@aura-stack/auth 0.4.0 → 0.6.0

package/dist/oauth/mailchimp.js

@@ -1,6 +1 @@
-import {
-  mailchimp
-} from "../chunk-LDU7A2JE.js";
-export {
-  mailchimp
-};
+const e=e=>({id:`mailchimp`,name:`Mailchimp`,authorize:`https://login.mailchimp.com/oauth2/authorize`,accessToken:`https://login.mailchimp.com/oauth2/token`,userInfo:`https://login.mailchimp.com/oauth2/metadata`,profile:e=>({sub:e.user_id,name:e.accountname,email:e.login.email,image:e.login.avatar}),...e});export{e as mailchimp};

package/dist/oauth/notion.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../assert-NJGroSJd.cjs`),t=t=>({id:`notion`,name:`Notion`,authorize:{url:`https://api.notion.com/v1/oauth/authorize`,params:{owner:`user`,scope:`user:read`,responseType:`code`}},accessToken:{url:`https://api.notion.com/v1/oauth/token`,headers:{Authorization:e.u(t?.clientId??`NOTION_CLIENT_ID`,t?.clientSecret??`NOTION_CLIENT_SECRET`)}},userInfo:{url:`https://api.notion.com/v1/users/me`,headers:{"Notion-Version":`2022-06-28`}},profile:e=>({sub:e.id,name:e.name,image:e.avatar_url??``,email:e?.bot?.owner?.user?.person?.email}),...t});exports.notion=t;

package/dist/oauth/notion.d.ts

@@ -0,0 +1,2 @@
+import { cn as NotionUser, dn as notion, ln as Owner, on as Bot, sn as NotionProfile, un as Person } from "../index-nqLV2t91.js";
+export { Bot, NotionProfile, NotionUser, Owner, Person, notion };

package/dist/oauth/notion.js

@@ -0,0 +1 @@
+import{u as e}from"../assert-B3iQSYlK.js";const t=t=>({id:`notion`,name:`Notion`,authorize:{url:`https://api.notion.com/v1/oauth/authorize`,params:{owner:`user`,scope:`user:read`,responseType:`code`}},accessToken:{url:`https://api.notion.com/v1/oauth/token`,headers:{Authorization:e(t?.clientId??`NOTION_CLIENT_ID`,t?.clientSecret??`NOTION_CLIENT_SECRET`)}},userInfo:{url:`https://api.notion.com/v1/users/me`,headers:{"Notion-Version":`2022-06-28`}},profile:e=>({sub:e.id,name:e.name,image:e.avatar_url??``,email:e?.bot?.owner?.user?.person?.email}),...t});export{t as notion};

package/dist/oauth/pinterest.cjs

@@ -1,49 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth/pinterest.ts
-var pinterest_exports = {};
-__export(pinterest_exports, {
-  pinterest: () => pinterest
-});
-module.exports = __toCommonJS(pinterest_exports);
-var pinterest = (options) => {
-  return {
-    id: "pinterest",
-    name: "Pinterest",
-    authorizeURL: "https://www.pinterest.com/oauth",
-    accessToken: "https://api.pinterest.com/v5/oauth/token",
-    userInfo: "https://api.pinterest.com/v5/user_account",
-    scope: "user_accounts:read",
-    responseType: "code",
-    profile(profile) {
-      return {
-        sub: profile.id,
-        name: profile.username,
-        image: profile.profile_image,
-        email: void 0
-      };
-    },
-    ...options
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  pinterest
-});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=e=>({id:`pinterest`,name:`Pinterest`,authorize:{url:`https://www.pinterest.com/oauth`,params:{scope:`user_accounts:read`,responseType:`code`}},authorizeURL:`https://www.pinterest.com/oauth`,accessToken:`https://api.pinterest.com/v5/oauth/token`,userInfo:`https://api.pinterest.com/v5/user_account`,profile:e=>({sub:e.id,name:e.username,image:e.profile_image,email:void 0}),...e});exports.pinterest=e;

package/dist/oauth/pinterest.d.ts

@@ -1,8 +1,2 @@
-export { P as PinterestProfile, p as pinterest } from '../index-CSyIJmCM.js';
-import '../@types/utility.js';
-import 'zod';
-import '../schemas.js';
-import '../jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
+import { hn as pinterest, mn as PinterestProfile } from "../index-nqLV2t91.js";
+export { PinterestProfile, pinterest };

