@absolutejs/auth 0.65.1 → 0.65.3

package/dist/oidc/registration.d.ts

@@ -0,0 +1,138 @@
+import type { ClientRegistrationTokenStore, InitialAccessTokenStore, OAuthClient, OAuthClientStore } from './types';
+export type ClientRegistrationMetadata = {
+    backchannel_logout_uri?: string;
+    client_name?: string;
+    grant_types?: string[];
+    jwks?: JsonWebKey[];
+    jwks_uri?: string;
+    post_logout_redirect_uris?: string[];
+    redirect_uris?: string[];
+    scope?: string;
+};
+export type ClientRegistrationDecision = {
+    allow: false;
+    denyReason: string;
+} | {
+    allow: true;
+    transform?: Partial<OAuthClient>;
+};
+export type OnClientRegistration = (context: {
+    metadata: ClientRegistrationMetadata;
+}) => ClientRegistrationDecision | Promise<ClientRegistrationDecision>;
+export type OnClientRegistered = (context: {
+    client: OAuthClient;
+    metadata: ClientRegistrationMetadata;
+}) => void | Promise<void>;
+export type RegisterClientResult = {
+    body: {
+        error: string;
+        error_description?: string;
+    };
+    ok: false;
+    status: 400 | 401 | 403 | 501;
+} | {
+    body: ClientRegistrationMetadata & {
+        client_id: string;
+        registration_access_token: string;
+        registration_client_uri: string;
+    };
+    ok: true;
+};
+export declare const deleteRegisteredClient: ({ authorization, clientId, clientStore, registrationTokenStore }: {
+    authorization: string | undefined;
+    clientId: string;
+    clientStore: OAuthClientStore;
+    registrationTokenStore: ClientRegistrationTokenStore;
+}) => Promise<{
+    readonly body: {
+        readonly error: "unsupported_response_type";
+    };
+    readonly status: 501;
+} | {
+    readonly body: {
+        readonly error: "invalid_token";
+    };
+    readonly status: 401;
+} | {
+    readonly status: 204;
+    readonly body?: undefined;
+}>;
+export declare const getRegisteredClient: ({ authorization, clientId, clientStore, registrationTokenStore }: {
+    authorization: string | undefined;
+    clientId: string;
+    clientStore: OAuthClientStore;
+    registrationTokenStore: ClientRegistrationTokenStore;
+}) => Promise<{
+    readonly body: {
+        readonly error: "invalid_token";
+    };
+    readonly status: 401;
+} | {
+    readonly body: {
+        readonly error: "invalid_client";
+    };
+    readonly status: 404;
+} | {
+    readonly body: ClientRegistrationMetadata & {
+        client_id: string;
+    };
+    readonly status: 200;
+}>;
+export declare const registerClient: ({ clientStore, initialAccessTokenStore, metadata, onClientRegistration, onClientRegistered, presentedInitialAccessToken, registrationBaseUrl, registrationTokenStore }: {
+    clientStore: OAuthClientStore;
+    initialAccessTokenStore?: InitialAccessTokenStore;
+    metadata: ClientRegistrationMetadata;
+    onClientRegistration?: OnClientRegistration;
+    onClientRegistered?: OnClientRegistered;
+    presentedInitialAccessToken?: string;
+    registrationBaseUrl: string;
+    registrationTokenStore: ClientRegistrationTokenStore;
+}) => Promise<RegisterClientResult>;
+export declare const updateRegisteredClient: ({ authorization, clientId, clientStore, metadata, onClientRegistration, registrationTokenStore }: {
+    authorization: string | undefined;
+    clientId: string;
+    clientStore: OAuthClientStore;
+    metadata: ClientRegistrationMetadata;
+    onClientRegistration?: OnClientRegistration;
+    registrationTokenStore: ClientRegistrationTokenStore;
+}) => Promise<{
+    readonly body: {
+        readonly error: "unsupported_response_type";
+        readonly error_description?: undefined;
+    };
+    readonly status: 501;
+} | {
+    readonly body: {
+        readonly error: "invalid_token";
+        readonly error_description?: undefined;
+    };
+    readonly status: 401;
+} | {
+    readonly body: {
+        readonly error: "invalid_client_metadata";
+        readonly error_description: string;
+    };
+    readonly status: 403;
+} | {
+    readonly body: {
+        readonly error: "invalid_redirect_uri";
+        readonly error_description?: undefined;
+    };
+    readonly status: 400;
+} | {
+    readonly body: {
+        readonly registration_access_token: string;
+        readonly backchannel_logout_uri?: string;
+        readonly client_name?: string;
+        readonly grant_types?: string[];
+        readonly jwks?: JsonWebKey[];
+        readonly jwks_uri?: string;
+        readonly post_logout_redirect_uris?: string[];
+        readonly redirect_uris?: string[];
+        readonly scope?: string;
+        readonly client_id: string;
+        readonly error?: undefined;
+        readonly error_description?: undefined;
+    };
+    readonly status: 200;
+}>;

