dh-auth-library 1.1.0 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/dist/constants/index.d.ts +1 -1
  2. package/dist/constants/{accountTypes.d.ts → testProfile.d.ts} +2 -1
  3. package/dist/index.cjs.js +562 -0
  4. package/dist/index.es.js +523 -0
  5. package/package.json +55 -50
  6. package/dist/auth/api/apiAuthentication.d.ts +0 -10
  7. package/dist/auth/api/apiAuthentication.js +0 -13
  8. package/dist/auth/api/apiTokenHelper.js +0 -68
  9. package/dist/auth/api/index.js +0 -2
  10. package/dist/auth/api/sessionHandlerResolvers.js +0 -5
  11. package/dist/auth/getLoginHandler.js +0 -25
  12. package/dist/auth/index.js +0 -6
  13. package/dist/auth/loginhandlers/adLoginHandler.js +0 -7
  14. package/dist/auth/loginhandlers/digidGemachtigdeLoginHandler.js +0 -7
  15. package/dist/auth/loginhandlers/digidLoginHandler.js +0 -7
  16. package/dist/auth/loginhandlers/eHerkenningBewindvoerderLoginHandler.js +0 -7
  17. package/dist/auth/loginhandlers/eHerkenningLoginHandler.js +0 -7
  18. package/dist/auth/loginhandlers/index.js +0 -6
  19. package/dist/auth/loginhandlers/localhostLoginHandler.js +0 -7
  20. package/dist/auth/pages/adLoginPage.js +0 -94
  21. package/dist/auth/pages/digidLoginPage.js +0 -73
  22. package/dist/auth/pages/eHerkenningLoginPage.js +0 -94
  23. package/dist/auth/pages/index.js +0 -4
  24. package/dist/auth/pages/loginOverzichtPage.js +0 -70
  25. package/dist/auth/sessionHandler.js +0 -88
  26. package/dist/auth/utils/index.js +0 -1
  27. package/dist/auth/utils/sessionFileHelper.js +0 -33
  28. package/dist/constants/accountTypes.js +0 -1
  29. package/dist/constants/accounts.d.ts +0 -12
  30. package/dist/constants/accounts.js +0 -40
  31. package/dist/constants/authTypes.js +0 -1
  32. package/dist/constants/index.js +0 -3
  33. package/dist/constants/loginHandler.js +0 -1
  34. package/dist/constants/testAccounts.d.ts +0 -38
  35. package/dist/constants/testAccounts.js +0 -39
  36. package/dist/constants/testProfiles.d.ts +0 -27
  37. package/dist/constants/testProfiles.js +0 -27
  38. package/dist/index.js +0 -2
@@ -0,0 +1,523 @@
1
+ import { BasePage, LocalLoginPage, SessionManager, Url, getUrl, isRunningOnLocalhost, urls } from "nl-portal-playwright-libraries";
2
+ import * as process$2 from "node:process";
3
+ import process$1 from "node:process";
4
+ import { expect } from "@playwright/test";
5
+ import { TOTP } from "totp-generator";
6
+ import * as path from "node:path";
7
+ //#region src/auth/loginhandlers/localhostLoginHandler.ts
8
+ var LocalhostLoginHandler = class {
9
+ async loginAndCreateSessionStorage(page, account, file) {
10
+ await new LocalLoginPage(page).loginAndCreateNewSession(account, file);
11
+ }
12
+ };
13
+ //#endregion
14
+ //#region src/auth/pages/loginOverzichtPage.ts
15
+ var LoginOverzichtPage = class extends BasePage {
16
+ digidLoginKnop;
17
+ digidMachtigenLoginKnop;
18
+ eHerkenningLoginKnop;
19
+ eHerkenningMachtigingLoginKnop;
20
+ constructor(page) {
21
+ super(page);
22
+ this.digidLoginKnop = page.locator("#oidc-digid");
23
+ this.digidMachtigenLoginKnop = page.locator("#digid-machtigen");
24
+ this.eHerkenningLoginKnop = page.locator("#oidc-eHerkenning");
25
+ this.eHerkenningMachtigingLoginKnop = page.locator("#eherkenning-bewindvoering");
26
+ }
27
+ async klikOpDigidLoginOptie() {
28
+ await this.digidLoginKnop.waitFor();
29
+ await this.page.waitForTimeout(2e3);
30
+ await this.digidLoginKnop.click();
31
+ }
32
+ async klikOpDigidMachtigenLoginOptie() {
33
+ await this.digidMachtigenLoginKnop.waitFor();
34
