@dbx-tools/auth 0.9.32 → 0.9.37

package/lib/src/storage.js

@@ -1,112 +0,0 @@
-import { authLogger, credentialId, tokenMetadata } from "./_logging.js";
-const logger = authLogger("memory-storage");
-/**
- * Process-local keyed mutex used by the in-memory store.
- *
- * Modeled on `@dbx-tools/core`'s `withProcessLock` coordinator: one holder per
- * key, the rest queue in arrival order, distinct keys proceed concurrently.
- * Waiting is purely promise-based, so a waiter never blocks the event loop and,
- * by default, waits indefinitely - a holder may legitimately run for minutes
- * (e.g. an interactive `databricks auth login` that opens a browser). A finite
- * `timeoutMs` is opt-in for callers that prefer to fail fast.
- */
-export class MemoryLockAdapter {
-    #states = new Map();
-    #sequence = 0;
-    acquire(key, timeoutMs) {
-        const credential = credentialId(key);
-        const state = this.#states.get(key);
-        if (!state) {
-            const lease = this.#nextLease(key);
-            this.#states.set(key, { lease, queue: [] });
-            logger.debug("memory lock acquired", { credential });
-            return Promise.resolve(lease);
-        }
-        logger.debug("waiting for memory lock", { credential, timeoutMs });
-        return new Promise((resolve, reject) => {
-            let timer;
-            const waiter = {
-                resolve: (lease) => {
-                    if (timer)
-                        clearTimeout(timer);
-                    logger.debug("memory lock acquired", { credential });
-                    resolve(lease);
-                },
-                reject: (error) => {
-                    if (timer)
-                        clearTimeout(timer);
-                    reject(error);
-                },
-            };
-            state.queue.push(waiter);
-            // A timer is created only for a finite positive budget. Omitted, Infinity,
-            // or non-positive all mean "wait forever" - no timer to leak or fire.
-            if (timeoutMs !== undefined && Number.isFinite(timeoutMs) && timeoutMs > 0) {
-                timer = setTimeout(() => {
-                    const index = state.queue.indexOf(waiter);
-                    if (index >= 0)
-                        state.queue.splice(index, 1);
-                    waiter.reject(new Error(`Timed out waiting for lock ${key}`));
-                }, timeoutMs);
-            }
-        });
-    }
-    release(lease) {
-        const key = lease.split(":").slice(1).join(":");
-        logger.debug("releasing memory lock", { credential: credentialId(key) });
-        const state = this.#states.get(key);
-        // Ignore a stale release from anyone who no longer owns the key (a timed-out
-        // or superseded lease). Honoring it would revoke the lock from the holder.
-        if (!state || state.lease !== lease)
-            return Promise.resolve();
-        const next = state.queue.shift();
-        if (!next) {
-            this.#states.delete(key);
-            return Promise.resolve();
-        }
-        state.lease = this.#nextLease(key);
-        next.resolve(state.lease);
-        return Promise.resolve();
-    }
-    #nextLease(key) {
-        return `${++this.#sequence}:${key}`;
-    }
-}
-/** Process-local credential store with per-key refresh locks. */
-export class MemoryCredentialStore {
-    locks;
-    #tokens = new Map();
-    constructor(locks = new MemoryLockAdapter()) {
-        this.locks = locks;
-    }
-    async load(key) {
-        const token = this.#tokens.get(key);
-        logger.debug("loaded memory credential", {
-            credential: credentialId(key),
-            token: tokenMetadata(token),
-        });
-        return token ? structuredClone(token) : undefined;
-    }
-    async prepareWrite() { }
