@sudoplatform/sudo-user 11.0.0 → 12.0.0

package/lib/user/auth-provider.js

@@ -1,158 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.TESTAuthenticationProvider = exports.TESTAuthenticationInfo = exports.LocalAuthenticationProvider = exports.LocalAuthenticationInfo = void 0;
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-var _uuid = require("uuid");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-/**
- * Authentication info consisting of a JWT signed using the TEST registration key.
- */
-class TESTAuthenticationInfo {
-  constructor(jwt) {
-    this.jwt = jwt;
-
-    _defineProperty(this, "type", 'TEST');
-  }
-
-  isValid() {
-    return true;
-  }
-
-  encode() {
-    return this.jwt;
-  }
-
-  getUsername() {
-    return '';
-  }
-
-}
-/**
- * Authentication provider for generating authentication info using a TEST registration key.
- *
- * @param name provider name. This name will be prepended to the generated UUID in JWT sub.
- * @param privateKey PEM encoded RSA private key.
- * @param keyId key ID of the TEST registration key which is obtained from the admin console.
- * @param attributes additional attributes to be added to the issued authentication info.
- */
-
-
-exports.TESTAuthenticationInfo = TESTAuthenticationInfo;
-
-class TESTAuthenticationProvider {
-  constructor(name, privateKey, keyId = 'register_key', attributes) {
-    this.name = name;
-    this.privateKey = privateKey;
-    this.keyId = keyId;
-    this.attributes = attributes;
-
-    _defineProperty(this, "testRegistrationIssuer", 'testRegisterIssuer');
-
-    _defineProperty(this, "testRegistrationAudience", 'testRegisterAudience');
-  }
-
-  async getAuthenticationInfo() {
-    const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
-      jwtid: (0, _uuid.v4)(),
-      audience: this.testRegistrationAudience,
-      expiresIn: '60s',
-      notBefore: '0m',
-      subject: `${this.name}-${(0, _uuid.v4)()}`,
-      issuer: this.testRegistrationIssuer,
-      header: {
-        alg: 'RS256',
-        kid: this.keyId
-      },
-      algorithm: 'RS256'
-    });
-    return new TESTAuthenticationInfo(jwt);
-  }
-
-  reset() {// Not implemented
-  }
-
-}
-/**
- * Authentication info consisting of a JWT signed using the locally stored private key.
- */
-
-
-exports.TESTAuthenticationProvider = TESTAuthenticationProvider;
-
-class LocalAuthenticationInfo {
-  constructor(jwt, username) {
-    this.jwt = jwt;
-    this.username = username;
-
-    _defineProperty(this, "type", 'FSSO');
-  }
-
-  isValid() {
-    return true;
-  }
-
-  encode() {
-    return this.jwt;
-  }
-
-  getUsername() {
-    return this.username;
-  }
-
-}
-/**
- * Authentication info consisting of a JWT signed using the locally stored private key.
- *
- * @param name provider name. This name will be used to populate JWT iss (issuer).
- * @param privateKey PEM encoded RSA private key.
- * @param keyId key ID.
- * @param username username to be associated with the issued authentication info.
- * @param attributes additional attributes to be added to the issued authentication info.
- */
-
-
-exports.LocalAuthenticationInfo = LocalAuthenticationInfo;
-
-class LocalAuthenticationProvider {
-  constructor(name, privateKey, keyId, username, attributes) {
-    this.name = name;
-    this.privateKey = privateKey;
-    this.keyId = keyId;
-    this.username = username;
-    this.attributes = attributes;
-  }
-
-  async getAuthenticationInfo() {
-    const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
-      jwtid: (0, _uuid.v4)(),
-      audience: 'identity-service',
-      expiresIn: '60s',
-      notBefore: '0m',
-      subject: this.username,
-      issuer: this.name,
-      header: {
-        alg: 'RS256',
-        kid: this.keyId
-      },
-      algorithm: 'RS256'
-    });
-    return new LocalAuthenticationInfo(jwt, this.username);
-  }
-
-  reset() {// Not implemented
-  }
-
-}
-
-exports.LocalAuthenticationProvider = LocalAuthenticationProvider;

package/lib/user/auth.js

@@ -1,183 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.DefaultRefreshTokenLifetime = exports.CognitoAuthUI = void 0;
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var _amazonCognitoAuthJs = require("amazon-cognito-auth-js");
-
-var _apiKeyNames = require("../core/api-key-names");
-
-var _resolvablePromise = require("../utils/resolvable-promise");
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-var _userKeyNames = require("./user-key-names");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-const DefaultRefreshTokenLifetime = 60;
-exports.DefaultRefreshTokenLifetime = DefaultRefreshTokenLifetime;
-
-class CognitoAuthUI {
-  constructor(authenticationStore, federatedSignInConfig, keyManager, logger, launchUriFn) {
-    this.authenticationStore = authenticationStore;
-    this.federatedSignInConfig = federatedSignInConfig;
-    this.keyManager = keyManager;
-    this.launchUriFn = launchUriFn;
-
-    _defineProperty(this, "auth", void 0);
-
-    _defineProperty(this, "tokensRefreshedPromise", void 0);
-
-    _defineProperty(this, "refreshTokenLifetime", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    this.authenticationStore.subscribe(this);
-    this.auth = this.initCognitoAuthSDK();
-    const refreshTokenLifetime = this.federatedSignInConfig.refreshTokenLifetime;
-    this.refreshTokenLifetime = refreshTokenLifetime ?? DefaultRefreshTokenLifetime;
-    this.logger = logger;
-  }
-
-  initCognitoAuthSDK() {
-    const cognitoAuthConfig = {
-      ClientId: this.federatedSignInConfig.appClientId,
-      AppWebDomain: this.federatedSignInConfig.webDomain,
-      IdentityProvider: this.federatedSignInConfig.identityProvider,
-      RedirectUriSignIn: this.federatedSignInConfig.signInRedirectUri,
-      RedirectUriSignOut: this.federatedSignInConfig.signOutRedirectUri,
-      TokenScopesArray: ['openid'],
-      Storage: this.authenticationStore,
-      LaunchUri: this.launchUriFn
-    };
-    const auth = new _amazonCognitoAuthJs.CognitoAuth(cognitoAuthConfig);
-    auth.useCodeGrantFlow();
-    auth.userhandler = {
-      onSuccess: result => {
-        this.logger.info('Successfully signed in.', {
-          result
-        });
-      },
-      onFailure: error => {
-        this.logger.error(new _sudoCommon.AuthenticationError(error).message);
-      }
-    };
-    return auth;
-  }
-
-  presentFederatedSignInUI() {
-    this.auth.getSession();
-  }
-
-  async processFederatedSignInTokens(url) {
-    this.tokensRefreshedPromise = (0, _resolvablePromise.createResolvablePromise)();
-    this.auth.parseCognitoWebResponse(url);
-    const authDetails = await this.tokensRefreshedPromise;
-    await this.storeTokensInKeyManager(authDetails);
-    return authDetails.authenticationTokens;
-  }
-  /**
-   * This function is called when the authentication store notifies subscribers of an item update.
-   *
-   * @param itemName the name of the item being updated
-   */
-
-
-  update(itemName) {
-    if (itemName === 'idToken') {
-      const authTokens = this.getAuthTokens();
-      const userId = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.userId);
-
-      if (authTokens && userId) {
-        this.tokensRefreshedPromise?.resolve({
-          authenticationTokens: authTokens,
-          userId
-        });
-      }
-    }
-
-    this.logger.debug('Updated: ', {
-      itemName
-    });
-  }
-
-  reset() {
-    const cognitoAuthAny = this.auth;
-    cognitoAuthAny.clearCachedTokensScopes();
-    cognitoAuthAny.signInUserSession = null;
-    cognitoAuthAny.signInUserSession = cognitoAuthAny.getCachedSession();
-  }
-
-  presentSignOutUI() {
-    const signOutUrl = this.auth.getFQDNSignOut();
-    this.auth.launchUri(signOutUrl);
-  }
-
-  async storeRefreshTokenLifetime(refreshTokenLifetime) {
-    const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshTokenExpiry);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
-  }
-
-  getAuthTokens() {
-    const idToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.idToken);
-    const accessToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.accessToken);
-    const refreshToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.refreshToken);
-    const tokenExpiry = this.getTokenExpiry();
-
-    if (idToken && accessToken && refreshToken && tokenExpiry) {
-      return {
-        idToken: idToken,
-        accessToken: accessToken,
-        refreshToken: refreshToken,
-        tokenExpiry: tokenExpiry.getTime()
-      };
-    } else {
-      return undefined;
-    }
-  }
-
-  getTokenExpiry() {
-    const expiry = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    return expiry ? new Date(Number(expiry) * 1000) : undefined;
-  }
-  /**
-   * Store the authentication tokens and user id of the signed in user in the key manager.
-   */
-
-
-  async storeTokensInKeyManager(authDetails) {
-    await this.keyManager.removeItem(_userKeyNames.userKeyNames.userId);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.idToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.accessToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    const authTokens = authDetails.authenticationTokens;
-    await this.keyManager.addString(_userKeyNames.userKeyNames.userId, authDetails.userId);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.idToken, authTokens.idToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.accessToken, authTokens.accessToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshToken, authTokens.refreshToken);
-    const decoded = JWT.decode(authTokens.idToken, {
-      complete: true
-    });
-
-    if (decoded) {
-      const tokenExpiry = decoded.payload['exp'];
-      await this.keyManager.addString(_apiKeyNames.apiKeyNames.tokenExpiry, tokenExpiry);
-    }
-
-    await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
-  }
-
-}
-
-exports.CognitoAuthUI = CognitoAuthUI;

package/lib/user/identity-provider.js

@@ -1,270 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.CognitoUserPoolIdentityProvider = void 0;
-
-var _clientCognitoIdentityProvider = require("@aws-sdk/client-cognito-identity-provider");
-
-var _apiKeyNames = require("../core/api-key-names");
-
-var _uuid = require("uuid");
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var _error = require("./error");
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-class CognitoUserPoolIdentityProvider {
-  constructor(keyManager, config, logger) {
-    this.keyManager = keyManager;
-    this.config = config;
-
-    _defineProperty(this, "idpService", void 0);
-
-    _defineProperty(this, "refreshTokenLifetime", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    this.idpService = this.initCognitoIdpService();
-    const refreshTokenLifetime = this.config.identityService.refreshTokenLifetime;
-    this.refreshTokenLifetime = refreshTokenLifetime ?? 60;
-    this.logger = logger;
-  }
-
-  initCognitoIdpService() {
-    const idpService = new _clientCognitoIdentityProvider.CognitoIdentityProviderClient({
-      region: this.config.identityService.region
-    });
-    return idpService;
-  }
-
-  async globalSignOut(accessToken) {
-    return new Promise((resolve, reject) => {
-      const params = {
-        AccessToken: accessToken
-      };
-      const globalSignOut = new _clientCognitoIdentityProvider.GlobalSignOutCommand(params);
-      this.idpService.send(globalSignOut, (error, data) => {
-        if (error) {
-          this.logger.error(error.message);
-          reject(new _sudoCommon.SignOutError(error.message));
-        } else {
-          this.logger.info('User successfully signed out.', {
-            data
-          });
-          resolve();
-        }
-      });
-    });
-  }
-
-  async register(uid, validationData) {
-    try {
-      const signUp = new _clientCognitoIdentityProvider.SignUpCommand({
-        ValidationData: validationData,
-        Username: uid,
-        Password: `@FF57&Z1)123!-${(0, _uuid.v4)()}`,
-        ClientId: this.config.identityService.clientId
-      });
-      const response = await this.idpService.send(signUp);
-
-      if (response.UserConfirmed) {
-        this.logger.info('User successfully signed up.', {
-          uid
-        });
-        return uid;
-      } else {
-        throw new _sudoCommon.UserNotConfirmedError();
-      }
-    } catch (err) {
-      const error = err;
-      const errorMsg = error.message;
-
-      if (errorMsg.includes('sudoplatform.ServiceError')) {
-        throw new _sudoCommon.ServiceError(errorMsg);
-      } else if (errorMsg.includes('sudoplatform.identity.UserValidationFailed') || errorMsg.includes('sudoplatform.identity.TestRegCheckFailed')) {
-        throw new _sudoCommon.NotAuthorizedError(errorMsg);
-      } else if (errorMsg.includes('sudoplatform.identity.AlreadyRegistered')) {
-        throw new _error.AlreadyRegisteredError();
-      } else {
-        throw new _sudoCommon.FatalError(errorMsg);
-      }
-    }
-  }
-
-  async signInWithKey(userId, keyId) {
-    return new Promise(async (resolve, reject) => {
-      const initiateAuthCommand = new _clientCognitoIdentityProvider.InitiateAuthCommand({
-        ClientId: this.config.identityService.clientId,
-        AuthFlow: 'CUSTOM_AUTH',
-        AuthParameters: {
-          USERNAME: userId
-        }
-      });
-      const initiateAuthResult = await this.idpService.send(initiateAuthCommand);
-      const challengeName = initiateAuthResult.ChallengeName;
-      const session = initiateAuthResult.Session;
-      const params = initiateAuthResult.ChallengeParameters;
-
-      if (params && params['nonce'] && params['audience'] && challengeName && session) {
-        const nonce = params['nonce'];
-        const audience = params['audience'];
-        const answer = await this.keyManager.signJWT(keyId, {
-          jti: nonce,
-          iss: userId,
-          aud: audience,
-          sub: userId,
-          exp: Math.floor(+new Date() / 1000) + 300
-        });
-        const respondToAuthChallenge = new _clientCognitoIdentityProvider.RespondToAuthChallengeCommand({
-          Session: session,
-          ClientId: this.config.identityService.clientId,
-          ChallengeName: challengeName,
-          ChallengeResponses: {
-            USERNAME: userId,
-            ANSWER: answer
-          }
-        });
-        const respondToAuthChallengeResult = await this.idpService.send(respondToAuthChallenge);
-        const authResult = respondToAuthChallengeResult.AuthenticationResult;
-        const idToken = authResult?.IdToken;
-        const accessToken = authResult?.AccessToken;
-        const refreshToken = authResult?.RefreshToken;
-        const tokenExpiry = authResult?.ExpiresIn;
-
-        if (idToken && accessToken && refreshToken && tokenExpiry) {
-          const authTokens = {
