@atproto/pds 0.4.164 → 0.4.166

package/dist/auth-scope.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACCESS_STANDARD = exports.ACCESS_PRIVILEGED = exports.ACCESS_FULL = exports.AuthScope = void 0;
+exports.isAuthScope = isAuthScope;
+exports.isAccessFull = isAccessFull;
+exports.isAccessPrivileged = isAccessPrivileged;
+exports.isTakendown = isTakendown;
+// @TODO sync-up with current method names, consider backwards compat.
+var AuthScope;
+(function (AuthScope) {
+    AuthScope["Access"] = "com.atproto.access";
+    AuthScope["Refresh"] = "com.atproto.refresh";
+    AuthScope["AppPass"] = "com.atproto.appPass";
+    AuthScope["AppPassPrivileged"] = "com.atproto.appPassPrivileged";
+    AuthScope["SignupQueued"] = "com.atproto.signupQueued";
+    AuthScope["Takendown"] = "com.atproto.takendown";
+})(AuthScope || (exports.AuthScope = AuthScope = {}));
+exports.ACCESS_FULL = [AuthScope.Access];
+exports.ACCESS_PRIVILEGED = [
+    ...exports.ACCESS_FULL,
+    AuthScope.AppPassPrivileged,
+];
+exports.ACCESS_STANDARD = [
+    ...exports.ACCESS_PRIVILEGED,
+    AuthScope.AppPass,
+];
+const authScopesValues = new Set(Object.values(AuthScope));
+function isAuthScope(val) {
+    return authScopesValues.has(val);
+}
+function isAccessFull(scope) {
+    return exports.ACCESS_FULL.includes(scope);
+}
+function isAccessPrivileged(scope) {
+    return exports.ACCESS_PRIVILEGED.includes(scope);
+}
+function isTakendown(scope) {
+    return scope === AuthScope.Takendown;
+}
+//# sourceMappingURL=auth-scope.js.map

package/dist/auth-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-scope.js","sourceRoot":"","sources":["../src/auth-scope.ts"],"names":[],"mappings":";;;AAqBA,kCAEC;AAED,oCAIC;AAED,gDAIC;AAED,kCAEC;AAvCD,sEAAsE;AACtE,IAAY,SAOX;AAPD,WAAY,SAAS;IACnB,0CAA6B,CAAA;IAC7B,4CAA+B,CAAA;IAC/B,4CAA+B,CAAA;IAC/B,gEAAmD,CAAA;IACnD,sDAAyC,CAAA;IACzC,gDAAmC,CAAA;AACrC,CAAC,EAPW,SAAS,yBAAT,SAAS,QAOpB;AAEY,QAAA,WAAW,GAAG,CAAC,SAAS,CAAC,MAAM,CAAU,CAAA;AACzC,QAAA,iBAAiB,GAAG;IAC/B,GAAG,mBAAW;IACd,SAAS,CAAC,iBAAiB;CACnB,CAAA;AACG,QAAA,eAAe,GAAG;IAC7B,GAAG,yBAAiB;IACpB,SAAS,CAAC,OAAO;CACT,CAAA;AAEV,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;AAC1D,SAAgB,WAAW,CAAC,GAAY;IACtC,OAAQ,gBAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,YAAY,CAC1B,KAAgB;IAEhB,OAAQ,mBAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAAgB;IAEhB,OAAQ,yBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,SAAS,CAAC,SAAS,CAAA;AACtC,CAAC"}

package/dist/auth-verifier.d.ts

@@ -1,87 +1,26 @@
 import { KeyObject } from 'node:crypto';
-import { IncomingMessage, ServerResponse } from 'node:http';
+import { IncomingMessage } from 'node:http';
 import * as jose from 'jose';
 import { IdResolver } from '@atproto/identity';
 import { OAuthVerifier } from '@atproto/oauth-provider';
+import { PermissionSet } from '@atproto/oauth-scopes';
+import { Awaitable, MethodAuthContext, MethodAuthVerifier, Params } from '@atproto/xrpc-server';
 import { AccountManager } from './account-manager/account-manager';
-type ReqCtx = {
-    req: IncomingMessage;
-    res?: ServerResponse;
+import { AccessOutput, AdminTokenOutput, ModServiceOutput, OAuthOutput, RefreshOutput, UnauthenticatedOutput, UserServiceAuthOutput } from './auth-output';
+import { AuthScope } from './auth-scope';
+import { WithRequired } from './util/types';
+export type VerifiedOptions = {
