@authorizerdev/authorizer-js 2.0.3 → 3.0.0-rc.1

package/lib/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/constants.ts","../src/types.ts","../src/utils.ts"],"sourcesContent":["// Note: write gql query in single line to reduce bundle size\nimport crossFetch from 'cross-fetch';\nimport { DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS } from './constants';\nimport * as Types from './types';\nimport {\n  bufferToBase64UrlEncoded,\n  createQueryParams,\n  createRandomString,\n  encode,\n  executeIframe,\n  hasWindow,\n  sha256,\n  trimURL,\n} from './utils';\n\n// re-usable gql response fragment\nconst userFragment =\n  'id email email_verified given_name family_name middle_name nickname preferred_username picture signup_methods gender birthdate phone_number phone_number_verified roles created_at updated_at revoked_timestamp is_multi_factor_auth_enabled app_data';\nconst authTokenFragment = `message access_token expires_in refresh_token id_token should_show_email_otp_screen should_show_mobile_otp_screen should_show_totp_screen authenticator_scanner_image authenticator_secret authenticator_recovery_codes user { ${userFragment} }`;\n\n// set fetch based on window object. Cross fetch have issues with umd build\nconst getFetcher = () => (hasWindow() ? window.fetch : crossFetch);\n\nexport * from './types';\n\nexport class Authorizer {\n  // class variable\n  config: Types.ConfigType;\n  codeVerifier: string;\n\n  // constructor\n  constructor(config: Types.ConfigType) {\n    if (!config) throw new Error('Configuration is required');\n\n    this.config = config;\n    if (!config.authorizerURL && !config.authorizerURL.trim())\n      throw new Error('Invalid authorizerURL');\n\n    if (config.authorizerURL)\n      this.config.authorizerURL = trimURL(config.authorizerURL);\n\n    if (!config.redirectURL && !config.redirectURL.trim())\n      throw new Error('Invalid redirectURL');\n    else this.config.redirectURL = trimURL(config.redirectURL);\n\n    this.config.extraHeaders = {\n      ...(config.extraHeaders || {}),\n      'x-authorizer-url': this.config.authorizerURL,\n      'x-authorizer-client-id': this.config.clientID || '',\n      'Content-Type': 'application/json',\n    };\n    this.config.clientID = (config?.clientID || '').trim();\n  }\n\n  authorize = async (\n    data: Types.AuthorizeRequest,\n  ): Promise<\n    | Types.ApiResponse<Types.GetTokenResponse>\n    | Types.ApiResponse<Types.AuthorizeResponse>\n  > => {\n    if (!hasWindow())\n      return this.errorResponse([\n        new Error('this feature is only supported in browser'),\n      ]);\n\n    const scopes = ['openid', 'profile', 'email'];\n    if (data.use_refresh_token) scopes.push('offline_access');\n\n    const requestData: Record<string, string> = {\n      redirect_uri: this.config.redirectURL,\n      response_mode: data.response_mode || 'web_message',\n      state: encode(createRandomString()),\n      nonce: encode(createRandomString()),\n      response_type: data.response_type,\n      scope: scopes.join(' '),\n      client_id: this.config?.clientID || '',\n    };\n\n    if (data.response_type === Types.ResponseTypes.Code) {\n      this.codeVerifier = createRandomString();\n      const sha = await sha256(this.codeVerifier);\n      const codeChallenge = bufferToBase64UrlEncoded(sha);\n      requestData.code_challenge = codeChallenge;\n    }\n\n    const authorizeURL = `${\n      this.config.authorizerURL\n    }/authorize?${createQueryParams(requestData)}`;\n\n    if (requestData.response_mode !== 'web_message') {\n      window.location.replace(authorizeURL);\n      return this.okResponse(undefined);\n    }\n\n    try {\n      const iframeRes = await executeIframe(\n        authorizeURL,\n        this.config.authorizerURL,\n        DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS,\n      );\n\n      if (data.response_type === Types.ResponseTypes.Code) {\n        // get token and return it\n        const tokenResp: Types.ApiResponse<Types.GetTokenResponse> =\n          await this.getToken({\n            code: iframeRes.code,\n          });\n        return tokenResp.errors.length\n          ? this.errorResponse(tokenResp.errors)\n          : this.okResponse(tokenResp.data);\n      }\n\n      // this includes access_token, id_token & refresh_token(optionally)\n      return this.okResponse(iframeRes);\n    } catch (err) {\n      if (err.error) {\n        window.location.replace(\n          `${this.config.authorizerURL}/app?state=${encode(\n            JSON.stringify(this.config),\n          )}&redirect_uri=${this.config.redirectURL}`,\n        );\n      }\n\n      return this.errorResponse(err);\n    }\n  };\n\n  browserLogin = async (): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const tokenResp: Types.ApiResponse<Types.AuthToken> =\n        await this.getSession();\n      return tokenResp.errors.length\n        ? this.errorResponse(tokenResp.errors)\n        : this.okResponse(tokenResp.data);\n    } catch (err) {\n      if (!hasWindow()) {\n        return {\n          data: undefined,\n          errors: [new Error('browserLogin is only supported for browsers')],\n        };\n      }\n\n      window.location.replace(\n        `${this.config.authorizerURL}/app?state=${encode(\n          JSON.stringify(this.config),\n        )}&redirect_uri=${this.config.redirectURL}`,\n      );\n      return this.errorResponse(err);\n    }\n  };\n\n  forgotPassword = async (\n    data: Types.ForgotPasswordRequest,\n  ): Promise<Types.ApiResponse<Types.ForgotPasswordResponse>> => {\n    if (!data.state) data.state = encode(createRandomString());\n\n    if (!data.redirect_uri) data.redirect_uri = this.config.redirectURL;\n\n    try {\n      const forgotPasswordResp = await this.graphqlQuery({\n        query:\n          'mutation forgotPassword($data: ForgotPasswordRequest!) {\tforgot_password(params: $data) { message should_show_mobile_otp_screen } }',\n        variables: {\n          data,\n        },\n      });\n      return forgotPasswordResp?.errors?.length\n        ? this.errorResponse(forgotPasswordResp.errors)\n        : this.okResponse(forgotPasswordResp?.data.forgot_password);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  getMetaData = async (): Promise<Types.ApiResponse<Types.MetaData>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query:\n          'query { meta { version client_id is_google_login_enabled is_facebook_login_enabled is_github_login_enabled is_linkedin_login_enabled is_apple_login_enabled is_twitter_login_enabled is_microsoft_login_enabled is_twitch_login_enabled is_roblox_login_enabled is_email_verification_enabled is_basic_authentication_enabled is_magic_link_login_enabled is_sign_up_enabled is_strong_password_enabled is_multi_factor_auth_enabled is_mobile_basic_authentication_enabled is_phone_verification_enabled } }',\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data.meta);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  getProfile = async (\n    headers?: Types.Headers,\n  ): Promise<Types.ApiResponse<Types.User>> => {\n    try {\n      const profileRes = await this.graphqlQuery({\n        query: `query {\tprofile { ${userFragment} } }`,\n        headers,\n      });\n\n      return profileRes?.errors?.length\n        ? this.errorResponse(profileRes.errors)\n        : this.okResponse(profileRes.data.profile);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  // this is used to verify / get session using cookie by default. If using node.js pass authorization header\n  getSession = async (\n    headers?: Types.Headers,\n    params?: Types.SessionQueryRequest,\n  ): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `query getSession($params: SessionQueryRequest){session(params: $params) { ${authTokenFragment} } }`,\n        headers,\n        variables: {\n          params,\n        },\n      });\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.session);\n    } catch (err) {\n      return this.errorResponse(err);\n    }\n  };\n\n  getToken = async (\n    data: Types.GetTokenRequest,\n  ): Promise<Types.ApiResponse<Types.GetTokenResponse>> => {\n    if (!data.grant_type) data.grant_type = 'authorization_code';\n\n    if (data.grant_type === 'refresh_token' && !data.refresh_token)\n      return this.errorResponse([new Error('Invalid refresh_token')]);\n\n    if (data.grant_type === 'authorization_code' && !this.codeVerifier)\n      return this.errorResponse([new Error('Invalid code verifier')]);\n\n    const requestData = {\n      client_id: this.config.clientID,\n      code: data.code || '',\n      code_verifier: this.codeVerifier || '',\n      grant_type: data.grant_type || '',\n      refresh_token: data.refresh_token || '',\n    };\n\n    try {\n      const fetcher = getFetcher();\n      const res = await fetcher(`${this.config.authorizerURL}/oauth/token`, {\n        method: 'POST',\n        body: JSON.stringify(requestData),\n        headers: {\n          ...this.config.extraHeaders,\n        },\n        credentials: 'include',\n      });\n\n      const json = await res.json();\n      if (res.status >= 400)\n        return this.errorResponse([\n          new Error(json.error_description || json.error),\n        ]);\n\n      return this.okResponse(json);\n    } catch (err) {\n      return this.errorResponse(err);\n    }\n  };\n\n  login = async (\n    data: Types.LoginRequest,\n  ): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation login($data: LoginRequest!) { login(params: $data) { ${authTokenFragment}}}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.login);\n    } catch (err) {\n      return this.errorResponse([new Error(err)]);\n    }\n  };\n\n  logout = async (\n    headers?: Types.Headers,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: ' mutation { logout { message } } ',\n        headers,\n      });\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.response);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  magicLinkLogin = async (\n    data: Types.MagicLinkLoginRequest,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      if (!data.state) data.state = encode(createRandomString());\n\n      if (!data.redirect_uri) data.redirect_uri = this.config.redirectURL;\n\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation magicLinkLogin($data: MagicLinkLoginRequest!) { magic_link_login(params: $data) { message }}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.magic_link_login);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  oauthLogin = async (\n    oauthProvider: string,\n    roles?: string[],\n    redirect_uri?: string,\n    state?: string,\n  ): Promise<void> => {\n    let urlState = state;\n    if (!urlState) {\n      urlState = encode(createRandomString());\n    }\n\n    // @ts-expect-error ts-migrate(2554) FIXME: Expected 1 arguments, but got 0.\n    if (!Object.values(Types.OAuthProviders).includes(oauthProvider)) {\n      throw new Error(\n        `only following oauth providers are supported: ${Object.values(\n          oauthProvider,\n        ).toString()}`,\n      );\n    }\n    if (!hasWindow())\n      throw new Error('oauthLogin is only supported for browsers');\n\n    if (roles && roles.length) urlState += `&roles=${roles.join(',')}`;\n\n    window.location.replace(\n      `${this.config.authorizerURL}/oauth_login/${oauthProvider}?redirect_uri=${\n        redirect_uri || this.config.redirectURL\n      }&state=${urlState}`,\n    );\n  };\n\n  resendOtp = async (\n    data: Types.ResendOtpRequest,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation resendOtp($data: ResendOTPRequest!) { resend_otp(params: $data) { message }}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.resend_otp);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  resetPassword = async (\n    data: Types.ResetPasswordRequest,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const resetPasswordRes = await this.graphqlQuery({\n        query:\n          'mutation resetPassword($data: ResetPasswordRequest!) {\treset_password(params: $data) { message } }',\n        variables: {\n          data,\n        },\n      });\n      return resetPasswordRes?.errors?.length\n        ? this.errorResponse(resetPasswordRes.errors)\n        : this.okResponse(resetPasswordRes.data?.reset_password);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  revokeToken = async (data: { refresh_token: string }) => {\n    if (!data.refresh_token && !data.refresh_token.trim())\n      return this.errorResponse([new Error('Invalid refresh_token')]);\n\n    const fetcher = getFetcher();\n    const res = await fetcher(`${this.config.authorizerURL}/oauth/revoke`, {\n      method: 'POST',\n      headers: {\n        ...this.config.extraHeaders,\n      },\n      body: JSON.stringify({\n        refresh_token: data.refresh_token,\n        client_id: this.config.clientID,\n      }),\n    });\n\n    const responseData = await res.json();\n    return this.okResponse(responseData);\n  };\n\n  signup = async (\n    data: Types.SignUpRequest,\n  ): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation signup($data: SignUpRequest!) { signup(params: $data) { ${authTokenFragment}}}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.signup);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  updateProfile = async (\n    data: Types.UpdateProfileRequest,\n    headers?: Types.Headers,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const updateProfileRes = await this.graphqlQuery({\n        query:\n          'mutation updateProfile($data: UpdateProfileRequest!) {\tupdate_profile(params: $data) { message } }',\n        headers,\n        variables: {\n          data,\n        },\n      });\n\n      return updateProfileRes?.errors?.length\n        ? this.errorResponse(updateProfileRes.errors)\n        : this.okResponse(updateProfileRes.data?.update_profile);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  deactivateAccount = async (\n    headers?: Types.Headers,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: 'mutation deactivateAccount { deactivate_account { message } }',\n        headers,\n      });\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.deactivate_account);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  validateJWTToken = async (\n    params?: Types.ValidateJWTTokenRequest,\n  ): Promise<Types.ApiResponse<Types.ValidateJWTTokenResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query:\n          'query validateJWTToken($params: ValidateJWTTokenRequest!){validate_jwt_token(params: $params) { is_valid claims } }',\n        variables: {\n          params,\n        },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.validate_jwt_token);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  validateSession = async (\n    params?: Types.ValidateSessionRequest,\n  ): Promise<Types.ApiResponse<Types.ValidateSessionResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `query validateSession($params: ValidateSessionRequest){validate_session(params: $params) { is_valid user { ${userFragment} } } }`,\n        variables: {\n          params,\n        },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.validate_session);\n    } catch (error) {\n      return this.errorResponse([error]);\n    }\n  };\n\n  verifyEmail = async (\n    data: Types.VerifyEmailRequest,\n  ): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation verifyEmail($data: VerifyEmailRequest!) { verify_email(params: $data) { ${authTokenFragment}}}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.verify_email);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  resendVerifyEmail = async (\n    data: Types.ResendVerifyEmailRequest,\n  ): Promise<Types.ApiResponse<Types.GenericResponse>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation resendVerifyEmail($data: ResendVerifyEmailRequest!) { resend_verify_email(params: $data) { message }}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.resend_verify_email);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  verifyOtp = async (\n    data: Types.VerifyOtpRequest,\n  ): Promise<Types.ApiResponse<Types.AuthToken>> => {\n    try {\n      const res = await this.graphqlQuery({\n        query: `\n\t\t\t\t\tmutation verifyOtp($data: VerifyOTPRequest!) { verify_otp(params: $data) { ${authTokenFragment}}}\n\t\t\t\t`,\n        variables: { data },\n      });\n\n      return res?.errors?.length\n        ? this.errorResponse(res.errors)\n        : this.okResponse(res.data?.verify_otp);\n    } catch (err) {\n      return this.errorResponse([err]);\n    }\n  };\n\n  // helper to execute graphql queries\n  // takes in any query or mutation string as value\n  graphqlQuery = async (\n    data: Types.GraphqlQueryRequest,\n  ): Promise<Types.GrapQlResponseType> => {\n    const fetcher = getFetcher();\n    const res = await fetcher(`${this.config.authorizerURL}/graphql`, {\n      method: 'POST',\n      body: JSON.stringify({\n        query: data.query,\n        variables: data.variables || {},\n      }),\n      headers: {\n        ...this.config.extraHeaders,\n        ...(data.headers || {}),\n      },\n      credentials: 'include',\n    });\n\n    const json = await res.json();\n\n    if (json?.errors?.length) {\n      return { data: undefined, errors: json.errors };\n    }\n\n    return { data: json.data, errors: [] };\n  };\n\n  errorResponse = (errors: Error[]): Types.ApiResponse<any> => {\n    return {\n      data: undefined,\n      errors,\n    };\n  };\n\n  okResponse = (data: any): Types.ApiResponse<any> => {\n    return {\n      data,\n      errors: [],\n    };\n  };\n}\n","export const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;\nexport const CLEANUP_IFRAME_TIMEOUT_IN_SECONDS = 2;\nexport const AUTHORIZE_IFRAME_TIMEOUT = 5;\n","export interface GrapQlResponseType {\n  data: any | undefined;\n  errors: Error[];\n}\nexport interface ApiResponse<T> {\n  errors: Error[];\n  data: T | undefined;\n}\nexport interface ConfigType {\n  authorizerURL: string;\n  redirectURL: string;\n  clientID?: string;\n  extraHeaders?: Record<string, string>;\n}\n\n// Pagination\nexport interface Pagination {\n  limit: number;\n  page: number;\n  offset: number;\n  total: number;\n}\n\n// Meta\nexport interface Meta {\n  version: string;\n  client_id: string;\n  is_google_login_enabled: boolean;\n  is_facebook_login_enabled: boolean;\n  is_github_login_enabled: boolean;\n  is_linkedin_login_enabled: boolean;\n  is_apple_login_enabled: boolean;\n  is_discord_login_enabled: boolean;\n  is_twitter_login_enabled: boolean;\n  is_microsoft_login_enabled: boolean;\n  is_twitch_login_enabled: boolean;\n  is_roblox_login_enabled: boolean;\n  is_email_verification_enabled: boolean;\n  is_basic_authentication_enabled: boolean;\n  is_magic_link_login_enabled: boolean;\n  