@wix/sdk 1.15.13 → 1.15.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import { RefreshToken, Tokens } from './oauth2/types.js';
|
|
2
|
+
export declare function SiteSessionAuth(config: {
|
|
3
|
+
clientId: string;
|
|
4
|
+
publicKey?: string;
|
|
5
|
+
tokens?: Tokens;
|
|
6
|
+
}): {
|
|
7
|
+
generateVisitorTokens: (tokens?: Partial<Tokens>) => Promise<Tokens>;
|
|
8
|
+
renewToken: (refreshToken: RefreshToken) => Promise<Tokens>;
|
|
9
|
+
getAuthHeaders: () => Promise<{
|
|
10
|
+
headers: {
|
|
11
|
+
Authorization: string;
|
|
12
|
+
};
|
|
13
|
+
}>;
|
|
14
|
+
setTokens: (tokens: Tokens) => void;
|
|
15
|
+
getTokens: () => Tokens;
|
|
16
|
+
};
|
|
17
|
+
export interface TokenResponse {
|
|
18
|
+
access_token: string;
|
|
19
|
+
expires_in: number;
|
|
20
|
+
refresh_token: string | null;
|
|
21
|
+
token_type: string;
|
|
22
|
+
scope?: string | null;
|
|
23
|
+
}
|
|
@@ -0,0 +1,95 @@
|
|
|
1
|
+
import { biHeaderGenerator } from '../bi/biHeaderGenerator.js';
|
|
2
|
+
import { DEFAULT_API_URL } from '../common.js';
|
|
3
|
+
import { createAccessToken, isTokenExpired } from '../tokenHelpers.js';
|
|
4
|
+
import { TokenRole } from './oauth2/types.js';
|
|
5
|
+
export function SiteSessionAuth(config) {
|
|
6
|
+
const _tokens = config.tokens || {
|
|
7
|
+
accessToken: { value: '', expiresAt: 0 },
|
|
8
|
+
refreshToken: { value: '', role: TokenRole.NONE },
|
|
9
|
+
};
|
|
10
|
+
const setTokens = (tokens) => {
|
|
11
|
+
_tokens.accessToken = tokens.accessToken;
|
|
12
|
+
_tokens.refreshToken = tokens.refreshToken;
|
|
13
|
+
};
|
|
14
|
+
const getAuthHeaders = async () => {
|
|
15
|
+
if (!_tokens.accessToken?.value || isTokenExpired(_tokens.accessToken)) {
|
|
16
|
+
const tokens = await generateVisitorTokens({
|
|
17
|
+
refreshToken: _tokens.refreshToken,
|
|
18
|
+
});
|
|
19
|
+
setTokens(tokens);
|
|
20
|
+
}
|
|
21
|
+
return Promise.resolve({
|
|
22
|
+
headers: { Authorization: _tokens.accessToken.value },
|
|
23
|
+
});
|
|
24
|
+
};
|
|
25
|
+
const generateVisitorTokens = async (tokens) => {
|
|
26
|
+
if (tokens?.accessToken?.value &&
|
|
27
|
+
tokens?.refreshToken?.value &&
|
|
28
|
+
!isTokenExpired(tokens.accessToken)) {
|
|
29
|
+
return tokens;
|
|
30
|
+
}
|
|
31
|
+
if (tokens?.refreshToken?.value) {
|
|
32
|
+
try {
|
|
33
|
+
const newTokens = await renewToken(tokens.refreshToken);
|
|
34
|
+
return newTokens;
|
|
35
|
+
}
|
|
36
|
+
catch (e) {
|
|
37
|
+
// just continue and create a visitor one
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
const tokensResponse = await fetchTokens({
|
|
41
|
+
clientId: config.clientId,
|
|
42
|
+
grantType: 'anonymous',
|
|
43
|
+
});
|
|
44
|
+
return {
|
|
45
|
+
accessToken: createAccessToken(tokensResponse.access_token, tokensResponse.expires_in),
|
|
46
|
+
refreshToken: {
|
|
47
|
+
value: tokensResponse.refresh_token,
|
|
48
|
+
role: TokenRole.VISITOR,
|
|
49
|
+
},
|
|
50
|
+
};
|
|
51
|
+
};
|
|
52
|
+
const renewToken = async (refreshToken) => {
|
|
53
|
+
const tokensResponse = await fetchTokens({
|
|
54
|
+
refreshToken: refreshToken.value,
|
|
55
|
+
grantType: 'refresh_token',
|
|
56
|
+
});
|
|
57
|
+
const accessToken = createAccessToken(tokensResponse.access_token, tokensResponse.expires_in);
|
|
58
|
+
return {
|
|
59
|
+
accessToken,
|
|
60
|
+
refreshToken,
|
|
61
|
+
};
|
|
62
|
+
};
|
|
63
|
+
return {
|
|
64
|
+
generateVisitorTokens,
|
|
65
|
+
renewToken,
|
|
66
|
+
getAuthHeaders,
|
|
67
|
+
setTokens,
|
|
68
|
+
getTokens: () => _tokens,
|
|
69
|
+
};
|
|
70
|
+
}
|
|
71
|
+
const fetchTokens = async (payload, headers = {}) => {
|
|
72
|
+
const res = await fetch(`https://${DEFAULT_API_URL}/oauth2/token`, {
|
|
73
|
+
method: 'POST',
|
|
74
|
+
body: JSON.stringify(payload),
|
|
75
|
+
headers: {
|
|
76
|
+
...biHeaderGenerator({
|
|
77
|
+
entityFqdn: 'wix.identity.oauth.v1.refresh_token',
|
|
78
|
+
methodFqn: 'wix.identity.oauth2.v1.Oauth2Ng.Token',
|
|
79
|
+
packageName: '@wix/sdk',
|
|
80
|
+
}),
|
|
81
|
+
'Content-Type': 'application/json',
|
|
82
|
+
...headers,
|
|
83
|
+
},
|
|
84
|
+
});
|
|
85
|
+
if (res.status !== 200) {
|
|
86
|
+
let responseJson;
|
|
87
|
+
try {
|
|
88
|
+
responseJson = await res.json();
|
|
89
|
+
}
|
|
90
|
+
catch { }
|
|
91
|
+
throw new Error(`Failed to fetch tokens from OAuth API: ${res.statusText}. request id: ${res.headers.get('x-request-id')}. ${responseJson ? `Response: ${JSON.stringify(responseJson)}` : ''}`);
|
|
92
|
+
}
|
|
93
|
+
const json = await res.json();
|
|
94
|
+
return json;
|
|
95
|
+
};
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import { RefreshToken, Tokens } from './oauth2/types.js';
|
|
2
|
+
export declare function SiteSessionAuth(config: {
|
|
3
|
+
clientId: string;
|
|
4
|
+
publicKey?: string;
|
|
5
|
+
tokens?: Tokens;
|
|
6
|
+
}): {
|
|
7
|
+
generateVisitorTokens: (tokens?: Partial<Tokens>) => Promise<Tokens>;
|
|
8
|
+
renewToken: (refreshToken: RefreshToken) => Promise<Tokens>;
|
|
9
|
+
getAuthHeaders: () => Promise<{
|
|
10
|
+
headers: {
|
|
11
|
+
Authorization: string;
|
|
12
|
+
};
|
|
13
|
+
}>;
|
|
14
|
+
setTokens: (tokens: Tokens) => void;
|
|
15
|
+
getTokens: () => Tokens;
|
|
16
|
+
};
|
|
17
|
+
export interface TokenResponse {
|
|
18
|
+
access_token: string;
|
|
19
|
+
expires_in: number;
|
|
20
|
+
refresh_token: string | null;
|
|
21
|
+
token_type: string;
|
|
22
|
+
scope?: string | null;
|
|
23
|
+
}
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SiteSessionAuth = SiteSessionAuth;
|
|
4
|
+
const biHeaderGenerator_js_1 = require("../bi/biHeaderGenerator.js");
|
|
5
|
+
const common_js_1 = require("../common.js");
|
|
6
|
+
const tokenHelpers_js_1 = require("../tokenHelpers.js");
|
|
7
|
+
const types_js_1 = require("./oauth2/types.js");
|
|
8
|
+
function SiteSessionAuth(config) {
|
|
9
|
+
const _tokens = config.tokens || {
|
|
10
|
+
accessToken: { value: '', expiresAt: 0 },
|
|
11
|
+
refreshToken: { value: '', role: types_js_1.TokenRole.NONE },
|
|
12
|
+
};
|
|
13
|
+
const setTokens = (tokens) => {
|
|
14
|
+
_tokens.accessToken = tokens.accessToken;
|
|
15
|
+
_tokens.refreshToken = tokens.refreshToken;
|
|
16
|
+
};
|
|
17
|
+
const getAuthHeaders = async () => {
|
|
18
|
+
if (!_tokens.accessToken?.value || (0, tokenHelpers_js_1.isTokenExpired)(_tokens.accessToken)) {
|
|
19
|
+
const tokens = await generateVisitorTokens({
|
|
20
|
+
refreshToken: _tokens.refreshToken,
|
|
21
|
+
});
|
|
22
|
+
setTokens(tokens);
|
|
23
|
+
}
|
|
24
|
+
return Promise.resolve({
|
|
25
|
+
headers: { Authorization: _tokens.accessToken.value },
|
|
26
|
+
});
|
|
27
|
+
};
|
|
28
|
+
const generateVisitorTokens = async (tokens) => {
|
|
29
|
+
if (tokens?.accessToken?.value &&
|
|
30
|
+
tokens?.refreshToken?.value &&
|
|
31
|
+
!(0, tokenHelpers_js_1.isTokenExpired)(tokens.accessToken)) {
|
|
32
|
+
return tokens;
|
|
33
|
+
}
|
|
34
|
+
if (tokens?.refreshToken?.value) {
|
|
35
|
+
try {
|
|
36
|
+
const newTokens = await renewToken(tokens.refreshToken);
|
|
37
|
+
return newTokens;
|
|
38
|
+
}
|
|
39
|
+
catch (e) {
|
|
40
|
+
// just continue and create a visitor one
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
const tokensResponse = await fetchTokens({
|
|
44
|
+
clientId: config.clientId,
|
|
45
|
+
grantType: 'anonymous',
|
|
46
|
+
});
|
|
47
|
+
return {
|
|
48
|
+
accessToken: (0, tokenHelpers_js_1.createAccessToken)(tokensResponse.access_token, tokensResponse.expires_in),
|
|
49
|
+
refreshToken: {
|
|
50
|
+
value: tokensResponse.refresh_token,
|
|
51
|
+
role: types_js_1.TokenRole.VISITOR,
|
|
52
|
+
},
|
|
53
|
+
};
|
|
54
|
+
};
|
|
55
|
+
const renewToken = async (refreshToken) => {
|
|
56
|
+
const tokensResponse = await fetchTokens({
|
|
57
|
+
refreshToken: refreshToken.value,
|
|
58
|
+
grantType: 'refresh_token',
|
|
59
|
+
});
|
|
60
|
+
const accessToken = (0, tokenHelpers_js_1.createAccessToken)(tokensResponse.access_token, tokensResponse.expires_in);
|
|
61
|
+
return {
|
|
62
|
+
accessToken,
|
|
63
|
+
refreshToken,
|
|
64
|
+
};
|
|
65
|
+
};
|
|
66
|
+
return {
|
|
67
|
+
generateVisitorTokens,
|
|
68
|
+
renewToken,
|
|
69
|
+
getAuthHeaders,
|
|
70
|
+
setTokens,
|
|
71
|
+
getTokens: () => _tokens,
|
|
72
|
+
};
|
|
73
|
+
}
|
|
74
|
+
const fetchTokens = async (payload, headers = {}) => {
|
|
75
|
+
