@smg-automotive/auth 8.3.0-lschuerch-FED-782-sync-tenant.5 → 8.3.0-lschuerch-FED-782-sync-tenant.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/server/helpers/getAuthProps.js +13 -1
- package/dist/cjs/server/helpers/getAuthProps.js.map +1 -1
- package/dist/cjs/server/middleware/crossApplicationStateSynchronization.js +24 -4
- package/dist/cjs/server/middleware/crossApplicationStateSynchronization.js.map +1 -1
- package/dist/cjs/server/middleware/proactivelyRefreshAccessToken.js +0 -22
- package/dist/cjs/server/middleware/proactivelyRefreshAccessToken.js.map +1 -1
- package/dist/esm/server/helpers/getAuthProps.js +9 -1
- package/dist/esm/server/helpers/getAuthProps.js.map +1 -1
- package/dist/esm/server/middleware/crossApplicationStateSynchronization.js +24 -4
- package/dist/esm/server/middleware/crossApplicationStateSynchronization.js.map +1 -1
- package/dist/esm/server/middleware/proactivelyRefreshAccessToken.js +0 -22
- package/dist/esm/server/middleware/proactivelyRefreshAccessToken.js.map +1 -1
- package/package.json +1 -1
|
@@ -1,11 +1,23 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
+
var debug = require('debug');
|
|
3
4
|
var auth0 = require('../../config/auth0.js');
|
|
4
5
|
var getUser = require('./getUser.js');
|
|
5
6
|
|
|
7
|
+
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
8
|
+
|
|
9
|
+
var debug__default = /*#__PURE__*/_interopDefaultCompat(debug);
|
|
10
|
+
|
|
11
|
+
const log = debug__default.default('@smg-automotive/auth:user');
|
|
6
12
|
const getAuthProps = async (context) => {
|
|
7
13
|
const auth0Config = auth0.getAuth0Config();
|
|
8
|
-
|
|
14
|
+
let user = null;
|
|
15
|
+
try {
|
|
16
|
+
user = await getUser.getEnrichedUser(context);
|
|
17
|
+
}
|
|
18
|
+
catch (error) {
|
|
19
|
+
log('Error enriching user:', error);
|
|
20
|
+
}
|
|
9
21
|
return { auth0Config, user };
|
|
10
22
|
};
|
|
11
23
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getAuthProps.js","sources":["../../../../../src/server/helpers/getAuthProps.ts"],"sourcesContent":[null],"names":["getAuth0Config","getEnrichedUser"],"mappings":"
|
|
1
|
+
{"version":3,"file":"getAuthProps.js","sources":["../../../../../src/server/helpers/getAuthProps.ts"],"sourcesContent":[null],"names":["debug","getAuth0Config","getEnrichedUser"],"mappings":";;;;;;;;;;AAWA,MAAM,GAAG,GAAGA,sBAAK,CAAC,2BAA2B,CAAC;MAEjC,YAAY,GAAG,OAC1B,OAMC,KAC6B;AAC9B,IAAA,MAAM,WAAW,GAAGC,oBAAc,EAAE;IAEpC,IAAI,IAAI,GAAG,IAAI;AACf,IAAA,IAAI;AACF,QAAA,IAAI,GAAG,MAAMC,uBAAe,CAAC,OAAO,CAAC;IACvC;IAAE,OAAO,KAAK,EAAE;AACd,QAAA,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC;IACrC;AAEA,IAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;AAC9B;;;;"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
+
var jose = require('jose');
|
|
3
4
|
var redirectToLogin = require('../helpers/redirectToLogin.js');
|
|
4
5
|
|
|
5
6
|
const crossApplicationStateSynchronization = async ({ request, language, auth0Instance, auth0Config, }) => {
|
|
@@ -28,10 +29,31 @@ const crossApplicationStateSynchronization = async ({ request, language, auth0In
|
|
|
28
29
|
const sellerIdFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
|
|
29
30
|
console.log('sellerIdFromCookie', sellerIdFromCookie);
|
|
30
31
|
console.log('typeof sellerIdFromCookie', typeof sellerIdFromCookie);
|
|
32
|
+
const decodedToken = session?.tokenSet.accessToken
|
|
33
|
+
? jose.decodeJwt(session.tokenSet.accessToken)
|
|
34
|
+
: null;
|
|
35
|
+
// eslint-disable-next-line no-console
|
|
36
|
+
console.log('Decoded token info', {
|
|
37
|
+
decodedToken,
|
|
38
|
+
});
|
|
39
|
+
const sellerIdFromSession = session?.user.sellerId || null;
|
|
40
|
+
const sellerIdFromToken = Array.isArray(decodedToken?.sellerIds)
|
|
41
|
+
? decodedToken.sellerIds[0] || null
|
|
42
|
+
: null;
|
|
43
|
+
const sessionCookieMismatch = sellerIdFromCookie && sellerIdFromSession !== sellerIdFromCookie;
|
|
44
|
+
// There is a bug when refreshing tokens where the selected sellerId is not the first avaiable sellerId
|
|
45
|
+
// so auth0 will add the first sellerId to the token but the session will have the selected one
|
|
46
|
+
// leading to unauthorized API errors
|
|
47
|
+
// Note: This will loop when debug refresh is enabled so maybe drop it?
