@bifold/core 3.0.0 → 3.0.2

package/lib/commonjs/modules/openid/refresh/reIssuance.js.map

@@ -1 +1 @@
-{"version":3,"names":["_offerResolve","require","_metadata","_types","reissueCredentialWithAccessToken","agent","logger","record","tokenResponse","clientId","pidSchemes","Error","refreshMetaData","getRefreshCredentialMetadata","credentialConfigurationId","resolvedCredentialOffer","access_token","info","creds","modules","openid4vc","holder","requestCredentials","accessToken","tokenType","token_type","cNonce","c_nonce","credentialsToRequest","verifyCredentialStatus","allowedProofOfPossessionSignatureAlgorithms","credentialBindingResolver","opts","customCredentialBindingResolver","supportedDidMethods","supportsAllDidMethods","supportsJwk","credentialFormat","firstCredential","credentials","newRecord","openId4VcMetadata","extractOpenId4VcCredentialMetadata","offeredCredentialConfigurations","id","metadata","credentialIssuer","credential_issuer","display","setOpenId4VcCredentialMetadata","setRefreshCredentialMetadata","refreshToken","refresh_token","lastCheckedAt","Date","now","lastCheckResult","RefreshStatus","Valid"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/reIssuance.ts"],"mappings":";;;;;;AAeA,IAAAA,aAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AAMA,IAAAE,MAAA,GAAAF,OAAA;AAaO,eAAeG,gCAAgCA,CAAC;EACrDC,KAAK;EACLC,MAAM;EACNC,MAAM;EACNC,aAAa;EACbC,QAAQ;EACRC;AAC2B,CAAC,EAAiG;EAC7H,IAAI,CAACH,MAAM,EAAE;IACX,MAAM,IAAII,KAAK,CAAC,gDAAgD,CAAC;EACnE;EAEA,MAAMC,eAAe,GAAG,IAAAC,sCAA4B,EAACN,MAAM,CAAC;EAC5D,IAAI,CAACK,eAAe,EAAE;IACpB,MAAM,IAAID,KAAK,CAAC,0DAA0D,CAAC;EAC7E;EACA,MAAM;IAAEG,yBAAyB;IAAEC;EAAwB,CAAC,GAAGH,eAAe;EAE9E,IAAI,CAACG,uBAAuB,EAAE;IAC5B,MAAM,IAAIJ,KAAK,CAAC,6EAA6E,CAAC;EAChG;EAEA,IAAI,CAACH,aAAa,CAACQ,YAAY,EAAE;IAC/B,MAAM,IAAIL,KAAK,CAAC,8DAA8D,CAAC;EACjF;EAEAL,MAAM,CAACW,IAAI,CAAC,6DAA6D,CAAC;EAC1E;;EAQA,MAAMC,KAAe,GAAG,MAAMb,KAAK,CAACc,OAAO,CAACC,SAAS,CAACC,MAAM,CAACC,kBAAkB,CAAC;IAC9EP,uBAAuB;IACvBQ,WAAW,EAAEf,aAAa,CAACQ,YAAY;IACvCQ,SAAS,EAAEhB,aAAa,CAACiB,UAAU,IAAI,QAAQ;IAC/CC,MAAM,EAAElB,aAAa,CAACmB,OAAO;IAC7BlB,QAAQ;IACRmB,oBAAoB,EAAE,CAACd,yBAAyB,CAAC;IACjDe,sBAAsB,EAAE,KAAK;IAAE;IAC/BC,2CAA2C,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC/DC,yBAAyB,EAAE,MAAOC,IAAwC,IACxE,IAAAC,6CAA+B,EAAC;MAC9B5B,KAAK;MACL6B,mBAAmB,EAAEF,IAAI,CAACE,mBAAmB;MAC7C;MACAC,qBAAqB,EAAEH,IAAI,CAACG,qBAAqB;MACjDC,WAAW,EAAEJ,IAAI,CAACI,WAAW;MAC7BC,gBAAgB,EAAEL,IAAI,CAACK,gBAAgB;MACvC;MACAtB,uBAAuB,EAAEA,uBAAuB;MAChDL;IACF,CAAC;EACL,CAAC,CAAC;EAEFJ,MAAM,CAACW,IAAI,CAAC,uDAAuD,CAAC;;EAEpE;EACA,MAAM,CAACqB,eAAe,CAAC,GAAGpB,KAAK,CAACqB,WAAW;EAC3C,IAAI,CAACD,eAAe,IAAI,OAAOA,eAAe,KAAK,QAAQ,EAAE;IAC3D,MAAM,IAAI3B,KAAK,CAAC,+DAA+D,CAAC;EAClF;EAEA,MAAM6B,SAAmF,GAAGF,eAAe,CAAC/B,MAAM;EAClH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,MAAMkC,iBAAiB,GAAG,IAAAC,4CAAkC,EAC1D3B,uBAAuB,CAAC4B,+BAA+B,EACvD;IACEC,EAAE,EAAE7B,uBAAuB,CAAC8B,QAAQ,CAACC,gBAAgB,CAACC,iBAAiB;IACvEC,OAAO,EAAEjC,uBAAuB,CAAC8B,QAAQ,CAACC,gBAAgB,CAACE;EAC7D,CACF,CAAC;EAED,IAAAC,wCAA8B,EAACT,SAAS,EAAEC,iBAAiB,CAAC;EAE5D,IAAAS,sCAA4B,EAACV,SAAS,EAAE;IACtC,GAAG5B,eAAe;IAClBuC,YAAY,EAAE3C,aAAa,CAAC4C,aAAa,IAAIxC,eAAe,CAACuC,YAAY;IACzEE,aAAa,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;IACzBC,eAAe,EAAEC,oBAAa,CAACC;EACjC,CAAC,CAAC;EAEF,OAAOlB,SAAS;AAClB","ignoreList":[]}
+{"version":3,"names":["_offerResolve","require","_metadata","_types","reissueCredentialWithAccessToken","agent","logger","record","tokenResponse","clientId","Error","refreshMetaData","getRefreshCredentialMetadata","credentialConfigurationId","resolvedCredentialOffer","access_token","info","creds","openid4vc","holder","requestCredentials","accessToken","tokenType","token_type","cNonce","c_nonce","credentialConfigurationIds","verifyCredentialStatus","allowedProofOfPossessionSignatureAlgorithms","credentialBindingResolver","opts","customCredentialBindingResolver","supportedDidMethods","proofTypes","supportsAllDidMethods","supportsJwk","credentialFormat","firstCredential","credentials","newRecord","requestedCredentialConfiguration","offeredCredentialConfigurations","openId4VcMetadata","extractOpenId4VcCredentialMetadata","id","metadata","credentialIssuer","credential_issuer","display","setOpenId4VcCredentialMetadata","setRefreshCredentialMetadata","refreshToken","refresh_token","lastCheckedAt","Date","now","lastCheckResult","RefreshStatus","Valid"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/reIssuance.ts"],"mappings":";;;;;;AASA,IAAAA,aAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AAMA,IAAAE,MAAA,GAAAF,OAAA;AAYO,eAAeG,gCAAgCA,CAAC;EACrDC,KAAK;EACLC,MAAM;EACNC,MAAM;EACNC,aAAa;EACbC;AAC2B,CAAC,EAA+C;EAC3E,IAAI,CAACF,MAAM,EAAE;IACX,MAAM,IAAIG,KAAK,CAAC,gDAAgD,CAAC;EACnE;EAEA,MAAMC,eAAe,GAAG,IAAAC,sCAA4B,EAACL,MAAM,CAAC;EAC5D,IAAI,CAACI,eAAe,EAAE;IACpB,MAAM,IAAID,KAAK,CAAC,0DAA0D,CAAC;EAC7E;EACA,MAAM;IAAEG,yBAAyB;IAAEC;EAAwB,CAAC,GAAGH,eAAe;EAE9E,IAAI,CAACG,uBAAuB,EAAE;IAC5B,MAAM,IAAIJ,KAAK,CAAC,6EAA6E,CAAC;EAChG;EAEA,IAAI,CAACF,aAAa,CAACO,YAAY,EAAE;IAC/B,MAAM,IAAIL,KAAK,CAAC,8DAA8D,CAAC;EACjF;EAEAJ,MAAM,CAACU,IAAI,CAAC,6DAA6D,CAAC;EAC1E;;EAQA,MAAMC,KAAe,GAAG,MAAMZ,KAAK,CAACa,SAAS,CAACC,MAAM,CAACC,kBAAkB,CAAC;IACtEN,uBAAuB;IACvBO,WAAW,EAAEb,aAAa,CAACO,YAAY;IACvCO,SAAS,EAAEd,aAAa,CAACe,UAAU,IAAI,QAAQ;IAC/CC,MAAM,EAAEhB,aAAa,CAACiB,OAAO;IAC7BhB,QAAQ;IACRiB,0BAA0B,EAAE,CAACb,yBAAyB,CAAC;IACvDc,sBAAsB,EAAE,KAAK;IAAE;IAC/BC,2CAA2C,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC/DC,yBAAyB,EAAE,MAAOC,IAAwC,IACxE,IAAAC,6CAA+B,EAAC;MAC9B1B,KAAK;MACL2B,mBAAmB,EAAEF,IAAI,CAACE,mBAAmB;MAC7CC,UAAU,EAAEH,IAAI,CAACG,UAAU;MAC3BC,qBAAqB,EAAEJ,IAAI,CAACI,qBAAqB;MACjDC,WAAW,EAAEL,IAAI,CAACK,WAAW;MAC7BC,gBAAgB,EAAEN,IAAI,CAACM;IACzB,CAAC;EACL,CAAC,CAAC;EAEF9B,MAAM,CAACU,IAAI,CAAC,uDAAuD,CAAC;;EAEpE;EACA,MAAM,CAACqB,eAAe,CAAC,GAAGpB,KAAK,CAACqB,WAAW;EAC3C,IAAI,CAACD,eAAe,IAAI,OAAOA,eAAe,KAAK,QAAQ,EAAE;IAC3D,MAAM,IAAI3B,KAAK,CAAC,+DAA+D,CAAC;EAClF;EAEA,MAAM6B,SAAiC,GAAGF,eAAe,CAAC9B,MAAM;EAChE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,MAAMiC,gCAAgC,GACpC1B,uBAAuB,CAAC2B,+BAA+B,CAAC5B,yBAAyB,CAAC;EAEpF,MAAM6B,iBAAiB,GAAG,IAAAC,4CAAkC,EAACH,gCAAgC,EAAS;IACpGI,EAAE,EAAE9B,uBAAuB,CAAC+B,QAAQ,CAACC,gBAAgB,CAACC,iBAAiB;IACvEC,OAAO,EAAElC,uBAAuB,CAAC+B,QAAQ,CAACC,gBAAgB,CAACE;EAC7D,CAAC,CAAC;EAEF,IAAAC,wCAA8B,EAACV,SAAS,EAAEG,iBAAiB,CAAC;EAE5D,IAAAQ,sCAA4B,EAACX,SAAS,EAAE;IACtC,GAAG5B,eAAe;IAClBwC,YAAY,EAAE3C,aAAa,CAAC4C,aAAa,IAAIzC,eAAe,CAACwC,YAAY;IACzEE,aAAa,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;IACzBC,eAAe,EAAEC,oBAAa,CAACC;EACjC,CAAC,CAAC;EAEF,OAAOnB,SAAS;AAClB","ignoreList":[]}

package/lib/commonjs/modules/openid/refresh/refreshOrchestrator.js

@@ -4,52 +4,52 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.RefreshOrchestrator = void 0;
-var _core = require("@credo-ts/core");
-var _refreshToken = require("./refreshToken");
-var _reIssuance = require("./reIssuance");
 var _types = require("./types");
 var _registry = require("./registry");
 var _verifyCredentialStatus = require("./verifyCredentialStatus");
 var _metadata = require("../metadata");
+var _credentialRecord = require("../credentialRecord");
+var _operations = require("./operations");
 // modules/openid/refresh/RefreshOrchestrator.ts
 
