feat: add step-up bridge (stepUp / isSteppedUp)

Expose the native step-up (re-)authentication API through the Ionic
Capacitor plugin, matching the React Native and Flutter wrappers.

- TS: stepUp(payload?) / isSteppedUp(payload?) on the plugin interface,
  web stubs, and FronteggService convenience wrappers.
- iOS: honors the optional maxAge freshness window (seconds).
- Android: forwards to the native SDK; maxAge is not yet passed through
  because the native isSteppedUp/stepUp take a Kotlin Duration that
  cannot be constructed from the Java plugin (documented in the API).

Author: dianaKhortiuk-frontegg

android/src/main/java/com/frontegg/ionic/FronteggNativePlugin.java

@@ -392,4 +392,33 @@ public void openAdminPortal(PluginCall call) {
         call.resolve();
     }
 
+    @PluginMethod
+    public void isSteppedUp(PluginCall call) {
+        // NOTE: `maxAge` is honored on iOS but not yet forwarded here — the native
+        // isSteppedUp(Duration?) takes a Kotlin Duration (an inline value class) that cannot be
+        // constructed from Java. Passing null checks ACR/AMR without the freshness window until a
+        // native Java-friendly overload is added.
+        boolean result = FronteggAppKt.getFronteggAuth(this.getContext()).isSteppedUp(null);
+        JSObject ret = new JSObject();
+        ret.put("isSteppedUp", result);
+        call.resolve(ret);
+    }
+
+    @PluginMethod
+    public void stepUp(PluginCall call) {
+        if (this.getActivity() == null) {
+            call.reject("NO_ACTIVITY", "Cannot start step-up without an active Activity");
+            return;
+        }
+        // `maxAge` not forwarded on Android — see isSteppedUp note above.
+        FronteggAppKt.getFronteggAuth(this.getContext()).stepUp(this.getActivity(), null, (error) -> {
+            if (error != null) {
+                call.reject(error.getMessage());
+            } else {
+                call.resolve();
+            }
+            return null;
+        });
+    }
+
 }

ios/Plugin/FronteggNativePlugin.m

@@ -16,6 +16,8 @@
            CAP_PLUGIN_METHOD(getFeatureEntitlement, CAPPluginReturnPromise);
            CAP_PLUGIN_METHOD(getPermissionEntitlement, CAPPluginReturnPromise);
            CAP_PLUGIN_METHOD(openAdminPortal, CAPPluginReturnPromise);
+           CAP_PLUGIN_METHOD(stepUp, CAPPluginReturnPromise);
+           CAP_PLUGIN_METHOD(isSteppedUp, CAPPluginReturnPromise);
 )
 
 

ios/Plugin/FronteggNativePlugin.swift

@@ -324,6 +324,27 @@ public class FronteggNativePlugin: CAPPlugin {
         }
     }
 
+    @objc func isSteppedUp(_ call: CAPPluginCall) {
+        // `maxAge` is optional and expressed in seconds (TimeInterval); nil uses the SDK default.
+        let maxAge = call.getDouble("maxAge")
+        call.resolve(["isSteppedUp": fronteggApp.auth.isSteppedUp(maxAge: maxAge)])
+    }
+
+    @objc func stepUp(_ call: CAPPluginCall) {
+        let maxAge = call.getDouble("maxAge")
+        let completion: FronteggAuth.CompletionHandler = { result in
+            switch result {
+            case .success:
+                call.resolve()
+            case .failure(let error):
+                call.reject(error.failureReason ?? error.localizedDescription, nil, error)
+            }
+        }
+        Task {
+            await self.fronteggApp.auth.stepUp(maxAge: maxAge, completion)
+        }
+    }
+
     private static func topViewController() -> UIViewController? {
         let keyWindow = UIApplication.shared.connectedScenes
             .compactMap { $0 as? UIWindowScene }

src/definitions.ts

@@ -222,6 +222,27 @@ export interface FronteggNativePlugin {
    * @returns A promise that resolves when the portal is presented.
    */
   openAdminPortal(): Promise<void>;
+
+  /**
+   * Starts a step-up (re-)authentication: the user re-verifies with a stronger factor
+   * (MFA) before a sensitive action. Resolves once step-up completes (rejects on failure).
+   *
+   * @param payload.maxAge - Optional freshness window, in **seconds**. If the user
+   * authenticated more recently than this, step-up may be skipped.
+   *
+   * Note: `maxAge` is honored on **iOS**. On **Android** it is not yet forwarded (the native
+   * API takes a Kotlin `Duration` that cannot be constructed from the Java plugin); Android
+   * uses the server default freshness window until a native Java-friendly overload lands.
+   */
+  stepUp(payload?: { maxAge?: number }): Promise<void>;
+
+  /**
+   * Returns whether the current session is already "stepped up" (has a recent MFA/ACR).
+   *
+   * @param payload.maxAge - Optional freshness window, in **seconds** (see `stepUp` for the
+   * Android `maxAge` caveat).
+   */
+  isSteppedUp(payload?: { maxAge?: number }): Promise<{ isSteppedUp: boolean }>;
 }
 
 /**

src/frontegg.service.ts

@@ -316,4 +316,22 @@ export class FronteggService {
   public openAdminPortal(): Promise<void> {
     return FronteggNative.openAdminPortal();
   }
+
+  /**
+   * Start a step-up (re-)authentication. Resolves when step-up completes.
+   * @param maxAge Optional freshness window in seconds (honored on iOS; see docs for the
+   * Android caveat).
+   */
+  public stepUp(maxAge?: number): Promise<void> {
+    return FronteggNative.stepUp({ maxAge });
+  }
+
+  /**
+   * Whether the current session is already stepped up.
+   * @param maxAge Optional freshness window in seconds.
+   */
+  public async isSteppedUp(maxAge?: number): Promise<boolean> {
+    const { isSteppedUp } = await FronteggNative.isSteppedUp({ maxAge });
+    return isSteppedUp;
+  }
 }

src/web.ts

@@ -86,4 +86,20 @@ export class FronteggNativeWeb
   async openAdminPortal(): Promise<void> {
     throw Error('FronteggNative.openAdminPortal not implemented in web');
   }
+
+  async stepUp(payload?: { maxAge?: number }): Promise<void> {
+    throw Error(
+      `FronteggNative.stepUp ${JSON.stringify(payload)} not implemented in web`,
+    );
+  }
+
+  async isSteppedUp(payload?: {
+    maxAge?: number;
+  }): Promise<{ isSteppedUp: boolean }> {
+    throw Error(
+      `FronteggNative.isSteppedUp ${JSON.stringify(
+        payload,
+      )} not implemented in web`,
+    );
+  }
 }