@thunderid/express 0.0.1

package/dist/index.js

@@ -0,0 +1,227 @@
+import { LegacyThunderIDNodeClient, Logger, ThunderIDAuthException } from "@thunderid/node";
+import { v4 } from "uuid";
+import express from "express";
+
+export * from "@thunderid/node"
+
+//#region src/__legacy__/constants/default-options.ts
+/**
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+let CookieConfig = /* @__PURE__ */ function(CookieConfig$1) {
+	CookieConfig$1[CookieConfig$1["defaultMaxAge"] = 9e4] = "defaultMaxAge";
+	CookieConfig$1["defaultHttpOnly"] = "true";
+	CookieConfig$1["defaultSameSite"] = "lax";
+	CookieConfig$1["defaultSecure"] = "false";
+	return CookieConfig$1;
+}({});
+const DEFAULT_LOGIN_PATH = "/login";
+const DEFAULT_LOGOUT_PATH = "/logout";
+
+//#endregion
+//#region src/__legacy__/middleware/protect-route.ts
+const protectRoute = (thunderIDExpressClient, callback) => {
+	return async (req, res, next) => {
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			Logger.error("No session ID found in the request cookies");
+			if (callback(res, "Unauthenticated")) return;
+			return next();
+		} else if (await thunderIDExpressClient.isSignedIn(req.cookies.THUNDERID_SESSION_ID)) return next();
+		else {
+			Logger.error("Invalid session ID found in the request cookies");
+			if (callback(res, "Invalid session cookie")) return;
+			return next();
+		}
+	};
+};
+
+//#endregion
+//#region src/__legacy__/middleware/authentication.ts
+const thunderIDExpressAuth = (thunderIDExpressClient, config, onSignIn, onSignOut, onError) => {
+	const router = new express.Router();
+	router.use(async (req, res, next) => {
+		req.thunderIDAuth = thunderIDExpressClient;
+		res.thunderIDAuth = thunderIDExpressClient;
+		next();
+	});
+	router.get(config.loginPath || DEFAULT_LOGIN_PATH, async (req, res, next) => {
+		try {
+			const response = await thunderIDExpressClient.signIn(req, res, next, config.signInConfig);
+			if (response.accessToken || response.idToken) onSignIn(res, response);
+		} catch (e) {
+			Logger.error(e.message);
+			onError(res, e);
+		}
+	});
+	router.get(config.logoutPath || DEFAULT_LOGOUT_PATH, async (req, res, next) => {
+		if (req.query.state === "sign_out_success") {
+			onSignOut(res);
+			return;
+		}
+		if (req.cookies.THUNDERID_SESSION_ID === void 0) {
+			onError(res, new ThunderIDAuthException("EXPRESS-AUTH_MW-LOGOUT-NF01", "No cookie found in the request", "No cookie was sent with the request. The user may not have signed in yet."));
+			return;
+		} else try {
+			const signOutURL = await req.thunderIDAuth.signOut(req.cookies.THUNDERID_SESSION_ID);
+			if (signOutURL) {
+				res.cookie("THUNDERID_SESSION_ID", null, { maxAge: 0 });
+				res.redirect(signOutURL);
+				return;
+			}
+		} catch (e) {
+			onError(res, e);
+			return;
+		}
+	});
+	return router;
+};
+
+//#endregion
+//#region src/__legacy__/utils/express-utils.ts
+var ExpressUtils = class {
+	static AUTH_CODE_REGEXP = /[?&]error=[^&]+/;
+	/**
+	* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+	*
+	* WSO2 LLC. licenses this file to you under the Apache License,
+	* Version 2.0 (the "License"); you may not use this file except
+	* in compliance with the License.
+	* You may obtain a copy of the License at
+	*
+	*     http://www.apache.org/licenses/LICENSE-2.0
+	*
+	* Unless required by applicable law or agreed to in writing,
+	* software distributed under the License is distributed on an
+	* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+	* KIND, either express or implied. See the License for the
+	* specific language governing permissions and limitations
+	* under the License.
+	*/
+	static hasErrorInURL(url) {
+		return this.AUTH_CODE_REGEXP.test(url);
+	}
+};
+
+//#endregion
+//#region src/__legacy__/client.ts
+var ThunderIDExpressClient = class ThunderIDExpressClient {
+	_authClient;
+	_storage;
+	static _clientConfig;
+	static _instance;
+	constructor(config, storage) {
+		ThunderIDExpressClient._clientConfig = { ...config };
+		const nodeClientConfig = {
+			...config,
+			afterSignInUrl: config.appURL + (config.loginPath || DEFAULT_LOGIN_PATH),
+			afterSignOutUrl: config.appURL + (config.logoutPath || DEFAULT_LOGOUT_PATH)
+		};
+		if (storage) {
+			Logger.debug("Initializing user provided storage");
+			this._storage = storage;
+		}
+		this._authClient = new LegacyThunderIDNodeClient();
+		this._authClient.initialize(nodeClientConfig, this._storage);
+	}
+	static getInstance(config, storage) {
+		if (!ThunderIDExpressClient._instance && config) {
+			ThunderIDExpressClient._instance = new ThunderIDExpressClient(config, storage);
+			Logger.debug("Initialized ThunderIDExpressClient successfully");
+		}
+		if (!ThunderIDExpressClient._instance && !config) throw Error(new ThunderIDAuthException("EXPRESS-CLIENT-GI1-NF01", "User configuration  is not found", "User config has not been passed to initialize ThunderIDExpressClient").toString());
+		return ThunderIDExpressClient._instance;
+	}
+	async signIn(req, res, next, signInConfig) {
+		if (ExpressUtils.hasErrorInURL(req.originalUrl)) return Promise.reject(new ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
+		let userId = req.cookies.THUNDERID_SESSION_ID;
+		if (!userId) userId = v4();
+		const authRedirectCallback = (url) => {
+			if (url) {
+				Logger.debug("Redirecting to: " + url);
+				res.cookie("THUNDERID_SESSION_ID", userId, {
+					maxAge: ThunderIDExpressClient._clientConfig.cookieConfig?.maxAge ? ThunderIDExpressClient._clientConfig.cookieConfig.maxAge : CookieConfig.defaultMaxAge,
+					httpOnly: ThunderIDExpressClient._clientConfig.cookieConfig?.httpOnly ?? CookieConfig.defaultHttpOnly,
+					sameSite: ThunderIDExpressClient._clientConfig.cookieConfig?.sameSite ?? CookieConfig.defaultSameSite,
+					secure: ThunderIDExpressClient._clientConfig.cookieConfig?.secure ?? CookieConfig.defaultSecure
+				});
+				res.redirect(url);
+				next && typeof next === "function" && next();
+			}
+		};
+		const authResponse = await this._authClient.signIn(authRedirectCallback, userId, req.query.code, req.query.session_state, req.query.state, signInConfig);
+		if (authResponse.accessToken || authResponse.idToken) return authResponse;
+		else return {
+			accessToken: "",
+			createdAt: 0,
+			expiresIn: "",
+			idToken: "",
+			refreshToken: "",
+			scope: "",
+			tokenType: ""
+		};
+	}
+	async signOut(userId) {
+		return this._authClient.signOut(userId);
+	}
+	async isSignedIn(userId) {
+		return this._authClient.isSignedIn(userId);
+	}
+	async getIdToken(userId) {
+		return this._authClient.getIdToken(userId);
+	}
+	async getUser(userId) {
+		return this._authClient.getUser(userId);
+	}
+	async getOpenIDProviderEndpoints() {
+		return this._authClient.getOpenIDProviderEndpoints();
+	}
+	async getDecodedIdToken(userId) {
+		return this._authClient.getDecodedIdToken(userId);
+	}
+	async getAccessToken(userId) {
+		return this._authClient.getAccessToken(userId);
+	}
+	async exchangeToken(config, userId) {
+		return this._authClient.exchangeToken(config, userId);
+	}
+	async reInitialize(config) {
+		return this._authClient.reInitialize(config);
