@leapdev/auth-agent 2.5.5 → 2.6.1

package/README.md

@@ -273,6 +273,34 @@ Create an auth session and open a new app
 -   `newWindow` **[boolean][37]** If true, the new app will be open in the new browser tab. If false, app will be open in the current browser tab. (optional, default `false`)
 -   `authHost` **[string][36]** The authHost that the new app is using. (optional, default value is the same authHost as current app)
 
+## getRefreshTokenForApp
+
+Getting an RefreshToken For App.
+In order to be able get a refreshToken for an App, app needs to 
+  - have "offline_access" scope enabled in its client
+  - have `${leap-auth-url}/oauth/close` in its client's "allowed redirect urls"
+
+### Parameters
+
+-   `clientId` **[string][36]** clientId of the app (requried)
+-   `scopes` **[Array<string>][37]** requested scopes  
+
+## setAutoLogout
+
+Enable or Disable autoLogout
+
+### Parameters
+
+-   `enable` **[boolean][36]** enable or disable autoLogout
+
+## setIdleTimeoutInMinutes
+
+In minutes, the time interval after which the user is automatically logged out if no activity detected. In order to have this value working, user have to enable "AutoLogout"
+
+### Parameters
+
+-   `minutes` **[number][36]** number of minute to allow application to be in Idle time (no activity)
+
 [1]: #init
 
 [2]: #parameters

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leapdev/auth-agent",
-  "version": "2.5.5",
+  "version": "2.6.1",
   "description": "LEAP Auth Agent",
   "license": "LEAP Legal Software, PTY LTD",
   "main": "./src/index.js",

package/src/index.umd.js

@@ -4470,7 +4470,7 @@
                   grant_type: 'authorization_code',
                   code: params.code,
                   code_verifier: params.verifier,
-                  client_id: __classPrivateFieldGet(this, _LeapAuthService_clientId, "f"),
+                  client_id: params.clientId || __classPrivateFieldGet(this, _LeapAuthService_clientId, "f"),
                   redirect_uri: params.redirectUri
                 }
               },
@@ -6788,7 +6788,55 @@
       return list.find(appName => app.startsWith(`http://${appName}`) || app.startsWith(`https://${appName}`));
     };
 
-    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_refreshInfo, _Authentication_dedupeAccessTokenFetch, _Authentication_dedupeUserInfoFetch, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_getRefreshedAccessTokenFactory, _Authentication_getUserInfoFactory;
+    var _IdleTimer_timeoutInMinutes, _IdleTimer_timer, _IdleTimer_onTimeout, _IdleTimer_cleanUpTracker, _IdleTimer_clearTimeout, _IdleTimer_resetTimer;
+    class IdleTimer {
+      constructor(params) {
+        _IdleTimer_timeoutInMinutes.set(this, void 0);
+        _IdleTimer_timer.set(this, void 0);
+        _IdleTimer_onTimeout.set(this, void 0);
+        this.tracker = () => {
+          window.addEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.addEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.addEventListener('onmousedown', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.addEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.addEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+        };
+        this.resetTracker = () => {
+          __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+          __classPrivateFieldSet(this, _IdleTimer_timer, undefined, "f");
+          __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
+        };
+        _IdleTimer_cleanUpTracker.set(this, () => {
+          window.removeEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.removeEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.removeEventListener('onmousedown', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.removeEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+          window.removeEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
+        });
+        _IdleTimer_clearTimeout.set(this, () => {
+          if (__classPrivateFieldGet(this, _IdleTimer_timer, "f")) {
+            clearTimeout(__classPrivateFieldGet(this, _IdleTimer_timer, "f"));
+          }
+        });
+        _IdleTimer_resetTimer.set(this, () => {
+          __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+          __classPrivateFieldSet(this, _IdleTimer_timer, setTimeout(() => {
+            __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+            __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
+            __classPrivateFieldGet(this, _IdleTimer_onTimeout, "f").call(this);
+          }, __classPrivateFieldGet(this, _IdleTimer_timeoutInMinutes, "f") * 60 * 1000), "f");
+        });
+        const {
+          timeoutInMinutes,
+          onTimeout: onTimeout
+        } = params;
+        __classPrivateFieldSet(this, _IdleTimer_timeoutInMinutes, timeoutInMinutes, "f");
+        __classPrivateFieldSet(this, _IdleTimer_onTimeout, onTimeout, "f");
+      }
+    }
+    _IdleTimer_timeoutInMinutes = new WeakMap(), _IdleTimer_timer = new WeakMap(), _IdleTimer_onTimeout = new WeakMap(), _IdleTimer_cleanUpTracker = new WeakMap(), _IdleTimer_clearTimeout = new WeakMap(), _IdleTimer_resetTimer = new WeakMap();
+
+    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_idleTimer, _Authentication_refreshInfo, _Authentication_dedupeAccessTokenFetch, _Authentication_dedupeUserInfoFetch, _Authentication_startIdleTimer, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_getRefreshedAccessTokenFactory, _Authentication_getUserInfoFactory;
     const SECONDS_BEFORE_EXPIRE = 30;
     const MAX_SETTIME_OUT = 2147483647;
     const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
@@ -6800,6 +6848,7 @@
         _Authentication_config.set(this, void 0);
         _Authentication_leapAuthService.set(this, void 0);
         _Authentication_notification.set(this, void 0);
+        _Authentication_idleTimer.set(this, void 0);
         _Authentication_refreshInfo.set(this, void 0);
         _Authentication_dedupeAccessTokenFetch.set(this, void 0);
         _Authentication_dedupeUserInfoFetch.set(this, void 0);
@@ -7200,6 +7249,7 @@
         this.afterAuthenticated = () => {
           return this.triggerHooks(HookName.afterLogin).then(() => __awaiter(this, void 0, void 0, function* () {
             yield this.initNotification();
+            __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }));
         };
@@ -7242,6 +7292,106 @@
             iframe.setAttribute('src', authorizeUrl);
           });
         };
+        this.getRefreshTokenForApp = params => __awaiter(this, void 0, void 0, function* () {
+          const {
+            clientId,
+            scopes
+          } = params;
+          const code_verifier = createRandomString(64);
+          const state = createRandomString(6);
+          const nonce = createRandomString(6);
+          const {
+            code_challenge,
+            code_challenge_method
+          } = yield createCodeChallenge(code_verifier);
+          const requestScopesArray = scopes || [];
+          requestScopesArray.push('offline_access');
+          const request_scopes = requestScopesArray.join(',');
+          const redirectUri = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/close`;
+          const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&scope=${request_scopes}&client_id=${clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&nonce=${nonce}&state=${state}&prompt=none`;
+          return new Promise((res, rej) => {
+            const newWindow = window.open(url, '_blank', 'width=800,height=600');
+            if (!newWindow) {
+              rej('unable to open new window');
+              return;
+            }
+            const timeoutSetTimeoutId = setTimeout(() => {
+              rej('get-refresh-token timeout');
+              window.removeEventListener('message', windowEventHandler, false);
+              newWindow.close();
+            }, DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS * 1000);
+            const windowEventHandler = e => __awaiter(this, void 0, void 0, function* () {
+              if (e.origin !== __classPrivateFieldGet(this, _Authentication_config, "f").authHost) return;
+              if (e.data.type !== 'closeMe') return;
+              newWindow.close();
+              clearTimeout(timeoutSetTimeoutId);
+              window.removeEventListener('message', windowEventHandler, false);
+              if (e.data.queryParams) {
+                const {
+                  code,
