@awesome-lang-auth/node 1.10.1

package/dist/router/ui.router.d.ts

@@ -0,0 +1,49 @@
+import { Router } from 'express';
+import { AuthConfig } from '../models/auth-config.model';
+import { ISettingsStore } from '../interfaces/settings-store.interface';
+import { ITemplateStore } from '../interfaces/template-store.interface';
+import { RouterOptions } from './auth.router';
+export interface UiRouterOptions {
+    /**
+     * Optional path to a directory containing custom UI assets.
+     * If not provided, the internal Vanilla JS UI will be served.
+     */
+    uiAssetsDir?: string;
+    /**
+     * Optional directory where uploaded assets (like logos) are stored.
+     * If provided, files in this directory will be served under `/ assets / logo / `.
+     */
+    uploadDir?: string;
+    /**
+     * Optional settings store to fetch real-time UI customization (colors, site name).
+     * If not provided, defaults from `authConfig.ui` or hardcoded values are used.
+     */
+    settingsStore?: ISettingsStore;
+    /**
+     * Core authentication configuration.
+     * Used to determine which features (OAuth, Register, etc.) are enabled.
+     */
+    authConfig: AuthConfig;
+    /**
+     * Optional router options (where strategies and onRegister are defined).
+     */
+    routerOptions?: RouterOptions;
+    /**
+     * The base path where the main auth router is mounted.
+     * Used by the UI to know where to send API requests.
+     * @default '/auth'
+     */
+    apiPrefix?: string;
+    /**
+     * Optional template store for UI translations.
+     */
+    templateStore?: ITemplateStore;
+}
+/**
+ * Builds a router that serves the static UI assets and provides a
+ * `/ config` endpoint for dynamic UI behavior and theming.
+ *
+ * @param options Configuration for the UI router.
+ */
+export declare function buildUiRouter(options: UiRouterOptions): Router;
+//# sourceMappingURL=ui.router.d.ts.map

package/dist/router/ui.router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.router.d.ts","sourceRoot":"","sources":["../../src/router/ui.router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA4D,MAAM,SAAS,CAAC;AAG3F,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAoB,MAAM,eAAe,CAAC;AAQhE,MAAM,WAAW,eAAe;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAE/B;;;OAGG;IACH,UAAU,EAAE,UAAU,CAAC;IAEvB;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAyR9D"}

package/dist/router/ui.router.js

@@ -0,0 +1,272 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildUiRouter = buildUiRouter;
+const express_1 = require("express");
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const auth_router_1 = require("./auth.router");
+/**
+ * Builds a router that serves the static UI assets and provides a
+ * `/ config` endpoint for dynamic UI behavior and theming.
+ *
+ * @param options Configuration for the UI router.
+ */
+function buildUiRouter(options) {
+    const router = (0, express_1.Router)();
+    const { uploadDir, settingsStore, templateStore, authConfig, routerOptions } = options;
+    const apiPrefix = (0, auth_router_1.resolveApiPrefix)(authConfig, routerOptions);
+    // In some environments (like ESM bundling), __dirname may not be available.
+    let _dirname = '';
+    try {
+        _dirname = __dirname;
+    }
+    catch (e) {
+        // Fallback for ESM if needed - though in CJS context this is rarely hit
+        _dirname = process.cwd();
+    }
+    const candidates = [
+        path_1.default.resolve(_dirname, '../ui-assets'), // dist
+        path_1.default.resolve(_dirname, '../../ui-assets'), // alternate dist
+        path_1.default.resolve(_dirname, '../ui/assets'), // src
+        path_1.default.resolve(_dirname, '../../src/ui/assets'), // alternate src
+        path_1.default.resolve(process.cwd(), 'node_modules/@awesome-lang-auth/node/dist/ui-assets'), // dependency
+        path_1.default.resolve(process.cwd(), 'node_modules/@awesome-lang-auth/node/src/ui/assets'), // dependency src
+        path_1.default.resolve(process.cwd(), 'node_modules/awesome-node-auth/dist/ui-assets'), // dependency, pre-1.10.1 name
+        path_1.default.resolve(process.cwd(), 'node_modules/awesome-node-auth/src/ui/assets'), // dependency src
+    ];
+    let uiAssetsDir = options.uiAssetsDir;
+    if (!uiAssetsDir) {
+        for (const candidate of candidates) {
+            if (fs_1.default.existsSync(candidate)) {
+                uiAssetsDir = candidate;
+                break;
+            }
+        }
+    }
+    if (!uiAssetsDir) {
+        uiAssetsDir = candidates[0];
+    }
+    async function getUiConfig(req) {
+        try {
+            const reqBaseUrl = req.baseUrl;
+            const resolvedApiPrefix = reqBaseUrl.replace(/\/ui$/, '') || apiPrefix;
+            const settings = settingsStore ? await settingsStore.getSettings() : {};
+            // Resolve language
+            const queryLang = req.query.lang;
+            const lang = queryLang || authConfig.email?.mailer?.defaultLang || 'en';
+            let translations = {};
+            if (templateStore) {
+                const page = req.path.replace(/^\//, '') || 'login';
+                const res = await templateStore.getUiTranslations(page);
+                if (res) {
+                    translations = res.translations[lang] || res.translations['en'] || {};
+                }
+            }
+            const features = {
+                register: !!routerOptions?.onRegister,
+                magicLink: !!authConfig.email?.sendMagicLink || !!authConfig.email?.mailer,
+                sms: !!authConfig.sms,
+                google: !!authConfig.oauth?.google,
+                github: !!authConfig.oauth?.github,
+                forgotPassword: !!authConfig.email?.sendPasswordReset || !!authConfig.email?.mailer,
+                verifyEmail: (!!authConfig.email?.sendVerificationEmail || !!authConfig.email?.mailer) && (authConfig.emailVerificationMode !== 'none' || authConfig.requireEmailVerification),
+                twoFactor: !!authConfig.twoFactor,
+            };
+            const ui = {
+                primaryColor: settings.ui?.primaryColor || authConfig.ui?.primaryColor || '#4a90d9',
+                secondaryColor: settings.ui?.secondaryColor || authConfig.ui?.secondaryColor || '#6c757d',
+                logoUrl: settings.ui?.logoUrl || authConfig.ui?.customLogo || authConfig.ui?.logoUrl,
+                siteName: settings.ui?.siteName || authConfig.ui?.siteName || 'Awesome Node Auth',
+                customCss: authConfig.ui?.customCss,
+                bgColor: settings.ui?.bgColor || authConfig.ui?.bgColor,
+                bgImage: settings.ui?.bgImage || authConfig.ui?.bgImage,
+                cardBg: settings.ui?.cardBg || authConfig.ui?.cardBg,
+            };
+            return {
+                apiPrefix: resolvedApiPrefix,
+                features,
+                ui,
+                translations,
+                lang,
+            };
+        }
+        catch (err) {
+            const fallbackApiPrefix = req.baseUrl.replace(/\/ui$/, '') || apiPrefix;
+            return {
+                apiPrefix: fallbackApiPrefix,
+                features: { register: false, google: false, github: false },
+                ui: {
+                    primaryColor: '#4a90d9',
+                    secondaryColor: '#6c757d',
+                    siteName: 'Awesome Node Auth',
+                    logoUrl: undefined,
+                    customCss: undefined,
+                    bgColor: undefined,
+                    bgImage: undefined,
+                    cardBg: undefined
+                },
+                translations: {},
+                lang: 'en'
+            };
+        }
+    }
+    // 1. Configuration endpoint for the UI (still available for dynamic fetching)
+    router.get('/config', async (req, res) => {
+        const config = await getUiConfig(req);
+        // Include headless flag so auth.js can auto-configure itself
+        config.headless = !!(authConfig.ui?.headless);
+        res.json(config);
+    });
+    // In headless mode the HTML pages are not served (the hosting SPA provides
+    // its own login UI). We still serve /config and static assets (auth.js, CSS)
+    // so SPAs can load auth.js via <script> and use the fetch interceptor.
