@things-factory/auth-base 5.0.7 → 6.0.0-alpha.0

package/client/actions/auth.ts

@@ -0,0 +1,23 @@
+import { AnyAction } from 'redux'
+import { ThunkAction } from 'redux-thunk'
+
+export const SET_PROFILE = 'SET-PROFILE'
+export const SET_AUTH = 'SET-AUTH'
+
+export const updateUser =
+  (user: any): ThunkAction<void, any, unknown, AnyAction> =>
+  (dispatch, getState) => {
+    dispatch({
+      type: SET_PROFILE,
+      user
+    })
+  }
+
+export const updateAuthenticated =
+  (auth: { authenticated: boolean }): ThunkAction<void, any, unknown, AnyAction> =>
+  (dispatch, getState) => {
+    dispatch({
+      type: SET_AUTH,
+      auth
+    })
+  }

package/client/{auth.js → auth.ts}

@@ -11,26 +11,42 @@ const HEADER_JSON = {
   'Content-Type': 'application/json',
   Accept: 'application/json'
 }
+type AuthEventName = 'profile' | 'signin' | 'signout' | 'presignout' | 'passwordchange' | 'error'
+type AuthEventHandler = (e?: { accessToken?: string; credential?: string; domains: any[]; domain: any }) => void
+type AuthErrorHandler = (err: any) => void
 
 class ClientAuth {
-  constructor() {
-    this._event_listeners = {
-      profile: [],
-      signout: [],
-      presignout: [],
-      passwordchange: [],
-      error: []
-    }
+  private listeners: {
+    profile: AuthEventHandler[]
+    signout: AuthEventHandler[]
+    signin: AuthEventHandler[]
+    presignout: AuthEventHandler[]
+    passwordchange: AuthEventHandler[]
+    error: AuthErrorHandler[]
+  } = {
+    profile: [],
+    signout: [],
+    signin: [],
+    presignout: [],
+    passwordchange: [],
+    error: []
+  }
+
+  private authRequiredEventListener = this.onAuthRequired.bind(this)
+  private activateRequiredEventListener = this.onActivateRequired.bind(this)
+
+  private accessToken?: string
+  private _credential: any
+  // private domains: any[] = []
+  // private domain: any
 
-    this._authRequiredEventListener = this.onAuthRequired.bind(this)
-    document.addEventListener('auth-required', this._authRequiredEventListener)
-
-    this._activateRequiredEventListener = this.onActivateRequired.bind(this)
-    document.addEventListener('activate-required', this._activateRequiredEventListener)
+  constructor() {
+    document.addEventListener('auth-required', this.authRequiredEventListener)
+    document.addEventListener('activate-required', this.activateRequiredEventListener)
   }
 
-  on(event, handler) {
-    var listeners = this._event_listeners[event]
+  on(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler) {
+    var listeners = this.listeners[event]
     if (listeners) {
       listeners.push(handler)
     } else {
@@ -38,8 +54,8 @@ class ClientAuth {
     }
   }
 
-  off(event, handler) {
-    var listeners = this._event_listeners[event]
+  off(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler) {
+    var listeners = this.listeners[event]
     if (listeners) {
       let idx = listeners.indexOf(handler)
       idx >= 0 && listeners.splice(idx, 1)
@@ -49,54 +65,62 @@ class ClientAuth {
   }
 
   dispose() {
-    document.removeEventListener('auth-required', this._authRequiredEventListener)
-    document.removeEventListener('activate-required', this._activateRequiredEventListener)
+    document.removeEventListener('auth-required', this.authRequiredEventListener)
+    document.removeEventListener('activate-required', this.activateRequiredEventListener)
 
-    delete this._event_listeners
+    this.listeners = {
+      profile: [],
+      signin: [],
+      signout: [],
+      presignout: [],
+      passwordchange: [],
+      error: []
+    }
   }
 
-  onProfileFetched({ credential, accessToken, domains, domain }) {
-    this.credential = credential
-    this.domains = domains
-    this.domain = domain
+  private onProfileFetched({ credential, accessToken, domains, domain }) {
+    this._credential = credential
+    // this.domains = domains
+    // this.domain = domain
+
     if (accessToken && !this.accessToken) {
       /*
       기존에 세션을 가지거나, 액세스토큰으로 인증된 경우,
       이 경우는 signin 이벤트리스너들을 호출해서 authenticated 상태로 되도록 유도한다.
       */
       this.accessToken = accessToken
-      this._event_listeners.signin.forEach(handler => handler({ accessToken, domains, domain }))
+      this.listeners.signin.forEach(handler => handler({ accessToken, domains, domain }))
     }
     accessToken && (this.accessToken = accessToken)
-    this._event_listeners.profile.forEach(handler => handler({ credential, domains, domain }))
+    this.listeners.profile.forEach(handler => handler({ credential, domains, domain }))
   }
 
-  async onPreSignout() {
-    for (let onpresignout of this._event_listeners.presignout) {
+  private async onPreSignout() {
+    for (let onpresignout of this.listeners.presignout) {
       await onpresignout()
     }
   }
 
-  onAuthError(error) {
+  private onAuthError(error) {
     /* signin, signup 과정에서 에러가 발생한 경우 */
-    this._event_listeners.error.forEach(handler => handler(error))
+    this.listeners?.error.forEach(handler => handler(error))
   }
 
-  onPasswordChanged(result) {
+  private onPasswordChanged(result) {
     //event is passwordchange, handler is result
-    this._event_listeners.passwordchange.forEach(handler => handler(result))
+    this.listeners?.passwordchange.forEach(handler => handler(result))
   }
 
-  onAuthRequired(e) {
+  private onAuthRequired(e) {
     console.warn('authentication required')
-    let url = new URL(window.location)
+    let url = new URL(window.location.href)
     url.pathname = '/auth/signin'
     url.searchParams.append('redirect_to', window.location.href)
 
-    window.location = url
+    window.location.href = url.href
   }
 
-  onActivateRequired(e) {
+  private onActivateRequired(e) {
     console.warn('activate required')
     var params = new URLSearchParams()
     params.append('email', e.email)
@@ -104,6 +128,10 @@ class ClientAuth {
     window.location.replace(`/auth/activate?${params}`)
   }
 
+  get credential() {
+    return this._credential
+  }
+
   route(path, redirected) {
     /* history에 남긴다. redirected된 상태임을 남긴다. */
     const location = window.location
@@ -179,6 +207,7 @@ class ClientAuth {
     try {
       var searchParams = new URLSearchParams(location.search)
       var token = searchParams.get('token')
+      var headers = JSON.parse(JSON.stringify(HEADER_JSON))
 
       if (token) {
         headers.authorization = `Bearer ${token}`
@@ -187,7 +216,7 @@ class ClientAuth {
       const response = await fetch('/auth/profile', {
         method: 'GET',
         credentials: 'include',
-        headers: HEADER_JSON
+        headers
       })
 
       if (response.ok) {
@@ -206,34 +235,12 @@ class ClientAuth {
         })
 
         return
-      } else {
-        /*
-         * profile() is called only for triggering server side authentication routing.
-         * so, don't need to notify as an error
-         */
-        // this.onAuthError({
-        //   message: await response.text()
-        // })
       }
     } catch (e) {
       this.onAuthError(e)
     }
   }
 
-  async join() {
-    const response = await fetch('/auth/signout', {
-      method: 'POST',
-      credentials: 'include',
-      headers: HEADER_JSON
-    })
-
-    if (response.ok) {
-      debug
-    } else {
-      throw new Error(await response.text())
-    }
-  }
-
   async signout() {
     await this.onPreSignout()
 

package/client/{bootstrap.js → bootstrap.ts}

@@ -1,4 +1,5 @@
-import { store, updateDomains } from '@things-factory/shell'
+import { store, updateDomains } from '@operato/shell'
+
 import { updateAuthenticated, updateUser } from './actions/auth'
 import { auth } from './auth'
 import reducerAuth from './reducers/auth'
@@ -12,10 +13,10 @@ export default function bootstrap() {
     store.dispatch(
       updateAuthenticated({
         authenticated: true
-      })
+      }) as any
     )
-    store.dispatch(updateUser(credential))
-    store.dispatch(updateDomains(domains, domain))
+    store.dispatch(updateUser(credential) as any)
+    store.dispatch(updateDomains(domains, domain) as any)
   })
 
   auth.on('passwordchange', result => {

package/client/index.ts

@@ -0,0 +1 @@
+export * from './auth'

package/client/reducers/{auth.js → auth.ts}

@@ -1,4 +1,4 @@
-import { SET_AUTH, SET_PROFILE } from '../actions/auth.js'
+import { SET_AUTH, SET_PROFILE } from '../actions/auth'
 
 const INITIAL_STATE = {
   authenticated: false,

package/config/config.development.js

@@ -13,5 +13,6 @@ module.exports = {
     history: 2,
     defaultPassword: false
   },
-  accessTokenCookieKey: 'access_token'
+  accessTokenCookieKey: 'access_token',
+  applianceJwtExpiresIn: '1y'
 }

package/dist-client/actions/auth.d.ts

@@ -0,0 +1,8 @@
+import { AnyAction } from 'redux';
+import { ThunkAction } from 'redux-thunk';
+export declare const SET_PROFILE = "SET-PROFILE";
+export declare const SET_AUTH = "SET-AUTH";
+export declare const updateUser: (user: any) => ThunkAction<void, any, unknown, AnyAction>;
+export declare const updateAuthenticated: (auth: {
+    authenticated: boolean;
+}) => ThunkAction<void, any, unknown, AnyAction>;

package/dist-client/actions/auth.js

@@ -0,0 +1,15 @@
+export const SET_PROFILE = 'SET-PROFILE';
+export const SET_AUTH = 'SET-AUTH';
+export const updateUser = (user) => (dispatch, getState) => {
+    dispatch({
+        type: SET_PROFILE,
+        user
+    });
+};
+export const updateAuthenticated = (auth) => (dispatch, getState) => {
+    dispatch({
+        type: SET_AUTH,
+        auth
+    });
+};
+//# sourceMappingURL=auth.js.map

package/dist-client/actions/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../client/actions/auth.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAA;AACxC,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAA;AAElC,MAAM,CAAC,MAAM,UAAU,GACrB,CAAC,IAAS,EAA8C,EAAE,CAC1D,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;IACrB,QAAQ,CAAC;QACP,IAAI,EAAE,WAAW;QACjB,IAAI;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,CAAC,IAAgC,EAA8C,EAAE,CACjF,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;IACrB,QAAQ,CAAC;QACP,IAAI,EAAE,QAAQ;QACd,IAAI;KACL,CAAC,CAAA;AACJ,CAAC,CAAA","sourcesContent":["import { AnyAction } from 'redux'\nimport { ThunkAction } from 'redux-thunk'\n\nexport const SET_PROFILE = 'SET-PROFILE'\nexport const SET_AUTH = 'SET-AUTH'\n\nexport const updateUser =\n  (user: any): ThunkAction<void, any, unknown, AnyAction> =>\n  (dispatch, getState) => {\n    dispatch({\n      type: SET_PROFILE,\n      user\n    })\n  }\n\nexport const updateAuthenticated =\n  (auth: { authenticated: boolean }): ThunkAction<void, any, unknown, AnyAction> =>\n  (dispatch, getState) => {\n    dispatch({\n      type: SET_AUTH,\n      auth\n    })\n  }\n"]}

package/dist-client/auth.d.ts

@@ -0,0 +1,34 @@
+declare type AuthEventName = 'profile' | 'signin' | 'signout' | 'presignout' | 'passwordchange' | 'error';
+declare type AuthEventHandler = (e?: {
+    accessToken?: string;
+    credential?: string;
+    domains: any[];
+    domain: any;
+}) => void;
+declare type AuthErrorHandler = (err: any) => void;
+declare class ClientAuth {
+    private listeners;
+    private authRequiredEventListener;
+    private activateRequiredEventListener;
+    private accessToken?;
+    private _credential;
+    constructor();
+    on(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler): void;
+    off(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler): void;
+    dispose(): void;
+    private onProfileFetched;
+    private onPreSignout;
+    private onAuthError;
+    private onPasswordChanged;
+    private onAuthRequired;
+    private onActivateRequired;
+    get credential(): any;
+    route(path: any, redirected: any): void;
+    updateProfile(formProps: any): Promise<string>;
+    changePassword(formProps: any): Promise<void>;
+    deleteUser(params: any): Promise<string>;
+    profile(): Promise<void>;
+    signout(): Promise<void>;
+}
+export declare const auth: ClientAuth;
+export {};

package/dist-client/auth.js

@@ -0,0 +1,209 @@
+/* [ AUTH PATH ]
+  signinPath = '/auth/signin'
+  signoutPath = '/auth/signout'
+  profilePath = '/auth/profile'
+  updateProfilePath = '/auth/update-profile'
+  changepassPath = '/auth/change-pass'
+  deleteUserPath = '/auth/delete-user'
+*/
+const HEADER_JSON = {
+    'Content-Type': 'application/json',
+    Accept: 'application/json'
+};
+class ClientAuth {
+    // private domains: any[] = []
+    // private domain: any
+    constructor() {
+        this.listeners = {
+            profile: [],
+            signout: [],
+            signin: [],
+            presignout: [],
+            passwordchange: [],
+            error: []
+        };
+        this.authRequiredEventListener = this.onAuthRequired.bind(this);
+        this.activateRequiredEventListener = this.onActivateRequired.bind(this);
+        document.addEventListener('auth-required', this.authRequiredEventListener);
+        document.addEventListener('activate-required', this.activateRequiredEventListener);
+    }
+    on(event, handler) {
+        var listeners = this.listeners[event];
+        if (listeners) {
+            listeners.push(handler);
+        }
+        else {
+            console.log('unknown event', event);
+        }
+    }
+    off(event, handler) {
+        var listeners = this.listeners[event];
+        if (listeners) {
+            let idx = listeners.indexOf(handler);
+            idx >= 0 && listeners.splice(idx, 1);
+        }
+        else {
+            console.log('unknown event', event);
+        }
+    }
+    dispose() {
+        document.removeEventListener('auth-required', this.authRequiredEventListener);
+        document.removeEventListener('activate-required', this.activateRequiredEventListener);
+        this.listeners = {
+            profile: [],
+            signin: [],
+            signout: [],
+            presignout: [],
+            passwordchange: [],
+            error: []
+        };
+    }
+    onProfileFetched({ credential, accessToken, domains, domain }) {
+        this._credential = credential;
+        // this.domains = domains
+        // this.domain = domain
+        if (accessToken && !this.accessToken) {
+            /*
+            기존에 세션을 가지거나, 액세스토큰으로 인증된 경우,
+            이 경우는 signin 이벤트리스너들을 호출해서 authenticated 상태로 되도록 유도한다.
+            */
+            this.accessToken = accessToken;
+            this.listeners.signin.forEach(handler => handler({ accessToken, domains, domain }));
+        }
+        accessToken && (this.accessToken = accessToken);
+        this.listeners.profile.forEach(handler => handler({ credential, domains, domain }));
+    }
+    async onPreSignout() {
+        for (let onpresignout of this.listeners.presignout) {
+            await onpresignout();
+        }
+    }
+    onAuthError(error) {
+        var _a;
+        /* signin, signup 과정에서 에러가 발생한 경우 */
+        (_a = this.listeners) === null || _a === void 0 ? void 0 : _a.error.forEach(handler => handler(error));
+    }
+    onPasswordChanged(result) {
+        var _a;
+        //event is passwordchange, handler is result
+        (_a = this.listeners) === null || _a === void 0 ? void 0 : _a.passwordchange.forEach(handler => handler(result));
+    }
+    onAuthRequired(e) {
+        console.warn('authentication required');
+        let url = new URL(window.location.href);
+        url.pathname = '/auth/signin';
+        url.searchParams.append('redirect_to', window.location.href);
+        window.location.href = url.href;
+    }
+    onActivateRequired(e) {
+        console.warn('activate required');
+        var params = new URLSearchParams();
+        params.append('email', e.email);
+        window.location.replace(`/auth/activate?${params}`);
+    }
+    get credential() {
+        return this._credential;
+    }
+    route(path, redirected) {
+        /* history에 남긴다. redirected된 상태임을 남긴다. */
+        const location = window.location;
+        const origin = location.origin || location.protocol + '//' + location.host;
+        const href = `${origin}${path}`;
+        if (location.pathname === path)
+            return;
+        // popstate 이벤트가 history.back() 에서만 발생하므로
+        // 히스토리에 두번을 넣고 back()을 호출하는 편법을 사용함.
+        // forward history가 한번 남는 문제가 있으나 signin 프로세스 중에만 발생하므로 큰 문제는 아님.
+        // 이 로직은 login process가 어플리케이션 구조에 종속되는 것을 최소화하기 위함임.
+        // 예를 들면, redux 구조에 들어가지 않아도 로그인 프로세스가 동작하도록 한 것임.
+        window.history.pushState({ redirected }, '', href);
+        window.history.pushState({}, '', href);
+        window.history.back();
+    }
+    async updateProfile(formProps) {
+        const response = await fetch('/auth/update-profile', {
+            method: 'POST',
+            credentials: 'include',
+            headers: HEADER_JSON,
+            body: JSON.stringify(formProps)
+        });
+        const message = await response.text();
+        if (response.ok) {
+            return message;
+        }
+        throw new Error(message);
+    }
+    async changePassword(formProps) {
+        try {
+            const response = await fetch('/auth/change-pass', {
+                method: 'POST',
+                credentials: 'include',
+                headers: HEADER_JSON,
+                body: JSON.stringify(formProps)
+            });
+            const message = await response.text();
+            if (response.ok) {
+                this.onPasswordChanged({ message });
+            }
+            else {
+                this.onAuthError({ message });
+            }
+        }
+        catch (e) {
+            this.onAuthError(e);
+        }
+    }
+    async deleteUser(params) {
+        const response = await fetch('/auth/delete-user', {
+            method: 'POST',
+            credentials: 'include',
+            headers: HEADER_JSON,
+            body: JSON.stringify(params)
+        });
+        const message = await response.text();
+        if (response.ok) {
+            return message;
+        }
+        else {
+            throw new Error(message);
+        }
+    }
+    async profile() {
+        try {
+            var searchParams = new URLSearchParams(location.search);
+            var token = searchParams.get('token');
+            var headers = JSON.parse(JSON.stringify(HEADER_JSON));
+            if (token) {
+                headers.authorization = `Bearer ${token}`;
+            }
+            const response = await fetch('/auth/profile', {
+                method: 'GET',
+                credentials: 'include',
+                headers
+            });
+            if (response.ok) {
+                if (response.redirected) {
+                    location.href = response.url;
+                    return;
+                }
+                const data = await response.json();
+                this.onProfileFetched({
+                    credential: data.user,
+                    accessToken: data.token,
+                    domains: data.domains,
+                    domain: data.domain
+                });
+                return;
+            }
+        }
+        catch (e) {
+            this.onAuthError(e);
+        }
+    }
+    async signout() {
+        await this.onPreSignout();
+        window.location.href = '/auth/signout';
+    }
+}
+export const auth = new ClientAuth();
+//# sourceMappingURL=auth.js.map

