@atproto/oauth-types 0.7.3 → 0.7.4

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @atproto/oauth-types
 
+## 0.7.4
+
+### Patch Changes
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update TypeScript build to rely on references to composite internal projects
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Bundle only necessary files in the NPM tarball, including the `CHANGELOG.md` and `README.md` files (if present).
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Build with `noImplicitAny` enabled
+
+- Updated dependencies [[`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07), [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07), [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07)]:
+  - @atproto/jwk@0.7.3
+  - @atproto/did@0.5.3
+
 ## 0.7.3
 
 ### Patch Changes

package/dist/util.d.ts

@@ -4,7 +4,7 @@ export type LoopbackHost = 'localhost' | '127.0.0.1' | '[::1]';
 export declare function isLoopbackHost(host: unknown): host is LoopbackHost;
 export declare function isLocalHostname(hostname: string): boolean;
 export declare function safeUrl(input: URL | string): URL | null;
-export declare function extractUrlPath(url: any): any;
+export declare function extractUrlPath(url: string): string;
 export declare const jsonObjectPreprocess: (val: unknown) => any;
 export declare const numberPreprocess: (val: unknown) => unknown;
 /**

package/dist/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,qDAWpB,CAAA;AAEJ,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,WAQ5C;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,CAAA;AAE9D,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAElE;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAYzD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAMvD;AAED,wBAAgB,cAAc,CAAC,GAAG,KAAA,OAsCjC;AAED,eAAO,MAAM,oBAAoB,QAAS,OAAO,QAUhD,CAAA;AAED,eAAO,MAAM,gBAAgB,QAAS,OAAO,KAAG,OAM/C,CAAA;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,WAGlE;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,WAExD;AAED,wBAAgB,OAAO,CAAC,CAAC,EACvB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,GAC7B,SAAS,GAAG,SAAS,CAAC,EAAE,CAI1B;AAED,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,MAAM,IAClD,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,KAAK,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,EAAE,CAAA;AAEpD,eAAO,MAAM,qBAAqB,GAAI,KAAK,SAAS,MAAM,SACjD,KAAK,SACL,MAAM,KACZ,KAAK,IAAI,mBAAmB,CAAC,KAAK,CA+BpC,CAAA"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,qDAWpB,CAAA;AAEJ,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,WAQ5C;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,CAAA;AAE9D,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAElE;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAYzD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAMvD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,UAsCzC;AAED,eAAO,MAAM,oBAAoB,QAAS,OAAO,QAUhD,CAAA;AAED,eAAO,MAAM,gBAAgB,QAAS,OAAO,KAAG,OAM/C,CAAA;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,WAGlE;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,WAExD;AAED,wBAAgB,OAAO,CAAC,CAAC,EACvB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,GAC7B,SAAS,GAAG,SAAS,CAAC,EAAE,CAI1B;AAED,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,MAAM,IAClD,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,KAAK,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,EAAE,CAAA;AAEpD,eAAO,MAAM,qBAAqB,GAAI,KAAK,SAAS,MAAM,SACjD,KAAK,SACL,MAAM,KACZ,KAAK,IAAI,mBAAmB,CAAC,KAAK,CA+BpC,CAAA"}

package/dist/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW;AACtB,mEAAmE;AACnE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;IACvB,oDAAoD;IACpD,CAAC,CAAC,MAAc,EAAW,EAAE;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;YACf,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;AAEJ,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO;IACP,IAAI,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvD,OAAO;IACP,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnE,OAAO,KAAK,CAAA;AACd,CAAC;AAID,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACvC,OAAO,CACL,GAAG,KAAK,MAAM;QACd,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,WAAW;QACnB,GAAG,KAAK,SAAS;QACjB,GAAG,KAAK,SAAS,CAClB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAmB;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG;IAChC,uEAAuE;IACvE,kCAAkC;IAClC,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CAAC,CAAA;IACR,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAEnD,MAAM,WAAW,GACf,WAAW,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,OAAO,CAAC;QAC7D,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,CAAC,CAAC,CAAA;IAER,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,CAAC;QACZ,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,GAAG,CAAC,MAAM;YACZ,CAAC,CAAC,WAAW;QACf,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAEhD,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;IAE5E,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAA;IAChD,CAAC;IAED,OAAO,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAE,EAAE;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAW,EAAE;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IAC1C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAI,CAAe,EAAE,CAAe;IACjE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAwB,IAAO;IACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,KAA8B;IAE9B,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,sCAAsC;IAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAKD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAY,EACZ,KAAa,EACwB,EAAE;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IAE3E,wBAAwB;IACxB,0CAA0C;IAE1C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAA;IAChC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAA;IAEhC,IAAI,WAAW,GAAG,WAAW;QAAE,OAAO,KAAK,CAAA;IAE3C,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,IAAI,MAAc,CAAA;IAElB,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,GAAG,WAAW,CAAA;QAE1B;QACE,oCAAoC;QACpC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/C,8BAA8B;YAC9B,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAC3D,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["export const canParseUrl =\n  // eslint-disable-next-line n/no-unsupported-features/node-builtins\n  URL.canParse?.bind(URL) ??\n  // URL.canParse is not available in Node.js < 18.7.0\n  ((urlStr: string): boolean => {\n    try {\n      new URL(urlStr)\n      return true\n    } catch {\n      return false\n    }\n  })\n\nexport function isHostnameIP(hostname: string) {\n  // IPv4\n  if (hostname.match(/^\\d+\\.\\d+\\.\\d+\\.\\d+$/)) return true\n\n  // IPv6\n  if (hostname.startsWith('[') && hostname.endsWith(']')) return true\n\n  return false\n}\n\nexport type LoopbackHost = 'localhost' | '127.0.0.1' | '[::1]'\n\nexport function isLoopbackHost(host: unknown): host is LoopbackHost {\n  return host === 'localhost' || host === '127.0.0.1' || host === '[::1]'\n}\n\nexport function isLocalHostname(hostname: string): boolean {\n  const parts = hostname.split('.')\n  if (parts.length < 2) return true\n\n  const tld = parts.at(-1)!.toLowerCase()\n  return (\n    tld === 'test' ||\n    tld === 'local' ||\n    tld === 'localhost' ||\n    tld === 'invalid' ||\n    tld === 'example'\n  )\n}\n\nexport function safeUrl(input: URL | string): URL | null {\n  try {\n    return new URL(input)\n  } catch {\n    return null\n  }\n}\n\nexport function extractUrlPath(url) {\n  // Extracts the path from a URL, without relying on the URL constructor\n  // (because it normalizes the URL)\n  const endOfProtocol = url.startsWith('https://')\n    ? 8\n    : url.startsWith('http://')\n      ? 7\n      : -1\n  if (endOfProtocol === -1) {\n    throw new TypeError('URL must use the \"https:\" or \"http:\" protocol')\n  }\n\n  const hashIdx = url.indexOf('#', endOfProtocol)\n  const questionIdx = url.indexOf('?', endOfProtocol)\n\n  const queryStrIdx =\n    questionIdx !== -1 && (hashIdx === -1 || questionIdx < hashIdx)\n      ? questionIdx\n      : -1\n\n  const pathEnd =\n    hashIdx === -1\n      ? queryStrIdx === -1\n        ? url.length\n        : queryStrIdx\n      : queryStrIdx === -1\n        ? hashIdx\n        : Math.min(hashIdx, queryStrIdx)\n\n  const slashIdx = url.indexOf('/', endOfProtocol)\n\n  const pathStart = slashIdx === -1 || slashIdx > pathEnd ? pathEnd : slashIdx\n\n  if (endOfProtocol === pathStart) {\n    throw new TypeError('URL must contain a host')\n  }\n\n  return url.substring(pathStart, pathEnd)\n}\n\nexport const jsonObjectPreprocess = (val: unknown) => {\n  if (typeof val === 'string' && val.startsWith('{') && val.endsWith('}')) {\n    try {\n      return JSON.parse(val)\n    } catch {\n      return val\n    }\n  }\n\n  return val\n}\n\nexport const numberPreprocess = (val: unknown): unknown => {\n  if (typeof val === 'string') {\n    const number = Number(val)\n    if (!Number.isNaN(number)) return number\n  }\n  return val\n}\n\n/**\n * Returns true if the two arrays contain the same elements, regardless of order\n * or duplicates.\n */\nexport function arrayEquivalent<T>(a: readonly T[], b: readonly T[]) {\n  if (a === b) return true\n  return a.every(includedIn, b) && b.every(includedIn, a)\n}\n\nexport function includedIn<T>(this: readonly T[], item: T) {\n  return this.includes(item)\n}\n\nexport function asArray<T>(\n  value: Iterable<T> | undefined,\n): undefined | readonly T[] {\n  if (value == null) return undefined\n  if (Array.isArray(value)) return value // already a (possibly readonly) array\n  return Array.from(value)\n}\n\nexport type SpaceSeparatedValue<Value extends string> =\n  `${'' | `${string} `}${Value}${'' | ` ${string}`}`\n\nexport const isSpaceSeparatedValue = <Value extends string>(\n  value: Value,\n  input: string,\n): input is SpaceSeparatedValue<Value> => {\n  if (value.length === 0) throw new TypeError('Value cannot be empty')\n  if (value.includes(' ')) throw new TypeError('Value cannot contain spaces')\n\n  // Optimized version of:\n  // return input.split(' ').includes(value)\n\n  const inputLength = input.length\n  const valueLength = value.length\n\n  if (inputLength < valueLength) return false\n\n  let idx = input.indexOf(value)\n  let idxEnd: number\n\n  while (idx !