@atproto/oauth-provider 0.2.0 → 0.2.2

package/dist/request/types.d.ts

@@ -1,328 +0,0 @@
-import { z } from 'zod';
-export declare const authorizationRequestJarSchema: z.ZodObject<{
-    /**
-     * AuthorizationRequest inside a JWT:
-     * - "iat" is required and **MUST** be less than one minute
-     *
-     * @see {@link https://datatracker.ietf.org/doc/html/rfc9101}
-     */
-    request: z.ZodUnion<[z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}`, string>]>;
-}, "strip", z.ZodTypeAny, {
-    request: `${string}.${string}.${string}` | `${string}.${string}`;
-}, {
-    request: string;
-}>;
-export type AuthorizationRequestJar = z.infer<typeof authorizationRequestJarSchema>;
-export declare const pushedAuthorizationRequestSchema: z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    state: z.ZodOptional<z.ZodString>;
-    nonce: z.ZodOptional<z.ZodString>;
-    dpop_jkt: z.ZodOptional<z.ZodString>;
-    response_type: z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>;
-    response_mode: z.ZodOptional<z.ZodEnum<["query", "fragment", "form_post"]>>;
-    code_challenge: z.ZodOptional<z.ZodString>;
-    code_challenge_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["S256", "plain"]>>>;
-    redirect_uri: z.ZodOptional<z.ZodString>;
-    scope: z.ZodOptional<z.ZodString>;
-    max_age: z.ZodOptional<z.ZodNumber>;
-    claims: z.ZodOptional<z.ZodRecord<z.ZodEnum<["userinfo", "id_token"]>, z.ZodRecord<z.ZodEnum<["auth_time", "nonce", "acr", "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "gender", "picture", "profile", "website", "birthdate", "zoneinfo", "locale", "updated_at", "email", "email_verified", "phone_number", "phone_number_verified", "address"]>, z.ZodUnion<[z.ZodLiteral<null>, z.ZodObject<{
-        essential: z.ZodOptional<z.ZodBoolean>;
-        value: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
-        values: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    }, {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    }>]>>>>;
-    login_hint: z.ZodOptional<z.ZodString>;
-    ui_locales: z.ZodOptional<z.ZodString>;
-    id_token_hint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>>;
-    display: z.ZodOptional<z.ZodEnum<["page", "popup", "touch"]>>;
-    prompt: z.ZodOptional<z.ZodEnum<["none", "login", "consent", "select_account"]>>;
-    authorization_details: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        type: z.ZodString;
-        locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        identifier: z.ZodOptional<z.ZodString>;
-        privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }, {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
-    scope?: string | undefined;
-    redirect_uri?: string | undefined;
-    nonce?: string | undefined;
-    state?: string | undefined;
-    dpop_jkt?: string | undefined;
-    response_mode?: "query" | "fragment" | "form_post" | undefined;
-    code_challenge?: string | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    } | null>>>> | undefined;
-    login_hint?: string | undefined;
-    ui_locales?: string | undefined;
-    id_token_hint?: `${string}.${string}.${string}` | undefined;
-    display?: "page" | "popup" | "touch" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    authorization_details?: {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }[] | undefined;
-}, {
-    client_id: string;
-    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
-    scope?: string | undefined;
-    redirect_uri?: string | undefined;
-    nonce?: string | undefined;
-    state?: string | undefined;
-    dpop_jkt?: string | undefined;
-    response_mode?: "query" | "fragment" | "form_post" | undefined;
-    code_challenge?: string | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    } | null>>>> | undefined;
-    login_hint?: string | undefined;
-    ui_locales?: string | undefined;
-    id_token_hint?: string | undefined;
-    display?: "page" | "popup" | "touch" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    authorization_details?: {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }[] | undefined;
-}>, z.ZodObject<{
-    /**
-     * AuthorizationRequest inside a JWT:
-     * - "iat" is required and **MUST** be less than one minute
-     *
-     * @see {@link https://datatracker.ietf.org/doc/html/rfc9101}
-     */
-    request: z.ZodUnion<[z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}`, string>]>;
-}, "strip", z.ZodTypeAny, {
-    request: `${string}.${string}.${string}` | `${string}.${string}`;
-}, {
-    request: string;
-}>]>>;
-export type PushedAuthorizationRequest = z.infer<typeof pushedAuthorizationRequestSchema>;
-export declare const authorizationRequestQuerySchema: z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    state: z.ZodOptional<z.ZodString>;
-    nonce: z.ZodOptional<z.ZodString>;
-    dpop_jkt: z.ZodOptional<z.ZodString>;
-    response_type: z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>;
-    response_mode: z.ZodOptional<z.ZodEnum<["query", "fragment", "form_post"]>>;
-    code_challenge: z.ZodOptional<z.ZodString>;
-    code_challenge_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["S256", "plain"]>>>;
-    redirect_uri: z.ZodOptional<z.ZodString>;
-    scope: z.ZodOptional<z.ZodString>;
-    max_age: z.ZodOptional<z.ZodNumber>;
-    claims: z.ZodOptional<z.ZodRecord<z.ZodEnum<["userinfo", "id_token"]>, z.ZodRecord<z.ZodEnum<["auth_time", "nonce", "acr", "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "gender", "picture", "profile", "website", "birthdate", "zoneinfo", "locale", "updated_at", "email", "email_verified", "phone_number", "phone_number_verified", "address"]>, z.ZodUnion<[z.ZodLiteral<null>, z.ZodObject<{
-        essential: z.ZodOptional<z.ZodBoolean>;
-        value: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
-        values: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    }, {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    }>]>>>>;
-    login_hint: z.ZodOptional<z.ZodString>;
-    ui_locales: z.ZodOptional<z.ZodString>;
-    id_token_hint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>>;
-    display: z.ZodOptional<z.ZodEnum<["page", "popup", "touch"]>>;
-    prompt: z.ZodOptional<z.ZodEnum<["none", "login", "consent", "select_account"]>>;
-    authorization_details: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        type: z.ZodString;
-        locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        identifier: z.ZodOptional<z.ZodString>;
-        privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }, {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
-    scope?: string | undefined;
-    redirect_uri?: string | undefined;
-    nonce?: string | undefined;
-    state?: string | undefined;
-    dpop_jkt?: string | undefined;
-    response_mode?: "query" | "fragment" | "form_post" | undefined;
-    code_challenge?: string | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    } | null>>>> | undefined;
-    login_hint?: string | undefined;
-    ui_locales?: string | undefined;
-    id_token_hint?: `${string}.${string}.${string}` | undefined;
-    display?: "page" | "popup" | "touch" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    authorization_details?: {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }[] | undefined;
-}, {
-    client_id: string;
-    response_type: "none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token";
-    scope?: string | undefined;
-    redirect_uri?: string | undefined;
-    nonce?: string | undefined;
-    state?: string | undefined;
-    dpop_jkt?: string | undefined;
-    response_mode?: "query" | "fragment" | "form_post" | undefined;
-    code_challenge?: string | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    max_age?: number | undefined;
-    claims?: Partial<Record<"id_token" | "userinfo", Partial<Record<"nonce" | "name" | "preferred_username" | "email" | "email_verified" | "picture" | "acr" | "auth_time" | "family_name" | "given_name" | "middle_name" | "nickname" | "gender" | "profile" | "website" | "birthdate" | "zoneinfo" | "locale" | "updated_at" | "phone_number" | "phone_number_verified" | "address", {
-        values?: (string | number | boolean)[] | undefined;
-        value?: string | number | boolean | undefined;
-        essential?: boolean | undefined;
-    } | null>>>> | undefined;
-    login_hint?: string | undefined;
-    ui_locales?: string | undefined;
-    id_token_hint?: string | undefined;
-    display?: "page" | "popup" | "touch" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    authorization_details?: {
-        type: string;
-        locations?: string[] | undefined;
-        actions?: string[] | undefined;
-        datatypes?: string[] | undefined;
-        identifier?: string | undefined;
-        privileges?: string[] | undefined;
-    }[] | undefined;
-}>, z.ZodObject<{
-    /**
-     * AuthorizationRequest inside a JWT:
-     * - "iat" is required and **MUST** be less than one minute
-     *
-     * @see {@link https://datatracker.ietf.org/doc/html/rfc9101}
-     */
-    request: z.ZodUnion<[z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}`, string>]>;
-}, "strip", z.ZodTypeAny, {
-    request: `${string}.${string}.${string}` | `${string}.${string}`;
-}, {
-    request: string;
-}>, z.ZodObject<{
-    request_uri: z.ZodEffects<z.ZodString, `urn:ietf:params:oauth:request_uri:req-${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    request_uri: `urn:ietf:params:oauth:request_uri:req-${string}`;
-}, {
-    request_uri: string;
-}>]>>;
-export type AuthorizationRequestQuery = z.infer<typeof authorizationRequestQuerySchema>;
-//# sourceMappingURL=types.d.ts.map

package/dist/request/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/request/types.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,6BAA6B;IACxC;;;;;OAKG;;;;;;EAEH,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAA;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAb3C;;;;;OAKG;;;;;;KAeJ,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAA;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA1B1C;;;;;OAKG;;;;;;;;;;;;KA4BJ,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAA"}

package/dist/request/types.js

@@ -1,27 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authorizationRequestQuerySchema = exports.pushedAuthorizationRequestSchema = exports.authorizationRequestJarSchema = void 0;
-const jwk_1 = require("@atproto/jwk");
-const oauth_types_1 = require("@atproto/oauth-types");
-const zod_1 = require("zod");
-const request_uri_js_1 = require("./request-uri.js");
-exports.authorizationRequestJarSchema = zod_1.z.object({
-    /**
-     * AuthorizationRequest inside a JWT:
-     * - "iat" is required and **MUST** be less than one minute
-     *
-     * @see {@link https://datatracker.ietf.org/doc/html/rfc9101}
-     */
-    request: zod_1.z.union([jwk_1.signedJwtSchema, jwk_1.unsignedJwtSchema]),
-});
-exports.pushedAuthorizationRequestSchema = zod_1.z.intersection(oauth_types_1.oauthClientIdentificationSchema, zod_1.z.union([
-    oauth_types_1.oauthAuthenticationRequestParametersSchema,
-    exports.authorizationRequestJarSchema,
-    //
-]));
-exports.authorizationRequestQuerySchema = zod_1.z.intersection(oauth_types_1.oauthClientIdentificationSchema, zod_1.z.union([
-    oauth_types_1.oauthAuthenticationRequestParametersSchema,
-    exports.authorizationRequestJarSchema,
-    zod_1.z.object({ request_uri: request_uri_js_1.requestUriSchema }),
-]));
-//# sourceMappingURL=types.js.map

package/dist/request/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/request/types.ts"],"names":[],"mappings":";;;AAAA,sCAAiE;AACjE,sDAG6B;AAC7B,6BAAuB;AAEvB,qDAAmD;AAEtC,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD;;;;;OAKG;IACH,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,qBAAe,EAAE,uBAAiB,CAAC,CAAC;CACvD,CAAC,CAAA;AAMW,QAAA,gCAAgC,GAAG,OAAC,CAAC,YAAY,CAC5D,6CAA+B,EAC/B,OAAC,CAAC,KAAK,CAAC;IACN,wDAA0C;IAC1C,qCAA6B;IAC7B,EAAE;CACH,CAAC,CACH,CAAA;AAMY,QAAA,+BAA+B,GAAG,OAAC,CAAC,YAAY,CAC3D,6CAA+B,EAC/B,OAAC,CAAC,KAAK,CAAC;IACN,wDAA0C;IAC1C,qCAA6B;IAC7B,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAgB,EAAE,CAAC;CAC5C,CAAC,CACH,CAAA"}

