@bactv/socialite 1.0.0

package/dist/index.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkedinProvider = exports.TwitterProvider = exports.GithubProvider = exports.FacebookProvider = exports.MicrosoftProvider = exports.GoogleProvider = exports.ProviderFactory = exports.MemoryStateStore = exports.FetchHttpClient = exports.SocialiteManager = exports.UserFetchError = exports.TokenExchangeError = exports.UnsupportedProviderError = exports.ProviderNotConfiguredError = exports.InvalidStateError = exports.SocialiteError = exports.isSupportedProvider = exports.SUPPORTED_PROVIDERS = exports.AccessTokenResult = exports.SocialUser = exports.Socialite = void 0;
+const SocialiteManager_1 = require("./application/services/SocialiteManager");
+/**
+ * Socialite -- public factory.
+ *
+ * const socialite = Socialite.create({
+ *   google: { clientId, clientSecret, redirectUri },
+ *   github: { clientId, clientSecret, redirectUri },
+ * });
+ */
+class Socialite {
+    static create(config, http, stateStore) {
+        return new SocialiteManager_1.SocialiteManager(config, http, stateStore);
+    }
+}
+exports.Socialite = Socialite;
+// Domain
+var SocialUser_1 = require("./domain/entities/SocialUser");
+Object.defineProperty(exports, "SocialUser", { enumerable: true, get: function () { return SocialUser_1.SocialUser; } });
+var AccessTokenResult_1 = require("./domain/value-objects/AccessTokenResult");
+Object.defineProperty(exports, "AccessTokenResult", { enumerable: true, get: function () { return AccessTokenResult_1.AccessTokenResult; } });
+var ProviderName_1 = require("./domain/value-objects/ProviderName");
+Object.defineProperty(exports, "SUPPORTED_PROVIDERS", { enumerable: true, get: function () { return ProviderName_1.SUPPORTED_PROVIDERS; } });
+Object.defineProperty(exports, "isSupportedProvider", { enumerable: true, get: function () { return ProviderName_1.isSupportedProvider; } });
+var SocialiteError_1 = require("./domain/errors/SocialiteError");
+Object.defineProperty(exports, "SocialiteError", { enumerable: true, get: function () { return SocialiteError_1.SocialiteError; } });
+Object.defineProperty(exports, "InvalidStateError", { enumerable: true, get: function () { return SocialiteError_1.InvalidStateError; } });
+Object.defineProperty(exports, "ProviderNotConfiguredError", { enumerable: true, get: function () { return SocialiteError_1.ProviderNotConfiguredError; } });
+Object.defineProperty(exports, "UnsupportedProviderError", { enumerable: true, get: function () { return SocialiteError_1.UnsupportedProviderError; } });
+Object.defineProperty(exports, "TokenExchangeError", { enumerable: true, get: function () { return SocialiteError_1.TokenExchangeError; } });
+Object.defineProperty(exports, "UserFetchError", { enumerable: true, get: function () { return SocialiteError_1.UserFetchError; } });
+// Application
+var SocialiteManager_2 = require("./application/services/SocialiteManager");
+Object.defineProperty(exports, "SocialiteManager", { enumerable: true, get: function () { return SocialiteManager_2.SocialiteManager; } });
+// Infrastructure (exported for advanced consumers who want to swap adapters)
+var FetchHttpClient_1 = require("./infrastructure/http/FetchHttpClient");
+Object.defineProperty(exports, "FetchHttpClient", { enumerable: true, get: function () { return FetchHttpClient_1.FetchHttpClient; } });
+var MemoryStateStore_1 = require("./infrastructure/http/MemoryStateStore");
+Object.defineProperty(exports, "MemoryStateStore", { enumerable: true, get: function () { return MemoryStateStore_1.MemoryStateStore; } });
+var ProviderFactory_1 = require("./infrastructure/providers/ProviderFactory");
+Object.defineProperty(exports, "ProviderFactory", { enumerable: true, get: function () { return ProviderFactory_1.ProviderFactory; } });
+var GoogleProvider_1 = require("./infrastructure/providers/GoogleProvider");
+Object.defineProperty(exports, "GoogleProvider", { enumerable: true, get: function () { return GoogleProvider_1.GoogleProvider; } });
+var MicrosoftProvider_1 = require("./infrastructure/providers/MicrosoftProvider");
+Object.defineProperty(exports, "MicrosoftProvider", { enumerable: true, get: function () { return MicrosoftProvider_1.MicrosoftProvider; } });
+var FacebookProvider_1 = require("./infrastructure/providers/FacebookProvider");
+Object.defineProperty(exports, "FacebookProvider", { enumerable: true, get: function () { return FacebookProvider_1.FacebookProvider; } });
+var GithubProvider_1 = require("./infrastructure/providers/GithubProvider");
+Object.defineProperty(exports, "GithubProvider", { enumerable: true, get: function () { return GithubProvider_1.GithubProvider; } });
+var TwitterProvider_1 = require("./infrastructure/providers/TwitterProvider");
+Object.defineProperty(exports, "TwitterProvider", { enumerable: true, get: function () { return TwitterProvider_1.TwitterProvider; } });
+var LinkedinProvider_1 = require("./infrastructure/providers/LinkedinProvider");
+Object.defineProperty(exports, "LinkedinProvider", { enumerable: true, get: function () { return LinkedinProvider_1.LinkedinProvider; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,8EAA2E;AAI3E;;;;;;;GAOG;AACH,MAAa,SAAS;IACpB,MAAM,CAAC,MAAM,CAAC,MAAuB,EAAE,IAAyB,EAAE,UAA+B;QAC/F,OAAO,IAAI,mCAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;CACF;AAJD,8BAIC;AAED,SAAS;AACT,2DAA0D;AAAjD,wGAAA,UAAU,OAAA;AAEnB,8EAA6E;AAApE,sHAAA,iBAAiB,OAAA;AAC1B,oEAA+F;AAAtF,mHAAA,mBAAmB,OAAA;AAAE,mHAAA,mBAAmB,OAAA;AAKjD,iEAOwC;AANtC,gHAAA,cAAc,OAAA;AACd,mHAAA,iBAAiB,OAAA;AACjB,4HAAA,0BAA0B,OAAA;AAC1B,0HAAA,wBAAwB,OAAA;AACxB,oHAAA,kBAAkB,OAAA;AAClB,gHAAA,cAAc,OAAA;AAGhB,cAAc;AACd,4EAA2E;AAAlE,oHAAA,gBAAgB,OAAA;AAIzB,6EAA6E;AAC7E,yEAAwE;AAA/D,kHAAA,eAAe,OAAA;AACxB,2EAA0E;AAAjE,oHAAA,gBAAgB,OAAA;AACzB,8EAA6E;AAApE,kHAAA,eAAe,OAAA;AACxB,4EAA2E;AAAlE,gHAAA,cAAc,OAAA;AACvB,kFAAiF;AAAxE,sHAAA,iBAAiB,OAAA;AAC1B,gFAA+E;AAAtE,oHAAA,gBAAgB,OAAA;AACzB,4EAA2E;AAAlE,gHAAA,cAAc,OAAA;AACvB,8EAA6E;AAApE,kHAAA,eAAe,OAAA;AACxB,gFAA+E;AAAtE,oHAAA,gBAAgB,OAAA"}

