auth0-lock 12.1.0 → 12.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.eslintrc.json +1 -1
- package/.github/dependabot.yml +6 -2
- package/.github/workflows/codeql.yml +25 -12
- package/.github/workflows/publish.yml +121 -0
- package/.github/workflows/semgrep.yml +33 -9
- package/.github/workflows/snyk.yml +47 -0
- package/.github/workflows/test.yml +58 -0
- package/.semgrepignore +1 -0
- package/CHANGELOG.md +12 -0
- package/DEVELOPMENT.md +1 -2
- package/README.md +2 -3
- package/lib/__tests__/connection/database/actions.js +1 -1
- package/lib/__tests__/connection/database/index.js +1 -1
- package/lib/__tests__/connection/database/login_pane.js +2 -2
- package/lib/__tests__/connection/database/password_reset_confirmation.js +2 -2
- package/lib/__tests__/connection/database/signed_up_confirmation.js +2 -2
- package/lib/__tests__/connection/enterprise/actions.js +1 -1
- package/lib/__tests__/connection/enterprise/hrd_pane.js +1 -1
- package/lib/__tests__/connection/enterprise/hrd_screen.js +1 -1
- package/lib/__tests__/connection/enterprise/quick_auth_screen.js +2 -2
- package/lib/__tests__/connection/passwordless/ask_vcode.js +1 -1
- package/lib/__tests__/connection/passwordless/email_sent_confirmation.js +2 -2
- package/lib/__tests__/core/actions.js +1 -1
- package/lib/__tests__/core/remote_data.js +2 -2
- package/lib/__tests__/core/signed_in_confirmation.js +2 -2
- package/lib/__tests__/core/sso/last_login_screen.js +1 -1
- package/lib/__tests__/core/tenant.js +1 -1
- package/lib/__tests__/core/web_api.js +3 -3
- package/lib/__tests__/engine/classic.js +3 -3
- package/lib/__tests__/field/captcha/arkose.js +29 -0
- package/lib/__tests__/field/captcha/friendlyCaptcha.js +17 -47
- package/lib/__tests__/field/captcha/hcaptcha.js +17 -47
- package/lib/__tests__/field/captcha/recaptcha_enterprise.js +17 -47
- package/lib/__tests__/field/captcha/recaptchav2.js +17 -47
- package/lib/__tests__/field/captcha.js +30 -1
- package/lib/__tests__/field/custom_input.js +21 -0
- package/lib/__tests__/field/field.js +1 -1
- package/lib/__tests__/i18n.js +1 -1
- package/lib/__tests__/testUtils.js +10 -17
- package/lib/__tests__/ui/box/chrome.js +3 -3
- package/lib/__tests__/ui/box/confirmation_pane.js +2 -2
- package/lib/avatar.js +2 -3
- package/lib/connection/captcha.js +1 -1
- package/lib/connection/database/actions.js +1 -1
- package/lib/connection/database/index.js +1 -1
- package/lib/connection/database/login_pane.js +2 -3
- package/lib/connection/database/login_sign_up_tabs.js +2 -3
- package/lib/connection/database/mfa_pane.js +2 -3
- package/lib/connection/database/password_reset_confirmation.js +2 -3
- package/lib/connection/database/reset_password.js +2 -3
- package/lib/connection/database/reset_password_pane.js +2 -3
- package/lib/connection/database/sign_up_terms.js +1 -2
- package/lib/connection/database/signed_up_confirmation.js +2 -3
- package/lib/connection/enterprise/actions.js +3 -3
- package/lib/connection/enterprise/hrd_pane.js +2 -3
- package/lib/connection/enterprise/hrd_screen.js +2 -3
- package/lib/connection/enterprise/kerberos_screen.js +2 -3
- package/lib/connection/enterprise/quick_auth_screen.js +2 -3
- package/lib/connection/enterprise/single_sign_on_notice.js +1 -2
- package/lib/connection/enterprise.js +4 -4
- package/lib/connection/passwordless/actions.js +3 -3
- package/lib/connection/passwordless/ask_vcode.js +2 -3
- package/lib/connection/passwordless/email_sent_confirmation.js +2 -3
- package/lib/connection/passwordless/index.js +1 -1
- package/lib/connection/social/index.js +2 -3
- package/lib/core/actions.js +3 -3
- package/lib/core/client/index.js +3 -3
