@aura-stack/auth 0.4.0 → 0.5.0

package/dist/{index-CSyIJmCM.d.ts → index-_aXtxb_s.d.ts}

@@ -1,9 +1,17 @@
+import * as zod from 'zod';
 import { z } from 'zod';
 import { OAuthAuthorizationErrorResponse, OAuthAccessTokenErrorResponse, OAuthEnvSchema } from './schemas.js';
-import { createJoseInstance } from './jose.js';
+import * as _aura_stack_jose from '@aura-stack/jose';
+import { DecodedJWTPayloadOptions, TypedJWTPayload, JWTVerifyOptions } from '@aura-stack/jose';
+import * as _aura_stack_jose_jose from '@aura-stack/jose/jose';
+import { JWTPayload } from '@aura-stack/jose/jose';
+import '@aura-stack/jose/crypto';
 import { SerializeOptions } from '@aura-stack/router/cookie';
 import { LiteralUnion, Prettify } from './@types/utility.js';
-import { JWTPayload } from '@aura-stack/jose/jose';
+import * as jose from 'jose';
+import * as _aura_stack_router from '@aura-stack/router';
+import { GlobalContext, ClientOptions } from '@aura-stack/router';
+import * as zod_v4_core from 'zod/v4/core';
 
 /**
  * Log message definitions organized by category.
@@ -264,6 +272,169 @@ declare const logMessages: {
     };
 };
 declare const createLogEntry: <T extends keyof typeof logMessages>(key: T, overrides?: Partial<SyslogOptions>) => SyslogOptions;
+declare const createSyslogMessage: (options: SyslogOptions) => string;
+declare const createLogger: (logger?: Required<Logger>) => InternalLogger | undefined;
+/**
+ * Creates the logger instance based on the provided configuration and environment variables.
+ * Priority: config.logger, LOG_LEVEL env, DEBUG env and defaults to undefined if logging is not enabled.
+ *
+ */
+declare const createProxyLogger: (config?: AuthConfig) => InternalLogger | undefined;
+
+/**
+ * Creates the JOSE instance used for signing and verifying tokens. It derives keys
+ * for session tokens and CSRF tokens. For security and determinism, it's required
+ * to set a salt value in `AURA_AUTH_SALT` or `AUTH_SALT` env.
+ *
+ * @param secret the base secret for key derivation
+ * @returns jose instance with methods for encoding/decoding JWTs and signing/verifying JWSs
+ */
+declare const createJoseInstance: (secret?: string) => {
+    decodeJWT: (token: string, options?: DecodedJWTPayloadOptions) => Promise<TypedJWTPayload<User>>;
+    encodeJWT: (payload: TypedJWTPayload<Partial<User>>) => Promise<string>;
+    signJWS: (payload: TypedJWTPayload<Partial<_aura_stack_jose_jose.JWTPayload>>) => Promise<string>;
+    verifyJWS: (payload: string, options?: JWTVerifyOptions | undefined) => Promise<_aura_stack_jose_jose.JWTPayload>;
+    encryptJWE: (payload: string, options?: _aura_stack_jose.EncryptOptions | undefined) => Promise<string>;
+    decryptJWE: (payload: string, options?: _aura_stack_jose.JWTDecryptOptions | undefined) => Promise<string>;
+};
+declare const jwtVerificationOptions: JWTVerifyOptions;
+declare const decodeJWTOptions: DecodedJWTPayloadOptions;
+
+interface ExtendedProfile {
+    job_title: string;
+    organization: string;
+    department: string;
+    location: string;
+}
+interface AtlassianProfile {
+    account_id: string;
+    account_type: string;
+    account_status: LiteralUnion<"active">;
+    email: string;
+    email_verified: boolean;
+    name: string;
+    picture: string;
+    nickname: string;
+    zoneinfo: string;
+    locale: string;
+    extended_profile: ExtendedProfile;
+    last_updated: string;
+    created_at: string;
+}
+/**
+ * @see [Atlassian - OAuth Apps](https://developer.atlassian.com/cloud/jira/platform/oauth-2-3lo-apps/)
+ * @see [Atlassian - My Apps](https://developer.atlassian.com/console/myapps/)
+ * @see [Atlassian - Retrieve Authenticated User](https://developer.atlassian.com/cloud/jira/software/oauth-2-3lo-apps/#how-do-i-retrieve-the-public-profile-of-the-authenticated-user-)
+ */
+declare const atlassian: (options?: Partial<OAuthProviderCredentials<AtlassianProfile>>) => OAuthProviderCredentials<AtlassianProfile>;
+
+type AccountType = "basic" | "pro" | "business";
+interface Name {
+    given_name: string;
+    surname: string;
+    familiar_name: string;
+    display_name: string;
+    abbreviated_name: string;
+}
+interface RootInfo {
+    team: RootInfo;
+    user: RootInfo;
+}
+interface FullTeam {
+    id: string;
+    name: string;
+    sharing_policies: Record<string, unknown>;
+    office_addin_policy: unknown;
+    top_level_content_policy: unknown;
+}
+interface DropboxProfile {
+    account_id: string;
