@atproto/oauth-provider 0.1.2 → 0.2.0

package/dist/request/types.d.ts

@@ -45,7 +45,7 @@ export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUn
     state: z.ZodOptional<z.ZodString>;
     nonce: z.ZodOptional<z.ZodString>;
     dpop_jkt: z.ZodOptional<z.ZodString>;
-    response_type: z.ZodEnum<["code", "token", "id_token", "none", "code token", "code id_token", "id_token token", "code id_token token"]>;
+    response_type: z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>;
     response_mode: z.ZodOptional<z.ZodEnum<["query", "fragment", "form_post"]>>;
     code_challenge: z.ZodOptional<z.ZodString>;
     code_challenge_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["S256", "plain"]>>>;
@@ -94,7 +94,7 @@ export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUn
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     client_id: string;
-    response_type: "none" | "token" | "code" | "id_token" | "code id_token token" | "code id_token" | "code token" | "id_token token";
+    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
     scope?: string | undefined;
     redirect_uri?: string | undefined;
     nonce?: string | undefined;
@@ -104,7 +104,7 @@ export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUn
     code_challenge?: string | undefined;
     code_challenge_method?: "S256" | "plain" | undefined;
     max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "email" | "email_verified" | "phone_number" | "phone_number_verified" | "address" | "profile" | "family_name" | "given_name" | "middle_name" | "nickname" | "preferred_username" | "gender" | "picture" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "acr" | "auth_time", {
+    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
         values?: (string | number | boolean)[] | undefined;
         value?: string | number | boolean | undefined;
         essential?: boolean | undefined;
@@ -124,7 +124,7 @@ export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUn
     }[] | undefined;
 }, {
     client_id: string;
-    response_type: "none" | "token" | "code" | "id_token" | "code id_token token" | "code id_token" | "code token" | "id_token token";
+    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
     scope?: string | undefined;
     redirect_uri?: string | undefined;
     nonce?: string | undefined;
@@ -134,7 +134,7 @@ export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUn
     code_challenge?: string | undefined;
     code_challenge_method?: "S256" | "plain" | undefined;
     max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "email" | "email_verified" | "phone_number" | "phone_number_verified" | "address" | "profile" | "family_name" | "given_name" | "middle_name" | "nickname" | "preferred_username" | "gender" | "picture" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "acr" | "auth_time", {
+    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
         values?: (string | number | boolean)[] | undefined;
         value?: string | number | boolean | undefined;
         essential?: boolean | undefined;
@@ -198,7 +198,7 @@ export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUni
     state: z.ZodOptional<z.ZodString>;
     nonce: z.ZodOptional<z.ZodString>;
     dpop_jkt: z.ZodOptional<z.ZodString>;
-    response_type: z.ZodEnum<["code", "token", "id_token", "none", "code token", "code id_token", "id_token token", "code id_token token"]>;
+    response_type: z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>;
     response_mode: z.ZodOptional<z.ZodEnum<["query", "fragment", "form_post"]>>;
     code_challenge: z.ZodOptional<z.ZodString>;
     code_challenge_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["S256", "plain"]>>>;
@@ -247,7 +247,7 @@ export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUni
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     client_id: string;
-    response_type: "none" | "token" | "code" | "id_token" | "code id_token token" | "code id_token" | "code token" | "id_token token";
+    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
     scope?: string | undefined;
     redirect_uri?: string | undefined;
     nonce?: string | undefined;
@@ -257,7 +257,7 @@ export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUni
     code_challenge?: string | undefined;
     code_challenge_method?: "S256" | "plain" | undefined;
     max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "email" | "email_verified" | "phone_number" | "phone_number_verified" | "address" | "profile" | "family_name" | "given_name" | "middle_name" | "nickname" | "preferred_username" | "gender" | "picture" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "acr" | "auth_time", {
+    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
         values?: (string | number | boolean)[] | undefined;
