@uipath/auth 1.197.0 → 1.198.0-preview.80

package/dist/constants.d.ts

@@ -6,5 +6,6 @@ export declare const AUTH_FILENAME = ".auth";
 export declare const DEFAULT_BASE_URL = "https://cloud.uipath.com";
 /** Auth callback server timeout (5 minutes). */
 export declare const DEFAULT_AUTH_TIMEOUT_MS: number;
+export declare const AUTH_CANCELLED_ERROR_CODE = "EAUTHCANCELLED";
 /** Localhost OIDC redirect URI. */
 export declare const DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export * from "./authContext";
 export * from "./authProfile";
 export * from "./clientCredentials";
 export { type AuthFileConfig, InvalidBaseUrlError, setAuthFileConfig, } from "./config";
+export { AUTH_CANCELLED_ERROR_CODE } from "./constants";
 export { ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_ENABLE_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, } from "./envAuth";
 export * from "./interactive";
 export * from "./loginStatus";
@@ -32,8 +33,11 @@ interface AuthenticateOptions {
     /** Invoked with the authorize URL when `noBrowser` is set (once, when the
      *  callback server starts listening). Mandatory whenever `noBrowser` is true. */
     onAuthUrl?: (url: string) => void;
+    /** Cancels a stuck browser login: closes the local callback server and
+     *  rejects with `AUTH_CANCELLED_ERROR_CODE`. Node (local-server) path only. */
+    signal?: AbortSignal;
 }
-export declare const authenticate: ({ baseUrl, clientId, clientSecret, redirectUri, scope, organization, timeoutMs, noBrowser, onAuthUrl, }: AuthenticateOptions) => Promise<{
+export declare const authenticate: ({ baseUrl, clientId, clientSecret, redirectUri, scope, organization, timeoutMs, noBrowser, onAuthUrl, signal, }: AuthenticateOptions) => Promise<{
     accessToken: string;
     refreshToken: string;
 }>;

package/dist/index.js

@@ -75,7 +75,7 @@ function settlePromiseLike(thenable) {
 }
 
 // src/constants.ts
-var UIPATH_HOME_DIR = ".uipath", AUTH_FILENAME = ".auth", DEFAULT_BASE_URL = "https://cloud.uipath.com", DEFAULT_AUTH_TIMEOUT_MS, DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";
+var UIPATH_HOME_DIR = ".uipath", AUTH_FILENAME = ".auth", DEFAULT_BASE_URL = "https://cloud.uipath.com", DEFAULT_AUTH_TIMEOUT_MS, AUTH_CANCELLED_ERROR_CODE = "EAUTHCANCELLED", DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";
 var init_constants = __esm(() => {
   DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
 });
@@ -19318,7 +19318,8 @@ var escapeHtml = (value) => value.replace(/[&<>"']/g, (char) => {
 var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT", startServer = async ({
   redirectUri,
   timeoutMs = DEFAULT_AUTH_TIMEOUT_MS,
-  onListening
+  onListening,
+  signal
 }) => {
   let http;
   try {
@@ -19386,8 +19387,24 @@ var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT", startServer = async ({
       reject(new Error("No authorization code received"));
       return;
     });
-    const timeoutHandle = setTimeout(() => {
+    let timeoutHandle;
+    const onAbort = () => {
+      clearTimeout(timeoutHandle);
+      server.close();
+      const err = new Error("Authentication cancelled");
+      err.code = AUTH_CANCELLED_ERROR_CODE;
+      reject(err);
+    };
+    if (signal) {
+      if (signal.aborted) {
+        onAbort();
+        return;
+      }
+      signal.addEventListener("abort", onAbort, { once: true });
+    }
+    timeoutHandle = setTimeout(() => {
       server.close();
+      signal?.removeEventListener("abort", onAbort);
       const err = new Error("Authentication timeout");
       err.code = AUTH_TIMEOUT_ERROR_CODE;
       reject(err);
@@ -19395,6 +19412,7 @@ var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT", startServer = async ({
     const bindHost = redirectUri.hostname === "localhost" ? "127.0.0.1" : redirectUri.hostname;
     server.on("error", (err) => {
       clearTimeout(timeoutHandle);
+      signal?.removeEventListener("abort", onAbort);
       reject(err);
     });
     server.listen(Number(redirectUri.port), bindHost, () => {
@@ -19408,6 +19426,7 @@ var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT", startServer = async ({
     });
     server.on("close", () => {
       clearTimeout(timeoutHandle);
+      signal?.removeEventListener("abort", onAbort);
     });
   });
 };
@@ -19422,7 +19441,7 @@ __export(exports_browser_strategy, {
 });
 
