@hxa-rn/rnaa 8.1.0

package/harmony/rnaa/src/main/ets/RNAppAuthTurboModulesFactory.ets

@@ -0,0 +1,18 @@
+import { RNOHPackage } from '@rnoh/react-native-openharmony/ets';
+import type { UITurboModule, UITurboModuleContext } from '@rnoh/react-native-openharmony/ts';
+import { RNAppAuthTurboModule } from './RNAppAuthTurboModule';
+import { TM } from './generated/ts';
+
+export class RNAppAuthPackage extends RNOHPackage {
+  getUITurboModuleFactoryByNameMap(): Map<string, (ctx: UITurboModuleContext) => UITurboModule | null> {
+    const map = new Map<string, (ctx: UITurboModuleContext) => UITurboModule | null>();
+    map.set(TM.RNAppAuth.NAME, (ctx: UITurboModuleContext) => new RNAppAuthTurboModule(ctx));
+    return map;
+  }
+
+  override async createEagerUITurboModuleByNameMap(ctx: UITurboModuleContext): Promise<Map<string, UITurboModule>> {
+    const module = new RNAppAuthTurboModule(ctx);
+    return new Map()
+      .set(TM.RNAppAuth.NAME, module)
+  }
+}

package/harmony/rnaa/src/main/ets/Types.ets

@@ -0,0 +1,98 @@
+/**
+ * Internal shared types for the RNAppAuth OAuth protocol stack (HarmonyOS).
+ */
+
+/**
+ * Structured OAuth error surfaced to the JS layer.
+ * Mirrors the AppAuthError contract (code + message) from index.d.ts.
+ *
+ * Extends Error so `throw new OAuthError(...)` satisfies the ArkTS
+ * arkts-limited-throw rule (only Error or subclasses may be thrown).
+ */
+export class OAuthError extends Error {
+  public code: string = '';
+
+  constructor(code: string, message: string) {
+    // RNOH TurboModule only forwards Error.message to JS; embed code so the
+    // JS layer can reconstruct AppAuthError { code, message } (Android uses
+    // promise.reject(code, message) for the same contract).
+    super(`${code}::${message}`);
+    this.code = code;
+  }
+}
+
+/**
+ * A Promise whose resolve/reject can be invoked later by handleRedirect().
+ * Used to bridge the pending authorize/logout flow across the browser
+ * redirect boundary.
+ */
+export class Deferred<T> {
+  public promise: Promise<T>;
+  private resolveFn: (value: T) => void = (_value: T) => {
+  };
+  private rejectFn: (reason?: Object) => void = (_reason?: Object) => {
+  };
+  private settled: boolean = false;
+
+  constructor() {
+    this.promise = new Promise<T>((resolve: (value: T | PromiseLike<T>) => void,
+      reject: (reason?: Object) => void) => {
+      this.resolveFn = resolve as (value: T) => void;
+      this.rejectFn = reject;
+    });
+  }
+
+  resolve(value: T | PromiseLike<T>): void {
+    if (!this.settled) {
+      this.settled = true;
+      this.resolveFn(value as T);
+    }
+  }
+
+  reject(reason?: Object): void {
+    if (!this.settled) {
+      this.settled = true;
+      this.rejectFn(reason);
+    }
+  }
+}
+
+/**
+ * Raw token endpoint response (JSON fields from RFC 6749 / OIDC).
+ */
+export interface TokenResponse {
+  accessToken: string;
+  accessTokenExpirationDate: string;
+  additionalParameters: Record<string, string>;
+  idToken: string;
+  refreshToken: string;
+  tokenType: string;
+  scope: string;
+}
+
+/**
+ * Raw authorization response parsed from the redirect callback URL.
+ */
+export interface AuthorizationResponse {
+  state: string;
+  authorizationCode: string;
+  error: string;
+  errorDescription: string;
+  scope: string;
+  idToken: string;
+  accessToken: string;
+  tokenType: string;
+  accessTokenExpirationTime: number;
+  additionalParameters: Record<string, string>;
+}
+
+/**
+ * Parsed OpenID Connect discovery document fields.
+ */
+export interface DiscoveryDocument {
+  authorizationEndpoint: string;
+  tokenEndpoint: string;
+  registrationEndpoint: string;
+  revocationEndpoint: string;
+  endSessionEndpoint: string;
+}

package/harmony/rnaa/src/main/ets/generated/index.ets

@@ -0,0 +1,5 @@
+/**
+ * This code was generated by "react-native codegen-lib-harmony"
+ */
+
+export * from "./ts"

