@uipath/auth 1.199.0 → 1.201.0-preview.115

package/dist/constants.d.ts

@@ -6,6 +6,7 @@ export declare const AUTH_FILENAME = ".auth";
 export declare const DEFAULT_BASE_URL = "https://cloud.uipath.com";
 /** Auth callback server timeout (5 minutes). */
 export declare const DEFAULT_AUTH_TIMEOUT_MS: number;
+export declare const AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT";
 export declare const AUTH_CANCELLED_ERROR_CODE = "EAUTHCANCELLED";
 /** Localhost OIDC redirect URI. */
 export declare const DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";

package/dist/index.browser.d.ts

@@ -4,6 +4,7 @@ export * from "./clientCredentials";
 export { type AuthFileConfig, InvalidBaseUrlError, setAuthFileConfig, } from "./config";
 export * from "./loginStatus";
 export * from "./logout";
+export { type IdentityType, parseAuthFlow, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
 export { fetchTenantsAndOrganizations, type Tenant, type TenantsAndOrganizations, } from "./tenantSelection";
 export * from "./tokenRefresh";
 export { AUTH_FLOW_ENV_VAR, type AuthFlow, type BaseCredentials, } from "./types";

package/dist/index.browser.js

@@ -18452,6 +18452,67 @@ var getTokenExpiration = (accessToken) => {
   }
 };
 
+// src/sessionIdentity.ts
+var parseAuthFlow = (value) => value === "authorization_code" || value === "client_credentials" || value === "federated_credentials" ? value : undefined;
+var decodeClaims = (accessToken) => {
+  const [error, claims] = catchError(() => parseJWT(accessToken));
+  return error ? undefined : claims;
+};
+var asString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+var resolveIdentityType = (claims, authFlow, email) => {
+  const subType = asString(claims?.sub_type);
+  if (subType) {
+    return subType.startsWith("service") ? "Application" : "User";
+  }
+  if (authFlow) {
+    return authFlow === "authorization_code" ? "User" : "Application";
+  }
+  if (email)
+    return "User";
+  if (asString(claims?.client_id) && !asString(claims?.sub)) {
+    return "Application";
+  }
+  return;
+};
+var looksLikeEmail = (value) => value?.includes("@") ?? false;
+var pickEmail = (claims) => {
+  for (const candidate of [claims?.email, claims?.preferred_username]) {
+    const value = asString(candidate);
+    if (looksLikeEmail(value))
+      return value;
+  }
+  return;
+};
+var pickName = (claims) => {
+  const username = asString(claims?.preferred_username);
+  return asString(claims?.name) ?? (looksLikeEmail(username) ? undefined : username);
+};
+var resolveSessionIdentity = (accessToken, authFlow) => {
+  const claims = accessToken ? decodeClaims(accessToken) : undefined;
+  const email = pickEmail(claims);
+  const type = resolveIdentityType(claims, authFlow, email);
+  if (!type)
+    return;
+  const identity = { type };
+  if (authFlow)
+    identity.authFlow = authFlow;
+  if (type === "User") {
+    const userId = asString(claims?.sub);
+    if (userId)
+      identity.userId = userId;
+    if (email)
+      identity.userEmail = email;
+    const name = pickName(claims);
+    if (name)
+      identity.userName = name;
+    return identity;
+  }
+  const clientId = asString(claims?.client_id);
+  if (clientId)
+    identity.clientId = clientId;
+  return identity;
+};
+
 // src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
 var ENFORCE_ROBOT_AUTH_VAR = "UIPATH_CLI_ENFORCE_ROBOT_AUTH";
@@ -18501,6 +18562,7 @@ var readAuthFromEnv = () => {
   }
   const expiration = getTokenExpiration(accessToken);
   const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
+  const identity = resolveSessionIdentity(accessToken);
   return {
     loginStatus,
     accessToken,
@@ -18510,7 +18572,8 @@ var readAuthFromEnv = () => {
     tenantName,
     tenantId,
     expiration,
-    source: "env" /* Env */
+    source: "env-vars" /* EnvironmentVariables */,
+    ...identity ? { identity } : {}
   };
 };
 
