diff --git a/.gitignore b/.gitignore
index cd9444f8d..adc4008d3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,6 +3,7 @@
*/DS_Store
**/*.DS_Store
.pnpm-store/*
+
# Generated code
tmp/
e2e/**/dist
@@ -30,9 +31,10 @@ packages/javascript-sdk/lib/
.swc
.vite
.env.serve.development
+package-lock.json
# Certificates
-# *.pem
+*.pem
# IDEs
.vscode
@@ -83,4 +85,4 @@ outputs/*
e2e/mock-api-v2/html/*
-vitest.config.*.timestamp*
\ No newline at end of file
+vitest.config.*.timestamp*
diff --git a/e2e/autoscript-apps/index.html b/e2e/autoscript-apps/index.html
index 1a85e6f0e..03dd697a9 100644
--- a/e2e/autoscript-apps/index.html
+++ b/e2e/autoscript-apps/index.html
@@ -26,14 +26,18 @@
AuthN: Basic
AuthN: Self Service
AuthN: Central Login
+ AuthN: Central Login, no iframe
AuthN: Central Logout Ping
+ AuthN: Central Logout with Wellknown
AuthN: Device Profile
AuthN: Ping Protect
AuthN: Email Suspend
AuthN: Recaptcha Enterprise
AuthN: No Session
AuthN: OAuth
- AuthN: WellKnown
AuthN: Platform Login
AuthN: Second Factor
AuthN: SAML
diff --git a/e2e/autoscript-apps/src/authn-basic-self-service/autoscript.ts b/e2e/autoscript-apps/src/authn-basic-self-service/autoscript.ts
index 2f6d47824..18a019231 100644
--- a/e2e/autoscript-apps/src/authn-basic-self-service/autoscript.ts
+++ b/e2e/autoscript-apps/src/authn-basic-self-service/autoscript.ts
@@ -3,7 +3,7 @@
*
* autoscript.ts
*
- * Copyright (c) 2020 ForgeRock. All rights reserved.
+ * Copyright (c) 2020 - 2025 Ping Identity Corporation. All rights reserved.
* This software may be modified and distributed under the terms
* of the MIT license. See the LICENSE file for details.
*/
diff --git a/e2e/autoscript-apps/src/authn-basic/autoscript.ts b/e2e/autoscript-apps/src/authn-basic/autoscript.ts
index dc986031f..1870bba87 100644
--- a/e2e/autoscript-apps/src/authn-basic/autoscript.ts
+++ b/e2e/autoscript-apps/src/authn-basic/autoscript.ts
@@ -3,7 +3,7 @@
*
* autoscript.ts
*
- * Copyright (c) 2020 ForgeRock. All rights reserved.
+ * Copyright (c) 2020 - 2025 Ping Identity Corporation. All rights reserved.
* This software may be modified and distributed under the terms
* of the MIT license. See the LICENSE file for details.
*/
diff --git a/e2e/autoscript-apps/src/authn-central-login-no-iframe/autoscript.ts b/e2e/autoscript-apps/src/authn-central-login-no-iframe/autoscript.ts
new file mode 100644
index 000000000..4b7b68ddd
--- /dev/null
+++ b/e2e/autoscript-apps/src/authn-central-login-no-iframe/autoscript.ts
@@ -0,0 +1,145 @@
+/*
+ * @forgerock/javascript-sdk
+ *
+ * autoscript.ts
+ *
+ * Copyright (c) 2020 - 2025 Ping Identity Corporation. All rights reserved.
