@lukoweb/apitogo 0.2.22 → 0.2.24

package/src/lib/authentication/providers/dev-portal-utils.ts

@@ -1,279 +1,279 @@
-import type { DevPortalAuthenticationConfig } from "../../../config/config.js";
-import {
-  DEV_PORTAL_PLACEHOLDER_API_URL,
-  type UserMeResponse,
-} from "./dev-portal-constants.js";
-
-declare const VITE_APITOGO_AUTHENTICATION_API_BASE_URL: string | undefined;
-/** @deprecated Use {@link VITE_APITOGO_AUTHENTICATION_API_BASE_URL}. */
-declare const VITE_APITOGO_DEV_PORTAL_API_URL: string | undefined;
-
-export function resolveDevPortalApiBaseUrl(
-  config: Pick<DevPortalAuthenticationConfig, "apiBaseUrl">,
-): string | undefined {
-  const fromConfig = config.apiBaseUrl?.trim();
-  if (fromConfig) {
-    return fromConfig.replace(/\/+$/, "");
-  }
-
-  const fromEnv =
-    (typeof VITE_APITOGO_AUTHENTICATION_API_BASE_URL === "string"
-      ? VITE_APITOGO_AUTHENTICATION_API_BASE_URL.trim()
-      : "") ||
-    (typeof VITE_APITOGO_DEV_PORTAL_API_URL === "string"
-      ? VITE_APITOGO_DEV_PORTAL_API_URL.trim()
-      : "");
-
-  return fromEnv ? fromEnv.replace(/\/+$/, "") : undefined;
-}
-
-export function isPlaceholderDevPortalApiUrl(
-  apiBaseUrl: string | undefined,
-): boolean {
-  if (!apiBaseUrl) {
-    return true;
-  }
-
-  return (
-    apiBaseUrl === DEV_PORTAL_PLACEHOLDER_API_URL ||
-    apiBaseUrl.includes("dp-example.azurecontainerapps.io")
-  );
-}
-
-export function toAbsoluteReturnUrl(pathOrUrl: string): string {
-  if (pathOrUrl.startsWith("http://") || pathOrUrl.startsWith("https://")) {
-    return pathOrUrl;
-  }
-
-  if (typeof window === "undefined") {
-    return pathOrUrl;
-  }
-
-  return new URL(pathOrUrl, window.location.origin).href;
-}
-
-export function buildDevPortalOidcChallengeUrl(
-  apiBaseUrl: string,
-  providerId: string,
-  returnUrl: string,
-): string {
-  const url = new URL(
-    `/api/v1/auth/oidc/${encodeURIComponent(providerId)}/challenge`,
-    apiBaseUrl,
-  );
-  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
-  return url.toString();
-}
-
-export function buildDevPortalLoginUrl(
-  apiBaseUrl: string,
-  returnUrl: string,
-): string {
-  const url = new URL("/api/v1/auth/login", apiBaseUrl);
-  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
-  return url.toString();
-}
-
-export function buildDevPortalLogoutUrl(
-  apiBaseUrl: string,
-  returnUrl: string,
-): string {
-  const url = new URL("/api/v1/auth/logout", apiBaseUrl);
-  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
-  return url.toString();
-}
-
-export function normalizeDevPortalAuthConfig(
-  raw: unknown,
-): import("./dev-portal-constants.js").DevPortalAuthConfigResponse {
-  const data = (raw ?? {}) as Record<string, unknown>;
-  const nestedNative = data.native as { enabled?: boolean } | undefined;
-  const nativeEnabled =
-    typeof nestedNative?.enabled === "boolean"
-      ? nestedNative.enabled
-      : typeof data.nativeEnabled === "boolean"
-        ? data.nativeEnabled
-        : false;
-
-  const emailRaw = data.email;
-  const email =
-    emailRaw &&
-    typeof emailRaw === "object" &&
-    typeof (emailRaw as { provider?: unknown }).provider === "string" &&
-    typeof (emailRaw as { from?: unknown }).from === "string"
-      ? {
