@schibsted/account-sdk-browser 4.5.3 → 4.7.0

package/src/identity.js

@@ -22,13 +22,12 @@ const { version } = require('../package.json');
  * the request and callback. It's also recommended to prevent CSRF {@link https://tools.ietf.org/html/rfc6749#section-10.12}
  * @property {string} [acrValues] - Authentication Context Class Reference Values. If
  * omitted, the user will be asked to authenticate using username+password.
- * For 2FA (Two-Factor Authentication) possible values are `sms`, `otp` (one time password) and
- * `password` (will force password confirmation, even if user is already logged in). Those values might
+ * For 2FA (Two-Factor Authentication) possible values are `sms`, `otp` (one time password),
+ * `password` (will force password confirmation, even if user is already logged in), `eid`. Those values might
  * be mixed as space-separated string. To make sure that user has authenticated with 2FA you need
  * to verify AMR (Authentication Methods References) claim in ID token.
  * Might also be used to ensure additional acr (sms, otp) for already logged in users.
- * Supported values are also 'otp-email' means one time password using email, and 'otp-sms' means
- * one time password using sms.
+ * Supported value is also 'otp-email' means one time password using email.
  * @property {string} [scope] - The OAuth scopes for the tokens. This is a list of
  * scopes, separated by space. If the list of scopes contains `openid`, the generated tokens
  * includes the id token which can be useful for getting information about the user. Omitting
@@ -62,8 +61,7 @@ const { version } = require('../package.json');
  * be mixed as space-separated string. To make sure that user has authenticated with 2FA you need
  * to verify AMR (Authentication Methods References) claim in ID token.
  * Might also be used to ensure additional acr (sms, otp) for already logged in users.
- * Supported values are also 'otp-email' means one time password using email, and 'otp-sms' means
- * one time password using sms.
+ * Supported value is also 'otp-email' means one time password using email.
  * @property {string} [scope] - The OAuth scopes for the tokens. This is a list of
  * scopes, separated by space. If the list of scopes contains `openid`, the generated tokens
  * includes the id token which can be useful for getting information about the user. Omitting
@@ -783,8 +781,8 @@ export class Identity extends EventEmitter {
             teaser = arguments[6] || teaser;
             maxAge = isNaN(arguments[7]) ? maxAge : arguments[7];
         }
-        const isValidAcrValue = (acrValue) => isStrIn(acrValue, ['password', 'otp', 'sms'], true);
-        assert(!acrValues || isStrIn(acrValues, ['', 'otp-email', 'otp-sms'], true) || acrValues.split(' ').every(isValidAcrValue),
+        const isValidAcrValue = (acrValue) => isStrIn(acrValue, ['password', 'otp', 'sms', 'eid-no', 'eid-se', 'eid'], true);
+        assert(!acrValues || isStrIn(acrValues, ['', 'otp-email'], true) || acrValues.split(' ').every(isValidAcrValue),
             `The acrValues parameter is not acceptable: ${acrValues}`);
         assert(isUrl(redirectUri),
             `loginUrl(): redirectUri must be a valid url but is ${redirectUri}`);
@@ -854,7 +852,7 @@ export class Identity extends EventEmitter {
      * @return {Promise<boolean|SDKError>} - will resolve to true if widget will be display. Otherwise will throw SDKError
      */
     async showSimplifiedLoginWidget(loginParams, options) {
-        // getUserContextData doens't throw exception
+        // getUserContextData doesn't throw exception
         const userData = await this.getUserContextData();
 
         const queryParams = { client_id: this.clientId };
@@ -890,6 +888,10 @@ export class Identity extends EventEmitter {
                     },
                 };
 
+                if (options && options.locale) {
+                    initialParams.locale = options.locale;
+                }
+
                 const loginHandler = async () => {
                     this.login(Object.assign(await prepareLoginParams(loginParams), {loginHint: userData.identifier}));
                 };