- John Doe
- Jane Doe
- John Doe
- Jane Doe
- Jim Doe
- Jane Doe
- Jim Doe
{{name}}
'\n * };\n */\n template: null,\n\n /**\n * A list of child view definitions to be passed to {@link #add this.add()}.\n * Note: these definitions will be added **before** the {@link #constructor initiliaze} method invokes.\n * @type {(Array|Function)}\n * @example\n * var Container = View.extend({\n * template: '',\n * children: [\n * [ContentView, '.content'],\n * [OtherContentView, '.content'],\n * OtherView\n * ]\n * })\n *\n * var Container = View.extend({\n * template: '\n *\n * this.add(ContentView1, 'section'); // will be added to \n *\n * this.add(ContentView2, 'section', {prepend: true}); // will be add into **before** ContentView1\n *\n * this.add(OtherView, {\n * options: {\n * model: new Model()\n * }\n * }); // will be added **after** the element\n *\n * this.add('some html
'); //=> \"some html
\"\n * this.add('{{name}}
'); //=> \"John Doe
\"\n * this.add('{{name}}') //=> \"John Doe\"\n * this.add('{{name}} w00t') //=> \"John Doe w00t\"\n * }\n *\n * });\n *\n * var container - new View({name: 'John Doe'});\n */\n add: function (this: FrameworkViewClass, view, selector?, bubble?, prepend?, extraOptions?) {\n /* eslint max-statements: [2, 30], complexity: [2, 12] */\n\n var options: FrameworkViewOptions = {};\n var args = _.toArray(arguments);\n\n // This will throw if a compiled template function is passed accidentally\n if (_.isFunction(view) && (!view.prototype || !view.prototype.render)) {\n throw new Error('Type passed to add() is not a View');\n }\n\n if (_.isObject(selector)) {\n options = selector;\n selector = options.selector;\n bubble = options.bubble;\n prepend = options.prepend;\n extraOptions = options.options;\n } else if (_.isObject(bubble)) {\n options = bubble;\n bubble = options.bubble;\n prepend = options.prepend;\n extraOptions = options.options;\n }\n\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n if (_.isString(view)) {\n view = (function (template) {\n return View.extend({\n constructor: function (this: FrameworkViewClass) {\n try {\n var $el = Backbone.$(template);\n\n if ($el.length !== 1) { throw new Error('invalid Element'); }\n\n var unescapingRexExp = /&(\\w+|#x\\d+);/g;\n var elementUnescapedOuterHTMLLength = $el.prop('outerHTML').replace(unescapingRexExp, ' ').length;\n var templateUnescapedLength = template.replace(unescapingRexExp, ' ').length;\n\n if (elementUnescapedOuterHTMLLength !== templateUnescapedLength) { throw new Error('invalid Element'); }\n\n this.template = $el.html(); // Template string will be compiled by handlebars\n this.el = $el.empty()[0];\n } catch (e) { // not a valid html tag.\n this.template = template;\n }\n View.apply(this, arguments);\n }\n });\n }(view));\n }\n\n if (view.prototype && view.prototype instanceof View) {\n /* eslint new-cap: 0 */\n var viewOptions: FrameworkViewOptions = _.omit(_.extend({}, this.options, extraOptions), 'el');\n args[0] = new view(viewOptions);\n return this.add.apply(this, args);\n }\n\n // prevent dups\n if (_.isNumber(getIndex(this, view))) {\n throw new Error('Duplicate child');\n }\n\n view[PARENT] = this;\n\n // make the view responsible for adding itself to the parent:\n // * register the selector in the closure\n // * register a reference the parent in the closure\n view[ADD_TO_CONTAINER] = (function (selector) {\n return function (this: FrameworkViewClass) {\n if (selector && view[PARENT].$(selector).length !== 1) {\n throw new Error('Invalid selector: ' + selector);\n }\n var $el = selector ? this[PARENT].$(selector) : this[PARENT].$el;\n this.render();\n // we need to delegate events in case\n // the view was added and removed before\n this.delegateEvents();\n\n // this[PARENT].at(index).$el.before(this.el);\n prepend ? $el.prepend(this.el) : $el.append(this.el);\n };\n }).call(view, selector);\n\n // if flag to bubble events is set\n // proxy all child view events\n if (bubble) {\n this.listenTo(view, 'all', function (this: FrameworkViewClass) {\n this.trigger.apply(this, arguments);\n });\n }\n\n // add to the dom if `render` has been called\n if (this.rendered()) {\n view[ADD_TO_CONTAINER]();\n }\n\n // add view to child views collection\n this[CHILDREN].push(view);\n\n return this;\n },\n\n /**\n * Remove all children from container\n */\n removeChildren: function (this: FrameworkViewClass) {\n this.each(function (view: FrameworkViewClass) {\n view.remove();\n });\n return this;\n },\n\n /**\n * Removes a view from the DOM, and calls stopListening to remove any bound events that the view has listenTo'd.\n * Also removes all childern of the view if any, and removes itself from its parent view(s)\n */\n remove: function (this: FrameworkViewClass) {\n this.removeChildren();\n if (this[PARENT]) {\n this[PARENT].unregister(this);\n }\n return Backbone.View.prototype.remove.apply(this, arguments);\n },\n\n /**\n * Compile the template to function you can apply tokens on on render time.\n * Uses the underscore tempalting engine by default\n * @protected\n * @param {String} template\n * @return {Function} a compiled template\n */\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n compileTemplate: function (this: FrameworkViewClass, template) {\n /* eslint @okta/okta-ui/no-specific-methods: 0*/\n return _.template(template, undefined);\n },\n\n /**\n * Render a template with `this.model` and `this.options` as parameters\n * preferring the model over the options.\n *\n * @param {(String|Function)} template The template to build\n * @return {String} An HTML string\n * @protected\n */\n renderTemplate: function (this: FrameworkViewClass, template) {\n if (_.isString(template)) {\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n template = this.compileTemplate(template);\n }\n if (_.isFunction(template)) {\n return template(this.getTemplateData());\n }\n },\n\n /**\n * The data hash passed to the compiled template\n * @return {Object}\n * @protected\n */\n getTemplateData: function (this: FrameworkViewClass) {\n var modelData = this.model && this.model.toJSON({ verbose: true }) || {};\n var options = _.omit(this.options, ['state', 'settings', 'model', 'collection']);\n return _.defaults({}, modelData, options);\n },\n\n /**\n * Renders the template to `$el` and append all children in order\n * {@link #template View.template}\n */\n render: function (this: FrameworkViewClass) {\n this.preRender();\n doRender(this);\n this.postRender();\n return this;\n },\n\n /**\n * Pre render routine. Will be called right *before* the logic in {@link #render} is executed\n * @method\n */\n preRender: noop,\n\n /**\n * Post render routine. Will be called right *after* the logic in {@link #render} is executed\n * @method\n */\n postRender: noop,\n\n /**\n * Was this instance rendered\n */\n rendered: function (this: FrameworkViewClass) {\n return this[RENDERED];\n },\n\n /**\n * Get all direct child views.\n * @returns {src/framework/View[]}\n * @example\n * var container = View.extend({\n * children: [View1, View2]\n * }).render();\n * container.getChildren() //=> [view1, view2];\n */\n getChildren: function (this: FrameworkViewClass) {\n return this.toArray();\n },\n\n /**\n * Get a child by index\n * @param {number} index\n * @returns {src/framework/View} The child view\n */\n at: function (this: FrameworkViewClass, index) {\n return this.getChildren()[index];\n },\n\n /**\n * Invokes a method on all children down the tree\n *\n * @param {String} method The method to invoke\n */\n invoke: function (this: FrameworkViewClass, methodName) {\n var args = _.toArray(arguments);\n this.each(function (child) {\n // if child has children, bubble down the tree\n if (child.size()) {\n child.invoke.apply(child, args);\n }\n // run the function on the child\n if (_.isFunction(child[methodName])) {\n child[methodName].apply(child, args.slice(1));\n }\n });\n return this;\n }\n};\n\nView = Backbone.View.extend(/** @lends src/framework/View.prototype */ proto) as typeof FrameworkViewClass;\n\n// Code borrowed from Backbone.js source\n// Underscore methods that we want to implement on the Container.\nvar methods = ['each', 'map', 'reduce', 'reduceRight', 'find', 'filter', 'reject', 'every',\n 'some', 'contains', 'toArray', 'size', 'first', 'initial', 'rest', 'last', 'without',\n 'indexOf', 'shuffle', 'lastIndexOf', 'isEmpty', 'chain', 'where', 'findWhere'];\n\n_.each(methods, function (method) {\n View.prototype[method] = function () {\n var args = _.toArray(arguments);\n args.unshift(_.toArray(this[CHILDREN]));\n return _[method].apply(_, args);\n };\n}, this);\n\n/**\n * See [_.each](http://underscorejs.org/#each)\n * @name each\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Object} [context]\n */\n/**\n * See [_.map](http://underscorejs.org/#map)\n * @name map\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Object} [context]\n */\n/**\n * See [_.reduce](http://underscorejs.org/#reduce)\n * @name reduce\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Mixed} memo\n * @param {Object} [context]\n */\n\n/**\n * See [_.reduceRight](http://underscorejs.org/#reduceRight)\n * @name reduceRight\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Mixed} memo\n * @param {Object} [context]\n */\n/**\n * See [_.find](http://underscorejs.org/#find)\n * @name find\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.filter](http://underscorejs.org/#filter)\n * @name filter\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.reject](http://underscorejs.org/#reject)\n * @name reject\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.every](http://underscorejs.org/#every)\n * @name every\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} [predicate]\n * @param {Object} [context]\n */\n/**\n * See [_.some](http://underscorejs.org/#some)\n * @name some\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} [predicate]\n * @param {Object} [context]\n */\n/**\n * See [_.contains](http://underscorejs.org/#contains)\n * @name contains\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n */\n/**\n * See [_.toArray](http://underscorejs.org/#toArray)\n * @name toArray\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.size](http://underscorejs.org/#size)\n * @name size\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.first](http://underscorejs.org/#first)\n * @name first\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.initial](http://underscorejs.org/#initial)\n * @name initial\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.last](http://underscorejs.org/#last)\n * @name last\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.rest](http://underscorejs.org/#rest)\n * @name rest\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [index]\n */\n/**\n * See [_.without](http://underscorejs.org/#without)\n * @name without\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.indexOf](http://underscorejs.org/#indexOf)\n * @name indexOf\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n * @param {Boolean} [isSorted]\n */\n/**\n * See [_.shuffle](http://underscorejs.org/#shuffle)\n * @name shuffle\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.shuffle](http://underscorejs.org/#lastIndexOf)\n * @name lastIndexOf\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n * @param {Number} [fromIndex]\n */\n/**\n * See [_.isEmpty](http://underscorejs.org/#isEmpty)\n * @name isEmpty\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.chain](http://underscorejs.org/#chain)\n * @name chain\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.where](http://underscorejs.org/#where)\n * @name where\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Object} properties\n */\n/**\n * See [_.findWhere](http://underscorejs.org/#findWhere)\n * @name findWhere\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Object} properties\n */\n\n/**\n * It's used for distinguishing the ambiguity from _.isFunction()\n * which returns True for both a JavaScript Class constructor function\n * and normal function. With this flag, we can tell a function is actually\n * a View Class.\n * This flag is added in order to support the type of a parameter can be\n * either a Class or pure function that returns a Class.\n */\nView.isCourageView = true;\n\nexport default View;\n","import _ from '../util/underscore-wrapper';\nimport Collection from '../framework/Collection';\nimport { _Result } from 'backbone';\n\nexport declare class BaseCollectionClass extends Collection {\n secureJSON: _Result;\n}\n\nconst baseCollectionProps = /** @lends module:Okta.Collection.prototype */ {\n /**\n * Is the end point using the legacy \"secureJSON\" format\n * @type {Function|Boolean}\n */\n secureJSON: false,\n\n // TODO: may not be simplily moved to initialize as\n // child class override initialize but didn't invoke parent.initialize.\n // need to refactor child classes first.\n constructor: function () {\n Collection.apply(this, arguments);\n if (_.result(this, 'secureJSON')) {\n this.sync = _.wrap(this.sync, function (sync, method, collection, options) {\n return sync.call(this, method, collection, _.extend({ dataType: 'secureJSON' }, options));\n });\n }\n }\n};\n\n/**\n * Wrapper around the more generic {@link src/framework/Collection} that\n * contains Okta-specific logic.\n * @class module:Okta.Collection\n * @extends src/framework/Collection\n */\nexport default Collection.extend(baseCollectionProps) as typeof BaseCollectionClass;\n","import _ from '../util/underscore-wrapper';\nimport Model from './Model';\n\nexport interface ComputedPropertyCallback {\n (...args: any[]): any;\n}\n\nexport interface ComputedPropertyCallbackWithAttributes extends ComputedPropertyCallback {\n __attributes: any;\n}\n\nexport declare class BaseModelClass extends Model {\n static ComputedProperty(fn: ComputedPropertyCallback): ComputedPropertyCallback;\n static ComputedProperty(attributes: string[], fn: ComputedPropertyCallback): ComputedPropertyCallback;\n\n constructor(attr?, options?);\n _setSynced(newModel);\n _getSynced();\n validate();\n isSynced(): boolean;\n sanitizeAttributes(attributes);\n}\n\nconst hasProps = function (model) {\n const local = _.omit(model.local, _.keys(model._builtInLocalProps));\n\n return _.size(model.props) + _.size(local) > 0;\n};\n\nconst props = /** @lends module:Okta.BaseModel.prototype */ {\n /**\n * @type {Boolean}\n */\n flat: false,\n\n constructor: function () {\n Model.apply(this, arguments);\n this.on('sync', this._setSynced);\n },\n\n allows: function () {\n if (hasProps(this)) {\n return Model.prototype.allows.apply(this, arguments);\n } else {\n return true;\n }\n },\n\n // bw compatibility support for old computed properties\n set: function (key, val) {\n let attrs;\n\n if (typeof key === 'object') {\n attrs = key;\n } else {\n (attrs = {})[key] = val;\n }\n\n // computed properties\n _(attrs).each(function (fn, attr) {\n if (!fn || !_.isArray(fn.__attributes)) {\n return;\n }\n this.on(\n 'change:' + fn.__attributes.join(' change:'),\n function () {\n const val = this.get(attr);\n\n if (val !== this['__schema__'].computedProperties[attr]) {\n this['__schema__'].computedProperties[attr] = val;\n this.trigger('change:' + attr, val);\n }\n },\n this\n );\n }, this);\n\n return Model.prototype.set.apply(this, arguments);\n },\n\n /**\n * Get the current value of an attribute from the model. For example: `note.get(\"title\")`\n *\n * See [Model.get](http://backbonejs.org/#Model-get)\n * @param {String} attribute\n * @return {Mixed} The value of the model attribute\n */\n get: function () {\n const value = Model.prototype.get.apply(this, arguments);\n\n if (_.isFunction(value)) {\n return value.apply(this, _.map(value.__attributes || [], this.get, this));\n }\n return value;\n },\n\n /**\n * Return a shallow copy of the model's attributes for JSON stringification.\n * This can be used for persistence, serialization, or for augmentation before being sent to the server.\n * The name of this method is a bit confusing, as it doesn't actually return a JSON string —\n * but I'm afraid that it's the way that the JavaScript API for JSON.stringify works.\n *\n * ```javascript\n * var artist = new Model({\n * firstName: \"Wassily\",\n * lastName: \"Kandinsky\"\n * });\n *\n * artist.set({birthday: \"December 16, 1866\"});\n * alert(JSON.stringify(artist)); // {\"firstName\":\"Wassily\",\"lastName\":\"Kandinsky\",\"birthday\":\"December 16, 1866\"}\n * ```\n * See [Model.toJSON](http://backbonejs.org/#Model-toJSON)\n * @param {Object} options\n * @return {Object}\n */\n toJSON: function (options) {\n options || (options = {});\n const res = Model.prototype.toJSON.apply(this, arguments);\n\n // cleanup computed properties\n _(res).each(function (value, key) {\n if (typeof value === 'function') {\n if (options.verbose) {\n res[key] = this.get(key);\n } else {\n delete res[key];\n }\n }\n }, this);\n\n // cleanup private properties\n if (!options.verbose) {\n _(res).each(function (value, key) {\n if (/^__\\w+__$/.test(key)) {\n delete res[key];\n }\n });\n }\n\n return res;\n },\n\n sanitizeAttributes: function (attributes) {\n const attrs = {};\n\n _.each(attributes, function (value, key) {\n if (!_.isFunction(value)) {\n attrs[key] = value;\n }\n });\n return attrs;\n },\n\n reset: function (options) {\n this.clear(options);\n this.set(this.sanitizeAttributes(this.defaults), options);\n },\n\n clear: function (options) {\n const attrs = {};\n\n _.each(this.sanitizeAttributes(this.attributes), function (value, key) {\n attrs[key] = void 0;\n });\n return this.set(attrs, _.extend({}, options, { unset: true }));\n },\n\n /**\n * @private\n */\n _setSynced: function (newModel) {\n this._syncedData = newModel && _.isFunction(newModel.toJSON) ? newModel.toJSON() : {};\n },\n\n /**\n * @private\n */\n _getSynced: function () {\n return this._syncedData;\n },\n\n isSynced: function () {\n return _.isEqual(this._getSynced(), this.toJSON());\n }\n };\n\nconst statics = /** @lends module:Okta.BaseModel.prototype */ {\n /**\n * @static\n *\n * Example:\n *\n * ```javascript\n * var Model = BaseModel.extend({\n * defaults: {\n * name: BaseModel.ComputedProperty(['fname', 'lname'], function (fname, lname) {\n * return fname + ' ' + lname;\n * })\n * }\n * });\n * var model = new Model({fname: 'Joe', lname: 'Doe'});\n * model.get('name'); // Joe Doe\n * model.toJSON(); // {fname: 'Joe', lname: 'Doe'}\n * ```\n *\n * @param {Array} attributes (optional) - an array of the attribute names this method depends on\n * @param {Function} callback the function that computes the value of the property\n *\n * @deprecated Use {@link #derived} instead\n */\n ComputedProperty: function (\n attributes: string[] | ComputedPropertyCallback,\n fn?: ComputedPropertyCallback\n ): ComputedPropertyCallback | ComputedPropertyCallbackWithAttributes {\n // First parameter is optional\n if (!fn && typeof attributes === 'function') {\n fn = attributes as ComputedPropertyCallback;\n } else {\n (fn as ComputedPropertyCallbackWithAttributes).__attributes = attributes;\n }\n return fn;\n }\n };\n\n/**\n * @class module:Okta.BaseModel\n * @extends module:Okta.Model\n * @deprecated Use {@link module:Okta.Model|Okta.Model} instead\n * @example\n * var Model = BaseModel.extend({\n * defaults: {\n * name: BaseModel.ComputedProperty(['fname', 'lname'], function (fname, lname) {\n * return fname + ' ' + lname;\n * })\n * }\n * });\n * var model = new Model({fname: 'Joe', lname: 'Doe'});\n * model.get('name'); //=> \"Joe Doe\"\n * model.toJSON(); //=> {fname: 'Joe', lname: 'Doe'}\n *\n * model.set('__private__', 'private property');\n * model.get('__private__'); //=> \"private property\"\n * model.toJSON(); //=> {fname: 'Joe', lname: 'Doe'}\n */\nexport default Model.extend(props, statics) as typeof BaseModelClass;\n","import _ from '../util/underscore-wrapper';\nimport BaseCollection from './BaseCollection';\nimport BaseModel from './BaseModel';\nimport SchemaProperty from './SchemaProperty';\n\nconst parseProperties = function (resp) {\n const schemaMeta = _.pick(resp, 'id', 'name', 'displayName');\n\n const properties = _.map(resp.schema.properties, function (property, name) {\n return _.extend({ name }, property);\n });\n\n _.each(properties, function (property) {\n property['__schemaMeta__'] = schemaMeta;\n\n if (property.__metadata) {\n property['__metadata__'] = property.__metadata;\n delete property.__metadata;\n }\n });\n return properties;\n};\n\nconst BaseSchemaSchema = BaseModel.extend({\n defaults: {\n id: undefined,\n displayName: undefined,\n name: undefined\n },\n\n constructor: function () {\n this.properties = new SchemaProperty.Collection();\n BaseModel.apply(this, arguments);\n },\n\n getProperties: function () {\n return this.properties;\n },\n\n clone: function () {\n const model = BaseModel.prototype.clone.apply(this, arguments);\n\n model.getProperties().set(this.getProperties().toJSON({ verbose: true }));\n return model;\n },\n\n parse: function (resp) {\n const properties = parseProperties(resp);\n\n this.properties.set(properties, { parse: true });\n return _.omit(resp, 'schema');\n },\n\n trimProperty: function (property) {\n return _.omit(property, 'name');\n },\n\n toJSON: function () {\n const json = BaseModel.prototype.toJSON.apply(this, arguments);\n\n json.schema = { properties: {} };\n this.getProperties().each(function (model) {\n const property = model.toJSON();\n\n json.schema.properties[property.name] = this.trimProperty(property);\n }, this);\n return json;\n },\n\n save: function () {\n this.getProperties().each(function (model) {\n model.cleanup();\n });\n return BaseModel.prototype.save.apply(this, arguments);\n }\n});\nconst BaseSchemaSchemas = BaseCollection.extend({\n model: BaseSchemaSchema\n});\nexport default {\n parseProperties: parseProperties,\n Model: BaseSchemaSchema,\n Collection: BaseSchemaSchemas\n};\n","import _ from '../util/underscore-wrapper';\nimport FrameworkModel from '../framework/Model';\nimport { _Result } from 'backbone';\n\nexport declare class ModelClass extends FrameworkModel {\n secureJSON: _Result;\n}\n/**\n * Wrapper around the more generic {@link src/framework/Model} that\n * contains Okta-specific logic.\n * @class module:Okta.Model\n * @extends src/framework/Model\n */\nexport default FrameworkModel.extend(\n /** @lends module:Okta.Model.prototype */ {\n /**\n * Is the end point using the legacy \"secureJSON\" format\n * @type {Function|Boolean}\n */\n secureJSON: false,\n\n _builtInLocalProps: {\n __edit__: 'boolean',\n __pending__: 'boolean'\n },\n\n preinitialize() {\n this.local = _.defaults({}, _.result(this, 'local'), this._builtInLocalProps);\n FrameworkModel.prototype.preinitialize.apply(this, arguments);\n },\n\n constructor() {\n FrameworkModel.apply(this, arguments);\n\n if (_.result(this, 'secureJSON')) {\n this.sync = _.wrap(this.sync, function (sync, method, model, options) {\n return sync.call(this, method, model, _.extend({ dataType: 'secureJSON' }, options));\n });\n }\n }\n }\n) as typeof ModelClass;\n","/* eslint-disable @okta/okta/no-exclusive-language */\n/* eslint max-statements: [2, 16], complexity: [2, 8], max-params: [2, 8] */\nimport $ from '../util/jquery-wrapper';\nimport _ from '../util/underscore-wrapper';\nimport BaseCollection from './BaseCollection';\nimport BaseModel from './BaseModel';\nimport Logger from '../util/Logger';\nimport SchemaUtil from '../util/SchemaUtil';\nimport StringUtil from '../util/StringUtil';\nimport EnumTypeHelper from '../views/forms/helpers/EnumTypeHelper';\n\nconst loc = StringUtil.localize;\nconst STRING = SchemaUtil.STRING;\nconst NUMBER = SchemaUtil.NUMBER;\nconst INTEGER = SchemaUtil.INTEGER;\nconst OBJECT = SchemaUtil.OBJECT;\n\nconst getArrayTypeName = function (type, elementType) {\n return type + 'of' + elementType;\n};\n\nconst SchemaPropertySubSchema = BaseModel.extend({\n defaults: {\n description: undefined,\n minLength: undefined,\n maxLength: undefined,\n format: undefined\n },\n parse: function (resp) {\n if (_.isString(resp.format)) {\n const matcher = /^\\/(.+)\\/$/.exec(resp.format);\n\n if (matcher) {\n resp.format = matcher[1];\n }\n }\n return resp;\n }\n});\nconst SchemaPropertySubSchemaCollection = BaseCollection.extend({\n model: SchemaPropertySubSchema\n});\nconst SchemaPropertySubSchemaAllOfCollection = SchemaPropertySubSchemaCollection.extend({\n _type: 'allOf'\n});\nconst SchemaPropertySubSchemaOneOfCollection = SchemaPropertySubSchemaCollection.extend({\n _type: 'oneOf'\n});\nconst SchemaPropertySubSchemaNoneOfCollection = SchemaPropertySubSchemaCollection.extend({\n _type: 'noneOf'\n});\nconst constraintTypeErrorMessages = {\n string: loc('schema.validation.field.value.must.string', 'courage'),\n number: loc('schema.validation.field.value.must.number', 'courage'),\n integer: loc('schema.validation.field.value.must.integer', 'courage'),\n object: loc('schema.validation.field.value.must.object', 'courage')\n};\nconst loginFormatNonePattern = '.+';\nconst escapedLoginCharsRe = /[^a-zA-Z0-9-]/;\n\nconst constraintHandlers = {\n between: '_checkBetweenConstraints',\n greaterThan: '_checkGreaterThanConstraint',\n lessThan: '_checkLessThanConstraint',\n equals: '_checkEqualsConstraint'\n};\nconst SchemaPropertySchemaProperty = BaseModel.extend({\n\n idAttribute: 'name',\n\n local: {\n __oneOf__: {\n type: 'array',\n minItems: 1\n }\n },\n\n defaults: {\n // OKTA-28445, set empty string by default as the key for each property when syncing with server\n // so that server can respond with error when a name is not provided\n name: '',\n title: undefined,\n type: undefined,\n description: undefined,\n required: false,\n format: undefined,\n // choose disable option be default.\n union: undefined,\n subSchemas: undefined,\n settings: { permissions: { SELF: SchemaUtil.PERMISSION.READ_ONLY } },\n unique: undefined,\n __metadata__: undefined,\n __isSensitive__: BaseModel.ComputedProperty(['settings'], function (settings) {\n return !!(settings && settings.sensitive);\n }),\n __unique__: false,\n __isUniqueValidated__: BaseModel.ComputedProperty(['unique'], function (unique) {\n return unique === SchemaUtil.UNIQUENESS.UNIQUE_VALIDATED;\n }),\n __isPendingUniqueness__: BaseModel.ComputedProperty(['unique'], function (unique) {\n return unique === SchemaUtil.UNIQUENESS.PENDING_UNIQUENESS;\n }),\n __isUniqueness__: BaseModel.ComputedProperty(['__isUniqueValidated__', '__isPendingUniqueness__'],\n function (isValidated, isPending) {\n return isValidated || isPending;\n }),\n __canBeSensitive__: BaseModel.ComputedProperty(['__metadata__'], function (metadata) {\n return !!(metadata && metadata.sensitivizable);\n }),\n __userPermission__: SchemaUtil.PERMISSION.READ_ONLY,\n __displayType__: undefined,\n __displayTypeLabel__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return SchemaUtil.DATATYPE[displayType] || displayType;\n }),\n __supportsMinMax__: false,\n // use the private naming convention for these computed properties,\n // to deal with the complexity in cloning schema with properties (toJSON({verbose: true})),\n // to make sure these attributes are being excluded from api request\n __isReadOnly__: BaseModel.ComputedProperty(['mutability'], function (mutability) {\n return mutability === SchemaUtil.MUTABILITY.READONLY;\n }),\n __isWriteOnly__: BaseModel.ComputedProperty(['mutability'], function (mutability) {\n return mutability === SchemaUtil.MUTABILITY.WRITEONLY;\n }),\n __displayScope__: undefined,\n __isScopeSelf__: BaseModel.ComputedProperty(['scope'], function (scope) {\n return scope === SchemaUtil.SCOPE.SELF;\n }),\n __isNoneScopeArrayType__: BaseModel.ComputedProperty(['__isScopeSelf__', '__displayType__'], function (\n isScopeSelf,\n displayType\n ) {\n return !isScopeSelf && SchemaUtil.isArrayDataType(displayType);\n }),\n __isImported__: BaseModel.ComputedProperty(['externalName'], function (externalName) {\n return !!externalName;\n }),\n __isFromBaseSchema__: BaseModel.ComputedProperty(['__schemaMeta__'], function (schemaMeta) {\n return schemaMeta && schemaMeta.name === 'base';\n }),\n // Only UI can turn on __enumDefined__ and reprocess the enum/oneOf value; otherwise,\n // it should leave existing value untouch\n __enumDefined__: false,\n __supportEnum__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return _.contains(SchemaUtil.SUPPORTENUM, displayType);\n }),\n __isNumberTypeEnum__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return _.contains([SchemaUtil.NUMBER, SchemaUtil.ARRAYDISPLAYTYPE.arrayofnumber], displayType);\n }),\n __isIntegerTypeEnum__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return _.contains([SchemaUtil.INTEGER, SchemaUtil.ARRAYDISPLAYTYPE.arrayofinteger], displayType);\n }),\n __isObjectTypeEnum__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return _.contains([SchemaUtil.OBJECT, SchemaUtil.ARRAYDISPLAYTYPE.arrayofobject], displayType);\n }),\n __isStringTypeEnum__: BaseModel.ComputedProperty(['__displayType__'], function (displayType) {\n return _.contains([SchemaUtil.STRING, SchemaUtil.ARRAYDISPLAYTYPE.arrayofstring], displayType);\n }),\n __enumConstraintType__: BaseModel.ComputedProperty(\n ['__isStringTypeEnum__', '__isNumberTypeEnum__', '__isIntegerTypeEnum__', '__isObjectTypeEnum__'],\n function (isStringType, isNumberType, isIntegerType, isObjectType) {\n if (isStringType) {\n return STRING;\n }\n if (isNumberType) {\n return NUMBER;\n }\n if (isIntegerType) {\n return INTEGER;\n }\n if (isObjectType) {\n return OBJECT;\n }\n }\n ),\n __isEnumDefinedAndSupported__: BaseModel.ComputedProperty(['__enumDefined__', '__supportEnum__'], function (\n enumDefined,\n supportEnum\n ) {\n return enumDefined && supportEnum;\n }),\n __isLoginOfBaseSchema__: BaseModel.ComputedProperty(['__isFromBaseSchema__', 'name'], function (\n isFromBaseSchema,\n name\n ) {\n return isFromBaseSchema && name === 'login';\n }),\n __isLoginFormatRestrictionToEmail__: BaseModel.ComputedProperty(['__loginFormatRestriction__'],\n function (loginFormatRestriction) {\n return loginFormatRestriction === SchemaUtil.LOGINPATTERNFORMAT.EMAIL;\n })\n },\n\n initialize: function () {\n BaseModel.prototype.initialize.apply(this, arguments);\n this.listenTo(this, 'change:__displayType__', this._updateTypeFormatConstraints);\n this.listenTo(this, 'change:type change:format change:items', this._updateDisplayType);\n this.listenTo(this, 'change:__minVal__ change:__maxVal__', this._updateMinMax);\n this.listenTo(this, 'change:__equals__', this._convertEqualsToMinMax);\n this.listenTo(this, 'change:__constraint__', this._setConstraintText);\n this._setConstraintText();\n this._setLoginPattern();\n },\n\n parse: function (resp) {\n /* eslint complexity: [2, 9] */\n resp = _.clone(resp);\n\n if (resp.type === 'object' && resp.extendedType === 'image') {\n resp.type = 'image';\n }\n resp['__displayType__'] = SchemaUtil.getDisplayType(\n resp.type,\n resp.format,\n resp.items ? (resp.items.format ? resp.items.format : resp.items.type) : undefined\n );\n this._setRangeConstraints(resp);\n resp['__supportsMinMax__'] = SchemaUtil.SUPPORTSMINMAX.indexOf(resp['__displayType__']) !== -1;\n resp['__displayScope__'] = SchemaUtil.DISPLAYSCOPE[resp.scope] || SchemaUtil.DISPLAYSCOPE.NA;\n if (resp.settings && resp.settings.permissions && resp.settings.permissions.SELF) {\n resp['__userPermission__'] = resp.settings.permissions.SELF;\n }\n this._setMasterOverride(resp);\n this._setSubSchemas(resp);\n this._setUniqueness(resp);\n return resp;\n },\n\n validate: function () {\n const enumValidationError = this._validateEnumOneOf();\n\n if (enumValidationError) {\n return enumValidationError;\n }\n\n if (!this.get('__supportsMinMax__') || !this.get('__constraint__')) {\n return undefined;\n }\n\n const constraitType = this.get('__constraint__');\n const constraitHandler = this[constraintHandlers[constraitType]];\n\n if (_.isFunction(constraitHandler)) {\n return constraitHandler.call(this);\n } else {\n Logger.warn('No constraint handler found for: ' + constraitType);\n return undefined;\n }\n },\n\n _checkBetweenConstraints: function () {\n const minVal = this.get('__minVal__');\n const maxVal = this.get('__maxVal__');\n\n if (!minVal && !maxVal) {\n return;\n }\n if (!minVal) {\n return { __minVal__: 'Min value is required' };\n }\n if (!maxVal) {\n return { __maxVal__: 'Max value is required' };\n }\n\n let val = this._checkIntegerConstraints('__minVal__', 'Min value');\n\n if (val) {\n return val;\n }\n val = this._checkIntegerConstraints('__maxVal__', 'Max value');\n if (val) {\n return val;\n }\n if (+minVal >= +maxVal) {\n return { __maxVal__: 'Max val must be greater than min val' };\n }\n },\n\n _checkGreaterThanConstraint: function () {\n const minVal = this.get('__minVal__');\n\n if (!minVal) {\n return;\n }\n\n const val = this._checkIntegerConstraints('__minVal__', 'Min value');\n\n if (val) {\n return val;\n }\n },\n\n _checkLessThanConstraint: function () {\n const maxVal = this.get('__maxVal__');\n\n if (!maxVal) {\n return;\n }\n\n const val = this._checkIntegerConstraints('__maxVal__', 'Max value');\n\n if (val) {\n return val;\n }\n },\n\n _checkEqualsConstraint: function () {\n const equals = this.get('__equals__');\n\n if (!equals) {\n return;\n }\n\n const val = this._checkIntegerConstraints('__equals__', 'Constraint');\n\n if (val) {\n return val;\n }\n },\n\n _checkIntegerConstraints: function (field, name) {\n const val = this.get(field);\n const error = {};\n\n // eslint-disable-next-line no-restricted-globals\n if (isNaN(val)) {\n error[field] = name + ' must be a number';\n return error;\n }\n if (+val < 0) {\n error[field] = name + ' must be greater than 0';\n return error;\n }\n },\n\n _setMasterOverride: function (resp) {\n if (resp.settings && resp.settings.masterOverride && resp.settings.masterOverride) {\n const masterOverrideValue = resp.settings.masterOverride.value;\n\n if (_.isArray(masterOverrideValue) && !_.isEmpty(masterOverrideValue)) {\n resp['__masterOverrideType__'] = 'OVERRIDE';\n resp['__masterOverrideValue__'] = masterOverrideValue || [];\n } else {\n resp['__masterOverrideType__'] = resp.settings.masterOverride.type;\n }\n } else {\n resp['__masterOverrideType__'] = 'INHERIT';\n }\n },\n\n _setRangeConstraints: function (resp) {\n /* eslint complexity: [2, 11] */\n if (resp['__displayType__'] === STRING) {\n resp['__minVal__'] = resp.minLength;\n resp['__maxVal__'] = resp.maxLength;\n } else if (resp['__displayType__'] === INTEGER || resp['__displayType__'] === NUMBER) {\n resp['__minVal__'] = resp.minimum;\n resp['__maxVal__'] = resp.maximum;\n }\n if (resp['__minVal__'] && resp['__maxVal__']) {\n if (resp['__minVal__'] === resp['__maxVal__']) {\n resp['__constraint__'] = 'equals';\n resp['__equals__'] = resp['__minVal__'];\n } else {\n resp['__constraint__'] = 'between';\n }\n } else if (!resp['__minVal__'] && resp['__maxVal__']) {\n resp['__constraint__'] = 'lessThan';\n } else if (!resp['__maxVal__'] && resp['__minVal__']) {\n resp['__constraint__'] = 'greaterThan';\n }\n },\n\n _setSubSchemas: function (resp) {\n if (resp.allOf) {\n resp['subSchemas'] = new SchemaPropertySubSchemaAllOfCollection(resp.allOf, { parse: true });\n } else if (resp.oneOf) {\n resp['subSchemas'] = new SchemaPropertySubSchemaOneOfCollection(resp.oneOf, { parse: true });\n } else if (resp.noneOf) {\n resp['subSchemas'] = new SchemaPropertySubSchemaNoneOfCollection(resp.noneOf, { parse: true });\n }\n },\n\n _setUniqueness: function (resp) {\n const unique = resp && resp.unique;\n resp['__unique__'] = !!(unique\n && (unique === SchemaUtil.UNIQUENESS.UNIQUE_VALIDATED || unique === SchemaUtil.UNIQUENESS.PENDING_UNIQUENESS));\n },\n\n _setLoginPattern: function () {\n if (!this.get('__isLoginOfBaseSchema__')) {\n return;\n }\n\n const pattern = this.get('pattern');\n\n if (pattern === loginFormatNonePattern) {\n this.set('__loginFormatRestriction__', SchemaUtil.LOGINPATTERNFORMAT.NONE);\n } else if (pattern) {\n this.set('__loginFormatRestriction__', SchemaUtil.LOGINPATTERNFORMAT.CUSTOM);\n this.set('__loginFormatRestrictionCustom__', this._extractLoginPattern(pattern));\n } else {\n this.set('__loginFormatRestriction__', SchemaUtil.LOGINPATTERNFORMAT.EMAIL);\n }\n },\n\n _updateDisplayType: function () {\n const type = this.get('type');\n\n if (type === STRING && this.get('format')) {\n this.set('__displayType__', SchemaUtil.FORMATDISPLAYTYPE[this.get('format')]);\n } else {\n const items = this.get('items');\n const arraytype = items && (items.format ? items.format : items.type);\n\n if (type && arraytype) {\n this.set('__displayType__', SchemaUtil.ARRAYDISPLAYTYPE[getArrayTypeName(type, arraytype)]);\n } else {\n this.set('__displayType__', type);\n }\n }\n },\n\n _validateEnumOneOf: function () {\n if (!this.get('__isEnumDefinedAndSupported__')) {\n return;\n }\n\n const enumOneOf = this.get('__oneOf__') || [];\n\n if (_.isEmpty(enumOneOf)) {\n return { __oneOf__: loc('model.validation.field.blank', 'courage') };\n }\n\n if (!this._isValidateOneOfConstraint(enumOneOf)) {\n const constraintType = this.get('__enumConstraintType__');\n const errorTypeMsg = constraintTypeErrorMessages[constraintType];\n\n return { __oneOf__: errorTypeMsg };\n }\n },\n\n _isValidateOneOfConstraint: function (values) {\n const constraintType = this.get('__enumConstraintType__');\n\n return _.all(values, function (value) {\n return EnumTypeHelper.isConstraintValueMatchType(value.const, constraintType);\n });\n },\n\n toJSON: function () {\n let json = BaseModel.prototype.toJSON.apply(this, arguments);\n\n json.settings = { permissions: {} };\n json.settings.permissions['SELF'] = this.get('__userPermission__');\n\n // omit \"sensitive\" filed will have default it value to false.\n if (this.get('__isSensitive__')) {\n json.settings.sensitive = this.get('__isSensitive__');\n }\n if (this.get('type') === 'image') {\n json.type = 'object';\n json.extendedType = 'image';\n }\n\n json = this._enumAssignment(json);\n json = this._attributeOverrideToJson(json);\n json = this._normalizeUnionValue(json);\n json = this._patternAssignment(json);\n json = this._uniquenessAssignment(json);\n return json;\n },\n\n _attributeOverrideToJson: function (json) {\n const masterOverrideType = this.get('__masterOverrideType__');\n const masterOverrideValue = this.get('__masterOverrideValue__');\n\n if (masterOverrideType === 'OKTA_MASTERED') {\n json.settings.masterOverride = { type: 'OKTA_MASTERED' };\n } else if (masterOverrideType === 'OVERRIDE') {\n json.settings.masterOverride = { type: 'ORDERED_LIST', value: [] };\n if (masterOverrideValue instanceof BaseCollection) {\n _.each(masterOverrideValue.toJSON(), function (overrideProfile) {\n json.settings.masterOverride.value.push(overrideProfile.id);\n });\n } else if (masterOverrideValue instanceof Array) {\n json.settings.masterOverride.value = masterOverrideValue;\n }\n if (_.isEmpty(json.settings.masterOverride.value)) {\n delete json.settings.masterOverride;\n }\n }\n\n if (masterOverrideType === 'INHERIT') {\n delete json.settings.masterOverride;\n }\n return json;\n },\n\n /**\n * Only allow set \"union\" value when isScopeSelf is NONE and displayType is\n * array of (string/number/integer), otherwise reset to default.\n *\n * @see /universal-directory/shared/views/components/UnionGroupValuesRadio.js\n */\n _normalizeUnionValue: function (json) {\n if (!this.get('__isNoneScopeArrayType__')) {\n json['union'] = undefined;\n }\n\n return json;\n },\n\n _enumAssignment: function (json) {\n if (!this.get('__isEnumDefinedAndSupported__')) {\n return json;\n }\n\n // backfill empty title by constraint\n\n const enumOneOf = this._getEnumOneOfWithTitleCheck();\n\n if (this.get('type') === 'array') {\n delete json.items.enum;\n json.items.oneOf = enumOneOf;\n } else {\n delete json.enum;\n json.oneOf = enumOneOf;\n }\n\n return json;\n },\n\n _patternAssignment: function (json) {\n if (!this.get('__isLoginOfBaseSchema__') || !this.get('__loginFormatRestriction__')) {\n return json;\n }\n\n switch (this.get('__loginFormatRestriction__')) {\n case SchemaUtil.LOGINPATTERNFORMAT.EMAIL:\n delete json.pattern;\n break;\n case SchemaUtil.LOGINPATTERNFORMAT.CUSTOM:\n json.pattern = this._buildLoginPattern(this.get('__loginFormatRestrictionCustom__'));\n break;\n case SchemaUtil.LOGINPATTERNFORMAT.NONE:\n json.pattern = loginFormatNonePattern;\n break;\n }\n\n return json;\n },\n\n _uniquenessAssignment: function (json) {\n if (!this.get('__unique__')) {\n delete json.unique;\n } else if (!this.get('__isUniqueness__')) {\n json.unique = SchemaUtil.UNIQUENESS.UNIQUE_VALIDATED;\n }\n\n return json;\n },\n\n /**\n * Character should be escaped except letters, digits and hyphen\n */\n _escapedRegexChar: function (pattern, index) {\n const char = pattern.charAt(index);\n\n if (escapedLoginCharsRe.test(char)) {\n return '\\\\' + char;\n }\n\n return char;\n },\n\n _buildLoginPattern: function (pattern) {\n let result = '';\n\n for (var i = 0; i < pattern.length; i++) {\n result += this._escapedRegexChar(pattern, i);\n }\n\n return '[' + result + ']+';\n },\n\n _extractLoginPattern: function (pattern) {\n const re = /^\\[(.*)\\]\\+/;\n const matches = pattern.match(re);\n\n return matches ? matches[1].replace(/\\\\(.)/g, '$1') : pattern;\n },\n\n _getEnumOneOfWithTitleCheck: function () {\n const enumOneOf = this.get('__oneOf__');\n\n return _.map(enumOneOf, function (value) {\n if ($.trim(value.title) !== '') {\n return value;\n }\n\n value.title = !_.isString(value.const) ? JSON.stringify(value.const) : value.const;\n\n return value;\n });\n },\n\n _updateTypeFormatConstraints: function () {\n const displayType = this.get('__displayType__');\n\n // OKTA-31952 reset format according to its displayType\n this.unset('format', { silent: true });\n this.unset('items', { silent: true });\n this.set(SchemaUtil.DISPLAYTYPES[displayType]);\n if (displayType !== NUMBER && displayType !== INTEGER) {\n this.unset('minimum');\n this.unset('maximum');\n }\n if (displayType !== STRING) {\n this.unset('minLength');\n this.unset('maxLength');\n }\n\n this.unset('__minVal__');\n this.unset('__maxVal__');\n this.unset('__equals__');\n this.set('__supportsMinMax__', SchemaUtil.SUPPORTSMINMAX.indexOf(this.get('__displayType__')) !== -1);\n },\n\n _updateMinMax: function () {\n let min;\n let max;\n const displayType = this.get('__displayType__');\n\n if (displayType === STRING) {\n min = 'minLength';\n max = 'maxLength';\n } else if (displayType === INTEGER || displayType === NUMBER) {\n min = 'minimum';\n max = 'maximum';\n }\n\n if (this.get('__minVal__')) {\n this.set(min, parseInt(this.get('__minVal__'), 10));\n } else {\n this.unset(min);\n }\n\n if (this.get('__maxVal__')) {\n this.set(max, parseInt(this.get('__maxVal__'), 10));\n } else {\n this.unset(max);\n }\n },\n\n _convertEqualsToMinMax: function () {\n const equals = this.get('__equals__');\n\n if (equals) {\n this.set('__minVal__', equals);\n this.set('__maxVal__', equals);\n }\n },\n\n /*\n Normally we would use a derived property here but derived properties do not work with the model Clone function\n so we use this workaround instead.\n */\n _setConstraintText: function () {\n const constraint = this.get('__constraint__');\n const min = this.get('__minVal__');\n const max = this.get('__maxVal__');\n const equals = this.get('__equals__');\n\n switch (constraint) {\n case 'between':\n this.set('__constraintText__', 'Between ' + min + ' and ' + max);\n break;\n case 'greaterThan':\n this.set('__constraintText__', 'Greater than ' + min);\n break;\n case 'lessThan':\n this.set('__constraintText__', 'Less than ' + max);\n break;\n case 'equals':\n this.set('__constraintText__', 'Equals ' + equals);\n break;\n default:\n this.set('__constraintText__', '');\n break;\n }\n },\n\n cleanup: function () {\n if (this.get('__constraint__') === 'lessThan') {\n this.unset('__minVal__');\n } else if (this.get('__constraint__') === 'greaterThan') {\n this.unset('__maxVal__');\n }\n if (this.get('scope') !== SchemaUtil.SCOPE.SYSTEM) {\n if (this.get('__isScopeSelf__') === true) {\n this.set({ scope: SchemaUtil.SCOPE.SELF }, { silent: true });\n } else {\n this.unset('scope');\n }\n }\n\n if (!this.get('__unique__')) {\n this.unset('unique');\n }\n },\n\n /**\n * Since there is not an dedicated attribute to flag enum type,\n * use enum values to determine whether the property is enum type or not.\n */\n isEnumType: function () {\n return !!this.getEnumValues();\n },\n\n getEnumValues: function () {\n return (\n this.get('oneOf')\n || this.get('enum')\n || (this.get('items') && this.get('items')['oneOf'])\n || (this.get('items') && this.get('items')['enum'])\n );\n },\n\n detectHasEnumDefined: function () {\n const enumValues = this.getEnumValues();\n\n if (!enumValues) {\n return;\n }\n\n this.set('__oneOf__', EnumTypeHelper.convertToOneOf(enumValues));\n this.set('__enumDefined__', true);\n }\n});\nconst SchemaPropertySchemaProperties = BaseCollection.extend({\n model: SchemaPropertySchemaProperty,\n clone: function () {\n return new this.constructor(this.toJSON({ verbose: true }), { parse: true });\n },\n areAllReadOnly: function () {\n return _.all(this.pluck('__isReadOnly__'));\n },\n createModelProperties: function () {\n return this.reduce(function (p, schemaProperty) {\n const type = schemaProperty.get('type');\n\n p[schemaProperty.id] = _.clone(SchemaUtil.DISPLAYTYPES[type]);\n if (SchemaUtil.SUPPORTSMINMAX.indexOf(type) !== -1) {\n p[schemaProperty.id].minLength = schemaProperty.get('minLength');\n p[schemaProperty.id].maxLength = schemaProperty.get('maxLength');\n }\n if (type === 'string') {\n p[schemaProperty.id].format = schemaProperty.get('format');\n }\n return p;\n }, {});\n }\n});\nexport default {\n Model: SchemaPropertySchemaProperty,\n Collection: SchemaPropertySchemaProperties\n};\n","import $ from './jquery-wrapper';\nimport _ from './underscore-wrapper';\n// eslint-disable-next-line import/no-cycle\nimport BaseRouter from './BaseRouter';\nimport SettingsModel, { SettingsModelClass } from './SettingsModel';\nimport StateMachine from './StateMachine';\nimport BaseView, { BaseViewOptions } from '../views/BaseView';\n\nexport type JSONValue =\n | string\n | number\n | boolean\n | null\n | { [key: string]: JSONValue }\n | Array;\n\nexport interface BaseControllerOptions extends BaseViewOptions {\n state?: typeof StateMachine;\n settings?: SettingsModelClass;\n}\n\nexport declare class BaseControllerClass extends BaseView {\n constructor(options);\n root: Backbone._Result;\n\n View: any;\n toJSON(options): JSONValue;\n}\n\nfunction clean(obj) {\n const res = {};\n\n _.each(obj, function (value, key) {\n if (!_.isNull(value)) {\n res[key] = value;\n }\n });\n return res;\n}\n\nconst proto = /** @lends module:Okta.Controller.prototype */ {\n preinitialize(options: BaseControllerOptions = {}) {\n // If 'state' is passed down as options, use it, else create a 'new StateMachine()'\n this.state = _.result(this, 'state');\n const hasStateBeenInitialized = (this.state instanceof StateMachine)\n || (options.state instanceof StateMachine);\n if (!hasStateBeenInitialized) {\n const stateData = _.defaults(clean(options.state), this.state || {});\n // TODO:\n // `framework/View.js set `this.state = options.state.`.\n // Therefore we could consider to do\n // 1. `options.state = new StateMachine()`\n // 2. remove `delete options.state`\n this.state = new StateMachine(stateData);\n delete options.state;\n }\n\n if (!options.settings) {\n // allow the controller to live without a router\n options.settings = new SettingsModel(_.omit(options || {}, 'el'));\n this.listen('notification', BaseRouter.prototype._notify);\n this.listen('confirmation', BaseRouter.prototype._confirm);\n }\n BaseView.prototype.preinitialize.call(this, options);\n },\n\n constructor: function (options: BaseControllerOptions = {}) {\n BaseView.call(this, options);\n\n this.listenTo(this.state, '__invoke__', function () {\n const args = _.toArray(arguments);\n\n const method = args.shift();\n\n if (_.isFunction(this[method])) {\n this[method].apply(this, args);\n }\n });\n\n let MainView;\n\n // if `this.View` is already a Backbone View\n if (this.View && this.View.isCourageView) {\n MainView = this.View;\n }\n // if `this.View` is a pure function that returns a Backbone View\n else if (_.result(this, 'View') && _.result(this, 'View').isCourageView) {\n MainView = _.result(this, 'View');\n }\n if (MainView) {\n this.add(new MainView(this.toJSON()));\n }\n },\n\n /**\n * The default values of our application state\n * @type {Object}\n * @default {}\n */\n state: {},\n\n /**\n * The main view this controller operate on\n * @type {module:Okta.View}\n * @default null\n */\n View: null,\n\n /**\n * Renders the {@link module:Okta.Controller#View|main view} after the DOM is ready\n * in case the controller is the root component of the page (e.g there's no router)\n */\n render: function () {\n const args = arguments;\n const self = this;\n\n $(function () {\n BaseView.prototype.render.apply(self, args);\n });\n return this;\n },\n\n /**\n * Creates the view constructor options\n * @param {Object} [options] Extra options\n * @return {Object} The view constructor options\n */\n toJSON: function (options) {\n return _.extend(_.pick(this, 'state', 'settings', 'collection', 'model'), options || {});\n },\n\n /**\n * Removes the child views, empty the DOM element and stop listening to events\n */\n remove: function () {\n this.removeChildren();\n this.stopListening();\n this.$el.empty();\n return this;\n }\n};\n\n/**\n * A Controller is our application control flow component.\n *\n * Typically it will:\n * - Initialize the models, controller and main views\n * - Listen to events\n * - Create, read, update and delete models\n * - Create modal dialogs, confirmation dialogs and alert dialogs\n * - Control the application flow\n *\n * The constructor is responsible for:\n * - Create the application state object\n * - Assign or creates the application settings object\n * - Create an instance of the main view with the relevant parameters\n *\n * See:\n * [Hello World Tutorial](https://github.com/okta/courage/wiki/Hello-World),\n * [Test Spec](https://github.com/okta/okta-ui/blob/master/packages/courage/test/spec/util/BaseController_spec.js)\n *\n * @class module:Okta.Controller\n * @param {Object} options Options Hash\n * @param {SettingsModel} [options.settings] Application Settings Model\n * @param {String} options.el a jQuery selector string stating where to attach the controller in the DOM\n */\nexport default BaseView.extend(proto) as typeof BaseControllerClass;\n","import Backbone from 'backbone';\nimport ConfirmationDialog from '../views/components/ConfirmationDialog';\nimport $ from './jquery-wrapper';\nimport _ from './underscore-wrapper';\nimport Logger from './Logger';\nimport SettingsModel, { SettingsModelClass } from './SettingsModel';\nimport Notification from '../views/components/Notification';\n// eslint-disable-next-line import/no-cycle\nimport { BaseControllerClass } from './BaseController';\n\ndeclare class BackboneRouterExt extends Backbone.EventsMixin implements Backbone.Events {\n /**\n * Do not use, prefer TypeScript's extend functionality.\n */\n static extend(properties: any, classProperties?: any): any;\n\n /**\n * Routes hash or a method returning the routes hash that maps URLs with parameters to methods on your Router.\n * For assigning routes as object hash, do it like this: this.routes = { \"route\": callback, ... };\n * That works only if you set it in the constructor or the initialize method.\n */\n routes: Backbone._Result;\n\n /**\n * For use with Router as ES classes. If you define a preinitialize method,\n * it will be invoked when the Router is first created, before any\n * instantiation logic is run for the Router.\n * @see https://backbonejs.org/#Router-preinitialize\n */\n preinitialize(options?: O): void;\n\n constructor(options?: O);\n initialize(options?: O): void;\n route(route: string | RegExp, name: string, callback?: Backbone.RouterCallback): this;\n route(route: string | RegExp, callback: Backbone.RouterCallback): this;\n navigate(fragment: string, options?: Backbone.NavigateOptions | boolean): this;\n\n execute(callback: Backbone.RouterCallback, args: string[], name: string): void;\n\n protected _bindRoutes(): void;\n protected _routeToRegExp(route: string): RegExp;\n protected _extractParameters(route: RegExp, fragment: string): string[];\n}\n\nexport interface BaseRouterOptions extends Backbone.HistoryOptions {\n el?: HTMLElement | string | JQuery.PlainObject;\n}\n\nexport declare class BaseRouterClass extends BackboneRouterExt {\n el: Backbone._Result;\n\n root: Backbone._Result;\n\n settings: S;\n\n controller: BaseControllerClass;\n listen(name, fn): Backbone.View;\n start();\n unload();\n render(Controller, options);\n _confirm(options);\n _notify(options);\n}\n\nfunction getRoute(router, route) {\n const root = _.result(router, 'root') || '';\n\n if (root && _.isString(route)) {\n return [root, route].join('/').replace(/\\/{2,}/g, '/');\n }\n return route;\n}\n\n/**\n * BaseRouter is a standard [Backbone.Router](http://backbonejs.org/#Router)\n * with a few additions:\n * - Explicit mapping between routes and controllers\n * - Support for rendering notification and confirmation dialogs\n *\n * Checkout the [Hello World Tutorial](https://github.com/okta/courage/wiki/Hello-World)\n * for a step-by-step guide to using this.\n *\n * @class module:Okta.Router\n * @extends external:Backbone.Router\n * @param {Object} options options hash\n * @param {String} options.el a jQuery selector string stating where to attach the controller in the DOM\n */\nconst props = /** @lends module:Okta.Router.prototype */ {\n /**\n * The root URL for the router. When setting {@link http://backbonejs.org/#Router-routes|routes},\n * it will be prepended to each route.\n * @type {String|Function}\n */\n root: '',\n\n listen: Notification.prototype.listen,\n\n constructor: function (this: BaseRouterClass, options: BaseRouterOptions = {}) {\n this.el = options.el;\n\n /**\n * Make sure `this.settings` has been set before invoke super - `Backbone.Router.apply`,\n * which will invoke `this.initialize`, which could use `this.settings`.\n *\n * In theory we can set `this.settings` in `this.initialize` and assume `child.initialize`\n * will invoke `super.initialize` first. But in reality, `child.initialize` doesn't call\n * `super.initialize` at all.\n */\n this.settings = new SettingsModel(_.omit(options, 'el'));\n if (options.root) {\n this.root = options.root;\n }\n\n Backbone.Router.apply(this, arguments);\n\n this.listen('notification', this._notify);\n this.listen('confirmation', this._confirm);\n },\n\n /**\n * Fires up a confirmation dialog\n *\n * @param {Object} options Options Hash\n * @param {String} options.title The title\n * @param {Array} buttonOrder The order of the buttons\n * @param {String} options.subtitle The explain text\n * @param {String} options.save The text for the save button\n * @param {Function} options.ok The callback function to run when hitting \"OK\"\n * @param {String} options.cancel The text for the cancel button\n * @param {Function} options.cancelFn The callback function to run when hitting \"Cancel\"\n * @param {Boolean} options.noCancelButton Don't render the cancel button (useful for alert dialogs)\n * @param {Boolean} options.noSubmitButton Don't render the primary button (useful for alert dialogs)\n * @private\n *\n * @return {Okta.View} the dialog view\n */\n _confirm: function (this: BaseRouterClass, options = {}) {\n const Dialog = ConfirmationDialog.extend(\n _.pick(options, 'title', 'subtitle', 'save', 'ok', 'cancel', 'cancelFn', 'noCancelButton', 'noSubmitButton',\n 'content', 'danger', 'type', 'closeOnOverlayClick', 'buttonOrder'),\n );\n const dialog = new Dialog({ model: this.settings });\n // The model is here because itsa part of the BaseForm paradigm.\n // It will be ignored in the context of a confirmation dialog.\n\n dialog.render();\n return dialog; // test hook\n },\n\n /**\n * Fires up a notification banner\n *\n * @param {Object} options Options Hash\n * @return {Okta.View} the notification view\n * @private\n */\n _notify: function (options) {\n const notification = new Notification(options);\n\n $('#content').prepend(notification.render().el);\n return notification; // test hook\n },\n\n /**\n * Renders a Controller\n * This will initialize new instance of a controller and call render on it\n *\n * @param {Okta.Controller} Controller The controller Class we which to render\n * @param {Object} [options] Extra options to the controller constructor\n */\n render: function (this: BaseRouterClass, Controller, options) {\n this.unload();\n options = _.extend(_.pick(this, 'settings', 'el'), options || {});\n this.controller = new Controller(options);\n this.controller.render();\n },\n\n /**\n * Starts the backbone history object\n *\n * Waits for the dom to be ready before calling `Backbone.history.start()` (IE issue).\n *\n * See [Backbone History](http://backbonejs.org/#History) for more information.\n */\n start: function (...args) {\n $(function () {\n if (Backbone.History.started) {\n Logger.error('History has already been started');\n return;\n }\n Backbone.history.start(...args);\n });\n },\n\n /**\n * Removes active controller and frees up event listeners\n */\n unload: function () {\n if (this.controller) {\n this.stopListening(this.controller);\n this.stopListening(this.controller.state);\n this.controller.remove();\n }\n },\n\n route: function (route, name, callback?) {\n return Backbone.Router.prototype.route.call(this, getRoute(this, route), name, callback);\n },\n\n navigate: function (fragment, options) {\n return Backbone.Router.prototype.navigate.call(this, getRoute(this, fragment), options);\n },\n};\n\nexport default Backbone.Router.extend(props) as typeof BaseRouterClass;\n","/* eslint '@okta/okta-ui/no-deprecated-methods': [0, [{ name: 'BaseButtonLink.extend', use: 'Okta.createButton'}, ]] */\nimport _ from './underscore-wrapper';\nimport BaseButtonLink from '../views/components/BaseButtonLink';\n\n/**\n * A factory method wrapper for {@link BaseButtonLink} creation\n * @class module:Okta.internal.util.ButtonFactory\n */\n\nfunction normalizeEvents(options) {\n const events = _.extend(options.click ? { click: options.click } : {}, options.events || {});\n\n const target = {};\n\n _.each(events, function (fn, eventName) {\n target[eventName] = function (e) {\n if (!options.href) {\n e.preventDefault();\n e.stopPropagation();\n }\n if (!(this.disabled && eventName === 'click')) {\n fn.apply(this, arguments);\n }\n };\n });\n return target;\n}\n\nexport default /** @lends module:Okta.internal.util.ButtonFactory */ {\n /**\n * Creates a {@link module:Okta.internal.views.components.BaseButtonLink|BaseButtonLink}.\n * @param {Object} options Options hash\n * @param {String} [options.title] The button text\n * @param {String} [options.icon]\n * CSS class for the icon to display. See [Style guide](http://rain.okta1.com:1802/su/dev/style-guide#icons)\n * @param {String} [options.href] The button link\n * @param {Function} [options.click] On click callback\n * @param {Object} [options.events] a [Backbone events](http://backbonejs.org/#View-delegateEvents) hash\n * @returns {module:Okta.internal.views.components.BaseButtonLink} BaseButtonLink prototype (\"class\")\n */\n create: function (options) {\n options = _.clone(options);\n options.attrs = options.attributes;\n delete options.attributes;\n\n return BaseButtonLink.extend(\n _.extend(options, {\n events: normalizeEvents(options)\n })\n );\n }\n};\n","import Backbone from 'backbone';\nimport _ from './underscore-wrapper';\n\nfunction Class(options) {\n this.options = _.clone(options || {});\n this.cid = _.uniqueId('class');\n this.initialize.apply(this, arguments);\n}\n\n_.extend(Class.prototype, Backbone.Events, {\n initialize: function () {}\n});\n\nClass.extend = Backbone.Model.extend;\n\nexport default Class;\n","import clipboard from 'clipboard';\nimport $ from './jquery-wrapper';\nimport _ from './underscore-wrapper';\nimport View from '../framework/View';\nimport Class from './Class';\n\nconst Clipboard = clipboard;\nconst OPTIONS = ['success', 'error', 'target', 'text'];\nconst ClipboardClipboardWrapper = Class.extend({\n initialize: function (el, options) {\n /* eslint complexity:0, max-statements: [2, 24] */\n options = _.pick(options || {}, OPTIONS);\n let trigger;\n let target;\n let text;\n\n if (_.isString(el)) {\n trigger = el;\n }\n if (_.isElement(el)) {\n trigger = el;\n }\n if (el instanceof $) {\n trigger = (el as any).selector; // TODO: use stronger type\n }\n if (el instanceof View) {\n trigger = el.el;\n }\n if (_.isFunction(options.target)) {\n target = options.target;\n }\n if (_.isElement(options.target)) {\n target = _.constant(options.target);\n }\n if (_.isString(options.text)) {\n text = _.constant(options.text);\n } else if (_.isFunction(options.text)) {\n text = options.text;\n }\n this.__instance = new Clipboard(trigger, { target: target, text: text });\n this.done = _.partial(this.__setCallback, 'success');\n this.error = _.partial(this.__setCallback, 'error');\n this.done(options.success);\n this.error(options.error);\n },\n\n __setCallback: function (event, callback) {\n if (!_.isFunction(callback)) {\n return;\n }\n this.__instance.on(event, callback);\n return this.__instance;\n }\n});\n\n/**\n * @class Clipboard\n * @abstract\n *\n * Abstract class that initializes a Clipboard\n * https://clipboardjs.com/\n *\n * ### Example:\n *\n * ```javascript\n * //attach a selector\n * Clipboard.attach('.copy-button');\n *\n * //attach a node, and set a constant string\n * Clipboard.attach(buttonView.el, {\n * text: 'this is the content'\n * });\n *\n * //attach a view, set text dynamically, and set callback\n * Clipboard.attach(buttonView, {\n * text: function (triggerNode) {\n * return $(triggerNode).attr('foo') + model.get('userName');\n * }\n * }).done(function (targetNode) {\n * var msg = ['\"', targetNode.text, '\" is copied'].join('');\n * view.notify('success', msg);\n * });\n *\n * //attach a jquery object, set the target node, and set callback\n * Clipboard.attach($('.customizeTarget'), {\n * target: function (triggerNode) {\n * return triggerNode;\n * },\n * success: function (targetNode) {\n * view.notify('success', 'copied!');\n * }\n * });\n *\n * ```\n */\nexport default {\n /**\n * @param {String|Node|View|jQuery} [el] el could be a selector (recommended),\n * a dom node, a view or a jquery object\n * @param {Object} [options] Options hash\n * @param {Node|Function} [options.target] a static dom node\n * or a function that takes trigger node and returns a target node\n * @param {String|Function} [options.text] a static string or a function that returns a string dynamically\n * @param {Function} [options.success] success callback\n * @param {Function} [options.error] error callback\n * @return {Object} The clipboard object\n */\n attach: function (el, options) {\n return new ClipboardClipboardWrapper(el, options);\n }\n};\n","import _ from './underscore-wrapper';\nimport Cookie from 'vendor/lib/js.cookie';\n\nconst SECURED_COOKIE = /^https/.test(window.location.href);\nexport default {\n setCookie: function (name, value, options) {\n Cookie.set(\n name,\n value,\n _.defaults(options || {}, {\n secure: SECURED_COOKIE,\n path: '/'\n })\n );\n },\n\n getCookie: function () {\n return Cookie.get.apply(Cookie, arguments);\n },\n\n removeCookie: function () {\n return Cookie.remove.apply(Cookie, arguments);\n }\n};\n","export default {\n UP: 38,\n DOWN: 40,\n DEL: 46,\n TAB: 9,\n RETURN: 13,\n ENTER: 13,\n ESC: 27,\n COMMA: 188,\n PAGEUP: 33,\n PAGEDOWN: 34,\n SPACE: 32,\n BACKSPACE: 8,\n __isKey: function (e, key) {\n return (e.which || e.keyCode) === this[key];\n },\n isEnter: function (e) {\n return this.__isKey(e, 'ENTER');\n },\n isEsc: function (e) {\n return this.__isKey(e, 'ESC');\n },\n isSpaceBar: function (e) {\n return this.__isKey(e, 'SPACE');\n }\n};\n","function log(level, ...args) {\n if (window.console && window.okta && window.okta.debug) {\n window.console[level](...args);\n }\n}\n\n/**\n * Utility library of logging functions.\n * @class module:Okta.Logger\n */\nexport default /** @lends module:Okta.Logger */ {\n /**\n * See [console.trace](https://developer.mozilla.org/en-US/docs/Web/API/Console.trace)\n * @static\n */\n trace: function (...args) {\n return log('trace', ...args);\n },\n /**\n * See [console.dir](https://developer.mozilla.org/en-US/docs/Web/API/Console.dir)\n * @static\n */\n dir: function (...args) {\n return log('dir', ...args);\n },\n /**\n * See [console.time](https://developer.mozilla.org/en-US/docs/Web/API/Console.time)\n * @static\n */\n time: function (...args) {\n return log('time', ...args);\n },\n /**\n * See [console.timeEnd](https://developer.mozilla.org/en-US/docs/Web/API/Console.timeEnd)\n * @static\n */\n timeEnd: function (...args) {\n return log('timeEnd', ...args);\n },\n /**\n * See [console.group](https://developer.mozilla.org/en-US/docs/Web/API/Console.group)\n * @static\n */\n group: function (...args) {\n return log('group', ...args);\n },\n /**\n * See [console.groupEnd](https://developer.mozilla.org/en-US/docs/Web/API/Console.groupEnd)\n * @static\n */\n groupEnd: function (...args) {\n return log('groupEnd', ...args);\n },\n /**\n * See [console.assert](https://developer.mozilla.org/en-US/docs/Web/API/Console.assert)\n * @static\n */\n assert: function (...args) {\n return log('assert', ...args);\n },\n /**\n * See [console.log](https://developer.mozilla.org/en-US/docs/Web/API/Console.log)\n * @static\n */\n log: function (...args) {\n return log('log', ...args);\n },\n /**\n * See [console.info](https://developer.mozilla.org/en-US/docs/Web/API/Console.info)\n * @static\n */\n info: function (...args) {\n return log('info', ...args);\n },\n /**\n * See [console.warn](https://developer.mozilla.org/en-US/docs/Web/API/Console.warn)\n * @static\n */\n warn: function (...args) {\n return log('warn', ...args);\n },\n /**\n * See [console.error](https://developer.mozilla.org/en-US/docs/Web/API/Console.error)\n * @static\n */\n error: function (...args) {\n return log('error', ...args);\n }\n};\n","import _ from './underscore-wrapper';\nimport StringUtil from './StringUtil';\n\nconst loc = StringUtil.localize;\nconst SchemaUtils = {\n STRING: 'string',\n NUMBER: 'number',\n INTEGER: 'integer',\n BOOLEAN: 'boolean',\n OBJECT: 'object',\n FORMATDISPLAYTYPE: {\n 'date-time': 'date',\n uri: 'uri',\n email: 'email',\n // TODO: settle on using EITHER underscores OR hyphens --- not both (OKTA-202818)\n 'country-code': 'country-code',\n 'language-code': 'language-code',\n 'country_code': 'country_code',\n 'language_code': 'language_code',\n locale: 'locale',\n timezone: 'timezone',\n 'ref-id': 'reference'\n },\n ARRAYDISPLAYTYPE: {\n arrayofobject: 'arrayofobject',\n arrayofstring: 'arrayofstring',\n arrayofnumber: 'arrayofnumber',\n arrayofinteger: 'arrayofinteger',\n 'arrayofref-id': 'arrayofref-id'\n },\n DISPLAYTYPES: {\n date: { type: 'string', format: 'date-time' },\n uri: { type: 'string', format: 'uri' },\n email: { type: 'string', format: 'email' },\n // TODO: Resolve inconsistencies in hyphens vs. underscores for these properties (OKTA-202818)\n // use country-code if attribute should be restricted to country code type\n 'country-code': { type: 'string', format: 'country-code' },\n 'language-code': { type: 'string', format: 'language-code' },\n 'country_code': { type: 'string' },\n 'language_code': { type: 'string' },\n locale: { type: 'string', format: 'locale' },\n timezone: { type: 'string', format: 'timezone' },\n string: { type: 'string' },\n number: { type: 'number' },\n boolean: { type: 'boolean' },\n integer: { type: 'integer' },\n reference: { type: 'string', format: 'ref-id' },\n arrayofobject: { type: 'array', items: { type: 'object' } },\n arrayofstring: { type: 'array', items: { type: 'string' } },\n arrayofnumber: { type: 'array', items: { type: 'number' } },\n arrayofinteger: { type: 'array', items: { type: 'integer' } },\n 'arrayofref-id': { type: 'array', items: { type: 'string', format: 'ref-id' } },\n image: { type: 'image' },\n password: { type: 'string' }\n },\n SUPPORTSMINMAX: ['string', 'number', 'integer', 'password'],\n SUPPORTENUM: [\n 'string',\n 'number',\n 'integer',\n 'object',\n 'arrayofstring',\n 'arrayofnumber',\n 'arrayofinteger',\n 'arrayofobject',\n ],\n DATATYPE: {\n string: 'string',\n number: 'number',\n boolean: 'boolean',\n integer: 'integer',\n date: 'datetime',\n object: 'object',\n arrayofobject: 'object array',\n arrayofstring: 'string array',\n arrayofnumber: 'number array',\n arrayofinteger: 'integer array',\n 'arrayofref-id': 'reference array',\n // TODO: settle on using EITHER underscores OR hyphens --- not both (OKTA-202818)\n 'country-code': 'country code',\n 'language-code': 'language code',\n 'country_code': 'country code',\n 'language_code': 'language code',\n reference: 'reference',\n timezone: 'timezone',\n image: 'image'\n },\n MUTABILITY: {\n READONLY: 'READ_ONLY',\n WRITEONLY: 'WRITE_ONLY',\n READWRITE: 'READ_WRITE',\n IMMUTABLE: 'IMMUTABLE'\n },\n SCOPE: {\n NONE: 'NONE',\n SELF: 'SELF',\n SYSTEM: 'SYSTEM'\n },\n DISPLAYSCOPE: {\n SELF: 'User personal',\n SYSTEM: 'System',\n NA: 'None'\n },\n UNION: {\n DISABLE: 'DISABLE',\n ENABLE: 'ENABLE'\n },\n UNION_OPTIONS: {\n DISABLE: loc('universal-directory.profiles.attribute.form.union.enable.display', 'courage'),\n ENABLE: loc('universal-directory.profiles.attribute.form.union.disable.display', 'courage')\n },\n PERMISSION: {\n HIDE: 'HIDE',\n READ_ONLY: 'READ_ONLY',\n WRITE_ONLY: 'WRITE_ONLY',\n READ_WRITE: 'READ_WRITE'\n },\n ENDUSER_ATTRIBUTE_PERMISSION_OPTIONS: {\n HIDE: loc('universal-directory.profiles.attribute.enduser.permission.hide', 'courage'),\n READ_ONLY: loc('universal-directory.profiles.attribute.enduser.permission.readonly', 'courage'),\n READ_WRITE: loc('universal-directory.profiles.attribute.enduser.permission.readwrite', 'courage')\n },\n ATTRIBUTE_LEVEL_MASTERING_OPTIONS: {\n INHERIT: loc('universal-directory.profiles.attribute.source.inherit', 'courage'),\n // eslint-disable-next-line @okta/okta/no-exclusive-language\n OKTA_MASTERED: loc('universal-directory.profiles.attribute.source.oktamastered', 'courage'),\n OVERRIDE: loc('universal-directory.profiles.attribute.source.override', 'courage')\n },\n USERNAMETYPE: {\n NONE: 'non-username',\n OKTA_TO_APP: 'okta-to-app-username',\n OKTA_TO_AD: 'okta-to-ad-username',\n APP_TO_OKTA: 'app-to-okta-username',\n IDP_TO_OKTA: 'idp-to-okta-username'\n },\n LOGINPATTERNFORMAT: {\n EMAIL: 'EMAIL',\n CUSTOM: 'CUSTOM',\n NONE: 'NONE'\n },\n UNIQUENESS: {\n NOT_UNIQUE: 'NOT_UNIQUE',\n PENDING_UNIQUENESS: 'PENDING_UNIQUENESS',\n UNIQUE_VALIDATED: 'UNIQUE_VALIDATED'\n },\n\n /*\n * Get a display string for a schema attribute type.\n * @param {String} type Type of an attribute\n * @param {String} format Format of an attribute\n * @param {String} itemType Item type of an attribute if an array\n * @param {String} defaultValue The default value if an attribute type is undefined\n * @return {String} the display value\n */\n getDisplayType: function (type, format, itemType, defaultValue?) {\n let displayType;\n\n // type is undefined for\n // - an un-mapped source attribute from mapping\n // - an source attribute which is mapped to username target attribute\n if (type) {\n // format is only defined for complicated types (ex. reference, date time, array)\n // not for simple types (ex. string, integer, boolean)\n if (format) {\n displayType = this.FORMATDISPLAYTYPE[format];\n } else {\n // itemType is only defined for array type\n // to specify an array element type (ex. string, integer, number)\n displayType = itemType ? this.ARRAYDISPLAYTYPE[type + 'of' + itemType] : type;\n }\n }\n if (!displayType) {\n displayType = typeof defaultValue === 'undefined' ? '' : defaultValue;\n }\n return displayType;\n },\n\n /*\n * Get attribute mapping source attribute username type\n * @param {String} mappingDirection\n * @param {String} targetName The mapping target attribute name\n * @param {String} appName The app name that's mapped to/from Okta\n * @return {String} the source attribute username type value\n */\n getSourceUsernameType: function (mappingDirection, targetName, appName) {\n let sourceUsernameType = this.USERNAMETYPE.NONE;\n /* eslint complexity: [2, 7] */\n\n if (mappingDirection === 'oktaToApp') {\n if (targetName === 'userName') {\n sourceUsernameType = this.USERNAMETYPE.OKTA_TO_APP;\n } else if (targetName === 'cn') {\n sourceUsernameType = this.USERNAMETYPE.OKTA_TO_AD;\n }\n } else if (mappingDirection === 'appToOkta' && targetName === 'login') {\n if (appName === 'saml_idp') {\n sourceUsernameType = this.USERNAMETYPE.IDP_TO_OKTA;\n } else {\n sourceUsernameType = this.USERNAMETYPE.APP_TO_OKTA;\n }\n }\n return sourceUsernameType;\n },\n\n isArrayDataType: function (type) {\n return _.contains(_.values(this.ARRAYDISPLAYTYPE), type);\n },\n\n isObjectDataType: function (type) {\n return this.DATATYPE.object === type;\n }\n};\nexport default SchemaUtils;\n","import _ from './underscore-wrapper';\nimport Model from '../models/Model';\n\nexport declare class SettingsModelClass extends Model {\n protected features: string[];\n hasFeature(featureName: string): boolean;\n hasAnyFeature(featureArray: string[]): boolean;\n hasPermission(permission: string): boolean;\n isDsTheme(): boolean;\n}\n\n/**\n * @class SettingsModel\n * @extends {Okta.Model}\n * @private\n */\nconst props = {\n local() {\n const settings = (window.okta && window.okta.settings) || {};\n const theme = (window.okta && window.okta.theme) || '';\n\n return {\n orgId: ['string', false, settings.orgId],\n orgName: ['string', false, settings.orgName],\n serverStatus: ['string', false, settings.serverStatus],\n persona: ['string', false, settings.persona],\n isDeveloperConsole: ['boolean', false, settings.isDeveloperConsole],\n isPreview: ['boolean', false, settings.isPreview],\n permissions: ['array', true, settings.permissions || []],\n theme: ['string', false, theme]\n };\n },\n\n constructor(this: SettingsModelClass) {\n Model.apply(this, arguments);\n this.features = window._features || [];\n },\n\n /**\n * Checks if the user have a feature flag enabled (Based of the org level feature flag)\n * @param {String} feature Feature name\n * @return {Boolean}\n */\n hasFeature(this: SettingsModelClass, feature) {\n return _.contains(this.features, feature);\n },\n\n /**\n * Checks if any of the given feature flags are enabled (Based of the org level feature flags)\n * @param {Array} featureArray Features names\n * @return {Boolean} true if any of the give features are enabled. False otherwise\n */\n hasAnyFeature(this: SettingsModelClass, featureArray) {\n return _.some(featureArray, this.hasFeature, this);\n },\n\n /**\n * Checks if the user have a specific permission (based on data passed from JSP)\n * @param {String} permission Permission name\n * @return {Boolean}\n */\n hasPermission(this: SettingsModelClass, permission) {\n return _.contains(this.get('permissions'), permission);\n },\n\n /**\n * Checks if the org has ds theme set\n * @return {Boolean}\n */\n isDsTheme(this: SettingsModelClass) {\n return this.get('theme') === 'dstheme';\n }\n};\n\nexport default Model.extend(props) as typeof SettingsModelClass;\n","import _ from './underscore-wrapper';\nimport Model from '../models/Model';\n\nexport declare class StateMachineClass extends Model {\n invoke():this;\n}\n/**\n * @class StateMachine\n * @extends Okta.Model\n * @private\n *\n * A state object that holds the applciation state\n */\n\nexport default Model.extend({\n\n /**\n * Invokes a method on the applicable {@link Okta.Controller}\n *\n * ```javascript\n * state.invoke('methodName', 'param1', 'param2')\n * // Will call\n * contoller.methodName('param1', 'param2')\n * ```\n * @param {String} methodName the name of the controller method to invoke on the controller\n */\n invoke(this: StateMachineClass) {\n const args = _.toArray(arguments);\n\n args.unshift('__invoke__');\n this.trigger.apply(this, args);\n }\n});\n","import $ from './jquery-wrapper';\nimport _ from './underscore-wrapper';\nimport Bundles from 'okta-i18n-bundles';\n\nconst entityMap = {\n '&': '&',\n '<': '<',\n '>': '>',\n '"': '\"',\n ''': '\\'',\n ''': '\\'',\n '/': '/'\n};\nconst emailValidator = /^(([^<>()[\\]\\\\.,;:\\s@\"]+(\\.[^<>()[\\]\\\\.,;:\\s@\"]+)*)|(\".+\"))@(?!-)((\\[?[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\]?)|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))$/;\n\n/**\n* Converts the locale code identifier from \"${languageCode}-${countryCode}\" to \"${languageCode}_${countryCode}\"\n* Follows the ISO-639-1 language code and 2-letter ISO-3166-1-alpha-2 country code structure.\n* @param {String} locale code identifier\n* @return {String} converted locale code identifier\n*/\nconst parseLocale = (locale) => {\n if (/-/.test(locale)) {\n const parts = locale.split('-');\n parts[1] = parts[1].toUpperCase();\n return parts.join('_');\n }\n return locale;\n};\n\n/* eslint max-len: 0*/\n\n/**\n * Returns the language bundle based on the current locale.\n * - If a locale is not provided, default to English ('en')\n * - Legacy Support: If the named language bundle does not exist, fall back to the default named bundle.\n *\n * @param {*} bundleName\n */\nfunction getBundle(bundleName?: string) {\n if (!bundleName) {\n return Bundles[_.keys(Bundles)[0]];\n }\n const locale = parseLocale((window && window.okta && window.okta.locale)) || 'en';\n return Bundles[`${bundleName}_${locale}`] || Bundles[bundleName];\n}\n\n/**\n *\n * CustomEvent polyfill for IE\n * https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent#polyfill\n */\n\nfunction IECustomEvent(event, params) {\n params = params || { bubbles: false, cancelable: false, detail: null };\n var evt = document.createEvent('CustomEvent');\n evt.initCustomEvent(event, params.bubbles, params.cancelable, params.detail);\n return evt;\n}\n\n/**\n * Call the window.okta.emitL10nError function if it is defined\n * @param {String} key The i18n key\n * @param {String} bundleName The i18n bundle name\n * @param {String} reason Could be 'bundle' (Bundle not found), 'key' (Key not found) or 'parameters' (Parameters mismatch).\n */\nfunction emitL10nError(key, bundleName, reason) {\n // CustomEvent polyfill for IE\n if (!window.CustomEvent) {\n (window.CustomEvent as unknown) = IECustomEvent;\n }\n // dispatchEvent for sentry\n if (typeof window.CustomEvent === 'function') {\n const event = new CustomEvent('okta-i18n-error', {\n detail: {\n type: 'l10n-error',\n key: key,\n bundleName: bundleName,\n reason: reason\n }\n });\n document.dispatchEvent(event);\n }\n}\n\nconst StringUtil = /** @lends module:Okta.internal.util.StringUtil */ {\n /** @static */\n sprintf: function () {\n const args = Array.prototype.slice.apply(arguments);\n let value = args.shift();\n let oldValue = value;\n /* eslint max-statements: [2, 15] */\n\n function triggerError() {\n throw new Error('Mismatch number of variables: ' + arguments[0] + ', ' + JSON.stringify(args));\n }\n\n for (var i = 0, l = args.length; i < l; i++) {\n const entity = args[i];\n\n const regex = new RegExp('\\\\{' + i + '\\\\}', 'g');\n value = value.replace(regex, entity);\n if (entity === undefined || entity === null || value === oldValue) {\n triggerError();\n }\n oldValue = value;\n }\n\n if (/\\{[\\d+]\\}/.test(value)) {\n triggerError();\n }\n\n return value;\n },\n\n /**\n * Converts a URI encoded query string into a hash map\n * @param {String} query The query string\n * @return {Object} The map\n * @static\n * @example\n * StringUtil.parseQuery('foo=bar&baz=qux') // {foo: 'bar', baz: 'qux'}\n */\n parseQuery: function (query) {\n const params = {};\n const pairs = decodeURIComponent(query.replace(/\\+/g, ' ')).split('&');\n\n for (var i = 0; i < pairs.length; i++) {\n const pair = pairs[i];\n const data = pair.split('=');\n\n params[data.shift() as string] = data.join('=');\n }\n return params;\n },\n\n /** @static */\n encodeJSObject: function (jsObj) {\n return encodeURIComponent(JSON.stringify(jsObj));\n },\n\n /** @static */\n decodeJSObject: function (jsObj) {\n try {\n return JSON.parse(decodeURIComponent(jsObj));\n } catch (e) {\n return null;\n }\n },\n\n /** @static */\n unescapeHtml: function (string) {\n return String(string).replace(/&[\\w#\\d]{2,};/g, function (s) {\n return entityMap[s] || s;\n });\n },\n\n /**\n * Get the original i18n template directly without string format with parameters\n * @param {String} key The key\n * @param {String} bundle=\"messages\"] The name of the i18n bundle. Defaults to the first bundle in the list.\n */\n getTemplate: function (key, bundleName) {\n const bundle = getBundle(bundleName);\n if (!bundle) {\n emitL10nError(key, bundleName, 'bundle');\n return 'L10N_ERROR[' + bundleName + ']';\n }\n if (bundle[key]) {\n return bundle[key];\n } else {\n emitL10nError(key, bundleName, 'key');\n return 'L10N_ERROR[' + key + ']';\n }\n },\n\n /**\n * Translate a key to the localized value\n * @static\n * @param {String} key The key\n * @param {String} [bundle=\"messages\"] The name of the i18n bundle. Defaults to the first bundle in the list.\n * @param {Array} [params] A list of parameters to apply as tokens to the i18n value\n * @return {String} The localized value\n */\n localize: function (key, bundleName?, params?) {\n const bundle = getBundle(bundleName);\n /* eslint complexity: [2, 6] */\n\n if (!bundle) {\n emitL10nError(key, bundleName, 'bundle');\n return 'L10N_ERROR[' + bundleName + ']';\n }\n\n let value = bundle[key];\n\n try {\n params = params && params.slice ? params.slice(0) : [];\n params.unshift(value);\n value = StringUtil.sprintf.apply(null, params);\n if (value) {\n return value;\n } else {\n emitL10nError(key, bundleName, 'key');\n return 'L10N_ERROR[' + key + ']';\n }\n } catch (e) {\n emitL10nError(key, bundleName, 'parameters');\n return 'L10N_ERROR[' + key + ']';\n }\n },\n\n /**\n * Convert a string to a float if valid, otherwise return the string.\n * Valid numbers may contain a negative sign and a decimal point.\n * @static\n * @param {String} string The string to convert to a number\n * @return {String|Number} Returns a number if the string can be casted, otherwise returns the original string\n */\n parseFloat: function (string) {\n const number = +string;\n\n return typeof string === 'string' && number === parseFloat(string) ? number : string;\n },\n\n /**\n * Convert a string to an integer if valid, otherwise return the string\n * @static\n * @param {String} string The string to convert to an integer\n * @return {String|integer} Returns an integer if the string can be casted, otherwise, returns the original string\n */\n parseInt: function (string) {\n const int = +string;\n\n return _.isString(string) && int === parseInt(string, 10) ? int : string;\n },\n\n /**\n * Convert a string to an object if valid, otherwise return the string\n * @static\n * @param {String} string The string to convert to an object\n * @return {String|object} Returns an object if the string can be casted, otherwise, returns the original string\n */\n parseObject: function (string) {\n if (!_.isString(string)) {\n return string;\n }\n\n try {\n const object = JSON.parse(string);\n\n return $.isPlainObject(object) ? object : string;\n } catch (e) {\n return string;\n }\n },\n\n /**\n * Returns a random string from [a-z][A-Z][0-9] of a given length\n * @static\n * @param {Number} length The length of the random string.\n * @return {String} Returns a random string from [a-z][A-Z][0-9] of a given length\n */\n randomString: function (length) {\n const characters = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz';\n\n if (length === undefined) {\n length = _.random(characters.length);\n } else if (length === 0) {\n return '';\n }\n\n const stringArray: string[] = [];\n\n while (length--) {\n stringArray.push(characters[_.random(characters.length - 1)]);\n }\n return stringArray.join('');\n },\n\n /**\n * Returns if a str ends with another string\n * @static\n * @param {String} str The string to search\n * @param {String} ends The string it should end with\n *\n * @return {Boolean} Returns if the str ends with ends\n */\n endsWith: function (str, ends) {\n str += '';\n ends += '';\n return str.length >= ends.length && str.substring(str.length - ends.length) === ends;\n },\n\n /** @static */\n isEmail: function (str) {\n const target = $.trim(str);\n\n return !_.isEmpty(target) && emailValidator.test(target);\n }\n};\n\n/**\n * Handy utility functions to handle strings.\n *\n * @class module:Okta.internal.util.StringUtil\n * @hideconstructor\n */\n\nexport default StringUtil;\n","/* eslint @okta/okta-ui/no-specific-methods: 0 */\nimport Handlebars from 'handlebars';\nimport _ from './underscore-wrapper';\n\n/**\n * @class module:Okta.internal.util.TemplateUtil\n * @hideconstructor\n */\nexport default /** @lends module:Okta.internal.util.TemplateUtil */ {\n /**\n * Compiles a Handlebars template\n * @static\n * @method\n */\n // TODO: This will be deprecated at some point. Views should use pre-compiled templates\n tpl: _.memoize(function (tpl) {\n /* eslint @okta/okta-ui/no-specific-methods: 0 */\n return function (context) {\n return Handlebars.compile(tpl)(context);\n };\n })\n};\n","export default {\n DEBOUNCE_DELAY: 200,\n LOADING_FADE: 400,\n UNLOADING_FADE: 400,\n ROW_EXPANDER_TRANSITION: 150,\n HIDE_ADD_MAPPING_FORM: 300\n};\n","import _ from './underscore-wrapper';\nimport BaseView from '../views/BaseView';\n\nexport default {\n redirect: function (url) {\n window.location = url;\n },\n\n reloadPage: function () {\n window.location.reload();\n },\n\n constantError: function (errorMessage) {\n return function () {\n throw new Error(errorMessage);\n };\n },\n\n /**\n * Simply convert an URL query key value pair object into an URL query string.\n * Remember NOT to escape the query string when using this util.\n * example:\n * input: {userId: 123, instanceId: undefined, expand: 'schema,app'}\n * output: '?userId=123&expand=schema,app'\n */\n getUrlQueryString: function (queries) {\n _.isObject(queries) || (queries = {});\n\n const queriesString = _.without(\n _.map(queries, function (value, key) {\n if (value !== undefined && value !== null) {\n return key + '=' + encodeURIComponent(value);\n }\n }),\n undefined\n ).join('&');\n\n return _.isEmpty(queriesString) ? '' : '?' + queriesString;\n },\n\n isABaseView(obj) {\n return obj instanceof BaseView || obj.prototype instanceof BaseView || obj === BaseView;\n }\n};\n","import _ from './underscore-wrapper';\n\nfunction changeEventString(doWhen) {\n return 'change:' + _.keys(doWhen).join(' change:');\n}\n\nfunction calcDoWhen(value, key) {\n const modelValue = this.model.get(key);\n\n if (_.isFunction(value)) {\n return value.call(this, modelValue);\n } else {\n return value === modelValue;\n }\n}\n\ndeclare type ToggleFn = (options?) => any;\n\nfunction _doWhen(view, doWhen, fn) {\n const toggle: ToggleFn = _.bind(fn, view, view, doWhen);\n\n view.render = _.wrap(view.render, function (render) {\n const val = render.call(view);\n\n toggle({ animate: false });\n return val;\n });\n\n view.listenTo(view.model, changeEventString(doWhen), function () {\n toggle({ animate: true });\n });\n}\n\nexport default {\n applyDoWhen: function (view, doWhen, fn) {\n if (!(view.model && _.isObject(doWhen) && _.size(doWhen) && _.isFunction(fn))) {\n return;\n }\n _doWhen(view, doWhen, function (view, doWhen, options) {\n const result = _.every(_.map(doWhen, calcDoWhen, view));\n\n fn.call(view, result, options);\n });\n }\n};\n","// Handlebars \"wrapper\" is used by frontend code. It contains all helpers.\n// This runs in a browser / webpacked environment\n// TODO: Once all templates are precompiled, this file should use handlebars/runtime\n\n/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars'; // from vendor/lib\n\nimport './handlebars/handle-url';\nimport './handlebars/helper-base64';\nimport './handlebars/helper-date';\nimport './handlebars/helper-i18n';\nimport './handlebars/helper-img';\nimport './handlebars/helper-markdown';\nimport './handlebars/helper-xsrfTokenInput';\n\nexport default Handlebars;\n","import Handlebars from 'handlebars';\n\nconst clonedEscapeExpression = Handlebars.Utils.escapeExpression;\n\nHandlebars.Utils.escapeExpression = function (string) {\n return clonedEscapeExpression(string).replace(/=/g, '=');\n};\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\n\n// Display a base 64 encoded data (e.g. certificate signature) in a nicely formatted hex format.\nHandlebars.registerHelper('base64ToHex', function base64ToHex(base64String) {\n const raw = atob(base64String);\n let result = '';\n if (raw.length > 0) {\n const firstHex = raw.charCodeAt(0).toString(16);\n result += (firstHex.length === 2 ? firstHex : `0${firstHex}`);\n for (let i = 1; i < raw.length; i += 1) {\n let hex = raw.charCodeAt(i).toString(16);\n hex = hex.length === 2 ? hex : `0${hex}`;\n result += ` ${hex}`;\n }\n }\n return result.toUpperCase();\n});\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0, max-params: 0, max-statements: 0 */\nimport Handlebars from 'handlebars';\nimport moment from 'moment';\nimport _ from '../underscore-wrapper';\n\nfunction formatDate(format, dateInISOString) {\n return moment\n .utc(dateInISOString)\n .utcOffset('-07:00')\n .format(format);\n}\n\nHandlebars.registerHelper('shortDate', _.partial(formatDate, 'MMM Do'));\nHandlebars.registerHelper('mediumDate', _.partial(formatDate, 'MMMM DD, YYYY'));\nHandlebars.registerHelper('longDate', _.partial(formatDate, 'MMMM DD, YYYY, h:mma'));\nHandlebars.registerHelper('formatDate', formatDate);\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\nimport _ from '../underscore-wrapper';\nimport Logger from '../Logger';\nimport StringUtil from '../StringUtil';\n\nconst hbsEscape = Handlebars.Utils.escapeExpression;\n\nfunction trim(str) {\n return str && str.replace(/^\\s+|\\s+$/g, '');\n}\n\nfunction replaceTagsWithPlaceholders(source, tag, tagValue) {\n const escapedBeginningTag = hbsEscape(`<${tag}>`);\n const escapedEndTag = hbsEscape(``);\n\n const [beginningTag, endTag] = tagValue.split(tag);\n\n if (!source.includes(escapedBeginningTag) && !source.includes(escapedEndTag)) {\n throw Error(`Parsed tag \"${tag}\" is not present in \"${source}\"`);\n } else if (!tagValue.includes(tag)) {\n throw Error(`Parsed tag \"${tag}\" is not present in \"${tagValue}\"`);\n } else if (!beginningTag || !endTag) {\n throw Error(`Template value \"${tagValue}\" must contain beginning and closing tags`);\n }\n\n return source\n .replace(escapedBeginningTag, beginningTag)\n .replace(escapedEndTag, endTag);\n}\n\n/* eslint max-statements: [2, 18] */\nHandlebars.registerHelper('i18n', function i18n(options) {\n let params;\n const key = trim(options.hash.code);\n const bundle = trim(options.hash.bundle);\n const args = trim(options.hash.arguments);\n\n const tags = Object.keys(options.hash)\n .filter((prop) => prop.match(/^\\$\\d+/))\n .map((prop) => ({ tag: prop, value: options.hash[prop] }));\n\n if (args) {\n params = _.map(\n trim(args).split(';'),\n function mapParam(param) {\n param = trim(param);\n let val;\n\n /*\n * the context(data) may be a deep object, ex {user: {name: 'John', gender: 'M'}}\n * arguments may be 'user.name'\n * return data['user']['name']\n */\n _.each(param.split('.'), (p) => {\n val = val ? val[p] : this[p];\n });\n return val;\n },\n this,\n );\n }\n\n const localizedValue = StringUtil.localize(key, bundle, params);\n\n if (tags.length < 1) {\n // No HTML tags provided - return the localized and escaped string\n return localizedValue;\n }\n\n let escapedString = hbsEscape(localizedValue);\n try {\n tags.forEach((tag) => {\n escapedString = replaceTagsWithPlaceholders(escapedString, tag.tag, tag.value);\n });\n return new Handlebars.SafeString(escapedString);\n } catch (err) {\n Logger.error(err.toString());\n return localizedValue;\n }\n});\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\nimport _ from '../underscore-wrapper';\n\nconst CACHE_BUST_URL_PREFIX = '/assets';\n\nfunction prependCachebustPrefix(path) {\n if (path.indexOf(CACHE_BUST_URL_PREFIX) === 0) {\n return path;\n }\n return CACHE_BUST_URL_PREFIX + path;\n}\n\nHandlebars.registerHelper('img', function img(options) {\n const cdn = (typeof okta !== 'undefined' && okta.cdnUrlHostname) || '';\n\n const hash = _.pick(options.hash, ['src', 'alt', 'width', 'height', 'class', 'title']);\n\n hash.src = `${cdn}${prependCachebustPrefix(hash.src)}`;\n\n const attrs = _.map(hash, (value, attr) => {\n const encodedValue = attr === 'src' ? encodeURI(value) : Handlebars.Utils.escapeExpression(value);\n return `${attr}=\"${encodedValue}\"`;\n });\n\n return new Handlebars.SafeString(`![]()
`);\n});\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\nimport markdownToHtml from '../markdownToHtml';\n\nHandlebars.registerHelper('markdown', function markdown(mdText) {\n return markdownToHtml(Handlebars, mdText);\n});\n\nexport default Handlebars;\n","/* eslint @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\nimport $ from '../jquery-wrapper';\n\nHandlebars.registerHelper('xsrfTokenInput', function xsrfTokenInput() {\n return new Handlebars.SafeString(\n ``,\n );\n});\n\nexport default Handlebars;\n","/* eslint-disable @okta/okta-ui/enforce-requirejs-names, @okta/okta-ui/no-specific-modules */\nimport $ from 'jquery';\n\nexport interface OktaJQuery extends JQuery {\n scrollParent(includeHidden?: boolean): JQuery; // from jquery-ui\n}\n\n// src/vendor/lib/jquery.browser.js\nexport interface OktaJQueryBrowserPlugin {\n msie: boolean;\n opera: boolean;\n chrome: boolean;\n safari: boolean;\n mozilla: boolean;\n platform: 'ipad' | 'iphone' | 'android' | 'windowsPhone';\n mac: boolean;\n versionNumber: number;\n}\nexport interface OktaJQueryStatic extends JQueryStatic {\n (\n selector: JQuery.Selector,\n context?: Element | Document | JQuery | JQuery.Selector\n ): OktaJQuery;\n fn: OktaJQuery;\n\n // Make sure you import following in order to use the 'browser' object\n // `import @okta/courage/src/vendor/plugins/jquery.browser`;\n // TODO: create a jquery.browser wrapper which could extend OktaJQueryStatic\n browser: OktaJQueryBrowserPlugin;\n}\n\n$.ajaxSetup({\n beforeSend: function (xhr) {\n xhr.setRequestHeader('X-Okta-XsrfToken', $('#_xsrfToken').text());\n },\n converters: {\n 'text secureJSON': function (str) {\n if (str.substring(0, 11) === 'while(1){};') {\n str = str.substring(11);\n }\n return JSON.parse(str);\n }\n }\n});\n\n// Selenium Hook\n// Widget such as autocomplete and autosuggest needs to be triggered from the running version of jQuery.\n// We have 2 versions of jQuery running in parallel and they don't share the same events bus\n\nconst oktaJQueryStatic = $ as OktaJQueryStatic;\nwindow.jQueryCourage = oktaJQueryStatic;\nexport default oktaJQueryStatic;\n","// Simple \"markdown parser\" - just handles markdown formatted links. If we\n// find that we need more extensive markdown support, we should include\n// a fully formulated markdown library like:\n// https://github.com/evilstreak/markdown-js\nimport _ from './underscore-wrapper';\n\nconst RE_LINK = /\\[[^\\]]*\\]\\([^)]*\\)/gi;\nconst RE_LINK_HREF = /\\]\\(([^)]*)\\)/i;\nconst RE_LINK_TEXT = /\\[([^\\]]*)\\]/i;\nconst RE_LINK_JS = /javascript:/gi;\n\n// Converts links\n// FROM:\n// [some link text](http://the/link/url)\n// TO:\n// some link text\nexport default function mdToHtml(Handlebars, markdownText) {\n // TODO: use precompiled templates OKTA-309852\n // eslint-disable-next-line @okta/okta-ui/no-bare-templates\n const linkTemplate = Handlebars.compile('{{text}}');\n /* eslint @okta/okta-ui/no-specific-methods: 0*/\n\n let res;\n\n if (!_.isString(markdownText)) {\n res = '';\n } else {\n res = Handlebars.Utils.escapeExpression(markdownText)\n .replace(RE_LINK_JS, '')\n .replace(RE_LINK, function (mdLink) {\n return linkTemplate({\n href: mdLink.match(RE_LINK_HREF)[1],\n text: mdLink.match(RE_LINK_TEXT)[1]\n });\n });\n }\n return new Handlebars.SafeString(res);\n}\n","/* eslint @okta/okta-ui/no-specific-methods: 0, @okta/okta-ui/no-specific-modules: 0 */\nimport Handlebars from 'handlebars';\nimport _ from 'underscore';\n\nexport interface OktaUnderscore extends _.UnderscoreStatic {\n resultCtx: (object, property, context?, defaultValue?) => any;\n isInteger: (value) => boolean;\n template: (source, data) => _.CompiledTemplate;\n}\n\n_.mixin({\n resultCtx: function (object, property, context, defaultValue) {\n let value = _.isObject(object) ? object[property] : void 0;\n\n if (_.isFunction(value)) {\n value = value.call(context || object);\n }\n if (value) {\n return value;\n } else {\n return !_.isUndefined(defaultValue) ? defaultValue : value;\n }\n },\n\n isInteger: function (x) {\n return _.isNumber(x) && x % 1 === 0;\n },\n\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n // eslint-disable-next-line @okta/okta-ui/no-bare-templates\n template: function (source, data?): _.CompiledTemplate | string {\n const template = Handlebars.compile(source);\n\n if (data) {\n return template(data);\n }\n const fn = function (data) {\n return template(data);\n };\n fn.source = ''; // to conform with \"CompiledTemplate\" type definition\n return fn;\n }\n});\n\nconst oktaUnderscore: OktaUnderscore = _ as OktaUnderscore;\nexport default oktaUnderscore;\n","import Backbone from 'backbone';\nimport _ from '../util/underscore-wrapper';\nimport View, {\n FrameworkViewOptions\n} from '../framework/View';\nimport TemplateUtil from '../util/TemplateUtil';\n\n// eslint-disable-next-line @typescript-eslint/no-empty-interface\nexport interface BaseViewOptions extends FrameworkViewOptions { }\n\nexport interface ConfirmOption {\n title: string;\n content: string;\n save?: () => void;\n ok?: () => void;\n cancel?: () => void;\n}\n\nexport declare class BaseViewClass extends View {\n constructor(options?: BaseViewOptions, ...rest: any[]);\n empty(): this;\n broadcast(...args: any[]): this;\n listen(name, fn): this;\n notify(level, message, options): this;\n confirm(subtitle: string, okfn): this;\n confirm(confirmOption: ConfirmOption): this;\n confirm(title, message, okfn, cancelfn): this;\n alert(params): this;\n module?: { id: string };\n decorate(TargetView): TargetView is BaseViewClass;\n}\nconst eventBus = _.clone(Backbone.Events);\n\n// add `broadcast` and `listen` functionality to all views\n// We use one event emitter per all views\n// This means we need to be very careful with event names\n\nconst proto = {\n constructor: function (options: BaseViewOptions, ...rest: any[]) {\n View.call(this, options, ...rest);\n this.module && this.$el.attr('data-view', this.module.id);\n },\n\n /**\n * @deprecated Use {@link #removeChildren}\n */\n empty: function (this: BaseViewClass) {\n return this.removeChildren();\n },\n\n compileTemplate: TemplateUtil.tpl,\n\n /**\n *\n * Broadcasts a global event that all views and controllers can subscribe to\n * for framework use only - prefer using a shared model\n *\n * @param {String} eventName A unique identifier for the event\n * @param {...String} param Parameter to pass with the event (can pass more than one parameter)\n * @deprecated For internal use only\n * @private\n */\n broadcast: function () {\n eventBus.trigger.apply(eventBus, arguments);\n return this;\n },\n\n /**\n * Subscribe to broadcast events\n * for framework use only - prefer using a shared model\n *\n * @param {String} eventName The event identifier to subscribe\n * @param {Function} fn The callback function to invoke\n * @deprecated For internal use only\n * @private\n */\n listen: function (this: BaseViewClass, name, fn): BaseViewClass {\n eventBus.off(name, fn);\n this.listenTo(eventBus, name, fn);\n return this;\n },\n\n /**\n * Shows a notification box\n * @param {String} level success / warning / error\n * @param {String} message The message to display\n * @param {Object} [options]\n * @param {Number} [options.width] Set a custom width\n * @param {String} [options.title] Set a custom title\n * @param {Boolean} [options.hide=true] Do we want to auto-hide this notification?\n * @param {Boolean} [options.dismissable] Show a dismiss button\n * @example\n * view.notify('success', 'Group created successfully');\n */\n notify: function (this: BaseViewClass, level, message, options) {\n this.broadcast('notification', _.defaults({ message: message, level: level }, options));\n return this;\n },\n\n /**\n * Shows a confirmation dialog\n *\n * Uses https://www.ericmmartin.com/projects/simplemodal/.\n * If you want to configure the simplemodal options use ConfirmationDialog instead.\n *\n * The main difference between this and the native javascript `confirm` method\n * Is this method is non blocking (note the callback pattern).\n *\n * The callback function will run in the context (`this`) of the invoking view.\n *\n * @param {String} [title] The title of the confirmation dialog\n * @param {String} [message] The message of the confirmation dialog\n * @param {Function} [okfn] The callback to run when the user hits \"OK\" (runs in the context of the invoking view)\n * @param {Function} [cancelfn] The callback to run when the user hits \"Cancel\"\n * (runs in the context of the invoking view)\n * @example\n * view.confirm('Delete Group', 'Are you sure you want to delete the selected group?', function () {\n * model.destroy();\n * });\n *\n * // title will be auto-set to \"Okta\"\n * view.confirm('Are you sure you want to delete the selected group?', function () {\n * model.destroy();\n * });\n *\n * view.confirm({\n * title: 'Delete Group', //=> Modal title\n * subtitle: 'Are you sure you want to delete the selected group?', //=> Modal subtitle\n * content: 'THIS WILL DELETE THE GROUP!
', //=> A template or a view to add to the modal\n * save: 'Delete Group', //=> Button label\n * ok: _.bind(model.save, model) // Callback function on hitting \"ok\" button\n * cancel: 'Cancel', //=> Button label\n * cancelFn: _.bind(model.destroy, model) // Callback function on hitting \"cancel\" button\n * });\n */\n confirm: function (this: BaseViewClass, title, message?, okfn?, cancelfn?) {\n let options;\n /* eslint max-statements: [2, 12] */\n\n if (typeof title === 'object') {\n options = title;\n } else {\n // eslint-disable-next-line no-lonely-if\n if (arguments.length === 2 && _.isFunction(message)) {\n options = {\n title: 'Okta', // eslint-disable-line @okta/okta/no-unlocalized-text\n subtitle: title,\n ok: message\n };\n } else {\n options = {\n title: title,\n subtitle: message,\n ok: okfn,\n cancelFn: cancelfn\n };\n }\n }\n if (_.isFunction(options.ok)) {\n options.ok = _.bind(options.ok, this);\n }\n if (_.isFunction(options.cancelFn)) {\n options.cancelFn = _.bind(options.cancelFn, this);\n }\n this.broadcast('confirmation', options);\n return this;\n },\n\n /**\n * Shows an alert box\n *\n * The main difference between this and the native javascript `alert` method\n * Is this method is non blocking.\n *\n * @param {String} message The message\n * @example\n * view.alert('Mission complete');\n */\n alert: function (params) {\n if (_.isString(params)) {\n params = {\n subtitle: params\n };\n }\n this.confirm(\n _.extend({}, params, {\n noCancelButton: true\n })\n );\n return this;\n }\n};\n\n/**\n * See {@link src/framework/View} for more detail and examples from the base class.\n * @class module:Okta.View\n * @extends src/framework/View\n */\n\n/** @lends module:Okta.View.prototype */\n\nexport default View.extend(\n proto,\n /** @lends View.prototype */ {\n /** @method */\n decorate: function (TargetView) {\n const BaseViewView = TargetView.extend({});\n\n _.defaults(BaseViewView.prototype, proto);\n return BaseViewView;\n }\n }\n) as typeof BaseViewClass;\n","import _ from '../../util/underscore-wrapper';\nimport Time from '../../util/Time';\nimport BaseView from '../BaseView';\nimport hbs from 'handlebars-inline-precompile';\n\nfunction getOption(callout, option) {\n return _.resultCtx(callout.options, option, callout) || _.result(callout, option);\n}\n\nfunction getTopClass(callout) {\n let klass = 'infobox clearfix infobox-' + getOption(callout, 'type');\n\n switch (getOption(callout, 'size')) {\n case 'standard':\n klass += '';\n break;\n case 'slim':\n klass += ' infobox-slim';\n break;\n case 'compact':\n klass += ' infobox-compact';\n break;\n case 'large':\n klass += ' infobox-md';\n break;\n }\n if (getOption(callout, 'dismissible')) {\n klass += ' infobox-dismiss';\n }\n return klass;\n}\n\nconst events = {\n 'click .infobox-dismiss-link': function (e) {\n e.preventDefault();\n this.$el.fadeOut(Time.UNLOADING_FADE, () => {\n this.trigger('dismissed');\n this.remove();\n });\n }\n};\nconst template = hbs('\\\n {{#if dismissible}}\\\n \\\n \\\n \\\n {{/if}}\\\n \\\n {{#if title}}{{title}}
{{/if}}\\\n {{#if subtitle}}{{subtitle}}
{{/if}}\\\n {{#if bullets}}\\\n \\\n {{#each bullets}}- {{this}}
{{/each}}\\\n
\\\n {{/if}}\\\n ');\nconst CalloutCallout = BaseView.extend(\n /** @lends src/views/components/Callout.prototype */ {\n attributes: {\n 'data-se': 'callout'\n },\n\n /**\n * Custom HTML or view to inject to the callout\n * @type {String|Okta.View}\n */\n content: null,\n\n /**\n * Size of icon. options are standard, large, compact\n * @type {String}\n */\n size: 'standard',\n\n /**\n * Type of the callout. Valid values are: info, success, warning, error, tip\n * @type {String}\n */\n type: 'info',\n\n /**\n * Can the callout be dismissed\n * @type {Boolean}\n */\n dismissible: false,\n\n /**\n * Callout title\n * @type {String}\n */\n title: null,\n\n /**\n * Callout subtitle\n * @type {String}\n */\n subtitle: null,\n\n /**\n * Array of strings to render as bullet points\n * @type {Array}\n */\n bullets: null,\n\n /**\n * Fired after the callout is dismised - applies when\n * {@link module:Okta.internal.views.components.Callout|dismissible} is set to true\n * @event src/views/components/Callout#dismissed\n */\n\n constructor: function () {\n this.events = _.defaults(this.events || {}, events);\n\n BaseView.apply(this, arguments);\n\n this.$el.addClass(getTopClass(this));\n\n this.template = template;\n\n const content = getOption(this, 'content');\n\n if (content) {\n this.add(content);\n }\n },\n\n getTemplateData: function () {\n let icon = getOption(this, 'type');\n\n const size = getOption(this, 'size');\n if (icon === 'tip') {\n // css is inconsistent\n icon = 'light-bulb';\n }\n switch (size) {\n case 'slim':\n icon = '';\n break;\n case 'large':\n icon = [icon, '-', '24'].join('');\n break;\n default:\n icon = [icon, '-', '16'].join('');\n }\n return {\n icon,\n title: getOption(this, 'title'),\n subtitle: getOption(this, 'subtitle'),\n bullets: getOption(this, 'bullets'),\n dismissible: getOption(this, 'dismissible')\n };\n }\n }\n);\n\n/**\n * @class src/views/components/Callout\n * @extends module:Okta.View\n */\n\n/**\n * @class module:Okta.internal.views.components.Callout\n */\nexport default /** @lends module:Okta.internal.views.components.Callout */ {\n /**\n * Creates a {@link src/views/components/Callout|Callout}.\n * @static\n * @param {Object} options\n * @param {String|Function} [options.size] Size of icon. options are standard, large, compact, slim\n * @param {String|Okta.View} [options.content] Custom HTML or view to inject to the callout\n * @param {String|Function} [options.title] Callout title\n * @param {String|Function} [options.subtitle] Callout subtitle\n * @param {Array|Function} [options.bullets] Array of strings to render as bullet points\n * @param {Boolean|Function} [options.dismissible] Can the callout be dismissed\n * @param {String|Function} [options.type] Callout type. Valid values are: info, success, warning, error, tip\n *\n * @return {src/views/components/Callout}\n */\n create: function (options) {\n return new CalloutCallout(options);\n }\n};\n","import $ from '../../util/jquery-wrapper';\nimport _ from '../../util/underscore-wrapper';\nimport StringUtil from '../../util/StringUtil';\nimport BaseView from '../BaseView';\nimport ReadModeBar from './components/ReadModeBar';\nimport Toolbar from './components/Toolbar';\nimport ErrorBanner from './helpers/ErrorBanner';\nimport ErrorParser, { ErrorResponse } from './helpers/ErrorParser';\nimport FormUtil from './helpers/FormUtil';\nimport {\n ContainerOptions, InputOptions, LabelOptions, WrapperOptions\n} from './types';\nimport InputContainer from './helpers/InputContainer';\nimport InputFactory from './helpers/InputFactory';\nimport InputLabel from './helpers/InputLabel';\nimport InputWrapper from './helpers/InputWrapper';\nimport SettingsModel from '../../util/SettingsModel';\nimport hbs from 'handlebars-inline-precompile';\nimport { _Result } from 'backbone';\n\ntype ButtonOrder = 'previous' | 'save' | 'cancel';\n\nexport declare class BaseFormConstructor extends BaseView {\n input: any[];\n\n template: any;\n\n read: boolean;\n\n readOnly: boolean;\n\n noButtonBar: boolean;\n\n noCancelButton: boolean;\n\n noSubmitButton: boolean;\n\n buttonOrder: ButtonOrder[];\n\n save: string | null;\n\n cancel: string | null;\n\n danger: _Result;\n\n layout: _Result;\n\n step: number;\n\n totalSteps: number;\n\n title: string | null;\n\n subtitle: string | null;\n\n autoSave: boolean;\n\n scrollOnError: _Result;\n\n showErrors: _Result;\n\n resizeSelector: string;\n getAttribute(name, defaultValue?);\n hasReadMode(): boolean;\n isReadOnly(): boolean;\n hasButtonBar(): boolean;\n\n isValid(): boolean;\n __setSavingState();\n __clearSavingState();\n __toggleToolbar();\n __save();\n __cancel();\n __previous();\n __applyMode();\n _editMode();\n\n parseErrorMessage();\n _handleErrorScroll();\n __showErrors();\n clearErrors();\n toggle();\n __addLayoutItem();\n __addNonInputLayoutItem();\n addButton();\n addDivider();\n addSectionTitle();\n addInput(options: any);\n __createInput();\n __createWrapper();\n __createLabel();\n _createContainer();\n __saveModelState();\n add();\n focus();\n disable();\n enable();\n contentHeight();\n getInputs();\n __createToolbar();\n}\n\nconst template = hbs`\n {{#if hasReadMode}}\n \n {{title}}\n
\n {{/if}}\n \n {{#unless hasReadMode}}\n {{#if title}}\n {{title}}
\n {{/if}}\n {{/unless}}\n {{#if subtitle}}\n {{subtitle}}
\n {{/if}}\n \n \n \n `;\n\nconst sectionTitleTemplate = hbs`{{title}}
`;\n\nconst pointerEventsSupported = $('').css({ 'pointer-events': 'auto' })[0].style.pointerEvents === 'auto';\n\n// polyfill for `pointer-events: none;` in IE < 11\n// Logic borrowed from https://github.com/kmewhort/pointer_events_polyfill (BSD)\n\nfunction pointerEventsPolyfill(e) {\n if (!pointerEventsSupported && this.$el.hasClass('o-form-saving')) {\n const $el = $(e.currentTarget);\n\n $el.css('display', 'none');\n const underneathElem = document.elementFromPoint(e.clientX, e.clientY);\n\n $el.css('display', 'block');\n\n e.target = underneathElem;\n $(underneathElem!).trigger(e);\n\n return false;\n }\n}\n\nconst events = {\n submit: function (e) {\n e.preventDefault();\n this.__save();\n }\n};\n\n_.each(['click', 'dblclick', 'mousedown', 'mouseup'], function (event) {\n events[event + ' .o-form-input'] = pointerEventsPolyfill;\n});\n\nconst attributes = function (model) {\n model || (model = {});\n const collection = (model && model.collection) || {};\n\n return {\n method: 'POST',\n action: _.result(model, 'urlRoot') || _.result(collection, 'url') || window.location.pathname,\n 'data-se': 'o-form',\n slot: 'content'\n };\n};\n\nconst convertSavingState = function (rawSavingStateEvent, defaultEvent) {\n rawSavingStateEvent || (rawSavingStateEvent = '');\n let savingStateEvent: string[] = [];\n\n if (_.isString(rawSavingStateEvent)) {\n savingStateEvent = rawSavingStateEvent.split(' ');\n }\n savingStateEvent = _.union(savingStateEvent, defaultEvent);\n return savingStateEvent.join(' ');\n};\n\nconst getErrorSummary = function (responseJSON: ErrorResponse = {}) {\n if (Array.isArray(responseJSON.errorCauses) && responseJSON.errorCauses.length > 0) {\n //set errorSummary from first errorCause which is not field specific error\n return responseJSON.errorCauses[0].errorSummary;\n } else {\n //set errorSummary from top level errorSummary\n return responseJSON.errorSummary;\n }\n};\n/**\n * A Form utility framework\n *\n * Okta.Form is a form that operates on one flat model\n * It exposes one main factory method, {@link module:Okta.Form#addInput|addInput}, which add inputs to the form,\n * and each input operates on one field in the model, identified by the `name` field.\n *\n * See:\n * [Basic O-Form Tutorial](https://github.com/okta/courage/wiki/Basic-O-Form)\n *\n * @class module:Okta.Form\n * @extends module:Okta.View\n * @param {Object} options options hash (See {@link module:Okta.View|View})\n * @param {Object} options.model the model this form operates on\n * @param {Boolean} [options.label-top=false] position label on top of inputs\n * @param {Boolean} [options.wide=false] Use a wide input layout for all input\n */\n\n/**\n * Fired when the \"Save\" button is clicked\n * @event module:Okta.Form#save\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired after the model is successfully saved - applies when {@link module:Okta.Form#autoSave|autoSave}\n * is set to true\n * @event module:Okta.Form#saved\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the model fires an invalid event or an error event;\n * @event module:Okta.Form#error\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the form layout is likely to be resized\n * @event module:Okta.Form#resize\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the \"Cancel\" button is clicked\n * @event module:Okta.Form#cancel\n */\n\nexport default BaseView.extend(\n /** @lends module:Okta.Form.prototype */ {\n /**\n * Specifies how to validate form:\n * - In case \"local\" string provided as a value of the property,\n * the form will validate only fields added as inputs to the form;\n * - In case array is provided, the validation will be performed only for fields specified in array;\n * - In case function is provided, provided function will be used as a validation function,\n * it must return an error object with the format {fieldName: 'error text'} with as many fields as you need.\n * @name validate\n * @memberof module:Okta.Form\n * @type {String|Array|Function}\n * @instance\n */\n\n constructor: function (options) {\n /* eslint max-statements: 0, complexity: 0 */\n options || (options = {});\n this.options = options;\n\n if (options.settings) {\n this.settings = options.settings;\n } else {\n this.settings = options.settings = new SettingsModel();\n }\n\n this.id = _.uniqueId('form');\n this.tagName = 'form';\n\n _.defaults(this.events, events);\n _.defaults(this.attributes, attributes(options.model));\n\n this.__buttons = [];\n this.__errorFields = {};\n\n this.__saveModelState(options.model);\n\n const step = _.result(this, 'step');\n if (step) {\n // checking exists of `this.save` hence don't have to change to\n // `_.result(this, 'save')` which will execute the function and\n // is not the intent.\n if (!this.save) {\n const totalStep = _.result(this, 'totalSteps');\n this.save = (\n (!totalStep || step === totalStep)\n ? StringUtil.localize('oform.button.finish', 'courage')\n : StringUtil.localize('oform.button.next', 'courage')\n );\n }\n this.className = _.result(this, 'className') + ' wizard';\n }\n this.className = _.result(this, 'className') + ' o-form';\n\n this.__toolbar = this.__createToolbar(options);\n\n BaseView.call(this, options);\n\n _.each(\n _.result(this, 'inputs') || [],\n function (input) {\n // to ingore extra argumests from `each` iteratee function\n // http://underscorejs.org/#each\n this.__addLayoutItem(input);\n },\n this\n );\n\n this.add(this.__toolbar, '');\n\n // NOTES: this.model shall be initialized after calling\n // super (BaseView.call(this, options)) above.\n //\n this.listenTo(this.model, 'change:__edit__', this.__applyMode);\n\n this.listenTo(\n this.model,\n 'invalid error',\n _.throttle(\n function (model, resp, showBanner) {\n this.__showErrors(model, resp, showBanner !== false);\n },\n 100,\n { trailing: false }\n )\n );\n\n this.listenTo(this.model, 'form:resize', function () {\n this.trigger('resize');\n });\n\n this.listenTo(this.model, 'form:cancel', _.throttle(this.__cancel, 100, { trailing: false }));\n this.listenTo(this.model, 'form:previous', _.throttle(this.__previous, 100, { trailing: false }));\n\n this.__save = _.throttle(this.__save, 200, { trailing: false });\n this.listenTo(this.model, 'form:save', function () {\n this.$el.submit();\n });\n\n this.listenTo(this.model, 'sync', function () {\n if (this.model.get('__edit__')) {\n this.model.set('__edit__', false, { silent: true });\n }\n this.__saveModelState(this.model);\n this.render();\n });\n\n let hasSavingState = this.getAttribute('hasSavingState');\n\n if (this.getAttribute('autoSave')) {\n this.listenTo(this, 'save', function (model) {\n const xhr = model.save();\n\n if (xhr && xhr.done) {\n xhr.done(() => {\n this.trigger('saved', model);\n });\n }\n });\n if (_.isUndefined(hasSavingState)) {\n hasSavingState = true;\n }\n }\n\n /*\n * Attach model event listeners\n * by default, model's request event starts the form saving state,\n * error and sync event stops it\n * you can define customized saving start and stop state, like\n * customSavingState: {start: 'requestingAdditionalInfo', stop: 'retrievedAdditionalInfo'}\n * doing this does not override the default events\n */\n if (hasSavingState) {\n const customSavingState = this.getAttribute('customSavingState', {});\n\n this.listenTo(\n this.model,\n convertSavingState(customSavingState.start || '', ['request']),\n this.__setSavingState\n );\n this.listenTo(\n this.model,\n convertSavingState(customSavingState.stop || '', ['error', 'sync']),\n this.__clearSavingState\n );\n }\n },\n\n /**\n * Create the bottom button bar\n * @param {Object} options options h\n * @return {Okta.View} The toolbar\n * @private\n */\n __createToolbar: function (options) {\n const danger = this.getAttribute('danger');\n const saveBtnClassName = danger === true ? 'button-error' : 'button-primary';\n const step = _.result(this, 'step');\n const toolbar = new Toolbar(\n _.extend(\n {\n save: this.save || StringUtil.localize('oform.save', 'courage'),\n saveId: this.saveId,\n saveClassName: saveBtnClassName,\n cancel: this.cancel || StringUtil.localize('oform.cancel', 'courage'),\n noCancelButton: this.noCancelButton || false,\n noSubmitButton: this.noSubmitButton || false,\n buttonOrder: this.buttonOrder,\n hasPrevStep: step && step > 1\n },\n options || this.options\n )\n );\n\n _.each(this.__buttons, function (args) {\n toolbar.addButton.apply(toolbar, args);\n });\n\n return toolbar;\n },\n\n className: '',\n\n attributes: {},\n\n events: {},\n\n /**\n * An array of input configurations to render in the form\n * @type {Array}\n */\n inputs: [],\n\n template: null,\n\n /**\n * Does the form support read/edit toggle.\n * @type {Boolean|Function}\n * @default false\n */\n read: false,\n\n /**\n * Is the form in readOnly mode.\n * @type {Boolean|Function}\n * @default false\n */\n readOnly: false,\n\n /**\n * Should we not render the button bar\n * @type {Boolean|Function}\n * @default false\n */\n noButtonBar: false,\n\n /**\n * Should we not render a cancel button\n * @type {Boolean|Function}\n * @default false\n */\n noCancelButton: false,\n\n /**\n * Should we not render a save button\n * @type {Boolean}\n * @default false\n */\n noSubmitButton: false,\n\n /**\n * Set the order of the save, cancel and previous buttons (left to right).\n * @type {Array.}\n * @default ['previous', 'save', 'cancel']\n */\n buttonOrder: ['previous', 'save', 'cancel'],\n\n /**\n * The text on the save button\n * @type {String}\n * @default \"Save\"\n */\n save: null,\n\n /**\n * The text on the cancel button\n * @type {String}\n * @default \"Cancel\"\n */\n cancel: null,\n\n /**\n * To use button-error to style the submit button instead of button-primary.\n * @type {Boolean|Function}\n * @default false\n */\n danger: false,\n\n /**\n * A layout CSS class to add to the form\n * @type {String|Function}\n * @default \"\"\n */\n layout: '',\n\n /**\n * The step this form is in the context of a wizard\n * @type {Number}\n */\n step: undefined,\n\n /**\n * The total numbers of steps the wizard this form is a part of has\n * @type {Number}\n */\n totalSteps: undefined,\n\n /**\n * The form's title\n * @type {String|Function}\n */\n title: null,\n\n /**\n * The form's subtitle\n * @type {String|Function}\n */\n subtitle: null,\n\n /**\n * Auto-save the model when hitting save. Triggers a `saved` event when done\n * @type {Boolean}\n * @default false\n */\n autoSave: false,\n\n /**\n * Scroll to the top of the form on error\n * @type {Boolean|Function}\n * @default true\n */\n scrollOnError: true,\n\n /**\n * Show the error banner upon error\n * @type {Boolean|Function}\n * @default true\n */\n showErrors: true,\n\n /**\n * The form's scrollable area\n * @type {String}\n * @default \".o-form-content\"\n */\n resizeSelector: '.o-form-content',\n\n /**\n * Sets whether or not the form shows the saving state when\n * the model is saved. Has no effect on setSavingState and clearSavingState as those are manual calls\n * to trigger/clear the saving state.\n * @name hasSavingState\n * @memberof module:Okta.Form\n * @type {Boolean}\n * @default false\n * @instance\n */\n\n /**\n * Get an attribute value from options or instance.\n * Prefer options value over instance value\n * @param {String} name Name of the attribute\n * @param {Object} defaultValue the default value to return if the attribute is not found\n * @return {Object} The value\n */\n getAttribute: function (name, defaultValue) {\n let value = _.resultCtx(this.options, name, this);\n\n if (_.isUndefined(value)) {\n value = _.result(this, name);\n }\n return !_.isUndefined(value) ? value : defaultValue;\n },\n\n /**\n * Does this form have a \"read\" mode\n * @return {Boolean}\n */\n hasReadMode: function () {\n return !!this.getAttribute('read');\n },\n\n /**\n * Is this form in \"read only\" mode\n * @return {Boolean}\n */\n isReadOnly: function () {\n return !!this.getAttribute('readOnly');\n },\n\n /**\n * Does this form have a button bar\n * @return {Boolean}\n */\n hasButtonBar: function () {\n return !(this.getAttribute('noButtonBar') || this.isReadOnly());\n },\n\n render: function () {\n this.__readModeBar && this.__readModeBar.remove();\n if (this.hasReadMode() && !this.isReadOnly()) {\n const readModeBar = ReadModeBar.extend({\n formTitle: this.getAttribute('title', '')\n });\n\n this.__readModeBar = this.add(readModeBar, '.o-form-title-bar').last();\n }\n\n const html = template({\n layout: this.getAttribute('layout', ''),\n title: this.getAttribute('title', '', true),\n subtitle: this.getAttribute('subtitle', '', true),\n hasReadMode: this.hasReadMode()\n });\n\n this.$el.html(html);\n delete this.template;\n\n BaseView.prototype.render.apply(this, arguments);\n\n this.__applyMode();\n\n return this;\n },\n\n /**\n * Changes form UI to indicate saving. Disables all inputs and buttons. Use this function if you have set\n * hasSavingState to false on the the form\n * @private\n */\n __setSavingState: function () {\n this.model.trigger('form:set-saving-state');\n this.$el.addClass('o-form-saving');\n },\n\n /**\n * Changes form UI back to normal from the saving state. Use this function if you are have set hasSavingState\n * to false on the form\n * @private\n */\n __clearSavingState: function () {\n this.model.trigger('form:clear-saving-state');\n this.$el.removeClass('o-form-saving');\n },\n\n /**\n * Toggles the visibility of the bottom button bar\n * @private\n */\n __toggleToolbar: function () {\n this.__toolbar && this.__toolbar.remove();\n if (this.hasButtonBar() && this._editMode()) {\n this.__toolbar = this.__createToolbar();\n this.add(this.__toolbar, '');\n }\n this.trigger('resize');\n },\n\n /**\n * Cancels this form\n * - Reset the model to the previous state\n * - Clears all errors\n * - Triggers a `cancel` event\n * - Sets the model to read mode (if applicable)\n * @private\n * @fires cancel\n */\n __cancel: function () {\n const edit = this.model.get('__edit__');\n /* eslint max-statements: [2, 12] */\n\n this.model.clear({ silent: true });\n let data;\n\n if (this.model.sanitizeAttributes) {\n data = this.model.sanitizeAttributes(this.__originalModel);\n } else {\n data = _.clone(this.__originalModel);\n }\n this.model.set(data, { silent: true });\n this.trigger('cancel', this.model);\n this.model.trigger('cache:clear');\n if (edit) {\n this.model.set('__edit__', false, { silent: true });\n this.model.trigger('change:__edit__', this.model, false);\n }\n this.clearErrors();\n },\n\n /**\n * Runs {@link module:Okta.Form#validate|validate} to check the model state.\n * Triggers an \"invalid\" event on the model if validation fails\n * @returns {Boolean}\n */\n isValid: function () {\n let res;\n const self = this;\n\n function validateArray(arr) {\n return _.reduce(\n arr,\n function (memo, fieldName) {\n return _.extend(memo, self.model.validateField(fieldName));\n },\n {}\n );\n }\n\n if (_.isUndefined(this.validate)) {\n return this.model.isValid();\n } else if (_.isFunction(this.validate)) {\n res = this.validate();\n } else if (_.isArray(this.validate)) {\n res = validateArray(this.validate);\n } else if (this.validate === 'local') {\n res = validateArray(\n this.getInputs().map(function (input) {\n return input.options.name;\n })\n );\n }\n\n if (!_.isEmpty(res)) {\n this.model.trigger('invalid', this.model, res);\n return false;\n } else {\n return true;\n }\n },\n\n /**\n * A throttled function that saves the form not more than once every 100 ms\n * Basically all this method does is trigger a `save` event\n * @fires save\n * @private\n */\n __save: function () {\n this.clearErrors();\n if (this.isValid()) {\n this.trigger('save', this.model);\n }\n },\n\n /**\n * In the context of a wizard, go to previous state\n * Technically all this method does is trigger a `previous` event\n * @param {Event} e\n * @private\n */\n __previous: function () {\n this.trigger('previous', this.model);\n },\n\n /**\n * Renders the form in the correct mode based on the model.\n * @private\n */\n __applyMode: function () {\n this.clearErrors();\n this.__toggleToolbar();\n\n if (this._editMode()) {\n this.$el.addClass('o-form-edit-mode');\n this.$el.removeClass('o-form-read-mode');\n this.$('.o-form-content').removeClass('rounded-btm-4');\n this.focus();\n } else {\n this.$el.removeClass('o-form-edit-mode');\n this.$el.addClass('o-form-read-mode');\n this.$('.o-form-content').addClass('rounded-btm-4');\n }\n },\n\n /**\n * Is the form in edit mode\n * @return {Boolean}\n * @private\n */\n _editMode: function () {\n return this.model.get('__edit__') || !this.hasReadMode();\n },\n\n /**\n * Function can be overridden to alter top level error summary.\n * @param {Object} responseJSON\n *\n * @example\n * // responseJSON object\n * {\n * errorCauses: [{errorSummary: \"At least one of Proxy Status, Location, or ASN should be configured.\"}]\n * errorSummary: \"At least one of Proxy Status, Location, or ASN should be configured.\"\n * errorCode: \"E0000001\"\n * errorId: \"oaepsrTCHrhT-eIi8XTm6KWWg\"\n * errorLink: \"E0000001\"\n * errorSummary: \"Api validation failed: networkZone\"\n * }\n *\n * @method\n * @default _.identity\n */\n parseErrorMessage: _.identity,\n\n _handleErrorScroll: function () {\n if (!this.getAttribute('scrollOnError')) { return; }\n const $el = $('#' + this.id + ' .o-form-error-container');\n\n if ($el.length) {\n let $scrollContext = $el.scrollParent();\n let scrollTop;\n\n // scrollParent was almost awesome...\n // but it returns document if there are no other scrollable parents\n // document does not have offset, so here we have to replace with html, body\n // Additionally when the scroll context is html, body, $el.offset().top is fixed\n // versus when it has a different scroll context it's dynamic and requires the\n // calculation below.\n if ($scrollContext[0] as unknown as any === document) {\n $scrollContext = $('html, body');\n scrollTop = $el.offset()!.top;\n } else {\n scrollTop = $scrollContext.scrollTop()! + $el.offset()!.top - $scrollContext.offset()!.top;\n }\n\n $scrollContext.animate({ scrollTop }, 400);\n }\n },\n\n /**\n * Show an error message based on an XHR error\n * @param {Okta.BaseModel} model the model\n * @param {jqXHR} xhr The jQuery XmlHttpRequest Object\n * @private\n */\n __showErrors: function (model, resp, showBanner) {\n this.trigger('error', model);\n\n /* eslint max-statements: 0 */\n if (!this.getAttribute('showErrors')) {\n return;\n }\n\n let errorSummary;\n let responseJSON = ErrorParser.getResponseJSON(resp);\n const validationErrors = ErrorParser.parseFieldErrors(resp);\n\n // trigger events for field validation errors\n if (_.size(validationErrors!)) {\n _.each(\n validationErrors!,\n function (errors: string[], field) {\n this.model.trigger(\n 'form:field-error',\n this.__errorFields[field] || field,\n _.map(errors!, function (error) {\n return /^model\\.validation/.test(error) ? StringUtil.localize(error, 'courage') : error;\n })\n );\n },\n this\n );\n } else {\n responseJSON = this.parseErrorMessage(responseJSON);\n errorSummary = getErrorSummary(responseJSON);\n }\n\n // show the error message\n if (showBanner) {\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(ErrorBanner, '.o-form-error-container', { options: { errorSummary: errorSummary } });\n }\n\n // slide to and focus on the error message\n this._handleErrorScroll();\n\n this.model.trigger('form:resize');\n },\n\n /**\n * Clears the error banner\n * @private\n */\n clearErrors: function () {\n this.$('.o-form-error-container').removeClass('o-form-has-errors');\n this.model.trigger('form:clear-errors');\n this.model.trigger('form:resize');\n },\n\n /**\n * Toggles between edit and read mode\n */\n toggle: function () {\n this.model.set('__edit__', !this.hasReadMode() || !this.model.get('__edit__'));\n return this;\n },\n\n __addLayoutItem: function (input) {\n if (InputFactory.supports(input)) {\n this.addInput(input);\n } else {\n this.__addNonInputLayoutItem(input);\n }\n },\n\n __addNonInputLayoutItem: function (item) {\n const itemOptions = _.omit(item, 'type');\n\n switch (item.type) {\n case 'sectionTitle':\n this.addSectionTitle(item.title, _.omit(itemOptions, 'title'));\n break;\n case 'divider':\n this.addDivider(itemOptions);\n break;\n default:\n throw new Error('unknown input: ' + item.type);\n }\n },\n\n /**\n * Adds a view to the buttons tool bar\n * @param {Object} params parameterized button options\n * @param {Object} options options to send to {@link module:Okta.View#add|View.add}\n */\n addButton: function (params, options) {\n this.__toolbar && this.__toolbar.addButton(params, options);\n this.__buttons.push([params, options]);\n },\n\n /**\n * Adds a divider\n */\n addDivider: function (options) {\n this.add('');\n FormUtil.applyShowWhen(this.last(), options && options.showWhen);\n FormUtil.applyToggleWhen(this.last(), options && options.toggleWhen);\n return this;\n },\n\n /**\n * Adds section header\n * @param {String} title\n */\n addSectionTitle: function (title, options) {\n this.add(sectionTitleTemplate({ title: title }));\n FormUtil.applyShowWhen(this.last(), options && options.showWhen);\n FormUtil.applyToggleWhen(this.last(), options && options.toggleWhen);\n return this;\n },\n\n /**\n * Add a form input\n * @param {Object} options Options to describe the input\n * @param {String} options.type The input type.\n * The options are: `text`, `textarea`, `select`, `checkbox`, `radio`, `switch`,\n * `password`, `number`, `textselect`, `date`, `grouppicker`, `admingrouppicker`, `su-orgspicker`\n * `file/image`, `file/cert`, `checkboxset`, `list`, `group`, `zonepicker`\n * @param {String} options.name The name of the model field this input mutates\n * @param {String|Function} [options.label]\n * The input label text.\n * When passed as a function, will invoke the function (in the context of the {@link InputLabel})\n * on render time, and use the returned value.\n * @param {String} [options.sublabel] The input sub label text\n * @param {String} [options.tooltip] A popover tooltip to be displayed next to the label\n * @param {String} [options.placeholder] Placeholder text.\n * @param {String} [options.explain] Explanation text to render below the input\n * @param {Okta.View} [options.customExplain] A custom view to render below the input (deprecated)\n * @param {Boolean} [options.disabled=false] Make this input disabled\n * @param {Boolean} [options.wide=false] Use a wide input layout\n * @param {Boolean} [options.label-top=false] position label on top of an input\n * @param {Boolean} [options.explain-top=false] position explain on top of an input (requires label-top=true)\n * @param {Number} [options.multi] have multiple in-line inputs. useful when `input` is passed as an array of inputs\n * @param {String} [options.errorField] The API error field here that maps to this input\n * @param {Boolean} [options.inlineValidation=true] Validate input on focusout\n * @param {String} [options.ariaLabel] Used to add aria-label attribute to the input when label is not present.\n * @param {Boolean} [options.group=false] Grouping set of inputs using fieldset and legend. Mainly for radio\n * @param {Object} [options.options]\n * In the context of `radio` and `select`, a key/value set of options\n *\n * @param {Object} [options.params]\n * Widget specific parameters. Varies per input.\n *\n * @param {BaseInput|Object[]} [options.input]\n * - A custom input \"class\" or instance - preferably a **class**, so we can automagically assign the right\n * parameters when initializing it\n * - An array of input definition object literals (such as this one)\n *\n * @param {Object} [options.showWhen]\n * Setting to define when to show (or hide) the input. The input is visible by default.\n *\n * @param {Object} [options.bindings]\n * Bind a certain model attribute to a callback function, so the function is being called on render,\n * and any time this model field changes.\n * This is similar to `showWhen` but is not limited to toggling.\n *\n * @param {Function} [options.render]\n * A post-render hook that will run upon render on InputWrapper\n *\n * @param {String|Function} className A className to apply on the {@link InputWrapper}\n *\n * @param {Function} [options.initialize]\n * An `initialize` function to run when initializing the {@link InputWrapper}\n * Useful for state mutation on start time, and complex state logic\n *\n * @example\n * // showhen: the field will be visible when `advanced` is set to `true`\n * // and `mode` is set to `\"ON\"`.\n * showWhen: {\n * 'advanced': true,\n * 'mode': function (value) {\n * return value == 'ON'; // this is identical to this.model.get('mode') == 'ON'\n * }\n * }\n *\n * @example\n * // bindings\n * bindings: {\n * 'status mode': function (status, mode) {\n * var labelView = this.getLabel();\n * if (status == 1) {\n * labelView.options.label = 'Something';\n * }\n * else {\n * labelView.options.label = mode;\n * }\n * labelView.render();\n * }\n * }\n */\n addInput: function (_options: InputOptions) {\n _options = _.clone(_options);\n\n FormUtil.validateInput(_options, this.model);\n\n const inputsOptions = FormUtil.generateInputOptions(_options, this, this.__createInput).reverse();\n\n // We need a local variable here to keep track\n // as addInput can be called either directy or through the inputs array.\n if (_.isEmpty(this.getInputs().toArray())) {\n _.extend(inputsOptions[0], { validateOnlyIfDirty: true });\n }\n\n const inputs = _.map(inputsOptions, this.__createInput, this);\n\n _.each(\n inputsOptions,\n function (input) {\n if (input.errorField) {\n this.__errorFields[input.errorField] = input.name;\n }\n },\n this\n );\n\n const options: ContainerOptions = {\n inputId: _.last(inputs).options.inputId,\n input: inputs,\n multi: inputsOptions.length > 1 ? inputsOptions.length : undefined\n };\n\n _.extend(options, _.omit(this.options, 'input'), _.omit(_options, 'input'));\n\n const inputWrapper = this.__createWrapper(options);\n\n if (options.label !== false) {\n inputWrapper.add(this.__createLabel(options));\n }\n inputWrapper.add(this._createContainer(options));\n\n // TODO: there may be a bug here.\n // options.input will always be an array, so options.input.type will always be undefined\n // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n /// @ts-ignore\n inputWrapper.type = options.type || options.input.type || 'custom';\n\n const args = [inputWrapper].concat(_.rest(arguments));\n\n return this.add.apply(this, args);\n },\n\n /**\n * @private\n */\n __createInput: function (options: InputOptions) {\n options = _.pick(options, FormUtil.INPUT_OPTIONS);\n return InputFactory.create(options);\n },\n\n /**\n * @private\n */\n __createWrapper: function (options: WrapperOptions) {\n options = _.pick(options, FormUtil.WRAPPER_OPTIONS);\n return new InputWrapper(options);\n },\n\n /**\n * @private\n */\n __createLabel: function (options: LabelOptions) {\n options = _.pick(options, FormUtil.LABEL_OPTIONS);\n return new InputLabel(options);\n },\n\n /**\n * @private\n */\n _createContainer: function (options: ContainerOptions) {\n options = _.pick(options, FormUtil.CONTAINER_OPTIONS);\n return new InputContainer(options);\n },\n\n /**\n * Stores the current attributes of the model to a private property\n * @param {Okta.BaseModel} model The model\n * @private\n */\n __saveModelState: function (model) {\n this.__originalModel = $.extend(true, {}, model.attributes);\n },\n\n /**\n * @override\n * @ignore\n */\n add: function (...args) {\n // sets a default element selector\n typeof args[1] === 'undefined' && (args[1] = '> div.o-form-content > .o-form-fieldset-container');\n return BaseView.prototype.add.apply(this, args);\n },\n\n /**\n * Set the focus on the first input in the form\n */\n focus: function () {\n const first = this.getInputs().first();\n\n if (first && first.focus) {\n first.focus();\n }\n return this;\n },\n\n /**\n * Disable all inputs in the form\n * @deprecated not currently in use\n */\n disable: function () {\n this.invoke('disable');\n return this;\n },\n\n /**\n * Enable all inputs in the form\n * @deprecated not currently in use\n */\n enable: function () {\n this.invoke('enable');\n },\n\n /**\n * Set the max-height for o-form-content class container within the form if a height is provided,\n * otherwise, get its computed inner height\n * @param {Number} the height in pixel to set for class o-form-content\n * @return {Number}\n */\n contentHeight: function (height) {\n const content = this.$('.o-form-content');\n\n if (_.isNumber(height)) {\n content.css('max-height', height);\n } else {\n return content.height();\n }\n },\n\n /**\n * Get only the input children\n * @return {InputWrapper[]} An underscore wrapped array of {@link InputWrapper} instances\n */\n getInputs: function () {\n return _(\n this.filter(function (view) {\n return view instanceof InputWrapper;\n })\n );\n }\n }\n) as typeof BaseFormConstructor;\n","/* eslint-env es6 */\n/* eslint max-statements: [2, 17] */\nimport hbs from 'handlebars-inline-precompile';\nimport $ from '../../util/jquery-wrapper';\nimport _ from '../../util/underscore-wrapper';\nimport ButtonFactory from '../../util/ButtonFactory';\nimport StringUtil from '../../util/StringUtil';\nimport BaseView from '../BaseView';\nimport Callout from '../components/Callout';\n\nexport declare class BaseInputClass extends BaseView {\n defaultPlaceholder: string;\n addAriaLabel();\n addInlineValidation();\n toModelValue();\n getCalloutParent();\n showCallout(calloutConfig, dependencyResolved);\n removeCallout();\n update();\n isEditMode(): boolean;\n render(): this;\n validate();\n addModelListeners();\n val();\n focus();\n defaultValue();\n editMode();\n readMode();\n getReadModeString();\n getModelValue();\n toStringValue();\n resize(): void;\n disable(): void;\n enable(): void;\n changeType(type): void;\n getNameString(): string;\n getParams(options);\n getParam(key, defaultValue);\n getParamOrAttribute(key);\n\n _isEdited: boolean;\n __getDependencyCalloutBtn(btnConfig)\n __getCalloutMsgContainer(calloutMsg);\n __evaluateCalloutObject(dependencyResolved, calloutTitle);\n __handleDependency(result, callout);\n __showInputDependencies();\n __markError();\n __clearError();\n}\n\nconst props = {\n tagName: 'span',\n\n attributes: function () {\n return {\n 'data-se': 'o-form-input-' + this.getNameString()\n };\n },\n\n /**\n * default placeholder text when options.placeholder is not defined\n */\n defaultPlaceholder: '',\n\n constructor: function (options) {\n /* eslint complexity: [2, 7] */\n options = _.defaults(options || {}, {\n inputId: options.id || _.uniqueId('input'),\n placeholder: this.defaultPlaceholder,\n inlineValidation: true,\n validateOnlyIfDirty: false\n });\n\n delete options.id;\n\n // decorate the `enable` and `disable` and toggle the `o-form-disabled` class.\n // so we wont need to worry about this when overriding the methods\n const self = this;\n\n _.each({ enable: 'removeClass', disable: 'addClass' }, function (method, action) {\n self[action] = _.wrap(self[action], function (fn) {\n fn.apply(self, arguments);\n self.$el[method]('o-form-disabled');\n });\n });\n\n BaseView.call(this, options);\n\n if (_.result(options, 'readOnly') !== true && _.result(options, 'read') === true) {\n this.listenTo(this.model, 'change:__edit__', this.render);\n }\n\n if (_.isFunction(this.focus)) {\n this.focus = _.debounce(_.bind(this.focus, this), 50);\n }\n\n // Enable inline validation if this is not the first field in the form.\n if (!_.result(options, 'validateOnlyIfDirty')) {\n this.addInlineValidation();\n }\n\n this.addModelListeners();\n this.$el.addClass('o-form-input-name-' + this.getNameString());\n },\n\n addAriaLabel: function () {\n const ariaLabel = this.options.ariaLabel;\n\n if (ariaLabel) {\n this.$(':input').attr('aria-label', ariaLabel);\n }\n },\n\n addInlineValidation: function () {\n if (_.result(this.options, 'inlineValidation')) {\n this.$el.on('focusout', ':input', _.bind(this.validate, this));\n }\n },\n\n toModelValue: function () {\n let value = this.val();\n\n if (_.isFunction(this.to)) {\n value = this.to.call(this, value);\n }\n if (_.isFunction(this.options.to)) {\n value = this.options.to.call(this, value);\n }\n return value;\n },\n\n __getDependencyCalloutBtn: function (btnConfig) {\n const self = this;\n\n const btnOptions = _.clone(btnConfig);\n\n const originalClick = btnOptions.click || function () {};\n // add onfocus listener to re-evaluate depedency when callout button is clicked\n\n btnOptions.click = function () {\n $(window).one('focus.dependency', function () {\n self.__showInputDependencies();\n });\n originalClick.call(self);\n };\n const BaseInputCalloutBtn = BaseView.extend({\n children: [ButtonFactory.create(btnOptions)]\n });\n\n return new BaseInputCalloutBtn();\n },\n\n getCalloutParent: function () {\n return this.$('input[value=\"' + this.getModelValue() + '\"]').parent();\n },\n\n __getCalloutMsgContainer: function (calloutMsg) {\n return BaseView.extend({\n template: hbs('\\\n \\\n {{msg}}\\\n \\\n '),\n getTemplateData: function () {\n return {\n msg: calloutMsg\n };\n }\n });\n },\n\n showCallout: function (calloutConfig, dependencyResolved) {\n const callout = _.clone(calloutConfig);\n\n callout.className = 'dependency-callout';\n if (callout.btn) {\n callout.content = this.__getDependencyCalloutBtn(callout.btn);\n delete callout.btn;\n }\n const dependencyCallout = Callout.create(callout);\n\n if (!dependencyResolved) {\n dependencyCallout.add(this.__getCalloutMsgContainer(StringUtil.localize('dependency.callout.msg', 'courage')));\n }\n const calloutParent = this.getCalloutParent();\n\n calloutParent.append(dependencyCallout.render().el);\n if (callout.type === 'success') {\n _.delay(function () {\n // fade out success callout\n dependencyCallout.$el.fadeOut(800);\n }, 1000);\n }\n },\n\n removeCallout: function () {\n this.$el.find('.dependency-callout').remove();\n },\n\n __evaluateCalloutObject: function (dependencyResolved, calloutTitle) {\n let defaultCallout;\n\n if (dependencyResolved) {\n defaultCallout = {\n title: StringUtil.localize('dependency.action.completed', 'courage'),\n size: 'large',\n type: 'success'\n };\n } else {\n defaultCallout = {\n title: StringUtil.localize('dependency.action.required', 'courage', [calloutTitle]),\n size: 'large',\n type: 'warning'\n };\n }\n return defaultCallout;\n },\n\n __handleDependency: function (result, callout) {\n const self = this;\n const calloutConfig = _.isFunction(callout)\n ? callout(result)\n : _.extend({}, callout, self.__evaluateCalloutObject(result.resolved, callout.title));\n\n // remove existing callouts if any\n self.removeCallout();\n self.showCallout(calloutConfig, result.resolved);\n },\n\n __showInputDependencies: function () {\n const self = this;\n const fieldDependency = self.options.deps[self.getModelValue()];\n\n if (fieldDependency && _.isFunction(fieldDependency.func)) {\n fieldDependency\n .func()\n .done(function (data) {\n self.__handleDependency({ resolved: true, data: data }, fieldDependency.callout);\n })\n .fail(function (data) {\n self.__handleDependency({ resolved: false, data: data }, fieldDependency.callout);\n });\n } else {\n self.removeCallout();\n }\n },\n\n _isEdited: false,\n /**\n * updates the model with the input's value\n */\n update: function () {\n if (!this._isEdited && _.result(this.options, 'validateOnlyIfDirty')) {\n this._isEdited = true;\n this.addInlineValidation();\n }\n this.model.set(this.options.name, this.toModelValue());\n if (this.options.deps) {\n // check for dependencies\n this.__showInputDependencies();\n }\n },\n\n /**\n * Is the input in edit mode\n * @return {Boolean}\n */\n isEditMode: function () {\n const ret = !_.result(this.options, 'readOnly')\n && (_.result(this.options, 'read') !== true || this.model.get('__edit__') === true);\n\n return ret;\n },\n\n /**\n * Renders the input\n * @readonly\n */\n render: function () {\n this.preRender();\n const params = this.options.params;\n\n this.options.params = _.resultCtx(this.options, 'params', this);\n\n if (this.isEditMode()) {\n this.editMode();\n if (_.resultCtx(this.options, 'disabled', this)) {\n this.disable();\n } else {\n this.enable();\n }\n } else {\n this.readMode();\n }\n\n this.options.params = params;\n this.addAriaLabel();\n this.postRender();\n\n return this;\n },\n\n /**\n * checks if the current value in the model is valid for this field\n */\n validate: function () {\n if (!this.model.get('__pending__') && this.isEditMode() && _.isFunction(this.model.validateField)) {\n const validationError = this.model.validateField(this.options.name);\n\n if (validationError) {\n _.delay(\n function () {\n this.model.trigger('form:clear-error:' + this.options.name);\n this.model.trigger('invalid', this.model, validationError, false);\n }.bind(this),\n 100\n );\n }\n }\n },\n\n /**\n * Add model event listeners\n */\n addModelListeners: function () {\n this.listenTo(this.model, 'form:field-error', function (name) {\n if (this.options.name === name) {\n this.__markError();\n }\n });\n this.listenTo(this.model, 'form:clear-errors change:' + this.options.name, this.__clearError);\n this.listenTo(this.model, 'form:clear-error:' + this.options.name, this.__clearError);\n },\n\n /**\n * The value of the input\n * @return {Mixed}\n */\n val: function () {\n throw new Error('val() is an abstract method');\n },\n\n /**\n * Set focus on the input\n */\n focus: function () {\n throw new Error('focus() is an abstract method');\n },\n\n /**\n * Default value in read mode\n * When model has no value for the field\n */\n defaultValue: function () {\n return '';\n },\n\n /**\n * Renders the input in edit mode\n */\n editMode: function () {\n const options = _.extend({}, this.options, {\n value: this.getModelValue()\n });\n\n this.$el.html(this.template(options));\n this.options.multi && this.$el.removeClass('margin-r');\n return this;\n },\n\n /**\n * Renders the readable value of the input in read mode\n */\n readMode: function () {\n this.$el.text(this.getReadModeString());\n this.$el.removeClass('error-field');\n this.options.multi && this.$el.addClass('margin-r');\n return this;\n },\n\n getReadModeString: function () {\n const readModeStr = _.resultCtx(this.options, 'readModeString', this);\n\n if (readModeStr) {\n return readModeStr;\n }\n return this.toStringValue();\n },\n\n /**\n * The model value off the field associated with the input\n * @return {Mixed}\n */\n getModelValue: function () {\n let value = this.model.get(this.options.name);\n\n if (_.isFunction(this.from)) {\n value = this.from.call(this, value);\n }\n if (_.isFunction(this.options.from)) {\n value = this.options.from.call(this, value);\n }\n return value;\n },\n\n /*\n * convenience method to get the textual value from the model\n * will return the textual label rather than value in case of select/radio\n * @return {String}\n */\n toStringValue: function () {\n let value = this.getModelValue();\n\n if (this.options.options) {\n // dropdown or radio\n value = this.options.options[value];\n }\n\n if (Number.isInteger(value) || (typeof value === 'boolean')) {\n value = String(value);\n }\n return value || this.defaultValue();\n },\n\n /**\n * Triggers a form:resize event in order to tell dialogs content size has changed\n */\n resize: function () {\n this.model.trigger('form:resize');\n },\n\n /**\n * Disable the input\n */\n disable: function () {\n this.$(':input').prop('disabled', true);\n },\n\n /**\n * Enable the input\n */\n enable: function () {\n this.$(':input').prop('disabled', false);\n },\n\n /**\n * Change the type of the input field. (e.g., text <--> password)\n * @param type\n */\n changeType: function (type) {\n this.$(':input').prop('type', type);\n // Update the options so that it keeps the uptodate state\n this.options.type = type;\n },\n\n getNameString: function () {\n if (_.isArray(this.options.name)) {\n return this.options.name.join('-');\n }\n return this.options.name;\n },\n\n /**\n * Get parameters, computing _.result\n * @param {[type]} options alternative options\n * @return {Object} the params\n */\n getParams: function (options) {\n const opts = options || this.options || {};\n\n return _.clone(_.resultCtx(opts, 'params', this) || {});\n },\n\n /**\n * get a parameter from options.params, compute _.result when needed.\n * @param {String} key\n * @param {Object} defaultValue\n * @return {Object} the params\n */\n getParam: function (key, defaultValue) {\n const result = _.resultCtx(this.getParams(), key, this);\n\n return !_.isUndefined(result) ? result : defaultValue;\n },\n\n /**\n * Get a parameter from options.params or if empty, object attribute.\n *\n * @param {String} key\n * @return {Object} the param or attribute\n */\n getParamOrAttribute: function (key) {\n return this.getParam(key) || _.result(this, key);\n },\n\n __markError: function () {\n this.$el.addClass('o-form-has-errors');\n },\n\n __clearError: function () {\n this.$el.removeClass('o-form-has-errors');\n }\n};\n\n/**\n * @class BaseInput\n * @private\n * An abstract object that defines an input for {@link Okta.Form}\n *\n * BaseInputs are typically not created directly, but being passed to {@link Okta.Form#addInput}\n * @extends Okta.View\n */\nexport default BaseView.extend(props) as typeof BaseInputClass;\n","import _ from '../../../util/underscore-wrapper';\nimport BaseView from '../../BaseView';\nimport FormUtil from '../helpers/FormUtil';\n\ntype ButtonOrderEnum = 'previous' | 'save' | 'cancel';\n\nexport declare class ToolbarClass extends BaseView {\n addButton(parmas, options?): this;\n buttonOrder: ButtonOrderEnum[];\n __getButtonOrder(options): ButtonOrderEnum[];\n}\n\nconst proto = {\n className() {\n return 'o-form-button-bar';\n },\n\n buttonOrder: ['previous', 'save', 'cancel'],\n\n initialize: function (this: ToolbarClass, options) {\n const buttonConfigs = {\n previous: {\n type: 'previous'\n },\n save: {\n type: 'save',\n text: _.resultCtx(options, 'save', this),\n id: _.resultCtx(options, 'saveId', this),\n className: _.resultCtx(options, 'saveClassName', this)\n },\n cancel: {\n type: 'cancel',\n text: _.resultCtx(options, 'cancel', this)\n }\n };\n this.__getButtonOrder(options).forEach((buttonName) => {\n this.addButton(buttonConfigs[buttonName]);\n });\n },\n\n /**\n * Adds a buttomn to the toolbar\n * @param {Object} params button parameters\n * @param {Object} options {@link Okta.View#add} options\n */\n addButton: function (this: ToolbarClass, params, options?) {\n return this.add(FormUtil.createButton(params), options);\n },\n\n __getButtonOrder: function (this: ToolbarClass, options) {\n const buttonOrder = _.resultCtx(options, 'buttonOrder', this, this.buttonOrder);\n const buttonsToSkip = [];\n if (options.noSubmitButton) {\n buttonsToSkip.push('save');\n }\n if (options.noCancelButton) {\n buttonsToSkip.push('cancel');\n }\n if (!options.hasPrevStep) {\n buttonsToSkip.push('previous');\n }\n return _.without(buttonOrder, ...buttonsToSkip);\n }\n};\n\nexport default BaseView.extend(proto) as typeof ToolbarClass;\n","import _ from '../../../util/underscore-wrapper';\nimport StringUtil from '../../../util/StringUtil';\n\nconst FIELD_REGEX = /^([\\S]+): (.+)$/;\n\nexport interface ErrorCause {\n errorSummary?: string;\n property?: string;\n reason?: string;\n location?: string;\n}\n\nexport interface ErrorResponse extends ErrorCause {\n errorCauses?: ErrorCause[];\n}\n\nexport default {\n /**\n * Helper function that returns the json output of an xhr objext\n * @param {jqXhr} xhr\n * @return {Object}\n */\n getResponseJSON: function (xhr): ErrorResponse | undefined {\n try {\n return xhr.responseJSON || JSON.parse(xhr.responseText);\n } catch (e) {\n // ignore error\n }\n },\n\n /**\n * Parses an error summary to extract a field name and an error message\n * @param {String} errorSummary The raw error summary\n * @return {String[]} An array with two members: [field name, error message]\n */\n parseErrorSummary: function (errorSummary: string): [string, string] | undefined {\n const matches = errorSummary.match(FIELD_REGEX);\n // error format is: `fieldName: The field cannot be left blank`\n\n if (matches) {\n return [matches[1], matches[2]];\n }\n },\n\n /**\n * Parses an error cause object to extract a field name from property attribute\n * and an error message form errorSummary attribute. It looks to see if there is\n * a custom override/translation for the erorrCause.reason before using the errorSummary\n * @param {Object} errorCause object\n * @return {String[]} An array with two members: [field name, error message]\n */\n parseErrorCauseObject: function (errorCause: ErrorCause): [string, string] | undefined {\n if (errorCause.property && errorCause.errorSummary) {\n const localizedMsg = StringUtil.localize(errorCause.reason);\n const apiMsg = errorCause.errorSummary;\n const field = errorCause.property;\n const errorMessage = localizedMsg.indexOf('L10N_ERROR[') === -1 ? localizedMsg : apiMsg;\n\n return [field, errorMessage];\n }\n },\n\n parseErrors: function (resp) {\n const responseJSON: ErrorResponse = this.getResponseJSON(resp);\n\n return _.map((responseJSON && responseJSON.errorCauses) || [], function (errorCause) {\n return ('' + errorCause.errorSummary).replace(FIELD_REGEX, '$2');\n });\n },\n\n /**\n * Parses the response for errors\n * Returns a map of field names > array or error messages\n * Example:\n * ```javascript\n * {\n * url: ['The field cannot be left blank', 'The field has to be a valid URI'],\n * name: ['The field cannot be left blank']\n * }\n * ```\n * @param {Object} resp\n * @return {Object}\n */\n parseFieldErrors: function (resp) {\n const responseJSON: ErrorResponse = this.getResponseJSON(resp);\n const errors = {};\n\n // xhr error object\n if (responseJSON) {\n /* eslint complexity: [2, 9] */\n _.each(\n responseJSON.errorCauses || [],\n function (cause) {\n let res: string[] = [];\n\n if (cause.property && cause.errorSummary) {\n res = this.parseErrorCauseObject(cause);\n } else if (cause.location && cause.errorSummary) {\n // To handle new api error format for field level errors.\n // Ignoring the reason attribute as the translation happens in the API layer and not in the client any more.\n res = [cause.location, cause.errorSummary];\n } else {\n res = this.parseErrorSummary((cause && cause.errorSummary) || '');\n }\n if (res) {\n const fieldName = res[0];\n const message = res[1];\n\n errors[fieldName] || (errors[fieldName] = []);\n errors[fieldName].push(message);\n }\n },\n this\n );\n }\n // validation key/value object\n else if (_.isObject(resp) && _.size(resp)) {\n _.each(resp, function (msg, field) {\n errors[field] = [msg];\n });\n }\n return _.size(errors) ? errors : undefined;\n }\n};\n","/* eslint max-params: [2, 6] */\nimport _ from '../../../util/underscore-wrapper';\nimport Keys from '../../../util/Keys';\nimport Logger from '../../../util/Logger';\nimport StringUtil from '../../../util/StringUtil';\nimport ViewUtil from '../../../util/ViewUtil';\nimport BaseView from '../../BaseView';\nimport { InputOptions } from '../types';\n\nconst LABEL_OPTIONS = ['model', 'id', 'inputId', 'type', 'label', 'sublabel', 'tooltip', 'name', 'group'];\n\nconst CONTAINER_OPTIONS = [\n 'wide',\n 'multi',\n 'input',\n 'label-top',\n 'explain',\n 'explain-top',\n 'customExplain',\n 'model',\n 'name',\n 'type',\n 'autoRender',\n 'multirowError',\n];\n\nconst WRAPPER_OPTIONS = [\n 'model',\n 'name',\n 'label-top',\n 'readOnly',\n 'events',\n 'initialize',\n 'showWhen',\n 'bindings',\n 'render',\n 'className',\n 'data-se',\n 'toggleWhen',\n 'group'\n];\n\nconst INPUT_OPTIONS = [\n 'model',\n 'name',\n 'inputId',\n 'type', // base options\n 'input', // custom input\n 'placeholder',\n 'label', // labels\n 'readOnly',\n 'read',\n 'disabled',\n 'readModeString', // modes\n 'options', // select/radio\n 'deps', // used to specify inputs that have dependencies and show a callout to user on select\n 'from',\n 'to', // model transformers,\n 'autoRender', // model attributes change event to trigger rerendering of the input\n 'inlineValidation', // control inline validating against the model on focus lost\n 'validateOnlyIfDirty', // check if field has been interacted with and then validate\n 'ariaLabel', // 508 compliance for inputs that do not have label associated with them\n 'params',\n 'autoComplete', // autocomplete attribute\n];\n\nconst OTHER_OPTIONS = [\n 'errorField' // widgets params - for input specific widgets\n]; \n\nconst ALL_OPTIONS = _.uniq(_.union(LABEL_OPTIONS, CONTAINER_OPTIONS, WRAPPER_OPTIONS, INPUT_OPTIONS, OTHER_OPTIONS));\n\nconst SAVE_BUTTON_PHASES = [\n '• ',\n '• • ',\n '• • • ',\n '• • • •',\n ' • • •',\n ' • •',\n ' •',\n ' ',\n ' ',\n ' ',\n];\n\nfunction decorateDoWhen(doWhen) {\n if (doWhen && !doWhen['__edit__']) {\n return _.extend({ __edit__: _.constant(true) }, doWhen);\n }\n}\n\nexport interface CreateButtonOptions {\n action?: (...any) => any;\n id?: string;\n className?: string;\n text?: string;\n type?: string;\n}\n\nfunction createButton(options: CreateButtonOptions) {\n options = _.pick(options || {}, 'action', 'id', 'className', 'text', 'type');\n\n let timeoutId;\n let intervalId;\n let phaseCount;\n\n return BaseView.extend({\n tagName: 'input',\n className: 'button',\n events: {\n click: function () {\n if (options.action && !this.disabled()) {\n options.action.call(this);\n }\n },\n keyup: function (e) {\n if (Keys.isEnter(e) && options.action && !this.disabled()) {\n options.action.call(this);\n }\n }\n },\n\n disabled: function () {\n return this.$el.prop('disabled') === true;\n },\n\n disable: function () {\n this.$el.prop('disabled', true);\n this.$el.addClass('btn-disabled');\n },\n\n enable: function () {\n this.$el.prop('disabled', false);\n this.$el.removeClass('btn-disabled');\n },\n\n initialize: function () {\n const self = this;\n\n this.$el.attr('type', options.type === 'save' ? 'submit' : 'button');\n this.$el.val(options.text);\n if (options.id) {\n this.$el.attr('id', options.id);\n }\n if (options.className) {\n this.$el.addClass(options.className);\n }\n if (options.type) {\n this.$el.attr('data-type', options.type);\n }\n\n this.$el.mousedown(function () {\n self.model.set('__pending__', true);\n });\n\n this.$el.mouseup(function () {\n self.model.set('__pending__', false);\n });\n\n this.listenTo(this.model, 'form:set-saving-state', function () {\n this.disable();\n if (options.type === 'save') {\n timeoutId = setTimeout(_.bind(this.__changeSaveText, this), 1000);\n }\n });\n this.listenTo(this.model, 'form:clear-saving-state', function () {\n this.enable();\n if (options.type === 'save') {\n clearTimeout(timeoutId);\n clearInterval(intervalId);\n this.$el.val(options.text);\n }\n });\n },\n\n __changeSaveText: function () {\n phaseCount = 0;\n intervalId = setInterval(_.bind(this.__showLoadingText, this), 200);\n },\n\n __showLoadingText: function () {\n this.$el.val(SAVE_BUTTON_PHASES[phaseCount++ % SAVE_BUTTON_PHASES.length]);\n }\n });\n}\n\nfunction validateInput(options: InputOptions, model) {\n /* eslint max-statements: 0, complexity: 0 */\n\n options || (options = {});\n\n if (options.type === 'label') {\n if (!options.label) {\n Logger.warn('A label input must have a \"label\" parameter', options);\n }\n return;\n }\n\n if (options.type === 'button') {\n if (!options.title && !options.icon) {\n Logger.warn('A button input must have a \"title\" and/or an \"icon\" parameter', options);\n }\n if (!options.click && !options.href) {\n Logger.warn('A button input must have a \"click\" and/or an \"href\" parameter', options);\n }\n return;\n }\n\n if (!options.name && !options.input) {\n Logger.warn('Missing \"name\" or \"input\" parameters', options);\n }\n\n if (_.isArray(options.name) && _.isArray(options.input)) {\n throw new Error('Not allowed to have both \"name\" and \"input\" defined as array.');\n }\n\n if (options.type !== 'list' && options.name && model && model.allows) {\n let names: string[] = [];\n\n if (_.isArray(options.name)) {\n names = options.name;\n } else {\n names.push(options.name);\n }\n _.each(names, function (name) {\n if (!model.allows(name)) {\n throw new Error('field not allowed: ' + options.name);\n }\n });\n }\n\n if (_.isArray(options.input) && options.type !== 'list') {\n _.each(options.input, function (input) {\n validateInput(input, model);\n });\n }\n\n const keys = _.keys(options);\n\n const intersection = _.intersection(keys, ALL_OPTIONS);\n\n if (_.size(intersection) !== _.size(options)) {\n const fields = _.clone(ALL_OPTIONS);\n Logger.warn('Invalid input parameters', _.without(keys, ...fields), options);\n }\n}\n\nfunction generateInputOptions(options: InputOptions, form, createFn): InputOptions[] {\n options = _.clone(options);\n\n if (_.contains(['list', 'group'], options.type)) {\n options.params = _.defaults(\n {\n create: createFn,\n inputs: _.map(_.isArray(options.input) ? options.input : [options.input], function (input: InputOptions) {\n return _.first(generateInputOptions(input, form, createFn));\n })\n },\n options.params || {}\n );\n delete options.input;\n }\n\n const inputs: InputOptions[] = _.isArray(options.input) ? _.clone(options.input) : [options];\n\n return _.map(inputs, function (input) {\n const target: InputOptions = _.defaults(\n { model: form.model }, \n input,\n _.omit(options, 'input', 'inputs'),\n form.options, \n {\n id: _.uniqueId('input'),\n readOnly: form.isReadOnly(),\n read: form.hasReadMode()\n }\n );\n\n if (form.isReadOnly()) {\n target.read = target.readOnly = true;\n }\n return target;\n });\n}\n\nexport interface CreateReadFormButtonOptions {\n type: string;\n formTitle: string;\n className: string;\n}\n\nexport default {\n LABEL_OPTIONS: LABEL_OPTIONS,\n CONTAINER_OPTIONS: CONTAINER_OPTIONS,\n WRAPPER_OPTIONS: WRAPPER_OPTIONS,\n INPUT_OPTIONS: INPUT_OPTIONS,\n\n generateInputOptions: generateInputOptions,\n\n changeEventString: function (fieldNames) {\n return 'change:' + fieldNames.join(' change:');\n },\n\n createReadFormButton: function (options: CreateReadFormButtonOptions) {\n let action;\n let text;\n let ariaLabel;\n\n if (options.type === 'cancel') {\n text = ariaLabel = StringUtil.localize('oform.cancel', 'courage');\n action = function () {\n this.model.trigger('form:cancel');\n };\n } else {\n text = StringUtil.localize('oform.edit', 'courage');\n ariaLabel = text + ' ' + options.formTitle;\n action = function () {\n this.model.set('__edit__', true);\n };\n }\n\n return BaseView.extend({\n tagName: 'a',\n className: options.className,\n attributes: {\n href: '#',\n 'aria-label': ariaLabel\n },\n // TODO: refactor to enforce precompiled templates OKTA-309852\n // eslint-disable-next-line @okta/okta-ui/no-bare-templates\n template: function () {\n return _.escape(text);\n },\n events: {\n click: function (e) {\n e.preventDefault();\n action.call(this);\n }\n }\n });\n },\n\n createButton: function (options: CreateButtonOptions) {\n options = _.clone(options);\n switch (options.type) {\n case 'save':\n _.defaults(options, { className: 'button-primary' });\n break;\n case 'cancel':\n _.defaults(options, {\n className: 'button-clear', \n text: StringUtil.localize('oform.cancel', 'courage'),\n action: function () {\n this.model.trigger('form:cancel');\n }\n });\n break;\n case 'previous':\n _.defaults(options, {\n text: StringUtil.localize('oform.previous', 'courage'),\n action: function () {\n this.model.trigger('form:previous');\n }\n });\n break;\n default:\n break;\n }\n return createButton(options);\n },\n\n validateInput: validateInput,\n\n /**\n * Applies a show-when logic on a view instance.\n * The show-when is a map of a model field name -> a boolean or a function that returns a boolean.\n * The view will toggle based on the field value.\n *\n * @param {Okta.View} view a view instance that has a this.model attached to it\n * @param {Object} showWhen\n */\n applyShowWhen: function (view, showWhen) {\n const toggleAndResize = function (bool) {\n return function () {\n // The `toggle` is here since an event may be triggered before the el is in the DOM\n // and in that case slide events may not function as expected.\n view.$el.toggle(bool);\n view.model.trigger('form:resize');\n };\n };\n\n ViewUtil.applyDoWhen(view, decorateDoWhen(showWhen), function (bool, options) {\n if (!options.animate) {\n view.$el.toggle(bool);\n } else {\n view.$el['slide' + (bool ? 'Down' : 'Up')](200, toggleAndResize(bool));\n }\n });\n },\n\n applyToggleWhen: function (view, toggleWhen) {\n ViewUtil.applyDoWhen(view, decorateDoWhen(toggleWhen), function (bool, options) {\n view.$el.toggle(bool);\n view.model.trigger('form:resize');\n if (options.animate) {\n view.render();\n }\n });\n }\n};\n","import _ from '../../../util/underscore-wrapper';\nimport { BaseInputClass } from '../BaseInput';\n\nconst registry = {};\n\nfunction isBaseInput(input): input is BaseInputClass {\n if (_.isFunction(input)) {\n return _.isFunction(input.prototype.editMode) && _.isFunction(input.prototype.readMode);\n } else {\n return _.isObject(input) && _.isFunction(input.editMode) && _.isFunction(input.readMode);\n }\n}\n\n/**\n * @class module:Okta.internal.views.forms.helpers.InputRegistry\n */\nexport default /** @lends module:Okta.internal.views.forms.helpers.InputRegistry */ {\n isBaseInput: isBaseInput,\n\n /**\n * Register a form input\n * @param {String} type string identifier for the input\n * @param {BaseInput} input the input to register\n * @return {void}\n */\n register: function (type, input: BaseInputClass) {\n registry[type] = input;\n },\n\n /**\n * Get a form input by type\n * @param {Object} options input definition\n * @param {String} options.type string identifier for the input\n * @return {BaseInput} a matching input\n */\n get: function (options) {\n const input: BaseInputClass | ((...any) => BaseInputClass) = registry[options.type];\n\n return input && (isBaseInput(input) ? input : input(options));\n },\n\n /**\n * Unregister an input type\n * @param {String} type\n */\n unregister: function (type) {\n delete registry[type];\n }\n};\n","/* eslint max-statements: 0, max-params: 0 */\nimport _ from '../../../util/underscore-wrapper';\nimport StringUtil from '../../../util/StringUtil';\nimport BooleanSelect from '../inputs/BooleanSelect';\nimport TextBoxSet from '../inputs/TextBoxSet';\nimport EnumTypeHelper from './EnumTypeHelper';\nimport { InputOptions } from '../types';\n\nfunction convertStringToNumber(string) {\n const number = StringUtil.parseFloat(string);\n\n return string === '' ? null : number;\n}\n\n// converts possibleValues to choices\n// [a, b, c] => {a: a, b: b, c: c}\nfunction getChoices(values) {\n return _.object(values, values);\n}\n\nfunction isArray(type) {\n return type && type.indexOf('array') >= 0;\n}\n\n// A schema property may have an objectName either\n// at the root level or nested in the items object\nfunction getObjectName(schemaProp) {\n const items = schemaProp.get('items');\n\n if (items) {\n return items.objectName;\n }\n return schemaProp.get('objectName');\n}\n\n/**\n * Checks the validity of a schema property.\n *\n * @param {SchemaProperty} [schemaProp] A schema property backbone model\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Boolean} true/false\n * @private\n */\nfunction isValidSchemaProp(schemaProp, values) {\n const objectName = getObjectName(schemaProp);\n const results = values[objectName];\n\n // a schema property that references an empty list of values\n // Im looking at you, google apps.\n if (objectName && _(results).isEmpty()) {\n return false;\n }\n return true;\n}\n\n// Maps each __displayType__ to a basic set of inputOptions.\nfunction defaultOptions(property) {\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const name = property.get('name');\n const title = property.get('title');\n /* eslint complexity: [2, 24] */\n\n const inputOptions: InputOptions = {\n type: 'text',\n name: name,\n label: title || name\n };\n\n // @see customOptions for enum complex \"object\" type,\n // a.k.a \"object\" or \"arrayofobject\" type has enum values defined.\n // Other cases (e.g., nested object type) are not support yet.\n\n switch (type) {\n case 'arrayofstring':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'string' };\n break;\n case 'arrayofnumber':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'number' };\n break;\n case 'arrayofinteger':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'integer' };\n break;\n case 'arrayofobject':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: property.get('items').type };\n break;\n case 'arrayofref-id':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: property.get('items').format };\n break;\n case 'boolean':\n inputOptions.input = BooleanSelect;\n break;\n case 'integer':\n case 'number':\n inputOptions.to = convertStringToNumber;\n break;\n case 'reference':\n inputOptions.type = 'select';\n inputOptions.options = getChoices(values);\n break;\n case 'image':\n inputOptions.readOnly = true;\n inputOptions.from = function (value) {\n return _.isEmpty(value) ? '' : StringUtil.localize('user.profile.image.image_set', 'courage'); // TODO\n };\n break;\n case 'password':\n inputOptions.type = 'password';\n break;\n case 'date':\n inputOptions.type = 'date';\n break;\n case 'uri':\n case 'country-code':\n case 'country_code':\n case 'language-code':\n case 'language_code':\n case 'email':\n case 'locale':\n case 'timezone':\n case 'string':\n case 'object':\n // default input options\n break;\n default:\n throw new Error(`unknown type: ${type}`);\n }\n return inputOptions;\n}\n\n// Sets nonbasic inputOptions, such as an array with possible values\nfunction customOptions(property) {\n let inputOptions: InputOptions = {};\n const name = property.get('name');\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const prefix = property.get('__fieldNamePrefix__');\n\n if (prefix) {\n inputOptions.name = prefix + name;\n inputOptions.errorField = name;\n }\n\n if (property.isEnumType()) {\n const configs = {\n displayType: type,\n title: property.get('title'),\n enumValues: property.getEnumValues()\n };\n\n inputOptions = _.extend({}, EnumTypeHelper.getEnumInputOptions(configs), inputOptions);\n } else if (isArray(type) && values) {\n inputOptions.type = 'checkboxset';\n inputOptions.input = null;\n inputOptions.options = getChoices(values);\n }\n\n return inputOptions;\n}\n\nfunction augmentSchemaProp(schemaProp, possibleValues, profile): void {\n const name = schemaProp.get('name');\n const prefix = profile.__nestedProperty__;\n let defaultValues = possibleValues[name];\n const userValues = profile.get(name);\n let values;\n\n // If API responds with a field name that differs from the form-field name\n // example: Model's 'profile.username' vs. server's 'username'\n if (prefix) {\n schemaProp.set('__fieldNamePrefix__', prefix);\n }\n\n // case 1: objectName - fixed list of values are set for the input\n const fixedValues = possibleValues[getObjectName(schemaProp)];\n\n // case 2: name only - default list of values are provided, user can add more\n // TODO: this case does not yet exist, so it is not tested\n if (defaultValues && userValues) {\n defaultValues = _.union(defaultValues, userValues);\n }\n\n // If both fixed and default values exist,\n // take the fixed values unless they are empty\n if (fixedValues && fixedValues.length) {\n values = fixedValues;\n } else if (defaultValues && defaultValues.length) {\n values = defaultValues;\n }\n\n schemaProp.set('__possibleValues__', values);\n}\n\nfunction augmentSchemaProps(schemaProps, possibleValues, profile) {\n schemaProps.each(function (schemaProp) {\n augmentSchemaProp(schemaProp, possibleValues, profile);\n });\n\n return schemaProps;\n}\n\n/**\n * Remove invalid schema properties from a collection\n *\n * @param {SchemaProperties Collection} [properties] A collection of schema properties\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Array} An array of valid schema models, this can be used to reset\n * a schema properties collection for example.\n * @private\n */\nfunction cleanSchema(properties, values) {\n return properties.filter(function (schema) {\n return isValidSchemaProp(schema, values);\n });\n}\n\nexport default {\n /**\n * Creates the options hash for BaseForm.addInput from a prepared schema\n * property.\n *\n * @param {Okta.Model} [preparedSchemaProp] A schema property backbone model\n * that has been standardized by the prepareSchema method.\n * @return {Object} An object containing all of the options needed by\n * BaseForm's addInput()\n */\n createInputOptions: function (preparedSchemaProp) {\n const custom = customOptions(preparedSchemaProp);\n const standard = defaultOptions(preparedSchemaProp);\n\n // underscore did not support nested extend\n // https://github.com/jashkenas/underscore/issues/162\n if (custom.params && standard.params) {\n custom.params = _.defaults(custom.params, standard.params);\n }\n return _.defaults(custom, standard);\n },\n\n hasValidSchemaProps: function (schemaProps, possibleValues) {\n if (_.isEmpty(schemaProps)) {\n return false;\n }\n const validSchema = cleanSchema(schemaProps, possibleValues);\n return !!validSchema.length;\n },\n\n /**\n * This method is responsible for preparing a collection for the form\n * factory to use by putting all of the information to create an input\n * into the schema property and removing invalid properties.\n * The typical UD form takes 3 models:\n * The data model has the input values.\n * The schema model describes which input to use, such as a textbox or a checkbox.\n * The possible values model provide a list of default options to display, for example in a drop down menu.\n *\n * @param {SchemaProperty Collection} [schemaProps] A schema property backbone model.\n * @param {Object} [possibleValues] An object of the form { key: [value1, value2]}\n * @param {Okta.Model} [profile] A backbone model containing the property described by the schema property.\n * @return {SchemaProperty Collection} A schema property collection with standardized models.\n * The standard schema model adds a couple of additional private properties to\n * allow the form factory to reference lookup values or name prefixes without going to a second model.\n */\n prepareSchema: function (schemaProps, possibleValues, profile) {\n schemaProps.reset(cleanSchema(schemaProps, possibleValues));\n return augmentSchemaProps(schemaProps, possibleValues, profile);\n },\n\n /**\n * `prepareSchema` will reset the property list which may not be necessary at some case.\n * like when setting default value for schema properties.\n * (more detail about such case @see wiki UX, App+Entitlements+for+Provisioning)\n *\n * @param { }\n * @return {String}\n */\n\n augmentSchemaProps: augmentSchemaProps,\n\n augmentSchemaProp: augmentSchemaProp\n};\n","// TODO: maybe replaced by\n// https://github.com/Calvein/empty-module\n// https://github.com/crimx/empty-module-loader\n\n\n\n\nexport default {\n extend: () => {}\n};\n","import $ from '@okta/courage/src/util/jquery-wrapper';\n\n/*!\n * jQuery UI Scroll Parent @VERSION\n * http://jqueryui.com\n *\n * Copyright jQuery Foundation and other contributors\n * Released under the MIT license.\n * http://jquery.org/license\n *\n * Modifications Copyright 2021 Okta, Inc.\n */\n\n// This is required because SIW doesn't want to include jqueryui even though it's an external dependency of courage\n$.fn.scrollParent = function( includeHidden? ) {\n const position = this.css( \"position\" ),\n excludeStaticParent = position === \"absolute\",\n overflowRegex = includeHidden ? /(auto|scroll|hidden)/ : /(auto|scroll)/,\n scrollParent = this.parents().filter( function() {\n const parent = $( this );\n if ( excludeStaticParent && parent.css( \"position\" ) === \"static\" ) {\n return false;\n }\n return overflowRegex.test( parent.css( \"overflow\" ) + parent.css( \"overflow-y\" ) +\n parent.css( \"overflow-x\" ) );\n } ).eq( 0 );\n\n return position === \"fixed\" || !scrollParent.length ?\n $( this[ 0 ].ownerDocument || document ) :\n scrollParent;\n};\n","// Backbone.js 1.4.0\n\n// (c) 2010-2019 Jeremy Ashkenas and DocumentCloud\n// Backbone may be freely distributed under the MIT license.\n// For all details and documentation:\n// http://backbonejs.org\n\n(function(factory) {\n\n // Establish the root object, `window` (`self`) in the browser, or `global` on the server.\n // We use `self` instead of `window` for `WebWorker` support.\n var root = typeof self == 'object' && self.self === self && self ||\n typeof global == 'object' && global.global === global && global;\n\n // Set up Backbone appropriately for the environment. Start with AMD.\n if (typeof define === 'function' && define.amd) {\n define(['underscore', 'jquery', 'exports'], function(_, $, exports) {\n // Export global even in AMD case in case this script is loaded with\n // others that may still expect a global Backbone.\n root.Backbone = factory(root, exports, _, $);\n });\n\n // Next for Node.js or CommonJS. jQuery may not be needed as a module.\n } else if (typeof exports !== 'undefined') {\n var _ = require('underscore'), $;\n try { $ = require('jquery'); } catch (e) {}\n factory(root, exports, _, $);\n\n // Finally, as a browser global.\n } else {\n root.Backbone = factory(root, {}, root._, root.jQuery || root.Zepto || root.ender || root.$);\n }\n\n})(function(root, Backbone, _, $) {\n\n // Initial Setup\n // -------------\n\n // Save the previous value of the `Backbone` variable, so that it can be\n // restored later on, if `noConflict` is used.\n var previousBackbone = root.Backbone;\n\n // Create a local reference to a common array method we'll want to use later.\n var slice = Array.prototype.slice;\n\n // Current version of the library. Keep in sync with `package.json`.\n Backbone.VERSION = '1.4.0';\n\n // For Backbone's purposes, jQuery, Zepto, Ender, or My Library (kidding) owns\n // the `$` variable.\n Backbone.$ = $;\n\n // Runs Backbone.js in *noConflict* mode, returning the `Backbone` variable\n // to its previous owner. Returns a reference to this Backbone object.\n Backbone.noConflict = function() {\n root.Backbone = previousBackbone;\n return this;\n };\n\n // Turn on `emulateHTTP` to support legacy HTTP servers. Setting this option\n // will fake `\"PATCH\"`, `\"PUT\"` and `\"DELETE\"` requests via the `_method` parameter and\n // set a `X-Http-Method-Override` header.\n Backbone.emulateHTTP = false;\n\n // Turn on `emulateJSON` to support legacy servers that can't deal with direct\n // `application/json` requests ... this will encode the body as\n // `application/x-www-form-urlencoded` instead and will send the model in a\n // form param named `model`.\n Backbone.emulateJSON = false;\n\n // Backbone.Events\n // ---------------\n\n // A module that can be mixed in to *any object* in order to provide it with\n // a custom event channel. You may bind a callback to an event with `on` or\n // remove with `off`; `trigger`-ing an event fires all callbacks in\n // succession.\n //\n // var object = {};\n // _.extend(object, Backbone.Events);\n // object.on('expand', function(){ alert('expanded'); });\n // object.trigger('expand');\n //\n var Events = Backbone.Events = {};\n\n // Regular expression used to split event strings.\n var eventSplitter = /\\s+/;\n\n // A private global variable to share between listeners and listenees.\n var _listening;\n\n // Iterates over the standard `event, callback` (as well as the fancy multiple\n // space-separated events `\"change blur\", callback` and jQuery-style event\n // maps `{event: callback}`).\n var eventsApi = function(iteratee, events, name, callback, opts) {\n var i = 0, names;\n if (name && typeof name === 'object') {\n // Handle event maps.\n if (callback !== void 0 && 'context' in opts && opts.context === void 0) opts.context = callback;\n for (names = _.keys(name); i < names.length ; i++) {\n events = eventsApi(iteratee, events, names[i], name[names[i]], opts);\n }\n } else if (name && eventSplitter.test(name)) {\n // Handle space-separated event names by delegating them individually.\n for (names = name.split(eventSplitter); i < names.length; i++) {\n events = iteratee(events, names[i], callback, opts);\n }\n } else {\n // Finally, standard events.\n events = iteratee(events, name, callback, opts);\n }\n return events;\n };\n\n // Bind an event to a `callback` function. Passing `\"all\"` will bind\n // the callback to all events fired.\n Events.on = function(name, callback, context) {\n this._events = eventsApi(onApi, this._events || {}, name, callback, {\n context: context,\n ctx: this,\n listening: _listening\n });\n\n if (_listening) {\n var listeners = this._listeners || (this._listeners = {});\n listeners[_listening.id] = _listening;\n // Allow the listening to use a counter, instead of tracking\n // callbacks for library interop\n _listening.interop = false;\n }\n\n return this;\n };\n\n // Inversion-of-control versions of `on`. Tell *this* object to listen to\n // an event in another object... keeping track of what it's listening to\n // for easier unbinding later.\n Events.listenTo = function(obj, name, callback) {\n if (!obj) return this;\n var id = obj._listenId || (obj._listenId = _.uniqueId('l'));\n var listeningTo = this._listeningTo || (this._listeningTo = {});\n var listening = _listening = listeningTo[id];\n\n // This object is not listening to any other events on `obj` yet.\n // Setup the necessary references to track the listening callbacks.\n if (!listening) {\n this._listenId || (this._listenId = _.uniqueId('l'));\n listening = _listening = listeningTo[id] = new Listening(this, obj);\n }\n\n // Bind callbacks on obj.\n var error = tryCatchOn(obj, name, callback, this);\n _listening = void 0;\n\n if (error) throw error;\n // If the target obj is not Backbone.Events, track events manually.\n if (listening.interop) listening.on(name, callback);\n\n return this;\n };\n\n // The reducing API that adds a callback to the `events` object.\n var onApi = function(events, name, callback, options) {\n if (callback) {\n var handlers = events[name] || (events[name] = []);\n var context = options.context, ctx = options.ctx, listening = options.listening;\n if (listening) listening.count++;\n\n handlers.push({callback: callback, context: context, ctx: context || ctx, listening: listening});\n }\n return events;\n };\n\n // An try-catch guarded #on function, to prevent poisoning the global\n // `_listening` variable.\n var tryCatchOn = function(obj, name, callback, context) {\n try {\n obj.on(name, callback, context);\n } catch (e) {\n return e;\n }\n };\n\n // Remove one or many callbacks. If `context` is null, removes all\n // callbacks with that function. If `callback` is null, removes all\n // callbacks for the event. If `name` is null, removes all bound\n // callbacks for all events.\n Events.off = function(name, callback, context) {\n if (!this._events) return this;\n this._events = eventsApi(offApi, this._events, name, callback, {\n context: context,\n listeners: this._listeners\n });\n\n return this;\n };\n\n // Tell this object to stop listening to either specific events ... or\n // to every object it's currently listening to.\n Events.stopListening = function(obj, name, callback) {\n var listeningTo = this._listeningTo;\n if (!listeningTo) return this;\n\n var ids = obj ? [obj._listenId] : _.keys(listeningTo);\n for (var i = 0; i < ids.length; i++) {\n var listening = listeningTo[ids[i]];\n\n // If listening doesn't exist, this object is not currently\n // listening to obj. Break out early.\n if (!listening) break;\n\n listening.obj.off(name, callback, this);\n if (listening.interop) listening.off(name, callback);\n }\n if (_.isEmpty(listeningTo)) this._listeningTo = void 0;\n\n return this;\n };\n\n // The reducing API that removes a callback from the `events` object.\n var offApi = function(events, name, callback, options) {\n if (!events) return;\n\n var context = options.context, listeners = options.listeners;\n var i = 0, names;\n\n // Delete all event listeners and \"drop\" events.\n if (!name && !context && !callback) {\n for (names = _.keys(listeners); i < names.length; i++) {\n listeners[names[i]].cleanup();\n }\n return;\n }\n\n names = name ? [name] : _.keys(events);\n for (; i < names.length; i++) {\n name = names[i];\n var handlers = events[name];\n\n // Bail out if there are no events stored.\n if (!handlers) break;\n\n // Find any remaining events.\n var remaining = [];\n for (var j = 0; j < handlers.length; j++) {\n var handler = handlers[j];\n if (\n callback && callback !== handler.callback &&\n callback !== handler.callback._callback ||\n context && context !== handler.context\n ) {\n remaining.push(handler);\n } else {\n var listening = handler.listening;\n if (listening) listening.off(name, callback);\n }\n }\n\n // Replace events if there are any remaining. Otherwise, clean up.\n if (remaining.length) {\n events[name] = remaining;\n } else {\n delete events[name];\n }\n }\n\n return events;\n };\n\n // Bind an event to only be triggered a single time. After the first time\n // the callback is invoked, its listener will be removed. If multiple events\n // are passed in using the space-separated syntax, the handler will fire\n // once for each event, not once for a combination of all events.\n Events.once = function(name, callback, context) {\n // Map the event into a `{event: once}` object.\n var events = eventsApi(onceMap, {}, name, callback, this.off.bind(this));\n if (typeof name === 'string' && context == null) callback = void 0;\n return this.on(events, callback, context);\n };\n\n // Inversion-of-control versions of `once`.\n Events.listenToOnce = function(obj, name, callback) {\n // Map the event into a `{event: once}` object.\n var events = eventsApi(onceMap, {}, name, callback, this.stopListening.bind(this, obj));\n return this.listenTo(obj, events);\n };\n\n // Reduces the event callbacks into a map of `{event: onceWrapper}`.\n // `offer` unbinds the `onceWrapper` after it has been called.\n var onceMap = function(map, name, callback, offer) {\n if (callback) {\n var once = map[name] = _.once(function() {\n offer(name, once);\n callback.apply(this, arguments);\n });\n once._callback = callback;\n }\n return map;\n };\n\n // Trigger one or many events, firing all bound callbacks. Callbacks are\n // passed the same arguments as `trigger` is, apart from the event name\n // (unless you're listening on `\"all\"`, which will cause your callback to\n // receive the true name of the event as the first argument).\n Events.trigger = function(name) {\n if (!this._events) return this;\n\n var length = Math.max(0, arguments.length - 1);\n var args = Array(length);\n for (var i = 0; i < length; i++) args[i] = arguments[i + 1];\n\n eventsApi(triggerApi, this._events, name, void 0, args);\n return this;\n };\n\n // Handles triggering the appropriate event callbacks.\n var triggerApi = function(objEvents, name, callback, args) {\n if (objEvents) {\n var events = objEvents[name];\n var allEvents = objEvents.all;\n if (events && allEvents) allEvents = allEvents.slice();\n if (events) triggerEvents(events, args);\n if (allEvents) triggerEvents(allEvents, [name].concat(args));\n }\n return objEvents;\n };\n\n // A difficult-to-believe, but optimized internal dispatch function for\n // triggering events. Tries to keep the usual cases speedy (most internal\n // Backbone events have 3 arguments).\n var triggerEvents = function(events, args) {\n var ev, i = -1, l = events.length, a1 = args[0], a2 = args[1], a3 = args[2];\n switch (args.length) {\n case 0: while (++i < l) (ev = events[i]).callback.call(ev.ctx); return;\n case 1: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1); return;\n case 2: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1, a2); return;\n case 3: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1, a2, a3); return;\n default: while (++i < l) (ev = events[i]).callback.apply(ev.ctx, args); return;\n }\n };\n\n // A listening class that tracks and cleans up memory bindings\n // when all callbacks have been offed.\n var Listening = function(listener, obj) {\n this.id = listener._listenId;\n this.listener = listener;\n this.obj = obj;\n this.interop = true;\n this.count = 0;\n this._events = void 0;\n };\n\n Listening.prototype.on = Events.on;\n\n // Offs a callback (or several).\n // Uses an optimized counter if the listenee uses Backbone.Events.\n // Otherwise, falls back to manual tracking to support events\n // library interop.\n Listening.prototype.off = function(name, callback) {\n var cleanup;\n if (this.interop) {\n this._events = eventsApi(offApi, this._events, name, callback, {\n context: void 0,\n listeners: void 0\n });\n cleanup = !this._events;\n } else {\n this.count--;\n cleanup = this.count === 0;\n }\n if (cleanup) this.cleanup();\n };\n\n // Cleans up memory bindings between the listener and the listenee.\n Listening.prototype.cleanup = function() {\n delete this.listener._listeningTo[this.obj._listenId];\n if (!this.interop) delete this.obj._listeners[this.id];\n };\n\n // Aliases for backwards compatibility.\n Events.bind = Events.on;\n Events.unbind = Events.off;\n\n // Allow the `Backbone` object to serve as a global event bus, for folks who\n // want global \"pubsub\" in a convenient place.\n _.extend(Backbone, Events);\n\n // Backbone.Model\n // --------------\n\n // Backbone **Models** are the basic data object in the framework --\n // frequently representing a row in a table in a database on your server.\n // A discrete chunk of data and a bunch of useful, related methods for\n // performing computations and transformations on that data.\n\n // Create a new model with the specified attributes. A client id (`cid`)\n // is automatically generated and assigned for you.\n var Model = Backbone.Model = function(attributes, options) {\n var attrs = attributes || {};\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n this.cid = _.uniqueId(this.cidPrefix);\n this.attributes = {};\n if (options.collection) this.collection = options.collection;\n if (options.parse) attrs = this.parse(attrs, options) || {};\n var defaults = _.result(this, 'defaults');\n attrs = _.defaults(_.extend({}, defaults, attrs), defaults);\n this.set(attrs, options);\n this.changed = {};\n this.initialize.apply(this, arguments);\n };\n\n // Attach all inheritable methods to the Model prototype.\n _.extend(Model.prototype, Events, {\n\n // A hash of attributes whose current and previous value differ.\n changed: null,\n\n // The value returned during the last failed validation.\n validationError: null,\n\n // The default name for the JSON `id` attribute is `\"id\"`. MongoDB and\n // CouchDB users may want to set this to `\"_id\"`.\n idAttribute: 'id',\n\n // The prefix is used to create the client id which is used to identify models locally.\n // You may want to override this if you're experiencing name clashes with model ids.\n cidPrefix: 'c',\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Model.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // Return a copy of the model's `attributes` object.\n toJSON: function(options) {\n return _.clone(this.attributes);\n },\n\n // Proxy `Backbone.sync` by default -- but override this if you need\n // custom syncing semantics for *this* particular model.\n sync: function() {\n return Backbone.sync.apply(this, arguments);\n },\n\n // Get the value of an attribute.\n get: function(attr) {\n return this.attributes[attr];\n },\n\n // Get the HTML-escaped value of an attribute.\n escape: function(attr) {\n return _.escape(this.get(attr));\n },\n\n // Returns `true` if the attribute contains a value that is not null\n // or undefined.\n has: function(attr) {\n return this.get(attr) != null;\n },\n\n // Special-cased proxy to underscore's `_.matches` method.\n matches: function(attrs) {\n return !!_.iteratee(attrs, this)(this.attributes);\n },\n\n // Set a hash of model attributes on the object, firing `\"change\"`. This is\n // the core primitive operation of a model, updating the data and notifying\n // anyone who needs to know about the change in state. The heart of the beast.\n set: function(key, val, options) {\n if (key == null) return this;\n\n // Handle both `\"key\", value` and `{key: value}` -style arguments.\n var attrs;\n if (typeof key === 'object') {\n attrs = key;\n options = val;\n } else {\n (attrs = {})[key] = val;\n }\n\n options || (options = {});\n\n // Run validation.\n if (!this._validate(attrs, options)) return false;\n\n // Extract attributes and options.\n var unset = options.unset;\n var silent = options.silent;\n var changes = [];\n var changing = this._changing;\n this._changing = true;\n\n if (!changing) {\n this._previousAttributes = _.clone(this.attributes);\n this.changed = {};\n }\n\n var current = this.attributes;\n var changed = this.changed;\n var prev = this._previousAttributes;\n\n // For each `set` attribute, update or delete the current value.\n for (var attr in attrs) {\n val = attrs[attr];\n if (!_.isEqual(current[attr], val)) changes.push(attr);\n if (!_.isEqual(prev[attr], val)) {\n changed[attr] = val;\n } else {\n delete changed[attr];\n }\n unset ? delete current[attr] : current[attr] = val;\n }\n\n // Update the `id`.\n if (this.idAttribute in attrs) this.id = this.get(this.idAttribute);\n\n // Trigger all relevant attribute changes.\n if (!silent) {\n if (changes.length) this._pending = options;\n for (var i = 0; i < changes.length; i++) {\n this.trigger('change:' + changes[i], this, current[changes[i]], options);\n }\n }\n\n // You might be wondering why there's a `while` loop here. Changes can\n // be recursively nested within `\"change\"` events.\n if (changing) return this;\n if (!silent) {\n while (this._pending) {\n options = this._pending;\n this._pending = false;\n this.trigger('change', this, options);\n }\n }\n this._pending = false;\n this._changing = false;\n return this;\n },\n\n // Remove an attribute from the model, firing `\"change\"`. `unset` is a noop\n // if the attribute doesn't exist.\n unset: function(attr, options) {\n return this.set(attr, void 0, _.extend({}, options, {unset: true}));\n },\n\n // Clear all attributes on the model, firing `\"change\"`.\n clear: function(options) {\n var attrs = {};\n for (var key in this.attributes) attrs[key] = void 0;\n return this.set(attrs, _.extend({}, options, {unset: true}));\n },\n\n // Determine if the model has changed since the last `\"change\"` event.\n // If you specify an attribute name, determine if that attribute has changed.\n hasChanged: function(attr) {\n if (attr == null) return !_.isEmpty(this.changed);\n return _.has(this.changed, attr);\n },\n\n // Return an object containing all the attributes that have changed, or\n // false if there are no changed attributes. Useful for determining what\n // parts of a view need to be updated and/or what attributes need to be\n // persisted to the server. Unset attributes will be set to undefined.\n // You can also pass an attributes object to diff against the model,\n // determining if there *would be* a change.\n changedAttributes: function(diff) {\n if (!diff) return this.hasChanged() ? _.clone(this.changed) : false;\n var old = this._changing ? this._previousAttributes : this.attributes;\n var changed = {};\n var hasChanged;\n for (var attr in diff) {\n var val = diff[attr];\n if (_.isEqual(old[attr], val)) continue;\n changed[attr] = val;\n hasChanged = true;\n }\n return hasChanged ? changed : false;\n },\n\n // Get the previous value of an attribute, recorded at the time the last\n // `\"change\"` event was fired.\n previous: function(attr) {\n if (attr == null || !this._previousAttributes) return null;\n return this._previousAttributes[attr];\n },\n\n // Get all of the attributes of the model at the time of the previous\n // `\"change\"` event.\n previousAttributes: function() {\n return _.clone(this._previousAttributes);\n },\n\n // Fetch the model from the server, merging the response with the model's\n // local attributes. Any changed attributes will trigger a \"change\" event.\n fetch: function(options) {\n options = _.extend({parse: true}, options);\n var model = this;\n var success = options.success;\n options.success = function(resp) {\n var serverAttrs = options.parse ? model.parse(resp, options) : resp;\n if (!model.set(serverAttrs, options)) return false;\n if (success) success.call(options.context, model, resp, options);\n model.trigger('sync', model, resp, options);\n };\n wrapError(this, options);\n return this.sync('read', this, options);\n },\n\n // Set a hash of model attributes, and sync the model to the server.\n // If the server returns an attributes hash that differs, the model's\n // state will be `set` again.\n save: function(key, val, options) {\n // Handle both `\"key\", value` and `{key: value}` -style arguments.\n var attrs;\n if (key == null || typeof key === 'object') {\n attrs = key;\n options = val;\n } else {\n (attrs = {})[key] = val;\n }\n\n options = _.extend({validate: true, parse: true}, options);\n var wait = options.wait;\n\n // If we're not waiting and attributes exist, save acts as\n // `set(attr).save(null, opts)` with validation. Otherwise, check if\n // the model will be valid when the attributes, if any, are set.\n if (attrs && !wait) {\n if (!this.set(attrs, options)) return false;\n } else if (!this._validate(attrs, options)) {\n return false;\n }\n\n // After a successful server-side save, the client is (optionally)\n // updated with the server-side state.\n var model = this;\n var success = options.success;\n var attributes = this.attributes;\n options.success = function(resp) {\n // Ensure attributes are restored during synchronous saves.\n model.attributes = attributes;\n var serverAttrs = options.parse ? model.parse(resp, options) : resp;\n if (wait) serverAttrs = _.extend({}, attrs, serverAttrs);\n if (serverAttrs && !model.set(serverAttrs, options)) return false;\n if (success) success.call(options.context, model, resp, options);\n model.trigger('sync', model, resp, options);\n };\n wrapError(this, options);\n\n // Set temporary attributes if `{wait: true}` to properly find new ids.\n if (attrs && wait) this.attributes = _.extend({}, attributes, attrs);\n\n var method = this.isNew() ? 'create' : options.patch ? 'patch' : 'update';\n if (method === 'patch' && !options.attrs) options.attrs = attrs;\n var xhr = this.sync(method, this, options);\n\n // Restore attributes.\n this.attributes = attributes;\n\n return xhr;\n },\n\n // Destroy this model on the server if it was already persisted.\n // Optimistically removes the model from its collection, if it has one.\n // If `wait: true` is passed, waits for the server to respond before removal.\n destroy: function(options) {\n options = options ? _.clone(options) : {};\n var model = this;\n var success = options.success;\n var wait = options.wait;\n\n var destroy = function() {\n model.stopListening();\n model.trigger('destroy', model, model.collection, options);\n };\n\n options.success = function(resp) {\n if (wait) destroy();\n if (success) success.call(options.context, model, resp, options);\n if (!model.isNew()) model.trigger('sync', model, resp, options);\n };\n\n var xhr = false;\n if (this.isNew()) {\n _.defer(options.success);\n } else {\n wrapError(this, options);\n xhr = this.sync('delete', this, options);\n }\n if (!wait) destroy();\n return xhr;\n },\n\n // Default URL for the model's representation on the server -- if you're\n // using Backbone's restful methods, override this to change the endpoint\n // that will be called.\n url: function() {\n var base =\n _.result(this, 'urlRoot') ||\n _.result(this.collection, 'url') ||\n urlError();\n if (this.isNew()) return base;\n var id = this.get(this.idAttribute);\n return base.replace(/[^\\/]$/, '$&/') + encodeURIComponent(id);\n },\n\n // **parse** converts a response into the hash of attributes to be `set` on\n // the model. The default implementation is just to pass the response along.\n parse: function(resp, options) {\n return resp;\n },\n\n // Create a new model with identical attributes to this one.\n clone: function() {\n return new this.constructor(this.attributes);\n },\n\n // A model is new if it has never been saved to the server, and lacks an id.\n isNew: function() {\n return !this.has(this.idAttribute);\n },\n\n // Check if the model is currently in a valid state.\n isValid: function(options) {\n return this._validate({}, _.extend({}, options, {validate: true}));\n },\n\n // Run validation against the next complete set of model attributes,\n // returning `true` if all is well. Otherwise, fire an `\"invalid\"` event.\n _validate: function(attrs, options) {\n if (!options.validate || !this.validate) return true;\n attrs = _.extend({}, this.attributes, attrs);\n var error = this.validationError = this.validate(attrs, options) || null;\n if (!error) return true;\n this.trigger('invalid', this, error, _.extend(options, {validationError: error}));\n return false;\n }\n\n });\n\n // Backbone.Collection\n // -------------------\n\n // If models tend to represent a single row of data, a Backbone Collection is\n // more analogous to a table full of data ... or a small slice or page of that\n // table, or a collection of rows that belong together for a particular reason\n // -- all of the messages in this particular folder, all of the documents\n // belonging to this particular author, and so on. Collections maintain\n // indexes of their models, both in order, and for lookup by `id`.\n\n // Create a new **Collection**, perhaps to contain a specific type of `model`.\n // If a `comparator` is specified, the Collection will maintain\n // its models in sort order, as they're added and removed.\n var Collection = Backbone.Collection = function(models, options) {\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n if (options.model) this.model = options.model;\n if (options.comparator !== void 0) this.comparator = options.comparator;\n this._reset();\n this.initialize.apply(this, arguments);\n if (models) this.reset(models, _.extend({silent: true}, options));\n };\n\n // Default options for `Collection#set`.\n var setOptions = {add: true, remove: true, merge: true};\n var addOptions = {add: true, remove: false};\n\n // Splices `insert` into `array` at index `at`.\n var splice = function(array, insert, at) {\n at = Math.min(Math.max(at, 0), array.length);\n var tail = Array(array.length - at);\n var length = insert.length;\n var i;\n for (i = 0; i < tail.length; i++) tail[i] = array[i + at];\n for (i = 0; i < length; i++) array[i + at] = insert[i];\n for (i = 0; i < tail.length; i++) array[i + length + at] = tail[i];\n };\n\n // Define the Collection's inheritable methods.\n _.extend(Collection.prototype, Events, {\n\n // The default model for a collection is just a **Backbone.Model**.\n // This should be overridden in most cases.\n model: Model,\n\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Collection.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // The JSON representation of a Collection is an array of the\n // models' attributes.\n toJSON: function(options) {\n return this.map(function(model) { return model.toJSON(options); });\n },\n\n // Proxy `Backbone.sync` by default.\n sync: function() {\n return Backbone.sync.apply(this, arguments);\n },\n\n // Add a model, or list of models to the set. `models` may be Backbone\n // Models or raw JavaScript objects to be converted to Models, or any\n // combination of the two.\n add: function(models, options) {\n return this.set(models, _.extend({merge: false}, options, addOptions));\n },\n\n // Remove a model, or a list of models from the set.\n remove: function(models, options) {\n options = _.extend({}, options);\n var singular = !_.isArray(models);\n models = singular ? [models] : models.slice();\n var removed = this._removeModels(models, options);\n if (!options.silent && removed.length) {\n options.changes = {added: [], merged: [], removed: removed};\n this.trigger('update', this, options);\n }\n return singular ? removed[0] : removed;\n },\n\n // Update a collection by `set`-ing a new list of models, adding new ones,\n // removing models that are no longer present, and merging models that\n // already exist in the collection, as necessary. Similar to **Model#set**,\n // the core operation for updating the data contained by the collection.\n set: function(models, options) {\n if (models == null) return;\n\n options = _.extend({}, setOptions, options);\n if (options.parse && !this._isModel(models)) {\n models = this.parse(models, options) || [];\n }\n\n var singular = !_.isArray(models);\n models = singular ? [models] : models.slice();\n\n var at = options.at;\n if (at != null) at = +at;\n if (at > this.length) at = this.length;\n if (at < 0) at += this.length + 1;\n\n var set = [];\n var toAdd = [];\n var toMerge = [];\n var toRemove = [];\n var modelMap = {};\n\n var add = options.add;\n var merge = options.merge;\n var remove = options.remove;\n\n var sort = false;\n var sortable = this.comparator && at == null && options.sort !== false;\n var sortAttr = _.isString(this.comparator) ? this.comparator : null;\n\n // Turn bare objects into model references, and prevent invalid models\n // from being added.\n var model, i;\n for (i = 0; i < models.length; i++) {\n model = models[i];\n\n // If a duplicate is found, prevent it from being added and\n // optionally merge it into the existing model.\n var existing = this.get(model);\n if (existing) {\n if (merge && model !== existing) {\n var attrs = this._isModel(model) ? model.attributes : model;\n if (options.parse) attrs = existing.parse(attrs, options);\n existing.set(attrs, options);\n toMerge.push(existing);\n if (sortable && !sort) sort = existing.hasChanged(sortAttr);\n }\n if (!modelMap[existing.cid]) {\n modelMap[existing.cid] = true;\n set.push(existing);\n }\n models[i] = existing;\n\n // If this is a new, valid model, push it to the `toAdd` list.\n } else if (add) {\n model = models[i] = this._prepareModel(model, options);\n if (model) {\n toAdd.push(model);\n this._addReference(model, options);\n modelMap[model.cid] = true;\n set.push(model);\n }\n }\n }\n\n // Remove stale models.\n if (remove) {\n for (i = 0; i < this.length; i++) {\n model = this.models[i];\n if (!modelMap[model.cid]) toRemove.push(model);\n }\n if (toRemove.length) this._removeModels(toRemove, options);\n }\n\n // See if sorting is needed, update `length` and splice in new models.\n var orderChanged = false;\n var replace = !sortable && add && remove;\n if (set.length && replace) {\n orderChanged = this.length !== set.length || _.some(this.models, function(m, index) {\n return m !== set[index];\n });\n this.models.length = 0;\n splice(this.models, set, 0);\n this.length = this.models.length;\n } else if (toAdd.length) {\n if (sortable) sort = true;\n splice(this.models, toAdd, at == null ? this.length : at);\n this.length = this.models.length;\n }\n\n // Silently sort the collection if appropriate.\n if (sort) this.sort({silent: true});\n\n // Unless silenced, it's time to fire all appropriate add/sort/update events.\n if (!options.silent) {\n for (i = 0; i < toAdd.length; i++) {\n if (at != null) options.index = at + i;\n model = toAdd[i];\n model.trigger('add', model, this, options);\n }\n if (sort || orderChanged) this.trigger('sort', this, options);\n if (toAdd.length || toRemove.length || toMerge.length) {\n options.changes = {\n added: toAdd,\n removed: toRemove,\n merged: toMerge\n };\n this.trigger('update', this, options);\n }\n }\n\n // Return the added (or merged) model (or models).\n return singular ? models[0] : models;\n },\n\n // When you have more items than you want to add or remove individually,\n // you can reset the entire set with a new list of models, without firing\n // any granular `add` or `remove` events. Fires `reset` when finished.\n // Useful for bulk operations and optimizations.\n reset: function(models, options) {\n options = options ? _.clone(options) : {};\n for (var i = 0; i < this.models.length; i++) {\n this._removeReference(this.models[i], options);\n }\n options.previousModels = this.models;\n this._reset();\n models = this.add(models, _.extend({silent: true}, options));\n if (!options.silent) this.trigger('reset', this, options);\n return models;\n },\n\n // Add a model to the end of the collection.\n push: function(model, options) {\n return this.add(model, _.extend({at: this.length}, options));\n },\n\n // Remove a model from the end of the collection.\n pop: function(options) {\n var model = this.at(this.length - 1);\n return this.remove(model, options);\n },\n\n // Add a model to the beginning of the collection.\n unshift: function(model, options) {\n return this.add(model, _.extend({at: 0}, options));\n },\n\n // Remove a model from the beginning of the collection.\n shift: function(options) {\n var model = this.at(0);\n return this.remove(model, options);\n },\n\n // Slice out a sub-array of models from the collection.\n slice: function() {\n return slice.apply(this.models, arguments);\n },\n\n // Get a model from the set by id, cid, model object with id or cid\n // properties, or an attributes object that is transformed through modelId.\n get: function(obj) {\n if (obj == null) return void 0;\n return this._byId[obj] ||\n this._byId[this.modelId(this._isModel(obj) ? obj.attributes : obj)] ||\n obj.cid && this._byId[obj.cid];\n },\n\n // Returns `true` if the model is in the collection.\n has: function(obj) {\n return this.get(obj) != null;\n },\n\n // Get the model at the given index.\n at: function(index) {\n if (index < 0) index += this.length;\n return this.models[index];\n },\n\n // Return models with matching attributes. Useful for simple cases of\n // `filter`.\n where: function(attrs, first) {\n return this[first ? 'find' : 'filter'](attrs);\n },\n\n // Return the first model with matching attributes. Useful for simple cases\n // of `find`.\n findWhere: function(attrs) {\n return this.where(attrs, true);\n },\n\n // Force the collection to re-sort itself. You don't need to call this under\n // normal circumstances, as the set will maintain sort order as each item\n // is added.\n sort: function(options) {\n var comparator = this.comparator;\n if (!comparator) throw new Error('Cannot sort a set without a comparator');\n options || (options = {});\n\n var length = comparator.length;\n if (_.isFunction(comparator)) comparator = comparator.bind(this);\n\n // Run sort based on type of `comparator`.\n if (length === 1 || _.isString(comparator)) {\n this.models = this.sortBy(comparator);\n } else {\n this.models.sort(comparator);\n }\n if (!options.silent) this.trigger('sort', this, options);\n return this;\n },\n\n // Pluck an attribute from each model in the collection.\n pluck: function(attr) {\n return this.map(attr + '');\n },\n\n // Fetch the default set of models for this collection, resetting the\n // collection when they arrive. If `reset: true` is passed, the response\n // data will be passed through the `reset` method instead of `set`.\n fetch: function(options) {\n options = _.extend({parse: true}, options);\n var success = options.success;\n var collection = this;\n options.success = function(resp) {\n var method = options.reset ? 'reset' : 'set';\n collection[method](resp, options);\n if (success) success.call(options.context, collection, resp, options);\n collection.trigger('sync', collection, resp, options);\n };\n wrapError(this, options);\n return this.sync('read', this, options);\n },\n\n // Create a new instance of a model in this collection. Add the model to the\n // collection immediately, unless `wait: true` is passed, in which case we\n // wait for the server to agree.\n create: function(model, options) {\n options = options ? _.clone(options) : {};\n var wait = options.wait;\n model = this._prepareModel(model, options);\n if (!model) return false;\n if (!wait) this.add(model, options);\n var collection = this;\n var success = options.success;\n options.success = function(m, resp, callbackOpts) {\n if (wait) collection.add(m, callbackOpts);\n if (success) success.call(callbackOpts.context, m, resp, callbackOpts);\n };\n model.save(null, options);\n return model;\n },\n\n // **parse** converts a response into a list of models to be added to the\n // collection. The default implementation is just to pass it through.\n parse: function(resp, options) {\n return resp;\n },\n\n // Create a new collection with an identical list of models as this one.\n clone: function() {\n return new this.constructor(this.models, {\n model: this.model,\n comparator: this.comparator\n });\n },\n\n // Define how to uniquely identify models in the collection.\n modelId: function(attrs) {\n return attrs[this.model.prototype.idAttribute || 'id'];\n },\n\n // Get an iterator of all models in this collection.\n values: function() {\n return new CollectionIterator(this, ITERATOR_VALUES);\n },\n\n // Get an iterator of all model IDs in this collection.\n keys: function() {\n return new CollectionIterator(this, ITERATOR_KEYS);\n },\n\n // Get an iterator of all [ID, model] tuples in this collection.\n entries: function() {\n return new CollectionIterator(this, ITERATOR_KEYSVALUES);\n },\n\n // Private method to reset all internal state. Called when the collection\n // is first initialized or reset.\n _reset: function() {\n this.length = 0;\n this.models = [];\n this._byId = {};\n },\n\n // Prepare a hash of attributes (or other model) to be added to this\n // collection.\n _prepareModel: function(attrs, options) {\n if (this._isModel(attrs)) {\n if (!attrs.collection) attrs.collection = this;\n return attrs;\n }\n options = options ? _.clone(options) : {};\n options.collection = this;\n var model = new this.model(attrs, options);\n if (!model.validationError) return model;\n this.trigger('invalid', this, model.validationError, options);\n return false;\n },\n\n // Internal method called by both remove and set.\n _removeModels: function(models, options) {\n var removed = [];\n for (var i = 0; i < models.length; i++) {\n var model = this.get(models[i]);\n if (!model) continue;\n\n var index = this.indexOf(model);\n this.models.splice(index, 1);\n this.length--;\n\n // Remove references before triggering 'remove' event to prevent an\n // infinite loop. #3693\n delete this._byId[model.cid];\n var id = this.modelId(model.attributes);\n if (id != null) delete this._byId[id];\n\n if (!options.silent) {\n options.index = index;\n model.trigger('remove', model, this, options);\n }\n\n removed.push(model);\n this._removeReference(model, options);\n }\n return removed;\n },\n\n // Method for checking whether an object should be considered a model for\n // the purposes of adding to the collection.\n _isModel: function(model) {\n return model instanceof Model;\n },\n\n // Internal method to create a model's ties to a collection.\n _addReference: function(model, options) {\n this._byId[model.cid] = model;\n var id = this.modelId(model.attributes);\n if (id != null) this._byId[id] = model;\n model.on('all', this._onModelEvent, this);\n },\n\n // Internal method to sever a model's ties to a collection.\n _removeReference: function(model, options) {\n delete this._byId[model.cid];\n var id = this.modelId(model.attributes);\n if (id != null) delete this._byId[id];\n if (this === model.collection) delete model.collection;\n model.off('all', this._onModelEvent, this);\n },\n\n // Internal method called every time a model in the set fires an event.\n // Sets need to update their indexes when models change ids. All other\n // events simply proxy through. \"add\" and \"remove\" events that originate\n // in other collections are ignored.\n _onModelEvent: function(event, model, collection, options) {\n if (model) {\n if ((event === 'add' || event === 'remove') && collection !== this) return;\n if (event === 'destroy') this.remove(model, options);\n if (event === 'change') {\n var prevId = this.modelId(model.previousAttributes());\n var id = this.modelId(model.attributes);\n if (prevId !== id) {\n if (prevId != null) delete this._byId[prevId];\n if (id != null) this._byId[id] = model;\n }\n }\n }\n this.trigger.apply(this, arguments);\n }\n\n });\n\n // Defining an @@iterator method implements JavaScript's Iterable protocol.\n // In modern ES2015 browsers, this value is found at Symbol.iterator.\n /* global Symbol */\n var $$iterator = typeof Symbol === 'function' && Symbol.iterator;\n if ($$iterator) {\n Collection.prototype[$$iterator] = Collection.prototype.values;\n }\n\n // CollectionIterator\n // ------------------\n\n // A CollectionIterator implements JavaScript's Iterator protocol, allowing the\n // use of `for of` loops in modern browsers and interoperation between\n // Backbone.Collection and other JavaScript functions and third-party libraries\n // which can operate on Iterables.\n var CollectionIterator = function(collection, kind) {\n this._collection = collection;\n this._kind = kind;\n this._index = 0;\n };\n\n // This \"enum\" defines the three possible kinds of values which can be emitted\n // by a CollectionIterator that correspond to the values(), keys() and entries()\n // methods on Collection, respectively.\n var ITERATOR_VALUES = 1;\n var ITERATOR_KEYS = 2;\n var ITERATOR_KEYSVALUES = 3;\n\n // All Iterators should themselves be Iterable.\n if ($$iterator) {\n CollectionIterator.prototype[$$iterator] = function() {\n return this;\n };\n }\n\n CollectionIterator.prototype.next = function() {\n if (this._collection) {\n\n // Only continue iterating if the iterated collection is long enough.\n if (this._index < this._collection.length) {\n var model = this._collection.at(this._index);\n this._index++;\n\n // Construct a value depending on what kind of values should be iterated.\n var value;\n if (this._kind === ITERATOR_VALUES) {\n value = model;\n } else {\n var id = this._collection.modelId(model.attributes);\n if (this._kind === ITERATOR_KEYS) {\n value = id;\n } else { // ITERATOR_KEYSVALUES\n value = [id, model];\n }\n }\n return {value: value, done: false};\n }\n\n // Once exhausted, remove the reference to the collection so future\n // calls to the next method always return done.\n this._collection = void 0;\n }\n\n return {value: void 0, done: true};\n };\n\n // Backbone.View\n // -------------\n\n // Backbone Views are almost more convention than they are actual code. A View\n // is simply a JavaScript object that represents a logical chunk of UI in the\n // DOM. This might be a single item, an entire list, a sidebar or panel, or\n // even the surrounding frame which wraps your whole app. Defining a chunk of\n // UI as a **View** allows you to define your DOM events declaratively, without\n // having to worry about render order ... and makes it easy for the view to\n // react to specific changes in the state of your models.\n\n // Creating a Backbone.View creates its initial element outside of the DOM,\n // if an existing element is not provided...\n var View = Backbone.View = function(options) {\n this.cid = _.uniqueId('view');\n this.preinitialize.apply(this, arguments);\n _.extend(this, _.pick(options, viewOptions));\n this._ensureElement();\n this.initialize.apply(this, arguments);\n };\n\n // Cached regex to split keys for `delegate`.\n var delegateEventSplitter = /^(\\S+)\\s*(.*)$/;\n\n // List of view options to be set as properties.\n var viewOptions = ['model', 'collection', 'el', 'id', 'attributes', 'className', 'tagName', 'events'];\n\n // Set up all inheritable **Backbone.View** properties and methods.\n _.extend(View.prototype, Events, {\n\n // The default `tagName` of a View's element is `\"div\"`.\n tagName: 'div',\n\n // jQuery delegate for element lookup, scoped to DOM elements within the\n // current view. This should be preferred to global lookups where possible.\n $: function(selector) {\n return this.$el.find(selector);\n },\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the View\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // **render** is the core function that your view should override, in order\n // to populate its element (`this.el`), with the appropriate HTML. The\n // convention is for **render** to always return `this`.\n render: function() {\n return this;\n },\n\n // Remove this view by taking the element out of the DOM, and removing any\n // applicable Backbone.Events listeners.\n remove: function() {\n this._removeElement();\n this.stopListening();\n return this;\n },\n\n // Remove this view's element from the document and all event listeners\n // attached to it. Exposed for subclasses using an alternative DOM\n // manipulation API.\n _removeElement: function() {\n this.$el.remove();\n },\n\n // Change the view's element (`this.el` property) and re-delegate the\n // view's events on the new element.\n setElement: function(element) {\n this.undelegateEvents();\n this._setElement(element);\n this.delegateEvents();\n return this;\n },\n\n // Creates the `this.el` and `this.$el` references for this view using the\n // given `el`. `el` can be a CSS selector or an HTML string, a jQuery\n // context or an element. Subclasses can override this to utilize an\n // alternative DOM manipulation API and are only required to set the\n // `this.el` property.\n _setElement: function(el) {\n this.$el = el instanceof Backbone.$ ? el : Backbone.$(el);\n this.el = this.$el[0];\n },\n\n // Set callbacks, where `this.events` is a hash of\n //\n // *{\"event selector\": \"callback\"}*\n //\n // {\n // 'mousedown .title': 'edit',\n // 'click .button': 'save',\n // 'click .open': function(e) { ... }\n // }\n //\n // pairs. Callbacks will be bound to the view, with `this` set properly.\n // Uses event delegation for efficiency.\n // Omitting the selector binds the event to `this.el`.\n delegateEvents: function(events) {\n events || (events = _.result(this, 'events'));\n if (!events) return this;\n this.undelegateEvents();\n for (var key in events) {\n var method = events[key];\n if (!_.isFunction(method)) method = this[method];\n if (!method) continue;\n var match = key.match(delegateEventSplitter);\n this.delegate(match[1], match[2], method.bind(this));\n }\n return this;\n },\n\n // Add a single event listener to the view's element (or a child element\n // using `selector`). This only works for delegate-able events: not `focus`,\n // `blur`, and not `change`, `submit`, and `reset` in Internet Explorer.\n delegate: function(eventName, selector, listener) {\n this.$el.on(eventName + '.delegateEvents' + this.cid, selector, listener);\n return this;\n },\n\n // Clears all callbacks previously bound to the view by `delegateEvents`.\n // You usually don't need to use this, but may wish to if you have multiple\n // Backbone views attached to the same DOM element.\n undelegateEvents: function() {\n if (this.$el) this.$el.off('.delegateEvents' + this.cid);\n return this;\n },\n\n // A finer-grained `undelegateEvents` for removing a single delegated event.\n // `selector` and `listener` are both optional.\n undelegate: function(eventName, selector, listener) {\n this.$el.off(eventName + '.delegateEvents' + this.cid, selector, listener);\n return this;\n },\n\n // Produces a DOM element to be assigned to your view. Exposed for\n // subclasses using an alternative DOM manipulation API.\n _createElement: function(tagName) {\n return document.createElement(tagName);\n },\n\n // Ensure that the View has a DOM element to render into.\n // If `this.el` is a string, pass it through `$()`, take the first\n // matching element, and re-assign it to `el`. Otherwise, create\n // an element from the `id`, `className` and `tagName` properties.\n _ensureElement: function() {\n if (!this.el) {\n var attrs = _.extend({}, _.result(this, 'attributes'));\n if (this.id) attrs.id = _.result(this, 'id');\n if (this.className) attrs['class'] = _.result(this, 'className');\n this.setElement(this._createElement(_.result(this, 'tagName')));\n this._setAttributes(attrs);\n } else {\n this.setElement(_.result(this, 'el'));\n }\n },\n\n // Set attributes from a hash on this view's element. Exposed for\n // subclasses using an alternative DOM manipulation API.\n _setAttributes: function(attributes) {\n this.$el.attr(attributes);\n }\n\n });\n\n // Proxy Backbone class methods to Underscore functions, wrapping the model's\n // `attributes` object or collection's `models` array behind the scenes.\n //\n // collection.filter(function(model) { return model.get('age') > 10 });\n // collection.each(this.addView);\n //\n // `Function#apply` can be slow so we use the method's arg count, if we know it.\n var addMethod = function(base, length, method, attribute) {\n switch (length) {\n case 1: return function() {\n return base[method](this[attribute]);\n };\n case 2: return function(value) {\n return base[method](this[attribute], value);\n };\n case 3: return function(iteratee, context) {\n return base[method](this[attribute], cb(iteratee, this), context);\n };\n case 4: return function(iteratee, defaultVal, context) {\n return base[method](this[attribute], cb(iteratee, this), defaultVal, context);\n };\n default: return function() {\n var args = slice.call(arguments);\n args.unshift(this[attribute]);\n return base[method].apply(base, args);\n };\n }\n };\n\n var addUnderscoreMethods = function(Class, base, methods, attribute) {\n _.each(methods, function(length, method) {\n if (base[method]) Class.prototype[method] = addMethod(base, length, method, attribute);\n });\n };\n\n // Support `collection.sortBy('attr')` and `collection.findWhere({id: 1})`.\n var cb = function(iteratee, instance) {\n if (_.isFunction(iteratee)) return iteratee;\n if (_.isObject(iteratee) && !instance._isModel(iteratee)) return modelMatcher(iteratee);\n if (_.isString(iteratee)) return function(model) { return model.get(iteratee); };\n return iteratee;\n };\n var modelMatcher = function(attrs) {\n var matcher = _.matches(attrs);\n return function(model) {\n return matcher(model.attributes);\n };\n };\n\n // Underscore methods that we want to implement on the Collection.\n // 90% of the core usefulness of Backbone Collections is actually implemented\n // right here:\n var collectionMethods = {forEach: 3, each: 3, map: 3, collect: 3, reduce: 0,\n foldl: 0, inject: 0, reduceRight: 0, foldr: 0, find: 3, detect: 3, filter: 3,\n select: 3, reject: 3, every: 3, all: 3, some: 3, any: 3, include: 3, includes: 3,\n contains: 3, invoke: 0, max: 3, min: 3, toArray: 1, size: 1, first: 3,\n head: 3, take: 3, initial: 3, rest: 3, tail: 3, drop: 3, last: 3,\n without: 0, difference: 0, indexOf: 3, shuffle: 1, lastIndexOf: 3,\n isEmpty: 1, chain: 1, sample: 3, partition: 3, groupBy: 3, countBy: 3,\n sortBy: 3, indexBy: 3, findIndex: 3, findLastIndex: 3};\n\n\n // Underscore methods that we want to implement on the Model, mapped to the\n // number of arguments they take.\n var modelMethods = {keys: 1, values: 1, pairs: 1, invert: 1, pick: 0,\n omit: 0, chain: 1, isEmpty: 1};\n\n // Mix in each Underscore method as a proxy to `Collection#models`.\n\n _.each([\n [Collection, collectionMethods, 'models'],\n [Model, modelMethods, 'attributes']\n ], function(config) {\n var Base = config[0],\n methods = config[1],\n attribute = config[2];\n\n Base.mixin = function(obj) {\n var mappings = _.reduce(_.functions(obj), function(memo, name) {\n memo[name] = 0;\n return memo;\n }, {});\n addUnderscoreMethods(Base, obj, mappings, attribute);\n };\n\n addUnderscoreMethods(Base, _, methods, attribute);\n });\n\n // Backbone.sync\n // -------------\n\n // Override this function to change the manner in which Backbone persists\n // models to the server. You will be passed the type of request, and the\n // model in question. By default, makes a RESTful Ajax request\n // to the model's `url()`. Some possible customizations could be:\n //\n // * Use `setTimeout` to batch rapid-fire updates into a single request.\n // * Send up the models as XML instead of JSON.\n // * Persist models via WebSockets instead of Ajax.\n //\n // Turn on `Backbone.emulateHTTP` in order to send `PUT` and `DELETE` requests\n // as `POST`, with a `_method` parameter containing the true HTTP method,\n // as well as all requests with the body as `application/x-www-form-urlencoded`\n // instead of `application/json` with the model in a param named `model`.\n // Useful when interfacing with server-side languages like **PHP** that make\n // it difficult to read the body of `PUT` requests.\n Backbone.sync = function(method, model, options) {\n var type = methodMap[method];\n\n // Default options, unless specified.\n _.defaults(options || (options = {}), {\n emulateHTTP: Backbone.emulateHTTP,\n emulateJSON: Backbone.emulateJSON\n });\n\n // Default JSON-request options.\n var params = {type: type, dataType: 'json'};\n\n // Ensure that we have a URL.\n if (!options.url) {\n params.url = _.result(model, 'url') || urlError();\n }\n\n // Ensure that we have the appropriate request data.\n if (options.data == null && model && (method === 'create' || method === 'update' || method === 'patch')) {\n params.contentType = 'application/json';\n params.data = JSON.stringify(options.attrs || model.toJSON(options));\n }\n\n // For older servers, emulate JSON by encoding the request into an HTML-form.\n if (options.emulateJSON) {\n params.contentType = 'application/x-www-form-urlencoded';\n params.data = params.data ? {model: params.data} : {};\n }\n\n // For older servers, emulate HTTP by mimicking the HTTP method with `_method`\n // And an `X-HTTP-Method-Override` header.\n if (options.emulateHTTP && (type === 'PUT' || type === 'DELETE' || type === 'PATCH')) {\n params.type = 'POST';\n if (options.emulateJSON) params.data._method = type;\n var beforeSend = options.beforeSend;\n options.beforeSend = function(xhr) {\n xhr.setRequestHeader('X-HTTP-Method-Override', type);\n if (beforeSend) return beforeSend.apply(this, arguments);\n };\n }\n\n // Don't process data on a non-GET request.\n if (params.type !== 'GET' && !options.emulateJSON) {\n params.processData = false;\n }\n\n // Pass along `textStatus` and `errorThrown` from jQuery.\n var error = options.error;\n options.error = function(xhr, textStatus, errorThrown) {\n options.textStatus = textStatus;\n options.errorThrown = errorThrown;\n if (error) error.call(options.context, xhr, textStatus, errorThrown);\n };\n\n // Make the request, allowing the user to override any Ajax options.\n var xhr = options.xhr = Backbone.ajax(_.extend(params, options));\n model.trigger('request', model, xhr, options);\n return xhr;\n };\n\n // Map from CRUD to HTTP for our default `Backbone.sync` implementation.\n var methodMap = {\n create: 'POST',\n update: 'PUT',\n patch: 'PATCH',\n delete: 'DELETE',\n read: 'GET'\n };\n\n // Set the default implementation of `Backbone.ajax` to proxy through to `$`.\n // Override this if you'd like to use a different library.\n Backbone.ajax = function() {\n return Backbone.$.ajax.apply(Backbone.$, arguments);\n };\n\n // Backbone.Router\n // ---------------\n\n // Routers map faux-URLs to actions, and fire events when routes are\n // matched. Creating a new one sets its `routes` hash, if not set statically.\n var Router = Backbone.Router = function(options) {\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n if (options.routes) this.routes = options.routes;\n this._bindRoutes();\n this.initialize.apply(this, arguments);\n };\n\n // Cached regular expressions for matching named param parts and splatted\n // parts of route strings.\n var optionalParam = /\\((.*?)\\)/g;\n var namedParam = /(\\(\\?)?:\\w+/g;\n var splatParam = /\\*\\w+/g;\n var escapeRegExp = /[\\-{}\\[\\]+?.,\\\\\\^$|#\\s]/g;\n\n // Set up all inheritable **Backbone.Router** properties and methods.\n _.extend(Router.prototype, Events, {\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Router.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // Manually bind a single named route to a callback. For example:\n //\n // this.route('search/:query/p:num', 'search', function(query, num) {\n // ...\n // });\n //\n route: function(route, name, callback) {\n if (!_.isRegExp(route)) route = this._routeToRegExp(route);\n if (_.isFunction(name)) {\n callback = name;\n name = '';\n }\n if (!callback) callback = this[name];\n var router = this;\n Backbone.history.route(route, function(fragment) {\n var args = router._extractParameters(route, fragment);\n if (router.execute(callback, args, name) !== false) {\n router.trigger.apply(router, ['route:' + name].concat(args));\n router.trigger('route', name, args);\n Backbone.history.trigger('route', router, name, args);\n }\n });\n return this;\n },\n\n // Execute a route handler with the provided parameters. This is an\n // excellent place to do pre-route setup or post-route cleanup.\n execute: function(callback, args, name) {\n if (callback) callback.apply(this, args);\n },\n\n // Simple proxy to `Backbone.history` to save a fragment into the history.\n navigate: function(fragment, options) {\n Backbone.history.navigate(fragment, options);\n return this;\n },\n\n // Bind all defined routes to `Backbone.history`. We have to reverse the\n // order of the routes here to support behavior where the most general\n // routes can be defined at the bottom of the route map.\n _bindRoutes: function() {\n if (!this.routes) return;\n this.routes = _.result(this, 'routes');\n var route, routes = _.keys(this.routes);\n while ((route = routes.pop()) != null) {\n this.route(route, this.routes[route]);\n }\n },\n\n // Convert a route string into a regular expression, suitable for matching\n // against the current location hash.\n _routeToRegExp: function(route) {\n route = route.replace(escapeRegExp, '\\\\$&')\n .replace(optionalParam, '(?:$1)?')\n .replace(namedParam, function(match, optional) {\n return optional ? match : '([^/?]+)';\n })\n .replace(splatParam, '([^?]*?)');\n return new RegExp('^' + route + '(?:\\\\?([\\\\s\\\\S]*))?$');\n },\n\n // Given a route, and a URL fragment that it matches, return the array of\n // extracted decoded parameters. Empty or unmatched parameters will be\n // treated as `null` to normalize cross-browser behavior.\n _extractParameters: function(route, fragment) {\n var params = route.exec(fragment).slice(1);\n return _.map(params, function(param, i) {\n // Don't decode the search params.\n if (i === params.length - 1) return param || null;\n return param ? decodeURIComponent(param) : null;\n });\n }\n\n });\n\n // Backbone.History\n // ----------------\n\n // Handles cross-browser history management, based on either\n // [pushState](http://diveintohtml5.info/history.html) and real URLs, or\n // [onhashchange](https://developer.mozilla.org/en-US/docs/DOM/window.onhashchange)\n // and URL fragments. If the browser supports neither (old IE, natch),\n // falls back to polling.\n var History = Backbone.History = function() {\n this.handlers = [];\n this.checkUrl = this.checkUrl.bind(this);\n\n // Ensure that `History` can be used outside of the browser.\n if (typeof window !== 'undefined') {\n this.location = window.location;\n this.history = window.history;\n }\n };\n\n // Cached regex for stripping a leading hash/slash and trailing space.\n var routeStripper = /^[#\\/]|\\s+$/g;\n\n // Cached regex for stripping leading and trailing slashes.\n var rootStripper = /^\\/+|\\/+$/g;\n\n // Cached regex for stripping urls of hash.\n var pathStripper = /#.*$/;\n\n // Has the history handling already been started?\n History.started = false;\n\n // Set up all inheritable **Backbone.History** properties and methods.\n _.extend(History.prototype, Events, {\n\n // The default interval to poll for hash changes, if necessary, is\n // twenty times a second.\n interval: 50,\n\n // Are we at the app root?\n atRoot: function() {\n var path = this.location.pathname.replace(/[^\\/]$/, '$&/');\n return path === this.root && !this.getSearch();\n },\n\n // Does the pathname match the root?\n matchRoot: function() {\n var path = this.decodeFragment(this.location.pathname);\n var rootPath = path.slice(0, this.root.length - 1) + '/';\n return rootPath === this.root;\n },\n\n // Unicode characters in `location.pathname` are percent encoded so they're\n // decoded for comparison. `%25` should not be decoded since it may be part\n // of an encoded parameter.\n decodeFragment: function(fragment) {\n return decodeURI(fragment.replace(/%25/g, '%2525'));\n },\n\n // In IE6, the hash fragment and search params are incorrect if the\n // fragment contains `?`.\n getSearch: function() {\n var match = this.location.href.replace(/#.*/, '').match(/\\?.+/);\n return match ? match[0] : '';\n },\n\n // Gets the true hash value. Cannot use location.hash directly due to bug\n // in Firefox where location.hash will always be decoded.\n getHash: function(window) {\n var match = (window || this).location.href.match(/#(.*)$/);\n return match ? match[1] : '';\n },\n\n // Get the pathname and search params, without the root.\n getPath: function() {\n var path = this.decodeFragment(\n this.location.pathname + this.getSearch()\n ).slice(this.root.length - 1);\n return path.charAt(0) === '/' ? path.slice(1) : path;\n },\n\n // Get the cross-browser normalized URL fragment from the path or hash.\n getFragment: function(fragment) {\n if (fragment == null) {\n if (this._usePushState || !this._wantsHashChange) {\n fragment = this.getPath();\n } else {\n fragment = this.getHash();\n }\n }\n return fragment.replace(routeStripper, '');\n },\n\n // Start the hash change handling, returning `true` if the current URL matches\n // an existing route, and `false` otherwise.\n start: function(options) {\n if (History.started) throw new Error('Backbone.history has already been started');\n History.started = true;\n\n // Figure out the initial configuration. Do we need an iframe?\n // Is pushState desired ... is it available?\n this.options = _.extend({root: '/'}, this.options, options);\n this.root = this.options.root;\n this._wantsHashChange = this.options.hashChange !== false;\n this._hasHashChange = 'onhashchange' in window && (document.documentMode === void 0 || document.documentMode > 7);\n this._useHashChange = this._wantsHashChange && this._hasHashChange;\n this._wantsPushState = !!this.options.pushState;\n this._hasPushState = !!(this.history && this.history.pushState);\n this._usePushState = this._wantsPushState && this._hasPushState;\n this.fragment = this.getFragment();\n\n // Normalize root to always include a leading and trailing slash.\n this.root = ('/' + this.root + '/').replace(rootStripper, '/');\n\n // Transition from hashChange to pushState or vice versa if both are\n // requested.\n if (this._wantsHashChange && this._wantsPushState) {\n\n // If we've started off with a route from a `pushState`-enabled\n // browser, but we're currently in a browser that doesn't support it...\n if (!this._hasPushState && !this.atRoot()) {\n var rootPath = this.root.slice(0, -1) || '/';\n this.location.replace(rootPath + '#' + this.getPath());\n // Return immediately as browser will do redirect to new url\n return true;\n\n // Or if we've started out with a hash-based route, but we're currently\n // in a browser where it could be `pushState`-based instead...\n } else if (this._hasPushState && this.atRoot()) {\n this.navigate(this.getHash(), {replace: true});\n }\n\n }\n\n // Proxy an iframe to handle location events if the browser doesn't\n // support the `hashchange` event, HTML5 history, or the user wants\n // `hashChange` but not `pushState`.\n if (!this._hasHashChange && this._wantsHashChange && !this._usePushState) {\n this.iframe = document.createElement('iframe');\n this.iframe.src = 'javascript:0';\n this.iframe.style.display = 'none';\n this.iframe.tabIndex = -1;\n var body = document.body;\n // Using `appendChild` will throw on IE < 9 if the document is not ready.\n var iWindow = body.insertBefore(this.iframe, body.firstChild).contentWindow;\n iWindow.document.open();\n iWindow.document.close();\n iWindow.location.hash = '#' + this.fragment;\n }\n\n // Add a cross-platform `addEventListener` shim for older browsers.\n var addEventListener = window.addEventListener || function(eventName, listener) {\n return attachEvent('on' + eventName, listener);\n };\n\n // Depending on whether we're using pushState or hashes, and whether\n // 'onhashchange' is supported, determine how we check the URL state.\n if (this._usePushState) {\n addEventListener('popstate', this.checkUrl, false);\n } else if (this._useHashChange && !this.iframe) {\n addEventListener('hashchange', this.checkUrl, false);\n } else if (this._wantsHashChange) {\n this._checkUrlInterval = setInterval(this.checkUrl, this.interval);\n }\n\n if (!this.options.silent) return this.loadUrl();\n },\n\n // Disable Backbone.history, perhaps temporarily. Not useful in a real app,\n // but possibly useful for unit testing Routers.\n stop: function() {\n // Add a cross-platform `removeEventListener` shim for older browsers.\n var removeEventListener = window.removeEventListener || function(eventName, listener) {\n return detachEvent('on' + eventName, listener);\n };\n\n // Remove window listeners.\n if (this._usePushState) {\n removeEventListener('popstate', this.checkUrl, false);\n } else if (this._useHashChange && !this.iframe) {\n removeEventListener('hashchange', this.checkUrl, false);\n }\n\n // Clean up the iframe if necessary.\n if (this.iframe) {\n document.body.removeChild(this.iframe);\n this.iframe = null;\n }\n\n // Some environments will throw when clearing an undefined interval.\n if (this._checkUrlInterval) clearInterval(this._checkUrlInterval);\n History.started = false;\n },\n\n // Add a route to be tested when the fragment changes. Routes added later\n // may override previous routes.\n route: function(route, callback) {\n this.handlers.unshift({route: route, callback: callback});\n },\n\n // Checks the current URL to see if it has changed, and if it has,\n // calls `loadUrl`, normalizing across the hidden iframe.\n checkUrl: function(e) {\n var current = this.getFragment();\n\n // If the user pressed the back button, the iframe's hash will have\n // changed and we should use that for comparison.\n if (current === this.fragment && this.iframe) {\n current = this.getHash(this.iframe.contentWindow);\n }\n\n if (current === this.fragment) return false;\n if (this.iframe) this.navigate(current);\n this.loadUrl();\n },\n\n // Attempt to load the current URL fragment. If a route succeeds with a\n // match, returns `true`. If no defined routes matches the fragment,\n // returns `false`.\n loadUrl: function(fragment) {\n // If the root doesn't match, no routes can match either.\n if (!this.matchRoot()) return false;\n fragment = this.fragment = this.getFragment(fragment);\n return _.some(this.handlers, function(handler) {\n if (handler.route.test(fragment)) {\n handler.callback(fragment);\n return true;\n }\n });\n },\n\n // Save a fragment into the hash history, or replace the URL state if the\n // 'replace' option is passed. You are responsible for properly URL-encoding\n // the fragment in advance.\n //\n // The options object can contain `trigger: true` if you wish to have the\n // route callback be fired (not usually desirable), or `replace: true`, if\n // you wish to modify the current URL without adding an entry to the history.\n navigate: function(fragment, options) {\n if (!History.started) return false;\n if (!options || options === true) options = {trigger: !!options};\n\n // Normalize the fragment.\n fragment = this.getFragment(fragment || '');\n\n // Don't include a trailing slash on the root.\n var rootPath = this.root;\n if (fragment === '' || fragment.charAt(0) === '?') {\n rootPath = rootPath.slice(0, -1) || '/';\n }\n var url = rootPath + fragment;\n\n // Strip the fragment of the query and hash for matching.\n fragment = fragment.replace(pathStripper, '');\n\n // Decode for matching.\n var decodedFragment = this.decodeFragment(fragment);\n\n if (this.fragment === decodedFragment) return;\n this.fragment = decodedFragment;\n\n // If pushState is available, we use it to set the fragment as a real URL.\n if (this._usePushState) {\n this.history[options.replace ? 'replaceState' : 'pushState']({}, document.title, url);\n\n // If hash changes haven't been explicitly disabled, update the hash\n // fragment to store history.\n } else if (this._wantsHashChange) {\n this._updateHash(this.location, fragment, options.replace);\n if (this.iframe && fragment !== this.getHash(this.iframe.contentWindow)) {\n var iWindow = this.iframe.contentWindow;\n\n // Opening and closing the iframe tricks IE7 and earlier to push a\n // history entry on hash-tag change. When replace is true, we don't\n // want this.\n if (!options.replace) {\n iWindow.document.open();\n iWindow.document.close();\n }\n\n this._updateHash(iWindow.location, fragment, options.replace);\n }\n\n // If you've told us that you explicitly don't want fallback hashchange-\n // based history, then `navigate` becomes a page refresh.\n } else {\n return this.location.assign(url);\n }\n if (options.trigger) return this.loadUrl(fragment);\n },\n\n // Update the hash location, either replacing the current entry, or adding\n // a new one to the browser history.\n _updateHash: function(location, fragment, replace) {\n if (replace) {\n var href = location.href.replace(/(javascript:|#).*$/, '');\n location.replace(href + '#' + fragment);\n } else {\n // Some browsers require that `hash` contains a leading #.\n location.hash = '#' + fragment;\n }\n }\n\n });\n\n // Create the default Backbone.history.\n Backbone.history = new History;\n\n // Helpers\n // -------\n\n // Helper function to correctly set up the prototype chain for subclasses.\n // Similar to `goog.inherits`, but uses a hash of prototype properties and\n // class properties to be extended.\n var extend = function(protoProps, staticProps) {\n var parent = this;\n var child;\n\n // The constructor function for the new subclass is either defined by you\n // (the \"constructor\" property in your `extend` definition), or defaulted\n // by us to simply call the parent constructor.\n if (protoProps && _.has(protoProps, 'constructor')) {\n child = protoProps.constructor;\n } else {\n child = function(){ return parent.apply(this, arguments); };\n }\n\n // Add static properties to the constructor function, if supplied.\n _.extend(child, parent, staticProps);\n\n // Set the prototype chain to inherit from `parent`, without calling\n // `parent`'s constructor function and add the prototype properties.\n child.prototype = _.create(parent.prototype, protoProps);\n child.prototype.constructor = child;\n\n // Set a convenience property in case the parent's prototype is needed\n // later.\n child.__super__ = parent.prototype;\n\n return child;\n };\n\n // Set up inheritance for the model, collection, router, view and history.\n Model.extend = Collection.extend = Router.extend = View.extend = History.extend = extend;\n\n // Throw an error when a URL is needed, and none is supplied.\n var urlError = function() {\n throw new Error('A \"url\" property or function must be specified');\n };\n\n // Wrap an optional error callback with a fallback error event.\n var wrapError = function(model, options) {\n var error = options.error;\n options.error = function(resp) {\n if (error) error.call(options.context, model, resp, options);\n model.trigger('error', model, resp, options);\n };\n };\n\n return Backbone;\n});\n","(function (global, factory) {\n if (typeof define === \"function\" && define.amd) {\n define(['module', 'select'], factory);\n } else if (typeof exports !== \"undefined\") {\n factory(module, require('select'));\n } else {\n var mod = {\n exports: {}\n };\n factory(mod, global.select);\n global.clipboardAction = mod.exports;\n }\n})(this, function (module, _select) {\n 'use strict';\n\n var _select2 = _interopRequireDefault(_select);\n\n function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n default: obj\n };\n }\n\n var _typeof = typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\" ? function (obj) {\n return typeof obj;\n } : function (obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n }\n\n var _createClass = function () {\n function defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n }\n\n return function (Constructor, protoProps, staticProps) {\n if (protoProps) defineProperties(Constructor.prototype, protoProps);\n if (staticProps) defineProperties(Constructor, staticProps);\n return Constructor;\n };\n }();\n\n var ClipboardAction = function () {\n /**\n * @param {Object} options\n */\n function ClipboardAction(options) {\n _classCallCheck(this, ClipboardAction);\n\n this.resolveOptions(options);\n this.initSelection();\n }\n\n /**\n * Defines base properties passed from constructor.\n * @param {Object} options\n */\n\n\n _createClass(ClipboardAction, [{\n key: 'resolveOptions',\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n\n this.action = options.action;\n this.container = options.container;\n this.emitter = options.emitter;\n this.target = options.target;\n this.text = options.text;\n this.trigger = options.trigger;\n\n this.selectedText = '';\n }\n }, {\n key: 'initSelection',\n value: function initSelection() {\n if (this.text) {\n this.selectFake();\n } else if (this.target) {\n this.selectTarget();\n }\n }\n }, {\n key: 'selectFake',\n value: function selectFake() {\n var _this = this;\n\n var isRTL = document.documentElement.getAttribute('dir') == 'rtl';\n\n this.removeFake();\n\n this.fakeHandlerCallback = function () {\n return _this.removeFake();\n };\n this.fakeHandler = this.container.addEventListener('click', this.fakeHandlerCallback) || true;\n\n this.fakeElem = document.createElement('textarea');\n // Prevent zooming on iOS\n this.fakeElem.style.fontSize = '12pt';\n // Reset box model\n this.fakeElem.style.border = '0';\n this.fakeElem.style.padding = '0';\n this.fakeElem.style.margin = '0';\n // Move element out of screen horizontally\n this.fakeElem.style.position = 'absolute';\n this.fakeElem.style[isRTL ? 'right' : 'left'] = '-9999px';\n // Move element to the same position vertically\n var yPosition = window.pageYOffset || document.documentElement.scrollTop;\n this.fakeElem.style.top = yPosition + 'px';\n\n this.fakeElem.setAttribute('readonly', '');\n this.fakeElem.value = this.text;\n\n this.container.appendChild(this.fakeElem);\n\n this.selectedText = (0, _select2.default)(this.fakeElem);\n this.copyText();\n }\n }, {\n key: 'removeFake',\n value: function removeFake() {\n if (this.fakeHandler) {\n this.container.removeEventListener('click', this.fakeHandlerCallback);\n this.fakeHandler = null;\n this.fakeHandlerCallback = null;\n }\n\n if (this.fakeElem) {\n this.container.removeChild(this.fakeElem);\n this.fakeElem = null;\n }\n }\n }, {\n key: 'selectTarget',\n value: function selectTarget() {\n this.selectedText = (0, _select2.default)(this.target);\n this.copyText();\n }\n }, {\n key: 'copyText',\n value: function copyText() {\n var succeeded = void 0;\n\n try {\n succeeded = document.execCommand(this.action);\n } catch (err) {\n succeeded = false;\n }\n\n this.handleResult(succeeded);\n }\n }, {\n key: 'handleResult',\n value: function handleResult(succeeded) {\n this.emitter.emit(succeeded ? 'success' : 'error', {\n action: this.action,\n text: this.selectedText,\n trigger: this.trigger,\n clearSelection: this.clearSelection.bind(this)\n });\n }\n }, {\n key: 'clearSelection',\n value: function clearSelection() {\n if (this.trigger) {\n this.trigger.focus();\n }\n\n window.getSelection().removeAllRanges();\n }\n }, {\n key: 'destroy',\n value: function destroy() {\n this.removeFake();\n }\n }, {\n key: 'action',\n set: function set() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 'copy';\n\n this._action = action;\n\n if (this._action !== 'copy' && this._action !== 'cut') {\n throw new Error('Invalid \"action\" value, use either \"copy\" or \"cut\"');\n }\n },\n get: function get() {\n return this._action;\n }\n }, {\n key: 'target',\n set: function set(target) {\n if (target !== undefined) {\n if (target && (typeof target === 'undefined' ? 'undefined' : _typeof(target)) === 'object' && target.nodeType === 1) {\n if (this.action === 'copy' && target.hasAttribute('disabled')) {\n throw new Error('Invalid \"target\" attribute. Please use \"readonly\" instead of \"disabled\" attribute');\n }\n\n if (this.action === 'cut' && (target.hasAttribute('readonly') || target.hasAttribute('disabled'))) {\n throw new Error('Invalid \"target\" attribute. You can\\'t cut text from elements with \"readonly\" or \"disabled\" attributes');\n }\n\n this._target = target;\n } else {\n throw new Error('Invalid \"target\" value, use a valid Element');\n }\n }\n },\n get: function get() {\n return this._target;\n }\n }]);\n\n return ClipboardAction;\n }();\n\n module.exports = ClipboardAction;\n});","(function (global, factory) {\n if (typeof define === \"function\" && define.amd) {\n define(['module', './clipboard-action', 'tiny-emitter', 'good-listener'], factory);\n } else if (typeof exports !== \"undefined\") {\n factory(module, require('./clipboard-action'), require('tiny-emitter'), require('good-listener'));\n } else {\n var mod = {\n exports: {}\n };\n factory(mod, global.clipboardAction, global.tinyEmitter, global.goodListener);\n global.clipboard = mod.exports;\n }\n})(this, function (module, _clipboardAction, _tinyEmitter, _goodListener) {\n 'use strict';\n\n var _clipboardAction2 = _interopRequireDefault(_clipboardAction);\n\n var _tinyEmitter2 = _interopRequireDefault(_tinyEmitter);\n\n var _goodListener2 = _interopRequireDefault(_goodListener);\n\n function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n default: obj\n };\n }\n\n var _typeof = typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\" ? function (obj) {\n return typeof obj;\n } : function (obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n }\n\n var _createClass = function () {\n function defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n }\n\n return function (Constructor, protoProps, staticProps) {\n if (protoProps) defineProperties(Constructor.prototype, protoProps);\n if (staticProps) defineProperties(Constructor, staticProps);\n return Constructor;\n };\n }();\n\n function _possibleConstructorReturn(self, call) {\n if (!self) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return call && (typeof call === \"object\" || typeof call === \"function\") ? call : self;\n }\n\n function _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function, not \" + typeof superClass);\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n enumerable: false,\n writable: true,\n configurable: true\n }\n });\n if (superClass) Object.setPrototypeOf ? Object.setPrototypeOf(subClass, superClass) : subClass.__proto__ = superClass;\n }\n\n var Clipboard = function (_Emitter) {\n _inherits(Clipboard, _Emitter);\n\n /**\n * @param {String|HTMLElement|HTMLCollection|NodeList} trigger\n * @param {Object} options\n */\n function Clipboard(trigger, options) {\n _classCallCheck(this, Clipboard);\n\n var _this = _possibleConstructorReturn(this, (Clipboard.__proto__ || Object.getPrototypeOf(Clipboard)).call(this));\n\n _this.resolveOptions(options);\n _this.listenClick(trigger);\n return _this;\n }\n\n /**\n * Defines if attributes would be resolved using internal setter functions\n * or custom functions that were passed in the constructor.\n * @param {Object} options\n */\n\n\n _createClass(Clipboard, [{\n key: 'resolveOptions',\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n\n this.action = typeof options.action === 'function' ? options.action : this.defaultAction;\n this.target = typeof options.target === 'function' ? options.target : this.defaultTarget;\n this.text = typeof options.text === 'function' ? options.text : this.defaultText;\n this.container = _typeof(options.container) === 'object' ? options.container : document.body;\n }\n }, {\n key: 'listenClick',\n value: function listenClick(trigger) {\n var _this2 = this;\n\n this.listener = (0, _goodListener2.default)(trigger, 'click', function (e) {\n return _this2.onClick(e);\n });\n }\n }, {\n key: 'onClick',\n value: function onClick(e) {\n var trigger = e.delegateTarget || e.currentTarget;\n\n if (this.clipboardAction) {\n this.clipboardAction = null;\n }\n\n this.clipboardAction = new _clipboardAction2.default({\n action: this.action(trigger),\n target: this.target(trigger),\n text: this.text(trigger),\n container: this.container,\n trigger: trigger,\n emitter: this\n });\n }\n }, {\n key: 'defaultAction',\n value: function defaultAction(trigger) {\n return getAttributeValue('action', trigger);\n }\n }, {\n key: 'defaultTarget',\n value: function defaultTarget(trigger) {\n var selector = getAttributeValue('target', trigger);\n\n if (selector) {\n return document.querySelector(selector);\n }\n }\n }, {\n key: 'defaultText',\n value: function defaultText(trigger) {\n return getAttributeValue('text', trigger);\n }\n }, {\n key: 'destroy',\n value: function destroy() {\n this.listener.destroy();\n\n if (this.clipboardAction) {\n this.clipboardAction.destroy();\n this.clipboardAction = null;\n }\n }\n }], [{\n key: 'isSupported',\n value: function isSupported() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : ['copy', 'cut'];\n\n var actions = typeof action === 'string' ? [action] : action;\n var support = !!document.queryCommandSupported;\n\n actions.forEach(function (action) {\n support = support && !!document.queryCommandSupported(action);\n });\n\n return support;\n }\n }]);\n\n return Clipboard;\n }(_tinyEmitter2.default);\n\n /**\n * Helper function to retrieve attribute value.\n * @param {String} suffix\n * @param {Element} element\n */\n function getAttributeValue(suffix, element) {\n var attribute = 'data-clipboard-' + suffix;\n\n if (!element.hasAttribute(attribute)) {\n return;\n }\n\n return element.getAttribute(attribute);\n }\n\n module.exports = Clipboard;\n});","var DOCUMENT_NODE_TYPE = 9;\n\n/**\n * A polyfill for Element.matches()\n */\nif (typeof Element !== 'undefined' && !Element.prototype.matches) {\n var proto = Element.prototype;\n\n proto.matches = proto.matchesSelector ||\n proto.mozMatchesSelector ||\n proto.msMatchesSelector ||\n proto.oMatchesSelector ||\n proto.webkitMatchesSelector;\n}\n\n/**\n * Finds the closest parent that matches a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @return {Function}\n */\nfunction closest (element, selector) {\n while (element && element.nodeType !== DOCUMENT_NODE_TYPE) {\n if (typeof element.matches === 'function' &&\n element.matches(selector)) {\n return element;\n }\n element = element.parentNode;\n }\n}\n\nmodule.exports = closest;\n","var closest = require('./closest');\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction _delegate(element, selector, type, callback, useCapture) {\n var listenerFn = listener.apply(this, arguments);\n\n element.addEventListener(type, listenerFn, useCapture);\n\n return {\n destroy: function() {\n element.removeEventListener(type, listenerFn, useCapture);\n }\n }\n}\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element|String|Array} [elements]\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction delegate(elements, selector, type, callback, useCapture) {\n // Handle the regular Element usage\n if (typeof elements.addEventListener === 'function') {\n return _delegate.apply(null, arguments);\n }\n\n // Handle Element-less usage, it defaults to global delegation\n if (typeof type === 'function') {\n // Use `document` as the first parameter, then apply arguments\n // This is a short way to .unshift `arguments` without running into deoptimizations\n return _delegate.bind(null, document).apply(null, arguments);\n }\n\n // Handle Selector-based usage\n if (typeof elements === 'string') {\n elements = document.querySelectorAll(elements);\n }\n\n // Handle Array-like based usage\n return Array.prototype.map.call(elements, function (element) {\n return _delegate(element, selector, type, callback, useCapture);\n });\n}\n\n/**\n * Finds closest match and invokes callback.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Function}\n */\nfunction listener(element, selector, type, callback) {\n return function(e) {\n e.delegateTarget = closest(e.target, selector);\n\n if (e.delegateTarget) {\n callback.call(element, e);\n }\n }\n}\n\nmodule.exports = delegate;\n","/**\n * Check if argument is a HTML element.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.node = function(value) {\n return value !== undefined\n && value instanceof HTMLElement\n && value.nodeType === 1;\n};\n\n/**\n * Check if argument is a list of HTML elements.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.nodeList = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return value !== undefined\n && (type === '[object NodeList]' || type === '[object HTMLCollection]')\n && ('length' in value)\n && (value.length === 0 || exports.node(value[0]));\n};\n\n/**\n * Check if argument is a string.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.string = function(value) {\n return typeof value === 'string'\n || value instanceof String;\n};\n\n/**\n * Check if argument is a function.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.fn = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return type === '[object Function]';\n};\n","var is = require('./is');\nvar delegate = require('delegate');\n\n/**\n * Validates all params and calls the right\n * listener function based on its target type.\n *\n * @param {String|HTMLElement|HTMLCollection|NodeList} target\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listen(target, type, callback) {\n if (!target && !type && !callback) {\n throw new Error('Missing required arguments');\n }\n\n if (!is.string(type)) {\n throw new TypeError('Second argument must be a String');\n }\n\n if (!is.fn(callback)) {\n throw new TypeError('Third argument must be a Function');\n }\n\n if (is.node(target)) {\n return listenNode(target, type, callback);\n }\n else if (is.nodeList(target)) {\n return listenNodeList(target, type, callback);\n }\n else if (is.string(target)) {\n return listenSelector(target, type, callback);\n }\n else {\n throw new TypeError('First argument must be a String, HTMLElement, HTMLCollection, or NodeList');\n }\n}\n\n/**\n * Adds an event listener to a HTML element\n * and returns a remove listener function.\n *\n * @param {HTMLElement} node\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNode(node, type, callback) {\n node.addEventListener(type, callback);\n\n return {\n destroy: function() {\n node.removeEventListener(type, callback);\n }\n }\n}\n\n/**\n * Add an event listener to a list of HTML elements\n * and returns a remove listener function.\n *\n * @param {NodeList|HTMLCollection} nodeList\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNodeList(nodeList, type, callback) {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.addEventListener(type, callback);\n });\n\n return {\n destroy: function() {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.removeEventListener(type, callback);\n });\n }\n }\n}\n\n/**\n * Add an event listener to a selector\n * and returns a remove listener function.\n *\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenSelector(selector, type, callback) {\n return delegate(document.body, selector, type, callback);\n}\n\nmodule.exports = listen;\n","function select(element) {\n var selectedText;\n\n if (element.nodeName === 'SELECT') {\n element.focus();\n\n selectedText = element.value;\n }\n else if (element.nodeName === 'INPUT' || element.nodeName === 'TEXTAREA') {\n var isReadOnly = element.hasAttribute('readonly');\n\n if (!isReadOnly) {\n element.setAttribute('readonly', '');\n }\n\n element.select();\n element.setSelectionRange(0, element.value.length);\n\n if (!isReadOnly) {\n element.removeAttribute('readonly');\n }\n\n selectedText = element.value;\n }\n else {\n if (element.hasAttribute('contenteditable')) {\n element.focus();\n }\n\n var selection = window.getSelection();\n var range = document.createRange();\n\n range.selectNodeContents(element);\n selection.removeAllRanges();\n selection.addRange(range);\n\n selectedText = selection.toString();\n }\n\n return selectedText;\n}\n\nmodule.exports = select;\n","function E () {\n // Keep this empty so it's easier to inherit from\n // (via https://github.com/lipsmack from https://github.com/scottcorgan/tiny-emitter/issues/3)\n}\n\nE.prototype = {\n on: function (name, callback, ctx) {\n var e = this.e || (this.e = {});\n\n (e[name] || (e[name] = [])).push({\n fn: callback,\n ctx: ctx\n });\n\n return this;\n },\n\n once: function (name, callback, ctx) {\n var self = this;\n function listener () {\n self.off(name, listener);\n callback.apply(ctx, arguments);\n };\n\n listener._ = callback\n return this.on(name, listener, ctx);\n },\n\n emit: function (name) {\n var data = [].slice.call(arguments, 1);\n var evtArr = ((this.e || (this.e = {}))[name] || []).slice();\n var i = 0;\n var len = evtArr.length;\n\n for (i; i < len; i++) {\n evtArr[i].fn.apply(evtArr[i].ctx, data);\n }\n\n return this;\n },\n\n off: function (name, callback) {\n var e = this.e || (this.e = {});\n var evts = e[name];\n var liveEvents = [];\n\n if (evts && callback) {\n for (var i = 0, len = evts.length; i < len; i++) {\n if (evts[i].fn !== callback && evts[i].fn._ !== callback)\n liveEvents.push(evts[i]);\n }\n }\n\n // Remove event from queue to prevent memory leak\n // Suggested by https://github.com/lazd\n // Ref: https://github.com/scottcorgan/tiny-emitter/commit/c6ebfaa9bc973b33d110a84a307742b7cf94c953#commitcomment-5024910\n\n (liveEvents.length)\n ? e[name] = liveEvents\n : delete e[name];\n\n return this;\n }\n};\n\nmodule.exports = E;\nmodule.exports.TinyEmitter = E;\n","module.exports = require(\"handlebars\");","module.exports = require(\"handlebars/runtime\");","module.exports = require(\"jquery\");","module.exports = require(\"okta-i18n-bundles\");","module.exports = require(\"qtip\");","module.exports = require(\"underscore\");","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId].call(module.exports, module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = function(module) {\n\tvar getter = module && module.__esModule ?\n\t\tfunction() { return module['default']; } :\n\t\tfunction() { return module; };\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = function(exports, definition) {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.g = (function() {\n\tif (typeof globalThis === 'object') return globalThis;\n\ttry {\n\t\treturn this || new Function('return this')();\n\t} catch (e) {\n\t\tif (typeof window === 'object') return window;\n\t}\n})();","__webpack_require__.o = function(obj, prop) { return Object.prototype.hasOwnProperty.call(obj, prop); }","// define __esModule on exports\n__webpack_require__.r = function(exports) {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","import BaseCollection from './courage/models/BaseCollection';\nimport BaseModel from './courage/models/BaseModel';\nimport BaseSchema from './courage/models/BaseSchema';\nimport Model from './courage/models/Model';\nimport SchemaProperty from './courage/models/SchemaProperty';\nimport BaseController from './courage/util/BaseController';\nimport BaseRouter from './courage/util/BaseRouter';\nimport ButtonFactory from './courage/util/ButtonFactory';\nimport Class from './courage/util/Class';\nimport Cookie from './courage/util/Cookie';\nimport Clipboard from './courage/util/Clipboard';\nimport Keys from './courage/util/Keys';\nimport Logger from './courage/util/Logger';\nimport StringUtil from './courage/util/StringUtil';\nimport Util from './courage/util/Util';\nimport Handlebars from './courage/util/handlebars-wrapper';\nimport $ from './courage/util/jquery-wrapper';\nimport _ from './courage/util/underscore-wrapper';\nimport ListView from './courage/views/Backbone.ListView';\nimport BaseView from './courage/views/BaseView';\nimport BaseDropDown from './courage/views/components/BaseDropDown';\nimport Notification from './courage/views/components/Notification';\nimport BaseForm from './courage/views/forms/BaseForm';\nimport Toolbar from './courage/views/forms/components/Toolbar';\nimport FormUtil from './courage/views/forms/helpers/FormUtil';\nimport InputRegistry from './courage/views/forms/helpers/InputRegistry';\nimport SchemaFormFactory from './courage/views/forms/helpers/SchemaFormFactory';\nimport CheckBox from './courage/views/forms/inputs/CheckBox';\nimport PasswordBox from './courage/views/forms/inputs/PasswordBox';\nimport Radio from './courage/views/forms/inputs/Radio';\nimport Select from './courage/views/forms/inputs/Select';\nimport InputGroup from './courage/views/forms/inputs/InputGroup';\nimport TextBox from './courage/views/forms/inputs/TextBox';\nimport Callout from './courage/views/components/Callout';\nimport Backbone from 'backbone';\n\nimport FrameworkView from './courage/framework/View';\n\nimport './util/scrollParent';\n\n// The string will be returned unchanged. All templates should be precompiled.\nFrameworkView.prototype.compileTemplate = function(str) {\n const compiledTmpl = function fakeTemplate() {\n return str;\n };\n compiledTmpl.source = ''; // to satisfy TS\n return compiledTmpl;\n};\n\n// Override events to not support `Enter` submitting the form twice - OKTA-321999 and OKTA-317629\nconst events = {\n 'input input': 'update',\n 'change input': 'update',\n 'keydown input': 'update',\n 'keyup input': function (e) {\n if (Keys.isEsc(e)) {\n this.model.trigger('form:cancel');\n }\n }\n};\nconst TextBoxForSigninWidget = TextBox.extend({ events });\nconst PasswordBoxForSigninWidget = PasswordBox.extend({ events });\n\nconst Form = BaseForm.extend({\n scrollOnError() {\n // scrollOnError is true by default. Override to false if `scrollOnError` has been set to false in widget settings.\n const { settings } = this.options;\n if (settings.get('features.scrollOnError') === false) {\n return false;\n }\n return true;\n }\n});\n\nconst loc = StringUtil.localize;\nconst createButton = ButtonFactory.create;\nconst createCallout = Callout.create;\nconst registerInput = InputRegistry.register;\nconst Collection = BaseCollection;\nconst View = BaseView;\nconst Router = BaseRouter;\nconst Controller = BaseController;\n\nexport interface Internal {\n util: any;\n views: {\n components: any;\n forms: {\n helpers: any;\n components: any;\n inputs: any;\n }\n },\n models: any;\n}\nconst internal: Internal = {\n util: {\n Util,\n Cookie,\n Clipboard,\n Logger,\n Class,\n Keys,\n },\n\n views: {\n components: {\n BaseDropDown,\n Notification,\n },\n\n forms: {\n helpers: {\n FormUtil,\n SchemaFormFactory,\n },\n\n components: {\n Toolbar,\n },\n\n inputs: {\n TextBox: TextBoxForSigninWidget,\n PasswordBox: PasswordBoxForSigninWidget,\n CheckBox,\n Radio,\n Select,\n InputGroup,\n },\n },\n },\n\n models: {\n BaseSchema,\n SchemaProperty,\n },\n};\n\nregisterInput('text', TextBoxForSigninWidget);\nregisterInput('password', PasswordBoxForSigninWidget);\nregisterInput('checkbox', CheckBox);\nregisterInput('radio', Radio);\nregisterInput('select', Select);\nregisterInput('group', InputGroup);\n\nexport {\n Backbone,\n\n $,\n\n _,\n\n Handlebars,\n\n loc,\n\n createButton,\n\n createCallout,\n\n registerInput,\n\n Model,\n\n // TODO: BaseModel has been deprecated and shall not be public\n // remove this once clean up usage in widget.\n BaseModel,\n\n Collection,\n\n FrameworkView,\n\n View,\n\n ListView,\n\n Router,\n\n Controller,\n\n Form,\n\n internal,\n};\n\n// Additional type exports\nexport * from './courage/views/forms/types';\nexport * from './courage/framework/Model';\nexport * from './courage/models/Model';\nexport * from './courage/util/BaseRouter';\nexport * from './courage/util/SettingsModel';\nexport * from './courage/util/jquery-wrapper';\nexport * from './courage/util/underscore-wrapper';\n","/*\n * Checking in as there is no npm module to consume. \n * Current version is 2.15.\n * Repo - https://github.com/TypingDNA/TypingDnaRecorder-JavaScript\n */\n\n/**\n * TypingDNA - Typing Biometrics JavaScript API\n * https://api.typingdna.com/scripts/typingdna.js\n * https://typingdna.com/scripts/typingdna.js (alternative)\n *\n * @version 2.15\n * @author Raul Popa\n * @copyright SC TypingDNA SRL, http://typingdna.com\n * @license http://www.apache.org/licenses/LICENSE-2.0\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n * Typical usage:\n * var tdna = new TypingDNA(); // creates a new TypingDNA object and starts recording\n * var typingPattern = tdna.getTypingPattern({type=1, text=\"Hello5g21?*\"});\n * returns a type 1 typing pattern (and continues recording afterwards)\n *\n * Optional:\n * tdna.stop(); // ends recording and clears history stack (returns recording flag: false)\n * tdna.start(); // restarts the recording after a stop (returns recording flag: true)\n * tdna.reset(); // restarts the recording anytime, clears history stack and starts from scratch (returns nothing)\n * var typingPatternQuality = TypingDNA.getQuality(typingPattern); //returns the quality/strength of any typing pattern\n * (there is no need to initialize the class to do pattern quality checking)\n */\n\n/**\n * Creates a single instance (or a reference) of the TypingDNA class\n * @return {Object} Returns the single instance of the TypingDNA class.\n * @example var tdna = new TypingDNA();\n */\nmodule.exports = function TypingDNA() {\n if (TypingDNA.initialized != true) {\n TypingDNA.prototype.start = function() {\n return TypingDNA.start.apply(this, arguments);\n }\n TypingDNA.prototype.stop = function() {\n return TypingDNA.stop.apply(this, arguments);\n }\n TypingDNA.prototype.reset = function() {\n return TypingDNA.reset.apply(this, arguments);\n }\n TypingDNA.prototype.addTarget = function() {\n return TypingDNA.addTarget.apply(this, arguments);\n }\n TypingDNA.prototype.removeTarget = function() {\n return TypingDNA.removeTarget.apply(this, arguments);\n }\n TypingDNA.prototype.getTypingPattern = function() {\n return TypingDNA.getTypingPattern.apply(this, arguments);\n }\n TypingDNA.prototype.get = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.get.apply(this, arguments);\n }\n TypingDNA.prototype.startDiagram = function() {\n // deprecated in favor of start()\n //return TypingDNA.startDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.stopDiagram = function() {\n // deprecated in favor of stop()\n //return TypingDNA.stopDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getDiagram = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.getDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getExtendedDiagram = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.getExtendedDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getMouseDiagram = function() {\n return TypingDNA.getMouseDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.startMouse = function() {\n return TypingDNA.startMouse.apply(this, arguments);\n }\n TypingDNA.prototype.stopMouse = function() {\n return TypingDNA.stopMouse.apply(this, arguments);\n }\n TypingDNA.prototype.getQuality = function() {\n return TypingDNA.getQuality.apply(this, arguments);\n }\n TypingDNA.prototype.getLength = function() {\n return TypingDNA.getLength.apply(this, arguments);\n }\n TypingDNA.prototype.isMobile = function() {\n return TypingDNA.isMobile.apply(this, arguments);\n }\n TypingDNA.prototype.getTextId = function() {\n return TypingDNA.getTextId.apply(this, arguments)\n }\n TypingDNA.initialized = true;\n TypingDNA.prototype.maxHistoryLength = TypingDNA.maxHistoryLength;\n TypingDNA.prototype.defaultHistoryLength = TypingDNA.defaultHistoryLength;\n TypingDNA.prototype.maxSeekTime = TypingDNA.maxSeekTime;\n TypingDNA.prototype.maxPressTime = TypingDNA.maxPressTime;\n TypingDNA.version = 2.15;\n TypingDNA.flags = 0;\n TypingDNA.instance = this;\n TypingDNA.document = document;\n TypingDNA.maxHistoryLength = 2000;\n TypingDNA.maxSeekTime = 1500;\n TypingDNA.maxPressTime = 300;\n TypingDNA.defaultHistoryLength = 160;\n TypingDNA.spKeyCodes = [8, 13, 32];\n TypingDNA.spKeyCodesObj = {\n 8: 1,\n 13: 1,\n 32: 1\n };\n TypingDNA.keyCodes = [65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 32, 222, 188, 190, 186, 187, 189, 191, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57];\n TypingDNA.keyCodesObj = {}\n for (var i in TypingDNA.keyCodes) {\n TypingDNA.keyCodesObj[TypingDNA.keyCodes[i]] = 1;\n }\n TypingDNA.pt1 = TypingDNA.ut1 = (new Date).getTime();\n TypingDNA.wfk = [];\n TypingDNA.sti = [];\n TypingDNA.skt = [];\n TypingDNA.recording = true;\n TypingDNA.mouseRecording = true;\n TypingDNA.mouseMoveRecording = false;\n TypingDNA.spKeyRecording = true;\n TypingDNA.diagramRecording = true;\n TypingDNA.dwfk = [];\n TypingDNA.dsti = [];\n TypingDNA.dskt = [];\n TypingDNA.drkc = [];\n TypingDNA.dlastDownKey;\n TypingDNA.prevKeyCode = 0;\n TypingDNA.maxMoveDeltaTime = 600;\n TypingDNA.maxScrollDeltaTime = 800;\n TypingDNA.maxStopTime = 1500;\n TypingDNA.maxClickTime = 600;\n TypingDNA.maxMouseHistoryLength = 500;\n TypingDNA.lastMouseMoveTime = TypingDNA.lastMouseDownTime = (new Date).getTime();\n TypingDNA.stopTimes = [];\n TypingDNA.clickTimes = [];\n TypingDNA.lastMouseStop = true;\n TypingDNA.zl = 0.0000001;\n TypingDNA.isAndroidChrome = false;\n TypingDNA.ACLastTime = (new Date).getTime();\n TypingDNA.ACSeekTime = 0;\n TypingDNA.ACPressTime = 0;\n TypingDNA.ACLastCharCode = 0;\n TypingDNA.ACLastKeyCode = 0;\n TypingDNA.ACInputLengths = {\n inputs: [],\n lastLength: [],\n };\n TypingDNA.ACPreviousKeyCode = 0;\n TypingDNA.targetIds = [];\n TypingDNA.lastTarget = \"\";\n TypingDNA.lastTargetFound = false;\n TypingDNA.replaceMissingKeys = true;\n TypingDNA.replaceMissingKeysPerc = 7;\n\n TypingDNA.keyDown = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var keyCode = e.keyCode;\n if (TypingDNA.wfk[keyCode] == 1 || TypingDNA.dwfk[keyCode] == 1) {\n //return;\n }\n if (keyCode == 229 && TypingDNA.isMobile() && !TypingDNA.isAndroidChrome) {\n TypingDNA.isAndroidChrome = true;\n\n TypingDNA.ACSeekTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n\n TypingDNA.document.removeEventListener(\"keydown\", TypingDNA.keyDown);\n TypingDNA.document.removeEventListener(\"keyup\", TypingDNA.keyUp);\n TypingDNA.document.removeEventListener(\"keypress\", TypingDNA.keyPress);\n\n // if android\n TypingDNA.document.addEventListener(\"keydown\", TypingDNA.ACKeyDown);\n TypingDNA.document.addEventListener(\"keyup\", TypingDNA.ACKeyUp);\n } else {\n var t0 = TypingDNA.pt1;\n TypingDNA.pt1 = (new Date).getTime();\n var seekTotal = TypingDNA.pt1 - t0;\n var startTime = TypingDNA.pt1;\n if (TypingDNA.recording == true || (TypingDNA.spKeyCodesObj[keyCode] && TypingDNA.spKeyRecording == true)) {\n if (!e.shiftKey || TypingDNA.isMobile()) {\n TypingDNA.wfk[keyCode] = 1;\n TypingDNA.skt[keyCode] = seekTotal;\n TypingDNA.sti[keyCode] = startTime;\n }\n }\n if (TypingDNA.diagramRecording == true) {\n TypingDNA.dwfk[keyCode] = 1;\n TypingDNA.dskt[keyCode] = seekTotal;\n TypingDNA.dsti[keyCode] = startTime;\n TypingDNA.dlastDownKey = keyCode;\n }\n }\n }\n\n TypingDNA.keyPress = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n if (TypingDNA.diagramRecording == true) {\n var keyCode = TypingDNA.dlastDownKey;\n TypingDNA.drkc[keyCode] = e.charCode;\n }\n }\n\n TypingDNA.keyUp = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var ut = (new Date).getTime();\n var keyCode = e.keyCode;\n if (TypingDNA.recording == true || (TypingDNA.spKeyCodesObj[keyCode] && TypingDNA.spKeyRecording == true)) {\n if (!e.shiftKey || TypingDNA.isMobile()) {\n if (TypingDNA.wfk[keyCode] == 1) {\n var pressTime = ut - TypingDNA.sti[keyCode];\n var seekTime = TypingDNA.skt[keyCode];\n var arr = [keyCode, seekTime, pressTime, TypingDNA.prevKeyCode, ut, e.target.id];\n TypingDNA.history.add(arr);\n TypingDNA.prevKeyCode = keyCode;\n }\n }\n TypingDNA.wfk[keyCode] = 0;\n }\n if (TypingDNA.diagramRecording == true) {\n if (TypingDNA.drkc[keyCode] != undefined && TypingDNA.drkc[keyCode] != 0) {\n if (TypingDNA.dwfk[keyCode] == 1) {\n var pressTime = ut - TypingDNA.dsti[keyCode];\n var seekTime = TypingDNA.dskt[keyCode];\n var realKeyCode = TypingDNA.drkc[keyCode];\n var arrD = [keyCode, seekTime, pressTime, realKeyCode, ut, e.target.id];\n TypingDNA.history.addDiagram(arrD);\n }\n }\n TypingDNA.dwfk[keyCode] = 0;\n }\n }\n\n TypingDNA.mouseScroll = function(e) {\n if (TypingDNA.mouseRecording == true) {\n if (TypingDNA.mouseMoveRecording == true) {\n if (TypingDNA.mouse.scrollStarted == true) {\n var currentTime = (new Date).getTime();\n TypingDNA.mouse.scrollTimes.push(currentTime);\n TypingDNA.mouse.scrollTopArr.push(TypingDNA.document.body.scrollTop);\n clearInterval(TypingDNA.scrollInterval);\n TypingDNA.scrollInterval = setInterval(TypingDNA.mouse.checkScroll, TypingDNA.maxScrollDeltaTime);\n } else {\n TypingDNA.mouse.scrollStarted = true\n }\n }\n }\n }\n\n TypingDNA.mouseMove = function(e) {\n if (TypingDNA.mouseRecording == true) {\n var currentTime = (new Date).getTime();\n if (TypingDNA.mouseMoveRecording == true) {\n if (TypingDNA.mouse.started == true) {\n TypingDNA.mouse.times.push(currentTime);\n TypingDNA.mouse.xPositions.push(e.screenX);\n TypingDNA.mouse.yPositions.push(e.screenY);\n clearInterval(TypingDNA.moveInterval);\n TypingDNA.moveInterval = setInterval(TypingDNA.mouse.checkMove, TypingDNA.maxMoveDeltaTime);\n } else {\n TypingDNA.mouse.started = true;\n }\n }\n TypingDNA.lastMouseMoveTime = currentTime;\n }\n }\n\n TypingDNA.mouseDown = function(e) {\n if (TypingDNA.mouseRecording == true) {\n TypingDNA.mouse.checkMove();\n TypingDNA.mouse.checkScroll();\n if (e.which == 1) {\n TypingDNA.lastMouseDownTime = (new Date).getTime();\n var stopTime = TypingDNA.lastMouseDownTime - TypingDNA.lastMouseMoveTime;\n if (stopTime < TypingDNA.maxStopTime && TypingDNA.lastMouseStop == false) {\n TypingDNA.stopTimes.push(stopTime);\n if (TypingDNA.mouseMoveRecording == true) {\n var eventType = 3;\n var arr = [eventType, stopTime];\n TypingDNA.mouse.history.add(arr);\n TypingDNA.lastMouseStop = true;\n }\n }\n }\n }\n }\n\n TypingDNA.mouseUp = function(e) {\n if (TypingDNA.mouseRecording == true) {\n if (e.which == 1) {\n var clickTime = (new Date).getTime() - TypingDNA.lastMouseDownTime;\n if (clickTime < TypingDNA.maxClickTime && TypingDNA.lastMouseDownTime > TypingDNA.lastMouseMoveTime) {\n TypingDNA.clickTimes.push(clickTime);\n if (TypingDNA.mouseMoveRecording == true) {\n var eventType = 4;\n var arr = [eventType, clickTime];\n TypingDNA.mouse.history.add(arr);\n }\n }\n }\n }\n }\n\n TypingDNA.ACKeyDown = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n TypingDNA.ACSeekTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n if(TypingDNA.ACInputLengths.inputs.indexOf(e.target) === -1) {\n TypingDNA.ACInputLengths.inputs.push(e.target);\n TypingDNA.ACInputLengths.lastLength.push(0);\n }\n }\n\n TypingDNA.ACKeyUp = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n TypingDNA.ACPressTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var keyCode = e.keyCode;\n var targetIndex = TypingDNA.ACInputLengths.inputs.indexOf(e.target);\n if(targetIndex === -1) {\n TypingDNA.ACInputLengths.inputs.push(e.target);\n TypingDNA.ACInputLengths.lastLength.push(0);\n targetIndex = TypingDNA.ACInputLengths.inputs.indexOf(e.target);\n }\n if (keyCode == 229 && e.target.value.length >= TypingDNA.ACInputLengths.lastLength[targetIndex]) {\n var char = e.target.value.substr((e.target.selectionStart - 1) || 0 , 1);\n keyCode = char.toUpperCase().charCodeAt(0);\n TypingDNA.ACLastCharCode = char.charCodeAt(0);\n TypingDNA.ACLastKeyCode = char.toUpperCase().charCodeAt(0);\n }\n TypingDNA.ACInputLengths.lastLength[targetIndex] = e.target.value.length;\n var arr = [keyCode, TypingDNA.ACSeekTime, TypingDNA.ACPressTime, TypingDNA.ACPreviousKeyCode, TypingDNA.ACLastTime];\n TypingDNA.history.add(arr);\n TypingDNA.ACPreviousKeyCode = keyCode;\n if (TypingDNA.diagramRecording == true ) {\n var arrD = [keyCode, TypingDNA.ACSeekTime, TypingDNA.ACPressTime, TypingDNA.ACLastCharCode];\n TypingDNA.history.addDiagram(arrD);\n }\n }\n\n TypingDNA.isTarget = function(target) {\n if (TypingDNA.lastTarget == target && TypingDNA.lastTargetFound) {\n return true;\n } else {\n var targetLength = TypingDNA.targetIds.length;\n var targetFound = false;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n targetFound = true;\n break;\n }\n }\n TypingDNA.lastTarget = target;\n TypingDNA.lastTargetFound = targetFound;\n return targetFound;\n } else {\n TypingDNA.lastTarget = target;\n TypingDNA.lastTargetFound = true;\n return true;\n }\n }\n }\n\n if (TypingDNA.document.addEventListener) {\n TypingDNA.document.addEventListener(\"keydown\", TypingDNA.keyDown);\n TypingDNA.document.addEventListener(\"keyup\", TypingDNA.keyUp);\n TypingDNA.document.addEventListener(\"keypress\", TypingDNA.keyPress);\n TypingDNA.document.addEventListener(\"mousemove\", TypingDNA.mouseMove);\n TypingDNA.document.addEventListener(\"mousedown\", TypingDNA.mouseDown);\n TypingDNA.document.addEventListener(\"mouseup\", TypingDNA.mouseUp);\n TypingDNA.document.addEventListener(\"scroll\", TypingDNA.mouseScroll);\n } else if (TypingDNA.document.attachEvent) {\n TypingDNA.document.attachEvent(\"onkeydown\", TypingDNA.keyDown);\n TypingDNA.document.attachEvent(\"onkeyup\", TypingDNA.keyUp);\n TypingDNA.document.attachEvent(\"onkeypress\", TypingDNA.keyPress);\n TypingDNA.document.attachEvent(\"onmousemove\", TypingDNA.mouseMove);\n TypingDNA.document.attachEvent(\"onmousedown\", TypingDNA.mouseDown);\n TypingDNA.document.attachEvent(\"onmouseup\", TypingDNA.mouseUp);\n TypingDNA.document.attachEvent(\"onscroll\", TypingDNA.mouseScroll);\n } else {\n console.log(\"browser not supported\");\n }\n\n TypingDNA.mouse = {};\n TypingDNA.mouse.times = [];\n TypingDNA.mouse.xPositions = [];\n TypingDNA.mouse.yPositions = [];\n TypingDNA.mouse.scrollTimes = [];\n TypingDNA.mouse.scrollTopArr = [];\n TypingDNA.mouse.history = {};\n TypingDNA.mouse.history.stack = [];\n\n TypingDNA.mouse.getDistance = function(a, b) {\n return Math.sqrt((a * a) + (b * b));\n }\n\n TypingDNA.mouse.getTotalDistance = function(xPositions, yPositions) {\n var totalDistance = 0;\n var length = xPositions.length;\n for (i = 1; i < length - 1; i++) {\n var a = xPositions[i] - xPositions[i - 1];\n var b = yPositions[i] - yPositions[i - 1];\n totalDistance += TypingDNA.mouse.getDistance(a, b);\n }\n return totalDistance;\n }\n\n TypingDNA.mouse.getAngle = function(xPosDelta, yPosDelta) {\n var angle = 0;\n var leftRight = (xPosDelta >= 0); // 1 if left, 0 if right\n var downUp = (yPosDelta < 0); // 1 if down, 0 if up\n if (leftRight) {\n if (downUp) {\n angle = 180 + (Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251)) // 0.01745329251 = pi/180\n } else {\n angle = 270 + (90 - Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251))\n }\n } else {\n if (downUp) {\n angle = 90 + (90 - Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251))\n } else {\n angle = Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251)\n }\n }\n return angle;\n }\n\n TypingDNA.mouse.recordMoveAction = function() {\n var length = TypingDNA.mouse.times.length;\n if (length < 3) {\n return;\n }\n var deltaTime = TypingDNA.mouse.times[length - 1] - TypingDNA.mouse.times[0];\n var xPosDelta = TypingDNA.mouse.xPositions[length - 1] - TypingDNA.mouse.xPositions[0];\n var yPosDelta = TypingDNA.mouse.yPositions[length - 1] - TypingDNA.mouse.yPositions[0];\n var directDistance = Math.round(TypingDNA.mouse.getDistance(xPosDelta, yPosDelta));\n var totalDistance = Math.round(TypingDNA.mouse.getTotalDistance(TypingDNA.mouse.xPositions, TypingDNA.mouse.yPositions));\n var ratioDistance = Math.round(totalDistance * 100 / directDistance);\n var speed = Math.round(directDistance * 100 / deltaTime);\n var angle = TypingDNA.mouse.getAngle(xPosDelta, yPosDelta);\n var eventType = 1;\n var arr = [eventType, deltaTime, directDistance, speed, angle, ratioDistance];\n for (i in arr) {\n if (isNaN(arr[i])) {\n return;\n }\n }\n TypingDNA.mouse.history.add(arr);\n TypingDNA.lastMouseStop = false;\n }\n\n TypingDNA.mouse.recordScrollAction = function() {\n var length = TypingDNA.mouse.scrollTimes.length;\n if (length < 2) {\n return;\n }\n var deltaTime = TypingDNA.mouse.scrollTimes[length - 1] - TypingDNA.mouse.scrollTimes[0];\n var directDistance = TypingDNA.mouse.scrollTopArr[length - 1] - TypingDNA.mouse.scrollTopArr[0];\n var speed = Math.round(directDistance * 100 / deltaTime);\n var eventType = 2;\n var arr = [eventType, deltaTime, directDistance, speed];\n for (i in arr) {\n if (isNaN(arr[i]) && !isFinite(arr[i])) {\n return;\n }\n }\n TypingDNA.mouse.history.add(arr);\n }\n\n TypingDNA.mouse.history.add = function(arr) {\n this.stack.push(arr);\n if (this.stack.length > TypingDNA.maxMouseHistoryLength) {\n this.stack.shift();\n }\n }\n\n TypingDNA.mouse.history.getDiagram = function() {\n var mouseDiagram = this.stack.join(\"|\");\n return [String(TypingDNA.isMobile()) + \",\" + String(TypingDNA.version), mouseDiagram].join(\"|\");\n }\n\n TypingDNA.mouse.clearLastMove = function() {\n TypingDNA.mouse.times = [];\n TypingDNA.mouse.xPositions = [];\n TypingDNA.mouse.yPositions = [];\n }\n\n TypingDNA.mouse.checkMove = function() {\n clearInterval(TypingDNA.moveInterval);\n if (TypingDNA.mouse.started == true) {\n TypingDNA.mouse.started = false;\n TypingDNA.mouse.recordMoveAction();\n TypingDNA.mouse.clearLastMove();\n }\n }\n\n TypingDNA.mouse.clearLastScroll = function() {\n TypingDNA.mouse.scrollTimes = [];\n TypingDNA.mouse.scrollTopArr = [];\n }\n\n TypingDNA.mouse.checkScroll = function() {\n clearInterval(TypingDNA.scrollInterval);\n if (TypingDNA.mouse.scrollStarted == true) {\n TypingDNA.mouse.scrollStarted = false;\n TypingDNA.mouse.recordScrollAction();\n TypingDNA.mouse.clearLastScroll();\n }\n }\n\n /**\n * Adds a target to the targetIds array.\n */\n TypingDNA.addTarget = function(target) {\n var targetLength = TypingDNA.targetIds.length;\n var targetFound = false;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n targetFound = true;\n break;\n }\n }\n if (!targetFound) {\n TypingDNA.targetIds.push(target);\n }\n } else {\n TypingDNA.targetIds.push(target);\n }\n }\n\n /**\n * Adds a target to the targetIds array.\n */\n TypingDNA.removeTarget = function(target) {\n var targetLength = TypingDNA.targetIds.length;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n TypingDNA.targetIds.splice(i, 1);\n break;\n }\n }\n }\n }\n\n /**\n * Resets the history stack\n */\n TypingDNA.reset = function(all) {\n TypingDNA.history.stack = [];\n TypingDNA.history.stackDiagram = [];\n TypingDNA.clickTimes = [];\n TypingDNA.stopTimes = [];\n TypingDNA.ACInputLengths = {\n inputs: [],\n lastLength: [],\n };\n if (all == true) {\n TypingDNA.mouse.history.stack = [];\n }\n }\n\n /**\n * Automatically called at initilization. It starts the recording of keystrokes.\n */\n TypingDNA.start = function() {\n TypingDNA.diagramRecording = true;\n return TypingDNA.recording = true;\n }\n\n /**\n * Ends the recording of further keystrokes. To restart recording afterwards you can\n * either call TypingDNA.start() or create a new TypingDNA object again, not recommended.\n */\n TypingDNA.stop = function() {\n TypingDNA.diagramRecording = false;\n return TypingDNA.recording = false;\n }\n\n /**\n * Starts the recording of mouse activity.\n */\n TypingDNA.startMouse = function() {\n return TypingDNA.mouseRecording = TypingDNA.mouseMoveRecording = true;\n }\n\n /**\n * Stops the recording of mouse activity.\n */\n TypingDNA.stopMouse = function() {\n return TypingDNA.mouseRecording = TypingDNA.mouseMoveRecording = false;\n }\n\n /**\n * This is the main function that outputs the typing pattern as a String\n * {type:Number, text:String, textId:Number, length: Number, targetId:String, caseSensitive:Boolean}\n * @param {Object} obj an object with the following properties\n * * * @param {String} type 0 for anytext pattern, 1 for sametext pattern (also called diagram pattern)\n * * * and 2 for extended pattern (most versatile, can replace both anytext and sametext patterns)\n * * * @param {Number} length (Optional) the length of the text in the history for which you want\n * * * the typing pattern. length is ignored when text or targetId is set (or both).\n * * * @param {String} text (Only for type 1 and type 2) a typed string that you want the typing pattern for\n * * * @param {Number} textId (Optional, only for type 1 and type 2) a personalized id for the typed text\n * * * @param {String} targetId (Optional) specifies if pattern is obtain only from text typed in a certain target\n * * * @param {Boolean} caseSensitive (Optional, default: false) Used if you pass a text for type 1 or type 2\n * * * DEPRECATED * * * in favor of type = 2 * * *\n * * * @param {Boolean} extended (Only for type 1) specifies if full information about what was typed is produced,\n * * * including the actual key pressed, if false, only the order of pressed keys is kept (no actual content)\n * @return {String} A typing pattern in string form\n * @example var typingPattern = tdna.getTypingPattern({type=0, length=180});\n * @example var typingPattern = tdna.getTypingPattern({type=1, text=\"Hello5g21?*\"});\n * @example var typingPattern = tdna.getTypingPattern({type=2, text=\"example@mail.com\"});\n */\n TypingDNA.getTypingPattern = function(obj) {\n if (typeof obj === 'object') {\n switch (obj.type) {\n case 0:\n return TypingDNA.get(obj.length, obj.targetId);\n break;\n case 1:\n var str = (obj.text != undefined) ? obj.text : obj.length;\n return TypingDNA.history.getDiagram(obj.extended, str, obj.textId, obj.targetId, obj.caseSensitive);\n break;\n case 2:\n var str = (obj.text != undefined) ? obj.text : obj.length;\n return TypingDNA.history.getDiagram(true, str, obj.textId, obj.targetId, obj.caseSensitive);\n break;\n default:\n return TypingDNA.get(obj.length);\n break;\n }\n } else {\n return TypingDNA.get();\n }\n }\n\n TypingDNA.getDiagram = function(str, textId) {\n return TypingDNA.history.getDiagram(false, str, textId, undefined, false);\n }\n\n TypingDNA.getExtendedDiagram = function(str, textId) {\n return TypingDNA.history.getDiagram(true, str, textId, undefined, false);\n }\n\n TypingDNA.getMouseDiagram = function() {\n return TypingDNA.mouse.history.getDiagram();\n }\n\n TypingDNA.get = function(length, targetId) {\n var historyTotalLength = TypingDNA.history.stack.length;\n if (length == undefined || length == 0) {\n length = TypingDNA.defaultHistoryLength;\n }\n if (length > historyTotalLength) {\n length = historyTotalLength;\n }\n var obj = {};\n [obj.arr, targetLength] = TypingDNA.history.get(length, \"\", targetId);\n if (targetId != undefined && targetId != \"\") {\n length = targetLength;\n }\n var zl = TypingDNA.zl;\n var histRev = length;\n var histSktF = TypingDNA.math.fo(TypingDNA.history.get(length, \"seek\", targetId));\n var histPrtF = TypingDNA.math.fo(TypingDNA.history.get(length, \"press\", targetId));\n var pressHistMean = Math.round(TypingDNA.math.avg(histPrtF));\n var seekHistMean = Math.round(TypingDNA.math.avg(histSktF));\n var pressHistSD = Math.round(TypingDNA.math.sd(histPrtF));\n var seekHistSD = Math.round(TypingDNA.math.sd(histSktF));\n var charMeanTime = seekHistMean + pressHistMean;\n var pressRatio = TypingDNA.math.rd((pressHistMean + zl) / (charMeanTime + zl), 4);\n var seekToPressRatio = TypingDNA.math.rd((1 - pressRatio) / pressRatio, 4);\n var pressSDToPressRatio = TypingDNA.math.rd((pressHistSD + zl) / (pressHistMean + zl), 4);\n var seekSDToPressRatio = TypingDNA.math.rd((seekHistSD + zl) / (pressHistMean + zl), 4);\n var cpm = Math.round(6E4 / (charMeanTime + zl));\n if (histRev == 0) {\n cpm = 0;\n }\n for (var i in obj.arr) {\n var rev = obj.arr[i][1].length;\n var seekMean = 0;\n var pressMean = 0;\n var postMean = 0;\n var seekSD = 0;\n var pressSD = 0;\n var postSD = 0;\n switch (obj.arr[i][0].length) {\n case 0:\n break;\n case 1:\n var seekMean = TypingDNA.math.rd((obj.arr[i][0][0] + zl) / (seekHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][0]);\n seekMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (seekHistMean + zl), 4);\n seekSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (seekHistSD + zl), 4);\n }\n switch (obj.arr[i][1].length) {\n case 0:\n break;\n case 1:\n var pressMean = TypingDNA.math.rd((obj.arr[i][1][0] + zl) / (pressHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][1]);\n pressMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (pressHistMean + zl), 4);\n pressSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (pressHistSD + zl), 4);\n }\n switch (obj.arr[i][2].length) {\n case 0:\n break;\n case 1:\n var postMean = TypingDNA.math.rd((obj.arr[i][2][0] + zl) / (seekHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][2]);\n postMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (seekHistMean + zl), 4);\n postSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (seekHistSD + zl), 4);\n }\n delete obj.arr[i][2];\n delete obj.arr[i][1];\n delete obj.arr[i][0];\n obj.arr[i][0] = rev;\n obj.arr[i][1] = seekMean;\n obj.arr[i][2] = pressMean;\n obj.arr[i][3] = postMean;\n obj.arr[i][4] = seekSD;\n obj.arr[i][5] = pressSD;\n obj.arr[i][6] = postSD;\n }\n var arr = [];\n TypingDNA.apu(arr, histRev);\n TypingDNA.apu(arr, cpm);\n TypingDNA.apu(arr, charMeanTime);\n TypingDNA.apu(arr, pressRatio);\n TypingDNA.apu(arr, seekToPressRatio);\n TypingDNA.apu(arr, pressSDToPressRatio);\n TypingDNA.apu(arr, seekSDToPressRatio);\n TypingDNA.apu(arr, pressHistMean);\n TypingDNA.apu(arr, seekHistMean);\n TypingDNA.apu(arr, pressHistSD);\n TypingDNA.apu(arr, seekHistSD);\n for (var c = 0; c <= 6; c++) {\n for (var i = 0; i < 44; i++) {\n var keyCode = TypingDNA.keyCodes[i];\n var val = obj.arr[keyCode][c];\n if (val == 0 && c > 0) {\n val = 1;\n }\n TypingDNA.apu(arr, val);\n }\n }\n TypingDNA.apu(arr, TypingDNA.isMobile());\n TypingDNA.apu(arr, TypingDNA.version);\n TypingDNA.apu(arr, TypingDNA.flags);\n arr.push(TypingDNA.history.getSpecialKeys());\n return arr.join(\",\");\n }\n\n TypingDNA.apu = function(arr, val) {\n \"NaN\" == String(val) && (val = 0);\n arr.push(val);\n }\n\n TypingDNA.math = {};\n\n TypingDNA.math.rd = function(val, dec) {\n return Number(val.toFixed(dec));\n }\n\n TypingDNA.math.avg = function(arr) {\n var len = arr.length;\n if (len > 0) {\n var sum = 0;\n for (var i = 0; i < len; i++) {\n sum += arr[i];\n }\n return this.rd(sum / len, 4);\n } else {\n return 0;\n }\n }\n\n TypingDNA.math.sd = function(arr) {\n var len = arr.length;\n if (len < 2) {\n return 0;\n } else {\n var sumVS = 0;\n var mean = this.avg(arr);\n for (var i = 0; i < len; i++) {\n sumVS += (arr[i] - mean) * (arr[i] - mean);\n }\n var sd = Math.sqrt(sumVS / len);\n return sd;\n }\n }\n\n TypingDNA.math.fo = function(arr) {\n if (arr.length > 1) {\n var values = arr.concat();\n var len = arr.length;\n values.sort(function(a, b) {\n return a - b;\n });\n var asd = this.sd(values);\n var aMean = values[Math.ceil(arr.length / 2)];\n var multiplier = 2;\n var maxVal = aMean + multiplier * asd;\n var minVal = aMean - multiplier * asd;\n if (len < 20) {\n minVal = 0;\n }\n var fVal = [];\n for (var i = 0; i < len; i++) {\n var tempval = values[i];\n if (tempval < maxVal && tempval > minVal) {\n fVal.push(tempval);\n }\n }\n return fVal;\n } else {\n return arr;\n }\n }\n\n // Calculate a 32 bit FNV-1a hash\n TypingDNA.math.fnv1aHash = function(str) {\n if (str == undefined && typeof str !== 'string') {\n return 0;\n }\n str = str.toLowerCase();\n var i, l;\n var hval = 0x721b5ad4;\n for (i = 0, l = str.length; i < l; i++) {\n hval ^= str.charCodeAt(i);\n hval += (hval << 1) + (hval << 4) + (hval << 7) + (hval << 8) + (hval << 24);\n }\n return hval >>> 0;\n }\n\n TypingDNA.history = {};\n TypingDNA.history.stack = [];\n TypingDNA.history.stackDiagram = [];\n\n TypingDNA.history.add = function(arr) {\n this.stack.push(arr);\n if (this.stack.length > TypingDNA.maxHistoryLength) {\n this.stack.shift();\n }\n }\n\n TypingDNA.history.addDiagram = function(arr) {\n this.stackDiagram.push(arr);\n }\n\n TypingDNA.history.getDiagram = function(extended, str, textId, targetId, caseSensitive) {\n var caseSensitive = (caseSensitive != undefined) ? caseSensitive : (str == undefined || str == \"\");\n var returnArr = [];\n var diagramType = (extended == true) ? 1 : 0;\n var stackDiagram = this.stackDiagram;\n if (targetId != undefined && targetId != \"\" && stackDiagram.length > 0) {\n stackDiagram = TypingDNA.sliceStackByTargetId(stackDiagram, targetId);\n if (str == undefined || str == \"\") {\n var element = TypingDNA.document.getElementById(targetId);\n if (element != null) {\n str = element.value;\n }\n }\n } else {\n var targetLength = TypingDNA.targetIds.length;\n if (str == undefined || str == \"\") {\n if (targetLength > 0) {\n str = \"\";\n for (var i = 0; i < targetLength; i++) {\n var element = TypingDNA.document.getElementById(TypingDNA.targetIds[i]);\n if (element != null) {\n str += element.value;\n }\n }\n } else {\n if (!extended) {\n console.log(\"Please use extended pattern OR provide a fixed string param OR use the addTarget method.\");\n }\n }\n }\n }\n var missingCount = 0;\n var diagramHistoryLength = stackDiagram.length;\n var strLength = diagramHistoryLength;\n if (typeof str === 'string') {\n strLength = str.length;\n } else if (typeof str === 'number' && str < diagramHistoryLength) {\n strLength = str;\n }\n var returnTextId = 0;\n if (textId != undefined) {\n if (isNaN(parseInt(textId))) {\n returnTextId = TypingDNA.math.fnv1aHash(textId);\n } else {\n returnTextId = parseInt(textId);\n }\n } else {\n if (typeof str === 'string') {\n returnTextId = TypingDNA.math.fnv1aHash(str);\n }\n }\n returnArr.push([TypingDNA.isMobile(), TypingDNA.version, TypingDNA.flags, diagramType, strLength, returnTextId, TypingDNA.history.getSpecialKeys()]);\n if (str != undefined && str.length > 0 && typeof str === 'string') {\n var strLower = str.toLowerCase();\n var strUpper = str.toUpperCase();\n var lastFoundPos = [];\n var lastPos = 0;\n var strUpperCharCode;\n var currentSensitiveCharCode;\n for (var i = 0; i < str.length; i++) {\n var currentCharCode = str.charCodeAt(i);\n if (!caseSensitive) {\n strUpperCharCode = strUpper.charCodeAt(i);\n currentSensitiveCharCode = (strUpperCharCode != currentCharCode) ? strUpperCharCode : strLower.charCodeAt(i);\n }\n var startPos = lastPos;\n var finishPos = diagramHistoryLength;\n var found = false;\n while (found == false) {\n for (var j = startPos; j < finishPos; j++) {\n var arr = stackDiagram[j];\n var charCode = arr[3];\n if (charCode == currentCharCode || (!caseSensitive && charCode == currentSensitiveCharCode)) {\n found = true;\n if (j == lastPos) {\n lastPos++;\n lastFoundPos = [];\n } else {\n lastFoundPos.push(j);\n var len = lastFoundPos.length;\n if (len > 1 && lastFoundPos[len - 1] == lastFoundPos[len - 2] + 1) {\n lastPos = j + 1;\n lastFoundPos = [];\n }\n }\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n if (extended) {\n returnArr.push([charCode, seekTime, pressTime, keyCode]);\n } else {\n returnArr.push([seekTime, pressTime]);\n }\n break;\n }\n }\n if (found == false) {\n if (startPos != 0) {\n startPos = 0;\n finishPos = lastPos;\n } else {\n found = true;\n if (TypingDNA.replaceMissingKeys) {\n missingCount++;\n if (typeof TypingDNA.savedMissingAvgValues !== 'object' || TypingDNA.savedMissingAvgValues.historyLength != diagramHistoryLength) {\n var histSktF = TypingDNA.math.fo(TypingDNA.history.get(0, \"seek\"));\n var histPrtF = TypingDNA.math.fo(TypingDNA.history.get(0, \"press\"));\n var seekTime = Math.round(TypingDNA.math.avg(histSktF));\n var pressTime = Math.round(TypingDNA.math.avg(histPrtF));\n TypingDNA.savedMissingAvgValues = {\n seekTime: seekTime,\n pressTime: pressTime,\n historyLength: diagramHistoryLength\n };\n } else {\n var seekTime = TypingDNA.savedMissingAvgValues.seekTime;\n var pressTime = TypingDNA.savedMissingAvgValues.pressTime;\n }\n var missing = 1;\n if (extended) {\n returnArr.push([currentCharCode, seekTime, pressTime, currentCharCode, missing]);\n } else {\n returnArr.push([seekTime, pressTime, missing]);\n }\n break;\n }\n }\n }\n }\n if (TypingDNA.replaceMissingKeysPerc < missingCount * 100 / strLength) {\n return null;\n }\n }\n } else {\n var startCount = 0;\n if (typeof str === 'number') {\n startCount = diagramHistoryLength - str;\n }\n if (startCount < 0) {\n startCount = 0;\n }\n for (var i = startCount; i < diagramHistoryLength; i++) {\n var arr = stackDiagram[i];\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n if (extended) {\n var charCode = arr[3];\n returnArr.push([charCode, seekTime, pressTime, keyCode]);\n } else {\n returnArr.push([seekTime, pressTime]);\n }\n }\n }\n return returnArr.join(\"|\");\n }\n\n TypingDNA.sliceStackByTargetId = function(stack, targetId) {\n var length = stack.length;\n var newStack = [];\n for (i = 0; i < length; i++) {\n var arr = stack[i];\n if (arr[5] == targetId) {\n newStack.push(arr);\n }\n }\n return newStack;\n }\n\n TypingDNA.history.get = function(length, type, targetId) {\n var stack = this.stack;\n if (targetId != undefined && targetId != \"\" && stack.length > 0) {\n stack = TypingDNA.sliceStackByTargetId(stack, targetId);\n }\n var historyTotalLength = stack.length;\n if (length == 0 || length == undefined) {\n length = TypingDNA.defaultHistoryLength;\n }\n if (length > historyTotalLength) {\n length = historyTotalLength;\n }\n switch (type) {\n case \"seek\":\n var seekArr = [];\n for (i = 1; i <= length; i++) {\n var seekTime = stack[historyTotalLength - i][1];\n if (seekTime <= TypingDNA.maxSeekTime) {\n seekArr.push(seekTime);\n }\n };\n return seekArr;\n break;\n case \"press\":\n var pressArr = [];\n for (i = 1; i <= length; i++) {\n var pressTime = stack[historyTotalLength - i][2];\n if (pressTime <= TypingDNA.maxPressTime) {\n pressArr.push(pressTime);\n }\n };\n return pressArr;\n break;\n default:\n var historyStackObj = {};\n for (var i in TypingDNA.keyCodes) {\n historyStackObj[TypingDNA.keyCodes[i]] = [\n [],\n [],\n []\n ];\n }\n for (i = 1; i <= length; i++) {\n var arr = stack[historyTotalLength - i];\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n var prevKeyCode = arr[3];\n if (TypingDNA.keyCodesObj[keyCode]) {\n if (seekTime <= TypingDNA.maxSeekTime) {\n historyStackObj[keyCode][0].push(seekTime);\n if (prevKeyCode != 0 && TypingDNA.keyCodesObj[prevKeyCode]) {\n historyStackObj[prevKeyCode][2].push(seekTime);\n }\n }\n if (pressTime <= TypingDNA.maxPressTime) {\n historyStackObj[keyCode][1].push(pressTime);\n }\n }\n };\n return [historyStackObj, length];\n }\n }\n\n TypingDNA.history.getSpecialKeys = function() {\n var returnArr = [];\n var length = this.stack.length;\n var historyStackObj = {};\n for (var i in TypingDNA.spKeyCodes) {\n historyStackObj[TypingDNA.spKeyCodes[i]] = [\n [],\n ];\n }\n for (i = 1; i <= length; i++) {\n var arr = this.stack[length - i];\n if (TypingDNA.spKeyCodesObj[arr[0]]) {\n var keyCode = arr[0];\n var pressTime = arr[2];\n if (pressTime <= TypingDNA.maxPressTime) {\n historyStackObj[keyCode][0].push(pressTime);\n }\n }\n }\n for (var i in TypingDNA.spKeyCodes) {\n var arr = TypingDNA.math.fo(historyStackObj[TypingDNA.spKeyCodes[i]][0]);\n var arrLen = arr.length;\n returnArr.push(arrLen);\n if (arrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(arr)));\n returnArr.push(Math.round(TypingDNA.math.sd(arr)));\n } else if (arrLen == 1) {\n returnArr.push([arr[0], -1]);\n } else {\n returnArr.push([-1, -1]);\n }\n }\n var clicksArrLen = TypingDNA.clickTimes.length;\n returnArr.push(clicksArrLen);\n if (clicksArrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(TypingDNA.clickTimes)));\n returnArr.push(Math.round(TypingDNA.math.sd(TypingDNA.clickTimes)));\n } else if (clicksArrLen == 1) {\n returnArr.push(TypingDNA.clickTimes[0], -1);\n } else {\n returnArr.push([-1, -1]);\n }\n var stopArrLen = TypingDNA.stopTimes.length;\n returnArr.push(stopArrLen);\n if (stopArrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(TypingDNA.stopTimes)));\n returnArr.push(Math.round(TypingDNA.math.sd(TypingDNA.stopTimes)));\n } else if (stopArrLen == 1) {\n returnArr.push(TypingDNA.stopTimes[0], -1);\n } else {\n returnArr.push([-1, -1]);\n }\n return returnArr;\n }\n\n /**\n * Checks the quality of a typing pattern, how well it is revelated, how useful the\n * information will be for matching applications. It returns a value between 0 and 1.\n * Values over 0.3 are acceptable, however a value over 0.7 shows good pattern strength.\n * @param {String} typingPattern The typing pattern string returned by the get() function.\n * @return {Number} A real number between 0 and 1. A close to 1 value means a stronger pattern.\n * @example var quality = tdna.getQuality(typingPattern);\n */\n TypingDNA.getQuality = function(typingPattern) {\n var obj = typingPattern.split(\",\");\n for (i = 0; i < obj.length; i++) {\n obj[i] = Number(obj[i]);\n }\n var totalEvents = obj[0];\n var acc = rec = avgAcc = 0;\n var avg = TypingDNA.math.avg(obj);\n var revs = obj.slice(11, 55);\n for (var i in revs) {\n rec += Number(revs[i] > 0);\n acc += Number(revs[i] > 4);\n avgAcc += Number(revs[i] > avg);\n }\n var tReturn = Math.sqrt(rec * acc * avgAcc) / 80;\n return tReturn > 1 ? 1 : tReturn;\n }\n\n /**\n * Checks the validity of a typing pattern if recorded on mobile.\n * @param {String} typingPattern The typing pattern string returned by the get() function.\n * @return {Number} A real number between 0 and 1. A number larger than 0.7 usually means a valid pattern.\n * @example var quality = tdna.checkMobileValidity(typingPattern);\n */\n TypingDNA.checkMobileValidity = function(typingPattern) {\n var obj = typingPattern.split(\",\");\n var totalEvents = obj[0];\n if (totalEvents == 0) {\n return 0;\n }\n var rec = 0;\n var revs = obj.slice(11, 55);\n for (var i in revs) {\n rec += Number(revs[i]);\n }\n return rec / totalEvents;\n }\n\n TypingDNA.getLength = function(typingPattern) {\n return Number(typingPattern.split(\",\")[1]);\n }\n\n TypingDNA.isMobile = function() {\n if (TypingDNA.mobile != undefined) {\n return TypingDNA.mobile;\n } else {\n var check = 0;\n (function(a) {\n if (\n /(android|bb\\d+|meego).+mobile|avantgo|bada\\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\\.(browser|link)|vodafone|wap|windows ce|xda|xiino|android|ipad|playbook|silk/i\n .test(a) ||\n /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\\-(n|u)|c55\\/|capi|ccwa|cdm\\-|cell|chtm|cldc|cmd\\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\\-s|devi|dica|dmob|do(c|p)o|ds(12|\\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\\-|_)|g1 u|g560|gene|gf\\-5|g\\-mo|go(\\.w|od)|gr(ad|un)|haie|hcit|hd\\-(m|p|t)|hei\\-|hi(pt|ta)|hp( i|ip)|hs\\-c|ht(c(\\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\\-(20|go|ma)|i230|iac( |\\-|\\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\\/)|klon|kpt |kwc\\-|kyo(c|k)|le(no|xi)|lg( g|\\/(k|l|u)|50|54|\\-[a-w])|libw|lynx|m1\\-w|m3ga|m50\\/|ma(te|ui|xo)|mc(01|21|ca)|m\\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\\-2|po(ck|rt|se)|prox|psio|pt\\-g|qa\\-a|qc(07|12|21|32|60|\\-[2-7]|i\\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\\-|oo|p\\-)|sdk\\/|se(c(\\-|0|1)|47|mc|nd|ri)|sgh\\-|shar|sie(\\-|m)|sk\\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\\-|v\\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\\-|tdg\\-|tel(i|m)|tim\\-|t\\-mo|to(pl|sh)|ts(70|m\\-|m3|m5)|tx\\-9|up(\\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\\-|your|zeto|zte\\-/i\n .test(a.substr(0, 4))) {\n check = 1\n }\n })(navigator.userAgent || navigator.vendor || window.opera);\n TypingDNA.mobile = check;\n return check;\n }\n }\n\n TypingDNA.getTextId = function(str) {\n return TypingDNA.math.fnv1aHash(str);\n }\n } else {\n // TypingDNA is a static class, currently doesn't support actual multiple instances (Singleton implementation)\n return TypingDNA.instance;\n }\n}\n","/**\n * \n * This file has been modified to override doPostBack\n * Check out the doPostBack function below for more details.\n * Override the doPostBack function when upgrading.\n * Unable to make a wrapper because it is invoked using an internal name within \n * this library.\n * \n * Current Verison = https://github.com/duosecurity/duo_web_sdk/blob/7aec8dd895ea4bd4549069e76076850eccfe07f2/index.js\n * PS: they dont seem to version correctly hence using commit.\n */\n\n/**\n * Duo Web SDK v2\n * Copyright 2019, Duo Security\n */\n\n(function (root, factory) {\n /*eslint-disable */\n if (typeof define === 'function' && define.amd) {\n // AMD. Register as an anonymous module.\n define([], factory);\n /*eslint-enable */\n } else if (typeof module === 'object' && module.exports) {\n // Node. Does not work with strict CommonJS, but\n // only CommonJS-like environments that support module.exports,\n // like Node.\n module.exports = factory();\n } else {\n // Browser globals (root is window)\n var Duo = factory();\n // If the Javascript was loaded via a script tag, attempt to autoload\n // the frame.\n Duo._onReady(Duo.init);\n\n // Attach Duo to the `window` object\n root.Duo = Duo;\n }\n}(this, function() {\n var DUO_MESSAGE_FORMAT = /^(?:AUTH|ENROLL)+\\|[A-Za-z0-9\\+\\/=]+\\|[A-Za-z0-9\\+\\/=]+$/;\n var DUO_ERROR_FORMAT = /^ERR\\|[\\w\\s\\.\\(\\)]+$/;\n var DUO_OPEN_WINDOW_FORMAT = /^DUO_OPEN_WINDOW\\|/;\n var VALID_OPEN_WINDOW_DOMAINS = [\n 'duo.com',\n 'duosecurity.com',\n 'duomobile.s3-us-west-1.amazonaws.com'\n ];\n\n var postAction,\n postArgument,\n host,\n sigRequest,\n duoSig,\n appSig,\n iframe,\n submitCallback;\n\n // We use this function instead of setting initial values in the var\n // declarations to make sure the initial values and subsequent\n // re-initializations are always the same.\n initializeStatefulVariables();\n\n /**\n * Set local variables to whatever they should be before you call init().\n */\n function initializeStatefulVariables() {\n postAction = '';\n postArgument = 'sig_response';\n host = undefined;\n sigRequest = undefined;\n duoSig = undefined;\n appSig = undefined;\n iframe = undefined;\n submitCallback = undefined;\n }\n\n function throwError(message, givenUrl) {\n var url = (\n givenUrl ||\n 'https://www.duosecurity.com/docs/duoweb#3.-show-the-iframe'\n );\n throw new Error(\n 'Duo Web SDK error: ' + message +\n (url ? ('\\n' + 'See ' + url + ' for more information') : '')\n );\n }\n\n function hyphenize(str) {\n return str.replace(/([a-z])([A-Z])/, '$1-$2').toLowerCase();\n }\n\n // cross-browser data attributes\n function getDataAttribute(element, name) {\n if ('dataset' in element) {\n return element.dataset[name];\n } else {\n return element.getAttribute('data-' + hyphenize(name));\n }\n }\n\n // cross-browser event binding/unbinding\n function on(context, event, fallbackEvent, callback) {\n if ('addEventListener' in window) {\n context.addEventListener(event, callback, false);\n } else {\n context.attachEvent(fallbackEvent, callback);\n }\n }\n\n function off(context, event, fallbackEvent, callback) {\n if ('removeEventListener' in window) {\n context.removeEventListener(event, callback, false);\n } else {\n context.detachEvent(fallbackEvent, callback);\n }\n }\n\n function onReady(callback) {\n on(document, 'DOMContentLoaded', 'onreadystatechange', callback);\n }\n\n function offReady(callback) {\n off(document, 'DOMContentLoaded', 'onreadystatechange', callback);\n }\n\n function onMessage(callback) {\n on(window, 'message', 'onmessage', callback);\n }\n\n function offMessage(callback) {\n off(window, 'message', 'onmessage', callback);\n }\n\n /**\n * Parse the sig_request parameter, throwing errors if the token contains\n * a server error or if the token is invalid.\n *\n * @param {String} sig Request token\n */\n function parseSigRequest(sig) {\n if (!sig) {\n // nothing to do\n return;\n }\n\n // see if the token contains an error, throwing it if it does\n if (sig.indexOf('ERR|') === 0) {\n throwError(sig.split('|')[1]);\n }\n\n // validate the token\n if (sig.indexOf(':') === -1 || sig.split(':').length !== 2) {\n throwError(\n 'Duo was given a bad token. This might indicate a configuration ' +\n 'problem with one of Duo\\'s client libraries.'\n );\n }\n\n var sigParts = sig.split(':');\n\n // hang on to the token, and the parsed duo and app sigs\n sigRequest = sig;\n duoSig = sigParts[0];\n appSig = sigParts[1];\n\n return {\n sigRequest: sig,\n duoSig: sigParts[0],\n appSig: sigParts[1]\n };\n }\n\n /**\n * Validate that a MessageEvent came from the Duo service, and that it\n * is a properly formatted payload.\n *\n * The Google Chrome sign-in page injects some JS into pages that also\n * make use of postMessage, so we need to do additional validation above\n * and beyond the origin.\n *\n * @param {MessageEvent} event Message received via postMessage\n */\n function isDuoMessage(event) {\n return Boolean(\n event.origin === ('https://' + host) &&\n typeof event.data === 'string' &&\n (\n event.data.match(DUO_MESSAGE_FORMAT) ||\n event.data.match(DUO_ERROR_FORMAT) ||\n event.data.match(DUO_OPEN_WINDOW_FORMAT)\n )\n );\n }\n\n /**\n * Validate the request token and prepare for the iframe to become ready.\n *\n * All options below can be passed into an options hash to `Duo.init`, or\n * specified on the iframe using `data-` attributes.\n *\n * Options specified using the options hash will take precedence over\n * `data-` attributes.\n *\n * Example using options hash:\n * ```javascript\n * Duo.init({\n * iframe: \"some_other_id\",\n * host: \"api-main.duo.test\",\n * sig_request: \"...\",\n * post_action: \"/auth\",\n * post_argument: \"resp\"\n * });\n * ```\n *\n * Example using `data-` attributes:\n * ```html\n * \n * ```\n *\n * Some browsers (especially embedded browsers) don't like it when the Duo\n * Web SDK changes the `src` attribute on the iframe. To prevent this, there\n * is an alternative way to use the Duo Web SDK:\n *\n * Add a div (or any other container element) instead of an iframe to the\n * DOM with an id of \"duo_iframe\", or pass that element to the\n * `iframeContainer` parameter of `Duo.init`. An iframe will be created and\n * inserted into that container element, preventing `src` change related\n * bugs. WARNING: All other elements in the container will be deleted.\n *\n * The `iframeAttributes` parameter of `Duo.init` is available to set any\n * attributes on the inserted iframe if the Duo Web SDK is inserting the\n * iframe. For details, see the parameter documentation below.\n *\n * @param {Object} options\n * @param {String} options.host - Hostname for the Duo Prompt.\n * @param {String} options.sig_request - Request token.\n * @param {String|HTMLElement} [options.iframe] - The iframe, or id of an\n * iframe that will be used for the Duo Prompt. If you don't provide\n * this or the `iframeContainer` parameter the Duo Web SDK will default\n * to using whatever element has an id of \"duo_iframe\".\n * @param {String|HTMLElement} [options.iframeContainer] - The element you\n * want the Duo Prompt inserted into, or the id of that element.\n * Anything inside this element will be deleted and replaced with an\n * iframe hosting the Duo prompt. If you don't provide this or the\n * `iframe` parameter the Duo Web SDK will default to using whatever\n * element has an id of \"duo_iframe\".\n * @param {Object} [options.iframeAttributes] - Object with names and\n * values coresponding to attributes you want added to the Duo Prompt\n * iframe, like `title`, `width` and `allow`. WARNING: this parameter\n * only works if you use the `iframeContainer` parameter or add an id\n * of \"duo_iframe\" to an element that isn't an iframe. If you have\n * added an iframe to the DOM yourself, you should set those attributes\n * directly on the iframe.\n * @param {String} [options.post_action=''] - URL to POST back to after a\n * successful auth.\n * @param {String} [options.post_argument='sig_response'] - Parameter name\n * to use for response token.\n * @param {Function} [options.submit_callback] - If provided, the Duo Web\n * SDK will not submit the form. Instead it will execute this callback\n * function passing in a reference to the \"duo_form\" form object.\n * `submit_callback`` can be used to prevent the webpage from reloading.\n */\n function init(options) {\n // If init() is called more than once we have to reset all the local\n // variables to ensure init() will work the same way every time. This\n // helps people making single page applications. SPAs may periodically\n // remove the iframe and add a new one that has to be initialized.\n initializeStatefulVariables();\n\n if (options) {\n if (options.host) {\n host = options.host;\n }\n\n if (options.sig_request) {\n parseSigRequest(options.sig_request);\n }\n\n if (options.post_action) {\n postAction = options.post_action;\n }\n\n if (options.post_argument) {\n postArgument = options.post_argument;\n }\n\n if (typeof options.submit_callback === 'function') {\n submitCallback = options.submit_callback;\n }\n }\n\n var promptElement = getPromptElement(options);\n if (promptElement) {\n // If we can get the element that will host the prompt, set it.\n ready(promptElement, options.iframeAttributes || {});\n } else {\n // If the element that will host the prompt isn't available yet, set\n // it up after the DOM finishes loading.\n asyncReady(options);\n }\n\n // always clean up after yourself!\n offReady(init);\n }\n\n /**\n * Given the options from init(), get the iframe or iframe container that\n * should be used for the Duo Prompt. Returns `null` if nothing was found.\n */\n function getPromptElement(options) {\n var result;\n\n if (options.iframe && options.iframeContainer) {\n throwError(\n 'Passing both `iframe` and `iframeContainer` arguments at the' +\n ' same time is not allowed.'\n );\n } else if (options.iframe) {\n // If we are getting an iframe, try to get it and raise if the\n // element we find is NOT an iframe.\n result = getUserDefinedElement(options.iframe);\n validateIframe(result);\n } else if (options.iframeContainer) {\n result = getUserDefinedElement(options.iframeContainer);\n validateIframeContainer(result);\n } else {\n result = document.getElementById('duo_iframe');\n }\n\n return result;\n }\n\n /**\n * When given an HTMLElement, return it. When given a string, get an element\n * with that id, else return null.\n */\n function getUserDefinedElement(object) {\n if (object.tagName) {\n return object;\n } else if (typeof object == 'string') {\n return document.getElementById(object);\n }\n return null;\n }\n\n /**\n * Check if the given thing is an iframe.\n */\n function isIframe(element) {\n return (\n element &&\n element.tagName &&\n element.tagName.toLowerCase() === 'iframe'\n );\n }\n\n /**\n * Throw an error if we are given an element that is NOT an iframe.\n */\n function validateIframe(element) {\n if (element && !isIframe(element)) {\n throwError(\n '`iframe` only accepts an iframe element or the id of an' +\n ' iframe. To use a non-iframe element, use the' +\n ' `iframeContainer` argument.'\n );\n }\n }\n\n /**\n * Throw an error if we are given an element that IS an iframe instead of an\n * element that we can insert an iframe into.\n */\n function validateIframeContainer(element) {\n if (element && isIframe(element)) {\n throwError(\n '`iframeContainer` only accepts a non-iframe element or the' +\n ' id of a non-iframe. To use a non-iframe element, use the' +\n ' `iframeContainer` argument on Duo.init().'\n );\n }\n }\n\n /**\n * Generate the URL that goes to the Duo Prompt.\n */\n function generateIframeSrc() {\n return [\n 'https://', host, '/frame/web/v1/auth?tx=', duoSig,\n '&parent=', encodeURIComponent(document.location.href),\n '&v=2.8'\n ].join('');\n }\n\n /**\n * This function is called when a message was received from another domain\n * using the `postMessage` API. Check that the event came from the Duo\n * service domain, and that the message is a properly formatted payload,\n * then perform the post back to the primary service.\n *\n * @param event Event object (contains origin and data)\n */\n function onReceivedMessage(event) {\n if (isDuoMessage(event)) {\n if (event.data.match(DUO_OPEN_WINDOW_FORMAT)) {\n var url = event.data.substring(\"DUO_OPEN_WINDOW|\".length);\n if (isValidUrlToOpen(url)) {\n // Open the URL that comes after the DUO_WINDOW_OPEN token.\n window.open(url, \"_self\");\n }\n }\n else {\n // the event came from duo, do the post back\n doPostBack(event.data);\n\n // always clean up after yourself!\n offMessage(onReceivedMessage);\n }\n }\n }\n\n /**\n * Validate that this passed in URL is one that we will actually allow to\n * be opened.\n * @param url String URL that the message poster wants to open\n * @returns {boolean} true if we allow this url to be opened in the window\n */\n function isValidUrlToOpen(url) {\n if (!url) {\n return false;\n }\n\n var parser = document.createElement('a');\n parser.href = url;\n\n if (parser.protocol === \"duotrustedendpoints:\") {\n return true;\n } else if (parser.protocol !== \"https:\") {\n return false;\n }\n\n for (var i = 0; i < VALID_OPEN_WINDOW_DOMAINS.length; i++) {\n if (parser.hostname.endsWith(\".\" + VALID_OPEN_WINDOW_DOMAINS[i]) ||\n parser.hostname === VALID_OPEN_WINDOW_DOMAINS[i]) {\n return true;\n }\n }\n return false;\n }\n\n /**\n * Register a callback to call ready() after the DOM has loaded.\n */\n function asyncReady(options) {\n var callback = function() {\n var promptElement = getPromptElement(options);\n if (!promptElement) {\n throwError(\n 'This page does not contain an iframe for Duo to use.' +\n ' Add an element like' +\n ' to this page.'\n );\n }\n\n ready(promptElement, options.iframeAttributes || {});\n\n // Always clean up after yourself.\n offReady(callback)\n };\n\n onReady(callback);\n }\n\n /**\n * Point the iframe at Duo, then wait for it to postMessage back to us.\n */\n function ready(promptElement, iframeAttributes) {\n if (!host) {\n host = getDataAttribute(promptElement, 'host');\n\n if (!host) {\n throwError(\n 'No API hostname is given for Duo to use. Be sure to pass ' +\n 'a `host` parameter to Duo.init, or through the `data-host` ' +\n 'attribute on the iframe element.'\n );\n }\n }\n\n if (!duoSig || !appSig) {\n parseSigRequest(getDataAttribute(promptElement, 'sigRequest'));\n\n if (!duoSig || !appSig) {\n throwError(\n 'No valid signed request is given. Be sure to give the ' +\n '`sig_request` parameter to Duo.init, or use the ' +\n '`data-sig-request` attribute on the iframe element.'\n );\n }\n }\n\n // if postAction/Argument are defaults, see if they are specified\n // as data attributes on the iframe\n if (postAction === '') {\n postAction = getDataAttribute(promptElement, 'postAction') || postAction;\n }\n\n if (postArgument === 'sig_response') {\n postArgument = getDataAttribute(promptElement, 'postArgument') || postArgument;\n }\n\n if (isIframe(promptElement)) {\n iframe = promptElement;\n iframe.src = generateIframeSrc();\n } else {\n // If given a container to put an iframe in, clean out any children\n // child elements in case `init()` was called more than once.\n while (promptElement.firstChild) {\n // We call `removeChild()` instead of doing `innerHTML = \"\"`\n // to make sure we unbind any events.\n promptElement.removeChild(promptElement.firstChild)\n }\n\n iframe = document.createElement('iframe');\n\n // Set the src and all other attributes on the new iframe.\n iframeAttributes['src'] = generateIframeSrc();\n for (var name in iframeAttributes) {\n iframe.setAttribute(name, iframeAttributes[name]);\n }\n\n promptElement.appendChild(iframe);\n }\n\n // listen for the 'message' event\n onMessage(onReceivedMessage);\n }\n\n /**\n * We received a postMessage from Duo. POST back to the primary service\n * with the response token, and any additional user-supplied parameters\n * given in form#duo_form.\n */\n // function doPostBack(response) {\n // // create a hidden input to contain the response token\n // var input = document.createElement('input');\n // input.type = 'hidden';\n // input.name = postArgument;\n // input.value = response + ':' + appSig;\n\n // // user may supply their own form with additional inputs\n // var form = document.getElementById('duo_form');\n\n // // if the form doesn't exist, create one\n // if (!form) {\n // form = document.createElement('form');\n\n // // insert the new form after the iframe\n // iframe.parentElement.insertBefore(form, iframe.nextSibling);\n // }\n\n // // make sure we are actually posting to the right place\n // form.method = 'POST';\n // form.action = postAction;\n\n // // add the response token input to the form\n // form.appendChild(input);\n\n // // away we go!\n // if (typeof submitCallback === \"function\") {\n // submitCallback.call(null, form);\n // } else {\n // form.submit();\n // }\n // }\n\n // OKTA: Overriding their doPostBack logic because we want to submit this\n // through ajax, not a postBack\n function doPostBack(response) {\n postAction(response + ':' + appSig);\n }\n \n\n return {\n init: init,\n _onReady: onReady,\n _parseSigRequest: parseSigRequest,\n _isDuoMessage: isDuoMessage,\n _doPostBack: doPostBack\n };\n}));","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'account-unlocked',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'account.unlock.unlocked.title', 'login'),\n subtitle: _.partial(loc, 'account.unlock.unlocked.desc', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'account-unlocked' },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n }),\n ];\n },\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nimport EnterPasscodeForm from 'views/enroll-factors/EnterPasscodeForm';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'activate-totp',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ScopeList from 'views/admin-consent/ScopeList';\nimport consentLogoHeaderTemplate from 'views/shared/templates/consentLogoHeaderTemplate';\n\nconst ConsentModel = {\n props: {\n scopes: ['array', true]\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.consent({\n consent: {\n scopes: _.pluck(this.get('scopes'), 'name')\n }\n });\n });\n },\n cancel: function() {\n var self = this;\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n var consentCancelFn = self.settings.get('consent.cancel');\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n }\n};\n\nconst ConsentHeader = View.extend({\n className: 'consent-title detail-row',\n template: consentLogoHeaderTemplate,\n getTemplateData: function() {\n var appState = this.options.appState;\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n issuer: appState.get('issuer'),\n };\n }\n});\n\nconst ConsentForm = {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: [\n FormType.View({\n View: ConsentHeader\n }),\n FormType.View({\n View: ScopeList,\n }),\n ],\n};\n\nconst AdminConsentRequiredController = FormController.extend({\n Model: ConsentModel,\n\n Form: ConsentForm,\n\n className: 'admin-consent-required',\n\n initialize: function() {\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', () => {\n this.model.cancel();\n });\n },\n});\n\nexport default AdminConsentRequiredController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport BarcodeView from 'views/enroll-factors/BarcodeView';\nimport Footer from 'views/enroll-factors/Footer';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nexport default FormController.extend({\n className: 'barcode-push',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n initialize: function() {\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearErrors();\n });\n },\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.pollForEnrollment();\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport BarcodeView from 'views/enroll-factors/BarcodeView';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'barcode-totp',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n save: _.partial(loc, 'oform.next', 'login'),\n noCancelButton: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'activate'\n );\n\n this.options.appState.trigger('navigate', url);\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport { _, $, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ScopeList from 'views/consent/ScopeList';\nimport SkipLink from 'views/shared/SkipLink';\nimport consentLogoHeaderTemplate from 'views/shared/templates/consentLogoHeaderTemplate';\n\nexport default FormController.extend({\n className: 'consent-required',\n initialize: function() {\n this.model.set('expiresAt', this.options.appState.get('expiresAt'));\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', _.bind(this.model.cancel, this.model));\n\n // add Skip to main content link\n const skipLink = new SkipLink();\n $(`#${Enums.WIDGET_LOGIN_CONTAINER_ID}`).prepend(skipLink.render().$el);\n },\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // Update the \"don't allow\" and \"allow access\" buttons to be neutral by changing \"allow button\" to be gray.\n this.$('.o-form-button-bar .button-primary').removeClass('button-primary');\n },\n Model: {\n props: {\n expiresAt: ['string', true],\n scopes: ['array', true],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.consent({\n consent: {\n expiresAt: this.get('expiresAt'),\n scopes: _.pluck(this.get('scopes'), 'name'),\n },\n });\n });\n },\n cancel: function() {\n const self = this;\n\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n const consentCancelFn = self.settings.get('consent.cancel');\n\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n },\n },\n Form: {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n className: 'consent-title detail-row',\n template: consentLogoHeaderTemplate,\n getTemplateData: function() {\n const appState = this.options.appState;\n\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n };\n },\n }),\n }),\n FormType.View({\n View: new ScopeList({ model: this.model }),\n }),\n FormType.View({\n View: View.extend({\n className: 'consent-description detail-row',\n template: hbs(\n '\\\n {{i18n code=\"consent.required.description\" bundle=\"login\"}}
\\\n '\n ),\n }),\n }),\n ];\n },\n },\n Footer: View.extend({\n className: 'consent-footer',\n template: hbs(\n '\\\n {{#if termsOfService}}\\\n {{i18n code=\"consent.required.termsOfService\" bundle=\"login\"}}\\\n {{#if privacyPolicy}}\\\n •\\\n {{/if}}\\\n {{/if}}\\\n {{#if privacyPolicy}}\\\n {{i18n code=\"consent.required.privacyPolicy\" bundle=\"login\"}}\\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n const appState = this.options.appState;\n\n return {\n termsOfService: appState.get('targetTermsOfService') && appState.get('targetTermsOfService').href,\n privacyPolicy: appState.get('targetPrivacyPolicy') && appState.get('targetPrivacyPolicy').href,\n };\n },\n }),\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/expired-password/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'custom-password-expired',\n Model: {},\n Form: {\n noButtonBar: true,\n title: function() {\n const expiringSoon = this.options.appState.get('isPwdExpiringSoon');\n const numDays = this.options.appState.get('passwordExpireDays');\n\n if (expiringSoon && numDays > 0) {\n return loc('password.expiring.title', 'login', [numDays]);\n } else if (expiringSoon && numDays === 0) {\n return loc('password.expiring.today', 'login');\n } else if (expiringSoon) {\n return loc('password.expiring.soon', 'login');\n } else {\n return this.settings.get('brandName')\n ? loc('password.expired.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expired.title.generic', 'login');\n }\n },\n subtitle: function() {\n if (this.options.appState.get('isPwdExpiringSoon')) {\n const subtitle = this.settings.get('brandName')\n ? loc('password.expiring.subtitle.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expiring.subtitle.generic', 'login');\n\n return subtitle + ' ' + loc('password.expired.custom.subtitle', 'login');\n }\n\n return loc('password.expired.custom.subtitle', 'login');\n },\n formChildren: function() {\n return [\n FormType.Button({\n title: _.partial(loc, 'password.expired.custom.submit', 'login', [\n this.options.appState.get('passwordExpiredWebsiteName'),\n ]),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'custom-button' },\n click: function() {\n Util.redirect(this.options.appState.get('passwordExpiredLinkUrl'));\n },\n }),\n ];\n },\n },\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport hbs from 'handlebars-inline-precompile';\nimport {loc, View} from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport TextBox from './views/shared/TextBox';\n\nconst InvalidUserCodeErrorView = View.extend({\n template: hbs`\n \n \n {{i18n code=\"api.authn.error.PASSCODE_INVALID\" bundle=\"login\"}}
\n \n `\n});\n\nexport default FormController.extend({\n className: 'device-code-activate',\n Model: function() {\n return {\n props: {\n userCode: ['string', true, this.options?.appState?.get('userCode')],\n stateToken: 'string',\n },\n save: function() {\n const self = this;\n return this.doTransaction(function(transaction) {\n return transaction.deviceActivate({\n userCode: self.get('userCode')\n });\n });\n }\n };\n },\n Form: {\n noCancelButton: true,\n autoSave: true,\n save: function() {\n return loc('oform.next', 'login');\n },\n title: function() {\n return loc('device.code.activate.title', 'login');\n },\n subtitle() {\n return loc('device.code.activate.subtitle', 'login');\n },\n formChildren: function() {\n if (this.options.appState.get('deviceActivationStatus') === 'INVALID_USER_CODE') {\n this.add(InvalidUserCodeErrorView, '.o-form-error-container');\n }\n\n return [\n FormType.Input({\n label: loc('device.code.activate.label', 'login'),\n 'label-top': true,\n name: 'userCode',\n input: TextBox,\n inputId: 'user-code',\n type: 'text',\n inlineValidation: false,\n })\n ];\n },\n events: {\n 'keyup input[name=\"userCode\"]': function(e) {\n e.preventDefault();\n this.addHyphen(e);\n }\n },\n addHyphen(evt) {\n const currentVal = evt.target.value;\n // add hyphen after 4th character\n if (currentVal && currentVal.length === 4 && !['Backspace', 'Delete', '-'].includes(evt.key)) {\n evt.target.value = currentVal.concat('-');\n }\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport {_, loc, View} from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from './util/FormType';\n\nconst DEVICE_ACTIVATED = 'DEVICE_ACTIVATED';\nconst DEVICE_NOT_ACTIVATED_CONSENT_DENIED = 'DEVICE_NOT_ACTIVATED_CONSENT_DENIED';\nconst DEVICE_NOT_ACTIVATED = 'DEVICE_NOT_ACTIVATED';\nconst DEVICE_CODE_ERROR_KEYS = [\n DEVICE_NOT_ACTIVATED_CONSENT_DENIED,\n DEVICE_NOT_ACTIVATED\n];\n\nexport default FormController.extend({\n className: 'device-code-terminal',\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // show device code terminal icons\n const iconClass = this.options.appState.get('deviceActivationStatus') === DEVICE_ACTIVATED\n ? 'success-24-green' : 'error-24-red';\n this.$('.o-form-head').before('');\n },\n Model: {},\n Form: {\n noCancelButton: true,\n noButtonBar: true,\n title: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('device.code.activated.success.title', 'login');\n }\n if (_.contains(DEVICE_CODE_ERROR_KEYS, deviceActivationStatus)) {\n return loc('device.code.activated.error.title', 'login');\n }\n },\n subtitle: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('idx.device.activated', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED_CONSENT_DENIED) {\n return loc('idx.device.not.activated.consent.denied', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED) {\n return loc('idx.device.not.activated.internal.error', 'login');\n }\n },\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n template: hbs(\n '{{#if isDeviceCodeError}}\\\n \\\n {{i18n code=\"oie.try.again\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n return {\n isDeviceCodeError: _.contains(DEVICE_CODE_ERROR_KEYS, this.options.appState.get('deviceActivationStatus'))\n };\n },\n }),\n }),\n ];\n }\n }\n});\n","/*!\n * Copyright (c) 2019-2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc, internal } from 'okta';\nimport EnrollCustomFactorController from 'EnrollCustomFactorController';\nimport Factor from 'models/Factor';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nconst { Util } = internal.util;\nexport default EnrollCustomFactorController.extend({\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction(() => {\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n });\n },\n },\n\n Form: function() {\n const factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n formChildren: function() {\n const result = [];\n\n if (this.options.appState.get('isFactorResultFailed')) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: this.options.appState.get('factorResultErrorMessage') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n return result;\n },\n };\n },\n});\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ResendEmailView from 'views/ResendEmailView';\nimport Footer from 'views/enroll-factors/Footer';\n\nconst Model = {\n props: {\n passCode: 'string',\n },\n\n resend: function() {\n this.trigger('form:clear-errors');\n return this.doTransaction(function(transaction) {\n // authn support multiple `resend` hence has to specify name.\n return transaction.resend('email');\n });\n },\n\n save: function() {\n this.trigger('save');\n const formData = this.toJSON();\n return this.doTransaction(function(transaction) {\n return transaction.activate(formData);\n });\n },\n};\n\nconst Form = function() {\n return {\n title: _.partial(loc, 'email.enroll.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n save: _.partial(loc, 'oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n formChildren: [\n // message\n FormType.View({\n View: View.extend({\n className: 'enroll-activate-email-content',\n attributes: {\n 'data-se': 'enroll-activate-email-content',\n },\n\n // Why use `{{{` for the description?\n // - factorEmail is actually an HTML fragment which\n // is created via another handlebar template and used for bold the email address.\n template: hbs('{{{i18n code=\"email.mfa.email.sent.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n\n getTemplateData: function() {\n const factor = this.options.appState.get('factor');\n const factorEmailVal = factor && factor.profile ? factor.profile.email : '';\n const factorEmail = hbs('{{email}}')({ email: factorEmailVal });\n return {\n factorEmail,\n };\n },\n }),\n }),\n // send again callout message and link button\n FormType.View({\n View: ResendEmailView,\n }),\n // passcode input\n FormType.Input({\n label: loc('email.code.label', 'login'),\n 'label-top': true,\n name: 'passCode',\n type: 'text',\n wide: true,\n }),\n ],\n };\n};\n\nexport default FormController.extend({\n className: 'enroll-activate-email',\n\n Model: Model,\n\n Form: Form,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { _, loc, internal, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport PhoneTextBox from 'views/enroll-factors/PhoneTextBox';\nimport TextBox from 'views/shared/TextBox';\nlet { Keys } = internal.util;\nconst EnrollCallAndSmsControllerwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning login-timeout-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n {{{warning}}}
\n `,\n});\nconst factorIdIsDefined = {\n factorId: function(val) {\n return !_.isUndefined(val);\n },\n};\n\nfunction isCallFactor(factorType) {\n return factorType === 'call';\n}\n\nfunction getClassName(factorType) {\n return isCallFactor(factorType) ? 'enroll-call' : 'enroll-sms';\n}\n\nfunction sendCode(e) {\n if (Keys.isEnter(e)) {\n e.stopPropagation();\n e.preventDefault();\n if (e.type === 'keyup' && e.data && e.data.model) {\n e.data.model.sendCode();\n }\n }\n}\n\nexport default FormController.extend({\n className: function() {\n return getClassName(this.options.factorType);\n },\n Model: function() {\n return {\n props: {\n phoneNumber: ['string', true],\n phoneExtension: ['string', false],\n lastEnrolledPhoneNumber: 'string',\n passCode: ['string', true],\n factorId: 'string',\n },\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n hasExistingPhones: 'boolean',\n trapEnrollment: 'boolean',\n ableToResend: 'boolean',\n factorType: 'string',\n skipPhoneValidation: 'boolean',\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return phoneNumber ? countryCallingCode + phoneNumber : '';\n },\n },\n enrolled: {\n deps: ['lastEnrolledPhoneNumber', 'fullPhoneNumber'],\n fn: function(lastEnrolled, current) {\n return lastEnrolled === current;\n },\n },\n },\n limitResending: function() {\n this.set({ ableToResend: false });\n _.delay(_.bind(this.set, this), Enums.API_RATE_LIMIT, { ableToResend: true });\n },\n sendCode: function() {\n const self = this;\n const phoneNumber = this.get('fullPhoneNumber');\n const phoneExtension = this.get('phoneExtension');\n \n self.trigger('errors:clear');\n \n if (!phoneNumber.length) {\n self.trigger('invalid', self, { phoneNumber: 'model.validation.field.blank' });\n return;\n }\n \n return this.doTransaction(function(transaction) {\n const isMfaEnroll = transaction.status === 'MFA_ENROLL' || transaction.status === 'FACTOR_ENROLL';\n const profileData = {\n phoneNumber: phoneNumber,\n updatePhone: isMfaEnroll ? self.get('hasExistingPhones') : true,\n };\n \n if (isCallFactor(self.get('factorType'))) {\n profileData['phoneExtension'] = phoneExtension;\n }\n \n if (self.get('skipPhoneValidation')) {\n profileData['validatePhone'] = false;\n }\n \n const doEnroll = function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: self.get('factorType'),\n provider: 'OKTA',\n });\n \n return factor\n .enroll({\n profile: profileData,\n })\n .catch(function(error) {\n if (error.errorCode === 'E0000098') {\n // E0000098: \"This phone number is invalid.\"\n self.set('skipPhoneValidation', true);\n error.xhr.responseJSON.errorSummary = loc('enroll.sms.try_again', 'login');\n }\n throw error;\n });\n };\n \n if (isMfaEnroll) {\n return doEnroll(transaction);\n } else {\n // We must transition to MfaEnroll before updating the phone number\n self.set('trapEnrollment', true);\n return transaction.prev().then(doEnroll).then(function(trans) {\n self.set('trapEnrollment', false);\n return trans;\n });\n }\n // Rethrow errors so we can change state\n // AFTER setting the new transaction\n }, true)\n .then(function() {\n self.set('lastEnrolledPhoneNumber', phoneNumber);\n self.limitResending();\n })\n .catch(function() {\n self.set('trapEnrollment', false);\n });\n },\n resendCode: function() {\n this.trigger('errors:clear');\n this.limitResending();\n return this.doTransaction(function(transaction) {\n return transaction.resend(this.get('factorType'));\n });\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n Form: function() {\n const factorType = this.options.factorType;\n const isCall = isCallFactor(factorType);\n const formTitle = loc(isCall ? 'enroll.call.setup' : 'enroll.sms.setup', 'login');\n const formSubmit = loc(isCall ? 'mfa.call' : 'mfa.sendCode', 'login');\n const formRetry = loc(isCall ? 'mfa.redial' : 'mfa.resendCode', 'login');\n const formSubmitted = loc(isCall ? 'mfa.calling' : 'mfa.sent', 'login');\n const numberFieldClassName = isCall ? 'enroll-call-phone' : 'enroll-sms-phone';\n const buttonClassName = isCall ? 'call-request-button' : 'sms-request-button';\n const formChildren = [\n FormType.Input({\n name: 'countryCode',\n type: 'select',\n wide: true,\n options: CountryUtil.getCountries(),\n }),\n FormType.Input({\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n 'label-top': true,\n className: numberFieldClassName,\n name: 'phoneNumber',\n input: PhoneTextBox,\n type: 'text',\n render: function() {\n this.$('input[name=\"phoneNumber\"]')\n .off('keydown keyup', sendCode)\n .keydown(sendCode)\n .keyup({ model: this.model }, sendCode);\n },\n }),\n ];\n\n if (isCall) {\n formChildren.push(\n FormType.Input({\n label: loc('mfa.phoneNumber.ext.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-call-extension',\n name: 'phoneExtension',\n input: TextBox,\n type: 'text',\n })\n );\n }\n formChildren.push(\n FormType.Button({\n title: formSubmit,\n attributes: { 'data-se': buttonClassName },\n className: 'button button-primary js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.sendCode();\n },\n }),\n FormType.Button({\n title: formRetry,\n attributes: { 'data-se': buttonClassName },\n className: 'button js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.resendCode();\n },\n initialize: function() {\n this.$el.css({ display: 'none' });\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.options.title = formRetry;\n this.enable();\n } else {\n this.options.title = formSubmitted;\n this.disable();\n }\n this.render();\n });\n },\n }),\n FormType.Divider({\n showWhen: factorIdIsDefined,\n }),\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n showWhen: factorIdIsDefined,\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n showWhen: factorIdIsDefined,\n })\n );\n\n return {\n title: formTitle,\n noButtonBar: true,\n autoSave: true,\n className: getClassName(factorType),\n\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(EnrollCallAndSmsControllerwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n\n initialize: function() {\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.showWarning(loc(isCall ? 'factor.call.time.warning' : 'factor.sms.time.warning', 'login'));\n } else {\n this.clearWarnings();\n }\n });\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearWarnings();\n this.clearErrors();\n });\n this.listenTo(this.model, 'change:enrolled', function() {\n this.$('.js-enroll-phone').toggle();\n });\n },\n formChildren: formChildren,\n };\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.set('factorId', this.options.appState.get('activatedFactorId'));\n return true;\n }\n if (this.options.appState.get('isMfaEnroll') && this.model.get('trapEnrollment')) {\n return true;\n }\n },\n\n initialize: function() {\n if (isCallFactor(this.options.factorType)) {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhonesForCall'));\n } else {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhones'));\n }\n this.model.set('factorType', this.options.factorType);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 13] */\n\nimport { _, loc, Collection } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorList from 'views/enroll-choices/FactorList';\nimport Footer from 'views/enroll-choices/Footer';\nimport RequiredFactorList from 'views/enroll-choices/RequiredFactorList';\nimport Enums from './util/Enums';\nimport FormController from './util/FormController';\nimport RouterUtil from './util/RouterUtil';\nconst subtitleTpl = hbs('{{{subtitle}}}');\nexport default FormController.extend({\n className: 'enroll-choices',\n state: {\n pageType: null,\n },\n\n Model: {},\n\n Form: {\n noCancelButton: true,\n\n title: _.partial(loc, 'enroll.choices.title', 'login'),\n\n noButtonBar: function() {\n return this.state.get('pageType') === Enums.ALL_OPTIONAL_NONE_ENROLLED;\n },\n\n subtitle: ' ',\n\n getSubtitle: function() {\n switch (this.state.get('pageType')) {\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n return loc('enroll.choices.optional', 'login');\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED: {\n const remainingDays = this.options.appState.get('gracePeriodRemainingDays');\n return Number.isInteger(remainingDays) && remainingDays >= 0\n ? this.getGracePeriodSubtitle(remainingDays)\n : this.getDefaultSubtitle();\n }\n default:\n return this.getDefaultSubtitle();\n }\n },\n\n getDefaultSubtitle: function() {\n return this.settings.get('brandName')\n ? loc('enroll.choices.description.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.choices.description.generic', 'login');\n },\n\n getGracePeriodSubtitle: function(remainingDays) {\n return remainingDays >= 1\n ? loc('enroll.choices.description.gracePeriod.bold', 'login', [remainingDays])\n : loc('enroll.choices.description.gracePeriod.oneDay.bold', 'login');\n },\n\n save: function() {\n switch (this.state.get('pageType')) {\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n return loc('enroll.choices.submit.finish', 'login');\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n return loc('enroll.choices.submit.configure', 'login');\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n return loc('enroll.choices.submit.next', 'login');\n default:\n return '';\n }\n },\n\n initialize: function(options) {\n this.listenTo(this, 'save', function() {\n let current;\n\n switch (this.state.get('pageType')) {\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n current = options.appState.get('factors').getFirstUnenrolledRequiredFactor();\n options.appState.trigger(\n 'navigate',\n RouterUtil.createEnrollFactorUrl(current.get('provider'), current.get('factorType'))\n );\n break;\n default:\n return this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n }\n });\n },\n\n preRender: function() {\n // form subtitle does not support unescaped strings, and we need some html elements\n // in the subtitle for this form. So instead of a regular subtitle, we add a \n // with the text we need\n this.add(subtitleTpl({ subtitle: this.getSubtitle() }), 'p.okta-form-subtitle');\n\n const factors = this.options.appState.get('factors');\n\n switch (this.state.get('pageType')) {\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n this.add(\n new RequiredFactorList({\n minimize: true,\n collection: new Collection(factors.where({ required: true })),\n appState: this.options.appState,\n })\n );\n break;\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.ALL_OPTIONAL_NONE_ENROLLED: {\n const enrolled = factors.where({ enrolled: true });\n const notEnrolled = factors.filter(function(factor) {\n // pick factors that are not enrolled or have additional enrollments\n return !factor.get('enrolled') || factor.get('additionalEnrollment');\n });\n let notEnrolledListTitle;\n\n if (enrolled.length > 0) {\n notEnrolledListTitle = loc('enroll.choices.list.optional', 'login');\n this.add(\n new FactorList({\n listTitle: loc('enroll.choices.list.enrolled', 'login'),\n minimize: true,\n collection: new Collection(enrolled),\n appState: this.options.appState,\n })\n );\n }\n this.add(\n new FactorList({\n listTitle: notEnrolledListTitle,\n collection: new Collection(notEnrolled),\n appState: this.options.appState,\n showInlineSetupButton: true,\n })\n );\n break;\n }\n }\n },\n },\n\n initialize: function(options) {\n let numRequiredEnrolled = 0;\n let numRequiredNotEnrolled = 0;\n let numOptionalEnrolled = 0;\n let numOptionalNotEnrolled = 0;\n let hasRequired;\n let pageType;\n\n options.appState.get('factors').each(function(factor) {\n const required = factor.get('required');\n const enrolled = factor.get('enrolled');\n const additionalEnrollment = factor.get('additionalEnrollment');\n\n if (required && enrolled) {\n numRequiredEnrolled++;\n } else if (required && !enrolled) {\n numRequiredNotEnrolled++;\n } else if (!required && enrolled) {\n numOptionalEnrolled++;\n } else if (!required && !enrolled) {\n numOptionalNotEnrolled++;\n }\n // If a factor has multiple instances and\n // additional optional enrollments\n if (enrolled && additionalEnrollment) {\n numOptionalNotEnrolled++;\n }\n });\n\n hasRequired = numRequiredEnrolled > 0 || numRequiredNotEnrolled > 0;\n\n // There are 5 possible states this screen can be in:\n\n // 1. Has required, but none have been enrolled. Wizard start page.\n if (hasRequired && numRequiredEnrolled === 0) {\n pageType = Enums.HAS_REQUIRED_NONE_ENROLLED;\n } else if (hasRequired && numRequiredNotEnrolled > 0) {\n // 2. Has required, and have enrolled at least one. The page layout\n // to configure the remaining required factors.\n pageType = Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED;\n } else if (hasRequired && numOptionalNotEnrolled > 0) {\n // 3. Has required, and finished enrolling all required factors. The\n // page layout you see to configure any optional factors or skip.\n pageType = Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED;\n } else if (numOptionalEnrolled === 0 && numOptionalNotEnrolled > 0) {\n // 4. Factors are all optional, no factors enrolled.\n pageType = Enums.ALL_OPTIONAL_NONE_ENROLLED;\n } else if (numOptionalNotEnrolled > 0) {\n // 5. Factors are all optional, some factors have already been\n // enrolled (can either enroll more or skip).\n pageType = Enums.ALL_OPTIONAL_SOME_ENROLLED;\n } else {\n // 6. Factors are all optional, all factors have already been\n // enrolled, among them there is OktaVerify with Push enrolled as totp\n // (API return OktaVerify push factor as unenrolled in this case and as we always merge\n // push and totp in UI so we redirect to skip link here).\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n }\n\n this.state.set('pageType', pageType);\n\n if (this.options.appState.get('skipLink') && pageType === Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED) {\n this.add(new Footer(this.toJSON()));\n }\n },\n});\n","/*!\n * Copyright (c) 2018-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FormController from 'util/FormController';\nimport Footer from 'views/enroll-factors/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'enroll-custom-factor',\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction((transaction, setTransaction) => {\n const factor = _.findWhere(transaction.factors, {\n provider: this.get('provider'),\n factorType: this.get('factorType'),\n });\n\n return factor\n .enroll()\n .then(trans => {\n setTransaction(trans);\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n })\n .catch(function(err) {\n throw err;\n });\n });\n },\n },\n\n Form: function() {\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere({\n provider: this.options.provider,\n factorType: this.options.factorType,\n });\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n };\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n\n initialize: function() {\n this.model.set('provider', this.options.provider);\n this.model.set('factorType', this.options.factorType);\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint camelcase: 0*/\nimport { $, _, loc } from 'okta';\nimport Duo from 'duo';\nimport Q from 'q';\nimport FormController from 'util/FormController';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'enroll-duo duo-form',\n\n Model: {\n props: {\n host: 'string',\n signature: 'string',\n postAction: 'string',\n factorId: 'string',\n stateToken: 'string',\n },\n\n getInitOptions: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'web',\n provider: 'DUO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function(signedResponse) {\n const url = this.get('postAction');\n const factorId = this.get('factorId');\n const self = this;\n const data = {\n id: factorId,\n stateToken: this.get('stateToken'),\n sig_response: signedResponse,\n };\n // Note: We should be doing this in OktaAuth! Fix when it's updated.\n\n // We don't actually use authClient.post() here (unlike all the other cases in the\n // sign-in widget) since the endpoint is wired to accept serialized form post instead\n // of a JSON post ($.post() is different from authClient.post() in that in $.post(),\n // jquery decides the Content-Type instead of it being a JSON type). Enroll/Verify DUO\n // are the only two places where we actually do this.\n // NOTE - If we ever decide to change this, we should test this very carefully.\n return Q($.post(url, data))\n .then(function() {\n return self.doTransaction(function(transaction) {\n return transaction.poll();\n });\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n });\n },\n },\n\n Form: {\n autoSave: true,\n noButtonBar: true,\n title: _.partial(loc, 'enroll.duo.title', 'login'),\n\n postRender: function() {\n this.add('');\n Duo.init({\n host: this.model.get('host'),\n sig_request: this.model.get('signature'),\n iframe: this.$('iframe').get(0),\n post_action: _.bind(this.model.activate, this.model),\n });\n },\n },\n\n Footer: Footer,\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model.getInitOptions(this.options.appState).then(function(trans) {\n const res = trans.data;\n\n if (\n !res ||\n !res._embedded ||\n !res._embedded.factor ||\n !res._embedded.factor._embedded ||\n !res._embedded.factor._embedded.activation\n ) {\n throw new Error('Response does not have duo activation options');\n }\n\n const factor = res._embedded.factor;\n const activation = factor._embedded.activation;\n\n self.model.set({\n host: activation.host,\n signature: activation.signature,\n postAction: activation._links.complete.href,\n factorId: factor.id,\n stateToken: res.stateToken,\n });\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\n\nconst Model = {\n local: {\n factorType: 'string',\n provider: 'string',\n },\n save: function() {\n this.trigger('save');\n const factorOpt = this.pick('factorType', 'provider');\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, factorOpt);\n\n return factor.enroll();\n });\n },\n};\n\nconst Form = function() {\n return {\n title: _.partial(loc, 'email.enroll.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n save: _.partial(loc, 'email.button.send', 'login'),\n formChildren: [\n FormType.View({\n View: View.extend({\n attributes: {\n 'data-se': 'enroll-email-content',\n },\n template: hbs('{{i18n code=\"email.enroll.description\" bundle=\"login\"}}'),\n }),\n }),\n ],\n };\n};\n\nexport default FormController.extend({\n className: 'enroll-email',\n\n Model: Model,\n\n Form: Form,\n\n Footer: Footer,\n\n initialize: function() {\n this.model.set(_.pick(this.options, 'factorType', 'provider'));\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nexport default FormController.extend({\n className: 'enroll-hotp',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n Form: {\n title: function() {\n const factors = this.options.appState.get('factors');\n const hotpFactor = factors.findWhere({\n provider: this.model.get('__provider__'),\n factorType: this.model.get('__factorType__'),\n });\n return loc('enroll.totp.title', 'login', [hotpFactor.get('factorLabel')]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'restrict-enroll' },\n\n formChildren: function() {\n const children = [\n FormType.View({\n View: new HtmlErrorMessageView({ message: loc('enroll.hotp.restricted', 'login') }),\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\n\nfunction isRSA(provider) {\n return provider === 'RSA';\n}\n\nfunction getClassName(provider) {\n return isRSA(provider) ? 'enroll-rsa' : 'enroll-onprem';\n}\n\nexport default FormController.extend({\n className: function() {\n return getClassName(this.options.provider);\n },\n Model: function() {\n const provider = this.options.provider;\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere(_.pick(this.options, 'provider', 'factorType'));\n const profile = factor.get('profile');\n const credentialId = profile && profile.credentialId ? profile.credentialId : '';\n\n return {\n props: {\n credentialId: ['string', true, credentialId],\n passCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token',\n provider: provider,\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n profile: { credentialId: this.get('credentialId') },\n });\n });\n },\n };\n },\n\n Form: function() {\n const provider = this.options.provider;\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere(_.pick(this.options, 'provider', 'factorType'));\n const vendorName = factor.get('vendorName');\n const title = isRSA(provider) ? loc('factor.totpHard.rsaSecurId', 'login') : vendorName;\n\n return {\n title: title,\n noButtonBar: true,\n autoSave: true,\n className: getClassName(provider),\n initialize: function() {\n this.listenTo(this.model, 'error', (source, error) => {\n if (error && error.status === 409) {\n // 409 means we are in change pin, so we should clear out answer input\n this.$('.o-form-input-name-passCode input').val('');\n this.$('.o-form-input-name-passCode input').trigger('change');\n this.$('.o-form-input-name-passCode input').focus();\n }\n });\n },\n formChildren: [\n FormType.Input({\n label: loc('enroll.onprem.username.placeholder', 'login', [vendorName]),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.onprem.username.tooltip',\n 'enroll.onprem.username.placeholder',\n 'login',\n [vendorName],\n [vendorName]\n ),\n 'explain-top': true,\n name: 'credentialId',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.onprem.passcode.placeholder', 'login', [vendorName]),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.onprem.passcode.tooltip',\n 'enroll.onprem.passcode.placeholder',\n 'login',\n [vendorName],\n [vendorName]\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'password',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n }),\n ],\n };\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport ValidationUtil from 'util/ValidationUtil';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-password',\n Model: {\n props: {\n password: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateFieldsMatch(\n this,\n 'password',\n 'confirmPassword',\n loc('password.enroll.error.match', 'login')\n );\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'password',\n provider: 'OKTA',\n });\n\n return factor.enroll({\n profile: {\n password: this.get('password'),\n },\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n title: _.partial(loc, 'enroll.password.setup', 'login'),\n inputs: function() {\n return [\n {\n label: loc('mfa.challenge.password.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'password',\n input: TextBox,\n type: 'password',\n },\n {\n label: loc('password.confirmPassword.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n },\n ];\n },\n },\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-question',\n Model: {\n props: {\n question: 'string',\n answer: ['string', true],\n },\n local: {\n securityQuestions: 'object',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'question',\n provider: 'OKTA',\n });\n\n return factor.enroll({\n profile: {\n question: this.get('question'),\n answer: this.get('answer'),\n },\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n title: _.partial(loc, 'enroll.securityQuestion.setup', 'login'),\n inputs: function() {\n return [\n {\n label: false,\n 'label-top': true,\n name: 'question',\n type: 'select',\n wide: true,\n options: function() {\n return this.model.get('securityQuestions');\n },\n params: {\n searchThreshold: 25,\n },\n },\n {\n label: loc('mfa.challenge.answer.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain('mfa.challenge.answer.tooltip', 'mfa.challenge.answer.placeholder', 'login'),\n 'explain-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'text',\n },\n ];\n },\n },\n\n Footer: Footer,\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model\n .manageTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'question',\n provider: 'OKTA',\n });\n\n return factor.questions();\n })\n .then(function(questionsRes) {\n const questions = {};\n\n _.each(questionsRes, function(question) {\n questions[question.question] = FactorUtil.getSecurityQuestionLabel(question);\n });\n self.model.set('securityQuestions', questions);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-symantec',\n Model: {\n props: {\n credentialId: ['string', true],\n passCode: ['string', true],\n nextPassCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token',\n provider: 'SYMANTEC',\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n nextPassCode: this.get('nextPassCode'),\n profile: { credentialId: this.get('credentialId') },\n });\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'factor.totpHard.symantecVip', 'login'),\n subtitle: _.partial(loc, 'enroll.symantecVip.subtitle', 'login'),\n noButtonBar: true,\n autoSave: true,\n className: 'enroll-symantec',\n formChildren: function() {\n return [\n FormType.Input({\n label: loc('enroll.symantecVip.credentialId.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.credentialId.tooltip',\n 'enroll.symantecVip.credentialId.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'credentialId',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.symantecVip.passcode1.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.passcode1.tooltip',\n 'enroll.symantecVip.passcode1.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.symantecVip.passcode2.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.passcode2.tooltip',\n 'enroll.symantecVip.passcode2.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'nextPassCode',\n input: TextBox,\n type: 'text',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n }),\n ];\n },\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport StoreLinks from 'util/StoreLinks';\nimport Footer from 'views/enroll-factors/Footer';\nconst showWhenDeviceTypeSelected = {\n __deviceType__: function(val) {\n return val !== undefined;\n },\n};\nconst EnrollTotpControllerAppDownloadInstructionsView = View.extend({\n attributes: { 'data-se': 'app-download-instructions' },\n className: 'app-download-instructions',\n template: hbs(\n '\\\n \\\n {{{appStoreLinkText}}}
\\\n '\n ),\n initialize: function() {\n this.listenTo(this.model, 'change:__deviceType__', this.render);\n },\n postRender: function() {\n const link = this.$el.find('.instructions a');\n if (link.length) {\n link[0].setAttribute('target', '_blank');\n link[0].setAttribute('rel', 'noreferer noopener');\n }\n },\n getTemplateData: function() {\n let appStoreLink;\n let appIcon;\n let appStoreName;\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n appStoreName = StoreLinks.STORE[this.model.get('__deviceType__')];\n if (this.model.get('__provider__') === 'GOOGLE') {\n appStoreLink = StoreLinks.GOOGLE[this.model.get('__deviceType__')];\n appIcon = 'google-auth-38';\n } else {\n appStoreLink = StoreLinks.OKTA[this.model.get('__deviceType__')];\n appIcon = 'okta-verify-download-icon';\n }\n return {\n appStoreLinkText: loc('enroll.totp.downloadApp', 'login', [appStoreLink, factorName, appStoreName]),\n appIcon: appIcon,\n };\n },\n});\nconst EnrollTotpControllerEnrollTotpController = FormController.extend({\n className: 'enroll-totp',\n Model: function() {\n return {\n local: {\n __deviceType__: 'string',\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: this.get('__factorType__'),\n provider: this.get('__provider__'),\n });\n\n return factor.enroll();\n });\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-device-type' },\n\n formChildren: function() {\n const inputOptions = {\n APPLE: loc('iphone', 'login'),\n ANDROID: loc('android', 'login'),\n };\n const children = [\n FormType.Input({\n name: '__deviceType__',\n type: 'radio',\n options: inputOptions,\n group: true,\n label: _.partial(loc, 'enroll.totp.selectDevice', 'login'),\n }),\n FormType.Divider({ showWhen: showWhenDeviceTypeSelected }),\n FormType.View({\n View: EnrollTotpControllerAppDownloadInstructionsView,\n showWhen: showWhenDeviceTypeSelected,\n }),\n FormType.Button({\n title: loc('oform.next', 'login'),\n attributes: {\n 'data-type': 'save'\n },\n className: 'button button-primary default-custom-button',\n click: function() {\n this.model.save();\n },\n showWhen: showWhenDeviceTypeSelected,\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n});\nexport default EnrollTotpControllerEnrollTotpController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport Errors from 'util/Errors';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nexport default FormController.extend({\n className: 'enroll-u2f',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const appId = activation.appId;\n const registerRequests = [\n {\n version: FidoUtil.getU2fVersion(),\n challenge: activation.nonce,\n },\n ];\n const self = this;\n const deferred = Q.defer();\n\n u2f.register(appId, registerRequests, [], function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n deferred.reject(\n new Errors.U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fEnrollErrorMessageByCode(data.errorCode),\n },\n },\n })\n );\n } else {\n deferred.resolve(\n transaction.activate({\n registrationData: data.registrationData,\n version: data.version,\n challenge: data.challenge,\n clientData: data.clientData,\n })\n );\n }\n });\n return deferred.promise;\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.u2f.title', 'login'),\n save: _.partial(loc, 'enroll.u2f.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-u2f-form',\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n //There is html in enroll.u2f.general2 in our properties file, reason why is unescaped\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n - {{{i18n code=\"enroll.u2f.general2\" bundle=\"login\"}}}
\\\n - {{i18n code=\"enroll.u2f.general3\" bundle=\"login\"}}
\\\n
'\n ),\n }),\n })\n );\n\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"enroll.u2f.instructions\" bundle=\"login\"}}
\\\n {{i18n code=\"enroll.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n \\\n \\\n \\\n \\\n \\\n '\n ),\n }),\n })\n );\n }\n\n return result;\n },\n\n _startEnrollment: function() {\n this.$('.u2f-instructions').addClass('hide');\n this.$('.u2f-enroll-text').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.u2f-instructions').removeClass('hide');\n this.$('.u2f-enroll-text').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport EnrollUser from 'models/EnrollUser';\nimport BaseLoginController from 'util/BaseLoginController';\nimport EnrollUserForm from 'views/enrollUser/EnrollUserForm';\nimport FooterWithBackLink from 'views/shared/FooterWithBackLink';\nexport default BaseLoginController.extend({\n className: 'enroll-user',\n initialize: function(options) {\n this.options = options || {};\n // create model\n this.model = new EnrollUser(this.options);\n },\n fetchInitialData: function() {\n // If user is unauthenticated and starts enroll flow make a post call to transition state to PROFILE_REQUIRED\n if (this.options.appState.get('isUnauthenticated')) {\n return this.model.getEnrollFormData();\n } else {\n return BaseLoginController.prototype.fetchInitialData.call();\n }\n },\n trapAuthResponse: function() {\n if (this.options.appState.get('isProfileRequired')) {\n return true;\n }\n },\n postRender: function() {\n const form = new EnrollUserForm(this.toJSON());\n\n this.add(form);\n this.add(new FooterWithBackLink(this.toJSON()));\n this.addListeners();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport CryptoUtil from 'util/CryptoUtil';\nimport Errors from 'util/Errors';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\n\nfunction getExcludeCredentials(credentials) {\n const excludeCredentials = [];\n\n _.each(credentials, function(credential) {\n excludeCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(credential.id),\n });\n });\n return excludeCredentials;\n}\n\nexport default FormController.extend({\n className: 'enroll-webauthn',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n this.appState.on('backToFactors', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n // enroll via browser webauthn js\n\n const self = this;\n\n if (webauthn.isNewApiAvailable()) {\n const options = _.extend({}, activation, {\n challenge: CryptoUtil.strToBin(activation.challenge),\n user: {\n id: CryptoUtil.strToBin(activation.user.id),\n name: activation.user.name,\n displayName: activation.user.displayName,\n },\n excludeCredentials: getExcludeCredentials(activation.excludeCredentials),\n });\n\n self.webauthnAbortController = new AbortController();\n return new Q(\n navigator.credentials.create({\n publicKey: options,\n signal: self.webauthnAbortController.signal,\n })\n )\n .then(function(newCredential) {\n return transaction.activate({\n attestation: CryptoUtil.binToStr(newCredential.response.attestationObject),\n clientData: CryptoUtil.binToStr(newCredential.response.clientDataJSON),\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new Errors.WebauthnAbortError();\n } else {\n throw new Errors.WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n }\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.webauthn.biometric.title', 'login'),\n save: _.partial(loc, 'enroll.webauthn.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-webauthn-form',\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n //enroll.webauthn.biometric.instructions.edge is unescaped because it contains html\n children.push(\n FormType.View({\n View: View.extend({\n className: 'webauthn-enroll-text',\n template: hbs(\n '\\\n \\\n {{i18n code=\"enroll.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n \\\n {{#if isEdge}}\\\n \\\n {{{i18n code=\"enroll.webauthn.biometric.instructions.edge\" bundle=\"login\"}}}
\\\n \\\n {{/if}}\\\n {{#if onlySupportsSecurityKey}}\\\n \\\n {{{i18n code=\"enroll.webauthn.instructions.noSupportForBiometric\" bundle=\"login\"}}}
\\\n \\\n {{/if}}\\\n \\\n '\n ),\n getTemplateData: function() {\n return {\n isEdge: BrowserFeatures.isEdge(),\n onlySupportsSecurityKey: (BrowserFeatures.isFirefox() || BrowserFeatures.isSafari()) &&\n BrowserFeatures.isMac(),\n };\n },\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport Spinner from 'views/shared/Spinner';\nexport default FormController.extend({\n className: 'enroll-windows-hello',\n Model: {\n local: {\n __isEnrolled__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n\n if (this.get('__isEnrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n return this._enroll(transaction);\n });\n },\n\n _enroll: function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n },\n\n activate: function() {\n this.set('__isEnrolled__', true);\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const user = transaction.user;\n const model = this;\n const accountInfo = {\n rpDisplayName: activation.rpDisplayName,\n userDisplayName: user.profile.displayName,\n accountName: user.profile.login,\n userId: user.id,\n };\n const cryptoParams = [\n {\n algorithm: activation.algorithm,\n },\n ];\n const challenge = activation.nonce;\n\n return webauthn\n .makeCredential(accountInfo, cryptoParams, challenge)\n .then(function(creds) {\n return transaction.activate({\n credentialId: creds.credential.id,\n publicKey: creds.publicKey,\n attestation: null,\n });\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'enroll.windowsHello.title', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('enroll.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'enroll.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('enroll.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('enroll.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n this.$('.o-form-button-bar').removeClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-yubikey',\n Model: {\n props: {\n passCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token:hardware',\n provider: 'YUBICO',\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n });\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.yubikey.title', 'login'),\n subtitle: _.partial(loc, 'enroll.yubikey.subtitle', 'login'),\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n autoSave: true,\n className: 'enroll-yubikey',\n formChildren: [\n FormType.View({\n View: '',\n }),\n FormType.Input({\n name: 'passCode',\n input: TextBox,\n type: 'password',\n }),\n ],\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nconst EnrollmentLinkSentControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n this.options.appState.get('activatedFactorType'),\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nconst emailSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaEmail.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-email-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"enroll.totp.enrollViaEmail.msg\" bundle=\"login\"}}
\\\n {{email}}
\\\n '\n ),\n getTemplateData: function() {\n return { email: this.options.appState.get('userEmail') };\n },\n }),\n }),\n ],\n};\nconst smsSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaSms.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-sms-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"enroll.totp.enrollViaSms.msg\" bundle=\"login\"}}
\\\n {{phoneNumber}}
\\\n '\n ),\n getTemplateData: function() {\n return { phoneNumber: this.model.get('fullPhoneNumber') };\n },\n }),\n }),\n ],\n};\nexport default FormController.extend({\n className: 'enroll-activation-link-sent',\n Model: function() {\n return {\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n phoneNumber: ['string', false, this.options.appState.get('userPhoneNumber')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return countryCallingCode + phoneNumber;\n },\n },\n },\n };\n },\n\n Form: function() {\n const activationType = this.options.appState.get('factorActivationType');\n\n switch (activationType) {\n case 'SMS':\n return smsSentForm;\n case 'EMAIL':\n return emailSentForm;\n default:\n throw new Error('Unknown activation option: ' + activationType);\n }\n },\n\n Footer: EnrollmentLinkSentControllerFooter,\n\n initialize: function() {\n this.pollForEnrollment();\n },\n\n remove: function() {\n return FormController.prototype.remove.apply(this, arguments);\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isWaitingForActivation')) {\n this.pollForEnrollment();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport RouterUtil from 'util/RouterUtil';\nimport EnterPasscodeForm from 'views/enroll-factors/EnterPasscodeForm';\nconst EnterPasscodePushFlowControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n 'push',\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nexport default FormController.extend({\n className: 'activate-push',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: EnterPasscodePushFlowControllerFooter,\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'error-state',\n Model: {},\n Form: {\n noButtonBar: true,\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Spinner from 'views/shared/Spinner';\nimport BaseLoginController from 'util/BaseLoginController';\nimport Util from 'util/Util';\n\nexport default BaseLoginController.extend({\n className: 'force-idp-discovery',\n\n View: Spinner,\n\n Model: {},\n\n initialize: function() {\n const OKTA_IDP_TYPE = 'OKTA';\n const RESOURCE = 'okta:acct:';\n\n const options = this.options;\n const lastAuthResponse = options.appState.get('lastAuthResponse');\n const stateToken = lastAuthResponse && lastAuthResponse?.stateToken;\n\n const webfingerArgs = {\n resource: RESOURCE,\n requestContext: stateToken,\n };\n\n options.appState.settings.authClient\n .webfinger(webfingerArgs)\n .then(res => {\n if (res?.links && res.links[0]) {\n if (res.links[0].properties['okta:idp:type'] !== OKTA_IDP_TYPE && res.links[0].href) {\n const redirectFn = res.links[0].href.includes('OKTA_INVALID_SESSION_REPOST%3Dtrue')\n ? Util.redirectWithFormGet.bind(Util)\n : this.settings.get('redirectUtilFn');\n //override redirectFn to only use Util.redirectWithFormGet if OKTA_INVALID_SESSION_REPOST is included\n //it will be encoded since it will be included in the encoded fromURI\n\n redirectFn(res.links[0].href);\n return;\n }\n }\n options.appState.trigger('navigate', '');\n })\n .catch(() => {\n // TODO: OKTA-436775 Show error instead of navigating to default route\n options.appState.trigger('navigate', '');\n });\n },\n\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport ContactSupport from 'views/shared/ContactSupport';\nimport TextBox from 'views/shared/TextBox';\nconst ForgotPasswordControllernoFactorsError = View.extend({\n template: hbs`\n \n \n {{i18n code=\"password.forgot.noFactorsEnabled\" bundle=\"login\"}}
\n \n `,\n});\nconst ForgotPasswordControllerFooter = View.extend({\n template: hbs(\n '\\\n {{#unless hideBackToSignInForReset}}\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{/unless}}\\\n {{#if helpSupportNumber}}\\\n \\\n {{i18n code=\"mfa.noAccessToEmail\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-contact-support': function(e) {\n e.preventDefault();\n this.state.trigger('contactSupport');\n this.$('.js-contact-support').hide();\n },\n },\n getTemplateData: function() {\n return {\n hideBackToSignInForReset: this.settings.get('features.hideBackToSignInForReset'),\n helpSupportNumber: this.settings.get('helpSupportNumber'),\n };\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default FormController.extend({\n className: 'forgot-password',\n Model: {\n props: {\n username: ['string', true],\n factorType: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateUsername(this);\n },\n save: function() {\n const self = this;\n const relayState = this.settings.get('relayState');\n\n this.startTransaction(function(authClient) {\n return authClient.forgotPassword({\n username: self.settings.transformUsername(self.get('username'), Enums.FORGOT_PASSWORD),\n factorType: self.get('factorType'),\n relayState: relayState,\n });\n }).catch(function() {\n //need empty fail handler on model to display errors on form\n });\n },\n },\n Form: {\n noButtonBar: true,\n title: _.partial(loc, 'password.reset', 'login'),\n formChildren: function() {\n const smsEnabled = this.settings.get('features.smsRecovery');\n /*eslint complexity: [2, 9] max-statements: [2, 23] */\n\n const callEnabled = this.settings.get('features.callRecovery');\n const emailEnabled = this.settings.get('features.emailRecovery');\n const noFactorsEnabled = !(smsEnabled || callEnabled || emailEnabled);\n const formChildren = [];\n\n if (noFactorsEnabled) {\n this.add(ForgotPasswordControllernoFactorsError, '.o-form-error-container');\n } else {\n formChildren.push(\n FormType.Input({\n label: loc('password.forgot.email.or.username.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'password.forgot.email.or.username.tooltip',\n 'password.forgot.email.or.username.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'account-recovery-username',\n autoComplete: 'username',\n type: 'text',\n inlineValidation: false,\n })\n );\n if (smsEnabled || callEnabled) {\n formChildren.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"recovery.mobile.hint\" bundle=\"login\" arguments=\"mobileFactors\"}}\\\n
'\n ),\n getTemplateData: function() {\n let mobileFactors;\n\n if (smsEnabled && callEnabled) {\n mobileFactors = loc('recovery.smsOrCall');\n } else if (callEnabled) {\n mobileFactors = loc('recovery.call');\n } else {\n mobileFactors = loc('recovery.sms');\n }\n return { mobileFactors: mobileFactors };\n },\n }),\n })\n );\n }\n if (smsEnabled) {\n this.$el.addClass('forgot-password-sms-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'sms-button',\n 'password.forgot.sendText',\n Enums.RECOVERY_FACTOR_TYPE_SMS,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_SMS);\n }\n if (callEnabled) {\n this.$el.addClass('forgot-password-call-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'call-button',\n 'password.forgot.call',\n Enums.RECOVERY_FACTOR_TYPE_CALL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_CALL);\n }\n if (emailEnabled) {\n this.$el.addClass('forgot-password-email-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'email-button',\n 'password.forgot.sendEmail',\n Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_EMAIL);\n }\n }\n\n return formChildren;\n },\n initialize: function() {\n this.listenTo(this.state, 'contactSupport', function() {\n this.add(ContactSupport, '.o-form-error-container');\n });\n\n this.listenTo(this, 'save', function() {\n this.options.appState.set('username', this.model.get('username'));\n this.model.save();\n });\n },\n setDefaultFactorType: function(factorType) {\n if (_.isEmpty(this.model.get('factorType'))) {\n this.model.set('factorType', factorType);\n }\n },\n createRecoveryFactorButton: function(className, labelCode, factorType, form) {\n return FormType.Button({\n attributes: { 'data-se': className },\n className: 'button button-primary button-wide ' + className,\n title: loc(labelCode, 'login'),\n click: function() {\n form.clearErrors();\n if (this.model.isValid()) {\n this.model.set('factorType', factorType);\n form.trigger('save', this.model);\n }\n },\n });\n },\n },\n Footer: ForgotPasswordControllerFooter,\n\n initialize: function() {\n this.options.appState.unset('username');\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport PrimaryAuthController from 'PrimaryAuthController';\nimport IDPDiscoveryModel from 'models/IDPDiscovery';\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport BaseLoginController from 'util/BaseLoginController';\nimport IDPDiscoveryForm from 'views/idp-discovery/IDPDiscoveryForm';\nimport CustomButtons from 'views/primary-auth/CustomButtons';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport Util from './util/Util';\n\nexport default PrimaryAuthController.extend({\n className: 'idp-discovery',\n\n View: IDPDiscoveryForm,\n\n constructor: function(options) {\n options.appState.unset('username');\n let requestContext = options.settings.get('idpDiscovery.requestContext');\n const lastAuthResponse = options.appState.get('lastAuthResponse');\n const stateToken = lastAuthResponse && lastAuthResponse?.stateToken;\n\n //Update requestContext with last stateToken, if the context was stateToken and not a fromUri\n if(Util.isV1StateToken(requestContext)) {\n requestContext = stateToken;\n }\n\n this.model = new IDPDiscoveryModel(\n {\n requestContext: requestContext,\n settings: options.settings,\n appState: options.appState,\n },\n { parse: true }\n );\n\n BaseLoginController.apply(this, arguments);\n\n this.addListeners();\n\n // If social auth is configured, 'socialAuthPositionTop' will determine\n // the order in which the social auth and primary auth are shown on the screen.\n if (options.settings.get('hasConfiguredButtons')) {\n this.add(CustomButtons, {\n prepend: options.settings.get('socialAuthPositionTop'),\n options: {\n // To trigger an afterError event, we require the current controller\n currentController: this,\n },\n });\n }\n\n this.addFooter(options);\n\n this.setUsername();\n },\n\n initialize: function() {\n PrimaryAuthController.prototype.initialize.apply(this);\n\n this.listenTo(this.model, 'goToPrimaryAuth', function() {\n this.settings.set('username', this.model.get('username'));\n const self = this;\n if (this.settings.get('features.deviceFingerprinting')) {\n DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el)\n .then(function(fingerprint) {\n self.options.appState.set('deviceFingerprint', fingerprint);\n self.options.appState.set('username', self.model.get('username'));\n })\n .catch(function() {\n // Keep going even if device fingerprint fails\n self.options.appState.set('username', self.model.get('username'));\n })\n .finally(function() {\n self.doPrimaryAuth();\n });\n } else {\n self.doPrimaryAuth();\n }\n });\n },\n\n doPrimaryAuth : function() {\n if (this.settings.get('features.passwordlessAuth')) {\n const primaryAuthModel = new PrimaryAuthModel(\n {\n username: this.model.get('username'),\n multiOptionalFactorEnroll: this.options.settings.get('features.multiOptionalFactorEnroll'),\n settings: this.options.settings,\n appState: this.options.appState,\n },\n { parse: true }\n );\n\n // Events to set the transaction attributes on the app state.\n this.listenTo(primaryAuthModel, 'error', function(src, errObj) {\n this.toggleButtonState(false);\n this.model.trigger('error', this.model, errObj);\n });\n this.addModelListeners(primaryAuthModel);\n // Make the primary auth request\n primaryAuthModel.save();\n } else {\n this.options.appState.set('disableUsername', true);\n this.options.appState.trigger('navigate', 'signin');\n }\n },\n\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport Footer from 'views/enroll-factors/ManualSetupPushFooter';\nimport PhoneTextBox from 'views/enroll-factors/PhoneTextBox';\n\nfunction goToFactorActivation(view, step) {\n const url = RouterUtil.createActivateFactorUrl(\n view.options.appState.get('activatedFactorProvider'),\n view.options.appState.get('activatedFactorType'),\n step\n );\n\n view.options.appState.trigger('navigate', url);\n}\n\nfunction setStateValues(view) {\n let userPhoneNumber;\n let userCountryCode;\n\n if (view.model.get('activationType') === 'SMS') {\n userCountryCode = view.model.get('countryCode');\n userPhoneNumber = view.model.get('phoneNumber');\n }\n view.options.appState.set({\n factorActivationType: view.model.get('activationType'),\n userCountryCode: userCountryCode,\n userPhoneNumber: userPhoneNumber,\n });\n}\n\nfunction enrollFactor(view, factorType) {\n return view.model.doTransaction(function(transaction) {\n return transaction\n .prev()\n .then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: factorType,\n provider: 'OKTA',\n });\n\n return factor.enroll();\n })\n .then(function(trans) {\n let textActivationLinkUrl;\n let emailActivationLinkUrl;\n let sharedSecret;\n const res = trans.data;\n\n if (\n res &&\n res._embedded &&\n res._embedded.factor &&\n res._embedded.factor._embedded &&\n res._embedded.factor._embedded.activation\n ) {\n const factor = res._embedded.factor;\n\n // Shared secret\n sharedSecret = factor._embedded.activation.sharedSecret;\n\n if (factor._embedded.activation._links && factor._embedded.activation._links.send) {\n const activationSendLinks = factor._embedded.activation._links.send;\n\n const smsItem = _.findWhere(activationSendLinks, { name: 'sms' });\n\n // SMS activation url\n\n textActivationLinkUrl = smsItem ? smsItem.href : null;\n\n // Email activation url\n\n const emailItem = _.findWhere(activationSendLinks, { name: 'email' });\n\n emailActivationLinkUrl = emailItem ? emailItem.href : null;\n }\n }\n\n view.model.set({\n SMS: textActivationLinkUrl,\n EMAIL: emailActivationLinkUrl,\n sharedSecret: sharedSecret,\n });\n\n return trans;\n });\n });\n}\n\nexport default FormController.extend({\n className: 'enroll-manual-push',\n Model: function() {\n return {\n local: {\n activationType: ['string', true, this.options.appState.get('factorActivationType') || 'SMS'],\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n phoneNumber: 'string',\n SMS: ['string', false, this.options.appState.get('textActivationLinkUrl')],\n EMAIL: ['string', false, this.options.appState.get('emailActivationLinkUrl')],\n sharedSecret: ['string', false, this.options.appState.get('sharedSecret')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return countryCallingCode + phoneNumber;\n },\n },\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.cannotScanBarcode', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'step-manual-setup' },\n\n formChildren: function() {\n const instructions = this.settings.get('brandName')\n ? loc('enroll.totp.sharedSecretInstructions.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.totp.sharedSecretInstructions.generic', 'login');\n const children = [\n FormType.Input({\n name: 'activationType',\n label:loc('mfa.setupOptions', 'login'),\n type: 'select',\n wide: true,\n options: {\n SMS: loc('enroll.totp.sendSms', 'login'),\n EMAIL: loc('enroll.totp.sendEmail', 'login'),\n MANUAL: loc('enroll.totp.setupManually', 'login'),\n },\n }),\n FormType.Input({\n label:loc('mfa.country', 'login'),\n name: 'countryCode',\n type: 'select',\n wide: true,\n options: CountryUtil.getCountries(),\n showWhen: { activationType: 'SMS' },\n }),\n FormType.Input({\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-sms-phone',\n name: 'phoneNumber',\n input: PhoneTextBox,\n type: 'text',\n showWhen: { activationType: 'SMS' },\n }),\n FormType.View({\n View: View.extend({\n className: 'secret-key-instructions',\n attributes: { 'data-se': 'secret-key-instructions'},\n template: hbs`\n \n \n {{instructions}}\n
\n {{sharedSecretKey}}
\n \n `,\n initialize: function(){\n this.listenTo(this.model, 'change:sharedSecret', this.render);\n },\n getTemplateData: function() {\n return {\n instructions: instructions,\n sharedSecretKey: this.model.get('sharedSecret')\n };\n },\n }),\n showWhen: { activationType: 'MANUAL' },\n }),\n FormType.View({\n View: View.extend({\n template: hbs(''),\n }),\n showWhen: { activationType: 'MANUAL' },\n }),\n FormType.Button(\n {\n title: loc('oform.next', 'login'),\n className: 'button button-primary button-wide button-next',\n attributes: { 'data-se': 'next-button' },\n click: () => {\n setStateValues(this);\n goToFactorActivation(this, 'passcode');\n },\n },\n '[data-type=\"next-button-wrap\"]'\n ),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.send', 'login'),\n showWhen: {\n activationType: function(val) {\n return val === 'SMS' || val === 'EMAIL';\n },\n },\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.setInitialModel();\n // Move this logic to a model when AuthClient supports sending email and sms\n this.listenTo(this.form, 'save', function() {\n const self = this;\n\n this.model.doTransaction(function(transaction) {\n const activationType = this.get('activationType').toLowerCase();\n const opts = {};\n\n if (activationType === 'sms') {\n opts.profile = { phoneNumber: this.get('fullPhoneNumber') };\n }\n\n return transaction.factor.activation.send(activationType, opts).then(function(trans) {\n setStateValues(self);\n // Note: Need to defer because OktaAuth calls our router success\n // handler on the next tick - if we immediately called, appState would\n // still be populated with the last response\n _.defer(function() {\n goToFactorActivation(self, 'sent');\n });\n return trans;\n });\n });\n });\n\n this.listenTo(this.model, 'change:activationType', function(model, value) {\n this.form.clearErrors();\n if (value === 'MANUAL' && this.options.appState.get('activatedFactorType') !== 'token:software:totp') {\n enrollFactor(this, 'token:software:totp');\n } else if (this.options.appState.get('activatedFactorType') !== 'push') {\n enrollFactor(this, 'push');\n }\n });\n },\n\n setInitialModel: function() {\n if (this.options.appState.get('factorActivationType') === 'SMS') {\n this.model.set({\n countryCode: this.options.appState.get('userCountryCode') || 'US',\n phoneNumber: this.options.appState.get('userPhoneNumber'),\n });\n }\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate') || this.options.appState.get('isMfaEnroll')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport ManualSetupFooter from 'views/enroll-factors/ManualSetupFooter';\nexport default FormController.extend({\n className: 'enroll-manual-totp',\n Model: function() {\n return {\n local: {\n sharedSecret: ['string', false, this.options.appState.get('sharedSecret')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.cannotScanBarcode', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'step-manual-setup' },\n\n formChildren: function() {\n const instructions = this.settings.get('brandName')\n ? loc('enroll.totp.manualSetupInstructions.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.totp.manualSetupInstructions.generic', 'login');\n\n return [\n FormType.View({\n View: View.extend({\n className: 'secret-key-instructions',\n attributes: { 'data-se': 'secret-key-instructions'},\n template: hbs`\n \n \n {{instructions}}\n
\n {{sharedSecretKey}}
\n \n `,\n initialize: function(){\n this.listenTo(this.model, 'change:sharedSecret', this.render);\n },\n getTemplateData: function() {\n return {\n instructions: instructions,\n sharedSecretKey: this.model.get('sharedSecret')\n };\n },\n })\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.next', 'login'),\n }),\n ];\n },\n },\n\n Footer: ManualSetupFooter,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'activate'\n );\n\n this.options.appState.trigger('navigate', url);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 21] max-statements: [2, 25] max-params: 0 */\nimport { loc, internal } from 'okta';\nimport BaseLoginController from 'util/BaseLoginController';\nimport EmailMagicLinkForm from 'views/factor-verify/EmailMagicLinkForm';\nimport InlineTOTPForm from 'views/mfa-verify/InlineTOTPForm';\nimport PassCodeForm from 'views/mfa-verify/PassCodeForm';\nimport PasswordForm from 'views/mfa-verify/PasswordForm';\nimport PushForm from 'views/mfa-verify/PushForm';\nimport SecurityQuestionForm from 'views/mfa-verify/SecurityQuestionForm';\nimport SendEmailAndVerifyCodeForm from 'views/mfa-verify/SendEmailAndVerifyCodeForm';\nimport TOTPForm from 'views/mfa-verify/TOTPForm';\nimport YubikeyForm from 'views/mfa-verify/YubikeyForm';\nimport FooterMFA from 'views/shared/FooterMFA';\nlet { CheckBox } = internal.views.forms.inputs;\nexport default BaseLoginController.extend({\n className: 'mfa-verify',\n\n initialize: function(options) {\n const factorType = options.factorType;\n let View;\n\n switch (factorType) {\n case 'question':\n View = SecurityQuestionForm;\n break;\n case 'email':\n if (this.options.appState.get('isIdxStateToken')) {\n View = EmailMagicLinkForm;\n } else {\n View = SendEmailAndVerifyCodeForm;\n }\n break;\n case 'sms':\n case 'call':\n View = PassCodeForm;\n break;\n case 'token':\n case 'token:software:totp':\n case 'token:hotp':\n View = TOTPForm;\n break;\n case 'token:hardware':\n View = YubikeyForm;\n break;\n case 'push':\n View = PushForm;\n break;\n case 'password':\n View = PasswordForm;\n break;\n default:\n throw new Error('Unrecognized factor type');\n }\n\n this.model = this.findModel(factorType, options);\n if (!this.model) {\n // TODO: recover from this more gracefully - probably to redirect\n // to default factor\n throw new Error('Unrecognized factor/provider');\n }\n\n this.addListeners();\n this.add(new View(this.toJSON()));\n\n // If Okta Verify Push and Okta Verify totp are both enabled,\n // then we show Push first, and totp is the \"backup\" factor,\n // which is rendered in an additional InlineTOTPForm\n if (factorType === 'push' && this.model.get('isOktaFactor')) {\n if (this.model.get('backupFactor')) {\n this.inlineTotpForm = this.add(InlineTOTPForm, {\n options: { model: this.model.get('backupFactor') },\n }).last();\n }\n\n if (this.settings.get('features.autoPush')) {\n this.autoPushCheckBox = this.add(CheckBox, {\n options: {\n model: this.model,\n name: 'autoPush',\n placeholder: loc('autoPush', 'login'),\n label: false,\n 'label-top': false,\n className: 'margin-btm-0',\n },\n }).last();\n }\n\n // Remember Device checkbox resides outside of the Push and TOTP forms.\n if (this.options.appState.get('allowRememberDevice')) {\n this.rememberDeviceCheckbox = this.add(CheckBox, {\n options: {\n model: this.model,\n name: 'rememberDevice',\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n label: false,\n 'label-top': true,\n className: 'margin-btm-0',\n },\n }).last();\n }\n // Set rememberDevice on the backup factor (totp) if available\n if (this.model.get('backupFactor')) {\n this.listenTo(this.model, 'change:rememberDevice', function(model, rememberDevice) {\n model.get('backupFactor').set('rememberDevice', rememberDevice);\n });\n }\n }\n\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', function(\n state,\n isWaitingForNumberChallenge\n ) {\n if (isWaitingForNumberChallenge || this.options.appState.get('lastAuthResponse').status === 'SUCCESS') {\n this.autoPushCheckBox && this.autoPushCheckBox.$el.hide();\n this.rememberDeviceCheckbox && this.rememberDeviceCheckbox.$el.hide();\n this.inlineTotpForm && this.inlineTotpForm.$el.hide();\n } else {\n this.autoPushCheckBox && this.autoPushCheckBox.$el.show();\n this.rememberDeviceCheckbox && this.rememberDeviceCheckbox.$el.show();\n this.inlineTotpForm && this.inlineTotpForm.$el.show();\n }\n });\n\n this.add(new FooterMFA(this.toJSON()));\n },\n\n findModel: function(factorType, options) {\n const factors = options.appState.get('factors');\n const provider = options.provider;\n const factorIndex = options.factorIndex;\n\n if (!provider) {\n return factors.findWhere({ factorType: factorType, isFactorTypeVerification: true });\n } else if (factors.hasMultipleFactorsOfSameType(factorType) && factorIndex) {\n return factors.getFactorByTypeAndIndex(factorType, factorIndex);\n } else {\n return factors.findWhere({ provider: provider, factorType: factorType });\n }\n },\n\n trapAuthResponse: function() {\n if (\n (this.options.appState.get('isMfaRequired') && this.options.appState.get('trapMfaRequiredResponse')) ||\n this.options.appState.get('isMfaChallenge')\n ) {\n this.options.appState.set('trapMfaRequiredResponse', false);\n return true;\n }\n return false;\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport Footer from 'views/expired-password/Footer';\nimport PasswordRequirements from 'views/shared/PasswordRequirements';\nimport TextBox from 'views/shared/TextBox';\n\nexport default FormController.extend({\n className: 'password-expired',\n Model: {\n props: {\n oldPassword: ['string', true],\n newPassword: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validatePasswordMatch(this);\n },\n save: function() {\n this.trigger('save');\n return this.doTransaction(function(transaction) {\n return transaction.changePassword({\n oldPassword: this.get('oldPassword'),\n newPassword: this.get('newPassword'),\n });\n });\n },\n },\n Form: {\n save: _.partial(loc, 'password.expired.submit', 'login'),\n title: function() {\n const expiringSoon = this.options.appState.get('isPwdExpiringSoon');\n const numDays = this.options.appState.get('passwordExpireDays');\n\n if (expiringSoon && numDays > 0) {\n return loc('password.expiring.title', 'login', [numDays]);\n } else if (expiringSoon && numDays === 0) {\n return loc('password.expiring.today', 'login');\n } else if (expiringSoon) {\n return loc('password.expiring.soon', 'login');\n } else {\n return this.settings.get('brandName')\n ? loc('password.expired.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expired.title.generic', 'login');\n }\n },\n subtitle: function() {\n if (this.options.appState.get('isPwdExpiringSoon')) {\n return this.settings.get('brandName')\n ? loc('password.expiring.subtitle.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expiring.subtitle.generic', 'login');\n }\n\n const policy = this.options.appState.get('policy');\n\n if (!policy || this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n return;\n }\n\n return FactorUtil.getPasswordComplexityDescription(policy);\n },\n parseErrorMessage: function(responseJSON) {\n const policy = this.options.appState.get('policy');\n\n if (!!policy && this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n /*\n - This is a specific case where don't want to repeat the requirements again in the error message, since this\n is already shown in the description. The description as bullet-points itself should give an indication\n of the requirements.\n - We cannot check for error code this in this case, as the error code is shared between\n requirements not met message, common password message, etc. So error summary is the only differentiating\n factor. Replace the password requirements string with empty string in this case.\n */\n responseJSON = FactorUtil.removeRequirementsFromError(responseJSON, policy);\n }\n return responseJSON;\n },\n formChildren: function() {\n let children = [];\n\n if (this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n children.push(\n FormType.View({\n View: new PasswordRequirements({ policy: this.options.appState.get('policy') }),\n })\n );\n }\n\n children = children.concat([\n FormType.Input({\n 'label-top': true,\n label: loc('password.oldPassword.placeholder', 'login'),\n explain: Util.createInputExplain('password.oldPassword.tooltip', 'password.oldPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'oldPassword',\n input: TextBox,\n type: 'password',\n }),\n FormType.Divider(),\n FormType.Input({\n className: 'margin-btm-5',\n 'label-top': true,\n label: loc('password.newPassword.placeholder', 'login'),\n explain: Util.createInputExplain('password.newPassword.tooltip', 'password.newPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'newPassword',\n input: TextBox,\n type: 'password',\n }),\n FormType.Input({\n 'label-top': true,\n label: loc('password.confirmPassword.placeholder', 'login'),\n explain: Util.createInputExplain(\n 'password.confirmPassword.tooltip',\n 'password.confirmPassword.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n }),\n ]);\n\n return children;\n },\n },\n Footer: Footer,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const creds = {\n username: this.options.appState.get('userEmail'),\n password: this.model.get('newPassword'),\n };\n\n this.settings.processCreds(creds).then(_.bind(this.model.save, this.model));\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport PasswordRequirements from 'views/shared/PasswordRequirements';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'password-reset',\n Model: {\n props: {\n newPassword: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validatePasswordMatch(this);\n },\n save: function() {\n this.trigger('save');\n const self = this;\n\n return this.doTransaction(function(transaction) {\n return transaction.resetPassword({\n newPassword: self.get('newPassword'),\n });\n });\n },\n },\n Form: {\n save: _.partial(loc, 'password.reset', 'login'),\n title: function() {\n return this.settings.get('brandName')\n ? loc('password.reset.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.reset.title.generic', 'login');\n },\n subtitle: function() {\n const policy = this.options.appState.get('policy');\n\n if (!policy || this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n return;\n }\n\n return FactorUtil.getPasswordComplexityDescription(policy);\n },\n parseErrorMessage: function(responseJSON) {\n const policy = this.options.appState.get('policy');\n\n if (!!policy && this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n /*\n - This is a specific case where don't want to repeat the requirements again in the error message, since this\n is already shown in the description. The description as bullet-points itself should give an indication\n of the requirements.\n - We cannot check for error code this in this case, as the error code is shared between\n requirements not met message, common password message, etc. So error summary is the only differentiating\n factor. Replace the password requirements string with empty string in this case.\n */\n responseJSON = FactorUtil.removeRequirementsFromError(responseJSON, policy);\n }\n return responseJSON;\n },\n formChildren: function() {\n let children = [];\n\n if (this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n children.push(\n FormType.View({\n View: new PasswordRequirements({ policy: this.options.appState.get('policy') }),\n })\n );\n }\n\n children = children.concat([\n FormType.Input({\n className: 'margin-btm-5',\n label: loc('password.newPassword.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain('password.newPassword.tooltip', 'password.newPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'newPassword',\n input: TextBox,\n type: 'password',\n autoComplete: 'new-password',\n }),\n FormType.Input({\n label: loc('password.confirmPassword.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'password.confirmPassword.tooltip',\n 'password.confirmPassword.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n autoComplete: 'new-password',\n }),\n ]);\n return children;\n },\n },\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const creds = {\n username: this.options.appState.get('userEmail'),\n password: this.model.get('newPassword'),\n };\n\n this.settings.processCreds(creds).then(_.bind(this.model.save, this.model));\n });\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'poll',\n Model: {\n save: function() {\n this.trigger('cancelRequest');\n return this.appState\n .get('transaction')\n .cancel()\n .then(() => {\n this.options.appState.trigger('navigate', '');\n })\n .catch(() => {\n this._stopCountDown();\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: function() {\n return this.title;\n },\n className: 'poll-controller',\n noCancelButton: true,\n save: loc('oform.cancel', 'login'),\n modelEvents: {\n cancelRequest: '_stopCountDown',\n },\n formChildren: [\n FormType.View({\n View: '\\\n \\\n ',\n }),\n ],\n _checkStatus: function() {\n // start polling request\n this.transactionObject\n .poll()\n .then(resp => {\n if (resp.data && resp.status !== 'POLL') {\n this.options.appState.set('transaction', resp);\n return;\n }\n this.$('.okta-waiting-spinner').hide();\n let factorPollingIntervalSeconds = Math.ceil(resp.transaction.profile.refresh / 1000);\n this._startCountDown(factorPollingIntervalSeconds);\n })\n .catch(() => {\n this._stopCountDown();\n });\n },\n\n _startCountDown: function(factorPollingIntervalSeconds) {\n // start one second countdown for next poll request\n this.countDown = setInterval(() => {\n // update title after every second and check if countdown == 1 to poll again\n this._updateTitle(factorPollingIntervalSeconds);\n if (factorPollingIntervalSeconds === 0) {\n /* when countdown hits 0\n - stop current poll\n - show spinner\n - check status\n */\n this._stopCountDown();\n this.$('.okta-waiting-spinner').show();\n // start after a small delay so that the spinner does not get hidden too soon\n this.checkStatusTimeout = setTimeout(() => {\n this._checkStatus();\n }, 200);\n } else {\n // reduce countdown after every second\n factorPollingIntervalSeconds = factorPollingIntervalSeconds - 1;\n }\n }, 1000);\n },\n\n _updateTitle: function(factorPollingIntervalSeconds) {\n this.title = loc('polling.title', 'login', [factorPollingIntervalSeconds]);\n this.$el.find('.okta-form-title').text(this.title);\n },\n\n _stopCountDown: function() {\n // clear countdown setInterval\n if (this.countDown) {\n clearInterval(this.countDown);\n }\n // clear checkstatus setTimeout\n if (this.checkStatusTimeout) {\n clearInterval(this.checkStatusTimeout);\n }\n },\n\n initialize: function(options) {\n this.transactionObject = options.appState.get('transaction');\n this.factorPollingIntervalSeconds = Math.ceil(this.transactionObject.transaction.profile.refresh / 1000);\n this._updateTitle(this.factorPollingIntervalSeconds);\n this._startCountDown(this.factorPollingIntervalSeconds);\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n remove: function() {\n this.form._stopCountDown();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { $ } from 'okta';\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport BaseLoginController from 'util/BaseLoginController';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport CustomButtons from 'views/primary-auth/CustomButtons';\nimport PrimaryAuthForm from 'views/primary-auth/PrimaryAuthForm';\nimport Footer from 'views/shared/Footer';\nimport FooterRegistration from 'views/shared/FooterRegistration';\nexport default BaseLoginController.extend({\n className: 'primary-auth',\n\n state: { enabled: true },\n\n View: PrimaryAuthForm,\n\n constructor: function(options) {\n options.appState.unset('username');\n\n this.model = new PrimaryAuthModel(\n {\n multiOptionalFactorEnroll: options.settings.get('features.multiOptionalFactorEnroll'),\n settings: options.settings,\n appState: options.appState,\n },\n { parse: true }\n );\n\n BaseLoginController.apply(this, arguments);\n\n this.addListeners();\n\n // If social auth is configured, 'socialAuthPositionTop' will determine\n // the order in which the social auth and primary auth are shown on the screen.\n if (options.settings.get('hasConfiguredButtons')) {\n this.add(CustomButtons, {\n prepend: options.settings.get('socialAuthPositionTop'),\n options: {\n // To trigger an afterError event, we require the current controller\n currentController: this,\n },\n });\n }\n\n this.addFooter(options);\n\n this.setUsername();\n },\n\n addFooter: function(options) {\n this.add(new Footer(this.toJSON({ appState: options.appState })));\n\n if (options.settings.get('features.registration') || options.appState.get('isIdxStateToken')) {\n this.add(\n new FooterRegistration({\n settings: this.settings,\n appState: options.appState,\n })\n );\n }\n },\n\n setUsername: function() {\n const username = this.model.get('username');\n\n if (username) {\n this.options.appState.set('username', username);\n }\n },\n\n events: {\n 'focusout input[name=username]': function() {\n if (this.shouldComputeDeviceFingerprint() && this.model.get('username')) {\n const self = this;\n\n this.options.appState.trigger('loading', true);\n DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el)\n .then(function(fingerprint) {\n self.options.appState.set('deviceFingerprint', fingerprint);\n self.options.appState.set('username', self.model.get('username'));\n })\n .catch(function() {\n // Keep going even if device fingerprint fails\n self.options.appState.set('username', self.model.get('username'));\n })\n .finally(function() {\n self.options.appState.trigger('loading', false);\n });\n } else {\n this.options.appState.set('username', this.model.get('username'));\n }\n },\n 'focusin input': function(e) {\n $(e.target.parentElement).addClass('focused-input');\n },\n 'focusout input': function(e) {\n $(e.target.parentElement).removeClass('focused-input');\n },\n },\n\n // This model and the AppState both have a username property.\n // The controller updates the AppState's username when the user is\n // done editing (on blur) or deletes the username (see below).\n initialize: function() {\n this.options.appState.unset('deviceFingerprint');\n this.listenTo(this.model, 'change:username', function(model, value) {\n if (!value) {\n // reset AppState to an undefined user.\n this.options.appState.set('username', '');\n }\n });\n this.listenTo(this.model, 'save', function() {\n this.state.set('enabled', false);\n });\n this.listenTo(this.model, 'error', function() {\n this.state.set('enabled', true);\n });\n this.listenTo(this.state, 'togglePrimaryAuthButton', function(buttonState) {\n this.toggleButtonState(buttonState);\n });\n },\n\n shouldComputeDeviceFingerprint: function() {\n return (\n this.settings.get('features.securityImage') &&\n this.settings.get('features.deviceFingerprinting') &&\n this.settings.get('features.useDeviceFingerprintForSecurityImage')\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'password-reset-email-sent',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'password.forgot.emailSent.title', 'login'),\n subtitle: function() {\n const username = this.options.appState.get('username');\n\n return loc('password.forgot.emailSent.desc', 'login', [username]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'pwd-reset-email-sent' },\n formChildren: function() {\n let children = [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{alert}}\\\n '\n ),\n getTemplateData: function() {\n return { alert: loc('password.forgot.emailSent.title', 'login') };\n },\n }),\n }),\n ];\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n children.push(\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n const self = this;\n\n return this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(function() {\n self.state.set('navigateDir', Enums.DIRECTION_BACK);\n self.options.appState.trigger('navigate', '');\n });\n },\n })\n );\n }\n\n return children;\n },\n },\n\n initialize: function(options) {\n this.settings.callGlobalSuccess(Enums.FORGOT_PASSWORD_EMAIL_SENT, {\n username: options.appState.get('username'),\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'recovery-challenge',\n Model: {\n props: {\n passCode: ['string', true],\n },\n local: {\n ableToResend: 'boolean',\n },\n resendCode: function() {\n // Note: This does not require a trapAuthResponse because Backbone's\n // router will not navigate if the url path is the same\n this.limitResending();\n return this.doTransaction(function(transaction) {\n return transaction.resend();\n });\n },\n limitResending: function() {\n this.set({ ableToResend: false });\n _.delay(_.bind(this.set, this), Enums.API_RATE_LIMIT, { ableToResend: true });\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.verify({\n passCode: this.get('passCode'),\n });\n });\n },\n },\n Form: {\n autoSave: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n title: function() {\n if (this.options.appState.get('factorType') === Enums.RECOVERY_FACTOR_TYPE_CALL) {\n return loc('recoveryChallenge.call.title', 'login');\n } else {\n return loc('recoveryChallenge.sms.title', 'login');\n }\n },\n className: 'recovery-challenge',\n initialize: function() {\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('mfa.resendCode', 'login'),\n attributes: { 'data-se': 'resend-button' },\n className: 'button sms-request-button margin-top-30',\n click: function() {\n this.model.resendCode();\n },\n initialize: function() {\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.options.title = loc('mfa.resendCode', 'login');\n this.enable();\n this.render();\n } else {\n this.options.title = loc('mfa.sent', 'login');\n this.disable();\n this.render();\n }\n });\n },\n }),\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-sms-phone',\n name: 'passCode',\n input: TextBox,\n type: 'text',\n }),\n ];\n },\n },\n\n events: {\n 'click .send-email-link': function(e) {\n e.preventDefault();\n const settings = this.model.settings;\n const username = this.options.appState.get('username');\n const recoveryType = this.options.appState.get('recoveryType');\n\n this.model.startTransaction(function(authClient) {\n // The user could have landed here via the Forgot Password/Unlock Account flow\n switch (recoveryType) {\n case Enums.RECOVERY_TYPE_PASSWORD:\n return authClient.forgotPassword({\n username: settings.transformUsername(username, Enums.FORGOT_PASSWORD),\n factorType: Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n });\n case Enums.RECOVERY_TYPE_UNLOCK:\n return authClient.unlockAccount({\n username: settings.transformUsername(username, Enums.UNLOCK_ACCOUNT),\n factorType: Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n });\n default:\n return;\n }\n });\n },\n },\n\n initialize: function() {\n const recoveryType = this.options.appState.get('recoveryType');\n let sendEmailLink;\n\n switch (recoveryType) {\n case Enums.RECOVERY_TYPE_PASSWORD:\n sendEmailLink = hbs`{{i18n code=\"password.forgot.code.notReceived\" bundle=\"login\"}}`;\n break;\n case Enums.RECOVERY_TYPE_UNLOCK:\n sendEmailLink = hbs`{{i18n code=\"account.unlock.code.notReceived\" bundle=\"login\"}}`;\n break;\n default:\n break;\n }\n\n if (sendEmailLink && this.settings.get('features.emailRecovery')) {\n this.add(\n View.extend({\n className: 'link send-email-link',\n tagName: 'a',\n attributes: {\n href: '#',\n 'data-se': 'send-email-link',\n },\n template: sendEmailLink,\n })\n );\n }\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n\n postRender: function() {\n this.model.limitResending();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'recovery-loading',\n\n Model: {},\n Form: {\n noButtonBar: true,\n },\n\n initialize: function(options) {\n const self = this;\n\n return this.model\n .startTransaction(function(authClient) {\n return authClient.verifyRecoveryToken({\n recoveryToken: options.token,\n });\n })\n .catch(function() {\n self.options.appState.trigger('loading', false);\n self.options.appState.trigger('removeLoading');\n });\n },\n\n preRender: function() {\n this.options.appState.trigger('loading', true);\n },\n\n trapAuthResponse: function() {\n this.options.appState.trigger('loading', false);\n return false;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'recovery-question',\n Model: {\n props: {\n answer: ['string', true],\n showAnswer: 'boolean',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.answer({ answer: this.get('answer') });\n });\n },\n },\n Form: {\n autoSave: true,\n save: function() {\n switch (this.options.appState.get('recoveryType')) {\n case 'PASSWORD':\n return loc('password.forgot.question.submit', 'login');\n case 'UNLOCK':\n return loc('account.unlock.question.submit', 'login');\n default:\n return loc('mfa.challenge.verify', 'login');\n }\n },\n title: function() {\n switch (this.options.appState.get('recoveryType')) {\n case 'PASSWORD':\n return loc('password.forgot.question.title', 'login');\n case 'UNLOCK':\n return loc('account.unlock.question.title', 'login');\n default:\n return '';\n }\n },\n formChildren: function() {\n return [\n FormType.Input({\n label: this.options.appState.get('recoveryQuestion'),\n placeholder: loc('mfa.challenge.answer.placeholder', 'login'),\n name: 'answer',\n input: TextBox,\n type: 'password',\n initialize: function() {\n this.listenTo(this.model, 'change:showAnswer', function() {\n const type = this.model.get('showAnswer') ? 'text' : 'password';\n\n this.getInputs()[0].changeType(type);\n });\n },\n }),\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: loc('mfa.challenge.answer.showAnswer', 'login'),\n className: 'recovery-question-show margin-btm-0',\n name: 'showAnswer',\n type: 'checkbox',\n }),\n ];\n },\n },\n initialize: function() {\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n});\n","/* eslint-disable max-depth */\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'refresh-auth-state',\n\n Model: {},\n\n Form: {\n noButtonBar: true,\n },\n\n preRender: function() {\n const appState = this.options.appState;\n const token = this.options.token;\n\n this.model.startTransaction(function(authClient) {\n appState.trigger('loading', true);\n if (token) {\n return authClient.tx.introspect({\n stateToken: token,\n });\n }\n\n // get stateToken from cookie\n // currently only applies to old pipeline\n if (authClient.tx.exists()) {\n return authClient.tx.resume();\n }\n\n appState.trigger('navigate', '');\n });\n },\n\n remove: function() {\n this.options.appState.trigger('loading', false);\n return FormController.prototype.remove.apply(this, arguments);\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n events: {\n 'click .back-btn': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n className: 'registration-complete',\n Model: function() {},\n initialize: function() {\n this.settings.callGlobalSuccess(Enums.ACTIVATION_EMAIL_SENT, {\n username: this.options.appState.get('username'),\n });\n },\n Form: {\n noButtonBar: true,\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n \\\n {{title}}
\\\n {{desc}}\\\n \\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n getTemplateData: function() {\n return {\n desc: loc('registration.complete.confirm.text', 'login'),\n title: loc('registration.complete.title', 'login'),\n };\n },\n }),\n }),\n ];\n },\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { _, Backbone, Model, loc, Form, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport LoginModel from 'models/LoginModel';\nimport RegistrationSchema from 'models/RegistrationSchema';\nimport Q from 'q';\nimport BaseLoginController from 'util/BaseLoginController';\nimport Enums from 'util/Enums';\nimport Errors from 'util/Errors';\nimport RegistrationFormFactory from 'util/RegistrationFormFactory';\nimport Util from 'util/Util';\nimport SubSchema from 'views/registration/SubSchema';\nconst RegistrationControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default BaseLoginController.extend({\n className: 'registration',\n initialize: function() {\n const RegistrationControllerSchema = RegistrationSchema.extend({\n settings: this.options.settings,\n url: this.options.settings.get('baseUrl') + '/api/v1/registration/form',\n });\n // setup schema\n\n const schema = new RegistrationControllerSchema();\n\n this.state.set('schema', schema);\n },\n getRegistrationApiUrl: function() {\n const defaultPolicyId = this.settings.get('defaultPolicyId');\n // default policyId\n\n const orgPolicyId = this.options.settings.get('policyId');\n // org policyId\n\n const apiUrl = defaultPolicyId\n ? this.getRegistrationPolicyApi(defaultPolicyId)\n : this.getRegistrationPolicyApi(orgPolicyId);\n\n return apiUrl;\n },\n getRegistrationPolicyApi: function(policyId) {\n return this.options.settings.get('baseUrl') + '/api/v1/registration/' + policyId;\n },\n doPostSubmit: function() {\n if (this.model.get('activationToken')) {\n const self = this;\n // register via activation token\n\n self.settings.callGlobalSuccess(Enums.REGISTRATION_COMPLETE, {\n activationToken: this.model.get('activationToken'),\n });\n\n const loginModel = new LoginModel({\n settings: self.model.appState.settings,\n });\n\n loginModel.loginWithActivationToken(this.model.get('activationToken')).then(function(transaction) {\n self.model.trigger('setTransaction', transaction);\n });\n } else {\n // register via activation email\n this.model.appState.set('username', this.model.get('email'));\n this.model.appState.trigger('navigate', 'signin/register-complete');\n }\n },\n registerUser: function(postData) {\n const self = this;\n\n this.model.attributes = postData;\n // Model.save returns a jqXHR\n Backbone.Model.prototype.save\n .call(this.model)\n .then(function() {\n self.model.trigger('startSaving');\n const activationToken = self.model.get('activationToken');\n const postSubmitData = activationToken ? activationToken : self.model.get('email');\n\n self.settings.postRegistrationSubmit(\n postSubmitData,\n function() {\n self.doPostSubmit();\n },\n function(errors) {\n self.showErrors(errors);\n }\n );\n })\n .fail((err) => {\n const responseJSON = err.responseJSON;\n\n if (responseJSON && responseJSON.errorCauses.length) {\n const { errorCode, errorCauses } = responseJSON;\n const { errorSummary, reason, location } = errorCauses[0];\n\n const isNotUniqueValue =\n errorCode === 'E0000001' &&\n reason === 'UNIQUE_CONSTRAINT';\n\n if (isNotUniqueValue) {\n this.renderIsNotUniqueError(responseJSON);\n }\n\n this.renderLegacyLocationErrorIfNeeded(location, errorSummary);\n\n Util.triggerAfterError(\n this,\n new Errors.RegistrationError(errorSummary)\n );\n }\n });\n },\n\n renderIsNotUniqueError: function(error) {\n const { location } = error.errorCauses[0];\n const errorSummary = loc(\n 'registration.error.userName.notUniqueWithinOrg',\n 'login',\n [location]\n );\n // replace generic error message with more specific one\n // without using backbone events because there was a race condition\n // between clearing and triggering errors\n this.$el.find('.okta-form-infobox-error p').text(errorSummary);\n },\n\n renderLegacyLocationErrorIfNeeded: function(location, errorSummary) {\n // replace generic error message with errorSummary for v1 SIW\n // this makes sure that with legacy location that starts with `data.userProfile`\n // we still see the errorSummary in the error banner instead of only a generic error\n // See example in https://developer.okta.com/docs/reference/registration-hook/#sample-json-payload-of-request\n if (location && /^data\\.userProfile.*/.test(location)) {\n this.$el.find('.okta-form-infobox-error p').text(errorSummary);\n }\n },\n\n createRegistrationModel: function(modelProperties) {\n const self = this;\n const RegistrationControllerModel = Model.extend({\n url: self.getRegistrationApiUrl() + '/register',\n settings: this.settings,\n appState: this.options.appState,\n props: modelProperties,\n local: {\n activationToken: 'string',\n },\n toJSON: function() {\n const data = Model.prototype.toJSON.apply(this, arguments);\n\n return {\n userProfile: data,\n relayState: this.settings.get('relayState'),\n };\n },\n parse: function(resp) {\n this.set('activationToken', resp.activationToken);\n delete resp.activationToken;\n return resp;\n },\n save: function() {\n this.settings.preRegistrationSubmit(\n this.attributes,\n function(postData) {\n self.registerUser(postData);\n },\n function(errors) {\n self.showErrors(errors);\n }\n );\n },\n });\n\n return new RegistrationControllerModel();\n },\n showErrors: function(error, hideRegisterButton) {\n //for parseSchema error hide form and show error at form level\n if (error.callback === 'parseRegistrationSchema' && error.errorCauses) {\n error.errorSummary = _.clone(error.errorCauses[0].errorSummary);\n delete error.errorCauses;\n }\n //show error on form\n this.model.trigger('error', this.model, {\n responseJSON: error,\n });\n\n //throw registration error\n const errMsg = error.callback ? error.callback + ':' + error.errorSummary : error.errorSummary;\n\n Util.triggerAfterError(this, new Errors.RegistrationError(errMsg));\n\n if (hideRegisterButton) {\n this.$el.find('.button-primary').hide();\n }\n },\n fetchInitialData: function() {\n const self = this;\n\n // register parse complete event listener\n self.state.get('schema').on('parseComplete', function(updatedSchema) {\n const modelProperties = updatedSchema.properties.createModelProperties();\n\n self.settings.set('defaultPolicyId', updatedSchema.properties.defaultPolicyId);\n\n // create model\n self.model = self.createRegistrationModel(modelProperties);\n // create form\n const RegistrationControllerForm = Form.extend({\n layout: 'o-form-theme',\n autoSave: true,\n noCancelButton: true,\n title: loc('registration.form.title', 'login'),\n save: loc('registration.form.submit', 'login'),\n modelEvents : { 'invalid' : 'modifyErrors' },\n hasSavingState: true,\n customSavingState: {\n start: 'startSaving',\n stop: 'stopSaving',\n },\n modifyErrors: function(model, errorResp) {\n // overwrite courage errorResp object to show custom error message\n for (let formFieldName in errorResp) {\n if (errorResp[formFieldName] === 'model.validation.field.string.minLength') {\n errorResp[formFieldName] = loc('registration.model.validation.field.string.too.short', 'login', \n [model.props[formFieldName].minLength]\n );\n } else if (errorResp[formFieldName] === 'model.validation.field.string.maxLength') {\n errorResp[formFieldName] = loc('registration.model.validation.field.string.too.long', 'login', \n [model.props[formFieldName].maxLength + 1]\n );\n }\n }\n },\n });\n const form = new RegistrationControllerForm(self.toJSON());\n\n // add form\n self.add(form);\n // add footer\n self.footer = new self.Footer(self.toJSON());\n self.add(self.footer);\n self.addListeners();\n if (updatedSchema.error) {\n self.showErrors(updatedSchema.error, true);\n } else {\n // add fields\n updatedSchema.properties.each(function(schemaProperty) {\n const inputOptions = RegistrationFormFactory.createInputOptions(schemaProperty);\n const subSchemas = schemaProperty.get('subSchemas');\n const name = schemaProperty.get('name');\n\n form.addInput(inputOptions);\n if (name === 'password' && subSchemas) {\n form.add(SubSchema.extend({ id: 'subschemas-' + name, subSchemas: subSchemas }));\n }\n });\n const requiredFieldsLabel = hbs('{{label}}')({\n label: loc('registration.required.fields.label', 'login'),\n });\n\n form.add(requiredFieldsLabel);\n }\n });\n // fetch schema from API, returns a jqXHR. Wrap it in a Q\n return Q(this.state.get('schema').fetch());\n },\n Footer: RegistrationControllerFooter,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport ContactSupport from 'views/shared/ContactSupport';\nimport TextBox from 'views/shared/TextBox';\nconst UnlockAccountControllernoFactorsError = View.extend({\n template: hbs`\n \n \n {{i18n code=\"account.unlock.noFactorsEnabled\" bundle=\"login\"}}
\n \n `,\n});\nconst UnlockAccountControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{#if helpSupportNumber}}\\\n \\\n {{i18n code=\"mfa.noAccessToEmail\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-contact-support': function(e) {\n e.preventDefault();\n this.state.trigger('contactSupport');\n this.$('.js-contact-support').hide();\n },\n },\n getTemplateData: function() {\n return this.settings.pick('helpSupportNumber');\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default FormController.extend({\n className: 'account-unlock',\n Model: {\n props: {\n username: ['string', true],\n factorType: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateUsername(this);\n },\n save: function() {\n const self = this;\n\n return this.startTransaction(function(authClient) {\n return authClient.unlockAccount({\n username: self.settings.transformUsername(self.get('username'), Enums.UNLOCK_ACCOUNT),\n factorType: self.get('factorType'),\n });\n }).catch(function() {\n //need empty fail handler on model to display errors on form\n });\n },\n },\n Form: {\n noButtonBar: true,\n title: _.partial(loc, 'account.unlock.title', 'login'),\n formChildren: function() {\n const smsEnabled = this.settings.get('features.smsRecovery');\n /*eslint complexity: [2, 9] max-statements: [2, 24] */\n\n const callEnabled = this.settings.get('features.callRecovery');\n const emailEnabled = this.settings.get('features.emailRecovery');\n const noFactorsEnabled = !(smsEnabled || callEnabled || emailEnabled);\n const formChildren = [];\n const form = this;\n\n if (noFactorsEnabled) {\n this.add(UnlockAccountControllernoFactorsError, '.o-form-error-container');\n } else {\n formChildren.push(\n FormType.Input({\n label: loc('account.unlock.email.or.username.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'account.unlock.email.or.username.tooltip',\n 'account.unlock.email.or.username.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'account-recovery-username',\n type: 'text',\n inlineValidation: false,\n })\n );\n\n if (smsEnabled || callEnabled) {\n formChildren.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"recovery.mobile.hint\" bundle=\"login\" arguments=\"mobileFactors\"}}\\\n
'\n ),\n getTemplateData: function() {\n let mobileFactors;\n\n if (smsEnabled && callEnabled) {\n mobileFactors = loc('recovery.smsOrCall');\n } else if (callEnabled) {\n mobileFactors = loc('recovery.call');\n } else {\n mobileFactors = loc('recovery.sms');\n }\n return { mobileFactors: mobileFactors };\n },\n }),\n })\n );\n }\n\n if (smsEnabled) {\n this.$el.addClass('forgot-password-sms-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'sms-button',\n 'account.unlock.sendText',\n Enums.RECOVERY_FACTOR_TYPE_SMS,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_SMS);\n }\n if (callEnabled) {\n this.$el.addClass('forgot-password-call-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'call-button',\n 'account.unlock.voiceCall',\n Enums.RECOVERY_FACTOR_TYPE_CALL,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_CALL);\n }\n if (emailEnabled) {\n this.$el.addClass('forgot-password-email-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'email-button',\n 'account.unlock.sendEmail',\n Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_EMAIL);\n }\n }\n\n return formChildren;\n },\n initialize: function() {\n this.listenTo(this, 'save', function() {\n this.options.appState.set('username', this.model.get('username'));\n this.model.save();\n });\n\n this.listenTo(this.state, 'contactSupport', function() {\n this.add(ContactSupport, '.o-form-error-container');\n });\n },\n setDefaultFactorType: function(factorType) {\n if (_.isEmpty(this.model.get('factorType'))) {\n this.model.set('factorType', factorType);\n }\n },\n createRecoveryFactorButton: function(className, labelCode, factorType, form) {\n return FormType.Button({\n attributes: { 'data-se': className },\n className: 'button button-primary button-wide ' + className,\n title: loc(labelCode, 'login'),\n click: function() {\n form.clearErrors();\n if (this.model.isValid()) {\n this.model.set('factorType', factorType);\n form.trigger('save', this.model);\n }\n },\n });\n },\n },\n Footer: UnlockAccountControllerFooter,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'account-unlock-email-sent',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'account.unlock.emailSent.title', 'login'),\n subtitle: function() {\n const username = this.options.appState.get('username');\n\n return loc('account.unlock.emailSent.desc', 'login', [username]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'unlock-email-sent' },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n }),\n ];\n },\n },\n\n initialize: function(options) {\n this.settings.callGlobalSuccess(Enums.UNLOCK_ACCOUNT_EMAIL_SENT, {\n username: options.appState.get('username'),\n });\n },\n});\n","/*!\n * Copyright (c) 2018-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'verify-custom-factor custom-factor-form',\n\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n if (this.settings.get('features.skipIdpFactorVerificationBtn') &&\n !this.appState.get('lastFailedChallengeFactorData')) {\n this.set('provider', 'CUSTOM');\n this.set('factorType', 'claims_provider');\n this.save();\n }\n },\n\n save: function() {\n const rememberDevice = !!this.get('rememberDevice');\n\n return this.manageTransaction((transaction, setTransaction) => {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n const factor = _.findWhere(transaction.factors, {\n provider: this.get('provider'),\n factorType: this.get('factorType'),\n });\n\n return factor\n .verify(data)\n .then(trans => {\n setTransaction(trans);\n const url = this.appState.get('verifyCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n })\n .catch(function(err) {\n throw err;\n });\n });\n },\n },\n\n Form: function() {\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere({\n provider: this.options.provider,\n factorType: this.options.factorType,\n });\n const vendorName = factor.get('vendorName');\n const saveText = loc('mfa.challenge.verify', 'login');\n const lastFailedChallengeFactorData = this.options.appState.get('lastFailedChallengeFactorData');\n let subtitle = loc('verify.customFactor.subtitle', 'login', [vendorName]);\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn') && !lastFailedChallengeFactorData) {\n subtitle = loc('verify.customFactor.subtitle.redirect', 'login', [vendorName]);\n\n this.listenTo(this.model, 'error', () => {\n subtitle = loc('verify.customFactor.subtitle', 'login', [vendorName]);\n this.$('.o-form-explain').text(subtitle);\n });\n }\n return {\n autoSave: true,\n title: vendorName,\n save: saveText,\n subtitle: subtitle,\n attributes: { 'data-se': 'factor-custom' },\n initialize: function() {\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n\n formChildren: function() {\n const result = [];\n const lastFailedChallengeFactorData = this.options.appState.get('lastFailedChallengeFactorData');\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn') && !lastFailedChallengeFactorData) {\n result.push(\n FormType.View({\n View:\n ''\n })\n );\n }\n\n if (lastFailedChallengeFactorData) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: lastFailedChallengeFactorData.errorMessage }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n return result;\n },\n };\n },\n\n postRender() {\n if (this.settings.get('features.skipIdpFactorVerificationBtn') &&\n !this.options.appState.get('lastFailedChallengeFactorData')) {\n this.$('.o-form-button-bar').hide();\n this.$('.okta-waiting-spinner').show();\n }\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaChallenge')) {\n return true;\n }\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n initialize: function() {\n this.model.set('provider', this.options.provider);\n this.model.set('factorType', this.options.factorType);\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn')) {\n this.listenTo(this.model, 'error', () => {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n });\n }\n this.addFooter(FooterMFA);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint camelcase: 0 */\nimport { $, _, loc } from 'okta';\nimport Duo from 'duo';\nimport Q from 'q';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nexport default FormController.extend({\n className: 'mfa-verify-duo duo-form',\n\n Model: {\n props: {\n host: 'string',\n signature: 'string',\n postAction: 'string',\n factorId: 'string',\n stateToken: 'string',\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n },\n\n getInitOptions: function() {\n const rememberDevice = !!this.get('rememberDevice');\n\n return this.doTransaction(function(transaction) {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n const factor = _.findWhere(transaction.factors, {\n provider: 'DUO',\n factorType: 'web',\n });\n\n return factor.verify(data).catch(function(err) {\n // Clean up the cookie on failure.\n throw err;\n });\n }, true /* rethrow errors */);\n },\n\n verify: function(signedResponse) {\n const url = this.get('postAction');\n const factorId = this.get('factorId');\n const self = this;\n let data = {\n id: factorId,\n stateToken: this.get('stateToken'),\n sig_response: signedResponse,\n };\n // Note: We should be doing this in OktaAuth! Fix when it's updated.\n\n const rememberDevice = this.get('rememberDevice');\n // We don't actually use authClient.post() here (unlike all the other cases in the\n // sign-in widget) since the endpoint is wired to accept serialized form post instead\n // of a JSON post ($.post() is different from authClient.post() in that in $.post(),\n // jquery decides the Content-Type instead of it being a JSON type). Enroll/Verify DUO\n // are the only two places where we actually do this.\n // NOTE - If we ever decide to change this, we should test this very carefully.\n\n return Q($.post(url, data))\n .then(function() {\n return self.doTransaction(function(transaction) {\n let data;\n\n if (rememberDevice) {\n data = { rememberDevice: rememberDevice };\n }\n return transaction.poll(data);\n });\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n });\n },\n },\n\n Form: {\n autoSave: true,\n noButtonBar: true,\n title: _.partial(loc, 'factor.duo'),\n attributes: { 'data-se': 'factor-duo' },\n\n postRender: function() {\n this.add('');\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n Duo.init({\n host: this.model.get('host'),\n sig_request: this.model.get('signature'),\n iframe: this.$('iframe').get(0),\n post_action: _.bind(this.model.verify, this.model),\n });\n },\n },\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model.getInitOptions().then(function(trans) {\n const res = trans.data;\n\n if (\n !res._embedded ||\n !res._embedded.factor ||\n !res._embedded.factor._embedded ||\n !res._embedded.factor._embedded.verification\n ) {\n throw new Error('Response does not have duo verification options');\n }\n const verification = res._embedded.factor._embedded.verification;\n\n self.model.set({\n host: verification.host,\n signature: verification.signature,\n postAction: verification._links.complete.href,\n factorId: res._embedded.factor.id,\n stateToken: res.stateToken,\n });\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaChallenge')) {\n return true;\n }\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, $, loc, View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterWithBackLink from 'views/shared/FooterWithBackLink';\nlet { Util } = internal.util;\nexport default FormController.extend({\n className: 'piv-cac-card',\n Model: {\n save: async function() {\n this.trigger('request');\n const self = this;\n const pivConfig = this.settings.get('piv');\n const data = {\n fromURI: this.settings.get('relayState'),\n isCustomDomain: pivConfig.isCustomDomain,\n };\n\n try {\n await this.getCert(pivConfig.certAuthUrl);\n const res = await this.postCert(pivConfig.certAuthUrl, data);\n Util.redirect(res.redirectUrl);\n } catch (err) {\n if (_.isEmpty(err.responseJSON) && !err.responseText) {\n err.responseJSON = {\n errorSummary: loc('piv.cac.error', 'login'),\n };\n }\n self.trigger('error', self, err);\n }\n },\n\n getCert: function(certAuthUrl) {\n return $.get({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n\n postCert: function(certAuthUrl, data) {\n return $.post({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n data: JSON.stringify(data),\n contentType: 'text/plain',\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'piv.cac.title', 'login'),\n className: 'piv-cac-card',\n noCancelButton: true,\n save: _.partial(loc, 'retry', 'login'),\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"piv.cac.card.insert\" bundle=\"login\"}}
\\\n \\\n '\n ),\n }),\n }),\n ],\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n\n postRender: function() {\n _.defer(() => {\n this.model.save();\n });\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterWithBackLink,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport Errors from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nfunction getRegisteredKeysSequence(factors) {\n const keys = [];\n\n _.each(factors, function(factor) {\n keys.push({\n version: factor.profile.version,\n keyHandle: factor.profile.credentialId,\n });\n });\n return keys;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-u2f',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'u2f',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n }\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let registeredKeys;\n let appId;\n let nonce;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n appId = factors[0]['profile']['appId'];\n nonce = transaction.challenge.nonce;\n registeredKeys = getRegisteredKeysSequence(factors);\n } else {\n const factorData = transaction.factor;\n\n appId = factorData.profile.appId;\n nonce = factorData.challenge.nonce;\n registeredKeys = [{ version: FidoUtil.getU2fVersion(), keyHandle: factorData.profile.credentialId }];\n }\n self.trigger('request');\n\n const deferred = Q.defer();\n\n u2f.sign(appId, nonce, registeredKeys, function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n const isOneFactor = self.options.appState.get('factors').length === 1;\n\n deferred.reject(\n new Errors.U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fVerifyErrorMessageByCode(data.errorCode, isOneFactor),\n },\n },\n })\n );\n } else {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor\n .verify({\n clientData: data.clientData,\n signatureData: data.signatureData,\n rememberDevice: rememberDevice,\n })\n .then(deferred.resolve);\n }\n });\n return deferred.promise;\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.u2f', 'login'),\n className: 'verify-u2f-form',\n noCancelButton: true,\n save: _.partial(loc, 'verify.u2f.retry', 'login'),\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"verify.u2f.instructions\" bundle=\"login\"}}
