@functionalcms/svelte-components 2.19.0 → 2.19.2

package/dist/auth/authenticationHandle.d.ts

@@ -1,2 +1,2 @@
 import { type Handle } from '@sveltejs/kit';
-export declare const authenticationHandle: (issuer: string, clientId: string, scope?: string, redirectPath?: string) => Handle;
+export declare const authenticationHandle: (scope?: string, redirectPath?: string) => Handle;

package/dist/auth/authenticationHandle.js

@@ -1,5 +1,6 @@
+import { AUTH_KEYCLOAK_ID, AUTH_KEYCLOAK_ISSUER } from '$env/static/private';
 import {} from '@sveltejs/kit';
-import { createSession, getSession, deleteSession } from './sessionStorage.js';
+import { createSession, getSession, deleteSession } from './sessionstorage.js';
 import { keycloak } from './authenticationProvider.js';
 const authStateCookieName = `auth_state`;
 const authSessionCookieName = `auth_session`;
@@ -10,7 +11,7 @@ const logout = (cookies, afterLogoutPath = '/') => {
         cookies.delete('auth_session', { path: '/' });
         const sid = cookies.get('auth_session');
         deleteSession(sid);
-        headers.append('Set-Cookie', 'auth_session=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT;');
+        headers.append('Set-Cookie', `${authSessionCookieName}=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT;`);
         headers.append('Location', afterLogoutPath);
     }
     else {
@@ -22,20 +23,21 @@ const createUserSession = async (provider, event) => {
     const token = await provider.getValidation(event);
     const session = await provider.getUser(token);
     const headers = new Headers();
-    headers.append('Location', '/');
-    headers.append('Set-Cookie', 'auth_state=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT;');
     if (session !== undefined) {
         session.userId = session.sub;
         event.locals.session = session;
         event.locals.accessToken = token.access_token;
         const sessionId = createSession({ session, token }, token.expires_in);
-        headers.append('Set-Cookie', `auth_session=${sessionId}; HttpOnly; Secure; SameSite=strict; Max-Age=${token.expires_in}; Path=/`);
         headers.append('Location', provider.redirectPath);
+        headers.append('Set-Cookie', `${authSessionCookieName}=${sessionId}; HttpOnly; Secure; SameSite=strict; Max-Age=${token.expires_in}; Path=/`);
+    }
+    else {
+        headers.append('Location', '/');
     }
     return headers;
 };
 const loadUserFromSession = (cookies, locals) => {
-    const sid = cookies.get('auth_session');
+    const sid = cookies.get(authSessionCookieName);
     const session = getSession(sid);
     if (session) {
         locals.session = session.session;
@@ -45,10 +47,10 @@ const loadUserFromSession = (cookies, locals) => {
         locals.username = "";
     }
 };
-export const authenticationHandle = (issuer, clientId, scope = '', redirectPath = '/') => {
-    const provider = keycloak(issuer, clientId, scope, redirectPath);
+export const authenticationHandle = (scope = '', redirectPath = '/') => {
+    const provider = keycloak(AUTH_KEYCLOAK_ISSUER, AUTH_KEYCLOAK_ID, scope, redirectPath);
     return async ({ event, resolve }) => {
-        //login user check
+        //login user check + refresh
         if (event.url.pathname.startsWith('/')) {
             loadUserFromSession(event.cookies, event.locals);
         }

package/dist/auth/authenticationProvider.js

@@ -1,9 +1,9 @@
 import * as o from "oauth4webapi";
-const aurthStateCookieName = 'auth_state';
+const authStateCookieName = 'auth_state';
 const stateIdGenerator = () => crypto.randomUUID();
 const getKeycloakIdentity = async (issuer, client_id, scope, redirectUrl) => {
     const state = stateIdGenerator();
-    const cookieHeader = `${aurthStateCookieName}=${state}; HttpOnly; Secure; SameSite=strict; Max-Age=3600; Path=/`;
+    const cookieHeader = `${authStateCookieName}=${state}; HttpOnly; Secure; SameSite=strict; Max-Age=3600; Path=/`;
     const code_challenge = await o.calculatePKCECodeChallenge(state);
     const authorizationUrlSearchParams = new URLSearchParams({
         client_id: client_id,
@@ -20,7 +20,7 @@ const getKeycloakIdentity = async (issuer, client_id, scope, redirectUrl) => {
     return headers;
 };
 const getKeycloakValidation = async (issuer, client_id, scope, event, redirectUrl) => {
-    const storedState = event.cookies.get(aurthStateCookieName);
+    const storedState = event.cookies.get(authStateCookieName);
     const state = event.url.searchParams.get("state");
     if (!storedState || !state || storedState !== state) {
         throw new Error('State not valid');
@@ -50,7 +50,6 @@ const getKeycloakValidation = async (issuer, client_id, scope, event, redirectUr
         throw new Error('Token not validated.');
     }
     const token = await response.json();
-    event.cookies.delete(aurthStateCookieName, { path: '/' });
     return token;
 };
 const getUser = async (issuer, token) => {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@functionalcms/svelte-components",
-	"version": "2.19.0",
+	"version": "2.19.2",
 	"watch": {
 		"build": {
 			"patterns": [