@graffiti-garden/implementation-decentralized 0.1.4 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/browser/index.js +1 -1
- package/dist/browser/index.js.map +2 -2
- package/dist/cjs/1-services/1-authorization.js +1 -1
- package/dist/cjs/1-services/1-authorization.js.map +2 -2
- package/dist/esm/1-services/1-authorization.js +1 -1
- package/dist/esm/1-services/1-authorization.js.map +2 -2
- package/package.json +1 -1
- package/src/1-services/1-authorization.ts +1 -1
|
@@ -165,7 +165,7 @@ class Authorization {
|
|
|
165
165
|
state
|
|
166
166
|
});
|
|
167
167
|
if (typeof window !== "undefined") {
|
|
168
|
-
window.location.
|
|
168
|
+
window.location.replace(redirectTo.toString());
|
|
169
169
|
} else {
|
|
170
170
|
console.log("Please open the following URL in your browser:");
|
|
171
171
|
console.log(redirectTo.toString());
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"version": 3,
|
|
3
3
|
"sources": ["../../../src/1-services/1-authorization.ts"],
|
|
4
|
-
"sourcesContent": ["import {\n discovery,\n randomState,\n buildAuthorizationUrl,\n authorizationCodeGrant,\n tokenRevocation,\n} from \"openid-client\";\nimport {\n type infer as infer_,\n string,\n url,\n array,\n object,\n optional,\n nullable,\n instanceof as instanceof_,\n undefined as undefined_,\n intersection,\n union,\n} from \"zod/mini\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { Socket } from \"node:net\";\n\nconst AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2 = \"oauth2:\";\nconst LOCAL_STORAGE_OAUTH2_KEY = \"graffiti-auth-oauth2-data\";\n\nexport class Authorization {\n eventTarget: EventTarget = new EventTarget();\n\n constructor() {\n // Extract oauth redirect synchronously so the route\n // can be changed before any SPA routers (e.g. vue router)\n // start messing with things\n const oauthPromise = this.completeOauth();\n\n (async () => {\n // Allow listeners to be added first\n await new Promise((resolve) => setTimeout(resolve, 0));\n\n // Complete the oauth flow\n await oauthPromise;\n\n // Send an initialized event\n const initializedEvent: InitializedEvent = new CustomEvent(\"initialized\");\n this.eventTarget.dispatchEvent(initializedEvent);\n })();\n }\n\n async login(...args: Parameters<typeof this.login_>): Promise<void> {\n try {\n await this.login_(...args);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId: args[1], error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n }\n }\n protected async login_(\n authorizationEndpoint: string,\n loginId: string,\n serviceEndpoints: string[],\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n\n const scope = serviceEndpoints.map(encodeURIComponent).join(\" \");\n const state = randomState();\n\n let redirectUri: string;\n let waitForCallback: Promise<void> | undefined = undefined;\n if (typeof window !== \"undefined\") {\n // If in a browser, prepare for a redirect by\n // storing the configuration, expected state,\n // current URL, and endpoints in local storage\n redirectUri = window.location.href;\n const data: infer_<typeof OAuth2LoginDataSchema> = {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n };\n window.localStorage.setItem(\n LOCAL_STORAGE_OAUTH2_KEY,\n JSON.stringify(data),\n );\n } else {\n // Otherwise, in node, start a local server to receive the callback\n const http = await import(\"node:http\").catch((e) => {\n throw new Error(\n \"Unrecognized environment: cannot find window or node:http\",\n );\n });\n const server = http.createServer();\n\n try {\n await new Promise<void>((resolve, reject) => {\n server.once(\"error\", reject);\n server.listen(0, \"::1\", resolve);\n });\n } catch (e) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to start local oauth callback server.\");\n }\n\n const address = server.address();\n if (!address) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to get local oauth callback server address.\");\n }\n redirectUri =\n typeof address === \"string\"\n ? `http://${address}`\n : `http://${address.family === \"IPv6\" ? `[${address.address}]` : address.address}:${address.port}`;\n\n // Wait for a callback request\n waitForCallback = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(\n () => {\n try {\n server.close();\n } catch {}\n reject(\"Oauth callback timed out.\");\n },\n 5 * 60 * 1000, // 5 minutes\n );\n\n const sockets = new Set<Socket>();\n server.on(\"connection\", (socket: Socket) => {\n sockets.add(socket);\n socket.on(\"close\", () => {\n sockets.delete(socket);\n });\n });\n\n // Set up the actual request handler\n const onRequest = async (req: IncomingMessage, res: ServerResponse) => {\n try {\n const callbackUrl = new URL(req.url ?? \"/\", redirectUri);\n await this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n });\n\n res.statusCode = 200;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"You may now close this window.\");\n } catch (e) {\n res.statusCode = 500;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"Error processing OAuth callback.\");\n\n throw e;\n } finally {\n clearTimeout(timeout);\n server.off(\"request\", onRequest);\n\n for (const socket of sockets) {\n socket.destroy();\n }\n\n server.close(() => resolve());\n }\n };\n\n server.on(\"request\", onRequest);\n });\n }\n\n // Construct the authorization URL\n const redirectUriStripped = new URL(redirectUri);\n redirectUriStripped.hash = \"\";\n redirectUriStripped.search = \"\";\n\n const redirectTo = buildAuthorizationUrl(configuration, {\n scope,\n redirect_uri: redirectUriStripped.toString(),\n state,\n });\n\n // Either redirect (browser) or print the URL and wait (node)\n if (typeof window !== \"undefined\") {\n window.location.href = redirectTo.toString();\n } else {\n console.log(\"Please open the following URL in your browser:\");\n console.log(redirectTo.toString());\n await waitForCallback;\n }\n }\n\n protected completeOauth() {\n if (typeof window === \"undefined\") return;\n\n // Look in local storage to see if we have a pending login\n const data = window.localStorage.getItem(LOCAL_STORAGE_OAUTH2_KEY);\n if (!data) return;\n\n let json: unknown;\n try {\n json = JSON.parse(data);\n } catch {\n console.error(\"Invalid OAuth2 login data in local storage.\");\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const parseResult = OAuth2LoginDataSchema.safeParse(json);\n if (!parseResult.success) {\n console.error(\n \"Invalid OAuth2 login data structure in local storage.\",\n parseResult.error,\n );\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n } = parseResult.data;\n\n try {\n // Make sure that we redirected back to the correct page\n const expectedUrl = new URL(redirectUri);\n const callbackUrl = new URL(window.location.href);\n if (expectedUrl.pathname !