@atproto/oauth-types 0.1.0

package/dist/oauth-authorization-server-metadata.d.ts

@@ -0,0 +1,428 @@
+import { z } from 'zod';
+/**
+ * @see {@link https://datatracker.ietf.org/doc/html/rfc8414}
+ */
+export declare const oauthAuthorizationServerMetadataSchema: z.ZodObject<{
+    issuer: z.ZodEffects<z.ZodString, string, string>;
+    claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
+    scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    subject_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    id_token_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    authorization_details_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    jwks_uri: z.ZodOptional<z.ZodString>;
+    authorization_endpoint: z.ZodString;
+    token_endpoint: z.ZodString;
+    token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    revocation_endpoint: z.ZodOptional<z.ZodString>;
+    revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    introspection_endpoint: z.ZodOptional<z.ZodString>;
+    introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    pushed_authorization_request_endpoint: z.ZodOptional<z.ZodString>;
+    pushed_authorization_request_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    require_pushed_authorization_requests: z.ZodOptional<z.ZodBoolean>;
+    userinfo_endpoint: z.ZodOptional<z.ZodString>;
+    end_session_endpoint: z.ZodOptional<z.ZodString>;
+    registration_endpoint: z.ZodOptional<z.ZodString>;
+    dpop_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    protected_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}>;
+export type OAuthAuthorizationServerMetadata = z.infer<typeof oauthAuthorizationServerMetadataSchema>;
+export declare const oauthAuthorizationServerMetadataValidator: z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    issuer: z.ZodEffects<z.ZodString, string, string>;
+    claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
+    scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    subject_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    id_token_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    authorization_details_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    jwks_uri: z.ZodOptional<z.ZodString>;
+    authorization_endpoint: z.ZodString;
+    token_endpoint: z.ZodString;
+    token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    revocation_endpoint: z.ZodOptional<z.ZodString>;
+    revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    introspection_endpoint: z.ZodOptional<z.ZodString>;
+    introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    pushed_authorization_request_endpoint: z.ZodOptional<z.ZodString>;
+    pushed_authorization_request_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    require_pushed_authorization_requests: z.ZodOptional<z.ZodBoolean>;
+    userinfo_endpoint: z.ZodOptional<z.ZodString>;
+    end_session_endpoint: z.ZodOptional<z.ZodString>;
+    registration_endpoint: z.ZodOptional<z.ZodString>;
+    dpop_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    protected_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}>, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}>, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}, {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri?: string | undefined;
+    claims_supported?: string[] | undefined;
+    claims_locales_supported?: string[] | undefined;
+    claims_parameter_supported?: boolean | undefined;
+    request_parameter_supported?: boolean | undefined;
+    request_uri_parameter_supported?: boolean | undefined;
+    require_request_uri_registration?: boolean | undefined;
+    scopes_supported?: string[] | undefined;
+    subject_types_supported?: string[] | undefined;
+    response_types_supported?: string[] | undefined;
+    response_modes_supported?: string[] | undefined;
+    grant_types_supported?: string[] | undefined;
+    code_challenge_methods_supported?: string[] | undefined;
+    ui_locales_supported?: string[] | undefined;
+    id_token_signing_alg_values_supported?: string[] | undefined;
+    display_values_supported?: string[] | undefined;
+    request_object_signing_alg_values_supported?: string[] | undefined;
+    authorization_response_iss_parameter_supported?: boolean | undefined;
+    authorization_details_types_supported?: string[] | undefined;
+    request_object_encryption_alg_values_supported?: string[] | undefined;
+    request_object_encryption_enc_values_supported?: string[] | undefined;
+    token_endpoint_auth_methods_supported?: string[] | undefined;
+    token_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    revocation_endpoint?: string | undefined;
+    revocation_endpoint_auth_methods_supported?: string[] | undefined;
+    revocation_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    introspection_endpoint?: string | undefined;
+    introspection_endpoint_auth_methods_supported?: string[] | undefined;
+    introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint?: string | undefined;
+    pushed_authorization_request_endpoint_auth_methods_supported?: string[] | undefined;
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+    require_pushed_authorization_requests?: boolean | undefined;
+    userinfo_endpoint?: string | undefined;
+    end_session_endpoint?: string | undefined;
+    registration_endpoint?: string | undefined;
+    dpop_signing_alg_values_supported?: string[] | undefined;
+    protected_resources?: string[] | undefined;
+}>;
+//# sourceMappingURL=oauth-authorization-server-metadata.d.ts.map