\\\n {{i18n code=\"verify.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n \\\n '\n ),\n }),\n })\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n result.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return result;\n },\n\n postRender: function() {\n _.defer(() => {\n if (FidoUtil.isU2fAvailable()) {\n this.model.save();\n } else {\n this.$('[data-se=\"u2f-waiting\"]').addClass('hide');\n }\n });\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport CryptoUtil from 'util/CryptoUtil';\nimport Errors from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nfunction getAllowCredentials(factors) {\n const allowCredentials = [];\n\n _.each(factors, function(factor) {\n allowCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(factor.profile.credentialId),\n });\n });\n return allowCredentials;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-webauthn',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n this.appState.on('factorSwitched signOut', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'webauthn',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n }\n\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let allowCredentials;\n let challenge;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n challenge = transaction.challenge;\n allowCredentials = getAllowCredentials(factors);\n } else {\n const factorData = transaction.factor;\n\n challenge = factorData.challenge;\n allowCredentials = getAllowCredentials([factorData]);\n }\n self.trigger('request');\n // verify via browser webauthn js\n\n const options = _.extend({}, challenge, {\n allowCredentials: allowCredentials,\n challenge: CryptoUtil.strToBin(challenge.challenge),\n });\n\n // AbortController is not supported in IE11\n // eslint-disable-next-line compat/compat\n self.webauthnAbortController = new AbortController();\n return new Q(\n // navigator.credentials is not supported in IE11\n // eslint-disable-next-line compat/compat\n navigator.credentials.get({\n publicKey: options,\n signal: self.webauthnAbortController.signal,\n })\n )\n .then(function(assertion) {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor.verify({\n clientData: CryptoUtil.binToStr(assertion.response.clientDataJSON),\n authenticatorData: CryptoUtil.binToStr(assertion.response.authenticatorData),\n signatureData: CryptoUtil.binToStr(assertion.response.signature),\n rememberDevice: rememberDevice,\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new Errors.WebauthnAbortError();\n } else {\n throw new Errors.WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.webauthn.biometric', 'login'),\n className: 'verify-webauthn-form',\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n children.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"verify.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n \\\n '\n ),\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n children.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar [type=\"submit\"]')[0].value = loc('verify.u2f.retry', 'login');\n this.$('.o-form-button-bar').show();\n },\n },\n\n postRender: function() {\n _.defer(() => {\n // Trigger browser prompt automatically for other browsers for better UX.\n if (webauthn.isNewApiAvailable() && !BrowserFeatures.isSafari()) {\n this.model.save();\n }\n });\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\nimport Spinner from 'views/shared/Spinner';\nexport default FormController.extend({\n className: 'mfa-verify verify-windows-hello',\n Model: {\n local: {\n __autoTriggered__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n const model = this;\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.verify().then(function(verifyData) {\n const factorData = verifyData.factor;\n\n return webauthn\n .getAssertion(factorData.challenge.nonce, [{ id: factorData.profile.credentialId }])\n .then(function(assertion) {\n return factor.verify({\n authenticatorData: assertion.authenticatorData,\n clientData: assertion.clientData,\n signatureData: assertion.signature,\n });\n })\n .then(function(data) {\n model.trigger('sync');\n model.trigger('signIn');\n return data;\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.windowsHello', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('verify.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'verify.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n signIn: '_successEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n postRender: function() {\n if (this.options.appState.get('factors').length === 1 && !this.model.get('__autoTriggered__')) {\n this.model.set('__autoTriggered__', true);\n this.model.save();\n }\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('verify.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('verify.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n this.$('.o-form-button-bar').removeClass('hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotFoundError':\n message = this.options.appState.get('factors').length > 1\n ? loc('verify.windowsHello.error.notFound.selectAnother', 'login')\n : loc('verify.windowsHello.error.notFound', 'login');\n break;\n\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n },\n\n _successEnrollment: function() {\n this.subtitle = this.settings.get('brandName')\n ? loc('verify.windowsHello.subtitle.signingIn.specific', 'login', [this.settings.get('brandName')])\n : loc('verify.windowsHello.subtitle.signingIn.generic', 'login');\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","// This is the primary export for the CommonJS module.\n// DO NOT CONVERT TO TYPESCRIPT - for backward compatibility we need to use `module.exports` not `export default`\n\nconst OktaSignIn = require('./widget/OktaSignIn').default;\n\nmodule.exports = OktaSignIn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, Model } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Factor from 'models/Factor';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Errors from 'util/Errors';\nconst DEFAULT_APP_LOGO = '/img/logos/default.png';\n\n// Keep track of stateMachine with this special model. Some reasons to not\n// keep it generic:\n// 1. We know exactly what we're using appState for by requiring props\n// 2. Can have some derived functions to help us translate the lastAuthRes\n\nconst USER_NOT_SEEN_ON_DEVICE = '/img/security/unknown.png';\nconst UNDEFINED_USER = '/img/security/default.png';\nconst NEW_USER = '/img/security/unknown-device.png';\nconst NEW_USER_IMAGE_DESCRIPTION = '';\nconst UNDEFINED_USER_IMAGE_DESCRIPTION = '';\nconst UNKNOWN_IMAGE_DESCRIPTION = '';\nconst securityImageUrlTpl = hbs('{{baseUrl}}/login/getimage?username={{username}}');\n\nfunction getSecurityImage(baseUrl, username, deviceFingerprint) {\n // When the username is empty, we want to show the default image.\n if (_.isEmpty(username) || _.isUndefined(username)) {\n return Q({\n securityImage: UNDEFINED_USER,\n securityImageDescription: UNDEFINED_USER_IMAGE_DESCRIPTION,\n });\n }\n\n // Reserved characters in the username must be escaped before the query can be safely executed\n username = encodeURIComponent(username);\n const url = securityImageUrlTpl({ baseUrl: baseUrl, username: username });\n const data = {\n url: url,\n dataType: 'json',\n };\n\n if (deviceFingerprint) {\n data['headers'] = { 'X-Device-Fingerprint': deviceFingerprint };\n }\n return Q($.ajax(data)).then(function(res) {\n if (res.pwdImg === USER_NOT_SEEN_ON_DEVICE) {\n // When we get an unknown.png security image from OKTA,\n // we want to show the unknown-device security image.\n // We are mapping the server's img url to a new one because\n // we still need to support the original login page.\n return {\n securityImage: NEW_USER,\n securityImageDescription: NEW_USER_IMAGE_DESCRIPTION,\n };\n }\n return {\n securityImage: res.pwdImg,\n securityImageDescription: res.imageDescription || UNKNOWN_IMAGE_DESCRIPTION,\n };\n });\n}\n\nfunction getMinutesString(factorLifetimeInMinutes) {\n if (factorLifetimeInMinutes > 60 && factorLifetimeInMinutes <= 1440) {\n const lifetimeInHours = factorLifetimeInMinutes / 60;\n\n return loc('hours', 'login', [lifetimeInHours]);\n } else if (factorLifetimeInMinutes > 1440) {\n const lifetimeInDays = factorLifetimeInMinutes / 1440;\n\n return loc('days', 'login', [lifetimeInDays]);\n }\n //Use minutes as the time unit by default\n if (factorLifetimeInMinutes === 1) {\n return loc('minutes.oneMinute', 'login');\n }\n return loc('minutes', 'login', [factorLifetimeInMinutes]);\n}\n\nfunction getGracePeriodRemainingDays(gracePeriodEndDate) {\n const endDate = new Date(gracePeriodEndDate).getTime();\n const remainingDays = Math.floor((endDate - new Date().getTime()) / (1000 * 3600 * 24));\n\n return remainingDays;\n}\n\nfunction combineFactorsObjects(factorTypes, factors) {\n const addedFactorTypes = [];\n const combinedFactors = [];\n\n _.each(factors, function(factor) {\n const factorType = factor.factorType;\n\n if (!_.contains(addedFactorTypes, factorType)) {\n const factorTypeObj = _.findWhere(factorTypes, { factorType: factorType });\n\n if (factorTypeObj) {\n addedFactorTypes.push(factorType);\n combinedFactors.push(factorTypeObj);\n } else {\n combinedFactors.push(factor);\n }\n }\n });\n return combinedFactors;\n}\n\nexport default Model.extend({\n initialize: function() {\n // Handle this in initialize (as opposed to a derived property) because\n // the operation is asynchronous\n if (this.settings.get('features.securityImage')) {\n const self = this;\n\n this.listenTo(this, 'change:username', function(model, username) {\n getSecurityImage(this.get('baseUrl'), username, this.get('deviceFingerprint'))\n .then(function(image) {\n model.set('securityImage', image.securityImage);\n model.set('securityImageDescription', image.securityImageDescription);\n model.unset('deviceFingerprint'); //Fingerprint can only be used once\n })\n .fail(function(jqXhr) {\n // Only notify the consumer on a CORS error\n if (BrowserFeatures.corsIsNotEnabled(jqXhr)) {\n self.settings.callGlobalError(new Errors.UnsupportedBrowserError(loc('error.enabled.cors')));\n } else {\n throw jqXhr;\n }\n })\n .done();\n });\n }\n },\n\n local: {\n baseUrl: 'string',\n lastAuthResponse: ['object', true, {}],\n transaction: 'object',\n transactionError: 'object',\n username: 'string',\n factors: 'object',\n policy: 'object',\n securityImage: ['string', true, UNDEFINED_USER],\n securityImageDescription: ['string', true, UNDEFINED_USER_IMAGE_DESCRIPTION],\n userCountryCode: 'string',\n userPhoneNumber: 'string',\n factorActivationType: 'string',\n flashError: 'object',\n beaconType: 'string',\n deviceFingerprint: 'string', // valid only once\n typingPattern: 'string',\n // Note: languageCode is special in that it is shared between Settings\n // and AppState. Settings is the *configured* language, and is static.\n // AppState is the dynamic language state - it can be changed via a\n // language picker, etc.\n // Note: this is conceptial feasible but not yet being implemented.\n languageCode: ['string', true],\n disableUsername: ['boolean', false, false],\n trapMfaRequiredResponse: ['boolean', false, false],\n lastFailedChallengeFactorData: ['object', false],\n },\n\n setAuthResponse: function(res) {\n // Because of MFA_CHALLENGE (i.e. DUO), we need to remember factors\n // across auth responses. Not doing this, for example, results in being\n // unable to switch away from the duo factor dropdown.\n if (res._embedded && res._embedded.policy) {\n this.set('policy', res._embedded.policy);\n }\n\n if (res._embedded && res._embedded.factors) {\n let factors = res._embedded.factors;\n\n if (res._embedded.factorTypes) {\n factors = combineFactorsObjects(res._embedded.factorTypes, factors);\n }\n\n const factorsObject = _.map(factors, factor => {\n factor.settings = this.settings;\n factor.appState = this;\n return factor;\n });\n\n this.set('factors', new Factor.Collection(factorsObject, { parse: true }));\n }\n\n this.set('lastAuthResponse', res);\n },\n\n clearLastAuthResponse: function() {\n this.set('lastAuthResponse', {});\n },\n\n setLastFailedChallengeFactorData: function() {\n this.set('lastFailedChallengeFactorData', {\n factor: this.get('factor'),\n errorMessage: this.get('factorResultErrorMessage'),\n });\n },\n\n clearLastFailedChallengeFactorData: function() {\n this.unset('lastFailedChallengeFactorData');\n },\n\n getUser: function() {\n return this.get('user');\n },\n\n derived: {\n isSuccessResponse: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'SUCCESS';\n },\n },\n isMfaRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_REQUIRED' || res.status === 'FACTOR_REQUIRED';\n },\n },\n isProfileRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PROFILE_REQUIRED';\n },\n },\n isMfaEnroll: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL' || res.status === 'FACTOR_ENROLL';\n },\n },\n isMfaChallenge: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_CHALLENGE' || res.status === 'FACTOR_CHALLENGE';\n },\n },\n isSMSPasswordRecovery: {\n deps: ['lastAuthResponse'],\n fn: function({ status, factorType, recoveryType }) {\n return status === 'RECOVERY_CHALLENGE' &&\n factorType?.toLowerCase() === 'sms' &&\n recoveryType?.toLowerCase() === 'password';\n }\n },\n isUnauthenticated: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'UNAUTHENTICATED';\n },\n },\n isMfaRejected: {\n // MFA failures are usually error responses\n // except in the case of Okta Push, when a\n // user clicks 'deny' on his phone or OV app\n // version is below a required version no.\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'REJECTED';\n },\n },\n isMfaTimeout: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'TIMEOUT';\n },\n },\n isMfaEnrollActivate: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE';\n },\n },\n isWaitingForActivation: {\n deps: ['isMfaEnrollActivate', 'lastAuthResponse'],\n fn: function(isMfaEnrollActivate, res) {\n return isMfaEnrollActivate && res.factorResult === 'WAITING';\n },\n },\n isWaitingForNumberChallenge: {\n deps: ['lastAuthResponse', 'isMfaChallenge'],\n fn: function(res, isMfaChallenge) {\n if (\n isMfaChallenge &&\n res &&\n res.factorResult === 'WAITING' &&\n res._embedded &&\n res._embedded.factor &&\n res._embedded.factor._embedded &&\n res._embedded.factor._embedded.challenge\n ) {\n return true;\n }\n return false;\n },\n },\n hasMultipleFactorsAvailable: {\n deps: ['factors', 'isMfaRequired', 'isMfaChallenge', 'isUnauthenticated'],\n fn: function(factors, isMfaRequired, isMfaChallenge, isUnauthenticated) {\n if (!isMfaRequired && !isMfaChallenge && !isUnauthenticated) {\n return false;\n }\n return factors && factors.length > 1;\n },\n },\n promptForFactorInUnauthenticated: {\n deps: ['lastAuthResponse', 'factors'],\n fn: function(res, factors) {\n if (res.status !== 'UNAUTHENTICATED') {\n return false;\n }\n return factors && factors.length > 0;\n },\n },\n userId: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user.id;\n },\n },\n isIdxStateToken: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res && _.isString(res.stateToken) && res.stateToken.startsWith('01');\n },\n },\n isPwdExpiringSoon: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PASSWORD_WARN';\n },\n },\n passwordExpireDays: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.policy || !res._embedded.policy.expiration) {\n return null;\n }\n return res._embedded.policy.expiration.passwordExpireDays;\n },\n },\n isPwdManagedByOkta: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return true;\n }\n return false;\n },\n },\n passwordExpiredWebsiteName: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return null;\n }\n return res._links.next.title;\n },\n },\n passwordExpiredLinkUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n recoveryType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.recoveryType;\n },\n },\n factorType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorType;\n },\n },\n factor: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factor) {\n return null;\n }\n return res._embedded.factor;\n },\n },\n activatedFactorId: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.id : null;\n },\n },\n activatedFactorType: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.factorType : null;\n },\n },\n activatedFactorProvider: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.provider : null;\n },\n },\n qrcode: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation._links.qrcode.href;\n } catch (err) {\n return null;\n }\n },\n },\n activationSendLinks: {\n deps: ['factor'],\n fn: function(factor) {\n let sendLinks;\n\n try {\n sendLinks = factor._embedded.activation._links.send;\n } catch (err) {\n sendLinks = [];\n }\n return sendLinks;\n },\n },\n textActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'sms' });\n\n return item ? item.href : null;\n },\n },\n emailActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'email' });\n\n return item ? item.href : null;\n },\n },\n sharedSecret: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation.sharedSecret;\n } catch (err) {\n return null;\n }\n },\n },\n duoEnrollActivation: {\n deps: ['factor'],\n fn: function(factor) {\n if (!factor || !factor._embedded || !factor._embedded.activation) {\n return null;\n }\n return factor._embedded.activation;\n },\n },\n prevLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.prev) {\n return res._links.prev.href;\n }\n return null;\n },\n },\n skipLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.skip) {\n return res._links.skip.href;\n }\n return null;\n },\n },\n gracePeriodRemainingDays: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.gracePeriod && policy.gracePeriod.endDate) {\n return getGracePeriodRemainingDays(policy.gracePeriod.endDate);\n }\n return null;\n },\n },\n user: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user;\n },\n },\n recoveryQuestion: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.recovery_question) {\n return null;\n }\n return user.recovery_question.question;\n },\n },\n userProfile: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.profile) {\n return null;\n }\n return user.profile;\n },\n },\n userConsentName: {\n deps: ['userProfile', 'username'],\n fn: function(userProfile, username) {\n if (!userProfile || _.isEmpty(userProfile.firstName)) {\n return username;\n }\n if (_.isEmpty(userProfile.lastName)) {\n return userProfile.firstName;\n }\n return userProfile.firstName + ' ' + userProfile.lastName.charAt(0) + '.';\n },\n },\n userEmail: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || !userProfile.login) {\n return null;\n }\n return userProfile.login;\n },\n },\n userFullName: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || (!userProfile.firstName && !userProfile.lastName)) {\n return '';\n }\n return userProfile.firstName + ' ' + userProfile.lastName;\n },\n },\n defaultAppLogo: {\n deps: ['baseUrl'],\n fn: function(baseUrl) {\n return baseUrl + DEFAULT_APP_LOGO;\n },\n },\n expiresAt: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.expiresAt;\n },\n },\n target: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.target;\n },\n },\n targetLabel: {\n deps: ['target'],\n fn: function(target) {\n if (!target) {\n return null;\n }\n return target.label;\n },\n },\n targetLogo: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links.logo;\n },\n },\n targetTermsOfService: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['terms-of-service'];\n },\n },\n targetPrivacyPolicy: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['privacy-policy'];\n },\n },\n targetClientURI: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['client-uri'];\n },\n },\n scopes: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.scopes;\n },\n },\n issuer: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.authentication?.issuer?.uri;\n }\n },\n hasExistingPhones: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'sms', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n hasExistingPhonesForCall: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'call', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n isUndefinedUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === UNDEFINED_USER;\n },\n },\n isNewUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === NEW_USER;\n },\n },\n allowRememberDevice: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.allowRememberDevice;\n },\n },\n rememberDeviceLabel: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.rememberDeviceLifetimeInMinutes > 0) {\n const timeString = getMinutesString(policy.rememberDeviceLifetimeInMinutes);\n\n return loc('rememberDevice.timebased', 'login', [timeString]);\n } else if (policy && policy.rememberDeviceLifetimeInMinutes === 0) {\n return loc('rememberDevice.devicebased', 'login');\n }\n return loc('rememberDevice', 'login');\n },\n },\n rememberDeviceByDefault: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.rememberDeviceByDefault;\n },\n },\n factorsPolicyInfo: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.factorsPolicyInfo ? policy.factorsPolicyInfo : null;\n },\n },\n verifyCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'redirect' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n enrollCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'activate' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n isFactorResultFailed: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'FAILED';\n },\n },\n factorResultErrorMessage: {\n deps: ['lastAuthResponse', 'isFactorResultFailed'],\n fn: function(res, isFactorResultFailed) {\n if (isFactorResultFailed) {\n return res.factorResultMessage || loc('oform.error.unexpected', 'login');\n }\n return null;\n },\n },\n deviceActivationStatus: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.deviceActivationStatus;\n },\n },\n usingDeviceFlow: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return !!(res._embedded && res._embedded.usingDeviceFlow);\n },\n },\n userCode: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.userCode;\n },\n },\n },\n\n parse: function(options) {\n this.settings = options.settings;\n return _.extend(_.omit(options, 'settings'), {\n languageCode: this.settings.get('languageCode'),\n userCountryCode: this.settings.get('countryCode'),\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model } from 'okta';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nconst KNOWN_ERRORS = ['OAuthError', 'AuthSdkError', 'AuthPollStopError', 'AuthApiError'];\nexport default Model.extend({\n // May return either a \"standard\" promise or a Q promise\n doTransaction: function(fn, rethrow) {\n const self = this;\n\n return fn\n .call(this, this.appState.get('transaction'))\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n // Q may still consider AuthPollStopError to be unhandled\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n if (rethrow || _.indexOf(KNOWN_ERRORS, err.name) === -1) {\n throw err;\n }\n });\n },\n\n manageTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.appState.get('transaction'), _.bind(this.setTransaction, this));\n\n // If it's a promise, listen for failures\n if (Q.isPromiseAlike(res)) {\n return res.catch(function(err) {\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n });\n }\n\n return Q.resolve(res);\n },\n\n startTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.settings.getAuthClient());\n\n // If it's a promise, then chain to it\n if (Q.isPromiseAlike(res)) {\n return res\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n throw err;\n });\n }\n\n return Q.resolve(res);\n },\n\n setTransaction: function(trans) {\n this.appState.set('transaction', trans);\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the 'License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport BaseLoginModel from './BaseLoginModel';\nexport default BaseLoginModel.extend({\n initialize: function(options) {\n this.options = options || {};\n this.appState = this.options.appState;\n },\n constructPostData: function(profileAttributes) {\n const postData = {\n registration: {\n profile: profileAttributes,\n },\n };\n\n // send createNewAccount flag for new user creation\n if (this.appState.get('policy').registration.createNewAccount) {\n postData.registration['createNewAccount'] = true;\n }\n return postData;\n },\n getEnrollFormData: function() {\n return this.manageTransaction(function(transaction, setTransaction) {\n return transaction.enroll().then(function(trans) {\n setTransaction(trans);\n });\n });\n },\n save: function() {\n let data = BaseLoginModel.prototype.toJSON.apply(this, arguments);\n\n data = _.omit(data, ['appState', 'settings', 'createNewAccount']);\n if (_.isEmpty(data)) {\n const error = {\n errorSummary: loc('oform.errorbanner.title', 'login'),\n };\n\n this.trigger('error', this, {\n responseJSON: error,\n });\n } else {\n return this.manageTransaction(function(transaction, setTransaction) {\n transaction.enroll(this.constructPostData(data)).then(function(trans) {\n setTransaction(trans);\n });\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint complexity: [2, 13] */\nimport { _, loc, Collection } from 'okta';\nimport Q from 'q';\nimport Errors from 'util/Errors';\nimport factorUtil from 'util/FactorUtil';\nimport Util from 'util/Util';\nimport BaseLoginModel from './BaseLoginModel';\nconst PUSH_INTERVAL = 4000;\n\n// Avoid setting interval to same value as keep-alive time (5 seconds) because it\n// caused an occasional issue with network connection lost errors in Safari and IE\n\nconst FactorFactor = BaseLoginModel.extend({\n extraProperties: true,\n flat: false,\n\n props: {\n id: 'string',\n factorType: {\n type: 'string',\n values: [\n 'sms',\n 'call',\n 'email',\n 'token',\n 'token:software:totp',\n 'token:hotp',\n 'token:hardware',\n 'question',\n 'push',\n 'u2f',\n 'password',\n 'assertion:saml2',\n 'assertion:oidc',\n 'claims_provider',\n 'webauthn',\n ],\n },\n provider: {\n type: 'string',\n values: [\n 'OKTA',\n 'RSA',\n 'DEL_OATH',\n 'SYMANTEC',\n 'GOOGLE',\n 'YUBICO',\n 'FIDO',\n 'CUSTOM',\n 'GENERIC_SAML',\n 'GENERIC_OIDC',\n ],\n },\n enrollment: {\n type: 'string',\n values: ['OPTIONAL', 'REQUIRED'],\n },\n status: {\n type: 'string',\n values: ['NOT_SETUP', 'ACTIVE'],\n },\n profile: ['object'],\n vendorName: 'string',\n policy: ['object'],\n profiles: ['object'],\n },\n\n local: {\n answer: 'string',\n password: 'string',\n backupFactor: 'object',\n showAnswer: 'boolean',\n rememberDevice: 'boolean',\n autoPush: ['boolean', true, false],\n },\n\n derived: {\n isOktaFactor: {\n deps: ['provider'],\n fn: function(provider) {\n return provider === 'OKTA';\n },\n },\n factorName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorName,\n },\n factorLabel: {\n deps: ['provider', 'factorType', 'vendorName'],\n fn: function(provider, factorType, vendorName) {\n if (_.contains(['DEL_OATH', 'GENERIC_SAML', 'GENERIC_OIDC', 'CUSTOM'], provider)) {\n return vendorName;\n }\n return factorUtil.getFactorLabel.apply(this, [provider, factorType]);\n },\n },\n factorDescription: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorDescription,\n },\n sortOrder: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorSortOrder,\n },\n iconClassName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorIconClassName,\n },\n securityQuestion: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'question') {\n return null;\n }\n return profile && factorUtil.getSecurityQuestionLabel(profile);\n },\n },\n phoneNumber: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (_.contains(['sms', 'call'], factorType)) {\n return profile && profile.phoneNumber;\n }\n return null;\n },\n },\n email: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType === 'email') {\n return profile && profile.email;\n }\n return null;\n },\n },\n deviceName: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'push') {\n return null;\n }\n return profile && profile.name;\n },\n },\n enrolled: {\n deps: ['status'],\n fn: function(status) {\n return status === 'ACTIVE';\n },\n },\n cardinality: {\n deps: ['policy', 'profiles'],\n fn: function(policy, profiles) {\n if (profiles && profiles.length > 0) {\n const profile = profiles[0];\n //assume for now we only get one profile (multiple profiles are not supported yet)\n\n const enrolled = profile._embedded.enrolledFactors.length;\n\n const adoption = _.findWhere(profile._embedded.features, { type: 'adoption' });\n\n if (adoption && adoption.cardinality) {\n return {\n enrolled: enrolled,\n minimum: adoption.cardinality.min,\n maximum: adoption.cardinality.max,\n };\n }\n return false;\n } else if (policy && policy.enrollment) {\n return policy.enrollment;\n } else {\n return false;\n }\n },\n },\n additionalEnrollment: {\n deps: ['cardinality'],\n fn: function(cardinality) {\n if (cardinality) {\n return cardinality.enrolled !== 0 && cardinality.enrolled < cardinality.maximum;\n } else {\n return false;\n }\n },\n },\n required: {\n deps: ['enrollment'],\n fn: function(enrollment) {\n return enrollment === 'REQUIRED';\n },\n },\n canUseResend: {\n deps: ['provider', 'factorType'],\n fn: function(provider, factorType) {\n // Only push, sms and call have resend links.\n return provider === 'OKTA' && _.contains(['push', 'sms', 'call', 'email'], factorType);\n },\n },\n isAnswerRequired: {\n deps: ['factorType'],\n fn: function(factorType) {\n return _.contains(['sms', 'call', 'email', 'token', 'token:software:totp', 'question'], factorType);\n },\n },\n isFactorTypeVerification: {\n deps: ['provider', 'id'],\n fn: function(provider, id) {\n return provider === undefined && id === undefined;\n },\n },\n },\n\n parse: function(attributes) {\n this.settings = attributes.settings;\n this.appState = attributes.appState;\n // set the initial value for remember device.\n attributes.rememberDevice = factorUtil.getRememberDeviceValue(this.appState);\n\n // Add vendorname for custom totp enroll\n this.setCustomHotpVendorName(attributes);\n return _.omit(attributes, ['settings', 'appState']);\n },\n\n validate: function() {\n if (this.get('isAnswerRequired') && !this.get('answer')) {\n return { answer: loc('model.validation.field.blank') };\n } else if (this.get('factorType') === 'password' && !this.get('password')) {\n return { password: loc('error.password.required') };\n }\n },\n needsPasscode: function() {\n // we don't need passcode for email with magic link flow\n return !(this.options.appState.get('isIdxStateToken') && this.get('factorType') === 'email');\n },\n resend: function() {\n this.trigger('form:clear-errors');\n return this.manageTransaction(function(transaction) {\n const firstLink = transaction.data._links.resend[0];\n\n return transaction.resend(firstLink.name);\n });\n },\n\n save: function() {\n const rememberDevice = !!this.get('rememberDevice');\n const self = this;\n // Set/Remove the remember device cookie based on the remember device input.\n\n return this.manageTransaction(function(transaction, setTransaction) {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n if (this.get('factorType') === 'question') {\n data.answer = this.get('answer');\n } else if (this.get('factorType') === 'password') {\n data.password = this.get('password');\n } else if (this.needsPasscode()) {\n data.passCode = this.get('answer');\n }\n\n if (this.pushFactorHasAutoPush()) {\n data.autoPush = this.get('autoPush');\n }\n\n let promise;\n\n // MFA_REQUIRED, FACTOR_REQUIRED or UNAUTHENTICATED with factors (passwordlessAuth)\n if (\n transaction.status === 'MFA_REQUIRED' ||\n transaction.status === 'FACTOR_REQUIRED' ||\n this.appState.get('promptForFactorInUnauthenticated')\n ) {\n const factor = this._findFactor(transaction);\n\n promise = factor.verify(data);\n } else if (this.get('canUseResend') && !this.get('answer') && transaction.resend) {\n // MFA_CHALLENGE/ FACTOR_CHALLENGE\n const firstLink = transaction.data._links.resend[0];\n\n promise = transaction.resend(firstLink.name);\n } else {\n promise = transaction.verify(data);\n }\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the factor form\n this.trigger('save');\n\n return promise.then(function(trans) {\n const options = {\n delay: PUSH_INTERVAL,\n transactionCallBack: transaction => {\n self.options.appState.set('lastAuthResponse', transaction);\n },\n };\n\n setTransaction(trans);\n // In Okta verify case we initiate poll.\n if ((trans.status === 'MFA_CHALLENGE' && trans.poll) || (trans.status === 'FACTOR_CHALLENGE' && trans.poll)) {\n const deferred = Q.defer();\n const initiatePollTimout = Util.callAfterTimeout(deferred.resolve, PUSH_INTERVAL);\n self.listenToOnce(self.options.appState, 'factorSwitched', () => {\n clearTimeout(initiatePollTimout);\n deferred.reject(new Errors.AuthStopPollInitiationError());\n });\n return deferred.promise.then(function() {\n // Stop listening if factor was not switched before poll.\n self.stopListening(self.options.appState, 'factorSwitched');\n if (self.pushFactorHasAutoPush()) {\n options.autoPush = function() {\n return self.get('autoPush');\n };\n options.rememberDevice = function() {\n return self.get('rememberDevice');\n };\n }\n return trans.poll(options).then(function(trans) {\n self.options.appState.set('lastAuthResponse', trans.data);\n setTransaction(trans);\n });\n });\n }\n });\n });\n },\n\n _findFactor: function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: this.get('factorType'),\n });\n }\n if (!factor) {\n factor = _.findWhere(transaction.factors, {\n id: this.get('id'),\n });\n }\n return factor;\n },\n\n pushFactorHasAutoPush: function() {\n return this.settings.get('features.autoPush') && this.get('factorType') === 'push';\n },\n\n setCustomHotpVendorName: function(attributes) {\n // If factor is token:hotp and not enrolled, we assume the first profile is the default.\n // If factor is enrolled, we only support one profile to be enrolled, so find that one\n // and display as enrolled profile. We do this by populating profile name in vendorName.\n if (attributes.factorType === 'token:hotp' && attributes.profiles) {\n if (attributes.status === 'NOT_SETUP') {\n attributes.vendorName = attributes.profiles[0].name;\n } else if (attributes.status === 'ACTIVE') {\n const enrolledProfiles = attributes.profiles.filter(profile => {\n return profile._embedded.enrolledFactors.length > 0;\n });\n attributes.vendorName = enrolledProfiles[0].name;\n }\n }\n return attributes;\n },\n});\nconst FactorFactors = Collection.extend({\n model: FactorFactor,\n comparator: 'sortOrder',\n\n // One override necessary here - When Okta Verify OTP and Push are in the list,\n // they are presented in the view as one factor - in the beacon menu,\n // there's only one option (Okta Verify), and we show a form with Push\n // with an inline totp option. What we need to do is to add totp\n // as a \"backupFactor\" for push\n parse: function(factors) {\n // Keep a track of the last used factor, since\n // we need it to determine the default factor.\n this.lastUsedFactor = factors[0];\n\n const oktaPushFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'push' });\n\n let totpFactor;\n\n if (_.where(factors, { factorType: 'push' }).length > 1) {\n totpFactor = _.findWhere(factors, { factorType: 'token:software:totp' });\n } else {\n totpFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'token:software:totp' });\n }\n if (!oktaPushFactor || !totpFactor) {\n return factors;\n }\n\n const isTotpFirst = totpFactor === factors[0];\n\n const parsedFactors = _.reduce(\n factors,\n function(memo, factor) {\n const isOkta = factor.provider === 'OKTA';\n const isOktaTotp = isOkta && factor.factorType === 'token:software:totp';\n const isOktaPush = isOkta && factor.factorType === 'push';\n const notEnrolled = factor.status !== 'ACTIVE';\n const hideOktaTotp = isOktaTotp && (notEnrolled || oktaPushFactor.status === 'ACTIVE');\n const hideOktaPush = isOktaPush && notEnrolled && totpFactor.status === 'ACTIVE';\n\n if (hideOktaTotp || hideOktaPush) {\n return memo;\n }\n\n if (isOktaPush) {\n factor.backupFactor = new FactorFactor(totpFactor, { parse: true });\n }\n memo.push(factor);\n return memo;\n },\n []\n );\n\n // Use push factor instead of TOTP, if TOTP is first in the list\n // (since it is stored as backupFactor for push).\n if (isTotpFirst) {\n this.lastUsedFactor = oktaPushFactor;\n }\n\n return parsedFactors;\n },\n\n // Will need to update this to use HAL link to get last used factor:\n // https://oktainc.atlassian.net/browse/OKTA-58380\n // However, current code returns last used factor as first factor in list.\n // Also, will need to add priority - i.e. if they do not have a last used\n // factor, should try Okta Verify, then Okta SMS, etc.\n getDefaultFactor: function() {\n const factor = _.pick(this.lastUsedFactor, 'factorType', 'provider');\n\n return this.findWhere(factor);\n },\n\n getFirstUnenrolledRequiredFactor: function() {\n return this.findWhere({ required: true, enrolled: false });\n },\n\n _getFactorsOfType: function(factorType) {\n return this.where({ factorType: factorType });\n },\n\n getFactorIndex: function(factorType, factorId) {\n return this._getFactorsOfType(factorType).findIndex(function(factor) {\n return factor.get('id') === factorId;\n });\n },\n\n hasMultipleFactorsOfSameType: function(factorType) {\n return this._getFactorsOfType(factorType).length > 1;\n },\n\n getFactorByTypeAndIndex: function(factorType, factorIndex) {\n return this._getFactorsOfType(factorType)[factorIndex];\n },\n});\nexport default {\n Model: FactorFactor,\n Collection: FactorFactors,\n};\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport CookieUtil from 'util/CookieUtil';\nimport Enums from 'util/Enums';\nimport Util from 'util/Util';\nexport default PrimaryAuthModel.extend({\n props: function() {\n const cookieUsername = CookieUtil.getCookieUsername();\n const properties = this.getUsernameAndRemember(cookieUsername);\n\n return {\n username: ['string', true, properties.username],\n lastUsername: ['string', false, cookieUsername],\n context: ['object', false],\n remember: ['boolean', true, properties.remember],\n };\n },\n\n local: {},\n\n save: function() {\n const username = this.settings.transformUsername(this.get('username'), Enums.IDP_DISCOVERY);\n const remember = this.get('remember');\n const lastUsername = this.get('lastUsername');\n const resource = 'okta:acct:' + username;\n const requestContext = this.get('requestContext');\n\n this.setUsernameCookie(username, remember, lastUsername);\n\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button\n this.trigger('save');\n\n this.appState.trigger('loading', true);\n\n const webfingerArgs = {\n resource: resource,\n requestContext: requestContext,\n };\n const authClient = this.appState.settings.authClient;\n\n authClient\n .webfinger(webfingerArgs)\n .then(res => {\n if (res && res.links && res.links[0]) {\n if (res.links[0].properties['okta:idp:type'] === 'OKTA') {\n this.trigger('goToPrimaryAuth');\n } else if (res.links[0].href) {\n const redirectFn = res.links[0].href.includes('OKTA_INVALID_SESSION_REPOST%3Dtrue')\n ? Util.redirectWithFormGet.bind(Util)\n : this.settings.get('redirectUtilFn');\n //override redirectFn to only use Util.redirectWithFormGet if OKTA_INVALID_SESSION_REPOST is included\n //it will be encoded since it will be included in the encoded fromURI\n\n redirectFn(res.links[0].href);\n }\n }\n })\n .catch(() => {\n this.trigger('error');\n // Specific event handled by the Header for the case where the security image is not\n // enabled and we want to show a spinner. (Triggered only here and handled only by Header).\n this.appState.trigger('removeLoading');\n CookieUtil.removeUsernameCookie();\n })\n .finally(() => {\n this.appState.trigger('loading', false);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model } from 'okta';\nimport BaseLoginModel from './BaseLoginModel';\nexport default BaseLoginModel.extend({\n constructor: function(options) {\n this.settings = options && options.settings;\n Model.apply(this, arguments);\n },\n loginWithActivationToken: function(activationToken) {\n return this.startTransaction(function(authClient) {\n return authClient.signInWithCredentials({ token: activationToken });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, Model } from 'okta';\nimport CookieUtil from 'util/CookieUtil';\nimport Enums from 'util/Enums';\nimport BaseLoginModel from './BaseLoginModel';\n\nexport default BaseLoginModel.extend({\n props: function() {\n const cookieUsername = CookieUtil.getCookieUsername();\n const properties = this.getUsernameAndRemember(cookieUsername);\n const props = {\n username: {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.username.required', 'login');\n }\n },\n value: properties.username,\n },\n lastUsername: ['string', false, cookieUsername],\n context: ['object', false],\n remember: ['boolean', true, properties.remember],\n multiOptionalFactorEnroll: ['boolean', true],\n };\n\n if (!(this.settings && this.settings.get('features.passwordlessAuth'))) {\n props.password = {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.password.required', 'login');\n }\n },\n };\n }\n return props;\n },\n\n getUsernameAndRemember: function(cookieUsername) {\n const settingsUsername = this.settings && this.settings.get('username');\n const rememberMeEnabled = this.settings && this.settings.get('features.rememberMe');\n let remember = false;\n let username;\n\n if (settingsUsername) {\n username = settingsUsername;\n remember = rememberMeEnabled && username === cookieUsername;\n } else if (rememberMeEnabled && cookieUsername) {\n // Only respect the cookie if the feature is enabled.\n // Allows us to force prompting when necessary, e.g. SAML ForceAuthn\n username = cookieUsername;\n remember = true;\n }\n\n return {\n username: username,\n remember: remember,\n };\n },\n\n constructor: function(options) {\n this.settings = options && options.settings;\n this.appState = options && options.appState;\n Model.apply(this, arguments);\n this.listenTo(this, 'change:username', function(model, username) {\n this.set({ remember: username === this.get('lastUsername') });\n });\n },\n parse: function(options) {\n return _.omit(options, ['settings', 'appState']);\n },\n\n save: function() {\n const username = this.settings.transformUsername(this.get('username'), Enums.PRIMARY_AUTH);\n const remember = this.get('remember');\n const lastUsername = this.get('lastUsername');\n\n this.setUsernameCookie(username, remember, lastUsername);\n\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the primary auth form\n this.trigger('save');\n\n this.appState.trigger('loading', true);\n\n const signInArgs = this.getSignInArgs(username);\n let primaryAuthPromise;\n\n if (this.appState.get('isUnauthenticated')) {\n const authClient = this.appState.settings.authClient;\n\n // bootstrapped with stateToken\n if (this.appState.get('isIdxStateToken')) {\n // if its an idx stateToken, we send the parameter as identifier to login API\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.login);\n });\n } else {\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.authenticate);\n }, true);\n }\n } else {\n //normal username/password flow without stateToken\n primaryAuthPromise = this.startTransaction(function(authClient) {\n return this.doPrimaryAuth(authClient, signInArgs, _.bind(authClient.signInWithCredentials, authClient));\n });\n }\n\n return primaryAuthPromise\n .catch(() => {\n // Specific event handled by the Header for the case where the security image is not\n // enabled and we want to show a spinner. (Triggered only here and handled only by Header).\n this.appState.trigger('removeLoading');\n CookieUtil.removeUsernameCookie();\n })\n .finally(() => {\n this.appState.trigger('loading', false);\n });\n },\n\n getSignInArgs: function(username) {\n const multiOptionalFactorEnroll = this.get('multiOptionalFactorEnroll');\n const signInArgs = {};\n\n if (!this.settings.get('features.passwordlessAuth')) {\n signInArgs.password = this.get('password');\n }\n\n // if its an idx stateToken, we send the parameter as identifier to login API\n if (this.appState.get('isIdxStateToken')) {\n signInArgs.identifier = username;\n } else {\n //only post options param for non-idx flows\n signInArgs.username = username;\n signInArgs.options = {\n warnBeforePasswordExpired: true,\n multiOptionalFactorEnroll: multiOptionalFactorEnroll,\n };\n }\n return signInArgs;\n },\n\n setUsernameCookie: function(username, remember, lastUsername) {\n // Do not modify the cookie when feature is disabled, relevant for SAML ForceAuthn prompts\n if (this.settings.get('features.rememberMe')) {\n // Only delete the cookie if its owner says so. This allows other\n // users to log in on a one-off basis.\n if (!remember && lastUsername === username) {\n CookieUtil.removeUsernameCookie();\n } else if (remember) {\n CookieUtil.setUsernameCookie(username);\n }\n }\n },\n\n doPrimaryAuth: function(authClient, signInArgs, func) {\n const deviceFingerprintEnabled = this.settings.get('features.deviceFingerprinting');\n const typingPatternEnabled = this.settings.get('features.trackTypingPattern');\n\n // Add the custom header for fingerprint, typing pattern if needed, and then remove it afterwards\n // Since we only need to send it for primary auth\n if (deviceFingerprintEnabled && this.appState.get('deviceFingerprint')) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', this.appState.get('deviceFingerprint'));\n }\n if (typingPatternEnabled && this.appState.get('typingPattern')) {\n authClient.http.setRequestHeader('X-Typing-Pattern', this.appState.get('typingPattern'));\n }\n\n const self = this;\n\n return func(signInArgs).finally(function() {\n if (deviceFingerprintEnabled) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', undefined);\n self.appState.unset('deviceFingerprint'); //Fingerprint can only be used once\n }\n if (typingPatternEnabled) {\n authClient.http.setRequestHeader('X-Typing-Pattern', undefined);\n self.appState.unset('typingPattern');\n }\n });\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from 'okta';\nlet { BaseSchema } = internal.models;\nexport default BaseSchema.Model.extend({\n expand: ['schema'],\n setFieldPlaceholder: function(formFields) {\n _.each(formFields, function(formField) {\n formField.title = formField.label;\n });\n return formFields;\n },\n initialize: function(options) {\n let profileAttributes = options.profileSchemaAttributes;\n\n profileAttributes = this.setFieldPlaceholder(profileAttributes);\n if (profileAttributes) {\n const userProfileSchema = {\n properties: {},\n };\n\n for (var i = 0; i < profileAttributes.length; i++) {\n const profileAttributeObject = profileAttributes[i];\n\n userProfileSchema.properties[profileAttributeObject.name] = profileAttributeObject;\n }\n this.parse.apply(this, [{ schema: userProfileSchema }]);\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, BaseModel, internal } from 'okta';\nlet { BaseSchema, SchemaProperty } = internal.models;\nconst RegistrationSchemaRegistrationSchemaPropertyCollection = SchemaProperty.Collection.extend({\n createModelProperties: function() {\n const modelProperties = SchemaProperty.Collection.prototype.createModelProperties.apply(this);\n\n _.each(\n modelProperties,\n function(modelProperty, name) {\n modelProperty.required = !!this.get(name).get('required');\n },\n this\n );\n return modelProperties;\n },\n});\nexport default BaseSchema.Model.extend({\n expand: ['schema'],\n\n constructor: function() {\n this.properties = new RegistrationSchemaRegistrationSchemaPropertyCollection();\n BaseModel.apply(this, arguments);\n },\n\n parse: function(resp) {\n const parseResponseData = resp => {\n const requireFields = resp.schema.required;\n\n if (_.isArray(requireFields)) {\n _.each(\n requireFields,\n function(requireField) {\n const field = this.properties.get(requireField);\n\n if (field) {\n field.set('required', true);\n }\n },\n this\n );\n }\n\n const fieldOrderIds = resp.schema.fieldOrder;\n\n if (_.isArray(fieldOrderIds)) {\n _.each(\n fieldOrderIds,\n function(fieldOrderId, sortOrder) {\n const field = this.properties.get(fieldOrderId);\n\n if (field) {\n field.set('sortOrder', sortOrder);\n }\n },\n this\n );\n this.properties.comparator = 'sortOrder';\n this.properties.sort();\n }\n this.properties.defaultPolicyId = resp.policyId;\n return resp;\n };\n\n const self = this;\n this.settings.parseRegistrationSchema(\n resp,\n function(resp) {\n if (resp.profileSchema) {\n resp.schema = resp.profileSchema;\n BaseSchema.Model.prototype.parse.apply(self, [resp]);\n resp = parseResponseData(resp);\n }\n self.trigger('parseComplete', { properties: self.properties });\n },\n function(error) {\n self.trigger('parseComplete', { properties: self.properties, error: error });\n }\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-statements: [2, 15] */\n\nimport Q from 'q';\nimport Enums from './Enums';\nconst SWAP_PAGE_TIME = 200;\nconst fn = {};\n\nfunction zoom($el, start, finish) {\n const deferred = Q.defer();\n\n $el.animate(\n {\n 'text-indent': 1,\n },\n {\n duration: 200,\n easing: 'swing',\n step: function(now, fx) {\n fx.start = start;\n fx.end = finish;\n $el.css('transform', 'scale(' + now + ', ' + now + ')');\n },\n always: function() {\n deferred.resolve($el);\n },\n }\n );\n return deferred.promise;\n}\n\nfunction rotate($el, start, finish) {\n const deferred = Q.defer();\n\n $el.animate(\n {\n 'text-indent': 1,\n },\n {\n duration: 150,\n easing: 'swing',\n step: function(now, fx) {\n fx.start = start;\n fx.end = finish;\n $el.css('transform', 'rotate(' + now + 'deg)');\n },\n always: function() {\n deferred.resolve($el);\n },\n }\n );\n return deferred.promise;\n}\n\n// Note: It is necessary to pass in a success callback because we must\n// remove the old dom node (and controller) in the same tick of the event\n// loop. Waiting for \"then\" results in a glitchy animation.\nfn.swapPages = function(options) {\n const deferred = Q.defer();\n const $parent = options.$parent;\n const $oldRoot = options.$oldRoot;\n const $newRoot = options.$newRoot;\n const success = options.success;\n const ctx = options.ctx;\n let directionClassName = 'transition-from-right';\n\n if (options.dir && options.dir === Enums.DIRECTION_BACK) {\n directionClassName = 'transition-from-left';\n }\n\n $newRoot.addClass(directionClassName);\n $parent.append($newRoot);\n\n $parent.addClass('animation-container-overflow');\n $newRoot.animate({ left: '0px', top: '0px', opacity: 1 }, SWAP_PAGE_TIME, function() {\n $parent.removeClass('animation-container-overflow');\n $newRoot.removeClass(directionClassName);\n $newRoot.removeAttr('style');\n success.call(ctx);\n deferred.resolve();\n });\n\n $oldRoot.animate({ height: $newRoot.height(), opacity: 0 }, SWAP_PAGE_TIME * 0.8);\n\n return deferred.promise;\n};\n\nfn.swapBeacons = function(options) {\n const $el = options.$el;\n const swap = options.swap;\n const ctx = options.ctx;\n\n return this.implode($el)\n .then(function() {\n swap.call(ctx);\n return $el;\n })\n .then(this.explode);\n};\n\nfn.explode = function($el) {\n return zoom($el, 0, 1); //zoom in\n};\n\nfn.implode = function($el) {\n return zoom($el, 1, 0); //zoom out\n};\n\nfn.radialProgressBar = function(options) {\n const radialProgressBar = options.$el;\n const swap = options.swap;\n const circles = radialProgressBar.children();\n\n return rotate(circles, 0, 180)\n .then(function() {\n radialProgressBar.css({ clip: 'auto' });\n })\n .then(function() {\n const leftHalf = circles.eq(0);\n\n swap();\n return rotate(leftHalf, 180, 360);\n })\n .then(function() {\n //reset values to initial state\n radialProgressBar.css({ clip: 'rect(0px, 96px, 96px, 48px)' });\n circles.css({\n transform: 'rotate(0deg)',\n 'text-indent': '1px',\n });\n });\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, Controller } from 'okta';\nimport Q from 'q';\n\nfunction getForm(controller) {\n return _.find(controller.getChildren(), function(item) {\n return item instanceof Form;\n });\n}\n\nexport default Controller.extend({\n // Ideally we should be attaching the listeners in the constructor, but because of the way\n // we construct the FormController (this.model is generated after the BaseLoginController's\n // constructor is called), this.model is undefined in when try to attach the events and\n // therefore we don't listen to events for such forms. And changing the order in which we call\n // the constructor doesn't help either (JS errors etc.). This at least guarantees that we\n // are listening to the model events.\n // Note - Figure out a way to call the constructor in the right order.\n addListeners: function() {\n // Events to enable/disable the primary button on the forms\n this.listenTo(this.model, 'save', function() {\n const form = getForm(this);\n //disable the submit button on forms while making the request\n //to prevent users from hitting rate limiting exceptions of\n //1 per second on the auth api\n\n const disableSubmitButton = form.disableSubmitButton;\n\n if (disableSubmitButton && !form.disableSubmitButton()) {\n return;\n }\n this.toggleButtonState(true);\n });\n\n this.listenTo(this.model, 'error', function() {\n this.toggleButtonState(false);\n });\n\n this.addModelListeners(this.model);\n },\n\n addModelListeners: function(model) {\n const setTransactionHandler = transaction => {\n this.options.appState.set('transaction', transaction);\n };\n\n const transactionErrorHandler = err => {\n this.options.appState.set('transactionError', err);\n };\n\n // Events to set the transaction attributes on the app state.\n this.listenTo(model, 'setTransaction', setTransactionHandler);\n this.listenTo(model, 'setTransactionError', transactionErrorHandler);\n\n // For TOTP factor model\n // TOTP model is special, its model will not be attached to a controller, but will\n // tag along with the push factor model. We need to listen to the transaction\n // changes on this as well (in case of the push+totp form).\n const totpModel = model.get('backupFactor');\n\n if (totpModel) {\n this.listenTo(totpModel, 'setTransaction', setTransactionHandler);\n this.listenTo(totpModel, 'setTransactionError', transactionErrorHandler);\n }\n },\n\n // Override this method to delay switching to this screen until return\n // promise is resolved. This is useful for cases like enrolling a security\n // question, which requires an additional request to fetch the question\n // list.\n fetchInitialData: function() {\n return Q();\n },\n\n // Override this method to prevent route navigation. This is useful for\n // intermediate status changes that do not trigger a full refresh of the\n // page, like MFA_ENROLL_ACTIVATE and MFA_CHALLENGE.\n trapAuthResponse: function() {\n return false;\n },\n\n toJSON: function() {\n const data = Controller.prototype.toJSON.apply(this, arguments);\n\n return _.extend(_.pick(this.options, 'appState'), data);\n },\n\n toggleButtonState: function(state) {\n const button = this.$el.find('.button');\n\n button.toggleClass('link-button-disabled', state).prop('disabled', state);\n },\n\n postRenderAnimation: function() {\n // Event triggered after a page is rendered along with the classname to identify the page\n // TODO: Deprecate this event in the next major version in favor of 'afterRender'\n this.trigger('pageRendered', { page: this.className });\n\n this.trigger('afterRender', { controller: this.className });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: [2, 16], max-statements: [2, 20] */\n// BaseLoginRouter contains the more complicated router logic - rendering/\n// transition, etc. Most router changes should happen in LoginRouter (which is\n// responsible for adding new routes)\nimport { _, $, Backbone, Router, loc } from 'okta';\nimport AppState from 'models/AppState';\nimport Settings from 'models/Settings';\nimport Bundles from 'util/Bundles';\nimport Logger from 'util/Logger';\nimport AuthContainer from 'views/shared/AuthContainer';\nimport Header from 'views/shared/Header';\nimport SecurityBeacon from 'views/shared/SecurityBeacon';\nimport Animations from './Animations';\nimport BrowserFeatures from './BrowserFeatures';\nimport ColorsUtil from './ColorsUtil';\nimport Enums from './Enums';\nimport Errors from './Errors';\nimport RouterUtil from './RouterUtil';\nimport Util from './Util';\nimport LanguageUtil from './LanguageUtil';\n\nfunction isStateLessRouteHandler(router, fn) {\n return _.find(router.stateLessRouteHandlers, function(routeName) {\n return fn === router[routeName];\n });\n}\n\nfunction beaconIsAvailable(Beacon, settings) {\n if (!Beacon) {\n return false;\n }\n if (Beacon === SecurityBeacon) {\n return settings.get('features.securityImage');\n }\n return true;\n}\n\nexport default Router.extend({\n Events: Backbone.Events,\n\n initialize: function(options) {\n // Create a default success and/or error handler if\n // one is not provided.\n if (!options.globalSuccessFn) {\n options.globalSuccessFn = function() {};\n }\n if (!options.globalErrorFn) {\n options.globalErrorFn = function(err) {\n Logger.error(err);\n };\n }\n\n this.settings = new Settings(_.omit(options, 'el', 'authClient'), { parse: true });\n this.settings.setAuthClient(options.authClient);\n\n if (!options.el) {\n this.settings.callGlobalError(new Errors.ConfigError(loc('error.required.el')));\n }\n\n $('body > div').on('click', function() {\n // OKTA-69769 Tooltip wont close on iPhone/iPad\n // Registering a click handler on the first div\n // allows a tap that falls outside the tooltip\n // to be registered as a tap by iOS\n // and then the open tooltip will lose focus and close.\n });\n\n this.appState = new AppState(\n {\n baseUrl: this.settings.get('baseUrl'),\n settings: this.settings,\n },\n { parse: true }\n );\n\n const wrapper = new AuthContainer({ appState: this.appState });\n\n $(options.el).append(wrapper.render().$el);\n this.el = `#${Enums.WIDGET_CONTAINER_ID}`;\n\n this.header = new Header({\n el: this.el,\n appState: this.appState,\n settings: this.settings,\n });\n\n // Hide until unitial render\n this.hide();\n\n this.listenTo(this.appState, 'change:transactionError', function(appState, err) {\n RouterUtil.routeAfterAuthStatusChangeError(this, err);\n });\n\n this.listenTo(this.appState, 'change:transaction', function(appState, trans) {\n RouterUtil.routeAfterAuthStatusChange(this, trans.data);\n });\n\n this.listenTo(this.appState, 'navigate', function(url) {\n this.navigate(url, { trigger: true });\n });\n },\n\n execute: function(cb, args) {\n const recoveryToken = this.settings.get('recoveryToken');\n // Recovery flow with a token passed through widget settings\n\n if (recoveryToken) {\n this.settings.unset('recoveryToken');\n this.navigate(RouterUtil.createRecoveryUrl(recoveryToken), { trigger: true });\n return;\n }\n\n // Refresh flow with a stateToken passed through widget settings\n const stateToken = this.settings.get('stateToken');\n\n if (stateToken) {\n this.settings.unset('stateToken');\n this.navigate(RouterUtil.createRefreshUrl(stateToken), { trigger: true });\n return;\n }\n\n // Normal flow - we've either navigated to a stateless page, or are\n // in the middle of an auth flow\n const trans = this.appState.get('transaction');\n\n if ((trans && trans.data) || isStateLessRouteHandler(this, cb)) {\n cb.apply(this, args);\n return;\n }\n\n // StateToken cookie exists on page load, and we are on a stateful url\n if (this.settings.getAuthClient().tx.exists()) {\n this.navigate(RouterUtil.createRefreshUrl(), { trigger: true });\n return;\n }\n\n // We've hit a page that requires state, but have no stateToken - redirect\n // back to primary auth\n this.navigate('', { trigger: true });\n },\n\n // Overriding the default navigate method to allow the widget consumer\n // to \"turn off\" routing - if features.router is false, the browser\n // location bar will not update when the router navigates\n navigate: function(fragment, options) {\n if (this.settings.get('features.router')) {\n return Router.prototype.navigate.apply(this, arguments);\n }\n if (options && options.trigger) {\n return Backbone.history.loadUrl(fragment);\n }\n },\n\n render: function(Controller, options) {\n options || (options = {});\n\n let Beacon = options.Beacon;\n\n const controllerOptions = _.extend({ settings: this.settings, appState: this.appState }, _.omit(options, 'Beacon'));\n\n // Since we have a wrapper view, render our wrapper and use its content\n // element as our new el.\n // Note: Render it here because we know dom is ready at this point\n if (!this.header.rendered()) {\n this.el = this.header.render().getContentEl();\n }\n\n // If we need to load a language (or apply custom i18n overrides), do\n // this now and re-run render after it's finished.\n if (!Bundles.isLoaded(this.appState.get('languageCode'))) {\n return LanguageUtil.loadLanguage(this.appState, this.settings)\n .then(_.bind(this.render, this, Controller, options));\n }\n\n // Load the custom colors only on the first render\n if (this.settings.get('colors.brand') && !ColorsUtil.isLoaded()) {\n const colors = {\n brand: this.settings.get('colors.brand'),\n };\n\n ColorsUtil.addStyle(colors);\n }\n\n const oldController = this.controller;\n\n this.controller = new Controller(controllerOptions);\n\n // Bubble up all controller events\n this.listenTo(this.controller, 'all', this.trigger);\n\n // First run fetchInitialData, in case the next controller needs data\n // before it's initial render. This will leave the current page in a\n // loading state.\n return this.controller\n .fetchInitialData()\n .then(() => {\n // Beacon transition occurs in parallel to page swap\n if (!beaconIsAvailable(Beacon, this.settings)) {\n Beacon = null;\n }\n this.header.setBeacon(Beacon, controllerOptions);\n\n // Show before initial render\n this.show();\n\n this.controller.render();\n\n if (!oldController) {\n this.el.append(this.controller.el);\n this.controller.postRenderAnimation();\n return;\n }\n\n return Animations.swapPages({\n $parent: this.el,\n $oldRoot: oldController.$el,\n $newRoot: this.controller.$el,\n dir: oldController.state.get('navigateDir'),\n ctx: this,\n success: function() {\n const flashError = this.appState.get('flashError');\n const model = this.controller.model;\n\n oldController.remove();\n oldController.$el.remove();\n this.controller.postRenderAnimation();\n if (flashError) {\n const errorKey = (this.settings.get('features.mfaOnlyFlow')) ?\n 'error.mfa.only.expired.session' : 'error.expired.session';\n model.trigger('error', model, {\n responseJSON: {\n errorSummary: loc(errorKey),\n },\n });\n this.appState.unset('flashError');\n Util.triggerAfterError(this.controller, flashError);\n }\n },\n });\n })\n .catch(function() {\n // OKTA-69665 - if an error occurs in fetchInitialData, we're left in\n // a state with two active controllers. Therefore, we clean up the\n // old one. Note: This explicitly handles the invalid token case -\n // if we get some other type of error which doesn't force a redirect,\n // we will probably be left in a bad state. I.e. old controller is\n // dropped and new controller is not rendered.\n if (oldController) {\n oldController.remove();\n oldController.$el.remove();\n }\n });\n },\n\n start: function() {\n let pushState = false;\n\n // Support for browser's back button.\n if (window.addEventListener && this.settings.get('features.router')) {\n window.addEventListener('popstate', e => {\n if (this.controller.back) {\n e.preventDefault();\n e.stopImmediatePropagation();\n this.controller.back();\n }\n });\n pushState = BrowserFeatures.supportsPushState();\n }\n Router.prototype.start.call(this, { pushState: pushState });\n },\n\n hide: function() {\n this.header.$el.hide();\n },\n\n show: function() {\n this.header.$el.show();\n },\n\n remove: function() {\n if (this.controller) {\n this.controller.remove();\n }\n this.header.$el.remove();\n Bundles.remove();\n Backbone.history.stop();\n },\n});\n","/*!\n * Copyright (c) 2018-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Enums from 'util/Enums';\nconst fn = {};\n\nconst template = function(colors) {\n return `\n#okta-sign-in.auth-container .button-primary,\n#okta-sign-in.auth-container .button-primary:active,\n#okta-sign-in.auth-container .button-primary:focus { background: ${colors.brand}; }\n#okta-sign-in.auth-container .button-primary:hover { background: ${fn.lighten(colors.brand, 0.05)}; }\n#okta-sign-in.auth-container .button.button-primary.link-button-disabled {\n background: ${colors.brand};\n opacity: 0.5;\n}\n `;\n};\n\n// visible for testing\nfn.lighten = function(hex, lum) {\n lum = lum || 0;\n hex = hex.substr(1);\n let newHex = '#';\n\n for (var i = 0; i < 3; i++) {\n let c = parseInt(hex.substr(i * 2, 2), 16);\n\n c = Math.round(Math.min(Math.max(0, c + c * lum), 255)).toString(16);\n newHex += ('00' + c).substr(c.length);\n }\n return newHex;\n};\n\nfn.addStyle = function(colors) {\n const css = template(colors);\n const main = document.getElementById(Enums.WIDGET_CONTAINER_ID);\n const style = document.createElement('style');\n\n style.id = Enums.WIDGET_CONFIG_COLORS_ID;\n style.type = 'text/css';\n style.appendChild(document.createTextNode(css));\n\n main.appendChild(style);\n};\n\nfn.isLoaded = function() {\n return !!document.getElementById(Enums.WIDGET_CONFIG_COLORS_ID);\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { internal } from 'okta';\nconst Cookie = internal.util.Cookie;\nconst LAST_USERNAME_COOKIE_NAME = 'ln';\nconst DAYS_SAVE_REMEMBER = 365;\nconst fn = {};\n\nfn.getCookieUsername = function() {\n return Cookie.getCookie(LAST_USERNAME_COOKIE_NAME);\n};\n\nfn.setUsernameCookie = function(username) {\n Cookie.setCookie(LAST_USERNAME_COOKIE_NAME, username, {\n expires: DAYS_SAVE_REMEMBER,\n path: '/',\n });\n};\n\nfn.removeUsernameCookie = function() {\n Cookie.removeCookie(LAST_USERNAME_COOKIE_NAME, { path: '/' });\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport bundles from './Bundles';\nimport countryCallingCodes from './countryCallingCodes';\nconst fn = {};\n\n// () => [{ countryCode: countryName }], sorted by countryName\nfn.getCountries = function() {\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n // Sort it; figure out if there is a better way to do this (best would\n // be to sort it in the properties file!!)\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = country.name;\n });\n\n return sorted;\n};\n\nfn.getCountryCode = function(){\n\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = loc('country.option.label', 'login', [country.name, country.code]);\n });\n\n return sorted;\n};\n\nfn.getCallingCodeForCountry = function(countryCode) {\n return countryCallingCodes[countryCode];\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global Uint8Array, btoa, atob */\n\nconst fn = {};\n\n/**\n * Light weight hashing algorithm that hashes string into an integer between 0 and 4294967295\n * Not recommended for data set of size greater than 10000\n * https://www.npmjs.com/package/string-hash\n *\n * @param str the string to be hashed\n * @returns string hash of integer type\n */\nfn.getStringHash = function(str) {\n let hash = 5381;\n let i = str.length;\n\n while (i) {\n hash = (hash * 33) ^ str.charCodeAt(--i);\n }\n return hash >>> 0;\n};\n\n/**\n * Converts any url safe characters in a base64 string to regular base64 characters\n * @param str base64 string that might contain url safe characters\n * @returns base64 formatted string\n */\nfn.base64UrlSafeToBase64 = function(str) {\n return str.replace(new RegExp('_', 'g'), '/').replace(new RegExp('-', 'g'), '+');\n};\n\n/**\n * Converts an ArrayBuffer object that contains binary data to base64 encoded string\n * @param bin ArrayBuffer object\n * @returns base64 encoded string\n */\nfn.binToStr = function(bin) {\n return btoa(new Uint8Array(bin).reduce((s, byte) => s + String.fromCharCode(byte), ''));\n};\n\n/**\n * Converts base64 string to binary data view\n * @param str in base64 or base64UrlSafe format\n * @returns converted Uint8Array view of binary data\n */\nfn.strToBin = function(str) {\n return Uint8Array.from(atob(this.base64UrlSafeToBase64(str)), c => c.charCodeAt(0));\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { $ } from 'okta';\nimport Q from 'q';\nexport default {\n getUserAgent: function() {\n return navigator.userAgent;\n },\n isMessageFromCorrectSource: function($iframe, event) {\n return event.source === $iframe[0].contentWindow;\n },\n generateDeviceFingerprint: function(oktaDomainUrl, element) {\n const userAgent = this.getUserAgent();\n\n if (!userAgent) {\n return Q.reject('user agent is not defined');\n } else if (isWindowsPhone(userAgent)) {\n return Q.reject('device fingerprint is not supported on Windows phones');\n }\n\n const deferred = Q.defer();\n const self = this;\n let $iframe;\n let iFrameTimeout;\n\n function isWindowsPhone(userAgent) {\n return userAgent.match(/windows phone|iemobile|wpdesktop/i);\n }\n\n function removeIframe() {\n $iframe.off();\n $iframe.remove();\n window.removeEventListener('message', onMessageReceivedFromOkta, false);\n }\n\n function handleError(reason) {\n removeIframe();\n deferred.reject(reason);\n }\n\n function onMessageReceivedFromOkta(event) {\n if (!self.isMessageFromCorrectSource($iframe, event)) {\n return;\n }\n // deviceFingerprint service is available, clear timeout\n clearTimeout(iFrameTimeout);\n if (!event || !event.data || event.origin !== oktaDomainUrl) {\n handleError('no data');\n return;\n }\n try {\n const message = JSON.parse(event.data);\n\n if (message && message.type === 'FingerprintServiceReady') {\n sendMessageToOkta({ type: 'GetFingerprint' });\n } else if (message && message.type === 'FingerprintAvailable') {\n removeIframe();\n deferred.resolve(message.fingerprint);\n } else {\n handleError('no data');\n }\n } catch (error) {\n //Ignore any errors since we could get other messages too\n }\n }\n\n function sendMessageToOkta(message) {\n const win = $iframe[0].contentWindow;\n\n if (win) {\n win.postMessage(JSON.stringify(message), oktaDomainUrl);\n }\n }\n\n // Attach listener\n window.addEventListener('message', onMessageReceivedFromOkta, false);\n // Create and Load devicefingerprint page inside the iframe\n $iframe = $('\n `).last();\n },\n\n stopProbing() {\n this.checkPortXhr && this.checkPortXhr.abort();\n this.probingXhr && this.probingXhr.abort();\n },\n});\n\nexport default Body;\n","import { _, View } from 'okta';\nimport BaseHeader from './BaseHeader';\nimport BaseForm from './BaseForm';\nimport BaseModel from './BaseModel';\nimport BaseFooter from './BaseFooter';\nimport hbs from 'handlebars-inline-precompile';\nimport {getClassNameMapping} from '../../ion/ViewClassNamesFactory';\n\nexport default View.extend({\n\n Header: BaseHeader,\n\n Body: BaseForm,\n\n Footer: BaseFooter,\n\n className() {\n const appState = this.options.appState;\n\n const formName = appState.get('currentFormName');\n const authenticatorKey = appState.get('authenticatorKey');\n const methodType = appState.get('authenticatorMethodType');\n const isPasswordRecoveryFlow = appState.get('isPasswordRecoveryFlow');\n\n const additionalClassNames = getClassNameMapping(\n formName,\n authenticatorKey,\n methodType,\n isPasswordRecoveryFlow,\n );\n\n const classNames = ['siw-main-view'].concat(additionalClassNames);\n return classNames.join(' ');\n },\n\n template: hbs`\n \n \n \n `,\n\n preRender() {\n View.prototype.preRender.apply(this, arguments);\n // Add Views\n if (this.Header !== null) {\n this.add(this.Header, {\n selector: '.siw-main-header',\n options: this.options,\n });\n }\n this.renderForm();\n this.add(this.Footer, {\n selector : '.siw-main-footer',\n options: this.options,\n });\n },\n\n renderForm() {\n let optionUiSchemaConfig;\n\n if (this.form) {\n this.form.remove();\n optionUiSchemaConfig = this.form.model.toJSON({verbose: true});\n }\n\n // Create Model\n const IonModel = this.createModelClass(\n this.options.currentViewState,\n optionUiSchemaConfig,\n this.settings,\n );\n\n const model = new IonModel ({\n formName: this.options.currentViewState.name,\n });\n\n if (!optionUiSchemaConfig) {\n optionUiSchemaConfig = model.toJSON({verbose: true});\n }\n\n this.model = model;\n this.form = this.add(this.Body, {\n selector : '.siw-main-body',\n options: Object.assign(\n {},\n this.options,\n {\n model,\n optionUiSchemaConfig,\n },\n ),\n }).last();\n\n _.each(model.attributes, (value, key) => {\n if (key.match(/sub_schema_local_[^ ]+/)) {\n // in order to render different sub-schema\n this.listenTo(model, `change:${key}`, () => {\n this.renderForm();\n });\n }\n });\n },\n\n createModelClass(currentViewState, optionUiSchemaConfig = {}) {\n return BaseModel.create(currentViewState, optionUiSchemaConfig);\n },\n\n});\n","export { default as BaseHeader } from './BaseHeader';\nexport { default as BaseFooter } from './BaseFooter';\nexport { default as BaseForm } from './BaseForm';\nexport { default as BaseFormWithPolling } from './BaseFormWithPolling';\nexport { default as BaseOktaVerifyChallengeView } from './BaseOktaVerifyChallengeView';\nexport { default as BaseModel } from './BaseModel';\nexport { default as BaseView } from './BaseView';\nexport { addCustomButton, createCustomButtons, createIdpButtons } from './FormInputFactory';\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { loc, _ } from 'okta';\nimport FactorUtil from '../../../util/FactorUtil';\nimport { AUTHENTICATOR_KEY } from '../../ion/RemediationConstants';\n\nconst { getPasswordComplexityDescriptionForHtmlList } = FactorUtil;\n\nconst getButtonDataSeAttr = function(authenticator) {\n if (authenticator.authenticatorKey) {\n const method = authenticator.value?.methodType ?\n '-' + authenticator.value?.methodType : '';\n return authenticator.authenticatorKey + method;\n }\n return '';\n};\n\n/* eslint complexity: [0, 0] */\nconst getAuthenticatorData = function(authenticator, isVerifyAuthenticator) {\n const authenticatorKey = authenticator.authenticatorKey;\n const key = _.isString(authenticatorKey) ? authenticatorKey.toLowerCase() : '';\n let authenticatorData = {};\n switch (key) {\n case AUTHENTICATOR_KEY.EMAIL:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.email.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-email',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.PASSWORD:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.password.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-password',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.PHONE:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? authenticator.relatesTo?.profile?.phoneNumber\n : loc('oie.phone.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-phone',\n noTranslateClassName: isVerifyAuthenticator ? 'no-translate' : '',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.SECURITY_QUESTION:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.security.question.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-security-question',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.WEBAUTHN:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.webauthn.description', 'login'),\n iconClassName: 'mfa-webauthn',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.OV:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.okta_verify.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-verify',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.GOOGLE_OTP:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.google_authenticator.authenticator.description', 'login'),\n iconClassName: 'mfa-google-auth',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.ON_PREM: {\n const vendorName = authenticator.relatesTo?.displayName ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.on_prem.authenticator.description', 'login', [vendorName]),\n iconClassName: 'mfa-onprem',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.RSA:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.rsa.authenticator.description', 'login'),\n iconClassName: 'mfa-rsa',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.DUO:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.duo.authenticator.description', 'login'),\n iconClassName: 'mfa-duo',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.IDP: {\n const idpName = authenticator.relatesTo?.displayName;\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.idp.authenticator.description', 'login', [idpName]),\n iconClassName: 'mfa-custom-factor',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n case AUTHENTICATOR_KEY.CUSTOM_OTP: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.custom_otp.description', 'login'),\n iconClassName: 'mfa-hotp',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.SYMANTEC_VIP: {\n const appName = authenticator.relatesTo?.displayName;\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.symantecVip.authenticator.description', 'login', [appName]),\n iconClassName: 'mfa-symantec',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.YUBIKEY: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.yubikey.authenticator.description', 'login'),\n iconClassName: 'mfa-yubikey',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.CUSTOM_APP: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.custom.app.authenticator.description', 'login', [authenticator.label]),\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n logoUri : authenticator?.relatesTo?.logoUri || ''\n });\n break;\n }\n\n }\n return authenticatorData;\n};\n\nexport function getAuthenticatorDataForEnroll(authenticator) {\n return getAuthenticatorData(authenticator);\n}\n\nexport function getAuthenticatorDataForVerification(authenticator) {\n return getAuthenticatorData(authenticator, true);\n}\n\nexport function getIconClassNameForBeacon(authenticatorKey) {\n return getAuthenticatorData({ authenticatorKey }).iconClassName;\n}\n\nexport function removeRequirementsFromError(errorJSON) {\n if (errorJSON.errorCauses?.length > 0\n && Array.isArray(errorJSON.errorCauses[0].errorSummary)\n && errorJSON.errorCauses[0].errorSummary.length > 0) {\n // Change from Array to string for all errors.\n errorJSON.errorCauses[0].errorSummary = errorJSON.errorCauses[0].errorSummary[0];\n\n // Overrides for particular error messages.\n const errorKey = errorJSON.errorCauses[0].errorKey?.length > 0 && errorJSON.errorCauses[0].errorKey[0];\n // Remove the requirements string only if this is requirements were not met error.\n if (errorKey === 'password.passwordRequirementsNotMet') {\n errorJSON.errorCauses[0].errorSummary = loc('registration.error.password.passwordRequirementsNotMet', 'login');\n }\n }\n return errorJSON;\n}\n\n/**\n * Get authenticator display name from {@code remediation}.\n *\n * @param {Object} remediation\n */\nexport function getAuthenticatorDisplayName(remediation) {\n return remediation.relatesTo?.value?.displayName;\n}\n\n// Re-export function from FactorUtil\nexport { getPasswordComplexityDescriptionForHtmlList };\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { loc, View, createButton, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from '../../../util/Enums';\nimport Util from '../../../util/Util';\nimport {\n FASTPASS_FALLBACK_SPINNER_TIMEOUT,\n IDENTIFIER_FLOW,\n LOOPBACK_RESPONSE_STATUS_CODE,\n OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP, \n OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE,\n REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON,\n} from '../utils/Constants';\n\nexport function appendLoginHint(deviceChallengeUrl, loginHint) {\n if (deviceChallengeUrl && loginHint) {\n deviceChallengeUrl += '&login_hint=' + loginHint;\n }\n\n return deviceChallengeUrl;\n}\n\nexport function doChallenge(view, fromView) {\n const deviceChallenge = view.getDeviceChallengePayload();\n const loginHint = view.options?.settings?.get('identifier');\n const HIDE_CLASS = 'hide';\n switch (deviceChallenge.challengeMethod) {\n case Enums.LOOPBACK_CHALLENGE:\n view.title = loc('deviceTrust.sso.redirectText', 'login');\n view.add(View.extend({\n className: 'loopback-content',\n template: hbs``\n }));\n view.doLoopback(deviceChallenge);\n break;\n case Enums.CUSTOM_URI_CHALLENGE:\n view.title = loc('customUri.title', 'login');\n view.add(View.extend({\n className: 'skinny-content',\n template: hbs`\n \n {{i18n code=\"customUri.required.content.prompt\" bundle=\"login\"}}\n
\n `,\n }));\n view.add(createButton({\n className: 'ul-button button button-wide button-primary',\n title: loc('customUri.required.content.button', 'login'),\n id: 'launch-ov',\n click: () => {\n view.doCustomURI();\n }\n }));\n view.add(View.extend({\n className: 'skinny-content',\n template: hbs`\n \n {{i18n code=\"customUri.required.content.download.title\" bundle=\"login\"}}\n
\n \n \n {{i18n code=\"customUri.required.content.download.linkText\" bundle=\"login\"}}\n \n
\n `,\n getTemplateData() {\n return {\n downloadOVLink: deviceChallenge.downloadHref\n };\n },\n }));\n view.customURI = appendLoginHint(deviceChallenge.href, loginHint);\n view.doCustomURI();\n break;\n case Enums.UNIVERSAL_LINK_CHALLENGE:\n view.title = loc('universalLink.title', 'login');\n view.add(View.extend({\n className: 'universal-link-content',\n template: hbs`\n \n {{i18n code=\"universalLink.content\" bundle=\"login\"}}\n `\n }));\n view.add(createButton({\n className: 'ul-button button button-wide button-primary',\n title: loc('oktaVerify.reopen.button', 'login'),\n click: () => {\n // only window.location.href can open universal link in iOS/MacOS\n // other methods won't do, ex, AJAX get or form get (Util.redirectWithFormGet)\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, loginHint);\n Util.redirect(deviceChallengeUrl);\n }\n }));\n break;\n case Enums.APP_LINK_CHALLENGE:\n view.title = loc('appLink.title', 'login');\n view.add(View.extend({\n className: 'app-link-content',\n template: hbs`\n \n {{i18n code=\"appLink.content\" bundle=\"login\"}}\n `,\n getTemplateData() {\n return { hideClass: HIDE_CLASS };\n },\n postRender() {\n if (fromView === IDENTIFIER_FLOW) {\n this.$('.spinner').removeClass(HIDE_CLASS);\n setTimeout(_.bind(()=> {\n const data = { label: loc('goback', 'login') };\n this.options.appState.trigger('updateFooterLink', data);\n this.$('.spinner').addClass(HIDE_CLASS);\n this.$('.appLinkContent').removeClass(HIDE_CLASS);\n }, this), FASTPASS_FALLBACK_SPINNER_TIMEOUT);\n } else {\n this.$('.appLinkContent').removeClass(HIDE_CLASS);\n }\n },\n }));\n view.add(createButton({\n className: `${HIDE_CLASS} al-button button button-wide button-primary`,\n title: loc('oktaVerify.open.button', 'login'),\n click: () => {\n // only window.location.href can open app link in Android\n // other methods won't do, ex, AJAX get or form get (Util.redirectWithFormGet)\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, loginHint);\n Util.redirect(deviceChallengeUrl, window, true);\n },\n postRender() {\n if (fromView === IDENTIFIER_FLOW) {\n setTimeout(_.bind(()=> {\n this.$el.removeClass(HIDE_CLASS);\n }, this), FASTPASS_FALLBACK_SPINNER_TIMEOUT);\n } else {\n this.$el.removeClass(HIDE_CLASS);\n }\n }\n }));\n break;\n }\n}\n\nexport function cancelPollingWithParams(appState, pollingCancelAction, cancelReason, statusCode) {\n const actionParams = {};\n actionParams[REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON] = cancelReason;\n actionParams[LOOPBACK_RESPONSE_STATUS_CODE] = statusCode;\n appState.trigger('invokeAction', pollingCancelAction, actionParams);\n}\n\nexport function getBiometricsErrorOptions(error, isMessageObj) {\n let errorSummaryKeys;\n if (isMessageObj) {\n errorSummaryKeys = Object.values(error?.value[0]?.i18n);\n } else {\n errorSummaryKeys = error?.responseJSON?.errorSummaryKeys;\n }\n\n const isBiometricsRequiredMobile = errorSummaryKeys \n && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE);\n const isBiometricsRequiredDesktop = errorSummaryKeys \n && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP);\n let options = [];\n\n if (!isBiometricsRequiredMobile && !isBiometricsRequiredDesktop) {\n return options;\n }\n\n const bulletPoints = [\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point3', 'login')\n ];\n\n // Add an additional bullet point for desktop devices\n if (isBiometricsRequiredDesktop) {\n bulletPoints.push(\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point4', 'login')\n );\n }\n\n options = {\n type: 'error',\n className: 'okta-verify-uv-callout-content',\n title: loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.title', 'login'),\n subtitle: loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.description', 'login'),\n bullets: bulletPoints,\n };\n\n return options;\n}\n","export const SHOW_RESEND_TIMEOUT = 30000;\nexport const WARNING_TIMEOUT = 30000;\nexport const CHALLENGE_TIMEOUT = 300000;\nexport const MS_PER_SEC = 1000;\nexport const UNIVERSAL_LINK_POST_DELAY = 500;\nexport const CANCEL_POLLING_ACTION = 'authenticatorChallenge-cancel';\nexport const AUTHENTICATOR_CANCEL_ACTION = 'currentAuthenticator-cancel';\nexport const WIDGET_FOOTER_CLASS = 'siw-main-footer';\nexport const FASTPASS_FALLBACK_SPINNER_TIMEOUT = 4000;\nexport const IDENTIFIER_FLOW = 'IDENTIFIER';\nexport const OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP \n = 'oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.desktop';\nexport const OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE \n = 'oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.mobile';\nexport const AUTHENTICATOR_ALLOWED_FOR_OPTIONS = {\n ANY: 'any',\n SSO: 'sso',\n RECOVERY: 'recovery',\n};\nexport const REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON = 'reason';\nexport const LOOPBACK_RESPONSE_STATUS_CODE = 'statusCode';\nexport const AUTHENTICATION_CANCEL_REASONS = {\n LOOPBACK_FAILURE: 'OV_UNREACHABLE_BY_LOOPBACK',\n OV_ERROR: 'OV_RETURNED_ERROR',\n USER_CANCELED: 'USER_CANCELED',\n};\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// TODO: Use AuthJS for device fingerprinting: OKTA-418160\nimport { $ } from 'okta';\n\nfunction getUserAgent() {\n return navigator.userAgent;\n}\n\nfunction isWindowsPhone(userAgent) {\n return userAgent.match(/windows phone|iemobile|wpdesktop/i);\n}\n\nexport default {\n isMessageFromCorrectSource($iframe, event) {\n return event.source === $iframe[0].contentWindow;\n },\n\n // NOTE: This utility is similar to the DeviceFingerprint.js file used for V1 authentication flows.\n generateDeviceFingerprint(fingerprintData) {\n return new Promise((resolve, reject) => {\n const userAgent = getUserAgent();\n if (!userAgent) {\n return reject('user agent is not defined');\n } else if (isWindowsPhone(userAgent)) {\n return reject('device fingerprint is not supported on Windows phones');\n }\n\n let $iframe;\n let iFrameTimeout;\n const self = this; // Needed for mocking\n\n function removeIframe() {\n $iframe.off();\n $iframe.remove();\n window.removeEventListener('message', onMessageReceivedFromOkta, false);\n }\n\n function handleError(reason) {\n removeIframe();\n reject(reason);\n }\n\n function onMessageReceivedFromOkta(event) {\n if (!self.isMessageFromCorrectSource($iframe, event)) {\n return;\n }\n // deviceFingerprint service is available, clear timeout\n clearTimeout(iFrameTimeout);\n if (!event || !event.data || event.origin !== fingerprintData.oktaDomainUrl) {\n handleError('no data');\n return;\n }\n try {\n const message = JSON.parse(event.data);\n\n if (message && message.type === 'FingerprintServiceReady') {\n sendMessageToOkta({\n type: 'GetFingerprint',\n });\n } else if (message && message.type === 'FingerprintAvailable') {\n removeIframe();\n resolve(message.fingerprint);\n } else {\n handleError('no data');\n }\n } catch (error) {\n //Ignore any errors since we could get other messages too\n }\n }\n\n function sendMessageToOkta(message) {\n const win = $iframe[0].contentWindow;\n\n if (win) {\n win.postMessage(JSON.stringify(message), fingerprintData.oktaDomainUrl);\n }\n }\n\n // Attach listener\n window.addEventListener('message', onMessageReceivedFromOkta, false);\n // Create and Load devicefingerprint page inside the iframe\n $iframe = $('`).last();\n try {\n Duo.init({\n host: contextualData.host,\n sig_request: contextualData.signedToken, // eslint-disable-line camelcase\n iframe: duoFrame.el,\n post_action: (signedData) => { // eslint-disable-line camelcase\n this.model.set('credentials.signatureData', signedData);\n this.saveForm(this.model);\n },\n });\n } catch (e) {\n duoFrame.remove();\n this.add(createCallout({\n type: 'error',\n subtitle: loc('oie.duo.iFrameError', 'login'),\n }), '.o-form-error-container');\n console.error(e); // eslint-disable-line no-console\n }\n },\n\n getContextualData() {\n // to be overriden\n }\n});\n","import { loc } from 'okta';\nimport BaseDuoAuthenticatorForm from './BaseDuoAuthenticatorForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseDuoAuthenticatorForm.extend({\n title() {\n return loc('oie.duo.verify.title', 'login');\n },\n\n getContextualData() {\n return this.options.appState.get('currentAuthenticatorEnrollment').contextualData;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseDuoAuthenticatorForm from './BaseDuoAuthenticatorForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseDuoAuthenticatorForm.extend({\n title() {\n return loc('oie.duo.enroll.title', 'login');\n },\n\n getContextualData() {\n return this.options.appState.get('currentAuthenticator').contextualData;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import hbs from 'handlebars-inline-precompile';\nimport { View } from 'okta';\n\n// Courage doesn't support HTML, hence creating a subtitle here.\nconst CheckYourEmailTitle = View.extend({\n className: 'okta-form-subtitle',\n attributes: {\n 'data-se': 'o-form-explain',\n },\n template: hbs`\n {{#if email}}\n {{i18n \n code=\"oie.email.verify.alternate.magicLinkToEmailAddress\" \n bundle=\"login\" \n arguments=\"email\" \n $1=\"$1\"\n }}\n {{else}}\n {{i18n \n code=\"oie.email.verify.alternate.magicLinkToYourEmail\" \n bundle=\"login\"\n }}\n {{/if}}\n \n {{#if useEmailMagicLinkValue}}\n {{i18n \n code=\"oie.email.verify.alternate.instructions\" \n bundle=\"login\" \n }}\n {{else}}\n {{i18n \n code=\"oie.email.verify.alternate.verificationCode.instructions\" \n bundle=\"login\" \n }}\n {{/if}}\n `,\n \n getTemplateData() {\n return this.options;\n },\n});\n \nconst EnterCodeLink = View.extend({\n template: hbs`\n \n `,\n});\n\nexport function getCheckYourEmailTitle() {\n return CheckYourEmailTitle;\n}\n\nexport function getEnterCodeLink() {\n return EnterCodeLink;\n}","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport email from '../shared/email';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BaseResendView from '../shared/BaseResendView';\nimport BaseFormWithPolling from '../../internals/BaseFormWithPolling';\n\nconst ResendView = BaseResendView.extend(\n {\n className: 'hide resend-email-view',\n events: {\n 'click a.resend-link' : 'handelResendLink'\n },\n\n initialize() {\n this.add(createCallout({\n content: `${loc('email.code.not.received', 'login')}\n ${loc('email.button.resend', 'login')}`,\n type: 'warning',\n }));\n },\n\n handelResendLink() {\n this.options.appState.trigger('invokeAction', this.options.resendEmailAction);\n // Hide warning, but reinitiate to show warning again after some threshold of polling\n if (!this.$el.hasClass('hide')) {\n this.$el.addClass('hide');\n }\n this.showCalloutAfterTimeout();\n },\n },\n);\n\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n\n this.add(ResendView, {\n selector: '.o-form-error-container',\n options: {\n resendEmailAction: this.resendEmailAction,\n }\n });\n this.startPolling();\n },\n\n saveForm() {\n BaseForm.prototype.saveForm.apply(this, arguments);\n this.stopPolling();\n },\n\n remove() {\n BaseForm.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n\n triggerAfterError(model, error) {\n BaseForm.prototype.triggerAfterError.apply(this, arguments);\n const isFormPolling = !!this.polling;\n this.stopPolling();\n\n if (error.responseJSON?.errorSummaryKeys?.includes('idx.session.expired')) {\n // Do NOT resume polling since session is invalid and polling is already stopped\n return;\n }\n\n if (this.isRateLimitError(error)) {\n // When polling encounter rate limit error, wait 60 sec for rate limit bucket to reset\n // before polling again & hide error message\n if (isFormPolling) {\n setTimeout(() => {\n model.trigger('clearFormError');\n }, 0);\n }\n this.startPolling(60000);\n } else {\n this.startPolling(this.options.appState.get('dynamicRefreshInterval'));\n }\n },\n\n isRateLimitError(error) {\n return (error.responseJSON?.errorSummaryKeys?.includes('tooManyRequests') // IDX API error\n || (error.responseJSON?.errorCode === 'E0000047') && !error.responseJSON?.errorIntent); // Standard API error\n },\n },\n email,\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorView.prototype.Body;\n\nconst SubtitleView = View.extend({\n template: hbs`\n \n {{#if email}}\n {{i18n\n code=\"oie.email.verify.subtitleWithEmailAddress\"\n bundle=\"login\"\n arguments=\"email\"\n $1=\"$1\"\n }}\n {{else}}\n {{i18n\n code=\"oie.email.verify.subtitleWithoutEmailAddress\"\n bundle=\"login\"\n }}\n {{/if}}\n \n `,\n\n getTemplateData() {\n const email = this.options.appState.get('currentAuthenticatorEnrollment')?.profile?.email;\n return {\n email,\n };\n },\n});\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n {\n title() {\n return loc('oie.email.mfa.title', 'login');\n },\n\n save() {\n return loc('oie.email.verify.primaryButton', 'login');\n },\n\n postRender() {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n this.add(SubtitleView, {\n prepend: true,\n selector: '.o-form-info-container',\n });\n },\n\n getUISchema() {\n // Prevent from displaying radio buttons on the UI\n const uiSchemas = BaseAuthenticatorEmailForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n },\n);\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorEmailView from './BaseAuthenticatorEmailView';\nimport { getCheckYourEmailTitle, getEnterCodeLink } from './AuthenticatorEmailViewUtil';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorEmailView.prototype.Body;\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n Object.assign({\n noButtonBar: true,\n resendEmailAction: 'currentAuthenticatorEnrollment-resend',\n\n events: {\n 'click .enter-auth-code-instead-link': 'showAuthCodeEntry',\n },\n\n initialize() {\n BaseAuthenticatorEmailForm.prototype.initialize.apply(this, arguments);\n\n const { email } =\n this.options.currentViewState.relatesTo?.value?.profile || {};\n\n const useEmailMagicLinkValue = this.isUseEmailMagicLink();\n\n if (useEmailMagicLinkValue) {\n this.add(getEnterCodeLink(), {\n prepend: true,\n selector: '.o-form-error-container',\n });\n } \n\n this.add(getCheckYourEmailTitle(), {\n prepend: true,\n selector: '.o-form-error-container',\n options: { email, useEmailMagicLinkValue },\n });\n },\n\n postRender() {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n if (this.isUseEmailMagicLink()) {\n this.showCodeEntryField(false);\n } else {\n this.noButtonBar = false;\n }\n },\n\n isUseEmailMagicLink() {\n const useEmailMagicLink = this.options.appState.get('currentAuthenticatorEnrollment')?.\n contextualData?.useEmailMagicLink;\n return useEmailMagicLink !== undefined ? useEmailMagicLink : true;\n },\n\n showAuthCodeEntry() {\n this.noButtonBar = false;\n this.render();\n\n this.showCodeEntryField(true);\n this.showEnterAuthCodeInsteadLink(false);\n },\n\n showCodeEntryField(show = true) {\n const $textField = this.$el.find('.o-form-fieldset-container');\n $textField.toggle(show);\n },\n\n showEnterAuthCodeInsteadLink(show = true) {\n const $enterAuthCodeInsteadLink = this.$el.find(\n '.enter-auth-code-instead-link'\n );\n $enterAuthCodeInsteadLink.toggle(show);\n },\n })\n);\n\nexport default BaseAuthenticatorEmailView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseAuthenticatorEmailView from './BaseAuthenticatorEmailView';\nimport { getCheckYourEmailTitle, getEnterCodeLink } from './AuthenticatorEmailViewUtil';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorEmailView.prototype.Body;\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n Object.assign({\n resendEmailAction: 'currentAuthenticator-resend',\n\n initialize() {\n BaseAuthenticatorEmailForm.prototype.initialize.apply(this, arguments);\n\n const email = this.options.appState.get('user')?.identifier || {};\n\n const useEmailMagicLinkValue = this.isUseEmailMagicLink();\n\n if (useEmailMagicLinkValue !== undefined) {\n \n this.noButtonBar = true;\n this.events['click .enter-auth-code-instead-link'] = 'showAuthCodeEntry';\n\n if (useEmailMagicLinkValue) {\n this.add(getEnterCodeLink(), {\n prepend: true,\n selector: '.o-form-error-container',\n });\n } \n \n this.add(getCheckYourEmailTitle(), {\n prepend: true,\n selector: '.o-form-error-container',\n options: { email, useEmailMagicLinkValue },\n });\n } else {\n this.subtitle = loc('oie.email.enroll.subtitle', 'login');\n }\n },\n\n postRender() {\n if (this.isUseEmailMagicLink() !== undefined) {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n if (this.isUseEmailMagicLink()) {\n this.showCodeEntryField(false);\n } else {\n this.noButtonBar = false;\n }\n }\n },\n\n isUseEmailMagicLink() {\n return this.options.appState.get('currentAuthenticator')?.\n contextualData?.useEmailMagicLink;\n },\n\n showAuthCodeEntry() {\n this.noButtonBar = false;\n this.render();\n\n this.showCodeEntryField(true);\n this.showEnterAuthCodeInsteadLink(false);\n },\n\n showCodeEntryField(show = true) {\n const $textField = this.$el.find('.o-form-fieldset-container');\n $textField.toggle(show);\n },\n\n showEnterAuthCodeInsteadLink(show = true) {\n const $enterAuthCodeInsteadLink = this.$el.find(\n '.enter-auth-code-instead-link'\n );\n $enterAuthCodeInsteadLink.toggle(show);\n },\n })\n);\n\nexport default BaseAuthenticatorEmailView.extend({\n Body,\n});\n","const I18N_BASE_ATTRIBUTE_ENROLL_PROFILE_MAPPINGS = {\n /**\n * Mapping fields in the enroll profile remediation form to their i18n label for localization.\n */\n 'enroll-profile.userProfile.lastName': 'oie.user.profile.lastname',\n 'enroll-profile.userProfile.firstName': 'oie.user.profile.firstname',\n 'enroll-profile.userProfile.email': 'oie.user.profile.primary.email',\n 'enroll-profile.userProfile.secondEmail': 'oie.user.profile.secondary.email',\n 'enroll-profile.userProfile.middleName': 'oie.user.profile.middleName',\n 'enroll-profile.userProfile.honorificPrefix': 'oie.user.profile.honorificPrefix',\n 'enroll-profile.userProfile.honorificSuffix': 'oie.user.profile.honorificSuffix',\n 'enroll-profile.userProfile.title': 'oie.user.profile.title',\n 'enroll-profile.userProfile.displayName': 'oie.user.profile.displayName',\n 'enroll-profile.userProfile.nickName': 'oie.user.profile.nickName',\n 'enroll-profile.userProfile.profileUrl': 'oie.user.profile.profileUrl',\n 'enroll-profile.userProfile.mobilePhone': 'oie.user.profile.mobilePhone',\n 'enroll-profile.userProfile.primaryPhone': 'oie.user.profile.primaryPhone',\n 'enroll-profile.userProfile.streetAddress': 'oie.user.profile.streetAddress',\n 'enroll-profile.userProfile.city': 'oie.user.profile.city',\n 'enroll-profile.userProfile.state': 'oie.user.profile.state',\n 'enroll-profile.userProfile.zipCode': 'oie.user.profile.zipCode',\n 'enroll-profile.userProfile.postalCode': 'oie.user.profile.postalCode',\n 'enroll-profile.userProfile.countryCode': 'oie.user.profile.countryCode',\n 'enroll-profile.userProfile.postalAddress': 'oie.user.profile.postalAddress',\n 'enroll-profile.userProfile.preferredLanguage': 'oie.user.profile.preferredLanguage',\n 'enroll-profile.userProfile.locale': 'oie.user.profile.locale',\n 'enroll-profile.userProfile.timezone': 'oie.user.profile.timezone',\n 'enroll-profile.userProfile.userType': 'oie.user.profile.userType',\n 'enroll-profile.userProfile.employeeNumber': 'oie.user.profile.employeeNumber',\n 'enroll-profile.userProfile.costCenter': 'oie.user.profile.costCenter',\n 'enroll-profile.userProfile.organization': 'oie.user.profile.organization',\n 'enroll-profile.userProfile.division': 'oie.user.profile.division',\n 'enroll-profile.userProfile.department': 'oie.user.profile.department',\n 'enroll-profile.userProfile.managerId': 'oie.user.profile.managerId',\n 'enroll-profile.userProfile.manager': 'oie.user.profile.manager',\n 'enroll-profile.credentials.passcode': 'oie.password.label',\n};\n\nexport {\n I18N_BASE_ATTRIBUTE_ENROLL_PROFILE_MAPPINGS,\n};\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'google-authenticator-challenge',\n\n title() {\n return loc('oie.verify.google_authenticator.otp.title', 'login');\n },\n\n subtitle() {\n return loc('oie.verify.google_authenticator.otp.description', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { addCustomButton, BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport EnrollGoogleAuthenticatorBarcodeView from './EnrollGoogleAuthenticatorBarcodeView';\nimport EnrollAuthenticatorManualSetupView from './EnrollAuthenticatorManualSetupView';\n\nconst VIEW_TO_DISPLAY = 'viewToDisplay';\nconst viewToDisplayState = {\n BARCODE: 'barcode',\n MANUAL: 'manual',\n ENTER_CODE: 'enterCode',\n};\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.enroll.google_authenticator.setup.title', 'login');\n },\n\n noButtonBar: true,\n\n className: 'oie-enroll-google-authenticator',\n\n enterCodeSubtitle: View.extend({\n template: hbs`\n \n {{i18n code=\"oie.enroll.google_authenticator.enterCode.title\" bundle=\"login\"}}\n \n `,\n }),\n\n getUISchema() {\n const schema = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n const nextButton = addCustomButton({\n className: 'google-authenticator-next',\n title: loc('oform.next', 'login'),\n attributes: {\n style: 'display: block',\n },\n click: () => {\n this.model.set(VIEW_TO_DISPLAY, viewToDisplayState.ENTER_CODE);\n }\n });\n\n const verifyButton = addCustomButton({\n className: 'google-authenticator-verify',\n title: loc('oform.verify', 'login'),\n click: () => {\n this.$el.submit();\n }\n });\n\n schema[0].showWhen = {\n viewToDisplay: viewToDisplayState.ENTER_CODE,\n };\n\n // Add Enter Code Subtitle\n schema.unshift({\n View: this.enterCodeSubtitle,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.ENTER_CODE,\n }\n });\n\n schema.push(\n {\n View: EnrollGoogleAuthenticatorBarcodeView,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.BARCODE,\n }\n }, {\n View: EnrollAuthenticatorManualSetupView,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.MANUAL,\n }\n }, {\n label: false,\n className: 'shared-secret',\n type: 'text',\n placeholder: this.options.appState.get('currentAuthenticator').contextualData.sharedSecret,\n disabled: true,\n showWhen: {\n viewToDisplay: viewToDisplayState.MANUAL,\n }\n },\n {\n View: nextButton,\n showWhen: {\n viewToDisplay: (val) => val === viewToDisplayState.BARCODE || val === viewToDisplayState.MANUAL,\n }\n },\n {\n View: verifyButton,\n showWhen: {\n viewToDisplay: (val) => val === viewToDisplayState.ENTER_CODE,\n }\n },\n );\n return schema;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n viewToDisplay: {\n value: 'barcode',\n type: 'string',\n required: true,\n values: [viewToDisplayState.BARCODE, viewToDisplayState.MANUAL, viewToDisplayState.ENTER_CODE],\n }\n },\n ModelClass.prototype.local,\n );\n return ModelClass.extend({\n local,\n });\n },\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'oie-enroll-google-authenticator-manual-setup',\n template: hbs`\n \n {{i18n code=\"oie.enroll.google_authenticator.cannotScanBarcode.title\" bundle=\"login\"}}\n \n \n {{i18n code=\"oie.enroll.google_authenticator.manualSetupInstructions\" bundle=\"login\"}}\n
\n `,\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'oie-enroll-google-authenticator-barcode',\n template: hbs`\n {{#if href}}\n \n {{i18n code=\"oie.enroll.google_authenticator.scanBarcode.title\" bundle=\"login\"}}\n \n \n \n {{i18n code=\"oie.enroll.google_authenticator.scanBarcode.description\" bundle=\"login\"}}\n
\n \n \n {{/if}}\n `,\n\n getTemplateData() {\n const contextualData = this.options.appState.get('currentAuthenticator').contextualData;\n return { href: contextualData.qrcode?.href };\n },\n\n events: {\n 'click .cannot-scan-link': function(e) {\n e.preventDefault();\n this.options.model.set('viewToDisplay', 'manual');\n }\n },\n});\n","import { loc } from 'okta';\nimport BaseIdPAuthenticatorBody from './BaseIdPAuthenticatorBody';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseIdPAuthenticatorBody.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.enroll.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.enroll.description', 'login', [displayName]);\n },\n\n save() {\n return loc('mfa.enroll', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseIdPAuthenticatorBody from './BaseIdPAuthenticatorBody';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseIdPAuthenticatorBody.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.challenge.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.challenge.description', 'login', [displayName]);\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { BaseForm } from '../../internals';\n\nexport default BaseForm.extend({\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.model.set('useRedirect', true);\n }\n\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ON_PREM_TOKEN_CHANGE_KEY = 'errors.E0000113';\n\nconst Body = BaseForm.extend({\n\n className: 'on-prem-authenticator-verify',\n\n modelEvents: {\n 'error': '_checkTokenChange'\n },\n\n title() {\n const vendorName =\n this.options.appState.getAuthenticatorDisplayName() ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n return loc('oie.on_prem.verify.title', 'login', [vendorName]);\n },\n\n _checkTokenChange(model, convertedErrors) {\n const errorSummaryKeys = convertedErrors?.responseJSON?.errorSummaryKeys;\n if (errorSummaryKeys && errorSummaryKeys.includes(ON_PREM_TOKEN_CHANGE_KEY)) {\n // this means we are in change pin, so we should clear out answer input\n this.model.set('credentials.passcode', '');\n this.render();\n }\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ON_PREM_TOKEN_CHANGE_KEY = 'errors.E0000113';\n\nconst Body = BaseForm.extend({\n\n className: 'on-prem-authenticator-enroll',\n\n modelEvents: {\n 'error': '_checkTokenChange'\n },\n\n title() {\n const vendorName =\n this.options.appState.getAuthenticatorDisplayName() ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n return loc('oie.on_prem.enroll.title', 'login', [vendorName]);\n },\n\n _checkTokenChange(model, convertedErrors) {\n const errorSummaryKeys = convertedErrors?.responseJSON?.errorSummaryKeys;\n if (errorSummaryKeys && errorSummaryKeys.includes(ON_PREM_TOKEN_CHANGE_KEY)) {\n // this means we are in change pin, so we should clear out answer input\n this.model.set('credentials.passcode', '');\n this.render();\n }\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { Collection } from 'okta';\nimport { BaseForm } from '../../internals';\nimport AuthenticatorVerifyOptions from '../../components/AuthenticatorVerifyOptions';\nimport { getAuthenticatorDataForVerification } from '../../utils/AuthenticatorUtil';\nimport { Body as SelectAuthenticatorVerifyViewBody } from '../SelectAuthenticatorVerifyView';\nimport { AUTHENTICATOR_KEY } from '../../../ion/RemediationConstants';\n\nconst Body = SelectAuthenticatorVerifyViewBody.extend({\n getUISchema() {\n // Change the UI schema to not display radios here.\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n const methodsSchema = uiSchemas.find(schema => schema.name === 'authenticator.methodType');\n\n this._sortMethodOptionsIfDeviceKnown(methodsSchema.options);\n\n const methodOptions = methodsSchema.options.map((option) => {\n return Object.assign({}, option, getAuthenticatorDataForVerification({authenticatorKey: AUTHENTICATOR_KEY.OV}));\n });\n return [{\n View: AuthenticatorVerifyOptions,\n options: {\n name: methodsSchema.name,\n collection: new Collection(methodOptions),\n }\n }];\n },\n\n // If the `deviceKnown` attribute is true, we should put the signed_nonce method to the top of authenticator list.\n // This is in sync with v2/ion/ui-schema/ion-object-handler.js - createOVOptions\n _sortMethodOptionsIfDeviceKnown(methodOptions) {\n // Check if the `deviceKnown` attribute is true\n const deviceKnown = this.options?.currentViewState?.relatesTo?.value?.deviceKnown;\n\n if (deviceKnown) {\n const signedNonceIndex = methodOptions.findIndex((e) => e.value === 'signed_nonce');\n\n if (signedNonceIndex > 0) {\n const signedNonceModel = methodOptions[signedNonceIndex];\n\n // Put the 'signed_nonce' option to the top of the list\n methodOptions.splice(signedNonceIndex, 1);\n methodOptions.unshift(signedNonceModel);\n }\n }\n }\n});\n\nexport default Body;\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\n\nconst Body = BaseForm.extend(Object.assign({\n className: 'okta-verify-send-push-form',\n\n save() {\n return loc('oie.okta_verify.sendPushButton', 'login');\n },\n\n title() {\n return loc('oie.okta_verify.push.title', 'login');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n // Move checkbox below the button\n // Checkbox is rendered by BaseForm using remediation response and \n // hence by default always gets added above buttons.\n const checkbox = this.$el.find('[data-se=\"o-form-fieldset-authenticator.autoChallenge\"]');\n checkbox.length && this.$el.find('.o-form-button-bar').after(checkbox);\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n}));\n \nexport default Body;\n","import { BaseFooter } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport \nChallengeAuthenticatorDataOktaVerifyPushOnlyFormView\n from './ChallengeAuthenticatorDataOktaVerifyPushOnlyFormView';\nimport ChallengeAuthenticatorDataOktaVerifyFormView from './ChallengeAuthenticatorDataOktaVerifyFormView';\n\nexport default BaseAuthenticatorView.extend({\n initialize() {\n BaseAuthenticatorView.prototype.initialize.apply(this, arguments);\n if (this.isPushOnlyWithAutoChallengeFlow()) {\n this.Body = ChallengeAuthenticatorDataOktaVerifyPushOnlyFormView;\n } else {\n this.Body = ChallengeAuthenticatorDataOktaVerifyFormView;\n this.Footer = BaseFooter;\n }\n },\n\n isPushOnlyWithAutoChallengeFlow() {\n const methodType = this.options.appState.getSchemaByName('authenticator.methodType');\n const hasAutoChallengeSchema = this.options.appState.getSchemaByName('authenticator.autoChallenge');\n const methodTypeOptions = methodType?.options;\n return hasAutoChallengeSchema && methodTypeOptions.length === 1 && methodTypeOptions[0].value === 'push';\n },\n});\n","import { _, createCallout } from 'okta';\nimport { BaseOktaVerifyChallengeView } from '../../internals';\nimport { getBiometricsErrorOptions } from '../../utils/ChallengeViewUtil';\n\nconst Body = BaseOktaVerifyChallengeView.extend({\n getDeviceChallengePayload() {\n return this.options.currentViewState.relatesTo.value.contextualData.challenge.value;\n },\n\n showCustomFormErrorCallout(error) {\n const options = getBiometricsErrorOptions(error, false);\n \n // If not biometrics error, just show the returned error message\n if (_.isEmpty(options)) {\n return false;\n }\n\n this.showMessages(createCallout(options));\n return true;\n },\n});\n\nexport default Body;\n","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst OV_NMC_FORCE_UPGRAGE_SERVER_KEY = 'oie.authenticator.app.method.push.force.upgrade.number_challenge';\nconst OV_UV_ENABLE_BIOMETRIC_SERVER_KEY = 'oie.authenticator.app.method.push.verify.enable.biometrics';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'okta-verify-resend-push',\n\n title() {\n return loc('oie.okta_verify.push.title', 'login');\n },\n\n save() {\n return loc('oie.okta_verify.push.resend', 'login');\n },\n\n showMessages() {\n let options = {};\n if (this.options.appState.containsMessageWithI18nKey(OV_NMC_FORCE_UPGRAGE_SERVER_KEY)) {\n // add a title for OV force upgrade\n options.title = loc('oie.numberchallenge.force.upgrade.title', 'login');\n } else if (this.options.appState.containsMessageWithI18nKey(OV_UV_ENABLE_BIOMETRIC_SERVER_KEY)) {\n // add a title for OV enable biometrics message during verification\n options.content = null;\n options.className = 'okta-verify-uv-callout-content';\n options.title = loc('oie.authenticator.app.method.push.verify.enable.biometrics.title', 'login');\n options.subtitle = loc('oie.authenticator.app.method.push.verify.enable.biometrics.description', 'login');\n options.type = 'error';\n options.bullets = [\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point3', 'login')\n ];\n options = createCallout(options);\n }\n BaseForm.prototype.showMessages.call(this, options);\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { BaseForm } from '../../internals';\nimport { loc, createCallout, _ } from 'okta';\nimport { getBiometricsErrorOptions } from '../../utils/ChallengeViewUtil';\n\n// for EA,\n// redirect is needed for Apple SSO Extension to intercept the request, because\n// - XHR request is not interceptable\n// - form post is interceptable, but some app (Outlook) closes the app after\n// We may have a different approach/UX for GA\nconst Body = BaseForm.extend({\n noButtonBar: true,\n\n className: 'ion-form device-challenge-poll',\n\n title() {\n return loc('deviceTrust.sso.redirectText', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n\n this.listenTo(this.model, 'error', () => {\n this.$('.spinner').hide();\n });\n this.add('');\n\n const isGetMethod = this.options.currentViewState?.method?.toLowerCase() === 'get';\n this.model.set('useRedirect', isGetMethod);\n this.trigger('save', this.model);\n },\n\n showCustomFormErrorCallout(error) {\n const options = getBiometricsErrorOptions(error, false);\n \n // If not biometrics error, just show the returned error message\n if (_.isEmpty(options)) {\n return false;\n }\n\n this.showMessages(createCallout(options));\n return true;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst OV_UV_ENABLE_BIOMETRIC_SERVER_KEY = 'oie.authenticator.oktaverify.method.totp.verify.enable.biometrics';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'okta-verify-totp-challenge',\n\n title() {\n return loc('oie.okta_verify.totp.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n showCustomFormErrorCallout(error) {\n const errorSummaryKeys = error?.responseJSON?.errorSummaryKeys;\n let options;\n if (errorSummaryKeys && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRIC_SERVER_KEY)) {\n options = {\n type: 'error',\n className: 'okta-verify-uv-callout-content',\n title: loc('oie.authenticator.app.method.push.verify.enable.biometrics.title', 'login'),\n subtitle: loc('oie.authenticator.app.method.push.verify.enable.biometrics.description', 'login'),\n bullets: [\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point3', 'login')\n ],\n };\n this.showMessages(createCallout(options));\n return true;\n }\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { Body as ChallengePushViewBody } from '../shared/ChallengePushView';\nimport ChallengeOktaVerifyFastPassView from './ChallengeOktaVerifyFastPassView';\nimport NumberChallengePushView from './NumberChallengePushView';\nimport { AUTHENTICATOR_METHODS } from '../../../ion/RemediationConstants';\n\nexport default BaseAuthenticatorView.extend({\n initialize() {\n BaseAuthenticatorView.prototype.initialize.apply(this, arguments);\n const currentAuthenticator = this.options?.appState?.get('currentAuthenticator');\n const selectedMethod = currentAuthenticator?.methods[0];\n if (selectedMethod?.type === AUTHENTICATOR_METHODS.PUSH &&\n currentAuthenticator?.contextualData?.correctAnswer) {\n this.Body = NumberChallengePushView;\n } else if (selectedMethod?.type === AUTHENTICATOR_METHODS.PUSH) {\n this.Body = ChallengePushViewBody;\n } else {\n this.Body = ChallengeOktaVerifyFastPassView;\n }\n },\n});\n","import { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n template: hbs`\n {{#if href}}\n \n - {{i18n code=\"oie.enroll.okta_verify.qrcode.step1\" bundle=\"login\"}}
\n - {{i18n code=\"oie.enroll.okta_verify.qrcode.step2\" bundle=\"login\"}}
\n - {{i18n code=\"oie.enroll.okta_verify.qrcode.step3\" bundle=\"login\"}}
\n
\n \n 
\n \n {{/if}}\n {{#if email}}\n \n - {{{i18n code=\"oie.enroll.okta_verify.email.info\" bundle=\"login\" arguments=\"email\"}}}
\n \n
\n {{/if}}\n {{#if phoneNumber}}\n \n - {{{i18n code=\"oie.enroll.okta_verify.sms.info\" bundle=\"login\" arguments=\"phoneNumber\"}}}
\n \n
\n {{/if}}\n `,\n getTemplateData() {\n const contextualData = this.options.appState.get('currentAuthenticator').contextualData;\n return {\n href: contextualData.qrcode?.href,\n email: _.escape(contextualData?.email),\n phoneNumber: _.escape(contextualData?.phoneNumber),\n };\n }\n});\n","import { loc } from 'okta';\nimport { BaseFormWithPolling } from '../../internals';\nimport BrowserFeatures from '../../../../util/BrowserFeatures';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport polling from '../shared/polling';\nimport { FORMS as RemediationForms } from '../../../ion/RemediationConstants';\nimport OVResendView from './OVResendView';\nimport SwitchEnrollChannelLinkView from './SwitchEnrollChannelLinkView';\nimport EnrollChannelPollDescriptionView from './EnrollChannelPollDescriptionView';\n\nconst OV_FORCE_FIPS_COMPLIANCE_UPGRAGE_KEY_IOS =\n 'oie.authenticator.app.non_fips_compliant_enrollment_device_incompatible';\nconst OV_FORCE_FIPS_COMPLIANCE_UPGRAGE_KEY_NON_IOS =\n 'oie.authenticator.app.non_fips_compliant_enrollment_app_update_required';\nconst OV_QR_ENROLL_ENABLE_BIOMETRICS_KEY = 'oie.authenticator.app.method.push.enroll.enable.biometrics';\n\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n title() {\n const selectedChannel = this.options.appState.get('currentAuthenticator').contextualData.selectedChannel;\n let title;\n switch (selectedChannel) {\n case 'email':\n title = loc('oie.enroll.okta_verify.setup.email.title', 'login');\n break;\n case 'sms':\n title = loc('oie.enroll.okta_verify.setup.sms.title', 'login');\n break;\n default:\n title = loc('oie.enroll.okta_verify.setup.title', 'login');\n }\n return title;\n },\n className: 'oie-enroll-ov-poll',\n noButtonBar: true,\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n this.listenTo(this.model, 'error', this.stopPolling);\n this.startPolling();\n },\n postRender() {\n BaseFormWithPolling.prototype.postRender.apply(this, arguments);\n\n if ((BrowserFeatures.isAndroid() || BrowserFeatures.isIOS()) &\n this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'qrcode') {\n this.options.appState.trigger('switchForm', RemediationForms.SELECT_ENROLLMENT_CHANNEL);\n }\n },\n showMessages() {\n // override showMessages to display custom callout\n const calloutOptions = {};\n if (this.options.appState.containsMessageWithI18nKey(OV_FORCE_FIPS_COMPLIANCE_UPGRAGE_KEY_IOS) ||\n this.options.appState.containsMessageWithI18nKey(OV_FORCE_FIPS_COMPLIANCE_UPGRAGE_KEY_NON_IOS)) {\n // add a title for ov force upgrade\n calloutOptions.title = loc('oie.okta_verify.enroll.force.upgrade.title', 'login');\n } else if (this.options.appState.containsMessageWithI18nKey(OV_QR_ENROLL_ENABLE_BIOMETRICS_KEY)) {\n // add a title for OV enable biometrics message during enrollment\n calloutOptions.title = loc('oie.authenticator.app.method.push.enroll.enable.biometrics.title', 'login');\n }\n BaseFormWithPolling.prototype.showMessages.call(this, calloutOptions);\n },\n getUISchema() {\n const schema = [];\n const contextualData = this.options.appState.get('currentAuthenticator').contextualData;\n const selectedChannel = contextualData.selectedChannel;\n schema.push({\n View: EnrollChannelPollDescriptionView,\n });\n schema.push({\n View: SwitchEnrollChannelLinkView,\n options: {\n selectedChannel\n },\n selector: selectedChannel === 'qrcode' ? '.qrcode-container' : '.switch-channel-content',\n });\n if (['email', 'sms'].includes(selectedChannel)) {\n schema.push({\n View: OVResendView,\n selector: '.o-form-error-container',\n });\n }\n return schema;\n },\n remove() {\n BaseFormWithPolling.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n },\n\n polling,\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, _, Model } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport CountryUtil from '../../../../util/CountryUtil';\nimport SwitchEnrollChannelLinkView from './SwitchEnrollChannelLinkView';\n\nconst Body = BaseForm.extend({\n className: 'oie-enroll-ov-data',\n title() {\n return this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'email' ?\n loc('oie.enroll.okta_verify.enroll.channel.email.title', 'login'):\n loc('oie.enroll.okta_verify.enroll.channel.sms.title', 'login');\n },\n\n save() {\n return loc('oie.enroll.okta_verify.setupLink', 'login');\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n const phoneNumberUISchema = _.find(uiSchemas, ({ name }) => name === 'phoneNumber');\n const phoneNumberUISchemaIndex = _.findIndex(uiSchemas, ({ name }) => name === 'phoneNumber');\n\n const countryUISchema = {\n 'label-top': true,\n label: loc('country.label', 'login'),\n type: 'select',\n options: CountryUtil.getCountries(),\n name: 'country',\n wide: true,\n };\n\n // Create an input group - serves as a display wrapper\n const phoneNumberWithCodeUISchema = {\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n type: 'group',\n modelType: 'string',\n 'label-top': true,\n name: 'phoneCode',\n input: [\n {\n type: 'label',\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: `+${this.model.get('phoneCode')}`,\n className: 'country-code-label no-translate',\n },\n Object.assign({}, phoneNumberUISchema),\n ],\n };\n\n if (phoneNumberUISchemaIndex !== -1) {\n // Replace phoneNumberUISchema and add countryUISchema before phone.\n uiSchemas.splice(phoneNumberUISchemaIndex, 1, countryUISchema, phoneNumberWithCodeUISchema);\n }\n\n const description = {\n View: this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'email' ?\n loc('oie.enroll.okta_verify.channel.email.description', 'login'):\n loc('oie.enroll.okta_verify.channel.sms.description', 'login'),\n selector: '.o-form-fieldset-container',\n };\n\n uiSchemas.push(description);\n return uiSchemas;\n },\n\n handlePhoneCodeChange() {\n const countryCodeField = this.el.querySelector('.country-code-label');\n countryCodeField.innerText = `+${this.model.get('phoneCode')}`;\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n if (this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'sms') {\n this.listenTo(this.model, 'change:phoneCode', this.handlePhoneCodeChange.bind(this));\n }\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n if (this.options.appState.get('currentAuthenticator').contextualData.selectedChannel !== 'sms') {\n return ModelClass;\n }\n const local = Object.assign(\n {\n country: {\n // Set default country to \"US\"\n 'value': 'US',\n 'type': 'string',\n },\n },\n ModelClass.prototype.local,\n );\n const derived = Object.assign(\n {\n phoneCode: {\n deps: [ 'country'],\n fn: function(country) {\n return CountryUtil.getCallingCodeForCountry(country);\n },\n },\n },\n ModelClass.prototype.derived,\n );\n return ModelClass.extend({\n local,\n derived,\n toJSON: function() {\n const modelJSON = Model.prototype.toJSON.call(this, arguments);\n const phoneCode = this.get('phoneCode');\n\n // Add country code..\n let formattedPhoneNumber = `+${phoneCode}${modelJSON.phoneNumber}`;\n\n // Override phone with formatted number..\n modelJSON.phoneNumber = formattedPhoneNumber;\n return modelJSON;\n },\n });\n },\n postRender() {\n this.add(SwitchEnrollChannelLinkView, 'form');\n },\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nconst NumberChallengePhoneView = View.extend({\n className: 'number-challenge-section',\n template: hbs`\n \n {{i18n\n code=\"oie.numberchallenge.instruction\"\n bundle=\"login\"\n arguments=\"correctAnswer\"\n $1=\"$1\"}}\n
\n \n \n \n {{correctAnswer}}\n \n \n \n \n `,\n getTemplateData() {\n const correctAnswer = this.options.appState.get('currentAuthenticator')?.contextualData?.correctAnswer;\n return {\n correctAnswer\n };\n },\n});\n\n\nexport default NumberChallengePhoneView;\n","import { loc } from 'okta';\nimport { BaseFormWithPolling } from '../../internals';\nimport polling from '../shared/polling';\nimport ResendNumberChallengeView from './ResendNumberChallengeView';\nimport NumberChallengePhoneView from './NumberChallengePhoneView';\n\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n noButtonBar: true,\n\n className: 'okta-verify-number-challenge',\n\n events: {\n 'click a.resend-number-challenge': 'handleResendNumberChallenge'\n },\n\n handleResendNumberChallenge() {\n this.options.appState.trigger('invokeAction', 'currentAuthenticator-resend');\n // hide the warning\n this.options.appState.trigger('hideNumberChallengeWarning');\n },\n\n title() {\n return loc('oie.okta_verify.push.sent', 'login');\n },\n\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n this.add(NumberChallengePhoneView);\n },\n\n triggerAfterError() {\n BaseFormWithPolling.prototype.triggerAfterError.apply(this, arguments);\n this.stopPolling();\n this.$el.find('.o-form-fieldset-container').empty();\n },\n\n postRender() {\n BaseFormWithPolling.prototype.postRender.apply(this, arguments);\n this.startPoll();\n },\n\n startPoll() {\n this.startPolling();\n this.addWarning();\n },\n\n stopPoll() {\n this.stopPolling();\n },\n\n addWarning() {\n this.add(ResendNumberChallengeView, '.o-form-error-container');\n this.options.appState.trigger('showNumberChallengeWarning');\n },\n\n remove() {\n BaseFormWithPolling.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n },\n\n polling,\n));\n\nexport default Body;\n","import { createCallout } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseResendView from '../shared/BaseResendView';\n\nexport default BaseResendView.extend({\n //only show after certain threshold of polling\n className: 'hide resend-ov-link-view',\n events: {\n 'click a.resend-link' : 'handelResendLink'\n },\n\n initialize() {\n const selectedChannel = this.options.appState.get('currentAuthenticator').contextualData.selectedChannel;\n this.add(createCallout({\n content: selectedChannel === 'email' ?\n hbs `{{{i18n code=\"oie.enroll.okta_verify.email.notReceived\" bundle=\"login\"}}}`:\n hbs `{{{i18n code=\"oie.enroll.okta_verify.sms.notReceived\" bundle=\"login\"}}}`,\n type: 'warning',\n }));\n },\n\n handelResendLink() {\n this.options.appState.trigger('invokeAction', 'currentAuthenticator-resend');\n //hide warning, but reinitiate to show warning again after some threshold of polling\n this.$el.addClass('hide');\n this.showCalloutAfterTimeout();\n },\n});\n","import { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { WARNING_TIMEOUT } from '../../utils/Constants';\n\nconst ResendNumberChallengeView = View.extend({\n initialize() {\n this.listenTo(this.options.appState, 'showNumberChallengeWarning', () => {\n this.startWarningTimeout();\n });\n\n this.listenTo(this.options.appState, 'hideNumberChallengeWarning', () => {\n this.clearWarning();\n });\n },\n className: 'resend-number-challenge-warning hide',\n template: hbs`\n \n \n {{i18n\n code=\"oie.numberchallenge.warning\"\n bundle=\"login\"\n $1=\"$1\"}}\n
\n \n `,\n showWarning() {\n this.$el.removeClass('hide');\n },\n clearWarning() {\n this.$el.addClass('hide');\n clearTimeout(this.warningTimeout);\n this.startWarningTimeout();\n },\n startWarningTimeout() {\n this.warningTimeout = setTimeout(_.bind(function() {\n this.showWarning();\n }, this), WARNING_TIMEOUT);\n }\n});\n\nexport default ResendNumberChallengeView;\n","import { loc, _ } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BrowserFeatures from '../../../../util/BrowserFeatures';\n\nconst Body = BaseForm.extend({\n title() {\n return (BrowserFeatures.isAndroid() || BrowserFeatures.isIOS())\n ? loc('oie.enroll.okta_verify.setup.title', 'login')\n : loc('oie.enroll.okta_verify.select.channel.title', 'login');\n },\n getUISchema() {\n const schemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n // filter selected channel\n const channelField = _.find(schemas, (schema) => schema.name === 'authenticator.channel');\n channelField.options = _.filter(channelField?.options, (option) =>\n option.value !== this.options.appState.get('currentAuthenticator')?.contextualData?.selectedChannel);\n channelField.value = channelField.options[0]?.value;\n const description = {\n View: loc('oie.enroll.okta_verify.select.channel.description', 'login'),\n selector: '.o-form-fieldset-container',\n };\n return [description, ...schemas];\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { FORMS as RemediationForms } from '../../../ion/RemediationConstants';\n\nexport default View.extend({\n className: 'switch-channel-text',\n template: hbs `\n {{#if isQRcodeChannel}}\n \n {{i18n code=\"enroll.totp.cannotScan\" bundle=\"login\"}}\n {{else}}\n {{{i18n code=\"oie.enroll.okta_verify.switch.channel.link.text\" bundle=\"login\"}}}\n {{/if}}`,\n getTemplateData() {\n return {\n isQRcodeChannel: this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'qrcode',\n };\n },\n postRender() {\n this.$el.find('.switch-channel-link').on('click', (event) => {\n const appState = this.options.appState;\n event.preventDefault();\n appState.trigger('switchForm', RemediationForms.SELECT_ENROLLMENT_CHANNEL);\n });\n },\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport AuthenticatorFooter from '../../components/AuthenticatorFooter';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { getForgotPasswordLink } from '../../utils/LinksUtil';\nimport { isCustomizedI18nKey } from '../../../ion/i18nTransformer';\n\n\nconst Body = BaseForm.extend({\n\n title: function() {\n return loc('oie.password.challenge.title', 'login');\n },\n\n save: function() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n /**\n * Update UI schemas for customization from .widgetrc.js or Admin Customization settings page.\n * @returns Array\n */\n getUISchema() {\n const schemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n const { settings } = this.options;\n const passwordExplainLabeli18nKey = 'primaryauth.password.tooltip';\n\n const passwordSchema = schemas.find(({name}) => name === 'credentials.passcode');\n\n if (passwordSchema && isCustomizedI18nKey(passwordExplainLabeli18nKey, settings)) {\n passwordSchema.explain = loc(passwordExplainLabeli18nKey, 'login');\n passwordSchema['explain-top'] = true;\n }\n\n return schemas;\n },\n\n});\n\nconst Footer = AuthenticatorFooter.extend({\n links: function() {\n let links = AuthenticatorFooter.prototype.links.apply(this, arguments);\n\n links = getForgotPasswordLink(this.options.appState, this.options.settings).concat(links);\n\n return links;\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n Footer,\n});\n","import { loc } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport {\n getPasswordComplexityDescriptionForHtmlList,\n removeRequirementsFromError } from '../../utils/AuthenticatorUtil';\nimport { generatePasswordPolicyHtml } from './PasswordPolicyUtil';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.password.enroll.title', 'login');\n },\n save() {\n return loc('oform.next', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n const policy = this.getPasswordPolicySettings();\n this.displayPasswordPolicy(policy);\n },\n\n displayPasswordPolicy(policy) {\n if (policy) {\n const rulesList = getPasswordComplexityDescriptionForHtmlList( policy );\n generatePasswordPolicyHtml(this, rulesList, true);\n }\n },\n\n triggerAfterError(model, error) {\n error.responseJSON = removeRequirementsFromError(error.responseJSON);\n this.options.appState.trigger('afterError', error);\n },\n\n getPasswordPolicySettings() {\n // This will be overridden by following scenario since the policies could be different for those.\n // - password reset (`ReEnrollAuthenticatorPasswordView.js`)\n //\n const relatesToObject = this.options.currentViewState.relatesTo;\n return relatesToObject?.value?.settings;\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.concat([\n {\n name: 'confirmPassword',\n label: loc('oie.password.confirmPasswordLabel','login'),\n type: 'password',\n 'label-top': true,\n params: {\n showPasswordToggle: this.settings.get('showPasswordToggle'),\n }\n }\n ]);\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n\n Body,\n\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n confirmPassword: {\n type: 'string',\n required: true,\n }\n },\n ModelClass.prototype.local,\n );\n return ModelClass.extend({\n local,\n validate() {\n if (this.get('credentials.passcode') !== this.get('confirmPassword') &&\n this.get('credential.value') !== this.get('confirmPassword')) {\n const errors = {\n 'confirmPassword': loc('password.error.match', 'login'),\n };\n return errors;\n } else {\n return null;\n }\n }\n });\n }\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nconst generatePasswordPolicyHtml = function(form, rulesList, prepend) {\n form.add(\n View.extend({\n tagName: 'section',\n template:\n hbs`\n {{i18n code=\"password.complexity.requirements.header\" bundle=\"login\"}}\n \n \n {{#each rulesList}}- {{this}}
{{/each}}\n
`,\n getTemplateData: () => ({ rulesList }),\n attributes: {\n 'data-se': 'password-authenticator--rules'\n }\n }),\n {\n prepend,\n selector: '.o-form-fieldset-container',\n }\n );\n};\n\nexport {\n generatePasswordPolicyHtml,\n};","import { loc } from 'okta';\nimport EnrollAuthenticatorPasswordView from './EnrollAuthenticatorPasswordView';\n\nconst Body = EnrollAuthenticatorPasswordView.prototype.Body.extend({\n\n className: 'password-authenticator',\n\n title() {\n const title = this.options.settings.get('brandName')?\n loc('password.expired.title.specific', 'login', [this.options.settings.get('brandName')]):\n loc('password.expired.title.generic', 'login');\n return title;\n },\n\n save() {\n return loc('password.expired.submit', 'login');\n },\n\n getPasswordPolicySettings() {\n return this.options.appState.get('recoveryAuthenticator')?.settings\n || this.options.appState.get('enrollmentAuthenticator')?.settings;\n },\n\n});\n\nexport default EnrollAuthenticatorPasswordView.extend({ Body });\n","import { loc } from 'okta';\nimport { BaseFooter } from '../../internals';\nimport EnrollAuthenticatorPasswordView from './EnrollAuthenticatorPasswordView';\n\nconst Body = EnrollAuthenticatorPasswordView.prototype.Body.extend({\n className: 'password-authenticator',\n subtitle() {\n if (this.options.settings.get('brandName')) {\n return loc('password.expiring.subtitle.specific', 'login', [this.options.settings.get('brandName')]);\n }\n },\n title() {\n const passwordPolicy = this.getPasswordPolicySettings() || {};\n const daysToExpiry = passwordPolicy.daysToExpiry;\n\n if (daysToExpiry > 0) {\n return loc('password.expiring.title', 'login', [daysToExpiry]);\n } else if (daysToExpiry === 0) {\n return loc('password.expiring.today', 'login');\n } else {\n return loc('password.expiring.soon', 'login');\n }\n },\n\n save() {\n return loc('password.expired.submit', 'login');\n },\n showMessages() {\n // if brandName is configured and messages is present, render as subtitle with brandName in context\n if (this.options.settings.get('brandName')) {\n return null;\n }\n // else if brandName is not set, render messages object sent from server as text\n EnrollAuthenticatorPasswordView.prototype.Body.prototype.showMessages.apply(this, arguments);\n },\n});\n\nconst Footer = BaseFooter.extend({\n links() {\n const links = [];\n if (this.options.appState.hasRemediationObject('skip')) {\n links.push({\n 'type': 'link',\n 'label': loc('password.expiring.later', 'login'),\n 'name': 'skip',\n 'actionPath': 'skip',\n });\n }\n return links;\n }\n});\n\nexport default EnrollAuthenticatorPasswordView.extend({ Body, Footer });\n","import { loc } from 'okta';\nimport EnrollAuthenticatorPasswordView from './EnrollAuthenticatorPasswordView';\n\nconst Body = EnrollAuthenticatorPasswordView.prototype.Body.extend({\n\n className: 'password-authenticator',\n\n title() {\n const title = this.options.settings.get('brandName')?\n loc('password.reset.title.specific', 'login', [this.options.settings.get('brandName')]):\n loc('password.reset.title.generic', 'login');\n return title;\n },\n\n save() {\n return loc('password.reset', 'login');\n },\n\n});\n\nexport default EnrollAuthenticatorPasswordView.extend({ Body });\n","import { _, loc } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend(\n {\n className: 'phone-authenticator-challenge',\n events: {\n 'click a.phone-authenticator-challenge__link' : 'handleSecondaryLinkClick'\n },\n\n title() {\n return loc('oie.phone.verify.title', 'login');\n },\n\n save() {\n return (this.model.get('primaryMode') === 'sms')\n ? loc('oie.phone.sms.primaryButton', 'login')\n : loc('oie.phone.call.primaryButton', 'login');\n },\n\n handleSecondaryLinkClick() {\n // Call the API to send a code via secondary mode\n const secondaryMode = this.model.get('secondaryMode');\n this.model.set('authenticator.methodType', secondaryMode);\n this.saveForm(this.model);\n },\n\n initialize() {\n // This is needed when user clicks on secondary (say voice) and call fails with ratelimit server-side error.\n // Then the user clicks primary button (say sms) and right methodType needs to be sent.\n this.model.on('error', () => this.model.set('authenticator.methodType', this.model.get('primaryMode')));\n BaseForm.prototype.initialize.apply(this, arguments);\n const sendText = ( this.model.get('primaryMode') === 'sms' )\n ? loc('oie.phone.verify.sms.sendText', 'login')\n : loc('oie.phone.verify.call.sendText', 'login');\n const carrierChargesText = loc('oie.phone.carrier.charges', 'login');\n const extraCssClasses =\n this.model.get('phoneNumber') !== loc('oie.phone.alternate.title', 'login') ?\n 'strong no-translate' : '';\n // Courage doesn't support HTML, hence creating a subtitle here.\n this.add(`${sendText}\n ${this.model.escape('phoneNumber')}\n ${carrierChargesText}
\n `);\n },\n\n getUISchema() {\n // Change the UI schema to not display radios here.\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n const secondaryMode = this.model.get('secondaryMode');\n if (secondaryMode) {\n const secondaryButtonTitle = (secondaryMode === 'sms')\n ? loc('oie.phone.sms.secondaryButton', 'login')\n : loc('oie.phone.call.secondaryButton', 'login');\n this.add(\n `${secondaryButtonTitle}`,\n '.o-form-button-bar');\n }\n },\n },\n);\n\nexport default BaseAuthenticatorView.extend({\n Body,\n\n createModelClass({ uiSchema }) {\n // It is important to get methods from here to maintain single source of truth.\n const { options: methods } = _.find(uiSchema, schema => schema.name === 'authenticator.methodType');\n const relatesToObject = this.options.currentViewState.relatesTo;\n const { profile } = relatesToObject?.value || {};\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign({\n primaryMode: {\n 'value': methods[0].value,\n 'type': 'string',\n },\n secondaryMode: {\n 'value': methods[1] && methods[1].value,\n 'type': 'string',\n },\n phoneNumber: {\n 'value': profile?.phoneNumber ? profile.phoneNumber : loc('oie.phone.alternate.title', 'login'),\n 'type': 'string',\n },\n }, ModelClass.prototype.local);\n return ModelClass.extend({ local });\n },\n});\n","import { loc, createCallout } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BaseResendView from '../shared/BaseResendView';\n\nconst ResendView = BaseResendView.extend(\n {\n // To be shown after a timeout\n className: 'phone-authenticator-challenge__resend-warning hide',\n events: {\n 'click a.resend-link': 'handleResendLink'\n },\n\n // Override this to change the resend action location from response\n resendActionKey: 'currentAuthenticatorEnrollment-resend',\n\n initialize() {\n const resendText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.resendText', 'login')\n : loc('oie.phone.verify.call.resendText', 'login');\n const linkText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.resendLinkText', 'login')\n : loc('oie.phone.verify.call.resendLinkText', 'login');\n this.add(createCallout({\n content: `${resendText} ${linkText}`,\n type: 'warning',\n }));\n },\n\n handleResendLink() {\n this.options.appState.trigger('invokeAction', this.resendActionKey);\n // Hide warning, but start a timeout again..\n if (!this.el.classList.contains('hide')) {\n this.el.classList.add('hide');\n }\n this.showCalloutAfterTimeout();\n },\n },\n);\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'phone-authenticator-challenge',\n\n title() {\n return loc('oie.phone.verify.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n const sendText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.codeSentText', 'login')\n : loc('mfa.calling', 'login');\n const enterCodeText = loc('oie.phone.verify.enterCodeText', 'login');\n const carrierChargesText = loc('oie.phone.carrier.charges', 'login');\n\n const strongClass = this.model.get('phoneNumber') !== loc('oie.phone.alternate.title', 'login') ?\n 'strong no-translate' : '';\n // Courage doesn't support HTML, hence creating a subtitle here.\n this.add(`\n ${sendText} ${this.model.escape('phoneNumber')}.\n ${enterCodeText}\n ${carrierChargesText}
\n `, {\n prepend: true,\n selector: '.o-form-fieldset-container',\n });\n },\n\n postRender() {\n BaseForm.prototype.postRender.apply(this, arguments);\n this.add(ResendView, {\n selector: '.o-form-info-container',\n prepend: true,\n });\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n\n createModelClass() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const { methods, profile } = relatesToObject?.value || {};\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign({\n mode: {\n 'value': methods[0].type,\n 'type': 'string',\n },\n phoneNumber: {\n 'value': profile?.phoneNumber ? profile.phoneNumber : loc('oie.phone.alternate.title', 'login'),\n 'type': 'string',\n }\n }, ModelClass.prototype.local );\n return ModelClass.extend({ local });\n },\n});\n\nexport { ResendView };","import { _, loc, Model } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport CountryUtil from '../../../../util/CountryUtil';\n\nconst Body = BaseForm.extend({\n\n className: 'phone-authenticator-enroll',\n\n title() {\n return loc('oie.phone.enroll.title', 'login');\n },\n\n subtitle() {\n return this.model.get('authenticator.methodType') === 'voice'\n ? loc('oie.phone.enroll.call.subtitle', 'login')\n : loc('oie.phone.enroll.sms.subtitle', 'login');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n const selectedMethod = this.model.get('authenticator.methodType');\n const phoneField = this.el.querySelector('.phone-authenticator-enroll__phone');\n const extensionField = this.el.querySelector('.phone-authenticator-enroll__phone-ext');\n\n if (selectedMethod === 'voice') {\n if (!phoneField.classList.contains('phone-authenticator-enroll__phone--small')) {\n phoneField.classList.add('phone-authenticator-enroll__phone--small');\n }\n extensionField.classList.remove('hide');\n }\n\n if (selectedMethod === 'sms') {\n phoneField.classList.remove('phone-authenticator-enroll__phone--small');\n if (!extensionField.classList.contains('hide')) {\n extensionField.classList.add('hide');\n }\n }\n\n this.el.querySelector('.phone-authenticator-enroll__phone-code').innerText = `+${this.model.get('phoneCode')}`;\n },\n\n handlePhoneCodeChange() {\n const countryCodeField = this.el.querySelector('.phone-authenticator-enroll__phone-code');\n countryCodeField.innerText = `+${this.model.get('phoneCode')}`;\n },\n\n save() {\n return this.model.get('authenticator.methodType') === 'voice'\n ? loc('oie.phone.call.primaryButton', 'login')\n : loc('oie.phone.sms.primaryButton', 'login');\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n // TODO: Using underscore to support IE, replace with Array.prototype methods (find, findIndex) when IE\n // support is removed\n const phoneNumberUISchemaIndex = _.findIndex(uiSchemas, ({ name }) => name === 'authenticator.phoneNumber');\n\n const countryUISchema = {\n 'label-top': true,\n label: loc('country.label', 'login'),\n type: 'select',\n options: CountryUtil.getCountries(),\n name: 'country',\n wide: true,\n };\n\n // Create an input group - serves as a display wrapper\n const phoneNumberWithCodeUISchema = {\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n type: 'group',\n modelType: 'string',\n 'label-top': true,\n name: 'phoneCode',\n className : 'phone-authenticator-enroll__phone',\n input: [\n {\n type: 'label',\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: `+${this.model.get('phoneCode')}`,\n className: 'phone-authenticator-enroll__phone-code no-translate',\n },\n Object.assign({}, uiSchemas[phoneNumberUISchemaIndex]),\n ],\n };\n\n const extensionUISchema = {\n label: loc('phone.extention.label', 'login'),\n type: 'text',\n // Need to manually hide and show\n // - toggleWhen puts display: block on the element when it unhides hence can't be used.\n // Because in this case, the element needs to be rendered as an inline-block.\n // - showWhen has an animation on the element when unhiding\n // The animation makes the element look weird because of the way it is positioned,\n // hence can't be used\n className: 'phone-authenticator-enroll__phone-ext hide',\n 'label-top': true,\n name: 'extension',\n };\n\n if (phoneNumberUISchemaIndex !== -1) {\n // Replace phoneNumberUISchema..\n uiSchemas.splice(phoneNumberUISchemaIndex, 1, phoneNumberWithCodeUISchema);\n // Add countryUISchema before & extensionUISchema after phone..\n uiSchemas.splice(phoneNumberUISchemaIndex, 0, countryUISchema);\n uiSchemas.splice(phoneNumberUISchemaIndex + 2, 0, extensionUISchema);\n }\n\n const methodType = _.find(uiSchemas, ({ name }) => name === 'authenticator.methodType');\n\n if (methodType && methodType.options.length === 1) {\n methodType.className = 'hide';\n }\n\n return uiSchemas;\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.listenTo(this.model, 'change:authenticator.methodType', this.render.bind(this));\n this.listenTo(this.model, 'change:phoneCode', this.handlePhoneCodeChange.bind(this));\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n\n Body,\n\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n country: {\n // Set default country to \"US\"\n 'value': 'US',\n 'type': 'string',\n },\n extension: {\n 'type': 'string',\n },\n },\n ModelClass.prototype.local,\n );\n const derived = Object.assign(\n {\n phoneCode: {\n deps: [ 'country' ],\n fn: function(country) {\n return CountryUtil.getCallingCodeForCountry(country);\n },\n },\n },\n ModelClass.prototype.derived,\n );\n return ModelClass.extend({\n local,\n derived,\n toJSON: function() {\n const modelJSON = Model.prototype.toJSON.call(this, arguments);\n const extension = this.get('extension');\n const phoneCode = this.get('phoneCode');\n\n // Add country code..\n let formattedPhoneNumber = `+${phoneCode}${modelJSON.authenticator.phoneNumber}`;\n\n // Add extension if present..\n if (modelJSON.authenticator.methodType === 'voice' && extension?.trim().length) {\n formattedPhoneNumber = `${formattedPhoneNumber}x${extension}`;\n }\n // Override phone with formatted number..\n modelJSON.authenticator.phoneNumber = formattedPhoneNumber;\n return modelJSON;\n },\n });\n },\n});\n","import { loc } from 'okta';\nimport {\n default as ChallengeAuthenticatorPhoneView,\n ResendView\n} from './ChallengeAuthenticatorPhoneView';\nimport { BaseForm } from '../../internals';\n\nconst EnrollResendView = ResendView.extend(\n {\n // To be shown after a timeout\n className: 'phone-authenticator-enroll--warning hide',\n resendActionKey: 'currentAuthenticator-resend',\n },\n);\n\nconst Body = ChallengeAuthenticatorPhoneView.prototype.Body.extend(\n {\n className: 'phone-authenticator-enroll',\n\n title() {\n return loc('oie.phone.enroll.title', 'login');\n },\n\n postRender() {\n BaseForm.prototype.postRender.apply(this, arguments);\n this.add(EnrollResendView, {\n selector: '.o-form-info-container',\n prepend: true,\n });\n },\n },\n);\n\nexport default ChallengeAuthenticatorPhoneView.extend({ Body });\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport PIVHeader from './PIVHeader';\n\nconst Body = BaseForm.extend({\n\n className: 'piv-cac-card',\n modelEvents: {\n request: 'startAuthentication',\n error: 'stopAuthentication',\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.model.set('useRedirect', true);\n this.addInstructions();\n },\n\n title() {\n return loc('piv.cac.title', 'login');\n },\n\n save() {\n return loc('retry', 'login');\n },\n\n addInstructions() {\n this.add(\n `\n ${loc('piv.cac.card.insert', 'login')}
\n \n `\n );\n },\n \n startAuthentication: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n stopAuthentication: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n }\n \n});\n\nexport default BaseAuthenticatorView.extend({\n Header: PIVHeader,\n Body,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n const messages = this.options.appState.get('messages') || {};\n // if piv view has errors, show errors and stop authentication.\n // otherwise trigger authentication on page load\n if (Array.isArray(messages.value)) {\n this.form.stopAuthentication();\n } else {\n this.form.startAuthentication();\n this.form.trigger('save', this.model);\n }\n },\n});\n","import { BaseHeader } from '../../internals';\nimport HeaderBeacon from '../../components/HeaderBeacon';\n\nexport default BaseHeader.extend({\n HeaderBeacon: HeaderBeacon.extend({\n getBeaconClassName: function() {\n return 'smartcard';\n },\n })\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.security.question.challenge.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n const questionKey = uiSchemas.filter(s => s.name.indexOf('questionKey') >= 0);\n const answer = uiSchemas.filter(s => s.name.indexOf('answer') >= 0);\n\n /**\n * At verify SQ case,\n * 'questionKey' is read-only hence it won't show up in UI anyway.\n * 'answer' has label 'answer' but apparently UI want to display the\n * actual question (label of `questionKey`) as better user experience.\n */\n if (questionKey.length === 1 && answer.length === 1) {\n answer[0].label = questionKey[0].label;\n }\n\n return uiSchemas;\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.security.question.enroll.title', 'login');\n },\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { View } from 'okta';\nimport { SHOW_RESEND_TIMEOUT } from '../../utils/Constants';\nimport sessionStorageHelper from '../../../client/sessionStorageHelper';\n\nexport default View.extend({\n\n postRender() {\n this.showCalloutAfterTimeout();\n },\n\n showCalloutAfterTimeout() {\n const timeStamp = sessionStorageHelper.getResendTimestamp();\n if (!timeStamp) {\n sessionStorageHelper.setResendTimestamp(Date.now());\n }\n\n // We keep track of a 'global' timestamp in sessionStorage because if the SIW does a re-render,\n // we don't want to force the user to wait another 30s again to see the resend link. With this\n // the user will wait AT MOST 30s until they see the resend link.\n this.showMeInterval = setInterval(() => {\n const start = sessionStorageHelper.getResendTimestamp();\n const now = Date.now();\n if (now - start >= SHOW_RESEND_TIMEOUT) {\n this.$el.removeClass('hide');\n clearInterval(this.showMeInterval);\n sessionStorageHelper.removeResendTimestamp();\n }\n }, 250);\n },\n\n remove() {\n View.prototype.remove.apply(this, arguments);\n clearInterval(this.showMeInterval);\n\n const formName = this.options.appState.get('currentFormName');\n const resendContext = this.options.appState.get('currentAuthenticator')?.resend \n || this.options.appState.get('currentAuthenticatorEnrollment')?.resend;\n const didFormNameChange = this.options.model.get('formName') !== formName;\n\n // Clear resend timeStamp whenever we change views (this means we're navigating away from the resend view)\n if (sessionStorageHelper.getResendTimestamp()\n && (!resendContext || didFormNameChange)) {\n sessionStorageHelper.removeResendTimestamp();\n } \n },\n});\n","// Common view for OV push and custom push.\nimport { loc, createButton, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { BaseFormWithPolling } from '../../internals';\nimport polling from '../shared/polling';\nimport { WARNING_TIMEOUT } from '../../utils/Constants';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { AUTHENTICATOR_KEY } from '../../../ion/RemediationConstants';\n\nconst warningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning',\n template: hbs`\n \n {{warning}}
\n `\n});\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n noButtonBar: true,\n\n title() {\n return this.isOV() ? loc('oie.okta_verify.push.title', 'login') :\n loc('oie.verify.custom_app.title', 'login', [this.options.appState.getAuthenticatorDisplayName()]);\n },\n\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n // 'hasSavingState' would be true by default.\n // Setting it to false when auth key is okta_verify or custom_app with autochallenge schema\n // So that 'o-form-saving' css class is not added while polling and checkbox remains enabled.\n if (this.isOVWithAutoChallenge() || this.isCustomAppWithAutoChallenge()) {\n this.hasSavingState = false;\n }\n this.listenTo(this.model, 'error', this.stopPoll);\n this.addView();\n },\n\n addView() {\n this.add(createButton({\n className: 'button button-wide button-primary send-push link-button-disabled',\n title: this.isOV() ? loc('oie.okta_verify.push.sent', 'login') : loc('oie.custom_app.push.sent', 'login'),\n click: (e) => {\n e.preventDefault();\n }\n }));\n this.add(\n `\n ${this.isOV() ? loc('oie.okta_verify.push.sent', 'login') : loc('oie.custom_app.push.sent', 'login')}`,\n );\n },\n\n render() {\n BaseFormWithPolling.prototype.render.apply(this, arguments);\n // Move checkbox below the button\n // Checkbox is rendered by BaseForm using remediation response and\n // hence by default always gets added above buttons.\n if (this.isOVWithAutoChallenge() || this.isCustomAppWithAutoChallenge()) {\n const checkbox = this.$el.find('[data-se=\"o-form-fieldset-autoChallenge\"]');\n checkbox.length && this.$el.find('.o-form-fieldset-container').append(checkbox);\n }\n },\n\n postRender() {\n BaseFormWithPolling.prototype.postRender.apply(this, arguments);\n\n const className = this.isOV() ?\n 'okta-verify-push-challenge' : ' custom-app-push-challenge';\n this.$el.addClass(className);\n this.startPoll();\n },\n\n startPoll() {\n this.startPolling();\n this.warningTimeout = setTimeout(() => {\n const warningText = this.isOV() ? loc('oktaverify.warning', 'login') :\n loc('oie.custom_app.push.warning', 'login', [this.options.appState.getAuthenticatorDisplayName()]);\n this.showWarning(warningText);\n }, WARNING_TIMEOUT);\n },\n\n stopPoll() {\n this.stopPolling();\n this.clearWarning();\n },\n\n showWarning(msg) {\n this.clearWarning();\n this.add(warningTemplate, '.o-form-error-container', {options: {warning: msg}});\n },\n\n clearWarning() {\n if (this.$('.o-form-error-container div').hasClass('okta-form-infobox-warning')) {\n this.$('.okta-form-infobox-warning').remove();\n }\n clearTimeout(this.warningTimeout);\n },\n\n remove() {\n BaseFormWithPolling.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n\n isOV() {\n return this.options.appState.get('authenticatorKey') === AUTHENTICATOR_KEY.OV;\n },\n\n isCustomApp() {\n return this.options.appState.get('authenticatorKey') === AUTHENTICATOR_KEY.CUSTOM_APP;\n },\n\n isOVWithAutoChallenge() {\n return this.isOV() && this.options.appState.getSchemaByName('autoChallenge');\n },\n\n isCustomAppWithAutoChallenge(){\n return this.isCustomApp() && this.options.appState.getSchemaByName('autoChallenge');\n }\n },\n\n polling,\n));\n\nconst AuthenticatorView = BaseAuthenticatorView.extend({\n Body,\n});\n\nexport {\n AuthenticatorView as default,\n Body,\n};\n","import { loc } from 'okta';\nexport default {\n title() {\n return loc('oie.email.mfa.title', 'login');\n }\n};\n","import { _ } from 'okta';\nimport { MS_PER_SEC } from '../../utils/Constants';\n\nexport default {\n startPolling(newRefreshInterval) {\n this.fixedPollingInterval = this.options.currentViewState.refresh;\n this.dynamicPollingInterval = newRefreshInterval;\n this.countDownCounterValue = Math.ceil(this.pollingInterval / MS_PER_SEC);\n // Poll is present in remediation form\n if (this.fixedPollingInterval) {\n this._startRemediationPolling();\n } else {\n // Poll is present in authenticator/ authenticator Enrollment obj.\n // Authenticator won't co-exists hence it's safe to trigger both.\n this._startAuthenticatorPolling();\n }\n },\n\n _startAuthenticatorPolling() {\n // Authenticator won't co-exists hence it's safe to trigger both.\n [\n 'currentAuthenticator',\n 'currentAuthenticatorEnrollment',\n ].some(responseKey => {\n if (this.options.appState.has(responseKey)) {\n const authenticator = this.options.appState.get(responseKey);\n const authenticatorPollAction = `${responseKey}-poll`;\n const pollInterval = this.dynamicPollingInterval || authenticator?.poll?.refresh;\n if (_.isNumber(pollInterval)) {\n this.polling = setTimeout(()=>{\n this.options.appState.trigger('invokeAction', authenticatorPollAction);\n }, pollInterval);\n }\n return true;\n } else {\n return false;\n }\n });\n },\n\n _startRemediationPolling() {\n const pollInterval = this.dynamicPollingInterval || this.fixedPollingInterval;\n if (_.isNumber(pollInterval)) {\n this.polling = setTimeout(() => {\n this.options.appState.trigger('saveForm', this.model);\n }, pollInterval);\n }\n },\n\n stopPolling() {\n if (this.polling) {\n clearTimeout(this.polling);\n this.polling = null;\n }\n }\n};\n","import { View, createButton } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'custom-buttons',\n template: hbs`\n {{#if addSeparateLine}}\n {{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}\n {{/if}}\n \n `,\n\n initialize(options) {\n options.customButtons.forEach((idpButton) => {\n this.add(createButton(idpButton), '.okta-custom-buttons-container');\n });\n },\n\n getTemplateData() {\n const jsonData = View.prototype.getTemplateData.apply(this, arguments);\n\n return Object.assign(jsonData, {\n addSeparateLine: this.options.addSeparateLine,\n });\n }\n});\n","import { View, createButton, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Util from '../../../../util/Util';\nimport Enums from '../../../../util/Enums';\nimport { UNIVERSAL_LINK_POST_DELAY } from '../../utils/Constants';\nimport { FORMS } from '../../../ion/RemediationConstants';\nimport { appendLoginHint } from '../../utils/ChallengeViewUtil';\n\nexport default View.extend({\n className: 'sign-in-with-device-option',\n template: hbs`\n \n {{#if signInWithDeviceIsRequired}}\n \n {{i18n code=\"oktaVerify.description\" bundle=\"login\"}}\n \n {{/if}}\n \n {{#unless signInWithDeviceIsRequired}}\n \n {{i18n code=\"authbutton.divider.text\" bundle=\"login\"}}\n \n {{/unless}}\n `,\n initialize() {\n const appState = this.options.appState;\n const deviceChallengePollRemediation = this.options.appState.hasRemediationObject(FORMS.LAUNCH_AUTHENTICATOR);\n\n const deviceChallenge = deviceChallengePollRemediation?.relatesTo?.value;\n this.add(createButton({\n className: 'button',\n icon: 'okta-verify-authenticator',\n title: loc('oktaVerify.button', 'login'),\n click() {\n if (this.settings.get('features.engFastpassMultipleAccounts') && this.model.get('identifier')) {\n this.options.settings.set('identifier', encodeURIComponent(this.model.get('identifier')));\n }\n\n const isUVapproach = deviceChallenge?.challengeMethod === Enums.UNIVERSAL_LINK_CHALLENGE;\n if (isUVapproach) {\n // launch the Okta Verify app\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, this.options?.settings?.get('identifier'));\n Util.redirect(deviceChallengeUrl);\n }\n\n const isAppLinkapproach = deviceChallenge?.challengeMethod === Enums.APP_LINK_CHALLENGE;\n if (isAppLinkapproach) {\n // launch the Okta Verify app\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, this.options?.settings?.get('identifier'));\n Util.redirect(deviceChallengeUrl, window, true);\n }\n\n // OKTA-350084\n // For the universal link (iOS) and app link (Android) approach,\n // we need to 1. launch the Okta Verify app\n // and 2. take the enduser to the next step right away\n // In Safari, when Okta Verify app is not installed, step 1 responds with error immediately,\n // then step 2 will respond with error.\n // To avoid showing the error right before switching to the next UI,\n // wait for 500 milliseconds before invoking step 2\n Util.callAfterTimeout(() => {\n if (this.options.isRequired) {\n appState.trigger('saveForm', this.model);\n } else {\n appState.trigger('invokeAction', FORMS.LAUNCH_AUTHENTICATOR);\n }\n }, isUVapproach || isAppLinkapproach ? UNIVERSAL_LINK_POST_DELAY : 0);\n }\n }), '.okta-verify-container');\n },\n\n getTemplateData() {\n return {\n signInWithDeviceIsRequired: !!this.options.isRequired,\n };\n }\n});\n","import { View, createButton } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'sign-in-with-idp',\n template: hbs`\n {{#if isSecondaryIdpDisplay}}\n {{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}\n {{/if}}\n \n {{#if isPrimaryIdpDisplay}}\n {{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}\n {{/if}} \n `,\n initialize() {\n this.options.idpButtons.forEach((idpButton) => {\n this.add(createButton(idpButton), '.okta-idps-container');\n });\n },\n\n getTemplateData() {\n const jsonData = View.prototype.getTemplateData.apply(this, arguments);\n const addDivider = this.options.idpButtons.length > 0;\n\n return Object.assign(jsonData, {\n isPrimaryIdpDisplay: addDivider && this.options.isPrimaryIdpDisplay,\n isSecondaryIdpDisplay: addDivider && !this.options.isPrimaryIdpDisplay\n });\n }\n});\n","import { loc } from 'okta';\nimport BaseForm from '../../internals/BaseForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.symantecVip.challenge.title', 'login', [displayName])\n : loc('oie.symantecVip.enroll.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.symantecVip.challenge.description', 'login', [displayName])\n : loc('oie.symantecVip.enroll.description', 'login', [displayName]);\n },\n\n save() {\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('mfa.challenge.verify', 'login')\n : loc('mfa.enroll', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View, createCallout } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n // eslint-disable-next-line max-len\n template: hbs`{{i18n code=\"oie.verify.webauthn.instructions\" bundle=\"login\"}}
`,\n initialize() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const challengeData = relatesToObject?.value.contextualData.challengeData;\n if (challengeData.userVerification === 'required') {\n this.add(createCallout({\n className: 'uv-required-callout',\n size: 'slim',\n type: 'warning',\n subtitle: loc('oie.verify.webauthn.uv.required.instructions', 'login'),\n }));\n }\n this.add('');\n },\n});\n","import { _, loc, createButton, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport CryptoUtil from '../../../../util/CryptoUtil';\nimport webauthn from '../../../../util/webauthn';\nimport BrowserFeatures from '../../../../util/BrowserFeatures';\nimport ChallengeWebauthnInfoView from './ChallengeWebauthnInfoView';\nimport { getMessageFromBrowserError } from '../../../ion/i18nTransformer';\nimport ChallengeWebauthnFooter from '../../components/ChallengeWebauthnFooter';\n\nconst Body = BaseForm.extend({\n\n title() {\n return loc('oie.verify.webauth.title', 'login');\n },\n\n className: 'oie-verify-webauthn',\n\n getUISchema() {\n const schema = [];\n // Returning custom array so no input fields are displayed for webauthn\n if (webauthn.isNewApiAvailable()) {\n const retryButton = createButton({\n className: 'retry-webauthn button-primary default-custom-button',\n title: loc('mfa.challenge.verify', 'login'),\n click: () => {\n this.getCredentialsAndSave();\n }\n });\n\n schema.push({\n View: ChallengeWebauthnInfoView,\n }, {\n View: retryButton,\n });\n } else {\n schema.push({\n View: createCallout({\n className: 'webauthn-not-supported',\n type: 'error',\n subtitle: loc('oie.webauthn.error.not.supported', 'login'),\n }),\n });\n }\n return schema;\n },\n\n remove() {\n BaseForm.prototype.remove.apply(this, arguments);\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n },\n\n noButtonBar: true,\n\n modelEvents: {\n 'error': '_stopVerification'\n },\n\n getCredentialsAndSave() {\n this.clearErrors();\n this._startVerification();\n // AbortController is not supported in IE11\n // eslint-disable-next-line compat/compat\n this.webauthnAbortController = new AbortController();\n const relatesToObject = this.options.currentViewState.relatesTo;\n const authenticatorData = relatesToObject?.value || {};\n const allowCredentials = [];\n const authenticatorEnrollments = this.options.appState.get('authenticatorEnrollments').value || [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n allowCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(enrollement.credentialId),\n });\n }\n });\n const challengeData = authenticatorData.contextualData.challengeData;\n const options = _.extend({}, challengeData, {\n allowCredentials,\n challenge: CryptoUtil.strToBin(challengeData.challenge),\n });\n // navigator.credentials() is not supported in IE11\n // eslint-disable-next-line compat/compat\n navigator.credentials.get({\n publicKey: options,\n signal: this.webauthnAbortController.signal\n }).then((assertion) => {\n this.model.set({\n credentials : {\n clientData: CryptoUtil.binToStr(assertion.response.clientDataJSON),\n authenticatorData: CryptoUtil.binToStr(assertion.response.authenticatorData),\n signatureData: CryptoUtil.binToStr(assertion.response.signature),\n }\n });\n this.saveForm(this.model);\n }, (error) => {\n // Do not display if it is abort error triggered by code when switching.\n // this.webauthnAbortController would be null if abort was triggered by code.\n if (this.webauthnAbortController) {\n this.model.trigger('error', this.model, {responseJSON: {errorSummary: getMessageFromBrowserError(error)}});\n }\n }).finally(() => {\n // unset webauthnAbortController on successful authentication or error\n this.webauthnAbortController = null;\n });\n },\n\n _startVerification: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.retry-webauthn').hide();\n this.$('.retry-webauthn')[0].textContent = loc('retry', 'login');\n },\n\n _stopVerification: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.retry-webauthn').show();\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n Footer: ChallengeWebauthnFooter,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n // Trigger browser prompt automatically for other browsers for better UX.\n if (webauthn.isNewApiAvailable() && !BrowserFeatures.isSafari()) {\n this.form.getCredentialsAndSave();\n }\n },\n});\n","import { loc, View, createCallout } from 'okta';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n // eslint-disable-next-line max-len\n template: hbs`{{i18n code=\"oie.enroll.webauthn.instructions\" bundle=\"login\"}}
`,\n initialize() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const activationData = relatesToObject?.value.contextualData.activationData;\n if (BrowserFeatures.isEdge()) {\n this.add(View.extend({\n tagName: 'p',\n className: 'idx-webauthn-enroll-text-edge',\n template: hbs`{{i18n code=\"oie.enroll.webauthn.instructions.edge\" bundle=\"login\"}}`\n }));\n }\n if (activationData.authenticatorSelection.userVerification === 'required') {\n this.add(createCallout({\n className: 'uv-required-callout',\n size: 'slim',\n type: 'warning',\n subtitle: loc('oie.enroll.webauthn.uv.required.instructions', 'login'),\n }));\n }\n this.add('');\n },\n});\n","import { _, loc, createCallout, createButton } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport webauthn from '../../../../util/webauthn';\nimport CryptoUtil from '../../../../util/CryptoUtil';\nimport EnrollWebauthnInfoView from './EnrollWebauthnInfoView';\nimport { getMessageFromBrowserError } from '../../../ion/i18nTransformer';\n\nfunction getExcludeCredentials(authenticatorEnrollments = []) {\n const credentials = [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n credentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(enrollement.credentialId),\n });\n }\n });\n return credentials;\n}\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.enroll.webauthn.title', 'login');\n },\n className: 'oie-enroll-webauthn',\n modelEvents: {\n 'error': '_stopEnrollment',\n },\n getUISchema() {\n const schema = [];\n // Returning custom array so no input fields are displayed for webauthn\n if (webauthn.isNewApiAvailable()) {\n schema.push({\n View: EnrollWebauthnInfoView,\n });\n schema.push({\n View: createButton({\n className: 'webauthn-setup button button-primary button-wide',\n title: loc('oie.enroll.webauthn.save', 'login'),\n click: () => {\n this.triggerWebauthnPrompt();\n },\n }),\n });\n } else {\n schema.push({\n View: createCallout({\n className: 'webauthn-not-supported',\n type: 'error',\n subtitle: loc('oie.webauthn.error.not.supported', 'login'),\n }),\n });\n }\n return schema;\n },\n triggerWebauthnPrompt() {\n this.$el.find('.o-form-error-container').empty();\n this._startEnrollment();\n const relatesToObject = this.options.currentViewState.relatesTo;\n const activationData = relatesToObject?.value.contextualData.activationData;\n if (webauthn.isNewApiAvailable()) {\n var options = _.extend({}, activationData, {\n challenge: CryptoUtil.strToBin(activationData.challenge),\n user: {\n id: CryptoUtil.strToBin(activationData.user.id),\n name: activationData.user.name,\n displayName: activationData.user.displayName\n },\n excludeCredentials: getExcludeCredentials(this.options.appState.get('authenticatorEnrollments').value)\n });\n this.webauthnAbortController = new AbortController();\n navigator.credentials.create({\n publicKey: options,\n signal: this.webauthnAbortController.signal\n }).then((newCredential) => {\n this.model.set({\n credentials : {\n clientData: CryptoUtil.binToStr(newCredential.response.clientDataJSON),\n attestation: CryptoUtil.binToStr(newCredential.response.attestationObject),\n }\n });\n this.saveForm(this.model);\n })\n .catch((error) => {\n this.model.trigger('error', this.model, {responseJSON: {errorSummary: getMessageFromBrowserError(error)}});\n }).finally(() => {\n this.webauthnAbortController = null;\n });\n }\n },\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.webauthn-setup').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.webauthn-setup').show();\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n this.$el.find('.o-form-button-bar [type=\"submit\"]').remove();\n },\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseForm from '../../internals/BaseForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ExampleView = View.extend({\n template: hbs``,\n});\n\nconst Body = BaseForm.extend({\n title() {\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.yubikey.challenge.title', 'login')\n : loc('oie.yubikey.enroll.title', 'login');\n },\n\n subtitle() {\n return loc('oie.yubikey.description', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n getUISchema() {\n const schema = BaseForm.prototype.getUISchema.apply(this, arguments);\n schema.unshift({\n View: ExampleView,\n selector: '.o-form-fieldset-container',\n });\n return schema;\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","/*!\n * Copyright (c) 2020-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n className: 'hide resend-email-infobox',\n template: hbs`\n \n \n \n {{i18n code=\"email.code.not.received\" bundle=\"login\"}}\n \n {{i18n code=\"email.button.resend\" bundle=\"login\"}}\n \n
\n \n `,\n\n events: {\n 'click .resend-email-btn': 'resendEmail',\n },\n\n postRender: function() {\n this.showResendCallout();\n },\n\n showResendCallout: function() {\n _.delay(() => {\n this.$el.removeClass('hide');\n }, Enums.API_RATE_LIMIT);\n },\n\n hideResendCallout: function() {\n this.$el.addClass('hide');\n },\n\n resendEmail: function(e) {\n e.preventDefault();\n this.hideResendCallout();\n this.model.resend().finally(this.showResendCallout.bind(this));\n },\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport 'qtip';\n\nexport default View.extend({\n className: 'scope-item',\n template: hbs`\n {{name}}
\n {{#if description}}\n \n {{/if}}`,\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description)\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom left',\n target: 'mouse'\n }\n });\n }\n});\n\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint max-len: [2, 131] */\nimport hbs from 'handlebars-inline-precompile';\nimport { _, View, loc } from 'okta';\nimport ScopeItem from './ScopeItem';\n\nconst SCOPE_N_GROUP_CONFIG = {\n groups: 'user',\n myAccount: 'user',\n users: 'user',\n apps: 'resource',\n authenticators: 'resource',\n authorizationServers: 'resource',\n clients: 'resource',\n domains: 'resource',\n factors: 'resource',\n idps: 'resource',\n linkedObjects: 'resource',\n policies: 'resource',\n templates: 'resource',\n eventHooks: 'hook',\n inlineHooks: 'hook',\n events: 'system',\n logs: 'system',\n orgs: 'system',\n roles: 'system',\n schemas: 'system',\n sessions: 'system',\n trustedOrigins: 'system',\n};\n\nconst DEFAULT_GROUP = 'system';\n\nconst findScopeGroupKey = ({ name = '' }) => {\n const xs = name.split('.');\n const groupType = xs[1];\n\n return SCOPE_N_GROUP_CONFIG[groupType] || DEFAULT_GROUP;\n};\n\nconst ScopeGroupHeaderView = View.extend({\n className: 'scope-group',\n\n events: {\n 'click': 'expandScopes',\n },\n\n template: hbs`\n \n {{groupName}}
\n \n \n \n `,\n\n expandScopes() {\n this.$el.toggleClass('scope-group--is-expanded');\n this.$('.caret').toggleClass('caret--is-rotated');\n },\n\n preRender() {\n _.chain(this.options.scopes)\n .sortBy(({ name }) => name)\n .each(({ name, displayName, description }) => {\n this.add(ScopeItem, {\n options: {\n name: displayName || name,\n description,\n },\n });\n });\n }\n});\n\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n const allScopes = this.model.get('scopes');\n const scopesWithGroup = _.groupBy(allScopes, findScopeGroupKey);\n\n const SCOPE_GROUP_NAMES_CONFIG = {\n 'user': loc('admin.consent.group.user.group', 'login'),\n 'resource': loc('admin.consent.group.resource.policy', 'login'),\n 'hook': loc('admin.consent.group.hook', 'login'),\n 'system': loc('admin.consent.group.system', 'login'),\n };\n\n // loop through SCOPE_GROUP_NAMES_CONFIG to keep group order consistent in UI.\n _.each(SCOPE_GROUP_NAMES_CONFIG, (groupName, groupKey) => {\n const scopes = scopesWithGroup[groupKey];\n if (!Array.isArray(scopes)) {\n return;\n }\n // add scope group header and scopes\n this.add(ScopeGroupHeaderView, {\n options: {\n groupName,\n scopes,\n }\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport 'qtip';\nexport default View.extend({\n className: 'scope-item',\n template: hbs(\n '\\\n \\\n {{name}}
\\\n \\\n {{#if description}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData() {\n const { name, description, isCustomized } = this.options;\n const baseClass = 'scope-item-text';\n const classNames = (name === 'openid' || isCustomized)\n ? `${baseClass} no-translate`: baseClass;\n return { classNames, name, description };\n },\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description),\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom right',\n target: 'mouse',\n },\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport ScopeItem from './ScopeItem';\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n this.model.get('scopes').forEach(scope => {\n this.add(ScopeItem, {\n options: {\n name: scope.displayName || scope.name,\n description: scope.description,\n isCustomized: scope.isCustomized,\n },\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, ListView, View, createButton, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport RouterUtil from 'util/RouterUtil';\nconst cardinalityTextTpl = hbs('{{cardinalityText}}');\nconst FactorListFactorRow = View.extend({\n tagName: 'li',\n\n className: 'enroll-factor-row clearfix',\n\n template: hbs(\n '\\\n \\\n \\\n {{factorLabel}}
\\\n {{#if factorDescription}}\\\n {{factorDescription}}
\\\n {{/if}}\\\n \\\n \\\n '\n ),\n\n attributes: function() {\n return { 'data-se': this.model.get('factorName') };\n },\n\n children: function() {\n const children = [];\n const enrolled = this.model.get('enrolled');\n const required = this.model.get('required');\n const cardinality = this.model.get('cardinality');\n\n if (this.options.showInlineSetupButton) {\n return [\n [\n createButton({\n className: 'button',\n title: this.getSetupButtonText(),\n click: function() {\n this.options.appState.trigger(\n 'navigate',\n RouterUtil.createEnrollFactorUrl(this.model.get('provider'), this.model.get('factorType'))\n );\n },\n }),\n '.enroll-factor-button',\n ],\n ];\n } else if (enrolled) {\n children.push(['', '.enroll-factor-label']);\n } else if (required) {\n children.push(['', '.enroll-factor-label']);\n }\n\n const cardinalityText = FactorUtil.getCardinalityText(enrolled, required, cardinality);\n\n if (cardinalityText) {\n children.push([cardinalityTextTpl({ cardinalityText: cardinalityText }), '.enroll-factor-description']);\n }\n return children;\n },\n\n minimize: function() {\n this.$el.addClass('enroll-factor-row-min');\n },\n\n maximize: function() {\n this.$el.removeClass('enroll-factor-row-min');\n },\n\n getSetupButtonText: function() {\n return this.model.get('additionalEnrollment')\n ? loc('enroll.choices.setup.another', 'login')\n : loc('enroll.choices.setup', 'login');\n },\n});\nexport default ListView.extend({\n className: 'enroll-factor-list',\n\n item: FactorListFactorRow,\n\n itemSelector: '.list-content',\n\n template: hbs(\n '\\\n {{#if listTitle}}\\\n {{listTitle}}
\\\n {{/if}}\\\n
\\\n '\n ),\n\n getTemplateData: function() {\n const json = ListView.prototype.getTemplateData.call(this);\n\n _.extend(json, this);\n return json;\n },\n\n postRender: function() {\n if (this.options.minimize) {\n this.invoke('minimize');\n }\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs`\n \n {{i18n code=\"enroll.choices.setup.skip\" bundle=\"login\"}}\n \n `,\n className: 'auth-footer clearfix',\n events: {\n 'click .js-skip': function(e) {\n e.preventDefault();\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n },\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorList from './FactorList';\nexport default FactorList.extend({\n listTitle: _.partial(loc, 'enroll.choices.list.setup', 'login'),\n\n className: function() {\n return FactorList.prototype.className + ' enroll-required-factor-list';\n },\n\n postRender: function() {\n let currentModel;\n let currentRow;\n\n FactorList.prototype.postRender.apply(this, arguments);\n currentModel = this.options.appState.get('factors').getFirstUnenrolledRequiredFactor();\n currentRow = this.find(function(view) {\n return view.model === currentModel;\n });\n currentRow.maximize();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport RouterUtil from 'util/RouterUtil';\nexport default View.extend({\n className: 'scan-instructions clearfix',\n template: hbs`\n \n \n {{instructions}}
\n \n \n \n \n ![\"{{altQRCode}}\"](\"{{qrcode}}\")
\n \n \n \n \n {{i18n code=\"enroll.totp.cannotScan\" bundle=\"login\"}}\n \n \n {{i18n code=\"enroll.totp.refreshBarcode\" bundle=\"login\"}}\n \n \n `,\n\n events: {\n 'click [data-type=\"manual-setup\"]': function(e) {\n e.preventDefault();\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'manual'\n );\n if (this.model.get('__factorType__') === 'push') {\n // cancel the poll and navigate to manual setup.\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev().then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: 'push',\n provider: 'OKTA',\n });\n\n return factor.enroll();\n });\n })\n .then(() => {\n this.options.appState.trigger('navigate', url);\n });\n } else {\n this.options.appState.trigger('navigate', url);\n }\n },\n 'click [data-type=\"refresh-qrcode\"]': function(e) {\n e.preventDefault();\n this.model.trigger('errors:clear');\n\n const self = this;\n\n this.model\n .doTransaction(function(transaction) {\n if (this.appState.get('isWaitingForActivation')) {\n return transaction.poll();\n } else {\n return transaction.activate();\n }\n })\n .then(function(trans) {\n const res = trans.data;\n\n if (\n (res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE') &&\n res.factorResult === 'WAITING'\n ) {\n // defer the render here to have a lastResponse set in AppState\n // so that we get new QRcode rendered\n _.defer(_.bind(self.render, self));\n }\n });\n },\n },\n\n initialize: function() {\n this.listenTo(this.options.appState, 'change:lastAuthResponse', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', !this.options.appState.get('isWaitingForActivation'));\n } else if (this.options.appState.get('isSuccessResponse')) {\n this.$el.addClass('qrcode-success');\n }\n });\n this.listenTo(this.model, 'error', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', true);\n }\n });\n },\n\n getTemplateData: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n let instructions;\n\n if (this.model.get('__provider__') === 'GOOGLE') {\n instructions = loc('enroll.totp.setupGoogleAuthApp', 'login', [factorName]);\n } else {\n instructions = loc('enroll.totp.setupApp', 'login', [factorName]);\n }\n return {\n instructions: instructions,\n qrcode: this.options.appState.get('qrcode'),\n altQRCode: loc('mfa.altQrCode', 'login')\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport TextBox from 'views/shared/TextBox';\nconst form = {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.enterCode', 'login'),\n autoSave: true,\n noButtonBar: true,\n attributes: { 'data-se': 'step-sendcode' },\n\n formChildren: function() {\n return [\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n }),\n ];\n },\n};\nexport default form;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.options.appState.trigger('backToFactors');\n this.back();\n },\n },\n\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n if (this.options.appState.get('prevLink')) {\n // Once we are in the MFA_ENROLL_ACTIVATE, we need to reset to the\n // correct state. Fortunately, this means that the router will\n // handle navigation once the request is finished.\n this.model.doTransaction(function(transaction) {\n return transaction.prev();\n });\n } else {\n this.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\n\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n \\\n {{i18n code=\"mfa.scanBarcode\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-goto': function(e) {\n e.preventDefault();\n // go to a different screen with current auth status:\n // refresh the latest response\n this.model.startTransaction(function(authClient) {\n return authClient.tx.resume();\n });\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n if (this.options.appState.get('prevLink')) {\n // Once we are in the MFA_ENROLL_ACTIVATE, we need to reset to the\n // correct state. Fortunately, this means that the router will\n // handle navigation once the request is finished.\n this.model.doTransaction(function(transaction) {\n return transaction.prev();\n });\n } else {\n this.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport RouterUtil from 'util/RouterUtil';\n\nfunction goToFactorActivation(appState) {\n const url = RouterUtil.createActivateFactorUrl(\n appState.get('activatedFactorProvider'),\n appState.get('activatedFactorType')\n );\n\n appState.trigger('navigate', url);\n}\n\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n \\\n {{i18n code=\"mfa.scanBarcode\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-goto': function(e) {\n e.preventDefault();\n\n const goToFactor = _.partial(goToFactorActivation, this.options.appState);\n\n this.options.appState.unset('factorActivationType');\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev().then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: 'push',\n provider: 'OKTA',\n });\n\n return factor.enroll();\n });\n })\n .then(goToFactor);\n },\n },\n back: function() {\n const self = this;\n\n self.options.appState.unset('factorActivationType');\n if (self.options.appState.get('prevLink')) {\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev();\n })\n .then(function() {\n // we trap 'MFA_ENROLL' response that's why we need to trigger navigation from here\n self.options.appState.trigger('navigate', 'signin/enroll');\n });\n } else {\n self.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nlet { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n template: hbs(\n '\\\n {{countryCallingCode}}\\\n \\\n \\\n \\\n '\n ),\n\n initialize: function() {\n this.listenTo(this.model, 'change:countryCallingCode', function() {\n this.$('.o-form-label-inline').text(this.model.get('countryCallingCode'));\n });\n },\n\n preRender: function() {\n this.options.countryCallingCode = this.model.get('countryCallingCode');\n },\n\n postRender: function() {\n // This is a hack - once inputGroups are done, get rid of it!!\n this.$el.removeClass('input-fix o-form-control');\n _.defer(() => {\n this.$el.parent().addClass('o-form-input-group');\n });\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 130] */\nimport { Form, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport ProfileSchema from 'models/ProfileSchema';\nimport RegistrationFormFactory from 'util/RegistrationFormFactory';\nexport default Form.extend({\n layout: 'o-form-theme',\n autoSave: true,\n noCancelButton: true,\n title() {\n return loc('registration.form.title', 'login');\n },\n save() {\n return loc('registration.form.submit', 'login');\n },\n initialize: function(options) {\n this.options = options || {};\n this.schema = new ProfileSchema({\n profileSchemaAttributes: this.options.appState.get('policy').registration.profile,\n });\n this.schema.properties.each(schemaProperty => {\n const inputOptions = RegistrationFormFactory.createInputOptions(schemaProperty);\n\n this.addInput(inputOptions);\n });\n const requiredFieldsLabel = hbs('{{label}}')({\n label: loc('registration.required.fields.label', 'login'),\n });\n\n this.add(requiredFieldsLabel);\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n {{#if passwordWarn}}\\\n \\\n {{i18n code=\"password.expiring.later\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n \\\n {{i18n code=\"signout\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer clearfix',\n events: {\n 'click .js-signout': function(e) {\n e.preventDefault();\n const self = this;\n const authClient = self.settings.authClient;\n\n this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(function() {\n return authClient.session.exists();\n })\n .then(function(sessionExists) {\n if (sessionExists) {\n return authClient.closeSession().catch(() => {});\n }\n })\n .then(function() {\n if (self.settings.get('signOutLink')) {\n Util.redirect(self.settings.get('signOutLink'));\n } else {\n self.state.set('navigateDir', Enums.DIRECTION_BACK);\n self.options.appState.trigger('navigate', '');\n }\n });\n },\n 'click .js-skip': function(e) {\n e.preventDefault();\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n },\n },\n getTemplateData: function() {\n return { passwordWarn: this.options.appState.get('isPwdExpiringSoon') };\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint complexity: [2, 7] */\nimport { Form, createButton, loc } from 'okta';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nexport default Form.extend({\n layout: 'o-form-theme',\n className: 'factor-verify-magiclink',\n autoSave: true,\n noCancelButton: true,\n initialize: function() {\n const form = this;\n // for FACTOR_REQUIRED with email magic link we dont need to show otp code input field and verify button\n\n this.title = this.model.get('factorLabel');\n //TODO: OKTA-211618 Temp fix for demo. FACTOR_REQUIRED after sign up is missing the profile object in API response\n\n const email = this.model.get('email') || this.options.appState.get('lastAuthResponse')._embedded.user.profile.login;\n\n this.subtitle = '(' + email + ')';\n this.add(\n createButton({\n attributes: { 'data-se': 'email-send-code' },\n className: 'button email-request-button',\n title: loc('mfa.sendEmail', 'login'),\n click: function() {\n form.clearErrors();\n this.disable();\n this.options.title = loc('mfa.sent', 'login');\n this.render();\n this.model\n .save()\n .then(() => {\n return Q.delay(Enums.API_RATE_LIMIT);\n })\n .then(() => {\n this.options.title = loc('mfa.resendEmail', 'login');\n this.enable();\n this.render();\n });\n },\n })\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport PrimaryAuthForm from 'views/primary-auth/PrimaryAuthForm';\nexport default PrimaryAuthForm.extend({\n className: 'idp-discovery-form',\n save: function() {\n return loc('oform.next', 'login');\n },\n saveId: 'idp-discovery-submit',\n\n initialize: function() {\n this.listenTo(this, 'save', _.bind(this.model.save, this.model));\n this.stateEnableChange();\n },\n\n inputs: function() {\n const inputs = [];\n const usernameProps = {\n className: 'margin-btm-30',\n label: loc('primaryauth.username.placeholder', 'login'),\n inputId: 'idp-discovery-username',\n disabled: false,\n };\n\n inputs.push(_.extend(this.getUsernameField(), usernameProps));\n if (this.settings.get('features.rememberMe')) {\n inputs.push(this.getRemeberMeCheckbox());\n }\n return inputs;\n },\n\n focus: function() {\n if (!this.model.get('username')) {\n this.getInputs().first().focus();\n } else if (this.getInputs().toArray()[1]) {\n this.getInputs().toArray()[1].focus();\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst template = hbs('\\\n \\\n {{{message}}}
\\\n ');\n\n// Have to be unescaped for the html in enroll.windowsHello.error.notConfiguredHtml\n\nexport default View.extend({\n template: template,\n className: 'okta-infobox-error infobox infobox-error infobox-md margin-btm-25',\n attributes: {\n 'data-se': 'o-form-error-html',\n },\n\n message: '',\n\n initialize: function(options) {\n if (options && options.message) {\n this.message = options.message;\n }\n },\n\n getTemplateData: function() {\n return {\n message: this.message,\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc, createButton, Form } from 'okta';\nimport TextBox from 'views/shared/TextBox';\n\nfunction addInlineTotp(form) {\n form.addDivider();\n form.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top inline-input auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'tel',\n });\n form.add(\n createButton({\n attributes: { 'data-se': 'inline-totp-verify' },\n className: 'button inline-totp-verify margin-top-30',\n title: loc('mfa.challenge.verify', 'login'),\n click: function() {\n form.clearErrors();\n if (!form.isValid()) {\n return;\n }\n form.model.manageTransaction(function(transaction, setTransaction) {\n // This is the case where we enter the TOTP code and verify while there is an\n // active Push request (or polling) running. We need to invoke previous() on authClient\n // and then call model.save(). If not, we would still be in MFA_CHALLENGE state and\n // verify would result in a wrong request (push verify instead of a TOTP verify).\n if (transaction.status === 'MFA_CHALLENGE' && transaction.prev) {\n form.options.appState.set('trapMfaRequiredResponse', true);\n return transaction.prev().then(function(trans) {\n setTransaction(trans);\n form.model.save();\n });\n } else {\n // Push is not active and we enter the code to verify.\n form.model.save();\n }\n });\n },\n })\n );\n form.at(1).focus();\n}\n\nexport default Form.extend({\n autoSave: true,\n noButtonBar: true,\n scrollOnError: false,\n layout: 'o-form-theme',\n\n className: 'mfa-verify-totp-inline',\n\n attributes: { 'data-se': 'factor-inline-totp' },\n\n initialize: function() {\n const form = this;\n\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n this.add(\n createButton({\n className: 'link',\n attributes: { 'data-se': 'inline-totp-add' },\n title: loc('mfa.challenge.orEnterCode', 'login'),\n click: function() {\n this.remove();\n addInlineTotp(form);\n },\n })\n );\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n className: 'number-challenge-view',\n template: hbs`\n \n {{{i18n code=\"oktaverify.numberchallenge.instruction\" bundle=\"login\" arguments=\"number\"}}}\n
\n \n \n \n {{number}}\n \n \n \n \n {{i18n code=\"oktaverify.numberchallenge.explain\" bundle=\"login\"}}
\n `,\n initialize() {\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', () => {\n if (this.options.appState.get('lastAuthResponse').status !== 'SUCCESS') {\n this.render();\n }\n });\n },\n getTemplateData() {\n const lastAuthResponse = this.options.appState.get('lastAuthResponse');\n if (!this.options.appState.get('isWaitingForNumberChallenge')) {\n return {\n number: null,\n };\n }\n return {\n number: lastAuthResponse._embedded.factor._embedded.challenge.correctAnswer,\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 7] */\nimport { _, loc, Form, createButton, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nimport TextBox from 'views/shared/TextBox';\nconst subtitleTpl = hbs('({{subtitle}})');\nconst PassCodeFormwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning login-timeout-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n {{{warning}}}
\n `,\n});\n\nfunction getFormAndButtonDetails(factorType) {\n switch (factorType) {\n case 'sms':\n return {\n buttonDataSe: 'sms-send-code',\n buttonClassName: 'sms-request-button',\n formSubmit: loc('mfa.sendCode', 'login'),\n formRetry: loc('mfa.resendCode', 'login'),\n formSubmitted: loc('mfa.sent', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('phoneNumber') }),\n warning: loc('factor.sms.time.warning', 'login'),\n };\n case 'call':\n return {\n buttonDataSe: 'make-call',\n buttonClassName: 'call-request-button',\n formSubmit: loc('mfa.call', 'login'),\n formRetry: loc('mfa.redial', 'login'),\n formSubmitted: loc('mfa.calling', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('phoneNumber') }),\n warning: loc('factor.call.time.warning', 'login'),\n };\n case 'email':\n return {\n buttonDataSe: 'email-send-code',\n buttonClassName: 'email-request-button',\n formSubmit: loc('mfa.sendEmail', 'login'),\n formRetry: loc('mfa.resendEmail', 'login'),\n formSubmitted: loc('mfa.sent', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('email') }),\n };\n default:\n return {\n buttonDataSe: '',\n buttonClassName: '',\n formSubmit: '',\n formRetry: '',\n formSubmitted: '',\n };\n }\n}\n\nexport default Form.extend({\n className: 'mfa-verify-passcode',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n\n disableSubmitButton: function() {\n return this.model.appState.get('isMfaChallenge') && this.model.get('answer');\n },\n\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(PassCodeFormwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n\n initialize: function() {\n const form = this;\n\n this.title = this.model.get('factorLabel');\n\n const factorType = this.model.get('factorType');\n const formAndButtonDetails = getFormAndButtonDetails.call(this, factorType);\n const warningDetails = formAndButtonDetails.warning;\n\n this.$el.attr('data-se', 'factor-' + factorType);\n\n this.subtitle = formAndButtonDetails.subtitle;\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n this.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'tel',\n });\n this.add(\n createButton({\n attributes: { 'data-se': formAndButtonDetails.buttonDataSe },\n className: 'button ' + formAndButtonDetails.buttonClassName,\n title: formAndButtonDetails.formSubmit,\n click: function() {\n form.clearErrors();\n this.disable();\n form.clearWarnings();\n this.options.title = formAndButtonDetails.formSubmitted;\n this.render();\n // To send an OTP to the device, make the same request but use\n // an empty passCode\n this.model.set('answer', '');\n this.model\n .save()\n .then(function() {\n // render and focus on the passcode input field.\n form.getInputs().first().render().focus();\n return Q.delay(Enums.API_RATE_LIMIT);\n })\n .then(() => {\n this.options.title = formAndButtonDetails.formRetry;\n this.enable();\n if (factorType === 'call' || factorType === 'sms') {\n form.showWarning(warningDetails);\n }\n this.render();\n });\n },\n })\n );\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2016-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nexport default Form.extend({\n className: 'mfa-verify-password',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-password' },\n\n initialize: function() {\n this.title = this.model.get('factorLabel');\n\n this.addInput({\n label: loc('mfa.challenge.password.placeholder', 'login'),\n 'label-top': true,\n className: 'auth-passcode',\n name: 'password',\n type: 'password',\n params: {\n showPasswordToggle: true,\n },\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Util from 'util/Util';\nimport NumberChallengeView from './NumberChallengeView';\n\nconst titleTpl = hbs('{{factorName}} ({{{deviceName}}})');\n// deviceName is escaped on BaseForm (see BaseForm's template)\n\nconst WARNING_TIMEOUT = 30000; // milliseconds\nconst PushFormwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n {{warning}}
\n `,\n});\n\nexport default Form.extend({\n className: 'mfa-verify-push',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'oktaverify.send', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-push' },\n events: {\n submit: 'submit',\n },\n\n initialize: function() {\n this.enabled = true;\n this.listenTo(this.options.appState, 'change:isMfaRejected', this.handleRejectStateChange);\n\n this.numberChallengeView = this.add(NumberChallengeView).last();\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', function(\n state,\n isWaitingForNumberChallenge\n ) {\n if (isWaitingForNumberChallenge || this.options.appState.get('lastAuthResponse').status === 'SUCCESS') {\n this.clearWarnings();\n this.$el.find('.button').hide();\n this.numberChallengeView.$el.show();\n } else {\n this.numberChallengeView.$el.hide();\n this.$el.find('.button').show();\n }\n });\n this.listenTo(this.options.appState, 'change:isMfaTimeout', function(state, isMfaTimeout) {\n this.setSubmitState(isMfaTimeout);\n if (isMfaTimeout) {\n this.showError(loc('oktaverify.timeout', 'login'));\n }\n });\n this.listenTo(this.options.appState, 'change:isMfaRequired', function(state, isMfaRequired) {\n if (isMfaRequired) {\n this.clearErrors();\n this.clearWarnings();\n }\n });\n this.title = titleTpl({\n factorName: this.model.get('factorLabel'),\n deviceName: this.model.get('deviceName'),\n });\n },\n setSubmitState: function(ableToSubmit) {\n const button = this.$el.find('.button');\n const a11ySpan = this.$el.find('.accessibility-text');\n this.enabled = ableToSubmit;\n if (ableToSubmit) {\n button.removeClass('link-button-disabled');\n button.prop('value', loc('oktaverify.send', 'login'));\n button.prop('disabled', false);\n if (a11ySpan) {\n a11ySpan.remove();\n }\n } else {\n button.addClass('link-button-disabled');\n button.prop('value', loc('oktaverify.sent', 'login'));\n button.prop('disabled', true);\n this.add(\n `${loc('oktaverify.sent', 'login')}`,\n );\n }\n },\n submit: function(e) {\n if (e !== undefined) {\n e.preventDefault();\n }\n if (this.enabled) {\n this.setSubmitState(false);\n this.doSave();\n }\n },\n postRender: function() {\n const factorsPolicyInfo = this.options.appState.get('factorsPolicyInfo');\n const id = this.model.get('id');\n const isAutoPushEnabled = this.settings.get('features.autoPush') && factorsPolicyInfo && factorsPolicyInfo[id]\n ? factorsPolicyInfo[id]['autoPushEnabled']\n : false;\n\n if (isAutoPushEnabled) {\n this.model.set('autoPush', true);\n // bind after $el has been rendered, and trigger push once DOM is fully loaded\n _.defer(_.bind(this.submit, this));\n }\n },\n doSave: function() {\n let warningTimeout;\n\n this.clearErrors();\n this.clearWarnings();\n if (this.model.isValid()) {\n this.listenToOnce(this.model, 'error', function() {\n this.setSubmitState(true);\n this.clearWarnings();\n clearTimeout(warningTimeout);\n });\n this.trigger('save', this.model);\n warningTimeout = Util.callAfterTimeout(() => {\n if (!this.options.appState.get('isWaitingForNumberChallenge')) {\n this.showWarning(loc('oktaverify.warning', 'login'));\n }\n }, WARNING_TIMEOUT);\n }\n },\n showError: function(msg) {\n this.clearWarnings();\n this.model.trigger('error', this.model, { responseJSON: { errorSummary: msg } });\n },\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(PushFormwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n handleRejectStateChange: function(state, isMfaRejected) {\n if (isMfaRejected) {\n this.setSubmitState(isMfaRejected);\n this.setRejectedErrorMessage();\n }\n },\n setRejectedErrorMessage: function() {\n // If rejection is due to outdated app, show error message per platform\n // else show user rejected message.\n if (this.options.appState.get('lastAuthResponse').factorResultMessage === 'OKTA_VERIFY_UPGRADE_REQUIRED') {\n if (this.options.appState.get('factor').profile.platform === 'IOS') {\n this.showError(loc('oktaverify.rejected.upgradeRequired.ios', 'login'));\n } else {\n this.showError(loc('oktaverify.rejected.upgradeRequired.android', 'login'));\n }\n } else {\n this.showError(loc('oktaverify.rejected', 'login'));\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nexport default Form.extend({\n className: 'mfa-verify-question',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-question' },\n\n initialize: function() {\n this.title = this.model.get('factorLabel');\n\n this.addInput({\n label: this.model.get('securityQuestion'),\n 'label-top': true,\n placeholder: loc('mfa.challenge.answer.placeholder', 'login'),\n className: 'auth-passcode',\n name: 'answer',\n type: 'password',\n params: {\n showPasswordToggle: true,\n },\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport ResendEmailView from 'views/ResendEmailView';\nimport TextBox from 'views/shared/TextBox';\n\nconst createEmailMaskElement = function() {\n const email = this.model.get('email');\n const emailTpl = hbs('{{email}}');\n return { factorEmail: emailTpl({ email }) };\n};\n\nconst SendEmailAndVerifyCodeFormVerifyEmailCodeForm = Form.extend({\n layout: 'o-form-theme',\n className: 'mfa-verify-email',\n title: _.partial(loc, 'email.mfa.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n noCancelButton: true,\n attributes: {\n 'data-se': 'factor-email',\n },\n save: function() {\n return this.options.appState.get('isMfaChallenge')\n ? loc('mfa.challenge.verify', 'login')\n : loc('email.button.send', 'login');\n },\n\n events: Object.assign({}, Form.prototype.events, {\n submit: function(e) {\n e.preventDefault();\n this.handleSubmit();\n },\n }),\n\n handleSubmit() {\n this.clearErrors();\n if (this.options.appState.get('isMfaChallenge')) {\n if (this.isValid()) {\n this.model.save();\n }\n } else {\n // Send email and switch to verification view\n this.model.set('answer', '');\n this.model.save().then(this.renderChallengView.bind(this));\n }\n },\n\n initialize: function() {\n Form.prototype.initialize.apply(this, arguments);\n\n // render 'Send Email' page at first place\n this.add(\n View.extend({\n attributes: {\n 'data-se': 'mfa-send-email-content',\n },\n className: 'mfa-send-email-content',\n template: hbs('{{{i18n code=\"email.mfa.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n getTemplateData: createEmailMaskElement,\n })\n );\n },\n\n renderChallengView: function() {\n this.removeChildren();\n this.add(\n View.extend({\n className: 'mfa-email-sent-content',\n attributes: {\n 'data-se': 'mfa-email-sent-content',\n },\n // Why use `{{{` for the description?\n // - factorEmail is actually an HTML fragment which\n // is created via another handlebar template and used for bold the email address.\n template: hbs('{{{i18n code=\"email.mfa.email.sent.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n getTemplateData: createEmailMaskElement,\n })\n );\n\n this.add(ResendEmailView);\n\n this.addInput({\n label: loc('email.code.label', 'login'),\n 'label-top': true,\n name: 'answer',\n input: TextBox,\n wide: true,\n type: 'tel',\n });\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n this.render();\n },\n});\n\nexport default SendEmailAndVerifyCodeFormVerifyEmailCodeForm;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'mfa-verify-totp',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-totp' },\n\n initialize: function() {\n const factorName = this.model.get('factorLabel');\n const maskPasswordField = this.model.get('provider') === 'RSA' || this.model.get('provider') === 'DEL_OATH';\n\n this.title = factorName;\n if (this.model.get('isFactorTypeVerification')) {\n this.subtitle = loc('mfa.challenge.totp.subtitle.multiple', 'login', [factorName]);\n } else {\n this.subtitle = loc('mfa.challenge.title', 'login', [factorName]);\n }\n\n this.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: maskPasswordField ? 'password' : 'tel',\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n\n if (this.model.get('provider') === 'RSA' || this.model.get('provider') === 'DEL_OATH') {\n this.listenTo(this.model, 'error', (source, error) => {\n if (error && error.status === 409) {\n // 409 means we are in change pin, so we should clear out answer input\n this.$('.auth-passcode input').val('');\n this.$('.auth-passcode input').trigger('change');\n this.$('.auth-passcode input').focus();\n }\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'mfa-verify-yubikey',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-yubikey' },\n\n initialize: function() {\n const factorName = this.model.get('factorLabel');\n\n this.title = factorName;\n this.subtitle = loc('factor.totpHard.yubikey.description', 'login');\n\n this.addInput({\n label: loc('factor.totpHard.yubikey.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n inputId: 'mfa-answer',\n type: 'password',\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n className: 'margin-btm-0',\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, internal } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport Factor from '../../../models/Factor';\nimport FactorsDropDownOptions from './FactorsDropDownOptions';\nconst { BaseDropDown } = internal.views.components;\n\n$(document).click(function(e) {\n const $target = $(e.target);\n const isDropdown = $target.closest('.option-selected').length > 0 && $target.closest('.dropdown').length > 0;\n\n if (!isDropdown) {\n $('.dropdown .options').hide();\n $('.dropdown a.option-selected').attr('aria-expanded', false);\n }\n});\n\nexport default BaseDropDown.extend({\n className: 'bg-helper icon-button',\n screenReaderText: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let factorLabel;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n }\n factorLabel = factor.get('factorLabel');\n return loc('mfa.factors.dropdown.sr.text', 'login', [factorLabel]);\n },\n events: {\n 'click a.option-selected': function(e) {\n e.preventDefault();\n if (_.result(this, 'disabled')) {\n e.stopPropagation();\n } else {\n const expanded = this.$('.options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n }\n },\n 'click .dropdown-disabled': function(e) {\n e.preventDefault();\n e.stopPropagation();\n },\n },\n initialize: function() {\n this.addOption(FactorsDropDownOptions.getDropdownOption('TITLE'));\n const factorsList = this.options.appState.get('factors');\n const multiplePushFactors = factorsList.hasMultipleFactorsOfSameType('push');\n\n factorsList.each(function(factor) {\n // Do not add okta totp if there are multiple okta push (each push will have an inline totp)\n if (!(factor.get('factorType') === 'token:software:totp' && multiplePushFactors)) {\n this.addOption(FactorsDropDownOptions.getDropdownOption(factor.get('factorName')), { model: factor });\n this.listenTo(this.last(), 'options:toggle', function() {\n this.$('.options').hide();\n this.$('a.option-selected').attr('aria-expanded', false);\n });\n }\n }, this);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-statements: [2, 16], complexity: [2, 10] */\nimport { _, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport RouterUtil from 'util/RouterUtil';\nconst pushTitleTpl = hbs('{{factorName}} ({{{deviceName}}})');\n\n// deviceName is escaped on BaseForm (see BaseForm's template)\n\nconst action = function(model) {\n let factorIndex;\n const factorType = model.get('factorType');\n const factorsList = this.options.appState.get('factors');\n\n if (factorsList.hasMultipleFactorsOfSameType(factorType)) {\n factorIndex = factorsList.getFactorIndex(factorType, model.get('id'));\n }\n const url = RouterUtil.createVerifyUrl(model.get('provider'), factorType, factorIndex);\n const self = this;\n\n this.options.appState.trigger('factorSwitched');\n this.model.manageTransaction(function(transaction, setTransaction) {\n // FACTOR_CHALLENGE does not have a prev link\n if (transaction.status === 'FACTOR_CHALLENGE') {\n this.options.appState.set('trapMfaRequiredResponse', true);\n }\n if (transaction.status === 'MFA_CHALLENGE' && transaction.prev) {\n this.options.appState.set('trapMfaRequiredResponse', true);\n return transaction.prev().then(function(trans) {\n self.trigger('options:toggle');\n setTransaction(trans);\n self.options.appState.trigger('navigate', url);\n });\n } else {\n self.trigger('options:toggle');\n self.options.appState.trigger('navigate', url);\n }\n });\n};\n\nconst dropdownOptions = {\n TITLE: {\n title: _.partial(loc, 'mfa.factors.dropdown.title', 'login'),\n className: 'dropdown-list-title',\n disabled: true,\n },\n\n OKTA_VERIFY: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n OKTA_VERIFY_PUSH: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return pushTitleTpl({\n factorName: this.model.get('factorLabel'),\n deviceName: this.model.get('deviceName'),\n });\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GOOGLE_AUTH: {\n icon: 'factor-icon mfa-google-auth-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_HOTP: {\n icon: 'factor-icon mfa-hotp-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SYMANTEC_VIP: {\n icon: 'factor-icon mfa-symantec-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n RSA_SECURID: {\n icon: 'factor-icon mfa-rsa-30',\n className: 'factor-option',\n title: _.partial(loc, 'factor.totpHard.rsaSecurId', 'login'),\n action: function() {\n action.call(this, this.model);\n },\n },\n\n ON_PREM: {\n icon: 'factor-icon mfa-onprem-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO: {\n icon: 'factor-icon mfa-duo-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO_PUSH: {\n icon: 'duo-push-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.push', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_SMS: {\n icon: 'duo-sms-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.sms', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_CALL: {\n icon: 'duo-call-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.call', 'login', ['XXX-XXX-7890']),\n },\n\n YUBIKEY: {\n icon: 'factor-icon mfa-yubikey-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SMS: {\n icon: 'factor-icon mfa-sms-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CALL: {\n icon: 'factor-icon mfa-call-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n QUESTION: {\n icon: 'factor-icon mfa-question-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n PASSWORD: {\n icon: 'factor-icon mfa-password-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WINDOWS_HELLO: {\n icon: 'factor-icon mfa-windows-hello-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n U2F: {\n icon: 'factor-icon mfa-u2f-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WEBAUTHN: {\n icon: 'factor-icon mfa-webauthn-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n EMAIL: {\n icon: 'factor-icon mfa-email-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_SAML: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_OIDC: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_CLAIMS: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n};\nexport default {\n getDropdownOption: function(factorName) {\n return dropdownOptions[factorName];\n },\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, View, loc, createButton, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport OAuth2Util from 'util/OAuth2Util';\nconst SharedUtil = internal.util.Util;\nconst dividerTpl = hbs('\\\n {{text}}\\\n ');\nconst formTitleTpl = hbs('{{title}}
');\nexport default View.extend({\n className: 'primary-auth-container',\n\n children: function() {\n const children = [];\n const socialIdpButtons = this.settings.get('configuredSocialIdps');\n const pivButton = this.settings.get('piv');\n const customButtons = this.settings.get('customButtons');\n const divider = dividerTpl({ text: loc('socialauth.divider.text', 'login') });\n\n if (this.settings.get('hasPivCard')) {\n children.push(this._createPivButton(pivButton));\n }\n\n _.each(\n socialIdpButtons,\n function(button) {\n children.push(this._createSocialIdpButton(button));\n },\n this\n );\n\n _.each(\n customButtons,\n function(button) {\n children.push(this._createCustomButton(button));\n },\n this\n );\n\n // If the social auth buttons have to be above the Okta form, the title moves from\n // primary auth form to the social auth (above the buttons) and the divider goes below\n // the buttons (in between social auth and primary auth). If social auth needs to go below\n // Okta form, just add the divider at the top of the social auth container. The title still\n // lives in primary auth form.\n if (this.settings.get('socialAuthPositionTop')) {\n children.unshift(formTitleTpl({ title: loc('primaryauth.title', 'login') }));\n // Divider between Primary Auth and the Social Auth\n children.push(divider);\n } else {\n children.unshift(divider);\n }\n\n return children;\n },\n\n _createSocialIdpButton: function(options) {\n return createButton({\n attributes: {\n 'data-se': options.dataAttr,\n },\n className: options.className,\n title: function() {\n return options.text || loc(options.i18nKey);\n },\n click: function(e) {\n e.preventDefault();\n if (this.settings.get('oauth2Enabled')) {\n OAuth2Util.getTokens(this.settings, { idp: options.id }, this.options.currentController);\n } else {\n const baseUrl = this.settings.get('baseUrl');\n let params;\n const lastAuthResponse = this.options.appState.get('lastAuthResponse');\n if (this.options.appState.get('usingDeviceFlow')) {\n params = $.param({\n stateToken: lastAuthResponse?.stateToken,\n });\n } else {\n params = $.param({\n fromURI: this.settings.get('relayState'),\n });\n }\n const targetUri = `${baseUrl}/sso/idps/${options.id}?${params}`;\n SharedUtil.redirect(targetUri);\n }\n },\n });\n },\n\n _createPivButton: function(options) {\n let className = options.className || '';\n return createButton({\n attributes: {\n 'data-se': 'piv-card-button',\n },\n className: className + ' piv-button',\n title: options.text || loc('piv.cac.card', 'login'),\n click: function(e) {\n e.preventDefault();\n this.options.appState.trigger('navigate', 'signin/verify/piv');\n },\n });\n },\n\n _createCustomButton: function(options) {\n return createButton({\n attributes: {\n 'data-se': options.dataAttr,\n },\n className: options.className + ' default-custom-button',\n title: function() {\n return options.title || loc(options.i18nKey);\n },\n click: options.click,\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Form, loc } from 'okta';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport TypingUtil from 'util/TypingUtil';\nimport Util from 'util/Util';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'primary-auth-form',\n noCancelButton: true,\n attributes: { novalidate: 'novalidate' },\n save: function() {\n if (this.settings.get('features.passwordlessAuth')) {\n return loc('oform.next', 'login');\n }\n return loc('primaryauth.submit', 'login');\n },\n saveId: 'okta-signin-submit',\n layout: 'o-form-theme',\n\n // If socialAuth is configured, the title moves from the form to\n // the top of the container (and is rendered in socialAuth).\n title: function() {\n let formTitle = loc('primaryauth.title', 'login');\n\n if (this.settings.get('socialAuthPositionTop')) {\n formTitle = '';\n }\n return formTitle;\n },\n\n initialize: function() {\n const trackTypingPattern = this.settings.get('features.trackTypingPattern');\n\n this.listenTo(this, 'save', async function() {\n const { appState } = this.options;\n if (trackTypingPattern) {\n const typingPattern = TypingUtil.getTypingPattern();\n appState.set('typingPattern', typingPattern);\n }\n const creds = {\n username: this.model.get('username'),\n };\n\n if (!this.settings.get('features.passwordlessAuth')) {\n creds.password = this.model.get('password');\n }\n\n // show loading spinner and disable submit button before processCreds hook runs\n appState.trigger('loading', true);\n this.state.trigger('togglePrimaryAuthButton', true);\n \n await this.settings.processCreds(creds);\n\n if (this.settings.get('features.deviceFingerprinting')) {\n try {\n const fingerprint = await DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el);\n appState.set('deviceFingerprint', fingerprint);\n } catch {\n // Keep going even if device fingerprint fails\n }\n }\n\n this.model.save();\n });\n\n this.stateEnableChange();\n },\n\n stateEnableChange: function() {\n this.listenTo(this.state, 'change:enabled', function(model, enable) {\n if (enable) {\n this.enable();\n } else {\n this.disable();\n }\n });\n },\n\n inputs: function() {\n const inputs = [];\n\n inputs.push(this.getUsernameField());\n if (!this.settings.get('features.passwordlessAuth')) {\n inputs.push(this.getPasswordField());\n }\n if (this.settings.get('features.rememberMe')) {\n inputs.push(this.getRemeberMeCheckbox());\n }\n return inputs;\n },\n\n getUsernameField: function() {\n const userNameFieldObject = {\n className: 'margin-btm-5',\n label: loc('primaryauth.username.placeholder', 'login'),\n 'label-top': true,\n explain: () => {\n if (!this.isCustomized('primaryauth.username.tooltip')) {\n return false;\n }\n\n return Util.createInputExplain('primaryauth.username.tooltip', 'primaryauth.username.placeholder', 'login');\n },\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'okta-signin-username',\n type: 'text',\n disabled: this.options.appState.get('disableUsername'),\n autoComplete: 'username',\n // TODO: support a11y attrs in Courage - OKTA-279025\n render: function() {\n const that = this;\n function clearAriaInvalid() {\n that.$(this)\n .removeAttr('aria-invalid')\n .off('focusout', clearAriaInvalid)\n .off('change', clearAriaInvalid);\n }\n\n this.$(`input[name=${this.options.name}]`)\n // OKTA-430928: to prevent NVDA and JAWS screen readers from\n // announcing \"required invalid entry\" before the user has a chance to\n // complete the field, aria-invalid is set to \"false\" initially and\n // removed on focusout or change using clearAriaInvalid()\n .attr({\n 'aria-invalid': 'false',\n 'aria-required': 'true',\n })\n .prop({\n required: true,\n })\n .focusout(clearAriaInvalid)\n .change(clearAriaInvalid);\n },\n };\n\n return userNameFieldObject;\n },\n\n getPasswordField: function() {\n const passwordFieldObject = {\n className: 'margin-btm-30',\n label: loc('primaryauth.password.placeholder', 'login'),\n 'label-top': true,\n explain: () => {\n if (!this.isCustomized('primaryauth.password.tooltip')) {\n return false;\n }\n\n return Util.createInputExplain('primaryauth.password.tooltip', 'primaryauth.password.placeholder', 'login');\n },\n 'explain-top': true,\n name: 'password',\n inputId: 'okta-signin-password',\n validateOnlyIfDirty: true,\n type: 'password',\n autoComplete: 'current-password',\n // TODO: support a11y attrs in Courage - OKTA-279025\n render: function() {\n const that = this;\n function clearAriaInvalid() {\n that.$(this)\n .removeAttr('aria-invalid')\n .off('focusout', clearAriaInvalid)\n .off('change', clearAriaInvalid);\n }\n this.$(`input[name=${this.options.name}]`)\n // OKTA-430928: to prevent NVDA and JAWS screen readers from\n // announcing \"required invalid entry\" before the user has a chance to\n // complete the field, aria-invalid is set to \"false\" initially and\n // removed on focusout or change using clearAriaInvalid()\n .attr({\n 'aria-invalid': 'false',\n 'aria-required': 'true',\n })\n .prop({\n required: true\n })\n .focusout(clearAriaInvalid)\n .change(clearAriaInvalid);\n },\n };\n\n if (this.settings.get('features.showPasswordToggleOnSignInPage')) {\n passwordFieldObject.params = {};\n passwordFieldObject.params.showPasswordToggle = true;\n }\n return passwordFieldObject;\n },\n\n isCustomized: function(property) {\n const language = this.settings.get('language');\n const i18n = this.settings.get('i18n');\n const customizedProperty = i18n && i18n[language] && i18n[language][property];\n\n return !!customizedProperty;\n },\n\n // TODO fix method name typo\n getRemeberMeCheckbox: function() {\n return {\n label: false,\n placeholder: loc('remember', 'login'),\n name: 'remember',\n type: 'checkbox',\n 'label-top': true,\n className: 'margin-btm-0',\n initialize: function() {\n this.listenTo(this.model, 'change:remember', function(model, val) {\n // OKTA-98946: We normally re-render on changes to model values,\n // but in this case we will manually update the checkbox due to\n // iOS Safari and how it handles autofill - it will autofill the\n // form anytime the dom elements are re-rendered, which prevents\n // the user from editing their username.\n this.$(':checkbox').prop('checked', val).trigger('updateState');\n });\n },\n };\n },\n\n focus: function() {\n if (!this.model.get('username')) {\n this.getInputs().first().focus();\n } else if (!this.settings.get('features.passwordlessAuth')) {\n this.getInputs().toArray()[1].focus();\n }\n if (this.settings.get('features.trackTypingPattern')) {\n TypingUtil.track('okta-signin-username');\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst SubSchemaSubSchema = View.extend({\n index: '',\n message: '',\n class: function() {\n return;\n },\n className: function() {\n return 'subschema-unsatisfied subschema-' + this.index;\n },\n template: hbs(\n '\\\n \\\n \\\n {{message}}\\\n
\\\n '\n ),\n getTemplateData: function() {\n return {\n message: this.message,\n };\n },\n});\nexport default View.extend({\n className: 'subschema',\n\n children: function() {\n return this.subSchemas.map(function(subSchema, index) {\n const description = subSchema.get('description');\n const message = description;\n // TODO API should send translated strings instead of i18n code inside description\n // or send param with i18n code\n\n return SubSchemaSubSchema.extend({\n index: index,\n message: message,\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport Enums from 'util/Enums';\nconst CAN_REMOVE_BEACON_CLS = 'can-remove-beacon';\nexport default View.extend({\n tagName: 'main',\n className: 'auth-container main-container',\n id: Enums.WIDGET_CONTAINER_ID,\n attributes: { 'data-se': 'auth-container', tabindex: '-1' },\n initialize: function(options) {\n this.listenTo(options.appState, 'change:beaconType', function(model, type) {\n this.$el.toggleClass(CAN_REMOVE_BEACON_CLS, type === 'security');\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n \\\n {{i18n code=\"contact.support\" bundle=\"login\" arguments=\"helpSupportNumber\"}}
\\\n '\n ),\n className: 'contact-support',\n\n getTemplateData: function() {\n return this.settings.pick('helpSupportNumber');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Factor from 'models/Factor';\nimport Q from 'q';\nimport FactorUtil from 'util/FactorUtil';\nimport FactorsDropDown from 'views/mfa-verify/dropdown/FactorsDropDown';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n \\\n \\\n \\\n \\\n \\\n \\\n '\n ),\n\n events: {\n 'click .auth-beacon-factor': function(e) {\n e.preventDefault();\n e.stopPropagation();\n const expanded = this.$('.dropdown .options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n },\n },\n\n initialize: function() {\n this.options.appState.set('beaconType', 'factor');\n },\n\n getTemplateData: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let className;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'));\n }\n className = factor.get('iconClassName');\n return { className: className || '' };\n },\n\n postRender: function() {\n if (this.options.animate) {\n this.$('.auth-beacon-factor').fadeIn(200);\n }\n const appState = this.options.appState;\n\n if (appState.get('hasMultipleFactorsAvailable')) {\n this.add(FactorsDropDown, '[data-type=\"factor-types-dropdown\"]');\n }\n },\n\n fadeOut: function() {\n const deferred = Q.defer();\n\n this.$('.auth-beacon-factor').fadeOut(200, function() {\n deferred.resolve();\n });\n return deferred.promise;\n },\n\n equals: function(Beacon, options) {\n return (\n Beacon &&\n this instanceof Beacon &&\n options.provider === this.options.provider &&\n (options.factorType === this.options.factorType ||\n (FactorUtil.isOktaVerify(options.provider, options.factorType) &&\n FactorUtil.isOktaVerify(this.options.provider, this.options.factorType)))\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"needhelp\" bundle=\"login\"}}\\\n \\\n \\\n - \\\n \\\n {{i18n code=\"forgotpassword\" bundle=\"login\"}}\\\n \\\n
\\\n {{#if features.selfServiceUnlock}}\\\n - \\\n \\\n {{i18n code=\"unlockaccount\" bundle=\"login\"}}\\\n \\\n
\\\n {{/if}}\\\n {{#each helpLinks.custom}}\\\n - \\\n {{text}}\\\n
\\\n {{/each}}\\\n - \\\n \\\n {{i18n code=\"help\" bundle=\"login\"}}\\\n \\\n
\\\n
\\\n '\n ),\n className: 'auth-footer',\n\n initialize: function() {\n this.listenTo(this.state, 'change:enabled', function(model, enable) {\n this.$('.link').toggleClass('o-form-disabled', !enable);\n });\n },\n\n getTemplateData: function() {\n let helpLinkUrl;\n const customHelpPage = this.settings.get('helpLinks.help');\n\n if (customHelpPage) {\n helpLinkUrl = customHelpPage;\n } else {\n helpLinkUrl = hbs('{{baseUrl}}/help/login')({ baseUrl: this.settings.get('baseUrl') });\n }\n return _.extend(this.settings.toJSON({ verbose: true }), { helpLinkUrl: helpLinkUrl });\n },\n postRender: function() {\n this.$('.js-help-links').hide();\n },\n toggleLinks: function(e) {\n e.preventDefault();\n\n this.$('.js-help-links').slideToggle(200, () => {\n this.$('.js-help').attr('aria-expanded', this.$('.js-help-links').is(':visible'));\n });\n },\n events: {\n 'click .js-help': function(e) {\n e.preventDefault();\n if (!this.state.get('enabled')) {\n return;\n }\n\n this.toggleLinks(e);\n },\n 'click .js-forgot-password': function(e) {\n e.preventDefault();\n if (!this.state.get('enabled')) {\n return;\n }\n\n const customResetPasswordPage = this.settings.get('helpLinks.forgotPassword');\n\n if (customResetPasswordPage) {\n Util.redirect(customResetPasswordPage);\n } else {\n this.options.appState.trigger('navigate', 'signin/forgot-password');\n }\n },\n 'click .js-unlock': function(e) {\n e.preventDefault();\n if (!this.state.get('enabled')) {\n return;\n }\n\n const customUnlockPage = this.settings.get('helpLinks.unlock');\n\n if (customUnlockPage) {\n Util.redirect(customUnlockPage);\n } else {\n this.options.appState.trigger('navigate', 'signin/unlock');\n }\n },\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport hbs from 'handlebars-inline-precompile';\nimport FooterSignout from './FooterSignout';\n\nexport default FooterSignout.extend({\n template: hbs(\n '\\\n {{#if hasFactorPageCustomLink}}\\\n \\\n {{factorPageCustomLinkText}}\\\n \\\n {{/if}}\\\n {{#if showLink}}\\\n \\\n {{linkText}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer clearfix',\n getTemplateData: function() {\n const signoutTemplateData = FooterSignout.prototype.getTemplateData.apply(this, arguments);\n const factorPageCustomLinkHref = this.settings.get('helpLinks.factorPage.href');\n const factorPageCustomLinkText = this.settings.get('helpLinks.factorPage.text');\n const showLink = !this.settings.get('features.hideSignOutLinkInMFA') &&\n !this.settings.get('features.mfaOnlyFlow');\n return Object.assign({}, signoutTemplateData, {\n hasFactorPageCustomLink: factorPageCustomLinkText && factorPageCustomLinkHref,\n factorPageCustomLinkHref,\n factorPageCustomLinkText,\n showLink,\n });\n },\n});\n","/*!\n * Copyright (c) 2016-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{label}}\\\n {{text}}\\\n \\\n '\n ),\n className: 'registration-container',\n\n events: {\n 'click a.registration-link': 'handleClickEvent',\n },\n\n handleClickEvent: function(e) {\n e.preventDefault();\n const clickHandler = this.settings.get('registration.click');\n\n if (clickHandler) {\n clickHandler();\n } else if (this.options.appState.get('isIdxStateToken')) {\n this.options.appState.trigger('navigate', 'signin/enroll-user');\n } else {\n this.options.appState.trigger('navigate', 'signin/register');\n }\n },\n\n getTemplateData: function() {\n const templateData = {\n label: loc('registration.signup.label', 'login'),\n text: loc('registration.signup.text', 'login'),\n };\n\n return templateData;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{linkText}}\\\n \\\n '\n ),\n className: 'auth-footer clearfix',\n events: {\n 'click a[data-se=\"signout-link\"]': 'handleSignout',\n },\n handleSignout: function(e) {\n e.preventDefault();\n\n const appState = this.options.appState;\n appState.trigger('signOut');\n const isSMSPasswordRecovery = appState.get('isSMSPasswordRecovery');\n\n this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(() => {\n if (this.settings.get('signOutLink') && !isSMSPasswordRecovery) {\n Util.redirect(this.settings.get('signOutLink'));\n } else {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n appState.trigger('navigate', '');\n }\n });\n },\n getTemplateData: function() {\n return {\n linkClassName: _.isUndefined(this.options.linkClassName) ? 'goto' : this.options.linkClassName,\n linkText: this.options.linkText || loc('goback', 'login'),\n };\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n \\\n \\\n \\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n className: 'piv-beacon',\n template: hbs(\n '\\\n \\\n \\\n \\\n \\\n \\\n \\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nexport default View.extend({\n template: hbs`{{#if requirements}}\n \n {{i18n code=\"password.complexity.requirements.header\" bundle=\"login\"}}\n \n \n {{#each requirements}}- {{this}}
{{/each}}\n
\n {{/if}}`,\n\n attributes: {\n 'data-se': 'password-requirements-html',\n },\n\n allRequirements: [],\n\n initialize: function(options) {\n const policy = options.policy;\n\n if (!policy) {\n return;\n }\n\n this.allRequirements = FactorUtil.getPasswordComplexityDescriptionForHtmlList(policy);\n },\n\n getTemplateData: function() {\n return {\n requirements: this.allRequirements,\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Animations from 'util/Animations';\n\nfunction setBackgroundImage(el, appState) {\n const imgSrc = appState.get('securityImage');\n const imgDescription = appState.get('securityImageDescription');\n const isUndefinedUser = appState.get('isUndefinedUser');\n const isNewUser = appState.get('isNewUser');\n const isSecurityImage = !isUndefinedUser && !isNewUser;\n // NOTE: The imgSrc is returned by the server so that every\n // user has a unique image. However new and undefined user states\n // are hard coded into the css and the value returned by the server\n // is ignored.\n\n el.css('background-image', '');\n el.removeClass('new-user undefined-user');\n if (isNewUser) {\n el.addClass('new-user');\n return;\n }\n if (isUndefinedUser) {\n el.addClass('undefined-user');\n return;\n }\n if (isSecurityImage) {\n // TODO: Newer versions of qtip will remove aria-describedby on their own when destroy() is called.\n el.removeAttr('aria-describedby');\n el.find('.accessibility-text').text(imgDescription);\n el.css('background-image', 'url(' + _.escape(imgSrc) + ')');\n return;\n }\n}\n\nfunction antiPhishingMessage(image, host) {\n $(window).on(\n 'resize.securityBeaconQtip',\n _.debounce(function() {\n if (image.is(':visible')) {\n image.qtip('show');\n }\n }, 300)\n );\n\n // Show the message that the user has not logged in from this device before.\n image.qtip({\n prerender: true,\n content: {\n text: loc('primaryauth.newUser.tooltip', 'login', [_.escape(host)]),\n button: loc('primaryauth.newUser.tooltip.close', 'login'),\n },\n style: {\n classes: 'okta-security-image-tooltip security-image-qtip qtip-custom qtip-shadow qtip-rounded',\n tip: { height: 12, width: 16 },\n },\n position: {\n my: 'top center',\n at: 'center',\n target: $('.auth-beacon-security'),\n adjust: { method: 'flip', scroll: false, resize: true },\n effect: false,\n },\n hide: { event: false, fixed: true },\n show: { event: false, delay: 200 },\n events: {\n move: function(event, api) {\n if (!api.elements.target.is(':visible')) {\n // Have to hide it immediately, with no effect\n api.set('hide.effect', false);\n api.hide();\n api.set('hide.effect', true);\n }\n },\n },\n });\n\n // It is necessary to delay toggle to the next render cycle, since qtip internally defers some setup tasks.\n setTimeout(() => {\n image.qtip('toggle', image.is(':visible'));\n }, 0);\n}\n\nfunction destroyAntiPhishingMessage(image) {\n image.qtip('destroy');\n $(window).off('resize.securityBeaconQtip');\n}\n\nasync function updateSecurityImage($el, appState, animate) {\n const image = $el.find('.auth-beacon-security');\n const border = $el.find('.js-auth-beacon-border');\n const hasBorder = !appState.get('isUndefinedUser');\n const hasAntiPhishing = appState.get('isNewUser');\n const radialProgressBar = $el.find('.radial-progress-bar');\n const host = appState.get('baseUrl').match(/https?:\\/\\/(.[^/]+)/)[1];\n const duration = 200;\n\n if (!animate) {\n // Do not animate the security beacon\n // This occurs when initializing the form\n setBackgroundImage(image, appState);\n border.toggleClass('auth-beacon-border', hasBorder);\n return;\n }\n\n destroyAntiPhishingMessage(image);\n\n // Animate loading the security beacon\n if (!hasBorder) {\n // This occurs when appState username is blank\n // we do not yet know if the user is recognized\n image.fadeOut(duration, function() {\n setBackgroundImage(image, appState);\n border.removeClass('auth-beacon-border');\n image.fadeIn(duration);\n });\n } else {\n // Animate loading the security beacon with a loading bar for the border\n // This occurs when the username has been checked against Okta.\n border.removeClass('auth-beacon-border');\n await Animations.radialProgressBar({\n $el: radialProgressBar,\n swap() {\n image.fadeOut(duration, () => {\n setBackgroundImage(image, appState);\n image.fadeIn(duration);\n });\n },\n });\n border.addClass('auth-beacon-border');\n if (hasAntiPhishing) {\n antiPhishingMessage(image, host);\n }\n }\n}\n\nexport default View.extend({\n template: hbs(\n '\\\n \\\n \\\n \\\n \\\n \\\n \\\n \\\n \\\n '\n ),\n className: 'js-security-beacon',\n\n initialize: function(options) {\n this.update = _.partial(updateSecurityImage, this.$el, options.appState);\n this.listenTo(options.appState, 'change:securityImage', this.update);\n this.listenTo(options.appState, 'loading', function(isLoading) {\n this.$el.toggleClass('beacon-loading', isLoading);\n this.removeAntiPhishingMessage();\n });\n this.options.appState.set('beaconType', 'security');\n\n this.listenTo(options.appState, 'navigate', this.removeAntiPhishingMessage);\n },\n\n postRender: function() {\n this.update(false);\n },\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n\n removeAntiPhishingMessage: function() {\n const image = this.$el.find('.auth-beacon-security');\n\n image.qtip('destroy');\n },\n});\n","import { loc, View } from 'okta';\nimport Enums from 'util/Enums';\n\nexport default View.extend({\n tagName: 'a',\n className: 'skip-to-content-link',\n attributes: { href: `#${Enums.WIDGET_CONTAINER_ID}` },\n initialize: function initialize() {\n this.$el.append(loc('skip.to.main.content', 'login'));\n }\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nexport default View.extend({\n className: 'okta-waiting-spinner',\n attributes: {\n 'data-se': 'o-form-okta-waiting-spinner',\n },\n modelEvents: {\n 'spinner:show': 'show',\n 'spinner:hide': 'hide',\n },\n\n initialize: function(options) {\n if (options && options.visible === false) {\n this.hide();\n }\n },\n\n show: function() {\n this.$el.removeClass('hide');\n },\n\n hide: function() {\n this.$el.addClass('hide');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n//note: not including Okta here and explicitly including jquery and Handlebars\n//because we want to be explicit about which TextBox we are extending here\n//and want to avoid the cirucular dependency that occurs if we\n//include Okta\nimport { internal } from 'okta';\nimport 'qtip';\nimport BrowserFeatures from 'util/BrowserFeatures';\nconst { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n postRender: function() {\n if (this.options.type === 'number') {\n const input = this.$('input');\n\n input.attr({\n pattern: '[0-9]*',\n inputmode: 'numeric',\n });\n }\n TextBox.prototype.postRender.apply(this, arguments);\n },\n // Override the focus() to ignore focus in IE. IE (8-11) has a known bug where\n // the placeholder text disappears when the input field is focused.\n focus: function() {\n if (BrowserFeatures.isIE()) {\n return;\n }\n return TextBox.prototype.focus.apply(this, arguments);\n },\n});\n","import hbs from 'handlebars-inline-precompile';\n\nconst consentLogoHeaderTemplate = hbs`{{#if clientURI}}\n \n{{/if}}\n{{#if customLogo}}\n \n {{{i18n code=\"consent.required.text\" bundle=\"login\" arguments=\"appName\"}}}\n {{#if issuer}}\n {{issuer}}\n {{/if}}\n
`;\n\nexport default consentLogoHeaderTemplate;\n","import { _, $ } from 'okta';\nimport Errors from 'util/Errors';\nimport OAuth2Util from 'util/OAuth2Util';\n\nexport default function buildRenderOptions(widgetOptions = {}, options = {}) {\n const authParams = $.extend(true, {}, widgetOptions.authParams, _.pick(options, OAuth2Util.AUTH_PARAMS));\n const { el, clientId, redirectUri } = Object.assign({}, widgetOptions, options);\n const renderOptions = Object.assign({}, { el, clientId, redirectUri, authParams });\n\n if (!renderOptions.el) {\n throw new Errors.ConfigError('\"el\" is required');\n }\n\n if (!renderOptions.clientId) {\n throw new Errors.ConfigError('\"clientId\" is required');\n }\n\n if (!renderOptions.redirectUri) {\n throw new Errors.ConfigError('\"redirectUri\" is required');\n }\n\n return renderOptions;\n}","import { $ } from 'okta';\nimport Enums from 'util/Enums';\n\nexport default function createRouter(Router, widgetOptions, renderOptions, authClient, successFn, errorFn, hooks) {\n let resolve;\n let reject;\n const promise = new Promise((_resolve, _reject) => {\n resolve = _resolve;\n reject = _reject;\n });\n const routerOptions = $.extend(true, {}, widgetOptions, renderOptions, {\n authClient,\n hooks,\n globalSuccessFn: (res) => {\n successFn && successFn(res); // call success function if provided\n if (res && res.status === Enums.SUCCESS) {\n resolve(res);\n }\n },\n globalErrorFn: (error) => {\n errorFn && errorFn(error); // call error function if provided\n reject(error);\n }\n });\n const router = new Router(routerOptions);\n router.start();\n return {\n router,\n routerOptions,\n promise\n };\n}\n\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: 0 */\nimport AccountUnlockedController from 'AccountUnlockedController';\nimport ActivateTotpController from 'ActivateTotpController';\nimport AdminConsentRequiredController from 'AdminConsentRequiredController';\nimport BarcodePushController from 'BarcodePushController';\nimport BarcodeTotpController from 'BarcodeTotpController';\nimport ConsentRequiredController from 'ConsentRequiredController';\nimport CustomPasswordExpiredController from 'CustomPasswordExpiredController';\nimport DeviceActivateController from './DeviceActivateController';\nimport DeviceActivateTerminalController from './DeviceActivateTerminalController';\nimport EnrollActivateCustomFactorController from 'EnrollActivateCustomFactorController';\nimport EnrollActivateEmailController from 'EnrollActivateEmailController';\nimport EnrollCallAndSmsController from 'EnrollCallAndSmsController';\nimport EnrollChoicesController from 'EnrollChoicesController';\nimport EnrollCustomFactorController from 'EnrollCustomFactorController';\nimport EnrollDuoController from 'EnrollDuoController';\nimport EnrollEmailController from 'EnrollEmailController';\nimport EnrollHotpController from 'EnrollHotpController';\nimport EnrollOnPremController from 'EnrollOnPremController';\nimport EnrollPasswordController from 'EnrollPasswordController';\nimport EnrollQuestionController from 'EnrollQuestionController';\nimport EnrollSymantecVipController from 'EnrollSymantecVipController';\nimport EnrollTotpController from 'EnrollTotpController';\nimport EnrollU2FController from 'EnrollU2FController';\nimport EnrollUserController from 'EnrollUserController';\nimport EnrollWebauthnController from 'EnrollWebauthnController';\nimport EnrollWindowsHelloController from 'EnrollWindowsHelloController';\nimport EnrollYubikeyController from 'EnrollYubikeyController';\nimport EnrollmentLinkSentController from 'EnrollmentLinkSentController';\nimport EnterPasscodePushFlowController from 'EnterPasscodePushFlowController';\nimport ForgotPasswordController from 'ForgotPasswordController';\nimport IDPDiscoveryController from 'IDPDiscoveryController';\nimport ForceIDPDiscoveryController from 'ForceIDPDiscoveryController';\nimport ManualSetupPushController from 'ManualSetupPushController';\nimport ManualSetupTotpController from 'ManualSetupTotpController';\nimport MfaVerifyController from 'MfaVerifyController';\nimport PasswordExpiredController from 'PasswordExpiredController';\nimport PasswordResetController from 'PasswordResetController';\nimport PollController from 'PollController';\nimport PrimaryAuthController from 'PrimaryAuthController';\nimport PwdResetEmailSentController from 'PwdResetEmailSentController';\nimport RecoveryChallengeController from 'RecoveryChallengeController';\nimport RecoveryLoadingController from 'RecoveryLoadingController';\nimport RecoveryQuestionController from 'RecoveryQuestionController';\nimport RefreshAuthStateController from 'RefreshAuthStateController';\nimport RegistrationCompleteController from 'RegistrationCompleteController';\nimport RegistrationController from 'RegistrationController';\nimport UnlockAccountController from 'UnlockAccountController';\nimport UnlockEmailSentController from 'UnlockEmailSentController';\nimport VerifyCustomFactorController from 'VerifyCustomFactorController';\nimport VerifyDuoController from 'VerifyDuoController';\nimport VerifyPIVController from 'VerifyPIVController';\nimport VerifyU2FController from 'VerifyU2FController';\nimport VerifyWebauthnController from 'VerifyWebauthnController';\nimport VerifyWindowsHelloController from 'VerifyWindowsHelloController';\nimport ErrorStateController from 'ErrorStateController';\nimport BaseLoginRouter from 'util/BaseLoginRouter';\nimport FactorBeacon from 'views/shared/FactorBeacon';\nimport PIVBeacon from 'views/shared/PIVBeacon';\nimport SecurityBeacon from 'views/shared/SecurityBeacon';\n\nimport Enums from 'util/Enums';\n\nexport default BaseLoginRouter.extend({\n routes: {\n '': 'defaultAuth',\n signin: 'primaryAuth',\n 'signin/verify/duo/web': 'verifyDuo',\n 'signin/verify/piv': 'verifyPIV',\n 'signin/poll': 'poll',\n 'signin/verify/fido/webauthn': 'verifyWebauthn',\n 'signin/verify/webauthn': 'verifyWebauthn',\n 'signin/verify/fido/u2f': 'verifyU2F',\n 'signin/verify/u2f': 'verifyU2F',\n 'signin/verify/generic_saml/assertion:saml2': 'verifySAMLFactor',\n 'signin/verify/generic_oidc/assertion:oidc': 'verifyOIDCFactor',\n 'signin/verify/custom/claims_provider': 'verifyClaimsFactor',\n 'signin/verify/:factorType': 'verifyNoProvider',\n 'signin/verify/:provider/:factorType(/:factorIndex)': 'verify',\n 'signin/enroll': 'enrollChoices',\n 'signin/enroll/duo/web': 'enrollDuo',\n 'signin/enroll/okta/question': 'enrollQuestion',\n 'signin/enroll/okta/password': 'enrollPassword',\n 'signin/enroll/okta/sms': 'enrollSms',\n 'signin/enroll/okta/call': 'enrollCall',\n 'signin/enroll/okta/email': 'enrollEmail',\n 'signin/enroll-activate/okta/sms': 'enrollSms',\n 'signin/enroll-activate/okta/call': 'enrollCall',\n 'signin/enroll/rsa/token': 'enrollRsa',\n 'signin/enroll/del_oath/token': 'enrollOnPrem',\n 'signin/enroll/symantec/token': 'enrollSymantecVip',\n 'signin/enroll/yubico/token:hardware': 'enrollYubikey',\n 'signin/enroll/fido/webauthn': 'enrollWebauthn',\n 'signin/enroll/fido/u2f': 'enrollU2F',\n 'signin/enroll/generic_saml/assertion:saml2': 'enrollSAMLFactor',\n 'signin/enroll/generic_oidc/assertion:oidc': 'enrollOIDCFactor',\n 'signin/enroll/custom/claims_provider': 'enrollClaimsFactor',\n 'signin/enroll/custom/token:hotp': 'enrollHotpFactor',\n 'signin/enroll/:provider/:factorType': 'enrollTotpFactor',\n 'signin/enroll-activate/okta/email': 'enrollActivateEmail',\n 'signin/enroll-activate/okta/push': 'scanBarcodePushFactor',\n 'signin/enroll-activate/okta/push/manual': 'manualSetupPushFactor',\n 'signin/enroll-activate/okta/push/sent': 'activationLinkSent',\n 'signin/enroll-activate/okta/token:software:totp/passcode': 'enterPasscodeInPushEnrollmentFlow',\n 'signin/enroll-activate/custom/claims_provider': 'enrollActivateClaimsFactor',\n 'signin/enroll-activate/:provider/:factorType': 'scanBarcodeTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/activate': 'activateTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/manual': 'manualSetupTotpFactor',\n 'signin/password-expired': 'passwordExpired',\n 'signin/custom-password-expired': 'customPasswordExpired',\n 'signin/forgot-password': 'forgotPassword',\n 'signin/recovery-challenge': 'recoveryChallenge',\n 'signin/recovery-emailed': 'recoveryEmailSent',\n 'signin/recovery-question': 'recoveryQuestion',\n 'signin/password-reset': 'passwordReset',\n 'signin/reset-password/:token': 'recoveryLoading',\n 'signin/user-unlock/:token': 'recoveryLoading',\n 'signin/recovery/:token': 'recoveryLoading',\n 'signin/unlock-emailed': 'unlockEmailSent',\n 'signin/unlock': 'unlockAccount',\n 'signin/account-unlocked': 'accountUnlocked',\n 'signin/refresh-auth-state(/:token)': 'refreshAuthState',\n 'signin/register': 'register',\n 'signin/register-complete': 'registerComplete',\n 'signin/error': 'errorState',\n 'signin/consent': 'consentRequired',\n 'signin/admin-consent': 'adminConsentRequired',\n 'signin/enroll-user': 'enrollUser',\n 'signin/device-activate-complete': 'deviceActivateComplete',\n 'signin/device-activate': 'deviceActivate',\n 'signin/idp-discovery-check': 'idpDiscoveryCheck',\n '*wildcard': 'defaultAuth',\n },\n\n // Route handlers that do not require a stateToken. If the page is refreshed,\n // these functions will not require a status call to refresh the stateToken.\n stateLessRouteHandlers: [\n 'defaultAuth',\n 'idpDiscovery',\n 'primaryAuth',\n 'forgotPassword',\n 'recoveryLoading',\n 'unlockAccount',\n 'refreshAuthState',\n 'register',\n 'registerComplete',\n 'errorState',\n 'verifyPIV',\n ],\n\n defaultAuth: function() {\n if (window.location.hash === `#${Enums.WIDGET_CONTAINER_ID}`) {\n document.getElementById(Enums.WIDGET_CONTAINER_ID).focus();\n return;\n }\n if (this.settings.get('features.idpDiscovery')) {\n this.idpDiscovery();\n } else {\n this.primaryAuth();\n }\n },\n\n idpDiscoveryCheck: function() {\n this.render(ForceIDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n idpDiscovery: function() {\n this.render(IDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n primaryAuth: function() {\n this.render(PrimaryAuthController, { Beacon: SecurityBeacon });\n },\n\n verifyDuo: function() {\n this.render(VerifyDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n verifyPIV: function() {\n this.render(VerifyPIVController, { Beacon: PIVBeacon });\n },\n\n poll: function() {\n this.render(PollController);\n },\n\n verifyWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(VerifyWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(VerifyWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n verifyU2F: function() {\n this.render(VerifyU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n verifySAMLFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n verifyOIDCFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n verifyClaimsFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n verify: function(provider, factorType, factorIndex) {\n this.render(MfaVerifyController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n factorIndex: factorIndex,\n Beacon: FactorBeacon,\n });\n },\n\n verifyNoProvider: function(factorType) {\n this.render(MfaVerifyController, {\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollChoices: function() {\n this.render(EnrollChoicesController, { Beacon: SecurityBeacon });\n },\n\n enrollDuo: function() {\n this.render(EnrollDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n enrollQuestion: function() {\n this.render(EnrollQuestionController, {\n provider: 'OKTA',\n factorType: 'question',\n Beacon: FactorBeacon,\n });\n },\n\n enrollPassword: function() {\n this.render(EnrollPasswordController, {\n provider: 'OKTA',\n factorType: 'password',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSms: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'sms',\n Beacon: FactorBeacon,\n });\n },\n\n enrollCall: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'call',\n Beacon: FactorBeacon,\n });\n },\n\n enrollEmail: function() {\n this.render(EnrollEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateEmail: function() {\n this.render(EnrollActivateEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollRsa: function() {\n this.render(EnrollOnPremController, {\n provider: 'RSA',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOnPrem: function() {\n this.render(EnrollOnPremController, {\n provider: 'DEL_OATH',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSymantecVip: function() {\n this.render(EnrollSymantecVipController, {\n provider: 'SYMANTEC',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollYubikey: function() {\n this.render(EnrollYubikeyController, {\n provider: 'YUBICO',\n factorType: 'token:hardware',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSAMLFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOIDCFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n enrollClaimsFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateClaimsFactor: function() {\n this.render(EnrollActivateCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollTotpFactor: function(provider, factorType) {\n this.render(EnrollTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollHotpFactor: function() {\n this.render(EnrollHotpController, {\n provider: 'CUSTOM',\n factorType: 'token:hotp',\n Beacon: FactorBeacon,\n });\n },\n\n enrollWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(EnrollWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(EnrollWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n enrollU2F: function() {\n this.render(EnrollU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodeTotpFactor: function(provider, factorType) {\n this.render(BarcodeTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodePushFactor: function() {\n this.render(BarcodePushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activateTotpFactor: function(provider, factorType) {\n this.render(ActivateTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupTotpFactor: function(provider, factorType) {\n this.render(ManualSetupTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupPushFactor: function() {\n this.render(ManualSetupPushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activationLinkSent: function() {\n this.render(EnrollmentLinkSentController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n enterPasscodeInPushEnrollmentFlow: function() {\n this.render(EnterPasscodePushFlowController, {\n provider: 'OKTA',\n factorType: 'token:software:totp',\n Beacon: FactorBeacon,\n });\n },\n\n passwordExpired: function() {\n this.render(PasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n customPasswordExpired: function() {\n this.render(CustomPasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n forgotPassword: function() {\n this.render(ForgotPasswordController);\n },\n\n recoveryChallenge: function() {\n this.render(RecoveryChallengeController, { Beacon: SecurityBeacon });\n },\n\n recoveryEmailSent: function() {\n this.render(PwdResetEmailSentController, { Beacon: SecurityBeacon });\n },\n\n unlockEmailSent: function() {\n this.render(UnlockEmailSentController, { Beacon: SecurityBeacon });\n },\n\n recoveryQuestion: function() {\n this.render(RecoveryQuestionController, { Beacon: SecurityBeacon });\n },\n\n passwordReset: function() {\n this.render(PasswordResetController, { Beacon: SecurityBeacon });\n },\n\n recoveryLoading: function(token) {\n this.render(RecoveryLoadingController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n unlockAccount: function() {\n this.render(UnlockAccountController);\n },\n\n accountUnlocked: function() {\n this.render(AccountUnlockedController, { Beacon: SecurityBeacon });\n },\n\n refreshAuthState: function(token) {\n this.render(RefreshAuthStateController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n register: function() {\n this.render(RegistrationController);\n },\n\n registerComplete: function() {\n this.render(RegistrationCompleteController);\n },\n\n errorState: function() {\n this.render(ErrorStateController, { Beacon: SecurityBeacon });\n },\n\n consentRequired: function() {\n this.render(ConsentRequiredController);\n },\n\n adminConsentRequired: function() {\n this.render(AdminConsentRequiredController);\n },\n\n enrollUser: function() {\n this.render(EnrollUserController);\n },\n\n deviceActivate: function() {\n this.render(DeviceActivateController);\n },\n deviceActivateComplete: function() {\n this.render(DeviceActivateTerminalController);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model } from 'okta';\nimport { mergeHook } from 'util/Hooks';\nimport { HookDefinition, HooksOptions } from 'types';\n\nexport default class Hooks extends Model {\n\n mergeHook(formName: string, hookToMerge: HookDefinition): void {\n const hooks = this.get('hooks') || {};\n mergeHook(hooks, formName, hookToMerge);\n this.set('hooks', hooks);\n }\n\n getHook(formName: string): HookDefinition {\n const hooks: HooksOptions = this.get('hooks') || {};\n return hooks[formName]; // may be undefined\n }\n \n}\n","/* eslint max-statements: [2, 22], complexity: [2, 12] */\n\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model, loc, internal, ModelProperty } from 'okta';\nimport config from 'config/config.json';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Errors from 'util/Errors';\nimport IDP from 'util/IDP';\nimport Logger from 'util/Logger';\nimport Util from 'util/Util';\nimport CountryUtil from 'util/CountryUtil';\nimport { OktaAuth } from '@okta/okta-auth-js';\nconst SharedUtil = internal.util.Util;\nconst ConfigError = Errors.ConfigError;\nconst UnsupportedBrowserError = Errors.UnsupportedBrowserError;\nconst assetBaseUrlTpl = hbs('https://global.oktacdn.com/okta-signin-widget/{{version}}');\n\nconst local: Record = {\n baseUrl: ['string', true],\n recoveryToken: ['string', false, undefined],\n stateToken: ['string', false, undefined],\n username: ['string', false],\n signOutLink: ['string', false],\n relayState: ['string', false],\n\n redirect: {\n type: 'string',\n values: ['never', 'always', 'auto'],\n value: 'auto',\n },\n\n // allows bootstrapping the Widget into a specific view such\n // as register or forgot password\n flow: ['string', false, 'default'],\n\n // Function to transform the username before passing it to the API\n // for Primary Auth, Forgot Password and Unlock Account.\n transformUsername: ['function', false],\n\n // CALLBACKS\n globalSuccessFn: 'function',\n globalErrorFn: 'function',\n processCreds: 'function',\n hooks: 'object',\n\n // IMAGES\n logo: 'string',\n logoText: ['string', false],\n helpSupportNumber: 'string',\n\n // \n // attribute to hold proxy (fake) idx response\n // to render static pages without initiating idx pipeline\n proxyIdxResponse: ['object', false],\n\n // \n // By default, state handle will be saved to session storage\n // and will be clear when terminal error or success redirect.\n // Set this flag to true if you want to override this behavior.\n // a.k.a dishonor the state handle stored in session storage.\n overrideExistingStateToken: ['boolean', false, false],\n\n // FEATURES\n 'features.router': ['boolean', true, false],\n 'features.securityImage': ['boolean', true, false],\n 'features.rememberMe': ['boolean', true, true],\n 'features.autoPush': ['boolean', true, false],\n 'features.smsRecovery': ['boolean', true, false],\n 'features.callRecovery': ['boolean', true, false],\n 'features.emailRecovery': ['boolean', false, true],\n 'features.webauthn': ['boolean', true, false],\n 'features.selfServiceUnlock': ['boolean', true, false],\n 'features.multiOptionalFactorEnroll': ['boolean', true, false],\n 'features.deviceFingerprinting': ['boolean', false, false],\n 'features.hideSignOutLinkInMFA': ['boolean', false, false],\n 'features.skipIdpFactorVerificationBtn': ['boolean', false, false],\n 'features.hideBackToSignInForReset': ['boolean', false, false],\n 'features.customExpiredPassword': ['boolean', true, false],\n 'features.registration': ['boolean', false, false],\n 'features.idpDiscovery': ['boolean', false, false],\n 'features.passwordlessAuth': ['boolean', false, false],\n 'features.showPasswordToggleOnSignInPage': ['boolean', false, false],\n 'features.trackTypingPattern': ['boolean', false, false],\n 'features.redirectByFormSubmit': ['boolean', false, false],\n 'features.useDeviceFingerprintForSecurityImage': ['boolean', false, true],\n 'features.showPasswordRequirementsAsHtmlList': ['boolean', false, false],\n 'features.mfaOnlyFlow': ['boolean', false, false],\n 'features.scrollOnError': ['boolean', false, true],\n 'features.showKeepMeSignedIn': ['boolean', false, true],\n 'features.showIdentifier': ['boolean', false, true],\n 'features.autoFocus': ['boolean', false, true],\n 'features.rememberMyUsernameOnOIE': ['boolean', false, false],\n \n defaultCountryCode: ['string', false, 'US'],\n\n // I18N\n language: ['any', false], // Can be a string or a function\n i18n: ['object', false],\n\n // ASSETS\n 'assets.baseUrl': ['string', false],\n 'assets.rewrite': {\n type: 'function',\n value: _.identity,\n },\n 'assets.languages': ['array', false],\n\n // OAUTH2\n issuer: 'string',\n clientId: 'string',\n redirectUri: 'string',\n state: 'string',\n scopes: 'array',\n codeChallenge: 'string',\n codeChallengeMethod: ['string', false],\n oAuthTimeout: ['number', false],\n\n authScheme: ['string', false, 'OAUTH2'],\n\n // External IdPs\n idps: ['array', false, []],\n idpDisplay: {\n type: 'string',\n values: ['PRIMARY', 'SECONDARY'],\n value: 'SECONDARY',\n },\n\n // HELP LINKS\n 'helpLinks.help': 'string',\n 'helpLinks.forgotPassword': 'string',\n 'helpLinks.unlock': 'string',\n 'helpLinks.custom': 'array',\n 'helpLinks.factorPage.href': 'string',\n 'helpLinks.factorPage.text': 'string',\n\n //Custom Buttons\n customButtons: ['array', false, []],\n\n //Registration\n policyId: 'string',\n 'registration.click': 'function',\n 'registration.parseSchema': 'function',\n 'registration.preSubmit': 'function',\n 'registration.postSubmit': 'function',\n\n //Consent\n 'consent.cancel': 'function',\n\n //IDP Discovery\n 'idpDiscovery.requestContext': 'string',\n\n //Colors\n 'colors.brand': 'string',\n\n //Descriptions\n brandName: 'string',\n\n //PIV\n piv: ['object', false, {}],\n\n //Email verify callback\n otp: 'string',\n};\n\nconst derived: Record = {\n showPasswordToggle: {\n deps: ['features.showPasswordToggleOnSignInPage'],\n fn: function() {\n // showPasswordToggle is for OIE only.\n // Used to default showPasswordToggleOnSignInPage to true.\n const defaultValue = true;\n const customizedValue = this.options?.features?.showPasswordToggleOnSignInPage ??\n this.options?.['features.showPasswordToggleOnSignInPage'];\n return customizedValue ?? defaultValue;\n },\n cache: true,\n },\n redirectUtilFn: {\n deps: ['features.redirectByFormSubmit'],\n fn: function(redirectByFormSubmit) {\n return redirectByFormSubmit ? Util.redirectWithFormGet.bind(Util) : SharedUtil.redirect.bind(SharedUtil);\n },\n cache: true,\n },\n supportedLanguages: {\n deps: ['i18n', 'language', 'assets.languages'],\n fn: function(i18n, language, hostedLanguages) {\n // By default, the language be automatically detected from the browser\n // Developers can specify the language. It will be added to the supportedLanguages list.\n // Developers can also provide a list of languages with hosted assets, these replace the default list\n const supportedLanguages = hostedLanguages || config.supportedLanguages;\n return _.union(\n supportedLanguages, \n _.keys(i18n), \n _.isString(language) ? [language] : []\n );\n },\n cache: true,\n },\n languageCode: {\n deps: ['language', 'supportedLanguages'],\n fn: function(language, supportedLanguages) {\n const userLanguages = BrowserFeatures.getUserLanguages();\n\n const preferred = _.clone(userLanguages);\n\n const supportedLowerCase = Util.toLower(supportedLanguages);\n\n // Any developer defined \"language\" takes highest priority:\n // As a string, i.e. 'en', 'ja', 'zh-CN'\n if (_.isString(language)) {\n preferred.unshift(language);\n } else if (_.isFunction(language)) {\n // As a callback function, which is passed the list of supported\n // languages and detected user languages. This function must return\n // a languageCode, i.e. 'en', 'ja', 'zh-CN'\n preferred.unshift(language(supportedLanguages, userLanguages));\n }\n\n // Add default language, and expand to include any language\n // codes that do not include region, dialect, etc.\n preferred.push(config.defaultLanguage);\n const expanded = Util.toLower(Util.expandLanguages(preferred));\n\n // Perform a case insensitive search - this is necessary in the case\n // of browsers like Safari\n let i;\n let supportedPos;\n\n for (i = 0; i < expanded.length; i++) {\n supportedPos = supportedLowerCase.indexOf(expanded[i]);\n if (supportedPos > -1) {\n return supportedLanguages[supportedPos];\n }\n }\n },\n },\n countryCode: {\n deps: ['defaultCountryCode'],\n fn: function(defaultCountryCode) {\n const countries = CountryUtil.getCountries();\n return Object.keys(countries).includes(defaultCountryCode)\n ? defaultCountryCode : 'US';\n },\n },\n mode: {\n deps: ['useInteractionCodeFlow', 'codeChallenge'],\n fn: function(useInteractionCodeFlow, codeChallenge) {\n if (useInteractionCodeFlow && codeChallenge) {\n return 'remediation';\n }\n return 'relying-party';\n }\n },\n oauth2Enabled: {\n deps: ['clientId', 'authScheme'],\n fn: function(clientId, authScheme) {\n return (!!clientId) && authScheme.toLowerCase() === 'oauth2';\n },\n cache: true,\n },\n oieEnabled: {\n deps: ['stateToken', 'proxyIdxResponse', 'useInteractionCodeFlow'],\n fn: function(stateToken, proxyIdxResponse, useInteractionCodeFlow) {\n return stateToken || proxyIdxResponse || useInteractionCodeFlow;\n },\n cache: true,\n },\n // Redirect Uri to provide in the oauth API\n oauthRedirectUri: {\n deps: ['redirectUri'],\n fn: function(redirectUri) {\n if (redirectUri) {\n return redirectUri;\n }\n\n let origin = window.location.origin;\n\n // IE8\n if (!origin) {\n const href = window.location.href;\n const path = window.location.pathname;\n\n if (path !== '') {\n origin = href.substring(0, href.lastIndexOf(path));\n }\n }\n\n return encodeURI(origin);\n },\n },\n // Adjusts the idps passed into the widget based on if they get explicit support\n configuredSocialIdps: {\n deps: ['idps'],\n fn: function(idps) {\n return _.map(idps, function(idpConfig) {\n const idp = _.clone(idpConfig);\n\n let type = idp.type && idp.type.toLowerCase();\n\n if (!(type && _.contains(IDP.SUPPORTED_SOCIAL_IDPS, type))) {\n type = 'general-idp';\n idp.text = idp.text || '{ Please provide a text value }';\n }\n\n idp.className = [\n 'social-auth-button',\n 'social-auth-' + type + '-button ',\n idp.className ? idp.className : '',\n ].join(' ');\n idp.dataAttr = 'social-auth-' + type + '-button';\n idp.i18nKey = 'socialauth.' + type + '.label';\n return idp;\n });\n },\n cache: true,\n },\n // Can support piv authentication\n hasPivCard: {\n deps: ['piv'],\n fn: function(piv) {\n return piv && piv.certAuthUrl;\n },\n cache: true,\n },\n // social auth buttons order - 'above'/'below' the primary auth form (boolean)\n socialAuthPositionTop: {\n deps: ['configuredSocialIdps', 'hasPivCard', 'idpDisplay'],\n fn: function(configuredSocialIdps, hasPivCard, idpDisplay) {\n return (!_.isEmpty(configuredSocialIdps) || hasPivCard) && idpDisplay.toUpperCase() === 'PRIMARY';\n },\n cache: true,\n },\n hasConfiguredButtons: {\n deps: ['configuredSocialIdps', 'customButtons', 'hasPivCard'],\n fn: function(configuredSocialIdps, customButtons, hasPivCard) {\n return !_.isEmpty(configuredSocialIdps) || !_.isEmpty(customButtons) || hasPivCard;\n },\n cache: true,\n }\n};\n\ntype SettingsProps = typeof local & typeof derived;\n\nexport default class Settings extends Model {\n authClient:OktaAuth;\n\n get>(attributeName: A): any {\n return Model.prototype.get.call(this, attributeName);\n }\n\n preinitialize(...args) {\n this.local = local;\n this.derived = derived;\n Model.prototype.preinitialize.apply(this, args);\n }\n\n initialize(options) {\n const { colors } = options;\n let { baseUrl } = options;\n if (!baseUrl) {\n // infer baseUrl from the issuer\n const { authClient } = options;\n if (authClient) {\n baseUrl = authClient.getIssuerOrigin();\n } else {\n // issuer can be passed at top-level or in authParams\n const { authParams } = options;\n let { issuer } = options;\n issuer = issuer || authParams?.issuer;\n baseUrl = issuer?.split('/oauth2/')[0];\n }\n this.set('baseUrl', baseUrl);\n }\n\n if (!baseUrl) {\n this.callGlobalError(new ConfigError(loc('error.required.baseUrl')));\n } else if (colors && _.isString(colors.brand) && !colors.brand.match(/^#[0-9A-Fa-f]{6}$/)) {\n this.callGlobalError(new ConfigError(loc('error.invalid.colors.brand')));\n } else if (BrowserFeatures.corsIsNotSupported()) {\n this.callGlobalError(new UnsupportedBrowserError(loc('error.unsupported.cors')));\n }\n }\n\n setAcceptLanguageHeader(authClient) {\n if (authClient) {\n authClient.http.setRequestHeader('Accept-Language', this.get('languageCode'));\n }\n }\n\n setAuthClient(authClient) {\n this.setAcceptLanguageHeader(authClient);\n this.authClient = authClient;\n }\n\n getAuthClient() {\n return this.authClient;\n }\n\n set(...args: any[]) {\n try {\n return Model.prototype.set.apply(this, args);\n } catch (e) {\n const message = e.message ? e.message : e;\n\n this.callGlobalError(new ConfigError(message));\n }\n }\n\n // Invokes the global success function. This should only be called on a\n // terminal part of the code (i.e. authStatus SUCCESS or after sending\n // a recovery email)\n callGlobalSuccess(status, data) {\n const res = _.extend(data, { status: status });\n // Defer this to ensure that our functions have rendered completely\n // before invoking their function\n\n _.defer(_.partial(this.get('globalSuccessFn'), res));\n }\n\n // Invokes the global error function. This should only be called on non\n // recoverable errors (i.e. configuration errors, browser unsupported\n // errors, etc)\n callGlobalError(err) {\n const globalErrorFn = this.get('globalErrorFn') || this.options.globalErrorFn;\n // Note: Must use \"this.options.globalErrorFn\" when they've passed invalid\n // arguments - globalErrorFn will not have been set yet\n\n if (globalErrorFn) {\n globalErrorFn(err);\n } else {\n // Only throw the error if they have not registered a globalErrorFn\n throw err;\n }\n }\n\n // Get the username by applying the transform function if it exists.\n transformUsername(username, operation) {\n const transformFn = this.get('transformUsername');\n\n if (transformFn && _.isFunction(transformFn)) {\n return transformFn(username, operation);\n }\n return username;\n }\n\n processCreds(creds) {\n const processCreds = this.get('processCreds');\n\n return Q.Promise(function(resolve) {\n if (!_.isFunction(processCreds)) {\n resolve();\n } else if (processCreds.length === 2) {\n processCreds(creds, resolve);\n } else {\n processCreds(creds);\n resolve();\n }\n });\n }\n\n parseRegistrationSchema(schema, onSuccess, onFailure) {\n const parseSchema = this.get('registration.parseSchema');\n\n //check for parseSchema callback\n if (_.isFunction(parseSchema)) {\n parseSchema(\n schema,\n function(schema) {\n onSuccess(schema);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'parseSchema';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(schema);\n }\n }\n\n preRegistrationSubmit(postData, onSuccess, onFailure) {\n const preSubmit = this.get('registration.preSubmit');\n\n //check for preSubmit callback\n if (_.isFunction(preSubmit)) {\n preSubmit(\n postData,\n function(postData) {\n onSuccess(postData);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'preSubmit';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(postData);\n }\n }\n\n postRegistrationSubmit(response, onSuccess, onFailure) {\n const postSubmit = this.get('registration.postSubmit');\n\n //check for postSubmit callback\n if (_.isFunction(postSubmit)) {\n postSubmit(\n response,\n function(response) {\n onSuccess(response);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'postSubmit';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(response);\n }\n }\n\n // Use the parse function to transform config options to the standard\n // settings we currently support. This is a good place to deprecate old\n // option formats.\n parse(options) {\n if (options.labels || options.country) {\n Logger.deprecate('Use \"i18n\" instead of \"labels\" and \"country\"');\n const overrides = options.labels || {};\n\n _.each(options.country, function(val, key) {\n overrides['country.' + key] = val;\n });\n // Old behavior is to treat the override as a global override, so we\n // need to add these overrides to each language\n options.i18n = {};\n _.each(config.supportedLanguages, function(language) {\n options.i18n[language] = overrides;\n });\n delete options.labels;\n delete options.country;\n }\n\n // Default the assets.baseUrl to the cdn, or remove any trailing slashes\n if (!options.assets) {\n options.assets = {};\n }\n const abu = options.assets.baseUrl;\n\n if (!abu) {\n options.assets.baseUrl = assetBaseUrlTpl({ version: config.version });\n } else if (abu[abu.length - 1] === '/') {\n options.assets.baseUrl = abu.substring(0, abu.length - 1);\n }\n\n return options;\n }\n\n isDsTheme() {\n return false;\n }\n\n}\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nconst fn: Record any> = {};\nconst hasFullCorsSupport = 'withCredentials' in new window.XMLHttpRequest();\nconst hasXDomainRequest = typeof window.XDomainRequest !== 'undefined';\n\nfn.corsIsNotSupported = function() {\n return !(hasFullCorsSupport || hasXDomainRequest);\n};\n\nfn.corsIsNotEnabled = function(jqXhr) {\n // Not a definitive check, but it's the best we've got.\n // Note: This will change when OktaAuth is updated\n return jqXhr.status === 0;\n};\n\n// This is currently not being used, but we'll keep it around for when we\n// want a fallback mechanism - i.e. use localStorage if it exists, else fall\n// back to cookies.\nfn.localStorageIsNotSupported = function() {\n const test = 'test';\n\n try {\n localStorage.setItem(test, test);\n localStorage.removeItem(test);\n return false;\n } catch (e) {\n return true;\n }\n};\n\nfn.supportsPushState = function(win) {\n win = win || window;\n return !!(win.history && win.history.pushState);\n};\n\nfn.isIE = function() {\n return /(msie|trident)/i.test(navigator.userAgent);\n};\n\nfn.isFirefox = function() {\n return navigator.userAgent.toLowerCase().indexOf('firefox') > -1;\n};\n\nfn.isEdge = function() {\n // This is to just check for windows edge. Mac edge - chromium based's UA is 'edg'.\n return navigator.userAgent.toLowerCase().indexOf('edge') > -1;\n};\n\nfn.isSafari = function() {\n // Chrome has safari in its useragent string so adding this extra check.\n return (\n navigator.userAgent.toLowerCase().indexOf('safari') > -1 &&\n navigator.userAgent.toLowerCase().indexOf('chrome') === -1\n );\n};\n\nfn.isMac = function() {\n return navigator.platform.toUpperCase().indexOf('MAC') >= 0;\n};\n\n\nfn.isAndroid = function() {\n // Windows Phone also contains \"Android\"\n return /android/i.test(navigator.userAgent) &&\n !/windows phone/i.test(navigator.userAgent);\n};\n\nfn.isIOS = function() {\n // iOS detection from: http://stackoverflow.com/a/9039885/177710\n return /iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream;\n};\n\n// Returns a list of languages the user has configured for their browser, in\n// order of preference.\nfn.getUserLanguages = function() {\n // Chrome, Firefox\n if (navigator.languages) {\n return navigator.languages;\n }\n\n const languages = [];\n const properties = [\n 'language', // Safari, IE11\n 'userLanguage', // IE\n 'browserLanguage', // IE\n 'systemLanguage' // IE\n ];\n\n properties.forEach(function(property) {\n if (navigator[property]) {\n languages.push(navigator[property]);\n }\n });\n\n return languages;\n};\n\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport config from 'config/config.json';\nimport fetch from 'cross-fetch';\nimport country from 'nls/country.json';\nimport login from 'nls/login.json';\nimport Q from 'q';\nimport _ from 'underscore';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Logger from 'util/Logger';\nconst STORAGE_KEY = 'osw.languages';\n\ndeclare type i18nOptions = {\n [localeOrCountry: string]: {\n [i18nKey: string]: string;\n }\n}\n\ndeclare type Assets = {\n baseUrl: string;\n rewrite(origPath: string): string;\n}\n\n/**\n * Converts options to our internal format, which distinguishes between\n * login and country bundles.\n *\n * Example options.i18n passed in by the developer:\n * {\n * 'en': {\n * 'needhelp': 'need help override',\n * 'primaryauth.title': 'new sign in text',\n * 'country.JP' = 'Japan, Japan'\n * }\n * }\n *\n * Parsed:\n * {\n * 'en': {\n * 'login': {\n * 'needhelp': 'need help override',\n * 'primaryauth.title': 'new sign in text',\n * },\n * 'country': {\n * 'JP': 'Japan, Japan'\n * }\n * }\n * }\n */\nfunction parseOverrides(i18n) {\n if (!i18n) {\n return {};\n }\n\n const i18nWithLowerCaseKeys = {};\n\n _.each(_.keys(i18n), function(key) {\n i18nWithLowerCaseKeys[key.toLowerCase()] = i18n[key];\n });\n\n return _.mapObject(i18nWithLowerCaseKeys, function(props) {\n const mapped = { login: {}, country: {} };\n\n if (!_.isObject(props)) {\n throw new Error('Invalid format for \"i18n\"');\n }\n _.each(props, function(val, key) {\n const split = key.split(/^country\\./);\n\n if (split.length > 1) {\n mapped.country[split[1]] = val;\n } else {\n mapped.login[split[0]] = val;\n }\n });\n return mapped;\n });\n}\n\n// Caching: We only bundle English by default in the Sign-In Widget. Other\n// languages are loaded on demand and cached in localStorage. These languages\n// are tied to the version of the widget - when it bumps, we reset the cache.\n\nfunction getCachedLanguages() {\n let storage = JSON.parse(localStorage.getItem(STORAGE_KEY));\n\n if (!storage || storage.version !== config.version) {\n storage = {\n version: config.version,\n };\n }\n return storage;\n}\n\nfunction addLanguageToCache(language, loginJson, countryJson) {\n const current = getCachedLanguages();\n\n current[language] = {\n login: loginJson,\n country: countryJson,\n };\n localStorage.setItem(STORAGE_KEY, JSON.stringify(current));\n}\n\n// By default, the assets.bundleUrl is tied to the Okta CDN.\n//\n// There are two overrides available for modifying where we load the asset\n// bundles from:\n//\n// 1. assets.baseUrl\n//\n// This is the base path the OSW pulls assets from, which in this case is\n// the Okta CDN. Override this config option if you want to host the\n// files on your own domain, or if you're using a new version of the\n// widget whose language files haven't been published to the CDN yet.\n//\n// 2. assets.rewrite\n//\n// This is a function that can be used to modify the path + fileName of\n// the bundle we're loading, relative to the baseUrl. When called, it\n// will pass the current path, and expect the new path to be returned.\n// This is useful, for example, if your build process has an extra\n// cachebusting step, i.e:\n//\n// function rewrite(file) {\n// // file: /labels/json/login_ja.json\n// return file.replace('.json', '.' + md5file(file) + '.json');\n// }\n//\n// Note: Most developers will not need to use these overrides - the default\n// is to use the Okta CDN and to use the same path + file structure the\n// widget module publishes by default.\nfunction fetchJson(bundle, language, assets) {\n // Our bundles use _ to separate country and region, i.e:\n // zh-CN -> zh_CN\n const languageCode = language.replace('-', '_');\n\n const path = assets.rewrite(encodeURI(`/labels/json/${bundle}_${languageCode}.json`));\n\n const headers = {\n Accept: 'application/json',\n 'Content-Type': 'text/plain',\n };\n\n const mode = 'no-cors';\n\n return fetch(assets.baseUrl + path, {\n method: 'GET',\n headers,\n mode,\n })\n .then(res => res.text())\n .then(txt => JSON.parse(txt));\n}\n\nfunction getBundles(language, assets, supportedLanguages) {\n // Two special cases:\n // 1. Default language is already bundled with the widget\n // 2. If the language is not in our config file, it means that they've\n // probably defined it on their own.\n if (language === config.defaultLanguage || !_.contains(supportedLanguages, language)) {\n return Q({});\n }\n\n //local storage does not work correctly with android web views (embeded browers)\n //so skip the caching and just make the request to get the local info\n const localStorageIsSupported = !BrowserFeatures.localStorageIsNotSupported();\n\n if (localStorageIsSupported) {\n const cached = getCachedLanguages();\n\n if (cached[language]) {\n return Q(cached[language]);\n }\n }\n\n return Q.all([fetchJson('login', language, assets), fetchJson('country', language, assets)])\n .spread(function(loginJson, countryJson) {\n if (localStorageIsSupported) {\n addLanguageToCache(language, loginJson, countryJson);\n }\n return { login: loginJson, country: countryJson };\n })\n .catch(function() {\n // If there is an error, this will default to the bundled language and\n // we will no longer try to load the language this session.\n Logger.warn('Unable to load language: ' + language);\n return {};\n });\n}\n\nexport default {\n login: login,\n country: country,\n // Courage components within the sign in widget point to courage bundle to look\n // up i18nkeys. Since we dont have courage.properties inside the sign in widget\n // we are pointing courage bundle to login.\n courage: login,\n\n currentLanguage: null,\n\n isLoaded: function(language: string): boolean {\n return this.currentLanguage === language;\n },\n\n remove: function(): void {\n this.currentLanguage = null;\n },\n\n loadLanguage: function(language: string, overrides: i18nOptions, assets: Assets, supportedLanguages: string[]): Q.Promise {\n const parsedOverrides = parseOverrides(overrides);\n const lowerCaseLanguage = language.toLowerCase();\n return getBundles(language, assets, supportedLanguages).then(bundles => {\n // Always extend from the built in defaults in the event that some\n // properties are not translated\n this.login = _.extend({}, login, bundles.login);\n this.country = _.extend({}, country, bundles.country);\n this.courage = _.extend({}, login, bundles.login);\n if (parsedOverrides[lowerCaseLanguage]) {\n _.extend(this.login, parsedOverrides[lowerCaseLanguage]['login']);\n _.extend(this.country, parsedOverrides[lowerCaseLanguage]['country']);\n _.extend(this.courage, parsedOverrides[lowerCaseLanguage]['login']);\n }\n this.currentLanguage = language;\n });\n },\n};\n","/* eslint max-depth: [1,4] */\n/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// BaseLoginRouter contains the more complicated router logic - rendering/\n// transition, etc. Most router changes should happen in LoginRouter (which is\n// responsible for adding new routes)\nimport { _, $, Backbone, Router, loc, BaseRouterOptions } from 'okta';\nimport Settings from 'models/Settings';\nimport Bundles from 'util/Bundles';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport ColorsUtil from 'util/ColorsUtil';\nimport Enums from 'util/Enums';\nimport Errors from 'util/Errors';\nimport Logger from 'util/Logger';\nimport LanguageUtil from 'util/LanguageUtil';\nimport AuthContainer from 'views/shared/AuthContainer';\nimport Header from 'views/shared/Header';\nimport AppState from './models/AppState';\nimport sessionStorageHelper from './client/sessionStorageHelper';\nimport {\n startLoginFlow,\n interactionCodeFlow,\n handleConfiguredFlow,\n} from './client';\n\nimport transformIdxResponse from './ion/transformIdxResponse';\nimport { FORMS } from './ion/RemediationConstants';\nimport CookieUtil from 'util/CookieUtil';\nimport { formatError, LegacyIdxError, StandardApiError } from './client/formatError';\nimport { RenderError, RenderResult } from 'types';\nimport { OktaAuth, IdxResponse } from '@okta/okta-auth-js';\nimport Hooks from 'models/Hooks';\n\nexport interface BaseLoginRouterOptions extends BaseRouterOptions, Backbone.RouterOptions {\n globalSuccessFn?: (res: RenderResult) => void;\n globalErrorFn?: (res: RenderError) => void;\n authClient?: OktaAuth;\n hooks: Hooks\n}\n\nclass BaseLoginRouter extends Router {\n Events: Backbone.Events = Backbone.Events; // also set on prototype\n hasControllerRendered = false;\n settings: Settings;\n appState: AppState;\n hooks: Hooks;\n header: Header;\n\n constructor(options: BaseLoginRouterOptions) {\n super(options);\n\n // Create a default success and/or error handler if\n // one is not provided.\n if (!options.globalSuccessFn) {\n options.globalSuccessFn = function() { /* dummy function */ };\n }\n if (!options.globalErrorFn) {\n options.globalErrorFn = function(err) {\n Logger.error(err);\n };\n }\n\n this.settings = new Settings(_.omit(options, 'el', 'authClient', 'hooks'), { parse: true });\n this.settings.setAuthClient(options.authClient);\n\n if (!options.el) {\n this.settings.callGlobalError(new Errors.ConfigError(loc('error.required.el')));\n }\n\n $('body > div').on('click', function() {\n // OKTA-69769 Tooltip wont close on iPhone/iPad\n // Registering a click handler on the first div\n // allows a tap that falls outside the tooltip\n // to be registered as a tap by iOS\n // and then the open tooltip will lose focus and close.\n });\n\n this.hooks = options.hooks;\n this.appState = new AppState();\n\n const wrapper = new AuthContainer({ appState: this.appState });\n\n $(options.el).append(wrapper.render().$el);\n this.el = `#${Enums.WIDGET_CONTAINER_ID}`;\n this.header = new Header({\n el: this.el,\n appState: this.appState,\n settings: this.settings,\n });\n\n // Hide until unitial render\n this.hide();\n\n this.listenTo(this.appState, 'change:deviceFingerprint', this.updateDeviceFingerprint);\n this.listenTo(this.appState, 'error', this.handleError);\n this.listenTo(this.appState, 'updateAppState', this.handleUpdateAppState);\n this.listenTo(this.appState, 'remediationError', this.handleIdxResponseFailure);\n this.listenTo(this.appState, 'restartLoginFlow', this.restartLoginFlow);\n }\n\n updateDeviceFingerprint() {\n const authClient = this.settings.getAuthClient();\n const fingerprint = this.appState.get('deviceFingerprint');\n if (fingerprint) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', fingerprint);\n }\n }\n\n async handleUpdateAppState(idxResponse: IdxResponse): Promise {\n // Only update the cookie when the user has successfully authenticated themselves \n // to avoid incorrect/unnecessary updates.\n if (this.hasAuthenticationSucceeded(idxResponse) \n && this.settings.get('features.rememberMyUsernameOnOIE')) {\n this.updateIdentifierCookie(idxResponse);\n } \n\n const lastResponse = this.appState.get('idx');\n const useInteractionCodeFlow = this.settings.get('useInteractionCodeFlow');\n if (useInteractionCodeFlow) {\n if (idxResponse.interactionCode) {\n // Although session.stateHandle isn't used by interation flow,\n // it's better to clean up at the end of the flow.\n sessionStorageHelper.removeStateHandle();\n // This is the end of the IDX flow, now entering OAuth\n return interactionCodeFlow(this.settings, idxResponse);\n } \n } else {\n // Do not save state handle for the first page loads.\n // Because there shall be no difference between following behavior\n // 1. bootstrap widget\n // -> save state handle to session storage\n // -> refresh page\n // -> introspect using sessionStorage.stateHandle\n // 2. bootstrap widget\n // -> do not save state handle to session storage\n // -> refresh page\n // -> introspect using options.stateHandle\n if (lastResponse) {\n sessionStorageHelper.setStateHandle(idxResponse?.context?.stateHandle);\n }\n // Login flows that mimic step up (moving forward in login pipeline) via internal api calls,\n // need to clear stored stateHandles.\n // This way the flow can maintain the latest state handle. For eg. Device probe calls\n if (this.appState.get('currentFormName') === FORMS.CANCEL_TRANSACTION) {\n sessionStorageHelper.removeStateHandle();\n }\n }\n\n // transform response\n const ionResponse = transformIdxResponse(this.settings, idxResponse, lastResponse);\n\n await this.appState.setIonResponse(ionResponse, this.hooks);\n }\n\n handleIdxResponseFailure(error: LegacyIdxError = { error: 'unknown', details: undefined }) {\n // IDX errors will not call the global error handler\n error = formatError(error);\n this.handleUpdateAppState(error.details);\n }\n\n // Generic error handler for all exceptions\n handleError(error: LegacyIdxError | StandardApiError | Error = { error: 'unknown', details: undefined }) {\n // Show error message and notify listeners\n const originalError = error;\n const formattedError = formatError({...error}); // format the error to resemble an IDX response\n this.handleUpdateAppState(formattedError.details);\n this.settings.callGlobalError(originalError);\n\n // -- TODO: OKTA-244631 How to surface up the CORS error in IDX?\n // -- The `err` object from idx.js doesn't have XHR object\n // Global error handling for CORS enabled errors\n // if (err.xhr && BrowserFeatures.corsIsNotEnabled(err.xhr)) {\n // this.settings.callGlobalError(new Errors.UnsupportedBrowserError(loc('error.enabled.cors')));\n // return;\n // }\n }\n\n /* eslint max-statements: [2, 28], complexity: [2, 11] */\n async render(Controller, options = {}) {\n // If url changes then widget assumes that user's intention was to initiate a new login flow,\n // so clear stored token to use the latest token.\n if (sessionStorageHelper.getLastInitiatedLoginUrl() !== window.location.href) {\n sessionStorageHelper.removeStateHandle();\n }\n // Since we have a wrapper view, render our wrapper and use its content\n // element as our new el.\n // Note: Render it here because we know dom is ready at this point\n if (!this.header.rendered()) {\n this.el = this.header.render().getContentEl();\n }\n\n // If we need to load a language (or apply custom i18n overrides), do\n // this now and re-run render after it's finished.\n if (!Bundles.isLoaded(this.settings.get('languageCode'))) {\n await LanguageUtil.loadLanguage(this.appState, this.settings);\n }\n\n // introspect stateToken when widget is bootstrap with state token\n // and remove it from `settings` afterwards as IDX response always has\n // state token (which will be set into AppState)\n if (this.settings.get('oieEnabled')) {\n try {\n let idxResp = await startLoginFlow(this.settings);\n if (idxResp.error) {\n this.appState.trigger('remediationError', idxResp.error);\n } else {\n if (this.settings.get('flow') && !this.hasControllerRendered) {\n idxResp = await handleConfiguredFlow(idxResp, this.settings);\n }\n this.appState.trigger('updateAppState', idxResp);\n }\n } catch (exception) {\n this.appState.trigger('error', exception);\n } finally {\n // These settings should only be used one time, for initial render\n this.settings.unset('stateToken');\n this.settings.unset('proxyIdxResponse');\n }\n }\n\n // Load the custom colors only on the first render\n if (this.settings.get('colors.brand') && !ColorsUtil.isLoaded()) {\n const colors = {\n brand: this.settings.get('colors.brand'),\n };\n\n ColorsUtil.addStyle(colors);\n }\n\n // Show before initial render\n this.show();\n\n // render Controller\n this.unload();\n const controllerOptions = _.extend({\n el: this.el,\n settings: this.settings,\n appState: this.appState\n }, options);\n this.controller = new Controller(controllerOptions);\n\n // Bubble up all controller events\n this.listenTo(this.controller, 'all', this.trigger);\n\n this.controller.render();\n\n this.hasControllerRendered = true;\n }\n\n /**\n * When \"Remember My Username\" is enabled, we save the identifier in a cookie\n * so that the next time the user visits the SIW, the identifier field can be \n * pre-filled with this value.\n */\n updateIdentifierCookie(idxResponse: IdxResponse) {\n if (this.settings.get('features.rememberMe')) {\n // Update the cookie with the identifier\n const user = idxResponse?.context?.user;\n const { identifier } = user?.value || {};\n if (identifier) {\n CookieUtil.setUsernameCookie(identifier);\n }\n } else {\n // We remove the cookie explicitly if this feature is disabled.\n CookieUtil.removeUsernameCookie();\n } \n }\n\n hasAuthenticationSucceeded(idxResponse: IdxResponse) {\n // Check whether authentication has succeeded. This is done by checking the server response\n // and seeing if either the 'success' or 'successWithInteractionCode' objects are present.\n return idxResponse?.rawIdxState?.success || idxResponse?.rawIdxState?.successWithInteractionCode;\n }\n\n restartLoginFlow() {\n // clear all transaction data and saved IDX response\n this.settings.getAuthClient().transactionManager.clear();\n this.appState.set('idx', undefined);\n\n // Clear the recoveryToken, if any\n const authClient = this.settings.getAuthClient();\n delete authClient.options['recoveryToken'];\n this.settings.unset('recoveryToken');\n\n // Re-render the widget\n this.render(this.controller.constructor);\n }\n\n start() {\n const pushState = BrowserFeatures.supportsPushState();\n Router.prototype.start.call(this, { pushState: pushState });\n }\n\n hide() {\n this.header.$el.hide();\n }\n\n show() {\n this.header.$el.show();\n }\n\n remove() {\n this.unload();\n this.header.$el.remove();\n this.stopListening(this.appState);\n this.stopListening(this.settings);\n Bundles.remove();\n Backbone.history.stop();\n }\n}\n\n// Add \"Events\" to prototype for compatibility with existing code\nBaseLoginRouter.prototype.Events = Backbone.Events;\n\nexport default BaseLoginRouter;","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport BaseLoginRouter, { BaseLoginRouterOptions } from './BaseLoginRouter';\nimport FormController from './controllers/FormController';\n\nconst routes = {\n '': 'defaultAuth',\n '*wildcard': 'defaultAuth',\n};\n\nexport default class WidgetRouter extends BaseLoginRouter {\n constructor(options: BaseLoginRouterOptions) {\n super({ routes, ...options });\n }\n\n defaultAuth() {\n this.render(FormController);\n }\n\n}\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { ProceedOptions } from '@okta/okta-auth-js';\n\nexport async function emailVerifyCallback(settings) {\n const authClient = settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n const meta = await authClient.idx.getSavedTransactionMeta(); // meta can load in another tab using state if it matches\n if (!meta || !meta.interactionHandle) {\n // Flow can not continue in this tab. Create a synthetic server response and use it to display a message to the user\n const messages = {\n type: 'array',\n value: [\n // terminal-return-otp-only-no-location.json\n {\n 'message': 'Enter the OTP in your original browser or device.',\n 'i18n': {\n 'key': 'idx.enter.otp.in.original.tab'\n },\n 'class': 'INFO'\n }\n ]\n };\n\n const resp = {\n neededToProceed: [],\n // OKTA-382410 so bad that has to leverage rawIdxState\n rawIdxState: {\n messages,\n },\n context: {\n messages,\n }\n };\n return resp;\n }\n \n // Proceed using the OTP code\n const otp = settings.get('otp');\n const idxResponse = await authClient.idx.proceed({\n ...idxOptions,\n otp\n });\n return idxResponse;\n}\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport {\n IdxContext,\n IdxMessages,\n IdxResponse,\n RawIdxResponse\n} from '@okta/okta-auth-js';\nimport { loc } from 'okta';\n\nexport interface LegacyIdxError {\n error: string;\n details: IdxResponse\n}\n\nexport interface StandardApiError {\n error: string;\n error_description: string;\n}\n\nexport function isInvalidRecoveryTokenError(error): error is StandardApiError {\n // special case: error from interact when passing an (invalid) recovery token\n return (error?.error === 'invalid_request' && error.error_description === 'The recovery token is invalid');\n}\n\nexport function formatInvalidRecoveryTokenError(error: StandardApiError) {\n // This error comes from `oauth2/interact` so is not an IDX error.\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: error.error_description,\n i18n: {\n key: 'oie.invalid.recovery.token'\n },\n class: 'ERROR'\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return idxError;\n}\n\nexport function isOIENotEnabledError(error): error is StandardApiError {\n // special case: error from interact. `useInteractionCodeFlow` is true but the Org does not have OIE enabled\n // The response is not in IDX format. See playground/mocks/data/oauth2/error-feature-not-enabled.json\n return (error?.error === 'access_denied' && error.error_description);\n}\n\nexport function formatOIENotEnabledError(error: StandardApiError) {\n // This error comes from `oauth2/interact` so the error is in OAuth format\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: error.error_description,\n i18n: {\n key: 'oie.feature.disabled'\n },\n class: 'ERROR'\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return error;\n}\n\nexport function isOIEConfigurationError(error): error is StandardApiError {\n return (error?.error && error.error_description);\n}\n\nexport function formatOIEConfigurationError(error) {\n // This error comes from `oauth2/interact` so the error is in OAuth format\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: loc('oie.configuration.error', 'login'),\n class: 'ERROR',\n i18n: undefined\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return error;\n}\n\nexport function formatIDXError(error: LegacyIdxError | StandardApiError | Error): LegacyIdxError {\n // Make the error object resemble an IDX response\n const idxError = error as LegacyIdxError;\n idxError.details = idxError.details || {} as IdxResponse;\n const { details } = idxError;\n details.rawIdxState = details.rawIdxState || {} as RawIdxResponse;\n details.context = details.context || {} as IdxContext;\n details.neededToProceed = details.neededToProceed || [];\n\n // Populate generic error message if there isn't any.\n if (!details.rawIdxState.messages) {\n const idxMessage: IdxMessages = {\n type: 'array',\n value: [\n {\n message: loc('oform.error.unexpected', 'login'),\n class: 'ERROR',\n i18n: undefined\n }\n ]\n };\n details.rawIdxState.messages = idxMessage;\n details.context.messages = idxMessage;\n }\n\n return idxError;\n}\n\nexport function formatError(error: string | Error | LegacyIdxError | StandardApiError) {\n // If the error is a string, wrap it in an Error object\n if (typeof error === 'string') {\n error = new Error(error);\n }\n\n // special case error handling\n\n // invalid reccovery token\n if (isInvalidRecoveryTokenError(error)) {\n return formatInvalidRecoveryTokenError(error);\n }\n\n // OIE is not enabled\n if (isOIENotEnabledError(error)) {\n return formatOIENotEnabledError(error);\n }\n\n // Other errors from /interact in OAuth format\n if (isOIEConfigurationError(error)) {\n return formatOIEConfigurationError(error);\n }\n\n error = formatIDXError(error);\n return error;\n}","/*!\n * Copyright (c) 2021, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Errors from 'util/Errors';\nimport { emailVerifyCallback } from './emailVerifyCallback';\nimport sessionStorageHelper from './sessionStorageHelper';\nimport { CONFIGURED_FLOW } from './constants';\nimport { IdxTransactionMeta, ProceedOptions } from '@okta/okta-auth-js';\n\nconst handleProxyIdxResponse = async (settings) => {\n return Promise.resolve({\n rawIdxState: settings.get('proxyIdxResponse'),\n context: settings.get('proxyIdxResponse'),\n neededToProceed: [],\n });\n};\n\n/* eslint max-depth: [2, 3] */\n// eslint-disable-next-line complexity, max-statements\nexport async function startLoginFlow(settings) {\n const authClient = settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n\n // Return a preset response\n if (settings.get('proxyIdxResponse')) {\n return handleProxyIdxResponse(settings);\n }\n\n if (settings.get('overrideExistingStateToken')) {\n sessionStorageHelper.removeStateHandle();\n }\n\n if (settings.get('otp')) {\n return emailVerifyCallback(settings);\n }\n\n if (settings.get('useInteractionCodeFlow')) {\n const meta: IdxTransactionMeta = await authClient.idx.getSavedTransactionMeta();\n if (!meta) {\n // no saved transaction\n // if the configured flow is set to `proceed`, the SIW should only continue an existing idx transaction\n // if the SIW loads from a fresh state (there is no current transaction), throw an error\n const flow = authClient.idx.getFlow();\n if (flow && flow === CONFIGURED_FLOW.PROCEED) {\n throw new Errors.ConfiguredFlowError(\n 'Unable to proceed: saved transaction could not be loaded', flow\n );\n }\n // start new transaction\n return authClient.idx.start(idxOptions); // calls interact\n }\n\n // continue saved transaction\n return authClient.idx.proceed(idxOptions); // calls introspect\n }\n\n // Use stateToken from session storage if exists\n // See more details at ./docs/use-session-token-prior-to-settings.png\n const stateHandleFromSession = sessionStorageHelper.getStateHandle();\n if (stateHandleFromSession) {\n try {\n const idxResp = await authClient.idx.start({\n ...idxOptions,\n stateHandle: stateHandleFromSession\n });\n const hasError = idxResp.context?.messages?.value.length > 0;\n if (hasError) {\n throw new Error('saved stateToken is invalid'); // will be caught in this function\n }\n\n // 1. abandon the settings.stateHandle given session.stateHandle is still valid\n settings.set('stateToken', stateHandleFromSession);\n // 2. chain the idxResp to next handler\n return idxResp;\n } catch {\n // 1. remove session.stateHandle\n sessionStorageHelper.removeStateHandle();\n // 2. start the login again in order to introspect on settings.stateHandle\n return startLoginFlow(settings);\n }\n }\n\n // Use stateToken from options\n const stateHandle = settings.get('stateToken');\n if (stateHandle) {\n return authClient.idx.start({\n ...idxOptions,\n stateHandle\n });\n }\n\n throw new Errors.ConfigError('Set \"useInteractionCodeFlow\" to true in configuration to enable the ' +\n 'interaction_code\" flow for self-hosted widget.');\n}\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { _, Controller, loc } from 'okta';\nimport ViewFactory from '../view-builder/ViewFactory';\nimport IonResponseHelper from '../ion/IonResponseHelper';\nimport { getV1ClassName } from '../ion/ViewClassNamesFactory';\nimport { FORMS, TERMINAL_FORMS, FORM_NAME_TO_OPERATION_MAP } from '../ion/RemediationConstants';\nimport Util from '../../util/Util';\nimport sessionStorageHelper from '../client/sessionStorageHelper';\nimport { HttpResponse, IdxStatus, IdxOptions, ProceedOptions } from '@okta/okta-auth-js';\nimport { EventErrorContext } from 'types/events';\nimport { CONFIGURED_FLOW } from '../client/constants';\nimport Errors from 'util/Errors';\nexport interface ContextData {\n controller: string;\n formName: string;\n authenticatorKey?: string;\n methodType?: string;\n}\n\nexport interface ErrorContextData {\n xhr: HttpResponse;\n errorSummary?: string;\n}\n\nexport default Controller.extend({\n className: 'form-controller',\n\n appStateEvents: {\n 'change:currentFormName': 'handleFormNameChange',\n 'afterError': 'handleAfterError',\n 'invokeAction': 'handleInvokeAction',\n 'saveForm': 'handleSaveForm',\n 'switchForm': 'handleSwitchForm',\n },\n\n preRender() {\n this.removeChildren();\n },\n\n postRender() {\n const currentViewState = this.options.appState.getCurrentViewState();\n // TODO: add comments regarding when `currentViewState` would be null?\n if (!currentViewState) {\n return;\n }\n\n this.clearMetadata();\n\n let formName = currentViewState.name;\n if (formName === 'identify' && this.options.settings.get('flow') === CONFIGURED_FLOW.RESET_PASSWORD) {\n formName = 'identify-recovery';\n }\n const TheView = ViewFactory.create(\n formName,\n this.options.appState.get('authenticatorKey'),\n );\n try {\n this.formView = this.add(TheView, {\n options: {\n currentViewState,\n }\n }).last();\n } catch (error) {\n // This is the place where runtime error (NPE) happens at most of time.\n // It has been swallowed by Q.js hence add try/catch to surface up errors.\n this.options.settings.callGlobalError(error);\n return;\n }\n\n this.triggerAfterRenderEvent();\n },\n\n clearMetadata() {\n const formName = this.options.appState.get('currentFormName');\n // TODO: OKTA-392835 shall not clear state handle at terminal page\n if (TERMINAL_FORMS.includes(formName)) {\n sessionStorageHelper.removeStateHandle();\n }\n },\n\n triggerAfterRenderEvent() {\n const contextData = this.createAfterEventContext();\n this.trigger('afterRender', contextData);\n },\n\n handleFormNameChange() {\n this.render();\n },\n\n handleAfterError(error: HttpResponse) {\n const contextData = this.createAfterEventContext();\n const errorContextData: EventErrorContext = {\n xhr: error,\n errorSummary: error.responseJSON && error.responseJSON.errorSummary,\n };\n // TODO: need some enhancement after https://github.com/okta/okta-idx-js/pull/27\n // OKTA-318062\n this.trigger('afterError', contextData, errorContextData);\n },\n\n createAfterEventContext(): ContextData {\n const formName = this.options.appState.get('currentFormName');\n const authenticatorKey = this.options.appState.get('authenticatorKey');\n const methodType = this.options.appState.get('authenticatorMethodType');\n const isPasswordRecoveryFlow = this.options.appState.get('isPasswordRecoveryFlow');\n\n const v1ControllerClassName = getV1ClassName(\n formName,\n authenticatorKey,\n methodType,\n isPasswordRecoveryFlow,\n );\n\n const eventData: ContextData = {\n controller: v1ControllerClassName,\n formName,\n };\n\n if (authenticatorKey) {\n eventData.authenticatorKey = authenticatorKey;\n }\n if (methodType) {\n eventData.methodType = methodType;\n }\n\n return eventData;\n },\n\n handleSwitchForm(formName) {\n // trigger formName change to change view\n if (this.options.appState.get('messages')) {\n // Clear messages before calling switch form.\n // If a form has errors sent form API inside messages\n // and user hits back to factors list which triggers switchForm,\n // those error will show up on another screen that gets rendered after switchForm\n this.options.appState.unset('messages');\n }\n this.options.appState.set('currentFormName', formName);\n },\n\n // eslint-disable-next-line max-statements\n handleInvokeAction(actionPath = '', actionParams = {}) {\n const { appState, settings } = this.options;\n const idx = appState.get('idx');\n const { stateHandle } = idx.context;\n let invokeOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n stateHandle\n };\n let error;\n\n // Cancel action is executes synchronously\n if (actionPath === 'cancel') {\n // TODO: resolve race conditions caused by event pattern: OKTA-490220\n settings.getAuthClient().transactionManager.clear({ clearIdxResponse: false });\n sessionStorageHelper.removeStateHandle();\n appState.clearAppStateCache();\n\n if (settings.get('useInteractionCodeFlow')) {\n // In this case we need to restart login flow and recreate transaction meta\n // that will be used in interactionCodeFlow function\n appState.trigger('restartLoginFlow');\n return;\n }\n }\n\n // Build options to invoke or throw error for invalid action\n if (idx['neededToProceed'].find(item => item.name === actionPath)) {\n invokeOptions = { ...invokeOptions, step: actionPath };\n } else if (_.isFunction(idx['actions'][actionPath])) {\n invokeOptions = {\n ...invokeOptions,\n actions: [{\n name: actionPath,\n params: actionParams\n }]\n };\n } else {\n error = new Errors.ConfigError(`Invalid action selected: ${actionPath}`);\n this.options.settings.callGlobalError(error);\n this.showFormErrors(this.formView.model, error, this.formView.form);\n return;\n }\n\n // action will be executed asynchronously\n this.invokeAction(invokeOptions);\n },\n\n async invokeAction(invokeOptions) {\n const authClient = this.options.settings.getAuthClient();\n let resp;\n let error;\n try {\n resp = await authClient.idx.proceed(invokeOptions);\n if (resp.requestDidSucceed === false) {\n error = resp;\n }\n } catch (e) {\n error = e;\n }\n\n // if request did not succeed, show error on the current form\n if (error) {\n this.showFormErrors(this.formView.model, error, this.formView.form);\n return;\n }\n\n // process response, may render a new form\n this.handleIdxResponse(resp);\n },\n\n // eslint-disable-next-line max-statements, complexity\n async handleSaveForm(model) {\n const formName = model.get('formName');\n\n // Toggle Form saving status (e.g. disabling save button, etc)\n this.toggleFormButtonState(true);\n model.trigger('request');\n\n // Use full page redirection if necessary\n if (model.get('useRedirect')) {\n // Clear when navigates away from SIW page, e.g. success, IdP Authenticator.\n // Because SIW sort of finished its current /transaction/\n sessionStorageHelper.removeStateHandle();\n\n const currentViewState = this.options.appState.getCurrentViewState();\n Util.redirectWithFormGet(currentViewState.href);\n return;\n }\n\n // Run hook: transform the user name (a.k.a identifier)\n const values = this.transformIdentifier(formName, model);\n\n // Error out when this is not a remediation form. Unexpected Exception.\n if (!this.options.appState.hasRemediationObject(formName)) {\n this.options.settings.callGlobalError(`Cannot find http action for \"${formName}\".`);\n this.showFormErrors(this.formView.model, 'Cannot find action to proceed.', this.formView.form);\n return;\n }\n\n // Reset password in identity-first flow needs some help to auto-select password and begin the reset flow\n if (formName === 'identify' && this.options.settings.get('flow') === CONFIGURED_FLOW.RESET_PASSWORD) {\n values.authenticator = 'okta_password';\n }\n\n // Submit request to idx endpoint\n const authClient = this.options.settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n try {\n const idx = this.options.appState.get('idx');\n const { stateHandle } = idx.context;\n const resp = await authClient.idx.proceed({\n ...idxOptions,\n step: formName,\n stateHandle,\n ...values\n });\n\n if (resp.status === IdxStatus.FAILURE) {\n throw resp.error; // caught and handled in this function\n }\n // If the last request did not succeed, show errors on the current form\n // Special case: Okta server responds 401 status code with WWW-Authenticate header and new remediation\n // so that the iOS/MacOS credential SSO extension (Okta Verify) can intercept\n // the response reaches here when Okta Verify is not installed\n // we need to return an idx object so that\n // the SIW can proceed to the next step without showing error\n if (resp.requestDidSucceed === false && !resp.stepUp) {\n this.showFormErrors(model, resp, this.formView.form);\n return;\n }\n const onSuccess = this.handleIdxResponse.bind(this, resp);\n if (formName === FORMS.ENROLL_PROFILE) {\n // call registration (aka enroll profile) hook\n this.settings.postRegistrationSubmit(values?.userProfile?.email, onSuccess, (error) => {\n model.trigger('error', model, {\n responseJSON: error,\n });\n });\n } else {\n onSuccess();\n }\n } catch(error) {\n this.showFormErrors(model, error, this.formView.form);\n } finally {\n this.toggleFormButtonState(false);\n }\n },\n\n transformIdentifier(formName, model) {\n const modelJSON = model.toJSON();\n if (Object.prototype.hasOwnProperty.call(modelJSON, 'identifier')) {\n // The callback function is passed two arguments:\n // 1) username: The name entered by the user\n // 2) operation: The type of operation the user is trying to perform:\n // - PRIMARY_AUTH\n // - FORGOT_PASSWORD\n // - UNLOCK_ACCOUNT\n const operation = FORM_NAME_TO_OPERATION_MAP[formName];\n modelJSON.identifier = this.settings.transformUsername(modelJSON.identifier, operation);\n }\n return modelJSON;\n },\n\n /**\n * @param model current form model\n * @param error any errors after user action\n * @param form current form\n * Handle errors that get displayed right after any user action. After such form errors widget doesn't\n * reload or re-render, but updates the AppSate with latest remediation.\n */\n showFormErrors(model, error, form) {\n /* eslint max-statements: [2, 30] */\n let errorObj;\n let idxStateError;\n let showErrorBanner = true;\n model.trigger('clearFormError');\n\n if (!error) {\n error = 'FormController - unknown error found';\n this.options.settings.callGlobalError(error);\n }\n\n if(error?.rawIdxState) {\n idxStateError = error;\n error = error.rawIdxState;\n }\n\n if (IonResponseHelper.isIonErrorResponse(error)) {\n errorObj = IonResponseHelper.convertFormErrors(error);\n } else if (error.errorSummary) {\n errorObj = { responseJSON: error };\n } else {\n Util.logConsoleError(error);\n errorObj = { responseJSON: { errorSummary: loc('error.unsupported.response', 'login')}};\n }\n\n if(_.isFunction(form?.showCustomFormErrorCallout)) {\n showErrorBanner = !form.showCustomFormErrorCallout(errorObj);\n }\n\n // show error before updating app state.\n model.trigger('error', model, errorObj, showErrorBanner);\n idxStateError = Object.assign({}, idxStateError, {hasFormError: true});\n\n // TODO OKTA-408410: Widget should update the state on every new response. It should NOT do selective update.\n // For eg 429 rate-limit errors, we have to skip updating idx state, because error response is not an idx response.\n if (Array.isArray(idxStateError?.neededToProceed) && idxStateError?.neededToProceed.length) {\n this.handleIdxResponse(idxStateError);\n }\n\n // 'idx.session.expired' requires special handling, otherwise the widget can lock up into an unrecoverable state\n if (IonResponseHelper.isIdxSessionExpiredError(idxStateError)) {\n const authClient = this.settings.getAuthClient();\n authClient.transactionManager.clear();\n }\n },\n\n handleIdxResponse: function(idxResp) {\n this.options.appState.trigger('updateAppState', idxResp);\n },\n\n /**\n * SignIn widget has its own (hacky) way to customize the button disabled state:\n * adding `link-button-disabled` despite the name was intend only to disable\n * `link-button`.\n * Instead of doing decent refactor, we want to follow the convention for now.\n *\n * @param {boolean} disabled whether add extra disable CSS class.\n */\n toggleFormButtonState: function(disabled) {\n const button = this.$el.find('.o-form-button-bar .button');\n button.toggleClass('link-button-disabled', disabled);\n },\n});\n","import { _ } from 'okta';\n\ndeclare module 'okta' {\n interface OktaUnderscore {\n nestedOmit(obj: Record, names): Record\n }\n}\n\n_.mixin({\n nestedOmit: function(obj, names) {\n let result = _.omit(obj, names);\n\n if (names.includes(result.name)) {\n result = _.omit(result, 'value');\n }\n\n _.each(result, function(val, key) {\n if (Array.isArray(val)) {\n result[key] = val.map((v) => {\n return _.nestedOmit(v, names);\n });\n } else if (typeof val === 'object') {\n result[key] = _.nestedOmit(val, names);\n }\n });\n return result;\n },\n});\n\nexport { _ };\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model, ModelProperty } from 'okta';\nimport Logger from 'util/Logger';\nimport {\n FORMS_WITHOUT_SIGNOUT,\n FORMS_WITH_STATIC_BACK_LINK,\n FORMS_FOR_VERIFICATION,\n AUTHENTICATOR_KEY,\n} from '../ion/RemediationConstants';\nimport { createOVOptions } from '../ion/ui-schema/ion-object-handler';\nimport { _ } from '../mixins/mixins';\nimport { executeHooksBefore, executeHooksAfter } from 'util/Hooks';\n\n/**\n * Keep track of stateMachine with this special model. Similar to `src/models/AppState.js`\n */\n\nconst local: Record = {\n user: 'object', // optional\n currentFormName: 'string',\n idx: 'object',\n remediations: 'array',\n dynamicRefreshInterval: 'number',\n deviceFingerprint: 'string',\n hooks: 'object' // instance of models/Hooks\n};\n\nconst derived: Record = {\n authenticatorProfile: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { profile: undefined }, currentAuthenticatorEnrollment = { profile: undefined }) {\n return currentAuthenticator.profile\n || currentAuthenticatorEnrollment.profile\n || {};\n },\n },\n authenticatorKey: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { key: undefined }, currentAuthenticatorEnrollment = { key: undefined }) {\n return currentAuthenticator.key\n || currentAuthenticatorEnrollment.key\n || '';\n },\n },\n authenticatorMethodType: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { methods: undefined }, currentAuthenticatorEnrollment = { methods: undefined }) {\n return currentAuthenticator.methods && currentAuthenticator.methods[0].type\n || currentAuthenticatorEnrollment.methods && currentAuthenticatorEnrollment.methods[0].type\n || '';\n },\n },\n isPasswordRecovery: {\n deps: ['recoveryAuthenticator'],\n fn: function(recoveryAuthenticator = { type: undefined }) {\n return recoveryAuthenticator?.type === 'password';\n }\n }\n};\n\nexport type AppStateProps = typeof local & typeof derived;\n\nexport default class AppState extends Model {\n\n get>(attributeName: A): any {\n return Model.prototype.get.call(this, attributeName);\n }\n\n preinitialize(...args) {\n this.local = local;\n this.derived = derived;\n Model.prototype.preinitialize.apply(this, args);\n }\n\n isIdentifierOnlyView() {\n return !this.get('remediations')?.find(({ name }) => name === 'identify')\n ?.uiSchema?.find(({ name }) => name === 'credentials.passcode');\n }\n\n hasRemediationObject(formName) {\n return this.get('idx').neededToProceed.find((remediation) => remediation.name === formName);\n }\n\n hasActionObject(actionName) {\n return !!this.get('idx')?.actions?.[actionName];\n }\n\n getRemediationAuthenticationOptions(formName) {\n const form = this.hasRemediationObject(formName);\n if (!form) {\n return [];\n }\n const authenticator = form.value.find((value) => value.name === 'authenticator');\n let authenticatorOptions = authenticator?.options || [];\n // OV is a special case, so process OV options\n authenticatorOptions = [...authenticatorOptions]; //clone it since we are changing it for OV\n createOVOptions(authenticatorOptions);\n return authenticatorOptions;\n }\n\n getActionByPath(actionPath) {\n const paths = actionPath.split('.');\n let targetObject;\n if (paths.length === 1) {\n targetObject = this.get('idx').actions;\n } else {\n targetObject = this.get(paths.shift());\n }\n // Limitation\n // At the time of writting, action only lives in first level of state objects.\n const actionName = paths.shift();\n if (targetObject && _.isFunction(targetObject[actionName])) {\n return targetObject[actionName];\n } else {\n return null;\n }\n }\n\n getCurrentViewState() {\n const currentFormName = this.get('currentFormName');\n\n if (!currentFormName) {\n return;\n }\n\n // didn't expect `remediations` is empty. See `setIonResponse`.\n const currentViewState = this.get('remediations').filter(r => r.name === currentFormName)[0];\n\n if (!currentViewState) {\n Logger.error('Panic!!');\n Logger.error(`\\tCannot find view state for form ${currentFormName}.`);\n const allFormNames = this.get('remediations').map(r => r.name);\n Logger.error(`\\tAll available form names: ${allFormNames}`);\n }\n\n return currentViewState;\n }\n\n /**\n * Returns ui schema of the form field from current view state\n * @param {string} fieldName\n * @returns {}\n */\n getSchemaByName(fieldName) {\n const currentViewState = this.getCurrentViewState();\n if(currentViewState) {\n const uiSchema = currentViewState.uiSchema;\n return uiSchema.find(({ name }) => name === fieldName);\n }\n }\n\n /**\n * Returns the displayName of the authenticator\n * @returns {string}\n */\n getAuthenticatorDisplayName() {\n const currentAuthenticator = this.get('currentAuthenticator') || {};\n const currentAuthenticatorEnrollment = this.get('currentAuthenticatorEnrollment') || {};\n\n // For enrollment and certain verification flows, the currentAuthenticator object will be present.\n // If not, we're likely in a traditional verify/challenge flow.\n return currentAuthenticator.displayName || currentAuthenticatorEnrollment.displayName;\n }\n\n /**\n * Checks to see if we're in an authenticator challenge flow.\n * @returns {boolean}\n */\n isAuthenticatorChallenge() {\n const currentFormName = this.get('currentFormName');\n return FORMS_FOR_VERIFICATION.includes(currentFormName);\n }\n\n shouldReRenderView(transformedResponse) {\n if (transformedResponse?.idx?.hasFormError) {\n return false;\n }\n\n const previousRawState = this.has('idx') ? this.get('idx').rawIdxState : null;\n\n const identicalResponse = _.isEqual(\n _.nestedOmit(transformedResponse.idx.rawIdxState, ['expiresAt', 'refresh', 'stateHandle', 'headers']),\n _.nestedOmit(previousRawState, ['expiresAt', 'refresh', 'stateHandle', 'headers']));\n\n if (identicalResponse) {\n this.set('dynamicRefreshInterval', this.getRefreshInterval(transformedResponse));\n }\n\n return this._isReRenderRequired(identicalResponse, transformedResponse, previousRawState);\n }\n\n getRefreshInterval(transformedResponse) {\n // Only polling refresh interval has changed in the response,\n // make sure to update the correct poll view's refresh value\n const currentFormName = this.get('currentFormName');\n const currentViewState = transformedResponse.remediations.filter(r => r.name === currentFormName)[0];\n // Get new refresh interval for either: remediations, authenticator, or authenticator enrollment\n return currentViewState.refresh ||\n transformedResponse.currentAuthenticatorEnrollment?.poll?.refresh ||\n transformedResponse.currentAuthenticator?.poll?.refresh;\n }\n\n // Sign Out link will be displayed in the footer of a form, unless:\n // - widget configuration set hideSignOutLinkInMFA or mfaOnlyFlow to true\n // - cancel remediation form is not present in the response\n // - form is part of our list FORMS_WITHOUT_SIGNOUT\n shouldShowSignOutLinkInCurrentForm(hideSignOutLinkInMFA) {\n const idxActions = this.get('idx') && this.get('idx').actions;\n const currentFormName = this.get('currentFormName');\n\n return !hideSignOutLinkInMFA\n && _.isFunction(idxActions?.cancel)\n && !FORMS_WITHOUT_SIGNOUT.includes(currentFormName);\n }\n\n containsMessageWithI18nKey(keys) {\n if (!Array.isArray(keys)) {\n keys = [keys];\n }\n const messagesObjs = this.get('messages');\n return messagesObjs && Array.isArray(messagesObjs.value)\n && messagesObjs.value.some(messagesObj => _.contains(keys, messagesObj.i18n?.key));\n }\n\n containsMessageStartingWithI18nKey(keySubStr) {\n const messagesObjs = this.get('messages');\n return messagesObjs && Array.isArray(messagesObjs.value)\n && messagesObjs.value.some(messagesObj => messagesObj.i18n?.key.startsWith(keySubStr));\n }\n\n clearAppStateCache() {\n // clear appState before setting new values\n const attrs = {};\n for (const key in this.attributes) {\n if (key !== 'currentFormName') {\n attrs[key] = void 0;\n }\n }\n this.set(attrs, Object.assign({}, { unset: true, silent: true }));\n // clear cache for derived props.\n this.trigger('cache:clear');\n }\n\n async setIonResponse(transformedResponse, hooks) {\n const doRerender = this.shouldReRenderView(transformedResponse);\n this.clearAppStateCache();\n // set new app state properties\n this.set(transformedResponse);\n\n if (doRerender) {\n // `currentFormName` is default to first form of remediations or nothing.\n let currentFormName = null;\n if (!_.isEmpty(transformedResponse.remediations)) {\n currentFormName = transformedResponse.remediations[0].name;\n } else {\n Logger.error('Panic!!');\n Logger.error('\\tNo remediation found.');\n Logger.error('\\tHere is the entire response');\n Logger.error(JSON.stringify(transformedResponse, null, 2));\n }\n\n const hook = hooks?.getHook(currentFormName); // may be undefined\n await executeHooksBefore(hook);\n \n this.unset('currentFormName', { silent: true });\n // make sure change `currentFormName` is last step.\n // change `currentFormName` will re-render FormController,\n // which may depend on other derived properties hence\n // those derived properties must be re-computed before\n // re-rendering controller.\n this.set({ currentFormName });\n\n await executeHooksAfter(hook);\n }\n }\n\n getUser() {\n return this.get('user');\n }\n\n _isReRenderRequired(identicalResponse, transformedResponse, previousRawState) {\n let reRender = true;\n\n const isPreviousStateError = this.get('idx')?.hasFormError;\n if (isPreviousStateError && this._isChallengeAuthenticatorPoll(transformedResponse, previousRawState)) {\n reRender = false;\n }\n\n if (identicalResponse) {\n /**\n * returns false: When new response is same as last.\n * usually happens during polling when pipeline doesn't proceed to next step.\n * expiresAt will be different for each response, hence compare objects without that property\n */\n reRender = false;\n }\n\n if (identicalResponse && this.get('currentFormName') === 'poll') {\n /**\n * returns true: We want to force reRender when currentForm is poll because request has to reinitiate\n * based on new refresh and UI has to reflect new timer.\n * We dont technical poll here we just make a request after the specified refresh time each time\n * we get a new response.\n */\n reRender = true;\n }\n\n if (identicalResponse && FORMS_WITH_STATIC_BACK_LINK.includes(this.get('currentFormName'))) {\n /**\n * returns true: We want to force reRender if you go back to selection screen from challenge or enroll screen\n * and re-select the same authenticator for challenge. In this case also new response will be identical\n * to the old response.\n */\n reRender = true;\n }\n return reRender;\n }\n\n /**\n * This is to account for the edge case introduced by this issue: OKTA-419210. With the current idx remediations,\n * there's no good way to generalize this as the backend handles the authenticators for phone, sms and \n * email differently. Although not ideal, we have to keep this check in for now until we find a better solution.\n */\n _isChallengeAuthenticatorPoll(transformedResponse, previousRawState) {\n const isSameExceptMessages = _.isEqual(\n _.nestedOmit(transformedResponse.idx.rawIdxState, ['expiresAt', 'refresh', 'stateHandle', 'headers']),\n _.nestedOmit(previousRawState, ['expiresAt', 'refresh', 'stateHandle', 'messages', 'headers']));\n\n const isChallengeAuthenticator = this.get('currentFormName') === 'challenge-authenticator';\n const isCurrentAuthenticatorEmail = this.get('currentAuthenticatorEnrollment')?.key === AUTHENTICATOR_KEY.EMAIL;\n\n return isSameExceptMessages && isChallengeAuthenticator && isCurrentAuthenticatorEmail;\n }\n}\n","import Logger from 'util/Logger';\nimport { AUTHENTICATOR_KEY, FORMS as RemediationForms } from '../ion/RemediationConstants';\nimport { BaseView } from './internals';\n\n// Identify\nimport IdentifierView from './views/IdentifierView';\nimport RedirectIdPView from './views/RedirectIdPView';\nimport IdentifyRecoveryView from './views/IdentifyRecoveryView';\n\n// Terminal & Auto-Redirect\nimport TerminalView from './views/TerminalView';\nimport AutoRedirectView from './views/AutoRedirectView';\n\n// safe mode poll view\nimport PollView from './views/PollView';\n\n// consent\nimport AdminConsentView from './views/consent/AdminConsentView';\nimport EnduserConsentView from './views/consent/EnduserConsentView';\nimport EnduserEmailConsentView from './views/consent/EnduserEmailConsentView';\n\n// Device (Okta Verify)\nimport DeviceChallengePollView from './views/device/DeviceChallengePollView';\nimport SSOExtensionView from './views/device/SSOExtensionView';\nimport SignInDeviceView from './views/device/SignInDeviceView';\nimport DeviceEnrollmentTerminalView from './views/device/DeviceEnrollmentTerminalView';\n\n// registration\nimport EnrollProfileView from './views/EnrollProfileView';\n\n// registration update\nimport EnrollProfileUpdateView from './views/EnrollProfileUpdateView';\n\n// Email Activation\nimport RequestActivationEmail from './views/activation/RequestActivationEmailView';\n\n// authenticator list\nimport SelectAuthenticatorEnrollView from './views/SelectAuthenticatorEnrollView';\nimport SelectAuthenticatorVerifyView from './views/SelectAuthenticatorVerifyView';\nimport SelectAuthenticatorUnlockAccountView from './views/authenticator/SelectAuthenticatorUnlockAccountView';\n\n// password\nimport EnrollAuthenticatorPasswordView from './views/password/EnrollAuthenticatorPasswordView';\nimport ChallengeAuthenticatorPasswordView from './views/password/ChallengeAuthenticatorPasswordView';\nimport ReEnrollAuthenticatorPasswordView from './views/password/ReEnrollAuthenticatorPasswordView';\nimport ReEnrollAuthenticatorWarningPasswordView from './views/password/ReEnrollAuthenticatorWarningPasswordView';\nimport ResetAuthenticatorPasswordView from './views/password/ResetAuthenticatorPasswordView';\n\n// phone\nimport EnrollAuthenticatorPhoneView from './views/phone/EnrollAuthenticatorPhoneView';\nimport EnrollAuthenticatorDataPhoneView from './views/phone/EnrollAuthenticatorDataPhoneView';\nimport ChallengeAuthenticatorPhoneView from './views/phone/ChallengeAuthenticatorPhoneView';\nimport ChallengeAuthenticatorDataPhoneView from './views/phone/ChallengeAuthenticatorDataPhoneView';\n\n// security question\nimport EnrollAuthenticatorSecurityQuestion from './views/security-question/EnrollAuthenticatorSecurityQuestionView';\nimport ChallengeAuthenticatorSecurityQuestion from './views/security-question/ChallengeAuthenticatorSecurityQuestion';\n\n//webauthn\nimport EnrollWebauthnView from './views/webauthn/EnrollWebauthnView';\nimport ChallengeWebauthnView from './views/webauthn/ChallengeWebauthnView';\n\n// email\nimport EnrollAuthenticatorEmailView from './views/email/EnrollAuthenticatorEmailView';\nimport ChallengeAuthenticatorEmailView from './views/email/ChallengeAuthenticatorEmailView';\nimport ChallengeAuthenticatorDataEmailView from './views/email/ChallengeAuthenticatorDataEmailView';\n\n// app (okta verify)\nimport EnrollPollOktaVerifyView from './views/ov/EnrollPollOktaVerifyView';\nimport SelectEnrollmentChannelOktaVerifyView from './views/ov/SelectEnrollmentChannelOktaVerifyView';\nimport EnrollementChannelDataOktaVerifyView from './views/ov/EnrollementChannelDataOktaVerifyView';\nimport ChallengeOktaVerifyView from './views/ov/ChallengeOktaVerifyView';\nimport ChallengeOktaVerifyTotpView from './views/ov/ChallengeOktaVerifyTotpView';\nimport ChallengeOktaVerifyResendPushView from './views/ov/ChallengeOktaVerifyResendPushView';\nimport ChallengeAuthenticatorDataOktaVerifyView from './views/ov/ChallengeAuthenticatorDataOktaVerifyView';\nimport ChallengeOktaVerifySSOExtensionView from './views/ov/ChallengeOktaVerifySSOExtensionView';\n\n// app (google authenticator)\nimport EnrollAuthenticatorGoogleAuthenticatorView\n from './views/google-authenticator/EnrollAuthenticatorGoogleAuthenticatorView';\nimport ChallengeGoogleAuthenticatorView from './views/google-authenticator/ChallengeGoogleAuthenticatorView';\n\n// on-prem mfa\nimport EnrollAuthenticatorOnPremView from './views/on-prem/EnrollAuthenticatorOnPremView';\nimport ChallengeAuthenticatorOnPremView from './views/on-prem/ChallengeAuthenticatorOnPremView';\n\n// duo mfa\nimport EnrollDuoAuthenticatorView from './views/duo/EnrollDuoAuthenticatorView';\nimport ChallengeDuoAuthenticatorView from './views/duo/ChallengeDuoAuthenticatorView';\n\n// idp authenticator\nimport AuthenticatorIdPVerifyView from './views/idp/AuthenticatorIdPVerifyView';\nimport AuthenticatorIdPEnrollView from './views/idp/AuthenticatorIdPEnrollView';\n\n// custom otp\nimport ChallengeCustomOTPAuthenticatorView from './views/custom-otp/ChallengeCustomOTPAuthenticatorView';\n\n// Symantec VIP authenticator\nimport AuthenticatorSymantecView from './views/symantec/AuthenticatorSymantecView';\n\n// Device code activate view\nimport DeviceCodeActivateView from './views/device/DeviceCodeActivateView';\n\n// X509 PIV view\nimport ChallengePIVView from './views/piv/ChallengePIVView';\n\n// YubiKey\nimport AuthenticatorYubiKeyView from './views/yubikey/AuthenticatorYubiKeyView';\n\n// custom app\nimport ChallengePushView from './views/shared/ChallengePushView';\nimport ChallengeCustomAppResendPushView from './views/custom-app/ChallengeCustomAppResendPushView'; \n\nconst DEFAULT = '_';\n\nconst VIEWS_MAPPING = {\n [RemediationForms.IDENTIFY]: {\n [DEFAULT]: IdentifierView,\n },\n [RemediationForms.IDENTIFY_RECOVERY]: {\n [DEFAULT]: IdentifyRecoveryView,\n },\n [RemediationForms.DEVICE_CHALLENGE_POLL]: {\n [DEFAULT]: DeviceChallengePollView,\n },\n [RemediationForms.LAUNCH_AUTHENTICATOR]: {\n [DEFAULT]: SignInDeviceView,\n },\n [RemediationForms.DEVICE_APPLE_SSO_EXTENSION]: {\n [DEFAULT]: SSOExtensionView,\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifySSOExtensionView,\n },\n [RemediationForms.CANCEL_TRANSACTION]: {\n [DEFAULT]: SSOExtensionView,\n },\n [RemediationForms.ENROLL_PROFILE]: {\n [DEFAULT]: EnrollProfileView,\n },\n [RemediationForms.ENROLL_PROFILE_UPDATE]: {\n [DEFAULT]: EnrollProfileUpdateView,\n },\n [RemediationForms.POLL]: {\n [DEFAULT]: PollView\n },\n [RemediationForms.REQUEST_ACTIVATION]: {\n [DEFAULT]: RequestActivationEmail\n },\n [RemediationForms.SELECT_AUTHENTICATOR_ENROLL]: {\n [DEFAULT]: SelectAuthenticatorEnrollView,\n },\n [RemediationForms.AUTHENTICATOR_ENROLLMENT_DATA]: {\n [AUTHENTICATOR_KEY.PHONE]: EnrollAuthenticatorDataPhoneView,\n },\n [RemediationForms.CONSENT_ADMIN]: {\n [DEFAULT]: AdminConsentView\n },\n [RemediationForms.CONSENT_ENDUSER]: {\n [DEFAULT]: EnduserConsentView\n },\n [RemediationForms.CONSENT_EMAIL_CHALLENGE]: {\n [DEFAULT]: EnduserEmailConsentView,\n },\n [RemediationForms.ENROLL_AUTHENTICATOR]: {\n [AUTHENTICATOR_KEY.DUO]: EnrollDuoAuthenticatorView,\n [AUTHENTICATOR_KEY.EMAIL]: EnrollAuthenticatorEmailView,\n [AUTHENTICATOR_KEY.GOOGLE_OTP]: EnrollAuthenticatorGoogleAuthenticatorView,\n [AUTHENTICATOR_KEY.IDP]: AuthenticatorIdPEnrollView,\n [AUTHENTICATOR_KEY.ON_PREM]: EnrollAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.PASSWORD]: EnrollAuthenticatorPasswordView,\n [AUTHENTICATOR_KEY.PHONE]: EnrollAuthenticatorPhoneView,\n [AUTHENTICATOR_KEY.RSA]: EnrollAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.SECURITY_QUESTION]: EnrollAuthenticatorSecurityQuestion,\n [AUTHENTICATOR_KEY.SYMANTEC_VIP]: AuthenticatorSymantecView,\n [AUTHENTICATOR_KEY.WEBAUTHN]: EnrollWebauthnView,\n [AUTHENTICATOR_KEY.YUBIKEY]: AuthenticatorYubiKeyView,\n },\n [RemediationForms.CHALLENGE_AUTHENTICATOR]: {\n [AUTHENTICATOR_KEY.CUSTOM_OTP]: ChallengeCustomOTPAuthenticatorView,\n [AUTHENTICATOR_KEY.DUO]: ChallengeDuoAuthenticatorView,\n [AUTHENTICATOR_KEY.EMAIL]: ChallengeAuthenticatorEmailView,\n [AUTHENTICATOR_KEY.GOOGLE_OTP]: ChallengeGoogleAuthenticatorView,\n [AUTHENTICATOR_KEY.IDP]: AuthenticatorIdPVerifyView,\n [AUTHENTICATOR_KEY.ON_PREM]: ChallengeAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyTotpView,\n [AUTHENTICATOR_KEY.PASSWORD]: ChallengeAuthenticatorPasswordView,\n [AUTHENTICATOR_KEY.PHONE]: ChallengeAuthenticatorPhoneView,\n [AUTHENTICATOR_KEY.RSA]: ChallengeAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.SECURITY_QUESTION]: ChallengeAuthenticatorSecurityQuestion,\n [AUTHENTICATOR_KEY.SYMANTEC_VIP]: AuthenticatorSymantecView,\n [AUTHENTICATOR_KEY.WEBAUTHN]: ChallengeWebauthnView,\n [AUTHENTICATOR_KEY.YUBIKEY]: AuthenticatorYubiKeyView,\n },\n [RemediationForms.ENROLL_POLL]: {\n [AUTHENTICATOR_KEY.OV]: EnrollPollOktaVerifyView,\n },\n [RemediationForms.SELECT_ENROLLMENT_CHANNEL]: {\n [AUTHENTICATOR_KEY.OV]: SelectEnrollmentChannelOktaVerifyView,\n },\n [RemediationForms.ENROLLMENT_CHANNEL_DATA]: {\n [AUTHENTICATOR_KEY.OV]: EnrollementChannelDataOktaVerifyView,\n },\n // Expired scenarios for authenticators..\n [RemediationForms.REENROLL_AUTHENTICATOR]: {\n // Password expired scenario..\n [AUTHENTICATOR_KEY.PASSWORD]: ReEnrollAuthenticatorPasswordView,\n },\n // Will expire soon warnings for authenticators..\n [RemediationForms.REENROLL_AUTHENTICATOR_WARNING]: {\n // Password will expire soon scenario..\n [AUTHENTICATOR_KEY.PASSWORD]: ReEnrollAuthenticatorWarningPasswordView,\n },\n // Reset forms for authenticators..\n [RemediationForms.RESET_AUTHENTICATOR]: {\n // Admin driven password reset..\n [AUTHENTICATOR_KEY.PASSWORD]: ResetAuthenticatorPasswordView,\n },\n [RemediationForms.SELECT_AUTHENTICATOR_AUTHENTICATE]: {\n [DEFAULT]: SelectAuthenticatorVerifyView,\n },\n [RemediationForms.SELECT_AUTHENTICATOR_UNLOCK]: {\n [DEFAULT]: SelectAuthenticatorUnlockAccountView,\n },\n [RemediationForms.CHALLENGE_POLL]: {\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyView,\n [AUTHENTICATOR_KEY.CUSTOM_APP]: ChallengePushView,\n },\n [RemediationForms.RESEND]: {\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyResendPushView,\n [AUTHENTICATOR_KEY.CUSTOM_APP]: ChallengeCustomAppResendPushView,\n },\n [RemediationForms.AUTHENTICATOR_VERIFICATION_DATA]: {\n [AUTHENTICATOR_KEY.PHONE]: ChallengeAuthenticatorDataPhoneView,\n [AUTHENTICATOR_KEY.OV]: ChallengeAuthenticatorDataOktaVerifyView,\n [AUTHENTICATOR_KEY.EMAIL]: ChallengeAuthenticatorDataEmailView,\n },\n [RemediationForms.FAILURE_REDIRECT]: {\n [DEFAULT]: AutoRedirectView,\n },\n [RemediationForms.SUCCESS_REDIRECT]: {\n [DEFAULT]: AutoRedirectView,\n },\n [RemediationForms.REDIRECT_IDP]: {\n [DEFAULT]: RedirectIdPView,\n },\n [RemediationForms.PIV_IDP]: {\n [DEFAULT]: ChallengePIVView,\n },\n [RemediationForms.DEVICE_ENROLLMENT_TERMINAL]: {\n [DEFAULT]: DeviceEnrollmentTerminalView,\n },\n [RemediationForms.USER_CODE] : {\n [DEFAULT] : DeviceCodeActivateView\n },\n [RemediationForms.TERMINAL]: {\n [DEFAULT]: TerminalView,\n },\n};\n\nexport default {\n create(formName, authenticatorKey = DEFAULT) {\n const config = VIEWS_MAPPING[formName];\n if (!config) {\n Logger.warn(`Cannot find customized View for ${formName}.`);\n return BaseView;\n }\n const View = config[authenticatorKey] || config[DEFAULT];\n if (!View) {\n Logger.warn(`Cannot find customized View for ${formName} + ${authenticatorKey}.`);\n return BaseView;\n }\n\n return View;\n }\n};\n","import hbs from 'handlebars-inline-precompile';\n\nimport { _, Form, loc, internal, createCallout, View } from 'okta';\nimport * as FormInputFactory from './FormInputFactory';\n\nconst { FormUtil } = internal.views.forms.helpers;\nconst INFO_MESSAGE_CLASS = 'INFO';\n\nexport default Form.extend({\n\n layout: 'o-form-theme',\n className: 'ion-form',\n hasSavingState: true,\n autoSave: false,\n noCancelButton: true,\n\n title() {\n return loc('oform.title.authenticate', 'login');\n },\n\n save() {\n return loc('oform.next', 'login');\n },\n\n modelEvents: {\n 'clearFormError': 'handleClearFormError',\n 'error': 'triggerAfterError',\n },\n\n initialize() {\n const uiSchemas = this.getUISchema();\n const inputOptions = uiSchemas.map(FormInputFactory.create);\n\n //should be used before adding any other input components\n this.showMessages();\n\n // Render CAPTCHA if one of the form fields requires us to.\n this.listenTo(this.options.appState, 'onCaptchaLoaded', (captchaObject) => {\n this.captchaObject = captchaObject;\n });\n\n inputOptions.forEach(input => {\n this.addInputOrView(input);\n });\n\n this.listenTo(this, 'save', this.saveForm);\n this.listenTo(this, 'cancel', this.cancelForm);\n },\n\n focus(...args) {\n if (this.settings.get('features.autoFocus')) {\n Form.prototype.focus.apply(this, args);\n }\n },\n\n handleClearFormError() {\n const formErrorContainer = this.$('.o-form-error-container');\n formErrorContainer.empty();\n if (formErrorContainer.hasClass('o-form-has-errors')) {\n this.clearErrors();\n }\n },\n\n triggerAfterError(model, error) {\n this.options.appState.trigger('afterError', error);\n },\n\n saveForm(model) {\n //remove any existing warnings or messages before saving form\n this.$el.find('.o-form-error-container').empty();\n\n // Execute Captcha if enabled for this form.\n if (this.captchaObject) {\n this.captchaObject.execute();\n } else {\n this.options.appState.trigger('saveForm', model);\n }\n },\n\n postRender() {\n /**\n * Widget would use infoContainer to display interactive messages that should be persisted during\n * invalid form submissions. For eg resend-warning callout should not be cleared upon invalid form submit.\n * Rerender would clear infoContainer or views classes can clear it explicitly.\n */\n const infoContainer= '';\n this.$el.find('.o-form-error-container').before(infoContainer);\n\n this.addIdentifier();\n },\n\n /**\n * Render user identifier below title, or if no title, render below message.\n */\n addIdentifier() {\n const { identifier } = this.options.appState.get('user') || {};\n if (!identifier) {\n return;\n } else if (!this.settings.get('features.showIdentifier')) {\n return;\n }\n\n const header = this.$el.find('[data-se=\"o-form-head\"]');\n const identifierHTMLString = hbs('\\\n {{identifier}}\\\n ')({identifier});\n\n if (header.length) {\n header.after(identifierHTMLString);\n } else {\n this.$el.find('.o-form-error-container').after(identifierHTMLString);\n }\n },\n\n cancelForm() {\n this.options.appState.trigger('invokeAction', 'cancel');\n },\n\n getUISchema() {\n if (Array.isArray(this.options.currentViewState.uiSchema)) {\n return this.options.currentViewState.uiSchema;\n } else {\n return [];\n }\n },\n\n addInputOrView(input) {\n if (input.visible === false || input.mutable === false) {\n return;\n }\n if (input.View) {\n this.add(input.View, _.omit(input, 'View', 'showWhen'));\n if (input.showWhen) {\n FormUtil.applyShowWhen(this.last(), input.showWhen);\n }\n } else {\n this.addInput(input);\n }\n\n if (Array.isArray(input.optionsUiSchemas)) {\n if (this.options.optionUiSchemaConfig[input.name]) {\n const optionUiSchemaIndex = Number(this.options.optionUiSchemaConfig[input.name]);\n const optionUiSchemas = input.optionsUiSchemas[optionUiSchemaIndex] || [];\n optionUiSchemas.forEach(this.addInputOrView.bind(this));\n }\n }\n },\n\n /*\n * Views should override this function to render custom error callouts for invalid form actions.\n * Should return true when callout is customized\n */\n showCustomFormErrorCallout: null,\n\n /*\n * Renders the contents of messages object (if any, on error) during initialize\n * This function is called during Form.initialize, and will display\n * messages when the form reloads.\n * Note: Any user action related form errors handled by FormController.showFormErrors\n */\n showMessages(options) {\n const messages = this.options.appState.get('messages') || {};\n const errContainer = '.o-form-error-container';\n if (Array.isArray(messages.value) && !(options instanceof View)) {\n this.add('', errContainer);\n messages.value.forEach(obj => {\n if(!obj?.class || obj.class === INFO_MESSAGE_CLASS) {\n // add message as plain text\n this.add(`${obj.message}
`, '.ion-messages-container');\n } else {\n const errorObj = {\n class: obj?.class ?? '',\n message: obj?.message,\n title: '',\n ...options\n };\n this.add(createCallout({\n content: errorObj.message,\n type: errorObj.class.toLowerCase(),\n title: errorObj.title\n }), errContainer);\n options = null; // prevent repeating first error message\n }\n });\n } else if (options instanceof View) {\n // if callee is showCustomFormErrorCallout. show custom error views\n this.add(options, errContainer);\n }\n },\n});","import { Collection, _, loc, createButton, ButtonOptions } from 'okta';\n\nimport AuthenticatorEnrollOptions from '../components/AuthenticatorEnrollOptions';\nimport AuthenticatorVerifyOptions from '../components/AuthenticatorVerifyOptions';\nimport { getAuthenticatorDataForEnroll, getAuthenticatorDataForVerification } from '../utils/AuthenticatorUtil';\nimport { AUTHENTICATOR_KEY, FORMS as RemediationForms } from '../../ion/RemediationConstants';\nimport IDP from '../../../util/IDP';\nimport AdminScopeList from '../../../views/admin-consent/ScopeList';\nimport EnduserScopeList from '../../../views/consent/ScopeList';\nimport CaptchaView from '../views/captcha/CaptchaView';\n\n// TODO: remove ambient declaration patch after courage type has been updated: OKTA-488758\ndeclare module 'okta' {\n interface ButtonOptions {\n attributes?: Record | undefined;\n className?: string | undefined;\n }\n}\n\nconst isTextOverflowing = (text, maxWidth) => {\n // Create a temporary element and attach it to the document so we can compare the client width to the \n // max width allowed.\n const elem = document.createElement('div');\n elem.style.position = 'absolute';\n elem.style.left = '-9999px';\n elem.style.whiteSpace = 'nowrap';\n elem.innerHTML = text;\n\n document.body.appendChild(elem);\n const result = elem.clientWidth;\n document.body.removeChild(elem);\n\n return result > maxWidth;\n};\n\nconst createAuthenticatorEnrollSelectView = (opt) => {\n const optionItems = (opt.options || [])\n .map(opt => {\n return Object.assign({}, opt, getAuthenticatorDataForEnroll(opt));\n });\n return {\n View: AuthenticatorEnrollOptions,\n options: {\n name: opt.name,\n collection: new Collection(optionItems),\n }\n };\n};\n\nconst createAuthenticatorVerifySelectView = (opt) => {\n let optionItems = (opt.options || []);\n // If webauthn enrollments > 1 just show one entry with a generic namne (first) so user doesnt have to select which\n // one to pick. eg) If there is yubikey5 and another unknown u2f key, user cannot identify that easily. We need to\n // do this at least until users can give authenticator enrollments custom names.\n let hasSecurityKey = false;\n optionItems = optionItems.filter(opt => {\n if (opt.authenticatorKey === AUTHENTICATOR_KEY.WEBAUTHN) {\n if (!hasSecurityKey) {\n hasSecurityKey = true;\n return true;\n } else {\n return false;\n }\n }\n return true;\n });\n optionItems = optionItems.map(opt => {\n return Object.assign({}, opt, getAuthenticatorDataForVerification(opt));\n });\n return {\n View: AuthenticatorVerifyOptions,\n options: {\n name: opt.name,\n collection: new Collection(optionItems),\n }\n };\n};\n\nconst createAdminScopesView = () => {\n return {\n View: AdminScopeList,\n };\n};\nconst createEnduserScopesView = () => {\n return {\n View: EnduserScopeList,\n };\n};\n\nconst createCaptchaView = (opt) => {\n return {\n View: CaptchaView,\n options: {\n name: opt.name,\n } \n };\n};\n\nconst inputCreationStrategy = {\n authenticatorEnrollSelect: createAuthenticatorEnrollSelectView,\n authenticatorVerifySelect: createAuthenticatorVerifySelectView,\n ['admin-consent']: createAdminScopesView,\n ['consent']: createEnduserScopesView,\n ['captcha']: createCaptchaView,\n};\n\n// TODO: move logic to uiSchemaTransformer\nconst create = function(uiSchemaObj) {\n const strategyFn = inputCreationStrategy[uiSchemaObj.type] || _.identity;\n return strategyFn(uiSchemaObj);\n};\n\nconst createPIVButton = (settings, appState) => {\n const pivIdp =\n appState.get('remediations').filter(idp => idp.name === RemediationForms.PIV_IDP);\n if (pivIdp.length < 1) {\n return [];\n }\n const pivConfig = settings.get('piv');\n const className = pivConfig.className || '';\n return [{\n attributes: {\n 'data-se': 'piv-card-button',\n },\n className: className + ' piv-button',\n title: pivConfig.text || loc('piv.cac.card', 'login'),\n click: (e) => {\n e.preventDefault();\n appState.trigger('switchForm', RemediationForms.PIV_IDP);\n },\n }];\n};\n\n/**\n * Example of `redirect-idp` remediation.\n * {\n * \"name\": \"redirect-idp\",\n * \"type\": \"MICROSOFT\",\n * \"idp\": {\n * \"id\": \"0oa2szc1K1YPgz1pe0g4\",\n * \"name\": \"Microsoft IDP\"\n * },\n * \"href\": \"http://localhost:3000/sso/idps/0oa2szc1K1YPgz1pe0g4?stateToken=BB...AA\",\n * \"method\": \"GET\"\n * }\n *\n */\nconst createIdpButtons = ({ settings, appState }) => {\n // This is the max allowable text width that we can display for IDP buttons.\n // Generated by taking the 316px width of button minus padding-left (90 px) and padding-right (50px)\n const MAX_IDP_BUTTON_WIDTH = 186;\n\n const redirectIdpRemediations =\n appState.get('remediations').filter(idp => idp.name === RemediationForms.REDIRECT_IDP);\n\n if (!Array.isArray(redirectIdpRemediations)) {\n return [];\n }\n\n // create piv button\n const pivButton = createPIVButton(settings, appState);\n\n //add buttons from idp object\n const idpButtons = redirectIdpRemediations.map(idpObject => {\n let type = idpObject.type?.toLowerCase();\n let displayName;\n\n if (!_.contains(IDP.SUPPORTED_SOCIAL_IDPS, type)) {\n type = 'general-idp';\n // OKTA-396684 - makes sure that custom idps always have a name\n displayName = loc('customauth.sign.in.with.label', 'login', [idpObject.idp?.name]);\n } else {\n displayName = loc(`socialauth.${type}.label`, 'login');\n }\n\n const classNames = [\n 'social-auth-button',\n `social-auth-${type}-button`,\n ];\n\n if (type === 'general-idp') {\n classNames.push('no-translate');\n }\n\n if (idpObject.idp.className) {\n classNames.push(idpObject.idp.className);\n }\n\n const button: ButtonOptions = {\n attributes: {\n 'data-se': `social-auth-${type}-button`,\n },\n className: classNames.join(' '),\n title: displayName,\n href: idpObject.href,\n };\n\n if (isTextOverflowing(displayName, MAX_IDP_BUTTON_WIDTH)) {\n // We add a tooltip in case the name gets truncated if too long\n button.attributes.title = displayName;\n }\n\n return button;\n });\n\n return [...pivButton, ...idpButtons];\n};\n\nconst createCustomButtons = (settings) => {\n const customButtons = settings.get('customButtons');\n return customButtons.map(customButton => {\n const button = {\n attributes: {\n 'data-se': customButton.dataAttr\n },\n className: customButton.className + ' default-custom-button',\n title: customButton.title || loc(customButton.i18nKey, 'login'),\n click: customButton.click\n };\n return button;\n });\n};\n\nconst addCustomButton = (customButtonSettings) => {\n return createButton({\n ...customButtonSettings,\n className: `${customButtonSettings.className} default-custom-button button-primary`,\n });\n};\n\nexport {\n create,\n createIdpButtons,\n createCustomButtons,\n addCustomButton,\n isTextOverflowing\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Animations from 'util/Animations';\nimport LoadingBeacon from 'views/shared/LoadingBeacon';\nconst NO_BEACON_CLS = 'no-beacon';\nconst LOADING_BEACON_CLS = 'beacon-small beacon-loading';\n\nfunction isLoadingBeacon(beacon) {\n return beacon && beacon.equals(LoadingBeacon);\n}\n\nfunction removeBeacon(view) {\n // There are some timing issues with removing beacons (i.e. the case of\n // transitioning from loadingBeacon -> loadingBeacon)\n if (!view.currentBeacon) {\n return;\n }\n view.currentBeacon.remove();\n view.currentBeacon = null;\n}\n\nfunction addBeacon(view, NextBeacon, selector, options) {\n view.add(NextBeacon, {\n selector: selector,\n options: options,\n });\n view.currentBeacon = view.first();\n}\n\nfunction typeOfTransition(currentBeacon, NextBeacon, options) {\n if (!currentBeacon && !NextBeacon) {\n return 'none';\n }\n // Show Loading beacon\n if (!currentBeacon && options.loading) {\n return 'load';\n }\n // Swap/Hide Loading beacon\n if (currentBeacon && isLoadingBeacon(currentBeacon)) {\n return NextBeacon ? 'swap' : 'unload';\n }\n if (currentBeacon && currentBeacon.equals(NextBeacon, options)) {\n return 'same';\n }\n if (!currentBeacon && NextBeacon) {\n return 'add';\n }\n if (currentBeacon && !NextBeacon) {\n return 'remove';\n }\n if (currentBeacon instanceof NextBeacon) {\n return 'fade';\n }\n // If none of the above\n // then we are changing the type of beacon\n // ex. from SecurityBeacon to FactorBeacon\n return 'swap';\n}\n\nexport default class Header extends View {\n currentBeacon;\n \n preinitialize(...args) {\n this.currentBeacon = null;\n /* eslint-disable @okta/okta/no-unlocalized-text-in-templates */\n this.template = hbs(\n '\\\n \\\n {{#if logo}}\\\n ![\"{{logoText}}](\"{{logo}}\")
\\\n {{/if}}\\\n \\\n \\\n \\\n '\n );\n /* eslint-enable @okta/okta/no-unlocalized-text-in-templates */\n View.prototype.preinitialize.apply(this, args);\n }\n\n\n // Attach a 'no-beacon' class if the security image feature\n // is not passed in to prevent the beacon from jumping.\n initialize(options) {\n if (!options.settings.get('features.securityImage')) {\n this.$el.addClass(NO_BEACON_CLS);\n // To show/hide the spinner when there is no security image,\n // listen to the appState's loading/removeLoading events.\n this.listenTo(options.appState, 'loading', this.setLoadingBeacon);\n this.listenTo(options.appState, 'removeLoading', this.removeLoadingBeacon);\n }\n }\n\n /* eslint complexity: 0 */\n setBeacon(NextBeacon, options) {\n const selector = '[data-type=\"beacon-container\"]';\n const container = this.$(selector);\n const transition = typeOfTransition(this.currentBeacon, NextBeacon, options);\n\n switch (transition) {\n case 'none':\n this.$el.addClass(NO_BEACON_CLS);\n return;\n case 'same':\n return;\n case 'add':\n this.$el.removeClass(NO_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'remove':\n this.$el.addClass(NO_BEACON_CLS);\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n case 'fade':\n // Other transitions are performed on the beacon container,\n // but this transition is on the content inside the beacon.\n // For a SecurityBeacon the username change will update the\n // AppState and trigger an transition to a new Becon\n // Since there is no url change this method is not called.\n // For a FactorBeacon a page refresh has occurred\n // so we execute the beacon's own transition method.\n if (!this.currentBeacon.fadeOut) {\n throw new Error('The current beacon is missing the \"fadeOut\" method');\n }\n options.animate = true;\n return this.currentBeacon\n .fadeOut()\n .then(() => {\n removeBeacon(this);\n addBeacon(this, NextBeacon, selector, options);\n })\n .done(); // TODO: can this be removed if fadeOut returns standard ES6 Promise?\n case 'swap':\n return Animations.swapBeacons({\n $el: container,\n swap: () => {\n const isLoading = isLoadingBeacon(this.currentBeacon);\n\n // Order of these calls is important for -\n // loader --> security/factor beacon swap.\n removeBeacon(this);\n if (isLoading) {\n container.removeClass(LOADING_BEACON_CLS);\n this.$el.removeClass(NO_BEACON_CLS);\n }\n addBeacon(this, NextBeacon, selector, options);\n },\n }).done(); // TODO: can this be removed if Animations.swapBeacons returns standard ES6 Promise?\n case 'load':\n // Show the loading beacon. Add a couple of classes\n // before triggering the add beacon code.\n container.addClass(LOADING_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'unload':\n // Hide the loading beacon.\n return this.removeLoadingBeacon();\n default:\n throw new Error('the \"' + transition + '\" is not recognized');\n }\n }\n\n // Show the loading beacon when the security image feature is not enabled.\n setLoadingBeacon(isLoading) {\n if (!isLoading || isLoadingBeacon(this.currentBeacon)) {\n return;\n }\n this.setBeacon(LoadingBeacon, { loading: true });\n }\n\n // Hide the beacon on primary auth failure. On primary auth success, setBeacon does this job.\n removeLoadingBeacon() {\n const container = this.$('[data-type=\"beacon-container\"]');\n\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n container.removeClass(LOADING_BEACON_CLS);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n }\n\n getTemplateData() {\n return this.settings.toJSON({ verbose: true });\n }\n\n getContentEl() {\n return this.$('.auth-content-inner');\n }\n}\n","/* eslint-disable @typescript-eslint/no-explicit-any */\nimport Errors from 'util/Errors';\nimport Util from 'util/Util';\nimport Logger from 'util/Logger';\nimport getAuthClient from 'widget/getAuthClient';\nimport buildRenderOptions from 'widget/buildRenderOptions';\nimport createRouter from 'widget/createRouter';\nimport V1Router from 'LoginRouter';\nimport V2Router from 'v2/WidgetRouter';\nimport Hooks from 'models/Hooks';\nimport {\n WidgetOptions,\n OktaSignInAPI,\n RenderSuccessCallback,\n RenderErrorCallback,\n RenderResult,\n RenderOptions,\n HookFunction,\n RenderResultSuccess,\n EventCallback,\n EventCallbackWithError,\n EventName\n} from '../types';\nimport { OktaAuth, Tokens } from '@okta/okta-auth-js';\n\ndeclare type AbstractRouter = typeof V1Router | typeof V2Router;\n\nconst EVENTS_LIST = ['ready', 'afterError', 'afterRender'];\n\nexport default class OktaSignIn implements OktaSignInAPI {\n Router: AbstractRouter;\n options: WidgetOptions;\n hooks: Hooks;\n router: AbstractRouter;\n authClient: OktaAuth;\n\n constructor(options: WidgetOptions) {\n Util.debugMessage(`\n The Okta Sign-In Widget is running in development mode.\n When you are ready to publish your app, embed the minified version to turn on production mode.\n See: https://developer.okta.com/code/javascript/okta_sign-in_widget#cdn\n `);\n\n this.options = options;\n this.authClient = getAuthClient(options);\n\n // validate authClient configuration against widget options\n if (options.useInteractionCodeFlow && this.authClient.isPKCE() === false) {\n throw new Errors.ConfigError(\n 'The \"useInteractionCodeFlow\" option requires PKCE to be enabled on the authClient.'\n );\n }\n\n // Hooks can be modified before or after render\n this.hooks = new Hooks({\n hooks: options.hooks\n });\n\n let Router: AbstractRouter;\n if ((options.stateToken && !Util.isV1StateToken(options.stateToken)) \n // Self hosted widget can use `useInteractionCodeFlow` to use V2Router\n || options.useInteractionCodeFlow \n || options.proxyIdxResponse) {\n Router = V2Router;\n } else {\n Router = V1Router;\n }\n this.Router = Router;\n\n // Triggers the event up the chain so it is available to the consumers of the widget.\n this.Router.prototype.Events.listenTo.call(this, Router.prototype, 'all', this.trigger);\n\n // On the first afterRender event (usually when the Widget is ready) - emit a 'ready' event\n this.once('afterRender', function(context) {\n this.trigger('ready', context);\n });\n }\n\n /**\n * Render the sign in widget to an element. Returns a promise that will resolve on success or reject on error.\n * @param options - options for the signin widget.\n * Must have an el or $el property to render the widget to.\n * @param success - success callback function\n * @param error - error callback function\n */\n renderEl(renderOptions: RenderOptions, successFn?: RenderSuccessCallback, errorFn?: RenderErrorCallback): Promise {\n if (this.router) {\n throw new Error('An instance of the widget has already been rendered. Call remove() first.');\n }\n\n const res = createRouter(this.Router, this.options, renderOptions, this.authClient, successFn, errorFn, this.hooks);\n this.router = res.router;\n return res.promise;\n }\n\n \n hide(): void {\n if (this.router) {\n this.router.hide();\n }\n }\n\n show(): void {\n if (this.router) {\n this.router.show();\n }\n }\n\n remove(): void {\n if (this.router) {\n this.router.remove();\n this.router = undefined;\n }\n }\n\n /**\n * Renders the Widget and returns a promise that resolves to OAuth tokens\n * @param options - options for the signin widget\n */\n showSignInToGetTokens(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options), {\n redirect: 'never'\n });\n const promise = this.renderEl(renderOptions).then(res => {\n return (res as RenderResultSuccess).tokens;\n });\n const authClient = this.router.settings.getAuthClient();\n if (authClient.isAuthorizationCodeFlow() && !authClient.isPKCE()) {\n throw new Errors.ConfigError('\"showSignInToGetTokens()\" should not be used for authorization_code flow. ' + \n 'Use \"showSignInAndRedirect()\" instead');\n }\n return promise;\n }\n\n /**\n * Renders the widget and redirects to the OAuth callback\n * @param options - options for the signin widget\n */\n showSignInAndRedirect(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options), {\n redirect: 'always'\n });\n return this.renderEl(renderOptions).then(() => {\n // This method should never return, it will either redirect or reject with error\n return;\n });\n }\n\n /**\n * Renders the widget. Either resolves the returned promise, or redirects.\n * @param options - options for the signin widget\n */\n showSignIn(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options));\n return this.renderEl(renderOptions);\n }\n\n // Hook convenience functions\n before(formName: string, callbackFn: HookFunction): void {\n this.hooks.mergeHook(formName, {\n before: [\n callbackFn\n ]\n });\n }\n\n after(formName: string, callbackFn: HookFunction): void {\n this.hooks.mergeHook(formName, {\n after: [\n callbackFn\n ]\n });\n }\n\n getUser(): any {\n return this.router?.appState?.getUser();\n }\n \n // Events API\n\n on(event: EventName, callback: EventCallback | EventCallbackWithError): void {\n // custom events listener on widget instance to trap third-party callback errors\n if (EVENTS_LIST.includes(event)) {\n const origCallback = callback;\n callback = function(...callbackArgs) {\n try {\n origCallback.apply(this, callbackArgs);\n } catch (err) {\n Logger.error(`[okta-signin-widget] \"${event}\" event handler error:`, err);\n }\n };\n }\n this.Router.prototype.Events.on.call(this, event, callback);\n }\n\n off(event?: EventName, callback?: EventCallback | EventCallbackWithError): void {\n this.Router.prototype.Events.off.call(this, event, callback);\n }\n\n once(event: EventName, callback: EventCallback): void {\n this.Router.prototype.Events.once.call(this, event, callback);\n }\n\n stopListening(event?: EventName, callback?: EventCallback): void {\n this.Router.prototype.Events.stopListening.call(this, event, callback);\n }\n\n listenTo(object: any, event: EventName, callback: EventCallback): void {\n this.Router.prototype.Events.listenTo.call(this, object, event, callback);\n }\n\n trigger(event: EventName, ...args: any[]): void {\n this.Router.prototype.Events.trigger.apply(this, [event, ...args]);\n }\n\n}\n","import { OktaAuth } from '@okta/okta-auth-js';\nimport Util from 'util/Util';\nimport config from 'config/config.json';\nimport { WidgetOptions } from 'types';\n\nexport default function(options: WidgetOptions = {}): OktaAuth {\n // if authClient is set, authParams are disregarded\n let { authClient, authParams } = options;\n\n if (!authClient) {\n // Create an authClient using widget options and optional authParams\n const {\n issuer,\n clientId,\n redirectUri,\n state,\n scopes,\n flow,\n codeChallenge,\n codeChallengeMethod,\n recoveryToken\n } = options;\n authParams = {\n issuer,\n clientId,\n redirectUri,\n state,\n scopes,\n flow,\n codeChallenge,\n codeChallengeMethod,\n transformErrorXHR: Util.transformErrorXHR,\n recoveryToken,\n ...authParams\n };\n\n if (!authParams.issuer) {\n authParams.issuer = options.baseUrl + '/oauth2/default';\n }\n\n authClient = new OktaAuth(authParams);\n }\n\n // Add widget version to extended user agent header\n if (!authClient._oktaUserAgent) {\n // TODO: this block handles OKTA UA for passed in authClient, error should be thrown in the next major version\n // For now, do nothing here to preserve the current behavior\n // JIRA: https://oktainc.atlassian.net/browse/OKTA-433378\n // throw new Errors.ConfigError('The passed in authClient should be version 5.4.0 or above.');\n } else {\n authClient._oktaUserAgent.addEnvironment(`okta-signin-widget-${config.version}`);\n }\n\n return authClient;\n}\n","function _arrayLikeToArray(arr, len) {\n if (len == null || len > arr.length) len = arr.length;\n\n for (var i = 0, arr2 = new Array(len); i < len; i++) {\n arr2[i] = arr[i];\n }\n\n return arr2;\n}\n\nmodule.exports = _arrayLikeToArray;","function _arrayWithHoles(arr) {\n if (Array.isArray(arr)) return arr;\n}\n\nmodule.exports = _arrayWithHoles;","var arrayLikeToArray = require(\"./arrayLikeToArray\");\n\nfunction _arrayWithoutHoles(arr) {\n if (Array.isArray(arr)) return arrayLikeToArray(arr);\n}\n\nmodule.exports = _arrayWithoutHoles;","function _assertThisInitialized(self) {\n if (self === void 0) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return self;\n}\n\nmodule.exports = _assertThisInitialized;","function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {\n try {\n var info = gen[key](arg);\n var value = info.value;\n } catch (error) {\n reject(error);\n return;\n }\n\n if (info.done) {\n resolve(value);\n } else {\n Promise.resolve(value).then(_next, _throw);\n }\n}\n\nfunction _asyncToGenerator(fn) {\n return function () {\n var self = this,\n args = arguments;\n return new Promise(function (resolve, reject) {\n var gen = fn.apply(self, args);\n\n function _next(value) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"next\", value);\n }\n\n function _throw(err) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"throw\", err);\n }\n\n _next(undefined);\n });\n };\n}\n\nmodule.exports = _asyncToGenerator;","function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n}\n\nmodule.exports = _classCallCheck;","function _defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n}\n\nfunction _createClass(Constructor, protoProps, staticProps) {\n if (protoProps) _defineProperties(Constructor.prototype, protoProps);\n if (staticProps) _defineProperties(Constructor, staticProps);\n return Constructor;\n}\n\nmodule.exports = _createClass;","function _defineProperty(obj, key, value) {\n if (key in obj) {\n Object.defineProperty(obj, key, {\n value: value,\n enumerable: true,\n configurable: true,\n writable: true\n });\n } else {\n obj[key] = value;\n }\n\n return obj;\n}\n\nmodule.exports = _defineProperty;","function _getPrototypeOf(o) {\n module.exports = _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {\n return o.__proto__ || Object.getPrototypeOf(o);\n };\n return _getPrototypeOf(o);\n}\n\nmodule.exports = _getPrototypeOf;","var setPrototypeOf = require(\"./setPrototypeOf\");\n\nfunction _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n writable: true,\n configurable: true\n }\n });\n if (superClass) setPrototypeOf(subClass, superClass);\n}\n\nmodule.exports = _inherits;","function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n \"default\": obj\n };\n}\n\nmodule.exports = _interopRequireDefault;","function _iterableToArray(iter) {\n if (typeof Symbol !== \"undefined\" && Symbol.iterator in Object(iter)) return Array.from(iter);\n}\n\nmodule.exports = _iterableToArray;","function _iterableToArrayLimit(arr, i) {\n if (typeof Symbol === \"undefined\" || !(Symbol.iterator in Object(arr))) return;\n var _arr = [];\n var _n = true;\n var _d = false;\n var _e = undefined;\n\n try {\n for (var _i = arr[Symbol.iterator](), _s; !(_n = (_s = _i.next()).done); _n = true) {\n _arr.push(_s.value);\n\n if (i && _arr.length === i) break;\n }\n } catch (err) {\n _d = true;\n _e = err;\n } finally {\n try {\n if (!_n && _i[\"return\"] != null) _i[\"return\"]();\n } finally {\n if (_d) throw _e;\n }\n }\n\n return _arr;\n}\n\nmodule.exports = _iterableToArrayLimit;","function _nonIterableRest() {\n throw new TypeError(\"Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\");\n}\n\nmodule.exports = _nonIterableRest;","function _nonIterableSpread() {\n throw new TypeError(\"Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\");\n}\n\nmodule.exports = _nonIterableSpread;","var _typeof = require(\"../helpers/typeof\");\n\nvar assertThisInitialized = require(\"./assertThisInitialized\");\n\nfunction _possibleConstructorReturn(self, call) {\n if (call && (_typeof(call) === \"object\" || typeof call === \"function\")) {\n return call;\n }\n\n return assertThisInitialized(self);\n}\n\nmodule.exports = _possibleConstructorReturn;","function _setPrototypeOf(o, p) {\n module.exports = _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {\n o.__proto__ = p;\n return o;\n };\n\n return _setPrototypeOf(o, p);\n}\n\nmodule.exports = _setPrototypeOf;","var arrayWithHoles = require(\"./arrayWithHoles\");\n\nvar iterableToArrayLimit = require(\"./iterableToArrayLimit\");\n\nvar unsupportedIterableToArray = require(\"./unsupportedIterableToArray\");\n\nvar nonIterableRest = require(\"./nonIterableRest\");\n\nfunction _slicedToArray(arr, i) {\n return arrayWithHoles(arr) || iterableToArrayLimit(arr, i) || unsupportedIterableToArray(arr, i) || nonIterableRest();\n}\n\nmodule.exports = _slicedToArray;","var arrayWithoutHoles = require(\"./arrayWithoutHoles\");\n\nvar iterableToArray = require(\"./iterableToArray\");\n\nvar unsupportedIterableToArray = require(\"./unsupportedIterableToArray\");\n\nvar nonIterableSpread = require(\"./nonIterableSpread\");\n\nfunction _toConsumableArray(arr) {\n return arrayWithoutHoles(arr) || iterableToArray(arr) || unsupportedIterableToArray(arr) || nonIterableSpread();\n}\n\nmodule.exports = _toConsumableArray;","function _typeof(obj) {\n \"@babel/helpers - typeof\";\n\n if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") {\n module.exports = _typeof = function _typeof(obj) {\n return typeof obj;\n };\n } else {\n module.exports = _typeof = function _typeof(obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n }\n\n return _typeof(obj);\n}\n\nmodule.exports = _typeof;","var arrayLikeToArray = require(\"./arrayLikeToArray\");\n\nfunction _unsupportedIterableToArray(o, minLen) {\n if (!o) return;\n if (typeof o === \"string\") return arrayLikeToArray(o, minLen);\n var n = Object.prototype.toString.call(o).slice(8, -1);\n if (n === \"Object\" && o.constructor) n = o.constructor.name;\n if (n === \"Map\" || n === \"Set\") return Array.from(o);\n if (n === \"Arguments\" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return arrayLikeToArray(o, minLen);\n}\n\nmodule.exports = _unsupportedIterableToArray;","/**\n * Copyright (c) 2014-present, Facebook, Inc.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\nvar runtime = (function (exports) {\n \"use strict\";\n\n var Op = Object.prototype;\n var hasOwn = Op.hasOwnProperty;\n var undefined; // More compressible than void 0.\n var $Symbol = typeof Symbol === \"function\" ? Symbol : {};\n var iteratorSymbol = $Symbol.iterator || \"@@iterator\";\n var asyncIteratorSymbol = $Symbol.asyncIterator || \"@@asyncIterator\";\n var toStringTagSymbol = $Symbol.toStringTag || \"@@toStringTag\";\n\n function wrap(innerFn, outerFn, self, tryLocsList) {\n // If outerFn provided and outerFn.prototype is a Generator, then outerFn.prototype instanceof Generator.\n var protoGenerator = outerFn && outerFn.prototype instanceof Generator ? outerFn : Generator;\n var generator = Object.create(protoGenerator.prototype);\n var context = new Context(tryLocsList || []);\n\n // The ._invoke method unifies the implementations of the .next,\n // .throw, and .return methods.\n generator._invoke = makeInvokeMethod(innerFn, self, context);\n\n return generator;\n }\n exports.wrap = wrap;\n\n // Try/catch helper to minimize deoptimizations. Returns a completion\n // record like context.tryEntries[i].completion. This interface could\n // have been (and was previously) designed to take a closure to be\n // invoked without arguments, but in all the cases we care about we\n // already have an existing method we want to call, so there's no need\n // to create a new function object. We can even get away with assuming\n // the method takes exactly one argument, since that happens to be true\n // in every case, so we don't have to touch the arguments object. The\n // only additional allocation required is the completion record, which\n // has a stable shape and so hopefully should be cheap to allocate.\n function tryCatch(fn, obj, arg) {\n try {\n return { type: \"normal\", arg: fn.call(obj, arg) };\n } catch (err) {\n return { type: \"throw\", arg: err };\n }\n }\n\n var GenStateSuspendedStart = \"suspendedStart\";\n var GenStateSuspendedYield = \"suspendedYield\";\n var GenStateExecuting = \"executing\";\n var GenStateCompleted = \"completed\";\n\n // Returning this object from the innerFn has the same effect as\n // breaking out of the dispatch switch statement.\n var ContinueSentinel = {};\n\n // Dummy constructor functions that we use as the .constructor and\n // .constructor.prototype properties for functions that return Generator\n // objects. For full spec compliance, you may wish to configure your\n // minifier not to mangle the names of these two functions.\n function Generator() {}\n function GeneratorFunction() {}\n function GeneratorFunctionPrototype() {}\n\n // This is a polyfill for %IteratorPrototype% for environments that\n // don't natively support it.\n var IteratorPrototype = {};\n IteratorPrototype[iteratorSymbol] = function () {\n return this;\n };\n\n var getProto = Object.getPrototypeOf;\n var NativeIteratorPrototype = getProto && getProto(getProto(values([])));\n if (NativeIteratorPrototype &&\n NativeIteratorPrototype !== Op &&\n hasOwn.call(NativeIteratorPrototype, iteratorSymbol)) {\n // This environment has a native %IteratorPrototype%; use it instead\n // of the polyfill.\n IteratorPrototype = NativeIteratorPrototype;\n }\n\n var Gp = GeneratorFunctionPrototype.prototype =\n Generator.prototype = Object.create(IteratorPrototype);\n GeneratorFunction.prototype = Gp.constructor = GeneratorFunctionPrototype;\n GeneratorFunctionPrototype.constructor = GeneratorFunction;\n GeneratorFunctionPrototype[toStringTagSymbol] =\n GeneratorFunction.displayName = \"GeneratorFunction\";\n\n // Helper for defining the .next, .throw, and .return methods of the\n // Iterator interface in terms of a single ._invoke method.\n function defineIteratorMethods(prototype) {\n [\"next\", \"throw\", \"return\"].forEach(function(method) {\n prototype[method] = function(arg) {\n return this._invoke(method, arg);\n };\n });\n }\n\n exports.isGeneratorFunction = function(genFun) {\n var ctor = typeof genFun === \"function\" && genFun.constructor;\n return ctor\n ? ctor === GeneratorFunction ||\n // For the native GeneratorFunction constructor, the best we can\n // do is to check its .name property.\n (ctor.displayName || ctor.name) === \"GeneratorFunction\"\n : false;\n };\n\n exports.mark = function(genFun) {\n if (Object.setPrototypeOf) {\n Object.setPrototypeOf(genFun, GeneratorFunctionPrototype);\n } else {\n genFun.__proto__ = GeneratorFunctionPrototype;\n if (!(toStringTagSymbol in genFun)) {\n genFun[toStringTagSymbol] = \"GeneratorFunction\";\n }\n }\n genFun.prototype = Object.create(Gp);\n return genFun;\n };\n\n // Within the body of any async function, `await x` is transformed to\n // `yield regeneratorRuntime.awrap(x)`, so that the runtime can test\n // `hasOwn.call(value, \"__await\")` to determine if the yielded value is\n // meant to be awaited.\n exports.awrap = function(arg) {\n return { __await: arg };\n };\n\n function AsyncIterator(generator, PromiseImpl) {\n function invoke(method, arg, resolve, reject) {\n var record = tryCatch(generator[method], generator, arg);\n if (record.type === \"throw\") {\n reject(record.arg);\n } else {\n var result = record.arg;\n var value = result.value;\n if (value &&\n typeof value === \"object\" &&\n hasOwn.call(value, \"__await\")) {\n return PromiseImpl.resolve(value.__await).then(function(value) {\n invoke(\"next\", value, resolve, reject);\n }, function(err) {\n invoke(\"throw\", err, resolve, reject);\n });\n }\n\n return PromiseImpl.resolve(value).then(function(unwrapped) {\n // When a yielded Promise is resolved, its final value becomes\n // the .value of the Promise<{value,done}> result for the\n // current iteration.\n result.value = unwrapped;\n resolve(result);\n }, function(error) {\n // If a rejected Promise was yielded, throw the rejection back\n // into the async generator function so it can be handled there.\n return invoke(\"throw\", error, resolve, reject);\n });\n }\n }\n\n var previousPromise;\n\n function enqueue(method, arg) {\n function callInvokeWithMethodAndArg() {\n return new PromiseImpl(function(resolve, reject) {\n invoke(method, arg, resolve, reject);\n });\n }\n\n return previousPromise =\n // If enqueue has been called before, then we want to wait until\n // all previous Promises have been resolved before calling invoke,\n // so that results are always delivered in the correct order. If\n // enqueue has not been called before, then it is important to\n // call invoke immediately, without waiting on a callback to fire,\n // so that the async generator function has the opportunity to do\n // any necessary setup in a predictable way. This predictability\n // is why the Promise constructor synchronously invokes its\n // executor callback, and why async functions synchronously\n // execute code before the first await. Since we implement simple\n // async functions in terms of async generators, it is especially\n // important to get this right, even though it requires care.\n previousPromise ? previousPromise.then(\n callInvokeWithMethodAndArg,\n // Avoid propagating failures to Promises returned by later\n // invocations of the iterator.\n callInvokeWithMethodAndArg\n ) : callInvokeWithMethodAndArg();\n }\n\n // Define the unified helper method that is used to implement .next,\n // .throw, and .return (see defineIteratorMethods).\n this._invoke = enqueue;\n }\n\n defineIteratorMethods(AsyncIterator.prototype);\n AsyncIterator.prototype[asyncIteratorSymbol] = function () {\n return this;\n };\n exports.AsyncIterator = AsyncIterator;\n\n // Note that simple async functions are implemented on top of\n // AsyncIterator objects; they just return a Promise for the value of\n // the final result produced by the iterator.\n exports.async = function(innerFn, outerFn, self, tryLocsList, PromiseImpl) {\n if (PromiseImpl === void 0) PromiseImpl = Promise;\n\n var iter = new AsyncIterator(\n wrap(innerFn, outerFn, self, tryLocsList),\n PromiseImpl\n );\n\n return exports.isGeneratorFunction(outerFn)\n ? iter // If outerFn is a generator, return the full iterator.\n : iter.next().then(function(result) {\n return result.done ? result.value : iter.next();\n });\n };\n\n function makeInvokeMethod(innerFn, self, context) {\n var state = GenStateSuspendedStart;\n\n return function invoke(method, arg) {\n if (state === GenStateExecuting) {\n throw new Error(\"Generator is already running\");\n }\n\n if (state === GenStateCompleted) {\n if (method === \"throw\") {\n throw arg;\n }\n\n // Be forgiving, per 25.3.3.3.3 of the spec:\n // https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume\n return doneResult();\n }\n\n context.method = method;\n context.arg = arg;\n\n while (true) {\n var delegate = context.delegate;\n if (delegate) {\n var delegateResult = maybeInvokeDelegate(delegate, context);\n if (delegateResult) {\n if (delegateResult === ContinueSentinel) continue;\n return delegateResult;\n }\n }\n\n if (context.method === \"next\") {\n // Setting context._sent for legacy support of Babel's\n // function.sent implementation.\n context.sent = context._sent = context.arg;\n\n } else if (context.method === \"throw\") {\n if (state === GenStateSuspendedStart) {\n state = GenStateCompleted;\n throw context.arg;\n }\n\n context.dispatchException(context.arg);\n\n } else if (context.method === \"return\") {\n context.abrupt(\"return\", context.arg);\n }\n\n state = GenStateExecuting;\n\n var record = tryCatch(innerFn, self, context);\n if (record.type === \"normal\") {\n // If an exception is thrown from innerFn, we leave state ===\n // GenStateExecuting and loop back for another invocation.\n state = context.done\n ? GenStateCompleted\n : GenStateSuspendedYield;\n\n if (record.arg === ContinueSentinel) {\n continue;\n }\n\n return {\n value: record.arg,\n done: context.done\n };\n\n } else if (record.type === \"throw\") {\n state = GenStateCompleted;\n // Dispatch the exception by looping back around to the\n // context.dispatchException(context.arg) call above.\n context.method = \"throw\";\n context.arg = record.arg;\n }\n }\n };\n }\n\n // Call delegate.iterator[context.method](context.arg) and handle the\n // result, either by returning a { value, done } result from the\n // delegate iterator, or by modifying context.method and context.arg,\n // setting context.delegate to null, and returning the ContinueSentinel.\n function maybeInvokeDelegate(delegate, context) {\n var method = delegate.iterator[context.method];\n if (method === undefined) {\n // A .throw or .return when the delegate iterator has no .throw\n // method always terminates the yield* loop.\n context.delegate = null;\n\n if (context.method === \"throw\") {\n // Note: [\"return\"] must be used for ES3 parsing compatibility.\n if (delegate.iterator[\"return\"]) {\n // If the delegate iterator has a return method, give it a\n // chance to clean up.\n context.method = \"return\";\n context.arg = undefined;\n maybeInvokeDelegate(delegate, context);\n\n if (context.method === \"throw\") {\n // If maybeInvokeDelegate(context) changed context.method from\n // \"return\" to \"throw\", let that override the TypeError below.\n return ContinueSentinel;\n }\n }\n\n context.method = \"throw\";\n context.arg = new TypeError(\n \"The iterator does not provide a 'throw' method\");\n }\n\n return ContinueSentinel;\n }\n\n var record = tryCatch(method, delegate.iterator, context.arg);\n\n if (record.type === \"throw\") {\n context.method = \"throw\";\n context.arg = record.arg;\n context.delegate = null;\n return ContinueSentinel;\n }\n\n var info = record.arg;\n\n if (! info) {\n context.method = \"throw\";\n context.arg = new TypeError(\"iterator result is not an object\");\n context.delegate = null;\n return ContinueSentinel;\n }\n\n if (info.done) {\n // Assign the result of the finished delegate to the temporary\n // variable specified by delegate.resultName (see delegateYield).\n context[delegate.resultName] = info.value;\n\n // Resume execution at the desired location (see delegateYield).\n context.next = delegate.nextLoc;\n\n // If context.method was \"throw\" but the delegate handled the\n // exception, let the outer generator proceed normally. If\n // context.method was \"next\", forget context.arg since it has been\n // \"consumed\" by the delegate iterator. If context.method was\n // \"return\", allow the original .return call to continue in the\n // outer generator.\n if (context.method !== \"return\") {\n context.method = \"next\";\n context.arg = undefined;\n }\n\n } else {\n // Re-yield the result returned by the delegate method.\n return info;\n }\n\n // The delegate iterator is finished, so forget it and continue with\n // the outer generator.\n context.delegate = null;\n return ContinueSentinel;\n }\n\n // Define Generator.prototype.{next,throw,return} in terms of the\n // unified ._invoke helper method.\n defineIteratorMethods(Gp);\n\n Gp[toStringTagSymbol] = \"Generator\";\n\n // A Generator should always return itself as the iterator object when the\n // @@iterator function is called on it. Some browsers' implementations of the\n // iterator prototype chain incorrectly implement this, causing the Generator\n // object to not be returned from this call. This ensures that doesn't happen.\n // See https://github.com/facebook/regenerator/issues/274 for more details.\n Gp[iteratorSymbol] = function() {\n return this;\n };\n\n Gp.toString = function() {\n return \"[object Generator]\";\n };\n\n function pushTryEntry(locs) {\n var entry = { tryLoc: locs[0] };\n\n if (1 in locs) {\n entry.catchLoc = locs[1];\n }\n\n if (2 in locs) {\n entry.finallyLoc = locs[2];\n entry.afterLoc = locs[3];\n }\n\n this.tryEntries.push(entry);\n }\n\n function resetTryEntry(entry) {\n var record = entry.completion || {};\n record.type = \"normal\";\n delete record.arg;\n entry.completion = record;\n }\n\n function Context(tryLocsList) {\n // The root entry object (effectively a try statement without a catch\n // or a finally block) gives us a place to store values thrown from\n // locations where there is no enclosing try statement.\n this.tryEntries = [{ tryLoc: \"root\" }];\n tryLocsList.forEach(pushTryEntry, this);\n this.reset(true);\n }\n\n exports.keys = function(object) {\n var keys = [];\n for (var key in object) {\n keys.push(key);\n }\n keys.reverse();\n\n // Rather than returning an object with a next method, we keep\n // things simple and return the next function itself.\n return function next() {\n while (keys.length) {\n var key = keys.pop();\n if (key in object) {\n next.value = key;\n next.done = false;\n return next;\n }\n }\n\n // To avoid creating an additional object, we just hang the .value\n // and .done properties off the next function object itself. This\n // also ensures that the minifier will not anonymize the function.\n next.done = true;\n return next;\n };\n };\n\n function values(iterable) {\n if (iterable) {\n var iteratorMethod = iterable[iteratorSymbol];\n if (iteratorMethod) {\n return iteratorMethod.call(iterable);\n }\n\n if (typeof iterable.next === \"function\") {\n return iterable;\n }\n\n if (!isNaN(iterable.length)) {\n var i = -1, next = function next() {\n while (++i < iterable.length) {\n if (hasOwn.call(iterable, i)) {\n next.value = iterable[i];\n next.done = false;\n return next;\n }\n }\n\n next.value = undefined;\n next.done = true;\n\n return next;\n };\n\n return next.next = next;\n }\n }\n\n // Return an iterator with no values.\n return { next: doneResult };\n }\n exports.values = values;\n\n function doneResult() {\n return { value: undefined, done: true };\n }\n\n Context.prototype = {\n constructor: Context,\n\n reset: function(skipTempReset) {\n this.prev = 0;\n this.next = 0;\n // Resetting context._sent for legacy support of Babel's\n // function.sent implementation.\n this.sent = this._sent = undefined;\n this.done = false;\n this.delegate = null;\n\n this.method = \"next\";\n this.arg = undefined;\n\n this.tryEntries.forEach(resetTryEntry);\n\n if (!skipTempReset) {\n for (var name in this) {\n // Not sure about the optimal order of these conditions:\n if (name.charAt(0) === \"t\" &&\n hasOwn.call(this, name) &&\n !isNaN(+name.slice(1))) {\n this[name] = undefined;\n }\n }\n }\n },\n\n stop: function() {\n this.done = true;\n\n var rootEntry = this.tryEntries[0];\n var rootRecord = rootEntry.completion;\n if (rootRecord.type === \"throw\") {\n throw rootRecord.arg;\n }\n\n return this.rval;\n },\n\n dispatchException: function(exception) {\n if (this.done) {\n throw exception;\n }\n\n var context = this;\n function handle(loc, caught) {\n record.type = \"throw\";\n record.arg = exception;\n context.next = loc;\n\n if (caught) {\n // If the dispatched exception was caught by a catch block,\n // then let that catch block handle the exception normally.\n context.method = \"next\";\n context.arg = undefined;\n }\n\n return !! caught;\n }\n\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n var record = entry.completion;\n\n if (entry.tryLoc === \"root\") {\n // Exception thrown outside of any try block that could handle\n // it, so set the completion value of the entire function to\n // throw the exception.\n return handle(\"end\");\n }\n\n if (entry.tryLoc <= this.prev) {\n var hasCatch = hasOwn.call(entry, \"catchLoc\");\n var hasFinally = hasOwn.call(entry, \"finallyLoc\");\n\n if (hasCatch && hasFinally) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n } else if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else if (hasCatch) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n }\n\n } else if (hasFinally) {\n if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else {\n throw new Error(\"try statement without catch or finally\");\n }\n }\n }\n },\n\n abrupt: function(type, arg) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc <= this.prev &&\n hasOwn.call(entry, \"finallyLoc\") &&\n this.prev < entry.finallyLoc) {\n var finallyEntry = entry;\n break;\n }\n }\n\n if (finallyEntry &&\n (type === \"break\" ||\n type === \"continue\") &&\n finallyEntry.tryLoc <= arg &&\n arg <= finallyEntry.finallyLoc) {\n // Ignore the finally entry if control is not jumping to a\n // location outside the try/catch block.\n finallyEntry = null;\n }\n\n var record = finallyEntry ? finallyEntry.completion : {};\n record.type = type;\n record.arg = arg;\n\n if (finallyEntry) {\n this.method = \"next\";\n this.next = finallyEntry.finallyLoc;\n return ContinueSentinel;\n }\n\n return this.complete(record);\n },\n\n complete: function(record, afterLoc) {\n if (record.type === \"throw\") {\n throw record.arg;\n }\n\n if (record.type === \"break\" ||\n record.type === \"continue\") {\n this.next = record.arg;\n } else if (record.type === \"return\") {\n this.rval = this.arg = record.arg;\n this.method = \"return\";\n this.next = \"end\";\n } else if (record.type === \"normal\" && afterLoc) {\n this.next = afterLoc;\n }\n\n return ContinueSentinel;\n },\n\n finish: function(finallyLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.finallyLoc === finallyLoc) {\n this.complete(entry.completion, entry.afterLoc);\n resetTryEntry(entry);\n return ContinueSentinel;\n }\n }\n },\n\n \"catch\": function(tryLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc === tryLoc) {\n var record = entry.completion;\n if (record.type === \"throw\") {\n var thrown = record.arg;\n resetTryEntry(entry);\n }\n return thrown;\n }\n }\n\n // The context.catch method must only be called with a location\n // argument that corresponds to a known catch block.\n throw new Error(\"illegal catch attempt\");\n },\n\n delegateYield: function(iterable, resultName, nextLoc) {\n this.delegate = {\n iterator: values(iterable),\n resultName: resultName,\n nextLoc: nextLoc\n };\n\n if (this.method === \"next\") {\n // Deliberately forget the last sent value so that we don't\n // accidentally pass it on to the delegate.\n this.arg = undefined;\n }\n\n return ContinueSentinel;\n }\n };\n\n // Regardless of whether this script is executing as a CommonJS module\n // or not, return the runtime object so that we can declare the variable\n // regeneratorRuntime in the outer scope, which allows this module to be\n // injected easily by `bin/regenerator --include-runtime script.js`.\n return exports;\n\n}(\n // If this script is executing as a CommonJS module, use module.exports\n // as the regeneratorRuntime namespace. Otherwise create a new empty\n // object. Either way, the resulting object will be used to initialize\n // the regeneratorRuntime variable at the top of this file.\n typeof module === \"object\" ? module.exports : {}\n));\n\ntry {\n regeneratorRuntime = runtime;\n} catch (accidentalStrictMode) {\n // This module should not be running in strict mode, so the above\n // assignment should always work unless something is misconfigured. Just\n // in case runtime.js accidentally runs in strict mode, we can escape\n // strict mode using a global Function call. This could conceivably fail\n // if a Content Security Policy forbids using Function, but in that case\n // the proper solution is to fix the accidental strict mode problem. If\n // you've misconfigured your bundler to force strict mode and applied a\n // CSP to forbid Function, and you're not willing to fix either of those\n // problems, please detail your unique predicament in a GitHub issue.\n Function(\"r\", \"regeneratorRuntime = r\")(runtime);\n}\n","module.exports = require(\"regenerator-runtime\");\n","(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"OktaAuth\"] = factory();\n\telse\n\t\troot[\"OktaAuth\"] = factory();\n})(self, function() {\nreturn ","function _assertThisInitialized(self) {\n if (self === void 0) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return self;\n}\n\nmodule.exports = _assertThisInitialized;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n}\n\nmodule.exports = _classCallCheck;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nvar isNativeReflectConstruct = require(\"./isNativeReflectConstruct.js\");\n\nfunction _construct(Parent, args, Class) {\n if (isNativeReflectConstruct()) {\n module.exports = _construct = Reflect.construct;\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n } else {\n module.exports = _construct = function _construct(Parent, args, Class) {\n var a = [null];\n a.push.apply(a, args);\n var Constructor = Function.bind.apply(Parent, a);\n var instance = new Constructor();\n if (Class) setPrototypeOf(instance, Class.prototype);\n return instance;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n }\n\n return _construct.apply(null, arguments);\n}\n\nmodule.exports = _construct;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n}\n\nfunction _createClass(Constructor, protoProps, staticProps) {\n if (protoProps) _defineProperties(Constructor.prototype, protoProps);\n if (staticProps) _defineProperties(Constructor, staticProps);\n return Constructor;\n}\n\nmodule.exports = _createClass;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _getPrototypeOf(o) {\n module.exports = _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {\n return o.__proto__ || Object.getPrototypeOf(o);\n };\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _getPrototypeOf(o);\n}\n\nmodule.exports = _getPrototypeOf;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nfunction _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n writable: true,\n configurable: true\n }\n });\n if (superClass) setPrototypeOf(subClass, superClass);\n}\n\nmodule.exports = _inherits;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _isNativeFunction(fn) {\n return Function.toString.call(fn).indexOf(\"[native code]\") !== -1;\n}\n\nmodule.exports = _isNativeFunction;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _isNativeReflectConstruct() {\n if (typeof Reflect === \"undefined\" || !Reflect.construct) return false;\n if (Reflect.construct.sham) return false;\n if (typeof Proxy === \"function\") return true;\n\n try {\n Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));\n return true;\n } catch (e) {\n return false;\n }\n}\n\nmodule.exports = _isNativeReflectConstruct;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var _typeof = require(\"@babel/runtime/helpers/typeof\")[\"default\"];\n\nvar assertThisInitialized = require(\"./assertThisInitialized.js\");\n\nfunction _possibleConstructorReturn(self, call) {\n if (call && (_typeof(call) === \"object\" || typeof call === \"function\")) {\n return call;\n }\n\n return assertThisInitialized(self);\n}\n\nmodule.exports = _possibleConstructorReturn;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _setPrototypeOf(o, p) {\n module.exports = _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {\n o.__proto__ = p;\n return o;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _setPrototypeOf(o, p);\n}\n\nmodule.exports = _setPrototypeOf;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _typeof(obj) {\n \"@babel/helpers - typeof\";\n\n if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") {\n module.exports = _typeof = function _typeof(obj) {\n return typeof obj;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n } else {\n module.exports = _typeof = function _typeof(obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n }\n\n return _typeof(obj);\n}\n\nmodule.exports = _typeof;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var getPrototypeOf = require(\"./getPrototypeOf.js\");\n\nvar setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nvar isNativeFunction = require(\"./isNativeFunction.js\");\n\nvar construct = require(\"./construct.js\");\n\nfunction _wrapNativeSuper(Class) {\n var _cache = typeof Map === \"function\" ? new Map() : undefined;\n\n module.exports = _wrapNativeSuper = function _wrapNativeSuper(Class) {\n if (Class === null || !isNativeFunction(Class)) return Class;\n\n if (typeof Class !== \"function\") {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n if (typeof _cache !== \"undefined\") {\n if (_cache.has(Class)) return _cache.get(Class);\n\n _cache.set(Class, Wrapper);\n }\n\n function Wrapper() {\n return construct(Class, arguments, getPrototypeOf(this).constructor);\n }\n\n Wrapper.prototype = Object.create(Class.prototype, {\n constructor: {\n value: Wrapper,\n enumerable: false,\n writable: true,\n configurable: true\n }\n });\n return setPrototypeOf(Wrapper, Class);\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _wrapNativeSuper(Class);\n}\n\nmodule.exports = _wrapNativeSuper;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","module.exports = require(\"regenerator-runtime\");\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n \n// eslint-disable-next-line @typescript-eslint/ban-ts-comment\n// @ts-ignore \n// Do not use this type in code, so it won't be emitted in the declaration output\nimport PCancelable from 'p-cancelable';\nimport { AuthSdkError } from './errors';\nimport { AuthState, AuthStateLogOptions } from './types';\nimport { OktaAuth } from '.';\nimport { getConsole } from './util';\nimport { EVENT_ADDED, EVENT_REMOVED } from './TokenManager';\nimport PromiseQueue from './PromiseQueue';\n\nexport const INITIAL_AUTH_STATE = null;\nconst DEFAULT_PENDING = {\n updateAuthStatePromise: null,\n canceledTimes: 0\n};\nconst EVENT_AUTH_STATE_CHANGE = 'authStateChange';\nconst MAX_PROMISE_CANCEL_TIMES = 10;\n\n// only compare first level of authState\nconst isSameAuthState = (prevState: AuthState | null, state: AuthState) => {\n // initial state is null\n if (!prevState) {\n return false;\n }\n\n return prevState.isAuthenticated === state.isAuthenticated \n && JSON.stringify(prevState.idToken) === JSON.stringify(state.idToken)\n && JSON.stringify(prevState.accessToken) === JSON.stringify(state.accessToken)\n && prevState.error === state.error;\n};\n\n\nexport class AuthStateManager {\n _sdk: OktaAuth;\n _pending: { \n updateAuthStatePromise: any;\n canceledTimes: number; \n };\n _authState: AuthState | null;\n _prevAuthState: AuthState | null;\n _logOptions: AuthStateLogOptions;\n _transformQueue: PromiseQueue;\n\n constructor(sdk: OktaAuth) {\n if (!sdk.emitter) {\n throw new AuthSdkError('Emitter should be initialized before AuthStateManager');\n }\n\n this._sdk = sdk;\n this._pending = { ...DEFAULT_PENDING };\n this._authState = INITIAL_AUTH_STATE;\n this._logOptions = {};\n this._prevAuthState = null;\n this._transformQueue = new PromiseQueue({\n quiet: true\n });\n\n // Listen on tokenManager events to start updateState process\n // \"added\" event is emitted in both add and renew process\n // Only listen on \"added\" event to update auth state\n sdk.tokenManager.on(EVENT_ADDED, (key, token) => {\n this._setLogOptions({ event: EVENT_ADDED, key, token });\n this.updateAuthState();\n });\n sdk.tokenManager.on(EVENT_REMOVED, (key, token) => {\n this._setLogOptions({ event: EVENT_REMOVED, key, token });\n this.updateAuthState();\n });\n }\n\n _setLogOptions(options) {\n this._logOptions = options;\n }\n\n getAuthState(): AuthState | null {\n return this._authState;\n }\n\n getPreviousAuthState(): AuthState | null {\n return this._prevAuthState;\n }\n\n async updateAuthState(): Promise {\n const { transformAuthState, devMode } = this._sdk.options;\n\n const log = (status) => {\n const { event, key, token } = this._logOptions;\n getConsole().group(`OKTA-AUTH-JS:updateAuthState: Event:${event} Status:${status}`);\n getConsole().log(key, token);\n getConsole().log('Current authState', this._authState);\n getConsole().groupEnd();\n \n // clear log options after logging\n this._logOptions = {};\n };\n\n const emitAuthStateChange = (authState) => {\n if (isSameAuthState(this._authState, authState)) {\n devMode && log('unchanged'); \n return;\n }\n this._prevAuthState = this._authState;\n this._authState = authState;\n // emit new authState object\n this._sdk.emitter.emit(EVENT_AUTH_STATE_CHANGE, { ...authState });\n devMode && log('emitted');\n };\n\n const finalPromise = (origPromise) => { \n return this._pending.updateAuthStatePromise.then(() => {\n const curPromise = this._pending.updateAuthStatePromise;\n if (curPromise && curPromise !== origPromise) {\n return finalPromise(curPromise);\n }\n return this.getAuthState();\n });\n };\n\n if (this._pending.updateAuthStatePromise) {\n if (this._pending.canceledTimes >= MAX_PROMISE_CANCEL_TIMES) {\n // stop canceling then starting a new promise\n // let existing promise finish to prevent running into loops\n devMode && log('terminated');\n return finalPromise(this._pending.updateAuthStatePromise);\n } else {\n this._pending.updateAuthStatePromise.cancel();\n }\n }\n\n /* eslint-disable complexity */\n const cancelablePromise = new PCancelable((resolve, _, onCancel) => {\n onCancel.shouldReject = false;\n onCancel(() => {\n this._pending.updateAuthStatePromise = null;\n this._pending.canceledTimes = this._pending.canceledTimes + 1;\n devMode && log('canceled');\n });\n\n const emitAndResolve = (authState) => {\n if (cancelablePromise.isCanceled) {\n resolve();\n return;\n }\n // emit event and resolve promise \n emitAuthStateChange(authState);\n resolve();\n\n // clear pending states after resolve\n this._pending = { ...DEFAULT_PENDING };\n };\n\n this._sdk.isAuthenticated()\n .then(() => {\n if (cancelablePromise.isCanceled) {\n resolve();\n return;\n }\n\n const { accessToken, idToken, refreshToken } = this._sdk.tokenManager.getTokensSync();\n const authState = {\n accessToken,\n idToken,\n refreshToken,\n isAuthenticated: !!(accessToken && idToken)\n };\n\n // Enqueue transformAuthState so that it does not run concurrently\n const promise: Promise = transformAuthState\n ? this._transformQueue.push(transformAuthState, null, this._sdk, authState) as Promise\n : Promise.resolve(authState);\n\n promise\n .then(authState => emitAndResolve(authState))\n .catch(error => emitAndResolve({\n accessToken, \n idToken, \n refreshToken,\n isAuthenticated: false, \n error\n }));\n });\n });\n /* eslint-enable complexity */\n this._pending.updateAuthStatePromise = cancelablePromise;\n\n return finalPromise(cancelablePromise);\n }\n\n subscribe(handler): void {\n this._sdk.emitter.on(EVENT_AUTH_STATE_CHANGE, handler);\n }\n\n unsubscribe(handler?): void {\n this._sdk.emitter.off(EVENT_AUTH_STATE_CHANGE, handler);\n }\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n/* global window */\nimport { omit, getLink, toQueryString } from './util';\nimport { get, post, httpRequest } from './http';\n\nfunction sessionExists(sdk) {\n return sdk.session.get()\n .then(function(res) {\n if (res.status === 'ACTIVE') {\n return true;\n }\n return false;\n })\n .catch(function() {\n return false;\n });\n}\n\nfunction getSession(sdk) { \n return get(sdk, '/api/v1/sessions/me', { withCredentials: true })\n .then(function(session) {\n var res = omit(session, '_links');\n\n res.refresh = function() {\n return post(sdk, getLink(session, 'refresh').href, {}, { withCredentials: true });\n };\n\n res.user = function() {\n return get(sdk, getLink(session, 'user').href, { withCredentials: true });\n };\n\n return res;\n })\n .catch(function() {\n // Return INACTIVE status on failure\n return {status: 'INACTIVE'};\n });\n}\n\nfunction closeSession(sdk) {\n return httpRequest(sdk, {\n url: sdk.getIssuerOrigin() + '/api/v1/sessions/me',\n method: 'DELETE',\n withCredentials: true\n });\n}\n\nfunction refreshSession(sdk) {\n return post(sdk, '/api/v1/sessions/me/lifecycle/refresh', {}, { withCredentials: true });\n}\n\nfunction setCookieAndRedirect(sdk, sessionToken, redirectUrl) {\n redirectUrl = redirectUrl || window.location.href;\n window.location.assign(sdk.getIssuerOrigin() + '/login/sessionCookieRedirect' +\n toQueryString({\n checkAccountSetupComplete: true,\n token: sessionToken,\n redirectUrl: redirectUrl\n }));\n}\n\nexport {\n sessionExists,\n getSession,\n closeSession,\n refreshSession,\n setCookieAndRedirect\n};\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { base64UrlToBuffer, bufferToBase64Url } from './base64';\nimport { ActivationData, ChallengeData, IdxAuthenticator } from '../idx/types';\n\n// Get known credentials from list of enrolled authenticators\nconst getEnrolledCredentials = (authenticatorEnrollments: IdxAuthenticator[] = []) => {\n const credentials: PublicKeyCredentialDescriptor[] = [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n credentials.push({\n type: 'public-key',\n id: base64UrlToBuffer(enrollement.credentialId),\n });\n }\n });\n return credentials;\n};\n\n// Build options for navigator.credentials.create\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/create\nexport const buildCredentialCreationOptions = (\n activationData: ActivationData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n return {\n publicKey: {\n rp: activationData.rp,\n user: {\n id: base64UrlToBuffer(activationData.user.id),\n name: activationData.user.name,\n displayName: activationData.user.displayName\n },\n challenge: base64UrlToBuffer(activationData.challenge),\n pubKeyCredParams: activationData.pubKeyCredParams,\n attestation: activationData.attestation,\n authenticatorSelection: activationData.authenticatorSelection,\n excludeCredentials: getEnrolledCredentials(authenticatorEnrollments),\n }\n } as CredentialCreationOptions;\n};\n\n\n// Build options for navigator.credentials.get\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get\nexport const buildCredentialRequestOptions = (\n challengeData: ChallengeData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n return {\n publicKey: {\n challenge: base64UrlToBuffer(challengeData.challenge),\n userVerification: challengeData.userVerification,\n allowCredentials: getEnrolledCredentials(authenticatorEnrollments),\n }\n } as CredentialRequestOptions;\n};\n\n// Build attestation for webauthn enroll\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAttestationResponse\nexport const getAttestation = (credential: PublicKeyCredential) => {\n const response = credential.response as AuthenticatorAttestationResponse;\n const id = credential.id;\n const clientData = bufferToBase64Url(response.clientDataJSON);\n const attestation = bufferToBase64Url(response.attestationObject);\n return {\n id,\n clientData,\n attestation\n };\n};\n\n// Build assertion for webauthn verification\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAssertionResponse\nexport const getAssertion = (credential: PublicKeyCredential) => {\n const response = credential.response as AuthenticatorAssertionResponse;\n const id = credential.id;\n const clientData = bufferToBase64Url(response.clientDataJSON);\n const authenticatorData = bufferToBase64Url(response.authenticatorData);\n const signatureData = bufferToBase64Url(response.signature);\n return {\n id,\n clientData,\n authenticatorData,\n signatureData\n };\n};\n","/*! js-cookie v3.0.1 | MIT */\n/* eslint-disable no-var */\nfunction assign (target) {\n for (var i = 1; i < arguments.length; i++) {\n var source = arguments[i];\n for (var key in source) {\n target[key] = source[key];\n }\n }\n return target\n}\n/* eslint-enable no-var */\n\n/* eslint-disable no-var */\nvar defaultConverter = {\n read: function (value) {\n if (value[0] === '\"') {\n value = value.slice(1, -1);\n }\n return value.replace(/(%[\\dA-F]{2})+/gi, decodeURIComponent)\n },\n write: function (value) {\n return encodeURIComponent(value).replace(\n /%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,\n decodeURIComponent\n )\n }\n};\n/* eslint-enable no-var */\n\n/* eslint-disable no-var */\n\nfunction init (converter, defaultAttributes) {\n function set (key, value, attributes) {\n if (typeof document === 'undefined') {\n return\n }\n\n attributes = assign({}, defaultAttributes, attributes);\n\n if (typeof attributes.expires === 'number') {\n attributes.expires = new Date(Date.now() + attributes.expires * 864e5);\n }\n if (attributes.expires) {\n attributes.expires = attributes.expires.toUTCString();\n }\n\n key = encodeURIComponent(key)\n .replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent)\n .replace(/[()]/g, escape);\n\n var stringifiedAttributes = '';\n for (var attributeName in attributes) {\n if (!attributes[attributeName]) {\n continue\n }\n\n stringifiedAttributes += '; ' + attributeName;\n\n if (attributes[attributeName] === true) {\n continue\n }\n\n // Considers RFC 6265 section 5.2:\n // ...\n // 3. If the remaining unparsed-attributes contains a %x3B (\";\")\n // character:\n // Consume the characters of the unparsed-attributes up to,\n // not including, the first %x3B (\";\") character.\n // ...\n stringifiedAttributes += '=' + attributes[attributeName].split(';')[0];\n }\n\n return (document.cookie =\n key + '=' + converter.write(value, key) + stringifiedAttributes)\n }\n\n function get (key) {\n if (typeof document === 'undefined' || (arguments.length && !key)) {\n return\n }\n\n // To prevent the for loop in the first place assign an empty array\n // in case there are no cookies at all.\n var cookies = document.cookie ? document.cookie.split('; ') : [];\n var jar = {};\n for (var i = 0; i < cookies.length; i++) {\n var parts = cookies[i].split('=');\n var value = parts.slice(1).join('=');\n\n try {\n var foundKey = decodeURIComponent(parts[0]);\n jar[foundKey] = converter.read(value, foundKey);\n\n if (key === foundKey) {\n break\n }\n } catch (e) {}\n }\n\n return key ? jar[key] : jar\n }\n\n return Object.create(\n {\n set: set,\n get: get,\n remove: function (key, attributes) {\n set(\n key,\n '',\n assign({}, attributes, {\n expires: -1\n })\n );\n },\n withAttributes: function (attributes) {\n return init(this.converter, assign({}, this.attributes, attributes))\n },\n withConverter: function (converter) {\n return init(assign({}, this.converter, converter), this.attributes)\n }\n },\n {\n attributes: { value: Object.freeze(defaultAttributes) },\n converter: { value: Object.freeze(converter) }\n }\n )\n}\n\nvar api = init(defaultConverter, { path: '/' });\n/* eslint-enable no-var */\n\nexport default api;\n","/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport Cookies from 'js-cookie';\nimport AuthSdkError from '../errors/AuthSdkError';\nimport {\n StorageProvider,\n StorageOptions,\n PKCEStorage,\n CookieOptions,\n SimpleStorage,\n StorageType,\n BrowserStorageUtil,\n CookieStorage\n} from '../types';\nimport { warn } from '../util';\n\n// Building this as an object allows us to mock the functions in our tests\nvar storageUtil: BrowserStorageUtil = {\n\n // These are shimmed in `OktaAuthBase.ts`\n getHttpCache(): StorageProvider {\n return null as never as StorageProvider;\n },\n\n getPKCEStorage(): PKCEStorage {\n return null as never as PKCEStorage;\n },\n\n // IE11 bug that Microsoft doesn't plan to fix\n // https://connect.microsoft.com/IE/Feedback/Details/1496040\n browserHasLocalStorage: function() {\n try {\n var storage = this.getLocalStorage();\n return this.testStorage(storage);\n } catch (e) {\n return false;\n }\n },\n\n browserHasSessionStorage: function() {\n try {\n var storage = this.getSessionStorage();\n return this.testStorage(storage);\n } catch (e) {\n return false;\n }\n },\n\n testStorageType: function(storageType: StorageType): boolean {\n var supported = false;\n switch (storageType) {\n case 'sessionStorage':\n supported = this.browserHasSessionStorage();\n break;\n case 'localStorage':\n supported = this.browserHasLocalStorage();\n break;\n case 'cookie':\n case 'memory':\n supported = true;\n break;\n default:\n supported = false;\n break;\n }\n return supported;\n },\n\n getStorageByType: function(storageType: StorageType, options?: StorageOptions): SimpleStorage {\n let storageProvider;\n switch (storageType) {\n case 'sessionStorage':\n storageProvider = this.getSessionStorage();\n break;\n case 'localStorage':\n storageProvider = this.getLocalStorage();\n break;\n case 'cookie':\n storageProvider = this.getCookieStorage(options);\n break;\n case 'memory':\n storageProvider = this.getInMemoryStorage();\n break;\n default:\n throw new AuthSdkError(`Unrecognized storage option: ${storageType}`);\n break;\n }\n return storageProvider;\n },\n\n findStorageType: function(types: StorageType[]) {\n let curType;\n let nextType;\n \n types = types.slice(); // copy array\n curType = types.shift();\n nextType = types.length ? types[0] : null;\n if (!nextType) {\n return curType;\n }\n\n if (this.testStorageType(curType)) {\n return curType;\n }\n\n // preferred type was unsupported.\n warn(`This browser doesn't support ${curType}. Switching to ${nextType}.`);\n\n // fallback to the next type. this is a recursive call\n return this.findStorageType(types);\n },\n\n getLocalStorage: function() {\n return localStorage;\n },\n\n getSessionStorage: function() {\n return sessionStorage;\n },\n\n // Provides webStorage-like interface for cookies\n getCookieStorage: function(options): CookieStorage {\n const secure = options!.secure;\n const sameSite = options!.sameSite;\n const sessionCookie = options!.sessionCookie;\n if (typeof secure === 'undefined' || typeof sameSite === 'undefined') {\n throw new AuthSdkError('getCookieStorage: \"secure\" and \"sameSite\" options must be provided');\n }\n const storage: CookieStorage = {\n getItem: this.storage.get,\n setItem: (key, value, expiresAt = '2200-01-01T00:00:00.000Z') => {\n // By defauilt, cookie shouldn't expire\n expiresAt = (sessionCookie ? null : expiresAt) as string;\n this.storage.set(key, value, expiresAt, {\n secure: secure, \n sameSite: sameSite,\n });\n },\n removeItem: (key) => {\n this.storage.delete(key);\n }\n };\n\n if (!options!.useSeparateCookies) {\n return storage;\n }\n\n // Tokens are stored separately because cookies have size limits.\n // Can only be used when storing an object value. Object properties will be saved to separate cookies.\n // Each property of the object must also be an object.\n return {\n getItem: function(key) {\n var data = storage.getItem(); // read all cookies\n var value = {};\n Object.keys(data).forEach(k => {\n if (k.indexOf(key!) === 0) { // filter out unrelated cookies\n value[k.replace(`${key}_`, '')] = JSON.parse(data[k]); // populate with cookie data\n }\n });\n return JSON.stringify(value);\n },\n setItem: function(key, value) {\n var existingValues = JSON.parse(this.getItem(key));\n value = JSON.parse(value);\n // Set key-value pairs from input to cookies\n Object.keys(value).forEach(k => {\n var storageKey = key + '_' + k;\n var valueToStore = JSON.stringify(value[k]);\n storage.setItem(storageKey, valueToStore);\n delete existingValues[k];\n });\n // Delete unmatched keys from existing cookies\n Object.keys(existingValues).forEach(k => {\n storage.removeItem(key + '_' + k);\n });\n },\n removeItem: function(key) {\n var existingValues = JSON.parse(this.getItem(key));\n Object.keys(existingValues).forEach(k => {\n storage.removeItem(key + '_' + k);\n });\n }\n };\n },\n\n // Provides an in-memory solution\n inMemoryStore: {}, // override this for a unique memory store per instance\n getInMemoryStorage: function() {\n return {\n getItem: (key) => {\n return this.inMemoryStore[key];\n },\n setItem: (key, value) => {\n this.inMemoryStore[key] = value;\n }\n };\n },\n\n testStorage: function(storage) {\n var key = 'okta-test-storage';\n try {\n storage.setItem(key, key);\n storage.removeItem(key);\n return true;\n } catch (e) {\n return false;\n }\n },\n\n storage: {\n set: function(name: string, value: string, expiresAt: string, options: CookieOptions): string {\n const { sameSite, secure } = options;\n if (typeof secure === 'undefined' || typeof sameSite === 'undefined') {\n throw new AuthSdkError('storage.set: \"secure\" and \"sameSite\" options must be provided');\n }\n var cookieOptions: CookieOptions = {\n path: options.path || '/',\n secure,\n sameSite\n };\n\n // eslint-disable-next-line no-extra-boolean-cast\n if (!!(Date.parse(expiresAt))) {\n // Expires value can be converted to a Date object.\n //\n // If the 'expiresAt' value is not provided, or the value cannot be\n // parsed as a Date object, the cookie will set as a session cookie.\n cookieOptions.expires = new Date(expiresAt);\n }\n\n Cookies.set(name, value, cookieOptions);\n return this.get(name);\n },\n\n get: function(name?: string): string {\n // return all cookies when no args is provided\n if (!arguments.length) {\n return Cookies.get();\n }\n return Cookies.get(name);\n },\n\n delete: function(name: string): string {\n return Cookies.remove(name, { path: '/' });\n }\n }\n};\n\nexport default storageUtil;\n","/**\n * returns true if the given object is a promise\n */\nexport function isPromise(obj) {\n if (obj && typeof obj.then === 'function') {\n return true;\n } else {\n return false;\n }\n}\nexport var PROMISE_RESOLVED_FALSE = Promise.resolve(false);\nexport var PROMISE_RESOLVED_TRUE = Promise.resolve(true);\nexport var PROMISE_RESOLVED_VOID = Promise.resolve();\nexport function sleep(time, resolveWith) {\n if (!time) time = 0;\n return new Promise(function (res) {\n return setTimeout(function () {\n return res(resolveWith);\n }, time);\n });\n}\nexport function randomInt(min, max) {\n return Math.floor(Math.random() * (max - min + 1) + min);\n}\n/**\n * https://stackoverflow.com/a/8084248\n */\n\nexport function randomToken() {\n return Math.random().toString(36).substring(2);\n}\nvar lastMs = 0;\nvar additional = 0;\n/**\n * returns the current time in micro-seconds,\n * WARNING: This is a pseudo-function\n * Performance.now is not reliable in webworkers, so we just make sure to never return the same time.\n * This is enough in browsers, and this function will not be used in nodejs.\n * The main reason for this hack is to ensure that BroadcastChannel behaves equal to production when it is used in fast-running unit tests.\n */\n\nexport function microSeconds() {\n var ms = new Date().getTime();\n\n if (ms === lastMs) {\n additional++;\n return ms * 1000 + additional;\n } else {\n lastMs = ms;\n additional = 0;\n return ms * 1000;\n }\n}\n/**\n * copied from the 'detect-node' npm module\n * We cannot use the module directly because it causes problems with rollup\n * @link https://github.com/iliakan/detect-node/blob/master/index.js\n */\n\nexport var isNode = Object.prototype.toString.call(typeof process !== 'undefined' ? process : 0) === '[object process]';","import { microSeconds as micro, isNode, PROMISE_RESOLVED_VOID } from '../util';\nexport var microSeconds = micro;\nexport var type = 'native';\nexport function create(channelName) {\n var state = {\n messagesCallback: null,\n bc: new BroadcastChannel(channelName),\n subFns: [] // subscriberFunctions\n\n };\n\n state.bc.onmessage = function (msg) {\n if (state.messagesCallback) {\n state.messagesCallback(msg.data);\n }\n };\n\n return state;\n}\nexport function close(channelState) {\n channelState.bc.close();\n channelState.subFns = [];\n}\nexport function postMessage(channelState, messageJson) {\n try {\n channelState.bc.postMessage(messageJson, false);\n return PROMISE_RESOLVED_VOID;\n } catch (err) {\n return Promise.reject(err);\n }\n}\nexport function onMessage(channelState, fn) {\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n /**\n * in the electron-renderer, isNode will be true even if we are in browser-context\n * so we also check if window is undefined\n */\n if (isNode && typeof window === 'undefined') return false;\n\n if (typeof BroadcastChannel === 'function') {\n if (BroadcastChannel._pubkey) {\n throw new Error('BroadcastChannel: Do not overwrite window.BroadcastChannel with this module, this is not a polyfill');\n }\n\n return true;\n } else return false;\n}\nexport function averageResponseTime() {\n return 150;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","/**\n * this is a set which automatically forgets\n * a given entry when a new entry is set and the ttl\n * of the old one is over\n */\nvar ObliviousSet = /** @class */ (function () {\n function ObliviousSet(ttl) {\n this.ttl = ttl;\n this.set = new Set();\n this.timeMap = new Map();\n }\n ObliviousSet.prototype.has = function (value) {\n return this.set.has(value);\n };\n ObliviousSet.prototype.add = function (value) {\n var _this = this;\n this.timeMap.set(value, now());\n this.set.add(value);\n /**\n * When a new value is added,\n * start the cleanup at the next tick\n * to not block the cpu for more important stuff\n * that might happen.\n */\n setTimeout(function () {\n removeTooOldValues(_this);\n }, 0);\n };\n ObliviousSet.prototype.clear = function () {\n this.set.clear();\n this.timeMap.clear();\n };\n return ObliviousSet;\n}());\nexport { ObliviousSet };\n/**\n * Removes all entries from the set\n * where the TTL has expired\n */\nexport function removeTooOldValues(obliviousSet) {\n var olderThen = now() - obliviousSet.ttl;\n var iterator = obliviousSet.set[Symbol.iterator]();\n /**\n * Because we can assume the new values are added at the bottom,\n * we start from the top and stop as soon as we reach a non-too-old value.\n */\n while (true) {\n var value = iterator.next().value;\n if (!value) {\n return; // no more elements\n }\n var time = obliviousSet.timeMap.get(value);\n if (time < olderThen) {\n obliviousSet.timeMap.delete(value);\n obliviousSet.set.delete(value);\n }\n else {\n // We reached a value that is not old enough\n return;\n }\n }\n}\nexport function now() {\n return new Date().getTime();\n}\n//# sourceMappingURL=index.js.map","export function fillOptionsWithDefaults() {\n var originalOptions = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n var options = JSON.parse(JSON.stringify(originalOptions)); // main\n\n if (typeof options.webWorkerSupport === 'undefined') options.webWorkerSupport = true; // indexed-db\n\n if (!options.idb) options.idb = {}; // after this time the messages get deleted\n\n if (!options.idb.ttl) options.idb.ttl = 1000 * 45;\n if (!options.idb.fallbackInterval) options.idb.fallbackInterval = 150; // handles abrupt db onclose events.\n\n if (originalOptions.idb && typeof originalOptions.idb.onclose === 'function') options.idb.onclose = originalOptions.idb.onclose; // localstorage\n\n if (!options.localstorage) options.localstorage = {};\n if (!options.localstorage.removeTimeout) options.localstorage.removeTimeout = 1000 * 60; // custom methods\n\n if (originalOptions.methods) options.methods = originalOptions.methods; // node\n\n if (!options.node) options.node = {};\n if (!options.node.ttl) options.node.ttl = 1000 * 60 * 2; // 2 minutes;\n\n /**\n * On linux use 'ulimit -Hn' to get the limit of open files.\n * On ubuntu this was 4096 for me, so we use half of that as maxParallelWrites default.\n */\n\n if (!options.node.maxParallelWrites) options.node.maxParallelWrites = 2048;\n if (typeof options.node.useFastPath === 'undefined') options.node.useFastPath = true;\n return options;\n}","/**\n * this method uses indexeddb to store the messages\n * There is currently no observerAPI for idb\n * @link https://github.com/w3c/IndexedDB/issues/51\n */\nimport { sleep, randomInt, randomToken, microSeconds as micro, isNode, PROMISE_RESOLVED_VOID } from '../util.js';\nexport var microSeconds = micro;\nimport { ObliviousSet } from 'oblivious-set';\nimport { fillOptionsWithDefaults } from '../options';\nvar DB_PREFIX = 'pubkey.broadcast-channel-0-';\nvar OBJECT_STORE_ID = 'messages';\nexport var type = 'idb';\nexport function getIdb() {\n if (typeof indexedDB !== 'undefined') return indexedDB;\n\n if (typeof window !== 'undefined') {\n if (typeof window.mozIndexedDB !== 'undefined') return window.mozIndexedDB;\n if (typeof window.webkitIndexedDB !== 'undefined') return window.webkitIndexedDB;\n if (typeof window.msIndexedDB !== 'undefined') return window.msIndexedDB;\n }\n\n return false;\n}\nexport function createDatabase(channelName) {\n var IndexedDB = getIdb(); // create table\n\n var dbName = DB_PREFIX + channelName;\n var openRequest = IndexedDB.open(dbName, 1);\n\n openRequest.onupgradeneeded = function (ev) {\n var db = ev.target.result;\n db.createObjectStore(OBJECT_STORE_ID, {\n keyPath: 'id',\n autoIncrement: true\n });\n };\n\n var dbPromise = new Promise(function (res, rej) {\n openRequest.onerror = function (ev) {\n return rej(ev);\n };\n\n openRequest.onsuccess = function () {\n res(openRequest.result);\n };\n });\n return dbPromise;\n}\n/**\n * writes the new message to the database\n * so other readers can find it\n */\n\nexport function writeMessage(db, readerUuid, messageJson) {\n var time = new Date().getTime();\n var writeObject = {\n uuid: readerUuid,\n time: time,\n data: messageJson\n };\n var transaction = db.transaction([OBJECT_STORE_ID], 'readwrite');\n return new Promise(function (res, rej) {\n transaction.oncomplete = function () {\n return res();\n };\n\n transaction.onerror = function (ev) {\n return rej(ev);\n };\n\n var objectStore = transaction.objectStore(OBJECT_STORE_ID);\n objectStore.add(writeObject);\n });\n}\nexport function getAllMessages(db) {\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n return new Promise(function (res) {\n objectStore.openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n ret.push(cursor.value); //alert(\"Name for SSN \" + cursor.key + \" is \" + cursor.value.name);\n\n cursor[\"continue\"]();\n } else {\n res(ret);\n }\n };\n });\n}\nexport function getMessagesHigherThan(db, lastCursorId) {\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n\n function openCursor() {\n // Occasionally Safari will fail on IDBKeyRange.bound, this\n // catches that error, having it open the cursor to the first\n // item. When it gets data it will advance to the desired key.\n try {\n var keyRangeValue = IDBKeyRange.bound(lastCursorId + 1, Infinity);\n return objectStore.openCursor(keyRangeValue);\n } catch (e) {\n return objectStore.openCursor();\n }\n }\n\n return new Promise(function (res) {\n openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n if (cursor.value.id < lastCursorId + 1) {\n cursor[\"continue\"](lastCursorId + 1);\n } else {\n ret.push(cursor.value);\n cursor[\"continue\"]();\n }\n } else {\n res(ret);\n }\n };\n });\n}\nexport function removeMessageById(db, id) {\n var request = db.transaction([OBJECT_STORE_ID], 'readwrite').objectStore(OBJECT_STORE_ID)[\"delete\"](id);\n return new Promise(function (res) {\n request.onsuccess = function () {\n return res();\n };\n });\n}\nexport function getOldMessages(db, ttl) {\n var olderThen = new Date().getTime() - ttl;\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n return new Promise(function (res) {\n objectStore.openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n var msgObk = cursor.value;\n\n if (msgObk.time < olderThen) {\n ret.push(msgObk); //alert(\"Name for SSN \" + cursor.key + \" is \" + cursor.value.name);\n\n cursor[\"continue\"]();\n } else {\n // no more old messages,\n res(ret);\n return;\n }\n } else {\n res(ret);\n }\n };\n });\n}\nexport function cleanOldMessages(db, ttl) {\n return getOldMessages(db, ttl).then(function (tooOld) {\n return Promise.all(tooOld.map(function (msgObj) {\n return removeMessageById(db, msgObj.id);\n }));\n });\n}\nexport function create(channelName, options) {\n options = fillOptionsWithDefaults(options);\n return createDatabase(channelName).then(function (db) {\n var state = {\n closed: false,\n lastCursorId: 0,\n channelName: channelName,\n options: options,\n uuid: randomToken(),\n\n /**\n * emittedMessagesIds\n * contains all messages that have been emitted before\n * @type {ObliviousSet}\n */\n eMIs: new ObliviousSet(options.idb.ttl * 2),\n // ensures we do not read messages in parrallel\n writeBlockPromise: PROMISE_RESOLVED_VOID,\n messagesCallback: null,\n readQueuePromises: [],\n db: db\n };\n /**\n * Handle abrupt closes that do not originate from db.close().\n * This could happen, for example, if the underlying storage is\n * removed or if the user clears the database in the browser's\n * history preferences.\n */\n\n db.onclose = function () {\n state.closed = true;\n if (options.idb.onclose) options.idb.onclose();\n };\n /**\n * if service-workers are used,\n * we have no 'storage'-event if they post a message,\n * therefore we also have to set an interval\n */\n\n\n _readLoop(state);\n\n return state;\n });\n}\n\nfunction _readLoop(state) {\n if (state.closed) return;\n readNewMessages(state).then(function () {\n return sleep(state.options.idb.fallbackInterval);\n }).then(function () {\n return _readLoop(state);\n });\n}\n\nfunction _filterMessage(msgObj, state) {\n if (msgObj.uuid === state.uuid) return false; // send by own\n\n if (state.eMIs.has(msgObj.id)) return false; // already emitted\n\n if (msgObj.data.time < state.messagesCallbackTime) return false; // older then onMessageCallback\n\n return true;\n}\n/**\n * reads all new messages from the database and emits them\n */\n\n\nfunction readNewMessages(state) {\n // channel already closed\n if (state.closed) return PROMISE_RESOLVED_VOID; // if no one is listening, we do not need to scan for new messages\n\n if (!state.messagesCallback) return PROMISE_RESOLVED_VOID;\n return getMessagesHigherThan(state.db, state.lastCursorId).then(function (newerMessages) {\n var useMessages = newerMessages\n /**\n * there is a bug in iOS where the msgObj can be undefined some times\n * so we filter them out\n * @link https://github.com/pubkey/broadcast-channel/issues/19\n */\n .filter(function (msgObj) {\n return !!msgObj;\n }).map(function (msgObj) {\n if (msgObj.id > state.lastCursorId) {\n state.lastCursorId = msgObj.id;\n }\n\n return msgObj;\n }).filter(function (msgObj) {\n return _filterMessage(msgObj, state);\n }).sort(function (msgObjA, msgObjB) {\n return msgObjA.time - msgObjB.time;\n }); // sort by time\n\n useMessages.forEach(function (msgObj) {\n if (state.messagesCallback) {\n state.eMIs.add(msgObj.id);\n state.messagesCallback(msgObj.data);\n }\n });\n return PROMISE_RESOLVED_VOID;\n });\n}\n\nexport function close(channelState) {\n channelState.closed = true;\n channelState.db.close();\n}\nexport function postMessage(channelState, messageJson) {\n channelState.writeBlockPromise = channelState.writeBlockPromise.then(function () {\n return writeMessage(channelState.db, channelState.uuid, messageJson);\n }).then(function () {\n if (randomInt(0, 10) === 0) {\n /* await (do not await) */\n cleanOldMessages(channelState.db, channelState.options.idb.ttl);\n }\n });\n return channelState.writeBlockPromise;\n}\nexport function onMessage(channelState, fn, time) {\n channelState.messagesCallbackTime = time;\n channelState.messagesCallback = fn;\n readNewMessages(channelState);\n}\nexport function canBeUsed() {\n if (isNode) return false;\n var idb = getIdb();\n if (!idb) return false;\n return true;\n}\nexport function averageResponseTime(options) {\n return options.idb.fallbackInterval * 2;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","/**\n * A localStorage-only method which uses localstorage and its 'storage'-event\n * This does not work inside of webworkers because they have no access to locastorage\n * This is basically implemented to support IE9 or your grandmothers toaster.\n * @link https://caniuse.com/#feat=namevalue-storage\n * @link https://caniuse.com/#feat=indexeddb\n */\nimport { ObliviousSet } from 'oblivious-set';\nimport { fillOptionsWithDefaults } from '../options';\nimport { sleep, randomToken, microSeconds as micro, isNode } from '../util';\nexport var microSeconds = micro;\nvar KEY_PREFIX = 'pubkey.broadcastChannel-';\nexport var type = 'localstorage';\n/**\n * copied from crosstab\n * @link https://github.com/tejacques/crosstab/blob/master/src/crosstab.js#L32\n */\n\nexport function getLocalStorage() {\n var localStorage;\n if (typeof window === 'undefined') return null;\n\n try {\n localStorage = window.localStorage;\n localStorage = window['ie8-eventlistener/storage'] || window.localStorage;\n } catch (e) {// New versions of Firefox throw a Security exception\n // if cookies are disabled. See\n // https://bugzilla.mozilla.org/show_bug.cgi?id=1028153\n }\n\n return localStorage;\n}\nexport function storageKey(channelName) {\n return KEY_PREFIX + channelName;\n}\n/**\n* writes the new message to the storage\n* and fires the storage-event so other readers can find it\n*/\n\nexport function postMessage(channelState, messageJson) {\n return new Promise(function (res) {\n sleep().then(function () {\n var key = storageKey(channelState.channelName);\n var writeObj = {\n token: randomToken(),\n time: new Date().getTime(),\n data: messageJson,\n uuid: channelState.uuid\n };\n var value = JSON.stringify(writeObj);\n getLocalStorage().setItem(key, value);\n /**\n * StorageEvent does not fire the 'storage' event\n * in the window that changes the state of the local storage.\n * So we fire it manually\n */\n\n var ev = document.createEvent('Event');\n ev.initEvent('storage', true, true);\n ev.key = key;\n ev.newValue = value;\n window.dispatchEvent(ev);\n res();\n });\n });\n}\nexport function addStorageEventListener(channelName, fn) {\n var key = storageKey(channelName);\n\n var listener = function listener(ev) {\n if (ev.key === key) {\n fn(JSON.parse(ev.newValue));\n }\n };\n\n window.addEventListener('storage', listener);\n return listener;\n}\nexport function removeStorageEventListener(listener) {\n window.removeEventListener('storage', listener);\n}\nexport function create(channelName, options) {\n options = fillOptionsWithDefaults(options);\n\n if (!canBeUsed()) {\n throw new Error('BroadcastChannel: localstorage cannot be used');\n }\n\n var uuid = randomToken();\n /**\n * eMIs\n * contains all messages that have been emitted before\n * @type {ObliviousSet}\n */\n\n var eMIs = new ObliviousSet(options.localstorage.removeTimeout);\n var state = {\n channelName: channelName,\n uuid: uuid,\n eMIs: eMIs // emittedMessagesIds\n\n };\n state.listener = addStorageEventListener(channelName, function (msgObj) {\n if (!state.messagesCallback) return; // no listener\n\n if (msgObj.uuid === uuid) return; // own message\n\n if (!msgObj.token || eMIs.has(msgObj.token)) return; // already emitted\n\n if (msgObj.data.time && msgObj.data.time < state.messagesCallbackTime) return; // too old\n\n eMIs.add(msgObj.token);\n state.messagesCallback(msgObj.data);\n });\n return state;\n}\nexport function close(channelState) {\n removeStorageEventListener(channelState.listener);\n}\nexport function onMessage(channelState, fn, time) {\n channelState.messagesCallbackTime = time;\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n if (isNode) return false;\n var ls = getLocalStorage();\n if (!ls) return false;\n\n try {\n var key = '__broadcastchannel_check';\n ls.setItem(key, 'works');\n ls.removeItem(key);\n } catch (e) {\n // Safari 10 in private mode will not allow write access to local\n // storage and fail with a QuotaExceededError. See\n // https://developer.mozilla.org/en-US/docs/Web/API/Web_Storage_API#Private_Browsing_Incognito_modes\n return false;\n }\n\n return true;\n}\nexport function averageResponseTime() {\n var defaultTime = 120;\n var userAgent = navigator.userAgent.toLowerCase();\n\n if (userAgent.includes('safari') && !userAgent.includes('chrome')) {\n // safari is much slower so this time is higher\n return defaultTime * 2;\n }\n\n return defaultTime;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","import { microSeconds as micro } from '../util';\nexport var microSeconds = micro;\nexport var type = 'simulate';\nvar SIMULATE_CHANNELS = new Set();\nexport function create(channelName) {\n var state = {\n name: channelName,\n messagesCallback: null\n };\n SIMULATE_CHANNELS.add(state);\n return state;\n}\nexport function close(channelState) {\n SIMULATE_CHANNELS[\"delete\"](channelState);\n}\nexport function postMessage(channelState, messageJson) {\n return new Promise(function (res) {\n return setTimeout(function () {\n var channelArray = Array.from(SIMULATE_CHANNELS);\n channelArray.filter(function (channel) {\n return channel.name === channelState.name;\n }).filter(function (channel) {\n return channel !== channelState;\n }).filter(function (channel) {\n return !!channel.messagesCallback;\n }).forEach(function (channel) {\n return channel.messagesCallback(messageJson);\n });\n res();\n }, 5);\n });\n}\nexport function onMessage(channelState, fn) {\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n return true;\n}\nexport function averageResponseTime() {\n return 5;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","import NativeMethod from './methods/native.js';\nimport IndexeDbMethod from './methods/indexed-db.js';\nimport LocalstorageMethod from './methods/localstorage.js';\nimport SimulateMethod from './methods/simulate.js'; // the line below will be removed from es5/browser builds\n\n\nimport { isNode } from './util'; // order is important\n\nvar METHODS = [NativeMethod, // fastest\nIndexeDbMethod, LocalstorageMethod];\nexport function chooseMethod(options) {\n var chooseMethods = [].concat(options.methods, METHODS).filter(Boolean); // the line below will be removed from es5/browser builds\n\n\n\n if (options.type) {\n if (options.type === 'simulate') {\n // only use simulate-method if directly chosen\n return SimulateMethod;\n }\n\n var ret = chooseMethods.find(function (m) {\n return m.type === options.type;\n });\n if (!ret) throw new Error('method-type ' + options.type + ' not found');else return ret;\n }\n /**\n * if no webworker support is needed,\n * remove idb from the list so that localstorage is been chosen\n */\n\n\n if (!options.webWorkerSupport && !isNode) {\n chooseMethods = chooseMethods.filter(function (m) {\n return m.type !== 'idb';\n });\n }\n\n var useMethod = chooseMethods.find(function (method) {\n return method.canBeUsed();\n });\n if (!useMethod) throw new Error(\"No useable method found in \" + JSON.stringify(METHODS.map(function (m) {\n return m.type;\n })));else return useMethod;\n}","import { isPromise, PROMISE_RESOLVED_FALSE, PROMISE_RESOLVED_VOID } from './util.js';\nimport { chooseMethod } from './method-chooser.js';\nimport { fillOptionsWithDefaults } from './options.js';\n/**\n * Contains all open channels,\n * used in tests to ensure everything is closed.\n */\n\nexport var OPEN_BROADCAST_CHANNELS = new Set();\nvar lastId = 0;\nexport var BroadcastChannel = function BroadcastChannel(name, options) {\n // identifier of the channel to debug stuff\n this.id = lastId++;\n OPEN_BROADCAST_CHANNELS.add(this);\n this.name = name;\n\n if (ENFORCED_OPTIONS) {\n options = ENFORCED_OPTIONS;\n }\n\n this.options = fillOptionsWithDefaults(options);\n this.method = chooseMethod(this.options); // isListening\n\n this._iL = false;\n /**\n * _onMessageListener\n * setting onmessage twice,\n * will overwrite the first listener\n */\n\n this._onML = null;\n /**\n * _addEventListeners\n */\n\n this._addEL = {\n message: [],\n internal: []\n };\n /**\n * Unsend message promises\n * where the sending is still in progress\n * @type {Set}\n */\n\n this._uMP = new Set();\n /**\n * _beforeClose\n * array of promises that will be awaited\n * before the channel is closed\n */\n\n this._befC = [];\n /**\n * _preparePromise\n */\n\n this._prepP = null;\n\n _prepareChannel(this);\n}; // STATICS\n\n/**\n * used to identify if someone overwrites\n * window.BroadcastChannel with this\n * See methods/native.js\n */\n\nBroadcastChannel._pubkey = true;\n/**\n * clears the tmp-folder if is node\n * @return {Promise} true if has run, false if not node\n */\n\nexport function clearNodeFolder(options) {\n options = fillOptionsWithDefaults(options);\n var method = chooseMethod(options);\n\n if (method.type === 'node') {\n return method.clearNodeFolder().then(function () {\n return true;\n });\n } else {\n return PROMISE_RESOLVED_FALSE;\n }\n}\n/**\n * if set, this method is enforced,\n * no mather what the options are\n */\n\nvar ENFORCED_OPTIONS;\nexport function enforceOptions(options) {\n ENFORCED_OPTIONS = options;\n} // PROTOTYPE\n\nBroadcastChannel.prototype = {\n postMessage: function postMessage(msg) {\n if (this.closed) {\n throw new Error('BroadcastChannel.postMessage(): ' + 'Cannot post message after channel has closed ' +\n /**\n * In the past when this error appeared, it was realy hard to debug.\n * So now we log the msg together with the error so it at least\n * gives some clue about where in your application this happens.\n */\n JSON.stringify(msg));\n }\n\n return _post(this, 'message', msg);\n },\n postInternal: function postInternal(msg) {\n return _post(this, 'internal', msg);\n },\n\n set onmessage(fn) {\n var time = this.method.microSeconds();\n var listenObj = {\n time: time,\n fn: fn\n };\n\n _removeListenerObject(this, 'message', this._onML);\n\n if (fn && typeof fn === 'function') {\n this._onML = listenObj;\n\n _addListenerObject(this, 'message', listenObj);\n } else {\n this._onML = null;\n }\n },\n\n addEventListener: function addEventListener(type, fn) {\n var time = this.method.microSeconds();\n var listenObj = {\n time: time,\n fn: fn\n };\n\n _addListenerObject(this, type, listenObj);\n },\n removeEventListener: function removeEventListener(type, fn) {\n var obj = this._addEL[type].find(function (obj) {\n return obj.fn === fn;\n });\n\n _removeListenerObject(this, type, obj);\n },\n close: function close() {\n var _this = this;\n\n if (this.closed) {\n return;\n }\n\n OPEN_BROADCAST_CHANNELS[\"delete\"](this);\n this.closed = true;\n var awaitPrepare = this._prepP ? this._prepP : PROMISE_RESOLVED_VOID;\n this._onML = null;\n this._addEL.message = [];\n return awaitPrepare // wait until all current sending are processed\n .then(function () {\n return Promise.all(Array.from(_this._uMP));\n }) // run before-close hooks\n .then(function () {\n return Promise.all(_this._befC.map(function (fn) {\n return fn();\n }));\n }) // close the channel\n .then(function () {\n return _this.method.close(_this._state);\n });\n },\n\n get type() {\n return this.method.type;\n },\n\n get isClosed() {\n return this.closed;\n }\n\n};\n/**\n * Post a message over the channel\n * @returns {Promise} that resolved when the message sending is done\n */\n\nfunction _post(broadcastChannel, type, msg) {\n var time = broadcastChannel.method.microSeconds();\n var msgObj = {\n time: time,\n type: type,\n data: msg\n };\n var awaitPrepare = broadcastChannel._prepP ? broadcastChannel._prepP : PROMISE_RESOLVED_VOID;\n return awaitPrepare.then(function () {\n var sendPromise = broadcastChannel.method.postMessage(broadcastChannel._state, msgObj); // add/remove to unsend messages list\n\n broadcastChannel._uMP.add(sendPromise);\n\n sendPromise[\"catch\"]().then(function () {\n return broadcastChannel._uMP[\"delete\"](sendPromise);\n });\n return sendPromise;\n });\n}\n\nfunction _prepareChannel(channel) {\n var maybePromise = channel.method.create(channel.name, channel.options);\n\n if (isPromise(maybePromise)) {\n channel._prepP = maybePromise;\n maybePromise.then(function (s) {\n // used in tests to simulate slow runtime\n\n /*if (channel.options.prepareDelay) {\n await new Promise(res => setTimeout(res, this.options.prepareDelay));\n }*/\n channel._state = s;\n });\n } else {\n channel._state = maybePromise;\n }\n}\n\nfunction _hasMessageListeners(channel) {\n if (channel._addEL.message.length > 0) return true;\n if (channel._addEL.internal.length > 0) return true;\n return false;\n}\n\nfunction _addListenerObject(channel, type, obj) {\n channel._addEL[type].push(obj);\n\n _startListening(channel);\n}\n\nfunction _removeListenerObject(channel, type, obj) {\n channel._addEL[type] = channel._addEL[type].filter(function (o) {\n return o !== obj;\n });\n\n _stopListening(channel);\n}\n\nfunction _startListening(channel) {\n if (!channel._iL && _hasMessageListeners(channel)) {\n // someone is listening, start subscribing\n var listenerFn = function listenerFn(msgObj) {\n channel._addEL[msgObj.type].forEach(function (listenerObject) {\n /**\n * Getting the current time in JavaScript has no good precision.\n * So instead of only listening to events that happend 'after' the listener\n * was added, we also listen to events that happended 100ms before it.\n * This ensures that when another process, like a WebWorker, sends events\n * we do not miss them out because their timestamp is a bit off compared to the main process.\n * Not doing this would make messages missing when we send data directly after subscribing and awaiting a response.\n * @link https://johnresig.com/blog/accuracy-of-javascript-time/\n */\n var hundredMsInMicro = 100 * 1000;\n var minMessageTime = listenerObject.time - hundredMsInMicro;\n\n if (msgObj.time >= minMessageTime) {\n listenerObject.fn(msgObj.data);\n }\n });\n };\n\n var time = channel.method.microSeconds();\n\n if (channel._prepP) {\n channel._prepP.then(function () {\n channel._iL = true;\n channel.method.onMessage(channel._state, listenerFn, time);\n });\n } else {\n channel._iL = true;\n channel.method.onMessage(channel._state, listenerFn, time);\n }\n }\n}\n\nfunction _stopListening(channel) {\n if (channel._iL && !_hasMessageListeners(channel)) {\n // noone is listening, stop subscribing\n channel._iL = false;\n var time = channel.method.microSeconds();\n channel.method.onMessage(channel._state, null, time);\n }\n}","/* global WorkerGlobalScope */\nfunction add(fn) {\n if (typeof WorkerGlobalScope === 'function' && self instanceof WorkerGlobalScope) {// this is run inside of a webworker\n } else {\n /**\n * if we are on react-native, there is no window.addEventListener\n * @link https://github.com/pubkey/unload/issues/6\n */\n if (typeof window.addEventListener !== 'function') return;\n /**\n * for normal browser-windows, we use the beforeunload-event\n */\n\n window.addEventListener('beforeunload', function () {\n fn();\n }, true);\n /**\n * for iframes, we have to use the unload-event\n * @link https://stackoverflow.com/q/47533670/3443137\n */\n\n window.addEventListener('unload', function () {\n fn();\n }, true);\n }\n /**\n * TODO add fallback for safari-mobile\n * @link https://stackoverflow.com/a/26193516/3443137\n */\n\n}\n\nexport default {\n add: add\n};","import isNode from 'detect-node';\nimport BrowserMethod from './browser.js';\nimport NodeMethod from './node.js';\nvar USE_METHOD = isNode ? NodeMethod : BrowserMethod;\nvar LISTENERS = new Set();\nvar startedListening = false;\n\nfunction startListening() {\n if (startedListening) return;\n startedListening = true;\n USE_METHOD.add(runAll);\n}\n\nexport function add(fn) {\n startListening();\n if (typeof fn !== 'function') throw new Error('Listener is no function');\n LISTENERS.add(fn);\n var addReturn = {\n remove: function remove() {\n return LISTENERS[\"delete\"](fn);\n },\n run: function run() {\n LISTENERS[\"delete\"](fn);\n return fn();\n }\n };\n return addReturn;\n}\nexport function runAll() {\n var promises = [];\n LISTENERS.forEach(function (fn) {\n promises.push(fn());\n LISTENERS[\"delete\"](fn);\n });\n return Promise.all(promises);\n}\nexport function removeAll() {\n LISTENERS.clear();\n}\nexport function getSize() {\n return LISTENERS.size;\n}","import { sleep, randomToken, PROMISE_RESOLVED_VOID, PROMISE_RESOLVED_TRUE } from './util.js';\nimport { add as unloadAdd } from 'unload';\n\nvar LeaderElection = function LeaderElection(broadcastChannel, options) {\n var _this = this;\n\n this.broadcastChannel = broadcastChannel;\n this._options = options;\n this.isLeader = false;\n this.hasLeader = false;\n this.isDead = false;\n this.token = randomToken();\n /**\n * Apply Queue,\n * used to ensure we do not run applyOnce()\n * in parallel.\n */\n\n this._aplQ = PROMISE_RESOLVED_VOID; // amount of unfinished applyOnce() calls\n\n this._aplQC = 0; // things to clean up\n\n this._unl = []; // _unloads\n\n this._lstns = []; // _listeners\n\n this._dpL = function () {}; // onduplicate listener\n\n\n this._dpLC = false; // true when onduplicate called\n\n /**\n * Even when the own instance is not applying,\n * we still listen to messages to ensure the hasLeader flag\n * is set correctly.\n */\n\n var hasLeaderListener = function hasLeaderListener(msg) {\n if (msg.context === 'leader') {\n if (msg.action === 'death') {\n _this.hasLeader = false;\n }\n\n if (msg.action === 'tell') {\n _this.hasLeader = true;\n }\n }\n };\n\n this.broadcastChannel.addEventListener('internal', hasLeaderListener);\n\n this._lstns.push(hasLeaderListener);\n};\n\nLeaderElection.prototype = {\n /**\n * Returns true if the instance is leader,\n * false if not.\n * @async\n */\n applyOnce: function applyOnce( // true if the applyOnce() call came from the fallbackInterval cycle\n isFromFallbackInterval) {\n var _this2 = this;\n\n if (this.isLeader) {\n return sleep(0, true);\n }\n\n if (this.isDead) {\n return sleep(0, false);\n }\n /**\n * Already applying more then once,\n * -> wait for the apply queue to be finished.\n */\n\n\n if (this._aplQC > 1) {\n return this._aplQ;\n }\n /**\n * Add a new apply-run\n */\n\n\n var applyRun = function applyRun() {\n /**\n * Optimization shortcuts.\n * Directly return if a previous run\n * has already elected a leader.\n */\n if (_this2.isLeader) {\n return PROMISE_RESOLVED_TRUE;\n }\n\n var stopCriteria = false;\n var stopCriteriaPromiseResolve;\n /**\n * Resolves when a stop criteria is reached.\n * Uses as a performance shortcut so we do not\n * have to await the responseTime when it is already clear\n * that the election failed.\n */\n\n var stopCriteriaPromise = new Promise(function (res) {\n stopCriteriaPromiseResolve = function stopCriteriaPromiseResolve() {\n stopCriteria = true;\n res();\n };\n });\n var recieved = [];\n\n var handleMessage = function handleMessage(msg) {\n if (msg.context === 'leader' && msg.token != _this2.token) {\n recieved.push(msg);\n\n if (msg.action === 'apply') {\n // other is applying\n if (msg.token > _this2.token) {\n /**\n * other has higher token\n * -> stop applying and let other become leader.\n */\n stopCriteriaPromiseResolve();\n }\n }\n\n if (msg.action === 'tell') {\n // other is already leader\n stopCriteriaPromiseResolve();\n _this2.hasLeader = true;\n }\n }\n };\n\n _this2.broadcastChannel.addEventListener('internal', handleMessage);\n /**\n * If the applyOnce() call came from the fallbackInterval,\n * we can assume that the election runs in the background and\n * not critical process is waiting for it.\n * When this is true, we give the other intances\n * more time to answer to messages in the election cycle.\n * This makes it less likely to elect duplicate leaders.\n * But also it takes longer which is not a problem because we anyway\n * run in the background.\n */\n\n\n var waitForAnswerTime = isFromFallbackInterval ? _this2._options.responseTime * 4 : _this2._options.responseTime;\n\n var applyPromise = _sendMessage(_this2, 'apply') // send out that this one is applying\n .then(function () {\n return Promise.race([sleep(waitForAnswerTime), stopCriteriaPromise.then(function () {\n return Promise.reject(new Error());\n })]);\n }) // send again in case another instance was just created\n .then(function () {\n return _sendMessage(_this2, 'apply');\n }) // let others time to respond\n .then(function () {\n return Promise.race([sleep(waitForAnswerTime), stopCriteriaPromise.then(function () {\n return Promise.reject(new Error());\n })]);\n })[\"catch\"](function () {}).then(function () {\n _this2.broadcastChannel.removeEventListener('internal', handleMessage);\n\n if (!stopCriteria) {\n // no stop criteria -> own is leader\n return beLeader(_this2).then(function () {\n return true;\n });\n } else {\n // other is leader\n return false;\n }\n });\n\n return applyPromise;\n };\n\n this._aplQC = this._aplQC + 1;\n this._aplQ = this._aplQ.then(function () {\n return applyRun();\n }).then(function () {\n _this2._aplQC = _this2._aplQC - 1;\n });\n return this._aplQ.then(function () {\n return _this2.isLeader;\n });\n },\n awaitLeadership: function awaitLeadership() {\n if (\n /* _awaitLeadershipPromise */\n !this._aLP) {\n this._aLP = _awaitLeadershipOnce(this);\n }\n\n return this._aLP;\n },\n\n set onduplicate(fn) {\n this._dpL = fn;\n },\n\n die: function die() {\n var _this3 = this;\n\n this._lstns.forEach(function (listener) {\n return _this3.broadcastChannel.removeEventListener('internal', listener);\n });\n\n this._lstns = [];\n\n this._unl.forEach(function (uFn) {\n return uFn.remove();\n });\n\n this._unl = [];\n\n if (this.isLeader) {\n this.hasLeader = false;\n this.isLeader = false;\n }\n\n this.isDead = true;\n return _sendMessage(this, 'death');\n }\n};\n/**\n * @param leaderElector {LeaderElector}\n */\n\nfunction _awaitLeadershipOnce(leaderElector) {\n if (leaderElector.isLeader) {\n return PROMISE_RESOLVED_VOID;\n }\n\n return new Promise(function (res) {\n var resolved = false;\n\n function finish() {\n if (resolved) {\n return;\n }\n\n resolved = true;\n leaderElector.broadcastChannel.removeEventListener('internal', whenDeathListener);\n res(true);\n } // try once now\n\n\n leaderElector.applyOnce().then(function () {\n if (leaderElector.isLeader) {\n finish();\n }\n });\n /**\n * Try on fallbackInterval\n * @recursive\n */\n\n var tryOnFallBack = function tryOnFallBack() {\n return sleep(leaderElector._options.fallbackInterval).then(function () {\n if (leaderElector.isDead || resolved) {\n return;\n }\n\n if (leaderElector.isLeader) {\n finish();\n } else {\n return leaderElector.applyOnce(true).then(function () {\n if (leaderElector.isLeader) {\n finish();\n } else {\n tryOnFallBack();\n }\n });\n }\n });\n };\n\n tryOnFallBack(); // try when other leader dies\n\n var whenDeathListener = function whenDeathListener(msg) {\n if (msg.context === 'leader' && msg.action === 'death') {\n leaderElector.hasLeader = false;\n leaderElector.applyOnce().then(function () {\n if (leaderElector.isLeader) {\n finish();\n }\n });\n }\n };\n\n leaderElector.broadcastChannel.addEventListener('internal', whenDeathListener);\n\n leaderElector._lstns.push(whenDeathListener);\n });\n}\n/**\n * sends and internal message over the broadcast-channel\n */\n\n\nfunction _sendMessage(leaderElector, action) {\n var msgJson = {\n context: 'leader',\n action: action,\n token: leaderElector.token\n };\n return leaderElector.broadcastChannel.postInternal(msgJson);\n}\n\nexport function beLeader(leaderElector) {\n leaderElector.isLeader = true;\n leaderElector.hasLeader = true;\n var unloadFn = unloadAdd(function () {\n return leaderElector.die();\n });\n\n leaderElector._unl.push(unloadFn);\n\n var isLeaderListener = function isLeaderListener(msg) {\n if (msg.context === 'leader' && msg.action === 'apply') {\n _sendMessage(leaderElector, 'tell');\n }\n\n if (msg.context === 'leader' && msg.action === 'tell' && !leaderElector._dpLC) {\n /**\n * another instance is also leader!\n * This can happen on rare events\n * like when the CPU is at 100% for long time\n * or the tabs are open very long and the browser throttles them.\n * @link https://github.com/pubkey/broadcast-channel/issues/414\n * @link https://github.com/pubkey/broadcast-channel/issues/385\n */\n leaderElector._dpLC = true;\n\n leaderElector._dpL(); // message the lib user so the app can handle the problem\n\n\n _sendMessage(leaderElector, 'tell'); // ensure other leader also knows the problem\n\n }\n };\n\n leaderElector.broadcastChannel.addEventListener('internal', isLeaderListener);\n\n leaderElector._lstns.push(isLeaderListener);\n\n return _sendMessage(leaderElector, 'tell');\n}\n\nfunction fillOptionsWithDefaults(options, channel) {\n if (!options) options = {};\n options = JSON.parse(JSON.stringify(options));\n\n if (!options.fallbackInterval) {\n options.fallbackInterval = 3000;\n }\n\n if (!options.responseTime) {\n options.responseTime = channel.method.averageResponseTime(channel.options);\n }\n\n return options;\n}\n\nexport function createLeaderElection(channel, options) {\n if (channel._leaderElector) {\n throw new Error('BroadcastChannel already has a leader-elector');\n }\n\n options = fillOptionsWithDefaults(options, channel);\n var elector = new LeaderElection(channel, options);\n\n channel._befC.push(function () {\n return elector.die();\n });\n\n channel._leaderElector = elector;\n return elector;\n}","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { TokenManager, EVENT_EXPIRED } from '../TokenManager';\nimport { AuthSdkError } from '../errors';\nimport { ServiceInterface, ServiceManagerOptions } from '../types';\nimport { isBrowser } from '../features';\n\nexport class AutoRenewService implements ServiceInterface {\n private tokenManager: TokenManager;\n private options: ServiceManagerOptions;\n private renewTimeQueue: Array;\n private started = false;\n\n constructor(tokenManager: TokenManager, options: ServiceManagerOptions = {}) {\n this.tokenManager = tokenManager;\n this.options = options;\n this.renewTimeQueue = [];\n this.onTokenExpiredHandler = this.onTokenExpiredHandler.bind(this);\n }\n \n private shouldThrottleRenew(): boolean {\n let res = false;\n this.renewTimeQueue.push(Date.now());\n if (this.renewTimeQueue.length >= 10) {\n // get and remove first item from queue\n const firstTime = this.renewTimeQueue.shift() as number;\n const lastTime = this.renewTimeQueue[this.renewTimeQueue.length - 1];\n res = (lastTime - firstTime) < 30 * 1000;\n }\n return res;\n }\n\n requiresLeadership() {\n // If tokens sync storage is enabled, handle tokens expiration only in 1 leader tab\n return !!this.options.syncStorage && isBrowser();\n }\n\n private onTokenExpiredHandler(key: string) {\n if (this.options.autoRenew) {\n if (this.shouldThrottleRenew()) {\n const error = new AuthSdkError('Too many token renew requests');\n this.tokenManager.emitError(error);\n } else {\n this.tokenManager.renew(key).catch(() => {}); // Renew errors will emit an \"error\" event \n }\n } else if (this.options.autoRemove) {\n this.tokenManager.remove(key);\n }\n }\n\n canStart() {\n return (!!this.options.autoRenew || !!this.options.autoRemove);\n }\n\n start() {\n if (this.canStart()) {\n this.stop();\n this.tokenManager.on(EVENT_EXPIRED, this.onTokenExpiredHandler);\n this.started = true;\n }\n }\n\n stop() {\n if (this.started) {\n this.tokenManager.off(EVENT_EXPIRED, this.onTokenExpiredHandler);\n this.renewTimeQueue = [];\n this.started = false;\n }\n }\n\n isStarted() {\n return this.started;\n }\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\n/* global window */\nimport { TokenManager } from '../TokenManager';\nimport { isBrowser } from '../features';\nimport { ServiceManagerOptions, ServiceInterface } from '../types';\n\n\nexport class SyncStorageService implements ServiceInterface {\n private tokenManager: TokenManager;\n private options: ServiceManagerOptions;\n private syncTimeout: unknown;\n private started = false;\n\n constructor(tokenManager: TokenManager, options: ServiceManagerOptions = {}) {\n this.tokenManager = tokenManager;\n this.options = options;\n this.storageListener = this.storageListener.bind(this);\n }\n\n // Sync authState cross multiple tabs when localStorage is used as the storageProvider\n // A StorageEvent is sent to a window when a storage area it has access to is changed \n // within the context of another document.\n // https://developer.mozilla.org/en-US/docs/Web/API/StorageEvent\n private storageListener({ key, newValue, oldValue }: StorageEvent) {\n const opts = this.tokenManager.getOptions();\n\n const handleCrossTabsStorageChange = () => {\n this.tokenManager.resetExpireEventTimeoutAll();\n this.tokenManager.emitEventsForCrossTabsStorageUpdate(newValue, oldValue);\n };\n\n // Skip if:\n // not from localStorage.clear (event.key is null)\n // event.key is not the storageKey\n // oldValue === newValue\n if (key && (key !== opts.storageKey || newValue === oldValue)) {\n return;\n }\n\n // LocalStorage cross tabs update is not synced in IE, set a 1s timer by default to read latest value\n // https://stackoverflow.com/questions/24077117/localstorage-in-win8-1-ie11-does-not-synchronize\n this.syncTimeout = setTimeout(() => handleCrossTabsStorageChange(), opts._storageEventDelay);\n }\n\n requiresLeadership() {\n return false;\n }\n\n isStarted() {\n return this.started;\n }\n\n canStart() {\n return !!this.options.syncStorage && isBrowser();\n }\n\n start() {\n if (this.canStart()) {\n this.stop();\n window.addEventListener('storage', this.storageListener);\n this.started = true;\n }\n }\n\n stop() {\n if (this.started) {\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n window.removeEventListener('storage', this.storageListener!);\n clearTimeout(this.syncTimeout as any);\n this.started = false;\n }\n }\n} ","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport {\n ServiceManagerInterface,\n ServiceInterface,\n ServiceManagerOptions\n} from './types';\nimport { OktaAuth } from '.';\nimport {\n BroadcastChannel,\n createLeaderElection,\n LeaderElector\n} from 'broadcast-channel';\nimport { AutoRenewService, SyncStorageService } from './services';\nimport { isBrowser } from './features';\n\nexport class ServiceManager implements ServiceManagerInterface {\n private sdk: OktaAuth;\n private options: ServiceManagerOptions;\n private services: Map;\n private channel?: BroadcastChannel;\n private elector?: LeaderElector;\n private started: boolean;\n\n private static knownServices = ['autoRenew', 'syncStorage'];\n\n private static defaultOptions = {\n autoRenew: true,\n autoRemove: true,\n syncStorage: true\n };\n\n constructor(sdk: OktaAuth, options: ServiceManagerOptions = {}) {\n this.sdk = sdk;\n\n // TODO: backwards compatibility, remove in next major version - OKTA-473815\n const { autoRenew, autoRemove, syncStorage } = sdk.tokenManager.getOptions();\n this.options = Object.assign({}, \n ServiceManager.defaultOptions,\n { autoRenew, autoRemove, syncStorage },\n options\n );\n\n this.started = false;\n this.services = new Map();\n this.onLeaderDuplicate = this.onLeaderDuplicate.bind(this);\n this.onLeader = this.onLeader.bind(this);\n\n ServiceManager.knownServices.forEach(name => {\n const svc = this.createService(name);\n if (svc) {\n this.services.set(name, svc);\n }\n });\n }\n\n public static canUseLeaderElection() {\n return isBrowser();\n }\n\n private onLeader() {\n if (this.started) {\n // Start services that requires leadership\n this.startServices();\n }\n }\n\n private onLeaderDuplicate() {\n }\n\n isLeader() {\n return !!this.elector?.isLeader;\n }\n\n hasLeader() {\n return this.elector?.hasLeader;\n }\n\n isLeaderRequired() {\n return [...this.services.values()].some(srv => srv.requiresLeadership());\n }\n\n start() {\n if (this.started) {\n return; // noop if services have already started\n }\n // only start election if a leader is required\n if (this.isLeaderRequired()) {\n this.startElector();\n }\n this.startServices();\n this.started = true;\n }\n \n stop() {\n this.stopElector();\n this.stopServices();\n this.started = false;\n }\n\n getService(name: string): ServiceInterface | undefined {\n return this.services.get(name);\n }\n\n private startServices() {\n for (const srv of this.services.values()) {\n const canStart = srv.canStart() && !srv.isStarted() && (srv.requiresLeadership() ? this.isLeader() : true);\n if (canStart) {\n srv.start();\n }\n }\n }\n\n private stopServices() {\n for (const srv of this.services.values()) {\n srv.stop();\n }\n }\n\n private startElector() {\n this.stopElector();\n if (ServiceManager.canUseLeaderElection()) {\n if (!this.channel) {\n const { broadcastChannelName } = this.options;\n this.channel = new BroadcastChannel(broadcastChannelName as string);\n }\n if (!this.elector) {\n this.elector = createLeaderElection(this.channel);\n this.elector.onduplicate = this.onLeaderDuplicate;\n this.elector.awaitLeadership().then(this.onLeader);\n }\n }\n }\n\n private stopElector() {\n if (this.elector) {\n this.elector?.die();\n this.elector = undefined;\n this.channel?.close();\n this.channel = undefined;\n }\n }\n\n private createService(name: string): ServiceInterface {\n const tokenManager = this.sdk.tokenManager;\n\n let service: ServiceInterface | undefined;\n switch (name) {\n case 'autoRenew':\n service = new AutoRenewService(tokenManager, {...this.options});\n break;\n case 'syncStorage':\n service = new SyncStorageService(tokenManager, {...this.options});\n break;\n default:\n throw new Error(`Unknown service ${name}`);\n }\n return service;\n }\n\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { AuthSdkError } from '../errors';\nimport { isFingerprintSupported } from '../features';\nimport {\n addListener,\n removeListener\n} from '../oidc';\nimport { FingerprintOptions, OktaAuthInterface } from '../types';\n\nexport default function fingerprint(sdk: OktaAuthInterface, options?: FingerprintOptions): Promise {\n options = options || {};\n\n if (!isFingerprintSupported()) {\n return Promise.reject(new AuthSdkError('Fingerprinting is not supported on this device'));\n }\n\n var timeout;\n var iframe;\n var listener;\n var promise = new Promise(function (resolve, reject) {\n iframe = document.createElement('iframe');\n iframe.style.display = 'none';\n\n // eslint-disable-next-line complexity\n listener = function listener(e) {\n if (!e || !e.data || e.origin !== sdk.getIssuerOrigin()) {\n return;\n }\n\n try {\n var msg = JSON.parse(e.data);\n } catch (err) {\n // iframe messages should all be parsable\n // skip not parsable messages come from other sources in same origin (browser extensions)\n // TODO: add namespace flag in okta-core to distinguish messages that come from other sources\n return;\n }\n\n if (!msg) { return; }\n if (msg.type === 'FingerprintAvailable') {\n return resolve(msg.fingerprint as string);\n }\n if (msg.type === 'FingerprintServiceReady') {\n e.source.postMessage(JSON.stringify({\n type: 'GetFingerprint'\n }), e.origin);\n }\n };\n addListener(window, 'message', listener);\n\n iframe.src = sdk.getIssuerOrigin() + '/auth/services/devicefingerprint';\n document.body.appendChild(iframe);\n\n timeout = setTimeout(function() {\n reject(new AuthSdkError('Fingerprinting timed out'));\n }, options?.timeout || 15000);\n });\n\n return promise.finally(function() {\n clearTimeout(timeout);\n removeListener(window, 'message', listener);\n if (document.body.contains(iframe)) {\n iframe.parentElement.removeChild(iframe);\n }\n }) as Promise;\n}\n","/*!\n * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport AuthSdkError from './errors/AuthSdkError';\nimport { OktaAuthOptions } from './types';\n\n// TODO: use @okta/configuration-validation (move module to this monorepo?)\n// eslint-disable-next-line complexity\nfunction assertValidConfig(args: OktaAuthOptions) {\n args = args || {};\n\n var scopes = args.scopes;\n if (scopes && !Array.isArray(scopes)) {\n throw new AuthSdkError('scopes must be a array of strings. ' +\n 'Required usage: new OktaAuth({scopes: [\"openid\", \"email\"]})');\n }\n\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n var issuer = args.issuer!;\n if (!issuer) {\n throw new AuthSdkError('No issuer passed to constructor. ' + \n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n }\n\n var isUrlRegex = new RegExp('^http?s?://.+');\n if (!isUrlRegex.test(issuer)) {\n throw new AuthSdkError('Issuer must be a valid URL. ' + \n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n }\n\n if (issuer.indexOf('-admin.') !== -1) {\n throw new AuthSdkError('Issuer URL passed to constructor contains \"-admin\" in subdomain. ' +\n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com})');\n }\n}\n\nexport {\n assertValidConfig\n};\n","/*!\n * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport crossFetch from 'cross-fetch';\nimport { FetchOptions, HttpResponse } from '../types';\n\n// content-type = application/json OR application/ion+json\nconst appJsonContentTypeRegex = /application\\/\\w*\\+?json/;\n\nfunction readData(response: Response): Promise
some html
'); //=> \"some html
\"\n * this.add('{{name}}
'); //=> \"John Doe
\"\n * this.add('{{name}}') //=> \"John Doe
\"\n * this.add('{{name}} w00t') //=> \"John Doe w00t
\"\n * }\n *\n * });\n *\n * var container - new View({name: 'John Doe'});\n */\n add: function (this: FrameworkViewClass, view, selector?, bubble?, prepend?, extraOptions?) {\n /* eslint max-statements: [2, 30], complexity: [2, 12] */\n\n var options: FrameworkViewOptions = {};\n var args = _.toArray(arguments);\n\n // This will throw if a compiled template function is passed accidentally\n if (_.isFunction(view) && (!view.prototype || !view.prototype.render)) {\n throw new Error('Type passed to add() is not a View');\n }\n\n if (_.isObject(selector)) {\n options = selector;\n selector = options.selector;\n bubble = options.bubble;\n prepend = options.prepend;\n extraOptions = options.options;\n } else if (_.isObject(bubble)) {\n options = bubble;\n bubble = options.bubble;\n prepend = options.prepend;\n extraOptions = options.options;\n }\n\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n if (_.isString(view)) {\n view = (function (template) {\n return View.extend({\n constructor: function (this: FrameworkViewClass) {\n try {\n var $el = Backbone.$(template);\n\n if ($el.length !== 1) { throw new Error('invalid Element'); }\n\n var unescapingRexExp = /&(\\w+|#x\\d+);/g;\n var elementUnescapedOuterHTMLLength = $el.prop('outerHTML').replace(unescapingRexExp, ' ').length;\n var templateUnescapedLength = template.replace(unescapingRexExp, ' ').length;\n\n if (elementUnescapedOuterHTMLLength !== templateUnescapedLength) { throw new Error('invalid Element'); }\n\n this.template = $el.html(); // Template string will be compiled by handlebars\n this.el = $el.empty()[0];\n } catch (e) { // not a valid html tag.\n this.template = template;\n }\n View.apply(this, arguments);\n }\n });\n }(view));\n }\n\n if (view.prototype && view.prototype instanceof View) {\n /* eslint new-cap: 0 */\n var viewOptions: FrameworkViewOptions = _.omit(_.extend({}, this.options, extraOptions), 'el');\n args[0] = new view(viewOptions);\n return this.add.apply(this, args);\n }\n\n // prevent dups\n if (_.isNumber(getIndex(this, view))) {\n throw new Error('Duplicate child');\n }\n\n view[PARENT] = this;\n\n // make the view responsible for adding itself to the parent:\n // * register the selector in the closure\n // * register a reference the parent in the closure\n view[ADD_TO_CONTAINER] = (function (selector) {\n return function (this: FrameworkViewClass) {\n if (selector && view[PARENT].$(selector).length !== 1) {\n throw new Error('Invalid selector: ' + selector);\n }\n var $el = selector ? this[PARENT].$(selector) : this[PARENT].$el;\n this.render();\n // we need to delegate events in case\n // the view was added and removed before\n this.delegateEvents();\n\n // this[PARENT].at(index).$el.before(this.el);\n prepend ? $el.prepend(this.el) : $el.append(this.el);\n };\n }).call(view, selector);\n\n // if flag to bubble events is set\n // proxy all child view events\n if (bubble) {\n this.listenTo(view, 'all', function (this: FrameworkViewClass) {\n this.trigger.apply(this, arguments);\n });\n }\n\n // add to the dom if `render` has been called\n if (this.rendered()) {\n view[ADD_TO_CONTAINER]();\n }\n\n // add view to child views collection\n this[CHILDREN].push(view);\n\n return this;\n },\n\n /**\n * Remove all children from container\n */\n removeChildren: function (this: FrameworkViewClass) {\n this.each(function (view: FrameworkViewClass) {\n view.remove();\n });\n return this;\n },\n\n /**\n * Removes a view from the DOM, and calls stopListening to remove any bound events that the view has listenTo'd.\n * Also removes all childern of the view if any, and removes itself from its parent view(s)\n */\n remove: function (this: FrameworkViewClass) {\n this.removeChildren();\n if (this[PARENT]) {\n this[PARENT].unregister(this);\n }\n return Backbone.View.prototype.remove.apply(this, arguments);\n },\n\n /**\n * Compile the template to function you can apply tokens on on render time.\n * Uses the underscore tempalting engine by default\n * @protected\n * @param {String} template\n * @return {Function} a compiled template\n */\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n compileTemplate: function (this: FrameworkViewClass, template) {\n /* eslint @okta/okta-ui/no-specific-methods: 0*/\n return _.template(template, undefined);\n },\n\n /**\n * Render a template with `this.model` and `this.options` as parameters\n * preferring the model over the options.\n *\n * @param {(String|Function)} template The template to build\n * @return {String} An HTML string\n * @protected\n */\n renderTemplate: function (this: FrameworkViewClass, template) {\n if (_.isString(template)) {\n // TODO: This will be deprecated at some point. Views should use precompiled templates\n template = this.compileTemplate(template);\n }\n if (_.isFunction(template)) {\n return template(this.getTemplateData());\n }\n },\n\n /**\n * The data hash passed to the compiled template\n * @return {Object}\n * @protected\n */\n getTemplateData: function (this: FrameworkViewClass) {\n var modelData = this.model && this.model.toJSON({ verbose: true }) || {};\n var options = _.omit(this.options, ['state', 'settings', 'model', 'collection']);\n return _.defaults({}, modelData, options);\n },\n\n /**\n * Renders the template to `$el` and append all children in order\n * {@link #template View.template}\n */\n render: function (this: FrameworkViewClass) {\n this.preRender();\n doRender(this);\n this.postRender();\n return this;\n },\n\n /**\n * Pre render routine. Will be called right *before* the logic in {@link #render} is executed\n * @method\n */\n preRender: noop,\n\n /**\n * Post render routine. Will be called right *after* the logic in {@link #render} is executed\n * @method\n */\n postRender: noop,\n\n /**\n * Was this instance rendered\n */\n rendered: function (this: FrameworkViewClass) {\n return this[RENDERED];\n },\n\n /**\n * Get all direct child views.\n * @returns {src/framework/View[]}\n * @example\n * var container = View.extend({\n * children: [View1, View2]\n * }).render();\n * container.getChildren() //=> [view1, view2];\n */\n getChildren: function (this: FrameworkViewClass) {\n return this.toArray();\n },\n\n /**\n * Get a child by index\n * @param {number} index\n * @returns {src/framework/View} The child view\n */\n at: function (this: FrameworkViewClass, index) {\n return this.getChildren()[index];\n },\n\n /**\n * Invokes a method on all children down the tree\n *\n * @param {String} method The method to invoke\n */\n invoke: function (this: FrameworkViewClass, methodName) {\n var args = _.toArray(arguments);\n this.each(function (child) {\n // if child has children, bubble down the tree\n if (child.size()) {\n child.invoke.apply(child, args);\n }\n // run the function on the child\n if (_.isFunction(child[methodName])) {\n child[methodName].apply(child, args.slice(1));\n }\n });\n return this;\n }\n};\n\nView = Backbone.View.extend(/** @lends src/framework/View.prototype */ proto) as typeof FrameworkViewClass;\n\n// Code borrowed from Backbone.js source\n// Underscore methods that we want to implement on the Container.\nvar methods = ['each', 'map', 'reduce', 'reduceRight', 'find', 'filter', 'reject', 'every',\n 'some', 'contains', 'toArray', 'size', 'first', 'initial', 'rest', 'last', 'without',\n 'indexOf', 'shuffle', 'lastIndexOf', 'isEmpty', 'chain', 'where', 'findWhere'];\n\n_.each(methods, function (method) {\n View.prototype[method] = function () {\n var args = _.toArray(arguments);\n args.unshift(_.toArray(this[CHILDREN]));\n return _[method].apply(_, args);\n };\n}, this);\n\n/**\n * See [_.each](http://underscorejs.org/#each)\n * @name each\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Object} [context]\n */\n/**\n * See [_.map](http://underscorejs.org/#map)\n * @name map\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Object} [context]\n */\n/**\n * See [_.reduce](http://underscorejs.org/#reduce)\n * @name reduce\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Mixed} memo\n * @param {Object} [context]\n */\n\n/**\n * See [_.reduceRight](http://underscorejs.org/#reduceRight)\n * @name reduceRight\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} iterator\n * @param {Mixed} memo\n * @param {Object} [context]\n */\n/**\n * See [_.find](http://underscorejs.org/#find)\n * @name find\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.filter](http://underscorejs.org/#filter)\n * @name filter\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.reject](http://underscorejs.org/#reject)\n * @name reject\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} predicate\n * @param {Object} [context]\n */\n/**\n * See [_.every](http://underscorejs.org/#every)\n * @name every\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} [predicate]\n * @param {Object} [context]\n */\n/**\n * See [_.some](http://underscorejs.org/#some)\n * @name some\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Function} [predicate]\n * @param {Object} [context]\n */\n/**\n * See [_.contains](http://underscorejs.org/#contains)\n * @name contains\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n */\n/**\n * See [_.toArray](http://underscorejs.org/#toArray)\n * @name toArray\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.size](http://underscorejs.org/#size)\n * @name size\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.first](http://underscorejs.org/#first)\n * @name first\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.initial](http://underscorejs.org/#initial)\n * @name initial\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.last](http://underscorejs.org/#last)\n * @name last\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [n]\n */\n/**\n * See [_.rest](http://underscorejs.org/#rest)\n * @name rest\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Number} [index]\n */\n/**\n * See [_.without](http://underscorejs.org/#without)\n * @name without\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.indexOf](http://underscorejs.org/#indexOf)\n * @name indexOf\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n * @param {Boolean} [isSorted]\n */\n/**\n * See [_.shuffle](http://underscorejs.org/#shuffle)\n * @name shuffle\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.shuffle](http://underscorejs.org/#lastIndexOf)\n * @name lastIndexOf\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Mixed} value\n * @param {Number} [fromIndex]\n */\n/**\n * See [_.isEmpty](http://underscorejs.org/#isEmpty)\n * @name isEmpty\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.chain](http://underscorejs.org/#chain)\n * @name chain\n * @memberof src/framework/View\n * @method\n * @instance\n */\n/**\n * See [_.where](http://underscorejs.org/#where)\n * @name where\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Object} properties\n */\n/**\n * See [_.findWhere](http://underscorejs.org/#findWhere)\n * @name findWhere\n * @memberof src/framework/View\n * @method\n * @instance\n * @param {Object} properties\n */\n\n/**\n * It's used for distinguishing the ambiguity from _.isFunction()\n * which returns True for both a JavaScript Class constructor function\n * and normal function. With this flag, we can tell a function is actually\n * a View Class.\n * This flag is added in order to support the type of a parameter can be\n * either a Class or pure function that returns a Class.\n */\nView.isCourageView = true;\n\nexport default View;\n","import _ from '../util/underscore-wrapper';\nimport Collection from '../framework/Collection';\nimport { _Result } from 'backbone';\n\nexport declare class BaseCollectionClass extends Collection {\n secureJSON: _ResultTHIS WILL DELETE THE GROUP!
', //=> A template or a view to add to the modal\n * save: 'Delete Group', //=> Button label\n * ok: _.bind(model.save, model) // Callback function on hitting \"ok\" button\n * cancel: 'Cancel', //=> Button label\n * cancelFn: _.bind(model.destroy, model) // Callback function on hitting \"cancel\" button\n * });\n */\n confirm: function (this: BaseViewClass, title, message?, okfn?, cancelfn?) {\n let options;\n /* eslint max-statements: [2, 12] */\n\n if (typeof title === 'object') {\n options = title;\n } else {\n // eslint-disable-next-line no-lonely-if\n if (arguments.length === 2 && _.isFunction(message)) {\n options = {\n title: 'Okta', // eslint-disable-line @okta/okta/no-unlocalized-text\n subtitle: title,\n ok: message\n };\n } else {\n options = {\n title: title,\n subtitle: message,\n ok: okfn,\n cancelFn: cancelfn\n };\n }\n }\n if (_.isFunction(options.ok)) {\n options.ok = _.bind(options.ok, this);\n }\n if (_.isFunction(options.cancelFn)) {\n options.cancelFn = _.bind(options.cancelFn, this);\n }\n this.broadcast('confirmation', options);\n return this;\n },\n\n /**\n * Shows an alert box\n *\n * The main difference between this and the native javascript `alert` method\n * Is this method is non blocking.\n *\n * @param {String} message The message\n * @example\n * view.alert('Mission complete');\n */\n alert: function (params) {\n if (_.isString(params)) {\n params = {\n subtitle: params\n };\n }\n this.confirm(\n _.extend({}, params, {\n noCancelButton: true\n })\n );\n return this;\n }\n};\n\n/**\n * See {@link src/framework/View} for more detail and examples from the base class.\n * @class module:Okta.View\n * @extends src/framework/View\n */\n\n/** @lends module:Okta.View.prototype */\n\nexport default View.extend(\n proto,\n /** @lends View.prototype */ {\n /** @method */\n decorate: function (TargetView) {\n const BaseViewView = TargetView.extend({});\n\n _.defaults(BaseViewView.prototype, proto);\n return BaseViewView;\n }\n }\n) as typeof BaseViewClass;\n","import _ from '../../util/underscore-wrapper';\nimport Time from '../../util/Time';\nimport BaseView from '../BaseView';\nimport hbs from 'handlebars-inline-precompile';\n\nfunction getOption(callout, option) {\n return _.resultCtx(callout.options, option, callout) || _.result(callout, option);\n}\n\nfunction getTopClass(callout) {\n let klass = 'infobox clearfix infobox-' + getOption(callout, 'type');\n\n switch (getOption(callout, 'size')) {\n case 'standard':\n klass += '';\n break;\n case 'slim':\n klass += ' infobox-slim';\n break;\n case 'compact':\n klass += ' infobox-compact';\n break;\n case 'large':\n klass += ' infobox-md';\n break;\n }\n if (getOption(callout, 'dismissible')) {\n klass += ' infobox-dismiss';\n }\n return klass;\n}\n\nconst events = {\n 'click .infobox-dismiss-link': function (e) {\n e.preventDefault();\n this.$el.fadeOut(Time.UNLOADING_FADE, () => {\n this.trigger('dismissed');\n this.remove();\n });\n }\n};\nconst template = hbs('\\\n {{#if dismissible}}\\\n \\\n \\\n \\\n {{/if}}\\\n \\\n {{#if title}}{{title}}
{{/if}}\\\n {{#if subtitle}}{{subtitle}}
{{/if}}\\\n {{#if bullets}}\\\n- \\\n {{#each bullets}}
- {{this}} {{/each}}\\\n
\n {{title}}\n
\n {{/if}}\n\n {{#unless hasReadMode}}\n {{#if title}}\n
\n `;\n\nconst sectionTitleTemplate = hbs`{{title}}
\n {{/if}}\n {{/unless}}\n {{#if subtitle}}\n{{subtitle}}
\n {{/if}}\n \n \n{{title}}
`;\n\nconst pointerEventsSupported = $('').css({ 'pointer-events': 'auto' })[0].style.pointerEvents === 'auto';\n\n// polyfill for `pointer-events: none;` in IE < 11\n// Logic borrowed from https://github.com/kmewhort/pointer_events_polyfill (BSD)\n\nfunction pointerEventsPolyfill(e) {\n if (!pointerEventsSupported && this.$el.hasClass('o-form-saving')) {\n const $el = $(e.currentTarget);\n\n $el.css('display', 'none');\n const underneathElem = document.elementFromPoint(e.clientX, e.clientY);\n\n $el.css('display', 'block');\n\n e.target = underneathElem;\n $(underneathElem!).trigger(e);\n\n return false;\n }\n}\n\nconst events = {\n submit: function (e) {\n e.preventDefault();\n this.__save();\n }\n};\n\n_.each(['click', 'dblclick', 'mousedown', 'mouseup'], function (event) {\n events[event + ' .o-form-input'] = pointerEventsPolyfill;\n});\n\nconst attributes = function (model) {\n model || (model = {});\n const collection = (model && model.collection) || {};\n\n return {\n method: 'POST',\n action: _.result(model, 'urlRoot') || _.result(collection, 'url') || window.location.pathname,\n 'data-se': 'o-form',\n slot: 'content'\n };\n};\n\nconst convertSavingState = function (rawSavingStateEvent, defaultEvent) {\n rawSavingStateEvent || (rawSavingStateEvent = '');\n let savingStateEvent: string[] = [];\n\n if (_.isString(rawSavingStateEvent)) {\n savingStateEvent = rawSavingStateEvent.split(' ');\n }\n savingStateEvent = _.union(savingStateEvent, defaultEvent);\n return savingStateEvent.join(' ');\n};\n\nconst getErrorSummary = function (responseJSON: ErrorResponse = {}) {\n if (Array.isArray(responseJSON.errorCauses) && responseJSON.errorCauses.length > 0) {\n //set errorSummary from first errorCause which is not field specific error\n return responseJSON.errorCauses[0].errorSummary;\n } else {\n //set errorSummary from top level errorSummary\n return responseJSON.errorSummary;\n }\n};\n/**\n * A Form utility framework\n *\n * Okta.Form is a form that operates on one flat model\n * It exposes one main factory method, {@link module:Okta.Form#addInput|addInput}, which add inputs to the form,\n * and each input operates on one field in the model, identified by the `name` field.\n *\n * See:\n * [Basic O-Form Tutorial](https://github.com/okta/courage/wiki/Basic-O-Form)\n *\n * @class module:Okta.Form\n * @extends module:Okta.View\n * @param {Object} options options hash (See {@link module:Okta.View|View})\n * @param {Object} options.model the model this form operates on\n * @param {Boolean} [options.label-top=false] position label on top of inputs\n * @param {Boolean} [options.wide=false] Use a wide input layout for all input\n */\n\n/**\n * Fired when the \"Save\" button is clicked\n * @event module:Okta.Form#save\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired after the model is successfully saved - applies when {@link module:Okta.Form#autoSave|autoSave}\n * is set to true\n * @event module:Okta.Form#saved\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the model fires an invalid event or an error event;\n * @event module:Okta.Form#error\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the form layout is likely to be resized\n * @event module:Okta.Form#resize\n * @param {module:Okta.Model} model Model used in the form\n */\n\n/**\n * Fired when the \"Cancel\" button is clicked\n * @event module:Okta.Form#cancel\n */\n\nexport default BaseView.extend(\n /** @lends module:Okta.Form.prototype */ {\n /**\n * Specifies how to validate form:\n * - In case \"local\" string provided as a value of the property,\n * the form will validate only fields added as inputs to the form;\n * - In case array is provided, the validation will be performed only for fields specified in array;\n * - In case function is provided, provided function will be used as a validation function,\n * it must return an error object with the format {fieldName: 'error text'} with as many fields as you need.\n * @name validate\n * @memberof module:Okta.Form\n * @type {String|Array|Function}\n * @instance\n */\n\n constructor: function (options) {\n /* eslint max-statements: 0, complexity: 0 */\n options || (options = {});\n this.options = options;\n\n if (options.settings) {\n this.settings = options.settings;\n } else {\n this.settings = options.settings = new SettingsModel();\n }\n\n this.id = _.uniqueId('form');\n this.tagName = 'form';\n\n _.defaults(this.events, events);\n _.defaults(this.attributes, attributes(options.model));\n\n this.__buttons = [];\n this.__errorFields = {};\n\n this.__saveModelState(options.model);\n\n const step = _.result(this, 'step');\n if (step) {\n // checking exists of `this.save` hence don't have to change to\n // `_.result(this, 'save')` which will execute the function and\n // is not the intent.\n if (!this.save) {\n const totalStep = _.result(this, 'totalSteps');\n this.save = (\n (!totalStep || step === totalStep)\n ? StringUtil.localize('oform.button.finish', 'courage')\n : StringUtil.localize('oform.button.next', 'courage')\n );\n }\n this.className = _.result(this, 'className') + ' wizard';\n }\n this.className = _.result(this, 'className') + ' o-form';\n\n this.__toolbar = this.__createToolbar(options);\n\n BaseView.call(this, options);\n\n _.each(\n _.result(this, 'inputs') || [],\n function (input) {\n // to ingore extra argumests from `each` iteratee function\n // http://underscorejs.org/#each\n this.__addLayoutItem(input);\n },\n this\n );\n\n this.add(this.__toolbar, '');\n\n // NOTES: this.model shall be initialized after calling\n // super (BaseView.call(this, options)) above.\n //\n this.listenTo(this.model, 'change:__edit__', this.__applyMode);\n\n this.listenTo(\n this.model,\n 'invalid error',\n _.throttle(\n function (model, resp, showBanner) {\n this.__showErrors(model, resp, showBanner !== false);\n },\n 100,\n { trailing: false }\n )\n );\n\n this.listenTo(this.model, 'form:resize', function () {\n this.trigger('resize');\n });\n\n this.listenTo(this.model, 'form:cancel', _.throttle(this.__cancel, 100, { trailing: false }));\n this.listenTo(this.model, 'form:previous', _.throttle(this.__previous, 100, { trailing: false }));\n\n this.__save = _.throttle(this.__save, 200, { trailing: false });\n this.listenTo(this.model, 'form:save', function () {\n this.$el.submit();\n });\n\n this.listenTo(this.model, 'sync', function () {\n if (this.model.get('__edit__')) {\n this.model.set('__edit__', false, { silent: true });\n }\n this.__saveModelState(this.model);\n this.render();\n });\n\n let hasSavingState = this.getAttribute('hasSavingState');\n\n if (this.getAttribute('autoSave')) {\n this.listenTo(this, 'save', function (model) {\n const xhr = model.save();\n\n if (xhr && xhr.done) {\n xhr.done(() => {\n this.trigger('saved', model);\n });\n }\n });\n if (_.isUndefined(hasSavingState)) {\n hasSavingState = true;\n }\n }\n\n /*\n * Attach model event listeners\n * by default, model's request event starts the form saving state,\n * error and sync event stops it\n * you can define customized saving start and stop state, like\n * customSavingState: {start: 'requestingAdditionalInfo', stop: 'retrievedAdditionalInfo'}\n * doing this does not override the default events\n */\n if (hasSavingState) {\n const customSavingState = this.getAttribute('customSavingState', {});\n\n this.listenTo(\n this.model,\n convertSavingState(customSavingState.start || '', ['request']),\n this.__setSavingState\n );\n this.listenTo(\n this.model,\n convertSavingState(customSavingState.stop || '', ['error', 'sync']),\n this.__clearSavingState\n );\n }\n },\n\n /**\n * Create the bottom button bar\n * @param {Object} options options h\n * @return {Okta.View} The toolbar\n * @private\n */\n __createToolbar: function (options) {\n const danger = this.getAttribute('danger');\n const saveBtnClassName = danger === true ? 'button-error' : 'button-primary';\n const step = _.result(this, 'step');\n const toolbar = new Toolbar(\n _.extend(\n {\n save: this.save || StringUtil.localize('oform.save', 'courage'),\n saveId: this.saveId,\n saveClassName: saveBtnClassName,\n cancel: this.cancel || StringUtil.localize('oform.cancel', 'courage'),\n noCancelButton: this.noCancelButton || false,\n noSubmitButton: this.noSubmitButton || false,\n buttonOrder: this.buttonOrder,\n hasPrevStep: step && step > 1\n },\n options || this.options\n )\n );\n\n _.each(this.__buttons, function (args) {\n toolbar.addButton.apply(toolbar, args);\n });\n\n return toolbar;\n },\n\n className: '',\n\n attributes: {},\n\n events: {},\n\n /**\n * An array of input configurations to render in the form\n * @type {Array}\n */\n inputs: [],\n\n template: null,\n\n /**\n * Does the form support read/edit toggle.\n * @type {Boolean|Function}\n * @default false\n */\n read: false,\n\n /**\n * Is the form in readOnly mode.\n * @type {Boolean|Function}\n * @default false\n */\n readOnly: false,\n\n /**\n * Should we not render the button bar\n * @type {Boolean|Function}\n * @default false\n */\n noButtonBar: false,\n\n /**\n * Should we not render a cancel button\n * @type {Boolean|Function}\n * @default false\n */\n noCancelButton: false,\n\n /**\n * Should we not render a save button\n * @type {Boolean}\n * @default false\n */\n noSubmitButton: false,\n\n /**\n * Set the order of the save, cancel and previous buttons (left to right).\n * @type {Array.}\n * @default ['previous', 'save', 'cancel']\n */\n buttonOrder: ['previous', 'save', 'cancel'],\n\n /**\n * The text on the save button\n * @type {String}\n * @default \"Save\"\n */\n save: null,\n\n /**\n * The text on the cancel button\n * @type {String}\n * @default \"Cancel\"\n */\n cancel: null,\n\n /**\n * To use button-error to style the submit button instead of button-primary.\n * @type {Boolean|Function}\n * @default false\n */\n danger: false,\n\n /**\n * A layout CSS class to add to the form\n * @type {String|Function}\n * @default \"\"\n */\n layout: '',\n\n /**\n * The step this form is in the context of a wizard\n * @type {Number}\n */\n step: undefined,\n\n /**\n * The total numbers of steps the wizard this form is a part of has\n * @type {Number}\n */\n totalSteps: undefined,\n\n /**\n * The form's title\n * @type {String|Function}\n */\n title: null,\n\n /**\n * The form's subtitle\n * @type {String|Function}\n */\n subtitle: null,\n\n /**\n * Auto-save the model when hitting save. Triggers a `saved` event when done\n * @type {Boolean}\n * @default false\n */\n autoSave: false,\n\n /**\n * Scroll to the top of the form on error\n * @type {Boolean|Function}\n * @default true\n */\n scrollOnError: true,\n\n /**\n * Show the error banner upon error\n * @type {Boolean|Function}\n * @default true\n */\n showErrors: true,\n\n /**\n * The form's scrollable area\n * @type {String}\n * @default \".o-form-content\"\n */\n resizeSelector: '.o-form-content',\n\n /**\n * Sets whether or not the form shows the saving state when\n * the model is saved. Has no effect on setSavingState and clearSavingState as those are manual calls\n * to trigger/clear the saving state.\n * @name hasSavingState\n * @memberof module:Okta.Form\n * @type {Boolean}\n * @default false\n * @instance\n */\n\n /**\n * Get an attribute value from options or instance.\n * Prefer options value over instance value\n * @param {String} name Name of the attribute\n * @param {Object} defaultValue the default value to return if the attribute is not found\n * @return {Object} The value\n */\n getAttribute: function (name, defaultValue) {\n let value = _.resultCtx(this.options, name, this);\n\n if (_.isUndefined(value)) {\n value = _.result(this, name);\n }\n return !_.isUndefined(value) ? value : defaultValue;\n },\n\n /**\n * Does this form have a \"read\" mode\n * @return {Boolean}\n */\n hasReadMode: function () {\n return !!this.getAttribute('read');\n },\n\n /**\n * Is this form in \"read only\" mode\n * @return {Boolean}\n */\n isReadOnly: function () {\n return !!this.getAttribute('readOnly');\n },\n\n /**\n * Does this form have a button bar\n * @return {Boolean}\n */\n hasButtonBar: function () {\n return !(this.getAttribute('noButtonBar') || this.isReadOnly());\n },\n\n render: function () {\n this.__readModeBar && this.__readModeBar.remove();\n if (this.hasReadMode() && !this.isReadOnly()) {\n const readModeBar = ReadModeBar.extend({\n formTitle: this.getAttribute('title', '')\n });\n\n this.__readModeBar = this.add(readModeBar, '.o-form-title-bar').last();\n }\n\n const html = template({\n layout: this.getAttribute('layout', ''),\n title: this.getAttribute('title', '', true),\n subtitle: this.getAttribute('subtitle', '', true),\n hasReadMode: this.hasReadMode()\n });\n\n this.$el.html(html);\n delete this.template;\n\n BaseView.prototype.render.apply(this, arguments);\n\n this.__applyMode();\n\n return this;\n },\n\n /**\n * Changes form UI to indicate saving. Disables all inputs and buttons. Use this function if you have set\n * hasSavingState to false on the the form\n * @private\n */\n __setSavingState: function () {\n this.model.trigger('form:set-saving-state');\n this.$el.addClass('o-form-saving');\n },\n\n /**\n * Changes form UI back to normal from the saving state. Use this function if you are have set hasSavingState\n * to false on the form\n * @private\n */\n __clearSavingState: function () {\n this.model.trigger('form:clear-saving-state');\n this.$el.removeClass('o-form-saving');\n },\n\n /**\n * Toggles the visibility of the bottom button bar\n * @private\n */\n __toggleToolbar: function () {\n this.__toolbar && this.__toolbar.remove();\n if (this.hasButtonBar() && this._editMode()) {\n this.__toolbar = this.__createToolbar();\n this.add(this.__toolbar, '');\n }\n this.trigger('resize');\n },\n\n /**\n * Cancels this form\n * - Reset the model to the previous state\n * - Clears all errors\n * - Triggers a `cancel` event\n * - Sets the model to read mode (if applicable)\n * @private\n * @fires cancel\n */\n __cancel: function () {\n const edit = this.model.get('__edit__');\n /* eslint max-statements: [2, 12] */\n\n this.model.clear({ silent: true });\n let data;\n\n if (this.model.sanitizeAttributes) {\n data = this.model.sanitizeAttributes(this.__originalModel);\n } else {\n data = _.clone(this.__originalModel);\n }\n this.model.set(data, { silent: true });\n this.trigger('cancel', this.model);\n this.model.trigger('cache:clear');\n if (edit) {\n this.model.set('__edit__', false, { silent: true });\n this.model.trigger('change:__edit__', this.model, false);\n }\n this.clearErrors();\n },\n\n /**\n * Runs {@link module:Okta.Form#validate|validate} to check the model state.\n * Triggers an \"invalid\" event on the model if validation fails\n * @returns {Boolean}\n */\n isValid: function () {\n let res;\n const self = this;\n\n function validateArray(arr) {\n return _.reduce(\n arr,\n function (memo, fieldName) {\n return _.extend(memo, self.model.validateField(fieldName));\n },\n {}\n );\n }\n\n if (_.isUndefined(this.validate)) {\n return this.model.isValid();\n } else if (_.isFunction(this.validate)) {\n res = this.validate();\n } else if (_.isArray(this.validate)) {\n res = validateArray(this.validate);\n } else if (this.validate === 'local') {\n res = validateArray(\n this.getInputs().map(function (input) {\n return input.options.name;\n })\n );\n }\n\n if (!_.isEmpty(res)) {\n this.model.trigger('invalid', this.model, res);\n return false;\n } else {\n return true;\n }\n },\n\n /**\n * A throttled function that saves the form not more than once every 100 ms\n * Basically all this method does is trigger a `save` event\n * @fires save\n * @private\n */\n __save: function () {\n this.clearErrors();\n if (this.isValid()) {\n this.trigger('save', this.model);\n }\n },\n\n /**\n * In the context of a wizard, go to previous state\n * Technically all this method does is trigger a `previous` event\n * @param {Event} e\n * @private\n */\n __previous: function () {\n this.trigger('previous', this.model);\n },\n\n /**\n * Renders the form in the correct mode based on the model.\n * @private\n */\n __applyMode: function () {\n this.clearErrors();\n this.__toggleToolbar();\n\n if (this._editMode()) {\n this.$el.addClass('o-form-edit-mode');\n this.$el.removeClass('o-form-read-mode');\n this.$('.o-form-content').removeClass('rounded-btm-4');\n this.focus();\n } else {\n this.$el.removeClass('o-form-edit-mode');\n this.$el.addClass('o-form-read-mode');\n this.$('.o-form-content').addClass('rounded-btm-4');\n }\n },\n\n /**\n * Is the form in edit mode\n * @return {Boolean}\n * @private\n */\n _editMode: function () {\n return this.model.get('__edit__') || !this.hasReadMode();\n },\n\n /**\n * Function can be overridden to alter top level error summary.\n * @param {Object} responseJSON\n *\n * @example\n * // responseJSON object\n * {\n * errorCauses: [{errorSummary: \"At least one of Proxy Status, Location, or ASN should be configured.\"}]\n * errorSummary: \"At least one of Proxy Status, Location, or ASN should be configured.\"\n * errorCode: \"E0000001\"\n * errorId: \"oaepsrTCHrhT-eIi8XTm6KWWg\"\n * errorLink: \"E0000001\"\n * errorSummary: \"Api validation failed: networkZone\"\n * }\n *\n * @method\n * @default _.identity\n */\n parseErrorMessage: _.identity,\n\n _handleErrorScroll: function () {\n if (!this.getAttribute('scrollOnError')) { return; }\n const $el = $('#' + this.id + ' .o-form-error-container');\n\n if ($el.length) {\n let $scrollContext = $el.scrollParent();\n let scrollTop;\n\n // scrollParent was almost awesome...\n // but it returns document if there are no other scrollable parents\n // document does not have offset, so here we have to replace with html, body\n // Additionally when the scroll context is html, body, $el.offset().top is fixed\n // versus when it has a different scroll context it's dynamic and requires the\n // calculation below.\n if ($scrollContext[0] as unknown as any === document) {\n $scrollContext = $('html, body');\n scrollTop = $el.offset()!.top;\n } else {\n scrollTop = $scrollContext.scrollTop()! + $el.offset()!.top - $scrollContext.offset()!.top;\n }\n\n $scrollContext.animate({ scrollTop }, 400);\n }\n },\n\n /**\n * Show an error message based on an XHR error\n * @param {Okta.BaseModel} model the model\n * @param {jqXHR} xhr The jQuery XmlHttpRequest Object\n * @private\n */\n __showErrors: function (model, resp, showBanner) {\n this.trigger('error', model);\n\n /* eslint max-statements: 0 */\n if (!this.getAttribute('showErrors')) {\n return;\n }\n\n let errorSummary;\n let responseJSON = ErrorParser.getResponseJSON(resp);\n const validationErrors = ErrorParser.parseFieldErrors(resp);\n\n // trigger events for field validation errors\n if (_.size(validationErrors!)) {\n _.each(\n validationErrors!,\n function (errors: string[], field) {\n this.model.trigger(\n 'form:field-error',\n this.__errorFields[field] || field,\n _.map(errors!, function (error) {\n return /^model\\.validation/.test(error) ? StringUtil.localize(error, 'courage') : error;\n })\n );\n },\n this\n );\n } else {\n responseJSON = this.parseErrorMessage(responseJSON);\n errorSummary = getErrorSummary(responseJSON);\n }\n\n // show the error message\n if (showBanner) {\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(ErrorBanner, '.o-form-error-container', { options: { errorSummary: errorSummary } });\n }\n\n // slide to and focus on the error message\n this._handleErrorScroll();\n\n this.model.trigger('form:resize');\n },\n\n /**\n * Clears the error banner\n * @private\n */\n clearErrors: function () {\n this.$('.o-form-error-container').removeClass('o-form-has-errors');\n this.model.trigger('form:clear-errors');\n this.model.trigger('form:resize');\n },\n\n /**\n * Toggles between edit and read mode\n */\n toggle: function () {\n this.model.set('__edit__', !this.hasReadMode() || !this.model.get('__edit__'));\n return this;\n },\n\n __addLayoutItem: function (input) {\n if (InputFactory.supports(input)) {\n this.addInput(input);\n } else {\n this.__addNonInputLayoutItem(input);\n }\n },\n\n __addNonInputLayoutItem: function (item) {\n const itemOptions = _.omit(item, 'type');\n\n switch (item.type) {\n case 'sectionTitle':\n this.addSectionTitle(item.title, _.omit(itemOptions, 'title'));\n break;\n case 'divider':\n this.addDivider(itemOptions);\n break;\n default:\n throw new Error('unknown input: ' + item.type);\n }\n },\n\n /**\n * Adds a view to the buttons tool bar\n * @param {Object} params parameterized button options\n * @param {Object} options options to send to {@link module:Okta.View#add|View.add}\n */\n addButton: function (params, options) {\n this.__toolbar && this.__toolbar.addButton(params, options);\n this.__buttons.push([params, options]);\n },\n\n /**\n * Adds a divider\n */\n addDivider: function (options) {\n this.add('');\n FormUtil.applyShowWhen(this.last(), options && options.showWhen);\n FormUtil.applyToggleWhen(this.last(), options && options.toggleWhen);\n return this;\n },\n\n /**\n * Adds section header\n * @param {String} title\n */\n addSectionTitle: function (title, options) {\n this.add(sectionTitleTemplate({ title: title }));\n FormUtil.applyShowWhen(this.last(), options && options.showWhen);\n FormUtil.applyToggleWhen(this.last(), options && options.toggleWhen);\n return this;\n },\n\n /**\n * Add a form input\n * @param {Object} options Options to describe the input\n * @param {String} options.type The input type.\n * The options are: `text`, `textarea`, `select`, `checkbox`, `radio`, `switch`,\n * `password`, `number`, `textselect`, `date`, `grouppicker`, `admingrouppicker`, `su-orgspicker`\n * `file/image`, `file/cert`, `checkboxset`, `list`, `group`, `zonepicker`\n * @param {String} options.name The name of the model field this input mutates\n * @param {String|Function} [options.label]\n * The input label text.\n * When passed as a function, will invoke the function (in the context of the {@link InputLabel})\n * on render time, and use the returned value.\n * @param {String} [options.sublabel] The input sub label text\n * @param {String} [options.tooltip] A popover tooltip to be displayed next to the label\n * @param {String} [options.placeholder] Placeholder text.\n * @param {String} [options.explain] Explanation text to render below the input\n * @param {Okta.View} [options.customExplain] A custom view to render below the input (deprecated)\n * @param {Boolean} [options.disabled=false] Make this input disabled\n * @param {Boolean} [options.wide=false] Use a wide input layout\n * @param {Boolean} [options.label-top=false] position label on top of an input\n * @param {Boolean} [options.explain-top=false] position explain on top of an input (requires label-top=true)\n * @param {Number} [options.multi] have multiple in-line inputs. useful when `input` is passed as an array of inputs\n * @param {String} [options.errorField] The API error field here that maps to this input\n * @param {Boolean} [options.inlineValidation=true] Validate input on focusout\n * @param {String} [options.ariaLabel] Used to add aria-label attribute to the input when label is not present.\n * @param {Boolean} [options.group=false] Grouping set of inputs using fieldset and legend. Mainly for radio\n * @param {Object} [options.options]\n * In the context of `radio` and `select`, a key/value set of options\n *\n * @param {Object} [options.params]\n * Widget specific parameters. Varies per input.\n *\n * @param {BaseInput|Object[]} [options.input]\n * - A custom input \"class\" or instance - preferably a **class**, so we can automagically assign the right\n * parameters when initializing it\n * - An array of input definition object literals (such as this one)\n *\n * @param {Object} [options.showWhen]\n * Setting to define when to show (or hide) the input. The input is visible by default.\n *\n * @param {Object} [options.bindings]\n * Bind a certain model attribute to a callback function, so the function is being called on render,\n * and any time this model field changes.\n * This is similar to `showWhen` but is not limited to toggling.\n *\n * @param {Function} [options.render]\n * A post-render hook that will run upon render on InputWrapper\n *\n * @param {String|Function} className A className to apply on the {@link InputWrapper}\n *\n * @param {Function} [options.initialize]\n * An `initialize` function to run when initializing the {@link InputWrapper}\n * Useful for state mutation on start time, and complex state logic\n *\n * @example\n * // showhen: the field will be visible when `advanced` is set to `true`\n * // and `mode` is set to `\"ON\"`.\n * showWhen: {\n * 'advanced': true,\n * 'mode': function (value) {\n * return value == 'ON'; // this is identical to this.model.get('mode') == 'ON'\n * }\n * }\n *\n * @example\n * // bindings\n * bindings: {\n * 'status mode': function (status, mode) {\n * var labelView = this.getLabel();\n * if (status == 1) {\n * labelView.options.label = 'Something';\n * }\n * else {\n * labelView.options.label = mode;\n * }\n * labelView.render();\n * }\n * }\n */\n addInput: function (_options: InputOptions) {\n _options = _.clone(_options);\n\n FormUtil.validateInput(_options, this.model);\n\n const inputsOptions = FormUtil.generateInputOptions(_options, this, this.__createInput).reverse();\n\n // We need a local variable here to keep track\n // as addInput can be called either directy or through the inputs array.\n if (_.isEmpty(this.getInputs().toArray())) {\n _.extend(inputsOptions[0], { validateOnlyIfDirty: true });\n }\n\n const inputs = _.map(inputsOptions, this.__createInput, this);\n\n _.each(\n inputsOptions,\n function (input) {\n if (input.errorField) {\n this.__errorFields[input.errorField] = input.name;\n }\n },\n this\n );\n\n const options: ContainerOptions = {\n inputId: _.last(inputs).options.inputId,\n input: inputs,\n multi: inputsOptions.length > 1 ? inputsOptions.length : undefined\n };\n\n _.extend(options, _.omit(this.options, 'input'), _.omit(_options, 'input'));\n\n const inputWrapper = this.__createWrapper(options);\n\n if (options.label !== false) {\n inputWrapper.add(this.__createLabel(options));\n }\n inputWrapper.add(this._createContainer(options));\n\n // TODO: there may be a bug here.\n // options.input will always be an array, so options.input.type will always be undefined\n // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n /// @ts-ignore\n inputWrapper.type = options.type || options.input.type || 'custom';\n\n const args = [inputWrapper].concat(_.rest(arguments));\n\n return this.add.apply(this, args);\n },\n\n /**\n * @private\n */\n __createInput: function (options: InputOptions) {\n options = _.pick(options, FormUtil.INPUT_OPTIONS);\n return InputFactory.create(options);\n },\n\n /**\n * @private\n */\n __createWrapper: function (options: WrapperOptions) {\n options = _.pick(options, FormUtil.WRAPPER_OPTIONS);\n return new InputWrapper(options);\n },\n\n /**\n * @private\n */\n __createLabel: function (options: LabelOptions) {\n options = _.pick(options, FormUtil.LABEL_OPTIONS);\n return new InputLabel(options);\n },\n\n /**\n * @private\n */\n _createContainer: function (options: ContainerOptions) {\n options = _.pick(options, FormUtil.CONTAINER_OPTIONS);\n return new InputContainer(options);\n },\n\n /**\n * Stores the current attributes of the model to a private property\n * @param {Okta.BaseModel} model The model\n * @private\n */\n __saveModelState: function (model) {\n this.__originalModel = $.extend(true, {}, model.attributes);\n },\n\n /**\n * @override\n * @ignore\n */\n add: function (...args) {\n // sets a default element selector\n typeof args[1] === 'undefined' && (args[1] = '> div.o-form-content > .o-form-fieldset-container');\n return BaseView.prototype.add.apply(this, args);\n },\n\n /**\n * Set the focus on the first input in the form\n */\n focus: function () {\n const first = this.getInputs().first();\n\n if (first && first.focus) {\n first.focus();\n }\n return this;\n },\n\n /**\n * Disable all inputs in the form\n * @deprecated not currently in use\n */\n disable: function () {\n this.invoke('disable');\n return this;\n },\n\n /**\n * Enable all inputs in the form\n * @deprecated not currently in use\n */\n enable: function () {\n this.invoke('enable');\n },\n\n /**\n * Set the max-height for o-form-content class container within the form if a height is provided,\n * otherwise, get its computed inner height\n * @param {Number} the height in pixel to set for class o-form-content\n * @return {Number}\n */\n contentHeight: function (height) {\n const content = this.$('.o-form-content');\n\n if (_.isNumber(height)) {\n content.css('max-height', height);\n } else {\n return content.height();\n }\n },\n\n /**\n * Get only the input children\n * @return {InputWrapper[]} An underscore wrapped array of {@link InputWrapper} instances\n */\n getInputs: function () {\n return _(\n this.filter(function (view) {\n return view instanceof InputWrapper;\n })\n );\n }\n }\n) as typeof BaseFormConstructor;\n","/* eslint-env es6 */\n/* eslint max-statements: [2, 17] */\nimport hbs from 'handlebars-inline-precompile';\nimport $ from '../../util/jquery-wrapper';\nimport _ from '../../util/underscore-wrapper';\nimport ButtonFactory from '../../util/ButtonFactory';\nimport StringUtil from '../../util/StringUtil';\nimport BaseView from '../BaseView';\nimport Callout from '../components/Callout';\n\nexport declare class BaseInputClass extends BaseView {\n defaultPlaceholder: string;\n addAriaLabel();\n addInlineValidation();\n toModelValue();\n getCalloutParent();\n showCallout(calloutConfig, dependencyResolved);\n removeCallout();\n update();\n isEditMode(): boolean;\n render(): this;\n validate();\n addModelListeners();\n val();\n focus();\n defaultValue();\n editMode();\n readMode();\n getReadModeString();\n getModelValue();\n toStringValue();\n resize(): void;\n disable(): void;\n enable(): void;\n changeType(type): void;\n getNameString(): string;\n getParams(options);\n getParam(key, defaultValue);\n getParamOrAttribute(key);\n\n _isEdited: boolean;\n __getDependencyCalloutBtn(btnConfig)\n __getCalloutMsgContainer(calloutMsg);\n __evaluateCalloutObject(dependencyResolved, calloutTitle);\n __handleDependency(result, callout);\n __showInputDependencies();\n __markError();\n __clearError();\n}\n\nconst props = {\n tagName: 'span',\n\n attributes: function () {\n return {\n 'data-se': 'o-form-input-' + this.getNameString()\n };\n },\n\n /**\n * default placeholder text when options.placeholder is not defined\n */\n defaultPlaceholder: '',\n\n constructor: function (options) {\n /* eslint complexity: [2, 7] */\n options = _.defaults(options || {}, {\n inputId: options.id || _.uniqueId('input'),\n placeholder: this.defaultPlaceholder,\n inlineValidation: true,\n validateOnlyIfDirty: false\n });\n\n delete options.id;\n\n // decorate the `enable` and `disable` and toggle the `o-form-disabled` class.\n // so we wont need to worry about this when overriding the methods\n const self = this;\n\n _.each({ enable: 'removeClass', disable: 'addClass' }, function (method, action) {\n self[action] = _.wrap(self[action], function (fn) {\n fn.apply(self, arguments);\n self.$el[method]('o-form-disabled');\n });\n });\n\n BaseView.call(this, options);\n\n if (_.result(options, 'readOnly') !== true && _.result(options, 'read') === true) {\n this.listenTo(this.model, 'change:__edit__', this.render);\n }\n\n if (_.isFunction(this.focus)) {\n this.focus = _.debounce(_.bind(this.focus, this), 50);\n }\n\n // Enable inline validation if this is not the first field in the form.\n if (!_.result(options, 'validateOnlyIfDirty')) {\n this.addInlineValidation();\n }\n\n this.addModelListeners();\n this.$el.addClass('o-form-input-name-' + this.getNameString());\n },\n\n addAriaLabel: function () {\n const ariaLabel = this.options.ariaLabel;\n\n if (ariaLabel) {\n this.$(':input').attr('aria-label', ariaLabel);\n }\n },\n\n addInlineValidation: function () {\n if (_.result(this.options, 'inlineValidation')) {\n this.$el.on('focusout', ':input', _.bind(this.validate, this));\n }\n },\n\n toModelValue: function () {\n let value = this.val();\n\n if (_.isFunction(this.to)) {\n value = this.to.call(this, value);\n }\n if (_.isFunction(this.options.to)) {\n value = this.options.to.call(this, value);\n }\n return value;\n },\n\n __getDependencyCalloutBtn: function (btnConfig) {\n const self = this;\n\n const btnOptions = _.clone(btnConfig);\n\n const originalClick = btnOptions.click || function () {};\n // add onfocus listener to re-evaluate depedency when callout button is clicked\n\n btnOptions.click = function () {\n $(window).one('focus.dependency', function () {\n self.__showInputDependencies();\n });\n originalClick.call(self);\n };\n const BaseInputCalloutBtn = BaseView.extend({\n children: [ButtonFactory.create(btnOptions)]\n });\n\n return new BaseInputCalloutBtn();\n },\n\n getCalloutParent: function () {\n return this.$('input[value=\"' + this.getModelValue() + '\"]').parent();\n },\n\n __getCalloutMsgContainer: function (calloutMsg) {\n return BaseView.extend({\n template: hbs('\\\n \\\n {{msg}}\\\n \\\n '),\n getTemplateData: function () {\n return {\n msg: calloutMsg\n };\n }\n });\n },\n\n showCallout: function (calloutConfig, dependencyResolved) {\n const callout = _.clone(calloutConfig);\n\n callout.className = 'dependency-callout';\n if (callout.btn) {\n callout.content = this.__getDependencyCalloutBtn(callout.btn);\n delete callout.btn;\n }\n const dependencyCallout = Callout.create(callout);\n\n if (!dependencyResolved) {\n dependencyCallout.add(this.__getCalloutMsgContainer(StringUtil.localize('dependency.callout.msg', 'courage')));\n }\n const calloutParent = this.getCalloutParent();\n\n calloutParent.append(dependencyCallout.render().el);\n if (callout.type === 'success') {\n _.delay(function () {\n // fade out success callout\n dependencyCallout.$el.fadeOut(800);\n }, 1000);\n }\n },\n\n removeCallout: function () {\n this.$el.find('.dependency-callout').remove();\n },\n\n __evaluateCalloutObject: function (dependencyResolved, calloutTitle) {\n let defaultCallout;\n\n if (dependencyResolved) {\n defaultCallout = {\n title: StringUtil.localize('dependency.action.completed', 'courage'),\n size: 'large',\n type: 'success'\n };\n } else {\n defaultCallout = {\n title: StringUtil.localize('dependency.action.required', 'courage', [calloutTitle]),\n size: 'large',\n type: 'warning'\n };\n }\n return defaultCallout;\n },\n\n __handleDependency: function (result, callout) {\n const self = this;\n const calloutConfig = _.isFunction(callout)\n ? callout(result)\n : _.extend({}, callout, self.__evaluateCalloutObject(result.resolved, callout.title));\n\n // remove existing callouts if any\n self.removeCallout();\n self.showCallout(calloutConfig, result.resolved);\n },\n\n __showInputDependencies: function () {\n const self = this;\n const fieldDependency = self.options.deps[self.getModelValue()];\n\n if (fieldDependency && _.isFunction(fieldDependency.func)) {\n fieldDependency\n .func()\n .done(function (data) {\n self.__handleDependency({ resolved: true, data: data }, fieldDependency.callout);\n })\n .fail(function (data) {\n self.__handleDependency({ resolved: false, data: data }, fieldDependency.callout);\n });\n } else {\n self.removeCallout();\n }\n },\n\n _isEdited: false,\n /**\n * updates the model with the input's value\n */\n update: function () {\n if (!this._isEdited && _.result(this.options, 'validateOnlyIfDirty')) {\n this._isEdited = true;\n this.addInlineValidation();\n }\n this.model.set(this.options.name, this.toModelValue());\n if (this.options.deps) {\n // check for dependencies\n this.__showInputDependencies();\n }\n },\n\n /**\n * Is the input in edit mode\n * @return {Boolean}\n */\n isEditMode: function () {\n const ret = !_.result(this.options, 'readOnly')\n && (_.result(this.options, 'read') !== true || this.model.get('__edit__') === true);\n\n return ret;\n },\n\n /**\n * Renders the input\n * @readonly\n */\n render: function () {\n this.preRender();\n const params = this.options.params;\n\n this.options.params = _.resultCtx(this.options, 'params', this);\n\n if (this.isEditMode()) {\n this.editMode();\n if (_.resultCtx(this.options, 'disabled', this)) {\n this.disable();\n } else {\n this.enable();\n }\n } else {\n this.readMode();\n }\n\n this.options.params = params;\n this.addAriaLabel();\n this.postRender();\n\n return this;\n },\n\n /**\n * checks if the current value in the model is valid for this field\n */\n validate: function () {\n if (!this.model.get('__pending__') && this.isEditMode() && _.isFunction(this.model.validateField)) {\n const validationError = this.model.validateField(this.options.name);\n\n if (validationError) {\n _.delay(\n function () {\n this.model.trigger('form:clear-error:' + this.options.name);\n this.model.trigger('invalid', this.model, validationError, false);\n }.bind(this),\n 100\n );\n }\n }\n },\n\n /**\n * Add model event listeners\n */\n addModelListeners: function () {\n this.listenTo(this.model, 'form:field-error', function (name) {\n if (this.options.name === name) {\n this.__markError();\n }\n });\n this.listenTo(this.model, 'form:clear-errors change:' + this.options.name, this.__clearError);\n this.listenTo(this.model, 'form:clear-error:' + this.options.name, this.__clearError);\n },\n\n /**\n * The value of the input\n * @return {Mixed}\n */\n val: function () {\n throw new Error('val() is an abstract method');\n },\n\n /**\n * Set focus on the input\n */\n focus: function () {\n throw new Error('focus() is an abstract method');\n },\n\n /**\n * Default value in read mode\n * When model has no value for the field\n */\n defaultValue: function () {\n return '';\n },\n\n /**\n * Renders the input in edit mode\n */\n editMode: function () {\n const options = _.extend({}, this.options, {\n value: this.getModelValue()\n });\n\n this.$el.html(this.template(options));\n this.options.multi && this.$el.removeClass('margin-r');\n return this;\n },\n\n /**\n * Renders the readable value of the input in read mode\n */\n readMode: function () {\n this.$el.text(this.getReadModeString());\n this.$el.removeClass('error-field');\n this.options.multi && this.$el.addClass('margin-r');\n return this;\n },\n\n getReadModeString: function () {\n const readModeStr = _.resultCtx(this.options, 'readModeString', this);\n\n if (readModeStr) {\n return readModeStr;\n }\n return this.toStringValue();\n },\n\n /**\n * The model value off the field associated with the input\n * @return {Mixed}\n */\n getModelValue: function () {\n let value = this.model.get(this.options.name);\n\n if (_.isFunction(this.from)) {\n value = this.from.call(this, value);\n }\n if (_.isFunction(this.options.from)) {\n value = this.options.from.call(this, value);\n }\n return value;\n },\n\n /*\n * convenience method to get the textual value from the model\n * will return the textual label rather than value in case of select/radio\n * @return {String}\n */\n toStringValue: function () {\n let value = this.getModelValue();\n\n if (this.options.options) {\n // dropdown or radio\n value = this.options.options[value];\n }\n\n if (Number.isInteger(value) || (typeof value === 'boolean')) {\n value = String(value);\n }\n return value || this.defaultValue();\n },\n\n /**\n * Triggers a form:resize event in order to tell dialogs content size has changed\n */\n resize: function () {\n this.model.trigger('form:resize');\n },\n\n /**\n * Disable the input\n */\n disable: function () {\n this.$(':input').prop('disabled', true);\n },\n\n /**\n * Enable the input\n */\n enable: function () {\n this.$(':input').prop('disabled', false);\n },\n\n /**\n * Change the type of the input field. (e.g., text <--> password)\n * @param type\n */\n changeType: function (type) {\n this.$(':input').prop('type', type);\n // Update the options so that it keeps the uptodate state\n this.options.type = type;\n },\n\n getNameString: function () {\n if (_.isArray(this.options.name)) {\n return this.options.name.join('-');\n }\n return this.options.name;\n },\n\n /**\n * Get parameters, computing _.result\n * @param {[type]} options alternative options\n * @return {Object} the params\n */\n getParams: function (options) {\n const opts = options || this.options || {};\n\n return _.clone(_.resultCtx(opts, 'params', this) || {});\n },\n\n /**\n * get a parameter from options.params, compute _.result when needed.\n * @param {String} key\n * @param {Object} defaultValue\n * @return {Object} the params\n */\n getParam: function (key, defaultValue) {\n const result = _.resultCtx(this.getParams(), key, this);\n\n return !_.isUndefined(result) ? result : defaultValue;\n },\n\n /**\n * Get a parameter from options.params or if empty, object attribute.\n *\n * @param {String} key\n * @return {Object} the param or attribute\n */\n getParamOrAttribute: function (key) {\n return this.getParam(key) || _.result(this, key);\n },\n\n __markError: function () {\n this.$el.addClass('o-form-has-errors');\n },\n\n __clearError: function () {\n this.$el.removeClass('o-form-has-errors');\n }\n};\n\n/**\n * @class BaseInput\n * @private\n * An abstract object that defines an input for {@link Okta.Form}\n *\n * BaseInputs are typically not created directly, but being passed to {@link Okta.Form#addInput}\n * @extends Okta.View\n */\nexport default BaseView.extend(props) as typeof BaseInputClass;\n","import _ from '../../../util/underscore-wrapper';\nimport BaseView from '../../BaseView';\nimport FormUtil from '../helpers/FormUtil';\n\ntype ButtonOrderEnum = 'previous' | 'save' | 'cancel';\n\nexport declare class ToolbarClass extends BaseView {\n addButton(parmas, options?): this;\n buttonOrder: ButtonOrderEnum[];\n __getButtonOrder(options): ButtonOrderEnum[];\n}\n\nconst proto = {\n className() {\n return 'o-form-button-bar';\n },\n\n buttonOrder: ['previous', 'save', 'cancel'],\n\n initialize: function (this: ToolbarClass, options) {\n const buttonConfigs = {\n previous: {\n type: 'previous'\n },\n save: {\n type: 'save',\n text: _.resultCtx(options, 'save', this),\n id: _.resultCtx(options, 'saveId', this),\n className: _.resultCtx(options, 'saveClassName', this)\n },\n cancel: {\n type: 'cancel',\n text: _.resultCtx(options, 'cancel', this)\n }\n };\n this.__getButtonOrder(options).forEach((buttonName) => {\n this.addButton(buttonConfigs[buttonName]);\n });\n },\n\n /**\n * Adds a buttomn to the toolbar\n * @param {Object} params button parameters\n * @param {Object} options {@link Okta.View#add} options\n */\n addButton: function (this: ToolbarClass, params, options?) {\n return this.add(FormUtil.createButton(params), options);\n },\n\n __getButtonOrder: function (this: ToolbarClass, options) {\n const buttonOrder = _.resultCtx(options, 'buttonOrder', this, this.buttonOrder);\n const buttonsToSkip = [];\n if (options.noSubmitButton) {\n buttonsToSkip.push('save');\n }\n if (options.noCancelButton) {\n buttonsToSkip.push('cancel');\n }\n if (!options.hasPrevStep) {\n buttonsToSkip.push('previous');\n }\n return _.without(buttonOrder, ...buttonsToSkip);\n }\n};\n\nexport default BaseView.extend(proto) as typeof ToolbarClass;\n","import _ from '../../../util/underscore-wrapper';\nimport StringUtil from '../../../util/StringUtil';\n\nconst FIELD_REGEX = /^([\\S]+): (.+)$/;\n\nexport interface ErrorCause {\n errorSummary?: string;\n property?: string;\n reason?: string;\n location?: string;\n}\n\nexport interface ErrorResponse extends ErrorCause {\n errorCauses?: ErrorCause[];\n}\n\nexport default {\n /**\n * Helper function that returns the json output of an xhr objext\n * @param {jqXhr} xhr\n * @return {Object}\n */\n getResponseJSON: function (xhr): ErrorResponse | undefined {\n try {\n return xhr.responseJSON || JSON.parse(xhr.responseText);\n } catch (e) {\n // ignore error\n }\n },\n\n /**\n * Parses an error summary to extract a field name and an error message\n * @param {String} errorSummary The raw error summary\n * @return {String[]} An array with two members: [field name, error message]\n */\n parseErrorSummary: function (errorSummary: string): [string, string] | undefined {\n const matches = errorSummary.match(FIELD_REGEX);\n // error format is: `fieldName: The field cannot be left blank`\n\n if (matches) {\n return [matches[1], matches[2]];\n }\n },\n\n /**\n * Parses an error cause object to extract a field name from property attribute\n * and an error message form errorSummary attribute. It looks to see if there is\n * a custom override/translation for the erorrCause.reason before using the errorSummary\n * @param {Object} errorCause object\n * @return {String[]} An array with two members: [field name, error message]\n */\n parseErrorCauseObject: function (errorCause: ErrorCause): [string, string] | undefined {\n if (errorCause.property && errorCause.errorSummary) {\n const localizedMsg = StringUtil.localize(errorCause.reason);\n const apiMsg = errorCause.errorSummary;\n const field = errorCause.property;\n const errorMessage = localizedMsg.indexOf('L10N_ERROR[') === -1 ? localizedMsg : apiMsg;\n\n return [field, errorMessage];\n }\n },\n\n parseErrors: function (resp) {\n const responseJSON: ErrorResponse = this.getResponseJSON(resp);\n\n return _.map((responseJSON && responseJSON.errorCauses) || [], function (errorCause) {\n return ('' + errorCause.errorSummary).replace(FIELD_REGEX, '$2');\n });\n },\n\n /**\n * Parses the response for errors\n * Returns a map of field names > array or error messages\n * Example:\n * ```javascript\n * {\n * url: ['The field cannot be left blank', 'The field has to be a valid URI'],\n * name: ['The field cannot be left blank']\n * }\n * ```\n * @param {Object} resp\n * @return {Object}\n */\n parseFieldErrors: function (resp) {\n const responseJSON: ErrorResponse = this.getResponseJSON(resp);\n const errors = {};\n\n // xhr error object\n if (responseJSON) {\n /* eslint complexity: [2, 9] */\n _.each(\n responseJSON.errorCauses || [],\n function (cause) {\n let res: string[] = [];\n\n if (cause.property && cause.errorSummary) {\n res = this.parseErrorCauseObject(cause);\n } else if (cause.location && cause.errorSummary) {\n // To handle new api error format for field level errors.\n // Ignoring the reason attribute as the translation happens in the API layer and not in the client any more.\n res = [cause.location, cause.errorSummary];\n } else {\n res = this.parseErrorSummary((cause && cause.errorSummary) || '');\n }\n if (res) {\n const fieldName = res[0];\n const message = res[1];\n\n errors[fieldName] || (errors[fieldName] = []);\n errors[fieldName].push(message);\n }\n },\n this\n );\n }\n // validation key/value object\n else if (_.isObject(resp) && _.size(resp)) {\n _.each(resp, function (msg, field) {\n errors[field] = [msg];\n });\n }\n return _.size(errors) ? errors : undefined;\n }\n};\n","/* eslint max-params: [2, 6] */\nimport _ from '../../../util/underscore-wrapper';\nimport Keys from '../../../util/Keys';\nimport Logger from '../../../util/Logger';\nimport StringUtil from '../../../util/StringUtil';\nimport ViewUtil from '../../../util/ViewUtil';\nimport BaseView from '../../BaseView';\nimport { InputOptions } from '../types';\n\nconst LABEL_OPTIONS = ['model', 'id', 'inputId', 'type', 'label', 'sublabel', 'tooltip', 'name', 'group'];\n\nconst CONTAINER_OPTIONS = [\n 'wide',\n 'multi',\n 'input',\n 'label-top',\n 'explain',\n 'explain-top',\n 'customExplain',\n 'model',\n 'name',\n 'type',\n 'autoRender',\n 'multirowError',\n];\n\nconst WRAPPER_OPTIONS = [\n 'model',\n 'name',\n 'label-top',\n 'readOnly',\n 'events',\n 'initialize',\n 'showWhen',\n 'bindings',\n 'render',\n 'className',\n 'data-se',\n 'toggleWhen',\n 'group'\n];\n\nconst INPUT_OPTIONS = [\n 'model',\n 'name',\n 'inputId',\n 'type', // base options\n 'input', // custom input\n 'placeholder',\n 'label', // labels\n 'readOnly',\n 'read',\n 'disabled',\n 'readModeString', // modes\n 'options', // select/radio\n 'deps', // used to specify inputs that have dependencies and show a callout to user on select\n 'from',\n 'to', // model transformers,\n 'autoRender', // model attributes change event to trigger rerendering of the input\n 'inlineValidation', // control inline validating against the model on focus lost\n 'validateOnlyIfDirty', // check if field has been interacted with and then validate\n 'ariaLabel', // 508 compliance for inputs that do not have label associated with them\n 'params',\n 'autoComplete', // autocomplete attribute\n];\n\nconst OTHER_OPTIONS = [\n 'errorField' // widgets params - for input specific widgets\n]; \n\nconst ALL_OPTIONS = _.uniq(_.union(LABEL_OPTIONS, CONTAINER_OPTIONS, WRAPPER_OPTIONS, INPUT_OPTIONS, OTHER_OPTIONS));\n\nconst SAVE_BUTTON_PHASES = [\n '• ',\n '• • ',\n '• • • ',\n '• • • •',\n ' • • •',\n ' • •',\n ' •',\n ' ',\n ' ',\n ' ',\n];\n\nfunction decorateDoWhen(doWhen) {\n if (doWhen && !doWhen['__edit__']) {\n return _.extend({ __edit__: _.constant(true) }, doWhen);\n }\n}\n\nexport interface CreateButtonOptions {\n action?: (...any) => any;\n id?: string;\n className?: string;\n text?: string;\n type?: string;\n}\n\nfunction createButton(options: CreateButtonOptions) {\n options = _.pick(options || {}, 'action', 'id', 'className', 'text', 'type');\n\n let timeoutId;\n let intervalId;\n let phaseCount;\n\n return BaseView.extend({\n tagName: 'input',\n className: 'button',\n events: {\n click: function () {\n if (options.action && !this.disabled()) {\n options.action.call(this);\n }\n },\n keyup: function (e) {\n if (Keys.isEnter(e) && options.action && !this.disabled()) {\n options.action.call(this);\n }\n }\n },\n\n disabled: function () {\n return this.$el.prop('disabled') === true;\n },\n\n disable: function () {\n this.$el.prop('disabled', true);\n this.$el.addClass('btn-disabled');\n },\n\n enable: function () {\n this.$el.prop('disabled', false);\n this.$el.removeClass('btn-disabled');\n },\n\n initialize: function () {\n const self = this;\n\n this.$el.attr('type', options.type === 'save' ? 'submit' : 'button');\n this.$el.val(options.text);\n if (options.id) {\n this.$el.attr('id', options.id);\n }\n if (options.className) {\n this.$el.addClass(options.className);\n }\n if (options.type) {\n this.$el.attr('data-type', options.type);\n }\n\n this.$el.mousedown(function () {\n self.model.set('__pending__', true);\n });\n\n this.$el.mouseup(function () {\n self.model.set('__pending__', false);\n });\n\n this.listenTo(this.model, 'form:set-saving-state', function () {\n this.disable();\n if (options.type === 'save') {\n timeoutId = setTimeout(_.bind(this.__changeSaveText, this), 1000);\n }\n });\n this.listenTo(this.model, 'form:clear-saving-state', function () {\n this.enable();\n if (options.type === 'save') {\n clearTimeout(timeoutId);\n clearInterval(intervalId);\n this.$el.val(options.text);\n }\n });\n },\n\n __changeSaveText: function () {\n phaseCount = 0;\n intervalId = setInterval(_.bind(this.__showLoadingText, this), 200);\n },\n\n __showLoadingText: function () {\n this.$el.val(SAVE_BUTTON_PHASES[phaseCount++ % SAVE_BUTTON_PHASES.length]);\n }\n });\n}\n\nfunction validateInput(options: InputOptions, model) {\n /* eslint max-statements: 0, complexity: 0 */\n\n options || (options = {});\n\n if (options.type === 'label') {\n if (!options.label) {\n Logger.warn('A label input must have a \"label\" parameter', options);\n }\n return;\n }\n\n if (options.type === 'button') {\n if (!options.title && !options.icon) {\n Logger.warn('A button input must have a \"title\" and/or an \"icon\" parameter', options);\n }\n if (!options.click && !options.href) {\n Logger.warn('A button input must have a \"click\" and/or an \"href\" parameter', options);\n }\n return;\n }\n\n if (!options.name && !options.input) {\n Logger.warn('Missing \"name\" or \"input\" parameters', options);\n }\n\n if (_.isArray(options.name) && _.isArray(options.input)) {\n throw new Error('Not allowed to have both \"name\" and \"input\" defined as array.');\n }\n\n if (options.type !== 'list' && options.name && model && model.allows) {\n let names: string[] = [];\n\n if (_.isArray(options.name)) {\n names = options.name;\n } else {\n names.push(options.name);\n }\n _.each(names, function (name) {\n if (!model.allows(name)) {\n throw new Error('field not allowed: ' + options.name);\n }\n });\n }\n\n if (_.isArray(options.input) && options.type !== 'list') {\n _.each(options.input, function (input) {\n validateInput(input, model);\n });\n }\n\n const keys = _.keys(options);\n\n const intersection = _.intersection(keys, ALL_OPTIONS);\n\n if (_.size(intersection) !== _.size(options)) {\n const fields = _.clone(ALL_OPTIONS);\n Logger.warn('Invalid input parameters', _.without(keys, ...fields), options);\n }\n}\n\nfunction generateInputOptions(options: InputOptions, form, createFn): InputOptions[] {\n options = _.clone(options);\n\n if (_.contains(['list', 'group'], options.type)) {\n options.params = _.defaults(\n {\n create: createFn,\n inputs: _.map(_.isArray(options.input) ? options.input : [options.input], function (input: InputOptions) {\n return _.first(generateInputOptions(input, form, createFn));\n })\n },\n options.params || {}\n );\n delete options.input;\n }\n\n const inputs: InputOptions[] = _.isArray(options.input) ? _.clone(options.input) : [options];\n\n return _.map(inputs, function (input) {\n const target: InputOptions = _.defaults(\n { model: form.model }, \n input,\n _.omit(options, 'input', 'inputs'),\n form.options, \n {\n id: _.uniqueId('input'),\n readOnly: form.isReadOnly(),\n read: form.hasReadMode()\n }\n );\n\n if (form.isReadOnly()) {\n target.read = target.readOnly = true;\n }\n return target;\n });\n}\n\nexport interface CreateReadFormButtonOptions {\n type: string;\n formTitle: string;\n className: string;\n}\n\nexport default {\n LABEL_OPTIONS: LABEL_OPTIONS,\n CONTAINER_OPTIONS: CONTAINER_OPTIONS,\n WRAPPER_OPTIONS: WRAPPER_OPTIONS,\n INPUT_OPTIONS: INPUT_OPTIONS,\n\n generateInputOptions: generateInputOptions,\n\n changeEventString: function (fieldNames) {\n return 'change:' + fieldNames.join(' change:');\n },\n\n createReadFormButton: function (options: CreateReadFormButtonOptions) {\n let action;\n let text;\n let ariaLabel;\n\n if (options.type === 'cancel') {\n text = ariaLabel = StringUtil.localize('oform.cancel', 'courage');\n action = function () {\n this.model.trigger('form:cancel');\n };\n } else {\n text = StringUtil.localize('oform.edit', 'courage');\n ariaLabel = text + ' ' + options.formTitle;\n action = function () {\n this.model.set('__edit__', true);\n };\n }\n\n return BaseView.extend({\n tagName: 'a',\n className: options.className,\n attributes: {\n href: '#',\n 'aria-label': ariaLabel\n },\n // TODO: refactor to enforce precompiled templates OKTA-309852\n // eslint-disable-next-line @okta/okta-ui/no-bare-templates\n template: function () {\n return _.escape(text);\n },\n events: {\n click: function (e) {\n e.preventDefault();\n action.call(this);\n }\n }\n });\n },\n\n createButton: function (options: CreateButtonOptions) {\n options = _.clone(options);\n switch (options.type) {\n case 'save':\n _.defaults(options, { className: 'button-primary' });\n break;\n case 'cancel':\n _.defaults(options, {\n className: 'button-clear', \n text: StringUtil.localize('oform.cancel', 'courage'),\n action: function () {\n this.model.trigger('form:cancel');\n }\n });\n break;\n case 'previous':\n _.defaults(options, {\n text: StringUtil.localize('oform.previous', 'courage'),\n action: function () {\n this.model.trigger('form:previous');\n }\n });\n break;\n default:\n break;\n }\n return createButton(options);\n },\n\n validateInput: validateInput,\n\n /**\n * Applies a show-when logic on a view instance.\n * The show-when is a map of a model field name -> a boolean or a function that returns a boolean.\n * The view will toggle based on the field value.\n *\n * @param {Okta.View} view a view instance that has a this.model attached to it\n * @param {Object} showWhen\n */\n applyShowWhen: function (view, showWhen) {\n const toggleAndResize = function (bool) {\n return function () {\n // The `toggle` is here since an event may be triggered before the el is in the DOM\n // and in that case slide events may not function as expected.\n view.$el.toggle(bool);\n view.model.trigger('form:resize');\n };\n };\n\n ViewUtil.applyDoWhen(view, decorateDoWhen(showWhen), function (bool, options) {\n if (!options.animate) {\n view.$el.toggle(bool);\n } else {\n view.$el['slide' + (bool ? 'Down' : 'Up')](200, toggleAndResize(bool));\n }\n });\n },\n\n applyToggleWhen: function (view, toggleWhen) {\n ViewUtil.applyDoWhen(view, decorateDoWhen(toggleWhen), function (bool, options) {\n view.$el.toggle(bool);\n view.model.trigger('form:resize');\n if (options.animate) {\n view.render();\n }\n });\n }\n};\n","import _ from '../../../util/underscore-wrapper';\nimport { BaseInputClass } from '../BaseInput';\n\nconst registry = {};\n\nfunction isBaseInput(input): input is BaseInputClass {\n if (_.isFunction(input)) {\n return _.isFunction(input.prototype.editMode) && _.isFunction(input.prototype.readMode);\n } else {\n return _.isObject(input) && _.isFunction(input.editMode) && _.isFunction(input.readMode);\n }\n}\n\n/**\n * @class module:Okta.internal.views.forms.helpers.InputRegistry\n */\nexport default /** @lends module:Okta.internal.views.forms.helpers.InputRegistry */ {\n isBaseInput: isBaseInput,\n\n /**\n * Register a form input\n * @param {String} type string identifier for the input\n * @param {BaseInput} input the input to register\n * @return {void}\n */\n register: function (type, input: BaseInputClass) {\n registry[type] = input;\n },\n\n /**\n * Get a form input by type\n * @param {Object} options input definition\n * @param {String} options.type string identifier for the input\n * @return {BaseInput} a matching input\n */\n get: function (options) {\n const input: BaseInputClass | ((...any) => BaseInputClass) = registry[options.type];\n\n return input && (isBaseInput(input) ? input : input(options));\n },\n\n /**\n * Unregister an input type\n * @param {String} type\n */\n unregister: function (type) {\n delete registry[type];\n }\n};\n","/* eslint max-statements: 0, max-params: 0 */\nimport _ from '../../../util/underscore-wrapper';\nimport StringUtil from '../../../util/StringUtil';\nimport BooleanSelect from '../inputs/BooleanSelect';\nimport TextBoxSet from '../inputs/TextBoxSet';\nimport EnumTypeHelper from './EnumTypeHelper';\nimport { InputOptions } from '../types';\n\nfunction convertStringToNumber(string) {\n const number = StringUtil.parseFloat(string);\n\n return string === '' ? null : number;\n}\n\n// converts possibleValues to choices\n// [a, b, c] => {a: a, b: b, c: c}\nfunction getChoices(values) {\n return _.object(values, values);\n}\n\nfunction isArray(type) {\n return type && type.indexOf('array') >= 0;\n}\n\n// A schema property may have an objectName either\n// at the root level or nested in the items object\nfunction getObjectName(schemaProp) {\n const items = schemaProp.get('items');\n\n if (items) {\n return items.objectName;\n }\n return schemaProp.get('objectName');\n}\n\n/**\n * Checks the validity of a schema property.\n *\n * @param {SchemaProperty} [schemaProp] A schema property backbone model\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Boolean} true/false\n * @private\n */\nfunction isValidSchemaProp(schemaProp, values) {\n const objectName = getObjectName(schemaProp);\n const results = values[objectName];\n\n // a schema property that references an empty list of values\n // Im looking at you, google apps.\n if (objectName && _(results).isEmpty()) {\n return false;\n }\n return true;\n}\n\n// Maps each __displayType__ to a basic set of inputOptions.\nfunction defaultOptions(property) {\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const name = property.get('name');\n const title = property.get('title');\n /* eslint complexity: [2, 24] */\n\n const inputOptions: InputOptions = {\n type: 'text',\n name: name,\n label: title || name\n };\n\n // @see customOptions for enum complex \"object\" type,\n // a.k.a \"object\" or \"arrayofobject\" type has enum values defined.\n // Other cases (e.g., nested object type) are not support yet.\n\n switch (type) {\n case 'arrayofstring':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'string' };\n break;\n case 'arrayofnumber':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'number' };\n break;\n case 'arrayofinteger':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: 'integer' };\n break;\n case 'arrayofobject':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: property.get('items').type };\n break;\n case 'arrayofref-id':\n inputOptions.input = TextBoxSet;\n inputOptions.params = { itemType: property.get('items').format };\n break;\n case 'boolean':\n inputOptions.input = BooleanSelect;\n break;\n case 'integer':\n case 'number':\n inputOptions.to = convertStringToNumber;\n break;\n case 'reference':\n inputOptions.type = 'select';\n inputOptions.options = getChoices(values);\n break;\n case 'image':\n inputOptions.readOnly = true;\n inputOptions.from = function (value) {\n return _.isEmpty(value) ? '' : StringUtil.localize('user.profile.image.image_set', 'courage'); // TODO\n };\n break;\n case 'password':\n inputOptions.type = 'password';\n break;\n case 'date':\n inputOptions.type = 'date';\n break;\n case 'uri':\n case 'country-code':\n case 'country_code':\n case 'language-code':\n case 'language_code':\n case 'email':\n case 'locale':\n case 'timezone':\n case 'string':\n case 'object':\n // default input options\n break;\n default:\n throw new Error(`unknown type: ${type}`);\n }\n return inputOptions;\n}\n\n// Sets nonbasic inputOptions, such as an array with possible values\nfunction customOptions(property) {\n let inputOptions: InputOptions = {};\n const name = property.get('name');\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const prefix = property.get('__fieldNamePrefix__');\n\n if (prefix) {\n inputOptions.name = prefix + name;\n inputOptions.errorField = name;\n }\n\n if (property.isEnumType()) {\n const configs = {\n displayType: type,\n title: property.get('title'),\n enumValues: property.getEnumValues()\n };\n\n inputOptions = _.extend({}, EnumTypeHelper.getEnumInputOptions(configs), inputOptions);\n } else if (isArray(type) && values) {\n inputOptions.type = 'checkboxset';\n inputOptions.input = null;\n inputOptions.options = getChoices(values);\n }\n\n return inputOptions;\n}\n\nfunction augmentSchemaProp(schemaProp, possibleValues, profile): void {\n const name = schemaProp.get('name');\n const prefix = profile.__nestedProperty__;\n let defaultValues = possibleValues[name];\n const userValues = profile.get(name);\n let values;\n\n // If API responds with a field name that differs from the form-field name\n // example: Model's 'profile.username' vs. server's 'username'\n if (prefix) {\n schemaProp.set('__fieldNamePrefix__', prefix);\n }\n\n // case 1: objectName - fixed list of values are set for the input\n const fixedValues = possibleValues[getObjectName(schemaProp)];\n\n // case 2: name only - default list of values are provided, user can add more\n // TODO: this case does not yet exist, so it is not tested\n if (defaultValues && userValues) {\n defaultValues = _.union(defaultValues, userValues);\n }\n\n // If both fixed and default values exist,\n // take the fixed values unless they are empty\n if (fixedValues && fixedValues.length) {\n values = fixedValues;\n } else if (defaultValues && defaultValues.length) {\n values = defaultValues;\n }\n\n schemaProp.set('__possibleValues__', values);\n}\n\nfunction augmentSchemaProps(schemaProps, possibleValues, profile) {\n schemaProps.each(function (schemaProp) {\n augmentSchemaProp(schemaProp, possibleValues, profile);\n });\n\n return schemaProps;\n}\n\n/**\n * Remove invalid schema properties from a collection\n *\n * @param {SchemaProperties Collection} [properties] A collection of schema properties\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Array} An array of valid schema models, this can be used to reset\n * a schema properties collection for example.\n * @private\n */\nfunction cleanSchema(properties, values) {\n return properties.filter(function (schema) {\n return isValidSchemaProp(schema, values);\n });\n}\n\nexport default {\n /**\n * Creates the options hash for BaseForm.addInput from a prepared schema\n * property.\n *\n * @param {Okta.Model} [preparedSchemaProp] A schema property backbone model\n * that has been standardized by the prepareSchema method.\n * @return {Object} An object containing all of the options needed by\n * BaseForm's addInput()\n */\n createInputOptions: function (preparedSchemaProp) {\n const custom = customOptions(preparedSchemaProp);\n const standard = defaultOptions(preparedSchemaProp);\n\n // underscore did not support nested extend\n // https://github.com/jashkenas/underscore/issues/162\n if (custom.params && standard.params) {\n custom.params = _.defaults(custom.params, standard.params);\n }\n return _.defaults(custom, standard);\n },\n\n hasValidSchemaProps: function (schemaProps, possibleValues) {\n if (_.isEmpty(schemaProps)) {\n return false;\n }\n const validSchema = cleanSchema(schemaProps, possibleValues);\n return !!validSchema.length;\n },\n\n /**\n * This method is responsible for preparing a collection for the form\n * factory to use by putting all of the information to create an input\n * into the schema property and removing invalid properties.\n * The typical UD form takes 3 models:\n * The data model has the input values.\n * The schema model describes which input to use, such as a textbox or a checkbox.\n * The possible values model provide a list of default options to display, for example in a drop down menu.\n *\n * @param {SchemaProperty Collection} [schemaProps] A schema property backbone model.\n * @param {Object} [possibleValues] An object of the form { key: [value1, value2]}\n * @param {Okta.Model} [profile] A backbone model containing the property described by the schema property.\n * @return {SchemaProperty Collection} A schema property collection with standardized models.\n * The standard schema model adds a couple of additional private properties to\n * allow the form factory to reference lookup values or name prefixes without going to a second model.\n */\n prepareSchema: function (schemaProps, possibleValues, profile) {\n schemaProps.reset(cleanSchema(schemaProps, possibleValues));\n return augmentSchemaProps(schemaProps, possibleValues, profile);\n },\n\n /**\n * `prepareSchema` will reset the property list which may not be necessary at some case.\n * like when setting default value for schema properties.\n * (more detail about such case @see wiki UX, App+Entitlements+for+Provisioning)\n *\n * @param { }\n * @return {String}\n */\n\n augmentSchemaProps: augmentSchemaProps,\n\n augmentSchemaProp: augmentSchemaProp\n};\n","// TODO: maybe replaced by\n// https://github.com/Calvein/empty-module\n// https://github.com/crimx/empty-module-loader\n\n\n\n\nexport default {\n extend: () => {}\n};\n","import $ from '@okta/courage/src/util/jquery-wrapper';\n\n/*!\n * jQuery UI Scroll Parent @VERSION\n * http://jqueryui.com\n *\n * Copyright jQuery Foundation and other contributors\n * Released under the MIT license.\n * http://jquery.org/license\n *\n * Modifications Copyright 2021 Okta, Inc.\n */\n\n// This is required because SIW doesn't want to include jqueryui even though it's an external dependency of courage\n$.fn.scrollParent = function( includeHidden? ) {\n const position = this.css( \"position\" ),\n excludeStaticParent = position === \"absolute\",\n overflowRegex = includeHidden ? /(auto|scroll|hidden)/ : /(auto|scroll)/,\n scrollParent = this.parents().filter( function() {\n const parent = $( this );\n if ( excludeStaticParent && parent.css( \"position\" ) === \"static\" ) {\n return false;\n }\n return overflowRegex.test( parent.css( \"overflow\" ) + parent.css( \"overflow-y\" ) +\n parent.css( \"overflow-x\" ) );\n } ).eq( 0 );\n\n return position === \"fixed\" || !scrollParent.length ?\n $( this[ 0 ].ownerDocument || document ) :\n scrollParent;\n};\n","// Backbone.js 1.4.0\n\n// (c) 2010-2019 Jeremy Ashkenas and DocumentCloud\n// Backbone may be freely distributed under the MIT license.\n// For all details and documentation:\n// http://backbonejs.org\n\n(function(factory) {\n\n // Establish the root object, `window` (`self`) in the browser, or `global` on the server.\n // We use `self` instead of `window` for `WebWorker` support.\n var root = typeof self == 'object' && self.self === self && self ||\n typeof global == 'object' && global.global === global && global;\n\n // Set up Backbone appropriately for the environment. Start with AMD.\n if (typeof define === 'function' && define.amd) {\n define(['underscore', 'jquery', 'exports'], function(_, $, exports) {\n // Export global even in AMD case in case this script is loaded with\n // others that may still expect a global Backbone.\n root.Backbone = factory(root, exports, _, $);\n });\n\n // Next for Node.js or CommonJS. jQuery may not be needed as a module.\n } else if (typeof exports !== 'undefined') {\n var _ = require('underscore'), $;\n try { $ = require('jquery'); } catch (e) {}\n factory(root, exports, _, $);\n\n // Finally, as a browser global.\n } else {\n root.Backbone = factory(root, {}, root._, root.jQuery || root.Zepto || root.ender || root.$);\n }\n\n})(function(root, Backbone, _, $) {\n\n // Initial Setup\n // -------------\n\n // Save the previous value of the `Backbone` variable, so that it can be\n // restored later on, if `noConflict` is used.\n var previousBackbone = root.Backbone;\n\n // Create a local reference to a common array method we'll want to use later.\n var slice = Array.prototype.slice;\n\n // Current version of the library. Keep in sync with `package.json`.\n Backbone.VERSION = '1.4.0';\n\n // For Backbone's purposes, jQuery, Zepto, Ender, or My Library (kidding) owns\n // the `$` variable.\n Backbone.$ = $;\n\n // Runs Backbone.js in *noConflict* mode, returning the `Backbone` variable\n // to its previous owner. Returns a reference to this Backbone object.\n Backbone.noConflict = function() {\n root.Backbone = previousBackbone;\n return this;\n };\n\n // Turn on `emulateHTTP` to support legacy HTTP servers. Setting this option\n // will fake `\"PATCH\"`, `\"PUT\"` and `\"DELETE\"` requests via the `_method` parameter and\n // set a `X-Http-Method-Override` header.\n Backbone.emulateHTTP = false;\n\n // Turn on `emulateJSON` to support legacy servers that can't deal with direct\n // `application/json` requests ... this will encode the body as\n // `application/x-www-form-urlencoded` instead and will send the model in a\n // form param named `model`.\n Backbone.emulateJSON = false;\n\n // Backbone.Events\n // ---------------\n\n // A module that can be mixed in to *any object* in order to provide it with\n // a custom event channel. You may bind a callback to an event with `on` or\n // remove with `off`; `trigger`-ing an event fires all callbacks in\n // succession.\n //\n // var object = {};\n // _.extend(object, Backbone.Events);\n // object.on('expand', function(){ alert('expanded'); });\n // object.trigger('expand');\n //\n var Events = Backbone.Events = {};\n\n // Regular expression used to split event strings.\n var eventSplitter = /\\s+/;\n\n // A private global variable to share between listeners and listenees.\n var _listening;\n\n // Iterates over the standard `event, callback` (as well as the fancy multiple\n // space-separated events `\"change blur\", callback` and jQuery-style event\n // maps `{event: callback}`).\n var eventsApi = function(iteratee, events, name, callback, opts) {\n var i = 0, names;\n if (name && typeof name === 'object') {\n // Handle event maps.\n if (callback !== void 0 && 'context' in opts && opts.context === void 0) opts.context = callback;\n for (names = _.keys(name); i < names.length ; i++) {\n events = eventsApi(iteratee, events, names[i], name[names[i]], opts);\n }\n } else if (name && eventSplitter.test(name)) {\n // Handle space-separated event names by delegating them individually.\n for (names = name.split(eventSplitter); i < names.length; i++) {\n events = iteratee(events, names[i], callback, opts);\n }\n } else {\n // Finally, standard events.\n events = iteratee(events, name, callback, opts);\n }\n return events;\n };\n\n // Bind an event to a `callback` function. Passing `\"all\"` will bind\n // the callback to all events fired.\n Events.on = function(name, callback, context) {\n this._events = eventsApi(onApi, this._events || {}, name, callback, {\n context: context,\n ctx: this,\n listening: _listening\n });\n\n if (_listening) {\n var listeners = this._listeners || (this._listeners = {});\n listeners[_listening.id] = _listening;\n // Allow the listening to use a counter, instead of tracking\n // callbacks for library interop\n _listening.interop = false;\n }\n\n return this;\n };\n\n // Inversion-of-control versions of `on`. Tell *this* object to listen to\n // an event in another object... keeping track of what it's listening to\n // for easier unbinding later.\n Events.listenTo = function(obj, name, callback) {\n if (!obj) return this;\n var id = obj._listenId || (obj._listenId = _.uniqueId('l'));\n var listeningTo = this._listeningTo || (this._listeningTo = {});\n var listening = _listening = listeningTo[id];\n\n // This object is not listening to any other events on `obj` yet.\n // Setup the necessary references to track the listening callbacks.\n if (!listening) {\n this._listenId || (this._listenId = _.uniqueId('l'));\n listening = _listening = listeningTo[id] = new Listening(this, obj);\n }\n\n // Bind callbacks on obj.\n var error = tryCatchOn(obj, name, callback, this);\n _listening = void 0;\n\n if (error) throw error;\n // If the target obj is not Backbone.Events, track events manually.\n if (listening.interop) listening.on(name, callback);\n\n return this;\n };\n\n // The reducing API that adds a callback to the `events` object.\n var onApi = function(events, name, callback, options) {\n if (callback) {\n var handlers = events[name] || (events[name] = []);\n var context = options.context, ctx = options.ctx, listening = options.listening;\n if (listening) listening.count++;\n\n handlers.push({callback: callback, context: context, ctx: context || ctx, listening: listening});\n }\n return events;\n };\n\n // An try-catch guarded #on function, to prevent poisoning the global\n // `_listening` variable.\n var tryCatchOn = function(obj, name, callback, context) {\n try {\n obj.on(name, callback, context);\n } catch (e) {\n return e;\n }\n };\n\n // Remove one or many callbacks. If `context` is null, removes all\n // callbacks with that function. If `callback` is null, removes all\n // callbacks for the event. If `name` is null, removes all bound\n // callbacks for all events.\n Events.off = function(name, callback, context) {\n if (!this._events) return this;\n this._events = eventsApi(offApi, this._events, name, callback, {\n context: context,\n listeners: this._listeners\n });\n\n return this;\n };\n\n // Tell this object to stop listening to either specific events ... or\n // to every object it's currently listening to.\n Events.stopListening = function(obj, name, callback) {\n var listeningTo = this._listeningTo;\n if (!listeningTo) return this;\n\n var ids = obj ? [obj._listenId] : _.keys(listeningTo);\n for (var i = 0; i < ids.length; i++) {\n var listening = listeningTo[ids[i]];\n\n // If listening doesn't exist, this object is not currently\n // listening to obj. Break out early.\n if (!listening) break;\n\n listening.obj.off(name, callback, this);\n if (listening.interop) listening.off(name, callback);\n }\n if (_.isEmpty(listeningTo)) this._listeningTo = void 0;\n\n return this;\n };\n\n // The reducing API that removes a callback from the `events` object.\n var offApi = function(events, name, callback, options) {\n if (!events) return;\n\n var context = options.context, listeners = options.listeners;\n var i = 0, names;\n\n // Delete all event listeners and \"drop\" events.\n if (!name && !context && !callback) {\n for (names = _.keys(listeners); i < names.length; i++) {\n listeners[names[i]].cleanup();\n }\n return;\n }\n\n names = name ? [name] : _.keys(events);\n for (; i < names.length; i++) {\n name = names[i];\n var handlers = events[name];\n\n // Bail out if there are no events stored.\n if (!handlers) break;\n\n // Find any remaining events.\n var remaining = [];\n for (var j = 0; j < handlers.length; j++) {\n var handler = handlers[j];\n if (\n callback && callback !== handler.callback &&\n callback !== handler.callback._callback ||\n context && context !== handler.context\n ) {\n remaining.push(handler);\n } else {\n var listening = handler.listening;\n if (listening) listening.off(name, callback);\n }\n }\n\n // Replace events if there are any remaining. Otherwise, clean up.\n if (remaining.length) {\n events[name] = remaining;\n } else {\n delete events[name];\n }\n }\n\n return events;\n };\n\n // Bind an event to only be triggered a single time. After the first time\n // the callback is invoked, its listener will be removed. If multiple events\n // are passed in using the space-separated syntax, the handler will fire\n // once for each event, not once for a combination of all events.\n Events.once = function(name, callback, context) {\n // Map the event into a `{event: once}` object.\n var events = eventsApi(onceMap, {}, name, callback, this.off.bind(this));\n if (typeof name === 'string' && context == null) callback = void 0;\n return this.on(events, callback, context);\n };\n\n // Inversion-of-control versions of `once`.\n Events.listenToOnce = function(obj, name, callback) {\n // Map the event into a `{event: once}` object.\n var events = eventsApi(onceMap, {}, name, callback, this.stopListening.bind(this, obj));\n return this.listenTo(obj, events);\n };\n\n // Reduces the event callbacks into a map of `{event: onceWrapper}`.\n // `offer` unbinds the `onceWrapper` after it has been called.\n var onceMap = function(map, name, callback, offer) {\n if (callback) {\n var once = map[name] = _.once(function() {\n offer(name, once);\n callback.apply(this, arguments);\n });\n once._callback = callback;\n }\n return map;\n };\n\n // Trigger one or many events, firing all bound callbacks. Callbacks are\n // passed the same arguments as `trigger` is, apart from the event name\n // (unless you're listening on `\"all\"`, which will cause your callback to\n // receive the true name of the event as the first argument).\n Events.trigger = function(name) {\n if (!this._events) return this;\n\n var length = Math.max(0, arguments.length - 1);\n var args = Array(length);\n for (var i = 0; i < length; i++) args[i] = arguments[i + 1];\n\n eventsApi(triggerApi, this._events, name, void 0, args);\n return this;\n };\n\n // Handles triggering the appropriate event callbacks.\n var triggerApi = function(objEvents, name, callback, args) {\n if (objEvents) {\n var events = objEvents[name];\n var allEvents = objEvents.all;\n if (events && allEvents) allEvents = allEvents.slice();\n if (events) triggerEvents(events, args);\n if (allEvents) triggerEvents(allEvents, [name].concat(args));\n }\n return objEvents;\n };\n\n // A difficult-to-believe, but optimized internal dispatch function for\n // triggering events. Tries to keep the usual cases speedy (most internal\n // Backbone events have 3 arguments).\n var triggerEvents = function(events, args) {\n var ev, i = -1, l = events.length, a1 = args[0], a2 = args[1], a3 = args[2];\n switch (args.length) {\n case 0: while (++i < l) (ev = events[i]).callback.call(ev.ctx); return;\n case 1: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1); return;\n case 2: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1, a2); return;\n case 3: while (++i < l) (ev = events[i]).callback.call(ev.ctx, a1, a2, a3); return;\n default: while (++i < l) (ev = events[i]).callback.apply(ev.ctx, args); return;\n }\n };\n\n // A listening class that tracks and cleans up memory bindings\n // when all callbacks have been offed.\n var Listening = function(listener, obj) {\n this.id = listener._listenId;\n this.listener = listener;\n this.obj = obj;\n this.interop = true;\n this.count = 0;\n this._events = void 0;\n };\n\n Listening.prototype.on = Events.on;\n\n // Offs a callback (or several).\n // Uses an optimized counter if the listenee uses Backbone.Events.\n // Otherwise, falls back to manual tracking to support events\n // library interop.\n Listening.prototype.off = function(name, callback) {\n var cleanup;\n if (this.interop) {\n this._events = eventsApi(offApi, this._events, name, callback, {\n context: void 0,\n listeners: void 0\n });\n cleanup = !this._events;\n } else {\n this.count--;\n cleanup = this.count === 0;\n }\n if (cleanup) this.cleanup();\n };\n\n // Cleans up memory bindings between the listener and the listenee.\n Listening.prototype.cleanup = function() {\n delete this.listener._listeningTo[this.obj._listenId];\n if (!this.interop) delete this.obj._listeners[this.id];\n };\n\n // Aliases for backwards compatibility.\n Events.bind = Events.on;\n Events.unbind = Events.off;\n\n // Allow the `Backbone` object to serve as a global event bus, for folks who\n // want global \"pubsub\" in a convenient place.\n _.extend(Backbone, Events);\n\n // Backbone.Model\n // --------------\n\n // Backbone **Models** are the basic data object in the framework --\n // frequently representing a row in a table in a database on your server.\n // A discrete chunk of data and a bunch of useful, related methods for\n // performing computations and transformations on that data.\n\n // Create a new model with the specified attributes. A client id (`cid`)\n // is automatically generated and assigned for you.\n var Model = Backbone.Model = function(attributes, options) {\n var attrs = attributes || {};\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n this.cid = _.uniqueId(this.cidPrefix);\n this.attributes = {};\n if (options.collection) this.collection = options.collection;\n if (options.parse) attrs = this.parse(attrs, options) || {};\n var defaults = _.result(this, 'defaults');\n attrs = _.defaults(_.extend({}, defaults, attrs), defaults);\n this.set(attrs, options);\n this.changed = {};\n this.initialize.apply(this, arguments);\n };\n\n // Attach all inheritable methods to the Model prototype.\n _.extend(Model.prototype, Events, {\n\n // A hash of attributes whose current and previous value differ.\n changed: null,\n\n // The value returned during the last failed validation.\n validationError: null,\n\n // The default name for the JSON `id` attribute is `\"id\"`. MongoDB and\n // CouchDB users may want to set this to `\"_id\"`.\n idAttribute: 'id',\n\n // The prefix is used to create the client id which is used to identify models locally.\n // You may want to override this if you're experiencing name clashes with model ids.\n cidPrefix: 'c',\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Model.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // Return a copy of the model's `attributes` object.\n toJSON: function(options) {\n return _.clone(this.attributes);\n },\n\n // Proxy `Backbone.sync` by default -- but override this if you need\n // custom syncing semantics for *this* particular model.\n sync: function() {\n return Backbone.sync.apply(this, arguments);\n },\n\n // Get the value of an attribute.\n get: function(attr) {\n return this.attributes[attr];\n },\n\n // Get the HTML-escaped value of an attribute.\n escape: function(attr) {\n return _.escape(this.get(attr));\n },\n\n // Returns `true` if the attribute contains a value that is not null\n // or undefined.\n has: function(attr) {\n return this.get(attr) != null;\n },\n\n // Special-cased proxy to underscore's `_.matches` method.\n matches: function(attrs) {\n return !!_.iteratee(attrs, this)(this.attributes);\n },\n\n // Set a hash of model attributes on the object, firing `\"change\"`. This is\n // the core primitive operation of a model, updating the data and notifying\n // anyone who needs to know about the change in state. The heart of the beast.\n set: function(key, val, options) {\n if (key == null) return this;\n\n // Handle both `\"key\", value` and `{key: value}` -style arguments.\n var attrs;\n if (typeof key === 'object') {\n attrs = key;\n options = val;\n } else {\n (attrs = {})[key] = val;\n }\n\n options || (options = {});\n\n // Run validation.\n if (!this._validate(attrs, options)) return false;\n\n // Extract attributes and options.\n var unset = options.unset;\n var silent = options.silent;\n var changes = [];\n var changing = this._changing;\n this._changing = true;\n\n if (!changing) {\n this._previousAttributes = _.clone(this.attributes);\n this.changed = {};\n }\n\n var current = this.attributes;\n var changed = this.changed;\n var prev = this._previousAttributes;\n\n // For each `set` attribute, update or delete the current value.\n for (var attr in attrs) {\n val = attrs[attr];\n if (!_.isEqual(current[attr], val)) changes.push(attr);\n if (!_.isEqual(prev[attr], val)) {\n changed[attr] = val;\n } else {\n delete changed[attr];\n }\n unset ? delete current[attr] : current[attr] = val;\n }\n\n // Update the `id`.\n if (this.idAttribute in attrs) this.id = this.get(this.idAttribute);\n\n // Trigger all relevant attribute changes.\n if (!silent) {\n if (changes.length) this._pending = options;\n for (var i = 0; i < changes.length; i++) {\n this.trigger('change:' + changes[i], this, current[changes[i]], options);\n }\n }\n\n // You might be wondering why there's a `while` loop here. Changes can\n // be recursively nested within `\"change\"` events.\n if (changing) return this;\n if (!silent) {\n while (this._pending) {\n options = this._pending;\n this._pending = false;\n this.trigger('change', this, options);\n }\n }\n this._pending = false;\n this._changing = false;\n return this;\n },\n\n // Remove an attribute from the model, firing `\"change\"`. `unset` is a noop\n // if the attribute doesn't exist.\n unset: function(attr, options) {\n return this.set(attr, void 0, _.extend({}, options, {unset: true}));\n },\n\n // Clear all attributes on the model, firing `\"change\"`.\n clear: function(options) {\n var attrs = {};\n for (var key in this.attributes) attrs[key] = void 0;\n return this.set(attrs, _.extend({}, options, {unset: true}));\n },\n\n // Determine if the model has changed since the last `\"change\"` event.\n // If you specify an attribute name, determine if that attribute has changed.\n hasChanged: function(attr) {\n if (attr == null) return !_.isEmpty(this.changed);\n return _.has(this.changed, attr);\n },\n\n // Return an object containing all the attributes that have changed, or\n // false if there are no changed attributes. Useful for determining what\n // parts of a view need to be updated and/or what attributes need to be\n // persisted to the server. Unset attributes will be set to undefined.\n // You can also pass an attributes object to diff against the model,\n // determining if there *would be* a change.\n changedAttributes: function(diff) {\n if (!diff) return this.hasChanged() ? _.clone(this.changed) : false;\n var old = this._changing ? this._previousAttributes : this.attributes;\n var changed = {};\n var hasChanged;\n for (var attr in diff) {\n var val = diff[attr];\n if (_.isEqual(old[attr], val)) continue;\n changed[attr] = val;\n hasChanged = true;\n }\n return hasChanged ? changed : false;\n },\n\n // Get the previous value of an attribute, recorded at the time the last\n // `\"change\"` event was fired.\n previous: function(attr) {\n if (attr == null || !this._previousAttributes) return null;\n return this._previousAttributes[attr];\n },\n\n // Get all of the attributes of the model at the time of the previous\n // `\"change\"` event.\n previousAttributes: function() {\n return _.clone(this._previousAttributes);\n },\n\n // Fetch the model from the server, merging the response with the model's\n // local attributes. Any changed attributes will trigger a \"change\" event.\n fetch: function(options) {\n options = _.extend({parse: true}, options);\n var model = this;\n var success = options.success;\n options.success = function(resp) {\n var serverAttrs = options.parse ? model.parse(resp, options) : resp;\n if (!model.set(serverAttrs, options)) return false;\n if (success) success.call(options.context, model, resp, options);\n model.trigger('sync', model, resp, options);\n };\n wrapError(this, options);\n return this.sync('read', this, options);\n },\n\n // Set a hash of model attributes, and sync the model to the server.\n // If the server returns an attributes hash that differs, the model's\n // state will be `set` again.\n save: function(key, val, options) {\n // Handle both `\"key\", value` and `{key: value}` -style arguments.\n var attrs;\n if (key == null || typeof key === 'object') {\n attrs = key;\n options = val;\n } else {\n (attrs = {})[key] = val;\n }\n\n options = _.extend({validate: true, parse: true}, options);\n var wait = options.wait;\n\n // If we're not waiting and attributes exist, save acts as\n // `set(attr).save(null, opts)` with validation. Otherwise, check if\n // the model will be valid when the attributes, if any, are set.\n if (attrs && !wait) {\n if (!this.set(attrs, options)) return false;\n } else if (!this._validate(attrs, options)) {\n return false;\n }\n\n // After a successful server-side save, the client is (optionally)\n // updated with the server-side state.\n var model = this;\n var success = options.success;\n var attributes = this.attributes;\n options.success = function(resp) {\n // Ensure attributes are restored during synchronous saves.\n model.attributes = attributes;\n var serverAttrs = options.parse ? model.parse(resp, options) : resp;\n if (wait) serverAttrs = _.extend({}, attrs, serverAttrs);\n if (serverAttrs && !model.set(serverAttrs, options)) return false;\n if (success) success.call(options.context, model, resp, options);\n model.trigger('sync', model, resp, options);\n };\n wrapError(this, options);\n\n // Set temporary attributes if `{wait: true}` to properly find new ids.\n if (attrs && wait) this.attributes = _.extend({}, attributes, attrs);\n\n var method = this.isNew() ? 'create' : options.patch ? 'patch' : 'update';\n if (method === 'patch' && !options.attrs) options.attrs = attrs;\n var xhr = this.sync(method, this, options);\n\n // Restore attributes.\n this.attributes = attributes;\n\n return xhr;\n },\n\n // Destroy this model on the server if it was already persisted.\n // Optimistically removes the model from its collection, if it has one.\n // If `wait: true` is passed, waits for the server to respond before removal.\n destroy: function(options) {\n options = options ? _.clone(options) : {};\n var model = this;\n var success = options.success;\n var wait = options.wait;\n\n var destroy = function() {\n model.stopListening();\n model.trigger('destroy', model, model.collection, options);\n };\n\n options.success = function(resp) {\n if (wait) destroy();\n if (success) success.call(options.context, model, resp, options);\n if (!model.isNew()) model.trigger('sync', model, resp, options);\n };\n\n var xhr = false;\n if (this.isNew()) {\n _.defer(options.success);\n } else {\n wrapError(this, options);\n xhr = this.sync('delete', this, options);\n }\n if (!wait) destroy();\n return xhr;\n },\n\n // Default URL for the model's representation on the server -- if you're\n // using Backbone's restful methods, override this to change the endpoint\n // that will be called.\n url: function() {\n var base =\n _.result(this, 'urlRoot') ||\n _.result(this.collection, 'url') ||\n urlError();\n if (this.isNew()) return base;\n var id = this.get(this.idAttribute);\n return base.replace(/[^\\/]$/, '$&/') + encodeURIComponent(id);\n },\n\n // **parse** converts a response into the hash of attributes to be `set` on\n // the model. The default implementation is just to pass the response along.\n parse: function(resp, options) {\n return resp;\n },\n\n // Create a new model with identical attributes to this one.\n clone: function() {\n return new this.constructor(this.attributes);\n },\n\n // A model is new if it has never been saved to the server, and lacks an id.\n isNew: function() {\n return !this.has(this.idAttribute);\n },\n\n // Check if the model is currently in a valid state.\n isValid: function(options) {\n return this._validate({}, _.extend({}, options, {validate: true}));\n },\n\n // Run validation against the next complete set of model attributes,\n // returning `true` if all is well. Otherwise, fire an `\"invalid\"` event.\n _validate: function(attrs, options) {\n if (!options.validate || !this.validate) return true;\n attrs = _.extend({}, this.attributes, attrs);\n var error = this.validationError = this.validate(attrs, options) || null;\n if (!error) return true;\n this.trigger('invalid', this, error, _.extend(options, {validationError: error}));\n return false;\n }\n\n });\n\n // Backbone.Collection\n // -------------------\n\n // If models tend to represent a single row of data, a Backbone Collection is\n // more analogous to a table full of data ... or a small slice or page of that\n // table, or a collection of rows that belong together for a particular reason\n // -- all of the messages in this particular folder, all of the documents\n // belonging to this particular author, and so on. Collections maintain\n // indexes of their models, both in order, and for lookup by `id`.\n\n // Create a new **Collection**, perhaps to contain a specific type of `model`.\n // If a `comparator` is specified, the Collection will maintain\n // its models in sort order, as they're added and removed.\n var Collection = Backbone.Collection = function(models, options) {\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n if (options.model) this.model = options.model;\n if (options.comparator !== void 0) this.comparator = options.comparator;\n this._reset();\n this.initialize.apply(this, arguments);\n if (models) this.reset(models, _.extend({silent: true}, options));\n };\n\n // Default options for `Collection#set`.\n var setOptions = {add: true, remove: true, merge: true};\n var addOptions = {add: true, remove: false};\n\n // Splices `insert` into `array` at index `at`.\n var splice = function(array, insert, at) {\n at = Math.min(Math.max(at, 0), array.length);\n var tail = Array(array.length - at);\n var length = insert.length;\n var i;\n for (i = 0; i < tail.length; i++) tail[i] = array[i + at];\n for (i = 0; i < length; i++) array[i + at] = insert[i];\n for (i = 0; i < tail.length; i++) array[i + length + at] = tail[i];\n };\n\n // Define the Collection's inheritable methods.\n _.extend(Collection.prototype, Events, {\n\n // The default model for a collection is just a **Backbone.Model**.\n // This should be overridden in most cases.\n model: Model,\n\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Collection.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // The JSON representation of a Collection is an array of the\n // models' attributes.\n toJSON: function(options) {\n return this.map(function(model) { return model.toJSON(options); });\n },\n\n // Proxy `Backbone.sync` by default.\n sync: function() {\n return Backbone.sync.apply(this, arguments);\n },\n\n // Add a model, or list of models to the set. `models` may be Backbone\n // Models or raw JavaScript objects to be converted to Models, or any\n // combination of the two.\n add: function(models, options) {\n return this.set(models, _.extend({merge: false}, options, addOptions));\n },\n\n // Remove a model, or a list of models from the set.\n remove: function(models, options) {\n options = _.extend({}, options);\n var singular = !_.isArray(models);\n models = singular ? [models] : models.slice();\n var removed = this._removeModels(models, options);\n if (!options.silent && removed.length) {\n options.changes = {added: [], merged: [], removed: removed};\n this.trigger('update', this, options);\n }\n return singular ? removed[0] : removed;\n },\n\n // Update a collection by `set`-ing a new list of models, adding new ones,\n // removing models that are no longer present, and merging models that\n // already exist in the collection, as necessary. Similar to **Model#set**,\n // the core operation for updating the data contained by the collection.\n set: function(models, options) {\n if (models == null) return;\n\n options = _.extend({}, setOptions, options);\n if (options.parse && !this._isModel(models)) {\n models = this.parse(models, options) || [];\n }\n\n var singular = !_.isArray(models);\n models = singular ? [models] : models.slice();\n\n var at = options.at;\n if (at != null) at = +at;\n if (at > this.length) at = this.length;\n if (at < 0) at += this.length + 1;\n\n var set = [];\n var toAdd = [];\n var toMerge = [];\n var toRemove = [];\n var modelMap = {};\n\n var add = options.add;\n var merge = options.merge;\n var remove = options.remove;\n\n var sort = false;\n var sortable = this.comparator && at == null && options.sort !== false;\n var sortAttr = _.isString(this.comparator) ? this.comparator : null;\n\n // Turn bare objects into model references, and prevent invalid models\n // from being added.\n var model, i;\n for (i = 0; i < models.length; i++) {\n model = models[i];\n\n // If a duplicate is found, prevent it from being added and\n // optionally merge it into the existing model.\n var existing = this.get(model);\n if (existing) {\n if (merge && model !== existing) {\n var attrs = this._isModel(model) ? model.attributes : model;\n if (options.parse) attrs = existing.parse(attrs, options);\n existing.set(attrs, options);\n toMerge.push(existing);\n if (sortable && !sort) sort = existing.hasChanged(sortAttr);\n }\n if (!modelMap[existing.cid]) {\n modelMap[existing.cid] = true;\n set.push(existing);\n }\n models[i] = existing;\n\n // If this is a new, valid model, push it to the `toAdd` list.\n } else if (add) {\n model = models[i] = this._prepareModel(model, options);\n if (model) {\n toAdd.push(model);\n this._addReference(model, options);\n modelMap[model.cid] = true;\n set.push(model);\n }\n }\n }\n\n // Remove stale models.\n if (remove) {\n for (i = 0; i < this.length; i++) {\n model = this.models[i];\n if (!modelMap[model.cid]) toRemove.push(model);\n }\n if (toRemove.length) this._removeModels(toRemove, options);\n }\n\n // See if sorting is needed, update `length` and splice in new models.\n var orderChanged = false;\n var replace = !sortable && add && remove;\n if (set.length && replace) {\n orderChanged = this.length !== set.length || _.some(this.models, function(m, index) {\n return m !== set[index];\n });\n this.models.length = 0;\n splice(this.models, set, 0);\n this.length = this.models.length;\n } else if (toAdd.length) {\n if (sortable) sort = true;\n splice(this.models, toAdd, at == null ? this.length : at);\n this.length = this.models.length;\n }\n\n // Silently sort the collection if appropriate.\n if (sort) this.sort({silent: true});\n\n // Unless silenced, it's time to fire all appropriate add/sort/update events.\n if (!options.silent) {\n for (i = 0; i < toAdd.length; i++) {\n if (at != null) options.index = at + i;\n model = toAdd[i];\n model.trigger('add', model, this, options);\n }\n if (sort || orderChanged) this.trigger('sort', this, options);\n if (toAdd.length || toRemove.length || toMerge.length) {\n options.changes = {\n added: toAdd,\n removed: toRemove,\n merged: toMerge\n };\n this.trigger('update', this, options);\n }\n }\n\n // Return the added (or merged) model (or models).\n return singular ? models[0] : models;\n },\n\n // When you have more items than you want to add or remove individually,\n // you can reset the entire set with a new list of models, without firing\n // any granular `add` or `remove` events. Fires `reset` when finished.\n // Useful for bulk operations and optimizations.\n reset: function(models, options) {\n options = options ? _.clone(options) : {};\n for (var i = 0; i < this.models.length; i++) {\n this._removeReference(this.models[i], options);\n }\n options.previousModels = this.models;\n this._reset();\n models = this.add(models, _.extend({silent: true}, options));\n if (!options.silent) this.trigger('reset', this, options);\n return models;\n },\n\n // Add a model to the end of the collection.\n push: function(model, options) {\n return this.add(model, _.extend({at: this.length}, options));\n },\n\n // Remove a model from the end of the collection.\n pop: function(options) {\n var model = this.at(this.length - 1);\n return this.remove(model, options);\n },\n\n // Add a model to the beginning of the collection.\n unshift: function(model, options) {\n return this.add(model, _.extend({at: 0}, options));\n },\n\n // Remove a model from the beginning of the collection.\n shift: function(options) {\n var model = this.at(0);\n return this.remove(model, options);\n },\n\n // Slice out a sub-array of models from the collection.\n slice: function() {\n return slice.apply(this.models, arguments);\n },\n\n // Get a model from the set by id, cid, model object with id or cid\n // properties, or an attributes object that is transformed through modelId.\n get: function(obj) {\n if (obj == null) return void 0;\n return this._byId[obj] ||\n this._byId[this.modelId(this._isModel(obj) ? obj.attributes : obj)] ||\n obj.cid && this._byId[obj.cid];\n },\n\n // Returns `true` if the model is in the collection.\n has: function(obj) {\n return this.get(obj) != null;\n },\n\n // Get the model at the given index.\n at: function(index) {\n if (index < 0) index += this.length;\n return this.models[index];\n },\n\n // Return models with matching attributes. Useful for simple cases of\n // `filter`.\n where: function(attrs, first) {\n return this[first ? 'find' : 'filter'](attrs);\n },\n\n // Return the first model with matching attributes. Useful for simple cases\n // of `find`.\n findWhere: function(attrs) {\n return this.where(attrs, true);\n },\n\n // Force the collection to re-sort itself. You don't need to call this under\n // normal circumstances, as the set will maintain sort order as each item\n // is added.\n sort: function(options) {\n var comparator = this.comparator;\n if (!comparator) throw new Error('Cannot sort a set without a comparator');\n options || (options = {});\n\n var length = comparator.length;\n if (_.isFunction(comparator)) comparator = comparator.bind(this);\n\n // Run sort based on type of `comparator`.\n if (length === 1 || _.isString(comparator)) {\n this.models = this.sortBy(comparator);\n } else {\n this.models.sort(comparator);\n }\n if (!options.silent) this.trigger('sort', this, options);\n return this;\n },\n\n // Pluck an attribute from each model in the collection.\n pluck: function(attr) {\n return this.map(attr + '');\n },\n\n // Fetch the default set of models for this collection, resetting the\n // collection when they arrive. If `reset: true` is passed, the response\n // data will be passed through the `reset` method instead of `set`.\n fetch: function(options) {\n options = _.extend({parse: true}, options);\n var success = options.success;\n var collection = this;\n options.success = function(resp) {\n var method = options.reset ? 'reset' : 'set';\n collection[method](resp, options);\n if (success) success.call(options.context, collection, resp, options);\n collection.trigger('sync', collection, resp, options);\n };\n wrapError(this, options);\n return this.sync('read', this, options);\n },\n\n // Create a new instance of a model in this collection. Add the model to the\n // collection immediately, unless `wait: true` is passed, in which case we\n // wait for the server to agree.\n create: function(model, options) {\n options = options ? _.clone(options) : {};\n var wait = options.wait;\n model = this._prepareModel(model, options);\n if (!model) return false;\n if (!wait) this.add(model, options);\n var collection = this;\n var success = options.success;\n options.success = function(m, resp, callbackOpts) {\n if (wait) collection.add(m, callbackOpts);\n if (success) success.call(callbackOpts.context, m, resp, callbackOpts);\n };\n model.save(null, options);\n return model;\n },\n\n // **parse** converts a response into a list of models to be added to the\n // collection. The default implementation is just to pass it through.\n parse: function(resp, options) {\n return resp;\n },\n\n // Create a new collection with an identical list of models as this one.\n clone: function() {\n return new this.constructor(this.models, {\n model: this.model,\n comparator: this.comparator\n });\n },\n\n // Define how to uniquely identify models in the collection.\n modelId: function(attrs) {\n return attrs[this.model.prototype.idAttribute || 'id'];\n },\n\n // Get an iterator of all models in this collection.\n values: function() {\n return new CollectionIterator(this, ITERATOR_VALUES);\n },\n\n // Get an iterator of all model IDs in this collection.\n keys: function() {\n return new CollectionIterator(this, ITERATOR_KEYS);\n },\n\n // Get an iterator of all [ID, model] tuples in this collection.\n entries: function() {\n return new CollectionIterator(this, ITERATOR_KEYSVALUES);\n },\n\n // Private method to reset all internal state. Called when the collection\n // is first initialized or reset.\n _reset: function() {\n this.length = 0;\n this.models = [];\n this._byId = {};\n },\n\n // Prepare a hash of attributes (or other model) to be added to this\n // collection.\n _prepareModel: function(attrs, options) {\n if (this._isModel(attrs)) {\n if (!attrs.collection) attrs.collection = this;\n return attrs;\n }\n options = options ? _.clone(options) : {};\n options.collection = this;\n var model = new this.model(attrs, options);\n if (!model.validationError) return model;\n this.trigger('invalid', this, model.validationError, options);\n return false;\n },\n\n // Internal method called by both remove and set.\n _removeModels: function(models, options) {\n var removed = [];\n for (var i = 0; i < models.length; i++) {\n var model = this.get(models[i]);\n if (!model) continue;\n\n var index = this.indexOf(model);\n this.models.splice(index, 1);\n this.length--;\n\n // Remove references before triggering 'remove' event to prevent an\n // infinite loop. #3693\n delete this._byId[model.cid];\n var id = this.modelId(model.attributes);\n if (id != null) delete this._byId[id];\n\n if (!options.silent) {\n options.index = index;\n model.trigger('remove', model, this, options);\n }\n\n removed.push(model);\n this._removeReference(model, options);\n }\n return removed;\n },\n\n // Method for checking whether an object should be considered a model for\n // the purposes of adding to the collection.\n _isModel: function(model) {\n return model instanceof Model;\n },\n\n // Internal method to create a model's ties to a collection.\n _addReference: function(model, options) {\n this._byId[model.cid] = model;\n var id = this.modelId(model.attributes);\n if (id != null) this._byId[id] = model;\n model.on('all', this._onModelEvent, this);\n },\n\n // Internal method to sever a model's ties to a collection.\n _removeReference: function(model, options) {\n delete this._byId[model.cid];\n var id = this.modelId(model.attributes);\n if (id != null) delete this._byId[id];\n if (this === model.collection) delete model.collection;\n model.off('all', this._onModelEvent, this);\n },\n\n // Internal method called every time a model in the set fires an event.\n // Sets need to update their indexes when models change ids. All other\n // events simply proxy through. \"add\" and \"remove\" events that originate\n // in other collections are ignored.\n _onModelEvent: function(event, model, collection, options) {\n if (model) {\n if ((event === 'add' || event === 'remove') && collection !== this) return;\n if (event === 'destroy') this.remove(model, options);\n if (event === 'change') {\n var prevId = this.modelId(model.previousAttributes());\n var id = this.modelId(model.attributes);\n if (prevId !== id) {\n if (prevId != null) delete this._byId[prevId];\n if (id != null) this._byId[id] = model;\n }\n }\n }\n this.trigger.apply(this, arguments);\n }\n\n });\n\n // Defining an @@iterator method implements JavaScript's Iterable protocol.\n // In modern ES2015 browsers, this value is found at Symbol.iterator.\n /* global Symbol */\n var $$iterator = typeof Symbol === 'function' && Symbol.iterator;\n if ($$iterator) {\n Collection.prototype[$$iterator] = Collection.prototype.values;\n }\n\n // CollectionIterator\n // ------------------\n\n // A CollectionIterator implements JavaScript's Iterator protocol, allowing the\n // use of `for of` loops in modern browsers and interoperation between\n // Backbone.Collection and other JavaScript functions and third-party libraries\n // which can operate on Iterables.\n var CollectionIterator = function(collection, kind) {\n this._collection = collection;\n this._kind = kind;\n this._index = 0;\n };\n\n // This \"enum\" defines the three possible kinds of values which can be emitted\n // by a CollectionIterator that correspond to the values(), keys() and entries()\n // methods on Collection, respectively.\n var ITERATOR_VALUES = 1;\n var ITERATOR_KEYS = 2;\n var ITERATOR_KEYSVALUES = 3;\n\n // All Iterators should themselves be Iterable.\n if ($$iterator) {\n CollectionIterator.prototype[$$iterator] = function() {\n return this;\n };\n }\n\n CollectionIterator.prototype.next = function() {\n if (this._collection) {\n\n // Only continue iterating if the iterated collection is long enough.\n if (this._index < this._collection.length) {\n var model = this._collection.at(this._index);\n this._index++;\n\n // Construct a value depending on what kind of values should be iterated.\n var value;\n if (this._kind === ITERATOR_VALUES) {\n value = model;\n } else {\n var id = this._collection.modelId(model.attributes);\n if (this._kind === ITERATOR_KEYS) {\n value = id;\n } else { // ITERATOR_KEYSVALUES\n value = [id, model];\n }\n }\n return {value: value, done: false};\n }\n\n // Once exhausted, remove the reference to the collection so future\n // calls to the next method always return done.\n this._collection = void 0;\n }\n\n return {value: void 0, done: true};\n };\n\n // Backbone.View\n // -------------\n\n // Backbone Views are almost more convention than they are actual code. A View\n // is simply a JavaScript object that represents a logical chunk of UI in the\n // DOM. This might be a single item, an entire list, a sidebar or panel, or\n // even the surrounding frame which wraps your whole app. Defining a chunk of\n // UI as a **View** allows you to define your DOM events declaratively, without\n // having to worry about render order ... and makes it easy for the view to\n // react to specific changes in the state of your models.\n\n // Creating a Backbone.View creates its initial element outside of the DOM,\n // if an existing element is not provided...\n var View = Backbone.View = function(options) {\n this.cid = _.uniqueId('view');\n this.preinitialize.apply(this, arguments);\n _.extend(this, _.pick(options, viewOptions));\n this._ensureElement();\n this.initialize.apply(this, arguments);\n };\n\n // Cached regex to split keys for `delegate`.\n var delegateEventSplitter = /^(\\S+)\\s*(.*)$/;\n\n // List of view options to be set as properties.\n var viewOptions = ['model', 'collection', 'el', 'id', 'attributes', 'className', 'tagName', 'events'];\n\n // Set up all inheritable **Backbone.View** properties and methods.\n _.extend(View.prototype, Events, {\n\n // The default `tagName` of a View's element is `\"div\"`.\n tagName: 'div',\n\n // jQuery delegate for element lookup, scoped to DOM elements within the\n // current view. This should be preferred to global lookups where possible.\n $: function(selector) {\n return this.$el.find(selector);\n },\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the View\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // **render** is the core function that your view should override, in order\n // to populate its element (`this.el`), with the appropriate HTML. The\n // convention is for **render** to always return `this`.\n render: function() {\n return this;\n },\n\n // Remove this view by taking the element out of the DOM, and removing any\n // applicable Backbone.Events listeners.\n remove: function() {\n this._removeElement();\n this.stopListening();\n return this;\n },\n\n // Remove this view's element from the document and all event listeners\n // attached to it. Exposed for subclasses using an alternative DOM\n // manipulation API.\n _removeElement: function() {\n this.$el.remove();\n },\n\n // Change the view's element (`this.el` property) and re-delegate the\n // view's events on the new element.\n setElement: function(element) {\n this.undelegateEvents();\n this._setElement(element);\n this.delegateEvents();\n return this;\n },\n\n // Creates the `this.el` and `this.$el` references for this view using the\n // given `el`. `el` can be a CSS selector or an HTML string, a jQuery\n // context or an element. Subclasses can override this to utilize an\n // alternative DOM manipulation API and are only required to set the\n // `this.el` property.\n _setElement: function(el) {\n this.$el = el instanceof Backbone.$ ? el : Backbone.$(el);\n this.el = this.$el[0];\n },\n\n // Set callbacks, where `this.events` is a hash of\n //\n // *{\"event selector\": \"callback\"}*\n //\n // {\n // 'mousedown .title': 'edit',\n // 'click .button': 'save',\n // 'click .open': function(e) { ... }\n // }\n //\n // pairs. Callbacks will be bound to the view, with `this` set properly.\n // Uses event delegation for efficiency.\n // Omitting the selector binds the event to `this.el`.\n delegateEvents: function(events) {\n events || (events = _.result(this, 'events'));\n if (!events) return this;\n this.undelegateEvents();\n for (var key in events) {\n var method = events[key];\n if (!_.isFunction(method)) method = this[method];\n if (!method) continue;\n var match = key.match(delegateEventSplitter);\n this.delegate(match[1], match[2], method.bind(this));\n }\n return this;\n },\n\n // Add a single event listener to the view's element (or a child element\n // using `selector`). This only works for delegate-able events: not `focus`,\n // `blur`, and not `change`, `submit`, and `reset` in Internet Explorer.\n delegate: function(eventName, selector, listener) {\n this.$el.on(eventName + '.delegateEvents' + this.cid, selector, listener);\n return this;\n },\n\n // Clears all callbacks previously bound to the view by `delegateEvents`.\n // You usually don't need to use this, but may wish to if you have multiple\n // Backbone views attached to the same DOM element.\n undelegateEvents: function() {\n if (this.$el) this.$el.off('.delegateEvents' + this.cid);\n return this;\n },\n\n // A finer-grained `undelegateEvents` for removing a single delegated event.\n // `selector` and `listener` are both optional.\n undelegate: function(eventName, selector, listener) {\n this.$el.off(eventName + '.delegateEvents' + this.cid, selector, listener);\n return this;\n },\n\n // Produces a DOM element to be assigned to your view. Exposed for\n // subclasses using an alternative DOM manipulation API.\n _createElement: function(tagName) {\n return document.createElement(tagName);\n },\n\n // Ensure that the View has a DOM element to render into.\n // If `this.el` is a string, pass it through `$()`, take the first\n // matching element, and re-assign it to `el`. Otherwise, create\n // an element from the `id`, `className` and `tagName` properties.\n _ensureElement: function() {\n if (!this.el) {\n var attrs = _.extend({}, _.result(this, 'attributes'));\n if (this.id) attrs.id = _.result(this, 'id');\n if (this.className) attrs['class'] = _.result(this, 'className');\n this.setElement(this._createElement(_.result(this, 'tagName')));\n this._setAttributes(attrs);\n } else {\n this.setElement(_.result(this, 'el'));\n }\n },\n\n // Set attributes from a hash on this view's element. Exposed for\n // subclasses using an alternative DOM manipulation API.\n _setAttributes: function(attributes) {\n this.$el.attr(attributes);\n }\n\n });\n\n // Proxy Backbone class methods to Underscore functions, wrapping the model's\n // `attributes` object or collection's `models` array behind the scenes.\n //\n // collection.filter(function(model) { return model.get('age') > 10 });\n // collection.each(this.addView);\n //\n // `Function#apply` can be slow so we use the method's arg count, if we know it.\n var addMethod = function(base, length, method, attribute) {\n switch (length) {\n case 1: return function() {\n return base[method](this[attribute]);\n };\n case 2: return function(value) {\n return base[method](this[attribute], value);\n };\n case 3: return function(iteratee, context) {\n return base[method](this[attribute], cb(iteratee, this), context);\n };\n case 4: return function(iteratee, defaultVal, context) {\n return base[method](this[attribute], cb(iteratee, this), defaultVal, context);\n };\n default: return function() {\n var args = slice.call(arguments);\n args.unshift(this[attribute]);\n return base[method].apply(base, args);\n };\n }\n };\n\n var addUnderscoreMethods = function(Class, base, methods, attribute) {\n _.each(methods, function(length, method) {\n if (base[method]) Class.prototype[method] = addMethod(base, length, method, attribute);\n });\n };\n\n // Support `collection.sortBy('attr')` and `collection.findWhere({id: 1})`.\n var cb = function(iteratee, instance) {\n if (_.isFunction(iteratee)) return iteratee;\n if (_.isObject(iteratee) && !instance._isModel(iteratee)) return modelMatcher(iteratee);\n if (_.isString(iteratee)) return function(model) { return model.get(iteratee); };\n return iteratee;\n };\n var modelMatcher = function(attrs) {\n var matcher = _.matches(attrs);\n return function(model) {\n return matcher(model.attributes);\n };\n };\n\n // Underscore methods that we want to implement on the Collection.\n // 90% of the core usefulness of Backbone Collections is actually implemented\n // right here:\n var collectionMethods = {forEach: 3, each: 3, map: 3, collect: 3, reduce: 0,\n foldl: 0, inject: 0, reduceRight: 0, foldr: 0, find: 3, detect: 3, filter: 3,\n select: 3, reject: 3, every: 3, all: 3, some: 3, any: 3, include: 3, includes: 3,\n contains: 3, invoke: 0, max: 3, min: 3, toArray: 1, size: 1, first: 3,\n head: 3, take: 3, initial: 3, rest: 3, tail: 3, drop: 3, last: 3,\n without: 0, difference: 0, indexOf: 3, shuffle: 1, lastIndexOf: 3,\n isEmpty: 1, chain: 1, sample: 3, partition: 3, groupBy: 3, countBy: 3,\n sortBy: 3, indexBy: 3, findIndex: 3, findLastIndex: 3};\n\n\n // Underscore methods that we want to implement on the Model, mapped to the\n // number of arguments they take.\n var modelMethods = {keys: 1, values: 1, pairs: 1, invert: 1, pick: 0,\n omit: 0, chain: 1, isEmpty: 1};\n\n // Mix in each Underscore method as a proxy to `Collection#models`.\n\n _.each([\n [Collection, collectionMethods, 'models'],\n [Model, modelMethods, 'attributes']\n ], function(config) {\n var Base = config[0],\n methods = config[1],\n attribute = config[2];\n\n Base.mixin = function(obj) {\n var mappings = _.reduce(_.functions(obj), function(memo, name) {\n memo[name] = 0;\n return memo;\n }, {});\n addUnderscoreMethods(Base, obj, mappings, attribute);\n };\n\n addUnderscoreMethods(Base, _, methods, attribute);\n });\n\n // Backbone.sync\n // -------------\n\n // Override this function to change the manner in which Backbone persists\n // models to the server. You will be passed the type of request, and the\n // model in question. By default, makes a RESTful Ajax request\n // to the model's `url()`. Some possible customizations could be:\n //\n // * Use `setTimeout` to batch rapid-fire updates into a single request.\n // * Send up the models as XML instead of JSON.\n // * Persist models via WebSockets instead of Ajax.\n //\n // Turn on `Backbone.emulateHTTP` in order to send `PUT` and `DELETE` requests\n // as `POST`, with a `_method` parameter containing the true HTTP method,\n // as well as all requests with the body as `application/x-www-form-urlencoded`\n // instead of `application/json` with the model in a param named `model`.\n // Useful when interfacing with server-side languages like **PHP** that make\n // it difficult to read the body of `PUT` requests.\n Backbone.sync = function(method, model, options) {\n var type = methodMap[method];\n\n // Default options, unless specified.\n _.defaults(options || (options = {}), {\n emulateHTTP: Backbone.emulateHTTP,\n emulateJSON: Backbone.emulateJSON\n });\n\n // Default JSON-request options.\n var params = {type: type, dataType: 'json'};\n\n // Ensure that we have a URL.\n if (!options.url) {\n params.url = _.result(model, 'url') || urlError();\n }\n\n // Ensure that we have the appropriate request data.\n if (options.data == null && model && (method === 'create' || method === 'update' || method === 'patch')) {\n params.contentType = 'application/json';\n params.data = JSON.stringify(options.attrs || model.toJSON(options));\n }\n\n // For older servers, emulate JSON by encoding the request into an HTML-form.\n if (options.emulateJSON) {\n params.contentType = 'application/x-www-form-urlencoded';\n params.data = params.data ? {model: params.data} : {};\n }\n\n // For older servers, emulate HTTP by mimicking the HTTP method with `_method`\n // And an `X-HTTP-Method-Override` header.\n if (options.emulateHTTP && (type === 'PUT' || type === 'DELETE' || type === 'PATCH')) {\n params.type = 'POST';\n if (options.emulateJSON) params.data._method = type;\n var beforeSend = options.beforeSend;\n options.beforeSend = function(xhr) {\n xhr.setRequestHeader('X-HTTP-Method-Override', type);\n if (beforeSend) return beforeSend.apply(this, arguments);\n };\n }\n\n // Don't process data on a non-GET request.\n if (params.type !== 'GET' && !options.emulateJSON) {\n params.processData = false;\n }\n\n // Pass along `textStatus` and `errorThrown` from jQuery.\n var error = options.error;\n options.error = function(xhr, textStatus, errorThrown) {\n options.textStatus = textStatus;\n options.errorThrown = errorThrown;\n if (error) error.call(options.context, xhr, textStatus, errorThrown);\n };\n\n // Make the request, allowing the user to override any Ajax options.\n var xhr = options.xhr = Backbone.ajax(_.extend(params, options));\n model.trigger('request', model, xhr, options);\n return xhr;\n };\n\n // Map from CRUD to HTTP for our default `Backbone.sync` implementation.\n var methodMap = {\n create: 'POST',\n update: 'PUT',\n patch: 'PATCH',\n delete: 'DELETE',\n read: 'GET'\n };\n\n // Set the default implementation of `Backbone.ajax` to proxy through to `$`.\n // Override this if you'd like to use a different library.\n Backbone.ajax = function() {\n return Backbone.$.ajax.apply(Backbone.$, arguments);\n };\n\n // Backbone.Router\n // ---------------\n\n // Routers map faux-URLs to actions, and fire events when routes are\n // matched. Creating a new one sets its `routes` hash, if not set statically.\n var Router = Backbone.Router = function(options) {\n options || (options = {});\n this.preinitialize.apply(this, arguments);\n if (options.routes) this.routes = options.routes;\n this._bindRoutes();\n this.initialize.apply(this, arguments);\n };\n\n // Cached regular expressions for matching named param parts and splatted\n // parts of route strings.\n var optionalParam = /\\((.*?)\\)/g;\n var namedParam = /(\\(\\?)?:\\w+/g;\n var splatParam = /\\*\\w+/g;\n var escapeRegExp = /[\\-{}\\[\\]+?.,\\\\\\^$|#\\s]/g;\n\n // Set up all inheritable **Backbone.Router** properties and methods.\n _.extend(Router.prototype, Events, {\n\n // preinitialize is an empty function by default. You can override it with a function\n // or object. preinitialize will run before any instantiation logic is run in the Router.\n preinitialize: function(){},\n\n // Initialize is an empty function by default. Override it with your own\n // initialization logic.\n initialize: function(){},\n\n // Manually bind a single named route to a callback. For example:\n //\n // this.route('search/:query/p:num', 'search', function(query, num) {\n // ...\n // });\n //\n route: function(route, name, callback) {\n if (!_.isRegExp(route)) route = this._routeToRegExp(route);\n if (_.isFunction(name)) {\n callback = name;\n name = '';\n }\n if (!callback) callback = this[name];\n var router = this;\n Backbone.history.route(route, function(fragment) {\n var args = router._extractParameters(route, fragment);\n if (router.execute(callback, args, name) !== false) {\n router.trigger.apply(router, ['route:' + name].concat(args));\n router.trigger('route', name, args);\n Backbone.history.trigger('route', router, name, args);\n }\n });\n return this;\n },\n\n // Execute a route handler with the provided parameters. This is an\n // excellent place to do pre-route setup or post-route cleanup.\n execute: function(callback, args, name) {\n if (callback) callback.apply(this, args);\n },\n\n // Simple proxy to `Backbone.history` to save a fragment into the history.\n navigate: function(fragment, options) {\n Backbone.history.navigate(fragment, options);\n return this;\n },\n\n // Bind all defined routes to `Backbone.history`. We have to reverse the\n // order of the routes here to support behavior where the most general\n // routes can be defined at the bottom of the route map.\n _bindRoutes: function() {\n if (!this.routes) return;\n this.routes = _.result(this, 'routes');\n var route, routes = _.keys(this.routes);\n while ((route = routes.pop()) != null) {\n this.route(route, this.routes[route]);\n }\n },\n\n // Convert a route string into a regular expression, suitable for matching\n // against the current location hash.\n _routeToRegExp: function(route) {\n route = route.replace(escapeRegExp, '\\\\$&')\n .replace(optionalParam, '(?:$1)?')\n .replace(namedParam, function(match, optional) {\n return optional ? match : '([^/?]+)';\n })\n .replace(splatParam, '([^?]*?)');\n return new RegExp('^' + route + '(?:\\\\?([\\\\s\\\\S]*))?$');\n },\n\n // Given a route, and a URL fragment that it matches, return the array of\n // extracted decoded parameters. Empty or unmatched parameters will be\n // treated as `null` to normalize cross-browser behavior.\n _extractParameters: function(route, fragment) {\n var params = route.exec(fragment).slice(1);\n return _.map(params, function(param, i) {\n // Don't decode the search params.\n if (i === params.length - 1) return param || null;\n return param ? decodeURIComponent(param) : null;\n });\n }\n\n });\n\n // Backbone.History\n // ----------------\n\n // Handles cross-browser history management, based on either\n // [pushState](http://diveintohtml5.info/history.html) and real URLs, or\n // [onhashchange](https://developer.mozilla.org/en-US/docs/DOM/window.onhashchange)\n // and URL fragments. If the browser supports neither (old IE, natch),\n // falls back to polling.\n var History = Backbone.History = function() {\n this.handlers = [];\n this.checkUrl = this.checkUrl.bind(this);\n\n // Ensure that `History` can be used outside of the browser.\n if (typeof window !== 'undefined') {\n this.location = window.location;\n this.history = window.history;\n }\n };\n\n // Cached regex for stripping a leading hash/slash and trailing space.\n var routeStripper = /^[#\\/]|\\s+$/g;\n\n // Cached regex for stripping leading and trailing slashes.\n var rootStripper = /^\\/+|\\/+$/g;\n\n // Cached regex for stripping urls of hash.\n var pathStripper = /#.*$/;\n\n // Has the history handling already been started?\n History.started = false;\n\n // Set up all inheritable **Backbone.History** properties and methods.\n _.extend(History.prototype, Events, {\n\n // The default interval to poll for hash changes, if necessary, is\n // twenty times a second.\n interval: 50,\n\n // Are we at the app root?\n atRoot: function() {\n var path = this.location.pathname.replace(/[^\\/]$/, '$&/');\n return path === this.root && !this.getSearch();\n },\n\n // Does the pathname match the root?\n matchRoot: function() {\n var path = this.decodeFragment(this.location.pathname);\n var rootPath = path.slice(0, this.root.length - 1) + '/';\n return rootPath === this.root;\n },\n\n // Unicode characters in `location.pathname` are percent encoded so they're\n // decoded for comparison. `%25` should not be decoded since it may be part\n // of an encoded parameter.\n decodeFragment: function(fragment) {\n return decodeURI(fragment.replace(/%25/g, '%2525'));\n },\n\n // In IE6, the hash fragment and search params are incorrect if the\n // fragment contains `?`.\n getSearch: function() {\n var match = this.location.href.replace(/#.*/, '').match(/\\?.+/);\n return match ? match[0] : '';\n },\n\n // Gets the true hash value. Cannot use location.hash directly due to bug\n // in Firefox where location.hash will always be decoded.\n getHash: function(window) {\n var match = (window || this).location.href.match(/#(.*)$/);\n return match ? match[1] : '';\n },\n\n // Get the pathname and search params, without the root.\n getPath: function() {\n var path = this.decodeFragment(\n this.location.pathname + this.getSearch()\n ).slice(this.root.length - 1);\n return path.charAt(0) === '/' ? path.slice(1) : path;\n },\n\n // Get the cross-browser normalized URL fragment from the path or hash.\n getFragment: function(fragment) {\n if (fragment == null) {\n if (this._usePushState || !this._wantsHashChange) {\n fragment = this.getPath();\n } else {\n fragment = this.getHash();\n }\n }\n return fragment.replace(routeStripper, '');\n },\n\n // Start the hash change handling, returning `true` if the current URL matches\n // an existing route, and `false` otherwise.\n start: function(options) {\n if (History.started) throw new Error('Backbone.history has already been started');\n History.started = true;\n\n // Figure out the initial configuration. Do we need an iframe?\n // Is pushState desired ... is it available?\n this.options = _.extend({root: '/'}, this.options, options);\n this.root = this.options.root;\n this._wantsHashChange = this.options.hashChange !== false;\n this._hasHashChange = 'onhashchange' in window && (document.documentMode === void 0 || document.documentMode > 7);\n this._useHashChange = this._wantsHashChange && this._hasHashChange;\n this._wantsPushState = !!this.options.pushState;\n this._hasPushState = !!(this.history && this.history.pushState);\n this._usePushState = this._wantsPushState && this._hasPushState;\n this.fragment = this.getFragment();\n\n // Normalize root to always include a leading and trailing slash.\n this.root = ('/' + this.root + '/').replace(rootStripper, '/');\n\n // Transition from hashChange to pushState or vice versa if both are\n // requested.\n if (this._wantsHashChange && this._wantsPushState) {\n\n // If we've started off with a route from a `pushState`-enabled\n // browser, but we're currently in a browser that doesn't support it...\n if (!this._hasPushState && !this.atRoot()) {\n var rootPath = this.root.slice(0, -1) || '/';\n this.location.replace(rootPath + '#' + this.getPath());\n // Return immediately as browser will do redirect to new url\n return true;\n\n // Or if we've started out with a hash-based route, but we're currently\n // in a browser where it could be `pushState`-based instead...\n } else if (this._hasPushState && this.atRoot()) {\n this.navigate(this.getHash(), {replace: true});\n }\n\n }\n\n // Proxy an iframe to handle location events if the browser doesn't\n // support the `hashchange` event, HTML5 history, or the user wants\n // `hashChange` but not `pushState`.\n if (!this._hasHashChange && this._wantsHashChange && !this._usePushState) {\n this.iframe = document.createElement('iframe');\n this.iframe.src = 'javascript:0';\n this.iframe.style.display = 'none';\n this.iframe.tabIndex = -1;\n var body = document.body;\n // Using `appendChild` will throw on IE < 9 if the document is not ready.\n var iWindow = body.insertBefore(this.iframe, body.firstChild).contentWindow;\n iWindow.document.open();\n iWindow.document.close();\n iWindow.location.hash = '#' + this.fragment;\n }\n\n // Add a cross-platform `addEventListener` shim for older browsers.\n var addEventListener = window.addEventListener || function(eventName, listener) {\n return attachEvent('on' + eventName, listener);\n };\n\n // Depending on whether we're using pushState or hashes, and whether\n // 'onhashchange' is supported, determine how we check the URL state.\n if (this._usePushState) {\n addEventListener('popstate', this.checkUrl, false);\n } else if (this._useHashChange && !this.iframe) {\n addEventListener('hashchange', this.checkUrl, false);\n } else if (this._wantsHashChange) {\n this._checkUrlInterval = setInterval(this.checkUrl, this.interval);\n }\n\n if (!this.options.silent) return this.loadUrl();\n },\n\n // Disable Backbone.history, perhaps temporarily. Not useful in a real app,\n // but possibly useful for unit testing Routers.\n stop: function() {\n // Add a cross-platform `removeEventListener` shim for older browsers.\n var removeEventListener = window.removeEventListener || function(eventName, listener) {\n return detachEvent('on' + eventName, listener);\n };\n\n // Remove window listeners.\n if (this._usePushState) {\n removeEventListener('popstate', this.checkUrl, false);\n } else if (this._useHashChange && !this.iframe) {\n removeEventListener('hashchange', this.checkUrl, false);\n }\n\n // Clean up the iframe if necessary.\n if (this.iframe) {\n document.body.removeChild(this.iframe);\n this.iframe = null;\n }\n\n // Some environments will throw when clearing an undefined interval.\n if (this._checkUrlInterval) clearInterval(this._checkUrlInterval);\n History.started = false;\n },\n\n // Add a route to be tested when the fragment changes. Routes added later\n // may override previous routes.\n route: function(route, callback) {\n this.handlers.unshift({route: route, callback: callback});\n },\n\n // Checks the current URL to see if it has changed, and if it has,\n // calls `loadUrl`, normalizing across the hidden iframe.\n checkUrl: function(e) {\n var current = this.getFragment();\n\n // If the user pressed the back button, the iframe's hash will have\n // changed and we should use that for comparison.\n if (current === this.fragment && this.iframe) {\n current = this.getHash(this.iframe.contentWindow);\n }\n\n if (current === this.fragment) return false;\n if (this.iframe) this.navigate(current);\n this.loadUrl();\n },\n\n // Attempt to load the current URL fragment. If a route succeeds with a\n // match, returns `true`. If no defined routes matches the fragment,\n // returns `false`.\n loadUrl: function(fragment) {\n // If the root doesn't match, no routes can match either.\n if (!this.matchRoot()) return false;\n fragment = this.fragment = this.getFragment(fragment);\n return _.some(this.handlers, function(handler) {\n if (handler.route.test(fragment)) {\n handler.callback(fragment);\n return true;\n }\n });\n },\n\n // Save a fragment into the hash history, or replace the URL state if the\n // 'replace' option is passed. You are responsible for properly URL-encoding\n // the fragment in advance.\n //\n // The options object can contain `trigger: true` if you wish to have the\n // route callback be fired (not usually desirable), or `replace: true`, if\n // you wish to modify the current URL without adding an entry to the history.\n navigate: function(fragment, options) {\n if (!History.started) return false;\n if (!options || options === true) options = {trigger: !!options};\n\n // Normalize the fragment.\n fragment = this.getFragment(fragment || '');\n\n // Don't include a trailing slash on the root.\n var rootPath = this.root;\n if (fragment === '' || fragment.charAt(0) === '?') {\n rootPath = rootPath.slice(0, -1) || '/';\n }\n var url = rootPath + fragment;\n\n // Strip the fragment of the query and hash for matching.\n fragment = fragment.replace(pathStripper, '');\n\n // Decode for matching.\n var decodedFragment = this.decodeFragment(fragment);\n\n if (this.fragment === decodedFragment) return;\n this.fragment = decodedFragment;\n\n // If pushState is available, we use it to set the fragment as a real URL.\n if (this._usePushState) {\n this.history[options.replace ? 'replaceState' : 'pushState']({}, document.title, url);\n\n // If hash changes haven't been explicitly disabled, update the hash\n // fragment to store history.\n } else if (this._wantsHashChange) {\n this._updateHash(this.location, fragment, options.replace);\n if (this.iframe && fragment !== this.getHash(this.iframe.contentWindow)) {\n var iWindow = this.iframe.contentWindow;\n\n // Opening and closing the iframe tricks IE7 and earlier to push a\n // history entry on hash-tag change. When replace is true, we don't\n // want this.\n if (!options.replace) {\n iWindow.document.open();\n iWindow.document.close();\n }\n\n this._updateHash(iWindow.location, fragment, options.replace);\n }\n\n // If you've told us that you explicitly don't want fallback hashchange-\n // based history, then `navigate` becomes a page refresh.\n } else {\n return this.location.assign(url);\n }\n if (options.trigger) return this.loadUrl(fragment);\n },\n\n // Update the hash location, either replacing the current entry, or adding\n // a new one to the browser history.\n _updateHash: function(location, fragment, replace) {\n if (replace) {\n var href = location.href.replace(/(javascript:|#).*$/, '');\n location.replace(href + '#' + fragment);\n } else {\n // Some browsers require that `hash` contains a leading #.\n location.hash = '#' + fragment;\n }\n }\n\n });\n\n // Create the default Backbone.history.\n Backbone.history = new History;\n\n // Helpers\n // -------\n\n // Helper function to correctly set up the prototype chain for subclasses.\n // Similar to `goog.inherits`, but uses a hash of prototype properties and\n // class properties to be extended.\n var extend = function(protoProps, staticProps) {\n var parent = this;\n var child;\n\n // The constructor function for the new subclass is either defined by you\n // (the \"constructor\" property in your `extend` definition), or defaulted\n // by us to simply call the parent constructor.\n if (protoProps && _.has(protoProps, 'constructor')) {\n child = protoProps.constructor;\n } else {\n child = function(){ return parent.apply(this, arguments); };\n }\n\n // Add static properties to the constructor function, if supplied.\n _.extend(child, parent, staticProps);\n\n // Set the prototype chain to inherit from `parent`, without calling\n // `parent`'s constructor function and add the prototype properties.\n child.prototype = _.create(parent.prototype, protoProps);\n child.prototype.constructor = child;\n\n // Set a convenience property in case the parent's prototype is needed\n // later.\n child.__super__ = parent.prototype;\n\n return child;\n };\n\n // Set up inheritance for the model, collection, router, view and history.\n Model.extend = Collection.extend = Router.extend = View.extend = History.extend = extend;\n\n // Throw an error when a URL is needed, and none is supplied.\n var urlError = function() {\n throw new Error('A \"url\" property or function must be specified');\n };\n\n // Wrap an optional error callback with a fallback error event.\n var wrapError = function(model, options) {\n var error = options.error;\n options.error = function(resp) {\n if (error) error.call(options.context, model, resp, options);\n model.trigger('error', model, resp, options);\n };\n };\n\n return Backbone;\n});\n","(function (global, factory) {\n if (typeof define === \"function\" && define.amd) {\n define(['module', 'select'], factory);\n } else if (typeof exports !== \"undefined\") {\n factory(module, require('select'));\n } else {\n var mod = {\n exports: {}\n };\n factory(mod, global.select);\n global.clipboardAction = mod.exports;\n }\n})(this, function (module, _select) {\n 'use strict';\n\n var _select2 = _interopRequireDefault(_select);\n\n function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n default: obj\n };\n }\n\n var _typeof = typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\" ? function (obj) {\n return typeof obj;\n } : function (obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n }\n\n var _createClass = function () {\n function defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n }\n\n return function (Constructor, protoProps, staticProps) {\n if (protoProps) defineProperties(Constructor.prototype, protoProps);\n if (staticProps) defineProperties(Constructor, staticProps);\n return Constructor;\n };\n }();\n\n var ClipboardAction = function () {\n /**\n * @param {Object} options\n */\n function ClipboardAction(options) {\n _classCallCheck(this, ClipboardAction);\n\n this.resolveOptions(options);\n this.initSelection();\n }\n\n /**\n * Defines base properties passed from constructor.\n * @param {Object} options\n */\n\n\n _createClass(ClipboardAction, [{\n key: 'resolveOptions',\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n\n this.action = options.action;\n this.container = options.container;\n this.emitter = options.emitter;\n this.target = options.target;\n this.text = options.text;\n this.trigger = options.trigger;\n\n this.selectedText = '';\n }\n }, {\n key: 'initSelection',\n value: function initSelection() {\n if (this.text) {\n this.selectFake();\n } else if (this.target) {\n this.selectTarget();\n }\n }\n }, {\n key: 'selectFake',\n value: function selectFake() {\n var _this = this;\n\n var isRTL = document.documentElement.getAttribute('dir') == 'rtl';\n\n this.removeFake();\n\n this.fakeHandlerCallback = function () {\n return _this.removeFake();\n };\n this.fakeHandler = this.container.addEventListener('click', this.fakeHandlerCallback) || true;\n\n this.fakeElem = document.createElement('textarea');\n // Prevent zooming on iOS\n this.fakeElem.style.fontSize = '12pt';\n // Reset box model\n this.fakeElem.style.border = '0';\n this.fakeElem.style.padding = '0';\n this.fakeElem.style.margin = '0';\n // Move element out of screen horizontally\n this.fakeElem.style.position = 'absolute';\n this.fakeElem.style[isRTL ? 'right' : 'left'] = '-9999px';\n // Move element to the same position vertically\n var yPosition = window.pageYOffset || document.documentElement.scrollTop;\n this.fakeElem.style.top = yPosition + 'px';\n\n this.fakeElem.setAttribute('readonly', '');\n this.fakeElem.value = this.text;\n\n this.container.appendChild(this.fakeElem);\n\n this.selectedText = (0, _select2.default)(this.fakeElem);\n this.copyText();\n }\n }, {\n key: 'removeFake',\n value: function removeFake() {\n if (this.fakeHandler) {\n this.container.removeEventListener('click', this.fakeHandlerCallback);\n this.fakeHandler = null;\n this.fakeHandlerCallback = null;\n }\n\n if (this.fakeElem) {\n this.container.removeChild(this.fakeElem);\n this.fakeElem = null;\n }\n }\n }, {\n key: 'selectTarget',\n value: function selectTarget() {\n this.selectedText = (0, _select2.default)(this.target);\n this.copyText();\n }\n }, {\n key: 'copyText',\n value: function copyText() {\n var succeeded = void 0;\n\n try {\n succeeded = document.execCommand(this.action);\n } catch (err) {\n succeeded = false;\n }\n\n this.handleResult(succeeded);\n }\n }, {\n key: 'handleResult',\n value: function handleResult(succeeded) {\n this.emitter.emit(succeeded ? 'success' : 'error', {\n action: this.action,\n text: this.selectedText,\n trigger: this.trigger,\n clearSelection: this.clearSelection.bind(this)\n });\n }\n }, {\n key: 'clearSelection',\n value: function clearSelection() {\n if (this.trigger) {\n this.trigger.focus();\n }\n\n window.getSelection().removeAllRanges();\n }\n }, {\n key: 'destroy',\n value: function destroy() {\n this.removeFake();\n }\n }, {\n key: 'action',\n set: function set() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 'copy';\n\n this._action = action;\n\n if (this._action !== 'copy' && this._action !== 'cut') {\n throw new Error('Invalid \"action\" value, use either \"copy\" or \"cut\"');\n }\n },\n get: function get() {\n return this._action;\n }\n }, {\n key: 'target',\n set: function set(target) {\n if (target !== undefined) {\n if (target && (typeof target === 'undefined' ? 'undefined' : _typeof(target)) === 'object' && target.nodeType === 1) {\n if (this.action === 'copy' && target.hasAttribute('disabled')) {\n throw new Error('Invalid \"target\" attribute. Please use \"readonly\" instead of \"disabled\" attribute');\n }\n\n if (this.action === 'cut' && (target.hasAttribute('readonly') || target.hasAttribute('disabled'))) {\n throw new Error('Invalid \"target\" attribute. You can\\'t cut text from elements with \"readonly\" or \"disabled\" attributes');\n }\n\n this._target = target;\n } else {\n throw new Error('Invalid \"target\" value, use a valid Element');\n }\n }\n },\n get: function get() {\n return this._target;\n }\n }]);\n\n return ClipboardAction;\n }();\n\n module.exports = ClipboardAction;\n});","(function (global, factory) {\n if (typeof define === \"function\" && define.amd) {\n define(['module', './clipboard-action', 'tiny-emitter', 'good-listener'], factory);\n } else if (typeof exports !== \"undefined\") {\n factory(module, require('./clipboard-action'), require('tiny-emitter'), require('good-listener'));\n } else {\n var mod = {\n exports: {}\n };\n factory(mod, global.clipboardAction, global.tinyEmitter, global.goodListener);\n global.clipboard = mod.exports;\n }\n})(this, function (module, _clipboardAction, _tinyEmitter, _goodListener) {\n 'use strict';\n\n var _clipboardAction2 = _interopRequireDefault(_clipboardAction);\n\n var _tinyEmitter2 = _interopRequireDefault(_tinyEmitter);\n\n var _goodListener2 = _interopRequireDefault(_goodListener);\n\n function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n default: obj\n };\n }\n\n var _typeof = typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\" ? function (obj) {\n return typeof obj;\n } : function (obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n }\n\n var _createClass = function () {\n function defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n }\n\n return function (Constructor, protoProps, staticProps) {\n if (protoProps) defineProperties(Constructor.prototype, protoProps);\n if (staticProps) defineProperties(Constructor, staticProps);\n return Constructor;\n };\n }();\n\n function _possibleConstructorReturn(self, call) {\n if (!self) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return call && (typeof call === \"object\" || typeof call === \"function\") ? call : self;\n }\n\n function _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function, not \" + typeof superClass);\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n enumerable: false,\n writable: true,\n configurable: true\n }\n });\n if (superClass) Object.setPrototypeOf ? Object.setPrototypeOf(subClass, superClass) : subClass.__proto__ = superClass;\n }\n\n var Clipboard = function (_Emitter) {\n _inherits(Clipboard, _Emitter);\n\n /**\n * @param {String|HTMLElement|HTMLCollection|NodeList} trigger\n * @param {Object} options\n */\n function Clipboard(trigger, options) {\n _classCallCheck(this, Clipboard);\n\n var _this = _possibleConstructorReturn(this, (Clipboard.__proto__ || Object.getPrototypeOf(Clipboard)).call(this));\n\n _this.resolveOptions(options);\n _this.listenClick(trigger);\n return _this;\n }\n\n /**\n * Defines if attributes would be resolved using internal setter functions\n * or custom functions that were passed in the constructor.\n * @param {Object} options\n */\n\n\n _createClass(Clipboard, [{\n key: 'resolveOptions',\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n\n this.action = typeof options.action === 'function' ? options.action : this.defaultAction;\n this.target = typeof options.target === 'function' ? options.target : this.defaultTarget;\n this.text = typeof options.text === 'function' ? options.text : this.defaultText;\n this.container = _typeof(options.container) === 'object' ? options.container : document.body;\n }\n }, {\n key: 'listenClick',\n value: function listenClick(trigger) {\n var _this2 = this;\n\n this.listener = (0, _goodListener2.default)(trigger, 'click', function (e) {\n return _this2.onClick(e);\n });\n }\n }, {\n key: 'onClick',\n value: function onClick(e) {\n var trigger = e.delegateTarget || e.currentTarget;\n\n if (this.clipboardAction) {\n this.clipboardAction = null;\n }\n\n this.clipboardAction = new _clipboardAction2.default({\n action: this.action(trigger),\n target: this.target(trigger),\n text: this.text(trigger),\n container: this.container,\n trigger: trigger,\n emitter: this\n });\n }\n }, {\n key: 'defaultAction',\n value: function defaultAction(trigger) {\n return getAttributeValue('action', trigger);\n }\n }, {\n key: 'defaultTarget',\n value: function defaultTarget(trigger) {\n var selector = getAttributeValue('target', trigger);\n\n if (selector) {\n return document.querySelector(selector);\n }\n }\n }, {\n key: 'defaultText',\n value: function defaultText(trigger) {\n return getAttributeValue('text', trigger);\n }\n }, {\n key: 'destroy',\n value: function destroy() {\n this.listener.destroy();\n\n if (this.clipboardAction) {\n this.clipboardAction.destroy();\n this.clipboardAction = null;\n }\n }\n }], [{\n key: 'isSupported',\n value: function isSupported() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : ['copy', 'cut'];\n\n var actions = typeof action === 'string' ? [action] : action;\n var support = !!document.queryCommandSupported;\n\n actions.forEach(function (action) {\n support = support && !!document.queryCommandSupported(action);\n });\n\n return support;\n }\n }]);\n\n return Clipboard;\n }(_tinyEmitter2.default);\n\n /**\n * Helper function to retrieve attribute value.\n * @param {String} suffix\n * @param {Element} element\n */\n function getAttributeValue(suffix, element) {\n var attribute = 'data-clipboard-' + suffix;\n\n if (!element.hasAttribute(attribute)) {\n return;\n }\n\n return element.getAttribute(attribute);\n }\n\n module.exports = Clipboard;\n});","var DOCUMENT_NODE_TYPE = 9;\n\n/**\n * A polyfill for Element.matches()\n */\nif (typeof Element !== 'undefined' && !Element.prototype.matches) {\n var proto = Element.prototype;\n\n proto.matches = proto.matchesSelector ||\n proto.mozMatchesSelector ||\n proto.msMatchesSelector ||\n proto.oMatchesSelector ||\n proto.webkitMatchesSelector;\n}\n\n/**\n * Finds the closest parent that matches a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @return {Function}\n */\nfunction closest (element, selector) {\n while (element && element.nodeType !== DOCUMENT_NODE_TYPE) {\n if (typeof element.matches === 'function' &&\n element.matches(selector)) {\n return element;\n }\n element = element.parentNode;\n }\n}\n\nmodule.exports = closest;\n","var closest = require('./closest');\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction _delegate(element, selector, type, callback, useCapture) {\n var listenerFn = listener.apply(this, arguments);\n\n element.addEventListener(type, listenerFn, useCapture);\n\n return {\n destroy: function() {\n element.removeEventListener(type, listenerFn, useCapture);\n }\n }\n}\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element|String|Array} [elements]\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction delegate(elements, selector, type, callback, useCapture) {\n // Handle the regular Element usage\n if (typeof elements.addEventListener === 'function') {\n return _delegate.apply(null, arguments);\n }\n\n // Handle Element-less usage, it defaults to global delegation\n if (typeof type === 'function') {\n // Use `document` as the first parameter, then apply arguments\n // This is a short way to .unshift `arguments` without running into deoptimizations\n return _delegate.bind(null, document).apply(null, arguments);\n }\n\n // Handle Selector-based usage\n if (typeof elements === 'string') {\n elements = document.querySelectorAll(elements);\n }\n\n // Handle Array-like based usage\n return Array.prototype.map.call(elements, function (element) {\n return _delegate(element, selector, type, callback, useCapture);\n });\n}\n\n/**\n * Finds closest match and invokes callback.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Function}\n */\nfunction listener(element, selector, type, callback) {\n return function(e) {\n e.delegateTarget = closest(e.target, selector);\n\n if (e.delegateTarget) {\n callback.call(element, e);\n }\n }\n}\n\nmodule.exports = delegate;\n","/**\n * Check if argument is a HTML element.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.node = function(value) {\n return value !== undefined\n && value instanceof HTMLElement\n && value.nodeType === 1;\n};\n\n/**\n * Check if argument is a list of HTML elements.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.nodeList = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return value !== undefined\n && (type === '[object NodeList]' || type === '[object HTMLCollection]')\n && ('length' in value)\n && (value.length === 0 || exports.node(value[0]));\n};\n\n/**\n * Check if argument is a string.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.string = function(value) {\n return typeof value === 'string'\n || value instanceof String;\n};\n\n/**\n * Check if argument is a function.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.fn = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return type === '[object Function]';\n};\n","var is = require('./is');\nvar delegate = require('delegate');\n\n/**\n * Validates all params and calls the right\n * listener function based on its target type.\n *\n * @param {String|HTMLElement|HTMLCollection|NodeList} target\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listen(target, type, callback) {\n if (!target && !type && !callback) {\n throw new Error('Missing required arguments');\n }\n\n if (!is.string(type)) {\n throw new TypeError('Second argument must be a String');\n }\n\n if (!is.fn(callback)) {\n throw new TypeError('Third argument must be a Function');\n }\n\n if (is.node(target)) {\n return listenNode(target, type, callback);\n }\n else if (is.nodeList(target)) {\n return listenNodeList(target, type, callback);\n }\n else if (is.string(target)) {\n return listenSelector(target, type, callback);\n }\n else {\n throw new TypeError('First argument must be a String, HTMLElement, HTMLCollection, or NodeList');\n }\n}\n\n/**\n * Adds an event listener to a HTML element\n * and returns a remove listener function.\n *\n * @param {HTMLElement} node\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNode(node, type, callback) {\n node.addEventListener(type, callback);\n\n return {\n destroy: function() {\n node.removeEventListener(type, callback);\n }\n }\n}\n\n/**\n * Add an event listener to a list of HTML elements\n * and returns a remove listener function.\n *\n * @param {NodeList|HTMLCollection} nodeList\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNodeList(nodeList, type, callback) {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.addEventListener(type, callback);\n });\n\n return {\n destroy: function() {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.removeEventListener(type, callback);\n });\n }\n }\n}\n\n/**\n * Add an event listener to a selector\n * and returns a remove listener function.\n *\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenSelector(selector, type, callback) {\n return delegate(document.body, selector, type, callback);\n}\n\nmodule.exports = listen;\n","function select(element) {\n var selectedText;\n\n if (element.nodeName === 'SELECT') {\n element.focus();\n\n selectedText = element.value;\n }\n else if (element.nodeName === 'INPUT' || element.nodeName === 'TEXTAREA') {\n var isReadOnly = element.hasAttribute('readonly');\n\n if (!isReadOnly) {\n element.setAttribute('readonly', '');\n }\n\n element.select();\n element.setSelectionRange(0, element.value.length);\n\n if (!isReadOnly) {\n element.removeAttribute('readonly');\n }\n\n selectedText = element.value;\n }\n else {\n if (element.hasAttribute('contenteditable')) {\n element.focus();\n }\n\n var selection = window.getSelection();\n var range = document.createRange();\n\n range.selectNodeContents(element);\n selection.removeAllRanges();\n selection.addRange(range);\n\n selectedText = selection.toString();\n }\n\n return selectedText;\n}\n\nmodule.exports = select;\n","function E () {\n // Keep this empty so it's easier to inherit from\n // (via https://github.com/lipsmack from https://github.com/scottcorgan/tiny-emitter/issues/3)\n}\n\nE.prototype = {\n on: function (name, callback, ctx) {\n var e = this.e || (this.e = {});\n\n (e[name] || (e[name] = [])).push({\n fn: callback,\n ctx: ctx\n });\n\n return this;\n },\n\n once: function (name, callback, ctx) {\n var self = this;\n function listener () {\n self.off(name, listener);\n callback.apply(ctx, arguments);\n };\n\n listener._ = callback\n return this.on(name, listener, ctx);\n },\n\n emit: function (name) {\n var data = [].slice.call(arguments, 1);\n var evtArr = ((this.e || (this.e = {}))[name] || []).slice();\n var i = 0;\n var len = evtArr.length;\n\n for (i; i < len; i++) {\n evtArr[i].fn.apply(evtArr[i].ctx, data);\n }\n\n return this;\n },\n\n off: function (name, callback) {\n var e = this.e || (this.e = {});\n var evts = e[name];\n var liveEvents = [];\n\n if (evts && callback) {\n for (var i = 0, len = evts.length; i < len; i++) {\n if (evts[i].fn !== callback && evts[i].fn._ !== callback)\n liveEvents.push(evts[i]);\n }\n }\n\n // Remove event from queue to prevent memory leak\n // Suggested by https://github.com/lazd\n // Ref: https://github.com/scottcorgan/tiny-emitter/commit/c6ebfaa9bc973b33d110a84a307742b7cf94c953#commitcomment-5024910\n\n (liveEvents.length)\n ? e[name] = liveEvents\n : delete e[name];\n\n return this;\n }\n};\n\nmodule.exports = E;\nmodule.exports.TinyEmitter = E;\n","module.exports = require(\"handlebars\");","module.exports = require(\"handlebars/runtime\");","module.exports = require(\"jquery\");","module.exports = require(\"okta-i18n-bundles\");","module.exports = require(\"qtip\");","module.exports = require(\"underscore\");","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId].call(module.exports, module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = function(module) {\n\tvar getter = module && module.__esModule ?\n\t\tfunction() { return module['default']; } :\n\t\tfunction() { return module; };\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = function(exports, definition) {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.g = (function() {\n\tif (typeof globalThis === 'object') return globalThis;\n\ttry {\n\t\treturn this || new Function('return this')();\n\t} catch (e) {\n\t\tif (typeof window === 'object') return window;\n\t}\n})();","__webpack_require__.o = function(obj, prop) { return Object.prototype.hasOwnProperty.call(obj, prop); }","// define __esModule on exports\n__webpack_require__.r = function(exports) {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","import BaseCollection from './courage/models/BaseCollection';\nimport BaseModel from './courage/models/BaseModel';\nimport BaseSchema from './courage/models/BaseSchema';\nimport Model from './courage/models/Model';\nimport SchemaProperty from './courage/models/SchemaProperty';\nimport BaseController from './courage/util/BaseController';\nimport BaseRouter from './courage/util/BaseRouter';\nimport ButtonFactory from './courage/util/ButtonFactory';\nimport Class from './courage/util/Class';\nimport Cookie from './courage/util/Cookie';\nimport Clipboard from './courage/util/Clipboard';\nimport Keys from './courage/util/Keys';\nimport Logger from './courage/util/Logger';\nimport StringUtil from './courage/util/StringUtil';\nimport Util from './courage/util/Util';\nimport Handlebars from './courage/util/handlebars-wrapper';\nimport $ from './courage/util/jquery-wrapper';\nimport _ from './courage/util/underscore-wrapper';\nimport ListView from './courage/views/Backbone.ListView';\nimport BaseView from './courage/views/BaseView';\nimport BaseDropDown from './courage/views/components/BaseDropDown';\nimport Notification from './courage/views/components/Notification';\nimport BaseForm from './courage/views/forms/BaseForm';\nimport Toolbar from './courage/views/forms/components/Toolbar';\nimport FormUtil from './courage/views/forms/helpers/FormUtil';\nimport InputRegistry from './courage/views/forms/helpers/InputRegistry';\nimport SchemaFormFactory from './courage/views/forms/helpers/SchemaFormFactory';\nimport CheckBox from './courage/views/forms/inputs/CheckBox';\nimport PasswordBox from './courage/views/forms/inputs/PasswordBox';\nimport Radio from './courage/views/forms/inputs/Radio';\nimport Select from './courage/views/forms/inputs/Select';\nimport InputGroup from './courage/views/forms/inputs/InputGroup';\nimport TextBox from './courage/views/forms/inputs/TextBox';\nimport Callout from './courage/views/components/Callout';\nimport Backbone from 'backbone';\n\nimport FrameworkView from './courage/framework/View';\n\nimport './util/scrollParent';\n\n// The string will be returned unchanged. All templates should be precompiled.\nFrameworkView.prototype.compileTemplate = function(str) {\n const compiledTmpl = function fakeTemplate() {\n return str;\n };\n compiledTmpl.source = ''; // to satisfy TS\n return compiledTmpl;\n};\n\n// Override events to not support `Enter` submitting the form twice - OKTA-321999 and OKTA-317629\nconst events = {\n 'input input': 'update',\n 'change input': 'update',\n 'keydown input': 'update',\n 'keyup input': function (e) {\n if (Keys.isEsc(e)) {\n this.model.trigger('form:cancel');\n }\n }\n};\nconst TextBoxForSigninWidget = TextBox.extend({ events });\nconst PasswordBoxForSigninWidget = PasswordBox.extend({ events });\n\nconst Form = BaseForm.extend({\n scrollOnError() {\n // scrollOnError is true by default. Override to false if `scrollOnError` has been set to false in widget settings.\n const { settings } = this.options;\n if (settings.get('features.scrollOnError') === false) {\n return false;\n }\n return true;\n }\n});\n\nconst loc = StringUtil.localize;\nconst createButton = ButtonFactory.create;\nconst createCallout = Callout.create;\nconst registerInput = InputRegistry.register;\nconst Collection = BaseCollection;\nconst View = BaseView;\nconst Router = BaseRouter;\nconst Controller = BaseController;\n\nexport interface Internal {\n util: any;\n views: {\n components: any;\n forms: {\n helpers: any;\n components: any;\n inputs: any;\n }\n },\n models: any;\n}\nconst internal: Internal = {\n util: {\n Util,\n Cookie,\n Clipboard,\n Logger,\n Class,\n Keys,\n },\n\n views: {\n components: {\n BaseDropDown,\n Notification,\n },\n\n forms: {\n helpers: {\n FormUtil,\n SchemaFormFactory,\n },\n\n components: {\n Toolbar,\n },\n\n inputs: {\n TextBox: TextBoxForSigninWidget,\n PasswordBox: PasswordBoxForSigninWidget,\n CheckBox,\n Radio,\n Select,\n InputGroup,\n },\n },\n },\n\n models: {\n BaseSchema,\n SchemaProperty,\n },\n};\n\nregisterInput('text', TextBoxForSigninWidget);\nregisterInput('password', PasswordBoxForSigninWidget);\nregisterInput('checkbox', CheckBox);\nregisterInput('radio', Radio);\nregisterInput('select', Select);\nregisterInput('group', InputGroup);\n\nexport {\n Backbone,\n\n $,\n\n _,\n\n Handlebars,\n\n loc,\n\n createButton,\n\n createCallout,\n\n registerInput,\n\n Model,\n\n // TODO: BaseModel has been deprecated and shall not be public\n // remove this once clean up usage in widget.\n BaseModel,\n\n Collection,\n\n FrameworkView,\n\n View,\n\n ListView,\n\n Router,\n\n Controller,\n\n Form,\n\n internal,\n};\n\n// Additional type exports\nexport * from './courage/views/forms/types';\nexport * from './courage/framework/Model';\nexport * from './courage/models/Model';\nexport * from './courage/util/BaseRouter';\nexport * from './courage/util/SettingsModel';\nexport * from './courage/util/jquery-wrapper';\nexport * from './courage/util/underscore-wrapper';\n","/*\n * Checking in as there is no npm module to consume. \n * Current version is 2.15.\n * Repo - https://github.com/TypingDNA/TypingDnaRecorder-JavaScript\n */\n\n/**\n * TypingDNA - Typing Biometrics JavaScript API\n * https://api.typingdna.com/scripts/typingdna.js\n * https://typingdna.com/scripts/typingdna.js (alternative)\n *\n * @version 2.15\n * @author Raul Popa\n * @copyright SC TypingDNA SRL, http://typingdna.com\n * @license http://www.apache.org/licenses/LICENSE-2.0\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n * Typical usage:\n * var tdna = new TypingDNA(); // creates a new TypingDNA object and starts recording\n * var typingPattern = tdna.getTypingPattern({type=1, text=\"Hello5g21?*\"});\n * returns a type 1 typing pattern (and continues recording afterwards)\n *\n * Optional:\n * tdna.stop(); // ends recording and clears history stack (returns recording flag: false)\n * tdna.start(); // restarts the recording after a stop (returns recording flag: true)\n * tdna.reset(); // restarts the recording anytime, clears history stack and starts from scratch (returns nothing)\n * var typingPatternQuality = TypingDNA.getQuality(typingPattern); //returns the quality/strength of any typing pattern\n * (there is no need to initialize the class to do pattern quality checking)\n */\n\n/**\n * Creates a single instance (or a reference) of the TypingDNA class\n * @return {Object} Returns the single instance of the TypingDNA class.\n * @example var tdna = new TypingDNA();\n */\nmodule.exports = function TypingDNA() {\n if (TypingDNA.initialized != true) {\n TypingDNA.prototype.start = function() {\n return TypingDNA.start.apply(this, arguments);\n }\n TypingDNA.prototype.stop = function() {\n return TypingDNA.stop.apply(this, arguments);\n }\n TypingDNA.prototype.reset = function() {\n return TypingDNA.reset.apply(this, arguments);\n }\n TypingDNA.prototype.addTarget = function() {\n return TypingDNA.addTarget.apply(this, arguments);\n }\n TypingDNA.prototype.removeTarget = function() {\n return TypingDNA.removeTarget.apply(this, arguments);\n }\n TypingDNA.prototype.getTypingPattern = function() {\n return TypingDNA.getTypingPattern.apply(this, arguments);\n }\n TypingDNA.prototype.get = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.get.apply(this, arguments);\n }\n TypingDNA.prototype.startDiagram = function() {\n // deprecated in favor of start()\n //return TypingDNA.startDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.stopDiagram = function() {\n // deprecated in favor of stop()\n //return TypingDNA.stopDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getDiagram = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.getDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getExtendedDiagram = function() {\n // still works but will be deprecated in favor of getTypignPattern()\n return TypingDNA.getExtendedDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.getMouseDiagram = function() {\n return TypingDNA.getMouseDiagram.apply(this, arguments);\n }\n TypingDNA.prototype.startMouse = function() {\n return TypingDNA.startMouse.apply(this, arguments);\n }\n TypingDNA.prototype.stopMouse = function() {\n return TypingDNA.stopMouse.apply(this, arguments);\n }\n TypingDNA.prototype.getQuality = function() {\n return TypingDNA.getQuality.apply(this, arguments);\n }\n TypingDNA.prototype.getLength = function() {\n return TypingDNA.getLength.apply(this, arguments);\n }\n TypingDNA.prototype.isMobile = function() {\n return TypingDNA.isMobile.apply(this, arguments);\n }\n TypingDNA.prototype.getTextId = function() {\n return TypingDNA.getTextId.apply(this, arguments)\n }\n TypingDNA.initialized = true;\n TypingDNA.prototype.maxHistoryLength = TypingDNA.maxHistoryLength;\n TypingDNA.prototype.defaultHistoryLength = TypingDNA.defaultHistoryLength;\n TypingDNA.prototype.maxSeekTime = TypingDNA.maxSeekTime;\n TypingDNA.prototype.maxPressTime = TypingDNA.maxPressTime;\n TypingDNA.version = 2.15;\n TypingDNA.flags = 0;\n TypingDNA.instance = this;\n TypingDNA.document = document;\n TypingDNA.maxHistoryLength = 2000;\n TypingDNA.maxSeekTime = 1500;\n TypingDNA.maxPressTime = 300;\n TypingDNA.defaultHistoryLength = 160;\n TypingDNA.spKeyCodes = [8, 13, 32];\n TypingDNA.spKeyCodesObj = {\n 8: 1,\n 13: 1,\n 32: 1\n };\n TypingDNA.keyCodes = [65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 32, 222, 188, 190, 186, 187, 189, 191, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57];\n TypingDNA.keyCodesObj = {}\n for (var i in TypingDNA.keyCodes) {\n TypingDNA.keyCodesObj[TypingDNA.keyCodes[i]] = 1;\n }\n TypingDNA.pt1 = TypingDNA.ut1 = (new Date).getTime();\n TypingDNA.wfk = [];\n TypingDNA.sti = [];\n TypingDNA.skt = [];\n TypingDNA.recording = true;\n TypingDNA.mouseRecording = true;\n TypingDNA.mouseMoveRecording = false;\n TypingDNA.spKeyRecording = true;\n TypingDNA.diagramRecording = true;\n TypingDNA.dwfk = [];\n TypingDNA.dsti = [];\n TypingDNA.dskt = [];\n TypingDNA.drkc = [];\n TypingDNA.dlastDownKey;\n TypingDNA.prevKeyCode = 0;\n TypingDNA.maxMoveDeltaTime = 600;\n TypingDNA.maxScrollDeltaTime = 800;\n TypingDNA.maxStopTime = 1500;\n TypingDNA.maxClickTime = 600;\n TypingDNA.maxMouseHistoryLength = 500;\n TypingDNA.lastMouseMoveTime = TypingDNA.lastMouseDownTime = (new Date).getTime();\n TypingDNA.stopTimes = [];\n TypingDNA.clickTimes = [];\n TypingDNA.lastMouseStop = true;\n TypingDNA.zl = 0.0000001;\n TypingDNA.isAndroidChrome = false;\n TypingDNA.ACLastTime = (new Date).getTime();\n TypingDNA.ACSeekTime = 0;\n TypingDNA.ACPressTime = 0;\n TypingDNA.ACLastCharCode = 0;\n TypingDNA.ACLastKeyCode = 0;\n TypingDNA.ACInputLengths = {\n inputs: [],\n lastLength: [],\n };\n TypingDNA.ACPreviousKeyCode = 0;\n TypingDNA.targetIds = [];\n TypingDNA.lastTarget = \"\";\n TypingDNA.lastTargetFound = false;\n TypingDNA.replaceMissingKeys = true;\n TypingDNA.replaceMissingKeysPerc = 7;\n\n TypingDNA.keyDown = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var keyCode = e.keyCode;\n if (TypingDNA.wfk[keyCode] == 1 || TypingDNA.dwfk[keyCode] == 1) {\n //return;\n }\n if (keyCode == 229 && TypingDNA.isMobile() && !TypingDNA.isAndroidChrome) {\n TypingDNA.isAndroidChrome = true;\n\n TypingDNA.ACSeekTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n\n TypingDNA.document.removeEventListener(\"keydown\", TypingDNA.keyDown);\n TypingDNA.document.removeEventListener(\"keyup\", TypingDNA.keyUp);\n TypingDNA.document.removeEventListener(\"keypress\", TypingDNA.keyPress);\n\n // if android\n TypingDNA.document.addEventListener(\"keydown\", TypingDNA.ACKeyDown);\n TypingDNA.document.addEventListener(\"keyup\", TypingDNA.ACKeyUp);\n } else {\n var t0 = TypingDNA.pt1;\n TypingDNA.pt1 = (new Date).getTime();\n var seekTotal = TypingDNA.pt1 - t0;\n var startTime = TypingDNA.pt1;\n if (TypingDNA.recording == true || (TypingDNA.spKeyCodesObj[keyCode] && TypingDNA.spKeyRecording == true)) {\n if (!e.shiftKey || TypingDNA.isMobile()) {\n TypingDNA.wfk[keyCode] = 1;\n TypingDNA.skt[keyCode] = seekTotal;\n TypingDNA.sti[keyCode] = startTime;\n }\n }\n if (TypingDNA.diagramRecording == true) {\n TypingDNA.dwfk[keyCode] = 1;\n TypingDNA.dskt[keyCode] = seekTotal;\n TypingDNA.dsti[keyCode] = startTime;\n TypingDNA.dlastDownKey = keyCode;\n }\n }\n }\n\n TypingDNA.keyPress = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n if (TypingDNA.diagramRecording == true) {\n var keyCode = TypingDNA.dlastDownKey;\n TypingDNA.drkc[keyCode] = e.charCode;\n }\n }\n\n TypingDNA.keyUp = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var ut = (new Date).getTime();\n var keyCode = e.keyCode;\n if (TypingDNA.recording == true || (TypingDNA.spKeyCodesObj[keyCode] && TypingDNA.spKeyRecording == true)) {\n if (!e.shiftKey || TypingDNA.isMobile()) {\n if (TypingDNA.wfk[keyCode] == 1) {\n var pressTime = ut - TypingDNA.sti[keyCode];\n var seekTime = TypingDNA.skt[keyCode];\n var arr = [keyCode, seekTime, pressTime, TypingDNA.prevKeyCode, ut, e.target.id];\n TypingDNA.history.add(arr);\n TypingDNA.prevKeyCode = keyCode;\n }\n }\n TypingDNA.wfk[keyCode] = 0;\n }\n if (TypingDNA.diagramRecording == true) {\n if (TypingDNA.drkc[keyCode] != undefined && TypingDNA.drkc[keyCode] != 0) {\n if (TypingDNA.dwfk[keyCode] == 1) {\n var pressTime = ut - TypingDNA.dsti[keyCode];\n var seekTime = TypingDNA.dskt[keyCode];\n var realKeyCode = TypingDNA.drkc[keyCode];\n var arrD = [keyCode, seekTime, pressTime, realKeyCode, ut, e.target.id];\n TypingDNA.history.addDiagram(arrD);\n }\n }\n TypingDNA.dwfk[keyCode] = 0;\n }\n }\n\n TypingDNA.mouseScroll = function(e) {\n if (TypingDNA.mouseRecording == true) {\n if (TypingDNA.mouseMoveRecording == true) {\n if (TypingDNA.mouse.scrollStarted == true) {\n var currentTime = (new Date).getTime();\n TypingDNA.mouse.scrollTimes.push(currentTime);\n TypingDNA.mouse.scrollTopArr.push(TypingDNA.document.body.scrollTop);\n clearInterval(TypingDNA.scrollInterval);\n TypingDNA.scrollInterval = setInterval(TypingDNA.mouse.checkScroll, TypingDNA.maxScrollDeltaTime);\n } else {\n TypingDNA.mouse.scrollStarted = true\n }\n }\n }\n }\n\n TypingDNA.mouseMove = function(e) {\n if (TypingDNA.mouseRecording == true) {\n var currentTime = (new Date).getTime();\n if (TypingDNA.mouseMoveRecording == true) {\n if (TypingDNA.mouse.started == true) {\n TypingDNA.mouse.times.push(currentTime);\n TypingDNA.mouse.xPositions.push(e.screenX);\n TypingDNA.mouse.yPositions.push(e.screenY);\n clearInterval(TypingDNA.moveInterval);\n TypingDNA.moveInterval = setInterval(TypingDNA.mouse.checkMove, TypingDNA.maxMoveDeltaTime);\n } else {\n TypingDNA.mouse.started = true;\n }\n }\n TypingDNA.lastMouseMoveTime = currentTime;\n }\n }\n\n TypingDNA.mouseDown = function(e) {\n if (TypingDNA.mouseRecording == true) {\n TypingDNA.mouse.checkMove();\n TypingDNA.mouse.checkScroll();\n if (e.which == 1) {\n TypingDNA.lastMouseDownTime = (new Date).getTime();\n var stopTime = TypingDNA.lastMouseDownTime - TypingDNA.lastMouseMoveTime;\n if (stopTime < TypingDNA.maxStopTime && TypingDNA.lastMouseStop == false) {\n TypingDNA.stopTimes.push(stopTime);\n if (TypingDNA.mouseMoveRecording == true) {\n var eventType = 3;\n var arr = [eventType, stopTime];\n TypingDNA.mouse.history.add(arr);\n TypingDNA.lastMouseStop = true;\n }\n }\n }\n }\n }\n\n TypingDNA.mouseUp = function(e) {\n if (TypingDNA.mouseRecording == true) {\n if (e.which == 1) {\n var clickTime = (new Date).getTime() - TypingDNA.lastMouseDownTime;\n if (clickTime < TypingDNA.maxClickTime && TypingDNA.lastMouseDownTime > TypingDNA.lastMouseMoveTime) {\n TypingDNA.clickTimes.push(clickTime);\n if (TypingDNA.mouseMoveRecording == true) {\n var eventType = 4;\n var arr = [eventType, clickTime];\n TypingDNA.mouse.history.add(arr);\n }\n }\n }\n }\n }\n\n TypingDNA.ACKeyDown = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n TypingDNA.ACSeekTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n if(TypingDNA.ACInputLengths.inputs.indexOf(e.target) === -1) {\n TypingDNA.ACInputLengths.inputs.push(e.target);\n TypingDNA.ACInputLengths.lastLength.push(0);\n }\n }\n\n TypingDNA.ACKeyUp = function(e) {\n if (!TypingDNA.recording && !TypingDNA.diagramRecording) {\n return;\n }\n TypingDNA.ACPressTime = (new Date).getTime() - TypingDNA.ACLastTime;\n TypingDNA.ACLastTime = (new Date).getTime();\n if (!TypingDNA.isTarget(e.target.id)) {\n return;\n }\n var keyCode = e.keyCode;\n var targetIndex = TypingDNA.ACInputLengths.inputs.indexOf(e.target);\n if(targetIndex === -1) {\n TypingDNA.ACInputLengths.inputs.push(e.target);\n TypingDNA.ACInputLengths.lastLength.push(0);\n targetIndex = TypingDNA.ACInputLengths.inputs.indexOf(e.target);\n }\n if (keyCode == 229 && e.target.value.length >= TypingDNA.ACInputLengths.lastLength[targetIndex]) {\n var char = e.target.value.substr((e.target.selectionStart - 1) || 0 , 1);\n keyCode = char.toUpperCase().charCodeAt(0);\n TypingDNA.ACLastCharCode = char.charCodeAt(0);\n TypingDNA.ACLastKeyCode = char.toUpperCase().charCodeAt(0);\n }\n TypingDNA.ACInputLengths.lastLength[targetIndex] = e.target.value.length;\n var arr = [keyCode, TypingDNA.ACSeekTime, TypingDNA.ACPressTime, TypingDNA.ACPreviousKeyCode, TypingDNA.ACLastTime];\n TypingDNA.history.add(arr);\n TypingDNA.ACPreviousKeyCode = keyCode;\n if (TypingDNA.diagramRecording == true ) {\n var arrD = [keyCode, TypingDNA.ACSeekTime, TypingDNA.ACPressTime, TypingDNA.ACLastCharCode];\n TypingDNA.history.addDiagram(arrD);\n }\n }\n\n TypingDNA.isTarget = function(target) {\n if (TypingDNA.lastTarget == target && TypingDNA.lastTargetFound) {\n return true;\n } else {\n var targetLength = TypingDNA.targetIds.length;\n var targetFound = false;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n targetFound = true;\n break;\n }\n }\n TypingDNA.lastTarget = target;\n TypingDNA.lastTargetFound = targetFound;\n return targetFound;\n } else {\n TypingDNA.lastTarget = target;\n TypingDNA.lastTargetFound = true;\n return true;\n }\n }\n }\n\n if (TypingDNA.document.addEventListener) {\n TypingDNA.document.addEventListener(\"keydown\", TypingDNA.keyDown);\n TypingDNA.document.addEventListener(\"keyup\", TypingDNA.keyUp);\n TypingDNA.document.addEventListener(\"keypress\", TypingDNA.keyPress);\n TypingDNA.document.addEventListener(\"mousemove\", TypingDNA.mouseMove);\n TypingDNA.document.addEventListener(\"mousedown\", TypingDNA.mouseDown);\n TypingDNA.document.addEventListener(\"mouseup\", TypingDNA.mouseUp);\n TypingDNA.document.addEventListener(\"scroll\", TypingDNA.mouseScroll);\n } else if (TypingDNA.document.attachEvent) {\n TypingDNA.document.attachEvent(\"onkeydown\", TypingDNA.keyDown);\n TypingDNA.document.attachEvent(\"onkeyup\", TypingDNA.keyUp);\n TypingDNA.document.attachEvent(\"onkeypress\", TypingDNA.keyPress);\n TypingDNA.document.attachEvent(\"onmousemove\", TypingDNA.mouseMove);\n TypingDNA.document.attachEvent(\"onmousedown\", TypingDNA.mouseDown);\n TypingDNA.document.attachEvent(\"onmouseup\", TypingDNA.mouseUp);\n TypingDNA.document.attachEvent(\"onscroll\", TypingDNA.mouseScroll);\n } else {\n console.log(\"browser not supported\");\n }\n\n TypingDNA.mouse = {};\n TypingDNA.mouse.times = [];\n TypingDNA.mouse.xPositions = [];\n TypingDNA.mouse.yPositions = [];\n TypingDNA.mouse.scrollTimes = [];\n TypingDNA.mouse.scrollTopArr = [];\n TypingDNA.mouse.history = {};\n TypingDNA.mouse.history.stack = [];\n\n TypingDNA.mouse.getDistance = function(a, b) {\n return Math.sqrt((a * a) + (b * b));\n }\n\n TypingDNA.mouse.getTotalDistance = function(xPositions, yPositions) {\n var totalDistance = 0;\n var length = xPositions.length;\n for (i = 1; i < length - 1; i++) {\n var a = xPositions[i] - xPositions[i - 1];\n var b = yPositions[i] - yPositions[i - 1];\n totalDistance += TypingDNA.mouse.getDistance(a, b);\n }\n return totalDistance;\n }\n\n TypingDNA.mouse.getAngle = function(xPosDelta, yPosDelta) {\n var angle = 0;\n var leftRight = (xPosDelta >= 0); // 1 if left, 0 if right\n var downUp = (yPosDelta < 0); // 1 if down, 0 if up\n if (leftRight) {\n if (downUp) {\n angle = 180 + (Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251)) // 0.01745329251 = pi/180\n } else {\n angle = 270 + (90 - Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251))\n }\n } else {\n if (downUp) {\n angle = 90 + (90 - Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251))\n } else {\n angle = Math.round(Math.atan(Math.abs(xPosDelta) / (Math.abs(yPosDelta) + 0.0000001)) / 0.01745329251)\n }\n }\n return angle;\n }\n\n TypingDNA.mouse.recordMoveAction = function() {\n var length = TypingDNA.mouse.times.length;\n if (length < 3) {\n return;\n }\n var deltaTime = TypingDNA.mouse.times[length - 1] - TypingDNA.mouse.times[0];\n var xPosDelta = TypingDNA.mouse.xPositions[length - 1] - TypingDNA.mouse.xPositions[0];\n var yPosDelta = TypingDNA.mouse.yPositions[length - 1] - TypingDNA.mouse.yPositions[0];\n var directDistance = Math.round(TypingDNA.mouse.getDistance(xPosDelta, yPosDelta));\n var totalDistance = Math.round(TypingDNA.mouse.getTotalDistance(TypingDNA.mouse.xPositions, TypingDNA.mouse.yPositions));\n var ratioDistance = Math.round(totalDistance * 100 / directDistance);\n var speed = Math.round(directDistance * 100 / deltaTime);\n var angle = TypingDNA.mouse.getAngle(xPosDelta, yPosDelta);\n var eventType = 1;\n var arr = [eventType, deltaTime, directDistance, speed, angle, ratioDistance];\n for (i in arr) {\n if (isNaN(arr[i])) {\n return;\n }\n }\n TypingDNA.mouse.history.add(arr);\n TypingDNA.lastMouseStop = false;\n }\n\n TypingDNA.mouse.recordScrollAction = function() {\n var length = TypingDNA.mouse.scrollTimes.length;\n if (length < 2) {\n return;\n }\n var deltaTime = TypingDNA.mouse.scrollTimes[length - 1] - TypingDNA.mouse.scrollTimes[0];\n var directDistance = TypingDNA.mouse.scrollTopArr[length - 1] - TypingDNA.mouse.scrollTopArr[0];\n var speed = Math.round(directDistance * 100 / deltaTime);\n var eventType = 2;\n var arr = [eventType, deltaTime, directDistance, speed];\n for (i in arr) {\n if (isNaN(arr[i]) && !isFinite(arr[i])) {\n return;\n }\n }\n TypingDNA.mouse.history.add(arr);\n }\n\n TypingDNA.mouse.history.add = function(arr) {\n this.stack.push(arr);\n if (this.stack.length > TypingDNA.maxMouseHistoryLength) {\n this.stack.shift();\n }\n }\n\n TypingDNA.mouse.history.getDiagram = function() {\n var mouseDiagram = this.stack.join(\"|\");\n return [String(TypingDNA.isMobile()) + \",\" + String(TypingDNA.version), mouseDiagram].join(\"|\");\n }\n\n TypingDNA.mouse.clearLastMove = function() {\n TypingDNA.mouse.times = [];\n TypingDNA.mouse.xPositions = [];\n TypingDNA.mouse.yPositions = [];\n }\n\n TypingDNA.mouse.checkMove = function() {\n clearInterval(TypingDNA.moveInterval);\n if (TypingDNA.mouse.started == true) {\n TypingDNA.mouse.started = false;\n TypingDNA.mouse.recordMoveAction();\n TypingDNA.mouse.clearLastMove();\n }\n }\n\n TypingDNA.mouse.clearLastScroll = function() {\n TypingDNA.mouse.scrollTimes = [];\n TypingDNA.mouse.scrollTopArr = [];\n }\n\n TypingDNA.mouse.checkScroll = function() {\n clearInterval(TypingDNA.scrollInterval);\n if (TypingDNA.mouse.scrollStarted == true) {\n TypingDNA.mouse.scrollStarted = false;\n TypingDNA.mouse.recordScrollAction();\n TypingDNA.mouse.clearLastScroll();\n }\n }\n\n /**\n * Adds a target to the targetIds array.\n */\n TypingDNA.addTarget = function(target) {\n var targetLength = TypingDNA.targetIds.length;\n var targetFound = false;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n targetFound = true;\n break;\n }\n }\n if (!targetFound) {\n TypingDNA.targetIds.push(target);\n }\n } else {\n TypingDNA.targetIds.push(target);\n }\n }\n\n /**\n * Adds a target to the targetIds array.\n */\n TypingDNA.removeTarget = function(target) {\n var targetLength = TypingDNA.targetIds.length;\n if (targetLength > 0) {\n for (var i = 0; i < targetLength; i++) {\n if (TypingDNA.targetIds[i] == target) {\n TypingDNA.targetIds.splice(i, 1);\n break;\n }\n }\n }\n }\n\n /**\n * Resets the history stack\n */\n TypingDNA.reset = function(all) {\n TypingDNA.history.stack = [];\n TypingDNA.history.stackDiagram = [];\n TypingDNA.clickTimes = [];\n TypingDNA.stopTimes = [];\n TypingDNA.ACInputLengths = {\n inputs: [],\n lastLength: [],\n };\n if (all == true) {\n TypingDNA.mouse.history.stack = [];\n }\n }\n\n /**\n * Automatically called at initilization. It starts the recording of keystrokes.\n */\n TypingDNA.start = function() {\n TypingDNA.diagramRecording = true;\n return TypingDNA.recording = true;\n }\n\n /**\n * Ends the recording of further keystrokes. To restart recording afterwards you can\n * either call TypingDNA.start() or create a new TypingDNA object again, not recommended.\n */\n TypingDNA.stop = function() {\n TypingDNA.diagramRecording = false;\n return TypingDNA.recording = false;\n }\n\n /**\n * Starts the recording of mouse activity.\n */\n TypingDNA.startMouse = function() {\n return TypingDNA.mouseRecording = TypingDNA.mouseMoveRecording = true;\n }\n\n /**\n * Stops the recording of mouse activity.\n */\n TypingDNA.stopMouse = function() {\n return TypingDNA.mouseRecording = TypingDNA.mouseMoveRecording = false;\n }\n\n /**\n * This is the main function that outputs the typing pattern as a String\n * {type:Number, text:String, textId:Number, length: Number, targetId:String, caseSensitive:Boolean}\n * @param {Object} obj an object with the following properties\n * * * @param {String} type 0 for anytext pattern, 1 for sametext pattern (also called diagram pattern)\n * * * and 2 for extended pattern (most versatile, can replace both anytext and sametext patterns)\n * * * @param {Number} length (Optional) the length of the text in the history for which you want\n * * * the typing pattern. length is ignored when text or targetId is set (or both).\n * * * @param {String} text (Only for type 1 and type 2) a typed string that you want the typing pattern for\n * * * @param {Number} textId (Optional, only for type 1 and type 2) a personalized id for the typed text\n * * * @param {String} targetId (Optional) specifies if pattern is obtain only from text typed in a certain target\n * * * @param {Boolean} caseSensitive (Optional, default: false) Used if you pass a text for type 1 or type 2\n * * * DEPRECATED * * * in favor of type = 2 * * *\n * * * @param {Boolean} extended (Only for type 1) specifies if full information about what was typed is produced,\n * * * including the actual key pressed, if false, only the order of pressed keys is kept (no actual content)\n * @return {String} A typing pattern in string form\n * @example var typingPattern = tdna.getTypingPattern({type=0, length=180});\n * @example var typingPattern = tdna.getTypingPattern({type=1, text=\"Hello5g21?*\"});\n * @example var typingPattern = tdna.getTypingPattern({type=2, text=\"example@mail.com\"});\n */\n TypingDNA.getTypingPattern = function(obj) {\n if (typeof obj === 'object') {\n switch (obj.type) {\n case 0:\n return TypingDNA.get(obj.length, obj.targetId);\n break;\n case 1:\n var str = (obj.text != undefined) ? obj.text : obj.length;\n return TypingDNA.history.getDiagram(obj.extended, str, obj.textId, obj.targetId, obj.caseSensitive);\n break;\n case 2:\n var str = (obj.text != undefined) ? obj.text : obj.length;\n return TypingDNA.history.getDiagram(true, str, obj.textId, obj.targetId, obj.caseSensitive);\n break;\n default:\n return TypingDNA.get(obj.length);\n break;\n }\n } else {\n return TypingDNA.get();\n }\n }\n\n TypingDNA.getDiagram = function(str, textId) {\n return TypingDNA.history.getDiagram(false, str, textId, undefined, false);\n }\n\n TypingDNA.getExtendedDiagram = function(str, textId) {\n return TypingDNA.history.getDiagram(true, str, textId, undefined, false);\n }\n\n TypingDNA.getMouseDiagram = function() {\n return TypingDNA.mouse.history.getDiagram();\n }\n\n TypingDNA.get = function(length, targetId) {\n var historyTotalLength = TypingDNA.history.stack.length;\n if (length == undefined || length == 0) {\n length = TypingDNA.defaultHistoryLength;\n }\n if (length > historyTotalLength) {\n length = historyTotalLength;\n }\n var obj = {};\n [obj.arr, targetLength] = TypingDNA.history.get(length, \"\", targetId);\n if (targetId != undefined && targetId != \"\") {\n length = targetLength;\n }\n var zl = TypingDNA.zl;\n var histRev = length;\n var histSktF = TypingDNA.math.fo(TypingDNA.history.get(length, \"seek\", targetId));\n var histPrtF = TypingDNA.math.fo(TypingDNA.history.get(length, \"press\", targetId));\n var pressHistMean = Math.round(TypingDNA.math.avg(histPrtF));\n var seekHistMean = Math.round(TypingDNA.math.avg(histSktF));\n var pressHistSD = Math.round(TypingDNA.math.sd(histPrtF));\n var seekHistSD = Math.round(TypingDNA.math.sd(histSktF));\n var charMeanTime = seekHistMean + pressHistMean;\n var pressRatio = TypingDNA.math.rd((pressHistMean + zl) / (charMeanTime + zl), 4);\n var seekToPressRatio = TypingDNA.math.rd((1 - pressRatio) / pressRatio, 4);\n var pressSDToPressRatio = TypingDNA.math.rd((pressHistSD + zl) / (pressHistMean + zl), 4);\n var seekSDToPressRatio = TypingDNA.math.rd((seekHistSD + zl) / (pressHistMean + zl), 4);\n var cpm = Math.round(6E4 / (charMeanTime + zl));\n if (histRev == 0) {\n cpm = 0;\n }\n for (var i in obj.arr) {\n var rev = obj.arr[i][1].length;\n var seekMean = 0;\n var pressMean = 0;\n var postMean = 0;\n var seekSD = 0;\n var pressSD = 0;\n var postSD = 0;\n switch (obj.arr[i][0].length) {\n case 0:\n break;\n case 1:\n var seekMean = TypingDNA.math.rd((obj.arr[i][0][0] + zl) / (seekHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][0]);\n seekMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (seekHistMean + zl), 4);\n seekSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (seekHistSD + zl), 4);\n }\n switch (obj.arr[i][1].length) {\n case 0:\n break;\n case 1:\n var pressMean = TypingDNA.math.rd((obj.arr[i][1][0] + zl) / (pressHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][1]);\n pressMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (pressHistMean + zl), 4);\n pressSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (pressHistSD + zl), 4);\n }\n switch (obj.arr[i][2].length) {\n case 0:\n break;\n case 1:\n var postMean = TypingDNA.math.rd((obj.arr[i][2][0] + zl) / (seekHistMean + zl), 4);\n break;\n default:\n var arr = TypingDNA.math.fo(obj.arr[i][2]);\n postMean = TypingDNA.math.rd((TypingDNA.math.avg(arr) + zl) / (seekHistMean + zl), 4);\n postSD = TypingDNA.math.rd((TypingDNA.math.sd(arr) + zl) / (seekHistSD + zl), 4);\n }\n delete obj.arr[i][2];\n delete obj.arr[i][1];\n delete obj.arr[i][0];\n obj.arr[i][0] = rev;\n obj.arr[i][1] = seekMean;\n obj.arr[i][2] = pressMean;\n obj.arr[i][3] = postMean;\n obj.arr[i][4] = seekSD;\n obj.arr[i][5] = pressSD;\n obj.arr[i][6] = postSD;\n }\n var arr = [];\n TypingDNA.apu(arr, histRev);\n TypingDNA.apu(arr, cpm);\n TypingDNA.apu(arr, charMeanTime);\n TypingDNA.apu(arr, pressRatio);\n TypingDNA.apu(arr, seekToPressRatio);\n TypingDNA.apu(arr, pressSDToPressRatio);\n TypingDNA.apu(arr, seekSDToPressRatio);\n TypingDNA.apu(arr, pressHistMean);\n TypingDNA.apu(arr, seekHistMean);\n TypingDNA.apu(arr, pressHistSD);\n TypingDNA.apu(arr, seekHistSD);\n for (var c = 0; c <= 6; c++) {\n for (var i = 0; i < 44; i++) {\n var keyCode = TypingDNA.keyCodes[i];\n var val = obj.arr[keyCode][c];\n if (val == 0 && c > 0) {\n val = 1;\n }\n TypingDNA.apu(arr, val);\n }\n }\n TypingDNA.apu(arr, TypingDNA.isMobile());\n TypingDNA.apu(arr, TypingDNA.version);\n TypingDNA.apu(arr, TypingDNA.flags);\n arr.push(TypingDNA.history.getSpecialKeys());\n return arr.join(\",\");\n }\n\n TypingDNA.apu = function(arr, val) {\n \"NaN\" == String(val) && (val = 0);\n arr.push(val);\n }\n\n TypingDNA.math = {};\n\n TypingDNA.math.rd = function(val, dec) {\n return Number(val.toFixed(dec));\n }\n\n TypingDNA.math.avg = function(arr) {\n var len = arr.length;\n if (len > 0) {\n var sum = 0;\n for (var i = 0; i < len; i++) {\n sum += arr[i];\n }\n return this.rd(sum / len, 4);\n } else {\n return 0;\n }\n }\n\n TypingDNA.math.sd = function(arr) {\n var len = arr.length;\n if (len < 2) {\n return 0;\n } else {\n var sumVS = 0;\n var mean = this.avg(arr);\n for (var i = 0; i < len; i++) {\n sumVS += (arr[i] - mean) * (arr[i] - mean);\n }\n var sd = Math.sqrt(sumVS / len);\n return sd;\n }\n }\n\n TypingDNA.math.fo = function(arr) {\n if (arr.length > 1) {\n var values = arr.concat();\n var len = arr.length;\n values.sort(function(a, b) {\n return a - b;\n });\n var asd = this.sd(values);\n var aMean = values[Math.ceil(arr.length / 2)];\n var multiplier = 2;\n var maxVal = aMean + multiplier * asd;\n var minVal = aMean - multiplier * asd;\n if (len < 20) {\n minVal = 0;\n }\n var fVal = [];\n for (var i = 0; i < len; i++) {\n var tempval = values[i];\n if (tempval < maxVal && tempval > minVal) {\n fVal.push(tempval);\n }\n }\n return fVal;\n } else {\n return arr;\n }\n }\n\n // Calculate a 32 bit FNV-1a hash\n TypingDNA.math.fnv1aHash = function(str) {\n if (str == undefined && typeof str !== 'string') {\n return 0;\n }\n str = str.toLowerCase();\n var i, l;\n var hval = 0x721b5ad4;\n for (i = 0, l = str.length; i < l; i++) {\n hval ^= str.charCodeAt(i);\n hval += (hval << 1) + (hval << 4) + (hval << 7) + (hval << 8) + (hval << 24);\n }\n return hval >>> 0;\n }\n\n TypingDNA.history = {};\n TypingDNA.history.stack = [];\n TypingDNA.history.stackDiagram = [];\n\n TypingDNA.history.add = function(arr) {\n this.stack.push(arr);\n if (this.stack.length > TypingDNA.maxHistoryLength) {\n this.stack.shift();\n }\n }\n\n TypingDNA.history.addDiagram = function(arr) {\n this.stackDiagram.push(arr);\n }\n\n TypingDNA.history.getDiagram = function(extended, str, textId, targetId, caseSensitive) {\n var caseSensitive = (caseSensitive != undefined) ? caseSensitive : (str == undefined || str == \"\");\n var returnArr = [];\n var diagramType = (extended == true) ? 1 : 0;\n var stackDiagram = this.stackDiagram;\n if (targetId != undefined && targetId != \"\" && stackDiagram.length > 0) {\n stackDiagram = TypingDNA.sliceStackByTargetId(stackDiagram, targetId);\n if (str == undefined || str == \"\") {\n var element = TypingDNA.document.getElementById(targetId);\n if (element != null) {\n str = element.value;\n }\n }\n } else {\n var targetLength = TypingDNA.targetIds.length;\n if (str == undefined || str == \"\") {\n if (targetLength > 0) {\n str = \"\";\n for (var i = 0; i < targetLength; i++) {\n var element = TypingDNA.document.getElementById(TypingDNA.targetIds[i]);\n if (element != null) {\n str += element.value;\n }\n }\n } else {\n if (!extended) {\n console.log(\"Please use extended pattern OR provide a fixed string param OR use the addTarget method.\");\n }\n }\n }\n }\n var missingCount = 0;\n var diagramHistoryLength = stackDiagram.length;\n var strLength = diagramHistoryLength;\n if (typeof str === 'string') {\n strLength = str.length;\n } else if (typeof str === 'number' && str < diagramHistoryLength) {\n strLength = str;\n }\n var returnTextId = 0;\n if (textId != undefined) {\n if (isNaN(parseInt(textId))) {\n returnTextId = TypingDNA.math.fnv1aHash(textId);\n } else {\n returnTextId = parseInt(textId);\n }\n } else {\n if (typeof str === 'string') {\n returnTextId = TypingDNA.math.fnv1aHash(str);\n }\n }\n returnArr.push([TypingDNA.isMobile(), TypingDNA.version, TypingDNA.flags, diagramType, strLength, returnTextId, TypingDNA.history.getSpecialKeys()]);\n if (str != undefined && str.length > 0 && typeof str === 'string') {\n var strLower = str.toLowerCase();\n var strUpper = str.toUpperCase();\n var lastFoundPos = [];\n var lastPos = 0;\n var strUpperCharCode;\n var currentSensitiveCharCode;\n for (var i = 0; i < str.length; i++) {\n var currentCharCode = str.charCodeAt(i);\n if (!caseSensitive) {\n strUpperCharCode = strUpper.charCodeAt(i);\n currentSensitiveCharCode = (strUpperCharCode != currentCharCode) ? strUpperCharCode : strLower.charCodeAt(i);\n }\n var startPos = lastPos;\n var finishPos = diagramHistoryLength;\n var found = false;\n while (found == false) {\n for (var j = startPos; j < finishPos; j++) {\n var arr = stackDiagram[j];\n var charCode = arr[3];\n if (charCode == currentCharCode || (!caseSensitive && charCode == currentSensitiveCharCode)) {\n found = true;\n if (j == lastPos) {\n lastPos++;\n lastFoundPos = [];\n } else {\n lastFoundPos.push(j);\n var len = lastFoundPos.length;\n if (len > 1 && lastFoundPos[len - 1] == lastFoundPos[len - 2] + 1) {\n lastPos = j + 1;\n lastFoundPos = [];\n }\n }\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n if (extended) {\n returnArr.push([charCode, seekTime, pressTime, keyCode]);\n } else {\n returnArr.push([seekTime, pressTime]);\n }\n break;\n }\n }\n if (found == false) {\n if (startPos != 0) {\n startPos = 0;\n finishPos = lastPos;\n } else {\n found = true;\n if (TypingDNA.replaceMissingKeys) {\n missingCount++;\n if (typeof TypingDNA.savedMissingAvgValues !== 'object' || TypingDNA.savedMissingAvgValues.historyLength != diagramHistoryLength) {\n var histSktF = TypingDNA.math.fo(TypingDNA.history.get(0, \"seek\"));\n var histPrtF = TypingDNA.math.fo(TypingDNA.history.get(0, \"press\"));\n var seekTime = Math.round(TypingDNA.math.avg(histSktF));\n var pressTime = Math.round(TypingDNA.math.avg(histPrtF));\n TypingDNA.savedMissingAvgValues = {\n seekTime: seekTime,\n pressTime: pressTime,\n historyLength: diagramHistoryLength\n };\n } else {\n var seekTime = TypingDNA.savedMissingAvgValues.seekTime;\n var pressTime = TypingDNA.savedMissingAvgValues.pressTime;\n }\n var missing = 1;\n if (extended) {\n returnArr.push([currentCharCode, seekTime, pressTime, currentCharCode, missing]);\n } else {\n returnArr.push([seekTime, pressTime, missing]);\n }\n break;\n }\n }\n }\n }\n if (TypingDNA.replaceMissingKeysPerc < missingCount * 100 / strLength) {\n return null;\n }\n }\n } else {\n var startCount = 0;\n if (typeof str === 'number') {\n startCount = diagramHistoryLength - str;\n }\n if (startCount < 0) {\n startCount = 0;\n }\n for (var i = startCount; i < diagramHistoryLength; i++) {\n var arr = stackDiagram[i];\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n if (extended) {\n var charCode = arr[3];\n returnArr.push([charCode, seekTime, pressTime, keyCode]);\n } else {\n returnArr.push([seekTime, pressTime]);\n }\n }\n }\n return returnArr.join(\"|\");\n }\n\n TypingDNA.sliceStackByTargetId = function(stack, targetId) {\n var length = stack.length;\n var newStack = [];\n for (i = 0; i < length; i++) {\n var arr = stack[i];\n if (arr[5] == targetId) {\n newStack.push(arr);\n }\n }\n return newStack;\n }\n\n TypingDNA.history.get = function(length, type, targetId) {\n var stack = this.stack;\n if (targetId != undefined && targetId != \"\" && stack.length > 0) {\n stack = TypingDNA.sliceStackByTargetId(stack, targetId);\n }\n var historyTotalLength = stack.length;\n if (length == 0 || length == undefined) {\n length = TypingDNA.defaultHistoryLength;\n }\n if (length > historyTotalLength) {\n length = historyTotalLength;\n }\n switch (type) {\n case \"seek\":\n var seekArr = [];\n for (i = 1; i <= length; i++) {\n var seekTime = stack[historyTotalLength - i][1];\n if (seekTime <= TypingDNA.maxSeekTime) {\n seekArr.push(seekTime);\n }\n };\n return seekArr;\n break;\n case \"press\":\n var pressArr = [];\n for (i = 1; i <= length; i++) {\n var pressTime = stack[historyTotalLength - i][2];\n if (pressTime <= TypingDNA.maxPressTime) {\n pressArr.push(pressTime);\n }\n };\n return pressArr;\n break;\n default:\n var historyStackObj = {};\n for (var i in TypingDNA.keyCodes) {\n historyStackObj[TypingDNA.keyCodes[i]] = [\n [],\n [],\n []\n ];\n }\n for (i = 1; i <= length; i++) {\n var arr = stack[historyTotalLength - i];\n var keyCode = arr[0];\n var seekTime = arr[1];\n var pressTime = arr[2];\n var prevKeyCode = arr[3];\n if (TypingDNA.keyCodesObj[keyCode]) {\n if (seekTime <= TypingDNA.maxSeekTime) {\n historyStackObj[keyCode][0].push(seekTime);\n if (prevKeyCode != 0 && TypingDNA.keyCodesObj[prevKeyCode]) {\n historyStackObj[prevKeyCode][2].push(seekTime);\n }\n }\n if (pressTime <= TypingDNA.maxPressTime) {\n historyStackObj[keyCode][1].push(pressTime);\n }\n }\n };\n return [historyStackObj, length];\n }\n }\n\n TypingDNA.history.getSpecialKeys = function() {\n var returnArr = [];\n var length = this.stack.length;\n var historyStackObj = {};\n for (var i in TypingDNA.spKeyCodes) {\n historyStackObj[TypingDNA.spKeyCodes[i]] = [\n [],\n ];\n }\n for (i = 1; i <= length; i++) {\n var arr = this.stack[length - i];\n if (TypingDNA.spKeyCodesObj[arr[0]]) {\n var keyCode = arr[0];\n var pressTime = arr[2];\n if (pressTime <= TypingDNA.maxPressTime) {\n historyStackObj[keyCode][0].push(pressTime);\n }\n }\n }\n for (var i in TypingDNA.spKeyCodes) {\n var arr = TypingDNA.math.fo(historyStackObj[TypingDNA.spKeyCodes[i]][0]);\n var arrLen = arr.length;\n returnArr.push(arrLen);\n if (arrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(arr)));\n returnArr.push(Math.round(TypingDNA.math.sd(arr)));\n } else if (arrLen == 1) {\n returnArr.push([arr[0], -1]);\n } else {\n returnArr.push([-1, -1]);\n }\n }\n var clicksArrLen = TypingDNA.clickTimes.length;\n returnArr.push(clicksArrLen);\n if (clicksArrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(TypingDNA.clickTimes)));\n returnArr.push(Math.round(TypingDNA.math.sd(TypingDNA.clickTimes)));\n } else if (clicksArrLen == 1) {\n returnArr.push(TypingDNA.clickTimes[0], -1);\n } else {\n returnArr.push([-1, -1]);\n }\n var stopArrLen = TypingDNA.stopTimes.length;\n returnArr.push(stopArrLen);\n if (stopArrLen > 1) {\n returnArr.push(Math.round(TypingDNA.math.avg(TypingDNA.stopTimes)));\n returnArr.push(Math.round(TypingDNA.math.sd(TypingDNA.stopTimes)));\n } else if (stopArrLen == 1) {\n returnArr.push(TypingDNA.stopTimes[0], -1);\n } else {\n returnArr.push([-1, -1]);\n }\n return returnArr;\n }\n\n /**\n * Checks the quality of a typing pattern, how well it is revelated, how useful the\n * information will be for matching applications. It returns a value between 0 and 1.\n * Values over 0.3 are acceptable, however a value over 0.7 shows good pattern strength.\n * @param {String} typingPattern The typing pattern string returned by the get() function.\n * @return {Number} A real number between 0 and 1. A close to 1 value means a stronger pattern.\n * @example var quality = tdna.getQuality(typingPattern);\n */\n TypingDNA.getQuality = function(typingPattern) {\n var obj = typingPattern.split(\",\");\n for (i = 0; i < obj.length; i++) {\n obj[i] = Number(obj[i]);\n }\n var totalEvents = obj[0];\n var acc = rec = avgAcc = 0;\n var avg = TypingDNA.math.avg(obj);\n var revs = obj.slice(11, 55);\n for (var i in revs) {\n rec += Number(revs[i] > 0);\n acc += Number(revs[i] > 4);\n avgAcc += Number(revs[i] > avg);\n }\n var tReturn = Math.sqrt(rec * acc * avgAcc) / 80;\n return tReturn > 1 ? 1 : tReturn;\n }\n\n /**\n * Checks the validity of a typing pattern if recorded on mobile.\n * @param {String} typingPattern The typing pattern string returned by the get() function.\n * @return {Number} A real number between 0 and 1. A number larger than 0.7 usually means a valid pattern.\n * @example var quality = tdna.checkMobileValidity(typingPattern);\n */\n TypingDNA.checkMobileValidity = function(typingPattern) {\n var obj = typingPattern.split(\",\");\n var totalEvents = obj[0];\n if (totalEvents == 0) {\n return 0;\n }\n var rec = 0;\n var revs = obj.slice(11, 55);\n for (var i in revs) {\n rec += Number(revs[i]);\n }\n return rec / totalEvents;\n }\n\n TypingDNA.getLength = function(typingPattern) {\n return Number(typingPattern.split(\",\")[1]);\n }\n\n TypingDNA.isMobile = function() {\n if (TypingDNA.mobile != undefined) {\n return TypingDNA.mobile;\n } else {\n var check = 0;\n (function(a) {\n if (\n /(android|bb\\d+|meego).+mobile|avantgo|bada\\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\\.(browser|link)|vodafone|wap|windows ce|xda|xiino|android|ipad|playbook|silk/i\n .test(a) ||\n /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\\-(n|u)|c55\\/|capi|ccwa|cdm\\-|cell|chtm|cldc|cmd\\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\\-s|devi|dica|dmob|do(c|p)o|ds(12|\\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\\-|_)|g1 u|g560|gene|gf\\-5|g\\-mo|go(\\.w|od)|gr(ad|un)|haie|hcit|hd\\-(m|p|t)|hei\\-|hi(pt|ta)|hp( i|ip)|hs\\-c|ht(c(\\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\\-(20|go|ma)|i230|iac( |\\-|\\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\\/)|klon|kpt |kwc\\-|kyo(c|k)|le(no|xi)|lg( g|\\/(k|l|u)|50|54|\\-[a-w])|libw|lynx|m1\\-w|m3ga|m50\\/|ma(te|ui|xo)|mc(01|21|ca)|m\\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\\-2|po(ck|rt|se)|prox|psio|pt\\-g|qa\\-a|qc(07|12|21|32|60|\\-[2-7]|i\\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\\-|oo|p\\-)|sdk\\/|se(c(\\-|0|1)|47|mc|nd|ri)|sgh\\-|shar|sie(\\-|m)|sk\\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\\-|v\\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\\-|tdg\\-|tel(i|m)|tim\\-|t\\-mo|to(pl|sh)|ts(70|m\\-|m3|m5)|tx\\-9|up(\\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\\-|your|zeto|zte\\-/i\n .test(a.substr(0, 4))) {\n check = 1\n }\n })(navigator.userAgent || navigator.vendor || window.opera);\n TypingDNA.mobile = check;\n return check;\n }\n }\n\n TypingDNA.getTextId = function(str) {\n return TypingDNA.math.fnv1aHash(str);\n }\n } else {\n // TypingDNA is a static class, currently doesn't support actual multiple instances (Singleton implementation)\n return TypingDNA.instance;\n }\n}\n","/**\n * \n * This file has been modified to override doPostBack\n * Check out the doPostBack function below for more details.\n * Override the doPostBack function when upgrading.\n * Unable to make a wrapper because it is invoked using an internal name within \n * this library.\n * \n * Current Verison = https://github.com/duosecurity/duo_web_sdk/blob/7aec8dd895ea4bd4549069e76076850eccfe07f2/index.js\n * PS: they dont seem to version correctly hence using commit.\n */\n\n/**\n * Duo Web SDK v2\n * Copyright 2019, Duo Security\n */\n\n(function (root, factory) {\n /*eslint-disable */\n if (typeof define === 'function' && define.amd) {\n // AMD. Register as an anonymous module.\n define([], factory);\n /*eslint-enable */\n } else if (typeof module === 'object' && module.exports) {\n // Node. Does not work with strict CommonJS, but\n // only CommonJS-like environments that support module.exports,\n // like Node.\n module.exports = factory();\n } else {\n // Browser globals (root is window)\n var Duo = factory();\n // If the Javascript was loaded via a script tag, attempt to autoload\n // the frame.\n Duo._onReady(Duo.init);\n\n // Attach Duo to the `window` object\n root.Duo = Duo;\n }\n}(this, function() {\n var DUO_MESSAGE_FORMAT = /^(?:AUTH|ENROLL)+\\|[A-Za-z0-9\\+\\/=]+\\|[A-Za-z0-9\\+\\/=]+$/;\n var DUO_ERROR_FORMAT = /^ERR\\|[\\w\\s\\.\\(\\)]+$/;\n var DUO_OPEN_WINDOW_FORMAT = /^DUO_OPEN_WINDOW\\|/;\n var VALID_OPEN_WINDOW_DOMAINS = [\n 'duo.com',\n 'duosecurity.com',\n 'duomobile.s3-us-west-1.amazonaws.com'\n ];\n\n var postAction,\n postArgument,\n host,\n sigRequest,\n duoSig,\n appSig,\n iframe,\n submitCallback;\n\n // We use this function instead of setting initial values in the var\n // declarations to make sure the initial values and subsequent\n // re-initializations are always the same.\n initializeStatefulVariables();\n\n /**\n * Set local variables to whatever they should be before you call init().\n */\n function initializeStatefulVariables() {\n postAction = '';\n postArgument = 'sig_response';\n host = undefined;\n sigRequest = undefined;\n duoSig = undefined;\n appSig = undefined;\n iframe = undefined;\n submitCallback = undefined;\n }\n\n function throwError(message, givenUrl) {\n var url = (\n givenUrl ||\n 'https://www.duosecurity.com/docs/duoweb#3.-show-the-iframe'\n );\n throw new Error(\n 'Duo Web SDK error: ' + message +\n (url ? ('\\n' + 'See ' + url + ' for more information') : '')\n );\n }\n\n function hyphenize(str) {\n return str.replace(/([a-z])([A-Z])/, '$1-$2').toLowerCase();\n }\n\n // cross-browser data attributes\n function getDataAttribute(element, name) {\n if ('dataset' in element) {\n return element.dataset[name];\n } else {\n return element.getAttribute('data-' + hyphenize(name));\n }\n }\n\n // cross-browser event binding/unbinding\n function on(context, event, fallbackEvent, callback) {\n if ('addEventListener' in window) {\n context.addEventListener(event, callback, false);\n } else {\n context.attachEvent(fallbackEvent, callback);\n }\n }\n\n function off(context, event, fallbackEvent, callback) {\n if ('removeEventListener' in window) {\n context.removeEventListener(event, callback, false);\n } else {\n context.detachEvent(fallbackEvent, callback);\n }\n }\n\n function onReady(callback) {\n on(document, 'DOMContentLoaded', 'onreadystatechange', callback);\n }\n\n function offReady(callback) {\n off(document, 'DOMContentLoaded', 'onreadystatechange', callback);\n }\n\n function onMessage(callback) {\n on(window, 'message', 'onmessage', callback);\n }\n\n function offMessage(callback) {\n off(window, 'message', 'onmessage', callback);\n }\n\n /**\n * Parse the sig_request parameter, throwing errors if the token contains\n * a server error or if the token is invalid.\n *\n * @param {String} sig Request token\n */\n function parseSigRequest(sig) {\n if (!sig) {\n // nothing to do\n return;\n }\n\n // see if the token contains an error, throwing it if it does\n if (sig.indexOf('ERR|') === 0) {\n throwError(sig.split('|')[1]);\n }\n\n // validate the token\n if (sig.indexOf(':') === -1 || sig.split(':').length !== 2) {\n throwError(\n 'Duo was given a bad token. This might indicate a configuration ' +\n 'problem with one of Duo\\'s client libraries.'\n );\n }\n\n var sigParts = sig.split(':');\n\n // hang on to the token, and the parsed duo and app sigs\n sigRequest = sig;\n duoSig = sigParts[0];\n appSig = sigParts[1];\n\n return {\n sigRequest: sig,\n duoSig: sigParts[0],\n appSig: sigParts[1]\n };\n }\n\n /**\n * Validate that a MessageEvent came from the Duo service, and that it\n * is a properly formatted payload.\n *\n * The Google Chrome sign-in page injects some JS into pages that also\n * make use of postMessage, so we need to do additional validation above\n * and beyond the origin.\n *\n * @param {MessageEvent} event Message received via postMessage\n */\n function isDuoMessage(event) {\n return Boolean(\n event.origin === ('https://' + host) &&\n typeof event.data === 'string' &&\n (\n event.data.match(DUO_MESSAGE_FORMAT) ||\n event.data.match(DUO_ERROR_FORMAT) ||\n event.data.match(DUO_OPEN_WINDOW_FORMAT)\n )\n );\n }\n\n /**\n * Validate the request token and prepare for the iframe to become ready.\n *\n * All options below can be passed into an options hash to `Duo.init`, or\n * specified on the iframe using `data-` attributes.\n *\n * Options specified using the options hash will take precedence over\n * `data-` attributes.\n *\n * Example using options hash:\n * ```javascript\n * Duo.init({\n * iframe: \"some_other_id\",\n * host: \"api-main.duo.test\",\n * sig_request: \"...\",\n * post_action: \"/auth\",\n * post_argument: \"resp\"\n * });\n * ```\n *\n * Example using `data-` attributes:\n * ```html\n * \n * ```\n *\n * Some browsers (especially embedded browsers) don't like it when the Duo\n * Web SDK changes the `src` attribute on the iframe. To prevent this, there\n * is an alternative way to use the Duo Web SDK:\n *\n * Add a div (or any other container element) instead of an iframe to the\n * DOM with an id of \"duo_iframe\", or pass that element to the\n * `iframeContainer` parameter of `Duo.init`. An iframe will be created and\n * inserted into that container element, preventing `src` change related\n * bugs. WARNING: All other elements in the container will be deleted.\n *\n * The `iframeAttributes` parameter of `Duo.init` is available to set any\n * attributes on the inserted iframe if the Duo Web SDK is inserting the\n * iframe. For details, see the parameter documentation below.\n *\n * @param {Object} options\n * @param {String} options.host - Hostname for the Duo Prompt.\n * @param {String} options.sig_request - Request token.\n * @param {String|HTMLElement} [options.iframe] - The iframe, or id of an\n * iframe that will be used for the Duo Prompt. If you don't provide\n * this or the `iframeContainer` parameter the Duo Web SDK will default\n * to using whatever element has an id of \"duo_iframe\".\n * @param {String|HTMLElement} [options.iframeContainer] - The element you\n * want the Duo Prompt inserted into, or the id of that element.\n * Anything inside this element will be deleted and replaced with an\n * iframe hosting the Duo prompt. If you don't provide this or the\n * `iframe` parameter the Duo Web SDK will default to using whatever\n * element has an id of \"duo_iframe\".\n * @param {Object} [options.iframeAttributes] - Object with names and\n * values coresponding to attributes you want added to the Duo Prompt\n * iframe, like `title`, `width` and `allow`. WARNING: this parameter\n * only works if you use the `iframeContainer` parameter or add an id\n * of \"duo_iframe\" to an element that isn't an iframe. If you have\n * added an iframe to the DOM yourself, you should set those attributes\n * directly on the iframe.\n * @param {String} [options.post_action=''] - URL to POST back to after a\n * successful auth.\n * @param {String} [options.post_argument='sig_response'] - Parameter name\n * to use for response token.\n * @param {Function} [options.submit_callback] - If provided, the Duo Web\n * SDK will not submit the form. Instead it will execute this callback\n * function passing in a reference to the \"duo_form\" form object.\n * `submit_callback`` can be used to prevent the webpage from reloading.\n */\n function init(options) {\n // If init() is called more than once we have to reset all the local\n // variables to ensure init() will work the same way every time. This\n // helps people making single page applications. SPAs may periodically\n // remove the iframe and add a new one that has to be initialized.\n initializeStatefulVariables();\n\n if (options) {\n if (options.host) {\n host = options.host;\n }\n\n if (options.sig_request) {\n parseSigRequest(options.sig_request);\n }\n\n if (options.post_action) {\n postAction = options.post_action;\n }\n\n if (options.post_argument) {\n postArgument = options.post_argument;\n }\n\n if (typeof options.submit_callback === 'function') {\n submitCallback = options.submit_callback;\n }\n }\n\n var promptElement = getPromptElement(options);\n if (promptElement) {\n // If we can get the element that will host the prompt, set it.\n ready(promptElement, options.iframeAttributes || {});\n } else {\n // If the element that will host the prompt isn't available yet, set\n // it up after the DOM finishes loading.\n asyncReady(options);\n }\n\n // always clean up after yourself!\n offReady(init);\n }\n\n /**\n * Given the options from init(), get the iframe or iframe container that\n * should be used for the Duo Prompt. Returns `null` if nothing was found.\n */\n function getPromptElement(options) {\n var result;\n\n if (options.iframe && options.iframeContainer) {\n throwError(\n 'Passing both `iframe` and `iframeContainer` arguments at the' +\n ' same time is not allowed.'\n );\n } else if (options.iframe) {\n // If we are getting an iframe, try to get it and raise if the\n // element we find is NOT an iframe.\n result = getUserDefinedElement(options.iframe);\n validateIframe(result);\n } else if (options.iframeContainer) {\n result = getUserDefinedElement(options.iframeContainer);\n validateIframeContainer(result);\n } else {\n result = document.getElementById('duo_iframe');\n }\n\n return result;\n }\n\n /**\n * When given an HTMLElement, return it. When given a string, get an element\n * with that id, else return null.\n */\n function getUserDefinedElement(object) {\n if (object.tagName) {\n return object;\n } else if (typeof object == 'string') {\n return document.getElementById(object);\n }\n return null;\n }\n\n /**\n * Check if the given thing is an iframe.\n */\n function isIframe(element) {\n return (\n element &&\n element.tagName &&\n element.tagName.toLowerCase() === 'iframe'\n );\n }\n\n /**\n * Throw an error if we are given an element that is NOT an iframe.\n */\n function validateIframe(element) {\n if (element && !isIframe(element)) {\n throwError(\n '`iframe` only accepts an iframe element or the id of an' +\n ' iframe. To use a non-iframe element, use the' +\n ' `iframeContainer` argument.'\n );\n }\n }\n\n /**\n * Throw an error if we are given an element that IS an iframe instead of an\n * element that we can insert an iframe into.\n */\n function validateIframeContainer(element) {\n if (element && isIframe(element)) {\n throwError(\n '`iframeContainer` only accepts a non-iframe element or the' +\n ' id of a non-iframe. To use a non-iframe element, use the' +\n ' `iframeContainer` argument on Duo.init().'\n );\n }\n }\n\n /**\n * Generate the URL that goes to the Duo Prompt.\n */\n function generateIframeSrc() {\n return [\n 'https://', host, '/frame/web/v1/auth?tx=', duoSig,\n '&parent=', encodeURIComponent(document.location.href),\n '&v=2.8'\n ].join('');\n }\n\n /**\n * This function is called when a message was received from another domain\n * using the `postMessage` API. Check that the event came from the Duo\n * service domain, and that the message is a properly formatted payload,\n * then perform the post back to the primary service.\n *\n * @param event Event object (contains origin and data)\n */\n function onReceivedMessage(event) {\n if (isDuoMessage(event)) {\n if (event.data.match(DUO_OPEN_WINDOW_FORMAT)) {\n var url = event.data.substring(\"DUO_OPEN_WINDOW|\".length);\n if (isValidUrlToOpen(url)) {\n // Open the URL that comes after the DUO_WINDOW_OPEN token.\n window.open(url, \"_self\");\n }\n }\n else {\n // the event came from duo, do the post back\n doPostBack(event.data);\n\n // always clean up after yourself!\n offMessage(onReceivedMessage);\n }\n }\n }\n\n /**\n * Validate that this passed in URL is one that we will actually allow to\n * be opened.\n * @param url String URL that the message poster wants to open\n * @returns {boolean} true if we allow this url to be opened in the window\n */\n function isValidUrlToOpen(url) {\n if (!url) {\n return false;\n }\n\n var parser = document.createElement('a');\n parser.href = url;\n\n if (parser.protocol === \"duotrustedendpoints:\") {\n return true;\n } else if (parser.protocol !== \"https:\") {\n return false;\n }\n\n for (var i = 0; i < VALID_OPEN_WINDOW_DOMAINS.length; i++) {\n if (parser.hostname.endsWith(\".\" + VALID_OPEN_WINDOW_DOMAINS[i]) ||\n parser.hostname === VALID_OPEN_WINDOW_DOMAINS[i]) {\n return true;\n }\n }\n return false;\n }\n\n /**\n * Register a callback to call ready() after the DOM has loaded.\n */\n function asyncReady(options) {\n var callback = function() {\n var promptElement = getPromptElement(options);\n if (!promptElement) {\n throwError(\n 'This page does not contain an iframe for Duo to use.' +\n ' Add an element like' +\n ' to this page.'\n );\n }\n\n ready(promptElement, options.iframeAttributes || {});\n\n // Always clean up after yourself.\n offReady(callback)\n };\n\n onReady(callback);\n }\n\n /**\n * Point the iframe at Duo, then wait for it to postMessage back to us.\n */\n function ready(promptElement, iframeAttributes) {\n if (!host) {\n host = getDataAttribute(promptElement, 'host');\n\n if (!host) {\n throwError(\n 'No API hostname is given for Duo to use. Be sure to pass ' +\n 'a `host` parameter to Duo.init, or through the `data-host` ' +\n 'attribute on the iframe element.'\n );\n }\n }\n\n if (!duoSig || !appSig) {\n parseSigRequest(getDataAttribute(promptElement, 'sigRequest'));\n\n if (!duoSig || !appSig) {\n throwError(\n 'No valid signed request is given. Be sure to give the ' +\n '`sig_request` parameter to Duo.init, or use the ' +\n '`data-sig-request` attribute on the iframe element.'\n );\n }\n }\n\n // if postAction/Argument are defaults, see if they are specified\n // as data attributes on the iframe\n if (postAction === '') {\n postAction = getDataAttribute(promptElement, 'postAction') || postAction;\n }\n\n if (postArgument === 'sig_response') {\n postArgument = getDataAttribute(promptElement, 'postArgument') || postArgument;\n }\n\n if (isIframe(promptElement)) {\n iframe = promptElement;\n iframe.src = generateIframeSrc();\n } else {\n // If given a container to put an iframe in, clean out any children\n // child elements in case `init()` was called more than once.\n while (promptElement.firstChild) {\n // We call `removeChild()` instead of doing `innerHTML = \"\"`\n // to make sure we unbind any events.\n promptElement.removeChild(promptElement.firstChild)\n }\n\n iframe = document.createElement('iframe');\n\n // Set the src and all other attributes on the new iframe.\n iframeAttributes['src'] = generateIframeSrc();\n for (var name in iframeAttributes) {\n iframe.setAttribute(name, iframeAttributes[name]);\n }\n\n promptElement.appendChild(iframe);\n }\n\n // listen for the 'message' event\n onMessage(onReceivedMessage);\n }\n\n /**\n * We received a postMessage from Duo. POST back to the primary service\n * with the response token, and any additional user-supplied parameters\n * given in form#duo_form.\n */\n // function doPostBack(response) {\n // // create a hidden input to contain the response token\n // var input = document.createElement('input');\n // input.type = 'hidden';\n // input.name = postArgument;\n // input.value = response + ':' + appSig;\n\n // // user may supply their own form with additional inputs\n // var form = document.getElementById('duo_form');\n\n // // if the form doesn't exist, create one\n // if (!form) {\n // form = document.createElement('form');\n\n // // insert the new form after the iframe\n // iframe.parentElement.insertBefore(form, iframe.nextSibling);\n // }\n\n // // make sure we are actually posting to the right place\n // form.method = 'POST';\n // form.action = postAction;\n\n // // add the response token input to the form\n // form.appendChild(input);\n\n // // away we go!\n // if (typeof submitCallback === \"function\") {\n // submitCallback.call(null, form);\n // } else {\n // form.submit();\n // }\n // }\n\n // OKTA: Overriding their doPostBack logic because we want to submit this\n // through ajax, not a postBack\n function doPostBack(response) {\n postAction(response + ':' + appSig);\n }\n \n\n return {\n init: init,\n _onReady: onReady,\n _parseSigRequest: parseSigRequest,\n _isDuoMessage: isDuoMessage,\n _doPostBack: doPostBack\n };\n}));","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'account-unlocked',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'account.unlock.unlocked.title', 'login'),\n subtitle: _.partial(loc, 'account.unlock.unlocked.desc', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'account-unlocked' },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n }),\n ];\n },\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nimport EnterPasscodeForm from 'views/enroll-factors/EnterPasscodeForm';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'activate-totp',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ScopeList from 'views/admin-consent/ScopeList';\nimport consentLogoHeaderTemplate from 'views/shared/templates/consentLogoHeaderTemplate';\n\nconst ConsentModel = {\n props: {\n scopes: ['array', true]\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.consent({\n consent: {\n scopes: _.pluck(this.get('scopes'), 'name')\n }\n });\n });\n },\n cancel: function() {\n var self = this;\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n var consentCancelFn = self.settings.get('consent.cancel');\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n }\n};\n\nconst ConsentHeader = View.extend({\n className: 'consent-title detail-row',\n template: consentLogoHeaderTemplate,\n getTemplateData: function() {\n var appState = this.options.appState;\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n issuer: appState.get('issuer'),\n };\n }\n});\n\nconst ConsentForm = {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: [\n FormType.View({\n View: ConsentHeader\n }),\n FormType.View({\n View: ScopeList,\n }),\n ],\n};\n\nconst AdminConsentRequiredController = FormController.extend({\n Model: ConsentModel,\n\n Form: ConsentForm,\n\n className: 'admin-consent-required',\n\n initialize: function() {\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', () => {\n this.model.cancel();\n });\n },\n});\n\nexport default AdminConsentRequiredController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport BarcodeView from 'views/enroll-factors/BarcodeView';\nimport Footer from 'views/enroll-factors/Footer';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nexport default FormController.extend({\n className: 'barcode-push',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n initialize: function() {\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearErrors();\n });\n },\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.pollForEnrollment();\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport BarcodeView from 'views/enroll-factors/BarcodeView';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'barcode-totp',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n save: _.partial(loc, 'oform.next', 'login'),\n noCancelButton: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'activate'\n );\n\n this.options.appState.trigger('navigate', url);\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport { _, $, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ScopeList from 'views/consent/ScopeList';\nimport SkipLink from 'views/shared/SkipLink';\nimport consentLogoHeaderTemplate from 'views/shared/templates/consentLogoHeaderTemplate';\n\nexport default FormController.extend({\n className: 'consent-required',\n initialize: function() {\n this.model.set('expiresAt', this.options.appState.get('expiresAt'));\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', _.bind(this.model.cancel, this.model));\n\n // add Skip to main content link\n const skipLink = new SkipLink();\n $(`#${Enums.WIDGET_LOGIN_CONTAINER_ID}`).prepend(skipLink.render().$el);\n },\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // Update the \"don't allow\" and \"allow access\" buttons to be neutral by changing \"allow button\" to be gray.\n this.$('.o-form-button-bar .button-primary').removeClass('button-primary');\n },\n Model: {\n props: {\n expiresAt: ['string', true],\n scopes: ['array', true],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.consent({\n consent: {\n expiresAt: this.get('expiresAt'),\n scopes: _.pluck(this.get('scopes'), 'name'),\n },\n });\n });\n },\n cancel: function() {\n const self = this;\n\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n const consentCancelFn = self.settings.get('consent.cancel');\n\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n },\n },\n Form: {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n className: 'consent-title detail-row',\n template: consentLogoHeaderTemplate,\n getTemplateData: function() {\n const appState = this.options.appState;\n\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n };\n },\n }),\n }),\n FormType.View({\n View: new ScopeList({ model: this.model }),\n }),\n FormType.View({\n View: View.extend({\n className: 'consent-description detail-row',\n template: hbs(\n '\\\n '\n ),\n }),\n })\n );\n\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \n \n `,\n initialize: function(){\n this.listenTo(this.model, 'change:sharedSecret', this.render);\n },\n getTemplateData: function() {\n return {\n instructions: instructions,\n sharedSecretKey: this.model.get('sharedSecret')\n };\n },\n }),\n showWhen: { activationType: 'MANUAL' },\n }),\n FormType.View({\n View: View.extend({\n template: hbs(''),\n }),\n showWhen: { activationType: 'MANUAL' },\n }),\n FormType.Button(\n {\n title: loc('oform.next', 'login'),\n className: 'button button-primary button-wide button-next',\n attributes: { 'data-se': 'next-button' },\n click: () => {\n setStateValues(this);\n goToFactorActivation(this, 'passcode');\n },\n },\n '[data-type=\"next-button-wrap\"]'\n ),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.send', 'login'),\n showWhen: {\n activationType: function(val) {\n return val === 'SMS' || val === 'EMAIL';\n },\n },\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.setInitialModel();\n // Move this logic to a model when AuthClient supports sending email and sms\n this.listenTo(this.form, 'save', function() {\n const self = this;\n\n this.model.doTransaction(function(transaction) {\n const activationType = this.get('activationType').toLowerCase();\n const opts = {};\n\n if (activationType === 'sms') {\n opts.profile = { phoneNumber: this.get('fullPhoneNumber') };\n }\n\n return transaction.factor.activation.send(activationType, opts).then(function(trans) {\n setStateValues(self);\n // Note: Need to defer because OktaAuth calls our router success\n // handler on the next tick - if we immediately called, appState would\n // still be populated with the last response\n _.defer(function() {\n goToFactorActivation(self, 'sent');\n });\n return trans;\n });\n });\n });\n\n this.listenTo(this.model, 'change:activationType', function(model, value) {\n this.form.clearErrors();\n if (value === 'MANUAL' && this.options.appState.get('activatedFactorType') !== 'token:software:totp') {\n enrollFactor(this, 'token:software:totp');\n } else if (this.options.appState.get('activatedFactorType') !== 'push') {\n enrollFactor(this, 'push');\n }\n });\n },\n\n setInitialModel: function() {\n if (this.options.appState.get('factorActivationType') === 'SMS') {\n this.model.set({\n countryCode: this.options.appState.get('userCountryCode') || 'US',\n phoneNumber: this.options.appState.get('userPhoneNumber'),\n });\n }\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate') || this.options.appState.get('isMfaEnroll')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport ManualSetupFooter from 'views/enroll-factors/ManualSetupFooter';\nexport default FormController.extend({\n className: 'enroll-manual-totp',\n Model: function() {\n return {\n local: {\n sharedSecret: ['string', false, this.options.appState.get('sharedSecret')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.cannotScanBarcode', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'step-manual-setup' },\n\n formChildren: function() {\n const instructions = this.settings.get('brandName')\n ? loc('enroll.totp.manualSetupInstructions.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.totp.manualSetupInstructions.generic', 'login');\n\n return [\n FormType.View({\n View: View.extend({\n className: 'secret-key-instructions',\n attributes: { 'data-se': 'secret-key-instructions'},\n template: hbs`\n \n \n `,\n initialize: function(){\n this.listenTo(this.model, 'change:sharedSecret', this.render);\n },\n getTemplateData: function() {\n return {\n instructions: instructions,\n sharedSecretKey: this.model.get('sharedSecret')\n };\n },\n })\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.next', 'login'),\n }),\n ];\n },\n },\n\n Footer: ManualSetupFooter,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'activate'\n );\n\n this.options.appState.trigger('navigate', url);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 21] max-statements: [2, 25] max-params: 0 */\nimport { loc, internal } from 'okta';\nimport BaseLoginController from 'util/BaseLoginController';\nimport EmailMagicLinkForm from 'views/factor-verify/EmailMagicLinkForm';\nimport InlineTOTPForm from 'views/mfa-verify/InlineTOTPForm';\nimport PassCodeForm from 'views/mfa-verify/PassCodeForm';\nimport PasswordForm from 'views/mfa-verify/PasswordForm';\nimport PushForm from 'views/mfa-verify/PushForm';\nimport SecurityQuestionForm from 'views/mfa-verify/SecurityQuestionForm';\nimport SendEmailAndVerifyCodeForm from 'views/mfa-verify/SendEmailAndVerifyCodeForm';\nimport TOTPForm from 'views/mfa-verify/TOTPForm';\nimport YubikeyForm from 'views/mfa-verify/YubikeyForm';\nimport FooterMFA from 'views/shared/FooterMFA';\nlet { CheckBox } = internal.views.forms.inputs;\nexport default BaseLoginController.extend({\n className: 'mfa-verify',\n\n initialize: function(options) {\n const factorType = options.factorType;\n let View;\n\n switch (factorType) {\n case 'question':\n View = SecurityQuestionForm;\n break;\n case 'email':\n if (this.options.appState.get('isIdxStateToken')) {\n View = EmailMagicLinkForm;\n } else {\n View = SendEmailAndVerifyCodeForm;\n }\n break;\n case 'sms':\n case 'call':\n View = PassCodeForm;\n break;\n case 'token':\n case 'token:software:totp':\n case 'token:hotp':\n View = TOTPForm;\n break;\n case 'token:hardware':\n View = YubikeyForm;\n break;\n case 'push':\n View = PushForm;\n break;\n case 'password':\n View = PasswordForm;\n break;\n default:\n throw new Error('Unrecognized factor type');\n }\n\n this.model = this.findModel(factorType, options);\n if (!this.model) {\n // TODO: recover from this more gracefully - probably to redirect\n // to default factor\n throw new Error('Unrecognized factor/provider');\n }\n\n this.addListeners();\n this.add(new View(this.toJSON()));\n\n // If Okta Verify Push and Okta Verify totp are both enabled,\n // then we show Push first, and totp is the \"backup\" factor,\n // which is rendered in an additional InlineTOTPForm\n if (factorType === 'push' && this.model.get('isOktaFactor')) {\n if (this.model.get('backupFactor')) {\n this.inlineTotpForm = this.add(InlineTOTPForm, {\n options: { model: this.model.get('backupFactor') },\n }).last();\n }\n\n if (this.settings.get('features.autoPush')) {\n this.autoPushCheckBox = this.add(CheckBox, {\n options: {\n model: this.model,\n name: 'autoPush',\n placeholder: loc('autoPush', 'login'),\n label: false,\n 'label-top': false,\n className: 'margin-btm-0',\n },\n }).last();\n }\n\n // Remember Device checkbox resides outside of the Push and TOTP forms.\n if (this.options.appState.get('allowRememberDevice')) {\n this.rememberDeviceCheckbox = this.add(CheckBox, {\n options: {\n model: this.model,\n name: 'rememberDevice',\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n label: false,\n 'label-top': true,\n className: 'margin-btm-0',\n },\n }).last();\n }\n // Set rememberDevice on the backup factor (totp) if available\n if (this.model.get('backupFactor')) {\n this.listenTo(this.model, 'change:rememberDevice', function(model, rememberDevice) {\n model.get('backupFactor').set('rememberDevice', rememberDevice);\n });\n }\n }\n\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', function(\n state,\n isWaitingForNumberChallenge\n ) {\n if (isWaitingForNumberChallenge || this.options.appState.get('lastAuthResponse').status === 'SUCCESS') {\n this.autoPushCheckBox && this.autoPushCheckBox.$el.hide();\n this.rememberDeviceCheckbox && this.rememberDeviceCheckbox.$el.hide();\n this.inlineTotpForm && this.inlineTotpForm.$el.hide();\n } else {\n this.autoPushCheckBox && this.autoPushCheckBox.$el.show();\n this.rememberDeviceCheckbox && this.rememberDeviceCheckbox.$el.show();\n this.inlineTotpForm && this.inlineTotpForm.$el.show();\n }\n });\n\n this.add(new FooterMFA(this.toJSON()));\n },\n\n findModel: function(factorType, options) {\n const factors = options.appState.get('factors');\n const provider = options.provider;\n const factorIndex = options.factorIndex;\n\n if (!provider) {\n return factors.findWhere({ factorType: factorType, isFactorTypeVerification: true });\n } else if (factors.hasMultipleFactorsOfSameType(factorType) && factorIndex) {\n return factors.getFactorByTypeAndIndex(factorType, factorIndex);\n } else {\n return factors.findWhere({ provider: provider, factorType: factorType });\n }\n },\n\n trapAuthResponse: function() {\n if (\n (this.options.appState.get('isMfaRequired') && this.options.appState.get('trapMfaRequiredResponse')) ||\n this.options.appState.get('isMfaChallenge')\n ) {\n this.options.appState.set('trapMfaRequiredResponse', false);\n return true;\n }\n return false;\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport Footer from 'views/expired-password/Footer';\nimport PasswordRequirements from 'views/shared/PasswordRequirements';\nimport TextBox from 'views/shared/TextBox';\n\nexport default FormController.extend({\n className: 'password-expired',\n Model: {\n props: {\n oldPassword: ['string', true],\n newPassword: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validatePasswordMatch(this);\n },\n save: function() {\n this.trigger('save');\n return this.doTransaction(function(transaction) {\n return transaction.changePassword({\n oldPassword: this.get('oldPassword'),\n newPassword: this.get('newPassword'),\n });\n });\n },\n },\n Form: {\n save: _.partial(loc, 'password.expired.submit', 'login'),\n title: function() {\n const expiringSoon = this.options.appState.get('isPwdExpiringSoon');\n const numDays = this.options.appState.get('passwordExpireDays');\n\n if (expiringSoon && numDays > 0) {\n return loc('password.expiring.title', 'login', [numDays]);\n } else if (expiringSoon && numDays === 0) {\n return loc('password.expiring.today', 'login');\n } else if (expiringSoon) {\n return loc('password.expiring.soon', 'login');\n } else {\n return this.settings.get('brandName')\n ? loc('password.expired.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expired.title.generic', 'login');\n }\n },\n subtitle: function() {\n if (this.options.appState.get('isPwdExpiringSoon')) {\n return this.settings.get('brandName')\n ? loc('password.expiring.subtitle.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expiring.subtitle.generic', 'login');\n }\n\n const policy = this.options.appState.get('policy');\n\n if (!policy || this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n return;\n }\n\n return FactorUtil.getPasswordComplexityDescription(policy);\n },\n parseErrorMessage: function(responseJSON) {\n const policy = this.options.appState.get('policy');\n\n if (!!policy && this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n /*\n - This is a specific case where don't want to repeat the requirements again in the error message, since this\n is already shown in the description. The description as bullet-points itself should give an indication\n of the requirements.\n - We cannot check for error code this in this case, as the error code is shared between\n requirements not met message, common password message, etc. So error summary is the only differentiating\n factor. Replace the password requirements string with empty string in this case.\n */\n responseJSON = FactorUtil.removeRequirementsFromError(responseJSON, policy);\n }\n return responseJSON;\n },\n formChildren: function() {\n let children = [];\n\n if (this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n children.push(\n FormType.View({\n View: new PasswordRequirements({ policy: this.options.appState.get('policy') }),\n })\n );\n }\n\n children = children.concat([\n FormType.Input({\n 'label-top': true,\n label: loc('password.oldPassword.placeholder', 'login'),\n explain: Util.createInputExplain('password.oldPassword.tooltip', 'password.oldPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'oldPassword',\n input: TextBox,\n type: 'password',\n }),\n FormType.Divider(),\n FormType.Input({\n className: 'margin-btm-5',\n 'label-top': true,\n label: loc('password.newPassword.placeholder', 'login'),\n explain: Util.createInputExplain('password.newPassword.tooltip', 'password.newPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'newPassword',\n input: TextBox,\n type: 'password',\n }),\n FormType.Input({\n 'label-top': true,\n label: loc('password.confirmPassword.placeholder', 'login'),\n explain: Util.createInputExplain(\n 'password.confirmPassword.tooltip',\n 'password.confirmPassword.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n }),\n ]);\n\n return children;\n },\n },\n Footer: Footer,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const creds = {\n username: this.options.appState.get('userEmail'),\n password: this.model.get('newPassword'),\n };\n\n this.settings.processCreds(creds).then(_.bind(this.model.save, this.model));\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport PasswordRequirements from 'views/shared/PasswordRequirements';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'password-reset',\n Model: {\n props: {\n newPassword: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validatePasswordMatch(this);\n },\n save: function() {\n this.trigger('save');\n const self = this;\n\n return this.doTransaction(function(transaction) {\n return transaction.resetPassword({\n newPassword: self.get('newPassword'),\n });\n });\n },\n },\n Form: {\n save: _.partial(loc, 'password.reset', 'login'),\n title: function() {\n return this.settings.get('brandName')\n ? loc('password.reset.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.reset.title.generic', 'login');\n },\n subtitle: function() {\n const policy = this.options.appState.get('policy');\n\n if (!policy || this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n return;\n }\n\n return FactorUtil.getPasswordComplexityDescription(policy);\n },\n parseErrorMessage: function(responseJSON) {\n const policy = this.options.appState.get('policy');\n\n if (!!policy && this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n /*\n - This is a specific case where don't want to repeat the requirements again in the error message, since this\n is already shown in the description. The description as bullet-points itself should give an indication\n of the requirements.\n - We cannot check for error code this in this case, as the error code is shared between\n requirements not met message, common password message, etc. So error summary is the only differentiating\n factor. Replace the password requirements string with empty string in this case.\n */\n responseJSON = FactorUtil.removeRequirementsFromError(responseJSON, policy);\n }\n return responseJSON;\n },\n formChildren: function() {\n let children = [];\n\n if (this.settings.get('features.showPasswordRequirementsAsHtmlList')) {\n children.push(\n FormType.View({\n View: new PasswordRequirements({ policy: this.options.appState.get('policy') }),\n })\n );\n }\n\n children = children.concat([\n FormType.Input({\n className: 'margin-btm-5',\n label: loc('password.newPassword.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain('password.newPassword.tooltip', 'password.newPassword.placeholder', 'login'),\n 'explain-top': true,\n name: 'newPassword',\n input: TextBox,\n type: 'password',\n autoComplete: 'new-password',\n }),\n FormType.Input({\n label: loc('password.confirmPassword.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'password.confirmPassword.tooltip',\n 'password.confirmPassword.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n autoComplete: 'new-password',\n }),\n ]);\n return children;\n },\n },\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const creds = {\n username: this.options.appState.get('userEmail'),\n password: this.model.get('newPassword'),\n };\n\n this.settings.processCreds(creds).then(_.bind(this.model.save, this.model));\n });\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'poll',\n Model: {\n save: function() {\n this.trigger('cancelRequest');\n return this.appState\n .get('transaction')\n .cancel()\n .then(() => {\n this.options.appState.trigger('navigate', '');\n })\n .catch(() => {\n this._stopCountDown();\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: function() {\n return this.title;\n },\n className: 'poll-controller',\n noCancelButton: true,\n save: loc('oform.cancel', 'login'),\n modelEvents: {\n cancelRequest: '_stopCountDown',\n },\n formChildren: [\n FormType.View({\n View: '\n {{{i18n code=\"consent.required.text\" bundle=\"login\" arguments=\"appName\"}}}\n {{#if issuer}}\n
`;\n\nexport default consentLogoHeaderTemplate;\n","import { _, $ } from 'okta';\nimport Errors from 'util/Errors';\nimport OAuth2Util from 'util/OAuth2Util';\n\nexport default function buildRenderOptions(widgetOptions = {}, options = {}) {\n const authParams = $.extend(true, {}, widgetOptions.authParams, _.pick(options, OAuth2Util.AUTH_PARAMS));\n const { el, clientId, redirectUri } = Object.assign({}, widgetOptions, options);\n const renderOptions = Object.assign({}, { el, clientId, redirectUri, authParams });\n\n if (!renderOptions.el) {\n throw new Errors.ConfigError('\"el\" is required');\n }\n\n if (!renderOptions.clientId) {\n throw new Errors.ConfigError('\"clientId\" is required');\n }\n\n if (!renderOptions.redirectUri) {\n throw new Errors.ConfigError('\"redirectUri\" is required');\n }\n\n return renderOptions;\n}","import { $ } from 'okta';\nimport Enums from 'util/Enums';\n\nexport default function createRouter(Router, widgetOptions, renderOptions, authClient, successFn, errorFn, hooks) {\n let resolve;\n let reject;\n const promise = new Promise((_resolve, _reject) => {\n resolve = _resolve;\n reject = _reject;\n });\n const routerOptions = $.extend(true, {}, widgetOptions, renderOptions, {\n authClient,\n hooks,\n globalSuccessFn: (res) => {\n successFn && successFn(res); // call success function if provided\n if (res && res.status === Enums.SUCCESS) {\n resolve(res);\n }\n },\n globalErrorFn: (error) => {\n errorFn && errorFn(error); // call error function if provided\n reject(error);\n }\n });\n const router = new Router(routerOptions);\n router.start();\n return {\n router,\n routerOptions,\n promise\n };\n}\n\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: 0 */\nimport AccountUnlockedController from 'AccountUnlockedController';\nimport ActivateTotpController from 'ActivateTotpController';\nimport AdminConsentRequiredController from 'AdminConsentRequiredController';\nimport BarcodePushController from 'BarcodePushController';\nimport BarcodeTotpController from 'BarcodeTotpController';\nimport ConsentRequiredController from 'ConsentRequiredController';\nimport CustomPasswordExpiredController from 'CustomPasswordExpiredController';\nimport DeviceActivateController from './DeviceActivateController';\nimport DeviceActivateTerminalController from './DeviceActivateTerminalController';\nimport EnrollActivateCustomFactorController from 'EnrollActivateCustomFactorController';\nimport EnrollActivateEmailController from 'EnrollActivateEmailController';\nimport EnrollCallAndSmsController from 'EnrollCallAndSmsController';\nimport EnrollChoicesController from 'EnrollChoicesController';\nimport EnrollCustomFactorController from 'EnrollCustomFactorController';\nimport EnrollDuoController from 'EnrollDuoController';\nimport EnrollEmailController from 'EnrollEmailController';\nimport EnrollHotpController from 'EnrollHotpController';\nimport EnrollOnPremController from 'EnrollOnPremController';\nimport EnrollPasswordController from 'EnrollPasswordController';\nimport EnrollQuestionController from 'EnrollQuestionController';\nimport EnrollSymantecVipController from 'EnrollSymantecVipController';\nimport EnrollTotpController from 'EnrollTotpController';\nimport EnrollU2FController from 'EnrollU2FController';\nimport EnrollUserController from 'EnrollUserController';\nimport EnrollWebauthnController from 'EnrollWebauthnController';\nimport EnrollWindowsHelloController from 'EnrollWindowsHelloController';\nimport EnrollYubikeyController from 'EnrollYubikeyController';\nimport EnrollmentLinkSentController from 'EnrollmentLinkSentController';\nimport EnterPasscodePushFlowController from 'EnterPasscodePushFlowController';\nimport ForgotPasswordController from 'ForgotPasswordController';\nimport IDPDiscoveryController from 'IDPDiscoveryController';\nimport ForceIDPDiscoveryController from 'ForceIDPDiscoveryController';\nimport ManualSetupPushController from 'ManualSetupPushController';\nimport ManualSetupTotpController from 'ManualSetupTotpController';\nimport MfaVerifyController from 'MfaVerifyController';\nimport PasswordExpiredController from 'PasswordExpiredController';\nimport PasswordResetController from 'PasswordResetController';\nimport PollController from 'PollController';\nimport PrimaryAuthController from 'PrimaryAuthController';\nimport PwdResetEmailSentController from 'PwdResetEmailSentController';\nimport RecoveryChallengeController from 'RecoveryChallengeController';\nimport RecoveryLoadingController from 'RecoveryLoadingController';\nimport RecoveryQuestionController from 'RecoveryQuestionController';\nimport RefreshAuthStateController from 'RefreshAuthStateController';\nimport RegistrationCompleteController from 'RegistrationCompleteController';\nimport RegistrationController from 'RegistrationController';\nimport UnlockAccountController from 'UnlockAccountController';\nimport UnlockEmailSentController from 'UnlockEmailSentController';\nimport VerifyCustomFactorController from 'VerifyCustomFactorController';\nimport VerifyDuoController from 'VerifyDuoController';\nimport VerifyPIVController from 'VerifyPIVController';\nimport VerifyU2FController from 'VerifyU2FController';\nimport VerifyWebauthnController from 'VerifyWebauthnController';\nimport VerifyWindowsHelloController from 'VerifyWindowsHelloController';\nimport ErrorStateController from 'ErrorStateController';\nimport BaseLoginRouter from 'util/BaseLoginRouter';\nimport FactorBeacon from 'views/shared/FactorBeacon';\nimport PIVBeacon from 'views/shared/PIVBeacon';\nimport SecurityBeacon from 'views/shared/SecurityBeacon';\n\nimport Enums from 'util/Enums';\n\nexport default BaseLoginRouter.extend({\n routes: {\n '': 'defaultAuth',\n signin: 'primaryAuth',\n 'signin/verify/duo/web': 'verifyDuo',\n 'signin/verify/piv': 'verifyPIV',\n 'signin/poll': 'poll',\n 'signin/verify/fido/webauthn': 'verifyWebauthn',\n 'signin/verify/webauthn': 'verifyWebauthn',\n 'signin/verify/fido/u2f': 'verifyU2F',\n 'signin/verify/u2f': 'verifyU2F',\n 'signin/verify/generic_saml/assertion:saml2': 'verifySAMLFactor',\n 'signin/verify/generic_oidc/assertion:oidc': 'verifyOIDCFactor',\n 'signin/verify/custom/claims_provider': 'verifyClaimsFactor',\n 'signin/verify/:factorType': 'verifyNoProvider',\n 'signin/verify/:provider/:factorType(/:factorIndex)': 'verify',\n 'signin/enroll': 'enrollChoices',\n 'signin/enroll/duo/web': 'enrollDuo',\n 'signin/enroll/okta/question': 'enrollQuestion',\n 'signin/enroll/okta/password': 'enrollPassword',\n 'signin/enroll/okta/sms': 'enrollSms',\n 'signin/enroll/okta/call': 'enrollCall',\n 'signin/enroll/okta/email': 'enrollEmail',\n 'signin/enroll-activate/okta/sms': 'enrollSms',\n 'signin/enroll-activate/okta/call': 'enrollCall',\n 'signin/enroll/rsa/token': 'enrollRsa',\n 'signin/enroll/del_oath/token': 'enrollOnPrem',\n 'signin/enroll/symantec/token': 'enrollSymantecVip',\n 'signin/enroll/yubico/token:hardware': 'enrollYubikey',\n 'signin/enroll/fido/webauthn': 'enrollWebauthn',\n 'signin/enroll/fido/u2f': 'enrollU2F',\n 'signin/enroll/generic_saml/assertion:saml2': 'enrollSAMLFactor',\n 'signin/enroll/generic_oidc/assertion:oidc': 'enrollOIDCFactor',\n 'signin/enroll/custom/claims_provider': 'enrollClaimsFactor',\n 'signin/enroll/custom/token:hotp': 'enrollHotpFactor',\n 'signin/enroll/:provider/:factorType': 'enrollTotpFactor',\n 'signin/enroll-activate/okta/email': 'enrollActivateEmail',\n 'signin/enroll-activate/okta/push': 'scanBarcodePushFactor',\n 'signin/enroll-activate/okta/push/manual': 'manualSetupPushFactor',\n 'signin/enroll-activate/okta/push/sent': 'activationLinkSent',\n 'signin/enroll-activate/okta/token:software:totp/passcode': 'enterPasscodeInPushEnrollmentFlow',\n 'signin/enroll-activate/custom/claims_provider': 'enrollActivateClaimsFactor',\n 'signin/enroll-activate/:provider/:factorType': 'scanBarcodeTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/activate': 'activateTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/manual': 'manualSetupTotpFactor',\n 'signin/password-expired': 'passwordExpired',\n 'signin/custom-password-expired': 'customPasswordExpired',\n 'signin/forgot-password': 'forgotPassword',\n 'signin/recovery-challenge': 'recoveryChallenge',\n 'signin/recovery-emailed': 'recoveryEmailSent',\n 'signin/recovery-question': 'recoveryQuestion',\n 'signin/password-reset': 'passwordReset',\n 'signin/reset-password/:token': 'recoveryLoading',\n 'signin/user-unlock/:token': 'recoveryLoading',\n 'signin/recovery/:token': 'recoveryLoading',\n 'signin/unlock-emailed': 'unlockEmailSent',\n 'signin/unlock': 'unlockAccount',\n 'signin/account-unlocked': 'accountUnlocked',\n 'signin/refresh-auth-state(/:token)': 'refreshAuthState',\n 'signin/register': 'register',\n 'signin/register-complete': 'registerComplete',\n 'signin/error': 'errorState',\n 'signin/consent': 'consentRequired',\n 'signin/admin-consent': 'adminConsentRequired',\n 'signin/enroll-user': 'enrollUser',\n 'signin/device-activate-complete': 'deviceActivateComplete',\n 'signin/device-activate': 'deviceActivate',\n 'signin/idp-discovery-check': 'idpDiscoveryCheck',\n '*wildcard': 'defaultAuth',\n },\n\n // Route handlers that do not require a stateToken. If the page is refreshed,\n // these functions will not require a status call to refresh the stateToken.\n stateLessRouteHandlers: [\n 'defaultAuth',\n 'idpDiscovery',\n 'primaryAuth',\n 'forgotPassword',\n 'recoveryLoading',\n 'unlockAccount',\n 'refreshAuthState',\n 'register',\n 'registerComplete',\n 'errorState',\n 'verifyPIV',\n ],\n\n defaultAuth: function() {\n if (window.location.hash === `#${Enums.WIDGET_CONTAINER_ID}`) {\n document.getElementById(Enums.WIDGET_CONTAINER_ID).focus();\n return;\n }\n if (this.settings.get('features.idpDiscovery')) {\n this.idpDiscovery();\n } else {\n this.primaryAuth();\n }\n },\n\n idpDiscoveryCheck: function() {\n this.render(ForceIDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n idpDiscovery: function() {\n this.render(IDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n primaryAuth: function() {\n this.render(PrimaryAuthController, { Beacon: SecurityBeacon });\n },\n\n verifyDuo: function() {\n this.render(VerifyDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n verifyPIV: function() {\n this.render(VerifyPIVController, { Beacon: PIVBeacon });\n },\n\n poll: function() {\n this.render(PollController);\n },\n\n verifyWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(VerifyWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(VerifyWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n verifyU2F: function() {\n this.render(VerifyU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n verifySAMLFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n verifyOIDCFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n verifyClaimsFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n verify: function(provider, factorType, factorIndex) {\n this.render(MfaVerifyController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n factorIndex: factorIndex,\n Beacon: FactorBeacon,\n });\n },\n\n verifyNoProvider: function(factorType) {\n this.render(MfaVerifyController, {\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollChoices: function() {\n this.render(EnrollChoicesController, { Beacon: SecurityBeacon });\n },\n\n enrollDuo: function() {\n this.render(EnrollDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n enrollQuestion: function() {\n this.render(EnrollQuestionController, {\n provider: 'OKTA',\n factorType: 'question',\n Beacon: FactorBeacon,\n });\n },\n\n enrollPassword: function() {\n this.render(EnrollPasswordController, {\n provider: 'OKTA',\n factorType: 'password',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSms: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'sms',\n Beacon: FactorBeacon,\n });\n },\n\n enrollCall: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'call',\n Beacon: FactorBeacon,\n });\n },\n\n enrollEmail: function() {\n this.render(EnrollEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateEmail: function() {\n this.render(EnrollActivateEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollRsa: function() {\n this.render(EnrollOnPremController, {\n provider: 'RSA',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOnPrem: function() {\n this.render(EnrollOnPremController, {\n provider: 'DEL_OATH',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSymantecVip: function() {\n this.render(EnrollSymantecVipController, {\n provider: 'SYMANTEC',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollYubikey: function() {\n this.render(EnrollYubikeyController, {\n provider: 'YUBICO',\n factorType: 'token:hardware',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSAMLFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOIDCFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n enrollClaimsFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateClaimsFactor: function() {\n this.render(EnrollActivateCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollTotpFactor: function(provider, factorType) {\n this.render(EnrollTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollHotpFactor: function() {\n this.render(EnrollHotpController, {\n provider: 'CUSTOM',\n factorType: 'token:hotp',\n Beacon: FactorBeacon,\n });\n },\n\n enrollWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(EnrollWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(EnrollWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n enrollU2F: function() {\n this.render(EnrollU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodeTotpFactor: function(provider, factorType) {\n this.render(BarcodeTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodePushFactor: function() {\n this.render(BarcodePushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activateTotpFactor: function(provider, factorType) {\n this.render(ActivateTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupTotpFactor: function(provider, factorType) {\n this.render(ManualSetupTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupPushFactor: function() {\n this.render(ManualSetupPushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activationLinkSent: function() {\n this.render(EnrollmentLinkSentController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n enterPasscodeInPushEnrollmentFlow: function() {\n this.render(EnterPasscodePushFlowController, {\n provider: 'OKTA',\n factorType: 'token:software:totp',\n Beacon: FactorBeacon,\n });\n },\n\n passwordExpired: function() {\n this.render(PasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n customPasswordExpired: function() {\n this.render(CustomPasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n forgotPassword: function() {\n this.render(ForgotPasswordController);\n },\n\n recoveryChallenge: function() {\n this.render(RecoveryChallengeController, { Beacon: SecurityBeacon });\n },\n\n recoveryEmailSent: function() {\n this.render(PwdResetEmailSentController, { Beacon: SecurityBeacon });\n },\n\n unlockEmailSent: function() {\n this.render(UnlockEmailSentController, { Beacon: SecurityBeacon });\n },\n\n recoveryQuestion: function() {\n this.render(RecoveryQuestionController, { Beacon: SecurityBeacon });\n },\n\n passwordReset: function() {\n this.render(PasswordResetController, { Beacon: SecurityBeacon });\n },\n\n recoveryLoading: function(token) {\n this.render(RecoveryLoadingController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n unlockAccount: function() {\n this.render(UnlockAccountController);\n },\n\n accountUnlocked: function() {\n this.render(AccountUnlockedController, { Beacon: SecurityBeacon });\n },\n\n refreshAuthState: function(token) {\n this.render(RefreshAuthStateController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n register: function() {\n this.render(RegistrationController);\n },\n\n registerComplete: function() {\n this.render(RegistrationCompleteController);\n },\n\n errorState: function() {\n this.render(ErrorStateController, { Beacon: SecurityBeacon });\n },\n\n consentRequired: function() {\n this.render(ConsentRequiredController);\n },\n\n adminConsentRequired: function() {\n this.render(AdminConsentRequiredController);\n },\n\n enrollUser: function() {\n this.render(EnrollUserController);\n },\n\n deviceActivate: function() {\n this.render(DeviceActivateController);\n },\n deviceActivateComplete: function() {\n this.render(DeviceActivateTerminalController);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model } from 'okta';\nimport { mergeHook } from 'util/Hooks';\nimport { HookDefinition, HooksOptions } from 'types';\n\nexport default class Hooks extends Model {\n\n mergeHook(formName: string, hookToMerge: HookDefinition): void {\n const hooks = this.get('hooks') || {};\n mergeHook(hooks, formName, hookToMerge);\n this.set('hooks', hooks);\n }\n\n getHook(formName: string): HookDefinition {\n const hooks: HooksOptions = this.get('hooks') || {};\n return hooks[formName]; // may be undefined\n }\n \n}\n","/* eslint max-statements: [2, 22], complexity: [2, 12] */\n\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model, loc, internal, ModelProperty } from 'okta';\nimport config from 'config/config.json';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Errors from 'util/Errors';\nimport IDP from 'util/IDP';\nimport Logger from 'util/Logger';\nimport Util from 'util/Util';\nimport CountryUtil from 'util/CountryUtil';\nimport { OktaAuth } from '@okta/okta-auth-js';\nconst SharedUtil = internal.util.Util;\nconst ConfigError = Errors.ConfigError;\nconst UnsupportedBrowserError = Errors.UnsupportedBrowserError;\nconst assetBaseUrlTpl = hbs('https://global.oktacdn.com/okta-signin-widget/{{version}}');\n\nconst local: Record = {\n baseUrl: ['string', true],\n recoveryToken: ['string', false, undefined],\n stateToken: ['string', false, undefined],\n username: ['string', false],\n signOutLink: ['string', false],\n relayState: ['string', false],\n\n redirect: {\n type: 'string',\n values: ['never', 'always', 'auto'],\n value: 'auto',\n },\n\n // allows bootstrapping the Widget into a specific view such\n // as register or forgot password\n flow: ['string', false, 'default'],\n\n // Function to transform the username before passing it to the API\n // for Primary Auth, Forgot Password and Unlock Account.\n transformUsername: ['function', false],\n\n // CALLBACKS\n globalSuccessFn: 'function',\n globalErrorFn: 'function',\n processCreds: 'function',\n hooks: 'object',\n\n // IMAGES\n logo: 'string',\n logoText: ['string', false],\n helpSupportNumber: 'string',\n\n // \n // attribute to hold proxy (fake) idx response\n // to render static pages without initiating idx pipeline\n proxyIdxResponse: ['object', false],\n\n // \n // By default, state handle will be saved to session storage\n // and will be clear when terminal error or success redirect.\n // Set this flag to true if you want to override this behavior.\n // a.k.a dishonor the state handle stored in session storage.\n overrideExistingStateToken: ['boolean', false, false],\n\n // FEATURES\n 'features.router': ['boolean', true, false],\n 'features.securityImage': ['boolean', true, false],\n 'features.rememberMe': ['boolean', true, true],\n 'features.autoPush': ['boolean', true, false],\n 'features.smsRecovery': ['boolean', true, false],\n 'features.callRecovery': ['boolean', true, false],\n 'features.emailRecovery': ['boolean', false, true],\n 'features.webauthn': ['boolean', true, false],\n 'features.selfServiceUnlock': ['boolean', true, false],\n 'features.multiOptionalFactorEnroll': ['boolean', true, false],\n 'features.deviceFingerprinting': ['boolean', false, false],\n 'features.hideSignOutLinkInMFA': ['boolean', false, false],\n 'features.skipIdpFactorVerificationBtn': ['boolean', false, false],\n 'features.hideBackToSignInForReset': ['boolean', false, false],\n 'features.customExpiredPassword': ['boolean', true, false],\n 'features.registration': ['boolean', false, false],\n 'features.idpDiscovery': ['boolean', false, false],\n 'features.passwordlessAuth': ['boolean', false, false],\n 'features.showPasswordToggleOnSignInPage': ['boolean', false, false],\n 'features.trackTypingPattern': ['boolean', false, false],\n 'features.redirectByFormSubmit': ['boolean', false, false],\n 'features.useDeviceFingerprintForSecurityImage': ['boolean', false, true],\n 'features.showPasswordRequirementsAsHtmlList': ['boolean', false, false],\n 'features.mfaOnlyFlow': ['boolean', false, false],\n 'features.scrollOnError': ['boolean', false, true],\n 'features.showKeepMeSignedIn': ['boolean', false, true],\n 'features.showIdentifier': ['boolean', false, true],\n 'features.autoFocus': ['boolean', false, true],\n 'features.rememberMyUsernameOnOIE': ['boolean', false, false],\n \n defaultCountryCode: ['string', false, 'US'],\n\n // I18N\n language: ['any', false], // Can be a string or a function\n i18n: ['object', false],\n\n // ASSETS\n 'assets.baseUrl': ['string', false],\n 'assets.rewrite': {\n type: 'function',\n value: _.identity,\n },\n 'assets.languages': ['array', false],\n\n // OAUTH2\n issuer: 'string',\n clientId: 'string',\n redirectUri: 'string',\n state: 'string',\n scopes: 'array',\n codeChallenge: 'string',\n codeChallengeMethod: ['string', false],\n oAuthTimeout: ['number', false],\n\n authScheme: ['string', false, 'OAUTH2'],\n\n // External IdPs\n idps: ['array', false, []],\n idpDisplay: {\n type: 'string',\n values: ['PRIMARY', 'SECONDARY'],\n value: 'SECONDARY',\n },\n\n // HELP LINKS\n 'helpLinks.help': 'string',\n 'helpLinks.forgotPassword': 'string',\n 'helpLinks.unlock': 'string',\n 'helpLinks.custom': 'array',\n 'helpLinks.factorPage.href': 'string',\n 'helpLinks.factorPage.text': 'string',\n\n //Custom Buttons\n customButtons: ['array', false, []],\n\n //Registration\n policyId: 'string',\n 'registration.click': 'function',\n 'registration.parseSchema': 'function',\n 'registration.preSubmit': 'function',\n 'registration.postSubmit': 'function',\n\n //Consent\n 'consent.cancel': 'function',\n\n //IDP Discovery\n 'idpDiscovery.requestContext': 'string',\n\n //Colors\n 'colors.brand': 'string',\n\n //Descriptions\n brandName: 'string',\n\n //PIV\n piv: ['object', false, {}],\n\n //Email verify callback\n otp: 'string',\n};\n\nconst derived: Record = {\n showPasswordToggle: {\n deps: ['features.showPasswordToggleOnSignInPage'],\n fn: function() {\n // showPasswordToggle is for OIE only.\n // Used to default showPasswordToggleOnSignInPage to true.\n const defaultValue = true;\n const customizedValue = this.options?.features?.showPasswordToggleOnSignInPage ??\n this.options?.['features.showPasswordToggleOnSignInPage'];\n return customizedValue ?? defaultValue;\n },\n cache: true,\n },\n redirectUtilFn: {\n deps: ['features.redirectByFormSubmit'],\n fn: function(redirectByFormSubmit) {\n return redirectByFormSubmit ? Util.redirectWithFormGet.bind(Util) : SharedUtil.redirect.bind(SharedUtil);\n },\n cache: true,\n },\n supportedLanguages: {\n deps: ['i18n', 'language', 'assets.languages'],\n fn: function(i18n, language, hostedLanguages) {\n // By default, the language be automatically detected from the browser\n // Developers can specify the language. It will be added to the supportedLanguages list.\n // Developers can also provide a list of languages with hosted assets, these replace the default list\n const supportedLanguages = hostedLanguages || config.supportedLanguages;\n return _.union(\n supportedLanguages, \n _.keys(i18n), \n _.isString(language) ? [language] : []\n );\n },\n cache: true,\n },\n languageCode: {\n deps: ['language', 'supportedLanguages'],\n fn: function(language, supportedLanguages) {\n const userLanguages = BrowserFeatures.getUserLanguages();\n\n const preferred = _.clone(userLanguages);\n\n const supportedLowerCase = Util.toLower(supportedLanguages);\n\n // Any developer defined \"language\" takes highest priority:\n // As a string, i.e. 'en', 'ja', 'zh-CN'\n if (_.isString(language)) {\n preferred.unshift(language);\n } else if (_.isFunction(language)) {\n // As a callback function, which is passed the list of supported\n // languages and detected user languages. This function must return\n // a languageCode, i.e. 'en', 'ja', 'zh-CN'\n preferred.unshift(language(supportedLanguages, userLanguages));\n }\n\n // Add default language, and expand to include any language\n // codes that do not include region, dialect, etc.\n preferred.push(config.defaultLanguage);\n const expanded = Util.toLower(Util.expandLanguages(preferred));\n\n // Perform a case insensitive search - this is necessary in the case\n // of browsers like Safari\n let i;\n let supportedPos;\n\n for (i = 0; i < expanded.length; i++) {\n supportedPos = supportedLowerCase.indexOf(expanded[i]);\n if (supportedPos > -1) {\n return supportedLanguages[supportedPos];\n }\n }\n },\n },\n countryCode: {\n deps: ['defaultCountryCode'],\n fn: function(defaultCountryCode) {\n const countries = CountryUtil.getCountries();\n return Object.keys(countries).includes(defaultCountryCode)\n ? defaultCountryCode : 'US';\n },\n },\n mode: {\n deps: ['useInteractionCodeFlow', 'codeChallenge'],\n fn: function(useInteractionCodeFlow, codeChallenge) {\n if (useInteractionCodeFlow && codeChallenge) {\n return 'remediation';\n }\n return 'relying-party';\n }\n },\n oauth2Enabled: {\n deps: ['clientId', 'authScheme'],\n fn: function(clientId, authScheme) {\n return (!!clientId) && authScheme.toLowerCase() === 'oauth2';\n },\n cache: true,\n },\n oieEnabled: {\n deps: ['stateToken', 'proxyIdxResponse', 'useInteractionCodeFlow'],\n fn: function(stateToken, proxyIdxResponse, useInteractionCodeFlow) {\n return stateToken || proxyIdxResponse || useInteractionCodeFlow;\n },\n cache: true,\n },\n // Redirect Uri to provide in the oauth API\n oauthRedirectUri: {\n deps: ['redirectUri'],\n fn: function(redirectUri) {\n if (redirectUri) {\n return redirectUri;\n }\n\n let origin = window.location.origin;\n\n // IE8\n if (!origin) {\n const href = window.location.href;\n const path = window.location.pathname;\n\n if (path !== '') {\n origin = href.substring(0, href.lastIndexOf(path));\n }\n }\n\n return encodeURI(origin);\n },\n },\n // Adjusts the idps passed into the widget based on if they get explicit support\n configuredSocialIdps: {\n deps: ['idps'],\n fn: function(idps) {\n return _.map(idps, function(idpConfig) {\n const idp = _.clone(idpConfig);\n\n let type = idp.type && idp.type.toLowerCase();\n\n if (!(type && _.contains(IDP.SUPPORTED_SOCIAL_IDPS, type))) {\n type = 'general-idp';\n idp.text = idp.text || '{ Please provide a text value }';\n }\n\n idp.className = [\n 'social-auth-button',\n 'social-auth-' + type + '-button ',\n idp.className ? idp.className : '',\n ].join(' ');\n idp.dataAttr = 'social-auth-' + type + '-button';\n idp.i18nKey = 'socialauth.' + type + '.label';\n return idp;\n });\n },\n cache: true,\n },\n // Can support piv authentication\n hasPivCard: {\n deps: ['piv'],\n fn: function(piv) {\n return piv && piv.certAuthUrl;\n },\n cache: true,\n },\n // social auth buttons order - 'above'/'below' the primary auth form (boolean)\n socialAuthPositionTop: {\n deps: ['configuredSocialIdps', 'hasPivCard', 'idpDisplay'],\n fn: function(configuredSocialIdps, hasPivCard, idpDisplay) {\n return (!_.isEmpty(configuredSocialIdps) || hasPivCard) && idpDisplay.toUpperCase() === 'PRIMARY';\n },\n cache: true,\n },\n hasConfiguredButtons: {\n deps: ['configuredSocialIdps', 'customButtons', 'hasPivCard'],\n fn: function(configuredSocialIdps, customButtons, hasPivCard) {\n return !_.isEmpty(configuredSocialIdps) || !_.isEmpty(customButtons) || hasPivCard;\n },\n cache: true,\n }\n};\n\ntype SettingsProps = typeof local & typeof derived;\n\nexport default class Settings extends Model {\n authClient:OktaAuth;\n\n get>(attributeName: A): any {\n return Model.prototype.get.call(this, attributeName);\n }\n\n preinitialize(...args) {\n this.local = local;\n this.derived = derived;\n Model.prototype.preinitialize.apply(this, args);\n }\n\n initialize(options) {\n const { colors } = options;\n let { baseUrl } = options;\n if (!baseUrl) {\n // infer baseUrl from the issuer\n const { authClient } = options;\n if (authClient) {\n baseUrl = authClient.getIssuerOrigin();\n } else {\n // issuer can be passed at top-level or in authParams\n const { authParams } = options;\n let { issuer } = options;\n issuer = issuer || authParams?.issuer;\n baseUrl = issuer?.split('/oauth2/')[0];\n }\n this.set('baseUrl', baseUrl);\n }\n\n if (!baseUrl) {\n this.callGlobalError(new ConfigError(loc('error.required.baseUrl')));\n } else if (colors && _.isString(colors.brand) && !colors.brand.match(/^#[0-9A-Fa-f]{6}$/)) {\n this.callGlobalError(new ConfigError(loc('error.invalid.colors.brand')));\n } else if (BrowserFeatures.corsIsNotSupported()) {\n this.callGlobalError(new UnsupportedBrowserError(loc('error.unsupported.cors')));\n }\n }\n\n setAcceptLanguageHeader(authClient) {\n if (authClient) {\n authClient.http.setRequestHeader('Accept-Language', this.get('languageCode'));\n }\n }\n\n setAuthClient(authClient) {\n this.setAcceptLanguageHeader(authClient);\n this.authClient = authClient;\n }\n\n getAuthClient() {\n return this.authClient;\n }\n\n set(...args: any[]) {\n try {\n return Model.prototype.set.apply(this, args);\n } catch (e) {\n const message = e.message ? e.message : e;\n\n this.callGlobalError(new ConfigError(message));\n }\n }\n\n // Invokes the global success function. This should only be called on a\n // terminal part of the code (i.e. authStatus SUCCESS or after sending\n // a recovery email)\n callGlobalSuccess(status, data) {\n const res = _.extend(data, { status: status });\n // Defer this to ensure that our functions have rendered completely\n // before invoking their function\n\n _.defer(_.partial(this.get('globalSuccessFn'), res));\n }\n\n // Invokes the global error function. This should only be called on non\n // recoverable errors (i.e. configuration errors, browser unsupported\n // errors, etc)\n callGlobalError(err) {\n const globalErrorFn = this.get('globalErrorFn') || this.options.globalErrorFn;\n // Note: Must use \"this.options.globalErrorFn\" when they've passed invalid\n // arguments - globalErrorFn will not have been set yet\n\n if (globalErrorFn) {\n globalErrorFn(err);\n } else {\n // Only throw the error if they have not registered a globalErrorFn\n throw err;\n }\n }\n\n // Get the username by applying the transform function if it exists.\n transformUsername(username, operation) {\n const transformFn = this.get('transformUsername');\n\n if (transformFn && _.isFunction(transformFn)) {\n return transformFn(username, operation);\n }\n return username;\n }\n\n processCreds(creds) {\n const processCreds = this.get('processCreds');\n\n return Q.Promise(function(resolve) {\n if (!_.isFunction(processCreds)) {\n resolve();\n } else if (processCreds.length === 2) {\n processCreds(creds, resolve);\n } else {\n processCreds(creds);\n resolve();\n }\n });\n }\n\n parseRegistrationSchema(schema, onSuccess, onFailure) {\n const parseSchema = this.get('registration.parseSchema');\n\n //check for parseSchema callback\n if (_.isFunction(parseSchema)) {\n parseSchema(\n schema,\n function(schema) {\n onSuccess(schema);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'parseSchema';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(schema);\n }\n }\n\n preRegistrationSubmit(postData, onSuccess, onFailure) {\n const preSubmit = this.get('registration.preSubmit');\n\n //check for preSubmit callback\n if (_.isFunction(preSubmit)) {\n preSubmit(\n postData,\n function(postData) {\n onSuccess(postData);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'preSubmit';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(postData);\n }\n }\n\n postRegistrationSubmit(response, onSuccess, onFailure) {\n const postSubmit = this.get('registration.postSubmit');\n\n //check for postSubmit callback\n if (_.isFunction(postSubmit)) {\n postSubmit(\n response,\n function(response) {\n onSuccess(response);\n },\n function(error) {\n error = error || { errorSummary: loc('registration.default.callbackhook.error') };\n error['callback'] = 'postSubmit';\n onFailure(error);\n }\n );\n } else {\n //no callback\n onSuccess(response);\n }\n }\n\n // Use the parse function to transform config options to the standard\n // settings we currently support. This is a good place to deprecate old\n // option formats.\n parse(options) {\n if (options.labels || options.country) {\n Logger.deprecate('Use \"i18n\" instead of \"labels\" and \"country\"');\n const overrides = options.labels || {};\n\n _.each(options.country, function(val, key) {\n overrides['country.' + key] = val;\n });\n // Old behavior is to treat the override as a global override, so we\n // need to add these overrides to each language\n options.i18n = {};\n _.each(config.supportedLanguages, function(language) {\n options.i18n[language] = overrides;\n });\n delete options.labels;\n delete options.country;\n }\n\n // Default the assets.baseUrl to the cdn, or remove any trailing slashes\n if (!options.assets) {\n options.assets = {};\n }\n const abu = options.assets.baseUrl;\n\n if (!abu) {\n options.assets.baseUrl = assetBaseUrlTpl({ version: config.version });\n } else if (abu[abu.length - 1] === '/') {\n options.assets.baseUrl = abu.substring(0, abu.length - 1);\n }\n\n return options;\n }\n\n isDsTheme() {\n return false;\n }\n\n}\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nconst fn: Record any> = {};\nconst hasFullCorsSupport = 'withCredentials' in new window.XMLHttpRequest();\nconst hasXDomainRequest = typeof window.XDomainRequest !== 'undefined';\n\nfn.corsIsNotSupported = function() {\n return !(hasFullCorsSupport || hasXDomainRequest);\n};\n\nfn.corsIsNotEnabled = function(jqXhr) {\n // Not a definitive check, but it's the best we've got.\n // Note: This will change when OktaAuth is updated\n return jqXhr.status === 0;\n};\n\n// This is currently not being used, but we'll keep it around for when we\n// want a fallback mechanism - i.e. use localStorage if it exists, else fall\n// back to cookies.\nfn.localStorageIsNotSupported = function() {\n const test = 'test';\n\n try {\n localStorage.setItem(test, test);\n localStorage.removeItem(test);\n return false;\n } catch (e) {\n return true;\n }\n};\n\nfn.supportsPushState = function(win) {\n win = win || window;\n return !!(win.history && win.history.pushState);\n};\n\nfn.isIE = function() {\n return /(msie|trident)/i.test(navigator.userAgent);\n};\n\nfn.isFirefox = function() {\n return navigator.userAgent.toLowerCase().indexOf('firefox') > -1;\n};\n\nfn.isEdge = function() {\n // This is to just check for windows edge. Mac edge - chromium based's UA is 'edg'.\n return navigator.userAgent.toLowerCase().indexOf('edge') > -1;\n};\n\nfn.isSafari = function() {\n // Chrome has safari in its useragent string so adding this extra check.\n return (\n navigator.userAgent.toLowerCase().indexOf('safari') > -1 &&\n navigator.userAgent.toLowerCase().indexOf('chrome') === -1\n );\n};\n\nfn.isMac = function() {\n return navigator.platform.toUpperCase().indexOf('MAC') >= 0;\n};\n\n\nfn.isAndroid = function() {\n // Windows Phone also contains \"Android\"\n return /android/i.test(navigator.userAgent) &&\n !/windows phone/i.test(navigator.userAgent);\n};\n\nfn.isIOS = function() {\n // iOS detection from: http://stackoverflow.com/a/9039885/177710\n return /iPad|iPhone|iPod/.test(navigator.userAgent) && !window.MSStream;\n};\n\n// Returns a list of languages the user has configured for their browser, in\n// order of preference.\nfn.getUserLanguages = function() {\n // Chrome, Firefox\n if (navigator.languages) {\n return navigator.languages;\n }\n\n const languages = [];\n const properties = [\n 'language', // Safari, IE11\n 'userLanguage', // IE\n 'browserLanguage', // IE\n 'systemLanguage' // IE\n ];\n\n properties.forEach(function(property) {\n if (navigator[property]) {\n languages.push(navigator[property]);\n }\n });\n\n return languages;\n};\n\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport config from 'config/config.json';\nimport fetch from 'cross-fetch';\nimport country from 'nls/country.json';\nimport login from 'nls/login.json';\nimport Q from 'q';\nimport _ from 'underscore';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Logger from 'util/Logger';\nconst STORAGE_KEY = 'osw.languages';\n\ndeclare type i18nOptions = {\n [localeOrCountry: string]: {\n [i18nKey: string]: string;\n }\n}\n\ndeclare type Assets = {\n baseUrl: string;\n rewrite(origPath: string): string;\n}\n\n/**\n * Converts options to our internal format, which distinguishes between\n * login and country bundles.\n *\n * Example options.i18n passed in by the developer:\n * {\n * 'en': {\n * 'needhelp': 'need help override',\n * 'primaryauth.title': 'new sign in text',\n * 'country.JP' = 'Japan, Japan'\n * }\n * }\n *\n * Parsed:\n * {\n * 'en': {\n * 'login': {\n * 'needhelp': 'need help override',\n * 'primaryauth.title': 'new sign in text',\n * },\n * 'country': {\n * 'JP': 'Japan, Japan'\n * }\n * }\n * }\n */\nfunction parseOverrides(i18n) {\n if (!i18n) {\n return {};\n }\n\n const i18nWithLowerCaseKeys = {};\n\n _.each(_.keys(i18n), function(key) {\n i18nWithLowerCaseKeys[key.toLowerCase()] = i18n[key];\n });\n\n return _.mapObject(i18nWithLowerCaseKeys, function(props) {\n const mapped = { login: {}, country: {} };\n\n if (!_.isObject(props)) {\n throw new Error('Invalid format for \"i18n\"');\n }\n _.each(props, function(val, key) {\n const split = key.split(/^country\\./);\n\n if (split.length > 1) {\n mapped.country[split[1]] = val;\n } else {\n mapped.login[split[0]] = val;\n }\n });\n return mapped;\n });\n}\n\n// Caching: We only bundle English by default in the Sign-In Widget. Other\n// languages are loaded on demand and cached in localStorage. These languages\n// are tied to the version of the widget - when it bumps, we reset the cache.\n\nfunction getCachedLanguages() {\n let storage = JSON.parse(localStorage.getItem(STORAGE_KEY));\n\n if (!storage || storage.version !== config.version) {\n storage = {\n version: config.version,\n };\n }\n return storage;\n}\n\nfunction addLanguageToCache(language, loginJson, countryJson) {\n const current = getCachedLanguages();\n\n current[language] = {\n login: loginJson,\n country: countryJson,\n };\n localStorage.setItem(STORAGE_KEY, JSON.stringify(current));\n}\n\n// By default, the assets.bundleUrl is tied to the Okta CDN.\n//\n// There are two overrides available for modifying where we load the asset\n// bundles from:\n//\n// 1. assets.baseUrl\n//\n// This is the base path the OSW pulls assets from, which in this case is\n// the Okta CDN. Override this config option if you want to host the\n// files on your own domain, or if you're using a new version of the\n// widget whose language files haven't been published to the CDN yet.\n//\n// 2. assets.rewrite\n//\n// This is a function that can be used to modify the path + fileName of\n// the bundle we're loading, relative to the baseUrl. When called, it\n// will pass the current path, and expect the new path to be returned.\n// This is useful, for example, if your build process has an extra\n// cachebusting step, i.e:\n//\n// function rewrite(file) {\n// // file: /labels/json/login_ja.json\n// return file.replace('.json', '.' + md5file(file) + '.json');\n// }\n//\n// Note: Most developers will not need to use these overrides - the default\n// is to use the Okta CDN and to use the same path + file structure the\n// widget module publishes by default.\nfunction fetchJson(bundle, language, assets) {\n // Our bundles use _ to separate country and region, i.e:\n // zh-CN -> zh_CN\n const languageCode = language.replace('-', '_');\n\n const path = assets.rewrite(encodeURI(`/labels/json/${bundle}_${languageCode}.json`));\n\n const headers = {\n Accept: 'application/json',\n 'Content-Type': 'text/plain',\n };\n\n const mode = 'no-cors';\n\n return fetch(assets.baseUrl + path, {\n method: 'GET',\n headers,\n mode,\n })\n .then(res => res.text())\n .then(txt => JSON.parse(txt));\n}\n\nfunction getBundles(language, assets, supportedLanguages) {\n // Two special cases:\n // 1. Default language is already bundled with the widget\n // 2. If the language is not in our config file, it means that they've\n // probably defined it on their own.\n if (language === config.defaultLanguage || !_.contains(supportedLanguages, language)) {\n return Q({});\n }\n\n //local storage does not work correctly with android web views (embeded browers)\n //so skip the caching and just make the request to get the local info\n const localStorageIsSupported = !BrowserFeatures.localStorageIsNotSupported();\n\n if (localStorageIsSupported) {\n const cached = getCachedLanguages();\n\n if (cached[language]) {\n return Q(cached[language]);\n }\n }\n\n return Q.all([fetchJson('login', language, assets), fetchJson('country', language, assets)])\n .spread(function(loginJson, countryJson) {\n if (localStorageIsSupported) {\n addLanguageToCache(language, loginJson, countryJson);\n }\n return { login: loginJson, country: countryJson };\n })\n .catch(function() {\n // If there is an error, this will default to the bundled language and\n // we will no longer try to load the language this session.\n Logger.warn('Unable to load language: ' + language);\n return {};\n });\n}\n\nexport default {\n login: login,\n country: country,\n // Courage components within the sign in widget point to courage bundle to look\n // up i18nkeys. Since we dont have courage.properties inside the sign in widget\n // we are pointing courage bundle to login.\n courage: login,\n\n currentLanguage: null,\n\n isLoaded: function(language: string): boolean {\n return this.currentLanguage === language;\n },\n\n remove: function(): void {\n this.currentLanguage = null;\n },\n\n loadLanguage: function(language: string, overrides: i18nOptions, assets: Assets, supportedLanguages: string[]): Q.Promise {\n const parsedOverrides = parseOverrides(overrides);\n const lowerCaseLanguage = language.toLowerCase();\n return getBundles(language, assets, supportedLanguages).then(bundles => {\n // Always extend from the built in defaults in the event that some\n // properties are not translated\n this.login = _.extend({}, login, bundles.login);\n this.country = _.extend({}, country, bundles.country);\n this.courage = _.extend({}, login, bundles.login);\n if (parsedOverrides[lowerCaseLanguage]) {\n _.extend(this.login, parsedOverrides[lowerCaseLanguage]['login']);\n _.extend(this.country, parsedOverrides[lowerCaseLanguage]['country']);\n _.extend(this.courage, parsedOverrides[lowerCaseLanguage]['login']);\n }\n this.currentLanguage = language;\n });\n },\n};\n","/* eslint max-depth: [1,4] */\n/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// BaseLoginRouter contains the more complicated router logic - rendering/\n// transition, etc. Most router changes should happen in LoginRouter (which is\n// responsible for adding new routes)\nimport { _, $, Backbone, Router, loc, BaseRouterOptions } from 'okta';\nimport Settings from 'models/Settings';\nimport Bundles from 'util/Bundles';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport ColorsUtil from 'util/ColorsUtil';\nimport Enums from 'util/Enums';\nimport Errors from 'util/Errors';\nimport Logger from 'util/Logger';\nimport LanguageUtil from 'util/LanguageUtil';\nimport AuthContainer from 'views/shared/AuthContainer';\nimport Header from 'views/shared/Header';\nimport AppState from './models/AppState';\nimport sessionStorageHelper from './client/sessionStorageHelper';\nimport {\n startLoginFlow,\n interactionCodeFlow,\n handleConfiguredFlow,\n} from './client';\n\nimport transformIdxResponse from './ion/transformIdxResponse';\nimport { FORMS } from './ion/RemediationConstants';\nimport CookieUtil from 'util/CookieUtil';\nimport { formatError, LegacyIdxError, StandardApiError } from './client/formatError';\nimport { RenderError, RenderResult } from 'types';\nimport { OktaAuth, IdxResponse } from '@okta/okta-auth-js';\nimport Hooks from 'models/Hooks';\n\nexport interface BaseLoginRouterOptions extends BaseRouterOptions, Backbone.RouterOptions {\n globalSuccessFn?: (res: RenderResult) => void;\n globalErrorFn?: (res: RenderError) => void;\n authClient?: OktaAuth;\n hooks: Hooks\n}\n\nclass BaseLoginRouter extends Router {\n Events: Backbone.Events = Backbone.Events; // also set on prototype\n hasControllerRendered = false;\n settings: Settings;\n appState: AppState;\n hooks: Hooks;\n header: Header;\n\n constructor(options: BaseLoginRouterOptions) {\n super(options);\n\n // Create a default success and/or error handler if\n // one is not provided.\n if (!options.globalSuccessFn) {\n options.globalSuccessFn = function() { /* dummy function */ };\n }\n if (!options.globalErrorFn) {\n options.globalErrorFn = function(err) {\n Logger.error(err);\n };\n }\n\n this.settings = new Settings(_.omit(options, 'el', 'authClient', 'hooks'), { parse: true });\n this.settings.setAuthClient(options.authClient);\n\n if (!options.el) {\n this.settings.callGlobalError(new Errors.ConfigError(loc('error.required.el')));\n }\n\n $('body > div').on('click', function() {\n // OKTA-69769 Tooltip wont close on iPhone/iPad\n // Registering a click handler on the first div\n // allows a tap that falls outside the tooltip\n // to be registered as a tap by iOS\n // and then the open tooltip will lose focus and close.\n });\n\n this.hooks = options.hooks;\n this.appState = new AppState();\n\n const wrapper = new AuthContainer({ appState: this.appState });\n\n $(options.el).append(wrapper.render().$el);\n this.el = `#${Enums.WIDGET_CONTAINER_ID}`;\n this.header = new Header({\n el: this.el,\n appState: this.appState,\n settings: this.settings,\n });\n\n // Hide until unitial render\n this.hide();\n\n this.listenTo(this.appState, 'change:deviceFingerprint', this.updateDeviceFingerprint);\n this.listenTo(this.appState, 'error', this.handleError);\n this.listenTo(this.appState, 'updateAppState', this.handleUpdateAppState);\n this.listenTo(this.appState, 'remediationError', this.handleIdxResponseFailure);\n this.listenTo(this.appState, 'restartLoginFlow', this.restartLoginFlow);\n }\n\n updateDeviceFingerprint() {\n const authClient = this.settings.getAuthClient();\n const fingerprint = this.appState.get('deviceFingerprint');\n if (fingerprint) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', fingerprint);\n }\n }\n\n async handleUpdateAppState(idxResponse: IdxResponse): Promise {\n // Only update the cookie when the user has successfully authenticated themselves \n // to avoid incorrect/unnecessary updates.\n if (this.hasAuthenticationSucceeded(idxResponse) \n && this.settings.get('features.rememberMyUsernameOnOIE')) {\n this.updateIdentifierCookie(idxResponse);\n } \n\n const lastResponse = this.appState.get('idx');\n const useInteractionCodeFlow = this.settings.get('useInteractionCodeFlow');\n if (useInteractionCodeFlow) {\n if (idxResponse.interactionCode) {\n // Although session.stateHandle isn't used by interation flow,\n // it's better to clean up at the end of the flow.\n sessionStorageHelper.removeStateHandle();\n // This is the end of the IDX flow, now entering OAuth\n return interactionCodeFlow(this.settings, idxResponse);\n } \n } else {\n // Do not save state handle for the first page loads.\n // Because there shall be no difference between following behavior\n // 1. bootstrap widget\n // -> save state handle to session storage\n // -> refresh page\n // -> introspect using sessionStorage.stateHandle\n // 2. bootstrap widget\n // -> do not save state handle to session storage\n // -> refresh page\n // -> introspect using options.stateHandle\n if (lastResponse) {\n sessionStorageHelper.setStateHandle(idxResponse?.context?.stateHandle);\n }\n // Login flows that mimic step up (moving forward in login pipeline) via internal api calls,\n // need to clear stored stateHandles.\n // This way the flow can maintain the latest state handle. For eg. Device probe calls\n if (this.appState.get('currentFormName') === FORMS.CANCEL_TRANSACTION) {\n sessionStorageHelper.removeStateHandle();\n }\n }\n\n // transform response\n const ionResponse = transformIdxResponse(this.settings, idxResponse, lastResponse);\n\n await this.appState.setIonResponse(ionResponse, this.hooks);\n }\n\n handleIdxResponseFailure(error: LegacyIdxError = { error: 'unknown', details: undefined }) {\n // IDX errors will not call the global error handler\n error = formatError(error);\n this.handleUpdateAppState(error.details);\n }\n\n // Generic error handler for all exceptions\n handleError(error: LegacyIdxError | StandardApiError | Error = { error: 'unknown', details: undefined }) {\n // Show error message and notify listeners\n const originalError = error;\n const formattedError = formatError({...error}); // format the error to resemble an IDX response\n this.handleUpdateAppState(formattedError.details);\n this.settings.callGlobalError(originalError);\n\n // -- TODO: OKTA-244631 How to surface up the CORS error in IDX?\n // -- The `err` object from idx.js doesn't have XHR object\n // Global error handling for CORS enabled errors\n // if (err.xhr && BrowserFeatures.corsIsNotEnabled(err.xhr)) {\n // this.settings.callGlobalError(new Errors.UnsupportedBrowserError(loc('error.enabled.cors')));\n // return;\n // }\n }\n\n /* eslint max-statements: [2, 28], complexity: [2, 11] */\n async render(Controller, options = {}) {\n // If url changes then widget assumes that user's intention was to initiate a new login flow,\n // so clear stored token to use the latest token.\n if (sessionStorageHelper.getLastInitiatedLoginUrl() !== window.location.href) {\n sessionStorageHelper.removeStateHandle();\n }\n // Since we have a wrapper view, render our wrapper and use its content\n // element as our new el.\n // Note: Render it here because we know dom is ready at this point\n if (!this.header.rendered()) {\n this.el = this.header.render().getContentEl();\n }\n\n // If we need to load a language (or apply custom i18n overrides), do\n // this now and re-run render after it's finished.\n if (!Bundles.isLoaded(this.settings.get('languageCode'))) {\n await LanguageUtil.loadLanguage(this.appState, this.settings);\n }\n\n // introspect stateToken when widget is bootstrap with state token\n // and remove it from `settings` afterwards as IDX response always has\n // state token (which will be set into AppState)\n if (this.settings.get('oieEnabled')) {\n try {\n let idxResp = await startLoginFlow(this.settings);\n if (idxResp.error) {\n this.appState.trigger('remediationError', idxResp.error);\n } else {\n if (this.settings.get('flow') && !this.hasControllerRendered) {\n idxResp = await handleConfiguredFlow(idxResp, this.settings);\n }\n this.appState.trigger('updateAppState', idxResp);\n }\n } catch (exception) {\n this.appState.trigger('error', exception);\n } finally {\n // These settings should only be used one time, for initial render\n this.settings.unset('stateToken');\n this.settings.unset('proxyIdxResponse');\n }\n }\n\n // Load the custom colors only on the first render\n if (this.settings.get('colors.brand') && !ColorsUtil.isLoaded()) {\n const colors = {\n brand: this.settings.get('colors.brand'),\n };\n\n ColorsUtil.addStyle(colors);\n }\n\n // Show before initial render\n this.show();\n\n // render Controller\n this.unload();\n const controllerOptions = _.extend({\n el: this.el,\n settings: this.settings,\n appState: this.appState\n }, options);\n this.controller = new Controller(controllerOptions);\n\n // Bubble up all controller events\n this.listenTo(this.controller, 'all', this.trigger);\n\n this.controller.render();\n\n this.hasControllerRendered = true;\n }\n\n /**\n * When \"Remember My Username\" is enabled, we save the identifier in a cookie\n * so that the next time the user visits the SIW, the identifier field can be \n * pre-filled with this value.\n */\n updateIdentifierCookie(idxResponse: IdxResponse) {\n if (this.settings.get('features.rememberMe')) {\n // Update the cookie with the identifier\n const user = idxResponse?.context?.user;\n const { identifier } = user?.value || {};\n if (identifier) {\n CookieUtil.setUsernameCookie(identifier);\n }\n } else {\n // We remove the cookie explicitly if this feature is disabled.\n CookieUtil.removeUsernameCookie();\n } \n }\n\n hasAuthenticationSucceeded(idxResponse: IdxResponse) {\n // Check whether authentication has succeeded. This is done by checking the server response\n // and seeing if either the 'success' or 'successWithInteractionCode' objects are present.\n return idxResponse?.rawIdxState?.success || idxResponse?.rawIdxState?.successWithInteractionCode;\n }\n\n restartLoginFlow() {\n // clear all transaction data and saved IDX response\n this.settings.getAuthClient().transactionManager.clear();\n this.appState.set('idx', undefined);\n\n // Clear the recoveryToken, if any\n const authClient = this.settings.getAuthClient();\n delete authClient.options['recoveryToken'];\n this.settings.unset('recoveryToken');\n\n // Re-render the widget\n this.render(this.controller.constructor);\n }\n\n start() {\n const pushState = BrowserFeatures.supportsPushState();\n Router.prototype.start.call(this, { pushState: pushState });\n }\n\n hide() {\n this.header.$el.hide();\n }\n\n show() {\n this.header.$el.show();\n }\n\n remove() {\n this.unload();\n this.header.$el.remove();\n this.stopListening(this.appState);\n this.stopListening(this.settings);\n Bundles.remove();\n Backbone.history.stop();\n }\n}\n\n// Add \"Events\" to prototype for compatibility with existing code\nBaseLoginRouter.prototype.Events = Backbone.Events;\n\nexport default BaseLoginRouter;","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport BaseLoginRouter, { BaseLoginRouterOptions } from './BaseLoginRouter';\nimport FormController from './controllers/FormController';\n\nconst routes = {\n '': 'defaultAuth',\n '*wildcard': 'defaultAuth',\n};\n\nexport default class WidgetRouter extends BaseLoginRouter {\n constructor(options: BaseLoginRouterOptions) {\n super({ routes, ...options });\n }\n\n defaultAuth() {\n this.render(FormController);\n }\n\n}\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { ProceedOptions } from '@okta/okta-auth-js';\n\nexport async function emailVerifyCallback(settings) {\n const authClient = settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n const meta = await authClient.idx.getSavedTransactionMeta(); // meta can load in another tab using state if it matches\n if (!meta || !meta.interactionHandle) {\n // Flow can not continue in this tab. Create a synthetic server response and use it to display a message to the user\n const messages = {\n type: 'array',\n value: [\n // terminal-return-otp-only-no-location.json\n {\n 'message': 'Enter the OTP in your original browser or device.',\n 'i18n': {\n 'key': 'idx.enter.otp.in.original.tab'\n },\n 'class': 'INFO'\n }\n ]\n };\n\n const resp = {\n neededToProceed: [],\n // OKTA-382410 so bad that has to leverage rawIdxState\n rawIdxState: {\n messages,\n },\n context: {\n messages,\n }\n };\n return resp;\n }\n \n // Proceed using the OTP code\n const otp = settings.get('otp');\n const idxResponse = await authClient.idx.proceed({\n ...idxOptions,\n otp\n });\n return idxResponse;\n}\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport {\n IdxContext,\n IdxMessages,\n IdxResponse,\n RawIdxResponse\n} from '@okta/okta-auth-js';\nimport { loc } from 'okta';\n\nexport interface LegacyIdxError {\n error: string;\n details: IdxResponse\n}\n\nexport interface StandardApiError {\n error: string;\n error_description: string;\n}\n\nexport function isInvalidRecoveryTokenError(error): error is StandardApiError {\n // special case: error from interact when passing an (invalid) recovery token\n return (error?.error === 'invalid_request' && error.error_description === 'The recovery token is invalid');\n}\n\nexport function formatInvalidRecoveryTokenError(error: StandardApiError) {\n // This error comes from `oauth2/interact` so is not an IDX error.\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: error.error_description,\n i18n: {\n key: 'oie.invalid.recovery.token'\n },\n class: 'ERROR'\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return idxError;\n}\n\nexport function isOIENotEnabledError(error): error is StandardApiError {\n // special case: error from interact. `useInteractionCodeFlow` is true but the Org does not have OIE enabled\n // The response is not in IDX format. See playground/mocks/data/oauth2/error-feature-not-enabled.json\n return (error?.error === 'access_denied' && error.error_description);\n}\n\nexport function formatOIENotEnabledError(error: StandardApiError) {\n // This error comes from `oauth2/interact` so the error is in OAuth format\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: error.error_description,\n i18n: {\n key: 'oie.feature.disabled'\n },\n class: 'ERROR'\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return error;\n}\n\nexport function isOIEConfigurationError(error): error is StandardApiError {\n return (error?.error && error.error_description);\n}\n\nexport function formatOIEConfigurationError(error) {\n // This error comes from `oauth2/interact` so the error is in OAuth format\n // simulate an IDX-JS error response\n const idxError = formatIDXError(error);\n const { details } = idxError;\n const messages: IdxMessages = {\n type: 'array',\n value: [\n {\n message: loc('oie.configuration.error', 'login'),\n class: 'ERROR',\n i18n: undefined\n }\n ],\n };\n details.rawIdxState.messages = messages;\n details.context.messages = messages;\n return error;\n}\n\nexport function formatIDXError(error: LegacyIdxError | StandardApiError | Error): LegacyIdxError {\n // Make the error object resemble an IDX response\n const idxError = error as LegacyIdxError;\n idxError.details = idxError.details || {} as IdxResponse;\n const { details } = idxError;\n details.rawIdxState = details.rawIdxState || {} as RawIdxResponse;\n details.context = details.context || {} as IdxContext;\n details.neededToProceed = details.neededToProceed || [];\n\n // Populate generic error message if there isn't any.\n if (!details.rawIdxState.messages) {\n const idxMessage: IdxMessages = {\n type: 'array',\n value: [\n {\n message: loc('oform.error.unexpected', 'login'),\n class: 'ERROR',\n i18n: undefined\n }\n ]\n };\n details.rawIdxState.messages = idxMessage;\n details.context.messages = idxMessage;\n }\n\n return idxError;\n}\n\nexport function formatError(error: string | Error | LegacyIdxError | StandardApiError) {\n // If the error is a string, wrap it in an Error object\n if (typeof error === 'string') {\n error = new Error(error);\n }\n\n // special case error handling\n\n // invalid reccovery token\n if (isInvalidRecoveryTokenError(error)) {\n return formatInvalidRecoveryTokenError(error);\n }\n\n // OIE is not enabled\n if (isOIENotEnabledError(error)) {\n return formatOIENotEnabledError(error);\n }\n\n // Other errors from /interact in OAuth format\n if (isOIEConfigurationError(error)) {\n return formatOIEConfigurationError(error);\n }\n\n error = formatIDXError(error);\n return error;\n}","/*!\n * Copyright (c) 2021, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Errors from 'util/Errors';\nimport { emailVerifyCallback } from './emailVerifyCallback';\nimport sessionStorageHelper from './sessionStorageHelper';\nimport { CONFIGURED_FLOW } from './constants';\nimport { IdxTransactionMeta, ProceedOptions } from '@okta/okta-auth-js';\n\nconst handleProxyIdxResponse = async (settings) => {\n return Promise.resolve({\n rawIdxState: settings.get('proxyIdxResponse'),\n context: settings.get('proxyIdxResponse'),\n neededToProceed: [],\n });\n};\n\n/* eslint max-depth: [2, 3] */\n// eslint-disable-next-line complexity, max-statements\nexport async function startLoginFlow(settings) {\n const authClient = settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n\n // Return a preset response\n if (settings.get('proxyIdxResponse')) {\n return handleProxyIdxResponse(settings);\n }\n\n if (settings.get('overrideExistingStateToken')) {\n sessionStorageHelper.removeStateHandle();\n }\n\n if (settings.get('otp')) {\n return emailVerifyCallback(settings);\n }\n\n if (settings.get('useInteractionCodeFlow')) {\n const meta: IdxTransactionMeta = await authClient.idx.getSavedTransactionMeta();\n if (!meta) {\n // no saved transaction\n // if the configured flow is set to `proceed`, the SIW should only continue an existing idx transaction\n // if the SIW loads from a fresh state (there is no current transaction), throw an error\n const flow = authClient.idx.getFlow();\n if (flow && flow === CONFIGURED_FLOW.PROCEED) {\n throw new Errors.ConfiguredFlowError(\n 'Unable to proceed: saved transaction could not be loaded', flow\n );\n }\n // start new transaction\n return authClient.idx.start(idxOptions); // calls interact\n }\n\n // continue saved transaction\n return authClient.idx.proceed(idxOptions); // calls introspect\n }\n\n // Use stateToken from session storage if exists\n // See more details at ./docs/use-session-token-prior-to-settings.png\n const stateHandleFromSession = sessionStorageHelper.getStateHandle();\n if (stateHandleFromSession) {\n try {\n const idxResp = await authClient.idx.start({\n ...idxOptions,\n stateHandle: stateHandleFromSession\n });\n const hasError = idxResp.context?.messages?.value.length > 0;\n if (hasError) {\n throw new Error('saved stateToken is invalid'); // will be caught in this function\n }\n\n // 1. abandon the settings.stateHandle given session.stateHandle is still valid\n settings.set('stateToken', stateHandleFromSession);\n // 2. chain the idxResp to next handler\n return idxResp;\n } catch {\n // 1. remove session.stateHandle\n sessionStorageHelper.removeStateHandle();\n // 2. start the login again in order to introspect on settings.stateHandle\n return startLoginFlow(settings);\n }\n }\n\n // Use stateToken from options\n const stateHandle = settings.get('stateToken');\n if (stateHandle) {\n return authClient.idx.start({\n ...idxOptions,\n stateHandle\n });\n }\n\n throw new Errors.ConfigError('Set \"useInteractionCodeFlow\" to true in configuration to enable the ' +\n 'interaction_code\" flow for self-hosted widget.');\n}\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { _, Controller, loc } from 'okta';\nimport ViewFactory from '../view-builder/ViewFactory';\nimport IonResponseHelper from '../ion/IonResponseHelper';\nimport { getV1ClassName } from '../ion/ViewClassNamesFactory';\nimport { FORMS, TERMINAL_FORMS, FORM_NAME_TO_OPERATION_MAP } from '../ion/RemediationConstants';\nimport Util from '../../util/Util';\nimport sessionStorageHelper from '../client/sessionStorageHelper';\nimport { HttpResponse, IdxStatus, IdxOptions, ProceedOptions } from '@okta/okta-auth-js';\nimport { EventErrorContext } from 'types/events';\nimport { CONFIGURED_FLOW } from '../client/constants';\nimport Errors from 'util/Errors';\nexport interface ContextData {\n controller: string;\n formName: string;\n authenticatorKey?: string;\n methodType?: string;\n}\n\nexport interface ErrorContextData {\n xhr: HttpResponse;\n errorSummary?: string;\n}\n\nexport default Controller.extend({\n className: 'form-controller',\n\n appStateEvents: {\n 'change:currentFormName': 'handleFormNameChange',\n 'afterError': 'handleAfterError',\n 'invokeAction': 'handleInvokeAction',\n 'saveForm': 'handleSaveForm',\n 'switchForm': 'handleSwitchForm',\n },\n\n preRender() {\n this.removeChildren();\n },\n\n postRender() {\n const currentViewState = this.options.appState.getCurrentViewState();\n // TODO: add comments regarding when `currentViewState` would be null?\n if (!currentViewState) {\n return;\n }\n\n this.clearMetadata();\n\n let formName = currentViewState.name;\n if (formName === 'identify' && this.options.settings.get('flow') === CONFIGURED_FLOW.RESET_PASSWORD) {\n formName = 'identify-recovery';\n }\n const TheView = ViewFactory.create(\n formName,\n this.options.appState.get('authenticatorKey'),\n );\n try {\n this.formView = this.add(TheView, {\n options: {\n currentViewState,\n }\n }).last();\n } catch (error) {\n // This is the place where runtime error (NPE) happens at most of time.\n // It has been swallowed by Q.js hence add try/catch to surface up errors.\n this.options.settings.callGlobalError(error);\n return;\n }\n\n this.triggerAfterRenderEvent();\n },\n\n clearMetadata() {\n const formName = this.options.appState.get('currentFormName');\n // TODO: OKTA-392835 shall not clear state handle at terminal page\n if (TERMINAL_FORMS.includes(formName)) {\n sessionStorageHelper.removeStateHandle();\n }\n },\n\n triggerAfterRenderEvent() {\n const contextData = this.createAfterEventContext();\n this.trigger('afterRender', contextData);\n },\n\n handleFormNameChange() {\n this.render();\n },\n\n handleAfterError(error: HttpResponse) {\n const contextData = this.createAfterEventContext();\n const errorContextData: EventErrorContext = {\n xhr: error,\n errorSummary: error.responseJSON && error.responseJSON.errorSummary,\n };\n // TODO: need some enhancement after https://github.com/okta/okta-idx-js/pull/27\n // OKTA-318062\n this.trigger('afterError', contextData, errorContextData);\n },\n\n createAfterEventContext(): ContextData {\n const formName = this.options.appState.get('currentFormName');\n const authenticatorKey = this.options.appState.get('authenticatorKey');\n const methodType = this.options.appState.get('authenticatorMethodType');\n const isPasswordRecoveryFlow = this.options.appState.get('isPasswordRecoveryFlow');\n\n const v1ControllerClassName = getV1ClassName(\n formName,\n authenticatorKey,\n methodType,\n isPasswordRecoveryFlow,\n );\n\n const eventData: ContextData = {\n controller: v1ControllerClassName,\n formName,\n };\n\n if (authenticatorKey) {\n eventData.authenticatorKey = authenticatorKey;\n }\n if (methodType) {\n eventData.methodType = methodType;\n }\n\n return eventData;\n },\n\n handleSwitchForm(formName) {\n // trigger formName change to change view\n if (this.options.appState.get('messages')) {\n // Clear messages before calling switch form.\n // If a form has errors sent form API inside messages\n // and user hits back to factors list which triggers switchForm,\n // those error will show up on another screen that gets rendered after switchForm\n this.options.appState.unset('messages');\n }\n this.options.appState.set('currentFormName', formName);\n },\n\n // eslint-disable-next-line max-statements\n handleInvokeAction(actionPath = '', actionParams = {}) {\n const { appState, settings } = this.options;\n const idx = appState.get('idx');\n const { stateHandle } = idx.context;\n let invokeOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n stateHandle\n };\n let error;\n\n // Cancel action is executes synchronously\n if (actionPath === 'cancel') {\n // TODO: resolve race conditions caused by event pattern: OKTA-490220\n settings.getAuthClient().transactionManager.clear({ clearIdxResponse: false });\n sessionStorageHelper.removeStateHandle();\n appState.clearAppStateCache();\n\n if (settings.get('useInteractionCodeFlow')) {\n // In this case we need to restart login flow and recreate transaction meta\n // that will be used in interactionCodeFlow function\n appState.trigger('restartLoginFlow');\n return;\n }\n }\n\n // Build options to invoke or throw error for invalid action\n if (idx['neededToProceed'].find(item => item.name === actionPath)) {\n invokeOptions = { ...invokeOptions, step: actionPath };\n } else if (_.isFunction(idx['actions'][actionPath])) {\n invokeOptions = {\n ...invokeOptions,\n actions: [{\n name: actionPath,\n params: actionParams\n }]\n };\n } else {\n error = new Errors.ConfigError(`Invalid action selected: ${actionPath}`);\n this.options.settings.callGlobalError(error);\n this.showFormErrors(this.formView.model, error, this.formView.form);\n return;\n }\n\n // action will be executed asynchronously\n this.invokeAction(invokeOptions);\n },\n\n async invokeAction(invokeOptions) {\n const authClient = this.options.settings.getAuthClient();\n let resp;\n let error;\n try {\n resp = await authClient.idx.proceed(invokeOptions);\n if (resp.requestDidSucceed === false) {\n error = resp;\n }\n } catch (e) {\n error = e;\n }\n\n // if request did not succeed, show error on the current form\n if (error) {\n this.showFormErrors(this.formView.model, error, this.formView.form);\n return;\n }\n\n // process response, may render a new form\n this.handleIdxResponse(resp);\n },\n\n // eslint-disable-next-line max-statements, complexity\n async handleSaveForm(model) {\n const formName = model.get('formName');\n\n // Toggle Form saving status (e.g. disabling save button, etc)\n this.toggleFormButtonState(true);\n model.trigger('request');\n\n // Use full page redirection if necessary\n if (model.get('useRedirect')) {\n // Clear when navigates away from SIW page, e.g. success, IdP Authenticator.\n // Because SIW sort of finished its current /transaction/\n sessionStorageHelper.removeStateHandle();\n\n const currentViewState = this.options.appState.getCurrentViewState();\n Util.redirectWithFormGet(currentViewState.href);\n return;\n }\n\n // Run hook: transform the user name (a.k.a identifier)\n const values = this.transformIdentifier(formName, model);\n\n // Error out when this is not a remediation form. Unexpected Exception.\n if (!this.options.appState.hasRemediationObject(formName)) {\n this.options.settings.callGlobalError(`Cannot find http action for \"${formName}\".`);\n this.showFormErrors(this.formView.model, 'Cannot find action to proceed.', this.formView.form);\n return;\n }\n\n // Reset password in identity-first flow needs some help to auto-select password and begin the reset flow\n if (formName === 'identify' && this.options.settings.get('flow') === CONFIGURED_FLOW.RESET_PASSWORD) {\n values.authenticator = 'okta_password';\n }\n\n // Submit request to idx endpoint\n const authClient = this.options.settings.getAuthClient();\n const idxOptions: ProceedOptions = {\n exchangeCodeForTokens: false, // we handle this in interactionCodeFlow.js\n shouldProceedWithEmailAuthenticator: false, // do not auto-select email authenticator\n };\n try {\n const idx = this.options.appState.get('idx');\n const { stateHandle } = idx.context;\n const resp = await authClient.idx.proceed({\n ...idxOptions,\n step: formName,\n stateHandle,\n ...values\n });\n\n if (resp.status === IdxStatus.FAILURE) {\n throw resp.error; // caught and handled in this function\n }\n // If the last request did not succeed, show errors on the current form\n // Special case: Okta server responds 401 status code with WWW-Authenticate header and new remediation\n // so that the iOS/MacOS credential SSO extension (Okta Verify) can intercept\n // the response reaches here when Okta Verify is not installed\n // we need to return an idx object so that\n // the SIW can proceed to the next step without showing error\n if (resp.requestDidSucceed === false && !resp.stepUp) {\n this.showFormErrors(model, resp, this.formView.form);\n return;\n }\n const onSuccess = this.handleIdxResponse.bind(this, resp);\n if (formName === FORMS.ENROLL_PROFILE) {\n // call registration (aka enroll profile) hook\n this.settings.postRegistrationSubmit(values?.userProfile?.email, onSuccess, (error) => {\n model.trigger('error', model, {\n responseJSON: error,\n });\n });\n } else {\n onSuccess();\n }\n } catch(error) {\n this.showFormErrors(model, error, this.formView.form);\n } finally {\n this.toggleFormButtonState(false);\n }\n },\n\n transformIdentifier(formName, model) {\n const modelJSON = model.toJSON();\n if (Object.prototype.hasOwnProperty.call(modelJSON, 'identifier')) {\n // The callback function is passed two arguments:\n // 1) username: The name entered by the user\n // 2) operation: The type of operation the user is trying to perform:\n // - PRIMARY_AUTH\n // - FORGOT_PASSWORD\n // - UNLOCK_ACCOUNT\n const operation = FORM_NAME_TO_OPERATION_MAP[formName];\n modelJSON.identifier = this.settings.transformUsername(modelJSON.identifier, operation);\n }\n return modelJSON;\n },\n\n /**\n * @param model current form model\n * @param error any errors after user action\n * @param form current form\n * Handle errors that get displayed right after any user action. After such form errors widget doesn't\n * reload or re-render, but updates the AppSate with latest remediation.\n */\n showFormErrors(model, error, form) {\n /* eslint max-statements: [2, 30] */\n let errorObj;\n let idxStateError;\n let showErrorBanner = true;\n model.trigger('clearFormError');\n\n if (!error) {\n error = 'FormController - unknown error found';\n this.options.settings.callGlobalError(error);\n }\n\n if(error?.rawIdxState) {\n idxStateError = error;\n error = error.rawIdxState;\n }\n\n if (IonResponseHelper.isIonErrorResponse(error)) {\n errorObj = IonResponseHelper.convertFormErrors(error);\n } else if (error.errorSummary) {\n errorObj = { responseJSON: error };\n } else {\n Util.logConsoleError(error);\n errorObj = { responseJSON: { errorSummary: loc('error.unsupported.response', 'login')}};\n }\n\n if(_.isFunction(form?.showCustomFormErrorCallout)) {\n showErrorBanner = !form.showCustomFormErrorCallout(errorObj);\n }\n\n // show error before updating app state.\n model.trigger('error', model, errorObj, showErrorBanner);\n idxStateError = Object.assign({}, idxStateError, {hasFormError: true});\n\n // TODO OKTA-408410: Widget should update the state on every new response. It should NOT do selective update.\n // For eg 429 rate-limit errors, we have to skip updating idx state, because error response is not an idx response.\n if (Array.isArray(idxStateError?.neededToProceed) && idxStateError?.neededToProceed.length) {\n this.handleIdxResponse(idxStateError);\n }\n\n // 'idx.session.expired' requires special handling, otherwise the widget can lock up into an unrecoverable state\n if (IonResponseHelper.isIdxSessionExpiredError(idxStateError)) {\n const authClient = this.settings.getAuthClient();\n authClient.transactionManager.clear();\n }\n },\n\n handleIdxResponse: function(idxResp) {\n this.options.appState.trigger('updateAppState', idxResp);\n },\n\n /**\n * SignIn widget has its own (hacky) way to customize the button disabled state:\n * adding `link-button-disabled` despite the name was intend only to disable\n * `link-button`.\n * Instead of doing decent refactor, we want to follow the convention for now.\n *\n * @param {boolean} disabled whether add extra disable CSS class.\n */\n toggleFormButtonState: function(disabled) {\n const button = this.$el.find('.o-form-button-bar .button');\n button.toggleClass('link-button-disabled', disabled);\n },\n});\n","import { _ } from 'okta';\n\ndeclare module 'okta' {\n interface OktaUnderscore {\n nestedOmit(obj: Record, names): Record\n }\n}\n\n_.mixin({\n nestedOmit: function(obj, names) {\n let result = _.omit(obj, names);\n\n if (names.includes(result.name)) {\n result = _.omit(result, 'value');\n }\n\n _.each(result, function(val, key) {\n if (Array.isArray(val)) {\n result[key] = val.map((v) => {\n return _.nestedOmit(v, names);\n });\n } else if (typeof val === 'object') {\n result[key] = _.nestedOmit(val, names);\n }\n });\n return result;\n },\n});\n\nexport { _ };\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model, ModelProperty } from 'okta';\nimport Logger from 'util/Logger';\nimport {\n FORMS_WITHOUT_SIGNOUT,\n FORMS_WITH_STATIC_BACK_LINK,\n FORMS_FOR_VERIFICATION,\n AUTHENTICATOR_KEY,\n} from '../ion/RemediationConstants';\nimport { createOVOptions } from '../ion/ui-schema/ion-object-handler';\nimport { _ } from '../mixins/mixins';\nimport { executeHooksBefore, executeHooksAfter } from 'util/Hooks';\n\n/**\n * Keep track of stateMachine with this special model. Similar to `src/models/AppState.js`\n */\n\nconst local: Record = {\n user: 'object', // optional\n currentFormName: 'string',\n idx: 'object',\n remediations: 'array',\n dynamicRefreshInterval: 'number',\n deviceFingerprint: 'string',\n hooks: 'object' // instance of models/Hooks\n};\n\nconst derived: Record = {\n authenticatorProfile: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { profile: undefined }, currentAuthenticatorEnrollment = { profile: undefined }) {\n return currentAuthenticator.profile\n || currentAuthenticatorEnrollment.profile\n || {};\n },\n },\n authenticatorKey: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { key: undefined }, currentAuthenticatorEnrollment = { key: undefined }) {\n return currentAuthenticator.key\n || currentAuthenticatorEnrollment.key\n || '';\n },\n },\n authenticatorMethodType: {\n deps: ['currentAuthenticator', 'currentAuthenticatorEnrollment'],\n fn(currentAuthenticator = { methods: undefined }, currentAuthenticatorEnrollment = { methods: undefined }) {\n return currentAuthenticator.methods && currentAuthenticator.methods[0].type\n || currentAuthenticatorEnrollment.methods && currentAuthenticatorEnrollment.methods[0].type\n || '';\n },\n },\n isPasswordRecovery: {\n deps: ['recoveryAuthenticator'],\n fn: function(recoveryAuthenticator = { type: undefined }) {\n return recoveryAuthenticator?.type === 'password';\n }\n }\n};\n\nexport type AppStateProps = typeof local & typeof derived;\n\nexport default class AppState extends Model {\n\n get>(attributeName: A): any {\n return Model.prototype.get.call(this, attributeName);\n }\n\n preinitialize(...args) {\n this.local = local;\n this.derived = derived;\n Model.prototype.preinitialize.apply(this, args);\n }\n\n isIdentifierOnlyView() {\n return !this.get('remediations')?.find(({ name }) => name === 'identify')\n ?.uiSchema?.find(({ name }) => name === 'credentials.passcode');\n }\n\n hasRemediationObject(formName) {\n return this.get('idx').neededToProceed.find((remediation) => remediation.name === formName);\n }\n\n hasActionObject(actionName) {\n return !!this.get('idx')?.actions?.[actionName];\n }\n\n getRemediationAuthenticationOptions(formName) {\n const form = this.hasRemediationObject(formName);\n if (!form) {\n return [];\n }\n const authenticator = form.value.find((value) => value.name === 'authenticator');\n let authenticatorOptions = authenticator?.options || [];\n // OV is a special case, so process OV options\n authenticatorOptions = [...authenticatorOptions]; //clone it since we are changing it for OV\n createOVOptions(authenticatorOptions);\n return authenticatorOptions;\n }\n\n getActionByPath(actionPath) {\n const paths = actionPath.split('.');\n let targetObject;\n if (paths.length === 1) {\n targetObject = this.get('idx').actions;\n } else {\n targetObject = this.get(paths.shift());\n }\n // Limitation\n // At the time of writting, action only lives in first level of state objects.\n const actionName = paths.shift();\n if (targetObject && _.isFunction(targetObject[actionName])) {\n return targetObject[actionName];\n } else {\n return null;\n }\n }\n\n getCurrentViewState() {\n const currentFormName = this.get('currentFormName');\n\n if (!currentFormName) {\n return;\n }\n\n // didn't expect `remediations` is empty. See `setIonResponse`.\n const currentViewState = this.get('remediations').filter(r => r.name === currentFormName)[0];\n\n if (!currentViewState) {\n Logger.error('Panic!!');\n Logger.error(`\\tCannot find view state for form ${currentFormName}.`);\n const allFormNames = this.get('remediations').map(r => r.name);\n Logger.error(`\\tAll available form names: ${allFormNames}`);\n }\n\n return currentViewState;\n }\n\n /**\n * Returns ui schema of the form field from current view state\n * @param {string} fieldName\n * @returns {}\n */\n getSchemaByName(fieldName) {\n const currentViewState = this.getCurrentViewState();\n if(currentViewState) {\n const uiSchema = currentViewState.uiSchema;\n return uiSchema.find(({ name }) => name === fieldName);\n }\n }\n\n /**\n * Returns the displayName of the authenticator\n * @returns {string}\n */\n getAuthenticatorDisplayName() {\n const currentAuthenticator = this.get('currentAuthenticator') || {};\n const currentAuthenticatorEnrollment = this.get('currentAuthenticatorEnrollment') || {};\n\n // For enrollment and certain verification flows, the currentAuthenticator object will be present.\n // If not, we're likely in a traditional verify/challenge flow.\n return currentAuthenticator.displayName || currentAuthenticatorEnrollment.displayName;\n }\n\n /**\n * Checks to see if we're in an authenticator challenge flow.\n * @returns {boolean}\n */\n isAuthenticatorChallenge() {\n const currentFormName = this.get('currentFormName');\n return FORMS_FOR_VERIFICATION.includes(currentFormName);\n }\n\n shouldReRenderView(transformedResponse) {\n if (transformedResponse?.idx?.hasFormError) {\n return false;\n }\n\n const previousRawState = this.has('idx') ? this.get('idx').rawIdxState : null;\n\n const identicalResponse = _.isEqual(\n _.nestedOmit(transformedResponse.idx.rawIdxState, ['expiresAt', 'refresh', 'stateHandle', 'headers']),\n _.nestedOmit(previousRawState, ['expiresAt', 'refresh', 'stateHandle', 'headers']));\n\n if (identicalResponse) {\n this.set('dynamicRefreshInterval', this.getRefreshInterval(transformedResponse));\n }\n\n return this._isReRenderRequired(identicalResponse, transformedResponse, previousRawState);\n }\n\n getRefreshInterval(transformedResponse) {\n // Only polling refresh interval has changed in the response,\n // make sure to update the correct poll view's refresh value\n const currentFormName = this.get('currentFormName');\n const currentViewState = transformedResponse.remediations.filter(r => r.name === currentFormName)[0];\n // Get new refresh interval for either: remediations, authenticator, or authenticator enrollment\n return currentViewState.refresh ||\n transformedResponse.currentAuthenticatorEnrollment?.poll?.refresh ||\n transformedResponse.currentAuthenticator?.poll?.refresh;\n }\n\n // Sign Out link will be displayed in the footer of a form, unless:\n // - widget configuration set hideSignOutLinkInMFA or mfaOnlyFlow to true\n // - cancel remediation form is not present in the response\n // - form is part of our list FORMS_WITHOUT_SIGNOUT\n shouldShowSignOutLinkInCurrentForm(hideSignOutLinkInMFA) {\n const idxActions = this.get('idx') && this.get('idx').actions;\n const currentFormName = this.get('currentFormName');\n\n return !hideSignOutLinkInMFA\n && _.isFunction(idxActions?.cancel)\n && !FORMS_WITHOUT_SIGNOUT.includes(currentFormName);\n }\n\n containsMessageWithI18nKey(keys) {\n if (!Array.isArray(keys)) {\n keys = [keys];\n }\n const messagesObjs = this.get('messages');\n return messagesObjs && Array.isArray(messagesObjs.value)\n && messagesObjs.value.some(messagesObj => _.contains(keys, messagesObj.i18n?.key));\n }\n\n containsMessageStartingWithI18nKey(keySubStr) {\n const messagesObjs = this.get('messages');\n return messagesObjs && Array.isArray(messagesObjs.value)\n && messagesObjs.value.some(messagesObj => messagesObj.i18n?.key.startsWith(keySubStr));\n }\n\n clearAppStateCache() {\n // clear appState before setting new values\n const attrs = {};\n for (const key in this.attributes) {\n if (key !== 'currentFormName') {\n attrs[key] = void 0;\n }\n }\n this.set(attrs, Object.assign({}, { unset: true, silent: true }));\n // clear cache for derived props.\n this.trigger('cache:clear');\n }\n\n async setIonResponse(transformedResponse, hooks) {\n const doRerender = this.shouldReRenderView(transformedResponse);\n this.clearAppStateCache();\n // set new app state properties\n this.set(transformedResponse);\n\n if (doRerender) {\n // `currentFormName` is default to first form of remediations or nothing.\n let currentFormName = null;\n if (!_.isEmpty(transformedResponse.remediations)) {\n currentFormName = transformedResponse.remediations[0].name;\n } else {\n Logger.error('Panic!!');\n Logger.error('\\tNo remediation found.');\n Logger.error('\\tHere is the entire response');\n Logger.error(JSON.stringify(transformedResponse, null, 2));\n }\n\n const hook = hooks?.getHook(currentFormName); // may be undefined\n await executeHooksBefore(hook);\n \n this.unset('currentFormName', { silent: true });\n // make sure change `currentFormName` is last step.\n // change `currentFormName` will re-render FormController,\n // which may depend on other derived properties hence\n // those derived properties must be re-computed before\n // re-rendering controller.\n this.set({ currentFormName });\n\n await executeHooksAfter(hook);\n }\n }\n\n getUser() {\n return this.get('user');\n }\n\n _isReRenderRequired(identicalResponse, transformedResponse, previousRawState) {\n let reRender = true;\n\n const isPreviousStateError = this.get('idx')?.hasFormError;\n if (isPreviousStateError && this._isChallengeAuthenticatorPoll(transformedResponse, previousRawState)) {\n reRender = false;\n }\n\n if (identicalResponse) {\n /**\n * returns false: When new response is same as last.\n * usually happens during polling when pipeline doesn't proceed to next step.\n * expiresAt will be different for each response, hence compare objects without that property\n */\n reRender = false;\n }\n\n if (identicalResponse && this.get('currentFormName') === 'poll') {\n /**\n * returns true: We want to force reRender when currentForm is poll because request has to reinitiate\n * based on new refresh and UI has to reflect new timer.\n * We dont technical poll here we just make a request after the specified refresh time each time\n * we get a new response.\n */\n reRender = true;\n }\n\n if (identicalResponse && FORMS_WITH_STATIC_BACK_LINK.includes(this.get('currentFormName'))) {\n /**\n * returns true: We want to force reRender if you go back to selection screen from challenge or enroll screen\n * and re-select the same authenticator for challenge. In this case also new response will be identical\n * to the old response.\n */\n reRender = true;\n }\n return reRender;\n }\n\n /**\n * This is to account for the edge case introduced by this issue: OKTA-419210. With the current idx remediations,\n * there's no good way to generalize this as the backend handles the authenticators for phone, sms and \n * email differently. Although not ideal, we have to keep this check in for now until we find a better solution.\n */\n _isChallengeAuthenticatorPoll(transformedResponse, previousRawState) {\n const isSameExceptMessages = _.isEqual(\n _.nestedOmit(transformedResponse.idx.rawIdxState, ['expiresAt', 'refresh', 'stateHandle', 'headers']),\n _.nestedOmit(previousRawState, ['expiresAt', 'refresh', 'stateHandle', 'messages', 'headers']));\n\n const isChallengeAuthenticator = this.get('currentFormName') === 'challenge-authenticator';\n const isCurrentAuthenticatorEmail = this.get('currentAuthenticatorEnrollment')?.key === AUTHENTICATOR_KEY.EMAIL;\n\n return isSameExceptMessages && isChallengeAuthenticator && isCurrentAuthenticatorEmail;\n }\n}\n","import Logger from 'util/Logger';\nimport { AUTHENTICATOR_KEY, FORMS as RemediationForms } from '../ion/RemediationConstants';\nimport { BaseView } from './internals';\n\n// Identify\nimport IdentifierView from './views/IdentifierView';\nimport RedirectIdPView from './views/RedirectIdPView';\nimport IdentifyRecoveryView from './views/IdentifyRecoveryView';\n\n// Terminal & Auto-Redirect\nimport TerminalView from './views/TerminalView';\nimport AutoRedirectView from './views/AutoRedirectView';\n\n// safe mode poll view\nimport PollView from './views/PollView';\n\n// consent\nimport AdminConsentView from './views/consent/AdminConsentView';\nimport EnduserConsentView from './views/consent/EnduserConsentView';\nimport EnduserEmailConsentView from './views/consent/EnduserEmailConsentView';\n\n// Device (Okta Verify)\nimport DeviceChallengePollView from './views/device/DeviceChallengePollView';\nimport SSOExtensionView from './views/device/SSOExtensionView';\nimport SignInDeviceView from './views/device/SignInDeviceView';\nimport DeviceEnrollmentTerminalView from './views/device/DeviceEnrollmentTerminalView';\n\n// registration\nimport EnrollProfileView from './views/EnrollProfileView';\n\n// registration update\nimport EnrollProfileUpdateView from './views/EnrollProfileUpdateView';\n\n// Email Activation\nimport RequestActivationEmail from './views/activation/RequestActivationEmailView';\n\n// authenticator list\nimport SelectAuthenticatorEnrollView from './views/SelectAuthenticatorEnrollView';\nimport SelectAuthenticatorVerifyView from './views/SelectAuthenticatorVerifyView';\nimport SelectAuthenticatorUnlockAccountView from './views/authenticator/SelectAuthenticatorUnlockAccountView';\n\n// password\nimport EnrollAuthenticatorPasswordView from './views/password/EnrollAuthenticatorPasswordView';\nimport ChallengeAuthenticatorPasswordView from './views/password/ChallengeAuthenticatorPasswordView';\nimport ReEnrollAuthenticatorPasswordView from './views/password/ReEnrollAuthenticatorPasswordView';\nimport ReEnrollAuthenticatorWarningPasswordView from './views/password/ReEnrollAuthenticatorWarningPasswordView';\nimport ResetAuthenticatorPasswordView from './views/password/ResetAuthenticatorPasswordView';\n\n// phone\nimport EnrollAuthenticatorPhoneView from './views/phone/EnrollAuthenticatorPhoneView';\nimport EnrollAuthenticatorDataPhoneView from './views/phone/EnrollAuthenticatorDataPhoneView';\nimport ChallengeAuthenticatorPhoneView from './views/phone/ChallengeAuthenticatorPhoneView';\nimport ChallengeAuthenticatorDataPhoneView from './views/phone/ChallengeAuthenticatorDataPhoneView';\n\n// security question\nimport EnrollAuthenticatorSecurityQuestion from './views/security-question/EnrollAuthenticatorSecurityQuestionView';\nimport ChallengeAuthenticatorSecurityQuestion from './views/security-question/ChallengeAuthenticatorSecurityQuestion';\n\n//webauthn\nimport EnrollWebauthnView from './views/webauthn/EnrollWebauthnView';\nimport ChallengeWebauthnView from './views/webauthn/ChallengeWebauthnView';\n\n// email\nimport EnrollAuthenticatorEmailView from './views/email/EnrollAuthenticatorEmailView';\nimport ChallengeAuthenticatorEmailView from './views/email/ChallengeAuthenticatorEmailView';\nimport ChallengeAuthenticatorDataEmailView from './views/email/ChallengeAuthenticatorDataEmailView';\n\n// app (okta verify)\nimport EnrollPollOktaVerifyView from './views/ov/EnrollPollOktaVerifyView';\nimport SelectEnrollmentChannelOktaVerifyView from './views/ov/SelectEnrollmentChannelOktaVerifyView';\nimport EnrollementChannelDataOktaVerifyView from './views/ov/EnrollementChannelDataOktaVerifyView';\nimport ChallengeOktaVerifyView from './views/ov/ChallengeOktaVerifyView';\nimport ChallengeOktaVerifyTotpView from './views/ov/ChallengeOktaVerifyTotpView';\nimport ChallengeOktaVerifyResendPushView from './views/ov/ChallengeOktaVerifyResendPushView';\nimport ChallengeAuthenticatorDataOktaVerifyView from './views/ov/ChallengeAuthenticatorDataOktaVerifyView';\nimport ChallengeOktaVerifySSOExtensionView from './views/ov/ChallengeOktaVerifySSOExtensionView';\n\n// app (google authenticator)\nimport EnrollAuthenticatorGoogleAuthenticatorView\n from './views/google-authenticator/EnrollAuthenticatorGoogleAuthenticatorView';\nimport ChallengeGoogleAuthenticatorView from './views/google-authenticator/ChallengeGoogleAuthenticatorView';\n\n// on-prem mfa\nimport EnrollAuthenticatorOnPremView from './views/on-prem/EnrollAuthenticatorOnPremView';\nimport ChallengeAuthenticatorOnPremView from './views/on-prem/ChallengeAuthenticatorOnPremView';\n\n// duo mfa\nimport EnrollDuoAuthenticatorView from './views/duo/EnrollDuoAuthenticatorView';\nimport ChallengeDuoAuthenticatorView from './views/duo/ChallengeDuoAuthenticatorView';\n\n// idp authenticator\nimport AuthenticatorIdPVerifyView from './views/idp/AuthenticatorIdPVerifyView';\nimport AuthenticatorIdPEnrollView from './views/idp/AuthenticatorIdPEnrollView';\n\n// custom otp\nimport ChallengeCustomOTPAuthenticatorView from './views/custom-otp/ChallengeCustomOTPAuthenticatorView';\n\n// Symantec VIP authenticator\nimport AuthenticatorSymantecView from './views/symantec/AuthenticatorSymantecView';\n\n// Device code activate view\nimport DeviceCodeActivateView from './views/device/DeviceCodeActivateView';\n\n// X509 PIV view\nimport ChallengePIVView from './views/piv/ChallengePIVView';\n\n// YubiKey\nimport AuthenticatorYubiKeyView from './views/yubikey/AuthenticatorYubiKeyView';\n\n// custom app\nimport ChallengePushView from './views/shared/ChallengePushView';\nimport ChallengeCustomAppResendPushView from './views/custom-app/ChallengeCustomAppResendPushView'; \n\nconst DEFAULT = '_';\n\nconst VIEWS_MAPPING = {\n [RemediationForms.IDENTIFY]: {\n [DEFAULT]: IdentifierView,\n },\n [RemediationForms.IDENTIFY_RECOVERY]: {\n [DEFAULT]: IdentifyRecoveryView,\n },\n [RemediationForms.DEVICE_CHALLENGE_POLL]: {\n [DEFAULT]: DeviceChallengePollView,\n },\n [RemediationForms.LAUNCH_AUTHENTICATOR]: {\n [DEFAULT]: SignInDeviceView,\n },\n [RemediationForms.DEVICE_APPLE_SSO_EXTENSION]: {\n [DEFAULT]: SSOExtensionView,\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifySSOExtensionView,\n },\n [RemediationForms.CANCEL_TRANSACTION]: {\n [DEFAULT]: SSOExtensionView,\n },\n [RemediationForms.ENROLL_PROFILE]: {\n [DEFAULT]: EnrollProfileView,\n },\n [RemediationForms.ENROLL_PROFILE_UPDATE]: {\n [DEFAULT]: EnrollProfileUpdateView,\n },\n [RemediationForms.POLL]: {\n [DEFAULT]: PollView\n },\n [RemediationForms.REQUEST_ACTIVATION]: {\n [DEFAULT]: RequestActivationEmail\n },\n [RemediationForms.SELECT_AUTHENTICATOR_ENROLL]: {\n [DEFAULT]: SelectAuthenticatorEnrollView,\n },\n [RemediationForms.AUTHENTICATOR_ENROLLMENT_DATA]: {\n [AUTHENTICATOR_KEY.PHONE]: EnrollAuthenticatorDataPhoneView,\n },\n [RemediationForms.CONSENT_ADMIN]: {\n [DEFAULT]: AdminConsentView\n },\n [RemediationForms.CONSENT_ENDUSER]: {\n [DEFAULT]: EnduserConsentView\n },\n [RemediationForms.CONSENT_EMAIL_CHALLENGE]: {\n [DEFAULT]: EnduserEmailConsentView,\n },\n [RemediationForms.ENROLL_AUTHENTICATOR]: {\n [AUTHENTICATOR_KEY.DUO]: EnrollDuoAuthenticatorView,\n [AUTHENTICATOR_KEY.EMAIL]: EnrollAuthenticatorEmailView,\n [AUTHENTICATOR_KEY.GOOGLE_OTP]: EnrollAuthenticatorGoogleAuthenticatorView,\n [AUTHENTICATOR_KEY.IDP]: AuthenticatorIdPEnrollView,\n [AUTHENTICATOR_KEY.ON_PREM]: EnrollAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.PASSWORD]: EnrollAuthenticatorPasswordView,\n [AUTHENTICATOR_KEY.PHONE]: EnrollAuthenticatorPhoneView,\n [AUTHENTICATOR_KEY.RSA]: EnrollAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.SECURITY_QUESTION]: EnrollAuthenticatorSecurityQuestion,\n [AUTHENTICATOR_KEY.SYMANTEC_VIP]: AuthenticatorSymantecView,\n [AUTHENTICATOR_KEY.WEBAUTHN]: EnrollWebauthnView,\n [AUTHENTICATOR_KEY.YUBIKEY]: AuthenticatorYubiKeyView,\n },\n [RemediationForms.CHALLENGE_AUTHENTICATOR]: {\n [AUTHENTICATOR_KEY.CUSTOM_OTP]: ChallengeCustomOTPAuthenticatorView,\n [AUTHENTICATOR_KEY.DUO]: ChallengeDuoAuthenticatorView,\n [AUTHENTICATOR_KEY.EMAIL]: ChallengeAuthenticatorEmailView,\n [AUTHENTICATOR_KEY.GOOGLE_OTP]: ChallengeGoogleAuthenticatorView,\n [AUTHENTICATOR_KEY.IDP]: AuthenticatorIdPVerifyView,\n [AUTHENTICATOR_KEY.ON_PREM]: ChallengeAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyTotpView,\n [AUTHENTICATOR_KEY.PASSWORD]: ChallengeAuthenticatorPasswordView,\n [AUTHENTICATOR_KEY.PHONE]: ChallengeAuthenticatorPhoneView,\n [AUTHENTICATOR_KEY.RSA]: ChallengeAuthenticatorOnPremView,\n [AUTHENTICATOR_KEY.SECURITY_QUESTION]: ChallengeAuthenticatorSecurityQuestion,\n [AUTHENTICATOR_KEY.SYMANTEC_VIP]: AuthenticatorSymantecView,\n [AUTHENTICATOR_KEY.WEBAUTHN]: ChallengeWebauthnView,\n [AUTHENTICATOR_KEY.YUBIKEY]: AuthenticatorYubiKeyView,\n },\n [RemediationForms.ENROLL_POLL]: {\n [AUTHENTICATOR_KEY.OV]: EnrollPollOktaVerifyView,\n },\n [RemediationForms.SELECT_ENROLLMENT_CHANNEL]: {\n [AUTHENTICATOR_KEY.OV]: SelectEnrollmentChannelOktaVerifyView,\n },\n [RemediationForms.ENROLLMENT_CHANNEL_DATA]: {\n [AUTHENTICATOR_KEY.OV]: EnrollementChannelDataOktaVerifyView,\n },\n // Expired scenarios for authenticators..\n [RemediationForms.REENROLL_AUTHENTICATOR]: {\n // Password expired scenario..\n [AUTHENTICATOR_KEY.PASSWORD]: ReEnrollAuthenticatorPasswordView,\n },\n // Will expire soon warnings for authenticators..\n [RemediationForms.REENROLL_AUTHENTICATOR_WARNING]: {\n // Password will expire soon scenario..\n [AUTHENTICATOR_KEY.PASSWORD]: ReEnrollAuthenticatorWarningPasswordView,\n },\n // Reset forms for authenticators..\n [RemediationForms.RESET_AUTHENTICATOR]: {\n // Admin driven password reset..\n [AUTHENTICATOR_KEY.PASSWORD]: ResetAuthenticatorPasswordView,\n },\n [RemediationForms.SELECT_AUTHENTICATOR_AUTHENTICATE]: {\n [DEFAULT]: SelectAuthenticatorVerifyView,\n },\n [RemediationForms.SELECT_AUTHENTICATOR_UNLOCK]: {\n [DEFAULT]: SelectAuthenticatorUnlockAccountView,\n },\n [RemediationForms.CHALLENGE_POLL]: {\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyView,\n [AUTHENTICATOR_KEY.CUSTOM_APP]: ChallengePushView,\n },\n [RemediationForms.RESEND]: {\n [AUTHENTICATOR_KEY.OV]: ChallengeOktaVerifyResendPushView,\n [AUTHENTICATOR_KEY.CUSTOM_APP]: ChallengeCustomAppResendPushView,\n },\n [RemediationForms.AUTHENTICATOR_VERIFICATION_DATA]: {\n [AUTHENTICATOR_KEY.PHONE]: ChallengeAuthenticatorDataPhoneView,\n [AUTHENTICATOR_KEY.OV]: ChallengeAuthenticatorDataOktaVerifyView,\n [AUTHENTICATOR_KEY.EMAIL]: ChallengeAuthenticatorDataEmailView,\n },\n [RemediationForms.FAILURE_REDIRECT]: {\n [DEFAULT]: AutoRedirectView,\n },\n [RemediationForms.SUCCESS_REDIRECT]: {\n [DEFAULT]: AutoRedirectView,\n },\n [RemediationForms.REDIRECT_IDP]: {\n [DEFAULT]: RedirectIdPView,\n },\n [RemediationForms.PIV_IDP]: {\n [DEFAULT]: ChallengePIVView,\n },\n [RemediationForms.DEVICE_ENROLLMENT_TERMINAL]: {\n [DEFAULT]: DeviceEnrollmentTerminalView,\n },\n [RemediationForms.USER_CODE] : {\n [DEFAULT] : DeviceCodeActivateView\n },\n [RemediationForms.TERMINAL]: {\n [DEFAULT]: TerminalView,\n },\n};\n\nexport default {\n create(formName, authenticatorKey = DEFAULT) {\n const config = VIEWS_MAPPING[formName];\n if (!config) {\n Logger.warn(`Cannot find customized View for ${formName}.`);\n return BaseView;\n }\n const View = config[authenticatorKey] || config[DEFAULT];\n if (!View) {\n Logger.warn(`Cannot find customized View for ${formName} + ${authenticatorKey}.`);\n return BaseView;\n }\n\n return View;\n }\n};\n","import hbs from 'handlebars-inline-precompile';\n\nimport { _, Form, loc, internal, createCallout, View } from 'okta';\nimport * as FormInputFactory from './FormInputFactory';\n\nconst { FormUtil } = internal.views.forms.helpers;\nconst INFO_MESSAGE_CLASS = 'INFO';\n\nexport default Form.extend({\n\n layout: 'o-form-theme',\n className: 'ion-form',\n hasSavingState: true,\n autoSave: false,\n noCancelButton: true,\n\n title() {\n return loc('oform.title.authenticate', 'login');\n },\n\n save() {\n return loc('oform.next', 'login');\n },\n\n modelEvents: {\n 'clearFormError': 'handleClearFormError',\n 'error': 'triggerAfterError',\n },\n\n initialize() {\n const uiSchemas = this.getUISchema();\n const inputOptions = uiSchemas.map(FormInputFactory.create);\n\n //should be used before adding any other input components\n this.showMessages();\n\n // Render CAPTCHA if one of the form fields requires us to.\n this.listenTo(this.options.appState, 'onCaptchaLoaded', (captchaObject) => {\n this.captchaObject = captchaObject;\n });\n\n inputOptions.forEach(input => {\n this.addInputOrView(input);\n });\n\n this.listenTo(this, 'save', this.saveForm);\n this.listenTo(this, 'cancel', this.cancelForm);\n },\n\n focus(...args) {\n if (this.settings.get('features.autoFocus')) {\n Form.prototype.focus.apply(this, args);\n }\n },\n\n handleClearFormError() {\n const formErrorContainer = this.$('.o-form-error-container');\n formErrorContainer.empty();\n if (formErrorContainer.hasClass('o-form-has-errors')) {\n this.clearErrors();\n }\n },\n\n triggerAfterError(model, error) {\n this.options.appState.trigger('afterError', error);\n },\n\n saveForm(model) {\n //remove any existing warnings or messages before saving form\n this.$el.find('.o-form-error-container').empty();\n\n // Execute Captcha if enabled for this form.\n if (this.captchaObject) {\n this.captchaObject.execute();\n } else {\n this.options.appState.trigger('saveForm', model);\n }\n },\n\n postRender() {\n /**\n * Widget would use infoContainer to display interactive messages that should be persisted during\n * invalid form submissions. For eg resend-warning callout should not be cleared upon invalid form submit.\n * Rerender would clear infoContainer or views classes can clear it explicitly.\n */\n const infoContainer= '';\n this.$el.find('.o-form-error-container').before(infoContainer);\n\n this.addIdentifier();\n },\n\n /**\n * Render user identifier below title, or if no title, render below message.\n */\n addIdentifier() {\n const { identifier } = this.options.appState.get('user') || {};\n if (!identifier) {\n return;\n } else if (!this.settings.get('features.showIdentifier')) {\n return;\n }\n\n const header = this.$el.find('[data-se=\"o-form-head\"]');\n const identifierHTMLString = hbs(' | undefined;\n className?: string | undefined;\n }\n}\n\nconst isTextOverflowing = (text, maxWidth) => {\n // Create a temporary element and attach it to the document so we can compare the client width to the \n // max width allowed.\n const elem = document.createElement('div');\n elem.style.position = 'absolute';\n elem.style.left = '-9999px';\n elem.style.whiteSpace = 'nowrap';\n elem.innerHTML = text;\n\n document.body.appendChild(elem);\n const result = elem.clientWidth;\n document.body.removeChild(elem);\n\n return result > maxWidth;\n};\n\nconst createAuthenticatorEnrollSelectView = (opt) => {\n const optionItems = (opt.options || [])\n .map(opt => {\n return Object.assign({}, opt, getAuthenticatorDataForEnroll(opt));\n });\n return {\n View: AuthenticatorEnrollOptions,\n options: {\n name: opt.name,\n collection: new Collection(optionItems),\n }\n };\n};\n\nconst createAuthenticatorVerifySelectView = (opt) => {\n let optionItems = (opt.options || []);\n // If webauthn enrollments > 1 just show one entry with a generic namne (first) so user doesnt have to select which\n // one to pick. eg) If there is yubikey5 and another unknown u2f key, user cannot identify that easily. We need to\n // do this at least until users can give authenticator enrollments custom names.\n let hasSecurityKey = false;\n optionItems = optionItems.filter(opt => {\n if (opt.authenticatorKey === AUTHENTICATOR_KEY.WEBAUTHN) {\n if (!hasSecurityKey) {\n hasSecurityKey = true;\n return true;\n } else {\n return false;\n }\n }\n return true;\n });\n optionItems = optionItems.map(opt => {\n return Object.assign({}, opt, getAuthenticatorDataForVerification(opt));\n });\n return {\n View: AuthenticatorVerifyOptions,\n options: {\n name: opt.name,\n collection: new Collection(optionItems),\n }\n };\n};\n\nconst createAdminScopesView = () => {\n return {\n View: AdminScopeList,\n };\n};\nconst createEnduserScopesView = () => {\n return {\n View: EnduserScopeList,\n };\n};\n\nconst createCaptchaView = (opt) => {\n return {\n View: CaptchaView,\n options: {\n name: opt.name,\n } \n };\n};\n\nconst inputCreationStrategy = {\n authenticatorEnrollSelect: createAuthenticatorEnrollSelectView,\n authenticatorVerifySelect: createAuthenticatorVerifySelectView,\n ['admin-consent']: createAdminScopesView,\n ['consent']: createEnduserScopesView,\n ['captcha']: createCaptchaView,\n};\n\n// TODO: move logic to uiSchemaTransformer\nconst create = function(uiSchemaObj) {\n const strategyFn = inputCreationStrategy[uiSchemaObj.type] || _.identity;\n return strategyFn(uiSchemaObj);\n};\n\nconst createPIVButton = (settings, appState) => {\n const pivIdp =\n appState.get('remediations').filter(idp => idp.name === RemediationForms.PIV_IDP);\n if (pivIdp.length < 1) {\n return [];\n }\n const pivConfig = settings.get('piv');\n const className = pivConfig.className || '';\n return [{\n attributes: {\n 'data-se': 'piv-card-button',\n },\n className: className + ' piv-button',\n title: pivConfig.text || loc('piv.cac.card', 'login'),\n click: (e) => {\n e.preventDefault();\n appState.trigger('switchForm', RemediationForms.PIV_IDP);\n },\n }];\n};\n\n/**\n * Example of `redirect-idp` remediation.\n * {\n * \"name\": \"redirect-idp\",\n * \"type\": \"MICROSOFT\",\n * \"idp\": {\n * \"id\": \"0oa2szc1K1YPgz1pe0g4\",\n * \"name\": \"Microsoft IDP\"\n * },\n * \"href\": \"http://localhost:3000/sso/idps/0oa2szc1K1YPgz1pe0g4?stateToken=BB...AA\",\n * \"method\": \"GET\"\n * }\n *\n */\nconst createIdpButtons = ({ settings, appState }) => {\n // This is the max allowable text width that we can display for IDP buttons.\n // Generated by taking the 316px width of button minus padding-left (90 px) and padding-right (50px)\n const MAX_IDP_BUTTON_WIDTH = 186;\n\n const redirectIdpRemediations =\n appState.get('remediations').filter(idp => idp.name === RemediationForms.REDIRECT_IDP);\n\n if (!Array.isArray(redirectIdpRemediations)) {\n return [];\n }\n\n // create piv button\n const pivButton = createPIVButton(settings, appState);\n\n //add buttons from idp object\n const idpButtons = redirectIdpRemediations.map(idpObject => {\n let type = idpObject.type?.toLowerCase();\n let displayName;\n\n if (!_.contains(IDP.SUPPORTED_SOCIAL_IDPS, type)) {\n type = 'general-idp';\n // OKTA-396684 - makes sure that custom idps always have a name\n displayName = loc('customauth.sign.in.with.label', 'login', [idpObject.idp?.name]);\n } else {\n displayName = loc(`socialauth.${type}.label`, 'login');\n }\n\n const classNames = [\n 'social-auth-button',\n `social-auth-${type}-button`,\n ];\n\n if (type === 'general-idp') {\n classNames.push('no-translate');\n }\n\n if (idpObject.idp.className) {\n classNames.push(idpObject.idp.className);\n }\n\n const button: ButtonOptions = {\n attributes: {\n 'data-se': `social-auth-${type}-button`,\n },\n className: classNames.join(' '),\n title: displayName,\n href: idpObject.href,\n };\n\n if (isTextOverflowing(displayName, MAX_IDP_BUTTON_WIDTH)) {\n // We add a tooltip in case the name gets truncated if too long\n button.attributes.title = displayName;\n }\n\n return button;\n });\n\n return [...pivButton, ...idpButtons];\n};\n\nconst createCustomButtons = (settings) => {\n const customButtons = settings.get('customButtons');\n return customButtons.map(customButton => {\n const button = {\n attributes: {\n 'data-se': customButton.dataAttr\n },\n className: customButton.className + ' default-custom-button',\n title: customButton.title || loc(customButton.i18nKey, 'login'),\n click: customButton.click\n };\n return button;\n });\n};\n\nconst addCustomButton = (customButtonSettings) => {\n return createButton({\n ...customButtonSettings,\n className: `${customButtonSettings.className} default-custom-button button-primary`,\n });\n};\n\nexport {\n create,\n createIdpButtons,\n createCustomButtons,\n addCustomButton,\n isTextOverflowing\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Animations from 'util/Animations';\nimport LoadingBeacon from 'views/shared/LoadingBeacon';\nconst NO_BEACON_CLS = 'no-beacon';\nconst LOADING_BEACON_CLS = 'beacon-small beacon-loading';\n\nfunction isLoadingBeacon(beacon) {\n return beacon && beacon.equals(LoadingBeacon);\n}\n\nfunction removeBeacon(view) {\n // There are some timing issues with removing beacons (i.e. the case of\n // transitioning from loadingBeacon -> loadingBeacon)\n if (!view.currentBeacon) {\n return;\n }\n view.currentBeacon.remove();\n view.currentBeacon = null;\n}\n\nfunction addBeacon(view, NextBeacon, selector, options) {\n view.add(NextBeacon, {\n selector: selector,\n options: options,\n });\n view.currentBeacon = view.first();\n}\n\nfunction typeOfTransition(currentBeacon, NextBeacon, options) {\n if (!currentBeacon && !NextBeacon) {\n return 'none';\n }\n // Show Loading beacon\n if (!currentBeacon && options.loading) {\n return 'load';\n }\n // Swap/Hide Loading beacon\n if (currentBeacon && isLoadingBeacon(currentBeacon)) {\n return NextBeacon ? 'swap' : 'unload';\n }\n if (currentBeacon && currentBeacon.equals(NextBeacon, options)) {\n return 'same';\n }\n if (!currentBeacon && NextBeacon) {\n return 'add';\n }\n if (currentBeacon && !NextBeacon) {\n return 'remove';\n }\n if (currentBeacon instanceof NextBeacon) {\n return 'fade';\n }\n // If none of the above\n // then we are changing the type of beacon\n // ex. from SecurityBeacon to FactorBeacon\n return 'swap';\n}\n\nexport default class Header extends View {\n currentBeacon;\n \n preinitialize(...args) {\n this.currentBeacon = null;\n /* eslint-disable @okta/okta/no-unlocalized-text-in-templates */\n this.template = hbs(\n '\\\n {\n if (this.router) {\n throw new Error('An instance of the widget has already been rendered. Call remove() first.');\n }\n\n const res = createRouter(this.Router, this.options, renderOptions, this.authClient, successFn, errorFn, this.hooks);\n this.router = res.router;\n return res.promise;\n }\n\n \n hide(): void {\n if (this.router) {\n this.router.hide();\n }\n }\n\n show(): void {\n if (this.router) {\n this.router.show();\n }\n }\n\n remove(): void {\n if (this.router) {\n this.router.remove();\n this.router = undefined;\n }\n }\n\n /**\n * Renders the Widget and returns a promise that resolves to OAuth tokens\n * @param options - options for the signin widget\n */\n showSignInToGetTokens(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options), {\n redirect: 'never'\n });\n const promise = this.renderEl(renderOptions).then(res => {\n return (res as RenderResultSuccess).tokens;\n });\n const authClient = this.router.settings.getAuthClient();\n if (authClient.isAuthorizationCodeFlow() && !authClient.isPKCE()) {\n throw new Errors.ConfigError('\"showSignInToGetTokens()\" should not be used for authorization_code flow. ' + \n 'Use \"showSignInAndRedirect()\" instead');\n }\n return promise;\n }\n\n /**\n * Renders the widget and redirects to the OAuth callback\n * @param options - options for the signin widget\n */\n showSignInAndRedirect(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options), {\n redirect: 'always'\n });\n return this.renderEl(renderOptions).then(() => {\n // This method should never return, it will either redirect or reject with error\n return;\n });\n }\n\n /**\n * Renders the widget. Either resolves the returned promise, or redirects.\n * @param options - options for the signin widget\n */\n showSignIn(options?: RenderOptions): Promise {\n const renderOptions = Object.assign(buildRenderOptions(this.options, options));\n return this.renderEl(renderOptions);\n }\n\n // Hook convenience functions\n before(formName: string, callbackFn: HookFunction): void {\n this.hooks.mergeHook(formName, {\n before: [\n callbackFn\n ]\n });\n }\n\n after(formName: string, callbackFn: HookFunction): void {\n this.hooks.mergeHook(formName, {\n after: [\n callbackFn\n ]\n });\n }\n\n getUser(): any {\n return this.router?.appState?.getUser();\n }\n \n // Events API\n\n on(event: EventName, callback: EventCallback | EventCallbackWithError): void {\n // custom events listener on widget instance to trap third-party callback errors\n if (EVENTS_LIST.includes(event)) {\n const origCallback = callback;\n callback = function(...callbackArgs) {\n try {\n origCallback.apply(this, callbackArgs);\n } catch (err) {\n Logger.error(`[okta-signin-widget] \"${event}\" event handler error:`, err);\n }\n };\n }\n this.Router.prototype.Events.on.call(this, event, callback);\n }\n\n off(event?: EventName, callback?: EventCallback | EventCallbackWithError): void {\n this.Router.prototype.Events.off.call(this, event, callback);\n }\n\n once(event: EventName, callback: EventCallback): void {\n this.Router.prototype.Events.once.call(this, event, callback);\n }\n\n stopListening(event?: EventName, callback?: EventCallback): void {\n this.Router.prototype.Events.stopListening.call(this, event, callback);\n }\n\n listenTo(object: any, event: EventName, callback: EventCallback): void {\n this.Router.prototype.Events.listenTo.call(this, object, event, callback);\n }\n\n trigger(event: EventName, ...args: any[]): void {\n this.Router.prototype.Events.trigger.apply(this, [event, ...args]);\n }\n\n}\n","import { OktaAuth } from '@okta/okta-auth-js';\nimport Util from 'util/Util';\nimport config from 'config/config.json';\nimport { WidgetOptions } from 'types';\n\nexport default function(options: WidgetOptions = {}): OktaAuth {\n // if authClient is set, authParams are disregarded\n let { authClient, authParams } = options;\n\n if (!authClient) {\n // Create an authClient using widget options and optional authParams\n const {\n issuer,\n clientId,\n redirectUri,\n state,\n scopes,\n flow,\n codeChallenge,\n codeChallengeMethod,\n recoveryToken\n } = options;\n authParams = {\n issuer,\n clientId,\n redirectUri,\n state,\n scopes,\n flow,\n codeChallenge,\n codeChallengeMethod,\n transformErrorXHR: Util.transformErrorXHR,\n recoveryToken,\n ...authParams\n };\n\n if (!authParams.issuer) {\n authParams.issuer = options.baseUrl + '/oauth2/default';\n }\n\n authClient = new OktaAuth(authParams);\n }\n\n // Add widget version to extended user agent header\n if (!authClient._oktaUserAgent) {\n // TODO: this block handles OKTA UA for passed in authClient, error should be thrown in the next major version\n // For now, do nothing here to preserve the current behavior\n // JIRA: https://oktainc.atlassian.net/browse/OKTA-433378\n // throw new Errors.ConfigError('The passed in authClient should be version 5.4.0 or above.');\n } else {\n authClient._oktaUserAgent.addEnvironment(`okta-signin-widget-${config.version}`);\n }\n\n return authClient;\n}\n","function _arrayLikeToArray(arr, len) {\n if (len == null || len > arr.length) len = arr.length;\n\n for (var i = 0, arr2 = new Array(len); i < len; i++) {\n arr2[i] = arr[i];\n }\n\n return arr2;\n}\n\nmodule.exports = _arrayLikeToArray;","function _arrayWithHoles(arr) {\n if (Array.isArray(arr)) return arr;\n}\n\nmodule.exports = _arrayWithHoles;","var arrayLikeToArray = require(\"./arrayLikeToArray\");\n\nfunction _arrayWithoutHoles(arr) {\n if (Array.isArray(arr)) return arrayLikeToArray(arr);\n}\n\nmodule.exports = _arrayWithoutHoles;","function _assertThisInitialized(self) {\n if (self === void 0) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return self;\n}\n\nmodule.exports = _assertThisInitialized;","function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {\n try {\n var info = gen[key](arg);\n var value = info.value;\n } catch (error) {\n reject(error);\n return;\n }\n\n if (info.done) {\n resolve(value);\n } else {\n Promise.resolve(value).then(_next, _throw);\n }\n}\n\nfunction _asyncToGenerator(fn) {\n return function () {\n var self = this,\n args = arguments;\n return new Promise(function (resolve, reject) {\n var gen = fn.apply(self, args);\n\n function _next(value) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"next\", value);\n }\n\n function _throw(err) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"throw\", err);\n }\n\n _next(undefined);\n });\n };\n}\n\nmodule.exports = _asyncToGenerator;","function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n}\n\nmodule.exports = _classCallCheck;","function _defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n}\n\nfunction _createClass(Constructor, protoProps, staticProps) {\n if (protoProps) _defineProperties(Constructor.prototype, protoProps);\n if (staticProps) _defineProperties(Constructor, staticProps);\n return Constructor;\n}\n\nmodule.exports = _createClass;","function _defineProperty(obj, key, value) {\n if (key in obj) {\n Object.defineProperty(obj, key, {\n value: value,\n enumerable: true,\n configurable: true,\n writable: true\n });\n } else {\n obj[key] = value;\n }\n\n return obj;\n}\n\nmodule.exports = _defineProperty;","function _getPrototypeOf(o) {\n module.exports = _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {\n return o.__proto__ || Object.getPrototypeOf(o);\n };\n return _getPrototypeOf(o);\n}\n\nmodule.exports = _getPrototypeOf;","var setPrototypeOf = require(\"./setPrototypeOf\");\n\nfunction _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n writable: true,\n configurable: true\n }\n });\n if (superClass) setPrototypeOf(subClass, superClass);\n}\n\nmodule.exports = _inherits;","function _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n \"default\": obj\n };\n}\n\nmodule.exports = _interopRequireDefault;","function _iterableToArray(iter) {\n if (typeof Symbol !== \"undefined\" && Symbol.iterator in Object(iter)) return Array.from(iter);\n}\n\nmodule.exports = _iterableToArray;","function _iterableToArrayLimit(arr, i) {\n if (typeof Symbol === \"undefined\" || !(Symbol.iterator in Object(arr))) return;\n var _arr = [];\n var _n = true;\n var _d = false;\n var _e = undefined;\n\n try {\n for (var _i = arr[Symbol.iterator](), _s; !(_n = (_s = _i.next()).done); _n = true) {\n _arr.push(_s.value);\n\n if (i && _arr.length === i) break;\n }\n } catch (err) {\n _d = true;\n _e = err;\n } finally {\n try {\n if (!_n && _i[\"return\"] != null) _i[\"return\"]();\n } finally {\n if (_d) throw _e;\n }\n }\n\n return _arr;\n}\n\nmodule.exports = _iterableToArrayLimit;","function _nonIterableRest() {\n throw new TypeError(\"Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\");\n}\n\nmodule.exports = _nonIterableRest;","function _nonIterableSpread() {\n throw new TypeError(\"Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\");\n}\n\nmodule.exports = _nonIterableSpread;","var _typeof = require(\"../helpers/typeof\");\n\nvar assertThisInitialized = require(\"./assertThisInitialized\");\n\nfunction _possibleConstructorReturn(self, call) {\n if (call && (_typeof(call) === \"object\" || typeof call === \"function\")) {\n return call;\n }\n\n return assertThisInitialized(self);\n}\n\nmodule.exports = _possibleConstructorReturn;","function _setPrototypeOf(o, p) {\n module.exports = _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {\n o.__proto__ = p;\n return o;\n };\n\n return _setPrototypeOf(o, p);\n}\n\nmodule.exports = _setPrototypeOf;","var arrayWithHoles = require(\"./arrayWithHoles\");\n\nvar iterableToArrayLimit = require(\"./iterableToArrayLimit\");\n\nvar unsupportedIterableToArray = require(\"./unsupportedIterableToArray\");\n\nvar nonIterableRest = require(\"./nonIterableRest\");\n\nfunction _slicedToArray(arr, i) {\n return arrayWithHoles(arr) || iterableToArrayLimit(arr, i) || unsupportedIterableToArray(arr, i) || nonIterableRest();\n}\n\nmodule.exports = _slicedToArray;","var arrayWithoutHoles = require(\"./arrayWithoutHoles\");\n\nvar iterableToArray = require(\"./iterableToArray\");\n\nvar unsupportedIterableToArray = require(\"./unsupportedIterableToArray\");\n\nvar nonIterableSpread = require(\"./nonIterableSpread\");\n\nfunction _toConsumableArray(arr) {\n return arrayWithoutHoles(arr) || iterableToArray(arr) || unsupportedIterableToArray(arr) || nonIterableSpread();\n}\n\nmodule.exports = _toConsumableArray;","function _typeof(obj) {\n \"@babel/helpers - typeof\";\n\n if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") {\n module.exports = _typeof = function _typeof(obj) {\n return typeof obj;\n };\n } else {\n module.exports = _typeof = function _typeof(obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n }\n\n return _typeof(obj);\n}\n\nmodule.exports = _typeof;","var arrayLikeToArray = require(\"./arrayLikeToArray\");\n\nfunction _unsupportedIterableToArray(o, minLen) {\n if (!o) return;\n if (typeof o === \"string\") return arrayLikeToArray(o, minLen);\n var n = Object.prototype.toString.call(o).slice(8, -1);\n if (n === \"Object\" && o.constructor) n = o.constructor.name;\n if (n === \"Map\" || n === \"Set\") return Array.from(o);\n if (n === \"Arguments\" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return arrayLikeToArray(o, minLen);\n}\n\nmodule.exports = _unsupportedIterableToArray;","/**\n * Copyright (c) 2014-present, Facebook, Inc.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\nvar runtime = (function (exports) {\n \"use strict\";\n\n var Op = Object.prototype;\n var hasOwn = Op.hasOwnProperty;\n var undefined; // More compressible than void 0.\n var $Symbol = typeof Symbol === \"function\" ? Symbol : {};\n var iteratorSymbol = $Symbol.iterator || \"@@iterator\";\n var asyncIteratorSymbol = $Symbol.asyncIterator || \"@@asyncIterator\";\n var toStringTagSymbol = $Symbol.toStringTag || \"@@toStringTag\";\n\n function wrap(innerFn, outerFn, self, tryLocsList) {\n // If outerFn provided and outerFn.prototype is a Generator, then outerFn.prototype instanceof Generator.\n var protoGenerator = outerFn && outerFn.prototype instanceof Generator ? outerFn : Generator;\n var generator = Object.create(protoGenerator.prototype);\n var context = new Context(tryLocsList || []);\n\n // The ._invoke method unifies the implementations of the .next,\n // .throw, and .return methods.\n generator._invoke = makeInvokeMethod(innerFn, self, context);\n\n return generator;\n }\n exports.wrap = wrap;\n\n // Try/catch helper to minimize deoptimizations. Returns a completion\n // record like context.tryEntries[i].completion. This interface could\n // have been (and was previously) designed to take a closure to be\n // invoked without arguments, but in all the cases we care about we\n // already have an existing method we want to call, so there's no need\n // to create a new function object. We can even get away with assuming\n // the method takes exactly one argument, since that happens to be true\n // in every case, so we don't have to touch the arguments object. The\n // only additional allocation required is the completion record, which\n // has a stable shape and so hopefully should be cheap to allocate.\n function tryCatch(fn, obj, arg) {\n try {\n return { type: \"normal\", arg: fn.call(obj, arg) };\n } catch (err) {\n return { type: \"throw\", arg: err };\n }\n }\n\n var GenStateSuspendedStart = \"suspendedStart\";\n var GenStateSuspendedYield = \"suspendedYield\";\n var GenStateExecuting = \"executing\";\n var GenStateCompleted = \"completed\";\n\n // Returning this object from the innerFn has the same effect as\n // breaking out of the dispatch switch statement.\n var ContinueSentinel = {};\n\n // Dummy constructor functions that we use as the .constructor and\n // .constructor.prototype properties for functions that return Generator\n // objects. For full spec compliance, you may wish to configure your\n // minifier not to mangle the names of these two functions.\n function Generator() {}\n function GeneratorFunction() {}\n function GeneratorFunctionPrototype() {}\n\n // This is a polyfill for %IteratorPrototype% for environments that\n // don't natively support it.\n var IteratorPrototype = {};\n IteratorPrototype[iteratorSymbol] = function () {\n return this;\n };\n\n var getProto = Object.getPrototypeOf;\n var NativeIteratorPrototype = getProto && getProto(getProto(values([])));\n if (NativeIteratorPrototype &&\n NativeIteratorPrototype !== Op &&\n hasOwn.call(NativeIteratorPrototype, iteratorSymbol)) {\n // This environment has a native %IteratorPrototype%; use it instead\n // of the polyfill.\n IteratorPrototype = NativeIteratorPrototype;\n }\n\n var Gp = GeneratorFunctionPrototype.prototype =\n Generator.prototype = Object.create(IteratorPrototype);\n GeneratorFunction.prototype = Gp.constructor = GeneratorFunctionPrototype;\n GeneratorFunctionPrototype.constructor = GeneratorFunction;\n GeneratorFunctionPrototype[toStringTagSymbol] =\n GeneratorFunction.displayName = \"GeneratorFunction\";\n\n // Helper for defining the .next, .throw, and .return methods of the\n // Iterator interface in terms of a single ._invoke method.\n function defineIteratorMethods(prototype) {\n [\"next\", \"throw\", \"return\"].forEach(function(method) {\n prototype[method] = function(arg) {\n return this._invoke(method, arg);\n };\n });\n }\n\n exports.isGeneratorFunction = function(genFun) {\n var ctor = typeof genFun === \"function\" && genFun.constructor;\n return ctor\n ? ctor === GeneratorFunction ||\n // For the native GeneratorFunction constructor, the best we can\n // do is to check its .name property.\n (ctor.displayName || ctor.name) === \"GeneratorFunction\"\n : false;\n };\n\n exports.mark = function(genFun) {\n if (Object.setPrototypeOf) {\n Object.setPrototypeOf(genFun, GeneratorFunctionPrototype);\n } else {\n genFun.__proto__ = GeneratorFunctionPrototype;\n if (!(toStringTagSymbol in genFun)) {\n genFun[toStringTagSymbol] = \"GeneratorFunction\";\n }\n }\n genFun.prototype = Object.create(Gp);\n return genFun;\n };\n\n // Within the body of any async function, `await x` is transformed to\n // `yield regeneratorRuntime.awrap(x)`, so that the runtime can test\n // `hasOwn.call(value, \"__await\")` to determine if the yielded value is\n // meant to be awaited.\n exports.awrap = function(arg) {\n return { __await: arg };\n };\n\n function AsyncIterator(generator, PromiseImpl) {\n function invoke(method, arg, resolve, reject) {\n var record = tryCatch(generator[method], generator, arg);\n if (record.type === \"throw\") {\n reject(record.arg);\n } else {\n var result = record.arg;\n var value = result.value;\n if (value &&\n typeof value === \"object\" &&\n hasOwn.call(value, \"__await\")) {\n return PromiseImpl.resolve(value.__await).then(function(value) {\n invoke(\"next\", value, resolve, reject);\n }, function(err) {\n invoke(\"throw\", err, resolve, reject);\n });\n }\n\n return PromiseImpl.resolve(value).then(function(unwrapped) {\n // When a yielded Promise is resolved, its final value becomes\n // the .value of the Promise<{value,done}> result for the\n // current iteration.\n result.value = unwrapped;\n resolve(result);\n }, function(error) {\n // If a rejected Promise was yielded, throw the rejection back\n // into the async generator function so it can be handled there.\n return invoke(\"throw\", error, resolve, reject);\n });\n }\n }\n\n var previousPromise;\n\n function enqueue(method, arg) {\n function callInvokeWithMethodAndArg() {\n return new PromiseImpl(function(resolve, reject) {\n invoke(method, arg, resolve, reject);\n });\n }\n\n return previousPromise =\n // If enqueue has been called before, then we want to wait until\n // all previous Promises have been resolved before calling invoke,\n // so that results are always delivered in the correct order. If\n // enqueue has not been called before, then it is important to\n // call invoke immediately, without waiting on a callback to fire,\n // so that the async generator function has the opportunity to do\n // any necessary setup in a predictable way. This predictability\n // is why the Promise constructor synchronously invokes its\n // executor callback, and why async functions synchronously\n // execute code before the first await. Since we implement simple\n // async functions in terms of async generators, it is especially\n // important to get this right, even though it requires care.\n previousPromise ? previousPromise.then(\n callInvokeWithMethodAndArg,\n // Avoid propagating failures to Promises returned by later\n // invocations of the iterator.\n callInvokeWithMethodAndArg\n ) : callInvokeWithMethodAndArg();\n }\n\n // Define the unified helper method that is used to implement .next,\n // .throw, and .return (see defineIteratorMethods).\n this._invoke = enqueue;\n }\n\n defineIteratorMethods(AsyncIterator.prototype);\n AsyncIterator.prototype[asyncIteratorSymbol] = function () {\n return this;\n };\n exports.AsyncIterator = AsyncIterator;\n\n // Note that simple async functions are implemented on top of\n // AsyncIterator objects; they just return a Promise for the value of\n // the final result produced by the iterator.\n exports.async = function(innerFn, outerFn, self, tryLocsList, PromiseImpl) {\n if (PromiseImpl === void 0) PromiseImpl = Promise;\n\n var iter = new AsyncIterator(\n wrap(innerFn, outerFn, self, tryLocsList),\n PromiseImpl\n );\n\n return exports.isGeneratorFunction(outerFn)\n ? iter // If outerFn is a generator, return the full iterator.\n : iter.next().then(function(result) {\n return result.done ? result.value : iter.next();\n });\n };\n\n function makeInvokeMethod(innerFn, self, context) {\n var state = GenStateSuspendedStart;\n\n return function invoke(method, arg) {\n if (state === GenStateExecuting) {\n throw new Error(\"Generator is already running\");\n }\n\n if (state === GenStateCompleted) {\n if (method === \"throw\") {\n throw arg;\n }\n\n // Be forgiving, per 25.3.3.3.3 of the spec:\n // https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume\n return doneResult();\n }\n\n context.method = method;\n context.arg = arg;\n\n while (true) {\n var delegate = context.delegate;\n if (delegate) {\n var delegateResult = maybeInvokeDelegate(delegate, context);\n if (delegateResult) {\n if (delegateResult === ContinueSentinel) continue;\n return delegateResult;\n }\n }\n\n if (context.method === \"next\") {\n // Setting context._sent for legacy support of Babel's\n // function.sent implementation.\n context.sent = context._sent = context.arg;\n\n } else if (context.method === \"throw\") {\n if (state === GenStateSuspendedStart) {\n state = GenStateCompleted;\n throw context.arg;\n }\n\n context.dispatchException(context.arg);\n\n } else if (context.method === \"return\") {\n context.abrupt(\"return\", context.arg);\n }\n\n state = GenStateExecuting;\n\n var record = tryCatch(innerFn, self, context);\n if (record.type === \"normal\") {\n // If an exception is thrown from innerFn, we leave state ===\n // GenStateExecuting and loop back for another invocation.\n state = context.done\n ? GenStateCompleted\n : GenStateSuspendedYield;\n\n if (record.arg === ContinueSentinel) {\n continue;\n }\n\n return {\n value: record.arg,\n done: context.done\n };\n\n } else if (record.type === \"throw\") {\n state = GenStateCompleted;\n // Dispatch the exception by looping back around to the\n // context.dispatchException(context.arg) call above.\n context.method = \"throw\";\n context.arg = record.arg;\n }\n }\n };\n }\n\n // Call delegate.iterator[context.method](context.arg) and handle the\n // result, either by returning a { value, done } result from the\n // delegate iterator, or by modifying context.method and context.arg,\n // setting context.delegate to null, and returning the ContinueSentinel.\n function maybeInvokeDelegate(delegate, context) {\n var method = delegate.iterator[context.method];\n if (method === undefined) {\n // A .throw or .return when the delegate iterator has no .throw\n // method always terminates the yield* loop.\n context.delegate = null;\n\n if (context.method === \"throw\") {\n // Note: [\"return\"] must be used for ES3 parsing compatibility.\n if (delegate.iterator[\"return\"]) {\n // If the delegate iterator has a return method, give it a\n // chance to clean up.\n context.method = \"return\";\n context.arg = undefined;\n maybeInvokeDelegate(delegate, context);\n\n if (context.method === \"throw\") {\n // If maybeInvokeDelegate(context) changed context.method from\n // \"return\" to \"throw\", let that override the TypeError below.\n return ContinueSentinel;\n }\n }\n\n context.method = \"throw\";\n context.arg = new TypeError(\n \"The iterator does not provide a 'throw' method\");\n }\n\n return ContinueSentinel;\n }\n\n var record = tryCatch(method, delegate.iterator, context.arg);\n\n if (record.type === \"throw\") {\n context.method = \"throw\";\n context.arg = record.arg;\n context.delegate = null;\n return ContinueSentinel;\n }\n\n var info = record.arg;\n\n if (! info) {\n context.method = \"throw\";\n context.arg = new TypeError(\"iterator result is not an object\");\n context.delegate = null;\n return ContinueSentinel;\n }\n\n if (info.done) {\n // Assign the result of the finished delegate to the temporary\n // variable specified by delegate.resultName (see delegateYield).\n context[delegate.resultName] = info.value;\n\n // Resume execution at the desired location (see delegateYield).\n context.next = delegate.nextLoc;\n\n // If context.method was \"throw\" but the delegate handled the\n // exception, let the outer generator proceed normally. If\n // context.method was \"next\", forget context.arg since it has been\n // \"consumed\" by the delegate iterator. If context.method was\n // \"return\", allow the original .return call to continue in the\n // outer generator.\n if (context.method !== \"return\") {\n context.method = \"next\";\n context.arg = undefined;\n }\n\n } else {\n // Re-yield the result returned by the delegate method.\n return info;\n }\n\n // The delegate iterator is finished, so forget it and continue with\n // the outer generator.\n context.delegate = null;\n return ContinueSentinel;\n }\n\n // Define Generator.prototype.{next,throw,return} in terms of the\n // unified ._invoke helper method.\n defineIteratorMethods(Gp);\n\n Gp[toStringTagSymbol] = \"Generator\";\n\n // A Generator should always return itself as the iterator object when the\n // @@iterator function is called on it. Some browsers' implementations of the\n // iterator prototype chain incorrectly implement this, causing the Generator\n // object to not be returned from this call. This ensures that doesn't happen.\n // See https://github.com/facebook/regenerator/issues/274 for more details.\n Gp[iteratorSymbol] = function() {\n return this;\n };\n\n Gp.toString = function() {\n return \"[object Generator]\";\n };\n\n function pushTryEntry(locs) {\n var entry = { tryLoc: locs[0] };\n\n if (1 in locs) {\n entry.catchLoc = locs[1];\n }\n\n if (2 in locs) {\n entry.finallyLoc = locs[2];\n entry.afterLoc = locs[3];\n }\n\n this.tryEntries.push(entry);\n }\n\n function resetTryEntry(entry) {\n var record = entry.completion || {};\n record.type = \"normal\";\n delete record.arg;\n entry.completion = record;\n }\n\n function Context(tryLocsList) {\n // The root entry object (effectively a try statement without a catch\n // or a finally block) gives us a place to store values thrown from\n // locations where there is no enclosing try statement.\n this.tryEntries = [{ tryLoc: \"root\" }];\n tryLocsList.forEach(pushTryEntry, this);\n this.reset(true);\n }\n\n exports.keys = function(object) {\n var keys = [];\n for (var key in object) {\n keys.push(key);\n }\n keys.reverse();\n\n // Rather than returning an object with a next method, we keep\n // things simple and return the next function itself.\n return function next() {\n while (keys.length) {\n var key = keys.pop();\n if (key in object) {\n next.value = key;\n next.done = false;\n return next;\n }\n }\n\n // To avoid creating an additional object, we just hang the .value\n // and .done properties off the next function object itself. This\n // also ensures that the minifier will not anonymize the function.\n next.done = true;\n return next;\n };\n };\n\n function values(iterable) {\n if (iterable) {\n var iteratorMethod = iterable[iteratorSymbol];\n if (iteratorMethod) {\n return iteratorMethod.call(iterable);\n }\n\n if (typeof iterable.next === \"function\") {\n return iterable;\n }\n\n if (!isNaN(iterable.length)) {\n var i = -1, next = function next() {\n while (++i < iterable.length) {\n if (hasOwn.call(iterable, i)) {\n next.value = iterable[i];\n next.done = false;\n return next;\n }\n }\n\n next.value = undefined;\n next.done = true;\n\n return next;\n };\n\n return next.next = next;\n }\n }\n\n // Return an iterator with no values.\n return { next: doneResult };\n }\n exports.values = values;\n\n function doneResult() {\n return { value: undefined, done: true };\n }\n\n Context.prototype = {\n constructor: Context,\n\n reset: function(skipTempReset) {\n this.prev = 0;\n this.next = 0;\n // Resetting context._sent for legacy support of Babel's\n // function.sent implementation.\n this.sent = this._sent = undefined;\n this.done = false;\n this.delegate = null;\n\n this.method = \"next\";\n this.arg = undefined;\n\n this.tryEntries.forEach(resetTryEntry);\n\n if (!skipTempReset) {\n for (var name in this) {\n // Not sure about the optimal order of these conditions:\n if (name.charAt(0) === \"t\" &&\n hasOwn.call(this, name) &&\n !isNaN(+name.slice(1))) {\n this[name] = undefined;\n }\n }\n }\n },\n\n stop: function() {\n this.done = true;\n\n var rootEntry = this.tryEntries[0];\n var rootRecord = rootEntry.completion;\n if (rootRecord.type === \"throw\") {\n throw rootRecord.arg;\n }\n\n return this.rval;\n },\n\n dispatchException: function(exception) {\n if (this.done) {\n throw exception;\n }\n\n var context = this;\n function handle(loc, caught) {\n record.type = \"throw\";\n record.arg = exception;\n context.next = loc;\n\n if (caught) {\n // If the dispatched exception was caught by a catch block,\n // then let that catch block handle the exception normally.\n context.method = \"next\";\n context.arg = undefined;\n }\n\n return !! caught;\n }\n\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n var record = entry.completion;\n\n if (entry.tryLoc === \"root\") {\n // Exception thrown outside of any try block that could handle\n // it, so set the completion value of the entire function to\n // throw the exception.\n return handle(\"end\");\n }\n\n if (entry.tryLoc <= this.prev) {\n var hasCatch = hasOwn.call(entry, \"catchLoc\");\n var hasFinally = hasOwn.call(entry, \"finallyLoc\");\n\n if (hasCatch && hasFinally) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n } else if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else if (hasCatch) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n }\n\n } else if (hasFinally) {\n if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else {\n throw new Error(\"try statement without catch or finally\");\n }\n }\n }\n },\n\n abrupt: function(type, arg) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc <= this.prev &&\n hasOwn.call(entry, \"finallyLoc\") &&\n this.prev < entry.finallyLoc) {\n var finallyEntry = entry;\n break;\n }\n }\n\n if (finallyEntry &&\n (type === \"break\" ||\n type === \"continue\") &&\n finallyEntry.tryLoc <= arg &&\n arg <= finallyEntry.finallyLoc) {\n // Ignore the finally entry if control is not jumping to a\n // location outside the try/catch block.\n finallyEntry = null;\n }\n\n var record = finallyEntry ? finallyEntry.completion : {};\n record.type = type;\n record.arg = arg;\n\n if (finallyEntry) {\n this.method = \"next\";\n this.next = finallyEntry.finallyLoc;\n return ContinueSentinel;\n }\n\n return this.complete(record);\n },\n\n complete: function(record, afterLoc) {\n if (record.type === \"throw\") {\n throw record.arg;\n }\n\n if (record.type === \"break\" ||\n record.type === \"continue\") {\n this.next = record.arg;\n } else if (record.type === \"return\") {\n this.rval = this.arg = record.arg;\n this.method = \"return\";\n this.next = \"end\";\n } else if (record.type === \"normal\" && afterLoc) {\n this.next = afterLoc;\n }\n\n return ContinueSentinel;\n },\n\n finish: function(finallyLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.finallyLoc === finallyLoc) {\n this.complete(entry.completion, entry.afterLoc);\n resetTryEntry(entry);\n return ContinueSentinel;\n }\n }\n },\n\n \"catch\": function(tryLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc === tryLoc) {\n var record = entry.completion;\n if (record.type === \"throw\") {\n var thrown = record.arg;\n resetTryEntry(entry);\n }\n return thrown;\n }\n }\n\n // The context.catch method must only be called with a location\n // argument that corresponds to a known catch block.\n throw new Error(\"illegal catch attempt\");\n },\n\n delegateYield: function(iterable, resultName, nextLoc) {\n this.delegate = {\n iterator: values(iterable),\n resultName: resultName,\n nextLoc: nextLoc\n };\n\n if (this.method === \"next\") {\n // Deliberately forget the last sent value so that we don't\n // accidentally pass it on to the delegate.\n this.arg = undefined;\n }\n\n return ContinueSentinel;\n }\n };\n\n // Regardless of whether this script is executing as a CommonJS module\n // or not, return the runtime object so that we can declare the variable\n // regeneratorRuntime in the outer scope, which allows this module to be\n // injected easily by `bin/regenerator --include-runtime script.js`.\n return exports;\n\n}(\n // If this script is executing as a CommonJS module, use module.exports\n // as the regeneratorRuntime namespace. Otherwise create a new empty\n // object. Either way, the resulting object will be used to initialize\n // the regeneratorRuntime variable at the top of this file.\n typeof module === \"object\" ? module.exports : {}\n));\n\ntry {\n regeneratorRuntime = runtime;\n} catch (accidentalStrictMode) {\n // This module should not be running in strict mode, so the above\n // assignment should always work unless something is misconfigured. Just\n // in case runtime.js accidentally runs in strict mode, we can escape\n // strict mode using a global Function call. This could conceivably fail\n // if a Content Security Policy forbids using Function, but in that case\n // the proper solution is to fix the accidental strict mode problem. If\n // you've misconfigured your bundler to force strict mode and applied a\n // CSP to forbid Function, and you're not willing to fix either of those\n // problems, please detail your unique predicament in a GitHub issue.\n Function(\"r\", \"regeneratorRuntime = r\")(runtime);\n}\n","module.exports = require(\"regenerator-runtime\");\n","(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"OktaAuth\"] = factory();\n\telse\n\t\troot[\"OktaAuth\"] = factory();\n})(self, function() {\nreturn ","function _assertThisInitialized(self) {\n if (self === void 0) {\n throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\");\n }\n\n return self;\n}\n\nmodule.exports = _assertThisInitialized;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _classCallCheck(instance, Constructor) {\n if (!(instance instanceof Constructor)) {\n throw new TypeError(\"Cannot call a class as a function\");\n }\n}\n\nmodule.exports = _classCallCheck;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nvar isNativeReflectConstruct = require(\"./isNativeReflectConstruct.js\");\n\nfunction _construct(Parent, args, Class) {\n if (isNativeReflectConstruct()) {\n module.exports = _construct = Reflect.construct;\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n } else {\n module.exports = _construct = function _construct(Parent, args, Class) {\n var a = [null];\n a.push.apply(a, args);\n var Constructor = Function.bind.apply(Parent, a);\n var instance = new Constructor();\n if (Class) setPrototypeOf(instance, Class.prototype);\n return instance;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n }\n\n return _construct.apply(null, arguments);\n}\n\nmodule.exports = _construct;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _defineProperties(target, props) {\n for (var i = 0; i < props.length; i++) {\n var descriptor = props[i];\n descriptor.enumerable = descriptor.enumerable || false;\n descriptor.configurable = true;\n if (\"value\" in descriptor) descriptor.writable = true;\n Object.defineProperty(target, descriptor.key, descriptor);\n }\n}\n\nfunction _createClass(Constructor, protoProps, staticProps) {\n if (protoProps) _defineProperties(Constructor.prototype, protoProps);\n if (staticProps) _defineProperties(Constructor, staticProps);\n return Constructor;\n}\n\nmodule.exports = _createClass;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _getPrototypeOf(o) {\n module.exports = _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {\n return o.__proto__ || Object.getPrototypeOf(o);\n };\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _getPrototypeOf(o);\n}\n\nmodule.exports = _getPrototypeOf;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nfunction _inherits(subClass, superClass) {\n if (typeof superClass !== \"function\" && superClass !== null) {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n subClass.prototype = Object.create(superClass && superClass.prototype, {\n constructor: {\n value: subClass,\n writable: true,\n configurable: true\n }\n });\n if (superClass) setPrototypeOf(subClass, superClass);\n}\n\nmodule.exports = _inherits;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _isNativeFunction(fn) {\n return Function.toString.call(fn).indexOf(\"[native code]\") !== -1;\n}\n\nmodule.exports = _isNativeFunction;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _isNativeReflectConstruct() {\n if (typeof Reflect === \"undefined\" || !Reflect.construct) return false;\n if (Reflect.construct.sham) return false;\n if (typeof Proxy === \"function\") return true;\n\n try {\n Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));\n return true;\n } catch (e) {\n return false;\n }\n}\n\nmodule.exports = _isNativeReflectConstruct;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var _typeof = require(\"@babel/runtime/helpers/typeof\")[\"default\"];\n\nvar assertThisInitialized = require(\"./assertThisInitialized.js\");\n\nfunction _possibleConstructorReturn(self, call) {\n if (call && (_typeof(call) === \"object\" || typeof call === \"function\")) {\n return call;\n }\n\n return assertThisInitialized(self);\n}\n\nmodule.exports = _possibleConstructorReturn;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _setPrototypeOf(o, p) {\n module.exports = _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {\n o.__proto__ = p;\n return o;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _setPrototypeOf(o, p);\n}\n\nmodule.exports = _setPrototypeOf;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","function _typeof(obj) {\n \"@babel/helpers - typeof\";\n\n if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") {\n module.exports = _typeof = function _typeof(obj) {\n return typeof obj;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n } else {\n module.exports = _typeof = function _typeof(obj) {\n return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj;\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n }\n\n return _typeof(obj);\n}\n\nmodule.exports = _typeof;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","var getPrototypeOf = require(\"./getPrototypeOf.js\");\n\nvar setPrototypeOf = require(\"./setPrototypeOf.js\");\n\nvar isNativeFunction = require(\"./isNativeFunction.js\");\n\nvar construct = require(\"./construct.js\");\n\nfunction _wrapNativeSuper(Class) {\n var _cache = typeof Map === \"function\" ? new Map() : undefined;\n\n module.exports = _wrapNativeSuper = function _wrapNativeSuper(Class) {\n if (Class === null || !isNativeFunction(Class)) return Class;\n\n if (typeof Class !== \"function\") {\n throw new TypeError(\"Super expression must either be null or a function\");\n }\n\n if (typeof _cache !== \"undefined\") {\n if (_cache.has(Class)) return _cache.get(Class);\n\n _cache.set(Class, Wrapper);\n }\n\n function Wrapper() {\n return construct(Class, arguments, getPrototypeOf(this).constructor);\n }\n\n Wrapper.prototype = Object.create(Class.prototype, {\n constructor: {\n value: Wrapper,\n enumerable: false,\n writable: true,\n configurable: true\n }\n });\n return setPrototypeOf(Wrapper, Class);\n };\n\n module.exports[\"default\"] = module.exports, module.exports.__esModule = true;\n return _wrapNativeSuper(Class);\n}\n\nmodule.exports = _wrapNativeSuper;\nmodule.exports[\"default\"] = module.exports, module.exports.__esModule = true;","module.exports = require(\"regenerator-runtime\");\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n \n// eslint-disable-next-line @typescript-eslint/ban-ts-comment\n// @ts-ignore \n// Do not use this type in code, so it won't be emitted in the declaration output\nimport PCancelable from 'p-cancelable';\nimport { AuthSdkError } from './errors';\nimport { AuthState, AuthStateLogOptions } from './types';\nimport { OktaAuth } from '.';\nimport { getConsole } from './util';\nimport { EVENT_ADDED, EVENT_REMOVED } from './TokenManager';\nimport PromiseQueue from './PromiseQueue';\n\nexport const INITIAL_AUTH_STATE = null;\nconst DEFAULT_PENDING = {\n updateAuthStatePromise: null,\n canceledTimes: 0\n};\nconst EVENT_AUTH_STATE_CHANGE = 'authStateChange';\nconst MAX_PROMISE_CANCEL_TIMES = 10;\n\n// only compare first level of authState\nconst isSameAuthState = (prevState: AuthState | null, state: AuthState) => {\n // initial state is null\n if (!prevState) {\n return false;\n }\n\n return prevState.isAuthenticated === state.isAuthenticated \n && JSON.stringify(prevState.idToken) === JSON.stringify(state.idToken)\n && JSON.stringify(prevState.accessToken) === JSON.stringify(state.accessToken)\n && prevState.error === state.error;\n};\n\n\nexport class AuthStateManager {\n _sdk: OktaAuth;\n _pending: { \n updateAuthStatePromise: any;\n canceledTimes: number; \n };\n _authState: AuthState | null;\n _prevAuthState: AuthState | null;\n _logOptions: AuthStateLogOptions;\n _transformQueue: PromiseQueue;\n\n constructor(sdk: OktaAuth) {\n if (!sdk.emitter) {\n throw new AuthSdkError('Emitter should be initialized before AuthStateManager');\n }\n\n this._sdk = sdk;\n this._pending = { ...DEFAULT_PENDING };\n this._authState = INITIAL_AUTH_STATE;\n this._logOptions = {};\n this._prevAuthState = null;\n this._transformQueue = new PromiseQueue({\n quiet: true\n });\n\n // Listen on tokenManager events to start updateState process\n // \"added\" event is emitted in both add and renew process\n // Only listen on \"added\" event to update auth state\n sdk.tokenManager.on(EVENT_ADDED, (key, token) => {\n this._setLogOptions({ event: EVENT_ADDED, key, token });\n this.updateAuthState();\n });\n sdk.tokenManager.on(EVENT_REMOVED, (key, token) => {\n this._setLogOptions({ event: EVENT_REMOVED, key, token });\n this.updateAuthState();\n });\n }\n\n _setLogOptions(options) {\n this._logOptions = options;\n }\n\n getAuthState(): AuthState | null {\n return this._authState;\n }\n\n getPreviousAuthState(): AuthState | null {\n return this._prevAuthState;\n }\n\n async updateAuthState(): Promise {\n const { transformAuthState, devMode } = this._sdk.options;\n\n const log = (status) => {\n const { event, key, token } = this._logOptions;\n getConsole().group(`OKTA-AUTH-JS:updateAuthState: Event:${event} Status:${status}`);\n getConsole().log(key, token);\n getConsole().log('Current authState', this._authState);\n getConsole().groupEnd();\n \n // clear log options after logging\n this._logOptions = {};\n };\n\n const emitAuthStateChange = (authState) => {\n if (isSameAuthState(this._authState, authState)) {\n devMode && log('unchanged'); \n return;\n }\n this._prevAuthState = this._authState;\n this._authState = authState;\n // emit new authState object\n this._sdk.emitter.emit(EVENT_AUTH_STATE_CHANGE, { ...authState });\n devMode && log('emitted');\n };\n\n const finalPromise = (origPromise) => { \n return this._pending.updateAuthStatePromise.then(() => {\n const curPromise = this._pending.updateAuthStatePromise;\n if (curPromise && curPromise !== origPromise) {\n return finalPromise(curPromise);\n }\n return this.getAuthState();\n });\n };\n\n if (this._pending.updateAuthStatePromise) {\n if (this._pending.canceledTimes >= MAX_PROMISE_CANCEL_TIMES) {\n // stop canceling then starting a new promise\n // let existing promise finish to prevent running into loops\n devMode && log('terminated');\n return finalPromise(this._pending.updateAuthStatePromise);\n } else {\n this._pending.updateAuthStatePromise.cancel();\n }\n }\n\n /* eslint-disable complexity */\n const cancelablePromise = new PCancelable((resolve, _, onCancel) => {\n onCancel.shouldReject = false;\n onCancel(() => {\n this._pending.updateAuthStatePromise = null;\n this._pending.canceledTimes = this._pending.canceledTimes + 1;\n devMode && log('canceled');\n });\n\n const emitAndResolve = (authState) => {\n if (cancelablePromise.isCanceled) {\n resolve();\n return;\n }\n // emit event and resolve promise \n emitAuthStateChange(authState);\n resolve();\n\n // clear pending states after resolve\n this._pending = { ...DEFAULT_PENDING };\n };\n\n this._sdk.isAuthenticated()\n .then(() => {\n if (cancelablePromise.isCanceled) {\n resolve();\n return;\n }\n\n const { accessToken, idToken, refreshToken } = this._sdk.tokenManager.getTokensSync();\n const authState = {\n accessToken,\n idToken,\n refreshToken,\n isAuthenticated: !!(accessToken && idToken)\n };\n\n // Enqueue transformAuthState so that it does not run concurrently\n const promise: Promise = transformAuthState\n ? this._transformQueue.push(transformAuthState, null, this._sdk, authState) as Promise\n : Promise.resolve(authState);\n\n promise\n .then(authState => emitAndResolve(authState))\n .catch(error => emitAndResolve({\n accessToken, \n idToken, \n refreshToken,\n isAuthenticated: false, \n error\n }));\n });\n });\n /* eslint-enable complexity */\n this._pending.updateAuthStatePromise = cancelablePromise;\n\n return finalPromise(cancelablePromise);\n }\n\n subscribe(handler): void {\n this._sdk.emitter.on(EVENT_AUTH_STATE_CHANGE, handler);\n }\n\n unsubscribe(handler?): void {\n this._sdk.emitter.off(EVENT_AUTH_STATE_CHANGE, handler);\n }\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n/* global window */\nimport { omit, getLink, toQueryString } from './util';\nimport { get, post, httpRequest } from './http';\n\nfunction sessionExists(sdk) {\n return sdk.session.get()\n .then(function(res) {\n if (res.status === 'ACTIVE') {\n return true;\n }\n return false;\n })\n .catch(function() {\n return false;\n });\n}\n\nfunction getSession(sdk) { \n return get(sdk, '/api/v1/sessions/me', { withCredentials: true })\n .then(function(session) {\n var res = omit(session, '_links');\n\n res.refresh = function() {\n return post(sdk, getLink(session, 'refresh').href, {}, { withCredentials: true });\n };\n\n res.user = function() {\n return get(sdk, getLink(session, 'user').href, { withCredentials: true });\n };\n\n return res;\n })\n .catch(function() {\n // Return INACTIVE status on failure\n return {status: 'INACTIVE'};\n });\n}\n\nfunction closeSession(sdk) {\n return httpRequest(sdk, {\n url: sdk.getIssuerOrigin() + '/api/v1/sessions/me',\n method: 'DELETE',\n withCredentials: true\n });\n}\n\nfunction refreshSession(sdk) {\n return post(sdk, '/api/v1/sessions/me/lifecycle/refresh', {}, { withCredentials: true });\n}\n\nfunction setCookieAndRedirect(sdk, sessionToken, redirectUrl) {\n redirectUrl = redirectUrl || window.location.href;\n window.location.assign(sdk.getIssuerOrigin() + '/login/sessionCookieRedirect' +\n toQueryString({\n checkAccountSetupComplete: true,\n token: sessionToken,\n redirectUrl: redirectUrl\n }));\n}\n\nexport {\n sessionExists,\n getSession,\n closeSession,\n refreshSession,\n setCookieAndRedirect\n};\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { base64UrlToBuffer, bufferToBase64Url } from './base64';\nimport { ActivationData, ChallengeData, IdxAuthenticator } from '../idx/types';\n\n// Get known credentials from list of enrolled authenticators\nconst getEnrolledCredentials = (authenticatorEnrollments: IdxAuthenticator[] = []) => {\n const credentials: PublicKeyCredentialDescriptor[] = [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n credentials.push({\n type: 'public-key',\n id: base64UrlToBuffer(enrollement.credentialId),\n });\n }\n });\n return credentials;\n};\n\n// Build options for navigator.credentials.create\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/create\nexport const buildCredentialCreationOptions = (\n activationData: ActivationData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n return {\n publicKey: {\n rp: activationData.rp,\n user: {\n id: base64UrlToBuffer(activationData.user.id),\n name: activationData.user.name,\n displayName: activationData.user.displayName\n },\n challenge: base64UrlToBuffer(activationData.challenge),\n pubKeyCredParams: activationData.pubKeyCredParams,\n attestation: activationData.attestation,\n authenticatorSelection: activationData.authenticatorSelection,\n excludeCredentials: getEnrolledCredentials(authenticatorEnrollments),\n }\n } as CredentialCreationOptions;\n};\n\n\n// Build options for navigator.credentials.get\n// https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get\nexport const buildCredentialRequestOptions = (\n challengeData: ChallengeData, authenticatorEnrollments: IdxAuthenticator[]\n) => {\n return {\n publicKey: {\n challenge: base64UrlToBuffer(challengeData.challenge),\n userVerification: challengeData.userVerification,\n allowCredentials: getEnrolledCredentials(authenticatorEnrollments),\n }\n } as CredentialRequestOptions;\n};\n\n// Build attestation for webauthn enroll\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAttestationResponse\nexport const getAttestation = (credential: PublicKeyCredential) => {\n const response = credential.response as AuthenticatorAttestationResponse;\n const id = credential.id;\n const clientData = bufferToBase64Url(response.clientDataJSON);\n const attestation = bufferToBase64Url(response.attestationObject);\n return {\n id,\n clientData,\n attestation\n };\n};\n\n// Build assertion for webauthn verification\n// https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAssertionResponse\nexport const getAssertion = (credential: PublicKeyCredential) => {\n const response = credential.response as AuthenticatorAssertionResponse;\n const id = credential.id;\n const clientData = bufferToBase64Url(response.clientDataJSON);\n const authenticatorData = bufferToBase64Url(response.authenticatorData);\n const signatureData = bufferToBase64Url(response.signature);\n return {\n id,\n clientData,\n authenticatorData,\n signatureData\n };\n};\n","/*! js-cookie v3.0.1 | MIT */\n/* eslint-disable no-var */\nfunction assign (target) {\n for (var i = 1; i < arguments.length; i++) {\n var source = arguments[i];\n for (var key in source) {\n target[key] = source[key];\n }\n }\n return target\n}\n/* eslint-enable no-var */\n\n/* eslint-disable no-var */\nvar defaultConverter = {\n read: function (value) {\n if (value[0] === '\"') {\n value = value.slice(1, -1);\n }\n return value.replace(/(%[\\dA-F]{2})+/gi, decodeURIComponent)\n },\n write: function (value) {\n return encodeURIComponent(value).replace(\n /%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,\n decodeURIComponent\n )\n }\n};\n/* eslint-enable no-var */\n\n/* eslint-disable no-var */\n\nfunction init (converter, defaultAttributes) {\n function set (key, value, attributes) {\n if (typeof document === 'undefined') {\n return\n }\n\n attributes = assign({}, defaultAttributes, attributes);\n\n if (typeof attributes.expires === 'number') {\n attributes.expires = new Date(Date.now() + attributes.expires * 864e5);\n }\n if (attributes.expires) {\n attributes.expires = attributes.expires.toUTCString();\n }\n\n key = encodeURIComponent(key)\n .replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent)\n .replace(/[()]/g, escape);\n\n var stringifiedAttributes = '';\n for (var attributeName in attributes) {\n if (!attributes[attributeName]) {\n continue\n }\n\n stringifiedAttributes += '; ' + attributeName;\n\n if (attributes[attributeName] === true) {\n continue\n }\n\n // Considers RFC 6265 section 5.2:\n // ...\n // 3. If the remaining unparsed-attributes contains a %x3B (\";\")\n // character:\n // Consume the characters of the unparsed-attributes up to,\n // not including, the first %x3B (\";\") character.\n // ...\n stringifiedAttributes += '=' + attributes[attributeName].split(';')[0];\n }\n\n return (document.cookie =\n key + '=' + converter.write(value, key) + stringifiedAttributes)\n }\n\n function get (key) {\n if (typeof document === 'undefined' || (arguments.length && !key)) {\n return\n }\n\n // To prevent the for loop in the first place assign an empty array\n // in case there are no cookies at all.