const res = await fetch(`https://${common_js_1.DEFAULT_API_URL}/oauth2/token`, {
|
|
76
|
+
method: 'POST',
|
|
77
|
+
body: JSON.stringify(payload),
|
|
78
|
+
headers: {
|
|
79
|
+
...(0, biHeaderGenerator_js_1.biHeaderGenerator)({
|
|
80
|
+
entityFqdn: 'wix.identity.oauth.v1.refresh_token',
|
|
81
|
+
methodFqn: 'wix.identity.oauth2.v1.Oauth2Ng.Token',
|
|
82
|
+
packageName: '@wix/sdk',
|
|
83
|
+
}),
|
|
84
|
+
'Content-Type': 'application/json',
|
|
85
|
+
...headers,
|
|
86
|
+
},
|
|
87
|
+
});
|
|
88
|
+
if (res.status !== 200) {
|
|
89
|
+
let responseJson;
|
|
90
|
+
try {
|
|
91
|
+
responseJson = await res.json();
|
|
92
|
+
}
|
|
93
|
+
catch { }
|
|
94
|
+
throw new Error(`Failed to fetch tokens from OAuth API: ${res.statusText}. request id: ${res.headers.get('x-request-id')}. ${responseJson ? `Response: ${JSON.stringify(responseJson)}` : ''}`);
|
|
95
|
+
}
|
|
96
|
+
const json = await res.json();
|
|
97
|
+
return json;
|
|
98
|
+
};
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@wix/sdk",
|
|
3
|
-
"version": "1.15.
|
|
3
|
+
"version": "1.15.15",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Ronny Ringel",
|
|
@@ -27,6 +27,10 @@
|
|
|
27
27
|
"import": "./build/auth/oauth2/OAuthStrategy.js",
|
|
28
28
|
"require": "./cjs/build/auth/oauth2/OAuthStrategy.js"
|
|
29
29
|
},
|
|
30
|
+
"./auth/site-session": {
|
|
31
|
+
"import": "./build/auth/SiteSessionAuth.js",
|
|
32
|
+
"require": "./cjs/build/auth/SiteSessionAuth.js"
|
|
33
|
+
},
|
|
30
34
|
"./auth/api-key": {
|
|
31
35
|
"import": "./build/auth/ApiKeyAuthStrategy.js",
|
|
32
36
|
"require": "./cjs/build/auth/ApiKeyAuthStrategy.js"
|
|
@@ -69,20 +73,20 @@
|
|
|
69
73
|
},
|
|
70
74
|
"dependencies": {
|
|
71
75
|
"@wix/identity": "^1.0.104",
|
|
72
|
-
"@wix/image-kit": "^1.
|
|
76
|
+
"@wix/image-kit": "^1.104.0",
|
|
73
77
|
"@wix/redirects": "^1.0.70",
|
|
74
78
|
"@wix/sdk-context": "0.0.1",
|
|
75
79
|
"@wix/sdk-runtime": "0.3.38",
|
|
76
80
|
"@wix/sdk-types": "^1.13.6",
|
|
77
81
|
"jose": "^5.10.0",
|
|
78
|
-
"type-fest": "^4.
|
|
82
|
+
"type-fest": "^4.37.0"
|
|
79
83
|
},
|
|
80
84
|
"optionalDependencies": {
|
|
81
85
|
"graphql": "^0.8.0 || ^0.9.0 || ^0.10.0 || ^0.11.0 || ^0.12.0 || ^0.13.0 || ^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0"
|
|
82
86
|
},
|
|
83
87
|
"devDependencies": {
|
|
84
88
|
"@types/is-ci": "^3.0.4",
|
|
85
|
-
"@types/node": "^20.17.
|
|
89
|
+
"@types/node": "^20.17.25",
|
|
86
90
|
"@vitest/ui": "^1.6.1",
|
|
87
91
|
"@wix/ecom": "^1.0.886",
|
|
88
92
|
"@wix/events": "^1.0.382",
|
|
@@ -122,5 +126,5 @@
|
|
|
122
126
|
"wallaby": {
|
|
123
127
|
"autoDetect": true
|
|
124
128
|
},
|
|
125
|
-
"falconPackageHash": "
|
|
129
|
+
"falconPackageHash": "94fee4575cb4611f81b11c3117a9db5e7b3bd872ecedbd09d4b0ad35"
|
|
126
130
|
}
|