+    name: Name;
+    email: string;
+    email_verified: boolean;
+    disabled: boolean;
+    locale: string;
+    referral_link: string;
+    is_paired: boolean;
+    account_type: AccountType;
+    root_info: unknown;
+    profile_photo_url?: string;
+    country: string;
+    team?: unknown;
+    team_member_id?: string;
+}
+/**
+ * @see [Dropbox - OAuth Guide](https://developers.dropbox.com/oauth-guide)
+ * @see [Dropbox - API v2](https://www.dropbox.com/developers/documentation/http/documentation)
+ * @see [Dropbox - Get Current Account](https://www.dropbox.com/developers/documentation/http/documentation#users-get_current_account)
+ * @see [Dropbox - My Apps](https://www.dropbox.com/developers/apps)
+ * @see [Dropbox - Developer Guide](https://www.dropbox.com/developers/reference/developer-guide)
+ */
+declare const dropbox: (options?: Partial<OAuthProviderCredentials<DropboxProfile>>) => OAuthProviderCredentials<DropboxProfile>;
+
+interface Person {
+    email: string;
+}
+interface User$1 {
+    object: "user";
+    id: string;
+    name: string;
+    avatar_url: string | null;
+    type: "person";
+    person: Person;
+}
+interface Owner {
+    type: "user";
+    user: User$1;
+}
+interface Bot {
+    owner: Owner;
+}
+/**
+ * @see [Notion - Retrieve your token's bot user](https://developers.notion.com/reference/get-self)
+ */
+interface NotionProfile {
+    object: "user";
+    id: string;
+    name: string;
+    avatar_url: string | null;
+    type: "bot";
+    bot: Bot;
+}
+/**
+ * @see [Notion - Developer Documentation](https://developers.notion.com/)
+ * @see [Notion - Authorization](https://developers.notion.com/docs/authorization)
+ * @see [Notion - Authentication](https://developers.notion.com/reference/authentication)
+ * @see [Notion - Retrieve your token's bot user](https://developers.notion.com/reference/get-self)
+ */
+declare const notion: (options?: Partial<OAuthProviderCredentials<NotionProfile>>) => OAuthProviderCredentials<NotionProfile>;
+
+/**
+ * @see [Twitch - Get Users](https://dev.twitch.tv/docs/api/reference#get-users)
+ */
+interface TwitchProfile {
+    id: string;
+    login: string;
+    display_name: string;
+    type: string;
+    broadcaster_type: string;
+    description: string;
+    profile_image_url: string;
+    offline_image_url: string;
+    view_count: number;
+    email?: string;
+    created_at: string;
+}
+/**
+ * @see [Twitch - Get Started with the Twitch API](https://dev.twitch.tv/docs/api/get-started/)
+ * @see [Twitch - Authorization code grant flow](https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#authorization-code-grant-flow)
+ * @see [Twitch - Register Your App](https://dev.twitch.tv/docs/authentication/register-app)
+ * @see [Twitch - Setting up Two-Factor Authentication (2FA)](https://help.twitch.tv/s/article/two-factor-authentication?language=en_US)
+ * @see [Twitch - Security and Privacy](https://www.twitch.tv/settings/security)
+ * @see [Twitch - Get Users](https://dev.twitch.tv/docs/api/reference#get-users)
+ * @see [Twitch - Scopes](https://dev.twitch.tv/docs/authentication/scopes/)
+ */
+declare const twitch: (options?: Partial<OAuthProviderCredentials<TwitchProfile>>) => OAuthProviderCredentials<TwitchProfile>;
 
 /**
  * @see [Pinterest - Get User Account](https://developers.pinterest.com/docs/api/v5/user_account-get)
@@ -695,6 +866,10 @@ declare const builtInOAuthProviders: {
     readonly strava: (options?: Partial<OAuthProviderCredentials<StravaProfile>>) => OAuthProviderCredentials<StravaProfile>;
     readonly mailchimp: (options?: Partial<OAuthProviderCredentials<MailchimpProfile>>) => OAuthProviderCredentials<MailchimpProfile>;
     readonly pinterest: (options?: Partial<OAuthProviderCredentials<PinterestProfile>>) => OAuthProviderCredentials<PinterestProfile>;
+    readonly twitch: (options?: Partial<OAuthProviderCredentials<TwitchProfile>>) => OAuthProviderCredentials<TwitchProfile>;
+    readonly notion: (options?: Partial<OAuthProviderCredentials<NotionProfile>>) => OAuthProviderCredentials<NotionProfile>;
+    readonly dropbox: (options?: Partial<OAuthProviderCredentials<DropboxProfile>>) => OAuthProviderCredentials<DropboxProfile>;
+    readonly atlassian: (options?: Partial<OAuthProviderCredentials<AtlassianProfile>>) => OAuthProviderCredentials<AtlassianProfile>;
 };
 /**
  * Constructs OAuth provider configurations from an array of provider names or configurations.
