@stytch/vanilla-js 5.22.2 → 5.22.4

package/dist/{internal-DGn6oeow.js → internal-67Oevzu4.js}

@@ -632,12 +632,36 @@ var SignInWithAppleMisconfigured = /*#__PURE__*/function (_StytchSDKError33) {
   _inherits$1(SignInWithAppleMisconfigured, _StytchSDKError33);
   return _createClass$1(SignInWithAppleMisconfigured);
 }(StytchSDKError);
-var IDPOAuthFlowMissingParamError = /*#__PURE__*/function (_StytchSDKError34) {
+var MissingCipherIv = /*#__PURE__*/function (_StytchSDKError34) {
+  function MissingCipherIv() {
+    _classCallCheck$1(this, MissingCipherIv);
+    return _callSuper$1(this, MissingCipherIv, ['MissingCipherIv', 'The expected cipher Iv was not found when attempting to decrypt an existing biometric key.']);
+  }
+  _inherits$1(MissingCipherIv, _StytchSDKError34);
+  return _createClass$1(MissingCipherIv);
+}(StytchSDKError);
+var InvalidPrivateKeyLength = /*#__PURE__*/function (_StytchSDKError35) {
+  function InvalidPrivateKeyLength() {
+    _classCallCheck$1(this, InvalidPrivateKeyLength);
+    return _callSuper$1(this, InvalidPrivateKeyLength, ['InvalidPrivateKeyLength', "The private key was of an incorrect length."]);
+  }
+  _inherits$1(InvalidPrivateKeyLength, _StytchSDKError35);
+  return _createClass$1(InvalidPrivateKeyLength);
+}(StytchSDKError);
+var BiometricRegistrationIdIsNullOrBlank = /*#__PURE__*/function (_StytchSDKError36) {
+  function BiometricRegistrationIdIsNullOrBlank() {
+    _classCallCheck$1(this, BiometricRegistrationIdIsNullOrBlank);
+    return _callSuper$1(this, BiometricRegistrationIdIsNullOrBlank, ['BiometricRegistrationIdIsNullOrBlank', 'Attempted to set a blank or null biometric registration ID. This is not allowed, and indicates no registration was created on the server. Consider deleting any local keys that may have been generated.']);
+  }
+  _inherits$1(BiometricRegistrationIdIsNullOrBlank, _StytchSDKError36);
+  return _createClass$1(BiometricRegistrationIdIsNullOrBlank);
+}(StytchSDKError);
+var IDPOAuthFlowMissingParamError = /*#__PURE__*/function (_StytchSDKError37) {
   function IDPOAuthFlowMissingParamError(details) {
     _classCallCheck$1(this, IDPOAuthFlowMissingParamError);
     return _callSuper$1(this, IDPOAuthFlowMissingParamError, ['IDPOAuthFlowMissingParamError', details]);
   }
-  _inherits$1(IDPOAuthFlowMissingParamError, _StytchSDKError34);
+  _inherits$1(IDPOAuthFlowMissingParamError, _StytchSDKError37);
   return _createClass$1(IDPOAuthFlowMissingParamError);
 }(StytchSDKError);
 function errorToStytchError(error) {
@@ -714,6 +738,12 @@ function errorToStytchError(error) {
       return new PasskeysMisconfigured();
     case 'signinwithapple_misconfigured':
       return new SignInWithAppleMisconfigured();
+    case 'missing_cipher_iv':
+      return new MissingCipherIv();
+    case 'invalid_private_key_length':
+      return new InvalidPrivateKeyLength();
+    case 'biometric_registration_id_is_null_or_blank':
+      return new BiometricRegistrationIdIsNullOrBlank();
     default:
       return new InternalError(error);
   }
@@ -2232,15 +2262,6 @@ var ErrorMarshaller = /*#__PURE__*/function () {
     _classCallCheck(this, ErrorMarshaller);
   }
   return _createClass(ErrorMarshaller, null, [{
-    key: "marshall",
-    value: function marshall(error) {
-      return Object.assign(Object.assign({}, error), {
-        name: error.name,
-        message: error.message,
-        stack: error.stack
-      });
-    }
-  }, {
     key: "inflate",
     value: function inflate(ErrorClass, ErrorData) {
       var err = new ErrorClass(ErrorData);
@@ -2380,7 +2401,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
           return _regeneratorRuntime().wrap(function _callee62$(_context62) {
             while (1) switch (_context62.prev = _context62.next) {
               case 0:
-                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isOptionalString('invite_redirect_url', data.invite_redirect_url).isOptionalString('invite_template_id', data.invite_template_id).isOptionalString('name', data.name).isOptionalString('locale', data.locale).isOptionalStringArray('roles', data.roles);
+                validate('stytch.magicLinks.email.invite').isString('email_address', data.email_address).isOptionalString('invite_redirect_url', data.invite_redirect_url).isOptionalString('invite_template_id', data.invite_template_id).isOptionalString('name', data.name).isOptionalString('locale', data.locale).isOptionalStringArray('roles', data.roles).isOptionalNumber('invite_expiration_minutes', data.invite_expiration_minutes);
