@absolutejs/auth 0.56.1 → 0.56.2

package/dist/oidc/config.d.ts

@@ -122,8 +122,9 @@ export declare const exchangeToken: <UserType>({ actorClientId, audience, config
     requestedScopes?: string[];
     subjectToken: string;
 }) => Promise<TokenExchangeResult>;
-export declare const issueTokenSet: <UserType>({ acr, claims, clientCertThumbprint, clientId, config, dpopJkt, nonce, now, scopes, sub }: {
+export declare const issueTokenSet: <UserType>({ acr, audience, claims, clientCertThumbprint, clientId, config, dpopJkt, nonce, now, scopes, sub }: {
     acr?: string;
+    audience?: string;
     claims?: Record<string, unknown>;
     clientCertThumbprint?: string;
     clientId: string;

package/dist/oidc/index.js

@@ -10958,6 +10958,28 @@ var createNeonDatabase = (databaseUrl) => drizzle({ client: as(databaseUrl) });
 var URL_LENGTH = 2048;
 var DEFAULT_LIST_LIMIT = 100;
 var ID_LENGTH = 255;
+var BACKCHANNEL_AUTH_STATUSES = new Set([
+  "approved",
+  "denied",
+  "pending"
+]);
+var DEVICE_AUTHORIZATION_STATUSES = new Set([
+  "approved",
+  "denied",
+  "pending"
+]);
+var backchannelAuthStatus = (value) => {
+  for (const status of BACKCHANNEL_AUTH_STATUSES)
+    if (status === value)
+      return status;
+  throw new Error(`Invalid persisted backchannel authorization status: ${value}`);
+};
+var deviceAuthorizationStatus = (value) => {
+  for (const status of DEVICE_AUTHORIZATION_STATUSES)
+    if (status === value)
+      return status;
+  throw new Error(`Invalid persisted device authorization status: ${value}`);
+};
 var oauthBackchannelAuthRequestsTable = pgTable("auth_oauth_backchannel_auth_requests", {
   auth_req_id: varchar("auth_req_id", { length: ID_LENGTH }).primaryKey(),
   binding_message: text("binding_message"),
@@ -11002,6 +11024,7 @@ var oauthClientsTable = pgTable("auth_oauth_clients", {
 });
 var oauthCodesTable = pgTable("auth_oauth_codes", {
   acr: varchar("acr", { length: ID_LENGTH }),
+  audience: varchar("audience", { length: URL_LENGTH }),
   claims_json: jsonb("claims_json").$type(),
   client_id: varchar("client_id", { length: ID_LENGTH }).notNull(),
   code_challenge: varchar("code_challenge", { length: ID_LENGTH }).notNull(),
@@ -11054,6 +11077,7 @@ var oauthPushedAuthorizationRequestsTable = pgTable("auth_oauth_pushed_authoriza
 });
 var oauthRefreshTokensTable = pgTable("auth_oauth_refresh_tokens", {
   acr: varchar("acr", { length: ID_LENGTH }),
+  audience: varchar("audience", { length: URL_LENGTH }),
   claims_json: jsonb("claims_json").$type(),
   client_id: varchar("client_id", { length: ID_LENGTH }).notNull(),
   created_at_ms: bigint("created_at_ms", { mode: "number" }).notNull(),
@@ -11089,6 +11113,7 @@ var toLogoutDelivery = (row) => ({
 });
 var toCode = (row) => ({
   acr: row.acr ?? undefined,
+  audience: row.audience ?? undefined,
   claims: row.claims_json ?? undefined,
   clientId: row.client_id,
   codeChallenge: row.code_challenge,
@@ -11103,6 +11128,7 @@ var toCode = (row) => ({
 });
 var toCodeValues = (code) => ({
   acr: code.acr ?? null,
+  audience: code.audience ?? null,
   claims_json: code.claims ?? null,
   client_id: code.clientId,
   code_challenge: code.codeChallenge,
@@ -11122,12 +11148,13 @@ var toDeviceAuth = (row) => ({
   expiresAt: row.expires_at_ms,
   intervalSeconds: row.interval_seconds,
   scopes: row.scopes,
-  status: row.status,
+  status: deviceAuthorizationStatus(row.status),
   userCode: row.user_code,
   userSub: row.user_sub ?? undefined
 });
 var toRefresh = (row) => ({
   acr: row.acr ?? undefined,
+  audience: row.audience ?? undefined,
   claims: row.claims_json ?? undefined,
   clientId: row.client_id,
   createdAt: row.created_at_ms,
@@ -11139,6 +11166,7 @@ var toRefresh = (row) => ({
 });
 var toRefreshValues = (token) => ({
   acr: token.acr ?? null,
+  audience: token.audience ?? null,
   claims_json: token.claims ?? null,
   client_id: token.clientId,
   created_at_ms: token.createdAt,
@@ -11350,7 +11378,7 @@ var toBackchannelAuth = (row) => ({
   intervalSeconds: row.interval_seconds,
   lastPolledAt: row.last_polled_at_ms ?? undefined,
   scopes: row.scopes,
-  status: row.status,
+  status: backchannelAuthStatus(row.status),
   userSub: row.user_sub ?? undefined
 });
 var createNeonBackchannelAuthStore = (databaseUrl) => createPostgresBackchannelAuthStore(createNeonDatabase(databaseUrl));
@@ -11405,5 +11433,5 @@ export {
   createNeonAuthorizationCodeStore
 };
 
-//# debugId=B38CEA1B4DA2B52E64756E2164756E21
+//# debugId=C8DC7BB4A79E9FC364756E2164756E21
 //# sourceMappingURL=index.js.map