-const defaultToLite = rec => {
-  var _rec$createdAt;
-  return {
-    id: rec.id,
-    // best-effort: SdJwt/W3C both expose claimFormat via tags in many setups.
-    // Fallback to JwtVc if unknown so UI has *some* value.
-    format: rec instanceof _core.W3cCredentialRecord && _core.ClaimFormat.JwtVc || rec instanceof _core.SdJwtVcRecord && _core.ClaimFormat.SdJwtW3cVc || _core.ClaimFormat.JwtVc,
-    // TODO: Won't these checks against ClaimFormat always be true?
-    createdAt: (_rec$createdAt = rec.createdAt) === null || _rec$createdAt === void 0 ? void 0 : _rec$createdAt.toISOString(),
-    issuer: undefined
-  };
-};
 class RefreshOrchestrator {
   intervalOn = false; // interval enabled?
   runningOnce = false; // a run is in progress?
-
+  startupRunTriggered = false;
   recentlyIssued = new Map();
-  checkStatusOnly = true;
   constructor(logger, bridge, opts) {
     this.logger = logger;
     this.opts = {
       intervalMs: 15 * 60 * 1000,
       autoStart: true,
+      runOnStart: false,
+      flowType: _types.OpenIDCredentialRefreshFlowType.FullReplacement,
       onError: e => this.logger.error(String(e)),
       listRecords: async () => [],
-      toLite: defaultToLite,
+      toLite: _credentialRecord.toOpenIDCredentialLite,
       ...(opts ?? {})
     };
     logger.info(`🔧 [RefreshOrchestrator] initialized -> ${JSON.stringify({
       intervalMs: this.opts.intervalMs,
-      autoStart: this.opts.autoStart
+      autoStart: this.opts.autoStart,
+      runOnStart: this.opts.runOnStart,
+      flowType: this.opts.flowType
     })}`);
     bridge.onReady(agent => {
       this.agent = agent;
       this.logger.info('🪝 [RefreshOrchestrator] Agent ready');
+      if (this.opts.runOnStart && !this.startupRunTriggered) {
+        this.startupRunTriggered = true;
+        void this.runOnce('startup');
+      }
       if (this.opts.autoStart && this.opts.intervalMs) this.start();
     }, true);
+    bridge.onChange(agent => {
+      if (agent) return;
+      this.agent = undefined;
+      this.logger.info('🪝 [RefreshOrchestrator] Agent cleared');
+      this.stop();
+    });
   }
   configure(next) {
     const prev = {
@@ -66,7 +66,9 @@ class RefreshOrchestrator {
     };
     this.logger.info(`🔧 [RefreshOrchestrator] configure -> ${JSON.stringify({
       intervalMs: this.opts.intervalMs,
-      autoStart: this.opts.autoStart
+      autoStart: this.opts.autoStart,
+      runOnStart: this.opts.runOnStart,
+      flowType: this.opts.flowType
     })}`);
     const nowIntervalMs = this.opts.intervalMs ?? null;
     const nowAutoStart = this.opts.autoStart ?? true;
@@ -140,8 +142,11 @@ class RefreshOrchestrator {
       for (const rec of records) {
         // don’t block whole batch if one fails
         try {
-          await this.checkRecordStatus(rec);
-          // await this.refreshRecord(rec)
+          if (this.opts.flowType === _types.OpenIDCredentialRefreshFlowType.FullReplacement) {
+            await this.refreshRecord(rec);
+          } else {
+            await this.checkRecordStatus(rec);
+          }
         } catch (e) {
           var _this$opts$onError, _this$opts;
           this.logger.error(`💥 [Refresh] record ${rec.id} failed: ${String(e)}`);
@@ -172,6 +177,7 @@ class RefreshOrchestrator {
       shouldSkip,
       markRefreshing,
       clearRefreshing,
+      clearExpired,
       upsert,
       markInvalid,
       setLastSweep
@@ -196,19 +202,22 @@ class RefreshOrchestrator {
     this.logger.info(`🧭 [Refresh] check credential ${id}`);
     try {
       // 3) verification
-      const isValid = await (0, _verifyCredentialStatus.verifyCredentialStatus)(rec, this.logger);
+      const status = await (0, _verifyCredentialStatus.verifyCredentialStatus)(rec, this.logger);
       const now = Date.now();
       const meta = (0, _metadata.getRefreshCredentialMetadata)(rec) ?? {};
-      meta.lastCheckResult = isValid ? _types.RefreshStatus.Valid : _types.RefreshStatus.Invalid;
+      meta.lastCheckResult = status;
       meta.lastCheckedAt = now;
       meta.attemptCount = (meta.attemptCount ?? 0) + 1;
       (0, _metadata.setRefreshCredentialMetadata)(rec, meta);
       await (0, _metadata.persistCredentialRecord)(this.agent.context, rec);
-      if (isValid) {
+      if (status === _types.RefreshStatus.Valid) {
         this.logger.info(`✅ [Refresh] valid → ${id}`);
-      } else {
+        clearExpired(id);
+      } else if (status === _types.RefreshStatus.Invalid) {
         this.logger.info(`❌ [Refresh] invalid → ${id}`);
-        markInvalid(id); // <-- key change: we only flag invalid here
+        markInvalid(id);
+      } else {
+        this.logger.warn(`⚠️ [Refresh] status check error → ${id}`);
       }
       setLastSweep(new Date(now).toISOString());
     } catch (error) {
@@ -225,9 +234,8 @@ class RefreshOrchestrator {
       markRefreshing,
       clearRefreshing,
       clearExpired,
-      markExpiredWithReplacement,
-      blockAsFailed,
       blockAsSucceeded,
+      markInvalid,
       upsert
     } = _registry.credentialRegistry.getState();
     const id = rec.id;
@@ -250,8 +258,8 @@ class RefreshOrchestrator {
     this.logger.info(`🧭 [Refresh] check credential ${id}`);
     try {
       // 3) verification
-      const isValid = await (0, _verifyCredentialStatus.verifyCredentialStatus)(rec, this.logger);
-      if (isValid) {
+      const status = await (0, _verifyCredentialStatus.verifyCredentialStatus)(rec, this.logger);
+      if (status === _types.RefreshStatus.Valid) {
         this.logger.info(`✅ [Refresh] valid → ${id}`);
         // If it was previously expired for any reason, clear that and block as succeeded
         clearExpired(id);
@@ -259,6 +267,15 @@ class RefreshOrchestrator {
         // blockAsSucceeded(id)
         return;
       }
+      if (status === _types.RefreshStatus.Error) {
+        this.logger.warn(`⚠️ [Refresh] status check failed; deferring re-issue → ${id}`);
+        await (0, _metadata.markOpenIDCredentialStatus)({
+          credential: rec,
+          status: _types.RefreshStatus.Error,
+          agentContext: this.agent.context
+        });
+        return;
+      }
 
       // Invalid case:
 
@@ -267,48 +284,28 @@ class RefreshOrchestrator {
         status: _types.RefreshStatus.Invalid,
         agentContext: this.agent.context
       });
-
-      // 4) needs refresh → get access token
       this.logger.info(`♻️ [Refresh] invalid, attempting re-issue → ${id}`);
-      const token = await (0, _refreshToken.refreshAccessToken)({
-        logger: this.logger,
-        cred: rec,
-        agentContext: this.agent.context
-      });
-      if (!token) {
-        const msg = `no refresh token available`;
-        this.logger.warn(`⚠️ [Refresh] ${msg} for ${id}`);
-        blockAsFailed(id, msg);
-        return;
-      }
-
-      // 5) re-issue
-      const newRecord = await (0, _reIssuance.reissueCredentialWithAccessToken)({
+      const newRecord = await (0, _operations.refreshAndQueueReplacement)({
         agent: this.agent,
         logger: this.logger,
         record: rec,
-        tokenResponse: token
+        toLite: this.opts.toLite
       });
-      if (newRecord) {
-        this.logger.info(`💾 [Refresh] new credential → ${newRecord.id}`);
-        // Queue a replacement for UI/notifications and block the old one as succeeded
-        markExpiredWithReplacement(id, this.opts.toLite(newRecord));
-        blockAsSucceeded(id);
-        this.recentlyIssued.set(newRecord.id, newRecord);
-      } else {
-        const msg = `re-issue returned no record`;
+      if (!newRecord) {
+        const msg = 'credential refresh did not yield a replacement';
         this.logger.warn(`⚠️ [Refresh] ${msg} for ${id}`);
-        blockAsFailed(id, msg);
-        await (0, _metadata.markOpenIDCredentialStatus)({
-          credential: rec,
-          status: _types.RefreshStatus.Invalid,
-          agentContext: this.agent.context
-        });
+        markInvalid(id);
+        return;
       }
+      this.logger.info(`💾 [Refresh] new credential → ${newRecord.id}`);
+      blockAsSucceeded(id);
+      this.recentlyIssued.set(newRecord.id, newRecord);
     } catch (e) {
+      var _this$opts$onError4, _this$opts4;
       const err = String(e);
       this.logger.error(`💥 [Refresh] error on ${id}: ${err}`);
-      blockAsFailed(id, err);
+      (_this$opts$onError4 = (_this$opts4 = this.opts).onError) === null || _this$opts$onError4 === void 0 || _this$opts$onError4.call(_this$opts4, e);
+      markInvalid(id);
     } finally {
       // 6) clear in-flight marker
       clearRefreshing(id);

package/lib/commonjs/modules/openid/refresh/refreshOrchestrator.js.map

@@ -1 +1 @@
-{"version":3,"names":["_core","require","_refreshToken","_reIssuance","_types","_registry","_verifyCredentialStatus","_metadata","defaultToLite","rec","_rec$createdAt","id","format","W3cCredentialRecord","ClaimFormat","JwtVc","SdJwtVcRecord","SdJwtW3cVc","createdAt","toISOString","issuer","undefined","RefreshOrchestrator","intervalOn","runningOnce","recentlyIssued","Map","checkStatusOnly","constructor","logger","bridge","opts","intervalMs","autoStart","onError","e","error","String","listRecords","toLite","info","JSON","stringify","onReady","agent","start","configure","next","prev","agentReady","nowIntervalMs","nowAutoStart","stop","isRunning","timer","setInterval","runOnce","clearInterval","reason","_this$agent","warn","isInitialized","records","length","checkRecordStatus","_this$opts$onError","_this$opts","call","_this$opts$onError2","_this$opts2","setIntervalMs","resolveFull","get","shouldSkip","markRefreshing","clearRefreshing","upsert","markInvalid","setLastSweep","credentialRegistry","getState","isValid","verifyCredentialStatus","now","Date","meta","getRefreshCredentialMetadata","lastCheckResult","RefreshStatus","Valid","Invalid","lastCheckedAt","attemptCount","setRefreshCredentialMetadata","persistCredentialRecord","context","_this$opts$onError3","_this$opts3","refreshRecord","clearExpired","markExpiredWithReplacement","blockAsFailed","blockAsSucceeded","markOpenIDCredentialStatus","credential","status","agentContext","token","refreshAccessToken","cred","msg","newRecord","reissueCredentialWithAccessToken","record","tokenResponse","set","err","exports"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/refreshOrchestrator.ts"],"mappings":";;;;;;AACA,IAAAA,KAAA,GAAAC,OAAA;AAEA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,WAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAEA,IAAAI,SAAA,GAAAJ,OAAA;AACA,IAAAK,uBAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AATA;;AAkBA,MAAMO,aAAa,GAAIC,GAAY;EAAA,IAAAC,cAAA;EAAA,OAAM;IACvCC,EAAE,EAAEF,GAAG,CAACE,EAAE;IACV;IACA;IACAC,MAAM,EACHH,GAAG,YAAYI,yBAAmB,IAAIC,iBAAW,CAACC,KAAK,IACvDN,GAAG,YAAYO,mBAAa,IAAIF,iBAAW,CAACG,UAAW,IACxDH,iBAAW,CAACC,KAAK;IAAE;IACrBG,SAAS,GAAAR,cAAA,GAAED,GAAG,CAACS,SAAS,cAAAR,cAAA,uBAAbA,cAAA,CAAeS,WAAW,CAAC,CAAC;IACvCC,MAAM,EAAEC;EACV,CAAC;AAAA,CAAC;AAEK,MAAMC,mBAAmB,CAAiC;EAEvDC,UAAU,GAAG,KAAK,EAAC;EACnBC,WAAW,GAAG,KAAK,EAAC;;EAGXC,cAAc,GAAG,IAAIC,GAAG,CAAkB,CAAC;EAC3CC,eAAe,GAAG,IAAI;EAEhCC,WAAWA,CAAkBC,MAAoB,EAAEC,MAAmB,EAAEC,IAA8B,EAAE;IAAA,KAA3EF,MAAoB,GAApBA,MAAoB;IACtD,IAAI,CAACE,IAAI,GAAG;MACVC,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;MAC1BC,SAAS,EAAE,IAAI;MACfC,OAAO,EAAGC,CAAC,IAAK,IAAI,CAACN,MAAM,CAACO,KAAK,CAACC,MAAM,CAACF,CAAC,CAAC,CAAC;MAC5CG,WAAW,EAAE,MAAAA,CAAA,KAAY,EAAE;MAC3BC,MAAM,EAAE/B,aAAa;MACrB,IAAIuB,IAAI,IAAI,CAAC,CAAC;IAChB,CAAC;IAEDF,MAAM,CAACW,IAAI,CACT,2CAA2CC,IAAI,CAACC,SAAS,CAAC;MACxDV,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU;MAChCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE;IACvB,CAAC,CAAC,EACJ,CAAC;IAEDH,MAAM,CAACa,OAAO,CAAEC,KAAK,IAAK;MACxB,IAAI,CAACA,KAAK,GAAGA,KAAK;MAClB,IAAI,CAACf,MAAM,CAACW,IAAI,CAAC,sCAAsC,CAAC;MACxD,IAAI,IAAI,CAACT,IAAI,CAACE,SAAS,IAAI,IAAI,CAACF,IAAI,CAACC,UAAU,EAAE,IAAI,CAACa,KAAK,CAAC,CAAC;IAC/D,CAAC,EAAE,IAAI,CAAC;EACV;EAEOC,SAASA,CAACC,IAAsC,EAAE;IACvD,MAAMC,IAAI,GAAG;MACXzB,UAAU,EAAE,IAAI,CAACA,UAAU;MAC3BS,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU,IAAI,IAAI;MACxCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE,SAAS,IAAI,IAAI;MACtCgB,UAAU,EAAE,CAAC,CAAC,IAAI,CAACL;IACrB,CAAC;;IAED;IACA,IAAI,CAACb,IAAI,GAAG;MAAE,GAAG,IAAI,CAACA,IAAI;MAAE,GAAGgB;IAAK,CAAC;IAErC,IAAI,CAAClB,MAAM,CAACW,IAAI,CACd,yCAAyCC,IAAI,CAACC,SAAS,CAAC;MACtDV,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU;MAChCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE;IACvB,CAAC,CAAC,EACJ,CAAC;IAED,MAAMiB,aAAa,GAAG,IAAI,CAACnB,IAAI,CAACC,UAAU,IAAI,IAAI;IAClD,MAAMmB,YAAY,GAAG,IAAI,CAACpB,IAAI,CAACE,SAAS,IAAI,IAAI;;IAEhD;IACA,IAAIe,IAAI,CAACzB,UAAU,IAAIyB,IAAI,CAAChB,UAAU,KAAKkB,aAAa,EAAE;MACxD,IAAI,CAACE,IAAI,CAAC,CAAC;MACX,IAAIF,aAAa,EAAE,IAAI,CAACL,KAAK,CAAC,CAAC;MAC/B;IACF;;IAEA;IACA,IAAIG,IAAI,CAACzB,UAAU,IAAI2B,aAAa,KAAK,IAAI,EAAE;MAC7C,IAAI,CAACE,IAAI,CAAC,CAAC;MACX;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACJ,IAAI,CAACzB,UAAU,IAAI2B,aAAa,IAAIC,YAAY,EAAE;MACrD;MACA,IAAI,IAAI,CAACP,KAAK,EAAE,IAAI,CAACC,KAAK,CAAC,CAAC;MAC5B;MACA;IACF;;IAEA;IACA,IAAI,CAACG,IAAI,CAACzB,UAAU,IAAI,CAACyB,IAAI,CAACf,SAAS,IAAIkB,YAAY,IAAID,aAAa,EAAE;MACxE,IAAI,IAAI,CAACN,KAAK,EAAE,IAAI,CAACC,KAAK,CAAC,CAAC;MAC5B;MACA;IACF;;IAEA;EACF;EAEOQ,SAASA,CAAA,EAAG;IACjB,OAAO,IAAI,CAAC7B,WAAW;EACzB;EAEOqB,KAAKA,CAAA,EAAG;IACb,IAAI,IAAI,CAACtB,UAAU,IAAI,CAAC,IAAI,CAACQ,IAAI,CAACC,UAAU,EAAE;IAC9C,IAAI,CAACH,MAAM,CAACW,IAAI,CAAC,yCAAyC,CAAC;IAC3D,IAAI,CAACjB,UAAU,GAAG,IAAI;IACtB,IAAI,CAAC+B,KAAK,GAAGC,WAAW,CAAC,MAAM;MAC7B;MACA,KAAK,IAAI,CAACC,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC,EAAE,IAAI,CAACzB,IAAI,CAACC,UAAU,CAAC;EAC1B;EAEOoB,IAAIA,CAAA,EAAG;IACZ,IAAI,CAAC,IAAI,CAAC7B,UAAU,EAAE;IACtB,IAAI,CAACM,MAAM,CAACW,IAAI,CAAC,wCAAwC,CAAC;IAC1DiB,aAAa,CAAC,IAAI,CAACH,KAAM,CAAC;IAC1B,IAAI,CAACA,KAAK,GAAGjC,SAAS;IACtB,IAAI,CAACE,UAAU,GAAG,KAAK;EACzB;EAEA,MAAaiC,OAAOA,CAACE,MAAM,GAAG,QAAQ,EAAE;IAAA,IAAAC,WAAA;IACtC,IAAI,IAAI,CAACnC,WAAW,EAAE;MACpB,IAAI,CAACK,MAAM,CAAC+B,IAAI,CAAC,2DAA2D,CAAC;MAC7E;IACF;IACA,IAAI,CAAC,IAAI,CAAChB,KAAK,IAAI,GAAAe,WAAA,GAAC,IAAI,CAACf,KAAK,cAAAe,WAAA,eAAVA,WAAA,CAAYE,aAAa,GAAE;MAC7C,IAAI,CAAChC,MAAM,CAAC+B,IAAI,CAAC,2DAA2D,CAAC;MAC7E;IACF;IAEA,IAAI,CAACpC,WAAW,GAAG,IAAI;IACvB,IAAI,CAACK,MAAM,CAACW,IAAI,CAAC,qCAAqCkB,MAAM,GAAG,CAAC;IAEhE,IAAI;MACF,MAAMI,OAAO,GAAG,MAAM,IAAI,CAAC/B,IAAI,CAACO,WAAW,CAAC,CAAC;MAC7C,IAAI,CAACT,MAAM,CAACW,IAAI,CAAC,sBAAsBsB,OAAO,CAACC,MAAM,qBAAqB,CAAC;MAC3E,KAAK,MAAMtD,GAAG,IAAIqD,OAAO,EAAe;QACtC;QACA,IAAI;UACF,MAAM,IAAI,CAACE,iBAAiB,CAACvD,GAAG,CAAC;UACjC;QACF,CAAC,CAAC,OAAO0B,CAAC,EAAE;UAAA,IAAA8B,kBAAA,EAAAC,UAAA;UACV,IAAI,CAACrC,MAAM,CAACO,KAAK,CAAC,uBAAuB3B,GAAG,CAACE,EAAE,YAAY0B,MAAM,CAACF,CAAC,CAAC,EAAE,CAAC;UACvE,CAAA8B,kBAAA,IAAAC,UAAA,OAAI,CAACnC,IAAI,EAACG,OAAO,cAAA+B,kBAAA,eAAjBA,kBAAA,CAAAE,IAAA,CAAAD,UAAA,EAAoB/B,CAAC,CAAC;QACxB;MACF;MACA,IAAI,CAACN,MAAM,CAACW,IAAI,CAAC,2BAA2B,CAAC;IAC/C,CAAC,CAAC,OAAOL,CAAC,EAAE;MAAA,IAAAiC,mBAAA,EAAAC,WAAA;MACV,IAAI,CAACxC,MAAM,CAACO,KAAK,CAAC,8BAA8BC,MAAM,CAACF,CAAC,CAAC,EAAE,CAAC;MAC5D,CAAAiC,mBAAA,IAAAC,WAAA,OAAI,CAACtC,IAAI,EAACG,OAAO,cAAAkC,mBAAA,eAAjBA,mBAAA,CAAAD,IAAA,CAAAE,WAAA,EAAoBlC,CAAC,CAAC;IACxB,CAAC,SAAS;MACR,IAAI,CAACX,WAAW,GAAG,KAAK;IAC1B;EACF;EAEO8C,aAAaA,CAACtC,UAAyB,EAAE;IAC9C,IAAI,CAACc,SAAS,CAAC;MAAEd;IAAW,CAAC,CAAC;EAChC;EAEOuC,WAAWA,CAAC5D,EAAU,EAAuB;IAClD,OAAO,IAAI,CAACc,cAAc,CAAC+C,GAAG,CAAC7D,EAAE,CAAC;EACpC;;EAEA;EACA,MAAcqD,iBAAiBA,CAACvD,GAAY,EAAE;IAC5C,MAAM;MAAEgE,UAAU;MAAEC,cAAc;MAAEC,eAAe;MAAEC,MAAM;MAAEC,WAAW;MAAEC;IAAa,CAAC,GACtFC,4BAAkB,CAACC,QAAQ,CAAC,CAAC;IAE/B,MAAMrE,EAAE,GAAGF,GAAG,CAACE,EAAE;IAEjB,IAAI,CAAC,IAAI,CAACiC,KAAK,EAAE;MACf,IAAI,CAACf,MAAM,CAACO,KAAK,CAAC,iEAAiEzB,EAAE,EAAE,CAAC;MACxF;IACF;;IAEA;IACA,IAAI8D,UAAU,CAAC9D,EAAE,CAAC,EAAE;MAClB,IAAI,CAACkB,MAAM,CAACW,IAAI,CAAC,gCAAgC7B,EAAE,8BAA8B,CAAC;MAClF;IACF;;IAEA;IACAiE,MAAM,CAAC,IAAI,CAAC7C,IAAI,CAACQ,MAAM,CAAC9B,GAAG,CAAC,CAAC;;IAE7B;IACAiE,cAAc,CAAC/D,EAAE,CAAC;IAClB,IAAI,CAACkB,MAAM,CAACW,IAAI,CAAC,iCAAiC7B,EAAE,EAAE,CAAC;IAEvD,IAAI;MACF;MACA,MAAMsE,OAAO,GAAG,MAAM,IAAAC,8CAAsB,EAACzE,GAAG,EAAE,IAAI,CAACoB,MAAM,CAAC;MAC9D,MAAMsD,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;MAEtB,MAAME,IAAI,GAAG,IAAAC,sCAA4B,EAAC7E,GAAG,CAAC,IAAK,CAAC,CAA+B;MACnF4E,IAAI,CAACE,eAAe,GAAGN,OAAO,GAAGO,oBAAa,CAACC,KAAK,GAAGD,oBAAa,CAACE,OAAO;MAC5EL,IAAI,CAACM,aAAa,GAAGR,GAAG;MACxBE,IAAI,CAACO,YAAY,GAAG,CAACP,IAAI,CAACO,YAAY,IAAI,CAAC,IAAI,CAAC;MAChD,IAAAC,sCAA4B,EAACpF,GAAG,EAAE4E,IAAI,CAAC;MACvC,MAAM,IAAAS,iCAAuB,EAAC,IAAI,CAAClD,KAAK,CAACmD,OAAO,EAAEtF,GAAG,CAAC;MAEtD,IAAIwE,OAAO,EAAE;QACX,IAAI,CAACpD,MAAM,CAACW,IAAI,CAAC,uBAAuB7B,EAAE,EAAE,CAAC;MAC/C,CAAC,MAAM;QACL,IAAI,CAACkB,MAAM,CAACW,IAAI,CAAC,yBAAyB7B,EAAE,EAAE,CAAC;QAC/CkE,WAAW,CAAClE,EAAE,CAAC,EAAC;MAClB;MACAmE,YAAY,CAAC,IAAIM,IAAI,CAACD,GAAG,CAAC,CAAChE,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,OAAOiB,KAAK,EAAE;MAAA,IAAA4D,mBAAA,EAAAC,WAAA;MACd,IAAI,CAACpE,MAAM,CAACO,KAAK,CAAC,+BAA+BzB,EAAE,KAAK0B,MAAM,CAACD,KAAK,CAAC,EAAE,CAAC;MACxE,CAAA4D,mBAAA,IAAAC,WAAA,OAAI,CAAClE,IAAI,EAACG,OAAO,cAAA8D,mBAAA,eAAjBA,mBAAA,CAAA7B,IAAA,CAAA8B,WAAA,EAAoB7D,KAAK,CAAC;IAC5B,CAAC,SAAS;MACRuC,eAAe,CAAChE,EAAE,CAAC;IACrB;EACF;EAEA,MAAcuF,aAAaA,CAACzF,GAAY,EAAE;IACxC,MAAM;MACJgE,UAAU;MACVC,cAAc;MACdC,eAAe;MACfwB,YAAY;MACZC,0BAA0B;MAC1BC,aAAa;MACbC,gBAAgB;MAChB1B;IACF,CAAC,GAAGG,4BAAkB,CAACC,QAAQ,CAAC,CAAC;IAEjC,MAAMrE,EAAE,GAAGF,GAAG,CAACE,EAAE;IAEjB,IAAI,CAAC,IAAI,CAACiC,KAAK,EAAE;MACf,IAAI,CAACf,MAAM,CAACO,KAAK,CAAC,iEAAiEzB,EAAE,EAAE,CAAC;MACxF;IACF;;IAEA;IACA,IAAI8D,UAAU,CAAC9D,EAAE,CAAC,EAAE;MAClB,IAAI,CAACkB,MAAM,CAACW,IAAI,CAAC,gCAAgC7B,EAAE,8BAA8B,CAAC;MAClF;IACF;;IAEA;IACAiE,MAAM,CAAC,IAAI,CAAC7C,IAAI,CAACQ,MAAM,CAAC9B,GAAG,CAAC,CAAC;;IAE7B;IACAiE,cAAc,CAAC/D,EAAE,CAAC;IAClB,IAAI,CAACkB,MAAM,CAACW,IAAI,CAAC,iCAAiC7B,EAAE,EAAE,CAAC;IAEvD,IAAI;MACF;MACA,MAAMsE,OAAO,GAAG,MAAM,IAAAC,8CAAsB,EAACzE,GAAG,EAAE,IAAI,CAACoB,MAAM,CAAC;MAC9D,IAAIoD,OAAO,EAAE;QACX,IAAI,CAACpD,MAAM,CAACW,IAAI,CAAC,uBAAuB7B,EAAE,EAAE,CAAC;QAC7C;QACAwF,YAAY,CAACxF,EAAE,CAAC;QAChB;QACA;QACA;MACF;;MAEA;;MAEA,MAAM,IAAA4F,oCAA0B,EAAC;QAC/BC,UAAU,EAAE/F,GAAG;QACfgG,MAAM,EAAEjB,oBAAa,CAACE,OAAO;QAC7BgB,YAAY,EAAE,IAAI,CAAC9D,KAAK,CAACmD;MAC3B,CAAC,CAAC;;MAEF;MACA,IAAI,CAAClE,MAAM,CAACW,IAAI,CAAC,+CAA+C7B,EAAE,EAAE,CAAC;MACrE,MAAMgG,KAAK,GAAG,MAAM,IAAAC,gCAAkB,EAAC;QAAE/E,MAAM,EAAE,IAAI,CAACA,MAAM;QAAEgF,IAAI,EAAEpG,GAAG;QAAEiG,YAAY,EAAE,IAAI,CAAC9D,KAAK,CAACmD;MAAQ,CAAC,CAAC;MAC5G,IAAI,CAACY,KAAK,EAAE;QACV,MAAMG,GAAG,GAAG,4BAA4B;QACxC,IAAI,CAACjF,MAAM,CAAC+B,IAAI,CAAC,gBAAgBkD,GAAG,QAAQnG,EAAE,EAAE,CAAC;QACjD0F,aAAa,CAAC1F,EAAE,EAAEmG,GAAG,CAAC;QACtB;MACF;;MAEA;MACA,MAAMC,SAAS,GAAG,MAAM,IAAAC,4CAAgC,EAAC;QACvDpE,KAAK,EAAE,IAAI,CAACA,KAAK;QACjBf,MAAM,EAAE,IAAI,CAACA,MAAM;QACnBoF,MAAM,EAAExG,GAAG;QACXyG,aAAa,EAAEP;MACjB,CAAC,CAAC;MAEF,IAAII,SAAS,EAAE;QACb,IAAI,CAAClF,MAAM,CAACW,IAAI,CAAC,iCAAiCuE,SAAS,CAACpG,EAAE,EAAE,CAAC;QACjE;QACAyF,0BAA0B,CAACzF,EAAE,EAAE,IAAI,CAACoB,IAAI,CAACQ,MAAM,CAACwE,SAAS,CAAC,CAAC;QAC3DT,gBAAgB,CAAC3F,EAAE,CAAC;QACpB,IAAI,CAACc,cAAc,CAAC0F,GAAG,CAACJ,SAAS,CAACpG,EAAE,EAAEoG,SAAS,CAAC;MAClD,CAAC,MAAM;QACL,MAAMD,GAAG,GAAG,6BAA6B;QACzC,IAAI,CAACjF,MAAM,CAAC+B,IAAI,CAAC,gBAAgBkD,GAAG,QAAQnG,EAAE,EAAE,CAAC;QACjD0F,aAAa,CAAC1F,EAAE,EAAEmG,GAAG,CAAC;QACtB,MAAM,IAAAP,oCAA0B,EAAC;UAC/BC,UAAU,EAAE/F,GAAG;UACfgG,MAAM,EAAEjB,oBAAa,CAACE,OAAO;UAC7BgB,YAAY,EAAE,IAAI,CAAC9D,KAAK,CAACmD;QAC3B,CAAC,CAAC;MACJ;IACF,CAAC,CAAC,OAAO5D,CAAC,EAAE;MACV,MAAMiF,GAAG,GAAG/E,MAAM,CAACF,CAAC,CAAC;MACrB,IAAI,CAACN,MAAM,CAACO,KAAK,CAAC,yBAAyBzB,EAAE,KAAKyG,GAAG,EAAE,CAAC;MACxDf,aAAa,CAAC1F,EAAE,EAAEyG,GAAG,CAAC;IACxB,CAAC,SAAS;MACR;MACAzC,eAAe,CAAChE,EAAE,CAAC;IACrB;EACF;AACF;AAAC0G,OAAA,CAAA/F,mBAAA,GAAAA,mBAAA","ignoreList":[]}
