zudoku 0.1.1-dev.50 → 0.1.1-dev.52

package/src/lib/authentication/openid.ts

@@ -1,194 +0,0 @@
-import logger from "loglevel";
-import * as oauth from "oauth4webapi";
-import { DevPortalContext } from "../core/DevPortalContext.js";
-import { type AuthProvider } from "./authentication.js";
-
-const algorithm = "oauth2";
-
-const getAuthServerByIssuer = async (issuer: string) => {
-  const authorizationServer = await oauth
-    .discoveryRequest(new URL(issuer), { algorithm })
-    .then((response) =>
-      oauth.processDiscoveryResponse(new URL(issuer), response),
-    );
-
-  return authorizationServer;
-};
-
-export type AuthServerOption = {
-  issuer?: string;
-  authorizationEndpoint?: string;
-  tokenEndpoint?: string;
-};
-
-const getAuthServer = async ({
-  issuer,
-  authorizationEndpoint,
-  tokenEndpoint,
-}: AuthServerOption) => {
-  return issuer
-    ? await getAuthServerByIssuer(issuer)
-    : ({
-        issuer: new URL(authorizationEndpoint!).origin,
-        authorization_endpoint: authorizationEndpoint,
-        token_endpoint: tokenEndpoint,
-        code_challenge_methods_supported: [],
-      } satisfies oauth.AuthorizationServer);
-};
-
-export const openIdAuth = ({
-  clientId,
-  clientSecret,
-  issuer,
-  authorizationEndpoint,
-  tokenEndpoint,
-}: {
-  clientId: string;
-  clientSecret?: string;
-  audience?: string;
-} & AuthServerOption): AuthProvider => {
-  const client: oauth.Client = {
-    client_id: clientId,
-    client_secret: clientSecret,
-    token_endpoint_auth_method: "none",
-  };
-
-  const redirect_uri = "http://localhost:5173/oauth/callback";
-
-  return {
-    initialize() {
-      return Promise.resolve();
-    },
-    signOut() {},
-    login: async (context: DevPortalContext) => {
-      const code_challenge_method = "S256";
-      const authorizationServer = await getAuthServer({
-        issuer,
-        authorizationEndpoint,
-        tokenEndpoint,
-      });
-
-      if (!authorizationServer.authorization_endpoint) {
-        throw new Error("No authorization endpoint");
-      }
-
-      /**
-       * The following MUST be generated for every redirect to the authorization_endpoint. You must store
-       * the codeVerifier and nonce in the end-user session such that it can be recovered as the user
-       * gets redirected from the authorization server back to your application.
-       */
-      const codeVerifier = oauth.generateRandomCodeVerifier();
-      const codeChallenge =
-        await oauth.calculatePKCECodeChallenge(codeVerifier);
-
-      await context.sessionStorage.set("codeVerifier", codeVerifier);
-
-      // redirect user to as.authorization_endpoint
-      const authorizationUrl = new URL(
-        authorizationServer.authorization_endpoint,
-      );
-      authorizationUrl.searchParams.set("client_id", client.client_id);
-      authorizationUrl.searchParams.set("redirect_uri", redirect_uri);
-      authorizationUrl.searchParams.set("response_type", "code");
-      // authorizationUrl.searchParams.set("scope", "api:read");
-      authorizationUrl.searchParams.set("code_challenge", codeChallenge);
-      authorizationUrl.searchParams.set(
-        "code_challenge_method",
-        code_challenge_method,
-      );
-
-      /**
-       * We cannot be sure the AS supports PKCE so we're going to use state too. Use of PKCE is
-       * backwards compatible even if the AS doesn't support it which is why we're using it regardless.
-       */
-      if (
-        authorizationServer.code_challenge_methods_supported?.includes(
-          "S256",
-        ) !== true
-      ) {
-        const state = oauth.generateRandomState();
-        authorizationUrl.searchParams.set("state", state);
-      }
-
-      // now redirect the user to authorizationUrl.href
-      location.href = authorizationUrl.href;
-    },
-
-    handleAuthenticationResponse: async ({ search }, { sessionStorage }) => {
-      const searchParams = new URLSearchParams(search);
-      const state = searchParams.get("state");
-      if (!state) {
-        return;
-      }
-
-      // one eternity later, the user lands back on the redirect_uri
-      // Authorization Code Grant Request & Response
-      const codeVerifier = await sessionStorage.get("codeVerifier");
-
-      if (!codeVerifier) {
-        return;
-      }
-
-      const as = await getAuthServer({
-        issuer,
-        authorizationEndpoint,
-        tokenEndpoint,
-      });
-
-      const params = oauth.validateAuthResponse(
-        as,
-        client,
-        searchParams,
-        state,
-      );
-      if (oauth.isOAuth2Error(params)) {
-        logger.error("Error Response", params);
-        throw new Error(); // Handle OAuth 2.0 redirect error
-      }
-
-      const response = await oauth.authorizationCodeGrantRequest(
-        as,
-        client,
-        params,
-        redirect_uri,
-        codeVerifier,
-      );
-
-      // @todo do we need to do these
-      // const challenges = oauth.parseWwwAuthenticateChallenges(response);
-      // if (challenges) {
-      //   for (const challenge of challenges) {
-      //     console.error("WWW-Authenticate Challenge", challenge);
-      //   }
-      //   throw new Error(); // Handle WWW-Authenticate Challenges as needed
-      // }
-
-      const oauthResult = await oauth.processAuthorizationCodeOpenIDResponse(
-        as,
-        client,
-        response,
-      );
-      if (oauth.isOAuth2Error(oauthResult)) {
-        logger.error("Error Response", oauthResult);
-        throw new Error(oauthResult.error);
-      }
-
-      const userInfoResponse = await oauth.userInfoRequest(
-        as,
-        client,
-        oauthResult.access_token,
-      );
-      const userInfo = await userInfoResponse.json();
-
-      // void storage.setProfile({
-      //   sub: userInfo.sub,
-      //   email: userInfo.email,
-      //   name: userInfo.name,
-      //   email_verified: userInfo.email_verified ?? false,
-      //   picture: userInfo.picture,
-      //   id_token: oauthResult.id_token,
-      //   access_token: oauthResult.access_token,
-      // });
-    },
-  };
-};

package/src/lib/core/types/combine.ts

@@ -1,16 +0,0 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type UnionToIntersection<U> = (U extends any ? (k: U) => void : never) extends (
-  k: infer I,
-) => void
-  ? I
-  : never;
-
-type AnyCombination<T, U = T> = T extends any
-  ? U extends any
-    ? T | (T & U)
-    : never
-  : never;
-
-export type Combine<T extends any[]> =
-  | UnionToIntersection<T[number]>
-  | AnyCombination<T[number]>;