@kineticdata/react 6.1.1 → 7.0.0-rc1

package/lib/apis/core/authentication.js

@@ -5,10 +5,10 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.singleSignOn = exports.retrieveJwt = exports.logoutDirect = exports.login = void 0;
-var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/toConsumableArray"));
+var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/objectSpread2"));
 var _regeneratorRuntime2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/regeneratorRuntime"));
 var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/asyncToGenerator"));
-var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/objectSpread2"));
+var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/toConsumableArray"));
 var _axios = _interopRequireDefault(require("axios"));
 var _helpers = require("../../helpers");
 var _profile = require("./profile");
@@ -24,48 +24,222 @@ var login = exports.login = function login(_ref) {
   })["catch"](_http.handleErrors);
 };
 var logoutDirect = exports.logoutDirect = function logoutDirect(isSaml) {
-  return _axios["default"].get(isSaml === true ? "".concat(_helpers.bundle.spaceLocation(), "/app/saml/logout") : "".concat(_helpers.bundle.spaceLocation(), "/app/logout"));
+  return _axios["default"].get(isSaml === true ? "".concat(_helpers.bundle.spaceLocation(), "/app/saml2/logout") : "".concat(_helpers.bundle.spaceLocation(), "/app/logout"));
 };
 var checkedOrigin = process.env.REACT_APP_API_HOST ? process.env.REACT_APP_API_HOST : typeof window !== 'undefined' ? window.location.origin : null;
 var clientId = process.env.REACT_APP_OAUTH_CLIENT_ID ? process.env.REACT_APP_OAUTH_CLIENT_ID : process.env.NODE_ENV === 'production' ? 'system' : 'system-dev';
-var retrieveJwt = exports.retrieveJwt = function retrieveJwt() {
-  return new Promise(function (resolve) {
-    var postParentMessage = window.postMessage;
-    var iframe = document.createElement('iframe');
-    iframe.src = _helpers.bundle.spaceLocation() + '/app/oauth/authorize?grant_type=implicit&response_type=token&client_id=' + clientId;
-    iframe.title = 'oauth jwt iframe';
-    iframe.style.cssText = 'display: none';
-    // If iframe is redirected to the login page, then JWT fetch failed
-    iframe.onload = function () {
-      if (iframe.contentWindow.location.pathname.endsWith('/app/login')) {
-        postParentMessage({
-          type: 'nosession'
-        }, '*');
-      }
-    };
-    var listener = function listener(e) {
-      if (e.origin === checkedOrigin && (e.data.token || e.data.type === 'nosession')) {
-        // If a token is returned, or a 'nosession' message is received, close
-        // the iframe and return the token (or lack thereof)
-        window.removeEventListener('message', listener);
-        document.body.removeChild(iframe);
-        resolve(e.data.token);
+var base64UrlEncode = function base64UrlEncode(bytes) {
+  return btoa(String.fromCharCode.apply(String, (0, _toConsumableArray2["default"])(bytes))).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+};
+var generateCodeVerifier = function generateCodeVerifier() {
+  var array = new Uint8Array(32);
+  crypto.getRandomValues(array);
+  return base64UrlEncode(array);
+};
+var generateCodeChallenge = /*#__PURE__*/function () {
+  var _ref2 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee(codeVerifier) {
+    var data, digest;
+    return (0, _regeneratorRuntime2["default"])().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          data = new TextEncoder().encode(codeVerifier);
+          _context.next = 3;
+          return crypto.subtle.digest('SHA-256', data);
+        case 3:
+          digest = _context.sent;
+          return _context.abrupt("return", base64UrlEncode(new Uint8Array(digest)));
+        case 5:
+        case "end":
+          return _context.stop();
       }
-      if (e.origin === checkedOrigin && e.data.type === 'ping') {
-        e.source.postMessage({
-          type: 'pong'
-        }, e.origin);
+    }, _callee);
+  }));
+  return function generateCodeChallenge(_x) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+var exchangeCodeForToken = /*#__PURE__*/function () {