+{"version":3,"names":["_types","require","_registry","_verifyCredentialStatus","_metadata","_credentialRecord","_operations","RefreshOrchestrator","intervalOn","runningOnce","startupRunTriggered","recentlyIssued","Map","constructor","logger","bridge","opts","intervalMs","autoStart","runOnStart","flowType","OpenIDCredentialRefreshFlowType","FullReplacement","onError","e","error","String","listRecords","toLite","toOpenIDCredentialLite","info","JSON","stringify","onReady","agent","runOnce","start","onChange","undefined","stop","configure","next","prev","agentReady","nowIntervalMs","nowAutoStart","isRunning","timer","setInterval","clearInterval","reason","_this$agent","warn","isInitialized","records","length","rec","refreshRecord","checkRecordStatus","_this$opts$onError","_this$opts","id","call","_this$opts$onError2","_this$opts2","setIntervalMs","resolveFull","get","shouldSkip","markRefreshing","clearRefreshing","clearExpired","upsert","markInvalid","setLastSweep","credentialRegistry","getState","status","verifyCredentialStatus","now","Date","meta","getRefreshCredentialMetadata","lastCheckResult","lastCheckedAt","attemptCount","setRefreshCredentialMetadata","persistCredentialRecord","context","RefreshStatus","Valid","Invalid","toISOString","_this$opts$onError3","_this$opts3","blockAsSucceeded","Error","markOpenIDCredentialStatus","credential","agentContext","newRecord","refreshAndQueueReplacement","record","msg","set","_this$opts$onError4","_this$opts4","err","exports"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/refreshOrchestrator.ts"],"mappings":";;;;;;AAGA,IAAAA,MAAA,GAAAC,OAAA;AAQA,IAAAC,SAAA,GAAAD,OAAA;AACA,IAAAE,uBAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AAMA,IAAAI,iBAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AApBA;;AAsBO,MAAMM,mBAAmB,CAAiC;EAEvDC,UAAU,GAAG,KAAK,EAAC;EACnBC,WAAW,GAAG,KAAK,EAAC;EACpBC,mBAAmB,GAAG,KAAK;EAGlBC,cAAc,GAAG,IAAIC,GAAG,CAAiC,CAAC;EAEpEC,WAAWA,CACCC,MAAoB,EACrCC,MAAmB,EACnBC,IAA8B,EAC9B;IAAA,KAHiBF,MAAoB,GAApBA,MAAoB;IAIrC,IAAI,CAACE,IAAI,GAAG;MACVC,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;MAC1BC,SAAS,EAAE,IAAI;MACfC,UAAU,EAAE,KAAK;MACjBC,QAAQ,EAAEC,sCAA+B,CAACC,eAAe;MACzDC,OAAO,EAAGC,CAAC,IAAK,IAAI,CAACV,MAAM,CAACW,KAAK,CAACC,MAAM,CAACF,CAAC,CAAC,CAAC;MAC5CG,WAAW,EAAE,MAAAA,CAAA,KAAY,EAAE;MAC3BC,MAAM,EAAEC,wCAAsB;MAC9B,IAAIb,IAAI,IAAI,CAAC,CAAC;IAChB,CAAC;IAEDF,MAAM,CAACgB,IAAI,CACT,2CAA2CC,IAAI,CAACC,SAAS,CAAC;MACxDf,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU;MAChCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE,SAAS;MAC9BC,UAAU,EAAE,IAAI,CAACH,IAAI,CAACG,UAAU;MAChCC,QAAQ,EAAE,IAAI,CAACJ,IAAI,CAACI;IACtB,CAAC,CAAC,EACJ,CAAC;IAEDL,MAAM,CAACkB,OAAO,CAAEC,KAAK,IAAK;MACxB,IAAI,CAACA,KAAK,GAAGA,KAAK;MAClB,IAAI,CAACpB,MAAM,CAACgB,IAAI,CAAC,sCAAsC,CAAC;MACxD,IAAI,IAAI,CAACd,IAAI,CAACG,UAAU,IAAI,CAAC,IAAI,CAACT,mBAAmB,EAAE;QACrD,IAAI,CAACA,mBAAmB,GAAG,IAAI;QAC/B,KAAK,IAAI,CAACyB,OAAO,CAAC,SAAS,CAAC;MAC9B;MACA,IAAI,IAAI,CAACnB,IAAI,CAACE,SAAS,IAAI,IAAI,CAACF,IAAI,CAACC,UAAU,EAAE,IAAI,CAACmB,KAAK,CAAC,CAAC;IAC/D,CAAC,EAAE,IAAI,CAAC;IAERrB,MAAM,CAACsB,QAAQ,CAAEH,KAAK,IAAK;MACzB,IAAIA,KAAK,EAAE;MAEX,IAAI,CAACA,KAAK,GAAGI,SAAS;MACtB,IAAI,CAACxB,MAAM,CAACgB,IAAI,CAAC,wCAAwC,CAAC;MAC1D,IAAI,CAACS,IAAI,CAAC,CAAC;IACb,CAAC,CAAC;EACJ;EAEOC,SAASA,CAACC,IAAsC,EAAE;IACvD,MAAMC,IAAI,GAAG;MACXlC,UAAU,EAAE,IAAI,CAACA,UAAU;MAC3BS,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU,IAAI,IAAI;MACxCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE,SAAS,IAAI,IAAI;MACtCyB,UAAU,EAAE,CAAC,CAAC,IAAI,CAACT;IACrB,CAAC;;IAED;IACA,IAAI,CAAClB,IAAI,GAAG;MAAE,GAAG,IAAI,CAACA,IAAI;MAAE,GAAGyB;IAAK,CAAC;IAErC,IAAI,CAAC3B,MAAM,CAACgB,IAAI,CACd,yCAAyCC,IAAI,CAACC,SAAS,CAAC;MACtDf,UAAU,EAAE,IAAI,CAACD,IAAI,CAACC,UAAU;MAChCC,SAAS,EAAE,IAAI,CAACF,IAAI,CAACE,SAAS;MAC9BC,UAAU,EAAE,IAAI,CAACH,IAAI,CAACG,UAAU;MAChCC,QAAQ,EAAE,IAAI,CAACJ,IAAI,CAACI;IACtB,CAAC,CAAC,EACJ,CAAC;IAED,MAAMwB,aAAa,GAAG,IAAI,CAAC5B,IAAI,CAACC,UAAU,IAAI,IAAI;IAClD,MAAM4B,YAAY,GAAG,IAAI,CAAC7B,IAAI,CAACE,SAAS,IAAI,IAAI;;IAEhD;IACA,IAAIwB,IAAI,CAAClC,UAAU,IAAIkC,IAAI,CAACzB,UAAU,KAAK2B,aAAa,EAAE;MACxD,IAAI,CAACL,IAAI,CAAC,CAAC;MACX,IAAIK,aAAa,EAAE,IAAI,CAACR,KAAK,CAAC,CAAC;MAC/B;IACF;;IAEA;IACA,IAAIM,IAAI,CAAClC,UAAU,IAAIoC,aAAa,KAAK,IAAI,EAAE;MAC7C,IAAI,CAACL,IAAI,CAAC,CAAC;MACX;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACG,IAAI,CAAClC,UAAU,IAAIoC,aAAa,IAAIC,YAAY,EAAE;MACrD;MACA,IAAI,IAAI,CAACX,KAAK,EAAE,IAAI,CAACE,KAAK,CAAC,CAAC;MAC5B;MACA;IACF;;IAEA;IACA,IAAI,CAACM,IAAI,CAAClC,UAAU,IAAI,CAACkC,IAAI,CAACxB,SAAS,IAAI2B,YAAY,IAAID,aAAa,EAAE;MACxE,IAAI,IAAI,CAACV,KAAK,EAAE,IAAI,CAACE,KAAK,CAAC,CAAC;MAC5B;MACA;IACF;;IAEA;EACF;EAEOU,SAASA,CAAA,EAAG;IACjB,OAAO,IAAI,CAACrC,WAAW;EACzB;EAEO2B,KAAKA,CAAA,EAAG;IACb,IAAI,IAAI,CAAC5B,UAAU,IAAI,CAAC,IAAI,CAACQ,IAAI,CAACC,UAAU,EAAE;IAC9C,IAAI,CAACH,MAAM,CAACgB,IAAI,CAAC,yCAAyC,CAAC;IAC3D,IAAI,CAACtB,UAAU,GAAG,IAAI;IACtB,IAAI,CAACuC,KAAK,GAAGC,WAAW,CAAC,MAAM;MAC7B;MACA,KAAK,IAAI,CAACb,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC,EAAE,IAAI,CAACnB,IAAI,CAACC,UAAU,CAAC;EAC1B;EAEOsB,IAAIA,CAAA,EAAG;IACZ,IAAI,CAAC,IAAI,CAAC/B,UAAU,EAAE;IACtB,IAAI,CAACM,MAAM,CAACgB,IAAI,CAAC,wCAAwC,CAAC;IAC1DmB,aAAa,CAAC,IAAI,CAACF,KAAM,CAAC;IAC1B,IAAI,CAACA,KAAK,GAAGT,SAAS;IACtB,IAAI,CAAC9B,UAAU,GAAG,KAAK;EACzB;EAEA,MAAa2B,OAAOA,CAACe,MAAM,GAAG,QAAQ,EAAE;IAAA,IAAAC,WAAA;IACtC,IAAI,IAAI,CAAC1C,WAAW,EAAE;MACpB,IAAI,CAACK,MAAM,CAACsC,IAAI,CAAC,2DAA2D,CAAC;MAC7E;IACF;IACA,IAAI,CAAC,IAAI,CAAClB,KAAK,IAAI,GAAAiB,WAAA,GAAC,IAAI,CAACjB,KAAK,cAAAiB,WAAA,eAAVA,WAAA,CAAYE,aAAa,GAAE;MAC7C,IAAI,CAACvC,MAAM,CAACsC,IAAI,CAAC,2DAA2D,CAAC;MAC7E;IACF;IAEA,IAAI,CAAC3C,WAAW,GAAG,IAAI;IACvB,IAAI,CAACK,MAAM,CAACgB,IAAI,CAAC,qCAAqCoB,MAAM,GAAG,CAAC;IAEhE,IAAI;MACF,MAAMI,OAAO,GAAG,MAAM,IAAI,CAACtC,IAAI,CAACW,WAAW,CAAC,CAAC;MAC7C,IAAI,CAACb,MAAM,CAACgB,IAAI,CAAC,sBAAsBwB,OAAO,CAACC,MAAM,qBAAqB,CAAC;MAC3E,KAAK,MAAMC,GAAG,IAAIF,OAAO,EAA8B;QACrD;QACA,IAAI;UACF,IAAI,IAAI,CAACtC,IAAI,CAACI,QAAQ,KAAKC,sCAA+B,CAACC,eAAe,EAAE;YAC1E,MAAM,IAAI,CAACmC,aAAa,CAACD,GAAG,CAAC;UAC/B,CAAC,MAAM;YACL,MAAM,IAAI,CAACE,iBAAiB,CAACF,GAAG,CAAC;UACnC;QACF,CAAC,CAAC,OAAOhC,CAAC,EAAE;UAAA,IAAAmC,kBAAA,EAAAC,UAAA;UACV,IAAI,CAAC9C,MAAM,CAACW,KAAK,CAAC,uBAAuB+B,GAAG,CAACK,EAAE,YAAYnC,MAAM,CAACF,CAAC,CAAC,EAAE,CAAC;UACvE,CAAAmC,kBAAA,IAAAC,UAAA,OAAI,CAAC5C,IAAI,EAACO,OAAO,cAAAoC,kBAAA,eAAjBA,kBAAA,CAAAG,IAAA,CAAAF,UAAA,EAAoBpC,CAAC,CAAC;QACxB;MACF;MACA,IAAI,CAACV,MAAM,CAACgB,IAAI,CAAC,2BAA2B,CAAC;IAC/C,CAAC,CAAC,OAAON,CAAC,EAAE;MAAA,IAAAuC,mBAAA,EAAAC,WAAA;MACV,IAAI,CAAClD,MAAM,CAACW,KAAK,CAAC,8BAA8BC,MAAM,CAACF,CAAC,CAAC,EAAE,CAAC;MAC5D,CAAAuC,mBAAA,IAAAC,WAAA,OAAI,CAAChD,IAAI,EAACO,OAAO,cAAAwC,mBAAA,eAAjBA,mBAAA,CAAAD,IAAA,CAAAE,WAAA,EAAoBxC,CAAC,CAAC;IACxB,CAAC,SAAS;MACR,IAAI,CAACf,WAAW,GAAG,KAAK;IAC1B;EACF;EAEOwD,aAAaA,CAAChD,UAAyB,EAAE;IAC9C,IAAI,CAACuB,SAAS,CAAC;MAAEvB;IAAW,CAAC,CAAC;EAChC;EAEOiD,WAAWA,CAACL,EAAU,EAAsC;IACjE,OAAO,IAAI,CAAClD,cAAc,CAACwD,GAAG,CAACN,EAAE,CAAC;EACpC;;EAEA;EACA,MAAcH,iBAAiBA,CAACF,GAA2B,EAAE;IAC3D,MAAM;MAAEY,UAAU;MAAEC,cAAc;MAAEC,eAAe;MAAEC,YAAY;MAAEC,MAAM;MAAEC,WAAW;MAAEC;IAAa,CAAC,GACpGC,4BAAkB,CAACC,QAAQ,CAAC,CAAC;IAE/B,MAAMf,EAAE,GAAGL,GAAG,CAACK,EAAE;IAEjB,IAAI,CAAC,IAAI,CAAC3B,KAAK,EAAE;MACf,IAAI,CAACpB,MAAM,CAACW,KAAK,CAAC,iEAAiEoC,EAAE,EAAE,CAAC;MACxF;IACF;;IAEA;IACA,IAAIO,UAAU,CAACP,EAAE,CAAC,EAAE;MAClB,IAAI,CAAC/C,MAAM,CAACgB,IAAI,CAAC,gCAAgC+B,EAAE,8BAA8B,CAAC;MAClF;IACF;;IAEA;IACAW,MAAM,CAAC,IAAI,CAACxD,IAAI,CAACY,MAAM,CAAC4B,GAAG,CAAC,CAAC;;IAE7B;IACAa,cAAc,CAACR,EAAE,CAAC;IAClB,IAAI,CAAC/C,MAAM,CAACgB,IAAI,CAAC,iCAAiC+B,EAAE,EAAE,CAAC;IAEvD,IAAI;MACF;MACA,MAAMgB,MAAM,GAAG,MAAM,IAAAC,8CAAsB,EAACtB,GAAG,EAAE,IAAI,CAAC1C,MAAM,CAAC;MAC7D,MAAMiE,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;MAEtB,MAAME,IAAI,GAAG,IAAAC,sCAA4B,EAAC1B,GAAG,CAAC,IAAK,CAAC,CAA+B;MACnFyB,IAAI,CAACE,eAAe,GAAGN,MAAM;MAC7BI,IAAI,CAACG,aAAa,GAAGL,GAAG;MACxBE,IAAI,CAACI,YAAY,GAAG,CAACJ,IAAI,CAACI,YAAY,IAAI,CAAC,IAAI,CAAC;MAChD,IAAAC,sCAA4B,EAAC9B,GAAG,EAAEyB,IAAI,CAAC;MACvC,MAAM,IAAAM,iCAAuB,EAAC,IAAI,CAACrD,KAAK,CAACsD,OAAO,EAAEhC,GAAG,CAAC;MAEtD,IAAIqB,MAAM,KAAKY,oBAAa,CAACC,KAAK,EAAE;QAClC,IAAI,CAAC5E,MAAM,CAACgB,IAAI,CAAC,uBAAuB+B,EAAE,EAAE,CAAC;QAC7CU,YAAY,CAACV,EAAE,CAAC;MAClB,CAAC,MAAM,IAAIgB,MAAM,KAAKY,oBAAa,CAACE,OAAO,EAAE;QAC3C,IAAI,CAAC7E,MAAM,CAACgB,IAAI,CAAC,yBAAyB+B,EAAE,EAAE,CAAC;QAC/CY,WAAW,CAACZ,EAAE,CAAC;MACjB,CAAC,MAAM;QACL,IAAI,CAAC/C,MAAM,CAACsC,IAAI,CAAC,qCAAqCS,EAAE,EAAE,CAAC;MAC7D;MACAa,YAAY,CAAC,IAAIM,IAAI,CAACD,GAAG,CAAC,CAACa,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,OAAOnE,KAAK,EAAE;MAAA,IAAAoE,mBAAA,EAAAC,WAAA;MACd,IAAI,CAAChF,MAAM,CAACW,KAAK,CAAC,+BAA+BoC,EAAE,KAAKnC,MAAM,CAACD,KAAK,CAAC,EAAE,CAAC;MACxE,CAAAoE,mBAAA,IAAAC,WAAA,OAAI,CAAC9E,IAAI,EAACO,OAAO,cAAAsE,mBAAA,eAAjBA,mBAAA,CAAA/B,IAAA,CAAAgC,WAAA,EAAoBrE,KAAK,CAAC;IAC5B,CAAC,SAAS;MACR6C,eAAe,CAACT,EAAE,CAAC;IACrB;EACF;EAEA,MAAcJ,aAAaA,CAACD,GAA2B,EAAE;IACvD,MAAM;MAAEY,UAAU;MAAEC,cAAc;MAAEC,eAAe;MAAEC,YAAY;MAAEwB,gBAAgB;MAAEtB,WAAW;MAAED;IAAO,CAAC,GACxGG,4BAAkB,CAACC,QAAQ,CAAC,CAAC;IAE/B,MAAMf,EAAE,GAAGL,GAAG,CAACK,EAAE;IAEjB,IAAI,CAAC,IAAI,CAAC3B,KAAK,EAAE;MACf,IAAI,CAACpB,MAAM,CAACW,KAAK,CAAC,iEAAiEoC,EAAE,EAAE,CAAC;MACxF;IACF;;IAEA;IACA,IAAIO,UAAU,CAACP,EAAE,CAAC,EAAE;MAClB,IAAI,CAAC/C,MAAM,CAACgB,IAAI,CAAC,gCAAgC+B,EAAE,8BAA8B,CAAC;MAClF;IACF;;IAEA;IACAW,MAAM,CAAC,IAAI,CAACxD,IAAI,CAACY,MAAM,CAAC4B,GAAG,CAAC,CAAC;;IAE7B;IACAa,cAAc,CAACR,EAAE,CAAC;IAClB,IAAI,CAAC/C,MAAM,CAACgB,IAAI,CAAC,iCAAiC+B,EAAE,EAAE,CAAC;IAEvD,IAAI;MACF;MACA,MAAMgB,MAAM,GAAG,MAAM,IAAAC,8CAAsB,EAACtB,GAAG,EAAE,IAAI,CAAC1C,MAAM,CAAC;MAC7D,IAAI+D,MAAM,KAAKY,oBAAa,CAACC,KAAK,EAAE;QAClC,IAAI,CAAC5E,MAAM,CAACgB,IAAI,CAAC,uBAAuB+B,EAAE,EAAE,CAAC;QAC7C;QACAU,YAAY,CAACV,EAAE,CAAC;QAChB;QACA;QACA;MACF;MAEA,IAAIgB,MAAM,KAAKY,oBAAa,CAACO,KAAK,EAAE;QAClC,IAAI,CAAClF,MAAM,CAACsC,IAAI,CAAC,0DAA0DS,EAAE,EAAE,CAAC;QAChF,MAAM,IAAAoC,oCAA0B,EAAC;UAC/BC,UAAU,EAAE1C,GAAG;UACfqB,MAAM,EAAEY,oBAAa,CAACO,KAAK;UAC3BG,YAAY,EAAE,IAAI,CAACjE,KAAK,CAACsD;QAC3B,CAAC,CAAC;QACF;MACF;;MAEA;;MAEA,MAAM,IAAAS,oCAA0B,EAAC;QAC/BC,UAAU,EAAE1C,GAAG;QACfqB,MAAM,EAAEY,oBAAa,CAACE,OAAO;QAC7BQ,YAAY,EAAE,IAAI,CAACjE,KAAK,CAACsD;MAC3B,CAAC,CAAC;MAEF,IAAI,CAAC1E,MAAM,CAACgB,IAAI,CAAC,+CAA+C+B,EAAE,EAAE,CAAC;MACrE,MAAMuC,SAAS,GAAG,MAAM,IAAAC,sCAA0B,EAAC;QACjDnE,KAAK,EAAE,IAAI,CAACA,KAAK;QACjBpB,MAAM,EAAE,IAAI,CAACA,MAAM;QACnBwF,MAAM,EAAE9C,GAAG;QACX5B,MAAM,EAAE,IAAI,CAACZ,IAAI,CAACY;MACpB,CAAC,CAAC;MAEF,IAAI,CAACwE,SAAS,EAAE;QACd,MAAMG,GAAG,GAAG,gDAAgD;QAC5D,IAAI,CAACzF,MAAM,CAACsC,IAAI,CAAC,gBAAgBmD,GAAG,QAAQ1C,EAAE,EAAE,CAAC;QACjDY,WAAW,CAACZ,EAAE,CAAC;QACf;MACF;MAEA,IAAI,CAAC/C,MAAM,CAACgB,IAAI,CAAC,iCAAiCsE,SAAS,CAACvC,EAAE,EAAE,CAAC;MACjEkC,gBAAgB,CAAClC,EAAE,CAAC;MACpB,IAAI,CAAClD,cAAc,CAAC6F,GAAG,CAACJ,SAAS,CAACvC,EAAE,EAAEuC,SAAS,CAAC;IAClD,CAAC,CAAC,OAAO5E,CAAC,EAAE;MAAA,IAAAiF,mBAAA,EAAAC,WAAA;MACV,MAAMC,GAAG,GAAGjF,MAAM,CAACF,CAAC,CAAC;MACrB,IAAI,CAACV,MAAM,CAACW,KAAK,CAAC,yBAAyBoC,EAAE,KAAK8C,GAAG,EAAE,CAAC;MACxD,CAAAF,mBAAA,IAAAC,WAAA,OAAI,CAAC1F,IAAI,EAACO,OAAO,cAAAkF,mBAAA,eAAjBA,mBAAA,CAAA3C,IAAA,CAAA4C,WAAA,EAAoBlF,CAAC,CAAC;MACtBiD,WAAW,CAACZ,EAAE,CAAC;IACjB,CAAC,SAAS;MACR;MACAS,eAAe,CAACT,EAAE,CAAC;IACrB;EACF;AACF;AAAC+C,OAAA,CAAArG,mBAAA,GAAAA,mBAAA","ignoreList":[]}

