@sudoplatform/sudo-user 11.1.0 → 12.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cjs/client/apiClient.js +149 -0
- package/cjs/client/apiClient.js.map +1 -0
- package/cjs/core/api-key-names.js +12 -0
- package/cjs/core/api-key-names.js.map +1 -0
- package/cjs/core/auth-store.js +92 -0
- package/cjs/core/auth-store.js.map +1 -0
- package/cjs/core/crypto.js +3 -0
- package/cjs/core/crypto.js.map +1 -0
- package/cjs/core/key-manager.js +113 -0
- package/cjs/core/key-manager.js.map +1 -0
- package/cjs/core/protected-store.js +3 -0
- package/cjs/core/protected-store.js.map +1 -0
- package/cjs/core/publisher.js +3 -0
- package/cjs/core/publisher.js.map +1 -0
- package/cjs/core/sdk-config.js +61 -0
- package/cjs/core/sdk-config.js.map +1 -0
- package/cjs/core/subscriber.js +3 -0
- package/cjs/core/subscriber.js.map +1 -0
- package/cjs/gen/graphql-types.js +105 -0
- package/cjs/gen/graphql-types.js.map +1 -0
- package/cjs/index.js +13 -0
- package/cjs/index.js.map +1 -0
- package/cjs/runtimes/browser/browser-crypto.js +10 -0
- package/cjs/runtimes/browser/browser-crypto.js.map +1 -0
- package/cjs/runtimes/node/node-crypto.js +9 -0
- package/cjs/runtimes/node/node-crypto.js.map +1 -0
- package/cjs/sdk.js +9 -0
- package/cjs/sdk.js.map +1 -0
- package/cjs/user/auth-provider.js +116 -0
- package/cjs/user/auth-provider.js.map +1 -0
- package/cjs/user/auth.js +136 -0
- package/cjs/user/auth.js.map +1 -0
- package/cjs/user/error.js +33 -0
- package/cjs/user/error.js.map +1 -0
- package/cjs/user/identity-provider.js +245 -0
- package/cjs/user/identity-provider.js.map +1 -0
- package/cjs/user/user-client-interface.js +3 -0
- package/cjs/user/user-client-interface.js.map +1 -0
- package/cjs/user/user-client.js +440 -0
- package/cjs/user/user-client.js.map +1 -0
- package/cjs/user/user-key-names.js +10 -0
- package/cjs/user/user-key-names.js.map +1 -0
- package/cjs/utils/resolvable-promise.js +20 -0
- package/cjs/utils/resolvable-promise.js.map +1 -0
- package/lib/client/apiClient.js +135 -180
- package/lib/client/apiClient.js.map +1 -0
- package/lib/core/api-key-names.js +8 -14
- package/lib/core/api-key-names.js.map +1 -0
- package/lib/core/auth-store.js +82 -138
- package/lib/core/auth-store.js.map +1 -0
- package/lib/core/crypto.js +2 -5
- package/lib/core/crypto.js.map +1 -0
- package/lib/core/key-manager.js +98 -148
- package/lib/core/key-manager.js.map +1 -0
- package/lib/core/protected-store.js +2 -5
- package/lib/core/protected-store.js.map +1 -0
- package/lib/core/publisher.js +2 -5
- package/lib/core/publisher.js.map +1 -0
- package/lib/core/sdk-config.js +56 -56
- package/lib/core/sdk-config.js.map +1 -0
- package/lib/core/subscriber.js +2 -5
- package/lib/core/subscriber.js.map +1 -0
- package/lib/gen/graphql-types.js +96 -135
- package/lib/gen/graphql-types.js.map +1 -0
- package/lib/index.js +6 -67
- package/lib/index.js.map +1 -0
- package/lib/runtimes/browser/browser-crypto.js +6 -14
- package/lib/runtimes/browser/browser-crypto.js.map +1 -0
- package/lib/runtimes/node/node-crypto.js +5 -11
- package/lib/runtimes/node/node-crypto.js.map +1 -0
- package/lib/sdk.js +6 -18
- package/lib/sdk.js.map +1 -0
- package/lib/user/auth-provider.js +81 -131
- package/lib/user/auth-provider.js.map +1 -0
- package/lib/user/auth.js +127 -179
- package/lib/user/auth.js.map +1 -0
- package/lib/user/error.js +15 -33
- package/lib/user/error.js.map +1 -0
- package/lib/user/identity-provider.js +228 -254
- package/lib/user/identity-provider.js.map +1 -0
- package/lib/user/user-client-interface.js +2 -5
- package/lib/user/user-client-interface.js.map +1 -0
- package/lib/user/user-client.js +423 -510
- package/lib/user/user-client.js.map +1 -0
- package/lib/user/user-key-names.js +6 -12
- package/lib/user/user-key-names.js.map +1 -0
- package/lib/utils/resolvable-promise.js +13 -19
- package/lib/utils/resolvable-promise.js.map +1 -0
- package/package.json +36 -28
- package/{lib → types}/client/apiClient.d.ts +0 -0
- package/{lib → types}/core/api-key-names.d.ts +0 -0
- package/{lib → types}/core/auth-store.d.ts +0 -0
- package/{lib → types}/core/crypto.d.ts +0 -0
- package/{lib → types}/core/key-manager.d.ts +0 -0
- package/types/core/protected-store.d.ts +5 -0
- package/{lib → types}/core/publisher.d.ts +0 -0
- package/{lib → types}/core/sdk-config.d.ts +0 -0
- package/{lib → types}/core/subscriber.d.ts +0 -0
- package/{lib → types}/gen/graphql-types.d.ts +0 -0
- package/{lib → types}/index.d.ts +0 -0
- package/{lib/runtimes/node/node-crypto.d.ts → types/runtimes/browser/browser-crypto.d.ts} +0 -0
- package/types/runtimes/node/node-crypto.d.ts +2 -0
- package/{lib → types}/sdk.d.ts +0 -0
- package/{lib → types}/user/auth-provider.d.ts +0 -0
- package/{lib → types}/user/auth.d.ts +0 -0
- package/{lib → types}/user/error.d.ts +0 -0
- package/{lib → types}/user/identity-provider.d.ts +0 -0
- package/{lib → types}/user/user-client-interface.d.ts +0 -0
- package/{lib → types}/user/user-client.d.ts +0 -0
- package/{lib → types}/user/user-key-names.d.ts +0 -0
- package/{lib → types}/utils/resolvable-promise.d.ts +0 -0
- package/types/redux-offline/index.d.ts +0 -4
package/cjs/sdk.js
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const tslib_1 = require("tslib");
|
|
4
|
+
/*
|
|
5
|
+
* Private interfaces for support for other Sudo Platform
|
|
6
|
+
* SDKs.
