@xwiki/cristal-electron-authentication-nextcloud-main 0.21.1 → 0.23.0

package/CHANGELOG.md

@@ -1,12 +1,26 @@
 # @xwiki/cristal-electron-authentication-nextcloud-main
 
-## 0.21.1
+## 0.23.0
+
+### Minor Changes
+
+- Cristal 0.23 Release
+
+### Patch Changes
+
+- Updated dependencies
+  - @xwiki/cristal-authentication-api@0.23.0
+
+## 0.22.0
+
+### Minor Changes
+
+- Cristal 0.22 Release
 
 ### Patch Changes
 
-- Cristal 0.21.1 Release
 - Updated dependencies
-  - @xwiki/cristal-authentication-api@0.21.1
+  - @xwiki/cristal-authentication-api@0.22.0
 
 ## 0.21.0
 

package/api-extractor.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://developer.microsoft.com/json-schemas/api-extractor/v7/api-extractor.schema.json",
+  "extends": "../../../../api-extractor.json"
+}

package/dist/index.d.cts

@@ -1,2 +1,9 @@
 import { BrowserWindow } from 'electron';
+/**
+ * @param browserWindow - the browser window to use for the authentication process
+ * @param reload - the reload function
+ *
+ * @since 0.16
+ * @beta
+ */
 export declare function load(browserWindow: BrowserWindow, reload: (win: BrowserWindow) => void): void;

package/dist/index.d.ts

@@ -1,2 +1,9 @@
 import { BrowserWindow } from 'electron';
+/**
+ * @param browserWindow - the browser window to use for the authentication process
+ * @param reload - the reload function
+ *
+ * @since 0.16
+ * @beta
+ */
 export declare function load(browserWindow: BrowserWindow, reload: (win: BrowserWindow) => void): void;

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import L from "electron-store";
-import b from "axios";
-import { ipcMain as c, shell as S, BrowserWindow as F } from "electron";
-const w = "tokenType", T = "accessToken", x = "refreshToken", m = "expiryDate", _ = "userId", K = {
+import b from "electron-store";
+import v from "axios";
+import { ipcMain as r, shell as U, BrowserWindow as D } from "electron";
+const g = "tokenType", k = "accessToken", y = "refreshToken", w = "expiryDate", T = "userId", L = {
   tokenType: {
     type: "string"
   },
@@ -17,198 +17,189 @@ const w = "tokenType", T = "accessToken", x = "refreshToken", m = "expiryDate",
   userId: {
     type: "string"
   }
-}, $ = new L({
+}, s = new b({
   name: "authentication-nextcloud-main",
-  schema: K
+  schema: L
   // TODO: add encryption key
 });
-function i(e, t, s) {
-  $.set(`${e}-${s}`, t);
+function p(e, n) {
+  s.set(`${g}-${n}`, e);
 }
-function u(e, t) {
-  return $.get(`${e}-${t}`);
+function u(e, n) {
+  s.set(`${k}-${n}`, e);
 }
-function l(e, t) {
-  $.delete(`${e}-${t}`);
+function I(e, n) {
+  s.set(`${y}-${n}`, e);
 }
-function y(e, t) {
-  i(w, e, t);
+function P(e, n) {
+  s.set(`${w}-${n}`, e);
 }
-function f(e, t) {
-  i(T, e, t);
+function $(e, n) {
+  s.set(`${T}-${n}`, e);
 }
-function U(e, t) {
-  i(x, e, t);
+function _(e) {
+  return s.get(`${g}-${e}`);
 }
-function D(e, t) {
-  i(m, e, t);
+function m(e) {
+  return s.get(`${k}-${e}`);
 }
-function g(e, t) {
-  i(_, e, t);
+function S(e) {
+  return s.get(`${y}-${e}`);
 }
-function v(e) {
-  return u(w, e);
+function F(e) {
+  return s.get(`${w}-${e}`);
 }
-function I(e) {
-  return u(T, e);
+function K(e) {
+  return s.get(`${T}-${e}`);
 }
 function j(e) {
-  return u(x, e);
+  s.delete(`${g}-${e}`);
 }
 function A(e) {
-  return u(m, e);
+  s.delete(`${k}-${e}`);
 }
 function C(e) {
-  return u(_, e);
+  s.delete(`${y}-${e}`);
 }
 function E(e) {
-  l(w, e);
+  s.delete(`${w}-${e}`);
 }
 function z(e) {
-  l(T, e);
+  s.delete(`${T}-${e}`);
 }
-function B(e) {
-  l(x, e);
+const x = "http://callback/";
+async function B(e, n, c) {
+  const t = new URL(`${c}/token`);
+  t.searchParams.set("base_url", n), t.searchParams.set("code", e), t.searchParams.set("redirect_uri", x);
+  const o = await v.get(t.toString());
+  p(o.data.token_type, "oauth2"), u(o.data.access_token, "oauth2"), I(o.data.refresh_token, "oauth2"), P(Date.now() + (o.data.expires_in - 10) * 1e3, "oauth2"), $(o.data.user_id, "oauth2");
 }
-function O(e) {
-  l(m, e);
-}
-function W(e) {
-  l(_, e);
-}
-const R = "http://callback/";
-async function q(e, t, s) {
-  const n = new URL(`${s}/token`);
-  n.searchParams.set("base_url", t), n.searchParams.set("code", e), n.searchParams.set("redirect_uri", R);
-  const o = await b.get(n.toString());
-  y(o.data.token_type, "oauth2"), f(o.data.access_token, "oauth2"), U(o.data.refresh_token, "oauth2"), D(Date.now() + (o.data.expires_in - 10) * 1e3, "oauth2"), g(o.data.user_id, "oauth2");
-}
-function M(e, t, s, n) {
+function O(e, n, c, t) {
   e.webContents.session.webRequest.onBeforeRequest(
     {
-      urls: [`${R}*`]
+      urls: [`${x}*`]
     },
     async ({ url: o }, a) => {
-      if (o.startsWith(n))
+      if (o.startsWith(t))
         a({ cancel: !1 });
       else {
-        const r = new URL(o);
-        await q(
-          r.searchParams.get("code"),
-          s,
-          n
-        ), d.show(), t(d), e?.close();
+        const i = new URL(o);
+        await B(
+          i.searchParams.get("code"),
+          c,
+          t
+        ), h.show(), n(h), e?.close();
       }
     }
   );
 }
-async function N(e) {
-  const t = new F({
+async function W(e) {
+  const n = new D({
     width: 800,
     height: 600,
     webPreferences: {
       nodeIntegration: !1
     }
   });
-  return t.setMenu(null), await t.loadURL(e), t;
+  return n.setMenu(null), await n.loadURL(e), n;
 }
-let P, d;
-function J(e, t) {
-  c.handle(
+let R, h;
+function V(e, n) {
+  r.handle(
     "authentication:nextcloud:loginOauth2",
-    async (s, {
-      baseUrl: n,
+    async (c, {
+      baseUrl: t,
       authenticationBaseUrl: o
     }) => {
       const a = new URL(`${o}/authorize`);
-      a.searchParams.set("base_url", n), a.searchParams.set("redirect_uri", R), d = e, P = await N(a.toString()), M(P, t, n, o), d.hide();
+      a.searchParams.set("base_url", t), a.searchParams.set("redirect_uri", x), h = e, R = await W(a.toString()), O(R, n, t, o), h.hide();
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:loginBasic",
-    async (s, {
-      username: n,
+    async (c, {
+      username: t,
       password: o
     }) => {
-      f(btoa(`${n}:${o}`), "basic"), y("Basic", "basic"), g(n, "basic"), t(e);
+      u(btoa(`${t}:${o}`), "basic"), p("Basic", "basic"), $(t, "basic"), n(e);
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:loginFlow",
-    async (s, {
-      baseUrl: n
+    async (c, {
+      baseUrl: t
     }) => {
-      const o = `${n}/index.php/login/v2`, r = await (await fetch(o, { method: "POST" })).json();
-      S.openExternal(r.login);
-      const p = setInterval(async () => {
-        const h = await fetch(r.poll.endpoint, {
+      const o = `${t}/index.php/login/v2`, i = await (await fetch(o, { method: "POST" })).json();
+      U.openExternal(i.login);
+      const d = setInterval(async () => {
+        const l = await fetch(i.poll.endpoint, {
           method: "POST",
           body: new URLSearchParams({
-            token: r.poll.token
+            token: i.poll.token
           }),
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           }
         });
-        if (h.ok) {
-          const k = await h.json();
-          f(
-            btoa(`${k.loginName}:${k.appPassword}`),
+        if (l.ok) {
+          const f = await l.json();
+          u(
+            btoa(`${f.loginName}:${f.appPassword}`),
             "login-flow"
-          ), y("Basic", "login-flow"), g(k.loginName, "login-flow"), clearInterval(p), t(e);
+          ), p("Basic", "login-flow"), $(f.loginName, "login-flow"), clearInterval(d), n(e);
         }
       }, 3e3);
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:isLoggedIn",
-    async (s, { mode: n }) => {
-      const o = v(n), a = I(n);
+    async (c, { mode: t }) => {
+      const o = _(t), a = m(t);
       return o && a;
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:userDetails",
-    async (s, { baseUrl: n, mode: o }) => {
-      const a = C(o);
+    async (c, { baseUrl: t, mode: o }) => {
+      const a = K(o);
       return {
-        profile: `${n}/u/${a}`,
+        profile: `${t}/u/${a}`,
         username: a,
         name: a,
         // TODO: Find a way to get the display name (CRISTAL-589).
-        avatar: `${n}/avatar/${a}/64`
+        avatar: `${t}/avatar/${a}/64`
         // We want the 64x64 avatar.
       };
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:authorizationValue",
-    async (s, { mode: n }) => ({
-      tokenType: v(n),
-      accessToken: I(n)
+    async (c, { mode: t }) => ({
+      tokenType: _(t),
+      accessToken: m(t)
     })
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:logout",
-    async (s, { mode: n }) => {
-      z(n), E(n), B(n), O(n), W(n);
+    async (c, { mode: t }) => {
+      A(t), j(t), C(t), E(t), z(t);
     }
-  ), c.handle(
+  ), r.handle(
     "authentication:nextcloud:refreshToken",
-    async (s, {
-      baseUrl: n,
+    async (c, {
+      baseUrl: t,
       authenticationBaseUrl: o
     }) => {
-      if (Date.now() > A("oauth2")) {
+      if (Date.now() > F("oauth2")) {
         const a = new URL(`${o}/refresh`);
-        a.searchParams.set("base_url", n), a.searchParams.set("refresh_token", j("oauth2"));
+        a.searchParams.set("base_url", t), a.searchParams.set("refresh_token", S("oauth2"));
         const {
           data: {
-            access_token: r,
-            refresh_token: p,
-            expires_in: h
+            access_token: i,
+            refresh_token: d,
+            expires_in: l
           }
-        } = await b.get(a.toString());
-        f(r, "oauth2"), U(p, "oauth2"), D(Date.now() + (h - 10) * 1e3, "oauth2");
+        } = await v.get(a.toString());
+        u(i, "oauth2"), I(d, "oauth2"), P(Date.now() + (l - 10) * 1e3, "oauth2");
       }
     }
   );
 }
 export {
-  J as load
+  V as load
 };
 //# sourceMappingURL=index.es.js.map

package/dist/index.es.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.es.js","sources":["../src/storage.ts","../src/index.ts"],"sourcesContent":["/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport Store from \"electron-store\";\n\nconst tokenTypeKey = \"tokenType\";\n\nconst accessTokenKey = \"accessToken\";\n\nconst refreshTokenKey = \"refreshToken\";\n\nconst expiryDateKey = \"expiryDate\";\n\nconst userIdKey = \"userId\";\n\nconst schema = {\n  tokenType: {\n    type: \"string\",\n  },\n\n  accessToken: {\n    type: \"string\",\n  },\n\n  refreshToken: {\n    type: \"string\",\n  },\n\n  expiryDate: {\n    type: \"number\",\n  },\n\n  userId: {\n    type: \"string\",\n  },\n};\n\nconst storeInstance: Store = new Store({\n  name: \"authentication-nextcloud-main\",\n  schema,\n  // TODO: add encryption key\n});\n\nfunction set<T>(key: string, value: T, mode: string) {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  storeInstance.set(`${key}-${mode}`, value);\n}\n\nfunction get<T>(key: string, mode: string): T {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  return storeInstance.get(`${key}-${mode}`) as T;\n}\n\nfunction rm(key: string, mode: string) {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  storeInstance.delete(`${key}-${mode}`);\n}\n\nfunction setTokenType(value: string, mode: string): void {\n  set(tokenTypeKey, value, mode);\n}\n\nfunction setAccessToken(value: string, mode: string): void {\n  set(accessTokenKey, value, mode);\n}\n\nfunction setRefreshToken(value: string, mode: string): void {\n  set(refreshTokenKey, value, mode);\n}\n\nfunction setExpiryDate(value: number, mode: string): void {\n  set(expiryDateKey, value, mode);\n}\n\nfunction setUserId(value: string, mode: string): void {\n  set(userIdKey, value, mode);\n}\n\nfunction getTokenType(mode: string): string {\n  return get(tokenTypeKey, mode);\n}\n\nfunction getAccessToken(mode: string): string {\n  return get(accessTokenKey, mode);\n}\n\nfunction getRefreshToken(mode: string): string {\n  return get(refreshTokenKey, mode);\n}\n\nfunction getExpiryDate(mode: string): number {\n  return get(expiryDateKey, mode);\n}\n\nfunction getUserId(mode: string): string {\n  return get(userIdKey, mode);\n}\n\nfunction deleteTokenType(mode: string): void {\n  rm(tokenTypeKey, mode);\n}\n\nfunction deleteAccessToken(mode: string): void {\n  rm(accessTokenKey, mode);\n}\n\nfunction deleteRefreshToken(mode: string): void {\n  rm(refreshTokenKey, mode);\n}\n\nfunction deleteExpiryDate(mode: string): void {\n  rm(expiryDateKey, mode);\n}\n\nfunction deleteUserId(mode: string): void {\n  rm(userIdKey, mode);\n}\n\nexport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n};\n","/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n} from \"./storage.js\";\nimport { UserDetails } from \"@xwiki/cristal-authentication-api\";\nimport axios from \"axios\";\nimport { BrowserWindow, ipcMain, shell } from \"electron\";\n\nconst callbackUrl = \"http://callback/\";\n\nasync function getTokenFromCallbackCode(\n  code: string,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  const tokenUrl = new URL(`${authenticationBaseUrl}/token`);\n  tokenUrl.searchParams.set(\"base_url\", baseUrl);\n  tokenUrl.searchParams.set(\"code\", code);\n  tokenUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n  const response = await axios.get(tokenUrl.toString());\n  setTokenType(response.data.token_type, \"oauth2\");\n  setAccessToken(response.data.access_token, \"oauth2\");\n  setRefreshToken(response.data.refresh_token, \"oauth2\");\n  // We apply a safety margin of 10s to the expiration date.\n  setExpiryDate(Date.now() + (response.data.expires_in - 10) * 1000, \"oauth2\");\n  setUserId(response.data.user_id, \"oauth2\");\n}\n\nfunction initAuth(\n  win: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  win.webContents.session.webRequest.onBeforeRequest(\n    {\n      urls: [`${callbackUrl}*`],\n    },\n    async ({ url }, callback) => {\n      if (url.startsWith(authenticationBaseUrl)) {\n        // Allow for the redirects from the oidc server to be performed without being blocked.\n        callback({ cancel: false });\n      } else {\n        const parsedURL = new URL(url);\n        await getTokenFromCallbackCode(\n          parsedURL.searchParams.get(\"code\")!,\n          baseUrl,\n          authenticationBaseUrl,\n        );\n        mainWin.show();\n        reload(mainWin);\n        win?.close();\n      }\n    },\n  );\n}\n\nasync function createWindow(url: string) {\n  const win = new BrowserWindow({\n    width: 800,\n    height: 600,\n    webPreferences: {\n      nodeIntegration: false,\n    },\n  });\n\n  win.setMenu(null);\n\n  await win.loadURL(url);\n\n  return win;\n}\n\nlet authWin: BrowserWindow;\nlet mainWin: BrowserWindow;\n\nexport function load(\n  browserWindow: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n): void {\n  ipcMain.handle(\n    \"authentication:nextcloud:loginOauth2\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: {\n        baseUrl: string;\n        authenticationBaseUrl: string;\n      },\n    ): Promise<void> => {\n      const authorizationUrl = new URL(`${authenticationBaseUrl}/authorize`);\n      authorizationUrl.searchParams.set(\"base_url\", baseUrl);\n      authorizationUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n      // Save the window asking for login (i.e., the main window), before creating\n      // a new windows for the oidc web page. Then, hide the main window for the\n      // duration of the authentication process.\n      mainWin = browserWindow;\n      authWin = await createWindow(authorizationUrl.toString());\n\n      initAuth(authWin, reload, baseUrl, authenticationBaseUrl);\n      mainWin.hide();\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginBasic\",\n    async (\n      _event,\n      {\n        username,\n        password,\n      }: {\n        username: string;\n        password: string;\n      },\n    ): Promise<void> => {\n      setAccessToken(btoa(`${username}:${password}`), \"basic\");\n      setTokenType(\"Basic\", \"basic\");\n      setUserId(username, \"basic\");\n      // We reload the content on successful login.\n      reload(browserWindow);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginFlow\",\n    async (\n      _event,\n      {\n        baseUrl,\n      }: {\n        baseUrl: string;\n      },\n    ): Promise<void> => {\n      const loginFlowUrl = `${baseUrl}/index.php/login/v2`;\n\n      const loginFlowResponse = await fetch(loginFlowUrl, { method: \"POST\" });\n      const jsonLoginFlowResponse: {\n        poll: { token: string; endpoint: string };\n        login: string;\n      } = await loginFlowResponse.json();\n\n      shell.openExternal(jsonLoginFlowResponse.login);\n\n      // This interval handles polling Nextcloud for the access token.\n      // It will return a 404 error until the login process has succeeded.\n      const intervalId = setInterval(async () => {\n        const response = await fetch(jsonLoginFlowResponse.poll.endpoint, {\n          method: \"POST\",\n          body: new URLSearchParams({\n            token: jsonLoginFlowResponse.poll.token,\n          }),\n          headers: {\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n          },\n        });\n        if (response.ok) {\n          const jsonResponse: {\n            loginName: string;\n            appPassword: string;\n          } = await response.json();\n          setAccessToken(\n            btoa(`${jsonResponse.loginName}:${jsonResponse.appPassword}`),\n            \"login-flow\",\n          );\n          setTokenType(\"Basic\", \"login-flow\");\n          setUserId(jsonResponse.loginName, \"login-flow\");\n          clearInterval(intervalId);\n          // We reload the content on successful login.\n          reload(browserWindow);\n        }\n      }, 3000);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:isLoggedIn\",\n    async (_event, { mode }: { mode: string }) => {\n      const tokenType = getTokenType(mode);\n      const accessTokenKey = getAccessToken(mode);\n      return tokenType && accessTokenKey;\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:userDetails\",\n    async (\n      _event,\n      { baseUrl, mode }: { baseUrl: string; mode: string },\n    ): Promise<UserDetails> => {\n      const userId = getUserId(mode);\n      return {\n        profile: `${baseUrl}/u/${userId}`,\n        username: userId,\n        name: userId!, // TODO: Find a way to get the display name (CRISTAL-589).\n        avatar: `${baseUrl}/avatar/${userId}/64`, // We want the 64x64 avatar.\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:authorizationValue\",\n    async (_event, { mode }: { mode: string }) => {\n      return {\n        tokenType: getTokenType(mode),\n        accessToken: getAccessToken(mode),\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:logout\",\n    async (_event, { mode }: { mode: string }): Promise<void> => {\n      deleteAccessToken(mode);\n      deleteTokenType(mode);\n      deleteRefreshToken(mode);\n      deleteExpiryDate(mode);\n      deleteUserId(mode);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:refreshToken\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: { baseUrl: string; authenticationBaseUrl: string },\n    ): Promise<void> => {\n      if (Date.now() > getExpiryDate(\"oauth2\")) {\n        const refreshUrl = new URL(`${authenticationBaseUrl}/refresh`);\n        refreshUrl.searchParams.set(\"base_url\", baseUrl);\n        refreshUrl.searchParams.set(\"refresh_token\", getRefreshToken(\"oauth2\"));\n\n        const {\n          data: {\n            access_token: accessToken,\n            refresh_token: refreshToken,\n            expires_in: expiresIn,\n          },\n        } = await axios.get(refreshUrl.toString());\n\n        setAccessToken(accessToken, \"oauth2\");\n        setRefreshToken(refreshToken, \"oauth2\");\n        // We apply a safety margin of 10s to the expiration date.\n        setExpiryDate(Date.now() + (expiresIn - 10) * 1000, \"oauth2\");\n      }\n    },\n  );\n}\n"],"names":["tokenTypeKey","accessTokenKey","refreshTokenKey","expiryDateKey","userIdKey","schema","storeInstance","Store","set","key","value","mode","get","rm","setTokenType","setAccessToken","setRefreshToken","setExpiryDate","setUserId","getTokenType","getAccessToken","getRefreshToken","getExpiryDate","getUserId","deleteTokenType","deleteAccessToken","deleteRefreshToken","deleteExpiryDate","deleteUserId","callbackUrl","getTokenFromCallbackCode","code","baseUrl","authenticationBaseUrl","tokenUrl","response","axios","initAuth","win","reload","url","callback","parsedURL","mainWin","createWindow","BrowserWindow","authWin","load","browserWindow","ipcMain","_event","authorizationUrl","username","password","loginFlowUrl","jsonLoginFlowResponse","shell","intervalId","jsonResponse","tokenType","userId","refreshUrl","accessToken","refreshToken","expiresIn"],"mappings":";;;AAsBA,MAAMA,IAAe,aAEfC,IAAiB,eAEjBC,IAAkB,gBAElBC,IAAgB,cAEhBC,IAAY,UAEZC,IAAS;AAAA,EACb,WAAW;AAAA,IACT,MAAM;AAAA,EAAA;AAAA,EAGR,aAAa;AAAA,IACX,MAAM;AAAA,EAAA;AAAA,EAGR,cAAc;AAAA,IACZ,MAAM;AAAA,EAAA;AAAA,EAGR,YAAY;AAAA,IACV,MAAM;AAAA,EAAA;AAAA,EAGR,QAAQ;AAAA,IACN,MAAM;AAAA,EAAA;AAEV,GAEMC,IAAuB,IAAIC,EAAM;AAAA,EACrC,MAAM;AAAA,EACN,QAAAF;AAAA;AAEF,CAAC;AAED,SAASG,EAAOC,GAAaC,GAAUC,GAAc;AAEnD,EAAAL,EAAc,IAAI,GAAGG,CAAG,IAAIE,CAAI,IAAID,CAAK;AAC3C;AAEA,SAASE,EAAOH,GAAaE,GAAiB;AAE5C,SAAOL,EAAc,IAAI,GAAGG,CAAG,IAAIE,CAAI,EAAE;AAC3C;AAEA,SAASE,EAAGJ,GAAaE,GAAc;AAErC,EAAAL,EAAc,OAAO,GAAGG,CAAG,IAAIE,CAAI,EAAE;AACvC;AAEA,SAASG,EAAaJ,GAAeC,GAAoB;AACvD,EAAAH,EAAIR,GAAcU,GAAOC,CAAI;AAC/B;AAEA,SAASI,EAAeL,GAAeC,GAAoB;AACzD,EAAAH,EAAIP,GAAgBS,GAAOC,CAAI;AACjC;AAEA,SAASK,EAAgBN,GAAeC,GAAoB;AAC1D,EAAAH,EAAIN,GAAiBQ,GAAOC,CAAI;AAClC;AAEA,SAASM,EAAcP,GAAeC,GAAoB;AACxD,EAAAH,EAAIL,GAAeO,GAAOC,CAAI;AAChC;AAEA,SAASO,EAAUR,GAAeC,GAAoB;AACpD,EAAAH,EAAIJ,GAAWM,GAAOC,CAAI;AAC5B;AAEA,SAASQ,EAAaR,GAAsB;AAC1C,SAAOC,EAAIZ,GAAcW,CAAI;AAC/B;AAEA,SAASS,EAAeT,GAAsB;AAC5C,SAAOC,EAAIX,GAAgBU,CAAI;AACjC;AAEA,SAASU,EAAgBV,GAAsB;AAC7C,SAAOC,EAAIV,GAAiBS,CAAI;AAClC;AAEA,SAASW,EAAcX,GAAsB;AAC3C,SAAOC,EAAIT,GAAeQ,CAAI;AAChC;AAEA,SAASY,EAAUZ,GAAsB;AACvC,SAAOC,EAAIR,GAAWO,CAAI;AAC5B;AAEA,SAASa,EAAgBb,GAAoB;AAC3C,EAAAE,EAAGb,GAAcW,CAAI;AACvB;AAEA,SAASc,EAAkBd,GAAoB;AAC7C,EAAAE,EAAGZ,GAAgBU,CAAI;AACzB;AAEA,SAASe,EAAmBf,GAAoB;AAC9C,EAAAE,EAAGX,GAAiBS,CAAI;AAC1B;AAEA,SAASgB,EAAiBhB,GAAoB;AAC5C,EAAAE,EAAGV,GAAeQ,CAAI;AACxB;AAEA,SAASiB,EAAajB,GAAoB;AACxC,EAAAE,EAAGT,GAAWO,CAAI;AACpB;AC5FA,MAAMkB,IAAc;AAEpB,eAAeC,EACbC,GACAC,GACAC,GACA;AACA,QAAMC,IAAW,IAAI,IAAI,GAAGD,CAAqB,QAAQ;AACzD,EAAAC,EAAS,aAAa,IAAI,YAAYF,CAAO,GAC7CE,EAAS,aAAa,IAAI,QAAQH,CAAI,GACtCG,EAAS,aAAa,IAAI,gBAAgBL,CAAW;AACrD,QAAMM,IAAW,MAAMC,EAAM,IAAIF,EAAS,UAAU;AACpD,EAAApB,EAAaqB,EAAS,KAAK,YAAY,QAAQ,GAC/CpB,EAAeoB,EAAS,KAAK,cAAc,QAAQ,GACnDnB,EAAgBmB,EAAS,KAAK,eAAe,QAAQ,GAErDlB,EAAc,KAAK,SAASkB,EAAS,KAAK,aAAa,MAAM,KAAM,QAAQ,GAC3EjB,EAAUiB,EAAS,KAAK,SAAS,QAAQ;AAC3C;AAEA,SAASE,EACPC,GACAC,GACAP,GACAC,GACA;AACA,EAAAK,EAAI,YAAY,QAAQ,WAAW;AAAA,IACjC;AAAA,MACE,MAAM,CAAC,GAAGT,CAAW,GAAG;AAAA,IAAA;AAAA,IAE1B,OAAO,EAAE,KAAAW,EAAA,GAAOC,MAAa;AAC3B,UAAID,EAAI,WAAWP,CAAqB;AAEtC,QAAAQ,EAAS,EAAE,QAAQ,IAAO;AAAA,WACrB;AACL,cAAMC,IAAY,IAAI,IAAIF,CAAG;AAC7B,cAAMV;AAAA,UACJY,EAAU,aAAa,IAAI,MAAM;AAAA,UACjCV;AAAA,UACAC;AAAA,QAAA,GAEFU,EAAQ,KAAA,GACRJ,EAAOI,CAAO,GACdL,GAAK,MAAA;AAAA,MACP;AAAA,IACF;AAAA,EAAA;AAEJ;AAEA,eAAeM,EAAaJ,GAAa;AACvC,QAAMF,IAAM,IAAIO,EAAc;AAAA,IAC5B,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,gBAAgB;AAAA,MACd,iBAAiB;AAAA,IAAA;AAAA,EACnB,CACD;AAED,SAAAP,EAAI,QAAQ,IAAI,GAEhB,MAAMA,EAAI,QAAQE,CAAG,GAEdF;AACT;AAEA,IAAIQ,GACAH;AAEG,SAASI,EACdC,GACAT,GACM;AACN,EAAAU,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,MACA,uBAAAC;AAAA,IAAA,MAKgB;AAClB,YAAMkB,IAAmB,IAAI,IAAI,GAAGlB,CAAqB,YAAY;AACrE,MAAAkB,EAAiB,aAAa,IAAI,YAAYnB,CAAO,GACrDmB,EAAiB,aAAa,IAAI,gBAAgBtB,CAAW,GAI7Dc,IAAUK,GACVF,IAAU,MAAMF,EAAaO,EAAiB,SAAA,CAAU,GAExDd,EAASS,GAASP,GAAQP,GAASC,CAAqB,GACxDU,EAAQ,KAAA;AAAA,IACV;AAAA,EAAA,GAGFM,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,UAAAE;AAAA,MACA,UAAAC;AAAA,IAAA,MAKgB;AAClB,MAAAtC,EAAe,KAAK,GAAGqC,CAAQ,IAAIC,CAAQ,EAAE,GAAG,OAAO,GACvDvC,EAAa,SAAS,OAAO,GAC7BI,EAAUkC,GAAU,OAAO,GAE3Bb,EAAOS,CAAa;AAAA,IACtB;AAAA,EAAA,GAGFC,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,IAAA,MAIgB;AAClB,YAAMsB,IAAe,GAAGtB,CAAO,uBAGzBuB,IAGF,OAJsB,MAAM,MAAMD,GAAc,EAAE,QAAQ,QAAQ,GAI1C,KAAA;AAE5B,MAAAE,EAAM,aAAaD,EAAsB,KAAK;AAI9C,YAAME,IAAa,YAAY,YAAY;AACzC,cAAMtB,IAAW,MAAM,MAAMoB,EAAsB,KAAK,UAAU;AAAA,UAChE,QAAQ;AAAA,UACR,MAAM,IAAI,gBAAgB;AAAA,YACxB,OAAOA,EAAsB,KAAK;AAAA,UAAA,CACnC;AAAA,UACD,SAAS;AAAA,YACP,gBAAgB;AAAA,UAAA;AAAA,QAClB,CACD;AACD,YAAIpB,EAAS,IAAI;AACf,gBAAMuB,IAGF,MAAMvB,EAAS,KAAA;AACnB,UAAApB;AAAA,YACE,KAAK,GAAG2C,EAAa,SAAS,IAAIA,EAAa,WAAW,EAAE;AAAA,YAC5D;AAAA,UAAA,GAEF5C,EAAa,SAAS,YAAY,GAClCI,EAAUwC,EAAa,WAAW,YAAY,GAC9C,cAAcD,CAAU,GAExBlB,EAAOS,CAAa;AAAA,QACtB;AAAA,MACF,GAAG,GAAI;AAAA,IACT;AAAA,EAAA,GAGFC,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAAvC,QAA6B;AAC5C,YAAMgD,IAAYxC,EAAaR,CAAI,GAC7BV,IAAiBmB,EAAeT,CAAI;AAC1C,aAAOgD,KAAa1D;AAAA,IACtB;AAAA,EAAA,GAGFgD,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA,EAAE,SAAAlB,GAAS,MAAArB,QACc;AACzB,YAAMiD,IAASrC,EAAUZ,CAAI;AAC7B,aAAO;AAAA,QACL,SAAS,GAAGqB,CAAO,MAAM4B,CAAM;AAAA,QAC/B,UAAUA;AAAA,QACV,MAAMA;AAAA;AAAA,QACN,QAAQ,GAAG5B,CAAO,WAAW4B,CAAM;AAAA;AAAA,MAAA;AAAA,IAEvC;AAAA,EAAA,GAGFX,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAAvC,SACR;AAAA,MACL,WAAWQ,EAAaR,CAAI;AAAA,MAC5B,aAAaS,EAAeT,CAAI;AAAA,IAAA;AAAA,EAEpC,GAGFsC,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAAvC,QAA4C;AAC3D,MAAAc,EAAkBd,CAAI,GACtBa,EAAgBb,CAAI,GACpBe,EAAmBf,CAAI,GACvBgB,EAAiBhB,CAAI,GACrBiB,EAAajB,CAAI;AAAA,IACnB;AAAA,EAAA,GAGFsC,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,MACA,uBAAAC;AAAA,IAAA,MAEgB;AAClB,UAAI,KAAK,IAAA,IAAQX,EAAc,QAAQ,GAAG;AACxC,cAAMuC,IAAa,IAAI,IAAI,GAAG5B,CAAqB,UAAU;AAC7D,QAAA4B,EAAW,aAAa,IAAI,YAAY7B,CAAO,GAC/C6B,EAAW,aAAa,IAAI,iBAAiBxC,EAAgB,QAAQ,CAAC;AAEtE,cAAM;AAAA,UACJ,MAAM;AAAA,YACJ,cAAcyC;AAAA,YACd,eAAeC;AAAA,YACf,YAAYC;AAAA,UAAA;AAAA,QACd,IACE,MAAM5B,EAAM,IAAIyB,EAAW,UAAU;AAEzC,QAAA9C,EAAe+C,GAAa,QAAQ,GACpC9C,EAAgB+C,GAAc,QAAQ,GAEtC9C,EAAc,KAAK,IAAA,KAAS+C,IAAY,MAAM,KAAM,QAAQ;AAAA,MAC9D;AAAA,IACF;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"index.es.js","sources":["../src/storage.ts","../src/index.ts"],"sourcesContent":["/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport Store from \"electron-store\";\n\nconst tokenTypeKey = \"tokenType\";\n\nconst accessTokenKey = \"accessToken\";\n\nconst refreshTokenKey = \"refreshToken\";\n\nconst expiryDateKey = \"expiryDate\";\n\nconst userIdKey = \"userId\";\n\nconst schema = {\n  tokenType: {\n    type: \"string\",\n  },\n\n  accessToken: {\n    type: \"string\",\n  },\n\n  refreshToken: {\n    type: \"string\",\n  },\n\n  expiryDate: {\n    type: \"number\",\n  },\n\n  userId: {\n    type: \"string\",\n  },\n};\n\ntype StoreType = {\n  tokenType: string;\n  accessToken: string;\n  refreshToken: string;\n  expiryDate: number;\n  userId: string;\n};\n\nconst storeInstance: Store<StoreType> = new Store<StoreType>({\n  name: \"authentication-nextcloud-main\",\n  schema,\n  // TODO: add encryption key\n});\n\nfunction setTokenType(value: string, mode: string): void {\n  storeInstance.set(`${tokenTypeKey}-${mode}`, value);\n}\n\nfunction setAccessToken(value: string, mode: string): void {\n  storeInstance.set(`${accessTokenKey}-${mode}`, value);\n}\n\nfunction setRefreshToken(value: string, mode: string): void {\n  storeInstance.set(`${refreshTokenKey}-${mode}`, value);\n}\n\nfunction setExpiryDate(value: number, mode: string): void {\n  storeInstance.set(`${expiryDateKey}-${mode}`, value);\n}\n\nfunction setUserId(value: string, mode: string): void {\n  storeInstance.set(`${userIdKey}-${mode}`, value);\n}\n\nfunction getTokenType(mode: string): string {\n  return storeInstance.get(`${tokenTypeKey}-${mode}`);\n}\n\nfunction getAccessToken(mode: string): string {\n  return storeInstance.get(`${accessTokenKey}-${mode}`);\n}\n\nfunction getRefreshToken(mode: string): string {\n  return storeInstance.get(`${refreshTokenKey}-${mode}`);\n}\n\nfunction getExpiryDate(mode: string): number {\n  return storeInstance.get(`${expiryDateKey}-${mode}`);\n}\n\nfunction getUserId(mode: string): string {\n  return storeInstance.get(`${userIdKey}-${mode}`);\n}\n\nfunction deleteTokenType(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${tokenTypeKey}-${mode}`);\n}\n\nfunction deleteAccessToken(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${accessTokenKey}-${mode}`);\n}\n\nfunction deleteRefreshToken(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${refreshTokenKey}-${mode}`);\n}\n\nfunction deleteExpiryDate(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${expiryDateKey}-${mode}`);\n}\n\nfunction deleteUserId(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${userIdKey}-${mode}`);\n}\n\nexport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n};\n","/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n} from \"./storage.js\";\nimport axios from \"axios\";\nimport { BrowserWindow, ipcMain, shell } from \"electron\";\nimport type { UserDetails } from \"@xwiki/cristal-authentication-api\";\n\nconst callbackUrl = \"http://callback/\";\n\nasync function getTokenFromCallbackCode(\n  code: string,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  const tokenUrl = new URL(`${authenticationBaseUrl}/token`);\n  tokenUrl.searchParams.set(\"base_url\", baseUrl);\n  tokenUrl.searchParams.set(\"code\", code);\n  tokenUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n  const response = await axios.get(tokenUrl.toString());\n  setTokenType(response.data.token_type, \"oauth2\");\n  setAccessToken(response.data.access_token, \"oauth2\");\n  setRefreshToken(response.data.refresh_token, \"oauth2\");\n  // We apply a safety margin of 10s to the expiration date.\n  setExpiryDate(Date.now() + (response.data.expires_in - 10) * 1000, \"oauth2\");\n  setUserId(response.data.user_id, \"oauth2\");\n}\n\nfunction initAuth(\n  win: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  win.webContents.session.webRequest.onBeforeRequest(\n    {\n      urls: [`${callbackUrl}*`],\n    },\n    async ({ url }, callback) => {\n      if (url.startsWith(authenticationBaseUrl)) {\n        // Allow for the redirects from the oidc server to be performed without being blocked.\n        callback({ cancel: false });\n      } else {\n        const parsedURL = new URL(url);\n        await getTokenFromCallbackCode(\n          parsedURL.searchParams.get(\"code\")!,\n          baseUrl,\n          authenticationBaseUrl,\n        );\n        mainWin.show();\n        reload(mainWin);\n        win?.close();\n      }\n    },\n  );\n}\n\nasync function createWindow(url: string) {\n  const win = new BrowserWindow({\n    width: 800,\n    height: 600,\n    webPreferences: {\n      nodeIntegration: false,\n    },\n  });\n\n  win.setMenu(null);\n\n  await win.loadURL(url);\n\n  return win;\n}\n\nlet authWin: BrowserWindow;\nlet mainWin: BrowserWindow;\n\n/**\n * @param browserWindow - the browser window to use for the authentication process\n * @param reload - the reload function\n *\n * @since 0.16\n * @beta\n */\nexport function load(\n  browserWindow: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n): void {\n  ipcMain.handle(\n    \"authentication:nextcloud:loginOauth2\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: {\n        baseUrl: string;\n        authenticationBaseUrl: string;\n      },\n    ): Promise<void> => {\n      const authorizationUrl = new URL(`${authenticationBaseUrl}/authorize`);\n      authorizationUrl.searchParams.set(\"base_url\", baseUrl);\n      authorizationUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n      // Save the window asking for login (i.e., the main window), before creating\n      // a new windows for the oidc web page. Then, hide the main window for the\n      // duration of the authentication process.\n      mainWin = browserWindow;\n      authWin = await createWindow(authorizationUrl.toString());\n\n      initAuth(authWin, reload, baseUrl, authenticationBaseUrl);\n      mainWin.hide();\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginBasic\",\n    async (\n      _event,\n      {\n        username,\n        password,\n      }: {\n        username: string;\n        password: string;\n      },\n    ): Promise<void> => {\n      setAccessToken(btoa(`${username}:${password}`), \"basic\");\n      setTokenType(\"Basic\", \"basic\");\n      setUserId(username, \"basic\");\n      // We reload the content on successful login.\n      reload(browserWindow);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginFlow\",\n    async (\n      _event,\n      {\n        baseUrl,\n      }: {\n        baseUrl: string;\n      },\n    ): Promise<void> => {\n      const loginFlowUrl = `${baseUrl}/index.php/login/v2`;\n\n      const loginFlowResponse = await fetch(loginFlowUrl, { method: \"POST\" });\n      const jsonLoginFlowResponse: {\n        poll: { token: string; endpoint: string };\n        login: string;\n      } = await loginFlowResponse.json();\n\n      shell.openExternal(jsonLoginFlowResponse.login);\n\n      // This interval handles polling Nextcloud for the access token.\n      // It will return a 404 error until the login process has succeeded.\n      const intervalId = setInterval(async () => {\n        const response = await fetch(jsonLoginFlowResponse.poll.endpoint, {\n          method: \"POST\",\n          body: new URLSearchParams({\n            token: jsonLoginFlowResponse.poll.token,\n          }),\n          headers: {\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n          },\n        });\n        if (response.ok) {\n          const jsonResponse: {\n            loginName: string;\n            appPassword: string;\n          } = await response.json();\n          setAccessToken(\n            btoa(`${jsonResponse.loginName}:${jsonResponse.appPassword}`),\n            \"login-flow\",\n          );\n          setTokenType(\"Basic\", \"login-flow\");\n          setUserId(jsonResponse.loginName, \"login-flow\");\n          clearInterval(intervalId);\n          // We reload the content on successful login.\n          reload(browserWindow);\n        }\n      }, 3000);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:isLoggedIn\",\n    async (_event, { mode }: { mode: string }) => {\n      const tokenType = getTokenType(mode);\n      const accessTokenKey = getAccessToken(mode);\n      return tokenType && accessTokenKey;\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:userDetails\",\n    async (\n      _event,\n      { baseUrl, mode }: { baseUrl: string; mode: string },\n    ): Promise<UserDetails> => {\n      const userId = getUserId(mode);\n      return {\n        profile: `${baseUrl}/u/${userId}`,\n        username: userId,\n        name: userId!, // TODO: Find a way to get the display name (CRISTAL-589).\n        avatar: `${baseUrl}/avatar/${userId}/64`, // We want the 64x64 avatar.\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:authorizationValue\",\n    async (_event, { mode }: { mode: string }) => {\n      return {\n        tokenType: getTokenType(mode),\n        accessToken: getAccessToken(mode),\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:logout\",\n    async (_event, { mode }: { mode: string }): Promise<void> => {\n      deleteAccessToken(mode);\n      deleteTokenType(mode);\n      deleteRefreshToken(mode);\n      deleteExpiryDate(mode);\n      deleteUserId(mode);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:refreshToken\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: { baseUrl: string; authenticationBaseUrl: string },\n    ): Promise<void> => {\n      if (Date.now() > getExpiryDate(\"oauth2\")) {\n        const refreshUrl = new URL(`${authenticationBaseUrl}/refresh`);\n        refreshUrl.searchParams.set(\"base_url\", baseUrl);\n        refreshUrl.searchParams.set(\"refresh_token\", getRefreshToken(\"oauth2\"));\n\n        const {\n          data: {\n            access_token: accessToken,\n            refresh_token: refreshToken,\n            expires_in: expiresIn,\n          },\n        } = await axios.get(refreshUrl.toString());\n\n        setAccessToken(accessToken, \"oauth2\");\n        setRefreshToken(refreshToken, \"oauth2\");\n        // We apply a safety margin of 10s to the expiration date.\n        setExpiryDate(Date.now() + (expiresIn - 10) * 1000, \"oauth2\");\n      }\n    },\n  );\n}\n"],"names":["tokenTypeKey","accessTokenKey","refreshTokenKey","expiryDateKey","userIdKey","schema","storeInstance","Store","setTokenType","value","mode","setAccessToken","setRefreshToken","setExpiryDate","setUserId","getTokenType","getAccessToken","getRefreshToken","getExpiryDate","getUserId","deleteTokenType","deleteAccessToken","deleteRefreshToken","deleteExpiryDate","deleteUserId","callbackUrl","getTokenFromCallbackCode","code","baseUrl","authenticationBaseUrl","tokenUrl","response","axios","initAuth","win","reload","url","callback","parsedURL","mainWin","createWindow","BrowserWindow","authWin","load","browserWindow","ipcMain","_event","authorizationUrl","username","password","loginFlowUrl","jsonLoginFlowResponse","shell","intervalId","jsonResponse","tokenType","userId","refreshUrl","accessToken","refreshToken","expiresIn"],"mappings":";;;AAsBA,MAAMA,IAAe,aAEfC,IAAiB,eAEjBC,IAAkB,gBAElBC,IAAgB,cAEhBC,IAAY,UAEZC,IAAS;AAAA,EACb,WAAW;AAAA,IACT,MAAM;AAAA,EAAA;AAAA,EAGR,aAAa;AAAA,IACX,MAAM;AAAA,EAAA;AAAA,EAGR,cAAc;AAAA,IACZ,MAAM;AAAA,EAAA;AAAA,EAGR,YAAY;AAAA,IACV,MAAM;AAAA,EAAA;AAAA,EAGR,QAAQ;AAAA,IACN,MAAM;AAAA,EAAA;AAEV,GAUMC,IAAkC,IAAIC,EAAiB;AAAA,EAC3D,MAAM;AAAA,EACN,QAAAF;AAAA;AAEF,CAAC;AAED,SAASG,EAAaC,GAAeC,GAAoB;AACvD,EAAAJ,EAAc,IAAI,GAAGN,CAAY,IAAIU,CAAI,IAAID,CAAK;AACpD;AAEA,SAASE,EAAeF,GAAeC,GAAoB;AACzD,EAAAJ,EAAc,IAAI,GAAGL,CAAc,IAAIS,CAAI,IAAID,CAAK;AACtD;AAEA,SAASG,EAAgBH,GAAeC,GAAoB;AAC1D,EAAAJ,EAAc,IAAI,GAAGJ,CAAe,IAAIQ,CAAI,IAAID,CAAK;AACvD;AAEA,SAASI,EAAcJ,GAAeC,GAAoB;AACxD,EAAAJ,EAAc,IAAI,GAAGH,CAAa,IAAIO,CAAI,IAAID,CAAK;AACrD;AAEA,SAASK,EAAUL,GAAeC,GAAoB;AACpD,EAAAJ,EAAc,IAAI,GAAGF,CAAS,IAAIM,CAAI,IAAID,CAAK;AACjD;AAEA,SAASM,EAAaL,GAAsB;AAC1C,SAAOJ,EAAc,IAAI,GAAGN,CAAY,IAAIU,CAAI,EAAE;AACpD;AAEA,SAASM,EAAeN,GAAsB;AAC5C,SAAOJ,EAAc,IAAI,GAAGL,CAAc,IAAIS,CAAI,EAAE;AACtD;AAEA,SAASO,EAAgBP,GAAsB;AAC7C,SAAOJ,EAAc,IAAI,GAAGJ,CAAe,IAAIQ,CAAI,EAAE;AACvD;AAEA,SAASQ,EAAcR,GAAsB;AAC3C,SAAOJ,EAAc,IAAI,GAAGH,CAAa,IAAIO,CAAI,EAAE;AACrD;AAEA,SAASS,EAAUT,GAAsB;AACvC,SAAOJ,EAAc,IAAI,GAAGF,CAAS,IAAIM,CAAI,EAAE;AACjD;AAEA,SAASU,EAAgBV,GAAoB;AAE3C,EAAAJ,EAAc,OAAO,GAAGN,CAAY,IAAIU,CAAI,EAAE;AAChD;AAEA,SAASW,EAAkBX,GAAoB;AAE7C,EAAAJ,EAAc,OAAO,GAAGL,CAAc,IAAIS,CAAI,EAAE;AAClD;AAEA,SAASY,EAAmBZ,GAAoB;AAE9C,EAAAJ,EAAc,OAAO,GAAGJ,CAAe,IAAIQ,CAAI,EAAE;AACnD;AAEA,SAASa,EAAiBb,GAAoB;AAE5C,EAAAJ,EAAc,OAAO,GAAGH,CAAa,IAAIO,CAAI,EAAE;AACjD;AAEA,SAASc,EAAad,GAAoB;AAExC,EAAAJ,EAAc,OAAO,GAAGF,CAAS,IAAIM,CAAI,EAAE;AAC7C;AC1FA,MAAMe,IAAc;AAEpB,eAAeC,EACbC,GACAC,GACAC,GACA;AACA,QAAMC,IAAW,IAAI,IAAI,GAAGD,CAAqB,QAAQ;AACzD,EAAAC,EAAS,aAAa,IAAI,YAAYF,CAAO,GAC7CE,EAAS,aAAa,IAAI,QAAQH,CAAI,GACtCG,EAAS,aAAa,IAAI,gBAAgBL,CAAW;AACrD,QAAMM,IAAW,MAAMC,EAAM,IAAIF,EAAS,UAAU;AACpD,EAAAtB,EAAauB,EAAS,KAAK,YAAY,QAAQ,GAC/CpB,EAAeoB,EAAS,KAAK,cAAc,QAAQ,GACnDnB,EAAgBmB,EAAS,KAAK,eAAe,QAAQ,GAErDlB,EAAc,KAAK,SAASkB,EAAS,KAAK,aAAa,MAAM,KAAM,QAAQ,GAC3EjB,EAAUiB,EAAS,KAAK,SAAS,QAAQ;AAC3C;AAEA,SAASE,EACPC,GACAC,GACAP,GACAC,GACA;AACA,EAAAK,EAAI,YAAY,QAAQ,WAAW;AAAA,IACjC;AAAA,MACE,MAAM,CAAC,GAAGT,CAAW,GAAG;AAAA,IAAA;AAAA,IAE1B,OAAO,EAAE,KAAAW,EAAA,GAAOC,MAAa;AAC3B,UAAID,EAAI,WAAWP,CAAqB;AAEtC,QAAAQ,EAAS,EAAE,QAAQ,IAAO;AAAA,WACrB;AACL,cAAMC,IAAY,IAAI,IAAIF,CAAG;AAC7B,cAAMV;AAAA,UACJY,EAAU,aAAa,IAAI,MAAM;AAAA,UACjCV;AAAA,UACAC;AAAA,QAAA,GAEFU,EAAQ,KAAA,GACRJ,EAAOI,CAAO,GACdL,GAAK,MAAA;AAAA,MACP;AAAA,IACF;AAAA,EAAA;AAEJ;AAEA,eAAeM,EAAaJ,GAAa;AACvC,QAAMF,IAAM,IAAIO,EAAc;AAAA,IAC5B,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,gBAAgB;AAAA,MACd,iBAAiB;AAAA,IAAA;AAAA,EACnB,CACD;AAED,SAAAP,EAAI,QAAQ,IAAI,GAEhB,MAAMA,EAAI,QAAQE,CAAG,GAEdF;AACT;AAEA,IAAIQ,GACAH;AASG,SAASI,EACdC,GACAT,GACM;AACN,EAAAU,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,MACA,uBAAAC;AAAA,IAAA,MAKgB;AAClB,YAAMkB,IAAmB,IAAI,IAAI,GAAGlB,CAAqB,YAAY;AACrE,MAAAkB,EAAiB,aAAa,IAAI,YAAYnB,CAAO,GACrDmB,EAAiB,aAAa,IAAI,gBAAgBtB,CAAW,GAI7Dc,IAAUK,GACVF,IAAU,MAAMF,EAAaO,EAAiB,SAAA,CAAU,GAExDd,EAASS,GAASP,GAAQP,GAASC,CAAqB,GACxDU,EAAQ,KAAA;AAAA,IACV;AAAA,EAAA,GAGFM,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,UAAAE;AAAA,MACA,UAAAC;AAAA,IAAA,MAKgB;AAClB,MAAAtC,EAAe,KAAK,GAAGqC,CAAQ,IAAIC,CAAQ,EAAE,GAAG,OAAO,GACvDzC,EAAa,SAAS,OAAO,GAC7BM,EAAUkC,GAAU,OAAO,GAE3Bb,EAAOS,CAAa;AAAA,IACtB;AAAA,EAAA,GAGFC,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,IAAA,MAIgB;AAClB,YAAMsB,IAAe,GAAGtB,CAAO,uBAGzBuB,IAGF,OAJsB,MAAM,MAAMD,GAAc,EAAE,QAAQ,QAAQ,GAI1C,KAAA;AAE5B,MAAAE,EAAM,aAAaD,EAAsB,KAAK;AAI9C,YAAME,IAAa,YAAY,YAAY;AACzC,cAAMtB,IAAW,MAAM,MAAMoB,EAAsB,KAAK,UAAU;AAAA,UAChE,QAAQ;AAAA,UACR,MAAM,IAAI,gBAAgB;AAAA,YACxB,OAAOA,EAAsB,KAAK;AAAA,UAAA,CACnC;AAAA,UACD,SAAS;AAAA,YACP,gBAAgB;AAAA,UAAA;AAAA,QAClB,CACD;AACD,YAAIpB,EAAS,IAAI;AACf,gBAAMuB,IAGF,MAAMvB,EAAS,KAAA;AACnB,UAAApB;AAAA,YACE,KAAK,GAAG2C,EAAa,SAAS,IAAIA,EAAa,WAAW,EAAE;AAAA,YAC5D;AAAA,UAAA,GAEF9C,EAAa,SAAS,YAAY,GAClCM,EAAUwC,EAAa,WAAW,YAAY,GAC9C,cAAcD,CAAU,GAExBlB,EAAOS,CAAa;AAAA,QACtB;AAAA,MACF,GAAG,GAAI;AAAA,IACT;AAAA,EAAA,GAGFC,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAApC,QAA6B;AAC5C,YAAM6C,IAAYxC,EAAaL,CAAI,GAC7BT,IAAiBe,EAAeN,CAAI;AAC1C,aAAO6C,KAAatD;AAAA,IACtB;AAAA,EAAA,GAGF4C,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA,EAAE,SAAAlB,GAAS,MAAAlB,QACc;AACzB,YAAM8C,IAASrC,EAAUT,CAAI;AAC7B,aAAO;AAAA,QACL,SAAS,GAAGkB,CAAO,MAAM4B,CAAM;AAAA,QAC/B,UAAUA;AAAA,QACV,MAAMA;AAAA;AAAA,QACN,QAAQ,GAAG5B,CAAO,WAAW4B,CAAM;AAAA;AAAA,MAAA;AAAA,IAEvC;AAAA,EAAA,GAGFX,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAApC,SACR;AAAA,MACL,WAAWK,EAAaL,CAAI;AAAA,MAC5B,aAAaM,EAAeN,CAAI;AAAA,IAAA;AAAA,EAEpC,GAGFmC,EAAQ;AAAA,IACN;AAAA,IACA,OAAOC,GAAQ,EAAE,MAAApC,QAA4C;AAC3D,MAAAW,EAAkBX,CAAI,GACtBU,EAAgBV,CAAI,GACpBY,EAAmBZ,CAAI,GACvBa,EAAiBb,CAAI,GACrBc,EAAad,CAAI;AAAA,IACnB;AAAA,EAAA,GAGFmC,EAAQ;AAAA,IACN;AAAA,IACA,OACEC,GACA;AAAA,MACE,SAAAlB;AAAA,MACA,uBAAAC;AAAA,IAAA,MAEgB;AAClB,UAAI,KAAK,IAAA,IAAQX,EAAc,QAAQ,GAAG;AACxC,cAAMuC,IAAa,IAAI,IAAI,GAAG5B,CAAqB,UAAU;AAC7D,QAAA4B,EAAW,aAAa,IAAI,YAAY7B,CAAO,GAC/C6B,EAAW,aAAa,IAAI,iBAAiBxC,EAAgB,QAAQ,CAAC;AAEtE,cAAM;AAAA,UACJ,MAAM;AAAA,YACJ,cAAcyC;AAAA,YACd,eAAeC;AAAA,YACf,YAAYC;AAAA,UAAA;AAAA,QACd,IACE,MAAM5B,EAAM,IAAIyB,EAAW,UAAU;AAEzC,QAAA9C,EAAe+C,GAAa,QAAQ,GACpC9C,EAAgB+C,GAAc,QAAQ,GAEtC9C,EAAc,KAAK,IAAA,KAAS+C,IAAY,MAAM,KAAM,QAAQ;AAAA,MAC9D;AAAA,IACF;AAAA,EAAA;AAEJ;"}