package/lib/commonjs/modules/openid/refresh/refreshToken.js

@@ -20,20 +20,16 @@ async function refreshAccessToken({
   logger.info(`[refreshAccessToken] Found refresh metadata for credential: ${cred.id}`);
   const {
     refreshToken,
-    authServer
+    tokenEndpoint
   } = refreshMetaData;
   try {
-    if (!authServer) {
-      throw new Error('No authorization server found in the credential offer metadata');
+    if (!tokenEndpoint) {
+      throw new Error('No token endpoint found in the credential offer metadata');
     }
-    logger.info(`[refreshAccessToken] Found auth server for credential: ${cred.id}: ${authServer}`);
+    logger.info(`[refreshAccessToken] Found token endpoint for credential: ${cred.id}: ${tokenEndpoint}`);
 
     // Build token endpoint:
-    // React-Native-safe URL build
-    const tokenUrl = authServer.endsWith('/') ? authServer.slice(0, -1) : authServer;
-    // const tokenUrl = new URL('token', authServer)
-    // tokenUrl.searchParams.set('force', 'false')
-
+    const tokenUrl = tokenEndpoint.endsWith('/') ? tokenEndpoint.slice(0, -1) : tokenEndpoint;
     logger.info(`[refreshAccessToken] Refreshing access token at URL: ${tokenUrl} for credential: ${cred.id}`);
     const body = new URLSearchParams({
       grant_type: 'refresh_token',
@@ -51,20 +47,24 @@ async function refreshAccessToken({
       },
       body: body.toString()
     });
-    logger.info(`[refreshAccessToken] Response status: ${JSON.stringify(res)}`);
+    logger.info(`[refreshAccessToken] Token endpoint response status: ${res.status}`);
     if (!res.ok) {
       const errText = await res.text();
       throw new Error(`Refresh failed ${res.status}: ${errText}`);
     }
     const data = await res.json();
-    logger.info(`[refreshAccessToken] New access token acquired: ${JSON.stringify(data)}`);
+    logger.info(`[refreshAccessToken] Token refresh succeeded: ${JSON.stringify({
+      token_type: data.token_type,
+      expires_in: data.expires_in,
+      has_access_token: Boolean(data.access_token),
+      has_refresh_token: Boolean(data.refresh_token)
+    })}`);
 
