@thunderid/javascript 1.9.0 → 1.10.0

package/dist/cjs/index.cjs

@@ -209,6 +209,33 @@ var IsomorphicCrypto = class {
 	}
 };
 
+//#endregion
+//#region src/api/auth/flowSessions.ts
+const collectedSessions = /* @__PURE__ */ new Map();
+/**
+* Holds the sessions a flow step started under its authorization request, and drops the ones it ended.
+*/
+const collectFlowSessions = (authId, step) => {
+	if (!step.sessionData?.length && !step.clearedSessions?.length) return;
+	const held = collectedSessions.get(authId) ?? /* @__PURE__ */ new Map();
+	step.sessionData?.forEach(({ flowIdentifier, sessionHandle }) => {
+		held.set(flowIdentifier, {
+			flowIdentifier,
+			sessionHandle
+		});
+	});
+	step.clearedSessions?.forEach((flowIdentifier) => held.delete(flowIdentifier));
+	collectedSessions.set(authId, held);
+};
+/**
+* Returns the sessions held for an authorization request and forgets them.
+*/
+const takeFlowSessions = (authId) => {
+	const held = collectedSessions.get(authId);
+	collectedSessions.delete(authId);
+	return held ? [...held.values()] : [];
+};
+
 //#endregion
 //#region src/errors/ThunderIDError.ts
 /**
@@ -773,7 +800,7 @@ const readErrorAssertion = (body) => {
 		return;
 	}
 };
-const postAuthCallback = async (baseUrl, body, headers) => {
+const postAuthCallback$1 = async (baseUrl, body, headers) => {
 	const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
 		body: JSON.stringify(body),
 		credentials: "include",
@@ -792,7 +819,8 @@ const postAuthCallback = async (baseUrl, body, headers) => {
 	return oauth2Response.json();
 };
 const relayFailure = async (baseUrl, authId, errorAssertion, headers, flowResponse) => {
-	const oauth2Result = await postAuthCallback(baseUrl, {
+	takeFlowSessions(authId);
+	const oauth2Result = await postAuthCallback$1(baseUrl, {
 		assertion: errorAssertion,
 		authId
 	}, headers);
@@ -832,10 +860,13 @@ const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSe
 		throw new ThunderIDAPIError(errorText, "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
 	}
 	const flowResponse = await response.json();
+	if (authId) collectFlowSessions(authId, flowResponse);
 	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Result = await postAuthCallback(baseUrl, {
+		const sessionData = takeFlowSessions(authId);
+		const oauth2Result = await postAuthCallback$1(baseUrl, {
 			assertion: flowResponse.assertion,
-			authId
+			authId,
+			...sessionData.length > 0 ? { sessionData } : {}
 		}, requestConfig.headers);
 		return {
 			flowStatus: flowResponse.flowStatus,
@@ -850,6 +881,257 @@ const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSe
 };
 var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
 
+//#endregion
+//#region src/models/embedded-flow.ts
+let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
+	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
+	EmbeddedFlowType$1["DeviceGrant"] = "DEVICE_GRANT";
+	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
+	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
+	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
+	return EmbeddedFlowType$1;
+}({});
+let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
+	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
+	EmbeddedFlowResponseType$1["View"] = "VIEW";
+	return EmbeddedFlowResponseType$1;
+}({});
+/**
+* Component types supported by the ThunderID embedded flow API.
+*
+* These types define the different UI components that can be rendered
+* as part of the embedded authentication flows. Each type corresponds
+* to a specific UI element with its own behavior and properties.
+*
+* @example
+* ```typescript
+* // Check component type to render appropriate UI
+* if (component.type === EmbeddedFlowComponentType.TextInput) {
+*   // Render text input field
+* } else if (component.type === EmbeddedFlowComponentType.Action) {
+*   // Render button/action
+* }
+* ```
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$1) {
+	/** Interactive action component (buttons, links) for user interactions */
+	EmbeddedFlowComponentType$1["Action"] = "ACTION";
+	/** Container block component that groups other components */
+	EmbeddedFlowComponentType$1["Block"] = "BLOCK";
+	/** Consent component for displaying consent purposes and attributes */
+	EmbeddedFlowComponentType$1["Consent"] = "CONSENT";
+	/** Copyable text display component that shows text with a copy-to-clipboard action */
+	EmbeddedFlowComponentType$1["CopyableText"] = "COPYABLE_TEXT";
+	/** Date input field for selecting a calendar date */
+	EmbeddedFlowComponentType$1["DateInput"] = "DATE_INPUT";
+	/** Divider component for visual separation of content */
+	EmbeddedFlowComponentType$1["Divider"] = "DIVIDER";
+	/** Email input field with validation for email addresses. */
+	EmbeddedFlowComponentType$1["EmailInput"] = "EMAIL_INPUT";
+	/** Icon display component for rendering named vector icons */
+	EmbeddedFlowComponentType$1["Icon"] = "ICON";
+	/** Image display component for logos and illustrations */
+	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
+	/** Key-value list display component that shows label and value pairs published in additionalData */
+	EmbeddedFlowComponentType$1["KeyValueList"] = "KEY_VALUE_LIST";
+	/** One-time password input field for multi-factor authentication */
+	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
+	/** Organization unit tree picker for selecting an OU */
+	EmbeddedFlowComponentType$1["OuSelect"] = "OU_SELECT";
+	/** Password input field with masking for sensitive data */
+	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
+	/** Phone number input field with country code support */
+	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
+	/** Rich text display component that renders formatted HTML content */
+	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
+	/** Select/dropdown input component for single choice selection */
+	EmbeddedFlowComponentType$1["Select"] = "SELECT";
+	/** Stack layout component for arranging children in a row or column */
+	EmbeddedFlowComponentType$1["Stack"] = "STACK";
+	/** Text display component for labels, headings, and messages */
+	EmbeddedFlowComponentType$1["Text"] = "TEXT";
+	/** Standard text input field for user data entry */
+	EmbeddedFlowComponentType$1["TextInput"] = "TEXT_INPUT";
+	/** Timer component for displaying a countdown */
+	EmbeddedFlowComponentType$1["Timer"] = "TIMER";
+	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
+	EmbeddedFlowComponentType$1["QrCode"] = "QR_CODE";
+	/** Single-user picker with incremental, paginated directory loading */
+	EmbeddedFlowComponentType$1["UserSelect"] = "USER_SELECT";
+	/** Authentication-flow picker with incremental, paginated loading; submits the flow ID */
+	EmbeddedFlowComponentType$1["AuthFlowSelect"] = "AUTH_FLOW_SELECT";
+	/** User-type picker with incremental, paginated loading; submits the user type handle */
+	EmbeddedFlowComponentType$1["UserTypeSelect"] = "USER_TYPE_SELECT";
+	return EmbeddedFlowComponentType$1;
+}({});
+/**
+* Action variant types for buttons and interactive elements.
