@neuroncloud/ido-core 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/constants/index.d.ts +4 -0
- package/dist/constants/index.d.ts.map +1 -0
- package/dist/constants/index.js +4 -0
- package/dist/constants/index.js.map +1 -0
- package/dist/constants/interaction.d.ts +11 -0
- package/dist/constants/interaction.d.ts.map +1 -0
- package/dist/constants/interaction.js +11 -0
- package/dist/constants/interaction.js.map +1 -0
- package/dist/constants/oauth.d.ts +42 -0
- package/dist/constants/oauth.d.ts.map +1 -0
- package/dist/constants/oauth.js +42 -0
- package/dist/constants/oauth.js.map +1 -0
- package/dist/constants/oidc.d.ts +11 -0
- package/dist/constants/oidc.d.ts.map +1 -0
- package/dist/constants/oidc.js +11 -0
- package/dist/constants/oidc.js.map +1 -0
- package/dist/crypto/id-token.d.ts +15 -0
- package/dist/crypto/id-token.d.ts.map +1 -0
- package/dist/crypto/id-token.js +99 -0
- package/dist/crypto/id-token.js.map +1 -0
- package/dist/crypto/jwks.d.ts +18 -0
- package/dist/crypto/jwks.d.ts.map +1 -0
- package/dist/crypto/jwks.js +98 -0
- package/dist/crypto/jwks.js.map +1 -0
- package/dist/crypto/jwt.d.ts +12 -0
- package/dist/crypto/jwt.d.ts.map +1 -0
- package/dist/crypto/jwt.js +52 -0
- package/dist/crypto/jwt.js.map +1 -0
- package/dist/crypto/random.d.ts +8 -0
- package/dist/crypto/random.d.ts.map +1 -0
- package/dist/crypto/random.js +22 -0
- package/dist/crypto/random.js.map +1 -0
- package/dist/errors/index.d.ts +3 -0
- package/dist/errors/index.d.ts.map +1 -0
- package/dist/errors/index.js +3 -0
- package/dist/errors/index.js.map +1 -0
- package/dist/errors/protocol-error.d.ts +14 -0
- package/dist/errors/protocol-error.d.ts.map +1 -0
- package/dist/errors/protocol-error.js +16 -0
- package/dist/errors/protocol-error.js.map +1 -0
- package/dist/errors/runtime-error.d.ts +8 -0
- package/dist/errors/runtime-error.d.ts.map +1 -0
- package/dist/errors/runtime-error.js +9 -0
- package/dist/errors/runtime-error.js.map +1 -0
- package/dist/index.d.ts +29 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +18 -0
- package/dist/index.js.map +1 -0
- package/dist/interaction/remediations.d.ts +7 -0
- package/dist/interaction/remediations.d.ts.map +1 -0
- package/dist/interaction/remediations.js +39 -0
- package/dist/interaction/remediations.js.map +1 -0
- package/dist/interaction/response.d.ts +8 -0
- package/dist/interaction/response.d.ts.map +1 -0
- package/dist/interaction/response.js +18 -0
- package/dist/interaction/response.js.map +1 -0
- package/dist/interaction/types.d.ts +65 -0
- package/dist/interaction/types.d.ts.map +1 -0
- package/dist/interaction/types.js +13 -0
- package/dist/interaction/types.js.map +1 -0
- package/dist/oidc/authorization.d.ts +36 -0
- package/dist/oidc/authorization.d.ts.map +1 -0
- package/dist/oidc/authorization.js +89 -0
- package/dist/oidc/authorization.js.map +1 -0
- package/dist/oidc/discovery.d.ts +16 -0
- package/dist/oidc/discovery.d.ts.map +1 -0
- package/dist/oidc/discovery.js +31 -0
- package/dist/oidc/discovery.js.map +1 -0
- package/dist/oidc/introspection.d.ts +7 -0
- package/dist/oidc/introspection.d.ts.map +1 -0
- package/dist/oidc/introspection.js +19 -0
- package/dist/oidc/introspection.js.map +1 -0
