@sapphire/plugin-api 7.0.0-next.d27dc1c → 7.0.0-next.d2c9aaa

package/dist/esm/routes/oauth/logout.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/routes/oauth/logout.ts"],"names":["result"],"mappings":";;;;;AAAA,SAAS,oBAAoB;AAC7B,SAAS,iBAAiB;AAC1B,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAC1B,SAAS,aAAa;AAGtB,SAAS,iBAAiB;AAC1B,SAAS,eAAe;AAExB,IAAM,QAAQ,UAAU,UAAU;AAE3B,IAAM,eAAN,MAAM,qBAAoB,MAAM;AAAA,EAC/B,YAAY,SAA8B;AAChD,UAAM,SAAS,EAAE,OAAO,eAAe,CAAC;AACxC,SAAK,UAAU,KAAK,UAAU,OAAO,SAAS;AAAA,EAC/C;AAAA,EAEA,OAAuB,QAAQ,IAAI,EAAE,SAAqB,UAAuB;AAChF,QAAI,CAAC,QAAQ,KAAM,QAAO,SAAS,OAAO,UAAU,YAAY,EAAE,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAEjG,UAAM,SAAS,MAAM,KAAK,OAAO,QAAQ,KAAK,KAAK;AACnD,QAAI,OAAO,GAAI,QAAO,KAAK,QAAQ,QAAQ;AAM3C,QAAI,OAAO,WAAW,UAAU,oBAAoB;AAMnD,YAAM,aAAa,KAAK,kBAAkB,OAAO,QAAQ,IAAI,aAAa,CAAC;AAC3E,UAAI,YAAY;AACf,cAAM,MAAM,UAAU;AAEtB,cAAMA,UAAS,MAAM,KAAK,OAAO,QAAQ,KAAK,KAAK;AACnD,YAAIA,QAAO,GAAI,QAAO,KAAK,QAAQ,QAAQ;AAAA,MAC5C;AAAA,IACD;AAQA,WAAO,SAAS,OAAO,UAAU,mBAAmB,EAAE,KAAK,EAAE,OAAO,gCAAgC,CAAC;AAAA,EACtG;AAAA,EAEQ,QAAQ,UAAuB;AAEtC,aAAS,QAAQ,OAAO,KAAK,UAAU,OAAO,KAAM,MAAM;AAC1D,WAAO,SAAS,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EACvC;AAAA,EAEA,MAAc,OAAO,OAAe;AACnC,UAAM,OAAO,KAAK,UAAU,OAAO;AAkBnC,UAAM,SAAS,MAAM,MAAM,aAAa,oBAAoB;AAAA,MAC3D,QAAQ;AAAA,MACR,MAAM,UAAU;AAAA,QACf;AAAA;AAAA,QAEA,WAAW,KAAK;AAAA,QAChB,eAAe,KAAK;AAAA;AAAA,MAErB,CAAC;AAAA,MACD,SAAS;AAAA,QACR,gBAAgB;AAAA,MACjB;AAAA,IACD,CAAC;AAED,WAAO;AAAA,EACR;AAAA,EAEQ,kBAAkB,YAA2B;AAGpD,WAAO,eAAe,OAAO,MAAO,OAAO,UAAU,IAAI;AAAA,EAC1D;AACD;AAvFuC;AAAhC,IAAM,cAAN","sourcesContent":["import { OAuth2Routes } from 'discord.js';\nimport { stringify } from 'querystring';\nimport { fetch } from 'undici';\nimport { promisify } from 'util';\nimport { Route } from '../../lib/structures/Route';\nimport type { ApiRequest } from '../../lib/structures/api/ApiRequest';\nimport type { ApiResponse } from '../../lib/structures/api/ApiResponse';\nimport { HttpCodes } from '../../lib/structures/http/HttpCodes';\nimport { methods } from '../../lib/structures/http/HttpMethods';\n\nconst sleep = promisify(setTimeout);\n\nexport class PluginRoute extends Route {\n\tpublic constructor(context: Route.LoaderContext) {\n\t\tsuper(context, { route: 'oauth/logout' });\n\t\tthis.enabled = this.container.server.auth !== null;\n\t}\n\n\tpublic override async [methods.POST](request: ApiRequest, response: ApiResponse) {\n\t\tif (!request.auth) return response.status(HttpCodes.Unauthorized).json({ error: 'Unauthorized.' });\n\n\t\tconst result = await this.revoke(request.auth.token);\n\t\tif (result.ok) return this.success(response);\n\n\t\t// RFC 7009 2.2.1. If the server responds with HTTP status code 503, the client must assume the token still\n\t\t// exists and may retry after a reasonable delay.\n\t\t// The server may include a \"Retry-After\" header in the response to indicate how long the service is expected to\n\t\t// be unavailable to the requesting client.\n\t\tif (result.status === HttpCodes.ServiceUnavailable) {\n\t\t\t// RFC 7231 7.1.3. Servers send the \"Retry-After\" header field to indicate how long the user agent ought to\n\t\t\t// wait before making a follow-up request.