@@ -18627,8 +18690,17 @@ var parseResourceUrl = (url) => {
     tenantName: segments[1]
   };
 };
+var ROBOT_CLIENT_LOADER_KEY = Symbol.for("@uipath/auth/RobotClientLoader");
+var getRegisteredRobotClientLoader = () => {
+  const loader = globalThis[ROBOT_CLIENT_LOADER_KEY];
+  return typeof loader === "function" ? loader : undefined;
+};
 var defaultLoadModule = async () => {
-  const [error, mod] = await catchError(() => import("@uipath/robot-client"));
+  const hostLoader = getRegisteredRobotClientLoader();
+  if (!hostLoader) {
+    return;
+  }
+  const [error, mod] = await catchError(() => hostLoader());
   if (error || !mod) {
     return;
   }
@@ -18754,6 +18826,9 @@ var refreshAccessToken = async ({
   return { accessToken: newAccessToken, refreshToken: newRefreshToken };
 };
 
+// src/types.ts
+var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
+
 // src/utils/envFile.ts
 import { getFileSystem as getFileSystem4 } from "@uipath/filesystem";
 var DEFAULT_AUTH_FILENAME = AUTH_FILENAME;
@@ -18916,12 +18991,12 @@ var saveEnvFileAsync = async ({
 };
 
 // src/loginStatus.ts
-var LoginStatusSource;
-((LoginStatusSource2) => {
-  LoginStatusSource2["File"] = "file";
-  LoginStatusSource2["Robot"] = "robot";
-  LoginStatusSource2["Env"] = "env";
-})(LoginStatusSource ||= {});
+var CredentialSource;
+((CredentialSource2) => {
+  CredentialSource2["SavedLogin"] = "saved-login";
+  CredentialSource2["Robot"] = "robot";
+  CredentialSource2["EnvironmentVariables"] = "env-vars";
+})(CredentialSource ||= {});
 var getLoginStatusAsync = async (options = {}) => {
   return getLoginStatusWithDeps(options);
 };
@@ -19127,7 +19202,8 @@ async function buildFileStatus(tokens, credentials, globalHint) {
     tenantName: credentials.UIPATH_TENANT_NAME,
     tenantId: credentials.UIPATH_TENANT_ID,
     expiration: tokens.expiration,
-    source: "file" /* File */,
+    source: "saved-login" /* SavedLogin */,
+    ...identityFields(tokens.accessToken, credentials),
     ...tokens.persistenceWarning ? { hint: tokens.persistenceWarning, persistenceFailed: true } : {},
     ...tokens.lockReleaseFailed ? { lockReleaseFailed: true } : {},
     ...tokens.tokenRefresh ? { tokenRefresh: tokens.tokenRefresh } : {}
@@ -19140,7 +19216,12 @@ async function buildFileStatus(tokens, credentials, globalHint) {
   }
   return result;
 }
+function identityFields(accessToken, credentials) {
+  const identity = resolveSessionIdentity(accessToken, parseAuthFlow(credentials[AUTH_FLOW_ENV_VAR]));
+  return identity ? { identity } : {};
+}
 function buildRobotStatus(robotCreds) {
+  const identity = resolveSessionIdentity(robotCreds.accessToken);
   return {
     loginStatus: "Logged in",
     accessToken: robotCreds.accessToken,
@@ -19151,7 +19232,8 @@ function buildRobotStatus(robotCreds) {
     tenantId: robotCreds.tenantId,
     issuer: robotCreds.issuer,
     expiration: getTokenExpiration(robotCreds.accessToken),
-    source: "robot" /* Robot */
+    source: "robot" /* Robot */,
+    ...identity ? { identity } : {}
   };
 }
 var isFileNotFoundError = (error) => {
@@ -19202,7 +19284,8 @@ async function circuitBreakerShortCircuit(ctx) {
       tenantName: credentials.UIPATH_TENANT_NAME,
       tenantId: credentials.UIPATH_TENANT_ID,
       expiration,
-      source: "file" /* File */
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(accessToken, credentials)
     } : {},
     hint: globalHint ?? (tokenIsDead ? deadHint : backoffHint),
     refreshCircuitOpen: true,
@@ -19224,7 +19307,8 @@ async function lockAcquireFailureStatus(ctx, error) {
       tenantName: ctx.credentials.UIPATH_TENANT_NAME,
       tenantId: ctx.credentials.UIPATH_TENANT_ID,
       expiration: ctx.expiration,
-      source: "file" /* File */,
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(ctx.accessToken, ctx.credentials),
       hint: globalHint,
       tokenRefresh: {
         attempted: false,
@@ -19612,18 +19696,18 @@ var fetchTenantsAndOrganizations = async (baseUrl, accessToken, organizationId)
   const data = await response.json();
   return data;
 };
-// src/types.ts
-var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
 export {
   setAuthFileConfig,
   setActiveAuthProfile,
   saveEnvFileAsync,
   runWithAuthProfile,
+  resolveSessionIdentity,
   resolveEnvFilePathAsync,
   resolveEnvFileLocationAsync,
   resolveAuthProfileFilePath,
   refreshAccessToken,
   parseJWT,
+  parseAuthFlow,
   normalizeAuthProfileName,
   logoutWithDeps,
   logout,
@@ -19641,14 +19725,14 @@ export {
   clientCredentialsLogin,
   clearActiveAuthProfile,
   TokenRefreshOAuthError,
-  LoginStatusSource,
   InvalidBaseUrlError,
   DEFAULT_ENV_FILENAME,
   DEFAULT_AUTH_PROFILE,
   DEFAULT_AUTH_FILENAME,
+  CredentialSource,
   ClientCredentialsAuthenticationError,
   AuthProfileValidationError,
   AUTH_FLOW_ENV_VAR
 };
 
