tenable-universal-layout 0.0.1-security → 7.7.13

package/dist/stores/Base/EnvironmentBase/index.d.ts

@@ -0,0 +1,11 @@
+import type { EnvironmentName, IEnvironment, IEnvironmentConfiguration } from '../types';
+export default class EnvironmentBase<TEnvironmentConfiguration extends IEnvironmentConfiguration> implements IEnvironment<TEnvironmentConfiguration> {
+    envName: EnvironmentName;
+    window: TEnvironmentConfiguration['window'];
+    document: TEnvironmentConfiguration['document'];
+    localStorage: TEnvironmentConfiguration['localStorage'];
+    config: TEnvironmentConfiguration['config'];
+    fetchClient: TEnvironmentConfiguration['fetchClient'];
+    openApiClients: TEnvironmentConfiguration['openApiClients'];
+    constructor(environmentConfiguration: TEnvironmentConfiguration);
+}

package/dist/stores/Base/EnvironmentBase/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class EnvironmentBase {
+    constructor(environmentConfiguration) {
+        this.envName = environmentConfiguration.envName;
+        this.window = environmentConfiguration.window;
+        this.document = environmentConfiguration.document;
+        this.localStorage = environmentConfiguration.localStorage;
+        this.config = environmentConfiguration.config;
+        this.fetchClient = environmentConfiguration.fetchClient;
+        this.openApiClients = environmentConfiguration.openApiClients;
+    }
+}
+exports.default = EnvironmentBase;
+//# sourceMappingURL=index.js.map

package/dist/stores/Base/EnvironmentBase/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/stores/Base/EnvironmentBase/index.ts"],"names":[],"mappings":";;AAMA,MAAqB,eAAe;IAkBlC,YAAY,wBAAmD;QAC7D,IAAI,CAAC,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAA;QAC/C,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAA;QAC7C,IAAI,CAAC,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAA;QACjD,IAAI,CAAC,YAAY,GAAG,wBAAwB,CAAC,YAAY,CAAA;QACzD,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAA;QAC7C,IAAI,CAAC,WAAW,GAAG,wBAAwB,CAAC,WAAW,CAAA;QACvD,IAAI,CAAC,cAAc,GAAG,wBAAwB,CAAC,cAAc,CAAA;IAC/D,CAAC;CACF;AA3BD,kCA2BC"}

package/dist/stores/Base/StoreBase/index.d.ts

@@ -0,0 +1,14 @@
+import type StoreRootBase from '../StoreRootBase';
+import type { IEnvironment, IEnvironmentConfiguration, IStoreBase, IStoreOptions, IStores } from '../types';
+/**
+ * Base store for all stores.
+ */
+export default abstract class StoreBase<TStoreRoot extends StoreRootBase<IEnvironment<IEnvironmentConfiguration>, IStores<any>>, TStoreOptions extends IStoreOptions = {}> implements IStoreBase<TStoreRoot> {
+    storeRoot: TStoreRoot;
+    options: TStoreOptions;
+    constructor(storeRoot: TStoreRoot, options: TStoreOptions);
+    /**
+     * Set some options to the store.
+     */
+    setOptions(options: Partial<TStoreOptions>): this;
+}

package/dist/stores/Base/StoreBase/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Base store for all stores.
+ */
+class StoreBase {
+    constructor(storeRoot, options) {
+        this.storeRoot = storeRoot;
+        this.options = Object.assign({}, options);
+    }
+    /**
+     * Set some options to the store.
+     */
+    setOptions(options) {
+        this.options = Object.assign(Object.assign({}, this.options), options);
+        return this;
+    }
+}
+exports.default = StoreBase;
+//# sourceMappingURL=index.js.map

package/dist/stores/Base/StoreBase/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/stores/Base/StoreBase/index.ts"],"names":[],"mappings":";;AASA;;GAEG;AACH,MAA8B,SAAS;IAYrC,YAAY,SAAqB,EAAE,OAAsB;QACvD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,OAAO,qBACP,OAAO,CACX,CAAA;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAA+B;QACxC,IAAI,CAAC,OAAO,mCACP,IAAI,CAAC,OAAO,GACZ,OAAO,CACX,CAAA;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA/BD,4BA+BC"}

