Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More →
Socket
Sign inDemoInstall
Socket
Sign inDemoInstall

@descope/web-js-sdk

Package Overview
Dependencies
Maintainers
4
Versions
238
Alerts
File Explorer

Advanced tools

License
Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@descope/web-js-sdk - npm Package Compare versions

Comparing version 1.11.14 to 1.11.15

2

dist/cjs/index.cjs.js

@@ -1,2 +0,2 @@

"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e=require("tslib"),t=require("@descope/core-js-sdk"),n=require("jwt-decode"),a=require("js-cookie"),i=require("@fingerprintjs/fingerprintjs-pro");function o(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var r=o(t),s=o(n),l=o(a);const c=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,a)=>{var i;return n[a]=[].concat((null===(i=e.hooks)||void 0===i?void 0:i[a])||[]).concat((null==t?void 0:t[a])||[]),n}),null!==(n=e.hooks)&&void 0!==n?n:e.hooks={}),e},u=async e=>{if(!(null==e?void 0:e.ok))return{};const t=await(null==e?void 0:e.clone().json());return(null==t?void 0:t.authInfo)||t||{}},d=async e=>{const t=await u(e);return(null==t?void 0:t.user)||((null==t?void 0:t.hasOwnProperty("userId"))?t:void 0)},g="undefined"!=typeof localStorage,p=(e,t)=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.setItem(e,t)),f=e=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem(e)),w=e=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.removeItem(e)),h=(...e)=>{console.debug(...e)},v="undefined"!=typeof window,b=Math.pow(2,31)-1,m="DS",y="DSR";function S(e,t,{cookiePath:n,cookieDomain:a,cookieExpiration:i}){if(t){const o=new Date(1e3*i),r=function(e){const t=window.location.hostname.split("."),n=e.split(".");return t.slice(-n.length).join(".")===e}(a);l.default.set(e,t,{path:n,domain:r?a:void 0,expires:o,sameSite:"Strict",secure:!0})}}function I(e=""){return f(`${e}${y}`)||""}function O(e=""){w(`${e}${y}`),w(`${e}${m}`),l.default.remove(m)}const _=v&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",j="fp",k=(e=!1)=>{const t=localStorage.getItem(j);if(!t)return null;const n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},U=async(e,t=_)=>{try{if(k())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),a=new URL(t);a.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const o=new URL(t);o.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const r=o.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",s=i.load({apiKey:e,endpoint:[a.toString(),i.defaultEndpoint],scriptUrlPattern:[r,i.defaultScriptUrlPattern]}),l=await s,{requestId:c}=await l.get({linkedId:n}),u=((e,t)=>({vsid:e,vrid:t}))(n,c);(e=>{const t={value:e,expiry:(new Date).getTime()+864e5};localStorage.setItem(j,JSON.stringify(t))})(u)}catch(e){console.warn("Could not load fingerprint",e)}},x=e=>{const t=k(!0);return t&&e.body&&(e.body.fpData=t),e},D="dls_last_user_login_id",T="dls_last_user_display_name",A=()=>f(D),K=()=>f(T),J=e=>async(...t)=>{var n;t[1]=t[1]||{};const[,a={}]=t,i=A(),o=K();i&&(null!==(n=a.lastAuth)&&void 0!==n||(a.lastAuth={}),a.lastAuth.loginId=i,a.lastAuth.name=o);return await e(...t)},R=e=>async(...t)=>{const n=await e(...t);return w(D),w(T),n};function E(){const e=[];return{pub:t=>{e.forEach((e=>e(t)))},sub:t=>{const n=e.push(t)-1;return()=>e.splice(n,1)}}}const N=e=>t=>async(...n)=>{const a=await t(...n);return O(e),a};async function C(e){const t=function(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=F(n.publicKey.challenge),n.publicKey.user.id=F(n.publicKey.user.id),null===(t=n.publicKey.excludeCredentials)||void 0===t||t.forEach((e=>{e.id=F(e.id)})),n}(e),n=await navigator.credentials.create(t);return a=n,JSON.stringify({id:a.id,rawId:H(a.rawId),type:a.type,response:{attestationObject:H(a.response.attestationObject),clientDataJSON:H(a.response.clientDataJSON)}});var a}async function $(e){const t=L(e);return V(await navigator.credentials.get(t))}async function q(e,t){const n=L(e);n.signal=t.signal,n.mediation="conditional";return V(await navigator.credentials.get(n))}async function P(e=!1){if(!v)return Promise.resolve(!1);const t=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return t&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():t}function L(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=F(n.publicKey.challenge),null===(t=n.publicKey.allowCredentials)||void 0===t||t.forEach((e=>{e.id=F(e.id)})),n}function V(e){return JSON.stringify({id:e.id,rawId:H(e.rawId),type:e.type,response:{authenticatorData:H(e.response.authenticatorData),clientDataJSON:H(e.response.clientDataJSON),signature:H(e.response.signature),userHandle:e.response.userHandle?H(e.response.userHandle):void 0}})}function F(e){const t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),(e=>e.charCodeAt(0))).buffer}function H(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var M,W=(M=e=>({async signUp(t,n){const a=await e.webauthn.signUp.start(t,window.location.origin,n);if(!a.ok)return a;const i=await C(a.data.options);return await e.webauthn.signUp.finish(a.data.transactionId,i)},async signIn(t){const n=await e.webauthn.signIn.start(t,window.location.origin);if(!n.ok)return n;const a=await $(n.data.options);return await e.webauthn.signIn.finish(n.data.transactionId,a)},async signUpOrIn(t){var n;const a=await e.webauthn.signUpOrIn.start(t,window.location.origin);if(!a.ok)return a;if(null===(n=a.data)||void 0===n?void 0:n.create){const t=await C(a.data.options);return await e.webauthn.signUp.finish(a.data.transactionId,t)}{const t=await $(a.data.options);return await e.webauthn.signIn.finish(a.data.transactionId,t)}},async update(t,n){const a=await e.webauthn.update.start(t,window.location.origin,n);if(!a.ok)return a;const i=await C(a.data.options);return await e.webauthn.update.finish(a.data.transactionId,i)},helpers:{create:C,get:$,isSupported:P,conditional:q}}),(...e)=>{const t=M(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});const G=e=>({async oneTap(t,n,a,i){const o=null!=t?t:"google",r=await e.oauth.startNative(o,a);if(!r.ok)return r;const{clientId:s,stateId:l,nonce:c}=r.data,u=await async function(){return new Promise(((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((t=>{var a,r;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(a=null==n?void 0:n.itp_support)||void 0===a||a,use_fedcm_for_prompt:null===(r=null==n?void 0:n.use_fedcm_for_prompt)||void 0===r||r,client_id:s,callback:n=>{t(e.oauth.finishNative(o,l,"","",n.credential))},nonce:c})),u.prompt((e=>{(null==e?void 0:e.isSkippedMoment())&&(null==i||i())}))}))}});var B=e=>Object.assign(Object.assign({},e.flow),{start:async(...t)=>{const n=await P(),a=Object.assign(Object.assign({location:window.location.href},t[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return t[1]=a,e.flow.start(...t)}});const Z=function(...e){return t=>e.reduce(((e,t)=>t(e)),t)}((t=>n=>{var{fpKey:a,fpLoad:i}=n,o=e.__rest(n,["fpKey","fpLoad"]);return v?(a&&i&&U(a).catch((()=>null)),t(c(o,{beforeRequest:x}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),t(o))}),(n=>a=>{var{autoRefresh:i}=a,o=e.__rest(a,["autoRefresh"]);if(!i)return n(o);const{clearAllTimers:r,setTimer:l}=(()=>{const e=[];return{clearAllTimers:()=>{for(;e.length;)clearTimeout(e.pop())},setTimer:(t,n)=>{e.push(setTimeout(t,n))}}})();let d,g;v&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>d&&(h("Expiration time passed, refreshing session"),p.refresh(I()||g))}));const p=n(c(o,{afterRequest:async(e,t)=>{const{refreshJwt:n,sessionJwt:a}=await u(t);if(401===(null==t?void 0:t.status))h("Received 401, canceling all timers"),r();else if(a){if(d=(e=>{try{const t=s.default(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(a),!d)return void h("Could not extract expiration time from session token");g=n;let e=((i=d)?i.getTime()-(new Date).getTime():0)-2e4;e>b&&(h(`Timeout is too large (${e}ms), setting it to ${b}ms`),e=b),r();const t=new Date(Date.now()+e).toLocaleTimeString("en-US",{hour12:!1});h(`Setting refresh timer for ${t}. (${e}ms)`),l((()=>{h("Refreshing session due to timer"),p.refresh(I()||n)}),e)}var i}}));return t.wrapWith(p,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return h("Clearing all timers"),r(),n}))}),(e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.14"},t.baseHeaders)}))),(e=>n=>{const a=E(),i=E(),o=e(c(n,{afterRequest:async(e,t)=>{if(401===(null==t?void 0:t.status))a.pub(null),i.pub(null);else{const e=await d(t);e&&i.pub(e);const{sessionJwt:n}=await u(t);n&&a.pub(n)}}})),r=t.wrapWith(o,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return a.pub(null),i.pub(null),n}));return Object.assign(r,{onSessionTokenChange:a.sub,onUserChange:i.sub})}),(n=>a=>{var{storeLastAuthenticatedUser:i=!0}=a,o=e.__rest(a,["storeLastAuthenticatedUser"]);if(!i)return Object.assign(n(o),{getLastUserLoginId:A,getLastUserDisplayName:K});const r=n(c(o,{afterRequest:async(e,t)=>{var n;const a=await d(t),i=null===(n=null==a?void 0:a.loginIds)||void 0===n?void 0:n[0],o=null==a?void 0:a.name;i&&((e=>{p(D,e)})(i),(e=>{p(T,e)})(o))}}));let s=t.wrapWith(r,["flow.start"],J);return s=t.wrapWith(s,["logout","logoutAll"],R),Object.assign(s,{getLastUserLoginId:A,getLastUserDisplayName:K})}),(n=>a=>{var{persistTokens:i,sessionTokenViaCookie:o,storagePrefix:r}=a,s=e.__rest(a,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!i||!v)return i&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),n(s);const d=n(c(s,{beforeRequest:(g=r,e=>Object.assign(e,{token:e.token||I(g)})),afterRequest:async(t,n)=>{const a=/^\/v\d+\/mgmt\//.test(t.path);401===(null==n?void 0:n.status)?a||O(r):((t={},n,a)=>{var{refreshJwt:i,sessionJwt:o}=t,r=e.__rest(t,["refreshJwt","sessionJwt"]);void 0===n&&(n=!1),void 0===a&&(a=""),i&&p(`${a}${y}`,i),o&&(n?S(m,o,r):p(`${a}${m}`,o))})(await u(n),o,r)}}));var g;const w=t.wrapWith(d,["logout","logoutAll"],N(r));return Object.assign(w,{getRefreshToken:()=>I(r),getSessionToken:()=>function(e=""){return l.default.get(m)||f(`${e}${m}`)||""}(r)})}))(((...e)=>{const t=r.default(...e);return Object.assign(Object.assign({},t),{flow:B(t),webauthn:W(t),fedcm:G(t)})}));exports.REFRESH_TOKEN_KEY=y,exports.SESSION_TOKEN_KEY=m,exports.clearFingerprintData=()=>{localStorage.removeItem(j)},exports.default=Z,exports.ensureFingerprintIds=U;
