\" + container.escapeExpression((helper = (helper = lookupProperty(helpers, \"title\") || (depth0 != null ? lookupProperty(depth0, \"title\") : depth0)) != null ? helper : container.hooks.helperMissing, typeof helper === \"function\" ? helper.call(depth0 != null ? depth0 : container.nullContext || {}, {\n \"name\": \"title\",\n \"hash\": {},\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 286\n },\n \"end\": {\n \"line\": 1,\n \"column\": 295\n }\n }\n }) : helper)) + \"
\";\n },\n \"5\": function (container, depth0, helpers, partials, data) {\n var helper,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"\" + container.escapeExpression((helper = (helper = lookupProperty(helpers, \"subtitle\") || (depth0 != null ? lookupProperty(depth0, \"subtitle\") : depth0)) != null ? helper : container.hooks.helperMissing, typeof helper === \"function\" ? helper.call(depth0 != null ? depth0 : container.nullContext || {}, {\n \"name\": \"subtitle\",\n \"hash\": {},\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 347\n },\n \"end\": {\n \"line\": 1,\n \"column\": 359\n }\n }\n }) : helper)) + \"
\";\n },\n \"7\": function (container, depth0, helpers, partials, data) {\n var stack1,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"- \" + ((stack1 = lookupProperty(helpers, \"each\").call(depth0 != null ? depth0 : container.nullContext || {}, depth0 != null ? lookupProperty(depth0, \"bullets\") : depth0, {\n \"name\": \"each\",\n \"hash\": {},\n \"fn\": container.program(8, data, 0),\n \"inverse\": container.noop,\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 420\n },\n \"end\": {\n \"line\": 1,\n \"column\": 483\n }\n }\n })) != null ? stack1 : \"\") + \"
\" + alias4((helper = (helper = lookupProperty(helpers, \"errorExplain\") || (depth0 != null ? lookupProperty(depth0, \"errorExplain\") : depth0)) != null ? helper : alias2, typeof helper === alias3 ? helper.call(alias1, {\n \"name\": \"errorExplain\",\n \"hash\": {},\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 408\n },\n \"end\": {\n \"line\": 1,\n \"column\": 424\n }\n }\n }) : helper)) + \"
\";\n },\n \"useData\": true\n});\n\nconst errorClass = 'o-form-has-errors';\nconst updateArrayEvent = 'updateArray';\nvar DeletableBox = BaseView.extend({\n tagName: 'div',\n className: 'o-form-input-group',\n events: {\n 'click a': function (e) {\n e.preventDefault();\n this.remove();\n },\n 'keyup input': function () {\n this.update();\n }\n },\n isEditMode: function () {\n return !this.options.readOnly && (this.options.read !== true || this.model.get('__edit__') === true);\n },\n initialize: function () {\n this.template = template(oktaUnderscore.extend(this.options, {\n placeholder: this.getPlaceholderText(),\n errorExplain: this.getErrorExplainText()\n }));\n this.update = oktaUnderscore.debounce(this.update, this.options.debounceDelay || Time.DEBOUNCE_DELAY);\n },\n render: function () {\n if (this.isEditMode()) {\n this.$el.html(this.template);\n } else {\n this.$el.text(this.options.value);\n this.$('a').hide();\n }\n\n return this;\n },\n remove: function () {\n this.trigger(updateArrayEvent, null);\n this.$el.slideUp(() => {\n BaseView.prototype.remove.call(this, arguments);\n });\n },\n update: function () {\n let updatedValue = this.$('input').val();\n\n const parseFunc = oktaUnderscore.object([SchemaUtils.DATATYPE.number, SchemaUtils.DATATYPE.integer], [StringUtil.parseFloat, this.parseInt]);\n\n if (oktaUnderscore.has(parseFunc, this.options.itemType)) {\n updatedValue = parseFunc[this.options.itemType](updatedValue);\n !oktaUnderscore.isNumber(updatedValue) ? this.markInvalid() : this.clearInvalid();\n }\n\n this.trigger(updateArrayEvent, updatedValue);\n },\n markInvalid: function () {\n this.$el.addClass(errorClass);\n },\n clearInvalid: function () {\n this.$el.removeClass(errorClass);\n },\n getPlaceholderText: function () {\n let placeholderText;\n\n switch (this.options.itemType.toLowerCase()) {\n // TODO fix lint and add the spaces/indent\n case 'string':\n placeholderText = StringUtil.localize('placeholder.text.string', 'courage');\n break;\n\n case 'number':\n placeholderText = StringUtil.localize('placeholder.text.number', 'courage');\n break;\n\n case 'integer':\n placeholderText = StringUtil.localize('placeholder.text.integer', 'courage');\n break;\n\n default:\n placeholderText = '';\n }\n\n return placeholderText;\n },\n getErrorExplainText: function () {\n let itemTypeMismatchMessages;\n\n switch (this.options.itemType.toLowerCase()) {\n // TODO fix lint and add the spaces/indent\n case 'string':\n itemTypeMismatchMessages = StringUtil.localize('string.item.type.error.message', 'courage');\n break;\n\n case 'number':\n itemTypeMismatchMessages = StringUtil.localize('number.item.type.error.message', 'courage');\n break;\n\n case 'integer':\n itemTypeMismatchMessages = StringUtil.localize('integer.item.type.error.message', 'courage');\n break;\n\n default:\n itemTypeMismatchMessages = '';\n }\n\n return itemTypeMismatchMessages;\n },\n parseInt: function (string) {\n // native javascript parseInt is aggressive\n // there're cases we don't want a string to be parsed even though it is convertable\n // so that we don't convert a string silently before warning a user the potential error\n // this is to make sure the string is in an integer format before we parse it\n if (/^-?\\d+$/.test(string)) {\n const num = parseInt(string, 10);\n return !oktaUnderscore.isNaN(num) ? num : string;\n }\n\n return string;\n }\n});\n\nexport { DeletableBox as default };\n","import _Handlebars2 from '../../../../../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport SchemaUtils from '../../../util/SchemaUtil.js';\nimport BaseInput from '../BaseInput.js';\nimport DeletableBox from './DeletableBox.js';\n\nvar TextBoxSet = BaseInput.extend({\n className: 'array-input',\n template: _Handlebars2.template({\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n var lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"\" + container.escapeExpression((lookupProperty(helpers, \"i18n\") || depth0 && lookupProperty(depth0, \"i18n\") || container.hooks.helperMissing).call(depth0 != null ? depth0 : container.nullContext || {}, {\n \"name\": \"i18n\",\n \"hash\": {\n \"bundle\": \"courage\",\n \"code\": \"oform.add.another\"\n },\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 52\n },\n \"end\": {\n \"line\": 1,\n \"column\": 102\n }\n }\n })) + \"\";\n },\n \"useData\": true\n }),\n params: {\n itemType: 'string'\n },\n events: {\n 'click .array-inputs-button': function (e) {\n e.preventDefault();\n\n if (this.isEditMode()) {\n this.addNewElement();\n }\n }\n },\n initialize: function (options) {\n options || (options = {});\n this.params = oktaUnderscore.defaults(options.params || {}, this.params);\n this.uniqueIdPrefix = 'array';\n },\n // api returns null for an array that does not have value\n // convert it to an empty array\n from: function (val) {\n if (!oktaUnderscore.isArray(val)) {\n return [];\n }\n\n return val;\n },\n // @Override\n editMode: function () {\n this._setArrayObject();\n\n this.$el.html(this.template);\n\n oktaUnderscore.each(this.arrayObject, oktaUnderscore.bind(this._addDeletableBox, this));\n\n return this;\n },\n // @Override\n readMode: function () {\n this.editMode();\n this.$('.array-inputs-button').addClass('link-button-disabled');\n },\n // @Override\n // converts arrayObject to a plain array\n // for string type array, returns all values\n // for number/integer type array, returns values in number type\n val: function () {\n let values = oktaUnderscore.values(this.arrayObject);\n\n if (oktaUnderscore.contains([SchemaUtils.DATATYPE.number, SchemaUtils.DATATYPE.integer], this.params.itemType)) {\n values = oktaUnderscore.filter(values, oktaUnderscore.isNumber);\n }\n\n return values;\n },\n focus: function () {},\n addNewElement: function () {\n const value = '';\n\n const key = oktaUnderscore.uniqueId(this.uniqueIdPrefix);\n\n this.arrayObject[key] = value;\n\n this._addDeletableBox(value, key); // update is called to make sure an empty string value is added for string type array\n\n\n this.update();\n },\n _addDeletableBox: function (value, key) {\n const deletableBox = new DeletableBox(oktaUnderscore.extend(oktaUnderscore.pick(this.options, 'read', 'readOnly', 'model'), {\n key: key,\n value: value,\n itemType: this.params.itemType\n }));\n this.listenTo(deletableBox, 'updateArray', function (updatedValue) {\n if (oktaUnderscore.isNull(updatedValue)) {\n delete this.arrayObject[key];\n this.stopListening(deletableBox);\n } else {\n this.arrayObject[key] = updatedValue;\n }\n\n this.update();\n });\n deletableBox.render().$el.hide();\n this.$('.array-inputs-button').before(deletableBox.el);\n deletableBox.$el.slideDown();\n return deletableBox;\n },\n _setArrayObject: function () {\n const array = this.model.get(this.options.name);\n this.arrayObject = {};\n\n if (oktaUnderscore.isArray(array) && !oktaUnderscore.isEmpty(array)) {\n const keys = [];\n const self = this;\n\n oktaUnderscore(array.length).times(function () {\n keys.push(oktaUnderscore.uniqueId(self.uniqueIdPrefix));\n });\n\n this.arrayObject = oktaUnderscore.object(keys, array);\n }\n }\n});\n\nexport { TextBoxSet as default };\n","import oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport StringUtil from '../../../util/StringUtil.js';\nimport BooleanSelect from '../inputs/BooleanSelect.js';\nimport TextBoxSet from '../inputs/TextBoxSet.js';\nimport EnumTypeHelper from './EnumTypeHelper.js';\n\n/* eslint max-statements: 0, max-params: 0 */\n\nfunction convertStringToNumber(string) {\n const number = StringUtil.parseFloat(string);\n return string === '' ? null : number;\n} // converts possibleValues to choices\n// [a, b, c] => {a: a, b: b, c: c}\n\n\nfunction getChoices(values) {\n return oktaUnderscore.object(values, values);\n}\n\nfunction isArray(type) {\n return type && type.indexOf('array') >= 0;\n} // A schema property may have an objectName either\n// at the root level or nested in the items object\n\n\nfunction getObjectName(schemaProp) {\n const items = schemaProp.get('items');\n\n if (items) {\n return items.objectName;\n }\n\n return schemaProp.get('objectName');\n}\n/**\n * Checks the validity of a schema property.\n *\n * @param {SchemaProperty} [schemaProp] A schema property backbone model\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Boolean} true/false\n * @private\n */\n\n\nfunction isValidSchemaProp(schemaProp, values) {\n const objectName = getObjectName(schemaProp);\n const results = values[objectName]; // a schema property that references an empty list of values\n // Im looking at you, google apps.\n\n if (objectName && oktaUnderscore(results).isEmpty()) {\n return false;\n }\n\n return true;\n} // Maps each __displayType__ to a basic set of inputOptions.\n\n\nfunction defaultOptions(property) {\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const name = property.get('name');\n const title = property.get('title');\n /* eslint complexity: [2, 24] */\n\n const inputOptions = {\n type: 'text',\n name: name,\n label: title || name\n }; // @see customOptions for enum complex \"object\" type,\n // a.k.a \"object\" or \"arrayofobject\" type has enum values defined.\n // Other cases (e.g., nested object type) are not support yet.\n\n switch (type) {\n case 'arrayofstring':\n inputOptions.input = TextBoxSet;\n inputOptions.params = {\n itemType: 'string'\n };\n break;\n\n case 'arrayofnumber':\n inputOptions.input = TextBoxSet;\n inputOptions.params = {\n itemType: 'number'\n };\n break;\n\n case 'arrayofinteger':\n inputOptions.input = TextBoxSet;\n inputOptions.params = {\n itemType: 'integer'\n };\n break;\n\n case 'arrayofobject':\n inputOptions.input = TextBoxSet;\n inputOptions.params = {\n itemType: property.get('items').type\n };\n break;\n\n case 'arrayofref-id':\n inputOptions.input = TextBoxSet;\n inputOptions.params = {\n itemType: property.get('items').format\n };\n break;\n\n case 'boolean':\n inputOptions.input = BooleanSelect;\n break;\n\n case 'integer':\n case 'number':\n inputOptions.to = convertStringToNumber;\n break;\n\n case 'reference':\n inputOptions.type = 'select';\n inputOptions.options = getChoices(values);\n break;\n\n case 'image':\n inputOptions.readOnly = true;\n\n inputOptions.from = function (value) {\n return oktaUnderscore.isEmpty(value) ? '' : StringUtil.localize('user.profile.image.image_set', 'courage'); // TODO\n };\n\n break;\n\n case 'password':\n inputOptions.type = 'password';\n break;\n\n case 'date':\n inputOptions.type = 'date';\n break;\n\n case 'uri':\n case 'country-code':\n case 'country_code':\n case 'language-code':\n case 'language_code':\n case 'email':\n case 'locale':\n case 'timezone':\n case 'string':\n case 'object':\n // default input options\n break;\n\n default:\n throw new Error(`unknown type: ${type}`);\n }\n\n return inputOptions;\n} // Sets nonbasic inputOptions, such as an array with possible values\n\n\nfunction customOptions(property) {\n let inputOptions = {};\n const name = property.get('name');\n const type = property.get('__displayType__');\n const values = property.get('__possibleValues__');\n const prefix = property.get('__fieldNamePrefix__');\n\n if (prefix) {\n inputOptions.name = prefix + name;\n inputOptions.errorField = name;\n }\n\n if (property.isEnumType()) {\n const configs = {\n displayType: type,\n title: property.get('title'),\n enumValues: property.getEnumValues()\n };\n inputOptions = oktaUnderscore.extend({}, EnumTypeHelper.getEnumInputOptions(configs), inputOptions);\n } else if (isArray(type) && values) {\n inputOptions.type = 'checkboxset';\n inputOptions.input = null;\n inputOptions.options = getChoices(values);\n }\n\n return inputOptions;\n}\n\nfunction augmentSchemaProp(schemaProp, possibleValues, profile) {\n const name = schemaProp.get('name');\n const prefix = profile.__nestedProperty__;\n let defaultValues = possibleValues[name];\n const userValues = profile.get(name);\n let values; // If API responds with a field name that differs from the form-field name\n // example: Model's 'profile.username' vs. server's 'username'\n\n if (prefix) {\n schemaProp.set('__fieldNamePrefix__', prefix);\n } // case 1: objectName - fixed list of values are set for the input\n\n\n const fixedValues = possibleValues[getObjectName(schemaProp)]; // case 2: name only - default list of values are provided, user can add more\n // TODO: this case does not yet exist, so it is not tested\n\n if (defaultValues && userValues) {\n defaultValues = oktaUnderscore.union(defaultValues, userValues);\n } // If both fixed and default values exist,\n // take the fixed values unless they are empty\n\n\n if (fixedValues && fixedValues.length) {\n values = fixedValues;\n } else if (defaultValues && defaultValues.length) {\n values = defaultValues;\n }\n\n schemaProp.set('__possibleValues__', values);\n}\n\nfunction augmentSchemaProps(schemaProps, possibleValues, profile) {\n schemaProps.each(function (schemaProp) {\n augmentSchemaProp(schemaProp, possibleValues, profile);\n });\n return schemaProps;\n}\n/**\n * Remove invalid schema properties from a collection\n *\n * @param {SchemaProperties Collection} [properties] A collection of schema properties\n * @param {Object} [values] An object of the form { key: [value1, value2]}\n * @return {Array} An array of valid schema models, this can be used to reset\n * a schema properties collection for example.\n * @private\n */\n\n\nfunction cleanSchema(properties, values) {\n return properties.filter(function (schema) {\n return isValidSchemaProp(schema, values);\n });\n}\n\nvar SchemaFormFactory = {\n /**\n * Creates the options hash for BaseForm.addInput from a prepared schema\n * property.\n *\n * @param {Okta.Model} [preparedSchemaProp] A schema property backbone model\n * that has been standardized by the prepareSchema method.\n * @return {Object} An object containing all of the options needed by\n * BaseForm's addInput()\n */\n createInputOptions: function (preparedSchemaProp) {\n const custom = customOptions(preparedSchemaProp);\n const standard = defaultOptions(preparedSchemaProp); // underscore did not support nested extend\n // https://github.com/jashkenas/underscore/issues/162\n\n if (custom.params && standard.params) {\n custom.params = oktaUnderscore.defaults(custom.params, standard.params);\n }\n\n return oktaUnderscore.defaults(custom, standard);\n },\n hasValidSchemaProps: function (schemaProps, possibleValues) {\n if (oktaUnderscore.isEmpty(schemaProps)) {\n return false;\n }\n\n const validSchema = cleanSchema(schemaProps, possibleValues);\n return !!validSchema.length;\n },\n\n /**\n * This method is responsible for preparing a collection for the form\n * factory to use by putting all of the information to create an input\n * into the schema property and removing invalid properties.\n * The typical UD form takes 3 models:\n * The data model has the input values.\n * The schema model describes which input to use, such as a textbox or a checkbox.\n * The possible values model provide a list of default options to display, for example in a drop down menu.\n *\n * @param {SchemaProperty Collection} [schemaProps] A schema property backbone model.\n * @param {Object} [possibleValues] An object of the form { key: [value1, value2]}\n * @param {Okta.Model} [profile] A backbone model containing the property described by the schema property.\n * @return {SchemaProperty Collection} A schema property collection with standardized models.\n * The standard schema model adds a couple of additional private properties to\n * allow the form factory to reference lookup values or name prefixes without going to a second model.\n */\n prepareSchema: function (schemaProps, possibleValues, profile) {\n schemaProps.reset(cleanSchema(schemaProps, possibleValues));\n return augmentSchemaProps(schemaProps, possibleValues, profile);\n },\n\n /**\n * `prepareSchema` will reset the property list which may not be necessary at some case.\n * like when setting default value for schema properties.\n * (more detail about such case @see wiki UX, App+Entitlements+for+Provisioning)\n *\n * @param { }\n * @return {String}\n */\n augmentSchemaProps: augmentSchemaProps,\n augmentSchemaProp: augmentSchemaProp\n};\n\nexport { SchemaFormFactory as default };\n","import $ from 'jquery';\n\n/**\n * There are following local modifications:\n * - Author: Uzi Kilon ukilon@okta.com\n * Bug: OKTA-20830 - solves the conflict when there are multiple labels\n */\n\n/**\n * --------------------------------------------------------------------\n * jQuery customInput plugin\n * Author: Maggie Costello Wachs maggie@filamentgroup.com, Scott Jehl, scott@filamentgroup.com\n * Copyright (c) 2009 Filament Group\n * licensed under MIT (filamentgroup.com/examples/mit-license.txt)\n * --------------------------------------------------------------------\n*/\n(function () {\n var jQuery = $;\n\n var $$1 = jQuery;\n\n jQuery.fn.customInput = function () {\n return $$1(this).each(function () {\n if ($$1(this).is('[type=checkbox],[type=radio]')) {\n var input = $$1(this); // get the associated label using the input's id\n\n var label = input.siblings('label[for=\"' + input.attr('id') + '\"]:first');\n\n if (!label.length) {\n label = input.closest('label[for=\"' + input.attr('id') + '\"]:first');\n } // wrap the input + label in a div\n\n\n input.add(label).wrapAll(''); // necessary for browsers that don't support the :hover pseudo class on labels\n\n label.hover(function () {\n $$1(this).addClass('hover');\n }, function () {\n $$1(this).removeClass('hover');\n }); //bind custom event, trigger it, bind click,focus,blur events\n\n input.bind('updateState', function () {\n input.is(':checked') ? label.addClass('checked') : label.removeClass('checked checkedHover checkedFocus');\n }).trigger('updateState').click(function () {\n $$1('input[name=\"' + $$1(this).attr('name') + '\"]').trigger('updateState');\n }).focus(function () {\n label.addClass('focus');\n\n if (input.is(':checked')) {\n $$1(this).addClass('checkedFocus');\n }\n }).blur(function () {\n label.removeClass('focus checkedFocus');\n });\n }\n });\n };\n})();\n","import _Handlebars2 from '../../../../../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport Keys from '../../../util/Keys.js';\nimport '../../../vendor/plugins/jquery.custominput.js';\nimport BaseInput from '../BaseInput.js';\n\nvar CheckBox = BaseInput.extend({\n template: _Handlebars2.template({\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n var helper,\n alias1 = depth0 != null ? depth0 : container.nullContext || {},\n alias2 = container.hooks.helperMissing,\n alias3 = \"function\",\n alias4 = container.escapeExpression,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"\";\n },\n \"useData\": true\n }),\n\n /**\n * @Override\n */\n events: {\n 'change :checkbox': 'update',\n keyup: function (e) {\n e.preventDefault();\n\n if (Keys.isSpaceBar(e)) {\n this.$(':checkbox').click();\n } else if (Keys.isEnter(e)) {\n this.model.trigger('form:save');\n }\n }\n },\n\n /**\n * @Override\n */\n editMode: function () {\n let placeholder = oktaUnderscore.resultCtx(this.options, 'placeholder', this);\n\n if (placeholder === '') {\n placeholder = oktaUnderscore.resultCtx(this.options, 'label', this);\n } else if (placeholder === false) {\n placeholder = '';\n }\n\n this.$el.html(this.template(oktaUnderscore.extend(oktaUnderscore.omit(this.options, 'placeholder'), {\n placeholder: placeholder\n })));\n const $input = this.$(':checkbox');\n $input.prop('checked', this.getModelValue() || false);\n this.$('input').customInput();\n this.model.trigger('form:resize');\n return this;\n },\n\n /**\n * @Override\n */\n readMode: function () {\n this.editMode();\n this.$(':checkbox').prop('disabled', true);\n return this;\n },\n\n /**\n * @Override\n */\n val: function () {\n return this.$(':checkbox').prop('checked');\n },\n\n /**\n * @Override\n */\n focus: function () {\n return this.$(':checkbox').focus();\n }\n});\n\nexport { CheckBox as default };\n","import $ from 'jquery';\n\n/*! http://mths.be/placeholder v2.0.7 by @mathias */\n\n(function () {\n var $$1 = $;\n\n var isInputSupported = ('placeholder' in document.createElement('input')),\n isTextareaSupported = ('placeholder' in document.createElement('textarea')),\n prototype = $$1.fn,\n valHooks = $$1.valHooks,\n hooks,\n placeholder;\n\n if (isInputSupported && isTextareaSupported) {\n placeholder = prototype.placeholder = function () {\n return this;\n };\n\n placeholder.input = placeholder.textarea = true;\n } else {\n placeholder = prototype.placeholder = function () {\n var $this = this;\n $this.filter((isInputSupported ? 'textarea' : ':input') + '[placeholder]').not('.placeholder').bind({\n 'focus.placeholder': clearPlaceholder,\n 'blur.placeholder': setPlaceholder\n }).data('placeholder-enabled', true).trigger('blur.placeholder');\n return $this;\n };\n\n placeholder.input = isInputSupported;\n placeholder.textarea = isTextareaSupported;\n hooks = {\n 'get': function (element) {\n var $element = $$1(element);\n return $element.data('placeholder-enabled') && $element.hasClass('placeholder') ? '' : element.value;\n },\n 'set': function (element, value) {\n var $element = $$1(element);\n\n if (!$element.data('placeholder-enabled')) {\n return element.value = value;\n }\n\n if (value == '') {\n element.value = value; // Issue #56: Setting the placeholder causes problems if the element continues to have focus.\n\n if (element != document.activeElement) {\n // We can't use `triggerHandler` here because of dummy text/password inputs :(\n setPlaceholder.call(element);\n }\n } else if ($element.hasClass('placeholder')) {\n clearPlaceholder.call(element, true, value) || (element.value = value);\n } else {\n element.value = value;\n } // `set` can not return `undefined`; see http://jsapi.info/jquery/1.7.1/val#L2363\n\n\n return $element;\n }\n };\n isInputSupported || (valHooks.input = hooks);\n isTextareaSupported || (valHooks.textarea = hooks);\n $$1(function () {\n // Look for forms\n $$1(document).delegate('form', 'submit.placeholder', function () {\n // Clear the placeholder values so they don't get submitted\n var $inputs = $$1('.placeholder', this).each(clearPlaceholder);\n setTimeout(function () {\n $inputs.each(setPlaceholder);\n }, 10);\n });\n }); // Clear placeholder values upon page reload\n\n $$1(window).bind('beforeunload.placeholder', function () {\n $$1('.placeholder').each(function () {\n this.value = '';\n });\n });\n }\n\n function args(elem) {\n // Return an object of element attributes\n var newAttrs = {},\n rinlinejQuery = /^jQuery\\d+$/;\n $$1.each(elem.attributes, function (i, attr) {\n if (attr.specified && !rinlinejQuery.test(attr.name)) {\n newAttrs[attr.name] = attr.value;\n }\n });\n return newAttrs;\n }\n\n function clearPlaceholder(event, value) {\n var input = this,\n $input = $$1(input);\n\n if (input.value == $input.attr('placeholder') && $input.hasClass('placeholder')) {\n if ($input.data('placeholder-password')) {\n $input = $input.hide().next().show().attr('id', $input.removeAttr('id').data('placeholder-id')); // If `clearPlaceholder` was called from `$.valHooks.input.set`\n\n if (event === true) {\n return $input[0].value = value;\n }\n\n $input.focus();\n } else {\n input.value = '';\n $input.removeClass('placeholder');\n input == document.activeElement && input.select();\n }\n }\n }\n\n function setPlaceholder() {\n var $replacement,\n input = this,\n $input = $$1(input),\n id = this.id;\n\n if (input.value == '') {\n if (input.type == 'password') {\n if (!$input.data('placeholder-textinput')) {\n try {\n $replacement = $input.clone().attr({\n 'type': 'text'\n });\n } catch (e) {\n $replacement = $$1('').attr($$1.extend(args(this), {\n 'type': 'text'\n }));\n }\n\n $replacement.removeAttr('name').data({\n 'placeholder-password': true,\n 'placeholder-id': id\n }).bind('focus.placeholder', clearPlaceholder);\n $input.data({\n 'placeholder-textinput': $replacement,\n 'placeholder-id': id\n }).before($replacement);\n }\n\n $input = $input.removeAttr('id').hide().prev().attr('id', id).show(); // Note: `$input[0] != input` now!\n }\n\n $input.addClass('placeholder');\n $input[0].value = $input.attr('placeholder');\n } else {\n $input.removeClass('placeholder');\n }\n }\n})();\n","import _Handlebars2 from '../../../../../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport oktaJQueryStatic from '../../../util/jquery-wrapper.js';\nimport '@okta/qtip';\nimport Keys from '../../../util/Keys.js';\nimport '../../../vendor/plugins/jquery.placeholder.js';\nimport BaseInput from '../BaseInput.js';\n\nconst className = 'okta-form-input-field input-fix';\n\nfunction hasTitleAndText(options) {\n const title = options.title;\n const text = options.text;\n return title && text && title !== text;\n} // options may be a string or an object.\n\n\nfunction createQtipContent(options) {\n if (hasTitleAndText(options)) {\n return options;\n }\n\n return {\n text: options.text || options\n };\n}\n\nvar TextBox = BaseInput.extend({\n template: _Handlebars2.template({\n \"1\": function (container, depth0, helpers, partials, data) {\n return \"\";\n },\n \"3\": function (container, depth0, helpers, partials, data) {\n var stack1,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"\";\n },\n \"5\": function (container, depth0, helpers, partials, data) {\n var helper,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return container.escapeExpression((helper = (helper = lookupProperty(helpers, \"autoComplete\") || (depth0 != null ? lookupProperty(depth0, \"autoComplete\") : depth0)) != null ? helper : container.hooks.helperMissing, typeof helper === \"function\" ? helper.call(depth0 != null ? depth0 : container.nullContext || {}, {\n \"name\": \"autoComplete\",\n \"hash\": {},\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 333\n },\n \"end\": {\n \"line\": 1,\n \"column\": 349\n }\n }\n }) : helper));\n },\n \"7\": function (container, depth0, helpers, partials, data) {\n return \"off\";\n },\n \"9\": function (container, depth0, helpers, partials, data) {\n return \"\";\n },\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n var stack1,\n helper,\n alias1 = depth0 != null ? depth0 : container.nullContext || {},\n alias2 = container.hooks.helperMissing,\n alias3 = \"function\",\n alias4 = container.escapeExpression,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return ((stack1 = lookupProperty(helpers, \"if\").call(alias1, (stack1 = depth0 != null ? lookupProperty(depth0, \"params\") : depth0) != null ? lookupProperty(stack1, \"innerTooltip\") : stack1, {\n \"name\": \"if\",\n \"hash\": {},\n \"fn\": container.program(1, data, 0),\n \"inverse\": container.noop,\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 0\n },\n \"end\": {\n \"line\": 1,\n \"column\": 87\n }\n }\n })) != null ? stack1 : \"\") + ((stack1 = lookupProperty(helpers, \"if\").call(alias1, (stack1 = depth0 != null ? lookupProperty(depth0, \"params\") : depth0) != null ? lookupProperty(stack1, \"icon\") : stack1, {\n \"name\": \"if\",\n \"hash\": {},\n \"fn\": container.program(3, data, 0),\n \"inverse\": container.noop,\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 87\n },\n \"end\": {\n \"line\": 1,\n \"column\": 166\n }\n }\n })) != null ? stack1 : \"\") + \"\" + ((stack1 = lookupProperty(helpers, \"if\").call(alias1, (stack1 = depth0 != null ? lookupProperty(depth0, \"params\") : depth0) != null ? lookupProperty(stack1, \"iconDivider\") : stack1, {\n \"name\": \"if\",\n \"hash\": {},\n \"fn\": container.program(9, data, 0),\n \"inverse\": container.noop,\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 371\n },\n \"end\": {\n \"line\": 1,\n \"column\": 444\n }\n }\n })) != null ? stack1 : \"\");\n },\n \"useData\": true\n }),\n\n /**\n * @Override\n */\n events: {\n 'input input': 'update',\n 'change input': 'update',\n 'keydown input': 'update',\n 'compositionend input': function () {\n this.isComposing = false;\n },\n 'compositionstart input': function () {\n this.isComposing = true;\n },\n 'keyup input': function (e) {\n if (Keys.isEnter(e) && !(window.okta && window.okta.enableIMESupport)) {\n this.model.trigger('form:save');\n } else if (Keys.isEsc(e)) {\n this.model.trigger('form:cancel');\n }\n }\n },\n hasIMESupport: true,\n constructor: function () {\n BaseInput.apply(this, arguments);\n this.$el.addClass('o-form-control');\n },\n\n /**\n * @Override\n */\n editMode: function () {\n this.$el.addClass(className);\n BaseInput.prototype.editMode.apply(this, arguments);\n this.$('input').placeholder();\n },\n\n /**\n * @Override\n */\n readMode: function () {\n BaseInput.prototype.readMode.apply(this, arguments);\n this.$el.addClass('no-translate');\n\n if (this.options.type === 'password') {\n this.$el.text('********');\n }\n\n this.$el.removeClass(className);\n },\n\n /**\n * @Override\n */\n val: function () {\n let inputValue = this.$('input[type=\"' + this.options.type + '\"]').val(); //IE will only read clear text pw if type=\"password\" is explicitly in selector\n\n if (this.options.type !== 'password') {\n inputValue = oktaJQueryStatic.trim(inputValue);\n }\n\n return inputValue;\n },\n\n /**\n * @Override\n */\n focus: function () {\n return this.$('input').focus();\n },\n postRender: function () {\n const {\n params: params\n } = this.options;\n\n if (params && params.innerTooltip) {\n const content = createQtipContent(params.innerTooltip);\n this.$('.input-tooltip').qtip({\n content: content,\n style: {\n classes: 'okta-tooltip qtip-custom qtip-shadow'\n },\n position: {\n my: 'bottom left',\n // Note: qTip2 has a known issue calculating the tooltip offset when:\n // 1. A container element has both:\n // a) position: relative/absolute\n // b) overlay: value other than 'visible'\n // 2. The page is scrolled\n //\n // We set position:relative and overlay:auto on the body element,\n // where both are required for:\n // - Positioning the footer correctly\n // - Displaying long pages in embedded browsers\n //\n // The original design called for a fixed position relative to the\n // tooltip icon - this has been switched to \"relative to mouse, and\n // update position when mouse moves\" because of this constraint.\n target: 'mouse',\n adjust: {\n method: 'flip',\n mouse: true,\n y: -5,\n x: 5\n },\n viewport: oktaJQueryStatic('body')\n }\n });\n }\n }\n});\n\nexport { TextBox as default };\n","import _Handlebars2 from '../../../../../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport TextBox from './TextBox.js';\n\nconst toggleTemplate = _Handlebars2.template({\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n return \"\";\n },\n \"useData\": true\n});\n\nconst toggleTimeout = 30000;\nvar PasswordBox = TextBox.extend({\n initialize: function () {\n if (this.__showPasswordToggle()) {\n this.events['click .password-toggle .button-show'] = '__showPassword';\n this.events['click .password-toggle .button-hide'] = '__hidePassword';\n }\n\n this.delegateEvents();\n },\n postRender: function () {\n if (this.isEditMode() && this.__showPasswordToggle()) {\n this.$el.append(toggleTemplate);\n this.$el.find('input[type=\"password\"]').addClass('password-with-toggle');\n }\n\n TextBox.prototype.postRender.apply(this, arguments);\n },\n\n /**\n * @Override\n * Overrides the default val method in order to avoid whitespace trimming\n */\n val: function () {\n return this.$('input[type=\"' + this.options.type + '\"]').val();\n },\n __showPasswordToggle: function () {\n return this.options.params && this.options.params.showPasswordToggle;\n },\n __showPassword: function () {\n // Turn off the spellcheck if the user decides to switch to regular input\n // in order to prevent sending passwords to third party spellcheckers\n this.$('input').attr('spellcheck', false);\n TextBox.prototype.changeType.apply(this, ['text']);\n this.$('.password-toggle .button-show').hide();\n this.$('.password-toggle .button-hide').show();\n this.passwordToggleTimer = oktaUnderscore.delay(() => {\n this.__hidePassword();\n }, toggleTimeout);\n },\n __hidePassword: function () {\n TextBox.prototype.changeType.apply(this, ['password']);\n this.$('.password-toggle .button-show').show();\n this.$('.password-toggle .button-hide').hide(); // clear timeout\n\n if (this.passwordToggleTimer) {\n clearTimeout(this.passwordToggleTimer);\n }\n }\n});\n\nexport { PasswordBox as default };\n","import _Handlebars2 from '../../../../../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport oktaJQueryStatic from '../../../util/jquery-wrapper.js';\nimport oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport Keys from '../../../util/Keys.js';\nimport Util from '../../../util/Util.js';\nimport BaseView from '../../BaseView.js';\nimport '../../../vendor/plugins/jquery.custominput.js';\nimport BaseInput from '../BaseInput.js';\n\nconst isABaseView = Util.isABaseView;\nconst RadioRadioOption = BaseView.extend({\n template: _Handlebars2.template({\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n var helper,\n alias1 = depth0 != null ? depth0 : container.nullContext || {},\n alias2 = container.hooks.helperMissing,\n alias3 = \"function\",\n alias4 = container.escapeExpression,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return \"\";\n },\n \"useData\": true\n }),\n initialize: function (options) {\n let explain;\n explain = options.explain;\n\n if (oktaUnderscore.isFunction(explain) && !isABaseView(explain)) {\n explain = oktaUnderscore.resultCtx(this.options, 'explain', this);\n }\n\n if (!explain) {\n return;\n }\n\n if (isABaseView(explain)) {\n this.add('', '.radio-label');\n this.add(explain, '.o-form-explain');\n } else {\n this.add(BaseView.extend({\n className: 'o-form-explain',\n tagName: 'p',\n template: _Handlebars2.template({\n \"compiler\": [8, \">= 4.3.0\"],\n \"main\": function (container, depth0, helpers, partials, data) {\n var helper,\n lookupProperty = container.lookupProperty || function (parent, propertyName) {\n if (Object.prototype.hasOwnProperty.call(parent, propertyName)) {\n return parent[propertyName];\n }\n\n return undefined;\n };\n\n return container.escapeExpression((helper = (helper = lookupProperty(helpers, \"explain\") || (depth0 != null ? lookupProperty(depth0, \"explain\") : depth0)) != null ? helper : container.hooks.helperMissing, typeof helper === \"function\" ? helper.call(depth0 != null ? depth0 : container.nullContext || {}, {\n \"name\": \"explain\",\n \"hash\": {},\n \"data\": data,\n \"loc\": {\n \"start\": {\n \"line\": 1,\n \"column\": 0\n },\n \"end\": {\n \"line\": 1,\n \"column\": 11\n }\n }\n }) : helper));\n },\n \"useData\": true\n })\n }), '.radio-label');\n }\n }\n});\nvar Radio = BaseInput.extend({\n /**\n * @Override\n */\n events: {\n 'change :radio': 'update',\n keyup: function (e) {\n if (Keys.isSpaceBar(e)) {\n oktaJQueryStatic(e.target).click();\n } else if (Keys.isEnter(e)) {\n this.model.trigger('form:save');\n }\n }\n },\n\n /**\n * @Override\n */\n editMode: function () {\n const templates = [];\n this.$el.empty();\n\n oktaUnderscore.each(this.options.options, function (value, key) {\n const options = {\n optionId: oktaUnderscore.uniqueId('option'),\n name: this.options.inputId,\n realName: this.options.name,\n value: key\n };\n\n if (!oktaUnderscore.isObject(value)) {\n value = {\n label: value\n };\n }\n\n oktaUnderscore.extend(options, value);\n\n templates.push(new RadioRadioOption(options).render().el);\n }, this);\n\n this.$el.append(templates);\n let value = this.getModelValue();\n\n if (value) {\n this.$(':radio[value=' + value + ']').prop('checked', true);\n }\n\n this.$('input').customInput();\n this.model.trigger('form:resize');\n\n if (this.getParam('inline') === true) {\n this.$('div.custom-radio').addClass('inline');\n }\n\n return this;\n },\n\n /**\n * @Override\n */\n readMode: function () {\n this.editMode();\n this.$(':radio').prop('disabled', true);\n return this;\n },\n\n /**\n * @Override\n */\n val: function () {\n return this.$(':radio:checked').val();\n },\n\n /**\n * @Override\n */\n focus: function () {\n return this.$('label:eq(0)').focus();\n }\n});\n\nexport { Radio as default };\n","import oktaUnderscore from '../../../util/underscore-wrapper.js';\nimport ButtonFactory from '../../../util/ButtonFactory.js';\nimport BaseView from '../../BaseView.js';\nimport BaseInput from '../BaseInput.js';\n\nfunction countInputs(inputs) {\n return oktaUnderscore.filter(inputs || [], function (input) {\n return !oktaUnderscore.contains(['label', 'button', 'select'], input.type);\n }).length;\n}\n\nconst InputGroupLabelInput = BaseInput.extend({\n tagName: 'span',\n initialize: function () {\n this.$el.text(this.getModelValue());\n },\n editMode: function () {\n this.toggle(true);\n },\n readMode: function () {\n this.toggle(false);\n },\n getModelValue: function () {\n return this.options.label;\n },\n toggle: function (isEditMode) {\n this.$el.toggleClass('o-form-label-inline', isEditMode);\n this.$el.toggleClass('o-form-control', !isEditMode);\n },\n focus: oktaUnderscore.noop\n});\n\nfunction createButtonInput(options) {\n return ButtonFactory.create(oktaUnderscore.defaults({\n getReadModeString: oktaUnderscore.constant(' '),\n focus: oktaUnderscore.noop\n }, oktaUnderscore.pick(options, 'click', 'title', 'href', 'icon')));\n}\n\nconst InputGroupInputGroupView = BaseView.extend({\n getParams: BaseInput.prototype.getParams,\n getParam: BaseInput.prototype.getParam,\n className: function () {\n let className; // Allows views to group multiple inputs under one label without any of the other\n // styling/rendering changes that come with using a group input\n\n if (this.getParam('noBaseClasses')) {\n return '';\n }\n\n if (this.getParam('display') === 'text') {\n className = 'o-form-input-group-subtle';\n } else {\n className = 'o-form-input-group';\n }\n\n if (countInputs(this.getParam('inputs')) > 1) {\n className += ' o-form-input-group-2';\n }\n\n return className;\n },\n initialize: function () {\n oktaUnderscore.each(this.getParam('inputs'), function (input) {\n switch (input.type) {\n case 'label':\n this.add(InputGroupLabelInput, {\n options: input\n });\n break;\n\n case 'button':\n this.add(createButtonInput(input));\n break;\n\n default:\n input = oktaUnderscore.defaults({\n model: this.model,\n params: oktaUnderscore.extend({\n autoWidth: true\n }, input.params || {})\n }, input);\n this.add(this.getParams().create(input));\n }\n }, this);\n },\n focus: function () {\n this.first().focus();\n }\n});\nvar InputGroup = BaseInput.extend({\n constructor: function (options) {\n this.inputGroupView = new InputGroupInputGroupView(options);\n BaseInput.apply(this, arguments);\n },\n editMode: function () {\n this.inputGroupView.remove();\n this.inputGroupView = new InputGroupInputGroupView(this.options);\n this.$el.html(this.inputGroupView.render().el);\n },\n readMode: function () {\n // Allows the user to use to the default \"read mode\" of the child inputs instead of\n // rendering a single read mode string for all the child inputs\n if (this.getParam('useChildInputsReadMode')) {\n this.editMode();\n } else {\n BaseInput.prototype.readMode.apply(this, arguments);\n }\n },\n toStringValue: function () {\n const strings = this.inputGroupView.map(function (input) {\n return input.getReadModeString();\n });\n return strings.length && oktaUnderscore.every(strings) ? strings.join(' ') : ' ';\n },\n focus: function () {\n this.inputGroupView.focus();\n }\n}, {\n // test hooks\n LabelInput: InputGroupLabelInput,\n InputGroupView: InputGroupInputGroupView\n});\n\nexport { InputGroup as default };\n","import oktaJQueryStatic from '../courage/util/jquery-wrapper.js';\n\n/*!\n * jQuery UI Scroll Parent @VERSION\n * http://jqueryui.com\n *\n * Copyright jQuery Foundation and other contributors\n * Released under the MIT license.\n * http://jquery.org/license\n *\n * Modifications Copyright 2021 Okta, Inc.\n */\n// This is required because SIW doesn't want to include jqueryui even though it's an external dependency of courage\n\noktaJQueryStatic.fn.scrollParent = function (includeHidden) {\n const position = this.css(\"position\"),\n excludeStaticParent = position === \"absolute\",\n overflowRegex = includeHidden ? /(auto|scroll|hidden)/ : /(auto|scroll)/,\n scrollParent = this.parents().filter(function () {\n const parent = oktaJQueryStatic(this);\n\n if (excludeStaticParent && parent.css(\"position\") === \"static\") {\n return false;\n }\n\n return overflowRegex.test(parent.css(\"overflow\") + parent.css(\"overflow-y\") + parent.css(\"overflow-x\"));\n }).eq(0);\n return position === \"fixed\" || !scrollParent.length ? oktaJQueryStatic(this[0].ownerDocument || document) : scrollParent;\n};\n","import BaseCollection from './courage/models/BaseCollection.js';\nexport { default as BaseModel } from './courage/models/BaseModel.js';\nimport BaseSchema from './courage/models/BaseSchema.js';\nexport { default as Model } from './courage/models/Model.js';\nimport SchemaProperty from './courage/models/SchemaProperty.js';\nimport BaseController from './courage/util/BaseController.js';\nimport BaseRouter from './courage/util/BaseRouter.js';\nimport ButtonFactory from './courage/util/ButtonFactory.js';\nimport Class from './courage/util/Class.js';\nimport Cookie from './courage/util/Cookie.js';\nimport Clipboard from './courage/util/Clipboard.js';\nimport Keys from './courage/util/Keys.js';\nimport Logger from './courage/util/Logger.js';\nimport StringUtil from './courage/util/StringUtil.js';\nimport Util from './courage/util/Util.js';\nexport { default as Handlebars } from '../lib/handlebars/dist/cjs/handlebars.runtime.js';\nimport './courage/util/handlebars/handle-url.js';\nimport './courage/util/handlebars/helper-i18n.js';\nexport { default as $ } from './courage/util/jquery-wrapper.js';\nexport { default as _ } from './courage/util/underscore-wrapper.js';\nexport { default as ListView } from './courage/views/Backbone.ListView.js';\nimport BaseView from './courage/views/BaseView.js';\nimport BaseDropDown from './courage/views/components/BaseDropDown.js';\nimport Notification from './courage/views/components/Notification.js';\nimport BaseForm from './courage/views/forms/BaseForm.js';\nimport Toolbar from './courage/views/forms/components/Toolbar.js';\nimport FormUtil from './courage/views/forms/helpers/FormUtil.js';\nimport InputRegistry from './courage/views/forms/helpers/InputRegistry.js';\nimport SchemaFormFactory from './courage/views/forms/helpers/SchemaFormFactory.js';\nimport BaseInput from './courage/views/forms/BaseInput.js';\nimport CheckBox from './courage/views/forms/inputs/CheckBox.js';\nimport PasswordBox from './courage/views/forms/inputs/PasswordBox.js';\nimport Radio from './courage/views/forms/inputs/Radio.js';\nimport Select from './courage/views/forms/inputs/Select.js';\nimport InputGroup from './courage/views/forms/inputs/InputGroup.js';\nimport TextBox from './courage/views/forms/inputs/TextBox.js';\nimport Callout from './courage/views/components/Callout.js';\nexport { default as Backbone } from './courage/vendor/lib/backbone.js';\nimport FrameworkView from './courage/framework/View.js';\nexport { default as FrameworkView } from './courage/framework/View.js';\nimport './util/scrollParent.js';\nexport { isModelPropertySchema } from './courage/framework/Model.js';\nimport './courage/util/SettingsModel.js';\n\nconst Controller = BaseController.extend({\n // The courage BaseController renders asynchronously in current versions of jQuery\n // https://github.com/okta/okta-ui/blob/master/packages/courage/src/util/BaseController.ts#L117-L119\n // https://api.jquery.com/jquery/#jQuery-callback\n // Override so that render is synchronous\n render: function (...args) {\n BaseView.prototype.render.apply(this, args);\n return this;\n }\n});\n\nSelect.prototype.remove = function () {\n // Patched to remove unneeded call to\n // this.$select.trigger('remove');\n // which causes error on IE11\n return BaseInput.prototype.remove.apply(this, arguments);\n}; // The string will be returned unchanged. All templates should be precompiled.\n\n\nFrameworkView.prototype.compileTemplate = function (str) {\n const compiledTmpl = function fakeTemplate() {\n return str;\n };\n\n compiledTmpl.source = ''; // to satisfy TS\n\n return compiledTmpl;\n}; // Override events to not support `Enter` submitting the form twice - OKTA-321999 and OKTA-317629\n\n\nconst events = {\n 'input input': 'update',\n 'change input': 'update',\n 'keydown input': 'update',\n 'keyup input': function (e) {\n if (Keys.isEsc(e)) {\n this.model.trigger('form:cancel');\n }\n }\n};\nconst TextBoxForSigninWidget = TextBox.extend({\n events: events\n});\nconst PasswordBoxForSigninWidget = PasswordBox.extend({\n events: events\n});\nconst Form = BaseForm.extend({\n scrollOnError: function () {\n // scrollOnError is true by default. Override to false if `scrollOnError` has been set to false in widget settings.\n const {\n settings: settings\n } = this.options;\n\n if (settings.get('features.scrollOnError') === false) {\n return false;\n }\n\n return true;\n }\n});\nconst loc = StringUtil.localize;\nconst createButton = ButtonFactory.create;\nconst createCallout = Callout.create;\nconst registerInput = InputRegistry.register;\nconst Collection = BaseCollection;\nconst View = BaseView;\nconst Router = BaseRouter;\nconst internal = {\n util: {\n Util: Util,\n Cookie: Cookie,\n Clipboard: Clipboard,\n Logger: Logger,\n Class: Class,\n Keys: Keys\n },\n views: {\n components: {\n BaseDropDown: BaseDropDown,\n Notification: Notification\n },\n forms: {\n helpers: {\n FormUtil: FormUtil,\n SchemaFormFactory: SchemaFormFactory\n },\n components: {\n Toolbar: Toolbar\n },\n inputs: {\n TextBox: TextBoxForSigninWidget,\n PasswordBox: PasswordBoxForSigninWidget,\n CheckBox: CheckBox,\n Radio: Radio,\n Select: Select,\n InputGroup: InputGroup\n }\n }\n },\n models: {\n BaseSchema: BaseSchema,\n SchemaProperty: SchemaProperty\n }\n};\nregisterInput('text', TextBoxForSigninWidget);\nregisterInput('password', PasswordBoxForSigninWidget);\nregisterInput('checkbox', CheckBox);\nregisterInput('radio', Radio);\nregisterInput('select', Select);\nregisterInput('group', InputGroup);\n\nexport { Collection, Controller, Form, Router, View, createButton, createCallout, internal, loc, registerInput };\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model } from '@okta/courage';\nimport Q from 'q';\nimport Enums from 'util/Enums';\nconst KNOWN_ERRORS = ['OAuthError', 'AuthSdkError', 'AuthPollStopError', 'AuthApiError'];\nexport default Model.extend({\n // May return either a \"standard\" promise or a Q promise\n doTransaction: function(fn, rethrow) {\n const self = this;\n\n return fn\n .call(this, this.appState.get('transaction'))\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n // Q may still consider AuthPollStopError to be unhandled\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n if (rethrow || _.indexOf(KNOWN_ERRORS, err.name) === -1) {\n throw err;\n }\n });\n },\n\n manageTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.appState.get('transaction'), _.bind(this.setTransaction, this));\n\n // If it's a promise, listen for failures\n if (Q.isPromiseAlike(res)) {\n return res.catch(function(err) {\n if (\n err.name === 'AuthPollStopError' ||\n err.name === Enums.AUTH_STOP_POLL_INITIATION_ERROR ||\n err.name === Enums.WEBAUTHN_ABORT_ERROR\n ) {\n return;\n }\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n });\n }\n\n return Q.resolve(res);\n },\n\n startTransaction: function(fn) {\n const self = this;\n const res = fn.call(this, this.settings.getAuthClient());\n\n // If it's a promise, then chain to it\n if (Q.isPromiseAlike(res)) {\n return res\n .then(function(trans) {\n self.trigger('setTransaction', trans);\n return trans;\n })\n .catch(function(err) {\n self.trigger('error', self, err.xhr);\n self.trigger('setTransactionError', err);\n throw err;\n });\n }\n\n return Q.resolve(res);\n },\n\n setTransaction: function(trans) {\n this.appState.set('transaction', trans);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Form, Controller } from '@okta/courage';\nimport Q from 'q';\n\nfunction getForm(controller) {\n return _.find(controller.getChildren(), function(item) {\n return item instanceof Form;\n });\n}\n\nexport default Controller.extend({\n // Ideally we should be attaching the listeners in the constructor, but because of the way\n // we construct the FormController (this.model is generated after the BaseLoginController's\n // constructor is called), this.model is undefined in when try to attach the events and\n // therefore we don't listen to events for such forms. And changing the order in which we call\n // the constructor doesn't help either (JS errors etc.). This at least guarantees that we\n // are listening to the model events.\n // Note - Figure out a way to call the constructor in the right order.\n addListeners: function() {\n // Events to enable/disable the primary button on the forms\n this.listenTo(this.model, 'save', function() {\n const form = getForm(this);\n //disable the submit button on forms while making the request\n //to prevent users from hitting rate limiting exceptions of\n //1 per second on the auth api\n\n const disableSubmitButton = form.disableSubmitButton;\n\n if (disableSubmitButton && !form.disableSubmitButton()) {\n return;\n }\n this.toggleButtonState(true);\n });\n\n this.listenTo(this.model, 'error', function() {\n this.toggleButtonState(false);\n });\n\n this.addModelListeners(this.model);\n },\n\n addModelListeners: function(model) {\n const setTransactionHandler = transaction => {\n this.options.appState.set('transaction', transaction);\n };\n\n const transactionErrorHandler = err => {\n this.options.appState.set('transactionError', err);\n };\n\n // Events to set the transaction attributes on the app state.\n this.listenTo(model, 'setTransaction', setTransactionHandler);\n this.listenTo(model, 'setTransactionError', transactionErrorHandler);\n\n // For TOTP factor model\n // TOTP model is special, its model will not be attached to a controller, but will\n // tag along with the push factor model. We need to listen to the transaction\n // changes on this as well (in case of the push+totp form).\n const totpModel = model.get('backupFactor');\n\n if (totpModel) {\n this.listenTo(totpModel, 'setTransaction', setTransactionHandler);\n this.listenTo(totpModel, 'setTransactionError', transactionErrorHandler);\n }\n },\n\n // Override this method to delay switching to this screen until return\n // promise is resolved. This is useful for cases like enrolling a security\n // question, which requires an additional request to fetch the question\n // list.\n fetchInitialData: function() {\n return Q();\n },\n\n // Override this method to prevent route navigation. This is useful for\n // intermediate status changes that do not trigger a full refresh of the\n // page, like MFA_ENROLL_ACTIVATE and MFA_CHALLENGE.\n trapAuthResponse: function() {\n return false;\n },\n\n toJSON: function() {\n const data = Controller.prototype.toJSON.apply(this, arguments);\n\n return _.extend(_.pick(this.options, 'appState'), data);\n },\n\n toggleButtonState: function(state) {\n const button = this.$el.find('.button');\n\n button.toggleClass('link-button-disabled', state).prop('disabled', state);\n },\n\n postRenderAnimation: function() {\n // Event triggered after a page is rendered along with the classname to identify the page\n // TODO: Deprecate this event in the next major version in favor of 'afterRender'\n this.trigger('pageRendered', { page: this.className });\n\n this.trigger('afterRender', { controller: this.className });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nconst INPUT = 'INPUT';\n\n// Syntactic sugar to provide some structure to SimpleForm inputs - Just\n// wraps options with { type: type, viewOptions: viewOptions, addOptions: addOptions }\n\nconst BUTTON = 'BUTTON';\nconst DIVIDER = 'DIVIDER';\nconst TOOLBAR = 'TOOLBAR';\nconst VIEW = 'VIEW';\n\nfunction wrap(type) {\n return function(viewOptions, addOptions) {\n return { type: type, viewOptions: viewOptions, addOptions: addOptions };\n };\n}\n\nexport default {\n Input: wrap(INPUT),\n Button: wrap(BUTTON),\n Divider: wrap(DIVIDER),\n Toolbar: wrap(TOOLBAR),\n View: wrap(VIEW),\n\n INPUT: INPUT,\n BUTTON: BUTTON,\n DIVIDER: DIVIDER,\n TOOLBAR: TOOLBAR,\n VIEW: VIEW,\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal, Form, createButton } from '@okta/courage';\nimport BaseLoginModel from 'v1/models/BaseLoginModel';\nimport BaseLoginController from './BaseLoginController';\nimport FormType from './FormType';\nlet { Toolbar } = internal.views.forms.components;\nlet { FormUtil } = internal.views.forms.helpers;\nconst FormControllerSimpleForm = Form.extend({\n layout: 'o-form-theme',\n noCancelButton: true,\n constructor: function(options) {\n Form.call(this, options);\n _.each(\n _.result(this, 'formChildren') || [],\n function(child) {\n switch (child.type) {\n case FormType.INPUT:\n this.addInput(\n _.extend(\n {\n label: false,\n 'label-top': true,\n },\n child.viewOptions\n )\n );\n break;\n case FormType.BUTTON:\n this.add(createButton(_.extend({ model: this.model }, child.viewOptions)), child.addOptions);\n FormUtil.applyShowWhen(this.last(), child.viewOptions && child.viewOptions.showWhen);\n break;\n case FormType.DIVIDER:\n this.addDivider(child.viewOptions);\n break;\n case FormType.TOOLBAR:\n this.add(Toolbar, { options: child.viewOptions });\n FormUtil.applyShowWhen(this.last(), child.viewOptions && child.viewOptions.showWhen);\n break;\n case FormType.VIEW:\n this.add(child.viewOptions.View, child.addOptions);\n FormUtil.applyShowWhen(this.last(), child.viewOptions.showWhen);\n break;\n default:\n throw new Error('Unrecognized child type: ' + child.type);\n }\n },\n this\n );\n },\n});\nexport default BaseLoginController.extend({\n constructor: function() {\n const initialize = this.initialize;\n\n this.initialize = function() {};\n\n BaseLoginController.apply(this, arguments);\n\n if (this.Model && this.Form) {\n const Model = BaseLoginModel.extend(\n _.extend(\n {\n parse: function(attributes) {\n this.settings = attributes.settings;\n this.appState = attributes.appState;\n return _.omit(attributes, ['settings', 'appState']);\n },\n },\n _.result(this, 'Model')\n )\n );\n\n this.model = new Model(\n {\n settings: this.settings,\n appState: this.options.appState,\n },\n { parse: true }\n );\n const Form = FormControllerSimpleForm.extend(_.result(this, 'Form', this));\n\n this.form = new Form(this.toJSON());\n this.add(this.form);\n }\n\n if (this.Footer) {\n this.addFooter(this.Footer);\n }\n\n this.addListeners();\n initialize.apply(this, arguments);\n },\n\n addFooter: function(Footer, args) {\n this.footer = new Footer(_.extend(this.toJSON(), args || {}));\n this.add(this.footer);\n },\n\n toJSON: function() {\n const data = BaseLoginController.prototype.toJSON.apply(this, arguments);\n\n return _.extend(_.pick(this.options, 'appState'), data);\n },\n\n back: function() {\n if (this.footer && this.footer.back) {\n this.footer.back();\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport Enums from 'util/Enums';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nexport default FormController.extend({\n className: 'account-unlocked',\n Model: function() {\n return {\n local: {\n userFullName: ['string', false, this.options.appState.get('userFullName')],\n },\n };\n },\n\n Form: {\n title: _.partial(loc, 'account.unlock.unlocked.title', 'login'),\n subtitle: _.partial(loc, 'account.unlock.unlocked.desc', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'account-unlocked' },\n formChildren: function() {\n return [\n FormType.Button({\n title: loc('goback', 'login'),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'back-button' },\n click: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n }),\n ];\n },\n },\n});\n","import toMilliseconds from '@sindresorhus/to-milliseconds';\nimport parseMs from 'parse-ms';\n\nconst MOMENT_UNIT = {\n MILLISECOND: 'milliseconds',\n SECOND: 'seconds',\n MINUTE: 'minutes',\n HOUR: 'hours',\n DAY: 'days',\n};\n\nconst MOMENT_UNIT_KEYS = Object.keys(MOMENT_UNIT);\n\n/**\n * @method convertMomentUnits\n * Conversion between moment's units and our units internally\n *\n * @param {String} momentUnit The units that val is in\n * @return {String} The key in the MOMENT_UNIT hash\n */\nconst convertMomentUnits = function(momentUnit) {\n const entry = MOMENT_UNIT_KEYS.filter(k => MOMENT_UNIT[k] === momentUnit);\n\n return entry.length === 1 ? entry[0] : momentUnit;\n};\n\nexport default {\n /**\n * @method getTimeInHighestRelevantUnit\n * Will return a number in the units of the highest relevant time unit.\n * Only checks milliseconds, seconds, minutes, hours, and days.\n * E.g.\n * 15 MINUTE -> 15 MINUTE\n * 15 minutes -> 15 MINUTE\n * 60 minutes -> 1 HOUR\n * 90 minutes -> 90 MINUTE\n * 24 HOUR -> 1 DAY\n * 24 hours -> 1 DAY\n * 30 DAY -> 30 DAY\n *\n * @typedef { \"MILLISECOND\" | \"SECOND\" | \"MINUTE\" | \"HOUR\" | \"DAY\" } TimeUnit\n *\n * @typedef { \"MILLISECOND\" | \"SECOND\" | \"MINUTE\" | \"HOUR\" | \"DAY\" |\n * \"milliseconds\" | \"seconds\" | \"minutes\" | \"hours\" | \"days\"\n * } FlexibleTimeUnit\n *\n * @typedef TimeAndUnit\n * @property {number} time the consolidated time\n * @property {TimeUnit} unit the unit of the time\n *\n * @param {FlexibleTimeUnit} unit The time unit\n * @return {TimeAndUnit} An object containing the amount of time and the unit\n */\n getTimeInHighestRelevantUnit: function(val, unit) {\n const defaultTimeObj = {\n days: 0,\n hours: 0,\n minutes: 0,\n seconds: 0,\n milliseconds: 0,\n };\n const normalizedUnit = MOMENT_UNIT[unit] || unit;\n let timeObj;\n\n try {\n const ms = toMilliseconds(Object.assign(defaultTimeObj, { [normalizedUnit]: val }));\n timeObj = parseMs(ms);\n } catch (error) {\n timeObj = {};\n }\n\n const duration = Object.keys(timeObj).reduce((init, k) => {\n if (timeObj[k] !== 0) {\n init[k] = timeObj[k];\n }\n return init;\n }, {});\n\n let highestUnit;\n let time;\n if (Object.keys(duration).length === 1) {\n Object.keys(duration).forEach(k => {\n time = duration[k];\n highestUnit = k;\n });\n } else {\n time = val;\n highestUnit = normalizedUnit;\n }\n\n return {\n time: time,\n unit: convertMomentUnits(highestUnit),\n };\n },\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 38], max-statements: [2, 38] */\nimport _ from 'underscore';\nimport { loc } from './loc';\nimport TimeUtil from 'util/TimeUtil';\nconst fn = {};\nconst factorData = {\n OKTA_VERIFY: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.totpSoft.oktaVerify',\n description: 'factor.totpSoft.description',\n iconClassName: 'mfa-okta-verify',\n sortOrder: 1,\n },\n OKTA_VERIFY_PUSH: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.oktaVerifyPush',\n description: 'factor.push.description',\n iconClassName: 'mfa-okta-verify',\n sortOrder: 1,\n },\n U2F: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.u2f',\n description: brandName => {\n return brandName ? 'factor.u2f.description.specific' : 'factor.u2f.description.generic';\n },\n iconClassName: 'mfa-u2f',\n sortOrder: 2,\n },\n WEBAUTHN: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.webauthn.biometric',\n description: 'factor.webauthn.biometric.description',\n iconClassName: 'mfa-webauthn',\n sortOrder: 2,\n },\n WINDOWS_HELLO: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.windowsHello',\n description: brandName => {\n return brandName\n ? 'factor.windowsHello.signin.description.specific'\n : 'factor.windowsHello.signin.description.generic';\n },\n iconClassName: 'mfa-windows-hello',\n sortOrder: 3,\n },\n YUBIKEY: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.totpHard.yubikey',\n description: 'factor.totpHard.yubikey.description',\n iconClassName: 'mfa-yubikey',\n sortOrder: 4,\n },\n GOOGLE_AUTH: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.totpSoft.googleAuthenticator',\n description: 'factor.totpSoft.description',\n iconClassName: 'mfa-google-auth',\n sortOrder: 5,\n },\n CUSTOM_HOTP: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: '',\n description: 'factor.hotp.description',\n iconClassName: 'mfa-hotp',\n sortOrder: 6,\n },\n SMS: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.sms',\n description: 'factor.sms.description',\n iconClassName: 'mfa-okta-sms',\n sortOrder: 7,\n },\n CALL: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.call',\n description: 'factor.call.description',\n iconClassName: 'mfa-okta-call',\n sortOrder: 8,\n },\n EMAIL: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.email',\n description: 'factor.email.description',\n iconClassName: 'mfa-okta-email',\n sortOrder: 9,\n },\n QUESTION: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.securityQuestion',\n description: 'factor.securityQuestion.description',\n iconClassName: 'mfa-okta-security-question',\n sortOrder: 10,\n },\n DUO: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.duo',\n description: 'factor.duo.description',\n iconClassName: 'mfa-duo',\n sortOrder: 11,\n },\n SYMANTEC_VIP: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.totpHard.symantecVip',\n description: 'factor.totpHard.description',\n iconClassName: 'mfa-symantec',\n sortOrder: 12,\n },\n RSA_SECURID: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.totpHard.rsaSecurId',\n description: 'factor.totpHard.description',\n iconClassName: 'mfa-rsa',\n sortOrder: 13,\n },\n ON_PREM: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: '',\n description: 'factor.totpHard.description',\n iconClassName: 'mfa-onprem',\n sortOrder: 14,\n },\n PASSWORD: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: 'factor.password',\n description: '',\n iconClassName: 'mfa-okta-password',\n sortOrder: 15,\n },\n CUSTOM_CLAIMS: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: '',\n description: 'factor.customFactor.description',\n iconClassName: 'mfa-custom-factor',\n sortOrder: 16,\n },\n GENERIC_SAML: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: '',\n description: brandName => {\n return brandName ? 'factor.customFactor.description.specific' : 'factor.customFactor.description.generic';\n },\n iconClassName: 'mfa-custom-factor',\n sortOrder: 17,\n },\n GENERIC_OIDC: {\n /* eslint-disable-next-line @okta/okta/no-unlocalized-text */\n label: '',\n description: brandName => {\n return brandName ? 'factor.customFactor.description.specific' : 'factor.customFactor.description.generic';\n },\n iconClassName: 'mfa-custom-factor',\n sortOrder: 18,\n },\n};\n\nconst getPasswordComplexityRequirementsAsArray = function(policy, i18nKeys) {\n const setExcludeAttributes = function(policyComplexity) {\n const excludeAttributes = policyComplexity.excludeAttributes;\n\n policyComplexity.excludeFirstName = _.contains(excludeAttributes, 'firstName');\n policyComplexity.excludeLastName = _.contains(excludeAttributes, 'lastName');\n return _.omit(policyComplexity, 'excludeAttributes');\n };\n\n if (policy.complexity) {\n const complexityFields = i18nKeys.complexity;\n\n const policyComplexity = setExcludeAttributes(policy.complexity);\n let filteredPolicyComplexity = policyComplexity;\n\n // If useADComplexityRequirements is true, ignore casing, number, and symbol rules since\n // AD validator handles those requirements\n if (policyComplexity.useADComplexityRequirements) {\n const allowed = ['minLength', 'useADComplexityRequirements', 'excludeUsername', 'excludeFirstName',\n 'excludeLastName', 'excludeAttributes'];\n filteredPolicyComplexity = _.pick(policyComplexity, allowed);\n }\n\n const requirements = _.map(filteredPolicyComplexity, function(complexityValue, complexityType) {\n if (complexityValue <= 0) {\n // to skip 0 and -1\n return;\n }\n\n const params = complexityFields[complexityType];\n\n return params.args ? loc(params.i18n, 'login', [complexityValue]) : loc(params.i18n, 'login');\n });\n\n return _.compact(requirements);\n }\n return [];\n};\n\nconst getPasswordHistoryRequirementDescription = function(policy, i18nKeys, isUpdatedPasswordRequirementsText) {\n if (policy.age && policy.age.historyCount > 0) {\n if (isUpdatedPasswordRequirementsText) {\n return policy.age.historyCount === 1 ?\n loc(i18nKeys.history.one.i18n, 'login')\n : loc(i18nKeys.history.many.i18n, 'login', [policy.age.historyCount]);\n } else {\n return loc(i18nKeys.history.i18n, 'login', [policy.age.historyCount]);\n }\n }\n return null;\n};\n\nconst getPasswordAgeRequirementDescription = function(policy, i18nKeys) {\n const getPasswordAgeRequirement = function(displayableTime) {\n let propertiesString;\n\n switch (displayableTime.unit) {\n case 'DAY':\n propertiesString = i18nKeys.age.days.i18n;\n break;\n case 'HOUR':\n propertiesString = i18nKeys.age.hours.i18n;\n break;\n case 'MINUTE':\n propertiesString = i18nKeys.age.minutes.i18n;\n }\n return loc(propertiesString, 'login', [displayableTime.time]);\n };\n\n if (policy.age && policy.age.minAgeMinutes > 0) {\n const displayableTime = TimeUtil.getTimeInHighestRelevantUnit(policy.age.minAgeMinutes, 'MINUTE');\n\n return getPasswordAgeRequirement(displayableTime);\n }\n return null;\n};\n\nconst getPasswordRequirements = function(policy, i18nKeys, isUpdatedPasswordRequirementsText) {\n const passwordRequirements = {\n complexity: [],\n history: [],\n age: [],\n };\n\n passwordRequirements.complexity = getPasswordComplexityRequirementsAsArray(policy, i18nKeys);\n\n const historyRequirement =\n getPasswordHistoryRequirementDescription(policy, i18nKeys, isUpdatedPasswordRequirementsText);\n\n if (historyRequirement) {\n passwordRequirements.history.push(historyRequirement);\n }\n\n const ageRequirement = getPasswordAgeRequirementDescription(policy, i18nKeys);\n\n if (ageRequirement) {\n passwordRequirements.age.push(ageRequirement);\n }\n\n return passwordRequirements;\n};\n\nfn.getFactorName = function(provider, factorType) {\n if (provider === 'OKTA' && factorType === 'token:software:totp') {\n return 'OKTA_VERIFY';\n }\n if (provider === 'OKTA' && factorType === 'push') {\n return 'OKTA_VERIFY_PUSH';\n }\n if (provider === 'GOOGLE') {\n return 'GOOGLE_AUTH';\n }\n if (provider === 'SYMANTEC' && factorType === 'token') {\n return 'SYMANTEC_VIP';\n }\n if (provider === 'RSA' && factorType === 'token') {\n return 'RSA_SECURID';\n }\n if (provider === 'DEL_OATH' && factorType === 'token') {\n return 'ON_PREM';\n }\n if (provider === 'DUO' && factorType === 'web') {\n return 'DUO';\n }\n if (provider === 'YUBICO' && factorType === 'token:hardware') {\n return 'YUBIKEY';\n }\n if (provider === 'OKTA' && factorType === 'sms') {\n return 'SMS';\n }\n if (provider === 'OKTA' && factorType === 'call') {\n return 'CALL';\n }\n if (provider === 'OKTA' && factorType === 'question') {\n return 'QUESTION';\n }\n if (provider === 'OKTA' && factorType === 'email') {\n return 'EMAIL';\n }\n if (provider === 'OKTA' && factorType === 'password') {\n return 'PASSWORD';\n }\n if (provider === 'GENERIC_SAML' && factorType === 'assertion:saml2') {\n return 'GENERIC_SAML';\n }\n if (provider === 'GENERIC_OIDC' && factorType === 'assertion:oidc') {\n return 'GENERIC_OIDC';\n }\n return fn.getFactorNameForFactorType.call(this, factorType);\n};\n\nfn.getFactorNameForFactorType = function(factorType) {\n if (factorType === 'u2f') {\n return 'U2F';\n }\n if (factorType === 'token:software:totp') {\n return 'OKTA_VERIFY';\n }\n if (factorType === 'webauthn') {\n if (this.settings.get('features.webauthn')) {\n return 'WEBAUTHN';\n } else {\n return 'WINDOWS_HELLO';\n }\n }\n if (factorType === 'token:hotp') {\n return 'CUSTOM_HOTP';\n }\n if (factorType === 'claims_provider') {\n return 'CUSTOM_CLAIMS';\n }\n};\n\nfn.isOktaVerify = function(provider, factorType) {\n return provider === 'OKTA' && (factorType === 'token:software:totp' || factorType === 'push');\n};\n\nfn.getFactorLabel = function(provider, factorType) {\n const key = factorData[fn.getFactorName.apply(this, [provider, factorType])].label;\n\n return loc(key, 'login');\n};\n\nfn.getFactorDescription = function(provider, factorType) {\n const descriptionKey = factorData[fn.getFactorName.apply(this, [provider, factorType])].description;\n\n if (_.isFunction(descriptionKey)) {\n const brandName = this.settings.get('brandName');\n const key = descriptionKey(brandName);\n\n return brandName ? loc(key, 'login', [brandName]) : loc(key, 'login');\n } else {\n return descriptionKey ? loc(descriptionKey, 'login') : '';\n }\n};\n\nfn.getFactorIconClassName = function(provider, factorType) {\n return factorData[fn.getFactorName.apply(this, [provider, factorType])].iconClassName;\n};\n\nfn.getFactorSortOrder = function(provider, factorType) {\n return factorData[fn.getFactorName.apply(this, [provider, factorType])].sortOrder;\n};\n\nfn.getRememberDeviceValue = function(appState) {\n return appState && appState.get('rememberDeviceByDefault');\n};\n\nfn.getSecurityQuestionLabel = function(questionObj) {\n const localizedQuestion = loc('security.' + questionObj.question);\n\n return localizedQuestion.indexOf('L10N_ERROR') < 0 ? localizedQuestion : questionObj.questionText;\n};\n\nfn.removeRequirementsFromError = function(responseJSON, policy) {\n const passwordRequirementsAsString = this.getPasswordComplexityDescription(policy);\n\n if (\n responseJSON.errorCauses &&\n responseJSON.errorCauses.length > 0 &&\n _.isString(responseJSON.errorCauses[0].errorSummary)\n ) {\n responseJSON.errorCauses[0].errorSummary = responseJSON.errorCauses[0].errorSummary\n .replace(passwordRequirementsAsString, '')\n .trim();\n }\n return responseJSON;\n};\n\nfn.getPasswordComplexityDescriptionForHtmlList = function(policy) {\n const passwordRequirementHtmlI18nKeys = {\n complexity: {\n minLength: { i18n: 'password.complexity.length.description', args: true },\n minLowerCase: { i18n: 'password.complexity.lowercase.description' },\n minUpperCase: { i18n: 'password.complexity.uppercase.description' },\n minNumber: { i18n: 'password.complexity.number.description' },\n minSymbol: { i18n: 'password.complexity.symbol.description' },\n excludeUsername: { i18n: 'password.complexity.no_username.description' },\n excludeFirstName: { i18n: 'password.complexity.no_first_name.description' },\n excludeLastName: { i18n: 'password.complexity.no_last_name.description' },\n useADComplexityRequirements: { i18n: 'password.complexity.adRequirements.description' },\n },\n history: {\n one: { i18n: 'password.complexity.history.one.description' },\n many: { i18n: 'password.complexity.history.description' }\n },\n age: {\n minutes: { i18n: 'password.complexity.minAgeMinutes.description' },\n hours: { i18n: 'password.complexity.minAgeHours.description' },\n days: { i18n: 'password.complexity.minAgeDays.description' },\n },\n };\n const passwordRequirements = getPasswordRequirements(policy, passwordRequirementHtmlI18nKeys, true);\n\n return _.union(passwordRequirements.complexity, passwordRequirements.history, passwordRequirements.age);\n};\n\nfn.getPasswordComplexityDescription = function(policy) {\n const passwordRequirementI18nKeys = {\n complexity: {\n minLength: { i18n: 'password.complexity.length', args: true },\n minLowerCase: { i18n: 'password.complexity.lowercase' },\n minUpperCase: { i18n: 'password.complexity.uppercase' },\n minNumber: { i18n: 'password.complexity.number' },\n minSymbol: { i18n: 'password.complexity.symbol' },\n excludeUsername: { i18n: 'password.complexity.no_username' },\n excludeFirstName: { i18n: 'password.complexity.no_first_name' },\n excludeLastName: { i18n: 'password.complexity.no_last_name' },\n useADComplexityRequirements: { i18n: 'password.complexity.adRequirements' },\n },\n history: { i18n: 'password.complexity.history' },\n age: {\n minutes: { i18n: 'password.complexity.minAgeMinutes' },\n hours: { i18n: 'password.complexity.minAgeHours' },\n days: { i18n: 'password.complexity.minAgeDays' },\n },\n };\n const result = [];\n const passwordRequirements = getPasswordRequirements(policy, passwordRequirementI18nKeys, false);\n let requirements = passwordRequirements.complexity;\n\n // Generate and add complexity string to result\n if (requirements.length > 0) {\n requirements = _.reduce(requirements, function(result, requirement) {\n return result ? result + loc('password.complexity.list.element', 'login', [requirement]) : requirement;\n });\n\n result.push(loc('password.complexity.requirements', 'login', [requirements]));\n }\n\n // Only 1 value expected in history and age for now\n result.push(passwordRequirements.history[0]);\n result.push(passwordRequirements.age[0]);\n\n return _.compact(result).join(' ');\n};\n\nfn.getCardinalityText = function(enrolled, required, cardinality) {\n if (cardinality) {\n if (enrolled) {\n return cardinality.enrolled === 1 ? '' : loc('enroll.choices.cardinality.setup', 'login', [cardinality.enrolled]);\n } else if (required && cardinality.maximum > 1) {\n return loc('enroll.choices.cardinality.setup.remaining', 'login', [cardinality.enrolled, cardinality.minimum]);\n }\n }\n return '';\n};\n\nfn.findFactorInFactorsArray = function(factors, provider, factorType) {\n let factor = factors.findWhere({ provider: provider, factorType: factorType });\n\n if (factor === undefined) {\n //for factors that support cardinality and only have factorType\n factor = factors.findWhere({ factorType: factorType });\n }\n return factor;\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n//note: not including Okta here and explicitly including jquery and Handlebars\n//because we want to be explicit about which TextBox we are extending here\n//and want to avoid the cirucular dependency that occurs if we\n//include Okta\nimport { internal } from '@okta/courage';\nimport '@okta/qtip';\nimport BrowserFeatures from 'util/BrowserFeatures';\nconst { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n postRender: function() {\n if (this.options.type === 'number') {\n const input = this.$('input');\n\n input.attr({\n pattern: '[0-9]*',\n inputmode: 'numeric',\n });\n }\n TextBox.prototype.postRender.apply(this, arguments);\n },\n // Override the focus() to ignore focus in IE. IE (8-11) has a known bug where\n // the placeholder text disappears when the input field is focused.\n focus: function() {\n if (BrowserFeatures.isIE()) {\n return;\n }\n return TextBox.prototype.focus.apply(this, arguments);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport FactorUtil from 'util/FactorUtil';\nimport FormType from 'v1/util/FormType';\nimport Util from 'util/Util';\nimport TextBox from 'v1/views/shared/TextBox';\nconst form = {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n subtitle: _.partial(loc, 'enroll.totp.enterCode', 'login'),\n autoSave: true,\n noButtonBar: true,\n attributes: { 'data-se': 'step-sendcode' },\n\n formChildren: function() {\n return [\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n }),\n ];\n },\n};\nexport default form;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"mfa.backToFactors\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.options.appState.trigger('backToFactors');\n this.back();\n },\n },\n\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n if (this.options.appState.get('prevLink')) {\n // Once we are in the MFA_ENROLL_ACTIVATE, we need to reset to the\n // correct state. Fortunately, this means that the router will\n // handle navigation once the request is finished.\n this.model.doTransaction(function(transaction) {\n return transaction.prev();\n });\n } else {\n this.options.appState.trigger('navigate', 'signin/enroll');\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'v1/util/FormController';\nimport EnterPasscodeForm from 'v1/views/enroll-factors/EnterPasscodeForm';\nimport Footer from 'v1/views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'activate-totp',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport '@okta/qtip';\n\nexport default View.extend({\n className: 'scope-item',\n template: hbs`\n{{name}}
\n {{#if description}}\n \n {{/if}}`,\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description)\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom left',\n target: 'mouse'\n }\n });\n }\n});\n\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint max-len: [2, 131] */\nimport hbs from '@okta/handlebars-inline-precompile';\nimport { _, View, loc } from '@okta/courage';\nimport ScopeItem from './ScopeItem';\n\nconst SCOPE_N_GROUP_CONFIG = {\n groups: 'user',\n myAccount: 'user',\n users: 'user',\n apps: 'resource',\n authenticators: 'resource',\n authorizationServers: 'resource',\n clients: 'resource',\n domains: 'resource',\n factors: 'resource',\n idps: 'resource',\n linkedObjects: 'resource',\n policies: 'resource',\n templates: 'resource',\n eventHooks: 'hook',\n inlineHooks: 'hook',\n events: 'system',\n logs: 'system',\n orgs: 'system',\n roles: 'system',\n schemas: 'system',\n sessions: 'system',\n trustedOrigins: 'system',\n};\n\nconst DEFAULT_GROUP = 'system';\n\nconst findScopeGroupKey = ({ name = '' }) => {\n const xs = name.split('.');\n const groupType = xs[1];\n\n return SCOPE_N_GROUP_CONFIG[groupType] || DEFAULT_GROUP;\n};\n\nconst ScopeGroupHeaderView = View.extend({\n className: 'scope-group',\n\n events: {\n 'click': 'expandScopes',\n },\n\n template: hbs`\n\n
`,\n\n expandScopes() {\n this.$el.toggleClass('scope-group--is-expanded');\n this.$('.caret').toggleClass('caret--is-rotated');\n },\n\n preRender() {\n _.chain(this.options.scopes)\n .sortBy(({ name }) => name)\n .each(({ name, displayName, description }) => {\n this.add(ScopeItem, {\n options: {\n name: displayName || name,\n description,\n },\n });\n });\n }\n});\n\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n const allScopes = this.model.get('scopes');\n const scopesWithGroup = _.groupBy(allScopes, findScopeGroupKey);\n\n const SCOPE_GROUP_NAMES_CONFIG = {\n 'user': loc('admin.consent.group.user.group', 'login'),\n 'resource': loc('admin.consent.group.resource.policy', 'login'),\n 'hook': loc('admin.consent.group.hook', 'login'),\n 'system': loc('admin.consent.group.system', 'login'),\n };\n\n // loop through SCOPE_GROUP_NAMES_CONFIG to keep group order consistent in UI.\n _.each(SCOPE_GROUP_NAMES_CONFIG, (groupName, groupKey) => {\n const scopes = scopesWithGroup[groupKey];\n if (!Array.isArray(scopes)) {\n return;\n }\n // add scope group header and scopes\n this.add(ScopeGroupHeaderView, {\n options: {\n groupName,\n scopes,\n }\n });\n });\n },\n});\n","import hbs from '@okta/handlebars-inline-precompile';\n\nconst consentLogoHeaderTemplate = hbs`{{#if clientURI}}\n \n{{/if}}\n{{#if customLogo}}\n {{groupName}}
\n \n \n \n\n {{{i18n code=\"consent.required.text\" bundle=\"login\" arguments=\"appName\"}}}\n {{#if issuer}}\n {{issuer}}\n {{/if}}\n
`;\n\nexport default consentLogoHeaderTemplate;\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport ScopeList from 'v1/views/admin-consent/ScopeList';\nimport consentLogoHeaderTemplate from 'v1/views/shared/templates/consentLogoHeaderTemplate';\n\nconst ConsentModel = {\n props: {\n scopes: ['array', true]\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.consent({\n consent: {\n scopes: _.pluck(this.get('scopes'), 'name')\n }\n });\n });\n },\n cancel: function() {\n var self = this;\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n var consentCancelFn = self.settings.get('consent.cancel');\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n }\n};\n\nconst ConsentHeader = View.extend({\n className: 'consent-title detail-row',\n template: consentLogoHeaderTemplate,\n getTemplateData: function() {\n var appState = this.options.appState;\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n issuer: appState.get('issuer'),\n };\n }\n});\n\nconst ConsentForm = {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: [\n FormType.View({\n View: ConsentHeader\n }),\n FormType.View({\n View: ScopeList,\n }),\n ],\n};\n\nconst AdminConsentRequiredController = FormController.extend({\n Model: ConsentModel,\n\n Form: ConsentForm,\n\n className: 'admin-consent-required',\n\n initialize: function() {\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', () => {\n this.model.cancel();\n });\n },\n});\n\nexport default AdminConsentRequiredController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport default {\n INVALID_TOKEN_EXCEPTION: 'E0000011',\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from './loc';\nimport Enums from './Enums';\nimport { ErrorXHR, ErrorContextData } from '../types/errors';\nimport { FlowIdentifier } from '@okta/okta-auth-js';\n\nabstract class CustomError extends Error {\n constructor(message?: string) {\n super(message);\n\n // 'Error' breaks prototype chain. Need to restore it for ES5.\n // https://github.com/microsoft/TypeScript/wiki/FAQ#why-doesnt-extending-built-ins-like-error-array-and-map-work\n // Note: no need to adjust prototype in subclasses of 'CustomError'.\n Object.setPrototypeOf(this, new.target.prototype);\n }\n}\n\nexport class ConfigError extends CustomError {\n name = Enums.CONFIG_ERROR;\n constructor(message?: string) {\n super(message || loc('error.config'));\n }\n}\n\nexport class UnsupportedBrowserError extends CustomError {\n name = Enums.UNSUPPORTED_BROWSER_ERROR;\n constructor(message?: string) {\n super(message || loc('error.unsupported.browser'));\n }\n}\n\nexport class OAuthError extends CustomError {\n name = Enums.OAUTH_ERROR;\n}\n\nexport class RegistrationError extends CustomError {\n name = Enums.REGISTRATION_FAILED;\n}\n\n// Thrown when initiation of poll was cancelled.\nexport class AuthStopPollInitiationError extends CustomError {\n name = Enums.AUTH_STOP_POLL_INITIATION_ERROR;\n}\n\nexport class U2FError extends CustomError {\n xhr: ErrorXHR;\n name = Enums.U2F_ERROR;\n constructor(err: ErrorContextData) {\n super(err.xhr?.responseJSON?.errorSummary);\n this.xhr = err.xhr;\n }\n}\n\nexport class WebAuthnError extends CustomError {\n xhr: ErrorXHR;\n name = Enums.WEB_AUTHN_ERROR;\n constructor(err: ErrorContextData) {\n super(err.xhr?.responseJSON?.errorSummary);\n this.xhr = err.xhr;\n }\n}\n\n// This is triggered only when code aborts webauthn browser prompt.\nexport class WebauthnAbortError extends CustomError {\n name = Enums.WEBAUTHN_ABORT_ERROR;\n}\n\nexport class ConfiguredFlowError extends CustomError {\n flowSetting: FlowIdentifier;\n name = Enums.CONFIGURED_FLOW_ERROR;\n constructor(message: string, flowSetting: FlowIdentifier) {\n super(message);\n this.flowSetting = flowSetting;\n }\n}\n","import { loc } from './loc';\n\nimport { AuthSdkError, OAuthError as SdkOAuthError} from '@okta/okta-auth-js';\nimport { OAuthError } from './Errors';\nimport { ErrorDetails } from '../types/errors';\n\ntype ErrorTraits = 'inline' | 'terminal';\n\ntype ErrorType = {\n [key in ErrorTraits]?: boolean;\n};\n\nclass InlineErrorType implements ErrorType {\n inline = true;\n}\n\nclass TerminalErrorType implements ErrorType {\n terminal = true;\n}\n\nclass TypedOAuthError\n
\n \n
\n {{instructions}}
\n\n
\n `,\n\n events: {\n 'click [data-type=\"manual-setup\"]': function(e) {\n e.preventDefault();\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'manual'\n );\n if (this.model.get('__factorType__') === 'push') {\n // cancel the poll and navigate to manual setup.\n this.model\n .doTransaction(function(transaction) {\n return transaction.prev().then(function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: 'push',\n provider: 'OKTA',\n });\n\n return factor.enroll();\n });\n })\n .then(() => {\n this.options.appState.trigger('navigate', url);\n });\n } else {\n this.options.appState.trigger('navigate', url);\n }\n },\n 'click [data-type=\"refresh-qrcode\"]': function(e) {\n e.preventDefault();\n this.model.trigger('errors:clear');\n\n const self = this;\n\n this.model\n .doTransaction(function(transaction) {\n if (this.appState.get('isWaitingForActivation')) {\n return transaction.poll();\n } else {\n return transaction.activate();\n }\n })\n .then(function(trans) {\n const res = trans.data;\n\n if (\n (res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE') &&\n res.factorResult === 'WAITING'\n ) {\n // defer the render here to have a lastResponse set in AppState\n // so that we get new QRcode rendered\n _.defer(_.bind(self.render, self));\n }\n });\n },\n },\n\n initialize: function() {\n this.listenTo(this.options.appState, 'change:lastAuthResponse', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', !this.options.appState.get('isWaitingForActivation'));\n } else if (this.options.appState.get('isSuccessResponse')) {\n this.$el.addClass('qrcode-success');\n }\n });\n this.listenTo(this.model, 'error', function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.$el.toggleClass('qrcode-expired', true);\n }\n });\n },\n\n getTemplateData: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n let instructions;\n\n if (this.model.get('__provider__') === 'GOOGLE') {\n instructions = loc('enroll.totp.setupGoogleAuthApp', 'login', [factorName]);\n } else {\n instructions = loc('enroll.totp.setupApp', 'login', [factorName]);\n }\n return {\n instructions: instructions,\n qrcode: this.options.appState.get('qrcode'),\n altQRCode: loc('mfa.altQrCode', 'login')\n };\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc } from '@okta/courage';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport BarcodeView from 'v1/views/enroll-factors/BarcodeView';\nimport Footer from 'v1/views/enroll-factors/Footer';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nexport default FormController.extend({\n className: 'barcode-push',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n initialize: function() {\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearErrors();\n });\n },\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.pollForEnrollment().catch(()=>{\n // Ignoring the errors for now. \n // clean up will be done based on OKTA-324849\n });\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport RouterUtil from 'v1/util/RouterUtil';\nimport BarcodeView from 'v1/views/enroll-factors/BarcodeView';\nimport Footer from 'v1/views/enroll-factors/Footer';\nexport default FormController.extend({\n className: 'barcode-totp',\n Model: function() {\n return {\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n save: _.partial(loc, 'oform.next', 'login'),\n noCancelButton: true,\n attributes: { 'data-se': 'step-scan' },\n className: 'barcode-scan',\n\n formChildren: [FormType.View({ View: BarcodeView })],\n },\n\n Footer: Footer,\n\n initialize: function() {\n this.listenTo(this.form, 'save', function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.model.get('__provider__'),\n this.model.get('__factorType__'),\n 'activate'\n );\n\n this.options.appState.trigger('navigate', url);\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, _ } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport '@okta/qtip';\nexport default View.extend({\n className: 'scope-item',\n template: hbs(\n '\\\n \n ![\"{{altQRCode}}\"](\"{{qrcode}}\")
\n \n \n
\n \n {{i18n code=\"enroll.totp.cannotScan\" bundle=\"login\"}}\n \n \n {{i18n code=\"enroll.totp.refreshBarcode\" bundle=\"login\"}}\n \n \\\n
\\\n {{#if description}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData() {\n const { name, description, isCustomized } = this.options;\n const baseClass = 'scope-item-text';\n const classNames = (name === 'openid' || isCustomized)\n ? `${baseClass} no-translate`: baseClass;\n return { classNames, name, description };\n },\n\n postRender: function() {\n this.$('.scope-item-tooltip').qtip({\n content: {\n text: _.escape(this.options.description),\n },\n style: { classes: 'okta-tooltip qtip-custom qtip-shadow' },\n position: {\n my: 'bottom right',\n target: 'mouse',\n },\n });\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport ScopeItem from './ScopeItem';\nexport default View.extend({\n className: 'scope-list detail-row',\n\n postRender: function() {\n this.model.get('scopes').forEach(scope => {\n this.add(ScopeItem, {\n options: {\n name: scope.displayName || scope.name,\n description: scope.description,\n isCustomized: scope.isCustomized,\n },\n });\n });\n },\n});\n","import { _, internal } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\n\nconst CheckBox = internal.views.forms.inputs.CheckBox;\n\nexport default CheckBox.extend({\n template: hbs`\n \n \n `,\n\n /**\n * @Override\n */\n enable: function() {\n if (this.options.options.optional) {\n this.$(':input').prop('disabled', false);\n }\n },\n\n /**\n * @Override\n */\n editMode: function() {\n\n this.$el.html(this.template(_.extend(_.omit(this.options, 'placeholder'), {\n placeholder: this.options.placeholder || this.options.name,\n desc: this.options.options.description\n })));\n\n this.$(':checkbox').prop('checked', this.getModelValue() || false);\n\n this.$('input').customInput();\n this.model.trigger('form:resize');\n\n if (!this.options.options.optional) {\n const input = this.$('input').get(0);\n this.$(input.parentElement).addClass('o-form-read-mode');\n this.$(':checkbox').prop('disabled', true);\n }\n\n if (this.options.name === 'openid' || this.options.options.isCustomized) {\n this.$('label > b').addClass('no-translate');\n if (this.options.options.isCustomized) {\n this.$('label > p').addClass('no-translate');\n }\n }\n\n return this;\n },\n\n});","import { loc, View } from '@okta/courage';\nimport Enums from 'util/Enums';\n\nexport default View.extend({\n tagName: 'a',\n className: 'skip-to-content-link',\n attributes: { href: `#${Enums.WIDGET_CONTAINER_ID}` },\n initialize: function initialize() {\n this.$el.append(loc('skip.to.main.content', 'login'));\n }\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport { _, $, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport ScopeList from 'v1/views/consent/ScopeList';\nimport ScopeCheckBox from 'v1/views/consent/ScopeCheckBox';\nimport SkipLink from 'v1/views/shared/SkipLink';\nimport consentLogoHeaderTemplate from 'v1/views/shared/templates/consentLogoHeaderTemplate';\n\nconst granularConsentHeaderTemplate = hbs`\n {{#if clientURI}}\n \n {{/if}}\n {{#if customLogo}}\n {{name}}
\\\n\n \n {{i18n \n code=\"granular.consent.scopes.title\" bundle=\"login\" \n arguments=\"appName\"\n $1=\"$1\"\n $2=\"$2
\"\n }}\n \n {{#if issuer}}\n {{issuer}}\n {{/if}}\n
`;\n\nconst getConsentHeader = (template) => FormType.View({\n View: View.extend({\n className: 'consent-title detail-row',\n template,\n getTemplateData: function() {\n const appState = this.options.appState;\n return {\n appName: appState.escape('targetLabel'),\n customLogo: appState.get('targetLogo') && appState.get('targetLogo').href,\n defaultLogo: appState.get('defaultAppLogo'),\n clientURI: appState.get('targetClientURI') && appState.get('targetClientURI').href,\n };\n },\n }),\n});\n\nconst consentRequiredDescription = FormType.View({\n View: View.extend({\n className: 'consent-description detail-row',\n template: hbs`{{i18n code=\"consent.required.description\" bundle=\"login\"}}
`,\n }),\n});\n\nconst granularConsentDescription = FormType.View({\n View: View.extend({\n className: 'consent-description',\n template: hbs`{{i18n code=\"granular.consent.scopes.description\" bundle=\"login\"}}
`,\n }),\n});\n\nconst getScopeCheckBoxes = (scopes) => {\n const sortedScopes = scopes.slice().sort((scope1, scope2) => scope2.optional - scope1.optional);\n return _.map(sortedScopes, ({name, displayName, description, optional, isCustomized}) => FormType.Input({\n name: name,\n input: ScopeCheckBox,\n placeholder: displayName,\n label: false,\n modelType: 'boolean',\n required: true,\n options:\n {\n description,\n optional,\n isCustomized\n }\n }));\n};\n\nconst isGranularConsent = (appState) => {\n return 'optional' in appState.get('scopes')[0];\n};\n\nexport default FormController.extend({\n className: 'consent-required',\n initialize: function() {\n this.model.set('expiresAt', this.options.appState.get('expiresAt'));\n this.model.set('scopes', this.options.appState.get('scopes'));\n this.listenTo(this.form, 'cancel', _.bind(this.model.cancel, this.model));\n\n // add Skip to main content link\n const skipLink = new SkipLink();\n $(`#${Enums.WIDGET_LOGIN_CONTAINER_ID}`).prepend(skipLink.render().$el);\n\n if (isGranularConsent(this.options.appState)) {\n this.$el.addClass('granular-consent').removeClass('consent-required');\n this.form.cancel = _.partial(loc, 'oform.cancel', 'login');\n _.forEach(this.options.appState.get('scopes'), scope => {\n this.model.set(scope.name, true);\n });\n }\n },\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // Update the \"don't allow\" and \"allow access\" buttons to be neutral by changing \"allow button\" to be gray.\n this.$('.o-form-button-bar .button-primary').removeClass('button-primary');\n },\n Model: {\n props: {\n expiresAt: ['string', true],\n scopes: ['array', true],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n let scopeNames = _.pluck(this.get('scopes'), 'name');\n let consent = { expiresAt: this.get('expiresAt') };\n if (isGranularConsent(this)) {\n consent['optedScopes'] = _.reduce(scopeNames, (optedScopes, scope) => { optedScopes[scope] = this.get(scope); return optedScopes; }, {});\n } else {\n consent['scopes'] = scopeNames;\n }\n return transaction.consent({ consent });\n });\n },\n cancel: function() {\n const self = this;\n\n return this.doTransaction(function(transaction) {\n return transaction.cancel();\n }).then(function() {\n const consentCancelFn = self.settings.get('consent.cancel');\n\n if (_.isFunction(consentCancelFn)) {\n consentCancelFn();\n }\n });\n },\n },\n Form: {\n noCancelButton: false,\n buttonOrder: ['cancel', 'save'],\n autoSave: true,\n save: _.partial(loc, 'consent.required.consentButton', 'login'),\n cancel: _.partial(loc, 'consent.required.cancelButton', 'login'),\n formChildren: function() {\n if (isGranularConsent(this.options.appState)) {\n return [\n getConsentHeader(granularConsentHeaderTemplate),\n granularConsentDescription,\n ].concat(getScopeCheckBoxes(this.options.appState.get('scopes')));\n } else {\n return [\n getConsentHeader(consentLogoHeaderTemplate),\n FormType.View({\n View: new ScopeList({ model: this.model }),\n }),\n consentRequiredDescription\n ];\n }\n },\n },\n Footer: View.extend({\n className: 'consent-footer',\n template: hbs(\n '\\\n {{#if termsOfService}}\\\n {{i18n code=\"consent.required.termsOfService\" bundle=\"login\"}}\\\n {{#if privacyPolicy}}\\\n •\\\n {{/if}}\\\n {{/if}}\\\n {{#if privacyPolicy}}\\\n {{i18n code=\"consent.required.privacyPolicy\" bundle=\"login\"}}\\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n const appState = this.options.appState;\n\n return {\n termsOfService: appState.get('targetTermsOfService') && appState.get('targetTermsOfService').href,\n privacyPolicy: appState.get('targetPrivacyPolicy') && appState.get('targetPrivacyPolicy').href,\n };\n },\n }),\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View, internal } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nconst { Util } = internal.util;\nexport default View.extend({\n template: hbs(\n '\\\n {{#if passwordWarn}}\\\n \\\n {{i18n code=\"password.expiring.later\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n \\\n {{i18n code=\"signout\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer clearfix',\n events: {\n 'click .js-signout': function(e) {\n e.preventDefault();\n const self = this;\n const authClient = self.settings.getAuthClient();\n\n this.model\n .doTransaction(function(transaction) {\n return transaction.cancel();\n })\n .then(function() {\n return authClient.session.exists();\n })\n .then(function(sessionExists) {\n if (sessionExists) {\n return authClient.closeSession().catch(() => {});\n }\n })\n .then(function() {\n if (self.settings.get('backToSignInUri')) {\n Util.redirect(self.settings.get('backToSignInUri'));\n } else {\n self.state.set('navigateDir', Enums.DIRECTION_BACK);\n self.options.appState.trigger('navigate', '');\n }\n });\n },\n 'click .js-skip': function(e) {\n e.preventDefault();\n this.model.doTransaction(function(transaction) {\n return transaction.skip();\n });\n },\n },\n getTemplateData: function() {\n return { passwordWarn: this.options.appState.get('isPwdExpiringSoon') };\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport Footer from 'v1/views/expired-password/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'custom-password-expired',\n Model: {},\n Form: {\n noButtonBar: true,\n title: function() {\n const expiringSoon = this.options.appState.get('isPwdExpiringSoon');\n const numDays = this.options.appState.get('passwordExpireDays');\n\n if (expiringSoon && numDays > 0) {\n return loc('password.expiring.title', 'login', [numDays]);\n } else if (expiringSoon && numDays === 0) {\n return loc('password.expiring.today', 'login');\n } else if (expiringSoon) {\n return loc('password.expiring.soon', 'login');\n } else {\n return this.settings.get('brandName')\n ? loc('password.expired.title.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expired.title.generic', 'login');\n }\n },\n subtitle: function() {\n if (this.options.appState.get('isPwdExpiringSoon')) {\n return this.settings.get('brandName')\n ? loc('password.expiring.soon.subtitle.specific', 'login', [this.settings.get('brandName')])\n : loc('password.expiring.soon.subtitle.generic', 'login');\n }\n\n return loc('password.expired.custom.subtitle', 'login');\n },\n formChildren: function() {\n return [\n FormType.Button({\n title: _.partial(loc, 'password.expired.custom.submit', 'login', [\n this.options.appState.get('passwordExpiredWebsiteName'),\n ]),\n className: 'button button-primary button-wide',\n attributes: { 'data-se': 'custom-button' },\n click: function() {\n Util.redirect(this.options.appState.get('passwordExpiredLinkUrl'));\n },\n }),\n ];\n },\n },\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport hbs from '@okta/handlebars-inline-precompile';\nimport {loc, View} from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport TextBox from 'v1/views/shared/TextBox';\n\nconst InvalidUserCodeErrorView = View.extend({\n template: hbs`\n\n \n
\n `\n});\n\nexport default FormController.extend({\n className: 'device-code-activate',\n Model: function() {\n return {\n props: {\n userCode: ['string', true, this.options?.appState?.get('userCode')],\n stateToken: 'string',\n },\n save: function() {\n const self = this;\n return this.doTransaction(function(transaction) {\n return transaction.deviceActivate({\n userCode: self.get('userCode')\n });\n });\n }\n };\n },\n Form: {\n noCancelButton: true,\n autoSave: true,\n save: function() {\n return loc('oform.next', 'login');\n },\n title: function() {\n return loc('device.code.activate.title', 'login');\n },\n subtitle() {\n return loc('device.code.activate.subtitle', 'login');\n },\n formChildren: function() {\n if (this.options.appState.get('deviceActivationStatus') === 'INVALID_USER_CODE') {\n this.add(InvalidUserCodeErrorView, '.o-form-error-container');\n }\n\n return [\n FormType.Input({\n label: loc('device.code.activate.label', 'login'),\n 'label-top': true,\n name: 'userCode',\n input: TextBox,\n inputId: 'user-code',\n type: 'text',\n inlineValidation: false,\n })\n ];\n },\n events: {\n 'keyup input[name=\"userCode\"]': function(e) {\n e.preventDefault();\n this.addHyphen(e);\n }\n },\n addHyphen(evt) {\n const currentVal = evt.target.value;\n // add hyphen after 4th character\n if (currentVal && currentVal.length === 4 && !['Backspace', 'Delete', '-'].includes(evt.key)) {\n evt.target.value = currentVal.concat('-');\n }\n }\n },\n});\n","/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 160] */\nimport {_, loc, View} from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\n\nconst DEVICE_ACTIVATED = 'DEVICE_ACTIVATED';\nconst DEVICE_NOT_ACTIVATED_CONSENT_DENIED = 'DEVICE_NOT_ACTIVATED_CONSENT_DENIED';\nconst DEVICE_NOT_ACTIVATED = 'DEVICE_NOT_ACTIVATED';\nconst DEVICE_CODE_ERROR_KEYS = [\n DEVICE_NOT_ACTIVATED_CONSENT_DENIED,\n DEVICE_NOT_ACTIVATED\n];\n\nexport default FormController.extend({\n className: 'device-code-terminal',\n postRender: function() {\n FormController.prototype.postRender.apply(this, arguments);\n\n // show device code terminal icons\n const iconClass = this.options.appState.get('deviceActivationStatus') === DEVICE_ACTIVATED\n ? 'success-24-green' : 'error-24-red';\n this.$('.o-form-head').before('');\n },\n Model: {},\n Form: {\n noCancelButton: true,\n noButtonBar: true,\n title: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('device.code.activated.success.title', 'login');\n }\n if (_.contains(DEVICE_CODE_ERROR_KEYS, deviceActivationStatus)) {\n return loc('device.code.activated.error.title', 'login');\n }\n },\n subtitle: function() {\n const deviceActivationStatus = this.options.appState.get('deviceActivationStatus');\n if (deviceActivationStatus === DEVICE_ACTIVATED) {\n return loc('idx.device.activated', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED_CONSENT_DENIED) {\n return loc('idx.device.not.activated.consent.denied', 'login');\n }\n if (deviceActivationStatus === DEVICE_NOT_ACTIVATED) {\n return loc('idx.device.not.activated.internal.error', 'login');\n }\n },\n formChildren: function() {\n return [\n FormType.View({\n View: View.extend({\n template: hbs(\n '{{#if isDeviceCodeError}}\\\n \\\n {{i18n code=\"oie.try.again\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n getTemplateData: function() {\n return {\n isDeviceCodeError: _.contains(DEVICE_CODE_ERROR_KEYS, this.options.appState.get('deviceActivationStatus'))\n };\n },\n }),\n }),\n ];\n }\n }\n});\n","/*!\n * Copyright (c) 2018-2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, internal } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport Footer from 'v1/views/enroll-factors/Footer';\nconst { Util } = internal.util;\nexport default FormController.extend({\n className: 'enroll-custom-factor',\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction((transaction, setTransaction) => {\n const factor = _.findWhere(transaction.factors, {\n provider: this.get('provider'),\n factorType: this.get('factorType'),\n });\n\n return factor\n .enroll()\n .then(trans => {\n setTransaction(trans);\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n })\n .catch(function(err) {\n throw err;\n });\n });\n },\n },\n\n Form: function() {\n const factors = this.options.appState.get('factors');\n const factor = factors.findWhere({\n provider: this.options.provider,\n factorType: this.options.factorType,\n });\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n };\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n return true;\n }\n },\n\n initialize: function() {\n this.model.set('provider', this.options.provider);\n this.model.set('factorType', this.options.factorType);\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint complexity: [2, 13] */\nimport { _, loc, Collection } from '@okta/courage';\nimport Q from 'q';\nimport { AuthStopPollInitiationError } from 'util/Errors';\nimport factorUtil from 'util/FactorUtil';\nimport Util from 'util/Util';\nimport BaseLoginModel from './BaseLoginModel';\nconst PUSH_INTERVAL = 4000;\n\n// Avoid setting interval to same value as keep-alive time (5 seconds) because it\n// caused an occasional issue with network connection lost errors in Safari and IE\n\nconst FactorFactor = BaseLoginModel.extend({\n extraProperties: true,\n flat: false,\n\n props: {\n id: 'string',\n factorType: {\n type: 'string',\n values: [\n 'sms',\n 'call',\n 'email',\n 'token',\n 'token:software:totp',\n 'token:hotp',\n 'token:hardware',\n 'question',\n 'push',\n 'u2f',\n 'password',\n 'assertion:saml2',\n 'assertion:oidc',\n 'claims_provider',\n 'webauthn',\n ],\n },\n provider: {\n type: 'string',\n values: [\n 'OKTA',\n 'RSA',\n 'DEL_OATH',\n 'SYMANTEC',\n 'GOOGLE',\n 'YUBICO',\n 'FIDO',\n 'CUSTOM',\n 'GENERIC_SAML',\n 'GENERIC_OIDC',\n ],\n },\n enrollment: {\n type: 'string',\n values: ['OPTIONAL', 'REQUIRED'],\n },\n status: {\n type: 'string',\n values: ['NOT_SETUP', 'ACTIVE'],\n },\n profile: ['object'],\n vendorName: 'string',\n policy: ['object'],\n profiles: ['object'],\n },\n\n local: {\n answer: 'string',\n password: 'string',\n backupFactor: 'object',\n showAnswer: 'boolean',\n rememberDevice: 'boolean',\n autoPush: ['boolean', true, false],\n },\n\n derived: {\n isOktaFactor: {\n deps: ['provider'],\n fn: function(provider) {\n return provider === 'OKTA';\n },\n },\n factorName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorName,\n },\n factorLabel: {\n deps: ['provider', 'factorType', 'vendorName'],\n fn: function(provider, factorType, vendorName) {\n if (_.contains(['DEL_OATH', 'GENERIC_SAML', 'GENERIC_OIDC', 'CUSTOM'], provider)) {\n return vendorName;\n }\n return factorUtil.getFactorLabel.apply(this, [provider, factorType]);\n },\n },\n factorDescription: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorDescription,\n },\n sortOrder: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorSortOrder,\n },\n iconClassName: {\n deps: ['provider', 'factorType'],\n fn: factorUtil.getFactorIconClassName,\n },\n securityQuestion: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'question') {\n return null;\n }\n return profile && factorUtil.getSecurityQuestionLabel(profile);\n },\n },\n phoneNumber: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (_.contains(['sms', 'call'], factorType)) {\n return profile && profile.phoneNumber;\n }\n return null;\n },\n },\n email: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType === 'email') {\n return profile && profile.email;\n }\n return null;\n },\n },\n deviceName: {\n deps: ['profile', 'factorType'],\n fn: function(profile, factorType) {\n if (factorType !