@1mcp/agent 0.39.0-beta.3 → 0.39.0-beta.4

package/build/admin/index.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" href="/admin/favicon.svg" type="image/svg+xml" />
     <title>1MCP Admin Console</title>
-    <script type="module" crossorigin src="/admin/assets/admin-console-CMRxMjQo.js"></script>
+    <script type="module" crossorigin src="/admin/assets/admin-console-OfHKqRm-.js"></script>
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-rolldown-runtime-Bh1tDfsg.js">
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-react-BSaWeqgv.js">
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-mantine-xwbfu5Gd.js">

package/build/auth/oauthAuthority.d.ts

@@ -0,0 +1,149 @@
+import { z } from 'zod';
+export declare const OAUTH_ATTEMPT_TTL_MS: number;
+export declare const OAUTH_MAX_ATTEMPTS = 32;
+export declare const OAUTH_AUTHORITY_TTL_MS: number;
+export declare const OAuthRouteSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        http: "http";
+        sse: "sse";
+    }>;
+    connectionKey: z.ZodString;
+    url: z.ZodURL;
+}, z.core.$strip>;
+export declare const OAuthAuthorityContextSchema: z.ZodObject<{
+    owner: z.ZodString;
+    source: z.ZodString;
+    route: z.ZodObject<{
+        kind: z.ZodEnum<{
+            http: "http";
+            sse: "sse";
+        }>;
+        connectionKey: z.ZodString;
+        url: z.ZodURL;
+    }, z.core.$strip>;
+    configuration: z.ZodString;
+}, z.core.$strip>;
+export type OAuthAuthorityContext = z.infer<typeof OAuthAuthorityContextSchema>;
+export declare const OAuthAuthoritySchema: z.ZodObject<{
+    owner: z.ZodString;
+    source: z.ZodString;
+    route: z.ZodObject<{
+        kind: z.ZodEnum<{
+            http: "http";
+            sse: "sse";
+        }>;
+        connectionKey: z.ZodString;
+        url: z.ZodURL;
+    }, z.core.$strip>;
+    configuration: z.ZodString;
+    version: z.ZodLiteral<1>;
+    issuer: z.ZodString;
+    resource: z.ZodURL;
+    authorizationEndpoint: z.ZodURL;
+    tokenEndpoint: z.ZodURL;
+    registrationEndpoint: z.ZodOptional<z.ZodURL>;
+    requireIssuer: z.ZodBoolean;
+}, z.core.$strip>;
+export type OAuthAuthority = z.infer<typeof OAuthAuthoritySchema>;
+export declare const OAuthAttemptSchema: z.ZodObject<{
+    authority: z.ZodObject<{
+        owner: z.ZodString;
+        source: z.ZodString;
+        route: z.ZodObject<{
+            kind: z.ZodEnum<{
+                http: "http";
+                sse: "sse";
+            }>;
+            connectionKey: z.ZodString;
+            url: z.ZodURL;
+        }, z.core.$strip>;
+        configuration: z.ZodString;
+        version: z.ZodLiteral<1>;
+        issuer: z.ZodString;
+        resource: z.ZodURL;
+        authorizationEndpoint: z.ZodURL;
+        tokenEndpoint: z.ZodURL;
+        registrationEndpoint: z.ZodOptional<z.ZodURL>;
+        requireIssuer: z.ZodBoolean;
+    }, z.core.$strip>;
+    generation: z.ZodString;
+    redirect: z.ZodString;
+    verifier: z.ZodString;
+    createdAt: z.ZodNumber;
+    expires: z.ZodNumber;
+    consumed: z.ZodBoolean;
+    adminReturnOrigin: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type OAuthAttempt = z.infer<typeof OAuthAttemptSchema>;
+export declare const BoundClientSessionSchema: z.ZodObject<{
+    authority: z.ZodObject<{
+        owner: z.ZodString;
+        source: z.ZodString;
+        route: z.ZodObject<{
+            kind: z.ZodEnum<{
+                http: "http";
+                sse: "sse";
+            }>;
+            connectionKey: z.ZodString;
+            url: z.ZodURL;
+        }, z.core.$strip>;
+        configuration: z.ZodString;
+        version: z.ZodLiteral<1>;
+        issuer: z.ZodString;
+        resource: z.ZodURL;
+        authorizationEndpoint: z.ZodURL;
+        tokenEndpoint: z.ZodURL;
+        registrationEndpoint: z.ZodOptional<z.ZodURL>;
+        requireIssuer: z.ZodBoolean;
+    }, z.core.$strip>;
+    generation: z.ZodString;
+    revision: z.ZodNumber;
+    clientInfo: z.ZodOptional<z.ZodString>;
+    tokens: z.ZodOptional<z.ZodString>;
+    discovery: z.ZodString;
+    attempts: z.ZodRecord<z.ZodString, z.ZodObject<{
+        authority: z.ZodObject<{
+            owner: z.ZodString;
+            source: z.ZodString;
+            route: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    http: "http";
+                    sse: "sse";
+                }>;
+                connectionKey: z.ZodString;
+                url: z.ZodURL;
+            }, z.core.$strip>;
+            configuration: z.ZodString;
+            version: z.ZodLiteral<1>;
+            issuer: z.ZodString;
+            resource: z.ZodURL;
+            authorizationEndpoint: z.ZodURL;
+            tokenEndpoint: z.ZodURL;
+            registrationEndpoint: z.ZodOptional<z.ZodURL>;
+            requireIssuer: z.ZodBoolean;
+        }, z.core.$strip>;
+        generation: z.ZodString;
+        redirect: z.ZodString;
+        verifier: z.ZodString;
+        createdAt: z.ZodNumber;
+        expires: z.ZodNumber;
+        consumed: z.ZodBoolean;
+        adminReturnOrigin: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    createdAt: z.ZodNumber;
+    expires: z.ZodNumber;
+}, z.core.$strip>;
+export type BoundClientSession = z.infer<typeof BoundClientSessionSchema>;
+export declare function oauthDigest(value: unknown): string;
+/** Secret-bearing configuration fingerprints must resist offline guessing. */
+export declare function oauthConfigurationFingerprint(value: unknown, scope: unknown): string;
+export declare function oauthConfigurationFingerprintAsync(value: unknown, scope: unknown): Promise<string>;
+export declare function authoritySlot(context: OAuthAuthorityContext): string;
+export declare function sameAuthority(a: OAuthAuthority, b: OAuthAuthority): boolean;
+export declare function matchesAuthorityContext(authority: OAuthAuthority, context: OAuthAuthorityContext): boolean;
+export declare function oauthAuthorityError(): Error;
+export declare class OAuthAuthorizationDeniedError extends Error {
+    readonly errorCode: 'access_denied' | 'provider_error';
+    constructor(errorCode: 'access_denied' | 'provider_error');
+}
+//# sourceMappingURL=oauthAuthority.d.ts.map

package/build/auth/oauthAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthAuthority.d.ts","sourceRoot":"","sources":["../../src/auth/oauthAuthority.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB,QAAiB,CAAC;AACnD,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAC/D,eAAO,MAAM,gBAAgB;;;;;;;iBAI3B,CAAC;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;iBAKtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;iBAQ/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAUnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD;AAID,8EAA8E;AAC9E,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAOpF;AAED,wBAAsB,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAUxG;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAUpE;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,GAAG,OAAO,CAE3E;AACD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAK1G;AACD,wBAAgB,mBAAmB,IAAI,KAAK,CAE3C;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,gBAAgB;gBAA7C,SAAS,EAAE,eAAe,GAAG,gBAAgB;CAGnE"}

package/build/auth/oauthAuthority.js

@@ -0,0 +1,101 @@
+import { createHash, scrypt, scryptSync } from 'node:crypto';
+import { z } from 'zod';
+export const OAUTH_ATTEMPT_TTL_MS = 15 * 60 * 1000;
+export const OAUTH_MAX_ATTEMPTS = 32;
+export const OAUTH_AUTHORITY_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+export const OAuthRouteSchema = z.object({
+    kind: z.enum(['http', 'sse']),
+    connectionKey: z.string().min(1),
+    url: z.url(),
+});
+export const OAuthAuthorityContextSchema = z.object({
+    owner: z.string().min(1),
+    source: z.string().min(1),
+    route: OAuthRouteSchema,
+    configuration: z.string().min(1),
+});
+export const OAuthAuthoritySchema = OAuthAuthorityContextSchema.extend({
+    version: z.literal(1),
+    issuer: z.string().min(1),
+    resource: z.url(),
+    authorizationEndpoint: z.url(),
+    tokenEndpoint: z.url(),
+    registrationEndpoint: z.url().optional(),
+    requireIssuer: z.boolean(),
+});
+export const OAuthAttemptSchema = z.object({
+    authority: OAuthAuthoritySchema,
+    generation: z.string().min(1),
+    redirect: z.string().min(1),
+    verifier: z.string().min(43).max(128),
+    createdAt: z.number(),
+    expires: z.number(),
+    consumed: z.boolean(),
+    adminReturnOrigin: z.string().optional(),
+});
+export const BoundClientSessionSchema = z.object({
+    authority: OAuthAuthoritySchema,
+    generation: z.string().min(1),
+    revision: z.number().int().nonnegative(),
+    clientInfo: z.string().optional(),
+    tokens: z.string().optional(),
+    discovery: z.string(),
+    attempts: z.record(z.string(), OAuthAttemptSchema),
+    createdAt: z.number(),
+    expires: z.number(),
+});
+export function oauthDigest(value) {
+    // This deterministic digest identifies durable OAuth authority/configuration state
+    // and correlates opaque protocol values; it does not store or verify passwords.
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+const authoritySlots = new Map();
+const fingerprintOptions = { N: 32768, r: 8, p: 1, maxmem: 64 * 1024 * 1024 };
+/** Secret-bearing configuration fingerprints must resist offline guessing. */
+export function oauthConfigurationFingerprint(value, scope) {
+    return scryptSync(JSON.stringify(value), JSON.stringify(['1mcp-oauth-config-v1', scope]), 32, fingerprintOptions).toString('hex');
+}
+export async function oauthConfigurationFingerprintAsync(value, scope) {
+    const input = JSON.stringify(value);
+    const salt = JSON.stringify(['1mcp-oauth-config-v1', scope]);
+    const fingerprint = await new Promise((resolve, reject) => {
+        scrypt(input, salt, 32, fingerprintOptions, (error, result) => {
+            if (error)
+                reject(error);
+            else
+                resolve(result);
+        });
+    });
+    return fingerprint.toString('hex');
+}
+export function authoritySlot(context) {
+    // These stable identity labels contain no configuration credentials.
+    const identity = [context.owner, context.source, context.route.connectionKey];
+    const key = JSON.stringify(identity);
+    const cached = authoritySlots.get(key);
+    if (cached !== undefined)
+        return cached;
+    const slot = oauthConfigurationFingerprint(identity, 'authority-slot');
+    if (authoritySlots.size >= 128)
+        authoritySlots.delete(authoritySlots.keys().next().value);
+    authoritySlots.set(key, slot);
+    return slot;
+}
+export function sameAuthority(a, b) {
+    return JSON.stringify(OAuthAuthoritySchema.parse(a)) === JSON.stringify(OAuthAuthoritySchema.parse(b));
+}
+export function matchesAuthorityContext(authority, context) {
+    return (JSON.stringify(OAuthAuthorityContextSchema.parse(authority)) ===
+        JSON.stringify(OAuthAuthorityContextSchema.parse(context)));
+}
+export function oauthAuthorityError() {
+    return new Error('OAuth authority or authorization attempt is no longer valid; start authorization again');
+}
+export class OAuthAuthorizationDeniedError extends Error {
+    errorCode;
+    constructor(errorCode) {
+        super('OAuth authorization was denied; start authorization again');
+        this.errorCode = errorCode;
+    }
+}
+//# sourceMappingURL=oauthAuthority.js.map

package/build/auth/oauthAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthAuthority.js","sourceRoot":"","sources":["../../src/auth/oauthAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;CACb,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,gBAAgB;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,qBAAqB,EAAE,CAAC,CAAC,GAAG,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE;IACtB,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,oBAAoB;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,oBAAoB;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,mFAAmF;IACnF,gFAAgF;IAChF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AACjD,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAE9E,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,KAAc,EAAE,KAAc;IAC1E,OAAO,UAAU,CACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACrB,IAAI,CAAC,SAAS,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,EAC/C,EAAE,EACF,kBAAkB,CACnB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAAc,EAAE,KAAc;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC5D,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA8B;IAC1D,qEAAqE;IACrE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACvE,IAAI,cAAc,CAAC,IAAI,IAAI,GAAG;QAAE,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;IAC3F,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAiB,EAAE,CAAiB;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,SAAyB,EAAE,OAA8B;IAC/F,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,SAA6C;QAChE,KAAK,CAAC,2DAA2D,CAAC,CAAC;QADhD,cAAS,GAAT,SAAS,CAAoC;IAElE,CAAC;CACF"}

package/build/auth/oauthAuthorizationFlow.d.ts

@@ -42,7 +42,11 @@ export interface OAuthBackendServerRuntime {
     getClients?(): Map<string, OAuthBackendClientInfoForFlow>;
 }
 export interface OAuthBackendClientRuntime {
-    initiateOAuth(serverName: string): Promise<void>;
+    initiateOAuth(serverName: string, options?: {
+        restart?: boolean;
+    }): Promise<void>;
+    bindOAuthReturn?(serverName: string, state: string, origin: string): Promise<void>;
+    getOAuthReturn?(serverName: string, state: string): string | undefined;
     completeOAuthAndReconnect(serverName: string, authorizationCode: string | URLSearchParams): Promise<void>;
 }
 export interface OAuthBackendLoadingRuntime {
@@ -59,6 +63,7 @@ export interface OAuthAuthorizationFlowDependencies {
         oauthTokenTtlMs: number;
     };
     getAvailableTags: () => string[];
+    getResourceUrl: () => string;
 }
 export interface SubmitConsentInput {
     authRequestId?: string;
@@ -94,6 +99,7 @@ export interface BackendOAuthCallbackInput {
     code?: string;
     error?: string;
     iss?: string;
+    redirectUri?: string;
 }
 export type StartBackendOAuthResult = {
     status: 'redirect';

package/build/auth/oauthAuthorizationFlow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauthAuthorizationFlow.d.ts","sourceRoot":"","sources":["../../src/auth/oauthAuthorizationFlow.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,gCAAgC,GAAG,IAAI,GAAG,SAAS,CAAC;IACpG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACxD,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IACvG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,mBAAmB,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,MAAM,GACvB,MAAM,CAAC;CACX;AAED,MAAM,WAAW,oCAAoC;IACnD,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,gCAAgC,GAAG,IAAI,GAAG,SAAS,CAAC;IACpG,oBAAoB,EAAE;QACpB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;KACpD,CAAC;IACF,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IACvG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,iBAAiB,EAAE;QACjB,YAAY,CACV,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,MAAM,GACvB,MAAM,CAAC;KACX,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,6BAA6B,GAAG,SAAS,CAAC;IACzE,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3G;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,6BAA6B,CAAC;IACvC,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,gBAAgB,EAAE,MAAM,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,MAAM,EAAE,mBAAmB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAAC;IAC/D,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B;IACE,YAAY,EAAE,KAAK,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,YAAY,EAAE,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,qBAAqB,CAAC;IAC9E,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,yBAAyB,GACjC;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,qBAAqB,CAAC;IAC9E,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,kCAAkC,GAC1C;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,MAAM,EAAE,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,GAAG,qBAAqB,CAAC;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;CAC1C,GACD;IACE,MAAM,EAAE,qBAAqB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,uBAAuB,IAAI,uBAAuB,CAAC;IACnD,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9E,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClF,4BAA4B,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC5G,wBAAwB,IAAI,2BAA2B,CAAC;CACzD;AAED,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,oCAAoC,CAAC;IACnD,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,kCAAkC,GAAG,sBAAsB,CA0PrH;AAED,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,oCAAoC,EAC7C,YAAY,EAAE,IAAI,CAAC,kCAAkC,EAAE,SAAS,CAAC,GAChE,sBAAsB,CAaxB;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,8BAA8B,EAC7C,YAAY,EAAE,IAAI,CAAC,kCAAkC,EAAE,SAAS,CAAC,GAChE,sBAAsB,CAExB"}
+{"version":3,"file":"oauthAuthorizationFlow.d.ts","sourceRoot":"","sources":["../../src/auth/oauthAuthorizationFlow.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAKpE,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,gCAAgC,GAAG,IAAI,GAAG,SAAS,CAAC;IACpG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACxD,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IACvG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,mBAAmB,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,MAAM,GACvB,MAAM,CAAC;CACX;AAED,MAAM,WAAW,oCAAoC;IACnD,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,gCAAgC,GAAG,IAAI,GAAG,SAAS,CAAC;IACpG,oBAAoB,EAAE;QACpB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;KACpD,CAAC;IACF,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IACvG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,iBAAiB,EAAE;QACjB,YAAY,CACV,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,MAAM,GACvB,MAAM,CAAC;KACX,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,6BAA6B,GAAG,SAAS,CAAC;IACzE,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,eAAe,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,cAAc,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvE,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3G;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,6BAA6B,CAAC;IACvC,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,gBAAgB,EAAE,MAAM,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,MAAM,EAAE,mBAAmB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAAC;IAC/D,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B;IACE,YAAY,EAAE,KAAK,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,YAAY,EAAE,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,qBAAqB,CAAC;IAC9E,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,yBAAyB,GACjC;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,qBAAqB,CAAC;IAC9E,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,kCAAkC,GAC1C;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,MAAM,EAAE,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,GAAG,qBAAqB,CAAC;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;CAC1C,GACD;IACE,MAAM,EAAE,qBAAqB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,uBAAuB,IAAI,uBAAuB,CAAC;IACnD,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9E,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClF,4BAA4B,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC5G,wBAAwB,IAAI,2BAA2B,CAAC;CACzD;AAED,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,oCAAoC,CAAC;IACnD,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,kCAAkC,GAAG,sBAAsB,CAiPrH;AAED,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,oCAAoC,EAC7C,YAAY,EAAE,IAAI,CAAC,kCAAkC,EAAE,SAAS,CAAC,GAChE,sBAAsB,CAaxB;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,8BAA8B,EAC7C,YAAY,EAAE,IAAI,CAAC,kCAAkC,EAAE,SAAS,CAAC,GAChE,sBAAsB,CAExB"}

package/build/auth/oauthAuthorizationFlow.js

@@ -1,29 +1,17 @@
-import { randomUUID } from 'node:crypto';
 import { AUTH_CONFIG } from '../constants.js';
+import { writeLocalDiagnostic } from '../logger/localDiagnostics.js';
 import logger from '../logger/logger.js';
 import { tagsToScopes, validateScopes } from '../utils/validation/scopeValidation.js';
+import { OAuthAuthorizationDeniedError } from './oauthAuthority.js';
 export function createOAuthAuthorizationFlow(dependencies) {
-    // Return context is short-lived, single-use and independent of Admin credentials.
-    const returns = new Map();
-    function bindReturn(authorizationUrl, input) {
+    async function bindReturn(authorizationUrl, input) {
         if (!input.adminReturnOrigin)
             return authorizationUrl;
-        for (const [key, value] of returns) {
-            if (value.expiresAt <= Date.now())
-                returns.delete(key);
-        }
-        if (returns.size >= 1000)
+        const state = new URL(authorizationUrl).searchParams.get('state');
+        if (!state || !dependencies.clientRuntime?.bindOAuthReturn)
             return undefined;
-        const url = new URL(authorizationUrl);
-        const state = `admin_return_${randomUUID()}`;
-        returns.set(state, {
-            serverName: input.serverName,
-            origin: input.adminReturnOrigin,
-            providerState: url.searchParams.get('state') ?? undefined,
-            expiresAt: Date.now() + 600_000,
-        });
-        url.searchParams.set('state', state);
-        return url.toString();
+        await dependencies.clientRuntime.bindOAuthReturn(input.serverName, state, input.adminReturnOrigin);
+        return authorizationUrl;
     }
     return {
         createLocalhostCliToken() {
@@ -37,7 +25,7 @@ export function createOAuthAuthorizationFlow(dependencies) {
             const tokenId = dependencies.createTokenId();
             const accessToken = AUTH_CONFIG.SERVER.TOKEN.ID_PREFIX + tokenId;
             const allScopes = tagsToScopes(dependencies.getAvailableTags());
-            dependencies.storage.createSessionWithId(tokenId, 'cli', '', allScopes, authConfig.oauthTokenTtlMs);
+            dependencies.storage.createSessionWithId(tokenId, 'cli', new URL(dependencies.getResourceUrl()).href, allScopes, authConfig.oauthTokenTtlMs);
             return {
                 authRequired: true,
                 token: accessToken,
@@ -106,11 +94,11 @@ export function createOAuthAuthorizationFlow(dependencies) {
             if (started.status !== 'started') {
                 return started;
             }
-            const redirectUrl = bindReturn(started.authorizationUrl, input);
+            const redirectUrl = await bindReturn(started.authorizationUrl, input);
             if (!redirectUrl) {
                 return {
                     status: 'oauth_url_unavailable',
-                    errorDescription: 'Too many pending Admin OAuth return transactions',
+                    errorDescription: 'Unable to bind the OAuth return; start authorization again',
                 };
             }
             return {
@@ -135,15 +123,15 @@ export function createOAuthAuthorizationFlow(dependencies) {
             clientInfo.authorizationUrl = undefined;
             clientInfo.oauthStartTime = undefined;
             clientInfo.status = 'disconnected';
-            const started = await initiateBackendOAuth(input.serverName, dependencies);
+            const started = await initiateBackendOAuth(input.serverName, dependencies, { restart: true });
             if (started.status !== 'started') {
                 return started;
             }
-            const redirectUrl = bindReturn(started.authorizationUrl, input);
+            const redirectUrl = await bindReturn(started.authorizationUrl, input);
             if (!redirectUrl) {
                 return {
                     status: 'oauth_url_unavailable',
-                    errorDescription: 'Too many pending Admin OAuth return transactions',
+                    errorDescription: 'Unable to bind the OAuth return; start authorization again',
                 };
             }
             return {
@@ -152,55 +140,59 @@ export function createOAuthAuthorizationFlow(dependencies) {
             };
         },
         async completeBackendOAuthCallback(input) {
-            const context = input.state ? returns.get(input.state) : undefined;
-            if (input.state)
-                returns.delete(input.state);
-            const adminReturnOrigin = context && context.serverName === input.serverName && context.expiresAt > Date.now()
-                ? context.origin
-                : undefined;
-            const returnContext = adminReturnOrigin ? { adminReturnOrigin } : {};
-            if (input.state?.startsWith('admin_return_') && !adminReturnOrigin) {
-                return { status: 'callback_failed', errorDescription: 'Invalid or expired OAuth return transaction' };
-            }
-            if (input.error) {
-                return {
-                    ...returnContext,
-                    status: 'provider_error',
-                    errorDescription: input.error,
-                };
-            }
-            if (!input.code) {
-                return {
-                    ...returnContext,
-                    status: 'missing_code',
-                    errorDescription: 'Missing authorization code',
-                };
+            if (!input.state) {
+                writeLocalDiagnostic('warn', 'oauth.callback.rejected', {
+                    serverName: input.serverName,
+                    stage: 'validate_state',
+                    reason: 'missing_state',
+                });
+                return { status: 'callback_failed', errorDescription: 'Invalid or expired OAuth authorization attempt' };
             }
             if (!dependencies.clientRuntime) {
-                return {
-                    ...returnContext,
-                    status: 'runtime_unavailable',
-                    errorDescription: 'Backend OAuth runtime is unavailable',
-                };
+                writeLocalDiagnostic('warn', 'oauth.callback.rejected', {
+                    serverName: input.serverName,
+                    stage: 'runtime',
+                    reason: 'runtime_unavailable',
+                });
+                return { status: 'runtime_unavailable', errorDescription: 'Backend OAuth runtime is unavailable' };
             }
+            const response = new URLSearchParams({ state: input.state });
+            if (input.code !== undefined)
+                response.set('code', input.code);
+            if (input.error !== undefined)
+                response.set('error', input.error);
+            if (input.iss !== undefined)
+                response.set('iss', input.iss);
+            if (input.redirectUri !== undefined)
+                response.set('redirect_uri', input.redirectUri);
+            const startedAt = Date.now();
             try {
-                const authorizationResponse = input.iss === undefined && !context?.providerState
-                    ? input.code
-                    : new URLSearchParams({
-                        code: input.code,
-                        ...(input.iss ? { iss: input.iss } : {}),
-                        ...(context?.providerState ? { state: context.providerState } : {}),
-                    });
-                await dependencies.clientRuntime.completeOAuthAndReconnect(input.serverName, authorizationResponse);
+                await dependencies.clientRuntime.completeOAuthAndReconnect(input.serverName, response);
                 dependencies.loadingRuntime?.markReady(input.serverName);
-                return { status: 'completed', ...returnContext };
+                writeLocalDiagnostic('info', 'oauth.callback.completed', {
+                    serverName: input.serverName,
+                    stage: 'reconnected',
+                    durationMs: Date.now() - startedAt,
+                });
+                const adminReturnOrigin = dependencies.clientRuntime.getOAuthReturn?.(input.serverName, input.state);
+                return { status: 'completed', ...(adminReturnOrigin ? { adminReturnOrigin } : {}) };
             }
             catch (error) {
-                logger.error('oauthAuthorizationFlow.oauth.callback.completion.failed.for.758a88bb', { error: error });
+                logger.error('oauthAuthorizationFlow.oauth.callback.completion.failed.for.758a88bb');
+                writeLocalDiagnostic('warn', 'oauth.callback.failed', () => ({
+                    serverName: input.serverName,
+                    stage: 'complete_and_reconnect',
+                    durationMs: Date.now() - startedAt,
+                    reason: error instanceof OAuthAuthorizationDeniedError ? 'provider_denied' : 'callback_rejected',
+                    errorType: error instanceof Error ? 'Error' : 'unknown',
+                }));
+                const adminReturnOrigin = dependencies.clientRuntime.getOAuthReturn?.(input.serverName, input.state);
                 return {
-                    ...returnContext,
-                    status: 'callback_failed',
-                    errorDescription: 'Failed to complete OAuth callback',
+                    status: error instanceof OAuthAuthorizationDeniedError ? 'provider_error' : 'callback_failed',
+                    errorDescription: error instanceof OAuthAuthorizationDeniedError
+                        ? error.errorCode
+                        : 'OAuth callback rejected; start authorization again',
+                    ...(adminReturnOrigin ? { adminReturnOrigin } : {}),
                 };
             }
         },
@@ -254,7 +246,7 @@ function normalizeSubmittedScopes(scopes) {
     }
     return [];
 }
-async function initiateBackendOAuth(serverName, dependencies) {
+async function initiateBackendOAuth(serverName, dependencies, options) {
     if (!dependencies.serverRuntime) {
         return {
             status: 'runtime_unavailable',
@@ -268,19 +260,13 @@ async function initiateBackendOAuth(serverName, dependencies) {
             errorDescription: 'Service not found',
         };
     }
-    if (clientInfo.authorizationUrl) {
-        return {
-            status: 'started',
-            authorizationUrl: clientInfo.authorizationUrl,
-        };
-    }
     if (!dependencies.clientRuntime) {
         return {
             status: 'runtime_unavailable',
             errorDescription: 'Backend OAuth runtime is unavailable',
         };
     }
-    await dependencies.clientRuntime.initiateOAuth(serverName);
+    await dependencies.clientRuntime.initiateOAuth(serverName, options);
     if (!clientInfo.authorizationUrl) {
         return {
             status: 'oauth_url_unavailable',

package/build/auth/oauthAuthorizationFlow.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauthAuthorizationFlow.js","sourceRoot":"","sources":["../../src/auth/oauthAuthorizationFlow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AA8LxF,MAAM,UAAU,4BAA4B,CAAC,YAAgD;IAC3F,kFAAkF;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6F,CAAC;IACrH,SAAS,UAAU,CAAC,gBAAwB,EAAE,KAAwB;QACpE,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,OAAO,gBAAgB,CAAC;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,UAAU,EAAE,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACjB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,iBAAiB;YAC/B,aAAa,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;YACzD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAChC,CAAC,CAAC;QACH,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IACD,OAAO;QACL,uBAAuB;YACrB,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO;oBACL,YAAY,EAAE,KAAK;oBACnB,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;YACjE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAEhE,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;YAEpG,OAAO;gBACL,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC;gBACxD,OAAO;aACR,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAyB;YAC3C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YAExC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,gBAAgB,EAAE,6BAA6B;iBAChD,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;YAChF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,gBAAgB,EAAE,0CAA0C;iBAC7D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,gBAAgB;oBACxB,gBAAgB,EAAE,kBAAkB;iBACrC,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;gBACnF,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;iBACpC,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9D,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO;wBACL,MAAM,EAAE,eAAe;wBACvB,gBAAgB,EAAE,mBAAmB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACpE,CAAC;gBACJ,CAAC;gBAED,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1G,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClC,OAAO;wBACL,MAAM,EAAE,eAAe;wBACvB,gBAAgB,EAAE,gEAAgE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAClH,CAAC;gBACJ,CAAC;gBAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,sBAAsB,CACvE,aAAa,EACb,UAAU,CAAC,WAAW,CACvB,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,mBAAmB;oBAC3B,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;iBACpC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,iBAAiB;gBACzB,gBAAgB,EAAE,gBAAgB;aACnC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAwB;YAC9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,gBAAgB,EAAE,kDAAkD;iBACrE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,KAAwB;YAChD,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBAC/D,OAAO;oBACL,MAAM,EAAE,qBAAqB;oBAC7B,gBAAgB,EAAE,sCAAsC;iBACzD,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,MAAM,EAAE,mBAAmB;oBAC3B,gBAAgB,EAAE,mBAAmB;iBACtC,CAAC;YACJ,CAAC;YAED,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;YACxC,UAAU,CAAC,cAAc,GAAG,SAAS,CAAC;YACtC,UAAU,CAAC,MAAM,GAAG,cAAc,CAAC;YAEnC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,gBAAgB,EAAE,kDAAkD;iBACrE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,4BAA4B,CAAC,KAAgC;YACjE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GACrB,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;gBAClF,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,aAAa,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACnE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,6CAA6C,EAAE,CAAC;YACxG,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO;oBACL,GAAG,aAAa;oBAChB,MAAM,EAAE,gBAAgB;oBACxB,gBAAgB,EAAE,KAAK,CAAC,KAAK;iBAC9B,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,OAAO;oBACL,GAAG,aAAa;oBAChB,MAAM,EAAE,cAAc;oBACtB,gBAAgB,EAAE,4BAA4B;iBAC/C,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBAChC,OAAO;oBACL,GAAG,aAAa;oBAChB,MAAM,EAAE,qBAAqB;oBAC7B,gBAAgB,EAAE,sCAAsC;iBACzD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,qBAAqB,GACzB,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,aAAa;oBAChD,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAC,IAAI,eAAe,CAAC;wBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;gBACT,MAAM,YAAY,CAAC,aAAa,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;gBACpG,YAAY,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,aAAa,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,sEAAsE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvG,OAAO;oBACL,GAAG,aAAa;oBAChB,MAAM,EAAE,iBAAiB;oBACzB,gBAAgB,EAAE,mCAAmC;iBACtD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;YACtB,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC;gBAC5C,OAAO;oBACL,MAAM,EAAE,qBAAqB;oBAC7B,gBAAgB,EAAE,sCAAsC;iBACzD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1G,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO;gBACxC,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,aAAa,EAAE,oBAAoB,CAAC,UAAU,CAAC;aAChD,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,QAAQ;aACT,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,OAA6C,EAC7C,YAAiE;IAEjE,OAAO,4BAA4B,CAAC;QAClC,GAAG,YAAY;QACf,OAAO,EAAE;YACP,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC;YAC1F,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC7G,sBAAsB,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,EAAE,CACxD,OAAO,CAAC,sBAAsB,CAAC,aAAa,EAAE,cAAc,CAAC;YAC/D,oBAAoB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YACpF,mBAAmB,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CACnF,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC;SACtG;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAA6C,EAC7C,YAAiE;IAEjE,OAAO,aAAa,CAAC,SAAS,IAAI,uCAAuC,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAe;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAYD,KAAK,UAAU,oBAAoB,CACjC,UAAkB,EAClB,YAAgD;IAEhD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE,sCAAsC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,mBAAmB;YAC3B,gBAAgB,EAAE,mBAAmB;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE,sCAAsC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,EAAE,8BAA8B;SACjD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAyC;IACrE,OAAO,OAAO,CACZ,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,gBAAgB;QAC3B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,MAAM,KAAK,gBAAgB,CACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"oauthAuthorizationFlow.js","sourceRoot":