comparing b4383d6f6210b0237c5ba7ca09f28c5330eab285 and main on hailey.at/expo-atproto-auth

+1 -1

.eslintrc.js

···

       1
       1
        
       // @generated by expo-module-scripts

     

       2
       2
       -
       module.exports = require('expo-module-scripts/eslintrc.base.js')

     

       2
       2
       +
       module.exports = require('expo-module-scripts/eslintrc.base.js');

+21

LICENSE

···

       1
       1
       +
       MIT License

     

       2
       2
       +
       

     

       3
       3
       +
       Copyright (c) 2025 me@haileyok.com

     

       4
       4
       +
       

     

       5
       5
       +
       Permission is hereby granted, free of charge, to any person obtaining a copy

     

       6
       6
       +
       of this software and associated documentation files (the "Software"), to deal

     

       7
       7
       +
       in the Software without restriction, including without limitation the rights

     

       8
       8
       +
       to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

     

       9
       9
       +
       copies of the Software, and to permit persons to whom the Software is

     

       10
       10
       +
       furnished to do so, subject to the following conditions:

     

       11
       11
       +
       

     

       12
       12
       +
       The above copyright notice and this permission notice shall be included in all

     

       13
       13
       +
       copies or substantial portions of the Software.

     

       14
       14
       +
       

     

       15
       15
       +
       THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

     

       16
       16
       +
       IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

     

       17
       17
       +
       FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

     

       18
       18
       +
       AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

     

       19
       19
       +
       LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

     

       20
       20
       +
       OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

     

       21
       21
       +
       SOFTWARE.

+137 -16

README.md

···

       1
       1
       -
       # expo-atproto-auth

     

       1
       1
       +
       # Expo Atproto OAuth

     

       2
       2
       +
       

     

       3
       3
       +
       This is an Expo client library for Atproto OAuth. It implements the required native crypto functions for supporting JWTs in React Native and uses

     

       4
       4
       +
       the base `OAuthClient` interface found in [the Atproto repository](https://github.com/bluesky-social/atproto/tree/main/packages/oauth/oauth-client).

     

       5
       5
       +
       

     

       6
       6
       +
       ## Prerequisites

     

       7
       7
       +
       

     

       8
       8
       +
       Before using this library, there are a few additional libraries that you must install within your Expo application.

     

       9
       9
       +
       

     

       10
       10
       +
       - [react-native-mmkv](https://www.npmjs.com/package/react-native-mmkv)

     

       11
       11
       +
       - [expo-web-browser](https://www.npmjs.com/package/expo-web-browser)

     

       12
       12
       +
       - [@atproto/oauth-client](https://www.npmjs.com/package/@atproto/oauth-client)

     

       13
       13
       +
       - [event-target-polyfill](https://www.npmjs.com/package/event-target-polyfill) (or similar)

     

       14
       14
       +
       - [abortcontroller-polyfill](https://www.npmjs.com/package/abortcontroller-polyfill) (or similar)

     

       15
       15
       +
       

     

       16
       16
       +
       Apply the two polyfills inside your application's entrypoint (usually `index.ts`). They should be placed _before_ anything else in the file, and particularly before `registerRootComponent(App)`.

     

       17
       17
       +
       

     

       18
       18
       +
       > [!CAUTION]

     

       19
       19
       +
       > As of current (Expo 53), you _must_ apply an Expo patch for this library to work. You may use the patch found [here](https://github.com/haileyok/expo-atproto-auth/blob/main/patches/expo%2B53.0.19.patch).

     

       20
       20
       +
       A fix for this has been submitted up stream and merged, so will hopefully be fixed in Expo 54 (see the PR [here](https://github.com/expo/expo/pull/38122)).

     

       21
       21
       +
       

     

       22
       22
       +
       ### In bare React Native projects

     

       23
       23
       +
       

     

       24
       24
       +
       For bare React Native projects, you must ensure that you have [installed and configured the `expo` package](https://docs.expo.dev/bare/installing-expo-modules/)

     

       25
       25
       +
       before continuing.

     

       26
       26
       +
       

     

       27
       27
       +
       ## Installation

     

       28
       28
       +
       

     

       29
       29
       +
       Once you have satisfied the prerequisites, you can simply install the library with `yarn add expo-atproto-auth`.

     

       30
       30
       +
       

     

       31
       31
       +
       ## Usage

     

       32
       32
       +
       

     

       33
       33
       +
       ### Serve your `oauth-client-metadata.json`

     

       34
       34
       +
       

     

       35
       35
       +
       You will need to server an `oauth-client-metadata.json` from your application's website. An example of this metadata

     

       36
       36
       +
       would look like this:

     

       37
       37
       +
       

     

       38
       38
       +
       ```

     

       39
       39
       +
       {

     

       40
       40
       +
       	"client_id": "https://hailey.at/oauth-client-metadata.json",

     

       41
       41
       +
       	"client_name": "React Native OAuth Client Demo",

     

       42
       42
       +
       	"client_uri": "https://hailey.at",

     

       43
       43
       +
       	"redirect_uris": [

     

       44
       44
       +
       		"at.hailey:/auth/callback"

     

       45
       45
       +
       	],

     

       46
       46
       +
       	"scope": "atproto transition:generic",

     

       47
       47
       +
       	"token_endpoint_auth_method": "none",

     

       48
       48
       +
       	"response_types": [

     

       49
       49
       +
       		"code"

     

       50
       50
       +
       	],

     

       51
       51
       +
       	"grant_types": [

     

       52
       52
       +
       		"authorization_code",

     

       53
       53
       +
       		"refresh_token"

     

       54
       54
       +
       	],

     

       55
       55
       +
       	"application_type": "native",

     

       56
       56
       +
       	"dpop_bound_access_tokens": true

     

       57
       57
       +
       }

     

       58
       58
       +
       ```

     

       59
       59
       +
       

     

       60
       60
       +
       - The `client_id` should be the same URL as where you are serving your `oauth-client-metadata.json` from

     

       61
       61
       +
       - The `client_uri` can be the home page of where you are serving your metadata from

     

       62
       62
       +
       - Your `redirect_uris` should contain the native redirect URI in the first position. Additionally, the scheme must be

     

       63
       63
       +
       formatted as the _reverse_ of the domain you are serving the metadata from. Since I am serving mine from `hailey.at`,

     

       64
       64
       +
       I use `at.hailey` as the scheme. If my domain were `atproto.expo.dev`, I would use `dev.expo.atproto`. Additionally, the scheme _must_ contain _only one trailing slash_ after the `:`. `at.hailey://` would be invalid.

     

       65
       65
       +
       - The `application_type` must be `native`

     

       66
       66
       +
       

     

       67
       67
       +
       For a real-world example, see [Skylight's client metadata](https://skylight.expo.app/oauth/client-metadata.json).

     

       2
       68
        
       

     

       3
       3
       -
       Atproto OAuth for Expo applications

     

       69
       69
       +
       For more information about client metadata, see [the Atproto documentation](https://atproto.com/specs/oauth#client-id-metadata-document).

     

       70
       70
       +
       

     

       71
       71
       +
       ### Create a client

     

       4
       72
        
       

     

       5
       5
       -
       # API documentation

     

       73
       73
       +
       Next, you want to create an `ExpoOAuthClient`. You will need to pass in the same client metadata to the client as you are serving in your `oauth-client-metadata.json`.

     

       6
       74
        
       

     

       7
       7
       -
       - [Documentation for the latest stable release](https://docs.expo.dev/versions/latest/sdk/atproto-auth/)

     

       8
       8
       -
       - [Documentation for the main branch](https://docs.expo.dev/versions/unversioned/sdk/atproto-auth/)

     

       75
       75
       +
       ```ts

     

       76
       76
       +
       const client = new ExpoOAuthClient({

     

       77
       77
       +
         clientMetadata: {

     

       78
       78
       +
           client_id: 'https://hailey.at/oauth-client-metadata.json',

     

       79
       79
       +
           client_name: 'React Native OAuth Client Demo',

     

       80
       80
       +
           client_uri: 'https://hailey.at',

     

       81
       81
       +
           redirect_uris: ['at.hailey:/auth/callback'],

     

       82
       82
       +
           scope: 'atproto transition:generic',

     

       83
       83
       +
           token_endpoint_auth_method: 'none',

     

       84
       84
       +
           response_types: ['code'],

     

       85
       85
       +
           grant_types: ['authorization_code', 'refresh_token'],

     

       86
       86
       +
           application_type: 'native',

     

       87
       87
       +
           dpop_bound_access_tokens: true,

     

       88
       88
       +
         },

     

       89
       89
       +
         handleResolver: 'https://bsky.social',

     

       90
       90
       +
       })

     

       91
       91
       +
       ```

     

       9
       92
        
       

     

       10
       10
       -
       # Installation in managed Expo projects

     

       93
       93
       +
       ### Sign a user in

     

       11
       94
        
       

     

       12
       12
       -
       For [managed](https://docs.expo.dev/archive/managed-vs-bare/) Expo projects, please follow the installation instructions in the [API documentation for the latest stable release](#api-documentation). If you follow the link and there is no documentation available then this library is not yet usable within managed projects &mdash; it is likely to be included in an upcoming Expo SDK release.

     

       95
       95
       +
       Whenever you are ready, you can initiate a sign in attempt for the user using the client using `client.signIn(input)`

     

       13
       96
        
       

     

       14
       14
       -
       # Installation in bare React Native projects

     

       97
       97
       +
       `input` must be one of the following:

     

       98
       98
       +
       - A valid Atproto user handle, e.g. `hailey.bsky.team` or `hailey.at`

     

       99
       99
       +
       - A valid DID, e.g. `did:web:hailey.at` or `did:plc:oisofpd7lj26yvgiivf3lxsi`

     

       100
       100
       +
       - A valid PDS host, e.g. `https://cocoon.hailey.at` or `https://bsky.social`

     

       15
       101
        
       

     

       16
       16
       -
       For bare React Native projects, you must ensure that you have [installed and configured the `expo` package](https://docs.expo.dev/bare/installing-expo-modules/) before continuing.

     

       102
       102
       +
       > [!NOTE]

     

       103
       103
       +
       > If you wish to allow a user to _create_ an account instead of signing in, simply use a valid PDS hostname rather than

     

       104
       104
       +
       > a handle. They will be presented the option to either Sign In with an existing account, or create a new one.

     

       17
       105
        
       

     

       18
       18
       -
       ### Add the package to your npm dependencies

     

       106
       106
       +
       The response of `signIn` will be a promise resolving to the following:

     

       19
       107
        
       

     

       108
       108
       +
       ```ts

     

       109
       109
       +
           | { status: WebBrowserResultType } // See Expo Web Browser documentation

     

       110
       110
       +
           | { status: 'error'; error: unknown }

     

       111
       111
       +
           | { status: 'success'; session: OAuthSession }

     

       20
       112
        
       ```

     

       21
       21
       -
       npm install expo-atproto-auth

     

       113
       113
       +
       

     

       114
       114
       +
       For example:

     

       115
       115
       +
       

     

       116
       116
       +
       ```ts

     

       117
       117
       +
         const res = await client.signIn(input ?? '')

     

       118
       118
       +
         if (res.status === 'success') {

     

       119
       119
       +
           setSession(res.session)

     

       120
       120
       +
           const newAgent = new Agent(res.session)

     

       121
       121
       +
           setAgent(newAgent)

     

       122
       122
       +
         } else if (res.status === 'error') {

     

       123
       123
       +
           Alert.alert('Error', (res.error as any).toString())

     

       124
       124
       +
         } else {

     

       125
       125
       +
           Alert.alert(

     

       126
       126
       +
             'Error',

     

       127
       127
       +
             `Received unknown WebResultType: ${res.status}`

     

       128
       128
       +
           )

     

       129
       129
       +
         }

     

       22
       130
        
       ```

     

       23
       131
        
       

     

       24
       24
       -
       ### Configure for Android

     

       132
       132
       +
       ### Create an `Agent`

     

       25
       133
        
       

     

       134
       134
       +
       To interface with the various Atproto APIs, you will need to create an `Agent`. You will pass your `OAuthSession` to the `Agent`.

     

       26
       135
        
       

     

       136
       136
       +
       ```ts

     

       137
       137
       +
       const newAgent = new Agent(res.session)

     

       138
       138
       +
       ```

     

       27
       139
        
       

     

       140
       140
       +
       Session refreshes will be handled for you for the lifetime of the agent.

     

       141
       141
       +
       

     

       142
       142
       +
       ### Restoring a session

     

       28
       143
        
       

     

       29
       29
       -
       ### Configure for iOS

     

       144
       144
       +
       After, for example, closing the application, you will probably need to restore the user's session. You can do this by using the user's DID on the `ExpoOAuthClient`.

     

       145
       145
       +
       

     

       146
       146
       +
       ```ts

     

       147
       147
       +
       const restoreRes = await client.restore('did:plc:oisofpd7lj26yvgiivf3lxsi')

     

       148
       148
       +
       const newAgent = new Agent(restoreRes)

     

       149
       149
       +
       ```

     

       30
       150
        
       

     

       31
       31
       -
       Run `npx pod-install` after installing the npm package.

     

       151
       151
       +
       If the session needs to be refreshed, `.restore()` will do this for you before returning a session.

     

       32
       152
        
       

     

       33
       33
       -
       # Contributing

     

       153
       153
       +
       ## Additional Reading

     

       34
       154
        
       

     

       35
       35
       -
       Contributions are very welcome! Please refer to guidelines described in the [contributing guide]( https://github.com/expo/expo#contributing).

