mirror of
https://github.com/musix-org/musix-oss
synced 2025-06-17 10:46:01 +00:00
Modules
This commit is contained in:
MatteZ02
90
node_modules/gtoken/build/src/index.d.ts
generated
vendored
Normal file
90
node_modules/gtoken/build/src/index.d.ts
generated
vendored
Normal file
@ -0,0 +1,90 @@
|
||||
/**
|
||||
* Copyright 2018 Google LLC
|
||||
*
|
||||
* Distributed under MIT license.
|
||||
* See file LICENSE for detail or copy at https://opensource.org/licenses/MIT
|
||||
*/
|
||||
export declare type GetTokenCallback = (err: Error | null, token?: TokenData) => void;
|
||||
export interface Credentials {
|
||||
privateKey: string;
|
||||
clientEmail?: string;
|
||||
}
|
||||
export interface TokenData {
|
||||
refresh_token?: string;
|
||||
expires_in?: number;
|
||||
access_token?: string;
|
||||
token_type?: string;
|
||||
id_token?: string;
|
||||
}
|
||||
export interface TokenOptions {
|
||||
keyFile?: string;
|
||||
key?: string;
|
||||
email?: string;
|
||||
iss?: string;
|
||||
sub?: string;
|
||||
scope?: string | string[];
|
||||
additionalClaims?: {};
|
||||
}
|
||||
export interface GetTokenOptions {
|
||||
forceRefresh?: boolean;
|
||||
}
|
||||
export declare class GoogleToken {
|
||||
readonly accessToken: string | undefined;
|
||||
readonly idToken: string | undefined;
|
||||
readonly tokenType: string | undefined;
|
||||
readonly refreshToken: string | undefined;
|
||||
expiresAt?: number;
|
||||
key?: string;
|
||||
keyFile?: string;
|
||||
iss?: string;
|
||||
sub?: string;
|
||||
scope?: string;
|
||||
rawToken?: TokenData;
|
||||
tokenExpires?: number;
|
||||
email?: string;
|
||||
additionalClaims?: {};
|
||||
/**
|
||||
* Create a GoogleToken.
|
||||
*
|
||||
* @param options Configuration object.
|
||||
*/
|
||||
constructor(options?: TokenOptions);
|
||||
/**
|
||||
* Returns whether the token has expired.
|
||||
*
|
||||
* @return true if the token has expired, false otherwise.
|
||||
*/
|
||||
hasExpired(): boolean;
|
||||
/**
|
||||
* Returns a cached token or retrieves a new one from Google.
|
||||
*
|
||||
* @param callback The callback function.
|
||||
*/
|
||||
getToken(opts?: GetTokenOptions): Promise<TokenData>;
|
||||
getToken(callback: GetTokenCallback, opts?: GetTokenOptions): void;
|
||||
/**
|
||||
* Given a keyFile, extract the key and client email if available
|
||||
* @param keyFile Path to a json, pem, or p12 file that contains the key.
|
||||
* @returns an object with privateKey and clientEmail properties
|
||||
*/
|
||||
getCredentials(keyFile: string): Promise<Credentials>;
|
||||
private getTokenAsync;
|
||||
private ensureEmail;
|
||||
/**
|
||||
* Revoke the token if one is set.
|
||||
*
|
||||
* @param callback The callback function.
|
||||
*/
|
||||
revokeToken(): Promise<void>;
|
||||
revokeToken(callback: (err?: Error) => void): void;
|
||||
private revokeTokenAsync;
|
||||
/**
|
||||
* Configure the GoogleToken for re-use.
|
||||
* @param {object} options Configuration object.
|
||||
*/
|
||||
private configure;
|
||||
/**
|
||||
* Request the token from Google.
|
||||
*/
|
||||
private requestToken;
|
||||
}
|
||||
234
node_modules/gtoken/build/src/index.js
generated
vendored
Normal file
234
node_modules/gtoken/build/src/index.js
generated
vendored
Normal file
@ -0,0 +1,234 @@
|
||||
"use strict";
|
||||
/**
|
||||
* Copyright 2018 Google LLC
|
||||
*
|
||||
* Distributed under MIT license.
|
||||
* See file LICENSE for detail or copy at https://opensource.org/licenses/MIT
|
||||
*/
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
const fs = require("fs");
|
||||
const gaxios_1 = require("gaxios");
|
||||
const jws = require("jws");
|
||||
const mime = require("mime");
|
||||
const util_1 = require("util");
|
||||
const readFile = fs.readFile
|
||||
? util_1.promisify(fs.readFile)
|
||||
: async () => {
|
||||
// if running in the web-browser, fs.readFile may not have been shimmed.