"","sources":["../../src/auth/oauthAuthorizationFlow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAExF,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAkMpE,MAAM,UAAU,4BAA4B,CAAC,YAAgD;IAC3F,KAAK,UAAU,UAAU,CAAC,gBAAwB,EAAE,KAAwB;QAC1E,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,OAAO,gBAAgB,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,eAAe;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,YAAY,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnG,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,uBAAuB;YACrB,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO;oBACL,YAAY,EAAE,KAAK;oBACnB,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;YACjE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAEhE,YAAY,CAAC,OAAO,CAAC,mBAAmB,CACtC,OAAO,EACP,KAAK,EACL,IAAI,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,EAC3C,SAAS,EACT,UAAU,CAAC,eAAe,CAC3B,CAAC;YAEF,OAAO;gBACL,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC;gBACxD,OAAO;aACR,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAyB;YAC3C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YAExC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,gBAAgB,EAAE,6BAA6B;iBAChD,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;YAChF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,gBAAgB,EAAE,0CAA0C;iBAC7D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,gBAAgB;oBACxB,gBAAgB,EAAE,kBAAkB;iBACrC,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;gBACnF,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;iBACpC,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9D,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO;wBACL,MAAM,EAAE,eAAe;wBACvB,gBAAgB,EAAE,mBAAmB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACpE,CAAC;gBACJ,CAAC;gBAED,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1G,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClC,OAAO;wBACL,MAAM,EAAE,eAAe;wBACvB,gBAAgB,EAAE,gEAAgE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAClH,CAAC;gBACJ,CAAC;gBAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,sBAAsB,CACvE,aAAa,EACb,UAAU,CAAC,WAAW,CACvB,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,mBAAmB;oBAC3B,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;iBACpC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,iBAAiB;gBACzB,gBAAgB,EAAE,gBAAgB;aACnC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAwB;YAC9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,gBAAgB,EAAE,4DAA4D;iBAC/E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,KAAwB;YAChD,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBAC/D,OAAO;oBACL,MAAM,EAAE,qBAAqB;oBAC7B,gBAAgB,EAAE,sCAAsC;iBACzD,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,MAAM,EAAE,mBAAmB;oBAC3B,gBAAgB,EAAE,mBAAmB;iBACtC,CAAC;YACJ,CAAC;YAED,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;YACxC,UAAU,CAAC,cAAc,GAAG,SAAS,CAAC;YACtC,UAAU,CAAC,MAAM,GAAG,cAAc,CAAC;YAEnC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,gBAAgB,EAAE,4DAA4D;iBAC/E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,4BAA4B,CAAC,KAAgC;YACjE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,oBAAoB,CAAC,MAAM,EAAE,yBAAyB,EAAE;oBACtD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,KAAK,EAAE,gBAAgB;oBACvB,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gDAAgD,EAAE,CAAC;YAC3G,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBAChC,oBAAoB,CAAC,MAAM,EAAE,yBAAyB,EAAE;oBACtD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,qBAAqB;iBAC9B,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,sCAAsC,EAAE,CAAC;YACrG,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,aAAa,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACvF,YAAY,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzD,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,EAAE;oBACvD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,KAAK,EAAE,aAAa;oBACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC,CAAC;gBACH,MAAM,iBAAiB,GAAG,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;gBACrF,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC3D,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,KAAK,EAAE,wBAAwB;oBAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,MAAM,EAAE,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB;oBAChG,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;iBACxD,CAAC,CAAC,CAAC;gBACJ,MAAM,iBAAiB,GAAG,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrG,OAAO;oBACL,MAAM,EAAE,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;oBAC7F,gBAAgB,EACd,KAAK,YAAY,6BAA6B;wBAC5C,CAAC,CAAC,KAAK,CAAC,SAAS;wBACjB,CAAC,CAAC,oDAAoD;oBAC1D,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;YACtB,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC;gBAC5C,OAAO;oBACL,MAAM,EAAE,qBAAqB;oBAC7B,gBAAgB,EAAE,sCAAsC;iBACzD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1G,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO;gBACxC,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,aAAa,EAAE,oBAAoB,CAAC,UAAU,CAAC;aAChD,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,QAAQ;aACT,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,OAA6C,EAC7C,YAAiE;IAEjE,OAAO,4BAA4B,CAAC;QAClC,GAAG,YAAY;QACf,OAAO,EAAE;YACP,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC;YAC1F,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC7G,sBAAsB,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,EAAE,CACxD,OAAO,CAAC,sBAAsB,CAAC,aAAa,EAAE,cAAc,CAAC;YAC/D,oBAAoB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YACpF,mBAAmB,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CACnF,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC;SACtG;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAA6C,EAC7C,YAAiE;IAEjE,OAAO,aAAa,CAAC,SAAS,IAAI,uCAAuC,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAe;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAYD,KAAK,UAAU,oBAAoB,CACjC,UAAkB,EAClB,YAAgD,EAChD,OAA+B;IAE/B,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE,sCAAsC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,mBAAmB;YAC3B,gBAAgB,EAAE,mBAAmB;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE,sCAAsC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEpE,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,EAAE,8BAA8B;SACjD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAyC;IACrE,OAAO,OAAO,CACZ,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,gBAAgB;QAC3B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,MAAM,KAAK,gBAAgB,CACvC,CAAC;AACJ,CAAC"}

