@c9up/transit 0.1.0

package/dist/oauth1.d.ts

@@ -0,0 +1,68 @@
+/**
+ * OAuth 1.0a request signing (RFC 5849), HMAC-SHA1.
+ *
+ * OAuth1 authenticates each request by signing it, rather than by carrying a
+ * bearer token, which is why it needs this at all and OAuth2 does not. The
+ * signature covers the method, the URL and every parameter — so getting the
+ * base string wrong is the failure mode, and it fails as an opaque 401 from
+ * the provider.
+ *
+ * Everything here is pure: no network, no clock, no randomness. The nonce and
+ * timestamp are passed in, which is also what makes the result testable
+ * against the vector in the specification.
+ */
+/** One parameter. Duplicates of a key are allowed, as the spec permits. */
+export type Param = readonly [key: string, value: string];
+export interface SignatureInput {
+    method: string;
+    /** Full URL. Its query string is folded into the signed parameters. */
+    url: string;
+    /** Parameters beyond the URL query and the `oauth_*` set — a form body. */
+    params?: readonly Param[];
+    /** The `oauth_*` parameters, without `oauth_signature`. */
+    oauth: readonly Param[];
+    consumerSecret: string;
+    /** Absent on the very first call, when no token exists yet. */
+    tokenSecret?: string;
+}
+/**
+ * Percent-encoding as the specification defines it: unreserved characters
+ * stay, everything else is uppercase `%XX`.
+ *
+ * `encodeURIComponent` is close but leaves `!'()*` alone, and a signature
+ * computed with those unescaped does not match the one the provider computes.
+ */
+export declare function percentEncode(value: string): string;
+/** A fresh nonce. Only its uniqueness matters. */
+export declare function nonce(): string;
+/**
+ * The signature base string — the exact bytes both sides hash.
+ *
+ * Query and body parameters are decoded, then re-encoded, then sorted by
+ * encoded key and encoded value. That round trip is deliberate: two requests
+ * differing only in how they spelled an escape have to produce the same
+ * string, or the signature depends on the spelling.
+ */
+export declare function signatureBaseString(input: SignatureInput): string;
+/** The signature itself, base64 of HMAC-SHA1 over the base string. */
+export declare function sign(input: SignatureInput): string;
+/**
+ * The `Authorization: OAuth …` header value, signature included.
+ *
+ * Only the `oauth_*` parameters go in the header; the query and body ones are
+ * signed but stay where they were.
+ */
+export declare function authorizationHeader(input: SignatureInput): string;
+/** The `oauth_*` parameters every signed request carries. */
+export declare function baseOauthParams(options: {
+    consumerKey: string;
+    token?: string;
+    timestamp: number;
+    nonce: string;
+}): Param[];
+/**
+ * Parse a `key=value&…` response body. The token endpoints answer in this
+ * form rather than JSON.
+ */
+export declare function parseFormBody(body: string): Record<string, string>;
+//# sourceMappingURL=oauth1.d.ts.map

package/dist/oauth1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth1.d.ts","sourceRoot":"","sources":["../src/oauth1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,2EAA2E;AAC3E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,kDAAkD;AAClD,wBAAgB,KAAK,IAAI,MAAM,CAE9B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAsBjE;AAED,sEAAsE;AACtE,wBAAgB,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAOlD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CASjE;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACd,GAAG,KAAK,EAAE,CAUV;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlE"}

