auth0-lock 14.2.3 → 14.2.5

package/.version

@@ -1 +1 @@
-v14.2.3
+v14.2.5

package/CHANGELOG.md

@@ -1,14 +1,26 @@
 # Change Log
 
+## [v14.2.5](https://github.com/auth0/lock/tree/v14.2.5) (2026-03-19)
+[Full Changelog](https://github.com/auth0/lock/compare/v14.2.4...v14.2.5)
+
+**Fixed**
+- Fix: TypeError when CordovaAuth0Plugin is not a constructor (auth0-js 9.30.1+)  [\#2742](https://github.com/auth0/lock/pull/2742) ([ankita10119](https://github.com/ankita10119))
+- Fix: TypeError in matchConnection for enterprise connections with no domains [\#2736](https://github.com/auth0/lock/pull/2736) ([ankita10119](https://github.com/ankita10119))
+
+## [v14.2.4](https://github.com/auth0/lock/tree/v14.2.4) (2026-01-21)
+[Full Changelog](https://github.com/auth0/lock/compare/v14.2.3...v14.2.4)
+
+**Fixed**
+- fix: update className and InputWrap name in SelectInput component (#2534) [\#2719](https://github.com/auth0/lock/pull/2719) ([ankita10119](https://github.com/ankita10119))
+- fix: handle undefined and empty domain values in HRD screen (#2526) [\#2720](https://github.com/auth0/lock/pull/2720) ([ankita10119](https://github.com/ankita10119))
+- fix: add 'too_many_attempts' to error codes in logInError function [\#2718](https://github.com/auth0/lock/pull/2718) ([ankita10119](https://github.com/ankita10119))
+
 ## [v14.2.3](https://github.com/auth0/lock/tree/v14.2.3) (2026-01-12)
 [Full Changelog](https://github.com/auth0/lock/compare/v14.2.2...v14.2.3)
 
 **Added**
 - feat: add too_many_attempts error to passwordless [\#2700](https://github.com/auth0/lock/pull/2700) ([avamachado-okta](https://github.com/avamachado-okta))
 
-**Changed**
-- Update: Upgrade Node.js from 18 to 22 [\#2711](https://github.com/auth0/lock/pull/2711) ([ankita10119](https://github.com/ankita10119))
-
 ## [v14.2.2](https://github.com/auth0/lock/tree/v14.2.2) (2025-12-16)
 [Full Changelog](https://github.com/auth0/lock/compare/v14.2.1...v14.2.2)
 

package/README.md

@@ -31,7 +31,7 @@ From CDN
 
 ```html
 <!-- Latest patch release (recommended for production) -->
-<script src="https://cdn.auth0.com/js/lock/14.2.3/lock.min.js"></script>
+<script src="https://cdn.auth0.com/js/lock/14.2.5/lock.min.js"></script>
 ```
 
 ### Configure Auth0

package/lib/__tests__/connection/enterprise/hrd_screen.js

@@ -65,4 +65,57 @@ describe('HRDScreen Component', function () {
       i18n: i18nProp
     })).toMatchSnapshot();
   });
+  it('renders correctly when enterprise domain is undefined', function () {
+    require('connection/enterprise').enterpriseDomain.mockImplementation(function () {
+      return undefined;
+    });
+    var Component = getComponent();
+    (0, _testUtils.expectComponent)(/*#__PURE__*/_react.default.createElement(Component, {
+      model: lock,
+      i18n: i18nProp
+    })).toMatchSnapshot();
+  });
+  it('does not show "undefined" in message when enterprise domain is undefined', function () {
+    require('connection/enterprise').enterpriseDomain.mockImplementation(function () {
+      return undefined;
+    });
+    var _i18nProp = i18nProp,
+      str = _i18nProp.str;
+
+    // Should use the fallback message without domain placeholder
+    var expectedMessage = str('enterpriseLoginIntructions');
+    expect(expectedMessage).toContain('Login with your corporate credentials.');
+    expect(expectedMessage).not.toContain('undefined');
+  });
+  it('does not show "undefined" in message when enterprise domain is null', function () {
+    require('connection/enterprise').enterpriseDomain.mockImplementation(function () {
+      return null;
+    });
+    var _i18nProp2 = i18nProp,
+      str = _i18nProp2.str;
+    // Should use the fallback message without domain placeholder  
+    var expectedMessage = str('enterpriseLoginIntructions');
+    expect(expectedMessage).toContain('Login with your corporate credentials.');
+    expect(expectedMessage).not.toContain('undefined');
+  });
+  it('uses fallback message when enterprise domain is empty string', function () {
+    require('connection/enterprise').enterpriseDomain.mockImplementation(function () {
+      return '';
+    });
+    var Component = getComponent();
+    (0, _testUtils.expectComponent)(/*#__PURE__*/_react.default.createElement(Component, {
+      model: lock,
+      i18n: i18nProp
+    })).toMatchSnapshot();
+  });
+  it('uses fallback message when enterprise domain is whitespace only', function () {
+    require('connection/enterprise').enterpriseDomain.mockImplementation(function () {
+      return '   ';
+    });
+    var Component = getComponent();
+    (0, _testUtils.expectComponent)(/*#__PURE__*/_react.default.createElement(Component, {
+      model: lock,
+      i18n: i18nProp
+    })).toMatchSnapshot();
+  });
 });