package/dist/index.umd.js

@@ -1,2 +1,2 @@
-(function(c,u){typeof exports=="object"&&typeof module<"u"?u(exports,require("electron-store"),require("axios"),require("electron")):typeof define=="function"&&define.amd?define(["exports","electron-store","axios","electron"],u):(c=typeof globalThis<"u"?globalThis:c||self,u(c["cristal_authentication-nextcloud-main"]={},c.Store,c.axios,c.electron))})(this,function(c,u,P,i){"use strict";const k="tokenType",g="accessToken",w="refreshToken",T="expiryDate",x="userId",S={tokenType:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},expiryDate:{type:"number"},userId:{type:"string"}},_=new u({name:"authentication-nextcloud-main",schema:S});function l(e,t,s){_.set(`${e}-${s}`,t)}function h(e,t){return _.get(`${e}-${t}`)}function d(e,t){_.delete(`${e}-${t}`)}function m(e,t){l(k,e,t)}function f(e,t){l(g,e,t)}function b(e,t){l(w,e,t)}function U(e,t){l(T,e,t)}function $(e,t){l(x,e,t)}function D(e){return h(k,e)}function M(e){return h(g,e)}function j(e){return h(w,e)}function F(e){return h(T,e)}function K(e){return h(x,e)}function q(e){d(k,e)}function A(e){d(g,e)}function C(e){d(w,e)}function E(e){d(T,e)}function O(e){d(x,e)}const R="http://callback/";async function z(e,t,s){const n=new URL(`${s}/token`);n.searchParams.set("base_url",t),n.searchParams.set("code",e),n.searchParams.set("redirect_uri",R);const o=await P.get(n.toString());m(o.data.token_type,"oauth2"),f(o.data.access_token,"oauth2"),b(o.data.refresh_token,"oauth2"),U(Date.now()+(o.data.expires_in-10)*1e3,"oauth2"),$(o.data.user_id,"oauth2")}function B(e,t,s,n){e.webContents.session.webRequest.onBeforeRequest({urls:[`${R}*`]},async({url:o},a)=>{if(o.startsWith(n))a({cancel:!1});else{const r=new URL(o);await z(r.searchParams.get("code"),s,n),p.show(),t(p),e?.close()}})}async function W(e){const t=new i.BrowserWindow({width:800,height:600,webPreferences:{nodeIntegration:!1}});return t.setMenu(null),await t.loadURL(e),t}let L,p;function N(e,t){i.ipcMain.handle("authentication:nextcloud:loginOauth2",async(s,{baseUrl:n,authenticationBaseUrl:o})=>{const a=new URL(`${o}/authorize`);a.searchParams.set("base_url",n),a.searchParams.set("redirect_uri",R),p=e,L=await W(a.toString()),B(L,t,n,o),p.hide()}),i.ipcMain.handle("authentication:nextcloud:loginBasic",async(s,{username:n,password:o})=>{f(btoa(`${n}:${o}`),"basic"),m("Basic","basic"),$(n,"basic"),t(e)}),i.ipcMain.handle("authentication:nextcloud:loginFlow",async(s,{baseUrl:n})=>{const o=`${n}/index.php/login/v2`,r=await(await fetch(o,{method:"POST"})).json();i.shell.openExternal(r.login);const v=setInterval(async()=>{const y=await fetch(r.poll.endpoint,{method:"POST",body:new URLSearchParams({token:r.poll.token}),headers:{"Content-Type":"application/x-www-form-urlencoded"}});if(y.ok){const I=await y.json();f(btoa(`${I.loginName}:${I.appPassword}`),"login-flow"),m("Basic","login-flow"),$(I.loginName,"login-flow"),clearInterval(v),t(e)}},3e3)}),i.ipcMain.handle("authentication:nextcloud:isLoggedIn",async(s,{mode:n})=>{const o=D(n),a=M(n);return o&&a}),i.ipcMain.handle("authentication:nextcloud:userDetails",async(s,{baseUrl:n,mode:o})=>{const a=K(o);return{profile:`${n}/u/${a}`,username:a,name:a,avatar:`${n}/avatar/${a}/64`}}),i.ipcMain.handle("authentication:nextcloud:authorizationValue",async(s,{mode:n})=>({tokenType:D(n),accessToken:M(n)})),i.ipcMain.handle("authentication:nextcloud:logout",async(s,{mode:n})=>{A(n),q(n),C(n),E(n),O(n)}),i.ipcMain.handle("authentication:nextcloud:refreshToken",async(s,{baseUrl:n,authenticationBaseUrl:o})=>{if(Date.now()>F("oauth2")){const a=new URL(`${o}/refresh`);a.searchParams.set("base_url",n),a.searchParams.set("refresh_token",j("oauth2"));const{data:{access_token:r,refresh_token:v,expires_in:y}}=await P.get(a.toString());f(r,"oauth2"),b(v,"oauth2"),U(Date.now()+(y-10)*1e3,"oauth2")}})}c.load=N,Object.defineProperty(c,Symbol.toStringTag,{value:"Module"})});
+(function(r,l){typeof exports=="object"&&typeof module<"u"?l(exports,require("electron-store"),require("axios"),require("electron")):typeof define=="function"&&define.amd?define(["exports","electron-store","axios","electron"],l):(r=typeof globalThis<"u"?globalThis:r||self,l(r["cristal_authentication-nextcloud-main"]={},r.Store,r.axios,r.electron))})(this,(function(r,l,R,c){"use strict";const p="tokenType",y="accessToken",$="refreshToken",k="expiryDate",g="userId",D={tokenType:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},expiryDate:{type:"number"},userId:{type:"string"}},s=new l({name:"authentication-nextcloud-main",schema:D});function w(e,n){s.set(`${p}-${n}`,e)}function h(e,n){s.set(`${y}-${n}`,e)}function v(e,n){s.set(`${$}-${n}`,e)}function I(e,n){s.set(`${k}-${n}`,e)}function T(e,n){s.set(`${g}-${n}`,e)}function P(e){return s.get(`${p}-${e}`)}function b(e){return s.get(`${y}-${e}`)}function M(e){return s.get(`${$}-${e}`)}function L(e){return s.get(`${k}-${e}`)}function S(e){return s.get(`${g}-${e}`)}function j(e){s.delete(`${p}-${e}`)}function F(e){s.delete(`${y}-${e}`)}function K(e){s.delete(`${$}-${e}`)}function q(e){s.delete(`${k}-${e}`)}function A(e){s.delete(`${g}-${e}`)}const x="http://callback/";async function C(e,n,i){const t=new URL(`${i}/token`);t.searchParams.set("base_url",n),t.searchParams.set("code",e),t.searchParams.set("redirect_uri",x);const o=await R.get(t.toString());w(o.data.token_type,"oauth2"),h(o.data.access_token,"oauth2"),v(o.data.refresh_token,"oauth2"),I(Date.now()+(o.data.expires_in-10)*1e3,"oauth2"),T(o.data.user_id,"oauth2")}function E(e,n,i,t){e.webContents.session.webRequest.onBeforeRequest({urls:[`${x}*`]},async({url:o},a)=>{if(o.startsWith(t))a({cancel:!1});else{const u=new URL(o);await C(u.searchParams.get("code"),i,t),d.show(),n(d),e?.close()}})}async function O(e){const n=new c.BrowserWindow({width:800,height:600,webPreferences:{nodeIntegration:!1}});return n.setMenu(null),await n.loadURL(e),n}let U,d;function z(e,n){c.ipcMain.handle("authentication:nextcloud:loginOauth2",async(i,{baseUrl:t,authenticationBaseUrl:o})=>{const a=new URL(`${o}/authorize`);a.searchParams.set("base_url",t),a.searchParams.set("redirect_uri",x),d=e,U=await O(a.toString()),E(U,n,t,o),d.hide()}),c.ipcMain.handle("authentication:nextcloud:loginBasic",async(i,{username:t,password:o})=>{h(btoa(`${t}:${o}`),"basic"),w("Basic","basic"),T(t,"basic"),n(e)}),c.ipcMain.handle("authentication:nextcloud:loginFlow",async(i,{baseUrl:t})=>{const o=`${t}/index.php/login/v2`,u=await(await fetch(o,{method:"POST"})).json();c.shell.openExternal(u.login);const _=setInterval(async()=>{const f=await fetch(u.poll.endpoint,{method:"POST",body:new URLSearchParams({token:u.poll.token}),headers:{"Content-Type":"application/x-www-form-urlencoded"}});if(f.ok){const m=await f.json();h(btoa(`${m.loginName}:${m.appPassword}`),"login-flow"),w("Basic","login-flow"),T(m.loginName,"login-flow"),clearInterval(_),n(e)}},3e3)}),c.ipcMain.handle("authentication:nextcloud:isLoggedIn",async(i,{mode:t})=>{const o=P(t),a=b(t);return o&&a}),c.ipcMain.handle("authentication:nextcloud:userDetails",async(i,{baseUrl:t,mode:o})=>{const a=S(o);return{profile:`${t}/u/${a}`,username:a,name:a,avatar:`${t}/avatar/${a}/64`}}),c.ipcMain.handle("authentication:nextcloud:authorizationValue",async(i,{mode:t})=>({tokenType:P(t),accessToken:b(t)})),c.ipcMain.handle("authentication:nextcloud:logout",async(i,{mode:t})=>{F(t),j(t),K(t),q(t),A(t)}),c.ipcMain.handle("authentication:nextcloud:refreshToken",async(i,{baseUrl:t,authenticationBaseUrl:o})=>{if(Date.now()>L("oauth2")){const a=new URL(`${o}/refresh`);a.searchParams.set("base_url",t),a.searchParams.set("refresh_token",M("oauth2"));const{data:{access_token:u,refresh_token:_,expires_in:f}}=await R.get(a.toString());h(u,"oauth2"),v(_,"oauth2"),I(Date.now()+(f-10)*1e3,"oauth2")}})}r.load=z,Object.defineProperty(r,Symbol.toStringTag,{value:"Module"})}));
 //# sourceMappingURL=index.umd.js.map

package/dist/index.umd.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.umd.js","sources":["../src/storage.ts","../src/index.ts"],"sourcesContent":["/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport Store from \"electron-store\";\n\nconst tokenTypeKey = \"tokenType\";\n\nconst accessTokenKey = \"accessToken\";\n\nconst refreshTokenKey = \"refreshToken\";\n\nconst expiryDateKey = \"expiryDate\";\n\nconst userIdKey = \"userId\";\n\nconst schema = {\n  tokenType: {\n    type: \"string\",\n  },\n\n  accessToken: {\n    type: \"string\",\n  },\n\n  refreshToken: {\n    type: \"string\",\n  },\n\n  expiryDate: {\n    type: \"number\",\n  },\n\n  userId: {\n    type: \"string\",\n  },\n};\n\nconst storeInstance: Store = new Store({\n  name: \"authentication-nextcloud-main\",\n  schema,\n  // TODO: add encryption key\n});\n\nfunction set<T>(key: string, value: T, mode: string) {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  storeInstance.set(`${key}-${mode}`, value);\n}\n\nfunction get<T>(key: string, mode: string): T {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  return storeInstance.get(`${key}-${mode}`) as T;\n}\n\nfunction rm(key: string, mode: string) {\n  // @ts-expect-error type resolution failing because of electron-store library bug\n  storeInstance.delete(`${key}-${mode}`);\n}\n\nfunction setTokenType(value: string, mode: string): void {\n  set(tokenTypeKey, value, mode);\n}\n\nfunction setAccessToken(value: string, mode: string): void {\n  set(accessTokenKey, value, mode);\n}\n\nfunction setRefreshToken(value: string, mode: string): void {\n  set(refreshTokenKey, value, mode);\n}\n\nfunction setExpiryDate(value: number, mode: string): void {\n  set(expiryDateKey, value, mode);\n}\n\nfunction setUserId(value: string, mode: string): void {\n  set(userIdKey, value, mode);\n}\n\nfunction getTokenType(mode: string): string {\n  return get(tokenTypeKey, mode);\n}\n\nfunction getAccessToken(mode: string): string {\n  return get(accessTokenKey, mode);\n}\n\nfunction getRefreshToken(mode: string): string {\n  return get(refreshTokenKey, mode);\n}\n\nfunction getExpiryDate(mode: string): number {\n  return get(expiryDateKey, mode);\n}\n\nfunction getUserId(mode: string): string {\n  return get(userIdKey, mode);\n}\n\nfunction deleteTokenType(mode: string): void {\n  rm(tokenTypeKey, mode);\n}\n\nfunction deleteAccessToken(mode: string): void {\n  rm(accessTokenKey, mode);\n}\n\nfunction deleteRefreshToken(mode: string): void {\n  rm(refreshTokenKey, mode);\n}\n\nfunction deleteExpiryDate(mode: string): void {\n  rm(expiryDateKey, mode);\n}\n\nfunction deleteUserId(mode: string): void {\n  rm(userIdKey, mode);\n}\n\nexport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n};\n","/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n} from \"./storage.js\";\nimport { UserDetails } from \"@xwiki/cristal-authentication-api\";\nimport axios from \"axios\";\nimport { BrowserWindow, ipcMain, shell } from \"electron\";\n\nconst callbackUrl = \"http://callback/\";\n\nasync function getTokenFromCallbackCode(\n  code: string,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  const tokenUrl = new URL(`${authenticationBaseUrl}/token`);\n  tokenUrl.searchParams.set(\"base_url\", baseUrl);\n  tokenUrl.searchParams.set(\"code\", code);\n  tokenUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n  const response = await axios.get(tokenUrl.toString());\n  setTokenType(response.data.token_type, \"oauth2\");\n  setAccessToken(response.data.access_token, \"oauth2\");\n  setRefreshToken(response.data.refresh_token, \"oauth2\");\n  // We apply a safety margin of 10s to the expiration date.\n  setExpiryDate(Date.now() + (response.data.expires_in - 10) * 1000, \"oauth2\");\n  setUserId(response.data.user_id, \"oauth2\");\n}\n\nfunction initAuth(\n  win: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  win.webContents.session.webRequest.onBeforeRequest(\n    {\n      urls: [`${callbackUrl}*`],\n    },\n    async ({ url }, callback) => {\n      if (url.startsWith(authenticationBaseUrl)) {\n        // Allow for the redirects from the oidc server to be performed without being blocked.\n        callback({ cancel: false });\n      } else {\n        const parsedURL = new URL(url);\n        await getTokenFromCallbackCode(\n          parsedURL.searchParams.get(\"code\")!,\n          baseUrl,\n          authenticationBaseUrl,\n        );\n        mainWin.show();\n        reload(mainWin);\n        win?.close();\n      }\n    },\n  );\n}\n\nasync function createWindow(url: string) {\n  const win = new BrowserWindow({\n    width: 800,\n    height: 600,\n    webPreferences: {\n      nodeIntegration: false,\n    },\n  });\n\n  win.setMenu(null);\n\n  await win.loadURL(url);\n\n  return win;\n}\n\nlet authWin: BrowserWindow;\nlet mainWin: BrowserWindow;\n\nexport function load(\n  browserWindow: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n): void {\n  ipcMain.handle(\n    \"authentication:nextcloud:loginOauth2\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: {\n        baseUrl: string;\n        authenticationBaseUrl: string;\n      },\n    ): Promise<void> => {\n      const authorizationUrl = new URL(`${authenticationBaseUrl}/authorize`);\n      authorizationUrl.searchParams.set(\"base_url\", baseUrl);\n      authorizationUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n      // Save the window asking for login (i.e., the main window), before creating\n      // a new windows for the oidc web page. Then, hide the main window for the\n      // duration of the authentication process.\n      mainWin = browserWindow;\n      authWin = await createWindow(authorizationUrl.toString());\n\n      initAuth(authWin, reload, baseUrl, authenticationBaseUrl);\n      mainWin.hide();\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginBasic\",\n    async (\n      _event,\n      {\n        username,\n        password,\n      }: {\n        username: string;\n        password: string;\n      },\n    ): Promise<void> => {\n      setAccessToken(btoa(`${username}:${password}`), \"basic\");\n      setTokenType(\"Basic\", \"basic\");\n      setUserId(username, \"basic\");\n      // We reload the content on successful login.\n      reload(browserWindow);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginFlow\",\n    async (\n      _event,\n      {\n        baseUrl,\n      }: {\n        baseUrl: string;\n      },\n    ): Promise<void> => {\n      const loginFlowUrl = `${baseUrl}/index.php/login/v2`;\n\n      const loginFlowResponse = await fetch(loginFlowUrl, { method: \"POST\" });\n      const jsonLoginFlowResponse: {\n        poll: { token: string; endpoint: string };\n        login: string;\n      } = await loginFlowResponse.json();\n\n      shell.openExternal(jsonLoginFlowResponse.login);\n\n      // This interval handles polling Nextcloud for the access token.\n      // It will return a 404 error until the login process has succeeded.\n      const intervalId = setInterval(async () => {\n        const response = await fetch(jsonLoginFlowResponse.poll.endpoint, {\n          method: \"POST\",\n          body: new URLSearchParams({\n            token: jsonLoginFlowResponse.poll.token,\n          }),\n          headers: {\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n          },\n        });\n        if (response.ok) {\n          const jsonResponse: {\n            loginName: string;\n            appPassword: string;\n          } = await response.json();\n          setAccessToken(\n            btoa(`${jsonResponse.loginName}:${jsonResponse.appPassword}`),\n            \"login-flow\",\n          );\n          setTokenType(\"Basic\", \"login-flow\");\n          setUserId(jsonResponse.loginName, \"login-flow\");\n          clearInterval(intervalId);\n          // We reload the content on successful login.\n          reload(browserWindow);\n        }\n      }, 3000);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:isLoggedIn\",\n    async (_event, { mode }: { mode: string }) => {\n      const tokenType = getTokenType(mode);\n      const accessTokenKey = getAccessToken(mode);\n      return tokenType && accessTokenKey;\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:userDetails\",\n    async (\n      _event,\n      { baseUrl, mode }: { baseUrl: string; mode: string },\n    ): Promise<UserDetails> => {\n      const userId = getUserId(mode);\n      return {\n        profile: `${baseUrl}/u/${userId}`,\n        username: userId,\n        name: userId!, // TODO: Find a way to get the display name (CRISTAL-589).\n        avatar: `${baseUrl}/avatar/${userId}/64`, // We want the 64x64 avatar.\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:authorizationValue\",\n    async (_event, { mode }: { mode: string }) => {\n      return {\n        tokenType: getTokenType(mode),\n        accessToken: getAccessToken(mode),\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:logout\",\n    async (_event, { mode }: { mode: string }): Promise<void> => {\n      deleteAccessToken(mode);\n      deleteTokenType(mode);\n      deleteRefreshToken(mode);\n      deleteExpiryDate(mode);\n      deleteUserId(mode);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:refreshToken\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: { baseUrl: string; authenticationBaseUrl: string },\n    ): Promise<void> => {\n      if (Date.now() > getExpiryDate(\"oauth2\")) {\n        const refreshUrl = new URL(`${authenticationBaseUrl}/refresh`);\n        refreshUrl.searchParams.set(\"base_url\", baseUrl);\n        refreshUrl.searchParams.set(\"refresh_token\", getRefreshToken(\"oauth2\"));\n\n        const {\n          data: {\n            access_token: accessToken,\n            refresh_token: refreshToken,\n            expires_in: expiresIn,\n          },\n        } = await axios.get(refreshUrl.toString());\n\n        setAccessToken(accessToken, \"oauth2\");\n        setRefreshToken(refreshToken, \"oauth2\");\n        // We apply a safety margin of 10s to the expiration date.