@atproto/oauth-provider 0.6.6 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (465) hide show
  1. package/CHANGELOG.md +49 -0
  2. package/dist/access-token/access-token-mode.d.ts +5 -0
  3. package/dist/access-token/access-token-mode.d.ts.map +1 -0
  4. package/dist/access-token/access-token-mode.js +9 -0
  5. package/dist/access-token/access-token-mode.js.map +1 -0
  6. package/dist/account/account-manager.d.ts +13 -7
  7. package/dist/account/account-manager.d.ts.map +1 -1
  8. package/dist/account/account-manager.js +69 -52
  9. package/dist/account/account-manager.js.map +1 -1
  10. package/dist/account/account-store.d.ts +88 -77
  11. package/dist/account/account-store.d.ts.map +1 -1
  12. package/dist/account/account-store.js +24 -73
  13. package/dist/account/account-store.js.map +1 -1
  14. package/dist/account/sign-in-data.d.ts +4 -13
  15. package/dist/account/sign-in-data.d.ts.map +1 -1
  16. package/dist/account/sign-in-data.js +9 -9
  17. package/dist/account/sign-in-data.js.map +1 -1
  18. package/dist/account/sign-up-input.d.ts +4 -5
  19. package/dist/account/sign-up-input.d.ts.map +1 -1
  20. package/dist/account/sign-up-input.js +13 -3
  21. package/dist/account/sign-up-input.js.map +1 -1
  22. package/dist/client/client-manager.d.ts +4 -1
  23. package/dist/client/client-manager.d.ts.map +1 -1
  24. package/dist/client/client-manager.js +13 -1
  25. package/dist/client/client-manager.js.map +1 -1
  26. package/dist/client/client-store.d.ts +1 -1
  27. package/dist/client/client-store.d.ts.map +1 -1
  28. package/dist/constants.d.ts +5 -1
  29. package/dist/constants.d.ts.map +1 -1
  30. package/dist/constants.js +6 -2
  31. package/dist/constants.js.map +1 -1
  32. package/dist/customization/branding.d.ts +54 -0
  33. package/dist/customization/branding.d.ts.map +1 -0
  34. package/dist/customization/branding.js +13 -0
  35. package/dist/customization/branding.js.map +1 -0
  36. package/dist/customization/build-customization-css.d.ts +3 -0
  37. package/dist/customization/build-customization-css.d.ts.map +1 -0
  38. package/dist/customization/build-customization-css.js +27 -0
  39. package/dist/customization/build-customization-css.js.map +1 -0
  40. package/dist/customization/build-customization-data.d.ts +4 -0
  41. package/dist/customization/build-customization-data.d.ts.map +1 -0
  42. package/dist/customization/build-customization-data.js +18 -0
  43. package/dist/customization/build-customization-data.js.map +1 -0
  44. package/dist/customization/colors.d.ts +7 -0
  45. package/dist/customization/colors.d.ts.map +1 -0
  46. package/dist/customization/colors.js +27 -0
  47. package/dist/customization/colors.js.map +1 -0
  48. package/dist/customization/customization.d.ts +129 -0
  49. package/dist/customization/customization.d.ts.map +1 -0
  50. package/dist/customization/customization.js +26 -0
  51. package/dist/customization/customization.js.map +1 -0
  52. package/dist/customization/links.d.ts +26 -0
  53. package/dist/customization/links.d.ts.map +1 -0
  54. package/dist/customization/links.js +12 -0
  55. package/dist/customization/links.js.map +1 -0
  56. package/dist/device/device-id.d.ts +1 -0
  57. package/dist/device/device-id.d.ts.map +1 -1
  58. package/dist/device/device-id.js +4 -0
  59. package/dist/device/device-id.js.map +1 -1
  60. package/dist/device/device-manager.d.ts +6 -36
  61. package/dist/device/device-manager.d.ts.map +1 -1
  62. package/dist/device/device-manager.js +49 -43
  63. package/dist/device/device-manager.js.map +1 -1
  64. package/dist/device/device-store.d.ts +1 -0
  65. package/dist/device/device-store.d.ts.map +1 -1
  66. package/dist/device/device-store.js.map +1 -1
  67. package/dist/dpop/dpop-manager.d.ts +3 -3
  68. package/dist/dpop/dpop-nonce.d.ts +3 -3
  69. package/dist/dpop/dpop-nonce.d.ts.map +1 -1
  70. package/dist/errors/access-denied-error.d.ts +4 -3
  71. package/dist/errors/access-denied-error.d.ts.map +1 -1
  72. package/dist/errors/access-denied-error.js +5 -6
  73. package/dist/errors/access-denied-error.js.map +1 -1
  74. package/dist/{output/build-error-payload.d.ts → errors/error-parser.d.ts} +1 -1
  75. package/dist/errors/error-parser.d.ts.map +1 -0
  76. package/dist/{output/build-error-payload.js → errors/error-parser.js} +2 -2
  77. package/dist/errors/error-parser.js.map +1 -0
  78. package/dist/errors/invalid-grant-error.d.ts +1 -0
  79. package/dist/errors/invalid-grant-error.d.ts.map +1 -1
  80. package/dist/errors/invalid-grant-error.js +5 -0
  81. package/dist/errors/invalid-grant-error.js.map +1 -1
  82. package/dist/errors/login-required-error.d.ts +1 -0
  83. package/dist/errors/login-required-error.d.ts.map +1 -1
  84. package/dist/errors/login-required-error.js +5 -0
  85. package/dist/errors/login-required-error.js.map +1 -1
  86. package/dist/index.d.ts +1 -0
  87. package/dist/index.d.ts.map +1 -1
  88. package/dist/index.js +1 -0
  89. package/dist/index.js.map +1 -1
  90. package/dist/lib/html/build-document.d.ts +2 -2
  91. package/dist/lib/html/build-document.d.ts.map +1 -1
  92. package/dist/lib/html/build-document.js +4 -0
  93. package/dist/lib/html/build-document.js.map +1 -1
  94. package/dist/lib/html/hydration-data.d.ts +4 -0
  95. package/dist/lib/html/hydration-data.d.ts.map +1 -0
  96. package/dist/{output/backend-data.js → lib/html/hydration-data.js} +8 -8
  97. package/dist/lib/html/hydration-data.js.map +1 -0
  98. package/dist/lib/html/tags.d.ts +1 -1
  99. package/dist/lib/html/tags.d.ts.map +1 -1
  100. package/dist/lib/html/tags.js +1 -1
  101. package/dist/lib/html/tags.js.map +1 -1
  102. package/dist/lib/http/accept.d.ts +2 -2
  103. package/dist/lib/http/accept.d.ts.map +1 -1
  104. package/dist/lib/http/accept.js +1 -1
  105. package/dist/lib/http/accept.js.map +1 -1
  106. package/dist/lib/http/context.d.ts +2 -4
  107. package/dist/lib/http/context.d.ts.map +1 -1
  108. package/dist/lib/http/context.js +29 -4
  109. package/dist/lib/http/context.js.map +1 -1
  110. package/dist/lib/http/headers.d.ts +3 -0
  111. package/dist/lib/http/headers.d.ts.map +1 -0
  112. package/dist/lib/http/headers.js +14 -0
  113. package/dist/lib/http/headers.js.map +1 -0
  114. package/dist/lib/http/index.d.ts +1 -0
  115. package/dist/lib/http/index.d.ts.map +1 -1
  116. package/dist/lib/http/index.js +1 -0
  117. package/dist/lib/http/index.js.map +1 -1
  118. package/dist/lib/http/middleware.d.ts +1 -1
  119. package/dist/lib/http/middleware.d.ts.map +1 -1
  120. package/dist/lib/http/middleware.js +8 -24
  121. package/dist/lib/http/middleware.js.map +1 -1
