@umbraco-cms/backoffice 17.2.2 → 17.3.0-rc2

package/dist-cms/external/openid/src/token_request.js

@@ -1,69 +0,0 @@
-/* eslint-disable local-rules/umb-class-prefix */
-/* eslint-disable local-rules/exported-string-constant-naming */
-/*
- * Copyright 2017 Google Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software distributed under the
- * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
- * express or implied. See the License for the specific language governing permissions and
- * limitations under the License.
- */
-export const GRANT_TYPE_AUTHORIZATION_CODE = 'authorization_code';
-export const GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
-/**
- * Represents an Access Token request.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-4.1.3
- */
-export class TokenRequest {
-    constructor(request) {
-        this.clientId = request.client_id;
-        this.redirectUri = request.redirect_uri;
-        this.grantType = request.grant_type;
-        this.code = request.code;
-        this.refreshToken = request.refresh_token;
-        this.extras = request.extras;
-    }
-    /**
-     * Serializes a TokenRequest to a JavaScript object.
-     */
-    toJson() {
-        return {
-            grant_type: this.grantType,
-            code: this.code,
-            refresh_token: this.refreshToken,
-            redirect_uri: this.redirectUri,
-            client_id: this.clientId,
-            extras: this.extras,
-        };
-    }
-    toStringMap() {
-        const map = {
-            grant_type: this.grantType,
-            client_id: this.clientId,
-            redirect_uri: this.redirectUri,
-        };
-        if (this.code) {
-            map['code'] = this.code;
-        }
-        if (this.refreshToken) {
-            map['refresh_token'] = this.refreshToken;
-        }
-        // copy over extras
-        if (this.extras) {
-            for (const extra in this.extras) {
-                if (Object.prototype.hasOwnProperty.call(this.extras, extra) &&
-                    !Object.prototype.hasOwnProperty.call(map, extra)) {
-                    // check before inserting to requestMap
-                    map[extra] = this.extras[extra];
-                }
-            }
-        }
-        return map;
-    }
-}

package/dist-cms/external/openid/src/token_request_handler.d.ts

@@ -1,27 +0,0 @@
-import type { AuthorizationServiceConfiguration } from './authorization_service_configuration.js';
-import type { QueryStringUtils } from './query_string_utils.js';
-import type { RevokeTokenRequest } from './revoke_token_request.js';
-import type { TokenRequest } from './token_request.js';
-import { TokenResponse } from './token_response.js';
-import { type Requestor } from './xhr.js';
-/**
- * Represents an interface which can make a token request.
- */
-export interface TokenRequestHandler {
-    /**
-     * Performs the token request, given the service configuration.
-     */
-    performTokenRequest(configuration: AuthorizationServiceConfiguration, request: TokenRequest): Promise<TokenResponse>;
-    performRevokeTokenRequest(configuration: AuthorizationServiceConfiguration, request: RevokeTokenRequest): Promise<boolean>;
-}
-/**
- * The default token request handler.
- */
-export declare class BaseTokenRequestHandler implements TokenRequestHandler {
-    readonly requestor: Requestor;
-    readonly utils: QueryStringUtils;
-    constructor(requestor?: Requestor, utils?: QueryStringUtils);
-    private isTokenResponse;
-    performRevokeTokenRequest(configuration: AuthorizationServiceConfiguration, request: RevokeTokenRequest): Promise<boolean>;
-    performTokenRequest(configuration: AuthorizationServiceConfiguration, request: TokenRequest): Promise<TokenResponse>;
-}

package/dist-cms/external/openid/src/token_request_handler.js

@@ -1,58 +0,0 @@
-/* eslint-disable local-rules/umb-class-prefix */
-/*
- * Copyright 2017 Google Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software distributed under the
- * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
- * express or implied. See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { AppAuthError } from './errors.js';
-import { BasicQueryStringUtils } from './query_string_utils.js';
-import { TokenError, TokenResponse } from './token_response.js';
-import { FetchRequestor } from './xhr.js';
-/**
- * The default token request handler.
- */
-export class BaseTokenRequestHandler {
-    constructor(requestor = new FetchRequestor(), utils = new BasicQueryStringUtils()) {
-        this.requestor = requestor;
-        this.utils = utils;
-    }
-    isTokenResponse(response) {
-        return response.error === undefined;
-    }
-    performRevokeTokenRequest(configuration, request) {
-        const revokeTokenResponse = this.requestor.xhr({
-            url: configuration.revocationEndpoint,
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            data: this.utils.stringify(request.toStringMap()),
-        });
-        return revokeTokenResponse.then((response) => {
-            return true;
-        });
-    }
-    performTokenRequest(configuration, request) {
-        const tokenResponse = this.requestor.xhr({
-            url: configuration.tokenEndpoint,
-            method: 'POST',
-            dataType: 'json', // adding implicit dataType
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            data: this.utils.stringify(request.toStringMap()),
-        });
-        return tokenResponse.then((response) => {
-            if (this.isTokenResponse(response)) {
-                return new TokenResponse(response);
-            }
-            else {
-                return Promise.reject(new AppAuthError(response.error, new TokenError(response)));
-            }
-        });
-    }
-}

package/dist-cms/external/openid/src/token_response.d.ts

@@ -1,65 +0,0 @@
-/**
- * Represents the access token types.
- * For more information see:
- * https://tools.ietf.org/html/rfc6749#section-7.1
- */
-export type TokenType = 'bearer' | 'mac';
-/**
- * Represents the TokenResponse as a JSON Object.
- */
-export interface TokenResponseJson {
-    access_token: string;
-    token_type?: TokenType;
-    expires_in?: string;
-    refresh_token?: string;
-    scope?: string;
-    id_token?: string;
-    issued_at?: number;
-}
-/**
- * Represents the possible error codes from the token endpoint.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-5.2
- */
-export type ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'unauthorized_client' | 'unsupported_grant_type' | 'invalid_scope';
-/**
- * Represents the TokenError as a JSON Object.
- */
-export interface TokenErrorJson {
-    error: ErrorType;
-    error_description?: string;
-    error_uri?: string;
-}
-/**
- * Returns the instant of time in seconds.
- */
-export declare const nowInSeconds: () => number;
-/**
- * Represents the Token Response type.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-5.1
- */
-export declare class TokenResponse {
-    accessToken: string;
-    tokenType: TokenType;
-    expiresIn: number | undefined;
-    refreshToken: string | undefined;
-    scope: string | undefined;
-    idToken: string | undefined;
-    issuedAt: number;
-    constructor(response: TokenResponseJson);
-    toJson(): TokenResponseJson;
-    isValid(buffer?: number): boolean;
-}
-/**
- * Represents the Token Error type.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-5.2
- */
-export declare class TokenError {
-    error: ErrorType;
-    errorDescription: string | undefined;
-    errorUri: string | undefined;
-    constructor(tokenError: TokenErrorJson);
-    toJson(): TokenErrorJson;
-}

package/dist-cms/external/openid/src/token_response.js

@@ -1,77 +0,0 @@
-/* eslint-disable local-rules/umb-class-prefix */
-/*
- * Copyright 2017 Google Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software distributed under the
- * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
- * express or implied. See the License for the specific language governing permissions and
- * limitations under the License.
- */
-// constants
-const AUTH_EXPIRY_BUFFER = 0; // 0 seconds buffer
-/**
- * Returns the instant of time in seconds.
- */
-export const nowInSeconds = () => Math.round(new Date().getTime() / 1000);
-/**
- * Represents the Token Response type.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-5.1
- */
-export class TokenResponse {
-    constructor(response) {
-        this.accessToken = response.access_token;
-        this.tokenType = response.token_type || 'bearer';
-        if (response.expires_in) {
-            this.expiresIn = parseInt(response.expires_in, 10);
-        }
-        this.refreshToken = response.refresh_token;
-        this.scope = response.scope;
-        this.idToken = response.id_token;
-        this.issuedAt = response.issued_at || nowInSeconds();
-    }
-    toJson() {
-        return {
-            access_token: this.accessToken,
-            id_token: this.idToken,
-            refresh_token: this.refreshToken,
-            scope: this.scope,
-            token_type: this.tokenType,
-            issued_at: this.issuedAt,
-            expires_in: this.expiresIn?.toString(),
-        };
-    }
-    isValid(buffer = AUTH_EXPIRY_BUFFER) {
-        if (this.expiresIn) {
-            const now = nowInSeconds();
-            return now < this.issuedAt + this.expiresIn + buffer;
-        }
-        else {
-            return true;
-        }
-    }
-}
-/**
- * Represents the Token Error type.
- * For more information look at:
- * https://tools.ietf.org/html/rfc6749#section-5.2
- */
-export class TokenError {
-    constructor(tokenError) {
-        this.error = tokenError.error;
-        this.errorDescription = tokenError.error_description;
-        this.errorUri = tokenError.error_uri;
-    }
-    toJson() {
-        return {
-            error: this.error,
-            error_description: this.errorDescription,
-            error_uri: this.errorUri,
-        };
-    }
-}

package/dist-cms/external/openid/src/types.d.ts

@@ -1,22 +0,0 @@
-export interface StringMap {
-    [key: string]: string;
-}
-/**
- * Represents a window.location like object.
- */
-export interface LocationLike {
-    hash: string;
-    host: string;
-    origin: string;
-    hostname: string;
-    pathname: string;
-    port: string;
-    protocol: string;
-    search: string;
-    assign(url: string): void;
-}
-export interface XhrRequestInit extends RequestInit {
-    url: string;
-    dataType?: string;
-    data?: any;
-}

package/dist-cms/external/openid/src/types.js

@@ -1,14 +0,0 @@
-/*
- * Copyright 2017 Google Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software distributed under the
- * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
- * express or implied. See the License for the specific language governing permissions and
- * limitations under the License.
- */
-export {};

package/dist-cms/external/openid/src/xhr.d.ts

@@ -1,13 +0,0 @@
-import type { XhrRequestInit } from './types.js';
-/**
- * An class that abstracts away the ability to make an XMLHttpRequest.
- */
-export declare abstract class Requestor {
-    abstract xhr<T>(settings: unknown): Promise<T>;
-}
-/**
- * Uses fetch API to make Ajax requests
- */
-export declare class FetchRequestor extends Requestor {
-    xhr<T>(settings: XhrRequestInit): Promise<T>;
-}

package/dist-cms/external/openid/src/xhr.js

@@ -1,72 +0,0 @@
-/* eslint-disable local-rules/umb-class-prefix */
-/*
- * Copyright 2017 Google Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software distributed under the
- * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
- * express or implied. See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { AppAuthError } from './errors.js';
-/**
- * An class that abstracts away the ability to make an XMLHttpRequest.
- */
-export class Requestor {
-}
-/**
- * Uses fetch API to make Ajax requests
- */
-export class FetchRequestor extends Requestor {
-    xhr(settings) {
-        if (!settings.url) {
-            return Promise.reject(new AppAuthError('A URL must be provided.'));
-        }
-        const url = new URL(settings.url);
-        const requestInit = {};
-        requestInit.method = settings.method;
-        requestInit.mode = 'cors';
-        requestInit.credentials = settings.credentials ?? 'include';
-        if (settings.data) {
-            if (settings.method && settings.method.toUpperCase() === 'POST') {
-                requestInit.body = settings.data;
-            }
-            else {
-                const searchParams = new URLSearchParams(settings.data);
-                searchParams.forEach((value, key) => {
-                    url.searchParams.append(key, value);
-                });
-            }
-        }
-        // Set the request headers
-        requestInit.headers = {};
-        if (settings.headers) {
-            requestInit.headers = settings.headers;
-        }
-        const isJsonDataType = settings.dataType && settings.dataType.toLowerCase() === 'json';
-        // Set 'Accept' header value for json requests (Taken from
-        // https://github.com/jquery/jquery/blob/e0d941156900a6bff7c098c8ea7290528e468cf8/src/ajax.js#L644
-        // )
-        if (isJsonDataType) {
-            requestInit.headers.Accept = 'application/json, text/javascript, */*; q=0.01';
-        }
-        return fetch(url.toString(), requestInit).then((response) => {
-            if (response.status >= 200 && response.status < 300) {
-                const contentType = response.headers.get('content-type');
-                if (isJsonDataType || (contentType && contentType.indexOf('application/json') !== -1)) {
-                    return response.json();
-                }
-                else {
-                    return response.text();
-                }
-            }
-            else {
-                return Promise.reject(new AppAuthError(response.status.toString(), response.statusText));
-            }
-        });
-    }
-}

package/dist-cms/packages/core/auth/auth-flow.d.ts

@@ -1,107 +0,0 @@
-import { TokenResponse } from '../../../external/openid/index.js';
-import { Subject } from '../../../external/rxjs/index.js';
-/**
- * This class is used to handle the auth flow through any backend supporting OpenID Connect.
- * It needs to know the server url, the client id, the redirect uri and the scope.
- *
- * For a default Umbraco installation, the server url is the base url of the Umbraco server.
- * and the client id is "umbraco-back-office"
- * and the scope is "offline_access"
- *
- * It will:
- * - Fetch the service configuration from the server
- * - Check if there is a token response in local storage
- * - If there is a token response, check if it is valid
- * - If it is not valid, check if there is a new authorization to be made
- * - If there is a new authorization to be made, complete it
- * - If there is no token response, check if there is a new authorization to be made
- * - If there is a new authorization to be made, complete it
- * - If there is no new authorization to be made, do nothing (= logged in)
- *
- * It will also:
- * - Save the token response in local storage
- * - Save the authorization code in local storage
- *
- * It will also provide methods to:
- * - Make a refresh token request
- * - Perform an action with fresh tokens
- * - Clear the token state (logout)
- *
- * It should be used as follows:
- * 1. Create an instance of this class
- * 2. Call the `setInitialState` method on startup
- *   a. This will fetch the service configuration and check if there is a token response in the storage backend
- *   b. If there is a token response, it will check if it is valid and if it is not, it will check if there is a new authorization to be made
- *     which happens when the user is redirected back to the app after logging in
- * 3. Call the `makeAuthorizationRequest` method on all pages that need to be authorized
- *   a. This will redirect the user to the authorization endpoint of the server
- * 4. After login, get the latest token before each request to the server by calling the `performWithFreshTokens` method
- */
-export declare class UmbAuthFlow {
-    #private;
-    readonly token$: import("rxjs").Observable<TokenResponse | undefined>;
-    /**
-     * This signal will emit when the authorization flow is complete.
-     * @remark It will also emit if there is an error during the authorization flow.
-     */
-    readonly authorizationSignal: Subject<void>;
-    constructor(openIdConnectUrl: string, redirectUri: string, postLogoutRedirectUri: string, clientId?: string, scope?: string);
-    /**
-     * This method will initialize all the state needed for the auth flow.
-     *
-     * It will:
-     * - Check if there is a token response in local storage
-     * - If there is a token response, check if it is valid
-     * - If it is not valid, check if there is a new authorization to be made
-     * - If there is a new authorization to be made, complete it
-     * - If there is no token response, check if there is a new authorization to be made
-     * - If there is a new authorization to be made, complete it
-     */
-    setInitialState(): Promise<void>;
-    /**
-     * This method will check if there is a new authorization to be made and complete it if there is.
-     * This method will be called on initialization to check if there is a new authorization to be made.
-     * It is useful if there is a ?code query string parameter in the URL from the server or if the auth flow
-     * saved the state in local storage before redirecting the user to the login page.
-     */
-    completeAuthorizationIfPossible(): Promise<import("../../../external/openid/index.js").AuthorizationRequestResponse | null>;
-    /**
-     * Make an authorization request to the server using the specified identity provider.
-     * This method will redirect the user to the authorization endpoint of the server.
-     * @param identityProvider The identity provider to use for the authorization request.
-     * @param usernameHint (Optional) The username to use for the authorization request. It will be provided to the OpenID server as a hint.
-     */
-    makeAuthorizationRequest(identityProvider: string, usernameHint?: string): Promise<string>;
-    /**
-     * This method will check if the user is logged in by validating if there is a token stored.
-     * If no token is stored, it will return false.
-     * @returns true if the user is logged in, false otherwise.
-     */
-    isAuthorized(): boolean;
-    /**
-     * Forget all cached token state
-     */
-    clearTokenStorage(): Promise<void>;
-    /**
-     * This method will sign the user out of the application.
-     */
-    signOut(): Promise<void>;
-    /**
-     * This method will check if the token needs to be refreshed and if so, it will refresh it and return the new access token.
-     * If the token does not need to be refreshed, it will return the current access token.
-     * @returns {Promise<string>} The access token for the user.
-     */
-    performWithFreshTokens(): Promise<string>;
-    /**
-     * This method will link the current user to the specified provider by redirecting the user to the link endpoint.
-     * @param provider The provider to link to.
-     */
-    linkLogin(provider: string): Promise<void>;
-    /**
-     * This method will unlink the current user from the specified provider.
-     * @param loginProvider
-     * @param providerKey
-     */
-    unlinkLogin(loginProvider: string, providerKey: string): Promise<boolean>;
-    makeRefreshTokenRequest(): Promise<boolean>;
-}