@bernierllc/google-drive-oauth 0.2.0

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+
+

package/README.md

@@ -0,0 +1,168 @@
+# @bernierllc/google-drive-oauth
+
+OAuth 2.0 authentication and token management for Google Drive.
+
+## Features
+
+- OAuth 2.0 authorization URL generation
+- Authorization code exchange for access tokens
+- Automatic token refresh with refresh tokens
+- Token validation and expiration checking
+- Secure credential storage interfaces
+- Multi-user token management
+
+## Installation
+
+```bash
+npm install @bernierllc/google-drive-oauth
+```
+
+## Usage
+
+### Basic Authentication Flow
+
+```typescript
+import { GoogleDriveOAuth } from '@bernierllc/google-drive-oauth';
+
+// Create auth instance
+const driveAuth = new GoogleDriveOAuth({
+  clientId: 'your-client-id',
+  clientSecret: 'your-client-secret',
+  redirectUri: 'https://your-app.com/oauth/google-drive/callback'
+});
+
+// Step 1: Generate authorization URL
+const { url, state } = driveAuth.getAuthorizationUrl();
+// Store state in session for CSRF protection
+// Redirect user to url
+
+// Step 2: Exchange authorization code for tokens
+const tokens = await driveAuth.exchangeCodeForTokens(code, state);
+console.log('Access token:', tokens.accessToken);
+console.log('Refresh token:', tokens.refreshToken);
+```
+
+### Token Refresh
+
+```typescript
+// Manually refresh token
+const newTokens = await driveAuth.refreshAccessToken(refreshToken);
+
+// Or use automatic refresh with storage
+const storage: TokenStorage = {
+  async store(key, tokens) {
+    // Store tokens in your database
+    await db.saveTokens(key, tokens);
+  },
+  async retrieve(key) {
+    // Retrieve tokens from your database
+    return await db.getTokens(key);
+  },
+  async delete(key) {
+    // Delete tokens from your database
+    await db.deleteTokens(key);
+  }
+};
+
+const authWithStorage = new GoogleDriveOAuth(config, storage);
+
+// Automatically refreshes if token is expired
+const validToken = await authWithStorage.getValidToken('user-123');
+```
+
+### Token Validation
+
+```typescript
+const isValid = await driveAuth.validateToken(accessToken);
+if (!isValid) {
+  console.log('Token is invalid or expired');
+}
+```
+
+## API
+
+### `GoogleDriveOAuth`
+
+#### Constructor
+
+```typescript
+constructor(config: GoogleDriveOAuthConfig, storage?: TokenStorage)
+```
+
+- `config.clientId` - Google OAuth client ID
+- `config.clientSecret` - Google OAuth client secret
+- `config.redirectUri` - OAuth redirect URI
+- `config.logger` - (Optional) Custom logger instance
+- `storage` - (Optional) Token storage implementation
+
+#### Methods
+
+##### `getAuthorizationUrl(state?: string, scopes?: string[]): { url: string; state: string }`
+
+Generate OAuth authorization URL.
+
+##### `exchangeCodeForTokens(code: string, state: string): Promise<GoogleDriveOAuthTokens>`
+
+Exchange authorization code for access and refresh tokens.
+
+##### `refreshAccessToken(refreshToken: string): Promise<GoogleDriveOAuthTokens>`
+
+Refresh access token using refresh token.
+
+##### `validateToken(accessToken: string): Promise<boolean>`
+
+Validate access token against Google Drive API.
+
+##### `getValidToken(storageKey: string): Promise<string>`
+
+Get a valid access token, automatically refreshing if expired (requires storage).
+
+##### `storeTokens(key: string, tokens: GoogleDriveOAuthTokens): Promise<void>`
+
+Store tokens (requires storage).
+
+##### `revokeTokens(storageKey: string): Promise<void>`
+
+Revoke and delete tokens (requires storage).
+
+### `TokenStorage` Interface
+
+```typescript
+interface TokenStorage {
+  store(key: string, tokens: GoogleDriveOAuthTokens): Promise<void>;
+  retrieve(key: string): Promise<GoogleDriveOAuthTokens | null>;
+  delete(key: string): Promise<void>;
+}
+```
+
+Implement this interface to provide persistent token storage.
+
+## Token Expiration
+
+Tokens are automatically refreshed when:
+- Less than 5 minutes remaining before expiration
+- `getValidToken()` is called with valid refresh token
+
+## Error Handling
+
+```typescript
+try {
+  const tokens = await driveAuth.exchangeCodeForTokens(code, state);
+} catch (error) {
+  console.error('OAuth failed:', error.message);
+}
+```
+
+All methods throw descriptive errors on failure.
+
+## Integration
+
+### Logger Integration
+
+This package uses `@bernierllc/logger` for structured logging. The logger is optional and will use a no-op logger if not provided.
+
+## License
+
+Copyright (c) 2025 Bernier LLC. See LICENSE file for details.
+
+

package/dist/GoogleDriveOAuth.d.ts

@@ -0,0 +1,83 @@
+import { Logger } from "@bernierllc/logger";
+import { GoogleDriveOAuthConfig, GoogleDriveOAuthTokens, TokenStorage } from "./types";
+/**
+ * Extended configuration including logger
+ */
+export interface GoogleDriveOAuthConfigWithLogger extends GoogleDriveOAuthConfig {
+    logger?: Logger;
+}
+/**
+ * GoogleDriveOAuth - OAuth 2.0 authentication and token management for Google Drive
+ *
+ * Handles:
+ * - Authorization URL generation
+ * - Authorization code exchange
+ * - Token refresh
+ * - Token validation
+ * - Automatic token refresh with storage
+ */
+export declare class GoogleDriveOAuth {
+    private config;
+    private logger;
+    private storage;
+    private oauth2Client;
+    /**
+     * Create a new GoogleDriveOAuth instance
+     * @param config - OAuth configuration
+     * @param storage - Optional token storage for automatic refresh
+     */
+    constructor(config: GoogleDriveOAuthConfigWithLogger, storage?: TokenStorage);
+    /**
+     * Generate OAuth authorization URL
+     * @param state - Optional state parameter for CSRF protection (auto-generated if not provided)
+     * @param scopes - Requested Google Drive scopes (default: ['https://www.googleapis.com/auth/drive.file'])
+     * @returns Object with authorization URL and state
+     */
+    getAuthorizationUrl(state?: string, scopes?: string[]): {
+        url: string;
+        state: string;
+    };
+    /**
+     * Exchange authorization code for access and refresh tokens
+     * @param code - Authorization code from OAuth callback
+     * @param state - State token for CSRF validation
+     * @returns OAuth tokens
+     * @throws Error if exchange fails
+     */
+    exchangeCodeForTokens(code: string, _state: string): Promise<GoogleDriveOAuthTokens>;
+    /**
+     * Refresh access token using refresh token
+     * @param refreshToken - Refresh token
+     * @returns New OAuth tokens
+     * @throws Error if refresh fails
+     */
+    refreshAccessToken(refreshToken: string): Promise<GoogleDriveOAuthTokens>;
+    /**
+     * Validate access token by making a test request to Google Drive API
+     * @param accessToken - Access token to validate
+     * @returns True if token is valid, false otherwise
+     */
+    validateToken(accessToken: string): Promise<boolean>;
+    /**
+     * Get a valid access token, automatically refreshing if expired
+     * Requires storage to be configured
+     * @param storageKey - Key to retrieve tokens from storage
+     * @returns Valid access token
+     * @throws Error if storage not configured or tokens not found
+     */
+    getValidToken(storageKey: string): Promise<string>;
+    /**
+     * Store tokens using configured storage
+     * @param key - Storage key
+     * @param tokens - Tokens to store
+     * @throws Error if storage not configured
+     */
+    storeTokens(key: string, tokens: GoogleDriveOAuthTokens): Promise<void>;
+    /**
+     * Revoke and delete tokens from storage
+     * @param storageKey - Storage key
+     * @throws Error if storage not configured
+     */
+    revokeTokens(storageKey: string): Promise<void>;
+}
+//# sourceMappingURL=GoogleDriveOAuth.d.ts.map

package/dist/GoogleDriveOAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleDriveOAuth.d.ts","sourceRoot":"","sources":["../src/GoogleDriveOAuth.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAgB,MAAM,oBAAoB,CAAC;AAG1D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,gCACf,SAAQ,sBAAsB;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,YAAY,CAAoB;IAExC;;;;OAIG;gBAED,MAAM,EAAE,gCAAgC,EACxC,OAAO,CAAC,EAAE,YAAY;IA0BxB;;;;;OAKG;IACH,mBAAmB,CACjB,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAyBjC;;;;;;OAMG;IACG,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC;IAmClC;;;;;OAKG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,CAAC;IAsClC;;;;OAIG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAkB1D;;;;;;OAMG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BxD;;;;;OAKG;IACG,WAAW,CACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,IAAI,CAAC;IAShB;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQtD"}

