@stytch/vanilla-js 4.1.2 → 4.2.1

package/dist/b2b/index.headless.d.ts

@@ -231,6 +231,10 @@ interface Member {
         role_id: string;
         sources: RoleSource[];
     }[];
+    /**
+     * The member's default MFA method.
+     */
+    default_mfa_method: string;
 }
 type B2BAuthenticateResponse = ResponseCommon & {
     /**
@@ -373,6 +377,19 @@ interface Organization {
      * The list's accepted values are: sso, magic_link, password, google_oauth, and microsoft_oauth.
      */
     allowed_auth_methods: string[];
+    /**
+     * The setting that controls which mfa methods can be used by Members of an Organization.
+     * The accepted values are:
+     *   ALL_ALLOWED – the default setting which allows all MFA methods to be used.
+     *   RESTRICTED – only methods that comply with allowed_mfa_methods can be used for MFA. This setting does not apply to Members with is_breakglass set to true.
+     */
+    mfa_methods?: string;
+    /**
+     * An array of allowed MFA methods.
+     * This list is enforced when mfa_methods is set to RESTRICTED.
+     * The list's accepted values are: sms_otp and totp.
+     */
+    allowed_mfa_methods?: ("sms_otp" | "totp")[];
     /**
      * The setting that controls the MFA policy for all Members in the Organization. The accepted values are:
      *   REQUIRED_FOR_ALL – All Members within the Organization will be required to complete MFA every time they wish to log in.

package/dist/b2b/index.headless.esm.d.ts

@@ -231,6 +231,10 @@ interface Member {
         role_id: string;
         sources: RoleSource[];
     }[];
+    /**
+     * The member's default MFA method.
+     */
+    default_mfa_method: string;
 }
 type B2BAuthenticateResponse = ResponseCommon & {
     /**
@@ -373,6 +377,19 @@ interface Organization {
      * The list's accepted values are: sso, magic_link, password, google_oauth, and microsoft_oauth.
      */
     allowed_auth_methods: string[];
+    /**
+     * The setting that controls which mfa methods can be used by Members of an Organization.
+     * The accepted values are:
+     *   ALL_ALLOWED – the default setting which allows all MFA methods to be used.
+     *   RESTRICTED – only methods that comply with allowed_mfa_methods can be used for MFA. This setting does not apply to Members with is_breakglass set to true.
+     */
+    mfa_methods?: string;
+    /**
+     * An array of allowed MFA methods.
+     * This list is enforced when mfa_methods is set to RESTRICTED.
+     * The list's accepted values are: sms_otp and totp.
+     */
+    allowed_mfa_methods?: ("sms_otp" | "totp")[];
     /**
      * The setting that controls the MFA policy for all Members in the Organization. The accepted values are:
      *   REQUIRED_FOR_ALL – All Members within the Organization will be required to complete MFA every time they wish to log in.

package/dist/b2b/index.headless.esm.js

@@ -345,7 +345,7 @@ var b,
     }
     return r(s);
   }(),
-  U = function (e) {
+  z = function (e) {
     i(s, x);
     var t = o(s);
     function s() {
@@ -353,7 +353,7 @@ var b,
     }
     return r(s);
   }(),
-  z = function (e) {
+  U = function (e) {
     i(s, x);
     var t = o(s);
     function s() {
@@ -1241,8 +1241,8 @@ var je,
     for (var e, t = arguments.length, r = new Array(t), n = 0; n < t; n++) r[n] = arguments[n];
     return (e = console).error.apply(e, Fe.concat(r));
   },
-  Ue = "\nYou can find your public token at https://stytch.com/dashboard/api-keys.",
-  ze = function ze(e) {
+  ze = "\nYou can find your public token at https://stytch.com/dashboard/api-keys.",
+  Ue = function Ue(e) {
     return e.includes("public-token-test");
   },
   qe = function qe(e) {
@@ -1724,7 +1724,8 @@ var Ye = Promise.resolve({
                 return n.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -1881,7 +1882,7 @@ var Ye = Promise.resolve({
         return de().wrap(function (t) {
           for (;;) switch (t.prev = t.next) {
             case 0:
-              return qe("stytch.self.update").isOptionalString("name", e.name).isOptionalObject("untrusted_metadata", e.untrusted_metadata).isOptionalBoolean("mfa_enrolled", e.mfa_enrolled).isOptionalString("mfa_phone_number", e.mfa_phone_number), t.next = 3, this._networkClient.fetchSDK({
+              return qe("stytch.self.update").isOptionalString("name", e.name).isOptionalObject("untrusted_metadata", e.untrusted_metadata).isOptionalBoolean("mfa_enrolled", e.mfa_enrolled).isOptionalString("mfa_phone_number", e.mfa_phone_number).isOptionalString("default_mfa_method", e.default_mfa_method), t.next = 3, this._networkClient.fetchSDK({
                 url: "/b2b/organizations/members/update",
                 body: e,
                 errorMessage: "Failed to update member.",
@@ -2090,7 +2091,8 @@ var Ye = Promise.resolve({
                 return s = t.sent, this._pkceManager.clearPKPair(), s.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2115,7 +2117,7 @@ var Ye = Promise.resolve({
           return de().wrap(function (e) {
             for (;;) switch (e.prev = e.next) {
               case 0:
-                if (!ze(this._config.publicToken)) {
+                if (!Ue(this._config.publicToken)) {
                   e.next = 2;
                   break;
                 }
@@ -2219,13 +2221,20 @@ var Ye = Promise.resolve({
                 method: "GET"
               });
             case 2:
-              return t = e.sent, e.abrupt("return", t.organization);
-            case 4:
+              return t = e.sent, this._subscriptionService.updateOrganization(t.organization), e.abrupt("return", t.organization);
+            case 5:
             case "end":
               return e.stop();
           }
         }, e, this);
       }));
+    }, this.getSync = function () {
+      return n._subscriptionService.getOrganization();
+    }, this.onChange = function (e) {
+      return n._subscriptionService.subscribeToState(function (t) {
+        var r;
+        return e(null !== (r = null == t ? void 0 : t.organization) && void 0 !== r ? r : null);
+      });
     }, this.update = function (e) {
       return we(n, void 0, void 0, de().mark(function t() {
         var r;
@@ -2469,7 +2478,8 @@ var Ye = Promise.resolve({
                 return s = t.sent, this._pkceManager.clearPKPair(), s.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2503,7 +2513,7 @@ var Ye = Promise.resolve({
                 }
                 return e.abrupt("return", "https://".concat(r));
               case 6:
-                if (!ze(this._config.publicToken)) {
+                if (!Ue(this._config.publicToken)) {
                   e.next = 8;
                   break;
                 }
@@ -2647,7 +2657,8 @@ var Ye = Promise.resolve({
                 return n = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2677,7 +2688,8 @@ var Ye = Promise.resolve({
                 return (r = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: r.member_session,
-                    member: r.member
+                    member: r.member,
+                    organization: r.organization
                   },
                   session_token: r.session_token,
                   session_jwt: r.session_jwt,
@@ -2762,7 +2774,8 @@ var Ye = Promise.resolve({
                 return (n = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2807,7 +2820,8 @@ var Ye = Promise.resolve({
                 return (n = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2890,7 +2904,8 @@ var tt = pe(function e(t, r) {
                 return s = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2970,7 +2985,8 @@ var tt = pe(function e(t, r) {
                 return s = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -3411,7 +3427,8 @@ var kt = /*#__PURE__*/function () {
               return _context6.abrupt("return", (o.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: o.member_session,
-                  member: o.member
+                  member: o.member,
+                  organization: o.organization
                 },
                 session_token: o.session_token,
                 session_jwt: o.session_jwt,
@@ -3513,7 +3530,8 @@ var kt = /*#__PURE__*/function () {
               return _context8.abrupt("return", (this._pkceManager.clearPKPair(), o.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: o.member_session,
-                  member: o.member
+                  member: o.member,
+                  organization: o.organization