package/harmony/rnaa/src/main/ets/generated/ts.ts

@@ -0,0 +1,5 @@
+/**
+ * This code was generated by "react-native codegen-lib-harmony"
+ */
+
+export * as TM from "./turboModules/ts"

package/harmony/rnaa/src/main/ets/generated/turboModules/RNAppAuth.ts

@@ -0,0 +1,38 @@
+/**
+ * This code was generated by "react-native codegen-lib-harmony"
+ */
+
+import { Tag } from "@rnoh/react-native-openharmony/ts"
+
+export namespace RNAppAuth {
+  export const NAME = 'RNAppAuth' as const
+
+  export type AuthorizeResult = {accessToken: string, accessTokenExpirationDate: string, authorizeAdditionalParameters?: Object, tokenAdditionalParameters?: Object, idToken: string, refreshToken: string, tokenType: string, scopes: string[], authorizationCode: string, codeVerifier?: string}
+  
+  export type CustomHeaders = {token?: Object, authorize?: Object, register?: Object}
+  
+  export type EndSessionResult = {idTokenHint: string, postLogoutRedirectUri: string, state: string}
+  
+  export type RefreshResult = {accessToken: string, accessTokenExpirationDate: string, additionalParameters?: Object, idToken: string, refreshToken: null | string, tokenType: string}
+  
+  export type RegistrationResponse = {clientId: string, additionalParameters?: Object, clientIdIssuedAt?: string, clientSecret?: string, clientSecretExpiresAt?: string, registrationAccessToken?: string, registrationClientUri?: string, tokenEndpointAuthMethod?: string}
+  
+  export type ServiceConfiguration = {authorizationEndpoint?: string, tokenEndpoint?: string, revocationEndpoint?: string, registrationEndpoint?: string, endSessionEndpoint?: string}
+  
+  export interface Spec {
+    prefetchConfiguration(warmAndPrefetchChrome: boolean, issuer: string, redirectUrl: string, clientId: string, scopes: string[], serviceConfiguration: ServiceConfiguration, dangerouslyAllowInsecureHttpRequests: boolean, customHeaders: CustomHeaders, connectionTimeoutMillis: number): Promise<void>;
+  
+    register(issuer: string, redirectUrls: string[], responseTypes: string[], grantTypes: string[], subjectType: string, tokenEndpointAuthMethod: string, additionalParameters: Object, serviceConfiguration: ServiceConfiguration, connectionTimeoutMillis: number, dangerouslyAllowInsecureHttpRequests: boolean, customHeaders: CustomHeaders): Promise<RegistrationResponse>;
+  
+    authorize(issuer: string, redirectUrl: string, clientId: string, clientSecret: string, scopes: string[], additionalParameters: Object, serviceConfiguration: ServiceConfiguration, skipCodeExchange: boolean, connectionTimeoutMillis: number, useNonce: boolean, usePKCE: boolean, clientAuthMethod: string, dangerouslyAllowInsecureHttpRequests: boolean, customHeaders: CustomHeaders): Promise<AuthorizeResult>;
+  
+    refresh(issuer: string, redirectUrl: string, clientId: string, clientSecret: string, refreshToken: string, scopes: string[], additionalParameters: Object, serviceConfiguration: ServiceConfiguration, connectionTimeoutMillis: number, clientAuthMethod: string, dangerouslyAllowInsecureHttpRequests: boolean, customHeaders: CustomHeaders): Promise<RefreshResult>;
+  
+    logout(issuer: string, idTokenHint: string, postLogoutRedirectUri: string, serviceConfiguration: ServiceConfiguration, additionalParameters: Object, dangerouslyAllowInsecureHttpRequests: boolean): Promise<EndSessionResult>;
+  
+    handleRedirect(url: string): Promise<boolean>;
+  
+    cancelPendingFlow(): Promise<boolean>;
+  
+  }
+}

package/harmony/rnaa/src/main/ets/generated/turboModules/ts.ts

@@ -0,0 +1,5 @@
+/**
+ * This code was generated by "react-native codegen-lib-harmony"
+ */
+
+export * from "./RNAppAuth"

package/harmony/rnaa/src/main/module.json5

@@ -0,0 +1,16 @@
+{
+  "module": {
+    "name": "rnaa",
+    "type": "har",
+    "deviceTypes": [
+      "default",
+      "tablet",
+      "2in1"
+    ],
+    "requestPermissions": [
+      {
+        "name": "ohos.permission.INTERNET"
+      }
+    ]
+  }
+}

package/harmony/rnaa/src/main/resources/base/element/string.json

@@ -0,0 +1,8 @@
+{
+  "string": [
+    {
+      "name": "page_show",
+      "value": "page from npm package"
+    }
+  ]
+}