-    async save(key, token) {
-        this.#tokens.set(key, structuredClone(token));
-        logger.debug("saved memory credential", {
-            credential: credentialId(key),
-            token: tokenMetadata(token),
-        });
-    }
-    async remove(key) {
-        this.#tokens.delete(key);
-        logger.debug("removed memory credential", { credential: credentialId(key) });
-    }
-    acquireLock(key, timeoutMs) {
-        return this.locks.acquire(key, timeoutMs);
-    }
-    releaseLock(lease) {
-        return this.locks.release(lease);
-    }
-    name() {
-        return "memory";
-    }
-}
-//# sourceMappingURL=data:application/json;base64,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

package/lib/src/types.d.ts

@@ -1,165 +0,0 @@
-/** Authentication strategy selected from Databricks configuration. */
-export declare enum AuthKind {
-    UserToMachine = "user-to-machine",
-    MachineToMachine = "machine-to-machine",
-    PersonalAccessToken = "personal-access-token",
-    AppServicePrincipal = "app-service-principal",
-    AppOnBehalfOf = "app-on-behalf-of"
-}
-/** Scope of the Databricks authentication target. */
-export declare enum TargetKind {
-    Workspace = "workspace",
-    Account = "account",
-    Unified = "unified"
-}
-/** Built-in credential storage backend. */
-export declare enum Storage {
-    Auto = "auto",
-    Memory = "memory",
-    File = "file"
-}
-/** File organization used by a persistent credential store. */
-export declare enum FileLayout {
-    Single = "single",
-    PerCredential = "per-credential"
-}
-/** Stored OAuth credential, including renewal metadata. */
-export interface Token {
-    accessToken: string;
-    tokenType: string;
-    refreshToken?: string;
-    expiry?: string;
-    scopes: string[];
-}
-/** Public credential result; deliberately excludes the refresh token. */
-export interface AccessToken {
-    accessToken: string;
-    tokenType: string;
-    expiry?: string;
-    scopes: string[];
-}
-/** Shared lifecycle configuration embedded by every provider. All times in milliseconds. */
-export interface AuthOptions {
-    refreshBufferMs: number;
-    /**
-     * Opt-in cap, in milliseconds, on waiting to acquire the per-credential
-     * refresh lock. `0` (the default) means wait indefinitely: a holder may
-     * legitimately run for minutes (an interactive login that opens a browser),
-     * and the caller owns the overall request budget. Set a positive value to
-     * fail fast instead.
-     */
-    lockTimeoutMs: number;
-    loginTimeoutMs: number;
-}
-/** Record-style factory retained for straightforward Node/Python bridging. */
-export declare const AuthOptions: {
-    create(options?: Partial<AuthOptions>): AuthOptions;
-    defaults(): Readonly<AuthOptions>;
-};
-/** Secret-free metadata discovered from one Databricks CLI profile. */
-export interface DatabricksProfileSummary {
-    name: string;
-    host?: string;
-    accountId?: string;
-    workspaceId?: string;
-    target: TargetKind;
-    authKind: AuthKind;
-}
-/** Resolved Databricks identity and active storage backend. */
-export interface DatabricksAuthStatus {
-    profile: string;
-    host: string;
-    storage: Storage;
-}
-/** Public Databricks authentication options. */
-export interface DatabricksAuthOptions {
-    profile?: string;
-    host?: string;
-    accountId?: string;
-    workspaceId?: string;
-    configFile?: string;
-    clientId?: string;
-    clientSecret?: string;
-    accessToken?: string;
-    groupId?: string;
-    authType?: string;
-    scopes?: string[];
-    target?: string;
-    cacheDir?: string;
-    auth?: AuthOptions;
-    requestHeaders?: Record<string, string>;
-    accessTokenHeader?: string;
-    installCliInApp?: boolean;
-    preferUserToMachine: boolean;
