@absolutejs/auth 0.5.1 → 0.7.0

package/dist/index.js

@@ -101,21 +101,33 @@ var createRandomBase64UrlGenerator = (length) => () => {
 var generateCodeVerifier = createRandomBase64UrlGenerator(NUM_GENERATOR_BYTES);
 var generateState = createRandomBase64UrlGenerator(NUM_GENERATOR_BYTES);
 var base64Url = (input) => encodeBase64(input).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-var isValidProviderOption = (option) => {
-  const normalizedOption = option.toLowerCase();
-  return Object.keys(normalizedProviders).includes(normalizedOption);
+var isValidProviderOption = (option) => Object.hasOwn(providers, option);
+var isRefreshableProviderOption = (option) => {
+  if (!isValidProviderOption(option))
+    return false;
+  const provider = providers[option];
+  return provider.isRefreshable;
+};
+var isRevocableProviderOption = (option) => {
+  if (!isValidProviderOption(option))
+    return false;
+  const provider = providers[option];
+  return provider.revocationRequest !== undefined;
 };
-var isPKCEProviderOption = (option) => normalizedProviders[option.toLowerCase()]?.PKCEMethod !== undefined;
-var isRefreshableOAuth2Client = (providerName, client) => {
-  const normalizedOption = providerName.toLowerCase();
-  const provider = normalizedProviders[normalizedOption];
-  return isValidProviderOption(providerName) && provider?.isRefreshable === true;
+var isPKCEProviderOption = (option) => {
+  if (!isValidProviderOption(option))
+    return false;
+  const provider = providers[option];
+  return provider.PKCEMethod !== undefined;
 };
-var isRevocableOAuth2Client = (providerName, client) => {
-  const normalizedOption = providerName.toLowerCase();
-  const provider = normalizedProviders[normalizedOption];
-  return isValidProviderOption(providerName) && provider?.revocationRequest !== undefined;
+var isOIDCProviderOption = (option) => {
+  if (!isValidProviderOption(option))
+    return false;
+  const provider = providers[option];
+  return provider.isOIDC;
 };
+var isRefreshableOAuth2Client = (providerName, client) => isRefreshableProviderOption(providerName);
+var isRevocableOAuth2Client = (providerName, client) => isRevocableProviderOption(providerName);
 var hasClientSecret = (credentials) => {
   if (typeof credentials !== "object" || credentials === null)
     return false;
@@ -140,7 +152,7 @@ var providers = defineProviders({
       url: "https://api.intra.42.fr/oauth/token"
     }
   },
-  AmazonCognito: {
+  amazoncognito: {
     authorizationUrl: "https://${domain}/oauth2/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -162,7 +174,7 @@ var providers = defineProviders({
       url: (config) => `https://${config.domain}/oauth2/token`
     }
   },
-  AniList: {
+  anilist: {
     authorizationUrl: "https://anilist.co/api/v2/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -185,7 +197,7 @@ var providers = defineProviders({
       url: "https://anilist.co/api/v2/oauth/token"
     }
   },
-  Apple: {
+  apple: {
     authorizationUrl: "https://appleid.apple.com/auth/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -202,7 +214,7 @@ var providers = defineProviders({
       url: "https://appleid.apple.com/auth/token"
     }
   },
-  Atlassian: {
+  atlassian: {
     authorizationUrl: "https://auth.atlassian.com/authorize",
     createAuthorizationURLSearchParams: {
       audience: "api.atlassian.com"
@@ -221,7 +233,7 @@ var providers = defineProviders({
       url: "https://auth.atlassian.com/oauth/token"
     }
   },
-  Auth0: {
+  auth0: {
     authorizationUrl: (config) => `https://${config.domain}/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -246,7 +258,7 @@ var providers = defineProviders({
       url: (config) => `https://${config.domain}/oauth/token`
     }
   },
-  Authentik: {
+  authentik: {
     authorizationUrl: (config) => `https://${config.baseURL}/oauth/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -263,7 +275,7 @@ var providers = defineProviders({
       url: (config) => `https://${config.baseURL}/oauth/token`
     }
   },
-  Autodesk: {
+  autodesk: {
     authorizationUrl: "https://developer.api.autodesk.com/authentication/v2/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -280,7 +292,7 @@ var providers = defineProviders({
       url: "https://developer.api.autodesk.com/authentication/v2/token"
     }
   },
-  Battlenet: {
+  battlenet: {
     authorizationUrl: "https://oauth.battle.net/authorize",
     isOIDC: true,
     isRefreshable: false,
@@ -296,7 +308,7 @@ var providers = defineProviders({
       url: "https://oauth.battle.net/token"
     }
   },
-  Bitbucket: {
+  bitbucket: {
     authorizationUrl: "https://bitbucket.org/site/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -312,7 +324,7 @@ var providers = defineProviders({
       url: "https://bitbucket.org/site/oauth2/access_token"
     }
   },
-  Box: {
+  box: {
     authorizationUrl: "https://account.box.com/api/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -333,7 +345,7 @@ var providers = defineProviders({
       url: "https://api.box.com/oauth2/token"
     }
   },
-  Bungie: {
+  bungie: {
     authorizationUrl: "https://www.bungie.net/en/OAuth/Authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -352,7 +364,7 @@ var providers = defineProviders({
       url: "https://www.bungie.net/Platform/App/OAuth/token"
     }
   },
-  Coinbase: {
+  coinbase: {
     authorizationUrl: "https://www.coinbase.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -368,7 +380,7 @@ var providers = defineProviders({
       url: "https://api.coinbase.com/oauth/token"
     }
   },
-  Discord: {
+  discord: {
     authorizationUrl: "https://discord.com/api/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -385,7 +397,7 @@ var providers = defineProviders({
       url: "https://discord.com/api/oauth2/token"
     }
   },
-  DonationAlerts: {
+  donationalerts: {
     authorizationUrl: "https://www.donationalerts.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -401,7 +413,7 @@ var providers = defineProviders({
       url: "https://www.donationalerts.com/oauth/token"
     }
   },
-  Dribbble: {
+  dribbble: {
     authorizationUrl: "https://dribbble.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -417,7 +429,7 @@ var providers = defineProviders({
       url: "https://dribbble.com/oauth/token"
     }
   },
-  Dropbox: {
+  dropbox: {
     authorizationUrl: "https://www.dropbox.com/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -437,7 +449,7 @@ var providers = defineProviders({
       url: "https://api.dropboxapi.com/oauth2/token"
     }
   },
-  EpicGames: {
+  epicgames: {
     authorizationUrl: "https://www.epicgames.com/id/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -453,7 +465,7 @@ var providers = defineProviders({
       url: "https://api.epicgames.dev/epic/oauth/v1/token"
     }
   },
-  Etsy: {
+  etsy: {
     authorizationUrl: "https://www.etsy.com/oauth/connect",
     isOIDC: false,
     isRefreshable: true,
@@ -469,7 +481,7 @@ var providers = defineProviders({
       url: "https://api.etsy.com/v3/public/oauth/token"
     }
   },
-  Facebook: {
+  facebook: {
     authorizationUrl: "https://www.facebook.com/v16.0/dialog/oauth",
     isOIDC: true,
     isRefreshable: false,
@@ -487,7 +499,7 @@ var providers = defineProviders({
       url: "https://graph.facebook.com/v16.0/oauth/access_token"
     }
   },
-  Figma: {
+  figma: {
     authorizationUrl: "https://www.figma.com/oauth",
     isOIDC: false,
     isRefreshable: true,
@@ -504,7 +516,7 @@ var providers = defineProviders({
       url: "https://api.figma.com/v1/oauth/token"
     }
   },
-  Gitea: {
+  gitea: {
     authorizationUrl: (config) => `${config.baseURL}/login/oauth/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -521,7 +533,7 @@ var providers = defineProviders({
       url: (config) => `${config.baseURL}/login/oauth/access_token`
     }
   },
-  GitHub: {
+  github: {
     authorizationUrl: "https://github.com/login/oauth/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -537,7 +549,7 @@ var providers = defineProviders({
       url: "https://github.com/login/oauth/access_token"
     }
   },
-  GitLab: {
+  gitlab: {
     authorizationUrl: (config) => `${config.baseURL}/oauth/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -559,7 +571,7 @@ var providers = defineProviders({
       url: (config) => `${config.baseURL}/oauth/token`
     }
   },
-  Google: {
+  google: {
     authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
     isOIDC: true,
     isRefreshable: true,
@@ -582,7 +594,7 @@ var providers = defineProviders({
       url: "https://oauth2.googleapis.com/token"
     }
   },
-  Intuit: {
+  intuit: {
     authorizationUrl: "https://appcenter.intuit.com/connect/oauth2",
     isOIDC: true,
     isRefreshable: true,
@@ -606,7 +618,7 @@ var providers = defineProviders({
       url: "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer"
     }
   },
-  Kakao: {
+  kakao: {
     authorizationUrl: "https://kauth.kakao.com/oauth/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -623,7 +635,7 @@ var providers = defineProviders({
       url: "https://kauth.kakao.com/oauth/token"
     }
   },
-  Keycloak: {
+  keycloak: {
     authorizationUrl: (config) => `${config.realmURL}/protocol/openid-connect/auth`,
     isOIDC: true,
     isRefreshable: true,
@@ -645,7 +657,7 @@ var providers = defineProviders({
       url: (config) => `${config.realmURL}/protocol/openid-connect/token`
