@aifabrix/miso-client 3.2.0 → 3.3.0

package/README.md

@@ -190,6 +190,23 @@ const dataClient = new DataClient({
 // Make authenticated requests with automatic audit logging
 const users = await dataClient.get('/api/users');
 const newUser = await dataClient.post('/api/users', { name: 'John' });
+
+// OAuth callback is automatically handled on initialization
+// Token is extracted from URL hash fragment (#token=...) and stored securely
+// Hash fragment is immediately removed from URL (< 100ms) for security
+
+// Token refresh callback (automatic refresh on 401 errors)
+const dataClientWithRefresh = new DataClient({
+  baseUrl: 'https://api.example.com',
+  misoConfig: { /* ... */ },
+  onTokenRefresh: async () => {
+    // Call your backend endpoint that handles refresh token securely
+    const response = await fetch('/api/refresh-token', {
+      credentials: 'include', // Include cookies for auth
+    });
+    return await response.json(); // { token: string, expiresIn: number }
+  },
+});
 ```
 
 → [DataClient Documentation](docs/data-client.md) - Includes security guide and Client Token Pattern  
@@ -256,7 +273,7 @@ if (token) {
 
 ### Step 4: Activate RBAC (Roles)
 
-**What happens:** Check user roles to control access. Roles are cached in Redis for performance.
+**What happens:** Check user roles to control access. Roles are cached in Redis for performance. Token validation is also cached (15-minute TTL) to reduce API calls.
 
 ```typescript
 import { MisoClient, loadConfig } from '@aifabrix/miso-client';
@@ -288,6 +305,8 @@ if (isAdmin) {
 
 **What happens:** Application logs are sent to the Miso Controller with client token authentication.
 
+**Basic Logging:**
+
 ```typescript
 import { MisoClient, loadConfig } from '@aifabrix/miso-client';
 
@@ -304,7 +323,42 @@ await client.log.error('Operation failed', { error: err.message });
 await client.log.warn('Unusual activity', { details: '...' });
 ```
 
-**What happens to logs?** They're sent to the Miso Controller for centralized monitoring and analysis. Client token is automatically included.
+**Fluent API with Request Context (Express):**
+
+```typescript
+import { Request } from 'express';
+
+// Auto-extract context from Express Request
+app.get('/api/users', async (req: Request, res) => {
+  await client.log
+    .withRequest(req)
+    .info('Users list accessed');
+  // Automatically includes: IP, method, path, userAgent, correlationId, userId
+});
+```
+
+**Indexed Context for Fast Queries:**
+
+```typescript
+import { extractLoggingContext } from '@aifabrix/miso-client';
+
+const logContext = extractLoggingContext({
+  source: {
+    key: 'datasource-1',
+    displayName: 'PostgreSQL DB',
+    externalSystem: { key: 'system-1', displayName: 'External API' }
+  },
+  record: { key: 'record-123', displayName: 'User Profile' }
+});
+
+await client.log
+  .withIndexedContext(logContext)
+  .addCorrelation(correlationId)
+  .addUser(userId)
+  .error('Sync failed');
+```
+
+**What happens to logs?** They're sent to the Miso Controller for centralized monitoring and analysis. Client token is automatically included. Indexed context fields enable fast database queries for observability and compliance.
 
 **Event Emission Mode:** When embedding the SDK directly in your own application, enable `emitEvents = true` to receive logs as Node.js events instead of HTTP calls:
 
@@ -820,6 +874,7 @@ interface MisoClientConfig {
   cache?: {
     roleTTL?: number;         // Role cache TTL (default: 900s)
     permissionTTL?: number;   // Permission cache TTL (default: 900s)
+    tokenValidationTTL?: number; // Token validation cache TTL (default: 900s)
   };
   audit?: AuditConfig;        // Optional: Audit logging configuration
 }

