@atproto/oauth-client-node 0.3.16 → 0.4.0-next.0

package/README.md

@@ -263,7 +263,8 @@ after a short period of time (one hour should be more than enough).
 #### `requestLock`
 
 When multiple instances of the client are running, this lock will prevent
-concurrent refreshes of the same session.
+concurrent refreshes of the same session. If the lock fails to be acquired an
+error should be thrown.
 
 Here is an example implementation based on [`redlock`](https://www.npmjs.com/package/redlock):
 

package/dist/index.js

@@ -1,22 +1,6 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("@atproto-labs/handle-resolver-node"), exports);
-__exportStar(require("@atproto/jwk-webcrypto"), exports);
-__exportStar(require("@atproto/oauth-client"), exports);
-__exportStar(require("@atproto/jwk-jose"), exports);
-__exportStar(require("./node-oauth-client.js"), exports);
+export * from '@atproto-labs/handle-resolver-node';
+export * from '@atproto/jwk-webcrypto';
+export * from '@atproto/oauth-client';
+export * from '@atproto/jwk-jose';
+export * from './node-oauth-client.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qEAAkD;AAClD,yDAAsC;AACtC,wDAAqC;AACrC,oDAAiC;AAEjC,yDAAsC","sourcesContent":["export * from '@atproto-labs/handle-resolver-node'\nexport * from '@atproto/jwk-webcrypto'\nexport * from '@atproto/oauth-client'\nexport * from '@atproto/jwk-jose'\n\nexport * from './node-oauth-client.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAA;AAClD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,cAAc,wBAAwB,CAAA","sourcesContent":["export * from '@atproto-labs/handle-resolver-node'\nexport * from '@atproto/jwk-webcrypto'\nexport * from '@atproto/oauth-client'\nexport * from '@atproto/jwk-jose'\n\nexport * from './node-oauth-client.js'\n"]}

package/dist/node-dpop-store.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toDpopKeyStore = toDpopKeyStore;
-const jwk_jose_1 = require("@atproto/jwk-jose");
+import { JoseKey } from '@atproto/jwk-jose';
 /**
  * Utility function that allows to simplify the store interface by exposing a
  * JWK (JSON) instead of a Key instance.
  */
-function toDpopKeyStore(store) {
+export function toDpopKeyStore(store) {
     return {
         async set(sub, { dpopKey, ...data }) {
             const dpopJwk = dpopKey.privateJwk;
@@ -19,7 +16,7 @@ function toDpopKeyStore(store) {
             if (!result)
                 return undefined;
             const { dpopJwk, ...data } = result;
-            const dpopKey = await jwk_jose_1.JoseKey.fromJWK(dpopJwk);
+            const dpopKey = await JoseKey.fromJWK(dpopJwk);
             return { ...data, dpopKey };
         },
         del: store.del.bind(store),