 class BrowserAuthStrategy {
-  async execute(url, _redirectUri, expectedState, _opts) {
+  async execute(url, _redirectUri, expectedState, opts) {
     const global2 = getGlobalThis();
     if (!global2?.window) {
       throw new Error("Browser environment required for authentication");
@@ -19449,6 +19468,7 @@ class BrowserAuthStrategy {
 ` + "If using an ad blocker, you may need to temporarily disable it.");
     }
     return new Promise((resolve2, reject) => {
+      let timer;
       const messageHandler = (event) => {
         if (event.data?.type === "UIP_AUTH_CODE" && event.data.code) {
           if (event.data.state !== expectedState) {
@@ -19471,13 +19491,30 @@ class BrowserAuthStrategy {
       };
       const cleanup = () => {
         global2.window?.removeEventListener?.("message", messageHandler);
+        opts?.signal?.removeEventListener("abort", onAbort);
         if (timer)
           clearInterval(timer);
       };
+      const onAbort = () => {
+        cleanup();
+        const err = new Error(`Authentication was cancelled.
+
+` + "The sign-in was cancelled before completing the login process. " + "Please try again and complete the authentication flow.");
+        err.code = AUTH_CANCELLED_ERROR_CODE;
+        reject(err);
+        popup.close();
+      };
+      if (opts?.signal) {
+        if (opts.signal.aborted) {
+          onAbort();
+          return;
+        }
+        opts.signal.addEventListener("abort", onAbort, { once: true });
+      }
       if (global2.window?.addEventListener) {
         global2.window.addEventListener("message", messageHandler);
       }
-      const timer = setInterval(() => {
+      timer = setInterval(() => {
         if (popup.closed) {
           cleanup();
           reject(new Error(`Authentication was cancelled.
@@ -19488,7 +19525,9 @@ class BrowserAuthStrategy {
     });
   }
 }
-var init_browser_strategy = () => {};
+var init_browser_strategy = __esm(() => {
+  init_constants();
+});
 
 // src/strategies/node-strategy.ts
 var exports_node_strategy = {};
@@ -19502,6 +19541,7 @@ class NodeAuthStrategy {
     const callbackUrl = await startServer({
       redirectUri,
       timeoutMs: opts?.timeoutMs,
+      signal: opts?.signal,
       onListening: async () => {
         let safeUrl = "";
         for (const ch of url) {
@@ -21511,6 +21551,10 @@ Troubleshooting:` + `
     UIPATH_URL: config.baseUrl
   };
 };
+
+// src/index.ts
+init_constants();
+
 // src/interactive.ts
 init_src();
 
@@ -21635,7 +21679,8 @@ var interactiveLoginWithDeps = async (options, deps) => {
     interactive,
     onEvent,
     timeoutMs,
-    noBrowser
+    noBrowser,
+    signal
   } = options;
   const emit = (event) => {
     if (!onEvent)
@@ -21677,6 +21722,7 @@ var interactiveLoginWithDeps = async (options, deps) => {
       organization,
       timeoutMs,
       noBrowser,
+      signal,
       onAuthUrl: noBrowser ? (url) => deliverAuthUrl(url) : undefined
     });
     return {
@@ -21829,7 +21875,8 @@ var authenticate = async ({
   organization,
   timeoutMs,
   noBrowser,
-  onAuthUrl
+  onAuthUrl,
+  signal
 }) => {
   const config = await resolveConfigAsync({
     customAuthority: baseUrl,
@@ -21879,7 +21926,12 @@ var authenticate = async ({
     const { NodeAuthStrategy: NodeAuthStrategy2 } = await Promise.resolve().then(() => (init_node_strategy(), exports_node_strategy));
     strategy = new NodeAuthStrategy2;
   }
-  const code = await strategy.execute(authUrl, effectiveRedirectUriUrl, state, { timeoutMs, noBrowser, onAuthUrl });
+  const code = await strategy.execute(authUrl, effectiveRedirectUriUrl, state, {
+    timeoutMs,
+    noBrowser,
+    onAuthUrl,
+    signal
+  });
   return await exchangeCodeForTokens({
     code,
     codeVerifier: code_verifier,
@@ -21945,7 +21997,8 @@ export {
   ClientCredentialsAuthenticationError,
   AuthProfileValidationError,
   AUTH_TIMEOUT_ERROR_CODE,
-  AUTH_FLOW_ENV_VAR
+  AUTH_FLOW_ENV_VAR,
+  AUTH_CANCELLED_ERROR_CODE
 };
 
