|
| 1 | +import OidcClientSettings from './OidcClientSettings'; |
| 2 | + |
1 | 3 | export default class OidcClientService { |
2 | | - constructor(settings, metadataService, authorizationResultParser) { |
3 | | - this._settings = settings; |
4 | | - this._metadataService = metadataService; |
5 | | - this._authorizationResultParser = authorizationResultParser; |
| 4 | + constructor(settings) { |
| 5 | + if (!settings) { |
| 6 | + throw new Error("settings"); |
| 7 | + } |
| 8 | + |
| 9 | + this._settings = new OidcClientSettings(settings); |
6 | 10 | } |
| 11 | + |
| 12 | + get settings() { |
| 13 | + return this._settings; |
| 14 | + } |
| 15 | + |
| 16 | + createSigninRequest(){ |
| 17 | + } |
| 18 | + |
| 19 | + processSigninResponse(){ |
| 20 | + } |
| 21 | + |
| 22 | + createSignoutRequest(){ |
| 23 | + } |
| 24 | + |
| 25 | +// OidcClient.prototype.createTokenRequestAsync = function () { |
| 26 | +// log("OidcClient.createTokenRequestAsync"); |
| 27 | + |
| 28 | +// var client = this; |
| 29 | +// var settings = client._settings; |
| 30 | + |
| 31 | +// return client.loadAuthorizationEndpoint().then(function (authorization_endpoint) { |
| 32 | + |
| 33 | +// var state = rand(); |
| 34 | +// var url = authorization_endpoint + "?state=" + encodeURIComponent(state); |
| 35 | + |
| 36 | +// if (client.isOidc) { |
| 37 | +// var nonce = rand(); |
| 38 | +// url += "&nonce=" + encodeURIComponent(nonce); |
| 39 | +// } |
| 40 | + |
| 41 | +// var required = ["client_id", "redirect_uri", "response_type", "scope"]; |
| 42 | +// required.forEach(function (key) { |
| 43 | +// var value = settings[key]; |
| 44 | +// if (value) { |
| 45 | +// url += "&" + key + "=" + encodeURIComponent(value); |
| 46 | +// } |
| 47 | +// }); |
| 48 | + |
| 49 | +// var optional = ["prompt", "display", "max_age", "ui_locales", "id_token_hint", "login_hint", "acr_values"]; |
| 50 | +// optional.forEach(function (key) { |
| 51 | +// var value = settings[key]; |
| 52 | +// if (value) { |
| 53 | +// url += "&" + key + "=" + encodeURIComponent(value); |
| 54 | +// } |
| 55 | +// }); |
| 56 | + |
| 57 | +// var request_state = { |
| 58 | +// oidc: client.isOidc, |
| 59 | +// oauth: client.isOAuth, |
| 60 | +// state: state |
| 61 | +// }; |
| 62 | + |
| 63 | +// if (nonce) { |
| 64 | +// request_state["nonce"] = nonce; |
| 65 | +// } |
| 66 | + |
| 67 | +// settings.request_state_store.setItem(settings.request_state_key, JSON.stringify(request_state)); |
| 68 | + |
| 69 | +// return { |
| 70 | +// request_state: request_state, |
| 71 | +// url: url |
| 72 | +// }; |
| 73 | +// }); |
| 74 | +// } |
| 75 | + |
| 76 | +// OidcClient.prototype.createLogoutRequestAsync = function (id_token_hint) { |
| 77 | +// log("OidcClient.createLogoutRequestAsync"); |
| 78 | + |
| 79 | +// var settings = this._settings; |
| 80 | +// return this.loadMetadataAsync().then(function (metadata) { |
| 81 | +// if (!metadata.end_session_endpoint) { |
| 82 | +// return error("No end_session_endpoint in metadata"); |
| 83 | +// } |
| 84 | + |
| 85 | +// var url = metadata.end_session_endpoint; |
| 86 | +// if (id_token_hint && settings.post_logout_redirect_uri) { |
| 87 | +// url += "?post_logout_redirect_uri=" + encodeURIComponent(settings.post_logout_redirect_uri); |
| 88 | +// url += "&id_token_hint=" + encodeURIComponent(id_token_hint); |
| 89 | +// } |
| 90 | +// return url; |
| 91 | +// }); |
| 92 | +// } |
| 93 | + |
| 94 | + |
| 95 | + |
| 96 | +// OidcClient.prototype.processResponseAsync = function (queryString) { |
| 97 | +// log("OidcClient.processResponseAsync"); |
| 98 | + |
| 99 | +// var client = this; |
| 100 | +// var settings = client._settings; |
| 101 | + |
| 102 | +// var request_state = settings.request_state_store.getItem(settings.request_state_key); |
| 103 | +// settings.request_state_store.removeItem(settings.request_state_key); |
| 104 | + |
| 105 | +// if (!request_state) { |
| 106 | +// return error("No request state loaded"); |
| 107 | +// } |
| 108 | + |
| 109 | +// request_state = JSON.parse(request_state); |
| 110 | +// if (!request_state) { |
| 111 | +// return error("No request state loaded"); |
| 112 | +// } |
| 113 | + |
| 114 | +// if (!request_state.state) { |
| 115 | +// return error("No state loaded"); |
| 116 | +// } |
| 117 | + |
| 118 | +// var result = parseOidcResult(queryString); |
| 119 | +// if (!result) { |
| 120 | +// return error("No OIDC response"); |
| 121 | +// } |
| 122 | + |
| 123 | +// if (result.error) { |
| 124 | +// return error(result.error); |
| 125 | +// } |
| 126 | + |
| 127 | +// if (result.state !== request_state.state) { |
| 128 | +// return error("Invalid state"); |
| 129 | +// } |
| 130 | + |
| 131 | +// if (request_state.oidc) { |
| 132 | +// if (!result.id_token) { |
| 133 | +// return error("No identity token"); |
| 134 | +// } |
| 135 | + |
| 136 | +// if (!request_state.nonce) { |
| 137 | +// return error("No nonce loaded"); |
| 138 | +// } |
| 139 | +// } |
| 140 | + |
| 141 | +// if (request_state.oauth) { |
| 142 | +// if (!result.access_token) { |
| 143 | +// return error("No access token"); |
| 144 | +// } |
| 145 | + |
| 146 | +// if (!result.token_type || result.token_type.toLowerCase() !== "bearer") { |
| 147 | +// return error("Invalid token type"); |
| 148 | +// } |
| 149 | + |
| 150 | +// if (!result.expires_in) { |
| 151 | +// return error("No token expiration"); |
| 152 | +// } |
| 153 | +// } |
| 154 | + |
| 155 | +// var promise = resolve(); |
| 156 | +// if (request_state.oidc && request_state.oauth) { |
| 157 | +// promise = client.validateIdTokenAndAccessTokenAsync(result.id_token, request_state.nonce, result.access_token); |
| 158 | +// } |
| 159 | +// else if (request_state.oidc) { |
| 160 | +// promise = client.validateIdTokenAsync(result.id_token, request_state.nonce); |
| 161 | +// } |
| 162 | + |
| 163 | +// return promise.then(function (profile) { |
| 164 | +// if (profile && settings.filter_protocol_claims) { |
| 165 | +// var remove = ["nonce", "at_hash", "iat", "nbf", "exp", "aud", "iss"]; |
| 166 | +// remove.forEach(function (key) { |
| 167 | +// delete profile[key]; |
| 168 | +// }); |
| 169 | +// } |
| 170 | + |
| 171 | +// return { |
| 172 | +// profile: profile, |
| 173 | +// id_token: result.id_token, |
| 174 | +// access_token: result.access_token, |
| 175 | +// expires_in: result.expires_in, |
| 176 | +// scope: result.scope, |
| 177 | +// session_state : result.session_state |
| 178 | +// }; |
| 179 | +// }); |
| 180 | +// } |
7 | 181 | } |
0 commit comments