-//# debugId=34E22CDEA296620564756E2164756E21
+//# debugId=A433BD3381C7E18264756E2164756E21

package/dist/index.d.ts

@@ -2,15 +2,16 @@ export * from "./authContext";
 export * from "./authProfile";
 export * from "./clientCredentials";
 export { type AuthFileConfig, InvalidBaseUrlError, setAuthFileConfig, } from "./config";
-export { AUTH_CANCELLED_ERROR_CODE } from "./constants";
+export { AUTH_CANCELLED_ERROR_CODE, AUTH_TIMEOUT_ERROR_CODE, DEFAULT_AUTH_TIMEOUT_MS, } from "./constants";
 export { ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_ENABLE_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, } from "./envAuth";
 export { FederatedCredentialsAuthenticationError, federatedCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, } from "./federatedCredentials";
 export * from "./interactive";
 export * from "./loginStatus";
 export * from "./logout";
 export { clearRefreshBreaker, loadRefreshBreaker, type RefreshBreakerState, refreshTokenFingerprint, saveRefreshBreaker, } from "./refreshCircuitBreaker";
+export { type RobotClientModuleLoader, registerRobotClientLoader, } from "./robotClientFallback";
 export { INVALID_TENANT_CODE, InvalidTenantError, isTenantSelectionError, type SelectFromList, selectTenantWithDeps, TENANT_SELECTION_REQUIRED_CODE, TenantSelectionError, TenantSelectionRequiredError, } from "./selectTenant";
-export { AUTH_TIMEOUT_ERROR_CODE } from "./server";
+export { type IdentityType, parseAuthFlow, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
 export { fetchTenantsAndOrganizations, type Tenant, type TenantsAndOrganizations, } from "./tenantSelection";
 export * from "./tokenRefresh";
 export { AUTH_FLOW_ENV_VAR, type AuthFlow, type BaseCredentials, } from "./types";