@abapify/browser-auth 0.3.6 → 0.4.1

package/dist/index.d.mts

@@ -0,0 +1,183 @@
+//#region src/types.d.ts
+/**
+ * Browser Auth Core Types
+ *
+ * Shared types for browser-based SSO authentication.
+ * Used by both Playwright and Puppeteer adapters.
+ */
+/**
+ * Cookie data structure (browser-agnostic)
+ */
+interface CookieData {
+  name: string;
+  value: string;
+  domain: string;
+  path: string;
+  expires?: number;
+  httpOnly?: boolean;
+  secure?: boolean;
+  sameSite?: 'Strict' | 'Lax' | 'None';
+}
+/**
+ * Browser authentication credentials
+ */
+interface BrowserCredentials {
+  /** SAP system base URL */
+  baseUrl: string;
+  /** Cookies from authenticated session */
+  cookies: CookieData[];
+  /** When the session was created */
+  authenticatedAt: Date;
+  /** User agent used during authentication */
+  userAgent?: string;
+}
+/**
+ * Browser auth configuration options
+ */
+interface BrowserAuthOptions {
+  /** SAP system URL (used for cookie domain matching) */
+  url: string;
+  /**
+   * URL to open for SSO login (default: {url}/sap/bc/adt/core/http/systeminformation).
+   * Use this when the base SAP URL requires basic auth but SSO is available
+   * via a different path (e.g., /fiori, /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html).
+   */
+  loginUrl?: string;
+  /** Show browser window during login (default: false) */
+  headless?: boolean;
+  /** Timeout for login in ms (default: 300000 = 5 minutes) */
+  timeout?: number;
+  /** Custom user agent */
+  userAgent?: string;
+  /**
+   * Cookie names/patterns to wait for before completing auth.
+   * Supports wildcards: 'SAP_SESSIONID_*'
+   * Auth completes when ALL patterns are matched.
+   */
+  requiredCookies?: string[];
+  /** Path to persistent browser profile */
+  userDataDir?: string | boolean;
+  /** Ignore HTTPS errors (self-signed certificates) */
+  ignoreHTTPSErrors?: boolean;
+}
+/**
+ * Response event data from browser adapter
+ */
+interface ResponseEvent {
+  url: string;
+  status: number;
+}
+/**
+ * Browser adapter interface - implemented by Playwright/Puppeteer wrappers
+ */
+interface BrowserAdapter {
+  /**
+   * Launch browser and create context
+   */
+  launch(options: {
+    headless: boolean;
+    userDataDir?: string;
+    ignoreHTTPSErrors?: boolean;
+    userAgent?: string;
+  }): Promise<void>;
+  /**
+   * Create a new page
+   */
+  newPage(): Promise<void>;
+  /**
+   * Navigate to URL
+   */
+  goto(url: string, options?: {
+    timeout?: number;
+  }): Promise<void>;
+  /**
+   * Get all cookies for a domain
+   */
+  getCookies(): Promise<CookieData[]>;
+  /**
+   * Clear cookies matching a domain pattern
+   */
+  clearCookies(domain: string): Promise<void>;
+  /**
+   * Get user agent string
+   */
+  getUserAgent(): Promise<string>;
+  /**
+   * Close the page
+   */
+  closePage(): Promise<void>;
+  /**
+   * Close browser context
+   */
+  close(): Promise<void>;
+  /**
+   * Register event handler for responses
+   */
+  onResponse(handler: (event: ResponseEvent) => void): void;
+  /**
+   * Register event handler for page close
+   */
+  onPageClose(handler: () => void): void;
+}
+/**
+ * Test result for credential validation
+ */
+interface TestResult {
+  valid: boolean;
+  error?: string;
+  responseTime?: number;
+}
+//#endregion
+//#region src/auth-core.d.ts
+interface AuthenticateOptions extends BrowserAuthOptions {
+  /** Callback for logging */
+  log?: (message: string) => void;
+}
+/**
+ * Authenticate using browser-based SSO
+ *
+ * This is the main entry point - it orchestrates the auth flow using the provided adapter.
+ * The adapter handles browser-specific operations, this function handles the logic.
+ */
+declare function authenticate(adapter: BrowserAdapter, options: AuthenticateOptions): Promise<BrowserCredentials>;
+/**
+ * Test if credentials are still valid
+ */
+declare function testCredentials(credentials: BrowserCredentials, options?: {
+  timeout?: number;
+}): Promise<{
+  valid: boolean;
+  error?: string;
+  responseTime?: number;
+}>;
+/**
+ * Convert credentials to HTTP cookie header
+ */
+declare function toCookieHeader(credentials: BrowserCredentials): string;
+/**
+ * Convert credentials to HTTP headers object
+ */
+declare function toHeaders(credentials: BrowserCredentials): Record<string, string>;
+//#endregion
+//#region src/utils.d.ts
+/**
+ * Browser Auth Utilities
+ *
+ * Cookie matching and path resolution utilities.
+ */
+/**
+ * Resolve userDataDir configuration to an absolute path
+ */
+declare function resolveUserDataDir(userDataDir?: string | boolean): string | undefined;
+/**
+ * Check if a cookie name matches a pattern (supports * wildcard)
+ * @example matchesCookiePattern('SAP_SESSIONID_S0D_200', 'SAP_SESSIONID_*') // true
+ */
+declare function matchesCookiePattern(cookieName: string, pattern: string): boolean;
+/**
+ * Check if a cookie matches any of the required patterns
+ */
+declare function cookieMatchesAny(cookieName: string, patterns: string[]): boolean;
+//#endregion
+export { type AuthenticateOptions, type BrowserAdapter, type BrowserAuthOptions, type BrowserCredentials, type CookieData, type ResponseEvent, type TestResult, authenticate, cookieMatchesAny, matchesCookiePattern, resolveUserDataDir, testCredentials, toCookieHeader, toHeaders };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/auth-core.ts","../src/utils.ts"],"mappings":";;AAUA;;;;;;;;UAAiB,UAAA;EACf,IAAA;EACA,KAAA;EACA,MAAA;EACA,IAAA;EACA,OAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;UAMe,kBAAA;EAME;EAJjB,OAAA;EAMS;EAJT,OAAA,EAAS,UAAA;EAUM;EARf,eAAA,EAAiB,IAAA;;EAEjB,SAAA;AAAA;;;;UAMe,kBAAA;EAoBf;EAlBA,GAAA;EAsBA;;;AAMF;;EAtBE,QAAA;EAuBA;EArBA,QAAA;EA4Be;EA1Bf,OAAA;;EAEA,SAAA;EAsCW;;;;;EAhCX,eAAA;EAyDa;EAvDb,WAAA;EAiE4B;EA/D5B,iBAAA;AAAA;;;;UAMe,aAAA;EACf,GAAA;EACA,MAAA;AAAA;;;;UAMe,cAAA;EAmBe;;;EAf9B,MAAA,CAAO,OAAA;IACL,QAAA;IACA,WAAA;IACA,iBAAA;IACA,SAAA;EAAA,IACE,OAAA;EAyBJ;;;EApBA,OAAA,IAAW,OAAA;EA8BX;;;EAzBA,IAAA,CAAK,GAAA,UAAa,OAAA;IAAY,OAAA;EAAA,IAAqB,OAAA;EAmCnD;;;EA9BA,UAAA,IAAc,OAAA,CAAQ,UAAA;EAoCP;;;EA/Bf,YAAA,CAAa,MAAA,WAAiB,OAAA;EAgC9B;;;EA3BA,YAAA,IAAgB,OAAA;EA6BJ;;;EAxBZ,SAAA,IAAa,OAAA;EC9FE;;;EDmGf,KAAA,IAAS,OAAA;ECnGkC;;;EDwG3C,UAAA,CAAW,OAAA,GAAU,KAAA,EAAO,aAAA;ECtGN;AASxB;;EDkGE,WAAA,CAAY,OAAA;AAAA;;;;UAMG,UAAA;EACf,KAAA;EACA,KAAA;EACA,YAAA;AAAA;;;UCtHe,mBAAA,SAA4B,kBAAA;EDP3C;ECSA,GAAA,IAAO,OAAA;AAAA;;;;;ADCT;;iBCQsB,YAAA,CACpB,OAAA,EAAS,cAAA,EACT,OAAA,EAAS,mBAAA,GACR,OAAA,CAAQ,kBAAA;;;;iBAgJW,eAAA,CACpB,WAAA,EAAa,kBAAA,EACb,OAAA;EAAY,OAAA;AAAA,IACX,OAAA;EAAU,KAAA;EAAgB,KAAA;EAAgB,YAAA;AAAA;;;;iBA+C7B,cAAA,CAAe,WAAA,EAAa,kBAAA;;;;iBAO5B,SAAA,CACd,WAAA,EAAa,kBAAA,GACZ,MAAA;;;;ADpOH;;;;;;;iBEIgB,kBAAA,CACd,WAAA;;;;;iBAec,oBAAA,CACd,UAAA,UACA,OAAA;;AFRF;;iBEoBgB,gBAAA,CACd,UAAA,UACA,QAAA"}

package/dist/index.mjs

@@ -0,0 +1,157 @@
+import { homedir } from "os";
+import { join } from "path";
+
+//#region src/utils.ts
+/**
+* Browser Auth Utilities
+*
+* Cookie matching and path resolution utilities.
+*/
+const DEFAULT_USER_DATA_DIR = join(homedir(), ".adt", "browser-profile");
+/**
+* Resolve userDataDir configuration to an absolute path
+*/
+function resolveUserDataDir(userDataDir) {
+	if (userDataDir === true) return DEFAULT_USER_DATA_DIR;
+	if (typeof userDataDir === "string") return userDataDir;
+}
+/**
+* Check if a cookie name matches a pattern (supports * wildcard)
+* @example matchesCookiePattern('SAP_SESSIONID_S0D_200', 'SAP_SESSIONID_*') // true
+*/
+function matchesCookiePattern(cookieName, pattern) {
+	if (!pattern.includes("*")) return cookieName === pattern;
+	const regexPattern = pattern.replaceAll(/\*/g, ".*");
+	return new RegExp(`^${regexPattern}$`).test(cookieName);
+}
+/**
+* Check if a cookie matches any of the required patterns
+*/
+function cookieMatchesAny(cookieName, patterns) {
+	return patterns.some((pattern) => matchesCookiePattern(cookieName, pattern));
+}
+
+//#endregion
+//#region src/auth-core.ts
+const DEFAULT_TIMEOUT = 3e5;
+const SYSTEM_INFO_PATH = "/sap/bc/adt/core/http/systeminformation";
+/**
+* Authenticate using browser-based SSO
+*
+* This is the main entry point - it orchestrates the auth flow using the provided adapter.
+* The adapter handles browser-specific operations, this function handles the logic.
+*/
+async function authenticate(adapter, options) {
+	const { url, loginUrl, headless = false, timeout = DEFAULT_TIMEOUT, userAgent, requiredCookies, userDataDir, ignoreHTTPSErrors = true, log = console.log } = options;
+	const targetUrl = loginUrl || new URL(SYSTEM_INFO_PATH, url).toString();
+	const sapHost = new URL(url).hostname;
+	const profileDir = resolveUserDataDir(userDataDir);
+	if (profileDir) log(`🔄 Using persistent browser profile: ${profileDir}`);
+	try {
+		await adapter.launch({
+			headless,
+			userDataDir: profileDir,
+			ignoreHTTPSErrors,
+			userAgent
+		});
+		log("🔍 Opening browser...");
+		await adapter.newPage();
+		log("🧹 Clearing old SAP cookies...");
+		await adapter.clearCookies(sapHost);
+		log("🌐 Complete SSO login if prompted...");
+		const cookiesToWait = requiredCookies && requiredCookies.length > 0 ? requiredCookies : ["SAP_SESSIONID_*"];
+		log(`⏳ Waiting for cookies: ${cookiesToWait.join(", ")}`);
+		const sapCookies = await new Promise((resolve, reject) => {
+			const timeoutId = setTimeout(() => {
+				reject(/* @__PURE__ */ new Error("Authentication timeout - SSO not completed"));
+			}, timeout);
+			adapter.onPageClose(() => {
+				clearTimeout(timeoutId);
+				reject(/* @__PURE__ */ new Error("Authentication cancelled - browser was closed"));
+			});
+			adapter.onResponse(async (event) => {
+				const eventHost = new URL(event.url).hostname;
+				if ((eventHost === sapHost || eventHost.endsWith("." + sapHost) || sapHost.endsWith("." + eventHost)) && event.status === 200) {
+					const matchedCookies = (await adapter.getCookies()).filter((c) => c.domain.includes(sapHost) || sapHost.includes(c.domain.replace(/^\./, ""))).filter((c) => cookieMatchesAny(c.name, cookiesToWait));
+					if (cookiesToWait.every((pattern) => matchedCookies.some((c) => matchesCookiePattern(c.name, pattern)))) {
+						clearTimeout(timeoutId);
+						log("✅ Authentication complete!");
+						log(`🍪 Found required cookies: ${matchedCookies.map((c) => c.name).join(", ")}`);
+						resolve(matchedCookies);
+					}
+				}
+			});
+			adapter.goto(targetUrl, { timeout: 3e4 }).catch(() => {});
+		});
+		await adapter.closePage();
+		if (requiredCookies && requiredCookies.length > 0) {
+			const missingPatterns = requiredCookies.filter((pattern) => !sapCookies.some((c) => matchesCookiePattern(c.name, pattern)));
+			if (missingPatterns.length > 0) throw new Error(`Missing required cookies: ${missingPatterns.join(", ")}`);
+		}
+		if (sapCookies.length === 0) throw new Error("No SAP cookies captured - authentication may have failed");
+		const cookieNames = sapCookies.map((c) => c.name).join(", ");
+		log(`🍪 Captured ${sapCookies.length} cookies: ${cookieNames}`);
+		const userAgentString = userAgent || await adapter.getUserAgent();
+		return {
+			baseUrl: url,
+			cookies: sapCookies,
+			authenticatedAt: /* @__PURE__ */ new Date(),
+			userAgent: userAgentString
+		};
+	} finally {
+		await adapter.close();
+	}
+}
+/**
+* Test if credentials are still valid
+*/
+async function testCredentials(credentials, options) {
+	const startTime = Date.now();
+	const testUrl = new URL(SYSTEM_INFO_PATH, credentials.baseUrl);
+	try {
+		const cookieHeader = credentials.cookies.map((c) => `${c.name}=${c.value}`).join("; ");
+		const response = await fetch(testUrl.toString(), {
+			headers: {
+				Cookie: cookieHeader,
+				Accept: "application/xml"
+			},
+			signal: options?.timeout ? AbortSignal.timeout(options.timeout) : void 0
+		});
+		const text = await response.text();
+		if (text.includes("SAMLRequest") || text.includes("SAMLResponse")) return {
+			valid: false,
+			error: "Session expired - SAML redirect detected",
+			responseTime: Date.now() - startTime
+		};
+		return {
+			valid: response.ok,
+			error: response.ok ? void 0 : `HTTP ${response.status}`,
+			responseTime: Date.now() - startTime
+		};
+	} catch (error) {
+		return {
+			valid: false,
+			error: error instanceof Error ? error.message : String(error),
+			responseTime: Date.now() - startTime
+		};
+	}
+}
+/**
+* Convert credentials to HTTP cookie header
+*/
+function toCookieHeader(credentials) {
+	return credentials.cookies.map((c) => `${c.name}=${c.value}`).join("; ");
+}
+/**
+* Convert credentials to HTTP headers object
+*/
+function toHeaders(credentials) {
+	return {
+		Cookie: toCookieHeader(credentials),
+		...credentials.userAgent ? { "User-Agent": credentials.userAgent } : {}
+	};
+}
+
+//#endregion
+export { authenticate, cookieMatchesAny, matchesCookiePattern, resolveUserDataDir, testCredentials, toCookieHeader, toHeaders };
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/utils.ts","../src/auth-core.ts"],"sourcesContent":["/**\n * Browser Auth Utilities\n *\n * Cookie matching and path resolution utilities.\n */\n\nimport { homedir } from 'os';\nimport { join } from 'path';\n\nconst DEFAULT_USER_DATA_DIR = join(homedir(), '.adt', 'browser-profile');\n\n/**\n * Resolve userDataDir configuration to an absolute path\n */\nexport function resolveUserDataDir(\n  userDataDir?: string | boolean,\n): string | undefined {\n  if (userDataDir === true) {\n    return DEFAULT_USER_DATA_DIR;\n  }\n  if (typeof userDataDir === 'string') {\n    return userDataDir;\n  }\n  return undefined;\n}\n\n/**\n * Check if a cookie name matches a pattern (supports * wildcard)\n * @example matchesCookiePattern('SAP_SESSIONID_S0D_200', 'SAP_SESSIONID_*') // true\n */\nexport function matchesCookiePattern(\n  cookieName: string,\n  pattern: string,\n): boolean {\n  if (!pattern.includes('*')) {\n    return cookieName === pattern;\n  }\n  const regexPattern = pattern.replaceAll(/\\*/g, '.*');\n  return new RegExp(`^${regexPattern}$`).test(cookieName);\n}\n\n/**\n * Check if a cookie matches any of the required patterns\n */\nexport function cookieMatchesAny(\n  cookieName: string,\n  patterns: string[],\n): boolean {\n  return patterns.some((pattern) => matchesCookiePattern(cookieName, pattern));\n}\n","/**\n * Browser Auth Core\n *\n * Event-driven authentication logic shared by Playwright and Puppeteer adapters.\n * This module contains NO browser-specific code.\n */\n\nimport type {\n  BrowserAdapter,\n  BrowserAuthOptions,\n  BrowserCredentials,\n} from './types';\nimport {\n  matchesCookiePattern,\n  cookieMatchesAny,\n  resolveUserDataDir,\n} from './utils';\n\nconst DEFAULT_TIMEOUT = 300_000; // 5 minutes\nconst SYSTEM_INFO_PATH = '/sap/bc/adt/core/http/systeminformation';\n\nexport interface AuthenticateOptions extends BrowserAuthOptions {\n  /** Callback for logging */\n  log?: (message: string) => void;\n}\n\n/**\n * Authenticate using browser-based SSO\n *\n * This is the main entry point - it orchestrates the auth flow using the provided adapter.\n * The adapter handles browser-specific operations, this function handles the logic.\n */\nexport async function authenticate(\n  adapter: BrowserAdapter,\n  options: AuthenticateOptions,\n): Promise<BrowserCredentials> {\n  const {\n    url,\n    loginUrl,\n    headless = false,\n    timeout = DEFAULT_TIMEOUT,\n    userAgent,\n    requiredCookies,\n    userDataDir,\n    ignoreHTTPSErrors = true,\n    log = console.log,\n  } = options;\n\n  // URL to navigate to for SSO login\n  const targetUrl = loginUrl || new URL(SYSTEM_INFO_PATH, url).toString();\n  const sapHost = new URL(url).hostname;\n  const profileDir = resolveUserDataDir(userDataDir);\n\n  if (profileDir) {\n    log(`🔄 Using persistent browser profile: ${profileDir}`);\n  }\n\n  try {\n    // Step 1: Launch browser\n    await adapter.launch({\n      headless,\n      userDataDir: profileDir,\n      ignoreHTTPSErrors,\n      userAgent,\n    });\n\n    log('🔍 Opening browser...');\n    await adapter.newPage();\n\n    // Step 2: Clear old SAP cookies to ensure we capture fresh ones\n    // This is critical for re-authentication - old cookies may be stale\n    log('🧹 Clearing old SAP cookies...');\n    await adapter.clearCookies(sapHost);\n\n    // Step 3: Wait for authentication (required cookies appear after SSO)\n    log('🌐 Complete SSO login if prompted...');\n\n    const cookiesToWait =\n      requiredCookies && requiredCookies.length > 0\n        ? requiredCookies\n        : ['SAP_SESSIONID_*']; // Default: wait for session cookie\n\n    log(`⏳ Waiting for cookies: ${cookiesToWait.join(', ')}`);\n\n    const sapCookies = await new Promise<\n      Awaited<ReturnType<typeof adapter.getCookies>>\n    >((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        reject(new Error('Authentication timeout - SSO not completed'));\n      }, timeout);\n\n      adapter.onPageClose(() => {\n        clearTimeout(timeoutId);\n        reject(new Error('Authentication cancelled - browser was closed'));\n      });\n\n      // Check for required cookies on every response from SAP domain\n      adapter.onResponse(async (event) => {\n        // Check responses from SAP domain (not just targetUrl, since SSO may redirect)\n        const eventHost = new URL(event.url).hostname;\n        const isSapDomain =\n          eventHost === sapHost ||\n          eventHost.endsWith('.' + sapHost) ||\n          sapHost.endsWith('.' + eventHost);\n\n        if (isSapDomain && event.status === 200) {\n          // Got 200 from SAP domain - check if required cookies are set\n          const allCookies = await adapter.getCookies();\n          const domainCookies = allCookies.filter(\n            (c) =>\n              c.domain.includes(sapHost) ||\n              sapHost.includes(c.domain.replace(/^\\./, '')),\n          );\n          const matchedCookies = domainCookies.filter((c) =>\n            cookieMatchesAny(c.name, cookiesToWait),\n          );\n          const allFound = cookiesToWait.every((pattern) =>\n            matchedCookies.some((c) => matchesCookiePattern(c.name, pattern)),\n          );\n\n          if (allFound) {\n            clearTimeout(timeoutId);\n            log('✅ Authentication complete!');\n            log(\n              `🍪 Found required cookies: ${matchedCookies.map((c) => c.name).join(', ')}`,\n            );\n            resolve(matchedCookies);\n          }\n          // If cookies not found yet, keep waiting for more responses\n        }\n      });\n\n      // Navigate - events are already set up; navigation errors are expected\n      // (auth flow handles results through response event listeners, not navigation result)\n      // eslint-disable-next-line @typescript-eslint/no-empty-function\n      adapter.goto(targetUrl, { timeout: 30000 }).catch(() => {});\n    });\n\n    await adapter.closePage();\n\n    // Validate cookies\n    if (requiredCookies && requiredCookies.length > 0) {\n      const missingPatterns = requiredCookies.filter(\n        (pattern) =>\n          !sapCookies.some((c) => matchesCookiePattern(c.name, pattern)),\n      );\n      if (missingPatterns.length > 0) {\n        throw new Error(\n          `Missing required cookies: ${missingPatterns.join(', ')}`,\n        );\n      }\n    }\n\n    if (sapCookies.length === 0) {\n      throw new Error(\n        'No SAP cookies captured - authentication may have failed',\n      );\n    }\n\n    const cookieNames = sapCookies.map((c) => c.name).join(', ');\n    log(`🍪 Captured ${sapCookies.length} cookies: ${cookieNames}`);\n\n    // Get user agent\n    const userAgentString = userAgent || (await adapter.getUserAgent());\n\n    return {\n      baseUrl: url,\n      cookies: sapCookies,\n      authenticatedAt: new Date(),\n      userAgent: userAgentString,\n    };\n  } finally {\n    await adapter.close();\n  }\n}\n\n/**\n * Test if credentials are still valid\n */\nexport async function testCredentials(\n  credentials: BrowserCredentials,\n  options?: { timeout?: number },\n): Promise<{ valid: boolean; error?: string; responseTime?: number }> {\n  const startTime = Date.now();\n  const testUrl = new URL(SYSTEM_INFO_PATH, credentials.baseUrl);\n\n  try {\n    const cookieHeader = credentials.cookies\n      .map((c) => `${c.name}=${c.value}`)\n      .join('; ');\n\n    const response = await fetch(testUrl.toString(), {\n      headers: {\n        Cookie: cookieHeader,\n        Accept: 'application/xml',\n      },\n      signal: options?.timeout\n        ? AbortSignal.timeout(options.timeout)\n        : undefined,\n    });\n\n    const text = await response.text();\n\n    // Check for SAML redirect (session expired)\n    if (text.includes('SAMLRequest') || text.includes('SAMLResponse')) {\n      return {\n        valid: false,\n        error: 'Session expired - SAML redirect detected',\n        responseTime: Date.now() - startTime,\n      };\n    }\n\n    return {\n      valid: response.ok,\n      error: response.ok ? undefined : `HTTP ${response.status}`,\n      responseTime: Date.now() - startTime,\n    };\n  } catch (error) {\n    return {\n      valid: false,\n      error: error instanceof Error ? error.message : String(error),\n      responseTime: Date.now() - startTime,\n    };\n  }\n}\n\n/**\n * Convert credentials to HTTP cookie header\n */\nexport function toCookieHeader(credentials: BrowserCredentials): string {\n  return credentials.cookies.map((c) => `${c.name}=${c.value}`).join('; ');\n}\n\n/**\n * Convert credentials to HTTP headers object\n */\nexport function toHeaders(\n  credentials: BrowserCredentials,\n): Record<string, string> {\n  return {\n    Cookie: toCookieHeader(credentials),\n    ...(credentials.userAgent ? { 'User-Agent': credentials.userAgent } : {}),\n  };\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,wBAAwB,KAAK,SAAS,EAAE,QAAQ,kBAAkB;;;;AAKxE,SAAgB,mBACd,aACoB;AACpB,KAAI,gBAAgB,KAClB,QAAO;AAET,KAAI,OAAO,gBAAgB,SACzB,QAAO;;;;;;AASX,SAAgB,qBACd,YACA,SACS;AACT,KAAI,CAAC,QAAQ,SAAS,IAAI,CACxB,QAAO,eAAe;CAExB,MAAM,eAAe,QAAQ,WAAW,OAAO,KAAK;AACpD,QAAO,IAAI,OAAO,IAAI,aAAa,GAAG,CAAC,KAAK,WAAW;;;;;AAMzD,SAAgB,iBACd,YACA,UACS;AACT,QAAO,SAAS,MAAM,YAAY,qBAAqB,YAAY,QAAQ,CAAC;;;;;AC9B9E,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;;;;;;;AAazB,eAAsB,aACpB,SACA,SAC6B;CAC7B,MAAM,EACJ,KACA,UACA,WAAW,OACX,UAAU,iBACV,WACA,iBACA,aACA,oBAAoB,MACpB,MAAM,QAAQ,QACZ;CAGJ,MAAM,YAAY,YAAY,IAAI,IAAI,kBAAkB,IAAI,CAAC,UAAU;CACvE,MAAM,UAAU,IAAI,IAAI,IAAI,CAAC;CAC7B,MAAM,aAAa,mBAAmB,YAAY;AAElD,KAAI,WACF,KAAI,wCAAwC,aAAa;AAG3D,KAAI;AAEF,QAAM,QAAQ,OAAO;GACnB;GACA,aAAa;GACb;GACA;GACD,CAAC;AAEF,MAAI,wBAAwB;AAC5B,QAAM,QAAQ,SAAS;AAIvB,MAAI,iCAAiC;AACrC,QAAM,QAAQ,aAAa,QAAQ;AAGnC,MAAI,uCAAuC;EAE3C,MAAM,gBACJ,mBAAmB,gBAAgB,SAAS,IACxC,kBACA,CAAC,kBAAkB;AAEzB,MAAI,0BAA0B,cAAc,KAAK,KAAK,GAAG;EAEzD,MAAM,aAAa,MAAM,IAAI,SAE1B,SAAS,WAAW;GACrB,MAAM,YAAY,iBAAiB;AACjC,2BAAO,IAAI,MAAM,6CAA6C,CAAC;MAC9D,QAAQ;AAEX,WAAQ,kBAAkB;AACxB,iBAAa,UAAU;AACvB,2BAAO,IAAI,MAAM,gDAAgD,CAAC;KAClE;AAGF,WAAQ,WAAW,OAAO,UAAU;IAElC,MAAM,YAAY,IAAI,IAAI,MAAM,IAAI,CAAC;AAMrC,SAJE,cAAc,WACd,UAAU,SAAS,MAAM,QAAQ,IACjC,QAAQ,SAAS,MAAM,UAAU,KAEhB,MAAM,WAAW,KAAK;KAQvC,MAAM,kBANa,MAAM,QAAQ,YAAY,EACZ,QAC9B,MACC,EAAE,OAAO,SAAS,QAAQ,IAC1B,QAAQ,SAAS,EAAE,OAAO,QAAQ,OAAO,GAAG,CAAC,CAChD,CACoC,QAAQ,MAC3C,iBAAiB,EAAE,MAAM,cAAc,CACxC;AAKD,SAJiB,cAAc,OAAO,YACpC,eAAe,MAAM,MAAM,qBAAqB,EAAE,MAAM,QAAQ,CAAC,CAClE,EAEa;AACZ,mBAAa,UAAU;AACvB,UAAI,6BAA6B;AACjC,UACE,8BAA8B,eAAe,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,GAC3E;AACD,cAAQ,eAAe;;;KAI3B;AAKF,WAAQ,KAAK,WAAW,EAAE,SAAS,KAAO,CAAC,CAAC,YAAY,GAAG;IAC3D;AAEF,QAAM,QAAQ,WAAW;AAGzB,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;GACjD,MAAM,kBAAkB,gBAAgB,QACrC,YACC,CAAC,WAAW,MAAM,MAAM,qBAAqB,EAAE,MAAM,QAAQ,CAAC,CACjE;AACD,OAAI,gBAAgB,SAAS,EAC3B,OAAM,IAAI,MACR,6BAA6B,gBAAgB,KAAK,KAAK,GACxD;;AAIL,MAAI,WAAW,WAAW,EACxB,OAAM,IAAI,MACR,2DACD;EAGH,MAAM,cAAc,WAAW,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK;AAC5D,MAAI,eAAe,WAAW,OAAO,YAAY,cAAc;EAG/D,MAAM,kBAAkB,aAAc,MAAM,QAAQ,cAAc;AAElE,SAAO;GACL,SAAS;GACT,SAAS;GACT,iCAAiB,IAAI,MAAM;GAC3B,WAAW;GACZ;WACO;AACR,QAAM,QAAQ,OAAO;;;;;;AAOzB,eAAsB,gBACpB,aACA,SACoE;CACpE,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAU,IAAI,IAAI,kBAAkB,YAAY,QAAQ;AAE9D,KAAI;EACF,MAAM,eAAe,YAAY,QAC9B,KAAK,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,QAAQ,CAClC,KAAK,KAAK;EAEb,MAAM,WAAW,MAAM,MAAM,QAAQ,UAAU,EAAE;GAC/C,SAAS;IACP,QAAQ;IACR,QAAQ;IACT;GACD,QAAQ,SAAS,UACb,YAAY,QAAQ,QAAQ,QAAQ,GACpC;GACL,CAAC;EAEF,MAAM,OAAO,MAAM,SAAS,MAAM;AAGlC,MAAI,KAAK,SAAS,cAAc,IAAI,KAAK,SAAS,eAAe,CAC/D,QAAO;GACL,OAAO;GACP,OAAO;GACP,cAAc,KAAK,KAAK,GAAG;GAC5B;AAGH,SAAO;GACL,OAAO,SAAS;GAChB,OAAO,SAAS,KAAK,SAAY,QAAQ,SAAS;GAClD,cAAc,KAAK,KAAK,GAAG;GAC5B;UACM,OAAO;AACd,SAAO;GACL,OAAO;GACP,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC7D,cAAc,KAAK,KAAK,GAAG;GAC5B;;;;;;AAOL,SAAgB,eAAe,aAAyC;AACtE,QAAO,YAAY,QAAQ,KAAK,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,QAAQ,CAAC,KAAK,KAAK;;;;;AAM1E,SAAgB,UACd,aACwB;AACxB,QAAO;EACL,QAAQ,eAAe,YAAY;EACnC,GAAI,YAAY,YAAY,EAAE,cAAc,YAAY,WAAW,GAAG,EAAE;EACzE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abapify/browser-auth",
-  "version": "0.3.6",
+  "version": "0.4.1",
   "description": "Browser-based SSO authentication core - shared logic for Playwright/Puppeteer plugins",
   "license": "MIT",
   "publishConfig": {
@@ -17,7 +17,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@abapify/adt-config": "0.3.6"
+    "@abapify/adt-config": "0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.2"