openrtc 0.1.0 → 0.1.2

package/dist/auth/index.d.ts

@@ -1 +1,75 @@
-export { getAuthHost, authHost } from './host';
+import { FirebaseApp } from 'firebase/app';
+import { User, Auth } from 'firebase/auth';
+
+type ProviderName = 'google' | 'apple';
+interface SignInCredentialPayload {
+    provider: ProviderName;
+    idToken: string;
+    accessToken?: string;
+    nonce?: string;
+    isCustomToken?: boolean;
+    callbackId?: string;
+    email?: string;
+    displayName?: string;
+    photoURL?: string;
+}
+type DesktopAuthRelay = (payload: {
+    authToken: string | null;
+    refreshToken: string | null;
+}) => Promise<void> | void;
+declare function registerDesktopAuthRelay(relay: DesktopAuthRelay | null): void;
+declare class AuthHost {
+    private app;
+    private auth;
+    private functions;
+    private persistenceReady;
+    private redirectResultPromise;
+    private redirectResultConsumed;
+    private lastRelayedToken;
+    private lastRelayedRefreshToken;
+    private desktopTokenRefreshIntervalId;
+    private syncDesktopAuthToken;
+    constructor();
+    getApp(): FirebaseApp;
+    getCurrentUser(): User | null;
+    getAuth(): Auth;
+    onAuthStateChanged(callback: (user: User | null) => void): () => void;
+    onIdTokenChanged(callback: (user: User | null) => void): () => void;
+    getIdToken(options?: {
+        forceRefresh?: boolean;
+    }): Promise<string | null>;
+    checkForSSOToken(): Promise<void>;
+    signInWithCustomTokenValue(token: string): Promise<User>;
+    signInWithPluto(options?: {
+        redirectUri?: string;
+        authorizeBaseUrl?: string;
+    }): Promise<void>;
+    waitForAuth(): Promise<void>;
+    signInAnonymously(): Promise<void>;
+    signIn(email: string, password: string): Promise<User>;
+    signUp(email: string, password: string): Promise<User>;
+    signOut(): Promise<void>;
+    deleteAccount(): Promise<void>;
+    signInWithCredential(payload: SignInCredentialPayload): Promise<User>;
+    private mintSessionTokenFromProviderToken;
+    signInWithPopup(provider: ProviderName): Promise<{
+        idToken: string;
+        refreshToken?: string;
+    }>;
+    signInWithRedirect(provider: ProviderName, options?: {
+        nonce?: string;
+    }): Promise<void>;
+    consumeRedirectResult(): Promise<{
+        fromRedirect: boolean;
+        user: User | null;
+        providerId?: string | null;
+        idToken?: string | null;
+    } | null>;
+    startGoogleSignIn(): Promise<void>;
+    startAppleSignIn(): Promise<void>;
+    mintSessionToken(): Promise<string>;
+}
+declare function getAuthHost(): AuthHost;
+declare const authHost: AuthHost;
+
+export { authHost, getAuthHost, registerDesktopAuthRelay };

package/dist/auth/index.js

@@ -1 +1 @@
-export { getAuthHost, authHost } from './host';
+export{f as authHost,e as getAuthHost,d as registerDesktopAuthRelay}from'../chunk-4MH42GUI.js';

package/dist/auth/internal.d.ts

@@ -1 +1,3 @@
-export { registerDesktopAuthRelay } from './host';
+export { registerDesktopAuthRelay } from './index.js';
+import 'firebase/app';
+import 'firebase/auth';

package/dist/auth/internal.js

@@ -1 +1 @@
-export { registerDesktopAuthRelay } from './host';
+export{d as registerDesktopAuthRelay}from'../chunk-4MH42GUI.js';

package/dist/chunk-4MH42GUI.js

@@ -0,0 +1,2 @@
+import {getApps,initializeApp}from'firebase/app';import {getFunctions,connectFunctionsEmulator,httpsCallable}from'firebase/functions';import {browserLocalPersistence,inMemoryPersistence,browserPopupRedirectResolver,initializeAuth,getAuth,connectAuthEmulator,setPersistence,onIdTokenChanged,getIdToken,signInWithCustomToken,onAuthStateChanged,signInAnonymously,signInWithEmailAndPassword,createUserWithEmailAndPassword,signOut,deleteUser,updateProfile,GoogleAuthProvider,OAuthProvider,signInWithCredential,signInWithPopup,signInWithRedirect,getRedirectResult}from'firebase/auth';function f(){return typeof window>"u"?false:!!(window.__TAURI_IPC__||window.__TAURI_INTERNALS__||window.__TAURI__||window.location.protocol==="tauri:"||window.location.hostname==="tauri.localhost")}var P="pluto-rtc-prod",R={apiKey:"AIzaSyA62Krj-7ZYFT5xjrTUq7mXana41Ahj_mM",authDomain:"api.openrtc.app",projectId:P,storageBucket:"pluto-rtc-prod.firebasestorage.app",messagingSenderId:"607066575224",appId:"1:607066575224:web:ed3f51825ba228db92b88d"};function te(i){let e=typeof i.projectId=="string"&&i.projectId.trim()?i.projectId.trim():P;return {...i,projectId:e}}var S="pluto-rtc-auth";function X(i){return new Promise(e=>setTimeout(e,i))}var g=null;function Y(){if(typeof globalThis<"u"&&globalThis.__OPENRTC_DEBUG__===true)return  true;if(typeof localStorage<"u")try{return localStorage.getItem("openrtc:debug")==="1"}catch{return  false}return  false}function o(i,e){if(Y()){if(typeof e>"u"){console.log(i);return}console.log(i,e);}}function pe(i){g=i;}function Z(){return f()}function C(){return typeof navigator>"u"?false:/iPhone|iPad|iPod|Android/i.test(navigator.userAgent||"")}function y(){return Z()&&C()}function u(i,e,n){return Promise.race([i,new Promise((r,t)=>{setTimeout(()=>t(new Error(`${n} timeout after ${e}ms`)),e);})])}function b(i){let e="0123456789ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvwxyz-._",n=new Uint8Array(i);window.crypto.getRandomValues(n);let r="";for(let t=0;t<i;t+=1)r+=e[n[t]%e.length];return r}async function O(i){let n=new TextEncoder().encode(i),r=await crypto.subtle.digest("SHA-256",n);return Array.from(new Uint8Array(r)).map(s=>s.toString(16).padStart(2,"0")).join("")}var k=class{constructor(){this.redirectResultPromise=null;this.redirectResultConsumed=false;this.lastRelayedToken=null;this.lastRelayedRefreshToken=null;this.desktopTokenRefreshIntervalId=null;let e=getApps().find(t=>t.name===S);this.app=e||initializeApp(R,S);let n=C(),r=y();if(n)try{let t=r?{persistence:[browserLocalPersistence,inMemoryPersistence]}:{persistence:[browserLocalPersistence,inMemoryPersistence],popupRedirectResolver:browserPopupRedirectResolver};this.auth=initializeAuth(this.app,t),o("[PLUTO-RTC][AUTH-HOST] Using mobile-safe Firebase auth initialization",{appName:this.app.name,persistence:"browserLocalPersistence->inMemoryPersistence",redirectResolver:r?"disabled-for-tauri-mobile":"browserPopupRedirectResolver",tauriMobile:r});}catch{this.auth=getAuth(this.app),console.warn("[PLUTO-RTC][AUTH-HOST] Mobile-safe auth initialization unavailable; falling back to default getAuth");}else this.auth=getAuth(this.app);this.functions=getFunctions(this.app);try{let t=typeof import.meta<"u"?import.meta.env:null;if(!!t&&String(t.VITE_USE_EMULATORS)==="true"&&(t.DEV||String(t.VITE_E2E)==="true")){let a=String(t.VITE_OPENRTC_EMULATOR_HOST??"127.0.0.1").trim()||"127.0.0.1",H=Number(t.VITE_OPENRTC_AUTH_EMULATOR_PORT??9100),_=Number(t.VITE_OPENRTC_FUNCTIONS_EMULATOR_PORT??5002);try{connectAuthEmulator(this.auth,`http://${a}:${H}`,{disableWarnings:!0});}catch{}try{connectFunctionsEmulator(this.functions,a,_);}catch{}}}catch{}n?this.persistenceReady=Promise.resolve():this.persistenceReady=setPersistence(this.auth,browserLocalPersistence).catch(t=>{console.warn("[PLUTO-RTC][AUTH-HOST] Failed to set auth persistence",{message:t?.message});}),o("[PLUTO-RTC][AUTH-HOST] Initialized auth host",{appName:this.app.name,mobileSafeAuth:n}),onIdTokenChanged(this.auth,t=>{o("[PLUTO-RTC][AUTH-HOST] Firebase ID token