@bernierllc/dropbox-oauth 0.2.0

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+
+

package/README.md

@@ -0,0 +1,168 @@
+# @bernierllc/dropbox-oauth
+
+OAuth 2.0 authentication and token management for Dropbox.
+
+## Features
+
+- OAuth 2.0 authorization URL generation with PKCE
+- Authorization code exchange for access tokens
+- Automatic token refresh with refresh tokens
+- Token validation and expiration checking
+- Secure credential storage interfaces
+- Multi-user token management
+
+## Installation
+
+```bash
+npm install @bernierllc/dropbox-oauth
+```
+
+## Usage
+
+### Basic Authentication Flow
+
+```typescript
+import { DropboxOAuth } from '@bernierllc/dropbox-oauth';
+
+// Create auth instance
+const dropboxAuth = new DropboxOAuth({
+  clientId: 'your-client-id',
+  clientSecret: 'your-client-secret',
+  redirectUri: 'https://your-app.com/oauth/dropbox/callback'
+});
+
+// Step 1: Generate authorization URL
+const { url, state } = dropboxAuth.getAuthorizationUrl();
+// Store state in session for CSRF protection
+// Redirect user to url
+
+// Step 2: Exchange authorization code for tokens
+const tokens = await dropboxAuth.exchangeCodeForTokens(code, state);
+console.log('Access token:', tokens.accessToken);
+console.log('Refresh token:', tokens.refreshToken);
+```
+
+### Token Refresh
+
+```typescript
+// Manually refresh token
+const newTokens = await dropboxAuth.refreshAccessToken(refreshToken);
+
+// Or use automatic refresh with storage
+const storage: TokenStorage = {
+  async store(key, tokens) {
+    // Store tokens in your database
+    await db.saveTokens(key, tokens);
+  },
+  async retrieve(key) {
+    // Retrieve tokens from your database
+    return await db.getTokens(key);
+  },
+  async delete(key) {
+    // Delete tokens from your database
+    await db.deleteTokens(key);
+  }
+};
+
+const authWithStorage = new DropboxOAuth(config, storage);
+
+// Automatically refreshes if token is expired
+const validToken = await authWithStorage.getValidToken('user-123');
+```
+
+### Token Validation
+
+```typescript
+const isValid = await dropboxAuth.validateToken(accessToken);
+if (!isValid) {
+  console.log('Token is invalid or expired');
+}
+```
+
+## API
+
+### `DropboxOAuth`
+
+#### Constructor
+
+```typescript
+constructor(config: DropboxOAuthConfig, storage?: TokenStorage)
+```
+
+- `config.clientId` - Dropbox app client ID
+- `config.clientSecret` - Dropbox app client secret
+- `config.redirectUri` - OAuth redirect URI
+- `config.logger` - (Optional) Custom logger instance
+- `storage` - (Optional) Token storage implementation
+
+#### Methods
+
+##### `getAuthorizationUrl(state?: string, scopes?: string[]): { url: string; state: string }`
+
+Generate OAuth authorization URL with PKCE.
+
+##### `exchangeCodeForTokens(code: string, state: string): Promise<DropboxOAuthTokens>`
+
+Exchange authorization code for access and refresh tokens.
+
+##### `refreshAccessToken(refreshToken: string): Promise<DropboxOAuthTokens>`
+
+Refresh access token using refresh token.
+
+##### `validateToken(accessToken: string): Promise<boolean>`
+
+Validate access token against Dropbox API.
+
+##### `getValidToken(storageKey: string): Promise<string>`
+
+Get a valid access token, automatically refreshing if expired (requires storage).
+
+##### `storeTokens(key: string, tokens: DropboxOAuthTokens): Promise<void>`
+
+Store tokens (requires storage).
+
+##### `revokeTokens(storageKey: string): Promise<void>`
+
+Revoke and delete tokens (requires storage).
+
+### `TokenStorage` Interface
+
+```typescript
+interface TokenStorage {
+  store(key: string, tokens: DropboxOAuthTokens): Promise<void>;
+  retrieve(key: string): Promise<DropboxOAuthTokens | null>;
+  delete(key: string): Promise<void>;
+}
+```
+
+Implement this interface to provide persistent token storage.
+
+## Token Expiration
+
+Tokens are automatically refreshed when:
+- Less than 5 minutes remaining before expiration
+- `getValidToken()` is called with valid refresh token
+
+## Error Handling
+
+```typescript
+try {
+  const tokens = await dropboxAuth.exchangeCodeForTokens(code, state);
+} catch (error) {
+  console.error('OAuth failed:', error.message);
+}
+```
+
+All methods throw descriptive errors on failure.
+
+## Integration
+
+### Logger Integration
+
+This package uses `@bernierllc/logger` for structured logging. The logger is optional and will use a no-op logger if not provided.
+
+## License
+
+Copyright (c) 2025 Bernier LLC. See LICENSE file for details.
+
+

package/dist/DropboxOAuth.d.ts

@@ -0,0 +1,83 @@
+import { Logger } from "@bernierllc/logger";
+import { DropboxOAuthConfig, DropboxOAuthTokens, TokenStorage } from "./types";
+/**
+ * Extended configuration including logger
+ */
+export interface DropboxOAuthConfigWithLogger extends DropboxOAuthConfig {
+    logger?: Logger;
+}
+/**
+ * DropboxOAuth - OAuth 2.0 authentication and token management for Dropbox
+ *
+ * Handles:
+ * - Authorization URL generation with PKCE
+ * - Authorization code exchange
+ * - Token refresh
+ * - Token validation
+ * - Automatic token refresh with storage
+ */
+export declare class DropboxOAuth {
+    private config;
+    private logger;
+    private storage;
+    private auth;
+    /**
+     * Create a new DropboxOAuth instance
+     * @param config - OAuth configuration
+     * @param storage - Optional token storage for automatic refresh
+     */
+    constructor(config: DropboxOAuthConfigWithLogger, storage?: TokenStorage);
+    /**
+     * Generate OAuth authorization URL with PKCE
+     * @param state - Optional state parameter for CSRF protection (auto-generated if not provided)
+     * @param scopes - Requested Dropbox scopes (default: ['files.content.write', 'files.content.read'])
+     * @returns Object with authorization URL and state
+     */
+    getAuthorizationUrl(state?: string, scopes?: string[]): {
+        url: string;
+        state: string;
+    };
+    /**
+     * Exchange authorization code for access and refresh tokens
+     * @param code - Authorization code from OAuth callback
+     * @param state - State token for CSRF validation
+     * @returns OAuth tokens
+     * @throws Error if exchange fails
+     */
+    exchangeCodeForTokens(code: string, _state: string): Promise<DropboxOAuthTokens>;
+    /**
+     * Refresh access token using refresh token
+     * @param refreshToken - Refresh token
+     * @returns New OAuth tokens
+     * @throws Error if refresh fails
+     */
+    refreshAccessToken(refreshToken: string): DropboxOAuthTokens;
+    /**
+     * Validate access token by making a test request to Dropbox API
+     * @param accessToken - Access token to validate
+     * @returns True if token is valid, false otherwise
+     */
+    validateToken(accessToken: string): Promise<boolean>;
+    /**
+     * Get a valid access token, automatically refreshing if expired
+     * Requires storage to be configured
+     * @param storageKey - Key to retrieve tokens from storage
+     * @returns Valid access token
+     * @throws Error if storage not configured or tokens not found
+     */
+    getValidToken(storageKey: string): Promise<string>;
+    /**
+     * Store tokens using configured storage
+     * @param key - Storage key
+     * @param tokens - Tokens to store
+     * @throws Error if storage not configured
+     */
+    storeTokens(key: string, tokens: DropboxOAuthTokens): Promise<void>;
+    /**
+     * Revoke and delete tokens from storage
+     * @param storageKey - Storage key
+     * @throws Error if storage not configured
+     */
+    revokeTokens(storageKey: string): Promise<void>;
+}
+//# sourceMappingURL=DropboxOAuth.d.ts.map

package/dist/DropboxOAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DropboxOAuth.d.ts","sourceRoot":"","sources":["../src/DropboxOAuth.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAgB,MAAM,oBAAoB,CAAC;AAG1D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EAEb,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,kBAAkB;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,IAAI,CAAc;IAE1B;;;;OAIG;gBACS,MAAM,EAAE,4BAA4B,EAAE,OAAO,CAAC,EAAE,YAAY;IAwBxE;;;;;OAKG;IACH,mBAAmB,CACjB,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA+BjC;;;;;;OAMG;IACG,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,CAAC;IAyC9B;;;;;OAKG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,kBAAkB;IAwC5D;;;;OAIG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc1D;;;;;;OAMG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BxD;;;;;OAKG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IASzE;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQtD"}

package/dist/DropboxOAuth.js

@@ -0,0 +1,228 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DropboxOAuth = void 0;
+const logger_1 = require("@bernierllc/logger");
+const dropbox_1 = require("dropbox");
+const uuid_1 = require("uuid");
+/**
+ * DropboxOAuth - OAuth 2.0 authentication and token management for Dropbox
+ *
+ * Handles:
+ * - Authorization URL generation with PKCE
+ * - Authorization code exchange
+ * - Token refresh
+ * - Token validation
+ * - Automatic token refresh with storage
+ */
+class DropboxOAuth {
+    /**
+     * Create a new DropboxOAuth instance
+     * @param config - OAuth configuration
+     * @param storage - Optional token storage for automatic refresh
+     */
+    constructor(config, storage) {
+        this.config = {
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            redirectUri: config.redirectUri,
+        };
+        this.logger =
+            config.logger ||
+                (0, logger_1.createLogger)({
+                    context: {
+                        service: "DropboxOAuth",
+                        version: "0.1.0",
+                        environment: process.env.NODE_ENV || "development",
+                    },
+                });
+        this.storage = storage;
+        // Initialize DropboxAuth
+        this.auth = new dropbox_1.DropboxAuth({
+            clientId: this.config.clientId,
+            clientSecret: this.config.clientSecret,
+        });
+    }
+    /**
+     * Generate OAuth authorization URL with PKCE
+     * @param state - Optional state parameter for CSRF protection (auto-generated if not provided)
+     * @param scopes - Requested Dropbox scopes (default: ['files.content.write', 'files.content.read'])
+     * @returns Object with authorization URL and state
+     */
+    getAuthorizationUrl(state, scopes) {
+        const authState = state || (0, uuid_1.v4)();
+        const requestedScopes = scopes || [
+            "files.content.write",
+            "files.content.read",
+            "account_info.read",
+        ];
+        // Dropbox uses PKCE, so we need to get the auth URL from the SDK
+        // getAuthenticationUrl returns a string synchronously
+        const authUrl = this.auth.getAuthenticationUrl(this.config.redirectUri, authState, "code", "offline", requestedScopes, "none", false);
+        this.logger.info("Authorization URL generated", {
+            state: authState,
+            scopes: requestedScopes,
+        });
+        return {
+            url: authUrl,
+            state: authState,
+        };
+    }
+    /**
+     * Exchange authorization code for access and refresh tokens
+     * @param code - Authorization code from OAuth callback
+     * @param state - State token for CSRF validation
+     * @returns OAuth tokens
+     * @throws Error if exchange fails
+     */
+    async exchangeCodeForTokens(code, _state) {
+        try {
+            // Dropbox SDK handles the token exchange
+            const tokenResult = await this.auth.getAccessTokenFromCode(this.config.redirectUri, code);
+            if (!tokenResult.result) {
+                throw new Error("No token result from Dropbox");
+            }
+            const result = tokenResult.result;
+            const tokens = {
+                accessToken: result.access_token,
+                refreshToken: result.refresh_token ?? undefined,
+                expiresAt: result.expires_in
+                    ? new Date(Date.now() + result.expires_in * 1000)
+                    : undefined,
+                tokenType: result.token_type ?? "bearer",
+                scope: result.scope ?? undefined,
+                accountId: result.account_id ?? undefined,
+            };
+            this.logger.info("OAuth tokens obtained", {
+                hasRefreshToken: !!tokens.refreshToken,
+                expiresAt: tokens.expiresAt,
+                accountId: tokens.accountId,
+            });
+            return tokens;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error";
+            this.logger.error("Failed to exchange code for tokens", undefined, {
+                errorMessage,
+            });
+            throw new Error(`OAuth token exchange failed: ${errorMessage}`);
+        }
+    }