+  var _ref3 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee2(code, codeVerifier, redirectUri) {
+    var response;
+    return (0, _regeneratorRuntime2["default"])().wrap(function _callee2$(_context2) {
+      while (1) switch (_context2.prev = _context2.next) {
+        case 0:
+          _context2.prev = 0;
+          _context2.next = 3;
+          return _axios["default"].post("".concat(_helpers.bundle.spaceLocation(), "/app/oauth2/token"), new URLSearchParams({
+            grant_type: 'authorization_code',
+            code: code,
+            redirect_uri: redirectUri,
+            client_id: clientId,
+            code_verifier: codeVerifier
+          }), {
+            headers: {
+              'Content-Type': 'application/x-www-form-urlencoded'
+            },
+            __bypassAuthInterceptor: true,
+            __bypassInitInterceptor: true
+          });
+        case 3:
+          response = _context2.sent;
+          return _context2.abrupt("return", response.data.access_token);
+        case 7:
+          _context2.prev = 7;
+          _context2.t0 = _context2["catch"](0);
+          console.error('there was a problem getting the token:', _context2.t0);
+          return _context2.abrupt("return", undefined);
+        case 11:
+        case "end":
+          return _context2.stop();
       }
-    };
-    window.addEventListener('message', listener);
+    }, _callee2, null, [[0, 7]]);
+  }));
+  return function exchangeCodeForToken(_x2, _x3, _x4) {
+    return _ref3.apply(this, arguments);
+  };
+}();
+var AUTHORIZE_TIMEOUT_MS = 15000;
+var attemptAuthorize = function attemptAuthorize(redirectUri, codeVerifier, codeChallenge) {
+  return new Promise(function (resolve, reject) {
+    var params = new URLSearchParams({
+      response_type: 'code',
+      client_id: clientId,
+      redirect_uri: redirectUri,
+      code_challenge: codeChallenge,
+      code_challenge_method: 'S256'
+    });
+    var iframe = document.createElement('iframe');
+    iframe.title = 'oauth jwt iframe';
+    iframe.style.display = 'none';
+    iframe.src = "".concat(_helpers.bundle.spaceLocation(), "/app/oauth2/authorize?").concat(params);
+    iframe.onload = /*#__PURE__*/(0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee3() {
+      var iframeUrl, error, code, token;
+      return (0, _regeneratorRuntime2["default"])().wrap(function _callee3$(_context3) {
+        while (1) switch (_context3.prev = _context3.next) {
+          case 0:
+            _context3.prev = 0;
+            iframeUrl = new URL(iframe.contentWindow.location.href);
+            error = iframeUrl.searchParams.get('error');
+            code = iframeUrl.searchParams.get('code');
+            if (!iframeUrl.pathname.endsWith('/app/login')) {
+              _context3.next = 9;
+              break;
+            }
+            document.body.removeChild(iframe);
+            resolve({
+              status: 'unauthenticated'
+            });
+            _context3.next = 24;
+            break;
+          case 9:
+            if (!error) {
+              _context3.next = 14;
+              break;
+            }
+            document.body.removeChild(iframe);
+            resolve({
+              status: 'error',
+              error: error
+            });
+            _context3.next = 24;
+            break;
+          case 14:
+            if (!code) {
+              _context3.next = 22;
+              break;
+            }
+            document.body.removeChild(iframe);
+            _context3.next = 18;
+            return exchangeCodeForToken(code, codeVerifier, redirectUri);
+          case 18:
+            token = _context3.sent;
+            if (token) {
+              resolve({
+                status: 'success',
+                token: token
+              });
+            } else {
+              reject({
+                status: 'error',
+                error: 'There was a problem retrieving your token.'
+              });
+            }
+            _context3.next = 24;
+            break;
+          case 22:
+            document.body.removeChild(iframe);
+            resolve({
+              status: 'error',
+              error: 'There was an unexpected problem retrieving your token.'
