@atlasauth/js 0.1.3 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/fapi.d.ts +6 -0
- package/dist/fapi.js +16 -0
- package/dist/fapi.js.map +1 -1
- package/dist/redirect.d.ts +64 -0
- package/dist/redirect.js +121 -0
- package/dist/redirect.js.map +1 -1
- package/package.json +1 -1
package/dist/fapi.d.ts
CHANGED
|
@@ -28,6 +28,12 @@ export interface FapiResponse<T> {
|
|
|
28
28
|
export declare class FapiClient {
|
|
29
29
|
private readonly options;
|
|
30
30
|
constructor(options: FapiClientOptions);
|
|
31
|
+
/**
|
|
32
|
+
* The origin FAPI serves from — where an OAuth popup's callback page lives, so
|
|
33
|
+
* the popup flow can pin `postMessage`'s `event.origin` to it. Empty `baseUrl`
|
|
34
|
+
* means same-origin, so callers fall back to `window.location.origin`.
|
|
35
|
+
*/
|
|
36
|
+
get frontendApiOrigin(): string;
|
|
31
37
|
request<T>(path: string, init?: RequestInit): Promise<FapiResponse<T>>;
|
|
32
38
|
post<T>(path: string, body?: unknown): Promise<FapiResponse<T>>;
|
|
33
39
|
get<T>(path: string): Promise<FapiResponse<T>>;
|
package/dist/fapi.js
CHANGED
|
@@ -15,6 +15,22 @@ class FapiClient {
|
|
|
15
15
|
constructor(options) {
|
|
16
16
|
this.options = options;
|
|
17
17
|
}
|
|
18
|
+
/**
|
|
19
|
+
* The origin FAPI serves from — where an OAuth popup's callback page lives, so
|
|
20
|
+
* the popup flow can pin `postMessage`'s `event.origin` to it. Empty `baseUrl`
|
|
21
|
+
* means same-origin, so callers fall back to `window.location.origin`.
|
|
22
|
+
*/
|
|
23
|
+
get frontendApiOrigin() {
|
|
24
|
+
const base = this.options.baseUrl;
|
|
25
|
+
if (!base)
|
|
26
|
+
return '';
|
|
27
|
+
try {
|
|
28
|
+
return new URL(base).origin;
|
|
29
|
+
}
|
|
30
|
+
catch {
|
|
31
|
+
return '';
|
|
32
|
+
}
|
|
33
|
+
}
|
|
18
34
|
async request(path, init = {}) {
|
|
19
35
|
const doFetch = this.options.fetchImpl ?? fetch;
|
|
20
36
|
let response;
|
package/dist/fapi.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fapi.js","sourceRoot":"","sources":["../src/fapi.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"fapi.js","sourceRoot":"","sources":["../src/fapi.ts"],"names":[],"mappings":";;;AAmIA,4CAmBC;AA8BD,wCAkHC;AAWD,0CAMC;AAGD,0BA2BC;AASD,kCAiCC;AAGD,sCAuBC;AAMD,kCAiBC;AAGD,8CAEC;AArbD,uCAAiG;AA+BjG,MAAa,UAAU;IACQ;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D;;;;OAIG;IACH,IAAI,iBAAiB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,OAAoB,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAEhD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE;gBAC/D,GAAG,IAAI;gBACP,yEAAyE;gBACzE,4DAA4D;gBAC5D,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE;oBACP,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;oBAChD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,GAAG,IAAI,CAAC,OAAO;iBAChB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP;;;;eAIG;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QAED,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAE,IAAU,CAAC,CAAC,CAAC,IAAI;YACtC,8DAA8D;YAC9D,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,CAAI,IAAY,EAAE,IAAc;QAClC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAI,IAAY;QACjB,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;CACF;AA1ED,gCA0EC;AAmBD;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAkB,EAClB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAK9B,mCAAmC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;QAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI;QAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC;AAgBY,QAAA,WAAW,GAAc;IACpC,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;CACb,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,cAAc,CAC5B,OAA2B,EAC3B,MAA8B;IAE9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,sEAAsE;YACtE,yEAAyE;YACzE,uCAAuC;YACvC,IAAI,EAAE;gBACJ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBACnC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAI,OAA2B,CAAC,EAAE,IAAI,EAAE,CAAC;IAEjD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,oBAAoB;YACvB,OAAO;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE;oBACJ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;oBACnC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE;aACF,CAAC;QAEJ,KAAK,sBAAsB;YACzB;;;;;eAKG;YACH,OAAO,MAAM,CAAC,IAAI;gBAChB,CAAC,CAAC;oBACE,IAAI,EAAE,uBAAuB,EAAE,uBAAuB;oBACtD,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;iBACpD;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,uBAAuB,EAAE,uBAAuB;oBACtD,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;iBAChE,CAAC;QAER,KAAK,uBAAuB;YAC1B,yEAAyE;YACzE,2EAA2E;YAC3E,uBAAuB;YACvB,OAAO;gBACL,IAAI,EAAE,uBAAuB,EAAE,wBAAwB;gBACvD,IAAI,EAAE;oBACJ,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;oBACvB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxE;aACF,CAAC;QAEJ;;;;WAIG;QACH,KAAK,sBAAsB;YACzB,OAAO;gBACL,IAAI,EAAE,uBAAuB,EAAE,yBAAyB;gBACxD,IAAI,EAAE;oBACJ,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;oBAChC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;iBACpD;aACF,CAAC;QAEJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,IAAI,EAAE,uBAAuB,EAAE,uBAAuB;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE;aAClC,CAAC;QAEJ,KAAK,iBAAiB;YACpB;;;;;;eAMG;YACH,OAAO,MAAM,CAAC,aAAa;gBACzB,CAAC,CAAC;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE;wBACJ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;wBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;qBACpC;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC;QAEX,KAAK,sBAAsB;YACzB,OAAO;gBACL,IAAI,EAAE,8BAA8B,EAAE,mBAAmB;gBACzD,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;aAC1C,CAAC;QAEJ,KAAK,aAAa,CAAC;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ;;;;eAIG;YACH,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAAC,OAA8C;IAC5E,IAAI,CAAC,OAAO;QAAE,OAAO,mBAAW,CAAC;IACjC,OAAO;QACL,GAAG,mBAAW;QACd,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAiB;KACnE,CAAC;AACJ,CAAC;AAED,0EAA0E;AACnE,KAAK,UAAU,OAAO,CAC3B,MAAkB,EAClB,KAAgB,EAChB,MAA8B;IAE9B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAoC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAElG,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC;;;;WAIG;QACH,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,oEAAoE;QACpE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAC/B,MAAkB,EAClB,KAMC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAoC,qBAAqB,EAAE;QAC3F,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,2EAA2E;QAC3E,kEAAkE;QAClE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,wEAAwE;QACxE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,GAAG,mBAAW,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,mBAAW,CAAC,UAAU;QAClC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED,2DAA2D;AACpD,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,KAAgB,EAChB,QAAqC;IAErC,MAAM,EAAE,GAAI,KAAK,CAAC,OAAkC,EAAE,EAAE,CAAC;IACzD,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,uBAAuB,EAAE,uBAAuB,EAChD,EAAE,QAAQ,EAAE,CACb,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAE5E,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,EAAE;QACV,4EAA4E;QAC5E,sCAAsC;QACtC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;KAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAC/B,MAAkB,EAClB,KAAgB;IAEhB,MAAM,EAAE,GAAI,KAAK,CAAC,OAAkC,EAAE,EAAE,CAAC;IACzD,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,uBAAuB,EAAE,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAChF,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEnE,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;QAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAgB,iBAAiB,CAAC,KAAgB;IAChD,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,OAAQ,CAAC,CAAC;AAC5F,CAAC"}
|
package/dist/redirect.d.ts
CHANGED
|
@@ -13,7 +13,22 @@
|
|
|
13
13
|
* must not treat that as signed-in. Parsing this is pure and lives here so both
|
|
14
14
|
* the React provider and any custom integration read the exact same contract.
|
|
15
15
|
*/
|
|
16
|
+
import type { FapiClient } from './fapi';
|
|
16
17
|
export declare const REDIRECT_PARAMS: readonly ["__atlas_attempt", "__atlas_ticket", "__atlas_status"];
|
|
18
|
+
/**
|
|
19
|
+
* Start a redirect-based OAuth sign-in for a provider that has no in-page native
|
|
20
|
+
* flow (GitHub, Microsoft, Discord, …). Returns the provider authorization URL to
|
|
21
|
+
* navigate to; the provider redirects back to `redirectUrl` with the params
|
|
22
|
+
* {@link readRedirectResult} parses. A `native:true` provider (Google/Apple/FB
|
|
23
|
+
* Limited Login) should use the in-page id_token flow instead — no redirect, no
|
|
24
|
+
* stranded tab. Returns null if the start failed.
|
|
25
|
+
*/
|
|
26
|
+
export declare function startOauthRedirect(client: FapiClient, input: {
|
|
27
|
+
provider: string;
|
|
28
|
+
redirectUrl: string;
|
|
29
|
+
}): Promise<{
|
|
30
|
+
authorizationUrl: string;
|
|
31
|
+
} | null>;
|
|
17
32
|
export interface RedirectResult {
|
|
18
33
|
attemptId: string;
|
|
19
34
|
/** Present only when the sign-in completed — exchange it for cookies. */
|
|
@@ -21,6 +36,55 @@ export interface RedirectResult {
|
|
|
21
36
|
/** Present when a step remains (e.g. `needs_second_factor`); no session yet. */
|
|
22
37
|
status?: string;
|
|
23
38
|
}
|
|
39
|
+
/**
|
|
40
|
+
* §oauth popup mode — the same one-time-ticket contract as the redirect flow,
|
|
41
|
+
* delivered by `postMessage` from the callback popup instead of URL params.
|
|
42
|
+
*/
|
|
43
|
+
export interface PopupOutcome {
|
|
44
|
+
attemptId?: string;
|
|
45
|
+
/** Present only when the sign-in completed — exchange it for cookies. */
|
|
46
|
+
ticket?: string;
|
|
47
|
+
/** Present for a remaining step / connect (no session yet). */
|
|
48
|
+
status?: string;
|
|
49
|
+
/** Present when the provider/flow errored (e.g. the user cancelled). */
|
|
50
|
+
error?: string;
|
|
51
|
+
/** Where the opener should navigate for a non-complete outcome. */
|
|
52
|
+
continuationUrl?: string;
|
|
53
|
+
}
|
|
54
|
+
/**
|
|
55
|
+
* Pure: validate a `message` event and map it to an outcome, or null to ignore.
|
|
56
|
+
*
|
|
57
|
+
* Ignores any message whose origin isn't the exact FAPI origin we opened, and
|
|
58
|
+
* any payload that isn't one of our `atlas:oauth:*` shapes — so an unrelated
|
|
59
|
+
* `postMessage` on the page can never drive the flow.
|
|
60
|
+
*/
|
|
61
|
+
export declare function parseOAuthPopupMessage(eventOrigin: string, expectedOrigin: string, data: unknown): PopupOutcome | null;
|
|
62
|
+
export interface OAuthPopupHandlers {
|
|
63
|
+
onOpen?: () => void;
|
|
64
|
+
onComplete?: (r: {
|
|
65
|
+
ticket?: string;
|
|
66
|
+
attemptId?: string;
|
|
67
|
+
}) => void;
|
|
68
|
+
onError?: (code: string) => void;
|
|
69
|
+
/** Fired when the popup couldn't open; the caller should navigate to the URL. */
|
|
70
|
+
onBlockedFallback?: (authorizationUrl: string) => void;
|
|
71
|
+
}
|
|
72
|
+
export interface PopupStartResult extends PopupOutcome {
|
|
73
|
+
/** True when the popup was blocked — the caller falls back to a full redirect. */
|
|
74
|
+
blocked?: boolean;
|
|
75
|
+
authorizationUrl?: string;
|
|
76
|
+
}
|
|
77
|
+
/**
|
|
78
|
+
* Start a POPUP OAuth sign-in (GSI-style). Opens the provider authorize URL in a
|
|
79
|
+
* popup and resolves when the callback posts back the one-time ticket (complete),
|
|
80
|
+
* an error, or a continuation. Falls back to a full redirect when the popup is
|
|
81
|
+
* blocked — resolves `{ blocked:true, authorizationUrl }` and the caller
|
|
82
|
+
* navigates there, so it is always safe to enable. Browser-only.
|
|
83
|
+
*/
|
|
84
|
+
export declare function startOauthPopup(client: FapiClient, input: {
|
|
85
|
+
provider: string;
|
|
86
|
+
redirectUrl: string;
|
|
87
|
+
}, handlers?: OAuthPopupHandlers): Promise<PopupStartResult>;
|
|
24
88
|
/**
|
|
25
89
|
* Read Atlas's redirect params from a query string (`window.location.search`).
|
|
26
90
|
*
|
package/dist/redirect.js
CHANGED
|
@@ -16,9 +16,130 @@
|
|
|
16
16
|
*/
|
|
17
17
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
18
18
|
exports.REDIRECT_PARAMS = void 0;
|
|
19
|
+
exports.startOauthRedirect = startOauthRedirect;
|
|
20
|
+
exports.parseOAuthPopupMessage = parseOAuthPopupMessage;
|
|
21
|
+
exports.startOauthPopup = startOauthPopup;
|
|
19
22
|
exports.readRedirectResult = readRedirectResult;
|
|
20
23
|
exports.stripRedirectParams = stripRedirectParams;
|
|
21
24
|
exports.REDIRECT_PARAMS = ['__atlas_attempt', '__atlas_ticket', '__atlas_status'];
|
|
25
|
+
/**
|
|
26
|
+
* Start a redirect-based OAuth sign-in for a provider that has no in-page native
|
|
27
|
+
* flow (GitHub, Microsoft, Discord, …). Returns the provider authorization URL to
|
|
28
|
+
* navigate to; the provider redirects back to `redirectUrl` with the params
|
|
29
|
+
* {@link readRedirectResult} parses. A `native:true` provider (Google/Apple/FB
|
|
30
|
+
* Limited Login) should use the in-page id_token flow instead — no redirect, no
|
|
31
|
+
* stranded tab. Returns null if the start failed.
|
|
32
|
+
*/
|
|
33
|
+
async function startOauthRedirect(client, input) {
|
|
34
|
+
const res = await client.post('/v1/client/sign_ins/oauth', {
|
|
35
|
+
provider: input.provider,
|
|
36
|
+
redirect_url: input.redirectUrl,
|
|
37
|
+
});
|
|
38
|
+
const url = res.ok ? res.data?.authorization_url : undefined;
|
|
39
|
+
return url ? { authorizationUrl: url } : null;
|
|
40
|
+
}
|
|
41
|
+
/**
|
|
42
|
+
* Pure: validate a `message` event and map it to an outcome, or null to ignore.
|
|
43
|
+
*
|
|
44
|
+
* Ignores any message whose origin isn't the exact FAPI origin we opened, and
|
|
45
|
+
* any payload that isn't one of our `atlas:oauth:*` shapes — so an unrelated
|
|
46
|
+
* `postMessage` on the page can never drive the flow.
|
|
47
|
+
*/
|
|
48
|
+
function parseOAuthPopupMessage(eventOrigin, expectedOrigin, data) {
|
|
49
|
+
if (eventOrigin !== expectedOrigin)
|
|
50
|
+
return null;
|
|
51
|
+
if (!data || typeof data !== 'object')
|
|
52
|
+
return null;
|
|
53
|
+
const d = data;
|
|
54
|
+
const str = (v) => (typeof v === 'string' ? v : undefined);
|
|
55
|
+
switch (d.type) {
|
|
56
|
+
case 'atlas:oauth:complete':
|
|
57
|
+
return { ticket: str(d.ticket), attemptId: str(d.attemptId) };
|
|
58
|
+
case 'atlas:oauth:error':
|
|
59
|
+
return { error: str(d.code) ?? 'error', continuationUrl: str(d.continuationUrl) };
|
|
60
|
+
case 'atlas:oauth:continue':
|
|
61
|
+
return {
|
|
62
|
+
status: str(d.status),
|
|
63
|
+
attemptId: str(d.attemptId),
|
|
64
|
+
continuationUrl: str(d.continuationUrl),
|
|
65
|
+
};
|
|
66
|
+
default:
|
|
67
|
+
return null;
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
function centeredPopupFeatures(w, h) {
|
|
71
|
+
const dualLeft = (window.screenLeft ?? window.screenX ?? 0);
|
|
72
|
+
const dualTop = (window.screenTop ?? window.screenY ?? 0);
|
|
73
|
+
const vw = window.outerWidth || document.documentElement.clientWidth || w;
|
|
74
|
+
const vh = window.outerHeight || document.documentElement.clientHeight || h;
|
|
75
|
+
const left = Math.max(0, dualLeft + (vw - w) / 2);
|
|
76
|
+
const top = Math.max(0, dualTop + (vh - h) / 2);
|
|
77
|
+
return `popup,width=${w},height=${h},left=${Math.round(left)},top=${Math.round(top)}`;
|
|
78
|
+
}
|
|
79
|
+
/**
|
|
80
|
+
* Start a POPUP OAuth sign-in (GSI-style). Opens the provider authorize URL in a
|
|
81
|
+
* popup and resolves when the callback posts back the one-time ticket (complete),
|
|
82
|
+
* an error, or a continuation. Falls back to a full redirect when the popup is
|
|
83
|
+
* blocked — resolves `{ blocked:true, authorizationUrl }` and the caller
|
|
84
|
+
* navigates there, so it is always safe to enable. Browser-only.
|
|
85
|
+
*/
|
|
86
|
+
async function startOauthPopup(client, input, handlers = {}) {
|
|
87
|
+
const res = await client.post('/v1/client/sign_ins/oauth', {
|
|
88
|
+
provider: input.provider,
|
|
89
|
+
redirect_url: input.redirectUrl,
|
|
90
|
+
mode: 'popup',
|
|
91
|
+
});
|
|
92
|
+
const authorizationUrl = res.ok ? res.data?.authorization_url : undefined;
|
|
93
|
+
if (!authorizationUrl)
|
|
94
|
+
return { error: 'start_failed' };
|
|
95
|
+
const expectedOrigin = client.frontendApiOrigin || window.location.origin;
|
|
96
|
+
let popup = null;
|
|
97
|
+
try {
|
|
98
|
+
popup = window.open(authorizationUrl, 'atlas:oauth', centeredPopupFeatures(500, 650));
|
|
99
|
+
}
|
|
100
|
+
catch {
|
|
101
|
+
popup = null;
|
|
102
|
+
}
|
|
103
|
+
if (!popup) {
|
|
104
|
+
handlers.onBlockedFallback?.(authorizationUrl);
|
|
105
|
+
return { blocked: true, authorizationUrl };
|
|
106
|
+
}
|
|
107
|
+
handlers.onOpen?.();
|
|
108
|
+
return await new Promise((resolve) => {
|
|
109
|
+
let done = false;
|
|
110
|
+
const settle = (r) => {
|
|
111
|
+
if (done)
|
|
112
|
+
return;
|
|
113
|
+
done = true;
|
|
114
|
+
window.removeEventListener('message', onMessage);
|
|
115
|
+
clearInterval(timer);
|
|
116
|
+
try {
|
|
117
|
+
if (popup && !popup.closed)
|
|
118
|
+
popup.close();
|
|
119
|
+
}
|
|
120
|
+
catch {
|
|
121
|
+
/* cross-origin close can throw; ignore */
|
|
122
|
+
}
|
|
123
|
+
resolve(r);
|
|
124
|
+
};
|
|
125
|
+
const onMessage = (ev) => {
|
|
126
|
+
const outcome = parseOAuthPopupMessage(ev.origin, expectedOrigin, ev.data);
|
|
127
|
+
if (!outcome)
|
|
128
|
+
return;
|
|
129
|
+
if (outcome.ticket)
|
|
130
|
+
handlers.onComplete?.({ ticket: outcome.ticket, attemptId: outcome.attemptId });
|
|
131
|
+
if (outcome.error)
|
|
132
|
+
handlers.onError?.(outcome.error);
|
|
133
|
+
settle(outcome);
|
|
134
|
+
};
|
|
135
|
+
// The user closing the popup without finishing is a cancellation, not a hang.
|
|
136
|
+
const timer = setInterval(() => {
|
|
137
|
+
if (popup && popup.closed)
|
|
138
|
+
settle({ error: 'popup_closed' });
|
|
139
|
+
}, 500);
|
|
140
|
+
window.addEventListener('message', onMessage);
|
|
141
|
+
});
|
|
142
|
+
}
|
|
22
143
|
/**
|
|
23
144
|
* Read Atlas's redirect params from a query string (`window.location.search`).
|
|
24
145
|
*
|
package/dist/redirect.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../src/redirect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;
|
|
1
|
+
{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../src/redirect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAcH,gDAUC;AAiCD,wDAuBC;AAiCD,0CAsDC;AASD,gDAcC;AAQD,kDAIC;AAtMY,QAAA,eAAe,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAEhG;;;;;;;GAOG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAgD;IAEhD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAiC,2BAA2B,EAAE;QACzF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,WAAW;KAChC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AA0BD;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,WAAmB,EACnB,cAAsB,EACtB,IAAa;IAEb,IAAI,WAAW,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxF,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,sBAAsB;YACzB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,KAAK,mBAAmB;YACtB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;QACpF,KAAK,sBAAsB;YACzB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3B,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;aACxC,CAAC;QACJ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAgBD,SAAS,qBAAqB,CAAC,CAAS,EAAE,CAAS;IACjD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAW,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAW,CAAC;IACpE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,eAAe,CAAC,WAAW,IAAI,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,eAAe,CAAC,YAAY,IAAI,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,OAAO,eAAe,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AACxF,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CACnC,MAAkB,EAClB,KAAgD,EAChD,WAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAiC,2BAA2B,EAAE;QACzF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,CAAC,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAExD,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAE1E,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,aAAa,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,QAAQ,CAAC,iBAAiB,EAAE,CAAC,gBAAgB,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC7C,CAAC;IACD,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAEpB,OAAO,MAAM,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACrD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,CAAmB,EAAE,EAAE;YACrC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACjD,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,EAAgB,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,OAAO,CAAC,MAAM;gBAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpG,IAAI,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,8EAA8E;QAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/D,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEpC,OAAO;QACL,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,uBAAe;QAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}
|