\n        setExpiryDate(Date.now() + (expiresIn - 10) * 1000, \"oauth2\");\n      }\n    },\n  );\n}\n"],"names":["tokenTypeKey","accessTokenKey","refreshTokenKey","expiryDateKey","userIdKey","schema","storeInstance","Store","set","key","value","mode","get","rm","setTokenType","setAccessToken","setRefreshToken","setExpiryDate","setUserId","getTokenType","getAccessToken","getRefreshToken","getExpiryDate","getUserId","deleteTokenType","deleteAccessToken","deleteRefreshToken","deleteExpiryDate","deleteUserId","callbackUrl","getTokenFromCallbackCode","code","baseUrl","authenticationBaseUrl","tokenUrl","response","axios","initAuth","win","reload","url","callback","parsedURL","mainWin","createWindow","BrowserWindow","authWin","load","browserWindow","ipcMain","_event","authorizationUrl","username","password","loginFlowUrl","jsonLoginFlowResponse","shell","intervalId","jsonResponse","tokenType","userId","refreshUrl","accessToken","refreshToken","expiresIn"],"mappings":"oYAsBA,MAAMA,EAAe,YAEfC,EAAiB,cAEjBC,EAAkB,eAElBC,EAAgB,aAEhBC,EAAY,SAEZC,EAAS,CACb,UAAW,CACT,KAAM,QAAA,EAGR,YAAa,CACX,KAAM,QAAA,EAGR,aAAc,CACZ,KAAM,QAAA,EAGR,WAAY,CACV,KAAM,QAAA,EAGR,OAAQ,CACN,KAAM,QAAA,CAEV,EAEMC,EAAuB,IAAIC,EAAM,CACrC,KAAM,gCACN,OAAAF,CAEF,CAAC,EAED,SAASG,EAAOC,EAAaC,EAAUC,EAAc,CAEnDL,EAAc,IAAI,GAAGG,CAAG,IAAIE,CAAI,GAAID,CAAK,CAC3C,CAEA,SAASE,EAAOH,EAAaE,EAAiB,CAE5C,OAAOL,EAAc,IAAI,GAAGG,CAAG,IAAIE,CAAI,EAAE,CAC3C,CAEA,SAASE,EAAGJ,EAAaE,EAAc,CAErCL,EAAc,OAAO,GAAGG,CAAG,IAAIE,CAAI,EAAE,CACvC,CAEA,SAASG,EAAaJ,EAAeC,EAAoB,CACvDH,EAAIR,EAAcU,EAAOC,CAAI,CAC/B,CAEA,SAASI,EAAeL,EAAeC,EAAoB,CACzDH,EAAIP,EAAgBS,EAAOC,CAAI,CACjC,CAEA,SAASK,EAAgBN,EAAeC,EAAoB,CAC1DH,EAAIN,EAAiBQ,EAAOC,CAAI,CAClC,CAEA,SAASM,EAAcP,EAAeC,EAAoB,CACxDH,EAAIL,EAAeO,EAAOC,CAAI,CAChC,CAEA,SAASO,EAAUR,EAAeC,EAAoB,CACpDH,EAAIJ,EAAWM,EAAOC,CAAI,CAC5B,CAEA,SAASQ,EAAaR,EAAsB,CAC1C,OAAOC,EAAIZ,EAAcW,CAAI,CAC/B,CAEA,SAASS,EAAeT,EAAsB,CAC5C,OAAOC,EAAIX,EAAgBU,CAAI,CACjC,CAEA,SAASU,EAAgBV,EAAsB,CAC7C,OAAOC,EAAIV,EAAiBS,CAAI,CAClC,CAEA,SAASW,EAAcX,EAAsB,CAC3C,OAAOC,EAAIT,EAAeQ,CAAI,CAChC,CAEA,SAASY,EAAUZ,EAAsB,CACvC,OAAOC,EAAIR,EAAWO,CAAI,CAC5B,CAEA,SAASa,EAAgBb,EAAoB,CAC3CE,EAAGb,EAAcW,CAAI,CACvB,CAEA,SAASc,EAAkBd,EAAoB,CAC7CE,EAAGZ,EAAgBU,CAAI,CACzB,CAEA,SAASe,EAAmBf,EAAoB,CAC9CE,EAAGX,EAAiBS,CAAI,CAC1B,CAEA,SAASgB,EAAiBhB,EAAoB,CAC5CE,EAAGV,EAAeQ,CAAI,CACxB,CAEA,SAASiB,EAAajB,EAAoB,CACxCE,EAAGT,EAAWO,CAAI,CACpB,CC5FA,MAAMkB,EAAc,mBAEpB,eAAeC,EACbC,EACAC,EACAC,EACA,CACA,MAAMC,EAAW,IAAI,IAAI,GAAGD,CAAqB,QAAQ,EACzDC,EAAS,aAAa,IAAI,WAAYF,CAAO,EAC7CE,EAAS,aAAa,IAAI,OAAQH,CAAI,EACtCG,EAAS,aAAa,IAAI,eAAgBL,CAAW,EACrD,MAAMM,EAAW,MAAMC,EAAM,IAAIF,EAAS,UAAU,EACpDpB,EAAaqB,EAAS,KAAK,WAAY,QAAQ,EAC/CpB,EAAeoB,EAAS,KAAK,aAAc,QAAQ,EACnDnB,EAAgBmB,EAAS,KAAK,cAAe,QAAQ,EAErDlB,EAAc,KAAK,OAASkB,EAAS,KAAK,WAAa,IAAM,IAAM,QAAQ,EAC3EjB,EAAUiB,EAAS,KAAK,QAAS,QAAQ,CAC3C,CAEA,SAASE,EACPC,EACAC,EACAP,EACAC,EACA,CACAK,EAAI,YAAY,QAAQ,WAAW,gBACjC,CACE,KAAM,CAAC,GAAGT,CAAW,GAAG,CAAA,EAE1B,MAAO,CAAE,IAAAW,CAAA,EAAOC,IAAa,CAC3B,GAAID,EAAI,WAAWP,CAAqB,EAEtCQ,EAAS,CAAE,OAAQ,GAAO,MACrB,CACL,MAAMC,EAAY,IAAI,IAAIF,CAAG,EAC7B,MAAMV,EACJY,EAAU,aAAa,IAAI,MAAM,EACjCV,EACAC,CAAA,EAEFU,EAAQ,KAAA,EACRJ,EAAOI,CAAO,EACdL,GAAK,MAAA,CACP,CACF,CAAA,CAEJ,CAEA,eAAeM,EAAaJ,EAAa,CACvC,MAAMF,EAAM,IAAIO,gBAAc,CAC5B,MAAO,IACP,OAAQ,IACR,eAAgB,CACd,gBAAiB,EAAA,CACnB,CACD,EAED,OAAAP,EAAI,QAAQ,IAAI,EAEhB,MAAMA,EAAI,QAAQE,CAAG,EAEdF,CACT,CAEA,IAAIQ,EACAH,EAEG,SAASI,EACdC,EACAT,EACM,CACNU,EAAAA,QAAQ,OACN,uCACA,MACEC,EACA,CACE,QAAAlB,EACA,sBAAAC,CAAA,IAKgB,CAClB,MAAMkB,EAAmB,IAAI,IAAI,GAAGlB,CAAqB,YAAY,EACrEkB,EAAiB,aAAa,IAAI,WAAYnB,CAAO,EACrDmB,EAAiB,aAAa,IAAI,eAAgBtB,CAAW,EAI7Dc,EAAUK,EACVF,EAAU,MAAMF,EAAaO,EAAiB,SAAA,CAAU,EAExDd,EAASS,EAASP,EAAQP,EAASC,CAAqB,EACxDU,EAAQ,KAAA,CACV,CAAA,EAGFM,EAAAA,QAAQ,OACN,sCACA,MACEC,EACA,CACE,SAAAE,EACA,SAAAC,CAAA,IAKgB,CAClBtC,EAAe,KAAK,GAAGqC,CAAQ,IAAIC,CAAQ,EAAE,EAAG,OAAO,EACvDvC,EAAa,QAAS,OAAO,EAC7BI,EAAUkC,EAAU,OAAO,EAE3Bb,EAAOS,CAAa,CACtB,CAAA,EAGFC,EAAAA,QAAQ,OACN,qCACA,MACEC,EACA,CACE,QAAAlB,CAAA,IAIgB,CAClB,MAAMsB,EAAe,GAAGtB,CAAO,sBAGzBuB,EAGF,MAJsB,MAAM,MAAMD,EAAc,CAAE,OAAQ,OAAQ,GAI1C,KAAA,EAE5BE,QAAM,aAAaD,EAAsB,KAAK,EAI9C,MAAME,EAAa,YAAY,SAAY,CACzC,MAAMtB,EAAW,MAAM,MAAMoB,EAAsB,KAAK,SAAU,CAChE,OAAQ,OACR,KAAM,IAAI,gBAAgB,CACxB,MAAOA,EAAsB,KAAK,KAAA,CACnC,EACD,QAAS,CACP,eAAgB,mCAAA,CAClB,CACD,EACD,GAAIpB,EAAS,GAAI,CACf,MAAMuB,EAGF,MAAMvB,EAAS,KAAA,EACnBpB,EACE,KAAK,GAAG2C,EAAa,SAAS,IAAIA,EAAa,WAAW,EAAE,EAC5D,YAAA,EAEF5C,EAAa,QAAS,YAAY,EAClCI,EAAUwC,EAAa,UAAW,YAAY,EAC9C,cAAcD,CAAU,EAExBlB,EAAOS,CAAa,CACtB,CACF,EAAG,GAAI,CACT,CAAA,EAGFC,EAAAA,QAAQ,OACN,sCACA,MAAOC,EAAQ,CAAE,KAAAvC,KAA6B,CAC5C,MAAMgD,EAAYxC,EAAaR,CAAI,EAC7BV,EAAiBmB,EAAeT,CAAI,EAC1C,OAAOgD,GAAa1D,CACtB,CAAA,EAGFgD,EAAAA,QAAQ,OACN,uCACA,MACEC,EACA,CAAE,QAAAlB,EAAS,KAAArB,KACc,CACzB,MAAMiD,EAASrC,EAAUZ,CAAI,EAC7B,MAAO,CACL,QAAS,GAAGqB,CAAO,MAAM4B,CAAM,GAC/B,SAAUA,EACV,KAAMA,EACN,OAAQ,GAAG5B,CAAO,WAAW4B,CAAM,KAAA,CAEvC,CAAA,EAGFX,EAAAA,QAAQ,OACN,8CACA,MAAOC,EAAQ,CAAE,KAAAvC,MACR,CACL,UAAWQ,EAAaR,CAAI,EAC5B,YAAaS,EAAeT,CAAI,CAAA,EAEpC,EAGFsC,EAAAA,QAAQ,OACN,kCACA,MAAOC,EAAQ,CAAE,KAAAvC,KAA4C,CAC3Dc,EAAkBd,CAAI,EACtBa,EAAgBb,CAAI,EACpBe,EAAmBf,CAAI,EACvBgB,EAAiBhB,CAAI,EACrBiB,EAAajB,CAAI,CACnB,CAAA,EAGFsC,EAAAA,QAAQ,OACN,wCACA,MACEC,EACA,CACE,QAAAlB,EACA,sBAAAC,CAAA,IAEgB,CAClB,GAAI,KAAK,IAAA,EAAQX,EAAc,QAAQ,EAAG,CACxC,MAAMuC,EAAa,IAAI,IAAI,GAAG5B,CAAqB,UAAU,EAC7D4B,EAAW,aAAa,IAAI,WAAY7B,CAAO,EAC/C6B,EAAW,aAAa,IAAI,gBAAiBxC,EAAgB,QAAQ,CAAC,EAEtE,KAAM,CACJ,KAAM,CACJ,aAAcyC,EACd,cAAeC,EACf,WAAYC,CAAA,CACd,EACE,MAAM5B,EAAM,IAAIyB,EAAW,UAAU,EAEzC9C,EAAe+C,EAAa,QAAQ,EACpC9C,EAAgB+C,EAAc,QAAQ,EAEtC9C,EAAc,KAAK,IAAA,GAAS+C,EAAY,IAAM,IAAM,QAAQ,CAC9D,CACF,CAAA,CAEJ"}
+{"version":3,"file":"index.umd.js","sources":["../src/storage.ts","../src/index.ts"],"sourcesContent":["/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport Store from \"electron-store\";\n\nconst tokenTypeKey = \"tokenType\";\n\nconst accessTokenKey = \"accessToken\";\n\nconst refreshTokenKey = \"refreshToken\";\n\nconst expiryDateKey = \"expiryDate\";\n\nconst userIdKey = \"userId\";\n\nconst schema = {\n  tokenType: {\n    type: \"string\",\n  },\n\n  accessToken: {\n    type: \"string\",\n  },\n\n  refreshToken: {\n    type: \"string\",\n  },\n\n  expiryDate: {\n    type: \"number\",\n  },\n\n  userId: {\n    type: \"string\",\n  },\n};\n\ntype StoreType = {\n  tokenType: string;\n  accessToken: string;\n  refreshToken: string;\n  expiryDate: number;\n  userId: string;\n};\n\nconst storeInstance: Store<StoreType> = new Store<StoreType>({\n  name: \"authentication-nextcloud-main\",\n  schema,\n  // TODO: add encryption key\n});\n\nfunction setTokenType(value: string, mode: string): void {\n  storeInstance.set(`${tokenTypeKey}-${mode}`, value);\n}\n\nfunction setAccessToken(value: string, mode: string): void {\n  storeInstance.set(`${accessTokenKey}-${mode}`, value);\n}\n\nfunction setRefreshToken(value: string, mode: string): void {\n  storeInstance.set(`${refreshTokenKey}-${mode}`, value);\n}\n\nfunction setExpiryDate(value: number, mode: string): void {\n  storeInstance.set(`${expiryDateKey}-${mode}`, value);\n}\n\nfunction setUserId(value: string, mode: string): void {\n  storeInstance.set(`${userIdKey}-${mode}`, value);\n}\n\nfunction getTokenType(mode: string): string {\n  return storeInstance.get(`${tokenTypeKey}-${mode}`);\n}\n\nfunction getAccessToken(mode: string): string {\n  return storeInstance.get(`${accessTokenKey}-${mode}`);\n}\n\nfunction getRefreshToken(mode: string): string {\n  return storeInstance.get(`${refreshTokenKey}-${mode}`);\n}\n\nfunction getExpiryDate(mode: string): number {\n  return storeInstance.get(`${expiryDateKey}-${mode}`);\n}\n\nfunction getUserId(mode: string): string {\n  return storeInstance.get(`${userIdKey}-${mode}`);\n}\n\nfunction deleteTokenType(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${tokenTypeKey}-${mode}`);\n}\n\nfunction deleteAccessToken(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${accessTokenKey}-${mode}`);\n}\n\nfunction deleteRefreshToken(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${refreshTokenKey}-${mode}`);\n}\n\nfunction deleteExpiryDate(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${expiryDateKey}-${mode}`);\n}\n\nfunction deleteUserId(mode: string): void {\n  // @ts-expect-error resolution failing because of electron-store library bug\n  storeInstance.delete(`${userIdKey}-${mode}`);\n}\n\nexport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n};\n","/**\n * See the LICENSE file distributed with this work for additional\n * information regarding copyright ownership.\n *\n * This is free software; you can redistribute it and/or modify it\n * under the terms of the GNU Lesser General Public License as\n * published by the Free Software Foundation; either version 2.1 of\n * the License, or (at your option) any later version.\n *\n * This software is distributed in the hope that it will be useful,\n * but WITHOUT ANY WARRANTY; without even the implied warranty of\n * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\n * Lesser General Public License for more details.\n *\n * You should have received a copy of the GNU Lesser General Public\n * License along with this software; if not, write to the Free\n * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA\n * 02110-1301 USA, or see the FSF site: http://www.fsf.org.\n */\n\nimport {\n  deleteAccessToken,\n  deleteExpiryDate,\n  deleteRefreshToken,\n  deleteTokenType,\n  deleteUserId,\n  getAccessToken,\n  getExpiryDate,\n  getRefreshToken,\n  getTokenType,\n  getUserId,\n  setAccessToken,\n  setExpiryDate,\n  setRefreshToken,\n  setTokenType,\n  setUserId,\n} from \"./storage.js\";\nimport axios from \"axios\";\nimport { BrowserWindow, ipcMain, shell } from \"electron\";\nimport type { UserDetails } from \"@xwiki/cristal-authentication-api\";\n\nconst callbackUrl = \"http://callback/\";\n\nasync function getTokenFromCallbackCode(\n  code: string,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  const tokenUrl = new URL(`${authenticationBaseUrl}/token`);\n  tokenUrl.searchParams.set(\"base_url\", baseUrl);\n  tokenUrl.searchParams.set(\"code\", code);\n  tokenUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n  const response = await axios.get(tokenUrl.toString());\n  setTokenType(response.data.token_type, \"oauth2\");\n  setAccessToken(response.data.access_token, \"oauth2\");\n  setRefreshToken(response.data.refresh_token, \"oauth2\");\n  // We apply a safety margin of 10s to the expiration date.\n  setExpiryDate(Date.now() + (response.data.expires_in - 10) * 1000, \"oauth2\");\n  setUserId(response.data.user_id, \"oauth2\");\n}\n\nfunction initAuth(\n  win: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n  baseUrl: string,\n  authenticationBaseUrl: string,\n) {\n  win.webContents.session.webRequest.onBeforeRequest(\n    {\n      urls: [`${callbackUrl}*`],\n    },\n    async ({ url }, callback) => {\n      if (url.startsWith(authenticationBaseUrl)) {\n        // Allow for the redirects from the oidc server to be performed without being blocked.\n        callback({ cancel: false });\n      } else {\n        const parsedURL = new URL(url);\n        await getTokenFromCallbackCode(\n          parsedURL.searchParams.get(\"code\")!,\n          baseUrl,\n          authenticationBaseUrl,\n        );\n        mainWin.show();\n        reload(mainWin);\n        win?.close();\n      }\n    },\n  );\n}\n\nasync function createWindow(url: string) {\n  const win = new BrowserWindow({\n    width: 800,\n    height: 600,\n    webPreferences: {\n      nodeIntegration: false,\n    },\n  });\n\n  win.setMenu(null);\n\n  await win.loadURL(url);\n\n  return win;\n}\n\nlet authWin: BrowserWindow;\nlet mainWin: BrowserWindow;\n\n/**\n * @param browserWindow - the browser window to use for the authentication process\n * @param reload - the reload function\n *\n * @since 0.16\n * @beta\n */\nexport function load(\n  browserWindow: BrowserWindow,\n  reload: (win: BrowserWindow) => void,\n): void {\n  ipcMain.handle(\n    \"authentication:nextcloud:loginOauth2\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: {\n        baseUrl: string;\n        authenticationBaseUrl: string;\n      },\n    ): Promise<void> => {\n      const authorizationUrl = new URL(`${authenticationBaseUrl}/authorize`);\n      authorizationUrl.searchParams.set(\"base_url\", baseUrl);\n      authorizationUrl.searchParams.set(\"redirect_uri\", callbackUrl);\n      // Save the window asking for login (i.e., the main window), before creating\n      // a new windows for the oidc web page. Then, hide the main window for the\n      // duration of the authentication process.