package/dist/api/auth-cache.api.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Auth Cache API client
+ * Handles cache statistics and management
+ */
+import { HttpClient } from '../utils/http-client';
+import { AuthStrategy } from '../types/config.types';
+import { CacheStatsResponse, CachePerformanceResponse, CacheEfficiencyResponse, ClearCacheResponse, InvalidateCacheRequest, InvalidateCacheResponse } from './types/auth.types';
+/**
+ * Auth Cache API class
+ * Handles cache-related endpoints
+ */
+export declare class AuthCacheApi {
+    private httpClient;
+    private static readonly CACHE_STATS_ENDPOINT;
+    private static readonly CACHE_PERFORMANCE_ENDPOINT;
+    private static readonly CACHE_EFFICIENCY_ENDPOINT;
+    private static readonly CACHE_CLEAR_ENDPOINT;
+    private static readonly CACHE_INVALIDATE_ENDPOINT;
+    constructor(httpClient: HttpClient);
+    /**
+     * Get cache statistics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache stats response with hits, misses, and size
+     */
+    getCacheStats(authStrategy?: AuthStrategy): Promise<CacheStatsResponse>;
+    /**
+     * Get cache performance metrics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache performance response with hitRate and avgResponseTime
+     */
+    getCachePerformance(authStrategy?: AuthStrategy): Promise<CachePerformanceResponse>;
+    /**
+     * Get cache efficiency metrics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache efficiency response with efficiency score
+     */
+    getCacheEfficiency(authStrategy?: AuthStrategy): Promise<CacheEfficiencyResponse>;
+    /**
+     * Clear authentication cache
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Clear cache response with success message
+     */
+    clearCache(authStrategy?: AuthStrategy): Promise<ClearCacheResponse>;
+    /**
+     * Invalidate cache entries by pattern
+     * @param params - Invalidate cache request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Invalidate cache response with number of invalidated entries
+     */
+    invalidateCache(params: InvalidateCacheRequest, authStrategy?: AuthStrategy): Promise<InvalidateCacheResponse>;
+}
+//# sourceMappingURL=auth-cache.api.d.ts.map

package/dist/api/auth-cache.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cache.api.d.ts","sourceRoot":"","sources":["../../src/api/auth-cache.api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,YAAY;IAQX,OAAO,CAAC,UAAU;IAN9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IAC1E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAoC;IACtF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAmC;IACpF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IAC1E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAmC;gBAEhE,UAAU,EAAE,UAAU;IAE1C;;;;OAIG;IACG,aAAa,CACjB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;OAIG;IACG,mBAAmB,CACvB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,wBAAwB,CAAC;IA6BpC;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,uBAAuB,CAAC;IA6BnC;;;;OAIG;IACG,UAAU,CACd,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;OAKG;IACG,eAAe,CACnB,MAAM,EAAE,sBAAsB,EAC9B,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,uBAAuB,CAAC;CA8BpC"}