package/dist/oauth-authorization-server-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-server-metadata.d.ts","sourceRoot":"","sources":["../src/oauth-authorization-server-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;GAEG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqEjD,CAAA;AAEF,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAA;AAED,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBhD,CAAA"}

package/dist/oauth-authorization-server-metadata.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oauthAuthorizationServerMetadataValidator = exports.oauthAuthorizationServerMetadataSchema = void 0;
+const zod_1 = require("zod");
+const oauth_issuer_identifier_js_1 = require("./oauth-issuer-identifier.js");
+/**
+ * @see {@link https://datatracker.ietf.org/doc/html/rfc8414}
+ */
+exports.oauthAuthorizationServerMetadataSchema = zod_1.z.object({
+    issuer: oauth_issuer_identifier_js_1.oauthIssuerIdentifierSchema,
+    claims_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    claims_locales_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    claims_parameter_supported: zod_1.z.boolean().optional(),
+    request_parameter_supported: zod_1.z.boolean().optional(),
+    request_uri_parameter_supported: zod_1.z.boolean().optional(),
+    require_request_uri_registration: zod_1.z.boolean().optional(),
+    scopes_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    subject_types_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    response_types_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    response_modes_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    grant_types_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    code_challenge_methods_supported: zod_1.z.array(zod_1.z.string()).min(1).optional(),
+    ui_locales_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    id_token_signing_alg_values_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    display_values_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    request_object_signing_alg_values_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    authorization_response_iss_parameter_supported: zod_1.z.boolean().optional(),
+    authorization_details_types_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    request_object_encryption_alg_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    request_object_encryption_enc_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    jwks_uri: zod_1.z.string().url().optional(),
+    authorization_endpoint: zod_1.z.string().url(), // .optional(),
+    token_endpoint: zod_1.z.string().url(), // .optional(),
+    token_endpoint_auth_methods_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    token_endpoint_auth_signing_alg_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    revocation_endpoint: zod_1.z.string().url().optional(),
+    revocation_endpoint_auth_methods_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    revocation_endpoint_auth_signing_alg_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    introspection_endpoint: zod_1.z.string().url().optional(),
+    introspection_endpoint_auth_methods_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    introspection_endpoint_auth_signing_alg_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    pushed_authorization_request_endpoint: zod_1.z.string().url().optional(),
+    pushed_authorization_request_endpoint_auth_methods_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    pushed_authorization_request_endpoint_auth_signing_alg_values_supported: zod_1.z
+        .array(zod_1.z.string())
+        .optional(),
+    require_pushed_authorization_requests: zod_1.z.boolean().optional(),
+    userinfo_endpoint: zod_1.z.string().url().optional(),
+    end_session_endpoint: zod_1.z.string().url().optional(),
+    registration_endpoint: zod_1.z.string().url().optional(),
+    // https://datatracker.ietf.org/doc/html/rfc9449#section-5.1
+    dpop_signing_alg_values_supported: zod_1.z.array(zod_1.z.string()).optional(),
+    // https://datatracker.ietf.org/doc/html/draft-ietf-oauth-resource-metadata-05#section-4
+    protected_resources: zod_1.z.array(zod_1.z.string().url()).optional(),
+});
+exports.oauthAuthorizationServerMetadataValidator = exports.oauthAuthorizationServerMetadataSchema
+    .superRefine((data, ctx) => {
+    if (data.require_pushed_authorization_requests &&
+        !data.pushed_authorization_request_endpoint) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: '"pushed_authorization_request_endpoint" required when "require_pushed_authorization_requests" is true',
+        });
+    }
+})
+    .superRefine((data, ctx) => {
+    if (data.response_types_supported) {
+        if (!data.response_types_supported.includes('code')) {
+            ctx.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                message: 'Response type "code" is required',
+            });
+        }
+    }
+});
+//# sourceMappingURL=oauth-authorization-server-metadata.js.map