== -1) {\n    idxEnd = idx + valueLength\n\n    if (\n      // at beginning or preceded by space\n      (idx === 0 || input.charCodeAt(idx - 1) === 32) &&\n      // at end or followed by space\n      (idxEnd === inputLength || input.charCodeAt(idxEnd) === 32)\n    ) {\n      return true\n    }\n\n    idx = input.indexOf(value, idxEnd + 1)\n  }\n\n  return false\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW;AACtB,mEAAmE;AACnE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;IACvB,oDAAoD;IACpD,CAAC,CAAC,MAAc,EAAW,EAAE;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;YACf,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;AAEJ,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO;IACP,IAAI,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvD,OAAO;IACP,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnE,OAAO,KAAK,CAAA;AACd,CAAC;AAID,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACvC,OAAO,CACL,GAAG,KAAK,MAAM;QACd,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,WAAW;QACnB,GAAG,KAAK,SAAS;QACjB,GAAG,KAAK,SAAS,CAClB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAmB;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,uEAAuE;IACvE,kCAAkC;IAClC,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CAAC,CAAA;IACR,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAEnD,MAAM,WAAW,GACf,WAAW,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,OAAO,CAAC;QAC7D,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,CAAC,CAAC,CAAA;IAER,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,CAAC;QACZ,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,GAAG,CAAC,MAAM;YACZ,CAAC,CAAC,WAAW;QACf,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAEhD,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;IAE5E,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAA;IAChD,CAAC;IAED,OAAO,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAE,EAAE;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAW,EAAE;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IAC1C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAI,CAAe,EAAE,CAAe;IACjE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAwB,IAAO;IACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,KAA8B;IAE9B,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,sCAAsC;IAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAKD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAY,EACZ,KAAa,EACwB,EAAE;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IAE3E,wBAAwB;IACxB,0CAA0C;IAE1C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAA;IAChC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAA;IAEhC,IAAI,WAAW,GAAG,WAAW;QAAE,OAAO,KAAK,CAAA;IAE3C,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,IAAI,MAAc,CAAA;IAElB,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,GAAG,WAAW,CAAA;QAE1B;QACE,oCAAoC;QACpC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/C,8BAA8B;YAC9B,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAC3D,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["export const canParseUrl =\n  // eslint-disable-next-line n/no-unsupported-features/node-builtins\n  URL.canParse?.bind(URL) ??\n  // URL.canParse is not available in Node.js < 18.7.0\n  ((urlStr: string): boolean => {\n    try {\n      new URL(urlStr)\n      return true\n    } catch {\n      return false\n    }\n  })\n\nexport function isHostnameIP(hostname: string) {\n  // IPv4\n  if (hostname.match(/^\\d+\\.\\d+\\.\\d+\\.\\d+$/)) return true\n\n  // IPv6\n  if (hostname.startsWith('[') && hostname.endsWith(']')) return true\n\n  return false\n}\n\nexport type LoopbackHost = 'localhost' | '127.0.0.1' | '[::1]'\n\nexport function isLoopbackHost(host: unknown): host is LoopbackHost {\n  return host === 'localhost' || host === '127.0.0.1' || host === '[::1]'\n}\n\nexport function isLocalHostname(hostname: string): boolean {\n  const parts = hostname.split('.')\n  if (parts.length < 2) return true\n\n  const tld = parts.at(-1)!.toLowerCase()\n  return (\n    tld === 'test' ||\n    tld === 'local' ||\n    tld === 'localhost' ||\n    tld === 'invalid' ||\n    tld === 'example'\n  )\n}\n\nexport function safeUrl(input: URL | string): URL | null {\n  try {\n    return new URL(input)\n  } catch {\n    return null\n  }\n}\n\nexport function extractUrlPath(url: string) {\n  // Extracts the path from a URL, without relying on the URL constructor\n  // (because it normalizes the URL)\n  const endOfProtocol = url.startsWith('https://')\n    ? 8\n    : url.startsWith('http://')\n      ? 7\n      : -1\n  if (endOfProtocol === -1) {\n    throw new TypeError('URL must use the \"https:\" or \"http:\" protocol')\n  }\n\n  const hashIdx = url.indexOf('#', endOfProtocol)\n  const questionIdx = url.indexOf('?', endOfProtocol)\n\n  const queryStrIdx =\n    questionIdx !== -1 && (hashIdx === -1 || questionIdx < hashIdx)\n      ? questionIdx\n      : -1\n\n  const pathEnd =\n    hashIdx === -1\n      ? queryStrIdx === -1\n        ? url.length\n        : queryStrIdx\n      : queryStrIdx === -1\n        ? hashIdx\n        : Math.min(hashIdx, queryStrIdx)\n\n  const slashIdx = url.indexOf('/', endOfProtocol)\n\n  const pathStart = slashIdx === -1 || slashIdx > pathEnd ? pathEnd : slashIdx\n\n  if (endOfProtocol === pathStart) {\n    throw new TypeError('URL must contain a host')\n  }\n\n  return url.substring(pathStart, pathEnd)\n}\n\nexport const jsonObjectPreprocess = (val: unknown) => {\n  if (typeof val === 'string' && val.startsWith('{') && val.endsWith('}')) {\n    try {\n      return JSON.parse(val)\n    } catch {\n      return val\n    }\n  }\n\n  return val\n}\n\nexport const numberPreprocess = (val: unknown): unknown => {\n  if (typeof val === 'string') {\n    const number = Number(val)\n    if (!Number.isNaN(number)) return number\n  }\n  return val\n}\n\n/**\n * Returns true if the two arrays contain the same elements, regardless of order\n * or duplicates.\n */\nexport function arrayEquivalent<T>(a: readonly T[], b: readonly T[]) {\n  if (a === b) return true\n  return a.every(includedIn, b) && b.every(includedIn, a)\n}\n\nexport function includedIn<T>(this: readonly T[], item: T) {\n  return this.includes(item)\n}\n\nexport function asArray<T>(\n  value: Iterable<T> | undefined,\n): undefined | readonly T[] {\n  if (value == null) return undefined\n  if (Array.isArray(value)) return value // already a (possibly readonly) array\n  return Array.from(value)\n}\n\nexport type SpaceSeparatedValue<Value extends string> =\n  `${'' | `${string} `}${Value}${'' | ` ${string}`}`\n\nexport const isSpaceSeparatedValue = <Value extends string>(\n  value: Value,\n  input: string,\n): input is SpaceSeparatedValue<Value> => {\n  if (value.length === 0) throw new TypeError('Value cannot be empty')\n  if (value.includes(' ')) throw new TypeError('Value cannot contain spaces')\n\n  // Optimized version of:\n  // return input.split(' ').includes(value)\n\n  const inputLength = input.length\n  const valueLength = value.length\n\n  if (inputLength < valueLength) return false\n\n  let idx = input.indexOf(value)\n  let idxEnd: number\n\n  while (idx !== -1) {\n    idxEnd = idx + valueLength\n\n    if (\n      // at beginning or preceded by space\n      (idx === 0 || input.charCodeAt(idx - 1) === 32) &&\n      // at end or followed by space\n      (idxEnd === inputLength || input.charCodeAt(idxEnd) === 32)\n    ) {\n      return true\n    }\n\n    idx = input.indexOf(value, idxEnd + 1)\n  }\n\n  return false\n}\n"]}