package/dist/api/auth-cache.api.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * Auth Cache API client
+ * Handles cache statistics and management
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCacheApi = void 0;
+/**
+ * Auth Cache API class
+ * Handles cache-related endpoints
+ */
+class AuthCacheApi {
+    constructor(httpClient) {
+        this.httpClient = httpClient;
+    }
+    /**
+     * Get cache statistics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache stats response with hits, misses, and size
+     */
+    async getCacheStats(authStrategy) {
+        try {
+            if (authStrategy?.bearerToken) {
+                return await this.httpClient.authenticatedRequest('GET', AuthCacheApi.CACHE_STATS_ENDPOINT, authStrategy.bearerToken, undefined, undefined, authStrategy);
+            }
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('GET', AuthCacheApi.CACHE_STATS_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('GET', AuthCacheApi.CACHE_STATS_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Get cache stats API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Get cache performance metrics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache performance response with hitRate and avgResponseTime
+     */
+    async getCachePerformance(authStrategy) {
+        try {
+            if (authStrategy?.bearerToken) {
+                return await this.httpClient.authenticatedRequest('GET', AuthCacheApi.CACHE_PERFORMANCE_ENDPOINT, authStrategy.bearerToken, undefined, undefined, authStrategy);
+            }
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('GET', AuthCacheApi.CACHE_PERFORMANCE_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('GET', AuthCacheApi.CACHE_PERFORMANCE_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Get cache performance API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Get cache efficiency metrics
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Cache efficiency response with efficiency score
+     */
+    async getCacheEfficiency(authStrategy) {
+        try {
+            if (authStrategy?.bearerToken) {
+                return await this.httpClient.authenticatedRequest('GET', AuthCacheApi.CACHE_EFFICIENCY_ENDPOINT, authStrategy.bearerToken, undefined, undefined, authStrategy);
+            }
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('GET', AuthCacheApi.CACHE_EFFICIENCY_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('GET', AuthCacheApi.CACHE_EFFICIENCY_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Get cache efficiency API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Clear authentication cache
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Clear cache response with success message
+     */
+    async clearCache(authStrategy) {
+        try {
+            if (authStrategy?.bearerToken) {
+                return await this.httpClient.authenticatedRequest('POST', AuthCacheApi.CACHE_CLEAR_ENDPOINT, authStrategy.bearerToken, undefined, undefined, authStrategy);
+            }
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('POST', AuthCacheApi.CACHE_CLEAR_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('POST', AuthCacheApi.CACHE_CLEAR_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Clear cache API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Invalidate cache entries by pattern
+     * @param params - Invalidate cache request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Invalidate cache response with number of invalidated entries
+     */
+    async invalidateCache(params, authStrategy) {
+        try {
+            if (authStrategy?.bearerToken) {
+                return await this.httpClient.authenticatedRequest('POST', AuthCacheApi.CACHE_INVALIDATE_ENDPOINT, authStrategy.bearerToken, params, undefined, authStrategy);
+            }
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('POST', AuthCacheApi.CACHE_INVALIDATE_ENDPOINT, authStrategy, params);
+            }
+            return await this.httpClient.request('POST', AuthCacheApi.CACHE_INVALIDATE_ENDPOINT, params);
+        }
+        catch (error) {
+            console.error('Invalidate cache API call failed:', error);
+            throw error;
+        }
+    }
+}
+exports.AuthCacheApi = AuthCacheApi;
+// Centralize endpoint URLs as constants
+AuthCacheApi.CACHE_STATS_ENDPOINT = '/api/v1/auth/cache/stats';
+AuthCacheApi.CACHE_PERFORMANCE_ENDPOINT = '/api/v1/auth/cache/performance';
+AuthCacheApi.CACHE_EFFICIENCY_ENDPOINT = '/api/v1/auth/cache/efficiency';
+AuthCacheApi.CACHE_CLEAR_ENDPOINT = '/api/v1/auth/cache/clear';
+AuthCacheApi.CACHE_INVALIDATE_ENDPOINT = '/api/v1/auth/cache/invalidate';
+//# sourceMappingURL=auth-cache.api.js.map

package/dist/api/auth-cache.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cache.api.js","sourceRoot":"","sources":["../../src/api/auth-cache.api.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAaH;;;GAGG;AACH,MAAa,YAAY;IAQvB,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9C;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,KAAK,EACL,YAAY,CAAC,oBAAoB,EACjC,YAAY,CAAC,WAAW,EACxB,SAAS,EACT,SAAS,EACT,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,KAAK,EACL,YAAY,CAAC,oBAAoB,EACjC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,oBAAoB,CAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,KAAK,EACL,YAAY,CAAC,0BAA0B,EACvC,YAAY,CAAC,WAAW,EACxB,SAAS,EACT,SAAS,EACT,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,KAAK,EACL,YAAY,CAAC,0BAA0B,EACvC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,0BAA0B,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,KAAK,EACL,YAAY,CAAC,yBAAyB,EACtC,YAAY,CAAC,WAAW,EACxB,SAAS,EACT,SAAS,EACT,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,KAAK,EACL,YAAY,CAAC,yBAAyB,EACtC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,yBAAyB,CACvC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACd,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,MAAM,EACN,YAAY,CAAC,oBAAoB,EACjC,YAAY,CAAC,WAAW,EACxB,SAAS,EACT,SAAS,EACT,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,MAAM,EACN,YAAY,CAAC,oBAAoB,EACjC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,oBAAoB,CAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CACnB,MAA8B,EAC9B,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,MAAM,EACN,YAAY,CAAC,yBAAyB,EACtC,YAAY,CAAC,WAAW,EACxB,MAAM,EACN,SAAS,EACT,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,MAAM,EACN,YAAY,CAAC,yBAAyB,EACtC,YAAY,EACZ,MAAM,CACP,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,yBAAyB,EACtC,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;;AAhMH,oCAiMC;AAhMC,wCAAwC;AAChB,iCAAoB,GAAG,0BAA0B,CAAC;AAClD,uCAA0B,GAAG,gCAAgC,CAAC;AAC9D,sCAAyB,GAAG,+BAA+B,CAAC;AAC5D,iCAAoB,GAAG,0BAA0B,CAAC;AAClD,sCAAyB,GAAG,+BAA+B,CAAC"}

