAAGE,UAAU,CAACrB,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC;IAClD;IACA,MAAM4B,SAAS,GAAG7B,SAAS,CAACC,SAAS,CAAC6B,QAAQ,CAAC,WAAW,CAAC;IAC3D,MAAMF,UAAU,GAAG5B,SAAS,CAACC,SAAS,CAAC6B,QAAQ,CAAC,SAAS,CAAC,IAAIJ,QAAQ,CAACtB,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC;IAChG,MAAM8B,cAAc,GAAGJ,cAAc,CAACvB,IAAI,CAACJ,SAAS,CAACC,SAAS,CAAC;IAC/D,OAAO2B,UAAU,IAAI,CAACG,cAAc,KAAKR,KAAK,IAAIM,SAAS,CAAC;EAC9D;EACA,OAAO,KAAK;AACd"}

package/cjs/http/OktaUserAgent.js

@@ -20,7 +20,7 @@ var _features = require("../features");
 class OktaUserAgent {
   constructor() {
     // add base sdk env
-    this.environments = [`okta-auth-js/${"7.9.0"}`];
+    this.environments = [`okta-auth-js/${"7.10.1"}`];
     this.maybeAddNodeEnvironment();
   }
   addEnvironment(env) {
@@ -32,7 +32,7 @@ class OktaUserAgent {
     };
   }
   getVersion() {
-    return "7.9.0";
+    return "7.10.1";
   }
   maybeAddNodeEnvironment() {
     if ((0, _features.isBrowser)() || !process || !process.versions) {

package/cjs/http/OktaUserAgent.js.map

@@ -1 +1 @@
-{"version":3,"file":"OktaUserAgent.js","names":["OktaUserAgent","constructor","environments","maybeAddNodeEnvironment","addEnvironment","env","push","getHttpHeader","join","getVersion","isBrowser","process","versions","node","version"],"sources":["../../../lib/http/OktaUserAgent.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* global SDK_VERSION */\n\nimport { isBrowser } from '../features';\nexport class OktaUserAgent {\n  environments: string[];\n\n  constructor() {\n    // add base sdk env\n    this.environments = [`okta-auth-js/${SDK_VERSION}`];\n    this.maybeAddNodeEnvironment();\n  }\n\n  addEnvironment(env: string) {\n    this.environments.push(env);\n  }\n\n  getHttpHeader() {\n    return { 'X-Okta-User-Agent-Extended': this.environments.join(' ') };\n  }\n\n  getVersion() {\n    return SDK_VERSION;\n  }\n\n  maybeAddNodeEnvironment() {\n    if (isBrowser() || !process || !process.versions) {\n      return;\n    }\n    const { node: version } = process.versions;\n    this.environments.push(`nodejs/${version}`);\n  }\n}\n"],"mappings":";;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAGO,MAAMA,aAAa,CAAC;EAGzBC,WAAW,GAAG;IACZ;IACA,IAAI,CAACC,YAAY,GAAG,CAAE,gBAAa,OAAc,EAAC,CAAC;IACnD,IAAI,CAACC,uBAAuB,EAAE;EAChC;EAEAC,cAAc,CAACC,GAAW,EAAE;IAC1B,IAAI,CAACH,YAAY,CAACI,IAAI,CAACD,GAAG,CAAC;EAC7B;EAEAE,aAAa,GAAG;IACd,OAAO;MAAE,4BAA4B,EAAE,IAAI,CAACL,YAAY,CAACM,IAAI,CAAC,GAAG;IAAE,CAAC;EACtE;EAEAC,UAAU,GAAG;IACX;EACF;EAEAN,uBAAuB,GAAG;IACxB,IAAI,IAAAO,mBAAS,GAAE,IAAI,CAACC,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,EAAE;MAChD;IACF;IACA,MAAM;MAAEC,IAAI,EAAEC;IAAQ,CAAC,GAAGH,OAAO,CAACC,QAAQ;IAC1C,IAAI,CAACV,YAAY,CAACI,IAAI,CAAE,UAASQ,OAAQ,EAAC,CAAC;EAC7C;AACF;AAAC"}
+{"version":3,"file":"OktaUserAgent.js","names":["OktaUserAgent","constructor","environments","maybeAddNodeEnvironment","addEnvironment","env","push","getHttpHeader","join","getVersion","isBrowser","process","versions","node","version"],"sources":["../../../lib/http/OktaUserAgent.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* global SDK_VERSION */\n\nimport { isBrowser } from '../features';\nexport class OktaUserAgent {\n  environments: string[];\n\n  constructor() {\n    // add base sdk env\n    this.environments = [`okta-auth-js/${SDK_VERSION}`];\n    this.maybeAddNodeEnvironment();\n  }\n\n  addEnvironment(env: string) {\n    this.environments.push(env);\n  }\n\n  getHttpHeader() {\n    return { 'X-Okta-User-Agent-Extended': this.environments.join(' ') };\n  }\n\n  getVersion() {\n    return SDK_VERSION;\n  }\n\n  maybeAddNodeEnvironment() {\n    if (isBrowser() || !process || !process.versions) {\n      return;\n    }\n    const { node: version } = process.versions;\n    this.environments.push(`nodejs/${version}`);\n  }\n}\n"],"mappings":";;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAGO,MAAMA,aAAa,CAAC;EAGzBC,WAAW,GAAG;IACZ;IACA,IAAI,CAACC,YAAY,GAAG,CAAE,gBAAa,QAAc,EAAC,CAAC;IACnD,IAAI,CAACC,uBAAuB,EAAE;EAChC;EAEAC,cAAc,CAACC,GAAW,EAAE;IAC1B,IAAI,CAACH,YAAY,CAACI,IAAI,CAACD,GAAG,CAAC;EAC7B;EAEAE,aAAa,GAAG;IACd,OAAO;MAAE,4BAA4B,EAAE,IAAI,CAACL,YAAY,CAACM,IAAI,CAAC,GAAG;IAAE,CAAC;EACtE;EAEAC,UAAU,GAAG;IACX;EACF;EAEAN,uBAAuB,GAAG;IACxB,IAAI,IAAAO,mBAAS,GAAE,IAAI,CAACC,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,EAAE;MAChD;IACF;IACA,MAAM;MAAEC,IAAI,EAAEC;IAAQ,CAAC,GAAGH,OAAO,CAACC,QAAQ;IAC1C,IAAI,CAACV,YAAY,CAACI,IAAI,CAAE,UAASQ,OAAQ,EAAC,CAAC;EAC7C;AACF;AAAC"}

package/cjs/http/request.js

@@ -6,6 +6,7 @@ exports.post = post;
 var _util = require("../util");
 var _constants = require("../constants");
 var _errors = require("../errors");
+var _features = require("../features");
 /* eslint-disable @typescript-eslint/no-non-null-assertion */
 /*!
  * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
@@ -22,6 +23,18 @@ var _errors = require("../errors");
 
 /* eslint-disable complexity */
 
+// For iOS track last date when document became visible
+let dateDocumentBecameVisible = 0;
+let trackDateDocumentBecameVisible;
+if ((0, _features.isSafari18)()) {
+  dateDocumentBecameVisible = Date.now();
+  trackDateDocumentBecameVisible = () => {
+    if (!document.hidden) {
+      dateDocumentBecameVisible = Date.now();
+    }
+  };
+  document.addEventListener('visibilitychange', trackDateDocumentBecameVisible);
+}
 const formatError = (sdk, error) => {
   if (error instanceof Error) {
     // fetch() can throw exceptions
@@ -91,6 +104,8 @@ const formatError = (sdk, error) => {
 
   return err;
 };
+
+// eslint-disable-next-line max-statements
 function httpRequest(sdk, options) {
   options = options || {};
   if (sdk.options.httpRequestInterceptors) {
@@ -107,7 +122,8 @@ function httpRequest(sdk, options) {
     // default value is false
     storageUtil = sdk.options.storageUtil,
     storage = storageUtil.storage,
-    httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies);
+    httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies),
+    pollingIntent = options.pollingIntent;
   if (options.cacheResponse) {
     var cacheContents = httpCache.getStorage();
     var cachedResponse = cacheContents[url];
@@ -131,8 +147,73 @@ function httpRequest(sdk, options) {
     data: args || undefined,
     withCredentials
   };
-  var err, res;
-  return sdk.options.httpRequestClient(method, url, ajaxOptions).then(function (resp) {
+  var err, res, promise;
+  if (pollingIntent && (0, _features.isSafari18)()) {
+    let waitForVisibleAndAwakenDocument;
+    let waitForAwakenDocument;
+    let recursiveFetch;
+    let retryCount = 0;
+
+    // Safari on iOS has a bug:
+    //  Performing `fetch` right after document became visible can fail with `Load failed` error.
+    // Running fetch after short timeout fixes this issue.
+    waitForAwakenDocument = () => {
+      const timeSinceDocumentIsVisible = Date.now() - dateDocumentBecameVisible;
+      if (timeSinceDocumentIsVisible < _constants.IOS_PAGE_AWAKEN_TIMEOUT) {
+        return new Promise(resolve => setTimeout(() => {
+          if (!document.hidden) {
+            resolve();
+          } else {
+            resolve(waitForVisibleAndAwakenDocument());
+          }
+        }, _constants.IOS_PAGE_AWAKEN_TIMEOUT - timeSinceDocumentIsVisible));
+      } else {
+        return Promise.resolve();
+      }
+    };
+
+    // Returns a promise that resolves when document is visible for 500 ms
+    waitForVisibleAndAwakenDocument = () => {
+      if (document.hidden) {
+        let pageVisibilityHandler;
+        return new Promise(resolve => {
+          pageVisibilityHandler = () => {
+            if (!document.hidden) {
+              document.removeEventListener('visibilitychange', pageVisibilityHandler);
+              resolve(waitForAwakenDocument());
+            }
+          };
+          document.addEventListener('visibilitychange', pageVisibilityHandler);
+        });
+      } else {
+        return waitForAwakenDocument();
+      }
+    };
+
+    // Restarts fetch on 'Load failed' error
+    // This error can occur when `fetch` does not respond
+    //  (due to CORS error, non-existing host, or network error)
+    const retryableFetch = () => {
+      return sdk.options.httpRequestClient(method, url, ajaxOptions).catch(err => {
+        const isNetworkError = err?.message === 'Load failed';
+        if (isNetworkError && retryCount < _constants.IOS_MAX_RETRY_COUNT) {
+          retryCount++;
+          return recursiveFetch();
+        }
+        throw err;
+      });
+    };
+
+    // Final promise to fetch that wraps logic with waiting for visible document
+    //  and retrying fetch request on network error
+    recursiveFetch = () => {
+      return waitForVisibleAndAwakenDocument().then(retryableFetch);
+    };
+    promise = recursiveFetch();
+  } else {
+    promise = sdk.options.httpRequestClient(method, url, ajaxOptions);
+  }
+  return promise.then(function (resp) {
     res = resp.responseText;
     if (res && (0, _util.isString)(res)) {
       res = JSON.parse(res);

