@webex/webex-core 3.0.0-beta.13 → 3.0.0-beta.131

package/dist/lib/credentials/credentials.js

@@ -1,65 +1,43 @@
 "use strict";
 
+var _Object$keys2 = require("@babel/runtime-corejs2/core-js/object/keys");
+var _Object$getOwnPropertySymbols = require("@babel/runtime-corejs2/core-js/object/get-own-property-symbols");
+var _Object$getOwnPropertyDescriptor2 = require("@babel/runtime-corejs2/core-js/object/get-own-property-descriptor");
+var _Object$getOwnPropertyDescriptors = require("@babel/runtime-corejs2/core-js/object/get-own-property-descriptors");
+var _Object$defineProperties = require("@babel/runtime-corejs2/core-js/object/define-properties");
 var _Object$defineProperty = require("@babel/runtime-corejs2/core-js/object/define-property");
-
 var _interopRequireDefault = require("@babel/runtime-corejs2/helpers/interopRequireDefault");
-
 _Object$defineProperty(exports, "__esModule", {
   value: true
 });
-
 exports.default = void 0;
-
 var _deleteProperty = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/reflect/delete-property"));
-
 var _stringify = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/json/stringify"));
-
-var _assign = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/object/assign"));
-
 var _keys = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/object/keys"));
-
 var _apply = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/reflect/apply"));
-
 var _promise = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/promise"));
-
 var _now = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/date/now"));
-
 var _getOwnPropertyDescriptor = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/object/get-own-property-descriptor"));
-
+var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/defineProperty"));
 var _applyDecoratedDescriptor2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/applyDecoratedDescriptor"));
-
 var _isEmpty2 = _interopRequireDefault(require("lodash/isEmpty"));
-
 var _isObject2 = _interopRequireDefault(require("lodash/isObject"));
-
 var _cloneDeep2 = _interopRequireDefault(require("lodash/cloneDeep"));
-
 var _clone2 = _interopRequireDefault(require("lodash/clone"));
-
 var _querystring = _interopRequireDefault(require("querystring"));
-
 var _url = _interopRequireDefault(require("url"));
-
 var _jsonwebtoken = _interopRequireDefault(require("jsonwebtoken"));
-
 var _common = require("@webex/common");
-
 var _commonTimers = require("@webex/common-timers");
-
 var _webexPlugin = _interopRequireDefault(require("../webex-plugin"));
-
 var _decorators = require("../storage/decorators");
-
 var _grantErrors = _interopRequireDefault(require("./grant-errors"));
-
 var _scope = require("./scope");
-
 var _token = _interopRequireDefault(require("./token"));
-
 var _tokenCollection = _interopRequireDefault(require("./token-collection"));
-
 var _dec, _dec2, _dec3, _dec4, _dec5, _dec6, _obj;
-
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys2(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return _Object$getOwnPropertyDescriptor2(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { (0, _defineProperty2.default)(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor2(source, key)); }); } return target; }
 /**
  * @class
  */
@@ -88,9 +66,24 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
         if (this.config.jwtRefreshCallback) {
           return true;
         }
-
         return Boolean(this.supertoken && this.supertoken.canRefresh);
       }
+    },
+    isUnverifiedGuest: {
+      deps: ['supertoken'],
+      /**
+       * Returns true if the user is an unverified guest
+       * @returns {boolean}
+       */
+      fn: function fn() {
+        var isGuest = false;
+        try {
+          isGuest = JSON.parse(_common.base64.decode(this.supertoken.access_token.split('.')[1])).user_type === 'guest';
+        } catch (_unused) {
+          /* the non-guest token is formatted differently so catch is expected */
+        }
+        return isGuest;
+      }
     }
   },
   props: {
@@ -102,7 +95,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       default: false,
       type: 'boolean'
     },
-
     /**
      * Becomes `true` once the {@link loaded} event fires.
      * @see {@link WebexPlugin#ready}
@@ -119,7 +111,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       type: 'any'
     }
   },
-
   /**
    * Generates an OAuth Login URL. Prefers the api.ciscospark.com proxy if the
    * instance is initialize with an authorizatUrl, but fallsback to idbroker
@@ -133,23 +124,18 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
     var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {
       clientType: 'public'
     };
-
     /* eslint-disable camelcase */
     if (options.state && !(0, _isObject2.default)(options.state)) {
       throw new Error('if specified, `options.state` must be an object');
     }
-
     options.client_id = this.config.client_id;
     options.redirect_uri = this.config.redirect_uri;
     options.scope = this.config.scope;
     options = (0, _cloneDeep2.default)(options);
-
     if (!options.response_type) {
       options.response_type = options.clientType === 'public' ? 'token' : 'code';
     }
-
     (0, _deleteProperty.default)(options, 'clientType');
-
     if (options.state) {
       if (!(0, _isEmpty2.default)(options.state)) {
         options.state = _common.base64.toBase64Url((0, _stringify.default)(options.state));
@@ -157,11 +143,9 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
         delete options.state;
       }
     }
-
     return "".concat(this.config.authorizeUrl, "?").concat(_querystring.default.stringify(options));
     /* eslint-enable camelcase */
   },
-
   /**
    * Get the determined OrgId.
    *
@@ -170,7 +154,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   getOrgId: function getOrgId() {
     this.logger.info('credentials: attempting to retrieve the OrgId from token');
-
     try {
       // Attempt to extract a client-authenticated token's OrgId.
       this.logger.info('credentials: trying to extract OrgId from JWT');
@@ -179,10 +162,8 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       // Attempt to extract a user token's OrgId.
       this.logger.info('credentials: could not extract OrgId from JWT');
       this.logger.info('credentials: attempting to extract OrgId from user token');
-
       try {
         var _this$supertoken;
-
         return this.extractOrgIdFromUserToken((_this$supertoken = this.supertoken) === null || _this$supertoken === void 0 ? void 0 : _this$supertoken.access_token);
       } catch (f) {
         this.logger.info('credentials: could not extract OrgId from user token');
@@ -190,7 +171,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       }
     }
   },
-
   /**
    * Extract the OrgId [realm] from a provided JWT.
    *
@@ -201,23 +181,20 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   extractOrgIdFromJWT: function extractOrgIdFromJWT() {
     var token = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
-
     // Decoded the provided token.
-    var decodedJWT = _jsonwebtoken.default.decode(token); // Validate that the provided token is a JWT.
-
+    var decodedJWT = _jsonwebtoken.default.decode(token);
 