+ await this.page.waitForTimeout(2e3);
35
+ await this.digidMachtigenLoginKnop.click();
36
+ }
37
+ async klikOpEHerkenningLoginOptie() {
38
+ await this.eHerkenningLoginKnop.waitFor();
39
+ await this.page.waitForTimeout(2e3);
40
+ try {
41
+ await this.eHerkenningLoginKnop.click();
42
+ } catch (_error) {
43
+ await this.reloadPage();
44
+ await this.eHerkenningLoginKnop.waitFor();
45
+ await this.page.waitForTimeout(2e3);
46
+ await this.eHerkenningLoginKnop.click();
47
+ }
48
+ }
49
+ async klikOpProfessioneelBewindvoerderLoginOptie() {
50
+ await this.eHerkenningMachtigingLoginKnop.waitFor();
51
+ await this.page.waitForTimeout(2e3);
52
+ try {
53
+ await this.eHerkenningMachtigingLoginKnop.click();
54
+ } catch (_error) {
55
+ await this.reloadPage();
56
+ await this.eHerkenningMachtigingLoginKnop.waitFor();
57
+ await this.page.waitForTimeout(2e3);
58
+ await this.eHerkenningMachtigingLoginKnop.click();
59
+ }
60
+ }
61
+ async valideerDatHetLoginOverzichtZichtbaarIs() {
62
+ await expect(this.page.getByRole("heading", { name: "Inloggen voor mijzelf" })).toBeVisible();
63
+ }
64
+ async accepteerCookies() {
65
+ try {
66
+ await this.page.locator("#ppms_cm_agree-to-all").click();
67
+ } catch (_ignore) {}
68
+ }
69
+ async reloadPage() {
70
+ try {
71
+ await this.page.reload();
72
+ } catch (_error) {}
73
+ }
74
+ };
75
+ //#endregion
76
+ //#region src/auth/pages/digidLoginPage.ts
77
+ var DigidLoginPage = class extends LoginOverzichtPage {
78
+ constructor(page) {
79
+ super(page);
80
+ }
81
+ async loginAndCreateNewSession(account, fileName) {
82
+ await this.openPage();
83
+ await this.handleAnySpecialADLoginScreen();
84
+ try {
85
+ await this.klikOpDigidLoginOptie();
86
+ } catch (_error) {
87
+ await this.openPage();
88
+ await this.handleAnySpecialADLoginScreen();
89
+ await this.klikOpDigidLoginOptie();
90
+ }
91
+ if (!this.page.url().match(/authn/)) {
92
+ await this.loginWithDigid(account);
93
+ await this.accepteerCookies();
94
+ }
95
+ await this.page.context().storageState({ path: fileName });
96
+ }
97
+ async loginAndCreateNewGemachtigdeSession(account, fileName) {
98
+ await this.openPage();
99
+ await this.handleAnySpecialADLoginScreen();
100
+ try {
101
+ await this.klikOpDigidMachtigenLoginOptie();
102
+ } catch (_error) {
103
+ await this.openPage();
104
+ await this.klikOpDigidMachtigenLoginOptie();
105
+ }
106
+ await this.loginWithDigid(account, true);
107
+ await this.accepteerCookies();
108
+ await this.page.context().storageState({ path: fileName });
109
+ }
110
+ /**
111
+ * Indien er al een AD sessie is maar voor de verkeerde omgeving
112
+ * Je krijgt dan een speciaal scherm waar je moet bevestigen voordat je door kan
113
+ */
114
+ async handleAnySpecialADLoginScreen() {
115
+ try {
116
+ await this.page.locator(`//div[contains(@data-test-id,'${process$1.env.AD_USER}')]`).first().waitFor({ timeout: 1e3 });
117
+ await this.page.locator(`//div[contains(@data-test-id,'${process$1.env.AD_USER}')]`).first().click();
118
+ } catch (_error) {}
119
+ }
120
+ async loginWithDigid(account, gemachtigde) {
121
+ await this.page.getByLabel("Inlogoptie 5 van 5: Inloggen").click();
122
+ await this.page.getByLabel("Testen betrouwbaarheidsniveau").selectOption("25");
123
+ await this.page.getByLabel("DigiD gebruikersnaam").fill(account.username);
124
+ await this.page.getByLabel("Wachtwoord", { exact: true }).fill(account.password);
125
+ const responsePromise = this.page.waitForResponse(/callback/, { timeout: 6e4 });
126
+ await this.page.getByRole("button", { name: "Inloggen" }).click();
127
+ if (gemachtigde) await this.page.getByRole("button", { name: "Kies" }).click();
128
+ return await responsePromise;
129
+ }
130
+ async loginAlsDigidGemachtigde() {
131
+ const gemachtigde = {
132
+ username: `${process$1.env.DIGID_GEMACHTIGDE_USER}`,
133
+ password: `${process$1.env.DIGID_GEMACHTIGDE_PASSWORD}`
134
+ };
135
+ await this.klikOpDigidMachtigenLoginOptie();
136
+ await this.loginWithDigid(gemachtigde, true);
137
+ }
138
+ };
139
+ //#endregion
140
+ //#region src/auth/loginhandlers/digidLoginHandler.ts
141
+ var DigidLoginHandler = class {
142
+ async loginAndCreateSessionStorage(page, account, file) {
143
+ await new DigidLoginPage(page).loginAndCreateNewSession(account, file);
144
+ }
145
+ };
146
+ //#endregion
147
+ //#region src/auth/pages/eHerkenningLoginPage.ts
148
+ var EHerkenningLoginPage = class extends LoginOverzichtPage {
149
+ dropdownSelectIdentityProvider;
150
+ buttonConfirmIdentityProviderSelection;
151
+ textfieldUsername;
152
+ textfieldPassword;
153
+ inloggenKnop;
154
+ verderKnop;
155
+ verderLink;
156
+ inputBsn;
157
+ buttonZoek;
158
+ constructor(page) {
159
+ super(page);
160
+ this.dropdownSelectIdentityProvider = page.locator("#identity_provider");
161
+ this.buttonConfirmIdentityProviderSelection = page.locator("//*[@name='commit']");
162
+ this.textfieldUsername = page.locator("#account_username");
163
+ this.textfieldPassword = page.locator("#account_password");
164
+ this.inloggenKnop = page.getByRole("button", { name: /Inloggen|Log in/ });
165
+ this.verderKnop = page.getByRole("button", { name: /Verder|Continue|Ga verder/ });
166
+ this.inputBsn = page.locator("#bsn-input");
167
+ this.buttonZoek = page.locator("#search-submit");
168
+ this.verderLink = page.getByRole("link", { name: /Verder|Continue|Ga verder/ });
169
+ }
170
+ async probeerInTeLoggenMetEHerkenning(account) {
171
+ await this.dropdownSelectIdentityProvider.selectOption("Digidentity AD 1.13 (preproduction)");
172
+ await this.page.locator("#remember").click();
173
+ await this.buttonConfirmIdentityProviderSelection.click();
174
+ await this.textfieldUsername.fill(account.username);
175
+ await this.verderKnop.click();
176
+ await this.textfieldPassword.fill(account.password);
177
+ await this.inloggenKnop.click();
178
+ }
179
+ async loginWithEHerkenningAndCreateSession(fileName, account) {
180
+ await this.openPage();
181
+ try {
182
+ await this.klikOpEHerkenningLoginOptie();
183
+ } catch (_error) {
184
+ await this.openPage();
185
+ await this.klikOpEHerkenningLoginOptie();
186
+ }
187
+ await this.loginWithEHerkenning(account);
188
+ await this.page.context().storageState({ path: fileName });
189
+ }
190
+ async loginWithEHerkenning(account) {
191
+ await this.probeerInTeLoggenMetEHerkenning(account);
192
+ await this.page.waitForTimeout(2e3);
193
+ if (await this.verderKnop.isVisible()) await this.verderKnop.click();
194
+ await this.accepteerCookies();
195
+ }
196
+ async loginWithEHerkenningVestigingAndCreateSession(fileName, account) {
197
+ await this.openPage();
198
+ try {
199
+ await this.klikOpEHerkenningLoginOptie();
200
+ } catch (_error) {
201
+ await this.openPage();
202
+ await this.klikOpEHerkenningLoginOptie();
203
+ }
204
+ await this.loginWithEHerkenningVestiging(account);
205
+ await this.page.context().storageState({ path: fileName });
206
+ }
207
+ async loginWithEHerkenningVestiging(account) {
208
+ await this.probeerInTeLoggenMetEHerkenning(account);
209
+ await this.page.waitForTimeout(2e3);
210
+ if (await this.verderKnop.isVisible()) await this.verderKnop.click();
211
+ await this.accepteerCookies();
212
+ }
213
+ async loginAlsProfessioneelBewindvoerder(gemachtigde, file) {
214
+ await this.openPage();
215
+ await this.klikOpProfessioneelBewindvoerderLoginOptie();
216
+ try {
217
+ await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
218
+ } catch (_error) {
219
+ await this.openPage();
220
+ await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
221
+ }
222
+ if (gemachtigde.bsn != null) {
223
+ await this.verderLink.click();
224
+ await this.inputBsn.fill(gemachtigde.bsn);
225
+ }
226
+ await this.buttonZoek.click();
227
+ await this.verderLink.click();
228
+ await this.accepteerCookies();
229
+ if (file) await this.page.context().storageState({ path: file });
230
+ }
231
+ };
232
+ //#endregion
233
+ //#region src/auth/loginhandlers/eHerkenningLoginHandler.ts
234
+ var EHerkenningLoginHandler = class {
235
+ async loginAndCreateSessionStorage(page, account, file) {
236
+ await new EHerkenningLoginPage(page).loginWithEHerkenningVestigingAndCreateSession(file, account);
237
+ }
238
+ };
239
+ //#endregion
240
+ //#region src/auth/loginhandlers/digidGemachtigdeLoginHandler.ts
241
+ var DigidGemachtigdeLoginHandler = class {
242
+ async loginAndCreateSessionStorage(page, account, file) {
243
+ await new DigidLoginPage(page).loginAndCreateNewGemachtigdeSession(account, file);
244
+ }
245
+ };
246
+ //#endregion
247
+ //#region src/auth/loginhandlers/eHerkenningBewindvoerderLoginHandler.ts
248
+ var EHerkenningBewindvoerderLoginHandler = class {
249
+ async loginAndCreateSessionStorage(page, account, file) {
250
+ await new EHerkenningLoginPage(page).loginAlsProfessioneelBewindvoerder(account, file);
251
+ }
252
+ };
253
+ //#endregion
254
+ //#region src/auth/pages/adLoginPage.ts
255
+ var gzacUrlProd = "https://alg-zgw.denhaag.nl";
256
+ var gzacUrlAcp = "https://alg-zgw.acc.denhaag.nl";
257
+ var gzacUrlTest = "https://alg-zgw.test.denhaag.nl";
258
+ var ADLoginPage = class ADLoginPage extends BasePage {
259
+ gebruikersnaamInput;
260
+ wachtwoordInput;
261
+ volgendeInput;
262
+ aanmeldenInput;
263
+ kanAuthAppNietGebruikenLink;
264
+ gebruikVerificatieCode;
265
+ codeInput;
266
+ verifierenInput;
267
+ constructor(page) {
268
+ super(page);
269
+ this.gebruikersnaamInput = page.locator("//input[@type='email']");
270
+ this.wachtwoordInput = page.locator("//input[@name='passwd']");
271
+ this.volgendeInput = page.locator("//input[@type='submit']");
272
+ this.aanmeldenInput = page.locator("//input[@type='submit']");
273
+ this.kanAuthAppNietGebruikenLink = page.locator("//*[@id='signInAnotherWay']");
274
+ this.gebruikVerificatieCode = page.locator("//div[@id='idDiv_SAOTCS_Proofs']//div[contains(@role,'listitem')][2]");
275
+ this.codeInput = page.locator("//input[@name='otc']");
276
+ this.verifierenInput = page.locator("//input[@type='submit']");
277
+ }
278
+ async openPage(path) {
279
+ await this.page.goto(path);
280
+ }
281
+ /**
282
+ * Login with the AD account so we can get behind the firewall
283
+ *
284
+ * @param account
285
+ * @param fileName
286
+ */
287
+ async loginWithADAccountAndCreateSession(account, fileName) {
288
+ const adLoginPage = new ADLoginPage(this.page);
289
+ await this.page.goto(this.getGzacUrl());
290
+ await adLoginPage.gebruikersnaamInput.waitFor();
291
+ await adLoginPage.gebruikersnaamInput.fill(account.username);
292
+ await adLoginPage.volgendeInput.click();
293
+ await adLoginPage.wachtwoordInput.fill(account.password);
294
+ await adLoginPage.aanmeldenInput.click();
295
+ await this.page.waitForTimeout(1e3);