== 'push') {\n return null;\n }\n return profile && profile.name;\n },\n },\n enrolled: {\n deps: ['status'],\n fn: function(status) {\n return status === 'ACTIVE';\n },\n },\n cardinality: {\n deps: ['policy', 'profiles'],\n fn: function(policy, profiles) {\n if (profiles && profiles.length > 0) {\n const profile = profiles[0];\n //assume for now we only get one profile (multiple profiles are not supported yet)\n\n const enrolled = profile._embedded.enrolledFactors.length;\n\n const adoption = _.findWhere(profile._embedded.features, { type: 'adoption' });\n\n if (adoption && adoption.cardinality) {\n return {\n enrolled: enrolled,\n minimum: adoption.cardinality.min,\n maximum: adoption.cardinality.max,\n };\n }\n return false;\n } else if (policy && policy.enrollment) {\n return policy.enrollment;\n } else {\n return false;\n }\n },\n },\n additionalEnrollment: {\n deps: ['cardinality'],\n fn: function(cardinality) {\n if (cardinality) {\n return cardinality.enrolled !== 0 && cardinality.enrolled < cardinality.maximum;\n } else {\n return false;\n }\n },\n },\n required: {\n deps: ['enrollment'],\n fn: function(enrollment) {\n return enrollment === 'REQUIRED';\n },\n },\n canUseResend: {\n deps: ['provider', 'factorType'],\n fn: function(provider, factorType) {\n // Only push, sms and call have resend links.\n return provider === 'OKTA' && _.contains(['push', 'sms', 'call', 'email'], factorType);\n },\n },\n isAnswerRequired: {\n deps: ['factorType'],\n fn: function(factorType) {\n return _.contains(['sms', 'call', 'email', 'token', 'token:software:totp', 'question'], factorType);\n },\n },\n isFactorTypeVerification: {\n deps: ['provider', 'id'],\n fn: function(provider, id) {\n return provider === undefined && id === undefined;\n },\n },\n },\n\n parse: function(attributes) {\n this.settings = attributes.settings;\n this.appState = attributes.appState;\n // set the initial value for remember device.\n attributes.rememberDevice = factorUtil.getRememberDeviceValue(this.appState);\n\n // Add vendorname for custom totp enroll\n this.setCustomHotpVendorName(attributes);\n return _.omit(attributes, ['settings', 'appState']);\n },\n\n validate: function() {\n if (this.get('isAnswerRequired') && !this.get('answer')) {\n return { answer: loc('model.validation.field.blank') };\n } else if (this.get('factorType') === 'password' && !this.get('password')) {\n return { password: loc('error.password.required') };\n }\n },\n needsPasscode: function() {\n // we don't need passcode for email with magic link flow\n return !(this.options.appState.get('isIdxStateToken') && this.get('factorType') === 'email');\n },\n resend: function() {\n this.trigger('form:clear-errors');\n return this.manageTransaction(function(transaction) {\n const firstLink = transaction.data._links.resend[0];\n\n return transaction.resend(firstLink.name);\n });\n },\n\n save: function() {\n const rememberDevice = !!this.get('rememberDevice');\n const self = this;\n // Set/Remove the remember device cookie based on the remember device input.\n\n return this.manageTransaction(function(transaction, setTransaction) {\n const data = {\n rememberDevice: rememberDevice,\n };\n\n if (this.get('factorType') === 'question') {\n data.answer = this.get('answer');\n } else if (this.get('factorType') === 'password') {\n data.password = this.get('password');\n } else if (this.needsPasscode()) {\n data.passCode = this.get('answer');\n }\n\n if (this.pushFactorHasAutoPush()) {\n data.autoPush = this.get('autoPush');\n }\n\n let promise;\n\n // MFA_REQUIRED, FACTOR_REQUIRED or UNAUTHENTICATED with factors (passwordlessAuth)\n if (\n transaction.status === 'MFA_REQUIRED' ||\n transaction.status === 'FACTOR_REQUIRED' ||\n this.appState.get('promptForFactorInUnauthenticated')\n ) {\n const factor = this._findFactor(transaction);\n\n promise = factor.verify(data);\n } else if (this.get('canUseResend') && !this.get('answer') && transaction.resend) {\n // MFA_CHALLENGE/ FACTOR_CHALLENGE\n const firstLink = transaction.data._links.resend[0];\n\n promise = transaction.resend(firstLink.name);\n } else {\n promise = transaction.verify(data);\n }\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the factor form\n this.trigger('save');\n\n return promise.then(function(trans) {\n const options = {\n delay: PUSH_INTERVAL,\n transactionCallBack: transaction => {\n self.options.appState.set('lastAuthResponse', transaction);\n },\n };\n\n setTransaction(trans);\n // In Okta verify case we initiate poll.\n if ((trans.status === 'MFA_CHALLENGE' && trans.poll) || (trans.status === 'FACTOR_CHALLENGE' && trans.poll)) {\n const deferred = Q.defer();\n const initiatePollTimout = Util.callAfterTimeout(deferred.resolve, PUSH_INTERVAL);\n self.listenToOnce(self.options.appState, 'factorSwitched', () => {\n clearTimeout(initiatePollTimout);\n deferred.reject(new AuthStopPollInitiationError());\n });\n return deferred.promise.then(function() {\n // Stop listening if factor was not switched before poll.\n self.stopListening(self.options.appState, 'factorSwitched');\n if (self.pushFactorHasAutoPush()) {\n options.autoPush = function() {\n return self.get('autoPush');\n };\n options.rememberDevice = function() {\n return self.get('rememberDevice');\n };\n }\n return trans.poll(options).then(function(trans) {\n self.options.appState.set('lastAuthResponse', trans.data);\n setTransaction(trans);\n });\n });\n }\n });\n });\n },\n\n _findFactor: function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: this.get('factorType'),\n });\n }\n if (!factor) {\n factor = _.findWhere(transaction.factors, {\n id: this.get('id'),\n });\n }\n return factor;\n },\n\n pushFactorHasAutoPush: function() {\n return this.settings.get('features.autoPush') && this.get('factorType') === 'push';\n },\n\n setCustomHotpVendorName: function(attributes) {\n // If factor is token:hotp and not enrolled, we assume the first profile is the default.\n // If factor is enrolled, we only support one profile to be enrolled, so find that one\n // and display as enrolled profile. We do this by populating profile name in vendorName.\n if (attributes.factorType === 'token:hotp' && attributes.profiles) {\n if (attributes.status === 'NOT_SETUP') {\n attributes.vendorName = attributes.profiles[0].name;\n } else if (attributes.status === 'ACTIVE') {\n const enrolledProfiles = attributes.profiles.filter(profile => {\n return profile._embedded.enrolledFactors.length > 0;\n });\n attributes.vendorName = enrolledProfiles[0].name;\n }\n }\n return attributes;\n },\n});\nconst FactorFactors = Collection.extend({\n model: FactorFactor,\n comparator: 'sortOrder',\n\n // One override necessary here - When Okta Verify OTP and Push are in the list,\n // they are presented in the view as one factor - in the beacon menu,\n // there's only one option (Okta Verify), and we show a form with Push\n // with an inline totp option. What we need to do is to add totp\n // as a \"backupFactor\" for push\n parse: function(factors) {\n // Keep a track of the last used factor, since\n // we need it to determine the default factor.\n this.lastUsedFactor = factors[0];\n\n const oktaPushFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'push' });\n\n let totpFactor;\n\n if (_.where(factors, { factorType: 'push' }).length > 1) {\n totpFactor = _.findWhere(factors, { factorType: 'token:software:totp' });\n } else {\n totpFactor = _.findWhere(factors, { provider: 'OKTA', factorType: 'token:software:totp' });\n }\n if (!oktaPushFactor || !totpFactor) {\n return factors;\n }\n\n const isTotpFirst = totpFactor === factors[0];\n\n const parsedFactors = _.reduce(\n factors,\n function(memo, factor) {\n const isOkta = factor.provider === 'OKTA';\n const isOktaTotp = isOkta && factor.factorType === 'token:software:totp';\n const isOktaPush = isOkta && factor.factorType === 'push';\n const notEnrolled = factor.status !== 'ACTIVE';\n const hideOktaTotp = isOktaTotp && (notEnrolled || oktaPushFactor.status === 'ACTIVE');\n const hideOktaPush = isOktaPush && notEnrolled && totpFactor.status === 'ACTIVE';\n\n if (hideOktaTotp || hideOktaPush) {\n return memo;\n }\n\n if (isOktaPush) {\n factor.backupFactor = new FactorFactor(totpFactor, { parse: true });\n }\n memo.push(factor);\n return memo;\n },\n []\n );\n\n // Use push factor instead of TOTP, if TOTP is first in the list\n // (since it is stored as backupFactor for push).\n if (isTotpFirst) {\n this.lastUsedFactor = oktaPushFactor;\n }\n\n return parsedFactors;\n },\n\n // Will need to update this to use HAL link to get last used factor:\n // https://oktainc.atlassian.net/browse/OKTA-58380\n // However, current code returns last used factor as first factor in list.\n // Also, will need to add priority - i.e. if they do not have a last used\n // factor, should try Okta Verify, then Okta SMS, etc.\n getDefaultFactor: function() {\n const factor = _.pick(this.lastUsedFactor, 'factorType', 'provider');\n\n return this.findWhere(factor);\n },\n\n getFirstUnenrolledRequiredFactor: function() {\n return this.findWhere({ required: true, enrolled: false });\n },\n\n _getFactorsOfType: function(factorType) {\n return this.where({ factorType: factorType });\n },\n\n getFactorIndex: function(factorType, factorId) {\n return this._getFactorsOfType(factorType).findIndex(function(factor) {\n return factor.get('id') === factorId;\n });\n },\n\n hasMultipleFactorsOfSameType: function(factorType) {\n return this._getFactorsOfType(factorType).length > 1;\n },\n\n getFactorByTypeAndIndex: function(factorType, factorIndex) {\n return this._getFactorsOfType(factorType)[factorIndex];\n },\n});\nexport default {\n Model: FactorFactor,\n Collection: FactorFactors,\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nconst template = hbs('\\\n \\\n {{i18n code=\"api.authn.error.PASSCODE_INVALID\" bundle=\"login\"}}
\n{{{message}}}
\\\n ');\n\n// Have to be unescaped for the html in enroll.windowsHello.error.notConfiguredHtml\n\nexport default View.extend({\n template: template,\n className: 'okta-infobox-error infobox infobox-error infobox-md margin-btm-25',\n attributes: {\n 'data-se': 'o-form-error-html',\n },\n\n message: '',\n\n initialize: function(options) {\n if (options && options.message) {\n this.message = options.message;\n }\n },\n\n getTemplateData: function() {\n return {\n message: this.message,\n };\n },\n});\n","/*!\n * Copyright (c) 2019-2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { loc, internal } from '@okta/courage';\nimport EnrollCustomFactorController from './EnrollCustomFactorController';\nimport Factor from 'v1/models/Factor';\nimport FormType from 'v1/util/FormType';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nconst { Util } = internal.util;\nexport default EnrollCustomFactorController.extend({\n Model: {\n local: {\n provider: 'string',\n factorType: 'string',\n },\n save: function() {\n return this.manageTransaction(() => {\n const url = this.appState.get('enrollCustomFactorRedirectUrl');\n\n if (url !== null) {\n Util.redirect(url);\n }\n });\n },\n },\n\n Form: function() {\n const factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n const vendorName = factor.get('vendorName');\n const subtitle = loc('enroll.customFactor.subtitle', 'login', [vendorName]);\n const saveText = loc('enroll.customFactor.save', 'login');\n\n return {\n autoSave: true,\n title: vendorName,\n subtitle: subtitle,\n save: saveText,\n formChildren: function() {\n const result = [];\n\n if (this.options.appState.get('isFactorResultFailed')) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: this.options.appState.get('factorResultErrorMessage') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n return result;\n },\n };\n },\n});\n","/*!\n * Copyright (c) 2020-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n className: 'hide resend-email-infobox',\n template: hbs`\n\n \n
\n `,\n\n events: {\n 'click .resend-email-btn': 'resendEmail',\n },\n\n postRender: function() {\n this.showResendCallout();\n },\n\n showResendCallout: function() {\n _.delay(() => {\n this.$el.removeClass('hide');\n }, Enums.API_RATE_LIMIT);\n },\n\n hideResendCallout: function() {\n this.$el.addClass('hide');\n },\n\n resendEmail: function(e) {\n e.preventDefault();\n this.hideResendCallout();\n this.model.resend().finally(this.showResendCallout.bind(this));\n },\n});\n","/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport ResendEmailView from 'v1/views/ResendEmailView';\nimport Footer from 'v1/views/enroll-factors/Footer';\n\nconst Model = {\n props: {\n passCode: 'string',\n },\n\n resend: function() {\n this.trigger('form:clear-errors');\n return this.doTransaction(function(transaction) {\n // authn support multiple `resend` hence has to specify name.\n return transaction.resend('email');\n });\n },\n\n save: function() {\n this.trigger('save');\n const formData = this.toJSON();\n return this.doTransaction(function(transaction) {\n return transaction.activate(formData);\n });\n },\n};\n\nconst Form = function() {\n return {\n title: _.partial(loc, 'email.enroll.title', 'login'),\n noButtonBar: false,\n autoSave: true,\n save: _.partial(loc, 'oform.verify', 'login'), // TODO: deprecated by mfa.challenge.verify\n formChildren: [\n // message\n FormType.View({\n View: View.extend({\n className: 'enroll-activate-email-content',\n attributes: {\n 'data-se': 'enroll-activate-email-content',\n },\n\n // Why use `{{{` for the description?\n // - factorEmail is actually an HTML fragment which\n // is created via another handlebar template and used for bold the email address.\n template: hbs('{{{i18n code=\"email.mfa.email.sent.description\" bundle=\"login\" arguments=\"factorEmail\"}}}'),\n\n getTemplateData: function() {\n const factor = this.options.appState.get('factor');\n const factorEmailVal = factor && factor.profile ? factor.profile.email : '';\n const factorEmail = hbs('{{email}}')({ email: factorEmailVal });\n return {\n factorEmail,\n };\n },\n }),\n }),\n // send again callout message and link button\n FormType.View({\n View: ResendEmailView,\n }),\n // passcode input\n FormType.Input({\n label: loc('email.code.label', 'login'),\n 'label-top': true,\n name: 'passCode',\n type: 'text',\n wide: true,\n }),\n ],\n };\n};\n\nexport default FormController.extend({\n className: 'enroll-activate-email',\n\n Model: Model,\n\n Form: Form,\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n/* eslint max-len:0 */\n\nexport default {\n US: '1',\n AG: '1',\n AI: '1',\n AS: '1',\n BB: '1',\n BM: '1',\n BS: '1',\n CA: '1',\n DM: '1',\n DO: '1',\n GD: '1',\n GU: '1',\n JM: '1',\n KN: '1',\n KY: '1',\n LC: '1',\n MP: '1',\n MS: '1',\n PR: '1',\n SX: '1',\n TC: '1',\n TT: '1',\n VC: '1',\n VG: '1',\n VI: '1',\n RU: '7',\n KZ: '7',\n EG: '20',\n ZA: '27',\n GR: '30',\n NL: '31',\n BE: '32',\n FR: '33',\n ES: '34',\n HU: '36',\n IT: '39',\n VA: '39',\n RO: '40',\n CH: '41',\n AT: '43',\n GB: '44',\n GG: '44',\n IM: '44',\n JE: '44',\n DK: '45',\n SE: '46',\n NO: '47',\n SJ: '47',\n PL: '48',\n DE: '49',\n PE: '51',\n MX: '52',\n CU: '53',\n AR: '54',\n BR: '55',\n CL: '56',\n CO: '57',\n VE: '58',\n MY: '60',\n AU: '61',\n CC: '61',\n CX: '61',\n ID: '62',\n PH: '63',\n NZ: '64',\n SG: '65',\n TH: '66',\n JP: '81',\n KR: '82',\n VN: '84',\n CN: '86',\n TR: '90',\n IN: '91',\n PK: '92',\n AF: '93',\n LK: '94',\n MM: '95',\n IR: '98',\n SS: '211',\n MA: '212',\n EH: '212',\n DZ: '213',\n TN: '216',\n LY: '218',\n GM: '220',\n SN: '221',\n MR: '222',\n ML: '223',\n GN: '224',\n CI: '225',\n BF: '226',\n NE: '227',\n TG: '228',\n BJ: '229',\n MU: '230',\n LR: '231',\n SL: '232',\n GH: '233',\n NG: '234',\n TD: '235',\n CF: '236',\n CM: '237',\n CV: '238',\n ST: '239',\n GQ: '240',\n GA: '241',\n CG: '242',\n CD: '243',\n AO: '244',\n GW: '245',\n IO: '246',\n AC: '247',\n SC: '248',\n SD: '249',\n RW: '250',\n ET: '251',\n SO: '252',\n DJ: '253',\n KE: '254',\n TZ: '255',\n UG: '256',\n BI: '257',\n MZ: '258',\n ZM: '260',\n MG: '261',\n RE: '262',\n YT: '262',\n ZW: '263',\n NA: '264',\n MW: '265',\n LS: '266',\n BW: '267',\n SZ: '268',\n KM: '269',\n SH: '290',\n TA: '290',\n ER: '291',\n AW: '297',\n FO: '298',\n GL: '299',\n GI: '350',\n PT: '351',\n LU: '352',\n IE: '353',\n IS: '354',\n AL: '355',\n MT: '356',\n CY: '357',\n FI: '358',\n AX: '358',\n BG: '359',\n LT: '370',\n LV: '371',\n EE: '372',\n MD: '373',\n AM: '374',\n BY: '375',\n AD: '376',\n MC: '377',\n SM: '378',\n UA: '380',\n RS: '381',\n ME: '382',\n XK: '383',\n HR: '385',\n SI: '386',\n BA: '387',\n MK: '389',\n CZ: '420',\n SK: '421',\n LI: '423',\n FK: '500',\n BZ: '501',\n GT: '502',\n SV: '503',\n HN: '504',\n NI: '505',\n CR: '506',\n PA: '507',\n PM: '508',\n HT: '509',\n GP: '590',\n BL: '590',\n MF: '590',\n BO: '591',\n GY: '592',\n EC: '593',\n GF: '594',\n PY: '595',\n MQ: '596',\n SR: '597',\n UY: '598',\n CW: '599',\n BQ: '599',\n TL: '670',\n NF: '672',\n BN: '673',\n NR: '674',\n PG: '675',\n TO: '676',\n SB: '677',\n VU: '678',\n FJ: '679',\n PW: '680',\n WF: '681',\n CK: '682',\n NU: '683',\n WS: '685',\n KI: '686',\n NC: '687',\n TV: '688',\n PF: '689',\n TK: '690',\n FM: '691',\n MH: '692',\n '001': '979',\n KP: '850',\n HK: '852',\n MO: '853',\n KH: '855',\n LA: '856',\n BD: '880',\n TW: '886',\n MV: '960',\n LB: '961',\n JO: '962',\n SY: '963',\n IQ: '964',\n KW: '965',\n SA: '966',\n YE: '967',\n OM: '968',\n PS: '970',\n AE: '971',\n IL: '972',\n BH: '973',\n QA: '974',\n BT: '975',\n MN: '976',\n NP: '977',\n TJ: '992',\n TM: '993',\n AZ: '994',\n GE: '995',\n KG: '996',\n UZ: '998',\n GS: '500',\n PN: '64',\n AQ: '672',\n UM: '1',\n AN: '599',\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport _ from 'underscore';\nimport { loc } from './loc';\nimport bundles from './Bundles';\nimport countryCallingCodes from './countryCallingCodes';\nconst fn = {};\n\n// () => [{ countryCode: countryName }], sorted by countryName\nfn.getCountries = function() {\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n // Sort it; figure out if there is a better way to do this (best would\n // be to sort it in the properties file!!)\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = country.name;\n });\n\n return sorted;\n};\n\nfn.getCountryCode = function(){\n\n const countries = _.omit(bundles.country, 'HM', 'BV', 'TF');\n // HM, BV, and TF do not have phone prefixes, so don't give the\n // user the option to choose these countries. FYI it appears that these\n // countries do not have calling codes because they are ~~uninhabited~~\n\n let collection = _.map(countries, function(name, code) {\n return { name: name, code: code };\n });\n\n collection = _.sortBy(collection, 'name');\n const sorted = {};\n\n _.each(collection, function(country) {\n sorted[country.code] = loc('country.option.label', 'login', [country.name, country.code]);\n });\n\n return sorted;\n};\n\nfn.getCallingCodeForCountry = function(countryCode) {\n return countryCallingCodes[countryCode];\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Util from 'util/Util';\n\nlet { TextBox } = internal.views.forms.inputs;\nexport default TextBox.extend({\n template: hbs(\n '\\\n {{countryCallingCode}}\\\n \\\n \\\n \\\n '\n ),\n\n initialize: function() {\n this.listenTo(this.model, 'change:countryCallingCode', function() {\n this.$('.o-form-label-inline').text(this.model.get('countryCallingCode'));\n });\n },\n\n preRender: function() {\n this.options.countryCallingCode = this.model.get('countryCallingCode');\n this.options.autocomplete = Util.getAutocompleteValue(this.options.model.settings, 'tel');\n },\n\n postRender: function() {\n // This is a hack - once inputGroups are done, get rid of it!!\n this.$el.removeClass('input-fix o-form-control');\n _.defer(() => {\n this.$el.parent().addClass('o-form-input-group');\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { _, loc, internal, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport Enums from 'util/Enums';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport Util from 'util/Util';\nimport Footer from 'v1/views/enroll-factors/Footer';\nimport PhoneTextBox from 'v1/views/enroll-factors/PhoneTextBox';\nimport TextBox from 'v1/views/shared/TextBox';\nlet { Keys } = internal.util;\nconst EnrollCallAndSmsControllerwarningTemplate = View.extend({\n className: 'okta-form-infobox-warning infobox infobox-warning login-timeout-warning',\n attributes: {\n 'aria-live': 'polite',\n },\n template: hbs`\n \n \n {{i18n code=\"email.code.not.received\" bundle=\"login\"}}\n \n {{i18n code=\"email.button.resend\" bundle=\"login\"}}\n \n
\n{{{warning}}}
\n `,\n});\nconst factorIdIsDefined = {\n factorId: function(val) {\n return !_.isUndefined(val);\n },\n};\n\nfunction isCallFactor(factorType) {\n return factorType === 'call';\n}\n\nfunction getClassName(factorType) {\n return isCallFactor(factorType) ? 'enroll-call' : 'enroll-sms';\n}\n\nfunction sendCode(e) {\n if (Keys.isEnter(e)) {\n e.stopPropagation();\n e.preventDefault();\n if (e.type === 'keyup' && e.data && e.data.model) {\n e.data.model.sendCode();\n }\n }\n}\n\nexport default FormController.extend({\n className: function() {\n return getClassName(this.options.factorType);\n },\n Model: function() {\n return {\n props: {\n phoneNumber: ['string', true],\n phoneExtension: ['string', false],\n lastEnrolledPhoneNumber: 'string',\n passCode: ['string', true],\n factorId: 'string',\n },\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n hasExistingPhones: 'boolean',\n trapEnrollment: 'boolean',\n ableToResend: 'boolean',\n factorType: 'string',\n skipPhoneValidation: 'boolean',\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return phoneNumber ? countryCallingCode + phoneNumber : '';\n },\n },\n enrolled: {\n deps: ['lastEnrolledPhoneNumber', 'fullPhoneNumber'],\n fn: function(lastEnrolled, current) {\n return lastEnrolled === current;\n },\n },\n },\n limitResending: function() {\n this.set({ ableToResend: false });\n _.delay(_.bind(this.set, this), Enums.API_RATE_LIMIT, { ableToResend: true });\n },\n sendCode: function() {\n const self = this;\n const phoneNumber = this.get('fullPhoneNumber');\n const phoneExtension = this.get('phoneExtension');\n \n self.trigger('errors:clear');\n \n if (!phoneNumber.length) {\n self.trigger('invalid', self, { phoneNumber: 'model.validation.field.blank' });\n return;\n }\n \n return this.doTransaction(function(transaction) {\n const isMfaEnroll = transaction.status === 'MFA_ENROLL' || transaction.status === 'FACTOR_ENROLL';\n const profileData = {\n phoneNumber: phoneNumber,\n updatePhone: isMfaEnroll ? self.get('hasExistingPhones') : true,\n };\n \n if (isCallFactor(self.get('factorType'))) {\n profileData['phoneExtension'] = phoneExtension;\n }\n \n if (self.get('skipPhoneValidation')) {\n profileData['validatePhone'] = false;\n }\n \n const doEnroll = function(trans) {\n const factor = _.findWhere(trans.factors, {\n factorType: self.get('factorType'),\n provider: 'OKTA',\n });\n \n return factor\n .enroll({\n profile: profileData,\n })\n .catch(function(error) {\n if (error.errorCode === 'E0000098') {\n // E0000098: \"This phone number is invalid.\"\n self.set('skipPhoneValidation', true);\n error.xhr.responseJSON.errorSummary = loc('enroll.sms.try_again', 'login');\n }\n throw error;\n });\n };\n \n if (isMfaEnroll) {\n return doEnroll(transaction);\n } else {\n // We must transition to MfaEnroll before updating the phone number\n self.set('trapEnrollment', true);\n return transaction.prev().then(doEnroll).then(function(trans) {\n self.set('trapEnrollment', false);\n return trans;\n });\n }\n // Rethrow errors so we can change state\n // AFTER setting the new transaction\n }, true)\n .then(function() {\n self.set('lastEnrolledPhoneNumber', phoneNumber);\n self.limitResending();\n })\n .catch(function() {\n self.set('trapEnrollment', false);\n });\n },\n resendCode: function() {\n this.trigger('errors:clear');\n this.limitResending();\n return this.doTransaction(function(transaction) {\n return transaction.resend(this.get('factorType'));\n });\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n Form: function() {\n const factorType = this.options.factorType;\n const isCall = isCallFactor(factorType);\n const formTitle = loc(isCall ? 'enroll.call.setup' : 'enroll.sms.setup', 'login');\n const formSubmit = loc(isCall ? 'mfa.call' : 'mfa.sendCode', 'login');\n const formRetry = loc(isCall ? 'mfa.redial' : 'mfa.resendCode', 'login');\n const formSubmitted = loc(isCall ? 'mfa.calling' : 'mfa.sent', 'login');\n const numberFieldClassName = isCall ? 'enroll-call-phone' : 'enroll-sms-phone';\n const buttonClassName = isCall ? 'call-request-button' : 'sms-request-button';\n const formChildren = [\n FormType.Input({\n name: 'countryCode',\n type: 'select',\n wide: true,\n options: CountryUtil.getCountries(),\n }),\n FormType.Input({\n label: loc('mfa.phoneNumber.placeholder', 'login'),\n 'label-top': true,\n className: numberFieldClassName,\n name: 'phoneNumber',\n input: PhoneTextBox,\n type: 'text',\n render: function() {\n this.$('input[name=\"phoneNumber\"]')\n .off('keydown keyup', sendCode)\n .keydown(sendCode)\n .keyup({ model: this.model }, sendCode);\n },\n }),\n ];\n\n if (isCall) {\n formChildren.push(\n FormType.Input({\n label: loc('mfa.phoneNumber.ext.placeholder', 'login'),\n 'label-top': true,\n className: 'enroll-call-extension',\n name: 'phoneExtension',\n input: TextBox,\n type: 'text',\n })\n );\n }\n formChildren.push(\n FormType.Button({\n title: formSubmit,\n attributes: { 'data-se': buttonClassName },\n className: 'button button-primary js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.sendCode();\n },\n }),\n FormType.Button({\n title: formRetry,\n attributes: { 'data-se': buttonClassName },\n className: 'button js-enroll-phone margin-top-30 ' + buttonClassName,\n click: function() {\n this.model.resendCode();\n },\n initialize: function() {\n this.$el.css({ display: 'none' });\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.options.title = formRetry;\n this.enable();\n } else {\n this.options.title = formSubmitted;\n this.disable();\n }\n this.render();\n });\n },\n }),\n FormType.Divider({\n showWhen: factorIdIsDefined,\n }),\n FormType.Input({\n label: loc('mfa.challenge.enterCode.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'mfa.challenge.enterCode.tooltip',\n 'mfa.challenge.enterCode.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'passCode',\n input: TextBox,\n type: 'tel',\n showWhen: factorIdIsDefined,\n }),\n FormType.Toolbar({\n noCancelButton: true,\n save: loc('mfa.challenge.verify', 'login'),\n showWhen: factorIdIsDefined,\n })\n );\n\n return {\n title: formTitle,\n noButtonBar: true,\n autoSave: true,\n className: getClassName(factorType),\n\n showWarning: function(msg) {\n this.clearWarnings();\n this.add(EnrollCallAndSmsControllerwarningTemplate, '.o-form-error-container', { options: { warning: msg } });\n },\n\n clearWarnings: function() {\n this.$('.okta-form-infobox-warning').remove();\n },\n\n initialize: function() {\n const callTimeWarning = hbs`{{i18n\n code=\"factor.call.time.warning\"\n bundle=\"login\"\n $1=\"$1\"\n }}`;\n const smsTimeWarning = hbs`{{i18n\n code=\"factor.sms.time.warning\"\n bundle=\"login\"\n $1=\"$1\"\n }}`;\n this.listenTo(this.model, 'change:ableToResend', function(model, ableToResend) {\n if (ableToResend) {\n this.showWarning(isCall ? callTimeWarning : smsTimeWarning);\n } else {\n this.clearWarnings();\n }\n });\n this.listenTo(this.model, 'error errors:clear', function() {\n this.clearWarnings();\n this.clearErrors();\n });\n this.listenTo(this.model, 'change:enrolled', function() {\n this.$('.js-enroll-phone').toggle();\n });\n },\n formChildren: formChildren,\n };\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.set('factorId', this.options.appState.get('activatedFactorId'));\n return true;\n }\n if (this.options.appState.get('isMfaEnroll') && this.model.get('trapEnrollment')) {\n return true;\n }\n },\n\n initialize: function() {\n if (isCallFactor(this.options.factorType)) {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhonesForCall'));\n } else {\n this.model.set('hasExistingPhones', this.options.appState.get('hasExistingPhones'));\n }\n this.model.set('factorType', this.options.factorType);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, ListView, View, createButton, loc } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport FactorUtil from 'util/FactorUtil';\nimport RouterUtil from 'v1/util/RouterUtil';\nconst cardinalityTextTpl = hbs('{{cardinalityText}}');\nconst FactorListFactorRow = View.extend({\n tagName: 'li',\n\n className: 'enroll-factor-row clearfix',\n\n template: hbs(\n '\\\n \\\n\\\n
\\\n '\n ),\n\n attributes: function() {\n return { 'data-se': this.model.get('factorName') };\n },\n\n children: function() {\n const children = [];\n const enrolled = this.model.get('enrolled');\n const required = this.model.get('required');\n const cardinality = this.model.get('cardinality');\n\n if (this.options.showInlineSetupButton) {\n return [\n [\n createButton({\n className: 'button',\n title: this.getSetupButtonText(),\n click: function() {\n this.options.appState.trigger(\n 'navigate',\n RouterUtil.createEnrollFactorUrl(this.model.get('provider'), this.model.get('factorType'))\n );\n },\n }),\n '.enroll-factor-button',\n ],\n ];\n } else if (enrolled) {\n children.push(['', '.enroll-factor-label']);\n } else if (required) {\n children.push(['', '.enroll-factor-label']);\n }\n\n const cardinalityText = FactorUtil.getCardinalityText(enrolled, required, cardinality);\n\n if (cardinalityText) {\n children.push([cardinalityTextTpl({ cardinalityText: cardinalityText }), '.enroll-factor-description']);\n }\n return children;\n },\n\n minimize: function() {\n this.$el.addClass('enroll-factor-row-min');\n },\n\n maximize: function() {\n this.$el.removeClass('enroll-factor-row-min');\n },\n\n getSetupButtonText: function() {\n return this.model.get('additionalEnrollment')\n ? loc('enroll.choices.setup.another', 'login')\n : loc('enroll.choices.setup', 'login');\n },\n});\nexport default ListView.extend({\n className: 'enroll-factor-list',\n\n item: FactorListFactorRow,\n\n itemSelector: '.list-content',\n\n template: hbs(\n '\\\n {{#if listTitle}}\\\n {{factorLabel}}
\\\n {{#if factorDescription}}\\\n{{factorDescription}}
\\\n {{/if}}\\\n \\\n{{listTitle}}
\\\n {{/if}}\\\n{{{appStoreLinkText}}}
\\\n '\n ),\n initialize: function() {\n this.listenTo(this.model, 'change:__deviceType__', this.render);\n },\n postRender: function() {\n const link = this.$el.find('.instructions a');\n if (link.length) {\n link[0].setAttribute('target', '_blank');\n link[0].setAttribute('rel', 'noreferer noopener');\n }\n },\n getTemplateData: function() {\n let appStoreLink;\n let appIcon;\n let appStoreName;\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n appStoreName = StoreLinks.STORE[this.model.get('__deviceType__')];\n if (this.model.get('__provider__') === 'GOOGLE') {\n appStoreLink = StoreLinks.GOOGLE[this.model.get('__deviceType__')];\n appIcon = 'google-auth-38';\n } else {\n appStoreLink = StoreLinks.OKTA[this.model.get('__deviceType__')];\n appIcon = 'okta-verify-download-icon';\n }\n const appStoreLinkText = appStoreName\n ? loc('enroll.totp.downloadApp', 'login', [appStoreLink, factorName, appStoreName])\n : null;\n return {\n appStoreLinkText: appStoreLinkText,\n appIcon: appIcon,\n };\n },\n});\nconst EnrollTotpControllerEnrollTotpController = FormController.extend({\n className: 'enroll-totp',\n Model: function() {\n return {\n local: {\n __deviceType__: 'string',\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: this.get('__factorType__'),\n provider: this.get('__provider__'),\n });\n\n return factor.enroll();\n });\n },\n };\n },\n\n Form: {\n title: function() {\n const factorName = FactorUtil.getFactorLabel(this.model.get('__provider__'), this.model.get('__factorType__'));\n\n return loc('enroll.totp.title', 'login', [factorName]);\n },\n noButtonBar: true,\n attributes: { 'data-se': 'step-device-type' },\n\n formChildren: function() {\n const inputOptions = {\n APPLE: loc('iphone', 'login'),\n ANDROID: loc('android', 'login'),\n };\n const children = [\n FormType.Input({\n name: '__deviceType__',\n type: 'radio',\n options: inputOptions,\n group: true,\n label: _.partial(loc, 'enroll.totp.selectDevice', 'login'),\n }),\n FormType.Divider({ showWhen: showWhenDeviceTypeSelected }),\n FormType.View({\n View: EnrollTotpControllerAppDownloadInstructionsView,\n showWhen: showWhenDeviceTypeSelected,\n }),\n FormType.Button({\n title: loc('oform.next', 'login'),\n attributes: {\n 'data-type': 'save'\n },\n className: 'button button-primary default-custom-button',\n click: function() {\n this.model.save();\n },\n showWhen: showWhenDeviceTypeSelected,\n }),\n ];\n\n return children;\n },\n },\n\n Footer: Footer,\n});\nexport default EnrollTotpControllerEnrollTotpController;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 9] */\n\nimport { loc } from './loc';\nconst fn = {};\n\nfn.getU2fEnrollErrorMessageKeyByCode = function(errorCode) {\n switch (errorCode) {\n default:\n case 1:\n return 'u2f.error.other';\n case 2:\n case 3:\n return 'u2f.error.badRequest';\n case 4:\n return 'u2f.error.unsupported';\n case 5:\n return 'u2f.error.timeout';\n }\n};\n\nfn.getU2fVerifyErrorMessageKeyByCode = function(errorCode, isOneFactor) {\n switch (errorCode) {\n case 1:\n // OTHER_ERROR\n return isOneFactor ? 'u2f.error.other.oneFactor' : 'u2f.error.other';\n case 2: // BAD_REQUEST\n case 3:\n // CONFIGURATION_UNSUPPORTED\n return isOneFactor ? 'u2f.error.badRequest.oneFactor' : 'u2f.error.badRequest';\n case 4:\n // DEVICE_INELIGIBLE\n return isOneFactor ? 'u2f.error.unsupported.oneFactor' : 'u2f.error.unsupported';\n case 5:\n // TIMEOUT\n return 'u2f.error.timeout';\n }\n};\n\nfn.getU2fEnrollErrorMessageByCode = function(errorCode) {\n return loc(fn.getU2fEnrollErrorMessageKeyByCode(errorCode), 'login');\n};\n\nfn.getU2fVerifyErrorMessageByCode = function(errorCode, isOneFactor) {\n return loc(fn.getU2fVerifyErrorMessageKeyByCode(errorCode, isOneFactor), 'login');\n};\n\nfn.getU2fVersion = function() {\n return 'U2F_V2';\n};\n\nfn.isU2fAvailable = function() {\n return Object.prototype.hasOwnProperty.call(window, 'u2f');\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport { U2FError } from 'util/Errors';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport Footer from 'v1/views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nexport default FormController.extend({\n className: 'enroll-u2f',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const appId = activation.appId;\n const registerRequests = [\n {\n version: FidoUtil.getU2fVersion(),\n challenge: activation.nonce,\n },\n ];\n const self = this;\n const deferred = Q.defer();\n\n u2f.register(appId, registerRequests, [], function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n deferred.reject(\n new U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fEnrollErrorMessageByCode(data.errorCode),\n },\n },\n })\n );\n } else {\n deferred.resolve(\n transaction.activate({\n registrationData: data.registrationData,\n version: data.version,\n challenge: data.challenge,\n clientData: data.clientData,\n })\n );\n }\n });\n return deferred.promise;\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.u2f.title', 'login'),\n save: _.partial(loc, 'enroll.u2f.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-u2f-form',\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n //There is html in enroll.u2f.general2 in our properties file, reason why is unescaped\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '- \\\n
