@asgardeo/javascript 0.8.3 → 0.9.0

package/dist/StorageManager.d.ts

@@ -28,7 +28,7 @@ declare class StorageManager<T> {
     protected setDataInBulk(key: string, data: PartialData<T>): Promise<void>;
     protected setValue(key: string, attribute: keyof AuthClientConfig<T> | keyof OIDCDiscoveryApiResponse | keyof SessionData | keyof TemporaryStore, value: TemporaryStoreValue): Promise<void>;
     protected removeValue(key: string, attribute: keyof AuthClientConfig<T> | keyof OIDCDiscoveryApiResponse | keyof SessionData | keyof TemporaryStore): Promise<void>;
-    protected resolveKey(store: Stores | string, userId?: string): string;
+    protected resolveKey(store: Stores | string, userId?: string, instanceId?: string): string;
     protected static isLocalStorageAvailable(): boolean;
     setConfigData(config: Partial<AuthClientConfig<T>>): Promise<void>;
     setOIDCProviderMetaData(oidcProviderMetaData: Partial<OIDCDiscoveryApiResponse>): Promise<void>;
@@ -38,7 +38,7 @@ declare class StorageManager<T> {
     getConfigData(userId?: string): Promise<AuthClientConfig<T>>;
     loadOpenIDProviderConfiguration(): Promise<OIDCDiscoveryApiResponse>;
     getTemporaryData(userId?: string): Promise<TemporaryStore>;
-    getSessionData(userId?: string): Promise<SessionData>;
+    getSessionData(userId?: string, instanceId?: string): Promise<SessionData>;
     getCustomData<K>(key: string, userId?: string): Promise<K>;
     setSessionStatus(status: string): void;
     getSessionStatus(): string;

package/dist/__legacy__/models/client-config.d.ts

@@ -24,6 +24,18 @@ export interface DefaultAuthClientConfig {
     clientId?: string;
     clientSecret?: string;
     enablePKCE?: boolean;
+    organizationChain?: {
+        /**
+         * Instance ID of the source organization context to retrieve access token from for organization token exchange.
+         * Used in linked organization scenarios to automatically fetch the source organization's access token.
+         */
+        sourceInstanceId?: number;
+        /**
+         * Organization ID for the target organization.
+         * When provided with sourceInstanceId, triggers automatic organization token exchange.
+         */
+        targetOrganizationId?: string;
+    };
     prompt?: string;
     responseMode?: OAuthResponseMode;
     scopes?: string | string[] | undefined;

package/dist/cjs/index.js

@@ -657,7 +657,27 @@ var AuthenticationHelper = class {
   }
   async replaceCustomGrantTemplateTags(text, userId) {
     const configData = await this.config();
-    const sessionData = await this.storageManager.getSessionData(userId);
+    const sourceInstanceId = configData.organizationChain?.sourceInstanceId ?? null;
+    let sessionData;
+    if (sourceInstanceId) {
+      const { clientId } = configData;
+      let instanceKey;
+      if (clientId) {
+        instanceKey = `instance_${sourceInstanceId}-${clientId}`;
+      } else {
+        instanceKey = `instance_${sourceInstanceId}`;
+      }
+      sessionData = await this.storageManager.getSessionData(userId, instanceKey);
+      if (!sessionData || !sessionData.access_token) {
+        throw new AsgardeoAuthException(
+          "JS-AUTH_HELPER-RCGTT-NE01",
+          "No session data found for source instance.",
+          "Failed to retrieve session data from the source organization context."
+        );
+      }
+    } else {
+      sessionData = await this.storageManager.getSessionData(userId);
+    }
     const scope = processOpenIDScopes_default(configData.scopes);
     if (typeof text !== "string") {
       return text;
@@ -909,8 +929,17 @@ var StorageManager = class _StorageManager {
     const dataToBeSavedJSON = JSON.stringify(dataToBeSaved);
     await this.store.setData(key, dataToBeSavedJSON);
   }
-  resolveKey(store, userId) {
-    return userId ? `${store}-${this.id}-${userId}` : `${store}-${this.id}`;
+  resolveKey(store, userId, instanceId) {
+    if (userId && instanceId) {
+      return `${store}-${instanceId}-${userId}`;
+    }
+    if (userId) {
+      return `${store}-${this.id}-${userId}`;
+    }
+    if (instanceId) {
+      return `${store}-${instanceId}`;
+    }
+    return `${store}-${this.id}`;
   }
   static isLocalStorageAvailable() {
     try {
@@ -946,8 +975,8 @@ var StorageManager = class _StorageManager {
   async getTemporaryData(userId) {
     return JSON.parse(await this.store.getData(this.resolveKey("temporary_data" /* TemporaryData */, userId)) ?? null);
   }
-  async getSessionData(userId) {
-    return JSON.parse(await this.store.getData(this.resolveKey("session_data" /* SessionData */, userId)) ?? null);
+  async getSessionData(userId, instanceId) {
+    return JSON.parse(await this.store.getData(this.resolveKey("session_data" /* SessionData */, userId, instanceId)) ?? null);
   }
   async getCustomData(key, userId) {
     return JSON.parse(await this.store.getData(this.resolveKey(key, userId)) ?? null);
@@ -1346,77 +1375,74 @@ var _AsgardeoAuthClient = class _AsgardeoAuthClient {
    * @preserve
    */
   async requestAccessToken(authorizationCode, sessionState, state, userId, tokenRequestConfig) {
-    const performTokenRequest = async () => {
-      const tokenEndpoint = (await this.oidcProviderMetaDataProvider()).token_endpoint;
-      const configData = await this.configProvider();
-      if (!tokenEndpoint || tokenEndpoint.trim().length === 0) {
-        throw new AsgardeoAuthException(
-          "JS-AUTH_CORE-RAT1-NF01",
-          "Token endpoint not found.",
-          "No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint or the token endpoint passed to the SDK is empty."
-        );
-      }
-      if (sessionState) {
-        await this.storageManager.setSessionDataParameter(
-          OIDCRequestConstants_default.Params.SESSION_STATE,
-          sessionState,
-          userId
-        );
-      }
-      const body = new URLSearchParams();
-      body.set("client_id", configData.clientId);
-      if (configData.clientSecret && configData.clientSecret.trim().length > 0) {
-        body.set("client_secret", configData.clientSecret);
-      }
-      const code = authorizationCode;
-      body.set("code", code);
-      body.set("grant_type", "authorization_code");
-      body.set("redirect_uri", configData.afterSignInUrl);
-      if (tokenRequestConfig?.params) {
-        Object.entries(tokenRequestConfig.params).forEach(([key, value]) => {
-          body.append(key, value);
-        });
-      }
-      if (configData.enablePKCE) {
-        body.set(
-          "code_verifier",
-          `${await this.storageManager.getTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId)}`
-        );
-        await this.storageManager.removeTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId);
-      }
-      let tokenResponse;
-      try {
-        tokenResponse = await fetch(tokenEndpoint, {
-          body,
-          credentials: configData.sendCookiesInRequests ? "include" : "same-origin",
-          headers: {
-            Accept: "application/json",
-            "Content-Type": "application/x-www-form-urlencoded"
-          },
-          method: "POST"
-        });
-      } catch (error2) {
-        throw new AsgardeoAuthException(
-          "JS-AUTH_CORE-RAT1-NE02",
-          "Requesting access token failed",
-          error2 ?? "The request to get the access token from the server failed."
-        );
-      }
-      if (!tokenResponse.ok) {
-        throw new AsgardeoAuthException(
-          "JS-AUTH_CORE-RAT1-HE03",
-          `Requesting access token failed with ${tokenResponse.statusText}`,
-          await tokenResponse.json()
-        );
-      }
-      return this.authHelper.handleTokenResponse(tokenResponse, userId);
-    };
-    if (await this.storageManager.getTemporaryDataParameter(
+    if (!await this.storageManager.getTemporaryDataParameter(
       OIDCDiscoveryConstants_default.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED
     )) {
-      return performTokenRequest();
+      await this.loadOpenIDProviderConfiguration(false);
+    }
+    const tokenEndpoint = (await this.oidcProviderMetaDataProvider()).token_endpoint;
+    const configData = await this.configProvider();
+    if (!tokenEndpoint || tokenEndpoint.trim().length === 0) {
+      throw new AsgardeoAuthException(
+        "JS-AUTH_CORE-RAT1-NF01",
+        "Token endpoint not found.",
+        "No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint or the token endpoint passed to the SDK is empty."
+      );
+    }
+    if (sessionState) {
+      await this.storageManager.setSessionDataParameter(
+        OIDCRequestConstants_default.Params.SESSION_STATE,
+        sessionState,
+        userId
+      );
+    }
+    const body = new URLSearchParams();
+    body.set("client_id", configData.clientId);
+    if (configData.clientSecret && configData.clientSecret.trim().length > 0) {
+      body.set("client_secret", configData.clientSecret);
+    }
+    const code = authorizationCode;
+    body.set("code", code);
+    body.set("grant_type", "authorization_code");
+    body.set("redirect_uri", configData.afterSignInUrl);
+    if (tokenRequestConfig?.params) {
+      Object.entries(tokenRequestConfig.params).forEach(([key, value]) => {
+        body.append(key, value);
+      });
+    }
+    if (configData.enablePKCE) {
+      body.set(
+        "code_verifier",
+        `${await this.storageManager.getTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId)}`
+      );
+      await this.storageManager.removeTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId);
     }
-    return this.loadOpenIDProviderConfiguration(false).then(() => performTokenRequest());
+    let tokenResponse;
+    try {
+      tokenResponse = await fetch(tokenEndpoint, {
+        body,
+        credentials: configData.sendCookiesInRequests ? "include" : "same-origin",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        method: "POST"
+      });
+    } catch (error2) {
+      throw new AsgardeoAuthException(
+        "JS-AUTH_CORE-RAT1-NE02",
+        "Requesting access token failed",
+        error2 ?? "The request to get the access token from the server failed."
+      );
+    }
+    if (!tokenResponse.ok) {
+      throw new AsgardeoAuthException(
+        "JS-AUTH_CORE-RAT1-HE03",
+        `Requesting access token failed with ${tokenResponse.statusText}`,
+        await tokenResponse.json()
+      );
+    }
+    return this.authHelper.handleTokenResponse(tokenResponse, userId);
   }
   async loadOpenIDProviderConfiguration(forceInit) {
     const configData = await this.configProvider();
@@ -1862,6 +1888,11 @@ var _AsgardeoAuthClient = class _AsgardeoAuthClient {
    * @preserve
    */
   async exchangeToken(config, userId) {
+    if (!await this.storageManager.getTemporaryDataParameter(
+      OIDCDiscoveryConstants_default.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED
+    )) {
+      await this.loadOpenIDProviderConfiguration(false);
+    }
     const oidcProviderMetadata = await this.oidcProviderMetaDataProvider();
     const configData = await this.configProvider();
     let tokenEndpoint;