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+// @ts-nocheck
+import * as forgerock from '@forgerock/javascript-sdk';
+import { delay as rxDelay, map, mergeMap } from 'rxjs/operators';
+import { from } from 'rxjs';
+
+function autoscript() {
+ const delay = 0;
+
+ const url = new URL(window.location.href);
+ const amUrl = url.searchParams.get('amUrl') || 'http://localhost:9443/am';
+ const preAuthenticated = url.searchParams.get('preAuthenticated') || 'false';
+ const code = url.searchParams.get('code') || '';
+ const clientId = url.searchParams.get('clientId');
+ const client_id = url.searchParams.get('client_id');
+ const error = url.searchParams.get('error_description') || false;
+ const realmPath = url.searchParams.get('realmPath') || 'root';
+ const scope = url.searchParams.get('scope') || 'openid profile me.read';
+ const state = url.searchParams.get('state') || '';
+ const acr_values = url.searchParams.get('acr') || 'skipBackgroundRequest';
+ // in central login we use an auth query param for the return of our mock 401 request
+ // this is to prevent the evaluation of the page before we have technically authenticated
+ const auth = url.searchParams.get('auth') || false;
+
+ let tokenStore = url.searchParams.get('tokenStore') || 'localStorage';
+
+ // Support full redirects by setting storage, rather than rely purely on URL
+ if (!localStorage.getItem('tokenStore')) {
+ localStorage.setItem('tokenStore', tokenStore);
+ } else {
+ tokenStore = localStorage.getItem('tokenStore');
+ }
+
+ console.log('Configure the SDK');
+ forgerock.Config.set({
+ clientId: clientId || client_id || 'CentralLoginOAuthClient',
+ realmPath,
+ redirectUri: `${url.origin}/src/${
+ preAuthenticated === 'false' ? 'authn-central-login' : '_callback'
+ }/`,
+ scope,
+ serverConfig: {
+ baseUrl: amUrl,
+ },
+ tokenStore,
+ });
+
+ if (!code && !state) {
+ try {
+ forgerock.SessionManager.logout();
+ } catch (err) {
+ // Do nothing
+ }
+ }
+
+ console.log('Initiate first step with `undefined`');
+
+ // Wrapping in setTimeout to give the test time to bind listener to console.log
+ setTimeout(() => {
+ from([1])
+ .pipe(
+ map(() => {
+ if (preAuthenticated === 'true') {
+ console.log('Set mock cookie to represent existing session');
+ document.cookie = 'iPlanetDirectoryPro=abcd1234; domain=localhost; path=/';
+ if (code && state) {
+ window.sessionStorage.setItem(
+ `FR-SDK-${clientId}`,
+ JSON.stringify({ responseType: 'code', state, verifier: '1234' }),
+ );
+ }
+ }
+ return;
+ }),
+ rxDelay(delay),
+ mergeMap((step) => {
+ let tokens;
+ // detect when in iframe, throw as error if so
+ if (window.self !== window.top) {
+ throw new Error('Loaded_In_Iframe');
+ } else if (code && state) {
+ tokens = forgerock.TokenManager.getTokens({
+ query: { code, state, acr_values },
+ });
+ } else {
+ tokens = forgerock.TokenManager.getTokens({
+ skipBackgroundRequest: true,
+ login: 'redirect',
+ query: { acr_values },
+ });
+ }
+ return tokens;
+ }),
+ map((tokens) => {
+ if (tokens.accessToken) {
+ console.log('OAuth authorization successful');
+ document.body.innerHTML = 'Login successful
';
+ } else {
+ throw new Error('Session_Error');
+ }
+ }),
+ rxDelay(delay),
+ mergeMap(() => {
+ console.log('Remove cookie');
+ document.cookie = '';
+ console.log('Initiate logout');
+ return forgerock.FRUser.logout();
+ }),
+ )
+ .subscribe({
+ error: (err) => {
+ /*
+ * We added this because Playwright was too fast for the dom element.
+ * When we make a request to central login we have to force a 401 page to mimick the real life scenario of the page being requested
+ * If we do this, we append a query param of auth to make sure we don't complete the flow until we are redirected from that page
+ * By saying we have !auth query param value, we are essentially mimicking the idea that we are waiting for the central login redirect
+ * to complete the redirect.
+ */
+ if (!auth) {
+ return;
+ }
+ console.log(`Error: ${err.message}`);
+ document.body.innerHTML = `${err.message}
`;
+ localStorage.clear();
+ },
+ complete: () => {
+ console.log('Test script complete');
+ document.body.innerHTML = `Test script complete
`;
+ history.replaceState(null, null, window.location.origin + window.location.pathname);
+ localStorage.clear();
+ },
+ });
+ }, 250);
+}
+
+autoscript();
+export default autoscript;
diff --git a/e2e/autoscript-apps/src/authn-wellknown/index.html b/e2e/autoscript-apps/src/authn-central-login-no-iframe/index.html
similarity index 83%
rename from e2e/autoscript-apps/src/authn-wellknown/index.html
rename to e2e/autoscript-apps/src/authn-central-login-no-iframe/index.html
index e7419ea4f..016c1758f 100644
--- a/e2e/autoscript-apps/src/authn-wellknown/index.html
+++ b/e2e/autoscript-apps/src/authn-central-login-no-iframe/index.html
@@ -28,8 +28,6 @@
-
-
-
+