         value?: string | number | boolean | undefined;
         essential?: boolean | undefined;
@@ -277,7 +277,7 @@ export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUni
     }[] | undefined;
 }, {
     client_id: string;
-    response_type: "none" | "token" | "code" | "id_token" | "code id_token token" | "code id_token" | "code token" | "id_token token";
+    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
     scope?: string | undefined;
     redirect_uri?: string | undefined;
     nonce?: string | undefined;
@@ -287,7 +287,7 @@ export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUni
     code_challenge?: string | undefined;
     code_challenge_method?: "S256" | "plain" | undefined;
     max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "email" | "email_verified" | "phone_number" | "phone_number_verified" | "address" | "profile" | "family_name" | "given_name" | "middle_name" | "nickname" | "preferred_username" | "gender" | "picture" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "acr" | "auth_time", {
+    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
         values?: (string | number | boolean)[] | undefined;
         value?: string | number | boolean | undefined;
         essential?: boolean | undefined;

package/dist/signer/signed-token-payload.d.ts

@@ -2,66 +2,31 @@ import z from 'zod';
 import { Simplify } from '../lib/util/type.js';
 export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     iat: z.ZodNumber;
-    exp: z.ZodNumber;
-    iss: z.ZodString;
     aud: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
+    iss: z.ZodString;
+    exp: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     iat: number;
-    exp: number;
-    iss: string;
     aud: string | [string, ...string[]];
+    iss: string;
+    exp: number;
 }, {
     iat: number;
-    exp: number;
-    iss: string;
     aud: string | [string, ...string[]];
+    iss: string;
+    exp: number;
 }>, z.ZodObject<z.objectUtil.extendShape<{
     nonce: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     jti: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     htm: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     htu: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     ath: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    sub: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    preferred_username: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     email: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     email_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
-    phone_number: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    phone_number_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
-    address: z.ZodOptional<z.ZodOptional<z.ZodObject<{
-        formatted: z.ZodOptional<z.ZodString>;
-        street_address: z.ZodOptional<z.ZodString>;
-        locality: z.ZodOptional<z.ZodString>;
-        region: z.ZodOptional<z.ZodString>;
-        postal_code: z.ZodOptional<z.ZodString>;
-        country: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        formatted?: string | undefined;
-        street_address?: string | undefined;
-        locality?: string | undefined;
-        region?: string | undefined;
-        postal_code?: string | undefined;
-        country?: string | undefined;
-    }, {
-        formatted?: string | undefined;
-        street_address?: string | undefined;
-        locality?: string | undefined;
-        region?: string | undefined;
-        postal_code?: string | undefined;
-        country?: string | undefined;
-    }>>>;
-    profile: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    family_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    given_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    middle_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    nickname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    preferred_username: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    gender: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     picture: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    birthdate: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    zoneinfo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    locale: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    updated_at: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
-    sub: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     nbf: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     acr: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     azp: z.ZodOptional<z.ZodOptional<z.ZodString>>;
