handleAuth

=

nextjs-workspace.code-workspace

@@ -0,0 +1,10 @@
+{
+  "folders": [
+	{
+		"path": "."
+	},
+	{
+		"path": "../nextjs-test-app"
+	}
+]
+}

package.json

@@ -2,7 +2,7 @@
   "name": "@kinde-oss/kinde-auth-nextjs",
   "version": "1.0.0-beta.13",
   "description": "Kinde Auth SDK for NextJS",
-  "main": "index.js",
+  "main": "bundle.js",
   "scripts": {
     "test": "jest",
     "build": "rollup -c"

src/handlers/handleAuth.js

@@ -1,4 +1,7 @@
 import { login } from "./login";
+import { logout } from "./logout";
+import { me } from "./me";
+import { register } from "./register";
 
 export default () =>
   function handler(req, res) {
@@ -11,6 +14,12 @@ export default () =>
     switch (route) {
       case "login":
         login(req, res);
+      case "register":
+        register(req, res);
+      case "me":
+        me(req, res);
+      case "logout":
+        logout(req, res);
       default:
         res.status(404).end();
     }

src/handlers/login.js

@@ -1,10 +1,6 @@
 import { setupChallenge } from "../utils/setupChallenge";
 
 export const login = (req, res) => {
-  // setupChallenge();
-  console.log("log in");
-  console.log("req", req);
-  console.log("res", res);
-
-  res.status(200).json({ name: "John Doe" });
+  setupChallenge();
+  res.status(200).json({ function: "Login" });
 };

src/handlers/logout.js

@@ -0,0 +1,6 @@
+import { setupChallenge } from "../utils/setupChallenge";
+
+export const logout = (req, res) => {
+  setupChallenge();
+  res.status(200).json({ function: "logout" });
+};

src/handlers/me.js

@@ -0,0 +1,6 @@
+import { setupChallenge } from "../utils/setupChallenge";
+
+export const me = (req, res) => {
+  setupChallenge();
+  res.status(200).json({ function: "me" });
+};

src/handlers/register.js

@@ -0,0 +1,6 @@
+import { setupChallenge } from "../utils/setupChallenge";
+
+export const register = (req, res) => {
+  setupChallenge();
+  res.status(200).json({ function: "Register" });
+};

src/utils/base64Encode.js

@@ -0,0 +1,11 @@
+// Base64-urlencodes the input string
+export function base64UrlEncode(str) {
+  // Convert the ArrayBuffer to string using Uint8 array to conver to what btoa accepts.
+  // btoa accepts chars only within ascii 0-255 and base64 encodes them.
+  // Then convert the base64 encoded to base64url encoded
+  //   (replace + with -, replace / with _, trim trailing =)
+  return btoa(String.fromCharCode.apply(null, new Uint8Array(str)))
+    .replace(/\+/g, "-")
+    .replace(/\//g, "_")
+    .replace(/=+$/, "");
+}

src/utils/pkceChallengeFromVerifier.js

@@ -0,0 +1,8 @@
+import { base64UrlEncode } from "./base64Encode";
+import { sha256 } from "./sha256";
+
+// Return the base64-urlencoded sha256 hash for the PKCE challenge
+export async function pkceChallengeFromVerifier(v) {
+  const hashed = await sha256(v);
+  return base64UrlEncode(hashed);
+}

src/utils/setupChallenge.js

@@ -1,16 +1,19 @@
 import { randomString } from "./randomString";
 import { SESSION_PREFIX } from "../config/sessionPrefix";
+import { pkceChallengeFromVerifier } from "./pkceChallengeFromVerifier";
+
 var cookie = require("cookie");
 
-export const setupChallenge = () => {
+export const setupChallenge = async () => {
   const state = randomString();
   const code_verifier = randomString(); // the secret
   // Hash and base64-urlencode the secret to use as the challenge
-  const code_challenge = "await pkceChallengeFromVerifier(code_verifier)";
+  const code_challenge = await pkceChallengeFromVerifier(code_verifier);
 
   cookie.parse(`${SESSION_PREFIX}-${state}`, code_verifier);
 
   // Build and encode the authorisation request url
-  const url = new URL(config.authorization_endpoint);
+  const url = new URL("https://developer.mozilla.org/oauth2/auth");
+  console.log(url);
   return { state, code_challenge, url };
 };

src/utils/sha256.js

@@ -0,0 +1,8 @@
+const { subtle } = require("crypto");
+// Calculate the SHA256 hash of the input text.
+// Returns a promise that resolves to an ArrayBuffer
+export function sha256(plain) {
+  const encoder = new TextEncoder();
+  const data = encoder.encode(plain);
+  return subtle.digest("SHA-256", data);
+}