\n\t\t\t//\n\t\t\t// The value of this field can be either an HTTP-date or a number of seconds to delay after the response is\n\t\t\t// received.\n\t\t\tconst retryAfter = this.processRetryAfter(result.headers.get('Retry-After'));\n\t\t\tif (retryAfter) {\n\t\t\t\tawait sleep(retryAfter);\n\n\t\t\t\tconst result = await this.revoke(request.auth.token);\n\t\t\t\tif (result.ok) return this.success(response);\n\t\t\t}\n\t\t}\n\n\t\t// RFC 7009 2.2. The authorization server responds with HTTP status code 200 if the token has been revoked\n\t\t// successfully or if the client submitted an invalid token.\n\t\t//\n\t\t// Note: invalid tokens do not cause an error response since the client cannot handle such an error in a\n\t\t// reasonable way. Moreover, the purpose of the revocation request, invalidating the particular token, is\n\t\t// already achieved.\n\t\treturn response.status(HttpCodes.InternalServerError).json({ error: 'Unexpected error from server.' });\n\t}\n\n\tprivate success(response: ApiResponse) {\n\t\t// Sending an empty cookie with \"expires\" set to 1970-01-01 makes the browser instantly remove the cookie.\n\t\tresponse.cookies.remove(this.container.server.auth!.cookie);\n\t\treturn response.json({ success: true });\n\t}\n\n\tprivate async revoke(token: string) {\n\t\tconst auth = this.container.server.auth!;\n\n\t\t// RFC 7009 2.1.\n\t\t// The following parameters must be formatted as \"application/x-www-form-urlencoded\" in the HTTP request-body:\n\t\t//\n\t\t// - token: The token the client wants to be revoked.\n\t\t// - token_type_hint: [Optional]: `access_token` (RFC 6749 1.4), `refresh_token` (RFC 6749 1.5)\n\t\t//\n\t\t// The client also includes its authentication credentials, as described in RFC 6749 2.3.\n\t\t//\n\t\t// RFC 6749 2.3.1.\n\t\t// The authorization server MAY include the client credentials in the request - body using the following parameters:\n\t\t//\n\t\t// - client_id: The client identifier issued to the client during the registration process (RFC 6749 2.2)\n\t\t// - client_secret: The client secret.\n\t\t//\n\t\t// RFC 7009 2.2.\n\t\t// The content of the response body is ignored by the client as all necessary information is conveyed in the response code.\n\t\tconst result = await fetch(OAuth2Routes.tokenRevocationURL, {\n\t\t\tmethod: 'POST',\n\t\t\tbody: stringify({\n\t\t\t\ttoken,\n\t\t\t\t/* eslint-disable @typescript-eslint/naming-convention */\n\t\t\t\tclient_id: auth.id,\n\t\t\t\tclient_secret: auth.secret\n\t\t\t\t/* eslint-enable @typescript-eslint/naming-convention */\n\t\t\t}),\n\t\t\theaders: {\n\t\t\t\t'content-type': 'application/x-www-form-urlencoded'\n\t\t\t}\n\t\t});\n\n\t\treturn result;\n\t}\n\n\tprivate processRetryAfter(retryAfter: string | null) {\n\t\t// Discord sends Retry-After in seconds, never an HTTP-date, therefore, we will assume this behaviour.\n\t\t// Either way, if it's not present, we will retry in 5 seconds.\n\t\treturn retryAfter === null ? 5000 : Number(retryAfter) * 1000;\n\t}\n}\n"]}