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
+	/** Danger action button for destructive operations */
+	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
+	/** Info action button for informational purposes */
+	EmbeddedFlowActionVariant$1["Info"] = "INFO";
+	/** Link-styled action button */
+	EmbeddedFlowActionVariant$1["Link"] = "LINK";
+	/** Outlined action button for secondary emphasis */
+	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
+	/** Primary action button with highest visual emphasis */
+	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
+	/** Secondary action button with moderate visual emphasis */
+	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
+	/** Success action button for positive confirmations */
+	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
+	/** Tertiary action button with minimal visual emphasis */
+	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
+	/** Warning action button for cautionary actions */
+	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
+	return EmbeddedFlowActionVariant$1;
+}({});
+/**
+* Text variant types for typography components.
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
+	/** Primary body text for main content */
+	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
+	/** Secondary body text for supplementary content */
+	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
+	/** Text styled for button labels */
+	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
+	/** Small caption text for annotations and descriptions */
+	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
+	/** Largest heading level for main titles */
+	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
+	/** Second level heading for major sections */
+	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
+	/** Third level heading for subsections */
+	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
+	/** Fourth level heading for minor sections */
+	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
+	/** Fifth level heading for detailed sections */
+	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
+	/** Smallest heading level for fine-grained sections */
+	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
+	/** Overline text for labels and categories */
+	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
+	/** Primary subtitle text with larger emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
+	/** Secondary subtitle text with moderate emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
+	return EmbeddedFlowTextVariant$1;
+}({});
+/**
+* Event types for action components.
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
+	/** Navigate back to the previous step */
+	EmbeddedFlowEventType$1["Back"] = "BACK";
+	/** Cancel the current operation */
+	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
+	/** Navigate to a different flow step or page */
+	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
+	/** Reset form fields to initial state */
+	EmbeddedFlowEventType$1["Reset"] = "RESET";
+	/** Submit form data to the server */
+	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
+	/** Trigger an action or event */
+	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
+	return EmbeddedFlowEventType$1;
+}({});
+
+//#endregion
+//#region src/api/auth/executeEmbeddedDeviceGrantFlow.ts
+const resolveCallbackUrl = (endpoint, baseUrl) => {
+	if (baseUrl) return `${baseUrl.replace(/\/$/, "")}/oauth2/auth/callback`;
+	const flowEndpoint = new URL(endpoint);
+	const basePath = flowEndpoint.pathname.replace(/\/flow\/execute\/?$/, "");
+	return new URL(`${basePath}/oauth2/auth/callback`, flowEndpoint.origin).toString();
+};
+const postAuthCallback = async (callbackUrl, body, headers, allowAccessDenied) => {
+	const callbackResponse = await fetch(callbackUrl, {
+		body: JSON.stringify(body),
+		credentials: "include",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...headers
+		},
+		method: "POST"
+	});
+	if (!callbackResponse.ok) {
+		const errorText = await callbackResponse.text();
+		let errorPayload;
+		try {
+			errorPayload = JSON.parse(errorText);
+		} catch {
+			errorPayload = void 0;
+		}
+		const isAccessDenied = typeof errorPayload === "object" && errorPayload !== null && "error" in errorPayload && errorPayload.error === "access_denied";
+		if (allowAccessDenied && callbackResponse.status === 400 && isAccessDenied) return {};
+		throw new ThunderIDAPIError(errorText, "executeEmbeddedDeviceGrantFlow-CallbackError-001", "javascript", callbackResponse.status, callbackResponse.statusText);
+	}
+	return await callbackResponse.json();
+};
+/**
+* Executes or continues the application's configured Device Grant flow.
+*
+* The request starts at the existing flow execution endpoint. When the terminal flow response
+* carries the server-issued authorization request ID and assertion, this function relays them
+* to the existing OAuth callback endpoint. A start request requires its application ID; an optional
+* user code is submitted as flow input.