|
|
48
|
+
const sessionTokenMismatch = !sessionCookieMismatch &&
|
|
49
|
+
sellerIdFromToken &&
|
|
50
|
+
sellerIdFromToken !== sellerIdFromCookie;
|
|
51
|
+
console.log('sessionCookieMismatch', sessionCookieMismatch);
|
|
52
|
+
console.log('sessionTokenMismatch', sessionTokenMismatch);
|
|
31
53
|
let selectedSellerId;
|
|
32
54
|
if (sellerIdFromCookie &&
|
|
33
|
-
|
|
34
|
-
|
|
55
|
+
!impersonateSellerId &&
|
|
56
|
+
(sessionCookieMismatch || sessionTokenMismatch)) {
|
|
35
57
|
console.log('Selected seller ID out of sync, redirecting to login to resync');
|
|
36
58
|
selectedSellerId = sellerIdFromCookie;
|
|
37
59
|
}
|
|
@@ -44,8 +66,6 @@ const crossApplicationStateSynchronization = async ({ request, language, auth0In
|
|
|
44
66
|
selectedSellerId,
|
|
45
67
|
currentSellerId: session.user.sellerId,
|
|
46
68
|
});
|
|
47
|
-
// Like that???
|
|
48
|
-
console.log(redirectToLogin.redirectToLogin);
|
|
49
69
|
const response = redirectToLogin.redirectToLogin({
|
|
50
70
|
auth0Config,
|
|
51
71
|
language,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"crossApplicationStateSynchronization.js","sources":["../../../../../src/server/middleware/crossApplicationStateSynchronization.ts"],"sourcesContent":[null],"names":["redirectToLogin"],"mappings":"
|
|
1
|
+
{"version":3,"file":"crossApplicationStateSynchronization.js","sources":["../../../../../src/server/middleware/crossApplicationStateSynchronization.ts"],"sourcesContent":[null],"names":["decodeJwt","redirectToLogin"],"mappings":";;;;;AAUO,MAAM,oCAAoC,GAAG,OAAO,EACzD,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,GAMZ,KAAkC;IACjC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IACvD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;AAEpD,IAAA,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;AAClB,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,MAAM,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CACxD,WAAW,CAAC,0BAA0B,CAAC,IAAI,CAC5C,EAAE,KAAK;AAER,IAAA,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,8BAA8B,CAAC;IAC7E,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,OAAO,8BAA8B,CACtC;AACD,IAAA,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;AAC3D,IAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;IAClE,OAAO,CAAC,GAAG,CACT,iCAAiC,EACjC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAChC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;IAEpC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,IAAI,CAAC,8BAA8B,EAAE;AACvE,QAAA,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE;AACD,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,IAAI,mBAAuC;AAC3C,IAAA,IACE,8BAA8B;AAC9B,QAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,8BAA8B,EACxD;AACA,QAAA,OAAO,CAAC,GAAG,CACT,oEAAoE,CACrE;QACD,mBAAmB,GAAG,8BAA8B;IACtD;AAEA,IAAA,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAC5C,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;AACR,IAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,OAAO,kBAAkB,CAAC;AAEnE,IAAA,MAAM,YAAY,GAAG,OAAO,EAAE,QAAQ,CAAC;UACnCA,cAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW;UACtC,IAAI;;AAER,IAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;QAChC,YAAY;AACb,KAAA,CAAC;IAEF,MAAM,mBAAmB,GAAG,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;IAC1D,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS;UAC3D,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