package/dist/GoogleDriveOAuth.js

@@ -0,0 +1,225 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleDriveOAuth = void 0;
+const logger_1 = require("@bernierllc/logger");
+const googleapis_1 = require("googleapis");
+const uuid_1 = require("uuid");
+/**
+ * GoogleDriveOAuth - OAuth 2.0 authentication and token management for Google Drive
+ *
+ * Handles:
+ * - Authorization URL generation
+ * - Authorization code exchange
+ * - Token refresh
+ * - Token validation
+ * - Automatic token refresh with storage
+ */
+class GoogleDriveOAuth {
+    /**
+     * Create a new GoogleDriveOAuth instance
+     * @param config - OAuth configuration
+     * @param storage - Optional token storage for automatic refresh
+     */
+    constructor(config, storage) {
+        this.config = {
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            redirectUri: config.redirectUri,
+        };
+        this.logger =
+            config.logger ||
+                (0, logger_1.createLogger)({
+                    context: {
+                        service: "GoogleDriveOAuth",
+                        version: "0.1.0",
+                        environment: process.env.NODE_ENV || "development",
+                    },
+                });
+        this.storage = storage;
+        // Initialize OAuth2 client
+        this.oauth2Client = new googleapis_1.google.auth.OAuth2(this.config.clientId, this.config.clientSecret, this.config.redirectUri);
+    }
+    /**
+     * Generate OAuth authorization URL
+     * @param state - Optional state parameter for CSRF protection (auto-generated if not provided)
+     * @param scopes - Requested Google Drive scopes (default: ['https://www.googleapis.com/auth/drive.file'])
+     * @returns Object with authorization URL and state
+     */
+    getAuthorizationUrl(state, scopes) {
+        const authState = state || (0, uuid_1.v4)();
+        const requestedScopes = scopes || [
+            "https://www.googleapis.com/auth/drive.file",
+            "https://www.googleapis.com/auth/drive.metadata.readonly",
+        ];
+        const authUrl = this.oauth2Client.generateAuthUrl({
+            access_type: "offline", // Request refresh token
+            scope: requestedScopes,
+            state: authState,
+            prompt: "consent", // Force consent screen to get refresh token
+        });
+        this.logger.info("Authorization URL generated", {
+            state: authState,
+            scopes: requestedScopes,
+        });
+        return {
+            url: authUrl,
+            state: authState,
+        };
+    }
+    /**
+     * Exchange authorization code for access and refresh tokens
+     * @param code - Authorization code from OAuth callback
+     * @param state - State token for CSRF validation
+     * @returns OAuth tokens
+     * @throws Error if exchange fails
+     */
+    async exchangeCodeForTokens(code, _state) {
+        try {
+            const { tokens } = await this.oauth2Client.getToken(code);
+            if (!tokens.access_token) {
+                throw new Error("No access token received from Google");
+            }
+            const oauthTokens = {
+                accessToken: tokens.access_token,
+                refreshToken: tokens.refresh_token ?? undefined,
+                expiresAt: tokens.expiry_date
+                    ? new Date(tokens.expiry_date)
+                    : undefined,
+                tokenType: tokens.token_type ?? "Bearer",
+                scope: tokens.scope ?? undefined,
+                idToken: tokens.id_token ?? undefined,
+            };
+            this.logger.info("OAuth tokens obtained", {
+                hasRefreshToken: !!oauthTokens.refreshToken,
+                expiresAt: oauthTokens.expiresAt,
+            });
+            return oauthTokens;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error";
+            this.logger.error("Failed to exchange code for tokens", undefined, {
+                errorMessage,
+            });
+            throw new Error(`OAuth token exchange failed: ${errorMessage}`);
+        }
+    }
+    /**
+     * Refresh access token using refresh token
+     * @param refreshToken - Refresh token
+     * @returns New OAuth tokens
+     * @throws Error if refresh fails
+     */
+    async refreshAccessToken(refreshToken) {
+        try {
+            this.oauth2Client.setCredentials({
+                refresh_token: refreshToken,
+            });
+            const { credentials } = await this.oauth2Client.refreshAccessToken();
+            if (!credentials.access_token) {
+                throw new Error("No access token received from Google refresh");
+            }
+            const tokens = {
+                accessToken: credentials.access_token,
+                refreshToken: credentials.refresh_token ?? refreshToken,
+                expiresAt: credentials.expiry_date
+                    ? new Date(credentials.expiry_date)
+                    : undefined,
+                tokenType: credentials.token_type ?? "Bearer",
+                scope: credentials.scope ?? undefined,
+                idToken: credentials.id_token ?? undefined,
+            };
+            this.logger.info("Access token refreshed", {
+                expiresAt: tokens.expiresAt,
+            });
+            return tokens;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error";
+            this.logger.error("Failed to refresh access token", undefined, {
+                errorMessage,
+            });
+            throw new Error(`Token refresh failed: ${errorMessage}`);
+        }
+    }
+    /**
+     * Validate access token by making a test request to Google Drive API
+     * @param accessToken - Access token to validate
+     * @returns True if token is valid, false otherwise
+     */
+    async validateToken(accessToken) {
+        try {
+            this.oauth2Client.setCredentials({
+                access_token: accessToken,
+            });
+            const drive = googleapis_1.google.drive({ version: "v3", auth: this.oauth2Client });
+            const response = await drive.about.get({ fields: "user" });
+            return !!response.data.user;
+        }
+        catch (error) {
+            this.logger.warn("Token validation failed", {
+                error: error instanceof Error ? error.message : "Unknown error",
+            });
+            return false;
+        }
+    }
+    /**
+     * Get a valid access token, automatically refreshing if expired
+     * Requires storage to be configured
+     * @param storageKey - Key to retrieve tokens from storage
+     * @returns Valid access token
+     * @throws Error if storage not configured or tokens not found
+     */
+    async getValidToken(storageKey) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        const tokens = await this.storage.retrieve(storageKey);
+        if (!tokens) {
+            throw new Error("No tokens found in storage");
+        }
+        // Check if token is expired (with 5 minute buffer)
+        const isExpiring = tokens.expiresAt &&
+            tokens.expiresAt.getTime() - Date.now() < 5 * 60 * 1000;
+        if (isExpiring && tokens.refreshToken) {
+            this.logger.info("Token expiring, refreshing...", { storageKey });
+            const newTokens = await this.refreshAccessToken(tokens.refreshToken);
+            await this.storage.store(storageKey, newTokens);
+            return newTokens.accessToken;
+        }
+        return tokens.accessToken;
+    }
+    /**
+     * Store tokens using configured storage
+     * @param key - Storage key
+     * @param tokens - Tokens to store
+     * @throws Error if storage not configured
+     */
+    async storeTokens(key, tokens) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        await this.storage.store(key, tokens);
+        this.logger.info("Tokens stored", { key });
+    }
+    /**
+     * Revoke and delete tokens from storage
+     * @param storageKey - Storage key
+     * @throws Error if storage not configured
+     */
+    async revokeTokens(storageKey) {
+        if (!this.storage) {
+            throw new Error("Token storage not configured");
+        }
+        await this.storage.delete(storageKey);
+        this.logger.info("Tokens revoked", { storageKey });
+    }
+}
+exports.GoogleDriveOAuth = GoogleDriveOAuth;
+//# sourceMappingURL=GoogleDriveOAuth.js.map

package/dist/GoogleDriveOAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleDriveOAuth.js","sourceRoot":"","sources":["../src/GoogleDriveOAuth.ts"],"names":[],"mappings":";AAAA;;;;;;EAME;;;AAEF,+CAA0D;AAC1D,2CAA0C;AAC1C,+BAAoC;AAepC;;;;;;;;;GASG;AACH,MAAa,gBAAgB;IAM3B;;;;OAIG;IACH,YACE,MAAwC,EACxC,OAAsB;QAEtB,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QACF,IAAI,CAAC,MAAM;YACT,MAAM,CAAC,MAAM;gBACb,IAAA,qBAAY,EAAC;oBACX,OAAO,EAAE;wBACP,OAAO,EAAE,kBAAkB;wBAC3B,OAAO,EAAE,OAAO;wBAChB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;qBACnD;iBACF,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,2BAA2B;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAM,CAAC,IAAI,CAAC,MAAM,CACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CACjB,KAAc,EACd,MAAiB;QAEjB,MAAM,SAAS,GAAG,KAAK,IAAI,IAAA,SAAM,GAAE,CAAC;QACpC,MAAM,eAAe,GAAG,MAAM,IAAI;YAChC,4CAA4C;YAC5C,yDAAyD;SAC1D,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC;YAChD,WAAW,EAAE,SAAS,EAAE,wBAAwB;YAChD,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,SAAS,EAAE,4CAA4C;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC9C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,MAAc;QAEd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE1D,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,WAAW,GAA2B;gBAC1C,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;gBAC/C,SAAS,EAAE,MAAM,CAAC,WAAW;oBAC3B,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC9B,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACxC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;gBAChC,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;aACtC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACxC,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY;gBAC3C,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,SAAS,EAAE;gBACjE,YAAY;aACb,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAAoB;QAEpB,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;gBAC/B,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YAEH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;YAErE,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAA2B;gBACrC,WAAW,EAAE,WAAW,CAAC,YAAY;gBACrC,YAAY,EAAE,WAAW,CAAC,aAAa,IAAI,YAAY;gBACvD,SAAS,EAAE,WAAW,CAAC,WAAW;oBAChC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;oBACnC,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,WAAW,CAAC,UAAU,IAAI,QAAQ;gBAC7C,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,SAAS;gBACrC,OAAO,EAAE,WAAW,CAAC,QAAQ,IAAI,SAAS;aAC3C,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,SAAS,EAAE;gBAC7D,YAAY;aACb,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;gBAC/B,YAAY,EAAE,WAAW;aAC1B,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,mBAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAE3D,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBAC1C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,mDAAmD;QACnD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAE1D,IAAI,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAChD,OAAO,SAAS,CAAC,WAAW,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,GAAW,EACX,MAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC;CACF;AA3PD,4CA2PC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { GoogleDriveOAuth, type GoogleDriveOAuthConfigWithLogger, } from "./GoogleDriveOAuth";
+export type { GoogleDriveOAuthTokens, GoogleDriveOAuthConfig, TokenStorage, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,gBAAgB,EAChB,KAAK,gCAAgC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,GACb,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleDriveOAuth = void 0;
+var GoogleDriveOAuth_1 = require("./GoogleDriveOAuth");
+Object.defineProperty(exports, "GoogleDriveOAuth", { enumerable: true, get: function () { return GoogleDriveOAuth_1.GoogleDriveOAuth; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;EAME;;;AAEF,uDAG4B;AAF1B,oHAAA,gBAAgB,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,43 @@
+/**
+ * OAuth 2.0 tokens returned by Google
+ */
+export interface GoogleDriveOAuthTokens {
+    accessToken: string;
+    refreshToken?: string | undefined;
+    expiresAt?: Date | undefined;
+    tokenType: string;
+    scope?: string | undefined;
+    idToken?: string | undefined;
+}
+/**
+ * OAuth 2.0 configuration for Google Drive
+ */
+export interface GoogleDriveOAuthConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    logger?: import("@bernierllc/logger").Logger;
+}
+/**
+ * Token storage interface for persistent credential management
+ */
+export interface TokenStorage {
+    /**
+     * Store OAuth tokens
+     * @param key - Storage key (e.g., user ID)
+     * @param tokens - OAuth tokens to store
+     */
+    store(_key: string, _tokens: GoogleDriveOAuthTokens): Promise<void>;
+    /**
+     * Retrieve OAuth tokens
+     * @param key - Storage key
+     * @returns Tokens if found, null otherwise
+     */
+    retrieve(_key: string): Promise<GoogleDriveOAuthTokens | null>;
+    /**
+     * Delete OAuth tokens
+     * @param key - Storage key
+     */
+    delete(_key: string): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,oBAAoB,EAAE,MAAM,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAE/D;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}