  122. package/dist/lib/http/parser.d.ts +3 -3
  123. package/dist/lib/http/parser.d.ts.map +1 -1
  124. package/dist/lib/http/request.d.ts +13 -9
  125. package/dist/lib/http/request.d.ts.map +1 -1
  126. package/dist/lib/http/request.js +27 -49
  127. package/dist/lib/http/request.js.map +1 -1
  128. package/dist/lib/http/response.d.ts +6 -2
  129. package/dist/lib/http/response.d.ts.map +1 -1
  130. package/dist/lib/http/response.js +31 -11
  131. package/dist/lib/http/response.js.map +1 -1
  132. package/dist/lib/http/route.d.ts +3 -3
  133. package/dist/lib/http/route.d.ts.map +1 -1
  134. package/dist/lib/http/route.js +1 -1
  135. package/dist/lib/http/route.js.map +1 -1
  136. package/dist/lib/http/router.d.ts +12 -11
  137. package/dist/lib/http/router.d.ts.map +1 -1
  138. package/dist/lib/http/router.js +26 -34
  139. package/dist/lib/http/router.js.map +1 -1
  140. package/dist/lib/http/security-headers.js +1 -1
  141. package/dist/lib/http/security-headers.js.map +1 -1
  142. package/dist/lib/http/stream.d.ts +3 -3
  143. package/dist/lib/http/stream.d.ts.map +1 -1
  144. package/dist/lib/http/types.d.ts +1 -1
  145. package/dist/lib/http/types.d.ts.map +1 -1
  146. package/dist/lib/send-web-page.d.ts +8 -0
  147. package/dist/lib/send-web-page.d.ts.map +1 -0
  148. package/dist/{output → lib}/send-web-page.js +9 -7
  149. package/dist/lib/send-web-page.js.map +1 -0
  150. package/dist/lib/util/authorization-header.d.ts.map +1 -1
  151. package/dist/lib/util/color.d.ts +32 -0
  152. package/dist/lib/util/color.d.ts.map +1 -0
  153. package/dist/lib/util/color.js +116 -0
  154. package/dist/lib/util/color.js.map +1 -0
  155. package/dist/lib/util/crypto.d.ts +1 -0
  156. package/dist/lib/util/crypto.d.ts.map +1 -1
  157. package/dist/lib/util/crypto.js +8 -3
  158. package/dist/lib/util/crypto.js.map +1 -1
  159. package/dist/lib/util/function.d.ts +1 -0
  160. package/dist/lib/util/function.d.ts.map +1 -1
  161. package/dist/lib/util/function.js +12 -0
  162. package/dist/lib/util/function.js.map +1 -1
  163. package/dist/lib/util/locale.d.ts +20 -0
  164. package/dist/lib/util/locale.d.ts.map +1 -0
  165. package/dist/lib/util/locale.js +14 -0
  166. package/dist/lib/util/locale.js.map +1 -0
  167. package/dist/lib/util/time.d.ts +1 -1
  168. package/dist/lib/util/time.d.ts.map +1 -1
  169. package/dist/lib/util/time.js +1 -1
  170. package/dist/lib/util/time.js.map +1 -1
  171. package/dist/lib/util/type.d.ts +22 -0
  172. package/dist/lib/util/type.d.ts.map +1 -1
  173. package/dist/lib/util/type.js.map +1 -1
  174. package/dist/lib/util/ui8.d.ts +4 -0
  175. package/dist/lib/util/ui8.d.ts.map +1 -0
  176. package/dist/lib/util/ui8.js +17 -0
  177. package/dist/lib/util/ui8.js.map +1 -0
  178. package/dist/lib/util/zod-error.d.ts +2 -0
  179. package/dist/lib/util/zod-error.d.ts.map +1 -0
  180. package/dist/lib/util/zod-error.js +16 -0
  181. package/dist/lib/util/zod-error.js.map +1 -0
  182. package/dist/oauth-errors.d.ts +22 -22
  183. package/dist/oauth-errors.d.ts.map +1 -1
  184. package/dist/oauth-errors.js +37 -45
  185. package/dist/oauth-errors.js.map +1 -1
  186. package/dist/oauth-hooks.d.ts +11 -23
  187. package/dist/oauth-hooks.d.ts.map +1 -1
  188. package/dist/oauth-hooks.js.map +1 -1
  189. package/dist/oauth-middleware.d.ts +12 -0
  190. package/dist/oauth-middleware.d.ts.map +1 -0
  191. package/dist/oauth-middleware.js +32 -0
  192. package/dist/oauth-middleware.js.map +1 -0
  193. package/dist/oauth-provider.d.ts +109 -113
  194. package/dist/oauth-provider.d.ts.map +1 -1
  195. package/dist/oauth-provider.js +124 -542
  196. package/dist/oauth-provider.js.map +1 -1
  197. package/dist/oauth-verifier.d.ts +7 -26
  198. package/dist/oauth-verifier.d.ts.map +1 -1
  199. package/dist/oauth-verifier.js +6 -16
  200. package/dist/oauth-verifier.js.map +1 -1
  201. package/dist/request/code.d.ts.map +1 -1
  202. package/dist/request/request-data.d.ts +2 -4
  203. package/dist/request/request-data.d.ts.map +1 -1
  204. package/dist/request/request-data.js.map +1 -1
  205. package/dist/request/request-manager.d.ts +4 -2
  206. package/dist/request/request-manager.d.ts.map +1 -1
  207. package/dist/request/request-manager.js +9 -8
  208. package/dist/request/request-manager.js.map +1 -1
  209. package/dist/request/request-store.d.ts +6 -0
  210. package/dist/request/request-store.d.ts.map +1 -1
  211. package/dist/request/request-store.js +3 -1
  212. package/dist/request/request-store.js.map +1 -1
  213. package/dist/result/authorization-redirect-parameters.d.ts +18 -0
  214. package/dist/result/authorization-redirect-parameters.d.ts.map +1 -0
  215. package/dist/result/authorization-redirect-parameters.js +3 -0
  216. package/dist/result/authorization-redirect-parameters.js.map +1 -0
  217. package/dist/result/authorization-result-authorize-page.d.ts +13 -0
  218. package/dist/result/authorization-result-authorize-page.d.ts.map +1 -0
  219. package/dist/result/authorization-result-authorize-page.js +3 -0
  220. package/dist/result/authorization-result-authorize-page.js.map +1 -0
  221. package/dist/result/authorization-result-redirect.d.ts +8 -0
  222. package/dist/result/authorization-result-redirect.d.ts.map +1 -0
  223. package/dist/result/authorization-result-redirect.js +3 -0
  224. package/dist/result/authorization-result-redirect.js.map +1 -0
  225. package/dist/router/assets/assets-manifest.d.ts +10 -0
  226. package/dist/router/assets/assets-manifest.d.ts.map +1 -0
  227. package/dist/router/assets/assets-manifest.js +77 -0
  228. package/dist/router/assets/assets-manifest.js.map +1 -0
  229. package/dist/router/assets/assets.d.ts +16 -0
  230. package/dist/router/assets/assets.d.ts.map +1 -0
  231. package/dist/router/assets/assets.js +43 -0
  232. package/dist/router/assets/assets.js.map +1 -0
  233. package/dist/router/assets/csrf.d.ts +4 -0
  234. package/dist/router/assets/csrf.d.ts.map +1 -0
  235. package/dist/router/assets/csrf.js +51 -0
  236. package/dist/router/assets/csrf.js.map +1 -0
  237. package/dist/router/assets/send-account-page.d.ts +7 -0
  238. package/dist/router/assets/send-account-page.d.ts.map +1 -0
  239. package/dist/router/assets/send-account-page.js +34 -0
  240. package/dist/router/assets/send-account-page.js.map +1 -0
  241. package/dist/router/assets/send-authorization-page.d.ts +5 -0
  242. package/dist/router/assets/send-authorization-page.d.ts.map +1 -0
  243. package/dist/router/assets/send-authorization-page.js +49 -0
  244. package/dist/router/assets/send-authorization-page.js.map +1 -0
  245. package/dist/router/assets/send-error-page.d.ts +4 -0