package/dist/oauth-authorization-server-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-server-metadata.js","sourceRoot":"","sources":["../src/oauth-authorization-server-metadata.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEvB,6EAA0E;AAE1E;;GAEG;AACU,QAAA,sCAAsC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,wDAA2B;IAEnC,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,0BAA0B,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClD,2BAA2B,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnD,+BAA+B,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvD,gCAAgC,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxD,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,uBAAuB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,gCAAgC,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,qCAAqC,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,2CAA2C,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,8CAA8C,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtE,qCAAqC,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,8CAA8C,EAAE,OAAC;SAC9C,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,8CAA8C,EAAE,OAAC;SAC9C,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IAEb,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAErC,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,eAAe;IAEzD,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,eAAe;IACjD,qCAAqC,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,gDAAgD,EAAE,OAAC;SAChD,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IAEb,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChD,0CAA0C,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1E,qDAAqD,EAAE,OAAC;SACrD,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IAEb,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnD,6CAA6C,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,wDAAwD,EAAE,OAAC;SACxD,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IAEb,qCAAqC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClE,4DAA4D,EAAE,OAAC;SAC5D,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,uEAAuE,EAAE,OAAC;SACvE,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IAEb,qCAAqC,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAE7D,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAElD,4DAA4D;IAC5D,iCAAiC,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAEjE,wFAAwF;IACxF,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAA;AAMW,QAAA,yCAAyC,GACpD,8CAAsC;KACnC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IACE,IAAI,CAAC,qCAAqC;QAC1C,CAAC,IAAI,CAAC,qCAAqC,EAC3C,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,uGAAuG;SAC1G,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,kCAAkC;aAC5C,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/oauth-client-credentials.d.ts

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+export declare const oauthClientCredentialsJwtBearerSchema: z.ZodObject<{
+    client_id: z.ZodString;
+    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
+    /**
+     * - "sub" the subject MUST be the "client_id" of the OAuth client
+     * - "iat" is required and MUST be less than one minute
+     * - "aud" must containing a value that identifies the authorization server
+     * - The JWT MAY contain a "jti" (JWT ID) claim that provides a unique identifier for the token.
+     * - Note that the authorization server may reject JWTs with an "exp" claim value that is unreasonably far in the future.
+     *
+     * @see {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-bearer-11#section-3}
+     */
+    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
+}, "strip", z.ZodTypeAny, {
+    client_id: string;
+    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+    client_assertion: `${string}.${string}.${string}`;
+}, {
+    client_id: string;
+    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+    client_assertion: string;
+}>;
+export declare const oauthClientCredentialsSecretPostSchema: z.ZodObject<{
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    client_id: string;
+    client_secret: string;
+}, {
+    client_id: string;
+    client_secret: string;
+}>;
+export declare const oauthClientCredentialsSchema: z.ZodUnion<[z.ZodObject<{
+    client_id: z.ZodString;
+    client_assertion_type: z.ZodLiteral<"urn:ietf:params:oauth:client-assertion-type:jwt-bearer">;
+    /**
+     * - "sub" the subject MUST be the "client_id" of the OAuth client
+     * - "iat" is required and MUST be less than one minute
+     * - "aud" must containing a value that identifies the authorization server
+     * - The JWT MAY contain a "jti" (JWT ID) claim that provides a unique identifier for the token.
+     * - Note that the authorization server may reject JWTs with an "exp" claim value that is unreasonably far in the future.
+     *
+     * @see {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-bearer-11#section-3}
+     */
+    client_assertion: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${string}.${string}.${string}`, string>;
+}, "strip", z.ZodTypeAny, {
+    client_id: string;
+    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+    client_assertion: `${string}.${string}.${string}`;
+}, {
+    client_id: string;
+    client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+    client_assertion: string;
+}>, z.ZodObject<{
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    client_id: string;
+    client_secret: string;
+}, {
+    client_id: string;
+    client_secret: string;
+}>]>;
+export type OAuthClientCredentials = z.infer<typeof oauthClientCredentialsSchema>;
+//# sourceMappingURL=oauth-client-credentials.d.ts.map

