keycloakStore.ts
2.95 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
import { useStorage } from '@vueuse/core'
import { defineStore } from 'pinia'
import { computed, ref } from 'vue'
import keycloakInstance from '@/keycloak'
// Minimal waktu untuk memperbaharui token (detik)
const MIN_VALIDITY = 60
// State utama
const authenticated = ref(false)
const name = ref<string>('')
const username = ref<string>('')
const civitas = ref<string>('')
const kodeIdentitas = ref<string>('')
const accessToken = ref<string>('')
const refreshTokenExp = ref<number>(0)
const roles = ref<string[]>([])
const selectedRole = useStorage('selectedRole', 'admin')
//* * Fungsi untuk menyegarkan data dari Keycloak Instance */
const refresh = (): void => {
authenticated.value = keycloakInstance.authenticated ?? false
const tokenParsed = keycloakInstance.tokenParsed ?? {}
const refreshedTokenParsed = keycloakInstance.refreshTokenParsed ?? {}
name.value = tokenParsed.given_name || ''
username.value = tokenParsed.preferred_username || ''
civitas.value = tokenParsed.civitas || ''
kodeIdentitas.value = tokenParsed.kodeIdentitas || ''
accessToken.value = keycloakInstance.token || ''
refreshTokenExp.value = refreshedTokenParsed.exp || 0
roles.value = keycloakInstance.resourceAccess?.vueplayground?.roles ?? []
}
//* * Fungsi untuk memperbarui token jika hampir kadaluwarsa */
const updateToken = async (): Promise<string | null> => {
try {
const refreshed = await keycloakInstance.updateToken(MIN_VALIDITY)
if (refreshed)
refresh()
console.log('Token Updated:', accessToken.value)
return accessToken.value
}
catch (error) {
console.error('Failed to update token:', error)
return null
}
}
// ** Decode JWT Payload dengan aman**
function decodeJwtPayload(token: string): Record<string, any> | null {
try {
const base64Url = token.split(':')[1]
const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/')
const jsonPayload = atob(base64)
.split('')
.map(c => `%${(`00${c.charCodeAt(0).toString(16)}`).slice(-2)}`)
.join('')
const payload = JSON.parse(decodeURIComponent(jsonPayload))
console.log('Decoded Payload:', payload)
const isExpired
= payload.exp - Math.floor(Date.now() / 1000) - MIN_VALIDITY <= 0
console.log(isExpired ? 'Token Expired' : 'Token Valid')
return payload
}
catch (error) {
console.error('Failed to decode JWT:', error)
return null
}
}
// ** Getters untuk data turunan **
const isTokenExpired = computed(() => {
const currentTime = Math.floor(Date.now() / 1000)
return refreshTokenExp.value - currentTime <= 0
})
//* * Definisikan Store Pinia */
export const useKeycloakStore = defineStore('keycloak', () => {
return {
// State
authenticated,
name,
username,
civitas,
kodeIdentitas,
accessToken,
refreshTokenExp,
roles,
selectedRole,
// Constants
MIN_VALIDITY,
// Methods
refresh,
updateToken,
decodeJwtPayload,
// GETTER
isTokenExpired,
}
})