@omni2fa/core 0.7.3 → 0.8.0

package/dist/index.js

@@ -52,13 +52,14 @@ const a = {
 function T(t) {
   return S[t] ?? S[a.Unknown];
 }
-const F = "omni2fa:preauth", L = "omni2fa:session", b = "http://omni2fa.local";
+const W = "X-Omni2FA-StepUp", F = "omni2fa:preauth", L = "omni2fa:session", b = "http://omni2fa.local";
 class K {
   storage;
   preAuthKey;
   sessionKey;
   basePath;
   inner;
+  stepUpHandler = null;
   constructor(e) {
     this.storage = e.storage ?? new _(), this.preAuthKey = e.preAuthStorageKey ?? F, this.sessionKey = e.sessionStorageKey ?? L, this.basePath = new URL(e.baseUrl, b).pathname.replace(/\/$/, ""), this.inner = J({
       baseUrl: e.baseUrl,
@@ -90,6 +91,23 @@ class K {
   getSessionToken() {
     return this.storage.get(this.sessionKey);
   }
+  setStepUpHandler(e) {
+    this.stepUpHandler = e;
+  }
+  /**
+   * Run a request and, if it comes back 403 STEP_UP_REQUIRED with a handler registered, confirm 2FA
+   * and retry once with the step-up header. Used by the library's own sensitive endpoints; other calls
+   * invoke openapi-fetch directly.
+   */
+  async sendWithStepUp(e) {
+    const r = await e({});
+    if (r.error !== void 0 && r.response.status === 403 && r.error.code === a.StepUpRequired && this.stepUpHandler !== null) {
+      const n = r.error.details?.availableMethods ?? [], o = await this.stepUpHandler(n);
+      if (o)
+        return e({ [W]: o });
+    }
+    return r;
+  }
   setToken(e, r) {
     r === null || r.length === 0 ? this.storage.remove(e) : this.storage.set(e, r);
   }
@@ -98,11 +116,13 @@ class K {
     return this.toCall(e, r, n);
   }
   async removeMethod(e) {
-    const { error: r, response: n } = await this.inner.DELETE("/methods/{methodId}", { params: { path: { methodId: e } } });
+    const { error: r, response: n } = await this.sendWithStepUp(
+      (o) => this.inner.DELETE("/methods/{methodId}", { params: { path: { methodId: e } }, headers: o })
+    );
     return r ? this.errorCall(r, n) : { ok: !0, value: void 0 };
   }
   async startTotpEnrollment() {
-    const { data: e, error: r, response: n } = await this.inner.POST("/enroll/totp/start");
+    const { data: e, error: r, response: n } = await this.sendWithStepUp((o) => this.inner.POST("/enroll/totp/start", { headers: o }));
     return this.toCall(e, r, n);
   }
   async confirmTotpEnrollment(e) {
@@ -110,7 +130,7 @@ class K {
     return this.toCall(r, n, o);
   }
   async startEmailEnrollment(e) {
-    const { data: r, error: n, response: o } = await this.inner.POST("/enroll/email/start", { body: e });
+    const { data: r, error: n, response: o } = await this.sendWithStepUp((l) => this.inner.POST("/enroll/email/start", { body: e, headers: l }));
     return this.toCall(r, n, o);
   }
   async confirmEmailEnrollment(e) {
@@ -122,7 +142,7 @@ class K {
     return this.toCall(r, n, o);
   }
   async startWebAuthnEnrollment() {
-    const { data: e, error: r, response: n } = await this.inner.POST("/enroll/webauthn/start");
+    const { data: e, error: r, response: n } = await this.sendWithStepUp((o) => this.inner.POST("/enroll/webauthn/start", { headers: o }));
     return this.toCall(e, r, n);
   }
   async confirmWebAuthnEnrollment(e) {
@@ -158,7 +178,7 @@ class K {
     return this.toCall(r, n, o);
   }
   async regenerateRecoveryCodes() {
-    const { data: e, error: r, response: n } = await this.inner.POST("/recovery-codes/regenerate");
+    const { data: e, error: r, response: n } = await this.sendWithStepUp((o) => this.inner.POST("/recovery-codes/regenerate", { headers: o }));
     return this.toCall(e, r, n);
   }
   toCall(e, r, n) {
@@ -180,7 +200,7 @@ class K {
     };
   }
 }
-class te {
+class ne {