+    if (authConfig.ui?.headless) {
+        // Serve static assets (JS, CSS) — needed for the <script> tag integration
+        router.use('/', (0, express_1.static)(uiAssetsDir, {
+            maxAge: 0,
+            index: false,
+        }));
+        return router;
+    }
+    // 2. Serve custom uploaded assets (e.g. logo, background images)
+    if (uploadDir) {
+        // Legacy path for backwards compatibility with existing logo URLs
+        router.use('/assets/logo', (0, express_1.static)(uploadDir));
+        // New unified path for all uploaded UI assets
+        router.use('/assets/uploads', (0, express_1.static)(uploadDir));
+    }
+    // Helper to perform Server-Side Rendering (SSR) of Config and CSS
+    async function serveSsrHtml(req, res, htmlPath) {
+        console.log('[AwesomeNodeAuth] process SSR for', htmlPath);
+        try {
+            let htmlContent = await fs_1.default.promises.readFile(htmlPath, 'utf8');
+            console.log('[AwesomeNodeAuth] read file length:', htmlContent.length);
+            const config = await getUiConfig(req);
+            // Construct style snippet to prevent FOUC (Flash of Unstyled Content)
+            let styleTags = '<style>:root {';
+            if (config.ui?.primaryColor) {
+                styleTags += `--primary-color: ${config.ui.primaryColor};`;
+                styleTags += `--input-focus: ${config.ui.primaryColor};`;
+            }
+            if (config.ui?.secondaryColor)
+                styleTags += `--secondary-color: ${config.ui.secondaryColor};`;
+            if (config.ui?.bgColor)
+                styleTags += `--bg-color: ${config.ui.bgColor};`;
+            if (config.ui?.cardBg)
+                styleTags += `--card-bg: ${config.ui.cardBg};`;
+            if (config.ui?.bgImage) {
+                const safeUrl = config.ui.bgImage.replace(/['"\\]/g, m => encodeURIComponent(m));
+                styleTags += `--bg-image: url("${safeUrl}");`;
+            }
+            styleTags += '}</style>';
+            // Handle custom CSS and Site Name
+            if (config.ui?.customCss)
+                styleTags += `<style>${config.ui.customCss}</style>`;
+            if (config.ui?.siteName) {
+                const safeSiteName = config.ui.siteName
+                    .replace(/&/g, '&amp;')
+                    .replace(/</g, '&lt;')
+                    .replace(/>/g, '&gt;')
+                    .replace(/"/g, '&quot;')
+                    .replace(/'/g, '&#39;');
+                htmlContent = htmlContent.replace(/<title>.*?<\/title>/s, `<title>${safeSiteName}</title>`);
+                htmlContent = htmlContent.replace(/(<h1[^>]*class="site-name"[^>]*>).*?(<\/h1>)/s, `$1${safeSiteName}$2`);
+            }
+            if (config.ui?.logoUrl) {
+                htmlContent = htmlContent.replace(/<img src=".*?" alt="Logo" class="logo hidden">/, `<img src="${config.ui.logoUrl}" alt="Logo" class="logo">`);
+            }
+            // Readiness Splash Screen Injection
+            const splashCss = `
+            <style>
+                body { background-color: var(--bg-color, #f8fafc); margin: 0; }
+                #global-splash {
+                    position: fixed;
+                    top: 0; left: 0; width: 100vw; height: 100vh;
+                    background-color: var(--bg-color, #f8fafc);
+                    z-index: 999999;
+                    display: flex;
+                    justify-content: center;
+                    align-items: center;
+                    transition: opacity 0.3s ease-out;
+                }
+                .splash-spinner {
+                    width: 40px; height: 40px;
+                    border: 4px solid var(--secondary-color, #cbd5e1);
+                    border-top: 4px solid var(--primary-color, #4a90d9);
+                    border-radius: 50%;
+                    animation: splash-spin 1s linear infinite;
+                }
+                @keyframes splash-spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } }
+            </style>`;
+            const splashHtml = `
+            <div id="global-splash">
