@smg-automotive/auth 8.1.5-instrumentation-with-debug.1 → 8.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -66
- package/dist/cjs/client/hooks/useUser.js +1 -1
- package/dist/cjs/client/hooks/useUser.js.map +1 -1
- package/dist/cjs/server/helpers/getAccessToken.js +0 -12
- package/dist/cjs/server/helpers/getAccessToken.js.map +1 -1
- package/dist/cjs/server/helpers/getUser.js +7 -40
- package/dist/cjs/server/helpers/getUser.js.map +1 -1
- package/dist/cjs/server/hooks/onCallbackFactory.d.ts +1 -1
- package/dist/cjs/server/hooks/onCallbackFactory.js +14 -1
- package/dist/cjs/server/hooks/onCallbackFactory.js.map +1 -1
- package/dist/cjs/server/middleware/index.js +0 -24
- package/dist/cjs/server/middleware/index.js.map +1 -1
- package/dist/cjs/server/middleware/logout.js +0 -20
- package/dist/cjs/server/middleware/logout.js.map +1 -1
- package/dist/cjs/server/middleware/proactivelyRefreshAccessToken.js +3 -23
- package/dist/cjs/server/middleware/proactivelyRefreshAccessToken.js.map +1 -1
- package/dist/cjs/server/middleware/profile.js +2 -22
- package/dist/cjs/server/middleware/profile.js.map +1 -1
- package/dist/cjs/server/middleware/protectRoute.js +1 -17
- package/dist/cjs/server/middleware/protectRoute.js.map +1 -1
- package/dist/cjs/server/middleware/token.js +0 -14
- package/dist/cjs/server/middleware/token.js.map +1 -1
- package/dist/esm/client/hooks/useUser.js +1 -1
- package/dist/esm/client/hooks/useUser.js.map +1 -1
- package/dist/esm/server/helpers/getAccessToken.js +0 -8
- package/dist/esm/server/helpers/getAccessToken.js.map +1 -1
- package/dist/esm/server/helpers/getUser.js +7 -36
- package/dist/esm/server/helpers/getUser.js.map +1 -1
- package/dist/esm/server/hooks/onCallbackFactory.d.ts +1 -1
- package/dist/esm/server/hooks/onCallbackFactory.js +14 -1
- package/dist/esm/server/hooks/onCallbackFactory.js.map +1 -1
- package/dist/esm/server/middleware/index.js +0 -20
- package/dist/esm/server/middleware/index.js.map +1 -1
- package/dist/esm/server/middleware/logout.js +0 -16
- package/dist/esm/server/middleware/logout.js.map +1 -1
- package/dist/esm/server/middleware/proactivelyRefreshAccessToken.js +3 -19
- package/dist/esm/server/middleware/proactivelyRefreshAccessToken.js.map +1 -1
- package/dist/esm/server/middleware/profile.js +2 -18
- package/dist/esm/server/middleware/profile.js.map +1 -1
- package/dist/esm/server/middleware/protectRoute.js +1 -13
- package/dist/esm/server/middleware/protectRoute.js.map +1 -1
- package/dist/esm/server/middleware/token.js +0 -10
- package/dist/esm/server/middleware/token.js.map +1 -1
- package/package.json +3 -5
package/README.md
CHANGED
|
@@ -237,72 +237,6 @@ export default function middleware(
|
|
|
237
237
|
|
|
238
238
|
Auth0 integration routes are handled by the middleware. You need to make sure that the middleware is invoked for all the route patters except the static assets, image optimisation and metadata files.
|
|
239
239
|
|
|
240
|
-
### Debugging
|
|
241
|
-
|
|
242
|
-
This package includes comprehensive debug instrumentation using the [`debug`](https://www.npmjs.com/package/debug) package to help track and troubleshoot authentication issues. To enable debug logging, set the `DEBUG` environment variable.
|
|
243
|
-
|
|
244
|
-
#### Available Debug Namespaces
|
|
245
|
-
|
|
246
|
-
The package uses the namespace pattern `@smg-automotive/auth:*` with the following sub-namespaces:
|
|
247
|
-
|
|
248
|
-
- `@smg-automotive/auth:middleware` - Main auth middleware flow
|
|
249
|
-
- Request processing, route checks, Auth0 middleware calls, cross-domain logout detection
|
|
250
|
-
- `@smg-automotive/auth:user` - User retrieval and enrichment
|
|
251
|
-
- Session retrieval, user fetching, user enrichment with entitlements
|
|
252
|
-
- `@smg-automotive/auth:token` - Token operations
|
|
253
|
-
- Token refresh decisions (including expiration times), access token retrieval, token endpoint handling
|
|
254
|
-
- `@smg-automotive/auth:protectRoute` - Route protection
|
|
255
|
-
- Protected route checks, session validation, token refresh for protected routes
|
|
256
|
-
- `@smg-automotive/auth:logout` - Logout operations
|
|
257
|
-
- Cross-domain logout flow, cookie deletion, returnTo URL validation
|
|
258
|
-
- `@smg-automotive/auth:profile` - User profile handling
|
|
259
|
-
- Profile requests, user enrichment, entitlement loading errors
|
|
260
|
-
|
|
261
|
-
#### Usage
|
|
262
|
-
|
|
263
|
-
Enable all auth debugging:
|
|
264
|
-
|
|
265
|
-
```bash
|
|
266
|
-
DEBUG=@smg-automotive/auth:*
|
|
267
|
-
```
|
|
268
|
-
|
|
269
|
-
Enable specific namespaces:
|
|
270
|
-
|
|
271
|
-
```bash
|
|
272
|
-
# Enable middleware and token debugging
|
|
273
|
-
DEBUG=@smg-automotive/auth:middleware,@smg-automotive/auth:token
|
|
274
|
-
|
|
275
|
-
# Enable user and profile debugging
|
|
276
|
-
DEBUG=@smg-automotive/auth:user:@smg-automotive/auth:profile
|
|
277
|
-
```
|
|
278
|
-
|
|
279
|
-
Enable debugging in your Next.js application by setting the environment variable:
|
|
280
|
-
|
|
281
|
-
```bash
|
|
282
|
-
# .env.local
|
|
283
|
-
DEBUG=@smg-automotive/auth:*
|
|
284
|
-
```
|
|
285
|
-
|
|
286
|
-
Or pass it when running your application:
|
|
287
|
-
|
|
288
|
-
```bash
|
|
289
|
-
DEBUG=@smg-automotive/auth:* npm run dev
|
|
290
|
-
```
|
|
291
|
-
|
|
292
|
-
#### What Gets Logged
|
|
293
|
-
|
|
294
|
-
The debug instrumentation logs:
|
|
295
|
-
|
|
296
|
-
- **Request flow**: Path, host, protocol, and method for each request
|
|
297
|
-
- **Session state**: Whether sessions exist, user presence, session data retrieval
|
|
298
|
-
- **Token operations**: Token expiration times, refresh decisions, token retrieval success/failure
|
|
299
|
-
- **User data**: User IDs, seller IDs, email addresses (when available), entitlement presence
|
|
300
|
-
- **Route protection**: Protected route checks, redirect decisions
|
|
301
|
-
- **Logout flow**: Cross-domain logout initiation, cookie deletion operations
|
|
302
|
-
- **Errors**: Authentication errors with error codes and messages (without exposing sensitive tokens)
|
|
303
|
-
|
|
304
|
-
All debug logs are structured and include relevant context while avoiding sensitive data like tokens or passwords.
|
|
305
|
-
|
|
306
240
|
### Fixtures
|
|
307
241
|
|
|
308
242
|
This package also provides fixture factories for the:
|
|
@@ -18,7 +18,7 @@ const userFetcher = async (url) => {
|
|
|
18
18
|
};
|
|
19
19
|
const useUser = () => {
|
|
20
20
|
const config = useAuthConfig.useAuthConfig();
|
|
21
|
-
const { data, error, isLoading, mutate } = useSWR__default.default(config.userProfileEndpoint, userFetcher);
|
|
21
|
+
const { data, error, isLoading, mutate } = useSWR__default.default(config.userProfileEndpoint, userFetcher, { shouldRetryOnError: false });
|
|
22
22
|
const invalidate = React.useCallback(() => mutate(), [mutate]);
|
|
23
23
|
return {
|
|
24
24
|
user: data ?? null,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"useUser.js","sources":["../../../../../src/client/hooks/useUser.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AASA;AACE;AACA;AACE;;AAGF;AACF;AAEO;AACL
|
|
1
|
+
{"version":3,"file":"useUser.js","sources":["../../../../../src/client/hooks/useUser.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AASA;AACE;AACA;AACE;;AAGF;AACF;AAEO;AACL;;AAQA;;;;;;;AAQF;;"}
|
|
@@ -1,24 +1,12 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
var debug = require('debug');
|
|
4
3
|
var getAuth0Instance = require('../getAuth0Instance.js');
|
|
5
4
|
|
|
6
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
7
|
-
|
|
8
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
9
|
-
|
|
10
|
-
const log = debug__default.default('@smg-automotive/auth:token');
|
|
11
5
|
const getAccessToken = async ({ protocol, host, context, }) => {
|
|
12
|
-
log('Getting access token', {
|
|
13
|
-
host,
|
|
14
|
-
protocol,
|
|
15
|
-
hasRequest: !!context?.request,
|
|
16
|
-
});
|
|
17
6
|
const auth0Instance = getAuth0Instance.getAuth0Instance({ protocol, host });
|
|
18
7
|
const { token } = context?.request
|
|
19
8
|
? await auth0Instance.getAccessToken(context.request, context.response)
|
|
20
9
|
: await auth0Instance.getAccessToken();
|
|
21
|
-
log('Access token retrieved', { tokenLength: token?.length || 0 });
|
|
22
10
|
return token;
|
|
23
11
|
};
|
|
24
12
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getAccessToken.js","sources":["../../../../../src/server/helpers/getAccessToken.ts"],"sourcesContent":[null],"names":["
|
|
1
|
+
{"version":3,"file":"getAccessToken.js","sources":["../../../../../src/server/helpers/getAccessToken.ts"],"sourcesContent":[null],"names":["getAuth0Instance"],"mappings":";;;;AAIO,MAAM,cAAc,GAAG,OAAO,EACnC,QAAQ,EACR,IAAI,EACJ,OAAO,GACwC,KAAI;IACnD,MAAM,aAAa,GAAGA,iCAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC1D,IAAA,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE;AACzB,UAAE,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ;AACtE,UAAE,MAAM,aAAa,CAAC,cAAc,EAAE;AACxC,IAAA,OAAO,KAAK;AACd;;;;"}
|
|
@@ -1,68 +1,35 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
var debug = require('debug');
|
|
4
3
|
var getAccessToken = require('./getAccessToken.js');
|
|
5
4
|
var getAuth0Instance = require('../getAuth0Instance.js');
|
|
6
5
|
var session = require('../../lib/enrichUser/session.js');
|
|
7
6
|
|
|
8
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
9
|
-
|
|
10
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
11
|
-
|
|
12
|
-
const log = debug__default.default('@smg-automotive/auth:user');
|
|
13
7
|
const getSessionData = async ({ protocol, host, context, }) => {
|
|
14
|
-
log('Retrieving session data', {
|
|
15
|
-
host,
|
|
16
|
-
protocol,
|
|
17
|
-
hasRequest: !!context?.request,
|
|
18
|
-
});
|
|
19
8
|
const auth0Instance = getAuth0Instance.getAuth0Instance({ host, protocol });
|
|
20
|
-
|
|
21
|
-
?