+	}
+	async revokeAccessToken(userId) {
+		return this._authClient.revokeAccessToken(userId);
+	}
+	static didSignOutFail(afterSignOutUrl) {
+		return LegacyThunderIDNodeClient.didSignOutFail(afterSignOutUrl);
+	}
+	static isSignOutSuccessful(afterSignOutUrl) {
+		return LegacyThunderIDNodeClient.isSignOutSuccessful(afterSignOutUrl);
+	}
+	static protectRoute(callback) {
+		if (!this._instance) throw new ThunderIDAuthException("EXPRESS-CLIENT-PR-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return protectRoute(this._instance, callback);
+	}
+	static thunderIDExpressAuth(onSignIn, onSignOut, onError) {
+		if (!this._instance) throw new ThunderIDAuthException("EXPRESS-CLIENT-AEA-NF01", "ThunderIDExpressClient is not instantiated", "Create an instance of ThunderIDExpressClient before using calling this method.");
+		return thunderIDExpressAuth(this._instance, ThunderIDExpressClient._clientConfig, onSignIn, onSignOut, onError);
+	}
+	async getStorageManager() {
+		return this._authClient.getStorageManager();
+	}
+};
+
+//#endregion
+export { ThunderIDExpressClient };

package/dist/models/config.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { ThunderIDNodeConfig } from '@thunderid/node';
+/**
+ * Configuration type for the ThunderID Express.js SDK.
+ * Extends the base Config type from @thunderid/node with Express.js specific settings.
+ *
+ * @remarks
+ * This type is used to configure the Express.js SDK with settings like:
+ * - Server endpoints
+ * - Authentication parameters
+ * - Session management options
+ */
+export type ThunderIDExpressConfig = ThunderIDNodeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/models/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/models/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@thunderid/express",
+  "version": "0.0.1",
+  "description": "Express.js SDK for ThunderID",
+  "keywords": [
+    "thunderid",
+    "express.js",
+    "server"
+  ],
+  "homepage": "https://github.com/thunder-id/thunderid/tree/main/sdks/express#readme",
+  "bugs": {
+    "url": "https://github.com/thunder-id/thunderid/issues"
+  },
+  "author": "WSO2",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "commonjs": "dist/cjs/index.js",
+  "exports": {
+    "import": "./dist/index.js",
+    "require": "./dist/cjs/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "types": "dist/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/thunder-id/thunderid",
+    "directory": "sdks/express"
+  },
+  "devDependencies": {
+    "@types/node": "22.15.3",
+    "eslint": "9.39.4",
+    "express": "5.2.1",
+    "prettier": "3.6.2",
+    "rimraf": "6.1.3",
+    "rolldown": "1.0.0-beta.45",
+    "typescript": "5.9.3",
+    "vitest": "4.1.3",
+    "@thunderid/eslint-plugin": "^0.0.0",
+    "@thunderid/prettier-config": "^0.0.0"
+  },
+  "dependencies": {
+    "uuid": "11.1.0",
+    "@thunderid/node": "^0.0.0"
+  },
+  "peerDependencies": {
+    "express": ">=4.21.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "pnpm clean && rolldown -c rolldown.config.js && tsc -p tsconfig.lib.json --emitDeclarationOnly --outDir dist",
+    "clean": "rimraf dist",
+    "format:check": "prettier --check --cache .",
+    "format:fix": "prettier --write --cache .",
+    "lint": "eslint . --ext .js,.jsx,.ts,.tsx,.cjs,.mjs",
+    "lint:fix": "eslint . --fix --ext .js,.jsx,.ts,.tsx,.cjs,.mjs",
+    "test": "vitest --passWithNoTests",
+    "typecheck": "tsc -p tsconfig.lib.json"
+  }
+}