@atproto/oauth-provider 0.6.5 → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +46 -0
- package/dist/access-token/access-token-mode.d.ts +5 -0
- package/dist/access-token/access-token-mode.d.ts.map +1 -0
- package/dist/access-token/access-token-mode.js +9 -0
- package/dist/access-token/access-token-mode.js.map +1 -0
- package/dist/account/account-manager.d.ts +13 -7
- package/dist/account/account-manager.d.ts.map +1 -1
- package/dist/account/account-manager.js +69 -52
- package/dist/account/account-manager.js.map +1 -1
- package/dist/account/account-store.d.ts +88 -77
- package/dist/account/account-store.d.ts.map +1 -1
- package/dist/account/account-store.js +24 -73
- package/dist/account/account-store.js.map +1 -1
- package/dist/account/sign-in-data.d.ts +4 -13
- package/dist/account/sign-in-data.d.ts.map +1 -1
- package/dist/account/sign-in-data.js +9 -9
- package/dist/account/sign-in-data.js.map +1 -1
- package/dist/account/sign-up-input.d.ts +4 -5
- package/dist/account/sign-up-input.d.ts.map +1 -1
- package/dist/account/sign-up-input.js +13 -3
- package/dist/account/sign-up-input.js.map +1 -1
- package/dist/client/client-manager.d.ts +4 -1
- package/dist/client/client-manager.d.ts.map +1 -1
- package/dist/client/client-manager.js +13 -1
- package/dist/client/client-manager.js.map +1 -1
- package/dist/client/client-store.d.ts +1 -1
- package/dist/client/client-store.d.ts.map +1 -1
- package/dist/constants.d.ts +5 -1
- package/dist/constants.d.ts.map +1 -1
- package/dist/constants.js +6 -2
- package/dist/constants.js.map +1 -1
- package/dist/customization/branding.d.ts +54 -0
- package/dist/customization/branding.d.ts.map +1 -0
- package/dist/customization/branding.js +13 -0
- package/dist/customization/branding.js.map +1 -0
- package/dist/customization/build-customization-css.d.ts +3 -0
- package/dist/customization/build-customization-css.d.ts.map +1 -0
- package/dist/customization/build-customization-css.js +27 -0
- package/dist/customization/build-customization-css.js.map +1 -0
- package/dist/customization/build-customization-data.d.ts +4 -0
- package/dist/customization/build-customization-data.d.ts.map +1 -0
- package/dist/customization/build-customization-data.js +18 -0
- package/dist/customization/build-customization-data.js.map +1 -0
- package/dist/customization/colors.d.ts +7 -0
- package/dist/customization/colors.d.ts.map +1 -0
- package/dist/customization/colors.js +27 -0
- package/dist/customization/colors.js.map +1 -0
- package/dist/customization/customization.d.ts +129 -0
- package/dist/customization/customization.d.ts.map +1 -0
- package/dist/customization/customization.js +26 -0
- package/dist/customization/customization.js.map +1 -0
- package/dist/customization/links.d.ts +26 -0
- package/dist/customization/links.d.ts.map +1 -0
- package/dist/customization/links.js +12 -0
- package/dist/customization/links.js.map +1 -0
- package/dist/device/device-id.d.ts +1 -0
- package/dist/device/device-id.d.ts.map +1 -1
- package/dist/device/device-id.js +4 -0
- package/dist/device/device-id.js.map +1 -1
- package/dist/device/device-manager.d.ts +6 -36
- package/dist/device/device-manager.d.ts.map +1 -1
- package/dist/device/device-manager.js +49 -43
- package/dist/device/device-manager.js.map +1 -1
- package/dist/device/device-store.d.ts +1 -0
- package/dist/device/device-store.d.ts.map +1 -1
- package/dist/device/device-store.js.map +1 -1
- package/dist/dpop/dpop-manager.d.ts +3 -3
- package/dist/dpop/dpop-nonce.d.ts +3 -3
- package/dist/dpop/dpop-nonce.d.ts.map +1 -1
- package/dist/errors/access-denied-error.d.ts +4 -3
- package/dist/errors/access-denied-error.d.ts.map +1 -1
- package/dist/errors/access-denied-error.js +5 -6
- package/dist/errors/access-denied-error.js.map +1 -1
- package/dist/{output/build-error-payload.d.ts → errors/error-parser.d.ts} +1 -1
- package/dist/errors/error-parser.d.ts.map +1 -0
- package/dist/{output/build-error-payload.js → errors/error-parser.js} +2 -2
- package/dist/errors/error-parser.js.map +1 -0
- package/dist/errors/invalid-grant-error.d.ts +1 -0
- package/dist/errors/invalid-grant-error.d.ts.map +1 -1
- package/dist/errors/invalid-grant-error.js +5 -0
- package/dist/errors/invalid-grant-error.js.map +1 -1
- package/dist/errors/login-required-error.d.ts +1 -0
- package/dist/errors/login-required-error.d.ts.map +1 -1
- package/dist/errors/login-required-error.js +5 -0
- package/dist/errors/login-required-error.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -0
- package/dist/index.js.map +1 -1
- package/dist/lib/html/build-document.d.ts +2 -2
- package/dist/lib/html/build-document.d.ts.map +1 -1
- package/dist/lib/html/build-document.js +4 -0
- package/dist/lib/html/build-document.js.map +1 -1
- package/dist/lib/html/hydration-data.d.ts +4 -0
- package/dist/lib/html/hydration-data.d.ts.map +1 -0
- package/dist/{output/backend-data.js → lib/html/hydration-data.js} +8 -8
- package/dist/lib/html/hydration-data.js.map +1 -0
- package/dist/lib/html/tags.d.ts +1 -1
- package/dist/lib/html/tags.d.ts.map +1 -1
- package/dist/lib/html/tags.js +1 -1
- package/dist/lib/html/tags.js.map +1 -1
- package/dist/lib/http/accept.d.ts +2 -2
- package/dist/lib/http/accept.d.ts.map +1 -1
- package/dist/lib/http/accept.js +1 -1
- package/dist/lib/http/accept.js.map +1 -1
- package/dist/lib/http/context.d.ts +2 -4
- package/dist/lib/http/context.d.ts.map +1 -1
- package/dist/lib/http/context.js +29 -4
- package/dist/lib/http/context.js.map +1 -1
- package/dist/lib/http/headers.d.ts +3 -0
- package/dist/lib/http/headers.d.ts.map +1 -0
- package/dist/lib/http/headers.js +14 -0
- package/dist/lib/http/headers.js.map +1 -0
- package/dist/lib/http/index.d.ts +1 -0
- package/dist/lib/http/index.d.ts.map +1 -1
- package/dist/lib/http/index.js +1 -0
- package/dist/lib/http/index.js.map +1 -1
- package/dist/lib/http/middleware.d.ts +1 -1
- package/dist/lib/http/middleware.d.ts.map +1 -1
- package/dist/lib/http/middleware.js +8 -24
- package/dist/lib/http/middleware.js.map +1 -1
- package/dist/lib/http/parser.d.ts +3 -3
- package/dist/lib/http/parser.d.ts.map +1 -1
- package/dist/lib/http/request.d.ts +13 -9
- package/dist/lib/http/request.d.ts.map +1 -1
- package/dist/lib/http/request.js +27 -49
- package/dist/lib/http/request.js.map +1 -1
- package/dist/lib/http/response.d.ts +6 -2
- package/dist/lib/http/response.d.ts.map +1 -1
- package/dist/lib/http/response.js +31 -11
- package/dist/lib/http/response.js.map +1 -1
- package/dist/lib/http/route.d.ts +3 -3
- package/dist/lib/http/route.d.ts.map +1 -1
- package/dist/lib/http/route.js +1 -1
- package/dist/lib/http/route.js.map +1 -1
- package/dist/lib/http/router.d.ts +12 -11
- package/dist/lib/http/router.d.ts.map +1 -1
- package/dist/lib/http/router.js +26 -34
- package/dist/lib/http/router.js.map +1 -1
- package/dist/lib/http/security-headers.js +1 -1
- package/dist/lib/http/security-headers.js.map +1 -1
- package/dist/lib/http/stream.d.ts +3 -3
- package/dist/lib/http/stream.d.ts.map +1 -1
- package/dist/lib/http/types.d.ts +1 -1
- package/dist/lib/http/types.d.ts.map +1 -1
- package/dist/lib/send-web-page.d.ts +8 -0
- package/dist/lib/send-web-page.d.ts.map +1 -0
- package/dist/{output → lib}/send-web-page.js +9 -7
- package/dist/lib/send-web-page.js.map +1 -0
- package/dist/lib/util/authorization-header.d.ts.map +1 -1
- package/dist/lib/util/color.d.ts +32 -0
- package/dist/lib/util/color.d.ts.map +1 -0
- package/dist/lib/util/color.js +116 -0
- package/dist/lib/util/color.js.map +1 -0
- package/dist/lib/util/crypto.d.ts +1 -0
- package/dist/lib/util/crypto.d.ts.map +1 -1
- package/dist/lib/util/crypto.js +8 -3
- package/dist/lib/util/crypto.js.map +1 -1
- package/dist/lib/util/function.d.ts +1 -0
- package/dist/lib/util/function.d.ts.map +1 -1
- package/dist/lib/util/function.js +12 -0
- package/dist/lib/util/function.js.map +1 -1
- package/dist/lib/util/locale.d.ts +20 -0
- package/dist/lib/util/locale.d.ts.map +1 -0
- package/dist/lib/util/locale.js +14 -0
- package/dist/lib/util/locale.js.map +1 -0
- package/dist/lib/util/time.d.ts +1 -1
- package/dist/lib/util/time.d.ts.map +1 -1
- package/dist/lib/util/time.js +1 -1
- package/dist/lib/util/time.js.map +1 -1
- package/dist/lib/util/type.d.ts +22 -0
- package/dist/lib/util/type.d.ts.map +1 -1
- package/dist/lib/util/type.js.map +1 -1
- package/dist/lib/util/ui8.d.ts +4 -0
- package/dist/lib/util/ui8.d.ts.map +1 -0
- package/dist/lib/util/ui8.js +17 -0
- package/dist/lib/util/ui8.js.map +1 -0
- package/dist/lib/util/zod-error.d.ts +2 -0
- package/dist/lib/util/zod-error.d.ts.map +1 -0
- package/dist/lib/util/zod-error.js +16 -0
- package/dist/lib/util/zod-error.js.map +1 -0
- package/dist/oauth-errors.d.ts +22 -22
- package/dist/oauth-errors.d.ts.map +1 -1
- package/dist/oauth-errors.js +37 -45
- package/dist/oauth-errors.js.map +1 -1
- package/dist/oauth-hooks.d.ts +11 -23
- package/dist/oauth-hooks.d.ts.map +1 -1
- package/dist/oauth-hooks.js.map +1 -1
- package/dist/oauth-middleware.d.ts +12 -0
- package/dist/oauth-middleware.d.ts.map +1 -0
- package/dist/oauth-middleware.js +32 -0
- package/dist/oauth-middleware.js.map +1 -0
- package/dist/oauth-provider.d.ts +109 -113
- package/dist/oauth-provider.d.ts.map +1 -1
- package/dist/oauth-provider.js +124 -542
- package/dist/oauth-provider.js.map +1 -1
- package/dist/oauth-verifier.d.ts +7 -26
- package/dist/oauth-verifier.d.ts.map +1 -1
- package/dist/oauth-verifier.js +6 -16
- package/dist/oauth-verifier.js.map +1 -1
- package/dist/request/code.d.ts.map +1 -1
- package/dist/request/request-data.d.ts +2 -4
- package/dist/request/request-data.d.ts.map +1 -1
- package/dist/request/request-data.js.map +1 -1
- package/dist/request/request-manager.d.ts +4 -2
- package/dist/request/request-manager.d.ts.map +1 -1
- package/dist/request/request-manager.js +9 -8
- package/dist/request/request-manager.js.map +1 -1
- package/dist/request/request-store.d.ts +6 -0
- package/dist/request/request-store.d.ts.map +1 -1
- package/dist/request/request-store.js +3 -1
- package/dist/request/request-store.js.map +1 -1
- package/dist/result/authorization-redirect-parameters.d.ts +18 -0
- package/dist/result/authorization-redirect-parameters.d.ts.map +1 -0
- package/dist/result/authorization-redirect-parameters.js +3 -0
- package/dist/result/authorization-redirect-parameters.js.map +1 -0
- package/dist/result/authorization-result-authorize-page.d.ts +13 -0
- package/dist/result/authorization-result-authorize-page.d.ts.map +1 -0
- package/dist/result/authorization-result-authorize-page.js +3 -0
- package/dist/result/authorization-result-authorize-page.js.map +1 -0
- package/dist/result/authorization-result-redirect.d.ts +8 -0
- package/dist/result/authorization-result-redirect.d.ts.map +1 -0
- package/dist/result/authorization-result-redirect.js +3 -0
- package/dist/result/authorization-result-redirect.js.map +1 -0
- package/dist/router/assets/assets-manifest.d.ts +10 -0
- package/dist/router/assets/assets-manifest.d.ts.map +1 -0
- package/dist/router/assets/assets-manifest.js +77 -0
- package/dist/router/assets/assets-manifest.js.map +1 -0
- package/dist/router/assets/assets.d.ts +16 -0
- package/dist/router/assets/assets.d.ts.map +1 -0
- package/dist/router/assets/assets.js +43 -0
- package/dist/router/assets/assets.js.map +1 -0
- package/dist/router/assets/csrf.d.ts +4 -0
- package/dist/router/assets/csrf.d.ts.map +1 -0
- package/dist/router/assets/csrf.js +51 -0
- package/dist/router/assets/csrf.js.map +1 -0
- package/dist/router/assets/send-account-page.d.ts +7 -0
- package/dist/router/assets/send-account-page.d.ts.map +1 -0
- package/dist/router/assets/send-account-page.js +34 -0
- package/dist/router/assets/send-account-page.js.map +1 -0
- package/dist/router/assets/send-authorization-page.d.ts +5 -0
- package/dist/router/assets/send-authorization-page.d.ts.map +1 -0
- package/dist/router/assets/send-authorization-page.js +49 -0
- package/dist/router/assets/send-authorization-page.js.map +1 -0
- package/dist/router/assets/send-error-page.d.ts +4 -0
- package/dist/router/assets/send-error-page.d.ts.map +1 -0
- package/dist/router/assets/send-error-page.js +34 -0
- package/dist/router/assets/send-error-page.js.map +1 -0
- package/dist/router/create-account-page-middleware.d.ts +6 -0
- package/dist/router/create-account-page-middleware.d.ts.map +1 -0
- package/dist/router/create-account-page-middleware.js +39 -0
- package/dist/router/create-account-page-middleware.js.map +1 -0
- package/dist/router/create-api-middleware.d.ts +8 -0
- package/dist/router/create-api-middleware.d.ts.map +1 -0
- package/dist/router/create-api-middleware.js +501 -0
- package/dist/router/create-api-middleware.js.map +1 -0
- package/dist/router/create-authorization-page-middleware.d.ts +6 -0
- package/dist/router/create-authorization-page-middleware.d.ts.map +1 -0
- package/dist/router/create-authorization-page-middleware.js +104 -0
- package/dist/router/create-authorization-page-middleware.js.map +1 -0
- package/dist/router/create-oauth-middleware.d.ts +6 -0
- package/dist/router/create-oauth-middleware.d.ts.map +1 -0
- package/dist/router/create-oauth-middleware.js +142 -0
- package/dist/router/create-oauth-middleware.js.map +1 -0
- package/dist/router/error-handler.d.ts +3 -0
- package/dist/router/error-handler.d.ts.map +1 -0
- package/dist/{account/account.js → router/error-handler.js} +1 -1
- package/dist/router/error-handler.js.map +1 -0
- package/dist/router/middleware-options.d.ts +6 -0
- package/dist/router/middleware-options.d.ts.map +1 -0
- package/dist/router/middleware-options.js +3 -0
- package/dist/router/middleware-options.js.map +1 -0
- package/dist/router/send-redirect.d.ts +16 -0
- package/dist/router/send-redirect.d.ts.map +1 -0
- package/dist/{output/send-authorize-redirect.js → router/send-redirect.js} +40 -24
- package/dist/router/send-redirect.js.map +1 -0
- package/dist/{token/token-claims.d.ts → signer/api-token-payload.d.ts} +237 -232
- package/dist/signer/api-token-payload.d.ts.map +1 -0
- package/dist/signer/api-token-payload.js +17 -0
- package/dist/signer/api-token-payload.js.map +1 -0
- package/dist/signer/signed-token-payload.d.ts +164 -159
- package/dist/signer/signed-token-payload.d.ts.map +1 -1
- package/dist/signer/signed-token-payload.js +10 -16
- package/dist/signer/signed-token-payload.js.map +1 -1
- package/dist/signer/signer.d.ts +42 -11246
- package/dist/signer/signer.d.ts.map +1 -1
- package/dist/signer/signer.js +30 -15
- package/dist/signer/signer.js.map +1 -1
- package/dist/token/refresh-token.d.ts.map +1 -1
- package/dist/token/token-data.d.ts +1 -1
- package/dist/token/token-data.d.ts.map +1 -1
- package/dist/token/token-id.d.ts.map +1 -1
- package/dist/token/token-manager.d.ts +28 -26
- package/dist/token/token-manager.d.ts.map +1 -1
- package/dist/token/token-manager.js +138 -196
- package/dist/token/token-manager.js.map +1 -1
- package/dist/token/token-store.d.ts +4 -4
- package/dist/token/token-store.d.ts.map +1 -1
- package/dist/token/token-store.js +1 -0
- package/dist/token/token-store.js.map +1 -1
- package/dist/token/verify-token-claims.d.ts +3 -3
- package/dist/token/verify-token-claims.d.ts.map +1 -1
- package/dist/token/verify-token-claims.js +1 -1
- package/dist/token/verify-token-claims.js.map +1 -1
- package/dist/types/email-otp.d.ts +3 -0
- package/dist/types/email-otp.d.ts.map +1 -0
- package/dist/types/email-otp.js +6 -0
- package/dist/types/email-otp.js.map +1 -0
- package/dist/types/email.d.ts +3 -0
- package/dist/types/email.d.ts.map +1 -0
