@thunderid/javascript 1.10.3 → 1.12.0

package/dist/cjs/index.cjs

@@ -888,6 +888,7 @@ let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
 	EmbeddedFlowType$1["DeviceGrant"] = "DEVICE_GRANT";
 	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
 	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
+	EmbeddedFlowType$1["Self"] = "SELF";
 	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
 	return EmbeddedFlowType$1;
 }({});
@@ -944,6 +945,8 @@ let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentTy
 	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
 	/** Phone number input field with country code support */
 	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
+	/** Resend action that asks the server to send a new code, without submitting the step's inputs */
+	EmbeddedFlowComponentType$1["Resend"] = "RESEND";
 	/** Rich text display component that renders formatted HTML content */
 	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
 	/** Select/dropdown input component for single choice selection */
@@ -1113,7 +1116,33 @@ const executeEmbeddedDeviceGrantFlow = async ({ baseUrl, payload, url,...request
 		},
 		method: requestConfig.method ?? "POST"
 	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedDeviceGrantFlow-FlowError-001", "javascript", response.status, response.statusText);
+	if (!response.ok) {
+		const errorText = await response.text();
+		let errorResponse;
+		try {
+			const parsed = JSON.parse(errorText);
+			if (typeof parsed === "object" && parsed !== null) errorResponse = parsed;
+		} catch {}
+		const errorData = errorResponse?.["data"];
+		const additionalData$1 = typeof errorData === "object" && errorData !== null ? errorData["additionalData"] : void 0;
+		const errorAssertion = errorResponse?.["errorAssertion"];
+		const authId$1 = typeof additionalData$1 === "object" && additionalData$1 !== null ? additionalData$1["authId"] : void 0;
+		const callbackType$1 = typeof additionalData$1 === "object" && additionalData$1 !== null ? additionalData$1["callbackType"] : void 0;
+		if (typeof errorAssertion === "string" && typeof authId$1 === "string" && typeof callbackType$1 === "string" && errorResponse) {
+			const redirectUri = (await postAuthCallback(callbackUrl, {
+				assertion: errorAssertion,
+				authId: authId$1,
+				type: callbackType$1
+			}, requestConfig.headers, true))["redirect_uri"];
+			return {
+				...errorResponse,
+				errorAssertion,
+				flowStatus: EmbeddedSignInFlowStatus.Error,
+				...typeof redirectUri === "string" ? { redirectUrl: redirectUri } : {}
+			};
+		}
+		throw new ThunderIDAPIError(errorText, "executeEmbeddedDeviceGrantFlow-FlowError-001", "javascript", response.status, response.statusText);
+	}
 	const flowResponse = await response.json();
 	const additionalData = flowResponse.data?.additionalData;
 	const authId = additionalData?.["authId"];
@@ -1401,6 +1430,73 @@ const executeEmbeddedUserOnboardingFlow = async ({ url, baseUrl, payload,...requ
 };
 var executeEmbeddedUserOnboardingFlow_default = executeEmbeddedUserOnboardingFlow;
 
+//#endregion
+//#region src/api/auth/executeEmbeddedSelfFlow.ts
+/**
+* Executes one step of a `SELF` flow, an operation the signed-in user performs on their own
+* account, such as verifying their email address. A new execution names the flow by its handle; the
+* server takes the user from the access token on that first request and keeps it for the execution.
+*
+* @param config - Configuration object with URL, payload, fetcher and optional request config.
+* @returns A promise that resolves with the flow step.
+* @throws ThunderIDAPIError when the input is invalid or the request fails, coded
+* `executeEmbeddedSelfFlow-` plus `ValidationError-001` (invalid `url` or `baseUrl`), `ValidationError-002`
+* (no payload), `ValidationError-003` (a new flow without a handle), `ResponseError-001` (the server refused, with
+* its status) or `NetworkError-001` (no response, or an unreadable one).