                 },
                 session_token: o.session_token,
                 session_jwt: o.session_jwt,
@@ -3567,7 +3585,8 @@ var kt = /*#__PURE__*/function () {
               return _context9.abrupt("return", (n.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: n.member_session,
-                  member: n.member
+                  member: n.member,
+                  organization: n.organization
                 },
                 session_token: n.session_token,
                 session_jwt: n.session_jwt,
@@ -3617,7 +3636,8 @@ var kt = /*#__PURE__*/function () {
               return _context10.abrupt("return", (this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: n.member_session,
-                  member: n.member
+                  member: n.member,
+                  organization: n.organization
                 },
                 session_token: n.session_token,
                 session_jwt: n.session_jwt,
@@ -3878,7 +3898,7 @@ var At = /*#__PURE__*/function () {
         },
         sdk: {
           identifier: "Stytch.js Javascript SDK",
-          version: "4.1.2"
+          version: "4.2.1"
         }
       });
     }
@@ -4513,6 +4533,13 @@ var Kt = /*#__PURE__*/function (_Nt) {
     }, _this8.getMember = function () {
       var e, t;
       return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.member) && void 0 !== t ? t : null;
+    }, _this8.updateOrganization = function (e) {
+      return _this8.updateState({
+        organization: e
+      });
+    }, _this8.getOrganization = function () {
+      var e, t;
+      return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.organization) && void 0 !== t ? t : null;
     }, _this8.getSession = function () {
       var e, t;
       return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.session) && void 0 !== t ? t : null;
@@ -4521,14 +4548,14 @@ var Kt = /*#__PURE__*/function (_Nt) {
   }
   return _createClass(Kt);
 }(Nt);
-var Ut = Symbol["for"]("stytch__internal_b2b");
-var zt = /*#__PURE__*/_createClass(function zt(e, t) {
+var zt = Symbol["for"]("stytch__internal_b2b");
+var Ut = /*#__PURE__*/_createClass(function Ut(e, t) {
   var _this9 = this;
-  _classCallCheck(this, zt);
+  _classCallCheck(this, Ut);
   var r;
   !function (e) {
     if ("undefined" == typeof window) throw new Error("The ".concat(e, " is not compatible with server-side environments.\nIf using nextjs, use the create").concat(e, " method instead.\n```\n").concat("import { createStytchB2BHeadlessClient } from '@stytch/nextjs/b2b';\n    \n  const stytch = createStytchB2BHeadlessClient('public-token-...');\n  ", "\n```\n"));
-  }("StytchB2BHeadlessClient"), "string" != typeof (r = e) ? Ne("Public token is malformed. Expected a string, got ".concat(le(r), ".").concat(Ue)) : "" === r ? Ne('Public token is malformed. Expected "public-token-...", got an empty string.'.concat(Ue)) : r.startsWith("public-token-") || Ne('Public token is malformed. Expected "public-token-...", got '.concat(r, ".").concat(Ue));
+  }("StytchB2BHeadlessClient"), "string" != typeof (r = e) ? Ne("Public token is malformed. Expected a string, got ".concat(le(r), ".").concat(ze)) : "" === r ? Ne('Public token is malformed. Expected "public-token-...", got an empty string.'.concat(ze)) : r.startsWith("public-token-") || Ne('Public token is malformed. Expected "public-token-...", got '.concat(r, ".").concat(ze));
   var n = t,
     i = {
       cookieOptions: null == (o = n) ? void 0 : o.cookieOptions,
@@ -4572,7 +4599,7 @@ var zt = /*#__PURE__*/_createClass(function zt(e, t) {
     }
   });
   (function (e, t) {
-    Object.assign(e, _defineProperty({}, Ut, t));
+    Object.assign(e, _defineProperty({}, zt, t));
   })(this, {
     bootstrap: v,
     publicToken: e,
@@ -4581,4 +4608,4 @@ var zt = /*#__PURE__*/_createClass(function zt(e, t) {
     networkClient: this._networkClient
   });
 });