+*/
+const executeEmbeddedDeviceGrantFlow = async ({ baseUrl, payload, url,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("A flow payload is required", "executeEmbeddedDeviceGrantFlow-ValidationError-001", "javascript", 400, "The Device Grant flow cannot be executed without a request payload.");
+	if (!url && !baseUrl) throw new ThunderIDAPIError("A server URL is required", "executeEmbeddedDeviceGrantFlow-ValidationError-002", "javascript", 400, "The Device Grant flow endpoint cannot be resolved without a server URL.");
+	const isContinuation = typeof payload === "object" && payload !== null && "executionId" in payload && typeof payload.executionId === "string" && payload.executionId.length > 0;
+	const isNewDeviceGrantFlow = typeof payload === "object" && payload !== null && "flowType" in payload && payload.flowType === EmbeddedFlowType.DeviceGrant && "inputs" in payload && typeof payload.applicationId === "string" && payload.applicationId.trim().length > 0;
+	if (!isContinuation && !isNewDeviceGrantFlow) throw new ThunderIDAPIError("The Device Grant flow payload is invalid", "executeEmbeddedDeviceGrantFlow-ValidationError-003", "javascript", 400, "Start requests require the DEVICE_GRANT flow type and a non-empty application ID; continuation requests require an execution ID.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const callbackUrl = resolveCallbackUrl(endpoint, baseUrl);
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const requestPayload = isNewDeviceGrantFlow || hasOnlyFlowId ? {
+		...cleanPayload,
+		verbose: true
+	} : cleanPayload;
+	const response = await fetch(endpoint, {
+		credentials: "include",
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method ?? "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedDeviceGrantFlow-FlowError-001", "javascript", response.status, response.statusText);
+	const flowResponse = await response.json();
+	const additionalData = flowResponse.data?.additionalData;
+	const authId = additionalData?.["authId"];
+	const callbackType = additionalData?.["callbackType"];
+	const assertion = flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete ? flowResponse.assertion : flowResponse.errorAssertion;
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete || flowResponse.flowStatus === EmbeddedSignInFlowStatus.Error) {
+		if (typeof authId !== "string" || typeof callbackType !== "string" || typeof assertion !== "string") throw new ThunderIDAPIError("The completed Device Grant flow did not include its callback data.", "executeEmbeddedDeviceGrantFlow-CallbackError-002", "javascript");
+		const redirectUri = (await postAuthCallback(callbackUrl, {
+			assertion,
+			authId,
+			type: callbackType
+		}, requestConfig.headers, flowResponse.flowStatus === EmbeddedSignInFlowStatus.Error))["redirect_uri"];
+		if (typeof redirectUri === "string") flowResponse.redirectUrl = redirectUri;
+	}
+	return flowResponse;
+};
+var executeEmbeddedDeviceGrantFlow_default = executeEmbeddedDeviceGrantFlow;
+
 //#endregion
 //#region src/models/embedded-signup-flow.ts
 /**
@@ -963,11 +1245,14 @@ const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requ
 	});
 	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
 	const flowResponse = await response.json();
+	if (authId) collectFlowSessions(authId, flowResponse);
 	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const sessionData = takeFlowSessions(authId);
 		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
 			body: JSON.stringify({
 				assertion: flowResponse.assertion,
-				authId
+				authId,
+				...sessionData.length > 0 ? { sessionData } : {}
 			}),
 			credentials: "include",
 			headers: {
@@ -1053,171 +1338,6 @@ const executeEmbeddedRecoveryFlow = async ({ url, baseUrl, payload,...requestCon
 };
 var executeEmbeddedRecoveryFlow_default = executeEmbeddedRecoveryFlow;
 
-//#endregion
-//#region src/models/embedded-flow.ts
-let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
-	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
-	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
-	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
-	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
-	return EmbeddedFlowType$1;
-}({});
-let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
-	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
-	EmbeddedFlowResponseType$1["View"] = "VIEW";
-	return EmbeddedFlowResponseType$1;
-}({});
-/**
-* Component types supported by the ThunderID embedded flow API.
-*
-* These types define the different UI components that can be rendered
-* as part of the embedded authentication flows. Each type corresponds
-* to a specific UI element with its own behavior and properties.