is_sign_up_enabled: boolean;\n  is_strong_password_enabled: boolean;\n  is_multi_factor_auth_enabled: boolean;\n  is_mobile_basic_authentication_enabled: boolean;\n  is_phone_verification_enabled: boolean;\n}\n\n// User\nexport interface User {\n  id: string;\n  email: string | null;\n  email_verified: boolean;\n  signup_methods: string;\n  given_name: string | null;\n  family_name: string | null;\n  middle_name: string | null;\n  nickname: string | null;\n  preferred_username: string | null;\n  gender: string | null;\n  birthdate: string | null;\n  phone_number: string | null;\n  phone_number_verified: boolean;\n  picture: string | null;\n  roles: string[];\n  created_at: number | null;\n  updated_at: number | null;\n  revoked_timestamp: number | null;\n  is_multi_factor_auth_enabled: boolean | null;\n  app_data: Record<string, any> | null;\n}\n\n// Users\nexport interface Users {\n  pagination: Pagination;\n  users: User[];\n}\n\n// VerificationRequest\nexport interface VerificationRequest {\n  id: string;\n  identifier: string | null;\n  token: string | null;\n  email: string | null;\n  expires: number | null;\n  created_at: number | null;\n  updated_at: number | null;\n  nonce: string | null;\n  redirect_uri: string | null;\n}\n\n// VerificationRequests\nexport interface VerificationRequests {\n  pagination: Pagination;\n  verification_requests: VerificationRequest[];\n}\n\n// AuthorizerError (GraphQL Error type - renamed to avoid conflict with native Error)\nexport interface AuthorizerError {\n  message: string;\n  reason: string;\n}\n\n// AuthResponse\nexport interface AuthResponse {\n  message: string;\n  should_show_email_otp_screen: boolean | null;\n  should_show_mobile_otp_screen: boolean | null;\n  should_show_totp_screen: boolean | null;\n  access_token: string | null;\n  id_token: string | null;\n  refresh_token: string | null;\n  expires_in: number | null;\n  user: User | null;\n  authenticator_scanner_image: string | null;\n  authenticator_secret: string | null;\n  authenticator_recovery_codes: string[] | null;\n}\n\n// Keep AuthToken as alias for backward compatibility\nexport type AuthToken = AuthResponse;\n\n// Response\nexport interface Response {\n  message: string;\n}\n\n// Keep GenericResponse as alias for backward compatibility\nexport type GenericResponse = Response;\n\n// ForgotPasswordResponse\nexport interface ForgotPasswordResponse {\n  message: string;\n  should_show_mobile_otp_screen: boolean | null;\n}\n\n// InviteMembersResponse\nexport interface InviteMembersResponse {\n  message: string;\n  Users: User[];\n}\n\n// LoginRequest\nexport interface LoginRequest {\n  email?: string | null;\n  phone_number?: string | null;\n  password: string;\n  roles?: string[] | null;\n  scope?: string[] | null;\n  state?: string | null;\n}\n\n// SignUpRequest\nexport interface SignUpRequest {\n  email?: string | null;\n  given_name?: string | null;\n  family_name?: string | null;\n  middle_name?: string | null;\n  nickname?: string | null;\n  gender?: string | null;\n  birthdate?: string | null;\n  phone_number?: string | null;\n  picture?: string | null;\n  password: string;\n  confirm_password: string;\n  roles?: string[] | null;\n  scope?: string[] | null;\n  redirect_uri?: string | null;\n  is_multi_factor_auth_enabled?: boolean | null;\n  state?: string | null;\n  app_data?: Record<string, any> | null;\n}\n\n// Keep SignupRequest as alias for backward compatibility\nexport type SignupRequest = SignUpRequest;\n\n// MagicLinkLoginRequest\nexport interface MagicLinkLoginRequest {\n  email: string;\n  roles?: string[] | null;\n  scope?: string[] | null;\n  state?: string | null;\n  redirect_uri?: string | null;\n}\n\n// VerifyEmailRequest\nexport interface VerifyEmailRequest {\n  token: string;\n  state?: string | null;\n}\n\n// ResendVerifyEmailRequest\nexport interface ResendVerifyEmailRequest {\n  email: string;\n  identifier: string;\n  state?: string | null;\n}\n\n// VerifyOTPRequest\nexport interface VerifyOTPRequest {\n  email?: string | null;\n  phone_number?: string | null;\n  otp: string;\n  is_totp?: boolean | null;\n  state?: string | null;\n}\n\n// Keep VerifyOtpRequest as alias for backward compatibility\nexport type VerifyOtpRequest = VerifyOTPRequest;\n\n// ResendOTPRequest\nexport interface ResendOTPRequest {\n  email?: string | null;\n  phone_number?: string | null;\n  state?: string | null;\n}\n\n// Keep ResendOtpRequest as alias for backward compatibility\nexport type ResendOtpRequest = ResendOTPRequest;\n\n// UpdateProfileRequest\nexport interface UpdateProfileRequest {\n  old_password?: string | null;\n  new_password?: string | null;\n  confirm_new_password?: string | null;\n  email?: string | null;\n  given_name?: string | null;\n  family_name?: string | null;\n  middle_name?: string | null;\n  nickname?: string | null;\n  gender?: string | null;\n  birthdate?: string | null;\n  phone_number?: string | null;\n  picture?: string | null;\n  is_multi_factor_auth_enabled?: boolean | null;\n  app_data?: Record<string, any> | null;\n}\n\n// UpdateUserRequest (admin only)\nexport interface UpdateUserRequest {\n  id: string;\n  email?: string | null;\n  email_verified?: boolean | null;\n  given_name?: string | null;\n  family_name?: string | null;\n  middle_name?: string | null;\n  nickname?: string | null;\n  gender?: string | null;\n  birthdate?: string | null;\n  phone_number?: string | null;\n  phone_number_verified?: boolean | null;\n  picture?: string | null;\n  roles?: string[] | null;\n  is_multi_factor_auth_enabled?: boolean | null;\n  app_data?: Record<string, any> | null;\n}\n\n// ForgotPasswordRequest\nexport interface ForgotPasswordRequest {\n  email?: string | null;\n  phone_number?: string | null;\n  state?: string | null;\n  redirect_uri?: string | null;\n}\n\n// ResetPasswordRequest\nexport interface ResetPasswordRequest {\n  token?: string | null;\n  otp?: string | null;\n  phone_number?: string | null;\n  password: string;\n  confirm_password: string;\n}\n\n// Keep ResetPasswordInput as alias for backward compatibility\nexport type ResetPasswordInput = ResetPasswordRequest;\n\n// DeleteUserRequest (admin only)\nexport interface DeleteUserRequest {\n  email: string;\n}\n\n// SessionQueryRequest\nexport interface SessionQueryRequest {\n  roles?: string[] | null;\n  scope?: string[] | null;\n}\n\n// Keep SessionQueryInput as alias for backward compatibility\nexport type SessionQueryInput = SessionQueryRequest;\n\n// ValidateJWTTokenRequest\nexport interface ValidateJWTTokenRequest {\n  token_type: string;\n  token: string;\n  roles?: string[] | null;\n}\n\n// Keep ValidateJWTTokenInput as alias for backward compatibility\nexport type ValidateJWTTokenInput = ValidateJWTTokenRequest;\n\n// ValidateJWTTokenResponse\nexport interface ValidateJWTTokenResponse {\n  is_valid: boolean;\n  claims: Record<string, any>;\n}\n\n// ValidateSessionRequest\nexport interface ValidateSessionRequest {\n  cookie: string;\n  roles?: string[] | null;\n}\n\n// Keep ValidateSessionInput as alias for backward compatibility\nexport type ValidateSessionInput = ValidateSessionRequest;\n\n// ValidateSessionResponse\nexport interface ValidateSessionResponse {\n  is_valid: boolean;\n  user: User;\n}\n\n// OAuth types (not part of GraphQL schema, but used for OAuth flow)\nexport enum OAuthProviders {\n  Apple = 'apple',\n  Github = 'github',\n  Google = 'google',\n  Facebook = 'facebook',\n  LinkedIn = 'linkedin',\n  Twitter = 'twitter',\n  Microsoft = 'microsoft',\n  Twitch = 'twitch',\n  Roblox = 'roblox',\n  Discord = 'discord',\n}\n\nexport enum ResponseTypes {\n  Code = 'code',\n  Token = 'token',\n}\n\nexport interface AuthorizeRequest {\n  response_type: ResponseTypes;\n  use_refresh_token?: boolean;\n  response_mode?: string;\n}\n\n// Keep AuthorizeInput as alias for backward compatibility\nexport type AuthorizeInput = AuthorizeRequest;\n\nexport interface AuthorizeResponse {\n  state: string;\n  code?: string;\n  error?: string;\n  error_description?: string;\n}\n\nexport interface RevokeTokenInput {\n  refresh_token: string;\n}\n\nexport interface GetTokenRequest {\n  code?: string;\n  grant_type?: string;\n  refresh_token?: string;\n}\n\n// Keep GetTokenInput as alias for backward compatibility\nexport type GetTokenInput = GetTokenRequest;\n\nexport interface GetTokenResponse {\n  access_token: string;\n  expires_in: number;\n  id_token: string;\n  refresh_token?: string;\n}\n\n// GraphQL query request\nexport type Headers = Record<string, string>;\n\nexport interface GraphqlQueryRequest {\n  query: string;\n  variables?: Record<string, any>;\n  headers?: Headers;\n}\n\n// Deprecated types (for backward compatibility)\nexport interface IsValidJWTQueryInput {\n  jwt: string;\n  roles?: string[];\n}\n\nexport interface ValidJWTResponse {\n  valid: string;\n  message: string;\n}\n\n// Keep MetaDataResponse as alias for backward compatibility\nexport type MetaDataResponse = Meta;\n\n// Keep MetaData as alias for backward compatibility\nexport type MetaData = Meta;\n","import {\n  CLEANUP_IFRAME_TIMEOUT_IN_SECONDS,\n  DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS,\n} from './constants';\nimport { AuthorizeResponse } from './types';\n\nexport const hasWindow = (): boolean => typeof window !== 'undefined';\n\nexport const trimURL = (url: string): string => {\n  let trimmedData = url.trim();\n  const lastChar = trimmedData[trimmedData.length - 1];\n  if (lastChar === '/')\n    trimmedData = trimmedData.slice(0, -1);\n\n  return trimmedData;\n};\n\nexport const getCrypto = () => {\n  // ie 11.x uses msCrypto\n  return hasWindow()\n    ? ((window.crypto || (window as any).msCrypto) as Crypto)\n    : null;\n};\n\nexport const getCryptoSubtle = () => {\n  const crypto = getCrypto();\n  // safari 10.x uses webkitSubtle\n  return (crypto && crypto.subtle) || (crypto as any).webkitSubtle;\n};\n\nexport const createRandomString = () => {\n  const charset\n    = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_~.';\n  let random = '';\n  const crypto = getCrypto();\n  if (crypto) {\n    const randomValues = Array.from(crypto.getRandomValues(new Uint8Array(43)));\n    randomValues.forEach(v => (random += charset[v % charset.length]));\n  }\n  return random;\n};\n\nexport const encode = (value: string) =>\n  hasWindow() ? btoa(value) : Buffer.from(value).toString('base64');\nexport const decode = (value: string) =>\n  hasWindow() ? atob(value) : Buffer.from(value, 'base64').toString('ascii');\n\nexport const createQueryParams = (params: any) => {\n  return Object.keys(params)\n    .filter(k => typeof params[k] !== 'undefined')\n    .map(k => `${encodeURIComponent(k)}=${encodeURIComponent(params[k])}`)\n    .join('&');\n};\n\nexport const sha256 = async (s: string) => {\n  const digestOp: any = getCryptoSubtle().digest(\n    { name: 'SHA-256' },\n    new TextEncoder().encode(s),\n  );\n\n  // msCrypto (IE11) uses the old spec, which is not Promise based\n  // https://msdn.microsoft.com/en-us/expression/dn904640(v=vs.71)\n  if ((window as any).msCrypto) {\n    return new Promise((resolve, reject) => {\n      digestOp.oncomplete = (e: any) => {\n        resolve(e.target.result);\n      };\n\n      digestOp.onerror = (e: ErrorEvent) => {\n        reject(e.error);\n      };\n\n      digestOp.onabort = () => {\n        reject(new Error('The digest operation was aborted'));\n      };\n    });\n  }\n\n  return await digestOp;\n};\n\nconst urlEncodeB64 = (input: string) => {\n  const b64Chars: { [index: string]: string } = { '+': '-', '/': '_', '=': '' };\n  return input.replace(/[+/=]/g, (m: string) => b64Chars[m]);\n};\n\n// https://stackoverflow.com/questions/30106476/\nconst decodeB64 = (input: string) =>\n  decodeURIComponent(\n    atob(input)\n      .split('')\n      .map((c) => {\n        return `%${`00${c.charCodeAt(0).toString(16)}`.slice(-2)}`;\n      })\n      .join(''),\n  );\n\nexport const urlDecodeB64 = (input: string) =>\n  decodeB64(input.replace(/_/g, '/').replace(/-/g, '+'));\n\nexport const bufferToBase64UrlEncoded = (input: number[] | Uint8Array) => {\n  const ie11SafeInput = new Uint8Array(input);\n  return urlEncodeB64(\n    window.btoa(String.fromCharCode(...Array.from(ie11SafeInput))),\n  );\n};\n\nexport const executeIframe = (\n  authorizeUrl: string,\n  eventOrigin: string,\n  timeoutInSeconds: number = DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS,\n) => {\n  return new Promise<AuthorizeResponse>((resolve, reject) => {\n    const iframe = window.document.createElement('iframe');\n    iframe.setAttribute('id', 'authorizer-iframe');\n    iframe.setAttribute('width', '0');\n    iframe.setAttribute('height', '0');\n    iframe.style.display = 'none';\n    const removeIframe = () => {\n      if (window.document.body.contains(iframe)) {\n        window.document.body.removeChild(iframe);\n        window.removeEventListener('message', iframeEventHandler, false);\n      }\n    };\n\n    const timeoutSetTimeoutId = setTimeout(() => {\n      removeIframe();\n    }, timeoutInSeconds * 1000);\n\n    const iframeEventHandler: (e: MessageEvent) => void = function (e: MessageEvent) {\n      if (e.origin !