-          provider: (emailRaw as { provider: string }).provider,
-          from: (emailRaw as { from: string }).from,
-        }
-      : null;
-
-  const providers = Array.isArray(data.providers)
-    ? data.providers
-        .filter(
-          (provider): provider is Record<string, unknown> =>
-            provider != null && typeof provider === "object",
-        )
-        .map((provider) => ({
-          id: String(provider.id ?? ""),
-          displayName: String(provider.displayName ?? provider.id ?? ""),
-          authority: String(provider.authority ?? ""),
-          clientId: String(provider.clientId ?? ""),
-          scopes: Array.isArray(provider.scopes)
-            ? provider.scopes.map((scope) => String(scope))
-            : [],
-        }))
-        .filter((provider) => provider.id.length > 0)
-    : [];
-
-  return {
-    native: { enabled: nativeEnabled },
-    email,
-    providers,
-  };
-}
-
-export function isNativeAuthEnabled(
-  config:
-    | import("./dev-portal-constants.js").DevPortalAuthConfigResponse
-    | null
-    | undefined,
-): boolean {
-  if (!config) {
-    return false;
-  }
-
-  const raw =
-    config as import("./dev-portal-constants.js").DevPortalAuthConfigResponse & {
-      nativeEnabled?: boolean;
-    };
-
-  return raw.native?.enabled === true || raw.nativeEnabled === true;
-}
-
-export async function fetchDevPortalAuthConfig(
-  apiBaseUrl: string,
-  fetchImpl: typeof fetch = fetch,
-): Promise<import("./dev-portal-constants.js").DevPortalAuthConfigResponse> {
-  const response = await fetchImpl(`${apiBaseUrl}/api/v1/auth/config`, {
-    method: "GET",
-    headers: { Accept: "application/json" },
-    credentials: "include",
-  });
-
-  if (!response.ok) {
-    throw new Error("Failed to load auth configuration.");
-  }
-
-  return normalizeDevPortalAuthConfig(await response.json());
-}
-
-export async function postDevPortalAuth<T>(
-  apiBaseUrl: string,
-  path: string,
-  body: unknown,
-  fetchImpl: typeof fetch = fetch,
-): Promise<T> {
-  const response = await fetchImpl(`${apiBaseUrl}${path}`, {
-    method: "POST",
-    headers: {
-      Accept: "application/json",
-      "Content-Type": "application/json",
-    },
-    credentials: "include",
-    body: JSON.stringify(body),
-  });
-
-  if (response.status === 204) {
-    return {} as T;
-  }
-
-  if (!response.ok) {
-    let detail = "Request failed.";
-    try {
-      const problem = (await response.json()) as {
-        detail?: string;
-        title?: string;
-      };
-      detail = problem.detail ?? problem.title ?? detail;
-    } catch {
-      // ignore parse errors
-    }
-    throw new Error(detail);
-  }
-
-  return (await response.json()) as T;
-}
-
-export async function probeDevPortalBackend(
-  apiBaseUrl: string,
-  fetchImpl: typeof fetch = fetch,
-): Promise<boolean> {
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 8_000);
-
-  try {
-    const response = await fetchImpl(`${apiBaseUrl}/api/v1/auth/status`, {
-      method: "GET",
-      headers: { Accept: "application/json" },
-      credentials: "include",
-      signal: controller.signal,
-    });
-
-    // HTTP 200 means the portal API is reachable. `available` is whether
-    // sign-in methods are configured — do not treat empty auth as unpublished.