"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e=require("tslib"),t=require("@descope/core-js-sdk"),n=require("jwt-decode"),a=require("js-cookie"),i=require("@fingerprintjs/fingerprintjs-pro");function o(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var r=o(t),s=o(n),l=o(a);const c=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,a)=>{var i;return n[a]=[].concat((null===(i=e.hooks)||void 0===i?void 0:i[a])||[]).concat((null==t?void 0:t[a])||[]),n}),null!==(n=e.hooks)&&void 0!==n?n:e.hooks={}),e},u=async e=>{if(!(null==e?void 0:e.ok))return{};const t=await(null==e?void 0:e.clone().json());return(null==t?void 0:t.authInfo)||t||{}},d=async e=>{const t=await u(e);return(null==t?void 0:t.user)||((null==t?void 0:t.hasOwnProperty("userId"))?t:void 0)},g="undefined"!=typeof localStorage,p=(e,t)=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.setItem(e,t)),f=e=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem(e)),w=e=>g&&(null===localStorage||void 0===localStorage?void 0:localStorage.removeItem(e)),h=(...e)=>{console.debug(...e)},v="undefined"!=typeof window,b=Math.pow(2,31)-1,m="DS",y="DSR";function S(e,t,{cookiePath:n,cookieDomain:a,cookieExpiration:i}){if(t){const o=new Date(1e3*i),r=function(e){const t=window.location.hostname.split("."),n=e.split(".");return t.slice(-n.length).join(".")===e}(a);l.default.set(e,t,{path:n,domain:r?a:void 0,expires:o,sameSite:"Strict",secure:!0})}}function I(e=""){return f(`${e}${y}`)||""}function O(e=""){w(`${e}${y}`),w(`${e}${m}`),l.default.remove(m)}const _=v&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",j="fp",k=(e=!1)=>{const t=localStorage.getItem(j);if(!t)return null;const n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},U=async(e,t=_)=>{try{if(k())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),a=new URL(t);a.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const o=new URL(t);o.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const r=o.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",s=i.load({apiKey:e,endpoint:[a.toString(),i.defaultEndpoint],scriptUrlPattern:[r,i.defaultScriptUrlPattern]}),l=await s,{requestId:c}=await l.get({linkedId:n}),u=((e,t)=>({vsid:e,vrid:t}))(n,c);(e=>{const t={value:e,expiry:(new Date).getTime()+864e5};localStorage.setItem(j,JSON.stringify(t))})(u)}catch(e){console.warn("Could not load fingerprint",e)}},x=e=>{const t=k(!0);return t&&e.body&&(e.body.fpData=t),e},D="dls_last_user_login_id",T="dls_last_user_display_name",A=()=>f(D),K=()=>f(T),J=e=>async(...t)=>{var n;t[1]=t[1]||{};const[,a={}]=t,i=A(),o=K();i&&(null!==(n=a.lastAuth)&&void 0!==n||(a.lastAuth={}),a.lastAuth.loginId=i,a.lastAuth.name=o);return await e(...t)},R=e=>async(...t)=>{const n=await e(...t);return w(D),w(T),n};function E(){const e=[];return{pub:t=>{e.forEach((e=>e(t)))},sub:t=>{const n=e.push(t)-1;return()=>e.splice(n,1)}}}const N=e=>t=>async(...n)=>{const a=await t(...n);return O(e),a};async function C(e){const t=function(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=F(n.publicKey.challenge),n.publicKey.user.id=F(n.publicKey.user.id),null===(t=n.publicKey.excludeCredentials)||void 0===t||t.forEach((e=>{e.id=F(e.id)})),n}(e),n=await navigator.credentials.create(t);return a=n,JSON.stringify({id:a.id,rawId:H(a.rawId),type:a.type,response:{attestationObject:H(a.response.attestationObject),clientDataJSON:H(a.response.clientDataJSON)}});var a}async function $(e){const t=L(e);return V(await navigator.credentials.get(t))}async function q(e,t){const n=L(e);n.signal=t.signal,n.mediation="conditional";return V(await navigator.credentials.get(n))}async function P(e=!1){if(!v)return Promise.resolve(!1);const t=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return t&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():t}function L(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=F(n.publicKey.challenge),null===(t=n.publicKey.allowCredentials)||void 0===t||t.forEach((e=>{e.id=F(e.id)})),n}function V(e){return JSON.stringify({id:e.id,rawId:H(e.rawId),type:e.type,response:{authenticatorData:H(e.response.authenticatorData),clientDataJSON:H(e.response.clientDataJSON),signature:H(e.response.signature),userHandle:e.response.userHandle?H(e.response.userHandle):void 0}})}function F(e){const t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),(e=>e.charCodeAt(0))).buffer}function H(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var M,W=(M=e=>({async signUp(t,n){const a=await e.webauthn.signUp.start(t,window.location.origin,n);if(!a.ok)return a;const i=await C(a.data.options);return await e.webauthn.signUp.finish(a.data.transactionId,i)},async signIn(t){const n=await e.webauthn.signIn.start(t,window.location.origin);if(!n.ok)return n;const a=await $(n.data.options);return await e.webauthn.signIn.finish(n.data.transactionId,a)},async signUpOrIn(t){var n;const a=await e.webauthn.signUpOrIn.start(t,window.location.origin);if(!a.ok)return a;if(null===(n=a.data)||void 0===n?void 0:n.create){const t=await C(a.data.options);return await e.webauthn.signUp.finish(a.data.transactionId,t)}{const t=await $(a.data.options);return await e.webauthn.signIn.finish(a.data.transactionId,t)}},async update(t,n){const a=await e.webauthn.update.start(t,window.location.origin,n);if(!a.ok)return a;const i=await C(a.data.options);return await e.webauthn.update.finish(a.data.transactionId,i)},helpers:{create:C,get:$,isSupported:P,conditional:q}}),(...e)=>{const t=M(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});const G=e=>({async oneTap(t,n,a,i){const o=null!=t?t:"google",r=await e.oauth.startNative(o,a);if(!r.ok)return r;const{clientId:s,stateId:l,nonce:c}=r.data,u=await async function(){return new Promise(((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((t=>{var a,r;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(a=null==n?void 0:n.itp_support)||void 0===a||a,use_fedcm_for_prompt:null===(r=null==n?void 0:n.use_fedcm_for_prompt)||void 0===r||r,client_id:s,callback:n=>{t(e.oauth.finishNative(o,l,"","",n.credential))},nonce:c})),u.prompt((e=>{(null==e?void 0:e.isSkippedMoment())&&(null==i||i())}))}))}});var B=e=>Object.assign(Object.assign({},e.flow),{start:async(...t)=>{const n=await P(),a=Object.assign(Object.assign({location:window.location.href},t[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return t[1]=a,e.flow.start(...t)}});const Z=function(...e){return t=>e.reduce(((e,t)=>t(e)),t)}((t=>n=>{var{fpKey:a,fpLoad:i}=n,o=e.__rest(n,["fpKey","fpLoad"]);return v?(a&&i&&U(a).catch((()=>null)),t(c(o,{beforeRequest:x}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),t(o))}),(n=>a=>{var{autoRefresh:i}=a,o=e.__rest(a,["autoRefresh"]);if(!i)return n(o);const{clearAllTimers:r,setTimer:l}=(()=>{const e=[];return{clearAllTimers:()=>{for(;e.length;)clearTimeout(e.pop())},setTimer:(t,n)=>{e.push(setTimeout(t,n))}}})();let d,g;v&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>d&&(h("Expiration time passed, refreshing session"),p.refresh(I()||g))}));const p=n(c(o,{afterRequest:async(e,t)=>{const{refreshJwt:n,sessionJwt:a}=await u(t);if(401===(null==t?void 0:t.status))h("Received 401, canceling all timers"),r();else if(a){if(d=(e=>{try{const t=s.default(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(a),!d)return void h("Could not extract expiration time from session token");g=n;let e=((i=d)?i.getTime()-(new Date).getTime():0)-2e4;e>b&&(h(`Timeout is too large (${e}ms), setting it to ${b}ms`),e=b),r();const t=new Date(Date.now()+e).toLocaleTimeString("en-US",{hour12:!1});h(`Setting refresh timer for ${t}. (${e}ms)`),l((()=>{h("Refreshing session due to timer"),p.refresh(I()||n)}),e)}var i}}));return t.wrapWith(p,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return h("Clearing all timers"),r(),n}))}),(e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.15"},t.baseHeaders)}))),(e=>n=>{const a=E(),i=E(),o=e(c(n,{afterRequest:async(e,t)=>{if(401===(null==t?void 0:t.status))a.pub(null),i.pub(null);else{const e=await d(t);e&&i.pub(e);const{sessionJwt:n}=await u(t);n&&a.pub(n)}}})),r=t.wrapWith(o,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return a.pub(null),i.pub(null),n}));return Object.assign(r,{onSessionTokenChange:a.sub,onUserChange:i.sub})}),(n=>a=>{var{storeLastAuthenticatedUser:i=!0}=a,o=e.__rest(a,["storeLastAuthenticatedUser"]);if(!i)return Object.assign(n(o),{getLastUserLoginId:A,getLastUserDisplayName:K});const r=n(c(o,{afterRequest:async(e,t)=>{var n;const a=await d(t),i=null===(n=null==a?void 0:a.loginIds)||void 0===n?void 0:n[0],o=null==a?void 0:a.name;i&&((e=>{p(D,e)})(i),(e=>{p(T,e)})(o))}}));let s=t.wrapWith(r,["flow.start"],J);return s=t.wrapWith(s,["logout","logoutAll"],R),Object.assign(s,{getLastUserLoginId:A,getLastUserDisplayName:K})}),(n=>a=>{var{persistTokens:i,sessionTokenViaCookie:o,storagePrefix:r}=a,s=e.__rest(a,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!i||!v)return i&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),n(s);const d=n(c(s,{beforeRequest:(g=r,e=>Object.assign(e,{token:e.token||I(g)})),afterRequest:async(t,n)=>{const a=/^\/v\d+\/mgmt\//.test(t.path);401===(null==n?void 0:n.status)?a||O(r):((t={},n,a)=>{var{refreshJwt:i,sessionJwt:o}=t,r=e.__rest(t,["refreshJwt","sessionJwt"]);void 0===n&&(n=!1),void 0===a&&(a=""),i&&p(`${a}${y}`,i),o&&(n?S(m,o,r):p(`${a}${m}`,o))})(await u(n),o,r)}}));var g;const w=t.wrapWith(d,["logout","logoutAll"],N(r));return Object.assign(w,{getRefreshToken:()=>I(r),getSessionToken:()=>function(e=""){return l.default.get(m)||f(`${e}${m}`)||""}(r)})}))(((...e)=>{const t=r.default(...e);return Object.assign(Object.assign({},t),{flow:B(t),webauthn:W(t),fedcm:G(t)})}));exports.REFRESH_TOKEN_KEY=y,exports.SESSION_TOKEN_KEY=m,exports.clearFingerprintData=()=>{localStorage.removeItem(j)},exports.default=Z,exports.ensureFingerprintIds=U;
//# sourceMappingURL=index.cjs.js.map

2

dist/index.esm.js

@@ -1,2 +0,2 @@

import{__rest as t}from"tslib";import e,{wrapWith as n}from"@descope/core-js-sdk";import o from"jwt-decode";import a from"js-cookie";import{load as i,defaultEndpoint as r,defaultScriptUrlPattern as s}from"@fingerprintjs/fingerprintjs-pro";const l=(t,e)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,o)=>{var a;return n[o]=[].concat((null===(a=t.hooks)||void 0===a?void 0:a[o])||[]).concat((null==e?void 0:e[o])||[]),n}),null!==(n=t.hooks)&&void 0!==n?n:t.hooks={}),t},c=async t=>{if(!(null==t?void 0:t.ok))return{};const e=await(null==t?void 0:t.clone().json());return(null==e?void 0:e.authInfo)||e||{}},u=async t=>{const e=await c(t);return(null==e?void 0:e.user)||((null==e?void 0:e.hasOwnProperty("userId"))?e:void 0)},d="undefined"!=typeof localStorage,g=(t,e)=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.setItem(t,e)),p=t=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem(t)),f=t=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.removeItem(t)),w=(...t)=>{console.debug(...t)},h="undefined"!=typeof window,v=Math.pow(2,31)-1,b="DS",m="DSR";function y(t,e,{cookiePath:n,cookieDomain:o,cookieExpiration:i}){if(e){const r=new Date(1e3*i),s=function(t){const e=window.location.hostname.split("."),n=t.split(".");return e.slice(-n.length).join(".")===t}(o);a.set(t,e,{path:n,domain:s?o:void 0,expires:r,sameSite:"Strict",secure:!0})}}function S(t=""){return p(`${t}${m}`)||""}function I(t=""){f(`${t}${m}`),f(`${t}${b}`),a.remove(b)}const O=h&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",k="fp",j=(t=!1)=>{const e=localStorage.getItem(k);if(!e)return null;const n=JSON.parse(e);return(new Date).getTime()>n.expiry&&!t?null:n.value},U=async(t,e=O)=>{try{if(j())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),o=new URL(e);o.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const a=new URL(e);a.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const l=a.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",c=i({apiKey:t,endpoint:[o.toString(),r],scriptUrlPattern:[l,s]}),u=await c,{requestId:d}=await u.get({linkedId:n}),g=((t,e)=>({vsid:t,vrid:e}))(n,d);(t=>{const e={value:t,expiry:(new Date).getTime()+864e5};localStorage.setItem(k,JSON.stringify(e))})(g)}catch(t){console.warn("Could not load fingerprint",t)}},D=()=>{localStorage.removeItem(k)},A=t=>{const e=j(!0);return e&&t.body&&(t.body.fpData=e),t},T="dls_last_user_login_id",J="dls_last_user_display_name",_=()=>p(T),x=()=>p(J),R=t=>async(...e)=>{var n;e[1]=e[1]||{};const[,o={}]=e,a=_(),i=x();a&&(null!==(n=o.lastAuth)&&void 0!==n||(o.lastAuth={}),o.lastAuth.loginId=a,o.lastAuth.name=i);return await t(...e)},C=t=>async(...e)=>{const n=await t(...e);return f(T),f(J),n};function K(){const t=[];return{pub:e=>{t.forEach((t=>t(e)))},sub:e=>{const n=t.push(e)-1;return()=>t.splice(n,1)}}}const $=t=>e=>async(...n)=>{const o=await e(...n);return I(t),o};async function L(t){const e=function(t){var e;const n=JSON.parse(t);return n.publicKey.challenge=H(n.publicKey.challenge),n.publicKey.user.id=H(n.publicKey.user.id),null===(e=n.publicKey.excludeCredentials)||void 0===e||e.forEach((t=>{t.id=H(t.id)})),n}(t),n=await navigator.credentials.create(e);return o=n,JSON.stringify({id:o.id,rawId:G(o.rawId),type:o.type,response:{attestationObject:G(o.response.attestationObject),clientDataJSON:G(o.response.clientDataJSON)}});var o}async function N(t){const e=E(t);return V(await navigator.credentials.get(e))}async function P(t,e){const n=E(t);n.signal=e.signal,n.mediation="conditional";return V(await navigator.credentials.get(n))}async function q(t=!1){if(!h)return Promise.resolve(!1);const e=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return e&&t&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():e}function E(t){var e;const n=JSON.parse(t);return n.publicKey.challenge=H(n.publicKey.challenge),null===(e=n.publicKey.allowCredentials)||void 0===e||e.forEach((t=>{t.id=H(t.id)})),n}function V(t){return JSON.stringify({id:t.id,rawId:G(t.rawId),type:t.type,response:{authenticatorData:G(t.response.authenticatorData),clientDataJSON:G(t.response.clientDataJSON),signature:G(t.response.signature),userHandle:t.response.userHandle?G(t.response.userHandle):void 0}})}function H(t){const e=t.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(e),(t=>t.charCodeAt(0))).buffer}function G(t){return btoa(String.fromCharCode.apply(null,new Uint8Array(t))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var M,B=(M=t=>({async signUp(e,n){const o=await t.webauthn.signUp.start(e,window.location.origin,n);if(!o.ok)return o;const a=await L(o.data.options);return await t.webauthn.signUp.finish(o.data.transactionId,a)},async signIn(e){const n=await t.webauthn.signIn.start(e,window.location.origin);if(!n.ok)return n;const o=await N(n.data.options);return await t.webauthn.signIn.finish(n.data.transactionId,o)},async signUpOrIn(e){var n;const o=await t.webauthn.signUpOrIn.start(e,window.location.origin);if(!o.ok)return o;if(null===(n=o.data)||void 0===n?void 0:n.create){const e=await L(o.data.options);return await t.webauthn.signUp.finish(o.data.transactionId,e)}{const e=await N(o.data.options);return await t.webauthn.signIn.finish(o.data.transactionId,e)}},async update(e,n){const o=await t.webauthn.update.start(e,window.location.origin,n);if(!o.ok)return o;const a=await L(o.data.options);return await t.webauthn.update.finish(o.data.transactionId,a)},helpers:{create:L,get:N,isSupported:q,conditional:P}}),(...t)=>{const e=M(...t);return Object.assign(e.signUp,t[0].webauthn.signUp),Object.assign(e.signIn,t[0].webauthn.signIn),Object.assign(e.signUpOrIn,t[0].webauthn.signUpOrIn),Object.assign(e.update,t[0].webauthn.update),e});const F=t=>({async oneTap(e,n,o,a){const i=null!=e?e:"google",r=await t.oauth.startNative(i,o);if(!r.ok)return r;const{clientId:s,stateId:l,nonce:c}=r.data,u=await async function(){return new Promise(((t,e)=>{if(window.google)return void t(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?t(window.google.accounts.id):e("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){e("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((e=>{var o,r;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(o=null==n?void 0:n.itp_support)||void 0===o||o,use_fedcm_for_prompt:null===(r=null==n?void 0:n.use_fedcm_for_prompt)||void 0===r||r,client_id:s,callback:n=>{e(t.oauth.finishNative(i,l,"","",n.credential))},nonce:c})),u.prompt((t=>{(null==t?void 0:t.isSkippedMoment())&&(null==a||a())}))}))}});var Z=t=>Object.assign(Object.assign({},t.flow),{start:async(...e)=>{const n=await q(),o=Object.assign(Object.assign({location:window.location.href},e[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return e[1]=o,t.flow.start(...e)}});const X=function(...t){return e=>t.reduce(((t,e)=>e(t)),e)}((e=>n=>{var{fpKey:o,fpLoad:a}=n,i=t(n,["fpKey","fpLoad"]);return h?(o&&a&&U(o).catch((()=>null)),e(l(i,{beforeRequest:A}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),e(i))}),(e=>a=>{var{autoRefresh:i}=a,r=t(a,["autoRefresh"]);if(!i)return e(r);const{clearAllTimers:s,setTimer:u}=(()=>{const t=[];return{clearAllTimers:()=>{for(;t.length;)clearTimeout(t.pop())},setTimer:(e,n)=>{t.push(setTimeout(e,n))}}})();let d,g;h&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>d&&(w("Expiration time passed, refreshing session"),p.refresh(S()||g))}));const p=e(l(r,{afterRequest:async(t,e)=>{const{refreshJwt:n,sessionJwt:a}=await c(e);if(401===(null==e?void 0:e.status))w("Received 401, canceling all timers"),s();else if(a){if(d=(t=>{try{const e=o(t);if(e.exp)return new Date(1e3*e.exp)}catch(t){return null}})(a),!d)return void w("Could not extract expiration time from session token");g=n;let t=((i=d)?i.getTime()-(new Date).getTime():0)-2e4;t>v&&(w(`Timeout is too large (${t}ms), setting it to ${v}ms`),t=v),s();const e=new Date(Date.now()+t).toLocaleTimeString("en-US",{hour12:!1});w(`Setting refresh timer for ${e}. (${t}ms)`),u((()=>{w("Refreshing session due to timer"),p.refresh(S()||n)}),t)}var i}}));return n(p,["logout","logoutAll"],(t=>async(...e)=>{const n=await t(...e);return w("Clearing all timers"),s(),n}))}),(t=>e=>t(Object.assign(Object.assign({},e),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.14"},e.baseHeaders)}))),(t=>e=>{const o=K(),a=K(),i=t(l(e,{afterRequest:async(t,e)=>{if(401===(null==e?void 0:e.status))o.pub(null),a.pub(null);else{const t=await u(e);t&&a.pub(t);const{sessionJwt:n}=await c(e);n&&o.pub(n)}}})),r=n(i,["logout","logoutAll"],(t=>async(...e)=>{const n=await t(...e);return o.pub(null),a.pub(null),n}));return Object.assign(r,{onSessionTokenChange:o.sub,onUserChange:a.sub})}),(e=>o=>{var{storeLastAuthenticatedUser:a=!0}=o,i=t(o,["storeLastAuthenticatedUser"]);if(!a)return Object.assign(e(i),{getLastUserLoginId:_,getLastUserDisplayName:x});const r=e(l(i,{afterRequest:async(t,e)=>{var n;const o=await u(e),a=null===(n=null==o?void 0:o.loginIds)||void 0===n?void 0:n[0],i=null==o?void 0:o.name;a&&((t=>{g(T,t)})(a),(t=>{g(J,t)})(i))}}));let s=n(r,["flow.start"],R);return s=n(s,["logout","logoutAll"],C),Object.assign(s,{getLastUserLoginId:_,getLastUserDisplayName:x})}),(e=>o=>{var{persistTokens:i,sessionTokenViaCookie:r,storagePrefix:s}=o,u=t(o,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!i||!h)return i&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),e(u);const d=e(l(u,{beforeRequest:(f=s,t=>Object.assign(t,{token:t.token||S(f)})),afterRequest:async(e,n)=>{const o=/^\/v\d+\/mgmt\//.test(e.path);401===(null==n?void 0:n.status)?o||I(s):((e={},n,o)=>{var{refreshJwt:a,sessionJwt:i}=e,r=t(e,["refreshJwt","sessionJwt"]);void 0===n&&(n=!1),void 0===o&&(o=""),a&&g(`${o}${m}`,a),i&&(n?y(b,i,r):g(`${o}${b}`,i))})(await c(n),r,s)}}));var f;const w=n(d,["logout","logoutAll"],$(s));return Object.assign(w,{getRefreshToken:()=>S(s),getSessionToken:()=>function(t=""){return a.get(b)||p(`${t}${b}`)||""}(s)})}))(((...t)=>{const n=e(...t);return Object.assign(Object.assign({},n),{flow:Z(n),webauthn:B(n),fedcm:F(n)})}));export{m as REFRESH_TOKEN_KEY,b as SESSION_TOKEN_KEY,D as clearFingerprintData,X as default,U as ensureFingerprintIds};