|
|
22
|
-
:
|
|
23
|
-
log('Session retrieved', { hasSession: !!session, hasUser: !!session?.user });
|
|
24
|
-
return session;
|
|
9
|
+
return context?.request
|
|
10
|
+
? auth0Instance.getSession(context.request)
|
|
11
|
+
: auth0Instance.getSession();
|
|
25
12
|
};
|
|
26
13
|
const getUser = async ({ context, host, protocol, }) => {
|
|
27
|
-
log('Getting user', { host, protocol });
|
|
28
14
|
const sessionData = await getSessionData({ host, protocol, context });
|
|
29
|
-
if (!sessionData || !sessionData.user)
|
|
30
|
-
log('No session or user found');
|
|
15
|
+
if (!sessionData || !sessionData.user)
|
|
31
16
|
return null;
|
|
32
|
-
|
|
33
|
-
const user = sessionData.user;
|
|
34
|
-
log('User retrieved', {
|
|
35
|
-
userId: user.userId,
|
|
36
|
-
sellerId: user.sellerId,
|
|
37
|
-
email: user.email,
|
|
38
|
-
});
|
|
39
|
-
return user;
|
|
17
|
+
return sessionData.user;
|
|
40
18
|
};
|
|
41
19
|
const getEnrichedUser = async ({ brand, context, host, protocol, }) => {
|
|
42
|
-
log('Getting enriched user', { brand, host, protocol });
|
|
43
20
|
const user = await getUser({ host, protocol, context });
|
|
44
|
-
if (!user)
|
|
45
|
-
log('No user found, cannot enrich');
|
|
21
|
+
if (!user)
|
|
46
22
|
return null;
|
|
47
|
-
}
|
|
48
|
-
log('Retrieving access token for enrichment');
|
|
49
23
|
const accessToken = await getAccessToken.getAccessToken({
|
|
50
24
|
host,
|
|
51
25
|
protocol,
|
|
52
26
|
context,
|
|
53
27
|
});
|
|
54
|
-
|
|
55
|
-
const enrichedUser = await session.enrichUser({
|
|
28
|
+
return session.enrichUser({
|
|
56
29
|
user,
|
|
57
30
|
accessToken,
|
|
58
31
|
brand,
|
|
59
32
|
});
|
|
60
|
-
log('User enriched successfully', {
|
|
61
|
-
userId: enrichedUser.userId,
|
|
62
|
-
sellerId: enrichedUser.sellerId,
|
|
63
|
-
hasEntitlements: !!enrichedUser.entitlements,
|
|
64
|
-
});
|
|
65
|
-
return enrichedUser;
|
|
66
33
|
};
|
|
67
34
|
|
|
68
35
|
exports.getEnrichedUser = getEnrichedUser;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getUser.js","sources":["../../../../../src/server/helpers/getUser.ts"],"sourcesContent":[null],"names":["
|
|
1
|
+
{"version":3,"file":"getUser.js","sources":["../../../../../src/server/helpers/getUser.ts"],"sourcesContent":[null],"names":["getAuth0Instance","getAccessToken","enrichUser"],"mappings":";;;;;;AAUA,MAAM,cAAc,GAAG,OAAO,EAC5B,QAAQ,EACR,IAAI,EACJ,OAAO,GACwC,KAAI;IACnD,MAAM,aAAa,GAAGA,iCAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAE1D,OAAO,OAAO,EAAE;UACZ,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO;AAC1C,UAAE,aAAa,CAAC,UAAU,EAAE;AAChC,CAAC;AAEM,MAAM,OAAO,GAAG,OAAO,EAC5B,OAAO,EACP,IAAI,EACJ,QAAQ,GAEY,KAAiC;AACrD,IAAA,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACrE,IAAA,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI;AAAE,QAAA,OAAO,IAAI;IAElD,OAAO,WAAW,CAAC,IAAmB;AACxC;AAEO,MAAM,eAAe,GAAG,OAAO,EACpC,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,GAIP,KAAyC;AAC1C,IAAA,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACvD,IAAA,IAAI,CAAC,IAAI;AAAE,QAAA,OAAO,IAAI;AAEtB,IAAA,MAAM,WAAW,GAAG,MAAMC,6BAAc,CAAC;QACvC,IAAI;QACJ,QAAQ;QACR,OAAO;AACR,KAAA,CAAC;AACF,IAAA,OAAOC,kBAAU,CAAC;QAChB,IAAI;QACJ,WAAW;QACX,KAAK;AACN,KAAA,CAAC;AACJ;;;;;"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { NextResponse } from 'next/server';
|
|
2
2
|
import type { OnCallbackContext, SessionData } from '@auth0/nextjs-auth0/types';
|
|
3
|
-
import type
|
|
3
|
+
import { type SdkError } from '@auth0/nextjs-auth0/errors';
|
|
4
4
|
import { Auth0Config } from 'src/types';
|
|
5
5
|
export declare const onCallbackFactory: ({ auth0Config, appBaseUrl, onError, }: {
|
|
6
6
|
auth0Config: Auth0Config;
|
|
@@ -3,6 +3,7 @@
|
|
|
3
3
|
var server = require('next/server');
|
|
4
4
|
var headers = require('next/headers');
|
|
5
5
|
var jose = require('jose');
|
|
6
|
+
var errors = require('@auth0/nextjs-auth0/errors');
|
|
6
7
|
|
|
7
8
|
const createCallbackResponse = (context, appBaseUrl) => server.NextResponse.redirect(new URL(context.returnTo || '/', appBaseUrl));
|
|
8
9
|
const getLocaleFromContext = ({ returnTo }, appBaseUrl) => {
|
|
@@ -53,8 +54,8 @@ const handleAuth0Error = ({ error, auth0Config, appBaseUrl, localeFromUrl, onErr
|
|
|
53
54
|
return server.NextResponse.redirect(new URL(`/${locale}${auth0Config.globalAuthErrorPath}${errorCodeQuery}`, appBaseUrl));
|
|
54
55
|
};
|
|
55
56
|
const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (error, context, session) => {
|
|
57
|
+
const localeFromUrl = getLocaleFromContext(context, appBaseUrl);
|
|
56
58
|
if (error) {
|
|
57
|
-
const localeFromUrl = getLocaleFromContext(context, appBaseUrl);
|
|
58
59
|
return handleAuth0Error({
|
|
59
60
|
error,
|
|
60
61
|
auth0Config,
|
|
@@ -70,6 +71,18 @@ const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (erro
|
|
|
70
71
|
const decodedToken = session.tokenSet.accessToken
|
|
71
72
|
? jose.decodeJwt(session.tokenSet.accessToken)
|
|
72
73
|
: null;
|
|
74
|
+
if (decodedToken && !decodedToken.complete) {
|
|
75
|
+
return handleAuth0Error({
|
|
76
|
+
error: new errors.AccessTokenError(incompleteTokenErrorCode, incompleteTokenErrorCode, new errors.OAuth2Error({
|
|
77
|
+
code: incompleteTokenErrorCode,
|
|
78
|
+
message: incompleteTokenErrorCode,
|
|
79
|
+
})),
|
|
80
|
+
auth0Config,
|
|
81
|
+
appBaseUrl,
|
|
82
|
+
localeFromUrl,
|
|
83
|
+
onError,
|
|
84
|
+
});
|
|
85
|
+
}
|
|
73
86
|
const availableSellerIds = decodedToken?.sellerIds ?? null;
|
|
74
87
|
let selectedSellerId = cookieStore.get(auth0Config.selectedSellerIdCookie.name)?.value ??
