fix: address PR review feedback on passkey and MyAccount API

- Refactor passkey.signup/login to use of(client).pipe(concatMap, tap,
  catchError) pattern, aligning with getAccessTokenSilently and
  loginWithCustomTokenExchange: errors now emit on error$ via
  authState.setError(), and the Observable is lazy (deferred until
  subscription)
- Add corresponding unit tests asserting error$ receives passkey errors
- Fix switchMap callbacks in EXAMPLES.md enrollment snippets: add async
  to all callbacks that use await (passkey, TOTP, phone, email, password)

Author: cschetan77

EXAMPLES.md

@@ -1823,7 +1823,7 @@ import { switchMap } from 'rxjs';
 this.auth.myAccount
   .enrollmentChallenge({ type: 'passkey' })
   .pipe(
-    switchMap((challenge) => {
+    switchMap(async (challenge) => {
       // Trigger the browser's WebAuthn credential creation ceremony
       const credential = await navigator.credentials.create({
         publicKey: {
@@ -1858,7 +1858,7 @@ import { switchMap } from 'rxjs';
 this.auth.myAccount
   .enrollmentChallenge({ type: 'totp' })
   .pipe(
-    switchMap((challenge) => {
+    switchMap(async (challenge) => {
       // challenge.barcode_uri   — render as a QR code for the user to scan
       // challenge.manual_input_code — fallback code for manual entry
       showQrCode(challenge.barcode_uri);
@@ -1888,7 +1888,7 @@ this.auth.myAccount
     preferred_authentication_method: 'sms', // or 'voice'
   })
   .pipe(
-    switchMap((challenge) => {
+    switchMap(async (challenge) => {
       const otpCode = await promptUserForOtp();
 
       return this.auth.myAccount.enrollmentVerify({
@@ -1910,7 +1910,7 @@ import { switchMap } from 'rxjs';
 this.auth.myAccount
   .enrollmentChallenge({ type: 'email', email: 'user@example.com' })
   .pipe(
-    switchMap((challenge) => {
+    switchMap(async (challenge) => {
       const otpCode = await promptUserForOtp();
 
       return this.auth.myAccount.enrollmentVerify({
@@ -1977,7 +1977,7 @@ import { switchMap } from 'rxjs';
 this.auth.myAccount
   .enrollmentChallenge({ type: 'password' })
   .pipe(
-    switchMap((challenge) => {
+    switchMap(async (challenge) => {
       const newPassword = await promptUserForPassword();
 
       return this.auth.myAccount.enrollmentVerify({

projects/auth0-angular/src/lib/auth.service.spec.ts

@@ -1670,6 +1670,23 @@ describe('AuthService', () => {
         });
       });
 
+      it('should record errors in the error$ observable', (done) => {
+        const errorObj = new Error('WebAuthn not supported');
+        (
+          auth0Client.passkey.signup as unknown as jest.SpyInstance
+        ).mockRejectedValue(errorObj);
+        const service = createService();
+
+        service.passkey.signup({ email: 'user@example.com' }).subscribe({
+          error: () => {},
+        });
+
+        service.error$.subscribe((err: Error) => {
+          expect(err).toBe(errorObj);
+          done();
+        });
+      });
+
       it('should bubble errors', (done) => {
         const errorObj = new Error('WebAuthn not supported');
         (
@@ -1734,6 +1751,23 @@ describe('AuthService', () => {
         });
       });
 
+      it('should record errors in the error$ observable', (done) => {
+        const errorObj = new Error('User cancelled');
+        (
+          auth0Client.passkey.login as unknown as jest.SpyInstance
+        ).mockRejectedValue(errorObj);
+        const service = createService();
+
+        service.passkey.login().subscribe({
+          error: () => {},
+        });
+
+        service.error$.subscribe((err: Error) => {
+          expect(err).toBe(errorObj);
+          done();
+        });
+      });
+
       it('should bubble errors', (done) => {
         const errorObj = new Error('User cancelled');
         (

projects/auth0-angular/src/lib/auth.service.ts

@@ -529,17 +529,23 @@ export class AuthService<TAppState extends AppState = AppState>
    */
   readonly passkey: ObservablePasskeyApiClient = {
     signup: (options: PasskeySignupOptions) =>
-      from(
-        this.auth0Client.passkey.signup(options).then((tokenResponse) => {
+      of(this.auth0Client).pipe(
+        concatMap((client) => client.passkey.signup(options)),
+        tap(() => this.authState.refresh()),
+        catchError((error) => {
+          this.authState.setError(error);
           this.authState.refresh();
-          return tokenResponse;
+          return throwError(error);
         })
       ),
     login: (options?: PasskeyLoginOptions) =>
-      from(
-        this.auth0Client.passkey.login(options).then((tokenResponse) => {
+      of(this.auth0Client).pipe(
+        concatMap((client) => client.passkey.login(options)),
+        tap(() => this.authState.refresh()),
+        catchError((error) => {
+          this.authState.setError(error);
           this.authState.refresh();
-          return tokenResponse;
+          return throwError(error);
         })
       ),
   };