\n var cookies = document.cookie ? document.cookie.split('; ') : [];\n var jar = {};\n for (var i = 0; i < cookies.length; i++) {\n var parts = cookies[i].split('=');\n var value = parts.slice(1).join('=');\n\n try {\n var foundKey = decodeURIComponent(parts[0]);\n jar[foundKey] = converter.read(value, foundKey);\n\n if (key === foundKey) {\n break\n }\n } catch (e) {}\n }\n\n return key ? jar[key] : jar\n }\n\n return Object.create(\n {\n set: set,\n get: get,\n remove: function (key, attributes) {\n set(\n key,\n '',\n assign({}, attributes, {\n expires: -1\n })\n );\n },\n withAttributes: function (attributes) {\n return init(this.converter, assign({}, this.attributes, attributes))\n },\n withConverter: function (converter) {\n return init(assign({}, this.converter, converter), this.attributes)\n }\n },\n {\n attributes: { value: Object.freeze(defaultAttributes) },\n converter: { value: Object.freeze(converter) }\n }\n )\n}\n\nvar api = init(defaultConverter, { path: '/' });\n/* eslint-enable no-var */\n\nexport default api;\n","/* eslint-disable @typescript-eslint/no-non-null-assertion */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\nimport Cookies from 'js-cookie';\nimport AuthSdkError from '../errors/AuthSdkError';\nimport {\n StorageProvider,\n StorageOptions,\n PKCEStorage,\n CookieOptions,\n SimpleStorage,\n StorageType,\n BrowserStorageUtil,\n CookieStorage\n} from '../types';\nimport { warn } from '../util';\n\n// Building this as an object allows us to mock the functions in our tests\nvar storageUtil: BrowserStorageUtil = {\n\n // These are shimmed in `OktaAuthBase.ts`\n getHttpCache(): StorageProvider {\n return null as never as StorageProvider;\n },\n\n getPKCEStorage(): PKCEStorage {\n return null as never as PKCEStorage;\n },\n\n // IE11 bug that Microsoft doesn't plan to fix\n // https://connect.microsoft.com/IE/Feedback/Details/1496040\n browserHasLocalStorage: function() {\n try {\n var storage = this.getLocalStorage();\n return this.testStorage(storage);\n } catch (e) {\n return false;\n }\n },\n\n browserHasSessionStorage: function() {\n try {\n var storage = this.getSessionStorage();\n return this.testStorage(storage);\n } catch (e) {\n return false;\n }\n },\n\n testStorageType: function(storageType: StorageType): boolean {\n var supported = false;\n switch (storageType) {\n case 'sessionStorage':\n supported = this.browserHasSessionStorage();\n break;\n case 'localStorage':\n supported = this.browserHasLocalStorage();\n break;\n case 'cookie':\n case 'memory':\n supported = true;\n break;\n default:\n supported = false;\n break;\n }\n return supported;\n },\n\n getStorageByType: function(storageType: StorageType, options?: StorageOptions): SimpleStorage {\n let storageProvider;\n switch (storageType) {\n case 'sessionStorage':\n storageProvider = this.getSessionStorage();\n break;\n case 'localStorage':\n storageProvider = this.getLocalStorage();\n break;\n case 'cookie':\n storageProvider = this.getCookieStorage(options);\n break;\n case 'memory':\n storageProvider = this.getInMemoryStorage();\n break;\n default:\n throw new AuthSdkError(`Unrecognized storage option: ${storageType}`);\n break;\n }\n return storageProvider;\n },\n\n findStorageType: function(types: StorageType[]) {\n let curType;\n let nextType;\n \n types = types.slice(); // copy array\n curType = types.shift();\n nextType = types.length ? types[0] : null;\n if (!nextType) {\n return curType;\n }\n\n if (this.testStorageType(curType)) {\n return curType;\n }\n\n // preferred type was unsupported.\n warn(`This browser doesn't support ${curType}. Switching to ${nextType}.`);\n\n // fallback to the next type. this is a recursive call\n return this.findStorageType(types);\n },\n\n getLocalStorage: function() {\n return localStorage;\n },\n\n getSessionStorage: function() {\n return sessionStorage;\n },\n\n // Provides webStorage-like interface for cookies\n getCookieStorage: function(options): CookieStorage {\n const secure = options!.secure;\n const sameSite = options!.sameSite;\n const sessionCookie = options!.sessionCookie;\n if (typeof secure === 'undefined' || typeof sameSite === 'undefined') {\n throw new AuthSdkError('getCookieStorage: \"secure\" and \"sameSite\" options must be provided');\n }\n const storage: CookieStorage = {\n getItem: this.storage.get,\n setItem: (key, value, expiresAt = '2200-01-01T00:00:00.000Z') => {\n // By defauilt, cookie shouldn't expire\n expiresAt = (sessionCookie ? null : expiresAt) as string;\n this.storage.set(key, value, expiresAt, {\n secure: secure, \n sameSite: sameSite,\n });\n },\n removeItem: (key) => {\n this.storage.delete(key);\n }\n };\n\n if (!options!.useSeparateCookies) {\n return storage;\n }\n\n // Tokens are stored separately because cookies have size limits.\n // Can only be used when storing an object value. Object properties will be saved to separate cookies.\n // Each property of the object must also be an object.\n return {\n getItem: function(key) {\n var data = storage.getItem(); // read all cookies\n var value = {};\n Object.keys(data).forEach(k => {\n if (k.indexOf(key!) === 0) { // filter out unrelated cookies\n value[k.replace(`${key}_`, '')] = JSON.parse(data[k]); // populate with cookie data\n }\n });\n return JSON.stringify(value);\n },\n setItem: function(key, value) {\n var existingValues = JSON.parse(this.getItem(key));\n value = JSON.parse(value);\n // Set key-value pairs from input to cookies\n Object.keys(value).forEach(k => {\n var storageKey = key + '_' + k;\n var valueToStore = JSON.stringify(value[k]);\n storage.setItem(storageKey, valueToStore);\n delete existingValues[k];\n });\n // Delete unmatched keys from existing cookies\n Object.keys(existingValues).forEach(k => {\n storage.removeItem(key + '_' + k);\n });\n },\n removeItem: function(key) {\n var existingValues = JSON.parse(this.getItem(key));\n Object.keys(existingValues).forEach(k => {\n storage.removeItem(key + '_' + k);\n });\n }\n };\n },\n\n // Provides an in-memory solution\n inMemoryStore: {}, // override this for a unique memory store per instance\n getInMemoryStorage: function() {\n return {\n getItem: (key) => {\n return this.inMemoryStore[key];\n },\n setItem: (key, value) => {\n this.inMemoryStore[key] = value;\n }\n };\n },\n\n testStorage: function(storage) {\n var key = 'okta-test-storage';\n try {\n storage.setItem(key, key);\n storage.removeItem(key);\n return true;\n } catch (e) {\n return false;\n }\n },\n\n storage: {\n set: function(name: string, value: string, expiresAt: string, options: CookieOptions): string {\n const { sameSite, secure } = options;\n if (typeof secure === 'undefined' || typeof sameSite === 'undefined') {\n throw new AuthSdkError('storage.set: \"secure\" and \"sameSite\" options must be provided');\n }\n var cookieOptions: CookieOptions = {\n path: options.path || '/',\n secure,\n sameSite\n };\n\n // eslint-disable-next-line no-extra-boolean-cast\n if (!!(Date.parse(expiresAt))) {\n // Expires value can be converted to a Date object.\n //\n // If the 'expiresAt' value is not provided, or the value cannot be\n // parsed as a Date object, the cookie will set as a session cookie.\n cookieOptions.expires = new Date(expiresAt);\n }\n\n Cookies.set(name, value, cookieOptions);\n return this.get(name);\n },\n\n get: function(name?: string): string {\n // return all cookies when no args is provided\n if (!arguments.length) {\n return Cookies.get();\n }\n return Cookies.get(name);\n },\n\n delete: function(name: string): string {\n return Cookies.remove(name, { path: '/' });\n }\n }\n};\n\nexport default storageUtil;\n","/**\n * returns true if the given object is a promise\n */\nexport function isPromise(obj) {\n if (obj && typeof obj.then === 'function') {\n return true;\n } else {\n return false;\n }\n}\nexport var PROMISE_RESOLVED_FALSE = Promise.resolve(false);\nexport var PROMISE_RESOLVED_TRUE = Promise.resolve(true);\nexport var PROMISE_RESOLVED_VOID = Promise.resolve();\nexport function sleep(time, resolveWith) {\n if (!time) time = 0;\n return new Promise(function (res) {\n return setTimeout(function () {\n return res(resolveWith);\n }, time);\n });\n}\nexport function randomInt(min, max) {\n return Math.floor(Math.random() * (max - min + 1) + min);\n}\n/**\n * https://stackoverflow.com/a/8084248\n */\n\nexport function randomToken() {\n return Math.random().toString(36).substring(2);\n}\nvar lastMs = 0;\nvar additional = 0;\n/**\n * returns the current time in micro-seconds,\n * WARNING: This is a pseudo-function\n * Performance.now is not reliable in webworkers, so we just make sure to never return the same time.\n * This is enough in browsers, and this function will not be used in nodejs.\n * The main reason for this hack is to ensure that BroadcastChannel behaves equal to production when it is used in fast-running unit tests.\n */\n\nexport function microSeconds() {\n var ms = new Date().getTime();\n\n if (ms === lastMs) {\n additional++;\n return ms * 1000 + additional;\n } else {\n lastMs = ms;\n additional = 0;\n return ms * 1000;\n }\n}\n/**\n * copied from the 'detect-node' npm module\n * We cannot use the module directly because it causes problems with rollup\n * @link https://github.com/iliakan/detect-node/blob/master/index.js\n */\n\nexport var isNode = Object.prototype.toString.call(typeof process !== 'undefined' ? process : 0) === '[object process]';","import { microSeconds as micro, isNode, PROMISE_RESOLVED_VOID } from '../util';\nexport var microSeconds = micro;\nexport var type = 'native';\nexport function create(channelName) {\n var state = {\n messagesCallback: null,\n bc: new BroadcastChannel(channelName),\n subFns: [] // subscriberFunctions\n\n };\n\n state.bc.onmessage = function (msg) {\n if (state.messagesCallback) {\n state.messagesCallback(msg.data);\n }\n };\n\n return state;\n}\nexport function close(channelState) {\n channelState.bc.close();\n channelState.subFns = [];\n}\nexport function postMessage(channelState, messageJson) {\n try {\n channelState.bc.postMessage(messageJson, false);\n return PROMISE_RESOLVED_VOID;\n } catch (err) {\n return Promise.reject(err);\n }\n}\nexport function onMessage(channelState, fn) {\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n /**\n * in the electron-renderer, isNode will be true even if we are in browser-context\n * so we also check if window is undefined\n */\n if (isNode && typeof window === 'undefined') return false;\n\n if (typeof BroadcastChannel === 'function') {\n if (BroadcastChannel._pubkey) {\n throw new Error('BroadcastChannel: Do not overwrite window.BroadcastChannel with this module, this is not a polyfill');\n }\n\n return true;\n } else return false;\n}\nexport function averageResponseTime() {\n return 150;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","/**\n * this is a set which automatically forgets\n * a given entry when a new entry is set and the ttl\n * of the old one is over\n */\nvar ObliviousSet = /** @class */ (function () {\n function ObliviousSet(ttl) {\n this.ttl = ttl;\n this.set = new Set();\n this.timeMap = new Map();\n }\n ObliviousSet.prototype.has = function (value) {\n return this.set.has(value);\n };\n ObliviousSet.prototype.add = function (value) {\n var _this = this;\n this.timeMap.set(value, now());\n this.set.add(value);\n /**\n * When a new value is added,\n * start the cleanup at the next tick\n * to not block the cpu for more important stuff\n * that might happen.\n */\n setTimeout(function () {\n removeTooOldValues(_this);\n }, 0);\n };\n ObliviousSet.prototype.clear = function () {\n this.set.clear();\n this.timeMap.clear();\n };\n return ObliviousSet;\n}());\nexport { ObliviousSet };\n/**\n * Removes all entries from the set\n * where the TTL has expired\n */\nexport function removeTooOldValues(obliviousSet) {\n var olderThen = now() - obliviousSet.ttl;\n var iterator = obliviousSet.set[Symbol.iterator]();\n /**\n * Because we can assume the new values are added at the bottom,\n * we start from the top and stop as soon as we reach a non-too-old value.\n */\n while (true) {\n var value = iterator.next().value;\n if (!value) {\n return; // no more elements\n }\n var time = obliviousSet.timeMap.get(value);\n if (time < olderThen) {\n obliviousSet.timeMap.delete(value);\n obliviousSet.set.delete(value);\n }\n else {\n // We reached a value that is not old enough\n return;\n }\n }\n}\nexport function now() {\n return new Date().getTime();\n}\n//# sourceMappingURL=index.js.map","export function fillOptionsWithDefaults() {\n var originalOptions = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n var options = JSON.parse(JSON.stringify(originalOptions)); // main\n\n if (typeof options.webWorkerSupport === 'undefined') options.webWorkerSupport = true; // indexed-db\n\n if (!options.idb) options.idb = {}; // after this time the messages get deleted\n\n if (!options.idb.ttl) options.idb.ttl = 1000 * 45;\n if (!options.idb.fallbackInterval) options.idb.fallbackInterval = 150; // handles abrupt db onclose events.\n\n if (originalOptions.idb && typeof originalOptions.idb.onclose === 'function') options.idb.onclose = originalOptions.idb.onclose; // localstorage\n\n if (!options.localstorage) options.localstorage = {};\n if (!options.localstorage.removeTimeout) options.localstorage.removeTimeout = 1000 * 60; // custom methods\n\n if (originalOptions.methods) options.methods = originalOptions.methods; // node\n\n if (!options.node) options.node = {};\n if (!options.node.ttl) options.node.ttl = 1000 * 60 * 2; // 2 minutes;\n\n /**\n * On linux use 'ulimit -Hn' to get the limit of open files.\n * On ubuntu this was 4096 for me, so we use half of that as maxParallelWrites default.\n */\n\n if (!options.node.maxParallelWrites) options.node.maxParallelWrites = 2048;\n if (typeof options.node.useFastPath === 'undefined') options.node.useFastPath = true;\n return options;\n}","/**\n * this method uses indexeddb to store the messages\n * There is currently no observerAPI for idb\n * @link https://github.com/w3c/IndexedDB/issues/51\n */\nimport { sleep, randomInt, randomToken, microSeconds as micro, isNode, PROMISE_RESOLVED_VOID } from '../util.js';\nexport var microSeconds = micro;\nimport { ObliviousSet } from 'oblivious-set';\nimport { fillOptionsWithDefaults } from '../options';\nvar DB_PREFIX = 'pubkey.broadcast-channel-0-';\nvar OBJECT_STORE_ID = 'messages';\nexport var type = 'idb';\nexport function getIdb() {\n if (typeof indexedDB !== 'undefined') return indexedDB;\n\n if (typeof window !== 'undefined') {\n if (typeof window.mozIndexedDB !== 'undefined') return window.mozIndexedDB;\n if (typeof window.webkitIndexedDB !== 'undefined') return window.webkitIndexedDB;\n if (typeof window.msIndexedDB !== 'undefined') return window.msIndexedDB;\n }\n\n return false;\n}\nexport function createDatabase(channelName) {\n var IndexedDB = getIdb(); // create table\n\n var dbName = DB_PREFIX + channelName;\n var openRequest = IndexedDB.open(dbName, 1);\n\n openRequest.onupgradeneeded = function (ev) {\n var db = ev.target.result;\n db.createObjectStore(OBJECT_STORE_ID, {\n keyPath: 'id',\n autoIncrement: true\n });\n };\n\n var dbPromise = new Promise(function (res, rej) {\n openRequest.onerror = function (ev) {\n return rej(ev);\n };\n\n openRequest.onsuccess = function () {\n res(openRequest.result);\n };\n });\n return dbPromise;\n}\n/**\n * writes the new message to the database\n * so other readers can find it\n */\n\nexport function writeMessage(db, readerUuid, messageJson) {\n var time = new Date().getTime();\n var writeObject = {\n uuid: readerUuid,\n time: time,\n data: messageJson\n };\n var transaction = db.transaction([OBJECT_STORE_ID], 'readwrite');\n return new Promise(function (res, rej) {\n transaction.oncomplete = function () {\n return res();\n };\n\n transaction.onerror = function (ev) {\n return rej(ev);\n };\n\n var objectStore = transaction.objectStore(OBJECT_STORE_ID);\n objectStore.add(writeObject);\n });\n}\nexport function getAllMessages(db) {\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n return new Promise(function (res) {\n objectStore.openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n ret.push(cursor.value); //alert(\"Name for SSN \" + cursor.key + \" is \" + cursor.value.name);\n\n cursor[\"continue\"]();\n } else {\n res(ret);\n }\n };\n });\n}\nexport function getMessagesHigherThan(db, lastCursorId) {\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n\n function openCursor() {\n // Occasionally Safari will fail on IDBKeyRange.bound, this\n // catches that error, having it open the cursor to the first\n // item. When it gets data it will advance to the desired key.\n try {\n var keyRangeValue = IDBKeyRange.bound(lastCursorId + 1, Infinity);\n return objectStore.openCursor(keyRangeValue);\n } catch (e) {\n return objectStore.openCursor();\n }\n }\n\n return new Promise(function (res) {\n openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n if (cursor.value.id < lastCursorId + 1) {\n cursor[\"continue\"](lastCursorId + 1);\n } else {\n ret.push(cursor.value);\n cursor[\"continue\"]();\n }\n } else {\n res(ret);\n }\n };\n });\n}\nexport function removeMessageById(db, id) {\n var request = db.transaction([OBJECT_STORE_ID], 'readwrite').objectStore(OBJECT_STORE_ID)[\"delete\"](id);\n return new Promise(function (res) {\n request.onsuccess = function () {\n return res();\n };\n });\n}\nexport function getOldMessages(db, ttl) {\n var olderThen = new Date().getTime() - ttl;\n var objectStore = db.transaction(OBJECT_STORE_ID).objectStore(OBJECT_STORE_ID);\n var ret = [];\n return new Promise(function (res) {\n objectStore.openCursor().onsuccess = function (ev) {\n var cursor = ev.target.result;\n\n if (cursor) {\n var msgObk = cursor.value;\n\n if (msgObk.time < olderThen) {\n ret.push(msgObk); //alert(\"Name for SSN \" + cursor.key + \" is \" + cursor.value.name);\n\n cursor[\"continue\"]();\n } else {\n // no more old messages,\n res(ret);\n return;\n }\n } else {\n res(ret);\n }\n };\n });\n}\nexport function cleanOldMessages(db, ttl) {\n return getOldMessages(db, ttl).then(function (tooOld) {\n return Promise.all(tooOld.map(function (msgObj) {\n return removeMessageById(db, msgObj.id);\n }));\n });\n}\nexport function create(channelName, options) {\n options = fillOptionsWithDefaults(options);\n return createDatabase(channelName).then(function (db) {\n var state = {\n closed: false,\n lastCursorId: 0,\n channelName: channelName,\n options: options,\n uuid: randomToken(),\n\n /**\n * emittedMessagesIds\n * contains all messages that have been emitted before\n * @type {ObliviousSet}\n */\n eMIs: new ObliviousSet(options.idb.ttl * 2),\n // ensures we do not read messages in parrallel\n writeBlockPromise: PROMISE_RESOLVED_VOID,\n messagesCallback: null,\n readQueuePromises: [],\n db: db\n };\n /**\n * Handle abrupt closes that do not originate from db.close().\n * This could happen, for example, if the underlying storage is\n * removed or if the user clears the database in the browser's\n * history preferences.\n */\n\n db.onclose = function () {\n state.closed = true;\n if (options.idb.onclose) options.idb.onclose();\n };\n /**\n * if service-workers are used,\n * we have no 'storage'-event if they post a message,\n * therefore we also have to set an interval\n */\n\n\n _readLoop(state);\n\n return state;\n });\n}\n\nfunction _readLoop(state) {\n if (state.closed) return;\n readNewMessages(state).then(function () {\n return sleep(state.options.idb.fallbackInterval);\n }).then(function () {\n return _readLoop(state);\n });\n}\n\nfunction _filterMessage(msgObj, state) {\n if (msgObj.uuid === state.uuid) return false; // send by own\n\n if (state.eMIs.has(msgObj.id)) return false; // already emitted\n\n if (msgObj.data.time < state.messagesCallbackTime) return false; // older then onMessageCallback\n\n return true;\n}\n/**\n * reads all new messages from the database and emits them\n */\n\n\nfunction readNewMessages(state) {\n // channel already closed\n if (state.closed) return PROMISE_RESOLVED_VOID; // if no one is listening, we do not need to scan for new messages\n\n if (!state.messagesCallback) return PROMISE_RESOLVED_VOID;\n return getMessagesHigherThan(state.db, state.lastCursorId).then(function (newerMessages) {\n var useMessages = newerMessages\n /**\n * there is a bug in iOS where the msgObj can be undefined some times\n * so we filter them out\n * @link https://github.com/pubkey/broadcast-channel/issues/19\n */\n .filter(function (msgObj) {\n return !!msgObj;\n }).map(function (msgObj) {\n if (msgObj.id > state.lastCursorId) {\n state.lastCursorId = msgObj.id;\n }\n\n return msgObj;\n }).filter(function (msgObj) {\n return _filterMessage(msgObj, state);\n }).sort(function (msgObjA, msgObjB) {\n return msgObjA.time - msgObjB.time;\n }); // sort by time\n\n useMessages.forEach(function (msgObj) {\n if (state.messagesCallback) {\n state.eMIs.add(msgObj.id);\n state.messagesCallback(msgObj.data);\n }\n });\n return PROMISE_RESOLVED_VOID;\n });\n}\n\nexport function close(channelState) {\n channelState.closed = true;\n channelState.db.close();\n}\nexport function postMessage(channelState, messageJson) {\n channelState.writeBlockPromise = channelState.writeBlockPromise.then(function () {\n return writeMessage(channelState.db, channelState.uuid, messageJson);\n }).then(function () {\n if (randomInt(0, 10) === 0) {\n /* await (do not await) */\n cleanOldMessages(channelState.db, channelState.options.idb.ttl);\n }\n });\n return channelState.writeBlockPromise;\n}\nexport function onMessage(channelState, fn, time) {\n channelState.messagesCallbackTime = time;\n channelState.messagesCallback = fn;\n readNewMessages(channelState);\n}\nexport function canBeUsed() {\n if (isNode) return false;\n var idb = getIdb();\n if (!idb) return false;\n return true;\n}\nexport function averageResponseTime(options) {\n return options.idb.fallbackInterval * 2;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","/**\n * A localStorage-only method which uses localstorage and its 'storage'-event\n * This does not work inside of webworkers because they have no access to locastorage\n * This is basically implemented to support IE9 or your grandmothers toaster.\n * @link https://caniuse.com/#feat=namevalue-storage\n * @link https://caniuse.com/#feat=indexeddb\n */\nimport { ObliviousSet } from 'oblivious-set';\nimport { fillOptionsWithDefaults } from '../options';\nimport { sleep, randomToken, microSeconds as micro, isNode } from '../util';\nexport var microSeconds = micro;\nvar KEY_PREFIX = 'pubkey.broadcastChannel-';\nexport var type = 'localstorage';\n/**\n * copied from crosstab\n * @link https://github.com/tejacques/crosstab/blob/master/src/crosstab.js#L32\n */\n\nexport function getLocalStorage() {\n var localStorage;\n if (typeof window === 'undefined') return null;\n\n try {\n localStorage = window.localStorage;\n localStorage = window['ie8-eventlistener/storage'] || window.localStorage;\n } catch (e) {// New versions of Firefox throw a Security exception\n // if cookies are disabled. See\n // https://bugzilla.mozilla.org/show_bug.cgi?id=1028153\n }\n\n return localStorage;\n}\nexport function storageKey(channelName) {\n return KEY_PREFIX + channelName;\n}\n/**\n* writes the new message to the storage\n* and fires the storage-event so other readers can find it\n*/\n\nexport function postMessage(channelState, messageJson) {\n return new Promise(function (res) {\n sleep().then(function () {\n var key = storageKey(channelState.channelName);\n var writeObj = {\n token: randomToken(),\n time: new Date().getTime(),\n data: messageJson,\n uuid: channelState.uuid\n };\n var value = JSON.stringify(writeObj);\n getLocalStorage().setItem(key, value);\n /**\n * StorageEvent does not fire the 'storage' event\n * in the window that changes the state of the local storage.\n * So we fire it manually\n */\n\n var ev = document.createEvent('Event');\n ev.initEvent('storage', true, true);\n ev.key = key;\n ev.newValue = value;\n window.dispatchEvent(ev);\n res();\n });\n });\n}\nexport function addStorageEventListener(channelName, fn) {\n var key = storageKey(channelName);\n\n var listener = function listener(ev) {\n if (ev.key === key) {\n fn(JSON.parse(ev.newValue));\n }\n };\n\n window.addEventListener('storage', listener);\n return listener;\n}\nexport function removeStorageEventListener(listener) {\n window.removeEventListener('storage', listener);\n}\nexport function create(channelName, options) {\n options = fillOptionsWithDefaults(options);\n\n if (!canBeUsed()) {\n throw new Error('BroadcastChannel: localstorage cannot be used');\n }\n\n var uuid = randomToken();\n /**\n * eMIs\n * contains all messages that have been emitted before\n * @type {ObliviousSet}\n */\n\n var eMIs = new ObliviousSet(options.localstorage.removeTimeout);\n var state = {\n channelName: channelName,\n uuid: uuid,\n eMIs: eMIs // emittedMessagesIds\n\n };\n state.listener = addStorageEventListener(channelName, function (msgObj) {\n if (!state.messagesCallback) return; // no listener\n\n if (msgObj.uuid === uuid) return; // own message\n\n if (!msgObj.token || eMIs.has(msgObj.token)) return; // already emitted\n\n if (msgObj.data.time && msgObj.data.time < state.messagesCallbackTime) return; // too old\n\n eMIs.add(msgObj.token);\n state.messagesCallback(msgObj.data);\n });\n return state;\n}\nexport function close(channelState) {\n removeStorageEventListener(channelState.listener);\n}\nexport function onMessage(channelState, fn, time) {\n channelState.messagesCallbackTime = time;\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n if (isNode) return false;\n var ls = getLocalStorage();\n if (!ls) return false;\n\n try {\n var key = '__broadcastchannel_check';\n ls.setItem(key, 'works');\n ls.removeItem(key);\n } catch (e) {\n // Safari 10 in private mode will not allow write access to local\n // storage and fail with a QuotaExceededError. See\n // https://developer.mozilla.org/en-US/docs/Web/API/Web_Storage_API#Private_Browsing_Incognito_modes\n return false;\n }\n\n return true;\n}\nexport function averageResponseTime() {\n var defaultTime = 120;\n var userAgent = navigator.userAgent.toLowerCase();\n\n if (userAgent.includes('safari') && !userAgent.includes('chrome')) {\n // safari is much slower so this time is higher\n return defaultTime * 2;\n }\n\n return defaultTime;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","import { microSeconds as micro } from '../util';\nexport var microSeconds = micro;\nexport var type = 'simulate';\nvar SIMULATE_CHANNELS = new Set();\nexport function create(channelName) {\n var state = {\n name: channelName,\n messagesCallback: null\n };\n SIMULATE_CHANNELS.add(state);\n return state;\n}\nexport function close(channelState) {\n SIMULATE_CHANNELS[\"delete\"](channelState);\n}\nexport function postMessage(channelState, messageJson) {\n return new Promise(function (res) {\n return setTimeout(function () {\n var channelArray = Array.from(SIMULATE_CHANNELS);\n channelArray.filter(function (channel) {\n return channel.name === channelState.name;\n }).filter(function (channel) {\n return channel !== channelState;\n }).filter(function (channel) {\n return !!channel.messagesCallback;\n }).forEach(function (channel) {\n return channel.messagesCallback(messageJson);\n });\n res();\n }, 5);\n });\n}\nexport function onMessage(channelState, fn) {\n channelState.messagesCallback = fn;\n}\nexport function canBeUsed() {\n return true;\n}\nexport function averageResponseTime() {\n return 5;\n}\nexport default {\n create: create,\n close: close,\n onMessage: onMessage,\n postMessage: postMessage,\n canBeUsed: canBeUsed,\n type: type,\n averageResponseTime: averageResponseTime,\n microSeconds: microSeconds\n};","import NativeMethod from './methods/native.js';\nimport IndexeDbMethod from './methods/indexed-db.js';\nimport LocalstorageMethod from './methods/localstorage.js';\nimport SimulateMethod from './methods/simulate.js'; // the line below will be removed from es5/browser builds\n\n\nimport { isNode } from './util'; // order is important\n\nvar METHODS = [NativeMethod, // fastest\nIndexeDbMethod, LocalstorageMethod];\nexport function chooseMethod(options) {\n var chooseMethods = [].concat(options.methods, METHODS).filter(Boolean); // the line below will be removed from es5/browser builds\n\n\n\n if (options.type) {\n if (options.type === 'simulate') {\n // only use simulate-method if directly chosen\n return SimulateMethod;\n }\n\n var ret = chooseMethods.find(function (m) {\n return m.type === options.type;\n });\n if (!ret) throw new Error('method-type ' + options.type + ' not found');else return ret;\n }\n /**\n * if no webworker support is needed,\n * remove idb from the list so that localstorage is been chosen\n */\n\n\n if (!options.webWorkerSupport && !isNode) {\n chooseMethods = chooseMethods.filter(function (m) {\n return m.type !== 'idb';\n });\n }\n\n var useMethod = chooseMethods.find(function (method) {\n return method.canBeUsed();\n });\n if (!useMethod) throw new Error(\"No useable method found in \" + JSON.stringify(METHODS.map(function (m) {\n return m.type;\n })));else return useMethod;\n}","import { isPromise, PROMISE_RESOLVED_FALSE, PROMISE_RESOLVED_VOID } from './util.js';\nimport { chooseMethod } from './method-chooser.js';\nimport { fillOptionsWithDefaults } from './options.js';\n/**\n * Contains all open channels,\n * used in tests to ensure everything is closed.\n */\n\nexport var OPEN_BROADCAST_CHANNELS = new Set();\nvar lastId = 0;\nexport var BroadcastChannel = function BroadcastChannel(name, options) {\n // identifier of the channel to debug stuff\n this.id = lastId++;\n OPEN_BROADCAST_CHANNELS.add(this);\n this.name = name;\n\n if (ENFORCED_OPTIONS) {\n options = ENFORCED_OPTIONS;\n }\n\n this.options = fillOptionsWithDefaults(options);\n this.method = chooseMethod(this.options); // isListening\n\n this._iL = false;\n /**\n * _onMessageListener\n * setting onmessage twice,\n * will overwrite the first listener\n */\n\n this._onML = null;\n /**\n * _addEventListeners\n */\n\n this._addEL = {\n message: [],\n internal: []\n };\n /**\n * Unsend message promises\n * where the sending is still in progress\n * @type {Set}\n */\n\n this._uMP = new Set();\n /**\n * _beforeClose\n * array of promises that will be awaited\n * before the channel is closed\n */\n\n this._befC = [];\n /**\n * _preparePromise\n */\n\n this._prepP = null;\n\n _prepareChannel(this);\n}; // STATICS\n\n/**\n * used to identify if someone overwrites\n * window.BroadcastChannel with this\n * See methods/native.js\n */\n\nBroadcastChannel._pubkey = true;\n/**\n * clears the tmp-folder if is node\n * @return {Promise} true if has run, false if not node\n */\n\nexport function clearNodeFolder(options) {\n options = fillOptionsWithDefaults(options);\n var method = chooseMethod(options);\n\n if (method.type === 'node') {\n return method.clearNodeFolder().then(function () {\n return true;\n });\n } else {\n return PROMISE_RESOLVED_FALSE;\n }\n}\n/**\n * if set, this method is enforced,\n * no mather what the options are\n */\n\nvar ENFORCED_OPTIONS;\nexport function enforceOptions(options) {\n ENFORCED_OPTIONS = options;\n} // PROTOTYPE\n\nBroadcastChannel.prototype = {\n postMessage: function postMessage(msg) {\n if (this.closed) {\n throw new Error('BroadcastChannel.postMessage(): ' + 'Cannot post message after channel has closed ' +\n /**\n * In the past when this error appeared, it was realy hard to debug.\n * So now we log the msg together with the error so it at least\n * gives some clue about where in your application this happens.\n */\n JSON.stringify(msg));\n }\n\n return _post(this, 'message', msg);\n },\n postInternal: function postInternal(msg) {\n return _post(this, 'internal', msg);\n },\n\n set onmessage(fn) {\n var time = this.method.microSeconds();\n var listenObj = {\n time: time,\n fn: fn\n };\n\n _removeListenerObject(this, 'message', this._onML);\n\n if (fn && typeof fn === 'function') {\n this._onML = listenObj;\n\n _addListenerObject(this, 'message', listenObj);\n } else {\n this._onML = null;\n }\n },\n\n addEventListener: function addEventListener(type, fn) {\n var time = this.method.microSeconds();\n var listenObj = {\n time: time,\n fn: fn\n };\n\n _addListenerObject(this, type, listenObj);\n },\n removeEventListener: function removeEventListener(type, fn) {\n var obj = this._addEL[type].find(function (obj) {\n return obj.fn === fn;\n });\n\n _removeListenerObject(this, type, obj);\n },\n close: function close() {\n var _this = this;\n\n if (this.closed) {\n return;\n }\n\n OPEN_BROADCAST_CHANNELS[\"delete\"](this);\n this.closed = true;\n var awaitPrepare = this._prepP ? this._prepP : PROMISE_RESOLVED_VOID;\n this._onML = null;\n this._addEL.message = [];\n return awaitPrepare // wait until all current sending are processed\n .then(function () {\n return Promise.all(Array.from(_this._uMP));\n }) // run before-close hooks\n .then(function () {\n return Promise.all(_this._befC.map(function (fn) {\n return fn();\n }));\n }) // close the channel\n .then(function () {\n return _this.method.close(_this._state);\n });\n },\n\n get type() {\n return this.method.type;\n },\n\n get isClosed() {\n return this.closed;\n }\n\n};\n/**\n * Post a message over the channel\n * @returns {Promise} that resolved when the message sending is done\n */\n\nfunction _post(broadcastChannel, type, msg) {\n var time = broadcastChannel.method.microSeconds();\n var msgObj = {\n time: time,\n type: type,\n data: msg\n };\n var awaitPrepare = broadcastChannel._prepP ? broadcastChannel._prepP : PROMISE_RESOLVED_VOID;\n return awaitPrepare.then(function () {\n var sendPromise = broadcastChannel.method.postMessage(broadcastChannel._state, msgObj); // add/remove to unsend messages list\n\n broadcastChannel._uMP.add(sendPromise);\n\n sendPromise[\"catch\"]().then(function () {\n return broadcastChannel._uMP[\"delete\"](sendPromise);\n });\n return sendPromise;\n });\n}\n\nfunction _prepareChannel(channel) {\n var maybePromise = channel.method.create(channel.name, channel.options);\n\n if (isPromise(maybePromise)) {\n channel._prepP = maybePromise;\n maybePromise.then(function (s) {\n // used in tests to simulate slow runtime\n\n /*if (channel.options.prepareDelay) {\n await new Promise(res => setTimeout(res, this.options.prepareDelay));\n }*/\n channel._state = s;\n });\n } else {\n channel._state = maybePromise;\n }\n}\n\nfunction _hasMessageListeners(channel) {\n if (channel._addEL.message.length > 0) return true;\n if (channel._addEL.internal.length > 0) return true;\n return false;\n}\n\nfunction _addListenerObject(channel, type, obj) {\n channel._addEL[type].push(obj);\n\n _startListening(channel);\n}\n\nfunction _removeListenerObject(channel, type, obj) {\n channel._addEL[type] = channel._addEL[type].filter(function (o) {\n return o !== obj;\n });\n\n _stopListening(channel);\n}\n\nfunction _startListening(channel) {\n if (!channel._iL && _hasMessageListeners(channel)) {\n // someone is listening, start subscribing\n var listenerFn = function listenerFn(msgObj) {\n channel._addEL[msgObj.type].forEach(function (listenerObject) {\n /**\n * Getting the current time in JavaScript has no good precision.\n * So instead of only listening to events that happend 'after' the listener\n * was added, we also listen to events that happended 100ms before it.\n * This ensures that when another process, like a WebWorker, sends events\n * we do not miss them out because their timestamp is a bit off compared to the main process.\n * Not doing this would make messages missing when we send data directly after subscribing and awaiting a response.\n * @link https://johnresig.com/blog/accuracy-of-javascript-time/\n */\n var hundredMsInMicro = 100 * 1000;\n var minMessageTime = listenerObject.time - hundredMsInMicro;\n\n if (msgObj.time >= minMessageTime) {\n listenerObject.fn(msgObj.data);\n }\n });\n };\n\n var time = channel.method.microSeconds();\n\n if (channel._prepP) {\n channel._prepP.then(function () {\n channel._iL = true;\n channel.method.onMessage(channel._state, listenerFn, time);\n });\n } else {\n channel._iL = true;\n channel.method.onMessage(channel._state, listenerFn, time);\n }\n }\n}\n\nfunction _stopListening(channel) {\n if (channel._iL && !_hasMessageListeners(channel)) {\n // noone is listening, stop subscribing\n channel._iL = false;\n var time = channel.method.microSeconds();\n channel.method.onMessage(channel._state, null, time);\n }\n}","/* global WorkerGlobalScope */\nfunction add(fn) {\n if (typeof WorkerGlobalScope === 'function' && self instanceof WorkerGlobalScope) {// this is run inside of a webworker\n } else {\n /**\n * if we are on react-native, there is no window.addEventListener\n * @link https://github.com/pubkey/unload/issues/6\n */\n if (typeof window.addEventListener !== 'function') return;\n /**\n * for normal browser-windows, we use the beforeunload-event\n */\n\n window.addEventListener('beforeunload', function () {\n fn();\n }, true);\n /**\n * for iframes, we have to use the unload-event\n * @link https://stackoverflow.com/q/47533670/3443137\n */\n\n window.addEventListener('unload', function () {\n fn();\n }, true);\n }\n /**\n * TODO add fallback for safari-mobile\n * @link https://stackoverflow.com/a/26193516/3443137\n */\n\n}\n\nexport default {\n add: add\n};","import isNode from 'detect-node';\nimport BrowserMethod from './browser.js';\nimport NodeMethod from './node.js';\nvar USE_METHOD = isNode ? NodeMethod : BrowserMethod;\nvar LISTENERS = new Set();\nvar startedListening = false;\n\nfunction startListening() {\n if (startedListening) return;\n startedListening = true;\n USE_METHOD.add(runAll);\n}\n\nexport function add(fn) {\n startListening();\n if (typeof fn !== 'function') throw new Error('Listener is no function');\n LISTENERS.add(fn);\n var addReturn = {\n remove: function remove() {\n return LISTENERS[\"delete\"](fn);\n },\n run: function run() {\n LISTENERS[\"delete\"](fn);\n return fn();\n }\n };\n return addReturn;\n}\nexport function runAll() {\n var promises = [];\n LISTENERS.forEach(function (fn) {\n promises.push(fn());\n LISTENERS[\"delete\"](fn);\n });\n return Promise.all(promises);\n}\nexport function removeAll() {\n LISTENERS.clear();\n}\nexport function getSize() {\n return LISTENERS.size;\n}","import { sleep, randomToken, PROMISE_RESOLVED_VOID, PROMISE_RESOLVED_TRUE } from './util.js';\nimport { add as unloadAdd } from 'unload';\n\nvar LeaderElection = function LeaderElection(broadcastChannel, options) {\n var _this = this;\n\n this.broadcastChannel = broadcastChannel;\n this._options = options;\n this.isLeader = false;\n this.hasLeader = false;\n this.isDead = false;\n this.token = randomToken();\n /**\n * Apply Queue,\n * used to ensure we do not run applyOnce()\n * in parallel.\n */\n\n this._aplQ = PROMISE_RESOLVED_VOID; // amount of unfinished applyOnce() calls\n\n this._aplQC = 0; // things to clean up\n\n this._unl = []; // _unloads\n\n this._lstns = []; // _listeners\n\n this._dpL = function () {}; // onduplicate listener\n\n\n this._dpLC = false; // true when onduplicate called\n\n /**\n * Even when the own instance is not applying,\n * we still listen to messages to ensure the hasLeader flag\n * is set correctly.\n */\n\n var hasLeaderListener = function hasLeaderListener(msg) {\n if (msg.context === 'leader') {\n if (msg.action === 'death') {\n _this.hasLeader = false;\n }\n\n if (msg.action === 'tell') {\n _this.hasLeader = true;\n }\n }\n };\n\n this.broadcastChannel.addEventListener('internal', hasLeaderListener);\n\n this._lstns.push(hasLeaderListener);\n};\n\nLeaderElection.prototype = {\n /**\n * Returns true if the instance is leader,\n * false if not.\n * @async\n */\n applyOnce: function applyOnce( // true if the applyOnce() call came from the fallbackInterval cycle\n isFromFallbackInterval) {\n var _this2 = this;\n\n if (this.isLeader) {\n return sleep(0, true);\n }\n\n if (this.isDead) {\n return sleep(0, false);\n }\n /**\n * Already applying more then once,\n * -> wait for the apply queue to be finished.\n */\n\n\n if (this._aplQC > 1) {\n return this._aplQ;\n }\n /**\n * Add a new apply-run\n */\n\n\n var applyRun = function applyRun() {\n /**\n * Optimization shortcuts.\n * Directly return if a previous run\n * has already elected a leader.\n */\n if (_this2.isLeader) {\n return PROMISE_RESOLVED_TRUE;\n }\n\n var stopCriteria = false;\n var stopCriteriaPromiseResolve;\n /**\n * Resolves when a stop criteria is reached.\n * Uses as a performance shortcut so we do not\n * have to await the responseTime when it is already clear\n * that the election failed.\n */\n\n var stopCriteriaPromise = new Promise(function (res) {\n stopCriteriaPromiseResolve = function stopCriteriaPromiseResolve() {\n stopCriteria = true;\n res();\n };\n });\n var recieved = [];\n\n var handleMessage = function handleMessage(msg) {\n if (msg.context === 'leader' && msg.token != _this2.token) {\n recieved.push(msg);\n\n if (msg.action === 'apply') {\n // other is applying\n if (msg.token > _this2.token) {\n /**\n * other has higher token\n * -> stop applying and let other become leader.\n */\n stopCriteriaPromiseResolve();\n }\n }\n\n if (msg.action === 'tell') {\n // other is already leader\n stopCriteriaPromiseResolve();\n _this2.hasLeader = true;\n }\n }\n };\n\n _this2.broadcastChannel.addEventListener('internal', handleMessage);\n /**\n * If the applyOnce() call came from the fallbackInterval,\n * we can assume that the election runs in the background and\n * not critical process is waiting for it.\n * When this is true, we give the other intances\n * more time to answer to messages in the election cycle.\n * This makes it less likely to elect duplicate leaders.\n * But also it takes longer which is not a problem because we anyway\n * run in the background.\n */\n\n\n var waitForAnswerTime = isFromFallbackInterval ? _this2._options.responseTime * 4 : _this2._options.responseTime;\n\n var applyPromise = _sendMessage(_this2, 'apply') // send out that this one is applying\n .then(function () {\n return Promise.race([sleep(waitForAnswerTime), stopCriteriaPromise.then(function () {\n return Promise.reject(new Error());\n })]);\n }) // send again in case another instance was just created\n .then(function () {\n return _sendMessage(_this2, 'apply');\n }) // let others time to respond\n .then(function () {\n return Promise.race([sleep(waitForAnswerTime), stopCriteriaPromise.then(function () {\n return Promise.reject(new Error());\n })]);\n })[\"catch\"](function () {}).then(function () {\n _this2.broadcastChannel.removeEventListener('internal', handleMessage);\n\n if (!stopCriteria) {\n // no stop criteria -> own is leader\n return beLeader(_this2).then(function () {\n return true;\n });\n } else {\n // other is leader\n return false;\n }\n });\n\n return applyPromise;\n };\n\n this._aplQC = this._aplQC + 1;\n this._aplQ = this._aplQ.then(function () {\n return applyRun();\n }).then(function () {\n _this2._aplQC = _this2._aplQC - 1;\n });\n return this._aplQ.then(function () {\n return _this2.isLeader;\n });\n },\n awaitLeadership: function awaitLeadership() {\n if (\n /* _awaitLeadershipPromise */\n !this._aLP) {\n this._aLP = _awaitLeadershipOnce(this);\n }\n\n return this._aLP;\n },\n\n set onduplicate(fn) {\n this._dpL = fn;\n },\n\n die: function die() {\n var _this3 = this;\n\n this._lstns.forEach(function (listener) {\n return _this3.broadcastChannel.removeEventListener('internal', listener);\n });\n\n this._lstns = [];\n\n this._unl.forEach(function (uFn) {\n return uFn.remove();\n });\n\n this._unl = [];\n\n if (this.isLeader) {\n this.hasLeader = false;\n this.isLeader = false;\n }\n\n this.isDead = true;\n return _sendMessage(this, 'death');\n }\n};\n/**\n * @param leaderElector {LeaderElector}\n */\n\nfunction _awaitLeadershipOnce(leaderElector) {\n if (leaderElector.isLeader) {\n return PROMISE_RESOLVED_VOID;\n }\n\n return new Promise(function (res) {\n var resolved = false;\n\n function finish() {\n if (resolved) {\n return;\n }\n\n resolved = true;\n leaderElector.broadcastChannel.removeEventListener('internal', whenDeathListener);\n res(true);\n } // try once now\n\n\n leaderElector.applyOnce().then(function () {\n if (leaderElector.isLeader) {\n finish();\n }\n });\n /**\n * Try on fallbackInterval\n * @recursive\n */\n\n var tryOnFallBack = function tryOnFallBack() {\n return sleep(leaderElector._options.fallbackInterval).then(function () {\n if (leaderElector.isDead || resolved) {\n return;\n }\n\n if (leaderElector.isLeader) {\n finish();\n } else {\n return leaderElector.applyOnce(true).then(function () {\n if (leaderElector.isLeader) {\n finish();\n } else {\n tryOnFallBack();\n }\n });\n }\n });\n };\n\n tryOnFallBack(); // try when other leader dies\n\n var whenDeathListener = function whenDeathListener(msg) {\n if (msg.context === 'leader' && msg.action === 'death') {\n leaderElector.hasLeader = false;\n leaderElector.applyOnce().then(function () {\n if (leaderElector.isLeader) {\n finish();\n }\n });\n }\n };\n\n leaderElector.broadcastChannel.addEventListener('internal', whenDeathListener);\n\n leaderElector._lstns.push(whenDeathListener);\n });\n}\n/**\n * sends and internal message over the broadcast-channel\n */\n\n\nfunction _sendMessage(leaderElector, action) {\n var msgJson = {\n context: 'leader',\n action: action,\n token: leaderElector.token\n };\n return leaderElector.broadcastChannel.postInternal(msgJson);\n}\n\nexport function beLeader(leaderElector) {\n leaderElector.isLeader = true;\n leaderElector.hasLeader = true;\n var unloadFn = unloadAdd(function () {\n return leaderElector.die();\n });\n\n leaderElector._unl.push(unloadFn);\n\n var isLeaderListener = function isLeaderListener(msg) {\n if (msg.context === 'leader' && msg.action === 'apply') {\n _sendMessage(leaderElector, 'tell');\n }\n\n if (msg.context === 'leader' && msg.action === 'tell' && !leaderElector._dpLC) {\n /**\n * another instance is also leader!\n * This can happen on rare events\n * like when the CPU is at 100% for long time\n * or the tabs are open very long and the browser throttles them.\n * @link https://github.com/pubkey/broadcast-channel/issues/414\n * @link https://github.com/pubkey/broadcast-channel/issues/385\n */\n leaderElector._dpLC = true;\n\n leaderElector._dpL(); // message the lib user so the app can handle the problem\n\n\n _sendMessage(leaderElector, 'tell'); // ensure other leader also knows the problem\n\n }\n };\n\n leaderElector.broadcastChannel.addEventListener('internal', isLeaderListener);\n\n leaderElector._lstns.push(isLeaderListener);\n\n return _sendMessage(leaderElector, 'tell');\n}\n\nfunction fillOptionsWithDefaults(options, channel) {\n if (!options) options = {};\n options = JSON.parse(JSON.stringify(options));\n\n if (!options.fallbackInterval) {\n options.fallbackInterval = 3000;\n }\n\n if (!options.responseTime) {\n options.responseTime = channel.method.averageResponseTime(channel.options);\n }\n\n return options;\n}\n\nexport function createLeaderElection(channel, options) {\n if (channel._leaderElector) {\n throw new Error('BroadcastChannel already has a leader-elector');\n }\n\n options = fillOptionsWithDefaults(options, channel);\n var elector = new LeaderElection(channel, options);\n\n channel._befC.push(function () {\n return elector.die();\n });\n\n channel._leaderElector = elector;\n return elector;\n}","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { TokenManager, EVENT_EXPIRED } from '../TokenManager';\nimport { AuthSdkError } from '../errors';\nimport { ServiceInterface, ServiceManagerOptions } from '../types';\nimport { isBrowser } from '../features';\n\nexport class AutoRenewService implements ServiceInterface {\n private tokenManager: TokenManager;\n private options: ServiceManagerOptions;\n private renewTimeQueue: Array;\n private started = false;\n\n constructor(tokenManager: TokenManager, options: ServiceManagerOptions = {}) {\n this.tokenManager = tokenManager;\n this.options = options;\n this.renewTimeQueue = [];\n this.onTokenExpiredHandler = this.onTokenExpiredHandler.bind(this);\n }\n \n private shouldThrottleRenew(): boolean {\n let res = false;\n this.renewTimeQueue.push(Date.now());\n if (this.renewTimeQueue.length >= 10) {\n // get and remove first item from queue\n const firstTime = this.renewTimeQueue.shift() as number;\n const lastTime = this.renewTimeQueue[this.renewTimeQueue.length - 1];\n res = (lastTime - firstTime) < 30 * 1000;\n }\n return res;\n }\n\n requiresLeadership() {\n // If tokens sync storage is enabled, handle tokens expiration only in 1 leader tab\n return !!this.options.syncStorage && isBrowser();\n }\n\n private onTokenExpiredHandler(key: string) {\n if (this.options.autoRenew) {\n if (this.shouldThrottleRenew()) {\n const error = new AuthSdkError('Too many token renew requests');\n this.tokenManager.emitError(error);\n } else {\n this.tokenManager.renew(key).catch(() => {}); // Renew errors will emit an \"error\" event \n }\n } else if (this.options.autoRemove) {\n this.tokenManager.remove(key);\n }\n }\n\n canStart() {\n return (!!this.options.autoRenew || !!this.options.autoRemove);\n }\n\n start() {\n if (this.canStart()) {\n this.stop();\n this.tokenManager.on(EVENT_EXPIRED, this.onTokenExpiredHandler);\n this.started = true;\n }\n }\n\n stop() {\n if (this.started) {\n this.tokenManager.off(EVENT_EXPIRED, this.onTokenExpiredHandler);\n this.renewTimeQueue = [];\n this.started = false;\n }\n }\n\n isStarted() {\n return this.started;\n }\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\n/* global window */\nimport { TokenManager } from '../TokenManager';\nimport { isBrowser } from '../features';\nimport { ServiceManagerOptions, ServiceInterface } from '../types';\n\n\nexport class SyncStorageService implements ServiceInterface {\n private tokenManager: TokenManager;\n private options: ServiceManagerOptions;\n private syncTimeout: unknown;\n private started = false;\n\n constructor(tokenManager: TokenManager, options: ServiceManagerOptions = {}) {\n this.tokenManager = tokenManager;\n this.options = options;\n this.storageListener = this.storageListener.bind(this);\n }\n\n // Sync authState cross multiple tabs when localStorage is used as the storageProvider\n // A StorageEvent is sent to a window when a storage area it has access to is changed \n // within the context of another document.\n // https://developer.mozilla.org/en-US/docs/Web/API/StorageEvent\n private storageListener({ key, newValue, oldValue }: StorageEvent) {\n const opts = this.tokenManager.getOptions();\n\n const handleCrossTabsStorageChange = () => {\n this.tokenManager.resetExpireEventTimeoutAll();\n this.tokenManager.emitEventsForCrossTabsStorageUpdate(newValue, oldValue);\n };\n\n // Skip if:\n // not from localStorage.clear (event.key is null)\n // event.key is not the storageKey\n // oldValue === newValue\n if (key && (key !== opts.storageKey || newValue === oldValue)) {\n return;\n }\n\n // LocalStorage cross tabs update is not synced in IE, set a 1s timer by default to read latest value\n // https://stackoverflow.com/questions/24077117/localstorage-in-win8-1-ie11-does-not-synchronize\n this.syncTimeout = setTimeout(() => handleCrossTabsStorageChange(), opts._storageEventDelay);\n }\n\n requiresLeadership() {\n return false;\n }\n\n isStarted() {\n return this.started;\n }\n\n canStart() {\n return !!this.options.syncStorage && isBrowser();\n }\n\n start() {\n if (this.canStart()) {\n this.stop();\n window.addEventListener('storage', this.storageListener);\n this.started = true;\n }\n }\n\n stop() {\n if (this.started) {\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n window.removeEventListener('storage', this.storageListener!);\n clearTimeout(this.syncTimeout as any);\n this.started = false;\n }\n }\n} ","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport {\n ServiceManagerInterface,\n ServiceInterface,\n ServiceManagerOptions\n} from './types';\nimport { OktaAuth } from '.';\nimport {\n BroadcastChannel,\n createLeaderElection,\n LeaderElector\n} from 'broadcast-channel';\nimport { AutoRenewService, SyncStorageService } from './services';\nimport { isBrowser } from './features';\n\nexport class ServiceManager implements ServiceManagerInterface {\n private sdk: OktaAuth;\n private options: ServiceManagerOptions;\n private services: Map;\n private channel?: BroadcastChannel;\n private elector?: LeaderElector;\n private started: boolean;\n\n private static knownServices = ['autoRenew', 'syncStorage'];\n\n private static defaultOptions = {\n autoRenew: true,\n autoRemove: true,\n syncStorage: true\n };\n\n constructor(sdk: OktaAuth, options: ServiceManagerOptions = {}) {\n this.sdk = sdk;\n\n // TODO: backwards compatibility, remove in next major version - OKTA-473815\n const { autoRenew, autoRemove, syncStorage } = sdk.tokenManager.getOptions();\n this.options = Object.assign({}, \n ServiceManager.defaultOptions,\n { autoRenew, autoRemove, syncStorage },\n options\n );\n\n this.started = false;\n this.services = new Map();\n this.onLeaderDuplicate = this.onLeaderDuplicate.bind(this);\n this.onLeader = this.onLeader.bind(this);\n\n ServiceManager.knownServices.forEach(name => {\n const svc = this.createService(name);\n if (svc) {\n this.services.set(name, svc);\n }\n });\n }\n\n public static canUseLeaderElection() {\n return isBrowser();\n }\n\n private onLeader() {\n if (this.started) {\n // Start services that requires leadership\n this.startServices();\n }\n }\n\n private onLeaderDuplicate() {\n }\n\n isLeader() {\n return !!this.elector?.isLeader;\n }\n\n hasLeader() {\n return this.elector?.hasLeader;\n }\n\n isLeaderRequired() {\n return [...this.services.values()].some(srv => srv.requiresLeadership());\n }\n\n start() {\n if (this.started) {\n return; // noop if services have already started\n }\n // only start election if a leader is required\n if (this.isLeaderRequired()) {\n this.startElector();\n }\n this.startServices();\n this.started = true;\n }\n \n stop() {\n this.stopElector();\n this.stopServices();\n this.started = false;\n }\n\n getService(name: string): ServiceInterface | undefined {\n return this.services.get(name);\n }\n\n private startServices() {\n for (const srv of this.services.values()) {\n const canStart = srv.canStart() && !srv.isStarted() && (srv.requiresLeadership() ? this.isLeader() : true);\n if (canStart) {\n srv.start();\n }\n }\n }\n\n private stopServices() {\n for (const srv of this.services.values()) {\n srv.stop();\n }\n }\n\n private startElector() {\n this.stopElector();\n if (ServiceManager.canUseLeaderElection()) {\n if (!this.channel) {\n const { broadcastChannelName } = this.options;\n this.channel = new BroadcastChannel(broadcastChannelName as string);\n }\n if (!this.elector) {\n this.elector = createLeaderElection(this.channel);\n this.elector.onduplicate = this.onLeaderDuplicate;\n this.elector.awaitLeadership().then(this.onLeader);\n }\n }\n }\n\n private stopElector() {\n if (this.elector) {\n this.elector?.die();\n this.elector = undefined;\n this.channel?.close();\n this.channel = undefined;\n }\n }\n\n private createService(name: string): ServiceInterface {\n const tokenManager = this.sdk.tokenManager;\n\n let service: ServiceInterface | undefined;\n switch (name) {\n case 'autoRenew':\n service = new AutoRenewService(tokenManager, {...this.options});\n break;\n case 'syncStorage':\n service = new SyncStorageService(tokenManager, {...this.options});\n break;\n default:\n throw new Error(`Unknown service ${name}`);\n }\n return service;\n }\n\n}\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n\nimport { AuthSdkError } from '../errors';\nimport { isFingerprintSupported } from '../features';\nimport {\n addListener,\n removeListener\n} from '../oidc';\nimport { FingerprintOptions, OktaAuthInterface } from '../types';\n\nexport default function fingerprint(sdk: OktaAuthInterface, options?: FingerprintOptions): Promise {\n options = options || {};\n\n if (!isFingerprintSupported()) {\n return Promise.reject(new AuthSdkError('Fingerprinting is not supported on this device'));\n }\n\n var timeout;\n var iframe;\n var listener;\n var promise = new Promise(function (resolve, reject) {\n iframe = document.createElement('iframe');\n iframe.style.display = 'none';\n\n // eslint-disable-next-line complexity\n listener = function listener(e) {\n if (!e || !e.data || e.origin !== sdk.getIssuerOrigin()) {\n return;\n }\n\n try {\n var msg = JSON.parse(e.data);\n } catch (err) {\n // iframe messages should all be parsable\n // skip not parsable messages come from other sources in same origin (browser extensions)\n // TODO: add namespace flag in okta-core to distinguish messages that come from other sources\n return;\n }\n\n if (!msg) { return; }\n if (msg.type === 'FingerprintAvailable') {\n return resolve(msg.fingerprint as string);\n }\n if (msg.type === 'FingerprintServiceReady') {\n e.source.postMessage(JSON.stringify({\n type: 'GetFingerprint'\n }), e.origin);\n }\n };\n addListener(window, 'message', listener);\n\n iframe.src = sdk.getIssuerOrigin() + '/auth/services/devicefingerprint';\n document.body.appendChild(iframe);\n\n timeout = setTimeout(function() {\n reject(new AuthSdkError('Fingerprinting timed out'));\n }, options?.timeout || 15000);\n });\n\n return promise.finally(function() {\n clearTimeout(timeout);\n removeListener(window, 'message', listener);\n if (document.body.contains(iframe)) {\n iframe.parentElement.removeChild(iframe);\n }\n }) as Promise;\n}\n","/*!\n * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport AuthSdkError from './errors/AuthSdkError';\nimport { OktaAuthOptions } from './types';\n\n// TODO: use @okta/configuration-validation (move module to this monorepo?)\n// eslint-disable-next-line complexity\nfunction assertValidConfig(args: OktaAuthOptions) {\n args = args || {};\n\n var scopes = args.scopes;\n if (scopes && !Array.isArray(scopes)) {\n throw new AuthSdkError('scopes must be a array of strings. ' +\n 'Required usage: new OktaAuth({scopes: [\"openid\", \"email\"]})');\n }\n\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n var issuer = args.issuer!;\n if (!issuer) {\n throw new AuthSdkError('No issuer passed to constructor. ' + \n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n }\n\n var isUrlRegex = new RegExp('^http?s?://.+');\n if (!isUrlRegex.test(issuer)) {\n throw new AuthSdkError('Issuer must be a valid URL. ' + \n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n }\n\n if (issuer.indexOf('-admin.') !== -1) {\n throw new AuthSdkError('Issuer URL passed to constructor contains \"-admin\" in subdomain. ' +\n 'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com})');\n }\n}\n\nexport {\n assertValidConfig\n};\n","/*!\n * Copyright (c) 2018-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport crossFetch from 'cross-fetch';\nimport { FetchOptions, HttpResponse } from '../types';\n\n// content-type = application/json OR application/ion+json\nconst appJsonContentTypeRegex = /application\\/\\w*\\+?json/;\n\nfunction readData(response: Response): Promise
{{i18n code=\"consent.required.description\" bundle=\"login\"}}
\\\n '\n ),\n }),\n }),\n ];\n },\n },\n Footer: View.extend({\n className: 'consent-footer',\n template: hbs(\n '\\\n {{#if termsOfService}}\\\n {{i18n code=\"consent.required.termsOfService\" bundle=\"login\"}}\\\n {{#if privacyPolicy}}\\\n •\\\n {{/if}}\\\n {{/if}}\\\n {{#if privacyPolicy}}\\\n {{i18n code=\"consent.required.privacyPolicy\" bundle=\"login\"}}\\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n const appState = this.options.appState;\n\n return {\n termsOfService: appState.get('targetTermsOfService') && appState.get('targetTermsOfService').href,\n privacyPolicy: appState.get('targetPrivacyPolicy') && appState.get('targetPrivacyPolicy').href,\n };\n },\n }),\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/expired-password/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'custom-password-expired',\n Model: {},\n Form: {\n noButtonBar: true,\n title: function() {\n const expiringSoon = this.options.appState.get('isPwdExpiringSoon');\n const numDays = this.options.appState.get('passwordExpireDays');\n\n if (expiringSoon && numDays > 0) {\n return loc('password.expiring.title', 'login', [numDays]);\n } else if (expiringSoon && numDays === 0) {\n return loc('password.expiring.today', 'login');\n } else if (expiringSoon) {\n return loc('password.expiring.soon', 'login');\n } else {\n return this.settings.get('brandName')\n ? loc('password.expired.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expired.title.generic', 'login');\n }\n },\n subtitle: function() {\n if (this.options.appState.get('isPwdExpiringSoon')) {\n const subtitle = this.settings.get('brandName')\n ? loc('password.expiring.subtitle.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expiring.subtitle.generic', 'login');\n\n return subtitle + ' ' + loc('password.expired.custom.subtitle', 'login');\n }\n\n return loc('password.expired.custom.subtitle', 'login');\n },\n formChildren: function() {\n return [\n FormType.Button({\n title: _.partial(loc, 'password.expired.custom.submit', 'login', [\n this.options.appState.get('passwordExpiredWebsiteName'),\n ]),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'custom-button' },\n click: function() {\n Util.redirect(this.options.appState.get('passwordExpiredLinkUrl'));\n },\n }),\n ];\n },\n },\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport hbs from 'handlebars-inline-precompile';\nimport {loc, View} from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport TextBox from './views/shared/TextBox';\n\nconst InvalidUserCodeErrorView = View.extend({\n template: hbs`\n\n \n
\n `\n});\n\nexport default FormController.extend({\n className: 'device-code-activate',\n Model: function() {\n return {\n props: {\n userCode: ['string', true, this.options?.appState?.get('userCode')],\n stateToken: 'string',\n },\n save: function() {\n const self = this;\n return this.doTransaction(function(transaction) {\n return transaction.deviceActivate({\n userCode: self.get('userCode')\n });\n });\n }\n };\n },\n Form: {\n noCancelButton: true,\n autoSave: true,\n save: function() {\n return loc('oform.next', 'login');\n },\n title: function() {\n return loc('device.code.activate.title', 'login');\n },\n subtitle() {\n return loc('device.code.activate.subtitle', 'login');\n },\n formChildren: function() {\n if (this.options.appState.get('deviceActivationStatus') === 'INVALID_USER_CODE') {\n this.add(InvalidUserCodeErrorView, '.o-form-error-container');\n }\n\n return [\n FormType.Input({\n label: loc('device.code.activate.label', 'login'),\n 'label-top': true,\n name: 'userCode',\n input: TextBox,\n inputId: 'user-code',\n type: 'text',\n inlineValidation: false,\n })\n ];\n },\n events: {\n 'keyup input[name=\"userCode\"]': function(e) {\n e.preventDefault();\n this.addHyphen(e);\n }\n },\n addHyphen(evt) {\n const currentVal = evt.target.value;\n // add hyphen after 4th character\n if (currentVal && currentVal.length === 4 && !['Backspace', 'Delete', '-'].includes(evt.key)) {\n evt.target.value = currentVal.concat('-');\n }\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport {_, loc, View} from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from './util/FormType';\n\nconst DEVICE_ACTIVATED = 'DEVICE_ACTIVATED';\nconst DEVICE_NOT_ACTIVATED_CONSENT_DENIED = 'DEVICE_NOT_ACTIVATED_CONSENT_DENIED';\nconst DEVICE_NOT_ACTIVATED = 'DEVICE_NOT_ACTIVATED';\nconst DEVICE_CODE_ERROR_KEYS = [\n DEVICE_NOT_ACTIVATED_CONSENT_DENIED,\n DEVICE_NOT_ACTIVATED\n];\n\nexport default FormController.extend({\n className: 'device-code-terminal',\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // show device code terminal icons\n const iconClass = this.options.appState.get('deviceActivationStatus') === DEVICE_ACTIVATED\n ? 'success-24-green' : 'error-24-red';\n this.$('.o-form-head').before('');\n },\n Model: {},\n Form: {\n noCancelButton: true,\n noButtonBar: true,\n title: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('device.code.activated.success.title', 'login');\n }\n if (_.contains(DEVICE_CODE_ERROR_KEYS, deviceActivationStatus)) {\n return loc('device.code.activated.error.title', 'login');\n }\n },\n subtitle: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('idx.device.activated', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED_CONSENT_DENIED) {\n return loc('idx.device.not.activated.consent.denied', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED) {\n return loc('idx.device.not.activated.internal.error', 'login');\n }\n },\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n template: hbs(\n '{{#if isDeviceCodeError}}\\\n \\\n {{i18n code=\"oie.try.again\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n return {\n isDeviceCodeError: _.contains(DEVICE_CODE_ERROR_KEYS, this.options.appState.get('deviceActivationStatus'))\n };\n },\n }),\n }),\n ];\n }\n }\n});\n","/*!\n * Copyright (c) 2019-2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc, internal } from 'okta';\nimport EnrollCustomFactorController from 'EnrollCustomFactorController';\nimport Factor from 'models/Factor';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nconst { Util } = internal.util;\nexport default EnrollCustomFactorController.extend({\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction(() => {\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n });\n },\n },\n\n Form: function() {\n const factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n formChildren: function() {\n const result = [];\n\n if (this.options.appState.get('isFactorResultFailed')) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: this.options.appState.get('factorResultErrorMessage') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n return result;\n },\n };\n },\n});\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport ResendEmailView from 'views/ResendEmailView';\nimport Footer from 'views/enroll-factors/Footer';\n\nconst Model = {\n props: {\n passCode: 'string',\n },\n\n resend: function() {\n this.trigger('form:clear-errors');\n return this.doTransaction(function(transaction) {\n // authn support multiple `resend` hence has to specify name.\n return transaction.resend('email');\n });\n },\n\n save: function() {\n this.trigger('save');\n const formData = this.toJSON();\n return this.doTransaction(function(transaction) {\n return transaction.activate(formData);\n });\n },\n};\n\nconst Form = function() {\n return {\n title: _.partial(loc, 'email.enroll.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n save: _.partial(loc, 'oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n formChildren: [\n // message\n FormType.View({\n View: View.extend({\n className: 'enroll-activate-email-content',\n attributes: {\n 'data-se': 'enroll-activate-email-content',\n },\n\n // Why use `{{{` for the description?\n // - factorEmail is actually an HTML fragment which\n // is created via another handlebar template and used for bold the email address.\n template: hbs('{{{i18n code=\"email.mfa.email.sent.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n\n getTemplateData: function() {\n const factor = this.options.appState.get('factor');\n const factorEmailVal = factor && factor.profile ? factor.profile.email : '';\n const factorEmail = hbs('{{email}}')({ email: factorEmailVal });\n return {\n factorEmail,\n };\n },\n }),\n }),\n // send again callout message and link button\n FormType.View({\n View: ResendEmailView,\n }),\n // passcode input\n FormType.Input({\n label: loc('email.code.label', 'login'),\n 'label-top': true,\n name: 'passCode',\n type: 'text',\n wide: true,\n }),\n ],\n };\n};\n\nexport default FormController.extend({\n className: 'enroll-activate-email',\n\n Model: Model,\n\n Form: Form,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { _, loc, internal, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport PhoneTextBox from 'views/enroll-factors/PhoneTextBox';\nimport TextBox from 'views/shared/TextBox';\nlet { Keys } = internal.util;\nconst EnrollCallAndSmsControllerwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning login-timeout-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n {{i18n code=\"api.authn.error.PASSCODE_INVALID\" bundle=\"login\"}}
\n{{{warning}}}
\n `,\n});\nconst factorIdIsDefined = {\n factorId: function(val) {\n return !_.isUndefined(val);\n },\n};\n\nfunction isCallFactor(factorType) {\n return factorType === 'call';\n}\n\nfunction getClassName(factorType) {\n return isCallFactor(factorType) ? 'enroll-call' : 'enroll-sms';\n}\n\nfunction sendCode(e) {\n if (Keys.isEnter(e)) {\n e.stopPropagation();\n e.preventDefault();\n if (e.type === 'keyup' && e.data && e.data.model) {\n e.data.model.sendCode();\n }\n }\n}\n\nexport default FormController.extend({\n className: function() {\n return getClassName(this.options.factorType);\n },\n Model: function() {\n return {\n props: {\n phoneNumber: ['string', true],\n phoneExtension: ['string', false],\n lastEnrolledPhoneNumber: 'string',\n passCode: ['string', true],\n factorId: 'string',\n },\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n hasExistingPhones: 'boolean',\n trapEnrollment: 'boolean',\n ableToResend: 'boolean',\n factorType: 'string',\n skipPhoneValidation: 'boolean',\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return phoneNumber ? countryCallingCode + phoneNumber : '';\n },\n },\n enrolled: {\n deps: ['lastEnrolledPhoneNumber', 'fullPhoneNumber'],\n fn: function(lastEnrolled, current) {\n return lastEnrolled === current;\n },\n },\n },\n limitResending: function() {\n this.set({ ableToResend: false });\n _.delay(_.bind(this.set, this), Enums.API_RATE_LIMIT, { ableToResend: true });\n },\n sendCode: function() {\n const self = this;\n const phoneNumber = this.get('fullPhoneNumber');\n const phoneExtension = this.get('phoneExtension');\n \n self.trigger('errors:clear');\n \n if (!phoneNumber.length) {\n self.trigger('invalid', self, { phoneNumber: 'model.validation.field.blank' });\n return;\n }\n \n return this.doTransaction(function(transaction) {\n const isMfaEnroll = transaction.status === 'MFA_ENROLL' || transaction.status === 'FACTOR_ENROLL';\n const profileData = {\n phoneNumber: phoneNumber,\n updatePhone: isMfaEnroll ? self.get('hasExistingPhones') : true,\n };\n \n if (isCallFactor(self.get('factorType'))) {\n profileData['phoneExtension'] = phoneExtension;\n }\n \n if (self.get('skipPhoneValidation')) {\n profileData['validatePhone'] = false;\n }\n \n const doEnroll = function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: self.get('factorType'),\n provider: 'OKTA',\n });\n \n return factor\n .enroll({\n profile: profileData,\n })\n .catch(function(error) {\n if (error.errorCode === 'E0000098') {\n // E0000098: \"This phone number is invalid.\"\n self.set('skipPhoneValidation', true);\n error.xhr.responseJSON.errorSummary = loc('enroll.sms.try_again', 'login');\n }\n throw error;\n });\n };\n \n if (isMfaEnroll) {\n return doEnroll(transaction);\n } else {\n // We must transition to MfaEnroll before updating the phone number\n self.set('trapEnrollment', true);\n return transaction.prev().then(doEnroll).then(function(trans) {\n self.set('trapEnrollment', false);\n return trans;\n });\n }\n // Rethrow errors so we can change state\n // AFTER setting the new transaction\n }, true)\n .then(function() {\n self.set('lastEnrolledPhoneNumber', phoneNumber);\n self.limitResending();\n })\n .catch(function() {\n self.set('trapEnrollment', false);\n });\n },\n resendCode: function() {\n this.trigger('errors:clear');\n this.limitResending();\n return this.doTransaction(function(transaction) {\n return transaction.resend(this.get('factorType'));\n });\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n Form: function() {\n const factorType = this.options.factorType;\n const isCall = isCallFactor(factorType);\n const formTitle = loc(isCall ? 'enroll.call.setup' : 'enroll.sms.setup', 'login');\n const formSubmit = loc(isCall ? 'mfa.call' : 'mfa.sendCode', 'login');\n const formRetry = loc(isCall ? 'mfa.redial' : 'mfa.resendCode', 'login');\n const formSubmitted = loc(isCall ? 'mfa.calling' : 'mfa.sent', 'login');\n const numberFieldClassName = isCall ? 'enroll-call-phone' : 'enroll-sms-phone';\n const buttonClassName = isCall ? 'call-request-button' : 'sms-request-button';\n const formChildren = [\n FormType.Input({\n name: 'countryCode',\n type: 'select',\n wide: true,\n options: CountryUtil.getCountries(),\n }),\n FormType.Input({\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n 'label-top': true,\n className: numberFieldClassName,\n name: 'phoneNumber',\n input: PhoneTextBox,\n type: 'text',\n render: function() {\n this.$('input[name=\"phoneNumber\"]')\n .off('keydown keyup', sendCode)\n .keydown(sendCode)\n .keyup({ model: this.model }, sendCode);\n },\n }),\n ];\n\n if (isCall) {\n formChildren.push(\n FormType.Input({\n label: loc('mfa.phoneNumber.ext.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-call-extension',\n name: 'phoneExtension',\n input: TextBox,\n type: 'text',\n })\n );\n }\n formChildren.push(\n FormType.Button({\n title: formSubmit,\n attributes: { 'data-se': buttonClassName },\n className: 'button button-primary js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.sendCode();\n },\n }),\n FormType.Button({\n title: formRetry,\n attributes: { 'data-se': buttonClassName },\n className: 'button js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.resendCode();\n },\n initialize: function() {\n this.$el.css({ display: 'none' });\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.options.title = formRetry;\n this.enable();\n } else {\n this.options.title = formSubmitted;\n this.disable();\n }\n this.render();\n });\n },\n }),\n FormType.Divider({\n showWhen: factorIdIsDefined,\n }),\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n showWhen: factorIdIsDefined,\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n showWhen: factorIdIsDefined,\n })\n );\n\n return {\n title: formTitle,\n noButtonBar: true,\n autoSave: true,\n className: getClassName(factorType),\n\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(EnrollCallAndSmsControllerwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n\n initialize: function() {\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.showWarning(loc(isCall ? 'factor.call.time.warning' : 'factor.sms.time.warning', 'login'));\n } else {\n this.clearWarnings();\n }\n });\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearWarnings();\n this.clearErrors();\n });\n this.listenTo(this.model, 'change:enrolled', function() {\n this.$('.js-enroll-phone').toggle();\n });\n },\n formChildren: formChildren,\n };\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.set('factorId', this.options.appState.get('activatedFactorId'));\n return true;\n }\n if (this.options.appState.get('isMfaEnroll') && this.model.get('trapEnrollment')) {\n return true;\n }\n },\n\n initialize: function() {\n if (isCallFactor(this.options.factorType)) {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhonesForCall'));\n } else {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhones'));\n }\n this.model.set('factorType', this.options.factorType);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 13] */\n\nimport { _, loc, Collection } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorList from 'views/enroll-choices/FactorList';\nimport Footer from 'views/enroll-choices/Footer';\nimport RequiredFactorList from 'views/enroll-choices/RequiredFactorList';\nimport Enums from './util/Enums';\nimport FormController from './util/FormController';\nimport RouterUtil from './util/RouterUtil';\nconst subtitleTpl = hbs('{{{subtitle}}}');\nexport default FormController.extend({\n className: 'enroll-choices',\n state: {\n pageType: null,\n },\n\n Model: {},\n\n Form: {\n noCancelButton: true,\n\n title: _.partial(loc, 'enroll.choices.title', 'login'),\n\n noButtonBar: function() {\n return this.state.get('pageType') === Enums.ALL_OPTIONAL_NONE_ENROLLED;\n },\n\n subtitle: ' ',\n\n getSubtitle: function() {\n switch (this.state.get('pageType')) {\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n return loc('enroll.choices.optional', 'login');\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED: {\n const remainingDays = this.options.appState.get('gracePeriodRemainingDays');\n return Number.isInteger(remainingDays) && remainingDays >= 0\n ? this.getGracePeriodSubtitle(remainingDays)\n : this.getDefaultSubtitle();\n }\n default:\n return this.getDefaultSubtitle();\n }\n },\n\n getDefaultSubtitle: function() {\n return this.settings.get('brandName')\n ? loc('enroll.choices.description.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.choices.description.generic', 'login');\n },\n\n getGracePeriodSubtitle: function(remainingDays) {\n return remainingDays >= 1\n ? loc('enroll.choices.description.gracePeriod.bold', 'login', [remainingDays])\n : loc('enroll.choices.description.gracePeriod.oneDay.bold', 'login');\n },\n\n save: function() {\n switch (this.state.get('pageType')) {\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n return loc('enroll.choices.submit.finish', 'login');\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n return loc('enroll.choices.submit.configure', 'login');\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n return loc('enroll.choices.submit.next', 'login');\n default:\n return '';\n }\n },\n\n initialize: function(options) {\n this.listenTo(this, 'save', function() {\n let current;\n\n switch (this.state.get('pageType')) {\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n current = options.appState.get('factors').getFirstUnenrolledRequiredFactor();\n options.appState.trigger(\n 'navigate',\n RouterUtil.createEnrollFactorUrl(current.get('provider'), current.get('factorType'))\n );\n break;\n default:\n return this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n }\n });\n },\n\n preRender: function() {\n // form subtitle does not support unescaped strings, and we need some html elements\n // in the subtitle for this form. So instead of a regular subtitle, we add a \n // with the text we need\n this.add(subtitleTpl({ subtitle: this.getSubtitle() }), 'p.okta-form-subtitle');\n\n const factors = this.options.appState.get('factors');\n\n switch (this.state.get('pageType')) {\n case Enums.HAS_REQUIRED_NONE_ENROLLED:\n case Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED:\n this.add(\n new RequiredFactorList({\n minimize: true,\n collection: new Collection(factors.where({ required: true })),\n appState: this.options.appState,\n })\n );\n break;\n case Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED:\n case Enums.ALL_OPTIONAL_SOME_ENROLLED:\n case Enums.ALL_OPTIONAL_NONE_ENROLLED: {\n const enrolled = factors.where({ enrolled: true });\n const notEnrolled = factors.filter(function(factor) {\n // pick factors that are not enrolled or have additional enrollments\n return !factor.get('enrolled') || factor.get('additionalEnrollment');\n });\n let notEnrolledListTitle;\n\n if (enrolled.length > 0) {\n notEnrolledListTitle = loc('enroll.choices.list.optional', 'login');\n this.add(\n new FactorList({\n listTitle: loc('enroll.choices.list.enrolled', 'login'),\n minimize: true,\n collection: new Collection(enrolled),\n appState: this.options.appState,\n })\n );\n }\n this.add(\n new FactorList({\n listTitle: notEnrolledListTitle,\n collection: new Collection(notEnrolled),\n appState: this.options.appState,\n showInlineSetupButton: true,\n })\n );\n break;\n }\n }\n },\n },\n\n initialize: function(options) {\n let numRequiredEnrolled = 0;\n let numRequiredNotEnrolled = 0;\n let numOptionalEnrolled = 0;\n let numOptionalNotEnrolled = 0;\n let hasRequired;\n let pageType;\n\n options.appState.get('factors').each(function(factor) {\n const required = factor.get('required');\n const enrolled = factor.get('enrolled');\n const additionalEnrollment = factor.get('additionalEnrollment');\n\n if (required && enrolled) {\n numRequiredEnrolled++;\n } else if (required && !enrolled) {\n numRequiredNotEnrolled++;\n } else if (!required && enrolled) {\n numOptionalEnrolled++;\n } else if (!required && !enrolled) {\n numOptionalNotEnrolled++;\n }\n // If a factor has multiple instances and\n // additional optional enrollments\n if (enrolled && additionalEnrollment) {\n numOptionalNotEnrolled++;\n }\n });\n\n hasRequired = numRequiredEnrolled > 0 || numRequiredNotEnrolled > 0;\n\n // There are 5 possible states this screen can be in:\n\n // 1. Has required, but none have been enrolled. Wizard start page.\n if (hasRequired && numRequiredEnrolled === 0) {\n pageType = Enums.HAS_REQUIRED_NONE_ENROLLED;\n } else if (hasRequired && numRequiredNotEnrolled > 0) {\n // 2. Has required, and have enrolled at least one. The page layout\n // to configure the remaining required factors.\n pageType = Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED;\n } else if (hasRequired && numOptionalNotEnrolled > 0) {\n // 3. Has required, and finished enrolling all required factors. The\n // page layout you see to configure any optional factors or skip.\n pageType = Enums.HAS_REQUIRED_ALL_REQUIRED_ENROLLED;\n } else if (numOptionalEnrolled === 0 && numOptionalNotEnrolled > 0) {\n // 4. Factors are all optional, no factors enrolled.\n pageType = Enums.ALL_OPTIONAL_NONE_ENROLLED;\n } else if (numOptionalNotEnrolled > 0) {\n // 5. Factors are all optional, some factors have already been\n // enrolled (can either enroll more or skip).\n pageType = Enums.ALL_OPTIONAL_SOME_ENROLLED;\n } else {\n // 6. Factors are all optional, all factors have already been\n // enrolled, among them there is OktaVerify with Push enrolled as totp\n // (API return OktaVerify push factor as unenrolled in this case and as we always merge\n // push and totp in UI so we redirect to skip link here).\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n }\n\n this.state.set('pageType', pageType);\n\n if (this.options.appState.get('skipLink') && pageType === Enums.HAS_REQUIRED_SOME_REQUIRED_ENROLLED) {\n this.add(new Footer(this.toJSON()));\n }\n },\n});\n","/*!\n * Copyright (c) 2018-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FormController from 'util/FormController';\nimport Footer from 'views/enroll-factors/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'enroll-custom-factor',\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction((transaction, setTransaction) => {\n const factor = _.findWhere(transaction.factors, {\n provider: this.get('provider'),\n factorType: this.get('factorType'),\n });\n\n return factor\n .enroll()\n .then(trans => {\n setTransaction(trans);\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n })\n .catch(function(err) {\n throw err;\n });\n });\n },\n },\n\n Form: function() {\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere({\n provider: this.options.provider,\n factorType: this.options.factorType,\n });\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n };\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n\n initialize: function() {\n this.model.set('provider', this.options.provider);\n this.model.set('factorType', this.options.factorType);\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint camelcase: 0*/\nimport { $, _, loc } from 'okta';\nimport Duo from 'duo';\nimport Q from 'q';\nimport FormController from 'util/FormController';\nimport Footer from 'views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'enroll-duo duo-form',\n\n Model: {\n props: {\n host: 'string',\n signature: 'string',\n postAction: 'string',\n factorId: 'string',\n stateToken: 'string',\n },\n\n getInitOptions: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'web',\n provider: 'DUO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function(signedResponse) {\n const url = this.get('postAction');\n const factorId = this.get('factorId');\n const self = this;\n const data = {\n id: factorId,\n stateToken: this.get('stateToken'),\n sig_response: signedResponse,\n };\n // Note: We should be doing this in OktaAuth! Fix when it's updated.\n\n // We don't actually use authClient.post() here (unlike all the other cases in the\n // sign-in widget) since the endpoint is wired to accept serialized form post instead\n // of a JSON post ($.post() is different from authClient.post() in that in $.post(),\n // jquery decides the Content-Type instead of it being a JSON type). Enroll/Verify DUO\n // are the only two places where we actually do this.\n // NOTE - If we ever decide to change this, we should test this very carefully.\n return Q($.post(url, data))\n .then(function() {\n return self.doTransaction(function(transaction) {\n return transaction.poll();\n });\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n });\n },\n },\n\n Form: {\n autoSave: true,\n noButtonBar: true,\n title: _.partial(loc, 'enroll.duo.title', 'login'),\n\n postRender: function() {\n this.add('');\n Duo.init({\n host: this.model.get('host'),\n sig_request: this.model.get('signature'),\n iframe: this.$('iframe').get(0),\n post_action: _.bind(this.model.activate, this.model),\n });\n },\n },\n\n Footer: Footer,\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model.getInitOptions(this.options.appState).then(function(trans) {\n const res = trans.data;\n\n if (\n !res ||\n !res._embedded ||\n !res._embedded.factor ||\n !res._embedded.factor._embedded ||\n !res._embedded.factor._embedded.activation\n ) {\n throw new Error('Response does not have duo activation options');\n }\n\n const factor = res._embedded.factor;\n const activation = factor._embedded.activation;\n\n self.model.set({\n host: activation.host,\n signature: activation.signature,\n postAction: activation._links.complete.href,\n factorId: factor.id,\n stateToken: res.stateToken,\n });\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\n\nconst Model = {\n local: {\n factorType: 'string',\n provider: 'string',\n },\n save: function() {\n this.trigger('save');\n const factorOpt = this.pick('factorType', 'provider');\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, factorOpt);\n\n return factor.enroll();\n });\n },\n};\n\nconst Form = function() {\n return {\n title: _.partial(loc, 'email.enroll.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n save: _.partial(loc, 'email.button.send', 'login'),\n formChildren: [\n FormType.View({\n View: View.extend({\n attributes: {\n 'data-se': 'enroll-email-content',\n },\n template: hbs('{{i18n code=\"email.enroll.description\" bundle=\"login\"}}'),\n }),\n }),\n ],\n };\n};\n\nexport default FormController.extend({\n className: 'enroll-email',\n\n Model: Model,\n\n Form: Form,\n\n Footer: Footer,\n\n initialize: function() {\n this.model.set(_.pick(this.options, 'factorType', 'provider'));\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nexport default FormController.extend({\n className: 'enroll-hotp',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n Form: {\n title: function() {\n const factors = this.options.appState.get('factors');\n const hotpFactor = factors.findWhere({\n provider: this.model.get('__provider__'),\n factorType: this.model.get('__factorType__'),\n });\n return loc('enroll.totp.title', 'login', [hotpFactor.get('factorLabel')]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'restrict-enroll' },\n\n formChildren: function() {\n const children = [\n FormType.View({\n View: new HtmlErrorMessageView({ message: loc('enroll.hotp.restricted', 'login') }),\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\n\nfunction isRSA(provider) {\n return provider === 'RSA';\n}\n\nfunction getClassName(provider) {\n return isRSA(provider) ? 'enroll-rsa' : 'enroll-onprem';\n}\n\nexport default FormController.extend({\n className: function() {\n return getClassName(this.options.provider);\n },\n Model: function() {\n const provider = this.options.provider;\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere(_.pick(this.options, 'provider', 'factorType'));\n const profile = factor.get('profile');\n const credentialId = profile && profile.credentialId ? profile.credentialId : '';\n\n return {\n props: {\n credentialId: ['string', true, credentialId],\n passCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token',\n provider: provider,\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n profile: { credentialId: this.get('credentialId') },\n });\n });\n },\n };\n },\n\n Form: function() {\n const provider = this.options.provider;\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere(_.pick(this.options, 'provider', 'factorType'));\n const vendorName = factor.get('vendorName');\n const title = isRSA(provider) ? loc('factor.totpHard.rsaSecurId', 'login') : vendorName;\n\n return {\n title: title,\n noButtonBar: true,\n autoSave: true,\n className: getClassName(provider),\n initialize: function() {\n this.listenTo(this.model, 'error', (source, error) => {\n if (error && error.status === 409) {\n // 409 means we are in change pin, so we should clear out answer input\n this.$('.o-form-input-name-passCode input').val('');\n this.$('.o-form-input-name-passCode input').trigger('change');\n this.$('.o-form-input-name-passCode input').focus();\n }\n });\n },\n formChildren: [\n FormType.Input({\n label: loc('enroll.onprem.username.placeholder', 'login', [vendorName]),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.onprem.username.tooltip',\n 'enroll.onprem.username.placeholder',\n 'login',\n [vendorName],\n [vendorName]\n ),\n 'explain-top': true,\n name: 'credentialId',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.onprem.passcode.placeholder', 'login', [vendorName]),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.onprem.passcode.tooltip',\n 'enroll.onprem.passcode.placeholder',\n 'login',\n [vendorName],\n [vendorName]\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'password',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n }),\n ],\n };\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport ValidationUtil from 'util/ValidationUtil';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-password',\n Model: {\n props: {\n password: ['string', true],\n confirmPassword: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateFieldsMatch(\n this,\n 'password',\n 'confirmPassword',\n loc('password.enroll.error.match', 'login')\n );\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'password',\n provider: 'OKTA',\n });\n\n return factor.enroll({\n profile: {\n password: this.get('password'),\n },\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n title: _.partial(loc, 'enroll.password.setup', 'login'),\n inputs: function() {\n return [\n {\n label: loc('mfa.challenge.password.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'password',\n input: TextBox,\n type: 'password',\n },\n {\n label: loc('password.confirmPassword.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'confirmPassword',\n input: TextBox,\n type: 'password',\n },\n ];\n },\n },\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-question',\n Model: {\n props: {\n question: 'string',\n answer: ['string', true],\n },\n local: {\n securityQuestions: 'object',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'question',\n provider: 'OKTA',\n });\n\n return factor.enroll({\n profile: {\n question: this.get('question'),\n answer: this.get('answer'),\n },\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n title: _.partial(loc, 'enroll.securityQuestion.setup', 'login'),\n inputs: function() {\n return [\n {\n label: false,\n 'label-top': true,\n name: 'question',\n type: 'select',\n wide: true,\n options: function() {\n return this.model.get('securityQuestions');\n },\n params: {\n searchThreshold: 25,\n },\n },\n {\n label: loc('mfa.challenge.answer.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain('mfa.challenge.answer.tooltip', 'mfa.challenge.answer.placeholder', 'login'),\n 'explain-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'text',\n },\n ];\n },\n },\n\n Footer: Footer,\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model\n .manageTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'question',\n provider: 'OKTA',\n });\n\n return factor.questions();\n })\n .then(function(questionsRes) {\n const questions = {};\n\n _.each(questionsRes, function(question) {\n questions[question.question] = FactorUtil.getSecurityQuestionLabel(question);\n });\n self.model.set('securityQuestions', questions);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-symantec',\n Model: {\n props: {\n credentialId: ['string', true],\n passCode: ['string', true],\n nextPassCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token',\n provider: 'SYMANTEC',\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n nextPassCode: this.get('nextPassCode'),\n profile: { credentialId: this.get('credentialId') },\n });\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'factor.totpHard.symantecVip', 'login'),\n subtitle: _.partial(loc, 'enroll.symantecVip.subtitle', 'login'),\n noButtonBar: true,\n autoSave: true,\n className: 'enroll-symantec',\n formChildren: function() {\n return [\n FormType.Input({\n label: loc('enroll.symantecVip.credentialId.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.credentialId.tooltip',\n 'enroll.symantecVip.credentialId.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'credentialId',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.symantecVip.passcode1.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.passcode1.tooltip',\n 'enroll.symantecVip.passcode1.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'text',\n }),\n FormType.Input({\n label: loc('enroll.symantecVip.passcode2.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'enroll.symantecVip.passcode2.tooltip',\n 'enroll.symantecVip.passcode2.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'nextPassCode',\n input: TextBox,\n type: 'text',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n }),\n ];\n },\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport StoreLinks from 'util/StoreLinks';\nimport Footer from 'views/enroll-factors/Footer';\nconst showWhenDeviceTypeSelected = {\n __deviceType__: function(val) {\n return val !== undefined;\n },\n};\nconst EnrollTotpControllerAppDownloadInstructionsView = View.extend({\n attributes: { 'data-se': 'app-download-instructions' },\n className: 'app-download-instructions',\n template: hbs(\n '\\\n \\\n{{{appStoreLinkText}}}
\\\n '\n ),\n initialize: function() {\n this.listenTo(this.model, 'change:__deviceType__', this.render);\n },\n postRender: function() {\n const link = this.$el.find('.instructions a');\n if (link.length) {\n link[0].setAttribute('target', '_blank');\n link[0].setAttribute('rel', 'noreferer noopener');\n }\n },\n getTemplateData: function() {\n let appStoreLink;\n let appIcon;\n let appStoreName;\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n appStoreName = StoreLinks.STORE[this.model.get('__deviceType__')];\n if (this.model.get('__provider__') === 'GOOGLE') {\n appStoreLink = StoreLinks.GOOGLE[this.model.get('__deviceType__')];\n appIcon = 'google-auth-38';\n } else {\n appStoreLink = StoreLinks.OKTA[this.model.get('__deviceType__')];\n appIcon = 'okta-verify-download-icon';\n }\n return {\n appStoreLinkText: loc('enroll.totp.downloadApp', 'login', [appStoreLink, factorName, appStoreName]),\n appIcon: appIcon,\n };\n },\n});\nconst EnrollTotpControllerEnrollTotpController = FormController.extend({\n className: 'enroll-totp',\n Model: function() {\n return {\n local: {\n __deviceType__: 'string',\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: this.get('__factorType__'),\n provider: this.get('__provider__'),\n });\n\n return factor.enroll();\n });\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-device-type' },\n\n formChildren: function() {\n const inputOptions = {\n APPLE: loc('iphone', 'login'),\n ANDROID: loc('android', 'login'),\n };\n const children = [\n FormType.Input({\n name: '__deviceType__',\n type: 'radio',\n options: inputOptions,\n group: true,\n label: _.partial(loc, 'enroll.totp.selectDevice', 'login'),\n }),\n FormType.Divider({ showWhen: showWhenDeviceTypeSelected }),\n FormType.View({\n View: EnrollTotpControllerAppDownloadInstructionsView,\n showWhen: showWhenDeviceTypeSelected,\n }),\n FormType.Button({\n title: loc('oform.next', 'login'),\n attributes: {\n 'data-type': 'save'\n },\n className: 'button button-primary default-custom-button',\n click: function() {\n this.model.save();\n },\n showWhen: showWhenDeviceTypeSelected,\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n});\nexport default EnrollTotpControllerEnrollTotpController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport Errors from 'util/Errors';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nexport default FormController.extend({\n className: 'enroll-u2f',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const appId = activation.appId;\n const registerRequests = [\n {\n version: FidoUtil.getU2fVersion(),\n challenge: activation.nonce,\n },\n ];\n const self = this;\n const deferred = Q.defer();\n\n u2f.register(appId, registerRequests, [], function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n deferred.reject(\n new Errors.U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fEnrollErrorMessageByCode(data.errorCode),\n },\n },\n })\n );\n } else {\n deferred.resolve(\n transaction.activate({\n registrationData: data.registrationData,\n version: data.version,\n challenge: data.challenge,\n clientData: data.clientData,\n })\n );\n }\n });\n return deferred.promise;\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.u2f.title', 'login'),\n save: _.partial(loc, 'enroll.u2f.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-u2f-form',\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n //There is html in enroll.u2f.general2 in our properties file, reason why is unescaped\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '- \\\n
- {{{i18n code=\"enroll.u2f.general2\" bundle=\"login\"}}} \\\n
- {{i18n code=\"enroll.u2f.general3\" bundle=\"login\"}} \\\n
\\\n
'\n ),\n }),\n })\n );\n }\n\n return result;\n },\n\n _startEnrollment: function() {\n this.$('.u2f-instructions').addClass('hide');\n this.$('.u2f-enroll-text').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.u2f-instructions').removeClass('hide');\n this.$('.u2f-enroll-text').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport EnrollUser from 'models/EnrollUser';\nimport BaseLoginController from 'util/BaseLoginController';\nimport EnrollUserForm from 'views/enrollUser/EnrollUserForm';\nimport FooterWithBackLink from 'views/shared/FooterWithBackLink';\nexport default BaseLoginController.extend({\n className: 'enroll-user',\n initialize: function(options) {\n this.options = options || {};\n // create model\n this.model = new EnrollUser(this.options);\n },\n fetchInitialData: function() {\n // If user is unauthenticated and starts enroll flow make a post call to transition state to PROFILE_REQUIRED\n if (this.options.appState.get('isUnauthenticated')) {\n return this.model.getEnrollFormData();\n } else {\n return BaseLoginController.prototype.fetchInitialData.call();\n }\n },\n trapAuthResponse: function() {\n if (this.options.appState.get('isProfileRequired')) {\n return true;\n }\n },\n postRender: function() {\n const form = new EnrollUserForm(this.toJSON());\n\n this.add(form);\n this.add(new FooterWithBackLink(this.toJSON()));\n this.addListeners();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport CryptoUtil from 'util/CryptoUtil';\nimport Errors from 'util/Errors';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\n\nfunction getExcludeCredentials(credentials) {\n const excludeCredentials = [];\n\n _.each(credentials, function(credential) {\n excludeCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(credential.id),\n });\n });\n return excludeCredentials;\n}\n\nexport default FormController.extend({\n className: 'enroll-webauthn',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n this.appState.on('backToFactors', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n // enroll via browser webauthn js\n\n const self = this;\n\n if (webauthn.isNewApiAvailable()) {\n const options = _.extend({}, activation, {\n challenge: CryptoUtil.strToBin(activation.challenge),\n user: {\n id: CryptoUtil.strToBin(activation.user.id),\n name: activation.user.name,\n displayName: activation.user.displayName,\n },\n excludeCredentials: getExcludeCredentials(activation.excludeCredentials),\n });\n\n self.webauthnAbortController = new AbortController();\n return new Q(\n navigator.credentials.create({\n publicKey: options,\n signal: self.webauthnAbortController.signal,\n })\n )\n .then(function(newCredential) {\n return transaction.activate({\n attestation: CryptoUtil.binToStr(newCredential.response.attestationObject),\n clientData: CryptoUtil.binToStr(newCredential.response.clientDataJSON),\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new Errors.WebauthnAbortError();\n } else {\n throw new Errors.WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n }\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.webauthn.biometric.title', 'login'),\n save: _.partial(loc, 'enroll.webauthn.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-webauthn-form',\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n //enroll.webauthn.biometric.instructions.edge is unescaped because it contains html\n children.push(\n FormType.View({\n View: View.extend({\n className: 'webauthn-enroll-text',\n template: hbs(\n '\\\n {{i18n code=\"enroll.u2f.instructions\" bundle=\"login\"}}
\\\n{{i18n code=\"enroll.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n\\\n \\\n \\\n
\\\n \\\n \\\n
\\\n {{#if isEdge}}\\\n {{i18n code=\"enroll.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n\\\n
\\\n {{/if}}\\\n {{#if onlySupportsSecurityKey}}\\\n {{{i18n code=\"enroll.webauthn.biometric.instructions.edge\" bundle=\"login\"}}}
\\\n\\\n
\\\n {{/if}}\\\n \\\n '\n ),\n getTemplateData: function() {\n return {\n isEdge: BrowserFeatures.isEdge(),\n onlySupportsSecurityKey: (BrowserFeatures.isFirefox() || BrowserFeatures.isSafari()) &&\n BrowserFeatures.isMac(),\n };\n },\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport Spinner from 'views/shared/Spinner';\nexport default FormController.extend({\n className: 'enroll-windows-hello',\n Model: {\n local: {\n __isEnrolled__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n\n if (this.get('__isEnrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n return this._enroll(transaction);\n });\n },\n\n _enroll: function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n },\n\n activate: function() {\n this.set('__isEnrolled__', true);\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const user = transaction.user;\n const model = this;\n const accountInfo = {\n rpDisplayName: activation.rpDisplayName,\n userDisplayName: user.profile.displayName,\n accountName: user.profile.login,\n userId: user.id,\n };\n const cryptoParams = [\n {\n algorithm: activation.algorithm,\n },\n ];\n const challenge = activation.nonce;\n\n return webauthn\n .makeCredential(accountInfo, cryptoParams, challenge)\n .then(function(creds) {\n return transaction.activate({\n credentialId: creds.credential.id,\n publicKey: creds.publicKey,\n attestation: null,\n });\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'enroll.windowsHello.title', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('enroll.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'enroll.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('enroll.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('enroll.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n this.$('.o-form-button-bar').removeClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Footer from 'views/enroll-factors/Footer';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-yubikey',\n Model: {\n props: {\n passCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token:hardware',\n provider: 'YUBICO',\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n });\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.yubikey.title', 'login'),\n subtitle: _.partial(loc, 'enroll.yubikey.subtitle', 'login'),\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n autoSave: true,\n className: 'enroll-yubikey',\n formChildren: [\n FormType.View({\n View: '',\n }),\n FormType.Input({\n name: 'passCode',\n input: TextBox,\n type: 'password',\n }),\n ],\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nconst EnrollmentLinkSentControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n this.options.appState.get('activatedFactorType'),\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nconst emailSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaEmail.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-email-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{{i18n code=\"enroll.webauthn.instructions.noSupportForBiometric\" bundle=\"login\"}}}
\\\n{{i18n code=\"enroll.totp.enrollViaEmail.msg\" bundle=\"login\"}}
\\\n{{email}}
\\\n '\n ),\n getTemplateData: function() {\n return { email: this.options.appState.get('userEmail') };\n },\n }),\n }),\n ],\n};\nconst smsSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaSms.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-sms-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n{{i18n code=\"enroll.totp.enrollViaSms.msg\" bundle=\"login\"}}
\\\n{{phoneNumber}}
\\\n '\n ),\n getTemplateData: function() {\n return { phoneNumber: this.model.get('fullPhoneNumber') };\n },\n }),\n }),\n ],\n};\nexport default FormController.extend({\n className: 'enroll-activation-link-sent',\n Model: function() {\n return {\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n phoneNumber: ['string', false, this.options.appState.get('userPhoneNumber')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return countryCallingCode + phoneNumber;\n },\n },\n },\n };\n },\n\n Form: function() {\n const activationType = this.options.appState.get('factorActivationType');\n\n switch (activationType) {\n case 'SMS':\n return smsSentForm;\n case 'EMAIL':\n return emailSentForm;\n default:\n throw new Error('Unknown activation option: ' + activationType);\n }\n },\n\n Footer: EnrollmentLinkSentControllerFooter,\n\n initialize: function() {\n this.pollForEnrollment();\n },\n\n remove: function() {\n return FormController.prototype.remove.apply(this, arguments);\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isWaitingForActivation')) {\n this.pollForEnrollment();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport RouterUtil from 'util/RouterUtil';\nimport EnterPasscodeForm from 'views/enroll-factors/EnterPasscodeForm';\nconst EnterPasscodePushFlowControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n 'push',\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nexport default FormController.extend({\n className: 'activate-push',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: EnterPasscodePushFlowControllerFooter,\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'error-state',\n Model: {},\n Form: {\n noButtonBar: true,\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Spinner from 'views/shared/Spinner';\nimport BaseLoginController from 'util/BaseLoginController';\nimport Util from 'util/Util';\n\nexport default BaseLoginController.extend({\n className: 'force-idp-discovery',\n\n View: Spinner,\n\n Model: {},\n\n initialize: function() {\n const OKTA_IDP_TYPE = 'OKTA';\n const RESOURCE = 'okta:acct:';\n\n const options = this.options;\n const lastAuthResponse = options.appState.get('lastAuthResponse');\n const stateToken = lastAuthResponse && lastAuthResponse?.stateToken;\n\n const webfingerArgs = {\n resource: RESOURCE,\n requestContext: stateToken,\n };\n\n options.appState.settings.authClient\n .webfinger(webfingerArgs)\n .then(res => {\n if (res?.links && res.links[0]) {\n if (res.links[0].properties['okta:idp:type'] !== OKTA_IDP_TYPE && res.links[0].href) {\n const redirectFn = res.links[0].href.includes('OKTA_INVALID_SESSION_REPOST%3Dtrue')\n ? Util.redirectWithFormGet.bind(Util)\n : this.settings.get('redirectUtilFn');\n //override redirectFn to only use Util.redirectWithFormGet if OKTA_INVALID_SESSION_REPOST is included\n //it will be encoded since it will be included in the encoded fromURI\n\n redirectFn(res.links[0].href);\n return;\n }\n }\n options.appState.trigger('navigate', '');\n })\n .catch(() => {\n // TODO: OKTA-436775 Show error instead of navigating to default route\n options.appState.trigger('navigate', '');\n });\n },\n\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport ContactSupport from 'views/shared/ContactSupport';\nimport TextBox from 'views/shared/TextBox';\nconst ForgotPasswordControllernoFactorsError = View.extend({\n template: hbs`\n\n \n
\n `,\n});\nconst ForgotPasswordControllerFooter = View.extend({\n template: hbs(\n '\\\n {{#unless hideBackToSignInForReset}}\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{/unless}}\\\n {{#if helpSupportNumber}}\\\n \\\n {{i18n code=\"mfa.noAccessToEmail\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-contact-support': function(e) {\n e.preventDefault();\n this.state.trigger('contactSupport');\n this.$('.js-contact-support').hide();\n },\n },\n getTemplateData: function() {\n return {\n hideBackToSignInForReset: this.settings.get('features.hideBackToSignInForReset'),\n helpSupportNumber: this.settings.get('helpSupportNumber'),\n };\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default FormController.extend({\n className: 'forgot-password',\n Model: {\n props: {\n username: ['string', true],\n factorType: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateUsername(this);\n },\n save: function() {\n const self = this;\n const relayState = this.settings.get('relayState');\n\n this.startTransaction(function(authClient) {\n return authClient.forgotPassword({\n username: self.settings.transformUsername(self.get('username'), Enums.FORGOT_PASSWORD),\n factorType: self.get('factorType'),\n relayState: relayState,\n });\n }).catch(function() {\n //need empty fail handler on model to display errors on form\n });\n },\n },\n Form: {\n noButtonBar: true,\n title: _.partial(loc, 'password.reset', 'login'),\n formChildren: function() {\n const smsEnabled = this.settings.get('features.smsRecovery');\n /*eslint complexity: [2, 9] max-statements: [2, 23] */\n\n const callEnabled = this.settings.get('features.callRecovery');\n const emailEnabled = this.settings.get('features.emailRecovery');\n const noFactorsEnabled = !(smsEnabled || callEnabled || emailEnabled);\n const formChildren = [];\n\n if (noFactorsEnabled) {\n this.add(ForgotPasswordControllernoFactorsError, '.o-form-error-container');\n } else {\n formChildren.push(\n FormType.Input({\n label: loc('password.forgot.email.or.username.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'password.forgot.email.or.username.tooltip',\n 'password.forgot.email.or.username.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'account-recovery-username',\n autoComplete: 'username',\n type: 'text',\n inlineValidation: false,\n })\n );\n if (smsEnabled || callEnabled) {\n formChildren.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"password.forgot.noFactorsEnabled\" bundle=\"login\"}}
\n\\\n {{i18n code=\"recovery.mobile.hint\" bundle=\"login\" arguments=\"mobileFactors\"}}\\\n
'\n ),\n getTemplateData: function() {\n let mobileFactors;\n\n if (smsEnabled && callEnabled) {\n mobileFactors = loc('recovery.smsOrCall');\n } else if (callEnabled) {\n mobileFactors = loc('recovery.call');\n } else {\n mobileFactors = loc('recovery.sms');\n }\n return { mobileFactors: mobileFactors };\n },\n }),\n })\n );\n }\n if (smsEnabled) {\n this.$el.addClass('forgot-password-sms-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'sms-button',\n 'password.forgot.sendText',\n Enums.RECOVERY_FACTOR_TYPE_SMS,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_SMS);\n }\n if (callEnabled) {\n this.$el.addClass('forgot-password-call-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'call-button',\n 'password.forgot.call',\n Enums.RECOVERY_FACTOR_TYPE_CALL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_CALL);\n }\n if (emailEnabled) {\n this.$el.addClass('forgot-password-email-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'email-button',\n 'password.forgot.sendEmail',\n Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_EMAIL);\n }\n }\n\n return formChildren;\n },\n initialize: function() {\n this.listenTo(this.state, 'contactSupport', function() {\n this.add(ContactSupport, '.o-form-error-container');\n });\n\n this.listenTo(this, 'save', function() {\n this.options.appState.set('username', this.model.get('username'));\n this.model.save();\n });\n },\n setDefaultFactorType: function(factorType) {\n if (_.isEmpty(this.model.get('factorType'))) {\n this.model.set('factorType', factorType);\n }\n },\n createRecoveryFactorButton: function(className, labelCode, factorType, form) {\n return FormType.Button({\n attributes: { 'data-se': className },\n className: 'button button-primary button-wide ' + className,\n title: loc(labelCode, 'login'),\n click: function() {\n form.clearErrors();\n if (this.model.isValid()) {\n this.model.set('factorType', factorType);\n form.trigger('save', this.model);\n }\n },\n });\n },\n },\n Footer: ForgotPasswordControllerFooter,\n\n initialize: function() {\n this.options.appState.unset('username');\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport PrimaryAuthController from 'PrimaryAuthController';\nimport IDPDiscoveryModel from 'models/IDPDiscovery';\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport BaseLoginController from 'util/BaseLoginController';\nimport IDPDiscoveryForm from 'views/idp-discovery/IDPDiscoveryForm';\nimport CustomButtons from 'views/primary-auth/CustomButtons';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport Util from './util/Util';\n\nexport default PrimaryAuthController.extend({\n className: 'idp-discovery',\n\n View: IDPDiscoveryForm,\n\n constructor: function(options) {\n options.appState.unset('username');\n let requestContext = options.settings.get('idpDiscovery.requestContext');\n const lastAuthResponse = options.appState.get('lastAuthResponse');\n const stateToken = lastAuthResponse && lastAuthResponse?.stateToken;\n\n //Update requestContext with last stateToken, if the context was stateToken and not a fromUri\n if(Util.isV1StateToken(requestContext)) {\n requestContext = stateToken;\n }\n\n this.model = new IDPDiscoveryModel(\n {\n requestContext: requestContext,\n settings: options.settings,\n appState: options.appState,\n },\n { parse: true }\n );\n\n BaseLoginController.apply(this, arguments);\n\n this.addListeners();\n\n // If social auth is configured, 'socialAuthPositionTop' will determine\n // the order in which the social auth and primary auth are shown on the screen.\n if (options.settings.get('hasConfiguredButtons')) {\n this.add(CustomButtons, {\n prepend: options.settings.get('socialAuthPositionTop'),\n options: {\n // To trigger an afterError event, we require the current controller\n currentController: this,\n },\n });\n }\n\n this.addFooter(options);\n\n this.setUsername();\n },\n\n initialize: function() {\n PrimaryAuthController.prototype.initialize.apply(this);\n\n this.listenTo(this.model, 'goToPrimaryAuth', function() {\n this.settings.set('username', this.model.get('username'));\n const self = this;\n if (this.settings.get('features.deviceFingerprinting')) {\n DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el)\n .then(function(fingerprint) {\n self.options.appState.set('deviceFingerprint', fingerprint);\n self.options.appState.set('username', self.model.get('username'));\n })\n .catch(function() {\n // Keep going even if device fingerprint fails\n self.options.appState.set('username', self.model.get('username'));\n })\n .finally(function() {\n self.doPrimaryAuth();\n });\n } else {\n self.doPrimaryAuth();\n }\n });\n },\n\n doPrimaryAuth : function() {\n if (this.settings.get('features.passwordlessAuth')) {\n const primaryAuthModel = new PrimaryAuthModel(\n {\n username: this.model.get('username'),\n multiOptionalFactorEnroll: this.options.settings.get('features.multiOptionalFactorEnroll'),\n settings: this.options.settings,\n appState: this.options.appState,\n },\n { parse: true }\n );\n\n // Events to set the transaction attributes on the app state.\n this.listenTo(primaryAuthModel, 'error', function(src, errObj) {\n this.toggleButtonState(false);\n this.model.trigger('error', this.model, errObj);\n });\n this.addModelListeners(primaryAuthModel);\n // Make the primary auth request\n primaryAuthModel.save();\n } else {\n this.options.appState.set('disableUsername', true);\n this.options.appState.trigger('navigate', 'signin');\n }\n },\n\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport RouterUtil from 'util/RouterUtil';\nimport Footer from 'views/enroll-factors/ManualSetupPushFooter';\nimport PhoneTextBox from 'views/enroll-factors/PhoneTextBox';\n\nfunction goToFactorActivation(view, step) {\n const url = RouterUtil.createActivateFactorUrl(\n view.options.appState.get('activatedFactorProvider'),\n view.options.appState.get('activatedFactorType'),\n step\n );\n\n view.options.appState.trigger('navigate', url);\n}\n\nfunction setStateValues(view) {\n let userPhoneNumber;\n let userCountryCode;\n\n if (view.model.get('activationType') === 'SMS') {\n userCountryCode = view.model.get('countryCode');\n userPhoneNumber = view.model.get('phoneNumber');\n }\n view.options.appState.set({\n factorActivationType: view.model.get('activationType'),\n userCountryCode: userCountryCode,\n userPhoneNumber: userPhoneNumber,\n });\n}\n\nfunction enrollFactor(view, factorType) {\n return view.model.doTransaction(function(transaction) {\n return transaction\n .prev()\n .then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: factorType,\n provider: 'OKTA',\n });\n\n return factor.enroll();\n })\n .then(function(trans) {\n let textActivationLinkUrl;\n let emailActivationLinkUrl;\n let sharedSecret;\n const res = trans.data;\n\n if (\n res &&\n res._embedded &&\n res._embedded.factor &&\n res._embedded.factor._embedded &&\n res._embedded.factor._embedded.activation\n ) {\n const factor = res._embedded.factor;\n\n // Shared secret\n sharedSecret = factor._embedded.activation.sharedSecret;\n\n if (factor._embedded.activation._links && factor._embedded.activation._links.send) {\n const activationSendLinks = factor._embedded.activation._links.send;\n\n const smsItem = _.findWhere(activationSendLinks, { name: 'sms' });\n\n // SMS activation url\n\n textActivationLinkUrl = smsItem ? smsItem.href : null;\n\n // Email activation url\n\n const emailItem = _.findWhere(activationSendLinks, { name: 'email' });\n\n emailActivationLinkUrl = emailItem ? emailItem.href : null;\n }\n }\n\n view.model.set({\n SMS: textActivationLinkUrl,\n EMAIL: emailActivationLinkUrl,\n sharedSecret: sharedSecret,\n });\n\n return trans;\n });\n });\n}\n\nexport default FormController.extend({\n className: 'enroll-manual-push',\n Model: function() {\n return {\n local: {\n activationType: ['string', true, this.options.appState.get('factorActivationType') || 'SMS'],\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n phoneNumber: 'string',\n SMS: ['string', false, this.options.appState.get('textActivationLinkUrl')],\n EMAIL: ['string', false, this.options.appState.get('emailActivationLinkUrl')],\n sharedSecret: ['string', false, this.options.appState.get('sharedSecret')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return countryCallingCode + phoneNumber;\n },\n },\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.cannotScanBarcode', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'step-manual-setup' },\n\n formChildren: function() {\n const instructions = this.settings.get('brandName')\n ? loc('enroll.totp.sharedSecretInstructions.specific', 'login', [this.settings.get('brandName')])\n : loc('enroll.totp.sharedSecretInstructions.generic', 'login');\n const children = [\n FormType.Input({\n name: 'activationType',\n label:loc('mfa.setupOptions', 'login'),\n type: 'select',\n wide: true,\n options: {\n SMS: loc('enroll.totp.sendSms', 'login'),\n EMAIL: loc('enroll.totp.sendEmail', 'login'),\n MANUAL: loc('enroll.totp.setupManually', 'login'),\n },\n }),\n FormType.Input({\n label:loc('mfa.country', 'login'),\n name: 'countryCode',\n type: 'select',\n wide: true,\n options: CountryUtil.getCountries(),\n showWhen: { activationType: 'SMS' },\n }),\n FormType.Input({\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-sms-phone',\n name: 'phoneNumber',\n input: PhoneTextBox,\n type: 'text',\n showWhen: { activationType: 'SMS' },\n }),\n FormType.View({\n View: View.extend({\n className: 'secret-key-instructions',\n attributes: { 'data-se': 'secret-key-instructions'},\n template: hbs`\n\n {{instructions}}\n
\n{{sharedSecretKey}}
\n\n {{instructions}}\n
\n{{sharedSecretKey}}
\n\\\n \\\n
',\n }),\n ],\n _checkStatus: function() {\n // start polling request\n this.transactionObject\n .poll()\n .then(resp => {\n if (resp.data && resp.status !== 'POLL') {\n this.options.appState.set('transaction', resp);\n return;\n }\n this.$('.okta-waiting-spinner').hide();\n let factorPollingIntervalSeconds = Math.ceil(resp.transaction.profile.refresh / 1000);\n this._startCountDown(factorPollingIntervalSeconds);\n })\n .catch(() => {\n this._stopCountDown();\n });\n },\n\n _startCountDown: function(factorPollingIntervalSeconds) {\n // start one second countdown for next poll request\n this.countDown = setInterval(() => {\n // update title after every second and check if countdown == 1 to poll again\n this._updateTitle(factorPollingIntervalSeconds);\n if (factorPollingIntervalSeconds === 0) {\n /* when countdown hits 0\n - stop current poll\n - show spinner\n - check status\n */\n this._stopCountDown();\n this.$('.okta-waiting-spinner').show();\n // start after a small delay so that the spinner does not get hidden too soon\n this.checkStatusTimeout = setTimeout(() => {\n this._checkStatus();\n }, 200);\n } else {\n // reduce countdown after every second\n factorPollingIntervalSeconds = factorPollingIntervalSeconds - 1;\n }\n }, 1000);\n },\n\n _updateTitle: function(factorPollingIntervalSeconds) {\n this.title = loc('polling.title', 'login', [factorPollingIntervalSeconds]);\n this.$el.find('.okta-form-title').text(this.title);\n },\n\n _stopCountDown: function() {\n // clear countdown setInterval\n if (this.countDown) {\n clearInterval(this.countDown);\n }\n // clear checkstatus setTimeout\n if (this.checkStatusTimeout) {\n clearInterval(this.checkStatusTimeout);\n }\n },\n\n initialize: function(options) {\n this.transactionObject = options.appState.get('transaction');\n this.factorPollingIntervalSeconds = Math.ceil(this.transactionObject.transaction.profile.refresh / 1000);\n this._updateTitle(this.factorPollingIntervalSeconds);\n this._startCountDown(this.factorPollingIntervalSeconds);\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n remove: function() {\n this.form._stopCountDown();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { $ } from 'okta';\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport BaseLoginController from 'util/BaseLoginController';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport CustomButtons from 'views/primary-auth/CustomButtons';\nimport PrimaryAuthForm from 'views/primary-auth/PrimaryAuthForm';\nimport Footer from 'views/shared/Footer';\nimport FooterRegistration from 'views/shared/FooterRegistration';\nexport default BaseLoginController.extend({\n className: 'primary-auth',\n\n state: { enabled: true },\n\n View: PrimaryAuthForm,\n\n constructor: function(options) {\n options.appState.unset('username');\n\n this.model = new PrimaryAuthModel(\n {\n multiOptionalFactorEnroll: options.settings.get('features.multiOptionalFactorEnroll'),\n settings: options.settings,\n appState: options.appState,\n },\n { parse: true }\n );\n\n BaseLoginController.apply(this, arguments);\n\n this.addListeners();\n\n // If social auth is configured, 'socialAuthPositionTop' will determine\n // the order in which the social auth and primary auth are shown on the screen.\n if (options.settings.get('hasConfiguredButtons')) {\n this.add(CustomButtons, {\n prepend: options.settings.get('socialAuthPositionTop'),\n options: {\n // To trigger an afterError event, we require the current controller\n currentController: this,\n },\n });\n }\n\n this.addFooter(options);\n\n this.setUsername();\n },\n\n addFooter: function(options) {\n this.add(new Footer(this.toJSON({ appState: options.appState })));\n\n if (options.settings.get('features.registration') || options.appState.get('isIdxStateToken')) {\n this.add(\n new FooterRegistration({\n settings: this.settings,\n appState: options.appState,\n })\n );\n }\n },\n\n setUsername: function() {\n const username = this.model.get('username');\n\n if (username) {\n this.options.appState.set('username', username);\n }\n },\n\n events: {\n 'focusout input[name=username]': function() {\n if (this.shouldComputeDeviceFingerprint() && this.model.get('username')) {\n const self = this;\n\n this.options.appState.trigger('loading', true);\n DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el)\n .then(function(fingerprint) {\n self.options.appState.set('deviceFingerprint', fingerprint);\n self.options.appState.set('username', self.model.get('username'));\n })\n .catch(function() {\n // Keep going even if device fingerprint fails\n self.options.appState.set('username', self.model.get('username'));\n })\n .finally(function() {\n self.options.appState.trigger('loading', false);\n });\n } else {\n this.options.appState.set('username', this.model.get('username'));\n }\n },\n 'focusin input': function(e) {\n $(e.target.parentElement).addClass('focused-input');\n },\n 'focusout input': function(e) {\n $(e.target.parentElement).removeClass('focused-input');\n },\n },\n\n // This model and the AppState both have a username property.\n // The controller updates the AppState's username when the user is\n // done editing (on blur) or deletes the username (see below).\n initialize: function() {\n this.options.appState.unset('deviceFingerprint');\n this.listenTo(this.model, 'change:username', function(model, value) {\n if (!value) {\n // reset AppState to an undefined user.\n this.options.appState.set('username', '');\n }\n });\n this.listenTo(this.model, 'save', function() {\n this.state.set('enabled', false);\n });\n this.listenTo(this.model, 'error', function() {\n this.state.set('enabled', true);\n });\n this.listenTo(this.state, 'togglePrimaryAuthButton', function(buttonState) {\n this.toggleButtonState(buttonState);\n });\n },\n\n shouldComputeDeviceFingerprint: function() {\n return (\n this.settings.get('features.securityImage') &&\n this.settings.get('features.deviceFingerprinting') &&\n this.settings.get('features.useDeviceFingerprintForSecurityImage')\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'password-reset-email-sent',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'password.forgot.emailSent.title', 'login'),\n subtitle: function() {\n const username = this.options.appState.get('username');\n\n return loc('password.forgot.emailSent.desc', 'login', [username]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'pwd-reset-email-sent' },\n formChildren: function() {\n let children = [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{alert}}\\\n '\n ),\n getTemplateData: function() {\n return { alert: loc('password.forgot.emailSent.title', 'login') };\n },\n }),\n }),\n ];\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n children.push(\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n const self = this;\n\n return this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(function() {\n self.state.set('navigateDir', Enums.DIRECTION_BACK);\n self.options.appState.trigger('navigate', '');\n });\n },\n })\n );\n }\n\n return children;\n },\n },\n\n initialize: function(options) {\n this.settings.callGlobalSuccess(Enums.FORGOT_PASSWORD_EMAIL_SENT, {\n username: options.appState.get('username'),\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'recovery-challenge',\n Model: {\n props: {\n passCode: ['string', true],\n },\n local: {\n ableToResend: 'boolean',\n },\n resendCode: function() {\n // Note: This does not require a trapAuthResponse because Backbone's\n // router will not navigate if the url path is the same\n this.limitResending();\n return this.doTransaction(function(transaction) {\n return transaction.resend();\n });\n },\n limitResending: function() {\n this.set({ ableToResend: false });\n _.delay(_.bind(this.set, this), Enums.API_RATE_LIMIT, { ableToResend: true });\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.verify({\n passCode: this.get('passCode'),\n });\n });\n },\n },\n Form: {\n autoSave: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n title: function() {\n if (this.options.appState.get('factorType') === Enums.RECOVERY_FACTOR_TYPE_CALL) {\n return loc('recoveryChallenge.call.title', 'login');\n } else {\n return loc('recoveryChallenge.sms.title', 'login');\n }\n },\n className: 'recovery-challenge',\n initialize: function() {\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('mfa.resendCode', 'login'),\n attributes: { 'data-se': 'resend-button' },\n className: 'button sms-request-button margin-top-30',\n click: function() {\n this.model.resendCode();\n },\n initialize: function() {\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.options.title = loc('mfa.resendCode', 'login');\n this.enable();\n this.render();\n } else {\n this.options.title = loc('mfa.sent', 'login');\n this.disable();\n this.render();\n }\n });\n },\n }),\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-sms-phone',\n name: 'passCode',\n input: TextBox,\n type: 'text',\n }),\n ];\n },\n },\n\n events: {\n 'click .send-email-link': function(e) {\n e.preventDefault();\n const settings = this.model.settings;\n const username = this.options.appState.get('username');\n const recoveryType = this.options.appState.get('recoveryType');\n\n this.model.startTransaction(function(authClient) {\n // The user could have landed here via the Forgot Password/Unlock Account flow\n switch (recoveryType) {\n case Enums.RECOVERY_TYPE_PASSWORD:\n return authClient.forgotPassword({\n username: settings.transformUsername(username, Enums.FORGOT_PASSWORD),\n factorType: Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n });\n case Enums.RECOVERY_TYPE_UNLOCK:\n return authClient.unlockAccount({\n username: settings.transformUsername(username, Enums.UNLOCK_ACCOUNT),\n factorType: Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n });\n default:\n return;\n }\n });\n },\n },\n\n initialize: function() {\n const recoveryType = this.options.appState.get('recoveryType');\n let sendEmailLink;\n\n switch (recoveryType) {\n case Enums.RECOVERY_TYPE_PASSWORD:\n sendEmailLink = hbs`{{i18n code=\"password.forgot.code.notReceived\" bundle=\"login\"}}`;\n break;\n case Enums.RECOVERY_TYPE_UNLOCK:\n sendEmailLink = hbs`{{i18n code=\"account.unlock.code.notReceived\" bundle=\"login\"}}`;\n break;\n default:\n break;\n }\n\n if (sendEmailLink && this.settings.get('features.emailRecovery')) {\n this.add(\n View.extend({\n className: 'link send-email-link',\n tagName: 'a',\n attributes: {\n href: '#',\n 'data-se': 'send-email-link',\n },\n template: sendEmailLink,\n })\n );\n }\n\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n\n postRender: function() {\n this.model.limitResending();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'recovery-loading',\n\n Model: {},\n Form: {\n noButtonBar: true,\n },\n\n initialize: function(options) {\n const self = this;\n\n return this.model\n .startTransaction(function(authClient) {\n return authClient.verifyRecoveryToken({\n recoveryToken: options.token,\n });\n })\n .catch(function() {\n self.options.appState.trigger('loading', false);\n self.options.appState.trigger('removeLoading');\n });\n },\n\n preRender: function() {\n this.options.appState.trigger('loading', true);\n },\n\n trapAuthResponse: function() {\n this.options.appState.trigger('loading', false);\n return false;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterSignout from 'views/shared/FooterSignout';\nimport TextBox from 'views/shared/TextBox';\nexport default FormController.extend({\n className: 'recovery-question',\n Model: {\n props: {\n answer: ['string', true],\n showAnswer: 'boolean',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.answer({ answer: this.get('answer') });\n });\n },\n },\n Form: {\n autoSave: true,\n save: function() {\n switch (this.options.appState.get('recoveryType')) {\n case 'PASSWORD':\n return loc('password.forgot.question.submit', 'login');\n case 'UNLOCK':\n return loc('account.unlock.question.submit', 'login');\n default:\n return loc('mfa.challenge.verify', 'login');\n }\n },\n title: function() {\n switch (this.options.appState.get('recoveryType')) {\n case 'PASSWORD':\n return loc('password.forgot.question.title', 'login');\n case 'UNLOCK':\n return loc('account.unlock.question.title', 'login');\n default:\n return '';\n }\n },\n formChildren: function() {\n return [\n FormType.Input({\n label: this.options.appState.get('recoveryQuestion'),\n placeholder: loc('mfa.challenge.answer.placeholder', 'login'),\n name: 'answer',\n input: TextBox,\n type: 'password',\n initialize: function() {\n this.listenTo(this.model, 'change:showAnswer', function() {\n const type = this.model.get('showAnswer') ? 'text' : 'password';\n\n this.getInputs()[0].changeType(type);\n });\n },\n }),\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: loc('mfa.challenge.answer.showAnswer', 'login'),\n className: 'recovery-question-show margin-btm-0',\n name: 'showAnswer',\n type: 'checkbox',\n }),\n ];\n },\n },\n initialize: function() {\n if (!this.settings.get('features.hideBackToSignInForReset')) {\n this.addFooter(FooterSignout);\n }\n },\n});\n","/* eslint-disable max-depth */\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'util/FormController';\nexport default FormController.extend({\n className: 'refresh-auth-state',\n\n Model: {},\n\n Form: {\n noButtonBar: true,\n },\n\n preRender: function() {\n const appState = this.options.appState;\n const token = this.options.token;\n\n this.model.startTransaction(function(authClient) {\n appState.trigger('loading', true);\n if (token) {\n return authClient.tx.introspect({\n stateToken: token,\n });\n }\n\n // get stateToken from cookie\n // currently only applies to old pipeline\n if (authClient.tx.exists()) {\n return authClient.tx.resume();\n }\n\n appState.trigger('navigate', '');\n });\n },\n\n remove: function() {\n this.options.appState.trigger('loading', false);\n return FormController.prototype.remove.apply(this, arguments);\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n events: {\n 'click .back-btn': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n className: 'registration-complete',\n Model: function() {},\n initialize: function() {\n this.settings.callGlobalSuccess(Enums.ACTIVATION_EMAIL_SENT, {\n username: this.options.appState.get('username'),\n });\n },\n Form: {\n noButtonBar: true,\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n \\\n \\\n
\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n getTemplateData: function() {\n return {\n desc: loc('registration.complete.confirm.text', 'login'),\n title: loc('registration.complete.title', 'login'),\n };\n },\n }),\n }),\n ];\n },\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { _, Backbone, Model, loc, Form, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport LoginModel from 'models/LoginModel';\nimport RegistrationSchema from 'models/RegistrationSchema';\nimport Q from 'q';\nimport BaseLoginController from 'util/BaseLoginController';\nimport Enums from 'util/Enums';\nimport Errors from 'util/Errors';\nimport RegistrationFormFactory from 'util/RegistrationFormFactory';\nimport Util from 'util/Util';\nimport SubSchema from 'views/registration/SubSchema';\nconst RegistrationControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default BaseLoginController.extend({\n className: 'registration',\n initialize: function() {\n const RegistrationControllerSchema = RegistrationSchema.extend({\n settings: this.options.settings,\n url: this.options.settings.get('baseUrl') + '/api/v1/registration/form',\n });\n // setup schema\n\n const schema = new RegistrationControllerSchema();\n\n this.state.set('schema', schema);\n },\n getRegistrationApiUrl: function() {\n const defaultPolicyId = this.settings.get('defaultPolicyId');\n // default policyId\n\n const orgPolicyId = this.options.settings.get('policyId');\n // org policyId\n\n const apiUrl = defaultPolicyId\n ? this.getRegistrationPolicyApi(defaultPolicyId)\n : this.getRegistrationPolicyApi(orgPolicyId);\n\n return apiUrl;\n },\n getRegistrationPolicyApi: function(policyId) {\n return this.options.settings.get('baseUrl') + '/api/v1/registration/' + policyId;\n },\n doPostSubmit: function() {\n if (this.model.get('activationToken')) {\n const self = this;\n // register via activation token\n\n self.settings.callGlobalSuccess(Enums.REGISTRATION_COMPLETE, {\n activationToken: this.model.get('activationToken'),\n });\n\n const loginModel = new LoginModel({\n settings: self.model.appState.settings,\n });\n\n loginModel.loginWithActivationToken(this.model.get('activationToken')).then(function(transaction) {\n self.model.trigger('setTransaction', transaction);\n });\n } else {\n // register via activation email\n this.model.appState.set('username', this.model.get('email'));\n this.model.appState.trigger('navigate', 'signin/register-complete');\n }\n },\n registerUser: function(postData) {\n const self = this;\n\n this.model.attributes = postData;\n // Model.save returns a jqXHR\n Backbone.Model.prototype.save\n .call(this.model)\n .then(function() {\n self.model.trigger('startSaving');\n const activationToken = self.model.get('activationToken');\n const postSubmitData = activationToken ? activationToken : self.model.get('email');\n\n self.settings.postRegistrationSubmit(\n postSubmitData,\n function() {\n self.doPostSubmit();\n },\n function(errors) {\n self.showErrors(errors);\n }\n );\n })\n .fail((err) => {\n const responseJSON = err.responseJSON;\n\n if (responseJSON && responseJSON.errorCauses.length) {\n const { errorCode, errorCauses } = responseJSON;\n const { errorSummary, reason, location } = errorCauses[0];\n\n const isNotUniqueValue =\n errorCode === 'E0000001' &&\n reason === 'UNIQUE_CONSTRAINT';\n\n if (isNotUniqueValue) {\n this.renderIsNotUniqueError(responseJSON);\n }\n\n this.renderLegacyLocationErrorIfNeeded(location, errorSummary);\n\n Util.triggerAfterError(\n this,\n new Errors.RegistrationError(errorSummary)\n );\n }\n });\n },\n\n renderIsNotUniqueError: function(error) {\n const { location } = error.errorCauses[0];\n const errorSummary = loc(\n 'registration.error.userName.notUniqueWithinOrg',\n 'login',\n [location]\n );\n // replace generic error message with more specific one\n // without using backbone events because there was a race condition\n // between clearing and triggering errors\n this.$el.find('.okta-form-infobox-error p').text(errorSummary);\n },\n\n renderLegacyLocationErrorIfNeeded: function(location, errorSummary) {\n // replace generic error message with errorSummary for v1 SIW\n // this makes sure that with legacy location that starts with `data.userProfile`\n // we still see the errorSummary in the error banner instead of only a generic error\n // See example in https://developer.okta.com/docs/reference/registration-hook/#sample-json-payload-of-request\n if (location && /^data\\.userProfile.*/.test(location)) {\n this.$el.find('.okta-form-infobox-error p').text(errorSummary);\n }\n },\n\n createRegistrationModel: function(modelProperties) {\n const self = this;\n const RegistrationControllerModel = Model.extend({\n url: self.getRegistrationApiUrl() + '/register',\n settings: this.settings,\n appState: this.options.appState,\n props: modelProperties,\n local: {\n activationToken: 'string',\n },\n toJSON: function() {\n const data = Model.prototype.toJSON.apply(this, arguments);\n\n return {\n userProfile: data,\n relayState: this.settings.get('relayState'),\n };\n },\n parse: function(resp) {\n this.set('activationToken', resp.activationToken);\n delete resp.activationToken;\n return resp;\n },\n save: function() {\n this.settings.preRegistrationSubmit(\n this.attributes,\n function(postData) {\n self.registerUser(postData);\n },\n function(errors) {\n self.showErrors(errors);\n }\n );\n },\n });\n\n return new RegistrationControllerModel();\n },\n showErrors: function(error, hideRegisterButton) {\n //for parseSchema error hide form and show error at form level\n if (error.callback === 'parseRegistrationSchema' && error.errorCauses) {\n error.errorSummary = _.clone(error.errorCauses[0].errorSummary);\n delete error.errorCauses;\n }\n //show error on form\n this.model.trigger('error', this.model, {\n responseJSON: error,\n });\n\n //throw registration error\n const errMsg = error.callback ? error.callback + ':' + error.errorSummary : error.errorSummary;\n\n Util.triggerAfterError(this, new Errors.RegistrationError(errMsg));\n\n if (hideRegisterButton) {\n this.$el.find('.button-primary').hide();\n }\n },\n fetchInitialData: function() {\n const self = this;\n\n // register parse complete event listener\n self.state.get('schema').on('parseComplete', function(updatedSchema) {\n const modelProperties = updatedSchema.properties.createModelProperties();\n\n self.settings.set('defaultPolicyId', updatedSchema.properties.defaultPolicyId);\n\n // create model\n self.model = self.createRegistrationModel(modelProperties);\n // create form\n const RegistrationControllerForm = Form.extend({\n layout: 'o-form-theme',\n autoSave: true,\n noCancelButton: true,\n title: loc('registration.form.title', 'login'),\n save: loc('registration.form.submit', 'login'),\n modelEvents : { 'invalid' : 'modifyErrors' },\n hasSavingState: true,\n customSavingState: {\n start: 'startSaving',\n stop: 'stopSaving',\n },\n modifyErrors: function(model, errorResp) {\n // overwrite courage errorResp object to show custom error message\n for (let formFieldName in errorResp) {\n if (errorResp[formFieldName] === 'model.validation.field.string.minLength') {\n errorResp[formFieldName] = loc('registration.model.validation.field.string.too.short', 'login', \n [model.props[formFieldName].minLength]\n );\n } else if (errorResp[formFieldName] === 'model.validation.field.string.maxLength') {\n errorResp[formFieldName] = loc('registration.model.validation.field.string.too.long', 'login', \n [model.props[formFieldName].maxLength + 1]\n );\n }\n }\n },\n });\n const form = new RegistrationControllerForm(self.toJSON());\n\n // add form\n self.add(form);\n // add footer\n self.footer = new self.Footer(self.toJSON());\n self.add(self.footer);\n self.addListeners();\n if (updatedSchema.error) {\n self.showErrors(updatedSchema.error, true);\n } else {\n // add fields\n updatedSchema.properties.each(function(schemaProperty) {\n const inputOptions = RegistrationFormFactory.createInputOptions(schemaProperty);\n const subSchemas = schemaProperty.get('subSchemas');\n const name = schemaProperty.get('name');\n\n form.addInput(inputOptions);\n if (name === 'password' && subSchemas) {\n form.add(SubSchema.extend({ id: 'subschemas-' + name, subSchemas: subSchemas }));\n }\n });\n const requiredFieldsLabel = hbs('{{label}}')({\n label: loc('registration.required.fields.label', 'login'),\n });\n\n form.add(requiredFieldsLabel);\n }\n });\n // fetch schema from API, returns a jqXHR. Wrap it in a Q\n return Q(this.state.get('schema').fetch());\n },\n Footer: RegistrationControllerFooter,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'util/ValidationUtil';\nimport ContactSupport from 'views/shared/ContactSupport';\nimport TextBox from 'views/shared/TextBox';\nconst UnlockAccountControllernoFactorsError = View.extend({\n template: hbs`\n {{title}}
\\\n{{desc}}
\\\n \n \n
\n `,\n});\nconst UnlockAccountControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{#if helpSupportNumber}}\\\n \\\n {{i18n code=\"mfa.noAccessToEmail\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-contact-support': function(e) {\n e.preventDefault();\n this.state.trigger('contactSupport');\n this.$('.js-contact-support').hide();\n },\n },\n getTemplateData: function() {\n return this.settings.pick('helpSupportNumber');\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default FormController.extend({\n className: 'account-unlock',\n Model: {\n props: {\n username: ['string', true],\n factorType: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateUsername(this);\n },\n save: function() {\n const self = this;\n\n return this.startTransaction(function(authClient) {\n return authClient.unlockAccount({\n username: self.settings.transformUsername(self.get('username'), Enums.UNLOCK_ACCOUNT),\n factorType: self.get('factorType'),\n });\n }).catch(function() {\n //need empty fail handler on model to display errors on form\n });\n },\n },\n Form: {\n noButtonBar: true,\n title: _.partial(loc, 'account.unlock.title', 'login'),\n formChildren: function() {\n const smsEnabled = this.settings.get('features.smsRecovery');\n /*eslint complexity: [2, 9] max-statements: [2, 24] */\n\n const callEnabled = this.settings.get('features.callRecovery');\n const emailEnabled = this.settings.get('features.emailRecovery');\n const noFactorsEnabled = !(smsEnabled || callEnabled || emailEnabled);\n const formChildren = [];\n const form = this;\n\n if (noFactorsEnabled) {\n this.add(UnlockAccountControllernoFactorsError, '.o-form-error-container');\n } else {\n formChildren.push(\n FormType.Input({\n label: loc('account.unlock.email.or.username.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'account.unlock.email.or.username.tooltip',\n 'account.unlock.email.or.username.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'account-recovery-username',\n type: 'text',\n inlineValidation: false,\n })\n );\n\n if (smsEnabled || callEnabled) {\n formChildren.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"account.unlock.noFactorsEnabled\" bundle=\"login\"}}
\n\\\n {{i18n code=\"recovery.mobile.hint\" bundle=\"login\" arguments=\"mobileFactors\"}}\\\n
'\n ),\n getTemplateData: function() {\n let mobileFactors;\n\n if (smsEnabled && callEnabled) {\n mobileFactors = loc('recovery.smsOrCall');\n } else if (callEnabled) {\n mobileFactors = loc('recovery.call');\n } else {\n mobileFactors = loc('recovery.sms');\n }\n return { mobileFactors: mobileFactors };\n },\n }),\n })\n );\n }\n\n if (smsEnabled) {\n this.$el.addClass('forgot-password-sms-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'sms-button',\n 'account.unlock.sendText',\n Enums.RECOVERY_FACTOR_TYPE_SMS,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_SMS);\n }\n if (callEnabled) {\n this.$el.addClass('forgot-password-call-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'call-button',\n 'account.unlock.voiceCall',\n Enums.RECOVERY_FACTOR_TYPE_CALL,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_CALL);\n }\n if (emailEnabled) {\n this.$el.addClass('forgot-password-email-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'email-button',\n 'account.unlock.sendEmail',\n Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n form\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_EMAIL);\n }\n }\n\n return formChildren;\n },\n initialize: function() {\n this.listenTo(this, 'save', function() {\n this.options.appState.set('username', this.model.get('username'));\n this.model.save();\n });\n\n this.listenTo(this.state, 'contactSupport', function() {\n this.add(ContactSupport, '.o-form-error-container');\n });\n },\n setDefaultFactorType: function(factorType) {\n if (_.isEmpty(this.model.get('factorType'))) {\n this.model.set('factorType', factorType);\n }\n },\n createRecoveryFactorButton: function(className, labelCode, factorType, form) {\n return FormType.Button({\n attributes: { 'data-se': className },\n className: 'button button-primary button-wide ' + className,\n title: loc(labelCode, 'login'),\n click: function() {\n form.clearErrors();\n if (this.model.isValid()) {\n this.model.set('factorType', factorType);\n form.trigger('save', this.model);\n }\n },\n });\n },\n },\n Footer: UnlockAccountControllerFooter,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport Enums from 'util/Enums';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nexport default FormController.extend({\n className: 'account-unlock-email-sent',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'account.unlock.emailSent.title', 'login'),\n subtitle: function() {\n const username = this.options.appState.get('username');\n\n return loc('account.unlock.emailSent.desc', 'login', [username]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'unlock-email-sent' },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n }),\n ];\n },\n },\n\n initialize: function(options) {\n this.settings.callGlobalSuccess(Enums.UNLOCK_ACCOUNT_EMAIL_SENT, {\n username: options.appState.get('username'),\n });\n },\n});\n","/*!\n * Copyright (c) 2018-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'verify-custom-factor custom-factor-form',\n\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n if (this.settings.get('features.skipIdpFactorVerificationBtn') &&\n !this.appState.get('lastFailedChallengeFactorData')) {\n this.set('provider', 'CUSTOM');\n this.set('factorType', 'claims_provider');\n this.save();\n }\n },\n\n save: function() {\n const rememberDevice = !!this.get('rememberDevice');\n\n return this.manageTransaction((transaction, setTransaction) => {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n const factor = _.findWhere(transaction.factors, {\n provider: this.get('provider'),\n factorType: this.get('factorType'),\n });\n\n return factor\n .verify(data)\n .then(trans => {\n setTransaction(trans);\n const url = this.appState.get('verifyCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n })\n .catch(function(err) {\n throw err;\n });\n });\n },\n },\n\n Form: function() {\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere({\n provider: this.options.provider,\n factorType: this.options.factorType,\n });\n const vendorName = factor.get('vendorName');\n const saveText = loc('mfa.challenge.verify', 'login');\n const lastFailedChallengeFactorData = this.options.appState.get('lastFailedChallengeFactorData');\n let subtitle = loc('verify.customFactor.subtitle', 'login', [vendorName]);\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn') && !lastFailedChallengeFactorData) {\n subtitle = loc('verify.customFactor.subtitle.redirect', 'login', [vendorName]);\n\n this.listenTo(this.model, 'error', () => {\n subtitle = loc('verify.customFactor.subtitle', 'login', [vendorName]);\n this.$('.o-form-explain').text(subtitle);\n });\n }\n return {\n autoSave: true,\n title: vendorName,\n save: saveText,\n subtitle: subtitle,\n attributes: { 'data-se': 'factor-custom' },\n initialize: function() {\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n\n formChildren: function() {\n const result = [];\n const lastFailedChallengeFactorData = this.options.appState.get('lastFailedChallengeFactorData');\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn') && !lastFailedChallengeFactorData) {\n result.push(\n FormType.View({\n View:\n ''\n })\n );\n }\n\n if (lastFailedChallengeFactorData) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: lastFailedChallengeFactorData.errorMessage }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n return result;\n },\n };\n },\n\n postRender() {\n if (this.settings.get('features.skipIdpFactorVerificationBtn') &&\n !this.options.appState.get('lastFailedChallengeFactorData')) {\n this.$('.o-form-button-bar').hide();\n this.$('.okta-waiting-spinner').show();\n }\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaChallenge')) {\n return true;\n }\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n initialize: function() {\n this.model.set('provider', this.options.provider);\n this.model.set('factorType', this.options.factorType);\n\n if (this.settings.get('features.skipIdpFactorVerificationBtn')) {\n this.listenTo(this.model, 'error', () => {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n });\n }\n this.addFooter(FooterMFA);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint camelcase: 0 */\nimport { $, _, loc } from 'okta';\nimport Duo from 'duo';\nimport Q from 'q';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nexport default FormController.extend({\n className: 'mfa-verify-duo duo-form',\n\n Model: {\n props: {\n host: 'string',\n signature: 'string',\n postAction: 'string',\n factorId: 'string',\n stateToken: 'string',\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n },\n\n getInitOptions: function() {\n const rememberDevice = !!this.get('rememberDevice');\n\n return this.doTransaction(function(transaction) {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n const factor = _.findWhere(transaction.factors, {\n provider: 'DUO',\n factorType: 'web',\n });\n\n return factor.verify(data).catch(function(err) {\n // Clean up the cookie on failure.\n throw err;\n });\n }, true /* rethrow errors */);\n },\n\n verify: function(signedResponse) {\n const url = this.get('postAction');\n const factorId = this.get('factorId');\n const self = this;\n let data = {\n id: factorId,\n stateToken: this.get('stateToken'),\n sig_response: signedResponse,\n };\n // Note: We should be doing this in OktaAuth! Fix when it's updated.\n\n const rememberDevice = this.get('rememberDevice');\n // We don't actually use authClient.post() here (unlike all the other cases in the\n // sign-in widget) since the endpoint is wired to accept serialized form post instead\n // of a JSON post ($.post() is different from authClient.post() in that in $.post(),\n // jquery decides the Content-Type instead of it being a JSON type). Enroll/Verify DUO\n // are the only two places where we actually do this.\n // NOTE - If we ever decide to change this, we should test this very carefully.\n\n return Q($.post(url, data))\n .then(function() {\n return self.doTransaction(function(transaction) {\n let data;\n\n if (rememberDevice) {\n data = { rememberDevice: rememberDevice };\n }\n return transaction.poll(data);\n });\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n });\n },\n },\n\n Form: {\n autoSave: true,\n noButtonBar: true,\n title: _.partial(loc, 'factor.duo'),\n attributes: { 'data-se': 'factor-duo' },\n\n postRender: function() {\n this.add('');\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n Duo.init({\n host: this.model.get('host'),\n sig_request: this.model.get('signature'),\n iframe: this.$('iframe').get(0),\n post_action: _.bind(this.model.verify, this.model),\n });\n },\n },\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model.getInitOptions().then(function(trans) {\n const res = trans.data;\n\n if (\n !res._embedded ||\n !res._embedded.factor ||\n !res._embedded.factor._embedded ||\n !res._embedded.factor._embedded.verification\n ) {\n throw new Error('Response does not have duo verification options');\n }\n const verification = res._embedded.factor._embedded.verification;\n\n self.model.set({\n host: verification.host,\n signature: verification.signature,\n postAction: verification._links.complete.href,\n factorId: res._embedded.factor.id,\n stateToken: res.stateToken,\n });\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaChallenge')) {\n return true;\n }\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, $, loc, View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport FooterWithBackLink from 'views/shared/FooterWithBackLink';\nlet { Util } = internal.util;\nexport default FormController.extend({\n className: 'piv-cac-card',\n Model: {\n save: async function() {\n this.trigger('request');\n const self = this;\n const pivConfig = this.settings.get('piv');\n const data = {\n fromURI: this.settings.get('relayState'),\n isCustomDomain: pivConfig.isCustomDomain,\n };\n\n try {\n await this.getCert(pivConfig.certAuthUrl);\n const res = await this.postCert(pivConfig.certAuthUrl, data);\n Util.redirect(res.redirectUrl);\n } catch (err) {\n if (_.isEmpty(err.responseJSON) && !err.responseText) {\n err.responseJSON = {\n errorSummary: loc('piv.cac.error', 'login'),\n };\n }\n self.trigger('error', self, err);\n }\n },\n\n getCert: function(certAuthUrl) {\n return $.get({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n\n postCert: function(certAuthUrl, data) {\n return $.post({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n data: JSON.stringify(data),\n contentType: 'text/plain',\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'piv.cac.title', 'login'),\n className: 'piv-cac-card',\n noCancelButton: true,\n save: _.partial(loc, 'retry', 'login'),\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n
'\n ),\n }),\n }),\n ],\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n\n postRender: function() {\n _.defer(() => {\n this.model.save();\n });\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterWithBackLink,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport Errors from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nfunction getRegisteredKeysSequence(factors) {\n const keys = [];\n\n _.each(factors, function(factor) {\n keys.push({\n version: factor.profile.version,\n keyHandle: factor.profile.credentialId,\n });\n });\n return keys;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-u2f',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'u2f',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n }\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let registeredKeys;\n let appId;\n let nonce;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n appId = factors[0]['profile']['appId'];\n nonce = transaction.challenge.nonce;\n registeredKeys = getRegisteredKeysSequence(factors);\n } else {\n const factorData = transaction.factor;\n\n appId = factorData.profile.appId;\n nonce = factorData.challenge.nonce;\n registeredKeys = [{ version: FidoUtil.getU2fVersion(), keyHandle: factorData.profile.credentialId }];\n }\n self.trigger('request');\n\n const deferred = Q.defer();\n\n u2f.sign(appId, nonce, registeredKeys, function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n const isOneFactor = self.options.appState.get('factors').length === 1;\n\n deferred.reject(\n new Errors.U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fVerifyErrorMessageByCode(data.errorCode, isOneFactor),\n },\n },\n })\n );\n } else {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor\n .verify({\n clientData: data.clientData,\n signatureData: data.signatureData,\n rememberDevice: rememberDevice,\n })\n .then(deferred.resolve);\n }\n });\n return deferred.promise;\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.u2f', 'login'),\n className: 'verify-u2f-form',\n noCancelButton: true,\n save: _.partial(loc, 'verify.u2f.retry', 'login'),\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"piv.cac.card.insert\" bundle=\"login\"}}
\\\n \\\n\\\n
'\n ),\n }),\n })\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n result.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return result;\n },\n\n postRender: function() {\n _.defer(() => {\n if (FidoUtil.isU2fAvailable()) {\n this.model.save();\n } else {\n this.$('[data-se=\"u2f-waiting\"]').addClass('hide');\n }\n });\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport CryptoUtil from 'util/CryptoUtil';\nimport Errors from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\n\nfunction getAllowCredentials(factors) {\n const allowCredentials = [];\n\n _.each(factors, function(factor) {\n allowCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(factor.profile.credentialId),\n });\n });\n return allowCredentials;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-webauthn',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n this.appState.on('factorSwitched signOut', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'webauthn',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n }\n\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let allowCredentials;\n let challenge;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n challenge = transaction.challenge;\n allowCredentials = getAllowCredentials(factors);\n } else {\n const factorData = transaction.factor;\n\n challenge = factorData.challenge;\n allowCredentials = getAllowCredentials([factorData]);\n }\n self.trigger('request');\n // verify via browser webauthn js\n\n const options = _.extend({}, challenge, {\n allowCredentials: allowCredentials,\n challenge: CryptoUtil.strToBin(challenge.challenge),\n });\n\n // AbortController is not supported in IE11\n // eslint-disable-next-line compat/compat\n self.webauthnAbortController = new AbortController();\n return new Q(\n // navigator.credentials is not supported in IE11\n // eslint-disable-next-line compat/compat\n navigator.credentials.get({\n publicKey: options,\n signal: self.webauthnAbortController.signal,\n })\n )\n .then(function(assertion) {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor.verify({\n clientData: CryptoUtil.binToStr(assertion.response.clientDataJSON),\n authenticatorData: CryptoUtil.binToStr(assertion.response.authenticatorData),\n signatureData: CryptoUtil.binToStr(assertion.response.signature),\n rememberDevice: rememberDevice,\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new Errors.WebauthnAbortError();\n } else {\n throw new Errors.WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.webauthn.biometric', 'login'),\n className: 'verify-webauthn-form',\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n children.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '{{i18n code=\"verify.u2f.instructions\" bundle=\"login\"}}
\\\n{{i18n code=\"verify.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n \\\n\\\n
'\n ),\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n children.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar [type=\"submit\"]')[0].value = loc('verify.u2f.retry', 'login');\n this.$('.o-form-button-bar').show();\n },\n },\n\n postRender: function() {\n _.defer(() => {\n // Trigger browser prompt automatically for other browsers for better UX.\n if (webauthn.isNewApiAvailable() && !BrowserFeatures.isSafari()) {\n this.model.save();\n }\n });\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FormController from 'util/FormController';\nimport FormType from 'util/FormType';\nimport webauthn from 'util/webauthn';\nimport HtmlErrorMessageView from 'views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'views/shared/FooterMFA';\nimport Spinner from 'views/shared/Spinner';\nexport default FormController.extend({\n className: 'mfa-verify verify-windows-hello',\n Model: {\n local: {\n __autoTriggered__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n const model = this;\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.verify().then(function(verifyData) {\n const factorData = verifyData.factor;\n\n return webauthn\n .getAssertion(factorData.challenge.nonce, [{ id: factorData.profile.credentialId }])\n .then(function(assertion) {\n return factor.verify({\n authenticatorData: assertion.authenticatorData,\n clientData: assertion.clientData,\n signatureData: assertion.signature,\n });\n })\n .then(function(data) {\n model.trigger('sync');\n model.trigger('signIn');\n return data;\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.windowsHello', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('verify.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'verify.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n signIn: '_successEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n postRender: function() {\n if (this.options.appState.get('factors').length === 1 && !this.model.get('__autoTriggered__')) {\n this.model.set('__autoTriggered__', true);\n this.model.save();\n }\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('verify.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('verify.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n this.$('.o-form-button-bar').removeClass('hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotFoundError':\n message = this.options.appState.get('factors').length > 1\n ? loc('verify.windowsHello.error.notFound.selectAnother', 'login')\n : loc('verify.windowsHello.error.notFound', 'login');\n break;\n\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n },\n\n _successEnrollment: function() {\n this.subtitle = this.settings.get('brandName')\n ? loc('verify.windowsHello.subtitle.signingIn.specific', 'login', [this.settings.get('brandName')])\n : loc('verify.windowsHello.subtitle.signingIn.generic', 'login');\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","// This is the primary export for the CommonJS module.\n// DO NOT CONVERT TO TYPESCRIPT - for backward compatibility we need to use `module.exports` not `export default`\n\nconst OktaSignIn = require('./widget/OktaSignIn').default;\n\nmodule.exports = OktaSignIn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, Model } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Factor from 'models/Factor';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Errors from 'util/Errors';\nconst DEFAULT_APP_LOGO = '/img/logos/default.png';\n\n// Keep track of stateMachine with this special model. Some reasons to not\n// keep it generic:\n// 1. We know exactly what we're using appState for by requiring props\n// 2. Can have some derived functions to help us translate the lastAuthRes\n\nconst USER_NOT_SEEN_ON_DEVICE = '/img/security/unknown.png';\nconst UNDEFINED_USER = '/img/security/default.png';\nconst NEW_USER = '/img/security/unknown-device.png';\nconst NEW_USER_IMAGE_DESCRIPTION = '';\nconst UNDEFINED_USER_IMAGE_DESCRIPTION = '';\nconst UNKNOWN_IMAGE_DESCRIPTION = '';\nconst securityImageUrlTpl = hbs('{{baseUrl}}/login/getimage?username={{username}}');\n\nfunction getSecurityImage(baseUrl, username, deviceFingerprint) {\n // When the username is empty, we want to show the default image.\n if (_.isEmpty(username) || _.isUndefined(username)) {\n return Q({\n securityImage: UNDEFINED_USER,\n securityImageDescription: UNDEFINED_USER_IMAGE_DESCRIPTION,\n });\n }\n\n // Reserved characters in the username must be escaped before the query can be safely executed\n username = encodeURIComponent(username);\n const url = securityImageUrlTpl({ baseUrl: baseUrl, username: username });\n const data = {\n url: url,\n dataType: 'json',\n };\n\n if (deviceFingerprint) {\n data['headers'] = { 'X-Device-Fingerprint': deviceFingerprint };\n }\n return Q($.ajax(data)).then(function(res) {\n if (res.pwdImg === USER_NOT_SEEN_ON_DEVICE) {\n // When we get an unknown.png security image from OKTA,\n // we want to show the unknown-device security image.\n // We are mapping the server's img url to a new one because\n // we still need to support the original login page.\n return {\n securityImage: NEW_USER,\n securityImageDescription: NEW_USER_IMAGE_DESCRIPTION,\n };\n }\n return {\n securityImage: res.pwdImg,\n securityImageDescription: res.imageDescription || UNKNOWN_IMAGE_DESCRIPTION,\n };\n });\n}\n\nfunction getMinutesString(factorLifetimeInMinutes) {\n if (factorLifetimeInMinutes > 60 && factorLifetimeInMinutes <= 1440) {\n const lifetimeInHours = factorLifetimeInMinutes / 60;\n\n return loc('hours', 'login', [lifetimeInHours]);\n } else if (factorLifetimeInMinutes > 1440) {\n const lifetimeInDays = factorLifetimeInMinutes / 1440;\n\n return loc('days', 'login', [lifetimeInDays]);\n }\n //Use minutes as the time unit by default\n if (factorLifetimeInMinutes === 1) {\n return loc('minutes.oneMinute', 'login');\n }\n return loc('minutes', 'login', [factorLifetimeInMinutes]);\n}\n\nfunction getGracePeriodRemainingDays(gracePeriodEndDate) {\n const endDate = new Date(gracePeriodEndDate).getTime();\n const remainingDays = Math.floor((endDate - new Date().getTime()) / (1000 * 3600 * 24));\n\n return remainingDays;\n}\n\nfunction combineFactorsObjects(factorTypes, factors) {\n const addedFactorTypes = [];\n const combinedFactors = [];\n\n _.each(factors, function(factor) {\n const factorType = factor.factorType;\n\n if (!_.contains(addedFactorTypes, factorType)) {\n const factorTypeObj = _.findWhere(factorTypes, { factorType: factorType });\n\n if (factorTypeObj) {\n addedFactorTypes.push(factorType);\n combinedFactors.push(factorTypeObj);\n } else {\n combinedFactors.push(factor);\n }\n }\n });\n return combinedFactors;\n}\n\nexport default Model.extend({\n initialize: function() {\n // Handle this in initialize (as opposed to a derived property) because\n // the operation is asynchronous\n if (this.settings.get('features.securityImage')) {\n const self = this;\n\n this.listenTo(this, 'change:username', function(model, username) {\n getSecurityImage(this.get('baseUrl'), username, this.get('deviceFingerprint'))\n .then(function(image) {\n model.set('securityImage', image.securityImage);\n model.set('securityImageDescription', image.securityImageDescription);\n model.unset('deviceFingerprint'); //Fingerprint can only be used once\n })\n .fail(function(jqXhr) {\n // Only notify the consumer on a CORS error\n if (BrowserFeatures.corsIsNotEnabled(jqXhr)) {\n self.settings.callGlobalError(new Errors.UnsupportedBrowserError(loc('error.enabled.cors')));\n } else {\n throw jqXhr;\n }\n })\n .done();\n });\n }\n },\n\n local: {\n baseUrl: 'string',\n lastAuthResponse: ['object', true, {}],\n transaction: 'object',\n transactionError: 'object',\n username: 'string',\n factors: 'object',\n policy: 'object',\n securityImage: ['string', true, UNDEFINED_USER],\n securityImageDescription: ['string', true, UNDEFINED_USER_IMAGE_DESCRIPTION],\n userCountryCode: 'string',\n userPhoneNumber: 'string',\n factorActivationType: 'string',\n flashError: 'object',\n beaconType: 'string',\n deviceFingerprint: 'string', // valid only once\n typingPattern: 'string',\n // Note: languageCode is special in that it is shared between Settings\n // and AppState. Settings is the *configured* language, and is static.\n // AppState is the dynamic language state - it can be changed via a\n // language picker, etc.\n // Note: this is conceptial feasible but not yet being implemented.\n languageCode: ['string', true],\n disableUsername: ['boolean', false, false],\n trapMfaRequiredResponse: ['boolean', false, false],\n lastFailedChallengeFactorData: ['object', false],\n },\n\n setAuthResponse: function(res) {\n // Because of MFA_CHALLENGE (i.e. DUO), we need to remember factors\n // across auth responses. Not doing this, for example, results in being\n // unable to switch away from the duo factor dropdown.\n if (res._embedded && res._embedded.policy) {\n this.set('policy', res._embedded.policy);\n }\n\n if (res._embedded && res._embedded.factors) {\n let factors = res._embedded.factors;\n\n if (res._embedded.factorTypes) {\n factors = combineFactorsObjects(res._embedded.factorTypes, factors);\n }\n\n const factorsObject = _.map(factors, factor => {\n factor.settings = this.settings;\n factor.appState = this;\n return factor;\n });\n\n this.set('factors', new Factor.Collection(factorsObject, { parse: true }));\n }\n\n this.set('lastAuthResponse', res);\n },\n\n clearLastAuthResponse: function() {\n this.set('lastAuthResponse', {});\n },\n\n setLastFailedChallengeFactorData: function() {\n this.set('lastFailedChallengeFactorData', {\n factor: this.get('factor'),\n errorMessage: this.get('factorResultErrorMessage'),\n });\n },\n\n clearLastFailedChallengeFactorData: function() {\n this.unset('lastFailedChallengeFactorData');\n },\n\n getUser: function() {\n return this.get('user');\n },\n\n derived: {\n isSuccessResponse: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'SUCCESS';\n },\n },\n isMfaRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_REQUIRED' || res.status === 'FACTOR_REQUIRED';\n },\n },\n isProfileRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PROFILE_REQUIRED';\n },\n },\n isMfaEnroll: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL' || res.status === 'FACTOR_ENROLL';\n },\n },\n isMfaChallenge: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_CHALLENGE' || res.status === 'FACTOR_CHALLENGE';\n },\n },\n isSMSPasswordRecovery: {\n deps: ['lastAuthResponse'],\n fn: function({ status, factorType, recoveryType }) {\n return status === 'RECOVERY_CHALLENGE' &&\n factorType?.toLowerCase() === 'sms' &&\n recoveryType?.toLowerCase() === 'password';\n }\n },\n isUnauthenticated: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'UNAUTHENTICATED';\n },\n },\n isMfaRejected: {\n // MFA failures are usually error responses\n // except in the case of Okta Push, when a\n // user clicks 'deny' on his phone or OV app\n // version is below a required version no.\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'REJECTED';\n },\n },\n isMfaTimeout: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'TIMEOUT';\n },\n },\n isMfaEnrollActivate: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE';\n },\n },\n isWaitingForActivation: {\n deps: ['isMfaEnrollActivate', 'lastAuthResponse'],\n fn: function(isMfaEnrollActivate, res) {\n return isMfaEnrollActivate && res.factorResult === 'WAITING';\n },\n },\n isWaitingForNumberChallenge: {\n deps: ['lastAuthResponse', 'isMfaChallenge'],\n fn: function(res, isMfaChallenge) {\n if (\n isMfaChallenge &&\n res &&\n res.factorResult === 'WAITING' &&\n res._embedded &&\n res._embedded.factor &&\n res._embedded.factor._embedded &&\n res._embedded.factor._embedded.challenge\n ) {\n return true;\n }\n return false;\n },\n },\n hasMultipleFactorsAvailable: {\n deps: ['factors', 'isMfaRequired', 'isMfaChallenge', 'isUnauthenticated'],\n fn: function(factors, isMfaRequired, isMfaChallenge, isUnauthenticated) {\n if (!isMfaRequired && !isMfaChallenge && !isUnauthenticated) {\n return false;\n }\n return factors && factors.length > 1;\n },\n },\n promptForFactorInUnauthenticated: {\n deps: ['lastAuthResponse', 'factors'],\n fn: function(res, factors) {\n if (res.status !== 'UNAUTHENTICATED') {\n return false;\n }\n return factors && factors.length > 0;\n },\n },\n userId: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user.id;\n },\n },\n isIdxStateToken: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res && _.isString(res.stateToken) && res.stateToken.startsWith('01');\n },\n },\n isPwdExpiringSoon: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PASSWORD_WARN';\n },\n },\n passwordExpireDays: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.policy || !res._embedded.policy.expiration) {\n return null;\n }\n return res._embedded.policy.expiration.passwordExpireDays;\n },\n },\n isPwdManagedByOkta: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return true;\n }\n return false;\n },\n },\n passwordExpiredWebsiteName: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return null;\n }\n return res._links.next.title;\n },\n },\n passwordExpiredLinkUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n recoveryType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.recoveryType;\n },\n },\n factorType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorType;\n },\n },\n factor: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factor) {\n return null;\n }\n return res._embedded.factor;\n },\n },\n activatedFactorId: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.id : null;\n },\n },\n activatedFactorType: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.factorType : null;\n },\n },\n activatedFactorProvider: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.provider : null;\n },\n },\n qrcode: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation._links.qrcode.href;\n } catch (err) {\n return null;\n }\n },\n },\n activationSendLinks: {\n deps: ['factor'],\n fn: function(factor) {\n let sendLinks;\n\n try {\n sendLinks = factor._embedded.activation._links.send;\n } catch (err) {\n sendLinks = [];\n }\n return sendLinks;\n },\n },\n textActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'sms' });\n\n return item ? item.href : null;\n },\n },\n emailActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'email' });\n\n return item ? item.href : null;\n },\n },\n sharedSecret: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation.sharedSecret;\n } catch (err) {\n return null;\n }\n },\n },\n duoEnrollActivation: {\n deps: ['factor'],\n fn: function(factor) {\n if (!factor || !factor._embedded || !factor._embedded.activation) {\n return null;\n }\n return factor._embedded.activation;\n },\n },\n prevLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.prev) {\n return res._links.prev.href;\n }\n return null;\n },\n },\n skipLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.skip) {\n return res._links.skip.href;\n }\n return null;\n },\n },\n gracePeriodRemainingDays: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.gracePeriod && policy.gracePeriod.endDate) {\n return getGracePeriodRemainingDays(policy.gracePeriod.endDate);\n }\n return null;\n },\n },\n user: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user;\n },\n },\n recoveryQuestion: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.recovery_question) {\n return null;\n }\n return user.recovery_question.question;\n },\n },\n userProfile: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.profile) {\n return null;\n }\n return user.profile;\n },\n },\n userConsentName: {\n deps: ['userProfile', 'username'],\n fn: function(userProfile, username) {\n if (!userProfile || _.isEmpty(userProfile.firstName)) {\n return username;\n }\n if (_.isEmpty(userProfile.lastName)) {\n return userProfile.firstName;\n }\n return userProfile.firstName + ' ' + userProfile.lastName.charAt(0) + '.';\n },\n },\n userEmail: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || !userProfile.login) {\n return null;\n }\n return userProfile.login;\n },\n },\n userFullName: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || (!userProfile.firstName && !userProfile.lastName)) {\n return '';\n }\n return userProfile.firstName + ' ' + userProfile.lastName;\n },\n },\n defaultAppLogo: {\n deps: ['baseUrl'],\n fn: function(baseUrl) {\n return baseUrl + DEFAULT_APP_LOGO;\n },\n },\n expiresAt: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.expiresAt;\n },\n },\n target: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.target;\n },\n },\n targetLabel: {\n deps: ['target'],\n fn: function(target) {\n if (!target) {\n return null;\n }\n return target.label;\n },\n },\n targetLogo: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links.logo;\n },\n },\n targetTermsOfService: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['terms-of-service'];\n },\n },\n targetPrivacyPolicy: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['privacy-policy'];\n },\n },\n targetClientURI: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['client-uri'];\n },\n },\n scopes: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.scopes;\n },\n },\n issuer: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.authentication?.issuer?.uri;\n }\n },\n hasExistingPhones: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'sms', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n hasExistingPhonesForCall: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'call', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n isUndefinedUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === UNDEFINED_USER;\n },\n },\n isNewUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === NEW_USER;\n },\n },\n allowRememberDevice: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.allowRememberDevice;\n },\n },\n rememberDeviceLabel: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.rememberDeviceLifetimeInMinutes > 0) {\n const timeString = getMinutesString(policy.rememberDeviceLifetimeInMinutes);\n\n return loc('rememberDevice.timebased', 'login', [timeString]);\n } else if (policy && policy.rememberDeviceLifetimeInMinutes === 0) {\n return loc('rememberDevice.devicebased', 'login');\n }\n return loc('rememberDevice', 'login');\n },\n },\n rememberDeviceByDefault: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.rememberDeviceByDefault;\n },\n },\n factorsPolicyInfo: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.factorsPolicyInfo ? policy.factorsPolicyInfo : null;\n },\n },\n verifyCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'redirect' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n enrollCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'activate' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n isFactorResultFailed: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'FAILED';\n },\n },\n factorResultErrorMessage: {\n deps: ['lastAuthResponse', 'isFactorResultFailed'],\n fn: function(res, isFactorResultFailed) {\n if (isFactorResultFailed) {\n return res.factorResultMessage || loc('oform.error.unexpected', 'login');\n }\n return null;\n },\n },\n deviceActivationStatus: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.deviceActivationStatus;\n },\n },\n usingDeviceFlow: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return !!(res._embedded && res._embedded.usingDeviceFlow);\n },\n },\n userCode: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.userCode;\n },\n },\n },\n\n parse: function(options) {\n this.settings = options.settings;\n return _.extend(_.omit(options, 'settings'), {\n languageCode: this.settings.get('languageCode'),\n userCountryCode: this.settings.get('countryCode'),\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model } from 'okta';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nconst KNOWN_ERRORS = ['OAuthError', 'AuthSdkError', 'AuthPollStopError', 'AuthApiError'];\nexport default Model.extend({\n // May return either a \"standard\" promise or a Q promise\n doTransaction: function(fn, rethrow) {\n const self = this;\n\n return fn\n .call(this, this.appState.get('transaction'))\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n // Q may still consider AuthPollStopError to be unhandled\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n if (rethrow || _.indexOf(KNOWN_ERRORS, err.name) === -1) {\n throw err;\n }\n });\n },\n\n manageTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.appState.get('transaction'), _.bind(this.setTransaction, this));\n\n // If it's a promise, listen for failures\n if (Q.isPromiseAlike(res)) {\n return res.catch(function(err) {\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n });\n }\n\n return Q.resolve(res);\n },\n\n startTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.settings.getAuthClient());\n\n // If it's a promise, then chain to it\n if (Q.isPromiseAlike(res)) {\n return res\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n throw err;\n });\n }\n\n return Q.resolve(res);\n },\n\n setTransaction: function(trans) {\n this.appState.set('transaction', trans);\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the 'License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport BaseLoginModel from './BaseLoginModel';\nexport default BaseLoginModel.extend({\n initialize: function(options) {\n this.options = options || {};\n this.appState = this.options.appState;\n },\n constructPostData: function(profileAttributes) {\n const postData = {\n registration: {\n profile: profileAttributes,\n },\n };\n\n // send createNewAccount flag for new user creation\n if (this.appState.get('policy').registration.createNewAccount) {\n postData.registration['createNewAccount'] = true;\n }\n return postData;\n },\n getEnrollFormData: function() {\n return this.manageTransaction(function(transaction, setTransaction) {\n return transaction.enroll().then(function(trans) {\n setTransaction(trans);\n });\n });\n },\n save: function() {\n let data = BaseLoginModel.prototype.toJSON.apply(this, arguments);\n\n data = _.omit(data, ['appState', 'settings', 'createNewAccount']);\n if (_.isEmpty(data)) {\n const error = {\n errorSummary: loc('oform.errorbanner.title', 'login'),\n };\n\n this.trigger('error', this, {\n responseJSON: error,\n });\n } else {\n return this.manageTransaction(function(transaction, setTransaction) {\n transaction.enroll(this.constructPostData(data)).then(function(trans) {\n setTransaction(trans);\n });\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint complexity: [2, 13] */\nimport { _, loc, Collection } from 'okta';\nimport Q from 'q';\nimport Errors from 'util/Errors';\nimport factorUtil from 'util/FactorUtil';\nimport Util from 'util/Util';\nimport BaseLoginModel from './BaseLoginModel';\nconst PUSH_INTERVAL = 4000;\n\n// Avoid setting interval to same value as keep-alive time (5 seconds) because it\n// caused an occasional issue with network connection lost errors in Safari and IE\n\nconst FactorFactor = BaseLoginModel.extend({\n extraProperties: true,\n flat: false,\n\n props: {\n id: 'string',\n factorType: {\n type: 'string',\n values: [\n 'sms',\n 'call',\n 'email',\n 'token',\n 'token:software:totp',\n 'token:hotp',\n 'token:hardware',\n 'question',\n 'push',\n 'u2f',\n 'password',\n 'assertion:saml2',\n 'assertion:oidc',\n 'claims_provider',\n 'webauthn',\n ],\n },\n provider: {\n type: 'string',\n values: [\n 'OKTA',\n 'RSA',\n 'DEL_OATH',\n 'SYMANTEC',\n 'GOOGLE',\n 'YUBICO',\n 'FIDO',\n 'CUSTOM',\n 'GENERIC_SAML',\n 'GENERIC_OIDC',\n ],\n },\n enrollment: {\n type: 'string',\n values: ['OPTIONAL', 'REQUIRED'],\n },\n status: {\n type: 'string',\n values: ['NOT_SETUP', 'ACTIVE'],\n },\n profile: ['object'],\n vendorName: 'string',\n policy: ['object'],\n profiles: ['object'],\n },\n\n local: {\n answer: 'string',\n password: 'string',\n backupFactor: 'object',\n showAnswer: 'boolean',\n rememberDevice: 'boolean',\n autoPush: ['boolean', true, false],\n },\n\n derived: {\n isOktaFactor: {\n deps: ['provider'],\n fn: function(provider) {\n return provider === 'OKTA';\n },\n },\n factorName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorName,\n },\n factorLabel: {\n deps: ['provider', 'factorType', 'vendorName'],\n fn: function(provider, factorType, vendorName) {\n if (_.contains(['DEL_OATH', 'GENERIC_SAML', 'GENERIC_OIDC', 'CUSTOM'], provider)) {\n return vendorName;\n }\n return factorUtil.getFactorLabel.apply(this, [provider, factorType]);\n },\n },\n factorDescription: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorDescription,\n },\n sortOrder: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorSortOrder,\n },\n iconClassName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorIconClassName,\n },\n securityQuestion: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'question') {\n return null;\n }\n return profile && factorUtil.getSecurityQuestionLabel(profile);\n },\n },\n phoneNumber: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (_.contains(['sms', 'call'], factorType)) {\n return profile && profile.phoneNumber;\n }\n return null;\n },\n },\n email: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType === 'email') {\n return profile && profile.email;\n }\n return null;\n },\n },\n deviceName: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'push') {\n return null;\n }\n return profile && profile.name;\n },\n },\n enrolled: {\n deps: ['status'],\n fn: function(status) {\n return status === 'ACTIVE';\n },\n },\n cardinality: {\n deps: ['policy', 'profiles'],\n fn: function(policy, profiles) {\n if (profiles && profiles.length > 0) {\n const profile = profiles[0];\n //assume for now we only get one profile (multiple profiles are not supported yet)\n\n const enrolled = profile._embedded.enrolledFactors.length;\n\n const adoption = _.findWhere(profile._embedded.features, { type: 'adoption' });\n\n if (adoption && adoption.cardinality) {\n return {\n enrolled: enrolled,\n minimum: adoption.cardinality.min,\n maximum: adoption.cardinality.max,\n };\n }\n return false;\n } else if (policy && policy.enrollment) {\n return policy.enrollment;\n } else {\n return false;\n }\n },\n },\n additionalEnrollment: {\n deps: ['cardinality'],\n fn: function(cardinality) {\n if (cardinality) {\n return cardinality.enrolled !== 0 && cardinality.enrolled < cardinality.maximum;\n } else {\n return false;\n }\n },\n },\n required: {\n deps: ['enrollment'],\n fn: function(enrollment) {\n return enrollment === 'REQUIRED';\n },\n },\n canUseResend: {\n deps: ['provider', 'factorType'],\n fn: function(provider, factorType) {\n // Only push, sms and call have resend links.\n return provider === 'OKTA' && _.contains(['push', 'sms', 'call', 'email'], factorType);\n },\n },\n isAnswerRequired: {\n deps: ['factorType'],\n fn: function(factorType) {\n return _.contains(['sms', 'call', 'email', 'token', 'token:software:totp', 'question'], factorType);\n },\n },\n isFactorTypeVerification: {\n deps: ['provider', 'id'],\n fn: function(provider, id) {\n return provider === undefined && id === undefined;\n },\n },\n },\n\n parse: function(attributes) {\n this.settings = attributes.settings;\n this.appState = attributes.appState;\n // set the initial value for remember device.\n attributes.rememberDevice = factorUtil.getRememberDeviceValue(this.appState);\n\n // Add vendorname for custom totp enroll\n this.setCustomHotpVendorName(attributes);\n return _.omit(attributes, ['settings', 'appState']);\n },\n\n validate: function() {\n if (this.get('isAnswerRequired') && !this.get('answer')) {\n return { answer: loc('model.validation.field.blank') };\n } else if (this.get('factorType') === 'password' && !this.get('password')) {\n return { password: loc('error.password.required') };\n }\n },\n needsPasscode: function() {\n // we don't need passcode for email with magic link flow\n return !(this.options.appState.get('isIdxStateToken') && this.get('factorType') === 'email');\n },\n resend: function() {\n this.trigger('form:clear-errors');\n return this.manageTransaction(function(transaction) {\n const firstLink = transaction.data._links.resend[0];\n\n return transaction.resend(firstLink.name);\n });\n },\n\n save: function() {\n const rememberDevice = !!this.get('rememberDevice');\n const self = this;\n // Set/Remove the remember device cookie based on the remember device input.\n\n return this.manageTransaction(function(transaction, setTransaction) {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n if (this.get('factorType') === 'question') {\n data.answer = this.get('answer');\n } else if (this.get('factorType') === 'password') {\n data.password = this.get('password');\n } else if (this.needsPasscode()) {\n data.passCode = this.get('answer');\n }\n\n if (this.pushFactorHasAutoPush()) {\n data.autoPush = this.get('autoPush');\n }\n\n let promise;\n\n // MFA_REQUIRED, FACTOR_REQUIRED or UNAUTHENTICATED with factors (passwordlessAuth)\n if (\n transaction.status === 'MFA_REQUIRED' ||\n transaction.status === 'FACTOR_REQUIRED' ||\n this.appState.get('promptForFactorInUnauthenticated')\n ) {\n const factor = this._findFactor(transaction);\n\n promise = factor.verify(data);\n } else if (this.get('canUseResend') && !this.get('answer') && transaction.resend) {\n // MFA_CHALLENGE/ FACTOR_CHALLENGE\n const firstLink = transaction.data._links.resend[0];\n\n promise = transaction.resend(firstLink.name);\n } else {\n promise = transaction.verify(data);\n }\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the factor form\n this.trigger('save');\n\n return promise.then(function(trans) {\n const options = {\n delay: PUSH_INTERVAL,\n transactionCallBack: transaction => {\n self.options.appState.set('lastAuthResponse', transaction);\n },\n };\n\n setTransaction(trans);\n // In Okta verify case we initiate poll.\n if ((trans.status === 'MFA_CHALLENGE' && trans.poll) || (trans.status === 'FACTOR_CHALLENGE' && trans.poll)) {\n const deferred = Q.defer();\n const initiatePollTimout = Util.callAfterTimeout(deferred.resolve, PUSH_INTERVAL);\n self.listenToOnce(self.options.appState, 'factorSwitched', () => {\n clearTimeout(initiatePollTimout);\n deferred.reject(new Errors.AuthStopPollInitiationError());\n });\n return deferred.promise.then(function() {\n // Stop listening if factor was not switched before poll.\n self.stopListening(self.options.appState, 'factorSwitched');\n if (self.pushFactorHasAutoPush()) {\n options.autoPush = function() {\n return self.get('autoPush');\n };\n options.rememberDevice = function() {\n return self.get('rememberDevice');\n };\n }\n return trans.poll(options).then(function(trans) {\n self.options.appState.set('lastAuthResponse', trans.data);\n setTransaction(trans);\n });\n });\n }\n });\n });\n },\n\n _findFactor: function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: this.get('factorType'),\n });\n }\n if (!factor) {\n factor = _.findWhere(transaction.factors, {\n id: this.get('id'),\n });\n }\n return factor;\n },\n\n pushFactorHasAutoPush: function() {\n return this.settings.get('features.autoPush') && this.get('factorType') === 'push';\n },\n\n setCustomHotpVendorName: function(attributes) {\n // If factor is token:hotp and not enrolled, we assume the first profile is the default.\n // If factor is enrolled, we only support one profile to be enrolled, so find that one\n // and display as enrolled profile. We do this by populating profile name in vendorName.\n if (attributes.factorType === 'token:hotp' && attributes.profiles) {\n if (attributes.status === 'NOT_SETUP') {\n attributes.vendorName = attributes.profiles[0].name;\n } else if (attributes.status === 'ACTIVE') {\n const enrolledProfiles = attributes.profiles.filter(profile => {\n return profile._embedded.enrolledFactors.length > 0;\n });\n attributes.vendorName = enrolledProfiles[0].name;\n }\n }\n return attributes;\n },\n});\nconst FactorFactors = Collection.extend({\n model: FactorFactor,\n comparator: 'sortOrder',\n\n // One override necessary here - When Okta Verify OTP and Push are in the list,\n // they are presented in the view as one factor - in the beacon menu,\n // there's only one option (Okta Verify), and we show a form with Push\n // with an inline totp option. What we need to do is to add totp\n // as a \"backupFactor\" for push\n parse: function(factors) {\n // Keep a track of the last used factor, since\n // we need it to determine the default factor.\n this.lastUsedFactor = factors[0];\n\n const oktaPushFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'push' });\n\n let totpFactor;\n\n if (_.where(factors, { factorType: 'push' }).length > 1) {\n totpFactor = _.findWhere(factors, { factorType: 'token:software:totp' });\n } else {\n totpFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'token:software:totp' });\n }\n if (!oktaPushFactor || !totpFactor) {\n return factors;\n }\n\n const isTotpFirst = totpFactor === factors[0];\n\n const parsedFactors = _.reduce(\n factors,\n function(memo, factor) {\n const isOkta = factor.provider === 'OKTA';\n const isOktaTotp = isOkta && factor.factorType === 'token:software:totp';\n const isOktaPush = isOkta && factor.factorType === 'push';\n const notEnrolled = factor.status !== 'ACTIVE';\n const hideOktaTotp = isOktaTotp && (notEnrolled || oktaPushFactor.status === 'ACTIVE');\n const hideOktaPush = isOktaPush && notEnrolled && totpFactor.status === 'ACTIVE';\n\n if (hideOktaTotp || hideOktaPush) {\n return memo;\n }\n\n if (isOktaPush) {\n factor.backupFactor = new FactorFactor(totpFactor, { parse: true });\n }\n memo.push(factor);\n return memo;\n },\n []\n );\n\n // Use push factor instead of TOTP, if TOTP is first in the list\n // (since it is stored as backupFactor for push).\n if (isTotpFirst) {\n this.lastUsedFactor = oktaPushFactor;\n }\n\n return parsedFactors;\n },\n\n // Will need to update this to use HAL link to get last used factor:\n // https://oktainc.atlassian.net/browse/OKTA-58380\n // However, current code returns last used factor as first factor in list.\n // Also, will need to add priority - i.e. if they do not have a last used\n // factor, should try Okta Verify, then Okta SMS, etc.\n getDefaultFactor: function() {\n const factor = _.pick(this.lastUsedFactor, 'factorType', 'provider');\n\n return this.findWhere(factor);\n },\n\n getFirstUnenrolledRequiredFactor: function() {\n return this.findWhere({ required: true, enrolled: false });\n },\n\n _getFactorsOfType: function(factorType) {\n return this.where({ factorType: factorType });\n },\n\n getFactorIndex: function(factorType, factorId) {\n return this._getFactorsOfType(factorType).findIndex(function(factor) {\n return factor.get('id') === factorId;\n });\n },\n\n hasMultipleFactorsOfSameType: function(factorType) {\n return this._getFactorsOfType(factorType).length > 1;\n },\n\n getFactorByTypeAndIndex: function(factorType, factorIndex) {\n return this._getFactorsOfType(factorType)[factorIndex];\n },\n});\nexport default {\n Model: FactorFactor,\n Collection: FactorFactors,\n};\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport PrimaryAuthModel from 'models/PrimaryAuth';\nimport CookieUtil from 'util/CookieUtil';\nimport Enums from 'util/Enums';\nimport Util from 'util/Util';\nexport default PrimaryAuthModel.extend({\n props: function() {\n const cookieUsername = CookieUtil.getCookieUsername();\n const properties = this.getUsernameAndRemember(cookieUsername);\n\n return {\n username: ['string', true, properties.username],\n lastUsername: ['string', false, cookieUsername],\n context: ['object', false],\n remember: ['boolean', true, properties.remember],\n };\n },\n\n local: {},\n\n save: function() {\n const username = this.settings.transformUsername(this.get('username'), Enums.IDP_DISCOVERY);\n const remember = this.get('remember');\n const lastUsername = this.get('lastUsername');\n const resource = 'okta:acct:' + username;\n const requestContext = this.get('requestContext');\n\n this.setUsernameCookie(username, remember, lastUsername);\n\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button\n this.trigger('save');\n\n this.appState.trigger('loading', true);\n\n const webfingerArgs = {\n resource: resource,\n requestContext: requestContext,\n };\n const authClient = this.appState.settings.authClient;\n\n authClient\n .webfinger(webfingerArgs)\n .then(res => {\n if (res && res.links && res.links[0]) {\n if (res.links[0].properties['okta:idp:type'] === 'OKTA') {\n this.trigger('goToPrimaryAuth');\n } else if (res.links[0].href) {\n const redirectFn = res.links[0].href.includes('OKTA_INVALID_SESSION_REPOST%3Dtrue')\n ? Util.redirectWithFormGet.bind(Util)\n : this.settings.get('redirectUtilFn');\n //override redirectFn to only use Util.redirectWithFormGet if OKTA_INVALID_SESSION_REPOST is included\n //it will be encoded since it will be included in the encoded fromURI\n\n redirectFn(res.links[0].href);\n }\n }\n })\n .catch(() => {\n this.trigger('error');\n // Specific event handled by the Header for the case where the security image is not\n // enabled and we want to show a spinner. (Triggered only here and handled only by Header).\n this.appState.trigger('removeLoading');\n CookieUtil.removeUsernameCookie();\n })\n .finally(() => {\n this.appState.trigger('loading', false);\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model } from 'okta';\nimport BaseLoginModel from './BaseLoginModel';\nexport default BaseLoginModel.extend({\n constructor: function(options) {\n this.settings = options && options.settings;\n Model.apply(this, arguments);\n },\n loginWithActivationToken: function(activationToken) {\n return this.startTransaction(function(authClient) {\n return authClient.signInWithCredentials({ token: activationToken });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, Model } from 'okta';\nimport CookieUtil from 'util/CookieUtil';\nimport Enums from 'util/Enums';\nimport BaseLoginModel from './BaseLoginModel';\n\nexport default BaseLoginModel.extend({\n props: function() {\n const cookieUsername = CookieUtil.getCookieUsername();\n const properties = this.getUsernameAndRemember(cookieUsername);\n const props = {\n username: {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.username.required', 'login');\n }\n },\n value: properties.username,\n },\n lastUsername: ['string', false, cookieUsername],\n context: ['object', false],\n remember: ['boolean', true, properties.remember],\n multiOptionalFactorEnroll: ['boolean', true],\n };\n\n if (!(this.settings && this.settings.get('features.passwordlessAuth'))) {\n props.password = {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.password.required', 'login');\n }\n },\n };\n }\n return props;\n },\n\n getUsernameAndRemember: function(cookieUsername) {\n const settingsUsername = this.settings && this.settings.get('username');\n const rememberMeEnabled = this.settings && this.settings.get('features.rememberMe');\n let remember = false;\n let username;\n\n if (settingsUsername) {\n username = settingsUsername;\n remember = rememberMeEnabled && username === cookieUsername;\n } else if (rememberMeEnabled && cookieUsername) {\n // Only respect the cookie if the feature is enabled.\n // Allows us to force prompting when necessary, e.g. SAML ForceAuthn\n username = cookieUsername;\n remember = true;\n }\n\n return {\n username: username,\n remember: remember,\n };\n },\n\n constructor: function(options) {\n this.settings = options && options.settings;\n this.appState = options && options.appState;\n Model.apply(this, arguments);\n this.listenTo(this, 'change:username', function(model, username) {\n this.set({ remember: username === this.get('lastUsername') });\n });\n },\n parse: function(options) {\n return _.omit(options, ['settings', 'appState']);\n },\n\n save: function() {\n const username = this.settings.transformUsername(this.get('username'), Enums.PRIMARY_AUTH);\n const remember = this.get('remember');\n const lastUsername = this.get('lastUsername');\n\n this.setUsernameCookie(username, remember, lastUsername);\n\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the primary auth form\n this.trigger('save');\n\n this.appState.trigger('loading', true);\n\n const signInArgs = this.getSignInArgs(username);\n let primaryAuthPromise;\n\n if (this.appState.get('isUnauthenticated')) {\n const authClient = this.appState.settings.authClient;\n\n // bootstrapped with stateToken\n if (this.appState.get('isIdxStateToken')) {\n // if its an idx stateToken, we send the parameter as identifier to login API\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.login);\n });\n } else {\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.authenticate);\n }, true);\n }\n } else {\n //normal username/password flow without stateToken\n primaryAuthPromise = this.startTransaction(function(authClient) {\n return this.doPrimaryAuth(authClient, signInArgs, _.bind(authClient.signInWithCredentials, authClient));\n });\n }\n\n return primaryAuthPromise\n .catch(() => {\n // Specific event handled by the Header for the case where the security image is not\n // enabled and we want to show a spinner. (Triggered only here and handled only by Header).\n this.appState.trigger('removeLoading');\n CookieUtil.removeUsernameCookie();\n })\n .finally(() => {\n this.appState.trigger('loading', false);\n });\n },\n\n getSignInArgs: function(username) {\n const multiOptionalFactorEnroll = this.get('multiOptionalFactorEnroll');\n const signInArgs = {};\n\n if (!this.settings.get('features.passwordlessAuth')) {\n signInArgs.password = this.get('password');\n }\n\n // if its an idx stateToken, we send the parameter as identifier to login API\n if (this.appState.get('isIdxStateToken')) {\n signInArgs.identifier = username;\n } else {\n //only post options param for non-idx flows\n signInArgs.username = username;\n signInArgs.options = {\n warnBeforePasswordExpired: true,\n multiOptionalFactorEnroll: multiOptionalFactorEnroll,\n };\n }\n return signInArgs;\n },\n\n setUsernameCookie: function(username, remember, lastUsername) {\n // Do not modify the cookie when feature is disabled, relevant for SAML ForceAuthn prompts\n if (this.settings.get('features.rememberMe')) {\n // Only delete the cookie if its owner says so. This allows other\n // users to log in on a one-off basis.\n if (!remember && lastUsername === username) {\n CookieUtil.removeUsernameCookie();\n } else if (remember) {\n CookieUtil.setUsernameCookie(username);\n }\n }\n },\n\n doPrimaryAuth: function(authClient, signInArgs, func) {\n const deviceFingerprintEnabled = this.settings.get('features.deviceFingerprinting');\n const typingPatternEnabled = this.settings.get('features.trackTypingPattern');\n\n // Add the custom header for fingerprint, typing pattern if needed, and then remove it afterwards\n // Since we only need to send it for primary auth\n if (deviceFingerprintEnabled && this.appState.get('deviceFingerprint')) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', this.appState.get('deviceFingerprint'));\n }\n if (typingPatternEnabled && this.appState.get('typingPattern')) {\n authClient.http.setRequestHeader('X-Typing-Pattern', this.appState.get('typingPattern'));\n }\n\n const self = this;\n\n return func(signInArgs).finally(function() {\n if (deviceFingerprintEnabled) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', undefined);\n self.appState.unset('deviceFingerprint'); //Fingerprint can only be used once\n }\n if (typingPatternEnabled) {\n authClient.http.setRequestHeader('X-Typing-Pattern', undefined);\n self.appState.unset('typingPattern');\n }\n });\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from 'okta';\nlet { BaseSchema } = internal.models;\nexport default BaseSchema.Model.extend({\n expand: ['schema'],\n setFieldPlaceholder: function(formFields) {\n _.each(formFields, function(formField) {\n formField.title = formField.label;\n });\n return formFields;\n },\n initialize: function(options) {\n let profileAttributes = options.profileSchemaAttributes;\n\n profileAttributes = this.setFieldPlaceholder(profileAttributes);\n if (profileAttributes) {\n const userProfileSchema = {\n properties: {},\n };\n\n for (var i = 0; i < profileAttributes.length; i++) {\n const profileAttributeObject = profileAttributes[i];\n\n userProfileSchema.properties[profileAttributeObject.name] = profileAttributeObject;\n }\n this.parse.apply(this, [{ schema: userProfileSchema }]);\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, BaseModel, internal } from 'okta';\nlet { BaseSchema, SchemaProperty } = internal.models;\nconst RegistrationSchemaRegistrationSchemaPropertyCollection = SchemaProperty.Collection.extend({\n createModelProperties: function() {\n const modelProperties = SchemaProperty.Collection.prototype.createModelProperties.apply(this);\n\n _.each(\n modelProperties,\n function(modelProperty, name) {\n modelProperty.required = !!this.get(name).get('required');\n },\n this\n );\n return modelProperties;\n },\n});\nexport default BaseSchema.Model.extend({\n expand: ['schema'],\n\n constructor: function() {\n this.properties = new RegistrationSchemaRegistrationSchemaPropertyCollection();\n BaseModel.apply(this, arguments);\n },\n\n parse: function(resp) {\n const parseResponseData = resp => {\n const requireFields = resp.schema.required;\n\n if (_.isArray(requireFields)) {\n _.each(\n requireFields,\n function(requireField) {\n const field = this.properties.get(requireField);\n\n if (field) {\n field.set('required', true);\n }\n },\n this\n );\n }\n\n const fieldOrderIds = resp.schema.fieldOrder;\n\n if (_.isArray(fieldOrderIds)) {\n _.each(\n fieldOrderIds,\n function(fieldOrderId, sortOrder) {\n const field = this.properties.get(fieldOrderId);\n\n if (field) {\n field.set('sortOrder', sortOrder);\n }\n },\n this\n );\n this.properties.comparator = 'sortOrder';\n this.properties.sort();\n }\n this.properties.defaultPolicyId = resp.policyId;\n return resp;\n };\n\n const self = this;\n this.settings.parseRegistrationSchema(\n resp,\n function(resp) {\n if (resp.profileSchema) {\n resp.schema = resp.profileSchema;\n BaseSchema.Model.prototype.parse.apply(self, [resp]);\n resp = parseResponseData(resp);\n }\n self.trigger('parseComplete', { properties: self.properties });\n },\n function(error) {\n self.trigger('parseComplete', { properties: self.properties, error: error });\n }\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-statements: [2, 15] */\n\nimport Q from 'q';\nimport Enums from './Enums';\nconst SWAP_PAGE_TIME = 200;\nconst fn = {};\n\nfunction zoom($el, start, finish) {\n const deferred = Q.defer();\n\n $el.animate(\n {\n 'text-indent': 1,\n },\n {\n duration: 200,\n easing: 'swing',\n step: function(now, fx) {\n fx.start = start;\n fx.end = finish;\n $el.css('transform', 'scale(' + now + ', ' + now + ')');\n },\n always: function() {\n deferred.resolve($el);\n },\n }\n );\n return deferred.promise;\n}\n\nfunction rotate($el, start, finish) {\n const deferred = Q.defer();\n\n $el.animate(\n {\n 'text-indent': 1,\n },\n {\n duration: 150,\n easing: 'swing',\n step: function(now, fx) {\n fx.start = start;\n fx.end = finish;\n $el.css('transform', 'rotate(' + now + 'deg)');\n },\n always: function() {\n deferred.resolve($el);\n },\n }\n );\n return deferred.promise;\n}\n\n// Note: It is necessary to pass in a success callback because we must\n// remove the old dom node (and controller) in the same tick of the event\n// loop. Waiting for \"then\" results in a glitchy animation.\nfn.swapPages = function(options) {\n const deferred = Q.defer();\n const $parent = options.$parent;\n const $oldRoot = options.$oldRoot;\n const $newRoot = options.$newRoot;\n const success = options.success;\n const ctx = options.ctx;\n let directionClassName = 'transition-from-right';\n\n if (options.dir && options.dir === Enums.DIRECTION_BACK) {\n directionClassName = 'transition-from-left';\n }\n\n $newRoot.addClass(directionClassName);\n $parent.append($newRoot);\n\n $parent.addClass('animation-container-overflow');\n $newRoot.animate({ left: '0px', top: '0px', opacity: 1 }, SWAP_PAGE_TIME, function() {\n $parent.removeClass('animation-container-overflow');\n $newRoot.removeClass(directionClassName);\n $newRoot.removeAttr('style');\n success.call(ctx);\n deferred.resolve();\n });\n\n $oldRoot.animate({ height: $newRoot.height(), opacity: 0 }, SWAP_PAGE_TIME * 0.8);\n\n return deferred.promise;\n};\n\nfn.swapBeacons = function(options) {\n const $el = options.$el;\n const swap = options.swap;\n const ctx = options.ctx;\n\n return this.implode($el)\n .then(function() {\n swap.call(ctx);\n return $el;\n })\n .then(this.explode);\n};\n\nfn.explode = function($el) {\n return zoom($el, 0, 1); //zoom in\n};\n\nfn.implode = function($el) {\n return zoom($el, 1, 0); //zoom out\n};\n\nfn.radialProgressBar = function(options) {\n const radialProgressBar = options.$el;\n const swap = options.swap;\n const circles = radialProgressBar.children();\n\n return rotate(circles, 0, 180)\n .then(function() {\n radialProgressBar.css({ clip: 'auto' });\n })\n .then(function() {\n const leftHalf = circles.eq(0);\n\n swap();\n return rotate(leftHalf, 180, 360);\n })\n .then(function() {\n //reset values to initial state\n radialProgressBar.css({ clip: 'rect(0px, 96px, 96px, 48px)' });\n circles.css({\n transform: 'rotate(0deg)',\n 'text-indent': '1px',\n });\n });\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, Controller } from 'okta';\nimport Q from 'q';\n\nfunction getForm(controller) {\n return _.find(controller.getChildren(), function(item) {\n return item instanceof Form;\n });\n}\n\nexport default Controller.extend({\n // Ideally we should be attaching the listeners in the constructor, but because of the way\n // we construct the FormController (this.model is generated after the BaseLoginController's\n // constructor is called), this.model is undefined in when try to attach the events and\n // therefore we don't listen to events for such forms. And changing the order in which we call\n // the constructor doesn't help either (JS errors etc.). This at least guarantees that we\n // are listening to the model events.\n // Note - Figure out a way to call the constructor in the right order.\n addListeners: function() {\n // Events to enable/disable the primary button on the forms\n this.listenTo(this.model, 'save', function() {\n const form = getForm(this);\n //disable the submit button on forms while making the request\n //to prevent users from hitting rate limiting exceptions of\n //1 per second on the auth api\n\n const disableSubmitButton = form.disableSubmitButton;\n\n if (disableSubmitButton && !form.disableSubmitButton()) {\n return;\n }\n this.toggleButtonState(true);\n });\n\n this.listenTo(this.model, 'error', function() {\n this.toggleButtonState(false);\n });\n\n this.addModelListeners(this.model);\n },\n\n addModelListeners: function(model) {\n const setTransactionHandler = transaction => {\n this.options.appState.set('transaction', transaction);\n };\n\n const transactionErrorHandler = err => {\n this.options.appState.set('transactionError', err);\n };\n\n // Events to set the transaction attributes on the app state.\n this.listenTo(model, 'setTransaction', setTransactionHandler);\n this.listenTo(model, 'setTransactionError', transactionErrorHandler);\n\n // For TOTP factor model\n // TOTP model is special, its model will not be attached to a controller, but will\n // tag along with the push factor model. We need to listen to the transaction\n // changes on this as well (in case of the push+totp form).\n const totpModel = model.get('backupFactor');\n\n if (totpModel) {\n this.listenTo(totpModel, 'setTransaction', setTransactionHandler);\n this.listenTo(totpModel, 'setTransactionError', transactionErrorHandler);\n }\n },\n\n // Override this method to delay switching to this screen until return\n // promise is resolved. This is useful for cases like enrolling a security\n // question, which requires an additional request to fetch the question\n // list.\n fetchInitialData: function() {\n return Q();\n },\n\n // Override this method to prevent route navigation. This is useful for\n // intermediate status changes that do not trigger a full refresh of the\n // page, like MFA_ENROLL_ACTIVATE and MFA_CHALLENGE.\n trapAuthResponse: function() {\n return false;\n },\n\n toJSON: function() {\n const data = Controller.prototype.toJSON.apply(this, arguments);\n\n return _.extend(_.pick(this.options, 'appState'), data);\n },\n\n toggleButtonState: function(state) {\n const button = this.$el.find('.button');\n\n button.toggleClass('link-button-disabled', state).prop('disabled', state);\n },\n\n postRenderAnimation: function() {\n // Event triggered after a page is rendered along with the classname to identify the page\n // TODO: Deprecate this event in the next major version in favor of 'afterRender'\n this.trigger('pageRendered', { page: this.className });\n\n this.trigger('afterRender', { controller: this.className });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: [2, 16], max-statements: [2, 20] */\n// BaseLoginRouter contains the more complicated router logic - rendering/\n// transition, etc. Most router changes should happen in LoginRouter (which is\n// responsible for adding new routes)\nimport { _, $, Backbone, Router, loc } from 'okta';\nimport AppState from 'models/AppState';\nimport Settings from 'models/Settings';\nimport Bundles from 'util/Bundles';\nimport Logger from 'util/Logger';\nimport AuthContainer from 'views/shared/AuthContainer';\nimport Header from 'views/shared/Header';\nimport SecurityBeacon from 'views/shared/SecurityBeacon';\nimport Animations from './Animations';\nimport BrowserFeatures from './BrowserFeatures';\nimport ColorsUtil from './ColorsUtil';\nimport Enums from './Enums';\nimport Errors from './Errors';\nimport RouterUtil from './RouterUtil';\nimport Util from './Util';\nimport LanguageUtil from './LanguageUtil';\n\nfunction isStateLessRouteHandler(router, fn) {\n return _.find(router.stateLessRouteHandlers, function(routeName) {\n return fn === router[routeName];\n });\n}\n\nfunction beaconIsAvailable(Beacon, settings) {\n if (!Beacon) {\n return false;\n }\n if (Beacon === SecurityBeacon) {\n return settings.get('features.securityImage');\n }\n return true;\n}\n\nexport default Router.extend({\n Events: Backbone.Events,\n\n initialize: function(options) {\n // Create a default success and/or error handler if\n // one is not provided.\n if (!options.globalSuccessFn) {\n options.globalSuccessFn = function() {};\n }\n if (!options.globalErrorFn) {\n options.globalErrorFn = function(err) {\n Logger.error(err);\n };\n }\n\n this.settings = new Settings(_.omit(options, 'el', 'authClient'), { parse: true });\n this.settings.setAuthClient(options.authClient);\n\n if (!options.el) {\n this.settings.callGlobalError(new Errors.ConfigError(loc('error.required.el')));\n }\n\n $('body > div').on('click', function() {\n // OKTA-69769 Tooltip wont close on iPhone/iPad\n // Registering a click handler on the first div\n // allows a tap that falls outside the tooltip\n // to be registered as a tap by iOS\n // and then the open tooltip will lose focus and close.\n });\n\n this.appState = new AppState(\n {\n baseUrl: this.settings.get('baseUrl'),\n settings: this.settings,\n },\n { parse: true }\n );\n\n const wrapper = new AuthContainer({ appState: this.appState });\n\n $(options.el).append(wrapper.render().$el);\n this.el = `#${Enums.WIDGET_CONTAINER_ID}`;\n\n this.header = new Header({\n el: this.el,\n appState: this.appState,\n settings: this.settings,\n });\n\n // Hide until unitial render\n this.hide();\n\n this.listenTo(this.appState, 'change:transactionError', function(appState, err) {\n RouterUtil.routeAfterAuthStatusChangeError(this, err);\n });\n\n this.listenTo(this.appState, 'change:transaction', function(appState, trans) {\n RouterUtil.routeAfterAuthStatusChange(this, trans.data);\n });\n\n this.listenTo(this.appState, 'navigate', function(url) {\n this.navigate(url, { trigger: true });\n });\n },\n\n execute: function(cb, args) {\n const recoveryToken = this.settings.get('recoveryToken');\n // Recovery flow with a token passed through widget settings\n\n if (recoveryToken) {\n this.settings.unset('recoveryToken');\n this.navigate(RouterUtil.createRecoveryUrl(recoveryToken), { trigger: true });\n return;\n }\n\n // Refresh flow with a stateToken passed through widget settings\n const stateToken = this.settings.get('stateToken');\n\n if (stateToken) {\n this.settings.unset('stateToken');\n this.navigate(RouterUtil.createRefreshUrl(stateToken), { trigger: true });\n return;\n }\n\n // Normal flow - we've either navigated to a stateless page, or are\n // in the middle of an auth flow\n const trans = this.appState.get('transaction');\n\n if ((trans && trans.data) || isStateLessRouteHandler(this, cb)) {\n cb.apply(this, args);\n return;\n }\n\n // StateToken cookie exists on page load, and we are on a stateful url\n if (this.settings.getAuthClient().tx.exists()) {\n this.navigate(RouterUtil.createRefreshUrl(), { trigger: true });\n return;\n }\n\n // We've hit a page that requires state, but have no stateToken - redirect\n // back to primary auth\n this.navigate('', { trigger: true });\n },\n\n // Overriding the default navigate method to allow the widget consumer\n // to \"turn off\" routing - if features.router is false, the browser\n // location bar will not update when the router navigates\n navigate: function(fragment, options) {\n if (this.settings.get('features.router')) {\n return Router.prototype.navigate.apply(this, arguments);\n }\n if (options && options.trigger) {\n return Backbone.history.loadUrl(fragment);\n }\n },\n\n render: function(Controller, options) {\n options || (options = {});\n\n let Beacon = options.Beacon;\n\n const controllerOptions = _.extend({ settings: this.settings, appState: this.appState }, _.omit(options, 'Beacon'));\n\n // Since we have a wrapper view, render our wrapper and use its content\n // element as our new el.\n // Note: Render it here because we know dom is ready at this point\n if (!this.header.rendered()) {\n this.el = this.header.render().getContentEl();\n }\n\n // If we need to load a language (or apply custom i18n overrides), do\n // this now and re-run render after it's finished.\n if (!Bundles.isLoaded(this.appState.get('languageCode'))) {\n return LanguageUtil.loadLanguage(this.appState, this.settings)\n .then(_.bind(this.render, this, Controller, options));\n }\n\n // Load the custom colors only on the first render\n if (this.settings.get('colors.brand') && !ColorsUtil.isLoaded()) {\n const colors = {\n brand: this.settings.get('colors.brand'),\n };\n\n ColorsUtil.addStyle(colors);\n }\n\n const oldController = this.controller;\n\n this.controller = new Controller(controllerOptions);\n\n // Bubble up all controller events\n this.listenTo(this.controller, 'all', this.trigger);\n\n // First run fetchInitialData, in case the next controller needs data\n // before it's initial render. This will leave the current page in a\n // loading state.\n return this.controller\n .fetchInitialData()\n .then(() => {\n // Beacon transition occurs in parallel to page swap\n if (!beaconIsAvailable(Beacon, this.settings)) {\n Beacon = null;\n }\n this.header.setBeacon(Beacon, controllerOptions);\n\n // Show before initial render\n this.show();\n\n this.controller.render();\n\n if (!oldController) {\n this.el.append(this.controller.el);\n this.controller.postRenderAnimation();\n return;\n }\n\n return Animations.swapPages({\n $parent: this.el,\n $oldRoot: oldController.$el,\n $newRoot: this.controller.$el,\n dir: oldController.state.get('navigateDir'),\n ctx: this,\n success: function() {\n const flashError = this.appState.get('flashError');\n const model = this.controller.model;\n\n oldController.remove();\n oldController.$el.remove();\n this.controller.postRenderAnimation();\n if (flashError) {\n const errorKey = (this.settings.get('features.mfaOnlyFlow')) ?\n 'error.mfa.only.expired.session' : 'error.expired.session';\n model.trigger('error', model, {\n responseJSON: {\n errorSummary: loc(errorKey),\n },\n });\n this.appState.unset('flashError');\n Util.triggerAfterError(this.controller, flashError);\n }\n },\n });\n })\n .catch(function() {\n // OKTA-69665 - if an error occurs in fetchInitialData, we're left in\n // a state with two active controllers. Therefore, we clean up the\n // old one. Note: This explicitly handles the invalid token case -\n // if we get some other type of error which doesn't force a redirect,\n // we will probably be left in a bad state. I.e. old controller is\n // dropped and new controller is not rendered.\n if (oldController) {\n oldController.remove();\n oldController.$el.remove();\n }\n });\n },\n\n start: function() {\n let pushState = false;\n\n // Support for browser's back button.\n if (window.addEventListener && this.settings.get('features.router')) {\n window.addEventListener('popstate', e => {\n if (this.controller.back) {\n e.preventDefault();\n e.stopImmediatePropagation();\n this.controller.back();\n }\n });\n pushState = BrowserFeatures.supportsPushState();\n }\n Router.prototype.start.call(this, { pushState: pushState });\n },\n\n hide: function() {\n this.header.$el.hide();\n },\n\n show: function() {\n this.header.$el.show();\n },\n\n remove: function() {\n if (this.controller) {\n this.controller.remove();\n }\n this.header.$el.remove();\n Bundles.remove();\n Backbone.history.stop();\n },\n});\n","/*!\n * Copyright (c) 2018-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Enums from 'util/Enums';\nconst fn = {};\n\nconst template = function(colors) {\n return `\n#okta-sign-in.auth-container .button-primary,\n#okta-sign-in.auth-container .button-primary:active,\n#okta-sign-in.auth-container .button-primary:focus { background: ${colors.brand}; }\n#okta-sign-in.auth-container .button-primary:hover { background: ${fn.lighten(colors.brand, 0.05)}; }\n#okta-sign-in.auth-container .button.button-primary.link-button-disabled {\n background: ${colors.brand};\n opacity: 0.5;\n}\n `;\n};\n\n// visible for testing\nfn.lighten = function(hex, lum) {\n lum = lum || 0;\n hex = hex.substr(1);\n let newHex = '#';\n\n for (var i = 0; i < 3; i++) {\n let c = parseInt(hex.substr(i * 2, 2), 16);\n\n c = Math.round(Math.min(Math.max(0, c + c * lum), 255)).toString(16);\n newHex += ('00' + c).substr(c.length);\n }\n return newHex;\n};\n\nfn.addStyle = function(colors) {\n const css = template(colors);\n const main = document.getElementById(Enums.WIDGET_CONTAINER_ID);\n const style = document.createElement('style');\n\n style.id = Enums.WIDGET_CONFIG_COLORS_ID;\n style.type = 'text/css';\n style.appendChild(document.createTextNode(css));\n\n main.appendChild(style);\n};\n\nfn.isLoaded = function() {\n return !!document.getElementById(Enums.WIDGET_CONFIG_COLORS_ID);\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { internal } from 'okta';\nconst Cookie = internal.util.Cookie;\nconst LAST_USERNAME_COOKIE_NAME = 'ln';\nconst DAYS_SAVE_REMEMBER = 365;\nconst fn = {};\n\nfn.getCookieUsername = function() {\n return Cookie.getCookie(LAST_USERNAME_COOKIE_NAME);\n};\n\nfn.setUsernameCookie = function(username) {\n Cookie.setCookie(LAST_USERNAME_COOKIE_NAME, username, {\n expires: DAYS_SAVE_REMEMBER,\n path: '/',\n });\n};\n\nfn.removeUsernameCookie = function() {\n Cookie.removeCookie(LAST_USERNAME_COOKIE_NAME, { path: '/' });\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport bundles from './Bundles';\nimport countryCallingCodes from './countryCallingCodes';\nconst fn = {};\n\n// () => [{ countryCode: countryName }], sorted by countryName\nfn.getCountries = function() {\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n // Sort it; figure out if there is a better way to do this (best would\n // be to sort it in the properties file!!)\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = country.name;\n });\n\n return sorted;\n};\n\nfn.getCountryCode = function(){\n\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = loc('country.option.label', 'login', [country.name, country.code]);\n });\n\n return sorted;\n};\n\nfn.getCallingCodeForCountry = function(countryCode) {\n return countryCallingCodes[countryCode];\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global Uint8Array, btoa, atob */\n\nconst fn = {};\n\n/**\n * Light weight hashing algorithm that hashes string into an integer between 0 and 4294967295\n * Not recommended for data set of size greater than 10000\n * https://www.npmjs.com/package/string-hash\n *\n * @param str the string to be hashed\n * @returns string hash of integer type\n */\nfn.getStringHash = function(str) {\n let hash = 5381;\n let i = str.length;\n\n while (i) {\n hash = (hash * 33) ^ str.charCodeAt(--i);\n }\n return hash >>> 0;\n};\n\n/**\n * Converts any url safe characters in a base64 string to regular base64 characters\n * @param str base64 string that might contain url safe characters\n * @returns base64 formatted string\n */\nfn.base64UrlSafeToBase64 = function(str) {\n return str.replace(new RegExp('_', 'g'), '/').replace(new RegExp('-', 'g'), '+');\n};\n\n/**\n * Converts an ArrayBuffer object that contains binary data to base64 encoded string\n * @param bin ArrayBuffer object\n * @returns base64 encoded string\n */\nfn.binToStr = function(bin) {\n return btoa(new Uint8Array(bin).reduce((s, byte) => s + String.fromCharCode(byte), ''));\n};\n\n/**\n * Converts base64 string to binary data view\n * @param str in base64 or base64UrlSafe format\n * @returns converted Uint8Array view of binary data\n */\nfn.strToBin = function(str) {\n return Uint8Array.from(atob(this.base64UrlSafeToBase64(str)), c => c.charCodeAt(0));\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { $ } from 'okta';\nimport Q from 'q';\nexport default {\n getUserAgent: function() {\n return navigator.userAgent;\n },\n isMessageFromCorrectSource: function($iframe, event) {\n return event.source === $iframe[0].contentWindow;\n },\n generateDeviceFingerprint: function(oktaDomainUrl, element) {\n const userAgent = this.getUserAgent();\n\n if (!userAgent) {\n return Q.reject('user agent is not defined');\n } else if (isWindowsPhone(userAgent)) {\n return Q.reject('device fingerprint is not supported on Windows phones');\n }\n\n const deferred = Q.defer();\n const self = this;\n let $iframe;\n let iFrameTimeout;\n\n function isWindowsPhone(userAgent) {\n return userAgent.match(/windows phone|iemobile|wpdesktop/i);\n }\n\n function removeIframe() {\n $iframe.off();\n $iframe.remove();\n window.removeEventListener('message', onMessageReceivedFromOkta, false);\n }\n\n function handleError(reason) {\n removeIframe();\n deferred.reject(reason);\n }\n\n function onMessageReceivedFromOkta(event) {\n if (!self.isMessageFromCorrectSource($iframe, event)) {\n return;\n }\n // deviceFingerprint service is available, clear timeout\n clearTimeout(iFrameTimeout);\n if (!event || !event.data || event.origin !== oktaDomainUrl) {\n handleError('no data');\n return;\n }\n try {\n const message = JSON.parse(event.data);\n\n if (message && message.type === 'FingerprintServiceReady') {\n sendMessageToOkta({ type: 'GetFingerprint' });\n } else if (message && message.type === 'FingerprintAvailable') {\n removeIframe();\n deferred.resolve(message.fingerprint);\n } else {\n handleError('no data');\n }\n } catch (error) {\n //Ignore any errors since we could get other messages too\n }\n }\n\n function sendMessageToOkta(message) {\n const win = $iframe[0].contentWindow;\n\n if (win) {\n win.postMessage(JSON.stringify(message), oktaDomainUrl);\n }\n }\n\n // Attach listener\n window.addEventListener('message', onMessageReceivedFromOkta, false);\n // Create and Load devicefingerprint page inside the iframe\n $iframe = $('\n `).last();\n },\n\n stopProbing() {\n this.checkPortXhr && this.checkPortXhr.abort();\n this.probingXhr && this.probingXhr.abort();\n },\n});\n\nexport default Body;\n","import { _, View } from 'okta';\nimport BaseHeader from './BaseHeader';\nimport BaseForm from './BaseForm';\nimport BaseModel from './BaseModel';\nimport BaseFooter from './BaseFooter';\nimport hbs from 'handlebars-inline-precompile';\nimport {getClassNameMapping} from '../../ion/ViewClassNamesFactory';\n\nexport default View.extend({\n\n Header: BaseHeader,\n\n Body: BaseForm,\n\n Footer: BaseFooter,\n\n className() {\n const appState = this.options.appState;\n\n const formName = appState.get('currentFormName');\n const authenticatorKey = appState.get('authenticatorKey');\n const methodType = appState.get('authenticatorMethodType');\n const isPasswordRecoveryFlow = appState.get('isPasswordRecoveryFlow');\n\n const additionalClassNames = getClassNameMapping(\n formName,\n authenticatorKey,\n methodType,\n isPasswordRecoveryFlow,\n );\n\n const classNames = ['siw-main-view'].concat(additionalClassNames);\n return classNames.join(' ');\n },\n\n template: hbs`\n \n \n \n `,\n\n preRender() {\n View.prototype.preRender.apply(this, arguments);\n // Add Views\n if (this.Header !== null) {\n this.add(this.Header, {\n selector: '.siw-main-header',\n options: this.options,\n });\n }\n this.renderForm();\n this.add(this.Footer, {\n selector : '.siw-main-footer',\n options: this.options,\n });\n },\n\n renderForm() {\n let optionUiSchemaConfig;\n\n if (this.form) {\n this.form.remove();\n optionUiSchemaConfig = this.form.model.toJSON({verbose: true});\n }\n\n // Create Model\n const IonModel = this.createModelClass(\n this.options.currentViewState,\n optionUiSchemaConfig,\n this.settings,\n );\n\n const model = new IonModel ({\n formName: this.options.currentViewState.name,\n });\n\n if (!optionUiSchemaConfig) {\n optionUiSchemaConfig = model.toJSON({verbose: true});\n }\n\n this.model = model;\n this.form = this.add(this.Body, {\n selector : '.siw-main-body',\n options: Object.assign(\n {},\n this.options,\n {\n model,\n optionUiSchemaConfig,\n },\n ),\n }).last();\n\n _.each(model.attributes, (value, key) => {\n if (key.match(/sub_schema_local_[^ ]+/)) {\n // in order to render different sub-schema\n this.listenTo(model, `change:${key}`, () => {\n this.renderForm();\n });\n }\n });\n },\n\n createModelClass(currentViewState, optionUiSchemaConfig = {}) {\n return BaseModel.create(currentViewState, optionUiSchemaConfig);\n },\n\n});\n","export { default as BaseHeader } from './BaseHeader';\nexport { default as BaseFooter } from './BaseFooter';\nexport { default as BaseForm } from './BaseForm';\nexport { default as BaseFormWithPolling } from './BaseFormWithPolling';\nexport { default as BaseOktaVerifyChallengeView } from './BaseOktaVerifyChallengeView';\nexport { default as BaseModel } from './BaseModel';\nexport { default as BaseView } from './BaseView';\nexport { addCustomButton, createCustomButtons, createIdpButtons } from './FormInputFactory';\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { loc, _ } from 'okta';\nimport FactorUtil from '../../../util/FactorUtil';\nimport { AUTHENTICATOR_KEY } from '../../ion/RemediationConstants';\n\nconst { getPasswordComplexityDescriptionForHtmlList } = FactorUtil;\n\nconst getButtonDataSeAttr = function(authenticator) {\n if (authenticator.authenticatorKey) {\n const method = authenticator.value?.methodType ?\n '-' + authenticator.value?.methodType : '';\n return authenticator.authenticatorKey + method;\n }\n return '';\n};\n\n/* eslint complexity: [0, 0] */\nconst getAuthenticatorData = function(authenticator, isVerifyAuthenticator) {\n const authenticatorKey = authenticator.authenticatorKey;\n const key = _.isString(authenticatorKey) ? authenticatorKey.toLowerCase() : '';\n let authenticatorData = {};\n switch (key) {\n case AUTHENTICATOR_KEY.EMAIL:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.email.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-email',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.PASSWORD:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.password.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-password',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.PHONE:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? authenticator.relatesTo?.profile?.phoneNumber\n : loc('oie.phone.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-phone',\n noTranslateClassName: isVerifyAuthenticator ? 'no-translate' : '',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.SECURITY_QUESTION:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.security.question.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-security-question',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.WEBAUTHN:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.webauthn.description', 'login'),\n iconClassName: 'mfa-webauthn',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.OV:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.okta_verify.authenticator.description', 'login'),\n iconClassName: 'mfa-okta-verify',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.GOOGLE_OTP:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.google_authenticator.authenticator.description', 'login'),\n iconClassName: 'mfa-google-auth',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.ON_PREM: {\n const vendorName = authenticator.relatesTo?.displayName ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.on_prem.authenticator.description', 'login', [vendorName]),\n iconClassName: 'mfa-onprem',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.RSA:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.rsa.authenticator.description', 'login'),\n iconClassName: 'mfa-rsa',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.DUO:\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.duo.authenticator.description', 'login'),\n iconClassName: 'mfa-duo',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n\n case AUTHENTICATOR_KEY.IDP: {\n const idpName = authenticator.relatesTo?.displayName;\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.idp.authenticator.description', 'login', [idpName]),\n iconClassName: 'mfa-custom-factor',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n case AUTHENTICATOR_KEY.CUSTOM_OTP: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.custom_otp.description', 'login'),\n iconClassName: 'mfa-hotp',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.SYMANTEC_VIP: {\n const appName = authenticator.relatesTo?.displayName;\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.symantecVip.authenticator.description', 'login', [appName]),\n iconClassName: 'mfa-symantec',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.YUBIKEY: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.yubikey.authenticator.description', 'login'),\n iconClassName: 'mfa-yubikey',\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n });\n break;\n }\n\n case AUTHENTICATOR_KEY.CUSTOM_APP: {\n Object.assign(authenticatorData, {\n description: isVerifyAuthenticator\n ? ''\n : loc('oie.custom.app.authenticator.description', 'login', [authenticator.label]),\n buttonDataSeAttr: getButtonDataSeAttr(authenticator),\n logoUri : authenticator?.relatesTo?.logoUri || ''\n });\n break;\n }\n\n }\n return authenticatorData;\n};\n\nexport function getAuthenticatorDataForEnroll(authenticator) {\n return getAuthenticatorData(authenticator);\n}\n\nexport function getAuthenticatorDataForVerification(authenticator) {\n return getAuthenticatorData(authenticator, true);\n}\n\nexport function getIconClassNameForBeacon(authenticatorKey) {\n return getAuthenticatorData({ authenticatorKey }).iconClassName;\n}\n\nexport function removeRequirementsFromError(errorJSON) {\n if (errorJSON.errorCauses?.length > 0\n && Array.isArray(errorJSON.errorCauses[0].errorSummary)\n && errorJSON.errorCauses[0].errorSummary.length > 0) {\n // Change from Array to string for all errors.\n errorJSON.errorCauses[0].errorSummary = errorJSON.errorCauses[0].errorSummary[0];\n\n // Overrides for particular error messages.\n const errorKey = errorJSON.errorCauses[0].errorKey?.length > 0 && errorJSON.errorCauses[0].errorKey[0];\n // Remove the requirements string only if this is requirements were not met error.\n if (errorKey === 'password.passwordRequirementsNotMet') {\n errorJSON.errorCauses[0].errorSummary = loc('registration.error.password.passwordRequirementsNotMet', 'login');\n }\n }\n return errorJSON;\n}\n\n/**\n * Get authenticator display name from {@code remediation}.\n *\n * @param {Object} remediation\n */\nexport function getAuthenticatorDisplayName(remediation) {\n return remediation.relatesTo?.value?.displayName;\n}\n\n// Re-export function from FactorUtil\nexport { getPasswordComplexityDescriptionForHtmlList };\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport { loc, View, createButton, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from '../../../util/Enums';\nimport Util from '../../../util/Util';\nimport {\n FASTPASS_FALLBACK_SPINNER_TIMEOUT,\n IDENTIFIER_FLOW,\n LOOPBACK_RESPONSE_STATUS_CODE,\n OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP, \n OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE,\n REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON,\n} from '../utils/Constants';\n\nexport function appendLoginHint(deviceChallengeUrl, loginHint) {\n if (deviceChallengeUrl && loginHint) {\n deviceChallengeUrl += '&login_hint=' + loginHint;\n }\n\n return deviceChallengeUrl;\n}\n\nexport function doChallenge(view, fromView) {\n const deviceChallenge = view.getDeviceChallengePayload();\n const loginHint = view.options?.settings?.get('identifier');\n const HIDE_CLASS = 'hide';\n switch (deviceChallenge.challengeMethod) {\n case Enums.LOOPBACK_CHALLENGE:\n view.title = loc('deviceTrust.sso.redirectText', 'login');\n view.add(View.extend({\n className: 'loopback-content',\n template: hbs``\n }));\n view.doLoopback(deviceChallenge);\n break;\n case Enums.CUSTOM_URI_CHALLENGE:\n view.title = loc('customUri.title', 'login');\n view.add(View.extend({\n className: 'skinny-content',\n template: hbs`\n {{i18n code=\"verify.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n \\\n\n {{i18n code=\"customUri.required.content.prompt\" bundle=\"login\"}}\n
\n `,\n }));\n view.add(createButton({\n className: 'ul-button button button-wide button-primary',\n title: loc('customUri.required.content.button', 'login'),\n id: 'launch-ov',\n click: () => {\n view.doCustomURI();\n }\n }));\n view.add(View.extend({\n className: 'skinny-content',\n template: hbs`\n\n {{i18n code=\"customUri.required.content.download.title\" bundle=\"login\"}}\n
\n\n \n {{i18n code=\"customUri.required.content.download.linkText\" bundle=\"login\"}}\n \n
\n `,\n getTemplateData() {\n return {\n downloadOVLink: deviceChallenge.downloadHref\n };\n },\n }));\n view.customURI = appendLoginHint(deviceChallenge.href, loginHint);\n view.doCustomURI();\n break;\n case Enums.UNIVERSAL_LINK_CHALLENGE:\n view.title = loc('universalLink.title', 'login');\n view.add(View.extend({\n className: 'universal-link-content',\n template: hbs`\n \n {{i18n code=\"universalLink.content\" bundle=\"login\"}}\n `\n }));\n view.add(createButton({\n className: 'ul-button button button-wide button-primary',\n title: loc('oktaVerify.reopen.button', 'login'),\n click: () => {\n // only window.location.href can open universal link in iOS/MacOS\n // other methods won't do, ex, AJAX get or form get (Util.redirectWithFormGet)\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, loginHint);\n Util.redirect(deviceChallengeUrl);\n }\n }));\n break;\n case Enums.APP_LINK_CHALLENGE:\n view.title = loc('appLink.title', 'login');\n view.add(View.extend({\n className: 'app-link-content',\n template: hbs`\n \n{{i18n code=\"appLink.content\" bundle=\"login\"}}
\n `,\n getTemplateData() {\n return { hideClass: HIDE_CLASS };\n },\n postRender() {\n if (fromView === IDENTIFIER_FLOW) {\n this.$('.spinner').removeClass(HIDE_CLASS);\n setTimeout(_.bind(()=> {\n const data = { label: loc('goback', 'login') };\n this.options.appState.trigger('updateFooterLink', data);\n this.$('.spinner').addClass(HIDE_CLASS);\n this.$('.appLinkContent').removeClass(HIDE_CLASS);\n }, this), FASTPASS_FALLBACK_SPINNER_TIMEOUT);\n } else {\n this.$('.appLinkContent').removeClass(HIDE_CLASS);\n }\n },\n }));\n view.add(createButton({\n className: `${HIDE_CLASS} al-button button button-wide button-primary`,\n title: loc('oktaVerify.open.button', 'login'),\n click: () => {\n // only window.location.href can open app link in Android\n // other methods won't do, ex, AJAX get or form get (Util.redirectWithFormGet)\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, loginHint);\n Util.redirect(deviceChallengeUrl, window, true);\n },\n postRender() {\n if (fromView === IDENTIFIER_FLOW) {\n setTimeout(_.bind(()=> {\n this.$el.removeClass(HIDE_CLASS);\n }, this), FASTPASS_FALLBACK_SPINNER_TIMEOUT);\n } else {\n this.$el.removeClass(HIDE_CLASS);\n }\n }\n }));\n break;\n }\n}\n\nexport function cancelPollingWithParams(appState, pollingCancelAction, cancelReason, statusCode) {\n const actionParams = {};\n actionParams[REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON] = cancelReason;\n actionParams[LOOPBACK_RESPONSE_STATUS_CODE] = statusCode;\n appState.trigger('invokeAction', pollingCancelAction, actionParams);\n}\n\nexport function getBiometricsErrorOptions(error, isMessageObj) {\n let errorSummaryKeys;\n if (isMessageObj) {\n errorSummaryKeys = Object.values(error?.value[0]?.i18n);\n } else {\n errorSummaryKeys = error?.responseJSON?.errorSummaryKeys;\n }\n\n const isBiometricsRequiredMobile = errorSummaryKeys \n && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE);\n const isBiometricsRequiredDesktop = errorSummaryKeys \n && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP);\n let options = [];\n\n if (!isBiometricsRequiredMobile && !isBiometricsRequiredDesktop) {\n return options;\n }\n\n const bulletPoints = [\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point3', 'login')\n ];\n\n // Add an additional bullet point for desktop devices\n if (isBiometricsRequiredDesktop) {\n bulletPoints.push(\n loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.point4', 'login')\n );\n }\n\n options = {\n type: 'error',\n className: 'okta-verify-uv-callout-content',\n title: loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.title', 'login'),\n subtitle: loc('oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.description', 'login'),\n bullets: bulletPoints,\n };\n\n return options;\n}\n","export const SHOW_RESEND_TIMEOUT = 30000;\nexport const WARNING_TIMEOUT = 30000;\nexport const CHALLENGE_TIMEOUT = 300000;\nexport const MS_PER_SEC = 1000;\nexport const UNIVERSAL_LINK_POST_DELAY = 500;\nexport const CANCEL_POLLING_ACTION = 'authenticatorChallenge-cancel';\nexport const AUTHENTICATOR_CANCEL_ACTION = 'currentAuthenticator-cancel';\nexport const WIDGET_FOOTER_CLASS = 'siw-main-footer';\nexport const FASTPASS_FALLBACK_SPINNER_TIMEOUT = 4000;\nexport const IDENTIFIER_FLOW = 'IDENTIFIER';\nexport const OV_UV_ENABLE_BIOMETRICS_FASTPASS_DESKTOP \n = 'oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.desktop';\nexport const OV_UV_ENABLE_BIOMETRICS_FASTPASS_MOBILE \n = 'oie.authenticator.oktaverify.method.fastpass.verify.enable.biometrics.mobile';\nexport const AUTHENTICATOR_ALLOWED_FOR_OPTIONS = {\n ANY: 'any',\n SSO: 'sso',\n RECOVERY: 'recovery',\n};\nexport const REQUEST_PARAM_AUTHENTICATION_CANCEL_REASON = 'reason';\nexport const LOOPBACK_RESPONSE_STATUS_CODE = 'statusCode';\nexport const AUTHENTICATION_CANCEL_REASONS = {\n LOOPBACK_FAILURE: 'OV_UNREACHABLE_BY_LOOPBACK',\n OV_ERROR: 'OV_RETURNED_ERROR',\n USER_CANCELED: 'USER_CANCELED',\n};\n","/*!\n * Copyright (c) 2021-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n// TODO: Use AuthJS for device fingerprinting: OKTA-418160\nimport { $ } from 'okta';\n\nfunction getUserAgent() {\n return navigator.userAgent;\n}\n\nfunction isWindowsPhone(userAgent) {\n return userAgent.match(/windows phone|iemobile|wpdesktop/i);\n}\n\nexport default {\n isMessageFromCorrectSource($iframe, event) {\n return event.source === $iframe[0].contentWindow;\n },\n\n // NOTE: This utility is similar to the DeviceFingerprint.js file used for V1 authentication flows.\n generateDeviceFingerprint(fingerprintData) {\n return new Promise((resolve, reject) => {\n const userAgent = getUserAgent();\n if (!userAgent) {\n return reject('user agent is not defined');\n } else if (isWindowsPhone(userAgent)) {\n return reject('device fingerprint is not supported on Windows phones');\n }\n\n let $iframe;\n let iFrameTimeout;\n const self = this; // Needed for mocking\n\n function removeIframe() {\n $iframe.off();\n $iframe.remove();\n window.removeEventListener('message', onMessageReceivedFromOkta, false);\n }\n\n function handleError(reason) {\n removeIframe();\n reject(reason);\n }\n\n function onMessageReceivedFromOkta(event) {\n if (!self.isMessageFromCorrectSource($iframe, event)) {\n return;\n }\n // deviceFingerprint service is available, clear timeout\n clearTimeout(iFrameTimeout);\n if (!event || !event.data || event.origin !== fingerprintData.oktaDomainUrl) {\n handleError('no data');\n return;\n }\n try {\n const message = JSON.parse(event.data);\n\n if (message && message.type === 'FingerprintServiceReady') {\n sendMessageToOkta({\n type: 'GetFingerprint',\n });\n } else if (message && message.type === 'FingerprintAvailable') {\n removeIframe();\n resolve(message.fingerprint);\n } else {\n handleError('no data');\n }\n } catch (error) {\n //Ignore any errors since we could get other messages too\n }\n }\n\n function sendMessageToOkta(message) {\n const win = $iframe[0].contentWindow;\n\n if (win) {\n win.postMessage(JSON.stringify(message), fingerprintData.oktaDomainUrl);\n }\n }\n\n // Attach listener\n window.addEventListener('message', onMessageReceivedFromOkta, false);\n // Create and Load devicefingerprint page inside the iframe\n $iframe = $('`).last();\n try {\n Duo.init({\n host: contextualData.host,\n sig_request: contextualData.signedToken, // eslint-disable-line camelcase\n iframe: duoFrame.el,\n post_action: (signedData) => { // eslint-disable-line camelcase\n this.model.set('credentials.signatureData', signedData);\n this.saveForm(this.model);\n },\n });\n } catch (e) {\n duoFrame.remove();\n this.add(createCallout({\n type: 'error',\n subtitle: loc('oie.duo.iFrameError', 'login'),\n }), '.o-form-error-container');\n console.error(e); // eslint-disable-line no-console\n }\n },\n\n getContextualData() {\n // to be overriden\n }\n});\n","import { loc } from 'okta';\nimport BaseDuoAuthenticatorForm from './BaseDuoAuthenticatorForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseDuoAuthenticatorForm.extend({\n title() {\n return loc('oie.duo.verify.title', 'login');\n },\n\n getContextualData() {\n return this.options.appState.get('currentAuthenticatorEnrollment').contextualData;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseDuoAuthenticatorForm from './BaseDuoAuthenticatorForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseDuoAuthenticatorForm.extend({\n title() {\n return loc('oie.duo.enroll.title', 'login');\n },\n\n getContextualData() {\n return this.options.appState.get('currentAuthenticator').contextualData;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import hbs from 'handlebars-inline-precompile';\nimport { View } from 'okta';\n\n// Courage doesn't support HTML, hence creating a subtitle here.\nconst CheckYourEmailTitle = View.extend({\n className: 'okta-form-subtitle',\n attributes: {\n 'data-se': 'o-form-explain',\n },\n template: hbs`\n {{#if email}}\n {{i18n \n code=\"oie.email.verify.alternate.magicLinkToEmailAddress\" \n bundle=\"login\" \n arguments=\"email\" \n $1=\"$1\"\n }}\n {{else}}\n {{i18n \n code=\"oie.email.verify.alternate.magicLinkToYourEmail\" \n bundle=\"login\"\n }}\n {{/if}}\n \n {{#if useEmailMagicLinkValue}}\n {{i18n \n code=\"oie.email.verify.alternate.instructions\" \n bundle=\"login\" \n }}\n {{else}}\n {{i18n \n code=\"oie.email.verify.alternate.verificationCode.instructions\" \n bundle=\"login\" \n }}\n {{/if}}\n `,\n \n getTemplateData() {\n return this.options;\n },\n});\n \nconst EnterCodeLink = View.extend({\n template: hbs`\n \n `,\n});\n\nexport function getCheckYourEmailTitle() {\n return CheckYourEmailTitle;\n}\n\nexport function getEnterCodeLink() {\n return EnterCodeLink;\n}","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport email from '../shared/email';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BaseResendView from '../shared/BaseResendView';\nimport BaseFormWithPolling from '../../internals/BaseFormWithPolling';\n\nconst ResendView = BaseResendView.extend(\n {\n className: 'hide resend-email-view',\n events: {\n 'click a.resend-link' : 'handelResendLink'\n },\n\n initialize() {\n this.add(createCallout({\n content: `${loc('email.code.not.received', 'login')}\n ${loc('email.button.resend', 'login')}`,\n type: 'warning',\n }));\n },\n\n handelResendLink() {\n this.options.appState.trigger('invokeAction', this.options.resendEmailAction);\n // Hide warning, but reinitiate to show warning again after some threshold of polling\n if (!this.$el.hasClass('hide')) {\n this.$el.addClass('hide');\n }\n this.showCalloutAfterTimeout();\n },\n },\n);\n\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n\n this.add(ResendView, {\n selector: '.o-form-error-container',\n options: {\n resendEmailAction: this.resendEmailAction,\n }\n });\n this.startPolling();\n },\n\n saveForm() {\n BaseForm.prototype.saveForm.apply(this, arguments);\n this.stopPolling();\n },\n\n remove() {\n BaseForm.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n\n triggerAfterError(model, error) {\n BaseForm.prototype.triggerAfterError.apply(this, arguments);\n const isFormPolling = !!this.polling;\n this.stopPolling();\n\n if (error.responseJSON?.errorSummaryKeys?.includes('idx.session.expired')) {\n // Do NOT resume polling since session is invalid and polling is already stopped\n return;\n }\n\n if (this.isRateLimitError(error)) {\n // When polling encounter rate limit error, wait 60 sec for rate limit bucket to reset\n // before polling again & hide error message\n if (isFormPolling) {\n setTimeout(() => {\n model.trigger('clearFormError');\n }, 0);\n }\n this.startPolling(60000);\n } else {\n this.startPolling(this.options.appState.get('dynamicRefreshInterval'));\n }\n },\n\n isRateLimitError(error) {\n return (error.responseJSON?.errorSummaryKeys?.includes('tooManyRequests') // IDX API error\n || (error.responseJSON?.errorCode === 'E0000047') && !error.responseJSON?.errorIntent); // Standard API error\n },\n },\n email,\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorView.prototype.Body;\n\nconst SubtitleView = View.extend({\n template: hbs`\n \n {{#if email}}\n {{i18n\n code=\"oie.email.verify.subtitleWithEmailAddress\"\n bundle=\"login\"\n arguments=\"email\"\n $1=\"$1\"\n }}\n {{else}}\n {{i18n\n code=\"oie.email.verify.subtitleWithoutEmailAddress\"\n bundle=\"login\"\n }}\n {{/if}}\n
\n `,\n\n getTemplateData() {\n const email = this.options.appState.get('currentAuthenticatorEnrollment')?.profile?.email;\n return {\n email,\n };\n },\n});\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n {\n title() {\n return loc('oie.email.mfa.title', 'login');\n },\n\n save() {\n return loc('oie.email.verify.primaryButton', 'login');\n },\n\n postRender() {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n this.add(SubtitleView, {\n prepend: true,\n selector: '.o-form-info-container',\n });\n },\n\n getUISchema() {\n // Prevent from displaying radio buttons on the UI\n const uiSchemas = BaseAuthenticatorEmailForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n },\n);\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorEmailView from './BaseAuthenticatorEmailView';\nimport { getCheckYourEmailTitle, getEnterCodeLink } from './AuthenticatorEmailViewUtil';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorEmailView.prototype.Body;\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n Object.assign({\n noButtonBar: true,\n resendEmailAction: 'currentAuthenticatorEnrollment-resend',\n\n events: {\n 'click .enter-auth-code-instead-link': 'showAuthCodeEntry',\n },\n\n initialize() {\n BaseAuthenticatorEmailForm.prototype.initialize.apply(this, arguments);\n\n const { email } =\n this.options.currentViewState.relatesTo?.value?.profile || {};\n\n const useEmailMagicLinkValue = this.isUseEmailMagicLink();\n\n if (useEmailMagicLinkValue) {\n this.add(getEnterCodeLink(), {\n prepend: true,\n selector: '.o-form-error-container',\n });\n } \n\n this.add(getCheckYourEmailTitle(), {\n prepend: true,\n selector: '.o-form-error-container',\n options: { email, useEmailMagicLinkValue },\n });\n },\n\n postRender() {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n if (this.isUseEmailMagicLink()) {\n this.showCodeEntryField(false);\n } else {\n this.noButtonBar = false;\n }\n },\n\n isUseEmailMagicLink() {\n const useEmailMagicLink = this.options.appState.get('currentAuthenticatorEnrollment')?.\n contextualData?.useEmailMagicLink;\n return useEmailMagicLink !== undefined ? useEmailMagicLink : true;\n },\n\n showAuthCodeEntry() {\n this.noButtonBar = false;\n this.render();\n\n this.showCodeEntryField(true);\n this.showEnterAuthCodeInsteadLink(false);\n },\n\n showCodeEntryField(show = true) {\n const $textField = this.$el.find('.o-form-fieldset-container');\n $textField.toggle(show);\n },\n\n showEnterAuthCodeInsteadLink(show = true) {\n const $enterAuthCodeInsteadLink = this.$el.find(\n '.enter-auth-code-instead-link'\n );\n $enterAuthCodeInsteadLink.toggle(show);\n },\n })\n);\n\nexport default BaseAuthenticatorEmailView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseAuthenticatorEmailView from './BaseAuthenticatorEmailView';\nimport { getCheckYourEmailTitle, getEnterCodeLink } from './AuthenticatorEmailViewUtil';\n\nconst BaseAuthenticatorEmailForm = BaseAuthenticatorEmailView.prototype.Body;\n\nconst Body = BaseAuthenticatorEmailForm.extend(\n Object.assign({\n resendEmailAction: 'currentAuthenticator-resend',\n\n initialize() {\n BaseAuthenticatorEmailForm.prototype.initialize.apply(this, arguments);\n\n const email = this.options.appState.get('user')?.identifier || {};\n\n const useEmailMagicLinkValue = this.isUseEmailMagicLink();\n\n if (useEmailMagicLinkValue !== undefined) {\n \n this.noButtonBar = true;\n this.events['click .enter-auth-code-instead-link'] = 'showAuthCodeEntry';\n\n if (useEmailMagicLinkValue) {\n this.add(getEnterCodeLink(), {\n prepend: true,\n selector: '.o-form-error-container',\n });\n } \n \n this.add(getCheckYourEmailTitle(), {\n prepend: true,\n selector: '.o-form-error-container',\n options: { email, useEmailMagicLinkValue },\n });\n } else {\n this.subtitle = loc('oie.email.enroll.subtitle', 'login');\n }\n },\n\n postRender() {\n if (this.isUseEmailMagicLink() !== undefined) {\n BaseAuthenticatorEmailForm.prototype.postRender.apply(this, arguments);\n if (this.isUseEmailMagicLink()) {\n this.showCodeEntryField(false);\n } else {\n this.noButtonBar = false;\n }\n }\n },\n\n isUseEmailMagicLink() {\n return this.options.appState.get('currentAuthenticator')?.\n contextualData?.useEmailMagicLink;\n },\n\n showAuthCodeEntry() {\n this.noButtonBar = false;\n this.render();\n\n this.showCodeEntryField(true);\n this.showEnterAuthCodeInsteadLink(false);\n },\n\n showCodeEntryField(show = true) {\n const $textField = this.$el.find('.o-form-fieldset-container');\n $textField.toggle(show);\n },\n\n showEnterAuthCodeInsteadLink(show = true) {\n const $enterAuthCodeInsteadLink = this.$el.find(\n '.enter-auth-code-instead-link'\n );\n $enterAuthCodeInsteadLink.toggle(show);\n },\n })\n);\n\nexport default BaseAuthenticatorEmailView.extend({\n Body,\n});\n","const I18N_BASE_ATTRIBUTE_ENROLL_PROFILE_MAPPINGS = {\n /**\n * Mapping fields in the enroll profile remediation form to their i18n label for localization.\n */\n 'enroll-profile.userProfile.lastName': 'oie.user.profile.lastname',\n 'enroll-profile.userProfile.firstName': 'oie.user.profile.firstname',\n 'enroll-profile.userProfile.email': 'oie.user.profile.primary.email',\n 'enroll-profile.userProfile.secondEmail': 'oie.user.profile.secondary.email',\n 'enroll-profile.userProfile.middleName': 'oie.user.profile.middleName',\n 'enroll-profile.userProfile.honorificPrefix': 'oie.user.profile.honorificPrefix',\n 'enroll-profile.userProfile.honorificSuffix': 'oie.user.profile.honorificSuffix',\n 'enroll-profile.userProfile.title': 'oie.user.profile.title',\n 'enroll-profile.userProfile.displayName': 'oie.user.profile.displayName',\n 'enroll-profile.userProfile.nickName': 'oie.user.profile.nickName',\n 'enroll-profile.userProfile.profileUrl': 'oie.user.profile.profileUrl',\n 'enroll-profile.userProfile.mobilePhone': 'oie.user.profile.mobilePhone',\n 'enroll-profile.userProfile.primaryPhone': 'oie.user.profile.primaryPhone',\n 'enroll-profile.userProfile.streetAddress': 'oie.user.profile.streetAddress',\n 'enroll-profile.userProfile.city': 'oie.user.profile.city',\n 'enroll-profile.userProfile.state': 'oie.user.profile.state',\n 'enroll-profile.userProfile.zipCode': 'oie.user.profile.zipCode',\n 'enroll-profile.userProfile.postalCode': 'oie.user.profile.postalCode',\n 'enroll-profile.userProfile.countryCode': 'oie.user.profile.countryCode',\n 'enroll-profile.userProfile.postalAddress': 'oie.user.profile.postalAddress',\n 'enroll-profile.userProfile.preferredLanguage': 'oie.user.profile.preferredLanguage',\n 'enroll-profile.userProfile.locale': 'oie.user.profile.locale',\n 'enroll-profile.userProfile.timezone': 'oie.user.profile.timezone',\n 'enroll-profile.userProfile.userType': 'oie.user.profile.userType',\n 'enroll-profile.userProfile.employeeNumber': 'oie.user.profile.employeeNumber',\n 'enroll-profile.userProfile.costCenter': 'oie.user.profile.costCenter',\n 'enroll-profile.userProfile.organization': 'oie.user.profile.organization',\n 'enroll-profile.userProfile.division': 'oie.user.profile.division',\n 'enroll-profile.userProfile.department': 'oie.user.profile.department',\n 'enroll-profile.userProfile.managerId': 'oie.user.profile.managerId',\n 'enroll-profile.userProfile.manager': 'oie.user.profile.manager',\n 'enroll-profile.credentials.passcode': 'oie.password.label',\n};\n\nexport {\n I18N_BASE_ATTRIBUTE_ENROLL_PROFILE_MAPPINGS,\n};\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'google-authenticator-challenge',\n\n title() {\n return loc('oie.verify.google_authenticator.otp.title', 'login');\n },\n\n subtitle() {\n return loc('oie.verify.google_authenticator.otp.description', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { addCustomButton, BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport EnrollGoogleAuthenticatorBarcodeView from './EnrollGoogleAuthenticatorBarcodeView';\nimport EnrollAuthenticatorManualSetupView from './EnrollAuthenticatorManualSetupView';\n\nconst VIEW_TO_DISPLAY = 'viewToDisplay';\nconst viewToDisplayState = {\n BARCODE: 'barcode',\n MANUAL: 'manual',\n ENTER_CODE: 'enterCode',\n};\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.enroll.google_authenticator.setup.title', 'login');\n },\n\n noButtonBar: true,\n\n className: 'oie-enroll-google-authenticator',\n\n enterCodeSubtitle: View.extend({\n template: hbs`\n \n {{i18n code=\"oie.enroll.google_authenticator.enterCode.title\" bundle=\"login\"}}\n
\n `,\n }),\n\n getUISchema() {\n const schema = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n const nextButton = addCustomButton({\n className: 'google-authenticator-next',\n title: loc('oform.next', 'login'),\n attributes: {\n style: 'display: block',\n },\n click: () => {\n this.model.set(VIEW_TO_DISPLAY, viewToDisplayState.ENTER_CODE);\n }\n });\n\n const verifyButton = addCustomButton({\n className: 'google-authenticator-verify',\n title: loc('oform.verify', 'login'),\n click: () => {\n this.$el.submit();\n }\n });\n\n schema[0].showWhen = {\n viewToDisplay: viewToDisplayState.ENTER_CODE,\n };\n\n // Add Enter Code Subtitle\n schema.unshift({\n View: this.enterCodeSubtitle,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.ENTER_CODE,\n }\n });\n\n schema.push(\n {\n View: EnrollGoogleAuthenticatorBarcodeView,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.BARCODE,\n }\n }, {\n View: EnrollAuthenticatorManualSetupView,\n selector: '.o-form-fieldset-container',\n showWhen: {\n viewToDisplay: viewToDisplayState.MANUAL,\n }\n }, {\n label: false,\n className: 'shared-secret',\n type: 'text',\n placeholder: this.options.appState.get('currentAuthenticator').contextualData.sharedSecret,\n disabled: true,\n showWhen: {\n viewToDisplay: viewToDisplayState.MANUAL,\n }\n },\n {\n View: nextButton,\n showWhen: {\n viewToDisplay: (val) => val === viewToDisplayState.BARCODE || val === viewToDisplayState.MANUAL,\n }\n },\n {\n View: verifyButton,\n showWhen: {\n viewToDisplay: (val) => val === viewToDisplayState.ENTER_CODE,\n }\n },\n );\n return schema;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n viewToDisplay: {\n value: 'barcode',\n type: 'string',\n required: true,\n values: [viewToDisplayState.BARCODE, viewToDisplayState.MANUAL, viewToDisplayState.ENTER_CODE],\n }\n },\n ModelClass.prototype.local,\n );\n return ModelClass.extend({\n local,\n });\n },\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'oie-enroll-google-authenticator-manual-setup',\n template: hbs`\n \n {{i18n code=\"oie.enroll.google_authenticator.cannotScanBarcode.title\" bundle=\"login\"}}\n
\n \n {{i18n code=\"oie.enroll.google_authenticator.manualSetupInstructions\" bundle=\"login\"}}\n
\n `,\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'oie-enroll-google-authenticator-barcode',\n template: hbs`\n {{#if href}}\n\n {{i18n code=\"oie.enroll.google_authenticator.scanBarcode.title\" bundle=\"login\"}}\n
\n \n
\n {{/if}}\n `,\n\n getTemplateData() {\n const contextualData = this.options.appState.get('currentAuthenticator').contextualData;\n return { href: contextualData.qrcode?.href };\n },\n\n events: {\n 'click .cannot-scan-link': function(e) {\n e.preventDefault();\n this.options.model.set('viewToDisplay', 'manual');\n }\n },\n});\n","import { loc } from 'okta';\nimport BaseIdPAuthenticatorBody from './BaseIdPAuthenticatorBody';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseIdPAuthenticatorBody.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.enroll.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.enroll.description', 'login', [displayName]);\n },\n\n save() {\n return loc('mfa.enroll', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport BaseIdPAuthenticatorBody from './BaseIdPAuthenticatorBody';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseIdPAuthenticatorBody.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.challenge.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return loc('oie.idp.challenge.description', 'login', [displayName]);\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { BaseForm } from '../../internals';\n\nexport default BaseForm.extend({\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.model.set('useRedirect', true);\n }\n\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ON_PREM_TOKEN_CHANGE_KEY = 'errors.E0000113';\n\nconst Body = BaseForm.extend({\n\n className: 'on-prem-authenticator-verify',\n\n modelEvents: {\n 'error': '_checkTokenChange'\n },\n\n title() {\n const vendorName =\n this.options.appState.getAuthenticatorDisplayName() ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n return loc('oie.on_prem.verify.title', 'login', [vendorName]);\n },\n\n _checkTokenChange(model, convertedErrors) {\n const errorSummaryKeys = convertedErrors?.responseJSON?.errorSummaryKeys;\n if (errorSummaryKeys && errorSummaryKeys.includes(ON_PREM_TOKEN_CHANGE_KEY)) {\n // this means we are in change pin, so we should clear out answer input\n this.model.set('credentials.passcode', '');\n this.render();\n }\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ON_PREM_TOKEN_CHANGE_KEY = 'errors.E0000113';\n\nconst Body = BaseForm.extend({\n\n className: 'on-prem-authenticator-enroll',\n\n modelEvents: {\n 'error': '_checkTokenChange'\n },\n\n title() {\n const vendorName =\n this.options.appState.getAuthenticatorDisplayName() ||\n loc('oie.on_prem.authenticator.default.vendorName', 'login');\n return loc('oie.on_prem.enroll.title', 'login', [vendorName]);\n },\n\n _checkTokenChange(model, convertedErrors) {\n const errorSummaryKeys = convertedErrors?.responseJSON?.errorSummaryKeys;\n if (errorSummaryKeys && errorSummaryKeys.includes(ON_PREM_TOKEN_CHANGE_KEY)) {\n // this means we are in change pin, so we should clear out answer input\n this.model.set('credentials.passcode', '');\n this.render();\n }\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { Collection } from 'okta';\nimport { BaseForm } from '../../internals';\nimport AuthenticatorVerifyOptions from '../../components/AuthenticatorVerifyOptions';\nimport { getAuthenticatorDataForVerification } from '../../utils/AuthenticatorUtil';\nimport { Body as SelectAuthenticatorVerifyViewBody } from '../SelectAuthenticatorVerifyView';\nimport { AUTHENTICATOR_KEY } from '../../../ion/RemediationConstants';\n\nconst Body = SelectAuthenticatorVerifyViewBody.extend({\n getUISchema() {\n // Change the UI schema to not display radios here.\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n const methodsSchema = uiSchemas.find(schema => schema.name === 'authenticator.methodType');\n\n this._sortMethodOptionsIfDeviceKnown(methodsSchema.options);\n\n const methodOptions = methodsSchema.options.map((option) => {\n return Object.assign({}, option, getAuthenticatorDataForVerification({authenticatorKey: AUTHENTICATOR_KEY.OV}));\n });\n return [{\n View: AuthenticatorVerifyOptions,\n options: {\n name: methodsSchema.name,\n collection: new Collection(methodOptions),\n }\n }];\n },\n\n // If the `deviceKnown` attribute is true, we should put the signed_nonce method to the top of authenticator list.\n // This is in sync with v2/ion/ui-schema/ion-object-handler.js - createOVOptions\n _sortMethodOptionsIfDeviceKnown(methodOptions) {\n // Check if the `deviceKnown` attribute is true\n const deviceKnown = this.options?.currentViewState?.relatesTo?.value?.deviceKnown;\n\n if (deviceKnown) {\n const signedNonceIndex = methodOptions.findIndex((e) => e.value === 'signed_nonce');\n\n if (signedNonceIndex > 0) {\n const signedNonceModel = methodOptions[signedNonceIndex];\n\n // Put the 'signed_nonce' option to the top of the list\n methodOptions.splice(signedNonceIndex, 1);\n methodOptions.unshift(signedNonceModel);\n }\n }\n }\n});\n\nexport default Body;\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\n\nconst Body = BaseForm.extend(Object.assign({\n className: 'okta-verify-send-push-form',\n\n save() {\n return loc('oie.okta_verify.sendPushButton', 'login');\n },\n\n title() {\n return loc('oie.okta_verify.push.title', 'login');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n // Move checkbox below the button\n // Checkbox is rendered by BaseForm using remediation response and \n // hence by default always gets added above buttons.\n const checkbox = this.$el.find('[data-se=\"o-form-fieldset-authenticator.autoChallenge\"]');\n checkbox.length && this.$el.find('.o-form-button-bar').after(checkbox);\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n}));\n \nexport default Body;\n","import { BaseFooter } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport \nChallengeAuthenticatorDataOktaVerifyPushOnlyFormView\n from './ChallengeAuthenticatorDataOktaVerifyPushOnlyFormView';\nimport ChallengeAuthenticatorDataOktaVerifyFormView from './ChallengeAuthenticatorDataOktaVerifyFormView';\n\nexport default BaseAuthenticatorView.extend({\n initialize() {\n BaseAuthenticatorView.prototype.initialize.apply(this, arguments);\n if (this.isPushOnlyWithAutoChallengeFlow()) {\n this.Body = ChallengeAuthenticatorDataOktaVerifyPushOnlyFormView;\n } else {\n this.Body = ChallengeAuthenticatorDataOktaVerifyFormView;\n this.Footer = BaseFooter;\n }\n },\n\n isPushOnlyWithAutoChallengeFlow() {\n const methodType = this.options.appState.getSchemaByName('authenticator.methodType');\n const hasAutoChallengeSchema = this.options.appState.getSchemaByName('authenticator.autoChallenge');\n const methodTypeOptions = methodType?.options;\n return hasAutoChallengeSchema && methodTypeOptions.length === 1 && methodTypeOptions[0].value === 'push';\n },\n});\n","import { _, createCallout } from 'okta';\nimport { BaseOktaVerifyChallengeView } from '../../internals';\nimport { getBiometricsErrorOptions } from '../../utils/ChallengeViewUtil';\n\nconst Body = BaseOktaVerifyChallengeView.extend({\n getDeviceChallengePayload() {\n return this.options.currentViewState.relatesTo.value.contextualData.challenge.value;\n },\n\n showCustomFormErrorCallout(error) {\n const options = getBiometricsErrorOptions(error, false);\n \n // If not biometrics error, just show the returned error message\n if (_.isEmpty(options)) {\n return false;\n }\n\n this.showMessages(createCallout(options));\n return true;\n },\n});\n\nexport default Body;\n","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst OV_NMC_FORCE_UPGRAGE_SERVER_KEY = 'oie.authenticator.app.method.push.force.upgrade.number_challenge';\nconst OV_UV_ENABLE_BIOMETRIC_SERVER_KEY = 'oie.authenticator.app.method.push.verify.enable.biometrics';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'okta-verify-resend-push',\n\n title() {\n return loc('oie.okta_verify.push.title', 'login');\n },\n\n save() {\n return loc('oie.okta_verify.push.resend', 'login');\n },\n\n showMessages() {\n let options = {};\n if (this.options.appState.containsMessageWithI18nKey(OV_NMC_FORCE_UPGRAGE_SERVER_KEY)) {\n // add a title for OV force upgrade\n options.title = loc('oie.numberchallenge.force.upgrade.title', 'login');\n } else if (this.options.appState.containsMessageWithI18nKey(OV_UV_ENABLE_BIOMETRIC_SERVER_KEY)) {\n // add a title for OV enable biometrics message during verification\n options.content = null;\n options.className = 'okta-verify-uv-callout-content';\n options.title = loc('oie.authenticator.app.method.push.verify.enable.biometrics.title', 'login');\n options.subtitle = loc('oie.authenticator.app.method.push.verify.enable.biometrics.description', 'login');\n options.type = 'error';\n options.bullets = [\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point3', 'login')\n ];\n options = createCallout(options);\n }\n BaseForm.prototype.showMessages.call(this, options);\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { BaseForm } from '../../internals';\nimport { loc, createCallout, _ } from 'okta';\nimport { getBiometricsErrorOptions } from '../../utils/ChallengeViewUtil';\n\n// for EA,\n// redirect is needed for Apple SSO Extension to intercept the request, because\n// - XHR request is not interceptable\n// - form post is interceptable, but some app (Outlook) closes the app after\n// We may have a different approach/UX for GA\nconst Body = BaseForm.extend({\n noButtonBar: true,\n\n className: 'ion-form device-challenge-poll',\n\n title() {\n return loc('deviceTrust.sso.redirectText', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n\n this.listenTo(this.model, 'error', () => {\n this.$('.spinner').hide();\n });\n this.add('\n {{i18n code=\"oie.enroll.google_authenticator.scanBarcode.description\" bundle=\"login\"}}\n
\n \n');\n\n const isGetMethod = this.options.currentViewState?.method?.toLowerCase() === 'get';\n this.model.set('useRedirect', isGetMethod);\n this.trigger('save', this.model);\n },\n\n showCustomFormErrorCallout(error) {\n const options = getBiometricsErrorOptions(error, false);\n \n // If not biometrics error, just show the returned error message\n if (_.isEmpty(options)) {\n return false;\n }\n\n this.showMessages(createCallout(options));\n return true;\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst OV_UV_ENABLE_BIOMETRIC_SERVER_KEY = 'oie.authenticator.oktaverify.method.totp.verify.enable.biometrics';\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'okta-verify-totp-challenge',\n\n title() {\n return loc('oie.okta_verify.totp.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n showCustomFormErrorCallout(error) {\n const errorSummaryKeys = error?.responseJSON?.errorSummaryKeys;\n let options;\n if (errorSummaryKeys && errorSummaryKeys.includes(OV_UV_ENABLE_BIOMETRIC_SERVER_KEY)) {\n options = {\n type: 'error',\n className: 'okta-verify-uv-callout-content',\n title: loc('oie.authenticator.app.method.push.verify.enable.biometrics.title', 'login'),\n subtitle: loc('oie.authenticator.app.method.push.verify.enable.biometrics.description', 'login'),\n bullets: [\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point1', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point2', 'login'),\n loc('oie.authenticator.app.method.push.verify.enable.biometrics.point3', 'login')\n ],\n };\n this.showMessages(createCallout(options));\n return true;\n }\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { Body as ChallengePushViewBody } from '../shared/ChallengePushView';\nimport ChallengeOktaVerifyFastPassView from './ChallengeOktaVerifyFastPassView';\nimport NumberChallengePushView from './NumberChallengePushView';\nimport { AUTHENTICATOR_METHODS } from '../../../ion/RemediationConstants';\n\nexport default BaseAuthenticatorView.extend({\n initialize() {\n BaseAuthenticatorView.prototype.initialize.apply(this, arguments);\n const currentAuthenticator = this.options?.appState?.get('currentAuthenticator');\n const selectedMethod = currentAuthenticator?.methods[0];\n if (selectedMethod?.type === AUTHENTICATOR_METHODS.PUSH &&\n currentAuthenticator?.contextualData?.correctAnswer) {\n this.Body = NumberChallengePushView;\n } else if (selectedMethod?.type === AUTHENTICATOR_METHODS.PUSH) {\n this.Body = ChallengePushViewBody;\n } else {\n this.Body = ChallengeOktaVerifyFastPassView;\n }\n },\n});\n","import { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n template: hbs`\n {{#if href}}\n
- \n
- {{i18n code=\"oie.enroll.okta_verify.qrcode.step1\" bundle=\"login\"}} \n
- {{i18n code=\"oie.enroll.okta_verify.qrcode.step2\" bundle=\"login\"}} \n
- {{i18n code=\"oie.enroll.okta_verify.qrcode.step3\" bundle=\"login\"}} \n
\n \n
\n {{/if}}\n {{#if email}}\n - \n
- {{{i18n code=\"oie.enroll.okta_verify.email.info\" bundle=\"login\" arguments=\"email\"}}} \n \n
- \n
- {{{i18n code=\"oie.enroll.okta_verify.sms.info\" bundle=\"login\" arguments=\"phoneNumber\"}}} \n \n
\n {{i18n\n code=\"oie.numberchallenge.instruction\"\n bundle=\"login\"\n arguments=\"correctAnswer\"\n $1=\"$1\"}}\n
\n\n
\n `,\n getTemplateData() {\n const correctAnswer = this.options.appState.get('currentAuthenticator')?.contextualData?.correctAnswer;\n return {\n correctAnswer\n };\n },\n});\n\n\nexport default NumberChallengePhoneView;\n","import { loc } from 'okta';\nimport { BaseFormWithPolling } from '../../internals';\nimport polling from '../shared/polling';\nimport ResendNumberChallengeView from './ResendNumberChallengeView';\nimport NumberChallengePhoneView from './NumberChallengePhoneView';\n\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n noButtonBar: true,\n\n className: 'okta-verify-number-challenge',\n\n events: {\n 'click a.resend-number-challenge': 'handleResendNumberChallenge'\n },\n\n handleResendNumberChallenge() {\n this.options.appState.trigger('invokeAction', 'currentAuthenticator-resend');\n // hide the warning\n this.options.appState.trigger('hideNumberChallengeWarning');\n },\n\n title() {\n return loc('oie.okta_verify.push.sent', 'login');\n },\n\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n this.add(NumberChallengePhoneView);\n },\n\n triggerAfterError() {\n BaseFormWithPolling.prototype.triggerAfterError.apply(this, arguments);\n this.stopPolling();\n this.$el.find('.o-form-fieldset-container').empty();\n },\n\n postRender() {\n BaseFormWithPolling.prototype.postRender.apply(this, arguments);\n this.startPoll();\n },\n\n startPoll() {\n this.startPolling();\n this.addWarning();\n },\n\n stopPoll() {\n this.stopPolling();\n },\n\n addWarning() {\n this.add(ResendNumberChallengeView, '.o-form-error-container');\n this.options.appState.trigger('showNumberChallengeWarning');\n },\n\n remove() {\n BaseFormWithPolling.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n },\n\n polling,\n));\n\nexport default Body;\n","import { createCallout } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseResendView from '../shared/BaseResendView';\n\nexport default BaseResendView.extend({\n //only show after certain threshold of polling\n className: 'hide resend-ov-link-view',\n events: {\n 'click a.resend-link' : 'handelResendLink'\n },\n\n initialize() {\n const selectedChannel = this.options.appState.get('currentAuthenticator').contextualData.selectedChannel;\n this.add(createCallout({\n content: selectedChannel === 'email' ?\n hbs `{{{i18n code=\"oie.enroll.okta_verify.email.notReceived\" bundle=\"login\"}}}`:\n hbs `{{{i18n code=\"oie.enroll.okta_verify.sms.notReceived\" bundle=\"login\"}}}`,\n type: 'warning',\n }));\n },\n\n handelResendLink() {\n this.options.appState.trigger('invokeAction', 'currentAuthenticator-resend');\n //hide warning, but reinitiate to show warning again after some threshold of polling\n this.$el.addClass('hide');\n this.showCalloutAfterTimeout();\n },\n});\n","import { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { WARNING_TIMEOUT } from '../../utils/Constants';\n\nconst ResendNumberChallengeView = View.extend({\n initialize() {\n this.listenTo(this.options.appState, 'showNumberChallengeWarning', () => {\n this.startWarningTimeout();\n });\n\n this.listenTo(this.options.appState, 'hideNumberChallengeWarning', () => {\n this.clearWarning();\n });\n },\n className: 'resend-number-challenge-warning hide',\n template: hbs`\n \n
\n \n {{correctAnswer}}\n
\n \n \n \n
\n `,\n showWarning() {\n this.$el.removeClass('hide');\n },\n clearWarning() {\n this.$el.addClass('hide');\n clearTimeout(this.warningTimeout);\n this.startWarningTimeout();\n },\n startWarningTimeout() {\n this.warningTimeout = setTimeout(_.bind(function() {\n this.showWarning();\n }, this), WARNING_TIMEOUT);\n }\n});\n\nexport default ResendNumberChallengeView;\n","import { loc, _ } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BrowserFeatures from '../../../../util/BrowserFeatures';\n\nconst Body = BaseForm.extend({\n title() {\n return (BrowserFeatures.isAndroid() || BrowserFeatures.isIOS())\n ? loc('oie.enroll.okta_verify.setup.title', 'login')\n : loc('oie.enroll.okta_verify.select.channel.title', 'login');\n },\n getUISchema() {\n const schemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n // filter selected channel\n const channelField = _.find(schemas, (schema) => schema.name === 'authenticator.channel');\n channelField.options = _.filter(channelField?.options, (option) =>\n option.value !== this.options.appState.get('currentAuthenticator')?.contextualData?.selectedChannel);\n channelField.value = channelField.options[0]?.value;\n const description = {\n View: loc('oie.enroll.okta_verify.select.channel.description', 'login'),\n selector: '.o-form-fieldset-container',\n };\n return [description, ...schemas];\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { FORMS as RemediationForms } from '../../../ion/RemediationConstants';\n\nexport default View.extend({\n className: 'switch-channel-text',\n template: hbs `\n {{#if isQRcodeChannel}}\n \n {{i18n code=\"enroll.totp.cannotScan\" bundle=\"login\"}}\n {{else}}\n {{{i18n code=\"oie.enroll.okta_verify.switch.channel.link.text\" bundle=\"login\"}}}\n {{/if}}`,\n getTemplateData() {\n return {\n isQRcodeChannel: this.options.appState.get('currentAuthenticator').contextualData.selectedChannel === 'qrcode',\n };\n },\n postRender() {\n this.$el.find('.switch-channel-link').on('click', (event) => {\n const appState = this.options.appState;\n event.preventDefault();\n appState.trigger('switchForm', RemediationForms.SELECT_ENROLLMENT_CHANNEL);\n });\n },\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport AuthenticatorFooter from '../../components/AuthenticatorFooter';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { getForgotPasswordLink } from '../../utils/LinksUtil';\nimport { isCustomizedI18nKey } from '../../../ion/i18nTransformer';\n\n\nconst Body = BaseForm.extend({\n\n title: function() {\n return loc('oie.password.challenge.title', 'login');\n },\n\n save: function() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n /**\n * Update UI schemas for customization from .widgetrc.js or Admin Customization settings page.\n * @returns Array\n */\n getUISchema() {\n const schemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n const { settings } = this.options;\n const passwordExplainLabeli18nKey = 'primaryauth.password.tooltip';\n\n const passwordSchema = schemas.find(({name}) => name === 'credentials.passcode');\n\n if (passwordSchema && isCustomizedI18nKey(passwordExplainLabeli18nKey, settings)) {\n passwordSchema.explain = loc(passwordExplainLabeli18nKey, 'login');\n passwordSchema['explain-top'] = true;\n }\n\n return schemas;\n },\n\n});\n\nconst Footer = AuthenticatorFooter.extend({\n links: function() {\n let links = AuthenticatorFooter.prototype.links.apply(this, arguments);\n\n links = getForgotPasswordLink(this.options.appState, this.options.settings).concat(links);\n\n return links;\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n Footer,\n});\n","import { loc } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport {\n getPasswordComplexityDescriptionForHtmlList,\n removeRequirementsFromError } from '../../utils/AuthenticatorUtil';\nimport { generatePasswordPolicyHtml } from './PasswordPolicyUtil';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.password.enroll.title', 'login');\n },\n save() {\n return loc('oform.next', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n const policy = this.getPasswordPolicySettings();\n this.displayPasswordPolicy(policy);\n },\n\n displayPasswordPolicy(policy) {\n if (policy) {\n const rulesList = getPasswordComplexityDescriptionForHtmlList( policy );\n generatePasswordPolicyHtml(this, rulesList, true);\n }\n },\n\n triggerAfterError(model, error) {\n error.responseJSON = removeRequirementsFromError(error.responseJSON);\n this.options.appState.trigger('afterError', error);\n },\n\n getPasswordPolicySettings() {\n // This will be overridden by following scenario since the policies could be different for those.\n // - password reset (`ReEnrollAuthenticatorPasswordView.js`)\n //\n const relatesToObject = this.options.currentViewState.relatesTo;\n return relatesToObject?.value?.settings;\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.concat([\n {\n name: 'confirmPassword',\n label: loc('oie.password.confirmPasswordLabel','login'),\n type: 'password',\n 'label-top': true,\n params: {\n showPasswordToggle: this.settings.get('showPasswordToggle'),\n }\n }\n ]);\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n\n Body,\n\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n confirmPassword: {\n type: 'string',\n required: true,\n }\n },\n ModelClass.prototype.local,\n );\n return ModelClass.extend({\n local,\n validate() {\n if (this.get('credentials.passcode') !== this.get('confirmPassword') &&\n this.get('credential.value') !== this.get('confirmPassword')) {\n const errors = {\n 'confirmPassword': loc('password.error.match', 'login'),\n };\n return errors;\n } else {\n return null;\n }\n }\n });\n }\n});\n","import { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nconst generatePasswordPolicyHtml = function(form, rulesList, prepend) {\n form.add(\n View.extend({\n tagName: 'section',\n template:\n hbs`{{i18n\n code=\"oie.numberchallenge.warning\"\n bundle=\"login\"\n $1=\"$1\"}}\n
\n\n {{i18n code=\"password.complexity.requirements.header\" bundle=\"login\"}}\n
\n - \n {{#each rulesList}}
- {{this}} {{/each}}\n
${sendText}\n ${this.model.escape('phoneNumber')}\n
`);\n },\n\n getUISchema() {\n // Change the UI schema to not display radios here.\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n return uiSchemas.filter(schema => schema.name !== 'authenticator.methodType');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n const secondaryMode = this.model.get('secondaryMode');\n if (secondaryMode) {\n const secondaryButtonTitle = (secondaryMode === 'sms')\n ? loc('oie.phone.sms.secondaryButton', 'login')\n : loc('oie.phone.call.secondaryButton', 'login');\n this.add(\n `${secondaryButtonTitle}`,\n '.o-form-button-bar');\n }\n },\n },\n);\n\nexport default BaseAuthenticatorView.extend({\n Body,\n\n createModelClass({ uiSchema }) {\n // It is important to get methods from here to maintain single source of truth.\n const { options: methods } = _.find(uiSchema, schema => schema.name === 'authenticator.methodType');\n const relatesToObject = this.options.currentViewState.relatesTo;\n const { profile } = relatesToObject?.value || {};\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign({\n primaryMode: {\n 'value': methods[0].value,\n 'type': 'string',\n },\n secondaryMode: {\n 'value': methods[1] && methods[1].value,\n 'type': 'string',\n },\n phoneNumber: {\n 'value': profile?.phoneNumber ? profile.phoneNumber : loc('oie.phone.alternate.title', 'login'),\n 'type': 'string',\n },\n }, ModelClass.prototype.local);\n return ModelClass.extend({ local });\n },\n});\n","import { loc, createCallout } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport BaseResendView from '../shared/BaseResendView';\n\nconst ResendView = BaseResendView.extend(\n {\n // To be shown after a timeout\n className: 'phone-authenticator-challenge__resend-warning hide',\n events: {\n 'click a.resend-link': 'handleResendLink'\n },\n\n // Override this to change the resend action location from response\n resendActionKey: 'currentAuthenticatorEnrollment-resend',\n\n initialize() {\n const resendText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.resendText', 'login')\n : loc('oie.phone.verify.call.resendText', 'login');\n const linkText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.resendLinkText', 'login')\n : loc('oie.phone.verify.call.resendLinkText', 'login');\n this.add(createCallout({\n content: `${resendText} ${linkText}`,\n type: 'warning',\n }));\n },\n\n handleResendLink() {\n this.options.appState.trigger('invokeAction', this.resendActionKey);\n // Hide warning, but start a timeout again..\n if (!this.el.classList.contains('hide')) {\n this.el.classList.add('hide');\n }\n this.showCalloutAfterTimeout();\n },\n },\n);\n\nconst Body = BaseForm.extend(Object.assign(\n {\n className: 'phone-authenticator-challenge',\n\n title() {\n return loc('oie.phone.verify.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n const sendText = (this.model.get('mode') === 'sms')\n ? loc('oie.phone.verify.sms.codeSentText', 'login')\n : loc('mfa.calling', 'login');\n const enterCodeText = loc('oie.phone.verify.enterCodeText', 'login');\n const carrierChargesText = loc('oie.phone.carrier.charges', 'login');\n\n const strongClass = this.model.get('phoneNumber') !== loc('oie.phone.alternate.title', 'login') ?\n 'strong no-translate' : '';\n // Courage doesn't support HTML, hence creating a subtitle here.\n this.add(`${carrierChargesText}
\n\n ${sendText} ${this.model.escape('phoneNumber')}.\n ${enterCodeText}\n
`, {\n prepend: true,\n selector: '.o-form-fieldset-container',\n });\n },\n\n postRender() {\n BaseForm.prototype.postRender.apply(this, arguments);\n this.add(ResendView, {\n selector: '.o-form-info-container',\n prepend: true,\n });\n },\n },\n));\n\nexport default BaseAuthenticatorView.extend({\n Body,\n\n createModelClass() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const { methods, profile } = relatesToObject?.value || {};\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign({\n mode: {\n 'value': methods[0].type,\n 'type': 'string',\n },\n phoneNumber: {\n 'value': profile?.phoneNumber ? profile.phoneNumber : loc('oie.phone.alternate.title', 'login'),\n 'type': 'string',\n }\n }, ModelClass.prototype.local );\n return ModelClass.extend({ local });\n },\n});\n\nexport { ResendView };","import { _, loc, Model } from 'okta';\nimport { BaseForm, BaseView } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport CountryUtil from '../../../../util/CountryUtil';\n\nconst Body = BaseForm.extend({\n\n className: 'phone-authenticator-enroll',\n\n title() {\n return loc('oie.phone.enroll.title', 'login');\n },\n\n subtitle() {\n return this.model.get('authenticator.methodType') === 'voice'\n ? loc('oie.phone.enroll.call.subtitle', 'login')\n : loc('oie.phone.enroll.sms.subtitle', 'login');\n },\n\n render() {\n BaseForm.prototype.render.apply(this, arguments);\n const selectedMethod = this.model.get('authenticator.methodType');\n const phoneField = this.el.querySelector('.phone-authenticator-enroll__phone');\n const extensionField = this.el.querySelector('.phone-authenticator-enroll__phone-ext');\n\n if (selectedMethod === 'voice') {\n if (!phoneField.classList.contains('phone-authenticator-enroll__phone--small')) {\n phoneField.classList.add('phone-authenticator-enroll__phone--small');\n }\n extensionField.classList.remove('hide');\n }\n\n if (selectedMethod === 'sms') {\n phoneField.classList.remove('phone-authenticator-enroll__phone--small');\n if (!extensionField.classList.contains('hide')) {\n extensionField.classList.add('hide');\n }\n }\n\n this.el.querySelector('.phone-authenticator-enroll__phone-code').innerText = `+${this.model.get('phoneCode')}`;\n },\n\n handlePhoneCodeChange() {\n const countryCodeField = this.el.querySelector('.phone-authenticator-enroll__phone-code');\n countryCodeField.innerText = `+${this.model.get('phoneCode')}`;\n },\n\n save() {\n return this.model.get('authenticator.methodType') === 'voice'\n ? loc('oie.phone.call.primaryButton', 'login')\n : loc('oie.phone.sms.primaryButton', 'login');\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n\n // TODO: Using underscore to support IE, replace with Array.prototype methods (find, findIndex) when IE\n // support is removed\n const phoneNumberUISchemaIndex = _.findIndex(uiSchemas, ({ name }) => name === 'authenticator.phoneNumber');\n\n const countryUISchema = {\n 'label-top': true,\n label: loc('country.label', 'login'),\n type: 'select',\n options: CountryUtil.getCountries(),\n name: 'country',\n wide: true,\n };\n\n // Create an input group - serves as a display wrapper\n const phoneNumberWithCodeUISchema = {\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n type: 'group',\n modelType: 'string',\n 'label-top': true,\n name: 'phoneCode',\n className : 'phone-authenticator-enroll__phone',\n input: [\n {\n type: 'label',\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: `+${this.model.get('phoneCode')}`,\n className: 'phone-authenticator-enroll__phone-code no-translate',\n },\n Object.assign({}, uiSchemas[phoneNumberUISchemaIndex]),\n ],\n };\n\n const extensionUISchema = {\n label: loc('phone.extention.label', 'login'),\n type: 'text',\n // Need to manually hide and show\n // - toggleWhen puts display: block on the element when it unhides hence can't be used.\n // Because in this case, the element needs to be rendered as an inline-block.\n // - showWhen has an animation on the element when unhiding\n // The animation makes the element look weird because of the way it is positioned,\n // hence can't be used\n className: 'phone-authenticator-enroll__phone-ext hide',\n 'label-top': true,\n name: 'extension',\n };\n\n if (phoneNumberUISchemaIndex !== -1) {\n // Replace phoneNumberUISchema..\n uiSchemas.splice(phoneNumberUISchemaIndex, 1, phoneNumberWithCodeUISchema);\n // Add countryUISchema before & extensionUISchema after phone..\n uiSchemas.splice(phoneNumberUISchemaIndex, 0, countryUISchema);\n uiSchemas.splice(phoneNumberUISchemaIndex + 2, 0, extensionUISchema);\n }\n\n const methodType = _.find(uiSchemas, ({ name }) => name === 'authenticator.methodType');\n\n if (methodType && methodType.options.length === 1) {\n methodType.className = 'hide';\n }\n\n return uiSchemas;\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.listenTo(this.model, 'change:authenticator.methodType', this.render.bind(this));\n this.listenTo(this.model, 'change:phoneCode', this.handlePhoneCodeChange.bind(this));\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n\n Body,\n\n createModelClass() {\n const ModelClass = BaseView.prototype.createModelClass.apply(this, arguments);\n const local = Object.assign(\n {\n country: {\n // Set default country to \"US\"\n 'value': 'US',\n 'type': 'string',\n },\n extension: {\n 'type': 'string',\n },\n },\n ModelClass.prototype.local,\n );\n const derived = Object.assign(\n {\n phoneCode: {\n deps: [ 'country' ],\n fn: function(country) {\n return CountryUtil.getCallingCodeForCountry(country);\n },\n },\n },\n ModelClass.prototype.derived,\n );\n return ModelClass.extend({\n local,\n derived,\n toJSON: function() {\n const modelJSON = Model.prototype.toJSON.call(this, arguments);\n const extension = this.get('extension');\n const phoneCode = this.get('phoneCode');\n\n // Add country code..\n let formattedPhoneNumber = `+${phoneCode}${modelJSON.authenticator.phoneNumber}`;\n\n // Add extension if present..\n if (modelJSON.authenticator.methodType === 'voice' && extension?.trim().length) {\n formattedPhoneNumber = `${formattedPhoneNumber}x${extension}`;\n }\n // Override phone with formatted number..\n modelJSON.authenticator.phoneNumber = formattedPhoneNumber;\n return modelJSON;\n },\n });\n },\n});\n","import { loc } from 'okta';\nimport {\n default as ChallengeAuthenticatorPhoneView,\n ResendView\n} from './ChallengeAuthenticatorPhoneView';\nimport { BaseForm } from '../../internals';\n\nconst EnrollResendView = ResendView.extend(\n {\n // To be shown after a timeout\n className: 'phone-authenticator-enroll--warning hide',\n resendActionKey: 'currentAuthenticator-resend',\n },\n);\n\nconst Body = ChallengeAuthenticatorPhoneView.prototype.Body.extend(\n {\n className: 'phone-authenticator-enroll',\n\n title() {\n return loc('oie.phone.enroll.title', 'login');\n },\n\n postRender() {\n BaseForm.prototype.postRender.apply(this, arguments);\n this.add(EnrollResendView, {\n selector: '.o-form-info-container',\n prepend: true,\n });\n },\n },\n);\n\nexport default ChallengeAuthenticatorPhoneView.extend({ Body });\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport PIVHeader from './PIVHeader';\n\nconst Body = BaseForm.extend({\n\n className: 'piv-cac-card',\n modelEvents: {\n request: 'startAuthentication',\n error: 'stopAuthentication',\n },\n\n initialize() {\n BaseForm.prototype.initialize.apply(this, arguments);\n this.model.set('useRedirect', true);\n this.addInstructions();\n },\n\n title() {\n return loc('piv.cac.title', 'login');\n },\n\n save() {\n return loc('retry', 'login');\n },\n\n addInstructions() {\n this.add(\n `${carrierChargesText}
\n\n
`\n );\n },\n \n startAuthentication: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n stopAuthentication: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n }\n \n});\n\nexport default BaseAuthenticatorView.extend({\n Header: PIVHeader,\n Body,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n const messages = this.options.appState.get('messages') || {};\n // if piv view has errors, show errors and stop authentication.\n // otherwise trigger authentication on page load\n if (Array.isArray(messages.value)) {\n this.form.stopAuthentication();\n } else {\n this.form.startAuthentication();\n this.form.trigger('save', this.model);\n }\n },\n});\n","import { BaseHeader } from '../../internals';\nimport HeaderBeacon from '../../components/HeaderBeacon';\n\nexport default BaseHeader.extend({\n HeaderBeacon: HeaderBeacon.extend({\n getBeaconClassName: function() {\n return 'smartcard';\n },\n })\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.security.question.challenge.title', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n getUISchema() {\n const uiSchemas = BaseForm.prototype.getUISchema.apply(this, arguments);\n const questionKey = uiSchemas.filter(s => s.name.indexOf('questionKey') >= 0);\n const answer = uiSchemas.filter(s => s.name.indexOf('answer') >= 0);\n\n /**\n * At verify SQ case,\n * 'questionKey' is read-only hence it won't show up in UI anyway.\n * 'answer' has label 'answer' but apparently UI want to display the\n * actual question (label of `questionKey`) as better user experience.\n */\n if (questionKey.length === 1 && answer.length === 1) {\n answer[0].label = questionKey[0].label;\n }\n\n return uiSchemas;\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.security.question.enroll.title', 'login');\n },\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { View } from 'okta';\nimport { SHOW_RESEND_TIMEOUT } from '../../utils/Constants';\nimport sessionStorageHelper from '../../../client/sessionStorageHelper';\n\nexport default View.extend({\n\n postRender() {\n this.showCalloutAfterTimeout();\n },\n\n showCalloutAfterTimeout() {\n const timeStamp = sessionStorageHelper.getResendTimestamp();\n if (!timeStamp) {\n sessionStorageHelper.setResendTimestamp(Date.now());\n }\n\n // We keep track of a 'global' timestamp in sessionStorage because if the SIW does a re-render,\n // we don't want to force the user to wait another 30s again to see the resend link. With this\n // the user will wait AT MOST 30s until they see the resend link.\n this.showMeInterval = setInterval(() => {\n const start = sessionStorageHelper.getResendTimestamp();\n const now = Date.now();\n if (now - start >= SHOW_RESEND_TIMEOUT) {\n this.$el.removeClass('hide');\n clearInterval(this.showMeInterval);\n sessionStorageHelper.removeResendTimestamp();\n }\n }, 250);\n },\n\n remove() {\n View.prototype.remove.apply(this, arguments);\n clearInterval(this.showMeInterval);\n\n const formName = this.options.appState.get('currentFormName');\n const resendContext = this.options.appState.get('currentAuthenticator')?.resend \n || this.options.appState.get('currentAuthenticatorEnrollment')?.resend;\n const didFormNameChange = this.options.model.get('formName') !== formName;\n\n // Clear resend timeStamp whenever we change views (this means we're navigating away from the resend view)\n if (sessionStorageHelper.getResendTimestamp()\n && (!resendContext || didFormNameChange)) {\n sessionStorageHelper.removeResendTimestamp();\n } \n },\n});\n","// Common view for OV push and custom push.\nimport { loc, createButton, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport { BaseFormWithPolling } from '../../internals';\nimport polling from '../shared/polling';\nimport { WARNING_TIMEOUT } from '../../utils/Constants';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport { AUTHENTICATOR_KEY } from '../../../ion/RemediationConstants';\n\nconst warningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning',\n template: hbs`\n \n ${loc('piv.cac.card.insert', 'login')}
\n \n{{warning}}
\n `\n});\nconst Body = BaseFormWithPolling.extend(Object.assign(\n {\n noButtonBar: true,\n\n title() {\n return this.isOV() ? loc('oie.okta_verify.push.title', 'login') :\n loc('oie.verify.custom_app.title', 'login', [this.options.appState.getAuthenticatorDisplayName()]);\n },\n\n initialize() {\n BaseFormWithPolling.prototype.initialize.apply(this, arguments);\n // 'hasSavingState' would be true by default.\n // Setting it to false when auth key is okta_verify or custom_app with autochallenge schema\n // So that 'o-form-saving' css class is not added while polling and checkbox remains enabled.\n if (this.isOVWithAutoChallenge() || this.isCustomAppWithAutoChallenge()) {\n this.hasSavingState = false;\n }\n this.listenTo(this.model, 'error', this.stopPoll);\n this.addView();\n },\n\n addView() {\n this.add(createButton({\n className: 'button button-wide button-primary send-push link-button-disabled',\n title: this.isOV() ? loc('oie.okta_verify.push.sent', 'login') : loc('oie.custom_app.push.sent', 'login'),\n click: (e) => {\n e.preventDefault();\n }\n }));\n this.add(\n `\n ${this.isOV() ? loc('oie.okta_verify.push.sent', 'login') : loc('oie.custom_app.push.sent', 'login')}`,\n );\n },\n\n render() {\n BaseFormWithPolling.prototype.render.apply(this, arguments);\n // Move checkbox below the button\n // Checkbox is rendered by BaseForm using remediation response and\n // hence by default always gets added above buttons.\n if (this.isOVWithAutoChallenge() || this.isCustomAppWithAutoChallenge()) {\n const checkbox = this.$el.find('[data-se=\"o-form-fieldset-autoChallenge\"]');\n checkbox.length && this.$el.find('.o-form-fieldset-container').append(checkbox);\n }\n },\n\n postRender() {\n BaseFormWithPolling.prototype.postRender.apply(this, arguments);\n\n const className = this.isOV() ?\n 'okta-verify-push-challenge' : ' custom-app-push-challenge';\n this.$el.addClass(className);\n this.startPoll();\n },\n\n startPoll() {\n this.startPolling();\n this.warningTimeout = setTimeout(() => {\n const warningText = this.isOV() ? loc('oktaverify.warning', 'login') :\n loc('oie.custom_app.push.warning', 'login', [this.options.appState.getAuthenticatorDisplayName()]);\n this.showWarning(warningText);\n }, WARNING_TIMEOUT);\n },\n\n stopPoll() {\n this.stopPolling();\n this.clearWarning();\n },\n\n showWarning(msg) {\n this.clearWarning();\n this.add(warningTemplate, '.o-form-error-container', {options: {warning: msg}});\n },\n\n clearWarning() {\n if (this.$('.o-form-error-container div').hasClass('okta-form-infobox-warning')) {\n this.$('.okta-form-infobox-warning').remove();\n }\n clearTimeout(this.warningTimeout);\n },\n\n remove() {\n BaseFormWithPolling.prototype.remove.apply(this, arguments);\n this.stopPolling();\n },\n\n isOV() {\n return this.options.appState.get('authenticatorKey') === AUTHENTICATOR_KEY.OV;\n },\n\n isCustomApp() {\n return this.options.appState.get('authenticatorKey') === AUTHENTICATOR_KEY.CUSTOM_APP;\n },\n\n isOVWithAutoChallenge() {\n return this.isOV() && this.options.appState.getSchemaByName('autoChallenge');\n },\n\n isCustomAppWithAutoChallenge(){\n return this.isCustomApp() && this.options.appState.getSchemaByName('autoChallenge');\n }\n },\n\n polling,\n));\n\nconst AuthenticatorView = BaseAuthenticatorView.extend({\n Body,\n});\n\nexport {\n AuthenticatorView as default,\n Body,\n};\n","import { loc } from 'okta';\nexport default {\n title() {\n return loc('oie.email.mfa.title', 'login');\n }\n};\n","import { _ } from 'okta';\nimport { MS_PER_SEC } from '../../utils/Constants';\n\nexport default {\n startPolling(newRefreshInterval) {\n this.fixedPollingInterval = this.options.currentViewState.refresh;\n this.dynamicPollingInterval = newRefreshInterval;\n this.countDownCounterValue = Math.ceil(this.pollingInterval / MS_PER_SEC);\n // Poll is present in remediation form\n if (this.fixedPollingInterval) {\n this._startRemediationPolling();\n } else {\n // Poll is present in authenticator/ authenticator Enrollment obj.\n // Authenticator won't co-exists hence it's safe to trigger both.\n this._startAuthenticatorPolling();\n }\n },\n\n _startAuthenticatorPolling() {\n // Authenticator won't co-exists hence it's safe to trigger both.\n [\n 'currentAuthenticator',\n 'currentAuthenticatorEnrollment',\n ].some(responseKey => {\n if (this.options.appState.has(responseKey)) {\n const authenticator = this.options.appState.get(responseKey);\n const authenticatorPollAction = `${responseKey}-poll`;\n const pollInterval = this.dynamicPollingInterval || authenticator?.poll?.refresh;\n if (_.isNumber(pollInterval)) {\n this.polling = setTimeout(()=>{\n this.options.appState.trigger('invokeAction', authenticatorPollAction);\n }, pollInterval);\n }\n return true;\n } else {\n return false;\n }\n });\n },\n\n _startRemediationPolling() {\n const pollInterval = this.dynamicPollingInterval || this.fixedPollingInterval;\n if (_.isNumber(pollInterval)) {\n this.polling = setTimeout(() => {\n this.options.appState.trigger('saveForm', this.model);\n }, pollInterval);\n }\n },\n\n stopPolling() {\n if (this.polling) {\n clearTimeout(this.polling);\n this.polling = null;\n }\n }\n};\n","import { View, createButton } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'custom-buttons',\n template: hbs`\n {{#if addSeparateLine}}\n{{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}
\n {{/if}}\n \n `,\n\n initialize(options) {\n options.customButtons.forEach((idpButton) => {\n this.add(createButton(idpButton), '.okta-custom-buttons-container');\n });\n },\n\n getTemplateData() {\n const jsonData = View.prototype.getTemplateData.apply(this, arguments);\n\n return Object.assign(jsonData, {\n addSeparateLine: this.options.addSeparateLine,\n });\n }\n});\n","import { View, createButton, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Util from '../../../../util/Util';\nimport Enums from '../../../../util/Enums';\nimport { UNIVERSAL_LINK_POST_DELAY } from '../../utils/Constants';\nimport { FORMS } from '../../../ion/RemediationConstants';\nimport { appendLoginHint } from '../../utils/ChallengeViewUtil';\n\nexport default View.extend({\n className: 'sign-in-with-device-option',\n template: hbs`\n \n {{#if signInWithDeviceIsRequired}}\n
\n {{#unless signInWithDeviceIsRequired}}\n \n {{i18n code=\"oktaVerify.description\" bundle=\"login\"}}\n
\n {{/if}}\n \n {{i18n code=\"authbutton.divider.text\" bundle=\"login\"}}\n
\n {{/unless}}\n `,\n initialize() {\n const appState = this.options.appState;\n const deviceChallengePollRemediation = this.options.appState.hasRemediationObject(FORMS.LAUNCH_AUTHENTICATOR);\n\n const deviceChallenge = deviceChallengePollRemediation?.relatesTo?.value;\n this.add(createButton({\n className: 'button',\n icon: 'okta-verify-authenticator',\n title: loc('oktaVerify.button', 'login'),\n click() {\n if (this.settings.get('features.engFastpassMultipleAccounts') && this.model.get('identifier')) {\n this.options.settings.set('identifier', encodeURIComponent(this.model.get('identifier')));\n }\n\n const isUVapproach = deviceChallenge?.challengeMethod === Enums.UNIVERSAL_LINK_CHALLENGE;\n if (isUVapproach) {\n // launch the Okta Verify app\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, this.options?.settings?.get('identifier'));\n Util.redirect(deviceChallengeUrl);\n }\n\n const isAppLinkapproach = deviceChallenge?.challengeMethod === Enums.APP_LINK_CHALLENGE;\n if (isAppLinkapproach) {\n // launch the Okta Verify app\n let deviceChallengeUrl = appendLoginHint(deviceChallenge.href, this.options?.settings?.get('identifier'));\n Util.redirect(deviceChallengeUrl, window, true);\n }\n\n // OKTA-350084\n // For the universal link (iOS) and app link (Android) approach,\n // we need to 1. launch the Okta Verify app\n // and 2. take the enduser to the next step right away\n // In Safari, when Okta Verify app is not installed, step 1 responds with error immediately,\n // then step 2 will respond with error.\n // To avoid showing the error right before switching to the next UI,\n // wait for 500 milliseconds before invoking step 2\n Util.callAfterTimeout(() => {\n if (this.options.isRequired) {\n appState.trigger('saveForm', this.model);\n } else {\n appState.trigger('invokeAction', FORMS.LAUNCH_AUTHENTICATOR);\n }\n }, isUVapproach || isAppLinkapproach ? UNIVERSAL_LINK_POST_DELAY : 0);\n }\n }), '.okta-verify-container');\n },\n\n getTemplateData() {\n return {\n signInWithDeviceIsRequired: !!this.options.isRequired,\n };\n }\n});\n","import { View, createButton } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n className: 'sign-in-with-idp',\n template: hbs`\n {{#if isSecondaryIdpDisplay}}\n {{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}
\n {{/if}}\n \n {{#if isPrimaryIdpDisplay}}\n {{i18n code=\"socialauth.divider.text\" bundle=\"login\"}}
\n {{/if}} \n `,\n initialize() {\n this.options.idpButtons.forEach((idpButton) => {\n this.add(createButton(idpButton), '.okta-idps-container');\n });\n },\n\n getTemplateData() {\n const jsonData = View.prototype.getTemplateData.apply(this, arguments);\n const addDivider = this.options.idpButtons.length > 0;\n\n return Object.assign(jsonData, {\n isPrimaryIdpDisplay: addDivider && this.options.isPrimaryIdpDisplay,\n isSecondaryIdpDisplay: addDivider && !this.options.isPrimaryIdpDisplay\n });\n }\n});\n","import { loc } from 'okta';\nimport BaseForm from '../../internals/BaseForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst Body = BaseForm.extend({\n\n title() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.symantecVip.challenge.title', 'login', [displayName])\n : loc('oie.symantecVip.enroll.title', 'login', [displayName]);\n },\n\n subtitle() {\n const displayName = this.options.appState.getAuthenticatorDisplayName();\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.symantecVip.challenge.description', 'login', [displayName])\n : loc('oie.symantecVip.enroll.description', 'login', [displayName]);\n },\n\n save() {\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('mfa.challenge.verify', 'login')\n : loc('mfa.enroll', 'login');\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","import { loc, View, createCallout } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n // eslint-disable-next-line max-len\n template: hbs`{{i18n code=\"oie.verify.webauthn.instructions\" bundle=\"login\"}}
`,\n initialize() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const challengeData = relatesToObject?.value.contextualData.challengeData;\n if (challengeData.userVerification === 'required') {\n this.add(createCallout({\n className: 'uv-required-callout',\n size: 'slim',\n type: 'warning',\n subtitle: loc('oie.verify.webauthn.uv.required.instructions', 'login'),\n }));\n }\n this.add('');\n },\n});\n","import { _, loc, createButton, createCallout } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport CryptoUtil from '../../../../util/CryptoUtil';\nimport webauthn from '../../../../util/webauthn';\nimport BrowserFeatures from '../../../../util/BrowserFeatures';\nimport ChallengeWebauthnInfoView from './ChallengeWebauthnInfoView';\nimport { getMessageFromBrowserError } from '../../../ion/i18nTransformer';\nimport ChallengeWebauthnFooter from '../../components/ChallengeWebauthnFooter';\n\nconst Body = BaseForm.extend({\n\n title() {\n return loc('oie.verify.webauth.title', 'login');\n },\n\n className: 'oie-verify-webauthn',\n\n getUISchema() {\n const schema = [];\n // Returning custom array so no input fields are displayed for webauthn\n if (webauthn.isNewApiAvailable()) {\n const retryButton = createButton({\n className: 'retry-webauthn button-primary default-custom-button',\n title: loc('mfa.challenge.verify', 'login'),\n click: () => {\n this.getCredentialsAndSave();\n }\n });\n\n schema.push({\n View: ChallengeWebauthnInfoView,\n }, {\n View: retryButton,\n });\n } else {\n schema.push({\n View: createCallout({\n className: 'webauthn-not-supported',\n type: 'error',\n subtitle: loc('oie.webauthn.error.not.supported', 'login'),\n }),\n });\n }\n return schema;\n },\n\n remove() {\n BaseForm.prototype.remove.apply(this, arguments);\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n },\n\n noButtonBar: true,\n\n modelEvents: {\n 'error': '_stopVerification'\n },\n\n getCredentialsAndSave() {\n this.clearErrors();\n this._startVerification();\n // AbortController is not supported in IE11\n // eslint-disable-next-line compat/compat\n this.webauthnAbortController = new AbortController();\n const relatesToObject = this.options.currentViewState.relatesTo;\n const authenticatorData = relatesToObject?.value || {};\n const allowCredentials = [];\n const authenticatorEnrollments = this.options.appState.get('authenticatorEnrollments').value || [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n allowCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(enrollement.credentialId),\n });\n }\n });\n const challengeData = authenticatorData.contextualData.challengeData;\n const options = _.extend({}, challengeData, {\n allowCredentials,\n challenge: CryptoUtil.strToBin(challengeData.challenge),\n });\n // navigator.credentials() is not supported in IE11\n // eslint-disable-next-line compat/compat\n navigator.credentials.get({\n publicKey: options,\n signal: this.webauthnAbortController.signal\n }).then((assertion) => {\n this.model.set({\n credentials : {\n clientData: CryptoUtil.binToStr(assertion.response.clientDataJSON),\n authenticatorData: CryptoUtil.binToStr(assertion.response.authenticatorData),\n signatureData: CryptoUtil.binToStr(assertion.response.signature),\n }\n });\n this.saveForm(this.model);\n }, (error) => {\n // Do not display if it is abort error triggered by code when switching.\n // this.webauthnAbortController would be null if abort was triggered by code.\n if (this.webauthnAbortController) {\n this.model.trigger('error', this.model, {responseJSON: {errorSummary: getMessageFromBrowserError(error)}});\n }\n }).finally(() => {\n // unset webauthnAbortController on successful authentication or error\n this.webauthnAbortController = null;\n });\n },\n\n _startVerification: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.retry-webauthn').hide();\n this.$('.retry-webauthn')[0].textContent = loc('retry', 'login');\n },\n\n _stopVerification: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.retry-webauthn').show();\n }\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n Footer: ChallengeWebauthnFooter,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n // Trigger browser prompt automatically for other browsers for better UX.\n if (webauthn.isNewApiAvailable() && !BrowserFeatures.isSafari()) {\n this.form.getCredentialsAndSave();\n }\n },\n});\n","import { loc, View, createCallout } from 'okta';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport hbs from 'handlebars-inline-precompile';\n\nexport default View.extend({\n // eslint-disable-next-line max-len\n template: hbs`{{i18n code=\"oie.enroll.webauthn.instructions\" bundle=\"login\"}}
`,\n initialize() {\n const relatesToObject = this.options.currentViewState.relatesTo;\n const activationData = relatesToObject?.value.contextualData.activationData;\n if (BrowserFeatures.isEdge()) {\n this.add(View.extend({\n tagName: 'p',\n className: 'idx-webauthn-enroll-text-edge',\n template: hbs`{{i18n code=\"oie.enroll.webauthn.instructions.edge\" bundle=\"login\"}}`\n }));\n }\n if (activationData.authenticatorSelection.userVerification === 'required') {\n this.add(createCallout({\n className: 'uv-required-callout',\n size: 'slim',\n type: 'warning',\n subtitle: loc('oie.enroll.webauthn.uv.required.instructions', 'login'),\n }));\n }\n this.add('');\n },\n});\n","import { _, loc, createCallout, createButton } from 'okta';\nimport { BaseForm } from '../../internals';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\nimport webauthn from '../../../../util/webauthn';\nimport CryptoUtil from '../../../../util/CryptoUtil';\nimport EnrollWebauthnInfoView from './EnrollWebauthnInfoView';\nimport { getMessageFromBrowserError } from '../../../ion/i18nTransformer';\n\nfunction getExcludeCredentials(authenticatorEnrollments = []) {\n const credentials = [];\n authenticatorEnrollments.forEach((enrollement) => {\n if (enrollement.key === 'webauthn') {\n credentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(enrollement.credentialId),\n });\n }\n });\n return credentials;\n}\n\nconst Body = BaseForm.extend({\n title() {\n return loc('oie.enroll.webauthn.title', 'login');\n },\n className: 'oie-enroll-webauthn',\n modelEvents: {\n 'error': '_stopEnrollment',\n },\n getUISchema() {\n const schema = [];\n // Returning custom array so no input fields are displayed for webauthn\n if (webauthn.isNewApiAvailable()) {\n schema.push({\n View: EnrollWebauthnInfoView,\n });\n schema.push({\n View: createButton({\n className: 'webauthn-setup button button-primary button-wide',\n title: loc('oie.enroll.webauthn.save', 'login'),\n click: () => {\n this.triggerWebauthnPrompt();\n },\n }),\n });\n } else {\n schema.push({\n View: createCallout({\n className: 'webauthn-not-supported',\n type: 'error',\n subtitle: loc('oie.webauthn.error.not.supported', 'login'),\n }),\n });\n }\n return schema;\n },\n triggerWebauthnPrompt() {\n this.$el.find('.o-form-error-container').empty();\n this._startEnrollment();\n const relatesToObject = this.options.currentViewState.relatesTo;\n const activationData = relatesToObject?.value.contextualData.activationData;\n if (webauthn.isNewApiAvailable()) {\n var options = _.extend({}, activationData, {\n challenge: CryptoUtil.strToBin(activationData.challenge),\n user: {\n id: CryptoUtil.strToBin(activationData.user.id),\n name: activationData.user.name,\n displayName: activationData.user.displayName\n },\n excludeCredentials: getExcludeCredentials(this.options.appState.get('authenticatorEnrollments').value)\n });\n this.webauthnAbortController = new AbortController();\n navigator.credentials.create({\n publicKey: options,\n signal: this.webauthnAbortController.signal\n }).then((newCredential) => {\n this.model.set({\n credentials : {\n clientData: CryptoUtil.binToStr(newCredential.response.clientDataJSON),\n attestation: CryptoUtil.binToStr(newCredential.response.attestationObject),\n }\n });\n this.saveForm(this.model);\n })\n .catch((error) => {\n this.model.trigger('error', this.model, {responseJSON: {errorSummary: getMessageFromBrowserError(error)}});\n }).finally(() => {\n this.webauthnAbortController = null;\n });\n }\n },\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.webauthn-setup').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.webauthn-setup').show();\n },\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n postRender() {\n BaseAuthenticatorView.prototype.postRender.apply(this, arguments);\n this.$el.find('.o-form-button-bar [type=\"submit\"]').remove();\n },\n});\n","import { loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport BaseForm from '../../internals/BaseForm';\nimport BaseAuthenticatorView from '../../components/BaseAuthenticatorView';\n\nconst ExampleView = View.extend({\n template: hbs``,\n});\n\nconst Body = BaseForm.extend({\n title() {\n return this.options.appState.isAuthenticatorChallenge()\n ? loc('oie.yubikey.challenge.title', 'login')\n : loc('oie.yubikey.enroll.title', 'login');\n },\n\n subtitle() {\n return loc('oie.yubikey.description', 'login');\n },\n\n save() {\n return loc('mfa.challenge.verify', 'login');\n },\n\n getUISchema() {\n const schema = BaseForm.prototype.getUISchema.apply(this, arguments);\n schema.unshift({\n View: ExampleView,\n selector: '.o-form-fieldset-container',\n });\n return schema;\n },\n\n});\n\nexport default BaseAuthenticatorView.extend({\n Body,\n});\n","/*!\n * Copyright (c) 2020-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n className: 'hide resend-email-infobox',\n template: hbs`\n\n \n
\n `,\n\n events: {\n 'click .resend-email-btn': 'resendEmail',\n },\n\n postRender: function() {\n this.showResendCallout();\n },\n\n showResendCallout: function() {\n _.delay(() => {\n this.$el.removeClass('hide');\n }, Enums.API_RATE_LIMIT);\n },\n\n hideResendCallout: function() {\n this.$el.addClass('hide');\n },\n\n resendEmail: function(e) {\n e.preventDefault();\n this.hideResendCallout();\n this.model.resend().finally(this.showResendCallout.bind(this));\n },\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport 'qtip';\n\nexport default View.extend({\n className: 'scope-item',\n template: hbs`\n \n {{i18n code=\"email.code.not.received\" bundle=\"login\"}}\n \n {{i18n code=\"email.button.resend\" bundle=\"login\"}}\n \n
\n{{name}}
\n {{#if description}}\n \n {{/if}}`,\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description)\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom left',\n target: 'mouse'\n }\n });\n }\n});\n\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint max-len: [2, 131] */\nimport hbs from 'handlebars-inline-precompile';\nimport { _, View, loc } from 'okta';\nimport ScopeItem from './ScopeItem';\n\nconst SCOPE_N_GROUP_CONFIG = {\n groups: 'user',\n myAccount: 'user',\n users: 'user',\n apps: 'resource',\n authenticators: 'resource',\n authorizationServers: 'resource',\n clients: 'resource',\n domains: 'resource',\n factors: 'resource',\n idps: 'resource',\n linkedObjects: 'resource',\n policies: 'resource',\n templates: 'resource',\n eventHooks: 'hook',\n inlineHooks: 'hook',\n events: 'system',\n logs: 'system',\n orgs: 'system',\n roles: 'system',\n schemas: 'system',\n sessions: 'system',\n trustedOrigins: 'system',\n};\n\nconst DEFAULT_GROUP = 'system';\n\nconst findScopeGroupKey = ({ name = '' }) => {\n const xs = name.split('.');\n const groupType = xs[1];\n\n return SCOPE_N_GROUP_CONFIG[groupType] || DEFAULT_GROUP;\n};\n\nconst ScopeGroupHeaderView = View.extend({\n className: 'scope-group',\n\n events: {\n 'click': 'expandScopes',\n },\n\n template: hbs`\n\n
`,\n\n expandScopes() {\n this.$el.toggleClass('scope-group--is-expanded');\n this.$('.caret').toggleClass('caret--is-rotated');\n },\n\n preRender() {\n _.chain(this.options.scopes)\n .sortBy(({ name }) => name)\n .each(({ name, displayName, description }) => {\n this.add(ScopeItem, {\n options: {\n name: displayName || name,\n description,\n },\n });\n });\n }\n});\n\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n const allScopes = this.model.get('scopes');\n const scopesWithGroup = _.groupBy(allScopes, findScopeGroupKey);\n\n const SCOPE_GROUP_NAMES_CONFIG = {\n 'user': loc('admin.consent.group.user.group', 'login'),\n 'resource': loc('admin.consent.group.resource.policy', 'login'),\n 'hook': loc('admin.consent.group.hook', 'login'),\n 'system': loc('admin.consent.group.system', 'login'),\n };\n\n // loop through SCOPE_GROUP_NAMES_CONFIG to keep group order consistent in UI.\n _.each(SCOPE_GROUP_NAMES_CONFIG, (groupName, groupKey) => {\n const scopes = scopesWithGroup[groupKey];\n if (!Array.isArray(scopes)) {\n return;\n }\n // add scope group header and scopes\n this.add(ScopeGroupHeaderView, {\n options: {\n groupName,\n scopes,\n }\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport 'qtip';\nexport default View.extend({\n className: 'scope-item',\n template: hbs(\n '\\\n {{groupName}}
\n \n \n \n\\\n
\\\n {{#if description}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData() {\n const { name, description, isCustomized } = this.options;\n const baseClass = 'scope-item-text';\n const classNames = (name === 'openid' || isCustomized)\n ? `${baseClass} no-translate`: baseClass;\n return { classNames, name, description };\n },\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description),\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom right',\n target: 'mouse',\n },\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport ScopeItem from './ScopeItem';\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n this.model.get('scopes').forEach(scope => {\n this.add(ScopeItem, {\n options: {\n name: scope.displayName || scope.name,\n description: scope.description,\n isCustomized: scope.isCustomized,\n },\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, ListView, View, createButton, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport RouterUtil from 'util/RouterUtil';\nconst cardinalityTextTpl = hbs('{{cardinalityText}}');\nconst FactorListFactorRow = View.extend({\n tagName: 'li',\n\n className: 'enroll-factor-row clearfix',\n\n template: hbs(\n '\\\n \\\n {{name}}
\\\n\\\n
\\\n '\n ),\n\n attributes: function() {\n return { 'data-se': this.model.get('factorName') };\n },\n\n children: function() {\n const children = [];\n const enrolled = this.model.get('enrolled');\n const required = this.model.get('required');\n const cardinality = this.model.get('cardinality');\n\n if (this.options.showInlineSetupButton) {\n return [\n [\n createButton({\n className: 'button',\n title: this.getSetupButtonText(),\n click: function() {\n this.options.appState.trigger(\n 'navigate',\n RouterUtil.createEnrollFactorUrl(this.model.get('provider'), this.model.get('factorType'))\n );\n },\n }),\n '.enroll-factor-button',\n ],\n ];\n } else if (enrolled) {\n children.push(['', '.enroll-factor-label']);\n } else if (required) {\n children.push(['', '.enroll-factor-label']);\n }\n\n const cardinalityText = FactorUtil.getCardinalityText(enrolled, required, cardinality);\n\n if (cardinalityText) {\n children.push([cardinalityTextTpl({ cardinalityText: cardinalityText }), '.enroll-factor-description']);\n }\n return children;\n },\n\n minimize: function() {\n this.$el.addClass('enroll-factor-row-min');\n },\n\n maximize: function() {\n this.$el.removeClass('enroll-factor-row-min');\n },\n\n getSetupButtonText: function() {\n return this.model.get('additionalEnrollment')\n ? loc('enroll.choices.setup.another', 'login')\n : loc('enroll.choices.setup', 'login');\n },\n});\nexport default ListView.extend({\n className: 'enroll-factor-list',\n\n item: FactorListFactorRow,\n\n itemSelector: '.list-content',\n\n template: hbs(\n '\\\n {{#if listTitle}}\\\n {{factorLabel}}
\\\n {{#if factorDescription}}\\\n{{factorDescription}}
\\\n {{/if}}\\\n \\\n{{listTitle}}
\\\n {{/if}}\\\n\n
\n \n
\n {{instructions}}
\n\n
\n `,\n\n events: {\n 'click [data-type=\"manual-setup\"]': function(e) {\n e.preventDefault();\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'manual'\n );\n if (this.model.get('__factorType__') === 'push') {\n // cancel the poll and navigate to manual setup.\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev().then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: 'push',\n provider: 'OKTA',\n });\n\n return factor.enroll();\n });\n })\n .then(() => {\n this.options.appState.trigger('navigate', url);\n });\n } else {\n this.options.appState.trigger('navigate', url);\n }\n },\n 'click [data-type=\"refresh-qrcode\"]': function(e) {\n e.preventDefault();\n this.model.trigger('errors:clear');\n\n const self = this;\n\n this.model\n .doTransaction(function(transaction) {\n if (this.appState.get('isWaitingForActivation')) {\n return transaction.poll();\n } else {\n return transaction.activate();\n }\n })\n .then(function(trans) {\n const res = trans.data;\n\n if (\n (res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE') &&\n res.factorResult === 'WAITING'\n ) {\n // defer the render here to have a lastResponse set in AppState\n // so that we get new QRcode rendered\n _.defer(_.bind(self.render, self));\n }\n });\n },\n },\n\n initialize: function() {\n this.listenTo(this.options.appState, 'change:lastAuthResponse', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', !this.options.appState.get('isWaitingForActivation'));\n } else if (this.options.appState.get('isSuccessResponse')) {\n this.$el.addClass('qrcode-success');\n }\n });\n this.listenTo(this.model, 'error', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', true);\n }\n });\n },\n\n getTemplateData: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n let instructions;\n\n if (this.model.get('__provider__') === 'GOOGLE') {\n instructions = loc('enroll.totp.setupGoogleAuthApp', 'login', [factorName]);\n } else {\n instructions = loc('enroll.totp.setupApp', 'login', [factorName]);\n }\n return {\n instructions: instructions,\n qrcode: this.options.appState.get('qrcode'),\n altQRCode: loc('mfa.altQrCode', 'login')\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport FormType from 'util/FormType';\nimport Util from 'util/Util';\nimport TextBox from 'views/shared/TextBox';\nconst form = {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.enterCode', 'login'),\n autoSave: true,\n noButtonBar: true,\n attributes: { 'data-se': 'step-sendcode' },\n\n formChildren: function() {\n return [\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n }),\n ];\n },\n};\nexport default form;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.options.appState.trigger('backToFactors');\n this.back();\n },\n },\n\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n if (this.options.appState.get('prevLink')) {\n // Once we are in the MFA_ENROLL_ACTIVATE, we need to reset to the\n // correct state. Fortunately, this means that the router will\n // handle navigation once the request is finished.\n this.model.doTransaction(function(transaction) {\n return transaction.prev();\n });\n } else {\n this.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\n\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n \\\n {{i18n code=\"mfa.scanBarcode\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-goto': function(e) {\n e.preventDefault();\n // go to a different screen with current auth status:\n // refresh the latest response\n this.model.startTransaction(function(authClient) {\n return authClient.tx.resume();\n });\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n if (this.options.appState.get('prevLink')) {\n // Once we are in the MFA_ENROLL_ACTIVATE, we need to reset to the\n // correct state. Fortunately, this means that the router will\n // handle navigation once the request is finished.\n this.model.doTransaction(function(transaction) {\n return transaction.prev();\n });\n } else {\n this.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport RouterUtil from 'util/RouterUtil';\n\nfunction goToFactorActivation(appState) {\n const url = RouterUtil.createActivateFactorUrl(\n appState.get('activatedFactorProvider'),\n appState.get('activatedFactorType')\n );\n\n appState.trigger('navigate', url);\n}\n\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n \\\n {{i18n code=\"mfa.scanBarcode\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-goto': function(e) {\n e.preventDefault();\n\n const goToFactor = _.partial(goToFactorActivation, this.options.appState);\n\n this.options.appState.unset('factorActivationType');\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev().then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: 'push',\n provider: 'OKTA',\n });\n\n return factor.enroll();\n });\n })\n .then(goToFactor);\n },\n },\n back: function() {\n const self = this;\n\n self.options.appState.unset('factorActivationType');\n if (self.options.appState.get('prevLink')) {\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev();\n })\n .then(function() {\n // we trap 'MFA_ENROLL' response that's why we need to trigger navigation from here\n self.options.appState.trigger('navigate', 'signin/enroll');\n });\n } else {\n self.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nlet { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n template: hbs(\n '\\\n {{countryCallingCode}}\\\n \\\n \\\n \\\n '\n ),\n\n initialize: function() {\n this.listenTo(this.model, 'change:countryCallingCode', function() {\n this.$('.o-form-label-inline').text(this.model.get('countryCallingCode'));\n });\n },\n\n preRender: function() {\n this.options.countryCallingCode = this.model.get('countryCallingCode');\n },\n\n postRender: function() {\n // This is a hack - once inputGroups are done, get rid of it!!\n this.$el.removeClass('input-fix o-form-control');\n _.defer(() => {\n this.$el.parent().addClass('o-form-input-group');\n });\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 130] */\nimport { Form, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport ProfileSchema from 'models/ProfileSchema';\nimport RegistrationFormFactory from 'util/RegistrationFormFactory';\nexport default Form.extend({\n layout: 'o-form-theme',\n autoSave: true,\n noCancelButton: true,\n title() {\n return loc('registration.form.title', 'login');\n },\n save() {\n return loc('registration.form.submit', 'login');\n },\n initialize: function(options) {\n this.options = options || {};\n this.schema = new ProfileSchema({\n profileSchemaAttributes: this.options.appState.get('policy').registration.profile,\n });\n this.schema.properties.each(schemaProperty => {\n const inputOptions = RegistrationFormFactory.createInputOptions(schemaProperty);\n\n this.addInput(inputOptions);\n });\n const requiredFieldsLabel = hbs('{{label}}')({\n label: loc('registration.required.fields.label', 'login'),\n });\n\n this.add(requiredFieldsLabel);\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n {{#if passwordWarn}}\\\n \\\n {{i18n code=\"password.expiring.later\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n \\\n {{i18n code=\"signout\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer clearfix',\n events: {\n 'click .js-signout': function(e) {\n e.preventDefault();\n const self = this;\n const authClient = self.settings.authClient;\n\n this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(function() {\n return authClient.session.exists();\n })\n .then(function(sessionExists) {\n if (sessionExists) {\n return authClient.closeSession().catch(() => {});\n }\n })\n .then(function() {\n if (self.settings.get('signOutLink')) {\n Util.redirect(self.settings.get('signOutLink'));\n } else {\n self.state.set('navigateDir', Enums.DIRECTION_BACK);\n self.options.appState.trigger('navigate', '');\n }\n });\n },\n 'click .js-skip': function(e) {\n e.preventDefault();\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n },\n },\n getTemplateData: function() {\n return { passwordWarn: this.options.appState.get('isPwdExpiringSoon') };\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint complexity: [2, 7] */\nimport { Form, createButton, loc } from 'okta';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nexport default Form.extend({\n layout: 'o-form-theme',\n className: 'factor-verify-magiclink',\n autoSave: true,\n noCancelButton: true,\n initialize: function() {\n const form = this;\n // for FACTOR_REQUIRED with email magic link we dont need to show otp code input field and verify button\n\n this.title = this.model.get('factorLabel');\n //TODO: OKTA-211618 Temp fix for demo. FACTOR_REQUIRED after sign up is missing the profile object in API response\n\n const email = this.model.get('email') || this.options.appState.get('lastAuthResponse')._embedded.user.profile.login;\n\n this.subtitle = '(' + email + ')';\n this.add(\n createButton({\n attributes: { 'data-se': 'email-send-code' },\n className: 'button email-request-button',\n title: loc('mfa.sendEmail', 'login'),\n click: function() {\n form.clearErrors();\n this.disable();\n this.options.title = loc('mfa.sent', 'login');\n this.render();\n this.model\n .save()\n .then(() => {\n return Q.delay(Enums.API_RATE_LIMIT);\n })\n .then(() => {\n this.options.title = loc('mfa.resendEmail', 'login');\n this.enable();\n this.render();\n });\n },\n })\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from 'okta';\nimport PrimaryAuthForm from 'views/primary-auth/PrimaryAuthForm';\nexport default PrimaryAuthForm.extend({\n className: 'idp-discovery-form',\n save: function() {\n return loc('oform.next', 'login');\n },\n saveId: 'idp-discovery-submit',\n\n initialize: function() {\n this.listenTo(this, 'save', _.bind(this.model.save, this.model));\n this.stateEnableChange();\n },\n\n inputs: function() {\n const inputs = [];\n const usernameProps = {\n className: 'margin-btm-30',\n label: loc('primaryauth.username.placeholder', 'login'),\n inputId: 'idp-discovery-username',\n disabled: false,\n };\n\n inputs.push(_.extend(this.getUsernameField(), usernameProps));\n if (this.settings.get('features.rememberMe')) {\n inputs.push(this.getRemeberMeCheckbox());\n }\n return inputs;\n },\n\n focus: function() {\n if (!this.model.get('username')) {\n this.getInputs().first().focus();\n } else if (this.getInputs().toArray()[1]) {\n this.getInputs().toArray()[1].focus();\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst template = hbs('\\\n \\\n \n \n \n \n
\n \n {{i18n code=\"enroll.totp.cannotScan\" bundle=\"login\"}}\n \n \n {{i18n code=\"enroll.totp.refreshBarcode\" bundle=\"login\"}}\n \n {{{message}}}
\\\n ');\n\n// Have to be unescaped for the html in enroll.windowsHello.error.notConfiguredHtml\n\nexport default View.extend({\n template: template,\n className: 'okta-infobox-error infobox infobox-error infobox-md margin-btm-25',\n attributes: {\n 'data-se': 'o-form-error-html',\n },\n\n message: '',\n\n initialize: function(options) {\n if (options && options.message) {\n this.message = options.message;\n }\n },\n\n getTemplateData: function() {\n return {\n message: this.message,\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc, createButton, Form } from 'okta';\nimport TextBox from 'views/shared/TextBox';\n\nfunction addInlineTotp(form) {\n form.addDivider();\n form.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top inline-input auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'tel',\n });\n form.add(\n createButton({\n attributes: { 'data-se': 'inline-totp-verify' },\n className: 'button inline-totp-verify margin-top-30',\n title: loc('mfa.challenge.verify', 'login'),\n click: function() {\n form.clearErrors();\n if (!form.isValid()) {\n return;\n }\n form.model.manageTransaction(function(transaction, setTransaction) {\n // This is the case where we enter the TOTP code and verify while there is an\n // active Push request (or polling) running. We need to invoke previous() on authClient\n // and then call model.save(). If not, we would still be in MFA_CHALLENGE state and\n // verify would result in a wrong request (push verify instead of a TOTP verify).\n if (transaction.status === 'MFA_CHALLENGE' && transaction.prev) {\n form.options.appState.set('trapMfaRequiredResponse', true);\n return transaction.prev().then(function(trans) {\n setTransaction(trans);\n form.model.save();\n });\n } else {\n // Push is not active and we enter the code to verify.\n form.model.save();\n }\n });\n },\n })\n );\n form.at(1).focus();\n}\n\nexport default Form.extend({\n autoSave: true,\n noButtonBar: true,\n scrollOnError: false,\n layout: 'o-form-theme',\n\n className: 'mfa-verify-totp-inline',\n\n attributes: { 'data-se': 'factor-inline-totp' },\n\n initialize: function() {\n const form = this;\n\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n this.add(\n createButton({\n className: 'link',\n attributes: { 'data-se': 'inline-totp-add' },\n title: loc('mfa.challenge.orEnterCode', 'login'),\n click: function() {\n this.remove();\n addInlineTotp(form);\n },\n })\n );\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n className: 'number-challenge-view',\n template: hbs`\n\n {{{i18n code=\"oktaverify.numberchallenge.instruction\" bundle=\"login\" arguments=\"number\"}}}\n
\n\n
\n \n
\n \n {{number}}\n
\n \n {{i18n code=\"oktaverify.numberchallenge.explain\" bundle=\"login\"}}
\n `,\n initialize() {\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', () => {\n if (this.options.appState.get('lastAuthResponse').status !== 'SUCCESS') {\n this.render();\n }\n });\n },\n getTemplateData() {\n const lastAuthResponse = this.options.appState.get('lastAuthResponse');\n if (!this.options.appState.get('isWaitingForNumberChallenge')) {\n return {\n number: null,\n };\n }\n return {\n number: lastAuthResponse._embedded.factor._embedded.challenge.correctAnswer,\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 7] */\nimport { _, loc, Form, createButton, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nimport TextBox from 'views/shared/TextBox';\nconst subtitleTpl = hbs('({{subtitle}})');\nconst PassCodeFormwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning login-timeout-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n{{{warning}}}
\n `,\n});\n\nfunction getFormAndButtonDetails(factorType) {\n switch (factorType) {\n case 'sms':\n return {\n buttonDataSe: 'sms-send-code',\n buttonClassName: 'sms-request-button',\n formSubmit: loc('mfa.sendCode', 'login'),\n formRetry: loc('mfa.resendCode', 'login'),\n formSubmitted: loc('mfa.sent', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('phoneNumber') }),\n warning: loc('factor.sms.time.warning', 'login'),\n };\n case 'call':\n return {\n buttonDataSe: 'make-call',\n buttonClassName: 'call-request-button',\n formSubmit: loc('mfa.call', 'login'),\n formRetry: loc('mfa.redial', 'login'),\n formSubmitted: loc('mfa.calling', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('phoneNumber') }),\n warning: loc('factor.call.time.warning', 'login'),\n };\n case 'email':\n return {\n buttonDataSe: 'email-send-code',\n buttonClassName: 'email-request-button',\n formSubmit: loc('mfa.sendEmail', 'login'),\n formRetry: loc('mfa.resendEmail', 'login'),\n formSubmitted: loc('mfa.sent', 'login'),\n subtitle: subtitleTpl({ subtitle: this.model.get('email') }),\n };\n default:\n return {\n buttonDataSe: '',\n buttonClassName: '',\n formSubmit: '',\n formRetry: '',\n formSubmitted: '',\n };\n }\n}\n\nexport default Form.extend({\n className: 'mfa-verify-passcode',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n\n disableSubmitButton: function() {\n return this.model.appState.get('isMfaChallenge') && this.model.get('answer');\n },\n\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(PassCodeFormwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n\n initialize: function() {\n const form = this;\n\n this.title = this.model.get('factorLabel');\n\n const factorType = this.model.get('factorType');\n const formAndButtonDetails = getFormAndButtonDetails.call(this, factorType);\n const warningDetails = formAndButtonDetails.warning;\n\n this.$el.attr('data-se', 'factor-' + factorType);\n\n this.subtitle = formAndButtonDetails.subtitle;\n this.listenTo(this.model, 'error', function() {\n this.clearErrors();\n });\n this.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: 'tel',\n });\n this.add(\n createButton({\n attributes: { 'data-se': formAndButtonDetails.buttonDataSe },\n className: 'button ' + formAndButtonDetails.buttonClassName,\n title: formAndButtonDetails.formSubmit,\n click: function() {\n form.clearErrors();\n this.disable();\n form.clearWarnings();\n this.options.title = formAndButtonDetails.formSubmitted;\n this.render();\n // To send an OTP to the device, make the same request but use\n // an empty passCode\n this.model.set('answer', '');\n this.model\n .save()\n .then(function() {\n // render and focus on the passcode input field.\n form.getInputs().first().render().focus();\n return Q.delay(Enums.API_RATE_LIMIT);\n })\n .then(() => {\n this.options.title = formAndButtonDetails.formRetry;\n this.enable();\n if (factorType === 'call' || factorType === 'sms') {\n form.showWarning(warningDetails);\n }\n this.render();\n });\n },\n })\n );\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2016-2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nexport default Form.extend({\n className: 'mfa-verify-password',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-password' },\n\n initialize: function() {\n this.title = this.model.get('factorLabel');\n\n this.addInput({\n label: loc('mfa.challenge.password.placeholder', 'login'),\n 'label-top': true,\n className: 'auth-passcode',\n name: 'password',\n type: 'password',\n params: {\n showPasswordToggle: true,\n },\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Util from 'util/Util';\nimport NumberChallengeView from './NumberChallengeView';\n\nconst titleTpl = hbs('{{factorName}} ({{{deviceName}}})');\n// deviceName is escaped on BaseForm (see BaseForm's template)\n\nconst WARNING_TIMEOUT = 30000; // milliseconds\nconst PushFormwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n{{warning}}
\n `,\n});\n\nexport default Form.extend({\n className: 'mfa-verify-push',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'oktaverify.send', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-push' },\n events: {\n submit: 'submit',\n },\n\n initialize: function() {\n this.enabled = true;\n this.listenTo(this.options.appState, 'change:isMfaRejected', this.handleRejectStateChange);\n\n this.numberChallengeView = this.add(NumberChallengeView).last();\n this.listenTo(this.options.appState, 'change:isWaitingForNumberChallenge', function(\n state,\n isWaitingForNumberChallenge\n ) {\n if (isWaitingForNumberChallenge || this.options.appState.get('lastAuthResponse').status === 'SUCCESS') {\n this.clearWarnings();\n this.$el.find('.button').hide();\n this.numberChallengeView.$el.show();\n } else {\n this.numberChallengeView.$el.hide();\n this.$el.find('.button').show();\n }\n });\n this.listenTo(this.options.appState, 'change:isMfaTimeout', function(state, isMfaTimeout) {\n this.setSubmitState(isMfaTimeout);\n if (isMfaTimeout) {\n this.showError(loc('oktaverify.timeout', 'login'));\n }\n });\n this.listenTo(this.options.appState, 'change:isMfaRequired', function(state, isMfaRequired) {\n if (isMfaRequired) {\n this.clearErrors();\n this.clearWarnings();\n }\n });\n this.title = titleTpl({\n factorName: this.model.get('factorLabel'),\n deviceName: this.model.get('deviceName'),\n });\n },\n setSubmitState: function(ableToSubmit) {\n const button = this.$el.find('.button');\n const a11ySpan = this.$el.find('.accessibility-text');\n this.enabled = ableToSubmit;\n if (ableToSubmit) {\n button.removeClass('link-button-disabled');\n button.prop('value', loc('oktaverify.send', 'login'));\n button.prop('disabled', false);\n if (a11ySpan) {\n a11ySpan.remove();\n }\n } else {\n button.addClass('link-button-disabled');\n button.prop('value', loc('oktaverify.sent', 'login'));\n button.prop('disabled', true);\n this.add(\n `${loc('oktaverify.sent', 'login')}`,\n );\n }\n },\n submit: function(e) {\n if (e !== undefined) {\n e.preventDefault();\n }\n if (this.enabled) {\n this.setSubmitState(false);\n this.doSave();\n }\n },\n postRender: function() {\n const factorsPolicyInfo = this.options.appState.get('factorsPolicyInfo');\n const id = this.model.get('id');\n const isAutoPushEnabled = this.settings.get('features.autoPush') && factorsPolicyInfo && factorsPolicyInfo[id]\n ? factorsPolicyInfo[id]['autoPushEnabled']\n : false;\n\n if (isAutoPushEnabled) {\n this.model.set('autoPush', true);\n // bind after $el has been rendered, and trigger push once DOM is fully loaded\n _.defer(_.bind(this.submit, this));\n }\n },\n doSave: function() {\n let warningTimeout;\n\n this.clearErrors();\n this.clearWarnings();\n if (this.model.isValid()) {\n this.listenToOnce(this.model, 'error', function() {\n this.setSubmitState(true);\n this.clearWarnings();\n clearTimeout(warningTimeout);\n });\n this.trigger('save', this.model);\n warningTimeout = Util.callAfterTimeout(() => {\n if (!this.options.appState.get('isWaitingForNumberChallenge')) {\n this.showWarning(loc('oktaverify.warning', 'login'));\n }\n }, WARNING_TIMEOUT);\n }\n },\n showError: function(msg) {\n this.clearWarnings();\n this.model.trigger('error', this.model, { responseJSON: { errorSummary: msg } });\n },\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(PushFormwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n handleRejectStateChange: function(state, isMfaRejected) {\n if (isMfaRejected) {\n this.setSubmitState(isMfaRejected);\n this.setRejectedErrorMessage();\n }\n },\n setRejectedErrorMessage: function() {\n // If rejection is due to outdated app, show error message per platform\n // else show user rejected message.\n if (this.options.appState.get('lastAuthResponse').factorResultMessage === 'OKTA_VERIFY_UPGRADE_REQUIRED') {\n if (this.options.appState.get('factor').profile.platform === 'IOS') {\n this.showError(loc('oktaverify.rejected.upgradeRequired.ios', 'login'));\n } else {\n this.showError(loc('oktaverify.rejected.upgradeRequired.android', 'login'));\n }\n } else {\n this.showError(loc('oktaverify.rejected', 'login'));\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nexport default Form.extend({\n className: 'mfa-verify-question',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-question' },\n\n initialize: function() {\n this.title = this.model.get('factorLabel');\n\n this.addInput({\n label: this.model.get('securityQuestion'),\n 'label-top': true,\n placeholder: loc('mfa.challenge.answer.placeholder', 'login'),\n className: 'auth-passcode',\n name: 'answer',\n type: 'password',\n params: {\n showPasswordToggle: true,\n },\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc, View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport ResendEmailView from 'views/ResendEmailView';\nimport TextBox from 'views/shared/TextBox';\n\nconst createEmailMaskElement = function() {\n const email = this.model.get('email');\n const emailTpl = hbs('{{email}}');\n return { factorEmail: emailTpl({ email }) };\n};\n\nconst SendEmailAndVerifyCodeFormVerifyEmailCodeForm = Form.extend({\n layout: 'o-form-theme',\n className: 'mfa-verify-email',\n title: _.partial(loc, 'email.mfa.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n noCancelButton: true,\n attributes: {\n 'data-se': 'factor-email',\n },\n save: function() {\n return this.options.appState.get('isMfaChallenge')\n ? loc('mfa.challenge.verify', 'login')\n : loc('email.button.send', 'login');\n },\n\n events: Object.assign({}, Form.prototype.events, {\n submit: function(e) {\n e.preventDefault();\n this.handleSubmit();\n },\n }),\n\n handleSubmit() {\n this.clearErrors();\n if (this.options.appState.get('isMfaChallenge')) {\n if (this.isValid()) {\n this.model.save();\n }\n } else {\n // Send email and switch to verification view\n this.model.set('answer', '');\n this.model.save().then(this.renderChallengView.bind(this));\n }\n },\n\n initialize: function() {\n Form.prototype.initialize.apply(this, arguments);\n\n // render 'Send Email' page at first place\n this.add(\n View.extend({\n attributes: {\n 'data-se': 'mfa-send-email-content',\n },\n className: 'mfa-send-email-content',\n template: hbs('{{{i18n code=\"email.mfa.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n getTemplateData: createEmailMaskElement,\n })\n );\n },\n\n renderChallengView: function() {\n this.removeChildren();\n this.add(\n View.extend({\n className: 'mfa-email-sent-content',\n attributes: {\n 'data-se': 'mfa-email-sent-content',\n },\n // Why use `{{{` for the description?\n // - factorEmail is actually an HTML fragment which\n // is created via another handlebar template and used for bold the email address.\n template: hbs('{{{i18n code=\"email.mfa.email.sent.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n getTemplateData: createEmailMaskElement,\n })\n );\n\n this.add(ResendEmailView);\n\n this.addInput({\n label: loc('email.code.label', 'login'),\n 'label-top': true,\n name: 'answer',\n input: TextBox,\n wide: true,\n type: 'tel',\n });\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n this.render();\n },\n});\n\nexport default SendEmailAndVerifyCodeFormVerifyEmailCodeForm;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'mfa-verify-totp',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-totp' },\n\n initialize: function() {\n const factorName = this.model.get('factorLabel');\n const maskPasswordField = this.model.get('provider') === 'RSA' || this.model.get('provider') === 'DEL_OATH';\n\n this.title = factorName;\n if (this.model.get('isFactorTypeVerification')) {\n this.subtitle = loc('mfa.challenge.totp.subtitle.multiple', 'login', [factorName]);\n } else {\n this.subtitle = loc('mfa.challenge.title', 'login', [factorName]);\n }\n\n this.addInput({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n type: maskPasswordField ? 'password' : 'tel',\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n\n if (this.model.get('provider') === 'RSA' || this.model.get('provider') === 'DEL_OATH') {\n this.listenTo(this.model, 'error', (source, error) => {\n if (error && error.status === 409) {\n // 409 means we are in change pin, so we should clear out answer input\n this.$('.auth-passcode input').val('');\n this.$('.auth-passcode input').trigger('change');\n this.$('.auth-passcode input').focus();\n }\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, loc } from 'okta';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'mfa-verify-yubikey',\n autoSave: true,\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n scrollOnError: false,\n layout: 'o-form-theme',\n attributes: { 'data-se': 'factor-yubikey' },\n\n initialize: function() {\n const factorName = this.model.get('factorLabel');\n\n this.title = factorName;\n this.subtitle = loc('factor.totpHard.yubikey.description', 'login');\n\n this.addInput({\n label: loc('factor.totpHard.yubikey.placeholder', 'login'),\n 'label-top': true,\n className: 'o-form-fieldset o-form-label-top auth-passcode',\n name: 'answer',\n input: TextBox,\n inputId: 'mfa-answer',\n type: 'password',\n });\n\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n className: 'margin-btm-0',\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, internal } from 'okta';\nimport FactorUtil from 'util/FactorUtil';\nimport Factor from '../../../models/Factor';\nimport FactorsDropDownOptions from './FactorsDropDownOptions';\nconst { BaseDropDown } = internal.views.components;\n\n$(document).click(function(e) {\n const $target = $(e.target);\n const isDropdown = $target.closest('.option-selected').length > 0 && $target.closest('.dropdown').length > 0;\n\n if (!isDropdown) {\n $('.dropdown .options').hide();\n $('.dropdown a.option-selected').attr('aria-expanded', false);\n }\n});\n\nexport default BaseDropDown.extend({\n className: 'bg-helper icon-button',\n screenReaderText: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let factorLabel;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n }\n factorLabel = factor.get('factorLabel');\n return loc('mfa.factors.dropdown.sr.text', 'login', [factorLabel]);\n },\n events: {\n 'click a.option-selected': function(e) {\n e.preventDefault();\n if (_.result(this, 'disabled')) {\n e.stopPropagation();\n } else {\n const expanded = this.$('.options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n }\n },\n 'click .dropdown-disabled': function(e) {\n e.preventDefault();\n e.stopPropagation();\n },\n },\n initialize: function() {\n this.addOption(FactorsDropDownOptions.getDropdownOption('TITLE'));\n const factorsList = this.options.appState.get('factors');\n const multiplePushFactors = factorsList.hasMultipleFactorsOfSameType('push');\n\n factorsList.each(function(factor) {\n // Do not add okta totp if there are multiple okta push (each push will have an inline totp)\n if (!(factor.get('factorType') === 'token:software:totp' && multiplePushFactors)) {\n this.addOption(FactorsDropDownOptions.getDropdownOption(factor.get('factorName')), { model: factor });\n this.listenTo(this.last(), 'options:toggle', function() {\n this.$('.options').hide();\n this.$('a.option-selected').attr('aria-expanded', false);\n });\n }\n }, this);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-statements: [2, 16], complexity: [2, 10] */\nimport { _, loc } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport RouterUtil from 'util/RouterUtil';\nconst pushTitleTpl = hbs('{{factorName}} ({{{deviceName}}})');\n\n// deviceName is escaped on BaseForm (see BaseForm's template)\n\nconst action = function(model) {\n let factorIndex;\n const factorType = model.get('factorType');\n const factorsList = this.options.appState.get('factors');\n\n if (factorsList.hasMultipleFactorsOfSameType(factorType)) {\n factorIndex = factorsList.getFactorIndex(factorType, model.get('id'));\n }\n const url = RouterUtil.createVerifyUrl(model.get('provider'), factorType, factorIndex);\n const self = this;\n\n this.options.appState.trigger('factorSwitched');\n this.model.manageTransaction(function(transaction, setTransaction) {\n // FACTOR_CHALLENGE does not have a prev link\n if (transaction.status === 'FACTOR_CHALLENGE') {\n this.options.appState.set('trapMfaRequiredResponse', true);\n }\n if (transaction.status === 'MFA_CHALLENGE' && transaction.prev) {\n this.options.appState.set('trapMfaRequiredResponse', true);\n return transaction.prev().then(function(trans) {\n self.trigger('options:toggle');\n setTransaction(trans);\n self.options.appState.trigger('navigate', url);\n });\n } else {\n self.trigger('options:toggle');\n self.options.appState.trigger('navigate', url);\n }\n });\n};\n\nconst dropdownOptions = {\n TITLE: {\n title: _.partial(loc, 'mfa.factors.dropdown.title', 'login'),\n className: 'dropdown-list-title',\n disabled: true,\n },\n\n OKTA_VERIFY: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n OKTA_VERIFY_PUSH: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return pushTitleTpl({\n factorName: this.model.get('factorLabel'),\n deviceName: this.model.get('deviceName'),\n });\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GOOGLE_AUTH: {\n icon: 'factor-icon mfa-google-auth-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_HOTP: {\n icon: 'factor-icon mfa-hotp-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SYMANTEC_VIP: {\n icon: 'factor-icon mfa-symantec-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n RSA_SECURID: {\n icon: 'factor-icon mfa-rsa-30',\n className: 'factor-option',\n title: _.partial(loc, 'factor.totpHard.rsaSecurId', 'login'),\n action: function() {\n action.call(this, this.model);\n },\n },\n\n ON_PREM: {\n icon: 'factor-icon mfa-onprem-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO: {\n icon: 'factor-icon mfa-duo-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO_PUSH: {\n icon: 'duo-push-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.push', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_SMS: {\n icon: 'duo-sms-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.sms', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_CALL: {\n icon: 'duo-call-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.call', 'login', ['XXX-XXX-7890']),\n },\n\n YUBIKEY: {\n icon: 'factor-icon mfa-yubikey-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SMS: {\n icon: 'factor-icon mfa-sms-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CALL: {\n icon: 'factor-icon mfa-call-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n QUESTION: {\n icon: 'factor-icon mfa-question-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n PASSWORD: {\n icon: 'factor-icon mfa-password-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WINDOWS_HELLO: {\n icon: 'factor-icon mfa-windows-hello-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n U2F: {\n icon: 'factor-icon mfa-u2f-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WEBAUTHN: {\n icon: 'factor-icon mfa-webauthn-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n EMAIL: {\n icon: 'factor-icon mfa-email-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_SAML: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_OIDC: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_CLAIMS: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n};\nexport default {\n getDropdownOption: function(factorName) {\n return dropdownOptions[factorName];\n },\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, View, loc, createButton, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport OAuth2Util from 'util/OAuth2Util';\nconst SharedUtil = internal.util.Util;\nconst dividerTpl = hbs('\\\n {{text}}\\\n
');\nconst formTitleTpl = hbs('{{title}}
');\nexport default View.extend({\n className: 'primary-auth-container',\n\n children: function() {\n const children = [];\n const socialIdpButtons = this.settings.get('configuredSocialIdps');\n const pivButton = this.settings.get('piv');\n const customButtons = this.settings.get('customButtons');\n const divider = dividerTpl({ text: loc('socialauth.divider.text', 'login') });\n\n if (this.settings.get('hasPivCard')) {\n children.push(this._createPivButton(pivButton));\n }\n\n _.each(\n socialIdpButtons,\n function(button) {\n children.push(this._createSocialIdpButton(button));\n },\n this\n );\n\n _.each(\n customButtons,\n function(button) {\n children.push(this._createCustomButton(button));\n },\n this\n );\n\n // If the social auth buttons have to be above the Okta form, the title moves from\n // primary auth form to the social auth (above the buttons) and the divider goes below\n // the buttons (in between social auth and primary auth). If social auth needs to go below\n // Okta form, just add the divider at the top of the social auth container. The title still\n // lives in primary auth form.\n if (this.settings.get('socialAuthPositionTop')) {\n children.unshift(formTitleTpl({ title: loc('primaryauth.title', 'login') }));\n // Divider between Primary Auth and the Social Auth\n children.push(divider);\n } else {\n children.unshift(divider);\n }\n\n return children;\n },\n\n _createSocialIdpButton: function(options) {\n return createButton({\n attributes: {\n 'data-se': options.dataAttr,\n },\n className: options.className,\n title: function() {\n return options.text || loc(options.i18nKey);\n },\n click: function(e) {\n e.preventDefault();\n if (this.settings.get('oauth2Enabled')) {\n OAuth2Util.getTokens(this.settings, { idp: options.id }, this.options.currentController);\n } else {\n const baseUrl = this.settings.get('baseUrl');\n let params;\n const lastAuthResponse = this.options.appState.get('lastAuthResponse');\n if (this.options.appState.get('usingDeviceFlow')) {\n params = $.param({\n stateToken: lastAuthResponse?.stateToken,\n });\n } else {\n params = $.param({\n fromURI: this.settings.get('relayState'),\n });\n }\n const targetUri = `${baseUrl}/sso/idps/${options.id}?${params}`;\n SharedUtil.redirect(targetUri);\n }\n },\n });\n },\n\n _createPivButton: function(options) {\n let className = options.className || '';\n return createButton({\n attributes: {\n 'data-se': 'piv-card-button',\n },\n className: className + ' piv-button',\n title: options.text || loc('piv.cac.card', 'login'),\n click: function(e) {\n e.preventDefault();\n this.options.appState.trigger('navigate', 'signin/verify/piv');\n },\n });\n },\n\n _createCustomButton: function(options) {\n return createButton({\n attributes: {\n 'data-se': options.dataAttr,\n },\n className: options.className + ' default-custom-button',\n title: function() {\n return options.title || loc(options.i18nKey);\n },\n click: options.click,\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Form, loc } from 'okta';\nimport DeviceFingerprint from 'util/DeviceFingerprint';\nimport TypingUtil from 'util/TypingUtil';\nimport Util from 'util/Util';\nimport TextBox from 'views/shared/TextBox';\nexport default Form.extend({\n className: 'primary-auth-form',\n noCancelButton: true,\n attributes: { novalidate: 'novalidate' },\n save: function() {\n if (this.settings.get('features.passwordlessAuth')) {\n return loc('oform.next', 'login');\n }\n return loc('primaryauth.submit', 'login');\n },\n saveId: 'okta-signin-submit',\n layout: 'o-form-theme',\n\n // If socialAuth is configured, the title moves from the form to\n // the top of the container (and is rendered in socialAuth).\n title: function() {\n let formTitle = loc('primaryauth.title', 'login');\n\n if (this.settings.get('socialAuthPositionTop')) {\n formTitle = '';\n }\n return formTitle;\n },\n\n initialize: function() {\n const trackTypingPattern = this.settings.get('features.trackTypingPattern');\n\n this.listenTo(this, 'save', async function() {\n const { appState } = this.options;\n if (trackTypingPattern) {\n const typingPattern = TypingUtil.getTypingPattern();\n appState.set('typingPattern', typingPattern);\n }\n const creds = {\n username: this.model.get('username'),\n };\n\n if (!this.settings.get('features.passwordlessAuth')) {\n creds.password = this.model.get('password');\n }\n\n // show loading spinner and disable submit button before processCreds hook runs\n appState.trigger('loading', true);\n this.state.trigger('togglePrimaryAuthButton', true);\n \n await this.settings.processCreds(creds);\n\n if (this.settings.get('features.deviceFingerprinting')) {\n try {\n const fingerprint = await DeviceFingerprint.generateDeviceFingerprint(this.settings.get('baseUrl'), this.$el);\n appState.set('deviceFingerprint', fingerprint);\n } catch {\n // Keep going even if device fingerprint fails\n }\n }\n\n this.model.save();\n });\n\n this.stateEnableChange();\n },\n\n stateEnableChange: function() {\n this.listenTo(this.state, 'change:enabled', function(model, enable) {\n if (enable) {\n this.enable();\n } else {\n this.disable();\n }\n });\n },\n\n inputs: function() {\n const inputs = [];\n\n inputs.push(this.getUsernameField());\n if (!this.settings.get('features.passwordlessAuth')) {\n inputs.push(this.getPasswordField());\n }\n if (this.settings.get('features.rememberMe')) {\n inputs.push(this.getRemeberMeCheckbox());\n }\n return inputs;\n },\n\n getUsernameField: function() {\n const userNameFieldObject = {\n className: 'margin-btm-5',\n label: loc('primaryauth.username.placeholder', 'login'),\n 'label-top': true,\n explain: () => {\n if (!this.isCustomized('primaryauth.username.tooltip')) {\n return false;\n }\n\n return Util.createInputExplain('primaryauth.username.tooltip', 'primaryauth.username.placeholder', 'login');\n },\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'okta-signin-username',\n type: 'text',\n disabled: this.options.appState.get('disableUsername'),\n autoComplete: 'username',\n // TODO: support a11y attrs in Courage - OKTA-279025\n render: function() {\n const that = this;\n function clearAriaInvalid() {\n that.$(this)\n .removeAttr('aria-invalid')\n .off('focusout', clearAriaInvalid)\n .off('change', clearAriaInvalid);\n }\n\n this.$(`input[name=${this.options.name}]`)\n // OKTA-430928: to prevent NVDA and JAWS screen readers from\n // announcing \"required invalid entry\" before the user has a chance to\n // complete the field, aria-invalid is set to \"false\" initially and\n // removed on focusout or change using clearAriaInvalid()\n .attr({\n 'aria-invalid': 'false',\n 'aria-required': 'true',\n })\n .prop({\n required: true,\n })\n .focusout(clearAriaInvalid)\n .change(clearAriaInvalid);\n },\n };\n\n return userNameFieldObject;\n },\n\n getPasswordField: function() {\n const passwordFieldObject = {\n className: 'margin-btm-30',\n label: loc('primaryauth.password.placeholder', 'login'),\n 'label-top': true,\n explain: () => {\n if (!this.isCustomized('primaryauth.password.tooltip')) {\n return false;\n }\n\n return Util.createInputExplain('primaryauth.password.tooltip', 'primaryauth.password.placeholder', 'login');\n },\n 'explain-top': true,\n name: 'password',\n inputId: 'okta-signin-password',\n validateOnlyIfDirty: true,\n type: 'password',\n autoComplete: 'current-password',\n // TODO: support a11y attrs in Courage - OKTA-279025\n render: function() {\n const that = this;\n function clearAriaInvalid() {\n that.$(this)\n .removeAttr('aria-invalid')\n .off('focusout', clearAriaInvalid)\n .off('change', clearAriaInvalid);\n }\n this.$(`input[name=${this.options.name}]`)\n // OKTA-430928: to prevent NVDA and JAWS screen readers from\n // announcing \"required invalid entry\" before the user has a chance to\n // complete the field, aria-invalid is set to \"false\" initially and\n // removed on focusout or change using clearAriaInvalid()\n .attr({\n 'aria-invalid': 'false',\n 'aria-required': 'true',\n })\n .prop({\n required: true\n })\n .focusout(clearAriaInvalid)\n .change(clearAriaInvalid);\n },\n };\n\n if (this.settings.get('features.showPasswordToggleOnSignInPage')) {\n passwordFieldObject.params = {};\n passwordFieldObject.params.showPasswordToggle = true;\n }\n return passwordFieldObject;\n },\n\n isCustomized: function(property) {\n const language = this.settings.get('language');\n const i18n = this.settings.get('i18n');\n const customizedProperty = i18n && i18n[language] && i18n[language][property];\n\n return !!customizedProperty;\n },\n\n // TODO fix method name typo\n getRemeberMeCheckbox: function() {\n return {\n label: false,\n placeholder: loc('remember', 'login'),\n name: 'remember',\n type: 'checkbox',\n 'label-top': true,\n className: 'margin-btm-0',\n initialize: function() {\n this.listenTo(this.model, 'change:remember', function(model, val) {\n // OKTA-98946: We normally re-render on changes to model values,\n // but in this case we will manually update the checkbox due to\n // iOS Safari and how it handles autofill - it will autofill the\n // form anytime the dom elements are re-rendered, which prevents\n // the user from editing their username.\n this.$(':checkbox').prop('checked', val).trigger('updateState');\n });\n },\n };\n },\n\n focus: function() {\n if (!this.model.get('username')) {\n this.getInputs().first().focus();\n } else if (!this.settings.get('features.passwordlessAuth')) {\n this.getInputs().toArray()[1].focus();\n }\n if (this.settings.get('features.trackTypingPattern')) {\n TypingUtil.track('okta-signin-username');\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst SubSchemaSubSchema = View.extend({\n index: '',\n message: '',\n class: function() {\n return;\n },\n className: function() {\n return 'subschema-unsatisfied subschema-' + this.index;\n },\n template: hbs(\n '\\\n\\\n \\\n {{message}}\\\n
\\\n '\n ),\n getTemplateData: function() {\n return {\n message: this.message,\n };\n },\n});\nexport default View.extend({\n className: 'subschema',\n\n children: function() {\n return this.subSchemas.map(function(subSchema, index) {\n const description = subSchema.get('description');\n const message = description;\n // TODO API should send translated strings instead of i18n code inside description\n // or send param with i18n code\n\n return SubSchemaSubSchema.extend({\n index: index,\n message: message,\n });\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport Enums from 'util/Enums';\nconst CAN_REMOVE_BEACON_CLS = 'can-remove-beacon';\nexport default View.extend({\n tagName: 'main',\n className: 'auth-container main-container',\n id: Enums.WIDGET_CONTAINER_ID,\n attributes: { 'data-se': 'auth-container', tabindex: '-1' },\n initialize: function(options) {\n this.listenTo(options.appState, 'change:beaconType', function(model, type) {\n this.$el.toggleClass(CAN_REMOVE_BEACON_CLS, type === 'security');\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n\\\n \\\n
'\n ),\n className: 'contact-support',\n\n getTemplateData: function() {\n return this.settings.pick('helpSupportNumber');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Factor from 'models/Factor';\nimport Q from 'q';\nimport FactorUtil from 'util/FactorUtil';\nimport FactorsDropDown from 'views/mfa-verify/dropdown/FactorsDropDown';\nexport default View.extend({\n template: hbs(\n '\\\n {{i18n code=\"contact.support\" bundle=\"login\" arguments=\"helpSupportNumber\"}}
\\\n\\\n \\\n
\\\n \\\n \\\n
\\\n \\\n '\n ),\n\n events: {\n 'click .auth-beacon-factor': function(e) {\n e.preventDefault();\n e.stopPropagation();\n const expanded = this.$('.dropdown .options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n },\n },\n\n initialize: function() {\n this.options.appState.set('beaconType', 'factor');\n },\n\n getTemplateData: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let className;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'));\n }\n className = factor.get('iconClassName');\n return { className: className || '' };\n },\n\n postRender: function() {\n if (this.options.animate) {\n this.$('.auth-beacon-factor').fadeIn(200);\n }\n const appState = this.options.appState;\n\n if (appState.get('hasMultipleFactorsAvailable')) {\n this.add(FactorsDropDown, '[data-type=\"factor-types-dropdown\"]');\n }\n },\n\n fadeOut: function() {\n const deferred = Q.defer();\n\n this.$('.auth-beacon-factor').fadeOut(200, function() {\n deferred.resolve();\n });\n return deferred.promise;\n },\n\n equals: function(Beacon, options) {\n return (\n Beacon &&\n this instanceof Beacon &&\n options.provider === this.options.provider &&\n (options.factorType === this.options.factorType ||\n (FactorUtil.isOktaVerify(options.provider, options.factorType) &&\n FactorUtil.isOktaVerify(this.options.provider, this.options.factorType)))\n );\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"needhelp\" bundle=\"login\"}}\\\n \\\n - \\\n
- \\\n \\\n {{i18n code=\"forgotpassword\" bundle=\"login\"}}\\\n \\\n \\\n {{#if features.selfServiceUnlock}}\\\n
- \\\n \\\n {{i18n code=\"unlockaccount\" bundle=\"login\"}}\\\n \\\n \\\n {{/if}}\\\n {{#each helpLinks.custom}}\\\n
- \\\n {{text}}\\\n \\\n {{/each}}\\\n
- \\\n \\\n {{i18n code=\"help\" bundle=\"login\"}}\\\n \\\n \\\n
\\\n {{label}}\\\n {{text}}\\\n
\\\n '\n ),\n className: 'registration-container',\n\n events: {\n 'click a.registration-link': 'handleClickEvent',\n },\n\n handleClickEvent: function(e) {\n e.preventDefault();\n const clickHandler = this.settings.get('registration.click');\n\n if (clickHandler) {\n clickHandler();\n } else if (this.options.appState.get('isIdxStateToken')) {\n this.options.appState.trigger('navigate', 'signin/enroll-user');\n } else {\n this.options.appState.trigger('navigate', 'signin/register');\n }\n },\n\n getTemplateData: function() {\n const templateData = {\n label: loc('registration.signup.label', 'login'),\n text: loc('registration.signup.text', 'login'),\n };\n\n return templateData;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc, internal } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{linkText}}\\\n \\\n '\n ),\n className: 'auth-footer clearfix',\n events: {\n 'click a[data-se=\"signout-link\"]': 'handleSignout',\n },\n handleSignout: function(e) {\n e.preventDefault();\n\n const appState = this.options.appState;\n appState.trigger('signOut');\n const isSMSPasswordRecovery = appState.get('isSMSPasswordRecovery');\n\n this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(() => {\n if (this.settings.get('signOutLink') && !isSMSPasswordRecovery) {\n Util.redirect(this.settings.get('signOutLink'));\n } else {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n appState.trigger('navigate', '');\n }\n });\n },\n getTemplateData: function() {\n return {\n linkClassName: _.isUndefined(this.options.linkClassName) ? 'goto' : this.options.linkClassName,\n linkText: this.options.linkText || loc('goback', 'login'),\n };\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n \\\n \\\n
\\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nexport default View.extend({\n className: 'piv-beacon',\n template: hbs(\n '\\\n \\\n \\\n
\\\n \\\n \\\n
\\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nimport hbs from 'handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nexport default View.extend({\n template: hbs`{{#if requirements}}\n \n {{i18n code=\"password.complexity.requirements.header\" bundle=\"login\"}}\n
\n - \n {{#each requirements}}
- {{this}} {{/each}}\n
\\\n \\\n
\\\n \\\n \\\n
\\\n '\n ),\n className: 'js-security-beacon',\n\n initialize: function(options) {\n this.update = _.partial(updateSecurityImage, this.$el, options.appState);\n this.listenTo(options.appState, 'change:securityImage', this.update);\n this.listenTo(options.appState, 'loading', function(isLoading) {\n this.$el.toggleClass('beacon-loading', isLoading);\n this.removeAntiPhishingMessage();\n });\n this.options.appState.set('beaconType', 'security');\n\n this.listenTo(options.appState, 'navigate', this.removeAntiPhishingMessage);\n },\n\n postRender: function() {\n this.update(false);\n },\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n\n removeAntiPhishingMessage: function() {\n const image = this.$el.find('.auth-beacon-security');\n\n image.qtip('destroy');\n },\n});\n","import { loc, View } from 'okta';\nimport Enums from 'util/Enums';\n\nexport default View.extend({\n tagName: 'a',\n className: 'skip-to-content-link',\n attributes: { href: `#${Enums.WIDGET_CONTAINER_ID}` },\n initialize: function initialize() {\n this.$el.append(loc('skip.to.main.content', 'login'));\n }\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from 'okta';\nexport default View.extend({\n className: 'okta-waiting-spinner',\n attributes: {\n 'data-se': 'o-form-okta-waiting-spinner',\n },\n modelEvents: {\n 'spinner:show': 'show',\n 'spinner:hide': 'hide',\n },\n\n initialize: function(options) {\n if (options && options.visible === false) {\n this.hide();\n }\n },\n\n show: function() {\n this.$el.removeClass('hide');\n },\n\n hide: function() {\n this.$el.addClass('hide');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n//note: not including Okta here and explicitly including jquery and Handlebars\n//because we want to be explicit about which TextBox we are extending here\n//and want to avoid the cirucular dependency that occurs if we\n//include Okta\nimport { internal } from 'okta';\nimport 'qtip';\nimport BrowserFeatures from 'util/BrowserFeatures';\nconst { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n postRender: function() {\n if (this.options.type === 'number') {\n const input = this.$('input');\n\n input.attr({\n pattern: '[0-9]*',\n inputmode: 'numeric',\n });\n }\n TextBox.prototype.postRender.apply(this, arguments);\n },\n // Override the focus() to ignore focus in IE. IE (8-11) has a known bug where\n // the placeholder text disappears when the input field is focused.\n focus: function() {\n if (BrowserFeatures.isIE()) {\n return;\n }\n return TextBox.prototype.focus.apply(this, arguments);\n },\n});\n","import hbs from 'handlebars-inline-precompile';\n\nconst consentLogoHeaderTemplate = hbs`{{#if clientURI}}\n \n{{/if}}\n{{#if customLogo}}\n \\\n
\\\n \n {{{i18n code=\"consent.required.text\" bundle=\"login\" arguments=\"appName\"}}}\n {{#if issuer}}\n {{issuer}}\n {{/if}}\n
`;\n\nexport default consentLogoHeaderTemplate;\n","import { _, $ } from 'okta';\nimport Errors from 'util/Errors';\nimport OAuth2Util from 'util/OAuth2Util';\n\nexport default function buildRenderOptions(widgetOptions = {}, options = {}) {\n const authParams = $.extend(true, {}, widgetOptions.authParams, _.pick(options, OAuth2Util.AUTH_PARAMS));\n const { el, clientId, redirectUri } = Object.assign({}, widgetOptions, options);\n const renderOptions = Object.assign({}, { el, clientId, redirectUri, authParams });\n\n if (!renderOptions.el) {\n throw new Errors.ConfigError('\"el\" is required');\n }\n\n if (!renderOptions.clientId) {\n throw new Errors.ConfigError('\"clientId\" is required');\n }\n\n if (!renderOptions.redirectUri) {\n throw new Errors.ConfigError('\"redirectUri\" is required');\n }\n\n return renderOptions;\n}","import { $ } from 'okta';\nimport Enums from 'util/Enums';\n\nexport default function createRouter(Router, widgetOptions, renderOptions, authClient, successFn, errorFn, hooks) {\n let resolve;\n let reject;\n const promise = new Promise((_resolve, _reject) => {\n resolve = _resolve;\n reject = _reject;\n });\n const routerOptions = $.extend(true, {}, widgetOptions, renderOptions, {\n authClient,\n hooks,\n globalSuccessFn: (res) => {\n successFn && successFn(res); // call success function if provided\n if (res && res.status === Enums.SUCCESS) {\n resolve(res);\n }\n },\n globalErrorFn: (error) => {\n errorFn && errorFn(error); // call error function if provided\n reject(error);\n }\n });\n const router = new Router(routerOptions);\n router.start();\n return {\n router,\n routerOptions,\n promise\n };\n}\n\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: 0 */\nimport AccountUnlockedController from 'AccountUnlockedController';\nimport ActivateTotpController from 'ActivateTotpController';\nimport AdminConsentRequiredController from 'AdminConsentRequiredController';\nimport BarcodePushController from 'BarcodePushController';\nimport BarcodeTotpController from 'BarcodeTotpController';\nimport ConsentRequiredController from 'ConsentRequiredController';\nimport CustomPasswordExpiredController from 'CustomPasswordExpiredController';\nimport DeviceActivateController from './DeviceActivateController';\nimport DeviceActivateTerminalController from './DeviceActivateTerminalController';\nimport EnrollActivateCustomFactorController from 'EnrollActivateCustomFactorController';\nimport EnrollActivateEmailController from 'EnrollActivateEmailController';\nimport EnrollCallAndSmsController from 'EnrollCallAndSmsController';\nimport EnrollChoicesController from 'EnrollChoicesController';\nimport EnrollCustomFactorController from 'EnrollCustomFactorController';\nimport EnrollDuoController from 'EnrollDuoController';\nimport EnrollEmailController from 'EnrollEmailController';\nimport EnrollHotpController from 'EnrollHotpController';\nimport EnrollOnPremController from 'EnrollOnPremController';\nimport EnrollPasswordController from 'EnrollPasswordController';\nimport EnrollQuestionController from 'EnrollQuestionController';\nimport EnrollSymantecVipController from 'EnrollSymantecVipController';\nimport EnrollTotpController from 'EnrollTotpController';\nimport EnrollU2FController from 'EnrollU2FController';\nimport EnrollUserController from 'EnrollUserController';\nimport EnrollWebauthnController from 'EnrollWebauthnController';\nimport EnrollWindowsHelloController from 'EnrollWindowsHelloController';\nimport EnrollYubikeyController from 'EnrollYubikeyController';\nimport EnrollmentLinkSentController from 'EnrollmentLinkSentController';\nimport EnterPasscodePushFlowController from 'EnterPasscodePushFlowController';\nimport ForgotPasswordController from 'ForgotPasswordController';\nimport IDPDiscoveryController from 'IDPDiscoveryController';\nimport ForceIDPDiscoveryController from 'ForceIDPDiscoveryController';\nimport ManualSetupPushController from 'ManualSetupPushController';\nimport ManualSetupTotpController from 'ManualSetupTotpController';\nimport MfaVerifyController from 'MfaVerifyController';\nimport PasswordExpiredController from 'PasswordExpiredController';\nimport PasswordResetController from 'PasswordResetController';\nimport PollController from 'PollController';\nimport PrimaryAuthController from 'PrimaryAuthController';\nimport PwdResetEmailSentController from 'PwdResetEmailSentController';\nimport RecoveryChallengeController from 'RecoveryChallengeController';\nimport RecoveryLoadingController from 'RecoveryLoadingController';\nimport RecoveryQuestionController from 'RecoveryQuestionController';\nimport RefreshAuthStateController from 'RefreshAuthStateController';\nimport RegistrationCompleteController from 'RegistrationCompleteController';\nimport RegistrationController from 'RegistrationController';\nimport UnlockAccountController from 'UnlockAccountController';\nimport UnlockEmailSentController from 'UnlockEmailSentController';\nimport VerifyCustomFactorController from 'VerifyCustomFactorController';\nimport VerifyDuoController from 'VerifyDuoController';\nimport VerifyPIVController from 'VerifyPIVController';\nimport VerifyU2FController from 'VerifyU2FController';\nimport VerifyWebauthnController from 'VerifyWebauthnController';\nimport VerifyWindowsHelloController from 'VerifyWindowsHelloController';\nimport ErrorStateController from 'ErrorStateController';\nimport BaseLoginRouter from 'util/BaseLoginRouter';\nimport FactorBeacon from 'views/shared/FactorBeacon';\nimport PIVBeacon from 'views/shared/PIVBeacon';\nimport SecurityBeacon from 'views/shared/SecurityBeacon';\n\nimport Enums from 'util/Enums';\n\nexport default BaseLoginRouter.extend({\n routes: {\n '': 'defaultAuth',\n signin: 'primaryAuth',\n 'signin/verify/duo/web': 'verifyDuo',\n 'signin/verify/piv': 'verifyPIV',\n 'signin/poll': 'poll',\n 'signin/verify/fido/webauthn': 'verifyWebauthn',\n 'signin/verify/webauthn': 'verifyWebauthn',\n 'signin/verify/fido/u2f': 'verifyU2F',\n 'signin/verify/u2f': 'verifyU2F',\n 'signin/verify/generic_saml/assertion:saml2': 'verifySAMLFactor',\n 'signin/verify/generic_oidc/assertion:oidc': 'verifyOIDCFactor',\n 'signin/verify/custom/claims_provider': 'verifyClaimsFactor',\n 'signin/verify/:factorType': 'verifyNoProvider',\n 'signin/verify/:provider/:factorType(/:factorIndex)': 'verify',\n 'signin/enroll': 'enrollChoices',\n 'signin/enroll/duo/web': 'enrollDuo',\n 'signin/enroll/okta/question': 'enrollQuestion',\n 'signin/enroll/okta/password': 'enrollPassword',\n 'signin/enroll/okta/sms': 'enrollSms',\n 'signin/enroll/okta/call': 'enrollCall',\n 'signin/enroll/okta/email': 'enrollEmail',\n 'signin/enroll-activate/okta/sms': 'enrollSms',\n 'signin/enroll-activate/okta/call': 'enrollCall',\n 'signin/enroll/rsa/token': 'enrollRsa',\n 'signin/enroll/del_oath/token': 'enrollOnPrem',\n 'signin/enroll/symantec/token': 'enrollSymantecVip',\n 'signin/enroll/yubico/token:hardware': 'enrollYubikey',\n 'signin/enroll/fido/webauthn': 'enrollWebauthn',\n 'signin/enroll/fido/u2f': 'enrollU2F',\n 'signin/enroll/generic_saml/assertion:saml2': 'enrollSAMLFactor',\n 'signin/enroll/generic_oidc/assertion:oidc': 'enrollOIDCFactor',\n 'signin/enroll/custom/claims_provider': 'enrollClaimsFactor',\n 'signin/enroll/custom/token:hotp': 'enrollHotpFactor',\n 'signin/enroll/:provider/:factorType': 'enrollTotpFactor',\n 'signin/enroll-activate/okta/email': 'enrollActivateEmail',\n 'signin/enroll-activate/okta/push': 'scanBarcodePushFactor',\n 'signin/enroll-activate/okta/push/manual': 'manualSetupPushFactor',\n 'signin/enroll-activate/okta/push/sent': 'activationLinkSent',\n 'signin/enroll-activate/okta/token:software:totp/passcode': 'enterPasscodeInPushEnrollmentFlow',\n 'signin/enroll-activate/custom/claims_provider': 'enrollActivateClaimsFactor',\n 'signin/enroll-activate/:provider/:factorType': 'scanBarcodeTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/activate': 'activateTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/manual': 'manualSetupTotpFactor',\n 'signin/password-expired': 'passwordExpired',\n 'signin/custom-password-expired': 'customPasswordExpired',\n 'signin/forgot-password': 'forgotPassword',\n 'signin/recovery-challenge': 'recoveryChallenge',\n 'signin/recovery-emailed': 'recoveryEmailSent',\n 'signin/recovery-question': 'recoveryQuestion',\n 'signin/password-reset': 'passwordReset',\n 'signin/reset-password/:token': 'recoveryLoading',\n 'signin/user-unlock/:token': 'recoveryLoading',\n 'signin/recovery/:token': 'recoveryLoading',\n 'signin/unlock-emailed': 'unlockEmailSent',\n 'signin/unlock': 'unlockAccount',\n 'signin/account-unlocked': 'accountUnlocked',\n 'signin/refresh-auth-state(/:token)': 'refreshAuthState',\n 'signin/register': 'register',\n 'signin/register-complete': 'registerComplete',\n 'signin/error': 'errorState',\n 'signin/consent': 'consentRequired',\n 'signin/admin-consent': 'adminConsentRequired',\n 'signin/enroll-user': 'enrollUser',\n 'signin/device-activate-complete': 'deviceActivateComplete',\n 'signin/device-activate': 'deviceActivate',\n 'signin/idp-discovery-check': 'idpDiscoveryCheck',\n '*wildcard': 'defaultAuth',\n },\n\n // Route handlers that do not require a stateToken. If the page is refreshed,\n // these functions will not require a status call to refresh the stateToken.\n stateLessRouteHandlers: [\n 'defaultAuth',\n 'idpDiscovery',\n 'primaryAuth',\n 'forgotPassword',\n 'recoveryLoading',\n 'unlockAccount',\n 'refreshAuthState',\n 'register',\n 'registerComplete',\n 'errorState',\n 'verifyPIV',\n ],\n\n defaultAuth: function() {\n if (window.location.hash === `#${Enums.WIDGET_CONTAINER_ID}`) {\n document.getElementById(Enums.WIDGET_CONTAINER_ID).focus();\n return;\n }\n if (this.settings.get('features.idpDiscovery')) {\n this.idpDiscovery();\n } else {\n this.primaryAuth();\n }\n },\n\n idpDiscoveryCheck: function() {\n this.render(ForceIDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n idpDiscovery: function() {\n this.render(IDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n primaryAuth: function() {\n this.render(PrimaryAuthController, { Beacon: SecurityBeacon });\n },\n\n verifyDuo: function() {\n this.render(VerifyDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n verifyPIV: function() {\n this.render(VerifyPIVController, { Beacon: PIVBeacon });\n },\n\n poll: function() {\n this.render(PollController);\n },\n\n verifyWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(VerifyWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(VerifyWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n verifyU2F: function() {\n this.render(VerifyU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n verifySAMLFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n verifyOIDCFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n verifyClaimsFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n verify: function(provider, factorType, factorIndex) {\n this.render(MfaVerifyController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n factorIndex: factorIndex,\n Beacon: FactorBeacon,\n });\n },\n\n verifyNoProvider: function(factorType) {\n this.render(MfaVerifyController, {\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollChoices: function() {\n this.render(EnrollChoicesController, { Beacon: SecurityBeacon });\n },\n\n enrollDuo: function() {\n this.render(EnrollDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n enrollQuestion: function() {\n this.render(EnrollQuestionController, {\n provider: 'OKTA',\n factorType: 'question',\n Beacon: FactorBeacon,\n });\n },\n\n enrollPassword: function() {\n this.render(EnrollPasswordController, {\n provider: 'OKTA',\n factorType: 'password',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSms: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'sms',\n Beacon: FactorBeacon,\n });\n },\n\n enrollCall: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'call',\n Beacon: FactorBeacon,\n });\n },\n\n enrollEmail: function() {\n this.render(EnrollEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateEmail: function() {\n this.render(EnrollActivateEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollRsa: function() {\n this.render(EnrollOnPremController, {\n provider: 'RSA',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOnPrem: function() {\n this.render(EnrollOnPremController, {\n provider: 'DEL_OATH',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSymantecVip: function() {\n this.render(EnrollSymantecVipController, {\n provider: 'SYMANTEC',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollYubikey: function() {\n this.render(EnrollYubikeyController, {\n provider: 'YUBICO',\n factorType: 'token:hardware',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSAMLFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOIDCFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n enrollClaimsFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateClaimsFactor: function() {\n this.render(EnrollActivateCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollTotpFactor: function(provider, factorType) {\n this.render(EnrollTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollHotpFactor: function() {\n this.render(EnrollHotpController, {\n provider: 'CUSTOM',\n factorType: 'token:hotp',\n Beacon: FactorBeacon,\n });\n },\n\n enrollWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(EnrollWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(EnrollWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n enrollU2F: function() {\n this.render(EnrollU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodeTotpFactor: function(provider, factorType) {\n this.render(BarcodeTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodePushFactor: function() {\n this.render(BarcodePushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activateTotpFactor: function(provider, factorType) {\n this.render(ActivateTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupTotpFactor: function(provider, factorType) {\n this.render(ManualSetupTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupPushFactor: function() {\n this.render(ManualSetupPushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activationLinkSent: function() {\n this.render(EnrollmentLinkSentController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n enterPasscodeInPushEnrollmentFlow: function() {\n this.render(EnterPasscodePushFlowController, {\n provider: 'OKTA',\n factorType: 'token:software:totp',\n Beacon: FactorBeacon,\n });\n },\n\n passwordExpired: function() {\n this.render(PasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n customPasswordExpired: function() {\n this.render(CustomPasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n forgotPassword: function() {\n this.render(ForgotPasswordController);\n },\n\n recoveryChallenge: function() {\n this.render(RecoveryChallengeController, { Beacon: SecurityBeacon });\n },\n\n recoveryEmailSent: function() {\n this.render(PwdResetEmailSentController, { Beacon: SecurityBeacon });\n },\n\n unlockEmailSent: function() {\n this.render(UnlockEmailSentController, { Beacon: SecurityBeacon });\n },\n\n recoveryQuestion: function() {\n this.render(RecoveryQuestionController, { Beacon: SecurityBeacon });\n },\n\n passwordReset: function() {\n this.render(PasswordResetController, { Beacon: SecurityBeacon });\n },\n\n recoveryLoading: function(token) {\n this.render(RecoveryLoadingController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n unlockAccount: function() {\n this.render(UnlockAccountController);\n },\n\n accountUnlocked: function() {\n this.render(AccountUnlockedController, { Beacon: SecurityBeacon });\n },\n\n refreshAuthState: function(token) {\n this.render(RefreshAuthStateController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n register: function() {\n this.render(RegistrationController);\n },\n\n registerComplete: function() {\n this.render(RegistrationCompleteController);\n },\n\n errorState: function() {\n this.render(ErrorStateController, { Beacon: SecurityBeacon });\n },\n\n consentRequired: function() {\n this.render(ConsentRequiredController);\n },\n\n adminConsentRequired: function() {\n this.render(AdminConsentRequiredController);\n },\n\n enrollUser: function() {\n this.render(EnrollUserController);\n },\n\n deviceActivate: function() {\n this.render(DeviceActivateController);\n },\n deviceActivateComplete: function() {\n this.render(DeviceActivateTerminalController);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { Model } from 'okta';\nimport { mergeHook } from 'util/Hooks';\nimport { HookDefinition, HooksOptions } from 'types';\n\nexport default class Hooks extends Model {\n\n mergeHook(formName: string, hookToMerge: HookDefinition): void {\n const hooks = this.get('hooks') || {};\n mergeHook(hooks, formName, hookToMerge);\n this.set('hooks', hooks);\n }\n\n getHook(formName: string): HookDefinition {\n const hooks: HooksOptions = this.get('hooks') || {};\n return hooks[formName]; // may be undefined\n }\n \n}\n","/* eslint max-statements: [2, 22], complexity: [2, 12] */\n\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model, loc, internal, ModelProperty } from 'okta';\nimport config from 'config/config.json';\nimport hbs from 'handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport Errors from 'util/Errors';\nimport IDP from 'util/IDP';\nimport Logger from 'util/Logger';\nimport Util from 'util/Util';\nimport CountryUtil from 'util/CountryUtil';\nimport { OktaAuth } from '@okta/okta-auth-js';\nconst SharedUtil = internal.util.Util;\nconst ConfigError = Errors.ConfigError;\nconst UnsupportedBrowserError = Errors.UnsupportedBrowserError;\nconst assetBaseUrlTpl = hbs('https://global.oktacdn.com/okta-signin-widget/{{version}}');\n\nconst local: Record\\\n {{identifier}}\\\n
')({identifier});\n\n if (header.length) {\n header.after(identifierHTMLString);\n } else {\n this.$el.find('.o-form-error-container').after(identifierHTMLString);\n }\n },\n\n cancelForm() {\n this.options.appState.trigger('invokeAction', 'cancel');\n },\n\n getUISchema() {\n if (Array.isArray(this.options.currentViewState.uiSchema)) {\n return this.options.currentViewState.uiSchema;\n } else {\n return [];\n }\n },\n\n addInputOrView(input) {\n if (input.visible === false || input.mutable === false) {\n return;\n }\n if (input.View) {\n this.add(input.View, _.omit(input, 'View', 'showWhen'));\n if (input.showWhen) {\n FormUtil.applyShowWhen(this.last(), input.showWhen);\n }\n } else {\n this.addInput(input);\n }\n\n if (Array.isArray(input.optionsUiSchemas)) {\n if (this.options.optionUiSchemaConfig[input.name]) {\n const optionUiSchemaIndex = Number(this.options.optionUiSchemaConfig[input.name]);\n const optionUiSchemas = input.optionsUiSchemas[optionUiSchemaIndex] || [];\n optionUiSchemas.forEach(this.addInputOrView.bind(this));\n }\n }\n },\n\n /*\n * Views should override this function to render custom error callouts for invalid form actions.\n * Should return true when callout is customized\n */\n showCustomFormErrorCallout: null,\n\n /*\n * Renders the contents of messages object (if any, on error) during initialize\n * This function is called during Form.initialize, and will display\n * messages when the form reloads.\n * Note: Any user action related form errors handled by FormController.showFormErrors\n */\n showMessages(options) {\n const messages = this.options.appState.get('messages') || {};\n const errContainer = '.o-form-error-container';\n if (Array.isArray(messages.value) && !(options instanceof View)) {\n this.add('', errContainer);\n messages.value.forEach(obj => {\n if(!obj?.class || obj.class === INFO_MESSAGE_CLASS) {\n // add message as plain text\n this.add(`${obj.message}
`, '.ion-messages-container');\n } else {\n const errorObj = {\n class: obj?.class ?? '',\n message: obj?.message,\n title: '',\n ...options\n };\n this.add(createCallout({\n content: errorObj.message,\n type: errorObj.class.toLowerCase(),\n title: errorObj.title\n }), errContainer);\n options = null; // prevent repeating first error message\n }\n });\n } else if (options instanceof View) {\n // if callee is showCustomFormErrorCallout. show custom error views\n this.add(options, errContainer);\n }\n },\n});","import { Collection, _, loc, createButton, ButtonOptions } from 'okta';\n\nimport AuthenticatorEnrollOptions from '../components/AuthenticatorEnrollOptions';\nimport AuthenticatorVerifyOptions from '../components/AuthenticatorVerifyOptions';\nimport { getAuthenticatorDataForEnroll, getAuthenticatorDataForVerification } from '../utils/AuthenticatorUtil';\nimport { AUTHENTICATOR_KEY, FORMS as RemediationForms } from '../../ion/RemediationConstants';\nimport IDP from '../../../util/IDP';\nimport AdminScopeList from '../../../views/admin-consent/ScopeList';\nimport EnduserScopeList from '../../../views/consent/ScopeList';\nimport CaptchaView from '../views/captcha/CaptchaView';\n\n// TODO: remove ambient declaration patch after courage type has been updated: OKTA-488758\ndeclare module 'okta' {\n interface ButtonOptions {\n attributes?: Record\\\n {{#if logo}}\\\n
\\\n {{/if}}\\\n \\\n
\\\n \\\n '\n );\n /* eslint-enable @okta/okta/no-unlocalized-text-in-templates */\n View.prototype.preinitialize.apply(this, args);\n }\n\n\n // Attach a 'no-beacon' class if the security image feature\n // is not passed in to prevent the beacon from jumping.\n initialize(options) {\n if (!options.settings.get('features.securityImage')) {\n this.$el.addClass(NO_BEACON_CLS);\n // To show/hide the spinner when there is no security image,\n // listen to the appState's loading/removeLoading events.\n this.listenTo(options.appState, 'loading', this.setLoadingBeacon);\n this.listenTo(options.appState, 'removeLoading', this.removeLoadingBeacon);\n }\n }\n\n /* eslint complexity: 0 */\n setBeacon(NextBeacon, options) {\n const selector = '[data-type=\"beacon-container\"]';\n const container = this.$(selector);\n const transition = typeOfTransition(this.currentBeacon, NextBeacon, options);\n\n switch (transition) {\n case 'none':\n this.$el.addClass(NO_BEACON_CLS);\n return;\n case 'same':\n return;\n case 'add':\n this.$el.removeClass(NO_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'remove':\n this.$el.addClass(NO_BEACON_CLS);\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n case 'fade':\n // Other transitions are performed on the beacon container,\n // but this transition is on the content inside the beacon.\n // For a SecurityBeacon the username change will update the\n // AppState and trigger an transition to a new Becon\n // Since there is no url change this method is not called.\n // For a FactorBeacon a page refresh has occurred\n // so we execute the beacon's own transition method.\n if (!this.currentBeacon.fadeOut) {\n throw new Error('The current beacon is missing the \"fadeOut\" method');\n }\n options.animate = true;\n return this.currentBeacon\n .fadeOut()\n .then(() => {\n removeBeacon(this);\n addBeacon(this, NextBeacon, selector, options);\n })\n .done(); // TODO: can this be removed if fadeOut returns standard ES6 Promise?\n case 'swap':\n return Animations.swapBeacons({\n $el: container,\n swap: () => {\n const isLoading = isLoadingBeacon(this.currentBeacon);\n\n // Order of these calls is important for -\n // loader --> security/factor beacon swap.\n removeBeacon(this);\n if (isLoading) {\n container.removeClass(LOADING_BEACON_CLS);\n this.$el.removeClass(NO_BEACON_CLS);\n }\n addBeacon(this, NextBeacon, selector, options);\n },\n }).done(); // TODO: can this be removed if Animations.swapBeacons returns standard ES6 Promise?\n case 'load':\n // Show the loading beacon. Add a couple of classes\n // before triggering the add beacon code.\n container.addClass(LOADING_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'unload':\n // Hide the loading beacon.\n return this.removeLoadingBeacon();\n default:\n throw new Error('the \"' + transition + '\" is not recognized');\n }\n }\n\n // Show the loading beacon when the security image feature is not enabled.\n setLoadingBeacon(isLoading) {\n if (!isLoading || isLoadingBeacon(this.currentBeacon)) {\n return;\n }\n this.setBeacon(LoadingBeacon, { loading: true });\n }\n\n // Hide the beacon on primary auth failure. On primary auth success, setBeacon does this job.\n removeLoadingBeacon() {\n const container = this.$('[data-type=\"beacon-container\"]');\n\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n container.removeClass(LOADING_BEACON_CLS);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n }\n\n getTemplateData() {\n return this.settings.toJSON({ verbose: true });\n }\n\n getContentEl() {\n return this.$('.auth-content-inner');\n }\n}\n","/* eslint-disable @typescript-eslint/no-explicit-any */\nimport Errors from 'util/Errors';\nimport Util from 'util/Util';\nimport Logger from 'util/Logger';\nimport getAuthClient from 'widget/getAuthClient';\nimport buildRenderOptions from 'widget/buildRenderOptions';\nimport createRouter from 'widget/createRouter';\nimport V1Router from 'LoginRouter';\nimport V2Router from 'v2/WidgetRouter';\nimport Hooks from 'models/Hooks';\nimport {\n WidgetOptions,\n OktaSignInAPI,\n RenderSuccessCallback,\n RenderErrorCallback,\n RenderResult,\n RenderOptions,\n HookFunction,\n RenderResultSuccess,\n EventCallback,\n EventCallbackWithError,\n EventName\n} from '../types';\nimport { OktaAuth, Tokens } from '@okta/okta-auth-js';\n\ndeclare type AbstractRouter = typeof V1Router | typeof V2Router;\n\nconst EVENTS_LIST = ['ready', 'afterError', 'afterRender'];\n\nexport default class OktaSignIn implements OktaSignInAPI {\n Router: AbstractRouter;\n options: WidgetOptions;\n hooks: Hooks;\n router: AbstractRouter;\n authClient: OktaAuth;\n\n constructor(options: WidgetOptions) {\n Util.debugMessage(`\n The Okta Sign-In Widget is running in development mode.\n When you are ready to publish your app, embed the minified version to turn on production mode.\n See: https://developer.okta.com/code/javascript/okta_sign-in_widget#cdn\n `);\n\n this.options = options;\n this.authClient = getAuthClient(options);\n\n // validate authClient configuration against widget options\n if (options.useInteractionCodeFlow && this.authClient.isPKCE() === false) {\n throw new Errors.ConfigError(\n 'The \"useInteractionCodeFlow\" option requires PKCE to be enabled on the authClient.'\n );\n }\n\n // Hooks can be modified before or after render\n this.hooks = new Hooks({\n hooks: options.hooks\n });\n\n let Router: AbstractRouter;\n if ((options.stateToken && !Util.isV1StateToken(options.stateToken)) \n // Self hosted widget can use `useInteractionCodeFlow` to use V2Router\n || options.useInteractionCodeFlow \n || options.proxyIdxResponse) {\n Router = V2Router;\n } else {\n Router = V1Router;\n }\n this.Router = Router;\n\n // Triggers the event up the chain so it is available to the consumers of the widget.\n this.Router.prototype.Events.listenTo.call(this, Router.prototype, 'all', this.trigger);\n\n // On the first afterRender event (usually when the Widget is ready) - emit a 'ready' event\n this.once('afterRender', function(context) {\n this.trigger('ready', context);\n });\n }\n\n /**\n * Render the sign in widget to an element. Returns a promise that will resolve on success or reject on error.\n * @param options - options for the signin widget.\n * Must have an el or $el property to render the widget to.\n * @param success - success callback function\n * @param error - error callback function\n */\n renderEl(renderOptions: RenderOptions, successFn?: RenderSuccessCallback, errorFn?: RenderErrorCallback): Promise