|
|
75
88
|
decodedToken?.sellerIds[0];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":["NextResponse","cookies","decodeJwt"],"mappings":"
|
|
1
|
+
{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":["NextResponse","cookies","decodeJwt","AccessTokenError","OAuth2Error"],"mappings":";;;;;;;AAaA,MAAM,sBAAsB,GAAG,CAC7B,OAA0B,EAC1B,UAAkB,KACfA,mBAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;AAExE,MAAM,oBAAoB,GAAG,CAC3B,EAAE,QAAQ,EAAqB,EAC/B,UAAkB,KAChB;IACF,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,EAAE;IACX;AAEA,IAAA,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;IAC7E;IAAE,OAAO,YAAY,EAAE;;AAErB,QAAA,OAAO,CAAC,IAAI,CACV,qDAAqD,EACrD,YAAY,CACb;IACH;AAEA,IAAA,OAAO,EAAE;AACX,CAAC;AAED,MAAM,wBAAwB,GAAG,sBAA+B;AAChE,MAAM,cAAc,GAAG,gCAAgC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,OAAO,GAOR,KAAkB;AACjB,IAAA,MAAM,iBAAiB,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS;AAC9D,IAAA,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,aAAyB;AACjE,UAAG;AACH,UAAE,WAAW,CAAC,cAAc,CAAC,OAAO;AAEtC,IAAA,MAAM,cAAc,GAAG;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,wBAAwB;KACzB;IACD,IAAI,kBAAkB,GAAG,EAAE;AAE3B,IAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAoB;QACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;AAC5D,QAAA,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;AAEA,IAAA,IAAI,kBAAkB,KAAK,wBAAwB,EAAE;;AAEnD,QAAA,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC;AAE3E,QAAA,OAAOA,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAChD;IACH;IAEA,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAChD,QAAA,OAAO,GAAG,KAAK,CAAC;;AAEhB,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC9C;IAEA,MAAM,cAAc,GAAG;UACnB,CAAA,MAAA,EAAS,kBAAkB,CAAA;UAC3B,EAAE;IAEN,OAAOA,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACL,IAAI,MAAM,CAAA,EAAG,WAAW,CAAC,mBAAmB,GAAG,cAAc,CAAA,CAAE,EAC/D,UAAU,CACX,CACF;AACH,CAAC;MAEY,iBAAiB,GAC5B,CAAC,EACC,WAAW,EACX,UAAU,EACV,OAAO,GAKR,KACD,OACE,KAAsB,EACtB,OAA0B,EAC1B,OAA2B,KACF;IACzB,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC;IAC/D,IAAI,KAAK,EAAE;AACT,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK;YACL,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;AACnC,QAAA,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IACpD;AAEA,IAAA,MAAM,WAAW,GAAG,MAAMC,eAAO,EAAE;AACnC,IAAA,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;UAClCC,cAAS,CAAkB,OAAO,CAAC,QAAQ,CAAC,WAAW;UACvD,IAAI;AACR,IAAA,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;AAC1C,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK,EAAE,IAAIC,uBAAgB,CACzB,wBAAwB,EACxB,wBAAwB,EACxB,IAAIC,kBAAW,CAAC;AACd,gBAAA,IAAI,EAAE,wBAAwB;AAC9B,gBAAA,OAAO,EAAE,wBAAwB;AAClC,aAAA,CAAC,CACH;YACD,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,kBAAkB,GAAG,YAAY,EAAE,SAAS,IAAI,IAAI;AAE1D,IAAA,IAAI,gBAAgB,GAClB,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,KAAK;AAC/D,QAAA,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5B,IAAA,IACE,kBAAkB;QAClB,gBAAgB;AAChB,QAAA,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACjC,kBAAkB,CAAC,MAAM,GAAG,CAAC;AAC7B,QAAA,CAAC,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAC9C;;;;QAIA,gBAAgB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD;IAEA,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IAE5D,IAAI,gBAAgB,EAAE;AACpB,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,sBAAsB,CAAC,IAAI,EACvC,gBAAgB,EAChB,WAAW,CAAC,sBAAsB,CACnC;IACH;AAEA,IAAA,MAAM,oBAAoB,GAAG,YAAY,EAAE;AACzC,UAAE,YAAY,CAAC,SAAS,CAAC,CAAC;UACxB,IAAI;IAER,IAAI,oBAAoB,EAAE;AACxB,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAC3C,oBAAoB,EACpB,WAAW,CAAC,0BAA0B,CACvC;IACH;AAEA,IAAA,OAAO,QAAQ;AACjB;;;;"}
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
3
|
var server = require('next/server');
|
|
4
|
-
var debug = require('debug');
|
|
5
4
|
var auth0 = require('../../config/auth0.js');
|
|
6
5
|
var getAuth0Instance = require('../getAuth0Instance.js');
|
|
7
6
|
var token = require('./token.js');
|
|
@@ -11,11 +10,6 @@ var logout = require('./logout.js');
|
|
|
11
10
|
var login = require('./login.js');
|
|
12
11
|
var combineHeaders = require('./combineHeaders.js');
|
|
13
12
|
|
|
14
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
15
|
-
|
|
16
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
17
|
-
|
|
18
|
-
const log = debug__default.default('@smg-automotive/auth:middleware');
|
|
19
13
|
const isAuthRoute = (pathname, auth0Config) => {
|
|
20
14
|
const { loginEndpoint, logoutEndpoint, callbackEndpoint, userProfileEndpoint, tokenEndpoint, } = auth0Config;
|
|
21
15
|
return [
|
|
@@ -28,19 +22,12 @@ const isAuthRoute = (pathname, auth0Config) => {
|
|
|
28
22
|
};
|
|
29
23
|
const authMiddleware = async ({ request, isProtectedRoute, language, host, protocol, onError, brand, }) => {
|
|
30
24
|
const { pathname } = request.nextUrl;
|
|
31
|
-
log('Processing request', {
|
|
32
|
-
pathname,
|
|
33
|
-
host,
|
|
34
|
-
protocol,
|
|
35
|
-
method: request.method,
|
|
36
|
-
});
|
|
37
25
|
const auth0Instance = getAuth0Instance.getAuth0Instance({
|
|
38
26
|
host,
|
|
39
27
|
protocol,
|
|
40
28
|
});
|
|
41
29
|
const auth0Config = auth0.getAuth0Config();
|
|
42
30
|
const isAuthErrorRoute = pathname.endsWith(auth0Config.globalAuthErrorPath);
|
|
43
|
-
log('Auth route check', { pathname, isAuthErrorRoute });
|
|
44
31
|
const crossDomainLogoutResult = logout.handleCrossDomainLogout({
|
|
45
32
|
host,
|
|
46
33
|
protocol,
|
|
@@ -48,16 +35,13 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
|
|
|
48
35
|
auth0Config,
|
|
49
36
|
});
|
|
50
37
|
if (crossDomainLogoutResult) {
|
|
51
|
-
log('Cross-domain logout detected, redirecting');
|
|
52
38
|
return crossDomainLogoutResult;
|
|
53
39
|
}
|
|
54
40
|
login.addLoginParams({
|
|
55
41
|
request,
|
|
56
42
|
auth0Config,
|
|
57
43
|
});
|
|
58
|
-
log('Calling Auth0 middleware');
|
|
59
44
|
const authResponse = await auth0Instance.middleware(request);
|
|
60
|
-
log('Auth0 middleware completed', { status: authResponse.status });
|
|
61
45
|
logout.deleteRelatedSessionCookies({
|
|
62
46
|
host,
|
|
63
47
|
request,
|
|
@@ -72,7 +56,6 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
|
|
|
72
56
|
onError,
|
|
73
57
|
});
|
|
74
58
|
if (accessTokenRequestResult) {
|
|
75
|
-
log('Access token request handled');
|
|
76
59
|
return accessTokenRequestResult;
|
|
77
60
|
}
|
|
78
61
|
const handleUserProfileResult = await profile.handleUserProfile({
|
|
@@ -83,15 +66,12 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
|
|
|
83
66
|
brand,
|
|
84
67
|
});
|
|
85
68
|
if (handleUserProfileResult) {
|
|
86
|
-
log('User profile request handled');
|
|
87
69
|
return handleUserProfileResult;
|
|
88
70
|
}
|
|
89
71
|
if (isAuthRoute(pathname, auth0Config) || isAuthErrorRoute) {
|
|
90
|
-
log('Auth route, returning response');
|
|
91
72
|
return authResponse;
|
|
92
73
|
}
|
|
93
74
|
const isProtected = !isAuthErrorRoute && isProtectedRoute(pathname);
|
|
94
|
-
log('Route protection check', { pathname, isProtected });
|
|
95
75
|
const protectRouteResult = await protectRoute.protectRoute({
|
|
96
76
|
isProtected,
|
|
97
77
|
auth0Instance,
|
|
@@ -102,12 +82,8 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
|
|
|
102
82
|
onError,
|
|
103
83
|
});
|
|
104
84
|
if (protectRouteResult) {
|
|
105
|
-
log('Route protection handled', {
|
|
106
|
-
redirected: protectRouteResult.status === 307,
|
|
107
|
-
});
|
|
108
85
|
return protectRouteResult;
|
|
109
86
|
}
|
|
110
|
-
log('Request completed, combining headers');
|
|
111
87
|
return combineHeaders.combineHeaders({
|
|
112
88
|
middlewareResponse: server.NextResponse.next({
|
|
113
89
|
request: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":["
|
|
1
|
+
{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":["getAuth0Instance","getAuth0Config","handleCrossDomainLogout","addLoginParams","deleteRelatedSessionCookies","handleAccessTokenRequest","handleUserProfile","protectRoute","combineHeaders","NextResponse"],"mappings":";;;;;;;;;;;;AAeA,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,WAAwB,KAAI;AACjE,IAAA,MAAM,EACJ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,GACd,GAAG,WAAW;IAEf,OAAO;QACL,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,aAAa;AACd,KAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACtB,CAAC;MAEY,cAAc,GAAG,OAAO,EACnC,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,KAAK,GASN,KAA2B;AAC1B,IAAA,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO;IACpC,MAAM,aAAa,GAAGA,iCAAgB,CAAC;QACrC,IAAI;QACJ,QAAQ;AACT,KAAA,CAAC;AAEF,IAAA,MAAM,WAAW,GAAGC,oBAAc,EAAE;IACpC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAE3E,MAAM,uBAAuB,GAAGC,8BAAuB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,OAAO,uBAAuB;IAChC;AAEA,IAAAC,oBAAc,CAAC;QACb,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;AAE5D,IAAAC,kCAA2B,CAAC;QAC1B,IAAI;QACJ,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,WAAW;AACZ,KAAA,CAAC;AAEF,IAAA,MAAM,wBAAwB,GAAG,MAAMC,8BAAwB,CAAC;QAC9D,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,wBAAwB,EAAE;AAC5B,QAAA,OAAO,wBAAwB;IACjC;AAEA,IAAA,MAAM,uBAAuB,GAAG,MAAMC,yBAAiB,CAAC;QACtD,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,aAAa;QACb,WAAW;QACX,KAAK;AACN,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,OAAO,uBAAuB;IAChC;IAEA,IAAI,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,gBAAgB,EAAE;AAC1D,QAAA,OAAO,YAAY;IACrB;IAEA,MAAM,WAAW,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;AACnE,IAAA,MAAM,kBAAkB,GAAG,MAAMC,yBAAY,CAAC;QAC5C,WAAW;QACX,aAAa;QACb,WAAW;QACX,QAAQ;QACR,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,OAAO;AACR,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;AACtB,QAAA,OAAO,kBAAkB;IAC3B;AAEA,IAAA,OAAOC,6BAAc,CAAC;AACpB,QAAA,kBAAkB,EAAEC,mBAAY,CAAC,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;AACzB,aAAA;SACF,CAAC;QACF,YAAY;AACb,KAAA,CAAC;AACJ;;;;"}
|
|
@@ -1,13 +1,7 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
3
|
var server = require('next/server');
|
|
4
|
-
var debug = require('debug');
|
|
5
4
|
|
|
6
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
7
|
-
|
|
8
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
9
|
-
|
|
10
|
-
const log = debug__default.default('@smg-automotive/auth:logout');
|
|
11
5
|
const validateReturnTo = ({ pathOrUrl, host, protocol, otherDomainHost, crossDomainLogout, }) => {
