{JSON.stringify(loginInProgress)}
39 |{error}
40 |{token}
41 | 42 | ) 43 | } 44 | -------------------------------------------------------------------------------- /src/decodeJWT.ts: -------------------------------------------------------------------------------- 1 | import type { TTokenData } from './types' 2 | 3 | /** 4 | * Decodes the base64 encoded JWT. Returns a TToken. 5 | */ 6 | export const decodeJWT = (token: string): TTokenData => { 7 | try { 8 | const base64Url = token.split('.')[1] 9 | const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/') 10 | const jsonPayload = decodeURIComponent( 11 | atob(base64) 12 | .split('') 13 | .map((c) => `%${`00${c.charCodeAt(0).toString(16)}`.slice(-2)}`) 14 | .join('') 15 | ) 16 | return JSON.parse(jsonPayload) 17 | } catch (e) { 18 | console.error(e) 19 | throw Error( 20 | 'Failed to decode the access token.\n\tIs it a proper JSON Web Token?\n\t' + 21 | "You can disable JWT decoding by setting the 'decodeToken' value to 'false' the configuration." 22 | ) 23 | } 24 | } 25 | 26 | export const decodeAccessToken = (token: string | null | undefined): TTokenData | undefined => { 27 | if (!token || !token.length) return undefined 28 | try { 29 | return decodeJWT(token) 30 | } catch (e) { 31 | console.warn(`Failed to decode access token: ${(e as Error).message}`) 32 | } 33 | } 34 | 35 | export const decodeIdToken = (idToken: string | null | undefined): TTokenData | undefined => { 36 | if (!idToken || !idToken.length) return undefined 37 | try { 38 | return decodeJWT(idToken) 39 | } catch (e) { 40 | console.warn(`Failed to decode idToken: ${(e as Error).message}`) 41 | } 42 | } 43 | -------------------------------------------------------------------------------- /src/timeUtils.ts: -------------------------------------------------------------------------------- 1 | import type { TTokenResponse } from './types' 2 | export const FALLBACK_EXPIRE_TIME = 600 // 10minutes 3 | 4 | // Returns epoch time (in seconds) for when the token will expire 5 | // 'secondsFromNow' should always be an integer, but some auth providers has decided that whole numbers should be strings... 6 | export const epochAtSecondsFromNow = (secondsFromNow: number | string) => 7 | Math.round(Date.now() / 1000 + Number(secondsFromNow)) 8 | 9 | /** 10 | * Check if the Access Token has expired. 11 | * Will return True if the token has expired, OR there is less than 30 seconds until it expires. 12 | */ 13 | export function epochTimeIsPast(timestamp: number): boolean { 14 | const now = Math.round(Date.now()) / 1000 15 | const nowWithBuffer = now + 30 16 | return nowWithBuffer >= timestamp 17 | } 18 | 19 | const refreshExpireKeys = [ 20 | 'refresh_expires_in', // KeyCloak 21 | 'refresh_token_expires_in', // Azure AD 22 | ] as const 23 | 24 | export function getRefreshExpiresIn(tokenExpiresIn: number, response: TTokenResponse): number { 25 | for (const key of refreshExpireKeys) { 26 | if (key in response) return response[key] as number 27 | } 28 | // If the response has a refresh_token, but no expire_time. Assume it's at least 10m longer than access_token's expire 29 | if (response.refresh_token) return tokenExpiresIn + FALLBACK_EXPIRE_TIME 30 | // The token response had no refresh_token. Set refresh_expire equals to access_token expire 31 | return tokenExpiresIn 32 | } 33 | -------------------------------------------------------------------------------- /examples/github-auth-provider/web-app/public/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 12 | 13 | 22 |