package/dist/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code *only within the scope of the project it was delivered for*.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;EAME"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@bernierllc/google-drive-oauth",
+  "version": "0.2.0",
+  "description": "OAuth 2.0 authentication and token management for Google Drive",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "author": "Bernier LLC",
+  "license": "SEE LICENSE IN LICENSE",
+  "files": [
+    "dist",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "googleapis": "^130.0.0",
+    "uuid": "^11.1.0",
+    "@bernierllc/logger": "1.0.3"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.12",
+    "@types/node": "^20.12.12",
+    "@types/uuid": "^9.0.4",
+    "@typescript-eslint/eslint-plugin": "^7.9.0",
+    "@typescript-eslint/parser": "^7.9.0",
+    "eslint": "^8.57.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-prettier": "^5.1.3",
+    "jest": "^29.7.0",
+    "prettier": "^3.2.5",
+    "ts-jest": "^29.1.2",
+    "typescript": "^5.4.5"
+  },
+  "peerDependencies": {
+    "googleapis": "^130.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "jest --runInBand",
+    "test:run": "jest --runInBand --collectCoverage",
+    "test:coverage": "jest --runInBand --collectCoverage",
+    "lint": "eslint \"src/**/*.ts\" \"__tests__/**/*.ts\" --max-warnings 0"
+  }
+}