package/dist/infrastructure/http/FetchHttpClient.d.ts

@@ -0,0 +1,13 @@
+import { HttpClientContract } from "../../domain/contracts/HttpClientContract";
+/**
+ * Infrastructure Adapter: FetchHttpClient
+ *
+ * Implements the HttpClientContract port using Node's built-in `fetch`
+ * (available globally since Node 18). Swap this for an Axios-based
+ * adapter, or a test double, without touching any domain/application code.
+ */
+export declare class FetchHttpClient implements HttpClientContract {
+    postForm<T = Record<string, unknown>>(url: string, form: Record<string, string>, headers?: Record<string, string>): Promise<T>;
+    getJson<T = Record<string, unknown>>(url: string, headers?: Record<string, string>): Promise<T>;
+    private safeParseJson;
+}

package/dist/infrastructure/http/FetchHttpClient.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FetchHttpClient = void 0;
+/**
+ * Infrastructure Adapter: FetchHttpClient
+ *
+ * Implements the HttpClientContract port using Node's built-in `fetch`
+ * (available globally since Node 18). Swap this for an Axios-based
+ * adapter, or a test double, without touching any domain/application code.
+ */
+class FetchHttpClient {
+    async postForm(url, form, headers = {}) {
+        const body = new URLSearchParams(form).toString();
+        const response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Accept: "application/json",
+                ...headers,
+            },
+            body,
+        });
+        const text = await response.text();
+        const parsed = this.safeParseJson(text);
+        if (!response.ok) {
+            const message = typeof parsed === "object" && parsed !== null ? JSON.stringify(parsed) : text;
+            throw new Error(`HTTP ${response.status}: ${message}`);
+        }
+        return parsed;
+    }
+    async getJson(url, headers = {}) {
+        const response = await fetch(url, {
+            method: "GET",
+            headers: {
+                Accept: "application/json",
+                ...headers,
+            },
+        });
+        const text = await response.text();
+        const parsed = this.safeParseJson(text);
+        if (!response.ok) {
+            const message = typeof parsed === "object" && parsed !== null ? JSON.stringify(parsed) : text;
+            throw new Error(`HTTP ${response.status}: ${message}`);
+        }
+        return parsed;
+    }
+    safeParseJson(text) {
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            // Some providers (rarely) respond with form-encoded bodies.
+            return Object.fromEntries(new URLSearchParams(text));
+        }
+    }
+}
+exports.FetchHttpClient = FetchHttpClient;
+//# sourceMappingURL=FetchHttpClient.js.map

package/dist/infrastructure/http/FetchHttpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchHttpClient.js","sourceRoot":"","sources":["../../../src/infrastructure/http/FetchHttpClient.ts"],"names":[],"mappings":";;;AAEA;;;;;;GAMG;AACH,MAAa,eAAe;IAC1B,KAAK,CAAC,QAAQ,CACZ,GAAW,EACX,IAA4B,EAC5B,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO;aACX;YACD,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAA8B,GAAW,EAAE,UAAkC,EAAE;QAC1F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO;aACX;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAEO,aAAa,CAAC,IAAY;QAChC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF;AAxDD,0CAwDC"}

package/dist/infrastructure/http/MemoryStateStore.d.ts

@@ -0,0 +1,15 @@
+import { StateStoreContract } from "../../domain/contracts/StateStoreContract";
+/**
+ * Infrastructure Adapter: MemoryStateStore
+ *
+ * Default StateStoreContract implementation. Fine for single-process
+ * demos/tests; in production, swap in a Redis- or session-backed
+ * implementation (multi-instance deployments need shared storage).
+ */
+export declare class MemoryStateStore implements StateStoreContract {
+    private readonly store;
+    private readonly ttlMs;
+    constructor(ttlMs?: number);
+    put(state: string, codeVerifier: string | null): void;
+    pull(state: string): string | null;
+}

package/dist/infrastructure/http/MemoryStateStore.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStateStore = void 0;
+/**
+ * Infrastructure Adapter: MemoryStateStore
+ *
+ * Default StateStoreContract implementation. Fine for single-process
+ * demos/tests; in production, swap in a Redis- or session-backed
+ * implementation (multi-instance deployments need shared storage).
+ */
+class MemoryStateStore {
+    constructor(ttlMs = 10 * 60 * 1000) {
+        this.store = new Map();
+        this.ttlMs = ttlMs;
+    }
+    put(state, codeVerifier) {
+        this.store.set(state, { codeVerifier, expiresAt: Date.now() + this.ttlMs });
+    }
+    pull(state) {
+        const entry = this.store.get(state);
+        this.store.delete(state);
+        if (!entry || entry.expiresAt < Date.now()) {
+            return null;
+        }
+        return entry.codeVerifier;
+    }
+}
+exports.MemoryStateStore = MemoryStateStore;
+//# sourceMappingURL=MemoryStateStore.js.map

package/dist/infrastructure/http/MemoryStateStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryStateStore.js","sourceRoot":"","sources":["../../../src/infrastructure/http/MemoryStateStore.ts"],"names":[],"mappings":";;;AAEA;;;;;;GAMG;AACH,MAAa,gBAAgB;IAI3B,YAAY,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAHjB,UAAK,GAAG,IAAI,GAAG,EAA8D,CAAC;QAI7F,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,YAA2B;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;CACF;AApBD,4CAoBC"}