     }
   },
-  Kick: {
+  kick: {
     authorizationUrl: "https://id.kick.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -667,7 +679,7 @@ var providers = defineProviders({
       url: "https://id.kick.com/oauth/token"
     }
   },
-  Lichess: {
+  lichess: {
     authorizationUrl: "https://lichess.org/oauth/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -684,7 +696,7 @@ var providers = defineProviders({
       url: "https://lichess.org/api/token"
     }
   },
-  LINE: {
+  line: {
     authorizationUrl: "https://access.line.me/oauth2/v2.1/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -701,7 +713,7 @@ var providers = defineProviders({
       url: "https://api.line.me/oauth2/v2.1/token"
     }
   },
-  Linear: {
+  linear: {
     authorizationUrl: "https://linear.app/oauth/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -728,7 +740,7 @@ var providers = defineProviders({
       url: "https://api.linear.app/oauth/token"
     }
   },
-  LinkedIn: {
+  linkedin: {
     authorizationUrl: "https://www.linkedin.com/oauth/v2/authorization",
     isOIDC: true,
     isRefreshable: true,
@@ -745,7 +757,7 @@ var providers = defineProviders({
       url: "https://www.linkedin.com/oauth/v2/accessToken"
     }
   },
-  Mastodon: {
+  mastodon: {
     authorizationUrl: (config) => `${config.baseURL}/oauth/authorize`,
     isOIDC: false,
     isRefreshable: false,
@@ -767,7 +779,7 @@ var providers = defineProviders({
       url: (config) => `${config.baseURL}/oauth/token`
     }
   },
-  MercadoLibre: {
+  mercadolibre: {
     authorizationUrl: "https://auth.mercadolibre.com/authorization",
     isOIDC: false,
     isRefreshable: true,
@@ -784,7 +796,7 @@ var providers = defineProviders({
       url: "https://api.mercadolibre.com/oauth/token"
     }
   },
-  MercadoPago: {
+  mercadopago: {
     authorizationUrl: "https://auth.mercadopago.com/authorization",
     isOIDC: false,
     isRefreshable: true,
@@ -800,7 +812,7 @@ var providers = defineProviders({
       url: "https://api.mercadopago.com/oauth/token"
     }
   },
-  MicrosoftEntraId: {
+  microsoftentraid: {
     authorizationUrl: (config) => `https://${config.tenantId}.b2clogin.com/${config.tenantId}/oauth2/v2.0/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -817,7 +829,7 @@ var providers = defineProviders({
       url: (config) => `https://${config.tenantId}.b2clogin.com/${config.tenantId}/oauth2/v2.0/token`
     }
   },
-  MyAnimeList: {
+  myanimelist: {
     authorizationUrl: "https://myanimelist.net/v1/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -834,7 +846,7 @@ var providers = defineProviders({
       url: "https://myanimelist.net/v1/oauth2/token"
     }
   },
-  Naver: {
+  naver: {
     authorizationUrl: "https://nid.naver.com/oauth2.0/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -850,7 +862,7 @@ var providers = defineProviders({
       url: "https://nid.naver.com/oauth2.0/token"
     }
   },
-  Notion: {
+  notion: {
     authorizationUrl: "https://api.notion.com/v1/oauth/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -869,7 +881,7 @@ var providers = defineProviders({
       url: "https://api.notion.com/v1/oauth/token"
     }
   },
-  Okta: {
+  okta: {
     authorizationUrl: (config) => `https://${config.domain}/oauth2/default/v1/authorize`,
     isOIDC: true,
     isRefreshable: true,
@@ -891,7 +903,7 @@ var providers = defineProviders({
       url: (config) => `https://${config.domain}/oauth2/default/v1/token`
     }
   },
-  Osu: {
+  osu: {
     authorizationUrl: "https://osu.ppy.sh/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -907,7 +919,7 @@ var providers = defineProviders({
       url: "https://osu.ppy.sh/oauth/token"
     }
   },
-  Patreon: {
+  patreon: {
     authorizationUrl: "https://www.patreon.com/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -923,7 +935,7 @@ var providers = defineProviders({
       url: "https://www.patreon.com/api/oauth2/token"
     }
   },
-  Polar: {
+  polar: {
     authorizationUrl: "https://polar.sh/oauth2/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -945,7 +957,7 @@ var providers = defineProviders({
       url: "https://api.polar.sh/v1/oauth2/token"
     }
   },
-  PolarAccessLink: {
+  polaraccesslink: {
     authorizationUrl: "https://flow.polar.com/oauth2/authorization",
     isOIDC: false,
     isRefreshable: false,
@@ -962,7 +974,7 @@ var providers = defineProviders({
       url: "https://polarremote.com/v2/oauth2/token"
     }
   },
-  PolarTeamPro: {
+  polarteampro: {
     authorizationUrl: "https://auth.polar.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -979,7 +991,7 @@ var providers = defineProviders({
       url: "https://auth.polar.com/oauth/token"
     }
   },
-  Reddit: {
+  reddit: {
     authorizationUrl: "https://www.reddit.com/api/v1/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1002,7 +1014,7 @@ var providers = defineProviders({
       url: "https://www.reddit.com/api/v1/access_token"
     }
   },
-  Roblox: {
+  roblox: {
     authorizationUrl: "https://apis.roblox.com/oauth/v1/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -1019,7 +1031,7 @@ var providers = defineProviders({
       url: "https://apis.roblox.com/oauth/v1/token"
     }
   },
-  Salesforce: {
+  salesforce: {
     authorizationUrl: "https://login.salesforce.com/services/oauth2/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -1040,7 +1052,7 @@ var providers = defineProviders({
       url: "https://login.salesforce.com/services/oauth2/token"
     }
   },
-  Shikimori: {
+  shikimori: {
     authorizationUrl: "https://shikimori.org/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1056,7 +1068,7 @@ var providers = defineProviders({
       url: "https://shikimori.org/oauth/token"
     }
   },
-  Slack: {
+  slack: {
     authorizationUrl: "https://slack.com/openid/connect/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -1077,7 +1089,7 @@ var providers = defineProviders({
       url: "https://slack.com/api/openid.connect.token"
     }
   },
-  Spotify: {
+  spotify: {
     authorizationUrl: "https://accounts.spotify.com/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1094,7 +1106,7 @@ var providers = defineProviders({
       url: "https://accounts.spotify.com/api/token"
     }
   },
-  StartGG: {
+  startgg: {
     authorizationUrl: "https://start.gg/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1117,7 +1129,7 @@ var providers = defineProviders({
       url: "https://api.start.gg/oauth/access_token"
     }
   },
-  Strava: {
+  strava: {
     authorizationUrl: "https://www.strava.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1142,7 +1154,7 @@ var providers = defineProviders({
       url: "https://www.strava.com/oauth/token"
     }
   },
-  Synology: {
+  synology: {
     authorizationUrl: (config) => `${config.baseURL}/webman/sso/SSOOauth.cgi?client_id=${config.clientId}&response_type=code&redirect_uri=${config.redirectUri}`,
     isOIDC: false,
     isRefreshable: false,
@@ -1158,7 +1170,7 @@ var providers = defineProviders({
       url: (config) => `${config.baseURL}/webman/sso/SSOAccessToken.cgi?client_id=${config.clientId}&client_secret=${config.clientSecret}`
     }
   },
-  TikTok: {
+  tiktok: {
     authorizationUrl: "https://www.tiktok.com/v2/auth/authorize",
     createAuthorizationURLSearchParams: (config) => ({
       client_key: config.clientId
@@ -1183,7 +1195,7 @@ var providers = defineProviders({
       url: "https://open.tiktokapis.com/v2/oauth/token/"
     }
   },
-  Tiltify: {
+  tiltify: {
     authorizationUrl: "https://v5api.tiltify.com/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1199,7 +1211,7 @@ var providers = defineProviders({
       url: "https://v5api.tiltify.com/oauth/token"
     }
   },
-  Tumblr: {
+  tumblr: {
     authorizationUrl: "https://www.tumblr.com/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1215,7 +1227,7 @@ var providers = defineProviders({
       url: "https://api.tumblr.com/v2/oauth2/token"
     }
   },
-  Twitch: {
+  twitch: {
     authorizationUrl: "https://id.twitch.tv/oauth2/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -1242,7 +1254,7 @@ var providers = defineProviders({
       url: "https://id.twitch.tv/oauth2/token"
     }
   },
-  Twitter: {
+  twitter: {
     authorizationUrl: "https://twitter.com/i/oauth2/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1263,7 +1275,7 @@ var providers = defineProviders({
       url: "https://api.twitter.com/2/oauth2/token"
     }
   },
-  VK: {
+  vk: {
     authorizationUrl: "https://oauth.vk.com/authorize",
     isOIDC: false,
     isRefreshable: false,
@@ -1279,7 +1291,7 @@ var providers = defineProviders({
       url: "https://oauth.vk.com/access_token"
     }
   },
-  WorkOS: {
+  workos: {
     authorizationUrl: "https://api.workos.com/sso/authorize",
     isOIDC: true,
     isRefreshable: true,
@@ -1296,7 +1308,7 @@ var providers = defineProviders({
       url: "https://api.workos.com/sso/token"
     }
   },
-  Yahoo: {
+  yahoo: {
     authorizationUrl: "https://api.login.yahoo.com/oauth2/request_auth",
     isOIDC: true,
     isRefreshable: true,
@@ -1317,7 +1329,7 @@ var providers = defineProviders({
       url: "https://api.login.yahoo.com/oauth2/get_token"
     }
   },
-  Yandex: {
+  yandex: {
     authorizationUrl: "https://oauth.yandex.com/authorize",
     createAuthorizationURLSearchParams: {
       device_id: crypto.randomUUID(),