|
|
7
|
+
*/
|
|
8
|
+
tslib_1.__exportStar(require("./core/sdk-config"), exports);
|
|
9
|
+
//# sourceMappingURL=sdk.js.map
|
package/cjs/sdk.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,4DAAiC"}
|
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.LocalAuthenticationProvider = exports.LocalAuthenticationInfo = exports.TESTAuthenticationProvider = exports.TESTAuthenticationInfo = void 0;
|
|
4
|
+
const tslib_1 = require("tslib");
|
|
5
|
+
const JWT = tslib_1.__importStar(require("jsonwebtoken"));
|
|
6
|
+
const uuid_1 = require("uuid");
|
|
7
|
+
/**
|
|
8
|
+
* Authentication info consisting of a JWT signed using the TEST registration key.
|
|
9
|
+
*/
|
|
10
|
+
class TESTAuthenticationInfo {
|
|
11
|
+
constructor(jwt) {
|
|
12
|
+
this.jwt = jwt;
|
|
13
|
+
this.type = 'TEST';
|
|
14
|
+
}
|
|
15
|
+
isValid() {
|
|
16
|
+
return true;
|
|
17
|
+
}
|
|
18
|
+
encode() {
|
|
19
|
+
return this.jwt;
|
|
20
|
+
}
|
|
21
|
+
getUsername() {
|
|
22
|
+
return '';
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
exports.TESTAuthenticationInfo = TESTAuthenticationInfo;
|
|
26
|
+
/**
|
|
27
|
+
* Authentication provider for generating authentication info using a TEST registration key.
|
|
28
|
+
*
|
|
29
|
+
* @param name provider name. This name will be prepended to the generated UUID in JWT sub.
|
|
30
|
+
* @param privateKey PEM encoded RSA private key.
|
|
31
|
+
* @param keyId key ID of the TEST registration key which is obtained from the admin console.
|
|
32
|
+
* @param attributes additional attributes to be added to the issued authentication info.
|
|
33
|
+
*/
|
|
34
|
+
class TESTAuthenticationProvider {
|
|
35
|
+
constructor(name, privateKey, keyId = 'register_key', attributes) {
|
|
36
|
+
this.name = name;
|
|
37
|
+
this.privateKey = privateKey;
|
|
38
|
+
this.keyId = keyId;
|
|
39
|
+
this.attributes = attributes;
|
|
40
|
+
this.testRegistrationIssuer = 'testRegisterIssuer';
|
|
41
|
+
this.testRegistrationAudience = 'testRegisterAudience';
|
|
42
|
+
}
|
|
43
|
+
async getAuthenticationInfo() {
|
|
44
|
+
const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
|
|
45
|
+
jwtid: (0, uuid_1.v4)(),
|
|
46
|
+
audience: this.testRegistrationAudience,
|
|
47
|
+
expiresIn: '60s',
|
|
48
|
+
notBefore: '0m',
|
|
49
|
+
subject: `${this.name}-${(0, uuid_1.v4)()}`,
|
|
50
|
+
issuer: this.testRegistrationIssuer,
|
|
51
|
+
header: { alg: 'RS256', kid: this.keyId },
|
|
52
|
+
algorithm: 'RS256',
|
|
53
|
+
});
|
|
54
|
+
return new TESTAuthenticationInfo(jwt);
|
|
55
|
+
}
|
|
56
|
+
reset() {
|
|
57
|
+
// Not implemented
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
exports.TESTAuthenticationProvider = TESTAuthenticationProvider;
|
|
61
|
+
/**
|
|
62
|
+
* Authentication info consisting of a JWT signed using the locally stored private key.
|
|
63
|
+
*/
|
|
64
|
+
class LocalAuthenticationInfo {
|
|
65
|
+
constructor(jwt, username) {
|
|
66
|
+
this.jwt = jwt;
|
|
67
|
+
this.username = username;
|
|
68
|
+
this.type = 'FSSO';
|
|
69
|
+
}
|
|
70
|
+
isValid() {
|
|
71
|
+
return true;
|
|
72
|
+
}
|
|
73
|
+
encode() {
|
|
74
|
+
return this.jwt;
|
|
75
|
+
}
|
|
76
|
+
getUsername() {
|
|
77
|
+
return this.username;
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
exports.LocalAuthenticationInfo = LocalAuthenticationInfo;
|
|
81
|
+
/**
|
|
82
|
+
* Authentication info consisting of a JWT signed using the locally stored private key.
|
|
83
|
+
*
|
|
84
|
+
* @param name provider name. This name will be used to populate JWT iss (issuer).
|
|
85
|
+
* @param privateKey PEM encoded RSA private key.
|
|
86
|
+
* @param keyId key ID.
|
|
87
|
+
* @param username username to be associated with the issued authentication info.
|
|
88
|
+
* @param attributes additional attributes to be added to the issued authentication info.
|
|
89
|
+
*/
|
|
90
|
+
class LocalAuthenticationProvider {
|
|
91
|
+
constructor(name, privateKey, keyId, username, attributes) {
|
|
92
|
+
this.name = name;
|
|
93
|
+
this.privateKey = privateKey;
|
|
94
|
+
this.keyId = keyId;
|
|
95
|
+
this.username = username;
|
|
96
|
+
this.attributes = attributes;
|
|
97
|
+
}
|
|
98
|
+
async getAuthenticationInfo() {
|
|
99
|
+
const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
|
|
100
|
+
jwtid: (0, uuid_1.v4)(),
|
|
101
|
+
audience: 'identity-service',
|
|
102
|
+
expiresIn: '60s',
|
|
103
|
+
notBefore: '0m',
|
|
104
|
+
subject: this.username,
|
|
105
|
+
issuer: this.name,
|
|
106
|
+
header: { alg: 'RS256', kid: this.keyId },
|
|
107
|
+
algorithm: 'RS256',
|
|
108
|
+
});
|
|
109
|
+
return new LocalAuthenticationInfo(jwt, this.username);
|
|
110
|
+
}
|
|
111
|
+
reset() {
|
|
112
|
+
// Not implemented
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
exports.LocalAuthenticationProvider = LocalAuthenticationProvider;
|
|
116
|
+
//# sourceMappingURL=auth-provider.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../../src/user/auth-provider.ts"],"names":[],"mappings":";;;;AAAA,0DAAmC;AACnC,+BAAyB;AA2CzB;;GAEG;AACH,MAAa,sBAAsB;IAGjC,YAAoB,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;QAFtB,SAAI,GAAW,MAAM,CAAA;IAEI,CAAC;IAEnC,OAAO;QACL,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAhBD,wDAgBC;AAED;;;;;;;GAOG;AACH,MAAa,0BAA0B;IAGrC,YACU,IAAY,EACZ,UAAkB,EAClB,QAAgB,cAAc,EAC9B,UAAgC;QAHhC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,UAAK,GAAL,KAAK,CAAyB;QAC9B,eAAU,GAAV,UAAU,CAAsB;QANjC,2BAAsB,GAAW,oBAAoB,CAAA;QACrD,6BAAwB,GAAW,sBAAsB,CAAA;IAM/D,CAAC;IAEJ,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EACtC,IAAI,CAAC,UAAU,EACf;YACE,KAAK,EAAE,IAAA,SAAE,GAAE;YACX,QAAQ,EAAE,IAAI,CAAC,wBAAwB;YACvC,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAA,SAAE,GAAE,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,sBAAsB;YACnC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,OAAO;SACnB,CACF,CAAA;QACD,OAAO,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,KAAK;QACH,kBAAkB;IACpB,CAAC;CACF;AA/BD,gEA+BC;AAED;;GAEG;AACH,MAAa,uBAAuB;IAGlC,YAAoB,GAAW,EAAU,QAAgB;QAArC,QAAG,GAAH,GAAG,CAAQ;QAAU,aAAQ,GAAR,QAAQ,CAAQ;QAFhD,SAAI,GAAW,MAAM,CAAA;IAE8B,CAAC;IAE7D,OAAO;QACL,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;CACF;AAhBD,0DAgBC;AAED;;;;;;;;GAQG;AACH,MAAa,2BAA2B;IACtC,YACU,IAAY,EACZ,UAAkB,EAClB,KAAa,EACb,QAAgB,EAChB,UAAgC;QAJhC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAsB;IACvC,CAAC;IAEJ,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EACtC,IAAI,CAAC,UAAU,EACf;YACE,KAAK,EAAE,IAAA,SAAE,GAAE;YACX,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,OAAO;SACnB,CACF,CAAA;QACD,OAAO,IAAI,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC;IAED,KAAK;QACH,kBAAkB;IACpB,CAAC;CACF;AA9BD,kEA8BC"}
|
package/cjs/user/auth.js
ADDED
|
@@ -0,0 +1,136 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CognitoAuthUI = exports.DefaultRefreshTokenLifetime = void 0;
|
|
4
|
+
const tslib_1 = require("tslib");
|
|
5
|
+
const sudo_common_1 = require("@sudoplatform/sudo-common");
|
|
6
|
+
const amazon_cognito_auth_js_1 = require("amazon-cognito-auth-js");
|
|
7
|
+
const api_key_names_1 = require("../core/api-key-names");
|
|
8
|
+
const resolvable_promise_1 = require("../utils/resolvable-promise");
|
|
9
|
+
const JWT = tslib_1.__importStar(require("jsonwebtoken"));
|
|
10
|
+
const user_key_names_1 = require("./user-key-names");
|
|
11
|
+
exports.DefaultRefreshTokenLifetime = 60;
|
|
12
|
+
class CognitoAuthUI {
|
|
13
|
+
constructor(authenticationStore, federatedSignInConfig, keyManager, logger, launchUriFn) {
|
|
14
|
+
this.authenticationStore = authenticationStore;
|
|
15
|
+
this.federatedSignInConfig = federatedSignInConfig;
|
|
16
|
+
this.keyManager = keyManager;
|
|
17
|
+
this.launchUriFn = launchUriFn;
|
|
18
|
+
this.authenticationStore.subscribe(this);
|
|
19
|
+
this.auth = this.initCognitoAuthSDK();
|
|
20
|
+
const refreshTokenLifetime = this.federatedSignInConfig.refreshTokenLifetime;
|
|
21
|
+
this.refreshTokenLifetime =
|
|
22
|
+
refreshTokenLifetime ?? exports.DefaultRefreshTokenLifetime;
|
|
23
|
+
this.logger = logger;
|
|
24
|
+
}
|
|
25
|
+
initCognitoAuthSDK() {
|
|
26
|
+
const cognitoAuthConfig = {
|
|
27
|
+
ClientId: this.federatedSignInConfig.appClientId,
|
|
28
|
+
AppWebDomain: this.federatedSignInConfig.webDomain,
|
|
29
|
+
IdentityProvider: this.federatedSignInConfig.identityProvider,
|
|
30
|
+
RedirectUriSignIn: this.federatedSignInConfig.signInRedirectUri,
|
|
31
|
+
RedirectUriSignOut: this.federatedSignInConfig.signOutRedirectUri,
|
|
32
|
+
TokenScopesArray: ['openid'],
|
|
33
|
+
Storage: this.authenticationStore,
|
|
34
|
+
LaunchUri: this.launchUriFn,
|
|
35
|
+
};
|
|
36
|
+
const auth = new amazon_cognito_auth_js_1.CognitoAuth(cognitoAuthConfig);
|
|
37
|
+
auth.useCodeGrantFlow();
|
|
38
|
+
auth.userhandler = {
|
|
39
|
+
onSuccess: (result) => {
|
|
40
|
+
this.logger.info('Successfully signed in.', { result });
|
|
41
|
+
},
|
|
42
|
+
onFailure: (error) => {
|
|
43
|
+
this.logger.error(new sudo_common_1.AuthenticationError(error).message);
|
|
44
|
+
},
|
|
45
|
+
};
|
|
46
|
+
return auth;
|
|
47
|
+
}
|
|
48
|
+
presentFederatedSignInUI() {
|
|
49
|
+
this.auth.getSession();
|
|
50
|
+
}
|
|
51
|
+
async processFederatedSignInTokens(url) {
|
|
52
|
+
this.tokensRefreshedPromise =
|
|
53
|
+
(0, resolvable_promise_1.createResolvablePromise)();
|
|
54
|
+
this.auth.parseCognitoWebResponse(url);
|
|
55
|
+
const authDetails = await this.tokensRefreshedPromise;
|
|
56
|
+
await this.storeTokensInKeyManager(authDetails);
|
|
57
|
+
return authDetails.authenticationTokens;
|
|
58
|
+
}
|
|
59
|
+
/**
|
|
60
|
+
* This function is called when the authentication store notifies subscribers of an item update.