+                  state: stateFromCloseWindow
+                } = e.data.queryParams;
+                if (code && state && state === stateFromCloseWindow) {
+                  try {
+                    const result = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").exchangeAuthCodeForAccessToken({
+                      code,
+                      verifier: code_verifier,
+                      redirectUri: redirectUri,
+                      clientId: clientId
+                    });
+                    if (result && result.refresh_token) {
+                      res({
+                        refreshToken: result.refresh_token,
+                        code_verifier: code_verifier
+                      });
+                    } else {
+                      throw new Error('Failed to exchange auth code for access token');
+                    }
+                  } catch (_) {
+                    console.warn('Failed to exchange auth code for access token');
+                    res({
+                      refreshToken: undefined,
+                      code_verifier: undefined
+                    });
+                  }
+                }
+              } else {
+                res({
+                  refreshToken: undefined,
+                  code_verifier: undefined
+                });
+              }
+            });
+            window.addEventListener('message', windowEventHandler);
+          });
+        });
+        this.setIdleTimeoutInMinutes = timeoutInMinutes => {
+          __classPrivateFieldGet(this, _Authentication_config, "f").idleTimeoutInMinutes = timeoutInMinutes;
+          __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
+        };
+        this.setAutoLogout = autoLogout => {
+          __classPrivateFieldGet(this, _Authentication_config, "f").autoLogout = autoLogout;
+          if (autoLogout) {
+            __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
+          } else {
+            if (__classPrivateFieldGet(this, _Authentication_idleTimer, "f")) {
+              __classPrivateFieldGet(this, _Authentication_idleTimer, "f").resetTracker();
+            }
+          }
+        };
+        _Authentication_startIdleTimer.set(this, () => {
+          if (this.autoLogout()) {
+            if (__classPrivateFieldGet(this, _Authentication_idleTimer, "f")) {
+              __classPrivateFieldGet(this, _Authentication_idleTimer, "f").resetTracker();
+            }
+            const timeoutInMinutes = this.idleTimeoutInMinutes();
+            __classPrivateFieldSet(this, _Authentication_idleTimer, new IdleTimer({
+              timeoutInMinutes,
+              onTimeout: this.logout
+            }), "f");
+            __classPrivateFieldGet(this, _Authentication_idleTimer, "f").tracker();
+          }
+        });
         _Authentication_exchangeAuthCodeForAccessToken.set(this, params => __awaiter(this, void 0, void 0, function* () {
           const {
             verifier,
@@ -7385,50 +7535,7 @@
         __classPrivateFieldSet(this, _Authentication_dedupeUserInfoFetch, createInFlightDedupe(), "f");
       }
     }
-    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_dedupeAccessTokenFetch = new WeakMap(), _Authentication_dedupeUserInfoFetch = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_getRefreshedAccessTokenFactory = new WeakMap(), _Authentication_getUserInfoFactory = new WeakMap();
-
-    var _IdleTimer_timeoutInMinutes, _IdleTimer_timer, _IdleTimer_onTimeout, _IdleTimer_cleanUpTracker, _IdleTimer_clearTimeout, _IdleTimer_resetTimer;
-    class IdleTimer {
-      constructor(params) {
-        _IdleTimer_timeoutInMinutes.set(this, void 0);
-        _IdleTimer_timer.set(this, void 0);
-        _IdleTimer_onTimeout.set(this, void 0);
-        this.tracker = () => {
-          window.addEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.addEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.addEventListener('onmousedown', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.addEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.addEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-        };
-        _IdleTimer_cleanUpTracker.set(this, () => {
-          window.removeEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.removeEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.removeEventListener('onmousedown', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.removeEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-          window.removeEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
-        });
-        _IdleTimer_clearTimeout.set(this, () => {
-          if (__classPrivateFieldGet(this, _IdleTimer_timer, "f")) {
-            clearTimeout(__classPrivateFieldGet(this, _IdleTimer_timer, "f"));
-          }
-        });
-        _IdleTimer_resetTimer.set(this, () => {
-          __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
-          __classPrivateFieldSet(this, _IdleTimer_timer, setTimeout(() => {
-            __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
-            __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
-            __classPrivateFieldGet(this, _IdleTimer_onTimeout, "f").call(this);
-          }, __classPrivateFieldGet(this, _IdleTimer_timeoutInMinutes, "f") * 60 * 1000), "f");
-        });
-        const {
-          timeoutInMinutes,
-          onTimeout: onTimeout
-        } = params;
-        __classPrivateFieldSet(this, _IdleTimer_timeoutInMinutes, timeoutInMinutes, "f");
-        __classPrivateFieldSet(this, _IdleTimer_onTimeout, onTimeout, "f");
-      }
-    }
-    _IdleTimer_timeoutInMinutes = new WeakMap(), _IdleTimer_timer = new WeakMap(), _IdleTimer_onTimeout = new WeakMap(), _IdleTimer_cleanUpTracker = new WeakMap(), _IdleTimer_clearTimeout = new WeakMap(), _IdleTimer_resetTimer = new WeakMap();
+    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_idleTimer = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_dedupeAccessTokenFetch = new WeakMap(), _Authentication_dedupeUserInfoFetch = new WeakMap(), _Authentication_startIdleTimer = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_getRefreshedAccessTokenFactory = new WeakMap(), _Authentication_getUserInfoFactory = new WeakMap();
 
     let auth;
     const init = options => __awaiter(void 0, void 0, void 0, function* () {
@@ -7436,15 +7543,6 @@
       if (!auth) {
         return false;
       }
-      const autoLogout = auth.autoLogout();
-      if (autoLogout) {
-        const timeoutInMinutes = auth.idleTimeoutInMinutes();
-        const idleTimer = new IdleTimer({
-          timeoutInMinutes,
-          onTimeout: logout
-        });
-        idleTimer.tracker();
-      }
       const done = yield auth.checkAuthCode();
       if (done) {
         return auth.afterAuthenticated();
@@ -7660,6 +7758,36 @@
         authHost
       });
     });
+    const getRefreshTokenForApp = params => __awaiter(void 0, void 0, void 0, function* () {
+      const {
+        clientId,
+        scopes
+      } = params;
+      if (!auth) {
+        throw Error('Not init yet');
+      }
+      return auth.getRefreshTokenForApp({
+        clientId,
+        scopes
+      });
+    });
+    const setIdleTimeoutInMinutes = timeoutInMinutes => {
+      if (!auth) {
+        throw Error('Not init yet');
+      }
+      if (typeof timeoutInMinutes !== "number") {
+        throw Error('timeoutInMinutes must be a number');
+      }
+      auth.setIdleTimeoutInMinutes(timeoutInMinutes);
+      return true;
+    };
+    const setAutoLogout = autoLogout => {
+      if (!auth) {
+        throw Error('Not init yet');
+      }
+      auth.setAutoLogout(autoLogout);
+      return true;
+    };
     const AuthAgent = {
       init,
       registerHook,
@@ -7684,7 +7812,10 @@
       authoriseSupport,
       changePassword,
       registerEventListener,
-      passthrough
+      passthrough,
+      getRefreshTokenForApp,
+      setIdleTimeoutInMinutes,
+      setAutoLogout
     };
 
     exports.AuthAgent = AuthAgent;

package/src/lib/auth-agent.d.ts

@@ -26,4 +26,13 @@ export declare const AuthAgent: {
     changePassword: (redirectUrl?: string | undefined, newWindow?: boolean | undefined, callback?: any) => void;
     registerEventListener: (topic: string, messageType: string, callback: any) => void;
     passthrough: (url: string, newWindow?: boolean, authHost?: string | undefined) => Promise<void>;
+    getRefreshTokenForApp: (params: {
+        clientId: string;
+        scopes?: string[];
+    }) => Promise<{
+        refreshToken: string | undefined;
+        code_verifier: string | undefined;
+    }>;
+    setIdleTimeoutInMinutes: (timeoutInMinutes: number) => boolean;
+    setAutoLogout: (autoLogout: boolean) => boolean;
 };

package/src/lib/auth-agent.js

@@ -1,6 +1,5 @@
 import { __awaiter } from "tslib";
 import { Authentication } from './authentication';
-import { IdleTimer } from './idle-timer';
 import { HookName } from './types';
 let auth;
 const init = (options) => __awaiter(void 0, void 0, void 0, function* () {
@@ -8,12 +7,6 @@ const init = (options) => __awaiter(void 0, void 0, void 0, function* () {
     if (!auth) {
         return false;
     }
-    const autoLogout = auth.autoLogout();
-    if (autoLogout) {
-        const timeoutInMinutes = auth.idleTimeoutInMinutes();
-        const idleTimer = new IdleTimer({ timeoutInMinutes, onTimeout: logout });
-        idleTimer.tracker();
-    }
     const done = yield auth.checkAuthCode();
     if (done) {
         return auth.afterAuthenticated();
@@ -195,6 +188,30 @@ const passthrough = (url, newWindow = false, authHost) => __awaiter(void 0, void
     }
     yield auth.passthrough({ url, newWindow, authHost });
 });
+const getRefreshTokenForApp = (params) => __awaiter(void 0, void 0, void 0, function* () {
+    const { clientId, scopes } = params;
+    if (!auth) {
+        throw Error('Not init yet');
+    }
+    return auth.getRefreshTokenForApp({ clientId, scopes });
+});
+const setIdleTimeoutInMinutes = (timeoutInMinutes) => {
+    if (!auth) {
+        throw Error('Not init yet');
+    }
+    if (typeof timeoutInMinutes !== "number") {
+        throw Error('timeoutInMinutes must be a number');
+    }
+    auth.setIdleTimeoutInMinutes(timeoutInMinutes);
+    return true;
+};
+const setAutoLogout = (autoLogout) => {
+    if (!auth) {
+        throw Error('Not init yet');
+    }
+    auth.setAutoLogout(autoLogout);
+    return true;
+};
 export const AuthAgent = {
     init,
     registerHook,
@@ -220,4 +237,7 @@ export const AuthAgent = {
     changePassword,
     registerEventListener,
     passthrough,
+    getRefreshTokenForApp,
+    setIdleTimeoutInMinutes,
+    setAutoLogout,
 };

package/src/lib/auth.service.d.ts

@@ -8,6 +8,7 @@ export declare class LeapAuthService {
         code: string;
         redirectUri: string;
         verifier: string;
+        clientId?: string;
     }) => Promise<LeapToken>;
     renewAccessToken: (params: {
         refreshToken: string;

package/src/lib/auth.service.js

@@ -52,7 +52,7 @@ export class LeapAuthService {
                             grant_type: 'authorization_code',
                             code: params.code,
                             code_verifier: params.verifier,
-                            client_id: __classPrivateFieldGet(this, _LeapAuthService_clientId, "f"),
+                            client_id: params.clientId || __classPrivateFieldGet(this, _LeapAuthService_clientId, "f"),
                             redirect_uri: params.redirectUri,
                         },
                     },

package/src/lib/authentication.d.ts

@@ -77,4 +77,13 @@ export declare class Authentication {
     triggerHooks: (hookName: HookName) => Promise<any>;
     afterAuthenticated: () => Promise<string | undefined>;
     runIframe: (authorizeUrl: string, state: string, timeoutInSeconds?: number) => Promise<any>;
+    getRefreshTokenForApp: (params: {
+        clientId: string;
+        scopes?: string[];
+    }) => Promise<{
+        refreshToken: string | undefined;
+        code_verifier: string | undefined;
+    }>;
+    setIdleTimeoutInMinutes: (timeoutInMinutes: number) => void;
+    setAutoLogout: (autoLogout: boolean) => void;
 }

package/src/lib/authentication.js

@@ -1,4 +1,4 @@
-var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_refreshInfo, _Authentication_dedupeAccessTokenFetch, _Authentication_dedupeUserInfoFetch, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_getRefreshedAccessTokenFactory, _Authentication_getUserInfoFactory;
+var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_idleTimer, _Authentication_refreshInfo, _Authentication_dedupeAccessTokenFetch, _Authentication_dedupeUserInfoFetch, _Authentication_startIdleTimer, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_getRefreshedAccessTokenFactory, _Authentication_getUserInfoFactory;
 import { __awaiter, __classPrivateFieldGet, __classPrivateFieldSet } from "tslib";
 import { isFunction } from 'lodash';
 import { init } from './config';
@@ -7,6 +7,7 @@ import { HookName, } from './types';
 import { Notification } from './notification';
 import { createCodeChallenge, createInFlightDedupe, createLoginUrl, createRandomString, deleteQueryParameter, getQueryParameter } from './utils';
 import { getRedirectUri } from './redirections';
+import { IdleTimer } from './idle-timer';
 const SECONDS_BEFORE_EXPIRE = 30;
 const MAX_SETTIME_OUT = 2147483647;
 const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
@@ -18,6 +19,7 @@ export class Authentication {
         _Authentication_config.set(this, void 0);
         _Authentication_leapAuthService.set(this, void 0);
         _Authentication_notification.set(this, void 0);
+        _Authentication_idleTimer.set(this, void 0);
         _Authentication_refreshInfo.set(this, void 0);
         _Authentication_dedupeAccessTokenFetch.set(this, void 0);
         _Authentication_dedupeUserInfoFetch.set(this, void 0);
@@ -381,6 +383,7 @@ export class Authentication {
         this.afterAuthenticated = () => {
             return this.triggerHooks(HookName.afterLogin).then(() => __awaiter(this, void 0, void 0, function* () {
                 yield this.initNotification();
+                __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
                 return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
             }));
         };
@@ -421,6 +424,94 @@ export class Authentication {
                 iframe.setAttribute('src', authorizeUrl);
             });
         };
+        this.getRefreshTokenForApp = (params) => __awaiter(this, void 0, void 0, function* () {
+            const { clientId, scopes } = params;
+            const code_verifier = createRandomString(64);
+            const state = createRandomString(6);
+            const nonce = createRandomString(6);
+            const { code_challenge, code_challenge_method } = yield createCodeChallenge(code_verifier);
+            const requestScopesArray = scopes || [];
+            requestScopesArray.push('offline_access');
+            const request_scopes = requestScopesArray.join(',');
+            const redirectUri = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/close`;
+            const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&scope=${request_scopes}&client_id=${clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&nonce=${nonce}&state=${state}&prompt=none`;
+            return new Promise((res, rej) => {
+                const newWindow = window.open(url, '_blank', 'width=800,height=600');
+                if (!newWindow) {
+                    rej('unable to open new window');
+                    return;
+                }
+                const timeoutSetTimeoutId = setTimeout(() => {
+                    rej('get-refresh-token timeout');
+                    window.removeEventListener('message', windowEventHandler, false);
+                    newWindow.close();
+                }, DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS * 1000);
+                const windowEventHandler = (e) => __awaiter(this, void 0, void 0, function* () {
+                    if (e.origin !== __classPrivateFieldGet(this, _Authentication_config, "f").authHost)
+                        return;
+                    if (e.data.type !== 'closeMe')
+                        return;
+                    newWindow.close();
+                    clearTimeout(timeoutSetTimeoutId);
+                    window.removeEventListener('message', windowEventHandler, false);
+                    if (e.data.queryParams) {
+                        const { code, state: stateFromCloseWindow } = e.data.queryParams;
+                        if (code && state && state === stateFromCloseWindow) {
+                            try {
+                                const result = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").exchangeAuthCodeForAccessToken({
+                                    code,
+                                    verifier: code_verifier,
+                                    redirectUri: redirectUri,
+                                    clientId: clientId,
+                                });
+                                if (result && result.refresh_token) {
+                                    res({
+                                        refreshToken: result.refresh_token,
+                                        code_verifier: code_verifier,
+                                    });
+                                }
+                                else {
+                                    throw new Error('Failed to exchange auth code for access token');
+                                }
+                            }
+                            catch (_) {
+                                console.warn('Failed to exchange auth code for access token');
+                                res({ refreshToken: undefined, code_verifier: undefined });
+                            }
+                        }
+                    }
+                    else {
+                        res({ refreshToken: undefined, code_verifier: undefined });
+                    }
+                });
+                window.addEventListener('message', windowEventHandler);
+            });
+        });
+        this.setIdleTimeoutInMinutes = (timeoutInMinutes) => {
+            __classPrivateFieldGet(this, _Authentication_config, "f").idleTimeoutInMinutes = timeoutInMinutes;
+            __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
+        };
+        this.setAutoLogout = (autoLogout) => {
+            __classPrivateFieldGet(this, _Authentication_config, "f").autoLogout = autoLogout;
+            if (autoLogout) {
+                __classPrivateFieldGet(this, _Authentication_startIdleTimer, "f").call(this);
+            }
+            else {
+                if (__classPrivateFieldGet(this, _Authentication_idleTimer, "f")) {
+                    __classPrivateFieldGet(this, _Authentication_idleTimer, "f").resetTracker();
+                }
+            }
+        };
+        _Authentication_startIdleTimer.set(this, () => {
+            if (this.autoLogout()) {
+                if (__classPrivateFieldGet(this, _Authentication_idleTimer, "f")) {
+                    __classPrivateFieldGet(this, _Authentication_idleTimer, "f").resetTracker();
+                }
+                const timeoutInMinutes = this.idleTimeoutInMinutes();
+                __classPrivateFieldSet(this, _Authentication_idleTimer, new IdleTimer({ timeoutInMinutes, onTimeout: this.logout }), "f");
+                __classPrivateFieldGet(this, _Authentication_idleTimer, "f").tracker();
+            }
+        });
         _Authentication_exchangeAuthCodeForAccessToken.set(this, (params) => __awaiter(this, void 0, void 0, function* () {
             const { verifier, code, redirectUri } = params;
             if (verifier) {
@@ -553,4 +644,4 @@ export class Authentication {
         __classPrivateFieldSet(this, _Authentication_dedupeUserInfoFetch, createInFlightDedupe(), "f");
     }
 }
-_Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_dedupeAccessTokenFetch = new WeakMap(), _Authentication_dedupeUserInfoFetch = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_getRefreshedAccessTokenFactory = new WeakMap(), _Authentication_getUserInfoFactory = new WeakMap();
+_Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_idleTimer = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_dedupeAccessTokenFetch = new WeakMap(), _Authentication_dedupeUserInfoFetch = new WeakMap(), _Authentication_startIdleTimer = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_getRefreshedAccessTokenFactory = new WeakMap(), _Authentication_getUserInfoFactory = new WeakMap();

package/src/lib/idle-timer.d.ts

@@ -5,4 +5,5 @@ export declare class IdleTimer {
         onTimeout: () => void;
     });
     tracker: () => void;
+    resetTracker: () => void;
 }

package/src/lib/idle-timer.js

@@ -12,6 +12,11 @@ export class IdleTimer {
             window.addEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
             window.addEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
         };
+        this.resetTracker = () => {
+            __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+            __classPrivateFieldSet(this, _IdleTimer_timer, undefined, "f");
+            __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
+        };
         _IdleTimer_cleanUpTracker.set(this, () => {
             window.removeEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
             window.removeEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);