changed",{hasUser:!!t,uid:t?.uid,providerDataCount:t?.providerData?.length||0}),this.syncDesktopAuthToken(t);}),this.desktopTokenRefreshIntervalId||(this.desktopTokenRefreshIntervalId=setInterval(()=>{this.syncDesktopAuthToken(this.auth.currentUser,true);},600*1e3));}async syncDesktopAuthToken(e,n=false){if(!g)return;let r=e?await getIdToken(e,n).catch(()=>null):null,t=e?e.refreshToken??null:null;if(r===this.lastRelayedToken&&t===this.lastRelayedRefreshToken)return;this.lastRelayedToken=r,this.lastRelayedRefreshToken=t;let s=await Promise.allSettled([Promise.resolve(g({authToken:r,refreshToken:t}))]);s[0]?.status==="rejected"&&console.warn("[PLUTO-RTC][AUTH-HOST] Failed to relay auth token to desktop backend",{message:s[0].reason?.message});}getApp(){return this.app}getCurrentUser(){return this.auth.currentUser}getAuth(){return this.auth}onAuthStateChanged(e){return o("[PLUTO-RTC][AUTH-HOST] onAuthStateChanged listener registered (via onIdTokenChanged)"),onIdTokenChanged(this.auth,e)}onIdTokenChanged(e){return o("[PLUTO-RTC][AUTH-HOST] onIdTokenChanged listener registered"),onIdTokenChanged(this.auth,e)}async getIdToken(e){return this.auth.currentUser?getIdToken(this.auth.currentUser,e?.forceRefresh??true):null}async checkForSSOToken(){if(typeof window>"u")return;let e=new URLSearchParams(window.location.search),n=new URLSearchParams(window.location.hash.startsWith("#")?window.location.hash.slice(1):window.location.hash),r=e.get("token")||n.get("token")||(e.get("custom_token")==="true"||n.get("custom_token")==="true"?e.get("id_token")||n.get("id_token"):null);if(r)try{await this.persistenceReady,await signInWithCustomToken(this.auth,r),window.history.replaceState({},document.title,window.location.pathname);}catch(t){console.error("[PLUTO-RTC][AUTH-HOST] SSO sign-in failed:",t);}}async signInWithCustomTokenValue(e){return await this.persistenceReady,(await signInWithCustomToken(this.auth,e)).user}async signInWithPluto(e){if(typeof window>"u")throw new Error("Pluto SSO requires a browser environment.");let n=e?.redirectUri||window.location.href,r=e?.authorizeBaseUrl||"https://pluto.openrtc.app/sso/authorize",t=new URL(r);t.searchParams.set("redirect_uri",n),window.location.assign(t.toString());}async waitForAuth(){if(await this.persistenceReady,!this.auth.currentUser)return new Promise(e=>{let n=onAuthStateChanged(this.auth,r=>{r&&(n(),e());});})}async signInAnonymously(){await signInAnonymously(this.auth);}async signIn(e,n){return (await signInWithEmailAndPassword(this.auth,e,n)).user}async signUp(e,n){return (await createUserWithEmailAndPassword(this.auth,e,n)).user}async signOut(){await signOut(this.auth);}async deleteAccount(){if(!this.auth.currentUser)throw new Error("No user signed in");await deleteUser(this.auth.currentUser);}async signInWithCredential(e){let n=Date.now();if(o("[PLUTO-RTC][AUTH-HOST] signInWithCredential start",{callbackId:e.callbackId,provider:e.provider,hasIdToken:!!e.idToken,hasAccessToken:!!e.accessToken,hasNonce:!!e.nonce}),e.isCustomToken){o("[PLUTO-RTC][AUTH-HOST] signInWithCredential: custom token detected, using signInWithCustomToken");try{if(y())o("[PLUTO-RTC][AUTH-HOST] Skipping authStateReady before custom token sign-in on Tauri mobile",{callbackId:e.callbackId});else {o("[PLUTO-RTC][AUTH-HOST] Awaiting authStateReady...");try{await u(this.auth.authStateReady(),5e3,"authStateReady"),o("[PLUTO-RTC][AUTH-HOST] Auth state ready, signing in with custom token...");}catch(a){console.warn("[PLUTO-RTC][AUTH-HOST] authStateReady did not resolve in time; continuing custom token sign-in",{callbackId:e.callbackId,message:a?.message});}}let s;try{s=await u(signInWithCustomToken(this.auth,e.idToken),25e3,"signInWithCustomToken (custom token path)");}catch(a){console.warn("[PLUTO-RTC][AUTH-HOST] First custom token sign-in attempt failed; retrying once",{callbackId:e.callbackId,message:a?.message,code:a?.code}),await X(250),s=await u(signInWithCustomToken(this.auth,e.idToken),25e3,"signInWithCustomToken (custom token path retry)");}if(o("[PLUTO-RTC][AUTH-HOST] signInWithCustomToken success",{callbackId:e.callbackId,provider:e.provider,uid:s.user?.uid,elapsedMs:Date.now()-n}),s.user&&(e.displayName||e.photoURL))try{await updateProfile(s.user,{displayName:e.displayName||s.user.displayName||void 0,photoURL:e.photoURL||s.user.photoURL||void 