|
|
61
|
+
*
|
|
62
|
+
* @param itemName the name of the item being updated
|
|
63
|
+
*/
|
|
64
|
+
update(itemName) {
|
|
65
|
+
if (itemName === 'idToken') {
|
|
66
|
+
const authTokens = this.getAuthTokens();
|
|
67
|
+
const userId = this.authenticationStore.getItem(api_key_names_1.apiKeyNames.userId);
|
|
68
|
+
if (authTokens && userId) {
|
|
69
|
+
this.tokensRefreshedPromise?.resolve({
|
|
70
|
+
authenticationTokens: authTokens,
|
|
71
|
+
userId,
|
|
72
|
+
});
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
this.logger.debug('Updated: ', { itemName });
|
|
76
|
+
}
|
|
77
|
+
reset() {
|
|
78
|
+
const cognitoAuthAny = this.auth;
|
|
79
|
+
cognitoAuthAny.clearCachedTokensScopes();
|
|
80
|
+
cognitoAuthAny.signInUserSession = null;
|
|
81
|
+
cognitoAuthAny.signInUserSession = cognitoAuthAny.getCachedSession();
|
|
82
|
+
}
|
|
83
|
+
presentSignOutUI() {
|
|
84
|
+
const signOutUrl = this.auth.getFQDNSignOut();
|
|
85
|
+
this.auth.launchUri(signOutUrl);
|
|
86
|
+
}
|
|
87
|
+
async storeRefreshTokenLifetime(refreshTokenLifetime) {
|
|
88
|
+
const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
|
|
89
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.refreshTokenExpiry);
|
|
90
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
|
|
91
|
+
}
|
|
92
|
+
getAuthTokens() {
|
|
93
|
+
const idToken = this.authenticationStore.getItem(api_key_names_1.apiKeyNames.idToken);
|
|
94
|
+
const accessToken = this.authenticationStore.getItem(api_key_names_1.apiKeyNames.accessToken);
|
|
95
|
+
const refreshToken = this.authenticationStore.getItem(api_key_names_1.apiKeyNames.refreshToken);
|
|
96
|
+
const tokenExpiry = this.getTokenExpiry();
|
|
97
|
+
if (idToken && accessToken && refreshToken && tokenExpiry) {
|
|
98
|
+
return {
|
|
99
|
+
idToken: idToken,
|
|
100
|
+
accessToken: accessToken,
|
|
101
|
+
refreshToken: refreshToken,
|
|
102
|
+
tokenExpiry: tokenExpiry.getTime(),
|
|
103
|
+
};
|
|
104
|
+
}
|
|
105
|
+
else {
|
|
106
|
+
return undefined;
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
getTokenExpiry() {
|
|
110
|
+
const expiry = this.authenticationStore.getItem(api_key_names_1.apiKeyNames.tokenExpiry);
|
|
111
|
+
return expiry ? new Date(Number(expiry) * 1000) : undefined;
|
|
112
|
+
}
|
|
113
|
+
/**
|
|
114
|
+
* Store the authentication tokens and user id of the signed in user in the key manager.
|
|
115
|
+
*/
|
|
116
|
+
async storeTokensInKeyManager(authDetails) {
|
|
117
|
+
await this.keyManager.removeItem(user_key_names_1.userKeyNames.userId);
|
|
118
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.idToken);
|
|
119
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.accessToken);
|
|
120
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.refreshToken);
|
|
121
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.tokenExpiry);
|
|
122
|
+
const authTokens = authDetails.authenticationTokens;
|
|
123
|
+
await this.keyManager.addString(user_key_names_1.userKeyNames.userId, authDetails.userId);
|
|
124
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.idToken, authTokens.idToken);
|
|
125
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.accessToken, authTokens.accessToken);
|
|
126
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.refreshToken, authTokens.refreshToken);
|
|
127
|
+
const decoded = JWT.decode(authTokens.idToken, { complete: true });
|
|
128
|
+
if (decoded) {
|
|
129
|
+
const tokenExpiry = decoded.payload['exp'];
|
|
130
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.tokenExpiry, tokenExpiry);
|
|
131
|
+
}
|
|
132
|
+
await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
exports.CognitoAuthUI = CognitoAuthUI;
|
|
136
|
+
//# sourceMappingURL=auth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/user/auth.ts"],"names":[],"mappings":";;;;AAAA,2DAAuE;AACvE,mEAAoD;AACpD,yDAAmD;AAKnD,oEAGoC;AAEpC,0DAAmC;AACnC,qDAA+C;AAgClC,QAAA,2BAA2B,GAAG,EAAE,CAAA;AAE7C,MAAa,aAAa;IAMxB,YACU,mBAAwC,EACxC,qBAA4C,EAC5C,UAAsB,EAC9B,MAAc,EACN,WAAmC;QAJnC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QAEtB,gBAAW,GAAX,WAAW,CAAwB;QAE3C,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAErC,MAAM,oBAAoB,GAAG,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,CAAA;QAC5E,IAAI,CAAC,oBAAoB;YACvB,oBAAoB,IAAI,mCAA2B,CAAA;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEO,kBAAkB;QACxB,MAAM,iBAAiB,GAAG;YACxB,QAAQ,EAAE,IAAI,CAAC,qBAAqB,CAAC,WAAW;YAChD,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,SAAS;YAClD,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,gBAAgB;YAC7D,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,iBAAiB;YAC/D,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB;YACjE,gBAAgB,EAAE,CAAC,QAAQ,CAAC;YAC5B,OAAO,EAAE,IAAI,CAAC,mBAAmB;YACjC,SAAS,EAAE,IAAI,CAAC,WAAW;SAC5B,CAAA;QAED,MAAM,IAAI,GAAG,IAAI,oCAAW,CAAC,iBAAiB,CAAC,CAAA;QAC/C,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAEvB,IAAI,CAAC,WAAW,GAAG;YACjB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACzD,CAAC;YAED,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,iCAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;YAC3D,CAAC;SACF,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,wBAAwB;QACtB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,GAAW;QAEX,IAAI,CAAC,sBAAsB;YACzB,IAAA,4CAAuB,GAAyB,CAAA;QAClD,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAA;QACrD,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAA;QAC/C,OAAO,WAAW,CAAC,oBAAoB,CAAA;IACzC,CAAC;IACD;;;;OAIG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,QAAQ,KAAK,SAAS,EAAE;