@civic/auth 0.4.3 → 0.4.4-alpha.0

package/dist/cjs/shared/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearTokens = exports.BrowserCookieStorage = exports.printVersion = exports.getVersion = exports.VERSION = void 0;
+const version_js_1 = require("./version.js");
+Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return version_js_1.VERSION; } });
+let versionPrinted = false;
+const getVersion = () => version_js_1.VERSION;
+exports.getVersion = getVersion;
+// print the version to the browser
+const printVersion = () => {
+    if (!versionPrinted) {
+        versionPrinted = true;
+        if ((0, exports.getVersion)() &&
+            typeof window !== "undefined" &&
+            typeof document !== "undefined") {
+            console.log((0, exports.getVersion)());
+        }
+    }
+};
+exports.printVersion = printVersion;
+var BrowserCookieStorage_js_1 = require("../shared/lib/BrowserCookieStorage.js");
+Object.defineProperty(exports, "BrowserCookieStorage", { enumerable: true, get: function () { return BrowserCookieStorage_js_1.BrowserCookieStorage; } });
+var util_js_1 = require("../shared/lib/util.js");
+Object.defineProperty(exports, "clearTokens", { enumerable: true, get: function () { return util_js_1.clearTokens; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/shared/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/index.ts"],"names":[],"mappings":";;;AAAA,6CAAuC;AAC9B,wFADA,oBAAO,OACA;AAChB,IAAI,cAAc,GAAG,KAAK,CAAC;AACpB,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,oBAAO,CAAC;AAA3B,QAAA,UAAU,cAAiB;AACxC,mCAAmC;AAC5B,MAAM,YAAY,GAAG,GAAG,EAAE;IAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,CAAC;QACtB,IACE,IAAA,kBAAU,GAAE;YACZ,OAAO,MAAM,KAAK,WAAW;YAC7B,OAAO,QAAQ,KAAK,WAAW,EAC/B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAA,kBAAU,GAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAXW,QAAA,YAAY,gBAWvB;AACF,gFAA4E;AAAnE,+HAAA,oBAAoB,OAAA;AAC7B,gDAAmD;AAA1C,sGAAA,WAAW,OAAA","sourcesContent":["import { VERSION } from \"./version.js\";\nexport { VERSION };\nlet versionPrinted = false;\nexport const getVersion = () => VERSION;\n// print the version to the browser\nexport const printVersion = () => {\n  if (!versionPrinted) {\n    versionPrinted = true;\n    if (\n      getVersion() &&\n      typeof window !== \"undefined\" &&\n      typeof document !== \"undefined\"\n    ) {\n      console.log(getVersion());\n    }\n  }\n};\nexport { BrowserCookieStorage } from \"@/shared/lib/BrowserCookieStorage.js\";\nexport { clearTokens } from \"@/shared/lib/util.js\";\n"]}

package/dist/cjs/shared/lib/AuthenticationRefresherImpl.d.ts

@@ -0,0 +1,14 @@
+import type { AuthConfig } from "../../server/config.js";
+import type { AuthStorage, Endpoints, OIDCTokenResponseBody } from "../../types.js";
+import { GenericAuthenticationRefresher } from "./GenericAuthenticationRefresher.js";
+export declare class AuthenticationRefresherImpl extends GenericAuthenticationRefresher {
+    protected endpointOverrides?: Partial<Endpoints> | undefined;
+    private endpoints;
+    private oauth2client;
+    constructor(authConfig: AuthConfig, storage: AuthStorage, onError: (error: Error) => Promise<void>, endpointOverrides?: Partial<Endpoints> | undefined);
+    init(): Promise<this>;
+    static build(authConfig: AuthConfig, storage: AuthStorage, onError: (error: Error) => Promise<void>, endpointOverrides?: Partial<Endpoints>): Promise<AuthenticationRefresherImpl>;
+    storeTokens(tokenResponseBody: OIDCTokenResponseBody): Promise<void>;
+    refreshAccessToken(): Promise<OIDCTokenResponseBody>;
+}
+//# sourceMappingURL=AuthenticationRefresherImpl.d.ts.map

package/dist/cjs/shared/lib/AuthenticationRefresherImpl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationRefresherImpl.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/AuthenticationRefresherImpl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAMrD,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,qBAAa,2BAA4B,SAAQ,8BAA8B;IAO3E,SAAS,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;IANlD,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,YAAY,CAA2B;gBAE7C,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,EAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,YAAA;IAQ5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;WAmBd,KAAK,CAChB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,EACxC,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GACrC,OAAO,CAAC,2BAA2B,CAAC;IAYjC,WAAW,CAAC,iBAAiB,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpE,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,CAAC;CAsB3D"}

package/dist/cjs/shared/lib/AuthenticationRefresherImpl.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationRefresherImpl = void 0;
+const util_js_1 = require("../../shared/lib/util.js");
+const oauth2_1 = require("oslo/oauth2");
+const GenericAuthenticationRefresher_js_1 = require("./GenericAuthenticationRefresher.js");
+class AuthenticationRefresherImpl extends GenericAuthenticationRefresher_js_1.GenericAuthenticationRefresher {
+    endpointOverrides;
+    endpoints;
+    oauth2client;
+    constructor(authConfig, storage, onError, endpointOverrides) {
+        super(onError);
+        this.endpointOverrides = endpointOverrides;
+        this.authConfig = authConfig;
+        this.storage = storage;
+        this.init();
+    }
+    async init() {
+        if (!this.authConfig)
+            throw new Error("No auth config available");
+        // resolve oauth config
+        this.endpoints = await (0, util_js_1.getEndpointsWithOverrides)(this.oauthServer, this.endpointOverrides);
+        this.oauth2client = new oauth2_1.OAuth2Client(this.authConfig.clientId, this.endpoints.auth, this.endpoints.token, {
+            redirectURI: this.authConfig.redirectUrl,
+        });
+        return this;
+    }
+    static async build(authConfig, storage, onError, endpointOverrides) {
+        const refresher = new AuthenticationRefresherImpl(authConfig, storage, onError, endpointOverrides);
+        await refresher.init();
+        return refresher;
+    }
+    async storeTokens(tokenResponseBody) {
+        if (!this.storage)
+            throw new Error("No storage available");
+        await (0, util_js_1.storeTokens)(this.storage, tokenResponseBody);
+    }
+    async refreshAccessToken() {
+        if (!this.storage)
+            throw new Error("No storage available");
+        const refreshToken = await this.getRefreshToken();
+        console.log("AuthenticationRefresherImpl refreshAccessToken", {
+            refreshToken,
+        });
+        if (!this.oauth2client)
+            this.init();
+        const oauth2Client = this.oauth2client;
+        const tokenResponseBody = await oauth2Client.refreshAccessToken(refreshToken);
+        await (0, util_js_1.validateOauth2Tokens)(tokenResponseBody, this.endpoints, oauth2Client, this.oauthServer);
+        await this.storeTokens(tokenResponseBody);
+        return tokenResponseBody;
+    }
+}
+exports.AuthenticationRefresherImpl = AuthenticationRefresherImpl;
+//# sourceMappingURL=AuthenticationRefresherImpl.js.map