  246. package/dist/router/assets/send-error-page.d.ts.map +1 -0
  247. package/dist/router/assets/send-error-page.js +34 -0
  248. package/dist/router/assets/send-error-page.js.map +1 -0
  249. package/dist/router/create-account-page-middleware.d.ts +6 -0
  250. package/dist/router/create-account-page-middleware.d.ts.map +1 -0
  251. package/dist/router/create-account-page-middleware.js +39 -0
  252. package/dist/router/create-account-page-middleware.js.map +1 -0
  253. package/dist/router/create-api-middleware.d.ts +8 -0
  254. package/dist/router/create-api-middleware.d.ts.map +1 -0
  255. package/dist/router/create-api-middleware.js +501 -0
  256. package/dist/router/create-api-middleware.js.map +1 -0
  257. package/dist/router/create-authorization-page-middleware.d.ts +6 -0
  258. package/dist/router/create-authorization-page-middleware.d.ts.map +1 -0
  259. package/dist/router/create-authorization-page-middleware.js +104 -0
  260. package/dist/router/create-authorization-page-middleware.js.map +1 -0
  261. package/dist/router/create-oauth-middleware.d.ts +6 -0
  262. package/dist/router/create-oauth-middleware.d.ts.map +1 -0
  263. package/dist/router/create-oauth-middleware.js +142 -0
  264. package/dist/router/create-oauth-middleware.js.map +1 -0
  265. package/dist/router/error-handler.d.ts +3 -0
  266. package/dist/router/error-handler.d.ts.map +1 -0
  267. package/dist/{account/account.js → router/error-handler.js} +1 -1
  268. package/dist/router/error-handler.js.map +1 -0
  269. package/dist/router/middleware-options.d.ts +6 -0
  270. package/dist/router/middleware-options.d.ts.map +1 -0
  271. package/dist/router/middleware-options.js +3 -0
  272. package/dist/router/middleware-options.js.map +1 -0
  273. package/dist/router/send-redirect.d.ts +16 -0
  274. package/dist/router/send-redirect.d.ts.map +1 -0
  275. package/dist/{output/send-authorize-redirect.js → router/send-redirect.js} +40 -24
  276. package/dist/router/send-redirect.js.map +1 -0
  277. package/dist/{token/token-claims.d.ts → signer/api-token-payload.d.ts} +237 -232
  278. package/dist/signer/api-token-payload.d.ts.map +1 -0
  279. package/dist/signer/api-token-payload.js +17 -0
  280. package/dist/signer/api-token-payload.js.map +1 -0
  281. package/dist/signer/signed-token-payload.d.ts +164 -159
  282. package/dist/signer/signed-token-payload.d.ts.map +1 -1
  283. package/dist/signer/signed-token-payload.js +10 -16
  284. package/dist/signer/signed-token-payload.js.map +1 -1
  285. package/dist/signer/signer.d.ts +42 -11246
  286. package/dist/signer/signer.d.ts.map +1 -1
  287. package/dist/signer/signer.js +30 -15
  288. package/dist/signer/signer.js.map +1 -1
  289. package/dist/token/refresh-token.d.ts.map +1 -1
  290. package/dist/token/token-data.d.ts +1 -1
  291. package/dist/token/token-data.d.ts.map +1 -1
  292. package/dist/token/token-id.d.ts.map +1 -1
  293. package/dist/token/token-manager.d.ts +28 -26
  294. package/dist/token/token-manager.d.ts.map +1 -1
  295. package/dist/token/token-manager.js +138 -196
  296. package/dist/token/token-manager.js.map +1 -1
  297. package/dist/token/token-store.d.ts +4 -4
  298. package/dist/token/token-store.d.ts.map +1 -1
  299. package/dist/token/token-store.js +1 -0
  300. package/dist/token/token-store.js.map +1 -1
  301. package/dist/token/verify-token-claims.d.ts +3 -3
  302. package/dist/token/verify-token-claims.d.ts.map +1 -1
  303. package/dist/token/verify-token-claims.js +1 -1
  304. package/dist/token/verify-token-claims.js.map +1 -1
  305. package/dist/types/email-otp.d.ts +3 -0
  306. package/dist/types/email-otp.d.ts.map +1 -0
  307. package/dist/types/email-otp.js +6 -0
  308. package/dist/types/email-otp.js.map +1 -0
  309. package/dist/types/email.d.ts +3 -0
  310. package/dist/types/email.d.ts.map +1 -0
  311. package/dist/types/email.js +29 -0
  312. package/dist/types/email.js.map +1 -0
  313. package/dist/types/handle.d.ts +3 -0
  314. package/dist/types/handle.d.ts.map +1 -0
  315. package/dist/types/handle.js +22 -0
  316. package/dist/types/handle.js.map +1 -0
  317. package/dist/types/invite-code.d.ts +4 -0
  318. package/dist/types/invite-code.d.ts.map +1 -0
  319. package/dist/types/invite-code.js +6 -0
  320. package/dist/types/invite-code.js.map +1 -0
  321. package/dist/types/password.d.ts +4 -0
  322. package/dist/types/password.d.ts.map +1 -0
  323. package/dist/types/password.js +7 -0
  324. package/dist/types/password.js.map +1 -0
  325. package/package.json +11 -14
  326. package/src/access-token/access-token-mode.ts +4 -0
  327. package/src/account/account-manager.ts +105 -75
  328. package/src/account/account-store.ts +118 -114
  329. package/src/account/sign-in-data.ts +10 -10
  330. package/src/account/sign-up-input.ts +13 -4
  331. package/src/client/client-manager.ts +34 -2
  332. package/src/client/client-store.ts +1 -1
  333. package/src/constants.ts +6 -1
  334. package/src/customization/branding.ts +12 -0
  335. package/src/customization/build-customization-css.ts +30 -0
  336. package/src/customization/build-customization-data.ts +22 -0
  337. package/src/customization/colors.ts +30 -0
  338. package/src/customization/customization.ts +25 -0
  339. package/src/customization/links.ts +10 -0
  340. package/src/device/device-id.ts +5 -0
  341. package/src/device/device-manager.ts +76 -66
  342. package/src/device/device-store.ts +2 -0
  343. package/src/errors/access-denied-error.ts +24 -17
  344. package/src/{output/build-error-payload.ts → errors/error-parser.ts} +1 -1
  345. package/src/errors/invalid-grant-error.ts +5 -0
  346. package/src/errors/login-required-error.ts +10 -0
  347. package/src/index.ts +1 -0
  348. package/src/lib/html/build-document.ts +6 -4
  349. package/src/{output/backend-data.ts → lib/html/hydration-data.ts} +7 -5
  350. package/src/lib/html/tags.ts +2 -2
  351. package/src/lib/http/accept.ts +3 -3
  352. package/src/lib/http/context.ts +41 -10
  353. package/src/lib/http/headers.ts +15 -0
  354. package/src/lib/http/index.ts +1 -0
  355. package/src/lib/http/middleware.ts +8 -23
  356. package/src/lib/http/request.ts +40 -75
  357. package/src/lib/http/response.ts +39 -15
  358. package/src/lib/http/route.ts +8 -5
  359. package/src/lib/http/router.ts +40 -46
  360. package/src/lib/http/security-headers.ts +1 -1
  361. package/src/lib/http/types.ts +1 -6
  362. package/src/{output → lib}/send-web-page.ts +10 -9
  363. package/src/lib/util/color.ts +132 -0
  364. package/src/lib/util/crypto.ts +9 -4
  365. package/src/lib/util/function.ts +14 -0
  366. package/src/lib/util/locale.ts +18 -0