package/cjs/http/request.js.map

@@ -1 +1 @@
-{"version":3,"file":"request.js","names":["formatError","sdk","error","Error","AuthApiError","errorSummary","message","resp","err","serverErr","responseText","isString","JSON","parse","e","status","options","transformErrorXHR","clone","wwwAuthHeader","WWWAuthError","getWWWAuthenticateHeader","headers","error_description","OAuthError","wwwAuthErr","parseHeader","max_age","acr_values","parameters","errorCauses","errorDescription","scheme","httpRequest","httpRequestInterceptors","interceptor","url","method","args","saveAuthnState","accessToken","withCredentials","storageUtil","storage","httpCache","storageManager","getHttpCache","cookies","cacheResponse","cacheContents","getStorage","cachedResponse","Date","now","expiresAt","Promise","resolve","response","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","Object","assign","removeNils","ajaxOptions","data","undefined","res","httpRequestClient","then","Array","isArray","forEach","item","stateToken","delete","STATE_TOKEN_KEY_NAME","set","updateStorage","Math","floor","DEFAULT_CACHE_DURATION","catch","errorCode","get","isAbsoluteUrl","getIssuerOrigin","getOptions","post","postOptions"],"sources":["../../../lib/http/request.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* eslint-disable complexity */\nimport { isString, clone, isAbsoluteUrl, removeNils } from '../util';\nimport { STATE_TOKEN_KEY_NAME, DEFAULT_CACHE_DURATION } from '../constants';\nimport {\n  OktaAuthHttpInterface,\n  RequestOptions,\n  FetchOptions,\n  RequestData,\n  HttpResponse\n} from './types';\nimport { AuthApiError, OAuthError, APIError, WWWAuthError } from '../errors';\n\n\nconst formatError = (sdk: OktaAuthHttpInterface, error: HttpResponse | Error): AuthApiError | OAuthError => {\n  if (error instanceof Error) {\n    // fetch() can throw exceptions\n    // see https://developer.mozilla.org/en-US/docs/Web/API/fetch#exceptions\n    return new AuthApiError({\n      errorSummary: error.message,\n    });\n  }\n\n  let resp: HttpResponse = error;\n  let err: AuthApiError | OAuthError | WWWAuthError;\n  let serverErr: Record<string, any> = {};\n  if (resp.responseText && isString(resp.responseText)) {\n    try {\n      serverErr = JSON.parse(resp.responseText);\n    } catch (e) {\n      serverErr = {\n        errorSummary: 'Unknown error'\n      };\n    }\n  }\n\n  if (resp.status >= 500) {\n    serverErr.errorSummary = 'Unknown error';\n  }\n\n  if (sdk.options.transformErrorXHR) {\n    resp = sdk.options.transformErrorXHR(clone(resp));\n  }\n\n  // \n  const wwwAuthHeader = WWWAuthError.getWWWAuthenticateHeader(resp?.headers) ?? '';\n\n  if (serverErr.error && serverErr.error_description) {\n    err = new OAuthError(serverErr.error, serverErr.error_description, resp);\n  } else {\n    err = new AuthApiError(serverErr as APIError, resp, { wwwAuthHeader });\n  }\n\n  if (wwwAuthHeader && resp?.status >= 400 && resp?.status < 500) {\n    const wwwAuthErr = WWWAuthError.parseHeader(wwwAuthHeader);\n    // check for 403 to avoid breaking change\n    if (resp.status === 403 && wwwAuthErr?.error === 'insufficient_authentication_context') {\n      // eslint-disable-next-line camelcase\n      const { max_age, acr_values } = wwwAuthErr.parameters;\n      err = new AuthApiError(\n        {\n          errorSummary: wwwAuthErr.error,\n          errorCauses: [{ errorSummary: wwwAuthErr.errorDescription }]\n        },\n        resp,\n        {\n          // eslint-disable-next-line camelcase\n          max_age: +max_age,\n          // eslint-disable-next-line camelcase\n          ...(acr_values && { acr_values })\n        }\n      );\n    }\n    else if (wwwAuthErr?.scheme === 'DPoP') {\n      err = wwwAuthErr;\n    }\n    // else {\n    //   // WWWAuthError.parseHeader may return null, only overwrite if !null\n    //   err = wwwAuthErr ?? err;\n    // }\n  }\n\n  return err;\n};\n\nexport function httpRequest(sdk: OktaAuthHttpInterface, options: RequestOptions): Promise<any> {\n  options = options || {};\n\n  if (sdk.options.httpRequestInterceptors) {\n    for (const interceptor of sdk.options.httpRequestInterceptors) {\n      interceptor(options);\n    }\n  }\n\n  var url = options.url,\n      method = options.method,\n      args = options.args,\n      saveAuthnState = options.saveAuthnState,\n      accessToken = options.accessToken,\n      withCredentials = options.withCredentials === true, // default value is false\n      storageUtil = sdk.options.storageUtil,\n      storage = storageUtil!.storage,\n      httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies);\n\n  if (options.cacheResponse) {\n    var cacheContents = httpCache.getStorage();\n    var cachedResponse = cacheContents[url as string];\n    if (cachedResponse && Date.now()/1000 < cachedResponse.expiresAt) {\n      return Promise.resolve(cachedResponse.response);\n    }\n  }\n\n  var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n  var headers: HeadersInit = {\n    'Accept': 'application/json',\n    'Content-Type': 'application/json',\n    ...oktaUserAgentHeader\n  };\n  Object.assign(headers, sdk.options.headers, options.headers);\n  headers = removeNils(headers) as HeadersInit;\n\n  if (accessToken && isString(accessToken)) {\n    headers['Authorization'] = 'Bearer ' + accessToken;\n  }\n\n  var ajaxOptions: FetchOptions = {\n    headers,\n    data: args || undefined,\n    withCredentials\n  };\n\n  var err, res;\n  return sdk.options.httpRequestClient!(method!, url!, ajaxOptions)\n    .then(function(resp) {\n      res = resp.responseText;\n      if (res && isString(res)) {\n        res = JSON.parse(res);\n        if (res && typeof res === 'object' && !res.headers) {\n          if (Array.isArray(res)) {\n            res.forEach(item => {\n              item.headers = resp.headers;\n            });\n          } else {\n            res.headers = resp.headers;\n          }\n        }\n      }\n\n      if (saveAuthnState) {\n        if (!res.stateToken) {\n          storage.delete(STATE_TOKEN_KEY_NAME);\n        }\n      }\n\n      if (res && res.stateToken && res.expiresAt) {\n        storage.set(STATE_TOKEN_KEY_NAME, res.stateToken, res.expiresAt, sdk.options.cookies!);\n      }\n\n      if (res && options.cacheResponse) {\n        httpCache.updateStorage(url!, {\n          expiresAt: Math.floor(Date.now()/1000) + DEFAULT_CACHE_DURATION,\n          response: res\n        });\n      }\n      \n      return res;\n    })\n    .catch(function(resp) {\n      err = formatError(sdk, resp);\n\n      if (err.errorCode === 'E0000011') {\n        storage.delete(STATE_TOKEN_KEY_NAME);\n      }\n\n      throw err;\n    });\n}\n\nexport function get(sdk: OktaAuthHttpInterface, url: string, options?: RequestOptions) {\n  url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n  var getOptions = {\n    url: url,\n    method: 'GET'\n  };\n  Object.assign(getOptions, options);\n  return httpRequest(sdk, getOptions);\n}\n\nexport function post(sdk: OktaAuthHttpInterface, url: string, args?: RequestData, options?: RequestOptions) {\n  url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n  var postOptions = {\n    url: url,\n    method: 'POST',\n    args: args,\n    saveAuthnState: true\n  };\n  Object.assign(postOptions, options);\n  return httpRequest(sdk, postOptions);\n}\n"],"mappings":";;;;;AAeA;AACA;AAQA;AAxBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAaA,MAAMA,WAAW,GAAG,CAACC,GAA0B,EAAEC,KAA2B,KAAgC;EAC1G,IAAIA,KAAK,YAAYC,KAAK,EAAE;IAC1B;IACA;IACA,OAAO,IAAIC,oBAAY,CAAC;MACtBC,YAAY,EAAEH,KAAK,CAACI;IACtB,CAAC,CAAC;EACJ;EAEA,IAAIC,IAAkB,GAAGL,KAAK;EAC9B,IAAIM,GAA6C;EACjD,IAAIC,SAA8B,GAAG,CAAC,CAAC;EACvC,IAAIF,IAAI,CAACG,YAAY,IAAI,IAAAC,cAAQ,EAACJ,IAAI,CAACG,YAAY,CAAC,EAAE;IACpD,IAAI;MACFD,SAAS,GAAGG,IAAI,CAACC,KAAK,CAACN,IAAI,CAACG,YAAY,CAAC;IAC3C,CAAC,CAAC,OAAOI,CAAC,EAAE;MACVL,SAAS,GAAG;QACVJ,YAAY,EAAE;MAChB,CAAC;IACH;EACF;EAEA,IAAIE,IAAI,CAACQ,MAAM,IAAI,GAAG,EAAE;IACtBN,SAAS,CAACJ,YAAY,GAAG,eAAe;EAC1C;EAEA,IAAIJ,GAAG,CAACe,OAAO,CAACC,iBAAiB,EAAE;IACjCV,IAAI,GAAGN,GAAG,CAACe,OAAO,CAACC,iBAAiB,CAAC,IAAAC,WAAK,EAACX,IAAI,CAAC,CAAC;EACnD;;EAEA;EACA,MAAMY,aAAa,GAAGC,oBAAY,CAACC,wBAAwB,CAACd,IAAI,EAAEe,OAAO,CAAC,IAAI,EAAE;EAEhF,IAAIb,SAAS,CAACP,KAAK,IAAIO,SAAS,CAACc,iBAAiB,EAAE;IAClDf,GAAG,GAAG,IAAIgB,kBAAU,CAACf,SAAS,CAACP,KAAK,EAAEO,SAAS,CAACc,iBAAiB,EAAEhB,IAAI,CAAC;EAC1E,CAAC,MAAM;IACLC,GAAG,GAAG,IAAIJ,oBAAY,CAACK,SAAS,EAAcF,IAAI,EAAE;MAAEY;IAAc,CAAC,CAAC;EACxE;EAEA,IAAIA,aAAa,IAAIZ,IAAI,EAAEQ,MAAM,IAAI,GAAG,IAAIR,IAAI,EAAEQ,MAAM,GAAG,GAAG,EAAE;IAC9D,MAAMU,UAAU,GAAGL,oBAAY,CAACM,WAAW,CAACP,aAAa,CAAC;IAC1D;IACA,IAAIZ,IAAI,CAACQ,MAAM,KAAK,GAAG,IAAIU,UAAU,EAAEvB,KAAK,KAAK,qCAAqC,EAAE;MACtF;MACA,MAAM;QAAEyB,OAAO;QAAEC;MAAW,CAAC,GAAGH,UAAU,CAACI,UAAU;MACrDrB,GAAG,GAAG,IAAIJ,oBAAY,CACpB;QACEC,YAAY,EAAEoB,UAAU,CAACvB,KAAK;QAC9B4B,WAAW,EAAE,CAAC;UAAEzB,YAAY,EAAEoB,UAAU,CAACM;QAAiB,CAAC;MAC7D,CAAC,EACDxB,IAAI,EACJ;QACE;QACAoB,OAAO,EAAE,CAACA,OAAO;QACjB;QACA,IAAIC,UAAU,IAAI;UAAEA;QAAW,CAAC;MAClC,CAAC,CACF;IACH,CAAC,MACI,IAAIH,UAAU,EAAEO,MAAM,KAAK,MAAM,EAAE;MACtCxB,GAAG,GAAGiB,UAAU;IAClB;IACA;IACA;IACA;IACA;EACF;;EAEA,OAAOjB,GAAG;AACZ,CAAC;AAEM,SAASyB,WAAW,CAAChC,GAA0B,EAAEe,OAAuB,EAAgB;EAC7FA,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;EAEvB,IAAIf,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;IACvC,KAAK,MAAMC,WAAW,IAAIlC,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;MAC7DC,WAAW,CAACnB,OAAO,CAAC;IACtB;EACF;EAEA,IAAIoB,GAAG,GAAGpB,OAAO,CAACoB,GAAG;IACjBC,MAAM,GAAGrB,OAAO,CAACqB,MAAM;IACvBC,IAAI,GAAGtB,OAAO,CAACsB,IAAI;IACnBC,cAAc,GAAGvB,OAAO,CAACuB,cAAc;IACvCC,WAAW,GAAGxB,OAAO,CAACwB,WAAW;IACjCC,eAAe,GAAGzB,OAAO,CAACyB,eAAe,KAAK,IAAI;IAAE;IACpDC,WAAW,GAAGzC,GAAG,CAACe,OAAO,CAAC0B,WAAW;IACrCC,OAAO,GAAGD,WAAW,CAAEC,OAAO;IAC9BC,SAAS,GAAG3C,GAAG,CAAC4C,cAAc,CAACC,YAAY,CAAC7C,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAC;EAEpE,IAAI/B,OAAO,CAACgC,aAAa,EAAE;IACzB,IAAIC,aAAa,GAAGL,SAAS,CAACM,UAAU,EAAE;IAC1C,IAAIC,cAAc,GAAGF,aAAa,CAACb,GAAG,CAAW;IACjD,IAAIe,cAAc,IAAIC,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,GAAGF,cAAc,CAACG,SAAS,EAAE;MAChE,OAAOC,OAAO,CAACC,OAAO,CAACL,cAAc,CAACM,QAAQ,CAAC;IACjD;EACF;EAEA,IAAIC,mBAAmB,GAAGzD,GAAG,CAAC0D,cAAc,CAACC,aAAa,EAAE;EAC5D,IAAItC,OAAoB,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGoC;EACL,CAAC;EACDG,MAAM,CAACC,MAAM,CAACxC,OAAO,EAAErB,GAAG,CAACe,OAAO,CAACM,OAAO,EAAEN,OAAO,CAACM,OAAO,CAAC;EAC5DA,OAAO,GAAG,IAAAyC,gBAAU,EAACzC,OAAO,CAAgB;EAE5C,IAAIkB,WAAW,IAAI,IAAA7B,cAAQ,EAAC6B,WAAW,CAAC,EAAE;IACxClB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGkB,WAAW;EACpD;EAEA,IAAIwB,WAAyB,GAAG;IAC9B1C,OAAO;IACP2C,IAAI,EAAE3B,IAAI,IAAI4B,SAAS;IACvBzB;EACF,CAAC;EAED,IAAIjC,GAAG,EAAE2D,GAAG;EACZ,OAAOlE,GAAG,CAACe,OAAO,CAACoD,iBAAiB,CAAE/B,MAAM,EAAGD,GAAG,EAAG4B,WAAW,CAAC,CAC9DK,IAAI,CAAC,UAAS9D,IAAI,EAAE;IACnB4D,GAAG,GAAG5D,IAAI,CAACG,YAAY;IACvB,IAAIyD,GAAG,IAAI,IAAAxD,cAAQ,EAACwD,GAAG,CAAC,EAAE;MACxBA,GAAG,GAAGvD,IAAI,CAACC,KAAK,CAACsD,GAAG,CAAC;MACrB,IAAIA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACA,GAAG,CAAC7C,OAAO,EAAE;QAClD,IAAIgD,KAAK,CAACC,OAAO,CAACJ,GAAG,CAAC,EAAE;UACtBA,GAAG,CAACK,OAAO,CAACC,IAAI,IAAI;YAClBA,IAAI,CAACnD,OAAO,GAAGf,IAAI,CAACe,OAAO;UAC7B,CAAC,CAAC;QACJ,CAAC,MAAM;UACL6C,GAAG,CAAC7C,OAAO,GAAGf,IAAI,CAACe,OAAO;QAC5B;MACF;IACF;IAEA,IAAIiB,cAAc,EAAE;MAClB,IAAI,CAAC4B,GAAG,CAACO,UAAU,EAAE;QACnB/B,OAAO,CAACgC,MAAM,CAACC,+BAAoB,CAAC;MACtC;IACF;IAEA,IAAIT,GAAG,IAAIA,GAAG,CAACO,UAAU,IAAIP,GAAG,CAACb,SAAS,EAAE;MAC1CX,OAAO,CAACkC,GAAG,CAACD,+BAAoB,EAAET,GAAG,CAACO,UAAU,EAAEP,GAAG,CAACb,SAAS,EAAErD,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAE;IACxF;IAEA,IAAIoB,GAAG,IAAInD,OAAO,CAACgC,aAAa,EAAE;MAChCJ,SAAS,CAACkC,aAAa,CAAC1C,GAAG,EAAG;QAC5BkB,SAAS,EAAEyB,IAAI,CAACC,KAAK,CAAC5B,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,CAAC,GAAG4B,iCAAsB;QAC/DxB,QAAQ,EAAEU;MACZ,CAAC,CAAC;IACJ;IAEA,OAAOA,GAAG;EACZ,CAAC,CAAC,CACDe,KAAK,CAAC,UAAS3E,IAAI,EAAE;IACpBC,GAAG,GAAGR,WAAW,CAACC,GAAG,EAAEM,IAAI,CAAC;IAE5B,IAAIC,GAAG,CAAC2E,SAAS,KAAK,UAAU,EAAE;MAChCxC,OAAO,CAACgC,MAAM,CAACC,+BAAoB,CAAC;IACtC;IAEA,MAAMpE,GAAG;EACX,CAAC,CAAC;AACN;AAEO,SAAS4E,GAAG,CAACnF,GAA0B,EAAEmC,GAAW,EAAEpB,OAAwB,EAAE;EACrFoB,GAAG,GAAG,IAAAiD,mBAAa,EAACjD,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACqF,eAAe,EAAE,GAAGlD,GAAG;EAC5D,IAAImD,UAAU,GAAG;IACfnD,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE;EACV,CAAC;EACDwB,MAAM,CAACC,MAAM,CAACyB,UAAU,EAAEvE,OAAO,CAAC;EAClC,OAAOiB,WAAW,CAAChC,GAAG,EAAEsF,UAAU,CAAC;AACrC;AAEO,SAASC,IAAI,CAACvF,GAA0B,EAAEmC,GAAW,EAAEE,IAAkB,EAAEtB,OAAwB,EAAE;EAC1GoB,GAAG,GAAG,IAAAiD,mBAAa,EAACjD,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACqF,eAAe,EAAE,GAAGlD,GAAG;EAC5D,IAAIqD,WAAW,GAAG;IAChBrD,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE,MAAM;IACdC,IAAI,EAAEA,IAAI;IACVC,cAAc,EAAE;EAClB,CAAC;EACDsB,MAAM,CAACC,MAAM,CAAC2B,WAAW,EAAEzE,OAAO,CAAC;EACnC,OAAOiB,WAAW,CAAChC,GAAG,EAAEwF,WAAW,CAAC;AACtC"}
+{"version":3,"file":"request.js","names":["dateDocumentBecameVisible","trackDateDocumentBecameVisible","isSafari18","Date","now","document","hidden","addEventListener","formatError","sdk","error","Error","AuthApiError","errorSummary","message","resp","err","serverErr","responseText","isString","JSON","parse","e","status","options","transformErrorXHR","clone","wwwAuthHeader","WWWAuthError","getWWWAuthenticateHeader","headers","error_description","OAuthError","wwwAuthErr","parseHeader","max_age","acr_values","parameters","errorCauses","errorDescription","scheme","httpRequest","httpRequestInterceptors","interceptor","url","method","args","saveAuthnState","accessToken","withCredentials","storageUtil","storage","httpCache","storageManager","getHttpCache","cookies","pollingIntent","cacheResponse","cacheContents","getStorage","cachedResponse","expiresAt","Promise","resolve","response","oktaUserAgentHeader","_oktaUserAgent","getHttpHeader","Object","assign","removeNils","ajaxOptions","data","undefined","res","promise","waitForVisibleAndAwakenDocument","waitForAwakenDocument","recursiveFetch","retryCount","timeSinceDocumentIsVisible","IOS_PAGE_AWAKEN_TIMEOUT","setTimeout","pageVisibilityHandler","removeEventListener","retryableFetch","httpRequestClient","catch","isNetworkError","IOS_MAX_RETRY_COUNT","then","Array","isArray","forEach","item","stateToken","delete","STATE_TOKEN_KEY_NAME","set","updateStorage","Math","floor","DEFAULT_CACHE_DURATION","errorCode","get","isAbsoluteUrl","getIssuerOrigin","getOptions","post","postOptions"],"sources":["../../../lib/http/request.