@zauru-sdk/utils 6.14.0 → 6.15.0

package/dist/esm/index.js

@@ -1,4 +1,5 @@
 export * from "./zauru/api.loaders.js";
+export * from "./zauru/auth.loaders.js";
 export * from "./zauru/automatic-number.utils.js";
 export * from "./zauru/bitacora-edicion-masiva.utils.js";
 export * from "./zauru/bundles.utils.js";

package/dist/esm/zauru/auth.loaders.js

@@ -0,0 +1,141 @@
+import { redirect } from "@remix-run/node";
+import { config } from "@zauru-sdk/config";
+import { commitSession, destroySession, getRefreshSession, getSession, loginWebApp, } from "@zauru-sdk/services";
+const loginErrorPayload = (description, title) => ({
+    error: true,
+    type: "error",
+    title: title ??
+        "Ocurrió un error al cargar la información de inicio de sesión (Carga de webapp)",
+    description,
+});
+const isDenied = (result) => result === false;
+const authorizeUrl = (request) => {
+    const url = new URL(request.url);
+    const hostname = `${url.port ? "http://" : "https://"}${url.hostname}${url.port ? `:${url.port}` : ""}`;
+    return `${config.oauthBaseURL}/dialog/authorize?client_id=${config.oauthClientID}&response_type=code&redirect_uri=${hostname}/login`;
+};
+export function createLoginLoader() {
+    return async () => Response.json({});
+}
+/**
+ * Remix action for `/login`: OAuth authorize, `loginWebApp`, cookie commit.
+ * `afterLogin` runs before `commitSession`. `requireAccess` can deny after
+ * a successful OAuth exchange or when a session already has `code`.
+ */
+export function createLoginAction(extras) {
+    return async ({ request }) => {
+        const formData = await request.formData();
+        const { action, ...values } = Object.fromEntries(formData);
+        if (action === "redirect") {
+            const cookie = values?.cookie?.toString() ?? "";
+            return redirect("/home", {
+                headers: {
+                    "Set-Cookie": cookie,
+                },
+            });
+        }
+        const codeValue = new URL(request.url).searchParams.get("code") ?? "";
+        const cookie = request.headers.get("Cookie") ?? "";
+        const session = await getSession(cookie);
+        if (!session.has("code") && !codeValue) {
+            return redirect(authorizeUrl(request));
+        }
+        if (session.has("code")) {
+            if (isDenied(extras?.requireAccess?.(session))) {
+                return redirect("/");
+            }
+            return redirect("/home");
+        }
+        const loginResponse = await loginWebApp(session, codeValue, cookie);
+        if (loginResponse.error || !loginResponse.data) {
+            return Response.json(loginErrorPayload(loginResponse.userMsg?.toString() ?? ""));
+        }
+        if (isDenied(extras?.requireAccess?.(session))) {
+            return Response.json(loginErrorPayload("No tienes permiso para acceder a esta aplicación. Si crees que esto es un error, contacta al administrador.", "Acceso denegado"));
+        }
+        if (extras?.afterLogin) {
+            await extras.afterLogin({
+                request,
+                session,
+                headers: loginResponse.data.headers,
+                loginData: loginResponse.data,
+            });
+        }
+        const expires = new Date();
+        expires.setSeconds(expires.getSeconds() + Number(config.expirationDurationInSeconds));
+        return Response.json({
+            ...loginResponse.data,
+            cookie: await commitSession(session, { expires }),
+        });
+    };
+}
+/**
+ * Guard for `/home` and `/reload-catalogs`: no `username` → `/`.
+ */
+export function createSessionGuardLoader(extras) {
+    return async ({ request }) => {
+        const session = await getSession(request.headers.get("Cookie"));
+        if (!session.has("username")) {
+            return redirect("/");
+        }
+        if (isDenied(extras?.requireAccess?.(session))) {
+            return redirect("/");
+        }
+        return Response.json({});
+    };
+}
+export function createLogoutLoader(extras) {
+    return createSessionGuardLoader(extras);
+}
+export function createLogoutAction() {
+    return async ({ request }) => {
+        const session = await getSession(request.headers.get("Cookie"));
+        return redirect(`${config.oauthBaseURL}/logout`, {
+            headers: {
+                "Set-Cookie": await destroySession(session),
+            },
+        });
+    };
+}
+/**
+ * `/` welcome: existing session (and optional access) → `/home`.
+ */
+export function createIndexLoader(extras) {
+    return async ({ request }) => {
+        const session = await getSession(request.headers.get("Cookie"));
+        if (session.has("username")) {
+            if (isDenied(extras?.requireAccess?.(session))) {
+                return Response.json({});
+            }
+            return redirect("/home");
+        }
+        return Response.json({});
+    };
+}
+/**
+ * `/reload-catalogs`: session guard plus optional cookie refresh.
+ */
+export function createReloadCatalogsLoader(extras) {
+    return async ({ request }) => {
+        const session = await getSession(request.headers.get("Cookie"));
+        if (!session.has("username")) {
+            return redirect("/");
+        }
+        if (isDenied(extras?.requireAccess?.(session))) {
+            return redirect("/");
+        }
+        try {
+            const refreshSession = await getRefreshSession(request);
+            return Response.json({}, refreshSession
+                ? {
+                    headers: {
+                        "Set-Cookie": refreshSession,
+                    },
+                }
+                : {});
+        }
+        catch {
+            return Response.json({});
+        }
+    };
+}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./zauru/api.loaders.js";
+export * from "./zauru/auth.loaders.js";
 export * from "./zauru/automatic-number.utils.js";
 export * from "./zauru/bitacora-edicion-masiva.utils.js";
 export * from "./zauru/bundles.utils.js";