+    // Validate that the provided token is a JWT.
     if (!decodedJWT) {
       throw new Error('unable to extract the OrgId from the provided JWT');
     }
-
     if (!decodedJWT.realm) {
       throw new Error('the provided JWT does not contain an OrgId');
-    } // Return the OrgId [realm].
-
+    }
 
+    // Return the OrgId [realm].
     return decodedJWT.realm;
   },
-
   /**
    * Extract the OrgId [realm] from a provided user token.
    *
@@ -229,16 +206,16 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
   extractOrgIdFromUserToken: function extractOrgIdFromUserToken() {
     var token = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
     // Split the provided token into subsections.
-    var fields = token.split('_'); // Validate that the provided token has the proper amount of sections.
+    var fields = token.split('_');
 
+    // Validate that the provided token has the proper amount of sections.
     if (fields.length !== 3) {
       throw new Error('the provided token is not a valid format');
-    } // Return the token section that contains the OrgId.
-
+    }
 
+    // Return the token section that contains the OrgId.
     return fields[2];
   },
-
   /**
    * Generates a Logout URL
    * @instance
@@ -248,12 +225,11 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   buildLogoutUrl: function buildLogoutUrl() {
     var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-    return "".concat(this.config.logoutUrl, "?").concat(_querystring.default.stringify((0, _assign.default)({
+    return "".concat(this.config.logoutUrl, "?").concat(_querystring.default.stringify(_objectSpread({
       cisService: this.config.service,
       goto: this.config.redirect_uri
     }, options)));
   },
-
   /**
    * Generates a number between 60% - 90% of expired value
    * @instance
@@ -267,7 +243,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
   },
   constructor: function constructor() {
     var _this = this;
-
     // HACK to deal with the fact that AmpersandState#dataTypes#set is a pure
     // function.
     this._dataTypes = (0, _cloneDeep2.default)(this._dataTypes);
@@ -275,15 +250,13 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       if (_this._dataTypes[key].set) {
         _this._dataTypes[key].set = _this._dataTypes[key].set.bind(_this);
       }
-    }); // END HACK
-
+    });
+    // END HACK
     for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
       args[_key] = arguments[_key];
     }
-
     (0, _apply.default)(_webexPlugin.default, this, args);
   },
-
   /**
    * Downscopes a token
    * @instance
@@ -294,20 +267,16 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   downscope: function downscope(scope) {
     var _this2 = this;
-
     return this.supertoken.downscope(scope).catch(function (reason) {
       _this2.logger.trace("credentials: failed to downscope supertoken to ".concat(scope), reason);
-
       _this2.logger.trace("credentials: falling back to supertoken for ".concat(scope));
-
-      return _promise.default.resolve(new _token.default((0, _assign.default)({
+      return _promise.default.resolve(new _token.default(_objectSpread({
         scope: scope
       }, _this2.supertoken.serialize())), {
         parent: _this2
       });
     });
   },
-
   /**
    * Requests a client credentials grant and returns the token. Given the
    * limited use for such tokens as this time, this method does not cache its
@@ -319,7 +288,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   getClientToken: function getClientToken() {
     var _this3 = this;
-
     var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
     this.logger.info('credentials: requesting client credentials grant');
     return this.webex.request({
@@ -338,7 +306,6 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       },
       shouldRefreshAccessToken: false
       /* eslint-enable camelcase */
-
     }).then(function (res) {
       return new _token.default(res.body, {
         parent: _this3
@@ -347,13 +314,10 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       if (res.statusCode !== 400) {
         return _promise.default.reject(res);
       }
-
       var ErrorConstructor = _grantErrors.default.select(res.body.error);
-
       return _promise.default.reject(new ErrorConstructor(res._res || res));
     });
   },
-
   /**
