@itwin/core-electron 3.0.0-extension.1 → 3.0.2

package/lib/cjs/backend/LoopbackWebServer.js

@@ -1,101 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
-* Copyright (c) Bentley Systems, Incorporated. All rights reserved.
-* See LICENSE.md in the project root for license terms and full copyright notice.
-*--------------------------------------------------------------------------------------------*/
-// Code based on the blog article @ https://authguidance.com
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LoopbackWebServer = void 0;
-/** @packageDocumentation
- * @module Authentication
- */
-const Http = require("http");
-const ElectronAuthorizationBackend_1 = require("./ElectronAuthorizationBackend");
-/** Utility to manage re-entrancy if there are multiple login attempts */
-class AuthorizationState {
-    addState(state, authEvents) {
-        AuthorizationState._stateEventsMap.push([state, authEvents]);
-    }
-    removeState(state) {
-        AuthorizationState._stateEventsMap = AuthorizationState._stateEventsMap.filter((se) => se[0] !== state);
-    }
-    // Get events for a received login response
-    getEvents(state) {
-        const stateEventsPair = AuthorizationState._stateEventsMap.find((se) => se[0] === state);
-        if (stateEventsPair) {
-            return stateEventsPair[1];
-        }
-        return null;
-    }
-}
-AuthorizationState._stateEventsMap = [];
-/**
- * Web server to listen to authorization requests/responses for the DesktopAuthorizationClient
- * @internal
- */
-class LoopbackWebServer {
-    /** Start a web server to listen to the browser requests */
-    static start(clientConfiguration) {
-        var _a;
-        if (LoopbackWebServer._httpServer)
-            return;
-        LoopbackWebServer._httpServer = Http.createServer(LoopbackWebServer.onBrowserRequest);
-        const urlParts = new URL((_a = clientConfiguration.redirectUri) !== null && _a !== void 0 ? _a : ElectronAuthorizationBackend_1.ElectronAuthorizationBackend.defaultRedirectUri);
-        LoopbackWebServer._httpServer.listen(urlParts.port);
-    }
-    /** Add to the authorization state so that the correct response data is used for each request */
-    static addCorrelationState(state, authEvents) {
-        return LoopbackWebServer._authState.addState(state, authEvents);
-    }
-    /** Stop the web server after the authorization was completed */
-    static stop() {
-        if (!LoopbackWebServer._httpServer)
-            return;
-        LoopbackWebServer._httpServer.close();
-        LoopbackWebServer._httpServer = undefined;
-    }
-    /** Listen/Handle browser events */
-    static onBrowserRequest(httpRequest, httpResponse) {
-        if (!httpRequest.url)
-            return;
-        // Parse the request URL to determine the authorization code, state and errors if any
-        const redirectedUrl = new URL(httpRequest.url, ElectronAuthorizationBackend_1.ElectronAuthorizationBackend.defaultRedirectUri);
-        const searchParams = redirectedUrl.searchParams;
-        const state = searchParams.get("state") || undefined;
-        const code = searchParams.get("code");
-        const error = searchParams.get("error");
-        if (!state) {
-            // ignore irrelevant requests (e.g. favicon.ico)
-            return;
-        }
-        // Look up context for the corresponding outgoing request
-        const authorizationEvents = LoopbackWebServer._authState.getEvents(state);
-        if (!authorizationEvents)
-            return;
-        // Notify listeners of the code response or error
-        let authorizationResponse = null;
-        let authorizationError = null;
-        if (error) {
-            const errorUri = searchParams.get("error_uri") || undefined;
-            const errorDescription = searchParams.get("error_description") || undefined;
-            authorizationError = { error, error_description: errorDescription, error_uri: errorUri, state }; // eslint-disable-line @typescript-eslint/naming-convention
-            httpResponse.write("<h1>Sign in error!</h1>"); // TODO: Needs localization
-            httpResponse.end();
-        }
-        else {
-            authorizationResponse = { code: code, state };
-            httpResponse.writeHead(200, { "Content-Type": "text/html" }); //  eslint-disable-line @typescript-eslint/naming-convention
-            httpResponse.write("<h1>Sign in was successful!</h1>You can close this browser window and return to the application"); // TODO: Needs localization
-            httpResponse.end();
-        }
-        authorizationEvents.onAuthorizationResponse.raiseEvent(authorizationError, authorizationResponse);
-        // Handle the authorization completed event
-        authorizationEvents.onAuthorizationResponseCompleted.addOnce((_authCompletedError) => {
-            // Stop the web server now that the signin attempt has finished
-            LoopbackWebServer.stop();
-        });
-    }
-}
-exports.LoopbackWebServer = LoopbackWebServer;
-LoopbackWebServer._authState = new AuthorizationState();
-//# sourceMappingURL=LoopbackWebServer.js.map

package/lib/cjs/backend/LoopbackWebServer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"LoopbackWebServer.js","sourceRoot":"","sources":["../../../src/backend/LoopbackWebServer.ts"],"names":[],"mappings":";AAAA;;;+FAG+F;AAC/F,4DAA4D;;;AAE5D;;GAEG;AAEH,6BAA6B;AAI7B,iFAA8E;AAI9E,yEAAyE;AACzE,MAAM,kBAAkB;IAGf,QAAQ,CAAC,KAAa,EAAE,UAAuC;QACpE,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEM,WAAW,CAAC,KAAa;QAC9B,kBAAkB,CAAC,eAAe,GAAG,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;IAC1G,CAAC;IAED,2CAA2C;IACpC,SAAS,CAAC,KAAa;QAC5B,MAAM,eAAe,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;QACzF,IAAI,eAAe,EAAE;YACnB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;SAC3B;QACD,OAAO,IAAI,CAAC;IACd,CAAC;;AAjBc,kCAAe,GAAG,EAAuB,CAAC;AAoB3D;;;GAGG;AACH,MAAa,iBAAiB;IAI5B,2DAA2D;IACpD,MAAM,CAAC,KAAK,CAAC,mBAAwD;;QAC1E,IAAI,iBAAiB,CAAC,WAAW;YAC/B,OAAO;QAET,iBAAiB,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAQ,IAAI,GAAG,CAAC,MAAA,mBAAmB,CAAC,WAAW,mCAAI,2DAA4B,CAAC,kBAAkB,CAAC,CAAC;QAClH,iBAAiB,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,gGAAgG;IACzF,MAAM,CAAC,mBAAmB,CAAC,KAAa,EAAE,UAAuC;QACtF,OAAO,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;IAED,gEAAgE;IACxD,MAAM,CAAC,IAAI;QACjB,IAAI,CAAC,iBAAiB,CAAC,WAAW;YAChC,OAAO;QACT,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACtC,iBAAiB,CAAC,WAAW,GAAG,SAAS,CAAC;IAC5C,CAAC;IAED,mCAAmC;IAC3B,MAAM,CAAC,gBAAgB,CAAC,WAAiC,EAAE,YAAiC;QAClG,IAAI,CAAC,WAAW,CAAC,GAAG;YAClB,OAAO;QAET,qFAAqF;QACrF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,2DAA4B,CAAC,kBAAkB,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;QAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACrD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE;YACV,gDAAgD;YAChD,OAAO;SACR;QAED,yDAAyD;QACzD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC,mBAAmB;YACtB,OAAO;QAET,iDAAiD;QACjD,IAAI,qBAAqB,GAAqC,IAAI,CAAC;QACnE,IAAI,kBAAkB,GAAkC,IAAI,CAAC;QAC7D,IAAI,KAAK,EAAE;YACT,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;YAC5D,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;YAC5E,kBAAkB,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,2DAA2D;YAC5J,YAAY,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B;YAC1E,YAAY,CAAC,GAAG,EAAE,CAAC;SACpB;aAAM;YACL,qBAAqB,GAAG,EAAE,IAAI,EAAE,IAAK,EAAE,KAAK,EAAE,CAAC;YAC/C,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,4DAA4D;YAC1H,YAAY,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC,CAAC,2BAA2B;YAClJ,YAAY,CAAC,GAAG,EAAE,CAAC;SACpB;QACD,mBAAmB,CAAC,uBAAuB,CAAC,UAAU,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAElG,2CAA2C;QAC3C,mBAAmB,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,mBAA4C,EAAE,EAAE;YAC5G,+DAA+D;YAC/D,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;;AAvEH,8CAwEC;AAtEgB,4BAAU,GAAuB,IAAI,kBAAkB,EAAE,CAAC","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\n// Code based on the blog article @ https://authguidance.com\r\n\r\n/** @packageDocumentation\r\n * @module Authentication\r\n */\r\n\r\nimport * as Http from \"http\";\r\nimport { NativeAppAuthorizationConfiguration } from \"@itwin/core-common\";\r\nimport { AuthorizationErrorJson, AuthorizationResponseJson } from \"@openid/appauth\";\r\nimport { ElectronAuthorizationEvents } from \"./ElectronAuthorizationEvents\";\r\nimport { ElectronAuthorizationBackend } from \"./ElectronAuthorizationBackend\";\r\n\r\ntype StateEventsPair = [string, ElectronAuthorizationEvents];\r\n\r\n/** Utility to manage re-entrancy if there are multiple login attempts */\r\nclass AuthorizationState {\r\n  private static _stateEventsMap = [] as StateEventsPair[];\r\n\r\n  public addState(state: string, authEvents: ElectronAuthorizationEvents): void {\r\n    AuthorizationState._stateEventsMap.push([state, authEvents]);\r\n  }\r\n\r\n  public removeState(state: string): void {\r\n    AuthorizationState._stateEventsMap = AuthorizationState._stateEventsMap.filter((se) => se[0] !