+                <div class="splash-spinner"></div>
+            </div>`;
+            const splashJs = `
+            <script>
+                window.onload = function() {
+                    const splash = document.getElementById('global-splash');
+                    if (splash) {
+                        splash.style.opacity = '0';
+                        setTimeout(() => splash.remove(), 300);
+                    }
+                };
+            </script>`;
+            // Construct script injection for fast synchronous auth.js booting
+            const scriptTag = `<script>window.__AUTH_CONFIG__ = ${JSON.stringify(config)};</script>`;
+            // Inject just before </head>
+            htmlContent = htmlContent.replace('</head>', `${styleTags}\n${splashCss}\n${scriptTag}\n</head>`);
+            // Inject splash html right after <body>
+            htmlContent = htmlContent.replace('<body>', `<body>\n${splashHtml}`);
+            // Inject splash js parser right before </body>
+            htmlContent = htmlContent.replace('</body>', `${splashJs}\n</body>`);
+            res.setHeader('Content-Type', 'text/html; charset=utf-8');
+            res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate, max-age=0');
+            res.send(htmlContent);
+        }
+        catch (err) {
+            console.error('[AwesomeNodeAuth UI Router] SSR Error:', err);
+            // Fallback to static sending if reading/parsing fails
+            res.sendFile(htmlPath);
+        }
+    }
+    // 3. Vanilla UI Route Mapping & SPA fallback
+    // Matches all extensionless paths and renders the corresponding HTML file with SSR config
+    router.use(async (req, res, next) => {
+        if (req.method !== 'GET') {
+            return next();
+        }
+        if (path_1.default.extname(req.path)) {
+            // Let expressStatic handle real files (css, js, images)
+            return next();
+        }
+        // Map clean routes to internal HTML files if they exist
+        const page = req.path.replace(/^\//, '') || 'login';
+        const htmlFile = `${page}.html`;
+        const htmlPath = path_1.default.join(uiAssetsDir, htmlFile);
+        if (fs_1.default.existsSync(htmlPath)) {
+            await serveSsrHtml(req, res, htmlPath);
+            return;
+        }
+        // Default fallback to login or index
+        const fallbackFiles = ['login.html', 'index.html', 'index.csr.html'];
+        for (const file of fallbackFiles) {
+            const fallbackPath = path_1.default.join(uiAssetsDir, file);
+            if (fs_1.default.existsSync(fallbackPath)) {
+                await serveSsrHtml(req, res, fallbackPath);
+                return;
+            }
+        }
+        next(); // Let it fall through if nothing works
+    });
+    // 4. Serve UI assets (css, js, static files)
+    router.use('/', (0, express_1.static)(uiAssetsDir, {
+        maxAge: 0,
+        index: false
+    }));
+    return router;
+}
+//# sourceMappingURL=ui.router.js.map

package/dist/router/ui.router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.router.js","sourceRoot":"","sources":["../../src/router/ui.router.ts"],"names":[],"mappings":";;;;;AA+DA,sCAyRC;AAxVD,qCAA2F;AAC3F,gDAAwB;AACxB,4CAAoB;AAIpB,+CAAgE;AAmDhE;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAAwB;IAClD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACvF,MAAM,SAAS,GAAG,IAAA,8BAAgB,EAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACD,QAAQ,GAAG,SAAS,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,wEAAwE;QACxE,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG;QACf,cAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,OAAO;QAC/C,cAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,iBAAiB;QAC5D,cAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM;QAC9C,cAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,gBAAgB;QAC/D,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,qDAAqD,CAAC,EAAE,aAAa;QACjG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oDAAoD,CAAC,EAAE,iBAAiB;QACpG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,+CAA+C,CAAC,EAAE,8BAA8B;QAC5G,