session-sync-auth-site 0.4.1 → 0.5.0

package/README.md

@@ -99,6 +99,46 @@ setUpSessionSyncAuthRoutes({
 })
 ```
 
+## Admin backend functions
+
+```js
+const { createUser, getLoginLink, updateUserAccount } = require('session-sync-auth-site')
+
+app.post(`create-user`, (req, res, next) => {
+  const userId = await createUser({
+    email: req.body.email,
+    req,
+  })
+  res.send({ userId })
+})
+
+app.post(`get-login-link`, (req, res, next) => {
+  const loginLink = await getLoginLink({
+    email: req.body.email,
+    redirectUrl: req.body.redirectUrl,  // optional
+    req,
+  })
+  res.send({ loginLink })
+})
+
+app.post(`update-user-account`, (req, res, next) => {
+  await updateUserAccount({
+    userId: req.body.userId,
+    data: {  // only include details being updated
+      name: req.body.name,
+      email: req.body.email,
+      image: req.body.image,
+      language: req.body.language,
+      terms: req.body.terms,
+      image: req.body.image,
+      gender: req.body.gender,
+    },
+    req,
+  })
+  res.send({ success: true })
+})
+```
+
 # Frontend usage
 
 ```html
@@ -141,7 +181,9 @@ setUpSessionSyncAuthRoutes({
 
     <button onclick="javascript:window.sessionSyncAuth.getAccessToken()">Get Access Token</button>
 
-    <button onclick="javascript:window.sessionSyncAuth.logIn()">Log in</button>
+    <button onclick="javascript:window.sessionSyncAuth.logIn()">Sign in</button>
+
+    <button onclick="javascript:window.sessionSyncAuth.updateAccount()">Update my account</button>
 
     <button onclick="javascript:window.sessionSyncAuth.getUser()">Get user</button>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "session-sync-auth-site",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "main": "src/index.js",
   "repository": {
     "type": "git",

package/src/authenticate.js

@@ -71,7 +71,7 @@ const authenticate = ({
               .map(key => {
                 const safeKey = key.replace(/[`\s]/g, '')
                 return (
-                  `AND \`${safeKey}\` = :${safeKey}`
+                  `AND u.\`${safeKey}\` = :${safeKey}`
                 )
               })
               .join('\n')

package/src/createUser.js

@@ -0,0 +1,43 @@
+const jwt = require('jsonwebtoken')
+
+const createUser = async ({
+  email,
+  req,  // either this or `setup` is required
+  setup,  // keys: siteId, authDomain, and jwtSecret
+}={}) => {
+
+  const {
+    siteId,
+    authDomain,
+    jwtSecret,
+    protocol=req.sessionSyncAuthProtocol || `https`,
+  } = setup || await req.getSessionSyncAuthSetupInfo()
+
+  const createUserResult = await fetch(
+    `${protocol}://${authDomain}/api/create-user`,
+    {
+      method: 'post',
+      body: JSON.stringify({
+        siteId,
+        jwtData: jwt.sign(
+          {
+            email,
+          },
+          jwtSecret,
+        ),
+      }),
+      headers: {
+        'Content-Type': 'application/json',
+      },
+    },
+  )
+
+  if(createUserResult.status !== 200) throw new Error(`User creation failed: ${createUserResult.statusText} [${createUserResult.status}]`)
+  const { success, userId } = await createUserResult.json()
+  if(!success) throw new Error(`User creation failed: bad result from auth server`)
+
+  return userId
+
+}
+
+module.exports = createUser

package/src/getLoginLink.js

@@ -0,0 +1,48 @@
+const jwt = require('jsonwebtoken')
+
+const getLoginLink = async ({
+  email,
+  redirectUrl,  // defaults to req.headers.origin
+  req,  // either this or `setup` is required
+  setup,  // keys: siteId, authDomain, and jwtSecret
+}={}) => {
+
+  redirectUrl = redirectUrl || req.headers.origin
+
+  const {
+    siteId,
+    authDomain,
+    jwtSecret,
+    protocol=req.sessionSyncAuthProtocol || `https`,
+  } = setup || await req.getSessionSyncAuthSetupInfo()
+
+  const origin = (redirectUrl.match(/^https?:\/\/[^/]+/, '') || {})[0]
+  const loggedInRedirectUrl = `${redirectUrl}${/\?/.test(redirectUrl) ? `&` : `?`}action=successfulLogin&origin=${encodeURIComponent(origin)}&accessToken=ACCESS_TOKEN`
+
+  const getLoginLinkResult = await fetch(
+    `${protocol}://${authDomain}/api/get-login-link`,
+    {
+      method: 'post',
+      body: JSON.stringify({
+        siteId,
+        jwtData: jwt.sign(
+          {
+            email,
+            loggedInRedirectUrl,
+          },
+          jwtSecret,
+        ),
+      }),
+      headers: {
+        'Content-Type': 'application/json',
+      },
+    },
+  )
+
+  if(getLoginLinkResult.status !== 200) throw new Error(`Login link creation failed: ${getLoginLinkResult.statusText} [${getLoginLinkResult.status}]`)
+
+  return await getLoginLinkResult.text()
+
+}
+
+module.exports = getLoginLink