import{__rest as t}from"tslib";import e,{wrapWith as n}from"@descope/core-js-sdk";import o from"jwt-decode";import a from"js-cookie";import{load as i,defaultEndpoint as r,defaultScriptUrlPattern as s}from"@fingerprintjs/fingerprintjs-pro";const l=(t,e)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,o)=>{var a;return n[o]=[].concat((null===(a=t.hooks)||void 0===a?void 0:a[o])||[]).concat((null==e?void 0:e[o])||[]),n}),null!==(n=t.hooks)&&void 0!==n?n:t.hooks={}),t},c=async t=>{if(!(null==t?void 0:t.ok))return{};const e=await(null==t?void 0:t.clone().json());return(null==e?void 0:e.authInfo)||e||{}},u=async t=>{const e=await c(t);return(null==e?void 0:e.user)||((null==e?void 0:e.hasOwnProperty("userId"))?e:void 0)},d="undefined"!=typeof localStorage,g=(t,e)=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.setItem(t,e)),p=t=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem(t)),f=t=>d&&(null===localStorage||void 0===localStorage?void 0:localStorage.removeItem(t)),w=(...t)=>{console.debug(...t)},h="undefined"!=typeof window,v=Math.pow(2,31)-1,b="DS",m="DSR";function y(t,e,{cookiePath:n,cookieDomain:o,cookieExpiration:i}){if(e){const r=new Date(1e3*i),s=function(t){const e=window.location.hostname.split("."),n=t.split(".");return e.slice(-n.length).join(".")===t}(o);a.set(t,e,{path:n,domain:s?o:void 0,expires:r,sameSite:"Strict",secure:!0})}}function S(t=""){return p(`${t}${m}`)||""}function I(t=""){f(`${t}${m}`),f(`${t}${b}`),a.remove(b)}const O=h&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",k="fp",j=(t=!1)=>{const e=localStorage.getItem(k);if(!e)return null;const n=JSON.parse(e);return(new Date).getTime()>n.expiry&&!t?null:n.value},U=async(t,e=O)=>{try{if(j())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),o=new URL(e);o.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const a=new URL(e);a.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const l=a.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",c=i({apiKey:t,endpoint:[o.toString(),r],scriptUrlPattern:[l,s]}),u=await c,{requestId:d}=await u.get({linkedId:n}),g=((t,e)=>({vsid:t,vrid:e}))(n,d);(t=>{const e={value:t,expiry:(new Date).getTime()+864e5};localStorage.setItem(k,JSON.stringify(e))})(g)}catch(t){console.warn("Could not load fingerprint",t)}},D=()=>{localStorage.removeItem(k)},A=t=>{const e=j(!0);return e&&t.body&&(t.body.fpData=e),t},T="dls_last_user_login_id",J="dls_last_user_display_name",_=()=>p(T),x=()=>p(J),R=t=>async(...e)=>{var n;e[1]=e[1]||{};const[,o={}]=e,a=_(),i=x();a&&(null!==(n=o.lastAuth)&&void 0!==n||(o.lastAuth={}),o.lastAuth.loginId=a,o.lastAuth.name=i);return await t(...e)},C=t=>async(...e)=>{const n=await t(...e);return f(T),f(J),n};function K(){const t=[];return{pub:e=>{t.forEach((t=>t(e)))},sub:e=>{const n=t.push(e)-1;return()=>t.splice(n,1)}}}const $=t=>e=>async(...n)=>{const o=await e(...n);return I(t),o};async function L(t){const e=function(t){var e;const n=JSON.parse(t);return n.publicKey.challenge=H(n.publicKey.challenge),n.publicKey.user.id=H(n.publicKey.user.id),null===(e=n.publicKey.excludeCredentials)||void 0===e||e.forEach((t=>{t.id=H(t.id)})),n}(t),n=await navigator.credentials.create(e);return o=n,JSON.stringify({id:o.id,rawId:G(o.rawId),type:o.type,response:{attestationObject:G(o.response.attestationObject),clientDataJSON:G(o.response.clientDataJSON)}});var o}async function N(t){const e=E(t);return V(await navigator.credentials.get(e))}async function P(t,e){const n=E(t);n.signal=e.signal,n.mediation="conditional";return V(await navigator.credentials.get(n))}async function q(t=!1){if(!h)return Promise.resolve(!1);const e=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return e&&t&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():e}function E(t){var e;const n=JSON.parse(t);return n.publicKey.challenge=H(n.publicKey.challenge),null===(e=n.publicKey.allowCredentials)||void 0===e||e.forEach((t=>{t.id=H(t.id)})),n}function V(t){return JSON.stringify({id:t.id,rawId:G(t.rawId),type:t.type,response:{authenticatorData:G(t.response.authenticatorData),clientDataJSON:G(t.response.clientDataJSON),signature:G(t.response.signature),userHandle:t.response.userHandle?G(t.response.userHandle):void 0}})}function H(t){const e=t.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(e),(t=>t.charCodeAt(0))).buffer}function G(t){return btoa(String.fromCharCode.apply(null,new Uint8Array(t))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var M,B=(M=t=>({async signUp(e,n){const o=await t.webauthn.signUp.start(e,window.location.origin,n);if(!o.ok)return o;const a=await L(o.data.options);return await t.webauthn.signUp.finish(o.data.transactionId,a)},async signIn(e){const n=await t.webauthn.signIn.start(e,window.location.origin);if(!n.ok)return n;const o=await N(n.data.options);return await t.webauthn.signIn.finish(n.data.transactionId,o)},async signUpOrIn(e){var n;const o=await t.webauthn.signUpOrIn.start(e,window.location.origin);if(!o.ok)return o;if(null===(n=o.data)||void 0===n?void 0:n.create){const e=await L(o.data.options);return await t.webauthn.signUp.finish(o.data.transactionId,e)}{const e=await N(o.data.options);return await t.webauthn.signIn.finish(o.data.transactionId,e)}},async update(e,n){const o=await t.webauthn.update.start(e,window.location.origin,n);if(!o.ok)return o;const a=await L(o.data.options);return await t.webauthn.update.finish(o.data.transactionId,a)},helpers:{create:L,get:N,isSupported:q,conditional:P}}),(...t)=>{const e=M(...t);return Object.assign(e.signUp,t[0].webauthn.signUp),Object.assign(e.signIn,t[0].webauthn.signIn),Object.assign(e.signUpOrIn,t[0].webauthn.signUpOrIn),Object.assign(e.update,t[0].webauthn.update),e});const F=t=>({async oneTap(e,n,o,a){const i=null!=e?e:"google",r=await t.oauth.startNative(i,o);if(!r.ok)return r;const{clientId:s,stateId:l,nonce:c}=r.data,u=await async function(){return new Promise(((t,e)=>{if(window.google)return void t(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?t(window.google.accounts.id):e("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){e("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((e=>{var o,r;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(o=null==n?void 0:n.itp_support)||void 0===o||o,use_fedcm_for_prompt:null===(r=null==n?void 0:n.use_fedcm_for_prompt)||void 0===r||r,client_id:s,callback:n=>{e(t.oauth.finishNative(i,l,"","",n.credential))},nonce:c})),u.prompt((t=>{(null==t?void 0:t.isSkippedMoment())&&(null==a||a())}))}))}});var Z=t=>Object.assign(Object.assign({},t.flow),{start:async(...e)=>{const n=await q(),o=Object.assign(Object.assign({location:window.location.href},e[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return e[1]=o,t.flow.start(...e)}});const X=function(...t){return e=>t.reduce(((t,e)=>e(t)),e)}((e=>n=>{var{fpKey:o,fpLoad:a}=n,i=t(n,["fpKey","fpLoad"]);return h?(o&&a&&U(o).catch((()=>null)),e(l(i,{beforeRequest:A}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),e(i))}),(e=>a=>{var{autoRefresh:i}=a,r=t(a,["autoRefresh"]);if(!i)return e(r);const{clearAllTimers:s,setTimer:u}=(()=>{const t=[];return{clearAllTimers:()=>{for(;t.length;)clearTimeout(t.pop())},setTimer:(e,n)=>{t.push(setTimeout(e,n))}}})();let d,g;h&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>d&&(w("Expiration time passed, refreshing session"),p.refresh(S()||g))}));const p=e(l(r,{afterRequest:async(t,e)=>{const{refreshJwt:n,sessionJwt:a}=await c(e);if(401===(null==e?void 0:e.status))w("Received 401, canceling all timers"),s();else if(a){if(d=(t=>{try{const e=o(t);if(e.exp)return new Date(1e3*e.exp)}catch(t){return null}})(a),!d)return void w("Could not extract expiration time from session token");g=n;let t=((i=d)?i.getTime()-(new Date).getTime():0)-2e4;t>v&&(w(`Timeout is too large (${t}ms), setting it to ${v}ms`),t=v),s();const e=new Date(Date.now()+t).toLocaleTimeString("en-US",{hour12:!1});w(`Setting refresh timer for ${e}. (${t}ms)`),u((()=>{w("Refreshing session due to timer"),p.refresh(S()||n)}),t)}var i}}));return n(p,["logout","logoutAll"],(t=>async(...e)=>{const n=await t(...e);return w("Clearing all timers"),s(),n}))}),(t=>e=>t(Object.assign(Object.assign({},e),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.15"},e.baseHeaders)}))),(t=>e=>{const o=K(),a=K(),i=t(l(e,{afterRequest:async(t,e)=>{if(401===(null==e?void 0:e.status))o.pub(null),a.pub(null);else{const t=await u(e);t&&a.pub(t);const{sessionJwt:n}=await c(e);n&&o.pub(n)}}})),r=n(i,["logout","logoutAll"],(t=>async(...e)=>{const n=await t(...e);return o.pub(null),a.pub(null),n}));return Object.assign(r,{onSessionTokenChange:o.sub,onUserChange:a.sub})}),(e=>o=>{var{storeLastAuthenticatedUser:a=!0}=o,i=t(o,["storeLastAuthenticatedUser"]);if(!a)return Object.assign(e(i),{getLastUserLoginId:_,getLastUserDisplayName:x});const r=e(l(i,{afterRequest:async(t,e)=>{var n;const o=await u(e),a=null===(n=null==o?void 0:o.loginIds)||void 0===n?void 0:n[0],i=null==o?void 0:o.name;a&&((t=>{g(T,t)})(a),(t=>{g(J,t)})(i))}}));let s=n(r,["flow.start"],R);return s=n(s,["logout","logoutAll"],C),Object.assign(s,{getLastUserLoginId:_,getLastUserDisplayName:x})}),(e=>o=>{var{persistTokens:i,sessionTokenViaCookie:r,storagePrefix:s}=o,u=t(o,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!i||!h)return i&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),e(u);const d=e(l(u,{beforeRequest:(f=s,t=>Object.assign(t,{token:t.token||S(f)})),afterRequest:async(e,n)=>{const o=/^\/v\d+\/mgmt\//.test(e.path);401===(null==n?void 0:n.status)?o||I(s):((e={},n,o)=>{var{refreshJwt:a,sessionJwt:i}=e,r=t(e,["refreshJwt","sessionJwt"]);void 0===n&&(n=!1),void 0===o&&(o=""),a&&g(`${o}${m}`,a),i&&(n?y(b,i,r):g(`${o}${b}`,i))})(await c(n),r,s)}}));var f;const w=n(d,["logout","logoutAll"],$(s));return Object.assign(w,{getRefreshToken:()=>S(s),getSessionToken:()=>function(t=""){return a.get(b)||p(`${t}${b}`)||""}(s)})}))(((...t)=>{const n=e(...t);return Object.assign(Object.assign({},n),{flow:Z(n),webauthn:B(n),fedcm:F(n)})}));export{m as REFRESH_TOKEN_KEY,b as SESSION_TOKEN_KEY,D as clearFingerprintData,X as default,U as ensureFingerprintIds};
//# sourceMappingURL=index.esm.js.map

