@dvsa/appdev-api-common 0.2.1 → 0.3.1

package/.secignore

@@ -0,0 +1,4 @@
+.npmrc
+
+# Reason: "Contains word: credential"
+packages/appdev-common/src/auth/client-credentials.ts

package/auth/client-credentials.d.ts

@@ -0,0 +1,19 @@
+export interface ClientCredentialsResponse {
+    token_type: string;
+    expires_in: number;
+    ext_expires_in: number;
+    access_token: string;
+}
+export declare class ClientCredentials {
+    private readonly tokenUrl;
+    private readonly clientId;
+    private readonly clientSecret;
+    private readonly scope;
+    private readonly debugMode;
+    private static accessToken;
+    private static readonly grant_type;
+    constructor(tokenUrl: string, clientId: string, clientSecret: string, scope: string, debugMode?: boolean);
+    getAccessToken(): Promise<string>;
+    private fetchClientCredentials;
+    private isAccessTokenExpired;
+}

package/auth/client-credentials.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientCredentials = void 0;
+const node_querystring_1 = require("node:querystring");
+const jose_1 = require("jose");
+class ClientCredentials {
+    tokenUrl;
+    clientId;
+    clientSecret;
+    scope;
+    debugMode;
+    static accessToken;
+    static grant_type = "client_credentials";
+    constructor(tokenUrl, clientId, clientSecret, scope, debugMode = false) {
+        this.tokenUrl = tokenUrl;
+        this.clientId = clientId;
+        this.clientSecret = clientSecret;
+        this.scope = scope;
+        this.debugMode = debugMode;
+    }
+    async getAccessToken() {
+        if (!ClientCredentials.accessToken || this.isAccessTokenExpired()) {
+            const { access_token } = await this.fetchClientCredentials();
+            if (this.debugMode)
+                console.log("[DEBUG] New access token fetched:", access_token);
+            ClientCredentials.accessToken = access_token;
+        }
+        else if (this.debugMode) {
+            console.log("[DEBUG] Using existing access token:", ClientCredentials.accessToken);
+        }
+        return ClientCredentials.accessToken;
+    }
+    async fetchClientCredentials() {
+        const response = await fetch(this.tokenUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: (0, node_querystring_1.stringify)({
+                grant_type: ClientCredentials.grant_type,
+                client_id: this.clientId,
+                client_secret: this.clientSecret,
+                scope: this.scope,
+            }),
+        });
+        if (!response.ok) {
+            console.error("Error fetching client credentials", response);
+            throw new Error("Failed to fetch client credentials");
+        }
+        return (await response.json());
+    }
+    isAccessTokenExpired() {
+        try {
+            const decodedAccessToken = (0, jose_1.decodeJwt)(ClientCredentials.accessToken);
+            const currentTime = new Date().getTime() / 1000;
+            // Check if exp exists before comparing as it can be undefined
+            if (!decodedAccessToken?.exp) {
+                return true;
+            }
+            return currentTime > decodedAccessToken.exp;
+        }
+        catch (err) {
+            console.error("Error decoding access token:", err);
+            return true;
+        }
+    }
+}
+exports.ClientCredentials = ClientCredentials;

package/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./api/http-status-codes";
 export * from "./auth/auth-checker";
 export * from "./auth/auth-errors";
+export * from "./auth/client-credentials";
 export * from "./auth/verify-jwt";
 export * from "./validation/request-body";

package/index.js

@@ -17,5 +17,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./api/http-status-codes"), exports);
 __exportStar(require("./auth/auth-checker"), exports);
 __exportStar(require("./auth/auth-errors"), exports);
+__exportStar(require("./auth/client-credentials"), exports);
 __exportStar(require("./auth/verify-jwt"), exports);
 __exportStar(require("./validation/request-body"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvsa/appdev-api-common",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "keywords": [
     "dvsa",
     "nodejs",
@@ -20,7 +20,8 @@
     "build": "npm run clean && tsc",
     "build:package": "npm run build",
     "prepublishOnly": "npm run build:package && cp -r ./dist/* . && rm -rf ./dist",
-    "postpublish": "git clean -fd && npm run clean:temp"
+    "postpublish": "git clean -fd && npm run clean:temp",
+    "gitSecrets": "git secrets --scan . && git log -p -- . | scanrepo"
   },
   "dependencies": {
     "ajv": "^8.17.1",