- package/lib/core/client/settings.js +1 -1
- package/lib/core/error_screen.js +2 -3
- package/lib/core/index.js +5 -9
- package/lib/core/loading_screen.js +2 -3
- package/lib/core/pane_separator.js +1 -2
- package/lib/core/remote_data.js +1 -1
- package/lib/core/screen.js +2 -3
- package/lib/core/signed_in_confirmation.js +2 -3
- package/lib/core/sso/last_login_screen.js +2 -3
- package/lib/core/tenant/index.js +3 -3
- package/lib/core/tenant/settings.js +1 -1
- package/lib/core/web_api/helper.js +2 -2
- package/lib/core/web_api/p2_api.js +4 -5
- package/lib/core/web_api.js +2 -3
- package/lib/core.js +3 -4
- package/lib/engine/classic/login.js +2 -3
- package/lib/engine/classic/mfa_login_screen.js +2 -3
- package/lib/engine/classic/sign_up_pane.js +2 -3
- package/lib/engine/classic/sign_up_screen.js +2 -3
- package/lib/engine/classic.js +4 -4
- package/lib/engine/passwordless/social_or_email_login_screen.js +2 -3
- package/lib/engine/passwordless/social_or_phone_number_login_screen.js +2 -3
- package/lib/engine/passwordless.js +2 -3
- package/lib/field/captcha/captcha_pane.js +3 -3
- package/lib/field/captcha/third_party_captcha.js +129 -47
- package/lib/field/custom_input.js +3 -3
- package/lib/field/email/email_pane.js +2 -3
- package/lib/field/email.js +1 -1
- package/lib/field/index.js +1 -1
- package/lib/field/mfa-code/mfa_code_pane.js +2 -3
- package/lib/field/option_selection_pane.js +1 -2
- package/lib/field/password/password_pane.js +2 -3
- package/lib/field/phone-number/locations.js +1 -2
- package/lib/field/phone-number/phone_number_pane.js +3 -5
- package/lib/field/social/event.js +1 -1
- package/lib/field/social/social_buttons_pane.js +2 -3
- package/lib/field/username/username_pane.js +2 -3
- package/lib/field/vcode/vcode_pane.js +2 -3
- package/lib/i18n/af.js +1 -2
- package/lib/i18n/ar.js +1 -2
- package/lib/i18n/az.js +1 -2
- package/lib/i18n/bg.js +1 -2
- package/lib/i18n/ca.js +1 -2
- package/lib/i18n/cs.js +1 -2
- package/lib/i18n/da.js +1 -2
- package/lib/i18n/de.js +1 -2
- package/lib/i18n/el.js +1 -2
- package/lib/i18n/en.js +1 -2
- package/lib/i18n/es.js +1 -2
- package/lib/i18n/et.js +1 -2
- package/lib/i18n/fa.js +1 -2
- package/lib/i18n/fi.js +1 -2
- package/lib/i18n/fr.js +1 -2
- package/lib/i18n/he.js +1 -2
- package/lib/i18n/hr.js +1 -2
- package/lib/i18n/hu.js +1 -2
- package/lib/i18n/id.js +1 -2
- package/lib/i18n/it.js +1 -2
- package/lib/i18n/ja.js +1 -2
- package/lib/i18n/ko.js +1 -2
- package/lib/i18n/lt.js +1 -2
- package/lib/i18n/lv.js +1 -2
- package/lib/i18n/ms.js +1 -2
- package/lib/i18n/nb.js +1 -2
- package/lib/i18n/nl.js +1 -2
- package/lib/i18n/nn.js +1 -2
- package/lib/i18n/no.js +1 -2
- package/lib/i18n/pl.js +1 -2
- package/lib/i18n/pt-br.js +1 -2
- package/lib/i18n/pt.js +1 -2
- package/lib/i18n/ro.js +1 -2
- package/lib/i18n/ru.js +1 -2
- package/lib/i18n/sk.js +1 -2
- package/lib/i18n/sl.js +1 -2
- package/lib/i18n/sr.js +1 -2
- package/lib/i18n/sv.js +1 -2
- package/lib/i18n/tr.js +1 -2
- package/lib/i18n/ua.js +1 -2
- package/lib/i18n/uk.js +1 -2
- package/lib/i18n/vi.js +1 -2
- package/lib/i18n/zh-tw.js +1 -2
- package/lib/i18n/zh.js +1 -2
- package/lib/i18n.js +2 -2
- package/lib/index.js +3 -6
- package/lib/lock.js +3 -4
- package/lib/passwordless.js +3 -4
- package/lib/quick-auth/actions.js +3 -3
- package/lib/sync.js +3 -5
- package/lib/ui/box/button.js +2 -4
- package/lib/ui/box/chrome.js +2 -3
- package/lib/ui/box/confirmation_pane.js +2 -3
- package/lib/ui/box/container.js +3 -5
- package/lib/ui/box/global_message.js +2 -3
- package/lib/ui/box/header.js +2 -3
- package/lib/ui/box/multisize_slide.js +2 -3
- package/lib/ui/box/success_pane.js +1 -2
