@geogirafe/lib-geoportal/tools/auth/authmanager.js

GeoGirafe is a flexible application to build online geoportals.

import StateManager from '../state/statemanager';
import GMFManager from './gmfmanager';
import OpenIdConnectManager from './openidconnectmanager';
import GirafeSingleton from '../../base/GirafeSingleton';
import ConfigManager from '../configuration/configmanager';
import GMFConnectManager from './gmfconnectmanager';
import { v4 as uuidv4 } from 'uuid';
export default class AuthManager extends GirafeSingleton {
    get state() {
        return this.stateManager.state;
    }
    constructor(type) {
        super(type);
        Object.defineProperty(this, "serviceWorker", {
            enumerable: true,
            configurable: true,
            writable: true,
            value: null
        });
        Object.defineProperty(this, "stateManager", {
            enumerable: true,
            configurable: true,
            writable: true,
            value: void 0
        });
        Object.defineProperty(this, "issuerManager", {
            enumerable: true,
            configurable: true,
            writable: true,
            value: void 0
        });
        Object.defineProperty(this, "gmfManager", {
            enumerable: true,
            configurable: true,
            writable: true,
            value: void 0
        });
        this.stateManager = StateManager.getInstance();
        this.gmfManager = GMFManager.getInstance();
        this.stateManager.subscribe('oauth.status', () => this.loginStateChanged());
        this.stateManager.subscribe('oauth.tokens', () => this.tokensChanged());
    }
    async initialize(sw) {
        if (!sw) {
            console.warn("ServiceWorker cannot be initialized. Authentication won't work properly.");
        }
        this.serviceWorker = sw;
        const oauthIssuerConfig = ConfigManager.getInstance().Config.oauth?.issuer;
        const gmfauthConfig = ConfigManager.getInstance().Config.gmfauth;
        if (oauthIssuerConfig) {
            // Standard oAuth workflow
            await this.initializeOAuth(oauthIssuerConfig);
        }
        else if (gmfauthConfig) {
            await this.initializeGmfAuth(gmfauthConfig);
        }
        // Else: no auth configured
        // Nothing to do
    }
    async initializeOAuth(config) {
        this.issuerManager = OpenIdConnectManager.getInstance();
        await this.issuerManager.initialize();
        // No silent login if user is in the process of being logged in ('issuer.loggedIn' is second step of login process)
        if (config.checkSessionOnLoad && this.state.oauth.status !== 'issuer.loggedIn') {
            await this.silentLogin();
        }
        if (config.loginRequired && this.state.oauth.status === 'loggedOut') {
            await this.login();
        }
    }
    async initializeGmfAuth(config) {
        this.issuerManager = GMFConnectManager.getInstance();
        await this.issuerManager.initialize();
        // For GMF, the silent login is actually the same as checkin if the userinfos are already defined
        if (config.checkSessionOnLoad) {
            await this.gmfManager.getUserInfo();
            this.state.oauth.status = this.state.oauth.userInfo?.username ? 'loggedIn' : 'loggedOut';
        }
        if (config.loginRequired && this.state.oauth.status === 'loggedOut') {
            await this.login();
        }
    }
    async loginStateChanged() {
        try {
            if (this.state.oauth.status === 'issuer.loggedIn') {
                // We are logged in to the identity provider
                // We must now login to GMF (for GMF < 2.9 only)
                // If we got a token from the issuer, we first call the GMF login route with Token
                if (this.state.oauth.tokens) {
                    await this.gmfManager.loginWithToken();
                }
                // And then we get the UserInfos
                await this.gmfManager.getUserInfo();
                if (this.state.oauth.userInfo?.username) {
                    this.state.oauth.status = 'loggedIn';
                }
                else {
                    throw new Error('Login failed, no user found.');
                }
            }
            else if (this.state.oauth.status === 'loggedOutForcedFromBackend') {
                // The user was loggedout from the backend
                // This can happen either if the user has been loggedout from another tab in the browser
                // Or if the user session was closed from the identity provider
                this.userLoggedOutFromBackend();
            }
        }
        catch (e) {
            this.state.oauth.status = 'loginFailed';
            throw e;
        }
    }
    userLoggedOutFromBackend() {
        this.stateManager.state.infobox.elements.push({
            id: uuidv4(),
            text: 'User has been logged out.',
            type: 'warning'
        });
    }
    tokensChanged() {
        this.serviceWorker?.postMessage({ access_token: this.state.oauth.tokens?.access_token });
    }
    async login() {
        // Login to the issuer.
        // The login to the backend will automatically be done
        // when coming back from the issuer
        try {
            await this.issuerManager.login();
        }
        catch (e) {
            this.state.oauth.status = 'loginFailed';
            throw e;
        }
    }
    async silentLogin() {
        try {
            console.log('silentLogin');
            await this.issuerManager.silentLogin();
        }
        catch (e) {
            this.state.oauth.status = 'loggedOut';
            // TODO REG : Test anonymous username ?
        }
    }
    async logout() {
        // Logout from backend and then from the issuer
        try {
            await this.gmfManager.logout();
            await this.issuerManager.logout();
        }
        catch (e) {
            this.state.oauth.status = 'loginFailed';
            throw e;
        }
    }
}