@stonyx/oauth 0.1.1-alpha.3 → 0.1.1-alpha.30

package/src/auth-request.js

@@ -1,74 +0,0 @@
-import { Request } from '@stonyx/rest-server';
-
-export default class AuthRequest extends Request {
-  constructor(oauth) {
-    super();
-    this.oauth = oauth;
-  }
-
-  handlers = {
-    get: {
-      '/': ({ headers }) => {
-        const sessionId = headers['session-id'];
-        if (!sessionId) return 401;
-
-        const user = this.oauth.getSession(sessionId);
-        if (!user) return 401;
-
-        return user;
-      },
-
-      '/login/:provider': (req, state) => {
-        const { provider: providerName } = req.params;
-
-        try {
-          const url = this.oauth.getAuthorizationUrl(providerName);
-          state.redirect = url;
-        } catch {
-          return 404;
-        }
-      },
-
-      '/callback/:provider': async (req, state) => {
-        const { provider: providerName } = req.params;
-        const { code, state: stateToken, error } = req.query;
-
-        if (error) {
-          if (this.oauth.frontendCallbackUrl) {
-            state.redirect = `${this.oauth.frontendCallbackUrl}?error=${encodeURIComponent(error)}`;
-            return;
-          }
-          return 400;
-        }
-
-        if (!code) return 400;
-
-        try {
-          const session = await this.oauth.handleCallback(providerName, code, stateToken);
-
-          if (this.oauth.frontendCallbackUrl) {
-            const params = new URLSearchParams({
-              sessionId: session.sessionId,
-              expiresAt: session.expiresAt,
-            });
-            state.redirect = `${this.oauth.frontendCallbackUrl}?${params}`;
-            return;
-          }
-
-          return session;
-        } catch {
-          if (this.oauth.frontendCallbackUrl) {
-            state.redirect = `${this.oauth.frontendCallbackUrl}?error=auth_failed`;
-            return;
-          }
-          return 500;
-        }
-      },
-
-      '/logout': ({ headers }) => {
-        const sessionId = headers['session-id'];
-        if (sessionId) this.oauth.logout(sessionId);
-      },
-    }
-  };
-}

package/src/main.js

@@ -1,83 +0,0 @@
-import config from 'stonyx/config';
-import log from 'stonyx/log';
-import { waitForModule } from 'stonyx';
-import { setup, emit } from '@stonyx/events';
-import RestServer from '@stonyx/rest-server';
-import TokenManager from './token-manager.js';
-import SessionManager from './session-manager.js';
-import AuthRequest from './auth-request.js';
-
-setup(['authenticate']);
-
-export default class OAuth {
-  providers = new Map();
-  pendingStates = new Map();
-
-  constructor() {
-    if (OAuth.instance) return OAuth.instance;
-    OAuth.instance = this;
-  }
-
-  async init() {
-    const { providers, sessionDuration, frontendCallbackUrl } = config.oauth;
-    this.frontendCallbackUrl = frontendCallbackUrl;
-
-    for (const [name, providerConfig] of Object.entries(providers)) {
-      const modulePath = providerConfig.module
-        ? `${config.rootPath}/${providerConfig.module}`
-        : `./providers/${name}.js`;
-      const { default: Provider } = await import(modulePath);
-      const flow = new Provider(providerConfig);
-      this.providers.set(name, { flow, tokenManager: new TokenManager(flow) });
-    }
-
-    this.sessionManager = new SessionManager(sessionDuration);
-
-    await waitForModule('rest-server');
-    RestServer.instance.mountRoute(AuthRequest, { name: 'auth', options: this });
-
-    log.oauth?.('OAuth module initialized');
-  }
-
-  getProvider(name) {
-    const provider = this.providers.get(name);
-    if (!provider) throw new Error(`OAuth provider "${name}" is not configured`);
-    return provider;
-  }
-
-  getAuthorizationUrl(providerName) {
-    const { flow } = this.getProvider(providerName);
-    const stateToken = crypto.randomUUID();
-    this.pendingStates.set(stateToken, Date.now());
-    return flow.buildAuthorizationUrl(stateToken);
-  }
-
-  async handleCallback(providerName, code, stateToken) {
-    if (!stateToken || !this.pendingStates.has(stateToken)) {
-      throw new Error('Invalid or missing state token');
-    }
-
-    const stateCreatedAt = this.pendingStates.get(stateToken);
-    this.pendingStates.delete(stateToken);
-
-    const TEN_MINUTES = 10 * 60 * 1000;
-    if (Date.now() - stateCreatedAt > TEN_MINUTES) {
-      throw new Error('State token has expired');
-    }
-
-    const { flow, tokenManager } = this.getProvider(providerName);
-    const tokens = await tokenManager.getTokens(code);
-    const rawUser = await flow.fetchUserInfo(tokens.accessToken);
-    const user = flow.normalizeUser(rawUser);
-    await emit('authenticate', user);
-    return this.sessionManager.create(user, tokens);
-  }
-
-  getSession(sessionId) {
-    return this.sessionManager.validate(sessionId);
-  }
-
-  logout(sessionId) {
-    this.sessionManager.destroy(sessionId);
-  }
-}

package/src/token-manager.js

@@ -1,26 +0,0 @@
-export default class TokenManager {
-  constructor(flow) {
-    this.flow = flow;
-  }
-
-  async getTokens(code) {
-    const tokens = await this.flow.exchangeCode(code);
-    tokens.expiresAt = Date.now() + (tokens.expiresIn * 1000);
-    return tokens;
-  }
-
-  async refresh(refreshToken) {
-    const tokens = await this.flow.refreshAccessToken(refreshToken);
-    tokens.expiresAt = Date.now() + (tokens.expiresIn * 1000);
-    return tokens;
-  }
-
-  async revoke(accessToken) {
-    return this.flow.revokeToken(accessToken);
-  }
-
-  isExpired(tokenData) {
-    if (!tokenData?.expiresAt) return true;
-    return Date.now() >= tokenData.expiresAt;
-  }
-}