@axa-fr/oidc-client/src/fetch.ts

OpenID Connect & OAuth authentication using native javascript only, compatible with angular, react, vue, svelte, next, etc.

import Oidc from './oidc';
import { getValidTokenAsync, OidcToken } from './parseTokens';
import { Fetch } from './types';

// @ts-ignore
export const fetchWithTokens =
  (fetch: Fetch, oidc: Oidc | null, demonstrating_proof_of_possession: boolean = false): Fetch =>
  async (...params: Parameters<Fetch>): Promise<Response> => {
    const [url, options, ...rest] = params;
    const optionTmp = options ? { ...options } : { method: 'GET' };
    let headers = new Headers();
    if (optionTmp.headers) {
      headers = !(optionTmp.headers instanceof Headers)
        ? new Headers(optionTmp.headers)
        : optionTmp.headers;
    }

    const oidcToken: OidcToken = {
      getTokens: () => oidc.tokens,
      configuration: {
        token_automatic_renew_mode: oidc.configuration.token_automatic_renew_mode,
        refresh_time_before_tokens_expiration_in_second:
          oidc.configuration.refresh_time_before_tokens_expiration_in_second,
      },
      renewTokensAsync: oidc.renewTokensAsync.bind(oidc),
    };

    // @ts-ignore
    const getValidToken = await getValidTokenAsync(oidcToken);

    const accessToken = getValidToken?.tokens?.accessToken;
    if (!headers.has('Accept')) {
      headers.set('Accept', 'application/json');
    }
    if (accessToken) {
      if (
        oidc.configuration.demonstrating_proof_of_possession &&
        demonstrating_proof_of_possession
      ) {
        const demonstrationOdProofOfPossession =
          await oidc.generateDemonstrationOfProofOfPossessionAsync(
            accessToken,
            url.toString(),
            optionTmp.method,
          );
        headers.set('Authorization', `DPoP ${accessToken}`);
        headers.set('DPoP', demonstrationOdProofOfPossession);
      } else {
        headers.set('Authorization', `Bearer ${accessToken}`);
      }
      if (!optionTmp.credentials) {
        optionTmp.credentials = 'same-origin';
      }
    }
    const newOptions = { ...optionTmp, headers };
    return await fetch(url, newOptions, ...rest);
  };