@intelicity/gates-sdk 0.1.6 → 0.2.0

package/dist/services/client-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-auth.d.ts","sourceRoot":"","sources":["../../src/services/client-auth.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,WAAW,CAAqD;gBAE5D,MAAM,EAAE,uBAAuB;IAkBrC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAiEvC,UAAU,IAAI,IAAI;CAGnB"}

package/dist/services/client-auth.js

@@ -0,0 +1,75 @@
+import { MissingParameterError, ClientCredentialsError, } from "../errors/error.js";
+export class GatesClientAuth {
+    tokenEndpoint;
+    clientId;
+    clientSecret;
+    scopes;
+    cachedToken = null;
+    constructor(config) {
+        if (!config.domain || config.domain.trim().length === 0) {
+            throw new MissingParameterError("domain");
+        }
+        if (!config.clientId || config.clientId.trim().length === 0) {
+            throw new MissingParameterError("clientId");
+        }
+        if (!config.clientSecret || config.clientSecret.trim().length === 0) {
+            throw new MissingParameterError("clientSecret");
+        }
+        const domain = config.domain.replace(/\/$/, "");
+        this.tokenEndpoint = `https://${domain}/oauth2/token`;
+        this.clientId = config.clientId;
+        this.clientSecret = config.clientSecret;
+        this.scopes = config.scopes ?? [];
+    }
+    async getAccessToken() {
+        if (this.cachedToken && Date.now() < this.cachedToken.expiresAt) {
+            return this.cachedToken.token;
+        }
+        const body = new URLSearchParams({
+            grant_type: "client_credentials",
+        });
+        if (this.scopes.length > 0) {
+            body.set("scope", this.scopes.join(" "));
+        }
+        const credentials = Buffer.from(`${this.clientId}:${this.clientSecret}`).toString("base64");
+        let response;
+        try {
+            response = await fetch(this.tokenEndpoint, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                    Authorization: `Basic ${credentials}`,
+                },
+                body: body.toString(),
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "Unknown network error";
+            throw new ClientCredentialsError(`Failed to reach token endpoint: ${message}`);
+        }
+        if (!response.ok) {
+            let detail;
+            try {
+                const errorBody = (await response.json());
+                detail = errorBody.error ?? response.statusText;
+            }
+            catch {
+                detail = response.statusText;
+            }
+            throw new ClientCredentialsError(`Token request failed (${response.status}): ${detail}`);
+        }
+        const data = (await response.json());
+        if (!data.access_token) {
+            throw new ClientCredentialsError("Token response missing access_token field");
+        }
+        const bufferMs = 30_000;
+        this.cachedToken = {
+            token: data.access_token,
+            expiresAt: Date.now() + data.expires_in * 1000 - bufferMs,
+        };
+        return data.access_token;
+    }
+    clearCache() {
+        this.cachedToken = null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intelicity/gates-sdk",
-  "version": "0.1.6",
+  "version": "0.2.0",
   "description": "Simple SDK for authenticating users with AWS Cognito JWT tokens",
   "type": "module",
   "exports": "./dist/index.js",
@@ -18,6 +18,8 @@
   "scripts": {
     "build": "tsc && tsc-alias",
     "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
     "test:token": "tsx scripts/test-token.ts",
     "prepublishOnly": "npm run build"
   },
@@ -37,7 +39,8 @@
     "@types/node": "^24.1.0",
     "tsc-alias": "^1.8.16",
     "tsx": "^4.20.3",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.2",
+    "vitest": "^4.1.0"
   },
   "dependencies": {
     "jose": "^6.1.1"