package/package.json

@@ -1,9 +1,6 @@
 {
   "name": "@atproto/oauth-types",
-  "version": "0.7.3",
-  "engines": {
-    "node": ">=22"
-  },
+  "version": "0.7.4",
   "license": "MIT",
   "description": "OAuth typing & validation library",
   "keywords": [
@@ -18,6 +15,11 @@
     "url": "https://github.com/bluesky-social/atproto",
     "directory": "packages/oauth/oauth-types"
   },
+  "files": [
+    "./dist",
+    "./README.md",
+    "./CHANGELOG.md"
+  ],
   "type": "module",
   "exports": {
     ".": {
@@ -25,12 +27,14 @@
       "default": "./dist/index.js"
     }
   },
+  "engines": {
+    "node": ">=22"
+  },
   "dependencies": {
     "zod": "^3.23.8",
-    "@atproto/did": "^0.5.2",
-    "@atproto/jwk": "^0.7.2"
+    "@atproto/did": "^0.5.3",
+    "@atproto/jwk": "^0.7.3"
   },
-  "devDependencies": {},
   "scripts": {
     "build": "tsgo --build tsconfig.build.json"
   }

package/src/atproto-loopback-client-id.ts

@@ -1,78 +0,0 @@
-import { DEFAULT_LOOPBACK_CLIENT_REDIRECT_URIS } from './atproto-loopback-client-redirect-uris.js'
-import {
-  AtprotoOAuthScope,
-  DEFAULT_ATPROTO_OAUTH_SCOPE,
-  asAtprotoOAuthScope,
-  isAtprotoOAuthScope,
-} from './atproto-oauth-scope.js'
-import {
-  LOOPBACK_CLIENT_ID_ORIGIN,
-  OAuthClientIdLoopback,
-  parseOAuthLoopbackClientId,
-} from './oauth-client-id-loopback.js'
-import {
-  OAuthLoopbackRedirectURI,
-  oauthLoopbackClientRedirectUriSchema,
-} from './oauth-redirect-uri.js'
-import { arrayEquivalent, asArray } from './util.js'
-
-export type OAuthLoopbackClientIdConfig = {
-  scope?: string
-  redirect_uris?: Iterable<string>
-}
-
-export function buildAtprotoLoopbackClientId(
-  config?: OAuthLoopbackClientIdConfig,
-): OAuthClientIdLoopback {
-  if (config) {
-    const params = new URLSearchParams()
-
-    const { scope } = config
-    if (scope != null && scope !== DEFAULT_ATPROTO_OAUTH_SCOPE) {
-      params.set('scope', asAtprotoOAuthScope(scope))
-    }
-
-    const redirectUris = asArray(config.redirect_uris)
-    if (
-      redirectUris &&
-      !arrayEquivalent(redirectUris, DEFAULT_LOOPBACK_CLIENT_REDIRECT_URIS)
-    ) {
-      if (!redirectUris.length) {
-        throw new TypeError(`Unexpected empty "redirect_uris" config`)
-      }
-      for (const uri of redirectUris) {
-        params.append(
-          'redirect_uri',
-          oauthLoopbackClientRedirectUriSchema.parse(uri),
-        )
-      }
-    }
-
-    if (params.size) {
-      return `${LOOPBACK_CLIENT_ID_ORIGIN}?${params.toString()}`
-    }
-  }
-
-  return LOOPBACK_CLIENT_ID_ORIGIN
-}
-
-export type AtprotoLoopbackClientIdParams = {
-  scope: AtprotoOAuthScope
-  redirect_uris: [OAuthLoopbackRedirectURI, ...OAuthLoopbackRedirectURI[]]
-}
-
-export function parseAtprotoLoopbackClientId(
-  clientId: string,
-): AtprotoLoopbackClientIdParams {
-  const { scope = DEFAULT_ATPROTO_OAUTH_SCOPE, redirect_uris } =
-    parseOAuthLoopbackClientId(clientId)
-  if (!isAtprotoOAuthScope(scope)) {
-    throw new TypeError(
-      'ATProto Loopback ClientID must include "atproto" scope',
-    )
-  }
-  return {
-    scope,
-    redirect_uris: redirect_uris ?? [...DEFAULT_LOOPBACK_CLIENT_REDIRECT_URIS],
-  }
-}

