@bearer/cli/lib/actions/login.js

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const express = require("express");
const crypto = require("crypto");
const axios_1 = require("axios");
const inquirer = require("inquirer");
const startLocalServer_1 = require("../actions/startLocalServer");
// TODO: use esModuleInterop config
// @ts-ignore
const cli_ux_1 = require("cli-ux");
// @ts-ignore
const opn = require("open");
const base_1 = require("./base");
const helpers_1 = require("../utils/helpers");
const constants_1 = require("../utils/constants");
const prompts_1 = require("../utils/prompts");
class LoginAction extends base_1.default {
    constructor() {
        super(...arguments);
        this._listerners = { success: [], error: [] };
        this.on = (event, callback) => {
            this._listerners[event] = [...this._listerners[event], callback];
        };
        this.stopServer = () => new Promise((resolve, _reject) => {
            if (this._server) {
                this.logger.debug('stopping server');
                this._server.destroy(() => {
                    this.logger.debug('server stopped');
                    resolve();
                });
            }
            else {
                resolve();
            }
        });
        this.startServer = async () => {
            this.on('error', this.stopServer);
            try {
                const app = express();
                app.use((_req, res, next) => {
                    res.setHeader('Connection', 'close');
                    next();
                });
                app.get('/login/callback', (req, res, next) => {
                    const code = req.query.code || '';
                    try {
                        res.send(constants_1.SUCCESS_LOGIN_PAGE).end();
                        Promise.all([this.getToken(code), this.stopServer()]).then(() => {
                            this.logger.debug('calling success listeners');
                            this._listerners.success.map(cb => cb());
                        });
                    }
                    catch (e) {
                        this.logger.debug(e);
                        this.logger.error('Error while fetching token');
                        this._listerners.error.map(cb => cb());
                    }
                });
                this.logger.debug('starting server');
                return await startLocalServer_1.startServer(constants_1.BEARER_LOGIN_PORT, app);
            }
            catch (e) {
                if (e instanceof startLocalServer_1.UnavailablePort) {
                    this.logger.error('bearer login cannot start');
                }
                throw e;
            }
        };
        this.getToken = async (code) => {
            try {
                const { data: token } = await axios_1.default.post(`${this.logger.constants.LoginDomain}/oauth/token`, {
                    code,
                    grant_type: 'authorization_code',
                    client_id: `${constants_1.LOGIN_CLIENT_ID}`,
                    code_verifier: `${this._verifier}`,
                    redirect_uri: this.callbackUrl
                });
                this.logger.debug('saving token: %j', token);
                await this.logger.bearerConfig.storeToken(token);
            }
            catch (e) {
                this.logger.error(e);
            }
        };
    }
    async run() {
        this._server = await this.startServer();
        this._verifier = base64URLEncode(crypto.randomBytes(32));
        this._challenge = base64URLEncode(sha256(this._verifier));
        cli_ux_1.default.action.start('Logging you in');
        const scopes = 'offline_access email openid';
        const audience = `cli-${constants_1.BEARER_ENV}`;
        const params = {
            audience,
            scope: scopes,
            response_type: 'code',
            client_id: constants_1.LOGIN_CLIENT_ID,
            code_challenge: this._challenge,
            code_challenge_method: 'S256',
            redirect_uri: this.callbackUrl
        };
        this.logger.debug('authorize params %j', params);
        const url = `${this.logger.constants.LoginDomain}/authorize?${helpers_1.toParams(params)}`;
        const spawned = await opn(url);
        await Promise.race([
            new Promise((resolve, reject) => {
                spawned.on('close', async (code, signal) => {
                    if (code !== 0) {
                        this.logger.warn(this.logger.colors.yellow(`Unable to open a browser. If you want to retrieve a token please follow these steps\n`));
                        this.logger.log(this.logger.colors.bold('1/ access the url below and follow the login process:\n\n'), url);
                        this.logger.log();
                        this.logger.log(this.logger.colors.bold(`2/ when you access the success page copy the token and paste it here`));
                        const token = await prompts_1.askForString('Token');
                        await this.getToken(token);
                        resolve();
                    }
                });
            }),
            new Promise((resolve, reject) => {
                this.on('error', reject);
                this.on('success', resolve);
            })
        ]);
        this.logger.success('Successfully logged in!! 🐻');
        cli_ux_1.default.action.stop();
    }
    get callbackUrl() {
        return process.env.BEARER_LOGIN_CALLBACK_URL || `${this.logger.constants.DeveloperPortalUrl}cli/login-callback`;
    }
}
const loginFlow = base_1.createExport(LoginAction);
exports.default = loginFlow;
async function promptToLogin(command) {
    command.log(command.colors.bold('⚠️ It looks like you are not logged in'));
    const { shouldLogin } = await inquirer.prompt([
        {
            message: 'Would you like to login?',
            name: 'shouldLogin',
            type: 'list',
            choices: [{ name: 'Yes', value: true }, { name: 'No', value: false }]
        }
    ]);
    if (shouldLogin) {
        await loginFlow(command);
    }
    else {
        command.exit(0);
    }
}
exports.promptToLogin = promptToLogin;
function base64URLEncode(str) {
    return str
        .toString('base64')
        .replace(/\+/g, '-')
        .replace(/\//g, '_')
        .replace(/=/g, '');
}
function sha256(str) {
    return crypto
        .createHash('sha256')
        .update(str)
        .digest();
}