     

       155
       155
       +
       - [Atproto OAuth Spec](https://atproto.com/specs/oauth)

     

       156
       156
       +
       - [Atproto Web OAuth Example](https://github.com/bluesky-social/atproto/tree/main/packages/oauth/oauth-client-browser-example)

android/.editorconfig

···

       1
       1
       +
       [*.{kt,kts}]

     

       2
       2
       +
       indent_size=2

android/build.gradle

···

       41
       41
        
           abortOnError false

     

       42
       42
        
         }

     

       43
       43
        
       }

     

       44
       44
       +
       

     

       45
       45
       +
       dependencies {

     

       46
       46
       +
         implementation "com.nimbusds:nimbus-jose-jwt:10.3.1"

     

       47
       47
       +
       }

+70

android/src/main/java/expo/modules/atprotoauth/Crypto.kt

···

       1
       1
       +
       package expo.modules.expoatprotoauth

     

       2
       2
       +
       

     

       3
       3
       +
       import com.nimbusds.jose.Algorithm

     

       4
       4
       +
       import com.nimbusds.jose.jwk.Curve

     

       5
       5
       +
       import com.nimbusds.jose.jwk.ECKey

     

       6
       6
       +
       import com.nimbusds.jose.jwk.KeyUse

     

       7
       7
       +
       import com.nimbusds.jose.util.Base64URL

     

       8
       8
       +
       import expo.modules.atprotoauth.EncodedJWK

     

       9
       9
       +
       import java.security.KeyPairGenerator

     

       10
       10
       +
       import java.security.MessageDigest

     

       11
       11
       +
       import java.security.interfaces.ECPrivateKey

     

       12
       12
       +
       import java.security.interfaces.ECPublicKey

     

       13
       13
       +
       import java.util.UUID

     

       14
       14
       +
       

     

       15
       15
       +
       class Crypto {

     

       16
       16
       +
         fun digest(data: ByteArray): ByteArray {

     

       17
       17
       +
           val instance = MessageDigest.getInstance("sha256")

     

       18
       18
       +
           return instance.digest(data)

     

       19
       19
       +
         }

     

       20
       20
       +
       

     

       21
       21
       +
         fun getRandomValues(byteLength: Int): ByteArray {

     

       22
       22
       +
           val random = ByteArray(byteLength)

     

       23
       23
       +
           java.security.SecureRandom().nextBytes(random)

     

       24
       24
       +
           return random

     

       25
       25
       +
         }

     

       26
       26
       +
       

     

       27
       27
       +
         fun generateJwk(): EncodedJWK {

     

       28
       28
       +
           val keyIdString = UUID.randomUUID().toString()

     

       29
       29
       +
       

     

       30
       30
       +
           val keyPairGen = KeyPairGenerator.getInstance("EC")

     

       31
       31
       +
           keyPairGen.initialize(Curve.P_256.toECParameterSpec())

     

       32
       32
       +
           val keyPair = keyPairGen.generateKeyPair()

     

       33
       33
       +
       

     

       34
       34
       +
           val publicKey = keyPair.public as ECPublicKey

     

       35
       35
       +
           val privateKey = keyPair.private as ECPrivateKey

     

       36
       36
       +
       

     

       37
       37
       +
           val privateJwk =

     

       38
       38
       +
             ECKey

     

       39
       39
       +
               .Builder(Curve.P_256, publicKey)

     

       40
       40
       +
               .privateKey(privateKey)

     

       41
       41
       +
               .keyUse(KeyUse.SIGNATURE)

     

       42
       42
       +
               .keyID(keyIdString)

     

       43
       43
       +
               .algorithm(Algorithm.parse("ES256"))

     

       44
       44
       +
               .build()

     

       45
       45
       +
       

     

       46
       46
       +
           return EncodedJWK().apply {

     

       47
       47
       +
             kty = privateJwk.keyType.value

     

       48
       48
       +
             use = "sig"

     

       49
       49
       +
             crv = privateJwk.curve.toString()

     

       50
       50
       +
             kid = keyIdString

     

       51
       51
       +
             x = privateJwk.x.toString()

     

       52
       52
       +
             y = privateJwk.y.toString()

     

       53
       53
       +
             d = privateJwk.d.toString()

     

       54
       54
       +
             alg = privateJwk.algorithm.name

     

       55
       55
       +
           }

     

       56
       56
       +
         }

     

       57
       57
       +
       

     

       58
       58
       +
         fun decodeJwk(encodedJwk: EncodedJWK): ECKey {

     

       59
       59
       +
           val xb64url = Base64URL.from(encodedJwk.x)

     

       60
       60
       +
           val yb64url = Base64URL.from(encodedJwk.y)

     

       61
       61
       +
           val db64url = Base64URL.from(encodedJwk.d)

     

       62
       62
       +
           return ECKey

     

       63
       63
       +
             .Builder(Curve.P_256, xb64url, yb64url)

     

       64
       64
       +
             .d(db64url)

     

       65
       65
       +
             .keyUse(KeyUse.SIGNATURE)

     

       66
       66
       +
             .keyID(encodedJwk.kid)

     

       67
       67
       +
             .algorithm(Algorithm.parse(encodedJwk.alg))

     

       68
       68
       +
             .build()

     

       69
       69
       +
         }

     

       70
       70
       +
       }

+27 -36

android/src/main/java/expo/modules/atprotoauth/ExpoAtprotoAuthModule.kt

···

       1
       1
        
       package expo.modules.atprotoauth

     

       2
       2
        
       

     

       3
       3
       +
       import expo.modules.expoatprotoauth.Crypto

     

       4
       4
       +
       import expo.modules.expoatprotoauth.Jose

     

       3
       5
        
       import expo.modules.kotlin.modules.Module

     

       4
       6
        
       import expo.modules.kotlin.modules.ModuleDefinition

     

       5
       5
       -
       import java.net.URL

     

       6
       7
        
       

     

       7
       8
        
       class ExpoAtprotoAuthModule : Module() {

     

       8
       8
       -
         // Each module class must implement the definition function. The definition consists of components

     

       9
       9
       -
         // that describes the module's functionality and behavior.

     

       10
       10
       -
         // See https://docs.expo.dev/modules/module-api for more details about available components.

     

       11
       11
       -
         override fun definition() = ModuleDefinition {

     

       12
       12
       -
           // Sets the name of the module that JavaScript code will use to refer to the module. Takes a string as an argument.

     

       13
       13
       -
           // Can be inferred from module's class name, but it's recommended to set it explicitly for clarity.

     

       14
       14
       -
           // The module will be accessible from `requireNativeModule('ExpoAtprotoAuth')` in JavaScript.

     

       15
       15
       -
           Name("ExpoAtprotoAuth")

     

       9
       9
       +
         override fun definition() =

     

       10
       10
       +
           ModuleDefinition {

     

       11
       11
       +
             Name("ExpoAtprotoAuth")

     

       16
       12
        
       

     

       17
       17
       -
           // Sets constant properties on the module. Can take a dictionary or a closure that returns a dictionary.

     

       18
       18
       -
           Constants(

     

       19
       19
       -
             "PI" to Math.PI

     

       20
       20
       -
           )

     

       13
       13
       +
             Function("digest") { data: ByteArray, algo: String ->

     

       14
       14
       +
               if (algo != "sha256") {

     

       15
       15
       +
                 throw IllegalArgumentException("Unsupported algorithm: $algo")

     

       16
       16
       +
               }

     

       17
       17
       +
               return@Function Crypto().digest(data)

     

       18
       18
       +
             }

     

       21
       19
        
       

     

       22
       22
       -
           // Defines event names that the module can send to JavaScript.

     

       23
       23
       -
           Events("onChange")

     

       20
       20
       +
             Function("getRandomValues") { byteLength: Int ->

     

       21
       21
       +
               return@Function Crypto().getRandomValues(byteLength)

     

       22
       22
       +
             }

     

       24
       23
        
       

     

       25
       25
       -
           // Defines a JavaScript synchronous function that runs the native code on the JavaScript thread.

     

       26
       26
       -
           Function("hello") {

     

       27
       27
       -
             "Hello world! 👋"

     

       28
       28
       -
           }

     

       24
       24
       +
             Function("generatePrivateJwk") { algo: String ->

     

       25
       25
       +
               if (algo != "ES256") {

     

       26
       26
       +
                 throw IllegalArgumentException("Unsupported algorithm: $algo")

     

       27
       27
       +
               }

     

       28
       28
       +
               return@Function Crypto().generateJwk()

     

       29
       29
       +
             }

     

       29
       30
        
       

     

       30
       30
       -
           // Defines a JavaScript function that always returns a Promise and whose native code

     

       31
       31
       -
           // is by default dispatched on the different thread than the JavaScript runtime runs on.

     

       32
       32
       -
           AsyncFunction("setValueAsync") { value: String ->

     

       33
       33
       -
             // Send an event to JavaScript.

     

       34
       34
       -
             sendEvent("onChange", mapOf(

     

       35
       35
       -
               "value" to value

     

       36
       36
       -
             ))

     

       37
       37
       -
           }

     

       31
       31
       +
             Function("createJwt") { header: String, payload: String, encodedJwk: EncodedJWK ->

     

       32
       32
       +
               val jwk = Crypto().decodeJwk(encodedJwk)

     

       33
       33
       +
               return@Function Jose().createJwt(header, payload, jwk)

     

       34
       34
       +
             }

     

       38
       35
        
       

     

       39
       39
       -
           // Enables the module to be used as a native view. Definition components that are accepted as part of

     

       40
       40
       -
           // the view definition: Prop, Events.

     

       41
       41
       -
           View(ExpoAtprotoAuthView::class) {

     

       42
       42
       -
             // Defines a setter for the `url` prop.

     

       43
       43
       -
             Prop("url") { view: ExpoAtprotoAuthView, url: URL ->

     

       44
       44
       -
               view.webView.loadUrl(url.toString())

     

       36
       36
       +
             Function("verifyJwt") { token: String, encodedJwk: EncodedJWK, options: VerifyOptions ->

     

       37
       37
       +
               val jwk = Crypto().decodeJwk(encodedJwk)

     

       38
       38
       +
               return@Function Jose().verifyJwt(token, jwk, options)

     

       45
       39
        
             }

     

       46
       46
       -
             // Defines an event that the view can send to JavaScript.

     

       47
       47
       -
             Events("onLoad")

     

       48
       40
        
           }

     

       49
       49
       -
         }

     

       50
       41
        
       }

-30

android/src/main/java/expo/modules/atprotoauth/ExpoAtprotoAuthView.kt

···

       1
       1
       -
       package expo.modules.atprotoauth

     

       2
       2
       -
       

     

       3
       3
       -
       import android.content.Context

     

       4
       4
       -
       import android.webkit.WebView

     

       5
       5
       -
       import android.webkit.WebViewClient

     

       6
       6
       -
       import expo.modules.kotlin.AppContext

     

       7
       7
       -
       import expo.modules.kotlin.viewevent.EventDispatcher

     

       8
       8
       -
       import expo.modules.kotlin.views.ExpoView

     

       9
       9
       -
       

     

       10
       10
       -
       class ExpoAtprotoAuthView(context: Context, appContext: AppContext) : ExpoView(context, appContext) {

     

       11
       11
       -
         // Creates and initializes an event dispatcher for the `onLoad` event.

     

       12
       12
       -
         // The name of the event is inferred from the value and needs to match the event name defined in the module.

     

       13
       13
       -
         private val onLoad by EventDispatcher()

     

       14
       14
       -
       

     

       15
       15
       -
         // Defines a WebView that will be used as the root subview.

     

       16
       16
       -
         internal val webView = WebView(context).apply {

     

       17
       17
       -
           layoutParams = LayoutParams(LayoutParams.MATCH_PARENT, LayoutParams.MATCH_PARENT)

     

       18
       18
       -
           webViewClient = object : WebViewClient() {

     

       19
       19
       -
             override fun onPageFinished(view: WebView, url: String) {

     

       20
       20
       -
               // Sends an event to JavaScript. Triggers a callback defined on the view component in JavaScript.

     

       21
       21
       -
               onLoad(mapOf("url" to url))

     

       22
       22
       -
             }

     

       23
       23
       -
           }

     

       24
       24
       -
         }

     

       25
       25
       -
       

     

       26
       26
       -
         init {

     

       27
       27
       -
           // Adds the WebView to the view hierarchy.

     

       28
       28
       -
           addView(webView)

     

       29
       29
       -
         }

     

       30
       30
       -
       }

+116

android/src/main/java/expo/modules/atprotoauth/Jose.kt

···

       1
       1
       +
       package expo.modules.expoatprotoauth

     

       2
       2
       +
       

     

       3
       3
       +
       import com.nimbusds.jose.JWSHeader

     

       4
       4
       +
       import com.nimbusds.jose.crypto.ECDSASigner

     

       5
       5
       +
       import com.nimbusds.jose.crypto.ECDSAVerifier

     

       6
       6
       +
       import com.nimbusds.jose.jwk.ECKey

     

       7
       7
       +
       import com.nimbusds.jwt.JWTClaimsSet

     

       8
       8
       +
       import com.nimbusds.jwt.SignedJWT

     

       9
       9
       +
       import expo.modules.atprotoauth.VerifyOptions

     

       10
       10
       +
       import expo.modules.atprotoauth.VerifyResult

     

       11
       11
       +
       

     

       12
       12
       +
       class InvalidPayloadException(

     

       13
       13
       +
         message: String,

     

       14
       14
       +
       ) : Exception(message)

     

       15
       15
       +
       

     

       16
       16
       +
       class Jose {

     

       17
       17
       +
         fun createJwt(

     

       18
       18
       +
           header: String,

     

       19
       19
       +
           payload: String,

     

       20
       20
       +
           jwk: ECKey,

     

       21
       21
       +
         ): String {

     

       22
       22
       +
           val parsedHeader = JWSHeader.parse(header)

     

       23
       23
       +
           val parsedPayload = JWTClaimsSet.parse(payload)

     

       24
       24
       +
       

     

       25
       25
       +
           val signer = ECDSASigner(jwk)

     

       26
       26
       +
           val jwt = SignedJWT(parsedHeader, parsedPayload)

     

       27
       27
       +
           jwt.sign(signer)

     

       28
       28
       +
       

     

       29
       29
       +
           return jwt.serialize()

     

       30
       30
       +
         }

     

       31
       31
       +
       

     

       32
       32
       +
         fun verifyJwt(

     

       33
       33
       +
           token: String,

     

       34
       34
       +
           jwk: ECKey,

     

       35
       35
       +
           options: VerifyOptions,

     

       36
       36
       +
         ): VerifyResult {

     

       37
       37
       +
           val jwt = SignedJWT.parse(token)

     

       38
       38
       +
           val verifier = ECDSAVerifier(jwk)

     

       39
       39
       +
       

     

       40
       40
       +
           if (!jwt.verify(verifier)) {

     

       41
       41
       +
             throw InvalidPayloadException("invalid JWT signature")

     

       42
       42
       +
           }

     

       43
       43
       +
       

     

       44
       44
       +
           val protectedHeader = emptyMap<String, Any>().toMutableMap()

     

       45
       45
       +
           protectedHeader["alg"] = jwt.header.algorithm

     

       46
       46
       +
       

     

       47
       47
       +
           jwt.header.getCustomParam("jku")?.let {

     

       48
       48
       +
             protectedHeader["jku"] = it.toString()

     

       49
       49
       +
           }

     

       50
       50
       +
           jwt.header.keyID?.let {

     

       51
       51
       +
             protectedHeader["kid"] = it

     

       52
       52
       +
           }

     

       53
       53
       +
           jwt.header.type?.let {

     

       54
       54
       +
             protectedHeader["typ"] = it.toString()

     

       55
       55
       +
           }

     

       56
       56
       +
           jwt.header.contentType?.let {

     

       57
       57
       +
             protectedHeader["cty"] = it

     

       58
       58
       +
           }

     

       59
       59
       +
           jwt.header.criticalParams?.let {

     

       60
       60
       +
             protectedHeader["crit"] = it.toList()

     

       61
       61
       +
           }

     

       62
       62
       +
       

     

       63
       63
       +
           options.typ?.let {

     

       64
       64
       +
             if (jwt.header.type.toString() != it) {

     

       65
       65
       +
               throw InvalidPayloadException("typ mismatch")

     

       66
       66
       +
             }

     

       67
       67
       +
           }

     

       68
       68
       +
       

     

       69
       69
       +
           val claims = jwt.jwtClaimsSet

     

       70
       70
       +
       

     

       71
       71
       +
           options.requiredClaims?.let { requiredClaims ->

     

       72
       72
       +
             requiredClaims.forEach { claim ->

     

       73
       73
       +
               if (!claims.claims.containsKey(claim)) {

     

       74
       74
       +
                 throw InvalidPayloadException("required claim '$claim' missing")

     

       75
       75
       +
               }

     

       76
       76
       +
             }

     

       77
       77
       +
           }

     

       78
       78
       +
       

     

       79
       79
       +
           options.audience?.let {

     

       80
       80
       +
             if (!claims.audience.contains(it)) {

     

       81
       81
       +
               throw InvalidPayloadException("audience mismatch")

     

       82
       82
       +
             }

     

       83
       83
       +
           }

     

       84
       84
       +
       

     

       85
       85
       +
           options.subject?.let {

     

       86
       86
       +
             if (claims.subject != it) {

     

       87
       87
       +
               throw InvalidPayloadException("subject mismatch")

     

       88
       88
       +
             }

     

       89
       89
       +
           }

     

       90
       90
       +
       

     

       91
       91
       +
           options.checkTolerance?.let {

     

       92
       92
       +
             val currentTime = options.currentDate ?: (System.currentTimeMillis() / 1000.0)

     

       93
       93
       +
             if (claims.issueTime.time / 1000.0 + it < currentTime) {

     

       94
       94
       +
               throw InvalidPayloadException("token expired")

     

       95
       95
       +
             }

     

       96
       96
       +
           }

     

       97
       97
       +
       

     

       98
       98
       +
           options.maxTokenAge?.let {

     

       99
       99
       +
             val currentTime = options.currentDate ?: (System.currentTimeMillis() / 1000.0)

     

       100
       100
       +
             if (claims.issueTime.time / 1000.0 + it < currentTime) {

     

       101
       101
       +
               throw InvalidPayloadException("token expired")

     

       102
       102
       +
             }

     

       103
       103
       +
           }

     

       104
       104
       +
       

     

       105
       105
       +
           options.issuer?.let {

     

       106
       106
       +
             if (claims.issuer != it) {

     

       107
       107
       +
               throw InvalidPayloadException("issuer mismatch")

     

       108
       108
       +
             }

     

       109
       109
       +
           }

     

       110
       110
       +
       

     

       111
       111
       +
           return VerifyResult().apply {

     

       112
       112
       +
             payload = jwt.payload.toString()

     

       113
       113
       +
             this.protectedHeader = protectedHeader

     

       114
       114
       +
           }

     

       115
       115
       +
         }

     

       116
       116
       +
       }

+64

android/src/main/java/expo/modules/atprotoauth/Records.kt

···

       1
       1
       +
       package expo.modules.atprotoauth

     

       2
       2
       +
       

     

       3
       3
       +
       import expo.modules.kotlin.records.Field

     

       4
       4
       +
       import expo.modules.kotlin.records.Record

     

       5
       5
       +
       

     

       6
       6
       +
       class EncodedJWK : Record {

     

       7
       7
       +
         @Field

     

       8
       8
       +
         var kty: String = ""

     

       9
       9
       +
       

     

       10
       10
       +
         @Field

     

       11
       11
       +
         var use: String = ""

     

       12
       12
       +
       

     

       13
       13
       +
         @Field

     

       14
       14
       +
         var crv: String = ""

     

       15
       15
       +
       

     

       16
       16
       +
         @Field

     

       17
       17
       +
         var kid: String = ""

     

       18
       18
       +
       

     

       19
       19
       +
         @Field

     

       20
       20
       +
         var x: String = ""

     

       21
       21
       +
       

     

       22
       22
       +
         @Field

     

       23
       23
       +
         var y: String = ""

     

       24
       24
       +
       

     

       25
       25
       +
         @Field

     

       26
       26
       +
         var d: String = ""

     

       27
       27
       +
       

     

       28
       28
       +
         @Field

     

       29
       29
       +
         var alg: String = ""

     

       30
       30
       +
       }

     

       31
       31
       +
       

     

       32
       32
       +
       class VerifyOptions : Record {

     

       33
       33
       +
         @Field

     

       34
       34
       +
         var audience: String? = null

     

       35
       35
       +
       

     

       36
       36
       +
         @Field

     

       37
       37
       +
         var checkTolerance: Double? = null

     

       38
       38
       +
       

     

       39
       39
       +
         @Field

     

       40
       40
       +
         var issuer: String? = null

     

       41
       41
       +
       

     

       42
       42
       +
         @Field

     

       43
       43
       +
         var maxTokenAge: Double? = null

     

       44
       44
       +
       

     

       45
       45
       +
         @Field

     

       46
       46
       +
         var subject: String? = null

     

       47
       47
       +
       

     

       48
       48
       +
         @Field

     

       49
       49
       +
         var typ: String? = null

     

       50
       50
       +
       

     

       51
       51
       +
         @Field

     

       52
       52
       +
         var currentDate: Double? = null

     

       53
       53
       +
       

     

       54
       54
       +
         @Field

     

       55
       55
       +
         var requiredClaims: Array<String>? = null

     

       56
       56
       +
       }

     

       57
       57
       +
       

     

       58
       58
       +
       class VerifyResult : Record {

     

       59
       59
       +
         @Field

     

       60
       60
       +
         var payload: String = ""

     

       61
       61
       +
       

     

       62
       62
       +
         @Field

     

       63
       63
       +
         var protectedHeader: Map<String, Any> = emptyMap()

     

       64
       64
       +
       }

+26 -35

example/App.tsx

···

       1
       1
        
       import React from 'react'

     

       2
       2
       -
       import { Text, View, StyleSheet, Button, Alert, TextInput } from 'react-native'

     

       2
       2
       +
       import {

     

       3
       3
       +
         Text,

     

       4
       4
       +
         View,

     

       5
       5
       +
         StyleSheet,

     

       6
       6
       +
         Button,

     

       7
       7
       +
         Alert,

     

       8
       8
       +
         TextInput,

     

       9
       9
       +
         Platform,

     

       10
       10
       +
       } from 'react-native'

     

       3
       11
        
       import {

     

       4
       12
        
         digest,

     

       5
       13
        
         getRandomValues,

     

       6
       14
        
         createJwt,

     

       7
       15
        
         generateJwk,

     

       8
       8
       -
         ReactNativeOAuthClient,

     

       16
       16
       +
         ExpoOAuthClient,

     

       9
       17
        
       } from 'expo-atproto-auth'

     

       10
       18
        
       import { OAuthSession } from '@atproto/oauth-client'

     

       11
       19
        
       import { Agent } from '@atproto/api'

     

       12
       12
       -
       import type { ReactNativeKey } from 'expo-atproto-auth'

     

       13
       13
       -
       import * as Browser from 'expo-web-browser'

     

       20
       20
       +
       import type { ExpoKey } from 'expo-atproto-auth'

     

       14
       21
        
       

     

       15
       15
       -
       const client = new ReactNativeOAuthClient({

     

       22
       22
       +
       const client = new ExpoOAuthClient({

     

       16
       23
        
         clientMetadata: {

     

       17
       24
        
           client_id: 'https://hailey.at/oauth-client-metadata.json',

     

       18
       25
        
           client_name: 'React Native OAuth Client Demo',

     
···

       32
       39
        
         const [values, setValues] = React.useState<Uint8Array>()

     

       33
       40
        
         const [sha, setSha] = React.useState<Uint8Array>()

     

       34
       41
        
         const [jwt, setJwt] = React.useState<string>()

     

       35
       35
       -
         const [privateJwk, setPrivateJwk] = React.useState<

     

       36
       36
       -
           ReactNativeKey | undefined

     

       37
       37
       -
         >()

     

       42
       42
       +
         const [privateJwk, setPrivateJwk] = React.useState<ExpoKey | undefined>()

     

       38
       43
        
         const [session, setSession] = React.useState<OAuthSession>()

     

       39
       44
        
         const [input, setInput] = React.useState<string>()

     

       40
       45
        
         const [agent, setAgent] = React.useState<Agent>()

     
···

       89
       94
        
             <Button

     

       90
       95
        
               title="Create JWK"

     

       91
       96
        
               onPress={() => {

     

       92
       92
       -
                 let newJwk: ReactNativeKey | undefined

     

       97
       97
       +
                 let newJwk: ExpoKey | undefined

     

       93
       98
        
                 try {

     

       94
       99
        
                   newJwk = generateJwk('ES256')

     

       95
       100
        
                 } catch (e: any) {

     
···

       109
       114
        
             <Button

     

       110
       115
        
               title="Open Sign In"

     

       111
       116
        
               onPress={async () => {

     

       112
       112
       -
                 let url: URL

     

       113
       113
       -
                 try {

     

       114
       114
       -
                   url = await client.authorize(input ?? '')

     

       115
       115
       -
                 } catch (e: any) {

     

       116
       116
       -
                   Alert.alert('Error', e.toString())

     

       117
       117
       -
                   return

     

       118
       118
       -
                 }

     

       119
       119
       -
                 const res = await Browser.openAuthSessionAsync(

     

       120
       120
       -
                   url.toString(),

     

       121
       121
       -
                   'at.hailey://auth/callback'

     

       122
       122
       -
                 )

     

       123
       123
       -
       

     

       124
       124
       -
                 if (res.type === 'success') {

     

       125
       125
       -
                   const resUrl = new URL(res.url)

     

       126
       126
       -
                   try {

     

       127
       127
       -
                     const params = new URLSearchParams(resUrl.hash.substring(1))

     

       128
       128
       -
                     const callbackRes = await client.callback(params)

     

       129
       129
       -
                     setSession(callbackRes.session)

     

       130
       130
       -
       

     

       131
       131
       -
                     const newAgent = new Agent(callbackRes.session)

     

       132
       132
       -
                     setAgent(newAgent)

     

       133
       133
       -
                   } catch (e: any) {

     

       134
       134
       -
                     Alert.alert('Error', e.toString())

     

       135
       135
       -
                   }

     

       117
       117
       +
                 const res = await client.signIn(input ?? '')

     

       118
       118
       +
                 if (res.status === 'success') {

     

       119
       119
       +
                   setSession(res.session)

     

       120
       120
       +
                   const newAgent = new Agent(res.session)

     

       121
       121
       +
                   setAgent(newAgent)

     

       122
       122
       +
                 } else if (res.status === 'error') {

     

       123
       123
       +
                   Alert.alert('Error', (res.error as any).toString())

     

       136
       124
        
                 } else {

     

       137
       137
       -
                   Alert.alert('Error', `Received non-success status: ${res.type}`)

     

       125
       125
       +
                   Alert.alert(

     

       126
       126
       +
                     'Error',

     

       127
       127
       +
                     `Received unknown WebResultType: ${res.status}`

     

       128
       128
       +
                   )

     

       138
       129
        
                 }

     

       139
       130
        
               }}

     

       140
       131
        
             />

     
···

       177
       168
        
               onPress={async () => {

     

       178
       169
        
                 try {

     

       179
       170
        
                   await agent?.post({

     

       180
       180
       -
                     text: 'Test post from Expo Atproto Auth example',

     

       171
       171
       +
                     text: `Test post from Expo Atproto Auth example using platform ${Platform.OS}`,

     

       181
       172
        
                   })

     

       182
       173
        
                 } catch (e: any) {

     

       183
       174
        
                   Alert.alert('Error', e.toString())

+2 -2

example/ios/expoatprotoauthexample.xcodeproj/project.pbxproj

···

       351
       351
        
       				);

     

       352
       352
        
       				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_DEBUG";

     

       353
       353
        
       				PRODUCT_BUNDLE_IDENTIFIER = expo.modules.atprotoauth.example;

     

       354
       354
       -
       				PRODUCT_NAME = expoatprotoauthexample;

     

       354
       354
       +
       				PRODUCT_NAME = "expoatprotoauthexample";

     

       355
       355
        
       				SWIFT_OBJC_BRIDGING_HEADER = "expoatprotoauthexample/expoatprotoauthexample-Bridging-Header.h";

     

       356
       356
        
       				SWIFT_OPTIMIZATION_LEVEL = "-Onone";

     

       357
       357
        
       				SWIFT_VERSION = 5.0;

     
···

       382
       382
        
       				);

     

       383
       383
        
       				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_RELEASE";

     

       384
       384
        
       				PRODUCT_BUNDLE_IDENTIFIER = expo.modules.atprotoauth.example;

     

       385
       385
       -
       				PRODUCT_NAME = expoatprotoauthexample;

     

       385
       385
       +
       				PRODUCT_NAME = "expoatprotoauthexample";

     

       386
       386
        
       				SWIFT_OBJC_BRIDGING_HEADER = "expoatprotoauthexample/expoatprotoauthexample-Bridging-Header.h";

     

       387
       387
        
       				SWIFT_VERSION = 5.0;

     

       388
       388
        
       				TARGETED_DEVICE_FAMILY = "1,2";

+3 -3

ios/Crypto.swift

···

       13
       13
        
           return Data(bytes)

     

       14
       14
        
         }

     

       15
       15
        
       

     

       16
       16
       -
         static func generateJwk() -> JWK {

     

       16
       16
       +
         static func generateJwk() -> EncodedJWK {

     

       17
       17
        
           let kid = UUID().uuidString

     

       18
       18
        
       

     

       19
       19
        
           let privKey = P256.Signing.PrivateKey()

     
···

       23
       23
        
           let y = pubKey.x963Representation[33...].base64URLEncodedString()

     

       24
       24
        
           let d = privKey.rawRepresentation.base64URLEncodedString()

     

       25
       25
        
       

     

       26
       26
       -
           let jwk = JWK()

     

       26
       26
       +
           let jwk = EncodedJWK()

     

       27
       27
        
           jwk.kty = "EC"

     

       28
       28
        
           jwk.use = "sig"

     

       29
       29
        
           jwk.crv = "P-256"

     
···

       36
       36
        
           return jwk

     

       37
       37
        
         }

     

       38
       38
        
       

     

       39
       39
       -
         static func importJwk(x: String, y: String, d: String) throws -> SecKey {

     

       39
       39
       +
         static func decodeJwk(x: String, y: String, d: String) throws -> SecKey {

     

       40
       40
        
           func base64UrlDecode(_ string: String) -> Data? {

     

       41
       41
        
             var base64 = string

     

       42
       42
        
               .replacingOccurrences(of: "-", with: "+")

+7 -13

ios/ExpoAtprotoAuthModule.swift

···

       23
       23
        
             return CryptoUtil.getRandomValues(byteLength: byteLength)

     

       24
       24
        
           }

     

       25
       25
        
       

     

       26
       26
       -
           Function("generatePrivateJwk") { (algo: String) throws -> JWK in

     

       26
       26
       +
           Function("generatePrivateJwk") { (algo: String) throws -> EncodedJWK in

     

       27
       27
        
             if algo != "ES256" {

     

       28
       28
        
               throw ExpoAtprotoAuthError.unsupportedAlgorithm(algo)

     

       29
       29
        
             }

     

       30
       30
        
             return CryptoUtil.generateJwk()

     

       31
       31
        
           }

     

       32
       32
        
       

     

       33
       33
       -
           Function("createJwt") { (header: String, payload: String, jwk: JWK) throws -> String in

     

       34
       34
       -
             let key = try CryptoUtil.importJwk(x: jwk.x, y: jwk.y, d: jwk.d)

     

       35
       35
       -
             let jwt = try JoseUtil.createJwt(header: header, payload: payload, jwk: key)

     

       33
       33
       +
           Function("createJwt") { (header: String, payload: String, jwk: EncodedJWK) throws -> String in

     

       34
       34
       +
             let jwk = try CryptoUtil.decodeJwk(x: jwk.x, y: jwk.y, d: jwk.d)

     

       35
       35
       +
             let jwt = try JoseUtil.createJwt(header: header, payload: payload, jwk: jwk)

     

       36
       36
        
             return jwt

     

       37
       37
        
           }

     

       38
       38
        
       

     

       39
       39
       -
           Function("verifyJwt") { (token: String, jwk: JWK, options: VerifyOptions) throws -> VerifyResponse in

     

       40
       40
       -
             let key = try CryptoUtil.importJwk(x: jwk.x, y: jwk.y, d: jwk.d)

     

       41
       41
       -
             let res = try JoseUtil.verifyJwt(token: token, jwk: key, options: options)

     

       39
       39
       +
           Function("verifyJwt") { (token: String, jwk: EncodedJWK, options: VerifyOptions) throws -> VerifyResult in

     

       40
       40
       +
             let jwk = try CryptoUtil.decodeJwk(x: jwk.x, y: jwk.y, d: jwk.d)

     

       41
       41
       +
             let res = try JoseUtil.verifyJwt(token: token, jwk: jwk, options: options)

     

       42
       42
        
             return res

     

       43
       43
       -
           }

     

       44
       44
       -
       

     

       45
       45
       -
           AsyncFunction("setValueAsync") { (value: String) in

     

       46
       46
       -
             self.sendEvent("onChange", [

     

       47
       47
       -
               "value": value

     

       48
       48
       -
             ])

     

       49
       43
        
           }

     

       50
       44
        
         }

     

       51
       45
        
       }

+2 -2

ios/Jose.swift

···

       35
       35
        
           return jws.compactSerializedString

     

       36
       36
        
         }

     

       37
       37
        
       

     

       38
       38
       -
         static func verifyJwt(token: String, jwk: SecKey, options: VerifyOptions) throws -> VerifyResponse {

     

       38
       38
       +
         static func verifyJwt(token: String, jwk: SecKey, options: VerifyOptions) throws -> VerifyResult {

     

       39
       39
        
           guard let jws = try? JWS(compactSerialization: token),

     

       40
       40
        
                 let verifier = Verifier(verifyingAlgorithm: .ES256, key: jwk),

     

       41
       41
        
                 let validation = try? jws.validate(using: verifier)

     
···

       128
       128
        
             }

     

       129
       129
        
           }

     

       130
       130
        
       

     

       131
       131
       -
           let res = VerifyResponse()

     

       131
       131
       +
           let res = VerifyResult()

     

       132
       132
        
           res.payload = payload

     

       133
       133
        
           res.protectedHeader = protectedHeader

     

       134
       134

+2 -2

ios/Records.swift

···

       1
       1
        
       import ExpoModulesCore

     

       2
       2
        
       

     

       3
       3
       -
       struct JWK: Record {

     

       3
       3
       +
       struct EncodedJWK: Record {

     

       4
       4
        
         @Field

     

       5
       5
        
         var kty: String

     

       6
       6
        
       

     
···

       52
       52
        
         var requiredClaims: [String]?

     

       53
       53
        
       }

     

       54
       54
        
       

     

       55
       55
       -
       struct VerifyResponse: Record {

     

       55
       55
       +
       struct VerifyResult: Record {

     

       56
       56
        
         @Field

     

       57
       57
        
         var payload: String

     

       58
       58

+3 -1

package.json

···

       8
       8
        
           "build": "expo-module build",

     

       9
       9
        
           "clean": "expo-module clean",

     

       10
       10
        
           "typecheck": "tsc",

     

       11
       11
       -
           "lint": "eslint \"**/*.{js,ts,tsx}\"",

     

       11
       11
       +
           "lint": "eslint \"**/*.{ts,tsx}\"",

     

       12
       12
        
           "test": "expo-module test",

     

       13
       13
        
           "prepare": "expo-module prepare",

     

       14
       14
        
           "prepublishOnly": "expo-module prepublishOnly",

     
···

       43
       43
        
           "eslint-plugin-prettier": "^5.2.3",

     

       44
       44
        
           "expo": "~53.0.0",

     

       45
       45
        
           "expo-module-scripts": "^4.1.9",

     

       46
       46
       +
           "expo-web-browser": "^14.2.0",

     

       46
       47
        
           "jest": "^29.7.0",

     

       47
       48
        
           "patch-package": "^8.0.0",

     

       48
       49
        
           "postinstall-postinstall": "^2.1.0",

     
···

       53
       54
        
         "peerDependencies": {

     

       54
       55
        
           "@atproto/oauth-client": "*",

     

       55
       56
        
           "expo": "*",

     

       57
       57
       +
           "expo-web-browser": "*",

     

       56
       58
        
           "react": "*",

     

       57
       59
        
           "react-native": "*",

     

       58
       60
        
           "react-native-mmkv": "*"

+1 -1

src/ExpoAtprotoAuth.types.ts

···

       23
       23
        
         requiredClaims?: string[]

     

       24
       24
        
       }

     

       25
       25
        
       

     

       26
       26
       -
       export type VerifyResponse = {

     

       26
       26
       +
       export type VerifyResult = {

     

       27
       27
        
         payload: string

     

       28
       28
        
         protectedHeader: JwtHeader

     

       29
       29
        
       }

+132

src/expo-key.ts

···

       1
       1
       +
       import {

     

       2
       2
       +
         type Key,

     

       3
       3
       +
         type JwtHeader,

     

       4
       4
       +
         type JwtPayload,

     

       5
       5
       +
         type SignedJwt,

     

       6
       6
       +
         type VerifyOptions,

     

       7
       7
       +
         type VerifyResult,

     

       8
       8
       +
       } from '@atproto/oauth-client'

     

       9
       9
       +
       import type { JWK } from './ExpoAtprotoAuth.types'

     

       10
       10
       +
       import { default as NativeModule } from './ExpoAtprotoAuthModule'

     

       11
       11
       +
       

     

       12
       12
       +
       export function getRandomValues(byteLength: number): Uint8Array {

     

       13
       13
       +
         return NativeModule.getRandomValues(byteLength)

     

       14
       14
       +
       }

     

       15
       15
       +
       

     

       16
       16
       +
       export function digest(data: Uint8Array, algorithim: string): Uint8Array {

     

       17
       17
       +
         return NativeModule.digest(data, algorithim)

     

       18
       18
       +
       }

     

       19
       19
       +
       

     

       20
       20
       +
       export function isECKey(jwk: any): jwk is JWK {

     

       21
       21
       +
         return jwk?.kty === 'EC' && jwk.crv && jwk.y

     

       22
       22
       +
       }

     

       23
       23
       +
       

     

       24
       24
       +
       export function createJwt(

     

       25
       25
       +
         header: string,

     

       26
       26
       +
         payload: string,

     

       27
       27
       +
         key: ExpoKey

     

       28
       28
       +
       ): string {

     

       29
       29
       +
         if (!key.privateJwk || !isECKey(key.privateJwk)) {

     

       30
       30
       +
           throw new Error('Invalid key')

     

       31
       31
       +
         }

     

       32
       32
       +
         return NativeModule.createJwt(header, payload, key.privateJwk)

     

       33
       33
       +
       }

     

       34
       34
       +
       

     

       35
       35
       +
       export function verifyJwt(

     

       36
       36
       +
         token: string,

     

       37
       37
       +
         jwk: JWK,

     

       38
       38
       +
         options: VerifyOptions

     

       39
       39
       +
       ): VerifyResult {

     

       40
       40
       +
         return NativeModule.verifyJwt(token, jwk, options)

     

       41
       41
       +
       }

     

       42
       42
       +
       

     

       43
       43
       +
       // @ts-expect-error

     

       44
       44
       +
       export class ExpoKey implements Key {

     

       45
       45
       +
         #jwk: Readonly<JWK>

     

       46
       46
       +
       

     

       47
       47
       +
         constructor(jwk: Readonly<JWK>) {

     

       48
       48
       +
           this.#jwk = jwk

     

       49
       49
       +
           if (!isECKey(jwk)) {

     

       50
       50
       +
             throw new Error('Invalid key type')

     

       51
       51
       +
           }

     

       52
       52
       +
           if (!jwk.use) {

     

       53
       53
       +
             throw new Error(`Missing "use" parameter value`)

     

       54
       54
       +
           }

     

       55
       55
       +
         }

     

       56
       56
       +
       

     

       57
       57
       +
         get jwk(): Readonly<JWK> {

     

       58
       58
       +
           return this.#jwk

     

       59
       59
       +
         }

     

       60
       60
       +
       

     

       61
       61
       +
         get isPrivate() {

     

       62
       62
       +
           return this.jwk.d !== undefined

     

       63
       63
       +
         }

     

       64
       64
       +
       

     

       65
       65
       +
         get privateJwk(): JWK {

     

       66
       66
       +
           return this.jwk

     

       67
       67
       +
         }

     

       68
       68
       +
       

     

       69
       69
       +
         get publicJwk() {

     

       70
       70
       +
           if (this.isSymetric) return undefined

     

       71
       71
       +
           // eslint-disable-next-line @typescript-eslint/no-unused-vars

     

       72
       72
       +
           const { d, ...publicKey } = this.jwk

     

       73
       73
       +
           return publicKey as Readonly<JWK & { d?: never }>

     

       74
       74
       +
         }

     

       75
       75
       +
       

     

       76
       76
       +
         get use() {

     

       77
       77
       +
           return this.jwk.use as NonNullable<'sig' | 'enc' | undefined>

     

       78
       78
       +
         }

     

       79
       79
       +
       

     

       80
       80
       +
         get alg() {

     

       81
       81
       +
           return this.jwk.alg

     

       82
       82
       +
         }

     

       83
       83
       +
       

     

       84
       84
       +
         get kid() {

     

       85
       85
       +
           return this.jwk.kid

     

       86
       86
       +
         }

     

       87
       87
       +
       

     

       88
       88
       +
         get crv() {

     

       89
       89
       +
           return this.jwk.crv

     

       90
       90
       +
         }

     

       91
       91
       +
       

     

       92
       92
       +
         get algorithms() {

     

       93
       93
       +
           return [this.jwk.alg]

     

       94
       94
       +
         }

     

       95
       95
       +
       

     

       96
       96
       +
         get bareJwk() {

     

       97
       97
       +
           return {

     

       98
       98
       +
             kty: this.jwk.kty,

     

       99
       99
       +
             crv: this.jwk.crv,

     

       100
       100
       +
             x: this.jwk.x,

     

       101
       101
       +
             y: this.jwk.y,

     

       102
       102
       +
           }

     

       103
       103
       +
         }

     

       104
       104
       +
       

     

       105
       105
       +
         get isSymetric() {

     

       106
       106
       +
           return this.jwk.kty === 'oct' && 'k' in this.jwk && this.jwk.k !== undefined

     

       107
       107
       +
         }

     

       108
       108
       +
       

     

       109
       109
       +
         async createJwt(header: JwtHeader, payload: JwtPayload): Promise<SignedJwt> {

     

       110
       110
       +
           return createJwt(

     

       111
       111
       +
             JSON.stringify(header),

     

       112
       112
       +
             JSON.stringify(payload),

     

       113
       113
       +
             this

     

       114
       114
       +
           ) as '${string}.${string}.${string}'

     

       115
       115
       +
         }

     

       116
       116
       +
       

     

       117
       117
       +
         async verifyJwt<C extends string = never>(

     

       118
       118
       +
           token: SignedJwt,

     

       119
       119
       +
           options?: VerifyOptions<C>

     

       120
       120
       +
         ): Promise<VerifyResult<C>> {

     

       121
       121
       +
           return verifyJwt(

     

       122
       122
       +
             token,

     

       123
       123
       +
             this.jwk,

     

       124
       124
       +
             (options ?? {}) as VerifyOptions

     

       125
       125
       +
           ) as VerifyResult<C>

     

       126
       126
       +
         }

     

       127
       127
       +
       }

     

       128
       128
       +
       

     

       129
       129
       +
       export function generateJwk(algoritihim: string): ExpoKey {

     

       130
       130
       +
         const privJwk = NativeModule.generatePrivateJwk(algoritihim)

     

       131
       131
       +
         return new ExpoKey(privJwk)

     

       132
       132
       +
       }

+103

src/expo-oauth-client.ts

···

       1
       1
       +
       import {

     

       2
       2
       +
         type Fetch,

     

       3
       3
       +
         type OAuthClientMetadataInput,

     

       4
       4
       +
         type OAuthClientOptions,

     

       5
       5
       +
         type OAuthResponseMode,

     

       6
       6
       +
         atprotoLoopbackClientMetadata,

     

       7
       7
       +
         OAuthClient,

     

       8
       8
       +
         OAuthSession,

     

       9
       9
       +
       } from '@atproto/oauth-client'

     

       10
       10
       +
       import { ExpoRuntimeImplementation } from './expo-runtime-implementation'

     

       11
       11
       +
       import { ExpoOAuthDatabase } from './expo-oauth-database'

     

       12
       12
       +
       import { openAuthSessionAsync, WebBrowserResultType } from 'expo-web-browser'

     

       13
       13
       +
       

     

       14
       14
       +
       export type Simplify<T> = { [K in keyof T]: T[K] } & NonNullable<unknown>

     

       15
       15
       +
       

     

       16
       16
       +
       export type ExpoOAuthClientOptions = Simplify<

     

       17
       17
       +
         {

     

       18
       18
       +
           clientMetadata?: Readonly<OAuthClientMetadataInput>

     

       19
       19
       +
           responseMode?: Exclude<OAuthResponseMode, 'form_post'>

     

       20
       20
       +
           fetch?: Fetch

     

       21
       21
       +
         } & Omit<

     

       22
       22
       +
           OAuthClientOptions,

     

       23
       23
       +
           | 'clientMetadata'

     

       24
       24
       +
           | 'responseMode'

     

       25
       25
       +
           | 'keyset'

     

       26
       26
       +
           | 'fetch'

     

       27
       27
       +
           | 'runtimeImplementation'

     

       28
       28
       +
           | 'sessionStore'

     

       29
       29
       +
           | 'stateStore'

     

       30
       30
       +
           | 'didCache'

     

       31
       31
       +
           | 'handleCache'

     

       32
       32
       +
           | 'dpopNonceCache'

     

       33
       33
       +
           | 'authorizationServerMetadataCache'

     

       34
       34
       +
           | 'protectedResourceMetadataCache'

     

       35
       35
       +
         >

     

       36
       36
       +
       >

     

       37
       37
       +
       

     

       38
       38
       +
       export class ExpoOAuthClient extends OAuthClient {

     

       39
       39
       +
         constructor({

     

       40
       40
       +
           responseMode = 'fragment',

     

       41
       41
       +
           ...options

     

       42
       42
       +
         }: ExpoOAuthClientOptions) {

     

       43
       43
       +
           const database = new ExpoOAuthDatabase()

     

       44
       44
       +
       

     

       45
       45
       +
           if (!['query', 'fragment'].includes(responseMode)) {

     

       46
       46
       +
             throw new TypeError(`Invalid response mode: ${responseMode}`)

     

       47
       47
       +
           }

     

       48
       48
       +
       

     

       49
       49
       +
           if (!options.clientMetadata) {

     

       50
       50
       +
             throw new TypeError(`No client metadata provided`)

     

       51
       51
       +
           }

     

       52
       52
       +
       

     

       53
       53
       +
           super({

     

       54
       54
       +
             ...options,

     

       55
       55
       +
             clientMetadata:

     

       56
       56
       +
               options.clientMetadata ?? atprotoLoopbackClientMetadata('localhost'), // HACK: this fixes a type error for now, look into it later

     

       57
       57
       +
             responseMode,

     

       58
       58
       +
             keyset: undefined,

     

       59
       59
       +
             runtimeImplementation: new ExpoRuntimeImplementation(),

     

       60
       60
       +
             sessionStore: database.getSessionStore(),

     

       61
       61
       +
             stateStore: database.getStateStore(),

     

       62
       62
       +
             didCache: database.getDidCache(),

     

       63
       63
       +
             handleCache: database.getHandleCache(),

     

       64
       64
       +
             dpopNonceCache: database.getDpopNonceCache(),

     

       65
       65
       +
             authorizationServerMetadataCache:

     

       66
       66
       +
               database.getAuthorizationServerMetadataCache(),

     

       67
       67
       +
             protectedResourceMetadataCache:

     

       68
       68
       +
               database.getProtectedResourceMetadataCache(),

     

       69
       69
       +
           })

     

       70
       70
       +
         }

     

       71
       71
       +
       

     

       72
       72
       +
         async signIn(

     

       73
       73
       +
           input: string

     

       74
       74
       +
         ): Promise<

     

       75
       75
       +
           | { status: WebBrowserResultType }

     

       76
       76
       +
           | { status: 'error'; error: unknown }

     

       77
       77
       +
           | { status: 'success'; session: OAuthSession }

     

       78
       78
       +
         > {

     

       79
       79
       +
           let url: URL

     

       80
       80
       +
           try {

     

       81
       81
       +
             url = await this.authorize(input)

     

       82
       82
       +
           } catch (e: unknown) {

     

       83
       83
       +
             return { status: 'error', error: e }

     

       84
       84
       +
           }

     

       85
       85
       +
       

     

       86
       86
       +
           const res = await openAuthSessionAsync(

     

       87
       87
       +
             url.toString(),

     

       88
       88
       +
             this.clientMetadata.redirect_uris[0],

     

       89
       89
       +
             {

     

       90
       90
       +
               createTask: false,

     

       91
       91
       +
             }

     

       92
       92
       +
           )

     

       93
       93
       +
       

     

       94
       94
       +
           if (res.type === 'success') {

     

       95
       95
       +
             const resUrl = new URL(res.url)

     

       96
       96
       +
             const params = new URLSearchParams(resUrl.hash.substring(1))

     

       97
       97
       +
             const callbackRes = await this.callback(params)

     

       98
       98
       +
             return { status: 'success', session: callbackRes.session }

     

       99
       99
       +
           } else {

     

       100
       100
       +
             return { status: res.type }

     

       101
       101
       +
           }

     

       102
       102
       +
         }

     

       103
       103
       +
       }

+253

src/expo-oauth-database.ts

···

       1
       1
       +
       import type {

     

       2
       2
       +
         DidDocument,

     

       3
       3
       +
         InternalStateData,

     

       4
       4
       +
         OAuthAuthorizationServerMetadata,

     

       5
       5
       +
         OAuthProtectedResourceMetadata,

     

       6
       6
       +
         ResolvedHandle,

     

       7
       7
       +
         Session,

     

       8
       8
       +
         TokenSet,

     

       9
       9
       +
         Key,

     

       10
       10
       +
       } from '@atproto/oauth-client'

     

       11
       11
       +
       import { type SimpleStore, type Value } from '@atproto-labs/simple-store'

     

       12
       12
       +
       import { MMKV } from 'react-native-mmkv'

     

       13
       13
       +
       import { JWK } from './ExpoAtprotoAuth.types'

     

       14
       14
       +
       import { ExpoKey } from './expo-key'

     

       15
       15
       +
       

     

       16
       16
       +
       type Item<V> = {

     

       17
       17
       +
         value: V

     

       18
       18
       +
         expiresAt: null | number

     

       19
       19
       +
       }

     

       20
       20
       +
       

     

       21
       21
       +
       type CryptoKeyPair = {

     

       22
       22
       +
         publicKey: JWK

     

       23
       23
       +
         privateKey: JWK

     

       24
       24
       +
       }

     

       25
       25
       +
       

     

       26
       26
       +
       type EncodedKey = {

     

       27
       27
       +
         keyId: string

     

       28
       28
       +
         keyPair: CryptoKeyPair

     

       29
       29
       +
       }

     

       30
       30
       +
       

     

       31
       31
       +
       function encodeKey(key: Key): EncodedKey {

     

       32
       32
       +
         if (!key.privateJwk || !key.publicJwk || !key.kid) {

     

       33
       33
       +
           throw new Error('Invalid key object')

     

       34
       34
       +
         }

     

       35
       35
       +
       

     

       36
       36
       +
         const encodedKey = {

     

       37
       37
       +
           keyId: key.kid,

     

       38
       38
       +
           keyPair: {

     

       39
       39
       +
             publicKey: key.publicJwk,

     

       40
       40
       +
             privateKey: key.privateJwk,

     

       41
       41
       +
           },

     

       42
       42
       +
         }

     

       43
       43
       +
       

     

       44
       44
       +
         // @ts-expect-error

     

       45
       45
       +
         return encodedKey

     

       46
       46
       +
       }

     

       47
       47
       +
       

     

       48
       48
       +
       async function decodeKey(encoded: EncodedKey): Promise<ExpoKey> {

     

       49
       49
       +
         return new ExpoKey(encoded.keyPair.privateKey)

     

       50
       50
       +
       }

     

       51
       51
       +
       

     

       52
       52
       +
       export type Schema = {

     

       53
       53
       +
         state: Item<{

     

       54
       54
       +
           dpopKey: EncodedKey

     

       55
       55
       +
           iss: string

     

       56
       56
       +
           verifier?: string

     

       57
       57
       +
           appState?: string

     

       58
       58
       +
         }>

     

       59
       59
       +
         session: Item<{

     

       60
       60
       +
           dpopKey: EncodedKey

     

       61
       61
       +
           tokenSet: TokenSet

     

       62
       62
       +
         }>

     

       63
       63
       +
         didCache: Item<DidDocument>

     

       64
       64
       +
         dpopNonceCache: Item<string>

     

       65
       65
       +
         handleCache: Item<ResolvedHandle>

     

       66
       66
       +
         authorizationServerMetadataCache: Item<OAuthAuthorizationServerMetadata>

     

       67
       67
       +
         protectedResourceMetadataCache: Item<OAuthProtectedResourceMetadata>

     

       68
       68
       +
       }

     

       69
       69
       +
       

     

       70
       70
       +
       export type DatabaseStore<V extends Value> = SimpleStore<string, V> & {

     

       71
       71
       +
         getKeys: () => Promise<string[]>

     

       72
       72
       +
       }

     

       73
       73
       +
       

     

       74
       74
       +
       const STORES = [

     

       75
       75
       +
         'state',

     

       76
       76
       +
         'session',

     

       77
       77
       +
         'didCache',

     

       78
       78
       +
         'dpopNonceCache',

     

       79
       79
       +
         'handleCache',

     

       80
       80
       +
         'authorizationServerMetadataCaache',

     

       81
       81
       +
         'protectedResourceMetadataCache',

     

       82
       82
       +
       ]

     

       83
       83
       +
       

     

       84
       84
       +
       export type ExpoOAuthDatabaseOptions = {

     

       85
       85
       +
         name?: string

     

       86
       86
       +
         durability?: 'strict' | 'relaxed'

     

       87
       87
       +
         cleanupInterval?: number

     

       88
       88
       +
       }

     

       89
       89
       +
       

     

       90
       90
       +
       export class ExpoOAuthDatabase {

     

       91
       91
       +
         #cleanupInterval?: ReturnType<typeof setInterval>

     

       92
       92
       +
         #mmkv?: MMKV

     

       93
       93
       +
       

     

       94
       94
       +
         constructor(options?: ExpoOAuthDatabaseOptions) {

     

       95
       95
       +
           this.#cleanupInterval = setInterval(() => {

     

       96
       96
       +
             this.cleanup()

     

       97
       97
       +
           }, options?.cleanupInterval ?? 30e3)

     

       98
       98
       +
           this.#mmkv = new MMKV({ id: 'react-native-oauth-client' })

     

       99
       99
       +
         }

     

       100
       100
       +
       

     

       101
       101
       +
         delete = async (key: string) => {

     

       102
       102
       +
           this.#mmkv?.delete(key)

     

       103
       103
       +
           this.#mmkv?.delete(`${key}.expiresAt`)

     

       104
       104
       +
         }

     

       105
       105
       +
       

     

       106
       106
       +
         protected createStore<N extends keyof Schema, V extends Value>(

     

       107
       107
       +
           name: N,

     

       108
       108
       +
           {

     

       109
       109
       +
             encode,

     

       110
       110
       +
             decode,

     

       111
       111
       +
             expiresAt,

     

       112
       112
       +
           }: {

     

       113
       113
       +
             encode: (value: V) => Schema[N]['value'] | PromiseLike<Schema[N]['value']>

     

       114
       114
       +
             decode: (encoded: Schema[N]['value']) => V | PromiseLike<V>

     

       115
       115
       +
             expiresAt: (value: V) => null | number

     

       116
       116
       +
           }

     

       117
       117
       +
         ): DatabaseStore<V> {

     

       118
       118
       +
           return {

     

       119
       119
       +
             get: async (key) => {

     

       120
       120
       +
               const item = this.#mmkv?.getString(`${name}.${key}`)

     

       121
       121
       +
       

     

       122
       122
       +
               if (item === undefined) return undefined

     

       123
       123
       +
       

     

       124
       124
       +
               const storedExpiresAt = this.#mmkv?.getNumber(

     

       125
       125
       +
                 `${name}.${key}.expiresAt`

     

       126
       126
       +
               )

     

       127
       127
       +
               if (storedExpiresAt && storedExpiresAt < Date.now()) {

     

       128
       128
       +
                 await this.delete(`${name}.${key}`)

     

       129
       129
       +
                 return undefined

     

       130
       130
       +
               }

     

       131
       131
       +
       

     

       132
       132
       +
               const res = decode(JSON.parse(item))

     

       133
       133
       +
               return res

     

       134
       134
       +
             },

     

       135
       135
       +
       

     

       136
       136
       +
             getKeys: async () => {

     

       137
       137
       +
               const keys = this.#mmkv?.getAllKeys() ?? []

     

       138
       138
       +
               return keys.filter((key) => key.startsWith(`${name}.`))

     

       139
       139
       +
             },

     

       140
       140
       +
       

     

       141
       141
       +
             set: async (key, value) => {

     

       142
       142
       +
               let encoded = await encode(value)

     

       143
       143
       +
               encoded = JSON.stringify(encoded)

     

       144
       144
       +
       

     

       145
       145
       +
               const _expiresAt = expiresAt(value)

     

       146
       146
       +
       

     

       147
       147
       +
               this.#mmkv?.set(`${name}.${key}`, encoded)

     

       148
       148
       +
               if (_expiresAt) {

     

       149
       149
       +
                 this.#mmkv?.set(`${name}.${key}.expiresAt`, _expiresAt)

     

       150
       150
       +
               }

     

       151
       151
       +
             },

     

       152
       152
       +
             del: async (key) => {

     

       153
       153
       +
               await this.delete(`${name}.${key}`)

     

       154
       154
       +
             },

     

       155
       155
       +
           }

     

       156
       156
       +
         }

     

       157
       157
       +
       

     

       158
       158
       +
         getSessionStore(): DatabaseStore<Session> {

     

       159
       159
       +
           return this.createStore('session', {

     

       160
       160
       +
             expiresAt: ({ tokenSet }) =>

     

       161
       161
       +
               tokenSet.refresh_token || tokenSet.expires_at == null

     

       162
       162
       +
                 ? null

     

       163
       163
       +
                 : new Date(tokenSet.expires_at).valueOf(),

     

       164
       164
       +
             encode: ({ dpopKey, ...session }) => ({

     

       165
       165
       +
               ...session,

     

       166
       166
       +
               dpopKey: encodeKey(dpopKey),

     

       167
       167
       +
             }),

     

       168
       168
       +
             // @ts-expect-error

     

       169
       169
       +
             decode: async ({ dpopKey, ...encoded }) => ({

     

       170
       170
       +
               ...encoded,

     

       171
       171
       +
               dpopKey: await decodeKey(dpopKey),

     

       172
       172
       +
             }),

     

       173
       173
       +
           })

     

       174
       174
       +
         }

     

       175
       175
       +
       

     

       176
       176
       +
         getStateStore(): DatabaseStore<InternalStateData> {

     

       177
       177
       +
           return this.createStore('state', {

     

       178
       178
       +
             expiresAt: (_value) => Date.now() + 10 * 60e3,

     

       179
       179
       +
             encode: ({ dpopKey, ...session }) => ({

     

       180
       180
       +
               ...session,

     

       181
       181
       +
               dpopKey: encodeKey(dpopKey),

     

       182
       182
       +
             }),

     

       183
       183
       +
             // @ts-expect-error

     

       184
       184
       +
             decode: async ({ dpopKey, ...encoded }) => ({

     

       185
       185
       +
               ...encoded,

     

       186
       186
       +
               dpopKey: await decodeKey(dpopKey),

     

       187
       187
       +
             }),

     

       188
       188
       +
           })

     

       189
       189
       +
         }

     

       190
       190
       +
       

     

       191
       191
       +
         getDpopNonceCache(): undefined | DatabaseStore<string> {

     

       192
       192
       +
           return this.createStore('dpopNonceCache', {

     

       193
       193
       +
             expiresAt: (_value) => Date.now() + 600e3,

     

       194
       194
       +
             encode: (value) => value,

     

       195
       195
       +
             decode: (encoded) => encoded,

     

       196
       196
       +
           })

     

       197
       197
       +
         }

     

       198
       198
       +
       

     

       199
       199
       +
         getDidCache(): undefined | DatabaseStore<DidDocument> {

     

       200
       200
       +
           return this.createStore('didCache', {

     

       201
       201
       +
             expiresAt: (_value) => Date.now() + 60e3,

     

       202
       202
       +
             encode: (value) => value,

     

       203
       203
       +
             decode: (encoded) => encoded,

     

       204
       204
       +
           })

     

       205
       205
       +
         }

     

       206
       206
       +
       

     

       207
       207
       +
         getHandleCache(): undefined | DatabaseStore<ResolvedHandle> {

     

       208
       208
       +
           return this.createStore('handleCache', {

     

       209
       209
       +
             expiresAt: (_value) => Date.now() + 60e3,

     

       210
       210
       +
             encode: (value) => value,

     

       211
       211
       +
             decode: (encoded) => encoded,

     

       212
       212
       +
           })

     

       213
       213
       +
         }

     

       214
       214
       +
       

     

       215
       215
       +
         getAuthorizationServerMetadataCache():

     

       216
       216
       +
           | undefined

     

       217
       217
       +
           | DatabaseStore<OAuthAuthorizationServerMetadata> {

     

       218
       218
       +
           return this.createStore('authorizationServerMetadataCache', {

     

       219
       219
       +
             expiresAt: (_value) => Date.now() + 60e3,

     

       220
       220
       +
             encode: (value) => value,

     

       221
       221
       +
             decode: (encoded) => encoded,

     

       222
       222
       +
           })

     

       223
       223
       +
         }

     

       224
       224
       +
       

     

       225
       225
       +
         getProtectedResourceMetadataCache():

     

       226
       226
       +
           | undefined

     

       227
       227
       +
           | DatabaseStore<OAuthProtectedResourceMetadata> {

     

       228
       228
       +
           return this.createStore('protectedResourceMetadataCache', {

     

       229
       229
       +
             expiresAt: (_value) => Date.now() + 60e3,

     

       230
       230
       +
             encode: (value) => value,

     

       231
       231
       +
             decode: (encoded) => encoded,

     

       232
       232
       +
           })

     

       233
       233
       +
         }

     

       234
       234
       +
       

     

       235
       235
       +
         async cleanup() {

     

       236
       236
       +
           for (const name of STORES) {

     

       237
       237
       +
             const keys = this.#mmkv?.getAllKeys() ?? []

     

       238
       238
       +
             for (const key of keys) {

     

       239
       239
       +
               if (key.startsWith(`${name}.`)) {

     

       240
       240
       +
                 const expiresAt = this.#mmkv?.getNumber(`${name}.${key}.expiresAt`)

     

       241
       241
       +
                 if (expiresAt && Number(expiresAt) < Date.now()) {

     

       242
       242
       +
                   this.#mmkv?.delete(key)

     

       243
       243
       +
                   this.#mmkv?.delete(`${name}.${key}.expiresAt`)

     

       244
       244
       +
                 }

     

       245
       245
       +
               }

     

       246
       246
       +
             }

     

       247
       247
       +
           }

     

       248
       248
       +
         }

     

       249
       249
       +
       

     

       250
       250
       +
         async [Symbol.asyncDispose]() {

     

       251
       251
       +
           clearInterval(this.#cleanupInterval)

     

       252
       252
       +
         }

     

       253
       253
       +
       }

+28

src/expo-runtime-implementation.ts

···

       1
       1
       +
       import type { Key, RuntimeImplementation } from '@atproto/oauth-client'

     

       2
       2
       +
       import { default as NativeModule } from './ExpoAtprotoAuthModule'

     

       3
       3
       +
       import { generateJwk } from './expo-key'

     

       4
       4
       +
       

     

       5
       5
       +
       export class ExpoRuntimeImplementation implements RuntimeImplementation {

     

       6
       6
       +
         async createKey(algs: string[]): Promise<Key> {

     

       7
       7
       +
           if (!algs.includes('ES256')) {

     

       8
       8
       +
             throw TypeError('ES256 is the only supported algo')

     

       9
       9
       +
           }

     

       10
       10
       +
           // @ts-expect-error TODO:

     

       11
       11
       +
           return generateJwk('ES256')

     

       12
       12
       +
         }

     

       13
       13
       +
       

     

       14
       14
       +
         getRandomValues(length: number): Uint8Array | PromiseLike<Uint8Array> {

     

       15
       15
       +
           return NativeModule.getRandomValues(length)

     

       16
       16
       +
         }

     

       17
       17
       +
       

     

       18
       18
       +
         digest(

     

       19
       19
       +
           bytes: Uint8Array,

     

       20
       20
       +
           algorithim: { name: string }

     

       21
       21
       +
         ): Uint8Array | PromiseLike<Uint8Array> {

     

       22
       22
       +
           if (algorithim.name === 'sha256') {

     

       23
       23
       +
             return NativeModule.digest(bytes, algorithim.name)

     

       24
       24
       +
           }

     

       25
       25
       +
       

     

       26
       26
       +
           throw new TypeError(`Unsupported algorithim: ${algorithim.name}`)

     

       27
       27
       +
         }

     

       28
       28
       +
       }

+3 -3

src/index.ts

···

       6
       6
        
         createJwt,

     

       7
       7
        
         getRandomValues,

     

       8
       8
        
         verifyJwt,

     

       9
       9
       -
         ReactNativeKey,

     

       10
       10
       -
       } from './react-native-key'

     

       11
       11
       -
       export { ReactNativeOAuthClient } from './react-native-oauth-client'

     

       9
       9
       +
         ExpoKey,

     

       10
       10
       +
       } from './expo-key'

     

       11
       11
       +
       export { ExpoOAuthClient } from './expo-oauth-client'

-132

src/react-native-key.ts

···

       1
       1
       -
       import {

     

       2
       2
       -
         type Key,

     

       3
       3
       -
         type JwtHeader,

     

       4
       4
       -
         type JwtPayload,

     

       5
       5
       -
         type SignedJwt,

     

       6
       6
       -
         type VerifyOptions,

     

       7
       7
       -
         type VerifyResult,

     

       8
       8
       -
       } from '@atproto/oauth-client'

     

       9
       9
       -
       import type { JWK } from './ExpoAtprotoAuth.types'

     

       10
       10
       -
       import { default as NativeModule } from './ExpoAtprotoAuthModule'

     

       11
       11
       -
       

     

       12
       12
       -
       export function getRandomValues(byteLength: number): Uint8Array {

     

       13
       13
       -
         return NativeModule.getRandomValues(byteLength)

     

       14
       14
       -
       }

     

       15
       15
       -
       

     

       16
       16
       -
       export function digest(data: Uint8Array, algorithim: string): Uint8Array {

     

       17
       17
       -
         return NativeModule.digest(data, algorithim)

     

       18
       18
       -
       }

     

       19
       19
       -
       

     

       20
       20
       -
       export function isECKey(jwk: any): jwk is JWK {

     

       21
       21
       -
         return jwk?.kty === 'EC' && jwk.crv && jwk.y

     

       22
       22
       -
       }

     

       23
       23
       -
       

     

       24
       24
       -
       export function createJwt(

     