package/src/atproto-loopback-client-metadata.ts

@@ -1,47 +0,0 @@
-import {
-  AtprotoLoopbackClientIdParams,
-  OAuthLoopbackClientIdConfig,
-  buildAtprotoLoopbackClientId,
-  parseAtprotoLoopbackClientId,
-} from './atproto-loopback-client-id.js'
-import { AtprotoOAuthScope } from './atproto-oauth-scope.js'
-import { OAuthClientIdLoopback } from './oauth-client-id-loopback.js'
-import { OAuthClientMetadataInput } from './oauth-client-metadata.js'
-import { OAuthLoopbackRedirectURI } from './oauth-redirect-uri.js'
-
-export type AtprotoLoopbackClientMetadata = OAuthClientMetadataInput & {
-  client_id: OAuthClientIdLoopback
-  scope: AtprotoOAuthScope
-  redirect_uris: [OAuthLoopbackRedirectURI, ...OAuthLoopbackRedirectURI[]]
-}
-
-export function atprotoLoopbackClientMetadata(
-  clientId: string,
-): AtprotoLoopbackClientMetadata {
-  const params = parseAtprotoLoopbackClientId(clientId)
-  // Safe to cast because parseAtprotoLoopbackClientId ensures it's a loopback ID
-  return buildMetadataInternal(clientId as OAuthClientIdLoopback, params)
-}
-
-export function buildAtprotoLoopbackClientMetadata(
-  config: OAuthLoopbackClientIdConfig,
-): AtprotoLoopbackClientMetadata {
-  const clientId = buildAtprotoLoopbackClientId(config)
-  return buildMetadataInternal(clientId, parseAtprotoLoopbackClientId(clientId))
-}
-
-function buildMetadataInternal(
-  clientId: OAuthClientIdLoopback,
-  clientParams: AtprotoLoopbackClientIdParams,
-): AtprotoLoopbackClientMetadata {
-  return {
-    client_id: clientId,
-    scope: clientParams.scope,
-    redirect_uris: clientParams.redirect_uris,
-    response_types: ['code'],
-    grant_types: ['authorization_code', 'refresh_token'],
-    token_endpoint_auth_method: 'none',
-    application_type: 'native',
-    dpop_bound_access_tokens: true,
-  }
-}

package/src/atproto-loopback-client-redirect-uris.ts

@@ -1,4 +0,0 @@
-export const DEFAULT_LOOPBACK_CLIENT_REDIRECT_URIS = Object.freeze([
-  `http://127.0.0.1/`,
-  `http://[::1]/`,
-] as const)

package/src/atproto-oauth-scope.ts

@@ -1,34 +0,0 @@
-import { z } from 'zod'
-import { OAuthScope, isOAuthScope } from './oauth-scope.js'
-import { SpaceSeparatedValue, isSpaceSeparatedValue } from './util.js'
-
-export const ATPROTO_SCOPE_VALUE = 'atproto'
-export type AtprotoScopeValue = typeof ATPROTO_SCOPE_VALUE
-
-export type AtprotoOAuthScope = OAuthScope &
-  SpaceSeparatedValue<AtprotoScopeValue>
-
-export function isAtprotoOAuthScope(input: string): input is AtprotoOAuthScope {
-  return (
-    isOAuthScope(input) && isSpaceSeparatedValue(ATPROTO_SCOPE_VALUE, input)
-  )
-}
-
-export function asAtprotoOAuthScope<I extends string>(input: I) {
-  if (isAtprotoOAuthScope(input)) return input
-  throw new TypeError(`Value must contain "${ATPROTO_SCOPE_VALUE}" scope value`)
-}
-
-export function assertAtprotoOAuthScope(
-  input: string,
-): asserts input is AtprotoOAuthScope {
-  void asAtprotoOAuthScope(input)
-}
-
-export const atprotoOAuthScopeSchema = z.string().refine(isAtprotoOAuthScope, {
-  message: 'Invalid ATProto OAuth scope',
-})
-
-// Default scope is for reading identity (did) only
-export const DEFAULT_ATPROTO_OAUTH_SCOPE =
-  ATPROTO_SCOPE_VALUE satisfies AtprotoOAuthScope