- {{{i18n code=\"enroll.u2f.general2\" bundle=\"login\"}}} \\\n
- {{i18n code=\"enroll.u2f.general3\" bundle=\"login\"}} \\\n
\\\n
'\n ),\n }),\n })\n );\n }\n\n return result;\n },\n\n _startEnrollment: function() {\n this.$('.u2f-instructions').addClass('hide');\n this.$('.u2f-enroll-text').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.u2f-instructions').removeClass('hide');\n this.$('.u2f-enroll-text').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the 'License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport BaseLoginModel from './BaseLoginModel';\nexport default BaseLoginModel.extend({\n initialize: function(options) {\n this.options = options || {};\n this.appState = this.options.appState;\n },\n constructPostData: function(profileAttributes) {\n const postData = {\n registration: {\n profile: profileAttributes,\n },\n };\n\n // send createNewAccount flag for new user creation\n if (this.appState.get('policy').registration.createNewAccount) {\n postData.registration['createNewAccount'] = true;\n }\n return postData;\n },\n getEnrollFormData: function() {\n return this.manageTransaction(function(transaction, setTransaction) {\n return transaction.enroll().then(function(trans) {\n setTransaction(trans);\n });\n });\n },\n save: function() {\n let data = BaseLoginModel.prototype.toJSON.apply(this, arguments);\n\n data = _.omit(data, ['appState', 'settings', 'createNewAccount']);\n if (_.isEmpty(data)) {\n const error = {\n errorSummary: loc('oform.errorbanner.title', 'login'),\n };\n\n this.trigger('error', this, {\n responseJSON: error,\n });\n } else {\n return this.manageTransaction(function(transaction, setTransaction) {\n transaction.enroll(this.constructPostData(data)).then(function(trans) {\n setTransaction(trans);\n });\n });\n }\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal } from '@okta/courage';\nlet { BaseSchema } = internal.models;\nexport default BaseSchema.Model.extend({\n expand: ['schema'],\n setFieldPlaceholder: function(formFields) {\n _.each(formFields, function(formField) {\n formField.title = formField.label;\n });\n return formFields;\n },\n initialize: function(options) {\n let profileAttributes = options.profileSchemaAttributes;\n\n profileAttributes = this.setFieldPlaceholder(profileAttributes);\n if (profileAttributes) {\n const userProfileSchema = {\n properties: {},\n };\n\n for (var i = 0; i < profileAttributes.length; i++) {\n const profileAttributeObject = profileAttributes[i];\n\n userProfileSchema.properties[profileAttributeObject.name] = profileAttributeObject;\n }\n this.parse.apply(this, [{ schema: userProfileSchema }]);\n }\n },\n});\n","/* eslint max-statements: [2, 23], max-depth: [2, 3], complexity: [2, 13] */\n/*!\n * Copyright (c) 2017, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, internal, $ } from '@okta/courage';\nimport TextBox from 'v1/views/shared/TextBox';\nlet { SchemaFormFactory } = internal.views.forms.helpers;\n\nconst getParts = function(username) {\n const usernameArr = username.split('');\n const minPartsLength = 4;\n const userNameParts = [];\n const delimiters = [',', '.', '-', '_', '#', '@'];\n let userNamePart = '';\n\n _.each(usernameArr, function(part) {\n if (delimiters.indexOf(part) === -1) {\n userNamePart += part;\n } else {\n if (userNamePart.length >= minPartsLength) {\n userNameParts.push(_.clone(userNamePart));\n }\n userNamePart = '';\n }\n });\n if (userNamePart.length >= minPartsLength) {\n userNameParts.push(_.clone(userNamePart));\n }\n return userNameParts.filter(Boolean);\n};\n\nconst passwordContainsFormField = function(formField, password) {\n if (!formField) {\n return false;\n }\n formField = formField.toLowerCase();\n password = password.toLowerCase();\n const formFieldArr = getParts(formField);\n\n //check if each formField part contains password\n for (var i = 0; i < formFieldArr.length; i++) {\n const formFieldPart = formFieldArr[i];\n\n if (password.indexOf(formFieldPart) !== -1) {\n return true;\n }\n }\n return false;\n};\n\nconst checkSubSchema = function(subSchema, value, model) {\n const minLength = subSchema.get('minLength');\n const maxLength = subSchema.get('maxLength');\n const regex = subSchema.get('format');\n\n if (_.isNumber(minLength)) {\n if (value.length < minLength) {\n return false;\n }\n }\n\n if (_.isNumber(maxLength)) {\n if (value.length > maxLength) {\n return false;\n }\n }\n const password = value;\n\n if (_.isString(regex)) {\n // call passwordContainsFormField if regex is userName, firstName, lastName\n if (regex === '^[#/userName]' || regex === '^[#/firstName]' || regex === '^[#/lastName]') {\n const fieldName = regex.split('^[#/')[1].split(']')[0];\n let fieldValue = model.get(fieldName);\n\n if (fieldName === 'userName') {\n // with email as login enabled, we only have email populated\n // Therefore we fallback and run validation with email attribute.\n fieldValue = model.has('userName') ? model.get('userName') : model.get('email');\n }\n return !passwordContainsFormField(fieldValue, password);\n } else {\n if (!new RegExp(regex).test(value)) {\n return false;\n }\n }\n }\n\n return true;\n};\n\nconst checkSubSchemas = function(fieldName, model, subSchemas, showError) {\n const value = model.get(fieldName);\n\n if (!_.isString(value)) {\n return;\n }\n\n subSchemas.each(function(subSchema, index) {\n const ele = $('#subschemas-' + fieldName + ' .subschema-' + index);\n\n //hide password complexity if no password\n if (value) {\n ele.children('p').removeClass('default-schema');\n } else {\n ele.children('p').addClass('default-schema');\n }\n\n // clear aria role and live-region for re-validation\n ele.children('p')\n .removeAttr('role')\n .removeAttr('aria-live');\n\n // reset errors\n ele.removeClass('subschema-satisfied subschema-unsatisfied subschema-error');\n\n // validate\n if (checkSubSchema(subSchema, value, model)) {\n // passed\n ele.addClass('subschema-satisfied');\n ele.find('p span').removeClass('error error-16-small');\n ele.find('p span').addClass('confirm-16');\n } else {\n // failed\n if (showError) {\n ele.find('p span').removeClass('confirm-16');\n ele.find('p span').addClass('error error-16-small');\n ele.addClass('subschema-error subschema-unsatisfied');\n\n ele.find('p')\n // set role=\"alert\" so the password requirement is read by\n // screen-readers\n .attr('role', 'alert')\n // set aria-live=\"polite\" so it will \"debounce\" and wait to read the\n // message between keystrokes\n .attr('aria-live', 'polite');\n }\n }\n });\n};\n\nconst fnCreateInputOptions = function(schemaProperty) {\n let inputOptions = SchemaFormFactory.createInputOptions(schemaProperty);\n\n if (inputOptions.type === 'select') {\n inputOptions = _.extend(inputOptions, {\n label: schemaProperty.get('title'),\n });\n } else {\n let placeholder = schemaProperty.get('title');\n\n if (schemaProperty.get('required')) {\n placeholder += ' *';\n }\n inputOptions = _.extend(inputOptions, {\n label: false,\n 'label-top': true,\n placeholder: placeholder,\n });\n }\n\n const fieldName = schemaProperty.get('name');\n\n switch (fieldName) {\n case 'userName':\n inputOptions.input = TextBox;\n inputOptions.params = {\n icon: 'person-16-gray',\n };\n break;\n case 'password':\n inputOptions.type = 'password';\n inputOptions.input = TextBox;\n inputOptions.params = {\n icon: 'remote-lock-16',\n };\n }\n\n const subSchemas = schemaProperty.get('subSchemas');\n\n if (subSchemas) {\n inputOptions.events = {\n input: function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n focusout: function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n 'change:userName': function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n 'change:firstName': function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n 'change:lastName': function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n 'change:email': function() {\n checkSubSchemas(fieldName, this.model, subSchemas, true);\n },\n };\n }\n\n return inputOptions;\n};\n\nexport default {\n createInputOptions: fnCreateInputOptions,\n getUsernameParts: getParts,\n passwordContainsFormField: passwordContainsFormField,\n};\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-len: [2, 130] */\nimport { Form, loc } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport ProfileSchema from 'v1/models/ProfileSchema';\nimport RegistrationFormFactory from 'v1/util/RegistrationFormFactory';\nexport default Form.extend({\n layout: 'o-form-theme',\n autoSave: true,\n noCancelButton: true,\n title() {\n return loc('registration.form.title', 'login');\n },\n save() {\n return loc('registration.form.submit', 'login');\n },\n initialize: function(options) {\n this.options = options || {};\n this.schema = new ProfileSchema({\n profileSchemaAttributes: this.options.appState.get('policy').registration.profile,\n });\n this.schema.properties.each(schemaProperty => {\n const inputOptions = RegistrationFormFactory.createInputOptions(schemaProperty);\n\n this.addInput(inputOptions);\n });\n const requiredFieldsLabel = hbs('{{label}}')({\n label: loc('registration.required.fields.label', 'login'),\n });\n\n this.add(requiredFieldsLabel);\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n }\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\nimport EnrollUser from 'v1/models/EnrollUser';\nimport BaseLoginController from 'v1/util/BaseLoginController';\nimport EnrollUserForm from 'v1/views/enrollUser/EnrollUserForm';\nimport FooterWithBackLink from 'v1/views/shared/FooterWithBackLink';\nexport default BaseLoginController.extend({\n className: 'enroll-user',\n initialize: function(options) {\n this.options = options || {};\n // create model\n this.model = new EnrollUser(this.options);\n },\n fetchInitialData: function() {\n // If user is unauthenticated and starts enroll flow make a post call to transition state to PROFILE_REQUIRED\n if (this.options.appState.get('isUnauthenticated')) {\n return this.model.getEnrollFormData();\n } else {\n return BaseLoginController.prototype.fetchInitialData.call();\n }\n },\n trapAuthResponse: function() {\n if (this.options.appState.get('isProfileRequired')) {\n return true;\n }\n },\n postRender: function() {\n const form = new EnrollUserForm(this.toJSON());\n\n this.add(form);\n this.add(new FooterWithBackLink(this.toJSON()));\n this.addListeners();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global Uint8Array, atob, btoa */\n\nconst fn = {};\n\n/**\n * Light weight hashing algorithm that hashes string into an integer between 0 and 4294967295\n * Not recommended for data set of size greater than 10000\n * https://www.npmjs.com/package/string-hash\n *\n * @param str the string to be hashed\n * @returns string hash of integer type\n */\nfn.getStringHash = function(str) {\n let hash = 5381;\n let i = str.length;\n\n while (i) {\n hash = (hash * 33) ^ str.charCodeAt(--i);\n }\n return hash >>> 0;\n};\n\n/**\n * Converts any url safe characters in a base64 string to regular base64 characters\n * @param str base64 string that might contain url safe characters\n * @returns base64 formatted string\n */\nfn.base64UrlSafeToBase64 = function(str) {\n return str.replace(new RegExp('_', 'g'), '/').replace(new RegExp('-', 'g'), '+');\n};\n\n/**\n * Converts an ArrayBuffer object that contains binary data to base64 encoded string\n * @param bin ArrayBuffer object\n * @returns base64 encoded string\n */\nfn.binToStr = function(bin) {\n return btoa(new Uint8Array(bin).reduce((s, byte) => s + String.fromCharCode(byte), ''));\n};\n\n/**\n * Converts base64 string to binary data view\n * @param str in base64 or base64UrlSafe format\n * @returns converted Uint8Array view of binary data\n */\nfn.strToBin = function(str) {\n return Uint8Array.from(atob(this.base64UrlSafeToBase64(str)), c => c.charCodeAt(0));\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Q from 'q';\nimport FidoUtil from 'util/FidoUtil';\n\nfunction adaptToOkta(promise) {\n return new Q(promise);\n}\n\nfunction makeCredential(accountInfo, cryptoParams, challenge) {\n cryptoParams = cryptoParams.map(function(param) {\n return { type: 'FIDO_2_0', algorithm: param.algorithm };\n });\n\n const promise = window.msCredentials.makeCredential(accountInfo, cryptoParams, challenge).then(function(cred) {\n return Object.freeze({\n credential: { id: cred.id },\n publicKey: JSON.parse(cred.publicKey),\n attestation: cred.attestation,\n });\n });\n\n return adaptToOkta(promise);\n}\n\nfunction getAssertion(challenge, allowList) {\n const accept = allowList.map(function(item) {\n return { type: 'FIDO_2_0', id: item.id };\n });\n const filters = { accept: accept };\n const promise = window.msCredentials.getAssertion(challenge, filters).then(function(attestation) {\n const signature = attestation.signature;\n\n return Object.freeze({\n credential: { id: attestation.id },\n clientData: signature.clientData,\n authenticatorData: signature.authnrData,\n signature: signature.signature,\n });\n });\n\n return adaptToOkta(promise);\n}\n\nfunction processWebAuthnResponse(inputFunction, context) {\n if (typeof inputFunction === 'undefined') {\n return null;\n }\n const responseValue = inputFunction.apply(context);\n if (responseValue === undefined || responseValue === null) {\n return null;\n }\n return JSON.stringify(responseValue);\n}\n\nexport default {\n makeCredential: makeCredential,\n getAssertion: getAssertion,\n processWebAuthnResponse: processWebAuthnResponse,\n isAvailable: function() {\n return Object.prototype.hasOwnProperty.call(window, 'msCredentials');\n },\n isNewApiAvailable: function() {\n // navigator.credentials is not supported in IE11\n // eslint-disable-next-line compat/compat\n return navigator && navigator.credentials && navigator.credentials.create;\n },\n isWebauthnOrU2fAvailable: function() {\n return this.isNewApiAvailable() || FidoUtil.isU2fAvailable();\n },\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport CryptoUtil from 'util/CryptoUtil';\nimport { WebauthnAbortError, WebAuthnError } from 'util/Errors';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'v1/views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\n\nfunction getExcludeCredentials(credentials) {\n const excludeCredentials = [];\n\n _.each(credentials, function(credential) {\n excludeCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(credential.id),\n });\n });\n return excludeCredentials;\n}\n\nexport default FormController.extend({\n className: 'enroll-webauthn',\n Model: {\n local: {\n __enrolled__: 'boolean',\n },\n\n save: function() {\n this.trigger('request');\n\n if (this.get('__enrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n });\n },\n\n activate: function() {\n this.set('__enrolled__', true);\n this.trigger('errors:clear');\n this.appState.on('backToFactors', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n // enroll via browser webauthn js\n\n const self = this;\n\n if (webauthn.isNewApiAvailable()) {\n const options = _.extend({}, activation, {\n challenge: CryptoUtil.strToBin(activation.challenge),\n user: {\n id: CryptoUtil.strToBin(activation.user.id),\n name: activation.user.name,\n displayName: activation.user.displayName,\n },\n excludeCredentials: getExcludeCredentials(activation.excludeCredentials),\n });\n\n // AbortController is not supported in IE11\n if (typeof AbortController !== 'undefined') {\n self.webauthnAbortController = new AbortController();\n }\n return new Q(\n navigator.credentials.create({\n publicKey: options,\n signal: self.webauthnAbortController && self.webauthnAbortController.signal,\n })\n )\n .then(function(newCredential) {\n return transaction.activate({\n attestation: CryptoUtil.binToStr(newCredential.response.attestationObject),\n clientData: CryptoUtil.binToStr(newCredential.response.clientDataJSON),\n // example data: [\"nfc\", \"usb\"]\n transports: webauthn.processWebAuthnResponse(newCredential.response.getTransports,\n newCredential.response),\n // example data: {\"credProps\":{\"rk\":true}}\n clientExtensions: webauthn.processWebAuthnResponse(newCredential.getClientExtensionResults,\n newCredential)\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new WebauthnAbortError();\n } else {\n throw new WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n }\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.webauthn.biometric.title', 'login'),\n save: _.partial(loc, 'enroll.webauthn.save', 'login'),\n noCancelButton: true,\n hasSavingState: false,\n autoSave: true,\n className: 'enroll-webauthn-form',\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n //enroll.webauthn.biometric.instructions.edge is unescaped because it contains html\n children.push(\n FormType.View({\n View: View.extend({\n className: 'webauthn-enroll-text',\n template: hbs(\n '\\\n {{i18n code=\"enroll.u2f.instructions\" bundle=\"login\"}}
\\\n{{i18n code=\"enroll.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n\\\n \\\n \\\n
\\\n \\\n \\\n
\\\n {{#if isEdge}}\\\n {{i18n code=\"enroll.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n\\\n
\\\n {{/if}}\\\n {{#if onlySupportsSecurityKey}}\\\n {{{i18n code=\"enroll.webauthn.biometric.instructions.edge\" bundle=\"login\"}}}
\\\n\\\n
\\\n {{/if}}\\\n \\\n '\n ),\n getTemplateData: function() {\n return {\n isEdge: BrowserFeatures.isEdge(),\n onlySupportsSecurityKey: (BrowserFeatures.isFirefox() || BrowserFeatures.isSafari()) &&\n BrowserFeatures.isMac(),\n };\n },\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nexport default View.extend({\n className: 'okta-waiting-spinner',\n attributes: {\n 'data-se': 'o-form-okta-waiting-spinner',\n },\n modelEvents: {\n 'spinner:show': 'show',\n 'spinner:hide': 'hide',\n },\n\n initialize: function(options) {\n if (options && options.visible === false) {\n this.hide();\n }\n },\n\n show: function() {\n this.$el.removeClass('hide');\n },\n\n hide: function() {\n this.$el.addClass('hide');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport webauthn from 'util/webauthn';\nimport Footer from 'v1/views/enroll-factors/Footer';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nimport Spinner from 'v1/views/shared/Spinner';\nexport default FormController.extend({\n className: 'enroll-windows-hello',\n Model: {\n local: {\n __isEnrolled__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n\n if (this.get('__isEnrolled__')) {\n return this.activate();\n }\n\n return this.doTransaction(function(transaction) {\n return this._enroll(transaction);\n });\n },\n\n _enroll: function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.enroll();\n },\n\n activate: function() {\n this.set('__isEnrolled__', true);\n\n return this.doTransaction(function(transaction) {\n const activation = transaction.factor.activation;\n const user = transaction.user;\n const model = this;\n const accountInfo = {\n rpDisplayName: activation.rpDisplayName,\n userDisplayName: user.profile.displayName,\n accountName: user.profile.login,\n userId: user.id,\n };\n const cryptoParams = [\n {\n algorithm: activation.algorithm,\n },\n ];\n const challenge = activation.nonce;\n\n return webauthn\n .makeCredential(accountInfo, cryptoParams, challenge)\n .then(function(creds) {\n return transaction.activate({\n credentialId: creds.credential.id,\n publicKey: creds.publicKey,\n attestation: null,\n });\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'enroll.windowsHello.title', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('enroll.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'enroll.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('enroll.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('enroll.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n this.$('.o-form-button-bar').removeClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n Footer: Footer,\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaEnrollActivate')) {\n this.model.activate();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport Footer from 'v1/views/enroll-factors/Footer';\nimport TextBox from 'v1/views/shared/TextBox';\nexport default FormController.extend({\n className: 'enroll-yubikey',\n Model: {\n props: {\n passCode: ['string', true],\n factorId: 'string',\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'token:hardware',\n provider: 'YUBICO',\n });\n\n return factor.enroll({\n passCode: this.get('passCode'),\n });\n });\n },\n },\n\n Form: {\n title: _.partial(loc, 'enroll.yubikey.title', 'login'),\n subtitle: _.partial(loc, 'enroll.yubikey.subtitle', 'login'),\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n autoSave: true,\n className: 'enroll-yubikey',\n formChildren: [\n FormType.View({\n View: '',\n }),\n FormType.Input({\n name: 'passCode',\n input: TextBox,\n type: 'password',\n }),\n ],\n },\n\n Footer: Footer,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, View, loc } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport CountryUtil from 'util/CountryUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport RouterUtil from 'v1/util/RouterUtil';\nconst PUSH_INTERVAL = 6000;\n\n// Note: Keep-alive is set to 5 seconds - using 5 seconds here will result\n// in network connection lost errors in Safari and IE.\n\nconst EnrollmentLinkSentControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n this.options.appState.get('activatedFactorType'),\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nconst emailSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaEmail.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-email-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{{i18n code=\"enroll.webauthn.instructions.noSupportForBiometric\" bundle=\"login\"}}}
\\\n{{i18n code=\"enroll.totp.enrollViaEmail.msg\" bundle=\"login\"}}
\\\n{{email}}
\\\n '\n ),\n getTemplateData: function() {\n return { email: this.options.appState.get('userEmail') };\n },\n }),\n }),\n ],\n};\nconst smsSentForm = {\n title: _.partial(loc, 'enroll.totp.enrollViaSms.title', 'login'),\n noButtonBar: true,\n attributes: { 'data-se': 'sent-sms-activation-link' },\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n{{i18n code=\"enroll.totp.enrollViaSms.msg\" bundle=\"login\"}}
\\\n{{phoneNumber}}
\\\n '\n ),\n getTemplateData: function() {\n return { phoneNumber: this.model.get('fullPhoneNumber') };\n },\n }),\n }),\n ],\n};\nexport default FormController.extend({\n className: 'enroll-activation-link-sent',\n Model: function() {\n return {\n local: {\n countryCode: ['string', false, this.options.appState.get('userCountryCode')],\n phoneNumber: ['string', false, this.options.appState.get('userPhoneNumber')],\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n derived: {\n countryCallingCode: {\n deps: ['countryCode'],\n fn: function(countryCode) {\n return '+' + CountryUtil.getCallingCodeForCountry(countryCode);\n },\n },\n fullPhoneNumber: {\n deps: ['countryCallingCode', 'phoneNumber'],\n fn: function(countryCallingCode, phoneNumber) {\n return countryCallingCode + phoneNumber;\n },\n },\n },\n };\n },\n\n Form: function() {\n const activationType = this.options.appState.get('factorActivationType');\n\n switch (activationType) {\n case 'SMS':\n return smsSentForm;\n case 'EMAIL':\n return emailSentForm;\n default:\n throw new Error('Unknown activation option: ' + activationType);\n }\n },\n\n Footer: EnrollmentLinkSentControllerFooter,\n\n initialize: function() {\n this.pollForEnrollment();\n },\n\n remove: function() {\n return FormController.prototype.remove.apply(this, arguments);\n },\n\n pollForEnrollment: function() {\n return this.model.doTransaction(function(transaction) {\n return transaction.poll(PUSH_INTERVAL);\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isWaitingForActivation')) {\n this.pollForEnrollment();\n return true;\n }\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport FormController from 'v1/util/FormController';\nimport RouterUtil from 'v1/util/RouterUtil';\nimport EnterPasscodeForm from 'v1/views/enroll-factors/EnterPasscodeForm';\nconst EnterPasscodePushFlowControllerFooter = View.extend({\n template: hbs(\n '\\\n \\\n {{i18n code=\"oform.back\" bundle=\"login\"}}\\\n \\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n const url = RouterUtil.createActivateFactorUrl(\n this.options.appState.get('activatedFactorProvider'),\n 'push',\n 'manual'\n );\n\n this.options.appState.trigger('navigate', url);\n },\n});\nexport default FormController.extend({\n className: 'activate-push',\n Model: function() {\n return {\n props: {\n factorId: ['string', true, this.options.appState.get('activatedFactorId')],\n passCode: ['string', true],\n },\n local: {\n __factorType__: ['string', false, this.options.factorType],\n __provider__: ['string', false, this.options.provider],\n },\n save: function() {\n return this.doTransaction(function(transaction) {\n return transaction.activate({\n passCode: this.get('passCode'),\n });\n });\n },\n };\n },\n\n Form: EnterPasscodeForm,\n\n Footer: EnterPasscodePushFlowControllerFooter,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nexport default View.extend({\n template: hbs(\n '\\\n\\\n \\\n
'\n ),\n className: 'contact-support',\n\n getTemplateData: function() {\n return this.settings.pick('helpSupportNumber');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport Util from 'util/Util';\nimport ValidationUtil from 'v1/util/ValidationUtil';\nimport ContactSupport from 'v1/views/shared/ContactSupport';\nimport TextBox from 'v1/views/shared/TextBox';\nconst ForgotPasswordControllernoFactorsError = View.extend({\n template: hbs`\n {{i18n code=\"contact.support\" bundle=\"login\" arguments=\"helpSupportNumber\"}}
\\\n\n \n
\n `,\n});\nconst ForgotPasswordControllerFooter = View.extend({\n template: hbs(\n '\\\n {{#unless hideBackToSignInForReset}}\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{/unless}}\\\n {{#if helpSupportNumber}}\\\n \\\n {{i18n code=\"mfa.noAccessToEmail\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .js-back': function(e) {\n e.preventDefault();\n this.back();\n },\n 'click .js-contact-support': function(e) {\n e.preventDefault();\n this.state.trigger('contactSupport');\n this.$('.js-contact-support').hide();\n },\n },\n getTemplateData: function() {\n return {\n hideBackToSignInForReset: this.settings.get('features.hideBackToSignInForReset'),\n helpSupportNumber: this.settings.get('helpSupportNumber'),\n };\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n});\nexport default FormController.extend({\n className: 'forgot-password',\n Model: {\n props: {\n username: ['string', true],\n factorType: ['string', true],\n },\n validate: function() {\n return ValidationUtil.validateUsername(this);\n },\n save: function() {\n const self = this;\n const relayState = this.settings.get('relayState');\n\n this.startTransaction(function(authClient) {\n return authClient.forgotPassword({\n username: self.settings.transformUsername(self.get('username'), Enums.FORGOT_PASSWORD),\n factorType: self.get('factorType'),\n relayState: relayState,\n });\n }).catch(function() {\n //need empty fail handler on model to display errors on form\n });\n },\n },\n Form: {\n noButtonBar: true,\n title: _.partial(loc, 'password.reset', 'login'),\n formChildren: function() {\n const smsEnabled = this.settings.get('features.smsRecovery');\n /*eslint complexity: [2, 9] max-statements: [2, 23] */\n\n const callEnabled = this.settings.get('features.callRecovery');\n const emailEnabled = this.settings.get('features.emailRecovery');\n const noFactorsEnabled = !(smsEnabled || callEnabled || emailEnabled);\n const formChildren = [];\n\n if (noFactorsEnabled) {\n this.add(ForgotPasswordControllernoFactorsError, '.o-form-error-container');\n } else {\n formChildren.push(\n FormType.Input({\n label: loc('password.forgot.email.or.username.placeholder', 'login'),\n 'label-top': true,\n explain: Util.createInputExplain(\n 'password.forgot.email.or.username.tooltip',\n 'password.forgot.email.or.username.placeholder',\n 'login'\n ),\n 'explain-top': true,\n name: 'username',\n input: TextBox,\n inputId: 'account-recovery-username',\n autoComplete: Util.getAutocompleteValue(this.settings, 'username'),\n type: 'text',\n inlineValidation: false,\n })\n );\n if (smsEnabled || callEnabled) {\n formChildren.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"password.forgot.noFactorsEnabled\" bundle=\"login\"}}
\n\\\n {{i18n code=\"recovery.mobile.hint\" bundle=\"login\" arguments=\"mobileFactors\"}}\\\n
'\n ),\n getTemplateData: function() {\n let mobileFactors;\n\n if (smsEnabled && callEnabled) {\n mobileFactors = loc('recovery.smsOrCall');\n } else if (callEnabled) {\n mobileFactors = loc('recovery.call');\n } else {\n mobileFactors = loc('recovery.sms');\n }\n return { mobileFactors: mobileFactors };\n },\n }),\n })\n );\n }\n if (smsEnabled) {\n this.$el.addClass('forgot-password-sms-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'sms-button',\n 'password.forgot.sendText',\n Enums.RECOVERY_FACTOR_TYPE_SMS,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_SMS);\n }\n if (callEnabled) {\n this.$el.addClass('forgot-password-call-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'call-button',\n 'password.forgot.call',\n Enums.RECOVERY_FACTOR_TYPE_CALL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_CALL);\n }\n if (emailEnabled) {\n this.$el.addClass('forgot-password-email-enabled');\n formChildren.push(\n this.createRecoveryFactorButton(\n 'email-button',\n 'password.forgot.sendEmail',\n Enums.RECOVERY_FACTOR_TYPE_EMAIL,\n this\n )\n );\n this.setDefaultFactorType(Enums.RECOVERY_FACTOR_TYPE_EMAIL);\n }\n }\n\n return formChildren;\n },\n initialize: function() {\n this.listenTo(this.state, 'contactSupport', function() {\n this.add(ContactSupport, '.o-form-error-container');\n });\n\n this.listenTo(this, 'save', function() {\n this.options.appState.set('username', this.model.get('username'));\n this.model.save();\n });\n },\n setDefaultFactorType: function(factorType) {\n if (_.isEmpty(this.model.get('factorType'))) {\n this.model.set('factorType', factorType);\n }\n },\n createRecoveryFactorButton: function(className, labelCode, factorType, form) {\n return FormType.Button({\n attributes: { 'data-se': className },\n className: 'button button-primary button-wide ' + className,\n title: loc(labelCode, 'login'),\n click: function() {\n form.clearErrors();\n if (this.model.isValid()) {\n this.model.set('factorType', factorType);\n form.trigger('save', this.model);\n }\n },\n });\n },\n },\n Footer: ForgotPasswordControllerFooter,\n\n initialize: function() {\n this.options.appState.unset('username');\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { internal } from '@okta/courage';\nconst Cookie = internal.util.Cookie;\nconst LAST_USERNAME_COOKIE_NAME = 'ln';\nconst DAYS_SAVE_REMEMBER = 365;\nconst fn = {};\n\nfn.getCookieUsername = function() {\n return Cookie.getCookie(LAST_USERNAME_COOKIE_NAME);\n};\n\nfn.setUsernameCookie = function(username) {\n Cookie.setCookie(LAST_USERNAME_COOKIE_NAME, username, {\n expires: DAYS_SAVE_REMEMBER,\n path: '/',\n });\n};\n\nfn.removeUsernameCookie = function() {\n Cookie.removeCookie(LAST_USERNAME_COOKIE_NAME, { path: '/' });\n};\n\nexport default fn;\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc, Model } from '@okta/courage';\nimport CookieUtil from 'util/CookieUtil';\nimport Enums from 'util/Enums';\nimport BaseLoginModel from './BaseLoginModel';\n\nexport default BaseLoginModel.extend({\n props: function() {\n const cookieUsername = CookieUtil.getCookieUsername();\n const properties = this.getUsernameAndRemember(cookieUsername);\n const props = {\n username: {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.username.required', 'login');\n }\n },\n value: properties.username,\n },\n lastUsername: ['string', false, cookieUsername],\n context: ['object', false],\n remember: ['boolean', true, properties.remember],\n multiOptionalFactorEnroll: ['boolean', true],\n };\n\n if (!(this.settings && this.settings.get('features.passwordlessAuth'))) {\n props.password = {\n type: 'string',\n validate: function(value) {\n if (_.isEmpty(value)) {\n return loc('error.password.required', 'login');\n }\n },\n };\n }\n return props;\n },\n\n getUsernameAndRemember: function(cookieUsername) {\n const settingsUsername = this.settings && this.settings.get('username');\n const rememberMeEnabled = this.settings && this.settings.get('features.rememberMe');\n let remember = false;\n let username;\n\n if (settingsUsername) {\n username = settingsUsername;\n remember = rememberMeEnabled && username === cookieUsername;\n } else if (rememberMeEnabled && cookieUsername) {\n // Only respect the cookie if the feature is enabled.\n // Allows us to force prompting when necessary, e.g. SAML ForceAuthn\n username = cookieUsername;\n remember = true;\n }\n\n return {\n username: username,\n remember: remember,\n };\n },\n\n constructor: function(options) {\n this.settings = options && options.settings;\n this.appState = options && options.appState;\n Model.apply(this, arguments);\n this.listenTo(this, 'change:username', function(model, username) {\n this.set({ remember: username === this.get('lastUsername') });\n });\n },\n parse: function(options) {\n return _.omit(options, ['settings', 'appState']);\n },\n\n save: function() {\n const username = this.settings.transformUsername(this.get('username'), Enums.PRIMARY_AUTH);\n const remember = this.get('remember');\n const lastUsername = this.get('lastUsername');\n\n this.setUsernameCookie(username, remember, lastUsername);\n\n //the 'save' event here is triggered and used in the BaseLoginController\n //to disable the primary button on the primary auth form\n this.trigger('save');\n\n this.appState.trigger('loading', true);\n\n const signInArgs = this.getSignInArgs(username);\n let primaryAuthPromise;\n\n if (this.appState.get('isUnauthenticated')) {\n const authClient = this.appState.settings.getAuthClient();\n\n // bootstrapped with stateToken\n if (this.appState.get('isIdxStateToken')) {\n // if its an idx stateToken, we send the parameter as identifier to login API\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.login);\n });\n } else {\n primaryAuthPromise = this.doTransaction(function(transaction) {\n return this.doPrimaryAuth(authClient, signInArgs, transaction.authenticate);\n }, true);\n }\n } else {\n //normal username/password flow without stateToken\n primaryAuthPromise = this.startTransaction(function(authClient) {\n return this.doPrimaryAuth(authClient, signInArgs, _.bind(authClient.signInWithCredentials, authClient));\n });\n }\n\n return primaryAuthPromise\n .catch(() => {\n // Specific event handled by the Header for the case where the security image is not\n // enabled and we want to show a spinner. (Triggered only here and handled only by Header).