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,2BAAW,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,UAAU,IAAI,MAAM,EAAE;gBACxB,IAAI,CAAC,sBAAsB,EAAE,OAAO,CAAC;oBACnC,oBAAoB,EAAE,UAAU;oBAChC,MAAM;iBACP,CAAC,CAAA;aACH;SACF;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAW,CAAA;QACvC,cAAc,CAAC,uBAAuB,EAAE,CAAA;QACxC,cAAc,CAAC,iBAAiB,GAAG,IAAI,CAAA;QACvC,cAAc,CAAC,iBAAiB,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAA;IACtE,CAAC;IAED,gBAAgB;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAA;QAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,oBAA4B;QAE5B,MAAM,aAAa,GACjB,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,kBAAkB,CAAC,CAAA;QAChE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,2BAAW,CAAC,kBAAkB,EAC9B,aAAa,CAAC,QAAQ,EAAE,CACzB,CAAA;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,2BAAW,CAAC,OAAO,CAAC,CAAA;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAClD,2BAAW,CAAC,WAAW,CACxB,CAAA;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CACnD,2BAAW,CAAC,YAAY,CACzB,CAAA;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAEzC,IAAI,OAAO,IAAI,WAAW,IAAI,YAAY,IAAI,WAAW,EAAE;YACzD,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE;aACnC,CAAA;SACF;aAAM;YACL,OAAO,SAAS,CAAA;SACjB;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,2BAAW,CAAC,WAAW,CAAC,CAAA;QACxE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CACnC,WAAkC;QAElC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,6BAAY,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,WAAW,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,YAAY,CAAC,CAAA;QAC1D,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,WAAW,CAAC,CAAA;QAEzD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAA;QACnD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,6BAAY,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,2BAAW,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,2BAAW,CAAC,WAAW,EACvB,UAAU,CAAC,WAAW,CACvB,CAAA;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,2BAAW,CAAC,YAAY,EACxB,UAAU,CAAC,YAAY,CACxB,CAAA;QAED,MAAM,OAAO,GAAQ,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACvE,IAAI,OAAO,EAAE;YACX,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1C,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,2BAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;SACtE;QACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACjE,CAAC;CACF;AApKD,sCAoKC"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.IdentityServiceConfigNotFoundError = exports.AlreadyRegisteredError = void 0;
|
|
4
|
+
class UserError extends Error {
|
|
5
|
+
constructor(msg) {
|
|
6
|
+
super(msg);
|
|
7
|
+
this.name = this.constructor.name;
|
|
8
|
+
if (Error.captureStackTrace) {
|
|
9
|
+
Error.captureStackTrace(this, this.constructor);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
/**
|
|
14
|
+
* Indicates the user associated with the client is already registered.
|
|
15
|
+
*/
|
|
16
|
+
class AlreadyRegisteredError extends UserError {
|
|
17
|
+
constructor() {
|
|
18
|
+
super('User is already registered.');
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
exports.AlreadyRegisteredError = AlreadyRegisteredError;
|
|
22
|
+
/**
|
|
23
|
+
* Indicates the configuration related to Identity Service is not found. This may indicate that Identity Service
|
|
24
|
+
* is not deployed into your runtime instance or the config file that
|
|
25
|
+
* you are using is invalid.
|
|
26
|
+
*/
|
|
27
|
+
class IdentityServiceConfigNotFoundError extends UserError {
|
|
28
|
+
constructor() {
|
|
29
|
+
super('Identity service configuration not found.');
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
exports.IdentityServiceConfigNotFoundError = IdentityServiceConfigNotFoundError;
|
|
33
|
+
//# sourceMappingURL=error.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/user/error.ts"],"names":[],"mappings":";;;AAAA,MAAM,SAAU,SAAQ,KAAK;IAC3B,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;QACjC,IAAI,KAAK,CAAC,iBAAiB,EAAE;YAC3B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;SAChD;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAa,sBAAuB,SAAQ,SAAS;IACnD;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACtC,CAAC;CACF;AAJD,wDAIC;AAED;;;;GAIG;AACH,MAAa,kCAAmC,SAAQ,SAAS;IAC/D;QACE,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACpD,CAAC;CACF;AAJD,gFAIC"}
|
|
@@ -0,0 +1,245 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CognitoUserPoolIdentityProvider = void 0;
|
|
4
|
+
const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
|
|
5
|
+
const api_key_names_1 = require("../core/api-key-names");
|
|
6
|
+
const uuid_1 = require("uuid");
|
|
7
|
+
const sudo_common_1 = require("@sudoplatform/sudo-common");
|
|
8
|
+
const error_1 = require("./error");
|
|
9
|
+
class CognitoUserPoolIdentityProvider {
|
|
10
|
+
constructor(keyManager, config, logger) {
|
|
11
|
+
this.keyManager = keyManager;
|
|
12
|
+
this.config = config;
|
|
13
|
+
this.idpService = this.initCognitoIdpService();
|
|
14
|
+
const refreshTokenLifetime = this.config.identityService.refreshTokenLifetime;
|
|
15
|
+
this.refreshTokenLifetime = refreshTokenLifetime ?? 60;
|
|
16
|
+
this.logger = logger;
|
|
17
|
+
}
|
|
18
|
+
initCognitoIdpService() {
|
|
19
|
+
const idpService = new client_cognito_identity_provider_1.CognitoIdentityProviderClient({
|
|
20
|
+
region: this.config.identityService.region,
|
|
21
|
+
});
|
|
22
|
+
return idpService;
|
|
23
|
+
}
|
|
24
|
+
async globalSignOut(accessToken) {
|
|
25
|
+
try {
|
|
26
|
+
const params = {
|
|
27
|
+
AccessToken: accessToken,
