@paypal/merchant-onboarding-sdk 1.0.3 → 1.0.4

package/README.md

@@ -45,8 +45,8 @@ OR
 import { servicing } from "@paypal/merchant-onboarding-sdk/servicing";
 ```
 
-Do not add both packages to the DOM at the same time as they should not be used
-concurrently.
+Disclaimer: There may be side-effects of rendering both onboarding and servicing
+concurrently due to conflicts in the auth sessions of each
 
 #### Usage NOTE
 

package/dist/servicing.js

@@ -54559,7 +54559,7 @@ var jsx_pragmatic = __webpack_require__(151);
 
 
 var createPopup = zoid.create({
-  tag: "zoid-popup",
+  tag: 'zoid-servicing',
   url: function url(_ref) {
     var props = _ref.props;
     return props.url;
@@ -54575,19 +54575,19 @@ var createPopup = zoid.create({
   defaultContext: zoid.CONTEXT.POPUP,
   props: {
     onComplete: {
-      type: "function",
+      type: 'function',
       required: true
     },
     onError: {
-      type: "function",
+      type: 'function',
       required: false
     },
     onClose: {
-      type: "function",
+      type: 'function',
       required: true
     },
     getAccessToken: {
-      type: "function",
+      type: 'function',
       required: false
     }
   },
@@ -54609,19 +54609,19 @@ var createPopup = zoid.create({
       ev.stopPropagation();
       return focus();
     }
-    return jsx_pragmatic.node("div", {
+    return jsx_pragmatic.node('div', {
       id: uid,
       onClick: focusComponent,
       "class": "".concat(tag, " ").concat(tag, "-context-").concat(context, " ").concat(tag, "-focus")
-    }, jsx_pragmatic.node("a", {
-      href: "#",
+    }, jsx_pragmatic.node('a', {
+      href: '#',
       onClick: closeComponent,
       "class": "".concat(tag, "-close")
-    }), jsx_pragmatic.node("a", {
-      href: "#",
+    }), jsx_pragmatic.node('a', {
+      href: '#',
       onClick: closeComponent,
       "class": "".concat(tag, "-close")
-    }), jsx_pragmatic.node("style", null, "\n                #".concat(uid, " {\n                    position: fixed;\n                    top: 0;\n                    left: 0;\n                    width: 100%;\n                    height: 100%;\n                    background-color: rgba(0, 0, 0, 0.8);\n                }\n                #").concat(uid, ".").concat(tag, "-context-").concat(zoid.CONTEXT.POPUP, " {\n                    cursor: pointer;\n                }\n                #").concat(uid, " .").concat(tag, "-close {\n                    position: absolute;\n                    right: 16px;\n                    top: 16px;\n                    width: 16px;\n                    height: 16px;\n                    opacity: 0.6;\n                }\n                #").concat(uid, " .").concat(tag, "-close:hover {\n                    opacity: 1;\n                }\n                #").concat(uid, " .").concat(tag, "-close:before,\n                #").concat(uid, " .").concat(tag, "-close:after {\n                    position: absolute;\n                    left: 8px;\n                    content: ' ';\n                    height: 16px;\n                    width: 2px;\n                    background-color: white;\n                }\n                #").concat(uid, " .").concat(tag, "-close:before {\n                    transform: rotate(45deg);\n                }\n                #").concat(uid, " .").concat(tag, "-close:after {\n                    transform: rotate(-45deg);\n                }\n            "))).render(jsx_pragmatic.dom({
+    }), jsx_pragmatic.node('style', null, "\n                #".concat(uid, " {\n                    position: fixed;\n                    top: 0;\n                    left: 0;\n                    width: 100%;\n                    height: 100%;\n                    background-color: rgba(0, 0, 0, 0.8);\n                }\n                #").concat(uid, ".").concat(tag, "-context-").concat(zoid.CONTEXT.POPUP, " {\n                    cursor: pointer;\n                }\n                #").concat(uid, " .").concat(tag, "-close {\n                    position: absolute;\n                    right: 16px;\n                    top: 16px;\n                    width: 