-}
-/** Record-style factory retained for callers migrating from generated bindings. */
-export declare const DatabricksAuthOptions: {
-    create(options?: Partial<DatabricksAuthOptions>): DatabricksAuthOptions;
-    defaults(): Readonly<DatabricksAuthOptions>;
-};
-/** Resolved profile with secrets retained only for provider construction. */
-export interface DatabricksProfile extends DatabricksProfileSummary {
-    host: string;
-    authType?: string;
-    clientId: string;
-    groupId?: string;
-    scopes: string[];
-    clientSecret?: string;
-    accessToken?: string;
-    cacheKey: string;
-    principal: string;
-}
-/** Cross-language lease adapter; implementations may use files, databases, or FFI. */
-export interface LockAdapter {
-    /** Acquire the key's lease. Omit `timeoutMs` (or pass `0`) to wait indefinitely. */
-    acquire(key: string, timeoutMs?: number): Promise<string>;
-    release(lease: string): Promise<void>;
-}
-/** Cross-language credential persistence contract. */
-export interface CredentialStore {
-    load(key: string): Promise<Token | undefined>;
-    prepareWrite(): Promise<void>;
-    save(key: string, token: Token): Promise<void>;
-    remove(key: string): Promise<void>;
-    acquireLock(key: string, timeoutMs?: number): Promise<string>;
-    releaseLock(lease: string): Promise<void>;
-    name(): string;
-}
-/** Provider-specific token acquisition. */
-export interface TokenProvider {
-    authenticate(timeoutMs: number): Promise<Token>;
-    login(timeoutMs: number): Promise<Token>;
-    refresh(token: Token): Promise<Token>;
-    canAuthenticateSilently(): boolean;
-}
-/** Stable facade shared by Node, the CLI, and generated language bindings. */
-export interface AuthClient {
-    challenge(): Promise<void>;
-    token(login?: boolean): Promise<AccessToken>;
-    authenticate(login?: boolean): Promise<Record<string, string>>;
-    authorizationHeaderForUrl(requestUrl: string, login?: boolean): Promise<string | undefined>;
-    requestHeadersForUrl(requestUrl: string, login?: boolean): Promise<Record<string, string>>;
-    forceRefreshToken(login?: boolean): Promise<AccessToken>;
-    refreshRejectedToken(staleAccessToken: string, login?: boolean): Promise<AccessToken>;
-    logout(): Promise<void>;
-    status(): DatabricksAuthStatus;
-    principal(): string;
-    workspaceId(): string | undefined;
-    authKind(): AuthKind;
-    profile(name?: string): DatabricksProfileSummary;
-    listProfiles(refresh?: boolean): DatabricksProfileSummary[];
-}
-/** Public OAuth client used by Databricks CLI-compatible user authentication. */
-export declare const DEFAULT_CLIENT_ID = "databricks-cli";
-/** Default Databricks profile configuration path. */
-export declare const DEFAULT_CONFIG_FILE = "~/.databrickscfg";
-/** Default Databricks account console origin. */
-export declare const DEFAULT_ACCOUNTS_HOST = "https://accounts.cloud.databricks.com";
-/** Canonical request header carrying a bearer access token. */
-export declare const DEFAULT_ACCESS_TOKEN_HEADER = "authorization";
-/** Canonical request header carrying the resolved Databricks workspace ID. */
-export declare const WORKSPACE_ID_HEADER = "x-databricks-workspace-id";
-/** Authentication type for Databricks App on-behalf-of request credentials. */
-export declare const AUTH_TYPE_APP_OBO = "app_obo";
-/** Authentication type for Databricks App service-principal credentials. */
-export declare const AUTH_TYPE_APP_SP = "app_sp";

package/lib/src/types.js

@@ -1,67 +0,0 @@
-/** Authentication strategy selected from Databricks configuration. */
-export var AuthKind;
-(function (AuthKind) {
-    AuthKind["UserToMachine"] = "user-to-machine";
-    AuthKind["MachineToMachine"] = "machine-to-machine";
-    AuthKind["PersonalAccessToken"] = "personal-access-token";