package/dist/infrastructure/providers/AbstractProvider.d.ts

@@ -0,0 +1,39 @@
+import { OAuthProviderContract } from "../../domain/contracts/OAuthProviderContract";
+import { HttpClientContract } from "../../domain/contracts/HttpClientContract";
+import { StateStoreContract } from "../../domain/contracts/StateStoreContract";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { ProviderConfig } from "../../application/dto/ProviderConfig";
+/**
+ * Infrastructure: AbstractProvider
+ *
+ * Template-method base class implementing the parts of the OAuth2
+ * "authorization code" grant that are identical across providers
+ * (building the auth URL, exchanging the code, optional PKCE).
+ * Concrete providers (Google, GitHub, ...) only declare their
+ * endpoints, default scopes and how to map the raw profile response.
+ */
+export declare abstract class AbstractProvider implements OAuthProviderContract {
+    protected readonly config: ProviderConfig;
+    protected readonly http: HttpClientContract;
+    protected readonly stateStore: StateStoreContract;
+    abstract readonly name: string;
+    protected abstract readonly authorizeUrl: string;
+    protected abstract readonly tokenUrl: string;
+    protected abstract readonly userUrl: string;
+    protected abstract readonly defaultScopes: string[];
+    /** Space, comma, or provider-specific scope separator. */
+    protected readonly scopeSeparator: string;
+    /** Set true for providers that require/accept PKCE (e.g. Twitter/X). */
+    protected readonly usesPKCE: boolean;
+    constructor(config: ProviderConfig, http: HttpClientContract, stateStore: StateStoreContract);
+    getAuthorizationUrl(state: string): string;
+    getAccessToken(code: string, state?: string): Promise<AccessTokenResult>;
+    getUserByToken(accessToken: string): Promise<Record<string, unknown>>;
+    user(code: string, state?: string): Promise<SocialUser>;
+    abstract mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+    /** Hook for providers needing non-default token request headers (e.g. Accept: application/json). */
+    protected tokenRequestHeaders(): Record<string, string>;
+    protected generateCodeVerifier(): string;
+    protected deriveCodeChallenge(verifier: string): string;
+}

package/dist/infrastructure/providers/AbstractProvider.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractProvider = void 0;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const AccessTokenResult_1 = require("../../domain/value-objects/AccessTokenResult");
+const SocialiteError_1 = require("../../domain/errors/SocialiteError");
+/**
+ * Infrastructure: AbstractProvider
+ *
+ * Template-method base class implementing the parts of the OAuth2
+ * "authorization code" grant that are identical across providers
+ * (building the auth URL, exchanging the code, optional PKCE).
+ * Concrete providers (Google, GitHub, ...) only declare their
+ * endpoints, default scopes and how to map the raw profile response.
+ */
+class AbstractProvider {
+    constructor(config, http, stateStore) {
+        this.config = config;
+        this.http = http;
+        this.stateStore = stateStore;
+        /** Space, comma, or provider-specific scope separator. */
+        this.scopeSeparator = " ";
+        /** Set true for providers that require/accept PKCE (e.g. Twitter/X). */
+        this.usesPKCE = false;
+    }
+    getAuthorizationUrl(state) {
+        const scopes = (this.config.scopes ?? this.defaultScopes).join(this.scopeSeparator);
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUri,
+            response_type: "code",
+            scope: scopes,
+            state,
+            ...this.config.authorizationParams,
+        });
+        if (this.usesPKCE) {
+            const codeVerifier = this.generateCodeVerifier();
+            const codeChallenge = this.deriveCodeChallenge(codeVerifier);
+            this.stateStore.put(state, codeVerifier);
+            params.set("code_challenge", codeChallenge);
+            params.set("code_challenge_method", "S256");
+        }
+        else {
+            this.stateStore.put(state, null);
+        }
+        return `${this.authorizeUrl}?${params.toString()}`;
+    }
+    async getAccessToken(code, state) {
+        const codeVerifier = state ? await this.stateStore.pull(state) : null;
+        const form = {
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret,
+            redirect_uri: this.config.redirectUri,
+            grant_type: "authorization_code",
+            code,
+        };
+        if (codeVerifier) {
+            form.code_verifier = codeVerifier;
+        }
+        try {
+            const raw = await this.http.postForm(this.tokenUrl, form, this.tokenRequestHeaders());
+            return AccessTokenResult_1.AccessTokenResult.fromRaw(raw);
+        }
+        catch (err) {
+            throw new SocialiteError_1.TokenExchangeError(this.name, err.message);
+        }
+    }
+    async getUserByToken(accessToken) {
+        try {
+            return await this.http.getJson(this.userUrl, {
+                Authorization: `Bearer ${accessToken}`,
+            });
+        }
+        catch (err) {
+            throw new SocialiteError_1.UserFetchError(this.name, err.message);
+        }
+    }
+    async user(code, state) {
+        const token = await this.getAccessToken(code, state);
+        const raw = await this.getUserByToken(token.accessToken);
+        return this.mapToSocialUser(raw, token);
+    }
+    /** Hook for providers needing non-default token request headers (e.g. Accept: application/json). */
+    tokenRequestHeaders() {
+        return { Accept: "application/json" };
+    }
+    generateCodeVerifier() {
+        return node_crypto_1.default.randomBytes(32).toString("base64url");
+    }
+    deriveCodeChallenge(verifier) {
+        return node_crypto_1.default.createHash("sha256").update(verifier).digest("base64url");
+    }
+}
+exports.AbstractProvider = AbstractProvider;
+//# sourceMappingURL=AbstractProvider.js.map

package/dist/infrastructure/providers/AbstractProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbstractProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/AbstractProvider.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAiC;AAIjC,oFAAiF;AAGjF,uEAAwF;AAExF;;;;;;;;GAQG;AACH,MAAsB,gBAAgB;IAYpC,YACqB,MAAsB,EACtB,IAAwB,EACxB,UAA8B;QAF9B,WAAM,GAAN,MAAM,CAAgB;QACtB,SAAI,GAAJ,IAAI,CAAoB;QACxB,eAAU,GAAV,UAAU,CAAoB;QARnD,0DAA0D;QACvC,mBAAc,GAAW,GAAG,CAAC;QAChD,wEAAwE;QACrD,aAAQ,GAAY,KAAK,CAAC;IAM1C,CAAC;IAEJ,mBAAmB,CAAC,KAAa;QAC/B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,MAAM;YACb,KAAK;YACL,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;SACnC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAc;QAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtE,MAAM,IAAI,GAA2B;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,UAAU,EAAE,oBAAoB;YAChC,IAAI;SACL,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAA0B,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC/G,OAAO,qCAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,mCAAkB,CAAC,IAAI,CAAC,IAAI,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0B,IAAI,CAAC,OAAO,EAAE;gBACpE,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,+BAAc,CAAC,IAAI,CAAC,IAAI,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAc;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAID,oGAAoG;IAC1F,mBAAmB;QAC3B,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxC,CAAC;IAES,oBAAoB;QAC5B,OAAO,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAES,mBAAmB,CAAC,QAAgB;QAC5C,OAAO,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;CACF;AAhGD,4CAgGC"}

package/dist/infrastructure/providers/FacebookProvider.d.ts

@@ -0,0 +1,14 @@
+import { AbstractProvider } from "./AbstractProvider";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+export declare class FacebookProvider extends AbstractProvider {
+    readonly name = "facebook";
+    protected readonly authorizeUrl = "https://www.facebook.com/v19.0/dialog/oauth";
+    protected readonly tokenUrl = "https://graph.facebook.com/v19.0/oauth/access_token";
+    protected readonly userUrl = "https://graph.facebook.com/v19.0/me";
+    protected readonly defaultScopes: string[];
+    protected readonly scopeSeparator = ",";
+    getAccessToken(code: string): Promise<AccessTokenResult>;
+    getUserByToken(accessToken: string): Promise<Record<string, unknown>>;
+    mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+}

package/dist/infrastructure/providers/FacebookProvider.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookProvider = void 0;
+const AbstractProvider_1 = require("./AbstractProvider");
+const SocialUser_1 = require("../../domain/entities/SocialUser");
+const AccessTokenResult_1 = require("../../domain/value-objects/AccessTokenResult");
+const GRAPH_VERSION = "v19.0";
+class FacebookProvider extends AbstractProvider_1.AbstractProvider {
+    constructor() {
+        super(...arguments);
+        this.name = "facebook";
+        this.authorizeUrl = `https://www.facebook.com/${GRAPH_VERSION}/dialog/oauth`;
+        this.tokenUrl = `https://graph.facebook.com/${GRAPH_VERSION}/oauth/access_token`;
+        this.userUrl = `https://graph.facebook.com/${GRAPH_VERSION}/me`;
+        this.defaultScopes = ["email", "public_profile"];
+        this.scopeSeparator = ",";
+    }
+    // Facebook's Graph API expects the token exchange as a GET request with
+    // query parameters rather than a POST form body, so we override the
+    // template method's default behaviour here.
+    async getAccessToken(code) {
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret,
+            redirect_uri: this.config.redirectUri,
+            code,
+        });
+        const raw = await this.http.getJson(`${this.tokenUrl}?${params.toString()}`);
+        return AccessTokenResult_1.AccessTokenResult.fromRaw(raw);
+    }
+    async getUserByToken(accessToken) {
+        const params = new URLSearchParams({
+            fields: "id,name,email,picture.type(large)",
+            access_token: accessToken,
+        });
+        return this.http.getJson(`${this.userUrl}?${params.toString()}`);
+    }
+    mapToSocialUser(raw, token) {
+        const picture = raw.picture;
+        return new SocialUser_1.SocialUser({
+            id: String(raw.id),
+            nickname: null,
+            name: raw.name ?? null,
+            email: raw.email ?? null,
+            avatar: picture?.data?.url ?? null,
+            provider: this.name,
+            accessToken: token.accessToken,
+            refreshToken: token.refreshToken,
+            expiresIn: token.expiresIn,
+            raw,
+        });
+    }
+}
+exports.FacebookProvider = FacebookProvider;
+//# sourceMappingURL=FacebookProvider.js.map