16px;\n                    height: 16px;\n                    opacity: 0.6;\n                }\n                #").concat(uid, " .").concat(tag, "-close:hover {\n                    opacity: 1;\n                }\n                #").concat(uid, " .").concat(tag, "-close:before,\n                #").concat(uid, " .").concat(tag, "-close:after {\n                    position: absolute;\n                    left: 8px;\n                    content: ' ';\n                    height: 16px;\n                    width: 2px;\n                    background-color: white;\n                }\n                #").concat(uid, " .").concat(tag, "-close:before {\n                    transform: rotate(45deg);\n                }\n                #").concat(uid, " .").concat(tag, "-close:after {\n                    transform: rotate(-45deg);\n                }\n            "))).render(jsx_pragmatic.dom({
       doc: doc
     }));
   }
@@ -54642,7 +54642,7 @@ var createZoidPopup = function createZoidPopup(_ref4) {
     width: width,
     height: height,
     url: url
-  }).render("#zoidFrame", zoid.CONTEXT.POPUP);
+  }).render('#zoidFrame', zoid.CONTEXT.POPUP);
 };
 /* harmony default export */ const zoidUtils = (createZoidPopup);
 ;// ./src/components/ZoidPopup.js
@@ -54673,7 +54673,7 @@ var ZoidPopUp = function ZoidPopUp(props) {
   };
   var onComplete = function onComplete(data) {
     var _document$getElements;
-    (_document$getElements = document.getElementsByClassName('zoid-popup-close')) === null || _document$getElements === void 0 || (_document$getElements = _document$getElements[0]) === null || _document$getElements === void 0 || _document$getElements.click();
+    (_document$getElements = document.getElementsByClassName('zoid-servicing-close')) === null || _document$getElements === void 0 || (_document$getElements = _document$getElements[0]) === null || _document$getElements === void 0 || _document$getElements.click();
     onCompleteCallBack(data);
   };
   (0,react.useEffect)(function () {
@@ -62487,6 +62487,7 @@ function RemoteApp_arrayWithHoles(r) { if (Array.isArray(r)) return r; }
 
 
 
+
 var RemoteApp = function RemoteApp(props) {
   var _props$federated = props.federated,
     url = _props$federated.url,
@@ -62525,8 +62526,58 @@ var RemoteApp = function RemoteApp(props) {
         _checkSessionId();
       });
     };
+    var handleStepUpRequired = function handleStepUpRequired(event) {
+      var _ref = event.detail || {},
+        link = _ref.link;
+      console.log('[SDK RemoteApp] Step-up authentication required', {
+        link: link
+      });
+      if (link) {
+        // Create a div for zoid if it doesn't exist
+        if (!document.getElementById('zoidFrame')) {
+          var zoidFrame = document.createElement('div');
+          zoidFrame.id = 'zoidFrame';
+          document.body.appendChild(zoidFrame);
+        }
+
+        // Create return URI pointing to the step-up callback page in fundsmanagement
+        var returnUri = "https://".concat(getHost(env), "/fundsmanagement/step-up-complete");
+        var separator = link.includes('?') ? '&' : '?';
+
+        // TODO: Adapte to other flows
+        var urlWithReturn = "".concat(link).concat(separator, "flowId=hawk&flowContext=transfer&returnUri=").concat(encodeURIComponent(returnUri));
+        console.log('[SDK RemoteApp] Opening step-up popup with URL:', urlWithReturn);
+        zoidUtils({
+          url: urlWithReturn,
+          width: 768,
+          height: 1200,
+          onComplete: function onComplete() {
+            console.log('[SDK RemoteApp] Step-up authentication completed via zoid');
+            // Dispatch event for step-up completion (manual-transfer context will handle the flow)
+            window.postMessage({
+              type: 'STEP_UP_COMPLETED'
+            }, '*');
+          },
+          onClose: function onClose() {
+            console.log('[SDK RemoteApp] Step-up popup closed');
+            // Dispatch event for popup close
+
+            window.postMessage({
+              type: 'STEP_UP_CLOSED'
+            }, '*');
+          },
+          onError: function onError(error) {