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,8CAA8C,CAAC,EAAE,iBAAiB;KACjG,CAAC;IAEF,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,WAAW,GAAG,SAAS,CAAC;gBACxB,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,GAAY;QACnC,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;YAC/B,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;YACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAExE,mBAAmB;YACnB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;YACvD,MAAM,IAAI,GAAG,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC;YAExE,IAAI,YAAY,GAA2B,EAAE,CAAC;YAC9C,IAAI,aAAa,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;gBACpD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,GAAG,EAAE,CAAC;oBACN,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1E,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG;gBACb,QAAQ,EAAE,CAAC,CAAC,aAAa,EAAE,UAAU;gBACrC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;gBAC1E,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG;gBACrB,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;gBAClC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;gBAClC,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;gBACnF,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,KAAK,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC;gBAC9K,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS;aACpC,CAAC;YAEF,MAAM,EAAE,GAAG;gBACP,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,IAAI,UAAU,CAAC,EAAE,EAAE,YAAY,IAAI,SAAS;gBACnF,cAAc,EAAE,QAAQ,CAAC,EAAE,EAAE,cAAc,IAAI,UAAU,CAAC,EAAE,EAAE,cAAc,IAAI,SAAS;gBACzF,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,UAAU,IAAI,UAAU,CAAC,EAAE,EAAE,OAAO;gBACpF,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,IAAI,UAAU,CAAC,EAAE,EAAE,QAAQ,IAAI,mBAAmB;gBACjF,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS;gBACnC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,OAAO;gBACvD,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,OAAO;gBACvD,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,UAAU,CAAC,EAAE,EAAE,MAAM;aACvD,CAAC;YAEF,OAAO;gBACH,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ;gBACR,EAAE;gBACF,YAAY;gBACZ,IAAI;aACP,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;YACxE,OAAO;gBACH,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;gBAC3D,EAAE,EAAE;oBACA,YAAY,EAAE,SAAS;oBACvB,cAAc,EAAE,SAAS;oBACzB,QAAQ,EAAE,mBAAmB;oBAC7B,OAAO,EAAE,SAAS;oBAClB,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE,SAAS;oBAClB,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,SAAS;iBACpB;gBACD,YAAY,EAAE,EAAE;gBAChB,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,6DAA6D;QAC5D,MAAc,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC1B,0EAA0E;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAA,gBAAa,EAAC,WAAW,EAAE;YACvC,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,KAAK;SACf,CAAC,CAAC,CAAC;QACJ,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,iEAAiE;IACjE,IAAI,SAAS,EAAE,CAAC;QACZ,kEAAkE;QAClE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAA,gBAAa,EAAC,SAAS,CAAC,CAAC,CAAC;QACrD,8CAA8C;QAC9C,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAA,gBAAa,EAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,kEAAkE;IAClE,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,QAAgB;QACrE,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC;YACD,IAAI,WAAW,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YAEtC,sEAAsE;YACtE,IAAI,SAAS,GAAG,gBAAgB,CAAC;YACjC,IAAI,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC;gBAC1B,SAAS,IAAI,oBAAoB,MAAM,CAAC,EAAE,CAAC,YAAY,GAAG,CAAC;gBAC3D,SAAS,IAAI,kBAAkB,MAAM,CAAC,EAAE,CAAC,YAAY,GAAG,CAAC;YAC7D,CAAC;YACD,IAAI,MAAM,CAAC,EAAE,EAAE,cAAc;gBAAE,SAAS,IAAI,sBAAsB,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,CAAC;YAC9F,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO;gBAAE,SAAS,IAAI,eAAe,MAAM,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC;YACzE,IAAI,MAAM,CAAC,EAAE,EAAE,MAAM;gBAAE,SAAS,IAAI,cAAc,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;YACtE,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjF,SAAS,IAAI,oBAAoB,OAAO,KAAK,CAAC;YAClD,CAAC;YACD,SAAS,IAAI,WAAW,CAAC;YAEzB,kCAAkC;YAClC,IAAI,MAAM,CAAC,EAAE,EAAE,SAAS;gBAAE,SAAS,IAAI,UAAU,MAAM,CAAC,EAAE,CAAC,SAAS,UAAU,CAAC;YAC/E,IAAI,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ;qBAClC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;qBACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;qBACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;qBACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;qBACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5B,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,sBAAsB,EAAE,UAAU,YAAY,UAAU,CAAC,CAAC;gBAC5F,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,+CAA+C,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;gBACrB,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,gDAAgD,EAAE,aAAa,MAAM,CAAC,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC;YACpJ,CAAC;YAED,oCAAoC;YACpC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;qBAqBT,CAAC;YAEV,MAAM,UAAU,GAAG;;;mBAGZ,CAAC;YAER,MAAM,QAAQ,GAAG;;;;;;;;;sBASP,CAAC;YAEX,kEAAkE;YAClE,MAAM,SAAS,GAAG,oCAAoC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAEzF,6BAA6B;YAC7B,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,SAAS,KAAK,SAAS,KAAK,SAAS,WAAW,CAAC,CAAC;YAElG,wCAAwC;YACxC,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,UAAU,EAAE,CAAC,CAAC;YAErE,+CAA+C;YAC/C,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,QAAQ,WAAW,CAAC,CAAC;YAErE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;YACjF,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;YAC7D,sDAAsD;YACtD,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,0FAA0F;IAC1F,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACjE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvB,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,wDAAwD;YACxD,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,wDAAwD;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;QAChC,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAElD,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO;QACX,CAAC;QAED,qCAAqC;QACrC,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,YAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC3C,OAAO;YACX,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,CAAC,uCAAuC;IACnD,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAA,gBAAa,EAAC,WAAW,EAAE;QACvC,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,KAAK;KACf,CAAC,CAAC,CAAC;IAIJ,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/services/api-key.service.d.ts

@@ -0,0 +1,53 @@
+import { ApiKey } from '../models/api-key.model';
+import { IApiKeyStore } from '../interfaces/api-key-store.interface';
+/** Options for generating a new API key. */
+export interface CreateApiKeyOptions {
+    /** Human-readable name / label for the key. */
+    name: string;
+    /** Optional service identity (user ID, tenant ID, service name, …). */
+    serviceId?: string;
+    /** Scope strings controlling access (e.g. `['tools:read', 'webhooks:receive']`). */
+    scopes?: string[];
+    /** IP allowlist (CIDR notation or individual addresses). */
+    allowedIps?: string[];
+    /** Expiry date. Omit for a non-expiring key. */
+    expiresAt?: Date;
+    /** bcrypt salt rounds (default: 10 — intentionally lower than user-password hashing). */
+    saltRounds?: number;
+}
+/** The result of key creation — contains the raw key (show once, then discard). */
+export interface CreatedApiKey {
+    /** The full key to present to the caller — store this securely, it cannot be recovered. */
+    rawKey: string;
+    /** The persisted key record (does not include the raw key). */
+    record: ApiKey;
+}
+/**
+ * Service for creating and validating API Keys / Service Tokens.
+ *
+ * Raw keys are formatted as `ak_<48 hex chars>` (196 bits of entropy).
+ * The first 8 characters after `ak_` are used as a prefix index; the full
+ * value is stored only in its bcrypt hash form.
+ */
+export declare class ApiKeyService {
+    private readonly saltRounds;
+    constructor(saltRounds?: number);
+    /**
+     * Generate a new API key, hash it, persist it via the store, and return
+     * the plaintext key **once**.