package/dist/cjs/shared/lib/AuthenticationRefresherImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationRefresherImpl.js","sourceRoot":"","sources":["../../../../src/shared/lib/AuthenticationRefresherImpl.ts"],"names":[],"mappings":";;;AACA,kDAI8B;AAE9B,wCAA2C;AAC3C,2FAAqF;AAErF,MAAa,2BAA4B,SAAQ,kEAA8B;IAOjE;IANJ,SAAS,CAAwB;IACjC,YAAY,CAA2B;IAC/C,YACE,UAAsB,EACtB,OAAoB,EACpB,OAAwC,EAC9B,iBAAsC;QAEhD,KAAK,CAAC,OAAO,CAAC,CAAC;QAFL,sBAAiB,GAAjB,iBAAiB,CAAqB;QAGhD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClE,uBAAuB;QACvB,IAAI,CAAC,SAAS,GAAG,MAAM,IAAA,mCAAyB,EAC9C,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,iBAAiB,CACvB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAY,CAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,SAAS,CAAC,IAAI,EACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EACpB;YACE,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;SACzC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,UAAsB,EACtB,OAAoB,EACpB,OAAwC,EACxC,iBAAsC;QAEtC,MAAM,SAAS,GAAG,IAAI,2BAA2B,CAC/C,UAAU,EACV,OAAO,EACP,OAAO,EACP,iBAAiB,CAClB,CAAC;QACF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,iBAAwC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,IAAA,qBAAW,EAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE;YAC5D,YAAY;SACb,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAa,CAAC;QACxC,MAAM,iBAAiB,GACrB,MAAM,YAAY,CAAC,kBAAkB,CACnC,YAAY,CACb,CAAC;QACJ,MAAM,IAAA,8BAAoB,EACxB,iBAAiB,EACjB,IAAI,CAAC,SAAU,EACf,YAAY,EACZ,IAAI,CAAC,WAAW,CACjB,CAAC;QAEF,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAC1C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF;AA9ED,kEA8EC","sourcesContent":["import type { AuthConfig } from \"@/server/config.js\";\nimport {\n  getEndpointsWithOverrides,\n  storeTokens,\n  validateOauth2Tokens,\n} from \"@/shared/lib/util.js\";\nimport type { AuthStorage, Endpoints, OIDCTokenResponseBody } from \"@/types.js\";\nimport { OAuth2Client } from \"oslo/oauth2\";\nimport { GenericAuthenticationRefresher } from \"./GenericAuthenticationRefresher.js\";\n\nexport class AuthenticationRefresherImpl extends GenericAuthenticationRefresher {\n  private endpoints: Endpoints | undefined;\n  private oauth2client: OAuth2Client | undefined;\n  constructor(\n    authConfig: AuthConfig,\n    storage: AuthStorage,\n    onError: (error: Error) => Promise<void>,\n    protected endpointOverrides?: Partial<Endpoints>,\n  ) {\n    super(onError);\n    this.authConfig = authConfig;\n    this.storage = storage;\n    this.init();\n  }\n\n  async init(): Promise<this> {\n    if (!this.authConfig) throw new Error(\"No auth config available\");\n    // resolve oauth config\n    this.endpoints = await getEndpointsWithOverrides(\n      this.oauthServer,\n      this.endpointOverrides,\n    );\n    this.oauth2client = new OAuth2Client(\n      this.authConfig.clientId,\n      this.endpoints.auth,\n      this.endpoints.token,\n      {\n        redirectURI: this.authConfig.redirectUrl,\n      },\n    );\n\n    return this;\n  }\n\n  static async build(\n    authConfig: AuthConfig,\n    storage: AuthStorage,\n    onError: (error: Error) => Promise<void>,\n    endpointOverrides?: Partial<Endpoints>,\n  ): Promise<AuthenticationRefresherImpl> {\n    const refresher = new AuthenticationRefresherImpl(\n      authConfig,\n      storage,\n      onError,\n      endpointOverrides,\n    );\n    await refresher.init();\n\n    return refresher;\n  }\n\n  async storeTokens(tokenResponseBody: OIDCTokenResponseBody): Promise<void> {\n    if (!this.storage) throw new Error(\"No storage available\");\n    await storeTokens(this.storage, tokenResponseBody);\n  }\n\n  async refreshAccessToken(): Promise<OIDCTokenResponseBody> {\n    if (!this.storage) throw new Error(\"No storage available\");\n    const refreshToken = await this.getRefreshToken();\n    console.log(\"AuthenticationRefresherImpl refreshAccessToken\", {\n      refreshToken,\n    });\n    if (!this.oauth2client) this.init();\n    const oauth2Client = this.oauth2client!;\n    const tokenResponseBody =\n      await oauth2Client.refreshAccessToken<OIDCTokenResponseBody>(\n        refreshToken,\n      );\n    await validateOauth2Tokens(\n      tokenResponseBody,\n      this.endpoints!,\n      oauth2Client,\n      this.oauthServer,\n    );\n\n    await this.storeTokens(tokenResponseBody);\n    return tokenResponseBody;\n  }\n}\n"]}

package/dist/cjs/shared/lib/BrowserAuthenticationRefresher.d.ts

@@ -0,0 +1,11 @@
+import { AuthenticationRefresherImpl } from "./AuthenticationRefresherImpl.js";
+import type { AuthStorage, Endpoints } from "../../types.js";
+import type { AuthConfig } from "../../server/config.js";
+export declare class BrowserAuthenticationRefresher extends AuthenticationRefresherImpl {
+    static build(authConfig: AuthConfig, storage: AuthStorage, onError: (error: Error) => Promise<void>, endpointOverrides?: Partial<Endpoints>): Promise<BrowserAuthenticationRefresher>;
+    protected handleError(error: Error): void;
+    protected handleRefresh(): Promise<void>;
+    setupAutorefresh(): Promise<void>;
+    clearAutorefresh(): void;
+}
+//# sourceMappingURL=BrowserAuthenticationRefresher.d.ts.map

package/dist/cjs/shared/lib/BrowserAuthenticationRefresher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthenticationRefresher.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/BrowserAuthenticationRefresher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,qBAAa,8BAA+B,SAAQ,2BAA2B;WACvD,KAAK,CACzB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,EACxC,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GACrC,OAAO,CAAC,8BAA8B,CAAC;IAY1C,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK;cAMlB,aAAa;IAmBvB,gBAAgB;IAuBtB,gBAAgB;CASjB"}

