supertokens-website
Version:
frontend sdk for website to be used for auth solution.
77 lines (76 loc) • 4.38 kB
JavaScript
;
/* Copyright (c) 2024, VRAI Labs and/or its affiliates. All rights reserved.
*
* This software is licensed under the Apache License, Version 2.0 (the
* "License") as published by the Apache Software Foundation.
*
* You may not use this file except in compliance with the License. You may
* obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
* License for the specific language governing permissions and limitations
* under the License.
*/
Object.defineProperty(exports, "__esModule", { value: true });
exports.DateProvider = void 0;
var windowHandler_1 = require("../windowHandler");
var DateProvider = /** @class */ (function () {
function DateProvider() {
this.clockSkewInMillis = 0;
// Ensure a meaningful clock skew value by setting a threshold. Omitting a threshold would invariably lead to some
// clock skew due to server-client latency, arising from the time it takes for the token to arrive after being issued.
this.thresholdInSeconds = 7;
}
// The static init method is used to create a singleton instance of DateProvider,
// as we require access to localStorage for initializing clockSkewInMillis.
// Access to localStorage is available only after WindowHandlerReference is initialized.
// We took the following considerations into account while designing the cache implementation:
// 1. Cache cleared with an active session while the FE clock is wrong (e.g., Safari clears localStorage after 7 days).
// - Resets clockSkewInMillis to 0, corrected in the next front token update.
// 2. Outdated info in the cache making the clock point into the future.
// - May cause validator.shouldRefresh to always be true, corrected by the next front token update.
// 3. Outdated info in the cache making the clock point into the past.
// - May cause validator.shouldRefresh to always be false, fixed during the next token refresh (worst case).
// 4. Other tabs (on different subdomains) refreshing the session with outdated info in the cache.
// - Each subdomain has its own cache (localStorage), similar implications to cases 2 and 3.
// 5. Other tabs refreshing the session with outdated info in memory.
// - May cause validator.shouldRefresh to always be true or false, fixed in the next front token update.
DateProvider.init = function () {
if (DateProvider.instance !== undefined) {
return;
}
DateProvider.instance = new DateProvider();
var localStorage = windowHandler_1.default.getReferenceOrThrow().windowHandler.localStorage;
var stored = localStorage.getItemSync(DateProvider.CLOCK_SKEW_KEY);
var clockSkewInMillis = stored !== null ? parseInt(stored, 10) : 0;
DateProvider.instance.setClientClockSkewInMillis(clockSkewInMillis);
};
DateProvider.getReferenceOrThrow = function () {
if (DateProvider.instance === undefined) {
throw new Error("DateProvider must be initialized before calling this method.");
}
return DateProvider.instance;
};
DateProvider.prototype.getThresholdInSeconds = function () {
return this.thresholdInSeconds;
};
DateProvider.prototype.setThresholdInSeconds = function (thresholdInSeconds) {
this.thresholdInSeconds = thresholdInSeconds;
};
DateProvider.prototype.setClientClockSkewInMillis = function (clockSkewInMillis) {
this.clockSkewInMillis = Math.abs(clockSkewInMillis) >= this.thresholdInSeconds * 1000 ? clockSkewInMillis : 0;
var localStorage = windowHandler_1.default.getReferenceOrThrow().windowHandler.localStorage;
localStorage.setItemSync(DateProvider.CLOCK_SKEW_KEY, String(clockSkewInMillis));
};
DateProvider.prototype.getClientClockSkewInMillis = function () {
return this.clockSkewInMillis;
};
DateProvider.prototype.now = function () {
return Date.now() + this.getClientClockSkewInMillis();
};
DateProvider.CLOCK_SKEW_KEY = "__st_clockSkewInMillis";
return DateProvider;
})();
exports.DateProvider = DateProvider;