fastify-txstate 3.4.0 → 3.5.0

package/lib/unified-auth.d.ts

@@ -1,5 +1,7 @@
-import { type FastifyRequest } from 'fastify';
-import { type FastifyTxStateAuthInfo } from '.';
+import { type FastifyReply, type FastifyRequest } from 'fastify';
+import { type FastifyInstanceTyped, type FastifyTxStateAuthInfo } from '.';
 export declare const uaCookieName: string;
 export declare function unifiedAuthenticate(req: FastifyRequest): Promise<FastifyTxStateAuthInfo | undefined>;
 export declare function unifiedAuthenticateAll(req: FastifyRequest): Promise<FastifyTxStateAuthInfo>;
+export declare function requireCookieAuth(req: FastifyRequest, res: FastifyReply): Promise<boolean>;
+export declare function registerUaCookieRoutes(app: FastifyInstanceTyped): void;

package/lib/unified-auth.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unifiedAuthenticateAll = exports.unifiedAuthenticate = exports.uaCookieName = void 0;
+exports.registerUaCookieRoutes = exports.requireCookieAuth = exports.unifiedAuthenticateAll = exports.unifiedAuthenticate = exports.uaCookieName = void 0;
 const crypto_1 = require("crypto");
 const jose_1 = require("jose");
 const txstate_utils_1 = require("txstate-utils");
@@ -123,3 +123,63 @@ async function unifiedAuthenticateAll(req) {
     return auth;
 }
 exports.unifiedAuthenticateAll = unifiedAuthenticateAll;
+async function requireCookieAuth(req, res) {
+    if (req.auth === undefined || req.auth.username.length === 0) {
+        await res
+            .header('Set-Cookie', `${exports.uaCookieName}_return=${encodeURIComponent(`${process.env.PUBLIC_URL ?? ''}${req.originalUrl}`)}; Path=/; Secure; HttpOnly; SameSite=Lax`)
+            .redirect(`${process.env.UA_URL ?? ''}/login?clientId=${process.env.UA_CLIENTID ?? ''}&returnUrl=${encodeURIComponent(`${process.env.PUBLIC_URL ?? ''}/.uaService`)}`);
+        return true;
+    }
+    else {
+        return false;
+    }
+}
+exports.requireCookieAuth = requireCookieAuth;
+function registerUaCookieRoutes(app) {
+    app.get('/.uaLogout', {
+        schema: {
+            headers: {
+                type: 'object',
+                properties: {
+                    cookie: { type: 'string', pattern: `${exports.uaCookieName}=[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+` }
+                },
+                required: ['cookie']
+            }
+        }
+    }, async (req, res) => {
+        const m = req.headers.cookie.match(new RegExp(`${exports.uaCookieName}=([^;]+)`));
+        if (m == null)
+            return res.code(400).send('Missing UA JWT');
+        return res
+            .header('Set-Cookie', `${exports.uaCookieName}=; Path=/; Secure; HttpOnly; SameSite=Lax; Expires=Thu, 01 Jan 1970 00:00:00 GMT`)
+            .redirect(`${process.env.UA_URL ?? ''}/logout?unifiedJwt=${encodeURIComponent(m[1])}`);
+    });
+    app.get('/.uaService', {
+        schema: {
+            querystring: {
+                type: 'object',
+                properties: {
+                    unifiedJwt: { type: 'string', pattern: '^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$' }
+                },
+                required: ['unifiedJwt'],
+                additionalProperties: false
+            },
+            headers: {
+                type: 'object',
+                properties: {
+                    cookie: { type: 'string', pattern: `${exports.uaCookieName}_return=${encodeURIComponent(`${process.env.PUBLIC_URL ?? ''}`)}` }
+                },
+                required: ['cookie']
+            }
+        }
+    }, async (req, res) => {
+        const m = req.headers.cookie.match(new RegExp(`${exports.uaCookieName}_return=([^;]+)`));
+        if (m == null)
+            return res.code(400).send('Return URL cookie not found');
+        return res
+            .header('Set-Cookie', `${exports.uaCookieName}=${req.query.unifiedJwt}; Path=/; Secure; HttpOnly; SameSite=Lax`)
+            .header('Set-Cookie', `${exports.uaCookieName}_return=; Path=/; Secure; HttpOnly; SameSite=Lax; Expires=Thu, 01 Jan 1970 00:00:00 GMT`)
+            .redirect(decodeURIComponent(m[1]));
+    });
+}
+exports.registerUaCookieRoutes = registerUaCookieRoutes;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify-txstate",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "A small wrapper for fastify providing a set of common conventions & utility functions we use.",
   "exports": {
     ".": {