+    checkTakedown?: boolean;
+    checkDeactivated?: boolean;
 };
-export declare enum AuthScope {
-    Access = "com.atproto.access",
-    Refresh = "com.atproto.refresh",
-    AppPass = "com.atproto.appPass",
-    AppPassPrivileged = "com.atproto.appPassPrivileged",
-    SignupQueued = "com.atproto.signupQueued",
-    Takendown = "com.atproto.takendown"
-}
-export type AccessOpts = {
-    additional: AuthScope[];
-    checkTakedown: boolean;
-    checkDeactivated: boolean;
-};
-export declare enum RoleStatus {
-    Valid = 0,
-    Invalid = 1,
-    Missing = 2
-}
-export type NullOutput = {
-    credentials: null;
-};
-export type AdminTokenOutput = {
-    credentials: {
-        type: 'admin_token';
-    };
-};
-export type ModServiceOutput = {
-    credentials: {
-        type: 'mod_service';
-        aud: string;
-        iss: string;
-    };
-};
-export type AccessOutput = {
-    credentials: {
-        type: 'access';
-        did: string;
-        scope: AuthScope;
-        isPrivileged: boolean;
-    };
-};
-export type OAuthOutput = {
-    credentials: {
-        type: 'oauth';
-        did: string;
-        scope: AuthScope;
-        isPrivileged: boolean;
-        oauthScopes: Set<string>;
-    };
-};
-export type RefreshOutput = {
-    credentials: {
-        type: 'refresh';
-        did: string;
-        scope: AuthScope;
-        tokenId: string;
-    };
+export type ScopedOptions<S extends AuthScope = AuthScope> = {
+    scopes?: readonly S[];
 };
-export type UserServiceAuthOutput = {
-    credentials: {
-        type: 'user_service_auth';
-        aud: string;
-        did: string;
-    };
-};
-type ValidatedBearer = {
-    did: string;
-    scope: AuthScope;
-    token: string;
-    payload: jose.JWTPayload;
-    audience: string | undefined;
+export type ExtraScopedOptions<S extends AuthScope = AuthScope> = {
+    additional?: readonly S[];
 };
-type ValidatedRefreshBearer = ValidatedBearer & {
-    tokenId: string;
+export type AuthorizedOptions<P extends Params = Params> = {
+    authorize: (permissions: PermissionSet, ctx: MethodAuthContext<P>) => Awaitable<void>;
 };
 export type AuthVerifierOpts = {
     publicUrl: string;
@@ -93,6 +32,15 @@ export type AuthVerifierOpts = {
         modService?: string;
     };
 };
+export type VerifyBearerJwtOptions<S extends AuthScope = AuthScope> = WithRequired<Omit<jose.JWTVerifyOptions, 'scopes'> & {
+    scopes: readonly S[];
+}, 'audience' | 'typ'>;
+export type VerifyBearerJwtResult<S extends AuthScope = AuthScope> = {
+    sub: string;
+    aud: string;
+    jti: string | undefined;
+    scope: S;
+};
 export declare class AuthVerifier {
     accountManager: AccountManager;
     idResolver: IdResolver;
@@ -102,50 +50,37 @@ export declare class AuthVerifier {
     private _adminPass;
     dids: AuthVerifierOpts['dids'];
     constructor(accountManager: AccountManager, idResolver: IdResolver, oauthVerifier: OAuthVerifier, opts: AuthVerifierOpts);
-    accessStandard: (opts?: Partial<AccessOpts>) => (ctx: ReqCtx) => Promise<AccessOutput | OAuthOutput>;
-    accessFull: (opts?: Partial<AccessOpts>) => (ctx: ReqCtx) => Promise<AccessOutput | OAuthOutput>;
-    accessPrivileged: (opts?: Partial<AccessOpts>) => (ctx: ReqCtx) => Promise<AccessOutput | OAuthOutput>;
-    refresh: (ctx: ReqCtx) => Promise<RefreshOutput>;