package/dist/stores/Base/StoreRootBase/index.d.ts

@@ -0,0 +1,8 @@
+import type { IEnvironment, IStoreBase, IStores } from '../types';
+export default abstract class StoreRootBase<TEnvironment extends IEnvironment<any>, TStores extends IStores<any>> implements IStoreBase<any> {
+    storeRoot: this;
+    environment: TEnvironment;
+    stores: TStores;
+    constructor(environment: TEnvironment);
+    abstract _instanciateStores(): TStores;
+}

package/dist/stores/Base/StoreRootBase/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class StoreRootBase {
+    constructor(environment) {
+        this.storeRoot = this;
+        this.environment = environment;
+        this.stores = this._instanciateStores();
+    }
+}
+exports.default = StoreRootBase;
+//# sourceMappingURL=index.js.map

package/dist/stores/Base/StoreRootBase/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/stores/Base/StoreRootBase/index.ts"],"names":[],"mappings":";;AAEA,MAA8B,aAAa;IAWzC,YAAY,WAAyB;QAN9B,cAAS,GAAG,IAAI,CAAA;QAOrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACzC,CAAC;CAGF;AAjBD,gCAiBC"}

package/dist/stores/Base/types.d.ts

@@ -0,0 +1,48 @@
+import type { IOpenApiClients } from '../../libs/Environment/OpenApiClients/types';
+import type { IFetchClient } from '../../libs/FetchClient/types';
+import type { ITulConfig } from '../../types/tul';
+import type { IPendoExtended } from '../StorePendo/types';
+import type { ITelemetryExternalScriptAPI } from '../StoreTelemetry/types';
+import type StoreRootBase from './StoreRootBase';
+/**
+ * Environment
+ */
+export type EnvironmentName = 'inapp' | 'stubbed';
+export interface DomWindow {
+    pendo?: IPendoExtended;
+    telemetry?: ITelemetryExternalScriptAPI;
+}
+export interface DomDocument {
+    cookie: string;
+}
+export interface IEnvironmentConfiguration<TFetchClient extends IFetchClient = IFetchClient, TOpenApiClients extends IOpenApiClients = IOpenApiClients> {
+    envName: EnvironmentName;
+    window: DomWindow;
+    document: DomDocument;
+    localStorage: Storage;
+    config: ITulConfig;
+    fetchClient: TFetchClient;
+    openApiClients: TOpenApiClients;
+}
+export interface IEnvironment<TEnvironmentConfiguration extends IEnvironmentConfiguration> {
+    envName: EnvironmentName;
+    window: TEnvironmentConfiguration['window'];
+    document: TEnvironmentConfiguration['document'];
+    localStorage: TEnvironmentConfiguration['localStorage'];
+    config: TEnvironmentConfiguration['config'];
+    fetchClient: TEnvironmentConfiguration['fetchClient'];
+    openApiClients: TEnvironmentConfiguration['openApiClients'];
+}
+/**
+ * Stores
+ */
+export interface IStoreBase<TStoreRoot extends StoreRootBase<any, any>> {
+    storeRoot: TStoreRoot;
+}
+export interface IStores<TStoreRoot extends StoreRootBase<any, any>> extends Record<string, IStoreBase<TStoreRoot>> {
+}
+/**
+ * Options that can be defined for each store.
+ */
+export interface IStoreOptions {
+}

package/dist/stores/Base/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/stores/Base/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/stores/Base/types.ts"],"names":[],"mappings":""}

package/dist/stores/StoreAssistMode.d.ts

@@ -0,0 +1,29 @@
+import StoreFlags from '../stores/StoreFlags';
+import StoreBase from './Base/StoreBase';
+import type { IStoreOptions } from './Base/types';
+import type StoreRoot from './StoreRoot';
+export default class StoreAssistMode extends StoreBase<StoreRoot, IStoreOptions> {
+    storeFlagsStopImpersonation: StoreFlags;
+    private _logger;
+    private get localStorage();
+    /**
+     *
+     * Stop Mssp impersonation in two steps
+     * First logout and get the SAML payload in order to re-login
+     */
+    stopMsspImpersonation(): this;
+    /**
+     * Stop impersonation for a standard admin
+     */
+    stopAdminImpersonation(): this;
+    /**
+     * Stop impersonation whatever the context
+     */
+    stopImpersonation(): this;
+    get isImpersonating(): boolean;
+    get isMsspImpersonation(): boolean;
+    get isMsspChild(): boolean;
+    get isMsspParent(): boolean;
+    get isImpersonation(): boolean;
+    get isNormalUser(): boolean;
+}

package/dist/stores/StoreAssistMode.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const toolbox_1 = require("@productive-codebases/toolbox");
+const StoreFlags_1 = __importDefault(require("../stores/StoreFlags"));
+const types_1 = require("../types");
+const StoreBase_1 = __importDefault(require("./Base/StoreBase"));
+function getLocalStorageTokens(htmlResponse) {
+    var _a;
+    return (_a = htmlResponse
+        .match(/localStorage.setItem\(([^()]+)\)/g)) === null || _a === void 0 ? void 0 : _a.map(tokenEntry => tokenEntry.match(/'[^']+'/g)).map(entries => entries.map(value => value.split("'").join('')));
+}
+class StoreAssistMode extends StoreBase_1.default {
+    constructor() {
+        super(...arguments);
+        this.storeFlagsStopImpersonation = new StoreFlags_1.default(this.storeRoot, {});
+        this._logger = this.storeRoot.logger;
+    }
+    get localStorage() {
+        return this.storeRoot.environment.localStorage;
+    }
+    /**
+     *
+     * Stop Mssp impersonation in two steps
+     * First logout and get the SAML payload in order to re-login
+     */
+    stopMsspImpersonation() {
+        this.storeRoot.environment.fetchClient
+            .post('/mssp/accounts/logout', {})
+            .then(response => response.json())
+            .then((payload) => fetch(`/saml/login/${payload.saml_config_id}`, {
+            method: 'POST',
+            body: `SAMLResponse=${encodeURIComponent(payload.saml_response)}`,
+            headers: {
+                'content-type': 'application/x-www-form-urlencoded'
+            }
+        }))
+            .then(response => response.text())
+            .then(htmlText => {
+            var _a, _b, _c;
+            this.storeFlagsStopImpersonation.success();
+            (_a = this.localStorage) === null || _a === void 0 ? void 0 : _a.removeItem(types_1.LocalStorageKey.isMsspParent);
+            (_b = this.localStorage) === null || _b === void 0 ? void 0 : _b.removeItem(types_1.LocalStorageKey.IronImpersonate);
+            (_c = getLocalStorageTokens(htmlText)) === null || _c === void 0 ? void 0 : _c.forEach(([tokenName, tokenValue]) => { var _a; return (_a = this.localStorage) === null || _a === void 0 ? void 0 : _a.setItem(tokenName, tokenValue); });
+            this.storeRoot.redirectToTio('mssp/accounts');
+        })
+            .catch(error => {
+            this.storeFlagsStopImpersonation.fail();
+            this._logger('error')(error);
+        });
+        return this;
+    }
+    /**
+     * Stop impersonation for a standard admin
+     */
+    stopAdminImpersonation() {
+        this.storeRoot.environment.fetchClient
+            .post('/session/restore', {})
+            .then(() => {
+            var _a;
+            this.storeFlagsStopImpersonation.success();
+            (_a = this.localStorage) === null || _a === void 0 ? void 0 : _a.removeItem(types_1.LocalStorageKey.IronImpersonate);
+            this.storeRoot.redirectToTio('settings/access-control/users', types_1.LocalStorageSelectedApplication.settings);
+        })
+            .catch(error => {
+            this.storeFlagsStopImpersonation.fail();
+            this._logger('error')(error);
+        });
+        return this;
+    }
+    /**
+     * Stop impersonation whatever the context
+     */
+    stopImpersonation() {
+        if (this.isMsspChild) {
+            return this.stopMsspImpersonation();
+        }
+        return this.stopAdminImpersonation();
+    }
+    get isImpersonating() {
+        var _a;
+        return (((_a = this.localStorage) === null || _a === void 0 ? void 0 : _a.getItem(types_1.LocalStorageKey.IronImpersonate)) === 'true');
+    }
+    get isMsspImpersonation() {
+        var _a;
+        return (0, toolbox_1.isDefined)((_a = this.localStorage) === null || _a === void 0 ? void 0 : _a.getItem(types_1.LocalStorageKey.isMsspParent));
+    }
+    get isMsspChild() {
+        var _a, _b;
+        return Boolean(((_a = this.storeRoot.stores.storeAuthentication.session) === null || _a === void 0 ? void 0 : _a.rawSession.containerType) === 'local' &&
+            ((_b = this.storeRoot.stores.storeAuthentication.session) === null || _b === void 0 ? void 0 : _b.rawSession.type) ===
+                'mssp' &&
+            this.isMsspImpersonation);
+    }
+    get isMsspParent() {
+        var _a;
+        return (((_a = this.storeRoot.stores.storeAuthentication.session) === null || _a === void 0 ? void 0 : _a.rawSession.containerType) === 'mssp');
+    }
+    get isImpersonation() {
+        var _a;
+        return (((_a = this.storeRoot.stores.storeAuthentication.session) === null || _a === void 0 ? void 0 : _a.rawSession.containerType) === 'mssp');
+    }
+    get isNormalUser() {
+        var _a, _b;
+        return (((_a = this.storeRoot.stores.storeAuthentication.session) === null || _a === void 0 ? void 0 : _a.rawSession.containerType) === 'local' &&
+            ((_b = this.storeRoot.stores.storeAuthentication.session) === null || _b === void 0 ? void 0 : _b.rawSession.type) ===
+                'local');
+    }
+}
+exports.default = StoreAssistMode;
+//# sourceMappingURL=StoreAssistMode.js.map