package/dist/cjs/shared/lib/BrowserAuthenticationRefresher.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrowserAuthenticationRefresher = void 0;
+const constants_js_1 = require("../../constants.js");
+const util_js_1 = require("../../shared/lib/util.js");
+const AuthenticationRefresherImpl_js_1 = require("./AuthenticationRefresherImpl.js");
+class BrowserAuthenticationRefresher extends AuthenticationRefresherImpl_js_1.AuthenticationRefresherImpl {
+    static async build(authConfig, storage, onError, endpointOverrides) {
+        const refresher = new BrowserAuthenticationRefresher(authConfig, storage, onError, endpointOverrides);
+        await refresher.init();
+        return refresher;
+    }
+    handleError(error) {
+        console.error("BrowserAuthenticationRefresher: Error", error);
+        this.clearAutorefresh();
+        this.onError(error);
+    }
+    async handleRefresh() {
+        try {
+            // ensure only one refresh is in progress
+            if (localStorage.getItem(constants_js_1.REFRESH_IN_PROGRESS) !== "true") {
+                localStorage.setItem(constants_js_1.REFRESH_IN_PROGRESS, "true");
+                await this.refreshTokens();
+                localStorage.removeItem(constants_js_1.REFRESH_IN_PROGRESS);
+                await this.setupAutorefresh(); // Reset the timeout after successful refresh
+            }
+        }
+        catch (error) {
+            console.error("BrowserAuthenticationRefresher: Failed to refresh tokens:", error);
+            // TODO detect if refresh token has expired and if yes then logout
+            this.handleError(error);
+        }
+    }
+    async setupAutorefresh() {
+        // clear any existing state
+        localStorage.removeItem(constants_js_1.REFRESH_IN_PROGRESS);
+        if (!this.storage)
+            throw new Error("No storage available");
+        // Clear any existing timeout
+        this.clearAutorefresh();
+        // get expires_in
+        const now = Math.floor(Date.now() / 1000);
+        const expiresAt = (await (0, util_js_1.retrieveAccessTokenExpiresAt)(this.storage)) || now + 60;
+        // Calculate time until expiry (subtract 30 seconds as buffer)
+        const bufferTime = 30; // 30 seconds
+        const refreshTime = Math.max(0, expiresAt - bufferTime - now); // handle case were token has expired in the past
+        const refreshTimeout = setTimeout(() => {
+            this.handleRefresh();
+        }, 1000 * refreshTime);
+        localStorage.setItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME, refreshTimeout.toString());
+    }
+    clearAutorefresh() {
+        // use local storage to store the timeout id so that if multiple instances
+        // of the refresher are created they can all clear the same timeout
+        const existingTimeout = localStorage.getItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME);
+        if (existingTimeout) {
+            clearTimeout(existingTimeout);
+            localStorage.removeItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME);
+        }
+    }
+}
+exports.BrowserAuthenticationRefresher = BrowserAuthenticationRefresher;
+//# sourceMappingURL=BrowserAuthenticationRefresher.js.map

package/dist/cjs/shared/lib/BrowserAuthenticationRefresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthenticationRefresher.js","sourceRoot":"","sources":["../../../../src/shared/lib/BrowserAuthenticationRefresher.ts"],"names":[],"mappings":";;;AAAA,iDAA+E;AAC/E,kDAAoE;AACpE,qFAA+E;AAI/E,MAAa,8BAA+B,SAAQ,4DAA2B;IAC7E,MAAM,CAAU,KAAK,CAAC,KAAK,CACzB,UAAsB,EACtB,OAAoB,EACpB,OAAwC,EACxC,iBAAsC;QAEtC,MAAM,SAAS,GAAG,IAAI,8BAA8B,CAClD,UAAU,EACV,OAAO,EACP,OAAO,EACP,iBAAiB,CAClB,CAAC;QACF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAES,WAAW,CAAC,KAAY;QAChC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC;YACH,yCAAyC;YACzC,IAAI,YAAY,CAAC,OAAO,CAAC,kCAAmB,CAAC,KAAK,MAAM,EAAE,CAAC;gBACzD,YAAY,CAAC,OAAO,CAAC,kCAAmB,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3B,YAAY,CAAC,UAAU,CAAC,kCAAmB,CAAC,CAAC;gBAC7C,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,6CAA6C;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,2DAA2D,EAC3D,KAAK,CACN,CAAC;YACF,kEAAkE;YAClE,IAAI,CAAC,WAAW,CAAC,KAAc,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,2BAA2B;QAC3B,YAAY,CAAC,UAAU,CAAC,kCAAmB,CAAC,CAAC;QAE7C,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,6BAA6B;QAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,iBAAiB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GACb,CAAC,MAAM,IAAA,sCAA4B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;QAEjE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,aAAa;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,iDAAiD;QAEhH,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC;QACvB,YAAY,CAAC,OAAO,CAAC,uCAAwB,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB;QACd,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,uCAAwB,CAAC,CAAC;QACvE,IAAI,eAAe,EAAE,CAAC;YACpB,YAAY,CAAC,eAAe,CAAC,CAAC;YAC9B,YAAY,CAAC,UAAU,CAAC,uCAAwB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF;AA3ED,wEA2EC","sourcesContent":["import { AUTOREFRESH_TIMEOUT_NAME, REFRESH_IN_PROGRESS } from \"@/constants.js\";\nimport { retrieveAccessTokenExpiresAt } from \"@/shared/lib/util.js\";\nimport { AuthenticationRefresherImpl } from \"./AuthenticationRefresherImpl.js\";\nimport type { AuthStorage, Endpoints } from \"@/types.js\";\nimport type { AuthConfig } from \"@/server/config.js\";\n\nexport class BrowserAuthenticationRefresher extends AuthenticationRefresherImpl {\n  static override async build(\n    authConfig: AuthConfig,\n    storage: AuthStorage,\n    onError: (error: Error) => Promise<void>,\n    endpointOverrides?: Partial<Endpoints>,\n  ): Promise<BrowserAuthenticationRefresher> {\n    const refresher = new BrowserAuthenticationRefresher(\n      authConfig,\n      storage,\n      onError,\n      endpointOverrides,\n    );\n    await refresher.init();\n\n    return refresher;\n  }\n\n  protected handleError(error: Error) {\n    console.error(\"BrowserAuthenticationRefresher: Error\", error);\n    this.clearAutorefresh();\n    this.onError(error);\n  }\n\n  protected async handleRefresh() {\n    try {\n      // ensure only one refresh is in progress\n      if (localStorage.getItem(REFRESH_IN_PROGRESS) !== \"true\") {\n        localStorage.setItem(REFRESH_IN_PROGRESS, \"true\");\n        await this.refreshTokens();\n        localStorage.removeItem(REFRESH_IN_PROGRESS);\n        await this.setupAutorefresh(); // Reset the timeout after successful refresh\n      }\n    } catch (error) {\n      console.error(\n        \"BrowserAuthenticationRefresher: Failed to refresh tokens:\",\n        error,\n      );\n      // TODO detect if refresh token has expired and if yes then logout\n      this.handleError(error as Error);\n    }\n  }\n\n  async setupAutorefresh() {\n    // clear any existing state\n    localStorage.removeItem(REFRESH_IN_PROGRESS);\n\n    if (!this.storage) throw new Error(\"No storage available\");\n    // Clear any existing timeout\n    this.clearAutorefresh();\n\n    // get expires_in\n    const now = Math.floor(Date.now() / 1000);\n    const expiresAt =\n      (await retrieveAccessTokenExpiresAt(this.storage)) || now + 60;\n\n    // Calculate time until expiry (subtract 30 seconds as buffer)\n    const bufferTime = 30; // 30 seconds\n    const refreshTime = Math.max(0, expiresAt - bufferTime - now); // handle case were token has expired in the past\n\n    const refreshTimeout = setTimeout(() => {\n      this.handleRefresh();\n    }, 1000 * refreshTime);\n    localStorage.setItem(AUTOREFRESH_TIMEOUT_NAME, refreshTimeout.toString());\n  }\n\n  clearAutorefresh() {\n    // use local storage to store the timeout id so that if multiple instances\n    // of the refresher are created they can all clear the same timeout\n    const existingTimeout = localStorage.getItem(AUTOREFRESH_TIMEOUT_NAME);\n    if (existingTimeout) {\n      clearTimeout(existingTimeout);\n      localStorage.removeItem(AUTOREFRESH_TIMEOUT_NAME);\n    }\n  }\n}\n"]}