@@ -712,6 +887,115 @@ declare const builtInOAuthProviders: {
 declare const createBuiltInOAuthProviders: (oauth?: (BuiltInOAuthProvider | OAuthProviderCredentials<any>)[]) => Record<LiteralUnion<BuiltInOAuthProvider>, OAuthProviderCredentials<any>>;
 type BuiltInOAuthProvider = keyof typeof builtInOAuthProviders;
 
+/**
+ * Creates the authentication instance with the configuration provided for OAuth provider.
+ * > NOTE: The handlers returned by this function should be used in the server to handle the authentication routes
+ * and within the `/auth` base path
+ *
+ * @param authConfig - Authentication configuration including OAuth provider
+ * @returns Authentication instance with handlers to be used in the server
+ * @example
+ * const auth = createAuth({
+ *   oauth: ["github", {
+ *     id: "custom-oauth",
+ *     name: "custom-oauth",
+ *     authorizationURL: "https://custom-oauth.com/oauth/authorize",
+ *     accessToken: "https://custom-oauth.com/oauth/token",
+ *     scope: "profile email",
+ *     responseType: "code",
+ *     userInfo: "https://custom-oauth.com/api/userinfo",
+ *     clientId: process.env.AURA_AUTH_CUSTOM_OAUTH_CLIENT_ID!,
+ *     clientSecret: process.env.AURA_AUTH_CUSTOM_OAUTH_CLIENT_SECRET!,
+ *   }]
+ * })
+ */
+declare const createAuthInstance: (authConfig: AuthConfig) => {
+    handlers: _aura_stack_router.Router<[_aura_stack_router.RouteEndpoint<"GET", "/signIn/:oauth", {
+        schemas?: {
+            params: zod.ZodObject<{
+                oauth: zod.ZodEnum<{
+                    [x: string & Record<never, never>]: string & Record<never, never>;
+                    github: "github";
+                    bitbucket: "bitbucket";
+                    figma: "figma";
+                    discord: "discord";
+                    gitlab: "gitlab";
+                    spotify: "spotify";
+                    x: "x";
+                    strava: "strava";
+                    mailchimp: "mailchimp";
+                    pinterest: "pinterest";
+                    twitch: "twitch";
+                    notion: "notion";
+                    dropbox: "dropbox";
+                    atlassian: "atlassian";
+                }>;
+            }, zod_v4_core.$strip>;
+            searchParams: zod.ZodObject<{
+                redirect: zod.ZodDefault<zod.ZodOptional<zod.ZodCodec<zod.ZodString, zod.ZodBoolean>>>;
+                redirectTo: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strip>;
+        } | undefined;
+    }>, _aura_stack_router.RouteEndpoint<"GET", "/callback/:oauth", {
+        schemas?: {
+            params: zod.ZodObject<{
+                oauth: zod.ZodEnum<{
+                    [x: string & Record<never, never>]: string & Record<never, never>;
+                    github: "github";
+                    bitbucket: "bitbucket";
+                    figma: "figma";
+                    discord: "discord";
+                    gitlab: "gitlab";
+                    spotify: "spotify";
+                    x: "x";
+                    strava: "strava";
+                    mailchimp: "mailchimp";
+                    pinterest: "pinterest";
+                    twitch: "twitch";
+                    notion: "notion";
+                    dropbox: "dropbox";
+                    atlassian: "atlassian";
+                }>;
+            }, zod_v4_core.$strip>;
+            searchParams: zod.ZodObject<{
+                code: zod.ZodString;
+                state: zod.ZodString;
+            }, zod_v4_core.$strip>;
+        } | undefined;
+    }>, _aura_stack_router.RouteEndpoint<"GET", "/session", {
+        schemas?: _aura_stack_router.EndpointSchemas | undefined;
+    }>, _aura_stack_router.RouteEndpoint<"POST", "/signOut", {
+        schemas?: {
+            searchParams: zod.ZodObject<{
+                token_type_hint: zod.ZodLiteral<"session_token">;
+                redirectTo: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strip>;