                 return _context62.abrupt("return", this._networkClient.fetchSDK({
                   url: '/b2b/magic_links/email/invite',
                   body: data,
@@ -2399,7 +2420,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
           return _regeneratorRuntime().wrap(function _callee63$(_context63) {
             while (1) switch (_context63.prev = _context63.next) {
               case 0:
-                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isString('organization_id', data.organization_id).isOptionalString('login_redirect_url', data.login_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_redirect_url', data.signup_redirect_url).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale);
+                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isString('organization_id', data.organization_id).isOptionalString('login_redirect_url', data.login_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_redirect_url', data.signup_redirect_url).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale).isOptionalNumber('login_expiration_minutes', data.login_expiration_minutes).isOptionalNumber('signup_expiration_minutes', data.signup_expiration_minutes);
                 _context63.next = 3;
                 return this.getCodeChallenge();
               case 3:
@@ -2426,7 +2447,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
             return _regeneratorRuntime().wrap(function _callee64$(_context64) {
               while (1) switch (_context64.prev = _context64.next) {
                 case 0:
-                  validate('stytch.magicLinks.email.discovery.send').isString('email_address', data.email_address).isOptionalString('discovery_redirect_url', data.discovery_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale);
+                  validate('stytch.magicLinks.email.discovery.send').isString('email_address', data.email_address).isOptionalString('discovery_redirect_url', data.discovery_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale).isOptionalNumber('discovery_expiration_minutes', data.discovery_expiration_minutes);
                   _context64.next = 3;
                   return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
                 case 3:
@@ -4923,7 +4944,7 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
         return _regeneratorRuntime().wrap(function _callee135$(_context135) {
           while (1) switch (_context135.prev = _context135.next) {
             case 0:
-              validate('stytch.otps.email.loginOrSignup').isString('organization_id', data.organization_id).isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale);
+              validate('stytch.otps.email.loginOrSignup').isString('organization_id', data.organization_id).isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale).isOptionalNumber('login_expiration_minutes', data.login_expiration_minutes).isOptionalNumber('signup_expiration_minutes', data.signup_expiration_minutes);
               _context135.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
@@ -5008,7 +5029,7 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
           return _regeneratorRuntime().wrap(function _callee137$(_context137) {
             while (1) switch (_context137.prev = _context137.next) {
               case 0:
-                validate('stytch.otps.email.discovery.send').isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale);
+                validate('stytch.otps.email.discovery.send').isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale).isOptionalNumber('discovery_expiration_minutes', data.discovery_expiration_minutes);
                 _context137.next = 3;
                 return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
               case 3:
@@ -5520,11 +5541,11 @@ var SearchDataManager = /*#__PURE__*/function () {
   return _createClass(SearchDataManager, [{
     key: "searchUser",
     value: function searchUser(email) {
-      var _this30 = this;
+      var _this29 = this;
       return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha().then(function (_ref10) {
         var dfp_telemetry_id = _ref10.dfp_telemetry_id,
           captcha_token = _ref10.captcha_token;
-        return _this30._networkClient.fetchSDK({
+        return _this29._networkClient.fetchSDK({
           url: "/users/search",
           method: 'POST',
           body: {
@@ -5583,53 +5604,53 @@ var SessionManagerRegistry = /*#__PURE__*/function () {
 }();
 var SessionManager = /*#__PURE__*/function () {
   function SessionManager(_subscriptionService, _headlessSessionClient, _publicToken) {
-    var _this31 = this;
+    var _this30 = this;
     _classCallCheck(this, SessionManager);
     this._subscriptionService = _subscriptionService;
     this._headlessSessionClient = _headlessSessionClient;
     this._publicToken = _publicToken;
     this._onDataChange = function (state) {
       if (shouldTryRefresh(state)) {
-        _this31.scheduleBackgroundRefresh();
+        _this30.scheduleBackgroundRefresh();
       } else {
-        _this31.cancelBackgroundRefresh();
+        _this30.cancelBackgroundRefresh();
       }
     };
     this._reauthenticateWithBackoff = function () {
-      return __awaiter$1(_this31, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee147() {
+      return __awaiter$1(_this30, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee146() {
         var count;
-        return _regeneratorRuntime().wrap(function _callee147$(_context147) {
-          while (1) switch (_context147.prev = _context147.next) {
+        return _regeneratorRuntime().wrap(function _callee146$(_context146) {
+          while (1) switch (_context146.prev = _context146.next) {
             case 0:
               count = 0;
             case 1:
-              _context147.prev = 2;
-              _context147.next = 5;
+              _context146.prev = 2;
+              _context146.next = 5;
               return this._headlessSessionClient.authenticate();
             case 5:
-              return _context147.abrupt("return", _context147.sent);
+              return _context146.abrupt("return", _context146.sent);
             case 8:
-              _context147.prev = 8;
-              _context147.t0 = _context147["catch"](2);
-              if (!SessionManager.isUnrecoverableError(_context147.t0)) {
-                _context147.next = 12;
+              _context146.prev = 8;
+              _context146.t0 = _context146["catch"](2);
+              if (!SessionManager.isUnrecoverableError(_context146.t0)) {
+                _context146.next = 12;
                 break;
               }
-              return _context147.abrupt("return", Promise.reject(_context147.t0));
+              return _context146.abrupt("return", Promise.reject(_context146.t0));
             case 12:
               count++;
-              _context147.next = 15;
+              _context146.next = 15;
               return new Promise(function (done) {
                 return setTimeout(done, SessionManager.timeoutForAttempt(count));
               });
             case 15:
-              _context147.next = 1;
+              _context146.next = 1;
               break;
             case 17:
             case "end":
-              return _context147.stop();
+              return _context146.stop();
           }
-        }, _callee147, this, [[2, 8]]);
+        }, _callee146, this, [[2, 8]]);
       }));
     };
     this.timeout = null;
@@ -5648,24 +5669,24 @@ var SessionManager = /*#__PURE__*/function () {
   }, {
     key: "performBackgroundRefresh",
     value: function performBackgroundRefresh() {
-      var _this32 = this;
+      var _this31 = this;
       this._reauthenticateWithBackoff().then(function () {
-        _this32.scheduleBackgroundRefresh();
+        _this31.scheduleBackgroundRefresh();
       })["catch"](function (error) {
         logger.warn('Session background refresh failed. Signalling to app that user is logged out.', {
           error: error
         });
-        _this32._subscriptionService.destroySession();
+        _this31._subscriptionService.destroySession();
       });
     }
   }, {
     key: "scheduleBackgroundRefresh",
     value: function scheduleBackgroundRefresh() {
-      var _this33 = this;
+      var _this32 = this;
       this.cancelBackgroundRefresh();
       this.register();
       this.timeout = setTimeout(function () {
-        _this33.performBackgroundRefresh();
+        _this32.performBackgroundRefresh();
       }, SessionManager.REFRESH_INTERVAL_MS);
     }
   }, {
@@ -5695,13 +5716,13 @@ var SessionManager = /*#__PURE__*/function () {
 SessionManager.REFRESH_INTERVAL_MS = 1000 * 60 * 3;
 SessionManager.registry = new SessionManagerRegistry();
 var StateChangeClient = /*#__PURE__*/_createClass(function StateChangeClient(_subscriptionService, emptyState) {
-  var _this34 = this;
+  var _this33 = this;
   _classCallCheck(this, StateChangeClient);
   this._subscriptionService = _subscriptionService;
   this.emptyState = emptyState;
   this.onStateChange = function (callback) {
-    return _this34._subscriptionService.subscribeToState(function (state) {
-      callback(state !== null && state !== void 0 ? state : _this34.emptyState);
+    return _this33._subscriptionService.subscribeToState(function (state) {
+      callback(state !== null && state !== void 0 ? state : _this33.emptyState);
     });
   };
 });
@@ -5828,6 +5849,7 @@ var readB2BInternals = function readB2BInternals(obj) {
   }
   return casted[internalSymB2B];
 };
+exports.BiometricRegistrationIdIsNullOrBlank = BiometricRegistrationIdIsNullOrBlank;
 exports.BiometricsAlreadyEnrolledError = BiometricsAlreadyEnrolledError;
 exports.BiometricsFailedError = BiometricsFailedError;
 exports.BiometricsUnavailableError = BiometricsUnavailableError;
@@ -5864,6 +5886,7 @@ exports.IframeHostClient = IframeHostClient;
 exports.InternalError = InternalError;
 exports.InvalidAuthorizationCredentialError = InvalidAuthorizationCredentialError;
 exports.InvalidCredentialTypeError = InvalidCredentialTypeError;
+exports.InvalidPrivateKeyLength = InvalidPrivateKeyLength;
 exports.InvalidRedirectSchemeError = InvalidRedirectSchemeError;
 exports.InvalidStartUrlError = InvalidStartUrlError;
 exports.JSONDataNotConvertibleToStringError = JSONDataNotConvertibleToStringError;
@@ -5871,6 +5894,7 @@ exports.KeyInvalidatedError = KeyInvalidatedError;
 exports.KeystoreUnavailableError = KeystoreUnavailableError;
 exports.MissingAttestationObjectError = MissingAttestationObjectError;
 exports.MissingAuthorizationCredentialIDTokenError = MissingAuthorizationCredentialIDTokenError;
+exports.MissingCipherIv = MissingCipherIv;
 exports.MissingGoogleClientIDError = MissingGoogleClientIDError;
 exports.MissingPKCEError = MissingPKCEError;
 exports.MissingPublicKeyError = MissingPublicKeyError;

package/dist/{internal-BlPwvROm.js → internal-BtI2_suI.js}

@@ -630,12 +630,36 @@ var SignInWithAppleMisconfigured = /*#__PURE__*/function (_StytchSDKError33) {
   _inherits$1(SignInWithAppleMisconfigured, _StytchSDKError33);
   return _createClass$1(SignInWithAppleMisconfigured);
 }(StytchSDKError);
-var IDPOAuthFlowMissingParamError = /*#__PURE__*/function (_StytchSDKError34) {
+var MissingCipherIv = /*#__PURE__*/function (_StytchSDKError34) {
+  function MissingCipherIv() {
+    _classCallCheck$1(this, MissingCipherIv);
+    return _callSuper$1(this, MissingCipherIv, ['MissingCipherIv', 'The expected cipher Iv was not found when attempting to decrypt an existing biometric key.']);
+  }
+  _inherits$1(MissingCipherIv, _StytchSDKError34);
+  return _createClass$1(MissingCipherIv);
+}(StytchSDKError);
+var InvalidPrivateKeyLength = /*#__PURE__*/function (_StytchSDKError35) {
+  function InvalidPrivateKeyLength() {
+    _classCallCheck$1(this, InvalidPrivateKeyLength);
+    return _callSuper$1(this, InvalidPrivateKeyLength, ['InvalidPrivateKeyLength', "The private key was of an incorrect length."]);
+  }
+  _inherits$1(InvalidPrivateKeyLength, _StytchSDKError35);
+  return _createClass$1(InvalidPrivateKeyLength);
+}(StytchSDKError);
+var BiometricRegistrationIdIsNullOrBlank = /*#__PURE__*/function (_StytchSDKError36) {
+  function BiometricRegistrationIdIsNullOrBlank() {
+    _classCallCheck$1(this, BiometricRegistrationIdIsNullOrBlank);
+    return _callSuper$1(this, BiometricRegistrationIdIsNullOrBlank, ['BiometricRegistrationIdIsNullOrBlank', 'Attempted to set a blank or null biometric registration ID. This is not allowed, and indicates no registration was created on the server. Consider deleting any local keys that may have been generated.']);
+  }
+  _inherits$1(BiometricRegistrationIdIsNullOrBlank, _StytchSDKError36);
+  return _createClass$1(BiometricRegistrationIdIsNullOrBlank);
+}(StytchSDKError);
+var IDPOAuthFlowMissingParamError = /*#__PURE__*/function (_StytchSDKError37) {
   function IDPOAuthFlowMissingParamError(details) {
     _classCallCheck$1(this, IDPOAuthFlowMissingParamError);
     return _callSuper$1(this, IDPOAuthFlowMissingParamError, ['IDPOAuthFlowMissingParamError', details]);
   }
-  _inherits$1(IDPOAuthFlowMissingParamError, _StytchSDKError34);
+  _inherits$1(IDPOAuthFlowMissingParamError, _StytchSDKError37);
   return _createClass$1(IDPOAuthFlowMissingParamError);
 }(StytchSDKError);
 function errorToStytchError(error) {
@@ -712,6 +736,12 @@ function errorToStytchError(error) {
       return new PasskeysMisconfigured();
     case 'signinwithapple_misconfigured':
       return new SignInWithAppleMisconfigured();
+    case 'missing_cipher_iv':
