feat: Enroll Authenticator via /authorize

[denysoblohin-okta]

• Added new method endpoints.authorize.enrollAuthenticator(options: EnrollAuthenticatorOptions).
  Added enrollAmrValues to TokenParams.
  EnrollAuthenticatorOptions extends TokenParams and requires enrollAmrValues .
• User will be redirected to redirectUri after authenticator enrolment, but without tokens since responseType is none.
  To allow user to still use handleRedirect in this new flow (to show errors and redirect to originalUri on success, but without storing tokens), added responseType to TokenResponse.
  In case of none value, don't clear tokens in storeTokensFromRedirect .
• Added handleRedirect(options), deprecated handleLoginRedirect(tokens, options) in readme
• Updated test app: added option Enroll AMR values to config and button Enroll authenticator (for both auth and non-auth states)
• Updated readme.
• Added unit tests, type tests. Added enroll-authenticator.feature, needs FF OAUTH2_ENROLL_AUTHENTICATOR

Internal ref: https://oktainc.atlassian.net/browse/OKTA-539548

Tech design: https://oktawiki.atlassian.net/wiki/spaces/eng/pages/2630550024/Technical+Design+for+Enroll+Authenticator+via+authorize
List of AMR values: https://oktawiki.atlassian.net/wiki/spaces/eng/pages/2230422496/Authenticator+Platform+Taxonomy#AuthenticatorPlatformTaxonomy-Table

[codecov-commenter]

Codecov Report

Base: 92.11% // Head: 92.25% // Increases project coverage by +0.13% 🎉

Coverage data is based on head (5d5cc12) compared to base (fa37178).
Patch coverage: 100.00% of modified lines in pull request are covered.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1324      +/-   ##
==========================================
+ Coverage   92.11%   92.25%   +0.13%     
==========================================
  Files         214      218       +4     
  Lines        5152     5204      +52     
  Branches     1094     1103       +9     
==========================================
+ Hits         4746     4801      +55     
+ Misses        383      380       -3     
  Partials       23       23              

Impacted Files	Coverage Δ
lib/core/mixin.ts	100.00% <100.00%> (ø)
lib/oidc/endpoints/authorize.ts	100.00% <100.00%> (ø)
lib/oidc/enrollAuthenticator.ts	100.00% <100.00%> (ø)
lib/oidc/factory/api.ts	83.33% <100.00%> (+1.28%)	⬆️
lib/oidc/getWithRedirect.ts	100.00% <100.00%> (ø)
lib/oidc/handleOAuthResponse.ts	100.00% <100.00%> (ø)
lib/oidc/mixin/index.ts	92.40% <100.00%> (+1.37%)	⬆️
lib/oidc/types/index.ts	100.00% <100.00%> (ø)
lib/oidc/util/defaultEnrollAuthenticatorParams.ts	100.00% <100.00%> (ø)
lib/oidc/util/enrollAuthenticatorMeta.ts	100.00% <100.00%> (ø)
... and 4 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[aarongranick-okta]

Looking pretty good overall. Just a couple things:

• See comments on _setLocation. Let's not continue this pattern. If possible let's refactor existing function so that this pattern doesn't exist anymore

• Is cucumber feature spec part of this task? If E2E testing is not possible at this time because code is not in production, would make sense to at least write out the scenario definition in a .feature file (and then mark it with a @Skip annotation)

[aarongranick-okta]

Why this change? Does empty scope query parameter have a special meaning to the authorize endpoint?

[denysoblohin-okta]

For authenticator enrolment via authorize endpoint scope should be deleted.
https://github.com/okta/okta-auth-js/pull/1324/files#diff-c7c807658c1f989f83fd7287c01e1c459ffa33b5afc14bb32dc9bd23b51e0048R39