- package/lib/ui/box.js +3 -5
- package/lib/ui/button/auth_button.js +1 -2
- package/lib/ui/input/captcha_input.js +2 -3
- package/lib/ui/input/checkbox_input.js +17 -7
- package/lib/ui/input/email_input.js +2 -3
- package/lib/ui/input/input_wrap.js +7 -4
- package/lib/ui/input/location_input.js +3 -5
- package/lib/ui/input/mfa_code_input.js +2 -3
- package/lib/ui/input/password/password_strength.js +2 -3
- package/lib/ui/input/password_input.js +3 -5
- package/lib/ui/input/phone_number_input.js +2 -3
- package/lib/ui/input/select_input.js +2 -3
- package/lib/ui/input/text_input.js +2 -3
- package/lib/ui/input/username_input.js +2 -3
- package/lib/ui/input/vcode_input.js +2 -3
- package/lib/ui/list.js +2 -3
- package/lib/ui/pane/quick_auth_pane.js +1 -2
- package/lib/utils/atom.js +1 -1
- package/lib/utils/cache.js +2 -3
- package/lib/utils/data_utils.js +1 -1
- package/lib/utils/format.js +1 -1
- package/lib/utils/jsonp_utils.js +2 -3
- package/package.json +7 -10
- package/.circleci/config.yml +0 -90
- package/.snyk +0 -19
package/lib/utils/jsonp_utils.js
CHANGED
|
@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
6
6
|
exports.default = void 0;
|
|
7
7
|
var _jsonp = _interopRequireDefault(require("jsonp"));
|
|
8
8
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
9
|
-
function _typeof(
|
|
9
|
+
function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
|
|
10
10
|
function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
|
|
11
11
|
function _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, _toPropertyKey(descriptor.key), descriptor); } }
|
|
12
12
|
function _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); Object.defineProperty(Constructor, "prototype", { writable: false }); return Constructor; }
|
|
@@ -24,5 +24,4 @@ var JSONPUtils = /*#__PURE__*/function () {
|
|
|
24
24
|
}]);
|
|
25
25
|
return JSONPUtils;
|
|
26
26
|
}();
|
|
27
|
-
var _default = new JSONPUtils();
|
|
28
|
-
exports.default = _default;
|
|
27
|
+
var _default = exports.default = new JSONPUtils();
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "auth0-lock",
|
|
3
|
-
"version": "12.
|
|
3
|
+
"version": "12.3.0",
|
|
4
4
|
"description": "Auth0 Lock",
|
|
5
5
|
"author": "Auth0 <support@auth0.com> (http://auth0.com)",
|
|
6
6
|
"license": "MIT",
|
|
@@ -26,7 +26,6 @@
|
|
|
26
26
|
"dev": "grunt dev",
|
|
27
27
|
"dist": "grunt dist",
|
|
28
28
|
"prepublish": "cross-env BABEL_ENV=npm grunt dist",
|
|
29
|
-
"precommit": "yarn lint-staged",
|
|
30
29
|
"lint": "eslint --ext .jsx,.js src/",
|
|
31
30
|
"test:e2e": "cross-env BABEL_ENV=test karma start --browsers ChromeHeadless",
|
|
32
31
|
"test:e2e:watch": "cross-env BABEL_ENV=test karma start --browsers Chrome --single-run=false",
|
|
@@ -42,6 +41,7 @@
|
|
|
42
41
|
"devDependencies": {
|
|
43
42
|
"@auth0/component-cdn-uploader": "^2.2.2",
|
|
44
43
|
"@babel/core": "^7.0.0",
|
|
44
|
+
"@babel/eslint-parser": "^7.22.9",
|
|
45
45
|
"@babel/plugin-proposal-class-properties": "^7.0.0",
|
|
46
46
|
"@babel/plugin-proposal-decorators": "^7.0.0",
|
|
47
47
|
"@babel/plugin-proposal-do-expressions": "^7.0.0",
|
|
@@ -62,7 +62,6 @@
|
|
|
62
62
|
"@babel/preset-react": "^7.0.0",
|
|
63
63
|
"@cfaester/enzyme-adapter-react-18": "^0.7.0",
|
|
64
64
|
"@google-cloud/translate": "^6.0.2",
|
|
65
|
-
"babel-eslint": "^9.0.0",
|
|
66
65
|
"babel-jest": "^29.3.1",
|
|
67
66
|
"babel-loader": "8.3.0",
|
|
68
67
|
"babel-plugin-stylus-compiler": "^1.4.0",
|
|
@@ -77,9 +76,9 @@
|
|
|
77
76
|
"emojic": "^1.1.17",
|
|
78
77
|
"enzyme": "^3.1.1",
|
|
79
78
|
"es-check": "^6.0.0",
|
|
80
|
-
"eslint": "^
|
|
81
|
-
"eslint-config-prettier": "^8.