package/build/auth/oauthEndpointFetch.d.ts

@@ -0,0 +1,20 @@
+export declare const OAUTH_RESPONSE_LIMIT: number;
+export declare const OAUTH_FETCH_TIMEOUT_MS = 10000;
+export declare class OAuthResourceRedirectError extends Error {
+    constructor();
+}
+export declare function isPrivateOAuthAddress(address: string): boolean;
+export declare function validateOAuthEndpoint(value: string, configuredResource: string, expectedOrigin?: string, configuredIssuer?: string): URL;
+/** Pin the DNS result into the actual socket lookup, not just a preflight check. */
+export declare function createOAuthEndpointFetch(options: {
+    resource: string;
+    issuer?: string;
+    isResource: (url: URL) => boolean;
+    acceptSseEndpoint?: (endpoint: string) => void;
+    beforeRequest: (url: URL, init: RequestInit) => Promise<RequestInit>;
+    pinDestination: (host: string, addresses: string, init: RequestInit) => Promise<void>;
+    onFailure: (resourceRequest: boolean) => void;
+    response: (value: Record<string, unknown>, url: URL, init: RequestInit) => void;
+    metadata: (value: Record<string, unknown>, url: URL, init: RequestInit) => Record<string, unknown>;
+}): typeof fetch;
+//# sourceMappingURL=oauthEndpointFetch.d.ts.map

package/build/auth/oauthEndpointFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthEndpointFetch.d.ts","sourceRoot":"","sources":["../../src/auth/oauthEndpointFetch.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,oBAAoB,QAAc,CAAC;AAChD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,qBAAa,0BAA2B,SAAQ,KAAK;;CAIpD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2B9D;AAaD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,MAAM,EACvB,gBAAgB,CAAC,EAAE,MAAM,GACxB,GAAG,CAcL;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IAClC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,SAAS,EAAE,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAChF,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpG,GAAG,OAAO,KAAK,CA6Kf"}