- package/dist/types/email.js +29 -0
- package/dist/types/email.js.map +1 -0
- package/dist/types/handle.d.ts +3 -0
- package/dist/types/handle.d.ts.map +1 -0
- package/dist/types/handle.js +22 -0
- package/dist/types/handle.js.map +1 -0
- package/dist/types/invite-code.d.ts +4 -0
- package/dist/types/invite-code.d.ts.map +1 -0
- package/dist/types/invite-code.js +6 -0
- package/dist/types/invite-code.js.map +1 -0
- package/dist/types/password.d.ts +4 -0
- package/dist/types/password.d.ts.map +1 -0
- package/dist/types/password.js +7 -0
- package/dist/types/password.js.map +1 -0
- package/package.json +11 -8
- package/src/access-token/access-token-mode.ts +4 -0
- package/src/account/account-manager.ts +105 -75
- package/src/account/account-store.ts +118 -114
- package/src/account/sign-in-data.ts +10 -10
- package/src/account/sign-up-input.ts +13 -4
- package/src/client/client-manager.ts +34 -2
- package/src/client/client-store.ts +1 -1
- package/src/constants.ts +6 -1
- package/src/customization/branding.ts +12 -0
- package/src/customization/build-customization-css.ts +30 -0
- package/src/customization/build-customization-data.ts +22 -0
- package/src/customization/colors.ts +30 -0
- package/src/customization/customization.ts +25 -0
- package/src/customization/links.ts +10 -0
- package/src/device/device-id.ts +5 -0
- package/src/device/device-manager.ts +76 -66
- package/src/device/device-store.ts +2 -0
- package/src/errors/access-denied-error.ts +24 -17
- package/src/{output/build-error-payload.ts → errors/error-parser.ts} +1 -1
- package/src/errors/invalid-grant-error.ts +5 -0
- package/src/errors/login-required-error.ts +10 -0
- package/src/index.ts +1 -0
- package/src/lib/html/build-document.ts +6 -4
- package/src/{output/backend-data.ts → lib/html/hydration-data.ts} +7 -5
- package/src/lib/html/tags.ts +2 -2
- package/src/lib/http/accept.ts +3 -3
- package/src/lib/http/context.ts +41 -10
- package/src/lib/http/headers.ts +15 -0
- package/src/lib/http/index.ts +1 -0
- package/src/lib/http/middleware.ts +8 -23
- package/src/lib/http/request.ts +40 -75
- package/src/lib/http/response.ts +39 -15
- package/src/lib/http/route.ts +8 -5
- package/src/lib/http/router.ts +40 -46
- package/src/lib/http/security-headers.ts +1 -1
- package/src/lib/http/types.ts +1 -6
- package/src/{output → lib}/send-web-page.ts +10 -9
- package/src/lib/util/color.ts +132 -0
- package/src/lib/util/crypto.ts +9 -4
- package/src/lib/util/function.ts +14 -0
- package/src/lib/util/locale.ts +18 -0
- package/src/lib/util/time.ts +3 -4
- package/src/lib/util/type.ts +24 -0
- package/src/lib/util/ui8.ts +14 -0
- package/src/lib/util/zod-error.ts +14 -0
- package/src/oauth-errors.ts +22 -22
- package/src/oauth-hooks.ts +11 -24
- package/src/oauth-middleware.ts +53 -0
- package/src/oauth-provider.ts +290 -1061
- package/src/oauth-verifier.ts +9 -55
- package/src/request/request-data.ts +5 -4
- package/src/request/request-manager.ts +11 -11
- package/src/request/request-store.ts +7 -0
- package/src/result/authorization-redirect-parameters.ts +24 -0
- package/src/result/authorization-result-authorize-page.ts +14 -0
- package/src/result/authorization-result-redirect.ts +8 -0
- package/src/router/assets/assets-manifest.ts +108 -0
- package/src/router/assets/assets.ts +54 -0
- package/src/router/assets/csrf.ts +63 -0
- package/src/router/assets/send-account-page.ts +43 -0
- package/src/router/assets/send-authorization-page.ts +62 -0
- package/src/router/assets/send-error-page.ts +42 -0
- package/src/router/create-account-page-middleware.ts +69 -0
- package/src/router/create-api-middleware.ts +814 -0
- package/src/router/create-authorization-page-middleware.ts +173 -0
- package/src/router/create-oauth-middleware.ts +247 -0
- package/src/router/error-handler.ts +6 -0
- package/src/router/middleware-options.ts +9 -0
- package/src/router/send-redirect.ts +142 -0
- package/src/signer/api-token-payload.ts +18 -0
- package/src/signer/signed-token-payload.ts +18 -28
- package/src/signer/signer.ts +49 -34
- package/src/token/token-data.ts +1 -1
- package/src/token/token-manager.ts +190 -239
- package/src/token/token-store.ts +6 -4
- package/src/token/verify-token-claims.ts +4 -4
- package/src/types/email-otp.ts +3 -0
- package/src/types/email.ts +26 -0
- package/src/types/handle.ts +18 -0
- package/src/types/invite-code.ts +4 -0
- package/src/types/password.ts +4 -0
- package/tsconfig.build.tsbuildinfo +1 -0
- package/tsconfig.json +1 -1
- package/dist/access-token/access-token-type.d.ts +0 -6
- package/dist/access-token/access-token-type.d.ts.map +0 -1
- package/dist/access-token/access-token-type.js +0 -10
- package/dist/access-token/access-token-type.js.map +0 -1
- package/dist/account/account.d.ts +0 -2
- package/dist/account/account.d.ts.map +0 -1
- package/dist/account/account.js.map +0 -1
- package/dist/assets/assets-middleware.d.ts +0 -5
- package/dist/assets/assets-middleware.d.ts.map +0 -1
- package/dist/assets/assets-middleware.js +0 -41
- package/dist/assets/assets-middleware.js.map +0 -1
- package/dist/lib/locale.d.ts +0 -15
- package/dist/lib/locale.d.ts.map +0 -1
- package/dist/lib/locale.js +0 -17
- package/dist/lib/locale.js.map +0 -1
- package/dist/output/backend-data.d.ts +0 -4
- package/dist/output/backend-data.d.ts.map +0 -1
- package/dist/output/backend-data.js.map +0 -1
- package/dist/output/build-authorize-data.d.ts +0 -29
- package/dist/output/build-authorize-data.d.ts.map +0 -1
- package/dist/output/build-authorize-data.js +0 -21
- package/dist/output/build-authorize-data.js.map +0 -1
- package/dist/output/build-customization-data.d.ts +0 -234
- package/dist/output/build-customization-data.d.ts.map +0 -1
- package/dist/output/build-customization-data.js +0 -174
- package/dist/output/build-customization-data.js.map +0 -1
- package/dist/output/build-error-data.d.ts +0 -3
- package/dist/output/build-error-data.d.ts.map +0 -1
- package/dist/output/build-error-data.js +0 -10
- package/dist/output/build-error-data.js.map +0 -1
- package/dist/output/build-error-payload.d.ts.map +0 -1
- package/dist/output/build-error-payload.js.map +0 -1
- package/dist/output/output-manager.d.ts +0 -28
- package/dist/output/output-manager.d.ts.map +0 -1
- package/dist/output/output-manager.js +0 -134
- package/dist/output/output-manager.js.map +0 -1
- package/dist/output/send-authorize-redirect.d.ts +0 -25
- package/dist/output/send-authorize-redirect.d.ts.map +0 -1
- package/dist/output/send-authorize-redirect.js.map +0 -1
- package/dist/output/send-web-page.d.ts +0 -8
- package/dist/output/send-web-page.d.ts.map +0 -1
- package/dist/output/send-web-page.js.map +0 -1
- package/dist/token/token-claims.d.ts.map +0 -1
- package/dist/token/token-claims.js +0 -27
- package/dist/token/token-claims.js.map +0 -1
- package/src/access-token/access-token-type.ts +0 -5
- package/src/account/account.ts +0 -1
- package/src/assets/assets-middleware.ts +0 -44
- package/src/lib/locale.ts +0 -21
- package/src/output/build-authorize-data.ts +0 -53
- package/src/output/build-customization-data.ts +0 -217
- package/src/output/build-error-data.ts +0 -8
- package/src/output/output-manager.ts +0 -188
- package/src/output/send-authorize-redirect.ts +0 -137
- package/src/token/token-claims.ts +0 -30
- package/tsconfig.backend.tsbuildinfo +0 -1
- /package/{tsconfig.backend.json → tsconfig.build.json} +0 -0
@@ -0,0 +1,18 @@
|
|
1
|
+
"use strict";
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
3
|
+
exports.buildCustomizationData = buildCustomizationData;
|
4
|
+
function buildCustomizationData({ branding, availableUserDomains, inviteCodeRequired, hcaptcha, }) {
|
5
|
+
// @NOTE the front end does not need colors here as they will be injected as
|
6
|
+
// CSS variables.