|
|
82
|
-
"eslint-plugin-react": "^7.
|
|
79
|
+
"eslint": "^8.45.0",
|
|
80
|
+
"eslint-config-prettier": "^8.8.0",
|
|
81
|
+
"eslint-plugin-react": "^7.32.2",
|
|
83
82
|
"esm": "^3.2.25",
|
|
84
83
|
"events": "^3.3.0",
|
|
85
84
|
"expect.js": "^0.3.1",
|
|
@@ -97,7 +96,6 @@
|
|
|
97
96
|
"jest": "^29.3.1",
|
|
98
97
|
"jest-environment-jsdom": "^29.3.1",
|
|
99
98
|
"jest-environment-jsdom-global": "^4.0.0",
|
|
100
|
-
"json-beautify": "^1.0.1",
|
|
101
99
|
"karma": "^6.4.1",
|
|
102
100
|
"karma-babel-preprocessor": "^8.0.2",
|
|
103
101
|
"karma-browserify": "^8.1.0",
|
|
@@ -105,18 +103,17 @@
|
|
|
105
103
|
"karma-chrome-launcher": "^3.1.1",
|
|
106
104
|
"karma-mocha": "^2.0.1",
|
|
107
105
|
"karma-mocha-reporter": "^2.2.5",
|
|
108
|
-
"lint-staged": "^
|
|
106
|
+
"lint-staged": "^13.2.3",
|
|
109
107
|
"mocha": "^9.1.4",
|
|
110
108
|
"node-es-module-loader": "^0.3.8",
|
|
111
109
|
"prettier": "^2.4.1",
|
|
112
110
|
"puppeteer": "^10.1.0",
|
|
113
111
|
"react-test-renderer": "^18.2.0",
|
|
114
112
|
"sinon": "^1.15.4",
|
|
115
|
-
"stylus": "^0.
|
|
113
|
+
"stylus": "^0.60.0",
|
|
116
114
|
"stylus-loader": "^3.0.2",
|
|
117
115
|
"tmp": "^0.2.1",
|
|
118
116
|
"unminified-webpack-plugin": "^3.0.0",
|
|
119
|
-
"unreleased": "^0.1.0",
|
|
120
117
|
"watchify": "^4.0.0",
|
|
121
118
|
"webpack": "^5.75.0",
|
|
122
119
|
"webpack-cli": "^5.0.0",
|
package/.circleci/config.yml
DELETED
|
@@ -1,90 +0,0 @@
|
|
|
1
|
-
version: 2.1
|
|
2
|
-
orbs:
|
|
3
|
-
ship: auth0/ship@0
|
|
4
|
-
executors:
|
|
5
|
-
docker-executor:
|
|
6
|
-
docker:
|
|
7
|
-
- image: cimg/node:18.15-browsers
|
|
8
|
-
jobs:
|
|
9
|
-
build-and-test:
|
|
10
|
-
executor: docker-executor
|
|
11
|
-
environment:
|
|
12
|
-
LANG: en_US.UTF-8
|
|
13
|
-
steps:
|
|
14
|
-
- checkout
|
|
15
|
-
- run:
|
|
16
|
-
name: Update Yarn
|
|
17
|
-
command: 'npm update -g yarn'
|
|
18
|
-
- restore_cache:
|
|
19
|
-
name: Restore Yarn Package Cache
|
|
20
|
-
key: yarn-packages-{{ checksum "yarn.lock" }}
|
|
21
|
-
- run:
|
|
22
|
-
name: Install Dependencies
|
|
23
|
-
command: yarn install
|
|
24
|
-
- save_cache:
|
|
25
|
-
name: Save Yarn Package Cache
|
|
26
|
-
key: yarn-packages-{{ checksum "yarn.lock" }}
|
|
27
|
-
paths:
|
|
28
|
-
- ~/.cache/yarn
|
|
29
|
-
- run:
|
|
30
|
-
name: Build