-    refreshExpired: (ctx: ReqCtx) => Promise<RefreshOutput>;
-    adminToken: (ctx: ReqCtx) => Promise<AdminTokenOutput>;
-    optionalAccessOrAdminToken: (opts?: Partial<AccessOpts>) => (ctx: ReqCtx) => Promise<AccessOutput | OAuthOutput | AdminTokenOutput | NullOutput>;
-    userServiceAuth: (ctx: ReqCtx) => Promise<UserServiceAuthOutput>;
-    userServiceAuthOptional: (ctx: ReqCtx) => Promise<UserServiceAuthOutput | NullOutput>;
-    accessOrUserServiceAuth: (opts?: Partial<AccessOpts>) => (ctx: ReqCtx) => Promise<UserServiceAuthOutput | AccessOutput | OAuthOutput>;
-    modService: (ctx: ReqCtx) => Promise<ModServiceOutput>;
-    moderator: (ctx: ReqCtx) => Promise<AdminTokenOutput | ModServiceOutput>;
-    protected validateAdminToken({ req, }: ReqCtx): Promise<AdminTokenOutput>;
-    protected validateRefreshToken(ctx: ReqCtx, verifyOptions?: Omit<jose.JWTVerifyOptions, 'audience' | 'typ'>): Promise<ValidatedRefreshBearer>;
-    protected validateBearerToken(ctx: ReqCtx, scopes: AuthScope[], verifyOptions: jose.JWTVerifyOptions & Required<Pick<jose.JWTVerifyOptions, 'audience' | 'typ'>>): Promise<ValidatedBearer>;
-    protected validateAccessToken(ctx: ReqCtx, scopes: AuthScope[], { checkTakedown, checkDeactivated, }?: {
-        checkTakedown?: boolean;
-        checkDeactivated?: boolean;
-    }): Promise<AccessOutput | OAuthOutput>;
-    protected validateDpopAccessToken(ctx: ReqCtx, scopes: AuthScope[]): Promise<OAuthOutput>;
-    protected validateBearerAccessToken(ctx: ReqCtx, scopes: AuthScope[]): Promise<AccessOutput>;
-    protected verifyServiceJwt(ctx: ReqCtx, opts: {
-        aud: string | null;
-        iss: string[] | null;
+    unauthenticated: MethodAuthVerifier<UnauthenticatedOutput>;
+    adminToken: MethodAuthVerifier<AdminTokenOutput>;
+    modService: MethodAuthVerifier<ModServiceOutput>;
+    moderator: MethodAuthVerifier<AdminTokenOutput | ModServiceOutput>;
+    protected access<S extends AuthScope>(options: VerifiedOptions & Required<ScopedOptions<S>>): MethodAuthVerifier<AccessOutput<S>>;
+    refresh(options?: {
+        allowExpired?: boolean;
+    }): MethodAuthVerifier<RefreshOutput>;
+    authorization<P extends Params>({ scopes, additional, ...options }: VerifiedOptions & ScopedOptions & ExtraScopedOptions & AuthorizedOptions<P>): MethodAuthVerifier<AccessOutput | OAuthOutput, P>;
+    authorizationOrAdminTokenOptional<P extends Params>(opts: VerifiedOptions & ExtraScopedOptions & AuthorizedOptions<P>): MethodAuthVerifier<OAuthOutput | AccessOutput | AdminTokenOutput | UnauthenticatedOutput, P>;
+    userServiceAuth: MethodAuthVerifier<UserServiceAuthOutput>;
+    userServiceAuthOptional: MethodAuthVerifier<UserServiceAuthOutput | UnauthenticatedOutput>;
+    authorizationOrUserServiceAuth<P extends Params>(options: VerifiedOptions & ScopedOptions & ExtraScopedOptions & AuthorizedOptions<P>): MethodAuthVerifier<UserServiceAuthOutput | OAuthOutput | AccessOutput, P>;
+    protected oauth<P extends Params>({ authorize, ...verifyStatusOptions }: VerifiedOptions & AuthorizedOptions<P>): MethodAuthVerifier<OAuthOutput, P>;
+    protected verifyStatus(did: string, { checkTakedown, checkDeactivated }: VerifiedOptions): Promise<void>;
+    /**
+     * Wraps {@link jose.jwtVerify} into a function that also validates the token
+     * payload's type and wraps errors into {@link InvalidRequestError}.