package/dist/node-dpop-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-dpop-store.js","sourceRoot":"","sources":["../src/node-dpop-store.ts"],"names":[],"mappings":";;AAaA,wCAwBC;AApCD,gDAA2C;AAQ3C;;;GAGG;AACH,SAAgB,cAAc,CAG5B,KAAwC;IACxC,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAM,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAK;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YAE7D,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAM;YACd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YAE7B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;YACnC,MAAM,OAAO,GAAG,MAAM,kBAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC9C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAkB,CAAA;QAC7C,CAAC;QAED,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAChC,CAAA;AACH,CAAC","sourcesContent":["import { Jwk, Key } from '@atproto/jwk'\nimport { JoseKey } from '@atproto/jwk-jose'\nimport { InternalStateData, Session } from '@atproto/oauth-client'\nimport { SimpleStore } from '@atproto-labs/simple-store'\n\ntype ToDpopJwkValue<V extends { dpopKey: Key }> = Omit<V, 'dpopKey'> & {\n  dpopJwk: Jwk\n}\n\n/**\n * Utility function that allows to simplify the store interface by exposing a\n * JWK (JSON) instead of a Key instance.\n */\nexport function toDpopKeyStore<\n  K extends string,\n  V extends { dpopKey: Key; dpopJwk?: never },\n>(store: SimpleStore<K, ToDpopJwkValue<V>>): SimpleStore<K, V> {\n  return {\n    async set(sub: K, { dpopKey, ...data }: V) {\n      const dpopJwk = dpopKey.privateJwk\n      if (!dpopJwk) throw new Error('Private DPoP JWK is missing.')\n\n      await store.set(sub, { ...data, dpopJwk })\n    },\n\n    async get(sub: K) {\n      const result = await store.get(sub)\n      if (!result) return undefined\n\n      const { dpopJwk, ...data } = result\n      const dpopKey = await JoseKey.fromJWK(dpopJwk)\n      return { ...data, dpopKey } as unknown as V\n    },\n\n    del: store.del.bind(store),\n    clear: store.clear?.bind(store),\n  }\n}\n\nexport type NodeSavedState = ToDpopJwkValue<InternalStateData>\nexport type NodeSavedStateStore = SimpleStore<string, NodeSavedState>\n\nexport type NodeSavedSession = ToDpopJwkValue<Session>\nexport type NodeSavedSessionStore = SimpleStore<string, NodeSavedSession>\n"]}
+{"version":3,"file":"node-dpop-store.js","sourceRoot":"","sources":["../src/node-dpop-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAQ3C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAG5B,KAAwC;IACxC,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAM,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAK;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YAE7D,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAM;YACd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YAE7B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;YACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC9C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAkB,CAAA;QAC7C,CAAC;QAED,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAChC,CAAA;AACH,CAAC","sourcesContent":["import { Jwk, Key } from '@atproto/jwk'\nimport { JoseKey } from '@atproto/jwk-jose'\nimport { InternalStateData, Session } from '@atproto/oauth-client'\nimport { SimpleStore } from '@atproto-labs/simple-store'\n\ntype ToDpopJwkValue<V extends { dpopKey: Key }> = Omit<V, 'dpopKey'> & {\n  dpopJwk: Jwk\n}\n\n/**\n * Utility function that allows to simplify the store interface by exposing a\n * JWK (JSON) instead of a Key instance.\n */\nexport function toDpopKeyStore<\n  K extends string,\n  V extends { dpopKey: Key; dpopJwk?: never },\n>(store: SimpleStore<K, ToDpopJwkValue<V>>): SimpleStore<K, V> {\n  return {\n    async set(sub: K, { dpopKey, ...data }: V) {\n      const dpopJwk = dpopKey.privateJwk\n      if (!dpopJwk) throw new Error('Private DPoP JWK is missing.')\n\n      await store.set(sub, { ...data, dpopJwk })\n    },\n\n    async get(sub: K) {\n      const result = await store.get(sub)\n      if (!result) return undefined\n\n      const { dpopJwk, ...data } = result\n      const dpopKey = await JoseKey.fromJWK(dpopJwk)\n      return { ...data, dpopKey } as unknown as V\n    },\n\n    del: store.del.bind(store),\n    clear: store.clear?.bind(store),\n  }\n}\n\nexport type NodeSavedState = ToDpopJwkValue<InternalStateData>\nexport type NodeSavedStateStore = SimpleStore<string, NodeSavedState>\n\nexport type NodeSavedSession = ToDpopJwkValue<Session>\nexport type NodeSavedSessionStore = SimpleStore<string, NodeSavedSession>\n"]}

package/dist/node-oauth-client.js

@@ -1,20 +1,17 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NodeOAuthClient = void 0;
-const node_crypto_1 = require("node:crypto");
-const jwk_jose_1 = require("@atproto/jwk-jose");
-const oauth_client_1 = require("@atproto/oauth-client");
-const handle_resolver_node_1 = require("@atproto-labs/handle-resolver-node");
-const node_dpop_store_js_1 = require("./node-dpop-store.js");
-class NodeOAuthClient extends oauth_client_1.OAuthClient {
-    constructor({ requestLock = undefined, fallbackNameservers = undefined, fetch, responseMode = 'query', stateStore, sessionStore, handleResolver = new handle_resolver_node_1.AtprotoHandleResolverNode({
+import { createHash, randomBytes } from 'node:crypto';
+import { JoseKey } from '@atproto/jwk-jose';
+import { OAuthClient, } from '@atproto/oauth-client';
+import { AtprotoHandleResolverNode, } from '@atproto-labs/handle-resolver-node';
+import { toDpopKeyStore, } from './node-dpop-store.js';
+export class NodeOAuthClient extends OAuthClient {
+    constructor({ requestLock = undefined, fallbackNameservers = undefined, fetch, responseMode = 'query', stateStore, sessionStore, handleResolver = new AtprotoHandleResolverNode({
         fetch,
         fallbackNameservers,
     }), runtimeImplementation = {
         requestLock,
-        createKey: (algs) => jwk_jose_1.JoseKey.generate(algs),
-        getRandomValues: node_crypto_1.randomBytes,
-        digest: (bytes, algorithm) => (0, node_crypto_1.createHash)(algorithm.name).update(bytes).digest(),
+        createKey: (algs) => JoseKey.generate(algs),
+        getRandomValues: randomBytes,
+        digest: (bytes, algorithm) => createHash(algorithm.name).update(bytes).digest(),
     }, ...options }) {
         if (!runtimeImplementation.requestLock) {
             // Ok if only one instance of the client is running at a time.
@@ -26,10 +23,9 @@ class NodeOAuthClient extends oauth_client_1.OAuthClient {
             responseMode,
             handleResolver,
             runtimeImplementation,
-            stateStore: (0, node_dpop_store_js_1.toDpopKeyStore)(stateStore),
-            sessionStore: (0, node_dpop_store_js_1.toDpopKeyStore)(sessionStore),
+            stateStore: toDpopKeyStore(stateStore),
+            sessionStore: toDpopKeyStore(sessionStore),
         });
     }
 }
-exports.NodeOAuthClient = NodeOAuthClient;
 //# sourceMappingURL=node-oauth-client.js.map

