dh-auth-library 1.0.0 → 1.2.0

package/dist/index.cjs.js

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
@@ -25,6 +25,7 @@ let nl_portal_playwright_libraries = require("nl-portal-playwright-libraries");
 let node_process = require("node:process");
 node_process = __toESM(node_process);
 let _playwright_test = require("@playwright/test");
+let totp_generator = require("totp-generator");
 let node_path = require("node:path");
 node_path = __toESM(node_path);
 //#region src/auth/loginhandlers/localhostLoginHandler.ts
@@ -96,48 +97,6 @@ var LoginOverzichtPage = class extends nl_portal_playwright_libraries.BasePage {
 	}
 };
 //#endregion
-//#region src/constants/accounts.ts
-/**
-* To use these accounts they should be available as environment variables
-*/
-var localhostBurgerAccount = {
-	username: `${process.env.LOCAL_BURGER_USERNAME}`,
-	password: `${process.env.LOCAL_BURGER_PASSWORD}`
-};
-var localhostBedrijfAccount = {
-	username: `${process.env.LOCAL_BEDRIJF_USERNAME}`,
-	password: `${process.env.LOCAL_BEDRIJF_PASSWORD}`
-};
-var defaultDigidAccount = {
-	username: `${process.env.DIGID_USER}`,
-	password: `${process.env.DIGID_PASSWORD}`,
-	bsn: `${process.env.DIGID_BSN}`
-};
-var defaultDigidGemachtigdAccount = {
-	username: `${process.env.DIGID_GEMACHTIGDE_USER}`,
-	password: `${process.env.DIGID_GEMACHTIGDE_PASSWORD}`,
-	bsn: `${process.env.DIGID_GEMACHTIGDE_BSN}`
-};
-var defaultEHerkenningAccount = {
-	username: `${process.env.EHERKENNING_USER}`,
-	password: `${process.env.EHERKENNING_PASSWORD}`,
-	bsn: `${process.env.EHERKENNING_NUMMER}`
-};
-var defaultVestigingAccount = {
-	username: `${process.env.EHERKENNING_VESTIGING_NAME}`,
-	password: `${process.env.EHERKENNING_VESTIGING_PASSWORD}`,
-	bsn: `${process.env.EHERKENNING_VESTIGING_NUMMER}`
-};
-var defaultProfessioneelBewindvoerderAccount = {
-	username: `${process.env.EHERKENNING_BEWINDVOERDER_USER}`,
-	password: `${process.env.EHERKENNING_BEWINDVOERDER_PASSWORD}`,
-	bsn: `${process.env.EHERKENNING_BEWINDVOERDER_BSN}`
-};
-var defaultADAccount = {
-	username: `${process.env.AD_USER}`,
-	password: `${process.env.AD_PASSWORD}`
-};
-//#endregion
 //#region src/auth/pages/digidLoginPage.ts
 var DigidLoginPage = class extends LoginOverzichtPage {
 	constructor(page) {
@@ -183,7 +142,6 @@ var DigidLoginPage = class extends LoginOverzichtPage {
 		} catch (_error) {}
 	}
 	async loginWithDigid(account, gemachtigde) {
-		account ??= defaultDigidAccount;
 		await this.page.getByLabel("Inlogoptie 5 van 5: Inloggen").click();
 		await this.page.getByLabel("Testen betrouwbaarheidsniveau").selectOption("25");
 		await this.page.getByLabel("DigiD gebruikersnaam").fill(account.username);
@@ -234,7 +192,6 @@ var EHerkenningLoginPage = class extends LoginOverzichtPage {
 		this.verderLink = page.getByRole("link", { name: /Verder|Continue|Ga verder/ });
 	}
 	async probeerInTeLoggenMetEHerkenning(account) {
-		account ??= defaultEHerkenningAccount;
 		await this.dropdownSelectIdentityProvider.selectOption("Digidentity AD 1.13 (preproduction)");
 		await this.page.locator("#remember").click();
 		await this.buttonConfirmIdentityProviderSelection.click();
@@ -280,21 +237,12 @@ var EHerkenningLoginPage = class extends LoginOverzichtPage {
 	async loginAlsProfessioneelBewindvoerder(gemachtigde, file) {
 		await this.openPage();
 		await this.klikOpProfessioneelBewindvoerderLoginOptie();
-		if (gemachtigde) try {
+		try {
 			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
 		} catch (_error) {
 			await this.openPage();
 			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
 		}
-		else {
-			gemachtigde = defaultProfessioneelBewindvoerderAccount;
-			try {
-				await this.loginWithEHerkenning(gemachtigde);
-			} catch (_error) {