|
|
12
6
|
if (typeof pathOrUrl !== 'string')
|
|
13
7
|
return false;
|
|
@@ -52,11 +46,9 @@ const getOtherDomainHost = (currentHost) => {
|
|
|
52
46
|
const handleCrossDomainLogout = ({ host, protocol, request, auth0Config: { languageConfig, logoutEndpoint }, }) => {
|
|
53
47
|
if (request.nextUrl.pathname !== logoutEndpoint)
|
|
54
48
|
return;
|
|
55
|
-
log('Handling logout request', { host, protocol });
|
|
56
49
|
const searchParams = new URLSearchParams(request.nextUrl.search);
|
|
57
50
|
const specifiedReturnTo = searchParams.get('returnTo') || '';
|
|
58
51
|
const crossDomainLogout = searchParams.get('crossDomain') === 'true';
|
|
59
|
-
log('Logout parameters', { specifiedReturnTo, crossDomainLogout });
|
|
60
52
|
const otherDomainHost = getOtherDomainHost(host);
|
|
61
53
|
const currentDomainUrl = `${protocol}://${host}`;
|
|
62
54
|
const locale = searchParams.get('locale');
|
|
@@ -68,22 +60,16 @@ const handleCrossDomainLogout = ({ host, protocol, request, auth0Config: { langu
|
|
|
68
60
|
pathOrUrl: specifiedReturnTo,
|
|
69
61
|
crossDomainLogout,
|
|
70
62
|
});
|
|
71
|
-
log('ReturnTo validation', { isSafePath, specifiedReturnTo });
|
|
72
63
|
if (isSafePath && specifiedReturnTo) {
|
|
73
64
|
returnTo = specifiedReturnTo;
|
|
74
65
|
}
|
|
75
66
|
if (!crossDomainLogout && otherDomainHost && otherDomainHost !== host) {
|
|
76
|
-
log('Initiating cross-domain logout', { otherDomainHost });
|
|
77
67
|
const backToCurrentDomainUrl = new URL(logoutEndpoint, currentDomainUrl);
|
|
78
68
|
backToCurrentDomainUrl.searchParams.set('returnTo', returnTo);
|
|
79
69
|
backToCurrentDomainUrl.searchParams.set('crossDomain', 'true');
|
|
80
70
|
const otherDomainLogoutUrl = new URL(logoutEndpoint, `${protocol}://${otherDomainHost}`);
|
|
81
71
|
otherDomainLogoutUrl.searchParams.set('crossDomain', 'true');
|
|
82
72
|
otherDomainLogoutUrl.searchParams.set('returnTo', backToCurrentDomainUrl.toString());
|
|
83
|
-
log('Redirecting to other domain for logout', {
|
|
84
|
-
otherDomainHost,
|
|
85
|
-
returnUrl: backToCurrentDomainUrl.toString(),
|
|
86
|
-
});
|
|
87
73
|
return server.NextResponse.redirect(otherDomainLogoutUrl, {
|
|
88
74
|
status: 302,
|
|
89
75
|
});
|
|
@@ -110,10 +96,6 @@ const getLegacyCookieDomain = (hostname) => {
|
|
|
110
96
|
const deleteRelatedSessionCookies = ({ host, request, response, auth0Config: { logoutEndpoint, authCookieNames, legacyAccessTokenName, legacyRefreshTokenName, }, }) => {
|
|
111
97
|
if (request.nextUrl.pathname !== logoutEndpoint || !response)
|
|
112
98
|
return;
|
|
113
|
-
log('Deleting session cookies', {
|
|
114
|
-
host,
|
|
115
|
-
cookieCount: authCookieNames.length,
|
|
116
|
-
});
|
|
117
99
|
authCookieNames.forEach((cookieName) => {
|
|
118
100
|
response.cookies.delete({
|
|
119
101
|
name: cookieName,
|
|
@@ -132,7 +114,6 @@ const deleteRelatedSessionCookies = ({ host, request, response, auth0Config: { l
|
|
|
132
114
|
});
|
|
133
115
|
});
|
|
134
116
|
const legacyCookieDomain = getLegacyCookieDomain(host);
|
|
135
|
-
log('Deleting legacy cookies', { legacyCookieDomain });
|
|
136
117
|
response.cookies.delete({
|
|
137
118
|
name: legacyAccessTokenName,
|
|
138
119
|
maxAge: 0,
|
|
@@ -145,7 +126,6 @@ const deleteRelatedSessionCookies = ({ host, request, response, auth0Config: { l
|
|
|
145
126
|
path: '/',
|
|
146
127
|
domain: legacyCookieDomain,
|
|
147
128
|
});
|
|
148
|
-
log('All session cookies deleted');
|
|
149
129
|
};
|
|
150
130
|
|
|
151
131
|
exports.deleteRelatedSessionCookies = deleteRelatedSessionCookies;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"logout.js","sources":["../../../../../src/server/middleware/logout.ts"],"sourcesContent":[null],"names":["
|
|
1
|
+
{"version":3,"file":"logout.js","sources":["../../../../../src/server/middleware/logout.ts"],"sourcesContent":[null],"names":["NextResponse"],"mappings":";;;;AAIA,MAAM,gBAAgB,GAAG,CAAC,EACxB,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,eAAe,EACf,iBAAiB,GAOlB,KAAI;IACH,IAAI,OAAO,SAAS,KAAK,QAAQ;AAAE,QAAA,OAAO,KAAK;AAC/C,IAAA,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI;AAAE,QAAA,OAAO,KAAK;AAEzC,IAAA,IAAI;AACF,QAAA,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,SAAS,CAAC;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,GAAG,gBAAgB,GAAG,GAAG,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,EAAG,gBAAgB,CAAA,CAAE,CACtE;AACD,QAAA,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ;AAE5C,QAAA,IACE,iBAAiB;YACjB,KAAK;AACL,YAAA,eAAe,CAAC,IAAI,KAAK,eAAe,EACxC;AACA,YAAA,OAAO,KAAK;QACd;QAEA,IAAI,CAAC,iBAAiB,IAAI,eAAe,CAAC,IAAI,KAAK,IAAI,EAAE;AACvD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;AAChE,YAAA,OAAO,KAAK;QACd;;;QAIA,MAAM,eAAe,GAAG,yBAAyB;AACjD,QAAA,OAAO,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;IAC1C;IAAE,OAAO,KAAK,EAAE;;AAEd,QAAA,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,CAAC;AACjD,QAAA,OAAO,KAAK;IACd;AACF,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,WAAmB,KAAY;AACzD,IAAA,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvC,OAAO,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC;IAC1D;AACA,IAAA,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvC,OAAO,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC;IAC1D;AACA,IAAA,OAAO,WAAW;AACpB,CAAC;MAEY,uBAAuB,GAAG,CAAC,EACtC,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,WAAW,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,GAMhD,KAAyB;AACxB,IAAA,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,cAAc;QAAE;IAEjD,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IAEhE,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;IAC5D,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,MAAM;AAEpE,IAAA,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC;AAChD,IAAA,MAAM,gBAAgB,GAAG,CAAA,EAAG,QAAQ,CAAA,GAAA,EAAM,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AACzC,IAAA,IAAI,QAAQ,GAAG,MAAM,GAAG,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,GAAG,CAAA,CAAA,EAAI,cAAc,CAAC,OAAO,EAAE;IACnE,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,QAAQ;QACR,IAAI;QACJ,eAAe;AACf,QAAA,SAAS,EAAE,iBAAiB;QAC5B,iBAAiB;AAClB,KAAA,CAAC;AACF,IAAA,IAAI,UAAU,IAAI,iBAAiB,EAAE;QACnC,QAAQ,GAAG,iBAAiB;IAC9B;IAEA,IAAI,CAAC,iBAAiB,IAAI,eAAe,IAAI,eAAe,KAAK,IAAI,EAAE;QACrE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACxE,sBAAsB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC7D,sBAAsB,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC;AAE9D,QAAA,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,cAAc,EACd,CAAA,EAAG,QAAQ,CAAA,GAAA,EAAM,eAAe,CAAA,CAAE,CACnC;QACD,oBAAoB,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC;AAC5D,QAAA,oBAAoB,CAAC,YAAY,CAAC,GAAG,CACnC,UAAU,EACV,sBAAsB,CAAC,QAAQ,EAAE,CAClC;AAED,QAAA,OAAOA,mBAAY,CAAC,QAAQ,CAAC,oBAAoB,EAAE;AACjD,YAAA,MAAM,EAAE,GAAG;AACZ,SAAA,CAAC;IACJ;IAEA,IAAI,aAAa,GAAG,KAAK;AACzB,IAAA,IAAI;AACF,QAAA,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC;AACpD,QAAA,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC;IACpD;IAAE,OAAO,KAAK,EAAE;;AAEd,QAAA,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC;IACjD;AAEA,IAAA,YAAY,CAAC,GAAG,CACd,UAAU,EACV,aAAa,GAAG,QAAQ,GAAG,CAAA,EAAG,gBAAgB,GAAG,QAAQ,CAAA,CAAE,CAC5D;IACD,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE;AAClD;AAEA,MAAM,qBAAqB,GAAG,CAAC,QAAgB,KAAI;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;AACjC,IAAA,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE;AAE3C,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACtC,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE;AACnB,CAAC;AAEM,MAAM,2BAA2B,GAAG,CAAC,EAC1C,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,WAAW,EAAE,EACX,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,GAMF,KAAI;IACH,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,QAAQ;QAAE;AAE9D,IAAA,eAAe,CAAC,OAAO,CAAC,CAAC,UAAU,KAAI;AACrC,QAAA,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;AACtB,YAAA,IAAI,EAAE,UAAU;AAChB,YAAA,MAAM,EAAE,CAAC;AACT,YAAA,IAAI,EAAE,GAAG;AACV,SAAA,CAAC;AACF,QAAA,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAA,EAAG,UAAU,CAAA,GAAA,CAAK;AACxB,YAAA,MAAM,EAAE,CAAC;AACT,YAAA,IAAI,EAAE,GAAG;AACV,SAAA,CAAC;AACF,QAAA,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAA,EAAG,UAAU,CAAA,GAAA,CAAK;AACxB,YAAA,MAAM,EAAE,CAAC;AACT,YAAA,IAAI,EAAE,GAAG;AACV,SAAA,CAAC;AACJ,IAAA,CAAC,CAAC;AAEF,IAAA,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,IAAI,CAAC;AACtD,IAAA,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;AACtB,QAAA,IAAI,EAAE,qBAAqB;AAC3B,QAAA,MAAM,EAAE,CAAC;AACT,QAAA,IAAI,EAAE,GAAG;AACT,QAAA,MAAM,EAAE,kBAAkB;AAC3B,KAAA,CAAC;AACF,IAAA,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;AACtB,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,MAAM,EAAE,CAAC;AACT,QAAA,IAAI,EAAE,GAAG;AACT,QAAA,MAAM,EAAE,kBAAkB;AAC3B,KAAA,CAAC;AACJ;;;;;"}
|
|
@@ -1,32 +1,12 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
var debug = require('debug');
|
|
4
|
-
|
|
5
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
6
|
-
|
|
7
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
8
|
-
|
|
9
|
-
const log = debug__default.default('@smg-automotive/auth:token');
|
|
10
3
|
const proactivelyRefreshAccessToken = async ({ request, response, auth0Instance, auth0Config, }) => {
|
|
11
|
-
log('Checking if token refresh is needed');
|
|
12
4
|
const session = await auth0Instance.getSession(request);
|
|
13
|
-
const
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
log('Token refresh decision', {
|
|
17
|
-
shouldRefresh,
|
|
18
|
-
expiresInSeconds: Math.round(expiresInSeconds),
|
|
19
|
-
debugForceRefresh: auth0Config.debugForceTokenRefresh,
|
|
20
|
-
hasSession: !!session,
|
|
21
|
-
});
|
|
22
|
-
const result = await auth0Instance.getAccessToken(request, response, {
|
|
5
|
+
const shouldRefresh = auth0Config.debugForceTokenRefresh ||
|
|
6
|
+
(session?.tokenSet.expiresAt || 0) < Date.now() / 1000 + 30;
|
|
7
|
+
return auth0Instance.getAccessToken(request, response, {
|
|
23
8
|
refresh: shouldRefresh,
|
|
24
9
|
});
|
|
25
|
-
log('Access token retrieved', {
|
|
26
|
-
expiresAt: result.expiresAt,
|
|
27
|
-
tokenLength: result.token.length,
|
|
28
|
-
});
|
|
29
|
-
return result;
|
|
30
10
|
};
|
|
31
11
|
|
|
32
12
|
exports.proactivelyRefreshAccessToken = proactivelyRefreshAccessToken;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":[
|
|
1
