signet-auth 1.1.1 → 1.2.0

package/README.md

@@ -298,9 +298,12 @@ providers:
         config:
             audiences: ['https://ic3.teams.office.com']
 
+    # IMPORTANT: entryUrl must point to a specific workspace (/client/<TEAM_ID>),
+    # not the root URL, which shows a workspace picker where localStorage
+    # is not yet populated.
     slack:
         domains: ['app.slack.com', 'edgeapi.slack.com']
-        entryUrl: https://app.slack.com/
+        entryUrl: https://app.slack.com/client/<TEAM_ID>
         strategy: cookie
         config:
             ttl: '7d'
@@ -308,7 +311,7 @@ providers:
         localStorage:
             - name: token
               key: localConfig_v2
-              jsonPath: teams.*.token
+              jsonPath: teams.<TEAM_ID>.token
 ```
 
 ## Strategies
@@ -380,17 +383,19 @@ Extract values from browser localStorage after authentication. Useful for apps t
 
 Extracted values are stored on the credential and included in `sig get` JSON output, but are NOT applied as HTTP headers.
 
-| Field      | Required | Description                                                      |
-| ---------- | -------- | ---------------------------------------------------------------- |
-| `name`     | **yes**  | Output key name for the extracted value                          |
-| `key`      | **yes**  | localStorage key to read                                         |
-| `jsonPath` | no       | Dot-delimited path into parsed JSON value (e.g. `teams.*.token`) |
+**Important:** The `entryUrl` must point to a page where localStorage is actually populated. For example, Slack's root URL shows a workspace picker — localStorage is only populated after entering a workspace. Use a direct workspace URL like `https://app.slack.com/client/<TEAM_ID>` instead.
+
+| Field      | Required | Description                                                              |
+| ---------- | -------- | ------------------------------------------------------------------------ |
+| `name`     | **yes**  | Output key name for the extracted value                                  |
+| `key`      | **yes**  | localStorage key to read                                                 |
+| `jsonPath` | no       | Dot-delimited path into parsed JSON value (e.g. `teams.<TEAM_ID>.token`) |
 
 ```yaml
 localStorage:
     - name: token
       key: localConfig_v2
-      jsonPath: teams.*.token
+      jsonPath: teams.<TEAM_ID>.token
 ```
 
 ## Remote / Headless Setup

package/dist/browser/flows/localstorage-capture.js

@@ -1,25 +1,4 @@
-/**
- * Resolve a dot-delimited JSON path on an object.
- * Numeric segments index into arrays (e.g. "teams.0.token").
- * Returns undefined if any segment is missing.
- */
-function resolveJsonPath(obj, path) {
-    let current = obj;
-    for (const segment of path.split('.')) {
-        if (current == null || typeof current !== 'object')
-            return undefined;
-        if (Array.isArray(current)) {
-            const index = Number(segment);
-            if (!Number.isInteger(index) || index < 0)
-                return undefined;
-            current = current[index];
-        }
-        else {
-            current = current[segment];
-        }
-    }
-    return current;
-}
+import dlv from 'dlv';
 /**
  * Extract values from the browser's localStorage.
  *
@@ -43,7 +22,7 @@ export async function extractLocalStorage(page, configs) {
         if (config.jsonPath) {
             try {
                 const parsed = JSON.parse(raw);
-                const value = resolveJsonPath(parsed, config.jsonPath);
+                const value = dlv(parsed, config.jsonPath);
                 if (typeof value === 'string') {
                     result[config.name] = value;
                 }

package/dist/cli/commands/get.js

@@ -1,7 +1,17 @@
 import { isOk } from '../../core/result.js';
 import { formatJson, formatCredentialHeaders } from '../formatters.js';
 import { ExitCode } from '../exit-codes.js';
-const PRIMARY_HEADERS = ['cookie', 'authorization'];
+import { CredentialTypeName, HttpHeader, OutputFormat } from '../../core/constants.js';
+const PRIMARY_HEADERS = [HttpHeader.COOKIE.toLowerCase(), HttpHeader.AUTHORIZATION.toLowerCase()];
+function getLocalStorage(credential) {
+    if (credential.type === CredentialTypeName.COOKIE ||
+        credential.type === CredentialTypeName.BEARER) {
+        const ls = credential.localStorage;
+        if (ls && Object.keys(ls).length > 0)
+            return ls;
+    }
+    return undefined;
+}
 export async function runGet(positionals, flags, deps) {
     const target = positionals[0];
     if (!target) {
@@ -67,39 +77,39 @@ export async function runGet(positionals, flags, deps) {
             xHeaders[name] = value;
         }
     }
-    const format = flags.format ?? 'json';
+    const format = flags.format ?? OutputFormat.JSON;
     switch (format) {
-        case 'json': {
-            const output = {
-                provider: providerId,
-                credential: primaryHeaderValue,
-                headerName: primaryHeaderName,
+        case OutputFormat.JSON: {
+            const credentialObj = {
                 type: credential.type,
+                headerName: primaryHeaderName,
+                value: primaryHeaderValue,
             };
             if (Object.keys(xHeaders).length > 0)
-                output.xHeaders = xHeaders;
-            if (credential.type === 'cookie' || credential.type === 'bearer') {
-                if (credential.localStorage && Object.keys(credential.localStorage).length > 0) {
-                    output.localStorage = credential.localStorage;
-                }
-            }
+                credentialObj.xHeaders = xHeaders;
+            const ls = getLocalStorage(credential);
+            if (ls)
+                credentialObj.localStorage = ls;
+            const output = {
+                provider: providerId,
+                credential: credentialObj,
+            };
             process.stdout.write(formatJson(output) + '\n');
             break;
         }
-        case 'header': {
+        case OutputFormat.HEADER: {
             process.stdout.write(formatCredentialHeaders(headers) + '\n');
             break;
         }
-        case 'value': {
+        case OutputFormat.VALUE: {
             process.stdout.write(primaryHeaderValue + '\n');
             for (const [name, value] of Object.entries(xHeaders)) {
                 process.stdout.write(`${name}=${value}\n`);
             }
-            if (credential.type === 'cookie' || credential.type === 'bearer') {
-                if (credential.localStorage && Object.keys(credential.localStorage).length > 0) {
-                    for (const [name, value] of Object.entries(credential.localStorage)) {
-                        process.stdout.write(`${name}=${value}\n`);
-                    }
+            const ls = getLocalStorage(credential);
+            if (ls) {
+                for (const [name, value] of Object.entries(ls)) {
+                    process.stdout.write(`${name}=${value}\n`);
                 }
             }
             break;

package/dist/core/constants.d.ts

@@ -98,6 +98,15 @@ export declare const AuthScheme: {
     readonly BEARER: "Bearer";
     readonly BASIC: "Basic";
 };
+/**
+ * Output format options for `sig get`.
+ */
+export declare const OutputFormat: {
+    readonly JSON: "json";
+    readonly HEADER: "header";
+    readonly VALUE: "value";
+};
+export type OutputFormatValue = (typeof OutputFormat)[keyof typeof OutputFormat];
 /**
  * Application identity.
  */

package/dist/core/constants.js

@@ -112,6 +112,14 @@ export const AuthScheme = {
     BEARER: 'Bearer',
     BASIC: 'Basic',
 };
+/**
+ * Output format options for `sig get`.
+ */
+export const OutputFormat = {
+    JSON: 'json',
+    HEADER: 'header',
+    VALUE: 'value',
+};
 /**
  * Application identity.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "signet-auth",
-    "version": "1.1.1",
+    "version": "1.2.0",
     "description": "General-purpose authentication CLI with pluggable strategies and browser adapters",
     "main": "dist/index.js",
     "type": "module",
@@ -35,12 +35,14 @@
     },
     "dependencies": {
         "croner": "^10.0.1",
+        "dlv": "^1.1.3",
         "playwright-core": "^1.50.0",
         "proper-lockfile": "^4.1.2",
         "yaml": "^2.7.0"
     },
     "devDependencies": {
         "@eslint/js": "^10.0.1",
+        "@types/dlv": "^1.1.5",
         "@types/node": "^20.10.0",
         "@types/proper-lockfile": "^4.1.4",
         "eslint": "^10.2.0",