|
7
|
+
// @NOTE We only copy the values explicitly needed to avoid leaking sensitive
|
8
|
+
// data (in case the caller passed more than what we expect).
|
9
|
+
return {
|
10
|
+
availableUserDomains,
|
11
|
+
inviteCodeRequired,
|
12
|
+
hcaptchaSiteKey: hcaptcha?.siteKey,
|
13
|
+
name: branding?.name,
|
14
|
+
logo: branding?.logo,
|
15
|
+
links: branding?.links,
|
16
|
+
};
|
17
|
+
}
|
18
|
+
//# sourceMappingURL=build-customization-data.js.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"build-customization-data.js","sourceRoot":"","sources":["../../src/customization/build-customization-data.ts"],"names":[],"mappings":";;AAGA,wDAkBC;AAlBD,SAAgB,sBAAsB,CAAC,EACrC,QAAQ,EACR,oBAAoB,EACpB,kBAAkB,EAClB,QAAQ,GACM;IACd,4EAA4E;IAC5E,iBAAiB;IACjB,6EAA6E;IAC7E,6DAA6D;IAC7D,OAAO;QACL,oBAAoB;QACpB,kBAAkB;QAClB,eAAe,EAAE,QAAQ,EAAE,OAAO;QAClC,IAAI,EAAE,QAAQ,EAAE,IAAI;QACpB,IAAI,EAAE,QAAQ,EAAE,IAAI;QACpB,KAAK,EAAE,QAAQ,EAAE,KAAK;KACvB,CAAA;AACH,CAAC"}
|
@@ -0,0 +1,7 @@
|
|
1
|
+
import { z } from 'zod';
|
2
|
+
import { RgbColor } from '../lib/util/color.js';
|
3
|
+
export declare const COLOR_NAMES: readonly ["primary", "error", "warning", "success"];
|
4
|
+
export declare const rgbColorSchema: z.ZodEffects<z.ZodString, RgbColor, string>;
|
5
|
+
export declare const colorsSchema: z.ZodRecord<z.ZodEnum<["primary", "error", "warning", "success"]>, z.ZodOptional<z.ZodEffects<z.ZodString, RgbColor, string>>>;
|
6
|
+
export type Colors = z.infer<typeof colorsSchema>;
|
7
|
+
//# sourceMappingURL=colors.d.ts.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../../src/customization/colors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,QAAQ,EAAc,MAAM,sBAAsB,CAAA;AAE3D,eAAO,MAAM,WAAW,qDAAsD,CAAA;AAE9E,eAAO,MAAM,cAAc,6CAiBzB,CAAA;AAEF,eAAO,MAAM,YAAY,gIAGxB,CAAA;AAED,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA"}
|
@@ -0,0 +1,27 @@
|
|
1
|
+
"use strict";
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
3
|
+
exports.colorsSchema = exports.rgbColorSchema = exports.COLOR_NAMES = void 0;
|
4
|
+
const zod_1 = require("zod");
|
5
|
+
const color_js_1 = require("../lib/util/color.js");
|
6
|
+
exports.COLOR_NAMES = ['primary', 'error', 'warning', 'success'];
|
7
|
+
exports.rgbColorSchema = zod_1.z.string().transform((value, ctx) => {
|
8
|
+
try {
|
9
|
+
const parsed = (0, color_js_1.parseColor)(value);
|
10
|
+
if ('a' in parsed && parsed.a !== undefined) {
|
11
|
+
ctx.addIssue({
|
12
|
+
code: zod_1.z.ZodIssueCode.custom,
|
13
|
+
message: 'Alpha values are not supported',
|
14
|
+
});
|
15
|
+
}
|
16
|
+
return parsed;
|
17
|
+
}
|
18
|
+
catch (e) {
|
19
|
+
ctx.addIssue({
|
20
|
+
code: zod_1.z.ZodIssueCode.custom,
|
21
|
+
message: e instanceof Error ? e.message : 'Invalid color value',
|
22
|
+
});
|
23
|
+
return zod_1.z.NEVER;
|
24
|
+
}
|
25
|
+
});
|
26
|
+
exports.colorsSchema = zod_1.z.record(zod_1.z.enum(exports.COLOR_NAMES), exports.rgbColorSchema.optional());
|
27
|
+
//# sourceMappingURL=colors.js.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/customization/colors.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,mDAA2D;AAE9C,QAAA,WAAW,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAU,CAAA;AAEjE,QAAA,cAAc,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAY,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAA;QAChC,IAAI,GAAG,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;SAChE,CAAC,CAAA;QACF,OAAO,OAAC,CAAC,KAAK,CAAA;IAChB,CAAC;AACH,CAAC,CAAC,CAAA;AAEW,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAClC,OAAC,CAAC,IAAI,CAAC,mBAAW,CAAC,EACnB,sBAAc,CAAC,QAAQ,EAAE,CAC1B,CAAA"}
|
@@ -0,0 +1,129 @@
|
|
1
|
+
import { z } from 'zod';
|
2
|
+
export declare const customizationSchema: z.ZodObject<{
|
3
|
+
/**
|
4
|
+
* Available user domains that can be used to sign up. A non-empty array
|
5
|
+
* is required to enable the sign-up feature.
|
6
|
+
*/
|
7
|
+
availableUserDomains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
8
|
+
/**
|
9
|
+
* UI customizations
|
10
|
+
*/
|
11
|
+
branding: z.ZodOptional<z.ZodObject<{
|
12
|
+
name: z.ZodOptional<z.ZodString>;
|
13
|
+
logo: z.ZodOptional<z.ZodString>;
|
14
|
+
colors: z.ZodOptional<z.ZodRecord<z.ZodEnum<["primary", "error", "warning", "success"]>, z.ZodOptional<z.ZodEffects<z.ZodString, import("../lib/util/color.js").RgbColor, string>>>>;
|
15
|
+
links: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
16
|
+
title: z.ZodUnion<[z.ZodString, z.ZodIntersection<z.ZodObject<{
|
17
|
+
en: z.ZodString;
|
18
|
+
}, "strip", z.ZodTypeAny, {
|
19
|
+
en: string;
|
20
|
+
}, {
|
21
|
+
en: string;
|
22
|
+
}>, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>]>;
|
23
|
+
href: z.ZodString;
|
24
|
+
rel: z.ZodOptional<z.ZodEffects<z.ZodString, "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service", string>>;
|
25
|
+
}, "strip", z.ZodTypeAny, {
|
26
|
+
title: string | ({
|
27
|
+
en: string;
|
28
|
+
} & Record<string, string | undefined>);
|
29
|
+
href: string;
|
30
|
+
rel?: "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
|
31
|
+
}, {
|
32
|
+
title: string | ({
|
33
|
+
en: string;
|
34
|
+
} & Record<string, string | undefined>);
|
35
|
+
href: string;
|
36
|
+
rel?: string | undefined;
|
37
|
+
}>, "many">>;
|
38
|
+
}, "strip", z.ZodTypeAny, {
|
39
|
+
name?: string | undefined;
|
40
|
+
logo?: string | undefined;
|
41
|
+
colors?: Partial<Record<"error" | "success" | "warning" | "primary", import("../lib/util/color.js").RgbColor | undefined>> | undefined;
|
42
|
+
links?: {
|
43
|
+
title: string | ({
|
44
|
+
en: string;
|
45
|
+
} & Record<string, string | undefined>);
|
46
|
+
href: string;
|
47
|
+
rel?: "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
|
48
|
+
}[] | undefined;
|
49
|
+
}, {
|
50
|
+
name?: string | undefined;
|
51
|
+
logo?: string | undefined;
|
52
|
+
colors?: Partial<Record<"error" | "success" | "warning" | "primary", string | undefined>> | undefined;
|
53
|
+
links?: {
|
54
|
+
title: string | ({
|
55
|
+
en: string;
|
56
|
+
} & Record<string, string | undefined>);
|
57
|
+
href: string;
|
58
|
+
rel?: string | undefined;
|
59
|
+
}[] | undefined;
|
60
|
+
}>>;
|
61
|
+
/**
|
62
|
+
* Is an invite code required to sign up?
