@tern-secure/backend 1.2.0-canary.v20251020170039 → 1.2.0-canary.v20251023005301

package/dist/createRedirect.d.ts

@@ -0,0 +1,20 @@
+type RedirectAdapter<RedirectReturn> = (url: string) => RedirectReturn;
+type RedirectToParams = {
+    returnBackUrl?: string | URL | null;
+};
+export type RedirectFun<ReturnType> = (params?: RedirectToParams) => ReturnType;
+/**
+ * @internal
+ */
+type CreateRedirect = <ReturnType>(params: {
+    redirectAdapter: RedirectAdapter<ReturnType>;
+    baseUrl: URL | string;
+    signInUrl?: URL | string;
+    signUpUrl?: URL | string;
+}) => {
+    redirectToSignIn: RedirectFun<ReturnType>;
+    redirectToSignUp: RedirectFun<ReturnType>;
+};
+export declare const createRedirect: CreateRedirect;
+export {};
+//# sourceMappingURL=createRedirect.d.ts.map

package/dist/createRedirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRedirect.d.ts","sourceRoot":"","sources":["../src/createRedirect.ts"],"names":[],"mappings":"AAuCA,KAAK,eAAe,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC;AACvE,KAAK,gBAAgB,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAA;CAAE,CAAC;AAChE,MAAM,MAAM,WAAW,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,KAAK,UAAU,CAAC;AAEhF;;GAEG;AACH,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE;IACzC,eAAe,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;CAC1B,KAAK;IACJ,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;CAC3C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAoC5B,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,12 @@
 export { constants } from './constants';
+export { createRedirect } from './createRedirect';
+export type { RedirectFun } from './createRedirect';
 export type { TernSecureRequest } from './tokens/ternSecureRequest';
 export { createTernSecureRequest } from './tokens/ternSecureRequest';
 export type { AuthenticateRequestOptions, AuthenticateFireRequestOptions } from './tokens/types';
 export type { AuthObject, RequestState, SignedInAuthObject, SignedOutAuthObject, } from './tokens/authstate';
 export { signedIn, signedInAuthObject, signedOutAuthObject, AuthStatus } from './tokens/authstate';
 export { createBackendInstanceClient } from './instance/backendInstanceEdge';
-export { createFireClient } from './instance/backendFireInstance';
 export type { BackendInstance, TernSecureBackendOptions } from './instance/backendInstanceEdge';
 export { enableDebugLogging, disableDebugLogging, setLogLevel } from './utils/enableDebugLogging';
 export { LogLevel } from './utils/logger';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,YAAY,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAEjG,YAAY,EACV,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAEhG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAElG,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,aAAa,EACb,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,YAAY,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAEjG,YAAY,EACV,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAE7E,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAEhG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAElG,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,aAAa,EACb,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -27,7 +27,7 @@ __export(index_exports, {
   constants: () => constants,
   createAdapter: () => createAdapter,
   createBackendInstanceClient: () => createBackendInstanceClient,
-  createFireClient: () => createFireClient,
+  createRedirect: () => createRedirect,
   createTernSecureRequest: () => createTernSecureRequest,
   disableDebugLogging: () => disableDebugLogging,
   enableDebugLogging: () => enableDebugLogging,
@@ -102,6 +102,64 @@ var constants = {
   ContentTypes
 };
 
