@stytch/react 20.0.0-next.5 → 20.0.0-next.6

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessOAuthClient.mjs

@@ -1,7 +1,7 @@
 import { omitUser, isTestPublicToken } from '../utils/index.mjs';
 import { validateInDev } from '../utils/dev.mjs';
-import { OAuthProviders } from '../public/ui.mjs';
 import { logger } from '../utils/logger.mjs';
+import { OAuthProviders } from '../public/ui.mjs';
 
 let HeadlessOAuthClient$1 = class HeadlessOAuthClient {
     _networkClient;
@@ -16,63 +16,6 @@ let HeadlessOAuthClient$1 = class HeadlessOAuthClient {
         this._pkceManager = _pkceManager;
         this._dynamicConfig = _dynamicConfig;
         this._config = _config;
-        this.google = {
-            start: this.startOAuthFlow(OAuthProviders.Google)
-        };
-        this.apple = {
-            start: this.startOAuthFlow(OAuthProviders.Apple)
-        };
-        this.microsoft = {
-            start: this.startOAuthFlow(OAuthProviders.Microsoft)
-        };
-        this.github = {
-            start: this.startOAuthFlow(OAuthProviders.Github)
-        };
-        this.gitlab = {
-            start: this.startOAuthFlow(OAuthProviders.GitLab)
-        };
-        this.facebook = {
-            start: this.startOAuthFlow(OAuthProviders.Facebook)
-        };
-        this.discord = {
-            start: this.startOAuthFlow(OAuthProviders.Discord)
-        };
-        this.salesforce = {
-            start: this.startOAuthFlow(OAuthProviders.Salesforce)
-        };
-        this.slack = {
-            start: this.startOAuthFlow(OAuthProviders.Slack)
-        };
-        this.amazon = {
-            start: this.startOAuthFlow(OAuthProviders.Amazon)
-        };
-        this.bitbucket = {
-            start: this.startOAuthFlow(OAuthProviders.Bitbucket)
-        };
-        this.linkedin = {
-            start: this.startOAuthFlow(OAuthProviders.LinkedIn)
-        };
-        this.coinbase = {
-            start: this.startOAuthFlow(OAuthProviders.Coinbase)
-        };
-        this.twitch = {
-            start: this.startOAuthFlow(OAuthProviders.Twitch)
-        };
-        this.twitter = {
-            start: this.startOAuthFlow(OAuthProviders.Twitter)
-        };
-        this.tiktok = {
-            start: this.startOAuthFlow(OAuthProviders.TikTok)
-        };
-        this.snapchat = {
-            start: this.startOAuthFlow(OAuthProviders.Snapchat)
-        };
-        this.figma = {
-            start: this.startOAuthFlow(OAuthProviders.Figma)
-        };
-        this.yahoo = {
-            start: this.startOAuthFlow(OAuthProviders.Yahoo)
-        };
         this.authenticate = this._subscriptionService.withUpdateSession(async (token, options)=>{
             validateInDev('stytch.oauth.authenticate', {
                 token,
@@ -98,25 +41,63 @@ let HeadlessOAuthClient$1 = class HeadlessOAuthClient {
             return omitUser(resp);
         });
     }
-    google;
-    apple;
-    microsoft;
-    github;
-    gitlab;
-    facebook;
-    discord;
-    salesforce;
-    slack;
-    amazon;
-    bitbucket;
-    linkedin;
-    coinbase;
-    twitch;
-    twitter;
-    tiktok;
-    snapchat;
-    figma;
-    yahoo;
+    google = {
+        start: this.startOAuthFlow(OAuthProviders.Google)
+    };
+    apple = {
+        start: this.startOAuthFlow(OAuthProviders.Apple)
+    };
+    microsoft = {
+        start: this.startOAuthFlow(OAuthProviders.Microsoft)
+    };
+    github = {
+        start: this.startOAuthFlow(OAuthProviders.Github)
+    };
+    gitlab = {
+        start: this.startOAuthFlow(OAuthProviders.GitLab)
+    };
+    facebook = {
+        start: this.startOAuthFlow(OAuthProviders.Facebook)
+    };
+    discord = {
+        start: this.startOAuthFlow(OAuthProviders.Discord)
+    };
+    salesforce = {
+        start: this.startOAuthFlow(OAuthProviders.Salesforce)
+    };
+    slack = {
+        start: this.startOAuthFlow(OAuthProviders.Slack)
+    };
+    amazon = {
+        start: this.startOAuthFlow(OAuthProviders.Amazon)
+    };
+    bitbucket = {
+        start: this.startOAuthFlow(OAuthProviders.Bitbucket)
+    };
+    linkedin = {
+        start: this.startOAuthFlow(OAuthProviders.LinkedIn)
+    };
+    coinbase = {
+        start: this.startOAuthFlow(OAuthProviders.Coinbase)
+    };
+    twitch = {
+        start: this.startOAuthFlow(OAuthProviders.Twitch)
+    };
+    twitter = {
+        start: this.startOAuthFlow(OAuthProviders.Twitter)
+    };
+    tiktok = {
+        start: this.startOAuthFlow(OAuthProviders.TikTok)
+    };
+    snapchat = {
+        start: this.startOAuthFlow(OAuthProviders.Snapchat)
+    };
+    figma = {
+        start: this.startOAuthFlow(OAuthProviders.Figma)
+    };
+    yahoo = {
+        start: this.startOAuthFlow(OAuthProviders.Yahoo)
+    };
     async attach(provider) {
         validateInDev('stytch.oauth.attach', {
             provider

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessOAuthClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"HeadlessOAuthClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessOAuthClient.ts"],"sourcesContent":["import {\n  IHeadlessOAuthClient,\n  OAuthAttachResponse,\n  OAuthAuthenticateOptions,\n  OAuthAuthenticateResponse,\n  OAuthGetURLOptions,\n  OAuthProviders,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { INetworkClient, IPKCEManager, IConsumerSubscriptionService } from '..';\nimport { WithUser, omitUser, logger, isTestPublicToken } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\ntype DynamicConfig = Promise<{\n  cnameDomain: null | string;\n  pkceRequiredForOAuth: boolean;\n}>;\ntype Config = {\n  publicToken: string;\n  testAPIURL: string;\n  liveAPIURL: string;\n};\n\nexport class HeadlessOAuthClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessOAuthClient<TProjectConfiguration>\n{\n  authenticate: (\n    token: string,\n    options: OAuthAuthenticateOptions,\n  ) => Promise<OAuthAuthenticateResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private _pkceManager: IPKCEManager,\n    private _dynamicConfig: DynamicConfig,\n    private _config: Config,\n  ) {\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (token: string, options: OAuthAuthenticateOptions) => {\n        validateInDev(\n          'stytch.oauth.authenticate',\n          { token, ...options },\n          {\n            token: 'string',\n            session_duration_minutes: 'number',\n          },\n        );\n\n        const keyPair = await this._pkceManager.getPKPair();\n\n        if (!keyPair) {\n          logger.warn(\n            'No code verifier found in local storage for OAuth flow.\\n' +\n              'Consider using stytch.oauth.$provider.start() to add PKCE to your OAuth flows for added security.\\n' +\n              'See https://stytch.com/docs/oauth#guides_pkce for more information.',\n          );\n        }\n\n        const resp = await this._networkClient.fetchSDK<WithUser<OAuthAuthenticateResponse<TProjectConfiguration>>>({\n          url: '/oauth/authenticate',\n          method: 'POST',\n          body: {\n            token,\n            code_verifier: keyPair?.code_verifier,\n            ...options,\n          },\n        });\n\n        this._pkceManager.clearPKPair();\n\n        return omitUser(resp);\n      },\n    );\n  }\n\n  google = {\n    start: this.startOAuthFlow(OAuthProviders.Google),\n  };\n\n  apple = {\n    start: this.startOAuthFlow(OAuthProviders.Apple),\n  };\n\n  microsoft = {\n    start: this.startOAuthFlow(OAuthProviders.Microsoft),\n  };\n\n  github = {\n    start: this.startOAuthFlow(OAuthProviders.Github),\n  };\n\n  gitlab = {\n    start: this.startOAuthFlow(OAuthProviders.GitLab),\n  };\n\n  facebook = {\n    start: this.startOAuthFlow(OAuthProviders.Facebook),\n  };\n\n  discord = {\n    start: this.startOAuthFlow(OAuthProviders.Discord),\n  };\n\n  salesforce = {\n    start: this.startOAuthFlow(OAuthProviders.Salesforce),\n  };\n\n  slack = {\n    start: this.startOAuthFlow(OAuthProviders.Slack),\n  };\n\n  amazon = {\n    start: this.startOAuthFlow(OAuthProviders.Amazon),\n  };\n\n  bitbucket = {\n    start: this.startOAuthFlow(OAuthProviders.Bitbucket),\n  };\n\n  linkedin = {\n    start: this.startOAuthFlow(OAuthProviders.LinkedIn),\n  };\n\n  coinbase = {\n    start: this.startOAuthFlow(OAuthProviders.Coinbase),\n  };\n\n  twitch = {\n    start: this.startOAuthFlow(OAuthProviders.Twitch),\n  };\n\n  twitter = {\n    start: this.startOAuthFlow(OAuthProviders.Twitter),\n  };\n\n  tiktok = {\n    start: this.startOAuthFlow(OAuthProviders.TikTok),\n  };\n\n  snapchat = {\n    start: this.startOAuthFlow(OAuthProviders.Snapchat),\n  };\n\n  figma = {\n    start: this.startOAuthFlow(OAuthProviders.Figma),\n  };\n\n  yahoo = {\n    start: this.startOAuthFlow(OAuthProviders.Yahoo),\n  };\n\n  async attach(provider: string): Promise<OAuthAttachResponse> {\n    validateInDev('stytch.oauth.attach', { provider }, { provider: 'string' });\n    return await this._networkClient.fetchSDK<OAuthAttachResponse>({\n      url: '/oauth/attach',\n      method: 'POST',\n      body: { provider },\n    });\n  }\n\n  private async getBaseApiUrl() {\n    const { cnameDomain } = await this._dynamicConfig;\n    if (cnameDomain) {\n      // The API returns cname domains without a protocol - assume HTTPS\n      return `https://${cnameDomain}`;\n    }\n    // Our TestAPIURL and LiveAPIURL should have the HTTPS protocol already attached\n    // Don't add it twice!\n    if (isTestPublicToken(this._config.publicToken)) {\n      return this._config.testAPIURL;\n    }\n    return this._config.liveAPIURL;\n  }\n\n  private startOAuthFlow(providerType: OAuthProviders) {\n    return async ({\n      login_redirect_url,\n      signup_redirect_url,\n      custom_scopes,\n      provider_params,\n      oauth_attach_token,\n    }: OAuthGetURLOptions = {}): Promise<void> => {\n      const { cnameDomain, pkceRequiredForOAuth } = await this._dynamicConfig;\n      const baseURL = await this.getBaseApiUrl();\n\n      this._networkClient.logEvent({\n        name: 'start_oauth_flow',\n        details: {\n          provider_type: providerType,\n          custom_scopes,\n          cname_domain: cnameDomain,\n          pkce: pkceRequiredForOAuth,\n          provider_params,\n        },\n      });\n\n      const oauthUrl = new URL(`${baseURL}/v1/public/oauth/${providerType}/start`);\n      oauthUrl.searchParams.set('public_token', this._config.publicToken);\n\n      if (pkceRequiredForOAuth) {\n        const keyPair = await this._pkceManager.startPKCETransaction();\n        oauthUrl.searchParams.set('code_challenge', keyPair.code_challenge);\n      } else {\n        this._pkceManager.clearPKPair();\n      }\n\n      if (custom_scopes) {\n        validateInDev(\n          'startOAuthFlow',\n          { custom_scopes },\n          {\n            custom_scopes: 'stringArray',\n          },\n        );\n        oauthUrl.searchParams.set('custom_scopes', custom_scopes.join(' '));\n      }\n      if (provider_params) {\n        validateInDev(\n          'startOAuthFlow',\n          { provider_params },\n          {\n            provider_params: 'optionalObject',\n          },\n        );\n        for (const key in provider_params) {\n          oauthUrl.searchParams.set('provider_' + key, provider_params[key]);\n        }\n      }\n      if (login_redirect_url) oauthUrl.searchParams.set('login_redirect_url', login_redirect_url);\n      if (signup_redirect_url) oauthUrl.searchParams.set('signup_redirect_url', signup_redirect_url);\n      if (oauth_attach_token) oauthUrl.searchParams.set('oauth_attach_token', oauth_attach_token);\n\n      this.navigate(oauthUrl);\n    };\n  }\n\n  // Public so it can be mocked in tests\n  navigate(url: URL) {\n    window.location.href = url.toString();\n  }\n}\n"],"names":["HeadlessOAuthClient","authenticate","constructor","_subscriptionService","_pkceManager","_config","_networkClient","_dynamicConfig","google","start","startOAuthFlow","OAuthProviders","Google","apple","Apple","microsoft","Microsoft","github","Github","gitlab","GitLab","facebook","Facebook","discord","Discord","salesforce","Salesforce","slack","Slack","amazon","Amazon","bitbucket","Bitbucket","linkedin","LinkedIn","coinbase","Coinbase","twitch","Twitch","twitter","Twitter","tiktok","TikTok","snapchat","Snapchat","figma","Figma","yahoo","Yahoo","withUpdateSession","token","options","validateInDev","session_duration_minutes","keyPair","getPKPair","logger","warn","resp","fetchSDK","url","method","body","code_verifier","clearPKPair","omitUser","attach","provider","getBaseApiUrl","cnameDomain","isTestPublicToken","publicToken","testAPIURL","liveAPIURL","providerType","login_redirect_url","signup_redirect_url","custom_scopes","provider_params","oauth_attach_token","pkceRequiredForOAuth","baseURL","logEvent","name","details","provider_type","cname_domain","pkce","oauthUrl","URL","searchParams","set","startPKCETransaction","code_challenge","join","key","navigate","window","location","href","toString"],"mappings":";;;;;4BAuBO,MAAMA,mBAAAA,CAAAA;;;;;;IAGXC,YAAAA;AAKAC,IAAAA,WAAAA,CACE,cAAsC,EAC9BC,oBAAyE,EACzEC,YAA0B,EAClC,cAAqC,EAC7BC,OAAe,CACvB;aALQC,cAAAA,GAAAA,cAAAA;aACAH,oBAAAA,GAAAA,oBAAAA;aACAC,YAAAA,GAAAA,YAAAA;aACAG,cAAAA,GAAAA,cAAAA;aACAF,OAAAA,GAAAA,OAAAA;aAwCVG,MAAAA,GAAS;AACPC,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeC,MAAM;AAClD,SAAA;aAEAC,KAAAA,GAAQ;AACNJ,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeG,KAAK;AACjD,SAAA;aAEAC,SAAAA,GAAY;AACVN,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeK,SAAS;AACrD,SAAA;aAEAC,MAAAA,GAAS;AACPR,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeO,MAAM;AAClD,SAAA;aAEAC,MAAAA,GAAS;AACPV,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeS,MAAM;AAClD,SAAA;aAEAC,QAAAA,GAAW;AACTZ,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeW,QAAQ;AACpD,SAAA;aAEAC,OAAAA,GAAU;AACRd,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAea,OAAO;AACnD,SAAA;aAEAC,UAAAA,GAAa;AACXhB,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAee,UAAU;AACtD,SAAA;aAEAC,KAAAA,GAAQ;AACNlB,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeiB,KAAK;AACjD,SAAA;aAEAC,MAAAA,GAAS;AACPpB,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAemB,MAAM;AAClD,SAAA;aAEAC,SAAAA,GAAY;AACVtB,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeqB,SAAS;AACrD,SAAA;aAEAC,QAAAA,GAAW;AACTxB,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeuB,QAAQ;AACpD,SAAA;aAEAC,QAAAA,GAAW;AACT1B,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeyB,QAAQ;AACpD,SAAA;aAEAC,MAAAA,GAAS;AACP5B,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe2B,MAAM;AAClD,SAAA;aAEAC,OAAAA,GAAU;AACR9B,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe6B,OAAO;AACnD,SAAA;aAEAC,MAAAA,GAAS;AACPhC,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe+B,MAAM;AAClD,SAAA;aAEAC,QAAAA,GAAW;AACTlC,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeiC,QAAQ;AACpD,SAAA;aAEAC,KAAAA,GAAQ;AACNpC,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAemC,KAAK;AACjD,SAAA;aAEAC,KAAAA,GAAQ;AACNtC,YAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeqC,KAAK;AACjD,SAAA;QAhHE,IAAI,CAAC/C,YAAY,GAAG,IAAI,CAACE,oBAAoB,CAAC8C,iBAAiB,CAC7D,OAAOC,KAAAA,EAAeC,OAAAA,GAAAA;AACpBC,YAAAA,aAAAA,CACE,2BAAA,EACA;AAAEF,gBAAAA,KAAAA;AAAO,gBAAA,GAAGC;aAAQ,EACpB;gBACED,KAAAA,EAAO,QAAA;gBACPG,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;AAGF,YAAA,MAAMC,UAAU,MAAM,IAAI,CAAClD,YAAY,CAACmD,SAAS,EAAA;AAEjD,YAAA,IAAI,CAACD,OAAAA,EAAS;gBACZE,MAAAA,CAAOC,IAAI,CACT,2DAAA,GACE,qGAAA,GACA,qEAAA,CAAA;AAEN,YAAA;AAEA,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACpD,cAAc,CAACqD,QAAQ,CAA6D;gBAC1GC,GAAAA,EAAK,qBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJZ,oBAAAA,KAAAA;AACAa,oBAAAA,aAAAA,EAAeT,OAAAA,EAASS,aAAAA;AACxB,oBAAA,GAAGZ;AACL;AACF,aAAA,CAAA;YAEA,IAAI,CAAC/C,YAAY,CAAC4D,WAAW,EAAA;AAE7B,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;AAEJ,IAAA;IAEAlD,MAAAA;IAIAK,KAAAA;IAIAE,SAAAA;IAIAE,MAAAA;IAIAE,MAAAA;IAIAE,QAAAA;IAIAE,OAAAA;IAIAE,UAAAA;IAIAE,KAAAA;IAIAE,MAAAA;IAIAE,SAAAA;IAIAE,QAAAA;IAIAE,QAAAA;IAIAE,MAAAA;IAIAE,OAAAA;IAIAE,MAAAA;IAIAE,QAAAA;IAIAE,KAAAA;IAIAE,KAAAA;IAIA,MAAMmB,MAAAA,CAAOC,QAAgB,EAAgC;AAC3Df,QAAAA,aAAAA,CAAc,qBAAA,EAAuB;AAAEe,YAAAA;SAAS,EAAG;YAAEA,QAAAA,EAAU;AAAS,SAAA,CAAA;AACxE,QAAA,OAAO,MAAM,IAAI,CAAC7D,cAAc,CAACqD,QAAQ,CAAsB;YAC7DC,GAAAA,EAAK,eAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AAAEK,gBAAAA;AAAS;AACnB,SAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAcC,aAAAA,GAAgB;AAC5B,QAAA,MAAM,EAAEC,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC9D,cAAc;AACjD,QAAA,IAAI8D,WAAAA,EAAa;;YAEf,OAAO,CAAC,QAAQ,EAAEA,WAAAA,CAAAA,CAAa;AACjC,QAAA;;;AAGA,QAAA,IAAIC,kBAAkB,IAAI,CAACjE,OAAO,CAACkE,WAAW,CAAA,EAAG;AAC/C,YAAA,OAAO,IAAI,CAAClE,OAAO,CAACmE,UAAU;AAChC,QAAA;AACA,QAAA,OAAO,IAAI,CAACnE,OAAO,CAACoE,UAAU;AAChC,IAAA;AAEQ/D,IAAAA,cAAAA,CAAegE,YAA4B,EAAE;AACnD,QAAA,OAAO,OAAO,EACZC,kBAAkB,EAClBC,mBAAmB,EACnBC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EACC,GAAG,EAAE,GAAA;YACxB,MAAM,EAAEV,WAAW,EAAEW,oBAAoB,EAAE,GAAG,MAAM,IAAI,CAACzE,cAAc;AACvE,YAAA,MAAM0E,OAAAA,GAAU,MAAM,IAAI,CAACb,aAAa,EAAA;AAExC,YAAA,IAAI,CAAC9D,cAAc,CAAC4E,QAAQ,CAAC;gBAC3BC,IAAAA,EAAM,kBAAA;gBACNC,OAAAA,EAAS;oBACPC,aAAAA,EAAeX,YAAAA;AACfG,oBAAAA,aAAAA;oBACAS,YAAAA,EAAcjB,WAAAA;oBACdkB,IAAAA,EAAMP,oBAAAA;AACNF,oBAAAA;AACF;AACF,aAAA,CAAA;YAEA,MAAMU,QAAAA,GAAW,IAAIC,GAAAA,CAAI,CAAA,EAAGR,QAAQ,iBAAiB,EAAEP,YAAAA,CAAa,MAAM,CAAC,CAAA;YAC3Ec,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,gBAAgB,IAAI,CAACtF,OAAO,CAACkE,WAAW,CAAA;AAElE,YAAA,IAAIS,oBAAAA,EAAsB;AACxB,gBAAA,MAAM1B,UAAU,MAAM,IAAI,CAAClD,YAAY,CAACwF,oBAAoB,EAAA;AAC5DJ,gBAAAA,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,gBAAA,EAAkBrC,QAAQuC,cAAc,CAAA;YACpE,CAAA,MAAO;gBACL,IAAI,CAACzF,YAAY,CAAC4D,WAAW,EAAA;AAC/B,YAAA;AAEA,YAAA,IAAIa,aAAAA,EAAe;AACjBzB,gBAAAA,aAAAA,CACE,gBAAA,EACA;AAAEyB,oBAAAA;iBAAc,EAChB;oBACEA,aAAAA,EAAe;AACjB,iBAAA,CAAA;AAEFW,gBAAAA,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,eAAA,EAAiBd,aAAAA,CAAciB,IAAI,CAAC,GAAA,CAAA,CAAA;AAChE,YAAA;AACA,YAAA,IAAIhB,eAAAA,EAAiB;AACnB1B,gBAAAA,aAAAA,CACE,gBAAA,EACA;AAAE0B,oBAAAA;iBAAgB,EAClB;oBACEA,eAAAA,EAAiB;AACnB,iBAAA,CAAA;gBAEF,IAAK,MAAMiB,OAAOjB,eAAAA,CAAiB;oBACjCU,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,cAAcI,GAAAA,EAAKjB,eAAe,CAACiB,GAAAA,CAAI,CAAA;AACnE,gBAAA;AACF,YAAA;AACA,YAAA,IAAIpB,oBAAoBa,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,oBAAA,EAAsBhB,kBAAAA,CAAAA;AACxE,YAAA,IAAIC,qBAAqBY,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,qBAAA,EAAuBf,mBAAAA,CAAAA;AAC1E,YAAA,IAAIG,oBAAoBS,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,oBAAA,EAAsBZ,kBAAAA,CAAAA;YAExE,IAAI,CAACiB,QAAQ,CAACR,QAAAA,CAAAA;AAChB,QAAA,CAAA;AACF,IAAA;;AAGAQ,IAAAA,QAAAA,CAASpC,GAAQ,EAAE;AACjBqC,QAAAA,MAAAA,CAAOC,QAAQ,CAACC,IAAI,GAAGvC,IAAIwC,QAAQ,EAAA;AACrC,IAAA;AACF;;;;"}
+{"version":3,"file":"HeadlessOAuthClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessOAuthClient.ts"],"sourcesContent":["import {\n  IHeadlessOAuthClient,\n  OAuthAttachResponse,\n  OAuthAuthenticateOptions,\n  OAuthAuthenticateResponse,\n  OAuthGetURLOptions,\n  OAuthProviders,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { INetworkClient, IPKCEManager, IConsumerSubscriptionService } from '..';\nimport { WithUser, omitUser, logger, isTestPublicToken } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\ntype DynamicConfig = Promise<{\n  cnameDomain: null | string;\n  pkceRequiredForOAuth: boolean;\n}>;\ntype Config = {\n  publicToken: string;\n  testAPIURL: string;\n  liveAPIURL: string;\n};\n\nexport class HeadlessOAuthClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessOAuthClient<TProjectConfiguration>\n{\n  authenticate: (\n    token: string,\n    options: OAuthAuthenticateOptions,\n  ) => Promise<OAuthAuthenticateResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private _pkceManager: IPKCEManager,\n    private _dynamicConfig: DynamicConfig,\n    private _config: Config,\n  ) {\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (token: string, options: OAuthAuthenticateOptions) => {\n        validateInDev(\n          'stytch.oauth.authenticate',\n          { token, ...options },\n          {\n            token: 'string',\n            session_duration_minutes: 'number',\n          },\n        );\n\n        const keyPair = await this._pkceManager.getPKPair();\n\n        if (!keyPair) {\n          logger.warn(\n            'No code verifier found in local storage for OAuth flow.\\n' +\n              'Consider using stytch.oauth.$provider.start() to add PKCE to your OAuth flows for added security.\\n' +\n              'See https://stytch.com/docs/oauth#guides_pkce for more information.',\n          );\n        }\n\n        const resp = await this._networkClient.fetchSDK<WithUser<OAuthAuthenticateResponse<TProjectConfiguration>>>({\n          url: '/oauth/authenticate',\n          method: 'POST',\n          body: {\n            token,\n            code_verifier: keyPair?.code_verifier,\n            ...options,\n          },\n        });\n\n        this._pkceManager.clearPKPair();\n\n        return omitUser(resp);\n      },\n    );\n  }\n\n  google = {\n    start: this.startOAuthFlow(OAuthProviders.Google),\n  };\n\n  apple = {\n    start: this.startOAuthFlow(OAuthProviders.Apple),\n  };\n\n  microsoft = {\n    start: this.startOAuthFlow(OAuthProviders.Microsoft),\n  };\n\n  github = {\n    start: this.startOAuthFlow(OAuthProviders.Github),\n  };\n\n  gitlab = {\n    start: this.startOAuthFlow(OAuthProviders.GitLab),\n  };\n\n  facebook = {\n    start: this.startOAuthFlow(OAuthProviders.Facebook),\n  };\n\n  discord = {\n    start: this.startOAuthFlow(OAuthProviders.Discord),\n  };\n\n  salesforce = {\n    start: this.startOAuthFlow(OAuthProviders.Salesforce),\n  };\n\n  slack = {\n    start: this.startOAuthFlow(OAuthProviders.Slack),\n  };\n\n  amazon = {\n    start: this.startOAuthFlow(OAuthProviders.Amazon),\n  };\n\n  bitbucket = {\n    start: this.startOAuthFlow(OAuthProviders.Bitbucket),\n  };\n\n  linkedin = {\n    start: this.startOAuthFlow(OAuthProviders.LinkedIn),\n  };\n\n  coinbase = {\n    start: this.startOAuthFlow(OAuthProviders.Coinbase),\n  };\n\n  twitch = {\n    start: this.startOAuthFlow(OAuthProviders.Twitch),\n  };\n\n  twitter = {\n    start: this.startOAuthFlow(OAuthProviders.Twitter),\n  };\n\n  tiktok = {\n    start: this.startOAuthFlow(OAuthProviders.TikTok),\n  };\n\n  snapchat = {\n    start: this.startOAuthFlow(OAuthProviders.Snapchat),\n  };\n\n  figma = {\n    start: this.startOAuthFlow(OAuthProviders.Figma),\n  };\n\n  yahoo = {\n    start: this.startOAuthFlow(OAuthProviders.Yahoo),\n  };\n\n  async attach(provider: string): Promise<OAuthAttachResponse> {\n    validateInDev('stytch.oauth.attach', { provider }, { provider: 'string' });\n    return await this._networkClient.fetchSDK<OAuthAttachResponse>({\n      url: '/oauth/attach',\n      method: 'POST',\n      body: { provider },\n    });\n  }\n\n  private async getBaseApiUrl() {\n    const { cnameDomain } = await this._dynamicConfig;\n    if (cnameDomain) {\n      // The API returns cname domains without a protocol - assume HTTPS\n      return `https://${cnameDomain}`;\n    }\n    // Our TestAPIURL and LiveAPIURL should have the HTTPS protocol already attached\n    // Don't add it twice!\n    if (isTestPublicToken(this._config.publicToken)) {\n      return this._config.testAPIURL;\n    }\n    return this._config.liveAPIURL;\n  }\n\n  private startOAuthFlow(providerType: OAuthProviders) {\n    return async ({\n      login_redirect_url,\n      signup_redirect_url,\n      custom_scopes,\n      provider_params,\n      oauth_attach_token,\n    }: OAuthGetURLOptions = {}): Promise<void> => {\n      const { cnameDomain, pkceRequiredForOAuth } = await this._dynamicConfig;\n      const baseURL = await this.getBaseApiUrl();\n\n      this._networkClient.logEvent({\n        name: 'start_oauth_flow',\n        details: {\n          provider_type: providerType,\n          custom_scopes,\n          cname_domain: cnameDomain,\n          pkce: pkceRequiredForOAuth,\n          provider_params,\n        },\n      });\n\n      const oauthUrl = new URL(`${baseURL}/v1/public/oauth/${providerType}/start`);\n      oauthUrl.searchParams.set('public_token', this._config.publicToken);\n\n      if (pkceRequiredForOAuth) {\n        const keyPair = await this._pkceManager.startPKCETransaction();\n        oauthUrl.searchParams.set('code_challenge', keyPair.code_challenge);\n      } else {\n        this._pkceManager.clearPKPair();\n      }\n\n      if (custom_scopes) {\n        validateInDev(\n          'startOAuthFlow',\n          { custom_scopes },\n          {\n            custom_scopes: 'stringArray',\n          },\n        );\n        oauthUrl.searchParams.set('custom_scopes', custom_scopes.join(' '));\n      }\n      if (provider_params) {\n        validateInDev(\n          'startOAuthFlow',\n          { provider_params },\n          {\n            provider_params: 'optionalObject',\n          },\n        );\n        for (const key in provider_params) {\n          oauthUrl.searchParams.set('provider_' + key, provider_params[key]);\n        }\n      }\n      if (login_redirect_url) oauthUrl.searchParams.set('login_redirect_url', login_redirect_url);\n      if (signup_redirect_url) oauthUrl.searchParams.set('signup_redirect_url', signup_redirect_url);\n      if (oauth_attach_token) oauthUrl.searchParams.set('oauth_attach_token', oauth_attach_token);\n\n      this.navigate(oauthUrl);\n    };\n  }\n\n  // Public so it can be mocked in tests\n  navigate(url: URL) {\n    window.location.href = url.toString();\n  }\n}\n"],"names":["HeadlessOAuthClient","authenticate","_subscriptionService","_pkceManager","_config","_networkClient","_dynamicConfig","withUpdateSession","token","options","validateInDev","session_duration_minutes","keyPair","getPKPair","logger","warn","resp","fetchSDK","url","method","body","code_verifier","clearPKPair","omitUser","google","start","startOAuthFlow","OAuthProviders","Google","apple","Apple","microsoft","Microsoft","github","Github","gitlab","GitLab","facebook","Facebook","discord","Discord","salesforce","Salesforce","slack","Slack","amazon","Amazon","bitbucket","Bitbucket","linkedin","LinkedIn","coinbase","Coinbase","twitch","Twitch","twitter","Twitter","tiktok","TikTok","snapchat","Snapchat","figma","Figma","yahoo","Yahoo","attach","provider","getBaseApiUrl","cnameDomain","isTestPublicToken","publicToken","testAPIURL","liveAPIURL","providerType","login_redirect_url","signup_redirect_url","custom_scopes","provider_params","oauth_attach_token","pkceRequiredForOAuth","baseURL","logEvent","name","details","provider_type","cname_domain","pkce","oauthUrl","URL","searchParams","set","startPKCETransaction","code_challenge","join","key","navigate","window","location","href","toString"],"mappings":";;;;;4BAuBO,MAAMA,mBAAAA,CAAAA;;;;;;IAGXC,YAAAA;AAKA,IAAA,WAAA,CACE,cAAsC,EAC9BC,oBAAyE,EACzEC,YAA0B,EAClC,cAAqC,EAC7BC,OAAe,CACvB;aALQC,cAAAA,GAAAA,cAAAA;aACAH,oBAAAA,GAAAA,oBAAAA;aACAC,YAAAA,GAAAA,YAAAA;aACAG,cAAAA,GAAAA,cAAAA;aACAF,OAAAA,GAAAA,OAAAA;QAER,IAAI,CAACH,YAAY,GAAG,IAAI,CAACC,oBAAoB,CAACK,iBAAiB,CAC7D,OAAOC,KAAAA,EAAeC,OAAAA,GAAAA;AACpBC,YAAAA,aAAAA,CACE,2BAAA,EACA;AAAEF,gBAAAA,KAAAA;AAAO,gBAAA,GAAGC;aAAQ,EACpB;gBACED,KAAAA,EAAO,QAAA;gBACPG,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;AAGF,YAAA,MAAMC,UAAU,MAAM,IAAI,CAACT,YAAY,CAACU,SAAS,EAAA;AAEjD,YAAA,IAAI,CAACD,OAAAA,EAAS;gBACZE,MAAAA,CAAOC,IAAI,CACT,2DAAA,GACE,qGAAA,GACA,qEAAA,CAAA;AAEN,YAAA;AAEA,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACX,cAAc,CAACY,QAAQ,CAA6D;gBAC1GC,GAAAA,EAAK,qBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJZ,oBAAAA,KAAAA;AACAa,oBAAAA,aAAAA,EAAeT,OAAAA,EAASS,aAAAA;AACxB,oBAAA,GAAGZ;AACL;AACF,aAAA,CAAA;YAEA,IAAI,CAACN,YAAY,CAACmB,WAAW,EAAA;AAE7B,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;AAEJ,IAAA;IAEAQ,MAAAA,GAAS;AACPC,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeC,MAAM;KAClD;IAEAC,KAAAA,GAAQ;AACNJ,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeG,KAAK;KACjD;IAEAC,SAAAA,GAAY;AACVN,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeK,SAAS;KACrD;IAEAC,MAAAA,GAAS;AACPR,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeO,MAAM;KAClD;IAEAC,MAAAA,GAAS;AACPV,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeS,MAAM;KAClD;IAEAC,QAAAA,GAAW;AACTZ,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeW,QAAQ;KACpD;IAEAC,OAAAA,GAAU;AACRd,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAea,OAAO;KACnD;IAEAC,UAAAA,GAAa;AACXhB,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAee,UAAU;KACtD;IAEAC,KAAAA,GAAQ;AACNlB,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeiB,KAAK;KACjD;IAEAC,MAAAA,GAAS;AACPpB,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAemB,MAAM;KAClD;IAEAC,SAAAA,GAAY;AACVtB,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeqB,SAAS;KACrD;IAEAC,QAAAA,GAAW;AACTxB,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeuB,QAAQ;KACpD;IAEAC,QAAAA,GAAW;AACT1B,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeyB,QAAQ;KACpD;IAEAC,MAAAA,GAAS;AACP5B,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe2B,MAAM;KAClD;IAEAC,OAAAA,GAAU;AACR9B,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe6B,OAAO;KACnD;IAEAC,MAAAA,GAAS;AACPhC,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAe+B,MAAM;KAClD;IAEAC,QAAAA,GAAW;AACTlC,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeiC,QAAQ;KACpD;IAEAC,KAAAA,GAAQ;AACNpC,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAemC,KAAK;KACjD;IAEAC,KAAAA,GAAQ;AACNtC,QAAAA,KAAAA,EAAO,IAAI,CAACC,cAAc,CAACC,eAAeqC,KAAK;KACjD;IAEA,MAAMC,MAAAA,CAAOC,QAAgB,EAAgC;AAC3DxD,QAAAA,aAAAA,CAAc,qBAAA,EAAuB;AAAEwD,YAAAA;SAAS,EAAG;YAAEA,QAAAA,EAAU;AAAS,SAAA,CAAA;AACxE,QAAA,OAAO,MAAM,IAAI,CAAC7D,cAAc,CAACY,QAAQ,CAAsB;YAC7DC,GAAAA,EAAK,eAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AAAE8C,gBAAAA;AAAS;AACnB,SAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAcC,aAAAA,GAAgB;AAC5B,QAAA,MAAM,EAAEC,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC9D,cAAc;AACjD,QAAA,IAAI8D,WAAAA,EAAa;;YAEf,OAAO,CAAC,QAAQ,EAAEA,WAAAA,CAAAA,CAAa;AACjC,QAAA;;;AAGA,QAAA,IAAIC,kBAAkB,IAAI,CAACjE,OAAO,CAACkE,WAAW,CAAA,EAAG;AAC/C,YAAA,OAAO,IAAI,CAAClE,OAAO,CAACmE,UAAU;AAChC,QAAA;AACA,QAAA,OAAO,IAAI,CAACnE,OAAO,CAACoE,UAAU;AAChC,IAAA;AAEQ9C,IAAAA,cAAAA,CAAe+C,YAA4B,EAAE;AACnD,QAAA,OAAO,OAAO,EACZC,kBAAkB,EAClBC,mBAAmB,EACnBC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EACC,GAAG,EAAE,GAAA;YACxB,MAAM,EAAEV,WAAW,EAAEW,oBAAoB,EAAE,GAAG,MAAM,IAAI,CAACzE,cAAc;AACvE,YAAA,MAAM0E,OAAAA,GAAU,MAAM,IAAI,CAACb,aAAa,EAAA;AAExC,YAAA,IAAI,CAAC9D,cAAc,CAAC4E,QAAQ,CAAC;gBAC3BC,IAAAA,EAAM,kBAAA;gBACNC,OAAAA,EAAS;oBACPC,aAAAA,EAAeX,YAAAA;AACfG,oBAAAA,aAAAA;oBACAS,YAAAA,EAAcjB,WAAAA;oBACdkB,IAAAA,EAAMP,oBAAAA;AACNF,oBAAAA;AACF;AACF,aAAA,CAAA;YAEA,MAAMU,QAAAA,GAAW,IAAIC,GAAAA,CAAI,CAAA,EAAGR,QAAQ,iBAAiB,EAAEP,YAAAA,CAAa,MAAM,CAAC,CAAA;YAC3Ec,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,gBAAgB,IAAI,CAACtF,OAAO,CAACkE,WAAW,CAAA;AAElE,YAAA,IAAIS,oBAAAA,EAAsB;AACxB,gBAAA,MAAMnE,UAAU,MAAM,IAAI,CAACT,YAAY,CAACwF,oBAAoB,EAAA;AAC5DJ,gBAAAA,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,gBAAA,EAAkB9E,QAAQgF,cAAc,CAAA;YACpE,CAAA,MAAO;gBACL,IAAI,CAACzF,YAAY,CAACmB,WAAW,EAAA;AAC/B,YAAA;AAEA,YAAA,IAAIsD,aAAAA,EAAe;AACjBlE,gBAAAA,aAAAA,CACE,gBAAA,EACA;AAAEkE,oBAAAA;iBAAc,EAChB;oBACEA,aAAAA,EAAe;AACjB,iBAAA,CAAA;AAEFW,gBAAAA,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,eAAA,EAAiBd,aAAAA,CAAciB,IAAI,CAAC,GAAA,CAAA,CAAA;AAChE,YAAA;AACA,YAAA,IAAIhB,eAAAA,EAAiB;AACnBnE,gBAAAA,aAAAA,CACE,gBAAA,EACA;AAAEmE,oBAAAA;iBAAgB,EAClB;oBACEA,eAAAA,EAAiB;AACnB,iBAAA,CAAA;gBAEF,IAAK,MAAMiB,OAAOjB,eAAAA,CAAiB;oBACjCU,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,cAAcI,GAAAA,EAAKjB,eAAe,CAACiB,GAAAA,CAAI,CAAA;AACnE,gBAAA;AACF,YAAA;AACA,YAAA,IAAIpB,oBAAoBa,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,oBAAA,EAAsBhB,kBAAAA,CAAAA;AACxE,YAAA,IAAIC,qBAAqBY,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,qBAAA,EAAuBf,mBAAAA,CAAAA;AAC1E,YAAA,IAAIG,oBAAoBS,QAAAA,CAASE,YAAY,CAACC,GAAG,CAAC,oBAAA,EAAsBZ,kBAAAA,CAAAA;YAExE,IAAI,CAACiB,QAAQ,CAACR,QAAAA,CAAAA;AAChB,QAAA,CAAA;AACF,IAAA;;AAGAQ,IAAAA,QAAAA,CAAS7E,GAAQ,EAAE;AACjB8E,QAAAA,MAAAA,CAAOC,QAAQ,CAACC,IAAI,GAAGhF,IAAIiF,QAAQ,EAAA;AACrC,IAAA;AACF;;;;"}

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessOTPClient.mjs

@@ -12,106 +12,6 @@ class HeadlessOTPClient {
         this._subscriptionService = _subscriptionService;
         this.executeRecaptcha = executeRecaptcha;
         this.dfpProtectedAuth = dfpProtectedAuth;
-        this.sms = {
-            loginOrCreate: async (phone_number, options)=>{
-                const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
-                const requestBody = {
-                    ...options,
-                    phone_number,
-                    captcha_token,
-                    dfp_telemetry_id
-                };
-                return this._networkClient.retriableFetchSDK({
-                    url: '/otps/sms/login_or_create',
-                    body: requestBody,
-                    method: 'POST',
-                    retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
-                });
-            },
-            send: async (phone_number, options)=>{
-                const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
-                const requestBody = {
-                    ...options,
-                    phone_number,
-                    captcha_token,
-                    dfp_telemetry_id
-                };
-                const isLoggedIn = !!this._subscriptionService.getSession();
-                const endpoint = isLoggedIn ? '/otps/sms/send/secondary' : '/otps/sms/send/primary';
-                return this._networkClient.retriableFetchSDK({
-                    url: endpoint,
-                    body: requestBody,
-                    method: 'POST',
-                    retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
-                });
-            }
-        };
-        this.whatsapp = {
-            loginOrCreate: async (phone_number, options)=>{
-                const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
-                const requestBody = {
-                    ...options,
-                    phone_number,
-                    dfp_telemetry_id,
-                    captcha_token
-                };
-                return this._networkClient.retriableFetchSDK({
-                    url: '/otps/whatsapp/login_or_create',
-                    body: requestBody,
-                    method: 'POST',
-                    retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
-                });
-            },
-            send: async (phone_number, options)=>{
-                const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
-                const requestBody = {
-                    ...options,
-                    phone_number,
-                    captcha_token,
-                    dfp_telemetry_id
-                };
-                const isLoggedIn = !!this._subscriptionService.getSession();
-                const endpoint = isLoggedIn ? '/otps/whatsapp/send/secondary' : '/otps/whatsapp/send/primary';
-                return this._networkClient.retriableFetchSDK({
-                    url: endpoint,
-                    body: requestBody,
-                    method: 'POST',
-                    retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
-                });
-            }
-        };
-        this.email = {
-            loginOrCreate: async (email, options)=>{
-                const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
-                const requestBody = {
-                    ...options,
-                    email,
-                    captcha_token,
-                    dfp_telemetry_id
-                };
-                return this._networkClient.retriableFetchSDK({
-                    url: '/otps/email/login_or_create',
