@absolutejs/auth 0.29.0-beta.1 → 0.29.0-beta.2

package/dist/oidc/clientAuth.d.ts

@@ -0,0 +1,8 @@
+import type { ClientAssertionJtiStore, OAuthClient } from './types';
+export declare const CLIENT_ASSERTION_TYPE = "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+export declare const verifyClientAssertion: ({ assertion, expectedAudience, jtiStore, resolveClient }: {
+    assertion: string;
+    expectedAudience: string;
+    jtiStore?: ClientAssertionJtiStore;
+    resolveClient: (clientId: string) => Promise<OAuthClient | undefined>;
+}) => Promise<OAuthClient | undefined>;

package/dist/oidc/config.d.ts

@@ -1,10 +1,11 @@
 import type { RouteString } from '../types';
 import { type SigningKey } from './keys';
-import type { AuthorizationCodeStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClientStore, OidcRefreshTokenStore } from './types';
+import type { AuthorizationCodeStore, ClientAssertionJtiStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClientStore, OidcRefreshTokenStore } from './types';
 export declare const DEFAULT_OIDC_ROUTE: RouteString;
 export type OidcProviderConfig<UserType> = {
     accessTokenTtlMs?: number;
     authorizationCodeStore: AuthorizationCodeStore;
+    clientAssertionJtiStore?: ClientAssertionJtiStore;
     clientStore: OAuthClientStore;
     deviceAuthorizationStore?: DeviceAuthorizationStore;
     deviceCodeTtlMs?: number;

package/dist/oidc/inMemoryStores.d.ts

@@ -1,5 +1,6 @@
-import type { AuthorizationCodeStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClient, OAuthClientStore, OidcRefreshTokenStore } from './types';
+import type { AuthorizationCodeStore, ClientAssertionJtiStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClient, OAuthClientStore, OidcRefreshTokenStore } from './types';
 export declare const createInMemoryAuthorizationCodeStore: () => AuthorizationCodeStore;
+export declare const createInMemoryClientAssertionJtiStore: () => ClientAssertionJtiStore;
 export declare const createInMemoryDeviceAuthorizationStore: () => DeviceAuthorizationStore;
 export declare const createInMemoryLogoutDeliveryStore: () => LogoutDeliveryStore;
 export declare const createInMemoryOAuthClientStore: (clients: OAuthClient[]) => OAuthClientStore;

package/dist/oidc/postgresStores.d.ts

@@ -1,5 +1,86 @@
 import { type AnyPgDatabase } from '../stores/postgres';
-import type { AuthorizationCodeStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClientStore, OidcRefreshTokenStore } from './types';
+import type { AuthorizationCodeStore, ClientAssertionJtiStore, DeviceAuthorizationStore, LogoutDeliveryStore, OAuthClientStore, OidcRefreshTokenStore } from './types';
+export declare const oauthClientAssertionJtisTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "auth_oauth_client_assertion_jtis";
+    schema: undefined;
+    columns: {
+        client_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "client_id";
+            tableName: "auth_oauth_client_assertion_jtis";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        composite_key: import("drizzle-orm/pg-core").PgColumn<{
+            name: "composite_key";
+            tableName: "auth_oauth_client_assertion_jtis";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        expires_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at_ms";
+            tableName: "auth_oauth_client_assertion_jtis";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        jti: import("drizzle-orm/pg-core").PgColumn<{
+            name: "jti";
+            tableName: "auth_oauth_client_assertion_jtis";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+    };
+    dialect: "pg";
+}>;
 export declare const oauthClientsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "auth_oauth_clients";
     schema: undefined;
@@ -61,6 +142,44 @@ export declare const oauthClientsTable: import("drizzle-orm/pg-core").PgTableWit
         }, {}, {
             length: 255;
         }>;
+        jwks_json: import("drizzle-orm/pg-core").PgColumn<{
+            name: "jwks_json";
+            tableName: "auth_oauth_clients";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: JsonWebKey[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: JsonWebKey[];
+        }>;
+        jwks_uri: import("drizzle-orm/pg-core").PgColumn<{
+            name: "jwks_uri";
+            tableName: "auth_oauth_clients";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 2048;
+        }>;
         name: import("drizzle-orm/pg-core").PgColumn<{
             name: "name";
             tableName: "auth_oauth_clients";
@@ -992,11 +1111,13 @@ export declare const oauthRefreshTokensTable: import("drizzle-orm/pg-core").PgTa
     dialect: "pg";
 }>;
 export declare const createNeonAuthorizationCodeStore: (databaseUrl: string) => AuthorizationCodeStore;
+export declare const createNeonClientAssertionJtiStore: (databaseUrl: string) => ClientAssertionJtiStore;
 export declare const createNeonDeviceAuthorizationStore: (databaseUrl: string) => DeviceAuthorizationStore;
 export declare const createNeonLogoutDeliveryStore: (databaseUrl: string) => LogoutDeliveryStore;
 export declare const createNeonOAuthClientStore: (databaseUrl: string) => OAuthClientStore;
 export declare const createNeonOidcRefreshTokenStore: (databaseUrl: string) => OidcRefreshTokenStore;
 export declare const createPostgresAuthorizationCodeStore: (db: AnyPgDatabase) => AuthorizationCodeStore;
+export declare const createPostgresClientAssertionJtiStore: (db: AnyPgDatabase) => ClientAssertionJtiStore;
 export declare const createPostgresDeviceAuthorizationStore: (db: AnyPgDatabase) => DeviceAuthorizationStore;
 export declare const createPostgresLogoutDeliveryStore: (db: AnyPgDatabase) => LogoutDeliveryStore;
 export declare const createPostgresOAuthClientStore: (db: AnyPgDatabase) => OAuthClientStore;

package/dist/oidc/routes.d.ts

@@ -65,6 +65,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                 grant_type?: string | undefined;
                 code?: string | undefined;
                 redirect_uri?: string | undefined;
+                client_assertion?: string | undefined;
+                client_assertion_type?: string | undefined;
                 code_verifier?: string | undefined;
                 subject_token?: string | undefined;
                 subject_token_type?: string | undefined;

package/dist/oidc/types.d.ts

@@ -2,11 +2,16 @@ export type OAuthClient = {
     backchannelLogoutUri?: string;
     clientId: string;
     hashedSecret?: string;
+    jwks?: JsonWebKey[];
+    jwksUri?: string;
     name: string;
     postLogoutRedirectUris?: string[];
     redirectUris: string[];
     scopes: string[];
 };
+export type ClientAssertionJtiStore = {
+    recordIfFresh: (clientId: string, jti: string, expiresAt: number) => Promise<boolean>;
+};
 export type OAuthClientStore = {
     findClient: (clientId: string) => Promise<OAuthClient | undefined>;
 };

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.29.0-beta.1",
+	"version": "0.29.0-beta.2",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {