@oneidentity/safeguard 1.0.5 → 7.4.0

package/src/safeguardJsAccessTokenChecker.js

@@ -40,5 +40,92 @@ const SafeguardJsAccessTokenChecker = {
     }
 }
 
+/**
+ * SafeguardJsCodeStateChecker
+ *
+ * This is used to check for incoming pkce code and state from Rsts. Upon successful authentication
+ * with Rsts, Rsts will redirect to a given page with the code as a parameter.  That page
+ * needs to have this accessTokenCheck.js file so that the code can be identified, and stored in
+ * the appropriate storage location.
+ *
+ * By default this uses the SafeguardJs.Storage class. If a custom Storage class has been implemented,
+ * the check method should be called with the appropriate storage object instead.
+ */
+const SafeguardJsCodeStateChecker = {
+    /**
+     * Gets the code from the parameters.
+     */
+    getCode() {
+        var index = window.location.href.indexOf("code=");
+        if (index == -1){
+            return null;
+        }
+        var token = window.location.href.substring(index+5);
+        var eindex = token.search(/[&#\/]/);
+        if (eindex > -1){
+            return token.substring(0, eindex);
+        }
+        return token;
+    },
+    /**
+     * Gets the state from the parameters.
+     */
+        getState() {
+            var index = window.location.href.indexOf("state=");
+            if (index == -1){
+                return null;
+            }
+            var token = window.location.href.substring(index+6);
+            var eindex = token.search(/[&#\/]/);
+            if (eindex > -1){
+                return token.substring(0, eindex);
+            }
+            return token;
+        },
+
+    /**
+     * Checks for and stores a code and state in the provided storage location. The page is then redirected
+     * to itself omitting the access token parameter.
+     * @param {SafeguardJs.Storage} storage The storage location the access token should be saved to.
+     */
+    check(storage) {
+        var code = this.getCode();
+        var state = this.getState();
+        if (code && state) {
+            storage.setCode(code);
+            storage.setState(state);
+            window.location.href = `${window.location.protocol}//${window.location.host}${window.location.pathname}`;
+        }
+    }
+}
+
+/**
+ * SafeguardJsNewLoginChecker
+ *
+ * This is used to check for incoming new login. Upon successful authentication
+ * with Rsts, Rsts will redirect to a given page with the access token as a parameter.  That page
+ * needs to have this accessTokenCheck.js file so that the token can be identified, and stored in
+ * the appropriate storage location.
+ *
+ * By default this uses the SafeguardJs.Storage class. If a custom Storage class has been implemented,
+ * the check method should be called with the appropriate storage object instead.
+ */
+const SafeguardJsNewLoginChecker = {
+    /**
+     * Checks for and stores an access token in the provided storage location. The page is then redirected
+     * to itself omitting the access token parameter.
+     * @param {SafeguardJs.Storage} storage The storage location the access token should be saved to.
+     */
+    check(storage) {
+        if (window.location.href.toLowerCase().indexOf("?newlogin") > -1) {
+            storage.setNewLogin(true);
+        }
+    }
+}
+
 // Perform the access token check whenever the script is loaded.
 SafeguardJsAccessTokenChecker.check(SafeguardJs.Storage);
+// Perform the code and state check whenever the script is loaded.
+SafeguardJsCodeStateChecker.check(SafeguardJs.Storage);
+// Perform the new login check whenever the script is loaded.
+SafeguardJsNewLoginChecker.check(SafeguardJs.Storage);

package/src/safeguardJsAccessTokenChecker.min.js

@@ -1 +1 @@
-const o={getAccessToken(){var o=window.location.href.indexOf("access_token=");if(-1==o)return null;var n=window.location.href.substring(o+13),o=n.search(/[&#\/]/);return-1<o?n.substring(0,o):n},check(o){var n=this.getAccessToken();n&&(o.setAccessToken(n),window.location.href=`${window.location.protocol}//${window.location.host}${window.location.pathname}`)}};o.check(SafeguardJs.Storage);
+var o={getCode(){var o,e=window.location.href.indexOf("code=");return-1==e?null:-1<(o=(e=window.location.href.substring(e+5)).search(/[&#\/]/))?e.substring(0,o):e},getState(){var o,e=window.location.href.indexOf("state=");return-1==e?null:-1<(o=(e=window.location.href.substring(e+6)).search(/[&#\/]/))?e.substring(0,o):e},check(o){var e=this.getCode(),n=this.getState();e&&n&&(o.setCode(e),o.setState(n),window.location.href=window.location.protocol+"//"+window.location.host+window.location.pathname)}};const e=function(o){-1<window.location.href.toLowerCase().indexOf("?newlogin")&&o.setNewLogin(!0)};({getAccessToken(){var o,e=window.location.href.indexOf("access_token=");return-1==e?null:-1<(o=(e=window.location.href.substring(e+13)).search(/[&#\/]/))?e.substring(0,o):e},check(o){var e=this.getAccessToken();e&&(o.setAccessToken(e),window.location.href=window.location.protocol+"//"+window.location.host+window.location.pathname)}}).check(SafeguardJs.Storage),o.check(SafeguardJs.Storage),e(SafeguardJs.Storage);