package/dist/stores/StoreAssistMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StoreAssistMode.js","sourceRoot":"","sources":["../../src/stores/StoreAssistMode.ts"],"names":[],"mappings":";;;;;AAAA,2DAAyD;AACzD,qEAA4C;AAC5C,mCAA0E;AAE1E,iEAAwC;AASxC,SAAS,qBAAqB,CAC5B,YAAoB;;IAEpB,OAAO,MAAA,YAAY;SAChB,KAAK,CAAC,mCAAmC,CAAC,0CACzC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAqB,EACnE,GAAG,CACF,OAAO,CAAC,EAAE,CACR,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAqB,CACtE,CAAA;AACL,CAAC;AAED,MAAqB,eAAgB,SAAQ,mBAG5C;IAHD;;QAIS,gCAA2B,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAE/D,YAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAA;IA2HzC,CAAC;IAzHC,IAAY,YAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAA;IAChD,CAAC;IAED;;;;OAIG;IACH,qBAAqB;QACnB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,WAAW;aACnC,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;aACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aACjC,IAAI,CAAC,CAAC,OAAc,EAAE,EAAE,CACvB,KAAK,CAAC,eAAe,OAAO,CAAC,cAAc,EAAE,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;YACjE,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CACH;aACA,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aACjC,IAAI,CAAC,QAAQ,CAAC,EAAE;;YACf,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,CAAA;YAE1C,MAAA,IAAI,CAAC,YAAY,0CAAE,UAAU,CAAC,uBAAe,CAAC,YAAY,CAAC,CAAA;YAC3D,MAAA,IAAI,CAAC,YAAY,0CAAE,UAAU,CAAC,uBAAe,CAAC,eAAe,CAAC,CAAA;YAE9D,MAAA,qBAAqB,CAAC,QAAQ,CAAC,0CAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,WACnE,OAAA,MAAA,IAAI,CAAC,YAAY,0CAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA,EAAA,CAClD,CAAA;YAED,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAA;QAC/C,CAAC,CAAC;aACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACb,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAA;YAEvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEJ,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,WAAW;aACnC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;aAC5B,IAAI,CAAC,GAAG,EAAE;;YACT,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,CAAA;YAE1C,MAAA,IAAI,CAAC,YAAY,0CAAE,UAAU,CAAC,uBAAe,CAAC,eAAe,CAAC,CAAA;YAE9D,IAAI,CAAC,SAAS,CAAC,aAAa,CAC1B,+BAA+B,EAC/B,uCAA+B,CAAC,QAAQ,CACzC,CAAA;QACH,CAAC,CAAC;aACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACb,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAA;YAEvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEJ,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAA;IACtC,CAAC;IAED,IAAI,eAAe;;QACjB,OAAO,CACL,CAAA,MAAA,IAAI,CAAC,YAAY,0CAAE,OAAO,CAAC,uBAAe,CAAC,eAAe,CAAC,MAAK,MAAM,CACvE,CAAA;IACH,CAAC;IAED,IAAI,mBAAmB;;QACrB,OAAO,IAAA,mBAAS,EAAC,MAAA,IAAI,CAAC,YAAY,0CAAE,OAAO,CAAC,uBAAe,CAAC,YAAY,CAAC,CAAC,CAAA;IAC5E,CAAC;IAED,IAAI,WAAW;;QACb,OAAO,OAAO,CACZ,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAC1D,aAAa,MAAK,OAAO;YAC1B,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAAC,IAAI;gBAChE,MAAM;YACR,IAAI,CAAC,mBAAmB,CAC3B,CAAA;IACH,CAAC;IAED,IAAI,YAAY;;QACd,OAAO,CACL,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAC1D,aAAa,MAAK,MAAM,CAC5B,CAAA;IACH,CAAC;IAED,IAAI,eAAe;;QACjB,OAAO,CACL,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAC1D,aAAa,MAAK,MAAM,CAC5B,CAAA;IACH,CAAC;IAED,IAAI,YAAY;;QACd,OAAO,CACL,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAC1D,aAAa,MAAK,OAAO;YAC5B,CAAA,MAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,0CAAE,UAAU,CAAC,IAAI;gBAChE,OAAO,CACV,CAAA;IACH,CAAC;CACF;AAjID,kCAiIC"}

package/dist/stores/StoreAuthentication.d.ts

@@ -0,0 +1,73 @@
+import EntitySession from '../entities/EntitySession';
+import type { ServerProperties } from '../libs/openapi/wug/serverConfigResource';
+import type { IAuthenticationHeaders } from '../types';
+import type { Maybe } from '../types/helpers';
+import StoreBase from './Base/StoreBase';
+import type { IStoreOptions } from './Base/types';
+import StoreFlags from './StoreFlags';
+import type StoreRoot from './StoreRoot';
+export default class StoreAuthentication extends StoreBase<StoreRoot, IStoreOptions> {
+    storeFlagsFetchSession: StoreFlags;
+    storeFlagsFetchServerProperties: StoreFlags;
+    private _serverProperties;
+    private _logger;
+    /**
+     * Observable
+     */
+    private $session;
+    constructor(storeRoot: StoreRoot, options: IStoreOptions);
+    /**
+     * Sets up heartbeat polling in production to check for a session timeout.
+     * When timeout is detected, the user is redirected to t.io logout page
+     * which will initiate the required cleanup & logout steps.
+     */
+    setupSessionTimeoutPoll(): void;
+    /**
+     * Only redirect to t.io app in production when session timeout is detected.
+     */
+    private redirectToTioLogout;
+    /**
+     * Fetch the session.
+     * By default, the one returned by service-account returned by the /session endpoint.
+     */
+    fetchSession(): Promise<void>;
+    /**
+     * Fetch server properties (WUG meta-data).
+     */
+    fetchServerProperties(): Promise<void>;
+    /**
+     * Save the iron token received from the login query in LocalStorage
+     * and set the x-cookie header value to the FetchClient to authenticate
+     * all next queries.
+     */
+    saveAndApplyIronToken(session?: {
+        token: string;
+    }): this;
+    /**
+     * Return the x-cookie header as an object.
+     */
+    forgeXCookieHeader(): Maybe<IAuthenticationHeaders>;
+    /**
+     * Retrieve the iron token from
+     * - cookie (workaround to be able to be authentificed when rendering PDF via Pupetteer)
+     * - or from the local storage (normal behavior)
+     */
+    getIronToken(): Maybe<string>;
+    /**
+     * Checks if siteId is a Fedramp site
+     */
+    isFedramp(): boolean;
+    get serverProperties(): Maybe<ServerProperties>;
+    /**
+     * Actions
+     */
+    setSession(session: EntitySession): this;
+    /**
+     * Computed
+     */
+    get session(): Maybe<EntitySession>;
+    /**
+     * Return user's initials.
+     */
+    get userInitials(): string;
+}

