svelte-session-manager

svelte-session-manager

Session store for svelte (currently only for JWT)

usage

import { derived } from 'svelte';
import { Session, login } from 'svelte-session-manager';

// use localStorage as backing store
let session = new Session(localStorage);

// session may still be valid
if(!session.isValid) {
  await login(session, 'https://mydomain.com/authenticate', 'a user', 'a secret');
}

session.isValid; // true when auth was ok or localStorage token is still valid


export const values = derived(
  session,
  ($session, set) => {
    if (!session.isValid) {
      set([]); // session has expired no more data
    } else {
      fetch('https://mydomain.com/values', {
        headers: {
          ...session.authorizationHeader
        }
      }).then(async data => set(await data.json()));
    }
    return () => {};
  }
,[]);

// $values contains fetch result as long as session has not expired

run tests

export BROWSER=safari|chrome|...
npm|yarn test

API

Table of Contents

• SessionData
  • Properties
• Session
  • Parameters
  • Properties
  • save
  • authorizationHeader
  • isValid
  • invalidate
  • subscribe
    • Parameters
• login
  • Parameters

SessionData

Data as preserved in the backing store

Type: Object

Properties

• username string user name (id)
• access_token string JWT token

Session

User session To create as session backed by browser local storage

let session = new Session(localStorage);

or session storage

let session = new Session(sessionStorage);

Parameters

• data SessionData

Properties

• entitlements Set<string>
• subscriptions Set<Object> store subscriptions
• expirationDate Date
• store SessionData backing store to use for save same as data param

save

persist into the packing store

authorizationHeader

http header suitable for fetch

Returns Object header The http header.

Returns string header.Authorization The Bearer access token.

isValid

As long as the expirationTimer is running we must be valid

Returns boolean true if session is valid (not expired)

invalidate

remove all tokens from the session and the backing store

subscribe

Fired when the session changes

Parameters

• subscription Function

login

Bring session into the valid state by calling the authorization endpoint and asking for a access_token. Executess a POST on the endpoint url providing username, and password as json

Parameters

• session Session to be opened
• endpoint string authorization url
• username string id of the user
• password string user credentials

install

With npm do:

npm install svelte-session-manager

license

BSD-2-Clause