@asgardeo/express 0.0.48 → 0.0.50

package/dist/cjs/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/index.ts", "../../src/__legacy__/client.ts", "../../src/__legacy__/constants/default-options.ts", "../../src/__legacy__/middleware/protect-route.ts", "../../src/__legacy__/middleware/authentication.ts", "../../src/__legacy__/utils/express-utils.ts"],
-  "sourcesContent": ["/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport * from \"./__legacy__/models\";\nexport * from \"./__legacy__/client\";\n\nexport * from '@asgardeo/node';\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  LegacyAsgardeoNodeClient,\n  AuthClientConfig,\n  AuthURLCallback,\n  TokenResponse,\n  Storage,\n  User,\n  OIDCEndpoints,\n  IdToken,\n  TokenExchangeRequestConfig,\n  AsgardeoAuthException,\n  Logger,\n} from '@asgardeo/node';\nimport {CookieConfig, DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH} from './constants';\nimport {ExpressClientConfig, UnauthenticatedCallback} from './models';\nimport express from 'express';\nimport {v4 as uuidv4} from 'uuid';\nimport {asgardeoExpressAuth, protectRoute} from './middleware';\nimport {ExpressUtils} from './utils/express-utils';\n\nexport class AsgardeoExpressClient {\n  private _authClient: LegacyAsgardeoNodeClient<AuthClientConfig>;\n  private _storage?: Storage;\n  private static _clientConfig: ExpressClientConfig;\n\n  private static _instance: AsgardeoExpressClient;\n\n  private constructor(config: ExpressClientConfig, storage?: Storage) {\n    //Set the client config\n    AsgardeoExpressClient._clientConfig = {...config};\n\n    //Add the afterSignInUrl and afterSignOutUrl\n    //Add custom paths if the user has already declared any or else use the defaults\n    const nodeClientConfig: AuthClientConfig = {\n      ...config,\n      afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),\n      afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH),\n    };\n\n    //Initialize the user provided storage if there is any\n    if (storage) {\n      Logger.debug('Initializing user provided storage');\n      this._storage = storage;\n    }\n\n    //Initialize the Auth Client\n    this._authClient = new LegacyAsgardeoNodeClient();\n    this._authClient.initialize(nodeClientConfig, this._storage);\n  }\n\n  public static getInstance(config: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient;\n  public static getInstance(): AsgardeoExpressClient;\n  public static getInstance(config?: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient {\n    //Create a new instance if its not instantiated already\n    if (!AsgardeoExpressClient._instance && config) {\n      AsgardeoExpressClient._instance = new AsgardeoExpressClient(config, storage);\n      Logger.debug('Initialized AsgardeoExpressClient successfully');\n    }\n\n    if (!AsgardeoExpressClient._instance && !config) {\n      throw Error(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-GI1-NF01',\n          'User configuration  is not found',\n          'User config has not been passed to initialize AsgardeoExpressClient',\n        ).toString(),\n      );\n    }\n\n    return AsgardeoExpressClient._instance;\n  }\n\n  public async signIn(\n    req: express.Request,\n    res: express.Response,\n    next: express.nextFunction,\n    signInConfig?: Record<string, string | boolean>,\n  ): Promise<TokenResponse> {\n    if (ExpressUtils.hasErrorInURL(req.originalUrl)) {\n      return Promise.reject(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-SI-IV01',\n          'Invalid login request URL',\n          'Login request contains an error query parameter in the URL',\n        ),\n      );\n    }\n\n    //Check if the user has a valid user ID and if not create one\n    let userId = req.cookies.ASGARDEO_SESSION_ID;\n    if (!userId) {\n      userId = uuidv4();\n    }\n\n    //Handle signIn() callback\n    const authRedirectCallback = (url: string) => {\n      if (url) {\n        //DEBUG\n        Logger.debug('Redirecting to: ' + url);\n        res.cookie('ASGARDEO_SESSION_ID', userId, {\n          maxAge: AsgardeoExpressClient._clientConfig.cookieConfig?.maxAge\n            ? AsgardeoExpressClient._clientConfig.cookieConfig.maxAge\n            : CookieConfig.defaultMaxAge,\n          httpOnly: AsgardeoExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,\n          sameSite: AsgardeoExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,\n          secure: AsgardeoExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure,\n        });\n        res.redirect(url);\n\n        next && typeof next === 'function' && next();\n      }\n    };\n\n    const authResponse: TokenResponse = await this._authClient.signIn(\n      authRedirectCallback,\n      userId,\n      req.query.code,\n      req.query.session_state,\n      req.query.state,\n      signInConfig,\n    );\n\n    if (authResponse.accessToken || authResponse.idToken) {\n      return authResponse;\n    } else {\n      return {\n        accessToken: '',\n        createdAt: 0,\n        expiresIn: '',\n        idToken: '',\n        refreshToken: '',\n        scope: '',\n        tokenType: '',\n      };\n    }\n  }\n\n  public async signOut(userId: string): Promise<string> {\n    return this._authClient.signOut(userId);\n  }\n\n  public async isSignedIn(userId: string): Promise<boolean> {\n    return this._authClient.isSignedIn(userId);\n  }\n\n  public async getIdToken(userId: string): Promise<string> {\n    return this._authClient.getIdToken(userId);\n  }\n\n  public async getUser(userId: string): Promise<User> {\n    return this._authClient.getUser(userId);\n  }\n\n  public async getOpenIDProviderEndpoints(): Promise<OIDCEndpoints> {\n    return this._authClient.getOpenIDProviderEndpoints();\n  }\n\n  public async getDecodedIdToken(userId?: string): Promise<IdToken> {\n    return this._authClient.getDecodedIdToken(userId);\n  }\n\n  public async getAccessToken(userId?: string): Promise<string> {\n    return this._authClient.getAccessToken(userId);\n  }\n\n  public async exchangeToken(config: TokenExchangeRequestConfig, userId?: string): Promise<TokenResponse | Response> {\n    return this._authClient.exchangeToken(config, userId);\n  }\n\n  public async reInitialize(config: Partial<AuthClientConfig>): Promise<void> {\n    return this._authClient.reInitialize(config);\n  }\n\n  public async revokeAccessToken(userId?: string): Promise<Response> {\n    return this._authClient.revokeAccessToken(userId);\n  }\n\n  public static didSignOutFail(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.didSignOutFail(afterSignOutUrl);\n  }\n\n  public static isSignOutSuccessful(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.isSignOutSuccessful(afterSignOutUrl);\n  }\n\n  public static protectRoute(\n    callback: UnauthenticatedCallback,\n  ): (req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void> {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-PR-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return protectRoute(this._instance, callback);\n  }\n\n  public static asgardeoExpressAuth(\n    onSignIn: (response: TokenResponse) => void,\n    onSignOut: () => void,\n    onError: (exception: AsgardeoAuthException) => void,\n  ): any {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-AEA-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return asgardeoExpressAuth(this._instance, AsgardeoExpressClient._clientConfig, onSignIn, onSignOut, onError);\n  }\n\n  public async getStorageManager() {\n    return this._authClient.getStorageManager();\n  }\n}\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport enum CookieConfig {\n    defaultMaxAge = 90000,\n    defaultHttpOnly = 'true',\n    defaultSameSite = 'lax',\n    defaultSecure = 'false'\n}\n\nexport const DEFAULT_LOGIN_PATH = \"/login\";\n\nexport const DEFAULT_LOGOUT_PATH = \"/logout\";\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport express from 'express';\nimport {AsgardeoExpressClient} from '../client';\nimport {UnauthenticatedCallback} from '../models';\nimport {Logger} from '@asgardeo/node';\n\nexport const protectRoute = (\n  asgardeoExpressClient: AsgardeoExpressClient,\n  callback: UnauthenticatedCallback,\n): ((req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void>) => {\n  return async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n    if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n      Logger.error('No session ID found in the request cookies');\n\n      if (callback(res, 'Unauthenticated')) {\n        return;\n      }\n\n      return next();\n    } else {\n      //validate the cookie\n      const isCookieValid = await asgardeoExpressClient.isSignedIn(req.cookies.ASGARDEO_SESSION_ID);\n      if (isCookieValid) {\n        return next();\n      } else {\n        Logger.error('Invalid session ID found in the request cookies');\n        if (callback(res, 'Invalid session cookie')) {\n          return;\n        }\n\n        return next();\n      }\n    }\n  };\n};\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport { AsgardeoAuthException, Storage, TokenResponse, Logger } from \"@asgardeo/node\";\nimport express from \"express\";\nimport { AsgardeoExpressClient } from \"../client\";\nimport { DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH } from \"../constants\";\nimport { ExpressClientConfig } from \"../models\";\n\nexport const asgardeoExpressAuth = (\n    asgardeoExpressClient: AsgardeoExpressClient,\n    config: ExpressClientConfig,\n    onSignIn: (res: express.Response, tokenResponse: TokenResponse) => void,\n    onSignOut: (res: express.Response) => void,\n    onError: (res: express.Response, exception: AsgardeoAuthException) => void\n): any => {\n    //Create the router\n    const router = new express.Router();\n\n    //Patch AuthClient to the request and the response\n    router.use(async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n        req.asgardeoAuth = asgardeoExpressClient;\n        res.asgardeoAuth = asgardeoExpressClient;\n        next();\n    });\n\n    //Patch in '/login' route\n    router.get(\n        config.loginPath || DEFAULT_LOGIN_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            try {\n                const response: TokenResponse = await asgardeoExpressClient.signIn(req, res, next, config.signInConfig);\n                if (response.accessToken || response.idToken) {\n                    onSignIn(res, response);\n                }\n            } catch (e: any) {\n                Logger.error(e.message);\n                onError(res, e);\n            }\n        }\n    );\n\n    //Patch in '/logout' route\n    router.get(\n        config.logoutPath || DEFAULT_LOGOUT_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            //Check if it is a logout success response\n            if (req.query.state === \"sign_out_success\") {\n                onSignOut(res);\n\n                return;\n            }\n\n            //Check if the cookie exists\n            if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n                onError(\n                    res,\n                    new AsgardeoAuthException(\n                        \"EXPRESS-AUTH_MW-LOGOUT-NF01\",\n                        \"No cookie found in the request\",\n                        \"No cookie was sent with the request. The user may not have signed in yet.\"\n                    )\n                );\n\n                return;\n            } else {\n                //Get the signout URL\n                try {\n                    const signOutURL = await req.asgardeoAuth.signOut(req.cookies.ASGARDEO_SESSION_ID);\n                    if (signOutURL) {\n                        res.cookie(\"ASGARDEO_SESSION_ID\", null, { maxAge: 0 });\n                        res.redirect(signOutURL);\n\n                        return;\n                    }\n                } catch (e: any) {\n                    onError(res, e);\n\n                    return;\n                }\n            }\n        }\n    );\n\n    return router;\n};\n", "export class ExpressUtils {\n\n    private static readonly AUTH_CODE_REGEXP: RegExp = /[?&]error=[^&]+/;\n\n    /**\n     * Util function to check if the URL contains an error.\n     *\n     * @param url - URL to be checked.\n     *\n     * @returns {boolean} - True if the URL contains an error.\n     */\n    public static hasErrorInURL(url: string): boolean {\n\n        return this.AUTH_CODE_REGEXP.test(url);\n    }\n}\n"],
+  "sourcesContent": ["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport * from './__legacy__/models';\nexport * from './__legacy__/client';\n\nexport * from '@asgardeo/node';\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  LegacyAsgardeoNodeClient,\n  AuthClientConfig,\n  AuthURLCallback,\n  TokenResponse,\n  Storage,\n  User,\n  OIDCEndpoints,\n  IdToken,\n  TokenExchangeRequestConfig,\n  AsgardeoAuthException,\n  Logger,\n} from '@asgardeo/node';\nimport {CookieConfig, DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH} from './constants';\nimport {ExpressClientConfig, UnauthenticatedCallback} from './models';\nimport express from 'express';\nimport {v4 as uuidv4} from 'uuid';\nimport {asgardeoExpressAuth, protectRoute} from './middleware';\nimport {ExpressUtils} from './utils/express-utils';\n\nexport class AsgardeoExpressClient {\n  private _authClient: LegacyAsgardeoNodeClient<AuthClientConfig>;\n  private _storage?: Storage;\n  private static _clientConfig: ExpressClientConfig;\n\n  private static _instance: AsgardeoExpressClient;\n\n  private constructor(config: ExpressClientConfig, storage?: Storage) {\n    //Set the client config\n    AsgardeoExpressClient._clientConfig = {...config};\n\n    //Add the afterSignInUrl and afterSignOutUrl\n    //Add custom paths if the user has already declared any or else use the defaults\n    const nodeClientConfig: AuthClientConfig = {\n      ...config,\n      afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),\n      afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH),\n    };\n\n    //Initialize the user provided storage if there is any\n    if (storage) {\n      Logger.debug('Initializing user provided storage');\n      this._storage = storage;\n    }\n\n    //Initialize the Auth Client\n    this._authClient = new LegacyAsgardeoNodeClient();\n    this._authClient.initialize(nodeClientConfig, this._storage);\n  }\n\n  public static getInstance(config: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient;\n  public static getInstance(): AsgardeoExpressClient;\n  public static getInstance(config?: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient {\n    //Create a new instance if its not instantiated already\n    if (!AsgardeoExpressClient._instance && config) {\n      AsgardeoExpressClient._instance = new AsgardeoExpressClient(config, storage);\n      