@frontegg/redux-store 7.0.0-alpha.1 → 7.0.0-alpha.10

package/node/auth/LoginState/helpers.js

@@ -0,0 +1,150 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isAbsoluteUrl = exports.getSearchParamsFromUrl = exports.getSearchParam = exports.getRedirectUrl = exports.getPathAndSearchParamsFromUrl = exports.getNumberOfMfaDevices = exports.getMfaStepForNotEnrolledUsers = exports.getMfaStepForEnrolledUsers = exports.getBaseNameWithoutSlashSuffix = exports.TENANT_ID_PARAM_KEY = void 0;
+exports.isEmailPayload = isEmailPayload;
+exports.isOauthCallbackRoute = void 0;
+var _restApi = require("@frontegg/rest-api");
+var _interfaces = require("../MfaState/interfaces");
+const isAbsoluteUrl = path => {
+  try {
+    new URL(path);
+    return true;
+  } catch (e) {
+    return false;
+  }
+};
+exports.isAbsoluteUrl = isAbsoluteUrl;
+const isValidRedirectUrl = (redirectUrl, allowedRedirectOrigins) => {
+  const currentUrl = new URL(window.location.href);
+  const redirectURL = new URL(redirectUrl);
+  const isSameSite = redirectURL.origin === currentUrl.origin;
+  const isOriginInWhiteList = allowedRedirectOrigins.includes(redirectURL.origin);
+  return isOriginInWhiteList || isSameSite;
+};
+const getRedirectUrl = ({
+  authenticatedUrl,
+  enforceRedirectToSameSite,
+  allowedRedirectOrigins,
+  includeQueryParam
+}) => {
+  const currentUrl = new URL(window.location.href);
+  let redirectUrl = authenticatedUrl;
+  const redirectUrlQueryParam = currentUrl.searchParams.get('redirectUrl');
+  if (redirectUrlQueryParam) {
+    if (!enforceRedirectToSameSite || !isAbsoluteUrl(redirectUrlQueryParam)) {
+      redirectUrl = redirectUrlQueryParam;
+    } else {
+      if (isValidRedirectUrl(redirectUrlQueryParam, allowedRedirectOrigins)) {
+        redirectUrl = redirectUrlQueryParam;
+      } else {
+        console.warn('The redirect url param is not valid, the origin is a different site');
+      }
+    }
+  } else if (includeQueryParam) {
+    redirectUrl += window.location.search;
+  }
+  return redirectUrl;
+};
+exports.getRedirectUrl = getRedirectUrl;
+const getSearchParamsFromUrl = url => {
+  const {
+    searchParams
+  } = new URL(url);
+  const stringifySearchParam = searchParams.toString();
+  if (stringifySearchParam) {
+    return `?${stringifySearchParam}`;
+  }
+  return undefined;
+};
+exports.getSearchParamsFromUrl = getSearchParamsFromUrl;
+const getPathAndSearchParamsFromUrl = url => {
+  const {
+    pathname
+  } = new URL(url);
+  const searchParams = getSearchParamsFromUrl(url);
+  if (searchParams) {
+    return pathname + searchParams;
+  }
+  return pathname;
+};
+
+/**
+ *
+ * @param key
+ * @returns the value of the param as string or undefined if it does not exist
+ */
+exports.getPathAndSearchParamsFromUrl = getPathAndSearchParamsFromUrl;
+const getSearchParam = key => {
+  const params = new URLSearchParams(window.location.search);
+  const param = params.get(key);
+  return param != null ? param : undefined;
+};
+exports.getSearchParam = getSearchParam;
+const TENANT_ID_PARAM_KEY = 'tenantId';
+exports.TENANT_ID_PARAM_KEY = TENANT_ID_PARAM_KEY;
+const getNumberOfMfaDevices = mfaDevices => {
+  const numberOfWebAuthnDevices = +Boolean(mfaDevices.webauthn.length);
+  const numberOfPhoneDevices = +Boolean(mfaDevices.phones.length);
+  const numberOfAuthenticators = +Boolean(mfaDevices.authenticators.length);
+  const numberOfEmails = +Boolean(mfaDevices.emails.length);
+  const totalDevices = numberOfWebAuthnDevices + numberOfPhoneDevices + numberOfAuthenticators + numberOfEmails;
+  return {
+    numberOfWebAuthnDevices,
+    numberOfPhoneDevices,
+    numberOfAuthenticators,
+    numberOfEmails,
+    totalDevices
+  };
+};
+exports.getNumberOfMfaDevices = getNumberOfMfaDevices;
+const getMfaStepForEnrolledUsers = mfaDevices => {
+  const {
+    numberOfPhoneDevices,
+    numberOfAuthenticators,
+    numberOfEmails,
+    totalDevices
+  } = getNumberOfMfaDevices(mfaDevices);
+  if (totalDevices === 1) {
+    if (numberOfAuthenticators) {
+      return _interfaces.MFAStep.authenticatorApp;
+    } else if (numberOfPhoneDevices) {
+      return _interfaces.MFAStep.smsVerifyCode;
+    } else if (numberOfEmails) {
+      return _interfaces.MFAStep.emailVerifyCode;
+    }
+  }
+  return _interfaces.MFAStep.verify;
+};
+exports.getMfaStepForEnrolledUsers = getMfaStepForEnrolledUsers;
+const getMfaStepForNotEnrolledUsers = mfaStrategies => {
+  if (mfaStrategies.length === 1) {
+    const [strategy] = mfaStrategies;
+    if (strategy === _restApi.MFAStrategyEnum.AuthenticatorApp) {
+      return _interfaces.MFAStep.authenticatorApp;
+    } else if (strategy === _restApi.MFAStrategyEnum.SMS) {
+      return _interfaces.MFAStep.smsSetPhoneNumber;
+    } else if (strategy === _restApi.MFAStrategyEnum.EmailCode) {
+      return _interfaces.MFAStep.emailVerifyCode;
+    }
+  }
+  return _interfaces.MFAStep.verify;
+};
+exports.getMfaStepForNotEnrolledUsers = getMfaStepForNotEnrolledUsers;
+const isOauthCallbackRoute = activeUri => {
+  return activeUri === '/oauth/callback';
+};
+exports.isOauthCallbackRoute = isOauthCallbackRoute;
+function isEmailPayload(payload) {
+  return 'email' in payload;
+}
+const getBaseNameWithoutSlashSuffix = state => {
+  const basename = _restApi.ContextHolder.for(state.root.appName).getBasename();
+  if (basename != null && basename.endsWith('/')) {
+    return basename.slice(0, -1);
+  }
+  return basename;
+};
+exports.getBaseNameWithoutSlashSuffix = getBaseNameWithoutSlashSuffix;