-*
-* @example
-* ```typescript
-* // Check component type to render appropriate UI
-* if (component.type === EmbeddedFlowComponentType.TextInput) {
-*   // Render text input field
-* } else if (component.type === EmbeddedFlowComponentType.Action) {
-*   // Render button/action
-* }
-* ```
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$1) {
-	/** Interactive action component (buttons, links) for user interactions */
-	EmbeddedFlowComponentType$1["Action"] = "ACTION";
-	/** Container block component that groups other components */
-	EmbeddedFlowComponentType$1["Block"] = "BLOCK";
-	/** Consent component for displaying consent purposes and attributes */
-	EmbeddedFlowComponentType$1["Consent"] = "CONSENT";
-	/** Copyable text display component that shows text with a copy-to-clipboard action */
-	EmbeddedFlowComponentType$1["CopyableText"] = "COPYABLE_TEXT";
-	/** Date input field for selecting a calendar date */
-	EmbeddedFlowComponentType$1["DateInput"] = "DATE_INPUT";
-	/** Divider component for visual separation of content */
-	EmbeddedFlowComponentType$1["Divider"] = "DIVIDER";
-	/** Email input field with validation for email addresses. */
-	EmbeddedFlowComponentType$1["EmailInput"] = "EMAIL_INPUT";
-	/** Icon display component for rendering named vector icons */
-	EmbeddedFlowComponentType$1["Icon"] = "ICON";
-	/** Image display component for logos and illustrations */
-	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
-	/** Key-value list display component that shows label and value pairs published in additionalData */
-	EmbeddedFlowComponentType$1["KeyValueList"] = "KEY_VALUE_LIST";
-	/** One-time password input field for multi-factor authentication */
-	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
-	/** Organization unit tree picker for selecting an OU */
-	EmbeddedFlowComponentType$1["OuSelect"] = "OU_SELECT";
-	/** Password input field with masking for sensitive data */
-	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
-	/** Phone number input field with country code support */
-	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
-	/** Rich text display component that renders formatted HTML content */
-	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
-	/** Select/dropdown input component for single choice selection */
-	EmbeddedFlowComponentType$1["Select"] = "SELECT";
-	/** Stack layout component for arranging children in a row or column */
-	EmbeddedFlowComponentType$1["Stack"] = "STACK";
-	/** Text display component for labels, headings, and messages */
-	EmbeddedFlowComponentType$1["Text"] = "TEXT";
-	/** Standard text input field for user data entry */
-	EmbeddedFlowComponentType$1["TextInput"] = "TEXT_INPUT";
-	/** Timer component for displaying a countdown */
-	EmbeddedFlowComponentType$1["Timer"] = "TIMER";
-	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
-	EmbeddedFlowComponentType$1["QrCode"] = "QR_CODE";
-	/** Single-user picker with incremental, paginated directory loading */
-	EmbeddedFlowComponentType$1["UserSelect"] = "USER_SELECT";
-	/** Authentication-flow picker with incremental, paginated loading; submits the flow ID */
-	EmbeddedFlowComponentType$1["AuthFlowSelect"] = "AUTH_FLOW_SELECT";
-	/** User-type picker with incremental, paginated loading; submits the user type handle */
-	EmbeddedFlowComponentType$1["UserTypeSelect"] = "USER_TYPE_SELECT";
-	return EmbeddedFlowComponentType$1;
-}({});
-/**
-* Action variant types for buttons and interactive elements.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
-	/** Danger action button for destructive operations */
-	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
-	/** Info action button for informational purposes */
-	EmbeddedFlowActionVariant$1["Info"] = "INFO";
-	/** Link-styled action button */
-	EmbeddedFlowActionVariant$1["Link"] = "LINK";
-	/** Outlined action button for secondary emphasis */
-	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
-	/** Primary action button with highest visual emphasis */
-	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
-	/** Secondary action button with moderate visual emphasis */
-	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
-	/** Success action button for positive confirmations */
-	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
-	/** Tertiary action button with minimal visual emphasis */
-	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
-	/** Warning action button for cautionary actions */
-	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
-	return EmbeddedFlowActionVariant$1;
-}({});
-/**
-* Text variant types for typography components.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
-	/** Primary body text for main content */
-	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
-	/** Secondary body text for supplementary content */
-	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
-	/** Text styled for button labels */
-	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