+    /**
+     * Refresh access token using refresh token
+     * @param refreshToken - Refresh token
+     * @returns New OAuth tokens
+     * @throws Error if refresh fails
+     */
+    refreshAccessToken(refreshToken) {
+        try {
+            // Set the refresh token in the auth instance
+            this.auth.setRefreshToken(refreshToken);
+            // Refresh access token - this updates the internal state
+            // Note: refreshAccessToken() returns void but is synchronous
+            this.auth.refreshAccessToken();
+            // Get the access token from the auth instance
+            const accessToken = this.auth.getAccessToken();
+            if (!accessToken) {
+                throw new Error("No access token after refresh");
+            }
+            // Dropbox refresh doesn't return expiry, so we'll set a default
+            // Access tokens typically last 4 hours
+            const tokens = {
+                accessToken: accessToken,
+                refreshToken: refreshToken || undefined, // Keep existing refresh token
+                expiresAt: new Date(Date.now() + 4 * 60 * 60 * 1000), // 4 hours default
+                tokenType: "bearer",
+                scope: undefined,
+            };
+            this.logger.info("Access token refreshed", {
+                expiresAt: tokens.expiresAt,
+            });
+            return tokens;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error";
+            this.logger.error("Failed to refresh access token", undefined, {
+                errorMessage,
+            });
+            throw new Error(`Token refresh failed: ${errorMessage}`);
+        }
+    }
+    /**
+     * Validate access token by making a test request to Dropbox API
+     * @param accessToken - Access token to validate
+     * @returns True if token is valid, false otherwise
+     */
+    async validateToken(accessToken) {
+        try {
+            const dbx = new dropbox_1.Dropbox({ accessToken });
+            const response = await dbx.usersGetCurrentAccount();
+            return !!response.result;
+        }
+        catch (error) {
+            this.logger.warn("Token validation failed", {
+                error: error instanceof Error ? error.message : "Unknown error",
+            });
+            return false;
+        }
+    }
+    /**
+     * Get a valid access token, automatically refreshing if expired
+     * Requires storage to be configured
+     * @param storageKey - Key to retrieve tokens from storage
+     * @returns Valid access token
+     * @throws Error if storage not configured or tokens not found
+     */
+    async getValidToken(storageKey) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        const tokens = await this.storage.retrieve(storageKey);
+        if (!tokens) {
+            throw new Error("No tokens found in storage");
+        }
+        // Check if token is expired (with 5 minute buffer)
+        const isExpiring = tokens.expiresAt &&
+            tokens.expiresAt.getTime() - Date.now() < 5 * 60 * 1000;
+        if (isExpiring && tokens.refreshToken) {
+            this.logger.info("Token expiring, refreshing...", { storageKey });
+            const newTokens = this.refreshAccessToken(tokens.refreshToken);
+            await this.storage.store(storageKey, newTokens);
+            return newTokens.accessToken;
+        }
+        return tokens.accessToken;
+    }
+    /**
+     * Store tokens using configured storage
+     * @param key - Storage key
+     * @param tokens - Tokens to store
+     * @throws Error if storage not configured
+     */
+    async storeTokens(key, tokens) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        await this.storage.store(key, tokens);
+        this.logger.info("Tokens stored", { key });
+    }
+    /**
+     * Revoke and delete tokens from storage
+     * @param storageKey - Storage key
+     * @throws Error if storage not configured
+     */
+    async revokeTokens(storageKey) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        await this.storage.delete(storageKey);
+        this.logger.info("Tokens revoked", { storageKey });
+    }
+}
+exports.DropboxOAuth = DropboxOAuth;
+//# sourceMappingURL=DropboxOAuth.js.map

