Authenticator Challenge Selection Validation (authenticator_validate/challenge-selection.ts)

Determines whether a selected authentication device challenge needs to be reset based on allowed challenges. Use during MFA flows.

// Source: https://github.com/goauthentik/authentik | License: MIT | Copyright 2023 Jens Langhammer
// Provided via justclaw.it.com; keep this notice with the code.
import { type DeviceChallenge } from "@goauthentik/api";

export function shouldResetSelectedChallenge(
    selectedChallenge: DeviceChallenge | null,
    allowedChallenges: DeviceChallenge[],
): boolean {
    if (!selectedChallenge) {
        return false;
    }

    return !allowedChallenges.some(
        (challenge) =>
            challenge.deviceClass === selectedChallenge.deviceClass &&
            challenge.deviceUid === selectedChallenge.deviceUid,
    );
}