== callbackUrl.pathname) return;\n // Make sure it is actually an oauth call\n const params = callbackUrl.searchParams;\n if (!params.has(\"code\") && !params.has(\"error\")) return;\n\n // Restore the hash and query parameters to the expected URL,\n // removing the code, state, and error parameters\n window.history.replaceState({}, document.title, expectedUrl.toString());\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n\n return new Promise<void>((resolve) => setTimeout(resolve, 0))\n .then(() => this.getAuthorizationConfiguration(authorizationEndpoint))\n .then((configuration) =>\n this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n }),\n )\n .catch((e) => {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n });\n } catch (e) {\n console.error(e);\n }\n }\n\n protected async onCallbackUrl(args: {\n loginId: string;\n callbackUrl: URL;\n configuration: any;\n expectedState: string;\n serviceEndpoints: string[];\n }) {\n const {\n loginId,\n callbackUrl,\n configuration,\n expectedState,\n serviceEndpoints,\n } = args;\n\n const response = await authorizationCodeGrant(configuration, callbackUrl, {\n expectedState,\n });\n\n const token = response.access_token;\n const scope = response.scope;\n const grantedEndpoints =\n scope?.split(\" \").map(decodeURIComponent) || serviceEndpoints;\n\n // Make sure granted endpoints cover the requested endpoints\n if (\n !serviceEndpoints.every((endpoint) => grantedEndpoints.includes(endpoint))\n ) {\n throw new Error(\"Not all requested service endpoints were granted.\");\n }\n\n // Send a logged in event\n const loginEvent: LoginEvent = new CustomEvent(\"login\", {\n detail: {\n loginId,\n token,\n },\n });\n this.eventTarget.dispatchEvent(loginEvent);\n }\n\n async logout(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n try {\n await this.logout_(authorizationEndpoint, logoutId, token);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LogoutEvent[\"detail\"] = { logoutId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n }\n protected async logout_(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n await tokenRevocation(configuration, token);\n const detail: LogoutEvent[\"detail\"] = { logoutId };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n\n protected async getAuthorizationConfiguration(\n authorizationEndpoint: string,\n ): Promise<any> {\n // Parse the authorization endpoint\n if (\n !authorizationEndpoint.startsWith(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2,\n )\n ) {\n throw new Error(\n `Unrecognized authorization endpoint method: ${authorizationEndpoint}`,\n );\n }\n const issuer = authorizationEndpoint.slice(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2.length,\n );\n\n // Look up the oauth configuration\n let issuerUrl: URL;\n try {\n issuerUrl = new URL(issuer);\n } catch (e) {\n throw new Error(\"Invalid issuer URL.\");\n }\n\n return await discovery(issuerUrl, \"graffiti-client\");\n }\n}\n\nexport const LoginEventDetailSchema = intersection(\n object({\n loginId: string(),\n }),\n union([\n object({ token: string(), error: optional(undefined_()) }),\n object({ error: instanceof_(Error) }),\n ]),\n);\n\nexport const LogoutEventDetailSchema = object({\n logoutId: string(),\n error: optional(instanceof_(Error)),\n});\n\nexport const InitializedEventDetailSchema = optional(\n nullable(\n object({\n error: optional(instanceof_(Error)),\n }),\n ),\n);\n\nexport type LoginEvent = CustomEvent<infer_<typeof LoginEventDetailSchema>>;\nexport type LogoutEvent = CustomEvent<infer_<typeof LogoutEventDetailSchema>>;\nexport type InitializedEvent = CustomEvent<\n infer_<typeof InitializedEventDetailSchema>\n>;\n\nconst OAuth2LoginDataSchema = object({\n loginId: string(),\n redirectUri: url(),\n authorizationEndpoint: url(),\n state: string(),\n serviceEndpoints: array(url()),\n});\n"],
|
|
5
|
-
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAMO;AACP,kBAYO;AAIP,MAAM,8CAA8C;AACpD,MAAM,2BAA2B;AAE1B,MAAM,cAAc;AAAA,EACzB,cAA2B,IAAI,YAAY;AAAA,EAE3C,cAAc;AAIZ,UAAM,eAAe,KAAK,cAAc;AAExC,KAAC,YAAY;AAEX,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC;AAGrD,YAAM;AAGN,YAAM,mBAAqC,IAAI,YAAY,aAAa;AACxE,WAAK,YAAY,cAAc,gBAAgB;AAAA,IACjD,GAAG;AAAA,EACL;AAAA,EAEA,MAAM,SAAS,MAAqD;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,GAAG,IAAI;AAAA,IAC3B,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAA+B,EAAE,SAAS,KAAK,CAAC,GAAG,MAAM;AAC/D,WAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AAAA,EACA,MAAgB,OACd,uBACA,SACA,kBACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,QAAQ,iBAAiB,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAC/D,UAAM,YAAQ,kCAAY;AAE1B,QAAI;AACJ,QAAI,kBAA6C;AACjD,QAAI,OAAO,WAAW,aAAa;AAIjC,oBAAc,OAAO,SAAS;AAC9B,YAAM,OAA6C;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,aAAa;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,IAAI;AAAA,MACrB;AAAA,IACF,OAAO;AAEL,YAAM,OAAO,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,MAAM;AAClD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS,KAAK,aAAa;AAEjC,UAAI;AACF,cAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,iBAAO,KAAK,SAAS,MAAM;AAC3B,iBAAO,OAAO,GAAG,OAAO,OAAO;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,GAAG;AACV,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,YAAM,UAAU,OAAO,QAAQ;AAC/B,UAAI,CAAC,SAAS;AACZ,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,oBACE,OAAO,YAAY,WACf,UAAU,OAAO,KACjB,UAAU,QAAQ,WAAW,SAAS,IAAI,QAAQ,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAGpG,wBAAkB,IAAI,QAAc,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU;AAAA,UACd,MAAM;AACJ,gBAAI;AACF,qBAAO,MAAM;AAAA,YACf,QAAQ;AAAA,YAAC;AACT,mBAAO,2BAA2B;AAAA,UACpC;AAAA,UACA,IAAI,KAAK;AAAA;AAAA,QACX;AAEA,cAAM,UAAU,oBAAI,IAAY;AAChC,eAAO,GAAG,cAAc,CAAC,WAAmB;AAC1C,kBAAQ,IAAI,MAAM;AAClB,iBAAO,GAAG,SAAS,MAAM;AACvB,oBAAQ,OAAO,MAAM;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AAGD,cAAM,YAAY,OAAO,KAAsB,QAAwB;AACrE,cAAI;AACF,kBAAM,cAAc,IAAI,IAAI,IAAI,OAAO,KAAK,WAAW;AACvD,kBAAM,KAAK,cAAc;AAAA,cACvB;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe;AAAA,cACf;AAAA,YACF,CAAC;AAED,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,gCAAgC;AAAA,UAC1C,SAAS,GAAG;AACV,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,kCAAkC;AAE1C,kBAAM;AAAA,UACR,UAAE;AACA,yBAAa,OAAO;AACpB,mBAAO,IAAI,WAAW,SAAS;AAE/B,uBAAW,UAAU,SAAS;AAC5B,qBAAO,QAAQ;AAAA,YACjB;AAEA,mBAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,UAC9B;AAAA,QACF;AAEA,eAAO,GAAG,WAAW,SAAS;AAAA,MAChC,CAAC;AAAA,IACH;AAGA,UAAM,sBAAsB,IAAI,IAAI,WAAW;AAC/C,wBAAoB,OAAO;AAC3B,wBAAoB,SAAS;AAE7B,UAAM,iBAAa,4CAAsB,eAAe;AAAA,MACtD;AAAA,MACA,cAAc,oBAAoB,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,SAAS,
|
|
4
|
+
"sourcesContent": ["import {\n discovery,\n randomState,\n buildAuthorizationUrl,\n authorizationCodeGrant,\n tokenRevocation,\n} from \"openid-client\";\nimport {\n type infer as infer_,\n string,\n url,\n array,\n object,\n optional,\n nullable,\n instanceof as instanceof_,\n undefined as undefined_,\n intersection,\n union,\n} from \"zod/mini\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { Socket } from \"node:net\";\n\nconst AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2 = \"oauth2:\";\nconst LOCAL_STORAGE_OAUTH2_KEY = \"graffiti-auth-oauth2-data\";\n\nexport class Authorization {\n eventTarget: EventTarget = new EventTarget();\n\n constructor() {\n // Extract oauth redirect synchronously so the route\n // can be changed before any SPA routers (e.g. vue router)\n // start messing with things\n const oauthPromise = this.completeOauth();\n\n (async () => {\n // Allow listeners to be added first\n await new Promise((resolve) => setTimeout(resolve, 0));\n\n // Complete the oauth flow\n await oauthPromise;\n\n // Send an initialized event\n const initializedEvent: InitializedEvent = new CustomEvent(\"initialized\");\n this.eventTarget.dispatchEvent(initializedEvent);\n })();\n }\n\n async login(...args: Parameters<typeof this.login_>): Promise<void> {\n try {\n await this.login_(...args);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId: args[1], error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n }\n }\n protected async login_(\n authorizationEndpoint: string,\n loginId: string,\n serviceEndpoints: string[],\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n\n const scope = serviceEndpoints.map(encodeURIComponent).join(\" \");\n const state = randomState();\n\n let redirectUri: string;\n let waitForCallback: Promise<void> | undefined = undefined;\n if (typeof window !== \"undefined\") {\n // If in a browser, prepare for a redirect by\n // storing the configuration, expected state,\n // current URL, and endpoints in local storage\n redirectUri = window.location.href;\n const data: infer_<typeof OAuth2LoginDataSchema> = {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n };\n window.localStorage.setItem(\n LOCAL_STORAGE_OAUTH2_KEY,\n JSON.stringify(data),\n );\n } else {\n // Otherwise, in node, start a local server to receive the callback\n const http = await import(\"node:http\").catch((e) => {\n throw new Error(\n \"Unrecognized environment: cannot find window or node:http\",\n );\n });\n const server = http.createServer();\n\n try {\n await new Promise<void>((resolve, reject) => {\n server.once(\"error\", reject);\n server.listen(0, \"::1\", resolve);\n });\n } catch (e) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to start local oauth callback server.\");\n }\n\n const address = server.address();\n if (!address) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to get local oauth callback server address.\");\n }\n redirectUri =\n typeof address === \"string\"\n ? `http://${address}`\n : `http://${address.family === \"IPv6\" ? `[${address.address}]` : address.address}:${address.port}`;\n\n // Wait for a callback request\n waitForCallback = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(\n () => {\n try {\n server.close();\n } catch {}\n reject(\"Oauth callback timed out.\");\n },\n 5 * 60 * 1000, // 5 minutes\n );\n\n const sockets = new Set<Socket>();\n server.on(\"connection\", (socket: Socket) => {\n sockets.add(socket);\n socket.on(\"close\", () => {\n sockets.delete(socket);\n });\n });\n\n // Set up the actual request handler\n const onRequest = async (req: IncomingMessage, res: ServerResponse) => {\n try {\n const callbackUrl = new URL(req.url ?? \"/\", redirectUri);\n await this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n });\n\n res.statusCode = 200;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"You may now close this window.\");\n } catch (e) {\n res.statusCode = 500;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"Error processing OAuth callback.\");\n\n throw e;\n } finally {\n clearTimeout(timeout);\n server.off(\"request\", onRequest);\n\n for (const socket of sockets) {\n socket.destroy();\n }\n\n server.close(() => resolve());\n }\n };\n\n server.on(\"request\", onRequest);\n });\n }\n\n // Construct the authorization URL\n const redirectUriStripped = new URL(redirectUri);\n redirectUriStripped.hash = \"\";\n redirectUriStripped.search = \"\";\n\n const redirectTo = buildAuthorizationUrl(configuration, {\n scope,\n redirect_uri: redirectUriStripped.toString(),\n state,\n });\n\n // Either redirect (browser) or print the URL and wait (node)\n if (typeof window !== \"undefined\") {\n window.location.replace(redirectTo.toString());\n } else {\n console.log(\"Please open the following URL in your browser:\");\n console.log(redirectTo.toString());\n await waitForCallback;\n }\n }\n\n protected completeOauth() {\n if (typeof window === \"undefined\") return;\n\n // Look in local storage to see if we have a pending login\n const data = window.localStorage.getItem(LOCAL_STORAGE_OAUTH2_KEY);\n if (!data) return;\n\n let json: unknown;\n try {\n json = JSON.parse(data);\n } catch {\n console.error(\"Invalid OAuth2 login data in local storage.\");\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const parseResult = OAuth2LoginDataSchema.safeParse(json);\n if (!parseResult.success) {\n console.error(\n \"Invalid OAuth2 login data structure in local storage.\",\n parseResult.error,\n );\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n } = parseResult.data;\n\n try {\n // Make sure that we redirected back to the correct page\n const expectedUrl = new URL(redirectUri);\n const callbackUrl = new URL(window.location.href);\n if (expectedUrl.pathname !== callbackUrl.pathname) return;\n // Make sure it is actually an oauth call\n const params = callbackUrl.searchParams;\n if (!params.has(\"code\") && !params.has(\"error\")) return;\n\n // Restore the hash and query parameters to the expected URL,\n // removing the code, state, and error parameters\n window.history.replaceState({}, document.title, expectedUrl.toString());\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n\n return new Promise<void>((resolve) => setTimeout(resolve, 0))\n .then(() => this.getAuthorizationConfiguration(authorizationEndpoint))\n .then((configuration) =>\n this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n }),\n )\n .catch((e) => {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n });\n } catch (e) {\n console.error(e);\n }\n }\n\n protected async onCallbackUrl(args: {\n loginId: string;\n callbackUrl: URL;\n configuration: any;\n expectedState: string;\n serviceEndpoints: string[];\n }) {\n const {\n loginId,\n callbackUrl,\n configuration,\n expectedState,\n serviceEndpoints,\n } = args;\n\n const response = await authorizationCodeGrant(configuration, callbackUrl, {\n expectedState,\n });\n\n const token = response.access_token;\n const scope = response.scope;\n const grantedEndpoints =\n scope?.split(\" \").map(decodeURIComponent) || serviceEndpoints;\n\n // Make sure granted endpoints cover the requested endpoints\n if (\n !serviceEndpoints.every((endpoint) => grantedEndpoints.includes(endpoint))\n ) {\n throw new Error(\"Not all requested service endpoints were granted.\");\n }\n\n // Send a logged in event\n const loginEvent: LoginEvent = new CustomEvent(\"login\", {\n detail: {\n loginId,\n token,\n },\n });\n this.eventTarget.dispatchEvent(loginEvent);\n }\n\n async logout(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n try {\n await this.logout_(authorizationEndpoint, logoutId, token);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LogoutEvent[\"detail\"] = { logoutId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n }\n protected async logout_(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n await tokenRevocation(configuration, token);\n const detail: LogoutEvent[\"detail\"] = { logoutId };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n\n protected async getAuthorizationConfiguration(\n authorizationEndpoint: string,\n ): Promise<any> {\n // Parse the authorization endpoint\n if (\n !authorizationEndpoint.startsWith(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2,\n )\n ) {\n throw new Error(\n `Unrecognized authorization endpoint method: ${authorizationEndpoint}`,\n );\n }\n const issuer = authorizationEndpoint.slice(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2.length,\n );\n\n // Look up the oauth configuration\n let issuerUrl: URL;\n try {\n issuerUrl = new URL(issuer);\n } catch (e) {\n throw new Error(\"Invalid issuer URL.\");\n }\n\n return await discovery(issuerUrl, \"graffiti-client\");\n }\n}\n\nexport const LoginEventDetailSchema = intersection(\n object({\n loginId: string(),\n }),\n union([\n object({ token: string(), error: optional(undefined_()) }),\n object({ error: instanceof_(Error) }),\n ]),\n);\n\nexport const LogoutEventDetailSchema = object({\n logoutId: string(),\n error: optional(instanceof_(Error)),\n});\n\nexport const InitializedEventDetailSchema = optional(\n nullable(\n object({\n error: optional(instanceof_(Error)),\n }),\n ),\n);\n\nexport type LoginEvent = CustomEvent<infer_<typeof LoginEventDetailSchema>>;\nexport type LogoutEvent = CustomEvent<infer_<typeof LogoutEventDetailSchema>>;\nexport type InitializedEvent = CustomEvent<\n infer_<typeof InitializedEventDetailSchema>\n>;\n\nconst OAuth2LoginDataSchema = object({\n loginId: string(),\n redirectUri: url(),\n authorizationEndpoint: url(),\n state: string(),\n serviceEndpoints: array(url()),\n});\n"],