== state);\r\n  }\r\n\r\n  // Get events for a received login response\r\n  public getEvents(state: string): ElectronAuthorizationEvents | null {\r\n    const stateEventsPair = AuthorizationState._stateEventsMap.find((se) => se[0] === state);\r\n    if (stateEventsPair) {\r\n      return stateEventsPair[1];\r\n    }\r\n    return null;\r\n  }\r\n}\r\n\r\n/**\r\n * Web server to listen to authorization requests/responses for the DesktopAuthorizationClient\r\n * @internal\r\n */\r\nexport class LoopbackWebServer {\r\n  private static _httpServer?: Http.Server;\r\n  private static _authState: AuthorizationState = new AuthorizationState();\r\n\r\n  /** Start a web server to listen to the browser requests */\r\n  public static start(clientConfiguration: NativeAppAuthorizationConfiguration) {\r\n    if (LoopbackWebServer._httpServer)\r\n      return;\r\n\r\n    LoopbackWebServer._httpServer = Http.createServer(LoopbackWebServer.onBrowserRequest);\r\n    const urlParts: URL = new URL(clientConfiguration.redirectUri ?? ElectronAuthorizationBackend.defaultRedirectUri);\r\n    LoopbackWebServer._httpServer.listen(urlParts.port);\r\n  }\r\n\r\n  /** Add to the authorization state so that the correct response data is used for each request */\r\n  public static addCorrelationState(state: string, authEvents: ElectronAuthorizationEvents): void {\r\n    return LoopbackWebServer._authState.addState(state, authEvents);\r\n  }\r\n\r\n  /** Stop the web server after the authorization was completed */\r\n  private static stop() {\r\n    if (!LoopbackWebServer._httpServer)\r\n      return;\r\n    LoopbackWebServer._httpServer.close();\r\n    LoopbackWebServer._httpServer = undefined;\r\n  }\r\n\r\n  /** Listen/Handle browser events */\r\n  private static onBrowserRequest(httpRequest: Http.IncomingMessage, httpResponse: Http.ServerResponse): void {\r\n    if (!httpRequest.url)\r\n      return;\r\n\r\n    // Parse the request URL to determine the authorization code, state and errors if any\r\n    const redirectedUrl = new URL(httpRequest.url, ElectronAuthorizationBackend.defaultRedirectUri);\r\n    const searchParams = redirectedUrl.searchParams;\r\n\r\n    const state = searchParams.get(\"state\") || undefined;\r\n    const code = searchParams.get(\"code\");\r\n    const error = searchParams.get(\"error\");\r\n    if (!state) {\r\n      // ignore irrelevant requests (e.g. favicon.ico)\r\n      return;\r\n    }\r\n\r\n    // Look up context for the corresponding outgoing request\r\n    const authorizationEvents = LoopbackWebServer._authState.getEvents(state);\r\n    if (!authorizationEvents)\r\n      return;\r\n\r\n    // Notify listeners of the code response or error\r\n    let authorizationResponse: AuthorizationResponseJson | null = null;\r\n    let authorizationError: AuthorizationErrorJson | null = null;\r\n    if (error) {\r\n      const errorUri = searchParams.get(\"error_uri\") || undefined;\r\n      const errorDescription = searchParams.get(\"error_description\") || undefined;\r\n      authorizationError = { error, error_description: errorDescription, error_uri: errorUri, state }; // eslint-disable-line @typescript-eslint/naming-convention\r\n      httpResponse.write(\"<h1>Sign in error!</h1>\"); // TODO: Needs localization\r\n      httpResponse.end();\r\n    } else {\r\n      authorizationResponse = { code: code!, state };\r\n      httpResponse.writeHead(200, { \"Content-Type\": \"text/html\" }); //  eslint-disable-line @typescript-eslint/naming-convention\r\n      httpResponse.write(\"<h1>Sign in was successful!</h1>You can close this browser window and return to the application\"); // TODO: Needs localization\r\n      httpResponse.end();\r\n    }\r\n    authorizationEvents.onAuthorizationResponse.raiseEvent(authorizationError, authorizationResponse);\r\n\r\n    // Handle the authorization completed event\r\n    authorizationEvents.onAuthorizationResponseCompleted.addOnce((_authCompletedError?: AuthorizationErrorJson) => {\r\n      // Stop the web server now that the signin attempt has finished\r\n      LoopbackWebServer.stop();\r\n    });\r\n  }\r\n}\r\n"]}