package/dist/zauru/auth.loaders.d.ts

@@ -0,0 +1,40 @@
+import type { ActionFunction, LoaderFunction } from "@remix-run/node";
+import { getSession, loginWebApp } from "@zauru-sdk/services";
+export type AuthSession = Awaited<ReturnType<typeof getSession>>;
+export type LoginWebAppData = NonNullable<Awaited<ReturnType<typeof loginWebApp>>["data"]>;
+export type AuthAccessExtras = {
+    /**
+     * Return `false` to deny. Throw `redirect(...)` to send the user elsewhere.
+     * Any other return (including `void`) allows access.
+     */
+    requireAccess?: (session: AuthSession) => boolean | void;
+};
+export type LoginActionExtras = AuthAccessExtras & {
+    afterLogin?: (ctx: {
+        request: Request;
+        session: AuthSession;
+        headers: LoginWebAppData["headers"];
+        loginData: LoginWebAppData;
+    }) => Promise<void>;
+};
+export declare function createLoginLoader(): LoaderFunction;
+/**
+ * Remix action for `/login`: OAuth authorize, `loginWebApp`, cookie commit.
+ * `afterLogin` runs before `commitSession`. `requireAccess` can deny after
+ * a successful OAuth exchange or when a session already has `code`.
+ */
+export declare function createLoginAction(extras?: LoginActionExtras): ActionFunction;
+/**
+ * Guard for `/home` and `/reload-catalogs`: no `username` → `/`.
+ */
+export declare function createSessionGuardLoader(extras?: AuthAccessExtras): LoaderFunction;
+export declare function createLogoutLoader(extras?: AuthAccessExtras): LoaderFunction;
+export declare function createLogoutAction(): ActionFunction;
+/**
+ * `/` welcome: existing session (and optional access) → `/home`.
+ */
+export declare function createIndexLoader(extras?: AuthAccessExtras): LoaderFunction;
+/**
+ * `/reload-catalogs`: session guard plus optional cookie refresh.
+ */
+export declare function createReloadCatalogsLoader(extras?: AuthAccessExtras): LoaderFunction;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zauru-sdk/utils",
-  "version": "6.14.0",
+  "version": "6.15.0",
   "description": "Utilidades, parseo de request y demás para desarrollo de webapps de Zauru",
   "main": "./dist/esm/index.js",
   "module": "./dist/esm/index.js",
@@ -37,5 +37,5 @@
     "@zauru-sdk/types": "^6.16.0",
     "moment": "^2.30.1"
   },
-  "gitHead": "b0d95fcc90a6789ba2bf4bdcb0f54070c7583e85"
+  "gitHead": "7ccc6b0a3d1c426f8b62579a64a0bb0be73d2fcd"
 }