296
+ try {
297
+ if (await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible()) await this.tryAgainUntilSuccesful();
298
+ } catch (_error) {}
299
+ await adLoginPage.kanAuthAppNietGebruikenLink.click();
300
+ await adLoginPage.gebruikVerificatieCode.click();
301
+ const token = await TOTP.generate(`${process.env.AD_SECRET}`);
302
+ await adLoginPage.codeInput.fill(token.otp);
303
+ await adLoginPage.verifierenInput.click();
304
+ await adLoginPage.page.waitForTimeout(5e3);
305
+ adLoginPage.page.on("domcontentloaded", () => {});
306
+ await adLoginPage.page.context().storageState({ path: fileName });
307
+ }
308
+ async tryAgainUntilSuccesful() {
309
+ let maxNumberOfTries = 6;
310
+ let foutMeldingIsSHowing = true;
311
+ while (foutMeldingIsSHowing) {
312
+ await this.page.waitForTimeout(1e4);
313
+ maxNumberOfTries--;
314
+ if (maxNumberOfTries == 0) return;
315
+ try {
316
+ await this.page.goBack();
317
+ await this.page.waitForTimeout(1e3);
318
+ await this.page.locator("//div[contains(@role,'listitem')]").first().click();
319
+ await this.page.waitForTimeout(1e3);
320
+ foutMeldingIsSHowing = await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible();
321
+ } catch (_error) {}
322
+ }
323
+ }
324
+ getGzacUrl() {
325
+ const baseUrl = this.getBaseUrl();
326
+ if (/klantportaal-zgw.denhaag.nl./.exec(baseUrl)) return gzacUrlProd;
327
+ if (/.acc./.exec(baseUrl)) return gzacUrlAcp;
328
+ if (/.test./.exec(baseUrl)) return gzacUrlTest;
329
+ else throw new Error("Cannot find current environment for baseUrl: " + baseUrl);
330
+ }
331
+ };
332
+ //#endregion
333
+ //#region src/auth/loginhandlers/adLoginHandler.ts
334
+ var ADLoginHandler = class {
335
+ async loginAndCreateSessionStorage(page, account, file) {
336
+ await new ADLoginPage(page).loginWithADAccountAndCreateSession(account, file);
337
+ }
338
+ };
339
+ //#endregion
340
+ //#region src/auth/getLoginHandler.ts
341
+ function getLoginHandler(authType) {
342
+ switch (authType) {
343
+ case "digid": return isRunningOnLocalhost() ? new LocalhostLoginHandler() : new DigidLoginHandler();
344
+ case "digid_gemachtigde": return new DigidGemachtigdeLoginHandler();
345
+ case "eherkenning": return isRunningOnLocalhost() ? new LocalhostLoginHandler() : new EHerkenningLoginHandler();
346
+ case "eherkenning_vestiging": return new EHerkenningLoginHandler();
347
+ case "eherkenning_bewindvoerder": return new EHerkenningBewindvoerderLoginHandler();
348
+ case "ad-session": return new ADLoginHandler();
349
+ default: throw new Error(`Unsupported auth type: ${authType}. If needed please create a new LoginHandler and register it here in getLoginHandler().`);
350
+ }
351
+ }
352
+ //#endregion
353
+ //#region src/auth/utils/sessionFileHelper.ts
354
+ var sessionsDir = process$2.env.SESSIONS_DIR ?? path.resolve(process$2.cwd(), "sessions");
355
+ var environment = process$2.env.ENV ?? "test";
356
+ /**
357
+ * Easy way to create the filenames for the sessions
358
+ */
359
+ var SessionFileHelper = class {
360
+ static getLocalhostFileName(browser, account) {
361
+ return path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${account.username}.json`);
362
+ }
363
+ static getLocalhostFileNameBedrijf(browser, account) {
364
+ return path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${account.username}.json`);
365
+ }
366
+ static getDigidFileName(browser, account) {
367
+ return path.join(sessionsDir, `${browser.browserType().name()}-digid-${environment}-${account.username}.json`);
368
+ }
369
+ static getDigidGemachtigdeFileName(browser, account) {
370
+ return path.join(sessionsDir, `${browser.browserType().name()}-digid-gemachtigde-${environment}-${account.username}.json`);
371
+ }
372
+ static getEHerkenningFileName(browser, account) {
373
+ return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-${environment}-${account.username}.json`);
374
+ }
375
+ static getEHerkenningVestigingFileName(browser, account) {
376
+ return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-vestiging-${environment}-${account.username}.json`);
377
+ }
378
+ static getEHerkenningBewindvoerderFileName(browser, account) {
379
+ return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-bewindvoerder-${environment}-${account.username}.json`);
380
+ }
381
+ static getADFileName(browser, account) {
382
+ return path.join(sessionsDir, `${browser.browserType().name()}-ad-${environment}-${account.username}.json`);
383
+ }
384
+ };
385
+ //#endregion
386
+ //#region src/auth/sessionHandler.ts
387
+ var MAX_SESSION_TIME_IN_MINUTES = 10;
388
+ /**
389
+ * This class creates the correct SessionHandler
390
+ * It will also perform the process of setting op the session
391
+ *
392
+ * @param authType type of login
393
+ * @param account with login details
394
+ * @param loginHandler that will handle the login itself
395
+ */
396
+ function createSessionHandler(authType, account, loginHandler) {
397
+ return {
398
+ getFile: (browser) => {
399
+ switch (authType) {
400
+ case "digid": return SessionFileHelper.getDigidFileName(browser, account);
401
+ case "digid_gemachtigde": return SessionFileHelper.getDigidGemachtigdeFileName(browser, account);
402
+ case "eherkenning": return SessionFileHelper.getEHerkenningFileName(browser, account);
403
+ case "eherkenning_vestiging": return SessionFileHelper.getEHerkenningVestigingFileName(browser, account);
404
+ case "eherkenning_bewindvoerder": return SessionFileHelper.getEHerkenningBewindvoerderFileName(browser, account);
405
+ case "ad-session": return SessionFileHelper.getADFileName(browser, account);
406
+ default: throw new Error(`Unsupported auth type: ${authType}`);
407
+ }
408
+ },
409
+ /**
410
+ * Setup the new session
411
+ * If needed the AD Session if used (Needed outside the firewall)
412
+ *
413
+ * @param browser
414
+ * @param file
415
+ */
416
+ setupSession: async (browser, file) => {
417
+ const useADSession = process.env.WITH_AD_SESSION === "true";
418
+ const page = await browser.newPage({
419
+ ignoreHTTPSErrors: true,
420
+ storageState: useADSession && authType !== "ad-session" ? SessionFileHelper.getADFileName(browser, {
421
+ username: `${process.env.AD_USER}`,
422
+ password: `${process.env.AD_PASSWORD}`
423
+ }) : void 0
424
+ });
425
+ console.log(`New session will be created: ${file}`);
426
+ try {
427
+ await loginHandler.loginAndCreateSessionStorage(page, account, file);
428
+ } finally {
429
+ await page.close();
430
+ }
431
+ },
432
+ /**
433
+ * Refresh the current session by opening a page and storing that session
434
+ * The UI should have refreshed the session meanwhile
435
+ *
436
+ * This is being called from the nl-portal-base-library
437
+ *
438
+ * @param browser
439
+ * @param file
440
+ */
441
+ refreshSession: async (browser, file) => {
442
+ const page = await browser.newPage({
443
+ ignoreHTTPSErrors: true,
444
+ storageState: file
445
+ });
446
+ console.log(`Refresh of session started for : ${file}`);
447
+ await page.goto(getUrl(Url.PortalBaseUrl));
448
+ await page.waitForLoadState("networkidle");
449
+ if (page.url().match(/authn/)) {
450