package/dist/oauth/pinterest.js

@@ -1,6 +1 @@
-import {
-  pinterest
-} from "../chunk-E6G5YCI6.js";
-export {
-  pinterest
-};
+const e=e=>({id:`pinterest`,name:`Pinterest`,authorize:{url:`https://www.pinterest.com/oauth`,params:{scope:`user_accounts:read`,responseType:`code`}},authorizeURL:`https://www.pinterest.com/oauth`,accessToken:`https://api.pinterest.com/v5/oauth/token`,userInfo:`https://api.pinterest.com/v5/user_account`,profile:e=>({sub:e.id,name:e.username,image:e.profile_image,email:void 0}),...e});export{e as pinterest};

package/dist/oauth/spotify.cjs

@@ -1,49 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth/spotify.ts
-var spotify_exports = {};
-__export(spotify_exports, {
-  spotify: () => spotify
-});
-module.exports = __toCommonJS(spotify_exports);
-var spotify = (options) => {
-  return {
-    id: "spotify",
-    name: "Spotify",
-    authorizeURL: "https://accounts.spotify.com/authorize",
-    accessToken: "https://accounts.spotify.com/api/token",
-    userInfo: "https://api.spotify.com/v1/me",
-    scope: "user-read-private user-read-email",
-    responseType: "code",
-    profile(profile) {
-      return {
-        sub: profile.id,
-        name: profile.display_name,
-        email: profile.email,
-        image: profile.images[0]?.url ?? void 0
-      };
-    },
-    ...options
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  spotify
-});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=e=>({id:`spotify`,name:`Spotify`,authorize:{url:`https://accounts.spotify.com/authorize`,params:{responseType:`code`,scope:`user-read-private user-read-email`}},authorizeURL:`https://accounts.spotify.com/authorize`,accessToken:`https://accounts.spotify.com/api/token`,userInfo:`https://api.spotify.com/v1/me`,profile:e=>({sub:e.id,name:e.display_name,email:e.email,image:e.images[0]?.url??void 0}),...e});exports.spotify=e;

package/dist/oauth/spotify.d.ts

@@ -1,8 +1,2 @@
-export { u as SpotifyImage, v as SpotifyProfile, w as spotify } from '../index-CSyIJmCM.js';
-import 'zod';
-import '../schemas.js';
-import '../jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
-import '../@types/utility.js';
+import { Dn as spotify, En as SpotifyProfile, Tn as SpotifyImage } from "../index-nqLV2t91.js";
+export { SpotifyImage, SpotifyProfile, spotify };

package/dist/oauth/spotify.js

@@ -1,6 +1 @@
-import {
-  spotify
-} from "../chunk-IPKO6UQN.js";
-export {
-  spotify
-};
+const e=e=>({id:`spotify`,name:`Spotify`,authorize:{url:`https://accounts.spotify.com/authorize`,params:{responseType:`code`,scope:`user-read-private user-read-email`}},authorizeURL:`https://accounts.spotify.com/authorize`,accessToken:`https://accounts.spotify.com/api/token`,userInfo:`https://api.spotify.com/v1/me`,profile:e=>({sub:e.id,name:e.display_name,email:e.email,image:e.images[0]?.url??void 0}),...e});export{e as spotify};

package/dist/oauth/strava.cjs

@@ -1,49 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth/strava.ts
-var strava_exports = {};
-__export(strava_exports, {
-  strava: () => strava
-});
-module.exports = __toCommonJS(strava_exports);
-var strava = (options) => {
-  return {
-    id: "strava",
-    name: "Strava",
-    authorizeURL: "https://www.strava.com/oauth/authorize",
-    accessToken: "https://www.strava.com/oauth/token",
-    userInfo: "https://www.strava.com/api/v3/athlete",
-    scope: "read",
-    responseType: "code",
-    profile(profile) {
-      return {
-        sub: profile.id.toString(),
-        name: `${profile.firstname} ${profile.lastname}`,
-        image: profile.profile,
-        email: void 0
-      };
-    },
-    ...options
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  strava
-});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=e=>({id:`strava`,name:`Strava`,authorize:{url:`https://www.strava.com/oauth/authorize`,params:{scope:`read`,responseType:`code`}},accessToken:`https://www.strava.com/oauth/token`,userInfo:`https://www.strava.com/api/v3/athlete`,profile:e=>({sub:e.id.toString(),name:`${e.firstname} ${e.lastname}`,image:e.profile,email:void 0}),...e});exports.strava=e;