-    AuthKind["AppServicePrincipal"] = "app-service-principal";
-    AuthKind["AppOnBehalfOf"] = "app-on-behalf-of";
-})(AuthKind || (AuthKind = {}));
-/** Scope of the Databricks authentication target. */
-export var TargetKind;
-(function (TargetKind) {
-    TargetKind["Workspace"] = "workspace";
-    TargetKind["Account"] = "account";
-    TargetKind["Unified"] = "unified";
-})(TargetKind || (TargetKind = {}));
-/** Built-in credential storage backend. */
-export var Storage;
-(function (Storage) {
-    Storage["Auto"] = "auto";
-    Storage["Memory"] = "memory";
-    Storage["File"] = "file";
-})(Storage || (Storage = {}));
-/** File organization used by a persistent credential store. */
-export var FileLayout;
-(function (FileLayout) {
-    FileLayout["Single"] = "single";
-    FileLayout["PerCredential"] = "per-credential";
-})(FileLayout || (FileLayout = {}));
-const AUTH_DEFAULTS = {
-    refreshBufferMs: 300_000,
-    lockTimeoutMs: 0,
-    loginTimeoutMs: 900_000,
-};
-/** Record-style factory retained for straightforward Node/Python bridging. */
-export const AuthOptions = {
-    create(options = {}) {
-        return { ...AUTH_DEFAULTS, ...options };
-    },
-    defaults() {
-        return Object.freeze({ ...AUTH_DEFAULTS });
-    },
-};
-/** Record-style factory retained for callers migrating from generated bindings. */
-export const DatabricksAuthOptions = {
-    create(options = {}) {
-        return { preferUserToMachine: true, ...options };
-    },
-    defaults() {
-        return Object.freeze({ preferUserToMachine: true });
-    },
-};
-/** Public OAuth client used by Databricks CLI-compatible user authentication. */
-export const DEFAULT_CLIENT_ID = "databricks-cli";
-/** Default Databricks profile configuration path. */
-export const DEFAULT_CONFIG_FILE = "~/.databrickscfg";
-/** Default Databricks account console origin. */
-export const DEFAULT_ACCOUNTS_HOST = "https://accounts.cloud.databricks.com";
-/** Canonical request header carrying a bearer access token. */
-export const DEFAULT_ACCESS_TOKEN_HEADER = "authorization";
-/** Canonical request header carrying the resolved Databricks workspace ID. */
-export const WORKSPACE_ID_HEADER = "x-databricks-workspace-id";
-/** Authentication type for Databricks App on-behalf-of request credentials. */
-export const AUTH_TYPE_APP_OBO = "app_obo";
-/** Authentication type for Databricks App service-principal credentials. */
-export const AUTH_TYPE_APP_SP = "app_sp";
-//# sourceMappingURL=data:application/json;base64,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

package/src/_profile-core.ts

@@ -1,258 +0,0 @@
-import { parse as parseIni } from "ini";
-
-import { authLogger } from "./_logging.ts";
-import { AuthError } from "./errors.ts";
-import {
-  AUTH_TYPE_APP_OBO,
-  AUTH_TYPE_APP_SP,
-  AuthKind,
-  DEFAULT_ACCESS_TOKEN_HEADER,
-  TargetKind,
-} from "./types.ts";
-
-const logger = authLogger("profile-selection");
-
-export const SETTINGS_SECTION = "__settings__";
-
-export type Environment = Readonly<Record<string, string | undefined>>;
-export type IniConfig = Map<string, Map<string, string>>;
-
-export interface RawProfile {
-  host?: string;
-  accountId?: string;
-  workspaceId?: string;
-  clientId?: string;
-  clientSecret?: string;
-  accessToken?: string;
-  groupId?: string;
-  scopes?: string;
-  authType?: string;
-}
-
-/** Parse Databricks INI text through the maintained `ini` package. */
-export function parseDatabricksConfig(source: string): IniConfig {
-  let parsed: Record<string, unknown>;
-  try {
-    parsed = parseIni(source) as Record<string, unknown>;
-  } catch (cause) {
-    throw new AuthError("config", "Databricks configuration is not valid INI", { cause });
-  }
-  const config: IniConfig = new Map();
-  for (const [name, value] of Object.entries(parsed)) {