-                    body: requestBody,
-                    method: 'POST',
-                    retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
-                });
-            },
-            send: async (email, options)=>{
-                const captcha_token = await this.executeRecaptcha();
-                const requestBody = {
-                    ...options,
-                    email,
-                    captcha_token
-                };
-                const isLoggedIn = !!this._subscriptionService.getSession();
-                const endpoint = isLoggedIn ? '/otps/email/send/secondary' : '/otps/email/send/primary';
-                return this._networkClient.fetchSDK({
-                    url: endpoint,
-                    body: requestBody,
-                    method: 'POST'
-                });
-            }
-        };
         this.authenticate = this._subscriptionService.withUpdateSession(async (code, method_id, options)=>{
             validateInDev('stytch.otps.authenticate', {
                 code,
@@ -137,9 +37,106 @@ class HeadlessOTPClient {
             return omitUser(resp);
         });
     }
-    sms;
-    whatsapp;
-    email;
+    sms = {
+        loginOrCreate: async (phone_number, options)=>{
+            const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+            const requestBody = {
+                ...options,
+                phone_number,
+                captcha_token,
+                dfp_telemetry_id
+            };
+            return this._networkClient.retriableFetchSDK({
+                url: '/otps/sms/login_or_create',
+                body: requestBody,
+                method: 'POST',
+                retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+            });
+        },
+        send: async (phone_number, options)=>{
+            const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+            const requestBody = {
+                ...options,
+                phone_number,
+                captcha_token,
+                dfp_telemetry_id
+            };
+            const isLoggedIn = !!this._subscriptionService.getSession();
+            const endpoint = isLoggedIn ? '/otps/sms/send/secondary' : '/otps/sms/send/primary';
+            return this._networkClient.retriableFetchSDK({
+                url: endpoint,
+                body: requestBody,
+                method: 'POST',
+                retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+            });
+        }
+    };
+    whatsapp = {
+        loginOrCreate: async (phone_number, options)=>{
+            const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+            const requestBody = {
+                ...options,
+                phone_number,
+                dfp_telemetry_id,
+                captcha_token
+            };
+            return this._networkClient.retriableFetchSDK({
+                url: '/otps/whatsapp/login_or_create',
+                body: requestBody,
+                method: 'POST',
+                retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+            });
+        },
+        send: async (phone_number, options)=>{
+            const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+            const requestBody = {
+                ...options,
+                phone_number,
+                captcha_token,
+                dfp_telemetry_id
+            };
+            const isLoggedIn = !!this._subscriptionService.getSession();
+            const endpoint = isLoggedIn ? '/otps/whatsapp/send/secondary' : '/otps/whatsapp/send/primary';
+            return this._networkClient.retriableFetchSDK({
+                url: endpoint,
+                body: requestBody,
+                method: 'POST',
+                retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+            });
+        }
+    };
+    email = {
+        loginOrCreate: async (email, options)=>{
+            const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+            const requestBody = {
+                ...options,
+                email,
+                captcha_token,
+                dfp_telemetry_id
+            };
+            return this._networkClient.retriableFetchSDK({
+                url: '/otps/email/login_or_create',
+                body: requestBody,
+                method: 'POST',
+                retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+            });
+        },
+        send: async (email, options)=>{
+            const captcha_token = await this.executeRecaptcha();
+            const requestBody = {
+                ...options,
+                email,
+                captcha_token
+            };
+            const isLoggedIn = !!this._subscriptionService.getSession();
+            const endpoint = isLoggedIn ? '/otps/email/send/secondary' : '/otps/email/send/primary';
+            return this._networkClient.fetchSDK({
+                url: endpoint,
+                body: requestBody,
+                method: 'POST'
+            });
+        }
+    };
 }
 
 export { HeadlessOTPClient };

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessOTPClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"HeadlessOTPClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessOTPClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService, IDFPProtectedAuthProvider, INetworkClient } from '..';\nimport {\n  IHeadlessOTPsClient,\n  OTPAuthenticateOptions,\n  OTPCodeEmailOptions,\n  OTPCodeOptions,\n  OTPCodeSMSOptions,\n  OTPsAuthenticateResponse,\n  OTPsLoginOrCreateResponse,\n  OTPsSendResponse,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { WithUser, omitUser } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\nexport class HeadlessOTPClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessOTPsClient<TProjectConfiguration>\n{\n  authenticate: (\n    code: string,\n    method_id: string,\n    options: OTPAuthenticateOptions,\n  ) => Promise<OTPsAuthenticateResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private executeRecaptcha: () => Promise<string | undefined> = () => Promise.resolve(undefined),\n    private dfpProtectedAuth: IDFPProtectedAuthProvider,\n  ) {\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (code: string, method_id: string, options: OTPAuthenticateOptions) => {\n        validateInDev(\n          'stytch.otps.authenticate',\n          { code, ...options },\n          {\n            code: 'string',\n            session_duration_minutes: 'number',\n          },\n        );\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const requestBody = {\n          token: code,\n          method_id,\n          dfp_telemetry_id,\n          captcha_token,\n          ...options,\n        };\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<OTPsAuthenticateResponse<TProjectConfiguration>>\n        >({\n          url: '/otps/authenticate',\n          body: requestBody,\n          method: 'POST',\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n  }\n\n  sms = {\n    loginOrCreate: async (phone_number: string, options: OTPCodeSMSOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/sms/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (phone_number: string, options: OTPCodeSMSOptions): Promise<OTPsSendResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/sms/send/secondary' : '/otps/sms/send/primary';\n\n      return this._networkClient.retriableFetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n  };\n\n  whatsapp = {\n    loginOrCreate: async (phone_number: string, options: OTPCodeOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, dfp_telemetry_id, captcha_token };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/whatsapp/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (phone_number: string, options: OTPCodeOptions): Promise<OTPsSendResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/whatsapp/send/secondary' : '/otps/whatsapp/send/primary';\n\n      return this._networkClient.retriableFetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n  };\n\n  email = {\n    loginOrCreate: async (email: string, options: OTPCodeEmailOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, email, captcha_token, dfp_telemetry_id };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/email/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (email: string, options: OTPCodeEmailOptions): Promise<OTPsSendResponse> => {\n      const captcha_token = await this.executeRecaptcha();\n      const requestBody = { ...options, email, captcha_token };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/email/send/secondary' : '/otps/email/send/primary';\n\n      return this._networkClient.fetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n      });\n    },\n  };\n}\n"],"names":["HeadlessOTPClient","authenticate","constructor","executeRecaptcha","Promise","resolve","undefined","dfpProtectedAuth","_networkClient","_subscriptionService","sms","loginOrCreate","phone_number","options","dfp_telemetry_id","captcha_token","getDFPTelemetryIDAndCaptcha","requestBody","retriableFetchSDK","url","body","method","retryCallback","retryWithCaptchaAndDFP","send","isLoggedIn","getSession","endpoint","whatsapp","email","fetchSDK","withUpdateSession","code","method_id","validateInDev","session_duration_minutes","token","resp","omitUser"],"mappings":";;;AAeO,MAAMA,iBAAAA,CAAAA;;;;;IAGXC,YAAAA;AAMAC,IAAAA,WAAAA,CACE,cAAsC,EACtC,oBAAiF,EACjF,gBAAQC,GAAsD,IAAMC,OAAAA,CAAQC,OAAO,CAACC,SAAAA,CAAU,EACtFC,gBAA2C,CACnD;aAJQC,cAAAA,GAAAA,cAAAA;aACAC,oBAAAA,GAAAA,oBAAAA;aACAN,gBAAAA,GAAAA,gBAAAA;aACAI,gBAAAA,GAAAA,gBAAAA;aAmCVG,GAAAA,GAAM;AACJC,YAAAA,aAAAA,EAAe,OAAOC,YAAAA,EAAsBC,OAAAA,GAAAA;gBAC1C,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AACnG,gBAAA,MAAMC,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAED,oBAAAA,YAAAA;AAAcG,oBAAAA,aAAAA;AAAeD,oBAAAA;AAAiB,iBAAA;AAChF,gBAAA,OAAO,IAAI,CAACN,cAAc,CAACU,iBAAiB,CAA4B;oBACtEC,GAAAA,EAAK,2BAAA;oBACLC,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ,MAAA;AACRC,oBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,iBAAA,CAAA;AACF,YAAA,CAAA;AACAC,YAAAA,IAAAA,EAAM,OAAOZ,YAAAA,EAAsBC,OAAAA,GAAAA;gBACjC,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AACnG,gBAAA,MAAMC,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAED,oBAAAA,YAAAA;AAAcG,oBAAAA,aAAAA;AAAeD,oBAAAA;AAAiB,iBAAA;AAEhF,gBAAA,MAAMW,aAAa,CAAC,CAAC,IAAI,CAAChB,oBAAoB,CAACiB,UAAU,EAAA;gBAEzD,MAAMC,QAAAA,GAAWF,aAAa,0BAAA,GAA6B,wBAAA;AAE3D,gBAAA,OAAO,IAAI,CAACjB,cAAc,CAACU,iBAAiB,CAAmB;oBAC7DC,GAAAA,EAAKQ,QAAAA;oBACLP,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ,MAAA;AACRC,oBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,iBAAA,CAAA;AACF,YAAA;AACF,SAAA;aAEAK,QAAAA,GAAW;AACTjB,YAAAA,aAAAA,EAAe,OAAOC,YAAAA,EAAsBC,OAAAA,GAAAA;gBAC1C,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AACnG,gBAAA,MAAMC,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAED,oBAAAA,YAAAA;AAAcE,oBAAAA,gBAAAA;AAAkBC,oBAAAA;AAAc,iBAAA;AAChF,gBAAA,OAAO,IAAI,CAACP,cAAc,CAACU,iBAAiB,CAA4B;oBACtEC,GAAAA,EAAK,gCAAA;oBACLC,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ,MAAA;AACRC,oBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,iBAAA,CAAA;AACF,YAAA,CAAA;AACAC,YAAAA,IAAAA,EAAM,OAAOZ,YAAAA,EAAsBC,OAAAA,GAAAA;gBACjC,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AACnG,gBAAA,MAAMC,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAED,oBAAAA,YAAAA;AAAcG,oBAAAA,aAAAA;AAAeD,oBAAAA;AAAiB,iBAAA;AAEhF,gBAAA,MAAMW,aAAa,CAAC,CAAC,IAAI,CAAChB,oBAAoB,CAACiB,UAAU,EAAA;gBAEzD,MAAMC,QAAAA,GAAWF,aAAa,+BAAA,GAAkC,6BAAA;AAEhE,gBAAA,OAAO,IAAI,CAACjB,cAAc,CAACU,iBAAiB,CAAmB;oBAC7DC,GAAAA,EAAKQ,QAAAA;oBACLP,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ,MAAA;AACRC,oBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,iBAAA,CAAA;AACF,YAAA;AACF,SAAA;aAEAM,KAAAA,GAAQ;AACNlB,YAAAA,aAAAA,EAAe,OAAOkB,KAAAA,EAAehB,OAAAA,GAAAA;gBACnC,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AACnG,gBAAA,MAAMC,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAEgB,oBAAAA,KAAAA;AAAOd,oBAAAA,aAAAA;AAAeD,oBAAAA;AAAiB,iBAAA;AACzE,gBAAA,OAAO,IAAI,CAACN,cAAc,CAACU,iBAAiB,CAA4B;oBACtEC,GAAAA,EAAK,6BAAA;oBACLC,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ,MAAA;AACRC,oBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,iBAAA,CAAA;AACF,YAAA,CAAA;AACAC,YAAAA,IAAAA,EAAM,OAAOK,KAAAA,EAAehB,OAAAA,GAAAA;AAC1B,gBAAA,MAAME,aAAAA,GAAgB,MAAM,IAAI,CAACZ,gBAAgB,EAAA;AACjD,gBAAA,MAAMc,WAAAA,GAAc;AAAE,oBAAA,GAAGJ,OAAO;AAAEgB,oBAAAA,KAAAA;AAAOd,oBAAAA;AAAc,iBAAA;AAEvD,gBAAA,MAAMU,aAAa,CAAC,CAAC,IAAI,CAAChB,oBAAoB,CAACiB,UAAU,EAAA;gBAEzD,MAAMC,QAAAA,GAAWF,aAAa,4BAAA,GAA+B,0BAAA;AAE7D,gBAAA,OAAO,IAAI,CAACjB,cAAc,CAACsB,QAAQ,CAAmB;oBACpDX,GAAAA,EAAKQ,QAAAA;oBACLP,IAAAA,EAAMH,WAAAA;oBACNI,MAAAA,EAAQ;AACV,iBAAA,CAAA;AACF,YAAA;AACF,SAAA;QAlHE,IAAI,CAACpB,YAAY,GAAG,IAAI,CAACQ,oBAAoB,CAACsB,iBAAiB,CAC7D,OAAOC,IAAAA,EAAcC,SAAAA,EAAmBpB,OAAAA,GAAAA;AACtCqB,YAAAA,aAAAA,CACE,0BAAA,EACA;AAAEF,gBAAAA,IAAAA;AAAM,gBAAA,GAAGnB;aAAQ,EACnB;gBACEmB,IAAAA,EAAM,QAAA;gBACNG,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEF,MAAM,EAAErB,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACR,gBAAgB,CAACS,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,WAAAA,GAAc;gBAClBmB,KAAAA,EAAOJ,IAAAA;AACPC,gBAAAA,SAAAA;AACAnB,gBAAAA,gBAAAA;AACAC,gBAAAA,aAAAA;AACA,gBAAA,GAAGF;AACL,aAAA;AACA,YAAA,MAAMwB,OAAO,MAAM,IAAI,CAAC7B,cAAc,CAACU,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,oBAAA;gBACLC,IAAAA,EAAMH,WAAAA;gBACNI,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACf,gBAAgB,CAACgB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOe,QAAAA,CAASD,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;AAEJ,IAAA;IAEA3B,GAAAA;IA4BAkB,QAAAA;IA4BAC,KAAAA;AA0BF;;;;"}