@@ -1353,6 +1318,41 @@ export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     c_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     s_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     auth_time: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    family_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    given_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    middle_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    nickname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    gender: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    profile: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    birthdate: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    zoneinfo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    locale: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    updated_at: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    phone_number: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    phone_number_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+    address: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+        formatted: z.ZodOptional<z.ZodString>;
+        street_address: z.ZodOptional<z.ZodString>;
+        locality: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        postal_code: z.ZodOptional<z.ZodString>;
+        country: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        formatted?: string | undefined;
+        street_address?: string | undefined;
+        locality?: string | undefined;
+        region?: string | undefined;
+        postal_code?: string | undefined;
+        country?: string | undefined;
+    }, {
+        formatted?: string | undefined;
+        street_address?: string | undefined;
+        locality?: string | undefined;
+        region?: string | undefined;
+        postal_code?: string | undefined;
+        country?: string | undefined;
+    }>>>;
     authorization_details: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
         type: z.ZodString;
         locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1388,31 +1388,10 @@ export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     htm?: string | undefined;
     htu?: string | undefined;
     ath?: string | undefined;
+    preferred_username?: string | undefined;
     email?: string | undefined;
     email_verified?: boolean | undefined;
-    phone_number?: string | undefined;
-    phone_number_verified?: boolean | undefined;
-    address?: {
-        formatted?: string | undefined;
-        street_address?: string | undefined;
-        locality?: string | undefined;
-        region?: string | undefined;
-        postal_code?: string | undefined;
-        country?: string | undefined;
-    } | undefined;
-    profile?: string | undefined;
-    family_name?: string | undefined;
-    given_name?: string | undefined;
-    middle_name?: string | undefined;
-    nickname?: string | undefined;
-    preferred_username?: string | undefined;
-    gender?: string | undefined;
     picture?: string | undefined;
-    website?: string | undefined;
-    birthdate?: string | undefined;
-    zoneinfo?: string | undefined;
-    locale?: string | undefined;
-    updated_at?: number | undefined;
     nbf?: number | undefined;
     acr?: string | undefined;
     azp?: string | undefined;
@@ -1526,6 +1505,27 @@ export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     c_hash?: string | undefined;
     s_hash?: string | undefined;
     auth_time?: number | undefined;
+    family_name?: string | undefined;
+    given_name?: string | undefined;
+    middle_name?: string | undefined;
+    nickname?: string | undefined;
+    gender?: string | undefined;
+    profile?: string | undefined;
+    website?: string | undefined;
+    birthdate?: string | undefined;
+    zoneinfo?: string | undefined;
+    locale?: string | undefined;
+    updated_at?: number | undefined;
+    phone_number?: string | undefined;
+    phone_number_verified?: boolean | undefined;
+    address?: {
+        formatted?: string | undefined;
+        street_address?: string | undefined;
+        locality?: string | undefined;
+        region?: string | undefined;
+        postal_code?: string | undefined;
+        country?: string | undefined;
+    } | undefined;
     authorization_details?: z.objectOutputType<{
         type: z.ZodString;
         locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1543,31 +1543,10 @@ export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     htm?: string | undefined;
     htu?: string | undefined;
     ath?: string | undefined;
+    preferred_username?: string | undefined;
     email?: string | undefined;
     email_verified?: boolean | undefined;
-    phone_number?: string | undefined;
-    phone_number_verified?: boolean | undefined;
-    address?: {
-        formatted?: string | undefined;
-        street_address?: string | undefined;
-        locality?: string | undefined;
-        region?: string | undefined;
-        postal_code?: string | undefined;
-        country?: string | undefined;
