@tern-secure/auth 1.1.0-canary.v20251108045933 → 1.1.0-canary.v20251125170702

package/dist/cjs/instance/jwtClient.js

@@ -1,72 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var jwtClient_exports = {};
-__export(jwtClient_exports, {
-  createClientFromJwt: () => createClientFromJwt,
-  updateClient: () => updateClient
-});
-module.exports = __toCommonJS(jwtClient_exports);
-var import_jwt = require("../utils/jwt");
-const createClientFromJwt = (jwtToken) => {
-  if (!jwtToken) {
-    return null;
-  }
-  const { decoded } = (0, import_jwt.decode)(jwtToken);
-  console.log("[TernAuth] Loaded user from JWT:", decoded);
-  return decoded;
-};
-const updateClient = (user, options) => {
-  try {
-    if (options.onUserUpdate) {
-      options.onUserUpdate(user);
-    }
-    if (user && options.onSessionUpdate) {
-      user.getIdTokenResult().then((tokenResult) => {
-        const session = {
-          status: "active",
-          token: tokenResult.token,
-          claims: tokenResult.claims,
-          issuedAtTime: tokenResult.issuedAtTime,
-          expirationTime: tokenResult.expirationTime,
-          authTime: tokenResult.authTime,
-          signInProvider: tokenResult.signInProvider || "unknown",
-          signInSecondFactor: tokenResult.signInSecondFactor
-        };
-        if (options.onSessionUpdate) {
-          options.onSessionUpdate(session);
-        }
-      }).catch((error) => {
-        console.error("[TernAuth] Error getting token result for session:", error);
-        if (options.onSessionUpdate) {
-          options.onSessionUpdate(null);
-        }
-      });
-    } else if (options.onSessionUpdate) {
-      options.onSessionUpdate(null);
-    }
-  } catch (error) {
-    console.error("[TernAuth] Error updating client:", error);
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createClientFromJwt,
-  updateClient
-});
-//# sourceMappingURL=jwtClient.js.map

package/dist/cjs/instance/jwtClient.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/instance/jwtClient.ts"],"sourcesContent":["import type { DecodedIdToken, SignedInSession, TernSecureUser } from '@tern-secure/types';\n\nimport type { AuthCookieManager } from '../auth/AuthCookieManager';\nimport { decode } from '../utils/jwt';\n\n/**\n * Utility functions for loading user from JWT cookie and updating client state\n * This addresses the issue where user is undefined when client loads on page refresh\n */\n\nexport interface ClientUpdateOptions {\n  authCookieManager: AuthCookieManager;\n  onUserUpdate?: (user: TernSecureUser | null) => void;\n  onSessionUpdate?: (session: SignedInSession | null) => void;\n}\n\n/**\n * Creates Firebase user from stored JWT token (ID token)\n * Since the token is already a Firebase ID token, we validate it and wait for auth state\n */\nconst createClientFromJwt = (jwtToken: string | null): DecodedIdToken | null => {\n  if (!jwtToken) {\n    return null;\n  }\n\n  const { decoded } = decode(jwtToken);\n\n  console.log('[TernAuth] Loaded user from JWT:', decoded);\n\n  return decoded;\n};\n\n/**\n * Updates client user state and triggers callbacks\n */\nconst updateClient = (\n  user: TernSecureUser | null,\n  options: Pick<ClientUpdateOptions, 'onUserUpdate' | 'onSessionUpdate'>,\n): void => {\n  try {\n    // Update user\n    if (options.onUserUpdate) {\n      options.onUserUpdate(user);\n    }\n\n    // Update session if user exists\n    if (user && options.onSessionUpdate) {\n      user\n        .getIdTokenResult()\n        .then(tokenResult => {\n          const session: SignedInSession = {\n            status: 'active',\n            token: tokenResult.token,\n            claims: tokenResult.claims,\n            issuedAtTime: tokenResult.issuedAtTime,\n            expirationTime: tokenResult.expirationTime,\n            authTime: tokenResult.authTime,\n            signInProvider: tokenResult.signInProvider || 'unknown',\n            signInSecondFactor: tokenResult.signInSecondFactor,\n          };\n          if (options.onSessionUpdate) {\n            options.onSessionUpdate(session);\n          }\n        })\n        .catch(error => {\n          console.error('[TernAuth] Error getting token result for session:', error);\n          if (options.onSessionUpdate) {\n            options.onSessionUpdate(null);\n          }\n        });\n    } else if (options.onSessionUpdate) {\n      options.onSessionUpdate(null);\n    }\n  } catch (error) {\n    console.error('[TernAuth] Error updating client:', error);\n  }\n};\n\nexport { createClientFromJwt, updateClient };\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,iBAAuB;AAiBvB,MAAM,sBAAsB,CAAC,aAAmD;AAC9E,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,QAAQ,QAAI,mBAAO,QAAQ;AAEnC,UAAQ,IAAI,oCAAoC,OAAO;AAEvD,SAAO;AACT;AAKA,MAAM,eAAe,CACnB,MACA,YACS;AACT,MAAI;AAEF,QAAI,QAAQ,cAAc;AACxB,cAAQ,aAAa,IAAI;AAAA,IAC3B;AAGA,QAAI,QAAQ,QAAQ,iBAAiB;AACnC,WACG,iBAAiB,EACjB,KAAK,iBAAe;AACnB,cAAM,UAA2B;AAAA,UAC/B,QAAQ;AAAA,UACR,OAAO,YAAY;AAAA,UACnB,QAAQ,YAAY;AAAA,UACpB,cAAc,YAAY;AAAA,UAC1B,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,UACtB,gBAAgB,YAAY,kBAAkB;AAAA,UAC9C,oBAAoB,YAAY;AAAA,QAClC;AACA,YAAI,QAAQ,iBAAiB;AAC3B,kBAAQ,gBAAgB,OAAO;AAAA,QACjC;AAAA,MACF,CAAC,EACA,MAAM,WAAS;AACd,gBAAQ,MAAM,sDAAsD,KAAK;AACzE,YAAI,QAAQ,iBAAiB;AAC3B,kBAAQ,gBAAgB,IAAI;AAAA,QAC9B;AAAA,MACF,CAAC;AAAA,IACL,WAAW,QAAQ,iBAAiB;AAClC,cAAQ,gBAAgB,IAAI;AAAA,IAC9B;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,qCAAqC,KAAK;AAAA,EAC1D;AACF;","names":[]}

package/dist/cjs/resources/Base.js

@@ -1,137 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var Base_exports = {};
-__export(Base_exports, {
-  TernSecureBase: () => TernSecureBase
-});
-module.exports = __toCommonJS(Base_exports);
-var import_browser = require("@tern-secure/shared/browser");
-var import_Error = require("./Error");
-class TernSecureBase {
-  static ternsecure;
-  static get apiClient() {
-    return TernSecureBase.ternsecure.getApiClient();
-  }
-  static get authCookieManager() {
-    return this.ternsecure.authCookieManager();
-  }
-  get authCookieManager() {
-    return TernSecureBase.authCookieManager;
-  }
-  /**
-   * Core method to fetch data from API endpoints using coreApiClient
-   * This method handles the complete request lifecycle including error handling
-   */
-  static async fetchFromCoreApi(requestInit) {
-    var _a;
-    let apiResponse;
-    try {
-      apiResponse = await TernSecureBase.apiClient.request(requestInit, { timeoutMs: 1e4 });
-    } catch (error) {
-      if (this.shouldRethrowofflineNetworkError()) {
-        throw new import_Error.TernSecureRuntimeError((error == null ? void 0 : error.message) || String(error), {
-          code: "OFFLINE_NETWORK_ERROR"
-        });
-      } else if (!(0, import_browser.isValidBrowserOnline)()) {
-        console.warn(error);
-        return null;
-      } else {
-        throw error;
-      }
-    }
-    const { payload, status, statusText, headers } = apiResponse;
-    if (headers) {
-      const country = headers.get("x-country");
-      this.ternsecure.__internal_setCountry(country ? country.toLowerCase() : null);
-    }
-    if (status >= 200 && status <= 299) {
-      return payload;
-    }
-    if (status >= 400) {
-      const errors = payload == null ? void 0 : payload.errors;
-      const message = (_a = errors == null ? void 0 : errors[0]) == null ? void 0 : _a.message;
-      const apiResponseOptions = {
-        data: errors,
-        status
-      };
-      if (status === 429 && headers) {
-        const retryAfter = headers.get("retry-After");
-        if (retryAfter) {
-          const value = parseInt(retryAfter, 10);
-          if (!isNaN(value)) {
-            apiResponseOptions.retryAfter = value;
-          }
-        }
-      }
-      throw new import_Error.TernSecureAPIResponseError(message || statusText, apiResponseOptions);
-    }
-    return null;
-  }
-  /**
-   * Convenience method for making POST requests
-   */
-  static async basePost(params) {
-    return this.fetchFromCoreApi({ ...params, method: "POST" });
-  }
-  /**
-   * Instance method to fetch data from API endpoints