;UAC7B,IAAI;AAER,IAAA,MAAM,qBAAqB,GACzB,kBAAkB,IAAI,mBAAmB,KAAK,kBAAkB;;;;;IAKlE,MAAM,oBAAoB,GACxB,CAAC,qBAAqB;QACtB,iBAAiB;QACjB,iBAAiB,KAAK,kBAAkB;AAE1C,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;AAC3D,IAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;AAEzD,IAAA,IAAI,gBAAoC;AACxC,IAAA,IACE,kBAAkB;AAClB,QAAA,CAAC,mBAAmB;AACpB,SAAC,qBAAqB,IAAI,oBAAoB,CAAC,EAC/C;AACA,QAAA,OAAO,CAAC,GAAG,CACT,gEAAgE,CACjE;QACD,gBAAgB,GAAG,kBAAkB;IACvC;AAEA,IAAA,IAAI,CAAC,gBAAgB,IAAI,CAAC,mBAAmB,EAAE;AAC7C,QAAA,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;AAC5C,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE;QACxD,mBAAmB;QACnB,gBAAgB;AAChB,QAAA,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;AACvC,KAAA,CAAC;IAEF,MAAM,QAAQ,GAAGC,+BAAe,CAAC;QAC/B,WAAW;QACX,QAAQ;AACR,QAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;QAChC,MAAM;QACN,mBAAmB;QACnB,gBAAgB;AACjB,KAAA,CAAC;;IAGF,OAAO,CAAC,QAAQ,GAAG;AACjB,QAAA,WAAW,EAAE,EAAE;AACf,QAAA,SAAS,EAAE,CAAC;KACb;AACD,IAAA,MAAM,aAAa,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE;AACnD,QAAA,GAAG,OAAO;AACV,QAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;AACtB,KAAA,CAAC;AAEF,IAAA,OAAO,QAAQ;AACjB;;;;"}
|
|
@@ -1,6 +1,5 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
var jose = require('jose');
|
|
4
3
|
var debug = require('debug');
|
|
5
4
|
var requestId = require('./requestId.js');
|
|
6
5
|
|
|
@@ -23,27 +22,6 @@ const proactivelyRefreshAccessToken = async ({ request, response, auth0Instance,
|
|
|
23
22
|
debugForceRefresh: auth0Config.debugForceTokenRefresh,
|
|
24
23
|
hasSession: !!session,
|
|
25
24
|
});
|
|
26
|
-
const decodedToken = session?.tokenSet.accessToken
|
|
27
|
-
? jose.decodeJwt(session.tokenSet.accessToken)
|
|
28
|
-
: null;
|
|
29
|
-
// eslint-disable-next-line no-console
|
|
30
|
-
console.log('Decoded token info', {
|
|
31
|
-
requestId: requestId$1,
|
|
32
|
-
decodedToken,
|
|
33
|
-
});
|
|
34
|
-
const sellerIdFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
|
|
35
|
-
const sellerIdFromToken = decodedToken?.sellerId;
|
|
36
|
-
if (shouldRefresh && sellerIdFromCookie !== sellerIdFromToken) {
|
|
37
|
-
const staleResult = {
|
|
38
|
-
expiresAt: session?.tokenSet.expiresAt || 0,
|
|
39
|
-
token: session?.tokenSet.accessToken || '',
|
|
40
|
-
};
|
|
41
|
-
log('Out of sync token detected returning stale token', {
|
|
42
|
-
requestId: requestId$1,
|
|
43
|
-
...staleResult,
|
|
44
|
-
});
|
|
45
|
-
return staleResult;
|
|
46
|
-
}
|
|
47
25
|
const result = await auth0Instance.getAccessToken(request, response, {
|
|
48
26
|
refresh: shouldRefresh,
|
|
49
27
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":["debug","requestId","getOrCreateRequestId"
|
|
1
|
+
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":["debug","requestId","getOrCreateRequestId"],"mappings":";;;;;;;;;AAQA,MAAM,GAAG,GAAGA,sBAAK,CAAC,4BAA4B,CAAC;AAExC,MAAM,6BAA6B,GAAG,OAAO,EAClD,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,GAMZ,KAAmD;AAClD,IAAA,MAAMC,WAAS,GAAGC,8BAAoB,CAAC,OAAO,CAAC;AAC/C,IAAA,GAAG,CAAC,qCAAqC,EAAE,aAAED,WAAS,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IAEvD,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC;IAClD,MAAM,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;AACtD,IAAA,MAAM,aAAa,GACjB,WAAW,CAAC,sBAAsB,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE;IAE1E,GAAG,CAAC,wBAAwB,EAAE;mBAC5BA,WAAS;QACT,aAAa;AACb,QAAA,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC9C,iBAAiB,EAAE,WAAW,CAAC,sBAAsB;QACrD,UAAU,EAAE,CAAC,CAAC,OAAO;AACtB,KAAA,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;AACnE,QAAA,OAAO,EAAE,aAAa;AACvB,KAAA,CAAC;IAEF,GAAG,CAAC,wBAAwB,EAAE;mBAC5BA,WAAS;QACT,SAAS,EAAE,MAAM,CAAC,SAAS;AAC3B,QAAA,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;AACjC,KAAA,CAAC;AAEF,IAAA,OAAO,MAAM;AACf;;;;"}