2

dist/index.umd.js
!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e||self).Descope=t()}(this,(function(){"use strict";const e=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce(((n,o)=>{var r;return n[o]=[].concat((null===(r=e.hooks)||void 0===r?void 0:r[o])||[]).concat((null==t?void 0:t[o])||[]),n}),null!==(n=e.hooks)&&void 0!==n?n:e.hooks={}),e},t=async e=>{if(!(null==e?void 0:e.ok))return{};const t=await(null==e?void 0:e.clone().json());return(null==t?void 0:t.authInfo)||t||{}},n=async e=>{const n=await t(e);return(null==n?void 0:n.user)||((null==n?void 0:n.hasOwnProperty("userId"))?n:void 0)},o="undefined"!=typeof localStorage,r=(e,t)=>o&&(null===localStorage||void 0===localStorage?void 0:localStorage.setItem(e,t)),i=e=>o&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem(e)),s=e=>o&&(null===localStorage||void 0===localStorage?void 0:localStorage.removeItem(e));var a=function(){return a=Object.assign||function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},a.apply(this,arguments)};function c(e,t){var n={};for(var o in e)Object.prototype.hasOwnProperty.call(e,o)&&t.indexOf(o)<0&&(n[o]=e[o]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(o=Object.getOwnPropertySymbols(e);r<o.length;r++)t.indexOf(o[r])<0&&Object.prototype.propertyIsEnumerable.call(e,o[r])&&(n[o[r]]=e[o[r]])}return n}function l(e){this.message=e}"function"==typeof SuppressedError&&SuppressedError,l.prototype=new Error,l.prototype.name="InvalidCharacterError";var u="undefined"!=typeof window&&window.atob&&window.atob.bind(window)||function(e){var t=String(e).replace(/=+$/,"");if(t.length%4==1)throw new l("'atob' failed: The string to be decoded is not correctly encoded.");for(var n,o,r=0,i=0,s="";o=t.charAt(i++);~o&&(n=r%4?64*n+o:o,r++%4)?s+=String.fromCharCode(255&n>>(-2*r&6)):0)o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(o);return s};function d(e){this.message=e}function p(e,t){if("string"!=typeof e)throw new d("Invalid token specified");var n=!0===(t=t||{}).header?0:1;try{return JSON.parse(function(e){var t=e.replace(/-/g,"+").replace(/_/g,"/");switch(t.length%4){case 0:break;case 2:t+="==";break;case 3:t+="=";break;default:throw"Illegal base64url string!"}try{return function(e){return decodeURIComponent(u(e).replace(/(.)/g,(function(e,t){var n=t.charCodeAt(0).toString(16).toUpperCase();return n.length<2&&(n="0"+n),"%"+n})))}(t)}catch(e){return u(t)}}(e.split(".")[n]))}catch(e){throw new d("Invalid token specified: "+e.message)}}d.prototype=new Error,d.prototype.name="InvalidTokenError";var g="/v1/auth/accesskey/exchange",f="/v1/auth/otp/verify",h="/v1/auth/otp/signin",v="/v1/auth/otp/signup",m={email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},w="/v1/auth/otp/signup-in",b="/v1/auth/magiclink/verify",y="/v1/auth/magiclink/signin",I="/v1/auth/magiclink/signup",k={email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},O="/v1/auth/magiclink/signup-in",j="/v1/auth/enchantedlink/verify",S="/v1/auth/enchantedlink/signin",U="/v1/auth/enchantedlink/signup",R="/v1/auth/enchantedlink/pending-session",P={email:"/v1/auth/enchantedlink/update/email"},E="/v1/auth/enchantedlink/signup-in",x="/v1/auth/oauth/authorize",T="/v1/auth/oauth/exchange",A="v1/auth/oauth/native/start",$="v1/auth/oauth/native/finish",C="/v1/auth/saml/authorize",D="/v1/auth/saml/exchange",q="/v1/auth/totp/verify",_="/v1/auth/totp/signup",L="/v1/auth/totp/update",J="/v1/auth/notp/whatsapp/signin",K="/v1/auth/notp/whatsapp/signup",N="/v1/auth/notp/whatsapp/signup-in",M="/v1/auth/notp/pending-session",V={start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},H={start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},B={start:"/v1/auth/webauthn/signup-in/start"},F={start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"},z="/v1/auth/password/signup",Z="/v1/auth/password/signin",G="/v1/auth/password/reset",X="/v1/auth/password/update",Y="/v1/auth/password/replace",Q="/v1/auth/password/policy",W="/v1/auth/refresh",ee="/v1/auth/tenant/select",te="/v1/auth/logout",ne="/v1/auth/logoutall",oe="/v1/auth/me",re="/v1/auth/me/history",ie="/v1/flow/start",se="/v1/flow/next";const ae="<region>",ce=`https://api.${ae}descope.com`,le=6e5,ue="dct",de=()=>{const e={};return{headers(t){const n="function"==typeof t.entries?Object.fromEntries(t.entries()):t;return e.Headers=JSON.stringify(n),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},build:()=>Object.keys(e).flatMap((t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[])).join("\n")}};var pe;!function(e){e.get="GET",e.delete="DELETE",e.post="POST",e.put="PUT"}(pe||(pe={}));const ge=(...e)=>new Headers(e.reduce(((e,t)=>{const n=(e=>Array.isArray(e)?e:e instanceof Headers?Array.from(e.entries()):e?Object.entries(e):[])(t);return n.reduce(((t,[n,o])=>(e[n]=o,e)),e),e}),{})),fe=e=>void 0===e?void 0:JSON.stringify(e),he=(e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}},ve=({baseUrl:e,projectId:t,baseConfig:n,logger:o,hooks:r,cookiePolicy:i,fetch:s})=>{const a=((e,t)=>{const n=(e=>async(...t)=>{const n=await e(...t),o=await n.text();return n.text=()=>Promise.resolve(o),n.json=()=>Promise.resolve(JSON.parse(o)),n.clone=()=>n,n})(t||fetch);return n||null==e||e.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),e?async(...t)=>{if(!n)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");e.log((e=>de().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build())(t));const o=await n(...t);return e[o.ok?"log":"error"](await(async e=>{const t=await e.text();return de().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).build()})(o)),o}:n})(o,s),c=async o=>{var s;const c=(null==r?void 0:r.beforeRequest)?r.beforeRequest(o):o,{path:l,body:u,headers:d,queryParams:p,method:g,token:f}=c,h={headers:ge(he(t,f),{"x-descope-sdk-name":"core-js","x-descope-sdk-version":"2.18.2"},(null==n?void 0:n.baseHeaders)||{},d),method:g,body:fe(u)};null!==i&&(h.credentials=i||"include");const v=await a((({path:e,baseUrl:t,queryParams:n,projectId:o})=>{const r=o.slice(1,-27);t=t.replace(ae,r?r+".":"");let i=e?`${t.replace(/\/$/,"")}/${null==e?void 0:e.replace(/^\//,"")}`:t;if(n){i=`${i}?`;const e=Object.keys(n);e.forEach(((t,o)=>{i=`${i}${t}=${n[t]}${o===e.length-1?"":"&"}`}))}return i})({path:l,baseUrl:e,queryParams:p,projectId:t}),h);if((null==r?void 0:r.afterRequest)&&await r.afterRequest(o,null==v?void 0:v.clone()),null==r?void 0:r.transformResponse){const e=await v.json(),t=((null===(s=v.headers)||void 0===s?void 0:s.get("set-cookie"))||"").split(";").reduce(((e,t)=>{const[n,o]=t.split("=");return Object.assign(Object.assign({},e),{[n.trim()]:o})}),{}),n=Object.assign(Object.assign({},v),{json:()=>Promise.resolve(e),cookies:t});return n.clone=()=>n,r.transformResponse(n)}return v};return{get:(e,{headers:t,queryParams:n,token:o}={})=>c({path:e,headers:t,queryParams:n,body:void 0,method:pe.get,token:o}),post:(e,t,{headers:n,queryParams:o,token:r}={})=>c({path:e,headers:n,queryParams:o,body:t,method:pe.post,token:r}),put:(e,t,{headers:n,queryParams:o,token:r}={})=>c({path:e,headers:n,queryParams:o,body:t,method:pe.put,token:r}),delete:(e,{headers:t,queryParams:n,token:o}={})=>c({path:e,headers:t,queryParams:n,body:void 0,method:pe.delete,token:o}),hooks:r}};var me=429;function we(e,t,n){var o;let r=be(e);if(t){if(!(null==r?void 0:r.tenants)&&(null==r?void 0:r[ue])===t)return(null==r?void 0:r[n])||[];r=null===(o=null==r?void 0:r.tenants)||void 0===o?void 0:o[t]}const i=null==r?void 0:r[n];return Array.isArray(i)?i:[]}function be(e){if("string"!=typeof e||!e)throw new Error("Invalid token provided");return p(e)}function ye(e){const{exp:t}=be(e);return(new Date).getTime()/1e3>t}function Ie(e){let t=be(e);const n=Object.keys(null==t?void 0:t.tenants);return Array.isArray(n)?n:[]}function ke(e,t){return we(e,t,"permissions")}function Oe(e,t){return we(e,t,"roles")}const je=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function Se(e,t){var n;const o=await e,r={code:o.status,ok:o.ok,response:o},i=await o.clone().json();return o.ok?r.data=t?t(i):i:(r.error=i,o.status===me&&Object.assign(r.error,{retryAfter:Number.parseInt(null===(n=o.headers)||void 0===n?void 0:n.get("retry-after"))||0})),r}const Ue=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),Re=(...e)=>({validate:t=>(e.forEach((e=>{const n=e(t);if(n)throw new Error(n)})),!0)}),Pe=e=>t=>e.test(t),Ee=Pe(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),xe=Pe(/^\+[1-9]{1}[0-9]{3,14}$/),Te=Ue(Ee,'"{val}" is not a valid email'),Ae=Ue(xe,'"{val}" is not a valid phone number'),$e=Ue((1,e=>e.length>=1),"Minimum length is 1");const Ce=Ue((e=>"string"==typeof e),"Input is not a string"),De=Ue((e=>void 0===e),"Input is defined"),qe=(_e=[Ce(),De()],"Input is not a string or undefined",(e="Input is not a string or undefined")=>t=>{const n=_e.filter((e=>e(t)));return!(n.length<_e.length)&&(e?e.replace("{val}",t):n.join(" OR "))});var _e;const Le=(...e)=>t=>(...n)=>(e.forEach(((e,t)=>Re(...e).validate(n[t]))),t(...n)),Je=e=>[Ce(`"${e}" must be a string`)],Ke=e=>[Ce(`"${e}" must be a string`),$e(`"${e}" must not be empty`)],Ne=e=>[Ce(`"${e}" must be a string`),Te()],Me=e=>[Ce(`"${e}" must be a string`),Ae()],Ve=Le(Ke("accessKey")),He=e=>({exchange:Ve(((t,n)=>Se(e.post(g,{loginOptions:n},{token:t}))))}),Be=(e,t,n)=>(t.forEach((t=>{const o=t.split(".");let r=o.shift(),i=e;for(;o.length>0;){if(i=i[r],!r||!i)throw Error(`Invalid path "${t}", "${r}" is missing or has no value`);r=o.shift()}if("function"!=typeof i[r])throw Error(`"${t}" is not a function`);const s=i[r];i[r]=n(s)})),e),Fe=({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||1e3,1e3),timeoutMs:Math.min(t||le,le)});var ze,Ze;!function(e){e.sms="sms",e.voice="voice",e.whatsapp="whatsapp"}(ze||(ze={})),function(e){e.email="email"}(Ze||(Ze={}));const Ge=Object.assign(Object.assign({},ze),Ze);var Xe;!function(e){e.waiting="waiting",e.running="running",e.completed="completed",e.failed="failed"}(Xe||(Xe={}));const Ye=Ke("loginId"),Qe=Le(Ke("token")),We=Le(Ye),et=Le(Ke("pendingRef")),tt=Le(Ye,Ne("email")),nt=e=>({verify:Qe((t=>Se(e.post(j,{token:t})))),signIn:We(((t,n,o,r)=>Se(e.post(je(S,Ge.email),{loginId:t,URI:n,loginOptions:o},{token:r})))),signUpOrIn:We(((t,n,o)=>Se(e.post(je(E,Ge.email),{loginId:t,URI:n,loginOptions:o})))),signUp:We(((t,n,o,r)=>Se(e.post(je(U,Ge.email),{loginId:t,URI:n,user:o,loginOptions:r})))),waitForSession:et(((t,n)=>new Promise((o=>{const{pollingIntervalMs:r,timeoutMs:i}=Fe(n);let s;const a=setInterval((async()=>{const n=await e.post(R,{pendingRef:t});n.ok&&(clearInterval(a),s&&clearTimeout(s),o(Se(Promise.resolve(n))))}),r);s=setTimeout((()=>{o({error:{errorDescription:`Session polling timeout exceeded: ${i}ms`,errorCode:"0"},ok:!1}),clearInterval(a)}),i)})))),update:{email:tt(((t,n,o,r,i)=>Se(e.post(P.email,Object.assign({loginId:t,email:n,URI:o},i),{token:r}))))}}),ot=Le(Ke("flowId")),rt=Le(Ke("executionId"),Ke("stepId"),Ke("interactionId")),it=e=>({start:ot(((t,n,o,r,i,s,a)=>Se(e.post(ie,{flowId:t,options:n,conditionInteractionId:o,interactionId:r,version:i,componentsVersion:s,input:a})))),next:rt(((t,n,o,r,i,s)=>Se(e.post(se,{executionId:t,stepId:n,interactionId:o,version:r,componentsVersion:i,input:s}))))}),st=Ke("loginId"),at=Le(Ke("token")),ct=Le(st),lt=Le(st,Me("phone")),ut=Le(st,Ne("email")),dt=Object.keys(Ge).filter((e=>e!==ze.voice)),pt=e=>({verify:at((t=>Se(e.post(b,{token:t})))),signIn:dt.reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:ct(((t,o,r,i)=>Se(e.post(je(y,n),{loginId:t,URI:o,loginOptions:r},{token:i}))))})),{}),signUp:dt.reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:ct(((t,o,r,i)=>Se(e.post(je(I,n),{loginId:t,URI:o,user:r,loginOptions:i}))))})),{}),signUpOrIn:dt.reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:ct(((t,o,r)=>Se(e.post(je(O,n),{loginId:t,URI:o,loginOptions:r}))))})),{}),update:{email:ut(((t,n,o,r,i)=>Se(e.post(k.email,Object.assign({loginId:t,email:n,URI:o},i),{token:r})))),phone:Object.keys(ze).filter((e=>e!==ze.voice)).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:lt(((t,o,r,i,s)=>Se(e.post(je(k.phone,n),Object.assign({loginId:t,phone:o,URI:r},s),{token:i}))))})),{})}});var gt;!function(e){e.facebook="facebook",e.github="github",e.google="google",e.microsoft="microsoft",e.gitlab="gitlab",e.apple="apple",e.discord="discord",e.linkedin="linkedin",e.slack="slack"}(gt||(gt={}));const ft=Le(Ke("code")),ht=e=>({start:Object.assign(((t,n,o,r)=>Se(e.post(x,o||{},{queryParams:Object.assign({provider:t},n&&{redirectURL:n}),token:r}))),Object.keys(gt).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:(t,o,r)=>Se(e.post(x,o||{},{queryParams:Object.assign({provider:n},t&&{redirectURL:t}),token:r}))})),{})),exchange:ft((t=>Se(e.post(T,{code:t})))),startNative:(t,n)=>Se(e.post(A,{provider:t,loginOptions:n})),finishNative:(t,n,o,r,i)=>Se(e.post($,{provider:t,stateId:n,user:o,code:r,idToken:i}))}),vt=Ke("loginId"),mt=Le(vt,Ke("code")),wt=Le(vt),bt=Le(vt,Me("phone")),yt=Le(vt,Ne("email")),It=e=>({verify:Object.keys(Ge).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:mt(((t,o)=>Se(e.post(je(f,n),{code:o,loginId:t}))))})),{}),signIn:Object.keys(Ge).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:wt(((t,o,r)=>Se(e.post(je(h,n),{loginId:t,loginOptions:o},{token:r}))))})),{}),signUp:Object.keys(Ge).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:wt(((t,o,r)=>Se(e.post(je(v,n),{loginId:t,user:o,loginOptions:r}))))})),{}),signUpOrIn:Object.keys(Ge).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:wt(((t,o)=>Se(e.post(je(w,n),{loginId:t,loginOptions:o}))))})),{}),update:{email:yt(((t,n,o,r)=>Se(e.post(m.email,Object.assign({loginId:t,email:n},r),{token:o})))),phone:Object.keys(ze).reduce(((t,n)=>Object.assign(Object.assign({},t),{[n]:bt(((t,o,r,i)=>Se(e.post(je(m.phone,n),Object.assign({loginId:t,phone:o},i),{token:r}))))})),{})}}),kt=Le(Ke("tenant")),Ot=Le(Ke("code")),jt=e=>({start:kt(((t,n,o,r)=>Se(e.post(C,o||{},{queryParams:{tenant:t,redirectURL:n},token:r})))),exchange:Ot((t=>Se(e.post(D,{code:t}))))}),St=Ke("loginId"),Ut=Le(St,Ke("code")),Rt=Le(St),Pt=Le(St),Et=e=>({signUp:Rt(((t,n)=>Se(e.post(_,{loginId:t,user:n})))),verify:Ut(((t,n,o,r)=>Se(e.post(q,{loginId:t,code:n,loginOptions:o},{token:r})))),update:Pt(((t,n)=>Se(e.post(L,{loginId:t},{token:n}))))}),xt=Ke("loginId"),Tt=Ke("newPassword"),At=Le(xt,Ke("password")),$t=Le(xt),Ct=Le(xt,Tt),Dt=Le(xt,Ke("oldPassword"),Tt),qt=e=>({signUp:At(((t,n,o,r)=>Se(e.post(z,{loginId:t,password:n,user:o,loginOptions:r})))),signIn:At(((t,n,o)=>Se(e.post(Z,{loginId:t,password:n,loginOptions:o})))),sendReset:$t(((t,n,o)=>Se(e.post(G,{loginId:t,redirectUrl:n,templateOptions:o})))),update:Ct(((t,n,o)=>Se(e.post(X,{loginId:t,newPassword:n},{token:o})))),replace:Dt(((t,n,o)=>Se(e.post(Y,{loginId:t,oldPassword:n,newPassword:o})))),policy:()=>Se(e.get(Q))}),_t=Je("loginId"),Lt=Ke("loginId"),Jt=Ke("origin"),Kt=Le(Lt,Jt,Ke("name")),Nt=Le(Lt,Jt),Mt=Le(_t,Jt),Vt=Le(Lt,Jt,Ke("token")),Ht=Le(Ke("transactionId"),Ke("response")),Bt=e=>({signUp:{start:Kt(((t,n,o)=>Se(e.post(V.start,{user:{loginId:t,name:o},origin:n})))),finish:Ht(((t,n)=>Se(e.post(V.finish,{transactionId:t,response:n}))))},signIn:{start:Mt(((t,n,o,r)=>Se(e.post(H.start,{loginId:t,origin:n,loginOptions:o},{token:r})))),finish:Ht(((t,n)=>Se(e.post(H.finish,{transactionId:t,response:n}))))},signUpOrIn:{start:Nt(((t,n)=>Se(e.post(B.start,{loginId:t,origin:n}))))},update:{start:Vt(((t,n,o)=>Se(e.post(F.start,{loginId:t,origin:n},{token:o})))),finish:Ht(((t,n)=>Se(e.post(F.finish,{transactionId:t,response:n}))))}}),Ft=Je("loginId"),zt=Le(Ft),Zt=Le(Ke("pendingRef")),Gt=e=>({signUpOrIn:zt(((t,n)=>Se(e.post(N,{loginId:t,loginOptions:n})))),signUp:zt(((t,n,o)=>Se(e.post(K,{loginId:t,user:n,loginOptions:o})))),signIn:zt(((t,n,o)=>Se(e.post(J,{loginId:t,loginOptions:n},{token:o})))),waitForSession:Zt(((t,n)=>new Promise((o=>{const{pollingIntervalMs:r,timeoutMs:i}=Fe(n);let s;const a=setInterval((async()=>{const n=await e.post(M,{pendingRef:t});n.ok&&(clearInterval(a),s&&clearTimeout(s),o(Se(Promise.resolve(n))))}),r);s=setTimeout((()=>{o({error:{errorDescription:`Session polling timeout exceeded: ${i}ms`,errorCode:"0"},ok:!1}),clearInterval(a)}),i)}))))}),Xt=Le(Ke("token")),Yt=Le([qe('"token" must be string or undefined')]);var Qt,Wt=Le([("projectId",Qt=Ke("projectId"),Ue(((e,t)=>n=>Re(...t).validate(((e,t,n)=>{const o=(Array.isArray(t)?t.join("."):String(t)).replace(/\[\\?("|')?(\w|d)+\\?("|')?\]/g,((e,t,n)=>"."+n)).split("."),r=o.length;let i=0,s=e===Object(e)?e:void 0;for(;null!=s&&i<r;)s=s[o[i++]];return i&&i===r&&void 0!==s?s:void 0})(n,e)))("projectId",Qt))())])((e=>{var t;return(({projectId:e,logger:t,baseUrl:n,hooks:o,cookiePolicy:r,baseHeaders:i={},fetch:s})=>{return a=ve({baseUrl:n||ce,projectId:e,logger:t,hooks:o,cookiePolicy:r,baseConfig:{baseHeaders:i},fetch:s}),{accessKey:He(a),otp:It(a),magicLink:pt(a),enchantedLink:nt(a),oauth:ht(a),saml:jt(a),totp:Et(a),notp:Gt(a),webauthn:Bt(a),password:qt(a),flow:it(a),refresh:Yt((e=>Se(a.post(W,{},{token:e})))),selectTenant:Le([Ce("tenantId")],[qe('"token" must be string or undefined')])(((e,t)=>Se(a.post(ee,{tenant:e},{token:t})))),logout:Yt((e=>Se(a.post(te,{},{token:e})))),logoutAll:Yt((e=>Se(a.post(ne,{},{token:e})))),me:Yt((e=>Se(a.get(oe,{token:e})))),history:Yt((e=>Se(a.get(re,{token:e})))),isJwtExpired:Xt(ye),getTenants:Xt(Ie),getJwtPermissions:Xt(ke),getJwtRoles:Xt(Oe),httpClient:a};var a})(Object.assign(Object.assign({},e),{hooks:{beforeRequest:t=>{var n;const o=[].concat((null===(n=e.hooks)||void 0===n?void 0:n.beforeRequest)||[]);return null==o?void 0:o.reduce(((e,t)=>t(e)),t)},afterRequest:async(t,n)=>{var o;const r=[].concat((null===(o=e.hooks)||void 0===o?void 0:o.afterRequest)||[]);(await Promise.allSettled(null==r?void 0:r.map((e=>e(t,null==n?void 0:n.clone()))))).forEach((t=>{var n;return"rejected"===t.status&&(null===(n=e.logger)||void 0===n?void 0:n.error(t.reason))}))},transformResponse:null===(t=e.hooks)||void 0===t?void 0:t.transformResponse}}))})),en=Object.assign(Wt,{DeliveryMethods:Ge});const tn=(...e)=>{console.debug(...e)},nn="undefined"!=typeof window,on=Math.pow(2,31)-1;
/*! js-cookie v3.0.5 | MIT */
function rn(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)e[o]=n[o]}return e}var sn=function e(t,n){function o(e,o,r){if("undefined"!=typeof document){"number"==typeof(r=rn({},n,r)).expires&&(r.expires=new Date(Date.now()+864e5*r.expires)),r.expires&&(r.expires=r.expires.toUTCString()),e=encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var s in r)r[s]&&(i+="; "+s,!0!==r[s]&&(i+="="+r[s].split(";")[0]));return document.cookie=e+"="+t.write(o,e)+i}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length||e)){for(var n=document.cookie?document.cookie.split("; "):[],o={},r=0;r<n.length;r++){var i=n[r].split("="),s=i.slice(1).join("=");try{var a=decodeURIComponent(i[0]);if(o[a]=t.read(s,a),e===a)break}catch(e){}}return e?o[e]:o}},remove:function(e,t){o(e,"",rn({},t,{expires:-1}))},withAttributes:function(t){return e(this.converter,rn({},this.attributes,t))},withConverter:function(t){return e(rn({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(n)},converter:{value:Object.freeze(t)}})}({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,decodeURIComponent)}},{path:"/"});const an="DS",cn="DSR";function ln(e,t,{cookiePath:n,cookieDomain:o,cookieExpiration:r}){if(t){const i=new Date(1e3*r),s=function(e){const t=window.location.hostname.split("."),n=e.split(".");return t.slice(-n.length).join(".")===e}(o);sn.set(e,t,{path:n,domain:s?o:void 0,expires:i,sameSite:"Strict",secure:!0})}}function un(e=""){return i(`${e}${cn}`)||""}function dn(e=""){s(`${e}${cn}`),s(`${e}${an}`),sn.remove(an)}const pn=nn&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com";var gn={default:"endpoint"},fn="Blocked by CSP",hn="The endpoint parameter is not a valid URL",vn="Failed to load the JS script of the agent",mn="9319";function wn(e,t){var n,o,r,i,s=[],a=(n=function(e){var t=function(e,t,n){if(n||2===arguments.length)for(var o,r=0,i=t.length;r<i;r++)!o&&r in t||(o||(o=Array.prototype.slice.call(t,0,r)),o[r]=t[r]);return e.concat(o||Array.prototype.slice.call(t))}([],e,!0);return{current:function(){return t[0]},postpone:function(){var e=t.shift();void 0!==e&&t.push(e)},exclude:function(){t.shift()}}}(e),100,3e3,i=0,o=function(){return Math.random()*Math.min(3e3,100*Math.pow(2,i++))},r=new Set,[n.current(),function(e,t){var i,s=t instanceof Error?t.message:"";if(s===fn||s===hn)n.exclude(),i=0;else if(s===mn)n.exclude();else if(s===vn){var a=Date.now()-e.getTime()<50,c=n.current();c&&a&&!r.has(c)&&(r.add(c),i=0),n.postpone()}else n.postpone();var l=n.current();return void 0===l?void 0:[l,null!=i?i:e.getTime()+o()-Date.now()]}]),c=a[0],l=a[1];if(void 0===c)return Promise.reject(new TypeError("The list of script URL patterns is empty"));var u=function(e){var n=new Date,o=function(t){return s.push({url:e,startedAt:n,finishedAt:new Date,error:t})},r=t(e);return r.then((function(){return o()}),o),r.catch((function(e){if(s.length>=5)throw e;var t=l(n,e);if(!t)throw e;var o,r=t[0],i=t[1];return(o=i,new Promise((function(e){return setTimeout(e,o)}))).then((function(){return u(r)}))}))};return u(c).then((function(e){return[e,s]}))}var bn="https://fpnpmcdn.net/v<version>/<apiKey>/loader_v<loaderVersion>.js",yn=bn;function In(e){var t;e.scriptUrlPattern;var n=e.token,o=e.apiKey,r=void 0===o?n:o,i=c(e,["scriptUrlPattern","token","apiKey"]),s=null!==(t=function(e,t){return function(e,t){return Object.prototype.hasOwnProperty.call(e,t)}(e,t)?e[t]:void 0}(e,"scriptUrlPattern"))&&void 0!==t?t:bn,l=function(){var e=[],t=function(){e.push({time:new Date,state:document.visibilityState})},n=function(e,t,n,o){return e.addEventListener(t,n,o),function(){return e.removeEventListener(t,n,o)}}(document,"visibilitychange",t);return t(),[e,n]}(),u=l[0],d=l[1];return Promise.resolve().then((function(){if(!r||"string"!=typeof r)throw new Error("API key required");var e=function(e,t){return(Array.isArray(e)?e:[e]).map((function(e){return function(e,t){var n=encodeURIComponent;return e.replace(/<[^<>]+>/g,(function(e){return"<version>"===e?"3":"<apiKey>"===e?n(t):"<loaderVersion>"===e?n("3.9.6"):e}))}(String(e),t)}))}(s,r);return wn(e,kn)})).catch((function(e){throw d(),function(e){return e instanceof Error&&e.message===mn?new Error(vn):e}(e)})).then((function(e){var t=e[0],n=e[1];return d(),t.load(a(a({},i),{ldi:{attempts:n,visibilityStates:u}}))}))}function kn(e){return function(e,t,n,o){var r,i=document,s="securitypolicyviolation",a=function(t){var n=new URL(e,location.href),o=t.blockedURI;o!==n.href&&o!==n.protocol.slice(0,-1)&&o!==n.origin||(r=t,c())};i.addEventListener(s,a);var c=function(){return i.removeEventListener(s,a)};return Promise.resolve().then(t).then((function(e){return c(),e}),(function(e){return new Promise((function(e){return setTimeout(e)})).then((function(){if(c(),r)return function(){throw new Error(fn)}();throw e}))}))}(e,(function(){return function(e){return new Promise((function(t,n){if(function(e){if(URL.prototype)try{return new URL(e,location.href),!1}catch(e){if(e instanceof Error&&"TypeError"===e.name)return!0;throw e}}(e))throw new Error(hn);var o=document.createElement("script"),r=function(){var e;return null===(e=o.parentNode)||void 0===e?void 0:e.removeChild(o)},i=document.head||document.getElementsByTagName("head")[0];o.onload=function(){r(),t()},o.onerror=function(){r(),n(new Error(vn))},o.async=!0,o.src=e,i.appendChild(o)}))}(e)})).then(On)}function On(){var e=window,t="__fpjs_p_l_b",n=e[t];if(function(e,t){var n,o=null===(n=Object.getOwnPropertyDescriptor)||void 0===n?void 0:n.call(Object,e,t);(null==o?void 0:o.configurable)?delete e[t]:o&&!o.writable||(e[t]=void 0)}(e,t),"function"!