+// src/createRedirect.ts
+var buildUrl = (_baseUrl, _targetUrl, _returnBackUrl) => {
+  if (_baseUrl === "") {
+    return legacyBuildUrl(_targetUrl.toString(), _returnBackUrl?.toString());
+  }
+  const baseUrl = new URL(_baseUrl);
+  const returnBackUrl = _returnBackUrl ? new URL(_returnBackUrl, baseUrl) : void 0;
+  const res = new URL(_targetUrl, baseUrl);
+  if (returnBackUrl) {
+    res.searchParams.set("redirect_url", returnBackUrl.toString());
+  }
+  return res.toString();
+};
+var legacyBuildUrl = (targetUrl, redirectUrl) => {
+  let url;
+  if (!targetUrl.startsWith("http")) {
+    if (!redirectUrl || !redirectUrl.startsWith("http")) {
+      throw new Error("destination url or return back url should be an absolute path url!");
+    }
+    const baseURL = new URL(redirectUrl);
+    url = new URL(targetUrl, baseURL.origin);
+  } else {
+    url = new URL(targetUrl);
+  }
+  if (redirectUrl) {
+    url.searchParams.set("redirect_url", redirectUrl);
+  }
+  return url.toString();
+};
+var createRedirect = (params) => {
+  const { redirectAdapter, signInUrl, signUpUrl, baseUrl } = params;
+  const redirectToSignUp = ({ returnBackUrl } = {}) => {
+    if (!signUpUrl) {
+      throw new Error("SignUp URL is not defined");
+    }
+    const pathToSignUpUrl = `${baseUrl}/sign-up`;
+    function buildSignUpUrl(signIn) {
+      if (!signIn) {
+        return;
+      }
+      const url = new URL(signIn, baseUrl);
+      url.pathname = `${url.pathname}/create`;
+      return url.toString();
+    }
+    const targetUrl = signUpUrl || buildSignUpUrl(signInUrl) || pathToSignUpUrl;
+    return redirectAdapter(buildUrl(baseUrl, targetUrl, returnBackUrl));
+  };
+  const redirectToSignIn = ({ returnBackUrl } = {}) => {
+    if (!signInUrl) {
+      throw new Error("SignIn URL is not defined");
+    }
+    const pathToSignInUrl = `${baseUrl}/sign-in`;
+    const targetUrl = signInUrl || pathToSignInUrl;
+    return redirectAdapter(buildUrl(baseUrl, targetUrl, returnBackUrl));
+  };
+  return { redirectToSignUp, redirectToSignIn };
+};
+
 // src/tokens/ternSecureRequest.ts
 var import_cookie = require("cookie");
 
@@ -232,22 +290,26 @@ function signedOutAuthObject() {
     error: "No active session"
   };
 }
-function signedIn(sessionClaims, headers = new Headers(), token) {
+function signedIn(authCtx, sessionClaims, headers = new Headers(), token) {
   const authObject = signedInAuthObject(token, sessionClaims);
   return {
     status: AuthStatus.SignedIn,
     reason: null,
+    signInUrl: authCtx.signInUrl || "",
+    signUpUrl: authCtx.signUpUrl || "",
     isSignedIn: true,
     auth: () => authObject,
     token,
     headers
   };
 }
-function signedOut(reason, message = "", headers = new Headers()) {
+function signedOut(authCtx, reason, message = "", headers = new Headers()) {
   return decorateHeaders({
     status: AuthStatus.SignedOut,
     reason,
     message,
+    signInUrl: authCtx.signInUrl || "",
+    signUpUrl: authCtx.signUpUrl || "",
     isSignedIn: false,
     auth: () => signedOutAuthObject(),
     token: null,
@@ -1399,7 +1461,7 @@ async function authenticateRequest(request, options) {
       if (errors) {
         throw errors[0];
       }
-      const signedInRequestState = signedIn(data, void 0, context.idTokenInCookie);
+      const signedInRequestState = signedIn(context, data, void 0, context.idTokenInCookie);
       return signedInRequestState;
     } catch (err) {
       return handleError(err, "cookie");
@@ -1412,7 +1474,7 @@ async function authenticateRequest(request, options) {
       if (errors) {
         throw errors[0];
       }
-      const signedInRequestState = signedIn(data, void 0, sessionTokenInHeader);
+      const signedInRequestState = signedIn(context, data, void 0, sessionTokenInHeader);
       return signedInRequestState;
     } catch (err) {
       return handleError(err, "header");
@@ -1420,13 +1482,13 @@ async function authenticateRequest(request, options) {
   }
   async function handleError(err, tokenCarrier) {
     if (!(err instanceof TokenVerificationError)) {
-      return signedOut(AuthErrorReason.UnexpectedError);
+      return signedOut(context, AuthErrorReason.UnexpectedError);
     }
     let refreshError;
     if (isRequestForRefresh(err, context, request)) {
       const { data, error } = await handleRefresh();
       if (data) {
-        return signedIn(data.decoded, data.headers, data.token);
+        return signedIn(context, data.decoded, data.headers, data.token);
       }
       if (error?.cause?.reason) {
         refreshError = error.cause.reason;
@@ -1441,7 +1503,7 @@ async function authenticateRequest(request, options) {
       }
     }
     err.tokenCarrier = tokenCarrier;
-    return signedOut(err.reason, err.getFullMessage());
+    return signedOut(context, err.reason, err.getFullMessage());
   }
   if (hasAuthorizationHeader(request)) {
     return authenticateRequestWithTokenInHeader();
@@ -1471,100 +1533,6 @@ function createBackendInstanceClient(options) {
   };
 }
 
-// src/tokens/requestFire.ts
-var defaultFirebaseOptions = {
-  apiKey: "",
-  authDomain: "",
-  projectId: "",
-  tenantId: void 0
-};
-function mergePreDefinedOptions2(preDefinedOptions, options) {
-  return Object.keys(preDefinedOptions).reduce(
-    (obj, key) => {
-      return { ...obj, [key]: options[key] || obj[key] };
-    },
-    { ...preDefinedOptions }
-  );
-}
-var BEARER_PREFIX = "Bearer ";
-var AUTH_COOKIE_NAME = "_session_cookie";
-function extractTokenFromHeader(request) {
-  const authHeader = request.headers.get("Authorization");
-  if (!authHeader || !authHeader.startsWith(BEARER_PREFIX)) {
-    return null;
-  }
-  return authHeader.slice(BEARER_PREFIX.length);
-}
-function extractTokenFromCookie(request) {
-  const cookieHeader = request.headers.get("Cookie") || void 0;
-  if (!cookieHeader) {
-    return null;
-  }
-  const cookies = cookieHeader.split(";").reduce(
-    (acc, cookie) => {
-      const [name, value] = cookie.trim().split("=");
-      acc[name] = value;
-      return acc;
-    },
-    {}
-  );
-  return cookies[AUTH_COOKIE_NAME] || null;
-}
-function hasAuthorizationHeader2(request) {
-  return request.headers.has("Authorization");
-}
-async function authenticateRequest2(request, options) {
-  async function authenticateRequestWithTokenInCookie() {
-    const token = extractTokenFromCookie(request);
-    if (!token) {
-      return signedOut(AuthErrorReason.SessionTokenMissing);
-    }
-    const { data, errors } = await verifyToken(token, options);
-    if (errors) {
-      throw errors[0];
-    }
-    const signedInRequestState = signedIn(data, void 0, token);
-    return signedInRequestState;
-  }
-  async function authenticateRequestWithTokenInHeader() {
-    const token = extractTokenFromHeader(request);
-    if (!token) {
-      return signedOut(AuthErrorReason.SessionTokenMissing);
-    }
-    const { data, errors } = await verifyToken(token, options);
-    if (errors) {
-      throw errors[0];
-    }
-    const signedInRequestState = signedIn(data, void 0, token);
-    return signedInRequestState;
-  }
-  if (hasAuthorizationHeader2(request)) {
-    return authenticateRequestWithTokenInHeader();
-  }
-  return authenticateRequestWithTokenInCookie();
-}
-function createFireAuthenticateRequest(params) {
-  const buildTimeOptions = mergePreDefinedOptions2(defaultFirebaseOptions, params.options);
-  const handleAuthenticateRequest = (request, options = {}) => {
-    const runtimeOptions = { ...buildTimeOptions, ...options };
-    return authenticateRequest2(request, runtimeOptions);
-  };
-  return {
-    authenticateRequest: handleAuthenticateRequest
-  };
-}
-
-// src/instance/backendFireInstance.ts
-function createFireClient(options) {
-  const opts = { ...options };
-  const apiClient = createFireApi(opts);
-  const requestState = createFireAuthenticateRequest({ options: opts });
-  return {
-    ...apiClient,
-    ...requestState
-  };
-}
-
 // src/utils/logger.ts
 var LogLevel = /* @__PURE__ */ ((LogLevel2) => {
   LogLevel2[LogLevel2["ERROR"] = 0] = "ERROR";
@@ -1834,7 +1802,7 @@ function validateCheckRevokedOptions(options) {
   constants,
   createAdapter,
   createBackendInstanceClient,
-  createFireClient,
+  createRedirect,
   createTernSecureRequest,
   disableDebugLogging,
   enableDebugLogging,