\n      mainWin = browserWindow;\n      authWin = await createWindow(authorizationUrl.toString());\n\n      initAuth(authWin, reload, baseUrl, authenticationBaseUrl);\n      mainWin.hide();\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginBasic\",\n    async (\n      _event,\n      {\n        username,\n        password,\n      }: {\n        username: string;\n        password: string;\n      },\n    ): Promise<void> => {\n      setAccessToken(btoa(`${username}:${password}`), \"basic\");\n      setTokenType(\"Basic\", \"basic\");\n      setUserId(username, \"basic\");\n      // We reload the content on successful login.\n      reload(browserWindow);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:loginFlow\",\n    async (\n      _event,\n      {\n        baseUrl,\n      }: {\n        baseUrl: string;\n      },\n    ): Promise<void> => {\n      const loginFlowUrl = `${baseUrl}/index.php/login/v2`;\n\n      const loginFlowResponse = await fetch(loginFlowUrl, { method: \"POST\" });\n      const jsonLoginFlowResponse: {\n        poll: { token: string; endpoint: string };\n        login: string;\n      } = await loginFlowResponse.json();\n\n      shell.openExternal(jsonLoginFlowResponse.login);\n\n      // This interval handles polling Nextcloud for the access token.\n      // It will return a 404 error until the login process has succeeded.\n      const intervalId = setInterval(async () => {\n        const response = await fetch(jsonLoginFlowResponse.poll.endpoint, {\n          method: \"POST\",\n          body: new URLSearchParams({\n            token: jsonLoginFlowResponse.poll.token,\n          }),\n          headers: {\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n          },\n        });\n        if (response.ok) {\n          const jsonResponse: {\n            loginName: string;\n            appPassword: string;\n          } = await response.json();\n          setAccessToken(\n            btoa(`${jsonResponse.loginName}:${jsonResponse.appPassword}`),\n            \"login-flow\",\n          );\n          setTokenType(\"Basic\", \"login-flow\");\n          setUserId(jsonResponse.loginName, \"login-flow\");\n          clearInterval(intervalId);\n          // We reload the content on successful login.\n          reload(browserWindow);\n        }\n      }, 3000);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:isLoggedIn\",\n    async (_event, { mode }: { mode: string }) => {\n      const tokenType = getTokenType(mode);\n      const accessTokenKey = getAccessToken(mode);\n      return tokenType && accessTokenKey;\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:userDetails\",\n    async (\n      _event,\n      { baseUrl, mode }: { baseUrl: string; mode: string },\n    ): Promise<UserDetails> => {\n      const userId = getUserId(mode);\n      return {\n        profile: `${baseUrl}/u/${userId}`,\n        username: userId,\n        name: userId!, // TODO: Find a way to get the display name (CRISTAL-589).\n        avatar: `${baseUrl}/avatar/${userId}/64`, // We want the 64x64 avatar.\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:authorizationValue\",\n    async (_event, { mode }: { mode: string }) => {\n      return {\n        tokenType: getTokenType(mode),\n        accessToken: getAccessToken(mode),\n      };\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:logout\",\n    async (_event, { mode }: { mode: string }): Promise<void> => {\n      deleteAccessToken(mode);\n      deleteTokenType(mode);\n      deleteRefreshToken(mode);\n      deleteExpiryDate(mode);\n      deleteUserId(mode);\n    },\n  );\n\n  ipcMain.handle(\n    \"authentication:nextcloud:refreshToken\",\n    async (\n      _event,\n      {\n        baseUrl,\n        authenticationBaseUrl,\n      }: { baseUrl: string; authenticationBaseUrl: string },\n    ): Promise<void> => {\n      if (Date.now() > getExpiryDate(\"oauth2\")) {\n        const refreshUrl = new URL(`${authenticationBaseUrl}/refresh`);\n        refreshUrl.searchParams.set(\"base_url\", baseUrl);\n        refreshUrl.searchParams.set(\"refresh_token\", getRefreshToken(\"oauth2\"));\n\n        const {\n          data: {\n            access_token: accessToken,\n            refresh_token: refreshToken,\n            expires_in: expiresIn,\n          },\n        } = await axios.get(refreshUrl.toString());\n\n        setAccessToken(accessToken, \"oauth2\");\n        setRefreshToken(refreshToken, \"oauth2\");\n        // We apply a safety margin of 10s to the expiration date.\n        setExpiryDate(Date.now() + (expiresIn - 10) * 1000, \"oauth2\");\n      }\n    },\n  );\n}\n"],"names":["tokenTypeKey","accessTokenKey","refreshTokenKey","expiryDateKey","userIdKey","schema","storeInstance","Store","setTokenType","value","mode","setAccessToken","setRefreshToken","setExpiryDate","setUserId","getTokenType","getAccessToken","getRefreshToken","getExpiryDate","getUserId","deleteTokenType","deleteAccessToken","deleteRefreshToken","deleteExpiryDate","deleteUserId","callbackUrl","getTokenFromCallbackCode","code","baseUrl","authenticationBaseUrl","tokenUrl","response","axios","initAuth","win","reload","url","callback","parsedURL","mainWin","createWindow","BrowserWindow","authWin","load","browserWindow","ipcMain","_event","authorizationUrl","username","password","loginFlowUrl","jsonLoginFlowResponse","shell","intervalId","jsonResponse","tokenType","userId","refreshUrl","accessToken","refreshToken","expiresIn"],"mappings":"qYAsBA,MAAMA,EAAe,YAEfC,EAAiB,cAEjBC,EAAkB,eAElBC,EAAgB,aAEhBC,EAAY,SAEZC,EAAS,CACb,UAAW,CACT,KAAM,QAAA,EAGR,YAAa,CACX,KAAM,QAAA,EAGR,aAAc,CACZ,KAAM,QAAA,EAGR,WAAY,CACV,KAAM,QAAA,EAGR,OAAQ,CACN,KAAM,QAAA,CAEV,EAUMC,EAAkC,IAAIC,EAAiB,CAC3D,KAAM,gCACN,OAAAF,CAEF,CAAC,EAED,SAASG,EAAaC,EAAeC,EAAoB,CACvDJ,EAAc,IAAI,GAAGN,CAAY,IAAIU,CAAI,GAAID,CAAK,CACpD,CAEA,SAASE,EAAeF,EAAeC,EAAoB,CACzDJ,EAAc,IAAI,GAAGL,CAAc,IAAIS,CAAI,GAAID,CAAK,CACtD,CAEA,SAASG,EAAgBH,EAAeC,EAAoB,CAC1DJ,EAAc,IAAI,GAAGJ,CAAe,IAAIQ,CAAI,GAAID,CAAK,CACvD,CAEA,SAASI,EAAcJ,EAAeC,EAAoB,CACxDJ,EAAc,IAAI,GAAGH,CAAa,IAAIO,CAAI,GAAID,CAAK,CACrD,CAEA,SAASK,EAAUL,EAAeC,EAAoB,CACpDJ,EAAc,IAAI,GAAGF,CAAS,IAAIM,CAAI,GAAID,CAAK,CACjD,CAEA,SAASM,EAAaL,EAAsB,CAC1C,OAAOJ,EAAc,IAAI,GAAGN,CAAY,IAAIU,CAAI,EAAE,CACpD,CAEA,SAASM,EAAeN,EAAsB,CAC5C,OAAOJ,EAAc,IAAI,GAAGL,CAAc,IAAIS,CAAI,EAAE,CACtD,CAEA,SAASO,EAAgBP,EAAsB,CAC7C,OAAOJ,EAAc,IAAI,GAAGJ,CAAe,IAAIQ,CAAI,EAAE,CACvD,CAEA,SAASQ,EAAcR,EAAsB,CAC3C,OAAOJ,EAAc,IAAI,GAAGH,CAAa,IAAIO,CAAI,EAAE,CACrD,CAEA,SAASS,EAAUT,EAAsB,CACvC,OAAOJ,EAAc,IAAI,GAAGF,CAAS,IAAIM,CAAI,EAAE,CACjD,CAEA,SAASU,EAAgBV,EAAoB,CAE3CJ,EAAc,OAAO,GAAGN,CAAY,IAAIU,CAAI,EAAE,CAChD,CAEA,SAASW,EAAkBX,EAAoB,CAE7CJ,EAAc,OAAO,GAAGL,CAAc,IAAIS,CAAI,EAAE,CAClD,CAEA,SAASY,EAAmBZ,EAAoB,CAE9CJ,EAAc,OAAO,GAAGJ,CAAe,IAAIQ,CAAI,EAAE,CACnD,CAEA,SAASa,EAAiBb,EAAoB,CAE5CJ,EAAc,OAAO,GAAGH,CAAa,IAAIO,CAAI,EAAE,CACjD,CAEA,SAASc,EAAad,EAAoB,CAExCJ,EAAc,OAAO,GAAGF,CAAS,IAAIM,CAAI,EAAE,CAC7C,CC1FA,MAAMe,EAAc,mBAEpB,eAAeC,EACbC,EACAC,EACAC,EACA,CACA,MAAMC,EAAW,IAAI,IAAI,GAAGD,CAAqB,QAAQ,EACzDC,EAAS,aAAa,IAAI,WAAYF,CAAO,EAC7CE,EAAS,aAAa,IAAI,OAAQH,CAAI,EACtCG,EAAS,aAAa,IAAI,eAAgBL,CAAW,EACrD,MAAMM,EAAW,MAAMC,EAAM,IAAIF,EAAS,UAAU,EACpDtB,EAAauB,EAAS,KAAK,WAAY,QAAQ,EAC/CpB,EAAeoB,EAAS,KAAK,aAAc,QAAQ,EACnDnB,EAAgBmB,EAAS,KAAK,cAAe,QAAQ,EAErDlB,EAAc,KAAK,OAASkB,EAAS,KAAK,WAAa,IAAM,IAAM,QAAQ,EAC3EjB,EAAUiB,EAAS,KAAK,QAAS,QAAQ,CAC3C,CAEA,SAASE,EACPC,EACAC,EACAP,EACAC,EACA,CACAK,EAAI,YAAY,QAAQ,WAAW,gBACjC,CACE,KAAM,CAAC,GAAGT,CAAW,GAAG,CAAA,EAE1B,MAAO,CAAE,IAAAW,CAAA,EAAOC,IAAa,CAC3B,GAAID,EAAI,WAAWP,CAAqB,EAEtCQ,EAAS,CAAE,OAAQ,GAAO,MACrB,CACL,MAAMC,EAAY,IAAI,IAAIF,CAAG,EAC7B,MAAMV,EACJY,EAAU,aAAa,IAAI,MAAM,EACjCV,EACAC,CAAA,EAEFU,EAAQ,KAAA,EACRJ,EAAOI,CAAO,EACdL,GAAK,MAAA,CACP,CACF,CAAA,CAEJ,CAEA,eAAeM,EAAaJ,EAAa,CACvC,MAAMF,EAAM,IAAIO,gBAAc,CAC5B,MAAO,IACP,OAAQ,IACR,eAAgB,CACd,gBAAiB,EAAA,CACnB,CACD,EAED,OAAAP,EAAI,QAAQ,IAAI,EAEhB,MAAMA,EAAI,QAAQE,CAAG,EAEdF,CACT,CAEA,IAAIQ,EACAH,EASG,SAASI,EACdC,EACAT,EACM,CACNU,EAAAA,QAAQ,OACN,uCACA,MACEC,EACA,CACE,QAAAlB,EACA,sBAAAC,CAAA,IAKgB,CAClB,MAAMkB,EAAmB,IAAI,IAAI,GAAGlB,CAAqB,YAAY,EACrEkB,EAAiB,aAAa,IAAI,WAAYnB,CAAO,EACrDmB,EAAiB,aAAa,IAAI,eAAgBtB,CAAW,EAI7Dc,EAAUK,EACVF,EAAU,MAAMF,EAAaO,EAAiB,SAAA,CAAU,EAExDd,EAASS,EAASP,EAAQP,EAASC,CAAqB,EACxDU,EAAQ,KAAA,CACV,CAAA,EAGFM,EAAAA,QAAQ,OACN,sCACA,MACEC,EACA,CACE,SAAAE,EACA,SAAAC,CAAA,IAKgB,CAClBtC,EAAe,KAAK,GAAGqC,CAAQ,IAAIC,CAAQ,EAAE,EAAG,OAAO,EACvDzC,EAAa,QAAS,OAAO,EAC7BM,EAAUkC,EAAU,OAAO,EAE3Bb,EAAOS,CAAa,CACtB,CAAA,EAGFC,EAAAA,QAAQ,OACN,qCACA,MACEC,EACA,CACE,QAAAlB,CAAA,IAIgB,CAClB,MAAMsB,EAAe,GAAGtB,CAAO,sBAGzBuB,EAGF,MAJsB,MAAM,MAAMD,EAAc,CAAE,OAAQ,OAAQ,GAI1C,KAAA,EAE5BE,QAAM,aAAaD,EAAsB,KAAK,EAI9C,MAAME,EAAa,YAAY,SAAY,CACzC,MAAMtB,EAAW,MAAM,MAAMoB,EAAsB,KAAK,SAAU,CAChE,OAAQ,OACR,KAAM,IAAI,gBAAgB,CACxB,MAAOA,EAAsB,KAAK,KAAA,CACnC,EACD,QAAS,CACP,eAAgB,mCAAA,CAClB,CACD,EACD,GAAIpB,EAAS,GAAI,CACf,MAAMuB,EAGF,MAAMvB,EAAS,KAAA,EACnBpB,EACE,KAAK,GAAG2C,EAAa,SAAS,IAAIA,EAAa,WAAW,EAAE,EAC5D,YAAA,EAEF9C,EAAa,QAAS,YAAY,EAClCM,EAAUwC,EAAa,UAAW,YAAY,EAC9C,cAAcD,CAAU,EAExBlB,EAAOS,CAAa,CACtB,CACF,EAAG,GAAI,CACT,CAAA,EAGFC,EAAAA,QAAQ,OACN,sCACA,MAAOC,EAAQ,CAAE,KAAApC,KAA6B,CAC5C,MAAM6C,EAAYxC,EAAaL,CAAI,EAC7BT,EAAiBe,EAAeN,CAAI,EAC1C,OAAO6C,GAAatD,CACtB,CAAA,EAGF4C,EAAAA,QAAQ,OACN,uCACA,MACEC,EACA,CAAE,QAAAlB,EAAS,KAAAlB,KACc,CACzB,MAAM8C,EAASrC,EAAUT,CAAI,EAC7B,MAAO,CACL,QAAS,GAAGkB,CAAO,MAAM4B,CAAM,GAC/B,SAAUA,EACV,KAAMA,EACN,OAAQ,GAAG5B,CAAO,WAAW4B,CAAM,KAAA,CAEvC,CAAA,EAGFX,EAAAA,QAAQ,OACN,8CACA,MAAOC,EAAQ,CAAE,KAAApC,MACR,CACL,UAAWK,EAAaL,CAAI,EAC5B,YAAaM,EAAeN,CAAI,CAAA,EAEpC,EAGFmC,EAAAA,QAAQ,OACN,kCACA,MAAOC,EAAQ,CAAE,KAAApC,KAA4C,CAC3DW,EAAkBX,CAAI,EACtBU,EAAgBV,CAAI,EACpBY,EAAmBZ,CAAI,EACvBa,EAAiBb,CAAI,EACrBc,EAAad,CAAI,CACnB,CAAA,EAGFmC,EAAAA,QAAQ,OACN,wCACA,MACEC,EACA,CACE,QAAAlB,EACA,sBAAAC,CAAA,IAEgB,CAClB,GAAI,KAAK,IAAA,EAAQX,EAAc,QAAQ,EAAG,CACxC,MAAMuC,EAAa,IAAI,IAAI,GAAG5B,CAAqB,UAAU,EAC7D4B,EAAW,aAAa,IAAI,WAAY7B,CAAO,EAC/C6B,EAAW,aAAa,IAAI,gBAAiBxC,EAAgB,QAAQ,CAAC,EAEtE,KAAM,CACJ,KAAM,CACJ,aAAcyC,EACd,cAAeC,EACf,WAAYC,CAAA,CACd,EACE,MAAM5B,EAAM,IAAIyB,EAAW,UAAU,EAEzC9C,EAAe+C,EAAa,QAAQ,EACpC9C,EAAgB+C,EAAc,QAAQ,EAEtC9C,EAAc,KAAK,IAAA,GAAS+C,EAAY,IAAM,IAAM,QAAQ,CAC9D,CACF,CAAA,CAEJ"}

