@gneiss/client-auth 1.0.1

package/README.md

@@ -0,0 +1,68 @@
+# js-gneiss-auth-client
+
+A JavaScript client library for integrating with the Gneiss Authentication service. Provides OAuth2 authentication flow with support for access and refresh tokens.
+
+## Installation
+### Installing from npm registry:
+```bash
+npm install @gneiss/client-auth
+```
+### Installing from bitbucket:
+1. Setup SSH keys:
+    * **Windows**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-windows/
+    * **Linux**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-linux/
+    * **MacOS**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-macos/
+2. Install the bitbucket npm package via the repository using git+ssh:
+    ```bash
+    npm install git+ssh://git@bitbucket.org:gneissrev/js-client-auth-gneiss.git<branch>
+    ```
+
+## Usage
+Example for an Express.js application:
+```typescript
+import express from 'express';
+import { ExpressAuthGneissClient } from "client-auth-gneiss";
+import { AuthGneissCoreConfig } from 'client-auth-gneiss';
+
+// Create express app
+const app = express();
+
+// Initialize auth config
+const config: AuthGneissCoreConfig = {
+  clientId: "<Your app's client ID>,
+  clientSecret: "<Your app's client secret>",
+  baseUrl: "<Your app's base url>",
+  redirectUrl: "/callback"
+};
+
+//Instantiate the auth client with config
+const auth = new ExpressAuthGneissClient(config);
+
+// Login route - redirects to Gneiss login page
+app.get("/login", auth.login);
+
+// Logout route - redirects to Gneiss logout page
+app.get("/logout", auth.logout);
+
+// Callback route - handles OAuth callback from Gneiss
+app.get("/callback", auth.handleCallBack);
+
+// Protected route example
+app.get("/dashboard", auth.requireAuth, (req, res) => {
+    res.send('This is a protected route');
+});
+// Protected user data route
+app.get("/user", auth.requireAuth, auth.getUser);
+
+```
+
+* `ExpressAuthGneissClient` is a class that provides middleware for handling authentication in an Express.js application. Parameters are:
+    * `clientId` - This is the client id of your application. This will be provided to you by the appropriate Gneiss team member.
+    * `clientSecret` - This is the client secret of your application. This will be provided to you by the appropriate Gneiss team member.
+    * `baseUrl` - This is the base url (without any endpoints) of your service/app. Note that this may be different depending on your environment (prod or dev)
+    * `redirectUrl` - This is the route that the user will be redirected to for authentication. This should be the same as your callback route.
+* `auth.login` is a function that redirects the user to the Gneiss authentication service for authentication.
+* `auth.handleCallBack` is a function that handles the callback from the Gneiss authentication service. It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+* `auth.requireAuth` is a middleware function that checks if the user is authenticated. If the user is not authenticated, it redirects the user to the login page.
+* `auth.getUser` is an included utility route to allow one to retrieve the current user's data. It is important to include the `auth.requireAuth` middleware to ensure the access token is present before accessing the user's data. If it is not, an exeption will be thrown.
+