== eventOrigin)\n        return;\n      if (!e.data || !e.data.response)\n        return;\n\n      const eventSource = e.source;\n\n      if (eventSource)\n        (eventSource as any).close();\n\n      e.data.response.error\n        ? reject(e.data.response)\n        : resolve(e.data.response);\n\n      clearTimeout(timeoutSetTimeoutId);\n      window.removeEventListener('message', iframeEventHandler, false);\n      setTimeout(removeIframe, CLEANUP_IFRAME_TIMEOUT_IN_SECONDS * 1000);\n    };\n\n    window.addEventListener('message', iframeEventHandler, false);\n    window.document.body.appendChild(iframe);\n    iframe.setAttribute('src', authorizeUrl);\n  });\n};\n"],"mappings":";;;;AACA,OAAOA,gBAAgB;;;ACDhB,IAAMC,uCAAuC;AAC7C,IAAMC,oCAAoC;;;;UCiUrCC,iBAAAA;;;;;;;;;;;GAAAA,mBAAAA,iBAAAA,CAAAA,EAAAA;;UAaAC,gBAAAA;;;GAAAA,kBAAAA,gBAAAA,CAAAA,EAAAA;;;ACzUL,IAAMC,YAAY,6BAAe,OAAOC,WAAW,aAAjC;AAElB,IAAMC,UAAU,wBAACC,QAAAA;AACtB,MAAIC,cAAcD,IAAIE,KAAI;AAC1B,QAAMC,WAAWF,YAAYA,YAAYG,SAAS,CAAA;AAClD,MAAID,aAAa;AACfF,kBAAcA,YAAYI,MAAM,GAAG,EAAC;AAEtC,SAAOJ;AACT,GAPuB;AAShB,IAAMK,YAAY,6BAAA;AAEvB,SAAOT,UAAAA,IACDC,OAAOS,UAAWT,OAAeU,WACnC;AACN,GALyB;AAOlB,IAAMC,kBAAkB,6BAAA;AAC7B,QAAMF,SAASD,UAAAA;AAEf,SAAQC,UAAUA,OAAOG,UAAYH,OAAeI;AACtD,GAJ+B;AAMxB,IAAMC,qBAAqB,6BAAA;AAChC,QAAMC,UACF;AACJ,MAAIC,SAAS;AACb,QAAMP,SAASD,UAAAA;AACf,MAAIC,QAAQ;AACV,UAAMQ,eAAeC,MAAMC,KAAKV,OAAOW,gBAAgB,IAAIC,WAAW,EAAA,CAAA,CAAA;AACtEJ,iBAAaK,QAAQC,CAAAA,MAAMP,UAAUD,QAAQQ,IAAIR,QAAQT,MAAM,CAAC;EAClE;AACA,SAAOU;AACT,GAVkC;AAY3B,IAAMQ,SAAS,wBAACC,UACrB1B,UAAAA,IAAc2B,KAAKD,KAAAA,IAASE,OAAOR,KAAKM,KAAAA,EAAOG,SAAS,QAAA,GADpC;AAKf,IAAMC,oBAAoB,wBAACC,WAAAA;AAChC,SAAOC,OAAOC,KAAKF,MAAAA,EAChBG,OAAOC,CAAAA,MAAK,OAAOJ,OAAOI,CAAAA,MAAO,WAAA,EACjCC,IAAID,CAAAA,MAAK,GAAGE,mBAAmBF,CAAAA,CAAAA,IAAME,mBAAmBN,OAAOI,CAAAA,CAAE,CAAA,EAAG,EACpEG,KAAK,GAAA;AACV,GALiC;AAO1B,IAAMC,SAAS,8BAAOC,MAAAA;AAC3B,QAAMC,WAAgBC,gBAAAA,EAAkBC,OACtC;IAAEC,MAAM;EAAU,GAClB,IAAIC,YAAAA,EAAcC,OAAON,CAAAA,CAAAA;AAK3B,MAAKO,OAAeC,UAAU;AAC5B,WAAO,IAAIC,QAAQ,CAACC,SAASC,WAAAA;AAC3BV,eAASW,aAAa,CAACC,MAAAA;AACrBH,gBAAQG,EAAEC,OAAOC,MAAM;MACzB;AAEAd,eAASe,UAAU,CAACH,MAAAA;AAClBF,eAAOE,EAAEI,KAAK;MAChB;AAEAhB,eAASiB,UAAU,MAAA;AACjBP,eAAO,IAAIQ,MAAM,kCAAA,CAAA;MACnB;IACF,CAAA;EACF;AAEA,SAAO,MAAMlB;AACf,GAzBsB;AA2BtB,IAAMmB,eAAe,wBAACC,UAAAA;AACpB,QAAMC,WAAwC;IAAE,KAAK;IAAK,KAAK;IAAK,KAAK;EAAG;AAC5E,SAAOD,MAAME,QAAQ,UAAU,CAACC,MAAcF,SAASE,CAAAA,CAAE;AAC3D,GAHqB;AAmBd,IAAMC,2BAA2B,wBAACC,UAAAA;AACvC,QAAMC,gBAAgB,IAAIC,WAAWF,KAAAA;AACrC,SAAOG,aACLC,OAAOC,KAAKC,OAAOC,aAAY,GAAIC,MAAMC,KAAKR,aAAAA,CAAAA,CAAAA,CAAAA;AAElD,GALwC;AAOjC,IAAMS,gBAAgB,wBAC3BC,cACAC,aACAC,mBAA2BC,yCAAoC;AAE/D,SAAO,IAAIC,QAA2B,CAACC,SAASC,WAAAA;AAC9C,UAAMC,SAASd,OAAOe,SAASC,cAAc,QAAA;AAC7CF,WAAOG,aAAa,MAAM,mBAAA;AAC1BH,WAAOG,aAAa,SAAS,GAAA;AAC7BH,WAAOG,aAAa,UAAU,GAAA;AAC9BH,WAAOI,MAAMC,UAAU;AACvB,UAAMC,eAAe,6BAAA;AACnB,UAAIpB,OAAOe,SAASM,KAAKC,SAASR,MAAAA,GAAS;AACzCd,eAAOe,SAASM,KAAKE,YAAYT,MAAAA;AACjCd,eAAOwB,oBAAoB,WAAWC,oBAAoB,KAAA;MAC5D;IACF,GALqB;AAOrB,UAAMC,sBAAsBC,WAAW,MAAA;AACrCP,mBAAAA;IACF,GAAGX,mBAAmB,GAAA;AAEtB,UAAMgB,qBAAgD,gCAAUG,GAAe;AAC7E,UAAIA,EAAEC,WAAWrB;AACf;AACF,UAAI,CAACoB,EAAEE,QAAQ,CAACF,EAAEE,KAAKC;AACrB;AAEF,YAAMC,cAAcJ,EAAEK;AAEtB,UAAID;AACDA,oBAAoBE,MAAK;AAE5BN,QAAEE,KAAKC,SAASI,QACZtB,OAAOe,EAAEE,KAAKC,QAAQ,IACtBnB,QAAQgB,EAAEE,KAAKC,QAAQ;AAE3BK,mBAAaV,mBAAAA;AACb1B,aAAOwB,oBAAoB,WAAWC,oBAAoB,KAAA;AAC1DE,iBAAWP,cAAciB,oCAAoC,GAAA;IAC/D,GAlBsD;AAoBtDrC,WAAOsC,iBAAiB,WAAWb,oBAAoB,KAAA;AACvDzB,WAAOe,SAASM,KAAKkB,YAAYzB,MAAAA;AACjCA,WAAOG,aAAa,OAAOV,YAAAA;EAC7B,CAAA;AACF,GA9C6B;;;AH3F7B,IAAMiC,eACJ;AACF,IAAMC,oBAAoB,kOAAkOD,YAAAA;AAG5P,IAAME,aAAa,6BAAOC,UAAAA,IAAcC,OAAOC,QAAQC,YAApC;AAIZ,IAAMC,cAAN,MAAMA,YAAAA;;EAEXC;EACAC;;EAGAC,YAAYF,QAA0B;AACpC,QAAI,CAACA;AAAQ,YAAM,IAAIG,MAAM,2BAAA;AAE7B,SAAKH,SAASA;AACd,QAAI,CAACA,OAAOI,iBAAiB,CAACJ,OAAOI,cAAcC,KAAI;AACrD,YAAM,IAAIF,MAAM,uBAAA;AAElB,QAAIH,OAAOI;AACT,WAAKJ,OAAOI,gBAAgBE,QAAQN,OAAOI,aAAa;AAE1D,QAAI,CAACJ,OAAOO,eAAe,CAACP,OAAOO,YAAYF,KAAI;AACjD,YAAM,IAAIF,MAAM,qBAAA;;AACb,WAAKH,OAAOO,cAAcD,QAAQN,OAAOO,WAAW;AAEzD,SAAKP,OAAOQ,eAAe;MACzB,GAAIR,OAAOQ,gBAAgB,CAAC;MAC5B,oBAAoB,KAAKR,OAAOI;MAChC,0BAA0B,KAAKJ,OAAOS,YAAY;MAClD,gBAAgB;IAClB;AACA,SAAKT,OAAOS,aAAYT,iCAAQS,aAAY,IAAIJ,KAAI;EACtD;EAEAK,YAAY,OACVC,SAAAA;AAvDJ;AA4DI,QAAI,CAAChB,UAAAA;AACH,aAAO,KAAKiB,cAAc;QACxB,IAAIT,MAAM,2CAAA;OACX;AAEH,UAAMU,SAAS;MAAC;MAAU;MAAW;;AACrC,QAAIF,KAAKG;AAAmBD,aAAOE,KAAK,gBAAA;AAExC,UAAMC,cAAsC;MAC1CC,cAAc,KAAKjB,OAAOO;MAC1BW,eAAeP,KAAKO,iBAAiB;MACrCC,OAAOC,OAAOC,mBAAAA,CAAAA;MACdC,OAAOF,OAAOC,mBAAAA,CAAAA;MACdE,eAAeZ,KAAKY;MACpBC,OAAOX,OAAOY,KAAK,GAAA;MACnBC,aAAW,UAAK1B,WAAL,mBAAaS,aAAY;IACtC;AAEA,QAAIE,KAAKY,kBAAwBI,cAAcC,MAAM;AACnD,WAAK3B,eAAeoB,mBAAAA;AACpB,YAAMQ,MAAM,MAAMC,OAAO,KAAK7B,YAAY;AAC1C,YAAM8B,gBAAgBC,yBAAyBH,GAAAA;AAC/Cb,kBAAYiB,iBAAiBF;IAC/B;AAEA,UAAMG,eAAe,GACnB,KAAKlC,OAAOI,aAAa,cACb+B,kBAAkBnB,WAAAA,CAAAA;AAEhC,QAAIA,YAAYE,kBAAkB,eAAe;AAC/CtB,aAAOwC,SAASC,QAAQH,YAAAA;AACxB,aAAO,KAAKI,WAAWC,MAAAA;IACzB;AAEA,QAAI;AACF,YAAMC,YAAY,MAAMC,cACtBP,cACA,KAAKlC,OAAOI,eACZsC,oCAAAA;AAGF,UAAI/B,KAAKY,kBAAwBI,cAAcC,MAAM;AAEnD,cAAMe,YACJ,MAAM,KAAKC,SAAS;UAClBC,MAAML,UAAUK;QAClB,CAAA;AACF,eAAOF,UAAUG,OAAOC,SACpB,KAAKnC,cAAc+B,UAAUG,MAAM,IACnC,KAAKR,WAAWK,UAAUhC,IAAI;MACpC;AAGA,aAAO,KAAK2B,WAAWE,SAAAA;IACzB,SAASQ,KAAK;AACZ,UAAIA,IAAIC,OAAO;AACbrD,eAAOwC,SAASC,QACd,GAAG,KAAKrC,OAAOI,aAAa,cAAcgB,OACxC8B,KAAKC,UAAU,KAAKnD,MAAM,CAAA,CAAA,iBACV,KAAKA,OAAOO,WAAW,EAAE;MAE/C;AAEA,aAAO,KAAKK,cAAcoC,GAAAA;IAC5B;EACF;EAEAI,eAAe,YAAA;AACb,QAAI;AACF,YAAMT,YACJ,MAAM,KAAKU,WAAU;AACvB,aAAOV,UAAUG,OAAOC,SACpB,KAAKnC,cAAc+B,UAAUG,MAAM,IACnC,KAAKR,WAAWK,UAAUhC,IAAI;IACpC,SAASqC,KAAK;AACZ,UAAI,CAACrD,UAAAA,GAAa;AAChB,eAAO;UACLgB,MAAM4B;UACNO,QAAQ;YAAC,IAAI3C,MAAM,6CAAA;;QACrB;MACF;AAEAP,aAAOwC,SAASC,QACd,GAAG,KAAKrC,OAAOI,aAAa,cAAcgB,OACxC8B,KAAKC,UAAU,KAAKnD,MAAM,CAAA,CAAA,iBACV,KAAKA,OAAOO,WAAW,EAAE;AAE7C,aAAO,KAAKK,cAAcoC,GAAAA;IAC5B;EACF;EAEAM,iBAAiB,OACf3C,SAAAA;AAxJJ;AA0JI,QAAI,CAACA,KAAKQ;AAAOR,WAAKQ,QAAQC,OAAOC,mBAAAA,CAAAA;AAErC,QAAI,CAACV,KAAKM;AAAcN,WAAKM,eAAe,KAAKjB,OAAOO;AAExD,QAAI;AACF,YAAMgD,qBAAqB,MAAM,KAAKC,aAAa;QACjDC,OACE;QACFC,WAAW;UACT/C;QACF;MACF,CAAA;AACA,eAAO4C,8DAAoBT,WAApBS,mBAA4BR,UAC/B,KAAKnC,cAAc2C,mBAAmBT,MAAM,IAC5C,KAAKR,WAAWiB,yDAAoB5C,KAAKgD,eAAAA;IAC/C,SAASV,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEAW,cAAc,YAAA;AA9KhB;AA+KI,QAAI;AACF,YAAMC,MAAM,MAAM,KAAKL,aAAa;QAClCC,OACE;MACJ,CAAA;AAEA,eAAOI,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,WAAWuB,IAAIlD,KAAKmD,IAAI;IACnC,SAASb,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEAc,aAAa,OACXC,YAAAA;AA9LJ;AAgMI,QAAI;AACF,YAAMC,aAAa,MAAM,KAAKT,aAAa;QACzCC,OAAO,qBAAqBjE,YAAAA;QAC5BwE;MACF,CAAA;AAEA,eAAOC,8CAAYnB,WAAZmB,mBAAoBlB,UACvB,KAAKnC,cAAcqD,WAAWnB,MAAM,IACpC,KAAKR,WAAW2B,WAAWtD,KAAKuD,OAAO;IAC7C,SAASjB,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;;EAGAI,aAAa,OACXW,SACAG,WAAAA;AAjNJ;AAmNI,QAAI;AACF,YAAMN,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO,6EAA6EhE,iBAAAA;QACpFuE;QACAN,WAAW;UACTS;QACF;MACF,CAAA;AACA,eAAON,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUO,OAAAA;IAChC,SAASpB,KAAK;AACZ,aAAO,KAAKpC,cAAcoC,GAAAA;IAC5B;EACF;EAEAJ,WAAW,OACTjC,SAAAA;AAEA,QAAI,CAACA,KAAK0D;AAAY1D,WAAK0D,aAAa;AAExC,QAAI1D,KAAK0D,eAAe,mBAAmB,CAAC1D,KAAK2D;AAC/C,aAAO,KAAK1D,cAAc;QAAC,IAAIT,MAAM,uBAAA;OAAyB;AAEhE,QAAIQ,KAAK0D,eAAe,wBAAwB,CAAC,KAAKpE;AACpD,aAAO,KAAKW,cAAc;QAAC,IAAIT,MAAM,uBAAA;OAAyB;AAEhE,UAAMa,cAAc;MAClBU,WAAW,KAAK1B,OAAOS;MACvBoC,MAAMlC,KAAKkC,QAAQ;MACnB0B,eAAe,KAAKtE,gBAAgB;MACpCoE,YAAY1D,KAAK0D,cAAc;MAC/BC,eAAe3D,KAAK2D,iBAAiB;IACvC;AAEA,QAAI;AACF,YAAME,UAAU9E,WAAAA;AAChB,YAAMmE,MAAM,MAAMW,QAAQ,GAAG,KAAKxE,OAAOI,aAAa,gBAAgB;QACpEqE,QAAQ;QACRC,MAAMxB,KAAKC,UAAUnC,WAAAA;QACrBgD,SAAS;UACP,GAAG,KAAKhE,OAAOQ;QACjB;QACAmE,aAAa;MACf,CAAA;AAEA,YAAMC,OAAO,MAAMf,IAAIe,KAAI;AAC3B,UAAIf,IAAIgB,UAAU;AAChB,eAAO,KAAKjE,cAAc;UACxB,IAAIT,MAAMyE,KAAKE,qBAAqBF,KAAK3B,KAAK;SAC/C;AAEH,aAAO,KAAKX,WAAWsC,IAAAA;IACzB,SAAS5B,KAAK;AACZ,aAAO,KAAKpC,cAAcoC,GAAAA;IAC5B;EACF;EAEA+B,QAAQ,OACNpE,SAAAA;AA9QJ;AAgRI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;qEACsDhE,iBAAAA;;QAE7DiE,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUkB,KAAAA;IAChC,SAAS/B,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAAC,IAAIT,MAAM6C,GAAAA;OAAK;IAC5C;EACF;EAEAgC,SAAS,OACPhB,YAAAA;AAjSJ;AAmSI,QAAI;AACF,YAAMH,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;QACPO;MACF,CAAA;AACA,eAAOH,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUoB,QAAAA;IAChC,SAASjC,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEAkC,iBAAiB,OACfvE,SAAAA;AAjTJ;AAmTI,QAAI;AACF,UAAI,CAACA,KAAKQ;AAAOR,aAAKQ,QAAQC,OAAOC,mBAAAA,CAAAA;AAErC,UAAI,CAACV,KAAKM;AAAcN,aAAKM,eAAe,KAAKjB,OAAOO;AAExD,YAAMsD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;;;QAGPC,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUsB,gBAAAA;IAChC,SAASnC,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEAoC,aAAa,OACXC,eACAC,OACArE,cACAE,UAAAA;AAEA,QAAIoE,WAAWpE;AACf,QAAI,CAACoE,UAAU;AACbA,iBAAWnE,OAAOC,mBAAAA,CAAAA;IACpB;AAGA,QAAI,CAACmE,OAAOC,OAAaC,cAAc,EAAEC,SAASN,aAAAA,GAAgB;AAChE,YAAM,IAAIlF,MACR,iDAAiDqF,OAAOC,OACtDJ,aAAAA,EACAO,SAAQ,CAAA,EAAI;IAElB;AACA,QAAI,CAACjG,UAAAA;AACH,YAAM,IAAIQ,MAAM,2CAAA;AAElB,QAAImF,SAASA,MAAMvC;AAAQwC,kBAAY,UAAUD,MAAM7D,KAAK,GAAA,CAAA;AAE5D7B,WAAOwC,SAASC,QACd,GAAG,KAAKrC,OAAOI,aAAa,gBAAgBiF,aAAAA,iBAC1CpE,gBAAgB,KAAKjB,OAAOO,WAAW,UAC/BgF,QAAAA,EAAU;EAExB;EAEAM,YAAY,OACVlF,SAAAA;AAvWJ;AAyWI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;;;QAGPC,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUiC,UAAAA;IAChC,SAAS9C,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEA+C,gBAAgB,OACdpF,SAAAA;AA1XJ;AA4XI,QAAI;AACF,YAAMqF,mBAAmB,MAAM,KAAKxC,aAAa;QAC/CC,OACE;QACFC,WAAW;UACT/C;QACF;MACF,CAAA;AACA,eAAOqF,0DAAkBlD,WAAlBkD,mBAA0BjD,UAC7B,KAAKnC,cAAcoF,iBAAiBlD,MAAM,IAC1C,KAAKR,YAAW0D,sBAAiBrF,SAAjBqF,mBAAuBC,cAAAA;IAC7C,SAAShD,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEAiD,cAAc,OAAOvF,SAAAA;AACnB,QAAI,CAACA,KAAK2D,iBAAiB,CAAC3D,KAAK2D,cAAcjE,KAAI;AACjD,aAAO,KAAKO,cAAc;QAAC,IAAIT,MAAM,uBAAA;OAAyB;AAEhE,UAAMqE,UAAU9E,WAAAA;AAChB,UAAMmE,MAAM,MAAMW,QAAQ,GAAG,KAAKxE,OAAOI,aAAa,iBAAiB;MACrEqE,QAAQ;MACRT,SAAS;QACP,GAAG,KAAKhE,OAAOQ;MACjB;MACAkE,MAAMxB,KAAKC,UAAU;QACnBmB,eAAe3D,KAAK2D;QACpB5C,WAAW,KAAK1B,OAAOS;MACzB,CAAA;IACF,CAAA;AAEA,UAAM0F,eAAe,MAAMtC,IAAIe,KAAI;AACnC,WAAO,KAAKtC,WAAW6D,YAAAA;EACzB;EAEAC,SAAS,OACPzF,SAAAA;AAjaJ;AAmaI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;wEACyDhE,iBAAAA;;QAEhEiE,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUuC,MAAAA;IAChC,SAASpD,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEAqD,gBAAgB,OACd1F,MACAqD,YAAAA;AArbJ;AAubI,QAAI;AACF,YAAMsC,mBAAmB,MAAM,KAAK9C,aAAa;QAC/CC,OACE;QACFO;QACAN,WAAW;UACT/C;QACF;MACF,CAAA;AAEA,eAAO2F,0DAAkBxD,WAAlBwD,mBAA0BvD,UAC7B,KAAKnC,cAAc0F,iBAAiBxD,MAAM,IAC1C,KAAKR,YAAWgE,sBAAiB3F,SAAjB2F,mBAAuBC,cAAAA;IAC7C,SAAStD,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEAuD,oBAAoB,OAClBxC,YAAAA;AA1cJ;AA4cI,QAAI;AACF,YAAMH,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;QACPO;MACF,CAAA;AACA,eAAOH,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAU4C,kBAAAA;IAChC,SAASxD,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEAyD,mBAAmB,OACjBvC,WAAAA;AA1dJ;AA4dI,QAAI;AACF,YAAMN,MAAM,MAAM,KAAKL,aAAa;QAClCC,OACE;QACFC,WAAW;UACTS;QACF;MACF,CAAA;AAEA,eAAON,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAU8C,kBAAAA;IAChC,SAAS1D,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEA2D,kBAAkB,OAChBzC,WAAAA;AA9eJ;AAgfI,QAAI;AACF,YAAMN,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO,8GAA8GjE,YAAAA;QACrHkE,WAAW;UACTS;QACF;MACF,CAAA;AAEA,eAAON,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUgD,gBAAAA;IAChC,SAAS5D,OAAO;AACd,aAAO,KAAKrC,cAAc;QAACqC;OAAM;IACnC;EACF;EAEA6D,cAAc,OACZnG,SAAAA;AAjgBJ;AAmgBI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;wFACyEhE,iBAAAA;;QAEhFiE,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUkD,YAAAA;IAChC,