+      return new MissingCipherIv();
+    case 'invalid_private_key_length':
+      return new InvalidPrivateKeyLength();
+    case 'biometric_registration_id_is_null_or_blank':
+      return new BiometricRegistrationIdIsNullOrBlank();
     default:
       return new InternalError(error);
   }
@@ -2230,15 +2260,6 @@ var ErrorMarshaller = /*#__PURE__*/function () {
     _classCallCheck(this, ErrorMarshaller);
   }
   return _createClass(ErrorMarshaller, null, [{
-    key: "marshall",
-    value: function marshall(error) {
-      return Object.assign(Object.assign({}, error), {
-        name: error.name,
-        message: error.message,
-        stack: error.stack
-      });
-    }
-  }, {
     key: "inflate",
     value: function inflate(ErrorClass, ErrorData) {
       var err = new ErrorClass(ErrorData);
@@ -2378,7 +2399,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
           return _regeneratorRuntime().wrap(function _callee62$(_context62) {
             while (1) switch (_context62.prev = _context62.next) {
               case 0:
-                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isOptionalString('invite_redirect_url', data.invite_redirect_url).isOptionalString('invite_template_id', data.invite_template_id).isOptionalString('name', data.name).isOptionalString('locale', data.locale).isOptionalStringArray('roles', data.roles);
+                validate('stytch.magicLinks.email.invite').isString('email_address', data.email_address).isOptionalString('invite_redirect_url', data.invite_redirect_url).isOptionalString('invite_template_id', data.invite_template_id).isOptionalString('name', data.name).isOptionalString('locale', data.locale).isOptionalStringArray('roles', data.roles).isOptionalNumber('invite_expiration_minutes', data.invite_expiration_minutes);
                 return _context62.abrupt("return", this._networkClient.fetchSDK({
                   url: '/b2b/magic_links/email/invite',
                   body: data,
@@ -2397,7 +2418,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
           return _regeneratorRuntime().wrap(function _callee63$(_context63) {
             while (1) switch (_context63.prev = _context63.next) {
               case 0:
-                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isString('organization_id', data.organization_id).isOptionalString('login_redirect_url', data.login_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_redirect_url', data.signup_redirect_url).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale);
+                validate('stytch.magicLinks.email.loginOrSignup').isString('email_address', data.email_address).isString('organization_id', data.organization_id).isOptionalString('login_redirect_url', data.login_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_redirect_url', data.signup_redirect_url).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale).isOptionalNumber('login_expiration_minutes', data.login_expiration_minutes).isOptionalNumber('signup_expiration_minutes', data.signup_expiration_minutes);
                 _context63.next = 3;
                 return this.getCodeChallenge();
               case 3:
@@ -2424,7 +2445,7 @@ var HeadlessB2BMagicLinksClient = /*#__PURE__*/function () {
             return _regeneratorRuntime().wrap(function _callee64$(_context64) {
               while (1) switch (_context64.prev = _context64.next) {
                 case 0:
-                  validate('stytch.magicLinks.email.discovery.send').isString('email_address', data.email_address).isOptionalString('discovery_redirect_url', data.discovery_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale);
+                  validate('stytch.magicLinks.email.discovery.send').isString('email_address', data.email_address).isOptionalString('discovery_redirect_url', data.discovery_redirect_url).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale).isOptionalNumber('discovery_expiration_minutes', data.discovery_expiration_minutes);
                   _context64.next = 3;
                   return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
                 case 3:
@@ -4921,7 +4942,7 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
         return _regeneratorRuntime().wrap(function _callee135$(_context135) {
           while (1) switch (_context135.prev = _context135.next) {
             case 0:
-              validate('stytch.otps.email.loginOrSignup').isString('organization_id', data.organization_id).isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale);
+              validate('stytch.otps.email.loginOrSignup').isString('organization_id', data.organization_id).isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale).isOptionalNumber('login_expiration_minutes', data.login_expiration_minutes).isOptionalNumber('signup_expiration_minutes', data.signup_expiration_minutes);
               _context135.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
@@ -5006,7 +5027,7 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
           return _regeneratorRuntime().wrap(function _callee137$(_context137) {
             while (1) switch (_context137.prev = _context137.next) {
               case 0:
-                validate('stytch.otps.email.discovery.send').isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale);
+                validate('stytch.otps.email.discovery.send').isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale).isOptionalNumber('discovery_expiration_minutes', data.discovery_expiration_minutes);
                 _context137.next = 3;
                 return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
               case 3:
@@ -5518,11 +5539,11 @@ var SearchDataManager = /*#__PURE__*/function () {
   return _createClass(SearchDataManager, [{
     key: "searchUser",
     value: function searchUser(email) {
-      var _this30 = this;
+      var _this29 = this;
       return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha().then(function (_ref10) {
         var dfp_telemetry_id = _ref10.dfp_telemetry_id,
           captcha_token = _ref10.captcha_token;
-        return _this30._networkClient.fetchSDK({
+        return _this29._networkClient.fetchSDK({
           url: "/users/search",
           method: 'POST',
           body: {
@@ -5581,53 +5602,53 @@ var SessionManagerRegistry = /*#__PURE__*/function () {
 }();
 var SessionManager = /*#__PURE__*/function () {
   function SessionManager(_subscriptionService, _headlessSessionClient, _publicToken) {
-    var _this31 = this;
+    var _this30 = this;
     _classCallCheck(this, SessionManager);
     this._subscriptionService = _subscriptionService;
     this._headlessSessionClient = _headlessSessionClient;
     this._publicToken = _publicToken;
     this._onDataChange = function (state) {
       if (shouldTryRefresh(state)) {
-        _this31.scheduleBackgroundRefresh();
+        _this30.scheduleBackgroundRefresh();
       } else {
-        _this31.cancelBackgroundRefresh();
+        _this30.cancelBackgroundRefresh();
       }
     };
     this._reauthenticateWithBackoff = function () {
-      return __awaiter$1(_this31, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee147() {
+      return __awaiter$1(_this30, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee146() {
         var count;
-        return _regeneratorRuntime().wrap(function _callee147$(_context147) {
-          while (1) switch (_context147.prev = _context147.next) {
+        return _regeneratorRuntime().wrap(function _callee146$(_context146) {
+          while (1) switch (_context146.prev = _context146.next) {
             case 0:
               count = 0;
             case 1:
-              _context147.prev = 2;
-              _context147.next = 5;
+              _context146.prev = 2;
+              _context146.next = 5;
               return this._headlessSessionClient.authenticate();
             case 5:
-              return _context147.abrupt("return", _context147.sent);
+              return _context146.abrupt("return", _context146.sent);
             case 8:
-              _context147.prev = 8;
-              _context147.t0 = _context147["catch"](2);
-              if (!SessionManager.isUnrecoverableError(_context147.t0)) {
-                _context147.next = 12;
+              _context146.prev = 8;
+              _context146.t0 = _context146["catch"](2);
+              if (!SessionManager.isUnrecoverableError(_context146.t0)) {
+                _context146.next = 12;
                 break;
               }
-              return _context147.abrupt("return", Promise.reject(_context147.t0));
+              return _context146.abrupt("return", Promise.reject(_context146.t0));
             case 12:
               count++;
-              _context147.next = 15;
+              _context146.next = 15;
               return new Promise(function (done) {
                 return setTimeout(done, SessionManager.timeoutForAttempt(count));
               });
             case 15:
-              _context147.next = 1;
+              _context146.next = 1;