package/dist/DropboxOAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DropboxOAuth.js","sourceRoot":"","sources":["../src/DropboxOAuth.ts"],"names":[],"mappings":";AAAA;;;;;;EAME;;;AAEF,+CAA0D;AAC1D,qCAA+C;AAC/C,+BAAoC;AAepC;;;;;;;;;GASG;AACH,MAAa,YAAY;IAMvB;;;;OAIG;IACH,YAAY,MAAoC,EAAE,OAAsB;QACtE,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QACF,IAAI,CAAC,MAAM;YACT,MAAM,CAAC,MAAM;gBACb,IAAA,qBAAY,EAAC;oBACX,OAAO,EAAE;wBACP,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,OAAO;wBAChB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;qBACnD;iBACF,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,yBAAyB;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,qBAAW,CAAC;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CACjB,KAAc,EACd,MAAiB;QAEjB,MAAM,SAAS,GAAG,KAAK,IAAI,IAAA,SAAM,GAAE,CAAC;QACpC,MAAM,eAAe,GAAG,MAAM,IAAI;YAChC,qBAAqB;YACrB,oBAAoB;YACpB,mBAAmB;SACpB,CAAC;QAEF,iEAAiE;QACjE,sDAAsD;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,SAAS,EACT,MAAM,EACN,SAAS,EACT,eAAe,EACf,MAAM,EACN,KAAK,CACe,CAAC;QAEvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC9C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,MAAc;QAEd,IAAI,CAAC;YACH,yCAAyC;YACzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CACxD,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CACL,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAA4B,CAAC;YACxD,MAAM,MAAM,GAAuB;gBACjC,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;gBAC/C,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC1B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;oBACjD,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACxC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;gBAChC,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;aAC1C,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACxC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;gBACtC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,SAAS,EAAE;gBACjE,YAAY;aACb,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,YAAoB;QACrC,IAAI,CAAC;YACH,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAExC,yDAAyD;YACzD,6DAA6D;YAC7D,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE/B,8CAA8C;YAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,gEAAgE;YAChE,uCAAuC;YACvC,MAAM,MAAM,GAAuB;gBACjC,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY,IAAI,SAAS,EAAE,8BAA8B;gBACvE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,kBAAkB;gBACxE,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,SAAS;aACjB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,SAAS,EAAE;gBAC7D,YAAY;aACb,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,iBAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAEpD,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBAC1C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,mDAAmD;QACnD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAE1D,IAAI,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAChD,OAAO,SAAS,CAAC,WAAW,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,MAA0B;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC;CACF;AA5PD,oCA4PC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { DropboxOAuth, type DropboxOAuthConfigWithLogger, } from "./DropboxOAuth";
+export type { DropboxOAuthTokens, DropboxOAuthConfig, TokenStorage, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,YAAY,EACZ,KAAK,4BAA4B,GAClC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GACb,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DropboxOAuth = void 0;
+var DropboxOAuth_1 = require("./DropboxOAuth");
+Object.defineProperty(exports, "DropboxOAuth", { enumerable: true, get: function () { return DropboxOAuth_1.DropboxOAuth; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;EAME;;;AAEF,+CAGwB;AAFtB,4GAAA,YAAY,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,55 @@
+/**
+ * OAuth 2.0 tokens returned by Dropbox
+ */
+export interface DropboxOAuthTokens {
+    accessToken: string;
+    refreshToken?: string | undefined;
+    expiresAt?: Date | undefined;
+    tokenType: string;
+    scope?: string | undefined;
+    accountId?: string | undefined;
+}
+/**
+ * OAuth 2.0 configuration for Dropbox
+ */
+export interface DropboxOAuthConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    logger?: import("@bernierllc/logger").Logger;
+}
+/**
+ * Token storage interface for persistent credential management
+ */
+export interface TokenStorage {
+    /**
+     * Store OAuth tokens
+     * @param key - Storage key (e.g., user ID)
+     * @param tokens - OAuth tokens to store
+     */
+    store(_key: string, _tokens: DropboxOAuthTokens): Promise<void>;
+    /**
+     * Retrieve OAuth tokens
+     * @param key - Storage key
+     * @returns Tokens if found, null otherwise
+     */
+    retrieve(_key: string): Promise<DropboxOAuthTokens | null>;
+    /**
+     * Delete OAuth tokens
+     * @param key - Storage key
+     */
+    delete(_key: string): Promise<void>;
+}
+/**
+ * Dropbox API token result structure
+ * This matches the structure returned by Dropbox SDK's getAccessTokenFromCode
+ */
+export interface DropboxTokenResult {
+    access_token: string;
+    refresh_token?: string;
+    expires_in?: number;
+    token_type?: string;
+    scope?: string;
+    account_id?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,oBAAoB,EAAE,MAAM,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAE3D;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;EAME"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@bernierllc/dropbox-oauth",
+  "version": "0.2.0",
+  "description": "OAuth 2.0 authentication and token management for Dropbox",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "author": "Bernier LLC",
+  "license": "SEE LICENSE IN LICENSE",
+  "files": [
+    "dist",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "dropbox": "^10.34.0",
+    "uuid": "^11.1.0",
+    "@bernierllc/logger": "1.0.3"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.12",
+    "@types/node": "^20.12.12",
+    "@types/uuid": "^9.0.4",
+    "@typescript-eslint/eslint-plugin": "^7.9.0",
+    "@typescript-eslint/parser": "^7.9.0",
+    "eslint": "^8.57.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-prettier": "^5.1.3",
+    "jest": "^29.7.0",
+    "prettier": "^3.2.5",
+    "ts-jest": "^29.1.2",
+    "typescript": "^5.4.5"
+  },
+  "peerDependencies": {
+    "dropbox": "^10.34.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "jest",
+    "test:run": "jest --runInBand --collectCoverage",
+    "test:coverage": "jest --runInBand --collectCoverage",
+    "lint": "eslint \"src/**/*.ts\" \"__tests__/**/*.ts\" --max-warnings 0"
+  }
+}