|
|
28
|
+
};
|
|
29
|
+
const globalSignOut = new client_cognito_identity_provider_1.GlobalSignOutCommand(params);
|
|
30
|
+
const response = await this.idpService.send(globalSignOut);
|
|
31
|
+
this.logger.info('User successfully signed out.', { response });
|
|
32
|
+
}
|
|
33
|
+
catch (err) {
|
|
34
|
+
const error = err;
|
|
35
|
+
throw new sudo_common_1.SignOutError(error.message);
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
async register(uid, validationData) {
|
|
39
|
+
try {
|
|
40
|
+
const signUp = new client_cognito_identity_provider_1.SignUpCommand({
|
|
41
|
+
ValidationData: validationData,
|
|
42
|
+
Username: uid,
|
|
43
|
+
Password: `@FF57&Z1)123!-${(0, uuid_1.v4)()}`,
|
|
44
|
+
ClientId: this.config.identityService.clientId,
|
|
45
|
+
});
|
|
46
|
+
const response = await this.idpService.send(signUp);
|
|
47
|
+
if (response.UserConfirmed) {
|
|
48
|
+
this.logger.info('User successfully signed up.', { uid });
|
|
49
|
+
return uid;
|
|
50
|
+
}
|
|
51
|
+
else {
|
|
52
|
+
throw new sudo_common_1.UserNotConfirmedError();
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
catch (err) {
|
|
56
|
+
const error = err;
|
|
57
|
+
const errorMsg = error.message;
|
|
58
|
+
if (errorMsg.includes('sudoplatform.ServiceError')) {
|
|
59
|
+
throw new sudo_common_1.ServiceError(errorMsg);
|
|
60
|
+
}
|
|
61
|
+
else if (errorMsg.includes('sudoplatform.identity.UserValidationFailed') ||
|
|
62
|
+
errorMsg.includes('sudoplatform.identity.TestRegCheckFailed')) {
|
|
63
|
+
throw new sudo_common_1.NotAuthorizedError(errorMsg);
|
|
64
|
+
}
|
|
65
|
+
else if (errorMsg.includes('sudoplatform.identity.AlreadyRegistered')) {
|
|
66
|
+
throw new error_1.AlreadyRegisteredError();
|
|
67
|
+
}
|
|
68
|
+
else {
|
|
69
|
+
throw new sudo_common_1.FatalError(errorMsg);
|
|
70
|
+
}
|
|
71
|
+
}
|
|
72
|
+
}
|
|
73
|
+
async signInWithKey(userId, keyId) {
|
|
74
|
+
try {
|
|
75
|
+
const initiateAuthCommand = new client_cognito_identity_provider_1.InitiateAuthCommand({
|
|
76
|
+
ClientId: this.config.identityService.clientId,
|
|
77
|
+
AuthFlow: 'CUSTOM_AUTH',
|
|
78
|
+
AuthParameters: {
|
|
79
|
+
USERNAME: userId,
|
|
80
|
+
},
|
|
81
|
+
});
|
|
82
|
+
const initiateAuthResult = await this.idpService.send(initiateAuthCommand);
|
|
83
|
+
const challengeName = initiateAuthResult.ChallengeName;
|
|
84
|
+
const session = initiateAuthResult.Session;
|
|
85
|
+
const params = initiateAuthResult.ChallengeParameters;
|
|
86
|
+
if (params &&
|
|
87
|
+
params['nonce'] &&
|
|
88
|
+
params['audience'] &&
|
|
89
|
+
challengeName &&
|
|
90
|
+
session) {
|
|
91
|
+
const nonce = params['nonce'];
|
|
92
|
+
const audience = params['audience'];
|
|
93
|
+
const answer = await this.keyManager.signJWT(keyId, {
|
|
94
|
+
jti: nonce,
|
|
95
|
+
iss: userId,
|
|
96
|
+
aud: audience,
|
|
97
|
+
sub: userId,
|
|
98
|
+
exp: Math.floor(+new Date() / 1000) + 300,
|
|
99
|
+
});
|
|
100
|
+
const respondToAuthChallenge = new client_cognito_identity_provider_1.RespondToAuthChallengeCommand({
|
|
101
|
+
Session: session,
|
|
102
|
+
ClientId: this.config.identityService.clientId,
|
|
103
|
+
ChallengeName: challengeName,
|
|
104
|
+
ChallengeResponses: {
|
|
105
|
+
USERNAME: userId,
|
|
106
|
+
ANSWER: answer,
|
|
107
|
+
},
|
|
108
|
+
});
|
|
109
|
+
const respondToAuthChallengeResult = await this.idpService.send(respondToAuthChallenge);
|
|
110
|
+
const authResult = respondToAuthChallengeResult.AuthenticationResult;
|
|
111
|
+
const idToken = authResult?.IdToken;
|
|
112
|
+
const accessToken = authResult?.AccessToken;
|
|
113
|
+
const refreshToken = authResult?.RefreshToken;
|
|
114
|
+
const tokenExpiry = authResult?.ExpiresIn;
|
|
115
|
+
if (idToken && accessToken && refreshToken && tokenExpiry) {
|
|
116
|
+
const authTokens = {
|
|
117
|
+
idToken: idToken,
|
|
118
|
+
accessToken: accessToken,
|
|
119
|
+
refreshToken: refreshToken,
|
|
120
|
+
tokenExpiry: tokenExpiry,
|
|
121
|
+
};
|
|
122
|
+
await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
|
|
123
|
+
return authTokens;
|
|
124
|
+
}
|
|
125
|
+
else {
|
|
126
|
+
throw new sudo_common_1.AuthenticationError('Authentication tokens not found.');
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
else {
|
|
130
|
+
throw new sudo_common_1.AuthenticationError('Invalid initiate auth result.');
|
|
131
|
+
}
|
|
132
|
+
}
|
|
133
|
+
catch (err) {
|
|
134
|
+
const error = err;
|
|
135
|
+
throw new sudo_common_1.AuthenticationError(error.message);
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
async signInWithToken(userId, token, type) {
|
|
139
|
+
try {
|
|
140
|
+
const initiateAuth = new client_cognito_identity_provider_1.InitiateAuthCommand({
|
|
141
|
+
ClientId: this.config.identityService.clientId,
|
|
142
|
+
AuthFlow: 'CUSTOM_AUTH',
|
|
143
|
+
AuthParameters: {
|
|
144
|
+
USERNAME: userId,
|
|
145
|
+
},
|
|
146
|
+
});
|
|
147
|
+
const initiateAuthResult = await this.idpService.send(initiateAuth);
|
|
148
|
+
const challengeName = initiateAuthResult.ChallengeName;
|
|
149
|
+
const session = initiateAuthResult.Session;
|
|
150
|
+
if (challengeName && session) {
|
|
151
|
+
const respondToAuthChallenge = new client_cognito_identity_provider_1.RespondToAuthChallengeCommand({
|
|
152
|
+
Session: session,
|
|
153
|
+
ClientId: this.config.identityService.clientId,
|
|
154
|
+
ChallengeName: challengeName,
|
|
155
|
+
ChallengeResponses: {
|
|
156
|
+
USERNAME: userId,
|
|
157
|
+
ANSWER: token,
|
|
158
|
+
},
|
|
159
|
+
ClientMetadata: { challengeType: type },