package/src/atproto-oauth-token-response.ts

@@ -1,16 +0,0 @@
-import { TypeOf, z } from 'zod'
-import { atprotoDidSchema } from '@atproto/did'
-import { atprotoOAuthScopeSchema } from './atproto-oauth-scope.js'
-import { oauthTokenResponseSchema } from './oauth-token-response.js'
-
-export const atprotoOAuthTokenResponseSchema = oauthTokenResponseSchema.extend({
-  token_type: z.literal('DPoP'),
-  sub: atprotoDidSchema,
-  scope: atprotoOAuthScopeSchema,
-  // OpenID is not compatible with atproto identities
-  id_token: z.never().optional(),
-})
-
-export type AtprotoOAuthTokenResponse = TypeOf<
-  typeof atprotoOAuthTokenResponseSchema
->

package/src/constants.ts

@@ -1,2 +0,0 @@
-export const CLIENT_ASSERTION_TYPE_JWT_BEARER =
-  'urn:ietf:params:oauth:client-assertion-type:jwt-bearer'

package/src/index.ts

@@ -1,50 +0,0 @@
-export * from './constants.js'
-export * from './uri.js'
-export * from './util.js'
-
-export * from './atproto-loopback-client-id.js'
-export * from './atproto-loopback-client-metadata.js'
-export * from './atproto-loopback-client-redirect-uris.js'
-export * from './atproto-oauth-scope.js'
-export * from './atproto-oauth-token-response.js'
-export * from './oauth-access-token.js'
-export * from './oauth-authorization-code-grant-token-request.js'
-export * from './oauth-authorization-details.js'
-export * from './oauth-authorization-request-jar.js'
-export * from './oauth-authorization-request-par.js'
-export * from './oauth-authorization-request-parameters.js'
-export * from './oauth-authorization-request-query.js'
-export * from './oauth-authorization-request-uri.js'
-export * from './oauth-authorization-response-error.js'
-export * from './oauth-authorization-server-metadata.js'
-export * from './oauth-client-credentials-grant-token-request.js'
-export * from './oauth-client-credentials.js'
-export * from './oauth-client-id-discoverable.js'
-export * from './oauth-client-id-loopback.js'
-export * from './oauth-client-id.js'
-export * from './oauth-client-metadata.js'
-export * from './oauth-endpoint-auth-method.js'
-export * from './oauth-endpoint-name.js'
-export * from './oauth-grant-type.js'
-export * from './oauth-introspection-response.js'
-export * from './oauth-issuer-identifier.js'
-export * from './oauth-par-response.js'
-export * from './oauth-password-grant-token-request.js'
-export * from './oauth-prompt-mode.js'
-export * from './oauth-protected-resource-metadata.js'
-export * from './oauth-redirect-uri.js'
-export * from './oauth-refresh-token-grant-token-request.js'
-export * from './oauth-refresh-token.js'
-export * from './oauth-request-uri.js'
-export * from './oauth-response-mode.js'
-export * from './oauth-response-type.js'
-export * from './oauth-scope.js'
-export * from './oauth-token-identification.js'
-export * from './oauth-token-request.js'
-export * from './oauth-token-response.js'
-export * from './oauth-token-type.js'
-export * from './oidc-authorization-error-response.js'
-export * from './oidc-claims-parameter.js'
-export * from './oidc-claims-properties.js'
-export * from './oidc-entity-type.js'
-export * from './oidc-userinfo.js'

package/src/oauth-access-token.ts

@@ -1,4 +0,0 @@
-import { z } from 'zod'
-
-export const oauthAccessTokenSchema = z.string().min(1)
-export type OAuthAccessToken = z.infer<typeof oauthAccessTokenSchema>

package/src/oauth-authorization-code-grant-token-request.ts

@@ -1,19 +0,0 @@
-import { z } from 'zod'
-import { oauthRedirectUriSchema } from './oauth-redirect-uri.js'
-
-export const oauthAuthorizationCodeGrantTokenRequestSchema = z.object({
-  grant_type: z.literal('authorization_code'),
-  code: z.string().min(1),
-  redirect_uri: oauthRedirectUriSchema,
-  /** @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.1} */
-  code_verifier: z
-    .string()
-    .min(43)
-    .max(128)
-    .regex(/^[a-zA-Z0-9-._~]+$/)
-    .optional(),
-})
-
-export type OAuthAuthorizationCodeGrantTokenRequest = z.infer<
-  typeof oauthAuthorizationCodeGrantTokenRequestSchema
->