package/src/index.js

@@ -1,7 +1,13 @@
 const authenticate = require('./authenticate')
 const setUpSessionSyncAuthRoutes = require('./setUpSessionSyncAuthRoutes')
+const createUser = require('./createUser')
+const updateUserAccount = require('./updateUserAccount')
+const getLoginLink = require('./getLoginLink')
 
 module.exports = {
   authenticate,
   setUpSessionSyncAuthRoutes,
+  createUser,
+  updateUserAccount,
+  getLoginLink,
 }

package/src/sessionSyncAuthFrontend.js

@@ -6,6 +6,8 @@
     defaultOrigin = origin
   }
 
+  const addOnQueryStrConnectorChar = href => `${href}${/\?/.test(href) ? `&` : `?`}`
+
   const getLocalStorageOrCookieItem = item => {
     if(enableSSR) {
       const desiredCookieNameAndValue = (
@@ -43,18 +45,28 @@
     return queryStringAddOn
   }
 
-  const logIn = async ({ origin=defaultOrigin, extraQueryParamsForCallbacks, loggedInRedirectHref }={}) => {
-    const cancelRedirectUrl = `${location.href.replace(/\?.*$/, '')}?action=canceledLogin&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
-    const loggedInRedirectUrl = `${loggedInRedirectHref || location.href.replace(/\?.*$/, '')}?action=successfulLogin&origin=${encodeURIComponent(origin)}&accessToken=ACCESS_TOKEN${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
+  const logIn = async ({
+    origin=defaultOrigin,
+    extraQueryParamsForCallbacks,
+    loggedInRedirectHref=location.href,
+    cancelRedirectHref=location.href,
+  }={}) => {
+    const cancelRedirectUrl = `${addOnQueryStrConnectorChar(cancelRedirectHref)}action=canceledLogin&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
+    const loggedInRedirectUrl = `${addOnQueryStrConnectorChar(loggedInRedirectHref)}action=successfulLogin&origin=${encodeURIComponent(origin)}&accessToken=ACCESS_TOKEN${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
 
     const queryString = `cancelRedirectUrl=${encodeURIComponent(cancelRedirectUrl)}&loggedInRedirectUrl=${encodeURIComponent(loggedInRedirectUrl)}`
 
     window.location = `${origin}/log-in?${queryString}`
   }
 
-  const updateAccount = async ({ origin=defaultOrigin, extraQueryParamsForCallbacks, updatedRedirectHref }={}) => {
-    const cancelRedirectUrl = `${location.href.replace(/\?.*$/, '')}?action=canceledAccountUpdate&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
-    const updatedRedirectUrl = `${updatedRedirectHref || location.href.replace(/\?.*$/, '')}?action=successfulAccountUpdate&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
+  const updateAccount = async ({
+    origin=defaultOrigin,
+    extraQueryParamsForCallbacks,
+    updatedRedirectHref=location.href,
+    cancelRedirectHref=location.href,
+  }={}) => {
+    const cancelRedirectUrl = `${addOnQueryStrConnectorChar(cancelRedirectHref)}action=canceledAccountUpdate&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
+    const updatedRedirectUrl = `${addOnQueryStrConnectorChar(updatedRedirectHref)}action=successfulAccountUpdate&origin=${encodeURIComponent(origin)}${getQueryStringAddOn(extraQueryParamsForCallbacks)}`
 
     const queryString = `cancelRedirectUrl=${encodeURIComponent(cancelRedirectUrl)}&updatedRedirectUrl=${encodeURIComponent(updatedRedirectUrl)}`
 

package/src/setUpSessionSyncAuthRoutes.js

@@ -21,6 +21,12 @@ const setUpSessionSyncAuthRoutes = ({
 
   getSetupInfo = getSetupInfo || (async () => ({ siteId, jwtSecret, authDomain }))
 
+  app.use((req, res, next) => {
+    req.getSessionSyncAuthSetupInfo = () => getSetupInfo(req)
+    req.sessionSyncAuthProtocol = protocol
+    next()
+  })
+
   app.get(getUser, (req, res, next) => {
     res.json({
       status: req.user ? 'Logged in' : 'Not logged in',

package/src/updateUserAccount.js

@@ -0,0 +1,42 @@
+const jwt = require('jsonwebtoken')
+
+const updateUserAccount = async ({
+  userId,
+  data,
+  req,  // either this or `setup` is required
+  setup,  // keys: siteId, authDomain, and jwtSecret
+}={}) => {
+
+  const {
+    siteId,
+    authDomain,
+    jwtSecret,
+    protocol=req.sessionSyncAuthProtocol || `https`,
+  } = setup || await req.getSessionSyncAuthSetupInfo()
+
+  const updateUserAccountResult = await fetch(
+    `${protocol}://${authDomain}/api/update-user-account`,
+    {
+      method: 'post',
+      body: JSON.stringify({
+        siteId,
+        jwtData: jwt.sign(
+          {
+            userId,
+            data,
+          },
+          jwtSecret,
+        ),
+      }),
+      headers: {
+        'Content-Type': 'application/json',
+      },
+    },
+  )
+
+  if(updateUserAccountResult.status !== 200) throw new Error(`User update failed: ${updateUserAccountResult.statusText} [${updateUserAccountResult.status}]`)
+  if(!(await updateUserAccountResult.json()).success) throw new Error(`User update failed: bad result from auth server`)
+
+}
+
+module.exports = updateUserAccount