+{"version":3,"file":"HeadlessOTPClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessOTPClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService, IDFPProtectedAuthProvider, INetworkClient } from '..';\nimport {\n  IHeadlessOTPsClient,\n  OTPAuthenticateOptions,\n  OTPCodeEmailOptions,\n  OTPCodeOptions,\n  OTPCodeSMSOptions,\n  OTPsAuthenticateResponse,\n  OTPsLoginOrCreateResponse,\n  OTPsSendResponse,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { WithUser, omitUser } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\nexport class HeadlessOTPClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessOTPsClient<TProjectConfiguration>\n{\n  authenticate: (\n    code: string,\n    method_id: string,\n    options: OTPAuthenticateOptions,\n  ) => Promise<OTPsAuthenticateResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private executeRecaptcha: () => Promise<string | undefined> = () => Promise.resolve(undefined),\n    private dfpProtectedAuth: IDFPProtectedAuthProvider,\n  ) {\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (code: string, method_id: string, options: OTPAuthenticateOptions) => {\n        validateInDev(\n          'stytch.otps.authenticate',\n          { code, ...options },\n          {\n            code: 'string',\n            session_duration_minutes: 'number',\n          },\n        );\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const requestBody = {\n          token: code,\n          method_id,\n          dfp_telemetry_id,\n          captcha_token,\n          ...options,\n        };\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<OTPsAuthenticateResponse<TProjectConfiguration>>\n        >({\n          url: '/otps/authenticate',\n          body: requestBody,\n          method: 'POST',\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n  }\n\n  sms = {\n    loginOrCreate: async (phone_number: string, options: OTPCodeSMSOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/sms/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (phone_number: string, options: OTPCodeSMSOptions): Promise<OTPsSendResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/sms/send/secondary' : '/otps/sms/send/primary';\n\n      return this._networkClient.retriableFetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n  };\n\n  whatsapp = {\n    loginOrCreate: async (phone_number: string, options: OTPCodeOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, dfp_telemetry_id, captcha_token };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/whatsapp/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (phone_number: string, options: OTPCodeOptions): Promise<OTPsSendResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, phone_number, captcha_token, dfp_telemetry_id };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/whatsapp/send/secondary' : '/otps/whatsapp/send/primary';\n\n      return this._networkClient.retriableFetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n  };\n\n  email = {\n    loginOrCreate: async (email: string, options: OTPCodeEmailOptions): Promise<OTPsLoginOrCreateResponse> => {\n      const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n      const requestBody = { ...options, email, captcha_token, dfp_telemetry_id };\n      return this._networkClient.retriableFetchSDK<OTPsLoginOrCreateResponse>({\n        url: '/otps/email/login_or_create',\n        body: requestBody,\n        method: 'POST',\n        retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n      });\n    },\n    send: async (email: string, options: OTPCodeEmailOptions): Promise<OTPsSendResponse> => {\n      const captcha_token = await this.executeRecaptcha();\n      const requestBody = { ...options, email, captcha_token };\n\n      const isLoggedIn = !!this._subscriptionService.getSession();\n\n      const endpoint = isLoggedIn ? '/otps/email/send/secondary' : '/otps/email/send/primary';\n\n      return this._networkClient.fetchSDK<OTPsSendResponse>({\n        url: endpoint,\n        body: requestBody,\n        method: 'POST',\n      });\n    },\n  };\n}\n"],"names":["HeadlessOTPClient","authenticate","executeRecaptcha","Promise","resolve","undefined","dfpProtectedAuth","_networkClient","_subscriptionService","withUpdateSession","code","method_id","options","validateInDev","session_duration_minutes","dfp_telemetry_id","captcha_token","getDFPTelemetryIDAndCaptcha","requestBody","token","resp","retriableFetchSDK","url","body","method","retryCallback","retryWithCaptchaAndDFP","omitUser","sms","loginOrCreate","phone_number","send","isLoggedIn","getSession","endpoint","whatsapp","email","fetchSDK"],"mappings":";;;AAeO,MAAMA,iBAAAA,CAAAA;;;;;IAGXC,YAAAA;AAMA,IAAA,WAAA,CACE,cAAsC,EACtC,oBAAiF,EACjF,gBAAQC,GAAsD,IAAMC,OAAAA,CAAQC,OAAO,CAACC,SAAAA,CAAU,EACtFC,gBAA2C,CACnD;aAJQC,cAAAA,GAAAA,cAAAA;aACAC,oBAAAA,GAAAA,oBAAAA;aACAN,gBAAAA,GAAAA,gBAAAA;aACAI,gBAAAA,GAAAA,gBAAAA;QAER,IAAI,CAACL,YAAY,GAAG,IAAI,CAACO,oBAAoB,CAACC,iBAAiB,CAC7D,OAAOC,IAAAA,EAAcC,SAAAA,EAAmBC,OAAAA,GAAAA;AACtCC,YAAAA,aAAAA,CACE,0BAAA,EACA;AAAEH,gBAAAA,IAAAA;AAAM,gBAAA,GAAGE;aAAQ,EACnB;gBACEF,IAAAA,EAAM,QAAA;gBACNI,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEF,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,WAAAA,GAAc;gBAClBC,KAAAA,EAAOT,IAAAA;AACPC,gBAAAA,SAAAA;AACAI,gBAAAA,gBAAAA;AACAC,gBAAAA,aAAAA;AACA,gBAAA,GAAGJ;AACL,aAAA;AACA,YAAA,MAAMQ,OAAO,MAAM,IAAI,CAACb,cAAc,CAACc,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,oBAAA;gBACLC,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;AAEJ,IAAA;IAEAQ,GAAAA,GAAM;AACJC,QAAAA,aAAAA,EAAe,OAAOC,YAAAA,EAAsBlB,OAAAA,GAAAA;YAC1C,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AACnG,YAAA,MAAMC,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEkB,gBAAAA,YAAAA;AAAcd,gBAAAA,aAAAA;AAAeD,gBAAAA;AAAiB,aAAA;AAChF,YAAA,OAAO,IAAI,CAACR,cAAc,CAACc,iBAAiB,CAA4B;gBACtEC,GAAAA,EAAK,2BAAA;gBACLC,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AACF,QAAA,CAAA;AACAK,QAAAA,IAAAA,EAAM,OAAOD,YAAAA,EAAsBlB,OAAAA,GAAAA;YACjC,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AACnG,YAAA,MAAMC,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEkB,gBAAAA,YAAAA;AAAcd,gBAAAA,aAAAA;AAAeD,gBAAAA;AAAiB,aAAA;AAEhF,YAAA,MAAMiB,aAAa,CAAC,CAAC,IAAI,CAACxB,oBAAoB,CAACyB,UAAU,EAAA;YAEzD,MAAMC,QAAAA,GAAWF,aAAa,0BAAA,GAA6B,wBAAA;AAE3D,YAAA,OAAO,IAAI,CAACzB,cAAc,CAACc,iBAAiB,CAAmB;gBAC7DC,GAAAA,EAAKY,QAAAA;gBACLX,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AACF,QAAA;KACF;IAEAS,QAAAA,GAAW;AACTN,QAAAA,aAAAA,EAAe,OAAOC,YAAAA,EAAsBlB,OAAAA,GAAAA;YAC1C,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AACnG,YAAA,MAAMC,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEkB,gBAAAA,YAAAA;AAAcf,gBAAAA,gBAAAA;AAAkBC,gBAAAA;AAAc,aAAA;AAChF,YAAA,OAAO,IAAI,CAACT,cAAc,CAACc,iBAAiB,CAA4B;gBACtEC,GAAAA,EAAK,gCAAA;gBACLC,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AACF,QAAA,CAAA;AACAK,QAAAA,IAAAA,EAAM,OAAOD,YAAAA,EAAsBlB,OAAAA,GAAAA;YACjC,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AACnG,YAAA,MAAMC,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEkB,gBAAAA,YAAAA;AAAcd,gBAAAA,aAAAA;AAAeD,gBAAAA;AAAiB,aAAA;AAEhF,YAAA,MAAMiB,aAAa,CAAC,CAAC,IAAI,CAACxB,oBAAoB,CAACyB,UAAU,EAAA;YAEzD,MAAMC,QAAAA,GAAWF,aAAa,+BAAA,GAAkC,6BAAA;AAEhE,YAAA,OAAO,IAAI,CAACzB,cAAc,CAACc,iBAAiB,CAAmB;gBAC7DC,GAAAA,EAAKY,QAAAA;gBACLX,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AACF,QAAA;KACF;IAEAU,KAAAA,GAAQ;AACNP,QAAAA,aAAAA,EAAe,OAAOO,KAAAA,EAAexB,OAAAA,GAAAA;YACnC,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACV,gBAAgB,CAACW,2BAA2B,EAAA;AACnG,YAAA,MAAMC,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEwB,gBAAAA,KAAAA;AAAOpB,gBAAAA,aAAAA;AAAeD,gBAAAA;AAAiB,aAAA;AACzE,YAAA,OAAO,IAAI,CAACR,cAAc,CAACc,iBAAiB,CAA4B;gBACtEC,GAAAA,EAAK,6BAAA;gBACLC,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ,MAAA;AACRC,gBAAAA,aAAAA,EAAe,IAAI,CAACnB,gBAAgB,CAACoB;AACvC,aAAA,CAAA;AACF,QAAA,CAAA;AACAK,QAAAA,IAAAA,EAAM,OAAOK,KAAAA,EAAexB,OAAAA,GAAAA;AAC1B,YAAA,MAAMI,aAAAA,GAAgB,MAAM,IAAI,CAACd,gBAAgB,EAAA;AACjD,YAAA,MAAMgB,WAAAA,GAAc;AAAE,gBAAA,GAAGN,OAAO;AAAEwB,gBAAAA,KAAAA;AAAOpB,gBAAAA;AAAc,aAAA;AAEvD,YAAA,MAAMgB,aAAa,CAAC,CAAC,IAAI,CAACxB,oBAAoB,CAACyB,UAAU,EAAA;YAEzD,MAAMC,QAAAA,GAAWF,aAAa,4BAAA,GAA+B,0BAAA;AAE7D,YAAA,OAAO,IAAI,CAACzB,cAAc,CAAC8B,QAAQ,CAAmB;gBACpDf,GAAAA,EAAKY,QAAAA;gBACLX,IAAAA,EAAML,WAAAA;gBACNM,MAAAA,EAAQ;AACV,aAAA,CAAA;AACF,QAAA;KACF;AACF;;;;"}

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessPasswordClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"HeadlessPasswordClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessPasswordClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService } from '..';\nimport { IDFPProtectedAuthProvider } from '../DFPProtectedAuthProvider';\nimport { INetworkClient } from '../NetworkClient';\nimport { IPKCEManager } from '../PKCEManager';\nimport {\n  IHeadlessPasswordClient,\n  PasswordAuthenticateOptions,\n  PasswordAuthenticateResponse,\n  PasswordCreateOptions,\n  PasswordCreateResponse,\n  PasswordResetByEmailOptions,\n  PasswordResetByEmailResponse,\n  PasswordResetByEmailStartOptions,\n  PasswordResetByEmailStartResponse,\n  PasswordResetByExistingPasswordOptions,\n  PasswordResetByExistingPasswordResponse,\n  PasswordResetBySessionOptions,\n  PasswordResetBySessionResponse,\n  PasswordStrengthCheckOptions,\n  PasswordStrengthCheckResponse,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { omitUser, WithUser } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\ntype DynamicConfig = Promise<{\n  pkceRequiredForPasswordResets: boolean;\n}>;\n\nconst DefaultDynamicConfig = Promise.resolve({\n  pkceRequiredForPasswordResets: false,\n});\n\nexport class HeadlessPasswordClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessPasswordClient<TProjectConfiguration>\n{\n  create: (options: PasswordCreateOptions) => Promise<PasswordCreateResponse<TProjectConfiguration>>;\n\n  authenticate: (options: PasswordAuthenticateOptions) => Promise<PasswordAuthenticateResponse<TProjectConfiguration>>;\n\n  resetByEmail: (options: PasswordResetByEmailOptions) => Promise<PasswordResetByEmailResponse<TProjectConfiguration>>;\n\n  resetByExistingPassword: (\n    options: PasswordResetByExistingPasswordOptions,\n  ) => Promise<PasswordResetByExistingPasswordResponse<TProjectConfiguration>>;\n\n  resetBySession: (\n    