-    } | undefined;
-    profile?: string | undefined;
-    family_name?: string | undefined;
-    given_name?: string | undefined;
-    middle_name?: string | undefined;
-    nickname?: string | undefined;
-    preferred_username?: string | undefined;
-    gender?: string | undefined;
     picture?: string | undefined;
-    website?: string | undefined;
-    birthdate?: string | undefined;
-    zoneinfo?: string | undefined;
-    locale?: string | undefined;
-    updated_at?: number | undefined;
     nbf?: number | undefined;
     acr?: string | undefined;
     azp?: string | undefined;
@@ -1681,6 +1660,27 @@ export declare const signedTokenPayloadSchema: z.ZodIntersection<z.ZodObject<{
     c_hash?: string | undefined;
     s_hash?: string | undefined;
     auth_time?: number | undefined;
+    family_name?: string | undefined;
+    given_name?: string | undefined;
+    middle_name?: string | undefined;
+    nickname?: string | undefined;
+    gender?: string | undefined;
+    profile?: string | undefined;
+    website?: string | undefined;
+    birthdate?: string | undefined;
+    zoneinfo?: string | undefined;
+    locale?: string | undefined;
+    updated_at?: number | undefined;
+    phone_number?: string | undefined;
+    phone_number_verified?: boolean | undefined;
+    address?: {
+        formatted?: string | undefined;
+        street_address?: string | undefined;
+        locality?: string | undefined;
+        region?: string | undefined;
+        postal_code?: string | undefined;
+        country?: string | undefined;
+    } | undefined;
     authorization_details?: z.objectInputType<{
         type: z.ZodString;
         locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;

package/dist/signer/signer.d.ts

@@ -22,9 +22,9 @@ export declare class Signer {
     }): Promise<SignedJwt>;
     verifyAccessToken(token: SignedJwt): Promise<import("@atproto/jwk").VerifyResult<{
         iat: number;
-        exp: number;
-        iss: string;
         aud: string | [string, ...string[]];
+        iss: string;
+        exp: number;
         jti: `tok-${string}`;
         sub: string;
         client_id: string;
@@ -33,31 +33,10 @@ export declare class Signer {
         htm?: string | undefined;
         htu?: string | undefined;
         ath?: string | undefined;
+        preferred_username?: string | undefined;
         email?: string | undefined;
         email_verified?: boolean | undefined;
-        phone_number?: string | undefined;
-        phone_number_verified?: boolean | undefined;
-        address?: {
-            formatted?: string | undefined;
-            street_address?: string | undefined;
-            locality?: string | undefined;
-            region?: string | undefined;
-            postal_code?: string | undefined;
-            country?: string | undefined;
-        } | undefined;
-        profile?: string | undefined;
-        family_name?: string | undefined;
-        given_name?: string | undefined;
-        middle_name?: string | undefined;
-        nickname?: string | undefined;
-        preferred_username?: string | undefined;
-        gender?: string | undefined;
         picture?: string | undefined;
-        website?: string | undefined;
-        birthdate?: string | undefined;
-        zoneinfo?: string | undefined;
-        locale?: string | undefined;
-        updated_at?: number | undefined;
         nbf?: number | undefined;
         acr?: string | undefined;
         azp?: string | undefined;
@@ -171,6 +150,27 @@ export declare class Signer {
         c_hash?: string | undefined;
         s_hash?: string | undefined;
         auth_time?: number | undefined;
+        family_name?: string | undefined;
+        given_name?: string | undefined;
+        middle_name?: string | undefined;
+        nickname?: string | undefined;
+        gender?: string | undefined;
+        profile?: string | undefined;
+        website?: string | undefined;
+        birthdate?: string | undefined;
+        zoneinfo?: string | undefined;
+        locale?: string | undefined;
+        updated_at?: number | undefined;
+        phone_number?: string | undefined;
+        phone_number_verified?: boolean | undefined;
+        address?: {
+            formatted?: string | undefined;
+            street_address?: string | undefined;
+            locality?: string | undefined;
+            region?: string | undefined;
+            postal_code?: string | undefined;
+            country?: string | undefined;
+        } | undefined;
         authorization_details?: import("zod").objectOutputType<{
             type: import("zod").ZodString;
             locations: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
@@ -182,12 +182,5 @@ export declare class Signer {
     }, string> & {
         key: import("@atproto/jwk").Key;
     }>;
-    idToken(client: Client, params: OAuthAuthenticationRequestParameters, account: Account, extra: {
-        exp: Date;
-        iat?: Date;
-        auth_time?: Date;
-        code?: string;
-        access_token?: string;
-    }): Promise<SignedJwt>;
 }
 //# sourceMappingURL=signer.d.ts.map

package/dist/signer/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/signer/signer.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,MAAM,EACN,SAAS,EACT,aAAa,EACd,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAK5C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAM9C,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AAEjD,qBAAa,MAAM;aAEC,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;gBADd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM;IAG1B,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,EACzD,KAAK,EAAE,SAAS,EAChB,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;;;IAQ5B,IAAI,CACf,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,GACnD,OAAO,CAAC,SAAS,CAAC;IASf,WAAW,CACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,oCAAoC,EAChD,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;QACL,GAAG,EAAE,OAAO,CAAA;QACZ,GAAG,EAAE,IAAI,CAAA;QACT,GAAG,CAAC,EAAE,IAAI,CAAA;QACV,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,qBAAqB,CAAC,EAAE,yBAAyB,CAAA;KAClD,GACA,OAAO,CAAC,SAAS,CAAC;IAuBf,iBAAiB,CAAC,KAAK,EAAE,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAelC,OAAO,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,oCAAoC,EAC5C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;QACL,GAAG,EAAE,IAAI,CAAA;QACT,GAAG,CAAC,EAAE,IAAI,CAAA;QACV,SAAS,CAAC,EAAE,IAAI,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,GACA,OAAO,CAAC,SAAS,CAAC;CA6CtB"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/signer/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,MAAM,EACN,SAAS,EACT,aAAa,EACd,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAM9C,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AAEjD,qBAAa,MAAM;aAEC,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;gBADd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM;IAG1B,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,EACzD,KAAK,EAAE,SAAS,EAChB,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;;;IAQ5B,IAAI,CACf,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,GACnD,OAAO,CAAC,SAAS,CAAC;IASf,WAAW,CACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,oCAAoC,EAChD,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;QACL,GAAG,EAAE,OAAO,CAAA;QACZ,GAAG,EAAE,IAAI,CAAA;QACT,GAAG,CAAC,EAAE,IAAI,CAAA;QACV,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,qBAAqB,CAAC,EAAE,yBAAyB,CAAA;KAClD,GACA,OAAO,CAAC,SAAS,CAAC;IAuBf,iBAAiB,CAAC,KAAK,EAAE,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAczC"}

package/dist/signer/signer.js

@@ -1,12 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Signer = void 0;
-const node_crypto_1 = require("node:crypto");
-const oidc_token_hash_1 = require("oidc-token-hash");
-const invalid_client_metadata_error_js_1 = require("../errors/invalid-client-metadata-error.js");
 const date_js_1 = require("../lib/util/date.js");
-const claims_requested_js_1 = require("../parameters/claims-requested.js");
-const oidc_payload_js_1 = require("../parameters/oidc-payload.js");
 const signed_token_payload_js_1 = require("./signed-token-payload.js");
 class Signer {
     issuer;
@@ -61,41 +56,6 @@ class Signer {
         signed_token_payload_js_1.signedTokenPayloadSchema.parse(result.payload);
         return result;
     }
-    async idToken(client, params, account, extra) {
-        // This can happen when a client is using password_grant. If a client is
-        // using password_grant, it should not set "require_auth_time" to true.
-        if (client.metadata.require_auth_time && extra.auth_time == null) {
-            throw new invalid_client_metadata_error_js_1.InvalidClientMetadataError('"require_auth_time" metadata is not compatible with "password_grant" flow');
-        }
-        return this.sign({
-            alg: client.metadata.id_token_signed_response_alg,
-            typ: 'JWT',
-        }, async ({ alg }, key) => ({
-            ...(0, oidc_payload_js_1.oidcPayload)(params, account),
-            aud: client.id,
-            iat: (0, date_js_1.dateToEpoch)(extra.iat),
-            exp: (0, date_js_1.dateToEpoch)(extra.exp),
-            sub: account.sub,
-            jti: (0, node_crypto_1.randomBytes)(16).toString('hex'),
-            scope: params.scope,
-            nonce: params.nonce,
-            s_hash: params.state //
-                ? await (0, oidc_token_hash_1.generate)(params.state, alg, key.crv)
-                : undefined,
-            c_hash: extra.code //
-                ? await (0, oidc_token_hash_1.generate)(extra.code, alg, key.crv)
-                : undefined,
