autherr 2.0.1 → 2.0.2

package/dist/crypto/createClientAssertion.d.ts

@@ -0,0 +1 @@
+export declare function createClientAssertion(clientId: string, privateKeyPem: string): Promise<string>;

package/dist/crypto/createClientAssertion.js

@@ -0,0 +1,17 @@
+// src/crypto/createClientAssertion.ts
+import { SignJWT } from "jose";
+import { pemToArrayBuffer } from "./pemUtils";
+export async function createClientAssertion(clientId, privateKeyPem) {
+    const key = await crypto.subtle.importKey("pkcs8", pemToArrayBuffer(privateKeyPem), {
+        name: "RSASSA-PKCS1-v1_5",
+        hash: "SHA-256",
+    }, false, ["sign"]);
+    const now = Math.floor(Date.now() / 1000);
+    return await new SignJWT({ clientId })
+        .setProtectedHeader({ alg: "RS256", typ: "JWT" })
+        .setIssuedAt(now)
+        .setExpirationTime(now + 120) // ⏱ 2 minutes
+        .setAudience("autherr")
+        .setIssuer(clientId)
+        .sign(key);
+}

package/dist/crypto/pemUtils.d.ts

@@ -0,0 +1 @@
+export declare function pemToArrayBuffer(pem: string): ArrayBuffer;

package/dist/crypto/pemUtils.js

@@ -0,0 +1,13 @@
+// src/crypto/pemUtils.ts
+export function pemToArrayBuffer(pem) {
+    const b64 = pem
+        .replace(/-----BEGIN [^-]+-----/, "")
+        .replace(/-----END [^-]+-----/, "")
+        .replace(/\s+/g, "");
+    const binary = atob(b64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes.buffer;
+}

package/dist/provider/AutherrProvider.d.ts

@@ -12,7 +12,8 @@ interface AutherrProviderProps {
     children: React.ReactNode;
     clientId: string;
     baseUrl: string;
+    clientPrivateKey: string;
 }
-export declare function AutherrProvider({ children, clientId, baseUrl, }: AutherrProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare function AutherrProvider({ children, clientId, baseUrl, clientPrivateKey, }: AutherrProviderProps): import("react/jsx-runtime").JSX.Element;
 export declare function useAutherrContext(): AutherrContextValue;
 export {};

package/dist/provider/AutherrProvider.js

@@ -2,8 +2,16 @@ import { jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useContext, useEffect, useMemo, useState, } from "react";
 import { fetchSession } from "../api/session";
 import { logoutSession } from "../api/logout";
+import { createClientAssertion } from "../crypto/createClientAssertion";
+function setClientAssertionCookie(token) {
+    document.cookie =
+        `autherr_client_assertion=${token};` +
+            `Path=/;` +
+            `Secure;` +
+            `SameSite=None`;
+}
 const AutherrContext = createContext(null);
-export function AutherrProvider({ children, clientId, baseUrl, }) {
+export function AutherrProvider({ children, clientId, baseUrl, clientPrivateKey, }) {
     const [accessToken, setAccessToken] = useState(null);
     const [isAuthenticated, setIsAuthenticated] = useState(false);
     const refreshSession = async () => {
@@ -20,16 +28,20 @@ export function AutherrProvider({ children, clientId, baseUrl, }) {
     useEffect(() => {
         refreshSession();
     }, [baseUrl, clientId]);
-    const login = () => {
+    const login = async () => {
         const state = crypto.randomUUID();
+        const assertion = await createClientAssertion(clientId, clientPrivateKey);
+        setClientAssertionCookie(assertion);
         window.location.href =
             `${baseUrl}/auth/login` +
                 `?client_id=${clientId}` +
                 `&redirect_uri=${encodeURIComponent(window.location.origin)}` +
                 `&state=${state}`;
     };
-    const signup = () => {
+    const signup = async () => {
         const state = crypto.randomUUID();
+        const assertion = await createClientAssertion(clientId, clientPrivateKey);
+        setClientAssertionCookie(assertion);
         window.location.href =
             `${baseUrl}/auth/signup` +
                 `?client_id=${clientId}` +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autherr",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "dest": "dist",
   "main": "dist/index.js",
   "scripts": {