package/dist/token/types.d.ts

@@ -1,250 +0,0 @@
-import { OAuthAuthorizationDetails, OAuthTokenType } from '@atproto/oauth-types';
-import { z } from 'zod';
-export declare const codeGrantRequestSchema: z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"authorization_code">;
-    code: z.ZodEffects<z.ZodString, `cod-${string}`, string>;
-    /** @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.1} */
-    code_verifier: z.ZodString;
-    redirect_uri: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    code: `cod-${string}`;
-    redirect_uri: string;
-    grant_type: "authorization_code";
-    code_verifier: string;
-}, {
-    code: string;
-    redirect_uri: string;
-    grant_type: "authorization_code";
-    code_verifier: string;
-}>>;
-export type CodeGrantRequest = z.infer<typeof codeGrantRequestSchema>;
-export declare const refreshGrantRequestSchema: z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"refresh_token">;
-    refresh_token: z.ZodEffects<z.ZodString, `ref-${string}`, string>;
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    refresh_token: `ref-${string}`;
-    client_id: string;
-    grant_type: "refresh_token";
-}, {
-    refresh_token: string;
-    client_id: string;
-    grant_type: "refresh_token";
-}>>;
-export type RefreshGrantRequest = z.infer<typeof refreshGrantRequestSchema>;
-export declare const tokenRequestSchema: z.ZodUnion<[z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"authorization_code">;
-    code: z.ZodEffects<z.ZodString, `cod-${string}`, string>;
-    /** @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.1} */
-    code_verifier: z.ZodString;
-    redirect_uri: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    code: `cod-${string}`;
-    redirect_uri: string;
-    grant_type: "authorization_code";
-    code_verifier: string;
-}, {
-    code: string;
-    redirect_uri: string;
-    grant_type: "authorization_code";
-    code_verifier: string;
-}>>, z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"refresh_token">;
-    refresh_token: z.ZodEffects<z.ZodString, `ref-${string}`, string>;
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    refresh_token: `ref-${string}`;
-    client_id: string;
-    grant_type: "refresh_token";
-}, {
-    refresh_token: string;
-    client_id: string;
-    grant_type: "refresh_token";
-}>>]>;
-export type TokenRequest = z.infer<typeof tokenRequestSchema>;
-export declare const tokenIdentification: z.ZodObject<{
-    token: z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, `ref-${string}`, string>]>;
-    token_type_hint: z.ZodOptional<z.ZodEnum<["access_token", "refresh_token"]>>;
-}, "strip", z.ZodTypeAny, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}>;
-export type TokenIdentification = z.infer<typeof tokenIdentification>;
-export declare const revokeSchema: z.ZodObject<{
-    token: z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, `ref-${string}`, string>]>;
-    token_type_hint: z.ZodOptional<z.ZodEnum<["access_token", "refresh_token"]>>;
-}, "strip", z.ZodTypeAny, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}>;
-export type Revoke = z.infer<typeof revokeSchema>;
-export declare const introspectSchema: z.ZodIntersection<z.ZodUnion<[z.ZodUnion<[z.ZodObject<{
-    client_id: z.ZodString;
-    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
-    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: `${string}.${string}.${string}`;
-}, {
-    client_id: string;
-    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
-    client_assertion: string;
-}>, z.ZodObject<{
-    client_id: z.ZodString;
-    client_secret: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-    client_secret: string;
-}, {
-    client_id: string;
-    client_secret: string;
-}>]>, z.ZodObject<{
-    client_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    client_id: string;
-}, {
-    client_id: string;
-}>]>, z.ZodObject<{
-    token: z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, `ref-${string}`, string>]>;
-    token_type_hint: z.ZodOptional<z.ZodEnum<["access_token", "refresh_token"]>>;
-}, "strip", z.ZodTypeAny, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}, {
-    token: string;
-    token_type_hint?: "refresh_token" | "access_token" | undefined;
-}>>;
-export type Introspect = z.infer<typeof introspectSchema>;
-export type IntrospectionResponse = {
-    active: false;
-} | {
-    active: true;
-    scope?: string;
-    client_id?: string;
-    username?: string;
-    token_type?: OAuthTokenType;
-    authorization_details?: OAuthAuthorizationDetails;
-    aud?: string | [string, ...string[]];
-    exp?: number;
-    iat?: number;
-    iss?: string;
-    jti?: string;
-    nbf?: number;
-    sub?: string;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/token/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/token/types.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,cAAc,EAGf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAK/B,6EAA6E;;;;;;;;;;;;;GAShF,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAOrC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAxB3B,6EAA6E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA2B/E,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,eAAO,MAAM,YAAY;;;;;;;;;EAAsB,CAAA;AAE/C,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEjD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAG5B,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAGzD,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,GACjB;IACE,MAAM,EAAE,IAAI,CAAA;IAEZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,qBAAqB,CAAC,EAAE,yBAAyB,CAAA;IAEjD,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IACpC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}