-	/** Small caption text for annotations and descriptions */
-	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
-	/** Largest heading level for main titles */
-	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
-	/** Second level heading for major sections */
-	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
-	/** Third level heading for subsections */
-	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
-	/** Fourth level heading for minor sections */
-	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
-	/** Fifth level heading for detailed sections */
-	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
-	/** Smallest heading level for fine-grained sections */
-	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
-	/** Overline text for labels and categories */
-	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
-	/** Primary subtitle text with larger emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
-	/** Secondary subtitle text with moderate emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
-	return EmbeddedFlowTextVariant$1;
-}({});
-/**
-* Event types for action components.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
-	/** Navigate back to the previous step */
-	EmbeddedFlowEventType$1["Back"] = "BACK";
-	/** Cancel the current operation */
-	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
-	/** Navigate to a different flow step or page */
-	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
-	/** Reset form fields to initial state */
-	EmbeddedFlowEventType$1["Reset"] = "RESET";
-	/** Submit form data to the server */
-	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
-	/** Trigger an action or event */
-	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
-	return EmbeddedFlowEventType$1;
-}({});
-
 //#endregion
 //#region src/api/auth/executeEmbeddedUserOnboardingFlow.ts
 /**
@@ -10869,6 +10989,12 @@ const en_US = {
 		"validation.pattern.invalid": "This value does not match the required format.",
 		"validation.minLength.invalid": "This value is too short.",
 		"validation.maxLength.invalid": "This value is too long.",
+		"deviceGrant.errors.start": "Could not start device verification. Please reload this page.",
+		"deviceGrant.errors.continue": "Could not continue device authorization. Please try again.",
+		"deviceGrant.messages.complete": "Device authorized",
+		"deviceGrant.messages.completeDescription": "You can return to your device.",
+		"deviceGrant.messages.failed": "Device authorization failed",
+		"deviceGrant.messages.failedDescription": "Return to your device and start again.",
 		"signin.heading": "Sign In",
 		"signin.subheading": "Welcome back! Please sign in to continue.",
 		"signin.images.app_logo.alt": "Application logo",
@@ -10937,6 +11063,8 @@ const en_US = {
 		"consent.essential_claims": "Essential Attributes",
 		"consent.optional_claims": "Optional Attributes",
 		"consent.authorize_scope": "Permissions",
+		"consent.essential_scope": "Essential Permissions",
+		"consent.optional_scope": "Optional Permissions",
 		"consent.essential_claims.info": "These attributes are required for the service to function properly.",
 		"consent.optional_claims.info": "These attributes are optional and can be provided at your discretion.",
 		"consent.authorize_scope.info": "These permissions allow the service to access additional features.",
@@ -10954,6 +11082,8 @@ const en_US = {
 		"consent.authorization_details.add_item": "{item}, add",
 		"consent.authorization_details.add_back_item": "{item}, add back",
 		"consent.authorization_details.new_item": "{label}, add",
+		"consent.essential_scope.info": "These permissions are required for the service to function properly.",
+		"consent.optional_scope.info": "These permissions are optional and can be granted at your discretion.",
 		"errors.heading": "Error",
 		"errors.signin.components.not.available": "Sign-in form is not available at the moment. Please try again later.",
 		"errors.signin.initialization": "An error occurred while initializing. Please try again later.",
@@ -11208,6 +11338,12 @@ const fr_FR = {
 		"validation.pattern.invalid": "Cette valeur ne correspond pas au format requis.",
 		"validation.minLength.invalid": "Cette valeur est trop courte.",
 		"validation.maxLength.invalid": "Cette valeur est trop longue.",
+		"deviceGrant.errors.start": "Impossible de démarrer la vérification de l’appareil. Rechargez cette page.",
+		"deviceGrant.errors.continue": "Impossible de poursuivre l’autorisation de l’appareil. Réessayez.",
+		"deviceGrant.messages.complete": "Appareil autorisé",
+		"deviceGrant.messages.completeDescription": "Vous pouvez revenir à votre appareil.",
+		"deviceGrant.messages.failed": "Échec de l’autorisation de l’appareil",
+		"deviceGrant.messages.failedDescription": "Revenez à votre appareil et recommencez.",
 		"signin.heading": "Se connecter",
 		"signin.subheading": "Entrez vos identifiants pour continuer.",
