@thunderid/express 0.0.1

package/dist/cjs/index.cjs

@@ -0,0 +1,257 @@
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+let __thunderid_node = require("@thunderid/node");
+__thunderid_node = __toESM(__thunderid_node);
+let uuid = require("uuid");
+uuid = __toESM(uuid);
+let express = require("express");
+express = __toESM(express);
+
+//#region src/__legacy__/constants/default-options.ts
+/**
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+let CookieConfig = /* @__PURE__ */ function(CookieConfig$1) {
+	CookieConfig$1[CookieConfig$1["defaultMaxAge"] = 9e4] = "defaultMaxAge";
+	CookieConfig$1["defaultHttpOnly"] = "true";
+	CookieConfig$1["defaultSameSite"] = "lax";
+	CookieConfig$1["defaultSecure"] = "false";
+	return CookieConfig$1;
+}({});
+const DEFAULT_LOGIN_PATH = "/login";
+const DEFAULT_LOGOUT_PATH = "/logout";
+
+//#endregion
+//#region src/__legacy__/middleware/protect-route.ts
+const protectRoute = (thunderIDExpressClient, callback) => {
+	return async (req, res, next) => {
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			__thunderid_node.Logger.error("No session ID found in the request cookies");
+			if (callback(res, "Unauthenticated")) return;
+			return next();
+		} else if (await thunderIDExpressClient.isSignedIn(req.cookies.THUNDERID_SESSION_ID)) return next();
+		else {
+			__thunderid_node.Logger.error("Invalid session ID found in the request cookies");
+			if (callback(res, "Invalid session cookie")) return;
+			return next();
+		}
+	};
+};
+
+//#endregion
+//#region src/__legacy__/middleware/authentication.ts
+const thunderIDExpressAuth = (thunderIDExpressClient, config, onSignIn, onSignOut, onError) => {
+	const router = new express.default.Router();
+	router.use(async (req, res, next) => {
+		req.thunderIDAuth = thunderIDExpressClient;
+		res.thunderIDAuth = thunderIDExpressClient;
+		next();
+	});
+	router.get(config.loginPath || DEFAULT_LOGIN_PATH, async (req, res, next) => {
+		try {
+			const response = await thunderIDExpressClient.signIn(req, res, next, config.signInConfig);
+			if (response.accessToken || response.idToken) onSignIn(res, response);
+		} catch (e) {
+			__thunderid_node.Logger.error(e.message);
+			onError(res, e);
+		}
+	});
+	router.get(config.logoutPath || DEFAULT_LOGOUT_PATH, async (req, res, next) => {
+		if (req.query.state === "sign_out_success") {
+			onSignOut(res);
+			return;
+		}
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			onError(res, new __thunderid_node.ThunderIDAuthException("EXPRESS-AUTH_MW-LOGOUT-NF01", "No cookie found in the request", "No cookie was sent with the request. The user may not have signed in yet."));
+			return;
+		} else try {
+			const signOutURL = await req.thunderIDAuth.signOut(req.cookies.THUNDERID_SESSION_ID);
+			if (signOutURL) {
+				res.cookie("THUNDERID_SESSION_ID", null, { maxAge: 0 });
+				res.redirect(signOutURL);
+				return;
+			}
+		} catch (e) {
+			onError(res, e);
+			return;
+		}
+	});
+	return router;
+};
+
+//#endregion
+//#region src/__legacy__/utils/express-utils.ts
+var ExpressUtils = class {
+	static AUTH_CODE_REGEXP = /[?&]error=[^&]+/;
+	/**
+	* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+	*
+	* WSO2 LLC. licenses this file to you under the Apache License,
+	* Version 2.0 (the "License"); you may not use this file except
+	* in compliance with the License.
+	* You may obtain a copy of the License at
+	*
+	*     http://www.apache.org/licenses/LICENSE-2.0
+	*
+	* Unless required by applicable law or agreed to in writing,
+	* software distributed under the License is distributed on an
+	* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+	* KIND, either express or implied. See the License for the
+	* specific language governing permissions and limitations
+	* under the License.
+	*/
+	static hasErrorInURL(url) {
+		return this.AUTH_CODE_REGEXP.test(url);
+	}
+};
+
+//#endregion
+//#region src/__legacy__/client.ts
+var ThunderIDExpressClient = class ThunderIDExpressClient {
+	_authClient;
+	_storage;
+	static _clientConfig;
+	static _instance;
+	constructor(config, storage) {
+		ThunderIDExpressClient._clientConfig = { ...config };
+		const nodeClientConfig = {
+			...config,
+			afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),
+			afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH)
+		};
+		if (storage) {
+			__thunderid_node.Logger.debug("Initializing user provided storage");
+			this._storage = storage;
+		}
+		this._authClient = new __thunderid_node.LegacyThunderIDNodeClient();
+		this._authClient.initialize(nodeClientConfig, this._storage);
+	}
+	static getInstance(config, storage) {
+		if (!ThunderIDExpressClient._instance && config) {
+			ThunderIDExpressClient._instance = new ThunderIDExpressClient(config, storage);
+			__thunderid_node.Logger.debug("Initialized ThunderIDExpressClient successfully");
+		}
+		if (!ThunderIDExpressClient._instance && !config) throw Error(new __thunderid_node.ThunderIDAuthException("EXPRESS-CLIENT-GI1-NF01", "User configuration  is not found", "User config has not been passed to initialize ThunderIDExpressClient").toString());
+		return ThunderIDExpressClient._instance;
+	}
+	async signIn(req, res, next, signInConfig) {
+		if (ExpressUtils.hasErrorInURL(req.originalUrl)) return Promise.reject(new __thunderid_node.ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
+		let userId = req.cookies.THUNDERID_SESSION_ID;
+		if (!userId) userId = (0, uuid.v4)();
+		const authRedirectCallback = (url) => {
+			if (url) {
+				__thunderid_node.Logger.debug("Redirecting to: " + url);
+				res.cookie("THUNDERID_SESSION_ID", userId, {
+					maxAge: ThunderIDExpressClient._clientConfig.cookieConfig?.maxAge ? ThunderIDExpressClient._clientConfig.cookieConfig.maxAge : CookieConfig.defaultMaxAge,
+					httpOnly: ThunderIDExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,
+					sameSite: ThunderIDExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,
+					secure: ThunderIDExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure
+				});
+				res.redirect(url);
+				next && typeof next === "function" && next();
+			}
+		};
+		const authResponse = await this._authClient.signIn(authRedirectCallback, userId, req.query.code, req.query.session_state, req.query.state, signInConfig);
+		if (authResponse.accessToken || authResponse.idToken) return authResponse;
+		else return {
+			accessToken: "",
+			createdAt: 0,
+			expiresIn: "",
+			idToken: "",
+			refreshToken: "",
+			scope: "",
+			tokenType: ""
+		};
+	}
+	async signOut(userId) {
+		return this._authClient.signOut(userId);
+	}
+	async isSignedIn(userId) {
+		return this._authClient.isSignedIn(userId);
+	}
+	async getIdToken(userId) {
+		return this._authClient.getIdToken(userId);
+	}
+	async getUser(userId) {
+		return this._authClient.getUser(userId);
+	}
+	async getOpenIDProviderEndpoints() {
+		return this._authClient.getOpenIDProviderEndpoints();
+	}
+	async getDecodedIdToken(userId) {
+		return this._authClient.getDecodedIdToken(userId);
+	}
+	async getAccessToken(userId) {
+		return this._authClient.getAccessToken(userId);
+	}
+	async exchangeToken(config, userId) {
+		return this._authClient.exchangeToken(config, userId);
+	}
+	async reInitialize(config) {
+		return this._authClient.reInitialize(config);
+	}
+	async revokeAccessToken(userId) {
+		return this._authClient.revokeAccessToken(userId);
+	}
+	static didSignOutFail(afterSignOutUrl) {
+		return __thunderid_node.LegacyThunderIDNodeClient.didSignOutFail(afterSignOutUrl);
+	}
+	static isSignOutSuccessful(afterSignOutUrl) {
+		return __thunderid_node.LegacyThunderIDNodeClient.isSignOutSuccessful(afterSignOutUrl);
+	}
+	static protectRoute(callback) {
+		if (!this._instance) throw new __thunderid_node.ThunderIDAuthException("EXPRESS-CLIENT-PR-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return protectRoute(this._instance, callback);
+	}
+	static thunderIDExpressAuth(onSignIn, onSignOut, onError) {