package/dist/cjs/shared/lib/BrowserCookieStorage.d.ts

@@ -0,0 +1,9 @@
+import { CookieStorage, type CookieStorageSettings } from "../../shared/lib/storage.js";
+import type { CookieConfig } from "./types.js";
+export declare class BrowserCookieStorage extends CookieStorage {
+    constructor(config?: Partial<CookieStorageSettings>);
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, cookieConfigOverride?: Partial<CookieConfig>): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+//# sourceMappingURL=BrowserCookieStorage.d.ts.map

package/dist/cjs/shared/lib/BrowserCookieStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCookieStorage.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/BrowserCookieStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAoC/C,qBAAa,oBAAqB,SAAQ,aAAa;gBACzC,MAAM,GAAE,OAAO,CAAC,qBAAqB,CAAM;IASjD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASxC,GAAG,CACP,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,oBAAoB,GAAE,OAAO,CAAC,YAAY,CAAM,GAC/C,OAAO,CAAC,IAAI,CAAC;IAOV,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGzC"}

package/dist/cjs/shared/lib/BrowserCookieStorage.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrowserCookieStorage = void 0;
+const storage_js_1 = require("../../shared/lib/storage.js");
+// Ensure only runs in a browser environment
+function documentObj() {
+    if (typeof globalThis.window !== "undefined")
+        return globalThis.document;
+    const stack = new Error().stack;
+    throw new Error("Document is not available in this environment:" + JSON.stringify(stack));
+}
+const split = (separator) => (str) => str.split(separator);
+const cookieStringFromSettings = (settings) => {
+    let cookieSettings = "";
+    if (settings.path) {
+        cookieSettings += `Path=${settings.path}; `;
+    }
+    if (settings.expires) {
+        cookieSettings += `Expires=${settings.expires}; `;
+    }
+    if (settings.secure) {
+        cookieSettings += `Secure; `;
+    }
+    if (settings.httpOnly) {
+        // HttpOnly cannot be set from client-side JavaScript, so this clause can be omitted.
+        console.warn("HttpOnly cannot be set on client-side cookies. Ignoring this setting.");
+    }
+    if (settings.sameSite) {
+        cookieSettings += `SameSite=${settings.sameSite}; `;
+    }
+    return cookieSettings.trim();
+};
+class BrowserCookieStorage extends storage_js_1.CookieStorage {
+    constructor(config = {}) {
+        super({
+            // sensible browser defaults
+            secure: false,
+            httpOnly: false,
+            ...config,
+        });
+    }
+    async get(key) {
+        const encodedValue = documentObj()
+            .cookie.split(";")
+            .map(split("="))
+            .find(([cookieKey]) => cookieKey?.trim() === key)?.[1];
+        return encodedValue ? decodeURIComponent(encodedValue) : null;
+    }
+    async set(key, value, cookieConfigOverride = {}) {
+        const encodedValue = encodeURIComponent(value);
+        const settings = { ...this.settings, ...cookieConfigOverride };
+        const cookieString = cookieStringFromSettings(settings);
+        documentObj().cookie = `${key}=${encodedValue}; ${cookieString}`;
+    }
+    async delete(key) {
+        documentObj().cookie = `${key}=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;`;
+    }
+}
+exports.BrowserCookieStorage = BrowserCookieStorage;
+//# sourceMappingURL=BrowserCookieStorage.js.map

package/dist/cjs/shared/lib/BrowserCookieStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCookieStorage.js","sourceRoot":"","sources":["../../../../src/shared/lib/BrowserCookieStorage.ts"],"names":[],"mappings":";;;AAAA,wDAGiC;AAGjC,4CAA4C;AAC5C,SAAS,WAAW;IAClB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC;IAChC,MAAM,IAAI,KAAK,CACb,gDAAgD,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE3E,MAAM,wBAAwB,GAAG,CAAC,QAA+B,EAAU,EAAE;IAC3E,IAAI,cAAc,GAAG,EAAE,CAAC;IAExB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClB,cAAc,IAAI,QAAQ,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,cAAc,IAAI,WAAW,QAAQ,CAAC,OAAO,IAAI,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,cAAc,IAAI,UAAU,CAAC;IAC/B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,qFAAqF;QACrF,OAAO,CAAC,IAAI,CACV,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,cAAc,IAAI,YAAY,QAAQ,CAAC,QAAQ,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC,CAAC;AACF,MAAa,oBAAqB,SAAQ,0BAAa;IACrD,YAAY,SAAyC,EAAE;QACrD,KAAK,CAAC;YACJ,4BAA4B;YAC5B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;YACf,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,YAAY,GAAG,WAAW,EAAE;aAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACjB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aACf,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEzD,OAAO,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,GAAG,CACP,GAAW,EACX,KAAa,EACb,uBAA8C,EAAE;QAEhD,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAC/D,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACxD,WAAW,EAAE,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,WAAW,EAAE,CAAC,MAAM,GAAG,GAAG,GAAG,mDAAmD,CAAC;IACnF,CAAC;CACF;AAjCD,oDAiCC","sourcesContent":["import {\n  CookieStorage,\n  type CookieStorageSettings,\n} from \"@/shared/lib/storage.js\";\nimport type { CookieConfig } from \"./types.js\";\n\n// Ensure only runs in a browser environment\nfunction documentObj() {\n  if (typeof globalThis.window !== \"undefined\") return globalThis.document;\n  const stack = new Error().stack;\n  throw new Error(\n    \"Document is not available in this environment:\" + JSON.stringify(stack),\n  );\n}\n\nconst split = (separator: string) => (str: string) => str.split(separator);\n\nconst cookieStringFromSettings = (settings: CookieStorageSettings): string => {\n  let cookieSettings = \"\";\n\n  if (settings.path) {\n    cookieSettings += `Path=${settings.path}; `;\n  }\n  if (settings.expires) {\n    cookieSettings += `Expires=${settings.expires}; `;\n  }\n  if (settings.secure) {\n    cookieSettings += `Secure; `;\n  }\n  if (settings.httpOnly) {\n    // HttpOnly cannot be set from client-side JavaScript, so this clause can be omitted.\n    console.warn(\n      \"HttpOnly cannot be set on client-side cookies. Ignoring this setting.\",\n    );\n  }\n  if (settings.sameSite) {\n    cookieSettings += `SameSite=${settings.sameSite}; `;\n  }\n  return cookieSettings.trim();\n};\nexport class BrowserCookieStorage extends CookieStorage {\n  constructor(config: Partial<CookieStorageSettings> = {}) {\n    super({\n      // sensible browser defaults\n      secure: false,\n      httpOnly: false,\n      ...config,\n    });\n  }\n\n  async get(key: string): Promise<string | null> {\n    const encodedValue = documentObj()\n      .cookie.split(\";\")\n      .map(split(\"=\"))\n      .find(([cookieKey]) => cookieKey?.trim() === key)?.[1];\n\n    return encodedValue ? decodeURIComponent(encodedValue) : null;\n  }\n\n  async set(\n    key: string,\n    value: string,\n    cookieConfigOverride: Partial<CookieConfig> = {},\n  ): Promise<void> {\n    const encodedValue = encodeURIComponent(value);\n    const settings = { ...this.settings, ...cookieConfigOverride };\n    const cookieString = cookieStringFromSettings(settings);\n    documentObj().cookie = `${key}=${encodedValue}; ${cookieString}`;\n  }\n\n  async delete(key: string): Promise<void> {\n    documentObj().cookie = `${key}=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;`;\n  }\n}\n"]}

package/dist/cjs/shared/lib/GenericAuthenticationRefresher copy.d.ts

@@ -0,0 +1,18 @@
+import type { AuthConfig } from "../../server/config.js";
+import type { AuthenticationRefresher } from "../../services/types.js";
+import type { AuthStorage, OIDCTokenResponseBody } from "../../types.js";
+export declare abstract class GenericAuthenticationRefresher implements AuthenticationRefresher {
+    readonly onError: (error: Error) => Promise<void>;
+    protected authConfig: AuthConfig | undefined;
+    protected storage: AuthStorage | undefined;
+    static refreshInProgress: boolean;
+    constructor(onError: (error: Error) => Promise<void>);
+    get oauthServer(): string;
+    abstract refreshAccessToken(refreshToken?: string): Promise<OIDCTokenResponseBody>;
+    getRefreshToken(): Promise<string>;
+    refreshTokens(): Promise<OIDCTokenResponseBody>;
+    private handleRefresh;
+    setupAutorefresh(): Promise<void>;
+    clearAutorefresh(): void;
+}
+//# sourceMappingURL=GenericAuthenticationRefresher%20copy.d.ts.map

package/dist/cjs/shared/lib/GenericAuthenticationRefresher copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher copy.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/GenericAuthenticationRefresher copy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAKnE,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAErE,8BAAsB,8BACpB,YAAW,uBAAuB;IAMtB,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC;IAJ7D,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IAC3C,MAAM,CAAC,iBAAiB,UAAS;gBAEZ,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC;IAE7D,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,QAAQ,CAAC,kBAAkB,CACzB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC;IAE3B,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IASlC,aAAa;YAaL,aAAa;IAoBrB,gBAAgB;IAyBtB,gBAAgB;CASjB"}

package/dist/cjs/shared/lib/GenericAuthenticationRefresher copy.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericAuthenticationRefresher = void 0;
+const constants_js_1 = require("../../constants.js");
+const util_js_1 = require("../../shared/lib/util.js");
+class GenericAuthenticationRefresher {
+    onError;
+    authConfig;
+    storage;
+    static refreshInProgress = false;
+    constructor(onError) {
+        this.onError = onError;
+    }
+    get oauthServer() {
+        return this.authConfig?.oauthServer || constants_js_1.DEFAULT_AUTH_SERVER;
+    }
+    async getRefreshToken() {
+        if (!this.storage)
+            throw new Error("No storage available");
+        const tokens = await (0, util_js_1.retrieveTokens)(this.storage);
+        console.log("getRefreshToken tokens", tokens);
+        if (!tokens?.refresh_token)
+            throw new Error("No refresh token available");
+        return tokens.refresh_token;
+    }
+    async refreshTokens() {
+        console.log("GenericAuthenticationRefresher refreshTokens calling refreshAccessToken()");
+        try {
+            return await this.refreshAccessToken();
+        }
+        catch (error) {
+            console.error("refreshTokens: Failed to refresh tokens:", error);
+            // TODO detect if refresh token has expired and if yes then logout
+            throw error;
+        }
+    }
+    async handleRefresh() {
+        try {
+            console.log("GenericAuthenticationRefresher handleRefresh REFRESH_IN_PROGRESS", localStorage.getItem(constants_js_1.REFRESH_IN_PROGRESS));
+            // ensure only one refresh is in progress
+            if (localStorage.getItem(constants_js_1.REFRESH_IN_PROGRESS) !== "true") {
+                localStorage.setItem(constants_js_1.REFRESH_IN_PROGRESS, "true");
+                await this.refreshTokens();
+                localStorage.removeItem(constants_js_1.REFRESH_IN_PROGRESS);
+                await this.setupAutorefresh(); // Reset the timeout after successful refresh
+            }
+        }
+        catch (error) {
+            console.error("Failed to refresh tokens:", error);
+            // TODO detect if refresh token has expired and if yes then logout
+            this.onError(error);
+        }
+    }
+    async setupAutorefresh() {
+        if (!this.storage)
+            throw new Error("No storage available");
+        console.log("removing REFRESH_IN_PROGRESS and AUTOREFRESH_TIMEOUT_NAME");
+        console.log("setupAutorefresh");
+        // Clear any existing timeout
+        this.clearAutorefresh();
+        localStorage.removeItem(constants_js_1.REFRESH_IN_PROGRESS);
+        localStorage.removeItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME);
+        // get expires_in
+        const now = Math.floor(Date.now() / 1000);
+        const expiresAt = (await (0, util_js_1.retrieveAccessTokenExpiresAt)(this.storage)) || now + 60;
+        // Calculate time until expiry (subtract 30 seconds as buffer)
+        const bufferTime = 30; // 30 seconds
+        const refreshTime = Math.max(0, expiresAt - bufferTime - now); // handle case were token has expired in the past
+        const refreshTimeout = setTimeout(() => {
+            this.handleRefresh();
+        }, 1000 * refreshTime);
+        localStorage.setItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME, refreshTimeout.toString());
+    }
+    clearAutorefresh() {
+        // use local storage to store the timeout id so that if multiple instances
+        // of the refresher are created they can all clear the same timeout
+        const existingTimeout = localStorage.getItem(constants_js_1.AUTOREFRESH_TIMEOUT_NAME);
+        if (existingTimeout) {
+            console.log("clearAutorefresh clearTimeout", existingTimeout);
+            clearTimeout(existingTimeout);
+        }
+    }
+}
+exports.GenericAuthenticationRefresher = GenericAuthenticationRefresher;
+//# sourceMappingURL=GenericAuthenticationRefresher%20copy.js.map

package/dist/cjs/shared/lib/GenericAuthenticationRefresher copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher copy.js","sourceRoot":"","sources":["../../../../src/shared/lib/GenericAuthenticationRefresher copy.ts"],"names":[],"mappings":";;;AAAA,iDAIwB;AAGxB,kDAG8B;AAG9B,MAAsB,8BAA8B;IAO7B;IAJX,UAAU,CAAyB;IACnC,OAAO,CAA0B;IAC3C,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;IAEjC,YAAqB,OAAwC;QAAxC,YAAO,GAAP,OAAO,CAAiC;IAAG,CAAC;IAEjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,kCAAmB,CAAC;IAC7D,CAAC;IAMD,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAc,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;QACF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACjE,kEAAkE;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CACT,kEAAkE,EAClE,YAAY,CAAC,OAAO,CAAC,kCAAmB,CAAC,CAC1C,CAAC;YACF,yCAAyC;YACzC,IAAI,YAAY,CAAC,OAAO,CAAC,kCAAmB,CAAC,KAAK,MAAM,EAAE,CAAC;gBACzD,YAAY,CAAC,OAAO,CAAC,kCAAmB,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3B,YAAY,CAAC,UAAU,CAAC,kCAAmB,CAAC,CAAC;gBAC7C,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,6CAA6C;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAClD,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,KAAc,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,6BAA6B;QAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,YAAY,CAAC,UAAU,CAAC,kCAAmB,CAAC,CAAC;QAC7C,YAAY,CAAC,UAAU,CAAC,uCAAwB,CAAC,CAAC;QAElD,iBAAiB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GACb,CAAC,MAAM,IAAA,sCAA4B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;QAEjE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,aAAa;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,iDAAiD;QAEhH,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC;QACvB,YAAY,CAAC,OAAO,CAAC,uCAAwB,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB;QACd,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,uCAAwB,CAAC,CAAC;QACvE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAC;YAC9D,YAAY,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;;AA5FH,wEA6FC","sourcesContent":["import {\n  AUTOREFRESH_TIMEOUT_NAME,\n  DEFAULT_AUTH_SERVER,\n  REFRESH_IN_PROGRESS,\n} from \"@/constants.js\";\nimport type { AuthConfig } from \"@/server/config.js\";\nimport type { AuthenticationRefresher } from \"@/services/types.js\";\nimport {\n  retrieveAccessTokenExpiresAt,\n  retrieveTokens,\n} from \"@/shared/lib/util.js\";\nimport type { AuthStorage, OIDCTokenResponseBody } from \"@/types.js\";\n\nexport abstract class GenericAuthenticationRefresher\n  implements AuthenticationRefresher\n{\n  protected authConfig: AuthConfig | undefined;\n  protected storage: AuthStorage | undefined;\n  static refreshInProgress = false;\n\n  constructor(readonly onError: (error: Error) => Promise<void>) {}\n\n  get oauthServer(): string {\n    return this.authConfig?.oauthServer || DEFAULT_AUTH_SERVER;\n  }\n\n  abstract refreshAccessToken(\n    refreshToken?: string,\n  ): Promise<OIDCTokenResponseBody>;\n\n  async getRefreshToken(): Promise<string> {\n    if (!this.storage) throw new Error(\"No storage available\");\n\n    const tokens = await retrieveTokens(this.storage);\n    console.log(\"getRefreshToken tokens\", tokens);\n    if (!tokens?.refresh_token) throw new Error(\"No refresh token available\");\n    return tokens.refresh_token;\n  }\n\n  async refreshTokens() {\n    console.log(\n      \"GenericAuthenticationRefresher refreshTokens calling refreshAccessToken()\",\n    );\n    try {\n      return await this.refreshAccessToken();\n    } catch (error) {\n      console.error(\"refreshTokens: Failed to refresh tokens:\", error);\n      // TODO detect if refresh token has expired and if yes then logout\n      throw error;\n    }\n  }\n\n  private async handleRefresh() {\n    try {\n      console.log(\n        \"GenericAuthenticationRefresher handleRefresh REFRESH_IN_PROGRESS\",\n        localStorage.getItem(REFRESH_IN_PROGRESS),\n      );\n      // ensure only one refresh is in progress\n      if (localStorage.getItem(REFRESH_IN_PROGRESS) !== \"true\") {\n        localStorage.setItem(REFRESH_IN_PROGRESS, \"true\");\n        await this.refreshTokens();\n        localStorage.removeItem(REFRESH_IN_PROGRESS);\n        await this.setupAutorefresh(); // Reset the timeout after successful refresh\n      }\n    } catch (error) {\n      console.error(\"Failed to refresh tokens:\", error);\n      // TODO detect if refresh token has expired and if yes then logout\n      this.onError(error as Error);\n    }\n  }\n\n  async setupAutorefresh() {\n    if (!this.storage) throw new Error(\"No storage available\");\n    console.log(\"removing REFRESH_IN_PROGRESS and AUTOREFRESH_TIMEOUT_NAME\");\n    console.log(\"setupAutorefresh\");\n    // Clear any existing timeout\n    this.clearAutorefresh();\n\n    localStorage.removeItem(REFRESH_IN_PROGRESS);\n    localStorage.removeItem(AUTOREFRESH_TIMEOUT_NAME);\n\n    // get expires_in\n    const now = Math.floor(Date.now() / 1000);\n    const expiresAt =\n      (await retrieveAccessTokenExpiresAt(this.storage)) || now + 60;\n\n    // Calculate time until expiry (subtract 30 seconds as buffer)\n    const bufferTime = 30; // 30 seconds\n    const refreshTime = Math.max(0, expiresAt - bufferTime - now); // handle case were token has expired in the past\n\n    const refreshTimeout = setTimeout(() => {\n      this.handleRefresh();\n    }, 1000 * refreshTime);\n    localStorage.setItem(AUTOREFRESH_TIMEOUT_NAME, refreshTimeout.toString());\n  }\n\n  clearAutorefresh() {\n    // use local storage to store the timeout id so that if multiple instances\n    // of the refresher are created they can all clear the same timeout\n    const existingTimeout = localStorage.getItem(AUTOREFRESH_TIMEOUT_NAME);\n    if (existingTimeout) {\n      console.log(\"clearAutorefresh clearTimeout\", existingTimeout);\n      clearTimeout(existingTimeout);\n    }\n  }\n}\n"]}

package/dist/cjs/shared/lib/GenericAuthenticationRefresher.d.ts

@@ -0,0 +1,14 @@
+import type { AuthConfig } from "../../server/config.js";
+import type { AuthenticationRefresher } from "../../services/types.js";
+import type { AuthStorage, OIDCTokenResponseBody } from "../../types.js";
+export declare abstract class GenericAuthenticationRefresher implements AuthenticationRefresher {
+    readonly onError: (error: Error) => Promise<void>;
+    protected authConfig: AuthConfig | undefined;
+    protected storage: AuthStorage | undefined;
+    constructor(onError: (error: Error) => Promise<void>);
+    get oauthServer(): string;
+    abstract refreshAccessToken(refreshToken?: string): Promise<OIDCTokenResponseBody>;
+    getRefreshToken(): Promise<string>;
+    refreshTokens(): Promise<OIDCTokenResponseBody>;
+}
+//# sourceMappingURL=GenericAuthenticationRefresher.d.ts.map

package/dist/cjs/shared/lib/GenericAuthenticationRefresher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/GenericAuthenticationRefresher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAErE,8BAAsB,8BACpB,YAAW,uBAAuB;IAKtB,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC;IAH7D,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;gBAEtB,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC;IAE7D,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,QAAQ,CAAC,kBAAkB,CACzB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC;IAE3B,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IASlC,aAAa;CAepB"}

package/dist/cjs/shared/lib/GenericAuthenticationRefresher.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericAuthenticationRefresher = void 0;
+const constants_js_1 = require("../../constants.js");
+const util_js_1 = require("../../shared/lib/util.js");
+class GenericAuthenticationRefresher {
+    onError;
+    authConfig;
+    storage;
+    constructor(onError) {
+        this.onError = onError;
+    }
+    get oauthServer() {
+        return this.authConfig?.oauthServer || constants_js_1.DEFAULT_AUTH_SERVER;
+    }
+    async getRefreshToken() {
+        if (!this.storage)
+            throw new Error("No storage available");
+        const tokens = await (0, util_js_1.retrieveTokens)(this.storage);
+        console.log("getRefreshToken tokens", tokens);
+        if (!tokens?.refresh_token)
+            throw new Error("No refresh token available");
+        return tokens.refresh_token;
+    }
+    async refreshTokens() {
+        console.log("GenericAuthenticationRefresher refreshTokens calling refreshAccessToken()");
+        try {
+            return await this.refreshAccessToken();
+        }
+        catch (error) {
+            console.error("GenericAuthenticationRefresher: Failed to refresh tokens:", error);
+            // TODO detect if refresh token has expired and if yes then logout
+            throw error;
+        }
+    }
+}
+exports.GenericAuthenticationRefresher = GenericAuthenticationRefresher;
+//# sourceMappingURL=GenericAuthenticationRefresher.js.map

package/dist/cjs/shared/lib/GenericAuthenticationRefresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericAuthenticationRefresher.js","sourceRoot":"","sources":["../../../../src/shared/lib/GenericAuthenticationRefresher.ts"],"names":[],"mappings":";;;AAAA,iDAAqD;AAGrD,kDAAsD;AAGtD,MAAsB,8BAA8B;IAM7B;IAHX,UAAU,CAAyB;IACnC,OAAO,CAA0B;IAE3C,YAAqB,OAAwC;QAAxC,YAAO,GAAP,OAAO,CAAiC;IAAG,CAAC;IAEjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,kCAAmB,CAAC;IAC7D,CAAC;IAMD,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAc,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;QACF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,2DAA2D,EAC3D,KAAK,CACN,CAAC;YACF,kEAAkE;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAxCD,wEAwCC","sourcesContent":["import { DEFAULT_AUTH_SERVER } from \"@/constants.js\";\nimport type { AuthConfig } from \"@/server/config.js\";\nimport type { AuthenticationRefresher } from \"@/services/types.js\";\nimport { retrieveTokens } from \"@/shared/lib/util.js\";\nimport type { AuthStorage, OIDCTokenResponseBody } from \"@/types.js\";\n\nexport abstract class GenericAuthenticationRefresher\n  implements AuthenticationRefresher\n{\n  protected authConfig: AuthConfig | undefined;\n  protected storage: AuthStorage | undefined;\n\n  constructor(readonly onError: (error: Error) => Promise<void>) {}\n\n  get oauthServer(): string {\n    return this.authConfig?.oauthServer || DEFAULT_AUTH_SERVER;\n  }\n\n  abstract refreshAccessToken(\n    refreshToken?: string,\n  ): Promise<OIDCTokenResponseBody>;\n\n  async getRefreshToken(): Promise<string> {\n    if (!this.storage) throw new Error(\"No storage available\");\n\n    const tokens = await retrieveTokens(this.storage);\n    console.log(\"getRefreshToken tokens\", tokens);\n    if (!tokens?.refresh_token) throw new Error(\"No refresh token available\");\n    return tokens.refresh_token;\n  }\n\n  async refreshTokens() {\n    console.log(\n      \"GenericAuthenticationRefresher refreshTokens calling refreshAccessToken()\",\n    );\n    try {\n      return await this.refreshAccessToken();\n    } catch (error) {\n      console.error(\n        \"GenericAuthenticationRefresher: Failed to refresh tokens:\",\n        error,\n      );\n      // TODO detect if refresh token has expired and if yes then logout\n      throw error;\n    }\n  }\n}\n"]}

package/dist/cjs/shared/lib/UserSession.d.ts

@@ -0,0 +1,17 @@
+import type { AuthStorage, ForwardedTokensJWT, UnknownObject, User } from "../../types.js";
+export interface UserSession<T extends UnknownObject> {
+    get(): Promise<User<T> | null>;
+    set(user: User<T> & {
+        forwardedTokens?: ForwardedTokensJWT;
+    }): Promise<void>;
+}
+export declare class GenericUserSession<T extends UnknownObject> implements UserSession<T> {
+    readonly storage: AuthStorage;
+    constructor(storage: AuthStorage);
+    get(): Promise<User<T> | null>;
+    set(user: (User<T> & {
+        forwardedTokens?: ForwardedTokensJWT;
+    }) | null): Promise<void>;
+    clear(): Promise<void>;
+}
+//# sourceMappingURL=UserSession.d.ts.map

