alvinsj · alvinsj · Jun 9, 2024 · Jun 8, 2024 · Jun 8, 2024 · Jun 8, 2024
diff --git a/.env.test.local b/.env.test.local
@@ -0,0 +1,3 @@
+VITE_AUTH_URL=http://test-auth-api/api/authorize
+VITE_TOKEN_URL=http://test-token-api/api/oauth/token
+VITE_BASE_URL=http://test-base-url
diff --git a/.gitignore b/.gitignore
@@ -11,6 +11,7 @@ node_modules
 dist
 dist-ssr
 *.local
+!.env.test.local
 
 # Editor directories and files
 .vscode/*

diff --git a/README.md b/README.md
@@ -1,30 +0,0 @@
-# React + TypeScript + Vite
-
-This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
-
-Currently, two official plugins are available:
-
-- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/README.md) uses [Babel](https://babeljs.io/) for Fast Refresh
-- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) uses [SWC](https://swc.rs/) for Fast Refresh
-
-## Expanding the ESLint configuration
-
-If you are developing a production application, we recommend updating the configuration to enable type aware lint rules:
-
-- Configure the top-level `parserOptions` property like this:
-
-```js
-export default {
-  // other rules...
-  parserOptions: {
-    ecmaVersion: 'latest',
-    sourceType: 'module',
-    project: ['./tsconfig.json', './tsconfig.node.json'],
-    tsconfigRootDir: __dirname,
-  },
-}
-```
-
-- Replace `plugin:@typescript-eslint/recommended` to `plugin:@typescript-eslint/recommended-type-checked` or `plugin:@typescript-eslint/strict-type-checked`
-- Optionally add `plugin:@typescript-eslint/stylistic-type-checked`
-- Install [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) and add `plugin:react/recommended` & `plugin:react/jsx-runtime` to the `extends` list

diff --git a/index.html b/index.html
@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Vite + React + TS</title>
+    <title>Refresh Token Rotation Demo</title>
   </head>
   <body>
     <div id="root"></div>