|
|
@@ -1,9 +1,17 @@
|
|
|
1
|
+
import debug from 'debug';
|
|
1
2
|
import { getAuth0Config } from '../../config/auth0.js';
|
|
2
3
|
import { getEnrichedUser } from './getUser.js';
|
|
3
4
|
|
|
5
|
+
const log = debug('@smg-automotive/auth:user');
|
|
4
6
|
const getAuthProps = async (context) => {
|
|
5
7
|
const auth0Config = getAuth0Config();
|
|
6
|
-
|
|
8
|
+
let user = null;
|
|
9
|
+
try {
|
|
10
|
+
user = await getEnrichedUser(context);
|
|
11
|
+
}
|
|
12
|
+
catch (error) {
|
|
13
|
+
log('Error enriching user:', error);
|
|
14
|
+
}
|
|
7
15
|
return { auth0Config, user };
|
|
8
16
|
};
|
|
9
17
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getAuthProps.js","sources":["../../../../../src/server/helpers/getAuthProps.ts"],"sourcesContent":[null],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"getAuthProps.js","sources":["../../../../../src/server/helpers/getAuthProps.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAWA,MAAM,GAAG,GAAG,KAAK,CAAC,2BAA2B,CAAC;MAEjC,YAAY,GAAG,OAC1B,OAMC,KAC6B;AAC9B,IAAA,MAAM,WAAW,GAAG,cAAc,EAAE;IAEpC,IAAI,IAAI,GAAG,IAAI;AACf,IAAA,IAAI;AACF,QAAA,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC;IACvC;IAAE,OAAO,KAAK,EAAE;AACd,QAAA,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC;IACrC;AAEA,IAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;AAC9B;;;;"}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { decodeJwt } from 'jose';
|
|
1
2
|
import { redirectToLogin } from '../helpers/redirectToLogin.js';
|
|
2
3
|
|
|
3
4
|
const crossApplicationStateSynchronization = async ({ request, language, auth0Instance, auth0Config, }) => {
|
|
@@ -26,10 +27,31 @@ const crossApplicationStateSynchronization = async ({ request, language, auth0In
|
|
|
26
27
|
const sellerIdFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
|
|
27
28
|
console.log('sellerIdFromCookie', sellerIdFromCookie);
|
|
28
29
|
console.log('typeof sellerIdFromCookie', typeof sellerIdFromCookie);
|
|
30
|
+
const decodedToken = session?.tokenSet.accessToken
|
|
31
|
+
? decodeJwt(session.tokenSet.accessToken)
|
|
32
|
+
: null;
|
|
33
|
+
// eslint-disable-next-line no-console
|
|
34
|
+
console.log('Decoded token info', {
|
|
35
|
+
decodedToken,
|
|
36
|
+
});
|
|
37
|
+
const sellerIdFromSession = session?.user.sellerId || null;
|
|
38
|
+
const sellerIdFromToken = Array.isArray(decodedToken?.sellerIds)
|
|
39
|
+
? decodedToken.sellerIds[0] || null
|
|
40
|
+
: null;
|
|
41
|
+
const sessionCookieMismatch = sellerIdFromCookie && sellerIdFromSession !== sellerIdFromCookie;
|
|
42
|
+
// There is a bug when refreshing tokens where the selected sellerId is not the first avaiable sellerId
|
|
43
|
+
// so auth0 will add the first sellerId to the token but the session will have the selected one
|
|
44
|
+
// leading to unauthorized API errors
|
|
45
|
+
// Note: This will loop when debug refresh is enabled so maybe drop it?