SAAS/D,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEAgE,oBAAoB,OAClBrG,SAAAA;AAphBJ;AAshBI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;;;QAGPC,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUoD,mBAAAA;IAChC,SAASjE,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;EAEAkE,YAAY,OACVvG,SAAAA;AAviBJ;AAyiBI,QAAI;AACF,YAAMkD,MAAM,MAAM,KAAKL,aAAa;QAClCC,OAAO;kFACmEhE,iBAAAA;;QAE1EiE,WAAW;UAAE/C;QAAK;MACpB,CAAA;AAEA,eAAOkD,gCAAKf,WAALe,mBAAad,UAChB,KAAKnC,cAAciD,IAAIf,MAAM,IAC7B,KAAKR,YAAWuB,SAAIlD,SAAJkD,mBAAUsD,UAAAA;IAChC,SAASnE,KAAK;AACZ,aAAO,KAAKpC,cAAc;QAACoC;OAAI;IACjC;EACF;;;EAIAQ,eAAe,OACb7C,SAAAA;AA5jBJ;AA8jBI,UAAM6D,UAAU9E,WAAAA;AAChB,UAAMmE,MAAM,MAAMW,QAAQ,GAAG,KAAKxE,OAAOI,aAAa,YAAY;MAChEqE,QAAQ;MACRC,MAAMxB,KAAKC,UAAU;QACnBM,OAAO9C,KAAK8C;QACZC,WAAW/C,KAAK+C,aAAa,CAAC;MAChC,CAAA;MACAM,SAAS;QACP,GAAG,KAAKhE,OAAOQ;QACf,GAAIG,KAAKqD,WAAW,CAAC;MACvB;MACAW,aAAa;IACf,CAAA;AAEA,UAAMC,OAAO,MAAMf,IAAIe,KAAI;AAE3B,SAAIA,kCAAM9B,WAAN8B,mBAAc7B,QAAQ;AACxB,aAAO;QAAEpC,MAAM4B;QAAWO,QAAQ8B,KAAK9B;MAAO;IAChD;AAEA,WAAO;MAAEnC,MAAMiE,KAAKjE;MAAMmC,QAAQ,CAAA;IAAG;EACvC;EAEAlC,gBAAgB,CAACkC,WAAAA;AACf,WAAO;MACLnC,MAAM4B;MACNO;IACF;EACF;EAEAR,aAAa,CAAC3B,SAAAA;AACZ,WAAO;MACLA;MACAmC,QAAQ,CAAA;IACV;EACF;AACF;AAzkBa/C;AAAN,IAAMA,aAAN;","names":["crossFetch","DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS","CLEANUP_IFRAME_TIMEOUT_IN_SECONDS","OAuthProviders","ResponseTypes","hasWindow","window","trimURL","url","trimmedData","trim","lastChar","length","slice","getCrypto","crypto","msCrypto","getCryptoSubtle","subtle","webkitSubtle","createRandomString","charset","random","randomValues","Array","from","getRandomValues","Uint8Array","forEach","v","encode","value","btoa","Buffer","toString","createQueryParams","params","Object","keys","filter","k","map","encodeURIComponent","join","sha256","s","digestOp","getCryptoSubtle","digest","name","TextEncoder","encode","window","msCrypto","Promise","resolve","reject","oncomplete","e","target","result","onerror","error","onabort","Error","urlEncodeB64","input","b64Chars","replace","m","bufferToBase64UrlEncoded","input","ie11SafeInput","Uint8Array","urlEncodeB64","window","btoa","String","fromCharCode","Array","from","executeIframe","authorizeUrl","eventOrigin","timeoutInSeconds","DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS","Promise","resolve","reject","iframe","document","createElement","setAttribute","style","display","removeIframe","body","contains","removeChild","removeEventListener","iframeEventHandler","timeoutSetTimeoutId","setTimeout","e","origin","data","response","eventSource","source","close","error","clearTimeout","CLEANUP_IFRAME_TIMEOUT_IN_SECONDS","addEventListener","appendChild","userFragment","authTokenFragment","getFetcher","hasWindow","window","fetch","crossFetch","Authorizer","config","codeVerifier","constructor","Error","authorizerURL","trim","trimURL","redirectURL","extraHeaders","clientID","authorize","data","errorResponse","scopes","use_refresh_token","push","requestData","redirect_uri","response_mode","state","encode","createRandomString","nonce","response_type","scope","join","client_id","ResponseTypes","Code","sha","sha256","codeChallenge","bufferToBase64UrlEncoded","code_challenge","authorizeURL","createQueryParams","location","replace","okResponse","undefined","iframeRes","executeIframe","DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS","tokenResp","getToken","code","errors","length","err","error","JSON","stringify","browserLogin","getSession","forgotPassword","forgotPasswordResp","graphqlQuery","query","variables","forgot_password","getMetaData","res","meta","getProfile","headers","profileRes","profile","params","session","grant_type","refresh_token","code_verifier","fetcher","method","body","credentials","json","status","error_description","login","logout","response","magicLinkLogin","magic_link_login","oauthLogin","oauthProvider","roles","urlState","Object","values","OAuthProviders","includes","toString","resendOtp","resend_otp","resetPassword","resetPasswordRes","reset_password","revokeToken","responseData","signup","updateProfile","updateProfileRes","update_profile","deactivateAccount","deactivate_account","validateJWTToken","validate_jwt_token","validateSession","validate_session","verifyEmail","verify_email","resendVerifyEmail","resend_verify_email","verifyOtp","verify_otp"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authorizerdev/authorizer-js",
-  "version": "2.0.3",
+  "version": "3.0.0-rc.1",
   "packageManager": "pnpm@7.28.0",
   "author": "Lakhan Samani",
   "license": "MIT",
@@ -42,35 +42,29 @@
   },
   "devDependencies": {
     "@antfu/eslint-config": "^2.1.0",
-    "@rollup/plugin-node-resolve": "^15.2.3",
-    "@rollup/plugin-terser": "^0.4.4",
-    "@rollup/plugin-typescript": "^11.1.5",
     "@swc/core": "^1.3.99",
-    "@types/jest": "^29.5.10",
+    "@types/jest": "^29.5.12",
     "@types/node": "^20.9.4",
-    "@typescript-eslint/eslint-plugin": "^6.13.2",
-    "@typescript-eslint/parser": "^6.13.2",
+    "@typescript-eslint/eslint-plugin": "^7.8.0",
+    "@typescript-eslint/parser": "^7.8.0",
     "bumpp": "^9.2.0",
     "eslint": "^8.54.0",
     "husky": "^8.0.0",
     "jest": "^29.7.0",
     "lint-staged": "^15.2.0",
-    "rollup": "^2.79.1",
-    "rollup-plugin-filesize": "^10.0.0",
-    "rollup-plugin-serve": "^2.0.2",
     "testcontainers": "^10.3.2",
     "ts-jest": "^29.1.1",
     "tslib": "^2.6.2",
     "tsup": "^8.0.1",
-    "typescript": "^5.3.2"
+    "typescript": "^5.4.5"
   },
   "scripts": {
-    "start": "rollup -w --config rollup.test.config.js",
-    "ts-types": "tsc --emitDeclarationOnly --outDir lib",
+    "start": "tsup --watch",
     "build": "tsup",
-    "test": "npm run build && jest --testTimeout=500000 --runInBand",
+    "test": "pnpm run build && jest --testTimeout=500000 --runInBand",
     "release": "pnpm build && bumpp --commit --push --tag && pnpm publish",
     "release-beta": "pnpm build && bumpp --commit --push --tag && pnpm publish --tag beta",
+    "release-rc": "pnpm build && pnpm publish --tag rc",
     "lint": "eslint --ignore-pattern 'tsup.config.ts' --ext .ts,.tsx,.js,.jsx,.json .",
     "lint:fix": "eslint --ignore-pattern 'tsup.config.ts' --ext .ts,.tsx,.js,.jsx,.json . --fix"
   }