feat(clerk-js,types): Do not require current password if Reverifaction enabled (#5284)

Co-authored-by: panteliselef <panteliselef@outlook.com>
Co-authored-by: Stefanos Anagnostou <anagstef@users.noreply.github.com>

Author: 3 people

.changeset/heavy-hornets-yawn.md

@@ -0,0 +1,9 @@
+---
+'@clerk/clerk-js': patch
+'@clerk/types': patch
+'@clerk/clerk-expo': patch
+---
+
+Improve the UX on Reverification by not requiring the user's current password. 
+
+The user has already verified themselves using Reverification, so there is no point to maintain a two level verification in case they would like to change their password. Also, Reverification is a stronger verification factor, as it includes strategies such as email code.

packages/clerk-js/src/core/resources/AuthConfig.ts

@@ -6,6 +6,7 @@ import { BaseResource } from './internal';
 export class AuthConfig extends BaseResource implements AuthConfigResource {
   singleSessionMode!: boolean;
   claimedAt: Date | null = null;
+  reverification!: boolean;
 
   public constructor(data: AuthConfigJSON) {
     super();
@@ -15,6 +16,7 @@ export class AuthConfig extends BaseResource implements AuthConfigResource {
   protected fromJSON(data: AuthConfigJSON | null): this {
     this.singleSessionMode = data ? data.single_session_mode : true;
     this.claimedAt = data?.claimed_at ? unixEpochToDate(data.claimed_at) : null;
+    this.reverification = data ? data.reverification : true;
     return this;
   }
 
@@ -24,6 +26,7 @@ export class AuthConfig extends BaseResource implements AuthConfigResource {
       id: this.id || '',
       single_session_mode: this.singleSessionMode,
       claimed_at: this.claimedAt ? this.claimedAt.getTime() : null,
+      reverification: this.reverification,
     };
   }
 }

packages/clerk-js/src/core/resources/__tests__/Environment.test.ts

@@ -7,7 +7,13 @@ describe('Environment', () => {
     const environmentJSON = {
       object: 'environment',
       id: '',
-      auth_config: { object: 'auth_config', id: '', single_session_mode: true, claimed_at: null },
+      auth_config: {
+        object: 'auth_config',
+        id: '',
+        single_session_mode: true,
+        claimed_at: null,
+        reverification: true,
+      },
       display_config: {
         object: 'display_config',
         id: 'display_config_DUMMY_ID',
@@ -240,7 +246,13 @@ describe('Environment', () => {
     const environmentJSON = {
       object: 'environment',
       id: '',
-      auth_config: { object: 'auth_config', id: '', single_session_mode: true, claimed_at: null },
+      auth_config: {
+        object: 'auth_config',
+        id: '',
+        single_session_mode: true,
+        claimed_at: null,
+        reverification: true,
+      },
       display_config: {
         object: 'display_config',
         id: 'display_config_DUMMY_ID',