 		"signin.images.app_logo.alt": "Logo de l'application",
@@ -11276,9 +11412,13 @@ const fr_FR = {
 		"consent.essential_claims": "Attributs essentiels",
 		"consent.optional_claims": "Attributs facultatifs",
 		"consent.authorize_scope": "Autorisations",
+		"consent.essential_scope": "Autorisations essentielles",
+		"consent.optional_scope": "Autorisations facultatives",
 		"consent.essential_claims.info": "Ces attributs sont nécessaires au bon fonctionnement du service.",
 		"consent.optional_claims.info": "Ces attributs sont facultatifs et peuvent être fournis à votre discrétion.",
 		"consent.authorize_scope.info": "Ces autorisations permettent au service d'accéder à des fonctionnalités supplémentaires.",
+		"consent.essential_scope.info": "Ces autorisations sont nécessaires au bon fonctionnement du service.",
+		"consent.optional_scope.info": "Ces autorisations sont facultatives et peuvent être accordées à votre discrétion.",
 		"errors.heading": "Erreur",
 		"consent.authorization_details.approve": "Approuver",
 		"consent.authorization_details.show_more": "Afficher plus",
@@ -11547,6 +11687,12 @@ const te_IN = {
 		"validation.pattern.invalid": "ఈ విలువ అవసరమైన ఆకృతికి సరిపోలడం లేదు.",
 		"validation.minLength.invalid": "ఈ విలువ చాలా చిన్నది.",
 		"validation.maxLength.invalid": "ఈ విలువ చాలా పెద్దది.",
+		"deviceGrant.errors.start": "పరికర ధృవీకరణను ప్రారంభించలేకపోయింది. ఈ పేజీని మళ్లీ లోడ్ చేయండి.",
+		"deviceGrant.errors.continue": "పరికర అధికారాన్ని కొనసాగించలేకపోయింది. మళ్లీ ప్రయత్నించండి.",
+		"deviceGrant.messages.complete": "పరికరానికి అధికారం ఇచ్చారు",
+		"deviceGrant.messages.completeDescription": "మీరు మీ పరికరానికి తిరిగి వెళ్లవచ్చు.",
+		"deviceGrant.messages.failed": "పరికర అధికారం విఫలమైంది",
+		"deviceGrant.messages.failedDescription": "మీ పరికరానికి తిరిగి వెళ్లి మళ్లీ ప్రారంభించండి.",
 		"signin.heading": "సైన్ ఇన్ చేయండి",
 		"signin.subheading": "కొనసాగించడానికి మీ వివరాలు ఇవ్వండి.",
 		"signin.images.app_logo.alt": "అప్లికేషన్ లోగో",
@@ -11615,6 +11761,8 @@ const te_IN = {
 		"consent.essential_claims": "ఆవశ్యక లక్షణాలు",
 		"consent.optional_claims": "ఐచ్ఛిక లక్షణాలు",
 		"consent.authorize_scope": "అనుమతులు",
+		"consent.essential_scope": "అవసరమైన అనుమతులు",
+		"consent.optional_scope": "ఐచ్ఛిక అనుమతులు",
 		"consent.essential_claims.info": "సేవ సరిగ్గా పనిచేయడానికి ఈ లక్షణాలు అవసరం.",
 		"consent.optional_claims.info": "ఈ లక్షణాలు ఐచ్ఛికం మరియు మీ విచక్షణ మేరకు అందించవచ్చు.",
 		"consent.authorize_scope.info": "ఈ అనుమతులు సేవను అదనపు ఫీచర్‌లను యాక్సెస్ చేయడానికి అనుమతిస్తాయి.",
@@ -11632,6 +11780,8 @@ const te_IN = {
 		"consent.authorization_details.add_item": "{item}, జోడించు",
 		"consent.authorization_details.add_back_item": "{item}, మళ్లీ జోడించు",
 		"consent.authorization_details.new_item": "{label}, జోడించు",
+		"consent.essential_scope.info": "సేవ సరిగ్గా పనిచేయడానికి ఈ అనుమతులు అవసరం.",
+		"consent.optional_scope.info": "ఈ అనుమతులు ఐచ్ఛికం మరియు మీ విచక్షణ మేరకు మంజూరు చేయవచ్చు.",
 		"errors.heading": "లోపం",
 		"errors.signin.initialization": "ప్రారంభించేటప్పుడు లోపం వచ్చింది. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
 		"errors.signin.flow.failure": "సైన్ ఇన్ ప్రక్రియలో లోపం వచ్చింది. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
@@ -11886,6 +12036,12 @@ const hi_IN = {
 		"validation.pattern.invalid": "यह मान आवश्यक प्रारूप से मेल नहीं खाता।",
 		"validation.minLength.invalid": "यह मान बहुत छोटा है।",
 		"validation.maxLength.invalid": "यह मान बहुत लंबा है।",
+		"deviceGrant.errors.start": "डिवाइस सत्यापन शुरू नहीं हो सका। कृपया यह पेज फिर से लोड करें।",
+		"deviceGrant.errors.continue": "डिवाइस प्राधिकरण जारी नहीं रह सका। कृपया फिर से प्रयास करें।",
+		"deviceGrant.messages.complete": "डिवाइस अधिकृत है",
+		"deviceGrant.messages.completeDescription": "आप अपने डिवाइस पर लौट सकते हैं।",
+		"deviceGrant.messages.failed": "डिवाइस प्राधिकरण विफल हुआ",
+		"deviceGrant.messages.failedDescription": "अपने डिवाइस पर लौटें और फिर से शुरू करें।",
 		"signin.heading": "साइन इन",
 		"signin.subheading": "जारी रखने के लिए अपनी प्रमाणिक जानकारी दर्ज करें।",
 		"signin.images.app_logo.alt": "एप्लिकेशन लोगो",
@@ -11954,6 +12110,8 @@ const hi_IN = {
 		"consent.essential_claims": "आवश्यक विशेषताएँ",
 		"consent.optional_claims": "वैकल्पिक विशेषताएँ",
 		"consent.authorize_scope": "अनुमतियाँ",
+		"consent.essential_scope": "आवश्यक अनुमतियाँ",
+		"consent.optional_scope": "वैकल्पिक अनुमतियाँ",
 		"consent.essential_claims.info": "सेवा के सही ढंग से कार्य करने के लिए ये विशेषताएँ आवश्यक हैं।",
 		"consent.optional_claims.info": "ये विशेषताएँ वैकल्पिक हैं और आपके विवेकानुसार प्रदान की जा सकती हैं।",
 		"consent.authorize_scope.info": "ये अनुमतियाँ सेवा को अतिरिक्त सुविधाओं तक पहुँचने की अनुमति देती हैं।",
@@ -11971,6 +12129,8 @@ const hi_IN = {
 		"consent.authorization_details.add_item": "{item}, जोड़ें",
 		"consent.authorization_details.add_back_item": "{item}, फिर से जोड़ें",
 		"consent.authorization_details.new_item": "{label}, जोड़ें",
+		"consent.essential_scope.info": "सेवा के सही ढंग से कार्य करने के लिए ये अनुमतियाँ आवश्यक हैं।",
+		"consent.optional_scope.info": "ये अनुमतियाँ वैकल्पिक हैं और आपके विवेकानुसार दी जा सकती हैं।",
 		"errors.heading": "त्रुटि",
 		"errors.signin.initialization": "इनिशियलाइज़ेशन में त्रुटि हुई। कृपया बाद में पुनः प्रयास करें।",
 		"errors.signin.flow.failure": "साइन-इन प्रक्रिया में त्रुटि। कृपया बाद में पुनः प्रयास करें।",
@@ -12225,6 +12385,12 @@ const pt_BR = {
 		"validation.pattern.invalid": "Este valor não corresponde ao formato necessário.",
 		"validation.minLength.invalid": "Este valor é muito curto.",
 		"validation.maxLength.invalid": "Este valor é muito longo.",
+		"deviceGrant.errors.start": "Não foi possível iniciar a verificação do dispositivo. Recarregue esta página.",
+		"deviceGrant.errors.continue": "Não foi possível continuar a autorização do dispositivo. Tente novamente.",
+		"deviceGrant.messages.complete": "Dispositivo autorizado",
+		"deviceGrant.messages.completeDescription": "Você pode voltar ao seu dispositivo.",
+		"deviceGrant.messages.failed": "Falha na autorização do dispositivo",
+		"deviceGrant.messages.failedDescription": "Volte ao seu dispositivo e comece novamente.",
 		"signin.heading": "Entrar",
 		"signin.subheading": "Digite suas credencias para continuar.",
 		"signin.images.app_logo.alt": "Logotipo do aplicativo",
@@ -12293,6 +12459,8 @@ const pt_BR = {
 		"consent.essential_claims": "Atributos essenciais",
 		"consent.optional_claims": "Atributos opcionais",
 		"consent.authorize_scope": "Permissões",
+		"consent.essential_scope": "Permissões essenciais",
+		"consent.optional_scope": "Permissões opcionais",
 		"consent.essential_claims.info": "Esses atributos são necessários para o funcionamento adequado do serviço.",
 		"consent.optional_claims.info": "Esses atributos são opcionais e podem ser fornecidos a seu critério.",
 		"consent.authorize_scope.info": "Essas permissões permitem que o serviço acesse recursos adicionais.",
@@ -12310,6 +12478,8 @@ const pt_BR = {
 		"consent.authorization_details.add_item": "{item}, adicionar",
 		"consent.authorization_details.add_back_item": "{item}, adicionar novamente",
 		"consent.authorization_details.new_item": "{label}, adicionar",
+		"consent.essential_scope.info": "Essas permissões são necessárias para o funcionamento adequado do serviço.",
+		"consent.optional_scope.info": "Essas permissões são opcionais e podem ser concedidas a seu critério.",
 		"errors.heading": "Erro",
 		"errors.signin.initialization": "Ocorreu um erro ao inicializar. Tente novamente mais tarde.",
 		"errors.signin.flow.failure": "Ocorreu um erro durante o login. Tente novamente mais tarde.",
@@ -12564,6 +12734,12 @@ const pt_PT = {
 		"validation.pattern.invalid": "Este valor não corresponde ao formato necessário.",
 		"validation.minLength.invalid": "Este valor é demasiado curto.",
 		"validation.maxLength.invalid": "Este valor é demasiado longo.",
+		"deviceGrant.errors.start": "Não foi possível iniciar a verificação do dispositivo. Atualize esta página.",
+		"deviceGrant.errors.continue": "Não foi possível continuar a autorização do dispositivo. Tente novamente.",
+		"deviceGrant.messages.complete": "Dispositivo autorizado",
+		"deviceGrant.messages.completeDescription": "Pode regressar ao seu dispositivo.",
+		"deviceGrant.messages.failed": "Falha na autorização do dispositivo",
+		"deviceGrant.messages.failedDescription": "Regresse ao seu dispositivo e comece novamente.",
 		"signin.heading": "Iniciar Sessão",
 		"signin.subheading": "Introduza as suas credenciais para continuar.",
 		"signin.images.app_logo.alt": "Logótipo da aplicação",
@@ -12632,6 +12808,8 @@ const pt_PT = {
 		"consent.essential_claims": "Atributos essenciais",
 		"consent.optional_claims": "Atributos opcionais",
 		"consent.authorize_scope": "Permissões",
+		"consent.essential_scope": "Permissões essenciais",
+		"consent.optional_scope": "Permissões opcionais",
 		"consent.essential_claims.info": "Estes atributos são necessários para o correto funcionamento do serviço.",
 		"consent.optional_claims.info": "Estes atributos são opcionais e podem ser fornecidos ao seu critério.",
 		"consent.authorize_scope.info": "Estas permissões permitem que o serviço aceda a funcionalidades adicionais.",
@@ -12649,6 +12827,8 @@ const pt_PT = {
 		"consent.authorization_details.add_item": "{item}, adicionar",
 		"consent.authorization_details.add_back_item": "{item}, adicionar novamente",
 		"consent.authorization_details.new_item": "{label}, adicionar",
+		"consent.essential_scope.info": "Estas permissões são necessárias para o correto funcionamento do serviço.",
+		"consent.optional_scope.info": "Estas permissões são opcionais e podem ser concedidas ao seu critério.",
 		"errors.heading": "Erro",
 		"errors.signin.initialization": "Ocorreu um erro ao inicializar. Tente novamente mais tarde.",