  367. package/src/lib/util/time.ts +3 -4
  368. package/src/lib/util/type.ts +24 -0
  369. package/src/lib/util/ui8.ts +14 -0
  370. package/src/lib/util/zod-error.ts +14 -0
  371. package/src/oauth-errors.ts +22 -22
  372. package/src/oauth-hooks.ts +11 -24
  373. package/src/oauth-middleware.ts +53 -0
  374. package/src/oauth-provider.ts +290 -1061
  375. package/src/oauth-verifier.ts +9 -55
  376. package/src/request/request-data.ts +5 -4
  377. package/src/request/request-manager.ts +11 -11
  378. package/src/request/request-store.ts +7 -0
  379. package/src/result/authorization-redirect-parameters.ts +24 -0
  380. package/src/result/authorization-result-authorize-page.ts +14 -0
  381. package/src/result/authorization-result-redirect.ts +8 -0
  382. package/src/router/assets/assets-manifest.ts +115 -0
  383. package/src/router/assets/assets.ts +54 -0
  384. package/src/router/assets/csrf.ts +63 -0
  385. package/src/router/assets/send-account-page.ts +43 -0
  386. package/src/router/assets/send-authorization-page.ts +62 -0
  387. package/src/router/assets/send-error-page.ts +42 -0
  388. package/src/router/create-account-page-middleware.ts +69 -0
  389. package/src/router/create-api-middleware.ts +814 -0
  390. package/src/router/create-authorization-page-middleware.ts +173 -0
  391. package/src/router/create-oauth-middleware.ts +247 -0
  392. package/src/router/error-handler.ts +6 -0
  393. package/src/router/middleware-options.ts +9 -0
  394. package/src/router/send-redirect.ts +142 -0
  395. package/src/signer/api-token-payload.ts +18 -0
  396. package/src/signer/signed-token-payload.ts +18 -28
  397. package/src/signer/signer.ts +49 -34
  398. package/src/token/token-data.ts +1 -1
  399. package/src/token/token-manager.ts +190 -239
  400. package/src/token/token-store.ts +6 -4
  401. package/src/token/verify-token-claims.ts +4 -4
  402. package/src/types/email-otp.ts +3 -0
  403. package/src/types/email.ts +26 -0
  404. package/src/types/handle.ts +18 -0
  405. package/src/types/invite-code.ts +4 -0
  406. package/src/types/password.ts +4 -0
  407. package/tsconfig.build.tsbuildinfo +1 -0
  408. package/tsconfig.json +1 -1
  409. package/dist/access-token/access-token-type.d.ts +0 -6
  410. package/dist/access-token/access-token-type.d.ts.map +0 -1
  411. package/dist/access-token/access-token-type.js +0 -10
  412. package/dist/access-token/access-token-type.js.map +0 -1
  413. package/dist/account/account.d.ts +0 -2
  414. package/dist/account/account.d.ts.map +0 -1
  415. package/dist/account/account.js.map +0 -1
  416. package/dist/assets/assets-middleware.d.ts +0 -5
  417. package/dist/assets/assets-middleware.d.ts.map +0 -1
  418. package/dist/assets/assets-middleware.js +0 -41
  419. package/dist/assets/assets-middleware.js.map +0 -1
  420. package/dist/lib/locale.d.ts +0 -15
  421. package/dist/lib/locale.d.ts.map +0 -1
  422. package/dist/lib/locale.js +0 -17
  423. package/dist/lib/locale.js.map +0 -1
  424. package/dist/output/backend-data.d.ts +0 -4
  425. package/dist/output/backend-data.d.ts.map +0 -1
  426. package/dist/output/backend-data.js.map +0 -1
  427. package/dist/output/build-authorize-data.d.ts +0 -29
  428. package/dist/output/build-authorize-data.d.ts.map +0 -1
  429. package/dist/output/build-authorize-data.js +0 -21
  430. package/dist/output/build-authorize-data.js.map +0 -1
  431. package/dist/output/build-customization-data.d.ts +0 -234
  432. package/dist/output/build-customization-data.d.ts.map +0 -1
  433. package/dist/output/build-customization-data.js +0 -174
  434. package/dist/output/build-customization-data.js.map +0 -1
  435. package/dist/output/build-error-data.d.ts +0 -3
  436. package/dist/output/build-error-data.d.ts.map +0 -1
  437. package/dist/output/build-error-data.js +0 -10
  438. package/dist/output/build-error-data.js.map +0 -1
  439. package/dist/output/build-error-payload.d.ts.map +0 -1
  440. package/dist/output/build-error-payload.js.map +0 -1
  441. package/dist/output/output-manager.d.ts +0 -28
  442. package/dist/output/output-manager.d.ts.map +0 -1
  443. package/dist/output/output-manager.js +0 -134
  444. package/dist/output/output-manager.js.map +0 -1
  445. package/dist/output/send-authorize-redirect.d.ts +0 -25
  446. package/dist/output/send-authorize-redirect.d.ts.map +0 -1
  447. package/dist/output/send-authorize-redirect.js.map +0 -1
  448. package/dist/output/send-web-page.d.ts +0 -8
  449. package/dist/output/send-web-page.d.ts.map +0 -1
  450. package/dist/output/send-web-page.js.map +0 -1
  451. package/dist/token/token-claims.d.ts.map +0 -1
  452. package/dist/token/token-claims.js +0 -27
  453. package/dist/token/token-claims.js.map +0 -1
  454. package/src/access-token/access-token-type.ts +0 -5
  455. package/src/account/account.ts +0 -1
  456. package/src/assets/assets-middleware.ts +0 -44
  457. package/src/lib/locale.ts +0 -21
  458. package/src/output/build-authorize-data.ts +0 -53
  459. package/src/output/build-customization-data.ts +0 -217
  460. package/src/output/build-error-data.ts +0 -8
  461. package/src/output/output-manager.ts +0 -188
  462. package/src/output/send-authorize-redirect.ts +0 -137
  463. package/src/token/token-claims.ts +0 -30
  464. package/tsconfig.backend.tsbuildinfo +0 -1
  465. /package/{tsconfig.backend.json → tsconfig.build.json} +0 -0
package/dist/{token/token-claims.d.ts → signer/api-token-payload.d.ts} RENAMED
@@ -1,93 +1,19 @@
1
1
  import { z } from 'zod';
2
- import { Simplify } from '../lib/util/type.js';
3
- export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
4
- iat: z.ZodNumber;
5
- aud: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
6
- exp: z.ZodNumber;
7
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
8
- iat: z.ZodNumber;
9
- aud: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
10
- exp: z.ZodNumber;
11
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
12
- iat: z.ZodNumber;
13
- aud: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
14
- exp: z.ZodNumber;
15
- }, z.ZodTypeAny, "passthrough">>, z.ZodObject<z.objectUtil.extendShape<{
16
- nonce: z.ZodOptional<z.ZodOptional<z.ZodString>>;
17
- client_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
18
- scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
19
- authorization_details: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
20
- type: z.ZodString;
21
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
22
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
23
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
24
- identifier: z.ZodOptional<z.ZodString>;