       25
       25
       -
         header: string,

     

       26
       26
       -
         payload: string,

     

       27
       27
       -
         key: ReactNativeKey

     

       28
       28
       -
       ): string {

     

       29
       29
       -
         if (!key.privateJwk || !isECKey(key.privateJwk)) {

     

       30
       30
       -
           throw new Error('Invalid key')

     

       31
       31
       -
         }

     

       32
       32
       -
         return NativeModule.createJwt(header, payload, key.privateJwk)

     

       33
       33
       -
       }

     

       34
       34
       -
       

     

       35
       35
       -
       export function verifyJwt(

     

       36
       36
       -
         token: string,

     

       37
       37
       -
         jwk: JWK,

     

       38
       38
       -
         options: VerifyOptions

     

       39
       39
       -
       ): VerifyResult {

     

       40
       40
       -
         return NativeModule.verifyJwt(token, jwk, options)

     

       41
       41
       -
       }

     

       42
       42
       -
       

     

       43
       43
       -
       // @ts-expect-error

     

       44
       44
       -
       export class ReactNativeKey implements Key {

     

       45
       45
       -
         #jwk: Readonly<JWK>

     

       46
       46
       -
       

     

       47
       47
       -
         constructor(jwk: Readonly<JWK>) {

     

       48
       48
       -
           this.#jwk = jwk

     

       49
       49
       -
           if (!isECKey(jwk)) {

     

       50
       50
       -
             throw new Error('Invalid key type')

     

       51
       51
       -
           }

     

       52
       52
       -
           if (!jwk.use) {

     

       53
       53
       -
             throw new Error(`Missing "use" parameter value`)

     

       54
       54
       -
           }

     

       55
       55
       -
         }

     

       56
       56
       -
       

     

       57
       57
       -
         get jwk(): Readonly<JWK> {

     

       58
       58
       -
           return this.#jwk

     

       59
       59
       -
         }

     

       60
       60
       -
       

     

       61
       61
       -
         get isPrivate() {

     

       62
       62
       -
           return this.jwk.d !== undefined

     

       63
       63
       -
         }

     

       64
       64
       -
       

     

       65
       65
       -
         get privateJwk(): JWK {

     

       66
       66
       -
           return this.jwk

     

       67
       67
       -
         }

     

       68
       68
       -
       

     

       69
       69
       -
         get publicJwk() {

     

       70
       70
       -
           if (this.isSymetric) return undefined

     

       71
       71
       -
           // eslint-disable-next-line @typescript-eslint/no-unused-vars

     

       72
       72
       -
           const { d, ...publicKey } = this.jwk

     

       73
       73
       -
           return publicKey as Readonly<JWK & { d?: never }>

     

       74
       74
       -
         }

     

       75
       75
       -
       

     

       76
       76
       -
         get use() {

     

       77
       77
       -
           return this.jwk.use as NonNullable<'sig' | 'enc' | undefined>

     

       78
       78
       -
         }

     

       79
       79
       -
       

     

       80
       80
       -
         get alg() {

     

       81
       81
       -
           return this.jwk.alg

     

       82
       82
       -
         }

     

       83
       83
       -
       

     

       84
       84
       -
         get kid() {

     

       85
       85
       -
           return this.jwk.kid

     

       86
       86
       -
         }

     

       87
       87
       -
       

     

       88
       88
       -
         get crv() {

     

       89
       89
       -
           return this.jwk.crv

     

       90
       90
       -
         }

     

       91
       91
       -
       

     

       92
       92
       -
         get algorithms() {

     

       93
       93
       -
           return [this.jwk.alg]

     

       94
       94
       -
         }

     

       95
       95
       -
       

     

       96
       96
       -
         get bareJwk() {

     

       97
       97
       -
           return {

     

       98
       98
       -
             kty: this.jwk.kty,

     

       99
       99
       -
             crv: this.jwk.crv,

     

       100
       100
       -
             x: this.jwk.x,

     

       101
       101
       -
             y: this.jwk.y,

     

       102
       102
       -
           }

     

       103
       103
       -
         }

     

       104
       104
       -
       

     

       105
       105
       -
         get isSymetric() {

     

       106
       106
       -
           return this.jwk.kty === 'oct' && 'k' in this.jwk && this.jwk.k !== undefined

     

       107
       107
       -
         }

     

       108
       108
       -
       

     

       109
       109
       -
         async createJwt(header: JwtHeader, payload: JwtPayload): Promise<SignedJwt> {

     

       110
       110
       -
           return createJwt(

     

       111
       111
       -
             JSON.stringify(header),

     

       112
       112
       -
             JSON.stringify(payload),

     

       113
       113
       -
             this

     

       114
       114
       -
           ) as '${string}.${string}.${string}'

     

       115
       115
       -
         }

     

       116
       116
       -
       

     

       117
       117
       -
         async verifyJwt<C extends string = never>(

     

       118
       118
       -
           token: SignedJwt,

     

       119
       119
       -
           options?: VerifyOptions<C>

     

       120
       120
       -
         ): Promise<VerifyResult<C>> {

     

       121
       121
       -
           return verifyJwt(

     

       122
       122
       -
             token,

     

       123
       123
       -
             this.jwk,

     

       124
       124
       -
             (options ?? {}) as VerifyOptions

     

       125
       125
       -
           ) as VerifyResult<C>

     

       126
       126
       -
         }

     

       127
       127
       -
       }

     

       128
       128
       -
       

     

       129
       129
       -
       export function generateJwk(algoritihim: string): ReactNativeKey {

     

       130
       130
       -
         const privJwk = NativeModule.generatePrivateJwk(algoritihim)

     

       131
       131
       -
         return new ReactNativeKey(privJwk)

     

       132
       132
       -
       }

-69

src/react-native-oauth-client.ts

···

       1
       1
       -
       import {

     

       2
       2
       -
         type Fetch,

     

       3
       3
       -
         type OAuthClientMetadataInput,

     

       4
       4
       -
         type OAuthClientOptions,

     

       5
       5
       -
         type OAuthResponseMode,

     

       6
       6
       -
         atprotoLoopbackClientMetadata,

     

       7
       7
       -
         OAuthClient,

     

       8
       8
       -
       } from '@atproto/oauth-client'

     

       9
       9
       -
       import { ReactNativeRuntimeImplementation } from './react-native-runtime-implementation'

     

       10
       10
       -
       import { ReactNativeOAuthDatabase } from './react-native-oauth-database'

     

       11
       11
       -
       

     

       12
       12
       -
       export type Simplify<T> = { [K in keyof T]: T[K] } & NonNullable<unknown>

     

       13
       13
       -
       

     

       14
       14
       -
       export type ReactNativeOAuthClientOptions = Simplify<

     

       15
       15
       -
         {

     

       16
       16
       -
           clientMetadata?: Readonly<OAuthClientMetadataInput>

     

       17
       17
       -
           responseMode?: Exclude<OAuthResponseMode, 'form_post'>

     

       18
       18
       -
           fetch?: Fetch

     

       19
       19
       -
         } & Omit<

     

       20
       20
       -
           OAuthClientOptions,

     

       21
       21
       -
           | 'clientMetadata'

     

       22
       22
       -
           | 'responseMode'

     

       23
       23
       -
           | 'keyset'

     

       24
       24
       -
           | 'fetch'

     

       25
       25
       -
           | 'runtimeImplementation'

     

       26
       26
       -
           | 'sessionStore'

     

       27
       27
       -
           | 'stateStore'

     

       28
       28
       -
           | 'didCache'

     

       29
       29
       -
           | 'handleCache'

     

       30
       30
       -
           | 'dpopNonceCache'

     

       31
       31
       -
           | 'authorizationServerMetadataCache'

     

       32
       32
       -
           | 'protectedResourceMetadataCache'

     

       33
       33
       -
         >

     

       34
       34
       -
       >

     

       35
       35
       -
       

     

       36
       36
       -
       export class ReactNativeOAuthClient extends OAuthClient {

     

       37
       37
       -
         constructor({

     

       38
       38
       -
           responseMode = 'fragment',

     

       39
       39
       -
           ...options

     

       40
       40
       -
         }: ReactNativeOAuthClientOptions) {

     

       41
       41
       -
           const database = new ReactNativeOAuthDatabase()

     

       42
       42
       -
       

     

       43
       43
       -
           if (!['query', 'fragment'].includes(responseMode)) {

     

       44
       44
       -
             throw new TypeError(`Invalid response mode: ${responseMode}`)

     

       45
       45
       -
           }

     

       46
       46
       -
       

     

       47
       47
       -
           if (!options.clientMetadata) {

     

       48
       48
       -
             throw new TypeError(`No client metadata provided`)

     

       49
       49
       -
           }

     

       50
       50
       -
       

     

       51
       51
       -
           super({

     

       52
       52
       -
             ...options,

     

       53
       53
       -
             clientMetadata:

     

       54
       54
       -
               options.clientMetadata ?? atprotoLoopbackClientMetadata('localhost'), // HACK: this fixes a type error for now, look into it later

     

       55
       55
       -
             responseMode,

     

       56
       56
       -
             keyset: undefined,

     

       57
       57
       -
             runtimeImplementation: new ReactNativeRuntimeImplementation(),

     

       58
       58
       -
             sessionStore: database.getSessionStore(),

     

       59
       59
       -
             stateStore: database.getStateStore(),

     

       60
       60
       -
             didCache: database.getDidCache(),

     

       61
       61
       -
             handleCache: database.getHandleCache(),

     

       62
       62
       -
             dpopNonceCache: database.getDpopNonceCache(),

     

       63
       63
       -
             authorizationServerMetadataCache:

     

       64
       64
       -
               database.getAuthorizationServerMetadataCache(),

     

       65
       65
       -
             protectedResourceMetadataCache:

     

       66
       66
       -
               database.getProtectedResourceMetadataCache(),

     

       67
       67
       -
           })

     

       68
       68
       -
         }

     

       69
       69
       -
       }

-256

src/react-native-oauth-database.ts

···

       1
       1
       -
       import type {

     

       2
       2
       -
         DidDocument,

     

       3
       3
       -
         InternalStateData,

     

       4
       4
       -
         OAuthAuthorizationServerMetadata,

     

       5
       5
       -
         OAuthProtectedResourceMetadata,

     

       6
       6
       -
         ResolvedHandle,

     

       7
       7
       -
         Session,

     

       8
       8
       -
         TokenSet,

     

       9
       9
       -
         Key,

     

       10
       10
       -
       } from '@atproto/oauth-client'

     

       11
       11
       -
       import { type SimpleStore, type Value } from '@atproto-labs/simple-store'

     

       12
       12
       -
       import { MMKV } from 'react-native-mmkv'

     

       13
       13
       -
       import { JWK } from './ExpoAtprotoAuth.types'

     

       14
       14
       -
       import { ReactNativeKey } from './react-native-key'

     

       15
       15
       -
       

     

       16
       16
       -
       type Item<V> = {

     

       17
       17
       -
         value: V

     

       18
       18
       -
         expiresAt: null | number

     

       19
       19
       -
       }

     

       20
       20
       -
       

     

       21
       21
       -
       type CryptoKeyPair = {

     

       22
       22
       -
         publicKey: JWK

     

       23
       23
       -
         privateKey: JWK

     

       24
       24
       -
       }

     

       25
       25
       -
       

     

       26
       26
       -
       type EncodedKey = {

     

       27
       27
       -
         keyId: string

     

       28
       28
       -
         keyPair: CryptoKeyPair

     

       29
       29
       -
       }

     

       30
       30
       -
       

     

       31
       31
       -
       function encodeKey(key: Key): EncodedKey {

     

       32
       32
       -
         if (!key.privateJwk || !key.publicJwk || !key.kid) {

     

       33
       33
       -
           throw new Error('Invalid key object')

     

       34
       34
       -
         }

     

       35
       35
       -
       

     

       36
       36
       -
         const encodedKey = {

     

       37
       37
       -
           keyId: key.kid,

     

       38
       38
       -
           keyPair: {

     

       39
       39
       -
             publicKey: key.publicJwk,

     

       40
       40
       -
             privateKey: key.privateJwk,

     

       41
       41
       -
           },

     

       42
       42
       -
         }

     

       43
       43
       -
       

     

       44
       44
       -
         // @ts-expect-error

     

       45
       45
       -
         return encodedKey

     

       46
       46
       -
       }

     

       47
       47
       -
       

     

       48
       48
       -
       async function decodeKey(encoded: EncodedKey): Promise<ReactNativeKey> {

     

       49
       49
       -
         console.log(encoded)

     

       50
       50
       -
         return new ReactNativeKey(encoded.keyPair.privateKey)

     

       51
       51
       -
       }

     

       52
       52
       -
       

     

       53
       53
       -
       export type Schema = {

     

       54
       54
       -
         state: Item<{

     

       55
       55
       -
           dpopKey: EncodedKey

     

       56
       56
       -
           iss: string

     

       57
       57
       -
           verifier?: string

     

       58
       58
       -
           appState?: string

     

       59
       59
       -
         }>

     

       60
       60
       -
         session: Item<{

     

       61
       61
       -
           dpopKey: EncodedKey

     

       62
       62
       -
           tokenSet: TokenSet

     

       63
       63
       -
         }>

     

       64
       64
       -
         didCache: Item<DidDocument>

     

       65
       65
       -
         dpopNonceCache: Item<string>

     

       66
       66
       -
         handleCache: Item<ResolvedHandle>

     

       67
       67
       -
         authorizationServerMetadataCache: Item<OAuthAuthorizationServerMetadata>

     

       68
       68
       -
         protectedResourceMetadataCache: Item<OAuthProtectedResourceMetadata>

     

       69
       69
       -
       }

     

       70
       70
       -
       

     