+*
+* @example
+* ```typescript
+* const step = await executeEmbeddedSelfFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {
+*     flowType: 'SELF',
+*     handle: 'default-self-attribute-verification-flow',
+*     inputs: {attribute: 'email'},
+*   },
+*   fetcher: authenticatedFetcher,
+* });
+*
+* await executeEmbeddedSelfFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {executionId: step.executionId, action: 'verify', inputs: {otp: '123456'}},
+*   fetcher: authenticatedFetcher,
+* });
+* ```
+*/
+const executeEmbeddedSelfFlow = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1 instanceof Error ? error$1.message : String(error$1)}`, "executeEmbeddedSelfFlow-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	if (!payload) throw new ThunderIDAPIError("SELF flow payload is required", "executeEmbeddedSelfFlow-ValidationError-002", "javascript", 400, "If a SELF flow payload is not provided, the request cannot be constructed correctly.");
+	if (!payload.executionId && !payload.handle) throw new ThunderIDAPIError("The flow handle is required", "executeEmbeddedSelfFlow-ValidationError-003", "javascript", 400, "A new SELF flow must name the flow to start by its handle.");
+	const fetchFn = fetcher ?? fetch;
+	const resolvedUrl = url ?? `${baseUrl}/flow/execute`;
+	const requestInit = {
+		...requestConfig,
+		body: JSON.stringify({
+			...payload,
+			verbose: true
+		}),
+		headers: {
+			...requestConfig.headers,
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		method: "POST"
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSelfFlow-ResponseError-001", "javascript", response.status, response.statusText, "SELF flow request failed");
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "executeEmbeddedSelfFlow-NetworkError-001", "javascript", 0, "Network Error");
+	}
+};
+var executeEmbeddedSelfFlow_default = executeEmbeddedSelfFlow;
+
 //#endregion
 //#region src/api/auth/getFlowMeta.ts
 /**
@@ -7141,6 +7237,21 @@ const SelectConstants = {
 };
 var SelectConstants_default = SelectConstants;
 
+//#endregion
+//#region src/constants/AttributeVerificationConstants.ts
+/**
+* Wire names and eligibility rules for self user attribute verification.
+*/
+const AttributeVerificationConstants = {
+	ATTRIBUTE_INPUT: "attribute",
+	DEFAULT_FLOW_HANDLE: "default-self-attribute-verification-flow",
+	MASKED_DESTINATION_KEY: "maskedDestination",
+	VERIFIABLE_ATTRIBUTE_TYPES: ["email", "mobile"],
+	VERIFIED_ATTRIBUTES_KEY: "verifiedAttributes",
+	VERIFY_AFTER_SAVE_ATTRIBUTE_TYPES: ["email"]
+};
+var AttributeVerificationConstants_default = AttributeVerificationConstants;
+
 //#endregion
 //#region src/errors/ThunderIDRuntimeError.ts
 /**
@@ -7227,6 +7338,29 @@ let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType
 	return EmbeddedRecoveryFlowType$1;
 }({});
 
+//#endregion
+//#region src/models/embedded-self-flow.ts
+/**
+* Status of a `SELF` flow step.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSelfFlowStatus = /* @__PURE__ */ function(EmbeddedSelfFlowStatus$1) {
+	/**
+	* The flow completed, for example a verification was recorded.
+	*/
+	EmbeddedSelfFlowStatus$1["Complete"] = "COMPLETE";
+	/**
+	* The server refused the operation.
+	*/
+	EmbeddedSelfFlowStatus$1["Error"] = "ERROR";
+	/**
+	* The flow needs more input, such as the emailed code.
+	*/
+	EmbeddedSelfFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedSelfFlowStatus$1;
+}({});
+
 //#endregion
 //#region src/models/flow-meta.ts
 /**
@@ -7908,7 +8042,7 @@ const fail = (code, message) => {
 	throw new InvalidLogoutTokenError(code, message);
 };
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-const isNonEmptyString = (value) => typeof value === "string" && value.length > 0;
+const isNonEmptyString$1 = (value) => typeof value === "string" && value.length > 0;
 /**
 * Checks the header and claims of a back-channel logout token, per OpenID Connect Back-Channel
 * Logout 1.0 section 2.6. It does not verify the signature: the caller does that with the server's
@@ -7930,15 +8064,15 @@ const validateLogoutTokenClaims = (header, payload, options) => {
 	if (!isRecord(events) || !isRecord(events[BackchannelLogoutConstants_default.EVENT])) return fail("JS-LOGOUT_TOKEN-VLTC-IV05", "The back-channel logout event is missing.");
 	if (payload["iss"] !== options.issuer) return fail("JS-LOGOUT_TOKEN-VLTC-IV06", "The issuer does not match.");
 	const audiences = Array.isArray(payload["aud"]) ? payload["aud"] : [payload["aud"]];
-	if (!isNonEmptyString(options.clientId) || !audiences.includes(options.clientId)) return fail("JS-LOGOUT_TOKEN-VLTC-IV07", "The audience does not include this client.");
+	if (!isNonEmptyString$1(options.clientId) || !audiences.includes(options.clientId)) return fail("JS-LOGOUT_TOKEN-VLTC-IV07", "The audience does not include this client.");
 	const now = options.now ?? Math.floor(Date.now() / 1e3);
 	const tolerance = options.clockTolerance ?? BackchannelLogoutConstants_default.DEFAULT_CLOCK_TOLERANCE_SECONDS;
 	if (typeof payload["iat"] !== "number" || payload["iat"] > now + tolerance) return fail("JS-LOGOUT_TOKEN-VLTC-IV08", "The issued-at time is missing or in the future.");
 	if (typeof payload["exp"] !== "number" || payload["exp"] <= now - tolerance) return fail("JS-LOGOUT_TOKEN-VLTC-IV09", "The token has expired.");
