@authticon/client 0.0.0-beta9 → 0.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +418 -0
- package/dist/authticon.d.ts +147 -0
- package/dist/authticon.d.ts.map +1 -0
- package/dist/authticon.js +24 -0
- package/dist/authticon.js.map +1 -0
- package/dist/browser.d.ts +153 -0
- package/dist/browser.d.ts.map +1 -0
- package/dist/browser.js +14 -0
- package/dist/browser.js.map +1 -0
- package/dist/clients/admin.d.ts +107 -0
- package/dist/clients/admin.d.ts.map +1 -0
- package/dist/clients/admin.js +133 -0
- package/dist/clients/admin.js.map +1 -0
- package/dist/clients/auth.d.ts +43 -0
- package/dist/clients/auth.d.ts.map +1 -0
- package/dist/clients/auth.js +83 -0
- package/dist/clients/auth.js.map +1 -0
- package/dist/clients/base.d.ts +8 -0
- package/dist/clients/base.d.ts.map +1 -0
- package/dist/clients/base.js +18 -0
- package/dist/clients/base.js.map +1 -0
- package/dist/clients/generated/client/client.gen.d.ts.map +1 -0
- package/dist/clients/generated/client/client.gen.js +236 -0
- package/dist/clients/generated/client/client.gen.js.map +1 -0
- package/dist/{generated → clients/generated}/client/index.d.ts +2 -2
- package/dist/clients/generated/client/index.d.ts.map +1 -0
- package/dist/{generated → clients/generated}/client/index.js +1 -1
- package/dist/clients/generated/client/index.js.map +1 -0
- package/dist/clients/generated/client/types.gen.d.ts +118 -0
- package/dist/clients/generated/client/types.gen.d.ts.map +1 -0
- package/dist/clients/generated/client/types.gen.js.map +1 -0
- package/dist/clients/generated/client/utils.gen.d.ts +34 -0
- package/dist/clients/generated/client/utils.gen.d.ts.map +1 -0
- package/dist/{generated → clients/generated}/client/utils.gen.js +117 -57
- package/dist/clients/generated/client/utils.gen.js.map +1 -0
- package/dist/clients/generated/client.gen.d.ts.map +1 -0
- package/dist/{generated → clients/generated}/client.gen.js +1 -1
- package/dist/clients/generated/client.gen.js.map +1 -0
- package/dist/clients/generated/core/auth.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/auth.gen.js.map +1 -0
- package/dist/clients/generated/core/bodySerializer.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/bodySerializer.gen.js.map +1 -0
- package/dist/clients/generated/core/params.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/params.gen.js.map +1 -0
- package/dist/clients/generated/core/pathSerializer.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/pathSerializer.gen.js.map +1 -0
- package/dist/clients/generated/core/queryKeySerializer.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/queryKeySerializer.gen.js.map +1 -0
- package/dist/clients/generated/core/serverSentEvents.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/serverSentEvents.gen.js.map +1 -0
- package/dist/clients/generated/core/types.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/types.gen.js.map +1 -0
- package/dist/clients/generated/core/utils.gen.d.ts.map +1 -0
- package/dist/clients/generated/core/utils.gen.js.map +1 -0
- package/dist/clients/generated/index.d.ts +3 -0
- package/dist/clients/generated/index.d.ts.map +1 -0
- package/dist/clients/generated/index.js +3 -0
- package/dist/clients/generated/index.js.map +1 -0
- package/dist/clients/generated/sdk.gen.d.ts +202 -0
- package/dist/clients/generated/sdk.gen.d.ts.map +1 -0
- package/dist/clients/generated/sdk.gen.js +510 -0
- package/dist/clients/generated/sdk.gen.js.map +1 -0
- package/dist/clients/generated/types.gen.d.ts +1541 -0
- package/dist/clients/generated/types.gen.d.ts.map +1 -0
- package/dist/clients/generated/types.gen.js.map +1 -0
- package/dist/clients/user.d.ts +86 -0
- package/dist/clients/user.d.ts.map +1 -0
- package/dist/clients/user.js +96 -0
- package/dist/clients/user.js.map +1 -0
- package/dist/cookies/browser.d.ts +3 -0
- package/dist/cookies/browser.d.ts.map +1 -0
- package/dist/cookies/browser.js +31 -0
- package/dist/cookies/browser.js.map +1 -0
- package/dist/cookies/node.d.ts +8 -0
- package/dist/cookies/node.d.ts.map +1 -0
- package/dist/cookies/node.js +49 -0
- package/dist/cookies/node.js.map +1 -0
- package/dist/errors.d.ts +22 -0
- package/dist/errors.d.ts.map +1 -0
- package/dist/errors.js +40 -0
- package/dist/errors.js.map +1 -0
- package/dist/node.d.ts +172 -0
- package/dist/node.d.ts.map +1 -0
- package/dist/node.js +46 -0
- package/dist/node.js.map +1 -0
- package/dist/password.d.ts +8 -0
- package/dist/password.d.ts.map +1 -0
- package/dist/password.js +23 -0
- package/dist/password.js.map +1 -0
- package/dist/session.d.ts +115 -0
- package/dist/session.d.ts.map +1 -0
- package/dist/session.js +240 -0
- package/dist/session.js.map +1 -0
- package/dist/tokens.d.ts +27 -0
- package/dist/tokens.d.ts.map +1 -0
- package/dist/tokens.js +212 -0
- package/dist/tokens.js.map +1 -0
- package/dist/types.d.ts +48 -6
- package/dist/types.d.ts.map +1 -1
- package/package.json +23 -8
- package/dist/Acccount.d.ts +0 -9
- package/dist/Acccount.d.ts.map +0 -1
- package/dist/Acccount.js +0 -22
- package/dist/Acccount.js.map +0 -1
- package/dist/Auth.d.ts +0 -25
- package/dist/Auth.d.ts.map +0 -1
- package/dist/Auth.js +0 -43
- package/dist/Auth.js.map +0 -1
- package/dist/Authticon.d.ts +0 -87
- package/dist/Authticon.d.ts.map +0 -1
- package/dist/Authticon.js +0 -74
- package/dist/Authticon.js.map +0 -1
- package/dist/BrowserCookieAdapter.d.ts +0 -13
- package/dist/BrowserCookieAdapter.d.ts.map +0 -1
- package/dist/BrowserCookieAdapter.js +0 -18
- package/dist/BrowserCookieAdapter.js.map +0 -1
- package/dist/BrowserCookieAdapter.test.d.ts +0 -2
- package/dist/BrowserCookieAdapter.test.d.ts.map +0 -1
- package/dist/BrowserCookieAdapter.test.js +0 -145
- package/dist/BrowserCookieAdapter.test.js.map +0 -1
