@things-factory/auth-base 7.0.44 → 7.0.48
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-client/directive/privileged.d.ts +1 -1
- package/dist-client/tsconfig.tsbuildinfo +1 -1
- package/dist-server/tsconfig.tsbuildinfo +1 -1
- package/dist-server/utils/access-token-cookie.js +4 -2
- package/dist-server/utils/access-token-cookie.js.map +1 -1
- package/package.json +4 -4
- package/server/utils/access-token-cookie.ts +4 -2
|
@@ -17,7 +17,8 @@ function setAccessTokenCookie(context, token) {
|
|
|
17
17
|
var cookie = {
|
|
18
18
|
secure,
|
|
19
19
|
httpOnly: true,
|
|
20
|
-
maxAge: max_age_1.MAX_AGE
|
|
20
|
+
maxAge: max_age_1.MAX_AGE,
|
|
21
|
+
sameSite: 'Lax'
|
|
21
22
|
};
|
|
22
23
|
const cookieDomain = (0, shell_1.getCookieDomainFromHostname)(context.hostname);
|
|
23
24
|
if (cookieDomain) {
|
|
@@ -38,7 +39,8 @@ function clearAccessTokenCookie(context) {
|
|
|
38
39
|
const { secure } = context;
|
|
39
40
|
var cookie = {
|
|
40
41
|
secure,
|
|
41
|
-
httpOnly: true
|
|
42
|
+
httpOnly: true,
|
|
43
|
+
sameSite: 'Lax'
|
|
42
44
|
};
|
|
43
45
|
const cookieDomain = (0, shell_1.getCookieDomainFromHostname)(context.hostname);
|
|
44
46
|
if (cookieDomain) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"access-token-cookie.js","sourceRoot":"","sources":["../../server/utils/access-token-cookie.ts"],"names":[],"mappings":";;AAMA,oDAEC;AAED,
|
|
1
|
+
{"version":3,"file":"access-token-cookie.js","sourceRoot":"","sources":["../../server/utils/access-token-cookie.ts"],"names":[],"mappings":";;AAMA,oDAEC;AAED,oDAgBC;AAED,sDASC;AAED,wDAqBC;AA5DD,iDAAmE;AACnE,6CAA4C;AAC5C,kDAA8C;AAE9C,MAAM,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAA;AAE/E,SAAgB,oBAAoB,CAAC,OAAO;;IAC1C,OAAO,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,GAAG,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAO,EAAE,KAAK;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,iBAAO;QACf,QAAQ,EAAE,KAAK;KAChB,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACjC,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAO;IAC3C,0FAA0F;IAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAE9B,OAAO,CAAC,OAAO,GAAG;QAChB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,KAAK;KACnB,CAAA;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAO;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;KAChB,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACjC,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IACrD;;;OAGG;IACH,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;AACxB,CAAC","sourcesContent":["import { getCookieDomainFromHostname } from '@things-factory/shell'\nimport { config } from '@things-factory/env'\nimport { MAX_AGE } from '../constants/max-age'\n\nconst accessTokenCookieKey = config.get('accessTokenCookieKey', 'access_token')\n\nexport function getAccessTokenCookie(context) {\n return context?.cookies?.get(accessTokenCookieKey)\n}\n\nexport function setAccessTokenCookie(context, token) {\n const { secure } = context\n\n var cookie = {\n secure,\n httpOnly: true,\n maxAge: MAX_AGE,\n sameSite: 'Lax'\n }\n\n const cookieDomain = getCookieDomainFromHostname(context.hostname)\n if (cookieDomain) {\n cookie['domain'] = cookieDomain\n }\n\n context.cookies.set(accessTokenCookieKey, token, cookie)\n}\n\nexport function setSessionAccessToken(context) {\n /* koa-session 을 사용하는 경우에는, cookie 직접 설정이 작동되지 않는다. 그런 경우에는 session에 설정해서 cookie를 변경한다. */\n const { user } = context.state\n\n context.session = {\n id: user.id,\n userType: user.type,\n status: user.state\n }\n}\n\nexport function clearAccessTokenCookie(context) {\n const { secure } = context\n\n var cookie = {\n secure,\n httpOnly: true,\n sameSite: 'Lax'\n }\n\n const cookieDomain = getCookieDomainFromHostname(context.hostname)\n if (cookieDomain) {\n cookie['domain'] = cookieDomain\n }\n\n context.cookies.set(accessTokenCookieKey, '', cookie)\n /*\n * TODO clear i18next cookie as well - need to support domain\n * https://github.com/hatiolab/things-factory/issues/70\n */\n context.cookies.set('i18next', '', cookie)\n context.session = null\n}\n"]}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@things-factory/auth-base",
|
|
3
|
-
"version": "7.0.
|
|
3
|
+
"version": "7.0.48",
|
|
4
4
|
"main": "dist-server/index.js",
|
|
5
5
|
"browser": "dist-client/index.js",
|
|
6
6
|
"things-factory": true,
|
|
@@ -32,9 +32,9 @@
|
|
|
32
32
|
"dependencies": {
|
|
33
33
|
"@simplewebauthn/browser": "^10.0.0",
|
|
34
34
|
"@simplewebauthn/server": "^10.0.0",
|
|
35
|
-
"@things-factory/email-base": "^7.0.
|
|
35
|
+
"@things-factory/email-base": "^7.0.48",
|
|
36
36
|
"@things-factory/env": "^7.0.33",
|
|
37
|
-
"@things-factory/shell": "^7.0.
|
|
37
|
+
"@things-factory/shell": "^7.0.48",
|
|
38
38
|
"@things-factory/utils": "^7.0.33",
|
|
39
39
|
"@types/webappsec-credential-management": "^0.6.8",
|
|
40
40
|
"jsonwebtoken": "^9.0.0",
|
|
@@ -46,5 +46,5 @@
|
|
|
46
46
|
"passport-jwt": "^4.0.0",
|
|
47
47
|
"passport-local": "^1.0.0"
|
|
48
48
|
},
|
|
49
|
-
"gitHead": "
|
|
49
|
+
"gitHead": "516772ebee08900790bcc43477419d60adcb4dcd"
|
|
50
50
|
}
|
|
@@ -14,7 +14,8 @@ export function setAccessTokenCookie(context, token) {
|
|
|
14
14
|
var cookie = {
|
|
15
15
|
secure,
|
|
16
16
|
httpOnly: true,
|
|
17
|
-
maxAge: MAX_AGE
|
|
17
|
+
maxAge: MAX_AGE,
|
|
18
|
+
sameSite: 'Lax'
|
|
18
19
|
}
|
|
19
20
|
|
|
20
21
|
const cookieDomain = getCookieDomainFromHostname(context.hostname)
|
|
@@ -41,7 +42,8 @@ export function clearAccessTokenCookie(context) {
|
|
|
41
42
|
|
|
42
43
|
var cookie = {
|
|
43
44
|
secure,
|
|
44
|
-
httpOnly: true
|
|
45
|
+
httpOnly: true,
|
|
46
|
+
sameSite: 'Lax'
|
|
45
47
|
}
|
|
46
48
|
|
|
47
49
|
const cookieDomain = getCookieDomainFromHostname(context.hostname)
|