package/dist/oidc/routes.d.ts

@@ -0,0 +1,569 @@
+import { Elysia } from 'elysia';
+import type { AuthSessionStore } from '../session/types';
+import { type OidcProviderConfig } from './config';
+export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<UserType> & {
+    authSessionStore?: AuthSessionStore<UserType>;
+}) => Elysia<"", {
+    decorator: {};
+    store: {
+        session: import("..").SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    [x: string]: {
+        get: {
+            body: unknown;
+            params: {};
+            query: {
+                client_id?: string | undefined;
+                scope?: string | undefined;
+                nonce?: string | undefined;
+                claims?: string | undefined;
+                resource?: string | undefined;
+                request?: string | undefined;
+                redirect_uri?: string | undefined;
+                acr_values?: string | undefined;
+                code_challenge?: string | undefined;
+                code_challenge_method?: string | undefined;
+                id_token_hint?: string | undefined;
+                max_age?: string | undefined;
+                prompt?: string | undefined;
+                request_uri?: string | undefined;
+                response_mode?: string | undefined;
+                response_type?: string | undefined;
+                state?: string | undefined;
+            };
+            headers: unknown;
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                code?: string | undefined;
+                client_id?: string | undefined;
+                scope?: string | undefined;
+                audience?: string | undefined;
+                resource?: string | undefined;
+                refresh_token?: string | undefined;
+                device_code?: string | undefined;
+                auth_req_id?: string | undefined;
+                grant_type?: string | undefined;
+                claim_token?: string | undefined;
+                assertion?: string | undefined;
+                client_secret?: string | undefined;
+                redirect_uri?: string | undefined;
+                client_assertion?: string | undefined;
+                client_assertion_type?: string | undefined;
+                code_verifier?: string | undefined;
+                'pre-authorized_code'?: string | undefined;
+                subject_token?: string | undefined;
+                subject_token_type?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                scope?: string | undefined;
+                nonce?: string | undefined;
+                audience?: string | undefined;
+                claims?: string | undefined;
+                resource?: string | undefined;
+                client_secret?: string | undefined;
+                redirect_uri?: string | undefined;
+                acr_values?: string | undefined;
+                code_challenge?: string | undefined;
+                code_challenge_method?: string | undefined;
+                response_type?: string | undefined;
+                state?: string | undefined;
+                client_assertion?: string | undefined;
+                client_assertion_type?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                client_secret?: string | undefined;
+                token_type_hint?: string | undefined;
+                token: string;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                client_secret?: string | undefined;
+                token_type_hint?: string | undefined;
+                token: string;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                scope?: string | undefined;
+                client_secret?: string | undefined;
+                login_hint?: string | undefined;
+                binding_message?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                scope?: string | undefined;
+                client_secret?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                action?: "deny" | "approve" | undefined;
+                user_code: string;
+            };
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        get: {
+            body: unknown;
+            params: {};
+            query: {
+                client_id?: string | undefined;
+                id_token_hint?: string | undefined;
+                state?: string | undefined;
+                post_logout_redirect_uri?: string | undefined;
+            };
+            headers: unknown;
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                client_id?: string | undefined;
+                id_token_hint?: string | undefined;
+                state?: string | undefined;
+                post_logout_redirect_uri?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                jwks?: any;
+                scope?: string | undefined;
+                backchannel_logout_uri?: string | undefined;
+                client_name?: string | undefined;
+                grant_types?: string[] | undefined;
+                jwks_uri?: string | undefined;
+                post_logout_redirect_uris?: string[] | undefined;
+                redirect_uris?: string[] | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        ":clientId": {
+            get: {
+                body: unknown;
+                params: {
+                    clientId: string;
+                };
+                query: unknown;
+                headers: {
+                    authorization?: string | undefined;
+                };
+                response: {
+                    200: Response;
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        ":clientId": {
+            put: {
+                body: {
+                    jwks?: any;
+                    scope?: string | undefined;
+                    backchannel_logout_uri?: string | undefined;
+                    client_name?: string | undefined;
+                    grant_types?: string[] | undefined;
+                    jwks_uri?: string | undefined;
+                    post_logout_redirect_uris?: string[] | undefined;
+                    redirect_uris?: string[] | undefined;
+                };
+                params: {
+                    clientId: string;
+                };
+                query: unknown;
+                headers: {
+                    authorization?: string | undefined;
+                };
+                response: {
+                    200: Response;
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        ":clientId": {
+            delete: {
+                body: unknown;
+                params: {
+                    clientId: string;
+                };
+                query: unknown;
+                headers: {
+                    authorization?: string | undefined;
+                };
+                response: {
+                    200: Response;
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        get: {
+            body: unknown;
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        post: {
+            body: {
+                access_token?: string | undefined;
+            };
+            params: {};
+            query: unknown;
+            headers: {
+                authorization?: string | undefined;
+            };
+            response: {
+                200: Response;
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        get: {
+            body: unknown;
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: {
+                    keys: {
+                        alg: string;
+                        crv: string | undefined;
+                        kid: string;
+                        kty: string | undefined;
+                        use: string;
+                        x: string | undefined;
+                        y: string | undefined;
+                    }[];
+                };
+            };
+        };
+    };
+} & {
+    ".well-known": {
+        "openid-configuration": {
+            get: {
+                body: unknown;
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: Record<string, unknown>;
+                };
+            };
+        };
+    };
+} & {
+    ".well-known": {
+        "oauth-authorization-server": {
+            get: {
+                body: unknown;
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: Record<string, unknown>;
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+} & {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;