@voltro/plugin-auth-social 0.86.0 → 0.88.0

package/dist/platform.js

@@ -0,0 +1,114 @@
+import { PlatformTicketError as e, SocialAuthError as t, SocialConfigError as n, SocialExchangeError as r } from "./errors.js";
+import { isSocialProviderId as i } from "./providers.js";
+import { verifySteamWebApiTicket as a } from "./steam.js";
+import { JwtVerifyError as o, verifyJwt as s } from "@voltro/protocol/jwt";
+// src/platform.ts
+var c = /^[a-z][a-z0-9-]{1,31}$/, l = /^[\x21-\x7e]{1,255}$/, u = (e) => {
+	if (!c.test(e.id) || i(e.id)) throw new n("definePlatformLogin: id must be 2–32 lowercase letters, digits or hyphens and not a social provider id");
+	let t = e.verify;
+	return {
+		id: e.id,
+		declaredEnv: e.declaredEnv ?? [],
+		permissions: e.permissions ?? [],
+		check: e.check ?? (() => void 0),
+		verify: async (n) => {
+			let i = await t(n);
+			if (typeof i?.accountId != "string" || !l.test(i.accountId)) throw new r("malformed_token_response", `${e.id}: the verifier returned no usable account id`, 503);
+			return { accountId: i.accountId };
+		}
+	};
+}, d = (e = {}) => {
+	let t = e.identity ?? "voltro";
+	if (!t || t.length > 255) throw new n("steamPlatformLogin: identity must be 1–255 characters");
+	let r = () => {
+		let t = e.appId ?? Number(process.env.VOLTRO_STEAM_APP_ID ?? ""), r = e.publisherKey ?? process.env.VOLTRO_STEAM_PUBLISHER_KEY ?? "";
+		if (!Number.isSafeInteger(t) || t < 1 || t > 4294967295) throw new n("steamPlatformLogin: no app id — pass `appId` or set VOLTRO_STEAM_APP_ID");
+		if (!r) throw new n("steamPlatformLogin: no publisher key — pass `publisherKey` or set VOLTRO_STEAM_PUBLISHER_KEY");
+		return {
+			appId: t,
+			publisherKey: r
+		};
+	};
+	return {
+		id: "steam",
+		declaredEnv: [{
+			name: "VOLTRO_STEAM_APP_ID",
+			required: e.appId === void 0,
+			secret: !1,
+			description: "Steam App ID the game runs as."
+		}, {
+			name: "VOLTRO_STEAM_PUBLISHER_KEY",
+			required: e.publisherKey === void 0,
+			secret: !0,
+			description: "Steamworks Web API publisher key; verifies game tickets on the server."
+		}],
+		permissions: ["network:outbound:partner.steam-api.com"],
+		check: () => {
+			r();
+		},
+		verify: async (n) => {
+			let { appId: i, publisherKey: o } = r();
+			return { accountId: (await a({
+				ticket: n,
+				appId: i,
+				identity: t,
+				publisherKey: o,
+				...e.timeoutMs === void 0 ? {} : { timeoutMs: e.timeoutMs },
+				...e.allowPublisherBanned === void 0 ? {} : { allowPublisherBanned: e.allowPublisherBanned },
+				...e.verificationUrl === void 0 ? {} : { verificationUrl: e.verificationUrl },
+				...e.fetchImpl === void 0 ? {} : { fetchImpl: e.fetchImpl }
+			})).providerAccountId };
+		}
+	};
+}, f = "https://api.epicgames.dev/auth/v1/oauth/jwks", p = "https://api.epicgames.dev", m = /^[0-9a-fA-F]{32}$/, h = (t = {}) => {
+	let i = () => {
+		let e = t.clientId ?? process.env.VOLTRO_EOS_CLIENT_ID ?? "", r = t.deploymentId ?? process.env.VOLTRO_EOS_DEPLOYMENT_ID ?? "";
+		if (!e) throw new n("eosPlatformLogin: no client id — pass `clientId` or set VOLTRO_EOS_CLIENT_ID");
+		if (!r) throw new n("eosPlatformLogin: no deployment id — pass `deploymentId` or set VOLTRO_EOS_DEPLOYMENT_ID");
+		return {
+			clientId: e,
+			deploymentId: r
+		};
+	};
+	return {
+		id: "eos",
+		declaredEnv: [{
+			name: "VOLTRO_EOS_CLIENT_ID",
+			required: t.clientId === void 0,
+			secret: !1,
+			description: "EOS client id the game signs in with."
+		}, {
+			name: "VOLTRO_EOS_DEPLOYMENT_ID",
+			required: t.deploymentId === void 0,
+			secret: !1,
+			description: "EOS deployment id the game runs in."
+		}],
+		permissions: ["network:outbound:api.epicgames.dev"],
+		check: () => {
+			i();
+		},
+		verify: async (n) => {
+			let { clientId: a, deploymentId: c } = i();
+			if (n.length > 8192 || !/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(n)) throw new e("eos: malformed ID token");
+			let l;
+			try {
+				l = await s(n, t.jwksUrl ?? f, {
+					audience: a,
+					algorithms: ["RS256"]
+				});
+			} catch (t) {
+				throw t instanceof o && t.code === "jwks_unreachable" ? new r("exchange_failed", "eos: signing keys unavailable", 503) : new e("eos: ID token failed verification");
+			}
+			let u = l.iss, d = l.iat;
+			if (typeof u != "string" || !(u === p || u.startsWith(p + "/")) || typeof d != "number" || d * 1e3 > Date.now() + 6e4 || l.pfdid !== c || typeof l.sub != "string" || !m.test(l.sub)) throw new e("eos: ID token is for another issuer, deployment or player");
+			return { accountId: l.sub };
+		}
+	};
+}, g = async (e, n) => {
+	try {
+		return await e.verify(n);
+	} catch (n) {
+		throw n instanceof t ? n : new r("exchange_failed", `${e.id}: ticket verification failed`, 503);
+	}
+};
+export { u as definePlatformLogin, h as eosPlatformLogin, d as steamPlatformLogin, g as verifyPlatformTicket };