@civic/auth 0.0.1-beta.9 → 0.0.1-tsc.alpha.2

package/dist/test/unit/server/login.test.js

@@ -0,0 +1,127 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { resolveOAuthAccessCode, isLoggedIn, buildLoginUrl, } from "@/server/login.js";
+import { ServerAuthenticationResolver } from "@/server/ServerAuthenticationResolver.js";
+import { GenericAuthenticationInitiator } from "@/services/AuthenticationService.js";
+import { GenericPublicClientPKCEProducer } from "@/services/PKCE.js";
+import { DEFAULT_AUTH_SERVER, DEFAULT_SCOPES } from "@/constants.js";
+vi.mock("@/server/ServerAuthenticationResolver");
+vi.mock("@/services/AuthenticationService");
+vi.mock("@/services/PKCE");
+class StubPKCEProducer {
+    constructor() { }
+    async getCodeChallenge() {
+        return "dummyCodeChallenge";
+    }
+    async getCodeVerifier() {
+        return "dummyCodeVerifier";
+    }
+}
+describe("Login Utilities", () => {
+    const mockAuthConfig = {
+        clientId: "mockClientId",
+        oauthServer: "http://mockOauthServer",
+        redirectUrl: "http://localhost/redirect",
+    };
+    const mockTokens = {
+        id_token: "mockIdToken",
+        access_token: "mockAccessToken",
+        refresh_token: "mockRefreshToken",
+    };
+    const mockStorage = {
+        get: vi.fn(),
+        set: vi.fn(),
+    };
+    describe("resolveOAuthAccessCode", () => {
+        it("should resolve the OAuth access code and return tokens", async () => {
+            vi.mocked(ServerAuthenticationResolver.build).mockResolvedValue({
+                tokenExchange: vi.fn().mockResolvedValue(mockTokens),
+            });
+            const result = await resolveOAuthAccessCode("mockCode", "mockState", mockStorage, mockAuthConfig);
+            expect(ServerAuthenticationResolver.build).toHaveBeenCalledWith({
+                ...mockAuthConfig,
+                oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,
+            }, mockStorage, undefined);
+            expect(result).toEqual(mockTokens);
+        });
+    });
+    describe("isLoggedIn", () => {
+        it("should return true if id_token is in storage", () => {
+            vi.mocked(mockStorage.get).mockReturnValue("mockIdToken");
+            const result = isLoggedIn(mockStorage);
+            expect(result).toBe(true);
+        });
+        it("should return false if id_token is not in storage", () => {
+            vi.mocked(mockStorage.get).mockReturnValue(null);
+            const result = isLoggedIn(mockStorage);
+            expect(result).toBe(false);
+        });
+    });
+    describe("buildLoginUrl", () => {
+        it("should generate a login URL with provided config", async () => {
+            const state = "mockState";
+            const scopes = ["openid", "profile"];
+            const pkceProducer = new StubPKCEProducer();
+            const authInitiator = new GenericAuthenticationInitiator({
+                ...mockAuthConfig,
+                state,
+                scopes,
+                oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,
+                pkceConsumer: pkceProducer,
+            });
+            vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);
+            vi.mocked(authInitiator.signIn).mockResolvedValue(new URL("http://mockLoginUrl"));
+            const result = await buildLoginUrl({
+                ...mockAuthConfig,
+                state,
+                scopes,
+            }, mockStorage);
+            expect(result.toString()).toBe("http://mockloginurl/");
+            expect(GenericAuthenticationInitiator).toHaveBeenCalledWith({
+                ...mockAuthConfig,
+                state,
+                scopes,
+                oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,
+                pkceConsumer: pkceProducer,
+            });
+        });
+        it("should generate a login URL with default state and scopes", async () => {
+            const authInitiator = new GenericAuthenticationInitiator({
+                ...mockAuthConfig,
+                state: expect.any(String), // state is random if not provided
+                scopes: DEFAULT_SCOPES,
+                oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,
+                pkceConsumer: expect.any(GenericPublicClientPKCEProducer),
+            });
+            vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);
+            vi.mocked(authInitiator.signIn).mockResolvedValue(new URL("http://mockLoginUrl"));
+            const result = await buildLoginUrl(mockAuthConfig, mockStorage);
+            expect(result.toString()).toBe("http://mockloginurl/");
+        });
+        it("should include nonce in the login URL if provided in config", async () => {
+            const state = "mockState";
+            const scopes = ["openid", "profile"];
+            const nonce = "mockNonce";
+            const pkceProducer = new GenericPublicClientPKCEProducer(mockStorage);
+            const authInitiator = new GenericAuthenticationInitiator({
+                ...mockAuthConfig,
+                state,
+                scopes,
+                oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,
+                pkceConsumer: pkceProducer,
+                nonce,
+            });
+            vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);
+            vi.mocked(authInitiator.signIn).mockResolvedValue(new URL(`http://mockLoginUrl?nonce=${nonce}`));
+            await buildLoginUrl({
+                ...mockAuthConfig,
+                state,
+                scopes,
+                nonce,
+            }, mockStorage);
+            expect(GenericAuthenticationInitiator).toHaveBeenCalledWith(expect.objectContaining({
+                nonce,
+            }));
+        });
+    });
+});
+//# sourceMappingURL=login.test.js.map

package/dist/test/unit/server/login.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.test.js","sourceRoot":"","sources":["../../../../test/unit/server/login.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAKrE,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;AACjD,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAC5C,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAE3B,MAAM,gBAAgB;IACpB,gBAAe,CAAC;IAEhB,KAAK,CAAC,gBAAgB;QACpB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;CACF;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,cAAc,GAAe;QACjC,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,2BAA2B;KACzC,CAAC;IACF,MAAM,UAAU,GAA0B;QACxC,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,iBAAiB;QAC/B,aAAa,EAAE,kBAAkB;KAClC,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;KACa,CAAC;IAE5B,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;gBAC9D,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;aACV,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,UAAU,EACV,WAAW,EACX,WAAW,EACX,cAAc,CACf,CAAC;YAEF,MAAM,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAC7D;gBACE,GAAG,cAAc;gBACjB,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,mBAAmB;aAC/D,EACD,WAAW,EACX,SAAS,CACV,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAEvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAEjD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAEvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,KAAK,GAAG,WAAW,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACrC,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;YAE5C,MAAM,aAAa,GAAG,IAAI,8BAA8B,CAAC;gBACvD,GAAG,cAAc;gBACjB,KAAK;gBACL,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,mBAAmB;gBAC9D,YAAY,EAAE,YAAY;aAC3B,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAC/C,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAC/B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC;gBACE,GAAG,cAAc;gBACjB,KAAK;gBACL,MAAM;aACP,EACD,WAAW,CACZ,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACvD,MAAM,CAAC,8BAA8B,CAAC,CAAC,oBAAoB,CAAC;gBAC1D,GAAG,cAAc;gBACjB,KAAK;gBACL,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,mBAAmB;gBAC9D,YAAY,EAAE,YAAY;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,aAAa,GAAG,IAAI,8BAA8B,CAAC;gBACvD,GAAG,cAAc;gBACjB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,kCAAkC;gBAC7D,MAAM,EAAE,cAAc;gBACtB,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,mBAAmB;gBAC9D,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC;aAC1D,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAC/C,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAC/B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAEhE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,KAAK,GAAG,WAAW,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,WAAW,CAAC;YAC1B,MAAM,YAAY,GAAG,IAAI,+BAA+B,CAAC,WAAW,CAAC,CAAC;YAEtE,MAAM,aAAa,GAAG,IAAI,8BAA8B,CAAC;gBACvD,GAAG,cAAc;gBACjB,KAAK;gBACL,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,mBAAmB;gBAC9D,YAAY,EAAE,YAAY;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAC/C,IAAI,GAAG,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAC9C,CAAC;YAEF,MAAM,aAAa,CACjB;gBACE,GAAG,cAAc;gBACjB,KAAK;gBACL,MAAM;gBACN,KAAK;aACN,EACD,WAAW,CACZ,CAAC;YAEF,MAAM,CAAC,8BAA8B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAClF,KAAK;aACN,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport {\n  resolveOAuthAccessCode,\n  isLoggedIn,\n  buildLoginUrl,\n} from \"@/server/login.js\";\nimport { ServerAuthenticationResolver } from \"@/server/ServerAuthenticationResolver.js\";\nimport { GenericAuthenticationInitiator } from \"@/services/AuthenticationService.js\";\nimport { GenericPublicClientPKCEProducer } from \"@/services/PKCE.js\";\nimport { DEFAULT_AUTH_SERVER, DEFAULT_SCOPES } from \"@/constants.js\";\nimport type { OIDCTokenResponseBody, AuthStorage } from \"@/types.js\";\nimport type { AuthConfig } from \"@/server/config.js\";\nimport type { PKCEProducer } from \"@/services/types.js\";\n\nvi.mock(\"@/server/ServerAuthenticationResolver\");\nvi.mock(\"@/services/AuthenticationService\");\nvi.mock(\"@/services/PKCE\");\n\nclass StubPKCEProducer implements PKCEProducer {\n  constructor() {}\n\n  async getCodeChallenge(): Promise<string> {\n    return \"dummyCodeChallenge\";\n  }\n\n  async getCodeVerifier(): Promise<string> {\n    return \"dummyCodeVerifier\";\n  }\n}\n\ndescribe(\"Login Utilities\", () => {\n  const mockAuthConfig: AuthConfig = {\n    clientId: \"mockClientId\",\n    oauthServer: \"http://mockOauthServer\",\n    redirectUrl: \"http://localhost/redirect\",\n  };\n  const mockTokens: OIDCTokenResponseBody = {\n    id_token: \"mockIdToken\",\n    access_token: \"mockAccessToken\",\n    refresh_token: \"mockRefreshToken\",\n  };\n  const mockStorage = {\n    get: vi.fn(),\n    set: vi.fn(),\n  } as unknown as AuthStorage;\n\n  describe(\"resolveOAuthAccessCode\", () => {\n    it(\"should resolve the OAuth access code and return tokens\", async () => {\n      vi.mocked(ServerAuthenticationResolver.build).mockResolvedValue({\n        tokenExchange: vi.fn().mockResolvedValue(mockTokens),\n      } as unknown as ServerAuthenticationResolver);\n\n      const result = await resolveOAuthAccessCode(\n        \"mockCode\",\n        \"mockState\",\n        mockStorage,\n        mockAuthConfig,\n      );\n\n      expect(ServerAuthenticationResolver.build).toHaveBeenCalledWith(\n        {\n          ...mockAuthConfig,\n          oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,\n        },\n        mockStorage,\n        undefined,\n      );\n      expect(result).toEqual(mockTokens);\n    });\n  });\n\n  describe(\"isLoggedIn\", () => {\n    it(\"should return true if id_token is in storage\", () => {\n      vi.mocked(mockStorage.get).mockReturnValue(\"mockIdToken\");\n\n      const result = isLoggedIn(mockStorage);\n\n      expect(result).toBe(true);\n    });\n\n    it(\"should return false if id_token is not in storage\", () => {\n      vi.mocked(mockStorage.get).mockReturnValue(null);\n\n      const result = isLoggedIn(mockStorage);\n\n      expect(result).toBe(false);\n    });\n  });\n\n  describe(\"buildLoginUrl\", () => {\n    it(\"should generate a login URL with provided config\", async () => {\n      const state = \"mockState\";\n      const scopes = [\"openid\", \"profile\"];\n      const pkceProducer = new StubPKCEProducer();\n\n      const authInitiator = new GenericAuthenticationInitiator({\n        ...mockAuthConfig,\n        state,\n        scopes,\n        oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,\n        pkceConsumer: pkceProducer,\n      });\n      vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);\n      vi.mocked(authInitiator.signIn).mockResolvedValue(\n        new URL(\"http://mockLoginUrl\"),\n      );\n\n      const result = await buildLoginUrl(\n        {\n          ...mockAuthConfig,\n          state,\n          scopes,\n        },\n        mockStorage,\n      );\n\n      expect(result.toString()).toBe(\"http://mockloginurl/\");\n      expect(GenericAuthenticationInitiator).toHaveBeenCalledWith({\n        ...mockAuthConfig,\n        state,\n        scopes,\n        oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,\n        pkceConsumer: pkceProducer,\n      });\n    });\n\n    it(\"should generate a login URL with default state and scopes\", async () => {\n      const authInitiator = new GenericAuthenticationInitiator({\n        ...mockAuthConfig,\n        state: expect.any(String), // state is random if not provided\n        scopes: DEFAULT_SCOPES,\n        oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,\n        pkceConsumer: expect.any(GenericPublicClientPKCEProducer),\n      });\n      vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);\n      vi.mocked(authInitiator.signIn).mockResolvedValue(\n        new URL(\"http://mockLoginUrl\"),\n      );\n\n      const result = await buildLoginUrl(mockAuthConfig, mockStorage);\n\n      expect(result.toString()).toBe(\"http://mockloginurl/\");\n    });\n\n    it(\"should include nonce in the login URL if provided in config\", async () => {\n      const state = \"mockState\";\n      const scopes = [\"openid\", \"profile\"];\n      const nonce = \"mockNonce\";\n      const pkceProducer = new GenericPublicClientPKCEProducer(mockStorage);\n\n      const authInitiator = new GenericAuthenticationInitiator({\n        ...mockAuthConfig,\n        state,\n        scopes,\n        oauthServer: mockAuthConfig.oauthServer ?? DEFAULT_AUTH_SERVER,\n        pkceConsumer: pkceProducer,\n        nonce,\n      });\n      vi.mocked(GenericAuthenticationInitiator).mockReturnValue(authInitiator);\n      vi.mocked(authInitiator.signIn).mockResolvedValue(\n        new URL(`http://mockLoginUrl?nonce=${nonce}`),\n      );\n\n      await buildLoginUrl(\n        {\n          ...mockAuthConfig,\n          state,\n          scopes,\n          nonce,\n        },\n        mockStorage,\n      );\n\n      expect(GenericAuthenticationInitiator).toHaveBeenCalledWith(expect.objectContaining({\n        nonce,\n      }));\n    });\n  });\n});\n"]}

package/dist/test/unit/server/session.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.test.d.ts.map

package/dist/test/unit/server/session.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/server/session.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/server/session.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { parseJWT } from "oslo/jwt";
+import { getUser } from "@/shared/lib/session.js";
+import { retrieveTokens } from "@/shared/lib/util.js";
+vi.mock("@/shared/lib/util.js");
+vi.mock("oslo/jwt");
+describe("getUser", () => {
+    const mockStorage = {};
+    const mockUser = {
+        id: "mockUserId",
+        email: "user@example.com",
+    };
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it("should return null if no tokens are retrieved", async () => {
+        vi.mocked(retrieveTokens).mockReturnValue(null);
+        const result = await getUser(mockStorage);
+        expect(result).toBeNull();
+        expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);
+    });
+    it("should return a User if tokens are retrieved and parsed successfully", async () => {
+        const mockTokens = { id_token: "mockIdToken" };
+        vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+        vi.mocked(parseJWT).mockReturnValue({ payload: mockUser });
+        const result = await getUser(mockStorage);
+        expect(result).toEqual(mockUser);
+        expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);
+        expect(parseJWT).toHaveBeenCalledWith(mockTokens.id_token);
+    });
+    it("should return null if parsing the ID token fails", async () => {
+        const mockTokens = { id_token: "mockIdToken" };
+        vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+        vi.mocked(parseJWT).mockReturnValue(null); // Simulate parse failure
+        const result = await getUser(mockStorage);
+        expect(result).toBeNull();
+        expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);
+        expect(parseJWT).toHaveBeenCalledWith(mockTokens.id_token);
+    });
+});
+//# sourceMappingURL=session.test.js.map

package/dist/test/unit/server/session.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.test.js","sourceRoot":"","sources":["../../../../test/unit/server/session.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAChC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAEpB,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,MAAM,WAAW,GAAG,EAAiB,CAAC;IACtC,MAAM,QAAQ,GAAS;QACrB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,kBAAkB;KAClB,CAAC;IAEV,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,aAAa,EAA2B,CAAC;QACxE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAS,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,aAAa,EAA2B,CAAC;QACxE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB;QAEpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport type { JWT } from \"oslo/jwt\";\nimport { parseJWT } from \"oslo/jwt\";\nimport { getUser } from \"@/shared/lib/session.js\";\nimport { retrieveTokens } from \"@/shared/lib/util.js\";\nimport type { AuthStorage, OIDCTokenResponseBody, User } from \"@/types.js\";\n\nvi.mock(\"@/shared/lib/util.js\");\nvi.mock(\"oslo/jwt\");\n\ndescribe(\"getUser\", () => {\n  const mockStorage = {} as AuthStorage;\n  const mockUser: User = {\n    id: \"mockUserId\",\n    email: \"user@example.com\",\n  } as User;\n\n  beforeEach(() => {\n    vi.clearAllMocks();\n  });\n\n  it(\"should return null if no tokens are retrieved\", async () => {\n    vi.mocked(retrieveTokens).mockReturnValue(null);\n\n    const result = await getUser(mockStorage);\n    expect(result).toBeNull();\n    expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);\n  });\n\n  it(\"should return a User if tokens are retrieved and parsed successfully\", async () => {\n    const mockTokens = { id_token: \"mockIdToken\" } as OIDCTokenResponseBody;\n    vi.mocked(retrieveTokens).mockReturnValue(mockTokens);\n    vi.mocked(parseJWT).mockReturnValue({ payload: mockUser } as JWT);\n\n    const result = await getUser(mockStorage);\n    expect(result).toEqual(mockUser);\n    expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);\n    expect(parseJWT).toHaveBeenCalledWith(mockTokens.id_token);\n  });\n\n  it(\"should return null if parsing the ID token fails\", async () => {\n    const mockTokens = { id_token: \"mockIdToken\" } as OIDCTokenResponseBody;\n    vi.mocked(retrieveTokens).mockReturnValue(mockTokens);\n    vi.mocked(parseJWT).mockReturnValue(null); // Simulate parse failure\n\n    const result = await getUser(mockStorage);\n    expect(result).toBeNull();\n    expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);\n    expect(parseJWT).toHaveBeenCalledWith(mockTokens.id_token);\n  });\n});\n"]}

package/dist/test/unit/services/AuthenticationService.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=AuthenticationService.test.d.ts.map

package/dist/test/unit/services/AuthenticationService.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationService.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/services/AuthenticationService.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/services/AuthenticationService.test.js

@@ -0,0 +1,104 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { BrowserAuthenticationInitiator, BrowserAuthenticationService, GenericAuthenticationInitiator, } from "@/services/AuthenticationService.js";
+import { generateOauthLoginUrl, generateOauthLogoutUrl, exchangeTokens, retrieveTokens, storeTokens, } from "@/shared/lib/util.js";
+import { LocalStorageAdapter } from "@/browser/storage.js";
+import { BrowserPublicClientPKCEProducer } from "@/services/PKCE.js";
+vi.mock("@/shared/lib/util.js", () => ({
+    getEndpointsWithOverrides: async () => ({
+        auth: "auth-endpoint",
+    }),
+    exchangeTokens: vi.fn(),
+    retrieveTokens: vi.fn(),
+    storeTokens: vi.fn(),
+    generateOauthLoginUrl: vi.fn(),
+    generateOauthLogoutUrl: vi.fn(),
+    clearTokens: vi.fn(),
+    clearUser: vi.fn(),
+}));
+vi.mock("@/browser/storage");
+vi.mock("@/services/PKCE");
+describe("Authentication Services", () => {
+    const mockConfig = {
+        clientId: "mockClientId",
+        redirectUrl: "http://localhost/redirect",
+        state: "mockState",
+        scopes: ["openid", "profile"],
+        displayMode: "redirect",
+        oauthServer: "http://mockOauthServer",
+    };
+    describe("BrowserAuthenticationInitiator", () => {
+        it("should generate a login URL", async () => {
+            const initiator = new BrowserAuthenticationInitiator({
+                ...mockConfig,
+                pkceConsumer: {},
+            });
+            vi.mocked(generateOauthLoginUrl).mockResolvedValue(new URL("http://mockLoginUrl"));
+            const url = await initiator.signIn(null);
+            expect(url.toString()).toBe("http://mockloginurl/");
+        });
+        it("should generate a logout URL", async () => {
+            const initiator = new BrowserAuthenticationInitiator({
+                ...mockConfig,
+                pkceConsumer: {},
+            });
+            vi.mocked(generateOauthLogoutUrl).mockResolvedValue(new URL("http://mocklogouturl"));
+            const url = await initiator.signOut();
+            expect(url.toString()).toBe("http://mocklogouturl/");
+        });
+    });
+    describe("GenericAuthenticationInitiator", () => {
+        it("should generate a login URL", async () => {
+            const initiator = new GenericAuthenticationInitiator({
+                ...mockConfig,
+                pkceConsumer: {},
+            });
+            vi.mocked(generateOauthLoginUrl).mockResolvedValue(new URL("http://mockloginurl"));
+            const url = await initiator.signIn();
+            expect(url.toString()).toBe("http://mockloginurl/");
+        });
+        it("should generate a logout URL", async () => {
+            const initiator = new GenericAuthenticationInitiator({
+                ...mockConfig,
+                pkceConsumer: {},
+            });
+            vi.mocked(generateOauthLogoutUrl).mockResolvedValue(new URL("http://mocklogouturl"));
+            const url = await initiator.signOut();
+            expect(url.toString()).toBe("http://mocklogouturl/");
+        });
+    });
+    describe("BrowserAuthenticationService", () => {
+        let service;
+        const mockTokens = {
+            id_token: "mockIdToken",
+            access_token: "mockAccessToken",
+            refresh_token: "mockRefreshToken",
+        };
+        beforeEach(async () => {
+            service = await BrowserAuthenticationService.build({
+                ...mockConfig,
+            });
+            vi.mocked(exchangeTokens).mockResolvedValue(mockTokens);
+            vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+        });
+        it("should exchange auth code for tokens and store them", async () => {
+            const code = "mockCode";
+            const state = "mockState";
+            vi.mocked(BrowserPublicClientPKCEProducer.prototype.getCodeVerifier).mockResolvedValue("dummy-verifier");
+            const tokens = await service.tokenExchange(code, state);
+            expect(storeTokens).toHaveBeenCalledWith(expect.any(LocalStorageAdapter), mockTokens);
+            expect(tokens).toEqual(mockTokens);
+        });
+        it("should retrieve session data from local storage", async () => {
+            const sessionData = {
+                authenticated: true,
+                idToken: mockTokens.id_token,
+                accessToken: mockTokens.access_token,
+                refreshToken: mockTokens.refresh_token,
+            };
+            const result = await service.getSessionData();
+            expect(retrieveTokens).toHaveBeenCalledWith(expect.any(LocalStorageAdapter));
+            expect(result).toEqual(sessionData);
+        });
+    });
+});
+//# sourceMappingURL=AuthenticationService.test.js.map

package/dist/test/unit/services/AuthenticationService.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationService.test.js","sourceRoot":"","sources":["../../../../test/unit/services/AuthenticationService.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAIrE,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,yBAAyB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,EAAE,eAAe;KACtB,CAAC;IACF,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7B,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAE3B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,UAAU,GAAG;QACjB,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,WAAW,EAAE,UAAmB;QAChC,WAAW,EAAE,wBAAwB;KACtC,CAAC;IAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,8BAA8B,CAAC;gBACnD,GAAG,UAAU;gBACb,YAAY,EAAE,EAAkB;aACjC,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAChD,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAC/B,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAEzC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,SAAS,GAAG,IAAI,8BAA8B,CAAC;gBACnD,GAAG,UAAU;gBACb,YAAY,EAAE,EAAkB;aACjC,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CACjD,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAChC,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAEtC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,8BAA8B,CAAC;gBACnD,GAAG,UAAU;gBACb,YAAY,EAAE,EAAkB;aACjC,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAChD,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAC/B,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;YAErC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,SAAS,GAAG,IAAI,8BAA8B,CAAC;gBACnD,GAAG,UAAU;gBACb,YAAY,EAAE,EAAkB;aACjC,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CACjD,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAChC,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAEtC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,IAAI,OAA+B,CAAC;QACpC,MAAM,UAAU,GAA0B;YACxC,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,iBAAiB;YAC/B,aAAa,EAAE,kBAAkB;SAClC,CAAC;QAEF,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,OAAO,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC;gBACjD,GAAG,UAAU;aACd,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACxD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAI,GAAG,UAAU,CAAC;YACxB,MAAM,KAAK,GAAG,WAAW,CAAC;YAE1B,EAAE,CAAC,MAAM,CACP,+BAA+B,CAAC,SAAS,CAAC,eAAe,CAC1D,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAExD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACtC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAC/B,UAAU,CACX,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,WAAW,GAAgB;gBAC/B,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,UAAU,CAAC,QAAQ;gBAC5B,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,YAAY,EAAE,UAAU,CAAC,aAAa;aACvC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;YAE9C,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAChC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport {\n  BrowserAuthenticationInitiator,\n  BrowserAuthenticationService,\n  GenericAuthenticationInitiator,\n} from \"@/services/AuthenticationService.js\";\nimport {\n  generateOauthLoginUrl,\n  generateOauthLogoutUrl,\n  exchangeTokens,\n  retrieveTokens,\n  storeTokens,\n} from \"@/shared/lib/util.js\";\nimport { LocalStorageAdapter } from \"@/browser/storage.js\";\nimport { BrowserPublicClientPKCEProducer } from \"@/services/PKCE.js\";\nimport type { OIDCTokenResponseBody, SessionData } from \"@/types.js\";\nimport type { AuthenticationResolver, PKCEConsumer } from \"@/services/types.js\";\n\nvi.mock(\"@/shared/lib/util.js\", () => ({\n  getEndpointsWithOverrides: async () => ({\n    auth: \"auth-endpoint\",\n  }),\n  exchangeTokens: vi.fn(),\n  retrieveTokens: vi.fn(),\n  storeTokens: vi.fn(),\n  generateOauthLoginUrl: vi.fn(),\n  generateOauthLogoutUrl: vi.fn(),\n  clearTokens: vi.fn(),\n  clearUser: vi.fn(),\n}));\nvi.mock(\"@/browser/storage\");\nvi.mock(\"@/services/PKCE\");\n\ndescribe(\"Authentication Services\", () => {\n  const mockConfig = {\n    clientId: \"mockClientId\",\n    redirectUrl: \"http://localhost/redirect\",\n    state: \"mockState\",\n    scopes: [\"openid\", \"profile\"],\n    displayMode: \"redirect\" as const,\n    oauthServer: \"http://mockOauthServer\",\n  };\n\n  describe(\"BrowserAuthenticationInitiator\", () => {\n    it(\"should generate a login URL\", async () => {\n      const initiator = new BrowserAuthenticationInitiator({\n        ...mockConfig,\n        pkceConsumer: {} as PKCEConsumer,\n      });\n      vi.mocked(generateOauthLoginUrl).mockResolvedValue(\n        new URL(\"http://mockLoginUrl\"),\n      );\n\n      const url = await initiator.signIn(null);\n\n      expect(url.toString()).toBe(\"http://mockloginurl/\");\n    });\n\n    it(\"should generate a logout URL\", async () => {\n      const initiator = new BrowserAuthenticationInitiator({\n        ...mockConfig,\n        pkceConsumer: {} as PKCEConsumer,\n      });\n      vi.mocked(generateOauthLogoutUrl).mockResolvedValue(\n        new URL(\"http://mocklogouturl\"),\n      );\n\n      const url = await initiator.signOut();\n\n      expect(url.toString()).toBe(\"http://mocklogouturl/\");\n    });\n  });\n\n  describe(\"GenericAuthenticationInitiator\", () => {\n    it(\"should generate a login URL\", async () => {\n      const initiator = new GenericAuthenticationInitiator({\n        ...mockConfig,\n        pkceConsumer: {} as PKCEConsumer,\n      });\n      vi.mocked(generateOauthLoginUrl).mockResolvedValue(\n        new URL(\"http://mockloginurl\"),\n      );\n\n      const url = await initiator.signIn();\n\n      expect(url.toString()).toBe(\"http://mockloginurl/\");\n    });\n\n    it(\"should generate a logout URL\", async () => {\n      const initiator = new GenericAuthenticationInitiator({\n        ...mockConfig,\n        pkceConsumer: {} as PKCEConsumer,\n      });\n      vi.mocked(generateOauthLogoutUrl).mockResolvedValue(\n        new URL(\"http://mocklogouturl\"),\n      );\n\n      const url = await initiator.signOut();\n\n      expect(url.toString()).toBe(\"http://mocklogouturl/\");\n    });\n  });\n\n  describe(\"BrowserAuthenticationService\", () => {\n    let service: AuthenticationResolver;\n    const mockTokens: OIDCTokenResponseBody = {\n      id_token: \"mockIdToken\",\n      access_token: \"mockAccessToken\",\n      refresh_token: \"mockRefreshToken\",\n    };\n\n    beforeEach(async () => {\n      service = await BrowserAuthenticationService.build({\n        ...mockConfig,\n      });\n      vi.mocked(exchangeTokens).mockResolvedValue(mockTokens);\n      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);\n    });\n\n    it(\"should exchange auth code for tokens and store them\", async () => {\n      const code = \"mockCode\";\n      const state = \"mockState\";\n\n      vi.mocked(\n        BrowserPublicClientPKCEProducer.prototype.getCodeVerifier,\n      ).mockResolvedValue(\"dummy-verifier\");\n\n      const tokens = await service.tokenExchange(code, state);\n\n      expect(storeTokens).toHaveBeenCalledWith(\n        expect.any(LocalStorageAdapter),\n        mockTokens,\n      );\n      expect(tokens).toEqual(mockTokens);\n    });\n\n    it(\"should retrieve session data from local storage\", async () => {\n      const sessionData: SessionData = {\n        authenticated: true,\n        idToken: mockTokens.id_token,\n        accessToken: mockTokens.access_token,\n        refreshToken: mockTokens.refresh_token,\n      };\n      const result = await service.getSessionData();\n\n      expect(retrieveTokens).toHaveBeenCalledWith(\n        expect.any(LocalStorageAdapter),\n      );\n      expect(result).toEqual(sessionData);\n    });\n  });\n});\n"]}

package/dist/test/unit/services/ServerAuthenticationResolver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ServerAuthenticationResolver.test.d.ts.map

package/dist/test/unit/services/ServerAuthenticationResolver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerAuthenticationResolver.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/services/ServerAuthenticationResolver.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/services/ServerAuthenticationResolver.test.js

@@ -0,0 +1,74 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { ServerAuthenticationResolver } from "@/server/ServerAuthenticationResolver.js";
+import { exchangeTokens, getEndpointsWithOverrides, retrieveTokens, storeTokens, } from "@/shared/lib/util.js";
+import { GenericPublicClientPKCEProducer } from "@/services/PKCE.js";
+vi.mock("oslo/oauth2");
+vi.mock("@/services/PKCE");
+vi.mock("@/shared/lib/util.js");
+describe("ServerAuthenticationResolver", () => {
+    const mockAuthConfig = {
+        clientId: "mockClientId",
+        oauthServer: "http://mockOauthServer",
+        redirectUrl: "http://localhost/redirect",
+        challengeUrl: "http://localhost/challenge",
+    };
+    const mockEndpoints = {
+        auth: "http://mockAuthEndpoint",
+        token: "http://mockTokenEndpoint",
+        jwks: "http://mockJwksEndpoint",
+        userinfo: "http://mockUserinfoEndpoint",
+    };
+    const mockTokens = {
+        id_token: "mockIdToken",
+        access_token: "mockAccessToken",
+        refresh_token: "mockRefreshToken",
+    };
+    const mockStorage = {};
+    let resolver;
+    beforeEach(async () => {
+        vi.clearAllMocks();
+        vi.mocked(getEndpointsWithOverrides).mockResolvedValue(mockEndpoints);
+        resolver = await ServerAuthenticationResolver.build(mockAuthConfig, mockStorage);
+    });
+    describe("init", () => {
+        it("should initialize OAuth2 client with resolved endpoints", async () => {
+            expect(getEndpointsWithOverrides).toHaveBeenCalledWith(mockAuthConfig.oauthServer, undefined);
+        });
+    });
+    describe("tokenExchange", () => {
+        it("should exchange auth code for tokens and store them", async () => {
+            const code = "mockCode";
+            const state = "mockState";
+            const codeVerifier = "mockCodeVerifier";
+            vi.mocked(GenericPublicClientPKCEProducer.prototype.getCodeVerifier).mockResolvedValue(codeVerifier);
+            vi.mocked(exchangeTokens).mockResolvedValue(mockTokens);
+            const tokens = await resolver.tokenExchange(code, state);
+            expect(storeTokens).toHaveBeenCalledWith(mockStorage, mockTokens);
+            expect(tokens).toEqual(mockTokens);
+        });
+        it("should throw an error if code verifier is not found", async () => {
+            vi.mocked(GenericPublicClientPKCEProducer.prototype.getCodeVerifier).mockResolvedValue(null);
+            await expect(resolver.tokenExchange("mockCode", "mockState")).rejects.toThrow("Code verifier not found in storage");
+        });
+    });
+    describe("getSessionData", () => {
+        it("should retrieve session data from storage", async () => {
+            vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+            const sessionData = {
+                authenticated: true,
+                idToken: mockTokens.id_token,
+                accessToken: mockTokens.access_token,
+                refreshToken: mockTokens.refresh_token,
+            };
+            const result = await resolver.getSessionData();
+            expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);
+            expect(result).toEqual(sessionData);
+        });
+        it("should return null if no tokens are found in storage", async () => {
+            vi.mocked(retrieveTokens).mockReturnValue(null);
+            const result = await resolver.getSessionData();
+            expect(result).toBeNull();
+        });
+    });
+});
+//# sourceMappingURL=ServerAuthenticationResolver.test.js.map

package/dist/test/unit/services/ServerAuthenticationResolver.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerAuthenticationResolver.test.js","sourceRoot":"","sources":["../../../../test/unit/services/ServerAuthenticationResolver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,cAAc,EACd,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAGrE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACvB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC3B,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAEhC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,MAAM,cAAc,GAAe;QACjC,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,2BAA2B;QACxC,YAAY,EAAE,4BAA4B;KAC3C,CAAC;IACF,MAAM,aAAa,GAAc;QAC/B,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,6BAA6B;KACxC,CAAC;IACF,MAAM,UAAU,GAA0B;QACxC,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,iBAAiB;QAC/B,aAAa,EAAE,kBAAkB;KAClC,CAAC;IACF,MAAM,WAAW,GAAG,EAAiB,CAAC;IAEtC,IAAI,QAAgC,CAAC;IAErC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACtE,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CACjD,cAAc,EACd,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,CAAC,yBAAyB,CAAC,CAAC,oBAAoB,CACpD,cAAc,CAAC,WAAW,EAC1B,SAAS,CACV,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAI,GAAG,UAAU,CAAC;YACxB,MAAM,KAAK,GAAG,WAAW,CAAC;YAC1B,MAAM,YAAY,GAAG,kBAAkB,CAAC;YACxC,EAAE,CAAC,MAAM,CACP,+BAA+B,CAAC,SAAS,CAAC,eAAe,CAC1D,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAClC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEzD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,EAAE,CAAC,MAAM,CACP,+BAA+B,CAAC,SAAS,CAAC,eAAe,CAC1D,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE1B,MAAM,MAAM,CACV,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAChD,CAAC,OAAO,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAEtD,MAAM,WAAW,GAAgB;gBAC/B,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,UAAU,CAAC,QAAQ;gBAC5B,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,YAAY,EAAE,UAAU,CAAC,aAAa;aACvC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAE/C,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAE/C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { ServerAuthenticationResolver } from \"@/server/ServerAuthenticationResolver.js\";\nimport {\n  exchangeTokens,\n  getEndpointsWithOverrides,\n  retrieveTokens,\n  storeTokens,\n} from \"@/shared/lib/util.js\";\nimport type { Endpoints, OIDCTokenResponseBody, SessionData, AuthStorage } from \"@/types.js\";\nimport type { AuthConfig } from \"@/server/config.js\";\nimport { GenericPublicClientPKCEProducer } from \"@/services/PKCE.js\";\nimport type { AuthenticationResolver } from '@/services/types.js';\n\nvi.mock(\"oslo/oauth2\");\nvi.mock(\"@/services/PKCE\");\nvi.mock(\"@/shared/lib/util.js\");\n\ndescribe(\"ServerAuthenticationResolver\", () => {\n  const mockAuthConfig: AuthConfig = {\n    clientId: \"mockClientId\",\n    oauthServer: \"http://mockOauthServer\",\n    redirectUrl: \"http://localhost/redirect\",\n    challengeUrl: \"http://localhost/challenge\",\n  };\n  const mockEndpoints: Endpoints = {\n    auth: \"http://mockAuthEndpoint\",\n    token: \"http://mockTokenEndpoint\",\n    jwks: \"http://mockJwksEndpoint\",\n    userinfo: \"http://mockUserinfoEndpoint\",\n  };\n  const mockTokens: OIDCTokenResponseBody = {\n    id_token: \"mockIdToken\",\n    access_token: \"mockAccessToken\",\n    refresh_token: \"mockRefreshToken\",\n  };\n  const mockStorage = {} as AuthStorage;\n\n  let resolver: AuthenticationResolver;\n\n  beforeEach(async () => {\n    vi.clearAllMocks();\n    vi.mocked(getEndpointsWithOverrides).mockResolvedValue(mockEndpoints);\n    resolver = await ServerAuthenticationResolver.build(\n      mockAuthConfig,\n      mockStorage,\n    );\n  });\n\n  describe(\"init\", () => {\n    it(\"should initialize OAuth2 client with resolved endpoints\", async () => {\n      expect(getEndpointsWithOverrides).toHaveBeenCalledWith(\n        mockAuthConfig.oauthServer,\n        undefined,\n      );\n    });\n  });\n\n  describe(\"tokenExchange\", () => {\n    it(\"should exchange auth code for tokens and store them\", async () => {\n      const code = \"mockCode\";\n      const state = \"mockState\";\n      const codeVerifier = \"mockCodeVerifier\";\n      vi.mocked(\n        GenericPublicClientPKCEProducer.prototype.getCodeVerifier,\n      ).mockResolvedValue(codeVerifier);\n      vi.mocked(exchangeTokens).mockResolvedValue(mockTokens);\n\n      const tokens = await resolver.tokenExchange(code, state);\n\n      expect(storeTokens).toHaveBeenCalledWith(mockStorage, mockTokens);\n      expect(tokens).toEqual(mockTokens);\n    });\n\n    it(\"should throw an error if code verifier is not found\", async () => {\n      vi.mocked(\n        GenericPublicClientPKCEProducer.prototype.getCodeVerifier,\n      ).mockResolvedValue(null);\n\n      await expect(\n        resolver.tokenExchange(\"mockCode\", \"mockState\"),\n      ).rejects.toThrow(\"Code verifier not found in storage\");\n    });\n  });\n\n  describe(\"getSessionData\", () => {\n    it(\"should retrieve session data from storage\", async () => {\n      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);\n\n      const sessionData: SessionData = {\n        authenticated: true,\n        idToken: mockTokens.id_token,\n        accessToken: mockTokens.access_token,\n        refreshToken: mockTokens.refresh_token,\n      };\n\n      const result = await resolver.getSessionData();\n\n      expect(retrieveTokens).toHaveBeenCalledWith(mockStorage);\n      expect(result).toEqual(sessionData);\n    });\n\n    it(\"should return null if no tokens are found in storage\", async () => {\n      vi.mocked(retrieveTokens).mockReturnValue(null);\n\n      const result = await resolver.getSessionData();\n\n      expect(result).toBeNull();\n    });\n  });\n});\n"]}

package/dist/test/unit/shared/GenericAuthenticationRefresher.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=GenericAuthenticationRefresher.test.d.ts.map

package/dist/test/unit/shared/GenericAuthenticationRefresher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/shared/GenericAuthenticationRefresher.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/shared/GenericAuthenticationRefresher.test.js

@@ -0,0 +1,61 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { GenericAuthenticationRefresher } from "@/shared/lib/GenericAuthenticationRefresher.js";
+import { getEndpointsWithOverrides, retrieveTokens, storeTokens, } from "@/shared/lib/util.js";
+import { OAuth2Client } from "oslo/oauth2";
+vi.mock("@/shared/lib/util.js");
+vi.mock("oslo/oauth2");
+describe("GenericAuthenticationRefresher", () => {
+    const mockAuthConfig = {
+        clientId: "mockClientId",
+        oauthServer: "http://mockOauthServer",
+        redirectUrl: "http://localhost/redirect",
+    };
+    const mockEndpoints = {
+        auth: "http://mockAuthEndpoint",
+        token: "http://mockTokenEndpoint",
+        jwks: "http://mockJwksEndpoint",
+        userinfo: "http://mockUserinfoEndpoint",
+    };
+    const mockTokens = {
+        id_token: "mockIdToken",
+        access_token: "mockAccessToken",
+        refresh_token: "mockRefreshToken",
+    };
+    const mockStorage = {};
+    let refresher;
+    beforeEach(async () => {
+        vi.clearAllMocks();
+        vi.mocked(getEndpointsWithOverrides).mockResolvedValue(mockEndpoints);
+        refresher = await GenericAuthenticationRefresher.build(mockAuthConfig, mockStorage);
+    });
+    describe("init", () => {
+        it("should initialize OAuth2 client with resolved endpoints", async () => {
+            expect(getEndpointsWithOverrides).toHaveBeenCalledWith(mockAuthConfig.oauthServer, undefined);
+            expect(refresher["endpoints"]).toEqual(mockEndpoints);
+            expect(refresher["oauth2client"]).toBeInstanceOf(OAuth2Client);
+        });
+    });
+    describe("refreshTokens", () => {
+        it("should refresh tokens and store them", async () => {
+            vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+            const refreshedTokens = {
+                id_token: "newIdToken",
+                access_token: "newAccessToken",
+                refresh_token: "newRefreshToken",
+            };
+            vi.mocked(OAuth2Client.prototype.refreshAccessToken).mockResolvedValue(refreshedTokens);
+            const result = await refresher.refreshTokens();
+            expect(refresher["oauth2client"]?.refreshAccessToken).toHaveBeenCalledWith(mockTokens.refresh_token);
+            expect(storeTokens).toHaveBeenCalledWith(mockStorage, refreshedTokens);
+            expect(result).toEqual(mockTokens);
+        });
+        it("should throw an error if no refresh token is available", async () => {
+            vi.mocked(retrieveTokens).mockReturnValue({
+                ...mockTokens,
+                refresh_token: undefined,
+            });
+            await expect(refresher.refreshTokens()).rejects.toThrow("No refresh token available");
+        });
+    });
+});
+//# sourceMappingURL=GenericAuthenticationRefresher.test.js.map

package/dist/test/unit/shared/GenericAuthenticationRefresher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher.test.js","sourceRoot":"","sources":["../../../../test/unit/shared/GenericAuthenticationRefresher.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAChC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAEvB,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,cAAc,GAAe;QACjC,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,2BAA2B;KACzC,CAAC;IACF,MAAM,aAAa,GAAc;QAC/B,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,6BAA6B;KACxC,CAAC;IACF,MAAM,UAAU,GAA0B;QACxC,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,iBAAiB;QAC/B,aAAa,EAAE,kBAAkB;KAClC,CAAC;IACF,MAAM,WAAW,GAAG,EAAiB,CAAC;IAEtC,IAAI,SAAyC,CAAC;IAE9C,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACtE,SAAS,GAAG,MAAM,8BAA8B,CAAC,KAAK,CACpD,cAAc,EACd,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,CAAC,yBAAyB,CAAC,CAAC,oBAAoB,CACpD,cAAc,CAAC,WAAW,EAC1B,SAAS,CACV,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,eAAe,GAA0B;gBAC7C,QAAQ,EAAE,YAAY;gBACtB,YAAY,EAAE,gBAAgB;gBAC9B,aAAa,EAAE,iBAAiB;aACjC,CAAC;YAEF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CACpE,eAAe,CAChB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAE/C,MAAM,CACJ,SAAS,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAC9C,CAAC,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC;gBACxC,GAAG,UAAU;gBACb,aAAa,EAAE,SAAS;aACzB,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACrD,4BAA4B,CAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { GenericAuthenticationRefresher } from \"@/shared/lib/GenericAuthenticationRefresher.js\";\nimport {\n  getEndpointsWithOverrides,\n  retrieveTokens,\n  storeTokens,\n} from \"@/shared/lib/util.js\";\nimport type { Endpoints, OIDCTokenResponseBody, AuthStorage} from \"@/types.js\";\nimport { OAuth2Client } from \"oslo/oauth2\";\nimport type { AuthConfig } from \"@/server/config.js\";\n\nvi.mock(\"@/shared/lib/util.js\");\nvi.mock(\"oslo/oauth2\");\n\ndescribe(\"GenericAuthenticationRefresher\", () => {\n  const mockAuthConfig: AuthConfig = {\n    clientId: \"mockClientId\",\n    oauthServer: \"http://mockOauthServer\",\n    redirectUrl: \"http://localhost/redirect\",\n  };\n  const mockEndpoints: Endpoints = {\n    auth: \"http://mockAuthEndpoint\",\n    token: \"http://mockTokenEndpoint\",\n    jwks: \"http://mockJwksEndpoint\",\n    userinfo: \"http://mockUserinfoEndpoint\",\n  };\n  const mockTokens: OIDCTokenResponseBody = {\n    id_token: \"mockIdToken\",\n    access_token: \"mockAccessToken\",\n    refresh_token: \"mockRefreshToken\",\n  };\n  const mockStorage = {} as AuthStorage;\n\n  let refresher: GenericAuthenticationRefresher;\n\n  beforeEach(async () => {\n    vi.clearAllMocks();\n    vi.mocked(getEndpointsWithOverrides).mockResolvedValue(mockEndpoints);\n    refresher = await GenericAuthenticationRefresher.build(\n      mockAuthConfig,\n      mockStorage,\n    );\n  });\n\n  describe(\"init\", () => {\n    it(\"should initialize OAuth2 client with resolved endpoints\", async () => {\n      expect(getEndpointsWithOverrides).toHaveBeenCalledWith(\n        mockAuthConfig.oauthServer,\n        undefined,\n      );\n      expect(refresher[\"endpoints\"]).toEqual(mockEndpoints);\n      expect(refresher[\"oauth2client\"]).toBeInstanceOf(OAuth2Client);\n    });\n  });\n\n  describe(\"refreshTokens\", () => {\n    it(\"should refresh tokens and store them\", async () => {\n      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);\n      const refreshedTokens: OIDCTokenResponseBody = {\n        id_token: \"newIdToken\",\n        access_token: \"newAccessToken\",\n        refresh_token: \"newRefreshToken\",\n      };\n\n      vi.mocked(OAuth2Client.prototype.refreshAccessToken).mockResolvedValue(\n        refreshedTokens,\n      );\n\n      const result = await refresher.refreshTokens();\n\n      expect(\n        refresher[\"oauth2client\"]?.refreshAccessToken,\n      ).toHaveBeenCalledWith(mockTokens.refresh_token);\n      expect(storeTokens).toHaveBeenCalledWith(mockStorage, refreshedTokens);\n      expect(result).toEqual(mockTokens);\n    });\n\n    it(\"should throw an error if no refresh token is available\", async () => {\n      vi.mocked(retrieveTokens).mockReturnValue({\n        ...mockTokens,\n        refresh_token: undefined,\n      });\n\n      await expect(refresher.refreshTokens()).rejects.toThrow(\n        \"No refresh token available\",\n      );\n    });\n  });\n});\n"]}

package/dist/test/unit/shared/UserSession.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserSession.test.d.ts.map

package/dist/test/unit/shared/UserSession.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserSession.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/shared/UserSession.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/shared/UserSession.test.js

@@ -0,0 +1,37 @@
+import { describe, it, expect } from "vitest";
+import { GenericUserSession } from "@/shared/lib/UserSession.js";
+const mockUser = {
+    id: "user123",
+    name: "John Doe",
+    email: "john@example.com",
+    picture: "https://example.com/john.jpg",
+    forwardedTokens: null,
+};
+let storage = {};
+class TestStorage {
+    get(key) {
+        return storage[key] ?? null;
+    }
+    set(key, value) {
+        storage[key] = value;
+    }
+}
+describe("UserSession", () => {
+    beforeEach(() => {
+        storage = {}; // clear storage
+    });
+    describe("GenericUserSession", () => {
+        it("should get the user from session", () => {
+            const userSession = new GenericUserSession(new TestStorage());
+            userSession.set(mockUser);
+            const user = userSession.get();
+            expect(user).toEqual(mockUser);
+        });
+        it("should return null if user it not found", () => {
+            const userSession = new GenericUserSession(new TestStorage());
+            const user = userSession.get();
+            expect(user).toBeNull();
+        });
+    });
+});
+//# sourceMappingURL=UserSession.test.js.map

package/dist/test/unit/shared/UserSession.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserSession.test.js","sourceRoot":"","sources":["../../../../test/unit/shared/UserSession.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,QAAQ,GAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,8BAA8B;IACvC,eAAe,EAAE,IAAI;CACH,CAAC;AAErB,IAAI,OAAO,GAA2B,EAAE,CAAC;AACzC,MAAM,WAAW;IACf,GAAG,CAAC,GAAW;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IACD,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;CACF;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,CAAC,gBAAgB;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;YAC9D,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect } from \"vitest\";\nimport { GenericUserSession } from \"@/shared/lib/UserSession.js\";\nimport type { AuthStorage, User } from \"@/types.ts\";\n\nconst mockUser: User = {\n  id: \"user123\",\n  name: \"John Doe\",\n  email: \"john@example.com\",\n  picture: \"https://example.com/john.jpg\",\n  forwardedTokens: null,\n} as unknown as User;\n\nlet storage: Record<string, string> = {};\nclass TestStorage implements AuthStorage {\n  get(key: string): string | null {\n    return storage[key] ?? null;\n  }\n  set(key: string, value: string): void {\n    storage[key] = value;\n  }\n}\n\ndescribe(\"UserSession\", () => {\n  beforeEach(() => {\n    storage = {}; // clear storage\n  });\n\n  describe(\"GenericUserSession\", () => {\n    it(\"should get the user from session\", () => {\n      const userSession = new GenericUserSession(new TestStorage());\n      userSession.set(mockUser);\n      const user = userSession.get();\n      expect(user).toEqual(mockUser);\n    });\n\n    it(\"should return null if user it not found\", () => {\n      const userSession = new GenericUserSession(new TestStorage());\n      const user = userSession.get();\n      expect(user).toBeNull();\n    });\n  });\n});\n"]}

package/dist/test/unit/shared/components/CivicAuthIframeContainer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CivicAuthIframeContainer.test.d.ts.map

package/dist/test/unit/shared/components/CivicAuthIframeContainer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CivicAuthIframeContainer.test.d.ts","sourceRoot":"","sources":["../../../../../test/unit/shared/components/CivicAuthIframeContainer.test.tsx"],"names":[],"mappings":""}