package/dist/api/auth-login.api.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Auth Login API client
+ * Handles login, device code flow, and diagnostics
+ */
+import { HttpClient } from '../utils/http-client';
+import { AuthStrategy } from '../types/config.types';
+import { LoginRequest, LoginResponse, DeviceCodeRequest, DeviceCodeResponse, DeviceCodeTokenRequest, DeviceCodeTokenResponse, DeviceCodeRefreshRequest, DiagnosticsResponse } from './types/auth.types';
+/**
+ * Auth Login API class
+ * Handles login-related endpoints
+ */
+export declare class AuthLoginApi {
+    private httpClient;
+    private static readonly LOGIN_ENDPOINT;
+    private static readonly DEVICE_CODE_TOKEN_ENDPOINT;
+    private static readonly DEVICE_CODE_REFRESH_ENDPOINT;
+    private static readonly LOGIN_DIAGNOSTICS_ENDPOINT;
+    constructor(httpClient: HttpClient);
+    /**
+     * Login user and get login URL (OAuth2 redirect flow)
+     * @param params - Login request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Login response with loginUrl and state
+     */
+    login(params: LoginRequest, authStrategy?: AuthStrategy): Promise<LoginResponse>;
+    /**
+     * Initiate device code flow
+     * @param params - Device code request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Device code response with deviceCode, userCode, and verificationUri
+     */
+    initiateDeviceCode(params: DeviceCodeRequest, authStrategy?: AuthStrategy): Promise<DeviceCodeResponse>;
+    /**
+     * Poll for device code token
+     * @param params - Device code token request parameters
+     * @returns Device code token response with accessToken
+     */
+    pollDeviceCodeToken(params: DeviceCodeTokenRequest): Promise<DeviceCodeTokenResponse>;
+    /**
+     * Refresh device code token
+     * @param params - Device code refresh request parameters
+     * @returns Device code token response with accessToken
+     */
+    refreshDeviceCodeToken(params: DeviceCodeRefreshRequest): Promise<DeviceCodeTokenResponse>;
+    /**
+     * Get login diagnostics
+     * @param environment - Optional environment parameter
+     * @returns Diagnostics response with database, controller, environment, and keycloak info
+     */
+    getLoginDiagnostics(environment?: string): Promise<DiagnosticsResponse>;
+}
+//# sourceMappingURL=auth-login.api.d.ts.map

package/dist/api/auth-login.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-login.api.d.ts","sourceRoot":"","sources":["../../src/api/auth-login.api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,YAAY;IAOX,OAAO,CAAC,UAAU;IAL9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAwB;IAC9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAqC;IACvF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAuC;IAC3F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAoC;gBAElE,UAAU,EAAE,UAAU;IAE1C;;;;;OAKG;IACG,KAAK,CACT,MAAM,EAAE,YAAY,EACpB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,aAAa,CAAC;IAuBzB;;;;;OAKG;IACG,kBAAkB,CACtB,MAAM,EAAE,iBAAiB,EACzB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,kBAAkB,CAAC;IAqB9B;;;;OAIG;IACG,mBAAmB,CACvB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAanC;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAanC;;;;OAIG;IACG,mBAAmB,CACvB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC;CAchC"}

package/dist/api/auth-login.api.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * Auth Login API client
+ * Handles login, device code flow, and diagnostics
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthLoginApi = void 0;
+/**
+ * Auth Login API class
+ * Handles login-related endpoints
+ */
+class AuthLoginApi {
+    constructor(httpClient) {
+        this.httpClient = httpClient;
+    }
+    /**
+     * Login user and get login URL (OAuth2 redirect flow)
+     * @param params - Login request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Login response with loginUrl and state
+     */
+    async login(params, authStrategy) {
+        try {
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('GET', AuthLoginApi.LOGIN_ENDPOINT, authStrategy, undefined, { params });
+            }
+            return await this.httpClient.request('GET', AuthLoginApi.LOGIN_ENDPOINT, undefined, { params });
+        }
+        catch (error) {
+            console.error('Login API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Initiate device code flow
+     * @param params - Device code request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Device code response with deviceCode, userCode, and verificationUri
+     */
+    async initiateDeviceCode(params, authStrategy) {
+        try {
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('POST', AuthLoginApi.LOGIN_ENDPOINT, authStrategy, params);
+            }
+            return await this.httpClient.request('POST', AuthLoginApi.LOGIN_ENDPOINT, params);
+        }
+        catch (error) {
+            console.error('Initiate device code API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Poll for device code token
+     * @param params - Device code token request parameters
+     * @returns Device code token response with accessToken
+     */
+    async pollDeviceCodeToken(params) {
+        try {
+            return await this.httpClient.request('POST', AuthLoginApi.DEVICE_CODE_TOKEN_ENDPOINT, params);
+        }
+        catch (error) {
+            console.error('Poll device code token API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Refresh device code token
+     * @param params - Device code refresh request parameters
+     * @returns Device code token response with accessToken
+     */
+    async refreshDeviceCodeToken(params) {
+        try {
+            return await this.httpClient.request('POST', AuthLoginApi.DEVICE_CODE_REFRESH_ENDPOINT, params);
+        }
+        catch (error) {
+            console.error('Refresh device code token API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Get login diagnostics
+     * @param environment - Optional environment parameter
+     * @returns Diagnostics response with database, controller, environment, and keycloak info
+     */
+    async getLoginDiagnostics(environment) {
+        try {
+            const params = environment ? { environment } : undefined;
+            return await this.httpClient.request('GET', AuthLoginApi.LOGIN_DIAGNOSTICS_ENDPOINT, undefined, { params });
+        }
+        catch (error) {
+            console.error('Get login diagnostics API call failed:', error);
+            throw error;
+        }
+    }
+}
+exports.AuthLoginApi = AuthLoginApi;
+// Centralize endpoint URLs as constants
+AuthLoginApi.LOGIN_ENDPOINT = '/api/v1/auth/login';
+AuthLoginApi.DEVICE_CODE_TOKEN_ENDPOINT = '/api/v1/auth/login/device/token';
+AuthLoginApi.DEVICE_CODE_REFRESH_ENDPOINT = '/api/v1/auth/login/device/refresh';
+AuthLoginApi.LOGIN_DIAGNOSTICS_ENDPOINT = '/api/v1/auth/login/diagnostics';
+//# sourceMappingURL=auth-login.api.js.map

package/dist/api/auth-login.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-login.api.js","sourceRoot":"","sources":["../../src/api/auth-login.api.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAeH;;;GAGG;AACH,MAAa,YAAY;IAOvB,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9C;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CACT,MAAoB,EACpB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,KAAK,EACL,YAAY,CAAC,cAAc,EAC3B,YAAY,EACZ,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,cAAc,EAC3B,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAyB,EACzB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,MAAM,EACN,YAAY,CAAC,cAAc,EAC3B,YAAY,EACZ,MAAM,CACP,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,cAAc,EAC3B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,MAA8B;QAE9B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,0BAA0B,EACvC,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC1B,MAAgC;QAEhC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,4BAA4B,EACzC,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;YACnE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,WAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACzD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,0BAA0B,EACvC,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;;AAnIH,oCAoIC;AAnIC,wCAAwC;AAChB,2BAAc,GAAG,oBAAoB,CAAC;AACtC,uCAA0B,GAAG,iCAAiC,CAAC;AAC/D,yCAA4B,GAAG,mCAAmC,CAAC;AACnE,uCAA0B,GAAG,gCAAgC,CAAC"}

package/dist/api/auth-token.api.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Auth Token API client
+ * Handles client tokens, token validation, and token refresh
+ */
+import { HttpClient } from '../utils/http-client';
+import { AuthStrategy } from '../types/config.types';
+import { ValidateTokenRequest, ValidateTokenResponse, RefreshTokenRequest, RefreshTokenResponse, ClientTokenResponse, ClientTokenLegacyResponse } from './types/auth.types';
+/**
+ * Auth Token API class
+ * Handles token-related endpoints
+ */
+export declare class AuthTokenApi {
+    private httpClient;
+    private static readonly CLIENT_TOKEN_ENDPOINT;
+    private static readonly CLIENT_TOKEN_LEGACY_ENDPOINT;
+    private static readonly VALIDATE_ENDPOINT;
+    private static readonly REFRESH_ENDPOINT;
+    constructor(httpClient: HttpClient);
+    /**
+     * Get client token (for frontend, origin validation)
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Client token response with token and expiration
+     */
+    getClientToken(authStrategy?: AuthStrategy): Promise<ClientTokenResponse>;
+    /**
+     * Generate client token (legacy endpoint, uses x-client-id/x-client-secret)
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Client token legacy response with token and expiration
+     */
+    generateClientToken(authStrategy?: AuthStrategy): Promise<ClientTokenLegacyResponse>;
+    /**
+     * Validate user token
+     * @param params - Validate token request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Validation response with authenticated status and user info
+     */
+    validateToken(params: ValidateTokenRequest, authStrategy?: AuthStrategy): Promise<ValidateTokenResponse>;
+    /**
+     * Refresh user access token
+     * @param params - Refresh token request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Refresh token response with new accessToken
+     */
+    refreshToken(params: RefreshTokenRequest, authStrategy?: AuthStrategy): Promise<RefreshTokenResponse>;
+}
+//# sourceMappingURL=auth-token.api.d.ts.map

package/dist/api/auth-token.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token.api.d.ts","sourceRoot":"","sources":["../../src/api/auth-token.api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,YAAY;IAOX,OAAO,CAAC,UAAU;IAL9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAwB;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA2B;IACpE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAA0B;gBAE9C,UAAU,EAAE,UAAU;IAE1C;;;;OAIG;IACG,cAAc,CAClB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAmB/B;;;;OAIG;IACG,mBAAmB,CACvB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,yBAAyB,CAAC;IAmBrC;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,oBAAoB,EAC5B,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,qBAAqB,CAAC;IAgBjC;;;;;OAKG;IACG,YAAY,CAChB,MAAM,EAAE,mBAAmB,EAC3B,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,oBAAoB,CAAC;CAoBjC"}

package/dist/api/auth-token.api.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * Auth Token API client
+ * Handles client tokens, token validation, and token refresh
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthTokenApi = void 0;
+/**
+ * Auth Token API class
+ * Handles token-related endpoints
+ */
+class AuthTokenApi {
+    constructor(httpClient) {
+        this.httpClient = httpClient;
+    }
+    /**
+     * Get client token (for frontend, origin validation)
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Client token response with token and expiration
+     */
+    async getClientToken(authStrategy) {
+        try {
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('GET', AuthTokenApi.CLIENT_TOKEN_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('GET', AuthTokenApi.CLIENT_TOKEN_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Get client token API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Generate client token (legacy endpoint, uses x-client-id/x-client-secret)
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Client token legacy response with token and expiration
+     */
+    async generateClientToken(authStrategy) {
+        try {
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('POST', AuthTokenApi.CLIENT_TOKEN_LEGACY_ENDPOINT, authStrategy);
+            }
+            return await this.httpClient.request('POST', AuthTokenApi.CLIENT_TOKEN_LEGACY_ENDPOINT);
+        }
+        catch (error) {
+            console.error('Generate client token API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Validate user token
+     * @param params - Validate token request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Validation response with authenticated status and user info
+     */
+    async validateToken(params, authStrategy) {
+        try {
+            return await this.httpClient.authenticatedRequest('POST', AuthTokenApi.VALIDATE_ENDPOINT, params.token, params, undefined, authStrategy);
+        }
+        catch (error) {
+            console.error('Token validation API call failed:', error);
+            throw error;
+        }
+    }
+    /**
+     * Refresh user access token
+     * @param params - Refresh token request parameters
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Refresh token response with new accessToken
+     */
+    async refreshToken(params, authStrategy) {
+        try {
+            if (authStrategy) {
+                return await this.httpClient.requestWithAuthStrategy('POST', AuthTokenApi.REFRESH_ENDPOINT, authStrategy, params);
+            }
+            return await this.httpClient.request('POST', AuthTokenApi.REFRESH_ENDPOINT, params);
+        }
+        catch (error) {
+            console.error('Refresh token API call failed:', error);
+            throw error;
+        }
+    }
+}
+exports.AuthTokenApi = AuthTokenApi;
+// Centralize endpoint URLs as constants
+AuthTokenApi.CLIENT_TOKEN_ENDPOINT = '/api/v1/auth/client-token';
+AuthTokenApi.CLIENT_TOKEN_LEGACY_ENDPOINT = '/api/v1/auth/token';
+AuthTokenApi.VALIDATE_ENDPOINT = '/api/v1/auth/validate';
+AuthTokenApi.REFRESH_ENDPOINT = '/api/v1/auth/refresh';
+//# sourceMappingURL=auth-token.api.js.map