-export { g as AuthFlowType, y as B2BOAuthProviders, b as B2BProducts, X as BiometricsFailedError, B as BiometricsUnavailableError, H as ChallengeSigningFailedError, K as DeviceCredentialsNotAllowedError, V as FailedCodeChallengeError, $ as FailedToDecryptDataError, R as InternalError, W as InvalidAuthorizationCredentialError, te as InvalidCredentialTypeError, Q as InvalidRedirectSchemeError, Z as InvalidStartUrlError, ne as JSONDataNotConvertibleToStringError, L as KeyInvalidatedError, M as KeystoreUnavailableError, re as MissingAttestationObjectError, q as MissingAuthorizationCredentialIDTokenError, U as MissingGoogleClientIDError, z as MissingPKCEError, G as MissingPublicKeyError, ee as MissingUrlError, j as NoBiometricsEnrolledError, I as NoBiometricsRegistrationError, D as NoCurrentSessionError, p as OAuthProviders, m as OTPMethods, f as OneTapPositions, oe as PasskeysInvalidEncoding, J as PasskeysUnsupportedError, h as Products, ie as RandomNumberGenerationFailed, k as SDKAPIUnreachableError, Y as SDKNotConfiguredError, E as StytchAPIError, O as StytchAPISchemaError, T as StytchAPIUnreachableError, zt as StytchB2BHeadlessClient, C as StytchError, v as StytchEventType, P as StytchSDKAPIError, x as StytchSDKError, S as StytchSDKSchemaError, w as StytchSDKUsageError, A as UNRECOVERABLE_ERROR_TYPES, F as UserCancellationError, N as UserLockedOutError, _ as Wallets, se as errorToStytchError };
+export { g as AuthFlowType, y as B2BOAuthProviders, b as B2BProducts, X as BiometricsFailedError, B as BiometricsUnavailableError, H as ChallengeSigningFailedError, K as DeviceCredentialsNotAllowedError, V as FailedCodeChallengeError, $ as FailedToDecryptDataError, R as InternalError, W as InvalidAuthorizationCredentialError, te as InvalidCredentialTypeError, Q as InvalidRedirectSchemeError, Z as InvalidStartUrlError, ne as JSONDataNotConvertibleToStringError, L as KeyInvalidatedError, M as KeystoreUnavailableError, re as MissingAttestationObjectError, q as MissingAuthorizationCredentialIDTokenError, z as MissingGoogleClientIDError, U as MissingPKCEError, G as MissingPublicKeyError, ee as MissingUrlError, j as NoBiometricsEnrolledError, I as NoBiometricsRegistrationError, D as NoCurrentSessionError, p as OAuthProviders, m as OTPMethods, f as OneTapPositions, oe as PasskeysInvalidEncoding, J as PasskeysUnsupportedError, h as Products, ie as RandomNumberGenerationFailed, k as SDKAPIUnreachableError, Y as SDKNotConfiguredError, E as StytchAPIError, O as StytchAPISchemaError, T as StytchAPIUnreachableError, Ut as StytchB2BHeadlessClient, C as StytchError, v as StytchEventType, P as StytchSDKAPIError, x as StytchSDKError, S as StytchSDKSchemaError, w as StytchSDKUsageError, A as UNRECOVERABLE_ERROR_TYPES, F as UserCancellationError, N as UserLockedOutError, _ as Wallets, se as errorToStytchError };

package/dist/b2b/index.headless.js

@@ -297,7 +297,7 @@ var h = function (e) {
     }
     return r(s);
   }(),
-  E = function (e) {
+  C = function (e) {
     i(s, k);
     var t = o(s);
     function s() {
@@ -305,7 +305,7 @@ var h = function (e) {
     }
     return r(s);
   }(),
-  C = function (e) {
+  E = function (e) {
     i(s, k);
     var t = o(s);
     function s() {
@@ -585,7 +585,7 @@ function te() {
       s = Object.create(o.prototype),
       a = new x(n || []);
     return i(s, "_invoke", {
-      value: E(e, r, a)
+      value: C(e, r, a)
     }), s;
   }
   function d(e, t, r) {
@@ -655,7 +655,7 @@ function te() {
       }
     });
   }
-  function E(t, r, n) {
+  function C(t, r, n) {
     var i = h;
     return function (o, s) {
       if (i === _) throw new Error("Generator is already running");
@@ -669,7 +669,7 @@ function te() {
       for (n.method = o, n.arg = s;;) {
         var a = n.delegate;
         if (a) {
-          var c = C(a, n);
+          var c = E(a, n);
           if (c) {
             if (c === m) continue;
             return c;
@@ -692,10 +692,10 @@ function te() {
       }
     };
   }
-  function C(t, r) {
+  function E(t, r) {
     var n = r.method,
       i = t.iterator[n];
-    if (i === e) return r.delegate = null, "throw" === n && t.iterator["return"] && (r.method = "return", r.arg = e, C(t, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), m;
+    if (i === e) return r.delegate = null, "throw" === n && t.iterator["return"] && (r.method = "return", r.arg = e, E(t, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), m;
     var o = d(i, t.iterator, r.arg);
     if ("throw" === o.type) return r.method = "throw", r.arg = o.arg, r.delegate = null, m;
     var s = o.arg;