package/dist-client/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../client/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;EAOE;AAEF,MAAM,WAAW,GAAG;IAClB,cAAc,EAAE,kBAAkB;IAClC,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAKD,MAAM,UAAU;IAsBd,8BAA8B;IAC9B,sBAAsB;IAEtB;QAxBQ,cAAS,GAOb;YACF,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,EAAE;SACV,CAAA;QAEO,8BAAyB,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1D,kCAA6B,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAQxE,QAAQ,CAAC,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;QAC1E,QAAQ,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACpF,CAAC;IAED,EAAE,CAAC,KAAoB,EAAE,OAA4C;QACnE,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,SAAS,EAAE;YACb,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;SACxB;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;SACpC;IACH,CAAC;IAED,GAAG,CAAC,KAAoB,EAAE,OAA4C;QACpE,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,SAAS,EAAE;YACb,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACpC,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;SACrC;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;SACpC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;QAC7E,QAAQ,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAErF,IAAI,CAAC,SAAS,GAAG;YACf,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,EAAE;SACV,CAAA;IACH,CAAC;IAEO,gBAAgB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;QACnE,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,yBAAyB;QACzB,uBAAuB;QAEvB,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACpC;;;cAGE;YACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;SACpF;QACD,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE;YAClD,MAAM,YAAY,EAAE,CAAA;SACrB;IACH,CAAC;IAEO,WAAW,CAAC,KAAK;;QACvB,oCAAoC;QACpC,MAAA,IAAI,CAAC,SAAS,0CAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IAC1D,CAAC;IAEO,iBAAiB,CAAC,MAAM;;QAC9B,4CAA4C;QAC5C,MAAA,IAAI,CAAC,SAAS,0CAAE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IACpE,CAAC;IAEO,cAAc,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;QACvC,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvC,GAAG,CAAC,QAAQ,GAAG,cAAc,CAAA;QAC7B,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAE5D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACjC,CAAC;IAEO,kBAAkB,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACjC,IAAI,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAE/B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,EAAE,UAAU;QACpB,yCAAyC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;QAC1E,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAA;QAE/B,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAM;QAEtC,yCAAyC;QACzC,qCAAqC;QACrC,iEAAiE;QACjE,qDAAqD;QACrD,kDAAkD;QAClD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAS;QAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;SAChC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACrC,IAAI,QAAQ,CAAC,EAAE,EAAE;YACf,OAAO,OAAO,CAAA;SACf;QAED,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAS;QAC5B,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;aAChC,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACrC,IAAI,QAAQ,CAAC,EAAE,EAAE;gBACf,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;aACpC;iBAAM;gBACL,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;aAC9B;SACF;QAAC,OAAO,CAAC,EAAE;YACV,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;SACpB;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAM;QACrB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACrC,IAAI,QAAQ,CAAC,EAAE,EAAE;YACf,OAAO,OAAO,CAAA;SACf;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;SACzB;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI;YACF,IAAI,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACvD,IAAI,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrC,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAA;YAErD,IAAI,KAAK,EAAE;gBACT,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAA;aAC1C;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBAC5C,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAA;YAEF,IAAI,QAAQ,CAAC,EAAE,EAAE;gBACf,IAAI,QAAQ,CAAC,UAAU,EAAE;oBACvB,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAA;oBAC5B,OAAM;iBACP;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBAElC,IAAI,CAAC,gBAAgB,CAAC;oBACpB,UAAU,EAAE,IAAI,CAAC,IAAI;oBACrB,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAA;gBAEF,OAAM;aACP;SACF;QAAC,OAAO,CAAC,EAAE;YACV,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;SACpB;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAEzB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAA;IACxC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAA","sourcesContent":["/* [ AUTH PATH ]\n  signinPath = '/auth/signin'\n  signoutPath = '/auth/signout'\n  profilePath = '/auth/profile'\n  updateProfilePath = '/auth/update-profile'\n  changepassPath = '/auth/change-pass'\n  deleteUserPath = '/auth/delete-user'\n*/\n\nconst HEADER_JSON = {\n  'Content-Type': 'application/json',\n  Accept: 'application/json'\n}\ntype AuthEventName = 'profile' | 'signin' | 'signout' | 'presignout' | 'passwordchange' | 'error'\ntype AuthEventHandler = (e?: { accessToken?: string; credential?: string; domains: any[]; domain: any }) => void\ntype AuthErrorHandler = (err: any) => void\n\nclass ClientAuth {\n  private listeners: {\n    profile: AuthEventHandler[]\n    signout: AuthEventHandler[]\n    signin: AuthEventHandler[]\n    presignout: AuthEventHandler[]\n    passwordchange: AuthEventHandler[]\n    error: AuthErrorHandler[]\n  } = {\n    profile: [],\n    signout: [],\n    signin: [],\n    presignout: [],\n    passwordchange: [],\n    error: []\n  }\n\n  private authRequiredEventListener = this.onAuthRequired.bind(this)\n  private