package/lib/__tests__/connection/enterprise/matchConnection.js

@@ -0,0 +1,34 @@
+"use strict";
+
+var _immutable = _interopRequireDefault(require("immutable"));
+var _enterprise = require("../../../connection/enterprise");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+jest.mock('core/index', function () {
+  return {
+    connections: jest.fn()
+  };
+});
+describe('matchConnection', function () {
+  afterEach(function () {
+    return jest.resetAllMocks();
+  });
+  it('does not throw when enterprise connection has no domains configured', function () {
+    var _require = require('core/index'),
+      connections = _require.connections;
+
+    // Simulate tenant endpoint returning a connection with no domains field
+    connections.mockReturnValue(_immutable.default.fromJS([{
+      name: 'samlp-connection',
+      strategy: 'samlp',
+      type: 'enterprise'
+    }]));
+    var m = _immutable.default.fromJS({
+      id: '__lock__'
+    });
+    var result;
+    expect(function () {
+      result = (0, _enterprise.matchConnection)(m, 'test@example.com');
+    }).not.toThrow();
+    expect(result).toBeFalsy();
+  });
+});

package/lib/connection/enterprise/hrd_screen.js

@@ -31,7 +31,7 @@ var Component = function Component(_ref) {
     model = _ref.model;
   var domain = (0, _enterprise.enterpriseDomain)(model);
   var headerText;
-  if (domain !== null) {
+  if (domain && domain.trim()) {
     headerText = i18n.str('enterpriseActiveLoginInstructions', domain);
   } else {
     headerText = i18n.str('enterpriseLoginIntructions');

package/lib/connection/enterprise.js

@@ -105,7 +105,7 @@ function matchConnection(m, email) {
   var target = (0, _email.emailDomain)(email);
   if (!target) return false;
   return l.connections.apply(l, [m, 'enterprise'].concat(_toConsumableArray(strategies))).find(function (x) {
-    return x.get('domains').contains(target);
+    return x.get('domains', (0, _immutable.List)()).contains(target);
   });
 }
 function isEnterpriseDomain(m, email) {

package/lib/core/actions.js

@@ -238,7 +238,7 @@ function logInError(id, fields, error) {
     return setTimeout(function () {
       var m = (0, _index.read)(_index.getEntity, 'lock', id);
       var errorMessage = l.loginErrorMessage(m, error, loginType(fields));
-      var errorCodesThatEmitAuthorizationErrorEvent = ['blocked_user', 'rule_error', 'lock.unauthorized', 'invalid_user_password', 'login_required'];
+      var errorCodesThatEmitAuthorizationErrorEvent = ['blocked_user', 'rule_error', 'lock.unauthorized', 'invalid_user_password', 'login_required', 'too_many_attempts'];
       if (errorCodesThatEmitAuthorizationErrorEvent.indexOf(errorCode) > -1) {
         l.emitAuthorizationErrorEvent(m, error);
       }

package/lib/core/web_api/helper.js

@@ -169,5 +169,5 @@ function trimAuthParams() {
   return p;
 }
 function getVersion() {
-  return "14.2.3";
+  return "14.2.5";
 }

package/lib/core/web_api/p2_api.js

@@ -45,7 +45,7 @@ var Auth0APIClient = /*#__PURE__*/function () {
       responseMode: opts.responseMode,
       responseType: opts.responseType,
       leeway: opts.leeway || 60,
-      plugins: opts.plugins || [new _cordovaAuth0PluginMin.default()],
+      plugins: opts.plugins || (typeof _cordovaAuth0PluginMin.default === 'function' ? [new _cordovaAuth0PluginMin.default()] : []),
       overrides: (0, _helper.webAuthOverrides)(opts.overrides),
       _sendTelemetry: opts._sendTelemetry === false ? false : true,
       _telemetryInfo: telemetry,

package/lib/i18n.js

@@ -90,7 +90,7 @@ function assertLanguage(m, language, base) {
 function syncLang(m, language, _cb) {
   (0, _cdn_utils.load)({
     method: 'registerLanguageDictionary',
-    url: "".concat(l.languageBaseUrl(m), "/js/lock/").concat("14.2.3", "/").concat(language, ".js"),
+    url: "".concat(l.languageBaseUrl(m), "/js/lock/").concat("14.2.5", "/").concat(language, ".js"),
     check: function check(str) {
       return str && str === language;
     },

package/lib/lock.js

@@ -36,7 +36,7 @@ var Auth0Lock = exports.default = /*#__PURE__*/function (_Core) {
   _inherits(Auth0Lock, _Core);
   return _createClass(Auth0Lock);
 }(_core.default); // telemetry
-Auth0Lock.version = "14.2.3";
+Auth0Lock.version = "14.2.5";
 
 // TODO: should we have different telemetry for classic/passwordless?
 // TODO: should we set telemetry info before each request?

package/lib/passwordless.js

@@ -36,4 +36,4 @@ var Auth0LockPasswordless = exports.default = /*#__PURE__*/function (_Core) {
   _inherits(Auth0LockPasswordless, _Core);
   return _createClass(Auth0LockPasswordless);
 }(_core.default);
-Auth0LockPasswordless.version = "14.2.3";
+Auth0LockPasswordless.version = "14.2.5";

package/lib/ui/input/select_input.js

@@ -87,12 +87,12 @@ var SelectInput = exports.default = /*#__PURE__*/function (_React$Component) {
           src: iconUrl
         });
       }
-      var className = 'auth0-lock-input auth0-lock-input-location';
+      var className = "auth0-lock-input auth0-lock-input-".concat(name);
       if (!label) className += ' auth0-lock-input-with-placeholder';
       return /*#__PURE__*/_react.default.createElement(_input_wrap.default, {
         focused: focused,
         isValid: isValid,
-        name: "location",
+        name: name,
         icon: icon
       }, /*#__PURE__*/_react.default.createElement("input", {
         id: "".concat(lockId, "-").concat(name),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0-lock",
-  "version": "14.2.3",
+  "version": "14.2.5",
   "description": "Auth0 Lock",
   "author": "Auth0 <support@auth0.com> (http://auth0.com)",
   "license": "MIT",