Login Client

This repository offers a JavaScript client to be used with login-server.

Table of Contents

• Install
• Build
• Usage
  • Cross-domain usage
• Test
• Maintainers
• Publish
• Contribute
• License

Install

npm install gbv-login-client

login-client v2 requires Node.js 18 or later. To include login-client via a CDN, see below.

Build

git clone https://github.com/gbv/login-client.git
cd login-client
npm install
npm run build

esbuild is used to create builds for the browser. These are published to npm and can be used via a CDN like jsDelivr:

<script src="https://cdn.jsdelivr.net/npm/gbv-login-client@2/dist/gbv-login-client.js"></script>

Note: Always specify at least the major version number to avoid breaking your application. Also, it is recommended to use the full path in case you need to load the source maps for debugging.

Usage

An instance of class LoginClient provides methods to listen for events such as login and logout, as soon as login client has been connected to login server. Login is initiated by following a link to login endpoint of login server.

The lists of events and error types are also exported. See below for usage examples and login-client-vue for a wrapper for web applications written in Vue 3:

// CJS
const { LoginClient, events, errors } = require("gbv-login-client")
// ES6
import { LoginClient, events, errors } from "gbv-login-client"
// Browser
const { LoginClient, events, errors } = GLC

// Second parameter is an options object with properties:
// `ssl` (default: true), `retryMs` (default: 1000), `retryMsMax` (default: 30000), `retryMult` (default: 1.2), `pingInterval` (default: 10000)
let client = new LoginClient("login.example.com")

// Add event listeners
// Note: `event` always contains the property `event.type` which is the name of the event.
client.addEventListener(events.connect, event => {
  // Fires when the client successfully connected.
  // `event` is empty.
})
client.addEventListener(events.disconnect, event => {
  // Fires when the client disconnected.
  // `event` is empty.
})
client.addEventListener(events.login, event => {
  // Fires when the user has logged in.
  // `event.user` contains the user object.
})
client.addEventListener(events.logout, event => {
  // Fires when the user has logged out.
  // `event` is empty.
})
client.addEventListener(events.update, event => {
  // Fires when the user was updated.
  // `event.user` contains the updated user object.
})
client.addEventListener(events.providers, event => {
  // Fires when the providers were updated.
  // `event.providers` contains the updated providers list.
})
client.addEventListener(events.about, event => {
  // Fires when the server's about information was updated.
  // `event` contains the information (e.g. `event.publicKey`).
})
client.addEventListener(events.token, event => {
  // Fires when the token was updated.
  // `event.token` contains the updated token,
  // `event.expiresIn` contains the number of seconds the token will expire in.
})
client.addEventListener(events.error, event => {
  // Fires when an error occurred.
  // `event.error` contains one of the following errors:
  // - errors.NoInternetConnectionError
  // - errors.ThirdPartyCookiesBlockedError
  // - errors.ServerConnectionError
})
// (normally not used in production)
client.addEventListener(events._sent, event => {
  // Fires when a message was sent through the WebSocket.
  // `event.message` contains the message that was sent.
})
// (normally not used in production)
client.addEventListener(events._received, event => {
  // Fires when a message was received through the WebSocket.
  // `event.message` contains the message that was received.
})
// Alternatively, you can set an event listener for `null` which receives all events:
client.addEventListener(null, event => {
  switch (event.type) {
    case events.connect:
      // ...
      break
    default:
      // ...
  }
})

// Connect to login server
client.connect()

// Access properties
client.loggedIn
client.user
client.providers
client.connected
client.token
client.decodedToken // Decoded, but not verified!
client.about

// Change the user name at login server
client.setName("New Name")

// Static properties
LoginClient.events    // Object with available events (usage see above)
LoginClient.errors    // Object with available error classes
LoginClient.jwtDecode // Access to jwtDecode function

// If you eventually want to disconnect from login server (fires disconnect event one last time):
client.disconnect()

The login-server contains a more comprehensive example at its /api endpoint. See its source code for details.

Cross-domain usage

Access via login-client to a login server at another domain must be enabled by both server and client. The login-server must explicitly allow domains via its setting ALLOWED_ORIGINS. Access from the client may still be restricted because most web browsers block cross-domain cookies by default as tracking protection. In this case login-server emits a ThirdPartyCookiesBlockedError event. Applications should then show an appropriate message telling users how to add an exception in privacy settings of their browser to allow third-party cookies (or disable enhanced tracking protection) for the application.

Test

npm test

Maintainers

• @stefandesu
• @nichtich

Publish

To publish a new version on npm after committing your changes, make sure you committed/merged all your changes to dev successfully and then run:

npm run release:patch
# or for minor release:
# npm run release:minor
# or for major release:
# npm run release:major

A new version will be published to npm automatically via GitHub Actions.

Contribute

PRs accepted.

• Please implement your changes based on the current dev branch.
• Please run the tests before committing.
• Please do not skip the pre-commit hook when committing your changes.
• If editing the README, please conform to the standard-readme specification.

License

MIT © 2022- Verbundzentrale des GBV (VZG)