@inrupt/solid-client-authn-browser 1.13.3 → 1.13.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inrupt/solid-client-authn-browser",
-  "version": "1.13.3",
+  "version": "1.13.4",
   "license": "MIT",
   "types": "dist/index",
   "browser": "dist/index.js",
@@ -25,8 +25,8 @@
     "cross-fetch": "^3.1.5"
   },
   "dependencies": {
-    "@inrupt/oidc-client-ext": "^1.13.3",
-    "@inrupt/solid-client-authn-core": "^1.13.3",
+    "@inrupt/oidc-client-ext": "^1.13.4",
+    "@inrupt/solid-client-authn-core": "^1.13.4",
     "@types/lodash.clonedeep": "^4.5.6",
     "@types/node": "^18.0.3",
     "@types/uuid": "^9.0.1",
@@ -41,5 +41,5 @@
   "engines": {
     "node": "^14.0.0 || ^16.0.0"
   },
-  "gitHead": "46965b5ae611c9de77af67828ff814421e2ac7f3"
+  "gitHead": "ab437bbfb613f4f64b82b17e3a38177998a1762a"
 }

package/src/Session.spec.ts

@@ -32,6 +32,7 @@ import { Session } from "./Session";
 import { LocalStorageMock } from "./storage/__mocks__/LocalStorage";
 import { mockSessionInfoManager } from "./sessionInfo/__mocks__/SessionInfoManager";
 import { KEY_CURRENT_SESSION, KEY_CURRENT_URL } from "./constant";
+import type ClientAuthentication from "./ClientAuthentication";
 
 /* eslint-disable @typescript-eslint/ban-ts-comment */
 
@@ -264,21 +265,21 @@ describe("Session", () => {
 
     it("updates the session's info if relevant", async () => {
       const clientAuthentication = mockClientAuthentication();
-      clientAuthentication.handleIncomingRedirect = jest.fn(
-        async (_url: string) => {
-          return {
-            isLoggedIn: true,
-            sessionId: "a session ID",
-            webId: "https://some.webid#them",
-          };
-        }
-      );
+      clientAuthentication.handleIncomingRedirect = jest
+        .fn<ClientAuthentication["handleIncomingRedirect"]>()
+        .mockResolvedValueOnce({
+          isLoggedIn: true,
+          sessionId: "a session ID",
+          webId: "https://some.webid#them",
+          expirationDate: Date.now() + 3600,
+        });
       const mySession = new Session({ clientAuthentication });
       expect(mySession.info.isLoggedIn).toBe(false);
       await mySession.handleIncomingRedirect("https://some.url");
       expect(mySession.info.isLoggedIn).toBe(true);
       expect(mySession.info.sessionId).toBe("a session ID");
       expect(mySession.info.webId).toBe("https://some.webid#them");
+      expect(mySession.info.expirationDate).toBeGreaterThan(Date.now());
     });
 
     it("updates the localStorage if the login is completed", async () => {

package/src/login/oidc/incomingRedirectHandler/AuthCodeRedirectHandler.spec.ts

@@ -35,7 +35,7 @@ import type * as SolidClientAuthnCore from "@inrupt/solid-client-authn-core";
 import { jest, it, describe, expect } from "@jest/globals";
 import { CodeExchangeResult, getBearerToken } from "@inrupt/oidc-client-ext";
 import type * as OidcClientExt from "@inrupt/oidc-client-ext";
-import { Response } from "cross-fetch";
+import { Response, Headers } from "cross-fetch";
 import { JWK, importJWK } from "jose";
 import { KeyObject } from "crypto";
 import { AuthCodeRedirectHandler } from "./AuthCodeRedirectHandler";
@@ -470,11 +470,6 @@ describe("AuthCodeRedirectHandler", () => {
         storageUtility: mockedStorage,
       });
       await authCodeRedirectHandler.handle(mockRedirectUrl());
-      await expect(
-        mockedStorage.getForUser("mySession", "redirectUrl", {
-          secure: false,
-        })
-      ).resolves.toBe("https://some.redirect.uri/?state=oauth2StateValue");
 
       // The ID token should not have been stored
       await expect(
@@ -484,7 +479,7 @@ describe("AuthCodeRedirectHandler", () => {
       ).resolves.toBeUndefined();
     });
 
-    it("preserves any query strings from the redirect URI", async () => {
+    it("does not override the previously stored redirect URL", async () => {
       mockOidcClient();
 
       window.fetch = (jest.fn() as any).mockReturnValue(
@@ -509,9 +504,8 @@ describe("AuthCodeRedirectHandler", () => {
         mockedStorage.getForUser("mySession", "redirectUrl", {
           secure: false,
         })
-      ).resolves.toBe(
-        "https://some.redirect.uri/?state=oauth2StateValue&someKey=someValue"
-      );
+        // The redirect URL already in storage shouldn't be overriden on redirect.
+      ).resolves.toBe(DEFAULT_REDIRECT_URL);
     });
 
     it("returns the expiration time normalised to the current time", async () => {

package/src/login/oidc/incomingRedirectHandler/AuthCodeRedirectHandler.ts

@@ -175,19 +175,6 @@ export class AuthCodeRedirectHandler implements IIncomingRedirectHandler {
       },
       { secure: true }
     );
-    // Clear the code query param from the redirect URL before storing it, but
-    // preserve any state that my have been provided by the client and returned
-    // by the IdP.
-    url.searchParams.delete("code");
-    await this.storageUtility.setForUser(
-      storedSessionId,
-      {
-        redirectUrl: url.toString(),
-      },
-      {
-        secure: false,
-      }
-    );
 
     const sessionInfo = await this.sessionInfoManager.get(storedSessionId);
     if (!sessionInfo) {