-	if ("sid" in payload && !isNonEmptyString(payload["sid"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The session identifier is not valid.");
-	if ("sub" in payload && !isNonEmptyString(payload["sub"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The subject is not valid.");
+	if ("sid" in payload && !isNonEmptyString$1(payload["sid"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The session identifier is not valid.");
+	if ("sub" in payload && !isNonEmptyString$1(payload["sub"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The subject is not valid.");
 	if (!("sid" in payload) && !("sub" in payload)) return fail("JS-LOGOUT_TOKEN-VLTC-IV11", "The token names neither a session nor a subject.");
-	if (!isNonEmptyString(payload["jti"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV12", "The token identifier is missing.");
+	if (!isNonEmptyString$1(payload["jti"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV12", "The token identifier is missing.");
 	return payload;
 };
 var validateLogoutTokenClaims_default = validateLogoutTokenClaims;
@@ -10237,6 +10371,88 @@ const generateFlattenedUserProfile = (meResponse, _processedSchemas) => {
 };
 var generateFlattenedUserProfile_default = generateFlattenedUserProfile;
 
+//#endregion
+//#region src/utils/getFlowStepComponents.ts
+const INPUT_TYPES = [
+	EmbeddedFlowComponentType.TextInput,
+	EmbeddedFlowComponentType.PasswordInput,
+	EmbeddedFlowComponentType.EmailInput,
+	EmbeddedFlowComponentType.PhoneInput,
+	EmbeddedFlowComponentType.OtpInput,
+	EmbeddedFlowComponentType.Select,
+	EmbeddedFlowComponentType.DateInput
+];
+const ACTION_TYPES = [EmbeddedFlowComponentType.Action, EmbeddedFlowComponentType.Resend];
+/**
+* Collects the inputs and actions of a flow step, nested components included, in document order.
+*
+* @param components - The step's components.
+* @returns The step's inputs, actions and resend action.
+* @example
+* ```typescript
+* const {actions, inputs} = getFlowStepComponents(response.data.components);
+* const isAwaitingLink = inputs.length === 0 && actions.length === 0;
+* ```
+*/
+const getFlowStepComponents = (components, step = {
+	actions: [],
+	inputs: []
+}) => {
+	components.forEach((component) => {
+		if (INPUT_TYPES.includes(component.type)) step.inputs.push(component);
+		if (ACTION_TYPES.includes(component.type)) step.actions.push(component);
+		if (component.type === EmbeddedFlowComponentType.Resend && !step.resend) step.resend = component;
+		if (Array.isArray(component.components)) getFlowStepComponents(component.components, step);
+	});
+	return step;
+};
+var getFlowStepComponents_default = getFlowStepComponents;
+
+//#endregion
+//#region src/utils/getVerifiedAttributes.ts
+/**
+* Returns the verified attributes of a `/users/me` profile, keyed by attribute name.
+*
+* A profile without the field, from a server that does not report verification, leaves every status
+* unknown, so the result is `undefined` rather than an empty record that would read as unverified.
+*
+* @param user - The profile to read.
+* @returns The verified attributes, an empty object when none is verified, or `undefined` when the
+* profile does not report them.
+*/
+const getVerifiedAttributes = (user) => {
+	const value = user?.[AttributeVerificationConstants_default.VERIFIED_ATTRIBUTES_KEY];
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+};
+var getVerifiedAttributes_default = getVerifiedAttributes;
+
+//#endregion
+//#region src/utils/isVerifiableAttribute.ts
+/**
+* Whether the signed-in user can verify the given attribute: a top-level, single-valued property of
+* type `email` or `mobile` in the user type schema from `GET /users/me/meta`.
+*
+* Schema keys are top-level properties, and a multi-valued property has type `array`, so both are
+* settled by the property's own type. An absent schema, or one without the attribute, leaves the
+* type unknown and resolves to `false`, so no verification is started on missing information.
+*
+* @param userSchema - The user type schema resolved by the provider, keyed by attribute.
+* @param attribute - The attribute to check (e.g. `email`).
+* @returns `true` only when the schema declares `attribute` with a verifiable type.
+* @example
+* ```typescript
+* if (!isVerifiableAttribute(userSchema, 'given_name')) {
+*   return null;
+* }
+* ```
+*/
+const isVerifiableAttribute = (userSchema, attribute) => {
+	if (!userSchema || !attribute || !Object.prototype.hasOwnProperty.call(userSchema, attribute)) return false;
+	const type = userSchema[attribute]?.type;
+	return typeof type === "string" && AttributeVerificationConstants_default.VERIFIABLE_ATTRIBUTE_TYPES.includes(type.toLowerCase());
+};
+var isVerifiableAttribute_default = isVerifiableAttribute;
+
 //#endregion
 //#region src/utils/getRedirectBasedSignUpUrl.ts
 /**
@@ -10381,6 +10597,37 @@ const getConsentElementDecision = (purposeId, element, approved, inputs) => {
 };
 var getConsentElementDecision_default = getConsentElementDecision;
 
+//#endregion
+//#region src/utils/compileConsentDecisions.ts
+/**
+* Compiles consent form state into the flow API's `consent_decisions` input and removes
+* temporary SDK-only consent fields. The caller determines approval/denial from its action.