@@ -1343,7 +1355,7 @@ var providers = defineProviders({
       url: "https://oauth.yandex.com/token"
     }
   },
-  Zoom: {
+  zoom: {
     authorizationUrl: "https://zoom.us/oauth/authorize",
     isOIDC: false,
     isRefreshable: true,
@@ -1369,8 +1381,10 @@ var providers = defineProviders({
     }
   }
 });
-var normalizedProviders = Object.fromEntries(Object.entries(providers).map(([key, def]) => [key.toLowerCase(), def]));
 var providerOptions = Object.keys(providers).filter(isValidProviderOption);
+var refreshableProviderOptions = Object.keys(providers).filter(isRefreshableProviderOption);
+var oidcProviderOptions = Object.keys(providers).filter(isOIDCProviderOption);
+var revocableProviderOptions = Object.keys(providers).filter(isRevocableProviderOption);
 var createOAuth2Client = (providerName, config) => {
   const meta = providers[providerName];
   const isConfigPropertyFunction = (cfgProp) => typeof cfgProp === "function";
@@ -1582,44 +1596,42 @@ var authorize = ({
     return error("Bad Request", "Cookies are missing");
   if (provider === undefined)
     return error("Bad Request", "Provider is required");
-  if (!isValidProviderOption(provider)) {
+  if (!isValidProviderOption(provider))
     return error("Bad Request", "Invalid provider");
-  }
   const providerConfig = clientProviders[provider];
-  if (!providerConfig) {
-    return error("Unauthorized", "Invalid provider");
-  }
+  if (!providerConfig)
+    return error("Unauthorized", "Client provider not found");
   const { providerInstance, scope, searchParams } = providerConfig;
   const normalizedProvider = provider.toLowerCase();
-  try {
-    const redirectUrl = headers["referer"] ?? "/";
-    redirect_url.set({
-      httpOnly: true,
-      maxAge: COOKIE_DURATION,
-      path: "/",
-      sameSite: "lax",
-      secure: true,
-      value: redirectUrl
-    });
-    auth_provider.set({
-      httpOnly: true,
-      maxAge: COOKIE_DURATION,
-      path: "/",
-      sameSite: "lax",
-      secure: true,
-      value: normalizedProvider
-    });
-    const currentState = generateState();
-    state.set({
-      httpOnly: true,
-      maxAge: COOKIE_DURATION,
-      path: "/",
-      sameSite: "lax",
-      secure: true,
-      value: currentState
-    });
-    const codeVerifier = isPKCEProviderOption(provider) ? generateCodeVerifier() : undefined;
-    codeVerifier && code_verifier.set({
+  const referer = headers["referer"] ?? "/";
+  redirect_url.set({
+    httpOnly: true,
+    maxAge: COOKIE_DURATION,
+    path: "/",
+    sameSite: "lax",
+    secure: true,
+    value: referer
+  });
+  auth_provider.set({
+    httpOnly: true,
+    maxAge: COOKIE_DURATION,
+    path: "/",
+    sameSite: "lax",
+    secure: true,
+    value: normalizedProvider
+  });
+  const currentState = generateState();
+  state.set({
+    httpOnly: true,
+    maxAge: COOKIE_DURATION,
+    path: "/",
+    sameSite: "lax",
+    secure: true,
+    value: currentState
+  });
+  const codeVerifier = isPKCEProviderOption(provider) ? generateCodeVerifier() : undefined;
+  if (codeVerifier) {
+    code_verifier.set({
       httpOnly: true,
       maxAge: COOKIE_DURATION,
       path: "/",
@@ -1627,9 +1639,14 @@ var authorize = ({
       secure: true,
       value: codeVerifier
     });
+  }
+  try {
     const authorizationURL = await providerInstance.createAuthorizationUrl(codeVerifier ? { codeVerifier, scope, state: currentState } : { scope, state: currentState });
     searchParams?.forEach(([key, value]) => authorizationURL.searchParams.set(key, value));
-    onAuthorize?.();
+    onAuthorize?.({
+      authorizationUrl: authorizationURL,
+      authProvider: normalizedProvider
+    });
     return redirect(authorizationURL.toString());
   } catch (err) {
     if (err instanceof Error) {
@@ -1673,8 +1690,9 @@ var callback = ({
   },
   query: { code, state: callback_state }
 }) => {
-  if (stored_state === undefined || code_verifier === undefined || auth_provider === undefined || user_session_id === undefined)
+  if (stored_state === undefined || code_verifier === undefined || auth_provider === undefined || user_session_id === undefined) {
     return error("Bad Request", "Cookies are missing");
+  }
   if (!isNonEmptyString(code) || stored_state.value === undefined) {
     return error("Bad Request", "Invalid callback request");
   }
@@ -1689,17 +1707,17 @@ var callback = ({
   }
   const providerConfig = clientProviders[auth_provider.value];
   if (!providerConfig) {
-    return error("Unauthorized", "Invalid provider");
+    return error("Unauthorized", "Client provider not found");
   }
   const { providerInstance } = providerConfig;
+  stored_state.remove();
+  const authProvider = auth_provider.value;
+  const requiresPKCE = isPKCEProviderOption(authProvider);
+  const verifier = requiresPKCE ? code_verifier.value : undefined;
+  if (requiresPKCE && verifier === undefined) {
+    return error("Bad Request", "Code verifier not found and is required");
+  }
   try {
-    stored_state.remove();
-    const authProvider = auth_provider.value;
-    const requiresPKCE = isPKCEProviderOption(authProvider);
-    const verifier = requiresPKCE ? code_verifier.value : undefined;
-    if (requiresPKCE && verifier === undefined) {
-      return error("Bad Request", "Code verifier not found and is required");
-    }
     const tokenResponse = await providerInstance.validateAuthorizationCode(requiresPKCE ? { code, codeVerifier: verifier } : { code });
     const userProfile = tokenResponse.id_token ? decodeJWT(tokenResponse.id_token) : await providerInstance.fetchUserProfile(tokenResponse.access_token);
     await onCallback?.({
@@ -1740,7 +1758,7 @@ var profile = ({
   }
   const providerConfig = clientProviders[auth_provider.value];
   if (!providerConfig) {
-    return error("Unauthorized", "Invalid provider");
+    return error("Unauthorized", "Client provider not found");
   }
   const { providerInstance } = providerConfig;
   const userSession = session[user_session_id.value];
@@ -1751,6 +1769,7 @@ var profile = ({
   try {
     const userProfile = await providerInstance.fetchUserProfile(accessToken);
     await onProfile?.({
+      authProvider: auth_provider.value,
       userProfile
     });
     return new Response(JSON.stringify(userProfile));
@@ -1800,7 +1819,7 @@ var refresh = ({
   }
   const providerConfig = clientProviders[auth_provider.value];
   if (!providerConfig) {
-    return error("Unauthorized", "Invalid provider");
+    return error("Unauthorized", "Client provider not found");
   }
   const { providerInstance } = providerConfig;
   const userSession = session[user_session_id.value];
@@ -1816,7 +1835,10 @@ var refresh = ({
   }
   try {
     const tokenResponse = await providerInstance.refreshAccessToken(refreshToken);
-    onRefresh?.({ tokenResponse });
+    onRefresh?.({
+      authProvider: auth_provider.value,
+      tokenResponse
+    });
     return new Response("Token refreshed", {
       status: 204
     });
@@ -1852,7 +1874,7 @@ var revoke = ({
   }
   const providerConfig = clientProviders[auth_provider.value];
   if (!providerConfig) {
-    return error("Unauthorized", "Invalid provider");
+    return error("Unauthorized", "Client provider not found");
   }
   const { providerInstance } = providerConfig;
   if (!isRevocableOAuth2Client(auth_provider.value, providerInstance)) {
@@ -1865,7 +1887,10 @@ var revoke = ({
   const { accessToken } = userSession;
   try {
     await providerInstance.revokeToken(accessToken);
-    onRevocation?.({ tokenToRevoke: accessToken });
+    onRevocation?.({
+      authProvider: auth_provider.value,
+      tokenToRevoke: accessToken
+    });
     return new Response("Token revoked", {
       status: 204
     });
@@ -1882,24 +1907,35 @@ import { Elysia as Elysia8 } from "elysia";
 var signout = ({
   signoutRoute = "/oauth2/signout",
   onSignOut
-}) => new Elysia8().post(signoutRoute, async ({ error, cookie: { user_session_id, auth_provider } }) => {
-  if (auth_provider === undefined || user_session_id === undefined)
+}) => new Elysia8().use(sessionStore()).delete(signoutRoute, async ({
+  error,
+  store: { session },
+  cookie: { user_session_id, auth_provider }
+}) => {
+  if (auth_provider === undefined || user_session_id === undefined) {
     return error("Bad Request", "Cookies are missing");
+  }
   if (auth_provider.value === undefined) {
     return error("Unauthorized", "No auth provider found");
   }
+  if (user_session_id.value === undefined) {
+    return error("Unauthorized", "No user session found");
+  }
+  const userSession = session[user_session_id.value];
+  user_session_id.remove();
+  auth_provider.remove();
+  if (userSession === undefined) {
+    return new Response(null, { status: 204 });
+  }
   try {
-    onSignOut?.();
-    user_session_id.remove();
-    auth_provider.remove();
-    return new Response("Succesfuly Logged Out", {
-      status: 204
+    onSignOut?.({
+      authProvider: auth_provider.value,
+      user: userSession.user
     });
+    return new Response(null, { status: 204 });
   } catch (err) {
-    if (err instanceof Error) {
-      return error("Internal Server Error", `Failed to signout: ${err.message}`);
-    }
-    return error("Internal Server Error", `Failed to signout: Unknown error: ${err}`);
+    const msg = err instanceof Error ? `Failed to sign out: ${err.message}` : `Failed to sign out: ${err}`;
+    return error("Internal Server Error", msg);
   }
 });
 
@@ -1911,49 +1947,44 @@ var status = ({
   onStatus
 }) => new Elysia9().use(sessionStore()).get(statusRoute, async ({
   error,
-  cookie: { user_session_id, auth_provider },
+  cookie: { user_session_id },
   store: { session }
 }) => {
-  if (auth_provider === undefined || user_session_id === undefined)
+  if (user_session_id === undefined) {
     return error("Bad Request", "Cookies are missing");
-  try {
-    if (user_session_id.value === undefined) {
-      return new Response(JSON.stringify({ isLoggedIn: false, user: null }), {
-        headers: { "Content-Type": "application/json" }
-      });
-    }
-    if (auth_provider.value === undefined) {
-      return new Response(JSON.stringify({ isLoggedIn: false, user: null }), {
-        headers: { "Content-Type": "application/json" }
-      });
-    }
-    const providerConfig = clientProviders[auth_provider.value];
-    if (!providerConfig) {
-      return error("Unauthorized", "Invalid provider");
-    }
-    const { providerInstance } = providerConfig;
-    if (!isRefreshableOAuth2Client("Google", providerInstance)) {
-      return error("Not Implemented", "Provider is not refreshable");
-    }
-    const userSession = session[user_session_id.value];
-    if (userSession === undefined) {
-      return new Response(JSON.stringify({ isLoggedIn: false, user: null }), {
-        headers: { "Content-Type": "application/json" }
-      });
-    }
-    const { user } = userSession;
-    onStatus?.();
-    return new Response(JSON.stringify({ isLoggedIn: true, user }), {
+  }
+  if (user_session_id.value === undefined) {
+    onStatus?.({
+      user: null
+    });
+    return new Response(JSON.stringify({ isLoggedIn: false, user: null }), {
       headers: { "Content-Type": "application/json" }
     });
+  }
+  const userSession = session[user_session_id.value];
+  if (userSession === undefined) {
+    onStatus?.({
+      user: null
+    });
+    return new Response(JSON.stringify({ isLoggedIn: false, user: null }), {
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+  const { user } = userSession;
+  try {
+    onStatus?.({
+      user
+    });
   } catch (err) {
     if (err instanceof Error) {
       return error("Internal Server Error", `Error: ${err.message} - ${err.stack ?? ""}`);
     }
     return error("Internal Server Error", `Unknown Error: ${err}`);
   }
+  return new Response(JSON.stringify({ isLoggedIn: true, user }), {
+    headers: { "Content-Type": "application/json" }
+  });
 });
-
 // src/utils.ts
 var instantiateUserSession = async ({
   user_session_id,
@@ -1980,11 +2011,12 @@ var instantiateUserSession = async ({
     value: sessionKey
   });
 };
-var createAuthConfig = (props) => props;
+var createAuthConfiguration = (configuration) => configuration;
+var createProvidersConfiguration = (providersConfiguration) => providersConfiguration;
 