Logger.debug('Initialized AsgardeoExpressClient successfully');\n    }\n\n    if (!AsgardeoExpressClient._instance && !config) {\n      throw Error(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-GI1-NF01',\n          'User configuration  is not found',\n          'User config has not been passed to initialize AsgardeoExpressClient',\n        ).toString(),\n      );\n    }\n\n    return AsgardeoExpressClient._instance;\n  }\n\n  public async signIn(\n    req: express.Request,\n    res: express.Response,\n    next: express.nextFunction,\n    signInConfig?: Record<string, string | boolean>,\n  ): Promise<TokenResponse> {\n    if (ExpressUtils.hasErrorInURL(req.originalUrl)) {\n      return Promise.reject(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-SI-IV01',\n          'Invalid login request URL',\n          'Login request contains an error query parameter in the URL',\n        ),\n      );\n    }\n\n    //Check if the user has a valid user ID and if not create one\n    let userId = req.cookies.ASGARDEO_SESSION_ID;\n    if (!userId) {\n      userId = uuidv4();\n    }\n\n    //Handle signIn() callback\n    const authRedirectCallback = (url: string) => {\n      if (url) {\n        //DEBUG\n        Logger.debug('Redirecting to: ' + url);\n        res.cookie('ASGARDEO_SESSION_ID', userId, {\n          maxAge: AsgardeoExpressClient._clientConfig.cookieConfig?.maxAge\n            ? AsgardeoExpressClient._clientConfig.cookieConfig.maxAge\n            : CookieConfig.defaultMaxAge,\n          httpOnly: AsgardeoExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,\n          sameSite: AsgardeoExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,\n          secure: AsgardeoExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure,\n        });\n        res.redirect(url);\n\n        next && typeof next === 'function' && next();\n      }\n    };\n\n    const authResponse: TokenResponse = await this._authClient.signIn(\n      authRedirectCallback,\n      userId,\n      req.query.code,\n      req.query.session_state,\n      req.query.state,\n      signInConfig,\n    );\n\n    if (authResponse.accessToken || authResponse.idToken) {\n      return authResponse;\n    } else {\n      return {\n        accessToken: '',\n        createdAt: 0,\n        expiresIn: '',\n        idToken: '',\n        refreshToken: '',\n        scope: '',\n        tokenType: '',\n      };\n    }\n  }\n\n  public async signOut(userId: string): Promise<string> {\n    return this._authClient.signOut(userId);\n  }\n\n  public async isSignedIn(userId: string): Promise<boolean> {\n    return this._authClient.isSignedIn(userId);\n  }\n\n  public async getIdToken(userId: string): Promise<string> {\n    return this._authClient.getIdToken(userId);\n  }\n\n  public async getUser(userId: string): Promise<User> {\n    return this._authClient.getUser(userId);\n  }\n\n  public async getOpenIDProviderEndpoints(): Promise<OIDCEndpoints> {\n    return this._authClient.getOpenIDProviderEndpoints();\n  }\n\n  public async getDecodedIdToken(userId?: string): Promise<IdToken> {\n    return this._authClient.getDecodedIdToken(userId);\n  }\n\n  public async getAccessToken(userId?: string): Promise<string> {\n    return this._authClient.getAccessToken(userId);\n  }\n\n  public async exchangeToken(config: TokenExchangeRequestConfig, userId?: string): Promise<TokenResponse | Response> {\n    return this._authClient.exchangeToken(config, userId);\n  }\n\n  public async reInitialize(config: Partial<AuthClientConfig>): Promise<void> {\n    return this._authClient.reInitialize(config);\n  }\n\n  public async revokeAccessToken(userId?: string): Promise<Response> {\n    return this._authClient.revokeAccessToken(userId);\n  }\n\n  public static didSignOutFail(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.didSignOutFail(afterSignOutUrl);\n  }\n\n  public static isSignOutSuccessful(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.isSignOutSuccessful(afterSignOutUrl);\n  }\n\n  public static protectRoute(\n    callback: UnauthenticatedCallback,\n  ): (req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void> {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-PR-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return protectRoute(this._instance, callback);\n  }\n\n  public static asgardeoExpressAuth(\n    onSignIn: (response: TokenResponse) => void,\n    onSignOut: () => void,\n    onError: (exception: AsgardeoAuthException) => void,\n  ): any {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-AEA-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return asgardeoExpressAuth(this._instance, AsgardeoExpressClient._clientConfig, onSignIn, onSignOut, onError);\n  }\n\n  public async getStorageManager() {\n    return this._authClient.getStorageManager();\n  }\n}\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport enum CookieConfig {\n    defaultMaxAge = 90000,\n    defaultHttpOnly = 'true',\n    defaultSameSite = 'lax',\n    defaultSecure = 'false'\n}\n\nexport const DEFAULT_LOGIN_PATH = \"/login\";\n\nexport const DEFAULT_LOGOUT_PATH = \"/logout\";\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport express from 'express';\nimport {AsgardeoExpressClient} from '../client';\nimport {UnauthenticatedCallback} from '../models';\nimport {Logger} from '@asgardeo/node';\n\nexport const protectRoute = (\n  asgardeoExpressClient: AsgardeoExpressClient,\n  callback: UnauthenticatedCallback,\n): ((req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void>) => {\n  return async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n    if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n      Logger.error('No session ID found in the request cookies');\n\n      if (callback(res, 'Unauthenticated')) {\n        return;\n      }\n\n      return next();\n    } else {\n      //validate the cookie\n      const isCookieValid = await asgardeoExpressClient.isSignedIn(req.cookies.ASGARDEO_SESSION_ID);\n      if (isCookieValid) {\n        return next();\n      } else {\n        Logger.error('Invalid session ID found in the request cookies');\n        if (callback(res, 'Invalid session cookie')) {\n          return;\n        }\n\n        return next();\n      }\n    }\n  };\n};\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport { AsgardeoAuthException, Storage, TokenResponse, Logger } from \"@asgardeo/node\";\nimport express from \"express\";\nimport { AsgardeoExpressClient } from \"../client\";\nimport { DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH } from \"../constants\";\nimport { ExpressClientConfig } from \"../models\";\n\nexport const asgardeoExpressAuth = (\n    asgardeoExpressClient: AsgardeoExpressClient,\n    config: ExpressClientConfig,\n    onSignIn: (res: express.Response, tokenResponse: TokenResponse) => void,\n    onSignOut: (res: express.Response) => void,\n    onError: (res: express.Response, exception: AsgardeoAuthException) => void\n): any => {\n    //Create the router\n    const router = new express.Router();\n\n    //Patch AuthClient to the request and the response\n    router.use(async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n        req.asgardeoAuth = asgardeoExpressClient;\n        res.asgardeoAuth = asgardeoExpressClient;\n        next();\n    });\n\n    //Patch in '/login' route\n    router.get(\n        config.loginPath || DEFAULT_LOGIN_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            try {\n                const response: TokenResponse = await asgardeoExpressClient.signIn(req, res, next, config.signInConfig);\n                if (response.accessToken || response.idToken) {\n                    onSignIn(res, response);\n                }\n            } catch (e: any) {\n                Logger.error(e.message);\n                onError(res, e);\n            }\n        }\n    );\n\n    //Patch in '/logout' route\n    router.get(\n        config.logoutPath || DEFAULT_LOGOUT_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            //Check if it is a logout success response\n            if (req.query.state === \"sign_out_success\") {\n                onSignOut(res);\n\n                return;\n            }\n\n            //Check if the cookie exists\n            if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n                onError(\n                    res,\n                    new AsgardeoAuthException(\n                        \"EXPRESS-AUTH_MW-LOGOUT-NF01\",\n                        \"No cookie found in the request\",\n                        \"No cookie was sent with the request. The user may not have signed in yet.\"\n                    )\n                );\n\n                return;\n            } else {\n                //Get the signout URL\n                try {\n                    const signOutURL = await req.asgardeoAuth.signOut(req.cookies.ASGARDEO_SESSION_ID);\n                    if (signOutURL) {\n                        res.cookie(\"ASGARDEO_SESSION_ID\", null, { maxAge: 0 });\n                        res.redirect(signOutURL);\n\n                        return;\n                    }\n                } catch (e: any) {\n                    onError(res, e);\n\n                    return;\n                }\n            }\n        }\n    );\n\n    return router;\n};\n", "export class ExpressUtils {\n\n    private static readonly AUTH_CODE_REGEXP: RegExp = /[?&]error=[^&]+/;\n\n    /**\n     * Util function to check if the URL contains an error.\n     *\n     * @param url - URL to be checked.\n     *\n     * @returns {boolean} - True if the URL contains an error.\n     */\n    public static hasErrorInURL(url: string): boolean {\n\n        return this.AUTH_CODE_REGEXP.test(url);\n    }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBA,IAAAA,eAYO;;;ACLA,IAAM,qBAAqB;AAE3B,IAAM,sBAAsB;;;ADOnC,kBAA2B;;;AEb3B,kBAAqB;AAEd,IAAM,eAAe,CAC1B,uBACA,aACiG;AACjG,SAAO,OAAO,KAAsB,KAAuB,SAA8C;AACvG,QAAI,IAAI,QAAQ,wBAAwB,QAAW;AACjD,yBAAO,MAAM,4CAA4C;AAEzD,UAAI,SAAS,KAAK,iBAAiB,GAAG;AACpC;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,OAAO;AAEL,YAAM,gBAAgB,MAAM,sBAAsB,WAAW,IAAI,QAAQ,mBAAmB;AAC5F,UAAI,eAAe;AACjB,eAAO,KAAK;AAAA,MACd,OAAO;AACL,2BAAO,MAAM,iDAAiD;AAC9D,YAAI,SAAS,KAAK,wBAAwB,GAAG;AAC3C;AAAA,QACF;AAEA,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;;;ACjCA,IAAAC,eAAsE;AACtE,qBAAoB;AAKb,IAAM,sBAAsB,CAC/B,uBACA,QACA,UACA,WACA,YACM;AAEN,QAAM,SAAS,IAAI,eAAAC,QAAQ,OAAO;AAGlC,SAAO,IAAI,OAAO,KAAsB,KAAuB,SAA8C;AACzG,QAAI,eAAe;AACnB,QAAI,eAAe;AACnB,SAAK;AAAA,EACT,CAAC;AAGD,SAAO;AAAA,IACH,OAAO,aAAa;AAAA,IACpB,OAAO,KAAsB,KAAuB,SAA8C;AAC9F,UAAI;AACA,cAAM,WAA0B,MAAM,sBAAsB,OAAO,KAAK,KAAK,MAAM,OAAO,YAAY;AACtG,YAAI,SAAS,eAAe,SAAS,SAAS;AAC1C,mBAAS,KAAK,QAAQ;AAAA,QAC1B;AAAA,MACJ,SAAS,GAAQ;AACb,4BAAO,MAAM,EAAE,OAAO;AACtB,gBAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAAA,EACJ;AAGA,SAAO;AAAA,IACH,OAAO,cAAc;AAAA,IACrB,OAAO,KAAsB,KAAuB,SAA8C;AAE9F,UAAI,IAAI,MAAM,UAAU,oBAAoB;AACxC,kBAAU,GAAG;AAEb;AAAA,MACJ;AAGA,UAAI,IAAI,QAAQ,wBAAwB,QAAW;AAC/C;AAAA,UACI;AAAA,UACA,IAAI;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACJ;AAAA,QACJ;AAEA;AAAA,MACJ,OAAO;AAEH,YAAI;AACA,gBAAM,aAAa,MAAM,IAAI,aAAa,QAAQ,IAAI,QAAQ,mBAAmB;AACjF,cAAI,YAAY;AACZ,gBAAI,OAAO,uBAAuB,MAAM,EAAE,QAAQ,EAAE,CAAC;AACrD,gBAAI,SAAS,UAAU;AAEvB;AAAA,UACJ;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,CAAC;AAEd;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;ACpGO,IAAM,eAAN,MAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWtB,OAAc,cAAc,KAAsB;AAE9C,WAAO,KAAK,iBAAiB,KAAK,GAAG;AAAA,EACzC;AACJ;AAbI,cAFS,cAEe,oBAA2B;;;AJoChD,IAAM,yBAAN,MAAM,uBAAsB;AAAA,EAOzB,YAAY,QAA6B,SAAmB;AANpE,wBAAQ;AACR,wBAAQ;AAON,2BAAsB,gBAAgB,EAAC,GAAG,OAAM;AAIhD,UAAM,mBAAqC;AAAA,MACzC,GAAG;AAAA,MACH,gBAAgB,OAAO,UAAU,OAAO,aAAa;AAAA,MACrD,iBAAiB,OAAO,UAAU,OAAO,cAAc;AAAA,IACzD;AAGA,QAAI,SAAS;AACX,0BAAO,MAAM,oCAAoC;AACjD,WAAK,WAAW;AAAA,IAClB;AAGA,SAAK,cAAc,IAAI,sCAAyB;AAChD,SAAK,YAAY,WAAW,kBAAkB,KAAK,QAAQ;AAAA,EAC7D;AAAA,EAIA,OAAc,YAAY,QAA8B,SAA0C;AAEhG,QAAI,CAAC,uBAAsB,aAAa,QAAQ;AAC9C,6BAAsB,YAAY,IAAI,uBAAsB,QAAQ,OAAO;AAC3E,0BAAO,MAAM,gDAAgD;AAAA,IAC/D;AAEA,QAAI,CAAC,uBAAsB,aAAa,CAAC,QAAQ;AAC/C,YAAM;AAAA,QACJ,IAAI;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF,EAAE,SAAS;AAAA,MACb;AAAA,IACF;AAEA,WAAO,uBAAsB;AAAA,EAC/B;AAAA,EAEA,MAAa,OACX,KACA,KACA,MACA,cACwB;AACxB,QAAI,aAAa,cAAc,IAAI,WAAW,GAAG;AAC/C,aAAO,QAAQ;AAAA,QACb,IAAI;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,QAAI,SAAS,IAAI,QAAQ;AACzB,QAAI,CAAC,QAAQ;AACX,mBAAS,YAAAC,IAAO;AAAA,IAClB;AAGA,UAAM,uBAAuB,CAAC,QAAgB;AAC5C,UAAI,KAAK;AAEP,4BAAO,MAAM,qBAAqB,GAAG;AACrC,YAAI,OAAO,uBAAuB,QAAQ;AAAA,UACxC,QAAQ,uBAAsB,cAAc,cAAc,SACtD,uBAAsB,cAAc,aAAa;AAAA,UAErD,UAAU,uBAAsB,cAAc,cAAc;AAAA,UAC5D,UAAU,uBAAsB,cAAc,cAAc;AAAA,UAC5D,QAAQ,uBAAsB,cAAc,cAAc;AAAA,QAC5D,CAAC;AACD,YAAI,SAAS,GAAG;AAEhB,gBAAQ,OAAO,SAAS,cAAc,KAAK;AAAA,MAC7C;AAAA,IACF;AAEA,UAAM,eAA8B,MAAM,KAAK,YAAY;AAAA,MACzD;AAAA,MACA;AAAA,MACA,IAAI,MAAM;AAAA,MACV,IAAI,MAAM;AAAA,MACV,IAAI,MAAM;AAAA,MACV;AAAA,IACF;AAEA,QAAI,aAAa,eAAe,aAAa,SAAS;AACpD,aAAO;AAAA,IACT,OAAO;AACL,aAAO;AAAA,QACL,aAAa;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,QACd,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,QAAQ,QAAiC;AACpD,WAAO,KAAK,YAAY,QAAQ,MAAM;AAAA,EACxC;AAAA,EAEA,MAAa,WAAW,QAAkC;AACxD,WAAO,KAAK,YAAY,WAAW,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAa,WAAW,QAAiC;AACvD,WAAO,KAAK,YAAY,WAAW,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAa,QAAQ,QAA+B;AAClD,WAAO,KAAK,YAAY,QAAQ,MAAM;AAAA,EACxC;AAAA,EAEA,MAAa,6BAAqD;AAChE,WAAO,KAAK,YAAY,2BAA2B;AAAA,EACrD;AAAA,EAEA,MAAa,kBAAkB,QAAmC;AAChE,WAAO,KAAK,YAAY,kBAAkB,MAAM;AAAA,EAClD;AAAA,EAEA,MAAa,eAAe,QAAkC;AAC5D,WAAO,KAAK,YAAY,eAAe,MAAM;AAAA,EAC/C;AAAA,EAEA,MAAa,cAAc,QAAoC,QAAoD;AACjH,WAAO,KAAK,YAAY,cAAc,QAAQ,MAAM;AAAA,EACtD;AAAA,EAEA,MAAa,aAAa,QAAkD;AAC1E,WAAO,KAAK,YAAY,aAAa,MAAM;AAAA,EAC7C;AAAA,EAEA,MAAa,kBAAkB,QAAoC;AACjE,WAAO,KAAK,YAAY,kBAAkB,MAAM;AAAA,EAClD;AAAA,EAEA,OAAc,eAAe,iBAAkC;AAC7D,WAAO,sCAAyB,eAAe,eAAe;AAAA,EAChE;AAAA,EAEA,OAAc,oBAAoB,iBAAkC;AAClE,WAAO,sCAAyB,oBAAoB,eAAe;AAAA,EACrE;AAAA,EAEA,OAAc,aACZ,UAC4F;AAC5F,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,WAAW,QAAQ;AAAA,EAC9C;AAAA,EAEA,OAAc,oBACZ,UACA,WACA,SACK;AACL,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,oBAAoB,KAAK,WAAW,uBAAsB,eAAe,UAAU,WAAW,OAAO;AAAA,EAC9G;AAAA,EAEA,MAAa,oBAAoB;AAC/B,WAAO,KAAK,YAAY,kBAAkB;AAAA,EAC5C;AACF;AAnME,cAHW,wBAGI;AAEf,cALW,wBAKI;AALV,IAAM,wBAAN;;;ADjBP,0BAAc,2BArBd;",
   "names": ["import_node", "import_node", "express", "uuidv4"]
 }

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 /**
- * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
  *
- * WSO2 Inc. licenses this file to you under the Apache License,
+ * WSO2 LLC. licenses this file to you under the Apache License,
  * Version 2.0 (the "License"); you may not use this file except
  * in compliance with the License.
  * You may obtain a copy of the License at
@@ -15,6 +15,6 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-export * from "./__legacy__/models";
-export * from "./__legacy__/client";
+export * from './__legacy__/models';
+export * from './__legacy__/client';
 export * from '@asgardeo/node';

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/__legacy__/client.ts", "../src/__legacy__/constants/default-options.ts", "../src/__legacy__/middleware/protect-route.ts", "../src/__legacy__/middleware/authentication.ts", "../src/__legacy__/utils/express-utils.ts", "../src/index.ts"],
-  "sourcesContent": ["/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  LegacyAsgardeoNodeClient,\n  AuthClientConfig,\n  AuthURLCallback,\n  TokenResponse,\n  Storage,\n  User,\n  OIDCEndpoints,\n  IdToken,\n  TokenExchangeRequestConfig,\n  AsgardeoAuthException,\n  Logger,\n} from '@asgardeo/node';\nimport {CookieConfig, DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH} from './constants';\nimport {ExpressClientConfig, UnauthenticatedCallback} from './models';\nimport express from 'express';\nimport {v4 as uuidv4} from 'uuid';\nimport {asgardeoExpressAuth, protectRoute} from './middleware';\nimport {ExpressUtils} from './utils/express-utils';\n\nexport class AsgardeoExpressClient {\n  private _authClient: LegacyAsgardeoNodeClient<AuthClientConfig>;\n  private _storage?: Storage;\n  private static _clientConfig: ExpressClientConfig;\n\n  private static _instance: AsgardeoExpressClient;\n\n  private constructor(config: ExpressClientConfig, storage?: Storage) {\n    //Set the client config\n    AsgardeoExpressClient._clientConfig = {...config};\n\n    //Add the afterSignInUrl and afterSignOutUrl\n    //Add custom paths if the user has already declared any or else use the defaults\n    const nodeClientConfig: AuthClientConfig = {\n      ...config,\n      afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),\n      afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH),\n    };\n\n    //Initialize the user provided storage if there is any\n    if (storage) {\n      Logger.debug('Initializing user provided storage');\n      this._storage = storage;\n    }\n\n    //Initialize the Auth Client\n    this._authClient = new LegacyAsgardeoNodeClient();\n    this._authClient.initialize(nodeClientConfig, this._storage);\n  }\n\n  public static getInstance(config: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient;\n  public static getInstance(): AsgardeoExpressClient;\n  public static getInstance(config?: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient {\n    //Create a new instance if its not instantiated already\n    if (!AsgardeoExpressClient._instance && config) {\n      AsgardeoExpressClient._instance = new AsgardeoExpressClient(config, storage);\n      Logger.debug('Initialized AsgardeoExpressClient successfully');\n    }\n\n    if (!AsgardeoExpressClient._instance && !config) {\n      throw Error(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-GI1-NF01',\n          'User configuration  is not found',\n          'User config has not been passed to initialize AsgardeoExpressClient',\n        ).toString(),\n      );\n    }\n\n    return AsgardeoExpressClient._instance;\n  }\n\n  public async signIn(\n    req: express.Request,\n    res: express.Response,\n    next: express.nextFunction,\n    signInConfig?: Record<string, string | boolean>,\n  ): Promise<TokenResponse> {\n    if (ExpressUtils.hasErrorInURL(req.originalUrl)) {\n      return Promise.reject(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-SI-IV01',\n          'Invalid login request URL',\n          'Login request contains an error query parameter in the URL',\n        ),\n      );\n    }\n\n    //Check if the user has a valid user ID and if not create one\n    let userId = req.cookies.ASGARDEO_SESSION_ID;\n    if (!userId) {\n      userId = uuidv4();\n    }\n\n    //Handle signIn() callback\n    const authRedirectCallback = (url: string) => {\n      if (url) {\n        //DEBUG\n        Logger.debug('Redirecting to: ' + url);\n        res.cookie('ASGARDEO_SESSION_ID', userId, {\n          maxAge: AsgardeoExpressClient._clientConfig.cookieConfig?.maxAge\n            ? AsgardeoExpressClient._clientConfig.cookieConfig.maxAge\n            : CookieConfig.defaultMaxAge,\n          httpOnly: AsgardeoExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,\n          sameSite: AsgardeoExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,\n          secure: AsgardeoExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure,\n        });\n        res.redirect(url);\n\n        next && typeof next === 'function' && next();\n      }\n    };\n\n    const authResponse: TokenResponse = await this._authClient.signIn(\n      authRedirectCallback,\n      userId,\n      req.query.code,\n      req.query.session_state,\n      req.query.state,\n      signInConfig,\n    );\n\n    if (authResponse.accessToken || authResponse.idToken) {\n      return authResponse;\n    } else {\n      return {\n        accessToken: '',\n        createdAt: 0,\n        expiresIn: '',\n        idToken: '',\n        refreshToken: '',\n        scope: '',\n        tokenType: '',\n      };\n    }\n  }\n\n  public async signOut(userId: string): Promise<string> {\n    return this._authClient.signOut(userId);\n  }\n\n  public async isSignedIn(userId: string): Promise<boolean> {\n    return this._authClient.isSignedIn(userId);\n  }\n\n  public async getIdToken(userId: string): Promise<string> {\n    return this._authClient.getIdToken(userId);\n  }\n\n  public async getUser(userId: string): Promise<User> {\n    return this._authClient.getUser(userId);\n  }\n\n  public async getOpenIDProviderEndpoints(): Promise<OIDCEndpoints> {\n    return this._authClient.getOpenIDProviderEndpoints();\n  }\n\n  public async getDecodedIdToken(userId?: string): Promise<IdToken> {\n    return this._authClient.getDecodedIdToken(userId);\n  }\n\n  public async getAccessToken(userId?: string): Promise<string> {\n    return this._authClient.getAccessToken(userId);\n  }\n\n  public async exchangeToken(config: TokenExchangeRequestConfig, userId?: string): Promise<TokenResponse | Response> {\n    return this._authClient.exchangeToken(config, userId);\n  }\n\n  public async reInitialize(config: Partial<AuthClientConfig>): Promise<void> {\n    return this._authClient.reInitialize(config);\n  }\n\n  public async revokeAccessToken(userId?: string): Promise<Response> {\n    return this._authClient.revokeAccessToken(userId);\n  }\n\n  public static didSignOutFail(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.didSignOutFail(afterSignOutUrl);\n  }\n\n  public static isSignOutSuccessful(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.isSignOutSuccessful(afterSignOutUrl);\n  }\n\n  public static protectRoute(\n    callback: UnauthenticatedCallback,\n  ): (req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void> {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-PR-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return protectRoute(this._instance, callback);\n  }\n\n  public static asgardeoExpressAuth(\n    onSignIn: (response: TokenResponse) => void,\n    onSignOut: () => void,\n    onError: (exception: AsgardeoAuthException) => void,\n  ): any {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-AEA-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return asgardeoExpressAuth(this._instance, AsgardeoExpressClient._clientConfig, onSignIn, onSignOut, onError);\n  }\n\n  public async getStorageManager() {\n    return this._authClient.getStorageManager();\n  }\n}\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport enum CookieConfig {\n    defaultMaxAge = 90000,\n    defaultHttpOnly = 'true',\n    defaultSameSite = 'lax',\n    defaultSecure = 'false'\n}\n\nexport const DEFAULT_LOGIN_PATH = \"/login\";\n\nexport const DEFAULT_LOGOUT_PATH = \"/logout\";\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport express from 'express';\nimport {AsgardeoExpressClient} from '../client';\nimport {UnauthenticatedCallback} from '../models';\nimport {Logger} from '@asgardeo/node';\n\nexport const protectRoute = (\n  asgardeoExpressClient: AsgardeoExpressClient,\n  callback: UnauthenticatedCallback,\n): ((req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void>) => {\n  return async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n    if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n      Logger.error('No session ID found in the request cookies');\n\n      if (callback(res, 'Unauthenticated')) {\n        return;\n      }\n\n      return next();\n    } else {\n      //validate the cookie\n      const isCookieValid = await asgardeoExpressClient.isSignedIn(req.cookies.ASGARDEO_SESSION_ID);\n      if (isCookieValid) {\n        return next();\n      } else {\n        Logger.error('Invalid session ID found in the request cookies');\n        if (callback(res, 'Invalid session cookie')) {\n          return;\n        }\n\n        return next();\n      }\n    }\n  };\n};\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport { AsgardeoAuthException, Storage, TokenResponse, Logger } from \"@asgardeo/node\";\nimport express from \"express\";\nimport { AsgardeoExpressClient } from \"../client\";\nimport { DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH } from \"../constants\";\nimport { ExpressClientConfig } from \"../models\";\n\nexport const asgardeoExpressAuth = (\n    asgardeoExpressClient: AsgardeoExpressClient,\n    config: ExpressClientConfig,\n    onSignIn: (res: express.Response, tokenResponse: TokenResponse) => void,\n    onSignOut: (res: express.Response) => void,\n    onError: (res: express.Response, exception: AsgardeoAuthException) => void\n): any => {\n    //Create the router\n    const router = new express.Router();\n\n    //Patch AuthClient to the request and the response\n    router.use(async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n        req.asgardeoAuth = asgardeoExpressClient;\n        res.asgardeoAuth = asgardeoExpressClient;\n        next();\n    });\n\n    //Patch in '/login' route\n    router.get(\n        config.loginPath || DEFAULT_LOGIN_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            try {\n                const response: TokenResponse = await asgardeoExpressClient.signIn(req, res, next, config.signInConfig);\n                if (response.accessToken || response.idToken) {\n                    onSignIn(res, response);\n                }\n            } catch (e: any) {\n                Logger.error(e.message);\n                onError(res, e);\n            }\n        }\n    );\n\n    //Patch in '/logout' route\n    router.get(\n        config.logoutPath || DEFAULT_LOGOUT_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            //Check if it is a logout success response\n            if (req.query.state === \"sign_out_success\") {\n                onSignOut(res);\n\n                return;\n            }\n\n            //Check if the cookie exists\n            if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n                onError(\n                    res,\n                    new AsgardeoAuthException(\n                        \"EXPRESS-AUTH_MW-LOGOUT-NF01\",\n                        \"No cookie found in the request\",\n                        \"No cookie was sent with the request. The user may not have signed in yet.\"\n                    )\n                );\n\n                return;\n            } else {\n                //Get the signout URL\n                try {\n                    const signOutURL = await req.asgardeoAuth.signOut(req.cookies.ASGARDEO_SESSION_ID);\n                    if (signOutURL) {\n                        res.cookie(\"ASGARDEO_SESSION_ID\", null, { maxAge: 0 });\n                        res.redirect(signOutURL);\n\n                        return;\n                    }\n                } catch (e: any) {\n                    onError(res, e);\n\n                    return;\n                }\n            }\n        }\n    );\n\n    return router;\n};\n", "export class ExpressUtils {\n\n    private static readonly AUTH_CODE_REGEXP: RegExp = /[?&]error=[^&]+/;\n\n    /**\n     * Util function to check if the URL contains an error.\n     *\n     * @param url - URL to be checked.\n     *\n     * @returns {boolean} - True if the URL contains an error.\n     */\n    public static hasErrorInURL(url: string): boolean {\n\n        return this.AUTH_CODE_REGEXP.test(url);\n    }\n}\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport * from \"./__legacy__/models\";\nexport * from \"./__legacy__/client\";\n\nexport * from '@asgardeo/node';\n"],
+  "sourcesContent": ["/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  LegacyAsgardeoNodeClient,\n  AuthClientConfig,\n  AuthURLCallback,\n  TokenResponse,\n  Storage,\n  User,\n  OIDCEndpoints,\n  IdToken,\n  TokenExchangeRequestConfig,\n  AsgardeoAuthException,\n  Logger,\n} from '@asgardeo/node';\nimport {CookieConfig, DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH} from './constants';\nimport {ExpressClientConfig, UnauthenticatedCallback} from './models';\nimport express from 'express';\nimport {v4 as uuidv4} from 'uuid';\nimport {asgardeoExpressAuth, protectRoute} from './middleware';\nimport {ExpressUtils} from './utils/express-utils';\n\nexport class AsgardeoExpressClient {\n  private _authClient: LegacyAsgardeoNodeClient<AuthClientConfig>;\n  private _storage?: Storage;\n  private static _clientConfig: ExpressClientConfig;\n\n  private static _instance: AsgardeoExpressClient;\n\n  private constructor(config: ExpressClientConfig, storage?: Storage) {\n    //Set the client config\n    AsgardeoExpressClient._clientConfig = {...config};\n\n    //Add the afterSignInUrl and afterSignOutUrl\n    //Add custom paths if the user has already declared any or else use the defaults\n    const nodeClientConfig: AuthClientConfig = {\n      ...config,\n      afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),\n      afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH),\n    };\n\n    //Initialize the user provided storage if there is any\n    if (storage) {\n      Logger.debug('Initializing user provided storage');\n      this._storage = storage;\n    }\n\n    //Initialize the Auth Client\n    this._authClient = new LegacyAsgardeoNodeClient();\n    this._authClient.initialize(nodeClientConfig, this._storage);\n  }\n\n  public static getInstance(config: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient;\n  public static getInstance(): AsgardeoExpressClient;\n  public static getInstance(config?: ExpressClientConfig, storage?: Storage): AsgardeoExpressClient {\n    //Create a new instance if its not instantiated already\n    if (!AsgardeoExpressClient._instance && config) {\n      AsgardeoExpressClient._instance = new AsgardeoExpressClient(config, storage);\n      Logger.debug('Initialized AsgardeoExpressClient successfully');\n    }\n\n    if (!AsgardeoExpressClient._instance && !config) {\n      throw Error(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-GI1-NF01',\n          'User configuration  is not found',\n          'User config has not been passed to initialize AsgardeoExpressClient',\n        ).toString(),\n      );\n    }\n\n    return AsgardeoExpressClient._instance;\n  }\n\n  public async signIn(\n    req: express.Request,\n    res: express.Response,\n    next: express.nextFunction,\n    signInConfig?: Record<string, string | boolean>,\n  ): Promise<TokenResponse> {\n    if (ExpressUtils.hasErrorInURL(req.originalUrl)) {\n      return Promise.reject(\n        new AsgardeoAuthException(\n          'EXPRESS-CLIENT-SI-IV01',\n          'Invalid login request URL',\n          'Login request contains an error query parameter in the URL',\n        ),\n      );\n    }\n\n    //Check if the user has a valid user ID and if not create one\n    let userId = req.cookies.ASGARDEO_SESSION_ID;\n    if (!userId) {\n      userId = uuidv4();\n    }\n\n    //Handle signIn() callback\n    const authRedirectCallback = (url: string) => {\n      if (url) {\n        //DEBUG\n        Logger.debug('Redirecting to: ' + url);\n        res.cookie('ASGARDEO_SESSION_ID', userId, {\n          maxAge: AsgardeoExpressClient._clientConfig.cookieConfig?.maxAge\n            ? AsgardeoExpressClient._clientConfig.cookieConfig.maxAge\n            : CookieConfig.defaultMaxAge,\n          httpOnly: AsgardeoExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,\n          sameSite: AsgardeoExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,\n          secure: AsgardeoExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure,\n        });\n        res.redirect(url);\n\n        next && typeof next === 'function' && next();\n      }\n    };\n\n    const authResponse: TokenResponse = await this._authClient.signIn(\n      authRedirectCallback,\n      userId,\n      req.query.code,\n      req.query.session_state,\n      req.query.state,\n      signInConfig,\n    );\n\n    if (authResponse.accessToken || authResponse.idToken) {\n      return authResponse;\n    } else {\n      return {\n        accessToken: '',\n        createdAt: 0,\n        expiresIn: '',\n        idToken: '',\n        refreshToken: '',\n        scope: '',\n        tokenType: '',\n      };\n    }\n  }\n\n  public async signOut(userId: string): Promise<string> {\n    return this._authClient.signOut(userId);\n  }\n\n  public async isSignedIn(userId: string): Promise<boolean> {\n    return this._authClient.isSignedIn(userId);\n  }\n\n  public async getIdToken(userId: string): Promise<string> {\n    return this._authClient.getIdToken(userId);\n  }\n\n  public async getUser(userId: string): Promise<User> {\n    return this._authClient.getUser(userId);\n  }\n\n  public async getOpenIDProviderEndpoints(): Promise<OIDCEndpoints> {\n    return this._authClient.getOpenIDProviderEndpoints();\n  }\n\n  public async getDecodedIdToken(userId?: string): Promise<IdToken> {\n    return this._authClient.getDecodedIdToken(userId);\n  }\n\n  public async getAccessToken(userId?: string): Promise<string> {\n    return this._authClient.getAccessToken(userId);\n  }\n\n  public async exchangeToken(config: TokenExchangeRequestConfig, userId?: string): Promise<TokenResponse | Response> {\n    return this._authClient.exchangeToken(config, userId);\n  }\n\n  public async reInitialize(config: Partial<AuthClientConfig>): Promise<void> {\n    return this._authClient.reInitialize(config);\n  }\n\n  public async revokeAccessToken(userId?: string): Promise<Response> {\n    return this._authClient.revokeAccessToken(userId);\n  }\n\n  public static didSignOutFail(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.didSignOutFail(afterSignOutUrl);\n  }\n\n  public static isSignOutSuccessful(afterSignOutUrl: string): boolean {\n    return LegacyAsgardeoNodeClient.isSignOutSuccessful(afterSignOutUrl);\n  }\n\n  public static protectRoute(\n    callback: UnauthenticatedCallback,\n  ): (req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void> {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-PR-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return protectRoute(this._instance, callback);\n  }\n\n  public static asgardeoExpressAuth(\n    onSignIn: (response: TokenResponse) => void,\n    onSignOut: () => void,\n    onError: (exception: AsgardeoAuthException) => void,\n  ): any {\n    if (!this._instance) {\n      throw new AsgardeoAuthException(\n        'EXPRESS-CLIENT-AEA-NF01',\n        'AsgardeoExpressClient is not instantiated',\n        'Create an instance of AsgardeoExpressClient before using calling this method.',\n      );\n    }\n\n    return asgardeoExpressAuth(this._instance, AsgardeoExpressClient._clientConfig, onSignIn, onSignOut, onError);\n  }\n\n  public async getStorageManager() {\n    return this._authClient.getStorageManager();\n  }\n}\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport enum CookieConfig {\n    defaultMaxAge = 90000,\n    defaultHttpOnly = 'true',\n    defaultSameSite = 'lax',\n    defaultSecure = 'false'\n}\n\nexport const DEFAULT_LOGIN_PATH = \"/login\";\n\nexport const DEFAULT_LOGOUT_PATH = \"/logout\";\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport express from 'express';\nimport {AsgardeoExpressClient} from '../client';\nimport {UnauthenticatedCallback} from '../models';\nimport {Logger} from '@asgardeo/node';\n\nexport const protectRoute = (\n  asgardeoExpressClient: AsgardeoExpressClient,\n  callback: UnauthenticatedCallback,\n): ((req: express.Request, res: express.Response, next: express.nextFunction) => Promise<void>) => {\n  return async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n    if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n      Logger.error('No session ID found in the request cookies');\n\n      if (callback(res, 'Unauthenticated')) {\n        return;\n      }\n\n      return next();\n    } else {\n      //validate the cookie\n      const isCookieValid = await asgardeoExpressClient.isSignedIn(req.cookies.ASGARDEO_SESSION_ID);\n      if (isCookieValid) {\n        return next();\n      } else {\n        Logger.error('Invalid session ID found in the request cookies');\n        if (callback(res, 'Invalid session cookie')) {\n          return;\n        }\n\n        return next();\n      }\n    }\n  };\n};\n", "/**\n * Copyright (c) 2022, WSO2 Inc. (http://www.wso2.com) All Rights Reserved.\n *\n * WSO2 Inc. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport { AsgardeoAuthException, Storage, TokenResponse, Logger } from \"@asgardeo/node\";\nimport express from \"express\";\nimport { AsgardeoExpressClient } from \"../client\";\nimport { DEFAULT_LOGIN_PATH, DEFAULT_LOGOUT_PATH } from \"../constants\";\nimport { ExpressClientConfig } from \"../models\";\n\nexport const asgardeoExpressAuth = (\n    asgardeoExpressClient: AsgardeoExpressClient,\n    config: ExpressClientConfig,\n    onSignIn: (res: express.Response, tokenResponse: TokenResponse) => void,\n    onSignOut: (res: express.Response) => void,\n    onError: (res: express.Response, exception: AsgardeoAuthException) => void\n): any => {\n    //Create the router\n    const router = new express.Router();\n\n    //Patch AuthClient to the request and the response\n    router.use(async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n        req.asgardeoAuth = asgardeoExpressClient;\n        res.asgardeoAuth = asgardeoExpressClient;\n        next();\n    });\n\n    //Patch in '/login' route\n    router.get(\n        config.loginPath || DEFAULT_LOGIN_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            try {\n                const response: TokenResponse = await asgardeoExpressClient.signIn(req, res, next, config.signInConfig);\n                if (response.accessToken || response.idToken) {\n                    onSignIn(res, response);\n                }\n            } catch (e: any) {\n                Logger.error(e.message);\n                onError(res, e);\n            }\n        }\n    );\n\n    //Patch in '/logout' route\n    router.get(\n        config.logoutPath || DEFAULT_LOGOUT_PATH,\n        async (req: express.Request, res: express.Response, next: express.nextFunction): Promise<void> => {\n            //Check if it is a logout success response\n            if (req.query.state === \"sign_out_success\") {\n                onSignOut(res);\n\n                return;\n            }\n\n            //Check if the cookie exists\n            if (req.cookies.ASGARDEO_SESSION_ID === undefined) {\n                onError(\n                    res,\n                    new AsgardeoAuthException(\n                        \"EXPRESS-AUTH_MW-LOGOUT-NF01\",\n                        \"No cookie found in the request\",\n                        \"No cookie was sent with the request. The user may not have signed in yet.\"\n                    )\n                );\n\n                return;\n            } else {\n                //Get the signout URL\n                try {\n                    const signOutURL = await req.asgardeoAuth.signOut(req.cookies.ASGARDEO_SESSION_ID);\n                    if (signOutURL) {\n                        res.cookie(\"ASGARDEO_SESSION_ID\", null, { maxAge: 0 });\n                        res.redirect(signOutURL);\n\n                        return;\n                    }\n                } catch (e: any) {\n                    onError(res, e);\n\n                    return;\n                }\n            }\n        }\n    );\n\n    return router;\n};\n", "export class ExpressUtils {\n\n    private static readonly AUTH_CODE_REGEXP: RegExp = /[?&]error=[^&]+/;\n\n    /**\n     * Util function to check if the URL contains an error.\n     *\n     * @param url - URL to be checked.\n     *\n     * @returns {boolean} - True if the URL contains an error.\n     */\n    public static hasErrorInURL(url: string): boolean {\n\n        return this.AUTH_CODE_REGEXP.test(url);\n    }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport * from './__legacy__/models';\nexport * from './__legacy__/client';\n\nexport * from '@asgardeo/node';\n"],
   "mappings": ";;;;;AAkBA;AAAA,EACE;AAAA,EASA,yBAAAA;AAAA,EACA,UAAAC;AAAA,OACK;;;ACLA,IAAM,qBAAqB;AAE3B,IAAM,sBAAsB;;;ADOnC,SAAQ,MAAM,cAAa;;;AEb3B,SAAQ,cAAa;AAEd,IAAM,eAAe,CAC1B,uBACA,aACiG;AACjG,SAAO,OAAO,KAAsB,KAAuB,SAA8C;AACvG,QAAI,IAAI,QAAQ,wBAAwB,QAAW;AACjD,aAAO,MAAM,4CAA4C;AAEzD,UAAI,SAAS,KAAK,iBAAiB,GAAG;AACpC;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,OAAO;AAEL,YAAM,gBAAgB,MAAM,sBAAsB,WAAW,IAAI,QAAQ,mBAAmB;AAC5F,UAAI,eAAe;AACjB,eAAO,KAAK;AAAA,MACd,OAAO;AACL,eAAO,MAAM,iDAAiD;AAC9D,YAAI,SAAS,KAAK,wBAAwB,GAAG;AAC3C;AAAA,QACF;AAEA,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;;;ACjCA,SAAS,uBAA+C,UAAAC,eAAc;AACtE,OAAO,aAAa;AAKb,IAAM,sBAAsB,CAC/B,uBACA,QACA,UACA,WACA,YACM;AAEN,QAAM,SAAS,IAAI,QAAQ,OAAO;AAGlC,SAAO,IAAI,OAAO,KAAsB,KAAuB,SAA8C;AACzG,QAAI,eAAe;AACnB,QAAI,eAAe;AACnB,SAAK;AAAA,EACT,CAAC;AAGD,SAAO;AAAA,IACH,OAAO,aAAa;AAAA,IACpB,OAAO,KAAsB,KAAuB,SAA8C;AAC9F,UAAI;AACA,cAAM,WAA0B,MAAM,sBAAsB,OAAO,KAAK,KAAK,MAAM,OAAO,YAAY;AACtG,YAAI,SAAS,eAAe,SAAS,SAAS;AAC1C,mBAAS,KAAK,QAAQ;AAAA,QAC1B;AAAA,MACJ,SAAS,GAAQ;AACb,QAAAC,QAAO,MAAM,EAAE,OAAO;AACtB,gBAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAAA,EACJ;AAGA,SAAO;AAAA,IACH,OAAO,cAAc;AAAA,IACrB,OAAO,KAAsB,KAAuB,SAA8C;AAE9F,UAAI,IAAI,MAAM,UAAU,oBAAoB;AACxC,kBAAU,GAAG;AAEb;AAAA,MACJ;AAGA,UAAI,IAAI,QAAQ,wBAAwB,QAAW;AAC/C;AAAA,UACI;AAAA,UACA,IAAI;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACJ;AAAA,QACJ;AAEA;AAAA,MACJ,OAAO;AAEH,YAAI;AACA,gBAAM,aAAa,MAAM,IAAI,aAAa,QAAQ,IAAI,QAAQ,mBAAmB;AACjF,cAAI,YAAY;AACZ,gBAAI,OAAO,uBAAuB,MAAM,EAAE,QAAQ,EAAE,CAAC;AACrD,gBAAI,SAAS,UAAU;AAEvB;AAAA,UACJ;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,CAAC;AAEd;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;ACpGO,IAAM,eAAN,MAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWtB,OAAc,cAAc,KAAsB;AAE9C,WAAO,KAAK,iBAAiB,KAAK,GAAG;AAAA,EACzC;AACJ;AAbI,cAFS,cAEe,oBAA2B;;;AJoChD,IAAM,yBAAN,MAAM,uBAAsB;AAAA,EAOzB,YAAY,QAA6B,SAAmB;AANpE,wBAAQ;AACR,wBAAQ;AAON,2BAAsB,gBAAgB,EAAC,GAAG,OAAM;AAIhD,UAAM,mBAAqC;AAAA,MACzC,GAAG;AAAA,MACH,gBAAgB,OAAO,UAAU,OAAO,aAAa;AAAA,MACrD,iBAAiB,OAAO,UAAU,OAAO,cAAc;AAAA,IACzD;AAGA,QAAI,SAAS;AACX,MAAAC,QAAO,MAAM,oCAAoC;AACjD,WAAK,WAAW;AAAA,IAClB;AAGA,SAAK,cAAc,IAAI,yBAAyB;AAChD,SAAK,YAAY,WAAW,kBAAkB,KAAK,QAAQ;AAAA,EAC7D;AAAA,EAIA,OAAc,YAAY,QAA8B,SAA0C;AAEhG,QAAI,CAAC,uBAAsB,aAAa,QAAQ;AAC9C,6BAAsB,YAAY,IAAI,uBAAsB,QAAQ,OAAO;AAC3E,MAAAA,QAAO,MAAM,gDAAgD;AAAA,IAC/D;AAEA,QAAI,CAAC,uBAAsB,aAAa,CAAC,QAAQ;AAC/C,YAAM;AAAA,QACJ,IAAIC;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF,EAAE,SAAS;AAAA,MACb;AAAA,IACF;AAEA,WAAO,uBAAsB;AAAA,EAC/B;AAAA,EAEA,MAAa,OACX,KACA,KACA,MACA,cACwB;AACxB,QAAI,aAAa,cAAc,IAAI,WAAW,GAAG;AAC/C,aAAO,QAAQ;AAAA,QACb,IAAIA;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,QAAI,SAAS,IAAI,QAAQ;AACzB,QAAI,CAAC,QAAQ;AACX,eAAS,OAAO;AAAA,IAClB;AAGA,UAAM,uBAAuB,CAAC,QAAgB;AAC5C,UAAI,KAAK;AAEP,QAAAD,QAAO,MAAM,qBAAqB,GAAG;AACrC,YAAI,OAAO,uBAAuB,QAAQ;AAAA,UACxC,QAAQ,uBAAsB,cAAc,cAAc,SACtD,uBAAsB,cAAc,aAAa;AAAA,UAErD,UAAU,uBAAsB,cAAc,cAAc;AAAA,UAC5D,UAAU,uBAAsB,cAAc,cAAc;AAAA,UAC5D,QAAQ,uBAAsB,cAAc,cAAc;AAAA,QAC5D,CAAC;AACD,YAAI,SAAS,GAAG;AAEhB,gBAAQ,OAAO,SAAS,cAAc,KAAK;AAAA,MAC7C;AAAA,IACF;AAEA,UAAM,eAA8B,MAAM,KAAK,YAAY;AAAA,MACzD;AAAA,MACA;AAAA,MACA,IAAI,MAAM;AAAA,MACV,IAAI,MAAM;AAAA,MACV,IAAI,MAAM;AAAA,MACV;AAAA,IACF;AAEA,QAAI,aAAa,eAAe,aAAa,SAAS;AACpD,aAAO;AAAA,IACT,OAAO;AACL,aAAO;AAAA,QACL,aAAa;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,QACd,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,QAAQ,QAAiC;AACpD,WAAO,KAAK,YAAY,QAAQ,MAAM;AAAA,EACxC;AAAA,EAEA,MAAa,WAAW,QAAkC;AACxD,WAAO,KAAK,YAAY,WAAW,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAa,WAAW,QAAiC;AACvD,WAAO,KAAK,YAAY,WAAW,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAa,QAAQ,QAA+B;AAClD,WAAO,KAAK,YAAY,QAAQ,MAAM;AAAA,EACxC;AAAA,EAEA,MAAa,6BAAqD;AAChE,WAAO,KAAK,YAAY,2BAA2B;AAAA,EACrD;AAAA,EAEA,MAAa,kBAAkB,QAAmC;AAChE,WAAO,KAAK,YAAY,kBAAkB,MAAM;AAAA,EAClD;AAAA,EAEA,MAAa,eAAe,QAAkC;AAC5D,WAAO,KAAK,YAAY,eAAe,MAAM;AAAA,EAC/C;AAAA,EAEA,MAAa,cAAc,QAAoC,QAAoD;AACjH,WAAO,KAAK,YAAY,cAAc,QAAQ,MAAM;AAAA,EACtD;AAAA,EAEA,MAAa,aAAa,QAAkD;AAC1E,WAAO,KAAK,YAAY,aAAa,MAAM;AAAA,EAC7C;AAAA,EAEA,MAAa,kBAAkB,QAAoC;AACjE,WAAO,KAAK,YAAY,kBAAkB,MAAM;AAAA,EAClD;AAAA,EAEA,OAAc,eAAe,iBAAkC;AAC7D,WAAO,yBAAyB,eAAe,eAAe;AAAA,EAChE;AAAA,EAEA,OAAc,oBAAoB,iBAAkC;AAClE,WAAO,yBAAyB,oBAAoB,eAAe;AAAA,EACrE;AAAA,EAEA,OAAc,aACZ,UAC4F;AAC5F,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAIC;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,WAAW,QAAQ;AAAA,EAC9C;AAAA,EAEA,OAAc,oBACZ,UACA,WACA,SACK;AACL,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAIA;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,oBAAoB,KAAK,WAAW,uBAAsB,eAAe,UAAU,WAAW,OAAO;AAAA,EAC9G;AAAA,EAEA,MAAa,oBAAoB;AAC/B,WAAO,KAAK,YAAY,kBAAkB;AAAA,EAC5C;AACF;AAnME,cAHW,wBAGI;AAEf,cALW,wBAKI;AALV,IAAM,wBAAN;;;AKjBP,cAAc;",
   "names": ["AsgardeoAuthException", "Logger", "Logger", "Logger", "Logger", "AsgardeoAuthException"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asgardeo/express",
-  "version": "0.0.48",
+  "version": "0.0.50",
   "description": "Express.js implementation of Asgardeo JavaScript SDK.",
   "keywords": [
     "asgardeo",
@@ -38,7 +38,7 @@
     "@wso2/prettier-config": "git+https://github.com/brionmario/wso2-ui-configs.git#a1fc6eb570653c999828aea9f5027cba06af4391&path:packages/prettier-config",
     "esbuild": "0.25.9",
     "eslint": "8.57.0",
-    "express": "5.1.0",
+    "express": "5.2.1",
     "prettier": "2.6.2",
     "rimraf": "6.1.0",
     "typescript": "5.7.2",
@@ -46,7 +46,7 @@
   },
   "dependencies": {
     "uuid": "11.1.0",
-    "@asgardeo/node": "0.0.49"
+    "@asgardeo/node": "0.0.51"
   },
   "peerDependencies": {
     "express": ">=4.21.2"
@@ -59,7 +59,7 @@
     "clean": "rimraf dist",
     "fix:lint": "eslint . --ext .js,.jsx,.ts,.tsx,.cjs,.mjs",
     "lint": "eslint . --ext .js,.jsx,.ts,.tsx,.cjs,.mjs",
-    "test": "vitest",
+    "test": "vitest --passWithNoTests",
     "typecheck": "tsc -p tsconfig.lib.json"
   }
 }