@stytch/vanilla-js 5.6.2 → 5.8.0

package/dist/{internal-B_3PRrIX.js → internal-HC6WhS3G.js}

@@ -204,6 +204,7 @@ var StytchEventType;
   StytchEventType["B2BDiscoveryOrganizationsCreate"] = "B2B_DISCOVERY_ORGANIZATIONS_CREATE";
   StytchEventType["B2BDiscoveryIntermediateSessionExchange"] = "B2B_DISCOVERY_INTERMEDIATE_SESSION_EXCHANGE";
   StytchEventType["B2BPasswordAuthenticate"] = "B2B_PASSWORD_AUTHENTICATE";
+  StytchEventType["B2BPasswordDiscoveryAuthenticate"] = "B2B_PASSWORD_DISCOVERY_AUTHENTICATE";
   StytchEventType["B2BPasswordResetByEmailStart"] = "B2B_PASSWORD_RESET_BY_EMAIL_START";
   StytchEventType["B2BPasswordResetByEmail"] = "B2B_PASSWORD_RESET_BY_EMAIL";
   StytchEventType["B2BPasswordResetBySession"] = "B2B_PASSWORD_RESET_BY_SESSION";
@@ -212,6 +213,8 @@ var StytchEventType;
   StytchEventType["B2BTOTPCreate"] = "B2B_TOTP_CREATE";
   StytchEventType["B2BTOTPAuthenticate"] = "B2B_TOTP_AUTHENTICATE";
   StytchEventType["B2BRecoveryCodesRecover"] = "B2B_RECOVERY_CODES_RECOVER";
+  StytchEventType["B2BPasswordDiscoveryResetStart"] = "B2B_PASSWORD_DISCOVERY_RESET_BY_EMAIL_START";
+  StytchEventType["B2BDiscoveryPasswordReset"] = "B2B_PASSWORD_DISCOVERY_RESET_BY_EMAIL";
 })(StytchEventType || (StytchEventType = {}));
 var RNUIProducts;
 (function (RNUIProducts) {
@@ -689,6 +692,7 @@ function errorToStytchError(error) {
 var B2BProducts;
 (function (B2BProducts) {
   B2BProducts["emailMagicLinks"] = "emailMagicLinks";
+  B2BProducts["emailOtp"] = "emailOtp";
   B2BProducts["sso"] = "sso";
   B2BProducts["passwords"] = "passwords";
   B2BProducts["oauth"] = "oauth";
@@ -4227,6 +4231,7 @@ var DefaultDynamicConfig = Promise.resolve({
 });
 var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
   function HeadlessB2BPasswordsClient(_networkClient, _subscriptionService, _pkceManager) {
+    var _this19 = this;
     var _config = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : DefaultDynamicConfig;
     var dfpProtectedAuth = arguments.length > 4 ? arguments[4] : undefined;
     _classCallCheck(this, HeadlessB2BPasswordsClient);
@@ -4235,110 +4240,267 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
     this._pkceManager = _pkceManager;
     this._config = _config;
     this.dfpProtectedAuth = dfpProtectedAuth;
+    this.discovery = {
+      resetByEmailStart: function resetByEmailStart(options) {
+        return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee119() {
+          var code_challenge, _yield$this$dfpProtec24, dfp_telemetry_id, captcha_token;
+          return _regeneratorRuntime().wrap(function _callee119$(_context119) {
+            while (1) switch (_context119.prev = _context119.next) {
+              case 0:
+                validate('stytch.passwords.discovery.resetByEmailStart').isString('email', options.email_address).isOptionalString('login_redirect_url', options.discovery_redirect_url).isOptionalString('reset_password_redirect_url', options.reset_password_redirect_url).isOptionalString('reset_password_template_id', options.reset_password_template_id).isOptionalNumber('reset_password_expiration_minutes', options.reset_password_expiration_minutes);
+                _context119.next = 3;
+                return this.getCodeChallenge();
+              case 3:
+                code_challenge = _context119.sent;
+                _context119.next = 6;
+                return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+              case 6:
+                _yield$this$dfpProtec24 = _context119.sent;
+                dfp_telemetry_id = _yield$this$dfpProtec24.dfp_telemetry_id;
+                captcha_token = _yield$this$dfpProtec24.captcha_token;
+                return _context119.abrupt("return", this._networkClient.retriableFetchSDK({
+                  url: '/b2b/passwords/discovery/reset/start',
+                  method: 'POST',
+                  body: {
+                    email_address: options.email_address,
+                    discovery_redirect_url: options.discovery_redirect_url,
+                    reset_password_redirect_url: options.reset_password_redirect_url,
+                    reset_password_expiration_minutes: options.reset_password_expiration_minutes,
+                    reset_password_template_id: options.reset_password_template_id,
+                    code_challenge: code_challenge,
+                    captcha_token: captcha_token,
+                    dfp_telemetry_id: dfp_telemetry_id
+                  },
+                  retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+                }));
+              case 10:
+              case "end":
+                return _context119.stop();
+            }
+          }, _callee119, this);
+        }));
+      },
+      resetByEmail: function resetByEmail(options) {
+        return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee120() {
+          var _yield$this$dfpProtec25, dfp_telemetry_id, captcha_token, pkPair, code_verifier, resp;
+          return _regeneratorRuntime().wrap(function _callee120$(_context120) {
+            while (1) switch (_context120.prev = _context120.next) {
+              case 0:
+                validate('stytch.passwords.discovery.resetByEmail').isString('password_reset_token', options.password_reset_token).isString('password', options.password);
+                _context120.next = 3;
+                return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+              case 3:
+                _yield$this$dfpProtec25 = _context120.sent;
+                dfp_telemetry_id = _yield$this$dfpProtec25.dfp_telemetry_id;
+                captcha_token = _yield$this$dfpProtec25.captcha_token;
+                _context120.next = 8;
+                return this._pkceManager.getPKPair();
+              case 8:
+                pkPair = _context120.sent;
+                code_verifier = pkPair === null || pkPair === void 0 ? void 0 : pkPair.code_verifier;
+                _context120.t0 = this._networkClient;
+                _context120.t1 = options.password_reset_token;
+                _context120.t2 = options.password;
+                _context120.t3 = captcha_token;
+                _context120.t4 = dfp_telemetry_id;
+                _context120.t5 = code_verifier;
+                _context120.next = 18;
+                return this._subscriptionService.getIntermediateSessionToken();
+              case 18:
+                _context120.t6 = _context120.sent;
+                if (_context120.t6) {
+                  _context120.next = 21;
+                  break;
+                }
+                _context120.t6 = undefined;
+              case 21:
+                _context120.t7 = _context120.t6;
+                _context120.t8 = {
+                  password_reset_token: _context120.t1,
+                  password: _context120.t2,
+                  captcha_token: _context120.t3,
+                  dfp_telemetry_id: _context120.t4,
+                  code_verifier: _context120.t5,
+                  intermediate_session_token: _context120.t7
+                };
+                _context120.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+                _context120.t10 = {
+                  url: '/b2b/passwords/discovery/reset',
+                  method: 'POST',
+                  body: _context120.t8,
+                  retryCallback: _context120.t9
+                };
+                _context120.next = 27;
+                return _context120.t0.retriableFetchSDK.call(_context120.t0, _context120.t10);
+              case 27:
+                resp = _context120.sent;
+                this._pkceManager.clearPKPair();
+                this._subscriptionService.updateStateAndTokens({
+                  state: null,
+                  session_token: null,
+                  session_jwt: null,
+                  intermediate_session_token: resp.intermediate_session_token
+                });
+                return _context120.abrupt("return", resp);
+              case 31:
+              case "end":
+                return _context120.stop();
+            }
+          }, _callee120, this);
+        }));
+      },
+      authenticate: function authenticate(options) {
+        return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee121() {
+          var pkPair, code_verifier, _yield$this$dfpProtec26, dfp_telemetry_id, captcha_token, resp;
+          return _regeneratorRuntime().wrap(function _callee121$(_context121) {
+            while (1) switch (_context121.prev = _context121.next) {
+              case 0:
+                validate('stytch.passwords.discovery.authenticate').isString('password', options.password).isString('email_address', options.email_address);
+                _context121.next = 3;
+                return this._pkceManager.getPKPair();
+              case 3:
+                pkPair = _context121.sent;
+                code_verifier = pkPair === null || pkPair === void 0 ? void 0 : pkPair.code_verifier;
+                _context121.next = 7;
+                return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
+              case 7:
+                _yield$this$dfpProtec26 = _context121.sent;
+                dfp_telemetry_id = _yield$this$dfpProtec26.dfp_telemetry_id;
+                captcha_token = _yield$this$dfpProtec26.captcha_token;
+                _context121.next = 12;
+                return this._networkClient.retriableFetchSDK({
+                  url: '/b2b/passwords/discovery/authenticate',
+                  method: 'POST',
+                  body: {
+                    email_address: options.email_address,
+                    password: options.password,
+                    captcha_token: captcha_token,
+                    dfp_telemetry_id: dfp_telemetry_id,
+                    code_verifier: code_verifier
+                  },
+                  retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
+                });
+              case 12:
+                resp = _context121.sent;
+                this._subscriptionService.updateStateAndTokens({
+                  state: null,
+                  session_token: null,
+                  session_jwt: null,
+                  intermediate_session_token: resp.intermediate_session_token
+                });
+                return _context121.abrupt("return", resp);
+              case 15:
+              case "end":
+                return _context121.stop();
+            }
+          }, _callee121, this);
+        }));
+      }
+    };
   }
   _createClass(HeadlessB2BPasswordsClient, [{
     key: "getCodeChallenge",
     value: function getCodeChallenge() {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee119() {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee122() {
         var _yield$this$_config6, pkceRequiredForPasswordResets, keyPair;
