@aura-stack/auth 0.4.0-rc.4 → 0.4.0

package/dist/@types/index.d.ts

@@ -1,7 +1,8 @@
 import 'zod';
+export { j as APIErrorMap, a6 as AccessTokenError, d as AuthConfig, e as AuthInstance, b as AuthInternalErrorCode, A as AuthRuntimeConfig, c as AuthSecurityErrorCode, a5 as AuthorizationError, C as CookieConfig, a3 as CookieName, a as CookieStoreConfig, a2 as CookieStrategyAttributes, E as ErrorType, a0 as HostCookie, I as InternalLogger, J as JWTPayloadWithToken, _ as JWTStandardClaims, f as JoseInstance, i as LogLevel, L as Logger, a8 as OAuthEnv, a4 as OAuthError, O as OAuthProvider, g as OAuthProviderConfig, h as OAuthProviderCredentials, k as OAuthProviderRecord, R as RouterGlobalContext, $ as SecureCookie, S as Session, a9 as Severity, a1 as StandardCookie, aa as SyslogOptions, a7 as TokenRevocationError, T as TrustedOrigin, U as User } from '../index-CSyIJmCM.js';
 import '../schemas.js';
+import '../jose.js';
 import '@aura-stack/router/cookie';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-export { i as APIErrorMap, a0 as AccessTokenError, d as AuthConfig, e as AuthInstance, b as AuthInternalErrorCode, A as AuthRuntimeConfig, c as AuthSecurityErrorCode, $ as AuthorizationError, C as CookieConfig, Z as CookieName, a as CookieStoreConfig, Y as CookieStrategyAttributes, E as ErrorType, V as HostCookie, J as JWTPayloadWithToken, Q as JWTStandardClaims, f as JoseInstance, a2 as OAuthEnv, _ as OAuthError, O as OAuthProvider, g as OAuthProviderConfig, h as OAuthProviderCredentials, j as OAuthProviderRecord, R as RouterGlobalContext, T as SecureCookie, S as Session, W as StandardCookie, a1 as TokenRevocationError, U as User } from '../index-DkaLJFn8.js';
 export { LiteralUnion, Prettify } from './utility.js';
+import '@aura-stack/jose/jose';
+import '@aura-stack/jose';

package/dist/@types/router.d.cjs

@@ -1,18 +1 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/@types/router.d.ts
-var router_d_exports = {};
-module.exports = __toCommonJS(router_d_exports);

package/dist/@types/router.d.d.ts

@@ -1,9 +1,10 @@
-import { R as RouterGlobalContext } from '../index-DkaLJFn8.js';
+import { R as RouterGlobalContext } from '../index-CSyIJmCM.js';
 import 'zod';
 import '../schemas.js';
-import '@aura-stack/router/cookie';
+import '../jose.js';
 import '@aura-stack/jose';
 import '@aura-stack/jose/jose';
+import '@aura-stack/router/cookie';
 import './utility.js';
 
 declare module "@aura-stack/router" {

package/dist/@types/router.d.js

@@ -1 +0,0 @@
-import "../chunk-DIVDFNAP.js";

package/dist/actions/callback/access-token.cjs

@@ -35,9 +35,6 @@ var fetchAsync = async (url, options2 = {}, timeout = 5e3) => {
   return response;
 };
 
-// src/utils.ts
-var import_router = require("@aura-stack/router");
-
 // src/errors.ts
 var OAuthProtocolError = class extends Error {
   type = "OAUTH_PROTOCOL_ERROR";
@@ -62,25 +59,20 @@ var AuthInternalError = class extends Error {
   }
 };
 
-// src/utils.ts
-var formatZodError = (error) => {
-  if (!error.issues || error.issues.length === 0) {
-    return {};
-  }
-  return error.issues.reduce((previous, issue) => {
-    const key = issue.path.join(".");
-    return {
-      ...previous,
-      [key]: {
-        code: issue.code,
-        message: issue.message
-      }
-    };
-  }, {});
-};
-
 // src/schemas.ts
 var import_zod = require("zod");
+var OAuthProviderCredentialsSchema = (0, import_zod.object)({
+  id: (0, import_zod.string)(),
+  name: (0, import_zod.string)(),
+  authorizeURL: (0, import_zod.string)().url(),
+  accessToken: (0, import_zod.string)().url(),
+  scope: (0, import_zod.string)(),
+  userInfo: (0, import_zod.string)().url(),
+  responseType: (0, import_zod.enum)(["code", "token", "id_token"]),
+  clientId: (0, import_zod.string)(),
+  clientSecret: (0, import_zod.string)(),
+  profile: import_zod.z.function().optional()
+});
 var OAuthProviderConfigSchema = (0, import_zod.object)({
   authorizeURL: (0, import_zod.string)().url(),
   accessToken: (0, import_zod.string)().url(),
@@ -148,14 +140,21 @@ var OAuthEnvSchema = (0, import_zod.object)({
 });
 
 // src/actions/callback/access-token.ts
-var createAccessToken = async (oauthConfig, redirectURI, code, codeVerifier) => {
+var createAccessToken = async (oauthConfig, redirectURI, code, codeVerifier, logger) => {
   const parsed = OAuthAccessToken.safeParse({ ...oauthConfig, redirectURI, code, codeVerifier });
   if (!parsed.success) {
-    const msg = JSON.stringify(formatZodError(parsed.error), null, 2);
-    throw new AuthInternalError("INVALID_OAUTH_CONFIGURATION", msg);
+    logger?.log("INVALID_OAUTH_CONFIGURATION");
+    throw new AuthInternalError("INVALID_OAUTH_CONFIGURATION", "The OAuth provider configuration is invalid.");
   }
   const { accessToken, clientId, clientSecret, code: codeParsed, redirectURI: redirectParsed } = parsed.data;
   try {
+    logger?.log("OAUTH_ACCESS_TOKEN_REQUEST_INITIATED", {
+      structuredData: {
+        has_client_id: Boolean(clientId),
+        redirect_uri: redirectParsed,
+        grant_type: "authorization_code"
+      }
+    });
     const response = await fetchAsync(accessToken, {
       method: "POST",
       headers: {
@@ -171,17 +170,33 @@ var createAccessToken = async (oauthConfig, redirectURI, code, codeVerifier) =>
         code_verifier: codeVerifier
       }).toString()
     });
+    if (!response.ok) {
+      logger?.log("INVALID_OAUTH_ACCESS_TOKEN_RESPONSE");
+      throw new OAuthProtocolError("invalid_request", "Invalid access token response");
+    }
     const json = await response.json();
     const token = OAuthAccessTokenResponse.safeParse(json);
     if (!token.success) {
       const { success, data } = OAuthAccessTokenErrorResponse.safeParse(json);
       if (!success) {
-        throw new OAuthProtocolError("INVALID_REQUEST", "Invalid access token response format");
+        logger?.log("INVALID_OAUTH_ACCESS_TOKEN_RESPONSE");
+        throw new OAuthProtocolError("invalid_request", "Invalid access token response format");
       }
-      throw new OAuthProtocolError(data.error, data?.error_description ?? "Failed to retrieve access token");
+      logger?.log("OAUTH_ACCESS_TOKEN_ERROR", {
+        structuredData: {
+          error: data.error,
+          error_description: data.error_description ?? ""
+        }
+      });
+      throw new OAuthProtocolError("INVALID_ACCESS_TOKEN", "Failed to retrieve access token");
     }
+    logger?.log("OAUTH_ACCESS_TOKEN_SUCCESS");
     return token.data;
   } catch (error) {
+    logger?.log("OAUTH_ACCESS_TOKEN_REQUEST_FAILED");
+    if (error instanceof Error) {
+      throw new OAuthProtocolError("server_error", "Failed to communicate with OAuth provider", "", { cause: error });
+    }
     throw error;
   }
 };

package/dist/actions/callback/access-token.d.ts

@@ -1,9 +1,10 @@
-import { h as OAuthProviderCredentials } from '../../index-DkaLJFn8.js';
+import { h as OAuthProviderCredentials, I as InternalLogger } from '../../index-CSyIJmCM.js';
 import 'zod';
 import '../../schemas.js';
-import '@aura-stack/router/cookie';
+import '../../jose.js';
 import '@aura-stack/jose';
 import '@aura-stack/jose/jose';
+import '@aura-stack/router/cookie';
 import '../../@types/utility.js';
 
 /**
@@ -17,7 +18,7 @@ import '../../@types/utility.js';
  * @param code - The authorization code received from the OAuth server
  * @returns The access token response from the OAuth server
  */
-declare const createAccessToken: (oauthConfig: OAuthProviderCredentials, redirectURI: string, code: string, codeVerifier: string) => Promise<{
+declare const createAccessToken: (oauthConfig: OAuthProviderCredentials, redirectURI: string, code: string, codeVerifier: string, logger?: InternalLogger) => Promise<{
     access_token: string;
     token_type?: string | undefined;
     expires_in?: number | undefined;

package/dist/actions/callback/access-token.js

@@ -1,10 +1,9 @@
 import {
   createAccessToken
-} from "../../chunk-GA2SMTJO.js";
-import "../../chunk-CXLATHS5.js";
-import "../../chunk-RRLIF4PQ.js";
+} from "../../chunk-TZB6MUXN.js";
 import "../../chunk-ZNCZVF6U.js";
-import "../../chunk-YRCB5FLE.js";
+import "../../chunk-KJBAQZX2.js";
+import "../../chunk-RRLIF4PQ.js";
 export {
   createAccessToken
 };