@ahoo-wang/fetcher-cosec 3.13.15 → 3.15.1

package/dist/index.umd.js

@@ -1,2 +1,2 @@
-(function(t,o){typeof exports=="object"&&typeof module<"u"?o(exports,require("@ahoo-wang/fetcher"),require("nanoid"),require("@ahoo-wang/fetcher-storage"),require("@ahoo-wang/fetcher-eventbus")):typeof define=="function"&&define.amd?define(["exports","@ahoo-wang/fetcher","nanoid","@ahoo-wang/fetcher-storage","@ahoo-wang/fetcher-eventbus"],o):(t=typeof globalThis<"u"?globalThis:t||self,o(t.FetcherCoSec={},t.Fetcher,t.nanoid,t.FetcherStorage,t.FetcherEventBus))})(this,(function(t,o,$,u,R){"use strict";const E=class E{};E.DEVICE_ID="CoSec-Device-Id",E.APP_ID="CoSec-App-Id",E.SPACE_ID="CoSec-Space-Id",E.AUTHORIZATION="Authorization",E.REQUEST_ID="CoSec-Request-Id";let c=E;const h=class h{};h.UNAUTHORIZED=401,h.FORBIDDEN=403;let d=h;const x={ALLOW:{authorized:!0,reason:"Allow"},EXPLICIT_DENY:{authorized:!1,reason:"Explicit Deny"},IMPLICIT_DENY:{authorized:!1,reason:"Implicit Deny"},TOKEN_EXPIRED:{authorized:!1,reason:"Token Expired"},TOO_MANY_REQUESTS:{authorized:!1,reason:"Too Many Requests"}};class U{generateId(){return $.nanoid()}}const _=new U,O={resolveSpaceId:()=>null},p="cosec-space-id";class ee extends u.KeyStorage{constructor({key:e=p,eventBus:r=new R.BroadcastTypedEventBus({delegate:new R.SerialTypedEventBus(p)}),...n}={}){super({key:e,eventBus:r,...n,serializer:u.typedIdentitySerializer()})}}class te{constructor(e){this.options=e}resolveSpaceId(e){return this.options.spacedResourcePredicate.test(e)?this.options.spaceIdStorage.get():null}}const k="CoSecRequestInterceptor",l=Number.MIN_SAFE_INTEGER+o.DEFAULT_INTERCEPTOR_ORDER_STEP,S="Ignore-Refresh-Token";class w{constructor({appId:e,deviceIdStorage:r,spaceIdProvider:n}){this.name=k,this.order=l,this.appId=e,this.deviceIdStorage=r,this.spaceIdProvider=n??O}async intercept(e){const r=_.generateId(),n=this.deviceIdStorage.getOrCreate(),i=this.spaceIdProvider.resolveSpaceId(e),a=e.ensureRequestHeaders();a[c.APP_ID]=this.appId,a[c.DEVICE_ID]=n,a[c.REQUEST_ID]=r,i&&(a[c.SPACE_ID]=i)}}const y="AuthorizationRequestInterceptor",v=l+o.DEFAULT_INTERCEPTOR_ORDER_STEP;class M{constructor(e){this.options=e,this.name=y,this.order=v}async intercept(e){let r=this.options.tokenManager.currentToken;const n=e.ensureRequestHeaders();!r||n[c.AUTHORIZATION]||(!e.attributes.has(S)&&r.isRefreshNeeded&&r.isRefreshable&&await this.options.tokenManager.refresh(),r=this.options.tokenManager.currentToken,r&&(n[c.AUTHORIZATION]=`Bearer ${r.access.token}`))}}const m="AuthorizationResponseInterceptor",z=Number.MIN_SAFE_INTEGER+1e3;class F{constructor(e){this.options=e,this.name=m,this.order=z}async intercept(e){const r=e.response;if(r&&r.status===d.UNAUTHORIZED&&this.options.tokenManager.isRefreshable)try{await this.options.tokenManager.refresh(),await e.fetcher.interceptors.exchange(e)}catch(n){throw this.options.tokenManager.tokenStorage.remove(),n}}}const N="cosec-device-id";class q extends u.KeyStorage{constructor({key:e=N,eventBus:r=new R.BroadcastTypedEventBus({delegate:new R.SerialTypedEventBus(N)}),...n}={}){super({key:e,eventBus:r,...n,serializer:u.typedIdentitySerializer()})}generateDeviceId(){return _.generateId()}getOrCreate(){let e=this.get();return e||(e=this.generateDeviceId(),this.set(e)),e}}const B="ForbiddenErrorInterceptor",K=0;class b{constructor(e){this.options=e,this.name=B,this.order=K}async intercept(e){e.response?.status===d.FORBIDDEN&&await this.options.onForbidden(e)}}class I extends o.FetcherError{constructor(e,r){super("Refresh token failed.",r),this.token=e,this.name="RefreshTokenError",Object.setPrototypeOf(this,I.prototype)}}class H{constructor(e,r){this.tokenStorage=e,this.tokenRefresher=r}get currentToken(){return this.tokenStorage.get()}async refresh(){const e=this.currentToken;if(!e)throw new Error("No token found");return this.refreshInProgress?this.refreshInProgress:(this.refreshInProgress=this.tokenRefresher.refresh(e.token).then(r=>{this.tokenStorage.setCompositeToken(r)}).catch(r=>{throw this.tokenStorage.remove(),new I(e,r)}).finally(()=>{this.refreshInProgress=void 0}),this.refreshInProgress)}get isRefreshNeeded(){return this.currentToken?this.currentToken.isRefreshNeeded:!1}get isRefreshable(){return this.currentToken?this.currentToken.isRefreshable:!1}}const re="tenantId",ne="ownerId",Z="ResourceAttributionRequestInterceptor",J=o.URL_RESOLVE_INTERCEPTOR_ORDER-o.DEFAULT_INTERCEPTOR_ORDER_STEP;class L{constructor({tenantId:e=re,ownerId:r=ne,tokenStorage:n}){this.name=Z,this.order=J,this.tenantIdPathKey=e,this.ownerIdPathKey=r,this.tokenStorage=n}intercept(e){const r=this.tokenStorage.get();if(!r)return;const n=r.access.payload;if(!n||!n.tenantId&&!n.sub)return;const i=e.fetcher.urlBuilder.urlTemplateResolver.extractPathParams(e.request.url),a=this.tenantIdPathKey,T=e.ensureRequestUrlParams().path,W=n.tenantId;W&&i.includes(a)&&!T[a]&&(T[a]=W);const D=this.ownerIdPathKey,X=n.sub;X&&i.includes(D)&&!T[D]&&(T[D]=X)}}function f(s){try{if(typeof s!="string")return null;const e=s.split(".");if(e.length!==3)return null;const n=e[1].replace(/-/g,"+").replace(/_/g,"/"),i=n.padEnd(n.length+(4-n.length%4)%4,"="),a=decodeURIComponent(atob(i).split("").map(function(T){return"%"+("00"+T.charCodeAt(0).toString(16)).slice(-2)}).join(""));return JSON.parse(a)}catch(e){return console.error("Failed to parse JWT token",e),null}}function Q(s,e=0){const r=typeof s=="string"?f(s):s;if(!r)return!0;const n=r.exp;return n?Date.now()/1e3>n-e:!1}class P{constructor(e,r=0){this.token=e,this.earlyPeriod=r,this.payload=f(e)}get isExpired(){return this.payload?Q(this.payload,this.earlyPeriod):!0}}class A{constructor(e,r=0){this.token=e,this.earlyPeriod=r,this.access=new P(e.accessToken,r),this.refresh=new P(e.refreshToken,r)}get isRefreshNeeded(){return this.access.isExpired}get isRefreshable(){return!this.refresh.isExpired}get authenticated(){return!this.access.isExpired}}class g{constructor(e=0){this.earlyPeriod=e}deserialize(e){const r=JSON.parse(e);return new A(r,this.earlyPeriod)}serialize(e){return JSON.stringify(e.token)}}const se=new g,C="cosec-token";class Y extends u.KeyStorage{constructor({key:e=C,eventBus:r=new R.BroadcastTypedEventBus({delegate:new R.SerialTypedEventBus(C)}),earlyPeriod:n=0,...i}={}){super({key:e,eventBus:r,...i,serializer:new g(n)}),this.earlyPeriod=n}setCompositeToken(e){this.signIn(e)}signIn(e){this.set(new A(e,this.earlyPeriod))}signOut(){this.remove()}get authenticated(){return this.get()?.authenticated===!0}get currentUser(){return this.authenticated?this.get()?.access.payload??null:null}}const j="UnauthorizedErrorInterceptor",G=0;class V{constructor(e){this.options=e,this.name=j,this.order=G}async intercept(e){(e.response?.status===d.UNAUTHORIZED||e.error instanceof I)&&await this.options.onUnauthorized(e)}}class oe{constructor(e){this.config=e,this.tokenStorage=e.tokenStorage??new Y,this.deviceIdStorage=e.deviceIdStorage??new q,this.spaceIdProvider=e.spaceIdProvider??O,e.tokenRefresher&&(this.tokenManager=new H(this.tokenStorage,e.tokenRefresher))}applyTo(e){e.interceptors.request.use(new w({appId:this.config.appId,deviceIdStorage:this.deviceIdStorage,spaceIdProvider:this.spaceIdProvider})),e.interceptors.request.use(new L({tokenStorage:this.tokenStorage})),this.tokenManager&&(e.interceptors.request.use(new M({tokenManager:this.tokenManager})),e.interceptors.response.use(new F({tokenManager:this.tokenManager}))),this.config.onUnauthorized&&e.interceptors.error.use(new V({onUnauthorized:this.config.onUnauthorized})),this.config.onForbidden&&e.interceptors.error.use(new b({onForbidden:this.config.onForbidden}))}}class ie{constructor(e){this.options=e}refresh(e){return this.options.fetcher.post(this.options.endpoint,{body:e},{resultExtractor:o.ResultExtractors.Json,attributes:new Map([[S,!0]])})}}t.AUTHORIZATION_REQUEST_INTERCEPTOR_NAME=y,t.AUTHORIZATION_REQUEST_INTERCEPTOR_ORDER=v,t.AUTHORIZATION_RESPONSE_INTERCEPTOR_NAME=m,t.AUTHORIZATION_RESPONSE_INTERCEPTOR_ORDER=z,t.AuthorizationRequestInterceptor=M,t.AuthorizationResponseInterceptor=F,t.AuthorizeResults=x,t.COSEC_REQUEST_INTERCEPTOR_NAME=k,t.COSEC_REQUEST_INTERCEPTOR_ORDER=l,t.CoSecConfigurer=oe,t.CoSecHeaders=c,t.CoSecRequestInterceptor=w,t.CoSecTokenRefresher=ie,t.DEFAULT_COSEC_DEVICE_ID_KEY=N,t.DEFAULT_COSEC_SPACE_ID_KEY=p,t.DEFAULT_COSEC_TOKEN_KEY=C,t.DefaultSpaceIdProvider=te,t.DeviceIdStorage=q,t.FORBIDDEN_ERROR_INTERCEPTOR_NAME=B,t.FORBIDDEN_ERROR_INTERCEPTOR_ORDER=K,t.ForbiddenErrorInterceptor=b,t.IGNORE_REFRESH_TOKEN_ATTRIBUTE_KEY=S,t.JwtCompositeToken=A,t.JwtCompositeTokenSerializer=g,t.JwtToken=P,t.JwtTokenManager=H,t.NanoIdGenerator=U,t.NoneSpaceIdProvider=O,t.RESOURCE_ATTRIBUTION_REQUEST_INTERCEPTOR_NAME=Z,t.RESOURCE_ATTRIBUTION_REQUEST_INTERCEPTOR_ORDER=J,t.RefreshTokenError=I,t.ResourceAttributionRequestInterceptor=L,t.ResponseCodes=d,t.SpaceIdStorage=ee,t.TokenStorage=Y,t.UNAUTHORIZED_ERROR_INTERCEPTOR_NAME=j,t.UNAUTHORIZED_ERROR_INTERCEPTOR_ORDER=G,t.UnauthorizedErrorInterceptor=V,t.idGenerator=_,t.isTokenExpired=Q,t.jwtCompositeTokenSerializer=se,t.parseJwtPayload=f,Object.defineProperty(t,Symbol.toStringTag,{value:"Module"})}));
-//# sourceMappingURL=index.umd.js.map
+(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@ahoo-wang/fetcher`),require(`nanoid`),require(`@ahoo-wang/fetcher-storage`),require(`@ahoo-wang/fetcher-eventbus`)):typeof define==`function`&&define.amd?define([`exports`,`@ahoo-wang/fetcher`,`nanoid`,`@ahoo-wang/fetcher-storage`,`@ahoo-wang/fetcher-eventbus`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e.FetcherCoSec={},e.Fetcher,e.nanoid,e.FetcherStorage,e.FetcherEventBus))})(this,function(e,t,n,r,i){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var a=class{static{this.DEVICE_ID=`CoSec-Device-Id`}static{this.APP_ID=`CoSec-App-Id`}static{this.SPACE_ID=`CoSec-Space-Id`}static{this.AUTHORIZATION=`Authorization`}static{this.REQUEST_ID=`CoSec-Request-Id`}},o=class{static{this.UNAUTHORIZED=401}static{this.FORBIDDEN=403}},s={ALLOW:{authorized:!0,reason:`Allow`},EXPLICIT_DENY:{authorized:!1,reason:`Explicit Deny`},IMPLICIT_DENY:{authorized:!1,reason:`Implicit Deny`},TOKEN_EXPIRED:{authorized:!1,reason:`Token Expired`},TOO_MANY_REQUESTS:{authorized:!1,reason:`Too Many Requests`}},c=class{generateId(){return(0,n.nanoid)()}},l=new c,u={resolveSpaceId:()=>null},d=`cosec-space-id`,f=class extends r.KeyStorage{constructor({key:e=d,eventBus:t=new i.BroadcastTypedEventBus({delegate:new i.SerialTypedEventBus(d)}),...n}={}){super({key:e,eventBus:t,...n,serializer:(0,r.typedIdentitySerializer)()})}},p=class{constructor(e){this.options=e}resolveSpaceId(e){return this.options.spacedResourcePredicate.test(e)?this.options.spaceIdStorage.get():null}},m=`CoSecRequestInterceptor`,h=-(2**53-1)+t.DEFAULT_INTERCEPTOR_ORDER_STEP,g=`Ignore-Refresh-Token`,_=class{constructor({appId:e,deviceIdStorage:t,spaceIdProvider:n}){this.name=m,this.order=h,this.appId=e,this.deviceIdStorage=t,this.spaceIdProvider=n??u}async intercept(e){let t=l.generateId(),n=this.deviceIdStorage.getOrCreate(),r=this.spaceIdProvider.resolveSpaceId(e),i=e.ensureRequestHeaders();i[a.APP_ID]=this.appId,i[a.DEVICE_ID]=n,i[a.REQUEST_ID]=t,r&&(i[a.SPACE_ID]=r)}},v=`AuthorizationRequestInterceptor`,y=h+t.DEFAULT_INTERCEPTOR_ORDER_STEP,b=class{constructor(e){this.options=e,this.name=v,this.order=y}async intercept(e){let t=this.options.tokenManager.currentToken,n=e.ensureRequestHeaders();!t||n[a.AUTHORIZATION]||(!e.attributes.has(`Ignore-Refresh-Token`)&&t.isRefreshNeeded&&t.isRefreshable&&await this.options.tokenManager.refresh(),t=this.options.tokenManager.currentToken,t&&(n[a.AUTHORIZATION]=`Bearer ${t.access.token}`))}},x=`AuthorizationResponseInterceptor`,S=-(2**53-1)+1e3,C=class{constructor(e){this.options=e,this.name=x,this.order=S}async intercept(e){let t=e.response;if(t&&t.status===o.UNAUTHORIZED&&this.options.tokenManager.isRefreshable)try{await this.options.tokenManager.refresh(),await e.fetcher.interceptors.exchange(e)}catch(e){throw this.options.tokenManager.tokenStorage.remove(),e}}},w=`cosec-device-id`,T=class extends r.KeyStorage{constructor({key:e=w,eventBus:t=new i.BroadcastTypedEventBus({delegate:new i.SerialTypedEventBus(w)}),...n}={}){super({key:e,eventBus:t,...n,serializer:(0,r.typedIdentitySerializer)()})}generateDeviceId(){return l.generateId()}getOrCreate(){let e=this.get();return e||(e=this.generateDeviceId(),this.set(e)),e}},E=`ForbiddenErrorInterceptor`,D=0,O=class{constructor(e){this.options=e,this.name=E,this.order=0}async intercept(e){e.response?.status===o.FORBIDDEN&&await this.options.onForbidden(e)}},k=class e extends t.FetcherError{constructor(t,n){super(`Refresh token failed.`,n),this.token=t,this.name=`RefreshTokenError`,Object.setPrototypeOf(this,e.prototype)}},A=class{constructor(e,t){this.tokenStorage=e,this.tokenRefresher=t}get currentToken(){return this.tokenStorage.get()}async refresh(){let e=this.currentToken;if(!e)throw Error(`No token found`);return this.refreshInProgress||=this.tokenRefresher.refresh(e.token).then(e=>{this.tokenStorage.setCompositeToken(e)}).catch(t=>{throw this.tokenStorage.remove(),new k(e,t)}).finally(()=>{this.refreshInProgress=void 0}),this.refreshInProgress}get isRefreshNeeded(){return this.currentToken?this.currentToken.isRefreshNeeded:!1}get isRefreshable(){return this.currentToken?this.currentToken.isRefreshable:!1}},j=`tenantId`,M=`ownerId`,N=`ResourceAttributionRequestInterceptor`,P=t.URL_RESOLVE_INTERCEPTOR_ORDER-t.DEFAULT_INTERCEPTOR_ORDER_STEP,F=class{constructor({tenantId:e=j,ownerId:t=M,tokenStorage:n}){this.name=N,this.order=P,this.tenantIdPathKey=e,this.ownerIdPathKey=t,this.tokenStorage=n}intercept(e){let t=this.tokenStorage.get();if(!t)return;let n=t.access.payload;if(!n||!n.tenantId&&!n.sub)return;let r=e.fetcher.urlBuilder.urlTemplateResolver.extractPathParams(e.request.url),i=this.tenantIdPathKey,a=e.ensureRequestUrlParams().path,o=n.tenantId;o&&r.includes(i)&&!a[i]&&(a[i]=o);let s=this.ownerIdPathKey,c=n.sub;c&&r.includes(s)&&!a[s]&&(a[s]=c)}};function I(e){try{if(typeof e!=`string`)return null;let t=e.split(`.`);if(t.length!==3)return null;let n=t[1].replace(/-/g,`+`).replace(/_/g,`/`),r=n.padEnd(n.length+(4-n.length%4)%4,`=`),i=decodeURIComponent(atob(r).split(``).map(function(e){return`%`+(`00`+e.charCodeAt(0).toString(16)).slice(-2)}).join(``));return JSON.parse(i)}catch(e){return console.error(`Failed to parse JWT token`,e),null}}function L(e,t=0){let n=typeof e==`string`?I(e):e;if(!n)return!0;let r=n.exp;return r?Date.now()/1e3>r-t:!1}var R=class{constructor(e,t=0){this.token=e,this.earlyPeriod=t,this.payload=I(e)}get isExpired(){return this.payload?L(this.payload,this.earlyPeriod):!0}},z=class{constructor(e,t=0){this.token=e,this.earlyPeriod=t,this.access=new R(e.accessToken,t),this.refresh=new R(e.refreshToken,t)}get isRefreshNeeded(){return this.access.isExpired}get isRefreshable(){return!this.refresh.isExpired}get authenticated(){return!this.access.isExpired}},B=class{constructor(e=0){this.earlyPeriod=e}deserialize(e){return new z(JSON.parse(e),this.earlyPeriod)}serialize(e){return JSON.stringify(e.token)}},V=new B,H=`cosec-token`,U=class extends r.KeyStorage{constructor({key:e=H,eventBus:t=new i.BroadcastTypedEventBus({delegate:new i.SerialTypedEventBus(H)}),earlyPeriod:n=0,...r}={}){super({key:e,eventBus:t,...r,serializer:new B(n)}),this.earlyPeriod=n}setCompositeToken(e){this.signIn(e)}signIn(e){this.set(new z(e,this.earlyPeriod))}signOut(){this.remove()}get authenticated(){return this.get()?.authenticated===!0}get currentUser(){return this.authenticated?this.get()?.access.payload??null:null}},W=`UnauthorizedErrorInterceptor`,G=0,K=class{constructor(e){this.options=e,this.name=W,this.order=0}async intercept(e){(e.response?.status===o.UNAUTHORIZED||e.error instanceof k)&&await this.options.onUnauthorized(e)}},q=class{constructor(e){this.config=e,this.tokenStorage=e.tokenStorage??new U,this.deviceIdStorage=e.deviceIdStorage??new T,this.spaceIdProvider=e.spaceIdProvider??u,e.tokenRefresher&&(this.tokenManager=new A(this.tokenStorage,e.tokenRefresher))}applyTo(e){e.interceptors.request.use(new _({appId:this.config.appId,deviceIdStorage:this.deviceIdStorage,spaceIdProvider:this.spaceIdProvider})),e.interceptors.request.use(new F({tokenStorage:this.tokenStorage})),this.tokenManager&&(e.interceptors.request.use(new b({tokenManager:this.tokenManager})),e.interceptors.response.use(new C({tokenManager:this.tokenManager}))),this.config.onUnauthorized&&e.interceptors.error.use(new K({onUnauthorized:this.config.onUnauthorized})),this.config.onForbidden&&e.interceptors.error.use(new O({onForbidden:this.config.onForbidden}))}},J=class{constructor(e){this.options=e}refresh(e){return this.options.fetcher.post(this.options.endpoint,{body:e},{resultExtractor:t.ResultExtractors.Json,attributes:new Map([[g,!0]])})}};e.AUTHORIZATION_REQUEST_INTERCEPTOR_NAME=v,e.AUTHORIZATION_REQUEST_INTERCEPTOR_ORDER=y,e.AUTHORIZATION_RESPONSE_INTERCEPTOR_NAME=x,e.AUTHORIZATION_RESPONSE_INTERCEPTOR_ORDER=S,e.AuthorizationRequestInterceptor=b,e.AuthorizationResponseInterceptor=C,e.AuthorizeResults=s,e.COSEC_REQUEST_INTERCEPTOR_NAME=m,e.COSEC_REQUEST_INTERCEPTOR_ORDER=h,e.CoSecConfigurer=q,e.CoSecHeaders=a,e.CoSecRequestInterceptor=_,e.CoSecTokenRefresher=J,e.DEFAULT_COSEC_DEVICE_ID_KEY=w,e.DEFAULT_COSEC_SPACE_ID_KEY=d,e.DEFAULT_COSEC_TOKEN_KEY=H,e.DefaultSpaceIdProvider=p,e.DeviceIdStorage=T,e.FORBIDDEN_ERROR_INTERCEPTOR_NAME=E,e.FORBIDDEN_ERROR_INTERCEPTOR_ORDER=D,e.ForbiddenErrorInterceptor=O,e.IGNORE_REFRESH_TOKEN_ATTRIBUTE_KEY=g,e.JwtCompositeToken=z,e.JwtCompositeTokenSerializer=B,e.JwtToken=R,e.JwtTokenManager=A,e.NanoIdGenerator=c,e.NoneSpaceIdProvider=u,e.RESOURCE_ATTRIBUTION_REQUEST_INTERCEPTOR_NAME=N,e.RESOURCE_ATTRIBUTION_REQUEST_INTERCEPTOR_ORDER=P,e.RefreshTokenError=k,e.ResourceAttributionRequestInterceptor=F,e.ResponseCodes=o,e.SpaceIdStorage=f,e.TokenStorage=U,e.UNAUTHORIZED_ERROR_INTERCEPTOR_NAME=W,e.UNAUTHORIZED_ERROR_INTERCEPTOR_ORDER=G,e.UnauthorizedErrorInterceptor=K,e.idGenerator=l,e.isTokenExpired=L,e.jwtCompositeTokenSerializer=V,e.parseJwtPayload=I});
+//# sourceMappingURL=index.umd.js.map