@baasix/baasix 0.1.0

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../baasix/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO;AACP,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,SAAS;AACT,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGzF,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,WAAW;AACX,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D,YAAY;AACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAenF,WAAW;AACX,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAY7B,mBAAmB;AACnB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC"}

package/dist/auth/oauth2/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * OAuth2 Index
+ */
+export * from "./utils.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/oauth2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../baasix/auth/oauth2/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC"}

package/dist/auth/oauth2/index.js

@@ -0,0 +1,5 @@
+/**
+ * OAuth2 Index
+ */
+export * from "./utils.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/oauth2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../baasix/auth/oauth2/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC"}

package/dist/auth/oauth2/utils.d.ts

@@ -0,0 +1,90 @@
+/**
+ * OAuth2 Utilities
+ * Common utilities for OAuth2 providers
+ */
+/**
+ * Generate a random state parameter for OAuth
+ */
+export declare function generateState(): string;
+/**
+ * Generate a code verifier for PKCE
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Generate a code challenge from a verifier (for PKCE)
+ */
+export declare function generateCodeChallenge(verifier: string): Promise<string>;
+/**
+ * Create an authorization URL with common parameters
+ */
+export declare function createAuthorizationURL(params: {
+    authorizationEndpoint: string;
+    clientId: string;
+    redirectURI: string;
+    state: string;
+    scopes?: string[];
+    codeVerifier?: string;
+    responseType?: string;
+    prompt?: string;
+    accessType?: string;
+    display?: string;
+    loginHint?: string;
+    additionalParams?: Record<string, string>;
+}): Promise<URL>;
+/**
+ * Validate an authorization code and exchange it for tokens
+ */
+export declare function validateAuthorizationCode(params: {
+    tokenEndpoint: string;
+    code: string;
+    clientId: string;
+    clientSecret: string;
+    redirectURI: string;
+    codeVerifier?: string;
+}): Promise<{
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    tokenType: string;
+    expiresIn?: number;
+    scope?: string;
+    raw: Record<string, any>;
+}>;
+/**
+ * Refresh an access token
+ */
+export declare function refreshAccessToken(params: {
+    tokenEndpoint: string;
+    clientId: string;
+    clientSecret: string;
+    refreshToken: string;
+}): Promise<{
+    accessToken: string;
+    refreshToken?: string;
+    tokenType: string;
+    expiresIn?: number;
+    raw: Record<string, any>;
+}>;
+/**
+ * Parse OAuth2 tokens from raw response
+ */
+export declare function parseOAuth2Tokens(raw: Record<string, any>): {
+    accessToken?: string;
+    refreshToken?: string;
+    idToken?: string;
+    tokenType?: string;
+    accessTokenExpiresAt?: Date;
+    refreshTokenExpiresAt?: Date;
+    scopes?: string[];
+};
+declare const _default: {
+    generateState: typeof generateState;
+    generateCodeVerifier: typeof generateCodeVerifier;
+    generateCodeChallenge: typeof generateCodeChallenge;
+    createAuthorizationURL: typeof createAuthorizationURL;
+    validateAuthorizationCode: typeof validateAuthorizationCode;
+    refreshAccessToken: typeof refreshAccessToken;
+    parseOAuth2Tokens: typeof parseOAuth2Tokens;
+};
+export default _default;
+//# sourceMappingURL=utils.d.ts.map

package/dist/auth/oauth2/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../baasix/auth/oauth2/utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAK7E;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,GAAG,CAAC,CA4Cf;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC1B,CAAC,CAwCD;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC1B,CAAC,CAiCD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAgCA;;;;;;;;;;AAED,wBAQE"}