+            });
+          case 24:
+            _context3.next = 29;
+            break;
+          case 26:
+            _context3.prev = 26;
+            _context3.t0 = _context3["catch"](0);
+            // Cross-origin errors are expected during intermediate redirects
+            // as the iframe navigates through different origins before landing
+            // on the final redirect URI. Other errors should reject immediately.
+            if (!(_context3.t0 instanceof DOMException)) {
+              reject({
+                status: 'error',
+                error: 'There was an unexpected problem during authorization.'
+              });
+            }
+          case 29:
+          case "end":
+            return _context3.stop();
+        }
+      }, _callee3, null, [[0, 26]]);
+    }));
     document.body.appendChild(iframe);
   });
 };
+var withTimeout = function withTimeout(promise, ms) {
+  return Promise.race([promise, new Promise(function (_, reject) {
+    return setTimeout(function () {
+      return reject(new Error('Authorization timed out.'));
+    }, ms);
+  })]);
+};
+var retrieveJwt = exports.retrieveJwt = /*#__PURE__*/function () {
+  var _ref5 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee4() {
+    var redirectUri, codeVerifier, codeChallenge, result;
+    return (0, _regeneratorRuntime2["default"])().wrap(function _callee4$(_context4) {
+      while (1) switch (_context4.prev = _context4.next) {
+        case 0:
+          redirectUri = "".concat(checkedOrigin, "/app/oauth/callback");
+          codeVerifier = generateCodeVerifier();
+          _context4.next = 4;
+          return generateCodeChallenge(codeVerifier);
+        case 4:
+          codeChallenge = _context4.sent;
+          _context4.prev = 5;
+          _context4.next = 8;
+          return withTimeout(attemptAuthorize(redirectUri, codeVerifier, codeChallenge), AUTHORIZE_TIMEOUT_MS);
+        case 8:
+          result = _context4.sent;
+          return _context4.abrupt("return", result.status === 'success' ? result.token : undefined);
+        case 12:
+          _context4.prev = 12;
+          _context4.t0 = _context4["catch"](5);
+          console.error('there was a problem during authorization:', _context4.t0);
+          return _context4.abrupt("return", undefined);
+        case 16:
+        case "end":
+          return _context4.stop();
+      }
+    }, _callee4, null, [[5, 12]]);
+  }));
+  return function retrieveJwt() {
+    return _ref5.apply(this, arguments);
+  };
+}();
 var singleSignOn = exports.singleSignOn = function singleSignOn(spaceSlug, dimensions) {
   var target = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '_blank';
   return new Promise(function (resolve) {
     var options = (0, _objectSpread2["default"])((0, _objectSpread2["default"])({}, dimensions), getPopupPosition(window, dimensions));
-    var endpoint = _helpers.bundle.spaceLocation() + '/app/saml/login/alias/' + spaceSlug;
+    var endpoint = _helpers.bundle.spaceLocation() + '/app/saml2/login/alias/' + spaceSlug;
     var popup = window.open(endpoint, target, stringifyOptions(options));
     if (!popup) {
       resolve({
@@ -91,30 +265,30 @@ var singleSignOn = exports.singleSignOn = function singleSignOn(spaceSlug, dimen
     // show error. Otherwise, check if profile is avilable to verify successful
     // authentication.
     var checkPopup = /*#__PURE__*/function () {
-      var _ref2 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee() {
-        return (0, _regeneratorRuntime2["default"])().wrap(function _callee$(_context) {
-          while (1) switch (_context.prev = _context.next) {
+      var _ref6 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee5() {
+        return (0, _regeneratorRuntime2["default"])().wrap(function _callee5$(_context5) {
+          while (1) switch (_context5.prev = _context5.next) {
             case 0:
               if (!popup.closed) {
-                _context.next = 4;
+                _context5.next = 4;
                 break;
               }
               resolve({
                 error: 'Enterprise Sign In was cancelled.'