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* eslint-disable complexity */\nimport { isString, clone, isAbsoluteUrl, removeNils } from '../util';\nimport {\n  STATE_TOKEN_KEY_NAME,\n  DEFAULT_CACHE_DURATION,\n  IOS_MAX_RETRY_COUNT,\n  IOS_PAGE_AWAKEN_TIMEOUT\n} from '../constants';\nimport {\n  OktaAuthHttpInterface,\n  RequestOptions,\n  FetchOptions,\n  RequestData,\n  HttpResponse\n} from './types';\nimport { AuthApiError, OAuthError, APIError, WWWAuthError } from '../errors';\nimport { isSafari18 } from '../features';\n\n\n// For iOS track last date when document became visible\nlet dateDocumentBecameVisible = 0;\nlet trackDateDocumentBecameVisible: () => void;\nif (isSafari18()) {\n  dateDocumentBecameVisible = Date.now();\n  trackDateDocumentBecameVisible = () => {\n    if (!document.hidden) {\n      dateDocumentBecameVisible = Date.now();\n    }\n  };\n  document.addEventListener('visibilitychange', trackDateDocumentBecameVisible);\n}\n\nconst formatError = (sdk: OktaAuthHttpInterface, error: HttpResponse | Error): AuthApiError | OAuthError => {\n  if (error instanceof Error) {\n    // fetch() can throw exceptions\n    // see https://developer.mozilla.org/en-US/docs/Web/API/fetch#exceptions\n    return new AuthApiError({\n      errorSummary: error.message,\n    });\n  }\n\n  let resp: HttpResponse = error;\n  let err: AuthApiError | OAuthError | WWWAuthError;\n  let serverErr: Record<string, any> = {};\n  if (resp.responseText && isString(resp.responseText)) {\n    try {\n      serverErr = JSON.parse(resp.responseText);\n    } catch (e) {\n      serverErr = {\n        errorSummary: 'Unknown error'\n      };\n    }\n  }\n\n  if (resp.status >= 500) {\n    serverErr.errorSummary = 'Unknown error';\n  }\n\n  if (sdk.options.transformErrorXHR) {\n    resp = sdk.options.transformErrorXHR(clone(resp));\n  }\n\n  // \n  const wwwAuthHeader = WWWAuthError.getWWWAuthenticateHeader(resp?.headers) ?? '';\n\n  if (serverErr.error && serverErr.error_description) {\n    err = new OAuthError(serverErr.error, serverErr.error_description, resp);\n  } else {\n    err = new AuthApiError(serverErr as APIError, resp, { wwwAuthHeader });\n  }\n\n  if (wwwAuthHeader && resp?.status >= 400 && resp?.status < 500) {\n    const wwwAuthErr = WWWAuthError.parseHeader(wwwAuthHeader);\n    // check for 403 to avoid breaking change\n    if (resp.status === 403 && wwwAuthErr?.error === 'insufficient_authentication_context') {\n      // eslint-disable-next-line camelcase\n      const { max_age, acr_values } = wwwAuthErr.parameters;\n      err = new AuthApiError(\n        {\n          errorSummary: wwwAuthErr.error,\n          errorCauses: [{ errorSummary: wwwAuthErr.errorDescription }]\n        },\n        resp,\n        {\n          // eslint-disable-next-line camelcase\n          max_age: +max_age,\n          // eslint-disable-next-line camelcase\n          ...(acr_values && { acr_values })\n        }\n      );\n    }\n    else if (wwwAuthErr?.scheme === 'DPoP') {\n      err = wwwAuthErr;\n    }\n    // else {\n    //   // WWWAuthError.parseHeader may return null, only overwrite if !null\n    //   err = wwwAuthErr ?? err;\n    // }\n  }\n\n  return err;\n};\n\n// eslint-disable-next-line max-statements\nexport function httpRequest(sdk: OktaAuthHttpInterface, options: RequestOptions): Promise<any> {\n  options = options || {};\n\n  if (sdk.options.httpRequestInterceptors) {\n    for (const interceptor of sdk.options.httpRequestInterceptors) {\n      interceptor(options);\n    }\n  }\n\n  var url = options.url,\n      method = options.method,\n      args = options.args,\n      saveAuthnState = options.saveAuthnState,\n      accessToken = options.accessToken,\n      withCredentials = options.withCredentials === true, // default value is false\n      storageUtil = sdk.options.storageUtil,\n      storage = storageUtil!.storage,\n      httpCache = sdk.storageManager.getHttpCache(sdk.options.cookies),\n      pollingIntent = options.pollingIntent;\n\n  if (options.cacheResponse) {\n    var cacheContents = httpCache.getStorage();\n    var cachedResponse = cacheContents[url as string];\n    if (cachedResponse && Date.now()/1000 < cachedResponse.expiresAt) {\n      return Promise.resolve(cachedResponse.response);\n    }\n  }\n\n  var oktaUserAgentHeader = sdk._oktaUserAgent.getHttpHeader();\n  var headers: HeadersInit = {\n    'Accept': 'application/json',\n    'Content-Type': 'application/json',\n    ...oktaUserAgentHeader\n  };\n  Object.assign(headers, sdk.options.headers, options.headers);\n  headers = removeNils(headers) as HeadersInit;\n\n  if (accessToken && isString(accessToken)) {\n    headers['Authorization'] = 'Bearer ' + accessToken;\n  }\n\n  var ajaxOptions: FetchOptions = {\n    headers,\n    data: args || undefined,\n    withCredentials\n  };\n\n  var err, res, promise;\n\n  if (pollingIntent && isSafari18()) {\n    let waitForVisibleAndAwakenDocument: () => Promise<void>;\n    let waitForAwakenDocument: () => Promise<void>;\n    let recursiveFetch: () => Promise<HttpResponse>;\n    let retryCount = 0;\n\n    // Safari on iOS has a bug:\n    //  Performing `fetch` right after document became visible can fail with `Load failed` error.\n    // Running fetch after short timeout fixes this issue.\n    waitForAwakenDocument = () => {\n      const timeSinceDocumentIsVisible = Date.now() - dateDocumentBecameVisible;\n      if (timeSinceDocumentIsVisible < IOS_PAGE_AWAKEN_TIMEOUT) {\n        return new Promise<void>((resolve) => setTimeout(() => {\n          if (!document.hidden) {\n            resolve();\n          } else {\n            resolve(waitForVisibleAndAwakenDocument());\n          }\n        }, IOS_PAGE_AWAKEN_TIMEOUT - timeSinceDocumentIsVisible));\n      } else {\n        return Promise.resolve();\n      }\n    };\n\n    // Returns a promise that resolves when document is visible for 500 ms\n    waitForVisibleAndAwakenDocument = () => {\n      if (document.hidden) {\n        let pageVisibilityHandler: () => void;\n        return new Promise<void>((resolve) => {\n          pageVisibilityHandler = () => {\n            if (!document.hidden) {\n              document.removeEventListener('visibilitychange', pageVisibilityHandler);\n              resolve(waitForAwakenDocument());\n            }\n          };\n          document.addEventListener('visibilitychange', pageVisibilityHandler);\n        });\n      } else {\n        return waitForAwakenDocument();\n      }\n    };\n\n    // Restarts fetch on 'Load failed' error\n    // This error can occur when `fetch` does not respond\n    //  (due to CORS error, non-existing host, or network error)\n    const retryableFetch = (): Promise<HttpResponse> => {\n      return sdk.options.httpRequestClient!(method!, url!, ajaxOptions).catch((err) => {\n        const isNetworkError = err?.message === 'Load failed';\n        if (isNetworkError && retryCount < IOS_MAX_RETRY_COUNT) {\n          retryCount++;\n          return recursiveFetch();\n        }\n        throw err;\n      });\n    };\n\n    // Final promise to fetch that wraps logic with waiting for visible document\n    //  and retrying fetch request on network error\n    recursiveFetch = (): Promise<HttpResponse> => {\n      return waitForVisibleAndAwakenDocument().then(retryableFetch);\n    };\n\n    promise = recursiveFetch();\n  } else {\n    promise = sdk.options.httpRequestClient!(method!, url!, ajaxOptions);\n  }\n\n  return promise\n    .then(function(resp) {\n      res = resp.responseText;\n      if (res && isString(res)) {\n        res = JSON.parse(res);\n        if (res && typeof res === 'object' && !res.headers) {\n          if (Array.isArray(res)) {\n            res.forEach(item => {\n              item.headers = resp.headers;\n            });\n          } else {\n            res.headers = resp.headers;\n          }\n        }\n      }\n\n      if (saveAuthnState) {\n        if (!res.stateToken) {\n          storage.delete(STATE_TOKEN_KEY_NAME);\n        }\n      }\n\n      if (res && res.stateToken && res.expiresAt) {\n        storage.set(STATE_TOKEN_KEY_NAME, res.stateToken, res.expiresAt, sdk.options.cookies!);\n      }\n\n      if (res && options.cacheResponse) {\n        httpCache.updateStorage(url!, {\n          expiresAt: Math.floor(Date.now()/1000) + DEFAULT_CACHE_DURATION,\n          response: res\n        });\n      }\n      \n      return res;\n    })\n    .catch(function(resp) {\n      err = formatError(sdk, resp);\n\n      if (err.errorCode === 'E0000011') {\n        storage.delete(STATE_TOKEN_KEY_NAME);\n      }\n\n      throw err;\n    });\n}\n\nexport function get(sdk: OktaAuthHttpInterface, url: string, options?: RequestOptions) {\n  url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n  var getOptions = {\n    url: url,\n    method: 