+            console.error('[SDK RemoteApp] Step-up authentication error', error);
+            // Dispatch event for step-up error
+            window.postMessage({
+              type: 'STEP_UP_ERROR'
+            }, '*');
+          }
+        });
+      }
+    };
     var fetchData = /*#__PURE__*/function () {
-      var _ref = RemoteApp_asyncToGenerator(/*#__PURE__*/RemoteApp_regeneratorRuntime().mark(function _callee() {
+      var _ref2 = RemoteApp_asyncToGenerator(/*#__PURE__*/RemoteApp_regeneratorRuntime().mark(function _callee() {
         var data, jsonData, errorMessage;
         return RemoteApp_regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
@@ -62579,10 +62630,18 @@ var RemoteApp = function RemoteApp(props) {
         }, _callee, null, [[2, 19]]);
       }));
       return function fetchData() {
-        return _ref.apply(this, arguments);
+        return _ref2.apply(this, arguments);
       };
     }();
+
+    // Add event listener for step-up authentication
+    window.addEventListener('STEP_UP_REQUIRED', handleStepUpRequired);
     fetchData();
+
+    // Cleanup event listener on unmount
+    return function () {
+      window.removeEventListener('STEP_UP_REQUIRED', handleStepUpRequired);
+    };
   }, []);
   var buttonOptions = {
     title: 'Try Again',
@@ -62673,6 +62732,10 @@ var EmbeddedExperience = function EmbeddedExperience(props) {
     if (isLoggedIn && hasEmbeddedSessionId && !isAccountSwitch) {
       setStatus(STATUS.LOGGED_IN);
       setIsLoading(true);
+    } else if (isAccountSwitch && !getAccessToken) {
+      // account switch is disabled when getAccessToken is not provided
+      setStatus(STATUS.ERROR);
+      setIsLoading(false);
     } else {
       setStatus(STATUS.PROMPT_LOGIN);
       setIsLoading(false);
@@ -67291,6 +67354,140 @@ var installXhrInterceptor = function installXhrInterceptor(env) {
     return originalSend.apply(this, arguments);
   };
 };
+;// ./src/utils/error-matcher.js
+var extractStepUpLinkWithRegex = function extractStepUpLinkWithRegex(payloadString) {
+  var specificPattern = /"[^"]*":\s*"(https?:\/\/[^"]*(?:authflow|step[Uu]p|authentication)[^"]*)"/;
+  var match = payloadString.match(specificPattern);
+  if (match && match[1]) {
+    return match[1];
+  }
+
+  // Fallback to any href URL
+  var fallbackPattern = /"href":\s*"(https?:\/\/[^"]+)"/;
+  var fallbackMatch = payloadString.match(fallbackPattern);
+  return fallbackMatch ? fallbackMatch[1] : null;
+};
+var matchStepUpError = function matchStepUpError(responsePayload) {
+  // Convert entire response payload to JSON string for regex matching
+  var payloadString = JSON.stringify(responsePayload);
+
+  // Regex patterns to match step-up requirements
+  var stepUpPatterns = [/STEP_UP_AUTHENTICATION_REQUIRED/, /STEP_UP_REQUIRED/, /ERROR_SENDER_AUTHENTICATION_REQUIRED/, /RISK_DENIED/, /STEPUP_AUTH/, /authRequired/, /STEPUP_ERROR/, /stepUpURL/];
+
+  // Check if any step-up pattern matches
+  var requiresStepUp = stepUpPatterns.some(function (pattern) {
+    return pattern.test(payloadString);
+  });
+  if (requiresStepUp) {
+    // Extract link using regex from the stringified payload
+    var link = extractStepUpLinkWithRegex(payloadString);
+    return {
+      requiresStepUp: true,
+      link: link
+    };
+  }
+  return {
+    requiresStepUp: false
+  };
+};
+;// ./src/utils/step-up-interceptor.js
+function step_up_interceptor_typeof(o) { "@babel/helpers - typeof"; return step_up_interceptor_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, step_up_interceptor_typeof(o); }