|
||||
throw new ErrorWithCode('use key rather than keyFile.', 'MISSING_CREDENTIALS');
|
||||
};
|
||||
const GOOGLE_TOKEN_URL = 'https://www.googleapis.com/oauth2/v4/token';
|
||||
const GOOGLE_REVOKE_TOKEN_URL = 'https://accounts.google.com/o/oauth2/revoke?token=';
|
||||
class ErrorWithCode extends Error {
|
||||
constructor(message, code) {
|
||||
super(message);
|
||||
this.code = code;
|
||||
}
|
||||
}
|
||||
let getPem;
|
||||
class GoogleToken {
|
||||
/**
|
||||
* Create a GoogleToken.
|
||||
*
|
||||
* @param options Configuration object.
|
||||
*/
|
||||
constructor(options) {
|
||||
this.configure(options);
|
||||
}
|
||||
get accessToken() {
|
||||
return this.rawToken ? this.rawToken.access_token : undefined;
|
||||
}
|
||||
get idToken() {
|
||||
return this.rawToken ? this.rawToken.id_token : undefined;
|
||||
}
|
||||
get tokenType() {
|
||||
return this.rawToken ? this.rawToken.token_type : undefined;
|
||||
}
|
||||
get refreshToken() {
|
||||
return this.rawToken ? this.rawToken.refresh_token : undefined;
|
||||
}
|
||||
/**
|
||||
* Returns whether the token has expired.
|
||||
*
|
||||
* @return true if the token has expired, false otherwise.
|
||||
*/
|
||||
hasExpired() {
|
||||
const now = new Date().getTime();
|
||||
if (this.rawToken && this.expiresAt) {
|
||||
return now >= this.expiresAt;
|
||||
}
|
||||
else {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
getToken(callback, opts = {}) {
|
||||
if (typeof callback === 'object') {
|
||||
opts = callback;
|
||||
callback = undefined;
|
||||
}
|
||||
opts = Object.assign({
|
||||
forceRefresh: false,
|
||||
}, opts);
|
||||
if (callback) {
|
||||
const cb = callback;
|
||||
this.getTokenAsync(opts).then(t => cb(null, t), callback);
|
||||
return;
|
||||
}
|
||||
return this.getTokenAsync(opts);
|
||||
}
|
||||
/**
|
||||
* Given a keyFile, extract the key and client email if available
|
||||
* @param keyFile Path to a json, pem, or p12 file that contains the key.
|
||||
* @returns an object with privateKey and clientEmail properties
|
||||
*/
|
||||
async getCredentials(keyFile) {
|
||||
const mimeType = mime.getType(keyFile);
|
||||
switch (mimeType) {
|
||||
case 'application/json': {
|
||||
// *.json file
|
||||
const key = await readFile(keyFile, 'utf8');
|
||||
const body = JSON.parse(key);
|
||||
const privateKey = body.private_key;
|
||||
const clientEmail = body.client_email;
|
||||
if (!privateKey || !clientEmail) {
|
||||
throw new ErrorWithCode('private_key and client_email are required.', 'MISSING_CREDENTIALS');
|
||||
}
|
||||
return { privateKey, clientEmail };
|
||||
}
|
||||
case 'application/x-x509-ca-cert': {
|
||||
// *.pem file
|
||||
const privateKey = await readFile(keyFile, 'utf8');
|
||||
return { privateKey };
|
||||
}
|
||||
case 'application/x-pkcs12': {
|
||||
// *.p12 file
|
||||
// NOTE: The loading of `google-p12-pem` is deferred for performance
|
||||
// reasons. The `node-forge` npm module in `google-p12-pem` adds a fair
|
||||
// bit time to overall module loading, and is likely not frequently
|
||||
// used. In a future release, p12 support will be entirely removed.
