-
Notifications
You must be signed in to change notification settings - Fork 46
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Rick Saccoccia
committed
Oct 10, 2024
1 parent
5b51df4
commit ddffd1b
Showing
3 changed files
with
103 additions
and
73 deletions.
There are no files selected for viewing
99 changes: 99 additions & 0 deletions
99
plugins/arcgis/service/src/ArcGISIdentityManagerFactory.ts
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,99 @@ | ||
| import { ArcGISIdentityManager } from "@esri/arcgis-rest-request" | ||
| import { ArcGISAuthConfig, AuthType, FeatureServiceConfig, OAuthAuthConfig, TokenAuthConfig, UsernamePasswordAuthConfig } from './ArcGISConfig' | ||
| import { HttpClient } from "./HttpClient"; | ||
|
|
||
| interface ArcGISIdentityManagerFactory { | ||
| create(portal: string, server: string, config: ArcGISAuthConfig, httpClient?: HttpClient): Promise<ArcGISIdentityManager> | ||
| } | ||
|
|
||
| const OAuthIdentityManagerFactory: ArcGISIdentityManagerFactory = { | ||
| async create(portal: string, server: string, auth: OAuthAuthConfig, httpClient: HttpClient): Promise<ArcGISIdentityManager> { | ||
| console.debug('Client ID provided for authentication') | ||
| const { clientId, authToken, authTokenExpires, refreshToken, refreshTokenExpires } = auth | ||
|
|
||
| if (authToken && new Date(authTokenExpires || 0) > new Date()) { | ||
| return ArcGISIdentityManager.fromToken({ | ||
| clientId: clientId, | ||
| token: authToken, | ||
| tokenExpires: new Date(authTokenExpires || 0), | ||
| portal: portal, | ||
| server: server | ||
| }) | ||
| } else if (refreshToken && new Date(refreshTokenExpires || 0) > new Date()) { | ||
| // TODO: find a way without using constructor nor httpClient | ||
| const url = `${portal}/oauth2/token?client_id=${clientId}&refresh_token=${refreshToken}&grant_type=refresh_token` | ||
| const response = await httpClient.sendGet(url) | ||
| // TODO: error handling | ||
| return ArcGISIdentityManager.fromToken({ | ||
| clientId: clientId, | ||
| token: response.access_token, | ||
| portal: portal | ||
| }); | ||
| // TODO: update authToken to new token | ||
| } else { | ||
| // TODO the config, we need to let the user know UI side they need to authenticate again | ||
| throw new Error('Refresh token missing or expired') | ||
| } | ||
| } | ||
| } | ||
|
|
||
| const TokenIdentityManagerFactory: ArcGISIdentityManagerFactory = { | ||
| async create(portal: string, server: string, auth: TokenAuthConfig): Promise<ArcGISIdentityManager> { | ||
| console.debug('Token provided for authentication') | ||
| const identityManager = await ArcGISIdentityManager.fromToken({ | ||
| token: auth.token, | ||
| portal: portal, | ||
| server: server, | ||
| // TODO: what do we really want to do here? esri package seems to need this optional parameter. | ||
| // Use authTokenExpires if defined, otherwise set to now plus a day | ||
| tokenExpires: auth.authTokenExpires ? new Date(auth.authTokenExpires) : new Date(Date.now() + 24 * 60 * 60 * 1000) | ||
| }) | ||
| return identityManager | ||
| } | ||
| } | ||
|
|
||
| const UsernamePasswordIdentityManagerFactory: ArcGISIdentityManagerFactory = { | ||
| async create(portal: string, server: string, auth: UsernamePasswordAuthConfig): Promise<ArcGISIdentityManager> { | ||
| console.debug('console and password provided for authentication, username:' + auth?.username) | ||
| const identityManager = await ArcGISIdentityManager.signIn({ username: auth?.username, password: auth?.password, portal }) | ||
| return identityManager | ||
| } | ||
| } | ||
|
|
||
| const authConfigMap: { [key: string]: ArcGISIdentityManagerFactory } = { | ||
| [AuthType.OAuth]: OAuthIdentityManagerFactory, | ||
| [AuthType.Token]: TokenIdentityManagerFactory, | ||
| [AuthType.UsernamePassword]: UsernamePasswordIdentityManagerFactory | ||
| } | ||
|
|
||
| export function getIdentityManager( | ||
| config: FeatureServiceConfig, | ||
| httpClient: HttpClient // TODO remove in favor of an open source lib like axios | ||
| ): Promise<ArcGISIdentityManager> { | ||
| const auth = config.auth | ||
| const authType = config.auth?.type | ||
| if (!auth || !authType) { | ||
| throw new Error('Auth type is undefined') | ||
| } | ||
| const factory = authConfigMap[authType] | ||
| if (!factory) { | ||
| throw new Error(`No factory found for type ${authType}`) | ||
| } | ||
| return factory.create(getPortalUrl(config.url), getServerUrl(config.url), auth, httpClient) | ||
| } | ||
|
|
||
|
|
||
| export function getPortalUrl(featureService: FeatureServiceConfig | string): string { | ||
| const url = getFeatureServiceUrl(featureService) | ||
| return `https://${url.hostname}/arcgis/sharing/rest` | ||
| } | ||
|
|
||
| export function getServerUrl(featureService: FeatureServiceConfig | string): string { | ||
| const url = getFeatureServiceUrl(featureService) | ||
| return `https://${url.hostname}/arcgis` | ||
| } | ||
|
|
||
| export function getFeatureServiceUrl(featureService: FeatureServiceConfig | string): URL { | ||
| const url = typeof featureService === 'string' ? featureService : featureService.url | ||
| return new URL(url) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters