@functionalcms/svelte-components 2.26.1 → 2.27.0

package/dist/auth/redisSessionProvider copy.d.ts

@@ -0,0 +1,14 @@
+import type { ISession, Sid } from './types.js';
+declare function clean(): Promise<void>;
+declare function createSession(session: ISession, maxAge: number): Promise<string>;
+declare function updateSession(sid: string, session: ISession, maxAge: number): Promise<void>;
+declare function getSession(sid: Sid): Promise<any>;
+declare function deleteSession(sid: string): Promise<void>;
+export declare const redisSessionProvider: {
+    clean: typeof clean;
+    createSession: typeof createSession;
+    getSession: typeof getSession;
+    deleteSession: typeof deleteSession;
+    updateSession: typeof updateSession;
+};
+export {};

package/dist/auth/redisSessionProvider copy.js

@@ -0,0 +1,45 @@
+import { getSid } from './sessionIdGenerator.js';
+import Redis from "ioredis";
+import { CACHE_SECRET } from '$env/static/private';
+const url = "functional.redis.cache.windows.net:6380,password=cfENm4qUceDQ2lE8tl5LFLjg4IVx3F4mIAzCaA12xtg=,ssl=True,abortConnect=False";
+const redis = new Redis(6380, "functional.redis.cache.windows.net", {
+    password: CACHE_SECRET,
+    tls: true
+});
+async function clean() {
+}
+async function createSession(session, maxAge) {
+    const sid = getSid();
+    const sessionObject = {
+        data: session,
+        invalidAt: Date.now() + maxAge + 3600
+    };
+    await redis.set(sid, JSON.stringify(sessionObject), "EX", maxAge);
+    return sid;
+}
+async function updateSession(sid, session, maxAge) {
+    await redis.del(sid);
+    const sessionObject = {
+        data: session,
+        invalidAt: Date.now() + maxAge + 3600
+    };
+    await redis.set(sid, JSON.stringify(sessionObject), "EX", maxAge);
+}
+async function getSession(sid) {
+    const savedSession = await redis.get(sid);
+    if (savedSession) {
+        const session = JSON.parse(savedSession);
+        return session.data;
+    }
+    return null;
+}
+async function deleteSession(sid) {
+    await redis.del(sid);
+}
+export const redisSessionProvider = {
+    clean: clean,
+    createSession: createSession,
+    getSession: getSession,
+    deleteSession: deleteSession,
+    updateSession: updateSession
+};

package/dist/auth/standardPipeline.d.ts

@@ -0,0 +1,2 @@
+import type { IProvider } from "./types.js";
+export declare const getStandardHandle: (authProvider: IProvider) => import("@sveltejs/kit").Handle;

package/dist/auth/standardPipeline.js

@@ -0,0 +1,7 @@
+import { sequence } from "@sveltejs/kit/hooks";
+import errorHandler from "./errorHandle.js";
+import { tokenRefreshHandle } from "./tokenRefreshHandle.js";
+import authorizationHandle from "./authorizationHandle.js";
+import { authenticationHandle } from "./authenticationHandle.js";
+import { redisSessionProvider } from "./redisSessionProvider.js";
+export const getStandardHandle = (authProvider) => sequence(errorHandler, authenticationHandle(authProvider, redisSessionProvider), tokenRefreshHandle(redisSessionProvider), authorizationHandle(['/.+']));

package/dist/auth/tokenRefreshHandle.d.ts

@@ -0,0 +1,3 @@
+import { type Handle } from '@sveltejs/kit';
+import type { ISessionStorage } from './types.js';
+export declare const tokenRefreshHandle: (sessionProvider: ISessionStorage) => Handle;

package/dist/auth/tokenRefreshHandle.js

@@ -0,0 +1,48 @@
+import {} from '@sveltejs/kit';
+import { AUTH_KEYCLOAK_ID, AUTH_KEYCLOAK_SECRET, AUTH_KEYCLOAK_ISSUER } from '$env/static/private';
+const authSessionCookieName = `auth_session`;
+function isTokenExpired(token) {
+    const base64Url = token.split(".")[1];
+    const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+    const jsonPayload = decodeURIComponent(atob(base64)
+        .split("")
+        .map(function (c) {
+        return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
+    })
+        .join(""));
+    const { exp } = JSON.parse(jsonPayload);
+    const expired = Date.now() >= exp * 1000;
+    return expired;
+}
+async function refreshToken(clientId, clientSecret, refresh_token) {
+    const response = await fetch(`${AUTH_KEYCLOAK_ISSUER}/protocol/openid-connect/token`, {
+        method: "POST",
+        body: new URLSearchParams({
+            grant_type: "refresh_token",
+            client_id: clientId,
+            client_secret: clientSecret,
+            refresh_token: refresh_token,
+        }),
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json"
+        }
+    });
+    const newToken = await response.json();
+    return newToken;
+}
+export const tokenRefreshHandle = (sessionProvider) => {
+    return async ({ event, resolve }) => {
+        const locals = event.locals;
+        if (locals?.token?.refresh_token) {
+            const isExpired = isTokenExpired(locals.token.access_token);
+            if (isExpired) {
+                const newToken = await refreshToken(AUTH_KEYCLOAK_ID, AUTH_KEYCLOAK_SECRET, locals.token.refresh_token);
+                locals.token = newToken;
+                const sid = event.cookies.get(authSessionCookieName);
+                sessionProvider.updateSession(sid, locals, newToken.expires_in);
+            }
+        }
+        return await resolve(event);
+    };
+};

package/dist/index-server.d.ts

@@ -1,6 +1,8 @@
 export { authenticationHandle } from './auth/authenticationHandle.js';
 export { default as authorizationHandle } from './auth/authorizationHandle.js';
 export { default as errorHandler } from './auth/errorHandle.js';
+export { tokenRefreshHandle } from './auth/tokenRefreshHandle.js';
+export { getStandardHandle } from './auth/standardPipeline.js';
 export { inMemorySessionProvider } from './auth/inMemorySessionProvider.js';
 export { redisSessionProvider } from './auth/redisSessionProvider.js';
 export { machineAuthenticationProvider } from './auth/machineAuthenticationProvider.js';

package/dist/index-server.js

@@ -1,6 +1,8 @@
 export { authenticationHandle } from './auth/authenticationHandle.js';
 export { default as authorizationHandle } from './auth/authorizationHandle.js';
 export { default as errorHandler } from './auth/errorHandle.js';
+export { tokenRefreshHandle } from './auth/tokenRefreshHandle.js';
+export { getStandardHandle } from './auth/standardPipeline.js';
 export { inMemorySessionProvider } from './auth/inMemorySessionProvider.js';
 export { redisSessionProvider } from './auth/redisSessionProvider.js';
 export { machineAuthenticationProvider } from './auth/machineAuthenticationProvider.js';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@functionalcms/svelte-components",
-	"version": "2.26.1",
+	"version": "2.27.0",
 	"watch": {
 		"build": {
 			"patterns": [