0});}catch(a){console.warn("[PLUTO-RTC][AUTH-HOST] Failed to update custom-token user profile",{callbackId:e.callbackId,message:a?.message});}return s.user}catch(t){throw console.error("[PLUTO-RTC][AUTH-HOST] signInWithCustomToken failed",{callbackId:e.callbackId,error:t?.message,code:t?.code,stack:t?.stack,elapsedMs:Date.now()-n}),t}}let r;e.provider==="google"?r=GoogleAuthProvider.credential(e.idToken,e.accessToken):r=new OAuthProvider("apple.com").credential({idToken:e.idToken,rawNonce:e.nonce,accessToken:e.accessToken});try{let t=await u(signInWithCredential(this.auth,r),1e4,"firebase signInWithCredential");return o("[PLUTO-RTC][AUTH-HOST] signInWithCredential success",{callbackId:e.callbackId,provider:e.provider,uid:t.user?.uid,elapsedMs:Date.now()-n}),t.user}catch(t){console.warn("[PLUTO-RTC][AUTH-HOST] signInWithCredential primary path failed; trying custom token fallback",{callbackId:e.callbackId,provider:e.provider,elapsedMs:Date.now()-n,code:t?.code,message:t?.message});let s=await u(this.mintSessionTokenFromProviderToken(e),15e3,"mintSessionTokenFromProviderToken"),a=await u(signInWithCustomToken(this.auth,s),15e3,"signInWithCustomToken");return o("[PLUTO-RTC][AUTH-HOST] signInWithCustomToken fallback success",{callbackId:e.callbackId,provider:e.provider,uid:a.user?.uid,elapsedMs:Date.now()-n}),a.user}}async mintSessionTokenFromProviderToken(e){let n=httpsCallable(this.functions,"mintSessionToken");o("[PLUTO-RTC][AUTH-HOST] mintSessionToken fallback request start",{provider:e.provider,hasIdToken:!!e.idToken,hasNonce:!!e.nonce});let t=(await n({provider:e.provider,idToken:e.idToken,nonce:e.nonce})).data?.token;if(!t)throw new Error("mintSessionToken did not return a token for provider exchange");return o("[PLUTO-RTC][AUTH-HOST] mintSessionToken fallback request success",{provider:e.provider}),t}async signInWithPopup(e){if(e==="google"){let s=new GoogleAuthProvider;s.addScope("email"),s.addScope("profile"),s.setCustomParameters({prompt:"select_account"});let a=await signInWithPopup(this.auth,s);return {idToken:await getIdToken(a.user,true),refreshToken:a.user.refreshToken}}let n=new OAuthProvider("apple.com");n.addScope("email"),n.addScope("name");let r=b(32);typeof sessionStorage<"u"&&sessionStorage.setItem("apple_auth_nonce",r),n.setCustomParameters({nonce:await O(r)});let t=await signInWithPopup(this.auth,n);return {idToken:await getIdToken(t.user,true),refreshToken:t.user.refreshToken}}async signInWithRedirect(e,n){if(e==="google"){let s=new GoogleAuthProvider;s.addScope("email"),s.addScope("profile"),s.setCustomParameters({prompt:"select_account"}),await signInWithRedirect(this.auth,s);return}let r=new OAuthProvider("apple.com");r.addScope("email"),r.addScope("name");let t=n?.nonce||b(32);typeof sessionStorage<"u"&&sessionStorage.setItem("apple_auth_nonce",t),r.setCustomParameters({nonce:await O(t)}),await signInWithRedirect(this.auth,r);}async consumeRedirectResult(){return this.redirectResultConsumed?(o("[PLUTO-RTC][AUTH-HOST] consumeRedirectResult skipped (already consumed)"),null):this.redirectResultPromise?this.redirectResultPromise:(this.redirectResultPromise=(async()=>{try{o("[PLUTO-RTC][AUTH-HOST] consumeRedirectResult start");let e=await getRedirectResult(this.auth);if(!e)return o("[PLUTO-RTC][AUTH-HOST] consumeRedirectResult: no redirect result"),{fromRedirect:!1,user:null};this.redirectResultConsumed=!0;let n=await getIdToken(e.user,!0).catch(()=>null),r=e.providerId||e.user.providerData?.[0]?.providerId||null;return o("[PLUTO-RTC][AUTH-HOST] consumeRedirectResult success",{uid:e.user.uid,providerId:r,hasIdToken:!!n}),{fromRedirect:!0,user:e.user,providerId:r,idToken:n}}finally{this.redirectResultPromise=null;}})(),this.redirectResultPromise)}async startGoogleSignIn(){await this.signInWithRedirect("google");}async startAppleSignIn(){await this.signInWithRedirect("apple");}async mintSessionToken(){let r=(await httpsCallable(this.functions,"mintSessionToken")()).data;if(!r?.token)throw new Error("mintSessionToken did not return a token");return r.token}},m=null;function Q(){return m||(m=new k),m}var me=new Proxy({},{get(i,e,n){let r=Q(),t=r[e];return typeof t=="function"?t.bind(r):t}});
+export{f as a,P as b,te as c,pe as d,Q as e,me as f};