     // If refresh token rotated, persist it
     if (data.refresh_token && data.refresh_token !== refreshToken) {
       logger.info(`[refreshAccessToken] Refresh token rotated; saving new one`);
       (0, _metadata.setRefreshCredentialMetadata)(cred, {
         ...refreshMetaData,
-        authServer: authServer,
         refreshToken: data.refresh_token
       });
       await (0, _metadata.persistCredentialRecord)(agentContext, cred);

package/lib/commonjs/modules/openid/refresh/refreshToken.js.map

@@ -1 +1 @@
-{"version":3,"names":["_metadata","require","refreshAccessToken","logger","cred","agentContext","info","id","refreshMetaData","getRefreshCredentialMetadata","error","refreshToken","authServer","Error","tokenUrl","endsWith","slice","body","URLSearchParams","grant_type","refresh_token","pre_authorized_code","pre_authorized_code_alt","user_pin","res","fetch","toString","method","headers","accept","JSON","stringify","ok","errText","text","status","data","json","setRefreshCredentialMetadata","persistCredentialRecord"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/refreshToken.ts"],"mappings":";;;;;;AAGA,IAAAA,SAAA,GAAAC,OAAA;AAEO,eAAeC,kBAAkBA,CAAC;EACvCC,MAAM;EACNC,IAAI;EACJC;AAKF,CAAC,EAAwC;EACvCF,MAAM,CAACG,IAAI,CAAC,4DAA4DF,IAAI,CAACG,EAAE,EAAE,CAAC;EAClF;EACA,MAAMC,eAAe,GAAG,IAAAC,sCAA4B,EAACL,IAAI,CAAC;EAC1D,IAAI,CAACI,eAAe,EAAE;IACpBL,MAAM,CAACO,KAAK,CAAC,kEAAkEN,IAAI,CAACG,EAAE,EAAE,CAAC;IACzF;EACF;EAEAJ,MAAM,CAACG,IAAI,CAAC,+DAA+DF,IAAI,CAACG,EAAE,EAAE,CAAC;EACrF,MAAM;IAAEI,YAAY;IAAEC;EAAW,CAAC,GAAGJ,eAAe;EAEpD,IAAI;IACF,IAAI,CAACI,UAAU,EAAE;MACf,MAAM,IAAIC,KAAK,CAAC,gEAAgE,CAAC;IACnF;IAEAV,MAAM,CAACG,IAAI,CAAC,0DAA0DF,IAAI,CAACG,EAAE,KAAKK,UAAU,EAAE,CAAC;;IAE/F;IACA;IACA,MAAME,QAAQ,GAAIF,UAAU,CAACG,QAAQ,CAAC,GAAG,CAAC,GAAGH,UAAU,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAGJ,UAAW;IAClF;IACA;;IAEAT,MAAM,CAACG,IAAI,CAAC,wDAAwDQ,QAAQ,oBAAoBV,IAAI,CAACG,EAAE,EAAE,CAAC;IAE1G,MAAMU,IAAI,GAAG,IAAIC,eAAe,CAAC;MAC/BC,UAAU,EAAE,eAAe;MAC3BC,aAAa,EAAET,YAAY;MAC3B;MACAU,mBAAmB,EAAE,EAAE;MACvBC,uBAAuB,EAAE,EAAE;MAC3BC,QAAQ,EAAE;IACZ,CAAC,CAAC;IAEF,MAAMC,GAAG,GAAG,MAAMC,KAAK,CAACX,QAAQ,CAACY,QAAQ,CAAC,CAAC,EAAE;MAC3CC,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACPC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE;MAClB,CAAC;MACDZ,IAAI,EAAEA,IAAI,CAACS,QAAQ,CAAC;IACtB,CAAC,CAAC;IAEFvB,MAAM,CAACG,IAAI,CAAC,yCAAyCwB,IAAI,CAACC,SAAS,CAACP,GAAG,CAAC,EAAE,CAAC;IAE3E,IAAI,CAACA,GAAG,CAACQ,EAAE,EAAE;MACX,MAAMC,OAAO,GAAG,MAAMT,GAAG,CAACU,IAAI,CAAC,CAAC;MAChC,MAAM,IAAIrB,KAAK,CAAC,kBAAkBW,GAAG,CAACW,MAAM,KAAKF,OAAO,EAAE,CAAC;IAC7D;IAEA,MAAMG,IAAqB,GAAG,MAAMZ,GAAG,CAACa,IAAI,CAAC,CAAC;IAC9ClC,MAAM,CAACG,IAAI,CAAC,mDAAmDwB,IAAI,CAACC,SAAS,CAACK,IAAI,CAAC,EAAE,CAAC;;IAEtF;IACA,IAAIA,IAAI,CAAChB,aAAa,IAAIgB,IAAI,CAAChB,aAAa,KAAKT,YAAY,EAAE;MAC7DR,MAAM,CAACG,IAAI,CAAC,4DAA4D,CAAC;MACzE,IAAAgC,sCAA4B,EAAClC,IAAI,EAAE;QACjC,GAAGI,eAAe;QAClBI,UAAU,EAAEA,UAAU;QACtBD,YAAY,EAAEyB,IAAI,CAAChB;MACrB,CAAC,CAAC;MAEF,MAAM,IAAAmB,iCAAuB,EAAClC,YAAY,EAAED,IAAI,CAAC;IACnD;IAEA,OAAOgC,IAAI;EACb,CAAC,CAAC,OAAO1B,KAAK,EAAE;IACdP,MAAM,CAACO,KAAK,CAAC,iDAAiDA,KAAK,EAAE,CAAC;IACtE,MAAMA,KAAK;EACb;AACF","ignoreList":[]}
+{"version":3,"names":["_metadata","require","refreshAccessToken","logger","cred","agentContext","info","id","refreshMetaData","getRefreshCredentialMetadata","error","refreshToken","tokenEndpoint","Error","tokenUrl","endsWith","slice","body","URLSearchParams","grant_type","refresh_token","pre_authorized_code","pre_authorized_code_alt","user_pin","res","fetch","toString","method","headers","accept","status","ok","errText","text","data","json","JSON","stringify","token_type","expires_in","has_access_token","Boolean","access_token","has_refresh_token","setRefreshCredentialMetadata","persistCredentialRecord"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/refreshToken.ts"],"mappings":";;;;;;AAGA,IAAAA,SAAA,GAAAC,OAAA;AAGO,eAAeC,kBAAkBA,CAAC;EACvCC,MAAM;EACNC,IAAI;EACJC;AAKF,CAAC,EAAwC;EACvCF,MAAM,CAACG,IAAI,CAAC,4DAA4DF,IAAI,CAACG,EAAE,EAAE,CAAC;EAClF;EACA,MAAMC,eAAe,GAAG,IAAAC,sCAA4B,EAACL,IAAI,CAAC;EAC1D,IAAI,CAACI,eAAe,EAAE;IACpBL,MAAM,CAACO,KAAK,CAAC,kEAAkEN,IAAI,CAACG,EAAE,EAAE,CAAC;IACzF;EACF;EAEAJ,MAAM,CAACG,IAAI,CAAC,+DAA+DF,IAAI,CAACG,EAAE,EAAE,CAAC;EACrF,MAAM;IAAEI,YAAY;IAAEC;EAAc,CAAC,GAAGJ,eAAe;EAEvD,IAAI;IACF,IAAI,CAACI,aAAa,EAAE;MAClB,MAAM,IAAIC,KAAK,CAAC,0DAA0D,CAAC;IAC7E;IAEAV,MAAM,CAACG,IAAI,CAAC,6DAA6DF,IAAI,CAACG,EAAE,KAAKK,aAAa,EAAE,CAAC;;IAErG;IACA,MAAME,QAAQ,GAAGF,aAAa,CAACG,QAAQ,CAAC,GAAG,CAAC,GAAGH,aAAa,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAGJ,aAAa;IACzFT,MAAM,CAACG,IAAI,CAAC,wDAAwDQ,QAAQ,oBAAoBV,IAAI,CAACG,EAAE,EAAE,CAAC;IAE1G,MAAMU,IAAI,GAAG,IAAIC,eAAe,CAAC;MAC/BC,UAAU,EAAE,eAAe;MAC3BC,aAAa,EAAET,YAAY;MAC3B;MACAU,mBAAmB,EAAE,EAAE;MACvBC,uBAAuB,EAAE,EAAE;MAC3BC,QAAQ,EAAE;IACZ,CAAC,CAAC;IAEF,MAAMC,GAAG,GAAG,MAAMC,KAAK,CAACX,QAAQ,CAACY,QAAQ,CAAC,CAAC,EAAE;MAC3CC,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACPC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE;MAClB,CAAC;MACDZ,IAAI,EAAEA,IAAI,CAACS,QAAQ,CAAC;IACtB,CAAC,CAAC;IAEFvB,MAAM,CAACG,IAAI,CAAC,wDAAwDkB,GAAG,CAACM,MAAM,EAAE,CAAC;IAEjF,IAAI,CAACN,GAAG,CAACO,EAAE,EAAE;MACX,MAAMC,OAAO,GAAG,MAAMR,GAAG,CAACS,IAAI,CAAC,CAAC;MAChC,MAAM,IAAIpB,KAAK,CAAC,kBAAkBW,GAAG,CAACM,MAAM,KAAKE,OAAO,EAAE,CAAC;IAC7D;IAEA,MAAME,IAAqB,GAAG,MAAMV,GAAG,CAACW,IAAI,CAAC,CAAC;IAC9ChC,MAAM,CAACG,IAAI,CACT,iDAAiD8B,IAAI,CAACC,SAAS,CAAC;MAC9DC,UAAU,EAAEJ,IAAI,CAACI,UAAU;MAC3BC,UAAU,EAAEL,IAAI,CAACK,UAAU;MAC3BC,gBAAgB,EAAEC,OAAO,CAACP,IAAI,CAACQ,YAAY,CAAC;MAC5CC,iBAAiB,EAAEF,OAAO,CAACP,IAAI,CAACd,aAAa;IAC/C,CAAC,CAAC,EACJ,CAAC;;IAED;IACA,IAAIc,IAAI,CAACd,aAAa,IAAIc,IAAI,CAACd,aAAa,KAAKT,YAAY,EAAE;MAC7DR,MAAM,CAACG,IAAI,CAAC,4DAA4D,CAAC;MACzE,IAAAsC,sCAA4B,EAACxC,IAAI,EAAE;QACjC,GAAGI,eAAe;QAClBG,YAAY,EAAEuB,IAAI,CAACd;MACrB,CAAC,CAAC;MAEF,MAAM,IAAAyB,iCAAuB,EAACxC,YAAY,EAAED,IAAI,CAAC;IACnD;IAEA,OAAO8B,IAAI;EACb,CAAC,CAAC,OAAOxB,KAAK,EAAE;IACdP,MAAM,CAACO,KAAK,CAAC,iDAAiDA,KAAK,EAAE,CAAC;IACtE,MAAMA,KAAK;EACb;AACF","ignoreList":[]}

package/lib/commonjs/modules/openid/refresh/registry.js

@@ -111,7 +111,7 @@ const credentialRegistry = exports.credentialRegistry = (0, _vanilla.createStore
   shouldSkip: id => {
     const s = get();
     if (s.refreshing[id]) return true; // in-progress
-    if (s.expired.includes(id)) return true; // replacement already queued
+    if (s.expired.includes(id) && Boolean(s.replacements[id])) return true; // replacement already queued
     if (s.blocked[id]) return true; // previously succeeded/failed
     return false;
   },

package/lib/commonjs/modules/openid/refresh/registry.js.map

@@ -1 +1 @@
-{"version":3,"names":["_vanilla","require","credentialRegistry","exports","createStore","set","get","byId","expired","checked","replacements","refreshing","blocked","lastSweepAt","undefined","upsert","cred","s","id","markRefreshing","clearRefreshing","_drop","rest","markExpiredWithReplacement","oldId","replacement","includes","markInvalid","acceptReplacement","repl","restRepl","filter","x","reason","at","Date","toISOString","clearExpired","blockAsSucceeded","blockAsFailed","error","unblock","shouldSkip","setLastSweep","iso","reset","readRegistry","getState","mutateRegistry","updater","setState","selectOldIdByReplacementId","replacementId","Object","entries"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/registry.ts"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AAiBA;;AA4DO,MAAMC,kBAAkB,GAAAC,OAAA,CAAAD,kBAAA,GAAG,IAAAE,oBAAW,EAAgB,CAACC,GAAG,EAAEC,GAAG,MAAM;EAC1EC,IAAI,EAAE,CAAC,CAAC;EACRC,OAAO,EAAE,EAAE;EACXC,OAAO,EAAE,EAAE;EACXC,YAAY,EAAE,CAAC,CAAC;EAChBC,UAAU,EAAE,CAAC,CAAC;EACdC,OAAO,EAAE,CAAC,CAAC;EACXC,WAAW,EAAEC,SAAS;EAEtBC,MAAM,EAAGC,IAAI,IAAKX,GAAG,CAAEY,CAAC,KAAM;IAAEV,IAAI,EAAE;MAAE,GAAGU,CAAC,CAACV,IAAI;MAAE,CAACS,IAAI,CAACE,EAAE,GAAGF;IAAK;EAAE,CAAC,CAAC,CAAC;EAExEG,cAAc,EAAGD,EAAE,IAAKb,GAAG,CAAEY,CAAC,KAAM;IAAEN,UAAU,EAAE;MAAE,GAAGM,CAAC,CAACN,UAAU;MAAE,CAACO,EAAE,GAAG;IAAK;EAAE,CAAC,CAAC,CAAC;EAErFE,eAAe,EAAGF,EAAE,IAClBb,GAAG,CAAEY,CAAC,IAAK;IACT;IACA,MAAM;MAAE,CAACC,EAAE,GAAGG,KAAK;MAAE,GAAGC;IAAK,CAAC,GAAGL,CAAC,CAACN,UAAU;IAC7C,OAAO;MAAEA,UAAU,EAAEW;IAAK,CAAC;EAC7B,CAAC,CAAC;EAEJC,0BAA0B,EAAEA,CAACC,KAAK,EAAEC,WAAW,KAC7CpB,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACF,KAAK,CAAC,GAAGP,CAAC,CAACT,OAAO,GAAG,CAAC,GAAGS,CAAC,CAACT,OAAO,EAAEgB,KAAK,CAAC;IACtEf,OAAO,EAAEQ,CAAC,CAACR,OAAO,CAACiB,QAAQ,CAACF,KAAK,CAAC,GAAGP,CAAC,CAACR,OAAO,GAAG,CAAC,GAAGQ,CAAC,CAACR,OAAO,EAAEe,KAAK,CAAC;IACtEd,YAAY,EAAE;MAAE,GAAGO,CAAC,CAACP,YAAY;MAAE,CAACc,KAAK,GAAGC;IAAY;EAC1D,CAAC,CAAC,CAAC;EAELE,WAAW,EAAGT,EAAE,IACdb,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACR,EAAE,CAAC,GAAGD,CAAC,CAACT,OAAO,GAAG,CAAC,GAAGS,CAAC,CAACT,OAAO,EAAEU,EAAE,CAAC;IAChET,OAAO,EAAEQ,CAAC,CAACR,OAAO,CAACiB,QAAQ,CAACR,EAAE,CAAC,GAAGD,CAAC,CAACR,OAAO,GAAG,CAAC,GAAGQ,CAAC,CAACR,OAAO,EAAES,EAAE;EACjE,CAAC,CAAC,CAAC;EAELU,iBAAiB,EAAGJ,KAAK,IACvBnB,GAAG,CAAEY,CAAC,IAAK;IACT,MAAMY,IAAI,GAAGZ,CAAC,CAACP,YAAY,CAACc,KAAK,CAAC;IAClC,IAAI,CAACK,IAAI,EAAE,OAAOZ,CAAC;IACnB,MAAMV,IAAI,GAAG;MAAE,GAAGU,CAAC,CAACV;IAAK,CAAC;IAC1B,OAAOA,IAAI,CAACiB,KAAK,CAAC;IAClBjB,IAAI,CAACsB,IAAI,CAACX,EAAE,CAAC,GAAGW,IAAI;IACpB;IACA,MAAM;MAAE,CAACL,KAAK,GAAGH,KAAK;MAAE,GAAGS;IAAS,CAAC,GAAGb,CAAC,CAACP,YAAY;IACtD,OAAO;MACLH,IAAI;MACJG,YAAY,EAAEoB,QAAQ;MACtBtB,OAAO,EAAES,CAAC,CAACT,OAAO,CAACuB,MAAM,CAAEC,CAAC,IAAKA,CAAC,KAAKR,KAAK,CAAC;MAC7C;MACAZ,OAAO,EAAE;QAAE,GAAGK,CAAC,CAACL,OAAO;QAAE,CAACY,KAAK,GAAG;UAAES,MAAM,EAAE,WAAW;UAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;QAAE;MAAE;IAC1F,CAAC;EACH,CAAC,CAAC;EAEJC,YAAY,EAAGnB,EAAE,IACfb,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACuB,MAAM,CAAEC,CAAC,IAAKA,CAAC,KAAKd,EAAE;EAC3C,CAAC,CAAC,CAAC;EAELoB,gBAAgB,EAAGpB,EAAE,IACnBb,GAAG,CAAEY,CAAC,KAAM;IACVL,OAAO,EAAE;MAAE,GAAGK,CAAC,CAACL,OAAO;MAAE,CAACM,EAAE,GAAG;QAAEe,MAAM,EAAE,WAAW;QAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;MAAE;IAAE;EACvF,CAAC,CAAC,CAAC;EAELG,aAAa,EAAEA,CAACrB,EAAE,EAAEsB,KAAK,KACvBnC,GAAG,CAAEY,CAAC,KAAM;IACVL,OAAO,EAAE;MAAE,GAAGK,CAAC,CAACL,OAAO;MAAE,CAACM,EAAE,GAAG;QAAEe,MAAM,EAAE,QAAQ;QAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;QAAEI;MAAM;IAAE;EAC3F,CAAC,CAAC,CAAC;EAELC,OAAO,EAAGvB,EAAE,IACVb,GAAG,CAAEY,CAAC,IAAK;IACT;IACA,MAAM;MAAE,CAACC,EAAE,GAAGG,KAAK;MAAE,GAAGC;IAAK,CAAC,GAAGL,CAAC,CAACL,OAAO;IAC1C,OAAO;MAAEA,OAAO,EAAEU;IAAK,CAAC;EAC1B,CAAC,CAAC;EAEJoB,UAAU,EAAGxB,EAAE,IAAK;IAClB,MAAMD,CAAC,GAAGX,GAAG,CAAC,CAAC;IACf,IAAIW,CAAC,CAACN,UAAU,CAACO,EAAE,CAAC,EAAE,OAAO,IAAI,EAAC;IAClC,IAAID,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACR,EAAE,CAAC,EAAE,OAAO,IAAI,EAAC;IACxC,IAAID,CAAC,CAACL,OAAO,CAACM,EAAE,CAAC,EAAE,OAAO,IAAI,EAAC;IAC/B,OAAO,KAAK;EACd,CAAC;EAEDyB,YAAY,EAAGC,GAAG,IAAKvC,GAAG,CAAC;IAAEQ,WAAW,EAAE+B;EAAI,CAAC,CAAC;EAEhDC,KAAK,EAAEA,CAAA,KACLxC,GAAG,CAAC;IACFE,IAAI,EAAE,CAAC,CAAC;IACRC,OAAO,EAAE,EAAE;IACXC,OAAO,EAAE,EAAE;IACXC,YAAY,EAAE,CAAC,CAAC;IAChBC,UAAU,EAAE,CAAC,CAAC;IACdC,OAAO,EAAE,CAAC,CAAC;IACXC,WAAW,EAAEC;EACf,CAAC;AACL,CAAC,CAAC,CAAC;;AAEH;AACO,MAAMgC,YAAY,GAAGA,CAAA,KAAM5C,kBAAkB,CAAC6C,QAAQ,CAAC,CAAC;AAAA5C,OAAA,CAAA2C,YAAA,GAAAA,YAAA;AACxD,MAAME,cAAc,GAAIC,OAAmC,IAChE/C,kBAAkB,CAACgD,QAAQ,CAAEjC,CAAC,IAAK;EACjCgC,OAAO,CAAChC,CAAC,CAAC;EACV,OAAOA,CAAC;AACV,CAAC,CAAC;AAAAd,OAAA,CAAA6C,cAAA,GAAAA,cAAA;AAEG,MAAMG,0BAA0B,GAAIC,aAAqB,IAAyB;EACvF,MAAM;IAAE1C;EAAa,CAAC,GAAGR,kBAAkB,CAAC6C,QAAQ,CAAC,CAAC;EACtD,KAAK,MAAM,CAACvB,KAAK,EAAEK,IAAI,CAAC,IAAIwB,MAAM,CAACC,OAAO,CAAC5C,YAAY,CAAC,EAAE;IACxD,IAAImB,IAAI,CAACX,EAAE,KAAKkC,aAAa,EAAE,OAAO5B,KAAK;EAC7C;EACA,OAAOV,SAAS;AAClB,CAAC;AAAAX,OAAA,CAAAgD,0BAAA,GAAAA,0BAAA","ignoreList":[]}
+{"version":3,"names":["_vanilla","require","credentialRegistry","exports","createStore","set","get","byId","expired","checked","replacements","refreshing","blocked","lastSweepAt","undefined","upsert","cred","s","id","markRefreshing","clearRefreshing","_drop","rest","markExpiredWithReplacement","oldId","replacement","includes","markInvalid","acceptReplacement","repl","restRepl","filter","x","reason","at","Date","toISOString","clearExpired","blockAsSucceeded","blockAsFailed","error","unblock","shouldSkip","Boolean","setLastSweep","iso","reset","readRegistry","getState","mutateRegistry","updater","setState","selectOldIdByReplacementId","replacementId","Object","entries"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/registry.ts"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AAiBA;;AA4DO,MAAMC,kBAAkB,GAAAC,OAAA,CAAAD,kBAAA,GAAG,IAAAE,oBAAW,EAAgB,CAACC,GAAG,EAAEC,GAAG,MAAM;EAC1EC,IAAI,EAAE,CAAC,CAAC;EACRC,OAAO,EAAE,EAAE;EACXC,OAAO,EAAE,EAAE;EACXC,YAAY,EAAE,CAAC,CAAC;EAChBC,UAAU,EAAE,CAAC,CAAC;EACdC,OAAO,EAAE,CAAC,CAAC;EACXC,WAAW,EAAEC,SAAS;EAEtBC,MAAM,EAAGC,IAAI,IAAKX,GAAG,CAAEY,CAAC,KAAM;IAAEV,IAAI,EAAE;MAAE,GAAGU,CAAC,CAACV,IAAI;MAAE,CAACS,IAAI,CAACE,EAAE,GAAGF;IAAK;EAAE,CAAC,CAAC,CAAC;EAExEG,cAAc,EAAGD,EAAE,IAAKb,GAAG,CAAEY,CAAC,KAAM;IAAEN,UAAU,EAAE;MAAE,GAAGM,CAAC,CAACN,UAAU;MAAE,CAACO,EAAE,GAAG;IAAK;EAAE,CAAC,CAAC,CAAC;EAErFE,eAAe,EAAGF,EAAE,IAClBb,GAAG,CAAEY,CAAC,IAAK;IACT;IACA,MAAM;MAAE,CAACC,EAAE,GAAGG,KAAK;MAAE,GAAGC;IAAK,CAAC,GAAGL,CAAC,CAACN,UAAU;IAC7C,OAAO;MAAEA,UAAU,EAAEW;IAAK,CAAC;EAC7B,CAAC,CAAC;EAEJC,0BAA0B,EAAEA,CAACC,KAAK,EAAEC,WAAW,KAC7CpB,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACF,KAAK,CAAC,GAAGP,CAAC,CAACT,OAAO,GAAG,CAAC,GAAGS,CAAC,CAACT,OAAO,EAAEgB,KAAK,CAAC;IACtEf,OAAO,EAAEQ,CAAC,CAACR,OAAO,CAACiB,QAAQ,CAACF,KAAK,CAAC,GAAGP,CAAC,CAACR,OAAO,GAAG,CAAC,GAAGQ,CAAC,CAACR,OAAO,EAAEe,KAAK,CAAC;IACtEd,YAAY,EAAE;MAAE,GAAGO,CAAC,CAACP,YAAY;MAAE,CAACc,KAAK,GAAGC;IAAY;EAC1D,CAAC,CAAC,CAAC;EAELE,WAAW,EAAGT,EAAE,IACdb,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACR,EAAE,CAAC,GAAGD,CAAC,CAACT,OAAO,GAAG,CAAC,GAAGS,CAAC,CAACT,OAAO,EAAEU,EAAE,CAAC;IAChET,OAAO,EAAEQ,CAAC,CAACR,OAAO,CAACiB,QAAQ,CAACR,EAAE,CAAC,GAAGD,CAAC,CAACR,OAAO,GAAG,CAAC,GAAGQ,CAAC,CAACR,OAAO,EAAES,EAAE;EACjE,CAAC,CAAC,CAAC;EAELU,iBAAiB,EAAGJ,KAAK,IACvBnB,GAAG,CAAEY,CAAC,IAAK;IACT,MAAMY,IAAI,GAAGZ,CAAC,CAACP,YAAY,CAACc,KAAK,CAAC;IAClC,IAAI,CAACK,IAAI,EAAE,OAAOZ,CAAC;IACnB,MAAMV,IAAI,GAAG;MAAE,GAAGU,CAAC,CAACV;IAAK,CAAC;IAC1B,OAAOA,IAAI,CAACiB,KAAK,CAAC;IAClBjB,IAAI,CAACsB,IAAI,CAACX,EAAE,CAAC,GAAGW,IAAI;IACpB;IACA,MAAM;MAAE,CAACL,KAAK,GAAGH,KAAK;MAAE,GAAGS;IAAS,CAAC,GAAGb,CAAC,CAACP,YAAY;IACtD,OAAO;MACLH,IAAI;MACJG,YAAY,EAAEoB,QAAQ;MACtBtB,OAAO,EAAES,CAAC,CAACT,OAAO,CAACuB,MAAM,CAAEC,CAAC,IAAKA,CAAC,KAAKR,KAAK,CAAC;MAC7C;MACAZ,OAAO,EAAE;QAAE,GAAGK,CAAC,CAACL,OAAO;QAAE,CAACY,KAAK,GAAG;UAAES,MAAM,EAAE,WAAW;UAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;QAAE;MAAE;IAC1F,CAAC;EACH,CAAC,CAAC;EAEJC,YAAY,EAAGnB,EAAE,IACfb,GAAG,CAAEY,CAAC,KAAM;IACVT,OAAO,EAAES,CAAC,CAACT,OAAO,CAACuB,MAAM,CAAEC,CAAC,IAAKA,CAAC,KAAKd,EAAE;EAC3C,CAAC,CAAC,CAAC;EAELoB,gBAAgB,EAAGpB,EAAE,IACnBb,GAAG,CAAEY,CAAC,KAAM;IACVL,OAAO,EAAE;MAAE,GAAGK,CAAC,CAACL,OAAO;MAAE,CAACM,EAAE,GAAG;QAAEe,MAAM,EAAE,WAAW;QAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;MAAE;IAAE;EACvF,CAAC,CAAC,CAAC;EAELG,aAAa,EAAEA,CAACrB,EAAE,EAAEsB,KAAK,KACvBnC,GAAG,CAAEY,CAAC,KAAM;IACVL,OAAO,EAAE;MAAE,GAAGK,CAAC,CAACL,OAAO;MAAE,CAACM,EAAE,GAAG;QAAEe,MAAM,EAAE,QAAQ;QAAEC,EAAE,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;QAAEI;MAAM;IAAE;EAC3F,CAAC,CAAC,CAAC;EAELC,OAAO,EAAGvB,EAAE,IACVb,GAAG,CAAEY,CAAC,IAAK;IACT;IACA,MAAM;MAAE,CAACC,EAAE,GAAGG,KAAK;MAAE,GAAGC;IAAK,CAAC,GAAGL,CAAC,CAACL,OAAO;IAC1C,OAAO;MAAEA,OAAO,EAAEU;IAAK,CAAC;EAC1B,CAAC,CAAC;EAEJoB,UAAU,EAAGxB,EAAE,IAAK;IAClB,MAAMD,CAAC,GAAGX,GAAG,CAAC,CAAC;IACf,IAAIW,CAAC,CAACN,UAAU,CAACO,EAAE,CAAC,EAAE,OAAO,IAAI,EAAC;IAClC,IAAID,CAAC,CAACT,OAAO,CAACkB,QAAQ,CAACR,EAAE,CAAC,IAAIyB,OAAO,CAAC1B,CAAC,CAACP,YAAY,CAACQ,EAAE,CAAC,CAAC,EAAE,OAAO,IAAI,EAAC;IACvE,IAAID,CAAC,CAACL,OAAO,CAACM,EAAE,CAAC,EAAE,OAAO,IAAI,EAAC;IAC/B,OAAO,KAAK;EACd,CAAC;EAED0B,YAAY,EAAGC,GAAG,IAAKxC,GAAG,CAAC;IAAEQ,WAAW,EAAEgC;EAAI,CAAC,CAAC;EAEhDC,KAAK,EAAEA,CAAA,KACLzC,GAAG,CAAC;IACFE,IAAI,EAAE,CAAC,CAAC;IACRC,OAAO,EAAE,EAAE;IACXC,OAAO,EAAE,EAAE;IACXC,YAAY,EAAE,CAAC,CAAC;IAChBC,UAAU,EAAE,CAAC,CAAC;IACdC,OAAO,EAAE,CAAC,CAAC;IACXC,WAAW,EAAEC;EACf,CAAC;AACL,CAAC,CAAC,CAAC;;AAEH;AACO,MAAMiC,YAAY,GAAGA,CAAA,KAAM7C,kBAAkB,CAAC8C,QAAQ,CAAC,CAAC;AAAA7C,OAAA,CAAA4C,YAAA,GAAAA,YAAA;AACxD,MAAME,cAAc,GAAIC,OAAmC,IAChEhD,kBAAkB,CAACiD,QAAQ,CAAElC,CAAC,IAAK;EACjCiC,OAAO,CAACjC,CAAC,CAAC;EACV,OAAOA,CAAC;AACV,CAAC,CAAC;AAAAd,OAAA,CAAA8C,cAAA,GAAAA,cAAA;AAEG,MAAMG,0BAA0B,GAAIC,aAAqB,IAAyB;EACvF,MAAM;IAAE3C;EAAa,CAAC,GAAGR,kBAAkB,CAAC8C,QAAQ,CAAC,CAAC;EACtD,KAAK,MAAM,CAACxB,KAAK,EAAEK,IAAI,CAAC,IAAIyB,MAAM,CAACC,OAAO,CAAC7C,YAAY,CAAC,EAAE;IACxD,IAAImB,IAAI,CAACX,EAAE,KAAKmC,aAAa,EAAE,OAAO7B,KAAK;EAC7C;EACA,OAAOV,SAAS;AAClB,CAAC;AAAAX,OAAA,CAAAiD,0BAAA,GAAAA,0BAAA","ignoreList":[]}

package/lib/commonjs/modules/openid/refresh/types.js

@@ -3,13 +3,23 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.RefreshStatus = exports.OpenIDCustomNotificationType = void 0;
+exports.RefreshStatus = exports.OpenIDCustomNotificationType = exports.OpenIDCredentialRefreshFlowType = void 0;
 let RefreshStatus = exports.RefreshStatus = /*#__PURE__*/function (RefreshStatus) {
   RefreshStatus["Valid"] = "valid";
   RefreshStatus["Invalid"] = "invalid";
   RefreshStatus["Error"] = "error";
   return RefreshStatus;
 }({});
+/**
+ * Controls how invalid OpenID credentials are handled after status checks.
+ * - InvalidThenOnDemand: show invalid notification; replacement is attempted on user action.
+ * - FullReplacement: orchestrator attempts replacement immediately and surfaces replacement notification when available.
+ */
+let OpenIDCredentialRefreshFlowType = exports.OpenIDCredentialRefreshFlowType = /*#__PURE__*/function (OpenIDCredentialRefreshFlowType) {
+  OpenIDCredentialRefreshFlowType["InvalidThenOnDemand"] = "invalid-then-on-demand";
+  OpenIDCredentialRefreshFlowType["FullReplacement"] = "full-replacement";
+  return OpenIDCredentialRefreshFlowType;
+}({});
 let OpenIDCustomNotificationType = exports.OpenIDCustomNotificationType = /*#__PURE__*/function (OpenIDCustomNotificationType) {
   OpenIDCustomNotificationType["CredentialReplacementAvailable"] = "CustomNotificationOpenIDCredential";
   OpenIDCustomNotificationType["CredentialExpired"] = "CredentialExpired";

package/lib/commonjs/modules/openid/refresh/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["RefreshStatus","exports","OpenIDCustomNotificationType"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/types.ts"],"mappings":";;;;;;IAoBYA,aAAa,GAAAC,OAAA,CAAAD,aAAA,0BAAbA,aAAa;EAAbA,aAAa;EAAbA,aAAa;EAAbA,aAAa;EAAA,OAAbA,aAAa;AAAA;AAAA,IAoDbE,4BAA4B,GAAAD,OAAA,CAAAC,4BAAA,0BAA5BA,4BAA4B;EAA5BA,4BAA4B;EAA5BA,4BAA4B;EAAA,OAA5BA,4BAA4B;AAAA","ignoreList":[]}
+{"version":3,"names":["RefreshStatus","exports","OpenIDCredentialRefreshFlowType","OpenIDCustomNotificationType"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/types.ts"],"mappings":";;;;;;IAeYA,aAAa,GAAAC,OAAA,CAAAD,aAAA,0BAAbA,aAAa;EAAbA,aAAa;EAAbA,aAAa;EAAbA,aAAa;EAAA,OAAbA,aAAa;AAAA;AAMzB;AACA;AACA;AACA;AACA;AAJA,IAKYE,+BAA+B,GAAAD,OAAA,CAAAC,+BAAA,0BAA/BA,+BAA+B;EAA/BA,+BAA+B;EAA/BA,+BAA+B;EAAA,OAA/BA,+BAA+B;AAAA;AAAA,IAmD/BC,4BAA4B,GAAAF,OAAA,CAAAE,4BAAA,0BAA5BA,4BAA4B;EAA5BA,4BAA4B;EAA5BA,4BAA4B;EAAA,OAA5BA,4BAA4B;AAAA","ignoreList":[]}

package/lib/commonjs/modules/openid/refresh/verifyCredentialStatus.js

@@ -5,30 +5,30 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.verifyCredentialStatus = verifyCredentialStatus;
 var _jwtStatusList = require("@sd-jwt/jwt-status-list");
+var _types = require("./types");
 // modules/openid/refresh/verifyCredentialStatus.ts
 
 /**
  * Verifies credential status for Sd-JWT credentials using status lists.
  * Non–Sd-JWT credentials (W3C jwt_vc_json without status list, or mdoc) are treated as valid here.
- * Returns true if valid; false if revoked/invalid or on error.
  */
 async function verifyCredentialStatus(rec, logger) {
   try {
     // Only Sd-JWT creds have compactSdJwtVc in this codebase
-    if (!('compactSdJwtVc' in rec)) return true;
+    if (!('compactSdJwtVc' in rec)) return _types.RefreshStatus.Valid;
     logger === null || logger === void 0 || logger.info(`[Verifier] Verifying credential status for Sd-JWT credential: ${rec.id}`);
     const ref = (0, _jwtStatusList.getStatusListFromJWT)(rec.firstCredential.compact);
     const res = await fetch(ref.uri);
     if (!res.ok) throw new Error(`HTTP ${res.status}`);
     const jwt = await res.text();
     const list = (0, _jwtStatusList.getListFromStatusListJWT)(jwt);
-    const ok = list.getStatus(ref.idx) === 0;
-    logger === null || logger === void 0 || logger.info(`${ok ? '✅' : '❌'} [Verifier] ${rec.id} → ${ok ? 'valid' : 'revoked'}`);
-    return ok;
+    const status = list.getStatus(ref.idx) === 0 ? _types.RefreshStatus.Valid : _types.RefreshStatus.Invalid;
+    logger === null || logger === void 0 || logger.info(`${status === _types.RefreshStatus.Valid ? '✅' : '❌'} [Verifier] ${rec.id} → ${status}`);
+    return status;
   } catch (e) {
     var _logger$error;
     logger === null || logger === void 0 || (_logger$error = logger.error) === null || _logger$error === void 0 || _logger$error.call(logger, `💥 [Verifier] ${'id' in rec ? rec.id : 'unknown'} verify failed: ${String(e)}`);
-    return false;
+    return _types.RefreshStatus.Error;
   }
 }
 //# sourceMappingURL=verifyCredentialStatus.js.map

package/lib/commonjs/modules/openid/refresh/verifyCredentialStatus.js.map

@@ -1 +1 @@
-{"version":3,"names":["_jwtStatusList","require","verifyCredentialStatus","rec","logger","info","id","ref","getStatusListFromJWT","firstCredential","compact","res","fetch","uri","ok","Error","status","jwt","text","list","getListFromStatusListJWT","getStatus","idx","e","_logger$error","error","call","String"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/verifyCredentialStatus.ts"],"mappings":";;;;;;AAEA,IAAAA,cAAA,GAAAC,OAAA;AAFA;;AAOA;AACA;AACA;AACA;AACA;AACO,eAAeC,sBAAsBA,CAACC,GAAY,EAAEC,MAAqB,EAAoB;EAClG,IAAI;IACF;IACA,IAAI,EAAE,gBAAgB,IAAID,GAAG,CAAC,EAAE,OAAO,IAAI;IAE3CC,MAAM,aAANA,MAAM,eAANA,MAAM,CAAEC,IAAI,CAAC,iEAAiEF,GAAG,CAACG,EAAE,EAAE,CAAC;IAEvF,MAAMC,GAAG,GAAG,IAAAC,mCAAoB,EAACL,GAAG,CAACM,eAAe,CAACC,OAAO,CAAC;IAC7D,MAAMC,GAAG,GAAG,MAAMC,KAAK,CAACL,GAAG,CAACM,GAAG,CAAC;IAChC,IAAI,CAACF,GAAG,CAACG,EAAE,EAAE,MAAM,IAAIC,KAAK,CAAC,QAAQJ,GAAG,CAACK,MAAM,EAAE,CAAC;IAClD,MAAMC,GAAG,GAAG,MAAMN,GAAG,CAACO,IAAI,CAAC,CAAC;IAE5B,MAAMC,IAAI,GAAG,IAAAC,uCAAwB,EAACH,GAAG,CAAC;IAC1C,MAAMH,EAAE,GAAGK,IAAI,CAACE,SAAS,CAACd,GAAG,CAACe,GAAG,CAAC,KAAK,CAAC;IAExClB,MAAM,aAANA,MAAM,eAANA,MAAM,CAAEC,IAAI,CAAC,GAAGS,EAAE,GAAG,GAAG,GAAG,GAAG,eAAeX,GAAG,CAACG,EAAE,MAAMQ,EAAE,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;IACpF,OAAOA,EAAE;EACX,CAAC,CAAC,OAAOS,CAAC,EAAE;IAAA,IAAAC,aAAA;IACVpB,MAAM,aAANA,MAAM,gBAAAoB,aAAA,GAANpB,MAAM,CAAEqB,KAAK,cAAAD,aAAA,eAAbA,aAAA,CAAAE,IAAA,CAAAtB,MAAM,EAAU,iBAAiB,IAAI,IAAID,GAAG,GAAGA,GAAG,CAACG,EAAE,GAAG,SAAS,mBAAmBqB,MAAM,CAACJ,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,KAAK;EACd;AACF","ignoreList":[]}
+{"version":3,"names":["_jwtStatusList","require","_types","verifyCredentialStatus","rec","logger","RefreshStatus","Valid","info","id","ref","getStatusListFromJWT","firstCredential","compact","res","fetch","uri","ok","Error","status","jwt","text","list","getListFromStatusListJWT","getStatus","idx","Invalid","e","_logger$error","error","call","String"],"sourceRoot":"../../../../../src","sources":["modules/openid/refresh/verifyCredentialStatus.ts"],"mappings":";;;;;;AAEA,IAAAA,cAAA,GAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AAJA;;AAQA;AACA;AACA;AACA;AACO,eAAeE,sBAAsBA,CAACC,GAAY,EAAEC,MAAqB,EAA0B;EACxG,IAAI;IACF;IACA,IAAI,EAAE,gBAAgB,IAAID,GAAG,CAAC,EAAE,OAAOE,oBAAa,CAACC,KAAK;IAE1DF,MAAM,aAANA,MAAM,eAANA,MAAM,CAAEG,IAAI,CAAC,iEAAiEJ,GAAG,CAACK,EAAE,EAAE,CAAC;IAEvF,MAAMC,GAAG,GAAG,IAAAC,mCAAoB,EAACP,GAAG,CAACQ,eAAe,CAACC,OAAO,CAAC;IAC7D,MAAMC,GAAG,GAAG,MAAMC,KAAK,CAACL,GAAG,CAACM,GAAG,CAAC;IAChC,IAAI,CAACF,GAAG,CAACG,EAAE,EAAE,MAAM,IAAIC,KAAK,CAAC,QAAQJ,GAAG,CAACK,MAAM,EAAE,CAAC;IAClD,MAAMC,GAAG,GAAG,MAAMN,GAAG,CAACO,IAAI,CAAC,CAAC;IAE5B,MAAMC,IAAI,GAAG,IAAAC,uCAAwB,EAACH,GAAG,CAAC;IAC1C,MAAMD,MAAM,GAAGG,IAAI,CAACE,SAAS,CAACd,GAAG,CAACe,GAAG,CAAC,KAAK,CAAC,GAAGnB,oBAAa,CAACC,KAAK,GAAGD,oBAAa,CAACoB,OAAO;IAE1FrB,MAAM,aAANA,MAAM,eAANA,MAAM,CAAEG,IAAI,CAAC,GAAGW,MAAM,KAAKb,oBAAa,CAACC,KAAK,GAAG,GAAG,GAAG,GAAG,eAAeH,GAAG,CAACK,EAAE,MAAMU,MAAM,EAAE,CAAC;IAC9F,OAAOA,MAAM;EACf,CAAC,CAAC,OAAOQ,CAAC,EAAE;IAAA,IAAAC,aAAA;IACVvB,MAAM,aAANA,MAAM,gBAAAuB,aAAA,GAANvB,MAAM,CAAEwB,KAAK,cAAAD,aAAA,eAAbA,aAAA,CAAAE,IAAA,CAAAzB,MAAM,EAAU,iBAAiB,IAAI,IAAID,GAAG,GAAGA,GAAG,CAACK,EAAE,GAAG,SAAS,mBAAmBsB,MAAM,CAACJ,CAAC,CAAC,EAAE,CAAC;IAChG,OAAOrB,oBAAa,CAACY,KAAK;EAC5B;AACF","ignoreList":[]}