package/dist/auth/oauth2/utils.js

@@ -0,0 +1,167 @@
+/**
+ * OAuth2 Utilities
+ * Common utilities for OAuth2 providers
+ */
+import crypto from "crypto";
+/**
+ * Generate a random state parameter for OAuth
+ */
+export function generateState() {
+    return crypto.randomBytes(32).toString("hex");
+}
+/**
+ * Generate a code verifier for PKCE
+ */
+export function generateCodeVerifier() {
+    return crypto.randomBytes(32).toString("base64url");
+}
+/**
+ * Generate a code challenge from a verifier (for PKCE)
+ */
+export async function generateCodeChallenge(verifier) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(verifier);
+    const digest = await crypto.subtle.digest("SHA-256", data);
+    return Buffer.from(digest).toString("base64url");
+}
+/**
+ * Create an authorization URL with common parameters
+ */
+export async function createAuthorizationURL(params) {
+    const { authorizationEndpoint, clientId, redirectURI, state, scopes, codeVerifier, responseType = "code", prompt, accessType, display, loginHint, additionalParams, } = params;
+    const url = new URL(authorizationEndpoint);
+    url.searchParams.set("response_type", responseType);
+    url.searchParams.set("client_id", clientId);
+    url.searchParams.set("redirect_uri", redirectURI);
+    url.searchParams.set("state", state);
+    if (scopes && scopes.length > 0) {
+        url.searchParams.set("scope", scopes.join(" "));
+    }
+    if (codeVerifier) {
+        const codeChallenge = await generateCodeChallenge(codeVerifier);
+        url.searchParams.set("code_challenge_method", "S256");
+        url.searchParams.set("code_challenge", codeChallenge);
+    }
+    if (prompt)
+        url.searchParams.set("prompt", prompt);
+    if (accessType)
+        url.searchParams.set("access_type", accessType);
+    if (display)
+        url.searchParams.set("display", display);
+    if (loginHint)
+        url.searchParams.set("login_hint", loginHint);
+    if (additionalParams) {
+        for (const [key, value] of Object.entries(additionalParams)) {
+            url.searchParams.set(key, value);
+        }
+    }
+    return url;
+}
+/**
+ * Validate an authorization code and exchange it for tokens
+ */
+export async function validateAuthorizationCode(params) {
+    const { tokenEndpoint, code, clientId, clientSecret, redirectURI, codeVerifier } = params;
+    const body = new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        client_id: clientId,
+        client_secret: clientSecret,
+        redirect_uri: redirectURI,
+    });
+    if (codeVerifier) {
+        body.set("code_verifier", codeVerifier);
+    }
+    const response = await fetch(tokenEndpoint, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Token exchange failed: ${response.status} ${error}`);
+    }
+    const data = await response.json();
+    return {
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token,
+        idToken: data.id_token,
+        tokenType: data.token_type || "Bearer",
+        expiresIn: data.expires_in,
+        scope: data.scope,
+        raw: data,
+    };
+}
+/**
+ * Refresh an access token
+ */
+export async function refreshAccessToken(params) {
+    const { tokenEndpoint, clientId, clientSecret, refreshToken } = params;
+    const body = new URLSearchParams({
+        grant_type: "refresh_token",
+        client_id: clientId,
+        client_secret: clientSecret,
+        refresh_token: refreshToken,
+    });
+    const response = await fetch(tokenEndpoint, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Token refresh failed: ${response.status} ${error}`);
+    }
+    const data = await response.json();
+    return {
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token,
+        tokenType: data.token_type || "Bearer",
+        expiresIn: data.expires_in,
+        raw: data,
+    };
+}
+/**
+ * Parse OAuth2 tokens from raw response
+ */
+export function parseOAuth2Tokens(raw) {
+    const result = {};
+    if (raw.access_token) {
+        result.accessToken = raw.access_token;
+    }
+    if (raw.refresh_token) {
+        result.refreshToken = raw.refresh_token;
+    }
+    if (raw.id_token) {
+        result.idToken = raw.id_token;
+    }
+    if (raw.token_type) {
+        result.tokenType = raw.token_type;
+    }
+    if (raw.expires_in) {
+        result.accessTokenExpiresAt = new Date(Date.now() + raw.expires_in * 1000);
+    }
+    if (raw.refresh_token_expires_in) {
+        result.refreshTokenExpiresAt = new Date(Date.now() + raw.refresh_token_expires_in * 1000);
+    }
+    if (raw.scope) {
+        result.scopes = raw.scope.split(" ");
+    }
+    return result;
+}
+export default {
+    generateState,
+    generateCodeVerifier,
+    generateCodeChallenge,
+    createAuthorizationURL,
+    validateAuthorizationCode,
+    refreshAccessToken,
+    parseOAuth2Tokens,
+};
+//# sourceMappingURL=utils.js.map

package/dist/auth/oauth2/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../baasix/auth/oauth2/utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAa5C;IACC,MAAM,EACJ,qBAAqB,EACrB,QAAQ,EACR,WAAW,EACX,KAAK,EACL,MAAM,EACN,YAAY,EACZ,YAAY,GAAG,MAAM,EACrB,MAAM,EACN,UAAU,EACV,OAAO,EACP,SAAS,EACT,gBAAgB,GACjB,GAAG,MAAM,CAAC;IAEX,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAErC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,MAAM;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,UAAU;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAChE,IAAI,OAAO;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,SAAS;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAO/C;IASC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAE1F,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IAEH,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAwB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAExD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;QACtC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IAOC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAwB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAExD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;QACtC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAwB;IASxD,MAAM,MAAM,GAAyC,EAAE,CAAC;IAExD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACxC,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,wBAAwB,EAAE,CAAC;QACjC,MAAM,CAAC,qBAAqB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,eAAe;IACb,aAAa;IACb,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC"}

package/dist/auth/providers/apple.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Apple OAuth Provider
+ */
+import type { OAuthProvider, ProviderOptions } from "../types.js";
+export interface AppleProfile {
+    sub: string;
+    email?: string;
+    email_verified?: boolean | string;
+    is_private_email?: boolean | string;
+    real_user_status?: number;
+}
+export interface AppleOptions extends ProviderOptions<AppleProfile> {
+    /**
+     * Team ID from Apple Developer Portal
+     */
+    teamId: string;
+    /**
+     * Key ID from Apple Developer Portal
+     */
+    keyId: string;
+    /**
+     * Private key in PEM format
+     */
+    privateKey: string;
+}
+export declare function apple(options: AppleOptions): OAuthProvider<AppleProfile, AppleOptions>;
+export default apple;
+//# sourceMappingURL=apple.d.ts.map

package/dist/auth/providers/apple.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.d.ts","sourceRoot":"","sources":["../../../baasix/auth/providers/apple.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAMhF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,YAAa,SAAQ,eAAe,CAAC,YAAY,CAAC;IACjE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AA+CD,wBAAgB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAsKtF;AAED,eAAe,KAAK,CAAC"}

package/dist/auth/providers/apple.js

@@ -0,0 +1,192 @@
+/**
+ * Apple OAuth Provider
+ */
+import crypto from "crypto";
+import { createAuthorizationURL, parseOAuth2Tokens, } from "../oauth2/utils.js";
+const APPLE_AUTH_URL = "https://appleid.apple.com/auth/authorize";
+const APPLE_TOKEN_URL = "https://appleid.apple.com/auth/token";
+/**
+ * Generate a client secret for Apple Sign In
+ */
+function generateClientSecret(options) {
+    const now = Math.floor(Date.now() / 1000);
+    const header = {
+        alg: "ES256",
+        kid: options.keyId,
+    };
+    const payload = {
+        iss: options.teamId,
+        iat: now,
+        exp: now + 86400 * 180, // 180 days
+        aud: "https://appleid.apple.com",
+        sub: options.clientId,
+    };
+    const headerB64 = Buffer.from(JSON.stringify(header)).toString("base64url");
+    const payloadB64 = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const signatureInput = `${headerB64}.${payloadB64}`;
+    const sign = crypto.createSign("SHA256");
+    sign.update(signatureInput);
+    const signature = sign.sign(options.privateKey, "base64url");
+    return `${signatureInput}.${signature}`;
+}
+/**
+ * Decode Apple ID token
+ */
+function decodeIdToken(idToken) {
+    try {
+        const parts = idToken.split(".");
+        if (parts.length !== 3)
+            return null;
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+        return payload;
+    }
+    catch {
+        return null;
+    }
+}
+export function apple(options) {
+    const defaultScopes = ["name", "email"];
+    return {
+        id: "apple",
+        name: "Apple",
+        options,
+        async createAuthorizationURL({ state, scopes, redirectURI }) {
+            const allScopes = options.disableDefaultScope
+                ? [...(options.scope || []), ...(scopes || [])]
+                : [...defaultScopes, ...(options.scope || []), ...(scopes || [])];
+            return createAuthorizationURL({
+                authorizationEndpoint: APPLE_AUTH_URL,
+                clientId: options.clientId,
+                redirectURI: options.redirectURI || redirectURI,
+                state,
+                scopes: [...new Set(allScopes)],
+                responseType: "code",
+                additionalParams: {
+                    response_mode: "form_post",
+                },
+            });
+        },
+        async validateAuthorizationCode({ code, redirectURI }) {
+            const clientSecret = generateClientSecret(options);
+            const body = new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                client_id: options.clientId,
+                client_secret: clientSecret,
+                redirect_uri: options.redirectURI || redirectURI,
+            });
+            const response = await fetch(APPLE_TOKEN_URL, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                },
+                body: body.toString(),
+            });
+            if (!response.ok) {
+                const error = await response.text();
+                throw new Error(`Apple token exchange failed: ${response.status} ${error}`);
+            }
+            const data = await response.json();
+            const tokens = parseOAuth2Tokens(data);
+            return {
+                ...tokens,
+                accessToken: data.access_token,
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                tokenType: data.token_type || "Bearer",
+                raw: data,
+            };
+        },
+        async getUserInfo(tokens) {
+            // Apple doesn't have a userinfo endpoint
+            // User info comes from the ID token
+            if (!tokens.idToken) {
+                return null;
+            }
+            const profile = decodeIdToken(tokens.idToken);
+            if (!profile) {
+                return null;
+            }
+            // Apply custom mapping if provided
+            if (options.mapProfileToUser) {
+                const mapped = await options.mapProfileToUser(profile);
+                return {
+                    user: {
+                        id: profile.sub,
+                        email: mapped.email || profile.email || null,
+                        emailVerified: profile.email_verified === true || profile.email_verified === "true",
+                        name: undefined,
+                        firstName: mapped.firstName,
+                        lastName: mapped.lastName,
+                    },
+                    data: profile,
+                };
+            }
+            return {
+                user: {
+                    id: profile.sub,
+                    email: profile.email || null,
+                    emailVerified: profile.email_verified === true || profile.email_verified === "true",
+                    name: undefined,
+                },
+                data: profile,
+            };
+        },
+        async refreshAccessToken(refreshToken) {
+            const clientSecret = generateClientSecret(options);
+            const body = new URLSearchParams({
+                grant_type: "refresh_token",
+                client_id: options.clientId,
+                client_secret: clientSecret,
+                refresh_token: refreshToken,
+            });
+            const response = await fetch(APPLE_TOKEN_URL, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                },
+                body: body.toString(),
+            });
+            if (!response.ok) {
+                throw new Error("Failed to refresh Apple token");
+            }
+            const data = await response.json();
+            return {
+                accessToken: data.access_token,
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                tokenType: data.token_type || "Bearer",
+                accessTokenExpiresAt: data.expires_in
+                    ? new Date(Date.now() + data.expires_in * 1000)
+                    : undefined,
+                raw: data,
+            };
+        },
+        async verifyIdToken(token, _nonce) {
+            try {
+                const parts = token.split(".");
+                if (parts.length !== 3)
+                    return false;
+                const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+                // Check expiration
+                if (payload.exp && payload.exp < Date.now() / 1000) {
+                    return false;
+                }
+                // Check issuer
+                if (payload.iss !== "https://appleid.apple.com") {
+                    return false;
+                }
+                // Check audience
+                if (payload.aud !== options.clientId) {
+                    return false;
+                }
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+}
+export default apple;
+//# sourceMappingURL=apple.js.map