package/dist/stores/StoreAuthentication.js

@@ -0,0 +1,264 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mobx_1 = require("mobx");
+const EntitySession_1 = __importDefault(require("../entities/EntitySession"));
+const parseCookie_1 = require("../libs/authentication/parseCookie");
+const helpers_1 = require("../libs/Environment/Authentication/helpers");
+const validators_1 = require("../libs/validators/validators");
+const types_1 = require("../types");
+const StoreBase_1 = __importDefault(require("./Base/StoreBase"));
+const StoreFlags_1 = __importDefault(require("./StoreFlags"));
+class StoreAuthentication extends StoreBase_1.default {
+    constructor(storeRoot, options) {
+        super(storeRoot, options);
+        this.storeFlagsFetchSession = new StoreFlags_1.default(this.storeRoot, {});
+        this.storeFlagsFetchServerProperties = new StoreFlags_1.default(this.storeRoot, {});
+        this._serverProperties = null;
+        this._logger = this.storeRoot.logger;
+        /**
+         * Observable
+         */
+        this.$session = mobx_1.observable.box(null);
+        (0, mobx_1.makeObservable)(this);
+    }
+    /**
+     * Sets up heartbeat polling in production to check for a session timeout.
+     * When timeout is detected, the user is redirected to t.io logout page
+     * which will initiate the required cleanup & logout steps.
+     */
+    setupSessionTimeoutPoll() {
+        var _a, _b;
+        const { services } = this.storeRoot.environment.config;
+        const { sessionResourceApi } = this.storeRoot.environment.openApiClients;
+        // if explicitely set to false, don't check session timeout
+        const dontCheckSessionTimeout = ((_a = services.session) === null || _a === void 0 ? void 0 : _a.checkSessionTimeout) === false;
+        if (dontCheckSessionTimeout) {
+            return;
+        }
+        // Use the one from the config or the default one from OpenApi
+        const checkSessionFetchFn = ((_b = services.session) === null || _b === void 0 ? void 0 : _b.checkSessionTimeout)
+            ? services.session.checkSessionTimeout
+            : sessionResourceApi.heartbeatRaw.bind(sessionResourceApi);
+        // Same interval as specified by t.io
+        const heartbeatIntervalDuration = 30000;
+        // We don't need to clear interval because we will hard redirect to t.io app
+        if (this.storeRoot.environment.config.app.production) {
+            setInterval(() => {
+                checkSessionFetchFn({})
+                    .then(response => {
+                    if (!response.raw.ok) {
+                        this.redirectToTioLogout(response.raw);
+                    }
+                })
+                    .catch(err => {
+                    this.redirectToTioLogout(err);
+                });
+            }, heartbeatIntervalDuration);
+        }
+    }
+    /**
+     * Only redirect to t.io app in production when session timeout is detected.
+     */
+    redirectToTioLogout(append) {
+        this._logger('error')(`Session timeout detected, redirecting to t.io logout page.\n${append}`);
+        this.storeRoot.redirectToTio('logout');
+    }
+    /**
+     * Fetch the session.
+     * By default, the one returned by service-account returned by the /session endpoint.
+     */
+    fetchSession() {
+        var _a, _b;
+        const { services } = this.storeRoot.environment.config;
+        // use the one from the config or the default one from OpenApi
+        const fetchUserSessionPromise = ((_a = services.session) === null || _a === void 0 ? void 0 : _a.sessionDataGetter)
+            ? (_b = services.session) === null || _b === void 0 ? void 0 : _b.sessionDataGetter()
+            : this.storeRoot.environment.openApiClients.sessionResourceApi.session();
+        this.storeFlagsFetchSession.loading();
+        return fetchUserSessionPromise
+            .then(session => {
