@auth0/ai 1.0.2 → 2.0.1

package/dist/esm/authorizers/device-authorizer.js

@@ -1,90 +0,0 @@
-import Enquirer from "enquirer";
-import * as jose from "jose";
-import open from "open";
-import { discovery, initiateDeviceAuthorization, pollDeviceAuthorizationGrant, } from "openid-client";
-import { AccessDeniedError, AuthorizationRequestExpiredError } from "../errors";
-export class DeviceAuthorizer {
-    constructor(params) {
-        this.domain = (params === null || params === void 0 ? void 0 : params.domain) || process.env.AUTH0_DOMAIN;
-        this.clientId = (params === null || params === void 0 ? void 0 : params.clientId) || process.env.AUTH0_CLIENT_ID;
-    }
-    async _authorize(params) {
-        const config = await discovery(new URL(`https://${this.domain}`), this.clientId);
-        const handle = await initiateDeviceAuthorization(config, {
-            ...params,
-        });
-        const { verification_uri_complete, user_code, expires_in } = handle;
-        const enquirer = new Enquirer();
-        await enquirer.prompt({
-            type: "input",
-            name: "confirmation",
-            message: `Press Enter to open the browser to log in or press Ctrl+C to abort. You should see the following code: ${user_code}. It expires in ${expires_in % 60 === 0
-                ? `${expires_in / 60} minutes`
-                : `${expires_in} seconds`}.`,
-        });
-        await open(verification_uri_complete);
-        let tokens = null;
-        try {
-            tokens = await pollDeviceAuthorizationGrant(config, handle);
-        }
-        catch (err) {
-            switch (err.error) {
-                case "access_denied":
-                    throw new AccessDeniedError(err.error_description);
-                case "expired_token":
-                    throw new AuthorizationRequestExpiredError("Authorization request has expired");
-                default:
-                    throw new Error(`Error: ${err.error}; Description: ${err.error_description}`);
-            }
-        }
-        if (!tokens) {
-            throw new Error("Failed to obtain tokens");
-        }
-        const credentials = {
-            accessToken: {
-                type: tokens.token_type || "bearer",
-                value: tokens.access_token,
-            },
-        };
-        if (tokens.id_token) {
-            credentials.idToken = {
-                type: tokens.token_type || "bearer",
-                value: tokens.id_token,
-            };
-        }
-        return credentials;
-    }
-    static async authorize(options, params) {
-        const authorizer = new DeviceAuthorizer(params);
-        const credentials = await authorizer._authorize(options);
-        let claims = {};
-        if (credentials.idToken) {
-            claims = jose.decodeJwt(credentials.idToken.value);
-        }
-        return { accessToken: credentials.accessToken.value, claims };
-    }
-    static create(params) {
-        const authorizer = new DeviceAuthorizer(params);
-        return (options) => {
-            return function deviceFlow(handler, onError) {
-                return async (input, config) => {
-                    try {
-                        const credentials = await authorizer._authorize(options);
-                        let claims = {};
-                        if (credentials.idToken) {
-                            claims = jose.decodeJwt(credentials.idToken.value);
-                        }
-                        return handler({ accessToken: credentials.accessToken.value, claims }, input, config);
-                    }
-                    catch (e) {
-                        if (typeof onError === "function") {
-                            return onError(e);
-                        }
-                        return "Access denied.";
-                    }
-                };
-            };
-        };
-    }
-}
-//# sourceMappingURL=device-authorizer.js.map

package/dist/esm/authorizers/device-authorizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"device-authorizer.js","sourceRoot":"","sources":["../../../src/authorizers/device-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,4BAA4B,GAG7B,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,MAAM,WAAW,CAAC;AAQhF,MAAM,OAAO,gBAAgB;IAI3B,YAAoB,MAAyB;QAC3C,IAAI,CAAC,MAAM,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,KAAI,OAAO,CAAC,GAAG,CAAC,eAAgB,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAA+B;QAE/B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,EACjC,IAAI,CAAC,QAAQ,CACd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE;YACvD,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAEpE,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,0GAA0G,SAAS,mBAC1H,UAAU,GAAG,EAAE,KAAK,CAAC;gBACnB,CAAC,CAAC,GAAG,UAAU,GAAG,EAAE,UAAU;gBAC9B,CAAC,CAAC,GAAG,UAAU,UACnB,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,yBAA0B,CAAC,CAAC;QAEvC,IAAI,MAAM,GACR,IAAI,CAAC;QAEP,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,eAAe;oBAClB,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBACrD,KAAK,eAAe;oBAClB,MAAM,IAAI,gCAAgC,CACxC,mCAAmC,CACpC,CAAC;gBACJ;oBACE,MAAM,IAAI,KAAK,CACb,UAAU,GAAG,CAAC,KAAK,kBAAkB,GAAG,CAAC,iBAAiB,EAAE,CAC7D,CAAC;YACN,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAgB;YAC/B,WAAW,EAAE;gBACX,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACnC,KAAK,EAAE,MAAM,CAAC,YAAY;aAC3B;SACF,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,WAAW,CAAC,OAAO,GAAG;gBACpB,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACnC,KAAK,EAAE,MAAM,CAAC,QAAQ;aACvB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,CACpB,OAAgC,EAChC,MAAyB;QAEzB,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAgB,CAAC;IAC9E,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAyB;QACrC,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,CAAC,OAAgC,EAAE,EAAE;YAC1C,OAAO,SAAS,UAAU,CACxB,OAAqC,EACrC,OAAsC;gBAEtC,OAAO,KAAK,EAAE,KAAQ,EAAE,MAAU,EAAc,EAAE;oBAChD,IAAI,CAAC;wBACH,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;wBACzD,IAAI,MAAM,GAAG,EAAE,CAAC;wBAEhB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;4BACxB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC;wBACtD,CAAC;wBAED,OAAO,OAAO,CACZ,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EACtD,KAAK,EACL,MAAM,CACP,CAAC;oBACJ,CAAC;oBAAC,OAAO,CAAM,EAAE,CAAC;wBAChB,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;4BAClC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;wBACpB,CAAC;wBAED,OAAO,gBAAqB,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;CACF","sourcesContent":["import Enquirer from \"enquirer\";\nimport * as jose from \"jose\";\nimport open from \"open\";\nimport {\n  discovery,\n  initiateDeviceAuthorization,\n  pollDeviceAuthorizationGrant,\n  TokenEndpointResponse,\n  TokenEndpointResponseHelpers,\n} from \"openid-client\";\n\nimport { Credentials } from \"../credentials\";\nimport { AccessDeniedError, AuthorizationRequestExpiredError } from \"../errors\";\nimport { AuthorizerParams, AuthParams, ToolWithAuthHandler } from \"./\";\n\nexport type DeviceAuthorizerOptions = {\n  scope: string;\n  audience?: string;\n};\n\nexport class DeviceAuthorizer {\n  domain: string;\n  clientId: string;\n\n  private constructor(params?: AuthorizerParams) {\n    this.domain = params?.domain || process.env.AUTH0_DOMAIN!;\n    this.clientId = params?.clientId || process.env.AUTH0_CLIENT_ID!;\n  }\n\n  private async _authorize(\n    params: DeviceAuthorizerOptions\n  ): Promise<Credentials> {\n    const config = await discovery(\n      new URL(`https://${this.domain}`),\n      this.clientId\n    );\n\n    const handle = await initiateDeviceAuthorization(config, {\n      ...params,\n    });\n\n    const { verification_uri_complete, user_code, expires_in } = handle;\n\n    const enquirer = new Enquirer();\n    await enquirer.prompt({\n      type: \"input\",\n      name: \"confirmation\",\n      message: `Press Enter to open the browser to log in or press Ctrl+C to abort. You should see the following code: ${user_code}. It expires in ${\n        expires_in % 60 === 0\n          ? `${expires_in / 60} minutes`\n          : `${expires_in} seconds`\n      }.`,\n    });\n\n    await open(verification_uri_complete!);\n\n    let tokens: (TokenEndpointResponse & TokenEndpointResponseHelpers) | null =\n      null;\n\n    try {\n      tokens = await pollDeviceAuthorizationGrant(config, handle);\n    } catch (err: any) {\n      switch (err.error) {\n        case \"access_denied\":\n          throw new AccessDeniedError(err.error_description);\n        case \"expired_token\":\n          throw new AuthorizationRequestExpiredError(\n            \"Authorization request has expired\"\n          );\n        default:\n          throw new Error(\n            `Error: ${err.error}; Description: ${err.error_description}`\n          );\n      }\n    }\n\n    if (!tokens) {\n      throw new Error(\"Failed to obtain tokens\");\n    }\n\n    const credentials: Credentials = {\n      accessToken: {\n        type: tokens.token_type || \"bearer\",\n        value: tokens.access_token,\n      },\n    };\n\n    if (tokens.id_token) {\n      credentials.idToken = {\n        type: tokens.token_type || \"bearer\",\n        value: tokens.id_token,\n      };\n    }\n\n    return credentials;\n  }\n\n  static async authorize(\n    options: DeviceAuthorizerOptions,\n    params?: AuthorizerParams\n  ) {\n    const authorizer = new DeviceAuthorizer(params);\n    const credentials = await authorizer._authorize(options);\n\n    let claims = {};\n\n    if (credentials.idToken) {\n      claims = jose.decodeJwt(credentials.idToken!.value);\n    }\n\n    return { accessToken: credentials.accessToken.value, claims } as AuthParams;\n  }\n\n  static create(params?: AuthorizerParams): DeviceFlowInstance {\n    const authorizer = new DeviceAuthorizer(params);\n\n    return (options: DeviceAuthorizerOptions) => {\n      return function deviceFlow<I, O, C>(\n        handler: ToolWithAuthHandler<I, O, C>,\n        onError?: (error: Error) => Promise<O>\n      ) {\n        return async (input: I, config?: C): Promise<O> => {\n          try {\n            const credentials = await authorizer._authorize(options);\n            let claims = {};\n\n            if (credentials.idToken) {\n              claims = jose.decodeJwt(credentials.idToken!.value);\n            }\n\n            return handler(\n              { accessToken: credentials.accessToken.value, claims },\n              input,\n              config\n            );\n          } catch (e: any) {\n            if (typeof onError === \"function\") {\n              return onError(e);\n            }\n\n            return \"Access denied.\" as O;\n          }\n        };\n      };\n    };\n  }\n}\n\nexport type DeviceFlowInstance = (\n  options: DeviceAuthorizerOptions\n) => <I, O, C>(\n  handler: ToolWithAuthHandler<I, O, C>,\n  onError?: (error: Error) => Promise<O>\n) => (input: I, config?: C) => Promise<O>;\n"]}