-        return _regeneratorRuntime().wrap(function _callee119$(_context119) {
-          while (1) switch (_context119.prev = _context119.next) {
+        return _regeneratorRuntime().wrap(function _callee122$(_context122) {
+          while (1) switch (_context122.prev = _context122.next) {
             case 0:
-              _context119.next = 2;
+              _context122.next = 2;
               return this._config;
             case 2:
-              _yield$this$_config6 = _context119.sent;
+              _yield$this$_config6 = _context122.sent;
               pkceRequiredForPasswordResets = _yield$this$_config6.pkceRequiredForPasswordResets;
               if (pkceRequiredForPasswordResets) {
-                _context119.next = 6;
+                _context122.next = 6;
                 break;
               }
-              return _context119.abrupt("return", undefined);
+              return _context122.abrupt("return", undefined);
             case 6:
-              _context119.next = 8;
+              _context122.next = 8;
               return this._pkceManager.getPKPair();
             case 8:
-              keyPair = _context119.sent;
+              keyPair = _context122.sent;
               if (!keyPair) {
-                _context119.next = 11;
+                _context122.next = 11;
                 break;
               }
-              return _context119.abrupt("return", keyPair.code_challenge);
+              return _context122.abrupt("return", keyPair.code_challenge);
             case 11:
-              _context119.next = 13;
+              _context122.next = 13;
               return this._pkceManager.startPKCETransaction();
             case 13:
-              keyPair = _context119.sent;
-              return _context119.abrupt("return", keyPair.code_challenge);
+              keyPair = _context122.sent;
+              return _context122.abrupt("return", keyPair.code_challenge);
             case 15:
             case "end":
-              return _context119.stop();
+              return _context122.stop();
           }
-        }, _callee119, this);
+        }, _callee122, this);
       }));
     }
   }, {
     key: "authenticate",
     value: function authenticate(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee120() {
-        var pkPair, code_verifier, _yield$this$dfpProtec24, dfp_telemetry_id, captcha_token, resp;
-        return _regeneratorRuntime().wrap(function _callee120$(_context120) {
-          while (1) switch (_context120.prev = _context120.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee123() {
+        var pkPair, code_verifier, _yield$this$dfpProtec27, dfp_telemetry_id, captcha_token, resp;
+        return _regeneratorRuntime().wrap(function _callee123$(_context123) {
+          while (1) switch (_context123.prev = _context123.next) {
             case 0:
               validate('stytch.passwords.authenticate').isString('org_id', options.organization_id).isString('password', options.password).isString('email_address', options.email_address).isNumber('session_duration_minutes', options.session_duration_minutes).isOptionalString('locale', options.locale);
-              _context120.next = 3;
+              _context123.next = 3;
               return this._pkceManager.getPKPair();
             case 3:
-              pkPair = _context120.sent;
+              pkPair = _context123.sent;
               code_verifier = pkPair === null || pkPair === void 0 ? void 0 : pkPair.code_verifier;
-              _context120.next = 7;
+              _context123.next = 7;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 7:
-              _yield$this$dfpProtec24 = _context120.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec24.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec24.captcha_token;
-              _context120.t0 = this._networkClient;
-              _context120.t1 = options.organization_id;
-              _context120.t2 = options.email_address;
-              _context120.t3 = options.password;
-              _context120.t4 = options.session_duration_minutes;
-              _context120.t5 = options.locale;
-              _context120.t6 = captcha_token;
-              _context120.t7 = dfp_telemetry_id;
-              _context120.t8 = code_verifier;
-              _context120.next = 21;
+              _yield$this$dfpProtec27 = _context123.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec27.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec27.captcha_token;
+              _context123.t0 = this._networkClient;
+              _context123.t1 = options.organization_id;
+              _context123.t2 = options.email_address;
+              _context123.t3 = options.password;
+              _context123.t4 = options.session_duration_minutes;
+              _context123.t5 = options.locale;
+              _context123.t6 = captcha_token;
+              _context123.t7 = dfp_telemetry_id;
+              _context123.t8 = code_verifier;
+              _context123.next = 21;
               return this._subscriptionService.getIntermediateSessionToken();
             case 21:
-              _context120.t9 = _context120.sent;
-              if (_context120.t9) {
-                _context120.next = 24;
+              _context123.t9 = _context123.sent;
+              if (_context123.t9) {
+                _context123.next = 24;
                 break;
               }
-              _context120.t9 = undefined;
+              _context123.t9 = undefined;
             case 24:
-              _context120.t10 = _context120.t9;
-              _context120.t11 = {
-                organization_id: _context120.t1,
-                email_address: _context120.t2,
-                password: _context120.t3,
-                session_duration_minutes: _context120.t4,
-                locale: _context120.t5,
-                captcha_token: _context120.t6,
-                dfp_telemetry_id: _context120.t7,
-                code_verifier: _context120.t8,
-                intermediate_session_token: _context120.t10
+              _context123.t10 = _context123.t9;
+              _context123.t11 = {
+                organization_id: _context123.t1,
+                email_address: _context123.t2,
+                password: _context123.t3,
+                session_duration_minutes: _context123.t4,
+                locale: _context123.t5,
+                captcha_token: _context123.t6,
+                dfp_telemetry_id: _context123.t7,
+                code_verifier: _context123.t8,
+                intermediate_session_token: _context123.t10
               };
-              _context120.t12 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
-              _context120.t13 = {
+              _context123.t12 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+              _context123.t13 = {
                 url: '/b2b/passwords/authenticate',
                 method: 'POST',
-                body: _context120.t11,
-                retryCallback: _context120.t12
+                body: _context123.t11,
+                retryCallback: _context123.t12
               };
-              _context120.next = 30;
-              return _context120.t0.retriableFetchSDK.call(_context120.t0, _context120.t13);
+              _context123.next = 30;
+              return _context123.t0.retriableFetchSDK.call(_context123.t0, _context123.t13);
             case 30:
-              resp = _context120.sent;
+              resp = _context123.sent;
               if (resp.member_session) {
                 this._subscriptionService.updateStateAndTokens({
                   state: {
@@ -4358,34 +4520,34 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                   intermediate_session_token: resp.intermediate_session_token
                 });
               }
-              return _context120.abrupt("return", resp);
+              return _context123.abrupt("return", resp);
             case 33:
             case "end":
-              return _context120.stop();
+              return _context123.stop();
           }
-        }, _callee120, this);
+        }, _callee123, this);
       }));
     }
   }, {
     key: "resetByEmailStart",
     value: function resetByEmailStart(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee121() {
-        var code_challenge, _yield$this$dfpProtec25, dfp_telemetry_id, captcha_token;
-        return _regeneratorRuntime().wrap(function _callee121$(_context121) {
-          while (1) switch (_context121.prev = _context121.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee124() {
+        var code_challenge, _yield$this$dfpProtec28, dfp_telemetry_id, captcha_token;
+        return _regeneratorRuntime().wrap(function _callee124$(_context124) {
+          while (1) switch (_context124.prev = _context124.next) {
             case 0:
               validate('stytch.passwords.resetByEmailStart').isString('email', options.email_address).isOptionalString('login_redirect_url', options.login_redirect_url).isOptionalString('reset_password_redirect_url', options.reset_password_redirect_url).isOptionalString('reset_password_template_id', options.reset_password_template_id).isOptionalNumber('reset_password_expiration_minutes', options.reset_password_expiration_minutes);
-              _context121.next = 3;
+              _context124.next = 3;
               return this.getCodeChallenge();
             case 3:
-              code_challenge = _context121.sent;
-              _context121.next = 6;
+              code_challenge = _context124.sent;
+              _context124.next = 6;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 6:
-              _yield$this$dfpProtec25 = _context121.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec25.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec25.captcha_token;
-              return _context121.abrupt("return", this._networkClient.retriableFetchSDK({
+              _yield$this$dfpProtec28 = _context124.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec28.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec28.captcha_token;
+              return _context124.abrupt("return", this._networkClient.retriableFetchSDK({
                 url: '/b2b/passwords/email/reset/start',
                 method: 'POST',
                 body: {
@@ -4403,71 +4565,71 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
               }));
             case 10:
             case "end":
-              return _context121.stop();
+              return _context124.stop();
           }
-        }, _callee121, this);
+        }, _callee124, this);
       }));
     }
   }, {
     key: "resetByEmail",
     value: function resetByEmail(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee122() {
-        var _yield$this$dfpProtec26, dfp_telemetry_id, captcha_token, pkPair, code_verifier, resp;