|
63
|
+
*/
|
64
|
+
inviteCodeRequired: z.ZodOptional<z.ZodBoolean>;
|
65
|
+
/**
|
66
|
+
* Enables hCaptcha during sign-up.
|
67
|
+
*/
|
68
|
+
hcaptcha: z.ZodOptional<z.ZodObject<{
|
69
|
+
siteKey: z.ZodString;
|
70
|
+
secretKey: z.ZodString;
|
71
|
+
tokenSalt: z.ZodString;
|
72
|
+
scoreThreshold: z.ZodOptional<z.ZodNumber>;
|
73
|
+
}, "strip", z.ZodTypeAny, {
|
74
|
+
siteKey: string;
|
75
|
+
secretKey: string;
|
76
|
+
tokenSalt: string;
|
77
|
+
scoreThreshold?: number | undefined;
|
78
|
+
}, {
|
79
|
+
siteKey: string;
|
80
|
+
secretKey: string;
|
81
|
+
tokenSalt: string;
|
82
|
+
scoreThreshold?: number | undefined;
|
83
|
+
}>>;
|
84
|
+
}, "strip", z.ZodTypeAny, {
|
85
|
+
availableUserDomains?: string[] | undefined;
|
86
|
+
branding?: {
|
87
|
+
name?: string | undefined;
|
88
|
+
logo?: string | undefined;
|
89
|
+
colors?: Partial<Record<"error" | "success" | "warning" | "primary", import("../lib/util/color.js").RgbColor | undefined>> | undefined;
|
90
|
+
links?: {
|
91
|
+
title: string | ({
|
92
|
+
en: string;
|
93
|
+
} & Record<string, string | undefined>);
|
94
|
+
href: string;
|
95
|
+
rel?: "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
|
96
|
+
}[] | undefined;
|
97
|
+
} | undefined;
|
98
|
+
inviteCodeRequired?: boolean | undefined;
|
99
|
+
hcaptcha?: {
|
100
|
+
siteKey: string;
|
101
|
+
secretKey: string;
|
102
|
+
tokenSalt: string;
|
103
|
+
scoreThreshold?: number | undefined;
|
104
|
+
} | undefined;
|
105
|
+
}, {
|
106
|
+
availableUserDomains?: string[] | undefined;
|
107
|
+
branding?: {
|
108
|
+
name?: string | undefined;
|
109
|
+
logo?: string | undefined;
|
110
|
+
colors?: Partial<Record<"error" | "success" | "warning" | "primary", string | undefined>> | undefined;
|
111
|
+
links?: {
|
112
|
+
title: string | ({
|
113
|
+
en: string;
|
114
|
+
} & Record<string, string | undefined>);
|
115
|
+
href: string;
|
116
|
+
rel?: string | undefined;
|
117
|
+
}[] | undefined;
|
118
|
+
} | undefined;
|
119
|
+
inviteCodeRequired?: boolean | undefined;
|
120
|
+
hcaptcha?: {
|
121
|
+
siteKey: string;
|
122
|
+
secretKey: string;
|
123
|
+
tokenSalt: string;
|
124
|
+
scoreThreshold?: number | undefined;
|
125
|
+
} | undefined;
|
126
|
+
}>;
|
127
|
+
export type CustomizationInput = z.input<typeof customizationSchema>;
|
128
|
+
export type Customization = z.infer<typeof customizationSchema>;
|
129
|
+
//# sourceMappingURL=customization.d.ts.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"customization.d.ts","sourceRoot":"","sources":["../../src/customization/customization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,mBAAmB;IAC9B;;;OAGG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;OAEG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACpE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA"}
|
@@ -0,0 +1,26 @@
|
|
1
|
+
"use strict";
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
3
|
+
exports.customizationSchema = void 0;
|
4
|
+
const zod_1 = require("zod");
|
5
|
+
const hcaptcha_js_1 = require("../lib/hcaptcha.js");
|
6
|
+
const branding_js_1 = require("./branding.js");
|
7
|
+
exports.customizationSchema = zod_1.z.object({
|
8
|
+
/**
|
9
|
+
* Available user domains that can be used to sign up. A non-empty array
|
10
|
+
* is required to enable the sign-up feature.
|
11
|
+
*/
|
12
|
+
availableUserDomains: zod_1.z.array(zod_1.z.string()).optional(),
|
13
|
+
/**
|
14
|
+
* UI customizations
|
15
|
+
*/
|
16
|
+
branding: branding_js_1.brandingSchema.optional(),
|
17
|
+
/**
|
18
|
+
* Is an invite code required to sign up?
|
19
|
+
*/
|
20
|
+
inviteCodeRequired: zod_1.z.boolean().optional(),
|
21
|
+
/**
|
22
|
+
* Enables hCaptcha during sign-up.
|
23
|
+
*/
|
24
|
+
hcaptcha: hcaptcha_js_1.hcaptchaConfigSchema.optional(),
|
25
|
+
});
|
26
|
+
//# sourceMappingURL=customization.js.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"customization.js","sourceRoot":"","sources":["../../src/customization/customization.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,oDAAyD;AACzD,+CAA8C;AAEjC,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C;;;OAGG;IACH,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD;;OAEG;IACH,QAAQ,EAAE,4BAAc,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C;;OAEG;IACH,QAAQ,EAAE,kCAAoB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA"}
|
@@ -0,0 +1,26 @@
|
|
1
|
+
import { z } from 'zod';
|
2
|
+
export declare const linksSchema: z.ZodObject<{
|
3
|
+
title: z.ZodUnion<[z.ZodString, z.ZodIntersection<z.ZodObject<{
|
4
|
+
en: z.ZodString;
|
5
|
+
}, "strip", z.ZodTypeAny, {
|
6
|
+
en: string;
|
7
|
+
}, {
|
8
|
+
en: string;
|
9
|
+
}>, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>]>;
|
10
|
+
href: z.ZodString;
|
11
|
+
rel: z.ZodOptional<z.ZodEffects<z.ZodString, "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service", string>>;
|
12
|
+
}, "strip", z.ZodTypeAny, {
|
13
|
+
title: string | ({
|
14
|
+
en: string;
|
15
|
+
} & Record<string, string | undefined>);
|
16
|
+
href: string;
|
17
|
+
rel?: "expect" | "manifest" | "search" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
|
18
|
+
}, {
|
19
|
+
title: string | ({
|
20
|
+
en: string;
|
21
|
+
} & Record<string, string | undefined>);
|
22
|
+
href: string;
|
23
|
+
rel?: string | undefined;
|
24
|
+
}>;
|
25
|
+
export type Links = z.infer<typeof linksSchema>;
|
26
|
+
//# sourceMappingURL=links.d.ts.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"links.d.ts","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;EAItB,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA"}
|
@@ -0,0 +1,12 @@
|
|
1
|
+
"use strict";
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
3
|
+
exports.linksSchema = void 0;
|
4
|
+
const zod_1 = require("zod");
|
5
|
+
const build_document_js_1 = require("../lib/html/build-document.js");
|
6
|
+
const locale_js_1 = require("../lib/util/locale.js");
|
7
|
+
exports.linksSchema = zod_1.z.object({
|
8
|
+
title: locale_js_1.localizedStringSchema,
|
9
|
+
href: zod_1.z.string().url(),
|
10
|
+
rel: zod_1.z.string().refine(build_document_js_1.isLinkRel, 'Invalid link rel').optional(),
|
11
|
+
});
|
12
|
+
//# sourceMappingURL=links.js.map
|
@@ -0,0 +1 @@
|
|
1
|
+
{"version":3,"file":"links.js","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,qEAAyD;AACzD,qDAA6D;AAEhD,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,iCAAqB;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,6BAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAA"}