-				await this.openPage();
-				await this.loginWithEHerkenning(gemachtigde);
-			}
-		}
 		if (gemachtigde.bsn != null) {
 			await this.verderLink.click();
 			await this.inputBsn.fill(gemachtigde.bsn);
@@ -304,10 +252,6 @@ var EHerkenningLoginPage = class extends LoginOverzichtPage {
 		await this.accepteerCookies();
 		if (file) await this.page.context().storageState({ path: file });
 	}
-	async valideerDatNietGemachtigdBerichtZichtbaarIs() {
-		await (0, _playwright_test.expect)(this.page.getByText("Helaas bent u niet gemachtigd")).toBeVisible();
-		await (0, _playwright_test.expect)(this.page.getByText("Helaas bent u niet gemachtigd voor toegang tot Aanvragen en regelen producten en diensten als bewindvoerder van Gemeente Den Haag.")).toBeVisible();
-	}
 };
 //#endregion
 //#region src/auth/loginhandlers/eHerkenningLoginHandler.ts
@@ -331,102 +275,6 @@ var EHerkenningBewindvoerderLoginHandler = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/totp-generator@2.0.1/node_modules/totp-generator/lib/esm/index.js
-var TOTP = class TOTP {
-	static _sign = async (t, e, r) => {
-		try {
-			const a = (globalThis.crypto || require("node:crypto").webcrypto).subtle, i = await a.importKey("raw", t, {
-				name: "HMAC",
-				hash: { name: r }
-			}, !1, ["sign"]), n = TOTP.hex2buf(e);
-			return await a.sign("HMAC", i, n);
-		} catch (a) {
-			const { default: i } = await Promise.resolve().then(() => require("./sha-Eh0BcCJ_.js")), n = new i(r, "ARRAYBUFFER");
-			return n.setHMACKey(t, "ARRAYBUFFER"), n.update(TOTP.hex2buf(e)), n.getHMAC("ARRAYBUFFER");
-		}
-	};
-	static async generate(t, e) {
-		const r = {
-			digits: 6,
-			algorithm: "SHA-1",
-			encoding: "hex",
-			period: 30,
-			timestamp: Date.now(),
-			explicitZeroPad: !1,
-			...e
-		}, a = Math.floor(r.timestamp / 1e3), i = TOTP.dec2hex(Math.floor(a / r.period)).padStart(16, "0"), n = "hex" === r.encoding ? TOTP.base32ToBuffer(t) : TOTP.asciiToBuffer(t), o = await TOTP._sign(n, i, r.algorithm), s = TOTP.buf2hex(o), c = 2 * TOTP.hex2dec(s.slice(-1)), h = (2147483647 & TOTP.hex2dec(s.slice(c, c + 8))).toString().slice(-r.digits), T = r.explicitZeroPad ? h.padStart(r.digits, "0") : h, d = 1e3 * r.period;
-		return {
-			otp: T,
-			expires: Math.ceil((r.timestamp + 1) / d) * d
-		};
-	}
-	static hex2dec(t) {
-		return parseInt(t, 16);
-	}
-	static dec2hex(t) {
-		return (t < 15.5 ? "0" : "") + Math.round(t).toString(16);
-	}
-	static base32ToBuffer(t) {
-		let e = (t = t.toUpperCase()).length;
-		for (; 61 === t.charCodeAt(e - 1);) e--;
-		const r = new Uint8Array(5 * e / 8);
-		let a = 0, i = 0, n = 0;
-		for (let o = 0; o < e; o++) {
-			const e = TOTP.base32[t.charCodeAt(o)];
-			if (void 0 === e) throw new Error("Invalid base32 character in key");
-			a = a << 5 | e, i += 5, i >= 8 && (r[n++] = a >>> (i -= 8));
-		}
-		return r.buffer;
-	}
-	static asciiToBuffer(t) {
-		const e = new Uint8Array(t.length);
-		for (let r = 0; r < t.length; r++) e[r] = t.charCodeAt(r);
-		return e.buffer;
-	}
-	static hex2buf(t) {
-		const e = new Uint8Array(t.length / 2);
-		for (let r = 0, a = 0; r < t.length; r += 2, a++) e[a] = TOTP.hex2dec(t.slice(r, r + 2));
-		return e.buffer;
-	}
-	static buf2hex(t) {
-		return [...new Uint8Array(t)].map((t) => t.toString(16).padStart(2, "0")).join("");
-	}
-	static base32 = {
-		50: 26,
-		51: 27,
-		52: 28,
-		53: 29,
-		54: 30,
-		55: 31,
-		65: 0,
-		66: 1,
-		67: 2,
-		68: 3,
-		69: 4,
-		70: 5,
-		71: 6,
-		72: 7,
-		73: 8,
-		74: 9,
-		75: 10,
-		76: 11,
-		77: 12,
-		78: 13,
-		79: 14,
-		80: 15,
-		81: 16,
-		82: 17,
-		83: 18,
-		84: 19,
-		85: 20,
-		86: 21,
-		87: 22,
-		88: 23,
-		89: 24,
-		90: 25
-	};
-};
-//#endregion
 //#region src/auth/pages/adLoginPage.ts
 var gzacUrlProd = "https://alg-zgw.denhaag.nl";
 var gzacUrlAcp = "https://alg-zgw.acc.denhaag.nl";
@@ -474,7 +322,7 @@ var ADLoginPage = class ADLoginPage extends nl_portal_playwright_libraries.BaseP
 		} catch (_error) {}
 		await adLoginPage.kanAuthAppNietGebruikenLink.click();
 		await adLoginPage.gebruikVerificatieCode.click();
-		const token = await TOTP.generate(`${process.env.AD_SECRET}`);
+		const token = await totp_generator.TOTP.generate(`${process.env.AD_SECRET}`);
 		await adLoginPage.codeInput.fill(token.otp);
 		await adLoginPage.verifierenInput.click();
 		await adLoginPage.page.waitForTimeout(5e3);
@@ -533,29 +381,29 @@ var environment = node_process.env.ENV ?? "test";
 * Easy way to create the filenames for the sessions
 */
 var SessionFileHelper = class {
-	static getLocalhostFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBurgerAccount.username}.json`);
+	static getLocalhostFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${account.username}.json`);
 	}
-	static getLocalhostFileNameBedrijf(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBedrijfAccount.username}.json`);
+	static getLocalhostFileNameBedrijf(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${account.username}.json`);
 	}
-	static getDigidFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-${environment}-${defaultDigidAccount.username}.json`);
+	static getDigidFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-${environment}-${account.username}.json`);
 	}
-	static getDigidGemachtigdeFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-gemachtigde-${environment}-${defaultDigidGemachtigdAccount.username}.json`);
+	static getDigidGemachtigdeFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-gemachtigde-${environment}-${account.username}.json`);
 	}
-	static getEHerkenningFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-${environment}.json`);
+	static getEHerkenningFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-${environment}-${account.username}.json`);
 	}
-	static getEHerkenningVestigingFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-vestiging-${environment}.json`);
+	static getEHerkenningVestigingFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-vestiging-${environment}-${account.username}.json`);
 	}
-	static getEHerkenningBewindvoerderFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-bewindvoerder-${environment}.json`);
+	static getEHerkenningBewindvoerderFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-bewindvoerder-${environment}-${account.username}.json`);
 	}
-	static getADFileName(browser) {
-		return node_path.join(sessionsDir, `${browser.browserType().name()}-ad-${environment}.json`);
+	static getADFileName(browser, account) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-ad-${environment}-${account.username}.json`);
 	}
 };
 //#endregion
@@ -573,12 +421,12 @@ function createSessionHandler(authType, account, loginHandler) {
 	return {
 		getFile: (browser) => {
 			switch (authType) {
-				case "digid": return SessionFileHelper.getDigidFileName(browser);
-				case "digid_gemachtigde": return SessionFileHelper.getDigidGemachtigdeFileName(browser);
-				case "eherkenning": return SessionFileHelper.getEHerkenningFileName(browser);
-				case "eherkenning_vestiging": return SessionFileHelper.getEHerkenningVestigingFileName(browser);
-				case "eherkenning_bewindvoerder": return SessionFileHelper.getEHerkenningBewindvoerderFileName(browser);
-				case "ad-session": return SessionFileHelper.getADFileName(browser);
+				case "digid": return SessionFileHelper.getDigidFileName(browser, account);
+				case "digid_gemachtigde": return SessionFileHelper.getDigidGemachtigdeFileName(browser, account);
+				case "eherkenning": return SessionFileHelper.getEHerkenningFileName(browser, account);
+				case "eherkenning_vestiging": return SessionFileHelper.getEHerkenningVestigingFileName(browser, account);
+				case "eherkenning_bewindvoerder": return SessionFileHelper.getEHerkenningBewindvoerderFileName(browser, account);
+				case "ad-session": return SessionFileHelper.getADFileName(browser, account);
 				default: throw new Error(`Unsupported auth type: ${authType}`);
 			}
 		},
@@ -593,7 +441,10 @@ function createSessionHandler(authType, account, loginHandler) {
 			const useADSession = process.env.WITH_AD_SESSION === "true";
 			const page = await browser.newPage({
 				ignoreHTTPSErrors: true,
-				storageState: useADSession && authType !== "ad-session" ? SessionFileHelper.getADFileName(browser) : void 0
+				storageState: useADSession && authType !== "ad-session" ? SessionFileHelper.getADFileName(browser, {
+					username: `${process.env.AD_USER}`,
+					password: `${process.env.AD_PASSWORD}`
+				}) : void 0
 			});
 			console.log(`New session will be created: ${file}`);
 			try {
@@ -644,15 +495,14 @@ function createSessionHandler(authType, account, loginHandler) {
 * Per specfile it is not problem but this should be done in every specfile to assure a valid token
 *
 * @param baseTest
-* @param handlerResolver
+* @param handler
 */
-function getApiTokenFromSession(baseTest, handlerResolver) {
+function getApiTokenFromSession(baseTest, handler) {
 	return baseTest.extend({
 		urls: async ({}, use) => {
 			await use(nl_portal_playwright_libraries.urls);
 		},
 		token: async ({ browser }, use) => {
-			const handler = handlerResolver();
 			const storageState = await nl_portal_playwright_libraries.SessionManager.getOrCreateSession(browser, handler);
 			const context = await browser.newContext(storageState ? { storageState } : {});
 			const page = await context.newPage();
@@ -690,136 +540,9 @@ function getApiTokenFromSession(baseTest, handlerResolver) {
 }
 //#endregion
 //#region src/auth/api/sessionHandlerResolvers.ts
-function getBurgerSessionHandler() {
-	if ((0, nl_portal_playwright_libraries.isRunningOnLocalhost)()) return createSessionHandler("digid", localhostBurgerAccount, getLoginHandler("digid"));
-	return createSessionHandler("digid", defaultDigidAccount, getLoginHandler("digid"));
-}
-function getBedrijfSessionHandler() {
-	if ((0, nl_portal_playwright_libraries.isRunningOnLocalhost)()) return createSessionHandler("eherkenning", localhostBedrijfAccount, getLoginHandler("eherkenning"));
-	return createSessionHandler("eherkenning", defaultEHerkenningAccount, getLoginHandler("eherkenning"));
-}
-function getVestigingSessionHandler() {
-	return createSessionHandler("eherkenning_vestiging", defaultVestigingAccount, getLoginHandler("eherkenning_vestiging"));
+function getSessionHandler(authType, account) {
+	return createSessionHandler(authType, account, getLoginHandler(authType));
 }
-function getDigidGemachtigdeSessionHandler() {
-	return createSessionHandler("digid_gemachtigde", defaultDigidGemachtigdAccount, getLoginHandler("digid_gemachtigde"));
-}
-function getEHerkenningBewindvoerderSessionHandler() {
-	return createSessionHandler("eherkenning_bewindvoerder", defaultProfessioneelBewindvoerderAccount, getLoginHandler("eherkenning_bewindvoerder"));
-}
-function getAdSessionHandler() {
-	return createSessionHandler("ad-session", defaultADAccount, getLoginHandler("ad-session"));
-}
-//#endregion
-//#region src/auth/api/apiAuthentication.ts
-/**
-* The api's will use an existing session and use that token for the requests.
-* The reason for this is that the token life-span is short and the UI always does a token-refresh.
-* By using the UI session and stealing that token it will always be valid.