-        return _regeneratorRuntime().wrap(function _callee122$(_context122) {
-          while (1) switch (_context122.prev = _context122.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee125() {
+        var _yield$this$dfpProtec29, dfp_telemetry_id, captcha_token, pkPair, code_verifier, resp;
+        return _regeneratorRuntime().wrap(function _callee125$(_context125) {
+          while (1) switch (_context125.prev = _context125.next) {
             case 0:
               validate('stytch.passwords.resetByEmail').isString('password_reset_token', options.password_reset_token).isString('password', options.password).isNumber('session_duration_minutes', options.session_duration_minutes).isOptionalString('locale', options.locale);
-              _context122.next = 3;
+              _context125.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec26 = _context122.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec26.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec26.captcha_token;
-              _context122.next = 8;
+              _yield$this$dfpProtec29 = _context125.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec29.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec29.captcha_token;
+              _context125.next = 8;
               return this._pkceManager.getPKPair();
             case 8:
-              pkPair = _context122.sent;
+              pkPair = _context125.sent;
               code_verifier = pkPair === null || pkPair === void 0 ? void 0 : pkPair.code_verifier;
-              _context122.t0 = this._networkClient;
-              _context122.t1 = options.password_reset_token;
-              _context122.t2 = options.password;
-              _context122.t3 = options.session_duration_minutes;
-              _context122.t4 = options.locale;
-              _context122.t5 = captcha_token;
-              _context122.t6 = dfp_telemetry_id;
-              _context122.t7 = code_verifier;
-              _context122.next = 20;
+              _context125.t0 = this._networkClient;
+              _context125.t1 = options.password_reset_token;
+              _context125.t2 = options.password;
+              _context125.t3 = options.session_duration_minutes;
+              _context125.t4 = options.locale;
+              _context125.t5 = captcha_token;
+              _context125.t6 = dfp_telemetry_id;
+              _context125.t7 = code_verifier;
+              _context125.next = 20;
               return this._subscriptionService.getIntermediateSessionToken();
             case 20:
-              _context122.t8 = _context122.sent;
-              if (_context122.t8) {
-                _context122.next = 23;
+              _context125.t8 = _context125.sent;
+              if (_context125.t8) {
+                _context125.next = 23;
                 break;
               }
-              _context122.t8 = undefined;
+              _context125.t8 = undefined;
             case 23:
-              _context122.t9 = _context122.t8;
-              _context122.t10 = {
-                password_reset_token: _context122.t1,
-                password: _context122.t2,
-                session_duration_minutes: _context122.t3,
-                locale: _context122.t4,
-                captcha_token: _context122.t5,
-                dfp_telemetry_id: _context122.t6,
-                code_verifier: _context122.t7,
-                intermediate_session_token: _context122.t9
+              _context125.t9 = _context125.t8;
+              _context125.t10 = {
+                password_reset_token: _context125.t1,
+                password: _context125.t2,
+                session_duration_minutes: _context125.t3,
+                locale: _context125.t4,
+                captcha_token: _context125.t5,
+                dfp_telemetry_id: _context125.t6,
+                code_verifier: _context125.t7,
+                intermediate_session_token: _context125.t9
               };
-              _context122.t11 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
-              _context122.t12 = {
+              _context125.t11 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+              _context125.t12 = {
                 url: '/b2b/passwords/email/reset',
                 method: 'POST',
-                body: _context122.t10,
-                retryCallback: _context122.t11
+                body: _context125.t10,
+                retryCallback: _context125.t11
               };
-              _context122.next = 29;
-              return _context122.t0.retriableFetchSDK.call(_context122.t0, _context122.t12);
+              _context125.next = 29;
+              return _context125.t0.retriableFetchSDK.call(_context125.t0, _context125.t12);
             case 29:
-              resp = _context122.sent;
+              resp = _context125.sent;
               this._pkceManager.clearPKPair();
               if (resp.member_session) {
                 this._subscriptionService.updateStateAndTokens({
@@ -4488,30 +4650,30 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                   intermediate_session_token: resp.intermediate_session_token
                 });
               }
-              return _context122.abrupt("return", resp);
+              return _context125.abrupt("return", resp);
             case 33:
             case "end":
-              return _context122.stop();
+              return _context125.stop();
           }
-        }, _callee122, this);
+        }, _callee125, this);
       }));
     }
   }, {
     key: "resetByExistingPassword",
     value: function resetByExistingPassword(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee123() {
-        var _yield$this$dfpProtec27, dfp_telemetry_id, captcha_token, resp;
-        return _regeneratorRuntime().wrap(function _callee123$(_context123) {
-          while (1) switch (_context123.prev = _context123.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee126() {
+        var _yield$this$dfpProtec30, dfp_telemetry_id, captcha_token, resp;
+        return _regeneratorRuntime().wrap(function _callee126$(_context126) {
+          while (1) switch (_context126.prev = _context126.next) {
             case 0:
               validate('stytch.passwords.resetByExistingPassword').isString('email', options.email_address).isString('existing_password', options.existing_password).isString('new_password', options.new_password).isOptionalString('locale', options.locale);
-              _context123.next = 3;
+              _context126.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec27 = _context123.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec27.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec27.captcha_token;
-              _context123.next = 8;
+              _yield$this$dfpProtec30 = _context126.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec30.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec30.captcha_token;
+              _context126.next = 8;
               return this._networkClient.retriableFetchSDK({
                 url: '/b2b/passwords/existing_password/reset',
                 method: 'POST',
@@ -4528,7 +4690,7 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                 retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
               });
             case 8:
-              resp = _context123.sent;
+              resp = _context126.sent;
               if (resp.member_session) {
                 this._subscriptionService.updateStateAndTokens({
                   state: {
@@ -4548,30 +4710,30 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                   intermediate_session_token: resp.intermediate_session_token
                 });
               }
-              return _context123.abrupt("return", resp);
+              return _context126.abrupt("return", resp);
             case 11:
             case "end":
-              return _context123.stop();
+              return _context126.stop();
           }
-        }, _callee123, this);
+        }, _callee126, this);
       }));
     }
   }, {
     key: "resetBySession",
     value: function resetBySession(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee124() {
-        var _yield$this$dfpProtec28, dfp_telemetry_id, captcha_token, resp;
-        return _regeneratorRuntime().wrap(function _callee124$(_context124) {
-          while (1) switch (_context124.prev = _context124.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee127() {
+        var _yield$this$dfpProtec31, dfp_telemetry_id, captcha_token, resp;
+        return _regeneratorRuntime().wrap(function _callee127$(_context127) {
+          while (1) switch (_context127.prev = _context127.next) {
             case 0:
               validate('stytch.passwords.resetBySession').isString('password', options.password);
-              _context124.next = 3;
+              _context127.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec28 = _context124.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec28.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec28.captcha_token;
-              _context124.next = 8;
+              _yield$this$dfpProtec31 = _context127.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec31.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec31.captcha_token;
+              _context127.next = 8;
               return this._networkClient.retriableFetchSDK({
                 url: '/b2b/passwords/session/reset',
                 method: 'POST',
@@ -4583,7 +4745,7 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                 retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
               });
             case 8:
-              resp = _context124.sent;
+              resp = _context127.sent;
               this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: resp.member_session,
@@ -4594,23 +4756,23 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
                 session_jwt: resp.session_jwt,
                 intermediate_session_token: null
               });
-              return _context124.abrupt("return", resp);
+              return _context127.abrupt("return", resp);
             case 11:
             case "end":
-              return _context124.stop();
+              return _context127.stop();
           }
-        }, _callee124, this);
+        }, _callee127, this);
       }));
     }
   }, {
     key: "strengthCheck",
     value: function strengthCheck(options) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee125() {
-        return _regeneratorRuntime().wrap(function _callee125$(_context125) {
-          while (1) switch (_context125.prev = _context125.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee128() {
+        return _regeneratorRuntime().wrap(function _callee128$(_context128) {
+          while (1) switch (_context128.prev = _context128.next) {