package/dist/oauth-client-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-credentials.d.ts","sourceRoot":"","sources":["../src/oauth-client-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,eAAO,MAAM,qCAAqC;;;IAGhD;;;;;;;;OAQG;;;;;;;;;;EAEH,CAAA;AAEF,eAAO,MAAM,sCAAsC;;;;;;;;;EAGjD,CAAA;AAEF,eAAO,MAAM,4BAA4B;;;IAjBvC;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;IAYH,CAAA;AAEF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAA"}

package/dist/oauth-client-credentials.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oauthClientCredentialsSchema = exports.oauthClientCredentialsSecretPostSchema = exports.oauthClientCredentialsJwtBearerSchema = void 0;
+const zod_1 = require("zod");
+const jwk_1 = require("@atproto/jwk");
+const oauth_client_id_js_1 = require("./oauth-client-id.js");
+const constants_js_1 = require("./constants.js");
+exports.oauthClientCredentialsJwtBearerSchema = zod_1.z.object({
+    client_id: oauth_client_id_js_1.oauthClientIdSchema,
+    client_assertion_type: zod_1.z.literal(constants_js_1.CLIENT_ASSERTION_TYPE_JWT_BEARER),
+    /**
+     * - "sub" the subject MUST be the "client_id" of the OAuth client
+     * - "iat" is required and MUST be less than one minute
+     * - "aud" must containing a value that identifies the authorization server
+     * - The JWT MAY contain a "jti" (JWT ID) claim that provides a unique identifier for the token.
+     * - Note that the authorization server may reject JWTs with an "exp" claim value that is unreasonably far in the future.
+     *
+     * @see {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-bearer-11#section-3}
+     */
+    client_assertion: jwk_1.signedJwtSchema,
+});
+exports.oauthClientCredentialsSecretPostSchema = zod_1.z.object({
+    client_id: oauth_client_id_js_1.oauthClientIdSchema,
+    client_secret: zod_1.z.string(),
+});
+exports.oauthClientCredentialsSchema = zod_1.z.union([
+    exports.oauthClientCredentialsJwtBearerSchema,
+    exports.oauthClientCredentialsSecretPostSchema,
+]);
+//# sourceMappingURL=oauth-client-credentials.js.map

package/dist/oauth-client-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-credentials.js","sourceRoot":"","sources":["../src/oauth-client-credentials.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,sCAA8C;AAE9C,6DAA0D;AAC1D,iDAAiE;AAEpD,QAAA,qCAAqC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5D,SAAS,EAAE,wCAAmB;IAC9B,qBAAqB,EAAE,OAAC,CAAC,OAAO,CAAC,+CAAgC,CAAC;IAClE;;;;;;;;OAQG;IACH,gBAAgB,EAAE,qBAAe;CAClC,CAAC,CAAA;AAEW,QAAA,sCAAsC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7D,SAAS,EAAE,wCAAmB;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAA;AAEW,QAAA,4BAA4B,GAAG,OAAC,CAAC,KAAK,CAAC;IAClD,6CAAqC;IACrC,8CAAsC;CACvC,CAAC,CAAA"}

package/dist/oauth-client-id-discoverable.d.ts

@@ -0,0 +1,8 @@
+import { OAuthClientId } from './oauth-client-id.js';
+/**
+ * @see {@link https://drafts.aaronpk.com/draft-parecki-oauth-client-id-metadata-document/draft-parecki-oauth-client-id-metadata-document.html}
+ */
+export type OAuthClientIdDiscoverable = OAuthClientId & `https://${string}`;
+export declare function isOAuthClientIdDiscoverable<C extends OAuthClientId>(clientId: C): clientId is C & OAuthClientIdDiscoverable;
+export declare function parseOAuthDiscoverableClientId(clientId: OAuthClientId): URL;
+//# sourceMappingURL=oauth-client-id-discoverable.d.ts.map

package/dist/oauth-client-id-discoverable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-id-discoverable.d.ts","sourceRoot":"","sources":["../src/oauth-client-id-discoverable.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,aAAa,GAAG,WAAW,MAAM,EAAE,CAAA;AAE3E,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,aAAa,EACjE,QAAQ,EAAE,CAAC,GACV,QAAQ,IAAI,CAAC,GAAG,yBAAyB,CAO3C;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,aAAa,GAAG,GAAG,CA6C3E"}