package/dist/api/auth-token.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token.api.js","sourceRoot":"","sources":["../../src/api/auth-token.api.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAaH;;;GAGG;AACH,MAAa,YAAY;IAOvB,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9C;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAClB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,KAAK,EACL,YAAY,CAAC,qBAAqB,EAClC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,KAAK,EACL,YAAY,CAAC,qBAAqB,CACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,MAAM,EACN,YAAY,CAAC,4BAA4B,EACzC,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,4BAA4B,CAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA4B,EAC5B,YAA2B;QAE3B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC/C,MAAM,EACN,YAAY,CAAC,iBAAiB,EAC9B,MAAM,CAAC,KAAK,EACZ,MAAM,EACN,SAAS,EACT,YAAY,CACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,MAA2B,EAC3B,YAA2B;QAE3B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAClD,MAAM,EACN,YAAY,CAAC,gBAAgB,EAC7B,YAAY,EACZ,MAAM,CACP,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAClC,MAAM,EACN,YAAY,CAAC,gBAAgB,EAC7B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;;AAlHH,oCAmHC;AAlHC,wCAAwC;AAChB,kCAAqB,GAAG,2BAA2B,CAAC;AACpD,yCAA4B,GAAG,oBAAoB,CAAC;AACpD,8BAAiB,GAAG,uBAAuB,CAAC;AAC5C,6BAAgB,GAAG,sBAAsB,CAAC"}

package/dist/api/auth-user.api.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Auth User API client
+ * Handles user info, logout, and callback
+ */
+import { HttpClient } from '../utils/http-client';
+import { AuthStrategy } from '../types/config.types';
+import { GetUserResponse, LogoutResponse, CallbackRequest, CallbackResponse } from './types/auth.types';
+/**
+ * Auth User API class
+ * Handles user-related endpoints
+ */
+export declare class AuthUserApi {
+    private httpClient;
+    private static readonly USER_ENDPOINT;
+    private static readonly LOGOUT_ENDPOINT;
+    private static readonly CALLBACK_ENDPOINT;
+    constructor(httpClient: HttpClient);
+    /**
+     * Get current user information
+     * @param authStrategy - Optional authentication strategy override
+     * @returns User response with user info and authenticated status
+     */
+    getUser(authStrategy?: AuthStrategy): Promise<GetUserResponse>;
+    /**
+     * Logout user
+     * @returns Logout response with success message
+     */
+    logout(): Promise<LogoutResponse>;
+    /**
+     * Logout user with token
+     * @param token - User access token to invalidate
+     * @returns Logout response with success message
+     */
+    logoutWithToken(token: string): Promise<LogoutResponse>;
+    /**
+     * Handle OAuth2 callback
+     * @param params - Callback request parameters (query params)
+     * @param authStrategy - Optional authentication strategy override
+     * @returns Callback response with success message
+     */
+    handleCallback(params: CallbackRequest, authStrategy?: AuthStrategy): Promise<CallbackResponse>;
+}
+//# sourceMappingURL=auth-user.api.d.ts.map

package/dist/api/auth-user.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-user.api.d.ts","sourceRoot":"","sources":["../../src/api/auth-user.api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,WAAW;IAMV,OAAO,CAAC,UAAU;IAJ9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAuB;IAC5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAyB;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA2B;gBAEhD,UAAU,EAAE,UAAU;IAE1C;;;;OAIG;IACG,OAAO,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;IA0BpE;;;OAGG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAYvC;;;;OAIG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAa7D;;;;;OAKG;IACG,cAAc,CAClB,MAAM,EAAE,eAAe,EACvB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,gBAAgB,CAAC;CAsB7B"}