               break;
             case 17:
             case "end":
-              return _context147.stop();
+              return _context146.stop();
           }
-        }, _callee147, this, [[2, 8]]);
+        }, _callee146, this, [[2, 8]]);
       }));
     };
     this.timeout = null;
@@ -5646,24 +5667,24 @@ var SessionManager = /*#__PURE__*/function () {
   }, {
     key: "performBackgroundRefresh",
     value: function performBackgroundRefresh() {
-      var _this32 = this;
+      var _this31 = this;
       this._reauthenticateWithBackoff().then(function () {
-        _this32.scheduleBackgroundRefresh();
+        _this31.scheduleBackgroundRefresh();
       })["catch"](function (error) {
         logger.warn('Session background refresh failed. Signalling to app that user is logged out.', {
           error: error
         });
-        _this32._subscriptionService.destroySession();
+        _this31._subscriptionService.destroySession();
       });
     }
   }, {
     key: "scheduleBackgroundRefresh",
     value: function scheduleBackgroundRefresh() {
-      var _this33 = this;
+      var _this32 = this;
       this.cancelBackgroundRefresh();
       this.register();
       this.timeout = setTimeout(function () {
-        _this33.performBackgroundRefresh();
+        _this32.performBackgroundRefresh();
       }, SessionManager.REFRESH_INTERVAL_MS);
     }
   }, {
@@ -5693,13 +5714,13 @@ var SessionManager = /*#__PURE__*/function () {
 SessionManager.REFRESH_INTERVAL_MS = 1000 * 60 * 3;
 SessionManager.registry = new SessionManagerRegistry();
 var StateChangeClient = /*#__PURE__*/_createClass(function StateChangeClient(_subscriptionService, emptyState) {
-  var _this34 = this;
+  var _this33 = this;
   _classCallCheck(this, StateChangeClient);
   this._subscriptionService = _subscriptionService;
   this.emptyState = emptyState;
   this.onStateChange = function (callback) {
-    return _this34._subscriptionService.subscribeToState(function (state) {
-      callback(state !== null && state !== void 0 ? state : _this34.emptyState);
+    return _this33._subscriptionService.subscribeToState(function (state) {
+      callback(state !== null && state !== void 0 ? state : _this33.emptyState);
     });
   };
 });
@@ -5826,4 +5847,4 @@ var readB2BInternals = function readB2BInternals(obj) {
   }
   return casted[internalSymB2B];
 };
-export { RandomNumberGenerationFailed as $, AuthFlowType as A, B2BMFAProducts as B, COUNTRIES_LIST as C, DEFAULT_SESSION_DURATION_MINUTES as D, EMAIL_REGEX as E, FailedCodeChallengeError as F, MissingPKCEError as G, MissingPublicKeyError as H, IDPOAuthFlowMissingParamError as I, JSONDataNotConvertibleToStringError as J, KeyInvalidatedError as K, MissingUrlError as L, MissingAttestationObjectError as M, NoCurrentSessionError as N, OAuthProviders as O, Products as P, NoBiometricsEnrolledError as Q, RedirectURLType as R, StytchEventType as S, NoBiometricsRegistrationError as T, NoCredentialsPresentError as U, PasskeysInvalidEncoding as V, Wallets as W, PasskeysMisconfigured as X, PasskeysUnsupportedError as Y, RNUIProducts as Z, __rest as _, B2BProducts as a, SDKAPIUnreachableError as a0, SDKNotConfiguredError as a1, SignInWithAppleMisconfigured as a2, StytchAPISchemaError as a3, StytchAPIUnreachableError as a4, StytchError as a5, StytchSDKAPIError as a6, StytchSDKSchemaError as a7, StytchSDKUsageError as a8, UNRECOVERABLE_ERROR_TYPES as a9, DFPProtectedAuthProvider as aA, HeadlessB2BOrganizationClient as aB, HeadlessB2BSelfClient as aC, HeadlessB2BSessionClient as aD, HeadlessB2BMagicLinksClient as aE, HeadlessB2BSSOClient as aF, HeadlessB2BDiscoveryClient as aG, HeadlessB2BPasswordsClient as aH, HeadlessB2BOTPsClient as aI, HeadlessB2BTOTPsClient as aJ, HeadlessB2BRecoveryCodesClient as aK, HeadlessB2BRBACClient as aL, HeadlessB2BSCIMClient as aM, HeadlessB2BImpersonationClient as aN, SessionManager as aO, SearchDataManager as aP, VERTICAL_CONSUMER as aQ, writeB2BInternals as aR, UserCancellationError as aa, UserLockedOutError as ab, errorToStytchError as ac, createDeepEqual as ad, getPersistentStorageKey as ae, loadESModule as af, IframeHostClient as ag, EventLogger as ah, DEFAULT_MAX_BATCH_SIZE as ai, DEFAULT_INTERVAL_DURATION_MS as aj, createEventId as ak, createAppSessionId as al, createPersistentId as am, baseFetchSDK as an, baseSubmitFormSDK as ao, retriableFetchSDK as ap, validate as aq, hasMultipleCookies as ar, isLocalhost as as, HeadlessB2BOAuthClient$1 as at, DisabledDFPProtectedAuthProvider as au, GOOGLE_ONE_TAP_HOST as av, GOOGLE_ONE_TAP_SCRIPT_URL as aw, checkPublicToken as ax, buildFinalConfig as ay, StateChangeClient as az, OTPMethods as b, B2BOAuthProviders as c, __awaiter as d, StytchAPIError as e, OneTapPositions as f, debounce as g, StytchSDKError as h, isTestPublicToken as i, checkB2BNotSSR as j, BiometricsAlreadyEnrolledError as k, logger as l, BiometricsFailedError as m, BiometricsUnavailableError as n, ChallengeSigningFailedError as o, DeviceCredentialsNotAllowedError as p, FailedToDecryptDataError as q, readB2BInternals as r, InternalError as s, InvalidAuthorizationCredentialError as t, InvalidCredentialTypeError as u, InvalidRedirectSchemeError as v, InvalidStartUrlError as w, KeystoreUnavailableError as x, MissingAuthorizationCredentialIDTokenError as y, MissingGoogleClientIDError as z };
+export { PasskeysMisconfigured as $, AuthFlowType as A, B2BMFAProducts as B, COUNTRIES_LIST as C, DEFAULT_SESSION_DURATION_MINUTES as D, EMAIL_REGEX as E, FailedCodeChallengeError as F, MissingAuthorizationCredentialIDTokenError as G, MissingCipherIv as H, IDPOAuthFlowMissingParamError as I, JSONDataNotConvertibleToStringError as J, KeyInvalidatedError as K, MissingGoogleClientIDError as L, MissingAttestationObjectError as M, NoCurrentSessionError as N, OAuthProviders as O, Products as P, MissingPKCEError as Q, RedirectURLType as R, StytchEventType as S, MissingPublicKeyError as T, MissingUrlError as U, NoBiometricsEnrolledError as V, Wallets as W, NoBiometricsRegistrationError as X, NoCredentialsPresentError as Y, PasskeysInvalidEncoding as Z, __rest as _, B2BProducts as a, PasskeysUnsupportedError as a0, RNUIProducts as a1, RandomNumberGenerationFailed as a2, SDKAPIUnreachableError as a3, SDKNotConfiguredError as a4, SignInWithAppleMisconfigured as a5, StytchAPISchemaError as a6, StytchAPIUnreachableError as a7, StytchError as a8, StytchSDKAPIError as a9, checkPublicToken as aA, buildFinalConfig as aB, StateChangeClient as aC, DFPProtectedAuthProvider as aD, HeadlessB2BOrganizationClient as aE, HeadlessB2BSelfClient as aF, HeadlessB2BSessionClient as aG, HeadlessB2BMagicLinksClient as aH, HeadlessB2BSSOClient as aI, HeadlessB2BDiscoveryClient as aJ, HeadlessB2BPasswordsClient as aK, HeadlessB2BOTPsClient as aL, HeadlessB2BTOTPsClient as aM, HeadlessB2BRecoveryCodesClient as aN, HeadlessB2BRBACClient as aO, HeadlessB2BSCIMClient as aP, HeadlessB2BImpersonationClient as aQ, SessionManager as aR, SearchDataManager as aS, VERTICAL_CONSUMER as aT, writeB2BInternals as aU, StytchSDKSchemaError as aa, StytchSDKUsageError as ab, UNRECOVERABLE_ERROR_TYPES as ac, UserCancellationError as ad, UserLockedOutError as ae, errorToStytchError as af, createDeepEqual as ag, getPersistentStorageKey as ah, loadESModule as ai, IframeHostClient as aj, EventLogger as ak, DEFAULT_MAX_BATCH_SIZE as al, DEFAULT_INTERVAL_DURATION_MS as am, createEventId as an, createAppSessionId as ao, createPersistentId as ap, baseFetchSDK as aq, baseSubmitFormSDK as ar, retriableFetchSDK as as, validate as at, hasMultipleCookies as au, isLocalhost as av, HeadlessB2BOAuthClient$1 as aw, DisabledDFPProtectedAuthProvider as ax, GOOGLE_ONE_TAP_HOST as ay, GOOGLE_ONE_TAP_SCRIPT_URL as az, OTPMethods as b, B2BOAuthProviders as c, __awaiter as d, StytchAPIError as e, OneTapPositions as f, debounce as g, StytchSDKError as h, isTestPublicToken as i, checkB2BNotSSR as j, BiometricRegistrationIdIsNullOrBlank as k, logger as l, BiometricsAlreadyEnrolledError as m, BiometricsFailedError as n, BiometricsUnavailableError as o, ChallengeSigningFailedError as p, DeviceCredentialsNotAllowedError as q, readB2BInternals as r, FailedToDecryptDataError as s, InternalError as t, InvalidAuthorizationCredentialError as u, InvalidCredentialTypeError as v, InvalidPrivateKeyLength as w, InvalidRedirectSchemeError as x, InvalidStartUrlError as y, KeystoreUnavailableError as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stytch/vanilla-js",
-  "version": "5.22.2",
+  "version": "5.22.4",
   "description": "Stytch's official Javascript Client Library",
   "main": "./dist/index.js",
   "module": "./dist/index.esm.js",
@@ -39,7 +39,7 @@
     "hoistingLimits": "workspaces"
   },
   "dependencies": {
-    "@stytch/core": "2.47.1",
+    "@stytch/core": "2.48.0",
     "@types/google-one-tap": "^1.2.0",
     "type-fest": "4.15.0"
   },
@@ -108,7 +108,7 @@
     "swr": "2.1.1",
     "typescript": "5.3.3",
     "uuid": "8.3.2",
-    "vite": "6.2.5",
+    "vite": "6.2.6",
     "wait-on": "7.2.0"
   },
   "homepage": "https://stytch.com/docs/sdks/javascript-sdk",