25
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
26
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
27
- type: z.ZodString;
28
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
29
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
30
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
31
- identifier: z.ZodOptional<z.ZodString>;
32
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
33
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
34
- type: z.ZodString;
35
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
36
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
37
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
38
- identifier: z.ZodOptional<z.ZodString>;
39
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
40
- }, z.ZodTypeAny, "passthrough">>, "many">>>;
41
- email: z.ZodOptional<z.ZodOptional<z.ZodString>>;
42
- auth_time: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
43
- acr: z.ZodOptional<z.ZodOptional<z.ZodString>>;
44
- name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
45
- family_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
46
- given_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
47
- middle_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
48
- nickname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
49
- preferred_username: z.ZodOptional<z.ZodOptional<z.ZodString>>;
50
- gender: z.ZodOptional<z.ZodOptional<z.ZodString>>;
51
- picture: z.ZodOptional<z.ZodOptional<z.ZodString>>;
52
- profile: z.ZodOptional<z.ZodOptional<z.ZodString>>;
53
- website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
54
- birthdate: z.ZodOptional<z.ZodOptional<z.ZodString>>;
55
- zoneinfo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
56
- locale: z.ZodOptional<z.ZodOptional<z.ZodString>>;
57
- updated_at: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
58
- email_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
59
- phone_number: z.ZodOptional<z.ZodOptional<z.ZodString>>;
60
- phone_number_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
61
- address: z.ZodOptional<z.ZodOptional<z.ZodObject<{
62
- formatted: z.ZodOptional<z.ZodString>;
63
- street_address: z.ZodOptional<z.ZodString>;
64
- locality: z.ZodOptional<z.ZodString>;
65
- region: z.ZodOptional<z.ZodString>;
66
- postal_code: z.ZodOptional<z.ZodString>;
67
- country: z.ZodOptional<z.ZodString>;
68
- }, "strip", z.ZodTypeAny, {
69
- formatted?: string | undefined;
70
- street_address?: string | undefined;
71
- locality?: string | undefined;
72
- region?: string | undefined;
73
- postal_code?: string | undefined;
74
- country?: string | undefined;
75
- }, {
76
- formatted?: string | undefined;
77
- street_address?: string | undefined;
78
- locality?: string | undefined;
79
- region?: string | undefined;
80
- postal_code?: string | undefined;
81
- country?: string | undefined;
82
- }>>>;
83
- htm: z.ZodOptional<z.ZodOptional<z.ZodString>>;
84
- htu: z.ZodOptional<z.ZodOptional<z.ZodString>>;
85
- ath: z.ZodOptional<z.ZodOptional<z.ZodString>>;
86
- sub: z.ZodOptional<z.ZodOptional<z.ZodString>>;
87
- nbf: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
88
- azp: z.ZodOptional<z.ZodOptional<z.ZodString>>;
89
- amr: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
90
- cnf: z.ZodOptional<z.ZodOptional<z.ZodObject<{
2
+ export declare const apiTokenPayloadSchema: z.ZodObject<z.objectUtil.extendShape<{
3
+ iss: z.ZodOptional<z.ZodString>;
4
+ aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>>;
5
+ sub: z.ZodOptional<z.ZodString>;
6
+ exp: z.ZodOptional<z.ZodNumber>;
7
+ nbf: z.ZodOptional<z.ZodNumber>;
8
+ iat: z.ZodOptional<z.ZodNumber>;
9
+ jti: z.ZodOptional<z.ZodString>;
10
+ htm: z.ZodOptional<z.ZodString>;
11
+ htu: z.ZodOptional<z.ZodString>;
12
+ ath: z.ZodOptional<z.ZodString>;
13
+ acr: z.ZodOptional<z.ZodString>;
14
+ azp: z.ZodOptional<z.ZodString>;
15
+ amr: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
16
+ cnf: z.ZodOptional<z.ZodObject<{
91
17
  kid: z.ZodOptional<z.ZodString>;
92
18
  jwk: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
93
19
  kty: z.ZodString;
@@ -1159,11 +1085,11 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
1159
1085
  jwe: z.ZodOptional<z.ZodString>;
1160
1086
  jku: z.ZodOptional<z.ZodString>;
1161
1087
  jkt: z.ZodOptional<z.ZodString>;
1162
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1088
+ "x5t#S256": z.ZodOptional<z.ZodString>;
1163
1089
  osc: z.ZodOptional<z.ZodString>;
1164
1090
  }, "strip", z.ZodTypeAny, {
1165
1091
  kid?: string | undefined;
1166
- 'x5t#S256'?: string | undefined;
1092
+ "x5t#S256"?: string | undefined;
1167
1093
  jku?: string | undefined;
1168
1094
  jwk?: {
1169
1095
  kty: "RSA";
@@ -1266,7 +1192,7 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
1266
1192
  osc?: string | undefined;
1267
1193
  }, {
1268
1194
  kid?: string | undefined;
1269
- 'x5t#S256'?: string | undefined;
1195
+ "x5t#S256"?: string | undefined;
1270
1196
  jku?: string | undefined;
1271
1197
  jwk?: {
1272
1198
  kty: "RSA";
@@ -1367,60 +1293,33 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
1367
1293
  jwe?: string | undefined;
1368
1294
  jkt?: string | undefined;
1369
1295
  osc?: string | undefined;
1370
- }>>>;
1371
- at_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1372
- c_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1373
- s_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1374
- }, {
1375
- sub: z.ZodString;
1376
- client_id: z.ZodString;
1377
- }>, "passthrough", z.ZodTypeAny, z.objectOutputType<z.objectUtil.extendShape<{
1378
- nonce: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1379
- client_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1380
- scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1381
- authorization_details: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
1382
- type: z.ZodString;
1383
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1384
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1385
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1386
- identifier: z.ZodOptional<z.ZodString>;
1387
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1388
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
1389
- type: z.ZodString;
1390
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1391
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1392
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1393
- identifier: z.ZodOptional<z.ZodString>;
1394
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1395
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
