@dev-crew-berlin/enter-js-utils 0.45.1 → 0.45.2

package/README.md

@@ -25,20 +25,29 @@ typed js client for the enter api.
 ```typescript
 import EnterAPIClient from '@dev-crew-berlin/enter-js-utils/api-client'
 
-const url = 'https://api.enter.events'
 
 async function apiExample() {
   // fetch access Token
-  const accessToken = await EnterAPIClient.fetchAccessToken({
-    url: url,
-    user: 'me',
-    password: 'xxx',
-    deviceName: 'my-device',
+  const accessTokenResult = await EnterAPIClient.fetchAccessToken({
+    oidc: {
+      url: 'https://auth.enter.events',
+      projectId: '246359835166114187'
+    }
+    user: {
+      userId: '',
+      keyId: '',
+      key: ''
+    }
   })
+  if (!accessTokenResult.success) {
+    throw new Error(accessTokenResult.error)
+  }
+
+  const accessToken = accessTokenResult.data.accessToken
 
   // create api instance
   const api = new EnterAPIClient({
-    credentials: { accessToken, url },
+    credentials: { accessToken, url: 'https://api.enter.events' },
     onLogout: (reason?: string) => {
       deleteCredetials()
     },

package/dist/api-client/api-base.d.ts

@@ -1,4 +1,4 @@
-import { APIResult } from '../lib';
+import { APIResult, Result } from '../lib';
 import { paths } from '../generated/api-schema';
 export interface APICredentials {
     accessToken: string;
@@ -30,6 +30,20 @@ export default class APIBase {
         onLogout: (reason?: string) => void;
     });
     private static fetchResult;
+    static fetchAccessToken(args: {
+        oidc: {
+            url: string;
+            projectId: string;
+        };
+        user: {
+            userId: string;
+            keyId: string;
+            key: string;
+        };
+    }): Promise<Result<string, {
+        accessToken: string;
+        expires: Date;
+    }>>;
     private fetchFromEnter;
     protected get<Path extends keyof paths>(endpoint: Path): Promise<APIResult<ResponseType<Path, 'get'>>>;
     protected post<Path extends keyof paths>(endpoint: Path, data: RequestBody<Path, 'post'>): Promise<APIResult<ResponseType<Path, 'post'>>>;

package/dist/api-client/api-base.js

@@ -1,3 +1,4 @@
+import jws from 'jws';
 import { failure, success } from '../lib';
 export default class APIBase {
   constructor(args) {
@@ -15,6 +16,58 @@ export default class APIBase {
       return failure(e);
     }
   }
+  static async fetchAccessToken(args) {
+    // see https://zitadel.com/docs/guides/integrate/private-key-jwt to learn about this flow
+    const {
+      oidc,
+      user
+    } = args;
+    const timestampNow = new Date().getTime() / 1000;
+    const assertionToken = jws.sign({
+      header: {
+        alg: 'RS256',
+        kid: user.keyId
+      },
+      payload: {
+        iss: user.userId,
+        sub: user.userId,
+        aud: oidc.url,
+        iat: timestampNow,
+        exp: timestampNow + 60 * 5
+      },
+      privateKey: user.key
+    });
+    const scopes = ['openid', 'profile', `urn:zitadel:iam:org:project:id:${oidc.projectId}:aud`];
+    try {
+      const res = await fetch(`${oidc.url}/oauth/v2/token`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/x-www-form-urlencoded'
+        },
+        body: new URLSearchParams({
+          grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+          scope: scopes.join(' '),
+          assertion: assertionToken
+        })
+      });
+      if (res.status >= 300) {
+        try {
+          const error = await res.json();
+          return failure(error.toString());
+        } catch {
+          return failure(res.statusText);
+        }
+      }
+      const token = await res.json();
+      const expireTimestamp = new Date().getTime() + token.expires_in * 1000;
+      return success({
+        accessToken: token.access_token,
+        expires: new Date(expireTimestamp)
+      });
+    } catch (error) {
+      return failure(`${error}`);
+    }
+  }
   async fetchFromEnter(endpoint, method, data) {
     const body = data !== null ? JSON.stringify(data) : null;
     const headers = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev-crew-berlin/enter-js-utils",
-  "version": "0.45.1",
+  "version": "0.45.2",
   "description": "utils such as vaildation and other helpers to work with data from the enter app",
   "files": [
     "dist",
@@ -52,6 +52,7 @@
     "@storybook/manager-webpack4": "^6.5.15",
     "@storybook/react": "^6.5.15",
     "@storybook/testing-library": "^0.0.13",
+    "@types/jws": "^3.2.9",
     "@types/node": "^17.0.38",
     "@types/react": "^18.0.10",
     "@types/react-dom": "^18.0.5",
@@ -72,6 +73,7 @@
   },
   "dependencies": {
     "fp-ts": "^2.12.1",
+    "jws": "^4.0.0",
     "styled-jsx": "^5.0.2",
     "uuid": "^9.0.0"
   }