@stytch/vanilla-js 2.0.3 → 2.0.4

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @stytch/vanilla-js
 
+## 2.0.4
+
+### Patch Changes
+
+- 2b8f0e6: Fix PKCE logic for password resets log in without password flow
+- Updated dependencies [2b8f0e6]
+  - @stytch/core@1.0.0
+
 ## 2.0.3
 
 ### Patch Changes

package/dist/b2b/index.esm.js

@@ -812,12 +812,12 @@ var Y = Promise.resolve({
     pkceRequiredForEmailMagicLinks: !1
   }),
   J = function () {
-    function e(t, n, r) {
-      var i = this,
-        a = arguments.length > 3 && void 0 !== arguments[3] ? arguments[3] : Y;
-      s(this, e), this._networkClient = t, this._subscriptionService = n, this._pkceManager = r, this._config = a, this.email = {
+    function e(t, n, r, i) {
+      var a = this,
+        l = arguments.length > 4 && void 0 !== arguments[4] ? arguments[4] : Y;
+      s(this, e), this._networkClient = t, this._subscriptionService = n, this._pkceManager = r, this._passwordResetPKCEManager = i, this._config = l, this.email = {
         loginOrSignup: function loginOrSignup(e) {
-          return v(i, void 0, void 0, o().mark(function t() {
+          return v(a, void 0, void 0, o().mark(function t() {
             var n, r;
             return o().wrap(function (t) {
               for (;;) switch (t.prev = t.next) {
@@ -841,7 +841,7 @@ var Y = Promise.resolve({
         },
         discovery: {
           send: function send(e) {
-            return v(i, void 0, void 0, o().mark(function t() {
+            return v(a, void 0, void 0, o().mark(function t() {
               var n, r;
               return o().wrap(function (t) {
                 for (;;) switch (t.prev = t.next) {
@@ -865,45 +865,62 @@ var Y = Promise.resolve({
           }
         }
       }, this.authenticate = function (e) {
-        return v(i, void 0, void 0, o().mark(function t() {
-          var n, r, i;
+        return v(a, void 0, void 0, o().mark(function t() {
+          var n, r;
           return o().wrap(function (t) {
             for (;;) switch (t.prev = t.next) {
               case 0:
-                return K("stytch.magicLinks.authenticate").isString("magic_links_token", e.magic_links_token).isNumber("session_duration_minutes", e.session_duration_minutes).isOptionalString("locale", e.locale), t.next = 3, this._pkceManager.getPKPair();
+                return K("stytch.magicLinks.authenticate").isString("magic_links_token", e.magic_links_token).isNumber("session_duration_minutes", e.session_duration_minutes).isOptionalString("locale", e.locale), t.next = 3, this._passwordResetPKCEManager.getPKPair();
               case 3:
-                return n = t.sent, r = Object.assign({
-                  pkce_code_verifier: null == n ? void 0 : n.code_verifier
-                }, e), t.next = 7, this._networkClient.fetchSDK({
-                  url: "/b2b/magic_links/authenticate",
-                  body: r,
-                  errorMessage: "Failed to authenticate token",
-                  method: "POST"
-                });
-              case 7:
-                return i = t.sent, this._pkceManager.clearPKPair(), i.member_session ? this._subscriptionService.updateStateAndTokens({
+                if (n = t.sent, r = null, !(null == n ? void 0 : n.code_verifier)) {
+                  t.next = 19;
+                  break;
+                }
+                return t.prev = 6, t.next = 9, this.handlePKCEForAuthenticate(this._passwordResetPKCEManager, e);
+              case 9:
+                r = t.sent, t.next = 19;
+                break;
+              case 12:
+                if (t.prev = 12, t.t0 = t["catch"](6), !t.t0.message.includes("pkce")) {
+                  t.next = 18;
+                  break;
+                }
+                console.log("Authenticate with passwords pkce namespace failed. Falling back to authenticate with magic_links namespace."), t.next = 19;
+                break;
+              case 18:
+                throw t.t0;
+              case 19:
+                if (r) {
+                  t.next = 23;
+                  break;
+                }
+                return t.next = 22, this.handlePKCEForAuthenticate(this._pkceManager, e);
+              case 22:
+                r = t.sent;
+              case 23:
+                return r.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
-                    session: i.member_session,
-                    member: i.member
+                    session: r.member_session,
+                    member: r.member
                   },
-                  session_token: i.session_token,
-                  session_jwt: i.session_jwt,
+                  session_token: r.session_token,
+                  session_jwt: r.session_jwt,
                   intermediate_session_token: null
                 }) : this._subscriptionService.updateStateAndTokens({
                   state: null,
                   session_token: null,
                   session_jwt: null,
-                  intermediate_session_token: i.intermediate_session_token
-                }), t.abrupt("return", i);
-              case 11:
+                  intermediate_session_token: r.intermediate_session_token
+                }), t.abrupt("return", r);
+              case 25:
               case "end":
                 return t.stop();
             }
-          }, t, this);
+          }, t, this, [[6, 12]]);
         }));
       }, this.discovery = {
         authenticate: function authenticate(e) {
-          return v(i, void 0, void 0, o().mark(function t() {
+          return v(a, void 0, void 0, o().mark(function t() {
             var n, r, i;
             return o().wrap(function (t) {
               for (;;) switch (t.prev = t.next) {
@@ -968,6 +985,33 @@ var Y = Promise.resolve({
           }, e, this);
         }));
       }
+    }, {
+      key: "handlePKCEForAuthenticate",
+      value: function value(e, t) {
+        return v(this, void 0, void 0, o().mark(function n() {
+          var r, i, a;
+          return o().wrap(function (n) {
+            for (;;) switch (n.prev = n.next) {
+              case 0:
+                return n.next = 2, e.getPKPair();
+              case 2:
+                return r = n.sent, i = Object.assign({
+                  pkce_code_verifier: null == r ? void 0 : r.code_verifier
+                }, t), n.next = 6, this._networkClient.fetchSDK({
+                  url: "/b2b/magic_links/authenticate",
+                  body: i,
+                  errorMessage: "Failed to authenticate token",
+                  method: "POST"
+                });
+              case 6:
+                return a = n.sent, e.clearPKPair(), n.abrupt("return", a);
+              case 9:
+              case "end":
+                return n.stop();
+            }
+          }, n, this);
+        }));
+      }
     }]), e;
   }(),
   Z = a(function e(t, n) {
@@ -1902,7 +1946,7 @@ var he = /*#__PURE__*/function () {
         },
         sdk: {
           identifier: "Stytch.js Javascript SDK",
-          version: "2.0.3"
+          version: "2.0.4"
         }
       });
     }
@@ -3179,6 +3223,7 @@ var Ge = /*#__PURE__*/_createClass(function Ge(e, t) {
       };
     }(o);
   this._dataLayer = _e(e, o), this._subscriptionService = new Se(e, this._dataLayer);
+  var a = new xe(this._dataLayer, "passwords");
   this._networkClient = new he(e, this._dataLayer, i.endpoints.sdkBackendURL, function () {
     var e, t, n, r;
     return {
@@ -3186,19 +3231,19 @@ var Ge = /*#__PURE__*/_createClass(function Ge(e, t) {
       stytch_member_session_id: null === (r = null === (n = _this8._dataLayer.state) || void 0 === n ? void 0 : n.session) || void 0 === r ? void 0 : r.member_session_id
     };
   });
-  var a = new Te(e, this._networkClient, this._dataLayer),
-    s = new We(a.getAsync()),
-    l = new Ke(this._networkClient, this._subscriptionService);
-  this.organization = new ee(this._networkClient), this.member = new Z(this._networkClient, this._subscriptionService), this.session = new ne(this._networkClient, this._subscriptionService), this.magicLinks = new J(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "magic_links"), a.getAsync()), this.oauth = new te(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "oauth"), a.getAsync(), {
+  var s = new Te(e, this._networkClient, this._dataLayer),
+    l = new We(s.getAsync()),
+    c = new Ke(this._networkClient, this._subscriptionService);
+  this.organization = new ee(this._networkClient), this.member = new Z(this._networkClient, this._subscriptionService), this.session = new ne(this._networkClient, this._subscriptionService), this.magicLinks = new J(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "magic_links"), a, s.getAsync()), this.oauth = new te(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "oauth"), s.getAsync(), {
     publicToken: e,
     testAPIURL: i.endpoints.testAPIURL,
     liveAPIURL: i.endpoints.liveAPIURL
-  }), this.sso = new X(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "sso"), a.getAsync(), {
+  }), this.sso = new X(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "sso"), s.getAsync(), {
     publicToken: e,
     testAPIURL: i.endpoints.testAPIURL,
     liveAPIURL: i.endpoints.liveAPIURL
-  }), this.discovery = new re(this._networkClient, this._subscriptionService), this.passwords = new He(this._networkClient, this._subscriptionService, new xe(this._dataLayer, "passwords"), a.getAsync(), s.executeRecaptcha), this.otps = new ie(this._networkClient, this._subscriptionService), this._sessionManager = new le(this._subscriptionService, this.session);
-  var c = new Pe(this._networkClient);
+  }), this.discovery = new re(this._networkClient, this._subscriptionService), this.passwords = new He(this._networkClient, this._subscriptionService, a, s.getAsync(), l.executeRecaptcha), this.otps = new ie(this._networkClient, this._subscriptionService), this._sessionManager = new le(this._subscriptionService, this.session);
+  var u = new Pe(this._networkClient);
   this._dataLayer.readSessionCookie().session_token && this._sessionManager.performBackgroundRefresh(), this._networkClient.logEvent({
     name: "b2b_sdk_instance_instantiated",
     details: {
@@ -3210,10 +3255,10 @@ var Ge = /*#__PURE__*/_createClass(function Ge(e, t) {
   (function (e, t) {
     Object.assign(e, _defineProperty({}, ce, t));
   })(this, {
-    bootstrap: a,
+    bootstrap: s,
     publicToken: e,
-    searchManager: c,
-    passwordResetClient: l,
+    searchManager: u,
+    passwordResetClient: c,
     dataLayer: this._dataLayer,
     networkClient: this._networkClient
   });