'GET'\n  };\n  Object.assign(getOptions, options);\n  return httpRequest(sdk, getOptions);\n}\n\nexport function post(sdk: OktaAuthHttpInterface, url: string, args?: RequestData, options?: RequestOptions) {\n  url = isAbsoluteUrl(url) ? url : sdk.getIssuerOrigin() + url;\n  var postOptions = {\n    url: url,\n    method: 'POST',\n    args: args,\n    saveAuthnState: true\n  };\n  Object.assign(postOptions, options);\n  return httpRequest(sdk, postOptions);\n}\n"],"mappings":";;;;;AAeA;AACA;AAaA;AACA;AA9BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAmBA;AACA,IAAIA,yBAAyB,GAAG,CAAC;AACjC,IAAIC,8BAA0C;AAC9C,IAAI,IAAAC,oBAAU,GAAE,EAAE;EAChBF,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;EACtCH,8BAA8B,GAAG,MAAM;IACrC,IAAI,CAACI,QAAQ,CAACC,MAAM,EAAE;MACpBN,yBAAyB,GAAGG,IAAI,CAACC,GAAG,EAAE;IACxC;EACF,CAAC;EACDC,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEN,8BAA8B,CAAC;AAC/E;AAEA,MAAMO,WAAW,GAAG,CAACC,GAA0B,EAAEC,KAA2B,KAAgC;EAC1G,IAAIA,KAAK,YAAYC,KAAK,EAAE;IAC1B;IACA;IACA,OAAO,IAAIC,oBAAY,CAAC;MACtBC,YAAY,EAAEH,KAAK,CAACI;IACtB,CAAC,CAAC;EACJ;EAEA,IAAIC,IAAkB,GAAGL,KAAK;EAC9B,IAAIM,GAA6C;EACjD,IAAIC,SAA8B,GAAG,CAAC,CAAC;EACvC,IAAIF,IAAI,CAACG,YAAY,IAAI,IAAAC,cAAQ,EAACJ,IAAI,CAACG,YAAY,CAAC,EAAE;IACpD,IAAI;MACFD,SAAS,GAAGG,IAAI,CAACC,KAAK,CAACN,IAAI,CAACG,YAAY,CAAC;IAC3C,CAAC,CAAC,OAAOI,CAAC,EAAE;MACVL,SAAS,GAAG;QACVJ,YAAY,EAAE;MAChB,CAAC;IACH;EACF;EAEA,IAAIE,IAAI,CAACQ,MAAM,IAAI,GAAG,EAAE;IACtBN,SAAS,CAACJ,YAAY,GAAG,eAAe;EAC1C;EAEA,IAAIJ,GAAG,CAACe,OAAO,CAACC,iBAAiB,EAAE;IACjCV,IAAI,GAAGN,GAAG,CAACe,OAAO,CAACC,iBAAiB,CAAC,IAAAC,WAAK,EAACX,IAAI,CAAC,CAAC;EACnD;;EAEA;EACA,MAAMY,aAAa,GAAGC,oBAAY,CAACC,wBAAwB,CAACd,IAAI,EAAEe,OAAO,CAAC,IAAI,EAAE;EAEhF,IAAIb,SAAS,CAACP,KAAK,IAAIO,SAAS,CAACc,iBAAiB,EAAE;IAClDf,GAAG,GAAG,IAAIgB,kBAAU,CAACf,SAAS,CAACP,KAAK,EAAEO,SAAS,CAACc,iBAAiB,EAAEhB,IAAI,CAAC;EAC1E,CAAC,MAAM;IACLC,GAAG,GAAG,IAAIJ,oBAAY,CAACK,SAAS,EAAcF,IAAI,EAAE;MAAEY;IAAc,CAAC,CAAC;EACxE;EAEA,IAAIA,aAAa,IAAIZ,IAAI,EAAEQ,MAAM,IAAI,GAAG,IAAIR,IAAI,EAAEQ,MAAM,GAAG,GAAG,EAAE;IAC9D,MAAMU,UAAU,GAAGL,oBAAY,CAACM,WAAW,CAACP,aAAa,CAAC;IAC1D;IACA,IAAIZ,IAAI,CAACQ,MAAM,KAAK,GAAG,IAAIU,UAAU,EAAEvB,KAAK,KAAK,qCAAqC,EAAE;MACtF;MACA,MAAM;QAAEyB,OAAO;QAAEC;MAAW,CAAC,GAAGH,UAAU,CAACI,UAAU;MACrDrB,GAAG,GAAG,IAAIJ,oBAAY,CACpB;QACEC,YAAY,EAAEoB,UAAU,CAACvB,KAAK;QAC9B4B,WAAW,EAAE,CAAC;UAAEzB,YAAY,EAAEoB,UAAU,CAACM;QAAiB,CAAC;MAC7D,CAAC,EACDxB,IAAI,EACJ;QACE;QACAoB,OAAO,EAAE,CAACA,OAAO;QACjB;QACA,IAAIC,UAAU,IAAI;UAAEA;QAAW,CAAC;MAClC,CAAC,CACF;IACH,CAAC,MACI,IAAIH,UAAU,EAAEO,MAAM,KAAK,MAAM,EAAE;MACtCxB,GAAG,GAAGiB,UAAU;IAClB;IACA;IACA;IACA;IACA;EACF;;EAEA,OAAOjB,GAAG;AACZ,CAAC;;AAED;AACO,SAASyB,WAAW,CAAChC,GAA0B,EAAEe,OAAuB,EAAgB;EAC7FA,OAAO,GAAGA,OAAO,IAAI,CAAC,CAAC;EAEvB,IAAIf,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;IACvC,KAAK,MAAMC,WAAW,IAAIlC,GAAG,CAACe,OAAO,CAACkB,uBAAuB,EAAE;MAC7DC,WAAW,CAACnB,OAAO,CAAC;IACtB;EACF;EAEA,IAAIoB,GAAG,GAAGpB,OAAO,CAACoB,GAAG;IACjBC,MAAM,GAAGrB,OAAO,CAACqB,MAAM;IACvBC,IAAI,GAAGtB,OAAO,CAACsB,IAAI;IACnBC,cAAc,GAAGvB,OAAO,CAACuB,cAAc;IACvCC,WAAW,GAAGxB,OAAO,CAACwB,WAAW;IACjCC,eAAe,GAAGzB,OAAO,CAACyB,eAAe,KAAK,IAAI;IAAE;IACpDC,WAAW,GAAGzC,GAAG,CAACe,OAAO,CAAC0B,WAAW;IACrCC,OAAO,GAAGD,WAAW,CAAEC,OAAO;IAC9BC,SAAS,GAAG3C,GAAG,CAAC4C,cAAc,CAACC,YAAY,CAAC7C,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAC;IAChEC,aAAa,GAAGhC,OAAO,CAACgC,aAAa;EAEzC,IAAIhC,OAAO,CAACiC,aAAa,EAAE;IACzB,IAAIC,aAAa,GAAGN,SAAS,CAACO,UAAU,EAAE;IAC1C,IAAIC,cAAc,GAAGF,aAAa,CAACd,GAAG,CAAW;IACjD,IAAIgB,cAAc,IAAIzD,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,GAAGwD,cAAc,CAACC,SAAS,EAAE;MAChE,OAAOC,OAAO,CAACC,OAAO,CAACH,cAAc,CAACI,QAAQ,CAAC;IACjD;EACF;EAEA,IAAIC,mBAAmB,GAAGxD,GAAG,CAACyD,cAAc,CAACC,aAAa,EAAE;EAC5D,IAAIrC,OAAoB,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGmC;EACL,CAAC;EACDG,MAAM,CAACC,MAAM,CAACvC,OAAO,EAAErB,GAAG,CAACe,OAAO,CAACM,OAAO,EAAEN,OAAO,CAACM,OAAO,CAAC;EAC5DA,OAAO,GAAG,IAAAwC,gBAAU,EAACxC,OAAO,CAAgB;EAE5C,IAAIkB,WAAW,IAAI,IAAA7B,cAAQ,EAAC6B,WAAW,CAAC,EAAE;IACxClB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGkB,WAAW;EACpD;EAEA,IAAIuB,WAAyB,GAAG;IAC9BzC,OAAO;IACP0C,IAAI,EAAE1B,IAAI,IAAI2B,SAAS;IACvBxB;EACF,CAAC;EAED,IAAIjC,GAAG,EAAE0D,GAAG,EAAEC,OAAO;EAErB,IAAInB,aAAa,IAAI,IAAAtD,oBAAU,GAAE,EAAE;IACjC,IAAI0E,+BAAoD;IACxD,IAAIC,qBAA0C;IAC9C,IAAIC,cAA2C;IAC/C,IAAIC,UAAU,GAAG,CAAC;;IAElB;IACA;IACA;IACAF,qBAAqB,GAAG,MAAM;MAC5B,MAAMG,0BAA0B,GAAG7E,IAAI,CAACC,GAAG,EAAE,GAAGJ,yBAAyB;MACzE,IAAIgF,0BAA0B,GAAGC,kCAAuB,EAAE;QACxD,OAAO,IAAInB,OAAO,CAAQC,OAAO,IAAKmB,UAAU,CAAC,MAAM;UACrD,IAAI,CAAC7E,QAAQ,CAACC,MAAM,EAAE;YACpByD,OAAO,EAAE;UACX,CAAC,MAAM;YACLA,OAAO,CAACa,+BAA+B,EAAE,CAAC;UAC5C;QACF,CAAC,EAAEK,kCAAuB,GAAGD,0BAA0B,CAAC,CAAC;MAC3D,CAAC,MAAM;QACL,OAAOlB,OAAO,CAACC,OAAO,EAAE;MAC1B;IACF,CAAC;;IAED;IACAa,+BAA+B,GAAG,MAAM;MACtC,IAAIvE,QAAQ,CAACC,MAAM,EAAE;QACnB,IAAI6E,qBAAiC;QACrC,OAAO,IAAIrB,OAAO,CAAQC,OAAO,IAAK;UACpCoB,qBAAqB,GAAG,MAAM;YAC5B,IAAI,CAAC9E,QAAQ,CAACC,MAAM,EAAE;cACpBD,QAAQ,CAAC+E,mBAAmB,CAAC,kBAAkB,EAAED,qBAAqB,CAAC;cACvEpB,OAAO,CAACc,qBAAqB,EAAE,CAAC;YAClC;UACF,CAAC;UACDxE,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAE4E,qBAAqB,CAAC;QACtE,CAAC,CAAC;MACJ,CAAC,MAAM;QACL,OAAON,qBAAqB,EAAE;MAChC;IACF,CAAC;;IAED;IACA;IACA;IACA,MAAMQ,cAAc,GAAG,MAA6B;MAClD,OAAO5E,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG2B,WAAW,CAAC,CAACgB,KAAK,CAAEvE,GAAG,IAAK;QAC/E,MAAMwE,cAAc,GAAGxE,GAAG,EAAEF,OAAO,KAAK,aAAa;QACrD,IAAI0E,cAAc,IAAIT,UAAU,GAAGU,8BAAmB,EAAE;UACtDV,UAAU,EAAE;UACZ,OAAOD,cAAc,EAAE;QACzB;QACA,MAAM9D,GAAG;MACX,CAAC,CAAC;IACJ,CAAC;;IAED;IACA;IACA8D,cAAc,GAAG,MAA6B;MAC5C,OAAOF,+BAA+B,EAAE,CAACc,IAAI,CAACL,cAAc,CAAC;IAC/D,CAAC;IAEDV,OAAO,GAAGG,cAAc,EAAE;EAC5B,CAAC,MAAM;IACLH,OAAO,GAAGlE,GAAG,CAACe,OAAO,CAAC8D,iBAAiB,CAAEzC,MAAM,EAAGD,GAAG,EAAG2B,WAAW,CAAC;EACtE;EAEA,OAAOI,OAAO,CACXe,IAAI,CAAC,UAAS3E,IAAI,EAAE;IACnB2D,GAAG,GAAG3D,IAAI,CAACG,YAAY;IACvB,IAAIwD,GAAG,IAAI,IAAAvD,cAAQ,EAACuD,GAAG,CAAC,EAAE;MACxBA,GAAG,GAAGtD,IAAI,CAACC,KAAK,CAACqD,GAAG,CAAC;MACrB,IAAIA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACA,GAAG,CAAC5C,OAAO,EAAE;QAClD,IAAI6D,KAAK,CAACC,OAAO,CAAClB,GAAG,CAAC,EAAE;UACtBA,GAAG,CAACmB,OAAO,CAACC,IAAI,IAAI;YAClBA,IAAI,CAAChE,OAAO,GAAGf,IAAI,CAACe,OAAO;UAC7B,CAAC,CAAC;QACJ,CAAC,MAAM;UACL4C,GAAG,CAAC5C,OAAO,GAAGf,IAAI,CAACe,OAAO;QAC5B;MACF;IACF;IAEA,IAAIiB,cAAc,EAAE;MAClB,IAAI,CAAC2B,GAAG,CAACqB,UAAU,EAAE;QACnB5C,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;MACtC;IACF;IAEA,IAAIvB,GAAG,IAAIA,GAAG,CAACqB,UAAU,IAAIrB,GAAG,CAACb,SAAS,EAAE;MAC1CV,OAAO,CAAC+C,GAAG,CAACD,+BAAoB,EAAEvB,GAAG,CAACqB,UAAU,EAAErB,GAAG,CAACb,SAAS,EAAEpD,GAAG,CAACe,OAAO,CAAC+B,OAAO,CAAE;IACxF;IAEA,IAAImB,GAAG,IAAIlD,OAAO,CAACiC,aAAa,EAAE;MAChCL,SAAS,CAAC+C,aAAa,CAACvD,GAAG,EAAG;QAC5BiB,SAAS,EAAEuC,IAAI,CAACC,KAAK,CAAClG,IAAI,CAACC,GAAG,EAAE,GAAC,IAAI,CAAC,GAAGkG,iCAAsB;QAC/DtC,QAAQ,EAAEU;MACZ,CAAC,CAAC;IACJ;IAEA,OAAOA,GAAG;EACZ,CAAC,CAAC,CACDa,KAAK,CAAC,UAASxE,IAAI,EAAE;IACpBC,GAAG,GAAGR,WAAW,CAACC,GAAG,EAAEM,IAAI,CAAC;IAE5B,IAAIC,GAAG,CAACuF,SAAS,KAAK,UAAU,EAAE;MAChCpD,OAAO,CAAC6C,MAAM,CAACC,+BAAoB,CAAC;IACtC;IAEA,MAAMjF,GAAG;EACX,CAAC,CAAC;AACN;AAEO,SAASwF,GAAG,CAAC/F,GAA0B,EAAEmC,GAAW,EAAEpB,OAAwB,EAAE;EACrFoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAI+D,UAAU,GAAG;IACf/D,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE;EACV,CAAC;EACDuB,MAAM,CAACC,MAAM,CAACsC,UAAU,EAAEnF,OAAO,CAAC;EAClC,OAAOiB,WAAW,CAAChC,GAAG,EAAEkG,UAAU,CAAC;AACrC;AAEO,SAASC,IAAI,CAACnG,GAA0B,EAAEmC,GAAW,EAAEE,IAAkB,EAAEtB,OAAwB,EAAE;EAC1GoB,GAAG,GAAG,IAAA6D,mBAAa,EAAC7D,GAAG,CAAC,GAAGA,GAAG,GAAGnC,GAAG,CAACiG,eAAe,EAAE,GAAG9D,GAAG;EAC5D,IAAIiE,WAAW,GAAG;IAChBjE,GAAG,EAAEA,GAAG;IACRC,MAAM,EAAE,MAAM;IACdC,IAAI,EAAEA,IAAI;IACVC,cAAc,EAAE;EAClB,CAAC;EACDqB,MAAM,CAACC,MAAM,CAACwC,WAAW,EAAErF,OAAO,CAAC;EACnC,OAAOiB,WAAW,CAAChC,GAAG,EAAEoG,WAAW,CAAC;AACtC"}

package/cjs/http/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../../lib/http/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaUserAgent } from './OktaUserAgent';\nimport {\n  OktaAuthStorageInterface,\n  OktaAuthStorageOptions,\n  StorageManagerInterface,\n  StorageUtil\n} from '../storage/types';\n\nexport type RequestHeaders = Record<string, string>;\n\nexport type RequestData = Record<string, string> | string | object;\n\nexport interface RequestOptions {\n  url?: string;\n  method?: string;\n  args?: RequestData;\n  saveAuthnState?: boolean;\n  accessToken?: string;\n  withCredentials?: boolean;\n  storageUtil?: StorageUtil;\n  cacheResponse?: boolean;\n  headers?: RequestHeaders;\n}\n\nexport interface FetchOptions {\n  headers?: HeadersInit;\n  data?: RequestData;\n  withCredentials?: boolean;\n}\n\nexport interface FetchResponse {\n  headers: {\n    get(key: string): string;\n  };\n  json(): Promise<object>;\n  text(): Promise<string>;\n}\n\nexport interface HttpResponse {\n  responseText: string;\n  status: number;\n  responseType?: string;\n  responseJSON?: {\n    [propName: string]: any;\n  };\n  headers: HeadersInit;\n}\n\nexport type HttpRequestClient = (method: string, url: string, options: FetchOptions) => Promise<HttpResponse>;\n\n// HTTP API\nexport interface HttpAPI {\n  setRequestHeader(name: string, value: string): void;\n}\n\n// options that can be passed to AuthJS\nexport interface OktaAuthHttpOptions extends OktaAuthStorageOptions \n{\n  issuer?: string;\n  transformErrorXHR?: (xhr: object) => any;\n  headers?: object;\n  httpRequestClient?: HttpRequestClient;\n  httpRequestInterceptors?: ((request: RequestOptions) => void)[];\n}\n\n// an instance of AuthJS with HTTP capabilities\nexport interface OktaAuthHttpInterface\n<\n  S extends StorageManagerInterface = StorageManagerInterface,\n  O extends OktaAuthHttpOptions = OktaAuthHttpOptions,\n> \n  extends OktaAuthStorageInterface<S, O>\n{\n  _oktaUserAgent: OktaUserAgent;\n  http: HttpAPI;\n  \n  setHeaders(headers): void;\n  getIssuerOrigin(): string;\n  webfinger(opts): Promise<object>;\n}\n"],"mappings":""}
+{"version":3,"file":"types.js","names":[],"sources":["../../../lib/http/types.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { OktaUserAgent } from './OktaUserAgent';\nimport {\n  OktaAuthStorageInterface,\n  OktaAuthStorageOptions,\n  StorageManagerInterface,\n  StorageUtil\n} from '../storage/types';\n\nexport type RequestHeaders = Record<string, string>;\n\nexport type RequestData = Record<string, string> | string | object;\n\nexport interface RequestOptions {\n  url?: string;\n  method?: string;\n  args?: RequestData;\n  saveAuthnState?: boolean;\n  accessToken?: string;\n  withCredentials?: boolean;\n  storageUtil?: StorageUtil;\n  cacheResponse?: boolean;\n  headers?: RequestHeaders;\n  pollingIntent?: boolean;\n}\n\nexport interface FetchOptions {\n  headers?: HeadersInit;\n  data?: RequestData;\n  withCredentials?: boolean;\n}\n\nexport interface FetchResponse {\n  headers: {\n    get(key: string): string;\n  };\n  json(): Promise<object>;\n  text(): Promise<string>;\n}\n\nexport interface HttpResponse {\n  responseText: string;\n  status: number;\n  responseType?: string;\n  responseJSON?: {\n    [propName: string]: any;\n  };\n  headers: HeadersInit;\n}\n\nexport type HttpRequestClient = (method: string, url: string, options: FetchOptions) => Promise<HttpResponse>;\n\n// HTTP API\nexport interface HttpAPI {\n  setRequestHeader(name: string, value: string): void;\n}\n\n// options that can be passed to AuthJS\nexport interface OktaAuthHttpOptions extends OktaAuthStorageOptions \n{\n  issuer?: string;\n  transformErrorXHR?: (xhr: object) => any;\n  headers?: object;\n  httpRequestClient?: HttpRequestClient;\n  httpRequestInterceptors?: ((request: RequestOptions) => void)[];\n}\n\n// an instance of AuthJS with HTTP capabilities\nexport interface OktaAuthHttpInterface\n<\n  S extends StorageManagerInterface = StorageManagerInterface,\n  O extends OktaAuthHttpOptions = OktaAuthHttpOptions,\n> \n  extends OktaAuthStorageInterface<S, O>\n{\n  _oktaUserAgent: OktaUserAgent;\n  http: HttpAPI;\n  \n  setHeaders(headers): void;\n  getIssuerOrigin(): string;\n  webfinger(opts): Promise<object>;\n}\n"],"mappings":""}

package/cjs/idx/idxState/v1/generateIdxAction.js

@@ -37,13 +37,18 @@ const generateDirectFetch = function generateDirectFetch(authClient, {
       ...immutableParamsForAction
     });
     try {
-      const response = await (0, _http.httpRequest)(authClient, {
+      const options = {
         url: target,
         method: actionDefinition.method,
         headers,
         args: body,
         withCredentials: toPersist?.withCredentials ?? true
-      });
+      };
+      const isPolling = actionDefinition.name === 'poll' || actionDefinition.name?.endsWith('-poll');
+      if (isPolling) {
+        options.pollingIntent = true;
+      }
+      const response = await (0, _http.httpRequest)(authClient, options);
       return authClient.idx.makeIdxResponse({
         ...response
       }, toPersist, true);

package/cjs/idx/idxState/v1/generateIdxAction.js.map

@@ -1 +1 @@
-{"version":3,"file":"generateIdxAction.js","names":["generateDirectFetch","authClient","actionDefinition","defaultParamsForAction","immutableParamsForAction","toPersist","target","href","params","headers","accepts","body","JSON","stringify","response","httpRequest","url","method","args","withCredentials","idx","makeIdxResponse","err","AuthApiError","xhr","payload","responseJSON","parse","responseText","wwwAuthHeader","idxResponse","status","stepUp","generateIdxAction","generator","defaultParams","neededParams","immutableParams","divideActionParamsByMutability","action","name"],"sources":["../../../../../lib/idx/idxState/v1/generateIdxAction.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable max-len, complexity */\nimport { httpRequest } from '../../../http';\nimport { OktaAuthIdxInterface } from '../../types';    // auth-js/types\nimport { IdxActionFunction, IdxActionParams, IdxResponse, IdxToPersist } from '../../types/idx-js';\nimport { divideActionParamsByMutability } from './actionParser';\nimport AuthApiError from '../../../errors/AuthApiError';\n\nconst generateDirectFetch = function generateDirectFetch(authClient: OktaAuthIdxInterface, { \n  actionDefinition, \n  defaultParamsForAction = {}, \n  immutableParamsForAction = {}, \n  toPersist = {} as IdxToPersist\n}): IdxActionFunction {\n  const target = actionDefinition.href;\n  return async function(params: IdxActionParams = {}): Promise<IdxResponse> {\n    const headers = {\n      'Content-Type': 'application/json',\n      'Accept': actionDefinition.accepts || 'application/ion+json',\n    };\n    const body = JSON.stringify({\n      ...defaultParamsForAction,\n      ...params,\n      ...immutableParamsForAction\n    });\n\n    try {\n      const response = await httpRequest(authClient, {\n        url: target,\n        method: actionDefinition.method,\n        headers,\n        args: body,\n        withCredentials: toPersist?.withCredentials ?? true\n      });\n\n      return authClient.idx.makeIdxResponse({ ...response }, toPersist, true);\n    }\n    catch (err) {\n      if (!(err instanceof AuthApiError) || !err?.xhr) {\n        throw err;\n      }\n\n      const response = err.xhr;\n      const payload = response.responseJSON || JSON.parse(response.responseText);\n      const wwwAuthHeader = response.headers['WWW-Authenticate'] || response.headers['www-authenticate'];\n\n      const idxResponse = authClient.idx.makeIdxResponse({ ...payload }, toPersist, false);\n      if (response.status === 401 && wwwAuthHeader === 'Oktadevicejwt realm=\"Okta Device\"') {\n        // Okta server responds 401 status code with WWW-Authenticate header and new remediation\n        // so that the iOS/MacOS credential SSO extension (Okta Verify) can intercept\n        // the response reaches here when Okta Verify is not installed\n        // set `stepUp` to true if flow should be continued without showing any errors\n        idxResponse.stepUp = true;\n      }\n\n      return idxResponse;\n    }\n  };\n};\n\n// TODO: Resolve in M2: Either build the final polling solution or remove this code\n// const generatePollingFetch = function generatePollingFetch( { actionDefinition, defaultParamsForAction = {}, immutableParamsForAction = {} } ) {\n//   // TODO: Discussions ongoing about when/how to terminate polling: OKTA-246581\n//   const target = actionDefinition.href;\n//   return async function(params) {\n//     return fetch(target, {\n//       method: actionDefinition.method,\n//       headers: {\n//         'content-type': actionDefinition.accepts,\n//       },\n//       body: JSON.stringify({ ...defaultParamsForAction, ...params, ...immutableParamsForAction })\n//     })\n//       .then( response => response.ok ? response.json() : response.json().then( err => Promise.reject(err)) )\n//       .then( idxResponse => makeIdxState(authClient, idxResponse) );\n//   };\n// };\n\nconst generateIdxAction = function generateIdxAction( authClient: OktaAuthIdxInterface, actionDefinition, toPersist ): IdxActionFunction {\n  // TODO: leaving this here to see where the polling is EXPECTED to drop into the code, but removing any accidental trigger of incomplete code\n  // const generator =  actionDefinition.refresh ? generatePollingFetch : generateDirectFetch;\n  const generator = generateDirectFetch;\n  const { defaultParams, neededParams, immutableParams } = divideActionParamsByMutability( actionDefinition );\n\n  const action = generator(authClient, {\n    actionDefinition,\n    defaultParamsForAction: defaultParams[actionDefinition.name],\n    immutableParamsForAction: immutableParams[actionDefinition.name],\n    toPersist\n  });\n  action.neededParams = neededParams;\n  return action;\n};\n\nexport default generateIdxAction;\n"],"mappings":";;;;AAaA;AAGA;AACA;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAOA,MAAMA,mBAAmB,GAAG,SAASA,mBAAmB,CAACC,UAAgC,EAAE;EACzFC,gBAAgB;EAChBC,sBAAsB,GAAG,CAAC,CAAC;EAC3BC,wBAAwB,GAAG,CAAC,CAAC;EAC7BC,SAAS,GAAG,CAAC;AACf,CAAC,EAAqB;EACpB,MAAMC,MAAM,GAAGJ,gBAAgB,CAACK,IAAI;EACpC,OAAO,gBAAeC,MAAuB,GAAG,CAAC,CAAC,EAAwB;IACxE,MAAMC,OAAO,GAAG;MACd,cAAc,EAAE,kBAAkB;MAClC,QAAQ,EAAEP,gBAAgB,CAACQ,OAAO,IAAI;IACxC,CAAC;IACD,MAAMC,IAAI,GAAGC,IAAI,CAACC,SAAS,CAAC;MAC1B,GAAGV,sBAAsB;MACzB,GAAGK,MAAM;MACT,GAAGJ;IACL,CAAC,CAAC;IAEF,IAAI;MACF,MAAMU,QAAQ,GAAG,MAAM,IAAAC,iBAAW,EAACd,UAAU,EAAE;QAC7Ce,GAAG,EAAEV,MAAM;QACXW,MAAM,EAAEf,gBAAgB,CAACe,MAAM;QAC/BR,OAAO;QACPS,IAAI,EAAEP,IAAI;QACVQ,eAAe,EAAEd,SAAS,EAAEc,eAAe,IAAI;MACjD,CAAC,CAAC;MAEF,OAAOlB,UAAU,CAACmB,GAAG,CAACC,eAAe,CAAC;QAAE,GAAGP;MAAS,CAAC,EAAET,SAAS,EAAE,IAAI,CAAC;IACzE,CAAC,CACD,OAAOiB,GAAG,EAAE;MACV,IAAI,EAAEA,GAAG,YAAYC,qBAAY,CAAC,IAAI,CAACD,GAAG,EAAEE,GAAG,EAAE;QAC/C,MAAMF,GAAG;MACX;MAEA,MAAMR,QAAQ,GAAGQ,GAAG,CAACE,GAAG;MACxB,MAAMC,OAAO,GAAGX,QAAQ,CAACY,YAAY,IAAId,IAAI,CAACe,KAAK,CAACb,QAAQ,CAACc,YAAY,CAAC;MAC1E,MAAMC,aAAa,GAAGf,QAAQ,CAACL,OAAO,CAAC,kBAAkB,CAAC,IAAIK,QAAQ,CAACL,OAAO,CAAC,kBAAkB,CAAC;MAElG,MAAMqB,WAAW,GAAG7B,UAAU,CAACmB,GAAG,CAACC,eAAe,CAAC;QAAE,GAAGI;MAAQ,CAAC,EAAEpB,SAAS,EAAE,KAAK,CAAC;MACpF,IAAIS,QAAQ,CAACiB,MAAM,KAAK,GAAG,IAAIF,aAAa,KAAK,mCAAmC,EAAE;QACpF;QACA;QACA;QACA;QACAC,WAAW,CAACE,MAAM,GAAG,IAAI;MAC3B;MAEA,OAAOF,WAAW;IACpB;EACF,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMG,iBAAiB,GAAG,SAASA,iBAAiB,CAAEhC,UAAgC,EAAEC,gBAAgB,EAAEG,SAAS,EAAsB;EACvI;EACA;EACA,MAAM6B,SAAS,GAAGlC,mBAAmB;EACrC,MAAM;IAAEmC,aAAa;IAAEC,YAAY;IAAEC;EAAgB,CAAC,GAAG,IAAAC,4CAA8B,EAAEpC,gBAAgB,CAAE;EAE3G,MAAMqC,MAAM,GAAGL,SAAS,CAACjC,UAAU,EAAE;IACnCC,gBAAgB;IAChBC,sBAAsB,EAAEgC,aAAa,CAACjC,gBAAgB,CAACsC,IAAI,CAAC;IAC5DpC,wBAAwB,EAAEiC,eAAe,CAACnC,gBAAgB,CAACsC,IAAI,CAAC;IAChEnC;EACF,CAAC,CAAC;EACFkC,MAAM,CAACH,YAAY,GAAGA,YAAY;EAClC,OAAOG,MAAM;AACf,CAAC;AAAC,eAEaN,iBAAiB;AAAA;AAAA"}
+{"version":3,"file":"generateIdxAction.js","names":["generateDirectFetch","authClient","actionDefinition","defaultParamsForAction","immutableParamsForAction","toPersist","target","href","params","headers","accepts","body","JSON","stringify","options","url","method","args","withCredentials","isPolling","name","endsWith","pollingIntent","response","httpRequest","idx","makeIdxResponse","err","AuthApiError","xhr","payload","responseJSON","parse","responseText","wwwAuthHeader","idxResponse","status","stepUp","generateIdxAction","generator","defaultParams","neededParams","immutableParams","divideActionParamsByMutability","action"],"sources":["../../../../../lib/idx/idxState/v1/generateIdxAction.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint-disable max-len, complexity */\nimport { httpRequest, RequestOptions } from '../../../http';\nimport { OktaAuthIdxInterface } from '../../types';    // auth-js/types\nimport { IdxActionFunction, IdxActionParams, IdxResponse, IdxToPersist } from '../../types/idx-js';\nimport { divideActionParamsByMutability } from './actionParser';\nimport AuthApiError from '../../../errors/AuthApiError';\n\nconst generateDirectFetch = function generateDirectFetch(authClient: OktaAuthIdxInterface, { \n  actionDefinition, \n  defaultParamsForAction = {}, \n  immutableParamsForAction = {}, \n  toPersist = {} as IdxToPersist\n}): IdxActionFunction {\n  const target = actionDefinition.href;\n  return async function(params: IdxActionParams = {}): Promise<IdxResponse> {\n    const headers = {\n      'Content-Type': 'application/json',\n      'Accept': actionDefinition.accepts || 'application/ion+json',\n    };\n    const body = JSON.stringify({\n      ...defaultParamsForAction,\n      ...params,\n      ...immutableParamsForAction\n    });\n\n    try {\n      const options: RequestOptions = {\n        url: target,\n        method: actionDefinition.method,\n        headers,\n        args: body,\n        withCredentials: toPersist?.withCredentials ?? true\n      };\n      const isPolling = actionDefinition.name === 'poll' || actionDefinition.name?.endsWith('-poll');\n      if (isPolling) {\n        options.pollingIntent = true;\n      }\n      const response = await httpRequest(authClient, options);\n\n      return authClient.idx.makeIdxResponse({ ...response }, toPersist, true);\n    }\n    catch (err) {\n      if (!(err instanceof AuthApiError) || !err?.xhr) {\n        throw err;\n      }\n\n      const response = err.xhr;\n      const payload = response.responseJSON || JSON.parse(response.responseText);\n      const wwwAuthHeader = response.headers['WWW-Authenticate'] || response.headers['www-authenticate'];\n\n      const idxResponse = authClient.idx.makeIdxResponse({ ...payload }, toPersist, false);\n      if (response.status === 401 && wwwAuthHeader === 'Oktadevicejwt realm=\"Okta Device\"') {\n        // Okta server responds 401 status code with WWW-Authenticate header and new remediation\n        // so that the iOS/MacOS credential SSO extension (Okta Verify) can intercept\n        // the response reaches here when Okta Verify is not installed\n        // set `stepUp` to true if flow should be continued without showing any errors\n        idxResponse.stepUp = true;\n      }\n\n      return idxResponse;\n    }\n  };\n};\n\n// TODO: Resolve in M2: Either build the final polling solution or remove this code\n// const generatePollingFetch = function generatePollingFetch( { actionDefinition, defaultParamsForAction = {}, immutableParamsForAction = {} } ) {\n//   // TODO: Discussions ongoing about when/how to terminate polling: OKTA-246581\n//   const target = actionDefinition.href;\n//   return async function(params) {\n//     return fetch(target, {\n//       method: actionDefinition.method,\n//       headers: {\n//         'content-type': actionDefinition.accepts,\n//       },\n//       body: JSON.stringify({ ...defaultParamsForAction, ...params, ...immutableParamsForAction })\n//     })\n//       .then( response => response.ok ? response.json() : response.json().then( err => Promise.reject(err)) )\n//       .then( idxResponse => makeIdxState(authClient, idxResponse) );\n//   };\n// };\n\nconst generateIdxAction = function generateIdxAction( authClient: OktaAuthIdxInterface, actionDefinition, toPersist ): IdxActionFunction {\n  // TODO: leaving this here to see where the polling is EXPECTED to drop into the code, but removing any accidental trigger of incomplete code\n  // const generator =  actionDefinition.refresh ? generatePollingFetch : generateDirectFetch;\n  const generator = generateDirectFetch;\n  const { defaultParams, neededParams, immutableParams } = divideActionParamsByMutability( actionDefinition );\n\n  const action = generator(authClient, {\n    actionDefinition,\n    defaultParamsForAction: defaultParams[actionDefinition.name],\n    immutableParamsForAction: immutableParams[actionDefinition.name],\n    toPersist\n  });\n  action.neededParams = neededParams;\n  return action;\n};\n\nexport default generateIdxAction;\n"],"mappings":";;;;AAaA;AAGA;AACA;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAOA,MAAMA,mBAAmB,GAAG,SAASA,mBAAmB,CAACC,UAAgC,EAAE;EACzFC,gBAAgB;EAChBC,sBAAsB,GAAG,CAAC,CAAC;EAC3BC,wBAAwB,GAAG,CAAC,CAAC;EAC7BC,SAAS,GAAG,CAAC;AACf,CAAC,EAAqB;EACpB,MAAMC,MAAM,GAAGJ,gBAAgB,CAACK,IAAI;EACpC,OAAO,gBAAeC,MAAuB,GAAG,CAAC,CAAC,EAAwB;IACxE,MAAMC,OAAO,GAAG;MACd,cAAc,EAAE,kBAAkB;MAClC,QAAQ,EAAEP,gBAAgB,CAACQ,OAAO,IAAI;IACxC,CAAC;IACD,MAAMC,IAAI,GAAGC,IAAI,CAACC,SAAS,CAAC;MAC1B,GAAGV,sBAAsB;MACzB,GAAGK,MAAM;MACT,GAAGJ;IACL,CAAC,CAAC;IAEF,IAAI;MACF,MAAMU,OAAuB,GAAG;QAC9BC,GAAG,EAAET,MAAM;QACXU,MAAM,EAAEd,gBAAgB,CAACc,MAAM;QAC/BP,OAAO;QACPQ,IAAI,EAAEN,IAAI;QACVO,eAAe,EAAEb,SAAS,EAAEa,eAAe,IAAI;MACjD,CAAC;MACD,MAAMC,SAAS,GAAGjB,gBAAgB,CAACkB,IAAI,KAAK,MAAM,IAAIlB,gBAAgB,CAACkB,IAAI,EAAEC,QAAQ,CAAC,OAAO,CAAC;MAC9F,IAAIF,SAAS,EAAE;QACbL,OAAO,CAACQ,aAAa,GAAG,IAAI;MAC9B;MACA,MAAMC,QAAQ,GAAG,MAAM,IAAAC,iBAAW,EAACvB,UAAU,EAAEa,OAAO,CAAC;MAEvD,OAAOb,UAAU,CAACwB,GAAG,CAACC,eAAe,CAAC;QAAE,GAAGH;MAAS,CAAC,EAAElB,SAAS,EAAE,IAAI,CAAC;IACzE,CAAC,CACD,OAAOsB,GAAG,EAAE;MACV,IAAI,EAAEA,GAAG,YAAYC,qBAAY,CAAC,IAAI,CAACD,GAAG,EAAEE,GAAG,EAAE;QAC/C,MAAMF,GAAG;MACX;MAEA,MAAMJ,QAAQ,GAAGI,GAAG,CAACE,GAAG;MACxB,MAAMC,OAAO,GAAGP,QAAQ,CAACQ,YAAY,IAAInB,IAAI,CAACoB,KAAK,CAACT,QAAQ,CAACU,YAAY,CAAC;MAC1E,MAAMC,aAAa,GAAGX,QAAQ,CAACd,OAAO,CAAC,kBAAkB,CAAC,IAAIc,QAAQ,CAACd,OAAO,CAAC,kBAAkB,CAAC;MAElG,MAAM0B,WAAW,GAAGlC,UAAU,CAACwB,GAAG,CAACC,eAAe,CAAC;QAAE,GAAGI;MAAQ,CAAC,EAAEzB,SAAS,EAAE,KAAK,CAAC;MACpF,IAAIkB,QAAQ,CAACa,MAAM,KAAK,GAAG,IAAIF,aAAa,KAAK,mCAAmC,EAAE;QACpF;QACA;QACA;QACA;QACAC,WAAW,CAACE,MAAM,GAAG,IAAI;MAC3B;MAEA,OAAOF,WAAW;IACpB;EACF,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMG,iBAAiB,GAAG,SAASA,iBAAiB,CAAErC,UAAgC,EAAEC,gBAAgB,EAAEG,SAAS,EAAsB;EACvI;EACA;EACA,MAAMkC,SAAS,GAAGvC,mBAAmB;EACrC,MAAM;IAAEwC,aAAa;IAAEC,YAAY;IAAEC;EAAgB,CAAC,GAAG,IAAAC,4CAA8B,EAAEzC,gBAAgB,CAAE;EAE3G,MAAM0C,MAAM,GAAGL,SAAS,CAACtC,UAAU,EAAE;IACnCC,gBAAgB;IAChBC,sBAAsB,EAAEqC,aAAa,CAACtC,gBAAgB,CAACkB,IAAI,CAAC;IAC5DhB,wBAAwB,EAAEsC,eAAe,CAACxC,gBAAgB,CAACkB,IAAI,CAAC;IAChEf;EACF,CAAC,CAAC;EACFuC,MAAM,CAACH,YAAY,GAAGA,YAAY;EAClC,OAAOG,MAAM;AACf,CAAC;AAAC,eAEaN,iBAAiB;AAAA;AAAA"}