@absolutejs/auth 0.56.1 → 0.56.3

package/dist/oidc/index.js

@@ -10958,6 +10958,28 @@ var createNeonDatabase = (databaseUrl) => drizzle({ client: as(databaseUrl) });
 var URL_LENGTH = 2048;
 var DEFAULT_LIST_LIMIT = 100;
 var ID_LENGTH = 255;
+var BACKCHANNEL_AUTH_STATUSES = new Set([
+  "approved",
+  "denied",
+  "pending"
+]);
+var DEVICE_AUTHORIZATION_STATUSES = new Set([
+  "approved",
+  "denied",
+  "pending"
+]);
+var backchannelAuthStatus = (value) => {
+  for (const status of BACKCHANNEL_AUTH_STATUSES)
+    if (status === value)
+      return status;
+  throw new Error(`Invalid persisted backchannel authorization status: ${value}`);
+};
+var deviceAuthorizationStatus = (value) => {
+  for (const status of DEVICE_AUTHORIZATION_STATUSES)
+    if (status === value)
+      return status;
+  throw new Error(`Invalid persisted device authorization status: ${value}`);
+};
 var oauthBackchannelAuthRequestsTable = pgTable("auth_oauth_backchannel_auth_requests", {
   auth_req_id: varchar("auth_req_id", { length: ID_LENGTH }).primaryKey(),
   binding_message: text("binding_message"),
@@ -11002,6 +11024,7 @@ var oauthClientsTable = pgTable("auth_oauth_clients", {
 });
 var oauthCodesTable = pgTable("auth_oauth_codes", {
   acr: varchar("acr", { length: ID_LENGTH }),
+  audience: varchar("audience", { length: URL_LENGTH }),
   claims_json: jsonb("claims_json").$type(),
   client_id: varchar("client_id", { length: ID_LENGTH }).notNull(),
   code_challenge: varchar("code_challenge", { length: ID_LENGTH }).notNull(),
@@ -11054,6 +11077,7 @@ var oauthPushedAuthorizationRequestsTable = pgTable("auth_oauth_pushed_authoriza
 });
 var oauthRefreshTokensTable = pgTable("auth_oauth_refresh_tokens", {
   acr: varchar("acr", { length: ID_LENGTH }),
+  audience: varchar("audience", { length: URL_LENGTH }),
   claims_json: jsonb("claims_json").$type(),
   client_id: varchar("client_id", { length: ID_LENGTH }).notNull(),
   created_at_ms: bigint("created_at_ms", { mode: "number" }).notNull(),
@@ -11089,6 +11113,7 @@ var toLogoutDelivery = (row) => ({
 });
 var toCode = (row) => ({
   acr: row.acr ?? undefined,
+  audience: row.audience ?? undefined,
   claims: row.claims_json ?? undefined,
   clientId: row.client_id,
   codeChallenge: row.code_challenge,
@@ -11103,6 +11128,7 @@ var toCode = (row) => ({
 });
 var toCodeValues = (code) => ({
   acr: code.acr ?? null,
+  audience: code.audience ?? null,
   claims_json: code.claims ?? null,
   client_id: code.clientId,
   code_challenge: code.codeChallenge,
@@ -11122,12 +11148,13 @@ var toDeviceAuth = (row) => ({
   expiresAt: row.expires_at_ms,
   intervalSeconds: row.interval_seconds,
   scopes: row.scopes,
-  status: row.status,
+  status: deviceAuthorizationStatus(row.status),
   userCode: row.user_code,
   userSub: row.user_sub ?? undefined
 });
 var toRefresh = (row) => ({
   acr: row.acr ?? undefined,
+  audience: row.audience ?? undefined,
   claims: row.claims_json ?? undefined,
   clientId: row.client_id,
   createdAt: row.created_at_ms,
@@ -11139,6 +11166,7 @@ var toRefresh = (row) => ({
 });
 var toRefreshValues = (token) => ({
   acr: token.acr ?? null,
+  audience: token.audience ?? null,
   claims_json: token.claims ?? null,
   client_id: token.clientId,
   created_at_ms: token.createdAt,
@@ -11302,6 +11330,10 @@ var createPostgresOidcRefreshTokenStore = (db) => ({
   deleteForUser: async (userId) => {
     await db.delete(oauthRefreshTokensTable).where(eq(oauthRefreshTokensTable.user_id, userId));
   },
+  deleteForUserClient: async (userId, clientId) => {
+    const deleted = await db.delete(oauthRefreshTokensTable).where(and(eq(oauthRefreshTokensTable.user_id, userId), eq(oauthRefreshTokensTable.client_id, clientId))).returning({ tokenHash: oauthRefreshTokensTable.token_hash });
+    return deleted.length;
+  },
   getToken: async (tokenHash) => {
     const [row] = await db.select().from(oauthRefreshTokensTable).where(eq(oauthRefreshTokensTable.token_hash, tokenHash)).limit(1);
     return row ? toRefresh(row) : undefined;
@@ -11350,7 +11382,7 @@ var toBackchannelAuth = (row) => ({
   intervalSeconds: row.interval_seconds,
   lastPolledAt: row.last_polled_at_ms ?? undefined,
   scopes: row.scopes,
-  status: row.status,
+  status: backchannelAuthStatus(row.status),
   userSub: row.user_sub ?? undefined
 });
 var createNeonBackchannelAuthStore = (databaseUrl) => createPostgresBackchannelAuthStore(createNeonDatabase(databaseUrl));
@@ -11405,5 +11437,5 @@ export {
   createNeonAuthorizationCodeStore
 };
 
-//# debugId=B38CEA1B4DA2B52E64756E2164756E21
+//# debugId=02F0CDEF2D22712F64756E2164756E21
 //# sourceMappingURL=index.js.map