package/dist/cjs/shared/lib/UserSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserSession.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/UserSession.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,IAAI,EACL,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,aAAa;IAClD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,eAAe,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E;AAED,qBAAa,kBAAkB,CAAC,CAAC,SAAS,aAAa,CACrD,YAAW,WAAW,CAAC,CAAC,CAAC;IAEb,QAAQ,CAAC,OAAO,EAAE,WAAW;gBAApB,OAAO,EAAE,WAAW;IAEnC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAK9B,GAAG,CACP,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,eAAe,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC,GAAG,IAAI,GAChE,OAAO,CAAC,IAAI,CAAC;IAQV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/cjs/shared/lib/UserSession.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericUserSession = void 0;
+const types_js_1 = require("../../shared/lib/types.js");
+const jwt_js_1 = require("../../lib/jwt.js");
+class GenericUserSession {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    async get() {
+        const user = await this.storage.get(types_js_1.UserStorage.USER);
+        return user ? JSON.parse(user) : null;
+    }
+    async set(user) {
+        const forwardedTokens = user?.forwardedTokens
+            ? (0, jwt_js_1.convertForwardedTokenFormat)(user?.forwardedTokens)
+            : null;
+        const value = user ? JSON.stringify({ ...user, forwardedTokens }) : "";
+        await this.storage.set(types_js_1.UserStorage.USER, value);
+    }
+    async clear() {
+        await this.storage.delete(types_js_1.UserStorage.USER);
+    }
+}
+exports.GenericUserSession = GenericUserSession;
+//# sourceMappingURL=UserSession.js.map

package/dist/cjs/shared/lib/UserSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserSession.js","sourceRoot":"","sources":["../../../../src/shared/lib/UserSession.ts"],"names":[],"mappings":";;;AAMA,oDAAoD;AACpD,yCAA2D;AAO3D,MAAa,kBAAkB;IAGR;IAArB,YAAqB,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;IAAG,CAAC;IAE7C,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAiE;QAEjE,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe;YAC3C,CAAC,CAAC,IAAA,oCAA2B,EAAC,IAAI,EAAE,eAAqC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF;AAvBD,gDAuBC","sourcesContent":["import type {\n  AuthStorage,\n  ForwardedTokensJWT,\n  UnknownObject,\n  User,\n} from \"@/types.js\";\nimport { UserStorage } from \"@/shared/lib/types.js\";\nimport { convertForwardedTokenFormat } from \"@/lib/jwt.js\";\n\nexport interface UserSession<T extends UnknownObject> {\n  get(): Promise<User<T> | null>;\n  set(user: User<T> & { forwardedTokens?: ForwardedTokensJWT }): Promise<void>;\n}\n\nexport class GenericUserSession<T extends UnknownObject>\n  implements UserSession<T>\n{\n  constructor(readonly storage: AuthStorage) {}\n\n  async get(): Promise<User<T> | null> {\n    const user = await this.storage.get(UserStorage.USER);\n    return user ? JSON.parse(user) : null;\n  }\n\n  async set(\n    user: (User<T> & { forwardedTokens?: ForwardedTokensJWT }) | null,\n  ): Promise<void> {\n    const forwardedTokens = user?.forwardedTokens\n      ? convertForwardedTokenFormat(user?.forwardedTokens as ForwardedTokensJWT)\n      : null;\n    const value = user ? JSON.stringify({ ...user, forwardedTokens }) : \"\";\n    await this.storage.set(UserStorage.USER, value);\n  }\n\n  async clear(): Promise<void> {\n    await this.storage.delete(UserStorage.USER);\n  }\n}\n"]}

package/dist/cjs/shared/lib/iframeUtils.d.ts

@@ -0,0 +1,6 @@
+type ExtendedIframeElement = HTMLIFrameElement & {
+    getElement: () => HTMLIFrameElement;
+};
+export declare const getIframeRef: (iframeRef: HTMLIFrameElement | ExtendedIframeElement | null) => HTMLIFrameElement;
+export {};
+//# sourceMappingURL=iframeUtils.d.ts.map

package/dist/cjs/shared/lib/iframeUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframeUtils.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/iframeUtils.ts"],"names":[],"mappings":"AAAA,KAAK,qBAAqB,GAAG,iBAAiB,GAAG;IAC/C,UAAU,EAAE,MAAM,iBAAiB,CAAC;CACrC,CAAC;AACF,eAAO,MAAM,YAAY,cACZ,iBAAiB,GAAG,qBAAqB,GAAG,IAAI,KAC1D,iBAKF,CAAC"}

package/dist/cjs/shared/lib/iframeUtils.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIframeRef = void 0;
+const getIframeRef = (iframeRef) => {
+    if (!iframeRef) {
+        throw new Error("iframeRef is required for displayMode 'iframe'");
+    }
+    return iframeRef?.getElement?.() ?? iframeRef;
+};
+exports.getIframeRef = getIframeRef;
+//# sourceMappingURL=iframeUtils.js.map

package/dist/cjs/shared/lib/iframeUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframeUtils.js","sourceRoot":"","sources":["../../../../src/shared/lib/iframeUtils.ts"],"names":[],"mappings":";;;AAGO,MAAM,YAAY,GAAG,CAC1B,SAA2D,EACxC,EAAE;IACrB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAQ,SAAmC,EAAE,UAAU,EAAE,EAAE,IAAI,SAAS,CAAC;AAC3E,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB","sourcesContent":["type ExtendedIframeElement = HTMLIFrameElement & {\n  getElement: () => HTMLIFrameElement;\n};\nexport const getIframeRef = (\n  iframeRef: HTMLIFrameElement | ExtendedIframeElement | null,\n): HTMLIFrameElement => {\n  if (!iframeRef) {\n    throw new Error(\"iframeRef is required for displayMode 'iframe'\");\n  }\n  return (iframeRef as ExtendedIframeElement)?.getElement?.() ?? iframeRef;\n};\n"]}

package/dist/cjs/shared/lib/session.d.ts

@@ -0,0 +1,4 @@
+import { type AuthStorage, type OAuthTokens, type User, type EmptyObject, type UnknownObject } from "../../types.js";
+export declare function getUser<T extends UnknownObject = EmptyObject>(storage: AuthStorage): Promise<User<T> | null>;
+export declare function getTokens(storage: AuthStorage): Promise<OAuthTokens | null>;
+//# sourceMappingURL=session.d.ts.map

package/dist/cjs/shared/lib/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/shared/lib/session.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAsBpB,wBAAsB,OAAO,CAAC,CAAC,SAAS,aAAa,GAAG,WAAW,EACjE,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAoBzB;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAS7B"}