+        } | undefined;
+    }>, _aura_stack_router.RouteEndpoint<"GET", "/csrfToken", {
+        schemas?: _aura_stack_router.EndpointSchemas | undefined;
+    }>]>;
+    jose: {
+        decodeJWT: (token: string, options?: _aura_stack_jose.DecodedJWTPayloadOptions) => Promise<_aura_stack_jose.TypedJWTPayload<User>>;
+        encodeJWT: (payload: _aura_stack_jose.TypedJWTPayload<Partial<User>>) => Promise<string>;
+        signJWS: (payload: _aura_stack_jose.TypedJWTPayload<Partial<jose.JWTPayload>>) => Promise<string>;
+        verifyJWS: (payload: string, options?: jose.JWTVerifyOptions | undefined) => Promise<jose.JWTPayload>;
+        encryptJWE: (payload: string, options?: _aura_stack_jose.EncryptOptions | undefined) => Promise<string>;
+        decryptJWE: (payload: string, options?: jose.JWTDecryptOptions | undefined) => Promise<string>;
+    };
+    api: {
+        getSession: (options: GetSessionAPIOptions) => Promise<SessionResponse>;
+        signIn: <Redirect extends boolean = true>(oauth: LiteralUnion<BuiltInOAuthProvider>, options?: SignInAPIOptions<Redirect>) => Promise<SignInReturn<Redirect>>;
+        signOut: (options: SignOutAPIOptions) => Promise<Response>;
+    };
+};
+declare const createAuth: (config: AuthConfig) => AuthInstance;
+
+declare const createAuthAPI: (ctx: GlobalContext) => {
+    getSession: (options: GetSessionAPIOptions) => Promise<SessionResponse>;
+    signIn: <Redirect extends boolean = true>(oauth: LiteralUnion<BuiltInOAuthProvider>, options?: SignInAPIOptions<Redirect>) => Promise<SignInReturn<Redirect>>;
+    signOut: (options: SignOutAPIOptions) => Promise<Response>;
+};
+
 /**
  * Standard JWT claims that are managed internally by the token system.
  * These fields are typically filtered out before returning user data.
@@ -727,7 +1011,7 @@ type JWTPayloadWithToken = JWTPayload & {
  * Standardized user profile returned by OAuth providers after fetching user information
  * and mapping the response to this format by default or via the `profile` custom function.
  */
-interface User {
+interface User extends Record<string, unknown> {
     sub: string;
     name?: string | null;
     email?: string | null;
@@ -740,6 +1024,8 @@ interface Session {
     user: User;
     expires: string;
 }
+type AuthorizeParams = LiteralUnion<"clientId" | "prompt" | "scope" | "responseMode" | "audience" | "loginHint" | "nonce" | "display">;
+type ResponseType = LiteralUnion<"code" | "token" | "refresh_token" | "id_token">;
 /**
  * Configuration for an OAuth provider without credentials.
  * Use this type when defining provider metadata and endpoints.
@@ -747,11 +1033,36 @@ interface Session {
 interface OAuthProviderConfig<Profile extends object = Record<string, any>> {
     id: string;
     name: string;
-    authorizeURL: string;
-    accessToken: string;
-    userInfo: string;
-    scope: string;
-    responseType: "code" | "token" | "refresh_token" | "id_token";
+    /**
+     * @deprecated
+     * use `authorize` instead of `authorizeURL`
+     */
+    authorizeURL?: string;
+    authorize: string | {
+        url: string;
+        params?: Partial<Record<AuthorizeParams, string> & {
+            responseType: ResponseType;
+        }>;
+    };
+    accessToken: string | {
+        url: string;
+        headers?: Record<string, string>;
+    };
+    userInfo: string | {
+        url: string;
+        headers?: Record<string, string>;
+        method?: string;
+    };
+    /**
+     * @deprecated
+     * use `authorize.params.scope` instead of `scope`
+     */
+    scope?: string;
+    /**
+     * @deprecated
+     * use `authorize.params.response_type` instead of `responseType`
+     */
+    responseType?: ResponseType;
     profile?: (profile: Profile) => User | Promise<User>;
 }
 /**
@@ -873,6 +1184,10 @@ interface AuthConfig {
      * doesn't exist, it will throw an error during the initialization of the Auth module.
      */
     secret?: string;
+    /**
+     * Base URL of the application, used to construct the incoming request's origin.
+     */
+    baseURL?: string;
     /**
      * Base path for all authentication routes. Default is `/auth`.
      */
@@ -886,13 +1201,15 @@ interface AuthConfig {
      * Misconfiguration can lead to security vulnerabilities, such as incorrect handling of secure cookies or
      * inaccurate client IP logging.
      *
+     * This value can also be set via environment variable as `AURA_AUTH_TRUSTED_PROXY_HEADERS`
+     *
      * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For
      * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
      * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Forwarded
      * @experimental
      */
     trustedProxyHeaders?: boolean;
-    logger?: Logger;
+    logger?: boolean | Logger;
     /**
      * Defines trusted origins for your application to prevent open redirect attacks.
      * URLs from the Referer header, Origin header, request URL, and redirectTo option
@@ -923,11 +1240,23 @@ type InternalLogger = {
     level: LogLevel;
     log: typeof createLogEntry;
 };
+type SessionResponse = {
+    session: Session;
+    authenticated: true;
+} | {
+    session: null;
+    authenticated: false;
+};
+type GetSessionAPI = (options: {
+    headers: HeadersInit;
+}) => Promise<SessionResponse>;
+type AuthAPI = ReturnType<typeof createAuthAPI>;
 interface RouterGlobalContext {
     oauth: OAuthProviderRecord;
     cookies: CookieStoreConfig;
     jose: JoseInstance;
     secret?: string;
+    baseURL?: string;
     basePath: string;
     trustedProxyHeaders: boolean;
     trustedOrigins?: TrustedOrigin[] | ((request: Request) => Promise<TrustedOrigin[]> | TrustedOrigin[]);
@@ -942,8 +1271,10 @@ interface AuthInstance {
     handlers: {
         GET: (request: Request) => Response | Promise<Response>;
         POST: (request: Request) => Response | Promise<Response>;
+        ALL: (request: Request) => Response | Promise<Response>;
     };
     jose: JoseInstance;
+    api: AuthAPI;
 }
 /**
  * Base OAuth error response structure.
@@ -999,9 +1330,48 @@ type SyslogOptions = {
  * Logger function interface for structured logging.
  * Called when errors or warnings occur during authentication flows.
  */
-type Logger = {
-    level: LogLevel;
-    log: (args: SyslogOptions) => void;
+interface Logger {
+    level?: LogLevel;
+    log?: (args: SyslogOptions) => void;
+}
+type AuthClient = ReturnType<typeof createAuthInstance>["handlers"];
+type AuthClientOptions = Prettify<Omit<ClientOptions, "baseURL"> & {
+    baseURL?: string;
+}>;
+interface SignInOptions {
+    redirect?: boolean;
+    redirectTo?: string;
+}
+interface SignOutOptions {
+    redirect?: boolean;
+    redirectTo?: string;
+}
+interface GetSessionAPIOptions {
+    headers: HeadersInit;
+}
+interface SignOutAPIOptions {
+    headers: HeadersInit;
+    redirectTo?: string;
+    skipCSRFCheck?: boolean;
+}
+interface SignInAPIOptions<Redirect extends boolean = boolean> {
+    headers?: HeadersInit;
+    redirect?: Redirect;
+    redirectTo?: string;
+    request?: Request;
+}
+type FunctionAPIContext<Options extends object> = {
+    ctx: RouterGlobalContext;
+} & Options;
+type SignInReturn<Redirect extends boolean = boolean> = Redirect extends true ? Response : {
+    redirect: false;
+    signInURL: string;
+};
+type InternalContext = RouterGlobalContext & {
+    cookieConfig: {
+        secure: CookieStoreConfig;
+        standard: CookieStoreConfig;
+    };
 };
 
-export { type SecureCookie as $, type AuthRuntimeConfig as A, figma as B, type CookieConfig as C, type DiscordProfile as D, type ErrorType as E, type FigmaProfile as F, type GitLabProfile as G, type BitbucketProfile as H, type InternalLogger as I, type JWTPayloadWithToken as J, bitbucket as K, type Logger as L, type MailchimpProfile as M, type Nameplate as N, type OAuthProvider as O, type PinterestProfile as P, type GitHubProfile as Q, type RouterGlobalContext as R, type Session as S, type TrustedOrigin as T, type User as U, github as V, builtInOAuthProviders as W, type XProfile as X, createBuiltInOAuthProviders as Y, type BuiltInOAuthProvider as Z, type JWTStandardClaims as _, type CookieStoreConfig as a, type HostCookie as a0, type StandardCookie as a1, type CookieStrategyAttributes as a2, type CookieName as a3, type OAuthError as a4, type AuthorizationError as a5, type AccessTokenError as a6, type TokenRevocationError as a7, type OAuthEnv as a8, type Severity as a9, type SyslogOptions as aa, type AuthInternalErrorCode as b, type AuthSecurityErrorCode as c, type AuthConfig as d, type AuthInstance as e, type JoseInstance as f, type OAuthProviderConfig as g, type OAuthProviderCredentials as h, type LogLevel as i, type APIErrorMap as j, type OAuthProviderRecord as k, logMessages as l, createLogEntry as m, type Login as n, mailchimp as o, pinterest as p, type SummaryClub as q, type SummaryGear as r, type StravaProfile as s, strava as t, type SpotifyImage as u, type SpotifyProfile as v, spotify as w, x, gitlab as y, discord as z };
+export { dropbox as $, type AuthConfig as A, type BuiltInOAuthProvider as B, type CookieConfig as C, createProxyLogger as D, type ErrorType as E, type FunctionAPIContext as F, type GetSessionAPIOptions as G, logMessages as H, type InternalContext as I, type JWTPayloadWithToken as J, createJoseInstance as K, type LogLevel as L, decodeJWTOptions as M, jwtVerificationOptions as N, type OAuthProviderRecord as O, type AtlassianProfile as P, type ExtendedProfile as Q, type RouterGlobalContext as R, type SessionResponse as S, type TrustedOrigin as T, type User as U, atlassian as V, type AccountType as W, type DropboxProfile as X, type FullTeam as Y, type Name as Z, type RootInfo as _, type InternalLogger as a, type Bot as a0, type NotionProfile as a1, type Owner as a2, type Person as a3, type User$1 as a4, notion as a5, type TwitchProfile as a6, twitch as a7, type PinterestProfile as a8, pinterest as a9, type AccessTokenError as aA, type AuthorizationError as aB, type AuthorizeParams as aC, type CookieName as aD, type CookieStrategyAttributes as aE, type GetSessionAPI as aF, type HostCookie as aG, type JWTStandardClaims as aH, type OAuthEnv as aI, type OAuthError as aJ, type ResponseType as aK, type SecureCookie as aL, type Severity as aM, type StandardCookie as aN, type SyslogOptions as aO, type TokenRevocationError as aP, type Login as aa, type MailchimpProfile as ab, mailchimp as ac, type StravaProfile as ad, type SummaryClub as ae, type SummaryGear as af, strava as ag, type XProfile as ah, x as ai, type SpotifyImage as aj, type SpotifyProfile as ak, spotify as al, type GitLabProfile as am, gitlab as an, type DiscordProfile as ao, type Nameplate as ap, discord as aq, type FigmaProfile as ar, figma as as, type BitbucketProfile as at, bitbucket as au, type GitHubProfile as av, github as aw, createBuiltInOAuthProviders as ax, createAuthInstance as ay, createAuthAPI as az, type CookieStoreConfig as b, type AuthRuntimeConfig as c, type AuthInternalErrorCode as d, type AuthSecurityErrorCode as e, type APIErrorMap as f, type SignInAPIOptions as g, type SignInReturn as h, type SignOutAPIOptions as i, type OAuthProviderCredentials as j, type OAuthProvider as k, type AuthClientOptions as l, type Session as m, type SignInOptions as n, type SignOutOptions as o, type AuthClient as p, type AuthAPI as q, type AuthInstance as r, type JoseInstance as s, type Logger as t, type OAuthProviderConfig as u, builtInOAuthProviders as v, createAuth as w, createSyslogMessage as x, createLogEntry as y, createLogger as z };