             case 0:
               validate('stytch.passwords.strengthCheck').isOptionalString('email', options.email_address).isString('password', options.password);
-              return _context125.abrupt("return", this._networkClient.fetchSDK({
+              return _context128.abrupt("return", this._networkClient.fetchSDK({
                 url: '/b2b/passwords/strength_check',
                 method: 'POST',
                 body: {
@@ -4620,106 +4782,106 @@ var HeadlessB2BPasswordsClient = /*#__PURE__*/function () {
               }));
             case 2:
             case "end":
-              return _context125.stop();
+              return _context128.stop();
           }
-        }, _callee125, this);
+        }, _callee128, this);
       }));
     }
   }]);
   return HeadlessB2BPasswordsClient;
 }();
 var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsClient(_networkClient, _subscriptionService, dfpProtectedAuth) {
-  var _this19 = this;
+  var _this20 = this;
   _classCallCheck(this, HeadlessB2BOTPsClient);
   this._networkClient = _networkClient;
   this._subscriptionService = _subscriptionService;
   this.dfpProtectedAuth = dfpProtectedAuth;
   this.sms = {
     send: function send(data) {
-      return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee126() {
-        var _yield$this$dfpProtec29, dfp_telemetry_id, captcha_token;
-        return _regeneratorRuntime().wrap(function _callee126$(_context126) {
-          while (1) switch (_context126.prev = _context126.next) {
+      return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee129() {
+        var _yield$this$dfpProtec32, dfp_telemetry_id, captcha_token;
+        return _regeneratorRuntime().wrap(function _callee129$(_context129) {
+          while (1) switch (_context129.prev = _context129.next) {
             case 0:
               validate('stytch.otps.sms.send').isString('organization_id', data.organization_id).isString('member_id', data.member_id).isOptionalString('mfa_phone_number', data.mfa_phone_number).isOptionalString('locale', data.locale);
-              _context126.next = 3;
+              _context129.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec29 = _context126.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec29.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec29.captcha_token;
-              _context126.t0 = this._networkClient;
-              _context126.t1 = Object;
-              _context126.t2 = Object.assign({}, data);
-              _context126.t3 = dfp_telemetry_id;
-              _context126.t4 = captcha_token;
-              _context126.next = 13;
+              _yield$this$dfpProtec32 = _context129.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec32.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec32.captcha_token;
+              _context129.t0 = this._networkClient;
+              _context129.t1 = Object;
+              _context129.t2 = Object.assign({}, data);
+              _context129.t3 = dfp_telemetry_id;
+              _context129.t4 = captcha_token;
+              _context129.next = 13;
               return this._subscriptionService.getIntermediateSessionToken();
             case 13:
-              _context126.t5 = _context126.sent;
-              if (_context126.t5) {
-                _context126.next = 16;
+              _context129.t5 = _context129.sent;
+              if (_context129.t5) {
+                _context129.next = 16;
                 break;
               }
-              _context126.t5 = undefined;
+              _context129.t5 = undefined;
             case 16:
-              _context126.t6 = _context126.t5;
-              _context126.t7 = {
-                dfp_telemetry_id: _context126.t3,
-                captcha_token: _context126.t4,
-                intermediate_session_token: _context126.t6
+              _context129.t6 = _context129.t5;
+              _context129.t7 = {
+                dfp_telemetry_id: _context129.t3,
+                captcha_token: _context129.t4,
+                intermediate_session_token: _context129.t6
               };
-              _context126.t8 = _context126.t1.assign.call(_context126.t1, _context126.t2, _context126.t7);
-              _context126.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
-              _context126.t10 = {
+              _context129.t8 = _context129.t1.assign.call(_context129.t1, _context129.t2, _context129.t7);
+              _context129.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+              _context129.t10 = {
                 url: '/b2b/otps/sms/send',
-                body: _context126.t8,
+                body: _context129.t8,
                 method: 'POST',
-                retryCallback: _context126.t9
+                retryCallback: _context129.t9
               };
-              return _context126.abrupt("return", _context126.t0.retriableFetchSDK.call(_context126.t0, _context126.t10));
+              return _context129.abrupt("return", _context129.t0.retriableFetchSDK.call(_context129.t0, _context129.t10));
             case 22:
             case "end":
-              return _context126.stop();
+              return _context129.stop();
           }
-        }, _callee126, this);
+        }, _callee129, this);
       }));
     },
     authenticate: function authenticate(data) {
-      return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee127() {
-        var _yield$this$dfpProtec30, dfp_telemetry_id, captcha_token, requestBody, resp;
-        return _regeneratorRuntime().wrap(function _callee127$(_context127) {
-          while (1) switch (_context127.prev = _context127.next) {
+      return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee130() {
+        var _yield$this$dfpProtec33, dfp_telemetry_id, captcha_token, requestBody, resp;
+        return _regeneratorRuntime().wrap(function _callee130$(_context130) {
+          while (1) switch (_context130.prev = _context130.next) {
             case 0:
               validate('stytch.otps.sms.authenticate').isString('organization_id', data.organization_id).isString('member_id', data.member_id).isString('code', data.code).isOptionalString('set_mfa_enrollment', data.set_mfa_enrollment);
-              _context127.next = 3;
+              _context130.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec30 = _context127.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec30.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec30.captcha_token;
-              _context127.t0 = Object;
-              _context127.t1 = Object.assign({}, data);
-              _context127.t2 = dfp_telemetry_id;
-              _context127.t3 = captcha_token;
-              _context127.next = 12;
+              _yield$this$dfpProtec33 = _context130.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec33.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec33.captcha_token;
+              _context130.t0 = Object;
+              _context130.t1 = Object.assign({}, data);
+              _context130.t2 = dfp_telemetry_id;
+              _context130.t3 = captcha_token;
+              _context130.next = 12;
               return this._subscriptionService.getIntermediateSessionToken();
             case 12:
-              _context127.t4 = _context127.sent;
-              if (_context127.t4) {
-                _context127.next = 15;
+              _context130.t4 = _context130.sent;
+              if (_context130.t4) {
+                _context130.next = 15;
                 break;
               }
-              _context127.t4 = undefined;
+              _context130.t4 = undefined;
             case 15:
-              _context127.t5 = _context127.t4;
-              _context127.t6 = {
-                dfp_telemetry_id: _context127.t2,
-                captcha_token: _context127.t3,
-                intermediate_session_token: _context127.t5
+              _context130.t5 = _context130.t4;
+              _context130.t6 = {
+                dfp_telemetry_id: _context130.t2,
+                captcha_token: _context130.t3,
+                intermediate_session_token: _context130.t5
               };
-              requestBody = _context127.t0.assign.call(_context127.t0, _context127.t1, _context127.t6);
-              _context127.next = 20;
+              requestBody = _context130.t0.assign.call(_context130.t0, _context130.t1, _context130.t6);
+              _context130.next = 20;
               return this._networkClient.retriableFetchSDK({
                 url: '/b2b/otps/sms/authenticate',
                 body: requestBody,
@@ -4727,7 +4889,7 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
                 retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
               });
             case 20:
-              resp = _context127.sent;
+              resp = _context130.sent;
               this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: resp.member_session,
@@ -4738,30 +4900,30 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
                 session_jwt: resp.session_jwt,
                 intermediate_session_token: null
               });
-              return _context127.abrupt("return", resp);
+              return _context130.abrupt("return", resp);
             case 23:
             case "end":
-              return _context127.stop();
+              return _context130.stop();
           }
-        }, _callee127, this);
+        }, _callee130, this);
       }));
     }
   };
   this.email = {
     loginOrSignup: function loginOrSignup(data) {
-      return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee128() {
-        var _yield$this$dfpProtec31, dfp_telemetry_id, captcha_token;
-        return _regeneratorRuntime().wrap(function _callee128$(_context128) {
-          while (1) switch (_context128.prev = _context128.next) {
+      return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee131() {
+        var _yield$this$dfpProtec34, dfp_telemetry_id, captcha_token;
+        return _regeneratorRuntime().wrap(function _callee131$(_context131) {
+          while (1) switch (_context131.prev = _context131.next) {
             case 0:
               validate('stytch.otps.email.loginOrSignup').isString('organization_id', data.organization_id).isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('signup_template_id', data.signup_template_id).isOptionalString('locale', data.locale);
-              _context128.next = 3;
+              _context131.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec31 = _context128.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec31.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec31.captcha_token;
-              return _context128.abrupt("return", this._networkClient.retriableFetchSDK({
