@mdbase-dev/connect 0.1.0-beta.84 → 0.1.0-beta.86

package/dist/authorization-refresh.d.ts

@@ -0,0 +1,14 @@
+import type { GrantKeyStore } from "./crypto.js";
+import type { StoredToken } from "./internal-types.js";
+interface AuthorizationRefreshOptions {
+    current: StoredToken | null;
+    serverUrl: string;
+    keyStore: GrantKeyStore;
+    signal?: AbortSignal;
+    currentToken(): StoredToken | null;
+    directCapable(token: StoredToken): boolean;
+    removeToken(keyHandle?: string): void;
+    storeTokenResponse(body: any, clientId: string, keyHandle?: string): StoredToken;
+}
+export declare function performAuthorizationRefresh(options: AuthorizationRefreshOptions): Promise<StoredToken>;
+export {};

package/dist/authorization-refresh.js

@@ -0,0 +1,41 @@
+import { authorityProofHeaders } from "./authority-proof.js";
+import { apiError, decodeJsonResponse, oauthErrorCode } from "./runtime-utils.js";
+import { connectError } from "./errors.js";
+export async function performAuthorizationRefresh(options) {
+    const current = options.current;
+    if (!current?.refreshToken) {
+        throw connectError("not_authorized", "Reconnect this application to continue.");
+    }
+    if ((current.refreshExpiresAt ?? 0) <= Date.now()) {
+        throw connectError("relay_authorization_expired", "Direct access is still available on this computer, but using the relay requires reconnecting this application.");
+    }
+    const attemptedRefreshToken = current.refreshToken;
+    const refreshUrl = `${options.serverUrl}/oauth/token`;
+    const refreshBody = new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: current.refreshToken,
+        client_id: current.clientId
+    }).toString();
+    const proof = current.authority
+        ? await authorityProofHeaders(options.keyStore, current, "POST", refreshUrl, refreshBody, current.refreshToken)
+        : {};
+    const response = await fetch(refreshUrl, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded", ...proof },
+        body: refreshBody,
+        signal: options.signal
+    });
+    const body = await decodeJsonResponse(response, "invalid_token_response", "The authorization service returned an invalid token response.");
+    if (!response.ok) {
+        const latest = options.currentToken();
+        if (latest?.refreshToken && latest.refreshToken !== attemptedRefreshToken)
+            return latest;
+        if (!options.directCapable(current))
+            options.removeToken(current.keyHandle);
+        if ((oauthErrorCode(body) ?? body?.error?.code) === "invalid_grant") {
+            throw connectError("authorization_expired", body?.error_description ?? body?.error?.message ?? "Reconnect this application to continue.", { status: response.status });
+        }
+        throw apiError(body, "authorization_expired", "Reconnect this application to continue.", response.status);
+    }
+    return options.storeTokenResponse(body, current.clientId, current.keyHandle);
+}

package/dist/authorization-url.d.ts

@@ -1,4 +1,5 @@
 import type { ConnectProblem } from "@mdbase-dev/connect-protocol";
 export declare function cleanAuthorizationParameters(url: URL): URL;
 export declare function isAuthorizationCallbackUrl(value: string): boolean;
+export declare function authorizationCallbackState(value: string): string | null;
 export declare function authorizationReturnToFromProblem(problem: ConnectProblem): string | undefined;

package/dist/authorization-url.js

@@ -15,6 +15,15 @@ export function isAuthorizationCallbackUrl(value) {
     return url.searchParams.has("state")
         && (url.searchParams.has("code") || url.searchParams.has("error"));
 }
+export function authorizationCallbackState(value) {
+    try {
+        const state = new URL(value).searchParams.get("state");
+        return state && state.length > 0 ? state : null;
+    }
+    catch {
+        return null;
+    }
+}
 export function authorizationReturnToFromProblem(problem) {
     if (!problem.details
         || typeof problem.details !== "object"

package/dist/browser/integrity.json

@@ -1,4 +1,4 @@
 {
   "file": "mdbase-connect.min.js",
-  "integrity": "sha384-l1syvCOespqx2xGAwlKWRSmphqrCw5zoEJLrsvcdCqadK8gQTQcTZJuGTJ7NtIZm"
+  "integrity": "sha384-xB4T3sGGjWDwJkOtsrNfSBOhYxSGOGpRstFke++cfSX3EivOO+d2+QWNBH5yh0qc"
 }