Add credentials() and hasValidCredentials() [SDK-3997]
#207
Conversation
Widcket
force-pushed
the
feature/credentials
branch
from
1502c1a
to
ce8b29b
Compare
| const JWTDecodeException.invalidPartCount(final String jwt, final int parts) | ||
| : this(JWTDecodeException._invalidPartCount, | ||
| 'The JWT $jwt has $parts parts when it should have 3 parts.'); | ||
| } |
There was a problem hiding this comment.
These are the same messages and error cases as the ones in JWTDecode.swift: https://github.com/auth0/JWTDecode.swift/blob/master/JWTDecode/JWTDecodeError.swift
Widcket
force-pushed
the
feature/credentials
branch
from
fb35de0
to
66dec78
Compare
| accessToken: webCredentials.access_token, | ||
| expiresAt: expiresAt, | ||
| user: user, | ||
| tokenType: 'Bearer'); |
There was a problem hiding this comment.
I believe we get tokenType from the getTokenSilently detailed response - should we use that, or hard code it?
There was a problem hiding this comment.
It's not part of TokenEndpointResponse: https://github.com/auth0/auth0-spa-js/blob/master/src/global.ts#L500
| static Map<String, dynamic> decode(final String jwt) { | ||
| final parts = jwt.split('.'); | ||
|
|
||
| if (parts.length != 3) { | ||
| throw JWTDecodeException.invalidPartCount(jwt, parts.length); | ||
| } | ||
|
|
||
| final String stringPayload; | ||
|
|
||
| try { | ||
| final decodedPayload = base64.decode(base64.normalize(parts[1])); | ||
| stringPayload = utf8.decode(decodedPayload); | ||
| } catch (error) { | ||
| throw JWTDecodeException.invalidBase64URL(parts[1]); | ||
| } | ||
|
|
||
| try { | ||
| return jsonDecode(stringPayload) as Map<String, dynamic>; | ||
| } catch (error) { | ||
| throw JWTDecodeException.invalidJSON(parts[1]); | ||
| } | ||
| } |
There was a problem hiding this comment.
We can already get the decoded token from the SDK using getIdTokenClaims - do we need to decode it manually here?
https://auth0.github.io/auth0-spa-js/classes/Auth0Client.html#getIdTokenClaims
There was a problem hiding this comment.
Not sure we can represent custom claims (https://github.com/auth0/auth0-spa-js/blob/master/src/global.ts#L578) without decoding to a Map<String, dynamic>, hence the custom decoding.
📋 Changes
This PR adds support for fetching the credentials, and for checking if there are any valid credentials stored. The following public methods were added:
credentials()-> callsgetTokenSilently()from the SPA SDK.hasValidCredentials()-> callsisAuthenticated()from the SPA SDK.🎯 Testing
The changes were tested manually. Unit tests will be added in a future PR.
Screen.Recording.2023-02-26.at.22.21.21.mov