options: PasswordResetBySessionOptions,\n  ) => Promise<PasswordResetBySessionResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private _pkceManager: IPKCEManager,\n    private _config: DynamicConfig = DefaultDynamicConfig,\n    private dfpProtectedAuth: IDFPProtectedAuthProvider,\n  ) {\n    this.create = this._subscriptionService.withUpdateSession(\n      async (options: PasswordCreateOptions): Promise<PasswordCreateResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.create', options, {\n          password: 'string',\n          email: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordCreateResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords',\n          method: 'POST',\n          body: {\n            email: options.email,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (options: PasswordAuthenticateOptions): Promise<PasswordAuthenticateResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.authenticate', options, {\n          password: 'string',\n          email: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordAuthenticateResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/authenticate',\n          method: 'POST',\n          body: {\n            email: options.email,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetByEmail = this._subscriptionService.withUpdateSession(\n      async (options: PasswordResetByEmailOptions): Promise<PasswordResetByEmailResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetByEmail', options, {\n          token: 'string',\n          password: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n        const pkPair = await this._pkceManager.getPKPair();\n        const code_verifier = pkPair?.code_verifier;\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordResetByEmailResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/email/reset',\n          method: 'POST',\n          body: {\n            token: options.token,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            code_verifier,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        this._pkceManager.clearPKPair();\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetByExistingPassword = this._subscriptionService.withUpdateSession(\n      async (\n        options: PasswordResetByExistingPasswordOptions,\n      ): Promise<PasswordResetByExistingPasswordResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetByExistingPassword', options, {\n          email: 'string',\n          existing_password: 'string',\n          new_password: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordResetByExistingPasswordResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/existing_password/reset',\n          method: 'POST',\n          body: {\n            email: options.email,\n            existing_password: options.existing_password,\n            new_password: options.new_password,\n            session_duration_minutes: options.session_duration_minutes,\n            dfp_telemetry_id,\n            captcha_token,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetBySession = this._subscriptionService.withUpdateSession(\n      async (\n        options: PasswordResetBySessionOptions,\n      ): Promise<PasswordResetBySessionResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetBySession', options, {\n          password: 'string',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        return this._networkClient.retriableFetchSDK<PasswordResetBySessionResponse<TProjectConfiguration>>({\n          url: '/passwords/session/reset',\n          method: 'POST',\n          body: {\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            dfp_telemetry_id,\n            captcha_token,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n      },\n    );\n  }\n\n  private async getCodeChallenge(): Promise<string | undefined> {\n    const { pkceRequiredForPasswordResets } = await this._config;\n    if (!pkceRequiredForPasswordResets) {\n      return undefined;\n    }\n    let keyPair = await this._pkceManager.getPKPair();\n    if (keyPair) {\n      return keyPair.code_challenge;\n    }\n    keyPair = await this._pkceManager.startPKCETransaction();\n    return keyPair.code_challenge;\n  }\n\n  async resetByEmailStart(options: PasswordResetByEmailStartOptions): Promise<PasswordResetByEmailStartResponse> {\n    validateInDev('stytch.passwords.resetByEmailStart', options, {\n      email: 'string',\n      login_redirect_url: 'optionalString',\n      reset_password_redirect_url: 'optionalString',\n      reset_password_template_id: 'optionalString',\n      reset_password_expiration_minutes: 'optionalNumber',\n      locale: 'optionalString',\n    });\n\n    const code_challenge = await this.getCodeChallenge();\n    const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n    return this._networkClient.retriableFetchSDK<PasswordResetByEmailStartResponse>({\n      url: '/passwords/email/reset/start',\n      method: 'POST',\n      body: {\n        email: options.email,\n        login_redirect_url: options.login_redirect_url,\n        reset_password_redirect_url: options.reset_password_redirect_url,\n        reset_password_expiration_minutes: options.reset_password_expiration_minutes,\n        reset_password_template_id: options.reset_password_template_id,\n        locale: options.locale,\n        code_challenge,\n        captcha_token,\n        dfp_telemetry_id,\n      },\n      retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n    });\n  }\n\n  async strengthCheck(options: PasswordStrengthCheckOptions): Promise<PasswordStrengthCheckResponse> {\n    validateInDev('stytch.passwords.strengthCheck', options, {\n      email: 'optionalString',\n      password: 'string',\n    });\n\n    return this._networkClient.fetchSDK<PasswordStrengthCheckResponse>({\n      url: '/passwords/strength_check',\n      method: 'POST',\n      body: {\n        email: options.email,\n        password: options.password,\n      },\n    });\n  }\n}\n"],"names":["DefaultDynamicConfig","Promise","resolve","pkceRequiredForPasswordResets","HeadlessPasswordClient","create","authenticate","resetByEmail","resetByExistingPassword","resetBySession","constructor","_subscriptionService","_pkceManager","_config","dfpProtectedAuth","_networkClient","withUpdateSession","options","validateInDev","password","email","session_duration_minutes","dfp_telemetry_id","captcha_token","getDFPTelemetryIDAndCaptcha","resp","retriableFetchSDK","url","method","body","retryCallback","retryWithCaptchaAndDFP","omitUser","token","pkPair","getPKPair","code_verifier","clearPKPair","existing_password","new_password","getCodeChallenge","undefined","keyPair","code_challenge","startPKCETransaction","resetByEmailStart","login_redirect_url","reset_password_redirect_url","reset_password_template_id","reset_password_expiration_minutes","locale","strengthCheck","fetchSDK"],"mappings":";;;AA6BA,MAAMA,oBAAAA,GAAuBC,OAAAA,CAAQC,OAAO,CAAC;IAC3CC,6BAAAA,EAA+B;AACjC,CAAA,CAAA;AAEO,MAAMC,sBAAAA,CAAAA;;;;;;IAGXC,MAAAA;IAEAC,YAAAA;IAEAC,YAAAA;IAEAC,uBAAAA;IAIAC,cAAAA;AAIAC,IAAAA,WAAAA,CACE,cAAsC,EAC9BC,oBAAyE,EACzEC,YAA0B,EAClC,OAAQC,GAAyBb,oBAAoB,EAC7Cc,gBAA2C,CACnD;aALQC,cAAAA,GAAAA,cAAAA;aACAJ,oBAAAA,GAAAA,oBAAAA;aACAC,YAAAA,GAAAA,YAAAA;aACAC,OAAAA,GAAAA,OAAAA;aACAC,gBAAAA,GAAAA,gBAAAA;QAER,IAAI,CAACT,MAAM,GAAG,IAAI,CAACM,oBAAoB,CAACK,iBAAiB,CACvD,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,2BAA2BD,OAAAA,EAAS;gBAChDE,QAAAA,EAAU,QAAA;gBACVC,KAAAA,EAAO,QAAA;gBACPC,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,YAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAD,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAACnB,YAAY,GAAG,IAAI,CAACK,oBAAoB,CAACK,iBAAiB,CAC7D,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,iCAAiCD,OAAAA,EAAS;gBACtDE,QAAAA,EAAU,QAAA;gBACVC,KAAAA,EAAO,QAAA;gBACPC,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,yBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAD,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAAClB,YAAY,GAAG,IAAI,CAACI,oBAAoB,CAACK,iBAAiB,CAC7D,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,iCAAiCD,OAAAA,EAAS;gBACtDgB,KAAAA,EAAO,QAAA;gBACPd,QAAAA,EAAU,QAAA;gBACVE,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AACnG,YAAA,MAAMU,SAAS,MAAM,IAAI,CAACtB,YAAY,CAACuB,SAAS,EAAA;AAChD,YAAA,MAAMC,gBAAgBF,MAAAA,EAAQE,aAAAA;AAE9B,YAAA,MAAMX,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,wBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJI,oBAAAA,KAAAA,EAAOhB,QAAQgB,KAAK;AACpBd,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAa,oBAAAA,aAAAA;AACAd,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;YAEA,IAAI,CAACnB,YAAY,CAACyB,WAAW,EAAA;AAE7B,YAAA,OAAOL,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAACjB,uBAAuB,GAAG,IAAI,CAACG,oBAAoB,CAACK,iBAAiB,CACxE,OACEC,OAAAA,GAAAA;AAEAC,YAAAA,aAAAA,CAAc,4CAA4CD,OAAAA,EAAS;gBACjEG,KAAAA,EAAO,QAAA;gBACPkB,iBAAAA,EAAmB,QAAA;gBACnBC,YAAAA,EAAc,QAAA;gBACdlB,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,oCAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBkB,oBAAAA,iBAAAA,EAAmBrB,QAAQqB,iBAAiB;AAC5CC,oBAAAA,YAAAA,EAActB,QAAQsB,YAAY;AAClClB,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DC,oBAAAA,gBAAAA;AACAC,oBAAAA;AACF,iBAAA;AACAO,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAAChB,cAAc,GAAG,IAAI,CAACE,oBAAoB,CAACK,iBAAiB,CAC/D,OACEC,OAAAA,GAAAA;AAEAC,YAAAA,aAAAA,CAAc,mCAAmCD,OAAAA,EAAS;gBACxDE,QAAAA,EAAU;AACZ,aAAA,CAAA;YAEA,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,OAAO,IAAI,CAACT,cAAc,CAACW,iBAAiB,CAAwD;gBAClGC,GAAAA,EAAK,0BAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJV,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DC,oBAAAA,gBAAAA;AACAC,oBAAAA;AACF,iBAAA;AACAO,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AAEJ,IAAA;AAEA,IAAA,MAAcS,gBAAAA,GAAgD;AAC5D,QAAA,MAAM,EAAErC,6BAA6B,EAAE,GAAG,MAAM,IAAI,CAACU,OAAO;AAC5D,QAAA,IAAI,CAACV,6BAAAA,EAA+B;YAClC,OAAOsC,SAAAA;AACT,QAAA;AACA,QAAA,IAAIC,UAAU,MAAM,IAAI,CAAC9B,YAAY,CAACuB,SAAS,EAAA;AAC/C,QAAA,IAAIO,OAAAA,EAAS;AACX,YAAA,OAAOA,QAAQC,cAAc;AAC/B,QAAA;AACAD,QAAAA,OAAAA,GAAU,MAAM,IAAI,CAAC9B,YAAY,CAACgC,oBAAoB,EAAA;AACtD,QAAA,OAAOF,QAAQC,cAAc;AAC/B,IAAA;IAEA,MAAME,iBAAAA,CAAkB5B,OAAyC,EAA8C;AAC7GC,QAAAA,aAAAA,CAAc,sCAAsCD,OAAAA,EAAS;YAC3DG,KAAAA,EAAO,QAAA;YACP0B,kBAAAA,EAAoB,gBAAA;YACpBC,2BAAAA,EAA6B,gBAAA;YAC7BC,0BAAAA,EAA4B,gBAAA;YAC5BC,iCAAAA,EAAmC,gBAAA;YACnCC,MAAAA,EAAQ;AACV,SAAA,CAAA;AAEA,QAAA,MAAMP,cAAAA,GAAiB,MAAM,IAAI,CAACH,gBAAgB,EAAA;QAClD,MAAM,EAAElB,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,QAAA,OAAO,IAAI,CAACT,cAAc,CAACW,iBAAiB,CAAoC;YAC9EC,GAAAA,EAAK,8BAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AACJT,gBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpB0B,gBAAAA,kBAAAA,EAAoB7B,QAAQ6B,kBAAkB;AAC9CC,gBAAAA,2BAAAA,EAA6B9B,QAAQ8B,2BAA2B;AAChEE,gBAAAA,iCAAAA,EAAmChC,QAAQgC,iCAAiC;AAC5ED,gBAAAA,0BAAAA,EAA4B/B,QAAQ+B,0BAA0B;AAC9DE,gBAAAA,MAAAA,EAAQjC,QAAQiC,MAAM;AACtBP,gBAAAA,cAAAA;AACApB,gBAAAA,aAAAA;AACAD,gBAAAA;AACF,aAAA;AACAQ,YAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,SAAA,CAAA;AACF,IAAA;IAEA,MAAMoB,aAAAA,CAAclC,OAAqC,EAA0C;AACjGC,QAAAA,aAAAA,CAAc,kCAAkCD,OAAAA,EAAS;YACvDG,KAAAA,EAAO,gBAAA;YACPD,QAAAA,EAAU;AACZ,SAAA,CAAA;AAEA,QAAA,OAAO,IAAI,CAACJ,cAAc,CAACqC,QAAQ,CAAgC;YACjEzB,GAAAA,EAAK,2BAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AACJT,gBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,gBAAAA,QAAAA,EAAUF,QAAQE;AACpB;AACF,SAAA,CAAA;AACF,IAAA;AACF;;;;"}
+{"version":3,"file":"HeadlessPasswordClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessPasswordClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService } from '..';\nimport { IDFPProtectedAuthProvider } from '../DFPProtectedAuthProvider';\nimport { INetworkClient } from '../NetworkClient';\nimport { IPKCEManager } from '../PKCEManager';\nimport {\n  IHeadlessPasswordClient,\n  PasswordAuthenticateOptions,\n  PasswordAuthenticateResponse,\n  PasswordCreateOptions,\n  PasswordCreateResponse,\n  PasswordResetByEmailOptions,\n  PasswordResetByEmailResponse,\n  PasswordResetByEmailStartOptions,\n  PasswordResetByEmailStartResponse,\n  PasswordResetByExistingPasswordOptions,\n  PasswordResetByExistingPasswordResponse,\n  PasswordResetBySessionOptions,\n  PasswordResetBySessionResponse,\n  PasswordStrengthCheckOptions,\n  PasswordStrengthCheckResponse,\n  StytchProjectConfigurationInput,\n} from '../public';\nimport { omitUser, WithUser } from '../utils';\nimport { validateInDev } from '../utils/dev';\n\ntype DynamicConfig = Promise<{\n  pkceRequiredForPasswordResets: boolean;\n}>;\n\nconst DefaultDynamicConfig = Promise.resolve({\n  pkceRequiredForPasswordResets: false,\n});\n\nexport class HeadlessPasswordClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessPasswordClient<TProjectConfiguration>\n{\n  create: (options: PasswordCreateOptions) => Promise<PasswordCreateResponse<TProjectConfiguration>>;\n\n  authenticate: (options: PasswordAuthenticateOptions) => Promise<PasswordAuthenticateResponse<TProjectConfiguration>>;\n\n  resetByEmail: (options: PasswordResetByEmailOptions) => Promise<PasswordResetByEmailResponse<TProjectConfiguration>>;\n\n  resetByExistingPassword: (\n    options: PasswordResetByExistingPasswordOptions,\n  ) => Promise<PasswordResetByExistingPasswordResponse<TProjectConfiguration>>;\n\n  resetBySession: (\n    options: PasswordResetBySessionOptions,\n  ) => Promise<PasswordResetBySessionResponse<TProjectConfiguration>>;\n\n  constructor(\n    private _networkClient: INetworkClient,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n    private _pkceManager: IPKCEManager,\n    private _config: DynamicConfig = DefaultDynamicConfig,\n    private dfpProtectedAuth: IDFPProtectedAuthProvider,\n  ) {\n    this.create = this._subscriptionService.withUpdateSession(\n      async (options: PasswordCreateOptions): Promise<PasswordCreateResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.create', options, {\n          password: 'string',\n          email: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordCreateResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords',\n          method: 'POST',\n          body: {\n            email: options.email,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.authenticate = this._subscriptionService.withUpdateSession(\n      async (options: PasswordAuthenticateOptions): Promise<PasswordAuthenticateResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.authenticate', options, {\n          password: 'string',\n          email: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordAuthenticateResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/authenticate',\n          method: 'POST',\n          body: {\n            email: options.email,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetByEmail = this._subscriptionService.withUpdateSession(\n      async (options: PasswordResetByEmailOptions): Promise<PasswordResetByEmailResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetByEmail', options, {\n          token: 'string',\n          password: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n        const pkPair = await this._pkceManager.getPKPair();\n        const code_verifier = pkPair?.code_verifier;\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordResetByEmailResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/email/reset',\n          method: 'POST',\n          body: {\n            token: options.token,\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            captcha_token,\n            code_verifier,\n            dfp_telemetry_id,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        this._pkceManager.clearPKPair();\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetByExistingPassword = this._subscriptionService.withUpdateSession(\n      async (\n        options: PasswordResetByExistingPasswordOptions,\n      ): Promise<PasswordResetByExistingPasswordResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetByExistingPassword', options, {\n          email: 'string',\n          existing_password: 'string',\n          new_password: 'string',\n          session_duration_minutes: 'number',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        const resp = await this._networkClient.retriableFetchSDK<\n          WithUser<PasswordResetByExistingPasswordResponse<TProjectConfiguration>>\n        >({\n          url: '/passwords/existing_password/reset',\n          method: 'POST',\n          body: {\n            email: options.email,\n            existing_password: options.existing_password,\n            new_password: options.new_password,\n            session_duration_minutes: options.session_duration_minutes,\n            dfp_telemetry_id,\n            captcha_token,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n\n        return omitUser(resp);\n      },\n    );\n\n    this.resetBySession = this._subscriptionService.withUpdateSession(\n      async (\n        options: PasswordResetBySessionOptions,\n      ): Promise<PasswordResetBySessionResponse<TProjectConfiguration>> => {\n        validateInDev('stytch.passwords.resetBySession', options, {\n          password: 'string',\n        });\n\n        const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n        return this._networkClient.retriableFetchSDK<PasswordResetBySessionResponse<TProjectConfiguration>>({\n          url: '/passwords/session/reset',\n          method: 'POST',\n          body: {\n            password: options.password,\n            session_duration_minutes: options.session_duration_minutes,\n            dfp_telemetry_id,\n            captcha_token,\n          },\n          retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n        });\n      },\n    );\n  }\n\n  private async getCodeChallenge(): Promise<string | undefined> {\n    const { pkceRequiredForPasswordResets } = await this._config;\n    if (!pkceRequiredForPasswordResets) {\n      return undefined;\n    }\n    let keyPair = await this._pkceManager.getPKPair();\n    if (keyPair) {\n      return keyPair.code_challenge;\n    }\n    keyPair = await this._pkceManager.startPKCETransaction();\n    return keyPair.code_challenge;\n  }\n\n  async resetByEmailStart(options: PasswordResetByEmailStartOptions): Promise<PasswordResetByEmailStartResponse> {\n    validateInDev('stytch.passwords.resetByEmailStart', options, {\n      email: 'string',\n      login_redirect_url: 'optionalString',\n      reset_password_redirect_url: 'optionalString',\n      reset_password_template_id: 'optionalString',\n      reset_password_expiration_minutes: 'optionalNumber',\n      locale: 'optionalString',\n    });\n\n    const code_challenge = await this.getCodeChallenge();\n    const { dfp_telemetry_id, captcha_token } = await this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();\n\n    return this._networkClient.retriableFetchSDK<PasswordResetByEmailStartResponse>({\n      url: '/passwords/email/reset/start',\n      method: 'POST',\n      body: {\n        email: options.email,\n        login_redirect_url: options.login_redirect_url,\n        reset_password_redirect_url: options.reset_password_redirect_url,\n        reset_password_expiration_minutes: options.reset_password_expiration_minutes,\n        reset_password_template_id: options.reset_password_template_id,\n        locale: options.locale,\n        code_challenge,\n        captcha_token,\n        dfp_telemetry_id,\n      },\n      retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP,\n    });\n  }\n\n  async strengthCheck(options: PasswordStrengthCheckOptions): Promise<PasswordStrengthCheckResponse> {\n    validateInDev('stytch.passwords.strengthCheck', options, {\n      email: 'optionalString',\n      password: 'string',\n    });\n\n    return this._networkClient.fetchSDK<PasswordStrengthCheckResponse>({\n      url: '/passwords/strength_check',\n      method: 'POST',\n      body: {\n        email: options.email,\n        password: options.password,\n      },\n    });\n  }\n}\n"],"names":["DefaultDynamicConfig","Promise","resolve","pkceRequiredForPasswordResets","HeadlessPasswordClient","create","authenticate","resetByEmail","resetByExistingPassword","resetBySession","_subscriptionService","_pkceManager","_config","dfpProtectedAuth","_networkClient","withUpdateSession","options","validateInDev","password","email","session_duration_minutes","dfp_telemetry_id","captcha_token","getDFPTelemetryIDAndCaptcha","resp","retriableFetchSDK","url","method","body","retryCallback","retryWithCaptchaAndDFP","omitUser","token","pkPair","getPKPair","code_verifier","clearPKPair","existing_password","new_password","getCodeChallenge","undefined","keyPair","code_challenge","startPKCETransaction","resetByEmailStart","login_redirect_url","reset_password_redirect_url","reset_password_template_id","reset_password_expiration_minutes","locale","strengthCheck","fetchSDK"],"mappings":";;;AA6BA,MAAMA,oBAAAA,GAAuBC,OAAAA,CAAQC,OAAO,CAAC;IAC3CC,6BAAAA,EAA+B;AACjC,CAAA,CAAA;AAEO,MAAMC,sBAAAA,CAAAA;;;;;;IAGXC,MAAAA;IAEAC,YAAAA;IAEAC,YAAAA;IAEAC,uBAAAA;IAIAC,cAAAA;AAIA,IAAA,WAAA,CACE,cAAsC,EAC9BC,oBAAyE,EACzEC,YAA0B,EAClC,OAAQC,GAAyBZ,oBAAoB,EAC7Ca,gBAA2C,CACnD;aALQC,cAAAA,GAAAA,cAAAA;aACAJ,oBAAAA,GAAAA,oBAAAA;aACAC,YAAAA,GAAAA,YAAAA;aACAC,OAAAA,GAAAA,OAAAA;aACAC,gBAAAA,GAAAA,gBAAAA;QAER,IAAI,CAACR,MAAM,GAAG,IAAI,CAACK,oBAAoB,CAACK,iBAAiB,CACvD,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,2BAA2BD,OAAAA,EAAS;gBAChDE,QAAAA,EAAU,QAAA;gBACVC,KAAAA,EAAO,QAAA;gBACPC,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,YAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAD,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAAClB,YAAY,GAAG,IAAI,CAACI,oBAAoB,CAACK,iBAAiB,CAC7D,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,iCAAiCD,OAAAA,EAAS;gBACtDE,QAAAA,EAAU,QAAA;gBACVC,KAAAA,EAAO,QAAA;gBACPC,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,yBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAD,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAACjB,YAAY,GAAG,IAAI,CAACG,oBAAoB,CAACK,iBAAiB,CAC7D,OAAOC,OAAAA,GAAAA;AACLC,YAAAA,aAAAA,CAAc,iCAAiCD,OAAAA,EAAS;gBACtDgB,KAAAA,EAAO,QAAA;gBACPd,QAAAA,EAAU,QAAA;gBACVE,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AACnG,YAAA,MAAMU,SAAS,MAAM,IAAI,CAACtB,YAAY,CAACuB,SAAS,EAAA;AAChD,YAAA,MAAMC,gBAAgBF,MAAAA,EAAQE,aAAAA;AAE9B,YAAA,MAAMX,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,wBAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJI,oBAAAA,KAAAA,EAAOhB,QAAQgB,KAAK;AACpBd,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DE,oBAAAA,aAAAA;AACAa,oBAAAA,aAAAA;AACAd,oBAAAA;AACF,iBAAA;AACAQ,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;YAEA,IAAI,CAACnB,YAAY,CAACyB,WAAW,EAAA;AAE7B,YAAA,OAAOL,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAAChB,uBAAuB,GAAG,IAAI,CAACE,oBAAoB,CAACK,iBAAiB,CACxE,OACEC,OAAAA,GAAAA;AAEAC,YAAAA,aAAAA,CAAc,4CAA4CD,OAAAA,EAAS;gBACjEG,KAAAA,EAAO,QAAA;gBACPkB,iBAAAA,EAAmB,QAAA;gBACnBC,YAAAA,EAAc,QAAA;gBACdlB,wBAAAA,EAA0B;AAC5B,aAAA,CAAA;YAEA,MAAM,EAAEC,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,MAAMC,OAAO,MAAM,IAAI,CAACV,cAAc,CAACW,iBAAiB,CAEtD;gBACAC,GAAAA,EAAK,oCAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJT,oBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBkB,oBAAAA,iBAAAA,EAAmBrB,QAAQqB,iBAAiB;AAC5CC,oBAAAA,YAAAA,EAActB,QAAQsB,YAAY;AAClClB,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DC,oBAAAA,gBAAAA;AACAC,oBAAAA;AACF,iBAAA;AACAO,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AAEA,YAAA,OAAOC,QAAAA,CAASP,IAAAA,CAAAA;AAClB,QAAA,CAAA,CAAA;QAGF,IAAI,CAACf,cAAc,GAAG,IAAI,CAACC,oBAAoB,CAACK,iBAAiB,CAC/D,OACEC,OAAAA,GAAAA;AAEAC,YAAAA,aAAAA,CAAc,mCAAmCD,OAAAA,EAAS;gBACxDE,QAAAA,EAAU;AACZ,aAAA,CAAA;YAEA,MAAM,EAAEG,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,YAAA,OAAO,IAAI,CAACT,cAAc,CAACW,iBAAiB,CAAwD;gBAClGC,GAAAA,EAAK,0BAAA;gBACLC,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAM;AACJV,oBAAAA,QAAAA,EAAUF,QAAQE,QAAQ;AAC1BE,oBAAAA,wBAAAA,EAA0BJ,QAAQI,wBAAwB;AAC1DC,oBAAAA,gBAAAA;AACAC,oBAAAA;AACF,iBAAA;AACAO,gBAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AAEJ,IAAA;AAEA,IAAA,MAAcS,gBAAAA,GAAgD;AAC5D,QAAA,MAAM,EAAEpC,6BAA6B,EAAE,GAAG,MAAM,IAAI,CAACS,OAAO;AAC5D,QAAA,IAAI,CAACT,6BAAAA,EAA+B;YAClC,OAAOqC,SAAAA;AACT,QAAA;AACA,QAAA,IAAIC,UAAU,MAAM,IAAI,CAAC9B,YAAY,CAACuB,SAAS,EAAA;AAC/C,QAAA,IAAIO,OAAAA,EAAS;AACX,YAAA,OAAOA,QAAQC,cAAc;AAC/B,QAAA;AACAD,QAAAA,OAAAA,GAAU,MAAM,IAAI,CAAC9B,YAAY,CAACgC,oBAAoB,EAAA;AACtD,QAAA,OAAOF,QAAQC,cAAc;AAC/B,IAAA;IAEA,MAAME,iBAAAA,CAAkB5B,OAAyC,EAA8C;AAC7GC,QAAAA,aAAAA,CAAc,sCAAsCD,OAAAA,EAAS;YAC3DG,KAAAA,EAAO,QAAA;YACP0B,kBAAAA,EAAoB,gBAAA;YACpBC,2BAAAA,EAA6B,gBAAA;YAC7BC,0BAAAA,EAA4B,gBAAA;YAC5BC,iCAAAA,EAAmC,gBAAA;YACnCC,MAAAA,EAAQ;AACV,SAAA,CAAA;AAEA,QAAA,MAAMP,cAAAA,GAAiB,MAAM,IAAI,CAACH,gBAAgB,EAAA;QAClD,MAAM,EAAElB,gBAAgB,EAAEC,aAAa,EAAE,GAAG,MAAM,IAAI,CAACT,gBAAgB,CAACU,2BAA2B,EAAA;AAEnG,QAAA,OAAO,IAAI,CAACT,cAAc,CAACW,iBAAiB,CAAoC;YAC9EC,GAAAA,EAAK,8BAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AACJT,gBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpB0B,gBAAAA,kBAAAA,EAAoB7B,QAAQ6B,kBAAkB;AAC9CC,gBAAAA,2BAAAA,EAA6B9B,QAAQ8B,2BAA2B;AAChEE,gBAAAA,iCAAAA,EAAmChC,QAAQgC,iCAAiC;AAC5ED,gBAAAA,0BAAAA,EAA4B/B,QAAQ+B,0BAA0B;AAC9DE,gBAAAA,MAAAA,EAAQjC,QAAQiC,MAAM;AACtBP,gBAAAA,cAAAA;AACApB,gBAAAA,aAAAA;AACAD,gBAAAA;AACF,aAAA;AACAQ,YAAAA,aAAAA,EAAe,IAAI,CAAChB,gBAAgB,CAACiB;AACvC,SAAA,CAAA;AACF,IAAA;IAEA,MAAMoB,aAAAA,CAAclC,OAAqC,EAA0C;AACjGC,QAAAA,aAAAA,CAAc,kCAAkCD,OAAAA,EAAS;YACvDG,KAAAA,EAAO,gBAAA;YACPD,QAAAA,EAAU;AACZ,SAAA,CAAA;AAEA,QAAA,OAAO,IAAI,CAACJ,cAAc,CAACqC,QAAQ,CAAgC;YACjEzB,GAAAA,EAAK,2BAAA;YACLC,MAAAA,EAAQ,MAAA;YACRC,IAAAA,EAAM;AACJT,gBAAAA,KAAAA,EAAOH,QAAQG,KAAK;AACpBD,gBAAAA,QAAAA,EAAUF,QAAQE;AACpB;AACF,SAAA,CAAA;AACF,IAAA;AACF;;;;"}

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessRBACClient.mjs

@@ -7,12 +7,6 @@ class HeadlessRBACClient {
     policyPromise;
     constructor(cachedConfig, dynamicConfig, _subscriptionService){
         this._subscriptionService = _subscriptionService;
-        this.isAuthorizedSync = (resourceId, action)=>{
-            return !!this.cachedPolicy?.callerIsAuthorized(this.roleIds(), resourceId, action);
-        };
-        this.isAuthorized = (resourceId, action)=>{
-            return this.policyPromise.then((policy)=>policy.callerIsAuthorized(this.roleIds(), resourceId, action));
-        };
         this.cachedPolicy = cachedConfig.rbacPolicy ? RBACPolicy.fromJSON(cachedConfig.rbacPolicy) : null;
         this.policyPromise = dynamicConfig.then((data)=>{
             if (!data.rbacPolicy) {
@@ -27,8 +21,12 @@ class HeadlessRBACClient {
     allPermissions() {
         return this.policyPromise.then((policy)=>policy.allPermissionsForCaller(this.roleIds()));
     }
-    isAuthorizedSync;
-    isAuthorized;
+    isAuthorizedSync = (resourceId, action)=>{
+        return !!this.cachedPolicy?.callerIsAuthorized(this.roleIds(), resourceId, action);
+    };
+    isAuthorized = (resourceId, action)=>{
+        return this.policyPromise.then((policy)=>policy.callerIsAuthorized(this.roleIds(), resourceId, action));
+    };
     roleIds() {
         const user = this._subscriptionService.getUser();
         if (!user) {

package/dist/esm-dev/packages/core/src/HeadlessClients/HeadlessRBACClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"HeadlessRBACClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessRBACClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService } from '../SubscriptionService';\nimport { logger } from '../utils';\nimport { RBACPolicy, RBACPolicyRaw } from '../rbac';\nimport { IHeadlessRBACClient, ConsumerPermissionsMap } from '../public/rbac';\nimport { StytchProjectConfigurationInput } from '../public/typeConfig';\n\ntype CachedConfig = {\n  rbacPolicy: RBACPolicyRaw | null;\n};\n\ntype DynamicConfig = Promise<CachedConfig>;\n\nexport class HeadlessRBACClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessRBACClient\n{\n  private cachedPolicy: RBACPolicy | null;\n  private policyPromise: Promise<RBACPolicy>;\n  constructor(\n    cachedConfig: CachedConfig,\n    dynamicConfig: DynamicConfig,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n  ) {\n    this.cachedPolicy = cachedConfig.rbacPolicy ? RBACPolicy.fromJSON(cachedConfig.rbacPolicy) : null;\n    this.policyPromise = dynamicConfig.then((data) => {\n      if (!data.rbacPolicy) {\n        logger.error('Unable to retrieve RBAC policy from servers. Assuming caller has no permissions.');\n        return new RBACPolicy([], []);\n      }\n      // Update the existing policy too, so isAuthorizedSync will be up-to-date\n      this.cachedPolicy = RBACPolicy.fromJSON(data.rbacPolicy);\n      return this.cachedPolicy;\n    });\n  }\n\n  allPermissions<Permissions extends Record<string, string>>() {\n    return this.policyPromise.then(\n      (policy) => policy.allPermissionsForCaller(this.roleIds()) as ConsumerPermissionsMap<Permissions>,\n    );\n  }\n\n  isAuthorizedSync: IHeadlessRBACClient['isAuthorizedSync'] = (resourceId, action) => {\n    return !!this.cachedPolicy?.callerIsAuthorized(this.roleIds(), resourceId as string, action as unknown as string);\n  };\n\n  isAuthorized: IHeadlessRBACClient['isAuthorized'] = (resourceId, action) => {\n    return this.policyPromise.then((policy) =>\n      policy.callerIsAuthorized(this.roleIds(), resourceId as string, action as unknown as string),\n    );\n  };\n\n  private roleIds() {\n    const user = this._subscriptionService.getUser();\n\n    if (!user) {\n      return [];\n    }\n\n    // Although user.roles is guaranteed to exist for fresh data, there is a chance\n    // that the user stored in localstorage clientside comes from before roles were added to\n    // the API response - in which case user.roles will be undefined and this will crash\n    // TODO: [AUTH-2294] We can safely remove this ~3mos after RBAC is released\n    return user.roles ?? [];\n  }\n}\n"],"names":["HeadlessRBACClient","cachedPolicy","policyPromise","constructor","cachedConfig","dynamicConfig","_subscriptionService","isAuthorizedSync","resourceId","action","callerIsAuthorized","roleIds","isAuthorized","then","policy","rbacPolicy","RBACPolicy","fromJSON","data","logger","error","allPermissions","allPermissionsForCaller","user","getUser","roles"],"mappings":";;;AAYO,MAAMA,kBAAAA,CAAAA;;IAGHC,YAAAA;IACAC,aAAAA;AACRC,IAAAA,WAAAA,CACEC,YAA0B,EAC1BC,aAA4B,EACpBC,oBAAyE,CACjF;aADQA,oBAAAA,GAAAA,oBAAAA;AAoBVC,QAAAA,IAAAA,CAAAA,gBAAAA,GAA4D,CAACC,UAAAA,EAAYC,MAAAA,GAAAA;YACvE,OAAO,CAAC,CAAC,IAAI,CAACR,YAAY,EAAES,kBAAAA,CAAmB,IAAI,CAACC,OAAO,EAAA,EAAIH,UAAAA,EAAsBC,MAAAA,CAAAA;AACvF,QAAA,CAAA;AAEAG,QAAAA,IAAAA,CAAAA,YAAAA,GAAoD,CAACJ,UAAAA,EAAYC,MAAAA,GAAAA;AAC/D,YAAA,OAAO,IAAI,CAACP,aAAa,CAACW,IAAI,CAAC,CAACC,MAAAA,GAC9BA,MAAAA,CAAOJ,kBAAkB,CAAC,IAAI,CAACC,OAAO,IAAIH,UAAAA,EAAsBC,MAAAA,CAAAA,CAAAA;AAEpE,QAAA,CAAA;QA1BE,IAAI,CAACR,YAAY,GAAGG,YAAAA,CAAaW,UAAU,GAAGC,UAAAA,CAAWC,QAAQ,CAACb,YAAAA,CAAaW,UAAU,CAAA,GAAI,IAAA;AAC7F,QAAA,IAAI,CAACb,aAAa,GAAGG,aAAAA,CAAcQ,IAAI,CAAC,CAACK,IAAAA,GAAAA;YACvC,IAAI,CAACA,IAAAA,CAAKH,UAAU,EAAE;AACpBI,gBAAAA,MAAAA,CAAOC,KAAK,CAAC,kFAAA,CAAA;AACb,gBAAA,OAAO,IAAIJ,UAAAA,CAAW,EAAE,EAAE,EAAE,CAAA;AAC9B,YAAA;;AAEA,YAAA,IAAI,CAACf,YAAY,GAAGe,WAAWC,QAAQ,CAACC,KAAKH,UAAU,CAAA;YACvD,OAAO,IAAI,CAACd,YAAY;AAC1B,QAAA,CAAA,CAAA;AACF,IAAA;IAEAoB,cAAAA,GAA6D;AAC3D,QAAA,OAAO,IAAI,CAACnB,aAAa,CAACW,IAAI,CAC5B,CAACC,MAAAA,GAAWA,MAAAA,CAAOQ,uBAAuB,CAAC,IAAI,CAACX,OAAO,EAAA,CAAA,CAAA;AAE3D,IAAA;IAEAJ,gBAAAA;IAIAK,YAAAA;IAMQD,OAAAA,GAAU;AAChB,QAAA,MAAMY,IAAAA,GAAO,IAAI,CAACjB,oBAAoB,CAACkB,OAAO,EAAA;AAE9C,QAAA,IAAI,CAACD,IAAAA,EAAM;AACT,YAAA,OAAO,EAAE;AACX,QAAA;;;;;QAMA,OAAOA,IAAAA,CAAKE,KAAK,IAAI,EAAE;AACzB,IAAA;AACF;;;;"}
+{"version":3,"file":"HeadlessRBACClient.mjs","sources":["../../../../../../../core/src/HeadlessClients/HeadlessRBACClient.ts"],"sourcesContent":["import { IConsumerSubscriptionService } from '../SubscriptionService';\nimport { logger } from '../utils';\nimport { RBACPolicy, RBACPolicyRaw } from '../rbac';\nimport { IHeadlessRBACClient, ConsumerPermissionsMap } from '../public/rbac';\nimport { StytchProjectConfigurationInput } from '../public/typeConfig';\n\ntype CachedConfig = {\n  rbacPolicy: RBACPolicyRaw | null;\n};\n\ntype DynamicConfig = Promise<CachedConfig>;\n\nexport class HeadlessRBACClient<TProjectConfiguration extends StytchProjectConfigurationInput>\n  implements IHeadlessRBACClient\n{\n  private cachedPolicy: RBACPolicy | null;\n  private policyPromise: Promise<RBACPolicy>;\n  constructor(\n    cachedConfig: CachedConfig,\n    dynamicConfig: DynamicConfig,\n    private _subscriptionService: IConsumerSubscriptionService<TProjectConfiguration>,\n  ) {\n    this.cachedPolicy = cachedConfig.rbacPolicy ? RBACPolicy.fromJSON(cachedConfig.rbacPolicy) : null;\n    this.policyPromise = dynamicConfig.then((data) => {\n      if (!data.rbacPolicy) {\n        logger.error('Unable to retrieve RBAC policy from servers. Assuming caller has no permissions.');\n        return new RBACPolicy([], []);\n      }\n      // Update the existing policy too, so isAuthorizedSync will be up-to-date\n      this.cachedPolicy = RBACPolicy.fromJSON(data.rbacPolicy);\n      return this.cachedPolicy;\n    });\n  }\n\n  allPermissions<Permissions extends Record<string, string>>() {\n    return this.policyPromise.then(\n      (policy) => policy.allPermissionsForCaller(this.roleIds()) as ConsumerPermissionsMap<Permissions>,\n    );\n  }\n\n  isAuthorizedSync: IHeadlessRBACClient['isAuthorizedSync'] = (resourceId, action) => {\n    return !!this.cachedPolicy?.callerIsAuthorized(this.roleIds(), resourceId as string, action as unknown as string);\n  };\n\n  isAuthorized: IHeadlessRBACClient['isAuthorized'] = (resourceId, action) => {\n    return this.policyPromise.then((policy) =>\n      policy.callerIsAuthorized(this.roleIds(), resourceId as string, action as unknown as string),\n    );\n  };\n\n  private roleIds() {\n    const user = this._subscriptionService.getUser();\n\n    if (!user) {\n      return [];\n    }\n\n    // Although user.roles is guaranteed to exist for fresh data, there is a chance\n    // that the user stored in localstorage clientside comes from before roles were added to\n    // the API response - in which case user.roles will be undefined and this will crash\n    // TODO: [AUTH-2294] We can safely remove this ~3mos after RBAC is released\n    return user.roles ?? [];\n  }\n}\n"],"names":["HeadlessRBACClient","cachedPolicy","policyPromise","cachedConfig","dynamicConfig","_subscriptionService","rbacPolicy","RBACPolicy","fromJSON","then","data","logger","error","allPermissions","policy","allPermissionsForCaller","roleIds","isAuthorizedSync","resourceId","action","callerIsAuthorized","isAuthorized","user","getUser","roles"],"mappings":";;;AAYO,MAAMA,kBAAAA,CAAAA;;IAGHC,YAAAA;IACAC,aAAAA;AACR,IAAA,WAAA,CACEC,YAA0B,EAC1BC,aAA4B,EACpBC,oBAAyE,CACjF;aADQA,oBAAAA,GAAAA,oBAAAA;QAER,IAAI,CAACJ,YAAY,GAAGE,YAAAA,CAAaG,UAAU,GAAGC,UAAAA,CAAWC,QAAQ,CAACL,YAAAA,CAAaG,UAAU,CAAA,GAAI,IAAA;AAC7F,QAAA,IAAI,CAACJ,aAAa,GAAGE,aAAAA,CAAcK,IAAI,CAAC,CAACC,IAAAA,GAAAA;YACvC,IAAI,CAACA,IAAAA,CAAKJ,UAAU,EAAE;AACpBK,gBAAAA,MAAAA,CAAOC,KAAK,CAAC,kFAAA,CAAA;AACb,gBAAA,OAAO,IAAIL,UAAAA,CAAW,EAAE,EAAE,EAAE,CAAA;AAC9B,YAAA;;AAEA,YAAA,IAAI,CAACN,YAAY,GAAGM,WAAWC,QAAQ,CAACE,KAAKJ,UAAU,CAAA;YACvD,OAAO,IAAI,CAACL,YAAY;AAC1B,QAAA,CAAA,CAAA;AACF,IAAA;IAEAY,cAAAA,GAA6D;AAC3D,QAAA,OAAO,IAAI,CAACX,aAAa,CAACO,IAAI,CAC5B,CAACK,MAAAA,GAAWA,MAAAA,CAAOC,uBAAuB,CAAC,IAAI,CAACC,OAAO,EAAA,CAAA,CAAA;AAE3D,IAAA;AAEAC,IAAAA,gBAAAA,GAA4D,CAACC,UAAAA,EAAYC,MAAAA,GAAAA;QACvE,OAAO,CAAC,CAAC,IAAI,CAAClB,YAAY,EAAEmB,kBAAAA,CAAmB,IAAI,CAACJ,OAAO,EAAA,EAAIE,UAAAA,EAAsBC,MAAAA,CAAAA;IACvF,CAAA;AAEAE,IAAAA,YAAAA,GAAoD,CAACH,UAAAA,EAAYC,MAAAA,GAAAA;AAC/D,QAAA,OAAO,IAAI,CAACjB,aAAa,CAACO,IAAI,CAAC,CAACK,MAAAA,GAC9BA,MAAAA,CAAOM,kBAAkB,CAAC,IAAI,CAACJ,OAAO,IAAIE,UAAAA,EAAsBC,MAAAA,CAAAA,CAAAA;IAEpE,CAAA;IAEQH,OAAAA,GAAU;AAChB,QAAA,MAAMM,IAAAA,GAAO,IAAI,CAACjB,oBAAoB,CAACkB,OAAO,EAAA;AAE9C,QAAA,IAAI,CAACD,IAAAA,EAAM;AACT,YAAA,OAAO,EAAE;AACX,QAAA;;;;;QAMA,OAAOA,IAAAA,CAAKE,KAAK,IAAI,EAAE;AACzB,IAAA;AACF;;;;"}