package/etc/cristal-electron-authentication-nextcloud-main.api.md

@@ -0,0 +1,14 @@
+## API Report File for "@xwiki/cristal-electron-authentication-nextcloud-main"
+
+> Do not edit this file. It is a report generated by [API Extractor](https://api-extractor.com/).
+
+```ts
+
+import { BrowserWindow } from 'electron';
+
+// @beta (undocumented)
+export function load(browserWindow: BrowserWindow, reload: (win: BrowserWindow) => void): void;
+
+// (No @packageDocumentation comment for this package)
+
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xwiki/cristal-electron-authentication-nextcloud-main",
-  "version": "0.21.1",
+  "version": "0.23.0",
   "license": "LGPL 2.1",
   "author": "XWiki Org Community <contact@xwiki.org>",
   "homepage": "https://cristal.xwiki.org/",
@@ -26,24 +26,26 @@
     }
   },
   "main": "./dist/index.es.js",
+  "types": "./dist/index.d.ts",
   "dependencies": {
-    "axios": "1.11.0",
-    "electron-store": "10.1.0",
-    "@xwiki/cristal-authentication-api": "0.21.1"
+    "axios": "1.12.2",
+    "electron-store": "11.0.0",
+    "@xwiki/cristal-authentication-api": "0.23.0"
   },
   "peerDependencies": {
-    "electron": "37.2.5"
+    "electron": "38.2.1"
   },
   "devDependencies": {
-    "typescript": "5.9.2",
-    "vite": "7.0.6",
-    "@xwiki/cristal-dev-config": "0.21.1"
+    "typescript": "5.9.3",
+    "vite": "7.1.9",
+    "@xwiki/cristal-dev-config": "0.23.0"
   },
   "scripts": {
-    "build": "tsc --project tsconfig.json && vite build",
+    "api-extractor:local": "api-extractor run --local",
+    "build": "vite build",
     "clean": "rimraf dist",
     "lint": "eslint \"./src/**/*.{ts,tsx,vue}\" --max-warnings=0",
-    "test": "vitest --run"
-  },
-  "types": "./dist/index.d.ts"
+    "test": "vitest --run",
+    "typecheck": "tsc"
+  }
 }

package/src/index.ts

@@ -35,9 +35,9 @@ import {
   setTokenType,
   setUserId,
 } from "./storage.js";
-import { UserDetails } from "@xwiki/cristal-authentication-api";
 import axios from "axios";
 import { BrowserWindow, ipcMain, shell } from "electron";
+import type { UserDetails } from "@xwiki/cristal-authentication-api";
 
 const callbackUrl = "http://callback/";
 
@@ -107,6 +107,13 @@ async function createWindow(url: string) {
 let authWin: BrowserWindow;
 let mainWin: BrowserWindow;
 
+/**
+ * @param browserWindow - the browser window to use for the authentication process
+ * @param reload - the reload function
+ *
+ * @since 0.16
+ * @beta
+ */
 export function load(
   browserWindow: BrowserWindow,
   reload: (win: BrowserWindow) => void,

package/src/storage.ts

@@ -52,85 +52,83 @@ const schema = {
   },
 };
 
-const storeInstance: Store = new Store({
+type StoreType = {
+  tokenType: string;
+  accessToken: string;
+  refreshToken: string;
+  expiryDate: number;
+  userId: string;
+};
+
+const storeInstance: Store<StoreType> = new Store<StoreType>({
   name: "authentication-nextcloud-main",
   schema,
   // TODO: add encryption key
 });
 
-function set<T>(key: string, value: T, mode: string) {
-  // @ts-expect-error type resolution failing because of electron-store library bug
-  storeInstance.set(`${key}-${mode}`, value);
-}
-
-function get<T>(key: string, mode: string): T {
-  // @ts-expect-error type resolution failing because of electron-store library bug
-  return storeInstance.get(`${key}-${mode}`) as T;
-}
-
-function rm(key: string, mode: string) {
-  // @ts-expect-error type resolution failing because of electron-store library bug
-  storeInstance.delete(`${key}-${mode}`);
-}
-
 function setTokenType(value: string, mode: string): void {
-  set(tokenTypeKey, value, mode);
+  storeInstance.set(`${tokenTypeKey}-${mode}`, value);
 }
 
 function setAccessToken(value: string, mode: string): void {
-  set(accessTokenKey, value, mode);
+  storeInstance.set(`${accessTokenKey}-${mode}`, value);
 }
 
 function setRefreshToken(value: string, mode: string): void {
-  set(refreshTokenKey, value, mode);
+  storeInstance.set(`${refreshTokenKey}-${mode}`, value);
 }
 
 function setExpiryDate(value: number, mode: string): void {
-  set(expiryDateKey, value, mode);
+  storeInstance.set(`${expiryDateKey}-${mode}`, value);
 }
 
 function setUserId(value: string, mode: string): void {
-  set(userIdKey, value, mode);
+  storeInstance.set(`${userIdKey}-${mode}`, value);
 }
 
 function getTokenType(mode: string): string {
-  return get(tokenTypeKey, mode);
+  return storeInstance.get(`${tokenTypeKey}-${mode}`);
 }
 
 function getAccessToken(mode: string): string {
-  return get(accessTokenKey, mode);
+  return storeInstance.get(`${accessTokenKey}-${mode}`);
 }
 
 function getRefreshToken(mode: string): string {
-  return get(refreshTokenKey, mode);
+  return storeInstance.get(`${refreshTokenKey}-${mode}`);
 }
 
 function getExpiryDate(mode: string): number {
-  return get(expiryDateKey, mode);
+  return storeInstance.get(`${expiryDateKey}-${mode}`);
 }
 
 function getUserId(mode: string): string {
-  return get(userIdKey, mode);
+  return storeInstance.get(`${userIdKey}-${mode}`);
 }
 
 function deleteTokenType(mode: string): void {
-  rm(tokenTypeKey, mode);
+  // @ts-expect-error resolution failing because of electron-store library bug
+  storeInstance.delete(`${tokenTypeKey}-${mode}`);
 }
 
 function deleteAccessToken(mode: string): void {
-  rm(accessTokenKey, mode);
+  // @ts-expect-error resolution failing because of electron-store library bug
+  storeInstance.delete(`${accessTokenKey}-${mode}`);
 }
 
 function deleteRefreshToken(mode: string): void {
-  rm(refreshTokenKey, mode);
+  // @ts-expect-error resolution failing because of electron-store library bug
+  storeInstance.delete(`${refreshTokenKey}-${mode}`);
 }
 
 function deleteExpiryDate(mode: string): void {
-  rm(expiryDateKey, mode);
+  // @ts-expect-error resolution failing because of electron-store library bug
+  storeInstance.delete(`${expiryDateKey}-${mode}`);
 }
 
 function deleteUserId(mode: string): void {
-  rm(userIdKey, mode);
+  // @ts-expect-error resolution failing because of electron-store library bug
+  storeInstance.delete(`${userIdKey}-${mode}`);
 }
 
 export {

package/tsdoc.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://developer.microsoft.com/json-schemas/tsdoc/v0/tsdoc.schema.json",
+  "extends": ["../../../../tsdoc.json"]
+}

package/vitest.config.ts

@@ -19,7 +19,7 @@
  */
 
 import localConfig from "./vite.config";
+import { vitestVue as defaultConfig } from "@xwiki/cristal-dev-config";
 import { mergeConfig } from "vitest/config";
-import defaultConfig from "@xwiki/cristal-dev-config/vitest-vue.config";
 
 export default mergeConfig(defaultConfig, localConfig);