@absolutejs/auth 0.51.0 → 0.52.0

package/dist/index.js

@@ -6951,6 +6951,21 @@ var oidcProviderRoutes = (config) => {
       return loginUrl === undefined ? jsonResponse({ error: "login_required" }, HTTP_UNAUTHORIZED2) : redirectTo(`${loginUrl}?return_to=${encodeURIComponent(request.url)}`);
     }
     const requested = scope === undefined || scope.length === 0 ? client.scopes : scope.split(" ").filter((entry) => client.scopes.includes(entry));
+    if (config.consentUrl !== undefined && await config.needsConsent?.({
+      client: {
+        clientId: client.clientId,
+        name: client.name
+      },
+      requestedScopes: requested,
+      user: userSession.user
+    }) === true) {
+      const consentTarget = new URL(config.consentUrl, issuer);
+      consentTarget.searchParams.set("return_to", request.url);
+      consentTarget.searchParams.set("client_id", client.clientId);
+      consentTarget.searchParams.set("client_name", client.name);
+      consentTarget.searchParams.set("scope", requested.join(" "));
+      return redirectTo(consentTarget.toString());
+    }
     const granted = getGrantedScopes === undefined ? requested : await getGrantedScopes({
       client: {
         clientId: client.clientId,
@@ -7449,7 +7464,7 @@ var oidcProviderRoutes = (config) => {
     headers: t13.Object({
       authorization: t13.Optional(t13.String())
     })
-  }).get(jwksRoute, () => ({ keys: [toPublicJwk(signingKey)] })).get("/.well-known/openid-configuration", () => discovery);
+  }).get(jwksRoute, () => ({ keys: [toPublicJwk(signingKey)] })).get("/.well-known/openid-configuration", () => discovery).get("/.well-known/oauth-authorization-server", () => discovery);
 };
 
 // src/organizations/routes.ts
@@ -28028,5 +28043,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=CF57DC7D601D3EC464756E2164756E21
+//# debugId=1C44E17EB1F4FC5164756E2164756E21
 //# sourceMappingURL=index.js.map