=typeof(null==n?void 0:n.load))throw new Error(mn);return n}const jn=(e=!1)=>{const t=localStorage.getItem("fp");if(!t)return null;const n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},Sn=async(e,t=pn)=>{try{if(jn())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),o=new URL(t);o.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const r=new URL(t);r.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const i=r.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",s=In({apiKey:e,endpoint:[o.toString(),gn],scriptUrlPattern:[i,yn]}),a=await s,{requestId:c}=await a.get({linkedId:n}),l=((e,t)=>({vsid:e,vrid:t}))(n,c);(e=>{const t={value:e,expiry:(new Date).getTime()+864e5};localStorage.setItem("fp",JSON.stringify(t))})(l)}catch(e){console.warn("Could not load fingerprint",e)}},Un=e=>{const t=jn(!0);return t&&e.body&&(e.body.fpData=t),e},Rn="dls_last_user_login_id",Pn="dls_last_user_display_name",En=()=>i(Rn),xn=()=>i(Pn),Tn=e=>async(...t)=>{var n;t[1]=t[1]||{};const[,o={}]=t,r=En(),i=xn();r&&(null!==(n=o.lastAuth)&&void 0!==n||(o.lastAuth={}),o.lastAuth.loginId=r,o.lastAuth.name=i);return await e(...t)},An=e=>async(...t)=>{const n=await e(...t);return s(Rn),s(Pn),n};function $n(){const e=[];return{pub:t=>{e.forEach((e=>e(t)))},sub:t=>{const n=e.push(t)-1;return()=>e.splice(n,1)}}}const Cn=e=>t=>async(...n)=>{const o=await t(...n);return dn(e),o};async function Dn(e){const t=function(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=Nn(n.publicKey.challenge),n.publicKey.user.id=Nn(n.publicKey.user.id),null===(t=n.publicKey.excludeCredentials)||void 0===t||t.forEach((e=>{e.id=Nn(e.id)})),n}(e),n=await navigator.credentials.create(t);return o=n,JSON.stringify({id:o.id,rawId:Mn(o.rawId),type:o.type,response:{attestationObject:Mn(o.response.attestationObject),clientDataJSON:Mn(o.response.clientDataJSON)}});var o}async function qn(e){const t=Jn(e);return Kn(await navigator.credentials.get(t))}async function _n(e,t){const n=Jn(e);n.signal=t.signal,n.mediation="conditional";return Kn(await navigator.credentials.get(n))}async function Ln(e=!1){if(!nn)return Promise.resolve(!1);const t=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return t&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():t}function Jn(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=Nn(n.publicKey.challenge),null===(t=n.publicKey.allowCredentials)||void 0===t||t.forEach((e=>{e.id=Nn(e.id)})),n}function Kn(e){return JSON.stringify({id:e.id,rawId:Mn(e.rawId),type:e.type,response:{authenticatorData:Mn(e.response.authenticatorData),clientDataJSON:Mn(e.response.clientDataJSON),signature:Mn(e.response.signature),userHandle:e.response.userHandle?Mn(e.response.userHandle):void 0}})}function Nn(e){const t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),(e=>e.charCodeAt(0))).buffer}function Mn(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var Vn,Hn=(Vn=e=>({async signUp(t,n){const o=await e.webauthn.signUp.start(t,window.location.origin,n);if(!o.ok)return o;const r=await Dn(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,r)},async signIn(t){const n=await e.webauthn.signIn.start(t,window.location.origin);if(!n.ok)return n;const o=await qn(n.data.options);return await e.webauthn.signIn.finish(n.data.transactionId,o)},async signUpOrIn(t){var n;const o=await e.webauthn.signUpOrIn.start(t,window.location.origin);if(!o.ok)return o;if(null===(n=o.data)||void 0===n?void 0:n.create){const t=await Dn(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,t)}{const t=await qn(o.data.options);return await e.webauthn.signIn.finish(o.data.transactionId,t)}},async update(t,n){const o=await e.webauthn.update.start(t,window.location.origin,n);if(!o.ok)return o;const r=await Dn(o.data.options);return await e.webauthn.update.finish(o.data.transactionId,r)},helpers:{create:Dn,get:qn,isSupported:Ln,conditional:_n}}),(...e)=>{const t=Vn(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});const Bn=e=>({async oneTap(t,n,o,r){const i=null!=t?t:"google",s=await e.oauth.startNative(i,o);if(!s.ok)return s;const{clientId:a,stateId:c,nonce:l}=s.data,u=await async function(){return new Promise(((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((t=>{var o,s;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(o=null==n?void 0:n.itp_support)||void 0===o||o,use_fedcm_for_prompt:null===(s=null==n?void 0:n.use_fedcm_for_prompt)||void 0===s||s,client_id:a,callback:n=>{t(e.oauth.finishNative(i,c,"","",n.credential))},nonce:l})),u.prompt((e=>{(null==e?void 0:e.isSkippedMoment())&&(null==r||r())}))}))}});var Fn=e=>Object.assign(Object.assign({},e.flow),{start:async(...t)=>{const n=await Ln(),o=Object.assign(Object.assign({location:window.location.href},t[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return t[1]=o,e.flow.start(...t)}});const zn=function(...e){return t=>e.reduce(((e,t)=>t(e)),t)}((t=>n=>{var{fpKey:o,fpLoad:r}=n,i=c(n,["fpKey","fpLoad"]);return nn?(o&&r&&Sn(o).catch((()=>null)),t(e(i,{beforeRequest:Un}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),t(i))}),(n=>o=>{var{autoRefresh:r}=o,i=c(o,["autoRefresh"]);if(!r)return n(i);const{clearAllTimers:s,setTimer:a}=(()=>{const e=[];return{clearAllTimers:()=>{for(;e.length;)clearTimeout(e.pop())},setTimer:(t,n)=>{e.push(setTimeout(t,n))}}})();let l,u;nn&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>l&&(tn("Expiration time passed, refreshing session"),d.refresh(un()||u))}));const d=n(e(i,{afterRequest:async(e,n)=>{const{refreshJwt:o,sessionJwt:r}=await t(n);if(401===(null==n?void 0:n.status))tn("Received 401, canceling all timers"),s();else if(r){if(l=(e=>{try{const t=p(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(r),!l)return void tn("Could not extract expiration time from session token");u=o;let e=((i=l)?i.getTime()-(new Date).getTime():0)-2e4;e>on&&(tn(`Timeout is too large (${e}ms), setting it to ${on}ms`),e=on),s();const t=new Date(Date.now()+e).toLocaleTimeString("en-US",{hour12:!1});tn(`Setting refresh timer for ${t}. (${e}ms)`),a((()=>{tn("Refreshing session due to timer"),d.refresh(un()||o)}),e)}var i}}));return Be(d,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return tn("Clearing all timers"),s(),n}))}),(e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.14"},t.baseHeaders)}))),(o=>r=>{const i=$n(),s=$n(),a=o(e(r,{afterRequest:async(e,o)=>{if(401===(null==o?void 0:o.status))i.pub(null),s.pub(null);else{const e=await n(o);e&&s.pub(e);const{sessionJwt:r}=await t(o);r&&i.pub(r)}}})),c=Be(a,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return i.pub(null),s.pub(null),n}));return Object.assign(c,{onSessionTokenChange:i.sub,onUserChange:s.sub})}),(t=>o=>{var{storeLastAuthenticatedUser:i=!0}=o,s=c(o,["storeLastAuthenticatedUser"]);if(!i)return Object.assign(t(s),{getLastUserLoginId:En,getLastUserDisplayName:xn});const a=t(e(s,{afterRequest:async(e,t)=>{var o;const i=await n(t),s=null===(o=null==i?void 0:i.loginIds)||void 0===o?void 0:o[0],a=null==i?void 0:i.name;s&&((e=>{r(Rn,e)})(s),(e=>{r(Pn,e)})(a))}}));let l=Be(a,["flow.start"],Tn);return l=Be(l,["logout","logoutAll"],An),Object.assign(l,{getLastUserLoginId:En,getLastUserDisplayName:xn})}),(n=>o=>{var{persistTokens:s,sessionTokenViaCookie:a,storagePrefix:l}=o,u=c(o,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!s||!nn)return s&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),n(u);const d=n(e(u,{beforeRequest:(p=l,e=>Object.assign(e,{token:e.token||un(p)})),afterRequest:async(e,n)=>{const o=/^\/v\d+\/mgmt\//.test(e.path);401===(null==n?void 0:n.status)?o||dn(l):((e={},t,n)=>{var{refreshJwt:o,sessionJwt:i}=e,s=c(e,["refreshJwt","sessionJwt"]);void 0===t&&(t=!1),void 0===n&&(n=""),o&&r(`${n}${cn}`,o),i&&(t?ln(an,i,s):r(`${n}${an}`,i))})(await t(n),a,l)}}));var p;const g=Be(d,["logout","logoutAll"],Cn(l));return Object.assign(g,{getRefreshToken:()=>un(l),getSessionToken:()=>function(e=""){return sn.get(an)||i(`${e}${an}`)||""}(l)})}))(((...e)=>{const t=en(...e);return Object.assign(Object.assign({},t),{flow:Fn(t),webauthn:Hn(t),fedcm:Bn(t)})}));return zn.REFRESH_TOKEN_KEY=cn,zn.SESSION_TOKEN_KEY=an,zn}));
function rn(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)e[o]=n[o]}return e}var sn=function e(t,n){function o(e,o,r){if("undefined"!=typeof document){"number"==typeof(r=rn({},n,r)).expires&&(r.expires=new Date(Date.now()+864e5*r.expires)),r.expires&&(r.expires=r.expires.toUTCString()),e=encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var s in r)r[s]&&(i+="; "+s,!0!==r[s]&&(i+="="+r[s].split(";")[0]));return document.cookie=e+"="+t.write(o,e)+i}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length||e)){for(var n=document.cookie?document.cookie.split("; "):[],o={},r=0;r<n.length;r++){var i=n[r].split("="),s=i.slice(1).join("=");try{var a=decodeURIComponent(i[0]);if(o[a]=t.read(s,a),e===a)break}catch(e){}}return e?o[e]:o}},remove:function(e,t){o(e,"",rn({},t,{expires:-1}))},withAttributes:function(t){return e(this.converter,rn({},this.attributes,t))},withConverter:function(t){return e(rn({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(n)},converter:{value:Object.freeze(t)}})}({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,decodeURIComponent)}},{path:"/"});const an="DS",cn="DSR";function ln(e,t,{cookiePath:n,cookieDomain:o,cookieExpiration:r}){if(t){const i=new Date(1e3*r),s=function(e){const t=window.location.hostname.split("."),n=e.split(".");return t.slice(-n.length).join(".")===e}(o);sn.set(e,t,{path:n,domain:s?o:void 0,expires:i,sameSite:"Strict",secure:!0})}}function un(e=""){return i(`${e}${cn}`)||""}function dn(e=""){s(`${e}${cn}`),s(`${e}${an}`),sn.remove(an)}const pn=nn&&(null===localStorage||void 0===localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com";var gn={default:"endpoint"},fn="Blocked by CSP",hn="The endpoint parameter is not a valid URL",vn="Failed to load the JS script of the agent",mn="9319";function wn(e,t){var n,o,r,i,s=[],a=(n=function(e){var t=function(e,t,n){if(n||2===arguments.length)for(var o,r=0,i=t.length;r<i;r++)!o&&r in t||(o||(o=Array.prototype.slice.call(t,0,r)),o[r]=t[r]);return e.concat(o||Array.prototype.slice.call(t))}([],e,!0);return{current:function(){return t[0]},postpone:function(){var e=t.shift();void 0!==e&&t.push(e)},exclude:function(){t.shift()}}}(e),100,3e3,i=0,o=function(){return Math.random()*Math.min(3e3,100*Math.pow(2,i++))},r=new Set,[n.current(),function(e,t){var i,s=t instanceof Error?t.message:"";if(s===fn||s===hn)n.exclude(),i=0;else if(s===mn)n.exclude();else if(s===vn){var a=Date.now()-e.getTime()<50,c=n.current();c&&a&&!r.has(c)&&(r.add(c),i=0),n.postpone()}else n.postpone();var l=n.current();return void 0===l?void 0:[l,null!=i?i:e.getTime()+o()-Date.now()]}]),c=a[0],l=a[1];if(void 0===c)return Promise.reject(new TypeError("The list of script URL patterns is empty"));var u=function(e){var n=new Date,o=function(t){return s.push({url:e,startedAt:n,finishedAt:new Date,error:t})},r=t(e);return r.then((function(){return o()}),o),r.catch((function(e){if(s.length>=5)throw e;var t=l(n,e);if(!t)throw e;var o,r=t[0],i=t[1];return(o=i,new Promise((function(e){return setTimeout(e,o)}))).then((function(){return u(r)}))}))};return u(c).then((function(e){return[e,s]}))}var bn="https://fpnpmcdn.net/v<version>/<apiKey>/loader_v<loaderVersion>.js",yn=bn;function In(e){var t;e.scriptUrlPattern;var n=e.token,o=e.apiKey,r=void 0===o?n:o,i=c(e,["scriptUrlPattern","token","apiKey"]),s=null!==(t=function(e,t){return function(e,t){return Object.prototype.hasOwnProperty.call(e,t)}(e,t)?e[t]:void 0}(e,"scriptUrlPattern"))&&void 0!==t?t:bn,l=function(){var e=[],t=function(){e.push({time:new Date,state:document.visibilityState})},n=function(e,t,n,o){return e.addEventListener(t,n,o),function(){return e.removeEventListener(t,n,o)}}(document,"visibilitychange",t);return t(),[e,n]}(),u=l[0],d=l[1];return Promise.resolve().then((function(){if(!r||"string"!=typeof r)throw new Error("API key required");var e=function(e,t){return(Array.isArray(e)?e:[e]).map((function(e){return function(e,t){var n=encodeURIComponent;return e.replace(/<[^<>]+>/g,(function(e){return"<version>"===e?"3":"<apiKey>"===e?n(t):"<loaderVersion>"===e?n("3.9.6"):e}))}(String(e),t)}))}(s,r);return wn(e,kn)})).catch((function(e){throw d(),function(e){return e instanceof Error&&e.message===mn?new Error(vn):e}(e)})).then((function(e){var t=e[0],n=e[1];return d(),t.load(a(a({},i),{ldi:{attempts:n,visibilityStates:u}}))}))}function kn(e){return function(e,t,n,o){var r,i=document,s="securitypolicyviolation",a=function(t){var n=new URL(e,location.href),o=t.blockedURI;o!==n.href&&o!==n.protocol.slice(0,-1)&&o!==n.origin||(r=t,c())};i.addEventListener(s,a);var c=function(){return i.removeEventListener(s,a)};return Promise.resolve().then(t).then((function(e){return c(),e}),(function(e){return new Promise((function(e){return setTimeout(e)})).then((function(){if(c(),r)return function(){throw new Error(fn)}();throw e}))}))}(e,(function(){return function(e){return new Promise((function(t,n){if(function(e){if(URL.prototype)try{return new URL(e,location.href),!1}catch(e){if(e instanceof Error&&"TypeError"===e.name)return!0;throw e}}(e))throw new Error(hn);var o=document.createElement("script"),r=function(){var e;return null===(e=o.parentNode)||void 0===e?void 0:e.removeChild(o)},i=document.head||document.getElementsByTagName("head")[0];o.onload=function(){r(),t()},o.onerror=function(){r(),n(new Error(vn))},o.async=!0,o.src=e,i.appendChild(o)}))}(e)})).then(On)}function On(){var e=window,t="__fpjs_p_l_b",n=e[t];if(function(e,t){var n,o=null===(n=Object.getOwnPropertyDescriptor)||void 0===n?void 0:n.call(Object,e,t);(null==o?void 0:o.configurable)?delete e[t]:o&&!o.writable||(e[t]=void 0)}(e,t),"function"!=typeof(null==n?void 0:n.load))throw new Error(mn);return n}const jn=(e=!1)=>{const t=localStorage.getItem("fp");if(!t)return null;const n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},Sn=async(e,t=pn)=>{try{if(jn())return;const n=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),o=new URL(t);o.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";const r=new URL(t);r.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";const i=r.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",s=In({apiKey:e,endpoint:[o.toString(),gn],scriptUrlPattern:[i,yn]}),a=await s,{requestId:c}=await a.get({linkedId:n}),l=((e,t)=>({vsid:e,vrid:t}))(n,c);(e=>{const t={value:e,expiry:(new Date).getTime()+864e5};localStorage.setItem("fp",JSON.stringify(t))})(l)}catch(e){console.warn("Could not load fingerprint",e)}},Un=e=>{const t=jn(!0);return t&&e.body&&(e.body.fpData=t),e},Rn="dls_last_user_login_id",Pn="dls_last_user_display_name",En=()=>i(Rn),xn=()=>i(Pn),Tn=e=>async(...t)=>{var n;t[1]=t[1]||{};const[,o={}]=t,r=En(),i=xn();r&&(null!==(n=o.lastAuth)&&void 0!==n||(o.lastAuth={}),o.lastAuth.loginId=r,o.lastAuth.name=i);return await e(...t)},An=e=>async(...t)=>{const n=await e(...t);return s(Rn),s(Pn),n};function $n(){const e=[];return{pub:t=>{e.forEach((e=>e(t)))},sub:t=>{const n=e.push(t)-1;return()=>e.splice(n,1)}}}const Cn=e=>t=>async(...n)=>{const o=await t(...n);return dn(e),o};async function Dn(e){const t=function(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=Nn(n.publicKey.challenge),n.publicKey.user.id=Nn(n.publicKey.user.id),null===(t=n.publicKey.excludeCredentials)||void 0===t||t.forEach((e=>{e.id=Nn(e.id)})),n}(e),n=await navigator.credentials.create(t);return o=n,JSON.stringify({id:o.id,rawId:Mn(o.rawId),type:o.type,response:{attestationObject:Mn(o.response.attestationObject),clientDataJSON:Mn(o.response.clientDataJSON)}});var o}async function qn(e){const t=Jn(e);return Kn(await navigator.credentials.get(t))}async function _n(e,t){const n=Jn(e);n.signal=t.signal,n.mediation="conditional";return Kn(await navigator.credentials.get(n))}async function Ln(e=!1){if(!nn)return Promise.resolve(!1);const t=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return t&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():t}function Jn(e){var t;const n=JSON.parse(e);return n.publicKey.challenge=Nn(n.publicKey.challenge),null===(t=n.publicKey.allowCredentials)||void 0===t||t.forEach((e=>{e.id=Nn(e.id)})),n}function Kn(e){return JSON.stringify({id:e.id,rawId:Mn(e.rawId),type:e.type,response:{authenticatorData:Mn(e.response.authenticatorData),clientDataJSON:Mn(e.response.clientDataJSON),signature:Mn(e.response.signature),userHandle:e.response.userHandle?Mn(e.response.userHandle):void 0}})}function Nn(e){const t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),(e=>e.charCodeAt(0))).buffer}function Mn(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var Vn,Hn=(Vn=e=>({async signUp(t,n){const o=await e.webauthn.signUp.start(t,window.location.origin,n);if(!o.ok)return o;const r=await Dn(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,r)},async signIn(t){const n=await e.webauthn.signIn.start(t,window.location.origin);if(!n.ok)return n;const o=await qn(n.data.options);return await e.webauthn.signIn.finish(n.data.transactionId,o)},async signUpOrIn(t){var n;const o=await e.webauthn.signUpOrIn.start(t,window.location.origin);if(!o.ok)return o;if(null===(n=o.data)||void 0===n?void 0:n.create){const t=await Dn(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,t)}{const t=await qn(o.data.options);return await e.webauthn.signIn.finish(o.data.transactionId,t)}},async update(t,n){const o=await e.webauthn.update.start(t,window.location.origin,n);if(!o.ok)return o;const r=await Dn(o.data.options);return await e.webauthn.update.finish(o.data.transactionId,r)},helpers:{create:Dn,get:qn,isSupported:Ln,conditional:_n}}),(...e)=>{const t=Vn(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});const Bn=e=>({async oneTap(t,n,o,r){const i=null!=t?t:"google",s=await e.oauth.startNative(i,o);if(!s.ok)return s;const{clientId:a,stateId:c,nonce:l}=s.data,u=await async function(){return new Promise(((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}}))}();return new Promise((t=>{var o,s;u.initialize(Object.assign(Object.assign({},n),{itp_support:null===(o=null==n?void 0:n.itp_support)||void 0===o||o,use_fedcm_for_prompt:null===(s=null==n?void 0:n.use_fedcm_for_prompt)||void 0===s||s,client_id:a,callback:n=>{t(e.oauth.finishNative(i,c,"","",n.credential))},nonce:l})),u.prompt((e=>{(null==e?void 0:e.isSkippedMoment())&&(null==r||r())}))}))}});var Fn=e=>Object.assign(Object.assign({},e.flow),{start:async(...t)=>{const n=await Ln(),o=Object.assign(Object.assign({location:window.location.href},t[1]),{deviceInfo:{webAuthnSupport:n},startOptionsVersion:1});return t[1]=o,e.flow.start(...t)}});const zn=function(...e){return t=>e.reduce(((e,t)=>t(e)),t)}((t=>n=>{var{fpKey:o,fpLoad:r}=n,i=c(n,["fpKey","fpLoad"]);return nn?(o&&r&&Sn(o).catch((()=>null)),t(e(i,{beforeRequest:Un}))):(console.warn("Fingerprint is a client side only capability and will not work when running in the server"),t(i))}),(n=>o=>{var{autoRefresh:r}=o,i=c(o,["autoRefresh"]);if(!r)return n(i);const{clearAllTimers:s,setTimer:a}=(()=>{const e=[];return{clearAllTimers:()=>{for(;e.length;)clearTimeout(e.pop())},setTimer:(t,n)=>{e.push(setTimeout(t,n))}}})();let l,u;nn&&document.addEventListener("visibilitychange",(()=>{"visible"===document.visibilityState&&new Date>l&&(tn("Expiration time passed, refreshing session"),d.refresh(un()||u))}));const d=n(e(i,{afterRequest:async(e,n)=>{const{refreshJwt:o,sessionJwt:r}=await t(n);if(401===(null==n?void 0:n.status))tn("Received 401, canceling all timers"),s();else if(r){if(l=(e=>{try{const t=p(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(r),!l)return void tn("Could not extract expiration time from session token");u=o;let e=((i=l)?i.getTime()-(new Date).getTime():0)-2e4;e>on&&(tn(`Timeout is too large (${e}ms), setting it to ${on}ms`),e=on),s();const t=new Date(Date.now()+e).toLocaleTimeString("en-US",{hour12:!1});tn(`Setting refresh timer for ${t}. (${e}ms)`),a((()=>{tn("Refreshing session due to timer"),d.refresh(un()||o)}),e)}var i}}));return Be(d,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return tn("Clearing all timers"),s(),n}))}),(e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.11.15"},t.baseHeaders)}))),(o=>r=>{const i=$n(),s=$n(),a=o(e(r,{afterRequest:async(e,o)=>{if(401===(null==o?void 0:o.status))i.pub(null),s.pub(null);else{const e=await n(o);e&&s.pub(e);const{sessionJwt:r}=await t(o);r&&i.pub(r)}}})),c=Be(a,["logout","logoutAll"],(e=>async(...t)=>{const n=await e(...t);return i.pub(null),s.pub(null),n}));return Object.assign(c,{onSessionTokenChange:i.sub,onUserChange:s.sub})}),(t=>o=>{var{storeLastAuthenticatedUser:i=!0}=o,s=c(o,["storeLastAuthenticatedUser"]);if(!i)return Object.assign(t(s),{getLastUserLoginId:En,getLastUserDisplayName:xn});const a=t(e(s,{afterRequest:async(e,t)=>{var o;const i=await n(t),s=null===(o=null==i?void 0:i.loginIds)||void 0===o?void 0:o[0],a=null==i?void 0:i.name;s&&((e=>{r(Rn,e)})(s),(e=>{r(Pn,e)})(a))}}));let l=Be(a,["flow.start"],Tn);return l=Be(l,["logout","logoutAll"],An),Object.assign(l,{getLastUserLoginId:En,getLastUserDisplayName:xn})}),(n=>o=>{var{persistTokens:s,sessionTokenViaCookie:a,storagePrefix:l}=o,u=c(o,["persistTokens","sessionTokenViaCookie","storagePrefix"]);if(!s||!nn)return s&&console.warn("Storing auth tokens in local storage and cookies are a client side only capabilities and will not be done when running in the server"),n(u);const d=n(e(u,{beforeRequest:(p=l,e=>Object.assign(e,{token:e.token||un(p)})),afterRequest:async(e,n)=>{const o=/^\/v\d+\/mgmt\//.test(e.path);401===(null==n?void 0:n.status)?o||dn(l):((e={},t,n)=>{var{refreshJwt:o,sessionJwt:i}=e,s=c(e,["refreshJwt","sessionJwt"]);void 0===t&&(t=!1),void 0===n&&(n=""),o&&r(`${n}${cn}`,o),i&&(t?ln(an,i,s):r(`${n}${an}`,i))})(await t(n),a,l)}}));var p;const g=Be(d,["logout","logoutAll"],Cn(l));return Object.assign(g,{getRefreshToken:()=>un(l),getSessionToken:()=>function(e=""){return sn.get(an)||i(`${e}${an}`)||""}(l)})}))(((...e)=>{const t=en(...e);return Object.assign(Object.assign({},t),{flow:Fn(t),webauthn:Hn(t),fedcm:Bn(t)})}));return zn.REFRESH_TOKEN_KEY=cn,zn.SESSION_TOKEN_KEY=an,zn}));
//# sourceMappingURL=index.umd.js.map

4

package.json
{
"name": "@descope/web-js-sdk",
"version": "1.11.14",
"version": "1.11.15",
"author": "Descope Team <info@descope.com>",

@@ -39,3 +39,3 @@ "homepage": "https://github.com/descope/web-js-sdk",

"@open-wc/rollup-plugin-html": "1.2.5",
"@rollup/plugin-commonjs": "25.0.7",
"@rollup/plugin-commonjs": "25.0.8",
"@rollup/plugin-node-resolve": "^15.0.0",

@@ -42,0 +42,0 @@ "@rollup/plugin-replace": "^5.0.2",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

About

Packages

npm

Go

Maven

PyPI

Rubygems

Stay in touch

Get open source security insights delivered straight into your inbox.

  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc