@volter/twin-xidentity 0.1.0 → 0.1.2

package/src/xidentity-consent-ui.ts

@@ -21,6 +21,7 @@ import { renderToStaticMarkup } from 'react-dom/server';
 import {
   ConsentPage,
   ErrorPage,
+  PinPage,
   type ConsentAccount,
   type ConsentScopeRow,
   type ConsentView,
@@ -88,6 +89,67 @@ export function xIdentityConsentState(opts: {
   };
 }
 
+/**
+ * What an OAuth 1.0a token lets an app do, as X's authorize screen lists it. OAuth 1.0a has no
+ * scopes: the App's permission level (Read / Read and write) decides the grant (docs.x.com
+ * developer-apps, "App permissions (OAuth 1.0a)"), and the screen lists what that level allows.
+ * The lines follow X's OAuth 1.0a authorize page as widely screenshotted; the live wording was not
+ * captured (`xidentity.oauth1.consent_wording`, todo). Keyed rows, so a row is never invented
+ * outside the two documented levels.
+ */
+export const OAUTH1_CONSENT_ROWS: Record<'read' | 'write', ConsentScopeRow[]> = {
+  read: [
+    { scope: 'oauth1:timeline', label: 'Posts from your timeline (including protected Posts) as well as your Lists and collections.', group: 'view', known: true },
+    { scope: 'oauth1:profile', label: 'Your X profile information and account settings.', group: 'view', known: true },
+    { scope: 'oauth1:graph', label: 'Accounts you follow, mute, and block.', group: 'view', known: true },
+  ],
+  write: [
+    { scope: 'oauth1:follow', label: 'Follow and unfollow accounts for you.', group: 'do', known: true },
+    { scope: 'oauth1:settings', label: 'Update your profile and account settings for you.', group: 'do', known: true },
+    { scope: 'oauth1:post', label: 'Post and delete Posts for you, and engage with Posts posted by others (Like, un-Like, or reply to a Post, Repost, etc.) for you.', group: 'do', known: true },
+    { scope: 'oauth1:lists', label: 'Create, manage, and delete Lists and collections for you.', group: 'do', known: true },
+    { scope: 'oauth1:moderate', label: 'Mute, block, and report accounts for you.', group: 'do', known: true },
+  ],
+};
+
+/**
+ * THE OAUTH 1.0a STATE BUILDER — the authorize screen for a pending request token, folded out of
+ * the projection: the App's name (`appName`, resolved by the caller from the registered App or the
+ * World's own), the account the request was bound to when the screen was first served, the rows
+ * the granted permission level allows, and the callback's host. `null` for an unknown or settled
+ * request token or a missing account; it invents nothing.
+ */
+export function xIdentityOAuth1ConsentState(opts: {
+  root?: string;
+  requestToken: string;
+  appName: string;
+  origin: string;
+}): ConsentView | null {
+  const row = readOne(opts.root, 'oauth1_request_token', opts.requestToken);
+  if (!row || row.state !== 'pending') return null;
+  const account = readOne(opts.root, 'account', String(row.accountId ?? ''));
+  if (!account) return null;
+  const level = row.accessLevel === 'read' ? 'read' : 'write';
+  const scopes = level === 'read' ? OAUTH1_CONSENT_ROWS.read : [...OAUTH1_CONSENT_ROWS.read, ...OAUTH1_CONSENT_ROWS.write];
+  let redirectHost = '';
+  if (row.callback !== 'oob') {
+    try {
+      redirectHost = new URL(String(row.callback)).host;
+    } catch {
+      redirectHost = String(row.callback);
+    }
+  }
+  return {
+    requestId: opts.requestToken,
+    origin: opts.origin,
+    app: { clientId: String(row.consumerKey), name: opts.appName },
+    account: toConsentAccount(account),
+    scopes,
+    redirectHost,
+    decisionPath: '/oauth/authorize',
+  };
+}
+
 /** `base` is where the twin is reached (`twinPublicBase`: origin plus any served-World mount path),
  *  so the page's assets resolve inside the World's mount; empty for an in-process render. */
 function page(title: string, bodyMarkup: string, base: string): string {
@@ -107,6 +169,11 @@ export function consentPageHtml(view: ConsentView, base = ''): string {
   return page(`Authorize ${view.app.name} to access your account? / X`, markup, base);
 }
 
+/** Render the out-of-band PIN page an `oob` request token ends on. */
+export function pinPageHtml(appName: string, pin: string, base = ''): string {
+  return page(`${appName} / X`, renderToStaticMarkup(createElement(PinPage, { appName, pin })), base);
+}
+
 /** Render the authorize-endpoint error page (an un-redirectable failure). */
 export function errorPageHtml(props: ErrorPageProps, base = ''): string {
   return page(`Error ${props.status}: ${props.code} / X`, renderToStaticMarkup(createElement(ErrorPage, props)), base);