@@ -1136,7 +1136,7 @@ function Pe(e, t) {
 function Ae(e, t) {
   return new Promise(function (r, n) {
     var i = function (e) {
-      var t = Ee(e);
+      var t = Ce(e);
       if (t[0]) return t[0];
     }(e);
     if (i && "true" === i.dataset.loaded) try {
@@ -1160,10 +1160,10 @@ function Ae(e, t) {
     });
   });
 }
-var Ee = function Ee(e) {
+var Ce = function Ce(e) {
   return document.querySelectorAll('script[src="'.concat(e, '"]'));
 };
-var Ce,
+var Ee,
   Te = ["[Stytch]"],
   Oe = function Oe() {
     for (var e, t = arguments.length, r = new Array(t), n = 0; n < t; n++) r[n] = arguments[n];
@@ -1539,7 +1539,7 @@ var Ce,
   }();
 !function (e) {
   e.LoginOrCreateEML = "login_or_create_eml", e.LoginOrCreateOTP = "login_or_create_otp", e.ResetPassword = "reset_password";
-}(Ce || (Ce = {})), Promise.resolve({
+}(Ee || (Ee = {})), Promise.resolve({
   pkceRequiredForEmailMagicLinks: !1
 }), Promise.resolve({
   pkceRequiredForPasswordResets: !1
@@ -1656,7 +1656,8 @@ var Fe = Promise.resolve({
                 return n.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -1813,7 +1814,7 @@ var Fe = Promise.resolve({
         return te().wrap(function (t) {
           for (;;) switch (t.prev = t.next) {
             case 0:
-              return Be("stytch.self.update").isOptionalString("name", e.name).isOptionalObject("untrusted_metadata", e.untrusted_metadata).isOptionalBoolean("mfa_enrolled", e.mfa_enrolled).isOptionalString("mfa_phone_number", e.mfa_phone_number), t.next = 3, this._networkClient.fetchSDK({
+              return Be("stytch.self.update").isOptionalString("name", e.name).isOptionalObject("untrusted_metadata", e.untrusted_metadata).isOptionalBoolean("mfa_enrolled", e.mfa_enrolled).isOptionalString("mfa_phone_number", e.mfa_phone_number).isOptionalString("default_mfa_method", e.default_mfa_method), t.next = 3, this._networkClient.fetchSDK({
                 url: "/b2b/organizations/members/update",
                 body: e,
                 errorMessage: "Failed to update member.",
@@ -2022,7 +2023,8 @@ var Fe = Promise.resolve({
                 return s = t.sent, this._pkceManager.clearPKPair(), s.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2151,13 +2153,20 @@ var Fe = Promise.resolve({
                 method: "GET"
               });
             case 2:
-              return t = e.sent, e.abrupt("return", t.organization);
-            case 4:
+              return t = e.sent, this._subscriptionService.updateOrganization(t.organization), e.abrupt("return", t.organization);
+            case 5:
             case "end":
               return e.stop();
           }
         }, e, this);
       }));
+    }, this.getSync = function () {
+      return n._subscriptionService.getOrganization();
+    }, this.onChange = function (e) {
+      return n._subscriptionService.subscribeToState(function (t) {
+        var r;
+        return e(null !== (r = null == t ? void 0 : t.organization) && void 0 !== r ? r : null);
+      });
     }, this.update = function (e) {
       return he(n, void 0, void 0, te().mark(function t() {
         var r;
@@ -2401,7 +2410,8 @@ var Fe = Promise.resolve({
                 return s = t.sent, this._pkceManager.clearPKPair(), s.member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2579,7 +2589,8 @@ var Fe = Promise.resolve({
                 return n = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2609,7 +2620,8 @@ var Fe = Promise.resolve({
                 return (r = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: r.member_session,
-                    member: r.member
+                    member: r.member,
+                    organization: r.organization
                   },
                   session_token: r.session_token,
                   session_jwt: r.session_jwt,
@@ -2694,7 +2706,8 @@ var Fe = Promise.resolve({
                 return (n = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2739,7 +2752,8 @@ var Fe = Promise.resolve({
                 return (n = t.sent).member_session ? this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: n.member_session,
-                    member: n.member
+                    member: n.member,
+                    organization: n.organization