-*/
-var burgerApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getBurgerSessionHandler);
-var bedrijfApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getBedrijfSessionHandler);
-var vestigingApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getVestigingSessionHandler);
-var digidGemachtigdeApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getDigidGemachtigdeSessionHandler);
-var eHerkenningBewindvoerderApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getEHerkenningBewindvoerderSessionHandler);
-//#endregion
-//#region src/constants/accountTypes.ts
-var profiles = {
-	burger: {
-		accountType: "burger",
-		authType: "digid",
-		id: "999994499"
-	},
-	bedrijf: {
-		accountType: "bedrijf",
-		authType: "eherkenning",
-		id: "90002768"
-	},
-	vestiging: {
-		accountType: "vestiging",
-		authType: "eherkenning_vestiging",
-		id: "990000262129"
-	},
-	gemachtigde: {
-		accountType: "digid-gemachtigde",
-		authType: "digid_gemachtigde",
-		id: ""
-	},
-	bewindvoerder: {
-		accountType: "bedrijf",
-		authType: "eherkenning_bewindvoerder",
-		id: "999994499"
-	}
-};
-//#endregion
-//#region src/constants/testAccounts.ts
-var TestAccounts = {
-	zgwdigiduser1: {
-		id: "999991954",
-		type: "burger"
-	},
-	zgwdigiduser2: {
-		id: "999991115",
-		type: "burger"
-	},
-	zgwdigiduser3: {
-		id: "999991966",
-		type: "burger"
-	},
-	zgwdigiduser4: {
-		id: "999992922",
-		type: "burger"
-	},
-	zgwdigiduser5: {
-		id: "999991322",
-		type: "burger"
-	},
-	testautomatisering: {
-		id: "999994499",
-		type: "burger"
-	},
-	localhostaccount: {
-		id: "999993847",
-		type: "burger"
-	},
-	kvkAccount: {
-		id: "90002768",
-		type: "bedrijf"
-	},
-	kvkVestiging: {
-		id: "990000262129",
-		type: "vestiging"
-	}
-};
-//#endregion
-//#region src/constants/testProfiles.ts
-var testProfiles = {
-	burger: {
-		accountType: "burger",
-		authType: "digid",
-		id: "999994499"
-	},
-	bedrijf: {
-		accountType: "bedrijf",
-		authType: "eherkenning",
-		id: "90002768"
-	},
-	vestiging: {
-		accountType: "vestiging",
-		authType: "eherkenning_vestiging",
-		id: "990000262129"
-	},
-	gemachtigde: {
-		accountType: "digid-gemachtigde",
-		authType: "digid_gemachtigde",
-		id: ""
-	},
-	bewindvoerder: {
-		accountType: "bedrijf",
-		authType: "eherkenning_bewindvoerder",
-		id: "999994499"
-	}
-};
 //#endregion
 exports.ADLoginHandler = ADLoginHandler;
 exports.ADLoginPage = ADLoginPage;
@@ -833,28 +556,7 @@ exports.LocalhostLoginHandler = LocalhostLoginHandler;
 exports.LoginOverzichtPage = LoginOverzichtPage;
 exports.MAX_SESSION_TIME_IN_MINUTES = MAX_SESSION_TIME_IN_MINUTES;
 exports.SessionFileHelper = SessionFileHelper;
-exports.TestAccounts = TestAccounts;
-exports.bedrijfApiTest = bedrijfApiTest;
-exports.burgerApiTest = burgerApiTest;
 exports.createSessionHandler = createSessionHandler;
-exports.defaultADAccount = defaultADAccount;
-exports.defaultDigidAccount = defaultDigidAccount;
-exports.defaultDigidGemachtigdAccount = defaultDigidGemachtigdAccount;
-exports.defaultEHerkenningAccount = defaultEHerkenningAccount;
-exports.defaultProfessioneelBewindvoerderAccount = defaultProfessioneelBewindvoerderAccount;
-exports.defaultVestigingAccount = defaultVestigingAccount;
-exports.digidGemachtigdeApiTest = digidGemachtigdeApiTest;
-exports.eHerkenningBewindvoerderApiTest = eHerkenningBewindvoerderApiTest;
-exports.getAdSessionHandler = getAdSessionHandler;
 exports.getApiTokenFromSession = getApiTokenFromSession;
-exports.getBedrijfSessionHandler = getBedrijfSessionHandler;
-exports.getBurgerSessionHandler = getBurgerSessionHandler;
-exports.getDigidGemachtigdeSessionHandler = getDigidGemachtigdeSessionHandler;
-exports.getEHerkenningBewindvoerderSessionHandler = getEHerkenningBewindvoerderSessionHandler;
 exports.getLoginHandler = getLoginHandler;
-exports.getVestigingSessionHandler = getVestigingSessionHandler;
-exports.localhostBedrijfAccount = localhostBedrijfAccount;
-exports.localhostBurgerAccount = localhostBurgerAccount;
-exports.profiles = profiles;
-exports.testProfiles = testProfiles;
-exports.vestigingApiTest = vestigingApiTest;
+exports.getSessionHandler = getSessionHandler;