@0xchain/auth 1.1.0-beta.36 → 1.1.0-beta.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1,5 +1,6 @@
1
1
  import { default as LoginApi } from './loginApi';
2
2
  import { default as TokenManager } from '@0xchain/token';
3
+ export * from './session';
3
4
  export declare function logout(): void;
4
5
  export declare function fetchUserProfile(): Promise<any>;
5
6
  export { TokenManager, LoginApi };
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,MAAM,YAAY,CAAA;AACjC,OAAO,YAAgC,MAAM,gBAAgB,CAAA;AAC7D,wBAAgB,MAAM,SAqBrB;AAED,wBAAgB,gBAAgB,iBAO/B;AAED,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,MAAM,YAAY,CAAA;AACjC,OAAO,YAAgC,MAAM,gBAAgB,CAAA;AAC7D,cAAc,WAAW,CAAA;AACzB,wBAAgB,MAAM,SAqBrB;AAED,wBAAgB,gBAAgB,iBAO/B;AAED,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA"}
package/dist/index.js CHANGED
@@ -2,6 +2,126 @@ import request from "@0xchain/request";
2
2
  import { default as default2 } from "./loginApi.js";
3
3
  import { removeAllToken } from "@0xchain/token";
4
4
  import { default as default3 } from "@0xchain/token";
5
+ import cookies from "js-cookie";
6
+ const ACCESS_TOKEN_COOKIE_KEYS = ["access_token", "id_token"];
7
+ const REFRESH_TOKEN_COOKIE_KEYS = ["refresh_token"];
8
+ const AUTH_COOKIE_KEYS = [
9
+ ...ACCESS_TOKEN_COOKIE_KEYS,
10
+ ...REFRESH_TOKEN_COOKIE_KEYS
11
+ ];
12
+ const AUTH_SESSION_KEY = "__AUTH_SESSION__";
13
+ const SESSION_STORAGE_KEY = "auth:session";
14
+ function base64UrlDecode(input) {
15
+ const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
16
+ const padLength = (4 - normalized.length % 4) % 4;
17
+ const padded = normalized + "=".repeat(padLength);
18
+ if (typeof window !== "undefined" && typeof window.atob === "function") {
19
+ const binary = window.atob(padded);
20
+ const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
21
+ return new TextDecoder().decode(bytes);
22
+ }
23
+ return Buffer.from(padded, "base64").toString("utf8");
24
+ }
25
+ function decodeJwtPayload(token) {
26
+ if (!token) return null;
27
+ const parts = token.split(".");
28
+ if (parts.length < 2) return null;
29
+ try {
30
+ const payloadJson = base64UrlDecode(parts[1]);
31
+ return JSON.parse(payloadJson);
32
+ } catch {
33
+ return null;
34
+ }
35
+ }
36
+ function isJwtExpired(payload, options) {
37
+ if (!payload?.exp) return false;
38
+ const skew = options?.skewSeconds ?? 15;
39
+ const now = Math.floor(Date.now() / 1e3);
40
+ return payload.exp <= now + skew;
41
+ }
42
+ function pickToken(getter, keys) {
43
+ for (const key of keys) {
44
+ const value = getter(key);
45
+ if (value) return value;
46
+ }
47
+ return null;
48
+ }
49
+ function createSessionFromTokens({
50
+ accessToken,
51
+ refreshToken
52
+ }) {
53
+ const claims = decodeJwtPayload(accessToken);
54
+ const hasAccessToken = Boolean(accessToken);
55
+ const hasRefreshToken = Boolean(refreshToken);
56
+ const accessTokenExpired = isJwtExpired(claims);
57
+ return {
58
+ isLoggedIn: hasRefreshToken || hasAccessToken && !accessTokenExpired,
59
+ hasAccessToken,
60
+ hasRefreshToken,
61
+ accessTokenExpired,
62
+ claims
63
+ };
64
+ }
65
+ function createSessionFromCookieGetter(getter) {
66
+ const accessToken = pickToken(getter, ACCESS_TOKEN_COOKIE_KEYS);
67
+ const refreshToken = pickToken(getter, REFRESH_TOKEN_COOKIE_KEYS);
68
+ return createSessionFromTokens({ accessToken, refreshToken });
69
+ }
70
+ function createSessionFromCookieHeader(cookieHeader) {
71
+ const getter = (key) => {
72
+ const items = cookieHeader.split(";").map((item) => item.trim());
73
+ for (const item of items) {
74
+ if (!item.startsWith(`${key}=`)) continue;
75
+ const value = item.slice(key.length + 1);
76
+ return value ? decodeURIComponent(value) : null;
77
+ }
78
+ return null;
79
+ };
80
+ return createSessionFromCookieGetter(getter);
81
+ }
82
+ function getClientSession() {
83
+ return createSessionFromCookieGetter((key) => cookies.get(key) ?? null);
84
+ }
85
+ async function fetchClientSession(signal, sessionUrl = "/api/auth/session") {
86
+ const res = await fetch(sessionUrl, {
87
+ method: "GET",
88
+ credentials: "include",
89
+ signal,
90
+ cache: "no-store"
91
+ });
92
+ if (!res.ok) {
93
+ throw new Error(`Failed to load session: ${res.status}`);
94
+ }
95
+ return await res.json();
96
+ }
97
+ function getWin() {
98
+ if (typeof window === "undefined") return null;
99
+ return window;
100
+ }
101
+ function setRuntimeSession(session) {
102
+ const win = getWin();
103
+ if (win) win[AUTH_SESSION_KEY] = session;
104
+ try {
105
+ sessionStorage.setItem(SESSION_STORAGE_KEY, JSON.stringify(session));
106
+ } catch {
107
+ }
108
+ }
109
+ function getRuntimeSession() {
110
+ const win = getWin();
111
+ if (win?.[AUTH_SESSION_KEY]) return win[AUTH_SESSION_KEY];
112
+ try {
113
+ const raw = sessionStorage.getItem(SESSION_STORAGE_KEY);
114
+ if (!raw) return null;
115
+ return JSON.parse(raw);
116
+ } catch {
117
+ return null;
118
+ }
119
+ }
120
+ function getRuntimeLoginState() {
121
+ const session = getRuntimeSession();
122
+ if (!session) return null;
123
+ return session.isLoggedIn;
124
+ }
5
125
  function logout() {
6
126
  removeAllToken();
7
127
  const iframe = document.createElement("iframe");
@@ -27,8 +147,21 @@ function fetchUserProfile() {
27
147
  });
28
148
  }
29
149
  export {
150
+ ACCESS_TOKEN_COOKIE_KEYS,
151
+ AUTH_COOKIE_KEYS,
30
152
  default2 as LoginApi,
153
+ REFRESH_TOKEN_COOKIE_KEYS,
31
154
  default3 as TokenManager,
155
+ createSessionFromCookieGetter,
156
+ createSessionFromCookieHeader,
157
+ createSessionFromTokens,
158
+ decodeJwtPayload,
159
+ fetchClientSession,
32
160
  fetchUserProfile,
33
- logout
161
+ getClientSession,
162
+ getRuntimeLoginState,
163
+ getRuntimeSession,
164
+ isJwtExpired,
165
+ logout,
166
+ setRuntimeSession
34
167
  };
@@ -0,0 +1,30 @@
1
+ export declare const ACCESS_TOKEN_COOKIE_KEYS: readonly ["access_token", "id_token"];
2
+ export declare const REFRESH_TOKEN_COOKIE_KEYS: readonly ["refresh_token"];
3
+ export declare const AUTH_COOKIE_KEYS: readonly ["access_token", "id_token", "refresh_token"];
4
+ export type AuthSession = {
5
+ isLoggedIn: boolean;
6
+ hasAccessToken: boolean;
7
+ hasRefreshToken: boolean;
8
+ accessTokenExpired: boolean;
9
+ claims: Record<string, unknown> | null;
10
+ };
11
+ type JwtPayload = Record<string, unknown> & {
12
+ exp?: number;
13
+ };
14
+ export declare function decodeJwtPayload(token?: string | null): JwtPayload | null;
15
+ export declare function isJwtExpired(payload: JwtPayload | null, options?: {
16
+ skewSeconds?: number;
17
+ }): boolean;
18
+ export declare function createSessionFromTokens({ accessToken, refreshToken, }: {
19
+ accessToken?: string | null;
20
+ refreshToken?: string | null;
21
+ }): AuthSession;
22
+ export declare function createSessionFromCookieGetter(getter: (key: string) => string | null): AuthSession;
23
+ export declare function createSessionFromCookieHeader(cookieHeader: string): AuthSession;
24
+ export declare function getClientSession(): AuthSession;
25
+ export declare function fetchClientSession(signal?: AbortSignal, sessionUrl?: string): Promise<AuthSession>;
26
+ export declare function setRuntimeSession(session: AuthSession): void;
27
+ export declare function getRuntimeSession(): AuthSession | null;
28
+ export declare function getRuntimeLoginState(): boolean | null;
29
+ export {};
30
+ //# sourceMappingURL=session.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB,uCAAwC,CAAC;AAC9E,eAAO,MAAM,yBAAyB,4BAA6B,CAAC;AACpE,eAAO,MAAM,gBAAgB,wDAGnB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACxC,CAAC;AAEF,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAqBF,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAUzE;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,UAAU,GAAG,IAAI,EAC1B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAKT;AAaD,wBAAgB,uBAAuB,CAAC,EACtC,WAAW,EACX,YAAY,GACb,EAAE;IACD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,WAAW,CAYd;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GACrC,WAAW,CAIb;AAED,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAW/E;AAED,wBAAgB,gBAAgB,IAAI,WAAW,CAE9C;AAED,wBAAsB,kBAAkB,CACtC,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,SAAsB,GAC/B,OAAO,CAAC,WAAW,CAAC,CAWtB;AAOD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAQ5D;AAED,wBAAgB,iBAAiB,IAAI,WAAW,GAAG,IAAI,CAUtD;AAED,wBAAgB,oBAAoB,IAAI,OAAO,GAAG,IAAI,CAIrD"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@0xchain/auth",
3
- "version": "1.1.0-beta.36",
3
+ "version": "1.1.0-beta.38",
4
4
  "type": "module",
5
5
  "main": "./dist/index.js",
6
6
  "module": "./dist/index.js",
@@ -30,8 +30,8 @@
30
30
  "js-cookie": "3.0.5"
31
31
  },
32
32
  "dependencies": {
33
- "@0xchain/request": "1.1.0-beta.36",
34
- "@0xchain/token": "1.1.0-beta.36"
33
+ "@0xchain/request": "1.1.0-beta.38",
34
+ "@0xchain/token": "1.1.0-beta.38"
35
35
  },
36
36
  "nx": {
37
37
  "tags": [