+		if (!this._instance) throw new __thunderid_node.ThunderIDAuthException("EXPRESS-CLIENT-AEA-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return thunderIDExpressAuth(this._instance, ThunderIDExpressClient._clientConfig, onSignIn, onSignOut, onError);
+	}
+	async getStorageManager() {
+		return this._authClient.getStorageManager();
+	}
+};
+
+//#endregion
+exports.ThunderIDExpressClient = ThunderIDExpressClient;
+Object.keys(__thunderid_node).forEach(function (k) {
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+    enumerable: true,
+    get: function () { return __thunderid_node[k]; }
+  });
+});

package/dist/edge/index.js

@@ -0,0 +1,227 @@
+import { LegacyThunderIDNodeClient, Logger, ThunderIDAuthException } from "@thunderid/node";
+import { v4 } from "uuid";
+import express from "express";
+
+export * from "@thunderid/node"
+
+//#region src/__legacy__/constants/default-options.ts
+/**
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+let CookieConfig = /* @__PURE__ */ function(CookieConfig$1) {
+	CookieConfig$1[CookieConfig$1["defaultMaxAge"] = 9e4] = "defaultMaxAge";
+	CookieConfig$1["defaultHttpOnly"] = "true";
+	CookieConfig$1["defaultSameSite"] = "lax";
+	CookieConfig$1["defaultSecure"] = "false";
+	return CookieConfig$1;
+}({});
+const DEFAULT_LOGIN_PATH = "/login";
+const DEFAULT_LOGOUT_PATH = "/logout";
+
+//#endregion
+//#region src/__legacy__/middleware/protect-route.ts
+const protectRoute = (thunderIDExpressClient, callback) => {
+	return async (req, res, next) => {
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			Logger.error("No session ID found in the request cookies");
+			if (callback(res, "Unauthenticated")) return;
+			return next();
+		} else if (await thunderIDExpressClient.isSignedIn(req.cookies.THUNDERID_SESSION_ID)) return next();
+		else {
+			Logger.error("Invalid session ID found in the request cookies");
+			if (callback(res, "Invalid session cookie")) return;
+			return next();
+		}
+	};
+};
+
+//#endregion
+//#region src/__legacy__/middleware/authentication.ts
+const thunderIDExpressAuth = (thunderIDExpressClient, config, onSignIn, onSignOut, onError) => {
+	const router = new express.Router();
+	router.use(async (req, res, next) => {
+		req.thunderIDAuth = thunderIDExpressClient;
+		res.thunderIDAuth = thunderIDExpressClient;
+		next();
+	});
+	router.get(config.loginPath || DEFAULT_LOGIN_PATH, async (req, res, next) => {
+		try {
+			const response = await thunderIDExpressClient.signIn(req, res, next, config.signInConfig);
+			if (response.accessToken || response.idToken) onSignIn(res, response);
+		} catch (e) {
+			Logger.error(e.message);
+			onError(res, e);
+		}
+	});
+	router.get(config.logoutPath || DEFAULT_LOGOUT_PATH, async (req, res, next) => {
+		if (req.query.state === "sign_out_success") {
+			onSignOut(res);
+			return;
+		}
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			onError(res, new ThunderIDAuthException("EXPRESS-AUTH_MW-LOGOUT-NF01", "No cookie found in the request", "No cookie was sent with the request. The user may not have signed in yet."));
+			return;
+		} else try {
+			const signOutURL = await req.thunderIDAuth.signOut(req.cookies.THUNDERID_SESSION_ID);
+			if (signOutURL) {
+				res.cookie("THUNDERID_SESSION_ID", null, { maxAge: 0 });
+				res.redirect(signOutURL);
+				return;
+			}
+		} catch (e) {
+			onError(res, e);
+			return;
+		}
+	});
+	return router;
+};
+
+//#endregion
+//#region src/__legacy__/utils/express-utils.ts
+var ExpressUtils = class {
+	static AUTH_CODE_REGEXP = /[?&]error=[^&]+/;
+	/**
+	* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+	*
+	* WSO2 LLC. licenses this file to you under the Apache License,
+	* Version 2.0 (the "License"); you may not use this file except
+	* in compliance with the License.
+	* You may obtain a copy of the License at
+	*
+	*     http://www.apache.org/licenses/LICENSE-2.0
+	*
+	* Unless required by applicable law or agreed to in writing,
+	* software distributed under the License is distributed on an
+	* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+	* KIND, either express or implied. See the License for the
+	* specific language governing permissions and limitations
+	* under the License.
+	*/
+	static hasErrorInURL(url) {
+		return this.AUTH_CODE_REGEXP.test(url);
+	}
+};
+
+//#endregion
+//#region src/__legacy__/client.ts
+var ThunderIDExpressClient = class ThunderIDExpressClient {
+	_authClient;
+	_storage;
+	static _clientConfig;
+	static _instance;
+	constructor(config, storage) {
+		ThunderIDExpressClient._clientConfig = { ...config };
+		const nodeClientConfig = {
+			...config,
+			afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),
+			afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH)
+		};
+		if (storage) {
+			Logger.debug("Initializing user provided storage");
+			this._storage = storage;
+		}
+		this._authClient = new LegacyThunderIDNodeClient();
+		this._authClient.initialize(nodeClientConfig, this._storage);
+	}
+	static getInstance(config, storage) {
+		if (!ThunderIDExpressClient._instance && config) {
+			ThunderIDExpressClient._instance = new ThunderIDExpressClient(config, storage);
+			Logger.debug("Initialized ThunderIDExpressClient successfully");
+		}
+		if (!ThunderIDExpressClient._instance && !config) throw Error(new ThunderIDAuthException("EXPRESS-CLIENT-GI1-NF01", "User configuration  is not found", "User config has not been passed to initialize ThunderIDExpressClient").toString());
+		return ThunderIDExpressClient._instance;
+	}
+	async signIn(req, res, next, signInConfig) {
+		if (ExpressUtils.hasErrorInURL(req.originalUrl)) return Promise.reject(new ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
+		let userId = req.cookies.THUNDERID_SESSION_ID;
+		if (!userId) userId = v4();
+		const authRedirectCallback = (url) => {
+			if (url) {
+				Logger.debug("Redirecting to: " + url);
+				res.cookie("THUNDERID_SESSION_ID", userId, {
+					maxAge: ThunderIDExpressClient._clientConfig.cookieConfig?.maxAge ? ThunderIDExpressClient._clientConfig.cookieConfig.maxAge : CookieConfig.defaultMaxAge,
+					httpOnly: ThunderIDExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,
+					sameSite: ThunderIDExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,
+					secure: ThunderIDExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure
+				});
+				res.redirect(url);
+				next && typeof next === "function" && next();
+			}
+		};
+		const authResponse = await this._authClient.signIn(authRedirectCallback, userId, req.query.code, req.query.session_state, req.query.state, signInConfig);
+		if (authResponse.accessToken || authResponse.idToken) return authResponse;
+		else return {
+			accessToken: "",
+			createdAt: 0,
+			expiresIn: "",
+			idToken: "",
+			refreshToken: "",
+			scope: "",
+			tokenType: ""
+		};
+	}
+	async signOut(userId) {
+		return this._authClient.signOut(userId);
+	}
+	async isSignedIn(userId) {
+		return this._authClient.isSignedIn(userId);
+	}
+	async getIdToken(userId) {
+		return this._authClient.getIdToken(userId);
+	}
+	async getUser(userId) {
+		return this._authClient.getUser(userId);
+	}
+	async getOpenIDProviderEndpoints() {
+		return this._authClient.getOpenIDProviderEndpoints();
+	}
+	async getDecodedIdToken(userId) {
+		return this._authClient.getDecodedIdToken(userId);
+	}
+	async getAccessToken(userId) {
+		return this._authClient.getAccessToken(userId);
+	}
+	async exchangeToken(config, userId) {
+		return this._authClient.exchangeToken(config, userId);
+	}
+	async reInitialize(config) {
+		return this._authClient.reInitialize(config);
+	}
+	async revokeAccessToken(userId) {
+		return this._authClient.revokeAccessToken(userId);
+	}
+	static didSignOutFail(afterSignOutUrl) {
+		return LegacyThunderIDNodeClient.didSignOutFail(afterSignOutUrl);
+	}
+	static isSignOutSuccessful(afterSignOutUrl) {
+		return LegacyThunderIDNodeClient.isSignOutSuccessful(afterSignOutUrl);
+	}
+	static protectRoute(callback) {
+		if (!this._instance) throw new ThunderIDAuthException("EXPRESS-CLIENT-PR-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return protectRoute(this._instance, callback);
+	}
+	static thunderIDExpressAuth(onSignIn, onSignOut, onError) {
+		if (!this._instance) throw new ThunderIDAuthException("EXPRESS-CLIENT-AEA-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return thunderIDExpressAuth(this._instance, ThunderIDExpressClient._clientConfig, onSignIn, onSignOut, onError);
+	}
+	async getStorageManager() {
+		return this._authClient.getStorageManager();
+	}
+};
+
+//#endregion
+export { ThunderIDExpressClient };

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export * from './__legacy__/models';
+export * from './__legacy__/client';
+export * from '@thunderid/node';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AAEpC,cAAc,iBAAiB,CAAC"}