 // src/index.ts
 var absoluteAuth = ({
-  config,
+  providersConfiguration,
   authorizeRoute,
   callbackRoute,
   profileRoute,
@@ -2000,9 +2032,9 @@ var absoluteAuth = ({
   onSignOut,
   onRevocation
 }) => {
-  const clientProviders = Object.entries(config).reduce((acc, [providerName, providerConfig]) => {
+  const clientProviders = Object.entries(providersConfiguration).reduce((acc, [providerName, providerConfig]) => {
     if (isValidProviderOption(providerName)) {
-      acc[providerName.toLocaleLowerCase()] = {
+      acc[providerName] = {
         providerInstance: createOAuth2Client(providerName, providerConfig.credentials),
         scope: providerConfig.scope,
         searchParams: providerConfig.searchParams
@@ -2021,7 +2053,15 @@ var absoluteAuth = ({
   })).use(protectRoute()).as("plugin");
 };
 export {
+  isValidProviderOption,
+  isRevocableProviderOption,
+  isRevocableOAuth2Client,
+  isRefreshableProviderOption,
+  isRefreshableOAuth2Client,
+  isPKCEProviderOption,
+  isOIDCProviderOption,
   instantiateUserSession,
-  createAuthConfig,
+  createProvidersConfiguration,
+  createAuthConfiguration,
   absoluteAuth
 };

