feat: add DPoP support with fetcher API

package.json

@@ -32,7 +32,7 @@
     "@angular/platform-browser": "^18.2.13",
     "@angular/platform-browser-dynamic": "^18.2.13",
     "@angular/router": "^18.2.13",
-    "@auth0/auth0-spa-js": "^2.1.3",
+    "@auth0/auth0-spa-js": "^2.10.0",
     "rxjs": "^6.6.7",
     "tslib": "^2.8.1",
     "zone.js": "~0.14.10"
@@ -57,6 +57,7 @@
     "browserstack-cypress-cli": "^1.32.8",
     "concurrently": "^6.2.0",
     "cors": "^2.8.5",
+    "cross-fetch": "^4.1.0",
     "cypress": "^13.17.0",
     "eslint": "^8.57.0",
     "eslint-plugin-import": "latest",

projects/auth0-angular/src/lib/auth.service.spec.ts

@@ -58,7 +58,9 @@ describe('AuthService', () => {
       clientId: '',
     });
 
-    jest.spyOn(auth0Client, 'handleRedirectCallback').mockResolvedValue({});
+    jest.spyOn(auth0Client, 'handleRedirectCallback').mockResolvedValue({
+      appState: undefined,
+    } as any);
     jest.spyOn(auth0Client, 'loginWithRedirect').mockResolvedValue();
     jest.spyOn(auth0Client, 'loginWithPopup').mockResolvedValue();
     jest.spyOn(auth0Client, 'checkSession').mockResolvedValue();
@@ -74,6 +76,17 @@ describe('AuthService', () => {
       .spyOn(auth0Client, 'getTokenWithPopup')
       .mockResolvedValue('__access_token_from_popup__');
 
+    jest
+      .spyOn(auth0Client, 'getDpopNonce')
+      .mockResolvedValue('test-nonce-value');
+    jest.spyOn(auth0Client, 'setDpopNonce').mockResolvedValue(undefined);
+    jest
+      .spyOn(auth0Client, 'generateDpopProof')
+      .mockResolvedValue('test-proof-jwt');
+    jest.spyOn(auth0Client, 'createFetcher').mockReturnValue({
+      fetch: jest.fn(),
+    } as any);
+
     window.history.replaceState(null, '', '');
 
     moduleSetup = {
@@ -980,4 +993,108 @@ describe('AuthService', () => {
       });
     });
   });
+
+  describe('getDpopNonce', () => {
+    it('should retrieve DPoP nonce from the client', (done) => {
+      const service = createService();
+      service.getDpopNonce().subscribe((nonce) => {
+        expect(nonce).toBe('test-nonce-value');
+        expect(auth0Client.getDpopNonce).toHaveBeenCalled();
+        done();
+      });
+    });
+
+    it('should pass domain identifier to the underlying SDK', (done) => {
+      const domainId = 'custom-domain';
+      const service = createService();
+      service.getDpopNonce(domainId).subscribe(() => {
+        expect(auth0Client.getDpopNonce).toHaveBeenCalledWith(domainId);
+        done();
+      });
+    });
+
+    it('should handle undefined nonce', (done) => {
+      (auth0Client.getDpopNonce as jest.Mock).mockResolvedValue(undefined);
+      const service = createService();
+      service.getDpopNonce().subscribe((nonce) => {
+        expect(nonce).toBeUndefined();
+        done();
+      });
+    });
+  });
+
+  describe('setDpopNonce', () => {
+    it('should set DPoP nonce through the client', (done) => {
+      const service = createService();
+      const nonceValue = 'new-nonce-123';
+      service.setDpopNonce(nonceValue).subscribe(() => {
+        expect(auth0Client.setDpopNonce).toHaveBeenCalledWith(
+          nonceValue,
+          undefined
+        );
+        done();
+      });
+    });
+
+    it('should pass nonce and domain identifier to the underlying SDK', (done) => {
+      const service = createService();
+      const nonceValue = 'nonce-456';
+      const domainId = 'domain-1';
+      service.setDpopNonce(nonceValue, domainId).subscribe(() => {
+        expect(auth0Client.setDpopNonce).toHaveBeenCalledWith(
+          nonceValue,
+          domainId
+        );
+        done();
+      });
+    });
+  });
+
+  describe('generateDpopProof', () => {
+    it('should generate DPoP proof JWT', (done) => {
+      const service = createService();
+      const params = {
+        url: 'https://api.example.com/resource',
+        method: 'POST',
+        accessToken: 'access-token-123',
+      };
+      service.generateDpopProof(params).subscribe((proof) => {
+        expect(proof).toBe('test-proof-jwt');
+        expect(auth0Client.generateDpopProof).toHaveBeenCalledWith(params);
+        done();
+      });
+    });
+
+    it('should pass all parameters including nonce', (done) => {
+      const service = createService();
+      const params = {
+        url: 'https://api.example.com/data',
+        method: 'GET',
+        nonce: 'server-nonce',
+        accessToken: 'token-xyz',
+      };
+      service.generateDpopProof(params).subscribe(() => {
+        expect(auth0Client.generateDpopProof).toHaveBeenCalledWith(params);
+        done();
+      });
+    });
+  });
+
+  describe('createFetcher', () => {
+    it('should create a fetcher instance', () => {
+      const service = createService();
+      const fetcher = service.createFetcher();
+      expect(fetcher).toBeDefined();
+      expect(auth0Client.createFetcher).toHaveBeenCalled();
+    });
+
+    it('should pass configuration to the underlying SDK', () => {
+      const service = createService();
+      const config = {
+        baseUrl: 'https://api.example.com',
+      };
+      service.createFetcher(config);
+      expect(auth0Client.createFetcher).toHaveBeenCalledWith(config);
+    });
+  });
 });