@okta/okta-auth-js
Version:
The Okta Auth SDK
71 lines (68 loc) • 2.69 kB
JavaScript
;
exports.renewTokensWithRefresh = renewTokensWithRefresh;
var _errors = require("../errors");
var _oauth = require("./util/oauth");
var _refreshToken = require("./util/refreshToken");
var _handleOAuthResponse = require("./handleOAuthResponse");
var _token = require("./endpoints/token");
var _dpop = require("./dpop");
var _errors2 = require("./util/errors");
/*!
* Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
* The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
*
* You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
*
* See the License for the specific language governing permissions and limitations under the License.
*
*/
/* eslint complexity:[0,8] */
async function renewTokensWithRefresh(sdk, tokenParams, refreshTokenObject) {
const {
clientId,
dpop
} = sdk.options;
if (!clientId) {
throw new _errors.AuthSdkError('A clientId must be specified in the OktaAuth constructor to renew tokens');
}
try {
const renewTokenParams = Object.assign({}, tokenParams, {
clientId
});
if (refreshTokenObject.extraParams) {
renewTokenParams.extraParams = refreshTokenObject.extraParams;
}
const endpointParams = {
...renewTokenParams
};
if (dpop) {
const keyPair = await (0, _dpop.findKeyPair)(refreshTokenObject?.dpopPairId); // will throw if KP cannot be found
endpointParams.dpopKeyPair = keyPair;
renewTokenParams.dpop = dpop;
renewTokenParams.dpopPairId = refreshTokenObject.dpopPairId;
}
const tokenResponse = await (0, _token.postRefreshToken)(sdk, endpointParams, refreshTokenObject);
const urls = (0, _oauth.getOAuthUrls)(sdk, tokenParams);
const {
tokens
} = await (0, _handleOAuthResponse.handleOAuthResponse)(sdk, renewTokenParams, tokenResponse, urls);
// Support rotating refresh tokens
const {
refreshToken
} = tokens;
if (refreshToken && !(0, _refreshToken.isSameRefreshToken)(refreshToken, refreshTokenObject)) {
sdk.tokenManager.updateRefreshToken(refreshToken);
}
return tokens;
} catch (err) {
if ((0, _errors2.isRefreshTokenInvalidError)(err)) {
// if the refresh token is invalid, remove it from storage
sdk.tokenManager.removeRefreshToken();
}
throw err;
}
}
//# sourceMappingURL=renewTokensWithRefresh.js.map