|
|
5
|
+
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAMO;AACP,kBAYO;AAIP,MAAM,8CAA8C;AACpD,MAAM,2BAA2B;AAE1B,MAAM,cAAc;AAAA,EACzB,cAA2B,IAAI,YAAY;AAAA,EAE3C,cAAc;AAIZ,UAAM,eAAe,KAAK,cAAc;AAExC,KAAC,YAAY;AAEX,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC;AAGrD,YAAM;AAGN,YAAM,mBAAqC,IAAI,YAAY,aAAa;AACxE,WAAK,YAAY,cAAc,gBAAgB;AAAA,IACjD,GAAG;AAAA,EACL;AAAA,EAEA,MAAM,SAAS,MAAqD;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,GAAG,IAAI;AAAA,IAC3B,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAA+B,EAAE,SAAS,KAAK,CAAC,GAAG,MAAM;AAC/D,WAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AAAA,EACA,MAAgB,OACd,uBACA,SACA,kBACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,QAAQ,iBAAiB,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAC/D,UAAM,YAAQ,kCAAY;AAE1B,QAAI;AACJ,QAAI,kBAA6C;AACjD,QAAI,OAAO,WAAW,aAAa;AAIjC,oBAAc,OAAO,SAAS;AAC9B,YAAM,OAA6C;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,aAAa;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,IAAI;AAAA,MACrB;AAAA,IACF,OAAO;AAEL,YAAM,OAAO,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,MAAM;AAClD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS,KAAK,aAAa;AAEjC,UAAI;AACF,cAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,iBAAO,KAAK,SAAS,MAAM;AAC3B,iBAAO,OAAO,GAAG,OAAO,OAAO;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,GAAG;AACV,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,YAAM,UAAU,OAAO,QAAQ;AAC/B,UAAI,CAAC,SAAS;AACZ,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,oBACE,OAAO,YAAY,WACf,UAAU,OAAO,KACjB,UAAU,QAAQ,WAAW,SAAS,IAAI,QAAQ,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAGpG,wBAAkB,IAAI,QAAc,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU;AAAA,UACd,MAAM;AACJ,gBAAI;AACF,qBAAO,MAAM;AAAA,YACf,QAAQ;AAAA,YAAC;AACT,mBAAO,2BAA2B;AAAA,UACpC;AAAA,UACA,IAAI,KAAK;AAAA;AAAA,QACX;AAEA,cAAM,UAAU,oBAAI,IAAY;AAChC,eAAO,GAAG,cAAc,CAAC,WAAmB;AAC1C,kBAAQ,IAAI,MAAM;AAClB,iBAAO,GAAG,SAAS,MAAM;AACvB,oBAAQ,OAAO,MAAM;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AAGD,cAAM,YAAY,OAAO,KAAsB,QAAwB;AACrE,cAAI;AACF,kBAAM,cAAc,IAAI,IAAI,IAAI,OAAO,KAAK,WAAW;AACvD,kBAAM,KAAK,cAAc;AAAA,cACvB;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe;AAAA,cACf;AAAA,YACF,CAAC;AAED,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,gCAAgC;AAAA,UAC1C,SAAS,GAAG;AACV,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,kCAAkC;AAE1C,kBAAM;AAAA,UACR,UAAE;AACA,yBAAa,OAAO;AACpB,mBAAO,IAAI,WAAW,SAAS;AAE/B,uBAAW,UAAU,SAAS;AAC5B,qBAAO,QAAQ;AAAA,YACjB;AAEA,mBAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,UAC9B;AAAA,QACF;AAEA,eAAO,GAAG,WAAW,SAAS;AAAA,MAChC,CAAC;AAAA,IACH;AAGA,UAAM,sBAAsB,IAAI,IAAI,WAAW;AAC/C,wBAAoB,OAAO;AAC3B,wBAAoB,SAAS;AAE7B,UAAM,iBAAa,4CAAsB,eAAe;AAAA,MACtD;AAAA,MACA,cAAc,oBAAoB,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,SAAS,QAAQ,WAAW,SAAS,CAAC;AAAA,IAC/C,OAAO;AACL,cAAQ,IAAI,gDAAgD;AAC5D,cAAQ,IAAI,WAAW,SAAS,CAAC;AACjC,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEU,gBAAgB;AACxB,QAAI,OAAO,WAAW,YAAa;AAGnC,UAAM,OAAO,OAAO,aAAa,QAAQ,wBAAwB;AACjE,QAAI,CAAC,KAAM;AAEX,QAAI;AACJ,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,cAAQ,MAAM,6CAA6C;AAC3D,aAAO,aAAa,WAAW,wBAAwB;AACvD;AAAA,IACF;AAEA,UAAM,cAAc,sBAAsB,UAAU,IAAI;AACxD,QAAI,CAAC,YAAY,SAAS;AACxB,cAAQ;AAAA,QACN;AAAA,QACA,YAAY;AAAA,MACd;AACA,aAAO,aAAa,WAAW,wBAAwB;AACvD;AAAA,IACF;AAEA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,YAAY;AAEhB,QAAI;AAEF,YAAM,cAAc,IAAI,IAAI,WAAW;AACvC,YAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,UAAI,YAAY,aAAa,YAAY,SAAU;AAEnD,YAAM,SAAS,YAAY;AAC3B,UAAI,CAAC,OAAO,IAAI,MAAM,KAAK,CAAC,OAAO,IAAI,OAAO,EAAG;AAIjD,aAAO,QAAQ,aAAa,CAAC,GAAG,SAAS,OAAO,YAAY,SAAS,CAAC;AACtE,aAAO,aAAa,WAAW,wBAAwB;AAEvD,aAAO,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC,EACzD,KAAK,MAAM,KAAK,8BAA8B,qBAAqB,CAAC,EACpE;AAAA,QAAK,CAAC,kBACL,KAAK,cAAc;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,UACA,eAAe;AAAA,UACf;AAAA,QACF,CAAC;AAAA,MACH,EACC,MAAM,CAAC,MAAM;AACZ,cAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,cAAM,SAA+B,EAAE,SAAS,MAAM;AACtD,aAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,MACrE,CAAC;AAAA,IACL,SAAS,GAAG;AACV,cAAQ,MAAM,CAAC;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAgB,cAAc,MAM3B;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAEJ,UAAM,WAAW,UAAM,6CAAuB,eAAe,aAAa;AAAA,MACxE;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,SAAS;AACvB,UAAM,QAAQ,SAAS;AACvB,UAAM,mBACJ,OAAO,MAAM,GAAG,EAAE,IAAI,kBAAkB,KAAK;AAG/C,QACE,CAAC,iBAAiB,MAAM,CAAC,aAAa,iBAAiB,SAAS,QAAQ,CAAC,GACzE;AACA,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAGA,UAAM,aAAyB,IAAI,YAAY,SAAS;AAAA,MACtD,QAAQ;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AACD,SAAK,YAAY,cAAc,UAAU;AAAA,EAC3C;AAAA,EAEA,MAAM,OACJ,uBACA,UACA,OACe;AACf,QAAI;AACF,YAAM,KAAK,QAAQ,uBAAuB,UAAU,KAAK;AAAA,IAC3D,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAAgC,EAAE,UAAU,MAAM;AACxD,WAAK,YAAY,cAAc,IAAI,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;AAAA,IACtE;AAAA,EACF;AAAA,EACA,MAAgB,QACd,uBACA,UACA,OACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AACA,cAAM,sCAAgB,eAAe,KAAK;AAC1C,UAAM,SAAgC,EAAE,SAAS;AACjD,SAAK,YAAY,cAAc,IAAI,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;AAAA,EACtE;AAAA,EAEA,MAAgB,8BACd,uBACc;AAEd,QACE,CAAC,sBAAsB;AAAA,MACrB;AAAA,IACF,GACA;AACA,YAAM,IAAI;AAAA,QACR,+CAA+C,qBAAqB;AAAA,MACtE;AAAA,IACF;AACA,UAAM,SAAS,sBAAsB;AAAA,MACnC,4CAA4C;AAAA,IAC9C;AAGA,QAAI;AACJ,QAAI;AACF,kBAAY,IAAI,IAAI,MAAM;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAEA,WAAO,UAAM,gCAAU,WAAW,iBAAiB;AAAA,EACrD;AACF;AAEO,MAAM,6BAAyB;AAAA,MACpC,oBAAO;AAAA,IACL,aAAS,oBAAO;AAAA,EAClB,CAAC;AAAA,MACD,mBAAM;AAAA,QACJ,oBAAO,EAAE,WAAO,oBAAO,GAAG,WAAO,0BAAS,YAAAA,WAAW,CAAC,EAAE,CAAC;AAAA,QACzD,oBAAO,EAAE,WAAO,YAAAC,YAAY,KAAK,EAAE,CAAC;AAAA,EACtC,CAAC;AACH;AAEO,MAAM,8BAA0B,oBAAO;AAAA,EAC5C,cAAU,oBAAO;AAAA,EACjB,WAAO,0BAAS,YAAAA,YAAY,KAAK,CAAC;AACpC,CAAC;AAEM,MAAM,mCAA+B;AAAA,MAC1C;AAAA,QACE,oBAAO;AAAA,MACL,WAAO,0BAAS,YAAAA,YAAY,KAAK,CAAC;AAAA,IACpC,CAAC;AAAA,EACH;AACF;AAQA,MAAM,4BAAwB,oBAAO;AAAA,EACnC,aAAS,oBAAO;AAAA,EAChB,iBAAa,iBAAI;AAAA,EACjB,2BAAuB,iBAAI;AAAA,EAC3B,WAAO,oBAAO;AAAA,EACd,sBAAkB,uBAAM,iBAAI,CAAC;AAC/B,CAAC;",
|
|
6
6
|
"names": ["undefined_", "instanceof_"]
|
|
7
7
|
}
|
|
@@ -146,7 +146,7 @@ class Authorization {
|
|
|
146
146
|
state
|
|
147
147
|
});
|
|
148
148
|
if (typeof window !== "undefined") {
|
|
149
|
-
window.location.
|
|
149
|
+
window.location.replace(redirectTo.toString());
|
|
150
150
|
} else {
|
|
151
151
|
console.log("Please open the following URL in your browser:");
|
|
152
152
|
console.log(redirectTo.toString());
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"version": 3,
|
|
3
3
|
"sources": ["../../../src/1-services/1-authorization.ts"],
|
|
4
|
-
"sourcesContent": ["import {\n discovery,\n randomState,\n buildAuthorizationUrl,\n authorizationCodeGrant,\n tokenRevocation,\n} from \"openid-client\";\nimport {\n type infer as infer_,\n string,\n url,\n array,\n object,\n optional,\n nullable,\n instanceof as instanceof_,\n undefined as undefined_,\n intersection,\n union,\n} from \"zod/mini\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { Socket } from \"node:net\";\n\nconst AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2 = \"oauth2:\";\nconst LOCAL_STORAGE_OAUTH2_KEY = \"graffiti-auth-oauth2-data\";\n\nexport class Authorization {\n eventTarget: EventTarget = new EventTarget();\n\n constructor() {\n // Extract oauth redirect synchronously so the route\n // can be changed before any SPA routers (e.g. vue router)\n // start messing with things\n const oauthPromise = this.completeOauth();\n\n (async () => {\n // Allow listeners to be added first\n await new Promise((resolve) => setTimeout(resolve, 0));\n\n // Complete the oauth flow\n await oauthPromise;\n\n // Send an initialized event\n const initializedEvent: InitializedEvent = new CustomEvent(\"initialized\");\n this.eventTarget.dispatchEvent(initializedEvent);\n })();\n }\n\n async login(...args: Parameters<typeof this.login_>): Promise<void> {\n try {\n await this.login_(...args);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId: args[1], error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n }\n }\n protected async login_(\n authorizationEndpoint: string,\n loginId: string,\n serviceEndpoints: string[],\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n\n const scope = serviceEndpoints.map(encodeURIComponent).join(\" \");\n const state = randomState();\n\n let redirectUri: string;\n let waitForCallback: Promise<void> | undefined = undefined;\n if (typeof window !== \"undefined\") {\n // If in a browser, prepare for a redirect by\n // storing the configuration, expected state,\n // current URL, and endpoints in local storage\n redirectUri = window.location.href;\n const data: infer_<typeof OAuth2LoginDataSchema> = {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n };\n window.localStorage.setItem(\n LOCAL_STORAGE_OAUTH2_KEY,\n JSON.stringify(data),\n );\n } else {\n // Otherwise, in node, start a local server to receive the callback\n const http = await import(\"node:http\").catch((e) => {\n throw new Error(\n \"Unrecognized environment: cannot find window or node:http\",\n );\n });\n const server = http.createServer();\n\n try {\n await new Promise<void>((resolve, reject) => {\n server.once(\"error\", reject);\n server.listen(0, \"::1\", resolve);\n });\n } catch (e) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to start local oauth callback server.\");\n }\n\n const address = server.address();\n if (!address) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to get local oauth callback server address.\");\n }\n redirectUri =\n typeof address === \"string\"\n ? `http://${address}`\n : `http://${address.family === \"IPv6\" ? `[${address.address}]` : address.address}:${address.port}`;\n\n // Wait for a callback request\n waitForCallback = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(\n () => {\n try {\n server.close();\n } catch {}\n reject(\"Oauth callback timed out.\");\n },\n 5 * 60 * 1000, // 5 minutes\n );\n\n const sockets = new Set<Socket>();\n server.on(\"connection\", (socket: Socket) => {\n sockets.add(socket);\n socket.on(\"close\", () => {\n sockets.delete(socket);\n });\n });\n\n // Set up the actual request handler\n const onRequest = async (req: IncomingMessage, res: ServerResponse) => {\n try {\n const callbackUrl = new URL(req.url ?? \"/\", redirectUri);\n await this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n });\n\n res.statusCode = 200;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"You may now close this window.\");\n } catch (e) {\n res.statusCode = 500;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"Error processing OAuth callback.\");\n\n throw e;\n } finally {\n clearTimeout(timeout);\n server.off(\"request\", onRequest);\n\n for (const socket of sockets) {\n socket.destroy();\n }\n\n server.close(() => resolve());\n }\n };\n\n server.on(\"request\", onRequest);\n });\n }\n\n // Construct the authorization URL\n const redirectUriStripped = new URL(redirectUri);\n redirectUriStripped.hash = \"\";\n redirectUriStripped.search = \"\";\n\n const redirectTo = buildAuthorizationUrl(configuration, {\n scope,\n redirect_uri: redirectUriStripped.toString(),\n state,\n });\n\n // Either redirect (browser) or print the URL and wait (node)\n if (typeof window !== \"undefined\") {\n window.location.href = redirectTo.toString();\n } else {\n console.log(\"Please open the following URL in your browser:\");\n console.log(redirectTo.toString());\n await waitForCallback;\n }\n }\n\n protected completeOauth() {\n if (typeof window === \"undefined\") return;\n\n // Look in local storage to see if we have a pending login\n const data = window.localStorage.getItem(LOCAL_STORAGE_OAUTH2_KEY);\n if (!data) return;\n\n let json: unknown;\n try {\n json = JSON.parse(data);\n } catch {\n console.error(\"Invalid OAuth2 login data in local storage.\");\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const parseResult = OAuth2LoginDataSchema.safeParse(json);\n if (!parseResult.success) {\n console.error(\n \"Invalid OAuth2 login data structure in local storage.\",\n parseResult.error,\n );\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n } = parseResult.data;\n\n try {\n // Make sure that we redirected back to the correct page\n const expectedUrl = new URL(redirectUri);\n const callbackUrl = new URL(window.location.href);\n if (expectedUrl.pathname !== callbackUrl.pathname) return;\n // Make sure it is actually an oauth call\n const params = callbackUrl.searchParams;\n if (!params.has(\"code\") && !params.has(\"error\")) return;\n\n // Restore the hash and query parameters to the expected URL,\n // removing the code, state, and error parameters\n window.history.replaceState({}, document.title, expectedUrl.toString());\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n\n return new Promise<void>((resolve) => setTimeout(resolve, 0))\n .then(() => this.getAuthorizationConfiguration(authorizationEndpoint))\n .then((configuration) =>\n this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n }),\n )\n .catch((e) => {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n });\n } catch (e) {\n console.error(e);\n }\n }\n\n protected async onCallbackUrl(args: {\n loginId: string;\n callbackUrl: URL;\n configuration: any;\n expectedState: string;\n serviceEndpoints: string[];\n }) {\n const {\n loginId,\n callbackUrl,\n configuration,\n expectedState,\n serviceEndpoints,\n } = args;\n\n const response = await authorizationCodeGrant(configuration, callbackUrl, {\n expectedState,\n });\n\n const token = response.access_token;\n const scope = response.scope;\n const grantedEndpoints =\n scope?.split(\" \").map(decodeURIComponent) || serviceEndpoints;\n\n // Make sure granted endpoints cover the requested endpoints\n if (\n !serviceEndpoints.every((endpoint) => grantedEndpoints.includes(endpoint))\n ) {\n throw new Error(\"Not all requested service endpoints were granted.\");\n }\n\n // Send a logged in event\n const loginEvent: LoginEvent = new CustomEvent(\"login\", {\n detail: {\n loginId,\n token,\n },\n });\n this.eventTarget.dispatchEvent(loginEvent);\n }\n\n async logout(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n try {\n await this.logout_(authorizationEndpoint, logoutId, token);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LogoutEvent[\"detail\"] = { logoutId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n }\n protected async logout_(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n await tokenRevocation(configuration, token);\n const detail: LogoutEvent[\"detail\"] = { logoutId };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n\n protected async getAuthorizationConfiguration(\n authorizationEndpoint: string,\n ): Promise<any> {\n // Parse the authorization endpoint\n if (\n !authorizationEndpoint.startsWith(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2,\n )\n ) {\n throw new Error(\n `Unrecognized authorization endpoint method: ${authorizationEndpoint}`,\n );\n }\n const issuer = authorizationEndpoint.slice(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2.length,\n );\n\n // Look up the oauth configuration\n let issuerUrl: URL;\n try {\n issuerUrl = new URL(issuer);\n } catch (e) {\n throw new Error(\"Invalid issuer URL.\");\n }\n\n return await discovery(issuerUrl, \"graffiti-client\");\n }\n}\n\nexport const LoginEventDetailSchema = intersection(\n object({\n loginId: string(),\n }),\n union([\n object({ token: string(), error: optional(undefined_()) }),\n object({ error: instanceof_(Error) }),\n ]),\n);\n\nexport const LogoutEventDetailSchema = object({\n logoutId: string(),\n error: optional(instanceof_(Error)),\n});\n\nexport const InitializedEventDetailSchema = optional(\n nullable(\n object({\n error: optional(instanceof_(Error)),\n }),\n ),\n);\n\nexport type LoginEvent = CustomEvent<infer_<typeof LoginEventDetailSchema>>;\nexport type LogoutEvent = CustomEvent<infer_<typeof LogoutEventDetailSchema>>;\nexport type InitializedEvent = CustomEvent<\n infer_<typeof InitializedEventDetailSchema>\n>;\n\nconst OAuth2LoginDataSchema = object({\n loginId: string(),\n redirectUri: url(),\n authorizationEndpoint: url(),\n state: string(),\n serviceEndpoints: array(url()),\n});\n"],
|
|
5
|
-
"mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,aAAa;AAAA,EACb;AAAA,EACA;AAAA,OACK;AAIP,MAAM,8CAA8C;AACpD,MAAM,2BAA2B;AAE1B,MAAM,cAAc;AAAA,EACzB,cAA2B,IAAI,YAAY;AAAA,EAE3C,cAAc;AAIZ,UAAM,eAAe,KAAK,cAAc;AAExC,KAAC,YAAY;AAEX,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC;AAGrD,YAAM;AAGN,YAAM,mBAAqC,IAAI,YAAY,aAAa;AACxE,WAAK,YAAY,cAAc,gBAAgB;AAAA,IACjD,GAAG;AAAA,EACL;AAAA,EAEA,MAAM,SAAS,MAAqD;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,GAAG,IAAI;AAAA,IAC3B,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAA+B,EAAE,SAAS,KAAK,CAAC,GAAG,MAAM;AAC/D,WAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AAAA,EACA,MAAgB,OACd,uBACA,SACA,kBACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,QAAQ,iBAAiB,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAC/D,UAAM,QAAQ,YAAY;AAE1B,QAAI;AACJ,QAAI,kBAA6C;AACjD,QAAI,OAAO,WAAW,aAAa;AAIjC,oBAAc,OAAO,SAAS;AAC9B,YAAM,OAA6C;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,aAAa;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,IAAI;AAAA,MACrB;AAAA,IACF,OAAO;AAEL,YAAM,OAAO,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,MAAM;AAClD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS,KAAK,aAAa;AAEjC,UAAI;AACF,cAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,iBAAO,KAAK,SAAS,MAAM;AAC3B,iBAAO,OAAO,GAAG,OAAO,OAAO;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,GAAG;AACV,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,YAAM,UAAU,OAAO,QAAQ;AAC/B,UAAI,CAAC,SAAS;AACZ,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,oBACE,OAAO,YAAY,WACf,UAAU,OAAO,KACjB,UAAU,QAAQ,WAAW,SAAS,IAAI,QAAQ,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAGpG,wBAAkB,IAAI,QAAc,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU;AAAA,UACd,MAAM;AACJ,gBAAI;AACF,qBAAO,MAAM;AAAA,YACf,QAAQ;AAAA,YAAC;AACT,mBAAO,2BAA2B;AAAA,UACpC;AAAA,UACA,IAAI,KAAK;AAAA;AAAA,QACX;AAEA,cAAM,UAAU,oBAAI,IAAY;AAChC,eAAO,GAAG,cAAc,CAAC,WAAmB;AAC1C,kBAAQ,IAAI,MAAM;AAClB,iBAAO,GAAG,SAAS,MAAM;AACvB,oBAAQ,OAAO,MAAM;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AAGD,cAAM,YAAY,OAAO,KAAsB,QAAwB;AACrE,cAAI;AACF,kBAAM,cAAc,IAAI,IAAI,IAAI,OAAO,KAAK,WAAW;AACvD,kBAAM,KAAK,cAAc;AAAA,cACvB;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe;AAAA,cACf;AAAA,YACF,CAAC;AAED,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,gCAAgC;AAAA,UAC1C,SAAS,GAAG;AACV,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,kCAAkC;AAE1C,kBAAM;AAAA,UACR,UAAE;AACA,yBAAa,OAAO;AACpB,mBAAO,IAAI,WAAW,SAAS;AAE/B,uBAAW,UAAU,SAAS;AAC5B,qBAAO,QAAQ;AAAA,YACjB;AAEA,mBAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,UAC9B;AAAA,QACF;AAEA,eAAO,GAAG,WAAW,SAAS;AAAA,MAChC,CAAC;AAAA,IACH;AAGA,UAAM,sBAAsB,IAAI,IAAI,WAAW;AAC/C,wBAAoB,OAAO;AAC3B,wBAAoB,SAAS;AAE7B,UAAM,aAAa,sBAAsB,eAAe;AAAA,MACtD;AAAA,MACA,cAAc,oBAAoB,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,SAAS,
|
|
4
|
+
"sourcesContent": ["import {\n discovery,\n randomState,\n buildAuthorizationUrl,\n authorizationCodeGrant,\n tokenRevocation,\n} from \"openid-client\";\nimport {\n type infer as infer_,\n string,\n url,\n array,\n object,\n optional,\n nullable,\n instanceof as instanceof_,\n undefined as undefined_,\n intersection,\n union,\n} from \"zod/mini\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { Socket } from \"node:net\";\n\nconst AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2 = \"oauth2:\";\nconst LOCAL_STORAGE_OAUTH2_KEY = \"graffiti-auth-oauth2-data\";\n\nexport class Authorization {\n eventTarget: EventTarget = new EventTarget();\n\n constructor() {\n // Extract oauth redirect synchronously so the route\n // can be changed before any SPA routers (e.g. vue router)\n // start messing with things\n const oauthPromise = this.completeOauth();\n\n (async () => {\n // Allow listeners to be added first\n await new Promise((resolve) => setTimeout(resolve, 0));\n\n // Complete the oauth flow\n await oauthPromise;\n\n // Send an initialized event\n const initializedEvent: InitializedEvent = new CustomEvent(\"initialized\");\n this.eventTarget.dispatchEvent(initializedEvent);\n })();\n }\n\n async login(...args: Parameters<typeof this.login_>): Promise<void> {\n try {\n await this.login_(...args);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId: args[1], error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n }\n }\n protected async login_(\n authorizationEndpoint: string,\n loginId: string,\n serviceEndpoints: string[],\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n\n const scope = serviceEndpoints.map(encodeURIComponent).join(\" \");\n const state = randomState();\n\n let redirectUri: string;\n let waitForCallback: Promise<void> | undefined = undefined;\n if (typeof window !== \"undefined\") {\n // If in a browser, prepare for a redirect by\n // storing the configuration, expected state,\n // current URL, and endpoints in local storage\n redirectUri = window.location.href;\n const data: infer_<typeof OAuth2LoginDataSchema> = {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n };\n window.localStorage.setItem(\n LOCAL_STORAGE_OAUTH2_KEY,\n JSON.stringify(data),\n );\n } else {\n // Otherwise, in node, start a local server to receive the callback\n const http = await import(\"node:http\").catch((e) => {\n throw new Error(\n \"Unrecognized environment: cannot find window or node:http\",\n );\n });\n const server = http.createServer();\n\n try {\n await new Promise<void>((resolve, reject) => {\n server.once(\"error\", reject);\n server.listen(0, \"::1\", resolve);\n });\n } catch (e) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to start local oauth callback server.\");\n }\n\n const address = server.address();\n if (!address) {\n try {\n server.close();\n } catch {}\n throw new Error(\"Failed to get local oauth callback server address.\");\n }\n redirectUri =\n typeof address === \"string\"\n ? `http://${address}`\n : `http://${address.family === \"IPv6\" ? `[${address.address}]` : address.address}:${address.port}`;\n\n // Wait for a callback request\n waitForCallback = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(\n () => {\n try {\n server.close();\n } catch {}\n reject(\"Oauth callback timed out.\");\n },\n 5 * 60 * 1000, // 5 minutes\n );\n\n const sockets = new Set<Socket>();\n server.on(\"connection\", (socket: Socket) => {\n sockets.add(socket);\n socket.on(\"close\", () => {\n sockets.delete(socket);\n });\n });\n\n // Set up the actual request handler\n const onRequest = async (req: IncomingMessage, res: ServerResponse) => {\n try {\n const callbackUrl = new URL(req.url ?? \"/\", redirectUri);\n await this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n });\n\n res.statusCode = 200;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"You may now close this window.\");\n } catch (e) {\n res.statusCode = 500;\n res.setHeader(\"Content-Type\", \"text/plain\");\n res.end(\"Error processing OAuth callback.\");\n\n throw e;\n } finally {\n clearTimeout(timeout);\n server.off(\"request\", onRequest);\n\n for (const socket of sockets) {\n socket.destroy();\n }\n\n server.close(() => resolve());\n }\n };\n\n server.on(\"request\", onRequest);\n });\n }\n\n // Construct the authorization URL\n const redirectUriStripped = new URL(redirectUri);\n redirectUriStripped.hash = \"\";\n redirectUriStripped.search = \"\";\n\n const redirectTo = buildAuthorizationUrl(configuration, {\n scope,\n redirect_uri: redirectUriStripped.toString(),\n state,\n });\n\n // Either redirect (browser) or print the URL and wait (node)\n if (typeof window !== \"undefined\") {\n window.location.replace(redirectTo.toString());\n } else {\n console.log(\"Please open the following URL in your browser:\");\n console.log(redirectTo.toString());\n await waitForCallback;\n }\n }\n\n protected completeOauth() {\n if (typeof window === \"undefined\") return;\n\n // Look in local storage to see if we have a pending login\n const data = window.localStorage.getItem(LOCAL_STORAGE_OAUTH2_KEY);\n if (!data) return;\n\n let json: unknown;\n try {\n json = JSON.parse(data);\n } catch {\n console.error(\"Invalid OAuth2 login data in local storage.\");\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const parseResult = OAuth2LoginDataSchema.safeParse(json);\n if (!parseResult.success) {\n console.error(\n \"Invalid OAuth2 login data structure in local storage.\",\n parseResult.error,\n );\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n return;\n }\n\n const {\n loginId,\n redirectUri,\n authorizationEndpoint,\n state,\n serviceEndpoints,\n } = parseResult.data;\n\n try {\n // Make sure that we redirected back to the correct page\n const expectedUrl = new URL(redirectUri);\n const callbackUrl = new URL(window.location.href);\n if (expectedUrl.pathname !== callbackUrl.pathname) return;\n // Make sure it is actually an oauth call\n const params = callbackUrl.searchParams;\n if (!params.has(\"code\") && !params.has(\"error\")) return;\n\n // Restore the hash and query parameters to the expected URL,\n // removing the code, state, and error parameters\n window.history.replaceState({}, document.title, expectedUrl.toString());\n window.localStorage.removeItem(LOCAL_STORAGE_OAUTH2_KEY);\n\n return new Promise<void>((resolve) => setTimeout(resolve, 0))\n .then(() => this.getAuthorizationConfiguration(authorizationEndpoint))\n .then((configuration) =>\n this.onCallbackUrl({\n loginId,\n callbackUrl,\n configuration,\n expectedState: state,\n serviceEndpoints,\n }),\n )\n .catch((e) => {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LoginEvent[\"detail\"] = { loginId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"login\", { detail }));\n });\n } catch (e) {\n console.error(e);\n }\n }\n\n protected async onCallbackUrl(args: {\n loginId: string;\n callbackUrl: URL;\n configuration: any;\n expectedState: string;\n serviceEndpoints: string[];\n }) {\n const {\n loginId,\n callbackUrl,\n configuration,\n expectedState,\n serviceEndpoints,\n } = args;\n\n const response = await authorizationCodeGrant(configuration, callbackUrl, {\n expectedState,\n });\n\n const token = response.access_token;\n const scope = response.scope;\n const grantedEndpoints =\n scope?.split(\" \").map(decodeURIComponent) || serviceEndpoints;\n\n // Make sure granted endpoints cover the requested endpoints\n if (\n !serviceEndpoints.every((endpoint) => grantedEndpoints.includes(endpoint))\n ) {\n throw new Error(\"Not all requested service endpoints were granted.\");\n }\n\n // Send a logged in event\n const loginEvent: LoginEvent = new CustomEvent(\"login\", {\n detail: {\n loginId,\n token,\n },\n });\n this.eventTarget.dispatchEvent(loginEvent);\n }\n\n async logout(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n try {\n await this.logout_(authorizationEndpoint, logoutId, token);\n } catch (e) {\n const error = e instanceof Error ? e : new Error(\"Unknown error\");\n const detail: LogoutEvent[\"detail\"] = { logoutId, error };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n }\n protected async logout_(\n authorizationEndpoint: string,\n logoutId: string,\n token: string,\n ): Promise<void> {\n const configuration = await this.getAuthorizationConfiguration(\n authorizationEndpoint,\n );\n await tokenRevocation(configuration, token);\n const detail: LogoutEvent[\"detail\"] = { logoutId };\n this.eventTarget.dispatchEvent(new CustomEvent(\"logout\", { detail }));\n }\n\n protected async getAuthorizationConfiguration(\n authorizationEndpoint: string,\n ): Promise<any> {\n // Parse the authorization endpoint\n if (\n !authorizationEndpoint.startsWith(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2,\n )\n ) {\n throw new Error(\n `Unrecognized authorization endpoint method: ${authorizationEndpoint}`,\n );\n }\n const issuer = authorizationEndpoint.slice(\n AUTHORIZATION_ENDPOINT_METHOD_PREFIX_OAUTH2.length,\n );\n\n // Look up the oauth configuration\n let issuerUrl: URL;\n try {\n issuerUrl = new URL(issuer);\n } catch (e) {\n throw new Error(\"Invalid issuer URL.\");\n }\n\n return await discovery(issuerUrl, \"graffiti-client\");\n }\n}\n\nexport const LoginEventDetailSchema = intersection(\n object({\n loginId: string(),\n }),\n union([\n object({ token: string(), error: optional(undefined_()) }),\n object({ error: instanceof_(Error) }),\n ]),\n);\n\nexport const LogoutEventDetailSchema = object({\n logoutId: string(),\n error: optional(instanceof_(Error)),\n});\n\nexport const InitializedEventDetailSchema = optional(\n nullable(\n object({\n error: optional(instanceof_(Error)),\n }),\n ),\n);\n\nexport type LoginEvent = CustomEvent<infer_<typeof LoginEventDetailSchema>>;\nexport type LogoutEvent = CustomEvent<infer_<typeof LogoutEventDetailSchema>>;\nexport type InitializedEvent = CustomEvent<\n infer_<typeof InitializedEventDetailSchema>\n>;\n\nconst OAuth2LoginDataSchema = object({\n loginId: string(),\n redirectUri: url(),\n authorizationEndpoint: url(),\n state: string(),\n serviceEndpoints: array(url()),\n});\n"],
|
|
5
|
+
"mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,aAAa;AAAA,EACb;AAAA,EACA;AAAA,OACK;AAIP,MAAM,8CAA8C;AACpD,MAAM,2BAA2B;AAE1B,MAAM,cAAc;AAAA,EACzB,cAA2B,IAAI,YAAY;AAAA,EAE3C,cAAc;AAIZ,UAAM,eAAe,KAAK,cAAc;AAExC,KAAC,YAAY;AAEX,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC;AAGrD,YAAM;AAGN,YAAM,mBAAqC,IAAI,YAAY,aAAa;AACxE,WAAK,YAAY,cAAc,gBAAgB;AAAA,IACjD,GAAG;AAAA,EACL;AAAA,EAEA,MAAM,SAAS,MAAqD;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,GAAG,IAAI;AAAA,IAC3B,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAA+B,EAAE,SAAS,KAAK,CAAC,GAAG,MAAM;AAC/D,WAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AAAA,EACA,MAAgB,OACd,uBACA,SACA,kBACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,QAAQ,iBAAiB,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAC/D,UAAM,QAAQ,YAAY;AAE1B,QAAI;AACJ,QAAI,kBAA6C;AACjD,QAAI,OAAO,WAAW,aAAa;AAIjC,oBAAc,OAAO,SAAS;AAC9B,YAAM,OAA6C;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,aAAa;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,IAAI;AAAA,MACrB;AAAA,IACF,OAAO;AAEL,YAAM,OAAO,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,MAAM;AAClD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF,CAAC;AACD,YAAM,SAAS,KAAK,aAAa;AAEjC,UAAI;AACF,cAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,iBAAO,KAAK,SAAS,MAAM;AAC3B,iBAAO,OAAO,GAAG,OAAO,OAAO;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,GAAG;AACV,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,YAAM,UAAU,OAAO,QAAQ;AAC/B,UAAI,CAAC,SAAS;AACZ,YAAI;AACF,iBAAO,MAAM;AAAA,QACf,QAAQ;AAAA,QAAC;AACT,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,oBACE,OAAO,YAAY,WACf,UAAU,OAAO,KACjB,UAAU,QAAQ,WAAW,SAAS,IAAI,QAAQ,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAGpG,wBAAkB,IAAI,QAAc,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU;AAAA,UACd,MAAM;AACJ,gBAAI;AACF,qBAAO,MAAM;AAAA,YACf,QAAQ;AAAA,YAAC;AACT,mBAAO,2BAA2B;AAAA,UACpC;AAAA,UACA,IAAI,KAAK;AAAA;AAAA,QACX;AAEA,cAAM,UAAU,oBAAI,IAAY;AAChC,eAAO,GAAG,cAAc,CAAC,WAAmB;AAC1C,kBAAQ,IAAI,MAAM;AAClB,iBAAO,GAAG,SAAS,MAAM;AACvB,oBAAQ,OAAO,MAAM;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AAGD,cAAM,YAAY,OAAO,KAAsB,QAAwB;AACrE,cAAI;AACF,kBAAM,cAAc,IAAI,IAAI,IAAI,OAAO,KAAK,WAAW;AACvD,kBAAM,KAAK,cAAc;AAAA,cACvB;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe;AAAA,cACf;AAAA,YACF,CAAC;AAED,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,gCAAgC;AAAA,UAC1C,SAAS,GAAG;AACV,gBAAI,aAAa;AACjB,gBAAI,UAAU,gBAAgB,YAAY;AAC1C,gBAAI,IAAI,kCAAkC;AAE1C,kBAAM;AAAA,UACR,UAAE;AACA,yBAAa,OAAO;AACpB,mBAAO,IAAI,WAAW,SAAS;AAE/B,uBAAW,UAAU,SAAS;AAC5B,qBAAO,QAAQ;AAAA,YACjB;AAEA,mBAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,UAC9B;AAAA,QACF;AAEA,eAAO,GAAG,WAAW,SAAS;AAAA,MAChC,CAAC;AAAA,IACH;AAGA,UAAM,sBAAsB,IAAI,IAAI,WAAW;AAC/C,wBAAoB,OAAO;AAC3B,wBAAoB,SAAS;AAE7B,UAAM,aAAa,sBAAsB,eAAe;AAAA,MACtD;AAAA,MACA,cAAc,oBAAoB,SAAS;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,SAAS,QAAQ,WAAW,SAAS,CAAC;AAAA,IAC/C,OAAO;AACL,cAAQ,IAAI,gDAAgD;AAC5D,cAAQ,IAAI,WAAW,SAAS,CAAC;AACjC,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEU,gBAAgB;AACxB,QAAI,OAAO,WAAW,YAAa;AAGnC,UAAM,OAAO,OAAO,aAAa,QAAQ,wBAAwB;AACjE,QAAI,CAAC,KAAM;AAEX,QAAI;AACJ,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,cAAQ,MAAM,6CAA6C;AAC3D,aAAO,aAAa,WAAW,wBAAwB;AACvD;AAAA,IACF;AAEA,UAAM,cAAc,sBAAsB,UAAU,IAAI;AACxD,QAAI,CAAC,YAAY,SAAS;AACxB,cAAQ;AAAA,QACN;AAAA,QACA,YAAY;AAAA,MACd;AACA,aAAO,aAAa,WAAW,wBAAwB;AACvD;AAAA,IACF;AAEA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,YAAY;AAEhB,QAAI;AAEF,YAAM,cAAc,IAAI,IAAI,WAAW;AACvC,YAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,UAAI,YAAY,aAAa,YAAY,SAAU;AAEnD,YAAM,SAAS,YAAY;AAC3B,UAAI,CAAC,OAAO,IAAI,MAAM,KAAK,CAAC,OAAO,IAAI,OAAO,EAAG;AAIjD,aAAO,QAAQ,aAAa,CAAC,GAAG,SAAS,OAAO,YAAY,SAAS,CAAC;AACtE,aAAO,aAAa,WAAW,wBAAwB;AAEvD,aAAO,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,CAAC,CAAC,EACzD,KAAK,MAAM,KAAK,8BAA8B,qBAAqB,CAAC,EACpE;AAAA,QAAK,CAAC,kBACL,KAAK,cAAc;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,UACA,eAAe;AAAA,UACf;AAAA,QACF,CAAC;AAAA,MACH,EACC,MAAM,CAAC,MAAM;AACZ,cAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,cAAM,SAA+B,EAAE,SAAS,MAAM;AACtD,aAAK,YAAY,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,MACrE,CAAC;AAAA,IACL,SAAS,GAAG;AACV,cAAQ,MAAM,CAAC;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAgB,cAAc,MAM3B;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAEJ,UAAM,WAAW,MAAM,uBAAuB,eAAe,aAAa;AAAA,MACxE;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,SAAS;AACvB,UAAM,QAAQ,SAAS;AACvB,UAAM,mBACJ,OAAO,MAAM,GAAG,EAAE,IAAI,kBAAkB,KAAK;AAG/C,QACE,CAAC,iBAAiB,MAAM,CAAC,aAAa,iBAAiB,SAAS,QAAQ,CAAC,GACzE;AACA,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAGA,UAAM,aAAyB,IAAI,YAAY,SAAS;AAAA,MACtD,QAAQ;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AACD,SAAK,YAAY,cAAc,UAAU;AAAA,EAC3C;AAAA,EAEA,MAAM,OACJ,uBACA,UACA,OACe;AACf,QAAI;AACF,YAAM,KAAK,QAAQ,uBAAuB,UAAU,KAAK;AAAA,IAC3D,SAAS,GAAG;AACV,YAAM,QAAQ,aAAa,QAAQ,IAAI,IAAI,MAAM,eAAe;AAChE,YAAM,SAAgC,EAAE,UAAU,MAAM;AACxD,WAAK,YAAY,cAAc,IAAI,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;AAAA,IACtE;AAAA,EACF;AAAA,EACA,MAAgB,QACd,uBACA,UACA,OACe;AACf,UAAM,gBAAgB,MAAM,KAAK;AAAA,MAC/B;AAAA,IACF;AACA,UAAM,gBAAgB,eAAe,KAAK;AAC1C,UAAM,SAAgC,EAAE,SAAS;AACjD,SAAK,YAAY,cAAc,IAAI,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;AAAA,EACtE;AAAA,EAEA,MAAgB,8BACd,uBACc;AAEd,QACE,CAAC,sBAAsB;AAAA,MACrB;AAAA,IACF,GACA;AACA,YAAM,IAAI;AAAA,QACR,+CAA+C,qBAAqB;AAAA,MACtE;AAAA,IACF;AACA,UAAM,SAAS,sBAAsB;AAAA,MACnC,4CAA4C;AAAA,IAC9C;AAGA,QAAI;AACJ,QAAI;AACF,kBAAY,IAAI,IAAI,MAAM;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAEA,WAAO,MAAM,UAAU,WAAW,iBAAiB;AAAA,EACrD;AACF;AAEO,MAAM,yBAAyB;AAAA,EACpC,OAAO;AAAA,IACL,SAAS,OAAO;AAAA,EAClB,CAAC;AAAA,EACD,MAAM;AAAA,IACJ,OAAO,EAAE,OAAO,OAAO,GAAG,OAAO,SAAS,WAAW,CAAC,EAAE,CAAC;AAAA,IACzD,OAAO,EAAE,OAAO,YAAY,KAAK,EAAE,CAAC;AAAA,EACtC,CAAC;AACH;AAEO,MAAM,0BAA0B,OAAO;AAAA,EAC5C,UAAU,OAAO;AAAA,EACjB,OAAO,SAAS,YAAY,KAAK,CAAC;AACpC,CAAC;AAEM,MAAM,+BAA+B;AAAA,EAC1C;AAAA,IACE,OAAO;AAAA,MACL,OAAO,SAAS,YAAY,KAAK,CAAC;AAAA,IACpC,CAAC;AAAA,EACH;AACF;AAQA,MAAM,wBAAwB,OAAO;AAAA,EACnC,SAAS,OAAO;AAAA,EAChB,aAAa,IAAI;AAAA,EACjB,uBAAuB,IAAI;AAAA,EAC3B,OAAO,OAAO;AAAA,EACd,kBAAkB,MAAM,IAAI,CAAC;AAC/B,CAAC;",
|
|
6
6
|
"names": []
|
|
7
7
|
}
|
package/package.json
CHANGED
|
@@ -188,7 +188,7 @@ export class Authorization {
|
|
|
188
188
|
|
|
189
189
|
// Either redirect (browser) or print the URL and wait (node)
|
|
190
190
|
if (typeof window !== "undefined") {
|
|
191
|
-
window.location.
|
|
191
|
+
window.location.replace(redirectTo.toString());
|
|
192
192
|
} else {
|
|
193
193
|
console.log("Please open the following URL in your browser:");
|
|
194
194
|
console.log(redirectTo.toString());
|