\n this.appState.trigger('removeLoading');\n CookieUtil.removeUsernameCookie();\n })\n .finally(() => {\n this.appState.trigger('loading', false);\n });\n },\n\n getSignInArgs: function(username) {\n const multiOptionalFactorEnroll = this.get('multiOptionalFactorEnroll');\n const signInArgs = {};\n\n if (!this.settings.get('features.passwordlessAuth')) {\n signInArgs.password = this.get('password');\n }\n\n // if its an idx stateToken, we send the parameter as identifier to login API\n if (this.appState.get('isIdxStateToken')) {\n signInArgs.identifier = username;\n } else {\n //only post options param for non-idx flows\n signInArgs.username = username;\n signInArgs.options = {\n warnBeforePasswordExpired: true,\n multiOptionalFactorEnroll: multiOptionalFactorEnroll,\n };\n }\n return signInArgs;\n },\n\n setUsernameCookie: function(username, remember, lastUsername) {\n // Do not modify the cookie when feature is disabled, relevant for SAML ForceAuthn prompts\n if (this.settings.get('features.rememberMe')) {\n // Only delete the cookie if its owner says so. This allows other\n // users to log in on a one-off basis.\n if (!remember && lastUsername === username) {\n CookieUtil.removeUsernameCookie();\n } else if (remember) {\n CookieUtil.setUsernameCookie(username);\n }\n }\n },\n\n doPrimaryAuth: function(authClient, signInArgs, func) {\n const deviceFingerprintEnabled = this.settings.get('features.deviceFingerprinting');\n const typingPatternEnabled = this.settings.get('features.trackTypingPattern');\n\n // Add the custom header for fingerprint, typing pattern if needed, and then remove it afterwards\n // Since we only need to send it for primary auth\n if (deviceFingerprintEnabled && this.appState.get('deviceFingerprint')) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', this.appState.get('deviceFingerprint'));\n }\n if (typingPatternEnabled && this.appState.get('typingPattern')) {\n authClient.http.setRequestHeader('X-Typing-Pattern', this.appState.get('typingPattern'));\n }\n\n const self = this;\n\n return func(signInArgs).finally(function() {\n if (deviceFingerprintEnabled) {\n authClient.http.setRequestHeader('X-Device-Fingerprint', undefined);\n self.appState.unset('deviceFingerprint'); //Fingerprint can only be used once\n }\n if (typingPatternEnabled) {\n authClient.http.setRequestHeader('X-Typing-Pattern', undefined);\n self.appState.unset('typingPattern');\n }\n });\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { $ } from '@okta/courage';\nimport Q from 'q';\nexport default {\n getUserAgent: function() {\n return navigator.userAgent;\n },\n isMessageFromCorrectSource: function($iframe, event) {\n return event.source === $iframe[0].contentWindow;\n },\n generateDeviceFingerprint: function(oktaDomainUrl, element) {\n const userAgent = this.getUserAgent();\n\n if (!userAgent) {\n return Q.reject('user agent is not defined');\n } else if (isWindowsPhone(userAgent)) {\n return Q.reject('device fingerprint is not supported on Windows phones');\n }\n\n const deferred = Q.defer();\n const self = this;\n let $iframe;\n let iFrameTimeout;\n\n function isWindowsPhone(userAgent) {\n return userAgent.match(/windows phone|iemobile|wpdesktop/i);\n }\n\n function removeIframe() {\n $iframe.off();\n $iframe.remove();\n window.removeEventListener('message', onMessageReceivedFromOkta, false);\n }\n\n function handleError(reason) {\n removeIframe();\n deferred.reject(reason);\n }\n\n function onMessageReceivedFromOkta(event) {\n if (!self.isMessageFromCorrectSource($iframe, event)) {\n return;\n }\n // deviceFingerprint service is available, clear timeout\n clearTimeout(iFrameTimeout);\n if (!event || !event.data || event.origin !== oktaDomainUrl) {\n handleError('no data');\n return;\n }\n try {\n const message = JSON.parse(event.data);\n\n if (message && message.type === 'FingerprintServiceReady') {\n sendMessageToOkta({ type: 'GetFingerprint' });\n } else if (message && message.type === 'FingerprintAvailable') {\n removeIframe();\n deferred.resolve(message.fingerprint);\n } else {\n handleError('no data');\n }\n } catch (error) {\n //Ignore any errors since we could get other messages too\n }\n }\n\n function sendMessageToOkta(message) {\n const win = $iframe[0].contentWindow;\n\n if (win) {\n win.postMessage(JSON.stringify(message), oktaDomainUrl);\n }\n }\n\n // Attach listener\n window.addEventListener('message', onMessageReceivedFromOkta, false);\n // Create and Load devicefingerprint page inside the iframe\n $iframe = $('');\n if (this.options.appState.get('allowRememberDevice')) {\n this.addInput({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n });\n }\n Duo.init({\n host: this.model.get('host'),\n sig_request: this.model.get('signature'),\n iframe: this.$('iframe').get(0),\n post_action: _.bind(this.model.verify, this.model),\n });\n },\n },\n\n fetchInitialData: function() {\n const self = this;\n\n return this.model.getInitOptions().then(function(trans) {\n const res = trans.data;\n\n if (\n !res._embedded ||\n !res._embedded.factor ||\n !res._embedded.factor._embedded ||\n !res._embedded.factor._embedded.verification\n ) {\n throw new Error('Response does not have duo verification options');\n }\n const verification = res._embedded.factor._embedded.verification;\n\n self.model.set({\n host: verification.host,\n signature: verification.signature,\n postAction: verification._links.complete.href,\n factorId: res._embedded.factor.id,\n stateToken: res.stateToken,\n });\n });\n },\n\n trapAuthResponse: function() {\n if (this.options.appState.get('isMfaChallenge')) {\n return true;\n }\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, $, loc, View, internal } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport FooterWithBackLink from 'v1/views/shared/FooterWithBackLink';\nlet { Util } = internal.util;\nexport default FormController.extend({\n className: 'piv-cac-card',\n Model: {\n save: async function() {\n this.trigger('request');\n const self = this;\n const pivConfig = this.settings.get('piv');\n const data = {\n fromURI: this.settings.get('relayState'),\n isCustomDomain: pivConfig.isCustomDomain,\n customDomain: pivConfig.customDomain,\n };\n\n try {\n await this.getCert(pivConfig.certAuthUrl);\n const res = await this.postCert(pivConfig.certAuthUrl, data);\n Util.redirect(res.redirectUrl);\n } catch (err) {\n if (_.isEmpty(err.responseJSON) && !err.responseText) {\n err.responseJSON = {\n errorSummary: loc('piv.cac.error', 'login'),\n };\n }\n self.trigger('error', self, err);\n }\n },\n\n getCert: function(certAuthUrl) {\n return $.get({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n\n postCert: function(certAuthUrl, data) {\n return $.post({\n url: certAuthUrl,\n xhrFields: {\n withCredentials: true,\n },\n data: JSON.stringify(data),\n contentType: 'text/plain',\n beforeSend: function() {\n // overriding this function to prevent our jquery-wrapper from\n // setting headers. Need to keep this a simple request in order for\n // PIV / CAC to work in IE.\n },\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'piv.cac.title', 'login'),\n className: 'piv-cac-card',\n noCancelButton: true,\n save: _.partial(loc, 'retry', 'login'),\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: [\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n
'\n ),\n }),\n }),\n ],\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar').show();\n },\n\n postRender: function() {\n _.defer(() => {\n this.model.save();\n });\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterWithBackLink,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* global u2f */\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Q from 'q';\nimport 'u2f-api-polyfill';\nimport { U2FError } from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FidoUtil from 'util/FidoUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'v1/views/shared/FooterMFA';\n\nfunction getRegisteredKeysSequence(factors) {\n const keys = [];\n\n _.each(factors, function(factor) {\n keys.push({\n version: factor.profile.version,\n keyHandle: factor.profile.credentialId,\n });\n });\n return keys;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-u2f',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'u2f',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'u2f',\n provider: 'FIDO',\n });\n }\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let registeredKeys;\n let appId;\n let nonce;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n appId = factors[0]['profile']['appId'];\n nonce = transaction.challenge.nonce;\n registeredKeys = getRegisteredKeysSequence(factors);\n } else {\n const factorData = transaction.factor;\n\n appId = factorData.profile.appId;\n nonce = factorData.challenge.nonce;\n registeredKeys = [{ version: FidoUtil.getU2fVersion(), keyHandle: factorData.profile.credentialId }];\n }\n self.trigger('request');\n\n const deferred = Q.defer();\n\n u2f.sign(appId, nonce, registeredKeys, function(data) {\n self.trigger('errors:clear');\n if (data.errorCode && data.errorCode !== 0) {\n const isOneFactor = self.options.appState.get('factors').length === 1;\n\n deferred.reject(\n new U2FError({\n xhr: {\n responseJSON: {\n errorSummary: FidoUtil.getU2fVerifyErrorMessageByCode(data.errorCode, isOneFactor),\n },\n },\n })\n );\n } else {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor\n .verify({\n clientData: data.clientData,\n signatureData: data.signatureData,\n rememberDevice: rememberDevice,\n })\n .then(deferred.resolve);\n }\n });\n return deferred.promise;\n });\n })\n .catch(() => {});\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.u2f', 'login'),\n className: 'verify-u2f-form',\n noCancelButton: true,\n save: _.partial(loc, 'verify.u2f.retry', 'login'),\n noButtonBar: function() {\n return !FidoUtil.isU2fAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const result = [];\n\n if (!FidoUtil.isU2fAvailable()) {\n let errorMessageKey = 'u2f.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'u2f.error.factorNotSupported.oneFactor';\n }\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n } else {\n result.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '\\\n {{i18n code=\"piv.cac.card.insert\" bundle=\"login\"}}
\\\n \\\n\\\n
'\n ),\n }),\n })\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n result.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return result;\n },\n\n postRender: function() {\n _.defer(() => {\n if (FidoUtil.isU2fAvailable()) {\n this.model.save();\n } else {\n this.$('[data-se=\"u2f-waiting\"]').addClass('hide');\n }\n });\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').removeClass('hide');\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').addClass('hide');\n this.$('.o-form-button-bar').show();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity:[2, 10], max-params: [2, 11] */\nimport { _, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Q from 'q';\nimport CryptoUtil from 'util/CryptoUtil';\nimport { WebauthnAbortError, WebAuthnError } from 'util/Errors';\nimport FactorUtil from 'util/FactorUtil';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport webauthn from 'util/webauthn';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'v1/views/shared/FooterMFA';\n\nfunction getAllowCredentials(factors) {\n const allowCredentials = [];\n\n _.each(factors, function(factor) {\n allowCredentials.push({\n type: 'public-key',\n id: CryptoUtil.strToBin(factor.profile.credentialId),\n });\n });\n return allowCredentials;\n}\n\nexport default FormController.extend({\n className: 'mfa-verify verify-webauthn',\n Model: {\n props: {\n rememberDevice: 'boolean',\n },\n\n initialize: function() {\n const rememberDevice = FactorUtil.getRememberDeviceValue(this.appState);\n\n // set the initial value for remember device (Cannot do this while defining the\n // local property because this.settings would not be initialized there yet).\n this.set('rememberDevice', rememberDevice);\n this.appState.on('factorSwitched signOut', () => {\n if (this.webauthnAbortController) {\n this.webauthnAbortController.abort();\n this.webauthnAbortController = null;\n }\n });\n },\n\n save: function() {\n this.trigger('request');\n\n return this.doTransaction(function(transaction) {\n let factor;\n\n if (transaction.factorTypes) {\n factor = _.findWhere(transaction.factorTypes, {\n factorType: 'webauthn',\n });\n } else {\n factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n }\n\n const self = this;\n\n return factor.verify().then(function(transaction) {\n let allowCredentials;\n let challenge;\n\n if (transaction.factors) {\n const factors = transaction.factors;\n\n challenge = transaction.challenge;\n allowCredentials = getAllowCredentials(factors);\n } else {\n const factorData = transaction.factor;\n\n challenge = factorData.challenge;\n allowCredentials = getAllowCredentials([factorData]);\n }\n self.trigger('request');\n // verify via browser webauthn js\n\n const options = _.extend({}, challenge, {\n allowCredentials: allowCredentials,\n challenge: CryptoUtil.strToBin(challenge.challenge),\n });\n\n // AbortController is not supported in IE11\n if (typeof AbortController !== 'undefined') {\n self.webauthnAbortController = new AbortController();\n }\n return new Q(\n // navigator.credentials is not supported in IE11\n // eslint-disable-next-line compat/compat\n navigator.credentials.get({\n publicKey: options,\n signal: self.webauthnAbortController && self.webauthnAbortController.signal,\n })\n )\n .then(function(assertion) {\n const rememberDevice = !!self.get('rememberDevice');\n\n return factor.verify({\n clientData: CryptoUtil.binToStr(assertion.response.clientDataJSON),\n authenticatorData: CryptoUtil.binToStr(assertion.response.authenticatorData),\n signatureData: CryptoUtil.binToStr(assertion.response.signature),\n rememberDevice: rememberDevice,\n });\n })\n .catch(function(error) {\n self.trigger('errors:clear');\n // Do not display if it is abort error triggered by code when switching.\n // self.webauthnAbortController would be null if abort was triggered by code.\n if (!self.webauthnAbortController) {\n throw new WebauthnAbortError();\n } else {\n throw new WebAuthnError({\n xhr: { responseJSON: { errorSummary: error.message } },\n });\n }\n })\n .finally(function() {\n // unset webauthnAbortController on successful authentication or error\n self.webauthnAbortController = null;\n });\n });\n })\n .catch(() => {});\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.webauthn.biometric', 'login'),\n className: 'verify-webauthn-form',\n noCancelButton: true,\n save: _.partial(loc, 'mfa.challenge.verify', 'login'),\n noButtonBar: function() {\n return !webauthn.isNewApiAvailable();\n },\n modelEvents: {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n },\n\n formChildren: function() {\n const children = [];\n\n if (webauthn.isNewApiAvailable()) {\n children.push(\n FormType.View({\n View: View.extend({\n template: hbs(\n '{{i18n code=\"verify.u2f.instructions\" bundle=\"login\"}}
\\\n{{i18n code=\"verify.u2f.instructionsBluetooth\" bundle=\"login\"}}
\\\n \\\n\\\n
'\n ),\n }),\n })\n );\n } else {\n let errorMessageKey = 'webauthn.biometric.error.factorNotSupported';\n\n if (this.options.appState.get('factors').length === 1) {\n errorMessageKey = 'webauthn.biometric.error.factorNotSupported.oneFactor';\n }\n children.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc(errorMessageKey, 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n if (this.options.appState.get('allowRememberDevice')) {\n children.push(\n FormType.Input({\n label: false,\n 'label-top': true,\n placeholder: this.options.appState.get('rememberDeviceLabel'),\n className: 'margin-btm-0',\n name: 'rememberDevice',\n type: 'checkbox',\n })\n );\n }\n\n return children;\n },\n\n _startEnrollment: function() {\n this.$('.okta-waiting-spinner').show();\n this.$('.o-form-button-bar').hide();\n },\n\n _stopEnrollment: function() {\n this.$('.okta-waiting-spinner').hide();\n this.$('.o-form-button-bar [type=\"submit\"]')[0].value = loc('verify.u2f.retry', 'login');\n this.$('.o-form-button-bar').show();\n },\n },\n\n postRender: function() {\n _.defer(() => {\n // Trigger browser prompt automatically for other browsers for better UX.\n if (webauthn.isNewApiAvailable() && !BrowserFeatures.isSafari()) {\n this.model.save();\n }\n });\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, loc } from '@okta/courage';\nimport FormController from 'v1/util/FormController';\nimport FormType from 'v1/util/FormType';\nimport webauthn from 'util/webauthn';\nimport HtmlErrorMessageView from 'v1/views/mfa-verify/HtmlErrorMessageView';\nimport FooterMFA from 'v1/views/shared/FooterMFA';\nimport Spinner from 'v1/views/shared/Spinner';\nexport default FormController.extend({\n className: 'mfa-verify verify-windows-hello',\n Model: {\n local: {\n __autoTriggered__: 'boolean',\n },\n\n save: function() {\n if (!webauthn.isAvailable()) {\n return;\n }\n\n this.trigger('request');\n const model = this;\n\n return this.doTransaction(function(transaction) {\n const factor = _.findWhere(transaction.factors, {\n factorType: 'webauthn',\n provider: 'FIDO',\n });\n\n return factor.verify().then(function(verifyData) {\n const factorData = verifyData.factor;\n\n return webauthn\n .getAssertion(factorData.challenge.nonce, [{ id: factorData.profile.credentialId }])\n .then(function(assertion) {\n return factor.verify({\n authenticatorData: assertion.authenticatorData,\n clientData: assertion.clientData,\n signatureData: assertion.signature,\n });\n })\n .then(function(data) {\n model.trigger('sync');\n model.trigger('signIn');\n return data;\n })\n .catch(function(error) {\n switch (error.message) {\n case 'AbortError':\n case 'NotFoundError':\n case 'NotSupportedError':\n model.trigger('abort', error.message);\n return transaction;\n }\n\n throw error;\n });\n });\n });\n },\n },\n\n Form: {\n autoSave: true,\n hasSavingState: false,\n title: _.partial(loc, 'factor.windowsHello', 'login'),\n subtitle: function() {\n return webauthn.isAvailable() ? loc('verify.windowsHello.subtitle', 'login') : '';\n },\n save: _.partial(loc, 'verify.windowsHello.save', 'login'),\n\n customSavingState: {\n stop: 'abort',\n },\n\n modelEvents: function() {\n if (!webauthn.isAvailable()) {\n return {};\n }\n\n return {\n request: '_startEnrollment',\n error: '_stopEnrollment',\n abort: '_stopEnrollment',\n signIn: '_successEnrollment',\n };\n },\n\n noButtonBar: function() {\n return !webauthn.isAvailable();\n },\n\n formChildren: function() {\n const result = [];\n\n if (!webauthn.isAvailable()) {\n result.push(\n FormType.View(\n { View: new HtmlErrorMessageView({ message: loc('enroll.windowsHello.error.notWindows', 'login') }) },\n { selector: '.o-form-error-container' }\n )\n );\n }\n\n result.push(FormType.View({ View: new Spinner({ model: this.model, visible: false }) }));\n\n return result;\n },\n\n postRender: function() {\n if (this.options.appState.get('factors').length === 1 && !this.model.get('__autoTriggered__')) {\n this.model.set('__autoTriggered__', true);\n this.model.save();\n }\n },\n\n _startEnrollment: function() {\n this.subtitle = loc('verify.windowsHello.subtitle.loading', 'login');\n\n this.model.trigger('spinner:show');\n this._resetErrorMessage();\n\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _stopEnrollment: function(errorMessage) {\n this.subtitle = loc('verify.windowsHello.subtitle', 'login');\n\n this.model.trigger('spinner:hide');\n this.$('.o-form-button-bar').removeClass('hide');\n\n let message;\n\n switch (errorMessage) {\n case 'NotFoundError':\n message = this.options.appState.get('factors').length > 1\n ? loc('verify.windowsHello.error.notFound.selectAnother', 'login')\n : loc('verify.windowsHello.error.notFound', 'login');\n break;\n\n case 'NotSupportedError':\n message = loc('enroll.windowsHello.error.notConfiguredHtml', 'login');\n break;\n }\n\n this._resetErrorMessage();\n\n if (message) {\n const messageView = new HtmlErrorMessageView({\n message: message,\n });\n\n this.$('.o-form-error-container').addClass('o-form-has-errors');\n this.add(messageView, { selector: '.o-form-error-container' });\n this._errorMessageView = this.last();\n }\n\n this.render();\n },\n\n _successEnrollment: function() {\n this.subtitle = this.settings.get('brandName')\n ? loc('verify.windowsHello.subtitle.signingIn.specific', 'login', [this.settings.get('brandName')])\n : loc('verify.windowsHello.subtitle.signingIn.generic', 'login');\n this.render();\n this.$('.o-form-button-bar').addClass('hide');\n },\n\n _resetErrorMessage: function() {\n this._errorMessageView && this._errorMessageView.remove();\n this._errorMessageView = undefined;\n this.clearErrors();\n },\n },\n\n back: function() {\n // Empty function on verify controllers to prevent users\n // from navigating back during 'verify' using the browser's\n // back button. The URL will still change, but the view will not\n // More details in OKTA-135060.\n },\n\n Footer: FooterMFA,\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Enums from 'util/Enums';\nexport default View.extend({\n template: hbs(\n '\\\n {{#if showLink}}\\\n \\\n {{i18n code=\"goback\" bundle=\"login\"}}\\\n \\\n {{/if}}\\\n '\n ),\n className: 'auth-footer',\n events: {\n 'click .help': function(e) {\n e.preventDefault();\n this.back();\n },\n },\n back: function() {\n this.state.set('navigateDir', Enums.DIRECTION_BACK);\n this.options.appState.trigger('navigate', '');\n },\n getTemplateData: function() {\n const error = this.model.appState.get('flashError');\n const showLink = error.is && error.is('terminal');\n return {\n showLink: showLink\n };\n }\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport FormController from 'v1/util/FormController';\nimport FooterWithBackLinkOnError from 'v1/views/shared/FooterWithBackLinkOnError';\nexport default FormController.extend({\n className: 'error-state',\n Model: {},\n Form: {\n noButtonBar: true,\n },\n Footer: FooterWithBackLinkOnError,\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, Model } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Factor from 'v1/models/Factor';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport { UnsupportedBrowserError } from 'util/Errors';\nconst DEFAULT_APP_LOGO = '/img/logos/default.png';\n\n// Keep track of stateMachine with this special model. Some reasons to not\n// keep it generic:\n// 1. We know exactly what we're using appState for by requiring props\n// 2. Can have some derived functions to help us translate the lastAuthRes\n\nconst USER_NOT_SEEN_ON_DEVICE = '/img/security/unknown.png';\nconst UNDEFINED_USER = '/img/security/default.png';\nconst NEW_USER = '/img/security/unknown-device.png';\nconst NEW_USER_IMAGE_DESCRIPTION = '';\nconst UNDEFINED_USER_IMAGE_DESCRIPTION = '';\nconst UNKNOWN_IMAGE_DESCRIPTION = '';\nconst securityImageUrlTpl = hbs('{{baseUrl}}/login/getimage?username={{username}}');\n\nfunction getSecurityImage(baseUrl, username, deviceFingerprint) {\n // When the username is empty, we want to show the default image.\n if (_.isEmpty(username) || _.isUndefined(username)) {\n return Q({\n securityImage: UNDEFINED_USER,\n securityImageDescription: UNDEFINED_USER_IMAGE_DESCRIPTION,\n });\n }\n\n // Reserved characters in the username must be escaped before the query can be safely executed\n username = encodeURIComponent(username);\n const url = securityImageUrlTpl({ baseUrl: baseUrl, username: username });\n const data = {\n url: url,\n dataType: 'json',\n };\n\n if (deviceFingerprint) {\n data['headers'] = { 'X-Device-Fingerprint': deviceFingerprint };\n }\n return Q($.ajax(data)).then(function(res) {\n if (res.pwdImg === USER_NOT_SEEN_ON_DEVICE) {\n // When we get an unknown.png security image from OKTA,\n // we want to show the unknown-device security image.\n // We are mapping the server's img url to a new one because\n // we still need to support the original login page.\n return {\n securityImage: NEW_USER,\n securityImageDescription: NEW_USER_IMAGE_DESCRIPTION,\n };\n }\n return {\n securityImage: res.pwdImg,\n securityImageDescription: res.imageDescription || UNKNOWN_IMAGE_DESCRIPTION,\n };\n });\n}\n\nfunction getMinutesString(factorLifetimeInMinutes) {\n if (factorLifetimeInMinutes > 60 && factorLifetimeInMinutes <= 1440) {\n const lifetimeInHours = factorLifetimeInMinutes / 60;\n\n return loc('hours', 'login', [lifetimeInHours]);\n } else if (factorLifetimeInMinutes > 1440) {\n const lifetimeInDays = factorLifetimeInMinutes / 1440;\n\n return loc('days', 'login', [lifetimeInDays]);\n }\n //Use minutes as the time unit by default\n if (factorLifetimeInMinutes === 1) {\n return loc('minutes.oneMinute', 'login');\n }\n return loc('minutes', 'login', [factorLifetimeInMinutes]);\n}\n\nfunction getGracePeriodRemainingDays(gracePeriodEndDate) {\n const endDate = new Date(gracePeriodEndDate).getTime();\n const remainingDays = Math.floor((endDate - new Date().getTime()) / (1000 * 3600 * 24));\n\n return remainingDays;\n}\n\nfunction combineFactorsObjects(factorTypes, factors) {\n const addedFactorTypes = [];\n const combinedFactors = [];\n\n _.each(factors, function(factor) {\n const factorType = factor.factorType;\n\n if (!_.contains(addedFactorTypes, factorType)) {\n const factorTypeObj = _.findWhere(factorTypes, { factorType: factorType });\n\n if (factorTypeObj) {\n addedFactorTypes.push(factorType);\n combinedFactors.push(factorTypeObj);\n } else {\n combinedFactors.push(factor);\n }\n }\n });\n return combinedFactors;\n}\n\nexport default Model.extend({\n initialize: function() {\n // Handle this in initialize (as opposed to a derived property) because\n // the operation is asynchronous\n if (this.settings.get('features.securityImage')) {\n const self = this;\n\n this.listenTo(this, 'change:username', function(model, username) {\n getSecurityImage(this.get('baseUrl'), username, this.get('deviceFingerprint'))\n .then(function(image) {\n model.set('securityImage', image.securityImage);\n model.set('securityImageDescription', image.securityImageDescription);\n model.unset('deviceFingerprint'); //Fingerprint can only be used once\n })\n .fail(function(jqXhr) {\n // Only notify the consumer on a CORS error\n if (BrowserFeatures.corsIsNotEnabled(jqXhr)) {\n self.settings.callGlobalError(new UnsupportedBrowserError(loc('error.enabled.cors')));\n } else {\n throw jqXhr;\n }\n })\n .done();\n });\n }\n },\n\n local: {\n baseUrl: 'string',\n lastAuthResponse: ['object', true, {}],\n transaction: 'object',\n transactionError: 'object',\n username: 'string',\n factors: 'object',\n policy: 'object',\n securityImage: ['string', true, UNDEFINED_USER],\n securityImageDescription: ['string', true, UNDEFINED_USER_IMAGE_DESCRIPTION],\n userCountryCode: 'string',\n userPhoneNumber: 'string',\n factorActivationType: 'string',\n flashError: 'object',\n beaconType: 'string',\n deviceFingerprint: 'string', // valid only once\n typingPattern: 'string',\n // Note: languageCode is special in that it is shared between Settings\n // and AppState. Settings is the *configured* language, and is static.\n // AppState is the dynamic language state - it can be changed via a\n // language picker, etc.\n // Note: this is conceptial feasible but not yet being implemented.\n languageCode: ['string', true],\n disableUsername: ['boolean', false, false],\n trapMfaRequiredResponse: ['boolean', false, false],\n lastFailedChallengeFactorData: ['object', false],\n },\n\n setAuthResponse: function(res) {\n // Because of MFA_CHALLENGE (i.e. DUO), we need to remember factors\n // across auth responses. Not doing this, for example, results in being\n // unable to switch away from the duo factor dropdown.\n if (res._embedded && res._embedded.policy) {\n this.set('policy', res._embedded.policy);\n }\n\n if (res._embedded && res._embedded.factors) {\n let factors = res._embedded.factors;\n\n if (res._embedded.factorTypes) {\n factors = combineFactorsObjects(res._embedded.factorTypes, factors);\n }\n\n const factorsObject = _.map(factors, factor => {\n factor.settings = this.settings;\n factor.appState = this;\n return factor;\n });\n\n this.set('factors', new Factor.Collection(factorsObject, { parse: true }));\n }\n\n this.set('lastAuthResponse', res);\n },\n\n clearLastAuthResponse: function() {\n this.set('lastAuthResponse', {});\n },\n\n setLastFailedChallengeFactorData: function() {\n this.set('lastFailedChallengeFactorData', {\n factor: this.get('factor'),\n errorMessage: this.get('factorResultErrorMessage'),\n });\n },\n\n clearLastFailedChallengeFactorData: function() {\n this.unset('lastFailedChallengeFactorData');\n },\n\n getUser: function() {\n return this.get('user');\n },\n\n derived: {\n isSuccessResponse: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'SUCCESS';\n },\n },\n isMfaRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_REQUIRED' || res.status === 'FACTOR_REQUIRED';\n },\n },\n isProfileRequired: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PROFILE_REQUIRED';\n },\n },\n isMfaEnroll: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL' || res.status === 'FACTOR_ENROLL';\n },\n },\n isMfaChallenge: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_CHALLENGE' || res.status === 'FACTOR_CHALLENGE';\n },\n },\n isSMSPasswordRecovery: {\n deps: ['lastAuthResponse'],\n fn: function({ status, factorType, recoveryType }) {\n return status === 'RECOVERY_CHALLENGE' &&\n factorType?.toLowerCase() === 'sms' &&\n recoveryType?.toLowerCase() === 'password';\n }\n },\n isUnauthenticated: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'UNAUTHENTICATED';\n },\n },\n isMfaRejected: {\n // MFA failures are usually error responses\n // except in the case of Okta Push, when a\n // user clicks 'deny' on his phone or OV app\n // version is below a required version no.\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'REJECTED';\n },\n },\n isMfaTimeout: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'TIMEOUT';\n },\n },\n isMfaEnrollActivate: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'MFA_ENROLL_ACTIVATE' || res.status === 'FACTOR_ENROLL_ACTIVATE';\n },\n },\n isWaitingForActivation: {\n deps: ['isMfaEnrollActivate', 'lastAuthResponse'],\n fn: function(isMfaEnrollActivate, res) {\n return isMfaEnrollActivate && res.factorResult === 'WAITING';\n },\n },\n isWaitingForNumberChallenge: {\n deps: ['lastAuthResponse', 'isMfaChallenge'],\n fn: function(res, isMfaChallenge) {\n if (\n isMfaChallenge &&\n res &&\n res.factorResult === 'WAITING' &&\n res._embedded &&\n res._embedded.factor &&\n res._embedded.factor._embedded &&\n res._embedded.factor._embedded.challenge\n ) {\n return true;\n }\n return false;\n },\n },\n hasMultipleFactorsAvailable: {\n deps: ['factors', 'isMfaRequired', 'isMfaChallenge', 'isUnauthenticated'],\n fn: function(factors, isMfaRequired, isMfaChallenge, isUnauthenticated) {\n if (!isMfaRequired && !isMfaChallenge && !isUnauthenticated) {\n return false;\n }\n return factors && factors.length > 1;\n },\n },\n promptForFactorInUnauthenticated: {\n deps: ['lastAuthResponse', 'factors'],\n fn: function(res, factors) {\n if (res.status !== 'UNAUTHENTICATED') {\n return false;\n }\n return factors && factors.length > 0;\n },\n },\n userId: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user.id;\n },\n },\n isIdxStateToken: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res && _.isString(res.stateToken) && res.stateToken.startsWith('01');\n },\n },\n isPwdExpiringSoon: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.status === 'PASSWORD_WARN';\n },\n },\n passwordExpireDays: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.policy || !res._embedded.policy.expiration) {\n return null;\n }\n return res._embedded.policy.expiration.passwordExpireDays;\n },\n },\n isPwdManagedByOkta: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return true;\n }\n return false;\n },\n },\n passwordExpiredWebsiteName: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title) {\n return null;\n }\n return res._links.next.title;\n },\n },\n passwordExpiredLinkUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || !res._links.next.title || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n recoveryType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.recoveryType;\n },\n },\n factorType: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorType;\n },\n },\n factor: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factor) {\n return null;\n }\n return res._embedded.factor;\n },\n },\n activatedFactorId: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.id : null;\n },\n },\n activatedFactorType: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.factorType : null;\n },\n },\n activatedFactorProvider: {\n deps: ['factor'],\n fn: function(factor) {\n return factor ? factor.provider : null;\n },\n },\n qrcode: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation._links.qrcode.href;\n } catch (err) {\n return null;\n }\n },\n },\n activationSendLinks: {\n deps: ['factor'],\n fn: function(factor) {\n let sendLinks;\n\n try {\n sendLinks = factor._embedded.activation._links.send;\n } catch (err) {\n sendLinks = [];\n }\n return sendLinks;\n },\n },\n textActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'sms' });\n\n return item ? item.href : null;\n },\n },\n emailActivationLinkUrl: {\n deps: ['activationSendLinks'],\n fn: function(activationSendLinks) {\n const item = _.findWhere(activationSendLinks, { name: 'email' });\n\n return item ? item.href : null;\n },\n },\n sharedSecret: {\n deps: ['factor'],\n fn: function(factor) {\n try {\n return factor._embedded.activation.sharedSecret;\n } catch (err) {\n return null;\n }\n },\n },\n duoEnrollActivation: {\n deps: ['factor'],\n fn: function(factor) {\n if (!factor || !factor._embedded || !factor._embedded.activation) {\n return null;\n }\n return factor._embedded.activation;\n },\n },\n prevLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.prev) {\n return res._links.prev.href;\n }\n return null;\n },\n },\n skipLink: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (res._links && res._links.skip) {\n return res._links.skip.href;\n }\n return null;\n },\n },\n gracePeriodRemainingDays: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.gracePeriod && policy.gracePeriod.endDate) {\n return getGracePeriodRemainingDays(policy.gracePeriod.endDate);\n }\n return null;\n },\n },\n user: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.user) {\n return null;\n }\n return res._embedded.user;\n },\n },\n recoveryQuestion: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.recovery_question) {\n return null;\n }\n return user.recovery_question.question;\n },\n },\n userProfile: {\n deps: ['user'],\n fn: function(user) {\n if (!user || !user.profile) {\n return null;\n }\n return user.profile;\n },\n },\n userConsentName: {\n deps: ['userProfile', 'username'],\n fn: function(userProfile, username) {\n if (!userProfile || _.isEmpty(userProfile.firstName)) {\n return username;\n }\n if (_.isEmpty(userProfile.lastName)) {\n return userProfile.firstName;\n }\n return userProfile.firstName + ' ' + userProfile.lastName.charAt(0) + '.';\n },\n },\n userEmail: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || !userProfile.login) {\n return null;\n }\n return userProfile.login;\n },\n },\n userFullName: {\n deps: ['userProfile'],\n fn: function(userProfile) {\n if (!userProfile || (!userProfile.firstName && !userProfile.lastName)) {\n return '';\n }\n return userProfile.firstName + ' ' + userProfile.lastName;\n },\n },\n defaultAppLogo: {\n deps: ['baseUrl'],\n fn: function(baseUrl) {\n return baseUrl + DEFAULT_APP_LOGO;\n },\n },\n expiresAt: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.expiresAt;\n },\n },\n target: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.target;\n },\n },\n targetLabel: {\n deps: ['target'],\n fn: function(target) {\n if (!target) {\n return null;\n }\n return target.label;\n },\n },\n targetLogo: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links.logo;\n },\n },\n targetTermsOfService: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['terms-of-service'];\n },\n },\n targetPrivacyPolicy: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['privacy-policy'];\n },\n },\n targetClientURI: {\n deps: ['target'],\n fn: function(target) {\n if (!target || !target._links) {\n return null;\n }\n return target._links['client-uri'];\n },\n },\n scopes: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.scopes;\n },\n },\n issuer: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.authentication?.issuer?.uri;\n }\n },\n hasExistingPhones: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'sms', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n hasExistingPhonesForCall: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded || !res._embedded.factors) {\n return false;\n }\n const factors = res._embedded.factors;\n\n const factor = _.findWhere(factors, { factorType: 'call', provider: 'OKTA' });\n\n if (!factor || !factor._embedded) {\n return false;\n }\n\n return !!factor._embedded.phones.length;\n },\n },\n isUndefinedUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === UNDEFINED_USER;\n },\n },\n isNewUser: {\n deps: ['securityImage'],\n fn: function(securityImage) {\n return securityImage === NEW_USER;\n },\n },\n allowRememberDevice: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.allowRememberDevice;\n },\n },\n rememberDeviceLabel: {\n deps: ['policy'],\n fn: function(policy) {\n if (policy && policy.rememberDeviceLifetimeInMinutes > 0) {\n const timeString = getMinutesString(policy.rememberDeviceLifetimeInMinutes);\n\n return loc('rememberDevice.timebased', 'login', [timeString]);\n } else if (policy && policy.rememberDeviceLifetimeInMinutes === 0) {\n return loc('rememberDevice.devicebased', 'login');\n }\n return loc('rememberDevice', 'login');\n },\n },\n rememberDeviceByDefault: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.rememberDeviceByDefault;\n },\n },\n factorsPolicyInfo: {\n deps: ['policy'],\n fn: function(policy) {\n return policy && policy.factorsPolicyInfo ? policy.factorsPolicyInfo : null;\n },\n },\n verifyCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'redirect' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n enrollCustomFactorRedirectUrl: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._links || !res._links.next || res._links.next.name !== 'activate' || !res._links.next.href) {\n return null;\n }\n return res._links.next.href;\n },\n },\n isFactorResultFailed: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res.factorResult === 'FAILED';\n },\n },\n factorResultErrorMessage: {\n deps: ['lastAuthResponse', 'isFactorResultFailed'],\n fn: function(res, isFactorResultFailed) {\n if (isFactorResultFailed) {\n return res.factorResultMessage || loc('oform.error.unexpected', 'login');\n }\n return null;\n },\n },\n deviceActivationStatus: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n if (!res._embedded) {\n return null;\n }\n return res._embedded.deviceActivationStatus;\n },\n },\n usingDeviceFlow: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return !!(res._embedded && res._embedded.usingDeviceFlow);\n },\n },\n userCode: {\n deps: ['lastAuthResponse'],\n fn: function(res) {\n return res?._embedded?.userCode;\n },\n },\n },\n\n parse: function(options) {\n this.settings = options.settings;\n return _.extend(_.omit(options, 'settings'), {\n languageCode: this.settings.get('languageCode'),\n userCountryCode: this.settings.get('countryCode'),\n });\n },\n});\n","const SUPPORTED_SOCIAL_IDPS = [\n 'facebook',\n 'google',\n 'linkedin',\n 'microsoft',\n 'apple',\n 'github',\n 'gitlab',\n 'yahoo',\n 'line',\n 'paypal',\n 'paypal_sandbox',\n 'salesforce',\n 'amazon',\n 'yahoojp',\n 'discord',\n 'adobe',\n 'orcid',\n 'spotify',\n 'xero',\n 'quickbooks',\n];\nexport default {\n SUPPORTED_SOCIAL_IDPS,\n};\n","/* eslint max-statements: [2, 22], complexity: [2, 12] */\n\n/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, Model, loc, internal, ModelProperty } from '@okta/courage';\nimport config from 'config/config.json';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Q from 'q';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport {\n ConfigError,\n UnsupportedBrowserError\n} from 'util/Errors';\nimport IDP from 'util/IDP';\nimport Logger from 'util/Logger';\nimport Util from 'util/Util';\nimport CountryUtil from 'util/CountryUtil';\nimport { OktaAuth } from '@okta/okta-auth-js';\nconst SharedUtil = internal.util.Util;\nconst assetBaseUrlTpl = hbs('https://global.oktacdn.com/okta-signin-widget/{{version}}');\n\nconst local: Record{{i18n code=\"verify.webauthn.biometric.instructions\" bundle=\"login\"}}