- package/dist/oidc/revocation.d.ts +3 -0
- package/dist/oidc/revocation.d.ts.map +1 -0
- package/dist/oidc/revocation.js +9 -0
- package/dist/oidc/revocation.js.map +1 -0
- package/dist/oidc/token.d.ts +22 -0
- package/dist/oidc/token.d.ts.map +1 -0
- package/dist/oidc/token.js +81 -0
- package/dist/oidc/token.js.map +1 -0
- package/dist/oidc/user-info.d.ts +3 -0
- package/dist/oidc/user-info.d.ts.map +1 -0
- package/dist/oidc/user-info.js +15 -0
- package/dist/oidc/user-info.js.map +1 -0
- package/dist/types/configuration.d.ts +36 -0
- package/dist/types/configuration.d.ts.map +1 -0
- package/dist/types/configuration.js +2 -0
- package/dist/types/configuration.js.map +1 -0
- package/dist/types/tokens.d.ts +13 -0
- package/dist/types/tokens.d.ts.map +1 -0
- package/dist/types/tokens.js +2 -0
- package/dist/types/tokens.js.map +1 -0
- package/dist/types/user.d.ts +12 -0
- package/dist/types/user.d.ts.map +1 -0
- package/dist/types/user.js +14 -0
- package/dist/types/user.js.map +1 -0
- package/dist/utils/index.d.ts +2 -0
- package/dist/utils/index.d.ts.map +1 -0
- package/dist/utils/index.js +2 -0
- package/dist/utils/index.js.map +1 -0
- package/dist/utils/values.d.ts +6 -0
- package/dist/utils/values.d.ts.map +1 -0
- package/dist/utils/values.js +60 -0
- package/dist/utils/values.js.map +1 -0
- package/package.json +24 -0
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
import { GrantTypes, Parameters, Suberrors } from "../constants/oauth.js";
|
|
2
|
+
import { ProtocolError } from "../errors/protocol-error.js";
|
|
3
|
+
import { RuntimeError } from "../errors/runtime-error.js";
|
|
4
|
+
import { decodeJwt } from "../crypto/jwt.js";
|
|
5
|
+
import { asRecord, readNumber, readString, readStringList } from "../utils/values.js";
|
|
6
|
+
export async function exchangeToken(http, configuration, request) {
|
|
7
|
+
const response = await http.postForm(configuration.endpoints.token, {
|
|
8
|
+
[Parameters.GrantType]: request.grantType,
|
|
9
|
+
[Parameters.ClientId]: configuration.clientId,
|
|
10
|
+
[Parameters.Scope]: request.scopes ?? configuration.scopes.join(" "),
|
|
11
|
+
...request.extra,
|
|
12
|
+
}, true);
|
|
13
|
+
const body = asRecord(response.body);
|
|
14
|
+
if (response.status >= 200 && response.status < 300 && readString(body, "access_token", "accessToken")) {
|
|
15
|
+
return { tokens: parseTokenResponse(response.body) };
|
|
16
|
+
}
|
|
17
|
+
const error = readString(body, "error") ?? "invalid_request";
|
|
18
|
+
const errorDescription = readString(body, "error_description", "errorDescription");
|
|
19
|
+
const suberror = readString(body, "suberror");
|
|
20
|
+
const continuationToken = readString(body, "continuation_token", "continuationToken");
|
|
21
|
+
if (suberror === Suberrors.MfaRequired && continuationToken) {
|
|
22
|
+
return {
|
|
23
|
+
mfa: {
|
|
24
|
+
continuationToken,
|
|
25
|
+
description: errorDescription,
|
|
26
|
+
availableMethods: readStringList(body, "available_methods", "availableMethods"),
|
|
27
|
+
method: readString(body, "method"),
|
|
28
|
+
},
|
|
29
|
+
};
|
|
30
|
+
}
|
|
31
|
+
const protocolError = new ProtocolError(error, {
|
|
32
|
+
errorDescription: errorDescription ??