    * Resolves with a token with the specified scopes. If no scope is specified,
    * defaults to omit(webex.credentials.scope, 'spark:kms'). If no such token is
@@ -365,46 +329,36 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   getUserToken: function getUserToken(scope) {
     var _this4 = this;
-
     return _promise.default.resolve(!this.isRefreshing || new _promise.default(function (resolve) {
       _this4.logger.info('credentials: token refresh inflight; delaying getUserToken until refresh completes');
-
       _this4.once('change:isRefreshing', function () {
         _this4.logger.info('credentials: token refresh complete; reinvoking getUserToken');
-
         resolve();
       });
     })).then(function () {
       if (!_this4.canAuthorize) {
         _this4.logger.info('credentials: cannot produce an access token from current state');
-
         return _promise.default.reject(new Error('Current state cannot produce an access token'));
       }
-
       if (!scope) {
         scope = (0, _scope.filterScope)('spark:kms', _this4.config.scope);
       }
-
       scope = (0, _scope.sortScope)(scope);
-
       if (scope === (0, _scope.sortScope)(_this4.config.scope)) {
         return _promise.default.resolve(_this4.supertoken);
       }
+      var token = _this4.userTokens.get(scope);
 
-      var token = _this4.userTokens.get(scope); // we should also check for the token.access_token since token object does
+      // we should also check for the token.access_token since token object does
       // not get cleared on unsetting while logging out.
-
-
       if (!token || !token.access_token) {
         return _this4.downscope(scope).then((0, _common.tap)(function (t) {
           return _this4.userTokens.add(t);
         }));
       }
-
       return _promise.default.resolve(token);
     });
   },
-
   /**
    * Initializer
    * @instance
@@ -416,37 +370,32 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   initialize: function initialize(attrs, options) {
     var _this5 = this;
-
     if (attrs) {
       if (typeof attrs === 'string') {
         this.supertoken = attrs;
       }
-
       if (attrs.access_token) {
         this.supertoken = attrs;
       }
-
       if (attrs.authorization) {
         if (attrs.authorization.supertoken) {
           this.supertoken = attrs.authorization.supertoken;
         } else {
           this.supertoken = attrs.authorization;
         }
-      } // schedule refresh
-
+      }
 
+      // schedule refresh
       if (this.supertoken && this.supertoken.expires) {
         this.scheduleRefresh(this.supertoken.expires);
       }
     }
-
     (0, _apply.default)(_webexPlugin.default.prototype.initialize, this, [attrs, options]);
     this.listenToOnce(this.parent, 'change:config', function () {
       if (_this5.config.authorizationString) {
         var parsed = _url.default.parse(_this5.config.authorizationString, true);
-        /* eslint-disable camelcase */
-
 
+        /* eslint-disable camelcase */
         _this5.config.client_id = parsed.query.client_id;
         _this5.config.redirect_uri = parsed.query.redirect_uri;
         _this5.config.scope = parsed.query.scope;
@@ -454,11 +403,11 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
         /* eslint-enable camelcase */
       }
     });
+
     this.webex.once('loaded', function () {
       _this5.ready = true;
     });
   },
-
   /**
    * Clears all tokens from store them from the stores.
    *
@@ -469,19 +418,18 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    * @returns {Promise}
    */
   invalidate: function invalidate() {
-    this.logger.info('credentials: invalidating tokens'); // clear refresh timer
+    this.logger.info('credentials: invalidating tokens');
 
+    // clear refresh timer
     if (this.refreshTimer) {
       clearTimeout(this.refreshTimer);
       this.unset('refreshTimer');
     }
-
     try {
       this.unset('supertoken');
     } catch (err) {
       this.logger.warn('credentials: failed to clear supertoken', err);
     }
-
     while (this.userTokens.models.length) {
       try {
         this.userTokens.remove(this.userTokens.models[0]);
@@ -489,13 +437,12 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
         this.logger.warn('credentials: failed to remove user token', err);
       }
     }
+    this.logger.info('credentials: finished removing tokens');
 