|
@@ -2,5 +2,6 @@ import { z } from 'zod';
|
|
2
2
|
export declare const DEVICE_ID_LENGTH: number;
|
3
3
|
export declare const deviceIdSchema: z.ZodEffects<z.ZodString, `dev-${string}`, string>;
|
4
4
|
export type DeviceId = z.infer<typeof deviceIdSchema>;
|
5
|
+
export declare function isDeviceId(value: unknown): value is DeviceId;
|
5
6
|
export declare const generateDeviceId: () => Promise<DeviceId>;
|
6
7
|
//# sourceMappingURL=device-id.d.ts.map
|
@@ -1 +1 @@
|
|
1
|
-
{"version":3,"file":"device-id.d.ts","sourceRoot":"","sources":["../../src/device/device-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,gBAAgB,QACyB,CAAA;AAEtD,eAAO,MAAM,cAAc,oDASxB,CAAA;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;
|
1
|
+
{"version":3,"file":"device-id.d.ts","sourceRoot":"","sources":["../../src/device/device-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,gBAAgB,QACyB,CAAA;AAEtD,eAAO,MAAM,cAAc,oDASxB,CAAA;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAErD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED,eAAO,MAAM,gBAAgB,QAAa,OAAO,CAAC,QAAQ,CAEzD,CAAA"}
|
package/dist/device/device-id.js
CHANGED
@@ -1,6 +1,7 @@
|
|
1
1
|
"use strict";
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
3
3
|
exports.generateDeviceId = exports.deviceIdSchema = exports.DEVICE_ID_LENGTH = void 0;
|
4
|
+
exports.isDeviceId = isDeviceId;
|
4
5
|
const zod_1 = require("zod");
|
5
6
|
const constants_js_1 = require("../constants.js");
|
6
7
|
const crypto_js_1 = require("../lib/util/crypto.js");
|
@@ -11,6 +12,9 @@ exports.deviceIdSchema = zod_1.z
|
|
11
12
|
.refine((v) => v.startsWith(constants_js_1.DEVICE_ID_PREFIX), {
|
12
13
|
message: `Invalid device ID format`,
|
13
14
|
});
|
15
|
+
function isDeviceId(value) {
|
16
|
+
return exports.deviceIdSchema.safeParse(value).success;
|
17
|
+
}
|
14
18
|
const generateDeviceId = async () => {
|
15
19
|
return `${constants_js_1.DEVICE_ID_PREFIX}${await (0, crypto_js_1.randomHexId)(constants_js_1.DEVICE_ID_BYTES_LENGTH)}`;
|
16
20
|
};
|
@@ -1 +1 @@
|
|
1
|
-
{"version":3,"file":"device-id.js","sourceRoot":"","sources":["../../src/device/device-id.ts"],"names":[],"mappings":";;;
|
1
|
+
{"version":3,"file":"device-id.js","sourceRoot":"","sources":["../../src/device/device-id.ts"],"names":[],"mappings":";;;AAoBA,gCAEC;AAtBD,6BAAuB;AACvB,kDAA0E;AAC1E,qDAAmD;AAEtC,QAAA,gBAAgB,GAC3B,+BAAgB,CAAC,MAAM,GAAG,qCAAsB,GAAG,CAAC,CAAA,CAAC,eAAe;AAEzD,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,EAAE;KACR,MAAM,CAAC,wBAAgB,CAAC;KACxB,MAAM,CACL,CAAC,CAAC,EAA8C,EAAE,CAChD,CAAC,CAAC,UAAU,CAAC,+BAAgB,CAAC,EAChC;IACE,OAAO,EAAE,0BAA0B;CACpC,CACF,CAAA;AAIH,SAAgB,UAAU,CAAC,KAAc;IACvC,OAAO,sBAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAA;AAChD,CAAC;AAEM,MAAM,gBAAgB,GAAG,KAAK,IAAuB,EAAE;IAC5D,OAAO,GAAG,+BAAgB,GAAG,MAAM,IAAA,uBAAW,EAAC,qCAAsB,CAAC,EAAE,CAAA;AAC1E,CAAC,CAAA;AAFY,QAAA,gBAAgB,oBAE5B"}
|
@@ -48,24 +48,6 @@ export declare const deviceManagerOptionsSchema: z.ZodObject<{
|
|
48
48
|
verify: (args_0: any, args_1: string, ...args: unknown[]) => boolean;
|
49
49
|
index: (args_0: any, args_1: string, ...args: unknown[]) => number;
|
50
50
|
}>>;
|
51
|
-
/**
|
52
|
-
* Name of the cookie used to identify the device
|
53
|
-
*
|
54
|
-
* @default 'session-id'
|
55
|
-
*/
|
56
|
-
device: z.ZodDefault<z.ZodString>;
|
57
|
-
/**
|
58
|
-
* Name of the cookie used to identify the session
|
59
|
-
*
|
60
|
-
* @default 'session-id'
|
61
|
-
*/
|
62
|
-
session: z.ZodDefault<z.ZodString>;
|
63
|
-
/**
|
64
|
-
* Url path for the cookie
|
65
|
-
*
|
66
|
-
* @default '/oauth/authorize'
|
67
|
-
*/
|
68
|
-
path: z.ZodDefault<z.ZodString>;
|
69
51
|
/**
|
70
52
|
* Amount of time (in ms) after which the session cookie will expire.
|
71
53
|
* If set to `null`, the cookie will be a session cookie (deleted when the
|
@@ -87,38 +69,29 @@ export declare const deviceManagerOptionsSchema: z.ZodObject<{
|
|
87
69
|
*/
|
88
70
|
sameSite: z.ZodDefault<z.ZodEnum<["lax", "strict"]>>;
|
89
71
|
}, "strip", z.ZodTypeAny, {
|
90
|
-
path: string;
|
91
72
|
age: number | null;
|
92
|
-
secure: boolean;
|
93
73
|
sameSite: "strict" | "lax";
|
94
|
-
|
95
|
-
session: string;
|
74
|
+
secure: boolean;
|
96
75
|
keys?: {
|
97
76
|
sign: (args_0: any, ...args: unknown[]) => string;
|
98
77
|
verify: (args_0: any, args_1: string, ...args: unknown[]) => boolean;
|
99
78
|
index: (args_0: any, args_1: string, ...args: unknown[]) => number;
|
100
79
|
} | undefined;
|
101
80
|
}, {
|
102
|
-
path?: string | undefined;
|
103
81
|
keys?: {
|
104
82
|
sign: (args_0: any, ...args: unknown[]) => string;
|
105
83
|
verify: (args_0: any, args_1: string, ...args: unknown[]) => boolean;
|
106
84
|
index: (args_0: any, args_1: string, ...args: unknown[]) => number;
|
107
85
|
} | undefined;
|
108
86
|
age?: number | null | undefined;
|
109
|
-
secure?: boolean | undefined;
|
110
87
|
sameSite?: "strict" | "lax" | undefined;
|
111
|
-
|
112
|
-
session?: string | undefined;
|
88
|
+
secure?: boolean | undefined;
|
113
89
|
}>>;
|
114
90
|
}, "strip", z.ZodTypeAny, {
|
115
91
|
cookie: {
|
116
|
-
path: string;
|
117
92
|
age: number | null;
|
118
|
-
secure: boolean;
|
119
93
|
sameSite: "strict" | "lax";
|
120
|
-
|
121
|
-
session: string;
|
94
|
+
secure: boolean;
|
122
95
|
keys?: {
|
123
96
|
sign: (args_0: any, ...args: unknown[]) => string;
|
124
97
|
verify: (args_0: any, args_1: string, ...args: unknown[]) => boolean;
|
@@ -129,17 +102,14 @@ export declare const deviceManagerOptionsSchema: z.ZodObject<{
|
|
129
102
|
trustProxy?: ((addr: string, i: number, ...args: unknown[]) => boolean) | undefined;
|
130
103
|
}, {
|
131
104
|
cookie?: {
|
132
|
-
path?: string | undefined;
|
133
105
|
keys?: {
|
134
106
|
sign: (args_0: any, ...args: unknown[]) => string;
|
135
107
|
verify: (args_0: any, args_1: string, ...args: unknown[]) => boolean;
|
136
108
|
index: (args_0: any, args_1: string, ...args: unknown[]) => number;
|
137
109
|
} | undefined;
|
138
110
|
age?: number | null | undefined;
|
139
|
-
secure?: boolean | undefined;
|
140
111
|
sameSite?: "strict" | "lax" | undefined;
|
141
|
-
|
142
|
-
session?: string | undefined;
|
112
|
+
secure?: boolean | undefined;
|
143
113
|
} | undefined;
|
144
114
|
trustProxy?: ((addr: string, i: number, ...args: unknown[]) => boolean) | undefined;
|
145
115
|
rotationRate?: number | undefined;
|
@@ -162,9 +132,9 @@ export declare class DeviceManager {
|
|
162
132
|
private create;
|
163
133
|
private refresh;
|
164
134
|
private rotate;
|
165
|
-
private
|
135
|
+
private getCookies;
|
166
136
|
private parseCookie;
|
167
|
-
private
|
137
|
+
private setCookies;
|
168
138
|
private writeCookie;
|
169
139
|
getRequestMetadata(req: IncomingMessage): RequestMetadata;
|
170
140
|
}
|
@@ -1 +1 @@
|
|
1
|
-
{"version":3,"file":"device-manager.d.ts","sourceRoot":"","sources":["../../src/device/device-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;
|
1
|
+
{"version":3,"file":"device-manager.d.ts","sourceRoot":"","sources":["../../src/device/device-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EACL,eAAe,EAGhB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,QAAQ,EAIT,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAG/C;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIxB,CAAA;AAEF,eAAO,MAAM,0BAA0B;IACrC;;;OAGG;;IAOH;;;;OAIG;;IAEH;;OAEG;;;;;;;;;;;;;;;QAIC;;;;;;WAMG;;QAKH;;;;WAIG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIP,CAAA;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAO7E,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAA;IAClB,cAAc,EAAE,eAAe,CAAA;CAChC,CAAA;AAED;;;;GAIG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;gBAGjD,KAAK,EAAE,WAAW,EACnC,OAAO,GAAE,oBAAyB;IAKvB,IAAI,CACf,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,WAAW,UAAQ,GAClB,OAAO,CAAC,UAAU,CAAC;YAcR,MAAM;YAuBN,OAAO;YAyCP,MAAM;YAiBN,UAAU;IAmDxB,OAAO,CAAC,WAAW;YA4BL,UAAU;IASxB,OAAO,CAAC,WAAW;IAqBZ,kBAAkB,CAAC,GAAG,EAAE,eAAe;CAG/C"}
|
@@ -1,7 +1,6 @@
|
|
1
1
|
"use strict";
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
3
3
|
exports.DeviceManager = exports.deviceManagerOptionsSchema = exports.keygripSchema = void 0;
|
4
|
-
const cookie_1 = require("cookie");
|
5
4
|
const zod_1 = require("zod");
|
6
5
|
const constants_js_1 = require("../constants.js");
|
7
6
|
const index_js_1 = require("../lib/http/index.js");
|
@@ -38,24 +37,6 @@ exports.deviceManagerOptionsSchema = zod_1.z.object({
|
|
38
37
|
cookie: zod_1.z
|
39
38
|
.object({
|
40
39
|
keys: exports.keygripSchema.optional(),
|
41
|
-
/**
|
42
|
-
* Name of the cookie used to identify the device
|
43
|
-
*
|
44
|
-
* @default 'session-id'
|
45
|
-
*/
|
46
|
-
device: zod_1.z.string().default('device-id'),
|
47
|
-
/**
|
48
|
-
* Name of the cookie used to identify the session
|
49
|
-
*
|
50
|
-
* @default 'session-id'
|
51
|
-
*/
|
52
|
-
session: zod_1.z.string().default('session-id'),
|
53
|
-
/**
|
54
|
-
* Url path for the cookie
|
55
|
-
*
|
56
|
-
* @default '/oauth/authorize'
|
57
|
-
*/
|
58
|
-
path: zod_1.z.string().default('/oauth/authorize'),
|
59
40
|
/**
|
60
41
|
* Amount of time (in ms) after which the session cookie will expire.
|
61
42
|
* If set to `null`, the cookie will be a session cookie (deleted when the
|
@@ -82,7 +63,6 @@ exports.deviceManagerOptionsSchema = zod_1.z.object({
|
|
82
63
|
})
|
83
64
|
.default({}),
|
84
65
|
});
|
85
|
-
const cookieValueSchema = zod_1.z.tuple([device_id_js_1.deviceIdSchema, session_id_js_1.sessionIdSchema]);
|
86
66
|
/**
|
87
67
|
* This class provides an abstraction for keeping track of DEVICE sessions. It
|
88
68
|
* relies on a {@link DeviceStore} to persist session data and a cookie to
|
@@ -96,7 +76,7 @@ class DeviceManager {
|
|
96
76
|
this.options = exports.deviceManagerOptionsSchema.parse(options);
|
97
77
|
}
|
98
78
|
async load(req, res, forceRotate = false) {
|
99
|
-
const cookie = await this.
|
79
|
+
const cookie = await this.getCookies(req, res);
|
100
80
|
if (cookie) {
|
101
81
|
return this.refresh(req, res, cookie.value, forceRotate || cookie.mustRotate);
|
102
82
|
}
|
@@ -116,10 +96,10 @@ class DeviceManager {
|
|
116
96
|
userAgent: deviceMetadata.userAgent ?? null,
|
117
97
|
ipAddress: deviceMetadata.ipAddress,
|
118
98
|
});
|
119
|
-
this.
|
99
|
+
await this.setCookies(req, res, { deviceId, sessionId });
|
120
100
|
return { deviceId, deviceMetadata };
|
121
101
|
}
|
122
|
-
async refresh(req, res,
|
102
|
+
async refresh(req, res, { deviceId, sessionId }, forceRotate = false) {
|
123
103
|
const data = await this.store.readDevice(deviceId);
|
124
104
|
if (!data)
|
125
105
|
return this.create(req, res);
|
@@ -156,45 +136,70 @@ class DeviceManager {
|
|
156
136
|
sessionId,
|
157
137
|
lastSeenAt: new Date(),
|
158
138
|
});
|
159
|
-
this.
|
139
|
+
await this.setCookies(req, res, { deviceId, sessionId });
|
160
140
|
}
|
161
|
-
async
|
141
|
+
async getCookies(req, res) {
|
162
142
|
const cookies = (0, index_js_1.parseHttpCookies)(req);
|
163
|
-
|
164
|
-
|
165
|
-
|
166
|
-
|
143
|
+
// Old cookies were set for the "/oauth/authorize" path while new cookies
|
144
|
+
// need to be set for the "/" path (in order to be valid on the api,
|
145
|
+
// authorization page and account page). This means that if a user has both
|
146
|
+
// cookies set, the browser would use the old cookie for the
|
147
|
+
// "/oauth/authorize" path and the new cookie for all other paths. Because
|
148
|
+
// of this, different "phantom" sessions would be created for the same
|
149
|
+
// device. To avoid this, we needed to change the cookie name. We can still
|
150
|
+
// attempt to read the old cookie in order to carry over the session from
|
151
|
+
// the "/oauth/authorize" path to the "/" path. This will only work if the
|
152
|
+
// user visits the "/oauth/authorize" path first.
|
153
|
+
const device = this.parseCookie(cookies, `dev-id`, device_id_js_1.deviceIdSchema) ||
|
154
|
+
this.parseCookie(cookies, 'device-id', device_id_js_1.deviceIdSchema);
|
155
|
+
const session = this.parseCookie(cookies, `ses-id`, session_id_js_1.sessionIdSchema) ||
|
156
|
+
this.parseCookie(cookies, 'session-id', session_id_js_1.sessionIdSchema);
|
157
|
+
const deviceId = device?.value;
|
158
|
+
const sessionId = session?.value;
|
159
|
+
// Clear the legacy cookies, if they are set.
|
160
|
+
if ((0, device_id_js_1.isDeviceId)(cookies['device-id']) && cookies['device-id'] !== deviceId) {
|
161
|
+
await this.store.deleteDevice(cookies['device-id']);
|
162
|
+
}
|
163
|
+
if (cookies['device-id'] || cookies['session-id']) {
|
164
|
+
const options = { path: '/oauth/authorize', maxAge: 0 };
|
165
|
+
(0, request_js_1.setCookie)(res, 'device-id', '', options);
|
166
|
+
(0, request_js_1.setCookie)(res, 'session-id', '', options);
|
167
|
+
}
|
167
168
|
// Silently ignore invalid cookies
|
168
|
-
if (!
