airmap

airmap-auth

All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.

## [3.0.1](https://www.npmjs.com/package/airmap-auth/v/3.0.1) (2019-02-05)

We changed our SSO provider. This package has been updated to reflect that change

## [2.0.2](https://github.com/airmap/js-auth/compare/v2.0.1...v2.0.2) (2018-06-26)

* Handle errors using hosted login. ([b38540e](https://github.com/airmap/js-auth/commit/b38540e))

* Update vulnerable dependencies. ([6dca9d7](https://github.com/airmap/js-auth/commit/6dca9d7))

## [2.0.1](https://github.com/airmap/js-auth/compare/v2.0.0...v2.0.1) (2018-05-22)

* update jsonwebtoken due to security reasons ([e798cc0](https://github.com/airmap/js-auth/commit/e798cc0))

# [2.0.0](https://github.com/airmap/js-auth/compare/v1.5.2...v2.0.0) (2018-03-23)

* Add default onAuthenticated settings ([e532e0c](https://github.com/airmap/js-auth/commit/e532e0c))

* Add onAuthenticated option ([3baf9ac](https://github.com/airmap/js-auth/commit/3baf9ac))

* Add tests for onAuthenticated ([7254bbb](https://github.com/airmap/js-auth/commit/7254bbb))

* Refactored placement of optional parameters ([bbcc82d](https://github.com/airmap/js-auth/commit/bbcc82d))

* Remove onAuthenticated, onAuthorizationError and state parameters ([6ba295e](https://github.com/airmap/js-auth/commit/6ba295e))

* Switch from Auth0 Lock to Universal Login ([b51d866](https://github.com/airmap/js-auth/commit/b51d866))

* Update tests ([d26f97a](https://github.com/airmap/js-auth/commit/d26f97a))

## [1.6.1](https://github.com/airmap/js-auth/compare/v1.6.0...v1.6.1) (2018-03-22)

# [1.6.0](https://github.com/airmap/js-auth/compare/v1.5.2...v1.6.0) (2018-03-22)

## [1.5.2](https://github.com/airmap/js-auth/compare/v1.5.1...v1.5.2) (2017-12-05)

## [1.5.1](https://github.com/airmap/js-auth/compare/v1.5.0...v1.5.1) (2017-12-04)

# [1.5.0](https://github.com/airmap/js-auth/compare/v1.3.2...v1.5.0) (2017-10-22)

* Bump Auth0 lock to latest version. ([2ff01e5](https://github.com/airmap/js-auth/commit/2ff01e5))

* Change version of auth0-lock to 10.22.0 which uses older version of react-transition-group. ([e10cf0a](https://github.com/airmap/js-auth/commit/e10cf0a))

* Update email verification error message. ([c23ff75](https://github.com/airmap/js-auth/commit/c23ff75))

* Add option to configure sso domain. ([17be534](https://github.com/airmap/js-auth/commit/17be534))

* Add option to select a language. ([0002654](https://github.com/airmap/js-auth/commit/0002654))

# [1.4.0](https://github.com/airmap/js-auth/compare/v1.3.2...v1.4.0) (2017-06-29)

function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }

    AuthorizationError = _require.AuthorizationError,

    BadConfigError = _require.BadConfigError;

var _require2 = require('./utilities.js'),

    supportsLocalStorage = _require2.supportsLocalStorage;

/** Class for handling the AirMap Auth Module */

     * @param {Object} config AirMap Auth configuration settings can be copied and pasted from the AirMap Developer Portal.

     * @param {string} config.auth0.client_id - Client ID provided by AirMap.

     * @param {string} config.auth0.callback_url Callback URL provided by AirMap.

     * @param {Object} options Optional settings for the AirMap Auth Module.

     * @param {boolean} options.autoLaunch Optional boolean. Will check on pageload if user is authenticated. If not authenticated, the auth window will launch. Defaults to `false`.

     * @param {string} options.domain Optional string. Defaults to `sso.airmap.io`.

     * @param {string} options.language Optional string. Language code for UI text. Defaults to `en`.

     * @param {function} options.onAuthenticated Optional function. Function called when Auth Module successfully authenticates the user. Parameter passed to function is the resulting Authorization object.

        var opts = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};

        _classCallCheck(this, AirMapAuth);

        // Checks for oidc Config Variables

        if (!config || typeof config.auth0 === 'undefined') {

            throw new BadConfigError('auth0');

        if (config.auth0.client_id === 'undefined' || !config.auth0.client_id) {

            throw new BadConfigError('auth0.client_id');

        if (config.auth0.callback_url === 'undefined' || !config.auth0.callback_url) {

            throw new BadConfigError('auth0.callback_url');

        // Auth Settings - Classwide Config Variables

        this.opts = _extends({}, this.defaults, opts);

        this._clientId = config.auth0.client_id;

        this._callbackUrl = config.auth0.callback_url;

        this._tokenName = 'AirMapUserToken';

        this._authority = 'https://' + this.opts.domain + '/realms/' + this.opts.realm + '/.well-known/openid-configuration';

        this._logoutUrl = 'https://' + this.opts.domain + '/realms/' + this.opts.realm + '/protocol/openid-connect/logout';

        this._state = Math.random().toString(36).substr(2, 7);

            redirect_uri: this._callbackUrl,

            response_type: 'id_token token',

            scope: 'openid airmap-api profile email',

            ui_locales: this.opts.language

        this._client = new oidc.OidcClient(this._settings);

            // Checks localStorage browser support

            if (!supportsLocalStorage()) {

                window.alert('Your web browser does not support storing settings locally. In Safari, the most common cause of this is using "Private Browsing Mode". Please try exiting Private Browsing Mode and logging in again, or using another browser.');

            // Process successful and failed authentication

            this._handleAuthentication();

            // // Attaching event listener for DOM load when autoLaunch is desired so that an authenticated check is made.

                document.addEventListener('DOMContentLoaded', function () {

         *  Process successful and failed authentication

        value: function _handleAuthentication() {

            this._client.processSigninResponse().then(function (response) {

            // Checks expiration date of token.

            var decoded = jwt.decode(localStorage.getItem(this._tokenName));

            var decoded = jwtDecode(localStorage.getItem(this._tokenName));

            var timeStampNow = Math.floor(Date.now() / 1000);

            return timeStampNow < decoded.exp;

         *  Retrieves a user's id when authenticated. If no auth token exists or if it's invalid, the return value will be null.

