@heroku/heroku-fetch 0.1.5 → 0.2.0

package/dist/cli/login/netrc-utils.js

@@ -1,85 +0,0 @@
-/**
- * Netrc file management utilities
- */
-import { Netrc } from 'netrc-parser';
-import { debugCliLogin } from '../../debug-loggers.js';
-// Defer netrc instantiation to avoid eager file operations
-let _netrc;
-export function getNetrc() {
-    if (!_netrc) {
-        _netrc = new Netrc();
-    }
-    return _netrc;
-}
-/**
- * Save authentication token to netrc file
- */
-export async function saveToken(entry, apiHost, httpGitHost) {
-    debugCliLogin('Saving credentials to netrc for hosts: %s, %s', apiHost, httpGitHost);
-    const netrc = getNetrc();
-    await netrc.load();
-    const hosts = [apiHost, httpGitHost];
-    for (const host of hosts) {
-        if (!netrc.machines[host])
-            netrc.machines[host] = {};
-        netrc.machines[host].login = entry.login;
-        netrc.machines[host].password = entry.password;
-        delete netrc.machines[host].method;
-        delete netrc.machines[host].org;
-        debugCliLogin('Set credentials for host: %s (login: %s)', host, entry.login);
-    }
-    if (netrc.machines._tokens) {
-        // eslint-disable-next-line unicorn/no-array-for-each
-        netrc.machines._tokens.forEach((token) => {
-            if (hosts.includes(token.host)) {
-                token.internalWhitespace = '\n  ';
-            }
-        });
-    }
-    await netrc.save();
-    debugCliLogin('Netrc file saved successfully');
-}
-/**
- * Clear authentication tokens from netrc file
- */
-export async function clearTokens(apiHost, httpGitHost) {
-    debugCliLogin('Clearing credentials from netrc for hosts: %s, %s', apiHost, httpGitHost);
-    const netrc = getNetrc();
-    await netrc.load();
-    delete netrc.machines[apiHost];
-    delete netrc.machines[httpGitHost];
-    await netrc.save();
-    debugCliLogin('Credentials cleared from netrc successfully');
-}
-/**
- * Get stored token from netrc file
- */
-export async function getStoredToken(apiHost) {
-    debugCliLogin('Reading stored token from netrc for host: %s', apiHost);
-    const netrc = getNetrc();
-    await netrc.load();
-    const entry = netrc.machines[apiHost];
-    if (entry?.password) {
-        debugCliLogin('Token found in netrc for host: %s', apiHost);
-    }
-    else {
-        debugCliLogin('No token found in netrc for host: %s', apiHost);
-    }
-    return entry?.password;
-}
-/**
- * Get stored login from netrc file
- */
-export async function getStoredLogin(apiHost) {
-    debugCliLogin('Reading stored login from netrc for host: %s', apiHost);
-    const netrc = getNetrc();
-    await netrc.load();
-    const entry = netrc.machines[apiHost];
-    if (entry?.login) {
-        debugCliLogin('Login found in netrc for host: %s (login: %s)', apiHost, entry.login);
-    }
-    else {
-        debugCliLogin('No login found in netrc for host: %s', apiHost);
-    }
-    return entry?.login;
-}

package/dist/cli/login/oauth.d.ts

@@ -1,20 +0,0 @@
-/**
- * OAuth token operations
- */
-import type { HerokuApiClient } from '../../client/index.js';
-import type { NetrcEntry } from './types.js';
-/**
- * Create an OAuth token via the Heroku API
- */
-export declare function createOAuthToken(apiUrl: string, username: string, password: string, opts?: {
-    expiresIn?: number;
-    secondFactor?: string;
-}): Promise<NetrcEntry>;
-/**
- * Get the default OAuth token for the current user
- */
-export declare function getDefaultToken(client: HerokuApiClient): Promise<string | undefined>;
-/**
- * Delete OAuth session and authorizations for the given token
- */
-export declare function deleteOAuthTokens(client: HerokuApiClient, token: string): Promise<void>;