package/dist/oauth/strava.d.ts

@@ -1,8 +1,2 @@
-export { s as StravaProfile, q as SummaryClub, r as SummaryGear, t as strava } from '../index-CSyIJmCM.js';
-import 'zod';
-import '../schemas.js';
-import '../jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
-import '../@types/utility.js';
+import { Sn as strava, bn as SummaryClub, xn as SummaryGear, yn as StravaProfile } from "../index-nqLV2t91.js";
+export { StravaProfile, SummaryClub, SummaryGear, strava };

package/dist/oauth/strava.js

@@ -1,6 +1 @@
-import {
-  strava
-} from "../chunk-54CZPKR4.js";
-export {
-  strava
-};
+const e=e=>({id:`strava`,name:`Strava`,authorize:{url:`https://www.strava.com/oauth/authorize`,params:{scope:`read`,responseType:`code`}},accessToken:`https://www.strava.com/oauth/token`,userInfo:`https://www.strava.com/api/v3/athlete`,profile:e=>({sub:e.id.toString(),name:`${e.firstname} ${e.lastname}`,image:e.profile,email:void 0}),...e});export{e as strava};

package/dist/oauth/twitch.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../env-bq387KyP.cjs`),t=t=>({id:`twitch`,name:`Twitch`,authorize:{url:`https://id.twitch.tv/oauth2/authorize`,params:{scope:`user:read:email`,responseType:`code`}},accessToken:`https://id.twitch.tv/oauth2/token`,userInfo:{url:`https://api.twitch.tv/helix/users`,headers:{"Client-ID":t?.clientId??e.n(`TWITCH_CLIENT_ID`)}},profile(e){let t=e.data[0];if(!t)throw Error(`No user data found in Twitch profile response`);return{sub:t.id,name:t.display_name,email:t.email,image:t.profile_image_url}},...t});exports.twitch=t;

package/dist/oauth/twitch.d.ts

@@ -0,0 +1,2 @@
+import { fn as TwitchProfile, pn as twitch } from "../index-nqLV2t91.js";
+export { TwitchProfile, twitch };

package/dist/oauth/twitch.js

@@ -0,0 +1 @@
+import{n as e}from"../env-nvh8QBNz.js";const t=t=>({id:`twitch`,name:`Twitch`,authorize:{url:`https://id.twitch.tv/oauth2/authorize`,params:{scope:`user:read:email`,responseType:`code`}},accessToken:`https://id.twitch.tv/oauth2/token`,userInfo:{url:`https://api.twitch.tv/helix/users`,headers:{"Client-ID":t?.clientId??e(`TWITCH_CLIENT_ID`)}},profile(e){let t=e.data[0];if(!t)throw Error(`No user data found in Twitch profile response`);return{sub:t.id,name:t.display_name,email:t.email,image:t.profile_image_url}},...t});export{t as twitch};

package/dist/oauth/x.cjs

@@ -1,49 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth/x.ts
-var x_exports = {};
-__export(x_exports, {
-  x: () => x
-});
-module.exports = __toCommonJS(x_exports);
-var x = (options) => {
-  return {
-    id: "x",
-    name: "X",
-    authorizeURL: "https://twitter.com/i/oauth2/authorize",
-    accessToken: "https://api.twitter.com/2/oauth2/token",
-    userInfo: "https://api.twitter.com/2/users/me?user.fields=profile_image_url",
-    scope: "tweet.read users.read offline.access",
-    responseType: "code",
-    profile(profile) {
-      return {
-        sub: profile.data.id,
-        name: profile.data.name,
-        image: profile.data.profile_image_url,
-        email: void 0
-      };
-    },
-    ...options
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  x
-});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=e=>({id:`x`,name:`X`,authorize:{url:`https://twitter.com/i/oauth2/authorize`,params:{scope:`tweet.read users.read offline.access`,response_type:`code`}},accessToken:`https://api.twitter.com/2/oauth2/token`,userInfo:`https://api.twitter.com/2/users/me?user.fields=profile_image_url`,profile:e=>({sub:e.data.id,name:e.data.name,image:e.data.profile_image_url,email:void 0}),...e});exports.x=e;

package/dist/oauth/x.d.ts

@@ -1,8 +1,2 @@
-export { X as XProfile, x } from '../index-CSyIJmCM.js';
-import 'zod';
-import '../schemas.js';
-import '../jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
-import '../@types/utility.js';
+import { Cn as XProfile, wn as x } from "../index-nqLV2t91.js";
+export { XProfile, x };

package/dist/oauth/x.js

@@ -1,6 +1 @@
-import {
-  x
-} from "../chunk-EEE7UM5T.js";
-export {
-  x
-};
+const e=e=>({id:`x`,name:`X`,authorize:{url:`https://twitter.com/i/oauth2/authorize`,params:{scope:`tweet.read users.read offline.access`,response_type:`code`}},accessToken:`https://api.twitter.com/2/oauth2/token`,userInfo:`https://api.twitter.com/2/users/me?user.fields=profile_image_url`,profile:e=>({sub:e.data.id,name:e.data.name,image:e.data.profile_image_url,email:void 0}),...e});export{e as x};

package/dist/oauth-BntNm6aE.cjs

@@ -0,0 +1 @@
+const e=require(`./errors-CCYPHuBO.cjs`),t=require(`./env-bq387KyP.cjs`),n=require(`./assert-NJGroSJd.cjs`),r=require(`./oauth/github.cjs`),i=require(`./oauth/bitbucket.cjs`),a=require(`./oauth/figma.cjs`),o=require(`./oauth/discord.cjs`),s=require(`./oauth/gitlab.cjs`),c=require(`./oauth/spotify.cjs`),l=require(`./oauth/x.cjs`),u=require(`./oauth/strava.cjs`),d=require(`./oauth/mailchimp.cjs`),f=require(`./oauth/pinterest.cjs`),p=require(`./oauth/twitch.cjs`),m=require(`./oauth/notion.cjs`),h=require(`./oauth/dropbox.cjs`),g=require(`./oauth/atlassian.cjs`);let _=require(`zod/v4`);const v=_.z.union([(0,_.string)().url(),(0,_.object)({url:(0,_.string)().url(),params:(0,_.object)({owner:(0,_.string)().optional(),responseType:(0,_.enum)([`code`,`token`,`id_token`,`refresh_token`]).optional(),scope:(0,_.string)().optional()})})]),y=_.z.union([(0,_.string)().url(),(0,_.object)({url:(0,_.string)().url(),headers:_.z.record((0,_.string)(),(0,_.string)()).optional()})]),b=_.z.union([(0,_.string)().url(),(0,_.object)({url:(0,_.string)().url(),headers:_.z.record((0,_.string)(),(0,_.string)()).optional(),method:(0,_.string)().optional()})]),x=(0,_.object)({id:(0,_.string)(),name:(0,_.string)(),authorize:v.optional(),authorizeURL:(0,_.string)().url().optional(),accessToken:y,scope:(0,_.string)().optional(),userInfo:b,responseType:(0,_.enum)([`code`,`token`,`id_token`,`refresh_token`]).optional(),clientId:(0,_.string)(),clientSecret:(0,_.string)(),profile:_.z.function().optional()}),S=(0,_.object)({authorize:v.optional(),authorizeURL:(0,_.string)().url().optional(),accessToken:y,scope:(0,_.string)().optional(),userInfo:b,responseType:(0,_.enum)([`code`,`token`,`id_token`,`refresh_token`]).optional(),clientId:(0,_.string)(),clientSecret:(0,_.string)()}),C=S.extend({redirectURI:(0,_.string)(),state:(0,_.string)(),codeChallenge:(0,_.string)(),codeChallengeMethod:(0,_.enum)([`plain`,`S256`])});(0,_.object)({state:(0,_.string)({message:`Missing state parameter in the OAuth authorization response.`}),code:(0,_.string)({message:`Missing code parameter in the OAuth authorization response.`})});const w=(0,_.object)({error:(0,_.enum)([`invalid_request`,`unauthorized_client`,`access_denied`,`unsupported_response_type`,`invalid_scope`,`server_error`,`temporarily_unavailable`]),error_description:(0,_.string)().optional(),error_uri:(0,_.string)().optional(),state:(0,_.string)()});S.extend({redirectURI:(0,_.string)(),code:(0,_.string)(),codeVerifier:(0,_.string)().min(43).max(128)});const T=(0,_.object)({access_token:(0,_.string)(),token_type:(0,_.string)().optional(),expires_in:(0,_.number)().optional(),refresh_token:(0,_.string)().optional(),scope:(0,_.union)([(0,_.string)().optional().or((0,_.null)()),(0,_.array)((0,_.string)()).optional()])}),E=(0,_.object)({error:(0,_.enum)([`invalid_request`,`invalid_client`,`invalid_grant`,`unauthorized_client`,`unsupported_grant_type`,`invalid_scope`]),error_description:(0,_.string)().optional(),error_uri:(0,_.string)().optional()}),D=(0,_.object)({error:(0,_.string)(),error_description:(0,_.string)().optional()}),O=(0,_.object)({clientId:_.z.string().min(1,`OAuth Client ID is required in the environment variables.`),clientSecret:_.z.string().min(1,`OAuth Client Secret is required in the environment variables.`)}),k={github:r.github,bitbucket:i.bitbucket,figma:a.figma,discord:o.discord,gitlab:s.gitlab,spotify:c.spotify,x:l.x,strava:u.strava,mailchimp:d.mailchimp,pinterest:f.pinterest,twitch:p.twitch,notion:m.notion,dropbox:h.dropbox,atlassian:g.atlassian},A=r=>{let i=O.safeParse({clientId:t.n(`${r.toUpperCase()}_CLIENT_ID`),clientSecret:t.n(`${r.toUpperCase()}_CLIENT_SECRET`)});if(!i.success)throw new e.n(`INVALID_ENVIRONMENT_CONFIGURATION`,JSON.stringify({[r]:n.p(i.error)},null,2));return i.data},j=t=>{if(typeof t==`string`){let r=A(t),i=k[t](),a=x.safeParse({...i,...r});if(!a.success)throw new e.n(`INVALID_OAUTH_PROVIDER_CONFIGURATION`,`Invalid configuration for OAuth provider "${t}": ${JSON.stringify({[t]:n.p(a.error)},null,2)}`);return a.data}let r=t.clientId&&t.clientSecret?{}:A(t.id),i=x.safeParse({...r,...t});if(!i.success){let r=JSON.stringify({[t.id]:n.p(i.error)},null,2);throw new e.n(`INVALID_OAUTH_PROVIDER_CONFIGURATION`,`Invalid configuration for OAuth provider "${t.id}": ${r}`)}return i.data},M=(t=[])=>t.reduce((t,n)=>{let r=j(n);if(r.id in t)throw new e.n(`DUPLICATED_OAUTH_PROVIDER_ID`,`Duplicate OAuth provider id "${r.id}" found. Each provider must have a unique id.`);return{...t,[r.id]:r}},{});Object.defineProperty(exports,`a`,{enumerable:!0,get:function(){return C}}),Object.defineProperty(exports,`i`,{enumerable:!0,get:function(){return T}}),Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return M}}),Object.defineProperty(exports,`o`,{enumerable:!0,get:function(){return w}}),Object.defineProperty(exports,`r`,{enumerable:!0,get:function(){return E}}),Object.defineProperty(exports,`s`,{enumerable:!0,get:function(){return D}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return k}});

package/dist/oauth-DmHy9VrB.js

@@ -0,0 +1 @@
+import{n as e}from"./errors-DFWHOho6.js";import{n as t}from"./env-nvh8QBNz.js";import{p as n}from"./assert-B3iQSYlK.js";import{github as r}from"./oauth/github.js";import{bitbucket as i}from"./oauth/bitbucket.js";import{figma as a}from"./oauth/figma.js";import{discord as o}from"./oauth/discord.js";import{gitlab as s}from"./oauth/gitlab.js";import{spotify as c}from"./oauth/spotify.js";import{x as l}from"./oauth/x.js";import{strava as u}from"./oauth/strava.js";import{mailchimp as d}from"./oauth/mailchimp.js";import{pinterest as f}from"./oauth/pinterest.js";import{twitch as p}from"./oauth/twitch.js";import{notion as m}from"./oauth/notion.js";import{dropbox as h}from"./oauth/dropbox.js";import{atlassian as g}from"./oauth/atlassian.js";import{array as _,enum as v,null as y,number as b,object as x,string as S,union as C,z as w}from"zod/v4";const T=w.union([S().url(),x({url:S().url(),params:x({owner:S().optional(),responseType:v([`code`,`token`,`id_token`,`refresh_token`]).optional(),scope:S().optional()})})]),E=w.union([S().url(),x({url:S().url(),headers:w.record(S(),S()).optional()})]),D=w.union([S().url(),x({url:S().url(),headers:w.record(S(),S()).optional(),method:S().optional()})]),O=x({id:S(),name:S(),authorize:T.optional(),authorizeURL:S().url().optional(),accessToken:E,scope:S().optional(),userInfo:D,responseType:v([`code`,`token`,`id_token`,`refresh_token`]).optional(),clientId:S(),clientSecret:S(),profile:w.function().optional()}),k=x({authorize:T.optional(),authorizeURL:S().url().optional(),accessToken:E,scope:S().optional(),userInfo:D,responseType:v([`code`,`token`,`id_token`,`refresh_token`]).optional(),clientId:S(),clientSecret:S()}),A=k.extend({redirectURI:S(),state:S(),codeChallenge:S(),codeChallengeMethod:v([`plain`,`S256`])});x({state:S({message:`Missing state parameter in the OAuth authorization response.`}),code:S({message:`Missing code parameter in the OAuth authorization response.`})});const j=x({error:v([`invalid_request`,`unauthorized_client`,`access_denied`,`unsupported_response_type`,`invalid_scope`,`server_error`,`temporarily_unavailable`]),error_description:S().optional(),error_uri:S().optional(),state:S()});k.extend({redirectURI:S(),code:S(),codeVerifier:S().min(43).max(128)});const M=x({access_token:S(),token_type:S().optional(),expires_in:b().optional(),refresh_token:S().optional(),scope:C([S().optional().or(y()),_(S()).optional()])}),N=x({error:v([`invalid_request`,`invalid_client`,`invalid_grant`,`unauthorized_client`,`unsupported_grant_type`,`invalid_scope`]),error_description:S().optional(),error_uri:S().optional()}),P=x({error:S(),error_description:S().optional()}),F=x({clientId:w.string().min(1,`OAuth Client ID is required in the environment variables.`),clientSecret:w.string().min(1,`OAuth Client Secret is required in the environment variables.`)}),I={github:r,bitbucket:i,figma:a,discord:o,gitlab:s,spotify:c,x:l,strava:u,mailchimp:d,pinterest:f,twitch:p,notion:m,dropbox:h,atlassian:g},L=r=>{let i=F.safeParse({clientId:t(`${r.toUpperCase()}_CLIENT_ID`),clientSecret:t(`${r.toUpperCase()}_CLIENT_SECRET`)});if(!i.success)throw new e(`INVALID_ENVIRONMENT_CONFIGURATION`,JSON.stringify({[r]:n(i.error)},null,2));return i.data},R=t=>{if(typeof t==`string`){let r=L(t),i=I[t](),a=O.safeParse({...i,...r});if(!a.success)throw new e(`INVALID_OAUTH_PROVIDER_CONFIGURATION`,`Invalid configuration for OAuth provider "${t}": ${JSON.stringify({[t]:n(a.error)},null,2)}`);return a.data}let r=t.clientId&&t.clientSecret?{}:L(t.id),i=O.safeParse({...r,...t});if(!i.success){let r=JSON.stringify({[t.id]:n(i.error)},null,2);throw new e(`INVALID_OAUTH_PROVIDER_CONFIGURATION`,`Invalid configuration for OAuth provider "${t.id}": ${r}`)}return i.data},z=(t=[])=>t.reduce((t,n)=>{let r=R(n);if(r.id in t)throw new e(`DUPLICATED_OAUTH_PROVIDER_ID`,`Duplicate OAuth provider id "${r.id}" found. Each provider must have a unique id.`);return{...t,[r.id]:r}},{});export{A as a,M as i,z as n,j as o,N as r,P as s,I as t};

package/dist/shared/crypto.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../crypto-CoXA5w_4.cjs`);exports.createCSRF=e.t,exports.createHash=e.n,exports.createPKCE=e.r,exports.createSecretValue=e.i,exports.hashPassword=e.a,exports.verifyCSRF=e.o,exports.verifyPassword=e.s;