package/dist/infrastructure/providers/FacebookProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FacebookProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/FacebookProvider.ts"],"names":[],"mappings":";;;AAAA,yDAAsD;AACtD,iEAA8D;AAC9D,oFAAiF;AAEjF,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,MAAa,gBAAiB,SAAQ,mCAAgB;IAAtD;;QACW,SAAI,GAAG,UAAU,CAAC;QACR,iBAAY,GAAG,4BAA4B,aAAa,eAAe,CAAC;QACxE,aAAQ,GAAG,8BAA8B,aAAa,qBAAqB,CAAC;QAC5E,YAAO,GAAG,8BAA8B,aAAa,KAAK,CAAC;QAC3D,kBAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC5C,mBAAc,GAAG,GAAG,CAAC;IAuC1C,CAAC;IArCC,wEAAwE;IACxE,oEAAoE;IACpE,4CAA4C;IAC5C,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,IAAI;SACL,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0B,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtG,OAAO,qCAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,MAAM,EAAE,mCAAmC;YAC3C,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0B,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,eAAe,CAAC,GAA4B,EAAE,KAAwB;QACpE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkD,CAAC;QACvE,OAAO,IAAI,uBAAU,CAAC;YACpB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,IAAI;YAClC,KAAK,EAAG,GAAG,CAAC,KAAgB,IAAI,IAAI;YACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI;YAClC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;CACF;AA7CD,4CA6CC"}

package/dist/infrastructure/providers/GithubProvider.d.ts

@@ -0,0 +1,12 @@
+import { AbstractProvider } from "./AbstractProvider";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+export declare class GithubProvider extends AbstractProvider {
+    readonly name = "github";
+    protected readonly authorizeUrl = "https://github.com/login/oauth/authorize";
+    protected readonly tokenUrl = "https://github.com/login/oauth/access_token";
+    protected readonly userUrl = "https://api.github.com/user";
+    protected readonly defaultScopes: string[];
+    getUserByToken(accessToken: string): Promise<Record<string, unknown>>;
+    mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+}

package/dist/infrastructure/providers/GithubProvider.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GithubProvider = void 0;
+const AbstractProvider_1 = require("./AbstractProvider");
+const SocialUser_1 = require("../../domain/entities/SocialUser");
+const SocialiteError_1 = require("../../domain/errors/SocialiteError");
+class GithubProvider extends AbstractProvider_1.AbstractProvider {
+    constructor() {
+        super(...arguments);
+        this.name = "github";
+        this.authorizeUrl = "https://github.com/login/oauth/authorize";
+        this.tokenUrl = "https://github.com/login/oauth/access_token";
+        this.userUrl = "https://api.github.com/user";
+        this.defaultScopes = ["read:user", "user:email"];
+    }
+    // GitHub's API requires a User-Agent header, which our generic
+    // AbstractProvider.getUserByToken doesn't send.
+    async getUserByToken(accessToken) {
+        try {
+            const user = await this.http.getJson(this.userUrl, {
+                Authorization: `Bearer ${accessToken}`,
+                "User-Agent": "socialite-sdk",
+            });
+            // GitHub only returns a public email by default; if it's null,
+            // fall back to the dedicated emails endpoint for the primary one.
+            if (!user.email) {
+                const emails = await this.http.getJson("https://api.github.com/user/emails", { Authorization: `Bearer ${accessToken}`, "User-Agent": "socialite-sdk" });
+                const primary = emails.find((e) => e.primary && e.verified) ?? emails[0];
+                if (primary) {
+                    user.email = primary.email;
+                }
+            }
+            return user;
+        }
+        catch (err) {
+            throw new SocialiteError_1.UserFetchError(this.name, err.message);
+        }
+    }
+    mapToSocialUser(raw, token) {
+        return new SocialUser_1.SocialUser({
+            id: String(raw.id),
+            nickname: raw.login ?? null,
+            name: raw.name ?? null,
+            email: raw.email ?? null,
+            avatar: raw.avatar_url ?? null,
+            provider: this.name,
+            accessToken: token.accessToken,
+            refreshToken: token.refreshToken,
+            expiresIn: token.expiresIn,
+            raw,
+        });
+    }
+}
+exports.GithubProvider = GithubProvider;
+//# sourceMappingURL=GithubProvider.js.map