+            var _a;
+            if (!(0, validators_1.isValidSession)(session)) {
+                throw new Error('Invalid session');
+            }
+            this.setSession(EntitySession_1.default.createFromObject(session));
+            this.storeFlagsFetchSession.success();
+            // Send session data if handler is defined
+            if ((_a = this.storeRoot.environment.config.app.handlers) === null || _a === void 0 ? void 0 : _a.onTulSessionFetched) {
+                this.storeRoot.environment.config.app.handlers.onTulSessionFetched({
+                    tulApi: this.storeRoot.tulApi,
+                    session: this.session
+                });
+            }
+        })
+            .catch(err => {
+            var _a;
+            this._logger('error')('Cant retrieve the session from the backend (%o)', err);
+            this.storeFlagsFetchSession.fail();
+            // Send a null session if handler is defined
+            if ((_a = this.storeRoot.environment.config.app.handlers) === null || _a === void 0 ? void 0 : _a.onTulSessionFetched) {
+                this.storeRoot.environment.config.app.handlers.onTulSessionFetched({
+                    tulApi: this.storeRoot.tulApi,
+                    session: null
+                });
+            }
+            // Forward the exception to the caller
+            throw err;
+        });
+    }
+    /**
+     * Fetch server properties (WUG meta-data).
+     */
+    fetchServerProperties() {
+        var _a, _b;
+        const { services } = this.storeRoot.environment.config;
+        // use the one from the config or the default one from OpenApi
+        const fetchServerPropertiesPromise = ((_a = services.serverProperties) === null || _a === void 0 ? void 0 : _a.serverPropertiesDataGetter)
+            ? (_b = services.serverProperties) === null || _b === void 0 ? void 0 : _b.serverPropertiesDataGetter()
+            : this.storeRoot.environment.openApiClients.wugServerConfigResourceApi.getServerProperties();
+        this.storeFlagsFetchServerProperties.loading();
+        return fetchServerPropertiesPromise
+            .then(serverProperties => {
+            var _a, _b;
+            if (!(0, validators_1.isValidServerProperties)(serverProperties)) {
+                throw new Error('Invalid server properties');
+            }
+            this._serverProperties = serverProperties;
+            // Send server properties data if handler is defined
+            if ((_a = this.storeRoot.environment.config.app.handlers) === null || _a === void 0 ? void 0 : _a.onTulServerPropertiesFetched) {
+                this.storeRoot.environment.config.app.handlers.onTulServerPropertiesFetched({
+                    tulApi: this.storeRoot.tulApi,
+                    serverProperties: this.serverProperties
+                });
+            }
+            if (serverProperties.license) {
+                this.storeRoot.stores.storeLayout.initApps(serverProperties.license.apps);
+                // Send licensed apps if handler is defined
+                if ((_b = this.storeRoot.environment.config.app.handlers) === null || _b === void 0 ? void 0 : _b.onTulLicensedAppsSet) {
+                    this.storeRoot.environment.config.app.handlers.onTulLicensedAppsSet({
+                        tulApi: this.storeRoot.tulApi,
+                        apps: this.storeRoot.stores.storeLayout.apps
+                    });
+                }
+            }
+            this.storeFlagsFetchServerProperties.success();
+        })
+            .catch(err => {
+            var _a;
+            this._logger('error')('Cant retrieve the server properties from the backend (%s)', err);
+            // Send a null serverProperties if handler is defined
+            if ((_a = this.storeRoot.environment.config.app.handlers) === null || _a === void 0 ? void 0 : _a.onTulServerPropertiesFetched) {
+                this.storeRoot.environment.config.app.handlers.onTulServerPropertiesFetched({
+                    tulApi: this.storeRoot.tulApi,
+                    serverProperties: null
+                });
+            }
+            this.storeFlagsFetchServerProperties.fail();
+            // Forward the exception to the caller
+            throw err;
+        });
+    }
+    /**
+     * Save the iron token received from the login query in LocalStorage
+     * and set the x-cookie header value to the FetchClient to authenticate
+     * all next queries.
+     */
+    saveAndApplyIronToken(session) {
+        var _a;
+        const token = (session === null || session === void 0 ? void 0 : session.token) || this.getIronToken();
+        if (!token) {
+            throw new Error('Missing authentication token');
+        }
+        // set the token in localstorage, that defines if the user is authed or not
+        (_a = this.storeRoot.environment.localStorage) === null || _a === void 0 ? void 0 : _a.setItem(types_1.LocalStorageKey.IronToken, token);
+        const authenticationHeaders = this.forgeXCookieHeader();
+        if (!authenticationHeaders) {
+            throw new Error('Missing x-cookie header');
+        }
+        // add the token into the fetchClient instance for REST communications
+        this.storeRoot.environment.fetchClient.setHeaders(authenticationHeaders);
+        // add the token in headers for OpenApi implementation
+        this.storeRoot.environment.openApiClients.setAuthToken(authenticationHeaders);
+        return this;
+    }
+    /**
+     * Return the x-cookie header as an object.
+     */
+    forgeXCookieHeader() {
+        const token = this.getIronToken();
+        if (!token) {
+            return null;
+        }
+        return {
+            'x-cookie': (0, helpers_1.getTokenForCookieValue)(token)
+        };
+    }
+    /**
+     * Retrieve the iron token from
+     * - cookie (workaround to be able to be authentificed when rendering PDF via Pupetteer)
+     * - or from the local storage (normal behavior)
+     */
+    getIronToken() {
+        var _a;
+        const cookies = (0, parseCookie_1.parseCookies)(this.storeRoot.environment.document.cookie);
+        return (
+        // Iron token can be saved in a cookie when rendering PDF pages to workaround
+        // local storage limitation
+        cookies[types_1.LocalStorageKey.IronToken] ||
+            (
+            // Retrieve Iton token from local storage in all other use-cases
+            (_a = this.storeRoot.environment.localStorage) === null || _a === void 0 ? void 0 : _a.getItem(types_1.LocalStorageKey.IronToken)) ||
+            null);
+    }
+    /**
+     * Checks if siteId is a Fedramp site
+     */
+    isFedramp() {
+        var _a, _b;
+        const siteId = (_b = (_a = this.serverProperties) === null || _a === void 0 ? void 0 : _a.analytics) === null || _b === void 0 ? void 0 : _b.siteId;
+        return siteId === 'qa-gov01' || siteId === 'gov01';
+    }
+    get serverProperties() {
+        return this._serverProperties;
+    }
+    /**
+     * Actions
+     */
+    setSession(session) {
+        this.$session.set(session);
+        return this;
+    }
+    /**
+     * Computed
+     */
+    get session() {
+        return (0, mobx_1.toJS)(this.$session.get());
+    }
+    /**
+     * Return user's initials.
+     */
+    get userInitials() {
+        var _a;
+        return ((_a = this.$session.get()) === null || _a === void 0 ? void 0 : _a.initials) || '?';
+    }
+}
+exports.default = StoreAuthentication;
+__decorate([
+    mobx_1.action
+], StoreAuthentication.prototype, "setSession", null);
+__decorate([
+    mobx_1.computed
+], StoreAuthentication.prototype, "session", null);
+__decorate([
+    mobx_1.computed
+], StoreAuthentication.prototype, "userInitials", null);
+//# sourceMappingURL=StoreAuthentication.js.map