               });
-              _context.next = 12;
+              _context5.next = 12;
               break;
             case 4:
-              _context.next = 6;
+              _context5.next = 6;
               return profileAvailable();
             case 6:
-              if (!_context.sent) {
-                _context.next = 11;
+              if (!_context5.sent) {
+                _context5.next = 11;
                 break;
               }
               popup.close();
               resolve({});
-              _context.next = 12;
+              _context5.next = 12;
               break;
             case 11:
               if (pollCounter > 0) {
@@ -128,12 +302,12 @@ var singleSignOn = exports.singleSignOn = function singleSignOn(spaceSlug, dimen
               }
             case 12:
             case "end":
-              return _context.stop();
+              return _context5.stop();
           }
-        }, _callee);
+        }, _callee5);
       }));
       return function checkPopup() {
-        return _ref2.apply(this, arguments);
+        return _ref6.apply(this, arguments);
       };
     }();
 
@@ -145,48 +319,48 @@ var singleSignOn = exports.singleSignOn = function singleSignOn(spaceSlug, dimen
 // Checks to see if the user has been authenticated via SSO by checking if the
 // profile endpoint successfully returns data.
 var profileAvailable = /*#__PURE__*/function () {
-  var _ref3 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee3() {
-    return (0, _regeneratorRuntime2["default"])().wrap(function _callee3$(_context3) {
-      while (1) switch (_context3.prev = _context3.next) {
+  var _ref7 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee7() {
+    return (0, _regeneratorRuntime2["default"])().wrap(function _callee7$(_context7) {
+      while (1) switch (_context7.prev = _context7.next) {
         case 0:
-          return _context3.abrupt("return", new Promise( /*#__PURE__*/function () {
-            var _ref4 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee2(resolve) {
+          return _context7.abrupt("return", new Promise( /*#__PURE__*/function () {
+            var _ref8 = (0, _asyncToGenerator2["default"])( /*#__PURE__*/(0, _regeneratorRuntime2["default"])().mark(function _callee6(resolve) {
               var result;
-              return (0, _regeneratorRuntime2["default"])().wrap(function _callee2$(_context2) {
-                while (1) switch (_context2.prev = _context2.next) {
+              return (0, _regeneratorRuntime2["default"])().wrap(function _callee6$(_context6) {
+                while (1) switch (_context6.prev = _context6.next) {
                   case 0:
-                    _context2.prev = 0;
-                    _context2.next = 3;
+                    _context6.prev = 0;
+                    _context6.next = 3;
                     return (0, _profile.fetchProfile)({
                       "public": true
                     });
                   case 3:
-                    result = _context2.sent;
+                    result = _context6.sent;
                     resolve(!!result.profile);
-                    _context2.next = 10;
+                    _context6.next = 10;
                     break;
                   case 7:
-                    _context2.prev = 7;
-                    _context2.t0 = _context2["catch"](0);
+                    _context6.prev = 7;
+                    _context6.t0 = _context6["catch"](0);
                     resolve(false);
                   case 10:
                   case "end":
-                    return _context2.stop();
+                    return _context6.stop();
                 }
-              }, _callee2, null, [[0, 7]]);
+              }, _callee6, null, [[0, 7]]);
             }));
-            return function (_x) {
-              return _ref4.apply(this, arguments);
+            return function (_x5) {
+              return _ref8.apply(this, arguments);
             };
           }()));
         case 1:
         case "end":
-          return _context3.stop();
+          return _context7.stop();
       }
-    }, _callee3);
+    }, _callee7);
   }));
   return function profileAvailable() {
-    return _ref3.apply(this, arguments);
+    return _ref7.apply(this, arguments);
   };
 }();
 
@@ -200,9 +374,9 @@ var stringifyOptions = function stringifyOptions(options) {
 
 // Given the dimensions of the popup and the parent window returns the correct
 // position for the popup to be centered within the parent.
-var getPopupPosition = function getPopupPosition(window, _ref5) {
-  var width = _ref5.width,
-    height = _ref5.height;
+var getPopupPosition = function getPopupPosition(window, _ref9) {
+  var width = _ref9.width,
+    height = _ref9.height;
   return {
     top: window.screenY + window.innerHeight / 2 - height / 2,
     left: window.screenX + window.innerWidth / 2 - width / 2