|
||||
if (!getPem) {
|
||||
getPem = (await Promise.resolve().then(() => require('google-p12-pem'))).getPem;
|
||||
}
|
||||
const privateKey = await getPem(keyFile);
|
||||
return { privateKey };
|
||||
}
|
||||
default:
|
||||
throw new ErrorWithCode('Unknown certificate type. Type is determined based on file extension. ' +
|
||||
'Current supported extensions are *.json, *.pem, and *.p12.', 'UNKNOWN_CERTIFICATE_TYPE');
|
||||
}
|
||||
}
|
||||
async getTokenAsync(opts) {
|
||||
if (this.hasExpired() === false && opts.forceRefresh === false) {
|
||||
return Promise.resolve(this.rawToken);
|
||||
}
|
||||
if (!this.key && !this.keyFile) {
|
||||
throw new Error('No key or keyFile set.');
|
||||
}
|
||||
if (!this.key && this.keyFile) {
|
||||
const creds = await this.getCredentials(this.keyFile);
|
||||
this.key = creds.privateKey;
|
||||
this.iss = creds.clientEmail || this.iss;
|
||||
if (!creds.clientEmail) {
|
||||
this.ensureEmail();
|
||||
}
|
||||
}
|
||||
return this.requestToken();
|
||||
}
|
||||
ensureEmail() {
|
||||
if (!this.iss) {
|
||||
throw new ErrorWithCode('email is required.', 'MISSING_CREDENTIALS');
|
||||
}
|
||||
}
|
||||
revokeToken(callback) {
|
||||
if (callback) {
|
||||
this.revokeTokenAsync().then(() => callback(), callback);
|
||||
return;
|
||||
}
|
||||
return this.revokeTokenAsync();
|
||||
}
|
||||
async revokeTokenAsync() {
|
||||
if (!this.accessToken) {
|
||||
throw new Error('No token to revoke.');
|
||||
}
|
||||
const url = GOOGLE_REVOKE_TOKEN_URL + this.accessToken;
|
||||
await gaxios_1.request({ url });
|
||||
this.configure({
|
||||
email: this.iss,
|
||||
sub: this.sub,
|
||||
key: this.key,
|
||||
keyFile: this.keyFile,
|
||||
scope: this.scope,
|
||||
additionalClaims: this.additionalClaims,
|
||||
});
|
||||
}
|
||||
/**
|
||||
* Configure the GoogleToken for re-use.
|
||||
* @param {object} options Configuration object.
|
||||
*/
|
||||
configure(options = {}) {
|
||||
this.keyFile = options.keyFile;
|
||||
this.key = options.key;
|
||||
this.rawToken = undefined;
|
||||
this.iss = options.email || options.iss;
|
||||
this.sub = options.sub;
|
||||
this.additionalClaims = options.additionalClaims;
|
||||
if (typeof options.scope === 'object') {
|
||||
this.scope = options.scope.join(' ');
|
||||
}
|
||||
else {
|
||||
this.scope = options.scope;
|
||||
}
|
||||
}
|
||||
/**
|
||||
* Request the token from Google.
|
||||
*/
|
||||
async requestToken() {
|
||||
const iat = Math.floor(new Date().getTime() / 1000);
|
||||
const additionalClaims = this.additionalClaims || {};
|
||||
const payload = Object.assign({
|
||||
iss: this.iss,
|
||||
scope: this.scope,
|
||||
aud: GOOGLE_TOKEN_URL,
|
||||
exp: iat + 3600,
|
||||
iat,
|
||||
sub: this.sub,
|
||||
}, additionalClaims);
|
||||
const signedJWT = jws.sign({
|
||||
header: { alg: 'RS256' },
|
||||
payload,
|
||||
secret: this.key,
|
||||
});
|
||||
try {
|
||||
const r = await gaxios_1.request({
|
||||
method: 'POST',
|
||||
url: GOOGLE_TOKEN_URL,
|
||||
data: {
|
||||
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
||||
assertion: signedJWT,
|
||||
},
|
||||
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
|
||||
responseType: 'json',
|
||||
});
|
||||
this.rawToken = r.data;
|
||||
this.expiresAt =
|
||||
r.data.expires_in === null || r.data.expires_in === undefined
|
||||
? undefined
|
||||
: (iat + r.data.expires_in) * 1000;
|
||||
return this.rawToken;
|
||||
}
|
||||
catch (e) {
|
||||
this.rawToken = undefined;
|
||||
this.tokenExpires = undefined;
|
||||
const body = e.response && e.response.data ? e.response.data : {};
|
||||
if (body.error) {
|
||||
const desc = body.error_description
|
||||
? `: ${body.error_description}`
|
||||
: '';
|
||||
e.message = `${body.error}${desc}`;
|
||||
}
|
||||
throw e;
|
||||
}
|
||||
}
|
||||
}
|
||||
exports.GoogleToken = GoogleToken;
|
||||
//# sourceMappingURL=index.js.map
|
||||
Reference in New Issue
Block a user