@authorizerdev/authorizer-js 3.0.0-rc.1 → 3.0.1

package/lib/index.mjs

@@ -9,8 +9,7 @@ var DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
 var CLEANUP_IFRAME_TIMEOUT_IN_SECONDS = 2;
 
 // src/types.ts
-var OAuthProviders;
-(function(OAuthProviders2) {
+var OAuthProviders = /* @__PURE__ */ (function(OAuthProviders2) {
   OAuthProviders2["Apple"] = "apple";
   OAuthProviders2["Github"] = "github";
   OAuthProviders2["Google"] = "google";
@@ -21,20 +20,20 @@ var OAuthProviders;
   OAuthProviders2["Twitch"] = "twitch";
   OAuthProviders2["Roblox"] = "roblox";
   OAuthProviders2["Discord"] = "discord";
-})(OAuthProviders || (OAuthProviders = {}));
-var ResponseTypes;
-(function(ResponseTypes2) {
+  return OAuthProviders2;
+})({});
+var ResponseTypes = /* @__PURE__ */ (function(ResponseTypes2) {
   ResponseTypes2["Code"] = "code";
   ResponseTypes2["Token"] = "token";
-})(ResponseTypes || (ResponseTypes = {}));
+  return ResponseTypes2;
+})({});
 
 // src/utils.ts
 var hasWindow = /* @__PURE__ */ __name(() => typeof window !== "undefined", "hasWindow");
 var trimURL = /* @__PURE__ */ __name((url) => {
   let trimmedData = url.trim();
   const lastChar = trimmedData[trimmedData.length - 1];
-  if (lastChar === "/")
-    trimmedData = trimmedData.slice(0, -1);
+  if (lastChar === "/") trimmedData = trimmedData.slice(0, -1);
   return trimmedData;
 }, "trimURL");
 var getCrypto = /* @__PURE__ */ __name(() => {
@@ -103,16 +102,14 @@ var executeIframe = /* @__PURE__ */ __name((authorizeUrl, eventOrigin, timeoutIn
       }
     }, "removeIframe");
     const timeoutSetTimeoutId = setTimeout(() => {
+      reject(new Error("Authorization timeout"));
       removeIframe();
     }, timeoutInSeconds * 1e3);
     const iframeEventHandler = /* @__PURE__ */ __name(function(e) {
-      if (e.origin !== eventOrigin)
-        return;
-      if (!e.data || !e.data.response)
-        return;
+      if (e.origin !== eventOrigin) return;
+      if (!e.data || !e.data.response) return;
       const eventSource = e.source;
-      if (eventSource)
-        eventSource.close();
+      if (eventSource) eventSource.close();
       e.data.response.error ? reject(e.data.response) : resolve(e.data.response);
       clearTimeout(timeoutSetTimeoutId);
       window.removeEventListener("message", iframeEventHandler, false);
@@ -134,17 +131,12 @@ var _Authorizer = class _Authorizer {
   codeVerifier;
   // constructor
   constructor(config) {
-    if (!config)
-      throw new Error("Configuration is required");
+    if (!config) throw new Error("Configuration is required");
     this.config = config;
-    if (!config.authorizerURL && !config.authorizerURL.trim())
-      throw new Error("Invalid authorizerURL");
-    if (config.authorizerURL)
-      this.config.authorizerURL = trimURL(config.authorizerURL);
-    if (!config.redirectURL && !config.redirectURL.trim())
-      throw new Error("Invalid redirectURL");
-    else
-      this.config.redirectURL = trimURL(config.redirectURL);
+    if (!config.authorizerURL && !config.authorizerURL.trim()) throw new Error("Invalid authorizerURL");
+    if (config.authorizerURL) this.config.authorizerURL = trimURL(config.authorizerURL);
+    if (!config.redirectURL && !config.redirectURL.trim()) throw new Error("Invalid redirectURL");
+    else this.config.redirectURL = trimURL(config.redirectURL);
     this.config.extraHeaders = {
       ...config.extraHeaders || {},
       "x-authorizer-url": this.config.authorizerURL,
@@ -153,19 +145,17 @@ var _Authorizer = class _Authorizer {
     };
     this.config.clientID = ((config == null ? void 0 : config.clientID) || "").trim();
   }
-  authorize = async (data) => {
+  authorize = /* @__PURE__ */ __name(async (data) => {
     var _a;
-    if (!hasWindow())
-      return this.errorResponse([
-        new Error("this feature is only supported in browser")
-      ]);
+    if (!hasWindow()) return this.errorResponse([
+      new Error("this feature is only supported in browser")
+    ]);
     const scopes = [
       "openid",
       "profile",
       "email"
     ];
-    if (data.use_refresh_token)
-      scopes.push("offline_access");
+    if (data.use_refresh_token) scopes.push("offline_access");
     const requestData = {
       redirect_uri: this.config.redirectURL,
       response_mode: data.response_mode || "web_message",
@@ -197,12 +187,16 @@ var _Authorizer = class _Authorizer {
       return this.okResponse(iframeRes);
     } catch (err) {
       if (err.error) {
-        window.location.replace(`${this.config.authorizerURL}/app?state=${encode(JSON.stringify(this.config))}&redirect_uri=${this.config.redirectURL}`);
+        window.location.replace(`${this.config.authorizerURL}/app?state=${encode(JSON.stringify({
+          clientID: this.config.clientID,
+          redirectURL: this.config.redirectURL,
+          authorizerURL: this.config.authorizerURL
+        }))}&redirect_uri=${encodeURIComponent(this.config.redirectURL || "")}`);
       }
       return this.errorResponse(err);
     }
-  };
-  browserLogin = async () => {
+  }, "authorize");
+  browserLogin = /* @__PURE__ */ __name(async () => {
     try {
       const tokenResp = await this.getSession();
       return tokenResp.errors.length ? this.errorResponse(tokenResp.errors) : this.okResponse(tokenResp.data);
@@ -215,16 +209,18 @@ var _Authorizer = class _Authorizer {
           ]
         };
       }
-      window.location.replace(`${this.config.authorizerURL}/app?state=${encode(JSON.stringify(this.config))}&redirect_uri=${this.config.redirectURL}`);
+      window.location.replace(`${this.config.authorizerURL}/app?state=${encode(JSON.stringify({
+        clientID: this.config.clientID,
+        redirectURL: this.config.redirectURL,
+        authorizerURL: this.config.authorizerURL
+      }))}&redirect_uri=${encodeURIComponent(this.config.redirectURL || "")}`);
       return this.errorResponse(err);
     }
-  };
-  forgotPassword = async (data) => {
+  }, "browserLogin");
+  forgotPassword = /* @__PURE__ */ __name(async (data) => {
     var _a;
-    if (!data.state)
-      data.state = encode(createRandomString());
-    if (!data.redirect_uri)
-      data.redirect_uri = this.config.redirectURL;
+    if (!data.state) data.state = encode(createRandomString());
+    if (!data.redirect_uri) data.redirect_uri = this.config.redirectURL;
     try {
       const forgotPasswordResp = await this.graphqlQuery({
         query: "mutation forgotPassword($data: ForgotPasswordRequest!) {	forgot_password(params: $data) { message should_show_mobile_otp_screen } }",
@@ -238,8 +234,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  getMetaData = async () => {
+  }, "forgotPassword");
+  getMetaData = /* @__PURE__ */ __name(async () => {
     var _a;
     try {
       const res = await this.graphqlQuery({
@@ -251,8 +247,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  getProfile = async (headers) => {
+  }, "getMetaData");
+  getProfile = /* @__PURE__ */ __name(async (headers) => {
     var _a;
     try {
       const profileRes = await this.graphqlQuery({
@@ -265,9 +261,9 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
+  }, "getProfile");
   // this is used to verify / get session using cookie by default. If using node.js pass authorization header
-  getSession = async (headers, params) => {
+  getSession = /* @__PURE__ */ __name(async (headers, params) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -281,18 +277,15 @@ var _Authorizer = class _Authorizer {
     } catch (err) {
       return this.errorResponse(err);
     }
-  };
-  getToken = async (data) => {
-    if (!data.grant_type)
-      data.grant_type = "authorization_code";
-    if (data.grant_type === "refresh_token" && !data.refresh_token)
-      return this.errorResponse([
-        new Error("Invalid refresh_token")
-      ]);
-    if (data.grant_type === "authorization_code" && !this.codeVerifier)
-      return this.errorResponse([
-        new Error("Invalid code verifier")
-      ]);
+  }, "getSession");
+  getToken = /* @__PURE__ */ __name(async (data) => {
+    if (!data.grant_type) data.grant_type = "authorization_code";
+    if (data.grant_type === "refresh_token" && !data.refresh_token) return this.errorResponse([
+      new Error("Invalid refresh_token")
+    ]);
+    if (data.grant_type === "authorization_code" && !this.codeVerifier) return this.errorResponse([
+      new Error("Invalid code verifier")
+    ]);
     const requestData = {
       client_id: this.config.clientID,
       code: data.code || "",
@@ -311,16 +304,15 @@ var _Authorizer = class _Authorizer {
         credentials: "include"
       });
       const json = await res.json();
-      if (res.status >= 400)
-        return this.errorResponse([
-          new Error(json.error_description || json.error)
-        ]);
+      if (res.status >= 400) return this.errorResponse([
+        new Error(json.error_description || json.error)
+      ]);
       return this.okResponse(json);
     } catch (err) {
       return this.errorResponse(err);
     }
-  };
-  login = async (data) => {
+  }, "getToken");
+  login = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -337,8 +329,8 @@ var _Authorizer = class _Authorizer {
         new Error(err)
       ]);
     }
-  };
-  logout = async (headers) => {
+  }, "login");
+  logout = /* @__PURE__ */ __name(async (headers) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -351,14 +343,12 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  magicLinkLogin = async (data) => {
+  }, "logout");
+  magicLinkLogin = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
-      if (!data.state)
-        data.state = encode(createRandomString());
-      if (!data.redirect_uri)
-        data.redirect_uri = this.config.redirectURL;
+      if (!data.state) data.state = encode(createRandomString());
+      if (!data.redirect_uri) data.redirect_uri = this.config.redirectURL;
       const res = await this.graphqlQuery({
         query: `
 					mutation magicLinkLogin($data: MagicLinkLoginRequest!) { magic_link_login(params: $data) { message }}
@@ -373,8 +363,8 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  oauthLogin = async (oauthProvider, roles, redirect_uri, state) => {
+  }, "magicLinkLogin");
+  oauthLogin = /* @__PURE__ */ __name(async (oauthProvider, roles, redirect_uri, state) => {
     let urlState = state;
     if (!urlState) {
       urlState = encode(createRandomString());
@@ -382,13 +372,11 @@ var _Authorizer = class _Authorizer {
     if (!Object.values(OAuthProviders).includes(oauthProvider)) {
       throw new Error(`only following oauth providers are supported: ${Object.values(oauthProvider).toString()}`);
     }
-    if (!hasWindow())
-      throw new Error("oauthLogin is only supported for browsers");
-    if (roles && roles.length)
-      urlState += `&roles=${roles.join(",")}`;
-    window.location.replace(`${this.config.authorizerURL}/oauth_login/${oauthProvider}?redirect_uri=${redirect_uri || this.config.redirectURL}&state=${urlState}`);
-  };
-  resendOtp = async (data) => {
+    if (!hasWindow()) throw new Error("oauthLogin is only supported for browsers");
+    if (roles && roles.length) urlState += `&roles=${roles.join(",")}`;
+    window.location.replace(`${this.config.authorizerURL}/oauth_login/${oauthProvider}?redirect_uri=${encodeURIComponent(redirect_uri || this.config.redirectURL || "")}&state=${encodeURIComponent(urlState)}`);
+  }, "oauthLogin");
+  resendOtp = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -405,8 +393,8 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  resetPassword = async (data) => {
+  }, "resendOtp");
+  resetPassword = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const resetPasswordRes = await this.graphqlQuery({
@@ -421,12 +409,11 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  revokeToken = async (data) => {
-    if (!data.refresh_token && !data.refresh_token.trim())
-      return this.errorResponse([
-        new Error("Invalid refresh_token")
-      ]);
+  }, "resetPassword");
+  revokeToken = /* @__PURE__ */ __name(async (data) => {
+    if (!data.refresh_token && !data.refresh_token.trim()) return this.errorResponse([
+      new Error("Invalid refresh_token")
+    ]);
     const fetcher = getFetcher();
     const res = await fetcher(`${this.config.authorizerURL}/oauth/revoke`, {
       method: "POST",
@@ -440,8 +427,8 @@ var _Authorizer = class _Authorizer {
     });
     const responseData = await res.json();
     return this.okResponse(responseData);
-  };
-  signup = async (data) => {
+  }, "revokeToken");
+  signup = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -458,8 +445,8 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  updateProfile = async (data, headers) => {
+  }, "signup");
+  updateProfile = /* @__PURE__ */ __name(async (data, headers) => {
     var _a, _b;
     try {
       const updateProfileRes = await this.graphqlQuery({
@@ -475,8 +462,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  deactivateAccount = async (headers) => {
+  }, "updateProfile");
+  deactivateAccount = /* @__PURE__ */ __name(async (headers) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -489,8 +476,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  validateJWTToken = async (params) => {
+  }, "deactivateAccount");
+  validateJWTToken = /* @__PURE__ */ __name(async (params) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -505,8 +492,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  validateSession = async (params) => {
+  }, "validateJWTToken");
+  validateSession = /* @__PURE__ */ __name(async (params) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -521,8 +508,8 @@ var _Authorizer = class _Authorizer {
         error
       ]);
     }
-  };
-  verifyEmail = async (data) => {
+  }, "validateSession");
+  verifyEmail = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -539,8 +526,8 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  resendVerifyEmail = async (data) => {
+  }, "verifyEmail");
+  resendVerifyEmail = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -557,8 +544,8 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
-  verifyOtp = async (data) => {
+  }, "resendVerifyEmail");
+  verifyOtp = /* @__PURE__ */ __name(async (data) => {
     var _a, _b;
     try {
       const res = await this.graphqlQuery({
@@ -575,10 +562,10 @@ var _Authorizer = class _Authorizer {
         err
       ]);
     }
-  };
+  }, "verifyOtp");
   // helper to execute graphql queries
   // takes in any query or mutation string as value
-  graphqlQuery = async (data) => {
+  graphqlQuery = /* @__PURE__ */ __name(async (data) => {
     var _a;
     const fetcher = getFetcher();
     const res = await fetcher(`${this.config.authorizerURL}/graphql`, {
@@ -604,19 +591,19 @@ var _Authorizer = class _Authorizer {
       data: json.data,
       errors: []
     };
-  };
-  errorResponse = (errors) => {
+  }, "graphqlQuery");
+  errorResponse = /* @__PURE__ */ __name((errors) => {
     return {
       data: void 0,
       errors
     };
-  };
-  okResponse = (data) => {
+  }, "errorResponse");
+  okResponse = /* @__PURE__ */ __name((data) => {
     return {
       data,
       errors: []
     };
-  };
+  }, "okResponse");
 };
 __name(_Authorizer, "Authorizer");
 var Authorizer = _Authorizer;