|
|
46
|
+
const sessionTokenMismatch = !sessionCookieMismatch &&
|
|
47
|
+
sellerIdFromToken &&
|
|
48
|
+
sellerIdFromToken !== sellerIdFromCookie;
|
|
49
|
+
console.log('sessionCookieMismatch', sessionCookieMismatch);
|
|
50
|
+
console.log('sessionTokenMismatch', sessionTokenMismatch);
|
|
29
51
|
let selectedSellerId;
|
|
30
52
|
if (sellerIdFromCookie &&
|
|
31
|
-
|
|
32
|
-
|
|
53
|
+
!impersonateSellerId &&
|
|
54
|
+
(sessionCookieMismatch || sessionTokenMismatch)) {
|
|
33
55
|
console.log('Selected seller ID out of sync, redirecting to login to resync');
|
|
34
56
|
selectedSellerId = sellerIdFromCookie;
|
|
35
57
|
}
|
|
@@ -42,8 +64,6 @@ const crossApplicationStateSynchronization = async ({ request, language, auth0In
|
|
|
42
64
|
selectedSellerId,
|
|
43
65
|
currentSellerId: session.user.sellerId,
|
|
44
66
|
});
|
|
45
|
-
// Like that???
|
|
46
|
-
console.log(redirectToLogin);
|
|
47
67
|
const response = redirectToLogin({
|
|
48
68
|
auth0Config,
|
|
49
69
|
language,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"crossApplicationStateSynchronization.js","sources":["../../../../../src/server/middleware/crossApplicationStateSynchronization.ts"],"sourcesContent":[null],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"crossApplicationStateSynchronization.js","sources":["../../../../../src/server/middleware/crossApplicationStateSynchronization.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAUO,MAAM,oCAAoC,GAAG,OAAO,EACzD,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,GAMZ,KAAkC;IACjC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IACvD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;AAEpD,IAAA,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;AAClB,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,MAAM,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CACxD,WAAW,CAAC,0BAA0B,CAAC,IAAI,CAC5C,EAAE,KAAK;AAER,IAAA,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,8BAA8B,CAAC;IAC7E,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,OAAO,8BAA8B,CACtC;AACD,IAAA,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;AAC3D,IAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;IAClE,OAAO,CAAC,GAAG,CACT,iCAAiC,EACjC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAChC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;IAEpC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,IAAI,CAAC,8BAA8B,EAAE;AACvE,QAAA,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE;AACD,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,IAAI,mBAAuC;AAC3C,IAAA,IACE,8BAA8B;AAC9B,QAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,8BAA8B,EACxD;AACA,QAAA,OAAO,CAAC,GAAG,CACT,oEAAoE,CACrE;QACD,mBAAmB,GAAG,8BAA8B;IACtD;AAEA,IAAA,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAC5C,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;AACR,IAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,OAAO,kBAAkB,CAAC;AAEnE,IAAA,MAAM,YAAY,GAAG,OAAO,EAAE,QAAQ,CAAC;UACnC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW;UACtC,IAAI;;AAER,IAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;QAChC,YAAY;AACb,KAAA,CAAC;IAEF,MAAM,mBAAmB,GAAG,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;IAC1D,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS;UAC3D,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;UAC7B,IAAI;AAER,IAAA,MAAM,qBAAqB,GACzB,kBAAkB,IAAI,mBAAmB,KAAK,kBAAkB;;;;;IAKlE,MAAM,oBAAoB,GACxB,CAAC,qBAAqB;QACtB,iBAAiB;QACjB,iBAAiB,KAAK,kBAAkB;AAE1C,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;AAC3D,IAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;AAEzD,IAAA,IAAI,gBAAoC;AACxC,IAAA,IACE,kBAAkB;AAClB,QAAA,CAAC,mBAAmB;AACpB,SAAC,qBAAqB,IAAI,oBAAoB,CAAC,EAC/C;AACA,QAAA,OAAO,CAAC,GAAG,CACT,gEAAgE,CACjE;QACD,gBAAgB,GAAG,kBAAkB;IACvC;AAEA,IAAA,IAAI,CAAC,gBAAgB,IAAI,CAAC,mBAAmB,EAAE;AAC7C,QAAA,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;AAC5C,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE;QACxD,mBAAmB;QACnB,gBAAgB;AAChB,QAAA,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;AACvC,KAAA,CAAC;IAEF,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,WAAW;QACX,QAAQ;AACR,QAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;QAChC,MAAM;QACN,mBAAmB;QACnB,gBAAgB;AACjB,KAAA,CAAC;;IAGF,OAAO,CAAC,QAAQ,GAAG;AACjB,QAAA,WAAW,EAAE,EAAE;AACf,QAAA,SAAS,EAAE,CAAC;KACb;AACD,IAAA,MAAM,aAAa,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE;AACnD,QAAA,GAAG,OAAO;AACV,QAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;AACtB,KAAA,CAAC;AAEF,IAAA,OAAO,QAAQ;AACjB;;;;"}
|
|
@@ -1,4 +1,3 @@
|
|
|
1
|
-
import { decodeJwt } from 'jose';
|
|
2
1
|
import debug from 'debug';
|
|
3
2
|
import { getOrCreateRequestId } from './requestId.js';
|
|
4
3
|
|
|
@@ -17,27 +16,6 @@ const proactivelyRefreshAccessToken = async ({ request, response, auth0Instance,
|
|
|
17
16
|
debugForceRefresh: auth0Config.debugForceTokenRefresh,
|
|
18
17
|
hasSession: !!session,
|
|
19
18
|
});
|
|
20
|
-
const decodedToken = session?.tokenSet.accessToken
|
|
21
|
-
? decodeJwt(session.tokenSet.accessToken)
|
|
22
|
-
: null;
|
|
23
|
-
// eslint-disable-next-line no-console
|
|
24
|
-
console.log('Decoded token info', {
|
|
25
|
-
requestId,
|
|
26
|
-
decodedToken,
|
|
27
|
-
});
|
|
28
|
-
const sellerIdFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
|
|
29
|
-
const sellerIdFromToken = decodedToken?.sellerId;
|
|
30
|
-
if (shouldRefresh && sellerIdFromCookie !== sellerIdFromToken) {
|
|
31
|
-
const staleResult = {
|
|
32
|
-
expiresAt: session?.tokenSet.expiresAt || 0,
|
|
33
|
-
token: session?.tokenSet.accessToken || '',
|
|
34
|
-
};
|
|
35
|
-
log('Out of sync token detected returning stale token', {
|
|
36
|
-
requestId,
|
|
37
|
-
...staleResult,
|
|
38
|
-
});
|
|
39
|
-
return staleResult;
|
|
40
|
-
}
|
|
41
19
|
const result = await auth0Instance.getAccessToken(request, response, {
|
|
42
20
|
refresh: shouldRefresh,
|
|
43
21
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"proactivelyRefreshAccessToken.js","sources":["../../../../../src/server/middleware/proactivelyRefreshAccessToken.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAQA,MAAM,GAAG,GAAG,KAAK,CAAC,4BAA4B,CAAC;AAExC,MAAM,6BAA6B,GAAG,OAAO,EAClD,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,GAMZ,KAAmD;AAClD,IAAA,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC;AAC/C,IAAA,GAAG,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IAEvD,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC;IAClD,MAAM,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;AACtD,IAAA,MAAM,aAAa,GACjB,WAAW,CAAC,sBAAsB,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE;IAE1E,GAAG,CAAC,wBAAwB,EAAE;QAC5B,SAAS;QACT,aAAa;AACb,QAAA,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC9C,iBAAiB,EAAE,WAAW,CAAC,sBAAsB;QACrD,UAAU,EAAE,CAAC,CAAC,OAAO;AACtB,KAAA,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;AACnE,QAAA,OAAO,EAAE,aAAa;AACvB,KAAA,CAAC;IAEF,GAAG,CAAC,wBAAwB,EAAE;QAC5B,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,SAAS;AAC3B,QAAA,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;AACjC,KAAA,CAAC;AAEF,IAAA,OAAO,MAAM;AACf;;;;"}
|