@adaptive-ds/project-registry 0.2.3

package/dist/zitadel/zitadelIdentityDirectoryCreate.js

@@ -0,0 +1,268 @@
+import { createResult, createResultError } from "#result";
+import { zitadelHttpJsonFetch } from "./zitadelHttpJsonFetch.js";
+const pageSize = 100;
+const defaultMaximumResults = 10_000;
+const maximumMaximumResults = 10_000;
+const maximumPages = 100;
+const knownRoles = new Set(["own", "admin", "superadmin"]);
+function boundedStringIsValid(value, maximumLength) {
+    if (typeof value !== "string" || value.length === 0 || value.length > maximumLength)
+        return false;
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 0x1f || code === 0x7f)
+            return false;
+    }
+    return true;
+}
+function accessTokenIsValid(value) {
+    return boundedStringIsValid(value, 8192);
+}
+function identityValueIsValid(value) {
+    return boundedStringIsValid(value, 256);
+}
+function issuerIsValid(value) {
+    if (typeof value !== "string" || value.length > 2048)
+        return false;
+    try {
+        const url = new URL(value);
+        return (url.protocol === "https:" &&
+            url.username.length === 0 &&
+            url.password.length === 0 &&
+            url.hash.length === 0 &&
+            url.search.length === 0 &&
+            url.pathname === "/" &&
+            url.origin === value);
+    }
+    catch {
+        return false;
+    }
+}
+function maximumResultsResolve(value) {
+    const maximumResults = value ?? defaultMaximumResults;
+    if (typeof maximumResults !== "number" ||
+        !Number.isSafeInteger(maximumResults) ||
+        maximumResults < 1 ||
+        maximumResults > maximumMaximumResults) {
+        return undefined;
+    }
+    return maximumResults;
+}
+function configResolve(options) {
+    const op = "zitadelIdentityDirectoryCreate";
+    if (typeof options !== "object" ||
+        options === null ||
+        typeof options.http !== "function" ||
+        !issuerIsValid(options.issuer) ||
+        !identityValueIsValid(options.orgId) ||
+        !identityValueIsValid(options.projectId)) {
+        return createResultError(op, "Zitadel identity directory configuration is invalid");
+    }
+    const maxResults = maximumResultsResolve(options.maxResults);
+    if (maxResults === undefined)
+        return createResultError(op, "Zitadel identity directory configuration is invalid");
+    if (options.timeoutMs !== undefined &&
+        (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1 || options.timeoutMs > 120_000)) {
+        return createResultError(op, "Zitadel identity directory configuration is invalid");
+    }
+    if (options.maxBodyBytes !== undefined &&
+        (!Number.isSafeInteger(options.maxBodyBytes) || options.maxBodyBytes < 1 || options.maxBodyBytes > 8_388_608)) {
+        return createResultError(op, "Zitadel identity directory configuration is invalid");
+    }
+    return createResult({
+        http: options.http,
+        grantsUrl: `${options.issuer}/management/v1/users/grants/_search`,
+        orgId: options.orgId,
+        projectId: options.projectId,
+        timeoutMs: options.timeoutMs,
+        maxBodyBytes: options.maxBodyBytes,
+        maxResults,
+    });
+}
+function recordResolve(value) {
+    const op = "zitadelIdentityDirectoryResponse";
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return createResultError(op, "Zitadel identity directory response is invalid");
+    }
+    return createResult(value);
+}
+function totalResultResolve(value) {
+    if (typeof value === "number") {
+        return Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+    }
+    if (typeof value === "string" && /^\d+$/.test(value)) {
+        const parsed = Number(value);
+        return Number.isSafeInteger(parsed) ? parsed : undefined;
+    }
+    return undefined;
+}
+function grantResolve(value) {
+    const op = "zitadelIdentityDirectoryResponse";
+    const recordR = recordResolve(value);
+    if (!recordR.success)
+        return recordR;
+    const record = recordR.data;
+    const roleKeys = record.roleKeys;
+    if (!identityValueIsValid(record.userId) ||
+        !identityValueIsValid(record.preferredLoginName) ||
+        !identityValueIsValid(record.projectId) ||
+        !identityValueIsValid(record.orgId) ||
+        !Array.isArray(roleKeys) ||
+        roleKeys.length > 32 ||
+        roleKeys.some((role) => !boundedStringIsValid(role, 200)) ||
+        new Set(roleKeys).size !== roleKeys.length ||
+        (record.state !== "USER_GRANT_STATE_ACTIVE" && record.state !== "USER_GRANT_STATE_INACTIVE")) {
+        return createResultError(op, "Zitadel identity directory response is invalid");
+    }
+    return createResult({
+        userId: record.userId,
+        preferredLoginName: record.preferredLoginName,
+        projectId: record.projectId,
+        orgId: record.orgId,
+        roleKeys,
+        state: record.state,
+    });
+}
+function responsePageResolve(value, config, offset, received) {
+    const op = "zitadelIdentityDirectoryResponse";
+    const recordR = recordResolve(value);
+    if (!recordR.success)
+        return recordR;
+    const result = recordR.data.result;
+    const details = recordR.data.details;
+    const detailsR = recordResolve(details);
+    if (!detailsR.success || !Array.isArray(result) || result.length > pageSize) {
+        return createResultError(op, "Zitadel identity directory response is invalid");
+    }
+    const total = totalResultResolve(detailsR.data.totalResult);
+    if (total === undefined || total > config.maxResults || total < received + result.length) {
+        return createResultError(op, "Zitadel identity directory response is invalid");
+    }
+    const grants = [];
+    for (const entry of result) {
+        const grantR = grantResolve(entry);
+        if (!grantR.success)
+            return grantR;
+        grants.push(grantR.data);