package/dist/src/authorize.d.ts

@@ -1,9 +1,9 @@
 import { Elysia } from 'elysia';
-import { AuthorizeRoute, ClientProviders } from './types';
+import { AuthorizeRoute, ClientProviders, OnAuthorize } from './types';
 type AuthorizeProps = {
     clientProviders: ClientProviders;
     authorizeRoute?: AuthorizeRoute;
-    onAuthorize?: () => void;
+    onAuthorize?: OnAuthorize;
 };
 export declare const authorize: ({ clientProviders, authorizeRoute, onAuthorize }: AuthorizeProps) => Elysia<"", {
     decorator: {};
@@ -31,7 +31,7 @@ export declare const authorize: ({ clientProviders, authorizeRoute, onAuthorize
                 response: {
                     200: import("undici-types").Response;
                     400: "Cookies are missing" | "Provider is required" | "Invalid provider";
-                    401: "Invalid provider";
+                    401: "Client provider not found";
                     500: `${string} - ${string}` | `Unknown error: ${string}`;
                     422: {
                         type: "validation";
@@ -60,7 +60,7 @@ export declare const authorize: ({ clientProviders, authorizeRoute, onAuthorize
                     response: {
                         200: import("undici-types").Response;
                         400: "Cookies are missing" | "Provider is required" | "Invalid provider";
-                        401: "Invalid provider";
+                        401: "Client provider not found";
                         500: `${string} - ${string}` | `Unknown error: ${string}`;
                         422: {
                             type: "validation";

package/dist/src/callback.d.ts

@@ -30,7 +30,7 @@ export declare const callback: <UserType>({ clientProviders, callbackRoute, onCa
             response: {
                 200: import("undici-types").Response;
                 400: "Cookies are missing" | "Invalid callback request" | "Invalid state mismatch" | "Code verifier not found and is required";
-                401: "Invalid provider" | "No auth provider found";
+                401: "Invalid provider" | "Client provider not found" | "No auth provider found";
                 500: `${string} - ${string}` | `Failed to validate authorization code: Unknown error: ${string}`;
             };
         };