-            at_hash: extra.access_token //
-                ? await (0, oidc_token_hash_1.generate)(extra.access_token, alg, key.crv)
-                : undefined,
-            // https://openid.net/specs/openid-provider-authentication-policy-extension-1_0.html#rfc.section.5.2
-            auth_time: client.metadata.require_auth_time ||
-                (extra.auth_time != null && params.max_age != null) ||
-                (0, claims_requested_js_1.claimRequested)(params, 'id_token', 'auth_time', extra.auth_time)
-                ? (0, date_js_1.dateToEpoch)(extra.auth_time)
-                : undefined,
-        }));
-    }
 }
 exports.Signer = Signer;
 //# sourceMappingURL=signer.js.map

package/dist/signer/signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer/signer.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AAczC,qDAAkD;AAIlD,iGAAuF;AACvF,iDAAiD;AACjD,2EAAkE;AAClE,mEAA2D;AAE3D,uEAGkC;AAIlC,MAAa,MAAM;IAEC;IACA;IAFlB,YACkB,MAAc,EACd,MAAc;QADd,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,KAAgB,EAChB,OAAuC;QAEvC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAI,KAAK,EAAE;YACrC,GAAG,OAAO;YACV,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CACf,UAAyB,EACzB,OAAoD;QAEpD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACxE,GAAG,CAAC,OAAO,OAAO,KAAK,UAAU;gBAC/B,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;gBACrC,CAAC,CAAC,OAAO,CAAC;YACZ,GAAG,EAAE,IAAI,CAAC,MAAM;SACjB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAc,EACd,UAAgD,EAChD,OAAgB,EAChB,KAOC;QAED,MAAM,MAAM,GAAkB;YAC5B,4DAA4D;YAC5D,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,QAAQ;SACd,CAAA;QAED,MAAM,OAAO,GAAoC;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,EAAE,GAAG,CAAC;YAC5B,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,4DAA4D;YAC5D,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK;YAChD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAA;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAqB,KAAK,EAAE;YAC1D,GAAG,EAAE,QAAQ;SACd,CAAC,CAAA;QAEF,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,SAAS;QACT,kDAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAE9C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,MAA4C,EAC5C,OAAgB,EAChB,KAMC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YACjE,MAAM,IAAI,6DAA0B,CAClC,2EAA2E,CAC5E,CAAA;QACH,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CACd;YACE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,4BAA4B;YACjD,GAAG,EAAE,KAAK;SACX,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG,IAAA,6BAAW,EAAC,MAAM,EAAE,OAAO,CAAC;YAE/B,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YAEnB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBACrB,CAAC,CAAC,MAAM,IAAA,0BAAI,EAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;gBACxC,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;gBACnB,CAAC,CAAC,MAAM,IAAA,0BAAI,EAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;gBACtC,CAAC,CAAC,SAAS;YACb,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;gBAC5B,CAAC,CAAC,MAAM,IAAA,0BAAI,EAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;YAEb,oGAAoG;YACpG,SAAS,EACP,MAAM,CAAC,QAAQ,CAAC,iBAAiB;gBACjC,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;gBACnD,IAAA,oCAAc,EAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;gBAC9D,CAAC,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,SAAU,CAAC;gBAC/B,CAAC,CAAC,SAAS;SAChB,CAAC,CACH,CAAA;IACH,CAAC;CACF;AAtID,wBAsIC"}
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer/signer.ts"],"names":[],"mappings":";;;AAeA,iDAAiD;AAEjD,uEAGkC;AAIlC,MAAa,MAAM;IAEC;IACA;IAFlB,YACkB,MAAc,EACd,MAAc;QADd,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,KAAgB,EAChB,OAAuC;QAEvC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAI,KAAK,EAAE;YACrC,GAAG,OAAO;YACV,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CACf,UAAyB,EACzB,OAAoD;QAEpD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACxE,GAAG,CAAC,OAAO,OAAO,KAAK,UAAU;gBAC/B,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;gBACrC,CAAC,CAAC,OAAO,CAAC;YACZ,GAAG,EAAE,IAAI,CAAC,MAAM;SACjB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAc,EACd,UAAgD,EAChD,OAAgB,EAChB,KAOC;QAED,MAAM,MAAM,GAAkB;YAC5B,4DAA4D;YAC5D,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,QAAQ;SACd,CAAA;QAED,MAAM,OAAO,GAAoC;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,EAAE,GAAG,CAAC;YAC5B,GAAG,EAAE,IAAA,qBAAW,EAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,4DAA4D;YAC5D,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK;YAChD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAA;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAqB,KAAK,EAAE;YAC1D,GAAG,EAAE,QAAQ;SACd,CAAC,CAAA;QAEF,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,SAAS;QACT,kDAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAE9C,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AA7ED,wBA6EC"}