FEAT: Federated connections #1879

tusharpandey13 · 2025-02-02T06:02:05Z

WIP

Moved authentication server metadata discovery to a separate stateful class for use in both authentication and FC exchange methods; this maintains an in-memory cache of metadata.
Added a getFCAT method with checks for existing FCATs and writeback to the session store.
Moved encrypted cookie read and write logic to a dedicated storage layer, abstracting session store methods.
Implemented FC exchange functionality.
Created a class to handle FCAT serialization/deserialization, including cookie storage logic.
Added logic to serialize/deserialize FCATs along with session data to the cookie store.
Added a federatedConnectiontMap property.

Please see comments below

src/server/auth-client.ts

src/server/authServerMetadata.ts

src/server/client.ts

src/server/cookies.ts

src/server/federatedConnections/exchange.ts

src/server/federatedConnections/serializer.ts

src/server/session/stateless-session-store.ts

src/types/index.ts

src/server/auth-client.ts

src/server/authServerMetadata.ts

frederikprijck · 2025-02-10T09:11:25Z

src/server/client.ts

+        }
+      }
+    }
+  }


Let's ensure we test that this works fine in all cases (Server Component, Pages, App, ...), both for access tokens and federated connection access tokens.

Yes, will ensure this works across all cases. Will also update unit tests.

src/server/client.ts

src/server/authServerMetadata.ts

simplify session stores, add documentation FCAT implementation update remove readonly qualifiers remove extra docs from abstract session store revert stateful session store changes remove use of audience for caching FCATs, add wrapper method in auth-clint.ts to avoid passing this.clientAuth callback to federatedConnectionsTokenExchange and instead pass a concrete value; linting fixes; remove redundant code as pointed out in review revert uses of nullish coalescing operator move existing tokenset check logic to within exchange code fix: compilation issues fix: ensure we await setSessionStore fix: decrypt cookie using secret fix: return undefined from findFederatedToken when no token in cache fix: ensure token expiresAt is checked correctly linting changes changed field and method names to be more descriptive improved jsdocs

arpit-jn assigned nandan-bhat and gyaneshgouraw-okta Feb 6, 2025