package/dist/src/index.d.ts

@@ -1,9 +1,9 @@
 import { Elysia } from 'elysia';
 import { AbsoluteAuthProps } from './types';
-export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callbackRoute, profileRoute, signoutRoute, statusRoute, refreshRoute, revokeRoute, onAuthorize, onProfile, onCallback, onStatus, onRefresh, onSignOut, onRevocation }: AbsoluteAuthProps<UserType>) => Elysia<"", {
+export declare const absoluteAuth: <UserType>({ providersConfiguration, authorizeRoute, callbackRoute, profileRoute, signoutRoute, statusRoute, refreshRoute, revokeRoute, onAuthorize, onProfile, onCallback, onStatus, onRefresh, onSignOut, onRevocation }: AbsoluteAuthProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("./types").SessionRecord<unknown> & import("./types").SessionRecord<UserType>;
+        session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<unknown>;
     };
     derive: {};
     resolve: {};
@@ -17,7 +17,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
     parser: {};
 }, ((({
     [x: string]: {
-        post: {
+        delete: {
             body: unknown;
             params: {};
             query: unknown;
@@ -25,8 +25,8 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "No auth provider found";
-                500: `Failed to signout: ${string}`;
+                401: "No auth provider found" | "No user session found";
+                500: string;
             };
         };
     };
@@ -40,7 +40,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: Response;
                 400: "Cookies are missing" | "Invalid provider";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Client provider not found" | "No auth provider found" | "No user session found";
                 501: "Provider does not support revocation";
                 500: `Failed to revoke token: ${string}`;
             };
@@ -56,8 +56,6 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "Invalid provider";
-                501: "Provider is not refreshable";
                 500: `Error: ${string} - ${string}` | `Unknown Error: ${string}`;
             };
         };
@@ -72,7 +70,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: Response;
                 400: "Cookies are missing" | "Invalid provider" | "No refresh token found";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Client provider not found" | "No auth provider found" | "No user session found";
                 501: "Provider is not refreshable";
                 500: `Failed to refresh token: ${string}`;
             };
@@ -91,7 +89,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
                 response: {
                     200: import("undici-types").Response;
                     400: "Cookies are missing" | "Provider is required" | "Invalid provider";
-                    401: "Invalid provider";
+                    401: "Client provider not found";
                     500: `${string} - ${string}` | `Unknown error: ${string}`;
                     422: {
                         type: "validation";
@@ -120,7 +118,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
                     response: {
                         200: import("undici-types").Response;
                         400: "Cookies are missing" | "Provider is required" | "Invalid provider";
-                        401: "Invalid provider";
+                        401: "Client provider not found";
                         500: `${string} - ${string}` | `Unknown error: ${string}`;
                         422: {
                             type: "validation";
@@ -146,7 +144,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: import("undici-types").Response;
                 400: "Cookies are missing" | "Invalid callback request" | "Invalid state mismatch" | "Code verifier not found and is required";
-                401: "Invalid provider" | "No auth provider found";
+                401: "Invalid provider" | "Client provider not found" | "No auth provider found";
                 500: `${string} - ${string}` | `Failed to validate authorization code: Unknown error: ${string}`;
             };
         };
@@ -161,7 +159,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Invalid provider" | "Client provider not found" | "No auth provider found" | "No user session found";
                 500: `${string} - ${string}` | `Failed to validate authorization code: Unknown error: ${string}`;
             };
         };
@@ -184,4 +182,7 @@ export declare const absoluteAuth: <UserType>({ config, authorizeRoute, callback
     resolve: {};
     schema: {};
 }>;
+export * from './types';
 export * from './utils';
+export type { OAuth2TokenResponse, OAuth2Client, ProviderOption, PKCEProvider, OIDCProvider, RefreshableProvider, RevocableProvider, ScopeRequiredProvider, CredentialsFor } from 'citra';
+export { isValidProviderOption, isRefreshableOAuth2Client, isRefreshableProviderOption, isOIDCProviderOption, isPKCEProviderOption, isRevocableProviderOption, isRevocableOAuth2Client } from 'citra';

package/dist/src/profile.d.ts

@@ -30,7 +30,7 @@ export declare const profile: <UserType>({ clientProviders, profileRoute, onProf
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Invalid provider" | "Client provider not found" | "No auth provider found" | "No user session found";
                 500: `${string} - ${string}` | `Failed to validate authorization code: Unknown error: ${string}`;
             };
         };

package/dist/src/refresh.d.ts

@@ -30,7 +30,7 @@ export declare const refresh: <UserType>({ clientProviders, refreshRoute, onRefr
             response: {
                 200: Response;
                 400: "Cookies are missing" | "Invalid provider" | "No refresh token found";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Client provider not found" | "No auth provider found" | "No user session found";
                 501: "Provider is not refreshable";
                 500: `Failed to refresh token: ${string}`;
             };

package/dist/src/revoke.d.ts

@@ -30,7 +30,7 @@ export declare const revoke: <UserType>({ clientProviders, revokeRoute, onRevoca
             response: {
                 200: Response;
                 400: "Cookies are missing" | "Invalid provider";
-                401: "Invalid provider" | "No auth provider found" | "No user session found";
+                401: "Client provider not found" | "No auth provider found" | "No user session found";
                 501: "Provider does not support revocation";
                 500: `Failed to revoke token: ${string}`;
             };

package/dist/src/signout.d.ts

@@ -1,17 +1,19 @@
 import { Elysia } from 'elysia';
-import { RouteString } from './types';
-type SignOutProps = {
+import { OnSignOut, RouteString } from './types';
+type SignOutProps<UserType> = {
     signoutRoute?: RouteString;
-    onSignOut?: () => void;
+    onSignOut?: OnSignOut<UserType>;
 };
-export declare const signout: ({ signoutRoute, onSignOut }: SignOutProps) => Elysia<"", {
+export declare const signout: <UserType>({ signoutRoute, onSignOut }: SignOutProps<UserType>) => Elysia<"", {
     decorator: {};
-    store: {};
+    store: {
+        session: import("./types").SessionRecord<UserType>;
+    };
     derive: {};
     resolve: {};
 }, {
-    typebox: import("@sinclair/typebox").TModule<{}>;
     error: {};
+    typebox: import("@sinclair/typebox").TModule<{}, {}>;
 }, {
     schema: {};
     macro: {};
@@ -19,7 +21,7 @@ export declare const signout: ({ signoutRoute, onSignOut }: SignOutProps) => Ely
     parser: {};
 }, {
     [x: string]: {
-        post: {
+        delete: {
             body: unknown;
             params: {};
             query: unknown;
@@ -27,8 +29,8 @@ export declare const signout: ({ signoutRoute, onSignOut }: SignOutProps) => Ely
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "No auth provider found";
-                500: `Failed to signout: ${string}`;
+                401: "No auth provider found" | "No user session found";
+                500: string;
             };
         };
     };