package/src/oauth-authorization-details.ts

@@ -1,48 +0,0 @@
-import { z } from 'zod'
-import { dangerousUriSchema } from './uri.js'
-
-/**
- * @see {@link https://datatracker.ietf.org/doc/html/rfc9396#section-2 | RFC 9396, Section 2}
- */
-export const oauthAuthorizationDetailSchema = z.object({
-  type: z.string(),
-  /**
-   * An array of strings representing the location of the resource or RS. These
-   * strings are typically URIs identifying the location of the RS.
-   */
-  locations: z.array(dangerousUriSchema).optional(),
-  /**
-   * An array of strings representing the kinds of actions to be taken at the
-   * resource.
-   */
-  actions: z.array(z.string()).optional(),
-  /**
-   * An array of strings representing the kinds of data being requested from the
-   * resource.
-   */
-  datatypes: z.array(z.string()).optional(),
-  /**
-   * A string identifier indicating a specific resource available at the API.
-   */
-  identifier: z.string().optional(),
-  /**
-   * An array of strings representing the types or levels of privilege being
-   * requested at the resource.
-   */
-  privileges: z.array(z.string()).optional(),
-})
-
-export type OAuthAuthorizationDetail = z.infer<
-  typeof oauthAuthorizationDetailSchema
->
-
-/**
- * @see {@link https://datatracker.ietf.org/doc/html/rfc9396#section-2 | RFC 9396, Section 2}
- */
-export const oauthAuthorizationDetailsSchema = z.array(
-  oauthAuthorizationDetailSchema,
-)
-
-export type OAuthAuthorizationDetails = z.infer<
-  typeof oauthAuthorizationDetailsSchema
->

package/src/oauth-authorization-request-jar.ts

@@ -1,16 +0,0 @@
-import { z } from 'zod'
-import { signedJwtSchema, unsignedJwtSchema } from '@atproto/jwk'
-
-export const oauthAuthorizationRequestJarSchema = z.object({
-  /**
-   * AuthorizationRequest inside a JWT:
-   * - "iat" is required and **MUST** be less than one minute
-   *
-   * @see {@link https://datatracker.ietf.org/doc/html/rfc9101}
-   */
-  request: z.union([signedJwtSchema, unsignedJwtSchema]),
-})
-
-export type OAuthAuthorizationRequestJar = z.infer<
-  typeof oauthAuthorizationRequestJarSchema
->

package/src/oauth-authorization-request-par.ts

@@ -1,12 +0,0 @@
-import { z } from 'zod'
-import { oauthAuthorizationRequestJarSchema } from './oauth-authorization-request-jar.js'
-import { oauthAuthorizationRequestParametersSchema } from './oauth-authorization-request-parameters.js'
-
-export const oauthAuthorizationRequestParSchema = z.union([
-  oauthAuthorizationRequestParametersSchema,
-  oauthAuthorizationRequestJarSchema,
-])
-
-export type OAuthAuthorizationRequestPar = z.infer<
-  typeof oauthAuthorizationRequestParSchema
->