+     */
+    createKey(store: IApiKeyStore, options: CreateApiKeyOptions): Promise<CreatedApiKey>;
+    /**
+     * Verify a raw API key against its stored bcrypt hash.
+     * Returns `true` when the key matches the hash.
+     */
+    verifyKey(rawKey: string, hash: string): Promise<boolean>;
+    /**
+     * Extract the 8-character prefix used as a lookup index.
+     * Input: `ak_<48 hex chars>` → prefix: `ak_<first 8 chars>`
+     */
+    extractPrefix(rawKey: string): string;
+    /** Generate a cryptographically secure raw key string. */
+    private generateRawKey;
+}
+//# sourceMappingURL=api-key.service.d.ts.map

package/dist/services/api-key.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.service.d.ts","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAErE,4CAA4C;AAC5C,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,SAAK;IAI3B;;;OAGG;IACG,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAwB1F;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI/D;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAKrC,0DAA0D;IAC1D,OAAO,CAAC,cAAc;CAGvB"}

package/dist/services/api-key.service.js

@@ -0,0 +1,66 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyService = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const bcryptjs_1 = __importDefault(require("bcryptjs"));
+/**
+ * Service for creating and validating API Keys / Service Tokens.
+ *
+ * Raw keys are formatted as `ak_<48 hex chars>` (196 bits of entropy).
+ * The first 8 characters after `ak_` are used as a prefix index; the full
+ * value is stored only in its bcrypt hash form.
+ */
+class ApiKeyService {
+    constructor(saltRounds = 10) {
+        this.saltRounds = saltRounds;
+    }
+    /**
+     * Generate a new API key, hash it, persist it via the store, and return
+     * the plaintext key **once**.
+     */
+    async createKey(store, options) {
+        const raw = this.generateRawKey();
+        const prefix = this.extractPrefix(raw);
+        const rounds = options.saltRounds ?? this.saltRounds;
+        const hash = await bcryptjs_1.default.hash(raw, rounds);
+        const record = {
+            id: crypto_1.default.randomUUID(),
+            name: options.name,
+            keyHash: hash,
+            keyPrefix: prefix,
+            serviceId: options.serviceId ?? null,
+            scopes: options.scopes ?? [],
+            allowedIps: options.allowedIps ?? null,
+            isActive: true,
+            expiresAt: options.expiresAt ?? null,
+            createdAt: new Date(),
+            lastUsedAt: null,
+        };
+        await store.save(record);
+        return { rawKey: raw, record };
+    }
+    /**
+     * Verify a raw API key against its stored bcrypt hash.
+     * Returns `true` when the key matches the hash.
+     */
+    async verifyKey(rawKey, hash) {
+        return bcryptjs_1.default.compare(rawKey, hash);
+    }
+    /**
+     * Extract the 8-character prefix used as a lookup index.
+     * Input: `ak_<48 hex chars>` → prefix: `ak_<first 8 chars>`
+     */
+    extractPrefix(rawKey) {
+        // Keep the `ak_` sentinel plus the first 8 hex characters
+        return rawKey.substring(0, 11); // 'ak_' (3) + 8 chars = 11
+    }
+    /** Generate a cryptographically secure raw key string. */
+    generateRawKey() {
+        return `ak_${crypto_1.default.randomBytes(24).toString('hex')}`; // 24 bytes = 48 hex = ~196 bits
+    }
+}
+exports.ApiKeyService = ApiKeyService;
+//# sourceMappingURL=api-key.service.js.map

package/dist/services/api-key.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.service.js","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,wDAA8B;AA4B9B;;;;;;GAMG;AACH,MAAa,aAAa;IAGxB,YAAY,UAAU,GAAG,EAAE;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,KAAmB,EAAE,OAA4B;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAW;YACrB,EAAE,EAAE,gBAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC;QAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,IAAY;QAC1C,OAAO,kBAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,MAAc;QAC1B,0DAA0D;QAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,2BAA2B;IAC7D,CAAC;IAED,0DAA0D;IAClD,cAAc;QACpB,OAAO,MAAM,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,gCAAgC;IACzF,CAAC;CACF;AAxDD,sCAwDC"}

package/dist/services/jwks.service.d.ts

@@ -0,0 +1,73 @@
+export interface JWK {
+    kty: string;
+    use: string;
+    alg: string;
+    kid: string;
+    n: string;
+    e: string;
+}
+export interface JwksDocument {
+    keys: JWK[];
+}
+export interface JwksClientOptions {
+    /** Cache TTL in milliseconds. @default 3_600_000 */
+    cacheTtl?: number;
+    /** Fetch timeout in milliseconds. @default 5000 */
+    fetchTimeout?: number;
+}
+/**
+ * A simple cached JWKS client for Resource Server use.
+ * Fetches and caches the public keys from a remote JWKS URL.
+ */
+export declare class JwksClient {
+    readonly jwksUrl: string;
+    private cachedDocument;
+    private cacheExpiry;
+    private readonly cacheTtl;
+    private readonly fetchTimeout;
+    private fetchPromise;
+    constructor(jwksUrl: string, options?: JwksClientOptions);
+    /**
+     * Get the JWKS document, fetching from remote if the cache is stale.
+     * Uses stale-while-revalidate: returns the cached doc immediately if available,
+     * then refreshes in the background when TTL expires.
+     */
+    getJwks(): Promise<JwksDocument>;
+    /** Find a JWK by its key ID (`kid`). Returns null if not found. */
+    getKey(kid: string): Promise<JWK | null>;
+    /** Force-invalidate the cache so the next call fetches fresh keys. */
+    invalidateCache(): void;
+    private _fetch;
+}
+export declare class JwksService {
+    /**
+     * Generate an RSA-2048 keypair.
+     * Returns PEM-encoded `privateKey` and `publicKey` strings.
+     */
+    static generateKeypair(): {
+        privateKey: string;
+        publicKey: string;
+    };
+    /**
+     * Derive the public key PEM from a private key PEM.
+     */
+    static derivePublicKey(privateKeyPem: string): string;
+    /**
+     * Convert a PEM-encoded RSA public key to JWK format.
+     */
+    static publicKeyToJwk(publicKeyPem: string, kid: string): JWK;
+    /**
+     * Build a full JWKS document from a PEM-encoded RSA public key.
+     */
+    static buildJwksDocument(publicKeyPem: string, kid?: string): JwksDocument;
+    /**
+     * Create a cached JWKS client for a remote URL (Resource Server use).
+     */
+    static createRemoteClient(jwksUrl: string, options?: JwksClientOptions): JwksClient;
+    /**
+     * Convert a JWK (`n`, `e` fields) to an RSA public key PEM string
+     * usable by `jwt.verify()`.
+     */
+    static jwkToPublicKey(jwk: JWK): string;
+}
+//# sourceMappingURL=jwks.service.d.ts.map

package/dist/services/jwks.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.service.d.ts","sourceRoot":"","sources":["../../src/services/jwks.service.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,UAAU;aAQH,OAAO,EAAE,MAAM;IAPjC,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,YAAY,CAAsC;gBAGxC,OAAO,EAAE,MAAM,EAC/B,OAAO,GAAE,iBAAsB;IAMjC;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;IA6CtC,mEAAmE;IAC7D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAK9C,sEAAsE;IACtE,eAAe,IAAI,IAAI;IAMvB,OAAO,CAAC,MAAM;CAkCf;AAED,qBAAa,WAAW;IACtB;;;OAGG;IACH,MAAM,CAAC,eAAe,IAAI;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IASnE;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAKrD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG;IAa7D;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,SAAsB,GAAG,YAAY;IAIvF;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,UAAU;IAInF;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM;CAIxC"}