Initial implementation

.babelrc

@@ -0,0 +1,5 @@
+{
+  presets: ["es2015"],
+  plugins: ["transform-object-rest-spread"],
+  sourceMaps: true
+}

.editorconfig

@@ -0,0 +1,21 @@
+# http://editorconfig.org
+root = true
+
+# All files
+[*]
+insert_final_newline = true
+trim_trailing_whitespace = true
+charset = utf-8
+
+# JS files
+[*.js]
+indent_style = space
+indent_size = 2
+
+# JSON files
+[*.json]
+indent_style = space
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false

.eslintignore

@@ -0,0 +1 @@
+test

.eslintrc

@@ -0,0 +1,25 @@
+{
+  "parser"  : "babel-eslint",
+  "extends": "airbnb",
+  "parserOptions": {
+    "ecmaVersion": 6,
+    "sourceType": "module",
+    "ecmaFeatures": {
+      "jsx": false
+    }
+  },
+  "plugins" : [
+    "flow-vars"
+  ],
+  "env"     : {
+    "browser" : true,
+    "mocha": true,
+  },
+  "rules": {
+    "no-empty-label": 0,
+    "space-before-keywords": 0,
+    "space-after-keywords": 0,
+    "space-return-throw-case": 0,
+    "no-iterator": 0
+  }
+}

LICENSE

@@ -0,0 +1,30 @@
+BSD License
+
+For @shoutem/fetch-token-intercept software
+
+Copyright (c) 2017-present, Shoutem. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+     documentation and/or other materials provided with the distribution.
+
+  * Neither the name of the Shoutem nor the
+    names of its contributors may be used to endorse or promote products
+    derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL COPYRIGHT HOLDER BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

babelTestSetup.js

@@ -0,0 +1,5 @@
+require('babel-register')({
+  presets: ['es2015'],
+  plugins: ['transform-object-rest-spread'],
+  sourceMaps: 'both',
+});

package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@shoutem/fetch-token-intercept",
+  "version": "0.0.1-alpha.1",
+  "description": "Fetch interceptor for managing refresh token flow.",
+  "main": "lib/index.js",
+  "files": [
+    "lib"
+  ],
+  "scripts": {
+    "lint": "eslint src test",
+    "test": "mocha --require babelTestSetup --reporter spec --recursive test",
+    "coverage": "babel-node node_modules/isparta/bin/isparta cover --report text --report html node_modules/mocha/bin/_mocha -- -R spec --recursive test",
+    "build": "babel src --out-dir lib"
+  },
+  "repository": {
+    "type": "git",
+    "url": ""
+  },
+  "keywords": [
+    "fetch",
+    "intercept",
+    "refresh",
+    "token",
+    "access"
+  ],
+  "author": "Shoutem",
+  "license": "MIT",
+  "bugs": {
+    "url": ""
+  },
+  "homepage": "",
+  "devDependencies": {
+    "babel-cli": "^6.9.0",
+    "babel-core": "^6.9.1",
+    "babel-eslint": "^6.0.0",
+    "babel-preset-es2015": "^6.9.0",
+    "babel-preset-stage-0": "^6.3.13",
+    "babel-register": "^6.9.0",
+    "chai": "^3.5.0",
+    "chai-shallow-deep-equal": "^1.4.0",
+    "deep-freeze": "0.0.1",
+    "es6-promise": "^4.0.5",
+    "eslint": "^2.11.1",
+    "eslint-config-airbnb": "^9.0.1",
+    "eslint-plugin-flow-vars": "^0.4.0",
+    "eslint-plugin-import": "^1.8.1",
+    "eslint-plugin-jsx-a11y": "^1.3.0",
+    "eslint-plugin-react": "^5.1.1",
+    "estraverse-fb": "^1.3.1",
+    "express": "^4.14.1",
+    "fetch-everywhere": "^1.0.5",
+    "isparta": "^4.0.0",
+    "istanbul": "0.4.4",
+    "mocha": "^2.5.3",
+    "nock": "^8.0.0",
+    "sinon": "^1.17.4"
+  },
+  "dependencies": {}
+}

src/accessTokenProvider.js

@@ -0,0 +1,111 @@
+import {
+  isResponseUnauthorized,
+} from './services/http';
+
+export class AccessTokenProvider {
+  constructor(fetch, config) {
+    this.fetch = fetch;
+
+    this.config = config;
+    this.refreshAccessTokenPromise = null;
+    this.tokens = {
+      refreshToken: null,
+      accessToken: null,
+    };
+
+    this.isAuthorized = this.isAuthorized.bind(this);
+    this.refresh = this.refresh.bind(this);
+    this.clear = this.clear.bind(this);
+
+    this.resolveAccessToken = this.resolveAccessToken.bind(this);
+    this.fetchToken = this.fetchToken.bind(this);
+    this.handleFetchResolved = this.handleFetchResolved.bind(this);
+    this.handleTokenResolved = this.handleTokenResolved.bind(this);
+    this.handleError = this.handleError.bind(this);
+  }
+
+  /**
+   * Refreshes current access token with provided refresh token
+   */
+  refresh() {
+    // if token resolver is not authorized it should just resolve
+    if (!this.isAuthorized()) {
+      return Promise.resolve();
+    }
+
+    // if we are not running token promise, start it
+    if (!this.refreshAccessTokenPromise) {
+      this.refreshAccessTokenPromise = new Promise(this.resolveAccessToken);
+    }
+
+    // otherwise just return existing promise
+    return this.refreshAccessTokenPromise;
+  }
+
+  /**
+   * Authorizes intercept library with given refresh token
+   * @param refreshToken
+   * @param accessToken
+   */
+  authorize(refreshToken, accessToken) {
+    this.tokens = { ...this.tokens, refreshToken, accessToken };
+  }
+
+  /**
+   * Returns current authorization for fetch fetchInterceptor
+   * @returns {{accessToken: string, refreshToken: string}}
+   */
+  getAuthorization() {
+    return this.tokens;
+  }
+
+  clear() {
+    this.tokens.accessToken = null;
+    this.tokens.refreshToken = null;
+  }
+
+  isAuthorized() {
+    return this.tokens.refreshToken !== null;
+  }
+
+  fetchToken(tokenRequest) {
+    const { fetch } = this;
+    return fetch(tokenRequest);
+  }
+
+  handleFetchResolved(response) {
+    this.refreshAccessTokenPromise = null;
+
+    if (isResponseUnauthorized(response)) {
+      this.clear();
+      return null;
+    }
+
+    return this.config.parseAccessToken(response);
+  }
+
+  handleTokenResolved(token, resolve) {
+    this.tokens.accessToken = token;
+
+    if (this.config.onAccessTokenChange) {
+      this.config.onAccessTokenChange(token);
+    }
+
+    resolve(token);
+  }
+
+  handleError(error, reject) {
+    this.refreshAccessTokenPromise = null;
+    this.clear();
+
+    reject(error);
+  }
+
+  resolveAccessToken(resolve, reject) {
+    return Promise.resolve(this.config.createAccessTokenRequest(this.tokens.refreshToken))
+      .then(this.fetchToken)
+      .then(this.handleFetchResolved)
+      .then(token => this.handleTokenResolved(token, resolve))
+      .catch(error => this.handleError(error, reject));
+  }
+}

src/const.js

@@ -0,0 +1,2 @@
+
+export const ERROR_INVALID_CONFIG = 'invalid-config';

src/environment.js

@@ -0,0 +1,62 @@
+import {
+  isReactNative,
+  isWorker,
+  isWeb,
+  isNode,
+} from './services/environment';
+import {
+  FetchInterceptor,
+} from './fetchInterceptor';
+
+const interceptors = [];
+
+function init() {
+  if (isReactNative()) {
+    attach(global);
+  } else if (isWorker()) {
+    attach(self);
+  } else if (isWeb()) {
+    attach(window);
+  } else if (isNode()) {
+    attach(global);
+  } else {
+    throw new Error('Unsupported environment for fetch-token-intercept');
+  }
+}
+
+function attach(env) {
+  if (!env.fetch) {
+    throw Error('No fetch available. Unable to register fetch-token-intercept');
+  }
+
+  // for now add default interceptor
+  interceptors.push(new FetchInterceptor(env.fetch));
+
+  // monkey patch fetch
+  const fetchWrapper = fetch => (...args) => interceptors[0].intercept(...args);
+  env.fetch = fetchWrapper(env.fetch);
+}
+
+function configure(config) {
+  interceptors[0].configure(config);
+}
+
+function authorize(...args) {
+  interceptors[0].authorize(...args);
+}
+
+function getAuthorization() {
+  return interceptors[0].getAuthorization();
+}
+
+function clear() {
+  return interceptors[0].clear();
+}
+
+export {
+  init,
+  clear,
+  configure,
+  authorize,
+  getAuthorization,
+}