1396
- type: z.ZodString;
1397
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1398
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1399
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1400
- identifier: z.ZodOptional<z.ZodString>;
1401
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1402
- }, z.ZodTypeAny, "passthrough">>, "many">>>;
1403
- email: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1404
- auth_time: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
1405
- acr: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1406
- name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1407
- family_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1408
- given_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1409
- middle_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1410
- nickname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1411
- preferred_username: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1412
- gender: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1413
- picture: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1414
- profile: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1415
- website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1416
- birthdate: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1417
- zoneinfo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1418
- locale: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1419
- updated_at: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
1420
- email_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
1421
- phone_number: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1422
- phone_number_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
1423
- address: z.ZodOptional<z.ZodOptional<z.ZodObject<{
1296
+ }>>;
1297
+ client_id: z.ZodOptional<z.ZodString>;
1298
+ scope: z.ZodOptional<z.ZodString>;
1299
+ nonce: z.ZodOptional<z.ZodString>;
1300
+ at_hash: z.ZodOptional<z.ZodString>;
1301
+ c_hash: z.ZodOptional<z.ZodString>;
1302
+ s_hash: z.ZodOptional<z.ZodString>;
1303
+ auth_time: z.ZodOptional<z.ZodNumber>;
1304
+ name: z.ZodOptional<z.ZodString>;
1305
+ family_name: z.ZodOptional<z.ZodString>;
1306
+ given_name: z.ZodOptional<z.ZodString>;
1307
+ middle_name: z.ZodOptional<z.ZodString>;
1308
+ nickname: z.ZodOptional<z.ZodString>;
1309
+ preferred_username: z.ZodOptional<z.ZodString>;
1310
+ gender: z.ZodOptional<z.ZodString>;
1311
+ picture: z.ZodOptional<z.ZodString>;
1312
+ profile: z.ZodOptional<z.ZodString>;
1313
+ website: z.ZodOptional<z.ZodString>;
1314
+ birthdate: z.ZodOptional<z.ZodString>;
1315
+ zoneinfo: z.ZodOptional<z.ZodString>;
1316
+ locale: z.ZodOptional<z.ZodString>;
1317
+ updated_at: z.ZodOptional<z.ZodNumber>;
1318
+ email: z.ZodOptional<z.ZodString>;
1319
+ email_verified: z.ZodOptional<z.ZodBoolean>;
1320
+ phone_number: z.ZodOptional<z.ZodString>;
1321
+ phone_number_verified: z.ZodOptional<z.ZodBoolean>;
1322
+ address: z.ZodOptional<z.ZodObject<{
1424
1323
  formatted: z.ZodOptional<z.ZodString>;
1425
1324
  street_address: z.ZodOptional<z.ZodString>;
1426
1325
  locality: z.ZodOptional<z.ZodString>;
@@ -1441,15 +1340,48 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
1441
1340
  region?: string | undefined;
1442
1341
  postal_code?: string | undefined;
1443
1342
  country?: string | undefined;
1444
- }>>>;
1445
- htm: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1446
- htu: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1447
- ath: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1448
- sub: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1449
- nbf: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
1450
- azp: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1451
- amr: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
1452
- cnf: z.ZodOptional<z.ZodOptional<z.ZodObject<{
1343
+ }>>;
1344
+ authorization_details: z.ZodOptional<z.ZodArray<z.ZodObject<{
1345
+ type: z.ZodString;
1346
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1347
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1348
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1349
+ identifier: z.ZodOptional<z.ZodString>;
1350
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1351
+ }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
1352
+ type: z.ZodString;
1353
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1354
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1355
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1356
+ identifier: z.ZodOptional<z.ZodString>;
1357
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1358
+ }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
1359
+ type: z.ZodString;
1360
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1361
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1362
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1363
+ identifier: z.ZodOptional<z.ZodString>;
1364
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1365
+ }, z.ZodTypeAny, "passthrough">>, "many">>;
1366
+ }, {
1367
+ sub: z.ZodString;
1368
+ deviceId: z.ZodEffects<z.ZodString, `dev-${string}`, string>;
1369
+ requestUri: z.ZodOptional<z.ZodEffects<z.ZodString, `urn:ietf:params:oauth:request_uri:req-${string}`, string>>;
1370
+ }>, "passthrough", z.ZodTypeAny, z.objectOutputType<z.objectUtil.extendShape<{
1371
+ iss: z.ZodOptional<z.ZodString>;
1372
+ aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>>;
1373
+ sub: z.ZodOptional<z.ZodString>;
1374
+ exp: z.ZodOptional<z.ZodNumber>;
1375
+ nbf: z.ZodOptional<z.ZodNumber>;
1376
+ iat: z.ZodOptional<z.ZodNumber>;
1377
+ jti: z.ZodOptional<z.ZodString>;
1378
+ htm: z.ZodOptional<z.ZodString>;
1379
+ htu: z.ZodOptional<z.ZodString>;
1380
+ ath: z.ZodOptional<z.ZodString>;
1381
+ acr: z.ZodOptional<z.ZodString>;
1382
+ azp: z.ZodOptional<z.ZodString>;
1383
+ amr: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1384
+ cnf: z.ZodOptional<z.ZodObject<{
1453
1385
  kid: z.ZodOptional<z.ZodString>;
1454
1386
  jwk: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
1455
1387
  kty: z.ZodString;
@@ -2521,11 +2453,11 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
2521
2453
  jwe: z.ZodOptional<z.ZodString>;
2522
2454
  jku: z.ZodOptional<z.ZodString>;
2523
2455
  jkt: z.ZodOptional<z.ZodString>;
2524
- 'x5t#S256': z.ZodOptional<z.ZodString>;
2456
+ "x5t#S256": z.ZodOptional<z.ZodString>;
2525
2457
  osc: z.ZodOptional<z.ZodString>;
2526
2458
  }, "strip", z.ZodTypeAny, {
2527
2459
  kid?: string | undefined;
2528
- 'x5t#S256'?: string | undefined;
2460
+ "x5t#S256"?: string | undefined;
2529
2461
  jku?: string | undefined;
2530
2462
  jwk?: {
2531
2463
  kty: "RSA";
@@ -2628,7 +2560,7 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
2628
2560
  osc?: string | undefined;
2629
2561
  }, {
2630
2562
  kid?: string | undefined;
2631
- 'x5t#S256'?: string | undefined;
2563
+ "x5t#S256"?: string | undefined;
2632
2564
  jku?: string | undefined;
2633
2565
  jwk?: {
2634
2566
  kty: "RSA";
@@ -2729,60 +2661,33 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
2729
2661
  jwe?: string | undefined;
2730
2662
  jkt?: string | undefined;
2731
2663
  osc?: string | undefined;
2732
- }>>>;
2733
- at_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2734
- c_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2735
- s_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2736
- }, {
2737
- sub: z.ZodString;
2738
- client_id: z.ZodString;
2739
- }>, z.ZodTypeAny, "passthrough">, z.objectInputType<z.objectUtil.extendShape<{
2740
- nonce: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2741
- client_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2742
- scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2743
- authorization_details: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
2744
- type: z.ZodString;
2745
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2746
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2747
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2748
- identifier: z.ZodOptional<z.ZodString>;
2749
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2750
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
2751
- type: z.ZodString;
2752
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2753
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2754
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2755
- identifier: z.ZodOptional<z.ZodString>;
2756
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2757
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
2758
- type: z.ZodString;
2759
- locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2760
- actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2761
- datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2762
- identifier: z.ZodOptional<z.ZodString>;
2763
- privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2764
- }, z.ZodTypeAny, "passthrough">>, "many">>>;
2765
- email: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2766
- auth_time: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
2767
- acr: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2768
- name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2769
- family_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2770
- given_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2771
- middle_name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2772
- nickname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2773
- preferred_username: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2774
- gender: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2775
- picture: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2776
- profile: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2777
- website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2778
- birthdate: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2779
- zoneinfo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2780
- locale: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2781
- updated_at: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
2782
- email_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
2783
- phone_number: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2784
- phone_number_verified: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
2785
- address: z.ZodOptional<z.ZodOptional<z.ZodObject<{
2664
+ }>>;
2665
+ client_id: z.ZodOptional<z.ZodString>;
2666
+ scope: z.ZodOptional<z.ZodString>;
2667
+ nonce: z.ZodOptional<z.ZodString>;
2668
+ at_hash: z.ZodOptional<z.ZodString>;
2669
+ c_hash: z.ZodOptional<z.ZodString>;
2670
+ s_hash: z.ZodOptional<z.ZodString>;
2671
+ auth_time: z.ZodOptional<z.ZodNumber>;
2672
+ name: z.ZodOptional<z.ZodString>;
2673
+ family_name: z.ZodOptional<z.ZodString>;
2674
+ given_name: z.ZodOptional<z.ZodString>;
2675
+ middle_name: z.ZodOptional<z.ZodString>;
2676
+ nickname: z.ZodOptional<z.ZodString>;
2677
+ preferred_username: z.ZodOptional<z.ZodString>;
2678
+ gender: z.ZodOptional<z.ZodString>;
2679
+ picture: z.ZodOptional<z.ZodString>;
2680
+ profile: z.ZodOptional<z.ZodString>;
2681
+ website: z.ZodOptional<z.ZodString>;
2682
+ birthdate: z.ZodOptional<z.ZodString>;
2683
+ zoneinfo: z.ZodOptional<z.ZodString>;
2684
+ locale: z.ZodOptional<z.ZodString>;
2685
+ updated_at: z.ZodOptional<z.ZodNumber>;
2686
+ email: z.ZodOptional<z.ZodString>;
2687
+ email_verified: z.ZodOptional<z.ZodBoolean>;
2688
+ phone_number: z.ZodOptional<z.ZodString>;
2689
+ phone_number_verified: z.ZodOptional<z.ZodBoolean>;
2690
+ address: z.ZodOptional<z.ZodObject<{
2786
2691
  formatted: z.ZodOptional<z.ZodString>;
2787
2692
  street_address: z.ZodOptional<z.ZodString>;
2788
2693
  locality: z.ZodOptional<z.ZodString>;
@@ -2803,15 +2708,48 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
2803
2708
  region?: string | undefined;
2804
2709
  postal_code?: string | undefined;
2805
2710
  country?: string | undefined;
2806
- }>>>;
2807
- htm: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2808
- htu: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2809
- ath: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2810
- sub: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2811
- nbf: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
2812
- azp: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2813
- amr: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
2814
- cnf: z.ZodOptional<z.ZodOptional<z.ZodObject<{
2711
+ }>>;
2712
+ authorization_details: z.ZodOptional<z.ZodArray<z.ZodObject<{
2713
+ type: z.ZodString;
2714
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2715
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2716
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2717
+ identifier: z.ZodOptional<z.ZodString>;
2718
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2719
+ }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
2720
+ type: z.ZodString;
2721
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2722
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2723
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2724
+ identifier: z.ZodOptional<z.ZodString>;
2725
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2726
