@scalekit-sdk/node 1.0.5 → 1.0.7

package/src/scalekit.ts

@@ -7,7 +7,7 @@ import CoreClient from './core';
 import DomainClient from './domain';
 import OrganizationClient from './organization';
 import { AuthorizationUrlOptions, AuthenticationOptions, GrantType, AuthenticationResponse } from './types/scalekit';
-import { IdTokenClaim, User } from './types/auth';
+import { IdpInitiatedLoginClaims, IdTokenClaim, User } from './types/auth';
 
 const authorizeEndpoint = "oauth/authorize";
 
@@ -98,7 +98,8 @@ export default class ScalekitClient {
       ...(options.connectionId && { connection_id: options.connectionId }),
       ...(options.organizationId && { organization_id: options.organizationId }),
       ...(options.codeChallenge && { code_challenge: options.codeChallenge }),
-      ...(options.codeChallengeMethod && { code_challenge_method: options.codeChallengeMethod })
+      ...(options.codeChallengeMethod && { code_challenge_method: options.codeChallengeMethod }),
+      ...(options.provider && { provider: options.provider })
     })
 
     return `${this.coreClient.envUrl}/${authorizeEndpoint}?${qs}`
@@ -142,6 +143,16 @@ export default class ScalekitClient {
     }
   }
 
+  /**
+  * Get the idp initiated login claims
+  * 
+  * @param {string} idpInitiatedLoginToken The idp_initiated_login query param from the URL
+  * @returns {object} Returns the idp initiated login claims
+  */
+  async getIdpInitiatedLoginClaims(idpInitiatedLoginToken: string): Promise<IdpInitiatedLoginClaims> {
+    return await this.validateToken<IdpInitiatedLoginClaims>(idpInitiatedLoginToken);
+  }
+
   /**
    * Validates the access token. 
    * 
@@ -149,15 +160,30 @@ export default class ScalekitClient {
    * @return {Promise<boolean>} Returns true if the token is valid, false otherwise.
    */
   async validateAccessToken(token: string): Promise<boolean> {
+    try {
+      await this.validateToken(token);
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  /**
+   * Validate token
+   * 
+   * @param {string} token The token to be validated
+   * @return {Promise<T>} Returns the payload of the token
+   */
+  private async validateToken<T>(token: string): Promise<T> {
     await this.coreClient.getJwks();
-    const JWKS = jose.createLocalJWKSet({
+    const jwks = jose.createLocalJWKSet({
       keys: this.coreClient.keys
     })
     try {
-      await jose.jwtVerify(token, JWKS);
-      return true;
-    } catch (error) {
-      return false;
+      const { payload } = await jose.jwtVerify<T>(token, jwks);
+      return payload;
+    } catch (_) {
+      throw new Error("Invalid token");
     }
   }
 }

package/src/types/auth.ts

@@ -62,4 +62,11 @@ export type TokenResponse = {
   access_token: string;
   id_token: string;
   expires_in: number;
+}
+
+export type IdpInitiatedLoginClaims ={
+  connection_id: string;
+  organization_id: string;
+  login_hint: string;
+  relay_state?: string;
 }