|
|
160
|
+
});
|
|
161
|
+
const respondToAuthChallengeResult = await this.idpService.send(respondToAuthChallenge);
|
|
162
|
+
const authResult = respondToAuthChallengeResult.AuthenticationResult;
|
|
163
|
+
const idToken = authResult?.IdToken;
|
|
164
|
+
const accessToken = authResult?.AccessToken;
|
|
165
|
+
const refreshToken = authResult?.RefreshToken;
|
|
166
|
+
const tokenExpiry = authResult?.ExpiresIn;
|
|
167
|
+
if (idToken && accessToken && refreshToken && tokenExpiry) {
|
|
168
|
+
const authTokens = {
|
|
169
|
+
idToken: idToken,
|
|
170
|
+
accessToken: accessToken,
|
|
171
|
+
refreshToken: refreshToken,
|
|
172
|
+
tokenExpiry: tokenExpiry,
|
|
173
|
+
};
|
|
174
|
+
await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
|
|
175
|
+
return authTokens;
|
|
176
|
+
}
|
|
177
|
+
else {
|
|
178
|
+
throw new sudo_common_1.AuthenticationError('Authentication tokens not found.');
|
|
179
|
+
}
|
|
180
|
+
}
|
|
181
|
+
else {
|
|
182
|
+
throw new sudo_common_1.AuthenticationError('Invalid initiate auth result.');
|
|
183
|
+
}
|
|
184
|
+
}
|
|
185
|
+
catch (err) {
|
|
186
|
+
const error = err;
|
|
187
|
+
throw new sudo_common_1.AuthenticationError(error.message);
|
|
188
|
+
}
|
|
189
|
+
}
|
|
190
|
+
async refreshTokens(refreshToken) {
|
|
191
|
+
try {
|
|
192
|
+
const initiateAuth = new client_cognito_identity_provider_1.InitiateAuthCommand({
|
|
193
|
+
ClientId: this.config.identityService.clientId,
|
|
194
|
+
AuthFlow: 'REFRESH_TOKEN_AUTH',
|
|
195
|
+
AuthParameters: {
|
|
196
|
+
REFRESH_TOKEN: refreshToken,
|
|
197
|
+
},
|
|
198
|
+
});
|
|
199
|
+
const initiateAuthResult = await this.idpService.send(initiateAuth);
|
|
200
|
+
const idToken = initiateAuthResult.AuthenticationResult?.IdToken;
|
|
201
|
+
const accessToken = initiateAuthResult.AuthenticationResult?.AccessToken;
|
|
202
|
+
const tokenExpiry = initiateAuthResult.AuthenticationResult?.ExpiresIn;
|
|
203
|
+
if (idToken && accessToken && tokenExpiry) {
|
|
204
|
+
const authTokens = {
|
|
205
|
+
idToken: idToken,
|
|
206
|
+
accessToken: accessToken,
|
|
207
|
+
refreshToken: refreshToken,
|
|
208
|
+
tokenExpiry: tokenExpiry,
|
|
209
|
+
};
|
|
210
|
+
await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
|
|
211
|
+
return authTokens;
|
|
212
|
+
}
|
|
213
|
+
else {
|
|
214
|
+
throw new sudo_common_1.AuthenticationError('Authentication tokens not found.');
|
|
215
|
+
}
|
|
216
|
+
}
|
|
217
|
+
catch (err) {
|
|
218
|
+
const error = err;
|
|
219
|
+
throw new sudo_common_1.AuthenticationError(error.message);
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
async signOut(refreshToken) {
|
|
223
|
+
try {
|
|
224
|
+
const params = {
|
|
225
|
+
Token: refreshToken,
|
|
226
|
+
ClientId: this.config.identityService.clientId,
|
|
227
|
+
};
|
|
228
|
+
const revokeToken = new client_cognito_identity_provider_1.RevokeTokenCommand(params);
|
|
229
|
+
const response = await this.idpService.send(revokeToken);
|
|
230
|
+
this.logger.info('User successfully signed out.', { response });
|
|
231
|
+
}
|
|
232
|
+
catch (err) {
|
|
233
|
+
const error = err;
|
|
234
|
+
this.logger.error(error.message);
|
|
235
|
+
throw new sudo_common_1.SignOutError(error.message);
|
|
236
|
+
}
|
|
237
|
+
}
|
|
238
|
+
async storeRefreshTokenLifetime(refreshTokenLifetime) {
|
|
239
|
+
const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
|
|
240
|
+
await this.keyManager.removeItem(api_key_names_1.apiKeyNames.refreshTokenExpiry);
|
|
241
|
+
await this.keyManager.addString(api_key_names_1.apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
|
|
242
|
+
}
|
|
243
|
+
}
|
|
244
|
+
exports.CognitoUserPoolIdentityProvider = CognitoUserPoolIdentityProvider;
|
|
245
|
+
//# sourceMappingURL=identity-provider.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"identity-provider.js","sourceRoot":"","sources":["../../src/user/identity-provider.ts"],"names":[],"mappings":";;;AAAA,gGAOkD;AAElD,yDAAmD;AAGnD,+BAAyB;AACzB,2DAQkC;AAClC,mCAAgD;AA4DhD,MAAa,+BAA+B;IAK1C,YACU,UAAsB,EACtB,MAAc,EACtB,MAAc;QAFN,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAQ;QAGtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAA;QAE9C,MAAM,oBAAoB,GACxB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,oBAAoB,CAAA;QAClD,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,IAAI,EAAE,CAAA;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEO,qBAAqB;QAC3B,MAAM,UAAU,GAAG,IAAI,gEAA6B,CAAC;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;SAC3C,CAAC,CAAA;QAEF,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,IAAI;YACF,MAAM,MAAM,GAAG;gBACb,WAAW,EAAE,WAAW;aACzB,CAAA;YACD,MAAM,aAAa,GAAG,IAAI,uDAAoB,CAAC,MAAM,CAAC,CAAA;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;SAChE;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,0BAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACtC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,GAAW,EACX,cAAiD;QAEjD,IAAI;YACF,MAAM,MAAM,GAAG,IAAI,gDAAa,CAAC;gBAC/B,cAAc,EAAE,cAAc;gBAC9B,QAAQ,EAAE,GAAG;gBACb,QAAQ,EAAE,iBAAiB,IAAA,SAAE,GAAE,EAAE;gBACjC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;aAC/C,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAEnD,IAAI,QAAQ,CAAC,aAAa,EAAE;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;gBACzD,OAAO,GAAG,CAAA;aACX;iBAAM;gBACL,MAAM,IAAI,mCAAqB,EAAE,CAAA;aAClC;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAA;YAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE;gBAClD,MAAM,IAAI,0BAAY,CAAC,QAAQ,CAAC,CAAA;aACjC;iBAAM,IACL,QAAQ,CAAC,QAAQ,CAAC,4CAA4C,CAAC;gBAC/D,QAAQ,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAC7D;gBACA,MAAM,IAAI,gCAAkB,CAAC,QAAQ,CAAC,CAAA;aACvC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAE;gBACvE,MAAM,IAAI,8BAAsB,EAAE,CAAA;aACnC;iBAAM;gBACL,MAAM,IAAI,wBAAU,CAAC,QAAQ,CAAC,CAAA;aAC/B;SACF;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,KAAa;QAEb,IAAI;YACF,MAAM,mBAAmB,GAAG,IAAI,sDAAmB,CAAC;gBAClD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;gBAC9C,QAAQ,EAAE,aAAa;gBACvB,cAAc,EAAE;oBACd,QAAQ,EAAE,MAAM;iBACjB;aACF,CAAC,CAAA;YACF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;YAE1E,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAA;YACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,mBAAmB,CAAA;YAErD,IACE,MAAM;gBACN,MAAM,CAAC,OAAO,CAAC;gBACf,MAAM,CAAC,UAAU,CAAC;gBAClB,aAAa;gBACb,OAAO,EACP;gBACA,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;gBAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE;oBAClD,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,QAAQ;oBACb,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG;iBAC1C,CAAC,CAAA;gBAEF,MAAM,sBAAsB,GAAG,IAAI,gEAA6B,CAAC;oBAC/D,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;oBAC9C,aAAa,EAAE,aAAa;oBAC5B,kBAAkB,EAAE;wBAClB,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,MAAM;qBACf;iBACF,CAAC,CAAA;gBACF,MAAM,4BAA4B,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAC7D,sBAAsB,CACvB,CAAA;gBAED,MAAM,UAAU,GAAG,4BAA4B,CAAC,oBAAoB,CAAA;gBACpE,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,CAAA;gBACnC,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,CAAA;gBAC3C,MAAM,YAAY,GAAG,UAAU,EAAE,YAAY,CAAA;gBAC7C,MAAM,WAAW,GAAG,UAAU,EAAE,SAAS,CAAA;gBAEzC,IAAI,OAAO,IAAI,WAAW,IAAI,YAAY,IAAI,WAAW,EAAE;oBACzD,MAAM,UAAU,GAAG;wBACjB,OAAO,EAAE,OAAO;wBAChB,WAAW,EAAE,WAAW;wBACxB,YAAY,EAAE,YAAY;wBAC1B,WAAW,EAAE,WAAW;qBACzB,CAAA;oBACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;oBAC/D,OAAO,UAAU,CAAA;iBAClB;qBAAM;oBACL,MAAM,IAAI,iCAAmB,CAAC,kCAAkC,CAAC,CAAA;iBAClE;aACF;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,+BAA+B,CAAC,CAAA;aAC/D;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,iCAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SAC7C;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAc,EACd,KAAa,EACb,IAAY;QAEZ,IAAI;YACF,MAAM,YAAY,GAAG,IAAI,sDAAmB,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;gBAC9C,QAAQ,EAAE,aAAa;gBACvB,cAAc,EAAE;oBACd,QAAQ,EAAE,MAAM;iBACjB;aACF,CAAC,CAAA;YACF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAEnE,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAA;YACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;YAE1C,IAAI,aAAa,IAAI,OAAO,EAAE;gBAC5B,MAAM,sBAAsB,GAAG,IAAI,gEAA6B,CAAC;oBAC/D,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;oBAC9C,aAAa,EAAE,aAAa;oBAC5B,kBAAkB,EAAE;wBAClB,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,KAAK;qBACd;oBACD,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;iBACxC,CAAC,CAAA;gBACF,MAAM,4BAA4B,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAC7D,sBAAsB,CACvB,CAAA;gBAED,MAAM,UAAU,GAAG,4BAA4B,CAAC,oBAAoB,CAAA;gBACpE,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,CAAA;gBACnC,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,CAAA;gBAC3C,MAAM,YAAY,GAAG,UAAU,EAAE,YAAY,CAAA;gBAC7C,MAAM,WAAW,GAAG,UAAU,EAAE,SAAS,CAAA;gBAEzC,IAAI,OAAO,IAAI,WAAW,IAAI,YAAY,IAAI,WAAW,EAAE;oBACzD,MAAM,UAAU,GAAG;wBACjB,OAAO,EAAE,OAAO;wBAChB,WAAW,EAAE,WAAW;wBACxB,YAAY,EAAE,YAAY;wBAC1B,WAAW,EAAE,WAAW;qBACzB,CAAA;oBACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;oBAC/D,OAAO,UAAU,CAAA;iBAClB;qBAAM;oBACL,MAAM,IAAI,iCAAmB,CAAC,kCAAkC,CAAC,CAAA;iBAClE;aACF;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,+BAA+B,CAAC,CAAA;aAC/D;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,iCAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SAC7C;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,IAAI;YACF,MAAM,YAAY,GAAG,IAAI,sDAAmB,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;gBAC9C,QAAQ,EAAE,oBAAoB;gBAC9B,cAAc,EAAE;oBACd,aAAa,EAAE,YAAY;iBAC5B;aACF,CAAC,CAAA;YACF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAEnE,MAAM,OAAO,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,OAAO,CAAA;YAChE,MAAM,WAAW,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,WAAW,CAAA;YACxE,MAAM,WAAW,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,SAAS,CAAA;YAEtE,IAAI,OAAO,IAAI,WAAW,IAAI,WAAW,EAAE;gBACzC,MAAM,UAAU,GAAG;oBACjB,OAAO,EAAE,OAAO;oBAChB,WAAW,EAAE,WAAW;oBACxB,YAAY,EAAE,YAAY;oBAC1B,WAAW,EAAE,WAAW;iBACzB,CAAA;gBACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;gBAC/D,OAAO,UAAU,CAAA;aAClB;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,kCAAkC,CAAC,CAAA;aAClE;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,iCAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SAC7C;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI;YACF,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ;aAC/C,CAAA;YACD,MAAM,WAAW,GAAG,IAAI,qDAAkB,CAAC,MAAM,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;SAChE;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAChC,MAAM,IAAI,0BAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACtC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,oBAA4B;QAE5B,MAAM,aAAa,GACjB,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAAW,CAAC,kBAAkB,CAAC,CAAA;QAChE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,2BAAW,CAAC,kBAAkB,EAC9B,aAAa,CAAC,QAAQ,EAAE,CACzB,CAAA;IACH,CAAC;CACF;AAjRD,0EAiRC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user-client-interface.js","sourceRoot":"","sources":["../../src/user/user-client-interface.ts"],"names":[],"mappings":""}
|