   get(e) {
     return globalThis.sessionStorage?.getItem(e) ?? null;
   }
@@ -191,7 +211,7 @@ class te {
     globalThis.sessionStorage?.removeItem(e);
   }
 }
-class ne {
+class oe {
   get(e) {
     return globalThis.localStorage?.getItem(e) ?? null;
   }
@@ -210,7 +230,7 @@ class s extends Error {
     super(r), this.name = "Omni2FaApiError", this.code = e, this.httpStatus = n, this.details = o;
   }
 }
-const W = {
+const $ = {
   enrollmentId: null,
   otpAuthUri: null,
   secret: null,
@@ -219,7 +239,7 @@ const W = {
   errorCode: null,
   errorMessage: null
 };
-function $(t) {
+function H(t) {
   return h({
     types: {
       context: {},
@@ -246,7 +266,7 @@ function $(t) {
   }).createMachine({
     id: "totpEnrollment",
     initial: "idle",
-    context: W,
+    context: $,
     states: {
       idle: {
         on: {
@@ -314,7 +334,7 @@ function y({ context: t }) {
 function k(t, e) {
   e instanceof s ? (t.errorCode = e.code, t.errorMessage = e.message) : (t.errorCode = "UNKNOWN", t.errorMessage = e instanceof Error ? e.message : null);
 }
-const H = {
+const V = {
   enrollmentId: null,
   email: null,
   expiresAt: null,
@@ -324,7 +344,7 @@ const H = {
   errorCode: null,
   errorMessage: null
 };
-function V(t) {
+function Y(t) {
   return h({
     types: {
       context: {},
@@ -357,7 +377,7 @@ function V(t) {
   }).createMachine({
     id: "emailEnrollment",
     initial: "idle",
-    context: H,
+    context: V,
     states: {
       idle: {
         on: {
@@ -466,7 +486,7 @@ function d(t) {
 function D(t) {
   return (t ?? []).map((e) => ({ ...e, id: m(e.id) }));
 }
-async function Y(t) {
+async function q(t) {
   const e = JSON.parse(t), r = {
     ...e,
     challenge: m(e.challenge),
@@ -510,7 +530,7 @@ async function P(t) {
     }
   });
 }
-const q = {
+const B = {
   enrollmentId: null,
   optionsJson: null,
   name: null,
@@ -519,7 +539,7 @@ const q = {
   errorCode: null,
   errorMessage: null
 };
-function B(t) {
+function G(t) {
   return h({
     types: {
       context: {},
@@ -533,7 +553,7 @@ function B(t) {
         return e.value;
       }),
       registerAndConfirm: i(async ({ input: e }) => {
-        const r = await Y(e.optionsJson), n = await t.confirmWebAuthnEnrollment({
+        const r = await q(e.optionsJson), n = await t.confirmWebAuthnEnrollment({
           enrollmentId: e.enrollmentId,
           attestationResponseJson: r,
           name: e.name
@@ -546,7 +566,7 @@ function B(t) {
   }).createMachine({
     id: "webauthnEnrollment",
     initial: "idle",
-    context: q,
+    context: B,
     states: {
       idle: {
         on: {
@@ -567,7 +587,7 @@ function B(t) {
           },
           onError: {
             target: "failed",
-            actions: ({ context: e, event: r }) => U(e, r.error)
+            actions: ({ context: e, event: r }) => O(e, r.error)
           }
         }
       },
@@ -586,31 +606,31 @@ function B(t) {
           },
           onError: {
             target: "failed",
-            actions: ({ context: e, event: r }) => U(e, r.error)
+            actions: ({ context: e, event: r }) => O(e, r.error)
           }
         }
       },
       enrolled: {
         on: {
-          reset: { target: "idle", actions: O }
+          reset: { target: "idle", actions: U }
         }
       },
       failed: {
         on: {
           retry: { target: "starting" },
-          reset: { target: "idle", actions: O }
+          reset: { target: "idle", actions: U }
         }
       }
     }
   });
 }
-function O({ context: t }) {
+function U({ context: t }) {
   t.enrollmentId = null, t.optionsJson = null, t.name = null, t.methodId = null, t.recoveryCodes = null, t.errorCode = null, t.errorMessage = null;