+*/
+const compileConsentDecisions = (inputs, purposes, options) => {
+	const processedInputs = { ...inputs };
+	if (purposes) {
+		const { approved, reason } = options;
+		const decisions = {
+			approved,
+			...reason ? { reason } : {},
+			purposes: purposes.map((purpose) => ({
+				approved,
+				elements: [...(purpose.essential ?? []).map((element) => ({
+					approved,
+					name: element.name
+				})), ...(purpose.optional ?? []).map((element) => getConsentElementDecision_default(purpose.purposeId, element, approved && processedInputs[`__consent_opt__${purpose.purposeId}__${element.name}`] === "true", processedInputs))],
+				...purpose.purposeName ? { purposeName: purpose.purposeName } : {}
+			}))
+		};
+		processedInputs["consent_decisions"] = JSON.stringify(decisions);
+	}
+	Object.keys(processedInputs).forEach((key) => {
+		if (key.startsWith("__consent_opt__") || key.startsWith(CONSENT_MODIFIED_KEY_PREFIX) || key.startsWith(CONSENT_INVALID_KEY_PREFIX)) delete processedInputs[key];
+	});
+	return processedInputs;
+};
+var compileConsentDecisions_default = compileConsentDecisions;
+
 //#endregion
 //#region src/utils/isEmpty.ts
 /**
@@ -10966,6 +11213,47 @@ const parseSelectPageQuery = (raw, { allowFilter = false } = {}) => {
 };
 var parseSelectPageQuery_default = parseSelectPageQuery;
 
+//#endregion
+//#region src/utils/parseSelfFlowRequest.ts
+const isNonEmptyString = (value) => typeof value === "string" && value !== "";
+const isStringRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.values(value).every((entry) => typeof entry === "string");
+/**
+* Checks a `SELF` flow step that a browser sent to a server-side SDK, which attaches the
+* session's access token before forwarding it. Such an endpoint is public, so its types protect
+* nothing.
+*
+* Only the fields of a step are kept, so a caller cannot add a user or application identifier. A
+* request without an `executionId` starts a flow, and must name a `SELF` flow by its handle,
+* so the endpoint cannot start a flow of another type with the user's token.
+*
+* @param raw - The request body as received.
+* @returns The request to send, or the name of the first invalid field.
+*/
+const parseSelfFlowRequest = (raw) => {
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return { invalid: "body" };
+	const { action, challengeToken, executionId, flowType, handle, inputs } = raw;
+	if (inputs !== void 0 && !isStringRecord(inputs)) return { invalid: "inputs" };
+	if (executionId !== void 0) {
+		if (!isNonEmptyString(executionId)) return { invalid: "executionId" };
+		if (action !== void 0 && typeof action !== "string") return { invalid: "action" };
+		if (challengeToken !== void 0 && typeof challengeToken !== "string") return { invalid: "challengeToken" };
+		return { request: {
+			executionId,
+			...action ? { action } : {},
+			...challengeToken ? { challengeToken } : {},
+			...inputs ? { inputs } : {}
+		} };
+	}
+	if (flowType !== EmbeddedFlowType.Self) return { invalid: "flowType" };
+	if (!isNonEmptyString(handle)) return { invalid: "handle" };
+	return { request: {
+		flowType: EmbeddedFlowType.Self,
+		handle,
+		...inputs ? { inputs } : {}
+	} };
+};
+var parseSelfFlowRequest_default = parseSelfFlowRequest;
+
 //#endregion
 //#region src/i18n/translations/en-US.ts
 const en_US = {
@@ -11056,6 +11344,20 @@ const en_US = {
 		"passkey.register.description": "Create a passkey to securely sign in to your account without a password.",
 		"user.profile.heading": "Profile",
 		"user.profile.update.generic.error": "An error occurred while updating your profile. Please try again.",
+		"user.verification.status.verified": "Verified",
+		"user.verification.status.unverified": "Unverified",
+		"user.verification.status.verified_at": "Verified on {date}",
+		"user.verification.buttons.verify.text": "Verify",
+		"user.verification.buttons.cancel.text": "Cancel",
+		"user.verification.buttons.close.text": "Close",
+		"user.verification.buttons.done.text": "Done",
+		"user.verification.heading": "Verify {attribute}",
