@absolutejs/auth 0.56.9 → 0.56.10

package/dist/oidc/index.d.ts

@@ -7,5 +7,6 @@
  */
 export type { OidcProviderConfig } from './config';
 export { generateSigningKey, jwkThumbprint, signJwt, toPublicJwk, verifyJwt, type SigningKey } from './keys';
+export { revokeOAuthClientCredentials } from './operator';
 export { createNeonAuthorizationCodeStore, createNeonClientAssertionJtiStore, createNeonClientRegistrationTokenStore, createNeonDeviceAuthorizationStore, createNeonInitialAccessTokenStore, createNeonOAuthClientStore, createNeonOidcRefreshTokenStore, createPostgresAuthorizationCodeStore, createPostgresClientAssertionJtiStore, createPostgresClientRegistrationTokenStore, createPostgresDeviceAuthorizationStore, createPostgresInitialAccessTokenStore, createPostgresOAuthClientStore, createPostgresOidcRefreshTokenStore } from './postgresStores';
 export type { AuthorizationCodeStore, ClientAssertionJtiStore, ClientRegistrationTokenStore, DeviceAuthorizationStore, InitialAccessTokenStore, OAuthClient, OAuthClientStore, OidcRefreshTokenConnection, OidcRefreshTokenStore } from './types';

package/dist/oidc/index.js

@@ -125,6 +125,24 @@ var verifyJwt = async (token, publicJwk) => {
     payload
   };
 };
+// src/oidc/operator.ts
+var operatorDelete = (store, storeName) => {
+  if (!store.deleteForClient)
+    throw new Error(`${storeName} does not support operator revocation`);
+  return store.deleteForClient;
+};
+var revokeOAuthClientCredentials = async (clientId, stores) => {
+  const revokedAuthorizationCodes = await operatorDelete(stores.authorizationCodeStore, "Authorization code store")(clientId);
+  const revokedDeviceAuthorizations = await operatorDelete(stores.deviceAuthorizationStore, "Device authorization store")(clientId);
+  const revokedRefreshTokens = await operatorDelete(stores.refreshTokenStore, "Refresh token store")(clientId);
+  const revokedRegistrationTokens = await operatorDelete(stores.clientRegistrationTokenStore, "Client registration token store")(clientId);
+  return {
+    revokedAuthorizationCodes,
+    revokedDeviceAuthorizations,
+    revokedRefreshTokens,
+    revokedRegistrationTokens
+  };
+};
 // node_modules/drizzle-orm/entity.js
 var entityKind = Symbol.for("drizzle:entityKind");
 var hasOwnEntityKind = Symbol.for("drizzle:hasOwnEntityKind");
@@ -11907,6 +11925,10 @@ var createPostgresAuthorizationCodeStore = (db) => ({
     const [row] = await db.delete(oauthCodesTable).where(eq(oauthCodesTable.code_hash, codeHash)).returning();
     return row ? toCode(row) : undefined;
   },
+  deleteForClient: async (clientId) => {
+    const deleted = await db.delete(oauthCodesTable).where(eq(oauthCodesTable.client_id, clientId)).returning({ codeHash: oauthCodesTable.code_hash });
+    return deleted.length;
+  },
   deleteForUserClient: async (userId, clientId) => {
     const deleted = await db.delete(oauthCodesTable).where(and(eq(oauthCodesTable.user_id, userId), eq(oauthCodesTable.client_id, clientId))).returning({ codeHash: oauthCodesTable.code_hash });
     return deleted.length;
@@ -11936,6 +11958,12 @@ var createPostgresClientRegistrationTokenStore = (db) => ({
   deleteByClientId: async (clientId) => {
     await db.delete(oauthClientRegistrationTokensTable).where(eq(oauthClientRegistrationTokensTable.client_id, clientId));
   },
+  deleteForClient: async (clientId) => {
+    const deleted = await db.delete(oauthClientRegistrationTokensTable).where(eq(oauthClientRegistrationTokensTable.client_id, clientId)).returning({
+      tokenHash: oauthClientRegistrationTokensTable.token_hash
+    });
+    return deleted.length;
+  },
   findByTokenHash: async (tokenHash) => {
     const [row] = await db.select().from(oauthClientRegistrationTokensTable).where(eq(oauthClientRegistrationTokensTable.token_hash, tokenHash)).limit(1);
     if (!row)
@@ -11960,6 +11988,12 @@ var createPostgresDeviceAuthorizationStore = (db) => ({
   deleteByDeviceCodeHash: async (deviceCodeHash) => {
     await db.delete(oauthDeviceAuthorizationsTable).where(eq(oauthDeviceAuthorizationsTable.device_code_hash, deviceCodeHash));
   },
+  deleteForClient: async (clientId) => {
+    const deleted = await db.delete(oauthDeviceAuthorizationsTable).where(eq(oauthDeviceAuthorizationsTable.client_id, clientId)).returning({
+      deviceCodeHash: oauthDeviceAuthorizationsTable.device_code_hash
+    });
+    return deleted.length;
+  },
   deleteForUserClient: async (userId, clientId) => {
     const deleted = await db.delete(oauthDeviceAuthorizationsTable).where(and(eq(oauthDeviceAuthorizationsTable.user_sub, userId), eq(oauthDeviceAuthorizationsTable.client_id, clientId))).returning({
       deviceCodeHash: oauthDeviceAuthorizationsTable.device_code_hash
@@ -12054,6 +12088,10 @@ var createPostgresOidcRefreshTokenStore = (db) => ({
     const [row] = await db.delete(oauthRefreshTokensTable).where(eq(oauthRefreshTokensTable.token_hash, tokenHash)).returning();
     return row ? toRefresh(row) : undefined;
   },
+  deleteForClient: async (clientId) => {
+    const deleted = await db.delete(oauthRefreshTokensTable).where(eq(oauthRefreshTokensTable.client_id, clientId)).returning({ tokenHash: oauthRefreshTokensTable.token_hash });
+    return deleted.length;
+  },
   deleteForUser: async (userId) => {
     await db.delete(oauthRefreshTokensTable).where(eq(oauthRefreshTokensTable.user_id, userId));
   },
@@ -12153,6 +12191,7 @@ export {
   verifyJwt,
   toPublicJwk,
   signJwt,
+  revokeOAuthClientCredentials,
   jwkThumbprint,
   generateSigningKey,
   createPostgresOidcRefreshTokenStore,
@@ -12171,5 +12210,5 @@ export {
   createNeonAuthorizationCodeStore
 };
 
-//# debugId=84ADA662658B454564756E2164756E21
+//# debugId=3782E808539F50C164756E2164756E21
 //# sourceMappingURL=index.js.map