diff --git a/lib/__tests__/cookie.test.js b/lib/__tests__/cookie.test.js
@@ -0,0 +1,100 @@
+import { describe, test, expect, beforeAll, afterAll, vi, afterEach } from 'vitest'
+import { saveCookie, getCookie, deleteCookie, clearAllCookies } from '../cookie'
+
+describe('cookie', () => {
+  let mockCookie = []
+  beforeAll(() => {
+    vi.stubGlobal('document', {
+      get cookie() {
+        return mockCookie.join(';')
+      },
+      set cookie(value) {
+        mockCookie = mockCookie.filter(c => !c.startsWith(value.split('=')[0]))
+        mockCookie.push(value)
+      },
+    })
+  })
+
+  afterEach(() => {
+    mockCookie = []
+  })
+
+  afterAll(() => {
+    vi.unstubAllGlobals()
+  })
+
+  describe('saveCookie', () => {
+    test('throws error on empty name', () => {
+      expect(() => saveCookie()).toThrowError('Cookie name is required')
+    })
+
+    test('saves empty value', () => {
+      saveCookie('a', '')
+      expect(document.cookie).toMatch('a=;')
+    })
+
+    test('saves cookie', () => {
+      saveCookie('a', '1234')
+      expect(document.cookie).toMatch('a=1234;')
+    })
+
+    test('saves cookie with latest value', () => {
+      saveCookie('a', '1234')
+      saveCookie('a', '124')
+      expect(document.cookie).toMatch('a=124;')
+      expect(document.cookie).not.toMatch('a=1234;')
+    })
+  })
+
+  describe('getCookie', () => {
+    test('gets none', () => {
+      saveCookie('b', '54321')
+      expect(getCookie('c')).toBeUndefined()
+    })
+
+    test('gets cookie', () => {
+      saveCookie('b', '54321')
+      expect(getCookie('b')).toBe('54321')
+    })
+  })
+
+  describe('deleteCookie', () => {
+    test('deletes cookie', () => {
+      saveCookie('a', '12345')
+      expect(document.cookie).toMatch('a=12345;')
+
+      deleteCookie('a')
+      expect(document.cookie).toMatch('a=;')
+    })
+
+    test('deletes cookie without affecting others', () => {
+      saveCookie('a', '12345')
+      expect(document.cookie).toMatch('a=12345;')
+
+      saveCookie('b', '54321')
+      expect(document.cookie).toMatch('b=54321;')
+
+      deleteCookie('a')
+      expect(document.cookie).toMatch('a=;')
+      expect(document.cookie).toMatch('b=54321;')
+    })
+
+    test('deletes none', () => {
+      saveCookie('a', '12345')
+      saveCookie('b', '54321')
+      deleteCookie('c')
+      expect(document.cookie).toMatch('a=12345;')
+      expect(document.cookie).toMatch('b=54321;')
+    })
+  })
+
+  describe('clearAllCookies', () => {
+    test('clears all cookies', () => {
+      saveCookie('a', '12345')
+      saveCookie('b', '54321')
+      clearAllCookies()
+      expect(document.cookie).toMatch('a=;')
+      expect(document.cookie).toMatch('b=;')
+    })
+  })
+})
diff --git a/src/lib/__tests__/pkce.test.js → lib/__tests__/pkce.test.js b/src/lib/__tests__/pkce.test.js → lib/__tests__/pkce.test.js
diff --git a/lib/cookie.ts b/lib/cookie.ts
@@ -0,0 +1,30 @@
+export const saveCookie = (name: string, value: string, mins: number = 60) => {
+  if (!name)
+    throw new Error('Cookie name is required')
+
+  const date = new Date()
+  date.setTime(date.getTime() + mins * 60 * 1000)
+  document.cookie =
+    `${name}=${value};Expires=${date.toUTCString()}; \
+    path=/; Secure; SameSite=Strict`
+}
+
+export const getCookie = (name: string) => {
+  const value = `; ${document.cookie}`
+  const parts = value.split(`; ${name}=`)
+  if (parts.length === 2) return parts.pop()?.split(';').shift()
+}
+
+export const deleteCookie = (name: string) => {
+  document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT`
+}
+
+export const clearAllCookies = () => {
+  const cookies = document.cookie.split(";")
+  for (let i = 0; i < cookies.length; i++) {
+    const cookie = cookies[i]
+    const eqPos = cookie.indexOf("=")
+    const name = eqPos > -1 ? cookie.substring(0, eqPos) : cookie
+    document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT`
+  }
+}
diff --git a/src/lib/pkce.ts → lib/pkce.ts b/src/lib/pkce.ts → lib/pkce.ts
diff --git a/src/App.css b/src/App.css
diff --git a/src/App.test.tsx b/src/App.test.tsx
@@ -12,5 +12,5 @@ test('renders text', () => {
   expect(wrapper).toBeTruthy()
 
   const { getByText } = wrapper
-  expect(getByText('Vite + React')).toBeTruthy()
+  expect(getByText('Login')).toBeTruthy()
 })
diff --git a/src/App.tsx b/src/App.tsx
@@ -1,33 +1,38 @@
-import { useState } from 'react'
-import reactLogo from './assets/react.svg'
-import viteLogo from '/vite.svg'
-import './App.css'
+import { useEffect, useState } from 'react'
+
+import { getPKCEStatus } from '@/utils/auth'
+import LoginButton from '@/components/LoginButton'
+import { clearAllCookies } from '@lib/cookie'
 
 function App() {
-  const [count, setCount] = useState(0)
+  const params = new URLSearchParams(window.location.search)
+  const state = params.get('state')
+  const code = params.get('code')
+
+  const [isAuthReady, setIsAuthReady] = useState(false)
+  const [status, setStatus] = useState('')
+
+  useEffect(() => {
+    if (state) {
+      const { isDone: isAuthReady, codeVerifier } =
+        getPKCEStatus(state)
+
+      if (isAuthReady) {
+        setIsAuthReady(isAuthReady)
+        setStatus(`code: ${code}, codeVerifier: ${codeVerifier}`)
+      }
+    }
+
+    return () => clearAllCookies()
+    // on mount only
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [])
 