package/dist/src/status.d.ts

@@ -1,11 +1,11 @@
 import { Elysia } from 'elysia';
-import { ClientProviders, RouteString } from './types';
-type StatusProps = {
+import { ClientProviders, OnStatus, RouteString } from './types';
+type StatusProps<UserType> = {
     clientProviders: ClientProviders;
     statusRoute?: RouteString;
-    onStatus?: () => void;
+    onStatus?: OnStatus<UserType>;
 };
-export declare const status: <UserType>({ clientProviders, statusRoute, onStatus }: StatusProps) => Elysia<"", {
+export declare const status: <UserType>({ clientProviders, statusRoute, onStatus }: StatusProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
         session: import("./types").SessionRecord<UserType>;
@@ -30,8 +30,6 @@ export declare const status: <UserType>({ clientProviders, statusRoute, onStatus
             response: {
                 200: Response;
                 400: "Cookies are missing";
-                401: "Invalid provider";
-                501: "Provider is not refreshable";
                 500: `Error: ${string} - ${string}` | `Unknown Error: ${string}`;
             };
         };

package/dist/src/types.d.ts

@@ -6,7 +6,7 @@ type SessionData<UserType> = {
     refreshToken?: string;
     expiresAt: number;
 };
-type Oauth2ConfigOptions = {
+export type OAuth2ConfigurationOptions = {
     [Provider in ProviderOption]?: {
         credentials: CredentialsFor<Provider>;
         scope?: string[];
@@ -27,19 +27,33 @@ export type OnCallback<UserType> = ({ authProvider, tokenResponse, userProfile,
     session: SessionRecord<UserType>;
     user_session_id: Cookie<string | undefined>;
 }) => void | Promise<void>;
-export type OnRefresh = ({ tokenResponse }: {
+export type OnAuthorize = ({ authProvider, authorizationUrl }: {
+    authProvider: string;
+    authorizationUrl: URL;
+}) => void | Promise<void>;
+export type OnRefresh = ({ tokenResponse, authProvider }: {
     tokenResponse: OAuth2TokenResponse;
+    authProvider: string;
 }) => void | Promise<void>;
-export type OnProfile = ({ userProfile }: {
+export type OnProfile = ({ userProfile, authProvider }: {
     userProfile: Record<string, unknown>;
+    authProvider: string;
 }) => void | Promise<void>;
-export type OnRevocation = ({ tokenToRevoke }: {
+export type OnRevocation = ({ tokenToRevoke, authProvider }: {
     tokenToRevoke: string;
+    authProvider: string;
+}) => void | Promise<void>;
+export type OnStatus<UserType> = ({ user }: {
+    user: UserType | null;
+}) => void | Promise<void>;
+export type OnSignOut<UserType> = ({ authProvider, user }: {
+    authProvider: string;
+    user: UserType | null;
 }) => void | Promise<void>;
 export type RouteString = `/${string}`;
 export type AuthorizeRoute = `${string}/:provider${'' | `/${string}`}`;
 export type AbsoluteAuthProps<UserType> = {
-    config: Oauth2ConfigOptions;
+    providersConfiguration: OAuth2ConfigurationOptions;
     authorizeRoute?: AuthorizeRoute;
     profileRoute?: RouteString;
     callbackRoute?: RouteString;
@@ -47,11 +61,11 @@ export type AbsoluteAuthProps<UserType> = {
     revokeRoute?: RouteString;
     signoutRoute?: RouteString;
     statusRoute?: RouteString;
-    onAuthorize?: () => void;
+    onAuthorize?: OnAuthorize;
     onCallback?: OnCallback<UserType>;
-    onStatus?: () => void;
+    onStatus?: OnStatus<UserType>;
     onRefresh?: OnRefresh;
-    onSignOut?: () => void;
+    onSignOut?: OnSignOut<UserType>;
     onRevocation?: OnRevocation;
     onProfile?: OnProfile;
 };
@@ -67,6 +81,6 @@ export type InsantiateUserSessionProps<UserType> = {
     session: SessionRecord<UserType>;
     user_session_id: Cookie<string | undefined>;
     createUser: () => UserType | Promise<UserType>;
-    getUser: () => UserType | Promise<UserType | null>;
+    getUser: () => UserType | null | undefined | Promise<UserType | null | undefined>;
 };
 export {};

package/dist/src/utils.d.ts

@@ -1,3 +1,4 @@
-import { AbsoluteAuthProps, InsantiateUserSessionProps } from './types';
+import { AbsoluteAuthProps, InsantiateUserSessionProps, OAuth2ConfigurationOptions } from './types';
 export declare const instantiateUserSession: <UserType>({ user_session_id, session, tokenResponse, getUser, createUser }: InsantiateUserSessionProps<UserType>) => Promise<void>;
-export declare const createAuthConfig: <UserType>(props: AbsoluteAuthProps<UserType>) => AbsoluteAuthProps<UserType>;
+export declare const createAuthConfiguration: <UserType>(configuration: AbsoluteAuthProps<UserType>) => AbsoluteAuthProps<UserType>;
+export declare const createProvidersConfiguration: (providersConfiguration: OAuth2ConfigurationOptions) => OAuth2ConfigurationOptions;

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.5.1",
+	"version": "0.7.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -33,7 +33,7 @@
 		"elysia": ">= 1.2.0"
 	},
 	"dependencies": {
-		"citra": "0.15.1"
+		"citra": "0.19.0"
 	},
 	"devDependencies": {
 		"@absolutejs/absolute": "0.4.0",