+              _yield$this$dfpProtec34 = _context131.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec34.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec34.captcha_token;
+              return _context131.abrupt("return", this._networkClient.retriableFetchSDK({
                 url: '/b2b/otps/email/login_or_signup',
                 body: Object.assign(Object.assign({}, data), {
                   dfp_telemetry_id: dfp_telemetry_id,
@@ -4772,57 +4934,57 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
               }));
             case 7:
             case "end":
-              return _context128.stop();
+              return _context131.stop();
           }
-        }, _callee128, this);
+        }, _callee131, this);
       }));
     },
     authenticate: function authenticate(data) {
-      return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee129() {
-        var _yield$this$dfpProtec32, dfp_telemetry_id, captcha_token, resp;
-        return _regeneratorRuntime().wrap(function _callee129$(_context129) {
-          while (1) switch (_context129.prev = _context129.next) {
+      return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee132() {
+        var _yield$this$dfpProtec35, dfp_telemetry_id, captcha_token, resp;
+        return _regeneratorRuntime().wrap(function _callee132$(_context132) {
+          while (1) switch (_context132.prev = _context132.next) {
             case 0:
-              validate('stytch.otps.email.authenticate').isString('code', data.code).isString('member_id', data.member_id).isString('organization_id', data.organization_id).isNumber('session_duration_minutes', data.session_duration_minutes).isOptionalString('locale', data.locale);
-              _context129.next = 3;
+              validate('stytch.otps.email.authenticate').isString('code', data.code).isString('email_address', data.email_address).isString('organization_id', data.organization_id).isNumber('session_duration_minutes', data.session_duration_minutes).isOptionalString('locale', data.locale);
+              _context132.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec32 = _context129.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec32.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec32.captcha_token;
-              _context129.t0 = this._networkClient;
-              _context129.t1 = Object;
-              _context129.t2 = Object.assign({}, data);
-              _context129.next = 11;
+              _yield$this$dfpProtec35 = _context132.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec35.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec35.captcha_token;
+              _context132.t0 = this._networkClient;
+              _context132.t1 = Object;
+              _context132.t2 = Object.assign({}, data);
+              _context132.next = 11;
               return this._subscriptionService.getIntermediateSessionToken();
             case 11:
-              _context129.t3 = _context129.sent;
-              if (_context129.t3) {
-                _context129.next = 14;
+              _context132.t3 = _context132.sent;
+              if (_context132.t3) {
+                _context132.next = 14;
                 break;
               }
-              _context129.t3 = undefined;
+              _context132.t3 = undefined;
             case 14:
-              _context129.t4 = _context129.t3;
-              _context129.t5 = dfp_telemetry_id;
-              _context129.t6 = captcha_token;
-              _context129.t7 = {
-                intermediate_session_token: _context129.t4,
-                dfp_telemetry_id: _context129.t5,
-                captcha_token: _context129.t6
+              _context132.t4 = _context132.t3;
+              _context132.t5 = dfp_telemetry_id;
+              _context132.t6 = captcha_token;
+              _context132.t7 = {
+                intermediate_session_token: _context132.t4,
+                dfp_telemetry_id: _context132.t5,
+                captcha_token: _context132.t6
               };
-              _context129.t8 = _context129.t1.assign.call(_context129.t1, _context129.t2, _context129.t7);
-              _context129.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
-              _context129.t10 = {
+              _context132.t8 = _context132.t1.assign.call(_context132.t1, _context132.t2, _context132.t7);
+              _context132.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+              _context132.t10 = {
                 url: '/b2b/otps/email/authenticate',
-                body: _context129.t8,
+                body: _context132.t8,
                 method: 'POST',
-                retryCallback: _context129.t9
+                retryCallback: _context132.t9
               };
-              _context129.next = 23;
-              return _context129.t0.retriableFetchSDK.call(_context129.t0, _context129.t10);
+              _context132.next = 23;
+              return _context132.t0.retriableFetchSDK.call(_context132.t0, _context132.t10);
             case 23:
-              resp = _context129.sent;
+              resp = _context132.sent;
               if (resp && resp.member_session) {
                 this._subscriptionService.updateStateAndTokens({
                   state: {
@@ -4835,33 +4997,33 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
                   intermediate_session_token: null
                 });
               }
-              return _context129.abrupt("return", resp);
+              return _context132.abrupt("return", resp);
             case 26:
             case "end":
-              return _context129.stop();
+              return _context132.stop();
           }
-        }, _callee129, this);
+        }, _callee132, this);
       }));
     },
     discovery: {
       send: function send(data) {
-        return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee130() {
-          var _yield$this$dfpProtec33, dfp_telemetry_id, captcha_token, requestBody;
-          return _regeneratorRuntime().wrap(function _callee130$(_context130) {
-            while (1) switch (_context130.prev = _context130.next) {
+        return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee133() {
+          var _yield$this$dfpProtec36, dfp_telemetry_id, captcha_token, requestBody;
+          return _regeneratorRuntime().wrap(function _callee133$(_context133) {
+            while (1) switch (_context133.prev = _context133.next) {
               case 0:
                 validate('stytch.otps.email.discovery.send').isString('email_address', data.email_address).isOptionalString('login_template_id', data.login_template_id).isOptionalString('locale', data.locale);
-                _context130.next = 3;
+                _context133.next = 3;
                 return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
               case 3:
-                _yield$this$dfpProtec33 = _context130.sent;
-                dfp_telemetry_id = _yield$this$dfpProtec33.dfp_telemetry_id;
-                captcha_token = _yield$this$dfpProtec33.captcha_token;
+                _yield$this$dfpProtec36 = _context133.sent;
+                dfp_telemetry_id = _yield$this$dfpProtec36.dfp_telemetry_id;
+                captcha_token = _yield$this$dfpProtec36.captcha_token;
                 requestBody = Object.assign(Object.assign({}, data), {
                   dfp_telemetry_id: dfp_telemetry_id,
                   captcha_token: captcha_token
                 });
-                return _context130.abrupt("return", this._networkClient.retriableFetchSDK({
+                return _context133.abrupt("return", this._networkClient.retriableFetchSDK({
                   url: '/b2b/otps/email/discovery/send',
                   body: requestBody,
                   method: 'POST',
@@ -4869,29 +5031,29 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
                 }));
               case 8:
               case "end":
-                return _context130.stop();
+                return _context133.stop();
             }
-          }, _callee130, this);
+          }, _callee133, this);
         }));
       },
       authenticate: function authenticate(data) {
-        return __awaiter$1(_this19, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee131() {
-          var _yield$this$dfpProtec34, dfp_telemetry_id, captcha_token, requestBody, resp;
-          return _regeneratorRuntime().wrap(function _callee131$(_context131) {
-            while (1) switch (_context131.prev = _context131.next) {
+        return __awaiter$1(_this20, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee134() {
+          var _yield$this$dfpProtec37, dfp_telemetry_id, captcha_token, requestBody, resp;
+          return _regeneratorRuntime().wrap(function _callee134$(_context134) {
+            while (1) switch (_context134.prev = _context134.next) {
               case 0:
                 validate('stytch.otps.email.discovery.authenticate').isString('code', data.code).isString('email_address', data.email_address);
-                _context131.next = 3;
+                _context134.next = 3;
                 return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
               case 3:
-                _yield$this$dfpProtec34 = _context131.sent;
-                dfp_telemetry_id = _yield$this$dfpProtec34.dfp_telemetry_id;
-                captcha_token = _yield$this$dfpProtec34.captcha_token;
+                _yield$this$dfpProtec37 = _context134.sent;
+                dfp_telemetry_id = _yield$this$dfpProtec37.dfp_telemetry_id;
+                captcha_token = _yield$this$dfpProtec37.captcha_token;
                 requestBody = Object.assign({
                   dfp_telemetry_id: dfp_telemetry_id,
                   captcha_token: captcha_token
                 }, data);
-                _context131.next = 9;
+                _context134.next = 9;
                 return this._networkClient.retriableFetchSDK({
                   url: '/b2b/otps/email/discovery/authenticate',
                   body: requestBody,
@@ -4899,19 +5061,19 @@ var HeadlessB2BOTPsClient = /*#__PURE__*/_createClass(function HeadlessB2BOTPsCl
                   retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
                 });
               case 9:
-                resp = _context131.sent;
+                resp = _context134.sent;
                 this._subscriptionService.updateStateAndTokens({
                   state: null,
                   session_token: null,
                   session_jwt: null,
                   intermediate_session_token: resp.intermediate_session_token
                 });
-                return _context131.abrupt("return", resp);
+                return _context134.abrupt("return", resp);
               case 12:
               case "end":
-                return _context131.stop();
+                return _context134.stop();
             }
-          }, _callee131, this);
+          }, _callee134, this);
         }));
       }
     }
@@ -4927,92 +5089,92 @@ var HeadlessB2BTOTPsClient = /*#__PURE__*/function () {
   _createClass(HeadlessB2BTOTPsClient, [{
     key: "create",
     value: function create(data) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee132() {
-        var _yield$this$dfpProtec35, dfp_telemetry_id, captcha_token;
-        return _regeneratorRuntime().wrap(function _callee132$(_context132) {
-          while (1) switch (_context132.prev = _context132.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee135() {
+        var _yield$this$dfpProtec38, dfp_telemetry_id, captcha_token;
+        return _regeneratorRuntime().wrap(function _callee135$(_context135) {
+          while (1) switch (_context135.prev = _context135.next) {
             case 0:
               validate('stytch.totp.create').isString('organization_id', data.organization_id).isString('member_id', data.member_id).isOptionalNumber('expiration_minutes', data.expiration_minutes);
-              _context132.next = 3;
+              _context135.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec35 = _context132.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec35.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec35.captcha_token;
-              _context132.t0 = this._networkClient;
-              _context132.t1 = Object;
-              _context132.t2 = Object.assign({}, data);
-              _context132.t3 = dfp_telemetry_id;
-              _context132.t4 = captcha_token;
-              _context132.next = 13;
+              _yield$this$dfpProtec38 = _context135.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec38.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec38.captcha_token;
+              _context135.t0 = this._networkClient;
+              _context135.t1 = Object;
+              _context135.t2 = Object.assign({}, data);
+              _context135.t3 = dfp_telemetry_id;
+              _context135.t4 = captcha_token;
+              _context135.next = 13;
               return this._subscriptionService.getIntermediateSessionToken();
             case 13:
-              _context132.t5 = _context132.sent;
-              if (_context132.t5) {
-                _context132.next = 16;
+              _context135.t5 = _context135.sent;
+              if (_context135.t5) {
+                _context135.next = 16;
                 break;
               }
-              _context132.t5 = undefined;
+              _context135.t5 = undefined;
             case 16:
-              _context132.t6 = _context132.t5;
-              _context132.t7 = {
-                dfp_telemetry_id: _context132.t3,
-                captcha_token: _context132.t4,
-                intermediate_session_token: _context132.t6
+              _context135.t6 = _context135.t5;
+              _context135.t7 = {
+                dfp_telemetry_id: _context135.t3,
+                captcha_token: _context135.t4,
+                intermediate_session_token: _context135.t6
               };
-              _context132.t8 = _context132.t1.assign.call(_context132.t1, _context132.t2, _context132.t7);
-              _context132.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
-              _context132.t10 = {
+              _context135.t8 = _context135.t1.assign.call(_context135.t1, _context135.t2, _context135.t7);
+              _context135.t9 = this.dfpProtectedAuth.retryWithCaptchaAndDFP;
+              _context135.t10 = {
                 url: '/b2b/totp',
-                body: _context132.t8,
+                body: _context135.t8,
                 method: 'POST',
-                retryCallback: _context132.t9
+                retryCallback: _context135.t9
               };
-              return _context132.abrupt("return", _context132.t0.retriableFetchSDK.call(_context132.t0, _context132.t10));
+              return _context135.abrupt("return", _context135.t0.retriableFetchSDK.call(_context135.t0, _context135.t10));
             case 22:
             case "end":
-              return _context132.stop();
+              return _context135.stop();
           }
-        }, _callee132, this);
+        }, _callee135, this);
       }));
     }
   }, {
     key: "authenticate",
     value: function authenticate(data) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee133() {
-        var _yield$this$dfpProtec36, dfp_telemetry_id, captcha_token, requestBody, resp;
-        return _regeneratorRuntime().wrap(function _callee133$(_context133) {
-          while (1) switch (_context133.prev = _context133.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee136() {
+        var _yield$this$dfpProtec39, dfp_telemetry_id, captcha_token, requestBody, resp;
+        return _regeneratorRuntime().wrap(function _callee136$(_context136) {
+          while (1) switch (_context136.prev = _context136.next) {
             case 0:
               validate('stytch.totp.authenticate').isString('organization_id', data.organization_id).isString('member_id', data.member_id).isString('code', data.code).isOptionalString('set_mfa_enrollment', data.set_mfa_enrollment).isOptionalBoolean('set_default_mfa', data.set_default_mfa);
-              _context133.next = 3;
+              _context136.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec36 = _context133.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec36.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec36.captcha_token;
-              _context133.t0 = Object;
-              _context133.t1 = Object.assign({}, data);
-              _context133.t2 = dfp_telemetry_id;
-              _context133.t3 = captcha_token;
-              _context133.next = 12;
+              _yield$this$dfpProtec39 = _context136.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec39.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec39.captcha_token;
+              _context136.t0 = Object;
+              _context136.t1 = Object.assign({}, data);
+              _context136.t2 = dfp_telemetry_id;
+              _context136.t3 = captcha_token;
+              _context136.next = 12;
               return this._subscriptionService.getIntermediateSessionToken();
             case 12:
-              _context133.t4 = _context133.sent;
-              if (_context133.t4) {
-                _context133.next = 15;
+              _context136.t4 = _context136.sent;
+              if (_context136.t4) {
+                _context136.next = 15;
                 break;
               }
-              _context133.t4 = undefined;
+              _context136.t4 = undefined;
             case 15:
-              _context133.t5 = _context133.t4;
-              _context133.t6 = {
-                dfp_telemetry_id: _context133.t2,
-                captcha_token: _context133.t3,
-                intermediate_session_token: _context133.t5
+              _context136.t5 = _context136.t4;
+              _context136.t6 = {
+                dfp_telemetry_id: _context136.t2,
+                captcha_token: _context136.t3,
+                intermediate_session_token: _context136.t5
               };
-              requestBody = _context133.t0.assign.call(_context133.t0, _context133.t1, _context133.t6);
-              _context133.next = 20;
+              requestBody = _context136.t0.assign.call(_context136.t0, _context136.t1, _context136.t6);
+              _context136.next = 20;
               return this._networkClient.retriableFetchSDK({
                 url: '/b2b/totp/authenticate',
                 body: requestBody,
@@ -5020,7 +5182,7 @@ var HeadlessB2BTOTPsClient = /*#__PURE__*/function () {
                 retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
               });
             case 20:
-              resp = _context133.sent;
+              resp = _context136.sent;
               this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: resp.member_session,
@@ -5031,12 +5193,12 @@ var HeadlessB2BTOTPsClient = /*#__PURE__*/function () {
                 session_jwt: resp.session_jwt,
                 intermediate_session_token: null
               });
-              return _context133.abrupt("return", resp);
+              return _context136.abrupt("return", resp);
             case 23:
             case "end":
-              return _context133.stop();
+              return _context136.stop();
           }
-        }, _callee133, this);
+        }, _callee136, this);
       }));
     }
   }]);
@@ -5052,40 +5214,40 @@ var HeadlessB2BRecoveryCodesClient = /*#__PURE__*/function () {
   _createClass(HeadlessB2BRecoveryCodesClient, [{
     key: "recover",
     value: function recover(data) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee134() {
-        var _yield$this$dfpProtec37, dfp_telemetry_id, captcha_token, requestBody, resp;
-        return _regeneratorRuntime().wrap(function _callee134$(_context134) {
-          while (1) switch (_context134.prev = _context134.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee137() {
+        var _yield$this$dfpProtec40, dfp_telemetry_id, captcha_token, requestBody, resp;
+        return _regeneratorRuntime().wrap(function _callee137$(_context137) {
+          while (1) switch (_context137.prev = _context137.next) {
             case 0:
               validate('stytch.recoveryCodes.recover').isString('organization_id', data.organization_id).isString('member_id', data.member_id).isString('recovery_code', data.recovery_code);
-              _context134.next = 3;
+              _context137.next = 3;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 3:
-              _yield$this$dfpProtec37 = _context134.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec37.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec37.captcha_token;
-              _context134.t0 = Object;
-              _context134.t1 = Object.assign({}, data);
-              _context134.t2 = dfp_telemetry_id;
-              _context134.t3 = captcha_token;
-              _context134.next = 12;
+              _yield$this$dfpProtec40 = _context137.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec40.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec40.captcha_token;
+              _context137.t0 = Object;
+              _context137.t1 = Object.assign({}, data);
+              _context137.t2 = dfp_telemetry_id;
+              _context137.t3 = captcha_token;
+              _context137.next = 12;
               return this._subscriptionService.getIntermediateSessionToken();
             case 12:
-              _context134.t4 = _context134.sent;
-              if (_context134.t4) {
-                _context134.next = 15;
+              _context137.t4 = _context137.sent;
+              if (_context137.t4) {
+                _context137.next = 15;
                 break;
               }
-              _context134.t4 = undefined;
+              _context137.t4 = undefined;
             case 15:
-              _context134.t5 = _context134.t4;
-              _context134.t6 = {
-                dfp_telemetry_id: _context134.t2,
-                captcha_token: _context134.t3,
-                intermediate_session_token: _context134.t5
+              _context137.t5 = _context137.t4;
+              _context137.t6 = {
+                dfp_telemetry_id: _context137.t2,
+                captcha_token: _context137.t3,
+                intermediate_session_token: _context137.t5
               };
-              requestBody = _context134.t0.assign.call(_context134.t0, _context134.t1, _context134.t6);
-              _context134.next = 20;
+              requestBody = _context137.t0.assign.call(_context137.t0, _context137.t1, _context137.t6);
+              _context137.next = 20;
               return this._networkClient.retriableFetchSDK({
                 url: '/b2b/recovery_codes/recover',
                 body: requestBody,
@@ -5093,7 +5255,7 @@ var HeadlessB2BRecoveryCodesClient = /*#__PURE__*/function () {
                 retryCallback: this.dfpProtectedAuth.retryWithCaptchaAndDFP
               });
             case 20:
-              resp = _context134.sent;
+              resp = _context137.sent;
               this._subscriptionService.updateStateAndTokens({
                 state: {
                   session: resp.member_session,
@@ -5104,29 +5266,29 @@ var HeadlessB2BRecoveryCodesClient = /*#__PURE__*/function () {
                 session_jwt: resp.session_jwt,
                 intermediate_session_token: null
               });
-              return _context134.abrupt("return", resp);
+              return _context137.abrupt("return", resp);
             case 23:
             case "end":
-              return _context134.stop();
+              return _context137.stop();
           }
-        }, _callee134, this);
+        }, _callee137, this);
       }));
     }
   }, {
     key: "rotate",
     value: function rotate() {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee135() {
-        var _yield$this$dfpProtec38, dfp_telemetry_id, captcha_token;
-        return _regeneratorRuntime().wrap(function _callee135$(_context135) {
-          while (1) switch (_context135.prev = _context135.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee138() {
+        var _yield$this$dfpProtec41, dfp_telemetry_id, captcha_token;
+        return _regeneratorRuntime().wrap(function _callee138$(_context138) {
+          while (1) switch (_context138.prev = _context138.next) {
             case 0:
-              _context135.next = 2;
+              _context138.next = 2;
               return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha();
             case 2:
-              _yield$this$dfpProtec38 = _context135.sent;
-              dfp_telemetry_id = _yield$this$dfpProtec38.dfp_telemetry_id;
-              captcha_token = _yield$this$dfpProtec38.captcha_token;
-              return _context135.abrupt("return", this._networkClient.retriableFetchSDK({
+              _yield$this$dfpProtec41 = _context138.sent;
+              dfp_telemetry_id = _yield$this$dfpProtec41.dfp_telemetry_id;
+              captcha_token = _yield$this$dfpProtec41.captcha_token;
+              return _context138.abrupt("return", this._networkClient.retriableFetchSDK({
                 url: '/b2b/recovery_codes/rotate',
                 body: {
                   dfp_telemetry_id: dfp_telemetry_id,
@@ -5137,27 +5299,27 @@ var HeadlessB2BRecoveryCodesClient = /*#__PURE__*/function () {
               }));
             case 6:
             case "end":
-              return _context135.stop();
+              return _context138.stop();
           }
-        }, _callee135, this);
+        }, _callee138, this);
       }));
     }
   }, {
     key: "get",
     value: function get() {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee136() {
-        return _regeneratorRuntime().wrap(function _callee136$(_context136) {
-          while (1) switch (_context136.prev = _context136.next) {
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee139() {
+        return _regeneratorRuntime().wrap(function _callee139$(_context139) {
+          while (1) switch (_context139.prev = _context139.next) {
             case 0:
-              return _context136.abrupt("return", this._networkClient.fetchSDK({
+              return _context139.abrupt("return", this._networkClient.fetchSDK({
                 url: '/b2b/recovery_codes',
                 method: 'GET'
               }));
             case 1:
             case "end":
-              return _context136.stop();
+              return _context139.stop();
           }
-        }, _callee136, this);
+        }, _callee139, this);
       }));
     }
   }]);
@@ -5165,16 +5327,16 @@ var HeadlessB2BRecoveryCodesClient = /*#__PURE__*/function () {
 }();
 var HeadlessB2BRBACClient = /*#__PURE__*/function () {
   function HeadlessB2BRBACClient(cachedConfig, dynamicConfig, _subscriptionService) {
-    var _this20 = this;
+    var _this21 = this;
     _classCallCheck(this, HeadlessB2BRBACClient);
     this._subscriptionService = _subscriptionService;
     this.isAuthorizedSync = function (resourceId, action) {
       var _a;
-      return !!((_a = _this20.cachedPolicy) === null || _a === void 0 ? void 0 : _a.callerIsAuthorized(_this20.roleIds(), resourceId, action));
+      return !!((_a = _this21.cachedPolicy) === null || _a === void 0 ? void 0 : _a.callerIsAuthorized(_this21.roleIds(), resourceId, action));
     };
     this.isAuthorized = function (resourceId, action) {
-      return _this20.policyPromise.then(function (policy) {
-        return policy.callerIsAuthorized(_this20.roleIds(), resourceId, action);
+      return _this21.policyPromise.then(function (policy) {
+        return policy.callerIsAuthorized(_this21.roleIds(), resourceId, action);
       });
     };
     this.cachedPolicy = cachedConfig.rbacPolicy ? RBACPolicy.fromJSON(cachedConfig.rbacPolicy) : null;
@@ -5183,16 +5345,16 @@ var HeadlessB2BRBACClient = /*#__PURE__*/function () {
         logger.error('Unable to retrieve RBAC policy from servers. Assuming caller has no permissions.');
         return new RBACPolicy([], []);
       }
-      _this20.cachedPolicy = RBACPolicy.fromJSON(data.rbacPolicy);
-      return _this20.cachedPolicy;
+      _this21.cachedPolicy = RBACPolicy.fromJSON(data.rbacPolicy);
+      return _this21.cachedPolicy;
     });
   }
   _createClass(HeadlessB2BRBACClient, [{
     key: "allPermissions",
     value: function allPermissions() {
-      var _this21 = this;
+      var _this22 = this;
       return this.policyPromise.then(function (policy) {
-        return policy.allPermissionsForCaller(_this21.roleIds());
+        return policy.allPermissionsForCaller(_this22.roleIds());
       });
     }
   }, {
@@ -5245,18 +5407,18 @@ var IframeHostClient = /*#__PURE__*/function () {
   }, {
     key: "call",
     value: function call(method, args) {
-      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee137() {
-        var _this22 = this;
+      return __awaiter$1(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee140() {
+        var _this23 = this;
         var frame, channel;
-        return _regeneratorRuntime().wrap(function _callee137$(_context137) {
-          while (1) switch (_context137.prev = _context137.next) {
+        return _regeneratorRuntime().wrap(function _callee140$(_context140) {
+          while (1) switch (_context140.prev = _context140.next) {
             case 0:
-              _context137.next = 2;
+              _context140.next = 2;
               return this.frame;
             case 2:
-              frame = _context137.sent;
+              frame = _context140.sent;
               channel = new MessageChannel();
-              return _context137.abrupt("return", new Promise(function (resolve, reject) {
+              return _context140.abrupt("return", new Promise(function (resolve, reject) {
                 var _a;
                 channel.port1.onmessage = function (event) {
                   var resp = event.data;
@@ -5271,13 +5433,13 @@ var IframeHostClient = /*#__PURE__*/function () {
                   method: method,
                   args: args
                 };
-                (_a = frame.contentWindow) === null || _a === void 0 ? void 0 : _a.postMessage(message, _this22.iframeURL, [channel.port2]);
+                (_a = frame.contentWindow) === null || _a === void 0 ? void 0 : _a.postMessage(message, _this23.iframeURL, [channel.port2]);
               }));
             case 5:
             case "end":
-              return _context137.stop();
+              return _context140.stop();
           }
-        }, _callee137, this);
+        }, _callee140, this);
       }));
     }
   }]);
@@ -5292,11 +5454,11 @@ var SearchDataManager = /*#__PURE__*/function () {
   _createClass(SearchDataManager, [{
     key: "searchUser",
     value: function searchUser(email) {
-      var _this24 = this;
+      var _this25 = this;
       return this.dfpProtectedAuth.getDFPTelemetryIDAndCaptcha().then(function (_ref7) {
         var dfp_telemetry_id = _ref7.dfp_telemetry_id,
           captcha_token = _ref7.captcha_token;
-        return _this24._networkClient.fetchSDK({
+        return _this25._networkClient.fetchSDK({
           url: "/users/search",
           method: 'POST',
           body: {
@@ -5327,52 +5489,52 @@ var shouldTryRefresh = function shouldTryRefresh(state) {
 };
 var SessionManager = /*#__PURE__*/function () {
   function SessionManager(_subscriptionService, _headlessSessionClient) {
-    var _this25 = this;
+    var _this26 = this;
     _classCallCheck(this, SessionManager);
     this._subscriptionService = _subscriptionService;
     this._headlessSessionClient = _headlessSessionClient;
     this._onDataChange = function (state) {
       if (shouldTryRefresh(state)) {
-        _this25.scheduleBackgroundRefresh();
+        _this26.scheduleBackgroundRefresh();
       } else {
-        _this25.cancelBackgroundRefresh();
+        _this26.cancelBackgroundRefresh();
       }
     };
     this._reauthenticateWithBackoff = function () {
-      return __awaiter$1(_this25, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee139() {
+      return __awaiter$1(_this26, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee142() {
         var count;
-        return _regeneratorRuntime().wrap(function _callee139$(_context139) {
-          while (1) switch (_context139.prev = _context139.next) {
+        return _regeneratorRuntime().wrap(function _callee142$(_context142) {
+          while (1) switch (_context142.prev = _context142.next) {
             case 0:
               count = 0;
             case 1:
-              _context139.prev = 2;
-              _context139.next = 5;
+              _context142.prev = 2;
+              _context142.next = 5;
               return this._headlessSessionClient.authenticate();
             case 5:
-              return _context139.abrupt("return", _context139.sent);
+              return _context142.abrupt("return", _context142.sent);
             case 8:
-              _context139.prev = 8;
-              _context139.t0 = _context139["catch"](2);
-              if (!SessionManager.isUnrecoverableError(_context139.t0)) {
-                _context139.next = 12;
+              _context142.prev = 8;
+              _context142.t0 = _context142["catch"](2);
+              if (!SessionManager.isUnrecoverableError(_context142.t0)) {
+                _context142.next = 12;
                 break;
               }
-              return _context139.abrupt("return", Promise.reject(_context139.t0));
+              return _context142.abrupt("return", Promise.reject(_context142.t0));
             case 12:
               count++;
-              _context139.next = 15;
+              _context142.next = 15;
               return new Promise(function (done) {
                 return setTimeout(done, SessionManager.timeoutForAttempt(count));
               });
             case 15:
-              _context139.next = 1;
+              _context142.next = 1;
               break;
             case 17:
             case "end":
-              return _context139.stop();
+              return _context142.stop();
           }
-        }, _callee139, this, [[2, 8]]);
+        }, _callee142, this, [[2, 8]]);
       }));
     };
     this.timeout = null;
@@ -5381,23 +5543,23 @@ var SessionManager = /*#__PURE__*/function () {
   _createClass(SessionManager, [{
     key: "performBackgroundRefresh",
     value: function performBackgroundRefresh() {
-      var _this26 = this;
+      var _this27 = this;
       this._reauthenticateWithBackoff().then(function () {
-        _this26.scheduleBackgroundRefresh();
+        _this27.scheduleBackgroundRefresh();
       })["catch"](function (error) {
         logger.warn('Session background refresh failed. Signalling to app that user is logged out.', {
           error: error
         });
-        _this26._subscriptionService.destroySession();
+        _this27._subscriptionService.destroySession();
       });
     }
   }, {
     key: "scheduleBackgroundRefresh",
     value: function scheduleBackgroundRefresh() {
-      var _this27 = this;
+      var _this28 = this;
       this.cancelBackgroundRefresh();
       this.timeout = setTimeout(function () {
-        _this27.performBackgroundRefresh();
+        _this28.performBackgroundRefresh();
       }, SessionManager.REFRESH_INTERVAL_MS);
     }
   }, {
@@ -5426,34 +5588,34 @@ var SessionManager = /*#__PURE__*/function () {
 }();
 SessionManager.REFRESH_INTERVAL_MS = 1000 * 60 * 3;
 var StateChangeClient = /*#__PURE__*/_createClass(function StateChangeClient(_subscriptionService, emptyState) {
-  var _this28 = this;
+  var _this29 = this;
   _classCallCheck(this, StateChangeClient);
   this._subscriptionService = _subscriptionService;
   this.emptyState = emptyState;
   this.onStateChange = function (callback) {
-    return _this28._subscriptionService.subscribeToState(function (state) {
-      callback(state !== null && state !== void 0 ? state : _this28.emptyState);
+    return _this29._subscriptionService.subscribeToState(function (state) {
+      callback(state !== null && state !== void 0 ? state : _this29.emptyState);
     });
   };
 });
 var WILDCARD_ACTION = '*';
 var RBACPolicy = /*#__PURE__*/function () {
   function RBACPolicy(roles, resources) {
-    var _this34 = this;
+    var _this35 = this;
     _classCallCheck(this, RBACPolicy);
     this.roles = roles;
     this.resources = resources;
     this.rolesByID = {};
     roles.forEach(function (role) {
-      return _this34.rolesByID[role.role_id] = role;
+      return _this35.rolesByID[role.role_id] = role;
     });
   }
   _createClass(RBACPolicy, [{
     key: "callerIsAuthorized",
     value: function callerIsAuthorized(memberRoles, resourceId, action) {
-      var _this35 = this;
+      var _this36 = this;
       return !!memberRoles.map(function (roleId) {
-        return _this35.rolesByID[roleId];
+        return _this36.rolesByID[roleId];
       }).filter(function (v) {
         return v;
       }).flatMap(function (role) {
@@ -5467,12 +5629,12 @@ var RBACPolicy = /*#__PURE__*/function () {
   }, {
     key: "allPermissionsForCaller",
     value: function allPermissionsForCaller(memberRoles) {
-      var _this36 = this;
+      var _this37 = this;
       var allPermsMap = Object.create(null);
       this.resources.forEach(function (resource) {
         allPermsMap[resource.resource_id] = {};
         resource.actions.forEach(function (action) {
-          allPermsMap[resource.resource_id][action] = _this36.callerIsAuthorized(memberRoles, resource.resource_id, action);
+          allPermsMap[resource.resource_id][action] = _this37.callerIsAuthorized(memberRoles, resource.resource_id, action);
         });
       });
       return allPermsMap;
@@ -5606,4 +5768,4 @@ var readB2BInternals = function readB2BInternals(obj) {
   }
   return casted[internalSymB2B];
 };
-export { StytchAPISchemaError as $, AuthFlowType as A, B2BMFAProducts as B, COUNTRIES_LIST as C, DEFAULT_SESSION_DURATION_MINUTES as D, EMAIL_REGEX as E, FailedCodeChallengeError as F, NoBiometricsRegistrationError as G, NoCredentialsPresentError as H, InternalError as I, JSONDataNotConvertibleToStringError as J, KeyInvalidatedError as K, NoCurrentSessionError as L, MissingAttestationObjectError as M, NoBiometricsEnrolledError as N, OAuthProviders as O, Products as P, PasskeysInvalidEncoding as Q, PasskeysMisconfigured as R, StytchEventType as S, PasskeysUnsupportedError as T, RNUIProducts as U, RandomNumberGenerationFailed as V, Wallets as W, SDKAPIUnreachableError as X, SDKNotConfiguredError as Y, SignInWithAppleMisconfigured as Z, __awaiter as _, B2BProducts as a, StytchAPIUnreachableError as a0, StytchError as a1, StytchSDKAPIError as a2, StytchSDKSchemaError as a3, StytchSDKUsageError as a4, UNRECOVERABLE_ERROR_TYPES as a5, UserCancellationError as a6, UserLockedOutError as a7, errorToStytchError as a8, __rest as a9, HeadlessB2BMagicLinksClient as aA, HeadlessB2BSSOClient as aB, HeadlessB2BDiscoveryClient as aC, HeadlessB2BPasswordsClient as aD, HeadlessB2BOTPsClient as aE, HeadlessB2BTOTPsClient as aF, HeadlessB2BRecoveryCodesClient as aG, HeadlessB2BRBACClient as aH, HeadlessB2BSCIMClient as aI, SessionManager as aJ, SearchDataManager as aK, writeB2BInternals as aL, createDeepEqual as aa, getPersistentStorageKey as ab, HeadlessB2BOAuthClient$1 as ac, loadESModule as ad, IframeHostClient as ae, validate as af, hasMultipleCookies as ag, isLocalhost as ah, GOOGLE_ONE_TAP_HOST as ai, GOOGLE_ONE_TAP_SCRIPT_URL as aj, EventLogger as ak, DEFAULT_MAX_BATCH_SIZE as al, DEFAULT_INTERVAL_DURATION_MS as am, createEventId as an, createAppSessionId as ao, createPersistentId as ap, baseFetchSDK as aq, retriableFetchSDK as ar, checkB2BNotSSR as as, checkPublicToken as at, buildFinalConfig as au, StateChangeClient as av, DFPProtectedAuthProvider as aw, HeadlessB2BOrganizationClient as ax, HeadlessB2BSelfClient as ay, HeadlessB2BSessionClient as az, OTPMethods as b, StytchAPIError as c, B2BOAuthProviders as d, OneTapPositions as e, debounce as f, StytchSDKError as g, checkNotSSR as h, isTestPublicToken as i, BiometricsFailedError as j, BiometricsUnavailableError as k, logger as l, ChallengeSigningFailedError as m, DeviceCredentialsNotAllowedError as n, FailedToDecryptDataError as o, InvalidAuthorizationCredentialError as p, InvalidCredentialTypeError as q, readB2BInternals as r, InvalidRedirectSchemeError as s, InvalidStartUrlError as t, KeystoreUnavailableError as u, MissingAuthorizationCredentialIDTokenError as v, MissingGoogleClientIDError as w, MissingPKCEError as x, MissingPublicKeyError as y, MissingUrlError as z };
+export { SignInWithAppleMisconfigured as $, AuthFlowType as A, B2BMFAProducts as B, COUNTRIES_LIST as C, DEFAULT_SESSION_DURATION_MINUTES as D, EMAIL_REGEX as E, FailedCodeChallengeError as F, MissingUrlError as G, NoBiometricsRegistrationError as H, InternalError as I, JSONDataNotConvertibleToStringError as J, KeyInvalidatedError as K, NoCredentialsPresentError as L, MissingAttestationObjectError as M, NoBiometricsEnrolledError as N, OAuthProviders as O, Products as P, NoCurrentSessionError as Q, PasskeysInvalidEncoding as R, StytchEventType as S, PasskeysMisconfigured as T, PasskeysUnsupportedError as U, RNUIProducts as V, Wallets as W, RandomNumberGenerationFailed as X, SDKAPIUnreachableError as Y, SDKNotConfiguredError as Z, __rest as _, B2BProducts as a, StytchAPISchemaError as a0, StytchAPIUnreachableError as a1, StytchError as a2, StytchSDKAPIError as a3, StytchSDKSchemaError as a4, StytchSDKUsageError as a5, UNRECOVERABLE_ERROR_TYPES as a6, UserCancellationError as a7, UserLockedOutError as a8, errorToStytchError as a9, HeadlessB2BMagicLinksClient as aA, HeadlessB2BSSOClient as aB, HeadlessB2BDiscoveryClient as aC, HeadlessB2BPasswordsClient as aD, HeadlessB2BOTPsClient as aE, HeadlessB2BTOTPsClient as aF, HeadlessB2BRecoveryCodesClient as aG, HeadlessB2BRBACClient as aH, HeadlessB2BSCIMClient as aI, SessionManager as aJ, SearchDataManager as aK, writeB2BInternals as aL, createDeepEqual as aa, getPersistentStorageKey as ab, HeadlessB2BOAuthClient$1 as ac, loadESModule as ad, IframeHostClient as ae, validate as af, hasMultipleCookies as ag, isLocalhost as ah, GOOGLE_ONE_TAP_HOST as ai, GOOGLE_ONE_TAP_SCRIPT_URL as aj, EventLogger as ak, DEFAULT_MAX_BATCH_SIZE as al, DEFAULT_INTERVAL_DURATION_MS as am, createEventId as an, createAppSessionId as ao, createPersistentId as ap, baseFetchSDK as aq, retriableFetchSDK as ar, checkB2BNotSSR as as, checkPublicToken as at, buildFinalConfig as au, StateChangeClient as av, DFPProtectedAuthProvider as aw, HeadlessB2BOrganizationClient as ax, HeadlessB2BSelfClient as ay, HeadlessB2BSessionClient as az, OTPMethods as b, B2BOAuthProviders as c, __awaiter as d, StytchAPIError as e, OneTapPositions as f, debounce as g, StytchSDKError as h, isTestPublicToken as i, checkNotSSR as j, BiometricsFailedError as k, logger as l, BiometricsUnavailableError as m, ChallengeSigningFailedError as n, DeviceCredentialsNotAllowedError as o, FailedToDecryptDataError as p, InvalidAuthorizationCredentialError as q, readB2BInternals as r, InvalidCredentialTypeError as s, InvalidRedirectSchemeError as t, InvalidStartUrlError as u, KeystoreUnavailableError as v, MissingAuthorizationCredentialIDTokenError as w, MissingGoogleClientIDError as x, MissingPKCEError as y, MissingPublicKeyError as z };