+		"user.verification.subheading": "Enter the code sent to {destination}.",
+		"user.verification.subheading.generic": "Enter the code sent to you.",
+		"user.verification.subheading.link": "We sent a verification link to {destination}. Open it, then select Done.",
+		"user.verification.destination": "Sent to {destination}.",
+		"user.verification.success": "{attribute} verified.",
+		"user.verification.error": "Verification failed. Please try again.",
 		"user.change_password.heading": "Change {credential}",
 		"user.change_password.new.label": "New {credential}",
 		"user.change_password.new.placeholder": "Enter your new {credentialLower}",
@@ -11405,6 +11707,20 @@ const fr_FR = {
 		"passkey.register.description": "Créez une clé d'accès pour vous connecter en toute sécurité à votre compte sans mot de passe.",
 		"user.profile.heading": "Profil",
 		"user.profile.update.generic.error": "Une erreur est survenue lors de la mise à jour de votre profil. Veuillez réessayer.",
+		"user.verification.status.verified": "Vérifié",
+		"user.verification.status.unverified": "Non vérifié",
+		"user.verification.status.verified_at": "Vérifié le {date}",
+		"user.verification.buttons.verify.text": "Vérifier",
+		"user.verification.buttons.cancel.text": "Annuler",
+		"user.verification.buttons.close.text": "Fermer",
+		"user.verification.buttons.done.text": "Terminé",
+		"user.verification.heading": "Vérifier {attribute}",
+		"user.verification.subheading": "Saisissez le code envoyé à {destination}.",
+		"user.verification.subheading.generic": "Saisissez le code qui vous a été envoyé.",
+		"user.verification.subheading.link": "Nous avons envoyé un lien de vérification à {destination}. Ouvrez-le, puis sélectionnez Terminé.",
+		"user.verification.destination": "Envoyé à {destination}.",
+		"user.verification.success": "Vérification de {attribute} réussie.",
+		"user.verification.error": "La vérification a échoué. Veuillez réessayer.",
 		"user.change_password.heading": "Modifier {credential}",
 		"user.change_password.new.label": "Nouveau {credential}",
 		"user.change_password.new.placeholder": "Entrez votre nouveau {credentialLower}",
@@ -11754,6 +12070,20 @@ const te_IN = {
 		"passkey.register.description": "పాస్‌వర్డ్ లేకుండా మీ ఖాతాలోకి సురక్షితంగా సైన్ ఇన్ చేయడానికి Passkey ని సృష్టించండి.",
 		"user.profile.heading": "ప్రొఫైల్",
 		"user.profile.update.generic.error": "ప్రొఫైల్ అప్‌డేట్ చేస్తూ లోపం వచ్చింది. దయచేసి మళ్లీ ప్రయత్నించండి.",
+		"user.verification.status.verified": "ధృవీకరించబడింది",
+		"user.verification.status.unverified": "ధృవీకరించబడలేదు",
+		"user.verification.status.verified_at": "{date}న ధృవీకరించబడింది",
+		"user.verification.buttons.verify.text": "ధృవీకరించండి",
+		"user.verification.buttons.cancel.text": "రద్దు చేయండి",
+		"user.verification.buttons.close.text": "మూసివేయండి",
+		"user.verification.buttons.done.text": "పూర్తయింది",
+		"user.verification.heading": "{attribute} ధృవీకరించండి",
+		"user.verification.subheading": "{destination}కు పంపిన కోడ్‌ను నమోదు చేయండి.",
+		"user.verification.subheading.generic": "మీకు పంపిన కోడ్‌ను నమోదు చేయండి.",
+		"user.verification.subheading.link": "{destination}కు ధృవీకరణ లింక్‌ను పంపాము. దాన్ని తెరిచి, ఆపై పూర్తయింది ఎంచుకోండి.",
+		"user.verification.destination": "{destination}కు పంపబడింది.",
+		"user.verification.success": "{attribute} ధృవీకరించబడింది.",
+		"user.verification.error": "ధృవీకరణ విఫలమైంది. దయచేసి మళ్లీ ప్రయత్నించండి.",
 		"user.change_password.heading": "{credential} మార్చండి",
 		"user.change_password.new.label": "కొత్త {credential}",
 		"user.change_password.new.placeholder": "మీ కొత్త {credentialLower} నమోదు చేయండి",
@@ -12103,6 +12433,20 @@ const hi_IN = {
 		"passkey.register.description": "बिना पासवर्ड के अपने खाते में सुरक्षित रूप से साइन इन करने के लिए एक Passkey बनाएं।",
 		"user.profile.heading": "प्रोफ़ाइल",
 		"user.profile.update.generic.error": "प्रोफ़ाइल अपडेट करते समय त्रुटि हुई। कृपया पुनः प्रयास करें।",
+		"user.verification.status.verified": "सत्यापित",