 		"errors.signin.flow.failure": "Ocorreu um erro durante o início de sessão. Tente novamente mais tarde.",
@@ -12903,6 +13083,12 @@ const ta_IN = {
 		"validation.pattern.invalid": "இந்த மதிப்பு தேவையான வடிவத்துடன் பொருந்தவில்லை.",
 		"validation.minLength.invalid": "இந்த மதிப்பு மிகவும் குறுகியது.",
 		"validation.maxLength.invalid": "இந்த மதிப்பு மிகவும் நீளமானது.",
+		"deviceGrant.errors.start": "சாதனச் சரிபார்ப்பைத் தொடங்க முடியவில்லை. இந்தப் பக்கத்தை மீண்டும் ஏற்றவும்.",
+		"deviceGrant.errors.continue": "சாதன அங்கீகாரத்தைத் தொடர முடியவில்லை. மீண்டும் முயற்சிக்கவும்.",
+		"deviceGrant.messages.complete": "சாதனத்திற்கு அங்கீகாரம் வழங்கப்பட்டது",
+		"deviceGrant.messages.completeDescription": "உங்கள் சாதனத்திற்குத் திரும்பலாம்.",
+		"deviceGrant.messages.failed": "சாதன அங்கீகாரம் தோல்வியடைந்தது",
+		"deviceGrant.messages.failedDescription": "உங்கள் சாதனத்திற்குத் திரும்பி மீண்டும் தொடங்கவும்.",
 		"signin.heading": "உள்நுழை",
 		"signin.subheading": "தொடர உங்கள் சான்றுகளை உள்ளிடவும்.",
 		"signin.images.app_logo.alt": "பயன்பாட்டு லோகோ",
@@ -12971,6 +13157,8 @@ const ta_IN = {
 		"consent.essential_claims": "அத்தியாவசிய பண்புகள்",
 		"consent.optional_claims": "விருப்பத் பண்புகள்",
 		"consent.authorize_scope": "அனுமதிகள்",
+		"consent.essential_scope": "அத்தியாவசிய அனுமதிகள்",
+		"consent.optional_scope": "விருப்ப அனுமதிகள்",
 		"consent.essential_claims.info": "சேவை சரியாக செயல்பட இந்த பண்புகள் தேவை.",
 		"consent.optional_claims.info": "இந்த பண்புகள் விருப்பத்தேர்வு மற்றும் உங்கள் விருப்பப்படி வழங்கப்படலாம்.",
 		"consent.authorize_scope.info": "இந்த அனுமதிகள் கூடுதல் அம்சங்களை அணுக சேவைக்கு உதவுகின்றன.",
@@ -12988,6 +13176,8 @@ const ta_IN = {
 		"consent.authorization_details.add_item": "{item}, சேர்",
 		"consent.authorization_details.add_back_item": "{item}, மீண்டும் சேர்",
 		"consent.authorization_details.new_item": "{label}, சேர்",
+		"consent.essential_scope.info": "சேவை சரியாக செயல்பட இந்த அனுமதிகள் தேவை.",
+		"consent.optional_scope.info": "இந்த அனுமதிகள் விருப்பமானவை; உங்கள் விருப்பப்படி வழங்கலாம்.",
 		"errors.heading": "பிழை",
 		"errors.signin.initialization": "தொடக்கத்தில் பிழை ஏற்பட்டது. பின்னர் மீண்டும் முயற்சிக்கவும்.",
 		"errors.signin.flow.failure": "உள்நுழைவு செயல்பாட்டின் போது பிழை ஏற்பட்டது. பின்னர் மீண்டும் முயற்சிக்கவும்.",
@@ -13242,6 +13432,12 @@ const si_LK = {
 		"validation.pattern.invalid": "මෙම අගය අවශ්‍ය ආකෘතියට නොගැලපේ.",
 		"validation.minLength.invalid": "මෙම අගය ඉතා කෙටියි.",
 		"validation.maxLength.invalid": "මෙම අගය ඉතා දිගයි.",
+		"deviceGrant.errors.start": "උපාංගය සත්‍යාපනය ආරම්භ කළ නොහැක. මෙම පිටුව නැවත පූරණය කරන්න.",
+		"deviceGrant.errors.continue": "උපාංග අවසරය ඉදිරියට ගෙන යා නොහැක. නැවත උත්සාහ කරන්න.",
+		"deviceGrant.messages.complete": "උපාංගයට අවසර ලබා දී ඇත",
+		"deviceGrant.messages.completeDescription": "ඔබට ඔබගේ උපාංගය වෙත ආපසු යා හැක.",
+		"deviceGrant.messages.failed": "උපාංග අවසරය අසාර්ථක විය",
+		"deviceGrant.messages.failedDescription": "ඔබගේ උපාංගය වෙත ආපසු ගොස් නැවත ආරම්භ කරන්න.",
 		"signin.heading": "ලොග් වෙන්න",
 		"signin.subheading": "ඉදිරියට යාමට ඔබේ සත්‍යාපන තොරතුරු ඇතුළත් කරන්න.",
 		"signin.images.app_logo.alt": "යෙදුමේ ලාංඡනය",
@@ -13310,6 +13506,8 @@ const si_LK = {
 		"consent.essential_claims": "අත්‍යවශ්‍ය ගුණාංග",
 		"consent.optional_claims": "විකල්ප ගුණාංග",
 		"consent.authorize_scope": "අවසර",
+		"consent.essential_scope": "අත්‍යවශ්‍ය අවසර",
+		"consent.optional_scope": "විකල්ප අවසර",
 		"consent.essential_claims.info": "සේවාව නිසි ලෙස ක්‍රියාත්මක වීම සඳහා මෙම ගුණාංග අවශ්‍ය වේ.",
 		"consent.optional_claims.info": "මෙම ගුණාංග විකල්ප වන අතර ඔබේ අභිමතය පරිදි සැපයිය හැක.",
 		"consent.authorize_scope.info": "මෙම අවසරයන් මගින් සේවාවට අමතර විශේෂාංග වෙත ප්‍රවේශ වීමට ඉඩ සලසයි.",
@@ -13327,6 +13525,8 @@ const si_LK = {
 		"consent.authorization_details.add_item": "{item}, එක් කරන්න",
 		"consent.authorization_details.add_back_item": "{item}, නැවත එක් කරන්න",
 		"consent.authorization_details.new_item": "{label}, එක් කරන්න",
+		"consent.essential_scope.info": "සේවාව නිසි ලෙස ක්‍රියාත්මක වීම සඳහා මෙම අවසර අවශ්‍ය වේ.",
+		"consent.optional_scope.info": "මෙම අවසර විකල්ප වන අතර ඔබේ අභිමතය පරිදි ලබා දිය හැක.",
 		"errors.heading": "දෝෂය",
 		"errors.signin.initialization": "ආරම්භ කිරීමේදී දෝෂයක් සිදු විය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
 		"errors.signin.flow.failure": "ලොග් වීමේදී දෝෂයක් සිදු විය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
@@ -14742,6 +14942,7 @@ exports.evaluateChangePasswordForm = evaluateChangePasswordForm_default;
 exports.evaluatePasswordPolicy = evaluatePasswordPolicy_default;
 exports.evaluateValidationRule = evaluateValidationRule_default;
 exports.executeAdministrationFlow = executeAdministrationFlow_default;
+exports.executeEmbeddedDeviceGrantFlow = executeEmbeddedDeviceGrantFlow_default;
 exports.executeEmbeddedRecoveryFlow = executeEmbeddedRecoveryFlow_default;
 exports.executeEmbeddedSignInFlow = executeEmbeddedSignInFlow_default;
 exports.executeEmbeddedSignUpFlow = executeEmbeddedSignUpFlow_default;