@lvce-editor/auth-worker 3.18.1 → 3.19.0

package/dist/authWorkerMain.js

@@ -1253,7 +1253,8 @@ const setAuthBackendUrl = backendUrl => {
 };
 
 const state$3 = {
-  platform: Web
+  platform: Web,
+  useNativeAuth: false
 };
 const getAuthPlatform = () => {
   return state$3.platform;
@@ -1262,6 +1263,12 @@ const setAuthPlatform = value => {
   state$3.platform = value;
 };
 
+// Native shells can use loopback OAuth without Electron's process or secret storage.
+const setUseNativeAuth = value => {
+  state$3.useNativeAuth = value;
+};
+const getUseNativeAuth = () => state$3.useNativeAuth;
+
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
   const NAME = 'oauth4webapi';
@@ -3118,7 +3125,16 @@ const getElectronAuthorizationCode = async uid => {
 const waitForElectronBackendLogin = async (backendUrl, uid, redirectUri, codeVerifier, timeoutMs = 30_000, pollIntervalMs = 1000, getAuthorizationCode = getElectronAuthorizationCode, exchangeAuthorizationCode = exchangeElectronAuthorizationCode, getUserName = getOidcUserName) => {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
-    const authorizationCode = await getAuthorizationCode(uid);
+    let timer;
+    const timeout = new Promise(resolve => {
+      timer = setTimeout(resolve, Math.max(0, deadline - Date.now()));
+    });
+    let authorizationCode;
+    try {
+      authorizationCode = await Promise.race([getAuthorizationCode(uid), timeout]);
+    } finally {
+      clearTimeout(timer);
+    }
     if (hasAuthorizationCode(authorizationCode)) {
       const tokenResponse = await exchangeAuthorizationCode(backendUrl, authorizationCode, redirectUri, codeVerifier);
       const authAccessTokenExpiresAt = getAccessTokenExpiresAt(tokenResponse.expiresIn);
@@ -3159,37 +3175,45 @@ const getMockLoginResult = async (signingInState, persistResult) => {
   return persistResult(getLoggedInState(signingInState, response));
 };
 const getInteractiveLoginResult = async (backendUrl, platform, signingInState, persistResult, selectAccount) => {
-  const authUseRedirect = getAuthUseRedirect(platform);
-  const uid = 0;
-  const {
-    clientId,
-    codeVerifier,
-    loginUrl,
-    redirectUri,
-    state
-  } = await getBackendLoginRequest(backendUrl, platform, uid);
-  if (platform !== Electron) {
-    const returnUrl = await getCurrentHref();
-    await savePendingOidcAuthState({
+  const nativeAuth = getUseNativeAuth();
+  const transportPlatform = nativeAuth ? Electron : platform;
+  const authUseRedirect = getAuthUseRedirect(transportPlatform);
+  const uid = nativeAuth ? globalThis.crypto.randomUUID() : 0;
+  try {
+    const {
       clientId,
       codeVerifier,
+      loginUrl,
       redirectUri,
-      returnUrl,
       state
+    } = await getBackendLoginRequest(backendUrl, transportPlatform, uid);
+    if (transportPlatform !== Electron) {
+      const returnUrl = await getCurrentHref();
+      await savePendingOidcAuthState({
+        clientId,
+        codeVerifier,
+        redirectUri,
+        returnUrl,
+        state
+      });
+    }
+    await invoke$1('Open.openUrl', selectAccount ? getAccountLoginUrl(backendUrl, loginUrl) : loginUrl, platform, authUseRedirect);
+    if (transportPlatform !== Electron && authUseRedirect) {
+      return signingInState;
+    }
+    const authState = transportPlatform === Electron ? await waitForElectronBackendLogin(backendUrl, uid, redirectUri, codeVerifier) : await waitForBackendLogin(backendUrl);
+    if (transportPlatform !== Electron) {
+      await clearPendingOidcAuthState();
+    }
+    return persistResult({
+      ...authState,
+      authClientId: clientId
     });
+  } finally {
+    if (nativeAuth) {
+      await invoke$3('OAuthServer.dispose', String(uid));
+    }
   }
-  await invoke$1('Open.openUrl', selectAccount ? getAccountLoginUrl(backendUrl, loginUrl) : loginUrl, platform, authUseRedirect);
-  if (platform !== Electron && authUseRedirect) {
-    return signingInState;
-  }
-  const authState = platform === Electron ? await waitForElectronBackendLogin(backendUrl, uid, redirectUri, codeVerifier) : await waitForBackendLogin(backendUrl);
-  if (platform !== Electron) {
-    await clearPendingOidcAuthState();
-  }
-  return persistResult({
-    ...authState,
-    authClientId: clientId
-  });
 };
 const handleClickLogin = async (options, persistResult = persistLoginResult) => {
   const {
@@ -3212,7 +3236,7 @@ const handleClickLogin = async (options, persistResult = persistLoginResult) =>
     if (mockLoginResult) {
       return mockLoginResult;
     }
-    return getInteractiveLoginResult(backendUrl, platform, signingInState, persistResult, options.selectAccount === true);
+    return await getInteractiveLoginResult(backendUrl, platform, signingInState, persistResult, options.selectAccount === true);
   } catch (error) {
     await clearPendingOidcAuthState();
     const errorMessage = error instanceof Error && error.message ? error.message : 'Backend authentication failed.';
@@ -3524,8 +3548,11 @@ const initializeMainProcess = async () => {
 const configure = async options => {
   setAuthBackendUrl(options.backendUrl);
   setAuthPlatform(options.platform);
+  setUseNativeAuth(options.useNativeAuth === true);
   if (options.platform === Electron) {
     await Promise.all([initializeAuthProcess(), initializeMainProcess()]);
+  } else if (options.useNativeAuth) {
+    await initializeAuthProcess();
   }
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/auth-worker",
-  "version": "3.18.1",
+  "version": "3.19.0",
   "description": "Auth Worker",
   "repository": {
     "type": "git",