+		"user.verification.status.unverified": "असत्यापित",
+		"user.verification.status.verified_at": "{date} को सत्यापित",
+		"user.verification.buttons.verify.text": "सत्यापित करें",
+		"user.verification.buttons.cancel.text": "रद्द करें",
+		"user.verification.buttons.close.text": "बंद करें",
+		"user.verification.buttons.done.text": "पूर्ण",
+		"user.verification.heading": "{attribute} सत्यापित करें",
+		"user.verification.subheading": "{destination} पर भेजा गया कोड दर्ज करें।",
+		"user.verification.subheading.generic": "आपको भेजा गया कोड दर्ज करें।",
+		"user.verification.subheading.link": "{destination} पर एक सत्यापन लिंक भेजा गया है। उसे खोलें, फिर पूर्ण चुनें।",
+		"user.verification.destination": "{destination} पर भेजा गया।",
+		"user.verification.success": "{attribute} सत्यापित हो गया।",
+		"user.verification.error": "सत्यापन विफल रहा। कृपया पुनः प्रयास करें।",
 		"user.change_password.heading": "{credential} बदलें",
 		"user.change_password.new.label": "नया {credential}",
 		"user.change_password.new.placeholder": "अपना नया {credentialLower} दर्ज करें",
@@ -12452,6 +12796,20 @@ const pt_BR = {
 		"passkey.register.description": "Crie uma passkey para entrar em sua conta com segurança sem uma senha.",
 		"user.profile.heading": "Perfil",
 		"user.profile.update.generic.error": "Ocorreu um erro ao atualizar seu perfil. Tente novamente.",
+		"user.verification.status.verified": "Verificado",
+		"user.verification.status.unverified": "Não verificado",
+		"user.verification.status.verified_at": "Verificado em {date}",
+		"user.verification.buttons.verify.text": "Verificar",
+		"user.verification.buttons.cancel.text": "Cancelar",
+		"user.verification.buttons.close.text": "Fechar",
+		"user.verification.buttons.done.text": "Concluído",
+		"user.verification.heading": "Verificar {attribute}",
+		"user.verification.subheading": "Digite o código enviado para {destination}.",
+		"user.verification.subheading.generic": "Digite o código enviado para você.",
+		"user.verification.subheading.link": "Enviamos um link de verificação para {destination}. Abra-o e selecione Concluído.",
+		"user.verification.destination": "Enviado para {destination}.",
+		"user.verification.success": "Verificação de {attribute} concluída.",
+		"user.verification.error": "Falha na verificação. Tente novamente.",
 		"user.change_password.heading": "Alterar {credential}",
 		"user.change_password.new.label": "Novo {credential}",
 		"user.change_password.new.placeholder": "Digite seu novo {credentialLower}",
@@ -12801,6 +13159,20 @@ const pt_PT = {
 		"passkey.register.description": "Crie uma passkey para iniciar sessão na sua conta com segurança sem palavra-passe.",
 		"user.profile.heading": "Perfil",
 		"user.profile.update.generic.error": "Ocorreu um erro ao actualizar o seu perfil. Tente novamente.",
+		"user.verification.status.verified": "Verificado",
+		"user.verification.status.unverified": "Não verificado",
+		"user.verification.status.verified_at": "Verificado em {date}",
+		"user.verification.buttons.verify.text": "Verificar",
+		"user.verification.buttons.cancel.text": "Cancelar",
+		"user.verification.buttons.close.text": "Fechar",
+		"user.verification.buttons.done.text": "Concluído",
+		"user.verification.heading": "Verificar {attribute}",
+		"user.verification.subheading": "Introduza o código enviado para {destination}.",
+		"user.verification.subheading.generic": "Introduza o código que lhe foi enviado.",
+		"user.verification.subheading.link": "Enviámos uma ligação de verificação para {destination}. Abra-a e selecione Concluído.",
+		"user.verification.destination": "Enviado para {destination}.",
+		"user.verification.success": "Verificação de {attribute} concluída.",
+		"user.verification.error": "A verificação falhou. Tente novamente.",
 		"user.change_password.heading": "Alterar {credential}",
 		"user.change_password.new.label": "Novo {credential}",
 		"user.change_password.new.placeholder": "Introduza o seu novo {credentialLower}",
@@ -13150,6 +13522,20 @@ const ta_IN = {