package/dist/infrastructure/providers/GithubProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GithubProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/GithubProvider.ts"],"names":[],"mappings":";;;AAAA,yDAAsD;AACtD,iEAA8D;AAE9D,uEAAoE;AAEpE,MAAa,cAAe,SAAQ,mCAAgB;IAApD;;QACW,SAAI,GAAG,QAAQ,CAAC;QACN,iBAAY,GAAG,0CAA0C,CAAC;QAC1D,aAAQ,GAAG,6CAA6C,CAAC;QACzD,YAAO,GAAG,6BAA6B,CAAC;QACxC,kBAAa,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IA4CjE,CAAC;IA1CC,+DAA+D;IAC/D,gDAAgD;IAChD,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0B,IAAI,CAAC,OAAO,EAAE;gBAC1E,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,YAAY,EAAE,eAAe;aAC9B,CAAC,CAAC;YAEH,+DAA+D;YAC/D,kEAAkE;YAClE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACpC,oCAAoC,EACpC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAC1E,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,+BAAc,CAAC,IAAI,CAAC,IAAI,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,eAAe,CAAC,GAA4B,EAAE,KAAwB;QACpE,OAAO,IAAI,uBAAU,CAAC;YACpB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,QAAQ,EAAG,GAAG,CAAC,KAAgB,IAAI,IAAI;YACvC,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,IAAI;YAClC,KAAK,EAAG,GAAG,CAAC,KAAgB,IAAI,IAAI;YACpC,MAAM,EAAG,GAAG,CAAC,UAAqB,IAAI,IAAI;YAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;CACF;AAjDD,wCAiDC"}

package/dist/infrastructure/providers/GoogleProvider.d.ts

@@ -0,0 +1,11 @@
+import { AbstractProvider } from "./AbstractProvider";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+export declare class GoogleProvider extends AbstractProvider {
+    readonly name = "google";
+    protected readonly authorizeUrl = "https://accounts.google.com/o/oauth2/v2/auth";
+    protected readonly tokenUrl = "https://oauth2.googleapis.com/token";
+    protected readonly userUrl = "https://www.googleapis.com/oauth2/v3/userinfo";
+    protected readonly defaultScopes: string[];
+    mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+}

package/dist/infrastructure/providers/GoogleProvider.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleProvider = void 0;
+const AbstractProvider_1 = require("./AbstractProvider");
+const SocialUser_1 = require("../../domain/entities/SocialUser");
+class GoogleProvider extends AbstractProvider_1.AbstractProvider {
+    constructor() {
+        super(...arguments);
+        this.name = "google";
+        this.authorizeUrl = "https://accounts.google.com/o/oauth2/v2/auth";
+        this.tokenUrl = "https://oauth2.googleapis.com/token";
+        this.userUrl = "https://www.googleapis.com/oauth2/v3/userinfo";
+        this.defaultScopes = ["openid", "profile", "email"];
+    }
+    mapToSocialUser(raw, token) {
+        return new SocialUser_1.SocialUser({
+            id: String(raw.sub),
+            nickname: null,
+            name: raw.name ?? null,
+            email: raw.email ?? null,
+            avatar: raw.picture ?? null,
+            provider: this.name,
+            accessToken: token.accessToken,
+            refreshToken: token.refreshToken,
+            expiresIn: token.expiresIn,
+            raw,
+        });
+    }
+}
+exports.GoogleProvider = GoogleProvider;
+//# sourceMappingURL=GoogleProvider.js.map

package/dist/infrastructure/providers/GoogleProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/GoogleProvider.ts"],"names":[],"mappings":";;;AAAA,yDAAsD;AACtD,iEAA8D;AAG9D,MAAa,cAAe,SAAQ,mCAAgB;IAApD;;QACW,SAAI,GAAG,QAAQ,CAAC;QACN,iBAAY,GAAG,8CAA8C,CAAC;QAC9D,aAAQ,GAAG,qCAAqC,CAAC;QACjD,YAAO,GAAG,+CAA+C,CAAC;QAC1D,kBAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAgBpE,CAAC;IAdC,eAAe,CAAC,GAA4B,EAAE,KAAwB;QACpE,OAAO,IAAI,uBAAU,CAAC;YACpB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,IAAI;YAClC,KAAK,EAAG,GAAG,CAAC,KAAgB,IAAI,IAAI;YACpC,MAAM,EAAG,GAAG,CAAC,OAAkB,IAAI,IAAI;YACvC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;CACF;AArBD,wCAqBC"}