-            idToken: idToken,
-            accessToken: accessToken,
-            refreshToken: refreshToken,
-            tokenExpiry: tokenExpiry
-          };
-          await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
-          resolve(authTokens);
-        } else {
-          reject(new _sudoCommon.AuthenticationError('Authentication tokens not found.'));
-        }
-      } else {
-        reject(new _sudoCommon.AuthenticationError('Invalid initiate auth result.'));
-      }
-    });
-  }
-
-  async signInWithToken(userId, token, type) {
-    return new Promise(async (resolve, reject) => {
-      const initiateAuth = new _clientCognitoIdentityProvider.InitiateAuthCommand({
-        ClientId: this.config.identityService.clientId,
-        AuthFlow: 'CUSTOM_AUTH',
-        AuthParameters: {
-          USERNAME: userId
-        }
-      });
-      const initiateAuthResult = await this.idpService.send(initiateAuth);
-      const challengeName = initiateAuthResult.ChallengeName;
-      const session = initiateAuthResult.Session;
-
-      if (challengeName && session) {
-        const respondToAuthChallenge = new _clientCognitoIdentityProvider.RespondToAuthChallengeCommand({
-          Session: session,
-          ClientId: this.config.identityService.clientId,
-          ChallengeName: challengeName,
-          ChallengeResponses: {
-            USERNAME: userId,
-            ANSWER: token
-          },
-          ClientMetadata: {
-            challengeType: type
-          }
-        });
-        const respondToAuthChallengeResult = await this.idpService.send(respondToAuthChallenge);
-        const authResult = respondToAuthChallengeResult.AuthenticationResult;
-        const idToken = authResult?.IdToken;
-        const accessToken = authResult?.AccessToken;
-        const refreshToken = authResult?.RefreshToken;
-        const tokenExpiry = authResult?.ExpiresIn;
-
-        if (idToken && accessToken && refreshToken && tokenExpiry) {
-          const authTokens = {
-            idToken: idToken,
-            accessToken: accessToken,
-            refreshToken: refreshToken,
-            tokenExpiry: tokenExpiry
-          };
-          await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
-          resolve(authTokens);
-        } else {
-          reject(new _sudoCommon.AuthenticationError('Authentication tokens not found.'));
-        }
-      } else {
-        reject(new _sudoCommon.AuthenticationError('Invalid initiate auth result.'));
-      }
-    });
-  }
-
-  async refreshTokens(refreshToken) {
-    return new Promise(async (resolve, reject) => {
-      try {
-        const initiateAuth = new _clientCognitoIdentityProvider.InitiateAuthCommand({
-          ClientId: this.config.identityService.clientId,
-          AuthFlow: 'REFRESH_TOKEN_AUTH',
-          AuthParameters: {
-            REFRESH_TOKEN: refreshToken
-          }
-        });
-        const initiateAuthResult = await this.idpService.send(initiateAuth);
-        const idToken = initiateAuthResult.AuthenticationResult?.IdToken;
-        const accessToken = initiateAuthResult.AuthenticationResult?.AccessToken;
-        const tokenExpiry = initiateAuthResult.AuthenticationResult?.ExpiresIn;
-
-        if (idToken && accessToken && tokenExpiry) {
-          const authTokens = {
-            idToken: idToken,
-            accessToken: accessToken,
-            refreshToken: refreshToken,
-            tokenExpiry: tokenExpiry
-          };
-          await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
-          resolve(authTokens);
-        } else {
-          reject(new _sudoCommon.AuthenticationError('Authentication tokens not found.'));
-        }
-      } catch (err) {
-        const error = err;
-        reject(new _sudoCommon.AuthenticationError(error.message));
-      }
-    });
-  }
-
-  async signOut(refreshToken) {
-    return new Promise((resolve, reject) => {
-      const params = {
-        Token: refreshToken,
-        ClientId: this.config.identityService.clientId
-      };
-      const revokeToken = new _clientCognitoIdentityProvider.RevokeTokenCommand(params);
-      this.idpService.send(revokeToken, (error, data) => {
-        if (error) {
-          this.logger.error(error.message);
-          reject(new _sudoCommon.SignOutError(error.message));
-        } else {
-          this.logger.info('User successfully signed out.', {
-            data
-          });
-          resolve();
-        }
-      });
-    });
-  }
-
-  async storeRefreshTokenLifetime(refreshTokenLifetime) {
-    const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshTokenExpiry);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
-  }
-
-}
-
-exports.CognitoUserPoolIdentityProvider = CognitoUserPoolIdentityProvider;

package/lib/user/user-client-interface.js

@@ -1,5 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});