package/node/auth/LoginState/index.js

@@ -1,155 +1,20 @@
 "use strict";
 
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-Object.defineProperty(exports, "getRedirectUrl", {
+Object.defineProperty(exports, "buildLoginActions", {
   enumerable: true,
   get: function () {
-    return _utils2.getRedirectUrl;
+    return _actions.default;
   }
 });
-exports.loginState = exports.loginReducers = exports.loginActions = void 0;
-var _toolkit = require("@reduxjs/toolkit");
-var _interfaces = require("./interfaces");
-var _utils = require("../utils");
-var _constants = require("../../constants");
-var _utils2 = require("./utils");
-const loginState = {
-  flow: _interfaces.LoginFlow.Login,
-  step: _interfaces.LoginStep.preLogin,
-  loading: false,
-  email: '',
-  tenants: []
-};
-exports.loginState = loginState;
-const reducers = {
-  setLoginState: (0, _utils.typeReducerForKey)('loginState'),
-  resetLoginState: (0, _utils.resetStateByKey)('loginState', {
-    loginState
-  })
-};
-exports.loginReducers = reducers;
-const actions = {
-  requestAuthorize: (0, _toolkit.createAction)(`${_constants.authStoreName}/requestAuthorize`, (payload = false) => ({
-    payload
-  })),
-  requestAuthorizeSSR: (0, _toolkit.createAction)(`${_constants.authStoreName}/requestAuthorizeSSR`, payload => ({
-    payload
-  })),
-  requestHostedLoginAuthorize: (0, _toolkit.createAction)(`${_constants.authStoreName}/requestHostedLoginAuthorize`, payload => ({
-    payload
-  })),
-  requestHostedLoginAuthorizeV2: (0, _toolkit.createAction)(`${_constants.authStoreName}/requestHostedLoginAuthorizeV2`, payload => ({
-    payload
-  })),
-  handleHostedLoginCallback: (0, _toolkit.createAction)(`${_constants.authStoreName}/handleHostedLoginCallback`, payload => ({
-    payload
-  })),
-  afterAuthNavigation: (0, _toolkit.createAction)(`${_constants.authStoreName}/afterAuthNavigation`),
-  preLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/preLogin`, payload => ({
-    payload
-  })),
-  postLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/postLogin`, payload => ({
-    payload
-  })),
-  login: (0, _toolkit.createAction)(`${_constants.authStoreName}/login`, payload => ({
-    payload
-  })),
-  loginWithMfa: (0, _toolkit.createAction)(`${_constants.authStoreName}/loginWithMfa`, payload => ({
-    payload
-  })),
-  recoverMfa: (0, _toolkit.createAction)(`${_constants.authStoreName}/recoverMfa`, payload => ({
-    payload
-  })),
-  logout: (0, _toolkit.createAction)(`${_constants.authStoreName}/logout`, payload => ({
-    payload
-  })),
-  silentLogout: (0, _toolkit.createAction)(`${_constants.authStoreName}/silentLogout`, payload => ({
-    payload
-  })),
-  checkIfAllowToRememberMfaDevice: (0, _toolkit.createAction)(`${_constants.authStoreName}/checkIfAllowToRememberMfaDevice`, payload => ({
-    payload
-  })),
-  changePhoneNumberWithVerification: (0, _toolkit.createAction)(`${_constants.authStoreName}/changePhoneNumberWithVerification`, payload => ({
-    payload
-  })),
-  verifyChangePhoneNumber: (0, _toolkit.createAction)(`${_constants.authStoreName}/verifyChangePhoneNumber`, payload => ({
-    payload
-  })),
-  quickSmsPasswordlessPreLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/quickSmsPasswordlessPreLogin`, payload => ({
-    payload
-  })),
-  passwordlessPreLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/passwordlessPreLogin`, payload => ({
-    payload
-  })),
-  passwordlessPostLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/passwordlessPostLogin`, payload => ({
-    payload
-  })),
-  verifyInviteToken: (0, _toolkit.createAction)(`${_constants.authStoreName}/verifyInviteToken`, payload => ({
-    payload
-  })),
-  webAuthnPrelogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/webAuthnPrelogin`, payload => ({
-    payload
-  })),
-  webAuthnPostLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/webAuthnPostLogin`, payload => ({
-    payload
-  })),
-  webAuthnCreateNewDeviceSession: (0, _toolkit.createAction)(`${_constants.authStoreName}/webAuthnCreateNewDeviceSession`, payload => ({
-    payload
-  })),
-  webAuthnVerifyNewDeviceSession: (0, _toolkit.createAction)(`${_constants.authStoreName}/webAuthnVerifyNewDeviceSession`, payload => ({
-    payload
-  })),
-  getUserIP: (0, _toolkit.createAction)(`${_constants.authStoreName}/getUserIP`, payload => ({
-    payload
-  })),
-  preEnrollMFAWebAuthnForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/preEnrollWebAuthNForLogin`, payload => ({
-    payload
-  })),
-  enrollMFAWebAuthnForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/enrollWebAuthNForLogin`, payload => ({
-    payload
-  })),
-  enrollMFAAuthenticatorAppForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/enrollMFAAuthenticatorAppForLogin`, payload => ({
-    payload
-  })),
-  preEnrollMFASMSForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/preEnrollMFASMSForLogin`, payload => ({
-    payload
-  })),
-  enrollMFASMSForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/enrollMFASMSForLogin`, payload => ({
-    payload
-  })),
-  preVerifyMFAWebAuthnForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/preVerifyMFAWebAuthnForLogin`, payload => ({
-    payload
-  })),
-  verifyMFAWebAuthnForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/verifyMFAWebAuthnForLogin`, payload => ({
-    payload
-  })),
-  preVerifyMFASMSForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/preVerifyMFASMSForLogin`, payload => ({
-    payload
-  })),
-  verifyMFASMSForLogin: (0, _toolkit.createAction)(`${_constants.authStoreName}/verifyMFASMSForLogin`, payload => ({
-    payload
-  })),
-  preVerifyMFAEmailCode: (0, _toolkit.createAction)(`${_constants.authStoreName}/preVerifyMFAEmailCode`, payload => ({
-    payload
-  })),
-  verifyMFAEmailCode: (0, _toolkit.createAction)(`${_constants.authStoreName}/verifyMFAEmailCode`, payload => ({
-    payload
-  })),
-  resetBreachedPassword: (0, _toolkit.createAction)(`${_constants.authStoreName}/resetBreachedPassword`, payload => ({
-    payload
-  }))
-};
-
-/**
- *  To be used for actions types after dispatch, and should contains
- *  the reducers and actions as standalone function
- */
-exports.loginActions = actions;
-// noinspection JSUnusedLocalSymbols
-/**
- *  if you see error in matcher that's mean the DispatchAction does not
- *  contains the same functions in reducers and actions
- */
-const Matcher = {};
+Object.defineProperty(exports, "createLoginState", {
+  enumerable: true,
+  get: function () {
+    return _state.default;
+  }
+});
+var _state = _interopRequireDefault(require("./state"));
+var _actions = _interopRequireDefault(require("./actions"));

package/node/auth/LoginState/interfaces.js

@@ -9,7 +9,7 @@ Object.defineProperty(exports, "AuthStrategyEnum", {
     return _restApi.AuthStrategyEnum;
   }
 });
-exports.QuickLoginStrategy = exports.LoginStep = exports.LoginFlow = void 0;
+exports.QuickLoginStrategy = exports.LoginStep = exports.LoginFlow = exports.LoginActionTypes = void 0;
 var _restApi = require("@frontegg/rest-api");
 let LoginStep;
 exports.LoginStep = LoginStep;
@@ -43,4 +43,11 @@ exports.QuickLoginStrategy = QuickLoginStrategy;
   QuickLoginStrategy["UsbKey"] = "usb-key";
   QuickLoginStrategy["Android"] = "android";
   QuickLoginStrategy["Sms"] = "sms";
-})(QuickLoginStrategy || (exports.QuickLoginStrategy = QuickLoginStrategy = {}));
+})(QuickLoginStrategy || (exports.QuickLoginStrategy = QuickLoginStrategy = {}));
+let LoginActionTypes;
+exports.LoginActionTypes = LoginActionTypes;
+(function (LoginActionTypes) {
+  LoginActionTypes["social-login"] = "social-login";
+  LoginActionTypes["custom-social-login"] = "custom-social-login";
+  LoginActionTypes["direct"] = "direct";
+})(LoginActionTypes || (exports.LoginActionTypes = LoginActionTypes = {}));

package/node/auth/LoginState/state.js

@@ -0,0 +1,18 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.initialState = exports.default = void 0;
+var _interfaces = require("./interfaces");
+var _proxy = require("../../toolkit/proxy");
+const initialState = {
+  flow: _interfaces.LoginFlow.Login,
+  step: _interfaces.LoginStep.preLogin,
+  loading: false,
+  email: '',
+  tenants: []
+};
+exports.initialState = initialState;
+var _default = overrideState => (0, _proxy.createProxy)(initialState, overrideState);
+exports.default = _default;