-    if (!name.trim() || !isRecord(value))
-      throw new AuthError("config", "Databricks configuration values must belong to a profile");
-    const section = new Map<string, string>();
-    for (const [key, entry] of Object.entries(value)) {
-      if (entry === undefined || entry === null) continue;
-      section.set(key.trim().toLowerCase(), String(entry).trim());
-    }
-    config.set(name.trim(), section);
-  }
-  return config;
-}
-
-export function loadRawProfile(config: IniConfig | undefined, name: string): RawProfile {
-  const section = config?.get(name);
-  return {
-    host: section?.get("host"),
-    accountId: section?.get("account_id"),
-    workspaceId: section?.get("workspace_id"),
-    clientId: section?.get("client_id"),
-    clientSecret: section?.get("client_secret"),
-    accessToken: section?.get("token"),
-    groupId: section?.get("group_id"),
-    scopes: section?.get("scopes"),
-    authType: nonempty(section?.get("auth_type"))?.toLowerCase(),
-  };
-}
-
-export function resolveProfileName(
-  requested: string | undefined,
-  explicit: boolean,
-  config: IniConfig | undefined,
-  preferUserToMachine: boolean,
-): string {
-  let selected = requested;
-  let source = requested ? "requested" : undefined;
-  if (!selected) {
-    selected = nonempty(config?.get(SETTINGS_SECTION)?.get("default_profile"));
-    if (selected) source = "settings-default";
-  }
-  if (!selected && config?.has("DEFAULT")) {
-    selected = "DEFAULT";
-    source = "default-section";
-  }
-  if (!selected) {
-    const profiles = [...(config?.keys() ?? [])].filter((name) => name !== SETTINGS_SECTION);
-    if (profiles.length === 1) {
-      selected = profiles[0];
-      source = "sole-profile";
-    }
-  }
-  if (!selected) {
-    selected = "DEFAULT";
-    source = "fallback";
-  }
-  if (selected === SETTINGS_SECTION)
-    throw new AuthError("config", `${SETTINGS_SECTION} is reserved`);
-  if (explicit || !preferUserToMachine || !config) {
-    logger.debug("selected Databricks profile", {
-      profile: selected,
-      source,
-      explicit,
-      preferUserToMachine,
-    });
-    return selected;
-  }
-  const current = loadRawProfile(config, selected);
-  if (!isM2mProfile(current) || !current.host) {
-    logger.debug("selected Databricks profile", {
-      profile: selected,
-      source,
-      explicit,
-      preferUserToMachine,
-    });
-    return selected;
-  }
-  const matches = [...config.keys()].filter((name) => {
-    if (name === selected || name === SETTINGS_SECTION) return false;
-    const candidate = loadRawProfile(config, name);
-    return candidate.authType === "databricks-cli" && sameTarget(current, candidate);
-  });
-  const preferred = matches.length === 1 ? matches[0]! : selected;
-  logger.debug("selected Databricks profile", {
-    profile: preferred,
-    source: preferred === selected ? source : "matching-cli-profile",
-    originalProfile: preferred === selected ? undefined : selected,
-    explicit,
-    preferUserToMachine,
-    matchingCliProfiles: matches.length,
-  });
-  return preferred;
-}
-
-/** Normalize Databricks hosts and require TLS outside loopback development. */
-export function normalizeHost(value: string | undefined, profile = "DEFAULT"): string {
-  const selected = nonempty(value);
-  if (!selected) throw new AuthError("config", `Profile ${profile} has no host`);
-  const withScheme = /^https?:\/\//i.test(selected) ? selected : `https://${selected}`;
-  let url: URL;
-  try {
-    url = new URL(withScheme);
-  } catch (cause) {
-    throw new AuthError("config", `Profile ${profile} has an invalid host`, { cause });
-  }
-  if (url.protocol !== "https:" && url.hostname !== "localhost" && url.hostname !== "127.0.0.1") {
-    throw new AuthError("config", "Databricks host must use HTTPS");