+     */
+    protected verifyBearerJwt<S extends AuthScope = AuthScope>(req: IncomingMessage, { scopes, ...options }: VerifyBearerJwtOptions<S>): Promise<VerifyBearerJwtResult<S>>;
+    protected verifyServiceJwt(req: IncomingMessage, opts?: {
+        iss?: string[];
     }): Promise<{
         iss: string;
         aud: string;
+        exp: number;
+        lxm?: string;
+        jti?: string;
     }>;
-    protected null(ctx: ReqCtx): NullOutput;
-    isUserOrAdmin(auth: AccessOutput | OAuthOutput | AdminTokenOutput | NullOutput, did: string): boolean;
-    protected jwtVerify(token: string, verifyOptions?: jose.JWTVerifyOptions): Promise<jose.JWTVerifyResult<jose.JWTPayload>>;
-    protected setAuthHeaders(ctx: ReqCtx): void;
-}
-declare enum AuthType {
-    BASIC = "Basic",
-    BEARER = "Bearer",
-    DPOP = "DPoP"
 }
-export declare const parseAuthorizationHeader: (authorization?: string) => [type: null] | [type: AuthType, token: string];
-export declare const parseBasicAuth: (authorizationHeader?: string) => {
-    username: string;
-    password: string;
-} | null;
+export declare function isUserOrAdmin(auth: AccessOutput | OAuthOutput | AdminTokenOutput | UnauthenticatedOutput, did: string): boolean;
 export declare const createSecretKeyObject: (secret: string) => KeyObject;
 export declare const createPublicKeyObject: (publicKeyHex: string) => KeyObject;
-export {};
 //# sourceMappingURL=auth-verifier.d.ts.map

package/dist/auth-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoC,MAAM,aAAa,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE3D,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,OAAO,EAAE,UAAU,EAA0B,MAAM,mBAAmB,CAAA;AACtE,OAAO,EAEL,aAAa,EAEd,MAAM,yBAAyB,CAAA;AAShC,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAIlE,KAAK,MAAM,GAAG;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,GAAG,CAAC,EAAE,cAAc,CAAA;CAAE,CAAA;AAG5D,oBAAY,SAAS;IACnB,MAAM,uBAAuB;IAC7B,OAAO,wBAAwB;IAC/B,OAAO,wBAAwB;IAC/B,iBAAiB,kCAAkC;IACnD,YAAY,6BAA6B;IACzC,SAAS,0BAA0B;CACpC;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,aAAa,EAAE,OAAO,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,oBAAY,UAAU;IACpB,KAAK,IAAA;IACL,OAAO,IAAA;IACP,OAAO,IAAA;CACR;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,IAAI,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;KACpB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;QACnB,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,MAAM,CAAA;KACZ,CAAA;CACF,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAA;QACd,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,SAAS,CAAA;QAChB,YAAY,EAAE,OAAO,CAAA;KACtB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE;QACX,IAAI,EAAE,OAAO,CAAA;QACb,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,SAAS,CAAA;QAChB,YAAY,EAAE,OAAO,CAAA;QACrB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;KACzB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE;QACX,IAAI,EAAE,SAAS,CAAA;QACf,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,SAAS,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB,CAAA;QACzB,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,MAAM,CAAA;KACZ,CAAA;CACF,CAAA;AAED,KAAK,eAAe,GAAG;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,SAAS,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,IAAI,CAAC,UAAU,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;CAC7B,CAAA;AAED,KAAK,sBAAsB,GAAG,eAAe,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF,CAAA;AAED,qBAAa,YAAY;IAOd,cAAc,EAAE,cAAc;IAC9B,UAAU,EAAE,UAAU;IACtB,aAAa,EAAE,aAAa;IARrC,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,OAAO,CAAW;IAC1B,OAAO,CAAC,UAAU,CAAQ;IACnB,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAG5B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa,EACnC,IAAI,EAAE,gBAAgB;IAUxB,cAAc,GACX,OAAM,OAAO,CAAC,UAAU,CAAM,MACxB,KAAK,MAAM,KAAG,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAWvD;IAEH,UAAU,GACP,OAAM,OAAO,CAAC,UAAU,CAAM,MAC9B,KAAK,MAAM,KAAG,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAMjD;IAEH,gBAAgB,GACb,OAAM,OAAO,CAAC,UAAU,CAAM,MAC9B,KAAK,MAAM,KAAG,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAMjD;IAEH,OAAO,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC,CAWpD;IAED,cAAc,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC,CAa3D;IAED,UAAU,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC,CAG1D;IAED,0BAA0B,GACvB,OAAM,OAAO,CAAC,UAAU,CAAM,MAE7B,KAAK,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,UAAU,CAAC,CAQrE;IAEH,eAAe,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAAC,CAqBpE;IAED,uBAAuB,GACrB,KAAK,MAAM,KACV,OAAO,CAAC,qBAAqB,GAAG,UAAU,CAAC,CAM7C;IAED,uBAAuB,GACpB,OAAM,OAAO,CAAC,UAAU,CAAM,MAE7B,KAAK,MAAM,KACV,OAAO,CAAC,qBAAqB,GAAG,YAAY,GAAG,WAAW,CAAC,CAS7D;IAEH,UAAU,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC,CAwB1D;IAED,SAAS,GACP,KAAK,MAAM,KACV,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,CAM9C;cAEe,kBAAkB,CAAC,EACjC,GAAG,GACJ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;cAarB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,GAC9D,OAAO,CAAC,sBAAsB,CAAC;cAiBlB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,EAAE,EACnB,aAAa,EAAE,IAAI,CAAC,gBAAgB,GAClC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC,GAC1D,OAAO,CAAC,eAAe,CAAC;cA2DX,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,EAAE,EACnB,EACE,aAAqB,EACrB,gBAAwB,GACzB,GAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAO,GAC9D,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC;cAqDtB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,EAAE,GAClB,OAAO,CAAC,WAAW,CAAC;cAmGP,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,EAAE,GAClB,OAAO,CAAC,YAAY,CAAC;cAmBR,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;KAAE;;;;IA2CpD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAOvC,aAAa,CACX,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,UAAU,EAChE,GAAG,EAAE,MAAM,GACV,OAAO;cAUM,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,aAAa,CAAC,EAAE,IAAI,CAAC,gBAAgB;IAevC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM;CAOrC;AAKD,aAAK,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;CACd;AAED,eAAO,MAAM,wBAAwB,GACnC,gBAAgB,MAAM,KACrB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAqB/C,CAAA;AAsBD,eAAO,MAAM,cAAc,GACzB,sBAAsB,MAAM,KAC3B;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAc3C,CAAA;AAOD,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,SAEtD,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,cAAc,MAAM,KAAG,SAG5D,CAAA"}
+{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoC,MAAM,aAAa,CAAA;AACzE,OAAO,EAAE,eAAe,EAAkB,MAAM,WAAW,CAAA;AAC3D,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,OAAO,EAAE,UAAU,EAA0B,MAAM,mBAAmB,CAAA;AACtE,OAAO,EAEL,aAAa,EAGd,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,aAAa,EAA2B,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAEL,SAAS,EAGT,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,EAIP,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAClE,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAmB,SAAS,EAAe,MAAM,cAAc,CAAA;AAItE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI;IAC3D,MAAM,CAAC,EAAE,SAAS,CAAC,EAAE,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI;IAChE,UAAU,CAAC,EAAE,SAAS,CAAC,EAAE,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACzD,SAAS,EAAE,CACT,WAAW,EAAE,aAAa,EAC1B,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,KACtB,SAAS,CAAC,IAAI,CAAC,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAChE,YAAY,CACV,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG;IACtC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAA;CACrB,EACD,UAAU,GAAG,KAAK,CACnB,CAAA;AAEH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI;IACnE,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,KAAK,EAAE,CAAC,CAAA;CACT,CAAA;AAED,qBAAa,YAAY;IAOd,cAAc,EAAE,cAAc;IAC9B,UAAU,EAAE,UAAU;IACtB,aAAa,EAAE,aAAa;IARrC,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,OAAO,CAAW;IAC1B,OAAO,CAAC,UAAU,CAAQ;IACnB,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAG5B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa,EACnC,IAAI,EAAE,gBAAgB;IAUjB,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAchE;IAEM,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAYtD;IAEM,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CActD;IAEM,SAAS,EAAE,kBAAkB,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,CAQtE;IAEH,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,SAAS,EAClC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GACpD,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IA8B/B,OAAO,CAAC,OAAO,CAAC,EAAE;QACvB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,GAAG,kBAAkB,CAAC,aAAa,CAAC;IAiC9B,aAAa,CAAC,CAAC,SAAS,MAAM,EAAE,EACrC,MAAwB,EACxB,UAAe,EACf,GAAG,OAAO,EACX,EAAE,eAAe,GAChB,aAAa,GACb,kBAAkB,GAClB,iBAAiB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,YAAY,GAAG,WAAW,EAAE,CAAC,CAAC;IAiCnE,iCAAiC,CAAC,CAAC,SAAS,MAAM,EACvD,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAChE,kBAAkB,CACnB,WAAW,GAAG,YAAY,GAAG,gBAAgB,GAAG,qBAAqB,EACrE,CAAC,CACF;IAcM,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAWhE;IAEM,uBAAuB,EAAE,kBAAkB,CAChD,qBAAqB,GAAG,qBAAqB,CAC9C,CAOA;IAEM,8BAA8B,CAAC,CAAC,SAAS,MAAM,EACpD,OAAO,EAAE,eAAe,GACtB,aAAa,GACb,kBAAkB,GAClB,iBAAiB,CAAC,CAAC,CAAC,GACrB,kBAAkB,CAAC,qBAAqB,GAAG,WAAW,GAAG,YAAY,EAAE,CAAC,CAAC;IAW5E,SAAS,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,EAChC,SAAS,EACT,GAAG,mBAAmB,EACvB,EAAE,eAAe,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAC5D,WAAW,EACX,CAAC,CACF;cAyFe,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,EAAE,aAAqB,EAAE,gBAAwB,EAAE,EAAE,eAAe,GACnE,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;OAGG;cACa,eAAe,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAC7D,GAAG,EAAE,eAAe,EACpB,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;cA6DpB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;;;;;;;CA4C5B;AAKD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,qBAAqB,EAC3E,GAAG,EAAE,MAAM,GACV,OAAO,CAQT;AA0ED,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,SAEtD,CAAA;AAGD,eAAO,MAAM,qBAAqB,GAAI,cAAc,MAAM,KAAG,SAG5D,CAAA"}