+ console.log(`New session will be created as the current one is no longer valid: ${file}`);
451
+ try {
452
+ await loginHandler.loginAndCreateSessionStorage(page, account, file);
453
+ } catch (_error) {
454
+ console.error(_error);
455
+ }
456
+ } else {
457
+ console.log(`Current session was still valid and will be refreshed now: ${file}`);
458
+ await page.context().storageState({ path: file });
459
+ }
460
+ await page.close();
461
+ }
462
+ };
463
+ }
464
+ //#endregion
465
+ //#region src/auth/api/apiTokenHelper.ts
466
+ /**
467
+ * The token is often being refreshed so the easiest is to open a browser using the current session
468
+ * The UI will automatically refresh the token and that is the token we will return
469
+ *
470
+ * That token can be used to perform some api requests for a short time
471
+ * Per specfile it is not problem but this should be done in every specfile to assure a valid token
472
+ *
473
+ * @param baseTest
474
+ * @param handler
475
+ */
476
+ function getApiTokenFromSession(baseTest, handler) {
477
+ return baseTest.extend({
478
+ urls: async ({}, use) => {
479
+ await use(urls);
480
+ },
481
+ token: async ({ browser }, use) => {
482
+ const storageState = await SessionManager.getOrCreateSession(browser, handler);
483
+ const context = await browser.newContext(storageState ? { storageState } : {});
484
+ const page = await context.newPage();
485
+ try {
486
+ await page.goto("/");
487
+ await page.waitForFunction(() => {
488
+ const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
489
+ if (!key) return false;
490
+ const raw = sessionStorage.getItem(key);
491
+ if (!raw) return false;
492
+ try {
493
+ return !!JSON.parse(raw)?.access_token;
494
+ } catch {
495
+ return false;
496
+ }
497
+ });
498
+ const token = await page.evaluate(() => {
499
+ const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
500
+ if (!key) return null;
501
+ const raw = sessionStorage.getItem(key);
502
+ if (!raw) return null;
503
+ try {
504
+ return JSON.parse(raw)?.access_token ?? null;
505
+ } catch {
506
+ return null;
507
+ }
508
+ });
509
+ if (!token) throw new Error("❌ Token not found in sessionStorage");
510
+ await use(token);
511
+ } finally {
512
+ await context.close();
513
+ }
514
+ }
515
+ });
516
+ }
517
+ //#endregion
518
+ //#region src/auth/api/sessionHandlerResolvers.ts
519
+ function getSessionHandler(authType, account) {
520
+ return createSessionHandler(authType, account, getLoginHandler(authType));
521
+ }
522
+ //#endregion
523
+ export { ADLoginHandler, ADLoginPage, DigidGemachtigdeLoginHandler, DigidLoginHandler, DigidLoginPage, EHerkenningBewindvoerderLoginHandler, EHerkenningLoginHandler, EHerkenningLoginPage, LocalhostLoginHandler, LoginOverzichtPage, MAX_SESSION_TIME_IN_MINUTES, SessionFileHelper, createSessionHandler, getApiTokenFromSession, getLoginHandler, getSessionHandler };
package/package.json CHANGED
@@ -1,50 +1,55 @@
1
- {
2
- "name": "dh-auth-library",
3
- "version": "1.1.0",
4
- "repository": {
5
- "type": "git",
6
- "url": "git+https://github.com/Gemeente-DenHaag/dh-auth-library.git"
7
- },
8
- "packageManager": "pnpm@11.5.2",
9
- "description": "Authentication package for all types of login on DH applications",
10
- "license": "MIT",
11
- "main": "dist/index.js",
12
- "types": "dist/index.d.ts",
13
- "exports": {
14
- ".": {
15
- "types": "./dist/index.d.ts",
16
- "default": "./dist/index.js"
17
- }
18
- },
19
- "files": [
20
- "dist"
21
- ],
22
- "scripts": {
23
- "build": "tsc -p tsconfig.build.json",
24
- "prepublishOnly": "pnpm build",
25
- "lint": "eslint ."