package/dist/token/types.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.introspectSchema = exports.revokeSchema = exports.tokenIdentification = exports.tokenRequestSchema = exports.refreshGrantRequestSchema = exports.codeGrantRequestSchema = void 0;
-const oauth_types_1 = require("@atproto/oauth-types");
-const zod_1 = require("zod");
-const client_id_js_1 = require("../client/client-id.js");
-const code_js_1 = require("../request/code.js");
-const refresh_token_js_1 = require("./refresh-token.js");
-exports.codeGrantRequestSchema = zod_1.z.intersection(oauth_types_1.oauthClientIdentificationSchema, zod_1.z.object({
-    grant_type: zod_1.z.literal('authorization_code'),
-    code: code_js_1.codeSchema,
-    /** @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.1} */
-    code_verifier: zod_1.z
-        .string()
-        .min(43)
-        .max(128)
-        .regex(/^[a-zA-Z0-9-._~]+$/),
-    redirect_uri: zod_1.z.string().url(),
-    // request_uri ???
-}));
-exports.refreshGrantRequestSchema = zod_1.z.intersection(oauth_types_1.oauthClientIdentificationSchema, zod_1.z.object({
-    grant_type: zod_1.z.literal('refresh_token'),
-    refresh_token: refresh_token_js_1.refreshTokenSchema,
-    client_id: client_id_js_1.clientIdSchema,
-}));
-exports.tokenRequestSchema = zod_1.z.union([
-    exports.codeGrantRequestSchema,
-    exports.refreshGrantRequestSchema,
-]);
-exports.tokenIdentification = zod_1.z.object({
-    token: zod_1.z.union([oauth_types_1.accessTokenSchema, refresh_token_js_1.refreshTokenSchema]),
-    token_type_hint: zod_1.z.enum(['access_token', 'refresh_token']).optional(),
-});
-exports.revokeSchema = exports.tokenIdentification;
-exports.introspectSchema = zod_1.z.intersection(oauth_types_1.oauthClientIdentificationSchema, exports.tokenIdentification);
-//# sourceMappingURL=types.js.map

package/dist/token/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/token/types.ts"],"names":[],"mappings":";;;AAAA,sDAK6B;AAC7B,6BAAuB;AAEvB,yDAAuD;AACvD,gDAA+C;AAC/C,yDAAuD;AAE1C,QAAA,sBAAsB,GAAG,OAAC,CAAC,YAAY,CAClD,6CAA+B,EAC/B,OAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC3C,IAAI,EAAE,oBAAU;IAChB,6EAA6E;IAC7E,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,oBAAoB,CAAC;IAC9B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,kBAAkB;CACnB,CAAC,CACH,CAAA;AAIY,QAAA,yBAAyB,GAAG,OAAC,CAAC,YAAY,CACrD,6CAA+B,EAC/B,OAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACtC,aAAa,EAAE,qCAAkB;IACjC,SAAS,EAAE,6BAAc;CAC1B,CAAC,CACH,CAAA;AAIY,QAAA,kBAAkB,GAAG,OAAC,CAAC,KAAK,CAAC;IACxC,8BAAsB;IACtB,iCAAyB;CAC1B,CAAC,CAAA;AAIW,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,+BAAiB,EAAE,qCAAkB,CAAC,CAAC;IACvD,eAAe,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAA;AAIW,QAAA,YAAY,GAAG,2BAAmB,CAAA;AAIlC,QAAA,gBAAgB,GAAG,OAAC,CAAC,YAAY,CAC5C,6CAA+B,EAC/B,2BAAmB,CACpB,CAAA"}