UNPKG

supertokens-node

Version:
82 lines (81 loc) 3.44 kB
"use strict"; /* Copyright (c) 2024, VRAI Labs and/or its affiliates. All rights reserved. * * This software is licensed under the Apache License, Version 2.0 (the * "License") as published by the Apache Software Foundation. * * You may not use this file except in compliance with the License. You may * obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the * License for the specific language governing permissions and limitations * under the License. */ var __importDefault = (this && this.__importDefault) || function (mod) { return (mod && mod.__esModule) ? mod : { "default": mod }; }; Object.defineProperty(exports, "__esModule", { value: true }); exports.default = authGET; const utils_1 = require("../../../utils"); const set_cookie_parser_1 = __importDefault(require("set-cookie-parser")); const error_1 = __importDefault(require("../../../recipe/session/error")); async function authGET(stInstance, apiImplementation, options, userContext) { var _a; if (apiImplementation.authGET === undefined) { return false; } const origURL = options.req.getOriginalURL(); const splitURL = origURL.split("?"); const params = new URLSearchParams(splitURL[1]); let session, shouldTryRefresh; try { session = await stInstance.getRecipeInstanceOrThrow("session").getSession({ req: options.req, res: options.res, options: { sessionRequired: false }, userContext, }); shouldTryRefresh = false; } catch (error) { session = undefined; if (error_1.default.isErrorFromSuperTokens(error) && error.type === error_1.default.TRY_REFRESH_TOKEN) { shouldTryRefresh = true; } else { // This should generally not happen, but we can handle this as if the session is not present, // because then we redirect to the frontend, which should handle the validation error shouldTryRefresh = false; } } let response = await apiImplementation.authGET({ options, params: Object.fromEntries(params.entries()), cookie: options.req.getHeaderValue("cookie"), session: session, shouldTryRefresh, userContext, }); if ("redirectTo" in response) { if (response.cookies) { const cookieStr = set_cookie_parser_1.default.splitCookiesString(response.cookies); const cookies = set_cookie_parser_1.default.parse(cookieStr); for (const cookie of cookies) { options.res.setCookie(cookie.name, cookie.value, cookie.domain, !!cookie.secure, !!cookie.httpOnly, new Date(cookie.expires).getTime(), cookie.path || "/", cookie.sameSite); } } options.res.original.redirect(response.redirectTo); } else if ("statusCode" in response) { (0, utils_1.sendNon200Response)(options.res, (_a = response.statusCode) !== null && _a !== void 0 ? _a : 400, { error: response.error, error_description: response.errorDescription, }); } else { (0, utils_1.send200Response)(options.res, response); } return true; }