+ }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
2727
+ type: z.ZodString;
2728
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2729
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2730
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2731
+ identifier: z.ZodOptional<z.ZodString>;
2732
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2733
+ }, z.ZodTypeAny, "passthrough">>, "many">>;
2734
+ }, {
2735
+ sub: z.ZodString;
2736
+ deviceId: z.ZodEffects<z.ZodString, `dev-${string}`, string>;
2737
+ requestUri: z.ZodOptional<z.ZodEffects<z.ZodString, `urn:ietf:params:oauth:request_uri:req-${string}`, string>>;
2738
+ }>, z.ZodTypeAny, "passthrough">, z.objectInputType<z.objectUtil.extendShape<{
2739
+ iss: z.ZodOptional<z.ZodString>;
2740
+ aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>>;
2741
+ sub: z.ZodOptional<z.ZodString>;
2742
+ exp: z.ZodOptional<z.ZodNumber>;
2743
+ nbf: z.ZodOptional<z.ZodNumber>;
2744
+ iat: z.ZodOptional<z.ZodNumber>;
2745
+ jti: z.ZodOptional<z.ZodString>;
2746
+ htm: z.ZodOptional<z.ZodString>;
2747
+ htu: z.ZodOptional<z.ZodString>;
2748
+ ath: z.ZodOptional<z.ZodString>;
2749
+ acr: z.ZodOptional<z.ZodString>;
2750
+ azp: z.ZodOptional<z.ZodString>;
2751
+ amr: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2752
+ cnf: z.ZodOptional<z.ZodObject<{
2815
2753
  kid: z.ZodOptional<z.ZodString>;
2816
2754
  jwk: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
2817
2755
  kty: z.ZodString;
@@ -3883,11 +3821,11 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
3883
3821
  jwe: z.ZodOptional<z.ZodString>;
3884
3822
  jku: z.ZodOptional<z.ZodString>;
3885
3823
  jkt: z.ZodOptional<z.ZodString>;
3886
- 'x5t#S256': z.ZodOptional<z.ZodString>;
3824
+ "x5t#S256": z.ZodOptional<z.ZodString>;
3887
3825
  osc: z.ZodOptional<z.ZodString>;
3888
3826
  }, "strip", z.ZodTypeAny, {
3889
3827
  kid?: string | undefined;
3890
- 'x5t#S256'?: string | undefined;
3828
+ "x5t#S256"?: string | undefined;
3891
3829
  jku?: string | undefined;
3892
3830
  jwk?: {
3893
3831
  kty: "RSA";
@@ -3990,7 +3928,7 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
3990
3928
  osc?: string | undefined;
3991
3929
  }, {
3992
3930
  kid?: string | undefined;
3993
- 'x5t#S256'?: string | undefined;
3931
+ "x5t#S256"?: string | undefined;
3994
3932
  jku?: string | undefined;
3995
3933
  jwk?: {
3996
3934
  kty: "RSA";
@@ -4091,13 +4029,80 @@ export declare const tokenClaimsSchema: z.ZodIntersection<z.ZodObject<{
4091
4029
  jwe?: string | undefined;
4092
4030
  jkt?: string | undefined;
4093
4031
  osc?: string | undefined;
4094
- }>>>;
4095
- at_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4096
- c_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4097
- s_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4032
+ }>>;
4033
+ client_id: z.ZodOptional<z.ZodString>;
4034
+ scope: z.ZodOptional<z.ZodString>;
4035
+ nonce: z.ZodOptional<z.ZodString>;
4036
+ at_hash: z.ZodOptional<z.ZodString>;
4037
+ c_hash: z.ZodOptional<z.ZodString>;
4038
+ s_hash: z.ZodOptional<z.ZodString>;
4039
+ auth_time: z.ZodOptional<z.ZodNumber>;
4040
+ name: z.ZodOptional<z.ZodString>;
4041
+ family_name: z.ZodOptional<z.ZodString>;
4042
+ given_name: z.ZodOptional<z.ZodString>;
4043
+ middle_name: z.ZodOptional<z.ZodString>;
4044
+ nickname: z.ZodOptional<z.ZodString>;
4045
+ preferred_username: z.ZodOptional<z.ZodString>;
4046
+ gender: z.ZodOptional<z.ZodString>;
4047
+ picture: z.ZodOptional<z.ZodString>;
4048
+ profile: z.ZodOptional<z.ZodString>;
4049
+ website: z.ZodOptional<z.ZodString>;
4050
+ birthdate: z.ZodOptional<z.ZodString>;
4051
+ zoneinfo: z.ZodOptional<z.ZodString>;
4052
+ locale: z.ZodOptional<z.ZodString>;
4053
+ updated_at: z.ZodOptional<z.ZodNumber>;
4054
+ email: z.ZodOptional<z.ZodString>;
4055
+ email_verified: z.ZodOptional<z.ZodBoolean>;
4056
+ phone_number: z.ZodOptional<z.ZodString>;
4057
+ phone_number_verified: z.ZodOptional<z.ZodBoolean>;
4058
+ address: z.ZodOptional<z.ZodObject<{
4059
+ formatted: z.ZodOptional<z.ZodString>;
4060
+ street_address: z.ZodOptional<z.ZodString>;
4061
+ locality: z.ZodOptional<z.ZodString>;
4062
+ region: z.ZodOptional<z.ZodString>;
4063
+ postal_code: z.ZodOptional<z.ZodString>;
4064
+ country: z.ZodOptional<z.ZodString>;
4065
+ }, "strip", z.ZodTypeAny, {
4066
+ formatted?: string | undefined;
4067
+ street_address?: string | undefined;
4068
+ locality?: string | undefined;
4069
+ region?: string | undefined;
4070
+ postal_code?: string | undefined;
4071
+ country?: string | undefined;
4072
+ }, {
4073
+ formatted?: string | undefined;
4074
+ street_address?: string | undefined;
4075
+ locality?: string | undefined;
4076
+ region?: string | undefined;
4077
+ postal_code?: string | undefined;
4078
+ country?: string | undefined;
4079
+ }>>;
4080
+ authorization_details: z.ZodOptional<z.ZodArray<z.ZodObject<{
4081
+ type: z.ZodString;
4082
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4083
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4084
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4085
+ identifier: z.ZodOptional<z.ZodString>;
4086
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4087
+ }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
4088
+ type: z.ZodString;
4089
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4090
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4091
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4092
+ identifier: z.ZodOptional<z.ZodString>;
4093
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4094
+ }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
4095
+ type: z.ZodString;
4096
+ locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4097
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4098
+ datatypes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4099
+ identifier: z.ZodOptional<z.ZodString>;
4100
+ privileges: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4101
+ }, z.ZodTypeAny, "passthrough">>, "many">>;
4098
4102
  }, {
4099
4103
  sub: z.ZodString;
4100
- client_id: z.ZodString;
4101
- }>, z.ZodTypeAny, "passthrough">>>;
4102
- export type TokenClaims = Simplify<z.infer<typeof tokenClaimsSchema>>;
4103
- //# sourceMappingURL=token-claims.d.ts.map
4104
+ deviceId: z.ZodEffects<z.ZodString, `dev-${string}`, string>;
4105
+ requestUri: z.ZodOptional<z.ZodEffects<z.ZodString, `urn:ietf:params:oauth:request_uri:req-${string}`, string>>;
4106
+ }>, z.ZodTypeAny, "passthrough">>;
4107
+ export type ApiTokenPayload = z.infer<typeof apiTokenPayloadSchema>;
4108
+ //# sourceMappingURL=api-token-payload.d.ts.map