                   },
                   session_token: n.session_token,
                   session_jwt: n.session_jwt,
@@ -2822,7 +2836,8 @@ var Ge = ne(function e(t, r) {
                 return s = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -2902,7 +2917,8 @@ var Ge = ne(function e(t, r) {
                 return s = t.sent, this._subscriptionService.updateStateAndTokens({
                   state: {
                     session: s.member_session,
-                    member: s.member
+                    member: s.member,
+                    organization: s.organization
                   },
                   session_token: s.session_token,
                   session_jwt: s.session_jwt,
@@ -3343,7 +3359,8 @@ var dt = /*#__PURE__*/function () {
               return _context6.abrupt("return", (o.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: o.member_session,
-                  member: o.member
+                  member: o.member,
+                  organization: o.organization
                 },
                 session_token: o.session_token,
                 session_jwt: o.session_jwt,
@@ -3445,7 +3462,8 @@ var dt = /*#__PURE__*/function () {
               return _context8.abrupt("return", (this._pkceManager.clearPKPair(), o.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: o.member_session,
-                  member: o.member
+                  member: o.member,
+                  organization: o.organization
                 },
                 session_token: o.session_token,
                 session_jwt: o.session_jwt,
@@ -3499,7 +3517,8 @@ var dt = /*#__PURE__*/function () {
               return _context9.abrupt("return", (n.member_session ? this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: n.member_session,
-                  member: n.member
+                  member: n.member,
+                  organization: n.organization
                 },
                 session_token: n.session_token,
                 session_jwt: n.session_jwt,
@@ -3549,7 +3568,8 @@ var dt = /*#__PURE__*/function () {
               return _context10.abrupt("return", (this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: n.member_session,
-                  member: n.member
+                  member: n.member,
+                  organization: n.organization
                 },
                 session_token: n.session_token,
                 session_jwt: n.session_jwt,
@@ -3810,7 +3830,7 @@ var ft = /*#__PURE__*/function () {
         },
         sdk: {
           identifier: "Stytch.js Javascript SDK",
-          version: "4.1.2"
+          version: "4.2.1"
         }
       });
     }
@@ -4296,14 +4316,14 @@ var Pt = /*#__PURE__*/function (_St) {
   return _createClass(Pt);
 }(St);
 var At = Symbol["for"]("__stytch_b2b_DataLayer"),
-  Et = function Et(e, t) {
+  Ct = function Ct(e, t) {
     var r = function () {
       var e = window;
       return e[At] || (e[At] = {}), e[At];
     }();
     return r[e] || (r[e] = new Pt(e, t)), r[e];
   },
-  Ct = function Ct(e, t) {
+  Et = function Et(e, t) {
     Object.values(e).forEach(function (e) {
       return e(t);
     });
@@ -4374,7 +4394,7 @@ var Ot = /*#__PURE__*/function () {
         r = null === e.state ? null : Object.assign(Object.assign({}, this._datalayer.state), e.state);
       this._datalayer.state = r;
       var n = e.state ? Object.keys(e.state) : [];
-      !this._datalayer.markStateKeysUpdated(n) && Tt(t, r) || Ct(this._datalayer.subscriptions, r);
+      !this._datalayer.markStateKeysUpdated(n) && Tt(t, r) || Et(this._datalayer.subscriptions, r);
     }
   }, {
     key: "updateStateAndTokens",
@@ -4390,7 +4410,7 @@ var Ot = /*#__PURE__*/function () {
       var n = e ? Object.keys(e) : [],
         i = this._datalayer.markStateKeysUpdated(n),
         o = !Tt(t, r);
-      (i || o) && (Ct(this._datalayer.subscriptions, r), o && this._datalayer.syncToLocalStorage());
+      (i || o) && (Et(this._datalayer.subscriptions, r), o && this._datalayer.syncToLocalStorage());
     }
   }, {
     key: "updateTokens",
@@ -4445,6 +4465,13 @@ var xt = /*#__PURE__*/function (_Ot) {
     }, _this8.getMember = function () {
       var e, t;