+function step_up_interceptor_regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ step_up_interceptor_regeneratorRuntime = function _regeneratorRuntime() { return e; }; var t, e = {}, r = Object.prototype, n = r.hasOwnProperty, o = Object.defineProperty || function (t, e, r) { t[e] = r.value; }, i = "function" == typeof Symbol ? Symbol : {}, a = i.iterator || "@@iterator", c = i.asyncIterator || "@@asyncIterator", u = i.toStringTag || "@@toStringTag"; function define(t, e, r) { return Object.defineProperty(t, e, { value: r, enumerable: !0, configurable: !0, writable: !0 }), t[e]; } try { define({}, ""); } catch (t) { define = function define(t, e, r) { return t[e] = r; }; } function wrap(t, e, r, n) { var i = e && e.prototype instanceof Generator ? e : Generator, a = Object.create(i.prototype), c = new Context(n || []); return o(a, "_invoke", { value: makeInvokeMethod(t, r, c) }), a; } function tryCatch(t, e, r) { try { return { type: "normal", arg: t.call(e, r) }; } catch (t) { return { type: "throw", arg: t }; } } e.wrap = wrap; var h = "suspendedStart", l = "suspendedYield", f = "executing", s = "completed", y = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var p = {}; define(p, a, function () { return this; }); var d = Object.getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach(function (e) { define(t, e, function (t) { return this._invoke(e, t); }); }); } function AsyncIterator(t, e) { function invoke(r, o, i, a) { var c = tryCatch(t[r], t, o); if ("throw" !== c.type) { var u = c.arg, h = u.value; return h && "object" == step_up_interceptor_typeof(h) && n.call(h, "__await") ? e.resolve(h.__await).then(function (t) { invoke("next", t, i, a); }, function (t) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invoke", { value: function value(t, n) { function callInvokeWithMethodAndArg() { return new e(function (e, r) { invoke(t, n, e, r); }); } return r = r ? r.then(callInvokeWithMethodAndArg, callInvokeWithMethodAndArg) : callInvokeWithMethodAndArg(); } }); } function makeInvokeMethod(e, r, n) { var o = h; return function (i, a) { if (o === f) throw Error("Generator is already running"); if (o === s) { if ("throw" === i) throw a; return { value: t, done: !0 }; } for (n.method = i, n.arg = a;;) { var c = n.delegate; if (c) { var u = maybeInvokeDelegate(c, n); if (u) { if (u === y) continue; return u; } } if ("next" === n.method) n.sent = n._sent = n.arg;else if ("throw" === n.method) { if (o === h) throw o = s, n.arg; n.dispatchException(n.arg); } else "return" === n.method && n.abrupt("return", n.arg); o = f; var p = tryCatch(e, r, n); if ("normal" === p.type) { if (o = n.done ? s : l, p.arg === y) continue; return { value: p.arg, done: n.done }; } "throw" === p.type && (o = s, n.method = "throw", n.arg = p.arg); } }; } function maybeInvokeDelegate(e, r) { var n = r.method, o = e.iterator[n]; if (o === t) return r.delegate = null, "throw" === n && e.iterator["return"] && (r.method = "return", r.arg = t, maybeInvokeDelegate(e, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), y; var i = tryCatch(o, e.iterator, r.arg); if ("throw" === i.type) return r.method = "throw", r.arg = i.arg, r.delegate = null, y; var a = i.arg; return a ? a.done ? (r[e.resultName] = a.value, r.next = e.nextLoc, "return" !== r.method && (r.method = "next", r.arg = t), r.delegate = null, y) : a : (r.method = "throw", r.arg = new TypeError("iterator result is not an object"), r.delegate = null, y); } function pushTryEntry(t) { var e = { tryLoc: t[0] }; 1 in t && (e.catchLoc = t[1]), 2 in t && (e.finallyLoc = t[2], e.afterLoc = t[3]), this.tryEntries.push(e); } function resetTryEntry(t) { var e = t.completion || {}; e.type = "normal", delete e.arg, t.completion = e; } function Context(t) { this.tryEntries = [{ tryLoc: "root" }], t.forEach(pushTryEntry, this), this.reset(!0); } function values(e) { if (e || "" === e) { var r = e[a]; if (r) return r.call(e); if ("function" == typeof e.next) return e; if (!isNaN(e.length)) { var o = -1, i = function next() { for (; ++o < e.length;) if (n.call(e, o)) return next.value = e[o], next.done = !1, next; return next.value = t, next.done = !0, next; }; return i.next = i; } } throw new TypeError(step_up_interceptor_typeof(e) + " is not iterable"); } return GeneratorFunction.prototype = GeneratorFunctionPrototype, o(g, "constructor", { value: GeneratorFunctionPrototype, configurable: !0 }), o(GeneratorFunctionPrototype, "constructor", { value: GeneratorFunction, configurable: !0 }), GeneratorFunction.displayName = define(GeneratorFunctionPrototype, u, "GeneratorFunction"), e.isGeneratorFunction = function (t) { var e = "function" == typeof t && t.constructor; return !!e && (e === GeneratorFunction || "GeneratorFunction" === (e.displayName || e.name)); }, e.mark = function (t) { return Object.setPrototypeOf ? Object.setPrototypeOf(t, GeneratorFunctionPrototype) : (t.