@cortezaproject/corteza-vue 2021.9.9 → 2021.9.10

package/dist/index.es.js

@@ -1934,7 +1934,7 @@ const storeKeyFinalState = 'auth.state.final';
 const storeKeyRefreshToken = 'auth.refresh-token';
 const maxStartAttempts = 5;
 class Auth {
-    constructor({ app, verbose, cortezaAuthURL, callbackURL, entrypointURL, location, sessionStorage, refreshFactor }) {
+    constructor({ app, verbose, cortezaAuthURL, callbackURL, entrypointURL, location, sessionStorage, refreshFactor, registerEventListener }) {
         if (refreshFactor >= 1 || refreshFactor <= 0) {
             throw new Error('refreshFactor should be between 0 and 1');
         }
@@ -1944,6 +1944,7 @@ class Auth {
         this.callbackURL = callbackURL;
         this.location = location;
         this.sessionStorage = sessionStorage;
+        this.registerEventListener = registerEventListener;
         this.refreshFactor = refreshFactor;
         this.entrypointURL = entrypointURL;
         this.log.debug('initialized auth plugin', {
@@ -1998,38 +1999,26 @@ class Auth {
     handle(req = new URL(this.entrypointURL)) {
         return __awaiter(this, void 0, void 0, function* () {
             this.log.info('handling authentication');
-            if (this.isCallback(req.pathname)) {
-                this.log.info('handling authentication callback');
-                const params = new URLSearchParams(req.search);
+            // State management
+            // - duplication checking
+            // - management handlers
+            const dup = this.handleStateManagement();
+            if (dup) {
+                this.log.debug('duplicate tab: unauthorized');
+                throw new Error('Unauthenticated');
+            }
+            // Handle auth callback requests
+            const params = new URLSearchParams(req.search);
+            if (this.isCallback(req.pathname) && (params.has('error') || params.has('code'))) {
                 if (params.has('error')) {
                     throw new Error(params.get('error') || 'authentication flow failed with error');
                 }
-                if (params.has('code')) {
-                    let finalLocation = this.entrypointURL;
-                    if (params.has('state')) {
-                        const state = params.get('state') || '';
-                        const storeKeyStateLocation = `auth.state.${state}.location`;
-                        const tmp = this.sessionStorage.getItem(storeKeyStateLocation);
-                        if (tmp === null) {
-                            console.warn('state does not match, restarting authentication flow');
-                            this.startAuthenticationFlow();
-                            return null;
-                        }
-                        if (!this.isCallback(tmp)) {
-                            // if by some coincidence we got callback URL to finalLocation
-                            // we'll silently ignore it and redirect user back to entrypoint
-                            finalLocation = tmp;
-                        }
-                        this.sessionStorage.removeItem(storeKeyStateLocation);
-                    }
-                    const code = params.get('code') || '';
-                    this.log.info('authorization code received', code);
-                    const rsp = yield this.exchangeCode(code);
-                    this.startFinalState(finalLocation);
-                    return rsp;
-                }
+                this.log.info('handling authentication callback');
+                return this.handleCallbackRoute(params.get('state'), (params.has('code') ? params.get('code') : ''));
             }
-            return this.check();
+            // Handle auth from the current system state
+            this.log.info('handling authentication from state');
+            return this.handleState();
         });
     }
     /**
@@ -2046,10 +2035,16 @@ class Auth {
      * know, after the redirection to the final location, if this is a final stage or not and if the refresh token
      * belongs to this session or not.
      */
-    startFinalState(dst) {
-        this.log.info('redirecting back to final destination', dst);
+    handleStateManagement() {
+        // See if this is a duplicate
+        const dup = this.sessionStorage.getItem(storeKeyFinalState) !== null;
+        // Bind listeners to cleanup
+        this.registerEventListener('beforeunload', function () {
+            this.sessionStorage.removeItem(storeKeyFinalState);
+        });
+        // Set state
         this.sessionStorage.setItem(storeKeyFinalState, Date.now().toString());
-        this.location.assign(dst);
+        return dup;
     }
     /**
      * Called when refresh token is re-fetched.
@@ -2057,7 +2052,6 @@ class Auth {
      * Cleanup aux items in the session store
      */
     completeFinalState() {
-        this.sessionStorage.removeItem(storeKeyFinalState);
         this.sessionStorage.removeItem(storeKeyFlowStarted);
         const stateKey = /^auth\.state\.\w+\.location$/;
         for (let i = 0; i < this.sessionStorage.length; i++) {
@@ -2068,12 +2062,38 @@ class Auth {
         }
     }
     /**
-     * Are we in a final state or not?
+     * Exchanges the auth parameters for access & refresh token.
      *
-     * See startFinalState function for more details
+     * If the parameters are correct and exchange is successful, the refresh token
+     * gets stored in localStorage for further use, the access token and current user get stored
+     * in-memory.
+     *
+     * Function will throw null when user is unauthenticated
      */
-    inFinalState() {
-        return this.sessionStorage.getItem(storeKeyFinalState) !== null;
+    handleCallbackRoute(state, code) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let finalLocation = this.entrypointURL;
+            if (state) {
+                const storeKeyStateLocation = `auth.state.${state}.location`;
+                const tmp = this.sessionStorage.getItem(storeKeyStateLocation);
+                if (tmp === null) {
+                    console.warn('state does not match, restarting authentication flow');
+                    this.startAuthenticationFlow();
+                    return null;
+                }
+                if (!this.isCallback(tmp)) {
+                    // if by some coincidence we got callback URL to finalLocation
+                    // we'll silently ignore it and redirect user back to entrypoint
+                    finalLocation = tmp;
+                }
+                this.sessionStorage.removeItem(storeKeyStateLocation);
+            }
+            this.log.info('authorization code received', code);
+            const rsp = yield this.exchangeCode(code);
+            this.log.info('redirecting back to final destination', finalLocation);
+            this.location.assign(finalLocation);
+            return rsp;
+        });
     }
     /**
      * Checks current auth state; is access token loaded OR do we have a refresh token we can use
@@ -2087,7 +2107,7 @@ class Auth {
      *
      * Function will throw null when user is unauthenticated
      */
-    check() {
+    handleState() {
         return __awaiter(this, void 0, void 0, function* () {
             this.log.info('checking authentication');
             if (this[accessToken]) {
@@ -2123,14 +2143,12 @@ class Auth {
                  * If this is a duplicated-session, an error will be thrown and authentication will be (probably)
                  * restarted by the caller.
                  */
-                if (this.inFinalState()) {
-                    this.log.info('refreshing token', refreshToken);
-                    /**
-                     * Refresh token found in the storage,
-                     * let's use it to get new access token
-                     */
-                    return this.exchangeRefresh(refreshToken);
-                }
+                this.log.info('refreshing token', refreshToken);
+                /**
+                 * Refresh token found in the storage,
+                 * let's use it to get new access token
+                 */
+                return this.exchangeRefresh(refreshToken);
             }
             throw new Error('Unauthenticated');
         });
@@ -2321,7 +2339,7 @@ class Auth {
 }
 function auth () {
     return function (Vue, opts) {
-        let { app = '', rootApp = false, cortezaAuthURL = '', callbackURL = '', verbose = undefined, refreshFactor = 0.75, entrypointURL = window.location.toString(), location = window.location, sessionStorage = window.sessionStorage, } = (opts || {});
+        let { app = '', rootApp = false, cortezaAuthURL = '', callbackURL = '', verbose = undefined, refreshFactor = 0.75, entrypointURL = window.location.toString(), location = window.location, sessionStorage = window.sessionStorage, registerEventListener = window.addEventListener.bind(window), } = (opts || {});
         if (!cortezaAuthURL) {
             /**
              * cortezaAuthURL not explicitly set, try to auto-configure from properties set on window variable
@@ -2415,6 +2433,7 @@ function auth () {
             sessionStorage,
             entrypointURL,
             refreshFactor,
+            registerEventListener,
         });
     };
 }