+    }
+    if (offset !== received)
+        return createResultError(op, "Zitadel identity directory response is invalid");
+    return createResult({ grants, total });
+}
+function queryCreate(kind, value, offset) {
+    return JSON.stringify({
+        query: { offset, limit: pageSize, asc: true },
+        queries: [{ [kind]: { [kind === "projectIdQuery" ? "projectId" : "userId"]: value } }],
+    });
+}
+async function grantsList(config, queryKind, queryValue, accessToken) {
+    const op = "zitadelIdentityDirectoryGrantsList";
+    if (!accessTokenIsValid(accessToken))
+        return createResultError(op, "Zitadel identity directory is unavailable");
+    const grants = [];
+    let offset = 0;
+    for (let page = 0; page < maximumPages; page += 1) {
+        const responseR = await zitadelHttpJsonFetch(config.http, config.grantsUrl, {
+            method: "POST",
+            headers: {
+                accept: "application/json",
+                authorization: `Bearer ${accessToken}`,
+                "content-type": "application/json",
+                "x-zitadel-orgid": config.orgId,
+            },
+            body: queryCreate(queryKind, queryValue, offset),
+        }, { timeoutMs: config.timeoutMs, maxBodyBytes: config.maxBodyBytes });
+        if (!responseR.success || !responseR.data.response.ok) {
+            return createResultError(op, "Zitadel identity directory is unavailable");
+        }
+        const pageR = responsePageResolve(responseR.data.body, config, offset, grants.length);
+        if (!pageR.success)
+            return pageR;
+        if (queryKind === "userIdQuery" && pageR.data.grants.some((grant) => grant.userId !== queryValue)) {
+            return createResultError(op, "Zitadel identity directory response is invalid");
+        }
+        grants.push(...pageR.data.grants);
+        if (grants.length === pageR.data.total)
+            return createResult(grants);
+        if (pageR.data.grants.length === 0 || pageR.data.grants.length < pageSize) {
+            return createResultError(op, "Zitadel identity directory response is invalid");
+        }
+        offset += pageR.data.grants.length;
+    }
+    return createResultError(op, "Zitadel identity directory response is too large");
+}
+function currentProjectGrantResolve(grants, config, subject) {
+    const op = "zitadelIdentityDirectoryGrantResolve";
+    const current = grants.filter((grant) => grant.userId === subject &&
+        grant.projectId === config.projectId &&
+        grant.orgId === config.orgId &&
+        grant.state === "USER_GRANT_STATE_ACTIVE");
+    if (current.length > 1)
+        return createResultError(op, "Zitadel identity directory returned duplicate project grants");
+    const grant = current[0];
+    if (grant?.roleKeys.some((role) => !knownRoles.has(role))) {
+        return createResultError(op, "Zitadel identity directory returned an unknown project role");
+    }
+    return createResult(grant);
+}
+function usersResolve(grants, config) {
+    const op = "zitadelIdentityDirectoryUsersList";
+    const users = [];
+    const subjects = new Set();
+    for (const grant of grants) {
+        if (grant.projectId !== config.projectId || grant.orgId !== config.orgId)
+            continue;
+        if (grant.state !== "USER_GRANT_STATE_ACTIVE")
+            continue;
+        if (grant.roleKeys.some((role) => !knownRoles.has(role))) {
+            return createResultError(op, "Zitadel identity directory returned an unknown project role");
+        }
+        if (subjects.has(grant.userId)) {
+            return createResultError(op, "Zitadel identity directory returned duplicate project grants");
+        }
+        subjects.add(grant.userId);
+        users.push({ subject: grant.userId, preferredUsername: grant.preferredLoginName });
+    }
+    return createResult(users);
+}
+export function zitadelIdentityDirectoryCreate(options) {
+    const configR = configResolve(options);
+    if (!configR.success)
+        return configR;
+    const config = configR.data;
+    return createResult({
+        async usersList(accessToken) {
+            const grantsR = await grantsList(config, "projectIdQuery", config.projectId, accessToken);
+            if (!grantsR.success)
+                return grantsR;
+            return usersResolve(grantsR.data, config);
+        },
+        async userRolesList(subject, accessToken) {
+            const op = "zitadelIdentityDirectoryUserRolesList";
+            if (!identityValueIsValid(subject))
+                return createResultError(op, "Zitadel identity directory is unavailable");
+            const grantsR = await grantsList(config, "userIdQuery", subject, accessToken);
+            if (!grantsR.success)
+                return grantsR;
+            const grantR = currentProjectGrantResolve(grantsR.data, config, subject);
+            if (!grantR.success)
+                return grantR;
+            return createResult(grantR.data?.roleKeys ?? []);
+        },
+        async userPreferredUsernameResolve(subject, accessToken) {
+            const op = "zitadelIdentityDirectoryUserPreferredUsernameResolve";
+            if (!identityValueIsValid(subject))
+                return createResultError(op, "Zitadel identity directory is unavailable");
+            const grantsR = await grantsList(config, "userIdQuery", subject, accessToken);
+            if (!grantsR.success)
+                return grantsR;
+            const grantR = currentProjectGrantResolve(grantsR.data, config, subject);
+            if (!grantR.success)
+                return grantR;
+            if (grantR.data === undefined)
+                return createResultError(op, "Zitadel identity directory is unavailable");
+            return createResult(grantR.data.preferredLoginName);
+        },
+    });
+}
+//# sourceMappingURL=zitadelIdentityDirectoryCreate.js.map

package/dist/zitadel/zitadelIdentityDirectoryCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelIdentityDirectoryCreate.js","sourceRoot":"","sources":["../../src/zitadel/zitadelIdentityDirectoryCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAmC,MAAM,SAAS,CAAA;AAI1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,qBAAqB,GAAG,MAAM,CAAA;AACpC,MAAM,qBAAqB,GAAG,MAAM,CAAA;AACpC,MAAM,YAAY,GAAG,GAAG,CAAA;AACxB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAqB1D,SAAS,oBAAoB,CAAC,KAAc,EAAE,aAAqB;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa;QAAE,OAAO,KAAK,CAAA;IACjG,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAA;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACvB,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,MAAM,KAAK,KAAK,CACrB,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,cAAc,GAAG,KAAK,IAAI,qBAAqB,CAAA;IACrD,IACE,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;QACrC,cAAc,GAAG,CAAC;QAClB,cAAc,GAAG,qBAAqB,EACtC,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,OAAwC;IAC7D,MAAM,EAAE,GAAG,gCAAgC,CAAA;IAC3C,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9B,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,EACxC,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAA;IACjH,IACE,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,EAClG,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAA;IACrF,CAAC;IACD,IACE,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,EAC7G,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,qCAAqC;QACjE,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,EAAE,GAAG,kCAAkC,CAAA;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,YAAY,CAAC,KAAgC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,EAAE,GAAG,kCAAkC,CAAA;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,IACE,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,CAAC,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChD,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,QAAQ,CAAC,MAAM,GAAG,EAAE;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAC1C,CAAC,MAAM,CAAC,KAAK,KAAK,yBAAyB,IAAI,MAAM,CAAC,KAAK,KAAK,2BAA2B,CAAC,EAC5F,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ;QACR,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,MAAuB,EACvB,MAAc,EACd,QAAgB;IAEhB,MAAM,EAAE,GAAG,kCAAkC,CAAA;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAA;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAA;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC5E,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzF,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;IACvG,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,WAAW,CAAC,IAAsC,EAAE,KAAa,EAAE,MAAc;IACxF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE;QAC7C,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;KACvF,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAuB,EACvB,SAA2C,EAC3C,UAAkB,EAClB,WAAmB;IAEnB,MAAM,EAAE,GAAG,oCAAoC,CAAA;IAC/C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;IAC/G,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,YAAY,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,SAAS,EAChB;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,MAAM,CAAC,KAAK;aAChC;YACD,IAAI,EAAE,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC;SACjD,EACD,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CACnE,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACtD,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;QACrF,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QAChC,IAAI,SAAS,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;YAClG,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;QACnE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC1E,OAAO,iBAAiB,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;IACpC,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA4B,EAC5B,MAAuB,EACvB,OAAe;IAEf,MAAM,EAAE,GAAG,sCAAsC,CAAA;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACpC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QAC5B,KAAK,CAAC,KAAK,KAAK,yBAAyB,CAC5C,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8DAA8D,CAAC,CAAA;IACpH,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACxB,IAAI,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,iBAAiB,CAAC,EAAE,EAAE,6DAA6D,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B,EAAE,MAAuB;IACzE,MAAM,EAAE,GAAG,mCAAmC,CAAA;IAC9C,MAAM,KAAK,GAA4B,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,SAAQ;QAClF,IAAI,KAAK,CAAC,KAAK,KAAK,yBAAyB;YAAE,SAAQ;QACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,iBAAiB,CAAC,EAAE,EAAE,6DAA6D,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,iBAAiB,CAAC,EAAE,EAAE,8DAA8D,CAAC,CAAA;QAC9F,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAwC;IACrF,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IAC3B,OAAO,YAAY,CAAC;QAClB,KAAK,CAAC,SAAS,CAAC,WAAmB;YACjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACzF,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAA;YACpC,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3C,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,WAAmB;YACtD,MAAM,EAAE,GAAG,uCAAuC,CAAA;YAClD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;YAC7G,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;YAC7E,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAA;YACpC,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;YACxE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAA;YAClC,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,KAAK,CAAC,4BAA4B,CAAC,OAAe,EAAE,WAAmB;YACrE,MAAM,EAAE,GAAG,sDAAsD,CAAA;YACjE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;YAC7G,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;YAC7E,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAA;YACpC,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;YACxE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;YACxG,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACrD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/zitadel/zitadelJwksFetch.d.ts

@@ -0,0 +1,6 @@
+import { type PromiseResult } from "#result";
+import type { ZitadelHttp } from "./ZitadelHttp.js";
+import type { ZitadelHttpOptions } from "./ZitadelHttpOptions.js";
+import type { ZitadelJwks } from "./ZitadelJwks.js";
+export declare function zitadelJwksFetch(jwksUri: string, http: ZitadelHttp, options?: ZitadelHttpOptions): PromiseResult<ZitadelJwks>;
+//# sourceMappingURL=zitadelJwksFetch.d.ts.map

package/dist/zitadel/zitadelJwksFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelJwksFetch.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelJwksFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB,GAC/B,aAAa,CAAC,WAAW,CAAC,CA+B5B"}

package/dist/zitadel/zitadelJwksFetch.js

@@ -0,0 +1,36 @@
+import { createResult, createResultError } from "#result";
+import { zitadelHttpJsonFetch } from "./zitadelHttpJsonFetch.js";
+import { zitadelJwksValidate } from "./zitadelJwksValidate.js";
+export async function zitadelJwksFetch(jwksUri, http, options = {}) {
+    const op = "zitadelJwksFetch";
+    if (typeof jwksUri !== "string" || jwksUri.length === 0 || jwksUri.length > 2048 || typeof http !== "function")
+        return createResultError(op, "Zitadel keys are unavailable");
+    try {
+        const url = new URL(jwksUri);
+        if (url.protocol !== "https:" || url.username.length > 0 || url.password.length > 0 || url.hash.length > 0) {
+            return createResultError(op, "Zitadel keys are unavailable");
+        }
+    }
+    catch {
+        return createResultError(op, "Zitadel keys are unavailable");
+    }
+    try {
+        const responseR = await zitadelHttpJsonFetch(http, jwksUri, { method: "GET", headers: { accept: "application/json" } }, options);
+        if (!responseR.success)
+            return createResultError(op, "Zitadel keys are unavailable");
+        if (!responseR.data.response.ok)
+            return createResultError(op, "Zitadel keys are unavailable");
+        const body = responseR.data.body;
+        if (typeof body !== "object" || body === null || Array.isArray(body)) {
+            return createResultError(op, "Zitadel keys are invalid");
+        }
+        const keysR = zitadelJwksValidate(body);
+        if (!keysR.success)
+            return createResultError(op, "Zitadel keys are invalid");
+        return createResult(keysR.data);
+    }
+    catch {
+        return createResultError(op, "Zitadel keys are unavailable");
+    }
+}
+//# sourceMappingURL=zitadelJwksFetch.js.map

package/dist/zitadel/zitadelJwksFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelJwksFetch.js","sourceRoot":"","sources":["../../src/zitadel/zitadelJwksFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAI7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,EAAE,GAAG,kBAAkB,CAAA;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,UAAU;QAC5G,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3G,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,IAAI,EACJ,OAAO,EACP,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAC1D,OAAO,CACR,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QACpF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC7F,MAAM,IAAI,GAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAC5E,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelJwksValidate.d.ts

@@ -0,0 +1,4 @@
+import { type Result } from "#result";
+import type { ZitadelJwks } from "./ZitadelJwks.js";
+export declare function zitadelJwksValidate(value: unknown): Result<ZitadelJwks>;
+//# sourceMappingURL=zitadelJwksValidate.d.ts.map

package/dist/zitadel/zitadelJwksValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelJwksValidate.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelJwksValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAEtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAqDnD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAYvE"}

package/dist/zitadel/zitadelJwksValidate.js

@@ -0,0 +1,69 @@
+import { createResult, createResultError } from "#result";
+function base64UrlIsCanonical(value) {
+    if (typeof value !== "string" || value.length > 4096 || !/^[A-Za-z0-9_-]+$/.test(value) || value.length % 4 === 1)
+        return false;
+    try {
+        const padded = value.replaceAll("-", "+").replaceAll("_", "/") + "=".repeat((4 - (value.length % 4)) % 4);
+        const binary = atob(padded);
+        let encoded = "";
+        for (const character of binary)
+            encoded += String.fromCharCode(character.charCodeAt(0));
+        const bytes = Uint8Array.from(encoded, (character) => character.charCodeAt(0));
+        let reencodedBinary = "";
+        for (const byte of bytes)
+            reencodedBinary += String.fromCharCode(byte);
+        const reencoded = btoa(reencodedBinary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+        return reencoded === value;
+    }
+    catch {
+        return false;
+    }
+}
+function keyIdIsValid(value) {
+    if (typeof value !== "string")
+        return false;
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 0x1f || code === 0x7f)
+            return false;
+    }
+    return value.length > 0 && value.length <= 256 && !/\s/.test(value);
+}
+function keyIsValid(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const key = value;
+    if (typeof key.kty !== "string" || key.kty.length === 0 || key.kty.length > 32 || !keyIdIsValid(key.kid))
+        return false;
+    if (key.use !== undefined && key.use !== "sig")
+        return false;
+    if (key.alg !== undefined && key.alg !== "RS256" && key.alg !== "PS256" && key.alg !== "ES256")
+        return false;
+    if (key.kty === "RSA") {
+        return ((key.alg === undefined || key.alg === "RS256" || key.alg === "PS256") &&
+            base64UrlIsCanonical(key.n) &&
+            base64UrlIsCanonical(key.e));
+    }
+    if (key.kty === "EC") {
+        return ((key.alg === undefined || key.alg === "ES256") &&
+            key.crv === "P-256" &&
+            base64UrlIsCanonical(key.x) &&
+            base64UrlIsCanonical(key.y));
+    }
+    return false;
+}
+export function zitadelJwksValidate(value) {
+    const op = "zitadelJwksValidate";
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return createResultError(op, "Zitadel keys are invalid");
+    }
+    const keys = value.keys;
+    if (!Array.isArray(keys) || keys.length === 0 || keys.length > 32 || !keys.every(keyIsValid)) {
+        return createResultError(op, "Zitadel keys are invalid");
+    }
+    const keyIds = new Set(keys.map((key) => key.kid));
+    if (keyIds.size !== keys.length)
+        return createResultError(op, "Zitadel keys are invalid");
+    return createResult({ keys });
+}
+//# sourceMappingURL=zitadelJwksValidate.js.map

package/dist/zitadel/zitadelJwksValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelJwksValidate.js","sourceRoot":"","sources":["../../src/zitadel/zitadelJwksValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAItE,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAC/G,OAAO,KAAK,CAAA;IACd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACzG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,OAAO,GAAG,EAAE,CAAA;QAChB,KAAK,MAAM,SAAS,IAAI,MAAM;YAAE,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QACvF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9E,IAAI,eAAe,GAAG,EAAE,CAAA;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,eAAe,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACpG,OAAO,SAAS,KAAK,KAAK,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACtH,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IAC5G,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,CACL,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC;YACrE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CACL,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC;YAC9C,GAAG,CAAC,GAAG,KAAK,OAAO;YACnB,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5B,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,EAAE,GAAG,qBAAqB,CAAA;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,GAAI,KAAiC,CAAC,IAAI,CAAA;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7F,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;IACzF,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/B,CAAC"}

package/dist/zitadel/zitadelLoginStart.d.ts

@@ -0,0 +1,5 @@
+import { type PromiseResult } from "#result";
+import type { ZitadelLoginStartOptions } from "./ZitadelLoginStartOptions.js";
+import type { ZitadelLoginStartResult } from "./ZitadelLoginStartResult.js";
+export declare function zitadelLoginStart(options: ZitadelLoginStartOptions): PromiseResult<ZitadelLoginStartResult>;
+//# sourceMappingURL=zitadelLoginStart.d.ts.map

package/dist/zitadel/zitadelLoginStart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelLoginStart.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelLoginStart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAQ7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AAgC3E,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,aAAa,CAAC,uBAAuB,CAAC,CA4DjH"}

package/dist/zitadel/zitadelLoginStart.js

@@ -0,0 +1,102 @@
+import { createResult, createResultError } from "#result";
+import { clockNowResolve } from "../runtime/clockNowResolve.js";
+import { promiseBoundedRace } from "../runtime/promiseBoundedRace.js";
+import { randomBytesResultResolve } from "../runtime/randomBytesResultResolve.js";
+import { timeExpiryResolve } from "../runtime/timeExpiryResolve.js";
+import { randomBytesGenerate } from "../session/randomBytesGenerate.js";
+import { zitadelConfigValidate } from "./zitadelConfigValidate.js";
+import { zitadelDiscoveryFetch } from "./zitadelDiscoveryFetch.js";
+import { zitadelPreAuthCookieHash } from "./zitadelPreAuthCookieHash.js";
+import { zitadelPreAuthCookieSerialize } from "./zitadelPreAuthCookieSerialize.js";
+function base64UrlEncode(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+async function pkceChallenge(codeVerifier) {
+    try {
+        const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier));
+        return base64UrlEncode(new Uint8Array(digest));
+    }
+    catch {
+        return undefined;
+    }
+}
+async function randomValue(randomBytes) {
+    try {
+        const bytesR = randomBytesResultResolve(randomBytes, 32);
+        if (!bytesR.success)
+            return undefined;
+        const value = base64UrlEncode(bytesR.data);
+        return /^[A-Za-z0-9_-]{43}$/.test(value) ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function zitadelLoginStart(options) {
+    const op = "zitadelLoginStart";
+    const configR = zitadelConfigValidate(options.config);
+    if (!configR.success)
+        return createResultError(op, "login configuration is invalid");
+    const clock = options.clock ?? Date.now;
+    const randomBytes = options.randomBytes ?? randomBytesGenerate;
+    const nowR = clockNowResolve(clock);
+    if (!nowR.success)
+        return createResultError(op, "login transaction could not be created");
+    const maxAgeSeconds = configR.data.loginTransactionMaxAgeSeconds ?? 600;
+    const expiresAtR = timeExpiryResolve(nowR.data, maxAgeSeconds);
+    if (!expiresAtR.success)
+        return createResultError(op, "login transaction could not be created");
+    try {
+        const discoveryR = await zitadelDiscoveryFetch(configR.data, options.http, {
+            timeoutMs: options.timeoutMs,
+            signal: options.signal,
+            maxBodyBytes: options.maxBodyBytes,
+        });
+        if (!discoveryR.success)
+            return createResultError(op, "login provider is unavailable");
+        const state = await randomValue(randomBytes);
+        const nonce = await randomValue(randomBytes);
+        const codeVerifier = await randomValue(randomBytes);
+        const preAuthCookieSecret = await randomValue(randomBytes);
+        if (state === undefined || nonce === undefined || codeVerifier === undefined || preAuthCookieSecret === undefined) {
+            return createResultError(op, "login transaction could not be created");
+        }
+        const preAuthCookieHashR = await zitadelPreAuthCookieHash(preAuthCookieSecret);
+        if (!preAuthCookieHashR.success)
+            return createResultError(op, "login transaction could not be created");
+        const challenge = await pkceChallenge(codeVerifier);
+        if (challenge === undefined)
+            return createResultError(op, "login transaction could not be created");
+        const cookieR = zitadelPreAuthCookieSerialize(preAuthCookieSecret, { maxAgeSeconds });
+        if (!cookieR.success)
+            return createResultError(op, "login transaction could not be created");
+        const transactionR = await promiseBoundedRace(Promise.resolve().then(() => options.transactions.put({
+            state,
+            nonce,
+            codeVerifier,
+            callbackUrl: configR.data.callbackUrl,
+            preAuthCookieHash: preAuthCookieHashR.data,
+            expiresAt: expiresAtR.data,
+        })), options);
+        if (!transactionR.success || !transactionR.data.success) {
+            return createResultError(op, "login transaction could not be created");
+        }
+        const authorizationUrl = new URL(discoveryR.data.authorizationEndpoint);
+        authorizationUrl.searchParams.set("response_type", "code");
+        authorizationUrl.searchParams.set("client_id", configR.data.clientId);
+        authorizationUrl.searchParams.set("redirect_uri", configR.data.callbackUrl);
+        authorizationUrl.searchParams.set("scope", (configR.data.scope ?? ["openid", "profile", "email"]).join(" "));
+        authorizationUrl.searchParams.set("state", state);
+        authorizationUrl.searchParams.set("nonce", nonce);
+        authorizationUrl.searchParams.set("code_challenge", challenge);
+        authorizationUrl.searchParams.set("code_challenge_method", "S256");
+        return createResult({ authorizationUrl: authorizationUrl.toString(), state, setCookie: cookieR.data });
+    }
+    catch {
+        return createResultError(op, "login transaction could not be created");
+    }
+}
+//# sourceMappingURL=zitadelLoginStart.js.map

package/dist/zitadel/zitadelLoginStart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelLoginStart.js","sourceRoot":"","sources":["../../src/zitadel/zitadelLoginStart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAGvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAA;AAElF,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;QAC5F,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,WAAwB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1C,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,GAAG,mBAAmB,CAAA;IAC9B,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;IACpF,MAAM,KAAK,GAAU,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IAC9C,MAAM,WAAW,GAAgB,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAA;IAC3E,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;IACzF,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,GAAG,CAAA;IACvE,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9D,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;IAC/F,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YACzE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACtF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;QAC5C,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,mBAAmB,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAClH,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,mBAAmB,CAAC,CAAA;QAC9E,IAAI,CAAC,kBAAkB,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;QACvG,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAA;QACnD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;QACnG,MAAM,OAAO,GAAG,6BAA6B,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;QACrF,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;QAC5F,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC1B,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;YACvB,KAAK;YACL,KAAK;YACL,YAAY;YACZ,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;YACrC,iBAAiB,EAAE,kBAAkB,CAAC,IAAI;YAC1C,SAAS,EAAE,UAAU,CAAC,IAAI;SAC3B,CAAC,CACH,EACD,OAAO,CACR,CAAA;QACD,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QACvE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;QAC1D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC3E,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5G,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACjD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACjD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;QAC9D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;QAClE,OAAO,YAAY,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;IACxE,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelLoginTransactionStoreCreate.d.ts

@@ -0,0 +1,4 @@
+import type { LoginTransactionStore } from "./LoginTransactionStore.js";
+import type { LoginTransactionStoreOptions } from "./LoginTransactionStoreOptions.js";
+export declare function zitadelLoginTransactionStoreCreate(options?: LoginTransactionStoreOptions): LoginTransactionStore;
+//# sourceMappingURL=zitadelLoginTransactionStoreCreate.d.ts.map

package/dist/zitadel/zitadelLoginTransactionStoreCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelLoginTransactionStoreCreate.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelLoginTransactionStoreCreate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAWrF,wBAAgB,kCAAkC,CAAC,OAAO,GAAE,4BAAiC,GAAG,qBAAqB,CAiEpH"}