   return (
     <>
-      <div>
-        <a href="https://vitejs.dev" target="_blank">
-          <img src={viteLogo} className="logo" alt="Vite logo" />
-        </a>
-        <a href="https://react.dev" target="_blank">
-          <img src={reactLogo} className="logo react" alt="React logo" />
-        </a>
-      </div>
-      <h1>Vite + React</h1>
-      <div className="card">
-        <button onClick={() => setCount((count) => count + 1)}>
-          count is {count}
-        </button>
-        <p>
-          Edit <code>src/App.tsx</code> and save to test HMR
-        </p>
-      </div>
-      <p className="read-the-docs">
-        Click on the Vite and React logos to learn more
-      </p>
+      {isAuthReady && <p>Ready for Auth Request</p>}
+      {status && <p>{status}</p>}
+      <LoginButton />
     </>
   )
 }

diff --git a/src/components/LoginButton.tsx b/src/components/LoginButton.tsx
@@ -0,0 +1,21 @@
+import useInitPKCE from '@/hooks/useInitPKCE'
+
+const LoginButton = () => {
+  const { error, onLogin } = useInitPKCE()
+
+  return (
+    <>
+      <button type="submit" onClick={onLogin}>
+        Login
+      </button>
+      <pre>
+        {error}
+      </pre>
+      <pre>
+        {document.cookie}
+      </pre>
+    </>
+  )
+}
+
+export default LoginButton
diff --git a/src/config.ts b/src/config.ts
@@ -0,0 +1,13 @@
+const BASE_URL = import.meta.env.VITE_BASE_URL
+const LOGIN_URL = import.meta.env.VITE_AUTH_URL
+const TOKEN_URL = import.meta.env.VITE_TOKEN_URL
+
+const STATE_COOKIE_PREFIX = "app.txs."
+
+export default {
+  BASE_URL,
+  LOGIN_URL,
+  TOKEN_URL,
+
+  STATE_COOKIE_PREFIX
+}
diff --git a/src/hooks/__tests__/useInitPKCE.test.ts b/src/hooks/__tests__/useInitPKCE.test.ts
@@ -0,0 +1,39 @@
+import { beforeAll, expect, describe, test, vi, afterAll } from 'vitest'
+import { renderHook } from '@testing-library/react'
+
+import useInitPKCE from '../useInitPKCE'
+import config from '@/config'
+
+describe('useInitPKCE', () => {
+  const redirect = vi.fn()
+  beforeAll(() => {
+    vi.stubGlobal('location', { replace: redirect })
+  })
+
+  afterAll(() => {
+    vi.unstubAllGlobals()
+  })
+
+  test('returns empty error and onLogin', () => {
+    const { result } = renderHook(() => useInitPKCE())
+    expect(result.current).toMatchObject({
+      error: '',
+      onLogin: expect.any(Function),
+    })
+  })
+
+  test('redirects to login url', async () => {
+    const { result } = renderHook(() => useInitPKCE())
+    await result.current.onLogin()
+
+    expect(redirect).toHaveBeenCalled()
+    const url = redirect.mock.calls[0][0]
+    const query = new URLSearchParams(url.split('?')[1])
+
+    expect(query.get('response_type')).toBe('code,id_token')
+    expect(query.get('redirect_uri')).toBe(config.BASE_URL)
+    expect(query.get('state')).toEqual(expect.any(String))
+    expect(query.get('code_challenge')).toEqual(expect.any(String))
+  })
+})
+
diff --git a/src/hooks/useInitPKCE.ts b/src/hooks/useInitPKCE.ts
@@ -0,0 +1,21 @@
+import { useCallback, useState } from 'react'
+import { createPKCECodes, redirectToLogin } from '@/utils/auth'
+
+const useInitPKCE = () => {
+  const [error, setError] = useState('')
+
+  const onLogin = useCallback(async () => {
+    try {
+      const codes = await createPKCECodes()
+      redirectToLogin(codes.state, codes.codeChallenge)
+    } catch (error) {
+      if (error instanceof Error)
+        setError(error.message)
+      else setError('An unknown error occurred')
+    }
+  }, [])
+
+  return { error, onLogin }
+}
+
+export default useInitPKCE