-    this.logger.info('credentials: finished removing tokens'); // Return a promise to give the storage layer a tick or two to clear
+    // Return a promise to give the storage layer a tick or two to clear
     // localStorage
-
     return _promise.default.resolve();
   },
-
   /**
    * Removes the supertoken and child tokens, then refreshes the supertoken;
    * subsequent calls to {@link Credentials#getUserToken()} will re-downscope
@@ -507,47 +454,44 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   refresh: function refresh() {
     var _this6 = this;
-
     this.logger.info('credentials: refresh requested');
     var supertoken = this.supertoken;
-    var tokens = (0, _clone2.default)(this.userTokens.models); // This is kind of a leaky abstraction, since it relies on the authorization
+    var tokens = (0, _clone2.default)(this.userTokens.models);
+
+    // This is kind of a leaky abstraction, since it relies on the authorization
     // plugin, but the only alternatives I see are
     // 1. put all JWT support in core
     // 2. have separate jwt and non-jwt auth plugins
     // while I like #2 from a code simplicity standpoint, the third-party DX
     // isn't great
-
     if (this.config.jwtRefreshCallback) {
-      return this.config.jwtRefreshCallback(this.webex).then(function (jwt) {
+      return this.config.jwtRefreshCallback(this.webex)
+      // eslint-disable-next-line no-shadow
+      .then(function (jwt) {
         return _this6.webex.authorization.requestAccessTokenFromJwt({
           jwt: jwt
         });
       });
     }
-
     if (this.webex.internal.services) {
       this.webex.internal.services.updateCredentialsConfig();
     }
-
     return supertoken.refresh().then(function (st) {
       // clear refresh timer
       if (_this6.refreshTimer) {
         clearTimeout(_this6.refreshTimer);
-
         _this6.unset('refreshTimer');
       }
-
       _this6.supertoken = st;
       return _promise.default.all(tokens.map(function (token) {
-        return _this6.downscope(token.scope) // eslint-disable-next-line max-nested-callbacks
+        return _this6.downscope(token.scope)
+        // eslint-disable-next-line max-nested-callbacks
         .then(function (t) {
           _this6.logger.info("credentials: revoking token for ".concat(token.scope));
-
           return token.revoke().catch(function (err) {
             _this6.logger.warn('credentials: failed to revoke user token', err);
           }).then(function () {
             _this6.userTokens.remove(token.scope);
-
             _this6.userTokens.add(t);
           });
         });
@@ -556,11 +500,9 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       _this6.scheduleRefresh(_this6.supertoken.expires);
     }).catch(function (error) {
       var InvalidRequestError = _grantErrors.default.InvalidRequestError;
-
       if (error instanceof InvalidRequestError) {
         // Error: The refresh token provided is expired, revoked, malformed, or invalid. Hence emit an event to the client, an opportunity to logout.
         _this6.unset('supertoken');
-
         while (_this6.userTokens.models.length) {
           try {
             _this6.userTokens.remove(_this6.userTokens.models[0]);
@@ -568,14 +510,11 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
             _this6.logger.warn('credentials: failed to remove user token', err);
           }
         }
-
         _this6.webex.trigger('client:InvalidRequestError');
       }
-
       return _promise.default.reject(error);
     });
   },
-
   /**
    * Schedules a token refresh or refreshes the token if token has expired
    * @instance
@@ -586,9 +525,7 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
    */
   scheduleRefresh: function scheduleRefresh(expires) {
     var _this7 = this;
-
     var expiresIn = expires - (0, _now.default)();
-
     if (expiresIn > 0) {
       var timeoutLength = this.calcRefreshTimeout(expiresIn);
       this.refreshTimer = (0, _commonTimers.safeSetTimeout)(function () {
@@ -598,9 +535,8 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       this.refresh();
     }
   },
-  version: "3.0.0-beta.13"
+  version: "3.0.0-beta.131"
 }, ((0, _applyDecoratedDescriptor2.default)(_obj, "getUserToken", [_dec, _dec2], (0, _getOwnPropertyDescriptor.default)(_obj, "getUserToken"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "initialize", [_dec3], (0, _getOwnPropertyDescriptor.default)(_obj, "initialize"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "invalidate", [_common.oneFlight, _dec4], (0, _getOwnPropertyDescriptor.default)(_obj, "invalidate"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "refresh", [_common.oneFlight, _dec5, _dec6], (0, _getOwnPropertyDescriptor.default)(_obj, "refresh"), _obj)), _obj)));
-
 var _default = Credentials;
 exports.default = _default;
 //# sourceMappingURL=credentials.js.map