\\\n \\\n\\\n \\\n
\\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Animations from 'util/Animations';\nimport LoadingBeacon from 'v1/views/shared/LoadingBeacon';\nconst NO_BEACON_CLS = 'no-beacon';\nconst LOADING_BEACON_CLS = 'beacon-small beacon-loading';\n\nfunction isLoadingBeacon(beacon) {\n return beacon && beacon.equals(LoadingBeacon);\n}\n\nfunction removeBeacon(view) {\n // There are some timing issues with removing beacons (i.e. the case of\n // transitioning from loadingBeacon -> loadingBeacon)\n if (!view.currentBeacon) {\n return;\n }\n view.currentBeacon.remove();\n view.currentBeacon = null;\n}\n\nfunction addBeacon(view, NextBeacon, selector, options) {\n view.add(NextBeacon, {\n selector: selector,\n options: options,\n });\n view.currentBeacon = view.first();\n}\n\nfunction typeOfTransition(currentBeacon, NextBeacon, options) {\n if (!currentBeacon && !NextBeacon) {\n return 'none';\n }\n // Show Loading beacon\n if (!currentBeacon && options.loading) {\n return 'load';\n }\n // Swap/Hide Loading beacon\n if (currentBeacon && isLoadingBeacon(currentBeacon)) {\n return NextBeacon ? 'swap' : 'unload';\n }\n if (currentBeacon && currentBeacon.equals(NextBeacon, options)) {\n return 'same';\n }\n if (!currentBeacon && NextBeacon) {\n return 'add';\n }\n if (currentBeacon && !NextBeacon) {\n return 'remove';\n }\n if (currentBeacon instanceof NextBeacon) {\n return 'fade';\n }\n // If none of the above\n // then we are changing the type of beacon\n // ex. from SecurityBeacon to FactorBeacon\n return 'swap';\n}\n\nexport default class Header extends View {\n currentBeacon;\n \n preinitialize(...args) {\n this.currentBeacon = null;\n /* eslint-disable @okta/okta/no-unlocalized-text-in-templates */\n this.template = hbs(\n '\\\n \\\n {{#if logo}}\\\n
\\\n {{/if}}\\\n \\\n
\\\n \\\n '\n );\n /* eslint-enable @okta/okta/no-unlocalized-text-in-templates */\n View.prototype.preinitialize.apply(this, args);\n }\n\n\n // Attach a 'no-beacon' class if the security image feature\n // is not passed in to prevent the beacon from jumping.\n initialize(options) {\n if (!options.settings.get('features.securityImage')) {\n this.$el.addClass(NO_BEACON_CLS);\n // To show/hide the spinner when there is no security image,\n // listen to the appState's loading/removeLoading events.\n this.listenTo(options.appState, 'loading', this.setLoadingBeacon);\n this.listenTo(options.appState, 'removeLoading', this.removeLoadingBeacon);\n }\n }\n\n /* eslint complexity: 0 */\n setBeacon(NextBeacon, options) {\n const selector = '[data-type=\"beacon-container\"]';\n const container = this.$(selector);\n const transition = typeOfTransition(this.currentBeacon, NextBeacon, options);\n\n switch (transition) {\n case 'none':\n this.$el.addClass(NO_BEACON_CLS);\n return;\n case 'same':\n return;\n case 'add':\n this.$el.removeClass(NO_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'remove':\n this.$el.addClass(NO_BEACON_CLS);\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n case 'fade':\n // Other transitions are performed on the beacon container,\n // but this transition is on the content inside the beacon.\n // For a SecurityBeacon the username change will update the\n // AppState and trigger an transition to a new Becon\n // Since there is no url change this method is not called.\n // For a FactorBeacon a page refresh has occurred\n // so we execute the beacon's own transition method.\n if (!this.currentBeacon.fadeOut) {\n throw new Error('The current beacon is missing the \"fadeOut\" method');\n }\n options.animate = true;\n return this.currentBeacon\n .fadeOut()\n .then(() => {\n removeBeacon(this);\n addBeacon(this, NextBeacon, selector, options);\n })\n .done(); // TODO: can this be removed if fadeOut returns standard ES6 Promise?\n case 'swap':\n return Animations.swapBeacons({\n $el: container,\n swap: () => {\n const isLoading = isLoadingBeacon(this.currentBeacon);\n\n // Order of these calls is important for -\n // loader --> security/factor beacon swap.\n removeBeacon(this);\n if (isLoading) {\n container.removeClass(LOADING_BEACON_CLS);\n this.$el.removeClass(NO_BEACON_CLS);\n }\n addBeacon(this, NextBeacon, selector, options);\n },\n }).done(); // TODO: can this be removed if Animations.swapBeacons returns standard ES6 Promise?\n case 'load':\n // Show the loading beacon. Add a couple of classes\n // before triggering the add beacon code.\n container.addClass(LOADING_BEACON_CLS);\n addBeacon(this, NextBeacon, selector, options);\n return Animations.explode(container);\n case 'unload':\n // Hide the loading beacon.\n return this.removeLoadingBeacon();\n default:\n throw new Error('the \"' + transition + '\" is not recognized');\n }\n }\n\n // Show the loading beacon when the security image feature is not enabled.\n setLoadingBeacon(isLoading) {\n if (!isLoading || isLoadingBeacon(this.currentBeacon)) {\n return;\n }\n this.setBeacon(LoadingBeacon, { loading: true });\n }\n\n // Hide the beacon on primary auth failure. On primary auth success, setBeacon does this job.\n removeLoadingBeacon() {\n const container = this.$('[data-type=\"beacon-container\"]');\n\n return Animations.implode(container)\n .then(() => {\n removeBeacon(this);\n container.removeClass(LOADING_BEACON_CLS);\n })\n .done(); // TODO: can this be removed if Animations.implode returns standard ES6 Promise?\n }\n\n getTemplateData() {\n return this.settings.toJSON({ verbose: true });\n }\n\n getContentEl() {\n return this.$('.auth-content-inner');\n }\n}\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Animations from 'util/Animations';\n\nfunction setBackgroundImage(el, appState) {\n const imgSrc = appState.get('securityImage');\n const imgDescription = appState.get('securityImageDescription');\n const isUndefinedUser = appState.get('isUndefinedUser');\n const isNewUser = appState.get('isNewUser');\n const isSecurityImage = !isUndefinedUser && !isNewUser;\n // NOTE: The imgSrc is returned by the server so that every\n // user has a unique image. However new and undefined user states\n // are hard coded into the css and the value returned by the server\n // is ignored.\n\n el.css('background-image', '');\n el.removeClass('new-user undefined-user');\n if (isNewUser) {\n el.addClass('new-user');\n return;\n }\n if (isUndefinedUser) {\n el.addClass('undefined-user');\n return;\n }\n if (isSecurityImage) {\n // TODO: Newer versions of qtip will remove aria-describedby on their own when destroy() is called.\n el.removeAttr('aria-describedby');\n el.find('.accessibility-text').text(imgDescription);\n el.css('background-image', 'url(' + _.escape(imgSrc) + ')');\n return;\n }\n}\n\nfunction antiPhishingMessage(image, host) {\n $(window).on(\n 'resize.securityBeaconQtip',\n _.debounce(function() {\n if (image.is(':visible')) {\n image.qtip('show');\n }\n }, 300)\n );\n\n // Show the message that the user has not logged in from this device before.\n image.qtip({\n prerender: true,\n content: {\n text: loc('primaryauth.newUser.tooltip', 'login', [_.escape(host)]),\n button: loc('primaryauth.newUser.tooltip.close', 'login'),\n },\n style: {\n classes: 'okta-security-image-tooltip security-image-qtip qtip-custom qtip-shadow qtip-rounded',\n tip: { height: 12, width: 16 },\n },\n position: {\n my: 'top center',\n at: 'center',\n target: $('.auth-beacon-security'),\n adjust: { method: 'flip', scroll: false, resize: true },\n effect: false,\n },\n hide: { event: false, fixed: true },\n show: { event: false, delay: 200 },\n events: {\n move: function(event, api) {\n if (!api.elements.target.is(':visible')) {\n // Have to hide it immediately, with no effect\n api.set('hide.effect', false);\n api.hide();\n api.set('hide.effect', true);\n }\n },\n },\n });\n\n // It is necessary to delay toggle to the next render cycle, since qtip internally defers some setup tasks.\n setTimeout(() => {\n image.qtip('toggle', image.is(':visible'));\n }, 0);\n}\n\nfunction destroyAntiPhishingMessage(image) {\n image.qtip('destroy');\n $(window).off('resize.securityBeaconQtip');\n}\n\nasync function updateSecurityImage($el, appState, animate) {\n const image = $el.find('.auth-beacon-security');\n const border = $el.find('.js-auth-beacon-border');\n const hasBorder = !appState.get('isUndefinedUser');\n const hasAntiPhishing = appState.get('isNewUser');\n const radialProgressBar = $el.find('.radial-progress-bar');\n const host = appState.get('baseUrl').match(/https?:\\/\\/(.[^/]+)/)[1];\n const duration = 200;\n\n if (!animate) {\n // Do not animate the security beacon\n // This occurs when initializing the form\n setBackgroundImage(image, appState);\n border.toggleClass('auth-beacon-border', hasBorder);\n return;\n }\n\n destroyAntiPhishingMessage(image);\n\n // Animate loading the security beacon\n if (!hasBorder) {\n // This occurs when appState username is blank\n // we do not yet know if the user is recognized\n image.fadeOut(duration, function() {\n setBackgroundImage(image, appState);\n border.removeClass('auth-beacon-border');\n image.fadeIn(duration);\n });\n } else {\n // Animate loading the security beacon with a loading bar for the border\n // This occurs when the username has been checked against Okta.\n border.removeClass('auth-beacon-border');\n await Animations.radialProgressBar({\n $el: radialProgressBar,\n swap() {\n image.fadeOut(duration, () => {\n setBackgroundImage(image, appState);\n image.fadeIn(duration);\n });\n },\n });\n border.addClass('auth-beacon-border');\n if (hasAntiPhishing) {\n antiPhishingMessage(image, host);\n }\n }\n}\n\nexport default View.extend({\n template: hbs(\n '\\\n
\\\n \\\n
\\\n \\\n \\\n
\\\n '\n ),\n className: 'js-security-beacon',\n\n initialize: function(options) {\n this.update = _.partial(updateSecurityImage, this.$el, options.appState);\n this.listenTo(options.appState, 'change:securityImage', this.update);\n this.listenTo(options.appState, 'loading', function(isLoading) {\n this.$el.toggleClass('beacon-loading', isLoading);\n this.removeAntiPhishingMessage();\n });\n this.options.appState.set('beaconType', 'security');\n\n this.listenTo(options.appState, 'navigate', this.removeAntiPhishingMessage);\n },\n\n postRender: function() {\n this.update(false);\n },\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n\n removeAntiPhishingMessage: function() {\n const image = this.$el.find('.auth-beacon-security');\n\n image.qtip('destroy');\n },\n});\n","/*!\n * Copyright (c) 2018-Present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Enums from 'util/Enums';\nconst fn = {};\n\nconst template = function(colors) {\n return `\n#okta-sign-in.auth-container .button-primary,\n#okta-sign-in.auth-container .button-primary:active,\n#okta-sign-in.auth-container .button-primary:focus { background: ${colors.brand}; }\n#okta-sign-in.auth-container .button-primary:hover { background: ${fn.lighten(colors.brand, 0.05)}; }\n#okta-sign-in.auth-container .button.button-primary.link-button-disabled {\n background: ${colors.brand};\n opacity: 0.5;\n}\n `;\n};\n\n// visible for testing\nfn.lighten = function(hex, lum) {\n lum = lum || 0;\n hex = hex.substr(1);\n let newHex = '#';\n\n for (var i = 0; i < 3; i++) {\n let c = parseInt(hex.substr(i * 2, 2), 16);\n\n c = Math.round(Math.min(Math.max(0, c + c * lum), 255)).toString(16);\n newHex += ('00' + c).substr(c.length);\n }\n return newHex;\n};\n\nfn.addStyle = function(colors, cspNonce) {\n const css = template(colors);\n const main = document.getElementById(Enums.WIDGET_CONTAINER_ID);\n const style = document.createElement('style');\n\n style.id = Enums.WIDGET_CONFIG_COLORS_ID;\n style.type = 'text/css';\n if (cspNonce) {\n style.nonce = cspNonce;\n }\n style.appendChild(document.createTextNode(css));\n\n main.appendChild(style);\n};\n\nfn.isLoaded = function() {\n return !!document.getElementById(Enums.WIDGET_CONFIG_COLORS_ID);\n};\n\nexport default fn;\n","import Bundles from 'util/Bundles';\nimport config from 'config/config.json';\n\nfunction loadLanguage(appState, settings) {\n const languageCode = appState.get('languageCode') || settings.get('languageCode') || config.defaultLanguage;\n const i18n = settings.get('i18n');\n const assetBaseUrl = settings.get('assets.baseUrl');\n const assetRewrite = settings.get('assets.rewrite');\n const supportedLanguages = settings.get('supportedLanguages');\n\n const timeout = setTimeout(function() {\n // Trigger a spinner if we're waiting on a request for a new language.\n appState.trigger('loading', true);\n }, 200);\n\n return Bundles.loadLanguage(languageCode, i18n, {\n baseUrl: assetBaseUrl,\n rewrite: assetRewrite,\n }, supportedLanguages).then(function() {\n clearTimeout(timeout);\n appState.trigger('loading', false);\n });\n // TODO: what if load language error?\n}\n\nexport default {\n loadLanguage,\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: [2, 16], max-statements: [2, 20] */\n// BaseLoginRouter contains the more complicated router logic - rendering/\n// transition, etc. Most router changes should happen in LoginRouter (which is\n// responsible for adding new routes)\nimport { _, $, Backbone, Router, loc } from '@okta/courage';\nimport AppState from 'v1/models/AppState';\nimport Settings from 'models/Settings';\nimport Bundles from 'util/Bundles';\nimport Logger from 'util/Logger';\nimport AuthContainer from 'v1/views/shared/AuthContainer';\nimport Header from 'v1/views/shared/Header';\nimport SecurityBeacon from 'v1/views/shared/SecurityBeacon';\nimport Animations from 'util/Animations';\nimport BrowserFeatures from 'util/BrowserFeatures';\nimport ColorsUtil from 'util/ColorsUtil';\nimport Enums from 'util/Enums';\nimport { ConfigError } from 'util/Errors';\nimport RouterUtil from 'v1/util/RouterUtil';\nimport Util from 'util/Util';\nimport LanguageUtil from 'util/LanguageUtil';\n\nfunction isStateLessRouteHandler(router, fn) {\n return _.find(router.stateLessRouteHandlers, function(routeName) {\n return fn === router[routeName];\n });\n}\n\nfunction beaconIsAvailable(Beacon, settings) {\n if (!Beacon) {\n return false;\n }\n if (Beacon === SecurityBeacon) {\n return settings.get('features.securityImage');\n }\n return true;\n}\n\nexport default Router.extend({\n Events: Backbone.Events,\n\n initialize: function(options) {\n // Create a default success and/or error handler if\n // one is not provided.\n if (!options.globalSuccessFn) {\n options.globalSuccessFn = function() {};\n }\n if (!options.globalErrorFn) {\n options.globalErrorFn = function(err) {\n Logger.error(err);\n };\n }\n\n this.settings = new Settings(_.omit(options, 'el'), { parse: true });\n\n if (!options.el) {\n this.settings.callGlobalError(new ConfigError(loc('error.required.el')));\n }\n\n $('body > div').on('click', function() {\n // OKTA-69769 Tooltip wont close on iPhone/iPad\n // Registering a click handler on the first div\n // allows a tap that falls outside the tooltip\n // to be registered as a tap by iOS\n // and then the open tooltip will lose focus and close.\n });\n\n this.appState = new AppState(\n {\n baseUrl: this.settings.get('baseUrl'),\n settings: this.settings,\n },\n { parse: true }\n );\n\n const wrapper = new AuthContainer({ appState: this.appState });\n\n $(options.el).append(wrapper.render().$el);\n this.el = `#${Enums.WIDGET_CONTAINER_ID}`;\n\n this.header = new Header({\n el: this.el,\n appState: this.appState,\n settings: this.settings,\n });\n\n // Hide until unitial render\n this.hide();\n\n this.listenTo(this.appState, 'change:transactionError', function(appState, err) {\n RouterUtil.routeAfterAuthStatusChangeError(this, err);\n });\n\n this.listenTo(this.appState, 'change:transaction', function(appState, trans) {\n RouterUtil.routeAfterAuthStatusChange(this, trans.data);\n });\n\n this.listenTo(this.appState, 'navigate', function(url) {\n this.navigate(url, { trigger: true });\n });\n },\n\n execute: function(cb, args) {\n const recoveryToken = this.settings.get('recoveryToken');\n // Recovery flow with a token passed through widget settings\n\n if (recoveryToken) {\n this.settings.unset('recoveryToken');\n this.navigate(RouterUtil.createRecoveryUrl(recoveryToken), { trigger: true });\n return;\n }\n\n // Refresh flow with a stateToken passed through widget settings\n const stateToken = this.settings.get('stateToken');\n\n if (stateToken) {\n this.settings.unset('stateToken');\n this.navigate(RouterUtil.createRefreshUrl(stateToken), { trigger: true });\n return;\n }\n\n // Normal flow - we've either navigated to a stateless page, or are\n // in the middle of an auth flow\n const trans = this.appState.get('transaction');\n\n if ((trans && trans.data) || isStateLessRouteHandler(this, cb)) {\n cb.apply(this, args);\n return;\n }\n\n // StateToken cookie exists on page load, and we are on a stateful url\n if (this.settings.getAuthClient().tx.exists()) {\n this.navigate(RouterUtil.createRefreshUrl(), { trigger: true });\n return;\n }\n\n // We've hit a page that requires state, but have no stateToken - redirect\n // back to primary auth\n this.navigate('', { trigger: true });\n },\n\n // Overriding the default navigate method to allow the widget consumer\n // to \"turn off\" routing - if features.router is false, the browser\n // location bar will not update when the router navigates\n navigate: function(fragment, options) {\n if (this.settings.get('features.router')) {\n return Router.prototype.navigate.apply(this, arguments);\n }\n if (options && options.trigger) {\n return Backbone.history.loadUrl(fragment);\n }\n },\n\n render: function(Controller, options) {\n options || (options = {});\n\n let Beacon = options.Beacon;\n\n const controllerOptions = _.extend({ settings: this.settings, appState: this.appState }, _.omit(options, 'Beacon'));\n\n // Since we have a wrapper view, render our wrapper and use its content\n // element as our new el.\n // Note: Render it here because we know dom is ready at this point\n if (!this.header.rendered()) {\n this.el = this.header.render().getContentEl();\n }\n\n // If we need to load a language (or apply custom i18n overrides), do\n // this now and re-run render after it's finished.\n if (!Bundles.isLoaded(this.appState.get('languageCode'))) {\n return LanguageUtil.loadLanguage(this.appState, this.settings)\n .then(_.bind(this.render, this, Controller, options));\n }\n\n // Load the custom colors only on the first render\n if (this.settings.get('colors.brand') && !ColorsUtil.isLoaded()) {\n const colors = {\n brand: this.settings.get('colors.brand'),\n };\n const cspNonce = this.settings.get('cspNonce');\n\n ColorsUtil.addStyle(colors, cspNonce);\n }\n\n const oldController = this.controller;\n\n this.controller = new Controller(controllerOptions);\n\n // Bubble up all controller events\n this.listenTo(this.controller, 'all', this.trigger);\n\n // First run fetchInitialData, in case the next controller needs data\n // before it's initial render. This will leave the current page in a\n // loading state.\n return this.controller\n .fetchInitialData()\n .then(() => {\n // Beacon transition occurs in parallel to page swap\n if (!beaconIsAvailable(Beacon, this.settings)) {\n Beacon = null;\n }\n this.header.setBeacon(Beacon, controllerOptions);\n\n // Show before initial render\n this.show();\n\n this.controller.render();\n\n if (!oldController) {\n this.el.append(this.controller.el);\n this.controller.postRenderAnimation();\n return;\n }\n\n return Animations.swapPages({\n $parent: this.el,\n $oldRoot: oldController.$el,\n $newRoot: this.controller.$el,\n dir: oldController.state.get('navigateDir'),\n ctx: this,\n success: function() {\n const flashError = this.appState.get('flashError');\n const model = this.controller.model;\n\n oldController.remove();\n oldController.$el.remove();\n this.controller.postRenderAnimation();\n if (flashError) {\n let errorSummary;\n const isTerminalError = flashError.is && flashError.is('terminal');\n if (isTerminalError) {\n errorSummary = flashError.errorDetails.errorSummary;\n } else {\n errorSummary = loc((this.settings.get('features.mfaOnlyFlow')) ?\n 'error.mfa.only.expired.session' : 'error.expired.session');\n }\n model.trigger('error', model, {\n responseJSON: {\n errorSummary\n },\n });\n this.appState.unset('flashError');\n Util.triggerAfterError(this.controller, flashError);\n }\n },\n });\n })\n .catch(function() {\n // OKTA-69665 - if an error occurs in fetchInitialData, we're left in\n // a state with two active controllers. Therefore, we clean up the\n // old one. Note: This explicitly handles the invalid token case -\n // if we get some other type of error which doesn't force a redirect,\n // we will probably be left in a bad state. I.e. old controller is\n // dropped and new controller is not rendered.\n if (oldController) {\n oldController.remove();\n oldController.$el.remove();\n }\n });\n },\n\n start: function() {\n let pushState = false;\n\n // Support for browser's back button.\n if (window.addEventListener && this.settings.get('features.router')) {\n window.addEventListener('popstate', e => {\n if (this.controller.back) {\n e.preventDefault();\n e.stopImmediatePropagation();\n this.controller.back();\n }\n });\n pushState = BrowserFeatures.supportsPushState();\n }\n Router.prototype.start.call(this, { pushState: pushState });\n },\n\n hide: function() {\n this.header.$el.hide();\n },\n\n show: function() {\n this.header.$el.show();\n },\n\n remove: function() {\n if (this.controller) {\n this.controller.remove();\n }\n this.header.$el.remove();\n Bundles.remove();\n Backbone.history.stop();\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-statements: [2, 16], complexity: [2, 10] */\nimport { _, loc } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport RouterUtil from 'v1/util/RouterUtil';\nconst pushTitleTpl = hbs('{{factorName}} ({{{deviceName}}})');\n\n// deviceName is escaped on BaseForm (see BaseForm's template)\n\nconst action = function(model) {\n let factorIndex;\n const factorType = model.get('factorType');\n const factorsList = this.options.appState.get('factors');\n\n if (factorsList.hasMultipleFactorsOfSameType(factorType)) {\n factorIndex = factorsList.getFactorIndex(factorType, model.get('id'));\n }\n const url = RouterUtil.createVerifyUrl(model.get('provider'), factorType, factorIndex);\n const self = this;\n\n this.options.appState.trigger('factorSwitched');\n this.model.manageTransaction(function(transaction, setTransaction) {\n // FACTOR_CHALLENGE does not have a prev link\n if (transaction.status === 'FACTOR_CHALLENGE') {\n this.options.appState.set('trapMfaRequiredResponse', true);\n }\n if (transaction.status === 'MFA_CHALLENGE' && transaction.prev) {\n this.options.appState.set('trapMfaRequiredResponse', true);\n return transaction.prev().then(function(trans) {\n self.trigger('options:toggle');\n setTransaction(trans);\n self.options.appState.trigger('navigate', url);\n });\n } else {\n self.trigger('options:toggle');\n self.options.appState.trigger('navigate', url);\n }\n });\n};\n\nconst dropdownOptions = {\n TITLE: {\n title: _.partial(loc, 'mfa.factors.dropdown.title', 'login'),\n className: 'dropdown-list-title',\n disabled: true,\n },\n\n OKTA_VERIFY: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n OKTA_VERIFY_PUSH: {\n icon: 'factor-icon mfa-okta-verify-30',\n className: 'factor-option',\n title: function() {\n return pushTitleTpl({\n factorName: this.model.get('factorLabel'),\n deviceName: this.model.get('deviceName'),\n });\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GOOGLE_AUTH: {\n icon: 'factor-icon mfa-google-auth-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_HOTP: {\n icon: 'factor-icon mfa-hotp-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SYMANTEC_VIP: {\n icon: 'factor-icon mfa-symantec-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n RSA_SECURID: {\n icon: 'factor-icon mfa-rsa-30',\n className: 'factor-option',\n title: _.partial(loc, 'factor.totpHard.rsaSecurId', 'login'),\n action: function() {\n action.call(this, this.model);\n },\n },\n\n ON_PREM: {\n icon: 'factor-icon mfa-onprem-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO: {\n icon: 'factor-icon mfa-duo-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n DUO_PUSH: {\n icon: 'duo-push-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.push', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_SMS: {\n icon: 'duo-sms-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.sms', 'login', ['XXX-XXX-7890']),\n },\n\n DUO_CALL: {\n icon: 'duo-call-16',\n className: 'suboption factor-option',\n // TODO: add phone number here\n title: _.partial(loc, 'mfa.duoSecurity.call', 'login', ['XXX-XXX-7890']),\n },\n\n YUBIKEY: {\n icon: 'factor-icon mfa-yubikey-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n SMS: {\n icon: 'factor-icon mfa-sms-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CALL: {\n icon: 'factor-icon mfa-call-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n QUESTION: {\n icon: 'factor-icon mfa-question-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n PASSWORD: {\n icon: 'factor-icon mfa-password-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WINDOWS_HELLO: {\n icon: 'factor-icon mfa-windows-hello-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n U2F: {\n icon: 'factor-icon mfa-u2f-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n WEBAUTHN: {\n icon: 'factor-icon mfa-webauthn-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n EMAIL: {\n icon: 'factor-icon mfa-email-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_SAML: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n GENERIC_OIDC: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n\n CUSTOM_CLAIMS: {\n icon: 'factor-icon mfa-custom-factor-30',\n className: 'factor-option',\n title: function() {\n return this.model.get('factorLabel');\n },\n action: function() {\n action.call(this, this.model);\n },\n },\n};\nexport default {\n getDropdownOption: function(factorName) {\n return dropdownOptions[factorName];\n },\n};\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _, $, loc, internal } from '@okta/courage';\nimport FactorUtil from 'util/FactorUtil';\nimport Factor from 'v1//models/Factor';\nimport FactorsDropDownOptions from './FactorsDropDownOptions';\nconst { BaseDropDown } = internal.views.components;\n\n$(document).click(function(e) {\n const $target = $(e.target);\n const isDropdown = $target.closest('.option-selected').length > 0 && $target.closest('.dropdown').length > 0;\n\n if (!isDropdown) {\n $('.dropdown .options').hide();\n $('.dropdown a.option-selected').attr('aria-expanded', false);\n }\n});\n\nexport default BaseDropDown.extend({\n className: 'bg-helper icon-button',\n screenReaderText: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let factorLabel;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'), this.toJSON());\n }\n factorLabel = factor.get('factorLabel');\n return loc('mfa.factors.dropdown.sr.text', 'login', [factorLabel]);\n },\n events: {\n 'click a.option-selected': function(e) {\n e.preventDefault();\n if (_.result(this, 'disabled')) {\n e.stopPropagation();\n } else {\n const expanded = this.$('.options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n }\n },\n 'click .dropdown-disabled': function(e) {\n e.preventDefault();\n e.stopPropagation();\n },\n },\n initialize: function() {\n this.addOption(FactorsDropDownOptions.getDropdownOption('TITLE'));\n const factorsList = this.options.appState.get('factors');\n const multiplePushFactors = factorsList.hasMultipleFactorsOfSameType('push');\n\n factorsList.each(function(factor) {\n // Do not add okta totp if there are multiple okta push (each push will have an inline totp)\n if (!(factor.get('factorType') === 'token:software:totp' && multiplePushFactors)) {\n this.addOption(FactorsDropDownOptions.getDropdownOption(factor.get('factorName')), { model: factor });\n this.listenTo(this.last(), 'options:toggle', function() {\n this.$('.options').hide();\n this.$('a.option-selected').attr('aria-expanded', false);\n });\n }\n }, this);\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint complexity: [2, 8] */\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nimport Factor from 'v1/models/Factor';\nimport Q from 'q';\nimport FactorUtil from 'util/FactorUtil';\nimport FactorsDropDown from 'v1/views/mfa-verify/dropdown/FactorsDropDown';\nexport default View.extend({\n template: hbs(\n '\\\n \\\n
\\\n \\\n \\\n
\\\n \\\n \\\n
\\\n \\\n '\n ),\n\n events: {\n 'click .auth-beacon-factor': function(e) {\n e.preventDefault();\n e.stopPropagation();\n const expanded = this.$('.dropdown .options').toggle().is(':visible');\n\n this.$('a.option-selected').attr('aria-expanded', expanded);\n if (expanded) {\n this.$('#okta-dropdown-options').find('li.factor-option:first a').focus();\n }\n },\n },\n\n initialize: function() {\n this.options.appState.set('beaconType', 'factor');\n },\n\n getTemplateData: function() {\n const factors = this.options.appState.get('factors');\n let factor;\n let className;\n\n if (factors) {\n factor = FactorUtil.findFactorInFactorsArray(factors, this.options.provider, this.options.factorType);\n } else {\n factor = new Factor.Model(this.options.appState.get('factor'));\n }\n className = factor.get('iconClassName');\n return { className: className || '' };\n },\n\n postRender: function() {\n if (this.options.animate) {\n this.$('.auth-beacon-factor').fadeIn(200);\n }\n const appState = this.options.appState;\n\n if (appState.get('hasMultipleFactorsAvailable')) {\n this.add(FactorsDropDown, '[data-type=\"factor-types-dropdown\"]');\n }\n },\n\n fadeOut: function() {\n const deferred = Q.defer();\n\n this.$('.auth-beacon-factor').fadeOut(200, function() {\n deferred.resolve();\n });\n return deferred.promise;\n },\n\n equals: function(Beacon, options) {\n return (\n Beacon &&\n this instanceof Beacon &&\n options.provider === this.options.provider &&\n (options.factorType === this.options.factorType ||\n (FactorUtil.isOktaVerify(options.provider, options.factorType) &&\n FactorUtil.isOktaVerify(this.options.provider, this.options.factorType)))\n );\n },\n});\n","/*!\n * Copyright (c) 2019, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { View } from '@okta/courage';\nimport hbs from '@okta/handlebars-inline-precompile';\nexport default View.extend({\n className: 'piv-beacon',\n template: hbs(\n '\\\n \\\n \\\n