 }
-function U(t, e) {
+function O(t, e) {
   e instanceof s ? (t.errorCode = e.code, t.errorMessage = e.message) : (t.errorCode = "UNKNOWN", t.errorMessage = e instanceof Error ? e.message : null);
 }
-const G = {
+const X = {
   methodId: null,
   methodType: null,
   userId: null,
@@ -621,7 +641,7 @@ const G = {
   errorCode: null,
   errorMessage: null
 };
-function X(t) {
+function j(t) {
   return h({
     types: {
       context: {},
@@ -662,7 +682,7 @@ function X(t) {
   }).createMachine({
     id: "challenge",
     initial: "idle",
-    context: G,
+    context: X,
     states: {
       idle: {
         on: {
@@ -804,12 +824,12 @@ function C({ context: t }) {
 function c(t, e) {
   e instanceof s ? (t.errorCode = e.code, t.errorMessage = e.message) : (t.errorCode = "UNKNOWN", t.errorMessage = e instanceof Error ? e.message : null);
 }
-const j = {
+const z = {
   items: [],
   errorCode: null,
   errorMessage: null
 };
-function z(t) {
+function Q(t) {
   return h({
     types: {
       context: {},
@@ -832,7 +852,7 @@ function z(t) {
   }).createMachine({
     id: "methods",
     initial: "idle",
-    context: j,
+    context: z,
     states: {
       idle: {
         on: {
@@ -883,19 +903,19 @@ function z(t) {
       failed: {
         on: {
           load: { target: "loading" },
-          reset: { target: "idle", actions: Q }
+          reset: { target: "idle", actions: Z }
         }
       }
     }
   });
 }
-function Q({ context: t }) {
+function Z({ context: t }) {
   t.items = [], t.errorCode = null, t.errorMessage = null;
 }
 function N(t, e) {
   e instanceof s ? (t.errorCode = e.code, t.errorMessage = e.message) : (t.errorCode = "UNKNOWN", t.errorMessage = e instanceof Error ? e.message : null);
 }
-const Z = {
+const x = {
   methodId: null,
   methodType: null,
   stepUpToken: null,
@@ -905,7 +925,7 @@ const Z = {
   errorCode: null,
   errorMessage: null
 };
-function x(t) {
+function ee(t) {
   return h({
     types: {
       context: {},
@@ -940,7 +960,7 @@ function x(t) {
   }).createMachine({
     id: "stepup",
     initial: "idle",
-    context: Z,
+    context: x,
     states: {
       idle: {
         on: {
@@ -1059,9 +1079,8 @@ function A({ context: t }) {
 function g(t, e) {
   e instanceof s ? (t.errorCode = e.code, t.errorMessage = e.message) : (t.errorCode = "UNKNOWN", t.errorMessage = e instanceof Error ? e.message : null);
 }
-const oe = "X-Omni2FA-StepUp";
 function se(t) {
-  const e = new K(t), r = u($(e)), n = u(V(e)), o = u(B(e)), l = u(X(e)), p = u(x(e)), f = u(z(e));
+  const e = new K(t), r = u(H(e)), n = u(Y(e)), o = u(G(e)), l = u(j(e)), p = u(ee(e)), f = u(Q(e));
   return r.start(), n.start(), o.start(), l.start(), p.start(), f.start(), {
     client: e,
     totpEnrollment: r,
@@ -1076,22 +1095,22 @@ function se(t) {
   };
 }
 export {
-  ne as LocalStorageStorage,
+  oe as LocalStorageStorage,
   _ as MemoryStorage,
   s as Omni2FaApiError,
   K as Omni2FaClient,
   a as Omni2FaErrorCodes,
-  oe as STEP_UP_HEADER,
-  te as SessionStorageStorage,
-  X as createChallengeMachine,
-  V as createEmailEnrollmentMachine,
-  z as createMethodsMachine,
+  W as STEP_UP_HEADER,
+  ne as SessionStorageStorage,
+  j as createChallengeMachine,
+  Y as createEmailEnrollmentMachine,
+  Q as createMethodsMachine,
   se as createOmni2Fa,
-  x as createStepUpMachine,
-  $ as createTotpEnrollmentMachine,
-  B as createWebAuthnEnrollmentMachine,
+  ee as createStepUpMachine,
+  H as createTotpEnrollmentMachine,
+  G as createWebAuthnEnrollmentMachine,
   T as getDefaultMessage,
   P as startAuthentication,
-  Y as startRegistration
+  q as startRegistration
 };
 //# sourceMappingURL=index.js.map