package/dist/cli/login/oauth.js

@@ -1,142 +0,0 @@
-/**
- * OAuth token operations
- */
-import os from 'node:os';
-import { debugCliLogin } from '../../debug-loggers.js';
-import { THIRTY_DAYS } from './types.js';
-const hostname = os.hostname();
-/**
- * Create a basic auth header value
- */
-function basicAuth(username, password) {
-    const auth = Buffer.from([username, password].join(':')).toString('base64');
-    return `Basic ${auth}`;
-}
-/**
- * Create an OAuth token via the Heroku API
- */
-export async function createOAuthToken(apiUrl, username, password, opts = {}) {
-    debugCliLogin('Creating OAuth authorization for user: %s', username);
-    debugCliLogin('Expires in: %d seconds%s', opts.expiresIn || THIRTY_DAYS, opts.secondFactor ? ', with 2FA' : '');
-    const requestHeaders = {
-        Accept: 'application/vnd.heroku+json; version=3',
-        Authorization: basicAuth(username, password),
-        'Content-Type': 'application/json',
-    };
-    if (opts.secondFactor) {
-        requestHeaders['Heroku-Two-Factor-Code'] = opts.secondFactor;
-    }
-    const response = await fetch(`${apiUrl}/oauth/authorizations`, {
-        body: JSON.stringify({
-            description: `Heroku CLI login from ${hostname}`,
-            expires_in: opts.expiresIn || THIRTY_DAYS,
-            scope: ['global'],
-        }),
-        headers: requestHeaders,
-        method: 'POST',
-    });
-    if (!response.ok) {
-        const errorBody = await response.json();
-        debugCliLogin('OAuth authorization creation failed: %d %s (error id: %s)', response.status, response.statusText, errorBody.id);
-        const error = new Error(errorBody.message || response.statusText);
-        error.statusCode = response.status;
-        error.body = errorBody;
-        throw error;
-    }
-    const auth = (await response.json());
-    debugCliLogin('OAuth authorization created successfully (id: %s)', auth.id);
-    return {
-        login: auth.user.email,
-        password: auth.access_token.token,
-    };
-}
-/**
- * Get the default OAuth token for the current user
- */
-export async function getDefaultToken(client) {
-    try {
-        debugCliLogin('Fetching default OAuth authorization');
-        const response = await client.get('/oauth/authorizations/~');
-        const authorization = (await response.json());
-        debugCliLogin('Default authorization found: %s', authorization.id);
-        return authorization.access_token?.token;
-    }
-    catch (error) {
-        if (error instanceof Error) {
-            const errBody = error.body;
-            if (errBody?.id === 'not_found'
-                && errBody?.resource === 'authorization') {
-                debugCliLogin('Default authorization not found');
-                return;
-            }
-            if (errBody?.id === 'unauthorized') {
-                debugCliLogin('Unauthorized to fetch default authorization');
-                return;
-            }
-        }
-        debugCliLogin('Error fetching default authorization: %O', error);
-        throw error;
-    }
-}
-/**
- * Delete OAuth session and authorizations for the given token
- */
-export async function deleteOAuthTokens(client, token) {
-    debugCliLogin('Deleting OAuth tokens and sessions');
-    // Delete the OAuth session (for SSO logins)
-    const sessionDeletion = client
-        .delete('/oauth/sessions/~')
-        .then(() => {
-        debugCliLogin('OAuth session deleted successfully');
-    })
-        .catch(error => {
-        if (error instanceof Error) {
-            const errBody = error.body;
-            if (errBody?.id === 'not_found'
-                && errBody?.resource === 'session') {
-                debugCliLogin('OAuth session not found (expected for non-SSO logins)');
-                return;
-            }
-            if (errBody?.id === 'unauthorized') {
-                debugCliLogin('Unauthorized to delete OAuth session');
-                return;
-            }
-        }
-        debugCliLogin('Error deleting OAuth session: %O', error);
-        throw error;
-    });
-    // Delete OAuth authorizations matching this token
-    const authorizationsDeletion = client
-        .get('/oauth/authorizations')
-        .then(async (response) => {
-        const authorizations = (await response.json());
-        debugCliLogin('Found %d OAuth authorizations', authorizations.length);
-        // Don't delete the default token
-        const defaultToken = await getDefaultToken(client);
-        if (defaultToken === token) {
-            debugCliLogin('Token matches default authorization, skipping deletion');
-            return;
-        }
-        const matchingAuths = authorizations.filter(a => a.access_token && a.access_token.token === token);
-        debugCliLogin('Found %d authorizations matching token', matchingAuths.length);
-        if (matchingAuths.length > 0) {
-            return Promise.all(matchingAuths.map(a => {
-                debugCliLogin('Deleting OAuth authorization: %s', a.id);
-                return client.delete(`/oauth/authorizations/${a.id}`);
-            }));
-        }
-    })
-        .catch(error => {
-        if (error instanceof Error) {
-            const errBody = error.body;
-            if (errBody?.id === 'unauthorized') {
-                debugCliLogin('Unauthorized to list/delete OAuth authorizations');
-                return [];
-            }
-        }
-        debugCliLogin('Error deleting OAuth authorizations: %O', error);
-        throw error;
-    });
-    await Promise.all([sessionDeletion, authorizationsDeletion]);
-    debugCliLogin('OAuth token deletion completed');
-}

package/dist/cli/login/sso-login.d.ts

@@ -1,8 +0,0 @@
-/**
- * SSO (Single Sign-On) login flow
- */
-import type { LoginConfig, NetrcEntry } from './types.js';
-/**
- * Perform SSO login
- */
-export declare function ssoLogin(config: LoginConfig): Promise<NetrcEntry>;

package/dist/cli/login/sso-login.js

@@ -1,41 +0,0 @@
-/**
- * SSO (Single Sign-On) login flow
- */
-import { prompt } from '@heroku/heroku-cli-util/hux';
-import { debugCliLogin } from '../../debug-loggers.js';
-import { headers } from './types.js';
-/**
- * Perform SSO login
- */
-export async function ssoLogin(config) {
-    const open = (await import('open')).default;
-    let url = process.env.SSO_URL;
-    let org = process.env.HEROKU_ORGANIZATION;
-    if (!url) {
-        const orgName = await prompt('Organization name', {
-            default: org,
-            type: 'input',
-        });
-        org = orgName;
-        url = `https://sso.heroku.com/saml/${encodeURIComponent(org)}/init?cli=true`;
-    }
-    debugCliLogin(`opening browser to ${url}`);
-    console.error(`Opening browser to:\n${url}\n`);
-    console.error('\u001B[90mIf the browser fails to open or you\'re authenticating on a remote\nmachine, please manually open the URL above in your browser.\u001B[0m\n');
-    await open(url, { wait: false });
-    const password = await prompt('Access token', {
-        type: 'password',
-    });
-    console.error('Validating token...');
-    const response = await fetch(`${config.apiUrl}/account`, {
-        headers: headers(password),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to validate token: ${response.statusText}`);
-    }
-    const account = (await response.json());
-    return {
-        login: account.email,
-        password,
-    };
-}

package/dist/cli/login/types.d.ts

@@ -1,42 +0,0 @@
-/**
- * Shared types and interfaces for login functionality
- */
-export interface NetrcEntry {
-    login: string;
-    password: string;
-}
-export interface OAuthAuthorization {
-    access_token?: {
-        token: string;
-    };
-    id: string;
-    user?: {
-        email: string;
-    };
-}
-export interface Account {
-    email: string;
-    id: string;
-}
-export interface LoginOptions {
-    /** Browser to use for browser-based login */
-    browser?: string;
-    /** Token expiration time in seconds */
-    expiresIn?: number;
-    /** Login method to use */
-    method?: 'browser' | 'interactive' | 'sso';
-}
-export interface LoginConfig {
-    apiHost: string;
-    apiUrl: string;
-    httpGitHost: string;
-    loginHost: string;
-}
-/** Helper to create HTTP headers with bearer token */
-export declare const headers: (token: string) => {
-    Accept: string;
-    Authorization: string;
-};
-/** Constants */
-export declare const THIRTY_DAYS: number;
-export declare const LOGIN_TIMEOUT: number;

package/dist/cli/login/types.js

@@ -1,11 +0,0 @@
-/**
- * Shared types and interfaces for login functionality
- */
-/** Helper to create HTTP headers with bearer token */
-export const headers = (token) => ({
-    Accept: 'application/vnd.heroku+json; version=3',
-    Authorization: `Bearer ${token}`,
-});
-/** Constants */
-export const THIRTY_DAYS = 60 * 60 * 24 * 30;
-export const LOGIN_TIMEOUT = 1000 * 60 * 10; // 10 minutes