@ts-core/oauth 3.0.17 → 3.0.18

package/cjs/OAuthBase.d.ts

@@ -28,6 +28,7 @@ export declare abstract class OAuthBase<T = any> extends LoggerWrapper {
     protected getRedirectUri(): string;
     abstract getProfile(token: string, ...params: any[]): Promise<T>;
     abstract getTokenByCode(dto: IOAuthDto, secret: string): Promise<IOAuthToken>;
+    parsePopUpResult(data: IOAuthPopUpDto): void;
     getCode(): Promise<IOAuthDto>;
     getToken(): Promise<IOAuthDto>;
     close(): void;
@@ -35,6 +36,7 @@ export declare abstract class OAuthBase<T = any> extends LoggerWrapper {
     protected get popUpCheckCloseTimer(): any;
     protected set popUpCheckCloseTimer(value: any);
     get urlParams(): Map<string, string>;
+    get state(): string;
 }
 export interface IOAuthDto {
     codeOrToken: string;

package/cjs/OAuthBase.js

@@ -22,21 +22,7 @@ class OAuthBase extends common_1.LoggerWrapper {
                 this.close();
             }
         };
-        this.messageHandler = (event) => {
-            let data = this.popUpMessageParser(event);
-            if (_.isNil(data)) {
-                return;
-            }
-            if (!_.isEmpty(data.oAuthCodeOrToken)) {
-                this.promise.resolve({ redirectUri: this.getRedirectUri(), codeOrToken: data.oAuthCodeOrToken });
-            }
-            if (!_.isEmpty(data.oAuthError)) {
-                this.promise.reject(data.oAuthError);
-            }
-            if (!this.promise.isPending) {
-                this.close();
-            }
-        };
+        this.messageHandler = (event) => this.parsePopUpResult(this.popUpMessageParser(event));
         this.http = new common_1.TransportHttp(logger, { method: 'get' });
         this.popUpWidth = 430;
         this.popUpHeight = 520;
@@ -44,6 +30,7 @@ class OAuthBase extends common_1.LoggerWrapper {
         this.popUpIsCheckClose = true;
         this.popUpMessageParser = this.browserMessageHandler;
         this._urlParams = new Map();
+        this.urlParams.set('state', common_1.RandomUtil.randomString());
         this.urlParams.set('display', 'popup');
     }
     open() {
@@ -93,6 +80,20 @@ class OAuthBase extends common_1.LoggerWrapper {
     getRedirectUri() {
         return !_.isNil(this.redirectUri) ? this.redirectUri : `${this.getOriginUrl()}/oauth`;
     }
+    parsePopUpResult(data) {
+        if (_.isNil(data)) {
+            return;
+        }
+        if (!_.isEmpty(data.oAuthCodeOrToken)) {
+            this.promise.resolve({ redirectUri: this.getRedirectUri(), codeOrToken: data.oAuthCodeOrToken });
+        }
+        if (!_.isEmpty(data.oAuthError)) {
+            this.promise.reject(data.oAuthError);
+        }
+        if (!this.promise.isPending) {
+            this.close();
+        }
+    }
     getCode() {
         return __awaiter(this, void 0, void 0, function* () {
             this.responseType = 'code';
@@ -145,6 +146,9 @@ class OAuthBase extends common_1.LoggerWrapper {
     get urlParams() {
         return this._urlParams;
     }
+    get state() {
+        return !_.isNil(this.urlParams) ? this.urlParams.get('state') : null;
+    }
 }
 exports.OAuthBase = OAuthBase;
 OAuthBase.ERROR_WINDOW_CLOSED = 'WINDOW_CLOSED';

package/cjs/OAuthParser.d.ts

@@ -2,5 +2,5 @@ import { IOAuthPopUpDto } from './OAuthBase';
 export declare class OAuthParser {
     static NAMES: Array<string>;
     static ERRORS: Array<string>;
-    static parse(params: any, fragment: string): IOAuthPopUpDto;
+    static parse(params: any, fragment?: string): IOAuthPopUpDto;
 }

package/cjs/OAuthParser.js

@@ -6,7 +6,9 @@ class OAuthParser {
     static parse(params, fragment) {
         let item = new Object();
         _.forIn(params, (value, key) => item[key] = value);
-        new URLSearchParams(fragment).forEach((value, key) => item[key] = value);
+        if (!_.isEmpty(fragment)) {
+            new URLSearchParams(fragment).forEach((value, key) => item[key] = value);
+        }
         let oAuthError = null;
         let oAuthCodeOrToken = null;
         for (let key in item) {

package/esm/OAuthBase.d.ts

@@ -28,6 +28,7 @@ export declare abstract class OAuthBase<T = any> extends LoggerWrapper {
     protected getRedirectUri(): string;
     abstract getProfile(token: string, ...params: any[]): Promise<T>;
     abstract getTokenByCode(dto: IOAuthDto, secret: string): Promise<IOAuthToken>;
+    parsePopUpResult(data: IOAuthPopUpDto): void;
     getCode(): Promise<IOAuthDto>;
     getToken(): Promise<IOAuthDto>;
     close(): void;
@@ -35,6 +36,7 @@ export declare abstract class OAuthBase<T = any> extends LoggerWrapper {
     protected get popUpCheckCloseTimer(): any;
     protected set popUpCheckCloseTimer(value: any);
     get urlParams(): Map<string, string>;
+    get state(): string;
 }
 export interface IOAuthDto {
     codeOrToken: string;

package/esm/OAuthBase.js

@@ -7,7 +7,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import { PromiseHandler, DateUtil, LoggerWrapper, TransportHttp } from "@ts-core/common";
+import { PromiseHandler, DateUtil, LoggerWrapper, TransportHttp, RandomUtil } from "@ts-core/common";
 import * as _ from 'lodash';
 export class OAuthBase extends LoggerWrapper {
     constructor(logger, applicationId, window) {
@@ -19,21 +19,7 @@ export class OAuthBase extends LoggerWrapper {
                 this.close();
             }
         };
-        this.messageHandler = (event) => {
-            let data = this.popUpMessageParser(event);
-            if (_.isNil(data)) {
-                return;
-            }
-            if (!_.isEmpty(data.oAuthCodeOrToken)) {
-                this.promise.resolve({ redirectUri: this.getRedirectUri(), codeOrToken: data.oAuthCodeOrToken });
-            }
-            if (!_.isEmpty(data.oAuthError)) {
-                this.promise.reject(data.oAuthError);
-            }
-            if (!this.promise.isPending) {
-                this.close();
-            }
-        };
+        this.messageHandler = (event) => this.parsePopUpResult(this.popUpMessageParser(event));
         this.http = new TransportHttp(logger, { method: 'get' });
         this.popUpWidth = 430;
         this.popUpHeight = 520;
@@ -41,6 +27,7 @@ export class OAuthBase extends LoggerWrapper {
         this.popUpIsCheckClose = true;
         this.popUpMessageParser = this.browserMessageHandler;
         this._urlParams = new Map();
+        this.urlParams.set('state', RandomUtil.randomString());
         this.urlParams.set('display', 'popup');
     }
     open() {
@@ -90,6 +77,20 @@ export class OAuthBase extends LoggerWrapper {
     getRedirectUri() {
         return !_.isNil(this.redirectUri) ? this.redirectUri : `${this.getOriginUrl()}/oauth`;
     }
+    parsePopUpResult(data) {
+        if (_.isNil(data)) {
+            return;
+        }
+        if (!_.isEmpty(data.oAuthCodeOrToken)) {
+            this.promise.resolve({ redirectUri: this.getRedirectUri(), codeOrToken: data.oAuthCodeOrToken });
+        }
+        if (!_.isEmpty(data.oAuthError)) {
+            this.promise.reject(data.oAuthError);
+        }
+        if (!this.promise.isPending) {
+            this.close();
+        }
+    }
     getCode() {
         return __awaiter(this, void 0, void 0, function* () {
             this.responseType = 'code';
@@ -142,5 +143,8 @@ export class OAuthBase extends LoggerWrapper {
     get urlParams() {
         return this._urlParams;
     }
+    get state() {
+        return !_.isNil(this.urlParams) ? this.urlParams.get('state') : null;
+    }
 }
 OAuthBase.ERROR_WINDOW_CLOSED = 'WINDOW_CLOSED';

package/esm/OAuthParser.d.ts

@@ -2,5 +2,5 @@ import { IOAuthPopUpDto } from './OAuthBase';
 export declare class OAuthParser {
     static NAMES: Array<string>;
     static ERRORS: Array<string>;
-    static parse(params: any, fragment: string): IOAuthPopUpDto;
+    static parse(params: any, fragment?: string): IOAuthPopUpDto;
 }

package/esm/OAuthParser.js

@@ -3,7 +3,9 @@ export class OAuthParser {
     static parse(params, fragment) {
         let item = new Object();
         _.forIn(params, (value, key) => item[key] = value);
-        new URLSearchParams(fragment).forEach((value, key) => item[key] = value);
+        if (!_.isEmpty(fragment)) {
+            new URLSearchParams(fragment).forEach((value, key) => item[key] = value);
+        }
         let oAuthError = null;
         let oAuthCodeOrToken = null;
         for (let key in item) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@ts-core/oauth",
-    "version": "3.0.17",
+    "version": "3.0.18",
     "description": "Classes and utils for oauth",
     "main": "./cjs/public-api.js",
     "module": "./esm/public-api.js",