activateRequiredEventListener = this.onActivateRequired.bind(this)\n\n  private accessToken?: string\n  private _credential: any\n  // private domains: any[] = []\n  // private domain: any\n\n  constructor() {\n    document.addEventListener('auth-required', this.authRequiredEventListener)\n    document.addEventListener('activate-required', this.activateRequiredEventListener)\n  }\n\n  on(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler) {\n    var listeners = this.listeners[event]\n    if (listeners) {\n      listeners.push(handler)\n    } else {\n      console.log('unknown event', event)\n    }\n  }\n\n  off(event: AuthEventName, handler: AuthEventHandler | AuthErrorHandler) {\n    var listeners = this.listeners[event]\n    if (listeners) {\n      let idx = listeners.indexOf(handler)\n      idx >= 0 && listeners.splice(idx, 1)\n    } else {\n      console.log('unknown event', event)\n    }\n  }\n\n  dispose() {\n    document.removeEventListener('auth-required', this.authRequiredEventListener)\n    document.removeEventListener('activate-required', this.activateRequiredEventListener)\n\n    this.listeners = {\n      profile: [],\n      signin: [],\n      signout: [],\n      presignout: [],\n      passwordchange: [],\n      error: []\n    }\n  }\n\n  private onProfileFetched({ credential, accessToken, domains, domain }) {\n    this._credential = credential\n    // this.domains = domains\n    // this.domain = domain\n\n    if (accessToken && !this.accessToken) {\n      /*\n      기존에 세션을 가지거나, 액세스토큰으로 인증된 경우,\n      이 경우는 signin 이벤트리스너들을 호출해서 authenticated 상태로 되도록 유도한다.\n      */\n      this.accessToken = accessToken\n      this.listeners.signin.forEach(handler => handler({ accessToken, domains, domain }))\n    }\n    accessToken && (this.accessToken = accessToken)\n    this.listeners.profile.forEach(handler => handler({ credential, domains, domain }))\n  }\n\n  private async onPreSignout() {\n    for (let onpresignout of this.listeners.presignout) {\n      await onpresignout()\n    }\n  }\n\n  private onAuthError(error) {\n    /* signin, signup 과정에서 에러가 발생한 경우 */\n    this.listeners?.error.forEach(handler => handler(error))\n  }\n\n  private onPasswordChanged(result) {\n    //event is passwordchange, handler is result\n    this.listeners?.passwordchange.forEach(handler => handler(result))\n  }\n\n  private onAuthRequired(e) {\n    console.warn('authentication required')\n    let url = new URL(window.location.href)\n    url.pathname = '/auth/signin'\n    url.searchParams.append('redirect_to', window.location.href)\n\n    window.location.href = url.href\n  }\n\n  private onActivateRequired(e) {\n    console.warn('activate required')\n    var params = new URLSearchParams()\n    params.append('email', e.email)\n\n    window.location.replace(`/auth/activate?${params}`)\n  }\n\n  get credential() {\n    return this._credential\n  }\n\n  route(path, redirected) {\n    /* history에 남긴다. redirected된 상태임을 남긴다. */\n    const location = window.location\n    const origin = location.origin || location.protocol + '//' + location.host\n    const href = `${origin}${path}`\n\n    if (location.pathname === path) return\n\n    // popstate 이벤트가 history.back() 에서만 발생하므로\n    // 히스토리에 두번을 넣고 back()을 호출하는 편법을 사용함.\n    // forward history가 한번 남는 문제가 있으나 signin 프로세스 중에만 발생하므로 큰 문제는 아님.\n    // 이 로직은 login process가 어플리케이션 구조에 종속되는 것을 최소화하기 위함임.\n    // 예를 들면, redux 구조에 들어가지 않아도 로그인 프로세스가 동작하도록 한 것임.\n    window.history.pushState({ redirected }, '', href)\n    window.history.pushState({}, '', href)\n\n    window.history.back()\n  }\n\n  async updateProfile(formProps) {\n    const response = await fetch('/auth/update-profile', {\n      method: 'POST',\n      credentials: 'include',\n      headers: HEADER_JSON,\n      body: JSON.stringify(formProps)\n    })\n\n    const message = await response.text()\n    if (response.ok) {\n      return message\n    }\n\n    throw new Error(message)\n  }\n\n  async changePassword(formProps) {\n    try {\n      const response = await fetch('/auth/change-pass', {\n        method: 'POST',\n        credentials: 'include',\n        headers: HEADER_JSON,\n        body: JSON.stringify(formProps)\n      })\n\n      const message = await response.text()\n      if (response.ok) {\n        this.onPasswordChanged({ message })\n      } else {\n        this.onAuthError({ message })\n      }\n    } catch (e) {\n      this.onAuthError(e)\n    }\n  }\n\n  async deleteUser(params) {\n    const response = await fetch('/auth/delete-user', {\n      method: 'POST',\n      credentials: 'include',\n      headers: HEADER_JSON,\n      body: JSON.stringify(params)\n    })\n\n    const message = await response.text()\n    if (response.ok) {\n      return message\n    } else {\n      throw new Error(message)\n    }\n  }\n\n  async profile() {\n    try {\n      var searchParams = new URLSearchParams(location.search)\n      var token = searchParams.get('token')\n      var headers = JSON.parse(JSON.stringify(HEADER_JSON))\n\n      if (token) {\n        headers.authorization = `Bearer ${token}`\n      }\n\n      const response = await fetch('/auth/profile', {\n        method: 'GET',\n        credentials: 'include',\n        headers\n      })\n\n      if (response.ok) {\n        if (response.redirected) {\n          location.href = response.url\n          return\n        }\n\n        const data = await response.json()\n\n        this.onProfileFetched({\n          credential: data.user,\n          accessToken: data.token,\n          domains: data.domains,\n          domain: data.domain\n        })\n\n        return\n      }\n    } catch (e) {\n      this.onAuthError(e)\n    }\n  }\n\n  async signout() {\n    await this.onPreSignout()\n\n    window.location.href = '/auth/signout'\n  }\n}\n\nexport const auth = new ClientAuth()\n"]}