package/dist/shared/crypto.d.ts

@@ -0,0 +1,47 @@
+import { Nt as JoseInstance, _t as User, xt as AuthRuntimeConfig } from "../index-nqLV2t91.js";
+
+//#region src/shared/crypto.d.ts
+declare const createSecretValue: (length?: number) => string;
+declare const createHash: (data: string) => Promise<string>;
+/**
+ * Creates the code challenge flow for PKCE OAuth flow. It generates a code verifier and its corresponding
+ * code challenge using SHA-256 hashing.
+ *   - code_verifier: A cryptographically random string used to mitigate authorization code interception attacks.
+ *   - code_challenge: A hashed version of the code_verifier sent in the authorization request.
+ *   - method: The method used to generate the code challenge, typically "S256" for SHA-256.
+ *
+ * @see https://datatracker.ietf.org/doc/html/rfc7636#section-4.1
+ */
+declare const createPKCE: (verifier?: string) => Promise<{
+  codeVerifier: string;
+  codeChallenge: string;
+  method: string;
+}>;
+/**
+ * Creates a CSRF token to be used in OAuth flows to prevent cross-site request forgery attacks.
+ *
+ * @param csrfCookie - Optional existing CSRF cookie to verify and reuse
+ * @returns Signed CSRF token
+ */
+declare const createCSRF: (jose: AuthRuntimeConfig["jose"], csrfCookie?: string) => Promise<string>;
+declare const verifyCSRF: <DefaultUser extends User = User>(jose: JoseInstance<DefaultUser>, cookie: string, header: string) => Promise<boolean>;
+/**
+ * Hashes a password using PBKDF2 with SHA-256.
+ * PBKDF2 is available in standard Web Crypto (SubtleCrypto).
+ *
+ * @param password - The password to hash.
+ * @param salt - Optional salt (base64url encoded). If not provided, a random salt will be generated.
+ * @param iterations - The number of PBKDF2 iterations. Default is 100,000.
+ * @returns The hashed password in the format `iterations:salt:hash` (all segments base64url encoded).
+ */
+declare const hashPassword: (password: string, salt?: string, iterations?: number) => Promise<string>;
+/**
+ * Verifies a password against a hashed value.
+ *
+ * @param password - The password to verify.
+ * @param hashedPassword - The hashed password to compare against.
+ * @returns A promise that resolves to true if the password matches the hash, false otherwise.
+ */
+declare const verifyPassword: (password: string, hashedPassword: string) => Promise<boolean>;
+//#endregion
+export { createCSRF, createHash, createPKCE, createSecretValue, hashPassword, verifyCSRF, verifyPassword };

package/dist/shared/crypto.js

@@ -0,0 +1 @@
+import{a as e,i as t,n,o as r,r as i,s as a,t as o}from"../crypto-Bz8nIciY.js";export{o as createCSRF,n as createHash,i as createPKCE,t as createSecretValue,e as hashPassword,r as verifyCSRF,a as verifyPassword};

package/dist/shared/identity.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require(`zod/v4`);const t=e.z.object({sub:(0,e.string)(),name:(0,e.string)().nullable().optional(),image:(0,e.string)().nullable().optional(),email:(0,e.email)().nullable().optional()}),n=t=>e.z.object(t);exports.UserIdentity=t,exports.createIdentity=n;

package/dist/shared/identity.d.ts

@@ -0,0 +1,2 @@
+import { Bn as UserIdentity, G as InferShape, H as EditableShape, Hn as UserShape, U as InferAuthIdentity, Un as createIdentity, Vn as UserIdentityType, W as InferIdentity, Y as ShapeToObject } from "../index-nqLV2t91.js";
+export { EditableShape, InferAuthIdentity, InferIdentity, InferShape, ShapeToObject, UserIdentity, UserIdentityType, UserShape, createIdentity };

package/dist/shared/identity.js

@@ -0,0 +1 @@
+import{email as e,string as t,z as n}from"zod/v4";const r=n.object({sub:t(),name:t().nullable().optional(),image:t().nullable().optional(),email:e().nullable().optional()}),i=e=>n.object(e);export{r as UserIdentity,i as createIdentity};

package/dist/shared/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../assert-NJGroSJd.cjs`),t=require(`../logger-UnUhYL2V.cjs`);exports.createBasicAuthHeader=e.u,exports.createSyslogMessage=t.n;

package/dist/shared/index.d.ts

@@ -0,0 +1,5 @@
+import { zn as createSyslogMessage } from "../index-nqLV2t91.js";
+//#region src/shared/utils.d.ts
+declare const createBasicAuthHeader: (username: string, password: string) => string;
+//#endregion
+export { createBasicAuthHeader, createSyslogMessage };