       71
       71
       -
       export type DatabaseStore<V extends Value> = SimpleStore<string, V> & {

     

       72
       72
       -
         getKeys: () => Promise<string[]>

     

       73
       73
       -
       }

     

       74
       74
       -
       

     

       75
       75
       -
       const STORES = [

     

       76
       76
       -
         'state',

     

       77
       77
       -
         'session',

     

       78
       78
       -
         'didCache',

     

       79
       79
       -
         'dpopNonceCache',

     

       80
       80
       -
         'handleCache',

     

       81
       81
       -
         'authorizationServerMetadataCaache',

     

       82
       82
       -
         'protectedResourceMetadataCache',

     

       83
       83
       -
       ]

     

       84
       84
       -
       

     

       85
       85
       -
       export type ReactNativeOAuthDatabaseOptions = {

     

       86
       86
       -
         name?: string

     

       87
       87
       -
         durability?: 'strict' | 'relaxed'

     

       88
       88
       -
         cleanupInterval?: number

     

       89
       89
       -
       }

     

       90
       90
       -
       

     

       91
       91
       -
       export class ReactNativeOAuthDatabase {

     

       92
       92
       -
         #cleanupInterval?: ReturnType<typeof setInterval>

     

       93
       93
       -
         #mmkv?: MMKV

     

       94
       94
       -
       

     

       95
       95
       -
         constructor(options?: ReactNativeOAuthDatabaseOptions) {

     

       96
       96
       -
           this.#cleanupInterval = setInterval(() => {

     

       97
       97
       -
             this.cleanup()

     

       98
       98
       -
           }, options?.cleanupInterval ?? 30e3)

     

       99
       99
       -
           this.#mmkv = new MMKV({ id: 'react-native-oauth-client' })

     

       100
       100
       -
         }

     

       101
       101
       -
       

     

       102
       102
       -
         delete = async (key: string) => {

     

       103
       103
       -
           this.#mmkv?.delete(key)

     

       104
       104
       -
           this.#mmkv?.delete(`${key}.expiresAt`)

     

       105
       105
       -
         }

     

       106
       106
       -
       

     

       107
       107
       -
         protected createStore<N extends keyof Schema, V extends Value>(

     

       108
       108
       -
           name: N,

     

       109
       109
       -
           {

     

       110
       110
       -
             encode,

     

       111
       111
       -
             decode,

     

       112
       112
       -
             expiresAt,

     

       113
       113
       -
           }: {

     

       114
       114
       -
             encode: (value: V) => Schema[N]['value'] | PromiseLike<Schema[N]['value']>

     

       115
       115
       -
             decode: (encoded: Schema[N]['value']) => V | PromiseLike<V>

     

       116
       116
       -
             expiresAt: (value: V) => null | number

     

       117
       117
       -
           }

     

       118
       118
       -
         ): DatabaseStore<V> {

     

       119
       119
       -
           return {

     

       120
       120
       -
             get: async (key) => {

     

       121
       121
       -
               console.log(`getting ${name}.${key}`)

     

       122
       122
       -
               const item = this.#mmkv?.getString(`${name}.${key}`)

     

       123
       123
       -
       

     

       124
       124
       -
               if (item === undefined) return undefined

     

       125
       125
       -
       

     

       126
       126
       -
               const storedExpiresAt = this.#mmkv?.getNumber(

     

       127
       127
       -
                 `${name}.${key}.expiresAt`

     

       128
       128
       -
               )

     

       129
       129
       -
               if (storedExpiresAt && storedExpiresAt < Date.now()) {

     

       130
       130
       -
                 await this.delete(`${name}.${key}`)

     

       131
       131
       -
                 return undefined

     

       132
       132
       -
               }

     

       133
       133
       -
       

     

       134
       134
       -
               const res = decode(JSON.parse(item))

     

       135
       135
       -
               console.log(res)

     

       136
       136
       -
               return res

     

       137
       137
       -
             },

     

       138
       138
       -
       

     

       139
       139
       -
             getKeys: async () => {

     

       140
       140
       -
               const keys = this.#mmkv?.getAllKeys() ?? []

     

       141
       141
       -
               return keys.filter((key) => key.startsWith(`${name}.`))

     

       142
       142
       -
             },

     

       143
       143
       -
       

     

       144
       144
       -
             set: async (key, value) => {

     

       145
       145
       -
               let encoded = await encode(value)

     

       146
       146
       -
               encoded = JSON.stringify(encoded)

     

       147
       147
       -
       

     

       148
       148
       -
               const _expiresAt = expiresAt(value)

     

       149
       149
       -
       

     

       150
       150
       -
               this.#mmkv?.set(`${name}.${key}`, encoded)

     

       151
       151
       -
               if (_expiresAt) {

     

       152
       152
       -
                 this.#mmkv?.set(`${name}.${key}.expiresAt`, _expiresAt)

     

       153
       153
       -
               }

     

       154
       154
       -
             },

     

       155
       155
       -
             del: async (key) => {

     

       156
       156
       -
               await this.delete(`${name}.${key}`)

     

       157
       157
       -
             },

     

       158
       158
       -
           }

     

       159
       159
       -
         }

     

       160
       160
       -
       

     

       161
       161
       -
         getSessionStore(): DatabaseStore<Session> {

     

       162
       162
       -
           return this.createStore('session', {

     

       163
       163
       -
             expiresAt: ({ tokenSet }) =>

     

       164
       164
       -
               tokenSet.refresh_token || tokenSet.expires_at == null

     

       165
       165
       -
                 ? null

     

       166
       166
       -
                 : new Date(tokenSet.expires_at).valueOf(),

     

       167
       167
       -
             encode: ({ dpopKey, ...session }) => ({

     

       168
       168
       -
               ...session,

     

       169
       169
       -
               dpopKey: encodeKey(dpopKey),

     

       170
       170
       -
             }),

     

       171
       171
       -
             // @ts-expect-error

     

       172
       172
       -
             decode: async ({ dpopKey, ...encoded }) => ({

     

       173
       173
       -
               ...encoded,

     

       174
       174
       -
               dpopKey: await decodeKey(dpopKey),

     

       175
       175
       -
             }),

     

       176
       176
       -
           })

     

       177
       177
       -
         }

     

       178
       178
       -
       

     

       179
       179
       -
         getStateStore(): DatabaseStore<InternalStateData> {

     

       180
       180
       -
           return this.createStore('state', {

     

       181
       181
       -
             expiresAt: (_value) => Date.now() + 10 * 60e3,

     

       182
       182
       -
             encode: ({ dpopKey, ...session }) => ({

     

       183
       183
       -
               ...session,

     

       184
       184
       -
               dpopKey: encodeKey(dpopKey),

     

       185
       185
       -
             }),

     

       186
       186
       -
             // @ts-expect-error

     

       187
       187
       -
             decode: async ({ dpopKey, ...encoded }) => ({

     

       188
       188
       -
               ...encoded,

     

       189
       189
       -
               dpopKey: await decodeKey(dpopKey),

     

       190
       190
       -
             }),

     

       191
       191
       -
           })

     

       192
       192
       -
         }

     

       193
       193
       -
       

     

       194
       194
       -
         getDpopNonceCache(): undefined | DatabaseStore<string> {

     

       195
       195
       -
           return this.createStore('dpopNonceCache', {

     

       196
       196
       -
             expiresAt: (_value) => Date.now() + 600e3,

     

       197
       197
       -
             encode: (value) => value,

     

       198
       198
       -
             decode: (encoded) => encoded,

     

       199
       199
       -
           })

     

       200
       200
       -
         }

     

       201
       201
       -
       

     

       202
       202
       -
         getDidCache(): undefined | DatabaseStore<DidDocument> {

     

       203
       203
       -
           return this.createStore('didCache', {

     

       204
       204
       -
             expiresAt: (_value) => Date.now() + 60e3,

     

       205
       205
       -
             encode: (value) => value,

     

       206
       206
       -
             decode: (encoded) => encoded,

     

       207
       207
       -
           })

     

       208
       208
       -
         }

     

       209
       209
       -
       

     

       210
       210
       -
         getHandleCache(): undefined | DatabaseStore<ResolvedHandle> {

     

       211
       211
       -
           return this.createStore('handleCache', {

     

       212
       212
       -
             expiresAt: (_value) => Date.now() + 60e3,

     

       213
       213
       -
             encode: (value) => value,

     

       214
       214
       -
             decode: (encoded) => encoded,

     

       215
       215
       -
           })

     

       216
       216
       -
         }

     

       217
       217
       -
       

     

       218
       218
       -
         getAuthorizationServerMetadataCache():

     

       219
       219
       -
           | undefined

     

       220
       220
       -
           | DatabaseStore<OAuthAuthorizationServerMetadata> {

     

       221
       221
       -
           return this.createStore('authorizationServerMetadataCache', {

     

       222
       222
       -
             expiresAt: (_value) => Date.now() + 60e3,

     

       223
       223
       -
             encode: (value) => value,

     

       224
       224
       -
             decode: (encoded) => encoded,

     

       225
       225
       -
           })

     

       226
       226
       -
         }

     

       227
       227
       -
       

     

       228
       228
       -
         getProtectedResourceMetadataCache():

     

       229
       229
       -
           | undefined

     

       230
       230
       -
           | DatabaseStore<OAuthProtectedResourceMetadata> {

     

       231
       231
       -
           return this.createStore('protectedResourceMetadataCache', {

     

       232
       232
       -
             expiresAt: (_value) => Date.now() + 60e3,

     

       233
       233
       -
             encode: (value) => value,

     

       234
       234
       -
             decode: (encoded) => encoded,

     

       235
       235
       -
           })

     

       236
       236
       -
         }

     

       237
       237
       -
       

     

       238
       238
       -
         async cleanup() {

     

       239
       239
       -
           for (const name of STORES) {

     

       240
       240
       -
             const keys = this.#mmkv?.getAllKeys() ?? []

     

       241
       241
       -
             for (const key of keys) {

     

       242
       242
       -
               if (key.startsWith(`${name}.`)) {

     

       243
       243
       -
                 const expiresAt = this.#mmkv?.getNumber(`${name}.${key}.expiresAt`)

     

       244
       244
       -
                 if (expiresAt && Number(expiresAt) < Date.now()) {

     

       245
       245
       -
                   this.#mmkv?.delete(key)

     

       246
       246
       -
                   this.#mmkv?.delete(`${name}.${key}.expiresAt`)

     

       247
       247
       -
                 }

     

       248
       248
       -
               }

     

       249
       249
       -
             }

     

       250
       250
       -
           }

     

       251
       251
       -
         }

     

       252
       252
       -
       

     

       253
       253
       -
         async [Symbol.asyncDispose]() {

     

       254
       254
       -
           clearInterval(this.#cleanupInterval)

     

       255
       255
       -
         }

     

       256
       256
       -
       }

-28

src/react-native-runtime-implementation.ts

···

       1
       1
       -
       import type { Key, RuntimeImplementation } from '@atproto/oauth-client'

     

       2
       2
       -
       import { default as NativeModule } from './ExpoAtprotoAuthModule'

     

       3
       3
       -
       import { generateJwk } from './react-native-key'

     

       4
       4
       -
       

     

       5
       5
       -
       export class ReactNativeRuntimeImplementation implements RuntimeImplementation {

     

       6
       6
       -
         async createKey(algs: string[]): Promise<Key> {

     

       7
       7
       -
           if (!algs.includes('ES256')) {

     

       8
       8
       -
             throw TypeError('ES256 is the only supported algo')

     

       9
       9
       -
           }

     

       10
       10
       -
           // @ts-expect-error TODO:

     

       11
       11
       -
           return generateJwk('ES256')

     

       12
       12
       -
         }

     

       13
       13
       -
       

     

       14
       14
       -
         getRandomValues(length: number): Uint8Array | PromiseLike<Uint8Array> {

     

       15
       15
       -
           return NativeModule.getRandomValues(length)

     

       16
       16
       -
         }

     

       17
       17
       -
       

     

       18
       18
       -
         digest(

     

       19
       19
       -
           bytes: Uint8Array,

     

       20
       20
       -
           algorithim: { name: string }

     

       21
       21
       -
         ): Uint8Array | PromiseLike<Uint8Array> {

     

       22
       22
       -
           if (algorithim.name === 'sha256') {

     

       23
       23
       -
             return NativeModule.digest(bytes, algorithim.name)

     

       24
       24
       -
           }

     

       25
       25
       -
       

     

       26
       26
       -
           throw new TypeError(`Unsupported algorithim: ${algorithim.name}`)

     

       27
       27
       -
         }

     

       28
       28
       -
       }

yarn.lock

···

       4350
       4350
        
         dependencies:

     

       4351
       4351
        
           invariant "^2.2.4"

     

       4352
       4352
        
       

     

       4353
       4353
       +
       expo-web-browser@^14.2.0:

     

       4354
       4354
       +
         version "14.2.0"

     

       4355
       4355
       +
         resolved "https://registry.yarnpkg.com/expo-web-browser/-/expo-web-browser-14.2.0.tgz#d8fb521ae349aebbf5c0ca32448877480124c06c"

     

       4356
       4356
       +
         integrity sha512-6S51d8pVlDRDsgGAp8BPpwnxtyKiMWEFdezNz+5jVIyT+ctReW42uxnjRgtsdn5sXaqzhaX+Tzk/CWaKCyC0hw==

     

       4357
       4357
       +
       

     

       4353
       4358
        
       expo@~53.0.0:

     

       4354
       4359
        
         version "53.0.19"

     

       4355
       4360
        
         resolved "https://registry.yarnpkg.com/expo/-/expo-53.0.19.tgz#69f8ed224efadf517d3ff66dde3d536fb3e8f00a"

Compare changes