@parra/parra-js-sdk 0.0.25 → 0.2.0

package/dist/AccessToken.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/AccessToken.js

@@ -0,0 +1,63 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var assert_1 = __importDefault(require("assert"));
+var jwt = require('jsonwebtoken');
+var AccessToken = /** @class */ (function () {
+    /**
+     * @constructor
+     * @param {string} tenantId - The account's unique ID to which access is scoped
+     * @param {string} apiKeyId - The signing key's unique ID
+     * @param {string} apiKeySecret - The apiKeySecret to sign the token with
+     * @param {object} options - ...
+     * @param {number} [options.ttl=3600] - Time to live in seconds
+     * @param {string} [options.identity] - The identity of the first person
+     */
+    function AccessToken(options) {
+        assert_1.default(options.tenantId, 'tenantId is required');
+        assert_1.default(options.apiKeyId, 'apiKeyId is required');
+        assert_1.default(options.apiKeySecret, 'apiKeySecret is required');
+        this.tenantId = options.tenantId;
+        this.apiKeyId = options.apiKeyId;
+        this.apiKeySecret = options.apiKeySecret;
+        this.ttl = options.ttl || 3600;
+        this.identity = String(options.identity);
+        this.nbf = options.nbf;
+        this.grants = [];
+    }
+    AccessToken.prototype.addGrant = function (grant) {
+        this.grants.push(grant);
+    };
+    AccessToken.prototype.toJwt = function (algorithm) {
+        algorithm = algorithm || AccessToken.DEFAULT_ALGORITHM;
+        if (!AccessToken.ALGORITHMS.includes(algorithm)) {
+            throw new Error('Algorithm not supported. Allowed values are ' + AccessToken.ALGORITHMS.join(', '));
+        }
+        var grants = this.grants.reduce(function (acc, grant) {
+            acc[grant.key] = grant.toPayload();
+        }, { identity: this.identity });
+        var now = Math.floor(Date.now() / 1000);
+        var payload = {
+            jti: this.apiKeyId + '-' + now,
+            grants: grants,
+            nbf: this.nbf,
+        };
+        var header = {
+            cty: 'parra-fpa;v=1',
+            typ: 'JWT',
+        };
+        return jwt.sign(payload, this.apiKeySecret, {
+            header: header,
+            algorithm: algorithm,
+            issuer: this.apiKeyId,
+            subject: this.tenantId,
+            expiresIn: this.ttl,
+        });
+    };
+    AccessToken.DEFAULT_ALGORITHM = 'HS256';
+    AccessToken.ALGORITHMS = ['HS256', 'HS384', 'HS512'];
+    return AccessToken;
+}());
+module.exports = AccessToken;