~james/core

core/web/src/lib/auth/pending.ts -rw-r--r-- 2.3 KiB
452f17b7 — james chore(import): snapshot james.dad.town/core at f70c71c7696a 16 hours ago
                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
import { browser } from "$app/env";
import { isDid, type Did } from "@atcute/lexicons/syntax";
import { safeReturnTo } from "#lib/auth/returnTo.ts";

const PENDING_LOGIN_KEY = "tangled.pendingLogin";
const PENDING_CALLBACK_KEY = "tangled.pendingCallback";
const PENDING_LOGIN_MAX_AGE_MS = 10 * 60 * 1000;

export interface PendingLogin {
	did: Did;
	handle: string;
	returnTo: string;
	at: number;
}

export interface PendingCallback {
	hash: string;
	login: PendingLogin;
}

const isPendingLogin = (value: unknown): value is PendingLogin =>
	!!value &&
	typeof value === "object" &&
	isDid((value as PendingLogin).did) &&
	typeof (value as PendingLogin).handle === "string" &&
	typeof (value as PendingLogin).returnTo === "string" &&
	typeof (value as PendingLogin).at === "number";

export const writePendingLogin = (login: Omit<PendingLogin, "at">): void => {
	if (!browser) return;
	localStorage.setItem(PENDING_LOGIN_KEY, JSON.stringify({ ...login, at: Date.now() }));
};

export const readPendingLogin = (): PendingLogin | null => {
	if (!browser) return null;
	try {
		const raw = localStorage.getItem(PENDING_LOGIN_KEY);
		if (!raw) return null;
		const parsed: unknown = JSON.parse(raw);
		if (!isPendingLogin(parsed)) return null;
		if (Date.now() - parsed.at > PENDING_LOGIN_MAX_AGE_MS) return null;
		return { ...parsed, returnTo: safeReturnTo(parsed.returnTo) };
	} catch {
		return null;
	}
};

export const clearPendingLogin = (): void => {
	if (!browser) return;
	localStorage.removeItem(PENDING_LOGIN_KEY);
};

export const stashPendingCallback = (callback: PendingCallback): void => {
	if (!browser) return;
	sessionStorage.setItem(PENDING_CALLBACK_KEY, JSON.stringify(callback));
};

export const consumePendingCallback = (): PendingCallback | null => {
	if (!browser) return null;
	try {
		const raw = sessionStorage.getItem(PENDING_CALLBACK_KEY);
		if (!raw) return null;
		sessionStorage.removeItem(PENDING_CALLBACK_KEY);
		const parsed: unknown = JSON.parse(raw);
		if (
			!parsed ||
			typeof parsed !== "object" ||
			typeof (parsed as PendingCallback).hash !== "string" ||
			!isPendingLogin((parsed as PendingCallback).login)
		) {
			return null;
		}
		const callback = parsed as PendingCallback;
		return {
			...callback,
			login: { ...callback.login, returnTo: safeReturnTo(callback.login.returnTo) }
		};
	} catch {
		return null;
	}
};