package/dist/auth/providers/apple.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.js","sourceRoot":"","sources":["../../../baasix/auth/providers/apple.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAwB5B,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAClE,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAE/D;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAqB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,OAAO,CAAC,KAAK;KACnB,CAAC;IACF,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,WAAW;QACnC,GAAG,EAAE,2BAA2B;QAChC,GAAG,EAAE,OAAO,CAAC,QAAQ;KACtB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAEpD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAE7D,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC,OAAO;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,OAAO;QAEP,KAAK,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;YACzD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB;gBAC3C,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YAEpE,OAAO,sBAAsB,CAAC;gBAC5B,qBAAqB,EAAE,cAAc;gBACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;gBAC/C,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/B,YAAY,EAAE,MAAM;gBACpB,gBAAgB,EAAE;oBAChB,aAAa,EAAE,WAAW;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;YACnD,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAEnD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,YAAY,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;aACjD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEvC,OAAO;gBACL,GAAG,MAAM;gBACT,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;gBACtC,GAAG,EAAE,IAAI;aACM,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,yCAAyC;YACzC,oCAAoC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,mCAAmC;YACnC,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE;wBACJ,EAAE,EAAE,OAAO,CAAC,GAAG;wBACf,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI;wBAC5C,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM;wBACnF,IAAI,EAAE,SAAS;wBACf,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBAC1B;oBACD,IAAI,EAAE,OAAO;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,IAAI,EAAE;oBACJ,EAAE,EAAE,OAAO,CAAC,GAAG;oBACf,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;oBAC5B,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM;oBACnF,IAAI,EAAE,SAAS;iBAChB;gBACD,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,YAAY;YACnC,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAEnD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAE1D,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;gBACtC,oBAAoB,EAAE,IAAI,CAAC,UAAU;oBACnC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;oBAC/C,CAAC,CAAC,SAAS;gBACb,GAAG,EAAE,IAAI;aACV,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM;YAC/B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAErC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAE1E,mBAAmB;gBACnB,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBACnD,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,eAAe;gBACf,IAAI,OAAO,CAAC,GAAG,KAAK,2BAA2B,EAAE,CAAC;oBAChD,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,iBAAiB;gBACjB,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,eAAe,KAAK,CAAC"}

package/dist/auth/providers/credential.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Credential Provider
+ * Handles email/password authentication
+ */
+import type { AuthAdapter, User, Account } from "../types.js";
+export interface CredentialProviderOptions {
+    /**
+     * Password hashing function
+     */
+    hashPassword: (password: string) => Promise<string>;
+    /**
+     * Password verification function
+     */
+    verifyPassword: (data: {
+        password: string;
+        hash: string;
+    }) => Promise<boolean>;
+    /**
+     * Minimum password length
+     */
+    minPasswordLength?: number;
+    /**
+     * Maximum password length
+     */
+    maxPasswordLength?: number;
+}
+export interface CredentialProvider {
+    id: "credential";
+    name: "Credentials";
+    /**
+     * Validate password meets requirements
+     */
+    validatePassword(password: string): {
+        valid: boolean;
+        error?: string;
+    };
+    /**
+     * Hash a password
+     */
+    hashPassword(password: string): Promise<string>;
+    /**
+     * Verify a password against a hash
+     */
+    verifyPassword(password: string, hash: string): Promise<boolean>;
+    /**
+     * Sign up a new user with credentials
+     */
+    signUp(data: {
+        adapter: AuthAdapter;
+        email: string;
+        password: string;
+        firstName: string;
+        lastName?: string;
+        phone?: string;
+    }): Promise<{
+        user: User;
+        account: Account;
+    }>;
+    /**
+     * Sign in a user with credentials
+     */
+    signIn(data: {
+        adapter: AuthAdapter;
+        email: string;
+        password: string;
+    }): Promise<User | null>;
+    /**
+     * Change a user's password
+     */
+    changePassword(data: {
+        adapter: AuthAdapter;
+        userId: string;
+        currentPassword: string;
+        newPassword: string;
+    }): Promise<boolean>;
+    /**
+     * Reset a user's password (without requiring current password)
+     */
+    resetPassword(data: {
+        adapter: AuthAdapter;
+        userId: string;
+        newPassword: string;
+    }): Promise<boolean>;
+}
+export declare function credential(options: CredentialProviderOptions): CredentialProvider;
+export default credential;
+//# sourceMappingURL=credential.d.ts.map

package/dist/auth/providers/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../../baasix/auth/providers/credential.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAE3E,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,aAAa,CAAC;IAEpB;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEvE;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjE;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,OAAO,EAAE,WAAW,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAE9C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,OAAO,EAAE,WAAW,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAEzB;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE;QAClB,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CA0LjF;AAED,eAAe,UAAU,CAAC"}