@okta/okta-auth-js
Version:
The Okta Auth SDK
104 lines (101 loc) • 3.85 kB
JavaScript
;
exports.addIDPPopupLisenter = addIDPPopupLisenter;
exports.addListener = addListener;
exports.addPostMessageListener = addPostMessageListener;
exports.loadFrame = loadFrame;
exports.loadPopup = loadPopup;
exports.removeListener = removeListener;
var _errors = require("../../errors");
/*!
* Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
* The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
*
* You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
*
* See the License for the specific language governing permissions and limitations under the License.
*
*/
/* global window, document */
/* eslint-disable complexity, max-statements */
const DEFAULT_TIMEOUT = 120000;
function addListener(eventTarget, name, fn) {
if (eventTarget.addEventListener) {
eventTarget.addEventListener(name, fn);
} else {
eventTarget.attachEvent('on' + name, fn);
}
}
function removeListener(eventTarget, name, fn) {
if (eventTarget.removeEventListener) {
eventTarget.removeEventListener(name, fn);
} else {
eventTarget.detachEvent('on' + name, fn);
}
}
function loadFrame(src) {
var iframe = document.createElement('iframe');
iframe.style.display = 'none';
iframe.src = src;
return document.body.appendChild(iframe);
}
function loadPopup(src, options) {
var title = options.popupTitle || 'External Identity Provider User Authentication';
var appearance = 'toolbar=no, scrollbars=yes, resizable=yes, ' + 'top=100, left=500, width=600, height=600';
return window.open(src, title, appearance);
}
function addPostMessageListener(sdk, timeout, state) {
var responseHandler;
var timeoutId;
var msgReceivedOrTimeout = new Promise(function (resolve, reject) {
responseHandler = function responseHandler(e) {
if (!e.data || e.data.state !== state) {
// A message not meant for us
return;
}
// Configuration mismatch between saved token and current app instance
// This may happen if apps with different issuers are running on the same host url
// If they share the same storage key, they may read and write tokens in the same location.
// Common when developing against http://localhost
if (e.origin !== sdk.getIssuerOrigin()) {
return reject(new _errors.AuthSdkError('The request does not match client configuration'));
}
resolve(e.data);
};
addListener(window, 'message', responseHandler);
timeoutId = setTimeout(function () {
reject(new _errors.AuthSdkError('OAuth flow timed out'));
}, timeout || DEFAULT_TIMEOUT);
});
return msgReceivedOrTimeout.finally(function () {
clearTimeout(timeoutId);
removeListener(window, 'message', responseHandler);
});
}
function addIDPPopupLisenter(sdk, timeout, channel, state) {
let timeoutId;
const promise = new Promise((resolve, reject) => {
channel.onmessage = event => {
// ignore invalid or untrusted events
if (!event.isTrusted || !event.data) {
return;
}
if (typeof event.data === 'object' && state === event.data.state) {
return resolve({
...event.data
});
}
reject(new _errors.AuthSdkError('Unable to complete auth code exchange'));
};
timeoutId = setTimeout(function () {
reject(new _errors.AuthSdkError('OAuth flow timed out'));
}, timeout || DEFAULT_TIMEOUT);
});
return promise.finally(() => {
clearTimeout(timeoutId);
channel.close();
});
}
//# sourceMappingURL=browser.js.map