- package/dist/Challange.d.ts +0 -8
- package/dist/Challange.d.ts.map +0 -1
- package/dist/Challange.js +0 -24
- package/dist/Challange.js.map +0 -1
- package/dist/CookieStorageAdapter.d.ts +0 -14
- package/dist/CookieStorageAdapter.d.ts.map +0 -1
- package/dist/CookieStorageAdapter.js +0 -42
- package/dist/CookieStorageAdapter.js.map +0 -1
- package/dist/CookieStorageAdapter.test.d.ts +0 -2
- package/dist/CookieStorageAdapter.test.d.ts.map +0 -1
- package/dist/CookieStorageAdapter.test.js +0 -130
- package/dist/CookieStorageAdapter.test.js.map +0 -1
- package/dist/RemixCookieAdapter.d.ts +0 -12
- package/dist/RemixCookieAdapter.d.ts.map +0 -1
- package/dist/RemixCookieAdapter.js +0 -25
- package/dist/RemixCookieAdapter.js.map +0 -1
- package/dist/RemixCookieAdapter.test.d.ts +0 -2
- package/dist/RemixCookieAdapter.test.d.ts.map +0 -1
- package/dist/RemixCookieAdapter.test.js +0 -136
- package/dist/RemixCookieAdapter.test.js.map +0 -1
- package/dist/TokenManager.d.ts +0 -24
- package/dist/TokenManager.d.ts.map +0 -1
- package/dist/TokenManager.js +0 -53
- package/dist/TokenManager.js.map +0 -1
- package/dist/TokenManager.test.d.ts +0 -2
- package/dist/TokenManager.test.d.ts.map +0 -1
- package/dist/TokenManager.test.js +0 -118
- package/dist/TokenManager.test.js.map +0 -1
- package/dist/TokenStorage.d.ts +0 -18
- package/dist/TokenStorage.d.ts.map +0 -1
- package/dist/TokenStorage.js +0 -69
- package/dist/TokenStorage.js.map +0 -1
- package/dist/TokenStorage.test.d.ts +0 -2
- package/dist/TokenStorage.test.d.ts.map +0 -1
- package/dist/TokenStorage.test.js +0 -179
- package/dist/TokenStorage.test.js.map +0 -1
- package/dist/TokenVerifier.d.ts +0 -13
- package/dist/TokenVerifier.d.ts.map +0 -1
- package/dist/TokenVerifier.js +0 -61
- package/dist/TokenVerifier.js.map +0 -1
- package/dist/TokenVerifier.test.d.ts +0 -2
- package/dist/TokenVerifier.test.d.ts.map +0 -1
- package/dist/TokenVerifier.test.js +0 -117
- package/dist/TokenVerifier.test.js.map +0 -1
- package/dist/TwoFa.d.ts +0 -26
- package/dist/TwoFa.d.ts.map +0 -1
- package/dist/TwoFa.js +0 -55
- package/dist/TwoFa.js.map +0 -1
- package/dist/User.d.ts +0 -25
- package/dist/User.d.ts.map +0 -1
- package/dist/User.js +0 -27
- package/dist/User.js.map +0 -1
- package/dist/Users.d.ts +0 -57
- package/dist/Users.d.ts.map +0 -1
- package/dist/Users.js +0 -55
- package/dist/Users.js.map +0 -1
- package/dist/cookie-utils.d.ts +0 -5
- package/dist/cookie-utils.d.ts.map +0 -1
- package/dist/cookie-utils.js +0 -33
- package/dist/cookie-utils.js.map +0 -1
- package/dist/generated/client/client.gen.d.ts.map +0 -1
- package/dist/generated/client/client.gen.js +0 -135
- package/dist/generated/client/client.gen.js.map +0 -1
- package/dist/generated/client/index.d.ts.map +0 -1
- package/dist/generated/client/index.js.map +0 -1
- package/dist/generated/client/types.gen.d.ts +0 -89
- package/dist/generated/client/types.gen.d.ts.map +0 -1
- package/dist/generated/client/types.gen.js.map +0 -1
- package/dist/generated/client/utils.gen.d.ts +0 -15
- package/dist/generated/client/utils.gen.d.ts.map +0 -1
- package/dist/generated/client/utils.gen.js.map +0 -1
- package/dist/generated/client.gen.d.ts.map +0 -1
- package/dist/generated/client.gen.js.map +0 -1
- package/dist/generated/core/auth.gen.d.ts.map +0 -1
- package/dist/generated/core/auth.gen.js.map +0 -1
- package/dist/generated/core/bodySerializer.gen.d.ts.map +0 -1
- package/dist/generated/core/bodySerializer.gen.js.map +0 -1
- package/dist/generated/core/params.gen.d.ts.map +0 -1
- package/dist/generated/core/params.gen.js.map +0 -1
- package/dist/generated/core/pathSerializer.gen.d.ts.map +0 -1
- package/dist/generated/core/pathSerializer.gen.js.map +0 -1
- package/dist/generated/core/queryKeySerializer.gen.d.ts.map +0 -1
- package/dist/generated/core/queryKeySerializer.gen.js.map +0 -1
- package/dist/generated/core/serverSentEvents.gen.d.ts.map +0 -1
- package/dist/generated/core/serverSentEvents.gen.js.map +0 -1
- package/dist/generated/core/types.gen.d.ts.map +0 -1
- package/dist/generated/core/types.gen.js.map +0 -1
- package/dist/generated/core/utils.gen.d.ts.map +0 -1
- package/dist/generated/core/utils.gen.js.map +0 -1
- package/dist/generated/index.d.ts +0 -3
- package/dist/generated/index.d.ts.map +0 -1
- package/dist/generated/index.js +0 -3
- package/dist/generated/index.js.map +0 -1
- package/dist/generated/sdk.gen.d.ts +0 -58
- package/dist/generated/sdk.gen.d.ts.map +0 -1
- package/dist/generated/sdk.gen.js +0 -337
- package/dist/generated/sdk.gen.js.map +0 -1
- package/dist/generated/types.gen.d.ts +0 -1344
- package/dist/generated/types.gen.d.ts.map +0 -1
- package/dist/generated/types.gen.js.map +0 -1
- package/dist/index.d.ts +0 -10
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js +0 -8
- package/dist/index.js.map +0 -1
- package/dist/user.d.ts +0 -50
- package/dist/user.d.ts.map +0 -1
- package/dist/user.js +0 -35
- package/dist/user.js.map +0 -1
- /package/dist/{generated → clients/generated}/client/client.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/client/types.gen.js +0 -0
- /package/dist/{generated → clients/generated}/client.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/auth.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/auth.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/bodySerializer.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/bodySerializer.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/params.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/params.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/pathSerializer.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/pathSerializer.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/queryKeySerializer.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/queryKeySerializer.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/serverSentEvents.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/serverSentEvents.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/types.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/types.gen.js +0 -0
- /package/dist/{generated → clients/generated}/core/utils.gen.d.ts +0 -0
- /package/dist/{generated → clients/generated}/core/utils.gen.js +0 -0
- /package/dist/{generated → clients/generated}/types.gen.js +0 -0
|
@@ -1,179 +0,0 @@
|
|
|
1
|
-
import { describe, it, expect, vi, beforeEach } from "vitest";
|
|
2
|
-
import { TokenStorage } from "./TokenStorage.js";
|
|
3
|
-
const createMockAdapter = () => ({
|
|
4
|
-
get: vi.fn().mockReturnValue(null),
|
|
5
|
-
set: vi.fn(),
|
|
6
|
-
remove: vi.fn(),
|
|
7
|
-
});
|
|
8
|
-
describe("TokenStorage", () => {
|
|
9
|
-
let adapter;
|
|
10
|
-
beforeEach(() => {
|
|
11
|
-
adapter = createMockAdapter();
|
|
12
|
-
});
|
|
13
|
-
describe("save", () => {
|
|
14
|
-
it("should set both tokens via adapter with correct options", () => {
|
|
15
|
-
const storage = new TokenStorage(adapter);
|
|
16
|
-
storage.save({ accessToken: "abc", refreshToken: "xyz", deviceId: "dev-1" });
|
|
17
|
-
expect(adapter.set).toHaveBeenCalledWith("access_token", "abc", {
|
|
18
|
-
path: "/",
|
|
19
|
-
domain: undefined,
|
|
20
|
-
secure: true,
|
|
21
|
-
sameSite: "Lax",
|
|
22
|
-
maxAge: 900,
|
|
23
|
-
});
|
|
24
|
-
expect(adapter.set).toHaveBeenCalledWith("refresh_token", "xyz", {
|
|
25
|
-
path: "/",
|
|
26
|
-
domain: undefined,
|
|
27
|
-
secure: true,
|
|
28
|
-
sameSite: "Lax",
|
|
29
|
-
maxAge: 2_592_000,
|
|
30
|
-
});
|
|
31
|
-
expect(adapter.set).toHaveBeenCalledWith("device_id", "dev-1", {
|
|
32
|
-
path: "/",
|
|
33
|
-
domain: undefined,
|
|
34
|
-
secure: true,
|
|
35
|
-
sameSite: "Lax",
|
|
36
|
-
maxAge: 2_592_000,
|
|
37
|
-
});
|
|
38
|
-
});
|
|
39
|
-
it("should use custom cookie names", () => {
|
|
40
|
-
const storage = new TokenStorage(adapter, {
|
|
41
|
-
accessTokenName: "at",
|
|
42
|
-
refreshTokenName: "rt",
|
|
43
|
-
});
|
|
44
|
-
storage.save({ accessToken: "a1", refreshToken: "r1", deviceId: "dev-1" });
|
|
45
|
-
expect(adapter.set).toHaveBeenCalledWith("at", "a1", expect.any(Object));
|
|
46
|
-
expect(adapter.set).toHaveBeenCalledWith("rt", "r1", expect.any(Object));
|
|
47
|
-
});
|
|
48
|
-
it("should pass custom cookie options", () => {
|
|
49
|
-
const storage = new TokenStorage(adapter, {
|
|
50
|
-
path: "/app",
|
|
51
|
-
domain: ".example.com",
|
|
52
|
-
secure: false,
|
|
53
|
-
sameSite: "Strict",
|
|
54
|
-
accessTokenMaxAge: 60,
|
|
55
|
-
refreshTokenMaxAge: 120,
|
|
56
|
-
});
|
|
57
|
-
storage.save({ accessToken: "a", refreshToken: "r", deviceId: "dev-1" });
|
|
58
|
-
expect(adapter.set).toHaveBeenCalledWith("access_token", "a", {
|
|
59
|
-
path: "/app",
|
|
60
|
-
domain: ".example.com",
|
|
61
|
-
secure: false,
|
|
62
|
-
sameSite: "Strict",
|
|
63
|
-
maxAge: 60,
|
|
64
|
-
});
|
|
65
|
-
expect(adapter.set).toHaveBeenCalledWith("refresh_token", "r", {
|
|
66
|
-
path: "/app",
|
|
67
|
-
domain: ".example.com",
|
|
68
|
-
secure: false,
|
|
69
|
-
sameSite: "Strict",
|
|
70
|
-
maxAge: 120,
|
|
71
|
-
});
|
|
72
|
-
expect(adapter.set).toHaveBeenCalledWith("device_id", "dev-1", {
|
|
73
|
-
path: "/app",
|
|
74
|
-
domain: ".example.com",
|
|
75
|
-
secure: false,
|
|
76
|
-
sameSite: "Strict",
|
|
77
|
-
maxAge: 120,
|
|
78
|
-
});
|
|
79
|
-
});
|
|
80
|
-
});
|
|
81
|
-
describe("getAccessToken", () => {
|
|
82
|
-
it("should delegate to adapter.get with access token name", () => {
|
|
83
|
-
vi.mocked(adapter.get).mockReturnValue("token123");
|
|
84
|
-
const storage = new TokenStorage(adapter);
|
|
85
|
-
expect(storage.getAccessToken()).toBe("token123");
|
|
86
|
-
expect(adapter.get).toHaveBeenCalledWith("access_token");
|
|
87
|
-
});
|
|
88
|
-
it("should return null when adapter returns null", () => {
|
|
89
|
-
const storage = new TokenStorage(adapter);
|
|
90
|
-
expect(storage.getAccessToken()).toBeNull();
|
|
91
|
-
});
|
|
92
|
-
it("should use custom access token name", () => {
|
|
93
|
-
const storage = new TokenStorage(adapter, {
|
|
94
|
-
accessTokenName: "my_at",
|
|
95
|
-
});
|
|
96
|
-
storage.getAccessToken();
|
|
97
|
-
expect(adapter.get).toHaveBeenCalledWith("my_at");
|
|
98
|
-
});
|
|
99
|
-
});
|
|
100
|
-
describe("getRefreshToken", () => {
|
|
101
|
-
it("should delegate to adapter.get with refresh token name", () => {
|
|
102
|
-
vi.mocked(adapter.get).mockReturnValue("refresh123");
|
|
103
|
-
const storage = new TokenStorage(adapter);
|
|
104
|
-
expect(storage.getRefreshToken()).toBe("refresh123");
|
|
105
|
-
expect(adapter.get).toHaveBeenCalledWith("refresh_token");
|
|
106
|
-
});
|
|
107
|
-
it("should return null when adapter returns null", () => {
|
|
108
|
-
const storage = new TokenStorage(adapter);
|
|
109
|
-
expect(storage.getRefreshToken()).toBeNull();
|
|
110
|
-
});
|
|
111
|
-
});
|
|
112
|
-
describe("getAll", () => {
|
|
113
|
-
it("should return all tokens when present", () => {
|
|
114
|
-
vi.mocked(adapter.get)
|
|
115
|
-
.mockReturnValueOnce("access-val")
|
|
116
|
-
.mockReturnValueOnce("refresh-val")
|
|
117
|
-
.mockReturnValueOnce("device-val");
|
|
118
|
-
const storage = new TokenStorage(adapter);
|
|
119
|
-
expect(storage.getAll()).toEqual({
|
|
120
|
-
accessToken: "access-val",
|
|
121
|
-
refreshToken: "refresh-val",
|
|
122
|
-
deviceId: "device-val",
|
|
123
|
-
});
|
|
124
|
-
});
|
|
125
|
-
it("should return null when access token is missing", () => {
|
|
126
|
-
vi.mocked(adapter.get)
|
|
127
|
-
.mockReturnValueOnce(null)
|
|
128
|
-
.mockReturnValueOnce("refresh-val")
|
|
129
|
-
.mockReturnValueOnce("device-val");
|
|
130
|
-
const storage = new TokenStorage(adapter);
|
|
131
|
-
expect(storage.getAll()).toBeNull();
|
|
132
|
-
});
|
|
133
|
-
it("should return null when refresh token is missing", () => {
|
|
134
|
-
vi.mocked(adapter.get)
|
|
135
|
-
.mockReturnValueOnce("access-val")
|
|
136
|
-
.mockReturnValueOnce(null)
|
|
137
|
-
.mockReturnValueOnce("device-val");
|
|
138
|
-
const storage = new TokenStorage(adapter);
|
|
139
|
-
expect(storage.getAll()).toBeNull();
|
|
140
|
-
});
|
|
141
|
-
it("should return null when device id is missing", () => {
|
|
142
|
-
vi.mocked(adapter.get)
|
|
143
|
-
.mockReturnValueOnce("access-val")
|
|
144
|
-
.mockReturnValueOnce("refresh-val")
|
|
145
|
-
.mockReturnValueOnce(null);
|
|
146
|
-
const storage = new TokenStorage(adapter);
|
|
147
|
-
expect(storage.getAll()).toBeNull();
|
|
148
|
-
});
|
|
149
|
-
it("should return null when all tokens are missing", () => {
|
|
150
|
-
const storage = new TokenStorage(adapter);
|
|
151
|
-
expect(storage.getAll()).toBeNull();
|
|
152
|
-
});
|
|
153
|
-
});
|
|
154
|
-
describe("clear", () => {
|
|
155
|
-
it("should remove both tokens via adapter", () => {
|
|
156
|
-
const storage = new TokenStorage(adapter);
|
|
157
|
-
storage.clear();
|
|
158
|
-
expect(adapter.remove).toHaveBeenCalledWith("access_token", {
|
|
159
|
-
path: "/",
|
|
160
|
-
domain: undefined,
|
|
161
|
-
});
|
|
162
|
-
expect(adapter.remove).toHaveBeenCalledWith("refresh_token", {
|
|
163
|
-
path: "/",
|
|
164
|
-
domain: undefined,
|
|
165
|
-
});
|
|
166
|
-
});
|
|
167
|
-
it("should pass domain to remove options", () => {
|
|
168
|
-
const storage = new TokenStorage(adapter, {
|
|
169
|
-
domain: ".example.com",
|
|
170
|
-
});
|
|
171
|
-
storage.clear();
|
|
172
|
-
expect(adapter.remove).toHaveBeenCalledWith("access_token", {
|
|
173
|
-
path: "/",
|
|
174
|
-
domain: ".example.com",
|
|
175
|
-
});
|
|
176
|
-
});
|
|
177
|
-
});
|
|
178
|
-
});
|
|
179
|
-
//# sourceMappingURL=TokenStorage.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TokenStorage.test.js","sourceRoot":"","sources":["../src/TokenStorage.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,iBAAiB,GAAG,GAAkB,EAAE,CAAC,CAAC;IAC9C,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IAClC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;CAChB,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,OAAsB,CAAC;IAE3B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAE7E,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE,KAAK,EAAE;gBAC9D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE,KAAK,EAAE;gBAC/D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,EAAE;gBAC7D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE;gBACxC,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAE3E,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CACtC,IAAI,EACJ,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CACtC,IAAI,EACJ,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE;gBACxC,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,EAAE;gBACrB,kBAAkB,EAAE,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEzE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE,GAAG,EAAE;gBAC5D,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE,GAAG,EAAE;gBAC7D,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,EAAE;gBAC7D,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE;gBACxC,eAAe,EAAE,OAAO;aACzB,CAAC,CAAC;YAEH,OAAO,CAAC,cAAc,EAAE,CAAC;YAEzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBACnB,mBAAmB,CAAC,YAAY,CAAC;iBACjC,mBAAmB,CAAC,aAAa,CAAC;iBAClC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;gBAC/B,WAAW,EAAE,YAAY;gBACzB,YAAY,EAAE,aAAa;gBAC3B,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBACnB,mBAAmB,CAAC,IAAI,CAAC;iBACzB,mBAAmB,CAAC,aAAa,CAAC;iBAClC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBACnB,mBAAmB,CAAC,YAAY,CAAC;iBACjC,mBAAmB,CAAC,IAAI,CAAC;iBACzB,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBACnB,mBAAmB,CAAC,YAAY,CAAC;iBACjC,mBAAmB,CAAC,aAAa,CAAC;iBAClC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;YAE1C,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE;gBAC1D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE;gBAC3D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE;gBACxC,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YAEH,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE;gBAC1D,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
package/dist/TokenVerifier.d.ts
DELETED
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import type { AccessTokenPayload } from "./types.js";
|
|
2
|
-
export declare class TokenVerifier<Payload extends Record<string, any>> {
|
|
3
|
-
private readonly jwksUrl;
|
|
4
|
-
private readonly cacheTtlMs;
|
|
5
|
-
private cached;
|
|
6
|
-
constructor(jwksUrl: string, cacheTtlMs?: number);
|
|
7
|
-
private readonly fetchJwks;
|
|
8
|
-
private readonly getCachedOrFetch;
|
|
9
|
-
private readonly resolveKey;
|
|
10
|
-
readonly verifyToken: (token: string) => Promise<AccessTokenPayload<Payload>>;
|
|
11
|
-
readonly clearKeyCache: () => void;
|
|
12
|
-
}
|
|
13
|
-
//# sourceMappingURL=TokenVerifier.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TokenVerifier.d.ts","sourceRoot":"","sources":["../src/TokenVerifier.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAkCrD,qBAAa,aAAa,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAI1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAJ7B,OAAO,CAAC,MAAM,CAA2B;gBAGtB,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,MAA6B;IAG5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAOxB;IAEF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAO/B;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAczB;IAEF,QAAQ,CAAC,WAAW,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAShF;IAEF,QAAQ,CAAC,aAAa,QAAO,IAAI,CAE/B;CACH"}
|
package/dist/TokenVerifier.js
DELETED
|
@@ -1,61 +0,0 @@
|
|
|
1
|
-
import axios from "axios";
|
|
2
|
-
import { decodeProtectedHeader, importJWK, jwtVerify } from "jose";
|
|
3
|
-
const DEFAULT_CACHE_TTL_MS = 3_600_000;
|
|
4
|
-
const importKeysFromJwks = async (jwks) => {
|
|
5
|
-
const keysWithKid = jwks.filter((jwk) => typeof jwk.kid === "string");
|
|
6
|
-
const entries = await Promise.all(keysWithKid.map(async (jwk) => {
|
|
7
|
-
const imported = await importJWK(jwk);
|
|
8
|
-
if (imported instanceof Uint8Array) {
|
|
9
|
-
throw new Error(`Symmetric key (kid: ${jwk.kid}) is not supported`);
|
|
10
|
-
}
|
|
11
|
-
return [jwk.kid, imported];
|
|
12
|
-
}));
|
|
13
|
-
return new Map(entries);
|
|
14
|
-
};
|
|
15
|
-
export class TokenVerifier {
|
|
16
|
-
jwksUrl;
|
|
17
|
-
cacheTtlMs;
|
|
18
|
-
cached = null;
|
|
19
|
-
constructor(jwksUrl, cacheTtlMs = DEFAULT_CACHE_TTL_MS) {
|
|
20
|
-
this.jwksUrl = jwksUrl;
|
|
21
|
-
this.cacheTtlMs = cacheTtlMs;
|
|
22
|
-
}
|
|
23
|
-
fetchJwks = async () => {
|
|
24
|
-
const { data } = await axios.get(this.jwksUrl);
|
|
25
|
-
const keys = await importKeysFromJwks(data.keys);
|
|
26
|
-
this.cached = { keys, fetchedAt: Date.now() };
|
|
27
|
-
return keys;
|
|
28
|
-
};
|
|
29
|
-
getCachedOrFetch = async () => {
|
|
30
|
-
if (this.cached && Date.now() - this.cached.fetchedAt < this.cacheTtlMs) {
|
|
31
|
-
return this.cached.keys;
|
|
32
|
-
}
|
|
33
|
-
return this.fetchJwks();
|
|
34
|
-
};
|
|
35
|
-
resolveKey = async (kid) => {
|
|
36
|
-
const keys = await this.getCachedOrFetch();
|
|
37
|
-
const key = keys.get(kid);
|
|
38
|
-
if (key)
|
|
39
|
-
return key;
|
|
40
|
-
this.cached = null;
|
|
41
|
-
const freshKeys = await this.fetchJwks();
|
|
42
|
-
const freshKey = freshKeys.get(kid);
|
|
43
|
-
if (!freshKey) {
|
|
44
|
-
throw new Error(`Key with kid "${kid}" not found in JWKS`);
|
|
45
|
-
}
|
|
46
|
-
return freshKey;
|
|
47
|
-
};
|
|
48
|
-
verifyToken = async (token) => {
|
|
49
|
-
const header = decodeProtectedHeader(token);
|
|
50
|
-
if (!header.kid) {
|
|
51
|
-
throw new Error("Token header is missing 'kid' claim");
|
|
52
|
-
}
|
|
53
|
-
const key = await this.resolveKey(header.kid);
|
|
54
|
-
const { payload } = await jwtVerify(token, key);
|
|
55
|
-
return payload;
|
|
56
|
-
};
|
|
57
|
-
clearKeyCache = () => {
|
|
58
|
-
this.cached = null;
|
|
59
|
-
};
|
|
60
|
-
}
|
|
61
|
-
//# sourceMappingURL=TokenVerifier.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TokenVerifier.js","sourceRoot":"","sources":["../src/TokenVerifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,SAAS,EAGV,MAAM,MAAM,CAAC;AAYd,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAoB,EACyB,EAAE;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAyC,EAAE,CAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAC9B,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,YAAY,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAU,CAAC;IACtC,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,OAAO,aAAa;IAIL;IACA;IAJX,MAAM,GAAsB,IAAI,CAAC;IAEzC,YACmB,OAAe,EACf,aAAqB,oBAAoB;QADzC,YAAO,GAAP,OAAO,CAAQ;QACf,eAAU,GAAV,UAAU,CAA+B;IACzD,CAAC;IAEa,SAAS,GAAG,KAAK,IAEhC,EAAE;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAe,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEe,gBAAgB,GAAG,KAAK,IAEvC,EAAE;QACF,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEe,UAAU,GAAG,KAAK,EACjC,GAAW,EACa,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QAEpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,qBAAqB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEO,WAAW,GAAG,KAAK,EAAE,KAAa,EAAwC,EAAE;QACnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAA8B,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEO,aAAa,GAAG,GAAS,EAAE;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;CACH"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TokenVerifier.test.d.ts","sourceRoot":"","sources":["../src/TokenVerifier.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,117 +0,0 @@
|
|
|
1
|
-
import { describe, it, expect, vi, beforeEach } from "vitest";
|
|
2
|
-
import { TokenVerifier } from "./TokenVerifier.js";
|
|
3
|
-
import { generateKeyPair, exportJWK, SignJWT, } from "jose";
|
|
4
|
-
import axios from "axios";
|
|
5
|
-
vi.mock("axios", async (importOriginal) => {
|
|
6
|
-
const actual = await importOriginal();
|
|
7
|
-
return {
|
|
8
|
-
...actual,
|
|
9
|
-
default: {
|
|
10
|
-
...actual.default,
|
|
11
|
-
get: vi.fn(),
|
|
12
|
-
},
|
|
13
|
-
};
|
|
14
|
-
});
|
|
15
|
-
const JWKS_URL = "https://authticon.com/.well-known/jwks.json";
|
|
16
|
-
const createTestKeyPair = async (kid) => {
|
|
17
|
-
const { publicKey, privateKey } = await generateKeyPair("RS256");
|
|
18
|
-
const jwk = await exportJWK(publicKey);
|
|
19
|
-
jwk.kid = kid;
|
|
20
|
-
jwk.use = "sig";
|
|
21
|
-
jwk.alg = "RS256";
|
|
22
|
-
return { publicKey, privateKey, jwk };
|
|
23
|
-
};
|
|
24
|
-
const signToken = (privateKey, kid, claims = {}) => new SignJWT(claims)
|
|
25
|
-
.setProtectedHeader({ alg: "RS256", kid })
|
|
26
|
-
.setIssuedAt()
|
|
27
|
-
.setExpirationTime("1h")
|
|
28
|
-
.sign(privateKey);
|
|
29
|
-
describe("TokenVerifier", () => {
|
|
30
|
-
beforeEach(() => {
|
|
31
|
-
vi.clearAllMocks();
|
|
32
|
-
vi.useRealTimers();
|
|
33
|
-
});
|
|
34
|
-
it("should verify a valid token", async () => {
|
|
35
|
-
const { privateKey, jwk } = await createTestKeyPair("key-1");
|
|
36
|
-
vi.mocked(axios.get).mockResolvedValue({ data: { keys: [jwk] } });
|
|
37
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
38
|
-
const token = await signToken(privateKey, "key-1", { sub: "user-123" });
|
|
39
|
-
const payload = await verifier.verifyToken(token);
|
|
40
|
-
expect(payload.sub).toBe("user-123");
|
|
41
|
-
expect(axios.get).toHaveBeenCalledWith(JWKS_URL);
|
|
42
|
-
});
|
|
43
|
-
it("should cache JWKS keys across multiple verify calls", async () => {
|
|
44
|
-
const { privateKey, jwk } = await createTestKeyPair("key-1");
|
|
45
|
-
vi.mocked(axios.get).mockResolvedValue({ data: { keys: [jwk] } });
|
|
46
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
47
|
-
const token1 = await signToken(privateKey, "key-1", { sub: "user-1" });
|
|
48
|
-
const token2 = await signToken(privateKey, "key-1", { sub: "user-2" });
|
|
49
|
-
await verifier.verifyToken(token1);
|
|
50
|
-
await verifier.verifyToken(token2);
|
|
51
|
-
expect(axios.get).toHaveBeenCalledTimes(1);
|
|
52
|
-
});
|
|
53
|
-
it("should refetch JWKS when kid is not found (key rotation)", async () => {
|
|
54
|
-
const key1 = await createTestKeyPair("key-1");
|
|
55
|
-
const key2 = await createTestKeyPair("key-2");
|
|
56
|
-
vi.mocked(axios.get)
|
|
57
|
-
.mockResolvedValueOnce({ data: { keys: [key1.jwk] } })
|
|
58
|
-
.mockResolvedValueOnce({ data: { keys: [key1.jwk, key2.jwk] } });
|
|
59
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
60
|
-
const token1 = await signToken(key1.privateKey, "key-1");
|
|
61
|
-
await verifier.verifyToken(token1);
|
|
62
|
-
const token2 = await signToken(key2.privateKey, "key-2");
|
|
63
|
-
await verifier.verifyToken(token2);
|
|
64
|
-
expect(axios.get).toHaveBeenCalledTimes(2);
|
|
65
|
-
});
|
|
66
|
-
it("should throw when kid is missing from token header", async () => {
|
|
67
|
-
const { privateKey } = await generateKeyPair("RS256");
|
|
68
|
-
const token = await new SignJWT({ sub: "user-123" })
|
|
69
|
-
.setProtectedHeader({ alg: "RS256" })
|
|
70
|
-
.setIssuedAt()
|
|
71
|
-
.setExpirationTime("1h")
|
|
72
|
-
.sign(privateKey);
|
|
73
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
74
|
-
await expect(verifier.verifyToken(token)).rejects.toThrow("kid");
|
|
75
|
-
});
|
|
76
|
-
it("should throw when key is not found after refetch", async () => {
|
|
77
|
-
const { jwk } = await createTestKeyPair("key-1");
|
|
78
|
-
vi.mocked(axios.get).mockResolvedValue({ data: { keys: [jwk] } });
|
|
79
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
80
|
-
const { privateKey: otherKey } = await generateKeyPair("RS256");
|
|
81
|
-
const token = await signToken(otherKey, "unknown-kid");
|
|
82
|
-
await expect(verifier.verifyToken(token)).rejects.toThrow("not found in JWKS");
|
|
83
|
-
});
|
|
84
|
-
it("should clear cache on clearKeyCache()", async () => {
|
|
85
|
-
const { privateKey, jwk } = await createTestKeyPair("key-1");
|
|
86
|
-
vi.mocked(axios.get).mockResolvedValue({ data: { keys: [jwk] } });
|
|
87
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
88
|
-
const token = await signToken(privateKey, "key-1");
|
|
89
|
-
await verifier.verifyToken(token);
|
|
90
|
-
verifier.clearKeyCache();
|
|
91
|
-
await verifier.verifyToken(token);
|
|
92
|
-
expect(axios.get).toHaveBeenCalledTimes(2);
|
|
93
|
-
});
|
|
94
|
-
it("should refetch JWKS when cache TTL expires", async () => {
|
|
95
|
-
vi.useFakeTimers();
|
|
96
|
-
const { privateKey, jwk } = await createTestKeyPair("key-1");
|
|
97
|
-
vi.mocked(axios.get).mockResolvedValue({ data: { keys: [jwk] } });
|
|
98
|
-
const verifier = new TokenVerifier(JWKS_URL, 1000);
|
|
99
|
-
const token = await signToken(privateKey, "key-1");
|
|
100
|
-
await verifier.verifyToken(token);
|
|
101
|
-
vi.advanceTimersByTime(1001);
|
|
102
|
-
await verifier.verifyToken(token);
|
|
103
|
-
expect(axios.get).toHaveBeenCalledTimes(2);
|
|
104
|
-
});
|
|
105
|
-
it("should skip JWK entries without kid", async () => {
|
|
106
|
-
const { privateKey } = await generateKeyPair("RS256");
|
|
107
|
-
const jwkWithoutKid = await exportJWK((await generateKeyPair("RS256")).publicKey);
|
|
108
|
-
const { jwk: jwkWithKid } = await createTestKeyPair("key-1");
|
|
109
|
-
vi.mocked(axios.get).mockResolvedValue({
|
|
110
|
-
data: { keys: [jwkWithoutKid, jwkWithKid] },
|
|
111
|
-
});
|
|
112
|
-
const verifier = new TokenVerifier(JWKS_URL);
|
|
113
|
-
const token = await signToken(privateKey, "key-no-match");
|
|
114
|
-
await expect(verifier.verifyToken(token)).rejects.toThrow("not found in JWKS");
|
|
115
|
-
});
|
|
116
|
-
});
|
|
117
|
-
//# sourceMappingURL=TokenVerifier.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TokenVerifier.test.js","sourceRoot":"","sources":["../src/TokenVerifier.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,eAAe,EACf,SAAS,EACT,OAAO,GAER,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACxC,MAAM,MAAM,GAAG,MAAM,cAAc,EAA0B,CAAC;IAC9D,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;SACb;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAE/D,MAAM,iBAAiB,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;IAC9C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACd,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC;IAChB,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,UAAyB,EACzB,GAAW,EACX,SAAkC,EAAE,EACpC,EAAE,CACF,IAAI,OAAO,CAAC,MAAM,CAAC;KAChB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACzC,WAAW,EAAE;KACb,iBAAiB,CAAC,IAAI,CAAC;KACvB,IAAI,CAAC,UAAU,CAAC,CAAC;AAEtB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAExE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEvE,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE9C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACjB,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;aACrD,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;aACjD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,UAAU,CAAC,CAAC;QAEpB,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACjD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEvD,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvD,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAElC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAEzB,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAElC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAElC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAElC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,MAAM,SAAS,CACnC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACF,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE7D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE;SAC5C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvD,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
package/dist/TwoFa.d.ts
DELETED
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
import type { Client } from "./generated/client/index.js";
|
|
2
|
-
import { type PostApiV1UsersByUserIdTwoFaData } from "./generated/index.js";
|
|
3
|
-
export declare class TwoFa {
|
|
4
|
-
private readonly client;
|
|
5
|
-
constructor(client: Client);
|
|
6
|
-
getSecret(userId: string): Promise<{
|
|
7
|
-
secret: string;
|
|
8
|
-
uri: string;
|
|
9
|
-
}>;
|
|
10
|
-
enableEmail(userId: string): Promise<{
|
|
11
|
-
success: boolean;
|
|
12
|
-
}>;
|
|
13
|
-
enablePhone(userId: string): Promise<{
|
|
14
|
-
success: boolean;
|
|
15
|
-
}>;
|
|
16
|
-
enableApp(userId: string, token: string): Promise<{
|
|
17
|
-
success: boolean;
|
|
18
|
-
}>;
|
|
19
|
-
set(userId: string, params: PostApiV1UsersByUserIdTwoFaData['body']): Promise<{
|
|
20
|
-
success: boolean;
|
|
21
|
-
}>;
|
|
22
|
-
disable(userId: string, token: string): Promise<{
|
|
23
|
-
success: boolean;
|
|
24
|
-
}>;
|
|
25
|
-
}
|
|
26
|
-
//# sourceMappingURL=TwoFa.d.ts.map
|
package/dist/TwoFa.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TwoFa.d.ts","sourceRoot":"","sources":["../src/TwoFa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAgG,KAAK,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAE1K,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,SAAS,CAAC,MAAM,EAAE,MAAM;;;;IAUxB,WAAW,CAAC,MAAM,EAAE,MAAM;;;IAM1B,WAAW,CAAC,MAAM,EAAE,MAAM;;;IAM1B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;IAOvC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC;;;IAWlE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;CAY5C"}
|
package/dist/TwoFa.js
DELETED
|
@@ -1,55 +0,0 @@
|
|
|
1
|
-
import { deleteApiV1UsersByUserIdTwoFa, getApiV1UsersByUserIdTwoFaSecret, postApiV1UsersByUserIdTwoFa } from "./generated/index.js";
|
|
2
|
-
export class TwoFa {
|
|
3
|
-
client;
|
|
4
|
-
constructor(client) {
|
|
5
|
-
this.client = client;
|
|
6
|
-
}
|
|
7
|
-
async getSecret(userId) {
|
|
8
|
-
const { data } = await getApiV1UsersByUserIdTwoFaSecret({
|
|
9
|
-
client: this.client,
|
|
10
|
-
path: {
|
|
11
|
-
userId
|
|
12
|
-
}
|
|
13
|
-
});
|
|
14
|
-
return data;
|
|
15
|
-
}
|
|
16
|
-
async enableEmail(userId) {
|
|
17
|
-
return this.set(userId, {
|
|
18
|
-
type: 'EMAIL'
|
|
19
|
-
});
|
|
20
|
-
}
|
|
21
|
-
async enablePhone(userId) {
|
|
22
|
-
return this.set(userId, {
|
|
23
|
-
type: 'PHONE'
|
|
24
|
-
});
|
|
25
|
-
}
|
|
26
|
-
async enableApp(userId, token) {
|
|
27
|
-
return this.set(userId, {
|
|
28
|
-
token,
|
|
29
|
-
type: 'APP'
|
|
30
|
-
});
|
|
31
|
-
}
|
|
32
|
-
async set(userId, params) {
|
|
33
|
-
const { data } = await postApiV1UsersByUserIdTwoFa({
|
|
34
|
-
client: this.client,
|
|
35
|
-
body: params,
|
|
36
|
-
path: {
|
|
37
|
-
userId
|
|
38
|
-
}
|
|
39
|
-
});
|
|
40
|
-
return data;
|
|
41
|
-
}
|
|
42
|
-
async disable(userId, token) {
|
|
43
|
-
const { data } = await deleteApiV1UsersByUserIdTwoFa({
|
|
44
|
-
client: this.client,
|
|
45
|
-
body: {
|
|
46
|
-
token,
|
|
47
|
-
},
|
|
48
|
-
path: {
|
|
49
|
-
userId
|
|
50
|
-
}
|
|
51
|
-
});
|
|
52
|
-
return data;
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
//# sourceMappingURL=TwoFa.js.map
|
package/dist/TwoFa.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"TwoFa.js","sourceRoot":"","sources":["../src/TwoFa.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAE,2BAA2B,EAAwC,MAAM,sBAAsB,CAAC;AAE1K,MAAM,OAAO,KAAK;IACa;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,gCAAgC,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE;gBACJ,MAAM;aACP;SACF,CAAC,CAAA;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAC;YACrB,IAAI,EAAE,OAAO;SACd,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACtB,IAAI,EAAE,OAAO;SACd,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAa;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACtB,KAAK;YACL,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAC,MAA+C;QACtE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,2BAA2B,CAAC;YACjD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,MAAM;aACP;SACF,CAAC,CAAA;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAa;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,6BAA6B,CAAC;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE;gBACJ,KAAK;aACN;YACD,IAAI,EAAE;gBACJ,MAAM;aACP;SACF,CAAC,CAAA;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
|
package/dist/User.d.ts
DELETED
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import type { Authticon } from "./Authticon.js";
|
|
2
|
-
import type { AccessTokenPayload } from "./types.js";
|
|
3
|
-
export declare class User {
|
|
4
|
-
private readonly authticon;
|
|
5
|
-
private readonly accessTokenPayload;
|
|
6
|
-
constructor(authticon: Authticon, accessTokenPayload: AccessTokenPayload);
|
|
7
|
-
get id(): string;
|
|
8
|
-
twoFa: {
|
|
9
|
-
enablePhone: (secret: string) => Promise<{
|
|
10
|
-
success: boolean;
|
|
11
|
-
}>;
|
|
12
|
-
enableEmail: (secret: string) => Promise<{
|
|
13
|
-
success: boolean;
|
|
14
|
-
}>;
|
|
15
|
-
enableApp: (secret: string, token: string) => Promise<{
|
|
16
|
-
success: boolean;
|
|
17
|
-
}>;
|
|
18
|
-
disable: (token: string) => Promise<{
|
|
19
|
-
success: boolean;
|
|
20
|
-
}>;
|
|
21
|
-
};
|
|
22
|
-
changeEmail: (newEmail: string) => Promise<null>;
|
|
23
|
-
changePassword: (newPassword: string, oldPassword: string) => Promise<null>;
|
|
24
|
-
}
|
|
25
|
-
//# sourceMappingURL=User.d.ts.map
|
package/dist/User.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../src/User.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,qBAAa,IAAI;IAET,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBADlB,SAAS,EAAE,SAAS,EACpB,kBAAkB,EAAE,kBAAkB;IAI3D,IAAI,EAAE,WAEL;IAEM,KAAK;8BACc,MAAM;;;8BAEN,MAAM;;;4BAER,MAAM,SAAS,MAAM;;;yBAExB,MAAM;;;MAE1B;IAEM,WAAW,GAAI,UAAU,MAAM,mBAI/B;IAEA,cAAc,GAAI,aAAa,MAAM,EAAE,aAAa,MAAM,mBAK1D;CACV"}
|
package/dist/User.js
DELETED
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
export class User {
|
|
2
|
-
authticon;
|
|
3
|
-
accessTokenPayload;
|
|
4
|
-
constructor(authticon, accessTokenPayload) {
|
|
5
|
-
this.authticon = authticon;
|
|
6
|
-
this.accessTokenPayload = accessTokenPayload;
|
|
7
|
-
}
|
|
8
|
-
get id() {
|
|
9
|
-
return this.accessTokenPayload.authticon.userId;
|
|
10
|
-
}
|
|
11
|
-
twoFa = {
|
|
12
|
-
enablePhone: (secret) => this.authticon.twoFa.enablePhone(this.id, secret),
|
|
13
|
-
enableEmail: (secret) => this.authticon.twoFa.enableEmail(this.id, secret),
|
|
14
|
-
enableApp: (secret, token) => this.authticon.twoFa.enableApp(this.id, secret, token),
|
|
15
|
-
disable: (token) => this.authticon.twoFa.disable(this.id, token),
|
|
16
|
-
};
|
|
17
|
-
changeEmail = (newEmail) => this.authticon.account.changeEmail({
|
|
18
|
-
userId: this.id,
|
|
19
|
-
newEmail
|
|
20
|
-
});
|
|
21
|
-
changePassword = (newPassword, oldPassword) => this.authticon.account.changePassword({
|
|
22
|
-
userId: this.id,
|
|
23
|
-
newPassword,
|
|
24
|
-
oldPassword
|
|
25
|
-
});
|
|
26
|
-
}
|
|
27
|
-
//# sourceMappingURL=User.js.map
|
package/dist/User.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"User.js","sourceRoot":"","sources":["../src/User.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,IAAI;IAEQ;IACA;IAFrB,YACqB,SAAoB,EACpB,kBAAsC;QADtC,cAAS,GAAT,SAAS,CAAW;QACpB,uBAAkB,GAAlB,kBAAkB,CAAoB;IAE3D,CAAC;IAED,IAAI,EAAE;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC;IACpD,CAAC;IAEM,KAAK,GAAG;QACX,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAC5B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QACrD,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAC5B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QACrD,SAAS,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CACzC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC;QAC1D,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;KACnD,CAAA;IAEM,WAAW,GAAG,CAAC,QAAgB,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ;KACX,CAAC,CAAC;IAEA,cAAc,GAAG,CAAC,WAAmB,EAAE,WAAmB,EAAE,EAAE,CACjE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,WAAW;QACX,WAAW;KACd,CAAC,CAAC;CACV"}
|
package/dist/Users.d.ts
DELETED
|
@@ -1,57 +0,0 @@
|
|
|
1
|
-
import type { Client } from "./generated/client/index.js";
|
|
2
|
-
import { type GetApiV1UsersData, type PatchApiV1UsersByIdData, type PostApiV1UsersData } from "./generated/index.js";
|
|
3
|
-
export declare class Users {
|
|
4
|
-
private readonly client;
|
|
5
|
-
constructor(client: Client);
|
|
6
|
-
create(params: PostApiV1UsersData['body']): Promise<{
|
|
7
|
-
id: string;
|
|
8
|
-
email: string;
|
|
9
|
-
isGuest: boolean;
|
|
10
|
-
}>;
|
|
11
|
-
list(params?: GetApiV1UsersData['query']): Promise<{
|
|
12
|
-
data: Array<{
|
|
13
|
-
id: string;
|
|
14
|
-
email: string;
|
|
15
|
-
firstName: string | null;
|
|
16
|
-
lastName: string | null;
|
|
17
|
-
username: string;
|
|
18
|
-
role: string;
|
|
19
|
-
emailVerified: boolean;
|
|
20
|
-
phone: string | null;
|
|
21
|
-
phoneVerified: boolean;
|
|
22
|
-
isBlocked: boolean;
|
|
23
|
-
isGuest: boolean;
|
|
24
|
-
locale: string;
|
|
25
|
-
createdAt: string;
|
|
26
|
-
}>;
|
|
27
|
-
total: number;
|
|
28
|
-
}>;
|
|
29
|
-
get(id: string): Promise<{
|
|
30
|
-
id: string;
|
|
31
|
-
email: string;
|
|
32
|
-
firstName: string | null;
|
|
33
|
-
lastName: string | null;
|
|
34
|
-
username: string;
|
|
35
|
-
role: string;
|
|
36
|
-
emailVerified: boolean;
|
|
37
|
-
phone: string | null;
|
|
38
|
-
phoneVerified: boolean;
|
|
39
|
-
isBlocked: boolean;
|
|
40
|
-
isBlockedUntil: string | null;
|
|
41
|
-
isGuest: boolean;
|
|
42
|
-
locale: string;
|
|
43
|
-
claims: unknown;
|
|
44
|
-
marketingConsent: boolean;
|
|
45
|
-
twoFaEnabled: boolean;
|
|
46
|
-
twoFaType: string | null;
|
|
47
|
-
createdAt: string;
|
|
48
|
-
updatedAt: string;
|
|
49
|
-
}>;
|
|
50
|
-
update(id: string, params: PatchApiV1UsersByIdData['body']): Promise<{
|
|
51
|
-
id: string;
|
|
52
|
-
}>;
|
|
53
|
-
delete(id: string): Promise<{
|
|
54
|
-
id: string;
|
|
55
|
-
}>;
|
|
56
|
-
}
|
|
57
|
-
//# sourceMappingURL=Users.d.ts.map
|
package/dist/Users.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"Users.d.ts","sourceRoot":"","sources":["../src/Users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAiC,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGpJ,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;;;;;IAOzC,IAAI,CAAC,MAAM,GAAE,iBAAiB,CAAC,OAAO,CAAM;;;;;;;;;;;;;;;;;;IAQ5C,GAAG,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;IAUd,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC;;;IAW1D,MAAM,CAAC,EAAE,EAAE,MAAM;;;CASxB"}
|