package/dist/infrastructure/providers/LinkedinProvider.d.ts

@@ -0,0 +1,11 @@
+import { AbstractProvider } from "./AbstractProvider";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+export declare class LinkedinProvider extends AbstractProvider {
+    readonly name = "linkedin";
+    protected readonly authorizeUrl = "https://www.linkedin.com/oauth/v2/authorization";
+    protected readonly tokenUrl = "https://www.linkedin.com/oauth/v2/accessToken";
+    protected readonly userUrl = "https://api.linkedin.com/v2/userinfo";
+    protected readonly defaultScopes: string[];
+    mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+}

package/dist/infrastructure/providers/LinkedinProvider.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkedinProvider = void 0;
+const AbstractProvider_1 = require("./AbstractProvider");
+const SocialUser_1 = require("../../domain/entities/SocialUser");
+class LinkedinProvider extends AbstractProvider_1.AbstractProvider {
+    constructor() {
+        super(...arguments);
+        this.name = "linkedin";
+        this.authorizeUrl = "https://www.linkedin.com/oauth/v2/authorization";
+        this.tokenUrl = "https://www.linkedin.com/oauth/v2/accessToken";
+        // LinkedIn's current "Sign In with LinkedIn using OpenID Connect" product
+        // exposes profile data through the standard OIDC userinfo endpoint.
+        this.userUrl = "https://api.linkedin.com/v2/userinfo";
+        this.defaultScopes = ["openid", "profile", "email"];
+    }
+    mapToSocialUser(raw, token) {
+        return new SocialUser_1.SocialUser({
+            id: String(raw.sub),
+            nickname: null,
+            name: raw.name ?? null,
+            email: raw.email ?? null,
+            avatar: raw.picture ?? null,
+            provider: this.name,
+            accessToken: token.accessToken,
+            refreshToken: token.refreshToken,
+            expiresIn: token.expiresIn,
+            raw,
+        });
+    }
+}
+exports.LinkedinProvider = LinkedinProvider;
+//# sourceMappingURL=LinkedinProvider.js.map

package/dist/infrastructure/providers/LinkedinProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LinkedinProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/LinkedinProvider.ts"],"names":[],"mappings":";;;AAAA,yDAAsD;AACtD,iEAA8D;AAG9D,MAAa,gBAAiB,SAAQ,mCAAgB;IAAtD;;QACW,SAAI,GAAG,UAAU,CAAC;QACR,iBAAY,GAAG,iDAAiD,CAAC;QACjE,aAAQ,GAAG,+CAA+C,CAAC;QAC9E,0EAA0E;QAC1E,oEAAoE;QACjD,YAAO,GAAG,sCAAsC,CAAC;QACjD,kBAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAgBpE,CAAC;IAdC,eAAe,CAAC,GAA4B,EAAE,KAAwB;QACpE,OAAO,IAAI,uBAAU,CAAC;YACpB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,IAAI;YAClC,KAAK,EAAG,GAAG,CAAC,KAAgB,IAAI,IAAI;YACpC,MAAM,EAAG,GAAG,CAAC,OAAkB,IAAI,IAAI;YACvC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;CACF;AAvBD,4CAuBC"}

package/dist/infrastructure/providers/MicrosoftProvider.d.ts

@@ -0,0 +1,11 @@
+import { AbstractProvider } from "./AbstractProvider";
+import { SocialUser } from "../../domain/entities/SocialUser";
+import { AccessTokenResult } from "../../domain/value-objects/AccessTokenResult";
+export declare class MicrosoftProvider extends AbstractProvider {
+    readonly name = "microsoft";
+    protected readonly authorizeUrl = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
+    protected readonly tokenUrl = "https://login.microsoftonline.com/common/oauth2/v2.0/token";
+    protected readonly userUrl = "https://graph.microsoft.com/v1.0/me";
+    protected readonly defaultScopes: string[];
+    mapToSocialUser(raw: Record<string, unknown>, token: AccessTokenResult): SocialUser;
+}