|
169
|
+
if (!deviceId || !sessionId) {
|
169
170
|
// If the device cookie is valid, let's cleanup the DB
|
170
|
-
if (
|
171
|
-
await this.store.deleteDevice(
|
171
|
+
if (deviceId)
|
172
|
+
await this.store.deleteDevice(deviceId);
|
172
173
|
return null;
|
173
174
|
}
|
174
175
|
return {
|
175
|
-
value:
|
176
|
+
value: { deviceId, sessionId },
|
176
177
|
mustRotate: device.mustRotate || session.mustRotate,
|
177
178
|
};
|
178
179
|
}
|
179
180
|
parseCookie(cookies, name, schema) {
|
180
|
-
const
|
181
|
+
const rawValue = Object.hasOwn(cookies, name) ? cookies[name] : null;
|
182
|
+
if (!rawValue)
|
183
|
+
return null;
|
184
|
+
const result = schema.safeParse(rawValue, { path: ['cookie', name] });
|
181
185
|
if (!result.success)
|
182
186
|
return null;
|
183
187
|
const value = result.data;
|
184
188
|
if (this.options.cookie.keys) {
|
185
|
-
const
|
189
|
+
const hashName = `${name}:hash`;
|
190
|
+
const hash = Object.hasOwn(cookies, hashName) ? cookies[hashName] : null;
|
186
191
|
if (!hash)
|
187
192
|
return null;
|
188
|
-
const idx = this.options.cookie.keys.index(
|
193
|
+
const idx = this.options.cookie.keys.index(rawValue, hash);
|
189
194
|
if (idx < 0)
|
190
195
|
return null;
|
191
196
|
return { value, mustRotate: idx !== 0 };
|
192
197
|
}
|
193
198
|
return { value, mustRotate: false };
|
194
199
|
}
|
195
|
-
|
196
|
-
this.writeCookie(res,
|
197
|
-
this.writeCookie(res,
|
200
|
+
async setCookies(req, res, { deviceId, sessionId }) {
|
201
|
+
this.writeCookie(res, `dev-id`, deviceId);
|
202
|
+
this.writeCookie(res, `ses-id`, sessionId);
|
198
203
|
}
|
199
204
|
writeCookie(res, name, value) {
|
200
205
|
const cookieOptions = {
|
@@ -204,13 +209,14 @@ class DeviceManager {
|
|
204
209
|
: this.options.cookie.age / 1000
|
205
210
|
: 0,
|
206
211
|
httpOnly: true,
|
207
|
-
path:
|
212
|
+
path: '/',
|
208
213
|
secure: this.options.cookie.secure !== false,
|
209
|
-
sameSite: this.options.cookie.sameSite
|
214
|
+
sameSite: this.options.cookie.sameSite,
|
210
215
|
};
|
211
|
-
(0,
|
216
|
+
(0, request_js_1.setCookie)(res, name, value || '', cookieOptions);
|
212
217
|
if (this.options.cookie.keys) {
|
213
|
-
|
218
|
+
const hash = value ? this.options.cookie.keys.sign(value) : '';
|
219
|
+
(0, request_js_1.setCookie)(res, `${name}:hash`, hash, cookieOptions);
|
214
220
|
}
|
215
221
|
}
|
216
222
|
getRequestMetadata(req) {
|
@@ -1 +1 @@
|
|
1
|
-
{"version":3,"file":"device-manager.js","sourceRoot":"","sources":["../../src/device/device-manager.ts"],"names":[],"mappings":";;;AACA,
|
1
|
+
{"version":3,"file":"device-manager.js","sourceRoot":"","sources":["../../src/device/device-manager.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,kDAA0D;AAC1D,mDAAuD;AACvD,uDAI+B;AAE/B,iDAKuB;AAEvB,mDAAoE;AAEpE;;GAEG;AACU,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,OAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;IACpD,MAAM,EAAE,OAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAC,CAAC,GAAG,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;IACnE,KAAK,EAAE,OAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAC,CAAC,GAAG,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;CAClE,CAAC,CAAA;AAEW,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD;;;OAGG;IACH,UAAU,EAAE,OAAC;SACV,QAAQ,EAAE;SACV,IAAI,CAAsC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC;SACjE,OAAO,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;SACpB,QAAQ,EAAE;IAEb;;;;OAIG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC;;OAEG;IACH,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,IAAI,EAAE,qBAAa,CAAC,QAAQ,EAAE;QAC9B;;;;;;WAMG;QACH,GAAG,EAAE,OAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACvC;;;;WAIG;QACH,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC;;;;WAIG;QACH,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KACnD,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAA;AAcF;;;;GAIG;AACH,MAAa,aAAa;IAIL;IAHF,OAAO,CAA4C;IAEpE,YACmB,KAAkB,EACnC,UAAgC,EAAE;QADjB,UAAK,GAAL,KAAK,CAAa;QAGnC,IAAI,CAAC,OAAO,GAAG,kCAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1D,CAAC;IAEM,KAAK,CAAC,IAAI,CACf,GAAoB,EACpB,GAAmB,EACnB,WAAW,GAAG,KAAK;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,OAAO,CACjB,GAAG,EACH,GAAG,EACH,MAAM,CAAC,KAAK,EACZ,WAAW,IAAI,MAAM,CAAC,UAAU,CACjC,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,GAAoB,EACpB,GAAmB;QAEnB,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;QAEnD,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAA,+BAAgB,GAAE;YAClB,IAAA,iCAAiB,GAAE;SACX,CAAC,CAAA;QAEX,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE;YACtC,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,SAAS,EAAE,cAAc,CAAC,SAAS,IAAI,IAAI;YAC3C,SAAS,EAAE,cAAc,CAAC,SAAS;SACpC,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;QAExD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,GAAoB,EACpB,GAAmB,EACnB,EAAE,QAAQ,EAAE,SAAS,EAAe,EACpC,WAAW,GAAG,KAAK;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAEvC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,CAAA;QAE7C,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,uCAAwB,EAAE,CAAC;gBACpC,iEAAiE;gBACjE,4CAA4C;gBAC5C,WAAW,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,iDAAiD;gBACjD,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;gBACvC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;QAEnD,IACE,WAAW;YACX,cAAc,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAC3C,cAAc,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAC3C,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAC/B,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;gBACpC,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,SAAS,EAAE,cAAc,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;aACtD,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,GAAoB,EACpB,GAAmB,EACnB,QAAkB,EAClB,IAA4D;QAE5D,MAAM,SAAS,GAAG,MAAM,IAAA,iCAAiB,GAAE,CAAA;QAE3C,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE;YACtC,GAAG,IAAI;YACP,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAAoB,EACpB,GAAmB;QAEnB,MAAM,OAAO,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,CAAA;QAErC,yEAAyE;QACzE,oEAAoE;QACpE,2EAA2E;QAC3E,4DAA4D;QAC5D,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,iDAAiD;QAEjD,MAAM,MAAM,GACV,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,6BAAc,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,6BAAc,CAAC,CAAA;QACxD,MAAM,OAAO,GACX,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,+BAAe,CAAC;YACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,+BAAe,CAAC,CAAA;QAE1D,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,CAAA;QAC9B,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,CAAA;QAEhC,6CAA6C;QAC7C,IAAI,IAAA,yBAAU,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,EAAW,CAAA;YAChE,IAAA,sBAAS,EAAC,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;YACxC,IAAA,sBAAS,EAAC,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;QAC3C,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,sDAAsD;YACtD,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;YAErD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO;YACL,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC9B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;SACpD,CAAA;IACH,CAAC;IAEO,WAAW,CACjB,OAA2C,EAC3C,IAAY,EACZ,MAA4D;QAE5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACpE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAE1B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAA;QAEzB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAA;YAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACxE,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAA;YAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC1D,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YAExB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,CAAA;QACzC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAAoB,EACpB,GAAmB,EACnB,EAAE,QAAQ,EAAE,SAAS,EAAe;QAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC;IAEO,WAAW,CAAC,GAAmB,EAAE,IAAY,EAAE,KAAc;QACnE,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI;oBAC/B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI;gBAClC,CAAC,CAAC,CAAC;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK;YAC5C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ;SAC9B,CAAA;QAEV,IAAA,sBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,aAAa,CAAC,CAAA;QAEhD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC9D,IAAA,sBAAS,EAAC,GAAG,EAAE,GAAG,IAAI,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAEM,kBAAkB,CAAC,GAAoB;QAC5C,OAAO,IAAA,mCAAsB,EAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;CACF;AA7ND,sCA6NC"}
|