\\\n \\\n \\\n
\\\n '\n ),\n\n equals: function(Beacon) {\n return Beacon && this instanceof Beacon;\n },\n});\n","/*!\n * Copyright (c) 2015-2016, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\n/* eslint max-params: 0 */\nimport AccountUnlockedController from 'v1/controllers/AccountUnlockedController';\nimport ActivateTotpController from 'v1/controllers/ActivateTotpController';\nimport AdminConsentRequiredController from 'v1/controllers/AdminConsentRequiredController';\nimport BarcodePushController from 'v1/controllers/BarcodePushController';\nimport BarcodeTotpController from 'v1/controllers/BarcodeTotpController';\nimport ConsentRequiredController from 'v1/controllers/ConsentRequiredController';\nimport CustomPasswordExpiredController from 'v1/controllers/CustomPasswordExpiredController';\nimport DeviceActivateController from 'v1/controllers/DeviceActivateController';\nimport DeviceActivateTerminalController from 'v1/controllers/DeviceActivateTerminalController';\nimport EnrollActivateCustomFactorController from 'v1/controllers/EnrollActivateCustomFactorController';\nimport EnrollActivateEmailController from 'v1/controllers/EnrollActivateEmailController';\nimport EnrollCallAndSmsController from 'v1/controllers/EnrollCallAndSmsController';\nimport EnrollChoicesController from 'v1/controllers/EnrollChoicesController';\nimport EnrollCustomFactorController from 'v1/controllers/EnrollCustomFactorController';\nimport EnrollDuoController from 'v1/controllers/EnrollDuoController';\nimport EnrollEmailController from 'v1/controllers/EnrollEmailController';\nimport EnrollHotpController from 'v1/controllers/EnrollHotpController';\nimport EnrollOnPremController from 'v1/controllers/EnrollOnPremController';\nimport EnrollPasswordController from 'v1/controllers/EnrollPasswordController';\nimport EnrollQuestionController from 'v1/controllers/EnrollQuestionController';\nimport EnrollSymantecVipController from 'v1/controllers/EnrollSymantecVipController';\nimport EnrollTotpController from 'v1/controllers/EnrollTotpController';\nimport EnrollU2FController from 'v1/controllers/EnrollU2FController';\nimport EnrollUserController from 'v1/controllers/EnrollUserController';\nimport EnrollWebauthnController from 'v1/controllers/EnrollWebauthnController';\nimport EnrollWindowsHelloController from 'v1/controllers/EnrollWindowsHelloController';\nimport EnrollYubikeyController from 'v1/controllers/EnrollYubikeyController';\nimport EnrollmentLinkSentController from 'v1/controllers/EnrollmentLinkSentController';\nimport EnterPasscodePushFlowController from 'v1/controllers/EnterPasscodePushFlowController';\nimport ForgotPasswordController from 'v1/controllers/ForgotPasswordController';\nimport IDPDiscoveryController from 'v1/controllers/IDPDiscoveryController';\nimport ForceIDPDiscoveryController from 'v1/controllers/ForceIDPDiscoveryController';\nimport ManualSetupPushController from 'v1/controllers/ManualSetupPushController';\nimport ManualSetupTotpController from 'v1/controllers/ManualSetupTotpController';\nimport MfaVerifyController from 'v1/controllers/MfaVerifyController';\nimport PasswordExpiredController from 'v1/controllers/PasswordExpiredController';\nimport PasswordResetController from 'v1/controllers/PasswordResetController';\nimport PollController from 'v1/controllers/PollController';\nimport PrimaryAuthController from 'v1/controllers/PrimaryAuthController';\nimport PwdResetEmailSentController from 'v1/controllers/PwdResetEmailSentController';\nimport RecoveryChallengeController from 'v1/controllers/RecoveryChallengeController';\nimport RecoveryLoadingController from 'v1/controllers/RecoveryLoadingController';\nimport RecoveryQuestionController from 'v1/controllers/RecoveryQuestionController';\nimport RefreshAuthStateController from 'v1/controllers/RefreshAuthStateController';\nimport RegistrationCompleteController from 'v1/controllers/RegistrationCompleteController';\nimport RegistrationController from 'v1/controllers/RegistrationController';\nimport UnlockAccountController from 'v1/controllers/UnlockAccountController';\nimport UnlockEmailSentController from 'v1/controllers/UnlockEmailSentController';\nimport VerifyCustomFactorController from 'v1/controllers/VerifyCustomFactorController';\nimport VerifyDuoController from 'v1/controllers/VerifyDuoController';\nimport VerifyPIVController from 'v1/controllers/VerifyPIVController';\nimport VerifyU2FController from 'v1/controllers/VerifyU2FController';\nimport VerifyWebauthnController from 'v1/controllers/VerifyWebauthnController';\nimport VerifyWindowsHelloController from 'v1/controllers/VerifyWindowsHelloController';\nimport ErrorStateController from 'v1/controllers/ErrorStateController';\nimport BaseLoginRouter from 'v1/BaseLoginRouter';\nimport FactorBeacon from 'v1/views/shared/FactorBeacon';\nimport PIVBeacon from 'v1/views/shared/PIVBeacon';\nimport SecurityBeacon from 'v1/views/shared/SecurityBeacon';\n\nimport Enums from 'util/Enums';\n\nexport default BaseLoginRouter.extend({\n routes: {\n '': 'defaultAuth',\n signin: 'primaryAuth',\n 'signin/okta/:username': 'primaryAuth',\n 'signin/verify/duo/web': 'verifyDuo',\n 'signin/verify/piv': 'verifyPIV',\n 'signin/poll': 'poll',\n 'signin/verify/fido/webauthn': 'verifyWebauthn',\n 'signin/verify/webauthn': 'verifyWebauthn',\n 'signin/verify/fido/u2f': 'verifyU2F',\n 'signin/verify/u2f': 'verifyU2F',\n 'signin/verify/generic_saml/assertion:saml2': 'verifySAMLFactor',\n 'signin/verify/generic_oidc/assertion:oidc': 'verifyOIDCFactor',\n 'signin/verify/custom/claims_provider': 'verifyClaimsFactor',\n 'signin/verify/:factorType': 'verifyNoProvider',\n 'signin/verify/:provider/:factorType(/:factorIndex)': 'verify',\n 'signin/enroll': 'enrollChoices',\n 'signin/enroll/duo/web': 'enrollDuo',\n 'signin/enroll/okta/question': 'enrollQuestion',\n 'signin/enroll/okta/password': 'enrollPassword',\n 'signin/enroll/okta/sms': 'enrollSms',\n 'signin/enroll/okta/call': 'enrollCall',\n 'signin/enroll/okta/email': 'enrollEmail',\n 'signin/enroll-activate/okta/sms': 'enrollSms',\n 'signin/enroll-activate/okta/call': 'enrollCall',\n 'signin/enroll/rsa/token': 'enrollRsa',\n 'signin/enroll/del_oath/token': 'enrollOnPrem',\n 'signin/enroll/symantec/token': 'enrollSymantecVip',\n 'signin/enroll/yubico/token:hardware': 'enrollYubikey',\n 'signin/enroll/fido/webauthn': 'enrollWebauthn',\n 'signin/enroll/fido/u2f': 'enrollU2F',\n 'signin/enroll/generic_saml/assertion:saml2': 'enrollSAMLFactor',\n 'signin/enroll/generic_oidc/assertion:oidc': 'enrollOIDCFactor',\n 'signin/enroll/custom/claims_provider': 'enrollClaimsFactor',\n 'signin/enroll/custom/token:hotp': 'enrollHotpFactor',\n 'signin/enroll/:provider/:factorType': 'enrollTotpFactor',\n 'signin/enroll-activate/okta/email': 'enrollActivateEmail',\n 'signin/enroll-activate/okta/push': 'scanBarcodePushFactor',\n 'signin/enroll-activate/okta/push/manual': 'manualSetupPushFactor',\n 'signin/enroll-activate/okta/push/sent': 'activationLinkSent',\n 'signin/enroll-activate/okta/token:software:totp/passcode': 'enterPasscodeInPushEnrollmentFlow',\n 'signin/enroll-activate/custom/claims_provider': 'enrollActivateClaimsFactor',\n 'signin/enroll-activate/:provider/:factorType': 'scanBarcodeTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/activate': 'activateTotpFactor',\n 'signin/enroll-activate/:provider/:factorType/manual': 'manualSetupTotpFactor',\n 'signin/password-expired': 'passwordExpired',\n 'signin/custom-password-expired': 'customPasswordExpired',\n 'signin/forgot-password': 'forgotPassword',\n 'signin/recovery-challenge': 'recoveryChallenge',\n 'signin/recovery-emailed': 'recoveryEmailSent',\n 'signin/recovery-question': 'recoveryQuestion',\n 'signin/password-reset': 'passwordReset',\n 'signin/reset-password/:token': 'recoveryLoading',\n 'signin/user-unlock/:token': 'recoveryLoading',\n 'signin/recovery/:token': 'recoveryLoading',\n 'signin/unlock-emailed': 'unlockEmailSent',\n 'signin/unlock': 'unlockAccount',\n 'signin/account-unlocked': 'accountUnlocked',\n 'signin/refresh-auth-state(/:token)': 'refreshAuthState',\n 'signin/register': 'register',\n 'signin/register-complete': 'registerComplete',\n 'signin/error': 'errorState',\n 'signin/consent': 'consentRequired',\n 'signin/admin-consent': 'adminConsentRequired',\n 'signin/enroll-user': 'enrollUser',\n 'signin/device-activate-complete': 'deviceActivateComplete',\n 'signin/device-activate': 'deviceActivate',\n 'signin/idp-discovery-check': 'idpDiscoveryCheck',\n '*wildcard': 'defaultAuth',\n },\n\n // Route handlers that do not require a stateToken. If the page is refreshed,\n // these functions will not require a status call to refresh the stateToken.\n stateLessRouteHandlers: [\n 'defaultAuth',\n 'idpDiscovery',\n 'primaryAuth',\n 'forgotPassword',\n 'recoveryLoading',\n 'unlockAccount',\n 'refreshAuthState',\n 'register',\n 'registerComplete',\n 'errorState',\n 'verifyPIV',\n ],\n\n defaultAuth: function() {\n if (window.location.hash === `#${Enums.WIDGET_CONTAINER_ID}`) {\n document.getElementById(Enums.WIDGET_CONTAINER_ID).focus();\n return;\n }\n if (this.settings.get('features.idpDiscovery')) {\n this.idpDiscovery();\n } else {\n this.primaryAuth();\n }\n },\n\n idpDiscoveryCheck: function() {\n this.render(ForceIDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n idpDiscovery: function() {\n this.render(IDPDiscoveryController, { Beacon: SecurityBeacon });\n },\n\n primaryAuth: function(username) {\n this.render(PrimaryAuthController, {\n Beacon: SecurityBeacon,\n username\n });\n },\n\n verifyDuo: function() {\n this.render(VerifyDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n verifyPIV: function() {\n this.render(VerifyPIVController, { Beacon: PIVBeacon });\n },\n\n poll: function() {\n this.render(PollController);\n },\n\n verifyWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(VerifyWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(VerifyWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n verifyU2F: function() {\n this.render(VerifyU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n verifySAMLFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n verifyOIDCFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n verifyClaimsFactor: function() {\n this.render(VerifyCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n verify: function(provider, factorType, factorIndex) {\n this.render(MfaVerifyController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n factorIndex: factorIndex,\n Beacon: FactorBeacon,\n });\n },\n\n verifyNoProvider: function(factorType) {\n this.render(MfaVerifyController, {\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollChoices: function() {\n this.render(EnrollChoicesController, { Beacon: SecurityBeacon });\n },\n\n enrollDuo: function() {\n this.render(EnrollDuoController, {\n provider: 'DUO',\n factorType: 'web',\n Beacon: FactorBeacon,\n });\n },\n\n enrollQuestion: function() {\n this.render(EnrollQuestionController, {\n provider: 'OKTA',\n factorType: 'question',\n Beacon: FactorBeacon,\n });\n },\n\n enrollPassword: function() {\n this.render(EnrollPasswordController, {\n provider: 'OKTA',\n factorType: 'password',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSms: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'sms',\n Beacon: FactorBeacon,\n });\n },\n\n enrollCall: function() {\n this.render(EnrollCallAndSmsController, {\n provider: 'OKTA',\n factorType: 'call',\n Beacon: FactorBeacon,\n });\n },\n\n enrollEmail: function() {\n this.render(EnrollEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateEmail: function() {\n this.render(EnrollActivateEmailController, {\n provider: 'OKTA',\n factorType: 'email',\n Beacon: FactorBeacon,\n });\n },\n\n enrollRsa: function() {\n this.render(EnrollOnPremController, {\n provider: 'RSA',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOnPrem: function() {\n this.render(EnrollOnPremController, {\n provider: 'DEL_OATH',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSymantecVip: function() {\n this.render(EnrollSymantecVipController, {\n provider: 'SYMANTEC',\n factorType: 'token',\n Beacon: FactorBeacon,\n });\n },\n\n enrollYubikey: function() {\n this.render(EnrollYubikeyController, {\n provider: 'YUBICO',\n factorType: 'token:hardware',\n Beacon: FactorBeacon,\n });\n },\n\n enrollSAMLFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_SAML',\n factorType: 'assertion:saml2',\n Beacon: FactorBeacon,\n });\n },\n\n enrollOIDCFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'GENERIC_OIDC',\n factorType: 'assertion:oidc',\n Beacon: FactorBeacon,\n });\n },\n\n enrollClaimsFactor: function() {\n this.render(EnrollCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollActivateClaimsFactor: function() {\n this.render(EnrollActivateCustomFactorController, {\n provider: 'CUSTOM',\n factorType: 'claims_provider',\n Beacon: FactorBeacon,\n });\n },\n\n enrollTotpFactor: function(provider, factorType) {\n this.render(EnrollTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n enrollHotpFactor: function() {\n this.render(EnrollHotpController, {\n provider: 'CUSTOM',\n factorType: 'token:hotp',\n Beacon: FactorBeacon,\n });\n },\n\n enrollWebauthn: function() {\n if (this.settings.get('features.webauthn')) {\n this.render(EnrollWebauthnController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n } else {\n this.render(EnrollWindowsHelloController, {\n provider: 'FIDO',\n factorType: 'webauthn',\n Beacon: FactorBeacon,\n });\n }\n },\n\n enrollU2F: function() {\n this.render(EnrollU2FController, {\n provider: 'FIDO',\n factorType: 'u2f',\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodeTotpFactor: function(provider, factorType) {\n this.render(BarcodeTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n scanBarcodePushFactor: function() {\n this.render(BarcodePushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activateTotpFactor: function(provider, factorType) {\n this.render(ActivateTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupTotpFactor: function(provider, factorType) {\n this.render(ManualSetupTotpController, {\n provider: provider.toUpperCase(),\n factorType: factorType,\n Beacon: FactorBeacon,\n });\n },\n\n manualSetupPushFactor: function() {\n this.render(ManualSetupPushController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n activationLinkSent: function() {\n this.render(EnrollmentLinkSentController, {\n provider: 'OKTA',\n factorType: 'push',\n Beacon: FactorBeacon,\n });\n },\n\n enterPasscodeInPushEnrollmentFlow: function() {\n this.render(EnterPasscodePushFlowController, {\n provider: 'OKTA',\n factorType: 'token:software:totp',\n Beacon: FactorBeacon,\n });\n },\n\n passwordExpired: function() {\n this.render(PasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n customPasswordExpired: function() {\n this.render(CustomPasswordExpiredController, { Beacon: SecurityBeacon });\n },\n\n forgotPassword: function() {\n this.render(ForgotPasswordController);\n },\n\n recoveryChallenge: function() {\n this.render(RecoveryChallengeController, { Beacon: SecurityBeacon });\n },\n\n recoveryEmailSent: function() {\n this.render(PwdResetEmailSentController, { Beacon: SecurityBeacon });\n },\n\n unlockEmailSent: function() {\n this.render(UnlockEmailSentController, { Beacon: SecurityBeacon });\n },\n\n recoveryQuestion: function() {\n this.render(RecoveryQuestionController, { Beacon: SecurityBeacon });\n },\n\n passwordReset: function() {\n this.render(PasswordResetController, { Beacon: SecurityBeacon });\n },\n\n recoveryLoading: function(token) {\n this.render(RecoveryLoadingController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n unlockAccount: function() {\n this.render(UnlockAccountController);\n },\n\n accountUnlocked: function() {\n this.render(AccountUnlockedController, { Beacon: SecurityBeacon });\n },\n\n refreshAuthState: function(token) {\n this.render(RefreshAuthStateController, {\n token: token,\n Beacon: SecurityBeacon,\n });\n },\n\n register: function() {\n this.render(RegistrationController);\n },\n\n registerComplete: function() {\n this.render(RegistrationCompleteController);\n },\n\n errorState: function() {\n this.render(ErrorStateController, { Beacon: SecurityBeacon });\n },\n\n consentRequired: function() {\n this.render(ConsentRequiredController);\n },\n\n adminConsentRequired: function() {\n this.render(AdminConsentRequiredController);\n },\n\n enrollUser: function() {\n this.render(EnrollUserController);\n },\n\n deviceActivate: function() {\n this.render(DeviceActivateController);\n },\n deviceActivateComplete: function() {\n this.render(DeviceActivateTerminalController);\n },\n});\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport Enums from 'util/Enums';\n\n/**\n * Structure of FORMS object:\n * { [CONSTANT]: remediationForm.name }\n */\nconst FORMS = {\n IDENTIFY: 'identify',\n SELECT_IDENTIFY: 'select-identify',\n IDENTIFY_RECOVERY: 'identify-recovery',\n SELECT_ENROLL_PROFILE: 'select-enroll-profile',\n ENROLL_PROFILE: 'enroll-profile',\n ENROLL_PROFILE_UPDATE: 'profile-update',\n UNLOCK_ACCOUNT: 'unlock-account',\n REQUEST_ACTIVATION: 'request-activation-email',\n\n CONSENT_ADMIN: 'admin-consent',\n CONSENT_ENDUSER: 'consent',\n CONSENT_GRANULAR: 'granular-consent',\n CONSENT_EMAIL_CHALLENGE: 'email-challenge-consent',\n\n SELECT_AUTHENTICATOR_AUTHENTICATE: 'select-authenticator-authenticate',\n SELECT_AUTHENTICATOR_UNLOCK: 'select-authenticator-unlock-account',\n\n AUTHENTICATOR_VERIFICATION_DATA: 'authenticator-verification-data',\n CHALLENGE_AUTHENTICATOR: 'challenge-authenticator',\n CHALLENGE_POLL: 'challenge-poll',\n RESEND: 'resend',\n\n SELECT_AUTHENTICATOR_ENROLL: 'select-authenticator-enroll',\n SELECT_AUTHENTICATOR_ENROLL_DATA: 'select-authenticator-enroll-data',\n AUTHENTICATOR_ENROLLMENT_DATA: 'authenticator-enrollment-data',\n ENROLL_AUTHENTICATOR: 'enroll-authenticator',\n SELECT_ENROLLMENT_CHANNEL: 'select-enrollment-channel',\n ENROLLMENT_CHANNEL_DATA: 'enrollment-channel-data',\n ENROLL_POLL: 'enroll-poll',\n REENROLL_AUTHENTICATOR: 'reenroll-authenticator',\n REENROLL_AUTHENTICATOR_WARNING: 'reenroll-authenticator-warning',\n REENROLL_CUSTOM_PASSWORD_EXPIRY: 'reenroll-custom-password-expiry',\n REENROLL_CUSTOM_PASSWORD_EXPIRY_WARNING: 'reenroll-custom-password-expiry-warning',\n RESET_AUTHENTICATOR: 'reset-authenticator',\n SKIP: 'skip',\n POLL: 'poll',\n\n FAILURE_REDIRECT: 'failure-redirect',\n SUCCESS_REDIRECT: 'success-redirect',\n REDIRECT_IDP: 'redirect-idp',\n PIV_IDP: 'piv-idp',\n\n DEVICE_CHALLENGE_POLL: 'device-challenge-poll',\n DEVICE_APPLE_SSO_EXTENSION: 'device-apple-sso-extension',\n CANCEL_TRANSACTION: 'cancel-transaction',\n LAUNCH_AUTHENTICATOR: 'launch-authenticator',\n LAUNCH_WEBAUTHN_AUTHENTICATOR: 'launch-webauthn-authenticator',\n ENROLL_WEBAUTHN_RESIDENTKEY: 'enroll-webauthn-residentkey',\n\n DEVICE_ENROLLMENT_TERMINAL: 'device-enrollment-terminal',\n\n USER_CODE: 'user-code',\n\n KEEP_ME_SIGNED_IN: 'keep-me-signed-in',\n\n // 'terminal` is not ION Form name but only coined in widget\n // for rendering a page that user has nothing to remediate.\n TERMINAL: 'terminal',\n};\n// Forms added here do not show the Sign out link\nconst FORMS_WITHOUT_SIGNOUT = [\n FORMS.IDENTIFY,\n FORMS.SUCCESS_REDIRECT,\n FORMS.ENROLL_PROFILE,\n FORMS.DEVICE_ENROLLMENT_TERMINAL,\n FORMS.CONSENT_ADMIN,\n FORMS.CONSENT_ENDUSER,\n FORMS.CONSENT_GRANULAR,\n FORMS.CONSENT_EMAIL_CHALLENGE,\n FORMS.USER_CODE,\n FORMS.KEEP_ME_SIGNED_IN\n];\n\nconst FORMS_WITH_STATIC_BACK_LINK = [\n FORMS.SELECT_AUTHENTICATOR_ENROLL,\n FORMS.SELECT_AUTHENTICATOR_AUTHENTICATE\n];\n\nconst FORMS_FOR_VERIFICATION = [\n FORMS.SELECT_AUTHENTICATOR_AUTHENTICATE,\n FORMS.CHALLENGE_AUTHENTICATOR,\n FORMS.CHALLENGE_POLL,\n FORMS.RESEND\n];\n\nconst AUTHENTICATOR_KEY = {\n EMAIL: 'okta_email',\n PASSWORD: 'okta_password',\n PHONE: 'phone_number',\n WEBAUTHN: 'webauthn',\n SECURITY_QUESTION: 'security_question',\n OV: 'okta_verify',\n GOOGLE_OTP: 'google_otp',\n ON_PREM: 'onprem_mfa',\n RSA: 'rsa_token',\n DUO: 'duo',\n IDP: 'external_idp',\n CUSTOM_OTP: 'custom_otp',\n SYMANTEC_VIP: 'symantec_vip',\n YUBIKEY: 'yubikey_token',\n CUSTOM_APP: 'custom_app',\n SMARTCARD: 'smart_card_idp'\n};\n\nconst AUTHENTICATOR_METHODS = {\n PUSH: 'push',\n};\n\nconst FORM_NAME_TO_OPERATION_MAP = {\n [FORMS.SELECT_AUTHENTICATOR_UNLOCK]: Enums.UNLOCK_ACCOUNT,\n [FORMS.IDENTIFY]: Enums.PRIMARY_AUTH,\n [FORMS.IDENTIFY_RECOVERY]: Enums.FORGOT_PASSWORD,\n};\n\nconst ENROLLED_PASSWORD_RECOVERY_LINK = 'currentAuthenticatorEnrollment-recover';\nconst ORG_PASSWORD_RECOVERY_LINK = 'currentAuthenticator-recover';\nconst ACTIONS = {\n ENROLLED_PASSWORD_RECOVERY_LINK,\n ORG_PASSWORD_RECOVERY_LINK\n};\n\n// Possible Remediation Form Field Hints\nconst HINTS = {\n CAPTCHA: 'captcha',\n};\n\nconst TERMINAL_FORMS = [\n FORMS.TERMINAL,\n FORMS.DEVICE_ENROLLMENT_TERMINAL,\n];\nconst IDP_FORM_TYPE = {\n X509: 'X509',\n};\n\n// Possible options for the SIW interstitial redirect view\nconst INTERSTITIAL_REDIRECT_VIEW = {\n DEFAULT: 'DEFAULT',\n NONE: 'NONE'\n};\n\nconst ATTR_FORMAT = {\n COUNTRY_CODE: 'country-code',\n};\n\nexport {\n ACTIONS,\n FORMS,\n FORMS_WITHOUT_SIGNOUT,\n FORMS_WITH_STATIC_BACK_LINK,\n FORMS_FOR_VERIFICATION,\n AUTHENTICATOR_KEY,\n AUTHENTICATOR_METHODS,\n FORM_NAME_TO_OPERATION_MAP,\n HINTS,\n TERMINAL_FORMS,\n IDP_FORM_TYPE,\n INTERSTITIAL_REDIRECT_VIEW,\n ATTR_FORMAT,\n};\n","/*!\n * Copyright (c) 2020, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { _ } from '@okta/courage';\nimport { AUTHENTICATOR_KEY } from '../RemediationConstants';\n\n/**\n * Example of the option like\n * @param {AuthenticatorOption[]} options\n * @param {( AuthenticatorEnrollment[] || Authenticator[] )} authenticators\n */\nexport function createOVOptions(options = []) {\n // Split OV into individual entries for verification (one for each method).\n const ovItem = options.find((option) => option.relatesTo.key === AUTHENTICATOR_KEY.OV);\n const methodTypeObj = ovItem?.value?.form?.value?.find(v => v.name === 'methodType');\n const methodOptions = methodTypeObj?.options;\n let signedNonceOption;\n if (methodOptions) {\n const ovOptions = [];\n methodOptions.forEach((method) => {\n // get value object from the ov item\n const value = [...ovItem.value.form.value];\n // get index of the methodType object within the value object\n const methodTypeIndex = ovItem.value.form.value.findIndex((v) => v.name === 'methodType');\n // create a new methodType object that removes the options array and\n // has a value of the current method\n const newMethodTypeObj = Object.assign(_.omit(methodTypeObj, 'options'), method);\n // set the methodType field to be required and immutable in our UI,\n // so it is always sent to the backend.\n newMethodTypeObj.required = true;\n newMethodTypeObj.mutable = false;\n // replace old methodType object with the new one\n value.splice(methodTypeIndex, 1, newMethodTypeObj);\n // return a new ov item for a specific method\n const newItem = Object.assign({}, ovItem, {\n label: method.label,\n value: {\n form: {\n value,\n }\n }\n });\n if (method.value === 'signed_nonce') {\n signedNonceOption = newItem;\n } else {\n ovOptions.push(newItem);\n }\n });\n const ovIndex = options.findIndex((option) => option.relatesTo.key === AUTHENTICATOR_KEY.OV);\n options.splice(ovIndex, 1, ...ovOptions);\n\n // ReArrange fastpass in options based on deviceKnown\n if (signedNonceOption) {\n ovItem.relatesTo.deviceKnown ? options.unshift(signedNonceOption) : options.push(signedNonceOption);\n }\n }\n}\n\nfunction createAuthenticatorOptions(options = []) {\n createOVOptions(options);\n return options.map(option => {\n const value = option.value?.form?.value || [];\n\n // Each authenticator option has list of ION field.\n // Currently we only support merely selecting one of options\n // rather than pop up another page to collect extra data\n // (in order to fill value for `mutable: true; value: null` fields).\n // The only reason of such design is to simplify widget implementation\n // but could subject to change in later releases.\n // Thus only surface up fields that are `required: true; mutable: false`\n // which implies it already has `value`.\n const valueObject = value\n .filter(v => v.required === true && v.mutable === false)\n .reduce((init, v) => {\n return Object.assign(init, { [v.name]: v.value });\n }, {});\n return {\n label: option.label,\n value: valueObject,\n relatesTo: option.relatesTo,\n authenticatorKey: option.relatesTo?.key,\n };\n });\n}\n\nfunction getAuthenticatorsEnrollUiSchema({ options }) {\n return {\n type: 'authenticatorEnrollSelect',\n options: createAuthenticatorOptions(options),\n };\n}\n\nfunction getAuthenticatorsVerifyUiSchema({ options }) {\n return {\n type: 'authenticatorVerifySelect',\n options: createAuthenticatorOptions(options),\n };\n}\n\n/**\n * Create ui schema for ION field that has type 'object'.\n */\nexport default function createUiSchemaForObject(ionFormField, remediationForm, transformedResp,\n createUISchema, settings) {\n const uiSchema = {};\n\n if (ionFormField.name === 'authenticator' &&\n (remediationForm.name === 'select-authenticator-authenticate' ||\n remediationForm.name === 'select-authenticator-unlock-account')) {\n // 1. when `select-authenticator-authenticator`,\n // create customize type so that display authenticator list as selectable list\n Object.assign(uiSchema, getAuthenticatorsVerifyUiSchema(ionFormField));\n } else if (ionFormField.name === 'authenticator' && remediationForm.name === 'select-authenticator-enroll') {\n // 2. when `select-authenticator-enroll`,\n // create customize type so that display authenticator list as selectable list\n Object.assign(uiSchema, getAuthenticatorsEnrollUiSchema(ionFormField));\n } else if (Array.isArray(ionFormField.options)) {\n // 3. For other cases, create ui schema for each `option` in order to render\n // different view for each option.\n //\n // e.g. { \"name\": \"credentials\", \"type\": \"object\", options: [ {value: {form: value:[]} ]\n uiSchema.optionsUiSchemas = ionFormField.options.map(opt => {\n return createUISchema(transformedResp, {\n value: [\n {\n name: ionFormField.name,\n value: opt.value,\n }\n ]\n }, settings);\n });\n uiSchema.options = ionFormField.options.map((opt, index) => {\n return { label: opt.label, value: index };\n });\n // assume (default to) use radio buttons to switch sub-schema.\n uiSchema.type = 'radio';\n uiSchema.value = '0';\n uiSchema.name = `sub_schema_local_${ionFormField.name}`;\n }\n\n return uiSchema;\n}\n","/*!\n * Copyright (c) 2021, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nexport async function executeHookFunctions(functions) {\n for (let i = 0; i < functions.length; i++) {\n await functions[i]();\n }\n}\n\nexport async function executeHooksBefore(hook) {\n if (!hook || !hook.before || !hook.before.length) {\n return;\n }\n await executeHookFunctions(hook.before);\n}\n\nexport async function executeHooksAfter(hook) {\n if (!hook || !hook.after || !hook.after.length) {\n return;\n }\n await executeHookFunctions(hook.after);\n}\n\nexport function mergeHook(hooks, formName, hookToMerge) {\n const existingHook = hooks[formName] = hooks[formName] || { before: [], after: [] };\n if (hookToMerge.before) {\n existingHook.before = (existingHook.before || []).concat(hookToMerge.before);\n }\n if (hookToMerge.after) {\n existingHook.after = (existingHook.after || []).concat(hookToMerge.after);\n }\n}\n","import { _ } from '@okta/courage';\n\ndeclare module '@okta/courage' {\n interface OktaUnderscore {\n nestedOmit(obj: Record\n
\n `,\n postRender: function() {\n View.prototype.postRender.apply(this, arguments);\n if (this.model.get('logoUri')) {\n this.el.querySelector('.custom-app-logo').style.backgroundImage = `url(${this.model.get('logoUri')})`;\n }\n },\n children: function() {\n return [[createButton({\n className: 'button select-factor',\n title: function() {\n return loc('oie.enroll.authenticator.button.text', 'login');\n },\n attributes: {\n 'aria-label': this.model.get('ariaLabel'),\n },\n click: function() {\n this.model.trigger('selectAuthenticator', this.model.get('value'));\n }\n }), '.authenticator-button']];\n },\n minimize: function() {\n this.$el.addClass('authenticator-row-min');\n },\n getTemplateData() {\n let authenticatorUsageText;\n const allowedFor = this.model.get('relatesTo').allowedFor;\n\n if (allowedFor) {\n switch (allowedFor) {\n case AUTHENTICATOR_ALLOWED_FOR_OPTIONS.ANY:\n authenticatorUsageText = loc('oie.enroll.authenticator.usage.text.access.recovery', 'login');\n break;\n case AUTHENTICATOR_ALLOWED_FOR_OPTIONS.RECOVERY:\n authenticatorUsageText = loc('oie.enroll.authenticator.usage.text.recovery', 'login');\n break;\n case AUTHENTICATOR_ALLOWED_FOR_OPTIONS.SSO:\n authenticatorUsageText = loc('oie.enroll.authenticator.usage.text.access', 'login');\n break;\n }\n }\n\n const data = View.prototype.getTemplateData.apply(this, arguments);\n data.authenticatorUsageText = authenticatorUsageText;\n\n return data;\n },\n});\n\nexport default ListView.extend({\n\n className: 'authenticator-enroll-list authenticator-list',\n\n item: AuthenticatorRow,\n\n itemSelector: '.list-content',\n\n initialize: function() {\n this.listenTo(this.collection,'selectAuthenticator', function(data) {\n this.model.set(this.options.name, data);\n this.options.appState.trigger('saveForm', this.model);\n });\n this.hasOptionalFactors = this.options.appState.hasRemediationObject(RemediationForms.SKIP);\n if (this.hasOptionalFactors) {\n this.add(skipAll);\n }\n },\n\n template: hbs`{{label}}
\n {{#if description}}\n{{description}}
\n {{/if}}\n {{#if authenticatorUsageText}}\n{{authenticatorUsageText}}
\n {{/if}}\n \n {{title}}
\n
\n `,\n postRender: function() {\n View.prototype.postRender.apply(this, arguments);\n const logoUri = this.model.get('logoUri');\n if (logoUri) {\n this.el.querySelector('.custom-logo').style.backgroundImage = `url(${logoUri})`;\n }\n },\n children: function(){\n return [[createButton({\n className: 'button select-factor',\n title: function() {\n return loc('oie.verify.authenticator.button.text', 'login');\n },\n attributes: {\n 'aria-label': this.model.get('ariaLabel'),\n },\n click: function() {\n this.model.trigger('selectAuthenticator', this.model.get('value'));\n }\n }), '.authenticator-button']];\n },\n minimize: function() {\n this.$el.addClass('authenticator-row-min');\n }\n});\n\nexport default ListView.extend({\n\n className: 'authenticator-verify-list authenticator-list',\n\n item: AuthenticatorRow,\n\n itemSelector: '.list-content',\n\n initialize: function() {\n this.listenTo(this.collection,'selectAuthenticator', this.handleSelect);\n this.listenTo(this.model, 'invalid', this.handleModelInvalid);\n },\n \n handleModelInvalid(data, error) {\n if (this.options.name in error && !this.model.get(this.options.name)) {\n this.showAuthenticatorRequiredError();\n }\n },\n\n showAuthenticatorRequiredError() {\n const errorSummary = this.collection.length > 1\n ? loc('account.unlock.authenticatorRequired.multiple', 'login')\n : loc('account.unlock.authenticatorRequired.single', 'login');\n this.model.trigger('error', this.model, { responseJSON: { errorSummary } });\n },\n\n handleSelect(data) {\n //If schema contains a required identifier to fill first then validate the form\n const validationError = this.model.validateField('identifier');\n this.model.trigger('clearFormError');\n if(this.model.getPropertySchema('identifier')?.required && validationError) {\n this.model.trigger('invalid', this.model, validationError);\n } else {\n this.model.set(this.options.name, data);\n this.options.appState.trigger('saveForm', this.model); \n }\n },\n\n template: hbs`\n
\n \n {{label}}
\n {{#if description}}\n{{description}}
\n {{/if}}\n {{#if nickname}}\n{{nickname}}
\n {{/if}}\n\n
\n {{/if}}\\\n `,\n\n getTemplateData: function() {\n if (this.captchaConfig) {\n const className = this.captchaConfig.type === 'HCAPTCHA' ? 'h-captcha' : 'g-recaptcha';\n return { \n siteKey: this.captchaConfig.siteKey,\n isCaptchaConfigured: true,\n onCaptchaSolvedCallback: OktaSignInWidgetOnCaptchaSolvedCallback,\n className, \n };\n } else {\n return {};\n }\n },\n\n initialize() {\n if (this.options.appState.get('captcha')) {\n this.captchaConfig = this.options.appState.get('captcha');\n this._addCaptcha();\n }\n },\n\n remove: function(){\n View.prototype.remove.apply(this, arguments);\n\n // Cleanup global Captcha references\n if (this.captchaConfig.type === 'HCAPTCHA') {\n window.hcaptcha = undefined;\n } else if (this.captchaConfig.type === 'RECAPTCHA_V2') {\n window.grecaptcha = undefined;\n }\n },\n\n /**\n * Load the CAPTCHA lib dynamically (either HCAPTCHA or RECAPTCHAV2). Once loaded, trigger an event to inform\n * the parent form to actually render the CAPTCHA.\n * */ \n _addCaptcha() {\n // Callback invoked when CAPTCHA is solved.\n const onCaptchaSolved = (token) => {\n const captchaObject = this._getCaptchaOject();\n\n // We reset the Captcha. We need to reset because every time the \n // Captcha resolves back with a token and say we have a server side error, \n // if we submit the form again it won't work otherwise. The Captcha \n // has to be reset for it to work again in that scenario.\n const captchaId = this.$el.find('#captcha-container').attr('data-captcha-id');\n captchaObject.reset(captchaId);\n\n // Set the token in the model\n const fieldName = this.options.name;\n this.model.set(fieldName, token);\n\n this.options.appState.trigger('saveForm', this.model); \n };\n\n // Callback when CAPTCHA lib is loaded\n const onCaptchaLoaded = () => {\n // This is just a safeguard to ensure we don't bind Captcha to an already bound element.\n // It shouldn't happen in practice.\n if (this.$el.find('#captcha-container').attr('data-captcha-id')) {\n return;\n }\n\n const captchaObject = this._getCaptchaOject();\n\n // We set a temporary token for Captcha because this is a required field for the form and is normally set\n // at a later time. In order to prevent client-side validation errors because of this, we have to set a \n // dummy value. We then overwrite this with the proper token in the onCaptchaSolved callback.\n this.model.set(this.options.name, 'tempToken');\n\n const captchaId = captchaObject.render('captcha-container', {\n sitekey: this.captchaConfig.siteKey,\n callback: onCaptchaSolved\n });\n \n this.$el.find('#captcha-container').attr('data-captcha-id', captchaId);\n\n // Let the Baseform know that Captcha is loaded.\n this.options.appState.trigger('onCaptchaLoaded', captchaObject);\n\n // Render the HCAPTCHA footer - we need to do this manually since the HCAPTCHA lib doesn't do it\n if (this.captchaConfig.type === 'HCAPTCHA') {\n this._addHCaptchaFooter();\n } \n };\n\n // Attaching the callback to the window object so that the CAPTCHA script that we dynamically render\n // can have access to it since it won't have access to this view's scope.\n window[OktaSignInWidgetOnCaptchaLoadedCallback] = onCaptchaLoaded;\n\n // Attaching the Captcha solved callback to the window object because we reference it in our template under\n // the 'data-callback' attribute which the Captcha library uses to invoke the callback.\n window[OktaSignInWidgetOnCaptchaSolvedCallback] = onCaptchaSolved;\n\n \n if (this.captchaConfig.type === 'HCAPTCHA') {\n this._loadCaptchaLib(this._getCaptchaUrl(HCAPTCHA_URL, 'hcaptcha'));\n } else if (this.captchaConfig.type === 'RECAPTCHA_V2') {\n this._loadCaptchaLib(this._getCaptchaUrl(RECAPTCHAV2_URL, 'recaptcha'));\n }\n },\n \n /**\n * We dynamically inject