-  }
-  return url.toString().replace(/\/$/, "");
-}
-
-export function resolveAuthKind(
-  authType: string | undefined,
-  clientId: string | undefined,
-  clientSecret: string | undefined,
-  accessToken: string | undefined,
-): AuthKind {
-  switch (authType) {
-    case "databricks-cli":
-    case "oauth-u2m":
-      return AuthKind.UserToMachine;
-    case "oauth-m2m":
-      if (!clientId || !clientSecret)
-        throw new AuthError("config", "oauth-m2m requires client_id and client_secret");
-      return AuthKind.MachineToMachine;
-    case "pat":
-      if (!accessToken) throw new AuthError("config", "pat requires token");
-      return AuthKind.PersonalAccessToken;
-    case AUTH_TYPE_APP_OBO:
-    case "app-obo":
-      if (!accessToken)
-        throw new AuthError("config", "app_obo requires the configured access token header");
-      return AuthKind.AppOnBehalfOf;
-    case AUTH_TYPE_APP_SP:
-    case "app-sp":
-      if (!clientId || !clientSecret)
-        throw new AuthError("config", "app_sp requires client id and secret");
-      return AuthKind.AppServicePrincipal;
-    case undefined:
-      if (clientId && clientSecret) return AuthKind.MachineToMachine;
-      if (clientSecret) throw new AuthError("config", "oauth-m2m client_secret requires client_id");
-      return accessToken ? AuthKind.PersonalAccessToken : AuthKind.UserToMachine;
-    default:
-      throw new AuthError("config", `Authentication type ${authType} is not supported`);
-  }
-}
-
-export function requestOboToken(
-  headers?: Record<string, string>,
-  headerName = DEFAULT_ACCESS_TOKEN_HEADER,
-): string | undefined {
-  const entry = Object.entries(headers ?? {}).find(
-    ([name]) => name.toLowerCase() === headerName.toLowerCase(),
-  );
-  const value = nonempty(entry?.[1]);
-  if (!value) return undefined;
-  if (headerName.toLowerCase() !== DEFAULT_ACCESS_TOKEN_HEADER) return value;
-  const [scheme, ...parts] = value.split(/\s+/);
-  return scheme?.toLowerCase() === "bearer" ? nonempty(parts.join(" ")) : undefined;
-}
-
-export function inferTarget(host: string | undefined, accountId: string | undefined): TargetKind {
-  if (accountId && host) {
-    try {
-      if (new URL(normalizeHost(host)).hostname === "accounts.cloud.databricks.com")
-        return TargetKind.Account;
-    } catch {}
-  }
-  return TargetKind.Workspace;
-}
-
-export function parseTarget(value: string): TargetKind {
-  switch (value.trim().toLowerCase()) {
-    case TargetKind.Workspace:
-      return TargetKind.Workspace;
-    case TargetKind.Account:
-      return TargetKind.Account;
-    case TargetKind.Unified:
-      return TargetKind.Unified;
-    default:
-      throw new AuthError("config", "Target must be workspace, account, or unified");
-  }
-}
-
-export function cleanList(values: readonly string[]): string[] {
-  return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
-}
-
-export function nonempty(value: string | undefined): string | undefined {
-  const selected = value?.trim();
-  return selected ? selected : undefined;
-}
-
-export function missing(profile: string, field: string): never {
-  throw new AuthError("config", `Profile ${profile} requires ${field}`);
-}
-
-function sameTarget(left: RawProfile, right: RawProfile): boolean {
-  try {
-    if (normalizeHost(left.host) !== normalizeHost(right.host)) return false;
-  } catch {
-    return false;
-  }
-  return (
-    (!left.accountId || left.accountId === right.accountId) &&
-    (!left.workspaceId || left.workspaceId === right.workspaceId)
-  );
-}
-
-function isM2mProfile(profile: RawProfile): boolean {
-  return (
-    profile.authType === "oauth-m2m" ||
-    (!profile.authType && Boolean(profile.clientId && profile.clientSecret))
-  );
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}