package/dist/cjs/index.js

@@ -0,0 +1,352 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthGneissCore: () => AuthGneissCore_default,
+  ExpressAuthGneissClient: () => ExpressAuthGneissClient_default
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/core/AuthGneissCore.ts
+var import_axios = __toESM(require("axios"), 1);
+var import_dotenv = __toESM(require("dotenv"), 1);
+var import_axios2 = require("axios");
+import_dotenv.default.config();
+var AuthGneissCore = class {
+  constructor(config) {
+    this.config = config;
+    this.gneissEnpoint = process.env.GNEISS_ENDPOINT;
+    this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : void 0;
+    this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : void 0;
+    this.invalidateUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/invalidate_token` : void 0;
+    let errorMsgs = [];
+    if (!process.env.GNEISS_ENDPOINT) {
+      errorMsgs.push("GNEISS_ENDPOINT is not set in environment variables");
+    }
+    if (!process.env.NODE_ENV) {
+      errorMsgs.push("NODE_ENV is not set in environment variables");
+    }
+    if (errorMsgs.length > 0) {
+      throw new Error(errorMsgs.join("\n"));
+    }
+  }
+  /**
+   * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+   * The client id and secret are passed as basic auth headers to authenticate the client itself.
+   * @param authCode - The authentication code received from the Gneiss authentication service.
+   * @returns A promise that resolves to an object containing the access and refresh tokens.
+   */
+  async getTokens(authCode) {
+    try {
+      const url = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;
+      const encodedClientId = btoa(this.config.clientId);
+      const encodedClientSecret = btoa(this.config.clientSecret);
+      const response = await import_axios.default.post(url, {}, {
+        headers: {
+          "Authorization": `Basic ${encodedClientId}:${encodedClientSecret}`
+        }
+      });
+      return {
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+        tokenType: response.data.token_type
+      };
+    } catch (error) {
+      throw error;
+    }
+  }
+  /**
+   * refreshToken is a method that refreshes the access token using the refresh token.
+   * @param refreshToken - The refresh token to be used for token refresh.
+   * @returns A promise that resolves to the refreshed access token.
+   */
+  async refreshToken(refreshToken) {
+    try {
+      const url = `${this.gneissEnpoint}/auth/refresh`;
+      const response = await import_axios.default.post(url, {
+        headers: {
+          "Authorization": `Bearer ${refreshToken}`
+        }
+      });
+      return response.data.accessToken;
+    } catch (error) {
+      return null;
+    }
+  }
+  /**
+   * getUserData is a method that fetches user data using the access token.
+   * @param accessToken - The access token to be used for user data fetching.
+   * @returns A promise that resolves to the user data.
+   */
+  async getUserData(accessToken) {
+    const url = `${this.gneissEnpoint}/resource/user_data`;
+    const response = await import_axios.default.get(url, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    if (response.status === 200) {
+      return response.data;
+    }
+    throw new Error("Failed to fetch user data");
+  }
+  /**
+   * validateToken is a method that validates the access token.
+   * @param token - The access token to be validated.
+   * @returns A promise that resolves to a boolean indicating the validity of the token.
+   */
+  async validateToken(token) {
+    try {
+      console.log("DEBUG: token", token);
+      if (!token) {
+        return false;
+      }
+      const url = `${this.gneissEnpoint}/auth/validate_token`;
+      const response = await import_axios.default.get(url, {
+        headers: {
+          "Authorization": `Bearer ${token}`
+        }
+      });
+      return response.status === 200;
+    } catch (error) {
+      if (error instanceof import_axios2.AxiosError && error.response?.status === 401) {
+        return false;
+      } else {
+        throw error;
+      }
+    }
+  }
+  /**
+   * getLoginUrl is a method that returns the login URL.
+   * @returns The login URL.
+   */
+  getLoginUrl() {
+    return this.loginUrl;
+  }
+};
+var AuthGneissCore_default = AuthGneissCore;
+
+// src/utils/storage/cookieHandling.ts
+var import_jsonwebtoken = require("jsonwebtoken");
+function setAccessToken(res, accessToken) {
+  const decodedToken = (0, import_jsonwebtoken.decode)(accessToken);
+  if (!decodedToken.exp) {
+    throw new Error("Access token does not contain an expiration time");
+  }
+  res.cookie("accessToken", accessToken, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function setRefreshToken(res, refreshToken) {
+  const decodedToken = (0, import_jsonwebtoken.decode)(refreshToken);
+  if (!decodedToken.exp) {
+    throw new Error("Refresh token does not contain an expiration time");
+  }
+  res.cookie("refreshToken", refreshToken, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function parseCookies(req) {
+  const cookies = req.headers.cookie;
+  if (!cookies) {
+    return {};
+  }
+  return cookies.split(";").reduce((acc, cookie) => {
+    const [key, value] = cookie.split("=").map((s) => s.trim());
+    acc[key] = value;
+    return acc;
+  }, {});
+}
+function clearCookies(res) {
+  res.clearCookie("accessToken", {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    path: "/"
+  });
+  res.clearCookie("refreshToken", {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    path: "/"
+  });
+}
+
+// src/frameworks/express/middleware/ExpressAuthGneissClient.ts
+var import_axios3 = require("axios");
+var import_axios4 = __toESM(require("axios"), 1);
+var ExpressAuthGneissClient = class extends AuthGneissCore_default {
+  constructor(config) {
+    super(config);
+    this.requireAuth = this.requireAuth.bind(this);
+    this.handleCallBack = this.handleCallBack.bind(this);
+    this.login = this.login.bind(this);
+    this.logout = this.logout.bind(this);
+    this.getUser = this.getUser.bind(this);
+  }
+  /**
+   * requireAuth is a middleware function that checks if the access token is valid.
+   * If the access token is not valid, it attempts to refresh the token using the refresh token.
+   * If the refresh token is not valid, it redirects the user to the login page.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async requireAuth(req, res, next) {
+    const cookies = parseCookies(req);
+    console.log("DEBUG: cookies", cookies);
+    try {
+      const isAccessTokenValid = await this.validateToken(cookies?.accessToken);
+      if (!isAccessTokenValid) {
+        const newAccessToken = await this.refreshToken(cookies?.refreshToken);
+        if (newAccessToken) {
+          setAccessToken(res, newAccessToken);
+        } else {
+          const returnToUrl = req.originalUrl;
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);
+        }
+      } else {
+        next();
+      }
+    } catch (error) {
+      if (error instanceof import_axios3.AxiosError) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+      } else {
+        res.status(500).send("Internal server error");
+      }
+    }
+  }
+  /**
+   * getUserData is a middleware function that fetches user data using the access token.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async getUser(req, res) {
+    const cookies = parseCookies(req);
+    const accessToken = cookies?.accessToken;
+    if (!accessToken) {
+      throw new Error("No access token found in request cookies");
+    }
+    const userData = await this.getUserData(accessToken);
+    res.status(200).send(userData);
+  }
+  /**
+   * handleCallBack is a middleware function that handles the callback from the authentication service.
+   * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async handleCallBack(req, res, next) {
+    try {
+      const authCode = req.query.auth_code;
+      const returnToUrl = req.query.return_to_url;
+      if (!authCode) {
+        throw new Error("No auth code found in request url parameters");
+      }
+      const tokens = await this.getTokens(authCode);
+      setAccessToken(res, tokens.accessToken);
+      setRefreshToken(res, tokens.refreshToken);
+      if (returnToUrl) {
+        res.redirect(returnToUrl);
+      } else {
+        res.redirect("/");
+      }
+    } catch (error) {
+      if (error instanceof import_axios3.AxiosError) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+        console.error("DEBUG: error", error);
+      } else {
+        res.status(500).send("Internal server error");
+        console.error("DEBUG: error", error);
+      }
+    }
+  }
+  /**
+   * login is a function that redirects the user to the Gneiss authentication service for authentication.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  login(req, res) {
+    try {
+      if (!this.loginUrl) {
+        throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);
+    } catch (error) {
+      console.error("Error in login middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * logout is a function that redirects the user to the Gneiss logout service.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  logout(req, res) {
+    const cookies = parseCookies(req);
+    try {
+      if (!this.logoutUrl) {
+        throw new Error("Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (!this.invalidateUrl) {
+        throw new Error("Invalidate URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (cookies?.accessToken) {
+        import_axios4.default.post(this.invalidateUrl, {}, {
+          // Invalidate the access token
+          headers: {
+            "Authorization": `Bearer ${cookies?.accessToken}`
+          }
+        });
+      }
+      clearCookies(res);
+      res.redirect(this.logoutUrl + `?redirect_url=${this.config.baseUrl}`);
+    } catch (error) {
+      console.error("Error in logout middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+};
+var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthGneissCore,
+  ExpressAuthGneissClient
+});
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/index.ts", "../../src/core/AuthGneissCore.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["export { ExpressAuthGneissClient } from \"./frameworks\";\r\nexport { AuthGneissCore } from \"./core\";\r\nexport type { AuthGneissCoreConfig } from \"./core\";\r\n", "import { AuthGneissCoreConfig } from \"@core/types\";\r\nimport axios, { AxiosResponse } from \"axios\";\r\nimport { Tokens } from \"@core/types\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport dotenv from \"dotenv\";\r\nimport { AxiosError } from \"axios\";\r\n\r\n//load environment variables\r\ndotenv.config();\r\n\r\n/**\r\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\r\n * It handles token exchange, token refresh, user data fetching, and token validation.\r\n * \r\n * This class serves as a base class that can be extended by framework-specific implementations\r\n * to provide authentication middleware and handlers.\r\n */\r\nclass AuthGneissCore {\r\n    protected config: AuthGneissCoreConfig; // Configuration object\r\n    protected gneissEnpoint : string | undefined\r\n    protected loginUrl : string | undefined\r\n    protected logoutUrl : string | undefined\r\n    protected invalidateUrl : string | undefined\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        this.config = config;\r\n        this.gneissEnpoint = process.env.GNEISS_ENDPOINT // Gneiss endpoint\r\n        this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : undefined; // Login URL\r\n        this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : undefined; // Logout URL\r\n        this.invalidateUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/invalidate_token` : undefined; // Invalidate URL\r\n\r\n        //check if environment variables are set\r\n        let errorMsgs = [];\r\n        if (!process.env.GNEISS_ENDPOINT) {\r\n            errorMsgs.push(\"GNEISS_ENDPOINT is not set in environment variables\");\r\n        }\r\n        if (!process.env.NODE_ENV) {\r\n            errorMsgs.push(\"NODE_ENV is not set in environment variables\");\r\n        }\r\n        if (errorMsgs.length > 0) {\r\n            throw new Error(errorMsgs.join(\"\\n\"));\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\r\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\r\n     * @param authCode - The authentication code received from the Gneiss authentication service.\r\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\r\n     */\r\n    async getTokens(authCode : string) : Promise<Tokens> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;\r\n            //Encode in base64 before transport\r\n            const encodedClientId = btoa(this.config.clientId);\r\n            const encodedClientSecret = btoa(this.config.clientSecret);\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\r\n                }\r\n            });\r\n            return {\r\n                accessToken: response.data.access_token,\r\n                refreshToken: response.data.refresh_token,\r\n                tokenType: response.data.token_type\r\n            } as Tokens;\r\n        } catch (error) {\r\n            // console.error(\"Error in getTokens:\", error);\r\n            throw error;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * refreshToken is a method that refreshes the access token using the refresh token.\r\n     * @param refreshToken - The refresh token to be used for token refresh.\r\n     * @returns A promise that resolves to the refreshed access token.\r\n     */\r\n    async refreshToken(refreshToken: string): Promise<string | null> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/refresh`;\r\n            const response : AxiosResponse = await axios.post(url, {\r\n                headers: {\r\n                \"Authorization\": `Bearer ${refreshToken}`\r\n            }\r\n            });\r\n            return response.data.accessToken as string;\r\n        } catch (error) {\r\n            // console.error(\"Error in refreshToken:\", error);\r\n            return null;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * getUserData is a method that fetches user data using the access token.\r\n     * @param accessToken - The access token to be used for user data fetching.\r\n     * @returns A promise that resolves to the user data.\r\n     */\r\n    async getUserData(accessToken: string) {\r\n        const url : string = `${this.gneissEnpoint}/resource/user_data`;\r\n        const response : AxiosResponse = await axios.get(url, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            }\r\n        });\r\n        if (response.status === 200) {\r\n            return response.data;\r\n        }\r\n        throw new Error(\"Failed to fetch user data\");\r\n    }\r\n    \r\n    /**\r\n     * validateToken is a method that validates the access token.\r\n     * @param token - The access token to be validated.\r\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\r\n     */\r\n    async validateToken(token: string): Promise<boolean> {\r\n        try {\r\n            console.log(\"DEBUG: token\", token);\r\n            // Token validation logic\r\n            if (!token) {\r\n                return false;\r\n            }\r\n            const url : string = `${this.gneissEnpoint}/auth/validate_token`;\r\n            const response : AxiosResponse = await axios.get(url, {\r\n                headers: {\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            });\r\n            return response.status === 200;\r\n        } catch (error) {\r\n            // console.error(\"Error in validateToken:\", error);\r\n            if (error instanceof AxiosError && error.response?.status === 401) {\r\n                return false;\r\n            } else {\r\n                throw error;\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getLoginUrl is a method that returns the login URL.\r\n     * @returns The login URL.\r\n     */\r\n    public getLoginUrl() : string | undefined {\r\n        return this.loginUrl;\r\n    }\r\n}\r\n\r\nexport default AuthGneissCore;\r\n", "import { Response } from \"express\";\r\nimport { JwtPayload, decode } from \"jsonwebtoken\";\r\nimport { Request } from \"express\";\r\n\r\n/**\r\n * Set the access token in the response cookies.\r\n * @param res - The response object.\r\n * @param accessToken - The access token to set.\r\n */\r\nfunction setAccessToken(res: Response, accessToken: string) {\r\n\r\n    const decodedToken = decode(accessToken) as JwtPayload;\r\n    \r\n    // decoded.exp is in seconds since epoch\r\n    // Date.now() returns milliseconds since epoch\r\n    // maxAge needs milliseconds remaining\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Access token does not contain an expiration time\");\r\n    }\r\n    \r\n    res.cookie('accessToken', accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\n/**\r\n * Set the refresh token in the response cookies.\r\n * @param res - The response object.\r\n * @param refreshToken - The refresh token to set.\r\n */\r\nfunction setRefreshToken(res: Response, refreshToken: string) {\r\n\r\n    const decodedToken = decode(refreshToken) as JwtPayload;\r\n\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Refresh token does not contain an expiration time\");\r\n    }\r\n\r\n    res.cookie('refreshToken', refreshToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\nfunction parseCookies(req: Request) : { [key: string]: string } {\r\n    const cookies = req.headers.cookie;\r\n    if (!cookies) {\r\n        return {};\r\n    }\r\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\r\n        const [key, value] = cookie.split('=').map(s => s.trim());\r\n        acc[key] = value;\r\n        return acc;\r\n    }, {});\r\n}\r\n\r\nfunction clearCookies(res: Response) {\r\n    res.clearCookie(\"accessToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n    res.clearCookie(\"refreshToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n}\r\n\r\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\r\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { RequestWithTokens, Tokens } from \"@core/types\";\r\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport { AxiosError } from \"axios\";\r\nimport axios from \"axios\";\r\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\r\n\r\n/**\r\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\r\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\r\n * \r\n * @extends AuthGneissCore\r\n * @example\r\n * const authClient = new ExpressAuthGneissClient({\r\n *   clientId: 'your-client-id',\r\n *   clientSecret: 'your-client-secret',\r\n *   redirectUrl: 'your-redirect-url'\r\n * });\r\n */\r\nclass ExpressAuthGneissClient extends AuthGneissCore {\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        super(config);\r\n        \r\n        // Bind the methods in constructor\r\n        this.requireAuth = this.requireAuth.bind(this);\r\n        this.handleCallBack = this.handleCallBack.bind(this);\r\n        this.login = this.login.bind(this);\r\n        this.logout = this.logout.bind(this);\r\n        this.getUser = this.getUser.bind(this);\r\n    }\r\n\r\n    /**\r\n     * requireAuth is a middleware function that checks if the access token is valid.\r\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\r\n     * If the refresh token is not valid, it redirects the user to the login page.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        //Check for the existence of the access token\r\n        console.log(\"DEBUG: cookies\", cookies);\r\n        try {\r\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\r\n            if (!isAccessTokenValid) { //if the access token is not valid\r\n                //try to refresh the token\r\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\r\n                if (newAccessToken) { //\r\n                    setAccessToken(res, newAccessToken);\r\n                }\r\n                else {\r\n                    // no access token or valid refresh token, redirect to login\r\n                    const returnToUrl : string | undefined = req.originalUrl as string;\r\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);\r\n                }\r\n            }\r\n            else {\r\n                // access token is valid, continue to the next middleware or route handler\r\n                next();\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in requireAuth middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getUserData is a middleware function that fetches user data using the access token.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async getUser(req: Request, res: Response): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        const accessToken = cookies?.accessToken;\r\n        if (!accessToken) {\r\n            throw new Error(\"No access token found in request cookies\");\r\n        }\r\n        const userData = await this.getUserData(accessToken);\r\n        res.status(200).send(userData);\r\n    }\r\n\r\n    /**\r\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\r\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async handleCallBack(\r\n        req: Request,\r\n        res: Response,\r\n        next: NextFunction\r\n    ): Promise<void> {\r\n        try {\r\n            const authCode: string | undefined = req.query.auth_code as string\r\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\r\n            if (!authCode) {\r\n                throw new Error(\"No auth code found in request url parameters\");\r\n            }\r\n\r\n            const tokens: Tokens = await this.getTokens(authCode);\r\n            \r\n            // Set the access and refresh tokens in the response cookies\r\n            setAccessToken(res, tokens.accessToken);\r\n            setRefreshToken(res, tokens.refreshToken);\r\n\r\n            if (returnToUrl) {\r\n                // Go to the original request url\r\n                res.redirect(returnToUrl);\r\n            }\r\n            else {\r\n                // Go to the root url\r\n                res.redirect(\"/\")\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in handleCallBack middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public login(req: Request, res: Response): void {\r\n        try {\r\n            if (!this.loginUrl) {\r\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);\r\n        } catch (error) {\r\n            console.error('Error in login middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * logout is a function that redirects the user to the Gneiss logout service.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public logout(req: Request, res: Response): void {\r\n        const cookies = parseCookies(req);\r\n        try {\r\n            if (!this.logoutUrl) {\r\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (!this.invalidateUrl) {\r\n                throw new Error('Invalidate URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (cookies?.accessToken) { // Only invalidate the access token if it exists\r\n                axios.post(this.invalidateUrl, {}, { // Invalidate the access token\r\n                    headers: {\r\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\r\n                    }\r\n                });\r\n            }\r\n            clearCookies(res); // clear the access and refresh cookies\r\n            res.redirect(this.logoutUrl + `?redirect_url=${this.config.baseUrl}`); // logout from Gneiss by visiting SSO logout page\r\n        } catch (error) {\r\n            console.error('Error in logout middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n}\r\n\r\nexport default ExpressAuthGneissClient;\r\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,mBAAqC;AAGrC,oBAAmB;AACnB,IAAAA,gBAA2B;AAG3B,cAAAC,QAAO,OAAO;AASd,IAAM,iBAAN,MAAqB;AAAA,EAOjB,YACI,QACF;AACE,SAAK,SAAS;AACd,SAAK,gBAAgB,QAAQ,IAAI;AACjC,SAAK,WAAW,KAAK,gBAAgB,GAAG,KAAK,aAAa,gBAAgB;AAC1E,SAAK,YAAY,KAAK,gBAAgB,GAAG,KAAK,aAAa,iBAAiB;AAC5E,SAAK,gBAAgB,KAAK,gBAAgB,GAAG,KAAK,aAAa,2BAA2B;AAG1F,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,iBAAiB;AAC9B,gBAAU,KAAK,qDAAqD;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,IAAI,UAAU;AACvB,gBAAU,KAAK,8CAA8C;AAAA,IACjE;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAU,UAAqC;AACjD,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa,gCAAgC,QAAQ;AAElF,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,aAAAC,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,cAA8C;AAC7D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,KAAK;AAAA,QACnD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,UAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,cAAc,OAAiC;AACjD,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,4BAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AACJ;AAEA,IAAO,yBAAQ;;;ACrJf,0BAAmC;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,mBAAe,4BAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,mBAAe,4BAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,IAAAC,gBAA2B;AAC3B,IAAAA,gBAAkB;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACI,QACF;AACE,UAAM,MAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAAA,QACtC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QAC9H;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACjG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,CAAC,KAAK,eAAe;AACrB,cAAM,IAAI,MAAM,yFAAyF;AAAA,MAC7G;AACA,UAAI,SAAS,aAAa;AACtB,sBAAAC,QAAM,KAAK,KAAK,eAAe,CAAC,GAAG;AAAA;AAAA,UAC/B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,KAAK,YAAY,iBAAiB,KAAK,OAAO,OAAO,EAAE;AAAA,IACxE,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["import_axios", "dotenv", "axios", "import_axios", "axios"]
+}

package/dist/esm/index.js

@@ -0,0 +1,314 @@
+// src/core/AuthGneissCore.ts
+import axios from "axios";
+import dotenv from "dotenv";
+import { AxiosError } from "axios";
+dotenv.config();
+var AuthGneissCore = class {
+  constructor(config) {
+    this.config = config;
+    this.gneissEnpoint = process.env.GNEISS_ENDPOINT;
+    this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : void 0;
+    this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : void 0;
+    this.invalidateUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/invalidate_token` : void 0;
+    let errorMsgs = [];
+    if (!process.env.GNEISS_ENDPOINT) {
+      errorMsgs.push("GNEISS_ENDPOINT is not set in environment variables");
+    }
+    if (!process.env.NODE_ENV) {
+      errorMsgs.push("NODE_ENV is not set in environment variables");
+    }
+    if (errorMsgs.length > 0) {
+      throw new Error(errorMsgs.join("\n"));
+    }
+  }
+  /**
+   * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+   * The client id and secret are passed as basic auth headers to authenticate the client itself.
+   * @param authCode - The authentication code received from the Gneiss authentication service.
+   * @returns A promise that resolves to an object containing the access and refresh tokens.
+   */
+  async getTokens(authCode) {
+    try {
+      const url = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;
+      const encodedClientId = btoa(this.config.clientId);
+      const encodedClientSecret = btoa(this.config.clientSecret);
+      const response = await axios.post(url, {}, {
+        headers: {
+          "Authorization": `Basic ${encodedClientId}:${encodedClientSecret}`
+        }
+      });
+      return {
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+        tokenType: response.data.token_type
+      };
+    } catch (error) {
+      throw error;
+    }
+  }
+  /**
+   * refreshToken is a method that refreshes the access token using the refresh token.
+   * @param refreshToken - The refresh token to be used for token refresh.
+   * @returns A promise that resolves to the refreshed access token.
+   */
+  async refreshToken(refreshToken) {
+    try {
+      const url = `${this.gneissEnpoint}/auth/refresh`;
+      const response = await axios.post(url, {
+        headers: {
+          "Authorization": `Bearer ${refreshToken}`
+        }
+      });
+      return response.data.accessToken;
+    } catch (error) {
+      return null;
+    }
+  }
+  /**
+   * getUserData is a method that fetches user data using the access token.
+   * @param accessToken - The access token to be used for user data fetching.
+   * @returns A promise that resolves to the user data.
+   */
+  async getUserData(accessToken) {
+    const url = `${this.gneissEnpoint}/resource/user_data`;
+    const response = await axios.get(url, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    if (response.status === 200) {
+      return response.data;
+    }
+    throw new Error("Failed to fetch user data");
+  }
+  /**
+   * validateToken is a method that validates the access token.
+   * @param token - The access token to be validated.
+   * @returns A promise that resolves to a boolean indicating the validity of the token.
+   */
+  async validateToken(token) {
+    try {
+      console.log("DEBUG: token", token);
+      if (!token) {
+        return false;
+      }
+      const url = `${this.gneissEnpoint}/auth/validate_token`;
+      const response = await axios.get(url, {
+        headers: {
+          "Authorization": `Bearer ${token}`
+        }
+      });
+      return response.status === 200;
+    } catch (error) {
+      if (error instanceof AxiosError && error.response?.status === 401) {
+        return false;
+      } else {
+        throw error;
+      }
+    }
+  }
+  /**
+   * getLoginUrl is a method that returns the login URL.
+   * @returns The login URL.
+   */
+  getLoginUrl() {
+    return this.loginUrl;
+  }
+};
+var AuthGneissCore_default = AuthGneissCore;
+
+// src/utils/storage/cookieHandling.ts
+import { decode } from "jsonwebtoken";
+function setAccessToken(res, accessToken) {
+  const decodedToken = decode(accessToken);
+  if (!decodedToken.exp) {
+    throw new Error("Access token does not contain an expiration time");
+  }
+  res.cookie("accessToken", accessToken, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function setRefreshToken(res, refreshToken) {
+  const decodedToken = decode(refreshToken);
+  if (!decodedToken.exp) {
+    throw new Error("Refresh token does not contain an expiration time");
+  }
+  res.cookie("refreshToken", refreshToken, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function parseCookies(req) {
+  const cookies = req.headers.cookie;
+  if (!cookies) {
+    return {};
+  }
+  return cookies.split(";").reduce((acc, cookie) => {
+    const [key, value] = cookie.split("=").map((s) => s.trim());
+    acc[key] = value;
+    return acc;
+  }, {});
+}
+function clearCookies(res) {
+  res.clearCookie("accessToken", {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    path: "/"
+  });
+  res.clearCookie("refreshToken", {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "strict",
+    path: "/"
+  });
+}
+
+// src/frameworks/express/middleware/ExpressAuthGneissClient.ts
+import { AxiosError as AxiosError2 } from "axios";
+import axios2 from "axios";
+var ExpressAuthGneissClient = class extends AuthGneissCore_default {
+  constructor(config) {
+    super(config);
+    this.requireAuth = this.requireAuth.bind(this);
+    this.handleCallBack = this.handleCallBack.bind(this);
+    this.login = this.login.bind(this);
+    this.logout = this.logout.bind(this);
+    this.getUser = this.getUser.bind(this);
+  }
+  /**
+   * requireAuth is a middleware function that checks if the access token is valid.
+   * If the access token is not valid, it attempts to refresh the token using the refresh token.
+   * If the refresh token is not valid, it redirects the user to the login page.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async requireAuth(req, res, next) {
+    const cookies = parseCookies(req);
+    console.log("DEBUG: cookies", cookies);
+    try {
+      const isAccessTokenValid = await this.validateToken(cookies?.accessToken);
+      if (!isAccessTokenValid) {
+        const newAccessToken = await this.refreshToken(cookies?.refreshToken);
+        if (newAccessToken) {
+          setAccessToken(res, newAccessToken);
+        } else {
+          const returnToUrl = req.originalUrl;
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);
+        }
+      } else {
+        next();
+      }
+    } catch (error) {
+      if (error instanceof AxiosError2) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+      } else {
+        res.status(500).send("Internal server error");
+      }
+    }
+  }
+  /**
+   * getUserData is a middleware function that fetches user data using the access token.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async getUser(req, res) {
+    const cookies = parseCookies(req);
+    const accessToken = cookies?.accessToken;
+    if (!accessToken) {
+      throw new Error("No access token found in request cookies");
+    }
+    const userData = await this.getUserData(accessToken);
+    res.status(200).send(userData);
+  }
+  /**
+   * handleCallBack is a middleware function that handles the callback from the authentication service.
+   * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async handleCallBack(req, res, next) {
+    try {
+      const authCode = req.query.auth_code;
+      const returnToUrl = req.query.return_to_url;
+      if (!authCode) {
+        throw new Error("No auth code found in request url parameters");
+      }
+      const tokens = await this.getTokens(authCode);
+      setAccessToken(res, tokens.accessToken);
+      setRefreshToken(res, tokens.refreshToken);
+      if (returnToUrl) {
+        res.redirect(returnToUrl);
+      } else {
+        res.redirect("/");
+      }
+    } catch (error) {
+      if (error instanceof AxiosError2) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+        console.error("DEBUG: error", error);
+      } else {
+        res.status(500).send("Internal server error");
+        console.error("DEBUG: error", error);
+      }
+    }
+  }
+  /**
+   * login is a function that redirects the user to the Gneiss authentication service for authentication.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  login(req, res) {
+    try {
+      if (!this.loginUrl) {
+        throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);
+    } catch (error) {
+      console.error("Error in login middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * logout is a function that redirects the user to the Gneiss logout service.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  logout(req, res) {
+    const cookies = parseCookies(req);
+    try {
+      if (!this.logoutUrl) {
+        throw new Error("Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (!this.invalidateUrl) {
+        throw new Error("Invalidate URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (cookies?.accessToken) {
+        axios2.post(this.invalidateUrl, {}, {
+          // Invalidate the access token
+          headers: {
+            "Authorization": `Bearer ${cookies?.accessToken}`
+          }
+        });
+      }
+      clearCookies(res);
+      res.redirect(this.logoutUrl + `?redirect_url=${this.config.baseUrl}`);
+    } catch (error) {
+      console.error("Error in logout middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+};
+var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
+export {
+  AuthGneissCore_default as AuthGneissCore,
+  ExpressAuthGneissClient_default as ExpressAuthGneissClient
+};
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/core/AuthGneissCore.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["import { AuthGneissCoreConfig } from \"@core/types\";\r\nimport axios, { AxiosResponse } from \"axios\";\r\nimport { Tokens } from \"@core/types\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport dotenv from \"dotenv\";\r\nimport { AxiosError } from \"axios\";\r\n\r\n//load environment variables\r\ndotenv.config();\r\n\r\n/**\r\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\r\n * It handles token exchange, token refresh, user data fetching, and token validation.\r\n * \r\n * This class serves as a base class that can be extended by framework-specific implementations\r\n * to provide authentication middleware and handlers.\r\n */\r\nclass AuthGneissCore {\r\n    protected config: AuthGneissCoreConfig; // Configuration object\r\n    protected gneissEnpoint : string | undefined\r\n    protected loginUrl : string | undefined\r\n    protected logoutUrl : string | undefined\r\n    protected invalidateUrl : string | undefined\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        this.config = config;\r\n        this.gneissEnpoint = process.env.GNEISS_ENDPOINT // Gneiss endpoint\r\n        this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : undefined; // Login URL\r\n        this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : undefined; // Logout URL\r\n        this.invalidateUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/invalidate_token` : undefined; // Invalidate URL\r\n\r\n        //check if environment variables are set\r\n        let errorMsgs = [];\r\n        if (!process.env.GNEISS_ENDPOINT) {\r\n            errorMsgs.push(\"GNEISS_ENDPOINT is not set in environment variables\");\r\n        }\r\n        if (!process.env.NODE_ENV) {\r\n            errorMsgs.push(\"NODE_ENV is not set in environment variables\");\r\n        }\r\n        if (errorMsgs.length > 0) {\r\n            throw new Error(errorMsgs.join(\"\\n\"));\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\r\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\r\n     * @param authCode - The authentication code received from the Gneiss authentication service.\r\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\r\n     */\r\n    async getTokens(authCode : string) : Promise<Tokens> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;\r\n            //Encode in base64 before transport\r\n            const encodedClientId = btoa(this.config.clientId);\r\n            const encodedClientSecret = btoa(this.config.clientSecret);\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\r\n                }\r\n            });\r\n            return {\r\n                accessToken: response.data.access_token,\r\n                refreshToken: response.data.refresh_token,\r\n                tokenType: response.data.token_type\r\n            } as Tokens;\r\n        } catch (error) {\r\n            // console.error(\"Error in getTokens:\", error);\r\n            throw error;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * refreshToken is a method that refreshes the access token using the refresh token.\r\n     * @param refreshToken - The refresh token to be used for token refresh.\r\n     * @returns A promise that resolves to the refreshed access token.\r\n     */\r\n    async refreshToken(refreshToken: string): Promise<string | null> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/refresh`;\r\n            const response : AxiosResponse = await axios.post(url, {\r\n                headers: {\r\n                \"Authorization\": `Bearer ${refreshToken}`\r\n            }\r\n            });\r\n            return response.data.accessToken as string;\r\n        } catch (error) {\r\n            // console.error(\"Error in refreshToken:\", error);\r\n            return null;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * getUserData is a method that fetches user data using the access token.\r\n     * @param accessToken - The access token to be used for user data fetching.\r\n     * @returns A promise that resolves to the user data.\r\n     */\r\n    async getUserData(accessToken: string) {\r\n        const url : string = `${this.gneissEnpoint}/resource/user_data`;\r\n        const response : AxiosResponse = await axios.get(url, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            }\r\n        });\r\n        if (response.status === 200) {\r\n            return response.data;\r\n        }\r\n        throw new Error(\"Failed to fetch user data\");\r\n    }\r\n    \r\n    /**\r\n     * validateToken is a method that validates the access token.\r\n     * @param token - The access token to be validated.\r\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\r\n     */\r\n    async validateToken(token: string): Promise<boolean> {\r\n        try {\r\n            console.log(\"DEBUG: token\", token);\r\n            // Token validation logic\r\n            if (!token) {\r\n                return false;\r\n            }\r\n            const url : string = `${this.gneissEnpoint}/auth/validate_token`;\r\n            const response : AxiosResponse = await axios.get(url, {\r\n                headers: {\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            });\r\n            return response.status === 200;\r\n        } catch (error) {\r\n            // console.error(\"Error in validateToken:\", error);\r\n            if (error instanceof AxiosError && error.response?.status === 401) {\r\n                return false;\r\n            } else {\r\n                throw error;\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getLoginUrl is a method that returns the login URL.\r\n     * @returns The login URL.\r\n     */\r\n    public getLoginUrl() : string | undefined {\r\n        return this.loginUrl;\r\n    }\r\n}\r\n\r\nexport default AuthGneissCore;\r\n", "import { Response } from \"express\";\r\nimport { JwtPayload, decode } from \"jsonwebtoken\";\r\nimport { Request } from \"express\";\r\n\r\n/**\r\n * Set the access token in the response cookies.\r\n * @param res - The response object.\r\n * @param accessToken - The access token to set.\r\n */\r\nfunction setAccessToken(res: Response, accessToken: string) {\r\n\r\n    const decodedToken = decode(accessToken) as JwtPayload;\r\n    \r\n    // decoded.exp is in seconds since epoch\r\n    // Date.now() returns milliseconds since epoch\r\n    // maxAge needs milliseconds remaining\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Access token does not contain an expiration time\");\r\n    }\r\n    \r\n    res.cookie('accessToken', accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\n/**\r\n * Set the refresh token in the response cookies.\r\n * @param res - The response object.\r\n * @param refreshToken - The refresh token to set.\r\n */\r\nfunction setRefreshToken(res: Response, refreshToken: string) {\r\n\r\n    const decodedToken = decode(refreshToken) as JwtPayload;\r\n\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Refresh token does not contain an expiration time\");\r\n    }\r\n\r\n    res.cookie('refreshToken', refreshToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\nfunction parseCookies(req: Request) : { [key: string]: string } {\r\n    const cookies = req.headers.cookie;\r\n    if (!cookies) {\r\n        return {};\r\n    }\r\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\r\n        const [key, value] = cookie.split('=').map(s => s.trim());\r\n        acc[key] = value;\r\n        return acc;\r\n    }, {});\r\n}\r\n\r\nfunction clearCookies(res: Response) {\r\n    res.clearCookie(\"accessToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n    res.clearCookie(\"refreshToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n}\r\n\r\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\r\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { RequestWithTokens, Tokens } from \"@core/types\";\r\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport { AxiosError } from \"axios\";\r\nimport axios from \"axios\";\r\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\r\n\r\n/**\r\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\r\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\r\n * \r\n * @extends AuthGneissCore\r\n * @example\r\n * const authClient = new ExpressAuthGneissClient({\r\n *   clientId: 'your-client-id',\r\n *   clientSecret: 'your-client-secret',\r\n *   redirectUrl: 'your-redirect-url'\r\n * });\r\n */\r\nclass ExpressAuthGneissClient extends AuthGneissCore {\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        super(config);\r\n        \r\n        // Bind the methods in constructor\r\n        this.requireAuth = this.requireAuth.bind(this);\r\n        this.handleCallBack = this.handleCallBack.bind(this);\r\n        this.login = this.login.bind(this);\r\n        this.logout = this.logout.bind(this);\r\n        this.getUser = this.getUser.bind(this);\r\n    }\r\n\r\n    /**\r\n     * requireAuth is a middleware function that checks if the access token is valid.\r\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\r\n     * If the refresh token is not valid, it redirects the user to the login page.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        //Check for the existence of the access token\r\n        console.log(\"DEBUG: cookies\", cookies);\r\n        try {\r\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\r\n            if (!isAccessTokenValid) { //if the access token is not valid\r\n                //try to refresh the token\r\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\r\n                if (newAccessToken) { //\r\n                    setAccessToken(res, newAccessToken);\r\n                }\r\n                else {\r\n                    // no access token or valid refresh token, redirect to login\r\n                    const returnToUrl : string | undefined = req.originalUrl as string;\r\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);\r\n                }\r\n            }\r\n            else {\r\n                // access token is valid, continue to the next middleware or route handler\r\n                next();\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in requireAuth middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getUserData is a middleware function that fetches user data using the access token.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async getUser(req: Request, res: Response): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        const accessToken = cookies?.accessToken;\r\n        if (!accessToken) {\r\n            throw new Error(\"No access token found in request cookies\");\r\n        }\r\n        const userData = await this.getUserData(accessToken);\r\n        res.status(200).send(userData);\r\n    }\r\n\r\n    /**\r\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\r\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async handleCallBack(\r\n        req: Request,\r\n        res: Response,\r\n        next: NextFunction\r\n    ): Promise<void> {\r\n        try {\r\n            const authCode: string | undefined = req.query.auth_code as string\r\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\r\n            if (!authCode) {\r\n                throw new Error(\"No auth code found in request url parameters\");\r\n            }\r\n\r\n            const tokens: Tokens = await this.getTokens(authCode);\r\n            \r\n            // Set the access and refresh tokens in the response cookies\r\n            setAccessToken(res, tokens.accessToken);\r\n            setRefreshToken(res, tokens.refreshToken);\r\n\r\n            if (returnToUrl) {\r\n                // Go to the original request url\r\n                res.redirect(returnToUrl);\r\n            }\r\n            else {\r\n                // Go to the root url\r\n                res.redirect(\"/\")\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in handleCallBack middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public login(req: Request, res: Response): void {\r\n        try {\r\n            if (!this.loginUrl) {\r\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);\r\n        } catch (error) {\r\n            console.error('Error in login middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * logout is a function that redirects the user to the Gneiss logout service.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public logout(req: Request, res: Response): void {\r\n        const cookies = parseCookies(req);\r\n        try {\r\n            if (!this.logoutUrl) {\r\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (!this.invalidateUrl) {\r\n                throw new Error('Invalidate URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (cookies?.accessToken) { // Only invalidate the access token if it exists\r\n                axios.post(this.invalidateUrl, {}, { // Invalidate the access token\r\n                    headers: {\r\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\r\n                    }\r\n                });\r\n            }\r\n            clearCookies(res); // clear the access and refresh cookies\r\n            res.redirect(this.logoutUrl + `?redirect_url=${this.config.baseUrl}`); // logout from Gneiss by visiting SSO logout page\r\n        } catch (error) {\r\n            console.error('Error in logout middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n}\r\n\r\nexport default ExpressAuthGneissClient;\r\n"],
+  "mappings": ";AACA,OAAO,WAA8B;AAGrC,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAG3B,OAAO,OAAO;AASd,IAAM,iBAAN,MAAqB;AAAA,EAOjB,YACI,QACF;AACE,SAAK,SAAS;AACd,SAAK,gBAAgB,QAAQ,IAAI;AACjC,SAAK,WAAW,KAAK,gBAAgB,GAAG,KAAK,aAAa,gBAAgB;AAC1E,SAAK,YAAY,KAAK,gBAAgB,GAAG,KAAK,aAAa,iBAAiB;AAC5E,SAAK,gBAAgB,KAAK,gBAAgB,GAAG,KAAK,aAAa,2BAA2B;AAG1F,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,iBAAiB;AAC9B,gBAAU,KAAK,qDAAqD;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,IAAI,UAAU;AACvB,gBAAU,KAAK,8CAA8C;AAAA,IACjE;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAU,UAAqC;AACjD,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa,gCAAgC,QAAQ;AAElF,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,cAA8C;AAC7D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK;AAAA,QACnD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,UAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,cAAc,OAAiC;AACjD,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,cAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AACJ;AAEA,IAAO,yBAAQ;;;ACrJf,SAAqB,cAAc;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,eAAe,OAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,eAAe,OAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,SAAS,cAAAA,mBAAkB;AAC3B,OAAOC,YAAW;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACI,QACF;AACE,UAAM,MAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAAA,QACtC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QAC9H;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBC,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBA,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACjG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,CAAC,KAAK,eAAe;AACrB,cAAM,IAAI,MAAM,yFAAyF;AAAA,MAC7G;AACA,UAAI,SAAS,aAAa;AACtB,QAAAC,OAAM,KAAK,KAAK,eAAe,CAAC,GAAG;AAAA;AAAA,UAC/B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,KAAK,YAAY,iBAAiB,KAAK,OAAO,OAAO,EAAE;AAAA,IACxE,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["AxiosError", "axios", "AxiosError", "axios"]
+}

package/dist/types/src/core/AuthGneissCore.d.ts

@@ -0,0 +1,49 @@
+import { AuthGneissCoreConfig } from "@core/types";
+import { Tokens } from "@core/types";
+/**
+ * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.
+ * It handles token exchange, token refresh, user data fetching, and token validation.
+ *
+ * This class serves as a base class that can be extended by framework-specific implementations
+ * to provide authentication middleware and handlers.
+ */
+declare class AuthGneissCore {
+    protected config: AuthGneissCoreConfig;
+    protected gneissEnpoint: string | undefined;
+    protected loginUrl: string | undefined;
+    protected logoutUrl: string | undefined;
+    protected invalidateUrl: string | undefined;
+    constructor(config: AuthGneissCoreConfig);
+    /**
+     * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+     * The client id and secret are passed as basic auth headers to authenticate the client itself.
+     * @param authCode - The authentication code received from the Gneiss authentication service.
+     * @returns A promise that resolves to an object containing the access and refresh tokens.
+     */
+    getTokens(authCode: string): Promise<Tokens>;
+    /**
+     * refreshToken is a method that refreshes the access token using the refresh token.
+     * @param refreshToken - The refresh token to be used for token refresh.
+     * @returns A promise that resolves to the refreshed access token.
+     */
+    refreshToken(refreshToken: string): Promise<string | null>;
+    /**
+     * getUserData is a method that fetches user data using the access token.
+     * @param accessToken - The access token to be used for user data fetching.
+     * @returns A promise that resolves to the user data.
+     */
+    getUserData(accessToken: string): Promise<any>;
+    /**
+     * validateToken is a method that validates the access token.
+     * @param token - The access token to be validated.
+     * @returns A promise that resolves to a boolean indicating the validity of the token.
+     */
+    validateToken(token: string): Promise<boolean>;
+    /**
+     * getLoginUrl is a method that returns the login URL.
+     * @returns The login URL.
+     */
+    getLoginUrl(): string | undefined;
+}
+export default AuthGneissCore;
+//# sourceMappingURL=AuthGneissCore.d.ts.map

package/dist/types/src/core/AuthGneissCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthGneissCore.d.ts","sourceRoot":"","sources":["../../../../src/core/AuthGneissCore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC;;;;;;GAMG;AACH,cAAM,cAAc;IAChB,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACvC,SAAS,CAAC,aAAa,EAAG,MAAM,GAAG,SAAS,CAAA;IAC5C,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAG,SAAS,CAAA;IACvC,SAAS,CAAC,SAAS,EAAG,MAAM,GAAG,SAAS,CAAA;IACxC,SAAS,CAAC,aAAa,EAAG,MAAM,GAAG,SAAS,CAAA;gBAGxC,MAAM,EAAE,oBAAoB;IAqBhC;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAsBpD;;;;OAIG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAehE;;;;OAIG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM;IAarC;;;;OAIG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBpD;;;OAGG;IACI,WAAW,IAAK,MAAM,GAAG,SAAS;CAG5C;AAED,eAAe,cAAc,CAAC"}

package/dist/types/src/core/index.d.ts

@@ -0,0 +1,5 @@
+import AuthGneissCore from "./AuthGneissCore";
+import { AuthGneissCoreConfig } from "./types";
+export { AuthGneissCore };
+export type { AuthGneissCoreConfig };
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAC,CAAC;AACzB,YAAY,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/types/src/core/types.d.ts

@@ -0,0 +1,20 @@
+import { Request } from "express";
+interface AuthGneissCoreConfig {
+    clientId: string;
+    clientSecret: string;
+    baseUrl: string;
+    redirectUrl: string;
+}
+interface Tokens {
+    accessToken: string;
+    refreshToken: string;
+    tokenType: string;
+}
+interface RequestWithTokens extends Request {
+    cookies: {
+        accessToken: string;
+        refreshToken: string;
+    };
+}
+export { AuthGneissCoreConfig, Tokens, RequestWithTokens };
+//# sourceMappingURL=types.d.ts.map

package/dist/types/src/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,UAAU,oBAAoB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,MAAM;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IACvC,OAAO,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAA;CACJ;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/types/src/frameworks/express/middleware/ExpressAuthGneissClient.d.ts

@@ -0,0 +1,55 @@
+import { AuthGneissCore, AuthGneissCoreConfig } from "@core";
+import { Request, Response, NextFunction } from "express";
+/**
+ * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware
+ * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.
+ *
+ * @extends AuthGneissCore
+ * @example
+ * const authClient = new ExpressAuthGneissClient({
+ *   clientId: 'your-client-id',
+ *   clientSecret: 'your-client-secret',
+ *   redirectUrl: 'your-redirect-url'
+ * });
+ */
+declare class ExpressAuthGneissClient extends AuthGneissCore {
+    constructor(config: AuthGneissCoreConfig);
+    /**
+     * requireAuth is a middleware function that checks if the access token is valid.
+     * If the access token is not valid, it attempts to refresh the token using the refresh token.
+     * If the refresh token is not valid, it redirects the user to the login page.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    requireAuth(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * getUserData is a middleware function that fetches user data using the access token.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    getUser(req: Request, res: Response): Promise<void>;
+    /**
+     * handleCallBack is a middleware function that handles the callback from the authentication service.
+     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    handleCallBack(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * login is a function that redirects the user to the Gneiss authentication service for authentication.
+     * @param req - The request object.
+     * @param res - The response object.
+     */
+    login(req: Request, res: Response): void;
+    /**
+     * logout is a function that redirects the user to the Gneiss logout service.
+     * @param req - The request object.
+     * @param res - The response object.
+     */
+    logout(req: Request, res: Response): void;
+}
+export default ExpressAuthGneissClient;
+//# sourceMappingURL=ExpressAuthGneissClient.d.ts.map

package/dist/types/src/frameworks/express/middleware/ExpressAuthGneissClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExpressAuthGneissClient.d.ts","sourceRoot":"","sources":["../../../../../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ1D;;;;;;;;;;;GAWG;AACH,cAAM,uBAAwB,SAAQ,cAAc;gBAG5C,MAAM,EAAE,oBAAoB;IAYhC;;;;;;;OAOG;IACU,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCxF;;;;;OAKG;IACU,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhE;;;;;;OAMG;IACU,cAAc,CACvB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC;IAkChB;;;;OAIG;IACI,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI;IAY/C;;;;OAIG;IACI,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI;CAuBnD;AAED,eAAe,uBAAuB,CAAC"}

package/dist/types/src/frameworks/index.d.ts

@@ -0,0 +1,3 @@
+import ExpressAuthGneissClient from "./express/middleware/ExpressAuthGneissClient";
+export { ExpressAuthGneissClient };
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/frameworks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/frameworks/index.ts"],"names":[],"mappings":"AAAA,OAAO,uBAAuB,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/types/src/index.d.ts

@@ -0,0 +1,4 @@
+export { ExpressAuthGneissClient } from "./frameworks";
+export { AuthGneissCore } from "./core";
+export type { AuthGneissCoreConfig } from "./core";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,YAAY,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}

package/dist/types/src/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { setAccessToken, setRefreshToken, parseCookies } from "@utils/storage/cookieHandling";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/types/src/utils/storage/cookieHandling.d.ts

@@ -0,0 +1,20 @@
+import { Response } from "express";
+import { Request } from "express";
+/**
+ * Set the access token in the response cookies.
+ * @param res - The response object.
+ * @param accessToken - The access token to set.
+ */
+declare function setAccessToken(res: Response, accessToken: string): void;
+/**
+ * Set the refresh token in the response cookies.
+ * @param res - The response object.
+ * @param refreshToken - The refresh token to set.
+ */
+declare function setRefreshToken(res: Response, refreshToken: string): void;
+declare function parseCookies(req: Request): {
+    [key: string]: string;
+};
+declare function clearCookies(res: Response): void;
+export { setAccessToken, setRefreshToken, parseCookies, clearCookies };
+//# sourceMappingURL=cookieHandling.d.ts.map

package/dist/types/src/utils/storage/cookieHandling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookieHandling.d.ts","sourceRoot":"","sources":["../../../../../src/utils/storage/cookieHandling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;;;GAIG;AACH,iBAAS,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,QAiBzD;AAED;;;;GAIG;AACH,iBAAS,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,QAc3D;AAED,iBAAS,YAAY,CAAC,GAAG,EAAE,OAAO,GAAI;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAU9D;AAED,iBAAS,YAAY,CAAC,GAAG,EAAE,QAAQ,QAalC;AAED,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/types/tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ExpressAuthGneissClient.integration.test.d.ts.map

package/dist/types/tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExpressAuthGneissClient.integration.test.d.ts","sourceRoot":"","sources":["../../../../../../tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@gneiss/client-auth",
+  "version": "1.0.1",
+  "main": "dist/cjs/index.js",
+  "module": "dist/esm/index.js",
+  "types": "dist/types/src/index.d.ts",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/types/src/index.d.ts",
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js"
+    }
+  },
+  "scripts": {
+    "build": "node build.js && tsc --emitDeclarationOnly --outDir dist/types",
+    "build:watch": "node build.js --watch",
+    "test": "jest",
+    "clean": "rd /s /q dist"
+  },
+  "keywords": [],
+  "author": "Timothy Newton",
+  "license": "",
+  "description": "A client for the Gneiss authentication service",
+  "devDependencies": {
+    "@types/cookie-parser": "^1.4.8",
+    "@types/express": "^5.0.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^22.9.0",
+    "@types/supertest": "^6.0.2",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "^5.6.3"
+  },
+  "dependencies": {
+    "@types/jsonwebtoken": "^9.0.7",
+    "axios": "^1.7.7",
+    "cookie-parser": "^1.4.7",
+    "dotenv": "^16.4.5",
+    "esbuild": "^0.24.0",
+    "express": "^4.21.1",
+    "jsonwebtoken": "^9.0.2",
+    "nock": "^13.5.6",
+    "supertest": "^7.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "package.json"
+  ]
+}