package/dist-client/bootstrap.d.ts

@@ -0,0 +1 @@
+export default function bootstrap(): void;

package/dist-client/bootstrap.js

@@ -0,0 +1,34 @@
+import { store, updateDomains } from '@operato/shell';
+import { updateAuthenticated, updateUser } from './actions/auth';
+import { auth } from './auth';
+import reducerAuth from './reducers/auth';
+export default function bootstrap() {
+    store.addReducers({
+        auth: reducerAuth
+    });
+    auth.on('profile', ({ credential, domains, domain }) => {
+        store.dispatch(updateAuthenticated({
+            authenticated: true
+        }));
+        store.dispatch(updateUser(credential));
+        store.dispatch(updateDomains(domains, domain));
+    });
+    auth.on('passwordchange', result => {
+        let message = result.message;
+        document.dispatchEvent(new CustomEvent('notify', {
+            detail: {
+                level: result.error ? 'error' : 'info',
+                message
+            }
+        }));
+    });
+    auth.on('error', ex => {
+        document.dispatchEvent(new CustomEvent('notify', {
+            detail: {
+                level: 'error',
+                message: ex.message
+            }
+        }));
+    });
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist-client/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../client/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAErD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,WAAW,MAAM,iBAAiB,CAAA;AAEzC,MAAM,CAAC,OAAO,UAAU,SAAS;IAC/B,KAAK,CAAC,WAAW,CAAC;QAChB,IAAI,EAAE,WAAW;KAClB,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACrD,KAAK,CAAC,QAAQ,CACZ,mBAAmB,CAAC;YAClB,aAAa,EAAE,IAAI;SACpB,CAAQ,CACV,CAAA;QACD,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAQ,CAAC,CAAA;QAC7C,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAQ,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE;QACjC,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAE5B,QAAQ,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,QAAQ,EAAE;YACxB,MAAM,EAAE;gBACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACtC,OAAO;aACR;SACF,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;QACpB,QAAQ,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,QAAQ,EAAE;YACxB,MAAM,EAAE;gBACN,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB;SACF,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { store, updateDomains } from '@operato/shell'\n\nimport { updateAuthenticated, updateUser } from './actions/auth'\nimport { auth } from './auth'\nimport reducerAuth from './reducers/auth'\n\nexport default function bootstrap() {\n  store.addReducers({\n    auth: reducerAuth\n  })\n\n  auth.on('profile', ({ credential, domains, domain }) => {\n    store.dispatch(\n      updateAuthenticated({\n        authenticated: true\n      }) as any\n    )\n    store.dispatch(updateUser(credential) as any)\n    store.dispatch(updateDomains(domains, domain) as any)\n  })\n\n  auth.on('passwordchange', result => {\n    let message = result.message\n\n    document.dispatchEvent(\n      new CustomEvent('notify', {\n        detail: {\n          level: result.error ? 'error' : 'info',\n          message\n        }\n      })\n    )\n  })\n\n  auth.on('error', ex => {\n    document.dispatchEvent(\n      new CustomEvent('notify', {\n        detail: {\n          level: 'error',\n          message: ex.message\n        }\n      })\n    )\n  })\n}\n"]}

package/dist-client/index.d.ts

@@ -0,0 +1 @@
+export * from './auth';

package/dist-client/index.js

@@ -0,0 +1,2 @@
+export * from './auth';
+//# sourceMappingURL=index.js.map

package/dist-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../client/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA","sourcesContent":["export * from './auth'\n"]}

package/dist-client/reducers/auth.d.ts

@@ -0,0 +1,14 @@
+declare const auth: (state: {
+    authenticated: boolean;
+    accessToken: string;
+    user: null;
+} | undefined, action: any) => {
+    authenticated: any;
+    accessToken: any;
+    user: null;
+} | {
+    user: any;
+    authenticated: boolean;
+    accessToken: string;
+};
+export default auth;