__proto__ = GeneratorFunctionPrototype, define(t, u, "GeneratorFunction")), t.prototype = Object.create(g), t; }, e.awrap = function (t) { return { __await: t }; }, defineIteratorMethods(AsyncIterator.prototype), define(AsyncIterator.prototype, c, function () { return this; }), e.AsyncIterator = AsyncIterator, e.async = function (t, r, n, o, i) { void 0 === i && (i = Promise); var a = new AsyncIterator(wrap(t, r, n, o), i); return e.isGeneratorFunction(r) ? a : a.next().then(function (t) { return t.done ? t.value : a.next(); }); }, defineIteratorMethods(g), define(g, u, "Generator"), define(g, a, function () { return this; }), define(g, "toString", function () { return "[object Generator]"; }), e.keys = function (t) { var e = Object(t), r = []; for (var n in e) r.push(n); return r.reverse(), function next() { for (; r.length;) { var t = r.pop(); if (t in e) return next.value = t, next.done = !1, next; } return next.done = !0, next; }; }, e.values = values, Context.prototype = { constructor: Context, reset: function reset(e) { if (this.prev = 0, this.next = 0, this.sent = this._sent = t, this.done = !1, this.delegate = null, this.method = "next", this.arg = t, this.tryEntries.forEach(resetTryEntry), !e) for (var r in this) "t" === r.charAt(0) && n.call(this, r) && !isNaN(+r.slice(1)) && (this[r] = t); }, stop: function stop() { this.done = !0; var t = this.tryEntries[0].completion; if ("throw" === t.type) throw t.arg; return this.rval; }, dispatchException: function dispatchException(e) { if (this.done) throw e; var r = this; function handle(n, o) { return a.type = "throw", a.arg = e, r.next = n, o && (r.method = "next", r.arg = t), !!o; } for (var o = this.tryEntries.length - 1; o >= 0; --o) { var i = this.tryEntries[o], a = i.completion; if ("root" === i.tryLoc) return handle("end"); if (i.tryLoc <= this.prev) { var c = n.call(i, "catchLoc"), u = n.call(i, "finallyLoc"); if (c && u) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } else if (c) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); } else { if (!u) throw Error("try statement without catch or finally"); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } } } }, abrupt: function abrupt(t, e) { for (var r = this.tryEntries.length - 1; r >= 0; --r) { var o = this.tryEntries[r]; if (o.tryLoc <= this.prev && n.call(o, "finallyLoc") && this.prev < o.finallyLoc) { var i = o; break; } } i && ("break" === t || "continue" === t) && i.tryLoc <= e && e <= i.finallyLoc && (i = null); var a = i ? i.completion : {}; return a.type = t, a.arg = e, i ? (this.method = "next", this.next = i.finallyLoc, y) : this.complete(a); }, complete: function complete(t, e) { if ("throw" === t.type) throw t.arg; return "break" === t.type || "continue" === t.type ? this.next = t.arg : "return" === t.type ? (this.rval = this.arg = t.arg, this.method = "return", this.next = "end") : "normal" === t.type && e && (this.next = e), y; }, finish: function finish(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.finallyLoc === t) return this.complete(r.completion, r.afterLoc), resetTryEntry(r), y; } }, "catch": function _catch(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.tryLoc === t) { var n = r.completion; if ("throw" === n.type) { var o = n.arg; resetTryEntry(r); } return o; } } throw Error("illegal catch attempt"); }, delegateYield: function delegateYield(e, r, n) { return this.delegate = { iterator: values(e), resultName: r, nextLoc: n }, "next" === this.method && (this.arg = t), y; } }, e; }
+function step_up_interceptor_asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function step_up_interceptor_asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { step_up_interceptor_asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { step_up_interceptor_asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+/**
+ * Fetch Interceptor for Embedded SDK
+ *
+ * Automatically add sdk-session-id header to all requests
+ * going to PayPal domains when sessionId exists in localStorage.