26
- },
27
- "engines": {
28
- "node": ">=22",
29
- "pnpm": "^11"
30
- },
31
- "devDependencies": {
32
- "@eslint/js": "10.0.1",
33
- "@playwright/test": "^1.61.1",
34
- "@types/node": "^25.9.4",
35
- "eslint": "^10.5.0",
36
- "typescript": "^6.0.3",
37
- "typescript-eslint": "8.60.1"
38
- },
39
- "dependencies": {
40
- "nl-portal-playwright-libraries": "^1.1.3",
41
- "totp-generator": "^2.0.1"
42
- },
43
- "keywords": [
44
- "playwright",
45
- "testing",
46
- "automation",
47
- "e2e",
48
- "nl-portal"
49
- ]
50
- }
1
+ {
2
+ "name": "dh-auth-library",
3
+ "version": "1.2.1",
4
+ "repository": {
5
+ "type": "git",
6
+ "url": "git+https://github.com/Gemeente-DenHaag/dh-auth-library.git"
7
+ },
8
+ "description": "Authentication package for all types of login on DH applications",
9
+ "license": "MIT",
10
+ "main": "dist/index.cjs.js",
11
+ "module": "dist/index.es.js",
12
+ "types": "dist/index.d.ts",
13
+ "exports": {
14
+ ".": {
15
+ "types": "./dist/index.d.ts",
16
+ "import": "./dist/index.es.js",
17
+ "require": "./dist/index.cjs.js"
18
+ }
19
+ },
20
+ "files": [
21
+ "dist"
22
+ ],
23
+ "engines": {
24
+ "node": ">=22",
25
+ "pnpm": "^11"
26
+ },
27
+ "peerDependencies": {
28
+ "@playwright/test": ">=1.60.0"
29
+ },
30
+ "devDependencies": {
31
+ "@eslint/js": "10.0.1",
32
+ "@playwright/test": "^1.61.1",
33
+ "@types/node": "^25.9.4",
34
+ "eslint": "^10.5.0",
35
+ "typescript": "^6.0.3",
36
+ "typescript-eslint": "8.60.1",
37
+ "vite": "^8.1.0",
38
+ "vite-tsconfig-paths": "^6.1.1"
39
+ },
40
+ "dependencies": {
41
+ "nl-portal-playwright-libraries": "^1.1.3",
42
+ "totp-generator": "^2.0.1"
43
+ },
44
+ "keywords": [
45
+ "playwright",
46
+ "testing",
47
+ "automation",
48
+ "e2e",
49
+ "dh-auth"
50
+ ],
51
+ "scripts": {
52
+ "build": "vite build && tsc -p tsconfig.build.json",
53
+ "lint": "eslint ."
54
+ }
55
+ }
@@ -1,10 +0,0 @@
1
- /**
2
- * The api's will use an existing session and use that token for the requests.
3
- * The reason for this is that the token life-span is short and the UI always does a token-refresh.
4
- * By using the UI session and stealing that token it will always be valid.
5
- */
6
- export declare const burgerApiTest: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & import("./apiTokenHelper").ApiFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
7
- export declare const bedrijfApiTest: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & import("./apiTokenHelper").ApiFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
8
- export declare const vestigingApiTest: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & import("./apiTokenHelper").ApiFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
9
- export declare const digidGemachtigdeApiTest: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & import("./apiTokenHelper").ApiFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
10
- export declare const eHerkenningBewindvoerderApiTest: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & import("./apiTokenHelper").ApiFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
@@ -1,13 +0,0 @@
1
- import { baseTest as base } from 'nl-portal-playwright-libraries';
2
- import { getApiTokenFromSession } from './apiTokenHelper';
3
- import { getBedrijfSessionHandler, getBurgerSessionHandler, getDigidGemachtigdeSessionHandler, getEHerkenningBewindvoerderSessionHandler, getVestigingSessionHandler, } from './sessionHandlerResolvers';
4
- /**
5
- * The api's will use an existing session and use that token for the requests.
6
- * The reason for this is that the token life-span is short and the UI always does a token-refresh.
7
- * By using the UI session and stealing that token it will always be valid.
8
- */
9
- export const burgerApiTest = getApiTokenFromSession(base, getBurgerSessionHandler);
10
- export const bedrijfApiTest = getApiTokenFromSession(base, getBedrijfSessionHandler);
11
- export const vestigingApiTest = getApiTokenFromSession(base, getVestigingSessionHandler);
12
- export const digidGemachtigdeApiTest = getApiTokenFromSession(base, getDigidGemachtigdeSessionHandler);
13
- export const eHerkenningBewindvoerderApiTest = getApiTokenFromSession(base, getEHerkenningBewindvoerderSessionHandler);