-   */
-  async fetchFromCoreApi(requestInit) {
-    return TernSecureBase.fetchFromCoreApi(requestInit);
-  }
-  /**
-   * Instance method for making POST requests
-   */
-  async basePost(params) {
-    return TernSecureBase.basePost(params);
-  }
-  /**
-   * Instance method to make GET requests
-   * This is a convenience method that sets the HTTP method to GET
-   */
-  async baseGet(params) {
-    return this.fetchFromCoreApi({ ...params, method: "GET" });
-  }
-  /**
-   * Protected instance method for making POST requests with specific path and body
-   * This is designed to be used by child classes like SignIn
-   */
-  async _post(params) {
-    return this.basePost({
-      path: params.path,
-      body: params.body
-    });
-  }
-  static async makeApiRequest(requestInit) {
-    return this.fetchFromCoreApi(requestInit);
-  }
-  async makeApiRequest(requestInit) {
-    return this.fetchFromCoreApi(requestInit);
-  }
-  static shouldRethrowofflineNetworkError() {
-    var _a, _b;
-    const experimental = (_b = (_a = TernSecureBase.ternsecure) == null ? void 0 : _a._internal_getOption) == null ? void 0 : _b.call(_a, "experimental");
-    return (experimental == null ? void 0 : experimental.rethrowOfflineNetworkErrors) || false;
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TernSecureBase
-});
-//# sourceMappingURL=Base.js.map

package/dist/cjs/resources/Base.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/resources/Base.ts"],"sourcesContent":["import { isValidBrowserOnline } from '@tern-secure/shared/browser';\nimport type { TernSecureApiErrorJSON } from '@tern-secure/types';\n\nimport type { ApiRequestInit, ApiResponse, ApiResponseJSON } from '../instance/coreApiClient';\n//import { coreApiClient} from '../instance/coreApiClient';\nimport { TernSecureAPIResponseError, TernSecureRuntimeError } from './Error';\nimport type { AuthCookieManager, TernSecureAuth } from './internal';\n\nexport type HTTPMethod =\n  | 'CONNECT'\n  | 'DELETE'\n  | 'GET'\n  | 'HEAD'\n  | 'OPTIONS'\n  | 'PATCH'\n  | 'POST'\n  | 'PUT'\n  | 'TRACE';\n\nexport type PostMutateParams = {\n  action?: string | undefined;\n  body?: any;\n  method?: HTTPMethod | undefined;\n  path?: string;\n  search?: ConstructorParameters<typeof URLSearchParams>[0];\n};\n\nexport abstract class TernSecureBase {\n  static ternsecure: TernSecureAuth;\n\n  static get apiClient() {\n    return TernSecureBase.ternsecure.getApiClient();\n  }\n\n  static get authCookieManager(): AuthCookieManager | undefined {\n    return this.ternsecure.authCookieManager();\n  }\n  protected get authCookieManager(): AuthCookieManager | undefined {\n    return TernSecureBase.authCookieManager;\n  }\n\n  /**\n   * Core method to fetch data from API endpoints using coreApiClient\n   * This method handles the complete request lifecycle including error handling\n   */\n  protected static async fetchFromCoreApi<J>(\n    requestInit: ApiRequestInit,\n  ): Promise<ApiResponseJSON<J> | null> {\n    let apiResponse: ApiResponse<J>;\n    try {\n      apiResponse = await TernSecureBase.apiClient.request<J>(requestInit, { timeoutMs: 10000 });\n    } catch (error) {\n      if (this.shouldRethrowofflineNetworkError()) {\n        throw new TernSecureRuntimeError((error as Error)?.message || String(error), {\n          code: 'OFFLINE_NETWORK_ERROR',\n        });\n      } else if (!isValidBrowserOnline()) {\n        console.warn(error);\n        return null;\n      } else {\n        throw error;\n      }\n    }\n\n    const { payload, status, statusText, headers } = apiResponse;\n\n    if (headers) {\n      const country = headers.get('x-country');\n      this.ternsecure.__internal_setCountry(country ? country.toLowerCase() : null);\n    }\n\n    if (status >= 200 && status <= 299) {\n      return payload;\n    }\n\n    if (status >= 400) {\n      const errors = payload?.errors as TernSecureApiErrorJSON[];\n      const message = errors?.[0]?.message;\n\n      const apiResponseOptions: ConstructorParameters<typeof TernSecureAPIResponseError>[1] = {\n        data: errors,\n        status,\n      };\n      if (status === 429 && headers) {\n        const retryAfter = headers.get('retry-After');\n        if (retryAfter) {\n          const value = parseInt(retryAfter, 10);\n          if (!isNaN(value)) {\n            apiResponseOptions.retryAfter = value;\n          }\n        }\n      }\n\n      throw new TernSecureAPIResponseError(message || statusText, apiResponseOptions);\n    }\n\n    return null;\n  }\n\n  /**\n   * Convenience method for making POST requests\n   */\n  static async basePost(params: PostMutateParams): Promise<ApiResponseJSON<any> | null> {\n    return this.fetchFromCoreApi({ ...params, method: 'POST' });\n  }\n\n  /**\n   * Instance method to fetch data from API endpoints\n   */\n  protected async fetchFromCoreApi(\n    requestInit: ApiRequestInit,\n  ): Promise<ApiResponseJSON<any> | null> {\n    return TernSecureBase.fetchFromCoreApi(requestInit);\n  }\n\n  /**\n   * Instance method for making POST requests\n   */\n  protected async basePost(params: PostMutateParams): Promise<ApiResponseJSON<any> | null> {\n    return TernSecureBase.basePost(params);\n  }\n\n  /**\n   * Instance method to make GET requests\n   * This is a convenience method that sets the HTTP method to GET\n   */\n  protected async baseGet(params: Omit<PostMutateParams, 'method'>): Promise<ApiResponseJSON<any> | null> {\n    return this.fetchFromCoreApi({ ...params, method: 'GET' });\n  }\n\n  /**\n   * Protected instance method for making POST requests with specific path and body\n   * This is designed to be used by child classes like SignIn\n   */\n  protected async _post(params: PostMutateParams): Promise<ApiResponseJSON<any> | null> {\n    return this.basePost({\n      path: params.path,\n      body: params.body,\n    });\n  }\n\n  static async makeApiRequest(requestInit: ApiRequestInit): Promise<ApiResponseJSON<any> | null> {\n    return this.fetchFromCoreApi(requestInit);\n  }\n\n  protected async makeApiRequest(\n    requestInit: ApiRequestInit,\n  ): Promise<ApiResponseJSON<any> | null> {\n    return this.fetchFromCoreApi(requestInit);\n  }\n\n  private static shouldRethrowofflineNetworkError(): boolean {\n    const experimental = TernSecureBase.ternsecure?._internal_getOption?.('experimental');\n    return experimental?.rethrowOfflineNetworkErrors || false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAqC;AAKrC,mBAAmE;AAsB5D,MAAe,eAAe;AAAA,EACnC,OAAO;AAAA,EAEP,WAAW,YAAY;AACrB,WAAO,eAAe,WAAW,aAAa;AAAA,EAChD;AAAA,EAEA,WAAW,oBAAmD;AAC5D,WAAO,KAAK,WAAW,kBAAkB;AAAA,EAC3C;AAAA,EACA,IAAc,oBAAmD;AAC/D,WAAO,eAAe;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAuB,iBACrB,aACoC;AA/CxC;AAgDI,QAAI;AACJ,QAAI;AACF,oBAAc,MAAM,eAAe,UAAU,QAAW,aAAa,EAAE,WAAW,IAAM,CAAC;AAAA,IAC3F,SAAS,OAAO;AACd,UAAI,KAAK,iCAAiC,GAAG;AAC3C,cAAM,IAAI,qCAAwB,+BAAiB,YAAW,OAAO,KAAK,GAAG;AAAA,UAC3E,MAAM;AAAA,QACR,CAAC;AAAA,MACH,WAAW,KAAC,qCAAqB,GAAG;AAClC,gBAAQ,KAAK,KAAK;AAClB,eAAO;AAAA,MACT,OAAO;AACL,cAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,EAAE,SAAS,QAAQ,YAAY,QAAQ,IAAI;AAEjD,QAAI,SAAS;AACX,YAAM,UAAU,QAAQ,IAAI,WAAW;AACvC,WAAK,WAAW,sBAAsB,UAAU,QAAQ,YAAY,IAAI,IAAI;AAAA,IAC9E;AAEA,QAAI,UAAU,OAAO,UAAU,KAAK;AAClC,aAAO;AAAA,IACT;AAEA,QAAI,UAAU,KAAK;AACjB,YAAM,SAAS,mCAAS;AACxB,YAAM,WAAU,sCAAS,OAAT,mBAAa;AAE7B,YAAM,qBAAkF;AAAA,QACtF,MAAM;AAAA,QACN;AAAA,MACF;AACA,UAAI,WAAW,OAAO,SAAS;AAC7B,cAAM,aAAa,QAAQ,IAAI,aAAa;AAC5C,YAAI,YAAY;AACd,gBAAM,QAAQ,SAAS,YAAY,EAAE;AACrC,cAAI,CAAC,MAAM,KAAK,GAAG;AACjB,+BAAmB,aAAa;AAAA,UAClC;AAAA,QACF;AAAA,MACF;AAEA,YAAM,IAAI,wCAA2B,WAAW,YAAY,kBAAkB;AAAA,IAChF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,SAAS,QAAgE;AACpF,WAAO,KAAK,iBAAiB,EAAE,GAAG,QAAQ,QAAQ,OAAO,CAAC;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,iBACd,aACsC;AACtC,WAAO,eAAe,iBAAiB,WAAW;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,SAAS,QAAgE;AACvF,WAAO,eAAe,SAAS,MAAM;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAgB,QAAQ,QAAgF;AACtG,WAAO,KAAK,iBAAiB,EAAE,GAAG,QAAQ,QAAQ,MAAM,CAAC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAgB,MAAM,QAAgE;AACpF,WAAO,KAAK,SAAS;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,aAAmE;AAC7F,WAAO,KAAK,iBAAiB,WAAW;AAAA,EAC1C;AAAA,EAEA,MAAgB,eACd,aACsC;AACtC,WAAO,KAAK,iBAAiB,WAAW;AAAA,EAC1C;AAAA,EAEA,OAAe,mCAA4C;AAvJ7D;AAwJI,UAAM,gBAAe,0BAAe,eAAf,mBAA2B,wBAA3B,4BAAiD;AACtE,YAAO,6CAAc,gCAA+B;AAAA,EACtD;AACF;","names":[]}

package/dist/cjs/resources/Error.js

@@ -1,31 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var Error_exports = {};
-__export(Error_exports, {
-  TernSecureAPIResponseError: () => import_errors_api.TernSecureAPIResponseError,
-  TernSecureRuntimeError: () => import_errors_api.TernSecureRuntimeError
-});
-module.exports = __toCommonJS(Error_exports);
-var import_errors_api = require("@tern-secure/shared/errors-api");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TernSecureAPIResponseError,
-  TernSecureRuntimeError
-});
-//# sourceMappingURL=Error.js.map

package/dist/cjs/resources/Error.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/resources/Error.ts"],"sourcesContent":["export {\n  TernSecureAPIResponseError,\n  TernSecureRuntimeError,\n} from \"@tern-secure/shared/errors-api\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAGO;","names":[]}

package/dist/cjs/resources/Session.js

@@ -1,105 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var Session_exports = {};
-__export(Session_exports, {
-  Session: () => Session
-});
-module.exports = __toCommonJS(Session_exports);
-var import_events = require("../instance/events");
-var import_Base = require("./Base");
-class Session extends import_Base.TernSecureBase {
-  pathRoot = "/sessions/createsession";
-  status;
-  token;
-  claims;
-  authTime;
-  expirationTime;
-  issuedAtTime;
-  signInProvider;
-  signInSecondFactor;
-  user;
-  constructor(sessionData) {
-    super();
-    this.initializeFromSessionData(sessionData);
-  }
-  /**
-   * Initialize session from existing session data
-   */
-  initializeFromSessionData(sessionData) {
-    this.status = sessionData.status || "pending";
-    this.token = sessionData.token || "";
-    this.claims = sessionData.claims || {};
-    this.authTime = sessionData.authTime || "";
-    this.expirationTime = sessionData.expirationTime || "";
-    this.issuedAtTime = sessionData.issuedAtTime || "";
-    this.signInProvider = sessionData.signInProvider || null;
-    this.signInSecondFactor = sessionData.signInSecondFactor || null;
-    this.user = sessionData.user;
-  }
-  /**
-   * Create custom token from current session for server-side sync
-   * This calls the backend API to create a custom token from the current ID token
-   */
-  createSession = (idToken, csrfToken) => {
-    return this._post({
-      path: this.pathRoot,
-      body: {
-        idToken,
-        csrfToken
-      }
-    });
-  };
-  /**
-   * FIXED: Now properly returns the custom token string instead of the full API response
-   * This method correctly extracts the token from the API response structure
-   */
-  getIdAndRefreshToken = async (idToken, csrfToken) => {
-    await this.createSession(idToken, csrfToken);
-  };
-  /**
-   * NEW: create method that calls API to create session
-   * API handles everything, no return value needed
-   * This method works with the existing sessionData passed to constructor
-   */
-  create = async (csrfToken) => {
-    await this.createSession(this.token, csrfToken);
-    import_events.eventBus.emit(import_events.events.SessionChanged, null);
-  };
-  /**
-   * Convert session to plain object for serialization
-   */
-  toJSON() {
-    return {
-      status: this.status,
-      token: this.token,
-      claims: this.claims,
-      authTime: this.authTime,
-      expirationTime: this.expirationTime,
-      issuedAtTime: this.issuedAtTime,
-      signInProvider: this.signInProvider,
-      signInSecondFactor: this.signInSecondFactor,
-      user: this.user
-    };
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  Session
-});
-//# sourceMappingURL=Session.js.map

package/dist/cjs/resources/Session.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/resources/Session.ts"],"sourcesContent":["import type {\n  IdTokenResult,\n  SessionJson,\n  SessionResource,\n  SessionStatus,\n  TernSecureUser,\n} from '@tern-secure/types';\n\nimport { eventBus, events } from '../instance/events';\nimport { TernSecureBase } from './Base';\n\n/**\n * Enhanced Session class that handles custom token authentication for client-server sync.\n *\n * Key Features:\n * - Manages custom tokens for server-side verification\n * - Uses TernSecureUser object directly (no Firebase Auth instance needed)\n * - Provides seamless client-server session synchronization\n * - Works with in-memory persistence by using custom tokens to restore auth state\n */\nexport class Session extends TernSecureBase implements SessionResource {\n  pathRoot = '/sessions/createsession';\n\n  status!: SessionStatus;\n  token!: string;\n  claims!: IdTokenResult['claims'];\n  authTime!: string;\n  expirationTime!: string;\n  issuedAtTime!: string;\n  signInProvider!: string | null;\n  signInSecondFactor!: string | null;\n  user?: TernSecureUser;\n\n  constructor(sessionData: Partial<SessionResource>) {\n    super();\n    this.initializeFromSessionData(sessionData);\n  }\n\n  /**\n   * Initialize session from existing session data\n   */\n  private initializeFromSessionData(sessionData: Partial<SessionResource>): void {\n    this.status = sessionData.status || 'pending';\n    this.token = sessionData.token || '';\n    this.claims = sessionData.claims || {};\n    this.authTime = sessionData.authTime || '';\n    this.expirationTime = sessionData.expirationTime || '';\n    this.issuedAtTime = sessionData.issuedAtTime || '';\n    this.signInProvider = sessionData.signInProvider || null;\n    this.signInSecondFactor = sessionData.signInSecondFactor || null;\n    this.user = sessionData.user;\n  }\n\n  /**\n   * Create custom token from current session for server-side sync\n   * This calls the backend API to create a custom token from the current ID token\n   */\n  private createSession = (idToken: string, csrfToken: string) => {\n    return this._post({\n      path: this.pathRoot,\n      body: {\n        idToken,\n        csrfToken,\n      },\n    });\n  };\n\n\n  /**\n   * FIXED: Now properly returns the custom token string instead of the full API response\n   * This method correctly extracts the token from the API response structure\n   */\n  getIdAndRefreshToken = async (idToken: string, csrfToken: string): Promise<void> => {\n    await this.createSession(idToken, csrfToken);\n  };\n\n  /**\n   * NEW: create method that calls API to create session\n   * API handles everything, no return value needed\n   * This method works with the existing sessionData passed to constructor\n   */\n  create = async (csrfToken: string): Promise<void> => {\n    await this.createSession(this.token, csrfToken);\n    eventBus.emit(events.SessionChanged, null);\n  };\n\n  /**\n   * Convert session to plain object for serialization\n   */\n  toJSON(): SessionJson {\n    return {\n      status: this.status,\n      token: this.token,\n      claims: this.claims,\n      authTime: this.authTime,\n      expirationTime: this.expirationTime,\n      issuedAtTime: this.issuedAtTime,\n      signInProvider: this.signInProvider,\n      signInSecondFactor: this.signInSecondFactor,\n      user: this.user,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,oBAAiC;AACjC,kBAA+B;AAWxB,MAAM,gBAAgB,2BAA0C;AAAA,EACrE,WAAW;AAAA,EAEX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,YAAY,aAAuC;AACjD,UAAM;AACN,SAAK,0BAA0B,WAAW;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKQ,0BAA0B,aAA6C;AAC7E,SAAK,SAAS,YAAY,UAAU;AACpC,SAAK,QAAQ,YAAY,SAAS;AAClC,SAAK,SAAS,YAAY,UAAU,CAAC;AACrC,SAAK,WAAW,YAAY,YAAY;AACxC,SAAK,iBAAiB,YAAY,kBAAkB;AACpD,SAAK,eAAe,YAAY,gBAAgB;AAChD,SAAK,iBAAiB,YAAY,kBAAkB;AACpD,SAAK,qBAAqB,YAAY,sBAAsB;AAC5D,SAAK,OAAO,YAAY;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,CAAC,SAAiB,cAAsB;AAC9D,WAAO,KAAK,MAAM;AAAA,MAChB,MAAM,KAAK;AAAA,MACX,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,uBAAuB,OAAO,SAAiB,cAAqC;AAClF,UAAM,KAAK,cAAc,SAAS,SAAS;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAS,OAAO,cAAqC;AACnD,UAAM,KAAK,cAAc,KAAK,OAAO,SAAS;AAC9C,2BAAS,KAAK,qBAAO,gBAAgB,IAAI;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,SAAsB;AACpB,WAAO;AAAA,MACL,QAAQ,KAAK;AAAA,MACb,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,cAAc,KAAK;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,oBAAoB,KAAK;AAAA,MACzB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/resources/SignIn.js

@@ -1,256 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var SignIn_exports = {};
-__export(SignIn_exports, {
-  SignIn: () => SignIn
-});
-module.exports = __toCommonJS(SignIn_exports);
-var import_errors = require("@tern-secure/shared/errors");
-var import_auth = require("firebase/auth");
-var import_Base = require("./Base");
-class SignIn extends import_Base.TernSecureBase {
-  pathRoot = "/sessions/createsession";
-  status = null;
-  auth;
-  csrfToken;
-  _currentUser = null;
-  constructor(auth, csrfToken) {
-    super();
-    this.auth = auth;
-    this.csrfToken = csrfToken;
-  }
-  signInWithCredential = async (credential) => {
-    const idToken = await credential.user.getIdToken();
-    const params = {
-      idToken,
-      csrfToken: this.csrfToken
-    };
-    return this._post({
-      path: this.pathRoot,
-      body: params
-    });
-  };
-  withEmailAndPassword = async (params) => {
-    try {
-      const { email, password } = params;
-      const { user, providerId, operationType } = await (0, import_auth.signInWithEmailAndPassword)(
-        this.auth,
-        email,
-        password
-      );
-      return {
-        status: "success",
-        user,
-        providerId,
-        operationType,
-        message: "Authentication successful",
-        error: !user.emailVerified ? "REQUIRES_VERIFICATION" : "AUTHENTICATED"
-      };
-    } catch (error) {
-      const authError = (0, import_errors.handleFirebaseAuthError)(error);
-      return {
-        status: "error",
-        message: authError.message,
-        error: authError.code
-      };
-    }
-  };
-  withCredential = async (params) => {
-    try {
-      const { email, password } = params;
-      const userCredential = await (0, import_auth.signInWithEmailAndPassword)(this.auth, email, password);
-      await this.signInWithCredential(userCredential);
-    } catch (error) {
-      const authError = (0, import_errors.handleFirebaseAuthError)(error);
-      console.error(authError);
-    }
-  };
-  withSocialProvider = async (provider, options = {}) => {
-    try {
-      const { mode = "popup" } = options;
-      if (mode === "redirect") {
-        const redirectResult = await this.authRedirectResult();
-        if (redirectResult) {
-          return redirectResult;
-        }
-        return await this._signInWithRedirect(provider, options);
-      } else {
-        return await this._signInWithPopUp(provider, options);
-      }
-    } catch (error) {
-      return {
-        status: "error",
-        message: error.message || `Sign in with ${provider} failed`,
-        error
-      };
-    }
-  };
-  completeMfaSignIn = async (_mfaToken, _mfaContext) => {
-    throw new Error("Method not implemented.");
-  };
-  sendPasswordResetEmail = async (email) => {
-    console.log(`Sending password reset email to ${email}`);
-  };
-  resendEmailVerification = async () => {
-    const user = this._currentUser;
-    if (!user) {
-      throw new Error("No user is currently signed in");
-    }
-    await user.reload();
-    if (user.emailVerified) {
-      return {
-        isVerified: true
-      };
-    }
-    const actionCodeSettings = {
-      url: "/sign-in",
-      // TODO: Make this configurable
-      handleCodeInApp: true
-    };
-    await (0, import_auth.sendEmailVerification)(user, actionCodeSettings);
-    return {
-      isVerified: false
-    };
-  };
-  getProviderConfig(providerName) {
-    switch (providerName.toLowerCase()) {
-      case "google": {
-        const googleProvider = new import_auth.GoogleAuthProvider();
-        return { provider: googleProvider };
-      }