|
+
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAKO,MAAM,6BAA6B,GAAG,OAAO,EAClD,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,GAMZ,KAAmD;IAClD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;AAEvD,IAAA,MAAM,aAAa,GACjB,WAAW,CAAC,sBAAsB;AAClC,QAAA,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE;AAC7D,IAAA,OAAO,aAAa,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;AACrD,QAAA,OAAO,EAAE,aAAa;AACvB,KAAA,CAAC;AACJ;;;;"}
|
|
@@ -1,17 +1,11 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
3
|
var server = require('next/server');
|
|
4
|
-
var debug = require('debug');
|
|
5
4
|
var session = require('../../lib/enrichUser/session.js');
|
|
6
5
|
var proactivelyRefreshAccessToken = require('./proactivelyRefreshAccessToken.js');
|
|
7
6
|
var combineHeaders = require('./combineHeaders.js');
|
|
8
7
|
var addCachingHeaders = require('./addCachingHeaders.js');
|
|
9
8
|
|
|
10
|
-
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
11
|
-
|
|
12
|
-
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
13
|
-
|
|
14
|
-
const log = debug__default.default('@smg-automotive/auth:profile');
|
|
15
9
|
const returnEmptyResponse = () => {
|
|
16
10
|
return new server.NextResponse(null, {
|
|
17
11
|
status: 204,
|
|
@@ -26,35 +20,23 @@ const returnEmptyResponse = () => {
|
|
|
26
20
|
const handleUserProfile = async ({ request, response, auth0Instance, auth0Config, brand, }) => {
|
|
27
21
|
if (request.nextUrl.pathname !== auth0Config.userProfileEndpoint)
|
|
28
22
|
return;
|
|
29
|
-
log('Handling user profile request', { brand });
|
|
30
23
|
const session$1 = await auth0Instance.getSession(request);
|
|
31
24
|
if (!session$1) {
|
|
32
|
-
log('No session found for profile request');
|
|
33
25
|
return returnEmptyResponse();
|
|
34
26
|
}
|
|
35
27
|
try {
|
|
36
28
|
const user = session$1.user;
|
|
37
|
-
log('User found, refreshing token and enriching', {
|
|
38
|
-
userId: user.userId,
|
|
39
|
-
sellerId: user.sellerId,
|
|
40
|
-
});
|
|
41
29
|
const { token } = await proactivelyRefreshAccessToken.proactivelyRefreshAccessToken({
|
|
42
30
|
request,
|
|
43
31
|
response,
|
|
44
32
|
auth0Instance,
|
|
45
33
|
auth0Config,
|
|
46
34
|
});
|
|
47
|
-
log('Token refreshed, enriching user');
|
|
48
35
|
const enrichedUser = await session.enrichUser({
|
|
49
36
|
user,
|
|
50
37
|
accessToken: token,
|
|
51
38
|
brand,
|
|
52
39
|
});
|
|
53
|
-
log('User enriched successfully', {
|
|
54
|
-
userId: enrichedUser.userId,
|
|
55
|
-
sellerId: enrichedUser.sellerId,
|
|
56
|
-
hasEntitlements: !!enrichedUser.entitlements,
|
|
57
|
-
});
|
|
58
40
|
const userResponse = server.NextResponse.json(enrichedUser);
|
|
59
41
|
const responseWithCombinedHeaders = combineHeaders.combineHeaders({
|
|
60
42
|
middlewareResponse: userResponse,
|
|
@@ -69,10 +51,8 @@ const handleUserProfile = async ({ request, response, auth0Instance, auth0Config
|
|
|
69
51
|
return responseWithCombinedHeaders;
|
|
70
52
|
}
|
|
71
53
|
catch (error) {
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
stack: error instanceof Error ? error.stack : undefined,
|
|
75
|
-
});
|
|
54
|
+
// eslint-disable-next-line no-console
|
|
55
|
+
console.warn('User Profile error loading entitlements', JSON.stringify(error, null, 2));
|
|
76
56
|
return returnEmptyResponse();
|
|
77
57
|
}
|
|
78
58
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"profile.js","sources":["../../../../../src/server/middleware/profile.ts"],"sourcesContent":[null],"names":["
|
|
1
|
+
{"version":3,"file":"profile.js","sources":["../../../../../src/server/middleware/profile.ts"],"sourcesContent":[null],"names":["NextResponse","session","proactivelyRefreshAccessToken","enrichUser","combineHeaders","addCachingHeaders"],"mappings":";;;;;;;;AAWA,MAAM,mBAAmB,GAAG,MAAmB;AAC7C,IAAA,OAAO,IAAIA,mBAAY,CAAC,IAAI,EAAE;AAC5B,QAAA,MAAM,EAAE,GAAG;AACX,QAAA,OAAO,EAAE;AACP,YAAA,IAAI,EAAE,uBAAuB;AAC7B,YAAA,eAAe,EACb,yDAAyD;AAC3D,YAAA,MAAM,EAAE,UAAU;AAClB,YAAA,OAAO,EAAE,GAAG;AACb,SAAA;AACF,KAAA,CAAC;AACJ,CAAC;AAEM,MAAM,iBAAiB,GAAG,OAAO,EACtC,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,EACX,KAAK,GAON,KAAkC;IACjC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,mBAAmB;QAAE;IAElE,MAAMC,SAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IAEvD,IAAI,CAACA,SAAO,EAAE;QACZ,OAAO,mBAAmB,EAAE;IAC9B;AAEA,IAAA,IAAI;AACF,QAAA,MAAM,IAAI,GAAGA,SAAO,CAAC,IAAmB;AACxC,QAAA,MAAM,EAAE,KAAK,EAAE,GAAG,MAAMC,2DAA6B,CAAC;YACpD,OAAO;YACP,QAAQ;YACR,aAAa;YACb,WAAW;AACZ,SAAA,CAAC;AACF,QAAA,MAAM,YAAY,GAAG,MAAMC,kBAAU,CAAC;YACpC,IAAI;AACJ,YAAA,WAAW,EAAE,KAAK;YAClB,KAAK;AACN,SAAA,CAAC;QAEF,MAAM,YAAY,GAAGH,mBAAY,CAAC,IAAI,CAAC,YAAY,CAAC;QACpD,MAAM,2BAA2B,GAAGI,6BAAc,CAAC;AACjD,YAAA,kBAAkB,EAAE,YAAY;AAChC,YAAA,YAAY,EAAE,QAAQ;AACtB,YAAA,eAAe,EAAE,IAAI;AACtB,SAAA,CAAC;QACFC,mCAAiB,CAAC,2BAA2B,CAAC;;QAE9C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;AAC9C,YAAA,2BAA2B,CAAC,OAAO,CAAC,GAAG,CACrC,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,EACZ,MAAM,CACP;QACH;AACA,QAAA,OAAO,2BAA2B;IACpC;IAAE,OAAO,KAAK,EAAE;;AAEd,QAAA,OAAO,CAAC,IAAI,CACV,yCAAyC,EACzC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/B;QAED,OAAO,mBAAmB,EAAE;IAC9B;AACF;;;;"}
|