-//# debugId=0528EAEF2878CFAB64756E2164756E21
+//# debugId=C5F963336170300664756E2164756E21

package/dist/interactive.d.ts

@@ -62,6 +62,14 @@ interface InteractiveLoginOptions {
      * (client-credentials opens no browser).
      */
     noBrowser?: boolean;
+    /**
+     * Cancels a stuck browser login: closes the local callback server, frees
+     * the OAuth port immediately, and rejects with `AUTH_CANCELLED_ERROR_CODE`.
+     * Lets an in-process host (e.g. the VS Code extension) offer a "Cancel
+     * sign-in" affordance instead of forcing the user to wait out `timeoutMs`.
+     * Only the authorization-code (browser) path uses it.
+     */
+    signal?: AbortSignal;
 }
 export interface InteractiveLoginDependencies {
     resolveConfig?: typeof resolveConfigAsync;

package/dist/server.d.ts

@@ -3,6 +3,13 @@ interface StartCallbackServerProps {
     redirectUri: URL;
     timeoutMs?: number;
     onListening?: () => Promise<void>;
+    /**
+     * Aborts the wait for the browser callback. On abort the local server is
+     * closed (freeing the port immediately) and the promise rejects with
+     * `AUTH_CANCELLED_ERROR_CODE`. Lets an in-process host (e.g. the VS Code
+     * extension) cancel a stuck login without waiting out `timeoutMs`.
+     */
+    signal?: AbortSignal;
 }
-export declare const startServer: ({ redirectUri, timeoutMs, onListening, }: StartCallbackServerProps) => Promise<URL>;
+export declare const startServer: ({ redirectUri, timeoutMs, onListening, signal, }: StartCallbackServerProps) => Promise<URL>;
 export {};

package/dist/strategies/auth-strategy.d.ts

@@ -12,6 +12,13 @@ export interface AuthExecuteOptions {
      * listening. Mandatory whenever `noBrowser` is true.
      */
     onAuthUrl?: (url: string) => void;
+    /**
+     * Cancels the in-flight login. The Node strategy closes its local callback
+     * server (freeing the port immediately) and rejects with
+     * `AUTH_CANCELLED_ERROR_CODE`; the browser strategy closes its popup and
+     * rejects. No effect once the flow has already completed.
+     */
+    signal?: AbortSignal;
 }
 export interface IAuthStrategy {
     execute(url: string, redirectUri: URL, expectedState: string, opts?: AuthExecuteOptions): Promise<string>;

package/dist/strategies/browser-strategy.d.ts

@@ -1,6 +1,4 @@
-import type { IAuthStrategy } from "./auth-strategy";
+import type { AuthExecuteOptions, IAuthStrategy } from "./auth-strategy";
 export declare class BrowserAuthStrategy implements IAuthStrategy {
-    execute(url: string, _redirectUri: URL, expectedState: string, _opts?: {
-        timeoutMs?: number;
-    }): Promise<string>;
+    execute(url: string, _redirectUri: URL, expectedState: string, opts?: AuthExecuteOptions): Promise<string>;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/auth",
   "license": "MIT",
-  "version": "1.197.0",
+  "version": "1.198.0-preview.80",
   "repository": {
     "type": "git",
     "url": "https://github.com/UiPath/cli.git",
@@ -37,5 +37,5 @@
     "mihaigirleanu",
     "vlad-uipath"
   ],
-  "gitHead": "56f68b263cec4ea1f2a39d738bd99ecf52f88fea"
+  "gitHead": "9b2c3c0f21a256d2f38dd28bc97e72e6f7b10a9c"
 }