kopi-id/dist/router/index.js

Simple OIDC Library

"use strict";

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports["default"] = void 0;

var _express = _interopRequireDefault(require("express"));

var _expressValidation = _interopRequireDefault(require("express-validation"));

var _controller = _interopRequireDefault(require("./controller"));

var _validation = _interopRequireDefault(require("./validation"));

var _validate = _interopRequireDefault(require("../services/validate"));

var _clientAuth = _interopRequireDefault(require("../services/clientAuth"));

var _logger = _interopRequireDefault(require("../services/logger"));

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { "default": obj }; }

function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }

function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }

var _default = function _default(oidcConfig) {
  var router = _express["default"].Router({
    mergeParams: true
  });

  var controller = (0, _controller["default"])(oidcConfig);
  var validationService = (0, _validate["default"])(oidcConfig);
  var clientAuthenticationService = (0, _clientAuth["default"])(oidcConfig, validationService);

  var _loggerService = (0, _logger["default"])('Router'),
      L = _loggerService.L;

  var checkAccessToken = /*#__PURE__*/function () {
    var _ref = _asyncToGenerator( /*#__PURE__*/regeneratorRuntime.mark(function _callee(req, res, next) {
      var authorizationHeader, bearerPrefix, accessToken;
      return regeneratorRuntime.wrap(function _callee$(_context) {
        while (1) {
          switch (_context.prev = _context.next) {
            case 0:
              _context.prev = 0;
              authorizationHeader = req.headers['authorization'];
              bearerPrefix = 'Bearer ';

              if (!(authorizationHeader == null)) {
                _context.next = 6;
                break;
              }

              res.status(401).send();
              return _context.abrupt("return");

            case 6:
              if (!(authorizationHeader.indexOf(bearerPrefix) !== 0)) {
                _context.next = 9;
                break;
              }

              res.status(401).send();
              return _context.abrupt("return");

            case 9:
              accessToken = authorizationHeader.slice(bearerPrefix.length);

              if (!(accessToken === '')) {
                _context.next = 13;
                break;
              }

              res.status(401).send();
              return _context.abrupt("return");

            case 13:
              _context.next = 15;
              return validationService.validateToken(accessToken, oidcConfig.accessTokenSecret);

            case 15:
              req.tokenPayload = _context.sent;
              next();
              _context.next = 22;
              break;

            case 19:
              _context.prev = 19;
              _context.t0 = _context["catch"](0);
              next(_context.t0);

            case 22:
            case "end":
              return _context.stop();
          }
        }
      }, _callee, null, [[0, 19]]);
    }));

    return function checkAccessToken(_x, _x2, _x3) {
      return _ref.apply(this, arguments);
    };
  }();

  router.route('/authorize').get((0, _expressValidation["default"])(_validation["default"].authenticationRequestGet), controller.authenticationRequestGet).post((0, _expressValidation["default"])(_validation["default"].authenticationRequestPost), controller.authenticationRequestPost);
  router.route('/token').post(clientAuthenticationService.checkClientAuthentication, (0, _expressValidation["default"])(_validation["default"].tokenRequestPost), controller.tokenRequestPost);
  router.route('/userinfo').get(checkAccessToken, controller.userInfoGet).post(checkAccessToken, controller.userInfoPost);
  return router;
};

exports["default"] = _default;