+ *
+ * This ensures all flows hosted on paypal.com receive the embedded
+ * session tracking header without requiring manual header management.
+ */
+
+
+var RISKY_ROUTES = ["/graphql", "/phone/confirm", "/phone/validateCode"];
+
+/**
+ * Install fetch interceptor
+ *
+ * Wraps the native fetch function to automatically inject
+ * sdk-session-id header for PayPal domain requests.
+ */
+var installStepUpInterceptor = function installStepUpInterceptor() {
+  // Store reference to original fetch
+  var originalFetch = window.fetch;
+
+  // Override window.fetch
+  window.fetch = /*#__PURE__*/function () {
+    var _ref = step_up_interceptor_asyncToGenerator(/*#__PURE__*/step_up_interceptor_regeneratorRuntime().mark(function _callee(url) {
+      var options,
+        response,
+        clone,
+        data,
+        stepUpMatch,
+        stepUpEvent,
+        _args = arguments;
+      return step_up_interceptor_regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            options = _args.length > 1 && _args[1] !== undefined ? _args[1] : {};
+            if (!RISKY_ROUTES.some(function (route) {
+              return url.includes(route);
+            })) {
+              _context.next = 23;
+              break;
+            }
+            console.info("[SDK Step Up Interceptor] Checking for Step Up");
+            _context.next = 5;
+            return originalFetch.call(this, url, options);
+          case 5:
+            response = _context.sent;
+            clone = response.clone();
+            _context.prev = 7;
+            _context.next = 10;
+            return clone.json();
+          case 10:
+            data = _context.sent;
+            stepUpMatch = matchStepUpError(data);
+            if (!(stepUpMatch !== null && stepUpMatch !== void 0 && stepUpMatch.requiresStepUp)) {
+              _context.next = 17;
+              break;
+            }
+            console.info("[SDK Step Up Interceptor] Dispatching STEP_UP_REQUIRED event", {
+              link: stepUpMatch === null || stepUpMatch === void 0 ? void 0 : stepUpMatch.link
+            });
+            stepUpEvent = new CustomEvent("STEP_UP_REQUIRED", {
+              detail: {
+                link: stepUpMatch === null || stepUpMatch === void 0 ? void 0 : stepUpMatch.link
+              }
+            });
+            window.dispatchEvent(stepUpEvent);
+
+            // Stop the request and don't return response to caller
+            return _context.abrupt("return", Promise.reject(new Error("STEP_UP_REQUIRED")));
+          case 17:
+            return _context.abrupt("return", response);
+          case 20:
+            _context.prev = 20;
+            _context.t0 = _context["catch"](7);
+            throw new Error("[SDK Step Up Interceptor] Error on Response", _context.t0);
+          case 23:
+            return _context.abrupt("return", originalFetch.call(this, url, options));
+          case 24:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee, this, [[7, 20]]);
+    }));
+    return function (_x) {
+      return _ref.apply(this, arguments);
+    };
+  }();
+};
+/* harmony default export */ const step_up_interceptor = ({
+  installStepUpInterceptor: installStepUpInterceptor
+});
 ;// ./src/config/moduleConfigs.js
 /**
  * Module configurations for the merchant onboarding SDK
@@ -67427,6 +67624,7 @@ var federationModuleConfigs = {
 
 
 
+
 var servicing = {};
 var setupModules = function setupModules(window, document) {
   Object.keys(iframeModuleConfigs).forEach(function (module) {
@@ -67449,6 +67647,7 @@ var setupModules = function setupModules(window, document) {
         installFetchInterceptor(env);
         installAxiosInterceptor(env);
         installXhrInterceptor(env);
+        installStepUpInterceptor();
         var targetElement = document.getElementById(targetElementId);
         if (!targetElement) {
           console.error('Target element not found');