package/dist/node-oauth-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-oauth-client.js","sourceRoot":"","sources":["../src/node-oauth-client.ts"],"names":[],"mappings":";;;AAAA,6CAAqD;AACrD,gDAA2C;AAC3C,wDAO8B;AAE9B,6EAG2C;AAC3C,6DAI6B;AAqC7B,MAAa,eAAgB,SAAQ,0BAAW;IAC9C,YAAY,EACV,WAAW,GAAG,SAAS,EACvB,mBAAmB,GAAG,SAAS,EAE/B,KAAK,EACL,YAAY,GAAG,OAAO,EAEtB,UAAU,EACV,YAAY,EAEZ,cAAc,GAAG,IAAI,gDAAyB,CAAC;QAC7C,KAAK;QACL,mBAAmB;KACpB,CAAC,EAEF,qBAAqB,GAAG;QACtB,WAAW;QACX,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3C,eAAe,EAAE,yBAAW;QAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC3B,IAAA,wBAAU,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;KACpD,EAED,GAAG,OAAO,EACa;QACvB,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC;YACvC,8DAA8D;YAC9D,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC5E,CAAC;QAED,KAAK,CAAC;YACJ,GAAG,OAAO;YAEV,KAAK;YACL,YAAY;YACZ,cAAc;YACd,qBAAqB;YAErB,UAAU,EAAE,IAAA,mCAAc,EAAC,UAAU,CAAC;YACtC,YAAY,EAAE,IAAA,mCAAc,EAAC,YAAY,CAAC;SAC3C,CAAC,CAAA;IACJ,CAAC;CACF;AA3CD,0CA2CC","sourcesContent":["import { createHash, randomBytes } from 'node:crypto'\nimport { JoseKey } from '@atproto/jwk-jose'\nimport {\n  HandleResolver,\n  OAuthClient,\n  OAuthClientFetchMetadataOptions,\n  OAuthClientOptions,\n  RuntimeImplementation,\n  RuntimeLock,\n} from '@atproto/oauth-client'\nimport { OAuthResponseMode } from '@atproto/oauth-types'\nimport {\n  AtprotoHandleResolverNode,\n  AtprotoHandleResolverNodeOptions,\n} from '@atproto-labs/handle-resolver-node'\nimport {\n  NodeSavedSessionStore,\n  NodeSavedStateStore,\n  toDpopKeyStore,\n} from './node-dpop-store.js'\nimport { Override } from './util.js'\n\nexport type * from './node-dpop-store.js'\nexport type { OAuthClientOptions, OAuthResponseMode, RuntimeLock }\n\nexport type NodeOAuthClientOptions = Override<\n  OAuthClientOptions,\n  {\n    responseMode?: Exclude<OAuthResponseMode, 'fragment'>\n\n    stateStore: NodeSavedStateStore\n    sessionStore: NodeSavedSessionStore\n\n    /**\n     * Used to build a {@link NodeOAuthClientOptions.handleResolver} if none is\n     * provided.\n     */\n    fallbackNameservers?: AtprotoHandleResolverNodeOptions['fallbackNameservers']\n\n    handleResolver?: HandleResolver | string | URL\n\n    /**\n     * Used to build a {@link NodeOAuthClientOptions.runtimeImplementation} if\n     * none is provided. Pass in `requestLocalLock` from `@atproto/oauth-client`\n     * to mute warning.\n     */\n    requestLock?: RuntimeLock\n\n    runtimeImplementation?: RuntimeImplementation\n  }\n>\n\nexport type NodeOAuthClientFromMetadataOptions =\n  OAuthClientFetchMetadataOptions &\n    Omit<NodeOAuthClientOptions, 'clientMetadata'>\n\nexport class NodeOAuthClient extends OAuthClient {\n  constructor({\n    requestLock = undefined,\n    fallbackNameservers = undefined,\n\n    fetch,\n    responseMode = 'query',\n\n    stateStore,\n    sessionStore,\n\n    handleResolver = new AtprotoHandleResolverNode({\n      fetch,\n      fallbackNameservers,\n    }),\n\n    runtimeImplementation = {\n      requestLock,\n      createKey: (algs) => JoseKey.generate(algs),\n      getRandomValues: randomBytes,\n      digest: (bytes, algorithm) =>\n        createHash(algorithm.name).update(bytes).digest(),\n    },\n\n    ...options\n  }: NodeOAuthClientOptions) {\n    if (!runtimeImplementation.requestLock) {\n      // Ok if only one instance of the client is running at a time.\n      console.warn('No lock mechanism provided. Credentials might get revoked.')\n    }\n\n    super({\n      ...options,\n\n      fetch,\n      responseMode,\n      handleResolver,\n      runtimeImplementation,\n\n      stateStore: toDpopKeyStore(stateStore),\n      sessionStore: toDpopKeyStore(sessionStore),\n    })\n  }\n}\n"]}
+{"version":3,"file":"node-oauth-client.js","sourceRoot":"","sources":["../src/node-oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC3C,OAAO,EAEL,WAAW,GAKZ,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EACL,yBAAyB,GAE1B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAGL,cAAc,GACf,MAAM,sBAAsB,CAAA;AAqC7B,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,YAAY,EACV,WAAW,GAAG,SAAS,EACvB,mBAAmB,GAAG,SAAS,EAE/B,KAAK,EACL,YAAY,GAAG,OAAO,EAEtB,UAAU,EACV,YAAY,EAEZ,cAAc,GAAG,IAAI,yBAAyB,CAAC;QAC7C,KAAK;QACL,mBAAmB;KACpB,CAAC,EAEF,qBAAqB,GAAG;QACtB,WAAW;QACX,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3C,eAAe,EAAE,WAAW;QAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC3B,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;KACpD,EAED,GAAG,OAAO,EACa;QACvB,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC;YACvC,8DAA8D;YAC9D,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC5E,CAAC;QAED,KAAK,CAAC;YACJ,GAAG,OAAO;YAEV,KAAK;YACL,YAAY;YACZ,cAAc;YACd,qBAAqB;YAErB,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC;YACtC,YAAY,EAAE,cAAc,CAAC,YAAY,CAAC;SAC3C,CAAC,CAAA;IACJ,CAAC;CACF","sourcesContent":["import { createHash, randomBytes } from 'node:crypto'\nimport { JoseKey } from '@atproto/jwk-jose'\nimport {\n  HandleResolver,\n  OAuthClient,\n  OAuthClientFetchMetadataOptions,\n  OAuthClientOptions,\n  RuntimeImplementation,\n  RuntimeLock,\n} from '@atproto/oauth-client'\nimport { OAuthResponseMode } from '@atproto/oauth-types'\nimport {\n  AtprotoHandleResolverNode,\n  AtprotoHandleResolverNodeOptions,\n} from '@atproto-labs/handle-resolver-node'\nimport {\n  NodeSavedSessionStore,\n  NodeSavedStateStore,\n  toDpopKeyStore,\n} from './node-dpop-store.js'\nimport { Override } from './util.js'\n\nexport type * from './node-dpop-store.js'\nexport type { OAuthClientOptions, OAuthResponseMode, RuntimeLock }\n\nexport type NodeOAuthClientOptions = Override<\n  OAuthClientOptions,\n  {\n    responseMode?: Exclude<OAuthResponseMode, 'fragment'>\n\n    stateStore: NodeSavedStateStore\n    sessionStore: NodeSavedSessionStore\n\n    /**\n     * Used to build a {@link NodeOAuthClientOptions.handleResolver} if none is\n     * provided.\n     */\n    fallbackNameservers?: AtprotoHandleResolverNodeOptions['fallbackNameservers']\n\n    handleResolver?: HandleResolver | string | URL\n\n    /**\n     * Used to build a {@link NodeOAuthClientOptions.runtimeImplementation} if\n     * none is provided. Pass in `requestLocalLock` from `@atproto/oauth-client`\n     * to mute warning.\n     */\n    requestLock?: RuntimeLock\n\n    runtimeImplementation?: RuntimeImplementation\n  }\n>\n\nexport type NodeOAuthClientFromMetadataOptions =\n  OAuthClientFetchMetadataOptions &\n    Omit<NodeOAuthClientOptions, 'clientMetadata'>\n\nexport class NodeOAuthClient extends OAuthClient {\n  constructor({\n    requestLock = undefined,\n    fallbackNameservers = undefined,\n\n    fetch,\n    responseMode = 'query',\n\n    stateStore,\n    sessionStore,\n\n    handleResolver = new AtprotoHandleResolverNode({\n      fetch,\n      fallbackNameservers,\n    }),\n\n    runtimeImplementation = {\n      requestLock,\n      createKey: (algs) => JoseKey.generate(algs),\n      getRandomValues: randomBytes,\n      digest: (bytes, algorithm) =>\n        createHash(algorithm.name).update(bytes).digest(),\n    },\n\n    ...options\n  }: NodeOAuthClientOptions) {\n    if (!runtimeImplementation.requestLock) {\n      // Ok if only one instance of the client is running at a time.\n      console.warn('No lock mechanism provided. Credentials might get revoked.')\n    }\n\n    super({\n      ...options,\n\n      fetch,\n      responseMode,\n      handleResolver,\n      runtimeImplementation,\n\n      stateStore: toDpopKeyStore(stateStore),\n      sessionStore: toDpopKeyStore(sessionStore),\n    })\n  }\n}\n"]}