|
|
31
|
-
command: yarn build
|
|
32
|
-
- run:
|
|
33
|
-
name: ES5 compatibility check
|
|
34
|
-
command: yarn test:es-check
|
|
35
|
-
- run:
|
|
36
|
-
name: Validate language files
|
|
37
|
-
command: yarn i18n:validate
|
|
38
|
-
- run:
|
|
39
|
-
name: Unit Tests
|
|
40
|
-
command: yarn test
|
|
41
|
-
- store_artifacts:
|
|
42
|
-
path: build
|
|
43
|
-
|
|
44
|
-
e2e:
|
|
45
|
-
executor: docker-executor
|
|
46
|
-
environment:
|
|
47
|
-
LANG: en_US.UTF-8
|
|
48
|
-
steps:
|
|
49
|
-
- checkout
|
|
50
|
-
- run:
|
|
51
|
-
name: Update Yarn
|
|
52
|
-
command: 'npm update -g yarn'
|
|
53
|
-
- restore_cache:
|
|
54
|
-
name: Restore Yarn Package Cache
|
|
55
|
-
key: yarn-packages-{{ checksum "yarn.lock" }}
|
|
56
|
-
- run:
|
|
57
|
-
name: Install Dependencies
|
|
58
|
-
command: yarn install
|
|
59
|
-
- save_cache:
|
|
60
|
-
name: Save Yarn Package Cache
|
|
61
|
-
key: yarn-packages-{{ checksum "yarn.lock" }}
|
|
62
|
-
paths:
|
|
63
|
-
- ~/.cache/yarn
|
|
64
|
-
- run:
|
|
65
|
-
name: Build
|
|
66
|
-
command: yarn build
|
|
67
|
-
- run:
|
|
68
|
-
name: Browser Tests
|
|
69
|
-
command: yarn test:e2e
|
|
70
|
-
|
|
71
|
-
workflows:
|
|
72
|
-
build-test-report:
|
|
73
|
-
jobs:
|
|
74
|
-
- build-and-test
|
|
75
|
-
- e2e:
|
|
76
|
-
requires:
|
|
77
|
-
- build-and-test
|
|
78
|
-
- ship/node-publish:
|
|
79
|
-
requires:
|
|
80
|
-
- e2e
|
|
81
|
-
pkg-manager: yarn
|
|
82
|
-
node-version: 18.12.1
|
|
83
|
-
context:
|
|
84
|
-
- publish-npm
|
|
85
|
-
- publish-gh
|
|
86
|
-
filters:
|
|
87
|
-
branches:
|
|
88
|
-
only:
|
|
89
|
-
- master
|
|
90
|
-
- beta
|
package/.snyk
DELETED
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
|
2
|
-
version: v1.13.3
|
|
3
|
-
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
|
4
|
-
ignore:
|
|
5
|
-
'npm:debug:20170905':
|
|
6
|
-
- debug:
|
|
7
|
-
reason: no vector attack
|
|
8
|
-
expires: '2019-04-19T17:53:14.464Z'
|
|
9
|
-
- jsonp > debug:
|
|
10
|
-
reason: no vector attack
|
|
11
|
-
expires: '2019-04-19T17:53:14.464Z'
|
|
12
|
-
'npm:ms:20170412':
|
|
13
|
-
- debug > ms:
|
|
14
|
-
reason: no vector attack
|
|
15
|
-
expires: '2019-04-19T17:53:14.464Z'
|
|
16
|
-
- jsonp > debug > ms:
|
|
17
|
-
reason: no vector attack
|
|
18
|
-
expires: '2019-04-19T17:53:14.464Z'
|
|
19
|
-
patch: {}
|