@absolutejs/auth 0.54.4 → 0.54.5

package/dist/index.js

@@ -1946,6 +1946,7 @@ var providers = defineProviders({
     }
   },
   withings: {
+    accessTokenPath: ["body", "access_token"],
     authorizationUrl: "https://account.withings.com/oauth2_user/authorize2",
     isOIDC: false,
     isRefreshable: true,
@@ -2800,10 +2801,21 @@ var buildOAuth2Client = async (meta, config) => {
       if (!response.ok)
         throw await createOAuth2FetchError(response);
       const tokenResponse = await response.json();
+      if (!tokenResponse || typeof tokenResponse !== "object") {
+        throw new Error("OAuth token endpoint returned a non-object response");
+      }
+      const oauthError = Reflect.get(tokenResponse, "error");
+      if (typeof oauthError === "string" && oauthError.length > 0) {
+        throw new Error(`OAuth token exchange failed: ${oauthError}`);
+      }
       const nestedToken = meta.accessTokenPath ? readPath(tokenResponse, meta.accessTokenPath) : undefined;
       if (typeof nestedToken === "string" && nestedToken.length > 0 && tokenResponse && typeof tokenResponse === "object") {
         tokenResponse.access_token = nestedToken;
       }
+      const accessToken = Reflect.get(tokenResponse, "access_token");
+      if (typeof accessToken !== "string" || accessToken.length === 0) {
+        throw new Error("OAuth token endpoint returned no access_token");
+      }
       return tokenResponse;
     }
   };
@@ -3427,6 +3439,18 @@ var resolveOAuthAuthorization = async ({
   let userIdentity;
   let accessToken = tokenResponse.access_token;
   let refreshToken = tokenResponse.refresh_token;
+  if (authProvider === "withings" && !accessToken) {
+    const body = Reflect.get(tokenResponse, "body");
+    if (body && typeof body === "object") {
+      const nestedAccessToken = Reflect.get(body, "access_token");
+      if (typeof nestedAccessToken === "string") {
+        accessToken = nestedAccessToken;
+      }
+    }
+  }
+  if (typeof accessToken !== "string" || accessToken.length === 0) {
+    throw new Error("OAuth authorization response contains no access_token");
+  }
   if (tokenResponse.id_token) {
     userIdentity = normalizeProviderIdentity({
       identity: decodeJWT(tokenResponse.id_token),
@@ -3445,7 +3469,7 @@ var resolveOAuthAuthorization = async ({
     refreshToken = tokenResponse.body.refresh_token;
   } else {
     userIdentity = normalizeProviderIdentity({
-      identity: await providerInstance.fetchUserProfile(tokenResponse.access_token),
+      identity: await providerInstance.fetchUserProfile(accessToken),
       providerConfiguration: meta,
       source: "profile"
     });
@@ -27945,5 +27969,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=3641271C853CFF2564756E2164756E21
+//# debugId=D2040C8440D411EC64756E2164756E21
 //# sourceMappingURL=index.js.map