package/dist/shared/index.js

@@ -0,0 +1 @@
+import{u as e}from"../assert-B3iQSYlK.js";import{n as t}from"../logger-C59_CDMk.js";export{e as createBasicAuthHeader,t as createSyslogMessage};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aura-stack/auth",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "private": false,
   "type": "module",
   "description": "Core auth for @aura-stack/auth",
@@ -12,6 +12,7 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/@aura-stack/auth"
   },
+  "sideEffects": false,
   "files": [
     "dist"
   ],
@@ -21,6 +22,11 @@
       "import": "./dist/index.js",
       "require": "./dist/index.cjs"
     },
+    "./oauth": {
+      "types": "./dist/oauth/index.d.ts",
+      "import": "./dist/oauth/index.js",
+      "require": "./dist/oauth/index.cjs"
+    },
     "./oauth/*": {
       "types": "./dist/oauth/*.d.ts",
       "import": "./dist/oauth/*.js",
@@ -30,6 +36,26 @@
       "types": "./dist/@types/index.d.ts",
       "import": "./dist/@types/index.js",
       "require": "./dist/@types/index.cjs"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js",
+      "require": "./dist/client/index.cjs"
+    },
+    "./identity": {
+      "types": "./dist/shared/identity.d.ts",
+      "import": "./dist/shared/identity.js",
+      "require": "./dist/shared/identity.cjs"
+    },
+    "./crypto": {
+      "types": "./dist/shared/crypto.d.ts",
+      "import": "./dist/shared/crypto.js",
+      "require": "./dist/shared/crypto.cjs"
+    },
+    "./shared": {
+      "types": "./dist/shared/index.d.ts",
+      "import": "./dist/shared/index.js",
+      "require": "./dist/shared/index.cjs"
     }
   },
   "keywords": [
@@ -44,27 +70,28 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@aura-stack/router": "^0.5.0",
-    "zod": "^4.3.5",
-    "@aura-stack/jose": "0.3.0"
+    "@aura-stack/router": "^0.6.0",
+    "zod": "4.3.5",
+    "@aura-stack/jose": "0.5.0"
   },
   "devDependencies": {
-    "@types/node": "^24.9.2",
     "typescript": "^5.9.2",
+    "vitest": "4.1.4",
     "@aura-stack/tsconfig": "0.0.0",
-    "@aura-stack/tsup-config": "0.0.0"
+    "@aura-stack/tsdown-config": "0.0.0"
   },
   "scripts": {
-    "dev": "tsup --watch",
-    "build": "tsup",
+    "dev": "tsdown --watch",
+    "build": "tsdown",
+    "lint": "oxlint",
+    "lint:fix": "oxlint --fix",
     "test": "vitest --run",
     "test:watch": "vitest",
     "test:coverage": "vitest --run --coverage",
-    "format": "prettier --write . --cache --cache-location .cache/.prettiercache",
-    "format:check": "prettier --check . --cache --cache-location .cache/.prettiercache",
+    "format": "oxfmt",
+    "format:check": "oxfmt --check",
     "type-check": "tsc --noEmit",
     "clean": "rm -rf dist",
-    "clean:cts": "find dist -type f -name \"*.cts\" -delete",
-    "prepublish": "pnpm clean:cts"
+    "clean:cts": "if [ -d dist ]; then find dist -type f -name \"*.cts\" -delete; fi"
   }
 }

package/dist/@types/router.d.cjs

@@ -1 +0,0 @@
-"use strict";

package/dist/@types/router.d.d.ts

@@ -1,12 +0,0 @@
-import { R as RouterGlobalContext } from '../index-CSyIJmCM.js';
-import 'zod';
-import '../schemas.js';
-import '../jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
-import './utility.js';
-
-declare module "@aura-stack/router" {
-    interface GlobalContext extends RouterGlobalContext {}
-}

package/dist/@types/utility.cjs

@@ -1,18 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/@types/utility.ts
-var utility_exports = {};
-module.exports = __toCommonJS(utility_exports);

package/dist/@types/utility.d.ts

@@ -1,6 +0,0 @@
-type Prettify<T> = {
-    [K in keyof T]: T[K];
-};
-type LiteralUnion<T extends U, U = string> = T | (U & Record<never, never>);
-
-export type { LiteralUnion, Prettify };

package/dist/@types/utility.js

@@ -1 +0,0 @@
-import "../chunk-PG7UYFG5.js";