 		"passkey.register.description": "கடவுச்சொல் இல்லாமல் பாதுகாப்பாக உள்நுழைய ஒரு passkey-ஐ உருவாக்கவும்.",
 		"user.profile.heading": "சுயவிவரம்",
 		"user.profile.update.generic.error": "உங்கள் சுயவிவரத்தை புதுப்பிக்கும் போது பிழை ஏற்பட்டது. மீண்டும் முயற்சிக்கவும்.",
+		"user.verification.status.verified": "சரிபார்க்கப்பட்டது",
+		"user.verification.status.unverified": "சரிபார்க்கப்படவில்லை",
+		"user.verification.status.verified_at": "{date} அன்று சரிபார்க்கப்பட்டது",
+		"user.verification.buttons.verify.text": "சரிபார்",
+		"user.verification.buttons.cancel.text": "ரத்து செய்",
+		"user.verification.buttons.close.text": "மூடு",
+		"user.verification.buttons.done.text": "முடிந்தது",
+		"user.verification.heading": "{attribute} சரிபார்",
+		"user.verification.subheading": "{destination} க்கு அனுப்பப்பட்ட குறியீட்டை உள்ளிடவும்.",
+		"user.verification.subheading.generic": "உங்களுக்கு அனுப்பப்பட்ட குறியீட்டை உள்ளிடவும்.",
+		"user.verification.subheading.link": "{destination} க்கு சரிபார்ப்பு இணைப்பை அனுப்பியுள்ளோம். அதைத் திறந்து, பின்னர் முடிந்தது என்பதைத் தேர்ந்தெடுக்கவும்.",
+		"user.verification.destination": "{destination} க்கு அனுப்பப்பட்டது.",
+		"user.verification.success": "{attribute} சரிபார்க்கப்பட்டது.",
+		"user.verification.error": "சரிபார்ப்பு தோல்வியடைந்தது. மீண்டும் முயற்சிக்கவும்.",
 		"user.change_password.heading": "{credential} மாற்றவும்",
 		"user.change_password.new.label": "புதிய {credential}",
 		"user.change_password.new.placeholder": "உங்கள் புதிய {credentialLower}-ஐ உள்ளிடவும்",
@@ -13499,6 +13885,20 @@ const si_LK = {
 		"passkey.register.description": "මුරපදයක් නොමැතිව ඔබේ ගිණුමට ආරක්ෂිතව ඇතුල් වීමට passkey එකක් සාදන්න.",
 		"user.profile.heading": "පැතිකඩ",
 		"user.profile.update.generic.error": "ඔබේ පැතිකඩ යාවත්කාලීන කිරීමේදී දෝෂයක් ඇතිවිය.කරුණාකර නැවත උත්සාහ කරන්න",
+		"user.verification.status.verified": "සත්‍යාපනය කර ඇත",
+		"user.verification.status.unverified": "සත්‍යාපනය කර නැත",
+		"user.verification.status.verified_at": "{date} දින සත්‍යාපනය කරන ලදී",
+		"user.verification.buttons.verify.text": "සත්‍යාපනය කරන්න",
+		"user.verification.buttons.cancel.text": "අවලංගු කරන්න",
+		"user.verification.buttons.close.text": "වසන්න",
+		"user.verification.buttons.done.text": "නිම කළා",
+		"user.verification.heading": "{attribute} සත්‍යාපනය කරන්න",
+		"user.verification.subheading": "{destination} වෙත යැවූ කේතය ඇතුළත් කරන්න.",
+		"user.verification.subheading.generic": "ඔබට යැවූ කේතය ඇතුළත් කරන්න.",
+		"user.verification.subheading.link": "{destination} වෙත සත්‍යාපන සබැඳියක් යැව්වෙමු. එය විවෘත කර, ඉන්පසු නිම කළා තෝරන්න.",
+		"user.verification.destination": "{destination} වෙත යවන ලදී.",
+		"user.verification.success": "{attribute} සත්‍යාපනය කරන ලදී.",
+		"user.verification.error": "සත්‍යාපනය අසාර්ථක විය. කරුණාකර නැවත උත්සාහ කරන්න.",
 		"user.change_password.heading": "{credential} වෙනස් කරන්න",
 		"user.change_password.new.label": "නව {credential}",
 		"user.change_password.new.placeholder": "ඔබේ නව {credentialLower} ඇතුළත් කරන්න",
@@ -14847,6 +15247,7 @@ exports.AdministrationModes = AdministrationConstants_default;
 exports.AgentQueryKeys = AgentQueryKeys_default;
 exports.ApplicationNativeAuthenticationConstants = ApplicationNativeAuthenticationConstants_default;
 exports.ApplicationQueryKeys = ApplicationQueryKeys_default;
+exports.AttributeVerificationConstants = AttributeVerificationConstants_default;
 exports.AuthFlowSelectConstants = AuthFlowSelectConstants_default;
 exports.AuthenticationHelper = AuthenticationHelper_default;
 exports.BackchannelLogoutConstants = BackchannelLogoutConstants_default;
@@ -14866,6 +15267,7 @@ exports.EmbeddedFlowTextVariant = EmbeddedFlowTextVariant;
 exports.EmbeddedFlowType = EmbeddedFlowType;
 exports.EmbeddedRecoveryFlowStatus = EmbeddedRecoveryFlowStatus;
 exports.EmbeddedRecoveryFlowType = EmbeddedRecoveryFlowType;
+exports.EmbeddedSelfFlowStatus = EmbeddedSelfFlowStatus;
 exports.EmbeddedSignInFlowStatus = EmbeddedSignInFlowStatus;
 exports.EmbeddedSignInFlowType = EmbeddedSignInFlowType;
 exports.EmbeddedSignUpFlowStatus = EmbeddedSignUpFlowStatus;
@@ -14906,6 +15308,7 @@ exports.base64urlToArrayBuffer = base64urlToArrayBuffer_default;
 exports.bem = bem_default;
 exports.buildValidatorFromRules = buildValidatorFromRules_default;
 exports.capPageSize = capPageSize_default;
+exports.compileConsentDecisions = compileConsentDecisions_default;
 exports.computeNextPageOffset = computeNextPageOffset_default;
 exports.configureLogger = configure;
 exports.countryCodeToFlagEmoji = countryCodeToFlagEmoji;
@@ -14979,6 +15382,7 @@ exports.evaluateValidationRule = evaluateValidationRule_default;
 exports.executeAdministrationFlow = executeAdministrationFlow_default;
 exports.executeEmbeddedDeviceGrantFlow = executeEmbeddedDeviceGrantFlow_default;
 exports.executeEmbeddedRecoveryFlow = executeEmbeddedRecoveryFlow_default;
+exports.executeEmbeddedSelfFlow = executeEmbeddedSelfFlow_default;
 exports.executeEmbeddedSignInFlow = executeEmbeddedSignInFlow_default;
 exports.executeEmbeddedSignUpFlow = executeEmbeddedSignUpFlow_default;
 exports.executeEmbeddedUserOnboardingFlow = executeEmbeddedUserOnboardingFlow_default;
@@ -15025,6 +15429,7 @@ exports.getDesignThemeUsages = getDesignThemeUsages_default;
 exports.getDesignThemes = getDesignThemes_default;
 exports.getFlow = getFlow_default;
 exports.getFlowMeta = getFlowMeta_default;
+exports.getFlowStepComponents = getFlowStepComponents_default;
 exports.getFlowUsages = getFlowUsages_default;
 exports.getFlowVersion = getFlowVersion_default;
 exports.getFlowVersions = getFlowVersions_default;
@@ -15085,6 +15490,7 @@ exports.getUsersMeMeta = getUsersMeMeta_default;
 exports.getVariable = getVariable_default;
 exports.getVariables = getVariables_default;
 exports.getVendorPrefix = getVendorPrefix_default;
+exports.getVerifiedAttributes = getVerifiedAttributes_default;
 exports.hasPermission = hasPermission_default;
 exports.hasUnresolvedTranslationParams = hasUnresolvedTranslationParams;
 exports.importConfiguration = importConfiguration_default;
@@ -15095,6 +15501,7 @@ exports.isEmojiUri = isEmojiUri_default;
 exports.isEmpty = isEmpty_default;
 exports.isRecognizedBaseUrlPattern = isRecognizedBaseUrlPattern_default;
 exports.isRetryableError = isRetryableError_default;
+exports.isVerifiableAttribute = isVerifiableAttribute_default;
 exports.loadPageWithRetryAndLog = loadPageWithRetryAndLog_default;
 exports.loadUntilOptionsGrow = loadUntilOptionsGrow_default;
 exports.logResourceFailure = logResourceFailure;
@@ -15108,6 +15515,7 @@ exports.normalizeTranslations = normalizeTranslations_default;
 exports.parseKeyValuePairs = parseKeyValuePairs_default;
 exports.parseRedirectUris = parseRedirectUris_default;
 exports.parseSelectPageQuery = parseSelectPageQuery_default;
+exports.parseSelfFlowRequest = parseSelfFlowRequest_default;
 exports.previewCimdDocument = previewCimdDocument_default;
 exports.processOpenIDScopes = processOpenIDScopes_default;
 exports.regenerateAgentSecret = regenerateAgentSecret_default;

package/dist/constants/AttributeVerificationConstants.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Wire names and eligibility rules for self user attribute verification.
+ */
+declare const AttributeVerificationConstants: {
+    ATTRIBUTE_INPUT: string;
+    DEFAULT_FLOW_HANDLE: string;
+    MASKED_DESTINATION_KEY: string;
+    VERIFIABLE_ATTRIBUTE_TYPES: readonly string[];
+    VERIFIED_ATTRIBUTES_KEY: string;
+    VERIFY_AFTER_SAVE_ATTRIBUTE_TYPES: readonly string[];
+};
+export default AttributeVerificationConstants;
+//# sourceMappingURL=AttributeVerificationConstants.d.ts.map

package/dist/constants/AttributeVerificationConstants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttributeVerificationConstants.d.ts","sourceRoot":"","sources":["../../src/constants/AttributeVerificationConstants.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,QAAA,MAAM,8BAA8B,EAAE;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,uBAAuB,EAAE,MAAM,CAAC;IAChC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;CA2BtD,CAAC;AAEF,eAAe,8BAA8B,CAAC"}