-    return response.ok;
-  } catch {
-    return false;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-
-function readOptionalString(...values: unknown[]): string | undefined {
-  for (const value of values) {
-    if (typeof value === "string" && value.trim()) {
-      return value.trim();
-    }
-  }
-
-  return undefined;
-}
-
-function readOptionalBoolean(...values: unknown[]): boolean | undefined {
-  for (const value of values) {
-    if (typeof value === "boolean") {
-      return value;
-    }
-
-    if (value === "true" || value === "True") {
-      return true;
-    }
-
-    if (value === "false" || value === "False") {
-      return false;
-    }
-  }
-
-  return undefined;
-}
-
-export function mapUserMeToProfile(
-  me: UserMeResponse,
-): import("../state.js").UserProfile {
-  const raw = me as UserMeResponse & Record<string, unknown>;
-  const email = readOptionalString(raw.email, raw.Email, raw.emailAddress);
-  const emailVerified =
-    readOptionalBoolean(
-      raw.emailVerified,
-      raw.EmailVerified,
-      raw.email_verified,
-    ) ?? email != null;
-
-  return {
-    sub: me.userId,
-    email,
-    emailVerified,
-    name: me.displayName ?? undefined,
-    pictureUrl: undefined,
-  };
-}
+import type { DevPortalAuthenticationConfig } from "../../../config/config.js";
+import {
+  DEV_PORTAL_PLACEHOLDER_API_URL,
+  type UserMeResponse,
+} from "./dev-portal-constants.js";
+
+declare const VITE_APITOGO_AUTHENTICATION_API_BASE_URL: string | undefined;
+/** @deprecated Use {@link VITE_APITOGO_AUTHENTICATION_API_BASE_URL}. */
+declare const VITE_APITOGO_DEV_PORTAL_API_URL: string | undefined;
+
+export function resolveDevPortalApiBaseUrl(
+  config: Pick<DevPortalAuthenticationConfig, "apiBaseUrl">,
+): string | undefined {
+  const fromConfig = config.apiBaseUrl?.trim();
+  if (fromConfig) {
+    return fromConfig.replace(/\/+$/, "");
+  }
+
+  const fromEnv =
+    (typeof VITE_APITOGO_AUTHENTICATION_API_BASE_URL === "string"
+      ? VITE_APITOGO_AUTHENTICATION_API_BASE_URL.trim()
+      : "") ||
+    (typeof VITE_APITOGO_DEV_PORTAL_API_URL === "string"
+      ? VITE_APITOGO_DEV_PORTAL_API_URL.trim()
+      : "");
+
+  return fromEnv ? fromEnv.replace(/\/+$/, "") : undefined;
+}
+
+export function isPlaceholderDevPortalApiUrl(
+  apiBaseUrl: string | undefined,
+): boolean {
+  if (!apiBaseUrl) {
+    return true;
+  }
+
+  return (
+    apiBaseUrl === DEV_PORTAL_PLACEHOLDER_API_URL ||
+    apiBaseUrl.includes("dp-example.azurecontainerapps.io")
+  );
+}
+
+export function toAbsoluteReturnUrl(pathOrUrl: string): string {
+  if (pathOrUrl.startsWith("http://") || pathOrUrl.startsWith("https://")) {
+    return pathOrUrl;
+  }
+
+  if (typeof window === "undefined") {
+    return pathOrUrl;
+  }
+
+  return new URL(pathOrUrl, window.location.origin).href;
+}
+
+export function buildDevPortalOidcChallengeUrl(
+  apiBaseUrl: string,
+  providerId: string,
+  returnUrl: string,
+): string {
+  const url = new URL(
+    `/api/v1/auth/oidc/${encodeURIComponent(providerId)}/challenge`,
+    apiBaseUrl,
+  );
+  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
+  return url.toString();
+}
+
+export function buildDevPortalLoginUrl(
+  apiBaseUrl: string,
+  returnUrl: string,
+): string {
+  const url = new URL("/api/v1/auth/login", apiBaseUrl);
+  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
+  return url.toString();
+}
+
+export function buildDevPortalLogoutUrl(
+  apiBaseUrl: string,
+  returnUrl: string,
+): string {
+  const url = new URL("/api/v1/auth/logout", apiBaseUrl);
+  url.searchParams.set("returnUrl", toAbsoluteReturnUrl(returnUrl));
+  return url.toString();
+}
+
+export function normalizeDevPortalAuthConfig(
+  raw: unknown,
+): import("./dev-portal-constants.js").DevPortalAuthConfigResponse {
+  const data = (raw ?? {}) as Record<string, unknown>;
+  const nestedNative = data.native as { enabled?: boolean } | undefined;
+  const nativeEnabled =
+    typeof nestedNative?.enabled === "boolean"
+      ? nestedNative.enabled
+      : typeof data.nativeEnabled === "boolean"
+        ? data.nativeEnabled
+        : false;
+
+  const emailRaw = data.email;
+  const email =
+    emailRaw &&
+    typeof emailRaw === "object" &&
+    typeof (emailRaw as { provider?: unknown }).provider === "string" &&
+    typeof (emailRaw as { from?: unknown }).from === "string"
+      ? {
+          provider: (emailRaw as { provider: string }).provider,