package/harmony/rnaa/src/main/resources/en_US/element/string.json

@@ -0,0 +1,8 @@
+{
+  "string": [
+    {
+      "name": "page_show",
+      "value": "page from npm package"
+    }
+  ]
+}

package/harmony/rnaa/src/main/resources/zh_CN/element/string.json

@@ -0,0 +1,8 @@
+{
+  "string": [
+    {
+      "name": "page_show",
+      "value": "page from npm package"
+    }
+  ]
+}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@hxa-rn/rnaa",
+  "displayName": "react-native-app-auth",
+  "version": "8.1.0",
+  "description": "React Native bridge for AppAuth for supporting any OAuth 2 provider",
+  "main": "./src/index.js",
+  "module": "./src/index.js",
+  "react-native": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "license": "MIT",
+  "private": false,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/FormidableLabs/react-native-app-auth.git"
+  },
+  "keywords": [
+    "react-native",
+    "harmony",
+    "harmonyos",
+    "auth",
+    "oauth",
+    "oauth2",
+    "appauth"
+  ],
+  "homepage": "https://github.com/FormidableLabs/react-native-app-auth",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "files": [
+    "dist/",
+    "src/",
+    "harmony/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "codegen-lib": "react-native codegen-lib-harmony --no-safety-check --npm-package-name rnaa --cpp-output-path ./harmony/rnaa/src/main/cpp/generated --ets-output-path ./harmony/rnaa/src/main/ets/generated --turbo-modules-spec-paths ./src/specs/v1/NativeRNAppAuth.ts"
+  },
+  "peerDependencies": {
+    "react-native": ">=0.72"
+  },
+  "dependencies": {
+    "invariant": "2.2.4",
+    "react-native-base64": "0.0.2"
+  },
+  "devDependencies": {
+    "typescript": "5.0.4",
+    "@react-native/typescript-config": "0.79.5",
+    "react": "18.2.0",
+    "@types/react": "18.2.79",
+    "react-native": "0.72.5",
+    "jest": "^29.6.3",
+    "react-native-builder-bob": "^0.18.0",
+    "@react-native-oh/react-native-harmony-cli": "^0.77.50",
+    "metro": "^0.81.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "harmony": {
+    "alias": "react-native-app-auth",
+    "autolinking": {
+      "cmakeLibraryTargetName": "rnaa",
+      "ohPackageName": "@hxa-rn/rnaa",
+      "etsPackageClassName": "RNAppAuthPackage",
+      "cppPackageClassName": "RNAppAuthPackage"
+    }
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,202 @@
+export interface ServiceConfiguration {
+  authorizationEndpoint: string;
+  tokenEndpoint: string;
+  revocationEndpoint?: string;
+  registrationEndpoint?: string;
+  endSessionEndpoint?: string;
+}
+
+export type BaseConfiguration =
+  | {
+      issuer?: string;
+      serviceConfiguration: ServiceConfiguration;
+    }
+  | {
+      issuer: string;
+      serviceConfiguration?: ServiceConfiguration;
+    };
+
+type CustomHeaders = {
+  authorize?: Record<string, string>;
+  token?: Record<string, string>;
+  register?: Record<string, string>;
+};
+
+type AdditionalHeaders = Record<string, string>;
+
+interface BuiltInRegistrationParameters {
+  client_name?: string;
+  logo_uri?: string;
+  client_uri?: string;
+  policy_uri?: string;
+  tos_uri?: string;
+}
+
+export type RegistrationConfiguration = BaseConfiguration & {
+  redirectUrls: string[];
+  responseTypes?: string[];
+  grantTypes?: string[];
+  subjectType?: string;
+  tokenEndpointAuthMethod?: string;
+  additionalParameters?: BuiltInRegistrationParameters & { [name: string]: string };
+  dangerouslyAllowInsecureHttpRequests?: boolean;
+  customHeaders?: CustomHeaders;
+  additionalHeaders?: AdditionalHeaders;
+};
+
+export interface RegistrationResponse {
+  clientId: string;
+  additionalParameters?: { [name: string]: string };
+  clientIdIssuedAt?: string;
+  clientSecret?: string;
+  clientSecretExpiresAt?: string;
+  registrationAccessToken?: string;
+  registrationClientUri?: string;
+  tokenEndpointAuthMethod?: string;
+}
+
+interface BuiltInParameters {
+  display?: 'page' | 'popup' | 'touch' | 'wap';
+  login_prompt?: string;
+  prompt?: 'consent' | 'login' | 'none' | 'select_account';
+}
+
+export type BaseAuthConfiguration = BaseConfiguration & {
+  clientId: string;
+};
+
+export type AuthConfiguration = BaseAuthConfiguration & {
+  clientSecret?: string;
+  scopes: string[];
+  redirectUrl: string;
+  additionalParameters?: BuiltInParameters & { [name: string]: string };
+  clientAuthMethod?: 'basic' | 'post';
+  dangerouslyAllowInsecureHttpRequests?: boolean;
+  customHeaders?: CustomHeaders;
+  additionalHeaders?: AdditionalHeaders;
+  connectionTimeoutSeconds?: number;
+  useNonce?: boolean;
+  usePKCE?: boolean;
+  warmAndPrefetchChrome?: boolean;
+  skipCodeExchange?: boolean;
+  iosCustomBrowser?: 'safari' | 'chrome' | 'opera' | 'firefox';
+  androidAllowCustomBrowsers?: (
+    | 'chrome'
+    | 'chromeCustomTab'
+    | 'firefox'
+    | 'firefoxCustomTab'
+    | 'samsung'
+    | 'samsungCustomTab'
+  )[];
+  androidTrustedWebActivity?: boolean;
+  iosPrefersEphemeralSession?: boolean;
+};
+
+export type EndSessionConfiguration = BaseAuthConfiguration & {
+  additionalParameters?: { [name: string]: string };
+  dangerouslyAllowInsecureHttpRequests?: boolean;
+  iosPrefersEphemeralSession?: boolean;
+};
+
+export interface AuthorizeResult {
+  accessToken: string;
+  accessTokenExpirationDate: string;
+  authorizeAdditionalParameters?: { [name: string]: string };
+  tokenAdditionalParameters?: { [name: string]: string };
+  idToken: string;
+  refreshToken: string;
+  tokenType: string;
+  scopes: string[];
+  authorizationCode: string;
+  codeVerifier?: string;
+}
+
+export interface RefreshResult {
+  accessToken: string;
+  accessTokenExpirationDate: string;
+  additionalParameters?: { [name: string]: string };
+  idToken: string;
+  refreshToken: string | null;
+  tokenType: string;
+}
+
+export interface RevokeConfiguration {
+  tokenToRevoke: string;
+  sendClientId?: boolean;
+  includeBasicAuth?: boolean;
+}
+
+export interface RefreshConfiguration {
+  refreshToken: string;
+}
+
+export interface LogoutConfiguration {
+  idToken: string;
+  postLogoutRedirectUrl: string;
+}
+
+export interface EndSessionResult {
+  idTokenHint: string;
+  postLogoutRedirectUri: string;
+  state: string;
+}
+
+export function prefetchConfiguration(config: AuthConfiguration): Promise<void>;
+
+export function register(config: RegistrationConfiguration): Promise<RegistrationResponse>;
+
+export function authorize(config: AuthConfiguration): Promise<AuthorizeResult>;
+
+export function refresh(
+  config: AuthConfiguration,
+  refreshConfig: RefreshConfiguration
+): Promise<RefreshResult>;
+
+export function revoke(
+  config: BaseAuthConfiguration,
+  revokeConfig: RevokeConfiguration
+): Promise<void>;
+
+export function logout(
+  config: EndSessionConfiguration,
+  logoutConfig: LogoutConfiguration
+): Promise<EndSessionResult>;
+
+// https://tools.ietf.org/html/rfc6749#section-4.1.2.1
+type OAuthAuthorizationErrorCode =
+  | 'unauthorized_client'
+  | 'access_denied'
+  | 'unsupported_response_type'
+  | 'invalid_scope'
+  | 'server_error'
+  | 'temporarily_unavailable';
+// https://tools.ietf.org/html/rfc6749#section-5.2
+type OAuthTokenErrorCode =
+  | 'invalid_request'
+  | 'invalid_client'
+  | 'invalid_grant'
+  | 'unauthorized_client'
+  | 'unsupported_grant_type'
+  | 'invalid_scope';
+// https://openid.net/specs/openid-connect-registration-1_0.html#RegistrationError
+type OICRegistrationErrorCode = 'invalid_redirect_uri' | 'invalid_client_metadata';
+type AppAuthErrorCode =
+  | 'service_configuration_fetch_error'
+  | 'authentication_failed'
+  | 'token_refresh_failed'
+  | 'token_exchange_failed'
+  | 'registration_failed'
+  | 'end_session_failed'
+  | 'authentication_error'
+  | 'run_time_exception'
+  | 'configuration_error';
+
+type ErrorCode =
+  | OAuthAuthorizationErrorCode
+  | OAuthTokenErrorCode
+  | OICRegistrationErrorCode
+  | AppAuthErrorCode;
+
+export interface AppAuthError extends Error {
+  code: ErrorCode;
+}