         *  This method can be used to retrieve the user's AirMap Id for calls to other AirMap APIs like the Pilot API, which returns a Pilot's profile.

         *  @return {string || null} returns the user's id (if authenticated), null if profile could not be retrieved.

            // Looks for a valid token in localStorage.

            var authenticated = this.isAuthenticated();

                return jwt.decode(localStorage.getItem(this._tokenName)).sub;

                return jwtDecode(localStorage.getItem(this._tokenName)).sub;

         *  @return {string} returns the user's token (if authenticated), null if user is not authenticated (active session).

            // Looks for a token in localStorage and makes sure the token is valid.

            return localStorage.getItem(this._tokenName) || null;

         *  Logs out a user by removing the authenticated user token from localStorage and redirects the user (optional).

         *  @param {string || null} logoutRedirectUrl - If a logoutRedirect url is provided as a parameter, upon logging out, page will be redirected to the provided url, otherwise it will redirect to the current url without the hash.

            var logoutRedirectUrl = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : null;

            // if (!this.isAuthenticated()) return

            var logoutUrl = this._logoutUrl + '?redirect_uri=' + this.sanitizedUrl();

                logoutUrl = this._logoutUrl + '?redirect_uri=' + logoutRedirectUrl;

            localStorage.removeItem(this._tokenName);

            window.location.href = logoutUrl;

        // strips off hash and redirects to url

        value: function sanitizeUrlRedirect() {

            window.location.href = this.sanitizedUrl();

        // returns a sanitized url without hash

            return window.location.toString().split('#')[0];

            return this.constructor.defaults;

    onAuthenticated: function onAuthenticated(authResult) {

    onAuthenticationError: function onAuthenticationError(error) {

  "description": "Authenticate users with AirMap",

  "author": "AirMap, Inc. <developers@airmap.com> (https://airmap.com)",

  "license": "SEE LICENSE IN LICENSE.md",

    "url": "https://github.com/airmap/js-auth.git"

    "build-prod-cdn": "mkdir -p dist && browserify -t [babelify] src/index.js -s AirMapAuth | uglifyjs -c -m > dist/airmap-auth.min.js",

    "build-prod-npm": "mkdir -p dist && babel src/ --out-dir dist",

    "build-prod": "npm run build-prod-cdn && npm run build-prod-npm",

    "build-dev": "mkdir -p dist && browserify -t [babelify] src/index.js -s AirMapAuth > dist/index.js",

    "docs": "node_modules/.bin/jsdoc2md src/** > API.md",

    "standard-version": "standard-version",

    "release": "sh ./scripts/release.sh",

    "start": "budo examples/index.js:examples/bundle.js --port=8081 --live --cors --dir=examples -- -t babelify",

    "test": "export NODE_PATH=./ && mocha --compilers js:babel-register --recursive test/setup.js test/unit/*",

    "test:circle": "export NODE_PATH=./ && mocha --compilers js:babel-register --recursive --reporter mocha-junit-reporter test/setup.js test/unit/* --reporter-options mochaFile=$CIRCLE_TEST_REPORTS/mocha/unit.xml"

    "babel-plugin-transform-object-assign": "^6.8.0",

    "babel-plugin-transform-object-rest-spread": "^6.8.0",

		@@ -5,2 +5,10 @@ # Change Log

		## 3.0.2
		Switched JWT decode packages.

		<a name="3.0.1"></a>
		## [3.0.1](https://www.npmjs.com/package/airmap-auth/v/3.0.1) (2019-02-05)
		We changed our SSO provider. This package has been updated to reflect that change


		<a name="2.0.2"></a>
		@@ -7,0 +15,0 @@ ## [2.0.2](https://github.com/airmap/js-auth/compare/v2.0.1...v2.0.2) (2018-06-26)

		@@ -10,3 +10,3 @@ 'use strict';
		var oidc = require('oidc-client');
		var jwt = require('jsonwebtoken');
		var jwtDecode = require('jwt-decode');

		@@ -197,3 +197,3 @@ var _require = require('./error'),
		// Checks expiration date of token.
		var decoded = jwt.decode(localStorage.getItem(this._tokenName));
		var decoded = jwtDecode(localStorage.getItem(this._tokenName));
		var timeStampNow = Math.floor(Date.now() / 1000);
		@@ -218,3 +218,3 @@ return timeStampNow < decoded.exp;
		} else {
		return jwt.decode(localStorage.getItem(this._tokenName)).sub;
		return jwtDecode(localStorage.getItem(this._tokenName)).sub;
		}
		@@ -221,0 +221,0 @@ }

		{
		"name": "airmap-auth",
		"version": "3.0.1",
		"version": "3.0.2",
		"description": "Authenticate users with AirMap",
		@@ -38,3 +38,3 @@ "author": "AirMap, Inc. <developers@airmap.com> (https://airmap.com)",
		"dependencies": {
		"jsonwebtoken": "^8.2.1",
		"jwt-decode": "^2.2.0",
		"oidc-client": "^1.6.1"
		@@ -41,0 +41,0 @@ },

Fixed alerts

Improved metrics

Worsened metrics

Dependency changes