UNPKG

electron-oauth-helper

Version:

Easy to use helper library for OAuth1 and OAuth2.

230 lines 11.2 kB
"use strict"; var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) { function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); } return new (P || (P = Promise))(function (resolve, reject) { function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } } function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } } function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); } step((generator = generator.apply(thisArg, _arguments || [])).next()); }); }; var __generator = (this && this.__generator) || function (thisArg, body) { var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g; return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g; function verb(n) { return function (v) { return step([n, v]); }; } function step(op) { if (f) throw new TypeError("Generator is already executing."); while (_) try { if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t; if (y = 0, t) op = [op[0] & 2, t.value]; switch (op[0]) { case 0: case 1: t = op; break; case 4: _.label++; return { value: op[1], done: false }; case 5: _.label++; y = op[1]; op = [0]; continue; case 7: op = _.ops.pop(); _.trys.pop(); continue; default: if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; } if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; } if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; } if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; } if (t[2]) _.ops.pop(); _.trys.pop(); continue; } op = body.call(thisArg, _); } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; } if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true }; } }; var __importDefault = (this && this.__importDefault) || function (mod) { return (mod && mod.__esModule) ? mod : { "default": mod }; }; Object.defineProperty(exports, "__esModule", { value: true }); var url_1 = __importDefault(require("url")); var querystring_1 = __importDefault(require("querystring")); var debug_1 = __importDefault(require("debug")); var utils_1 = require("../utils"); var __1 = require("../"); var debug = debug_1.default("eoh:oauth2"); var createAuthorizeParameters = function (config) { var keys = [ "client_id", "redirect_uri", "scope", "state", "response_type", ]; var parameter = Object.assign({}, keys.reduce(function (prev, key) { if (typeof config[key] === "string") { prev[key] = config[key]; } return prev; }, {})); return parameter; }; exports.authorizationCodeFlowTask = function (config, emitter, window, windowOptions) { if (windowOptions === void 0) { windowOptions = { userAgent: "" }; } return __awaiter(void 0, void 0, void 0, function () { var authorizeParameters, authorizeUrl, userAgent, url, query, error, parameters, headers, postdata; return __generator(this, function (_a) { switch (_a.label) { case 0: if (!window) { return [2 /*return*/, Promise.reject(new Error("window is required"))]; } authorizeParameters = createAuthorizeParameters(config); emitter.emit("before-authorize-request", authorizeParameters); authorizeUrl = config.authorize_url + "?" + querystring_1.default.stringify(authorizeParameters); userAgent = windowOptions.userAgent || ""; setImmediate(function () { debug("load", authorizeUrl); if (userAgent.length > 0) { window.loadURL(authorizeUrl, { userAgent: userAgent, }); } else { window.loadURL(authorizeUrl); } }); debug("start authorizationCodeFlowTask"); return [4 /*yield*/, utils_1.awaitRedirect(config.redirect_uri, window.webContents.session.webRequest)]; case 1: url = _a.sent(); debug("redirect url: \"" + url + "\""); query = url_1.default.parse(url, true).query; if (!query) { return [2 /*return*/, Promise.reject(new Error("invalid response: " + url))]; } if (query.error) { error = new __1.EOHError("Error response: " + query.error); error.query = url; return [2 /*return*/, Promise.reject(error)]; } if (!query.code) { return [2 /*return*/, Promise.reject(new Error("missing 'code' response."))]; } if (config.state && !query.state) { return [2 /*return*/, Promise.reject(new Error("missing 'state' response."))]; } parameters = { client_id: config.client_id, grant_type: "authorization_code", code: query.code, redirect_uri: config.redirect_uri, }; if (config.client_secret) { parameters.client_secret = config.client_secret; } if (query.state) { parameters.state = query.state; } headers = { "Content-Type": "application/x-www-form-urlencoded", }; emitter.emit("before-access-token-request", parameters, headers); postdata = querystring_1.default.stringify(parameters); return [4 /*yield*/, utils_1.postRequest({ url: config.access_token_url, headers: headers, }, postdata)]; case 2: return [2 /*return*/, _a.sent()]; } }); }); }; exports.implicitFlowTask = function (config, emitter, window, windowOptions) { if (windowOptions === void 0) { windowOptions = { userAgent: "" }; } return __awaiter(void 0, void 0, void 0, function () { var authorizeParameters, authorizeUrl, userAgent, url, hash; return __generator(this, function (_a) { switch (_a.label) { case 0: if (!window) { return [2 /*return*/, Promise.reject(new Error("window is required"))]; } authorizeParameters = createAuthorizeParameters(config); emitter.emit("before-authorize-request", authorizeParameters); authorizeUrl = config.authorize_url + "?" + querystring_1.default.stringify(authorizeParameters); userAgent = windowOptions.userAgent || ""; setImmediate(function () { if (userAgent.length > 0) { window.loadURL(authorizeUrl, { userAgent: userAgent, }); } else { window.loadURL(authorizeUrl); } }); debug("start implicitFlowTask:", authorizeUrl, config.redirect_uri); return [4 /*yield*/, utils_1.awaitRedirect(config.redirect_uri, window.webContents.session.webRequest)]; case 1: url = _a.sent(); debug("redirect url: \"" + url + "\""); hash = (url_1.default.parse(url, false).hash || "").replace(/^#/, ""); if (hash.includes("error=")) { return [2 /*return*/, Promise.reject(new Error("Error response: " + hash))]; } return [2 /*return*/, hash]; } }); }); }; exports.resourceOwnerPasswordCredentialsFlowTask = function (config, emitter) { var parameters = utils_1.omit(config, "access_token_url"); var headers = { "Content-Type": "application/x-www-form-urlencoded", }; emitter.emit("before-access-token-request", parameters, headers); var postdata = querystring_1.default.stringify(parameters); return utils_1.postRequest({ url: config.access_token_url, headers: headers }, postdata); }; exports.clientCredentialsFlowTask = function (config, emitter) { var parameters = utils_1.omit(config, "access_token_url"); var headers = { "Content-Type": "application/x-www-form-urlencoded", }; emitter.emit("before-access-token-request", parameters, headers); var postdata = querystring_1.default.stringify(parameters); return utils_1.postRequest({ url: config.access_token_url, headers: headers }, postdata); }; exports.validate = function (config) { var type = config.response_type || config.grant_type || "code"; var requiredKeys = (function () { switch (type) { case "code": return [ "client_id", "authorize_url", "access_token_url", "redirect_uri", ]; case "token": return ["client_id", "authorize_url", "redirect_uri"]; case "password": return ["access_token_url", "username", "password"]; case "client_credentials": return ["access_token_url"]; default: throw new Error("Unsupported type: " + type); } })(); var missing = requiredKeys.find(function (k) { return typeof config[k] !== "string"; }); if (missing) { return new Error(missing + " is required for " + type); } }; exports.needWindowForGrantType = function (config) { var type = config.response_type || config.grant_type || "code"; switch (type) { case "code": case "token": return true; case "password": case "client_credentials": return false; default: throw new Error("Unsupported type: " + type); } }; //# sourceMappingURL=helper.js.map