|
|
33
|
+
(response.status >= 500 ? `The token endpoint returned HTTP ${response.status}.` : undefined),
|
|
34
|
+
suberror,
|
|
35
|
+
continuationToken,
|
|
36
|
+
});
|
|
37
|
+
if (response.status >= 400 && response.status < 500) {
|
|
38
|
+
return { error: protocolError };
|
|
39
|
+
}
|
|
40
|
+
throw protocolError;
|
|
41
|
+
}
|
|
42
|
+
export async function refreshTokens(http, configuration, refreshToken) {
|
|
43
|
+
const result = await exchangeToken(http, configuration, {
|
|
44
|
+
grantType: GrantTypes.RefreshToken,
|
|
45
|
+
extra: { [Parameters.RefreshToken]: refreshToken },
|
|
46
|
+
});
|
|
47
|
+
if (result.tokens) {
|
|
48
|
+
return result.tokens;
|
|
49
|
+
}
|
|
50
|
+
throw result.error ?? new ProtocolError("invalid_grant", { errorDescription: "The refresh token could not be redeemed." });
|
|
51
|
+
}
|
|
52
|
+
export function parseTokenResponse(body, issuedAt = Math.floor(Date.now() / 1000)) {
|
|
53
|
+
const record = asRecord(body);
|
|
54
|
+
if (!record) {
|
|
55
|
+
throw new RuntimeError("The token response is empty.", { code: "invalid_token_response" });
|
|
56
|
+
}
|
|
57
|
+
const accessToken = readString(record, "access_token", "accessToken");
|
|
58
|
+
const idToken = readString(record, "id_token", "idToken");
|
|
59
|
+
const refreshToken = readString(record, "refresh_token", "refreshToken");
|
|
60
|
+
const expiresIn = readNumber(record, "expires_in", "expiresIn");
|
|
61
|
+
return {
|
|
62
|
+
accessToken: accessToken ? { token: accessToken, expiresAt: expiresAtFrom(accessToken, issuedAt, expiresIn) } : undefined,
|
|
63
|
+
idToken: idToken ? { token: idToken, expiresAt: expiresAtFrom(idToken, issuedAt) } : undefined,
|
|
64
|
+
refreshToken: refreshToken ? { token: refreshToken } : undefined,
|
|
65
|
+
tokenType: readString(record, "token_type", "tokenType"),
|
|
66
|
+
scope: readString(record, "scope"),
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
function expiresAtFrom(token, issuedAt, expiresIn) {
|
|
70
|
+
if (expiresIn !== undefined) {
|
|
71
|
+
return issuedAt + expiresIn;
|
|
72
|
+
}
|
|
73
|
+
try {
|
|
74
|
+
const expiration = decodeJwt(token).payload.exp;
|
|
75
|
+
return typeof expiration === "number" ? expiration : undefined;
|
|
76
|
+
}
|
|
77
|
+
catch {
|
|
78
|
+
return undefined;
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
//# sourceMappingURL=token.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/oidc/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAmBtF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,aAAoC,EACpC,OAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,aAAa,CAAC,SAAS,CAAC,KAAK,EAC7B;QACE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS;QACzC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,QAAQ;QAC7C,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACpE,GAAG,OAAO,CAAC,KAAK;KACjB,EACD,IAAI,CACL,CAAC;IAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;QACvG,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB,CAAC;IAC7D,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;IAEtF,IAAI,QAAQ,KAAK,SAAS,CAAC,WAAW,IAAI,iBAAiB,EAAE,CAAC;QAC5D,OAAO;YACL,GAAG,EAAE;gBACH,iBAAiB;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,gBAAgB,EAAE,cAAc,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;gBAC/E,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;aACnC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE;QAC7C,gBAAgB,EACd,gBAAgB;YAChB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,QAAQ;QACR,iBAAiB;KAClB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,aAAa,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,aAAoC,EACpC,YAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE;QACtD,SAAS,EAAE,UAAU,CAAC,YAAY;QAClC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE;KACnD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,eAAe,EAAE,EAAE,gBAAgB,EAAE,0CAA0C,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACxF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAEhE,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACzH,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9F,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;QAChE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAkB;IACxE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,QAAQ,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAChD,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import type { ProtocolConfiguration, ProtocolHttpClient } from "../types/configuration.js";
|
|
2
|
+
export declare function getUserInfo(http: ProtocolHttpClient, configuration: ProtocolConfiguration, accessToken: string): Promise<Record<string, unknown>>;
|
|
3
|
+
//# sourceMappingURL=user-info.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user-info.d.ts","sourceRoot":"","sources":["../../src/oidc/user-info.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAG3F,wBAAsB,WAAW,CAC/B,IAAI,EAAE,kBAAkB,EACxB,aAAa,EAAE,qBAAqB,EACpC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAalC"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import { ProtocolError } from "../errors/protocol-error.js";
|
|
2
|
+
import { asRecord, readString } from "../utils/values.js";
|
|
3
|
+
export async function getUserInfo(http, configuration, accessToken) {
|
|
4
|
+
const response = await http.get(configuration.endpoints.userinfo, {
|
|
5
|
+
Authorization: `Bearer ${accessToken}`,
|
|
6
|
+
});
|
|
7
|
+
const body = asRecord(response.body);
|
|
8
|
+
if (response.status >= 200 && response.status < 300 && body) {
|
|
9
|
+
return body;
|
|
10
|
+
}
|
|
11
|
+
throw new ProtocolError(readString(body, "error") ?? "invalid_token", {
|
|
12
|
+
errorDescription: readString(body, "error_description", "errorDescription") ?? "The userinfo request failed.",
|
|
13
|
+
});
|
|
14
|
+
}
|
|
15
|
+
//# sourceMappingURL=user-info.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user-info.js","sourceRoot":"","sources":["../../src/oidc/user-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,aAAoC,EACpC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE;QAChE,aAAa,EAAE,UAAU,WAAW,EAAE;KACvC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE;QACpE,gBAAgB,EAAE,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,8BAA8B;KAC9G,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
export interface ProtocolEndpoints {
|
|
2
|
+
authorize: string;
|
|
3
|
+
token: string;
|
|
4
|
+
userinfo: string;
|
|
5
|
+
revocation: string;
|
|
6
|
+
introspection: string;
|
|
7
|
+
jwks: string;
|
|
8
|
+
logout: string;
|
|
9
|
+
initiate: string;
|
|
10
|
+
challenge: string;
|
|
11
|
+
passkeyInitiate: string;
|
|
12
|
+
passkeyComplete: string;
|
|
13
|
+
}
|
|
14
|
+
export interface ProtocolConfiguration {
|
|
15
|
+
issuer: string;
|
|
16
|
+
clientId: string;
|
|
17
|
+
redirectUri?: string;
|
|
18
|
+
postLogoutRedirectUri?: string;
|
|
19
|
+
scopes: string[];
|
|
20
|
+
endpoints: ProtocolEndpoints;
|
|
21
|
+
}
|
|
22
|
+
export interface ProtocolHttpResponse {
|
|
23
|
+
status: number;
|
|
24
|
+
headers: Record<string, string>;
|
|
25
|
+
body: unknown;
|
|
26
|
+
}
|
|
27
|
+
export interface ProtocolHttpClient {
|
|
28
|
+
get(url: string, headers?: Record<string, string>): Promise<ProtocolHttpResponse>;
|
|
29
|
+
postForm(url: string, body: Record<string, string>, clientAuth?: boolean): Promise<ProtocolHttpResponse>;
|
|
30
|
+
}
|
|
31
|
+
export interface KeyValueCache {
|
|
32
|
+
getItem(key: string): string | null;
|
|
33
|
+
setItem(key: string, value: string): void;
|
|
34
|
+
removeItem(key: string): void;
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=configuration.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"configuration.d.ts","sourceRoot":"","sources":["../../src/types/configuration.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1G;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../src/types/configuration.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
export interface Token {
|
|
2
|
+
token: string;
|
|
3
|
+
expiresAt?: number;
|
|
4
|
+
}
|
|
5
|
+
export interface Tokens {
|
|
6
|
+
accessToken?: Token;
|
|
7
|
+
idToken?: Token;
|
|
8
|
+
refreshToken?: Token;
|
|
9
|
+
tokenType?: string;
|
|
10
|
+
scope?: string;
|
|
11
|
+
}
|
|
12
|
+
export type TokenKey = "accessToken" | "idToken" | "refreshToken";
|
|
13
|
+
//# sourceMappingURL=tokens.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/types/tokens.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,cAAc,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/types/tokens.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
export interface UserClaims {
|
|
2
|
+
sub?: string;
|
|
3
|
+
name?: string;
|
|
4
|
+
preferred_username?: string;
|
|
5
|
+
email?: string;
|
|
6
|
+
email_verified?: boolean;
|
|
7
|
+
given_name?: string;
|
|
8
|
+
family_name?: string;
|
|
9
|
+
[claim: string]: unknown;
|
|
10
|
+
}
|
|
11
|
+
export declare function readUserClaims(idToken: string): UserClaims;
|
|
12
|
+
//# sourceMappingURL=user.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/types/user.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAS1D"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { RuntimeError } from "../errors/index.js";
|
|
2
|
+
import { decodeJwt } from "../crypto/jwt.js";
|
|
3
|
+
export function readUserClaims(idToken) {
|
|
4
|
+
try {
|
|
5
|
+
return decodeJwt(idToken).payload;
|
|
6
|
+
}
|
|
7
|
+
catch (error) {
|
|
8
|
+
throw new RuntimeError("The ID token could not be decoded.", {
|
|
9
|
+
code: "invalid_id_token",
|
|
10
|
+
cause: error,
|
|
11
|
+
});
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=user.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user.js","sourceRoot":"","sources":["../../src/types/user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAa7C,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAqB,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE;YAC3D,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
|
|
2
|
+
export declare function readString(value: Record<string, unknown> | undefined, ...keys: string[]): string | undefined;
|
|
3
|
+
export declare function readNumber(value: Record<string, unknown> | undefined, ...keys: string[]): number | undefined;
|
|
4
|
+
export declare function readStringList(value: Record<string, unknown> | undefined, ...keys: string[]): string[] | undefined;
|
|
5
|
+
export declare function readUnknown(value: Record<string, unknown> | undefined, ...keys: string[]): unknown;
|
|
6
|
+
//# sourceMappingURL=values.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../../src/utils/values.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAM5E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAc5G;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAsB5G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,CAclH;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAYlG"}
|
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
export function asRecord(value) {
|
|
2
|
+
if (typeof value !== "object" || value === null || Array.isArray(value)) {
|
|
3
|
+
return undefined;
|
|
4
|
+
}
|
|
5
|
+
return value;
|
|
6
|
+
}
|
|
7
|
+
export function readString(value, ...keys) {
|
|
8
|
+
if (!value) {
|
|
9
|
+
return undefined;
|
|
10
|
+
}
|
|
11
|
+
for (const key of keys) {
|
|
12
|
+
const candidate = value[key];
|
|
13
|
+
if (typeof candidate === "string" && candidate.length > 0) {
|
|
14
|
+
return candidate;
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
return undefined;
|
|
18
|
+
}
|
|
19
|
+
export function readNumber(value, ...keys) {
|
|
20
|
+
if (!value) {
|
|
21
|
+
return undefined;
|
|
22
|
+
}
|
|
23
|
+
for (const key of keys) {
|
|
24
|
+
const candidate = value[key];
|
|
25
|
+
if (typeof candidate === "number" && Number.isFinite(candidate)) {
|
|
26
|
+
return candidate;
|
|
27
|
+
}
|
|
28
|
+
if (typeof candidate === "string" && candidate.length > 0) {
|
|
29
|
+
const parsed = Number(candidate);
|
|
30
|
+
if (Number.isFinite(parsed)) {
|
|
31
|
+
return parsed;
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
return undefined;
|
|
36
|
+
}
|
|
37
|
+
export function readStringList(value, ...keys) {
|
|
38
|
+
const raw = readUnknown(value, ...keys);
|
|
39
|
+
if (Array.isArray(raw)) {
|
|
40
|
+
const items = raw.filter((item) => typeof item === "string" && item.length > 0);
|
|
41
|
+
return items.length > 0 ? items : undefined;
|
|
42
|
+
}
|
|
43
|
+
if (typeof raw === "string" && raw.trim()) {
|
|
44
|
+
const items = raw.split(/[,\s]+/).filter(Boolean);
|
|
45
|
+
return items.length > 0 ? items : undefined;
|
|
46
|
+
}
|
|
47
|
+
return undefined;
|
|
48
|
+
}
|
|
49
|
+
export function readUnknown(value, ...keys) {
|
|
50
|
+
if (!value) {
|
|
51
|
+
return undefined;
|
|
52
|
+
}
|
|
53
|
+
for (const key of keys) {
|
|
54
|
+
if (key in value) {
|
|
55
|
+
return value[key];
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
return undefined;
|
|
59
|
+
}
|
|
60
|
+
//# sourceMappingURL=values.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"values.js","sourceRoot":"","sources":["../../src/utils/values.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0C,EAAE,GAAG,IAAc;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0C,EAAE,GAAG,IAAc;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAEjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0C,EAAE,GAAG,IAAc;IAC1F,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAA0C,EAAE,GAAG,IAAc;IACvF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
|
package/package.json
ADDED
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@neuroncloud/ido-core",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"type": "module",
|
|
5
|
+
"main": "./dist/index.js",
|
|
6
|
+
"types": "./dist/index.d.ts",
|
|
7
|
+
"exports": {
|
|
8
|
+
".": {
|
|
9
|
+
"types": "./dist/index.d.ts",
|
|
10
|
+
"import": "./dist/index.js"
|
|
11
|
+
}
|
|
12
|
+
},
|
|
13
|
+
"files": [
|
|
14
|
+
"dist"
|
|
15
|
+
],
|
|
16
|
+
"sideEffects": false,
|
|
17
|
+
"scripts": {
|
|
18
|
+
"build": "tsc -p tsconfig.json",
|
|
19
|
+
"typecheck": "tsc --noEmit -p tsconfig.json"
|
|
20
|
+
},
|
|
21
|
+
"publishConfig": {
|
|
22
|
+
"access": "public"
|
|
23
|
+
}
|
|
24
|
+
}
|