@equinor/fusion-framework-module-msal-node 2.0.4-msal-v5.0 → 3.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -4
- package/dist/esm/AuthProviderInteractive.js +24 -3
- package/dist/esm/AuthProviderInteractive.js.map +1 -1
- package/dist/esm/version.js +1 -1
- package/dist/esm/version.js.map +1 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/types/AuthProviderInteractive.d.ts +1 -1
- package/dist/types/version.d.ts +1 -1
- package/package.json +4 -4
- package/src/AuthProviderInteractive.ts +29 -7
- package/src/version.ts +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,13 +1,21 @@
|
|
|
1
1
|
# @equinor/fusion-framework-module-msal-node
|
|
2
2
|
|
|
3
|
-
##
|
|
3
|
+
## 3.0.1
|
|
4
4
|
|
|
5
5
|
### Patch Changes
|
|
6
6
|
|
|
7
|
-
- [#
|
|
7
|
+
- [#4157](https://github.com/equinor/fusion-framework/pull/4157) [`6aa8e1f`](https://github.com/equinor/fusion-framework/commit/6aa8e1f5c9d852b25e97aa7d98a63008c64d4581) Thanks [@Noggling](https://github.com/Noggling)! - Internal: patch release to align TypeScript types across packages for consistent type compatibility.
|
|
8
8
|
|
|
9
|
-
- Updated dependencies [[`
|
|
10
|
-
- @equinor/fusion-framework-module@5.0.6
|
|
9
|
+
- Updated dependencies [[`6aa8e1f`](https://github.com/equinor/fusion-framework/commit/6aa8e1f5c9d852b25e97aa7d98a63008c64d4581)]:
|
|
10
|
+
- @equinor/fusion-framework-module@5.0.6
|
|
11
|
+
|
|
12
|
+
## 3.0.0
|
|
13
|
+
|
|
14
|
+
### Major Changes
|
|
15
|
+
|
|
16
|
+
- [#3929](https://github.com/equinor/fusion-framework/pull/3929) [`46a1c71`](https://github.com/equinor/fusion-framework/commit/46a1c710d9cd2ed20946932ceab2a5e8c0fb8a2b) Thanks [@dependabot](https://github.com/apps/dependabot)! - Require Node.js >= 20 for `@equinor/fusion-framework-module-msal-node` due to upgrading `@azure/msal-node` and `@azure/msal-node-extensions` to v5.
|
|
17
|
+
|
|
18
|
+
Migration: upgrade runtimes to Node.js 20+.
|
|
11
19
|
|
|
12
20
|
## 2.0.3
|
|
13
21
|
|
|
@@ -1,7 +1,29 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { createHash, randomBytes } from 'node:crypto';
|
|
2
2
|
import openBrowser from 'open';
|
|
3
3
|
import { createAuthServer } from './create-auth-server.js';
|
|
4
4
|
import { AuthProvider } from './AuthProvider.js';
|
|
5
|
+
/**
|
|
6
|
+
* Encodes a byte buffer to Base64 URL encoding (RFC 4648 §5) without padding.
|
|
7
|
+
*
|
|
8
|
+
* Used for PKCE code verifier/challenge values (RFC 7636).
|
|
9
|
+
*
|
|
10
|
+
* @param buffer - Bytes to encode.
|
|
11
|
+
* @returns Base64url-encoded string without trailing `=` padding.
|
|
12
|
+
*/
|
|
13
|
+
const base64UrlEncode = (buffer) => buffer.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
|
|
14
|
+
/**
|
|
15
|
+
* Generates PKCE verifier and challenge for the authorization code flow.
|
|
16
|
+
*
|
|
17
|
+
* Uses a 32-octet cryptographically random verifier (recommended by RFC 7636)
|
|
18
|
+
* and derives the S256 challenge as `BASE64URL-ENCODE(SHA256(ASCII(verifier)))`.
|
|
19
|
+
*
|
|
20
|
+
* @returns PKCE verifier and S256 challenge.
|
|
21
|
+
*/
|
|
22
|
+
const generatePkceCodes = () => {
|
|
23
|
+
const verifier = base64UrlEncode(randomBytes(32));
|
|
24
|
+
const challenge = base64UrlEncode(createHash('sha256').update(verifier).digest());
|
|
25
|
+
return { verifier, challenge };
|
|
26
|
+
};
|
|
5
27
|
/**
|
|
6
28
|
* Implementation of an interactive authentication provider for the Fusion MSAL Node module.
|
|
7
29
|
*
|
|
@@ -43,8 +65,7 @@ export class AuthProviderInteractive extends AuthProvider {
|
|
|
43
65
|
// Generate a new PKCE code verifier and challenge
|
|
44
66
|
// This is used to enhance security in the authorization code flow
|
|
45
67
|
// by preventing authorization code interception attacks.
|
|
46
|
-
const
|
|
47
|
-
const { verifier, challenge } = await cryptoProvider.generatePkceCodes();
|
|
68
|
+
const { verifier, challenge } = generatePkceCodes();
|
|
48
69
|
const authCodeUrl = await this._client.getAuthCodeUrl({
|
|
49
70
|
scopes,
|
|
50
71
|
redirectUri: `http://localhost:${port}`,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AuthProviderInteractive.js","sourceRoot":"","sources":["../../src/AuthProviderInteractive.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"AuthProviderInteractive.js","sourceRoot":"","sources":["../../src/AuthProviderInteractive.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,WAAW,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CACjD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,GAA4C,EAAE;IACtE,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC;AAkBF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAsB;IAE9B,YAAY,MAA+B,EAAE,OAA4B;QACvE,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,KAAK,CAAC,OAA0C;QAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QACnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE9C,kDAAkD;QAClD,kEAAkE;QAClE,yDAAyD;QACzD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YACpD,MAAM;YACN,WAAW,EAAE,oBAAoB,IAAI,EAAE;YACvC,aAAa,EAAE,SAAS;YACxB,mBAAmB,EAAE,MAAM;SAC5B,CAAC,CAAC;QAEH,uCAAuC;QACvC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAE/B,qCAAqC;QACrC,IAAI,MAAM;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEhC,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE;YAC5C,YAAY,EAAE,QAAQ;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,YAAY,CAAC,OAEzB;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;CACF"}
|
package/dist/esm/version.js
CHANGED
package/dist/esm/version.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,OAAO,GAAG,
|
|
1
|
+
{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}
|