package/src/oauth-authorization-request-parameters.ts

@@ -1,100 +0,0 @@
-import { z } from 'zod'
-import { signedJwtSchema } from '@atproto/jwk'
-import { oauthAuthorizationDetailsSchema } from './oauth-authorization-details.js'
-import { oauthClientIdSchema } from './oauth-client-id.js'
-import { oauthCodeChallengeMethodSchema } from './oauth-code-challenge-method.js'
-import { oauthPromptModeSchema } from './oauth-prompt-mode.js'
-import { oauthRedirectUriSchema } from './oauth-redirect-uri.js'
-import { oauthResponseModeSchema } from './oauth-response-mode.js'
-import { oauthResponseTypeSchema } from './oauth-response-type.js'
-import { oauthScopeSchema } from './oauth-scope.js'
-import { oidcClaimsParameterSchema } from './oidc-claims-parameter.js'
-import { oidcClaimsPropertiesSchema } from './oidc-claims-properties.js'
-import { oidcEntityTypeSchema } from './oidc-entity-type.js'
-import { jsonObjectPreprocess, numberPreprocess } from './util.js'
-
-/**
- * @note non string parameters will be converted from their string
- * representation since oauth request parameters are typically sent as URL
- * encoded form data or URL encoded query string.
- * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest | OIDC}
- */
-export const oauthAuthorizationRequestParametersSchema = z.object({
-  client_id: oauthClientIdSchema,
-  state: z.string().optional(),
-  redirect_uri: oauthRedirectUriSchema.optional(),
-  scope: oauthScopeSchema.optional(),
-  response_type: oauthResponseTypeSchema,
-
-  // PKCE
-
-  // https://datatracker.ietf.org/doc/html/rfc7636#section-4.3
-  code_challenge: z.string().optional(),
-  code_challenge_method: oauthCodeChallengeMethodSchema.optional(),
-
-  // DPOP
-
-  // https://datatracker.ietf.org/doc/html/rfc9449#section-12.3
-  dpop_jkt: z.string().optional(),
-
-  // OIDC
-
-  // Default depend on response_type
-  response_mode: oauthResponseModeSchema.optional(),
-
-  nonce: z.string().optional(),
-
-  // Specifies the allowable elapsed time in seconds since the last time the
-  // End-User was actively authenticated by the OP. If the elapsed time is
-  // greater than this value, the OP MUST attempt to actively re-authenticate
-  // the End-User. (The max_age request parameter corresponds to the OpenID 2.0
-  // PAPE [OpenID.PAPE] max_auth_age request parameter.) When max_age is used,
-  // the ID Token returned MUST include an auth_time Claim Value. Note that
-  // max_age=0 is equivalent to prompt=login.
-  max_age: z.preprocess(numberPreprocess, z.number().int().min(0)).optional(),
-
-  claims: z
-    .preprocess(
-      jsonObjectPreprocess,
-      z.record(
-        oidcEntityTypeSchema,
-        z.record(
-          oidcClaimsParameterSchema,
-          z.union([z.literal(null), oidcClaimsPropertiesSchema]),
-        ),
-      ),
-    )
-    .optional(),
-
-  // https://openid.net/specs/openid-connect-core-1_0.html#RegistrationParameter
-  // Not supported by this library (yet?)
-  // registration: clientMetadataSchema.optional(),
-
-  login_hint: z.string().min(1).optional(),
-
-  ui_locales: z
-    .string()
-    .regex(/^[a-z]{2,3}(-[A-Z]{2})?( [a-z]{2,3}(-[A-Z]{2})?)*$/) // fr-CA fr en
-    .optional(),
-
-  // Previous ID Token, should be provided when prompt=none is used
-  id_token_hint: signedJwtSchema.optional(),
-
-  // Type of UI the AS is displayed on
-  display: z.enum(['page', 'popup', 'touch', 'wap']).optional(),
-
-  // How the AS should prompt the user for authorization:
-  prompt: oauthPromptModeSchema.optional(),
-
-  // https://datatracker.ietf.org/doc/html/rfc9396
-  authorization_details: z
-    .preprocess(jsonObjectPreprocess, oauthAuthorizationDetailsSchema)
-    .optional(),
-})
-
-/**
- * @see {oauthAuthorizationRequestParametersSchema}
- */
-export type OAuthAuthorizationRequestParameters = z.infer<
-  typeof oauthAuthorizationRequestParametersSchema
->

package/src/oauth-authorization-request-query.ts

@@ -1,21 +0,0 @@
-import { z } from 'zod'
-import { oauthAuthorizationRequestJarSchema } from './oauth-authorization-request-jar.js'
-import { oauthAuthorizationRequestParametersSchema } from './oauth-authorization-request-parameters.js'
-import { oauthAuthorizationRequestUriSchema } from './oauth-authorization-request-uri.js'
-import { oauthClientIdSchema } from './oauth-client-id.js'
-
-export const oauthAuthorizationRequestQuerySchema = z.intersection(
-  z.object({
-    // REQUIRED. OAuth 2.0 [RFC6749] client_id.
-    client_id: oauthClientIdSchema,
-  }),
-  z.union([
-    oauthAuthorizationRequestParametersSchema,
-    oauthAuthorizationRequestJarSchema,
-    oauthAuthorizationRequestUriSchema,
-  ]),
-)
-
-export type OAuthAuthorizationRequestQuery = z.infer<
-  typeof oauthAuthorizationRequestQuerySchema
->

package/src/oauth-authorization-request-uri.ts

@@ -1,10 +0,0 @@
-import { z } from 'zod'
-import { oauthRequestUriSchema } from './oauth-request-uri.js'
-
-export const oauthAuthorizationRequestUriSchema = z.object({
-  request_uri: oauthRequestUriSchema,
-})
-
-export type OAuthAuthorizationRequestUri = z.infer<
-  typeof oauthAuthorizationRequestUriSchema
->

package/src/oauth-authorization-response-error.ts

@@ -1,25 +0,0 @@
-import { z } from 'zod'
-
-/**
- * @see {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12#name-error-response-2}
- */
-export const oauthAuthorizationResponseErrorSchema = z.enum([
-  // The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.
-  'invalid_request',
-  // The client is not authorized to request an authorization code using this method.
-  'unauthorized_client',
-  // The resource owner or authorization server denied the request.
-  'access_denied',
-  // The authorization server does not support obtaining an authorization code using this method.
-  'unsupported_response_type',
-  // The requested scope is invalid, unknown, or malformed.
-  'invalid_scope',
-  // The authorization server encountered an unexpected condition that prevented it from fulfilling the request. (This error code is needed because a 500 Internal Server Error HTTP status code cannot be returned to the client via an HTTP redirect.)
-  'server_error',
-  // The authorization server is currently unable to handle the request due to a temporary overloading or maintenance of the server. (This error code is needed because a 503 Service Unavailable HTTP status code cannot be returned to the client via an HTTP redirect.)
-  'temporarily_unavailable',
-])
-
-export type OAuthAuthorizationResponseError = z.infer<
-  typeof oauthAuthorizationResponseErrorSchema
->