+          from: (emailRaw as { from: string }).from,
+        }
+      : null;
+
+  const providers = Array.isArray(data.providers)
+    ? data.providers
+        .filter(
+          (provider): provider is Record<string, unknown> =>
+            provider != null && typeof provider === "object",
+        )
+        .map((provider) => ({
+          id: String(provider.id ?? ""),
+          displayName: String(provider.displayName ?? provider.id ?? ""),
+          authority: String(provider.authority ?? ""),
+          clientId: String(provider.clientId ?? ""),
+          scopes: Array.isArray(provider.scopes)
+            ? provider.scopes.map((scope) => String(scope))
+            : [],
+        }))
+        .filter((provider) => provider.id.length > 0)
+    : [];
+
+  return {
+    native: { enabled: nativeEnabled },
+    email,
+    providers,
+  };
+}
+
+export function isNativeAuthEnabled(
+  config:
+    | import("./dev-portal-constants.js").DevPortalAuthConfigResponse
+    | null
+    | undefined,
+): boolean {
+  if (!config) {
+    return false;
+  }
+
+  const raw =
+    config as import("./dev-portal-constants.js").DevPortalAuthConfigResponse & {
+      nativeEnabled?: boolean;
+    };
+
+  return raw.native?.enabled === true || raw.nativeEnabled === true;
+}
+
+export async function fetchDevPortalAuthConfig(
+  apiBaseUrl: string,
+  fetchImpl: typeof fetch = fetch,
+): Promise<import("./dev-portal-constants.js").DevPortalAuthConfigResponse> {
+  const response = await fetchImpl(`${apiBaseUrl}/api/v1/auth/config`, {
+    method: "GET",
+    headers: { Accept: "application/json" },
+    credentials: "include",
+  });
+
+  if (!response.ok) {
+    throw new Error("Failed to load auth configuration.");
+  }
+
+  return normalizeDevPortalAuthConfig(await response.json());
+}
+
+export async function postDevPortalAuth<T>(
+  apiBaseUrl: string,
+  path: string,
+  body: unknown,
+  fetchImpl: typeof fetch = fetch,
+): Promise<T> {
+  const response = await fetchImpl(`${apiBaseUrl}${path}`, {
+    method: "POST",
+    headers: {
+      Accept: "application/json",
+      "Content-Type": "application/json",
+    },
+    credentials: "include",
+    body: JSON.stringify(body),
+  });
+
+  if (response.status === 204) {
+    return {} as T;
+  }
+
+  if (!response.ok) {
+    let detail = "Request failed.";
+    try {
+      const problem = (await response.json()) as {
+        detail?: string;
+        title?: string;
+      };
+      detail = problem.detail ?? problem.title ?? detail;
+    } catch {
+      // ignore parse errors
+    }
+    throw new Error(detail);
+  }
+
+  return (await response.json()) as T;
+}
+
+export async function probeDevPortalBackend(
+  apiBaseUrl: string,
+  fetchImpl: typeof fetch = fetch,
+): Promise<boolean> {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 8_000);
+
+  try {
+    const response = await fetchImpl(`${apiBaseUrl}/api/v1/auth/status`, {
+      method: "GET",
+      headers: { Accept: "application/json" },
+      credentials: "include",
+      signal: controller.signal,
+    });
+
+    // HTTP 200 means the portal API is reachable. `available` is whether
+    // sign-in methods are configured — do not treat empty auth as unpublished.
+    return response.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function readOptionalString(...values: unknown[]): string | undefined {
+  for (const value of values) {
+    if (typeof value === "string" && value.trim()) {
+      return value.trim();
+    }
+  }
+
+  return undefined;
+}
+
+function readOptionalBoolean(...values: unknown[]): boolean | undefined {
+  for (const value of values) {
+    if (typeof value === "boolean") {
+      return value;
+    }
+
+    if (value === "true" || value === "True") {
+      return true;
+    }
+
+    if (value === "false" || value === "False") {
+      return false;
+    }
+  }
+
+  return undefined;
+}
+
+export function mapUserMeToProfile(
+  me: UserMeResponse,
+): import("../state.js").UserProfile {
+  const raw = me as UserMeResponse & Record<string, unknown>;
+  const email = readOptionalString(raw.email, raw.Email, raw.emailAddress);
+  const emailVerified =
+    readOptionalBoolean(
+      raw.emailVerified,
+      raw.EmailVerified,
+      raw.email_verified,
+    ) ?? email != null;
+
+  return {
+    sub: me.userId,
+    email,
+    emailVerified,
+    name: me.displayName ?? undefined,
+    pictureUrl: undefined,
+  };
+}