-      case "apple": {
-        const appleProvider = new import_auth.OAuthProvider("apple.com");
-        return { provider: appleProvider };
-      }
-      case "microsoft": {
-        const microsoftProvider = new import_auth.OAuthProvider("microsoft.com");
-        return { provider: microsoftProvider };
-      }
-      case "github": {
-        const githubProvider = new import_auth.OAuthProvider("github.com");
-        return { provider: githubProvider };
-      }
-      case "twitter": {
-        const twitterProvider = new import_auth.OAuthProvider("twitter.com");
-        return { provider: twitterProvider };
-      }
-      case "facebook": {
-        const facebookProvider = new import_auth.OAuthProvider("facebook.com");
-        return { provider: facebookProvider };
-      }
-      default:
-        throw new Error(`Unsupported provider: ${providerName}`);
-    }
-  }
-  async authRedirectResult() {
-    try {
-      const result = await (0, import_auth.getRedirectResult)(this.auth);
-      if (result) {
-        const { user, providerId, operationType } = result;
-        return {
-          status: "success",
-          user,
-          providerId,
-          operationType
-        };
-      }
-      return null;
-    } catch (error) {
-      const authError = (0, import_errors.handleFirebaseAuthError)(error);
-      return {
-        status: "error",
-        message: authError.message,
-        error: authError.code
-      };
-    }
-  }
-  /**
-   * Sets custom OAuth parameters on the provider if provided by consumer
-   * @param provider - Firebase auth provider instance
-   * @param customParameters - Consumer-provided OAuth parameters
-   */
-  setProviderCustomParameters(provider, customParameters) {
-    if (!customParameters || Object.keys(customParameters).length === 0) {
-      return;
-    }
-    provider.setCustomParameters(customParameters);
-  }
-  /**
-   * Adds OAuth scopes to the provider if provided by consumer
-   * Handles provider-specific scope setting logic
-   * @param provider - Firebase auth provider instance
-   * @param scopes - Array of OAuth scopes to request
-   */
-  setProviderScopes(provider, scopes) {
-    if (!scopes || scopes.length === 0) {
-      return;
-    }
-    if (provider instanceof import_auth.GoogleAuthProvider) {
-      scopes.forEach((scope) => {
-        provider.addScope(scope);
-      });
-    } else if (provider instanceof import_auth.OAuthProvider) {
-      provider.addScope(scopes.join(" "));
-    }
-  }
-  /**
-   * Configures OAuth provider with consumer-provided options
-   * @param provider - Firebase auth provider instance
-   * @param options - Consumer options containing custom parameters and scopes
-   */
-  configureProvider(provider, options) {
-    this.setProviderCustomParameters(provider, options.customParameters);
-    this.setProviderScopes(provider, options.scopes);
-  }
-  executeAuthMethod = async (authMethod, providerName, options = {}) => {
-    try {
-      const config = this.getProviderConfig(providerName);
-      this.configureProvider(config.provider, options);
-      const { user, providerId, operationType } = await authMethod(this.auth, config.provider);
-      return {
-        status: "success",
-        message: "Authentication successful",
-        user,
-        providerId,
-        operationType
-      };
-    } catch (error) {
-      const authError = (0, import_errors.handleFirebaseAuthError)(error);
-      return {
-        status: "error",
-        message: authError.message,
-        error: authError.code
-      };
-    }
-  };
-  async _signInWithRedirect(providerName, options = {}) {
-    return this.executeAuthMethod(import_auth.signInWithRedirect, providerName, options);
-  }
-  async _signInWithPopUp(providerName, options = {}) {
-    return this.executeAuthMethod(import_auth.signInWithPopup, providerName, options);
-  }
-  async checkRedirectResult() {
-    return this.authRedirectResult();
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  SignIn
-});
-//# sourceMappingURL=SignIn.js.map