       return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.member) && void 0 !== t ? t : null;
+    }, _this8.updateOrganization = function (e) {
+      return _this8.updateState({
+        organization: e
+      });
+    }, _this8.getOrganization = function () {
+      var e, t;
+      return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.organization) && void 0 !== t ? t : null;
     }, _this8.getSession = function () {
       var e, t;
       return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.session) && void 0 !== t ? t : null;
@@ -4454,7 +4481,7 @@ var xt = /*#__PURE__*/function (_Ot) {
   return _createClass(xt);
 }(Ot);
 var Dt = Symbol["for"]("stytch__internal_b2b");
-exports.BiometricsFailedError = z, exports.BiometricsUnavailableError = A, exports.ChallengeSigningFailedError = F, exports.DeviceCredentialsNotAllowedError = D, exports.FailedCodeChallengeError = N, exports.FailedToDecryptDataError = U, exports.InternalError = S, exports.InvalidAuthorizationCredentialError = L, exports.InvalidCredentialTypeError = H, exports.InvalidRedirectSchemeError = W, exports.InvalidStartUrlError = q, exports.JSONDataNotConvertibleToStringError = V, exports.KeyInvalidatedError = E, exports.KeystoreUnavailableError = C, exports.MissingAttestationObjectError = Y, exports.MissingAuthorizationCredentialIDTokenError = R, exports.MissingGoogleClientIDError = I, exports.MissingPKCEError = B, exports.MissingPublicKeyError = M, exports.MissingUrlError = G, exports.NoBiometricsEnrolledError = T, exports.NoBiometricsRegistrationError = P, exports.NoCurrentSessionError = w, exports.PasskeysInvalidEncoding = $, exports.PasskeysUnsupportedError = K, exports.RandomNumberGenerationFailed = J, exports.SDKAPIUnreachableError = h, exports.SDKNotConfiguredError = j, exports.StytchAPIError = y, exports.StytchAPISchemaError = g, exports.StytchAPIUnreachableError = b, exports.StytchB2BHeadlessClient = /*#__PURE__*/function () {
+exports.BiometricsFailedError = z, exports.BiometricsUnavailableError = A, exports.ChallengeSigningFailedError = F, exports.DeviceCredentialsNotAllowedError = D, exports.FailedCodeChallengeError = N, exports.FailedToDecryptDataError = U, exports.InternalError = S, exports.InvalidAuthorizationCredentialError = L, exports.InvalidCredentialTypeError = H, exports.InvalidRedirectSchemeError = W, exports.InvalidStartUrlError = q, exports.JSONDataNotConvertibleToStringError = V, exports.KeyInvalidatedError = C, exports.KeystoreUnavailableError = E, exports.MissingAttestationObjectError = Y, exports.MissingAuthorizationCredentialIDTokenError = R, exports.MissingGoogleClientIDError = I, exports.MissingPKCEError = B, exports.MissingPublicKeyError = M, exports.MissingUrlError = G, exports.NoBiometricsEnrolledError = T, exports.NoBiometricsRegistrationError = P, exports.NoCurrentSessionError = w, exports.PasskeysInvalidEncoding = $, exports.PasskeysUnsupportedError = K, exports.RandomNumberGenerationFailed = J, exports.SDKAPIUnreachableError = h, exports.SDKNotConfiguredError = j, exports.StytchAPIError = y, exports.StytchAPISchemaError = g, exports.StytchAPIUnreachableError = b, exports.StytchB2BHeadlessClient = /*#__PURE__*/function () {
   function _class(e, t) {
     var _this9 = this;
     _classCallCheck(this, _class);
@@ -4474,7 +4501,7 @@ exports.BiometricsFailedError = z, exports.BiometricsUnavailableError = A, expor
         }
       };
     var o, s, a, c, u, l, d, h, p, _, f;
-    this._dataLayer = Et(e, n), this._subscriptionService = new xt(e, this._dataLayer);
+    this._dataLayer = Ct(e, n), this._subscriptionService = new xt(e, this._dataLayer);
     var m = new vt(this._dataLayer, "passwords");
     this._networkClient = new ft(e, this._dataLayer, i.endpoints.sdkBackendURL, function () {
       var e, t, r, n;
@@ -4530,11 +4557,11 @@ exports.BiometricsFailedError = z, exports.BiometricsUnavailableError = A, expor
       return new A();
     case "key_invalidated":
     case "no_biometric_key":
-      return new E();
+      return new C();
     case "no_biometrics_enrolled":
       return new T();
     case "keystore_unavailable":
-      return new C();
+      return new E();
     case "device_credentials_not_allowed":
       return new D();
     case "user_cancellation":