package/dist/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,EAAE,CAAA;AACvD,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,EAAE,CAAA;AACvD,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA"}

package/dist/util.js

@@ -1,3 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=util.js.map

package/dist/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"","sourcesContent":["// eslint-disable-next-line @typescript-eslint/ban-types\nexport type Simplify<T> = { [K in keyof T]: T[K] } & {}\nexport type Override<T, V> = Simplify<V & Omit<T, keyof V>>\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"","sourcesContent":["export type Simplify<T> = { [K in keyof T]: T[K] } & {}\nexport type Override<T, V> = Simplify<V & Omit<T, keyof V>>\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/oauth-client-node",
-  "version": "0.3.16",
+  "version": "0.4.0-next.0",
   "license": "MIT",
   "description": "ATPROTO OAuth client for the NodeJS",
   "keywords": [
@@ -15,9 +15,7 @@
     "url": "https://github.com/bluesky-social/atproto",
     "directory": "packages/oauth/oauth-client-node"
   },
-  "type": "commonjs",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "type": "module",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -25,24 +23,24 @@
     }
   },
   "engines": {
-    "node": ">=18.7.0"
+    "node": ">=22"
   },
   "files": [
     "dist"
   ],
   "dependencies": {
-    "@atproto-labs/did-resolver": "0.2.6",
-    "@atproto-labs/handle-resolver-node": "0.1.25",
-    "@atproto-labs/simple-store": "0.3.0",
-    "@atproto/did": "0.3.0",
-    "@atproto/jwk": "0.6.0",
-    "@atproto/jwk-jose": "0.1.11",
-    "@atproto/jwk-webcrypto": "0.2.0",
-    "@atproto/oauth-client": "0.5.14",
-    "@atproto/oauth-types": "0.6.2"
+    "@atproto-labs/did-resolver": "^0.3.0-next.0",
+    "@atproto-labs/simple-store": "^0.4.0-next.0",
+    "@atproto/did": "^0.4.0-next.0",
+    "@atproto/jwk": "^0.7.0-next.0",
+    "@atproto/jwk-webcrypto": "^0.3.0-next.0",
+    "@atproto/oauth-types": "^0.7.0-next.0",
+    "@atproto/oauth-client": "^0.7.0-next.0",
+    "@atproto/jwk-jose": "^0.2.0-next.0",
+    "@atproto-labs/handle-resolver-node": "^0.2.0-next.0"
   },
   "devDependencies": {
-    "typescript": "^5.6.3"
+    "typescript": "^6.0.3"
   },
   "scripts": {
     "build": "tsc --build tsconfig.build.json"