package/dist/oauth1.js

@@ -0,0 +1,106 @@
+/**
+ * OAuth 1.0a request signing (RFC 5849), HMAC-SHA1.
+ *
+ * OAuth1 authenticates each request by signing it, rather than by carrying a
+ * bearer token, which is why it needs this at all and OAuth2 does not. The
+ * signature covers the method, the URL and every parameter — so getting the
+ * base string wrong is the failure mode, and it fails as an opaque 401 from
+ * the provider.
+ *
+ * Everything here is pure: no network, no clock, no randomness. The nonce and
+ * timestamp are passed in, which is also what makes the result testable
+ * against the vector in the specification.
+ */
+import { createHmac, randomBytes } from "node:crypto";
+/**
+ * Percent-encoding as the specification defines it: unreserved characters
+ * stay, everything else is uppercase `%XX`.
+ *
+ * `encodeURIComponent` is close but leaves `!'()*` alone, and a signature
+ * computed with those unescaped does not match the one the provider computes.
+ */
+export function percentEncode(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+/** A fresh nonce. Only its uniqueness matters. */
+export function nonce() {
+    return randomBytes(16).toString("hex");
+}
+/**
+ * The signature base string — the exact bytes both sides hash.
+ *
+ * Query and body parameters are decoded, then re-encoded, then sorted by
+ * encoded key and encoded value. That round trip is deliberate: two requests
+ * differing only in how they spelled an escape have to produce the same
+ * string, or the signature depends on the spelling.
+ */
+export function signatureBaseString(input) {
+    const url = new URL(input.url);
+    const query = [...url.searchParams.entries()].map(([key, value]) => [key, value]);
+    const encoded = [...query, ...(input.params ?? []), ...input.oauth]
+        .map(([key, value]) => [percentEncode(key), percentEncode(value)])
+        .sort((a, b) => (a[0] === b[0] ? compare(a[1], b[1]) : compare(a[0], b[0])))
+        .map(([key, value]) => `${key}=${value}`)
+        .join("&");
+    // The base URL carries no query, no fragment, and no default port.
+    url.search = "";
+    url.hash = "";
+    const base = url.toString().replace(/\/$/, url.pathname === "/" ? "/" : "");
+    return [
+        input.method.toUpperCase(),
+        percentEncode(base),
+        percentEncode(encoded),
+    ].join("&");
+}
+/** The signature itself, base64 of HMAC-SHA1 over the base string. */
+export function sign(input) {
+    const key = `${percentEncode(input.consumerSecret)}&${percentEncode(input.tokenSecret ?? "")}`;
+    return createHmac("sha1", key)
+        .update(signatureBaseString(input))
+        .digest("base64");
+}
+/**
+ * The `Authorization: OAuth …` header value, signature included.
+ *
+ * Only the `oauth_*` parameters go in the header; the query and body ones are
+ * signed but stay where they were.
+ */
+export function authorizationHeader(input) {
+    const signed = [
+        ...input.oauth,
+        ["oauth_signature", sign(input)],
+    ];
+    const parts = signed
+        .map(([key, value]) => `${percentEncode(key)}="${percentEncode(value)}"`)
+        .join(", ");
+    return `OAuth ${parts}`;
+}
+/** The `oauth_*` parameters every signed request carries. */
+export function baseOauthParams(options) {
+    const params = [
+        ["oauth_consumer_key", options.consumerKey],
+        ["oauth_nonce", options.nonce],
+        ["oauth_signature_method", "HMAC-SHA1"],
+        ["oauth_timestamp", String(options.timestamp)],
+        ["oauth_version", "1.0"],
+    ];
+    if (options.token)
+        params.push(["oauth_token", options.token]);
+    return params;
+}
+/**
+ * Parse a `key=value&…` response body. The token endpoints answer in this
+ * form rather than JSON.
+ */
+export function parseFormBody(body) {
+    const out = {};
+    for (const [key, value] of new URLSearchParams(body).entries()) {
+        out[key] = value;
+    }
+    return out;
+}
+/** Byte-order comparison, which is what the specification asks for. */
+function compare(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+//# sourceMappingURL=oauth1.js.map

package/dist/oauth1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth1.js","sourceRoot":"","sources":["../src/oauth1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkBtD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IAC1C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACvC,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CACvE,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,KAAK;IACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAY,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACzD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAU,CACvC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;SACjE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAS,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;SACxE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,mEAAmE;IACnE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5E,OAAO;QACN,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC1B,aAAa,CAAC,IAAI,CAAC;QACnB,aAAa,CAAC,OAAO,CAAC;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,IAAI,CAAC,KAAqB;IACzC,MAAM,GAAG,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,aAAa,CAClE,KAAK,CAAC,WAAW,IAAI,EAAE,CACvB,EAAE,CAAC;IACJ,OAAO,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;SAC5B,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAClC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACxD,MAAM,MAAM,GAAY;QACvB,GAAG,KAAK,CAAC,KAAK;QACd,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAU;KACzC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM;SAClB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;SACxE,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,SAAS,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,OAK/B;IACA,MAAM,MAAM,GAAY;QACvB,CAAC,oBAAoB,EAAE,OAAO,CAAC,WAAW,CAAC;QAC3C,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC;QAC9B,CAAC,wBAAwB,EAAE,WAAW,CAAC;QACvC,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,eAAe,EAAE,KAAK,CAAC;KACxB,CAAC;IACF,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/oidc.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The two documents an OpenID Connect provider publishes about itself: where
+ * its endpoints are, and which keys it signs with.
+ *
+ * Both are cached, and both are refetched on a rule rather than on demand.
+ * Keys rotate, so a cache that never refreshes locks an application out at
+ * the worst moment; a cache that refreshes whenever a token names an unknown
+ * key hands anyone a way to make this application hammer the provider. The
+ * middle is a rate limit.
+ */
+import type { Jwk } from "./jwt.js";
+/** The slice of the discovery document this reads. */
+export interface OidcMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri: string;
+    userinfo_endpoint?: string;
+    id_token_signing_alg_values_supported?: string[];
+    code_challenge_methods_supported?: string[];
+}
+export interface RemoteOptions {
+    /** How long a fetched document is trusted, in milliseconds. Default 1 hour. */
+    ttlMs?: number;
+    /** Shortest interval between two key refetches. Default 5 minutes. */
+    minRefetchMs?: number;
+    /** Injected in tests. */
+    now?: () => number;
+}
+/**
+ * Reads and caches `/.well-known/openid-configuration`.
+ *
+ * The document's own `issuer` is checked against the configured one. They are
+ * allowed to differ in the specification's letter about as much as a passport
+ * is allowed to name someone else: a mismatch means the URL that was asked is
+ * not the authority that answered.
+ */
+export declare class OidcDiscovery {
+    #private;
+    constructor(issuer: string, options?: RemoteOptions);
+    get issuer(): string;
+    get url(): string;
+    metadata(): Promise<OidcMetadata>;
+}
+/**
+ * Reads and caches a provider's signing keys, and knows when it is allowed to
+ * look again.
+ */
+export declare class JwksCache {
+    #private;
+    constructor(options?: RemoteOptions);
+    /**
+     * The key a token names.
+     *
+     * A `kid` that is not held triggers at most one refetch per interval — that
+     * is how a rotated key is picked up, and how a stream of tokens naming
+     * invented keys stays cheap.
+     */
+    key(uri: string, kid: string | undefined): Promise<Jwk>;
+}
+//# sourceMappingURL=oidc.d.ts.map

package/dist/oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEpC,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IACjD,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC7B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAKD;;;;;;;GAOG;AACH,qBAAa,aAAa;;gBAOb,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB;IAQvD,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,GAAG,IAAI,MAAM,CAEhB;IAEK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;CA2BvC;AAED;;;GAGG;AACH,qBAAa,SAAS;;gBAOT,OAAO,GAAE,aAAkB;IAKvC;;;;;;OAMG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;CAwD7D"}

package/dist/oidc.js

@@ -0,0 +1,151 @@
+/**
+ * The two documents an OpenID Connect provider publishes about itself: where
+ * its endpoints are, and which keys it signs with.
+ *
+ * Both are cached, and both are refetched on a rule rather than on demand.
+ * Keys rotate, so a cache that never refreshes locks an application out at
+ * the worst moment; a cache that refreshes whenever a token names an unknown
+ * key hands anyone a way to make this application hammer the provider. The
+ * middle is a rate limit.
+ */
+const DEFAULT_TTL_MS = 3_600_000;
+const DEFAULT_MIN_REFETCH_MS = 300_000;
+/**
+ * Reads and caches `/.well-known/openid-configuration`.
+ *
+ * The document's own `issuer` is checked against the configured one. They are
+ * allowed to differ in the specification's letter about as much as a passport
+ * is allowed to name someone else: a mismatch means the URL that was asked is
+ * not the authority that answered.
+ */
+export class OidcDiscovery {
+    #issuer;
+    #ttlMs;
+    #now;
+    #cached;
+    #inFlight;
+    constructor(issuer, options = {}) {
+        // A trailing slash changes the well-known URL and, on some providers,
+        // the issuer claim it must be compared against.
+        this.#issuer = issuer.replace(/\/+$/, "");
+        this.#ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
+        this.#now = options.now ?? Date.now;
+    }
+    get issuer() {
+        return this.#issuer;
+    }
+    get url() {
+        return `${this.#issuer}/.well-known/openid-configuration`;
+    }
+    async metadata() {
+        const cached = this.#cached;
+        if (cached && this.#now() - cached.fetchedAt < this.#ttlMs) {
+            return cached.metadata;
+        }
+        // One fetch at a time: a burst of sign-ins on a cold cache would
+        // otherwise open one request per sign-in.
+        this.#inFlight ??= this.#fetch().finally(() => {
+            this.#inFlight = undefined;
+        });
+        return this.#inFlight;
+    }
+    async #fetch() {
+        const response = await fetch(this.url, {
+            headers: { Accept: "application/json" },
+        });
+        if (!response.ok) {
+            throw new Error(`[transit] OpenID Connect discovery failed for '${this.#issuer}' (HTTP ${response.status})`);
+        }
+        const body = (await response.json());
+        const metadata = assertMetadata(body, this.#issuer);
+        this.#cached = { metadata, fetchedAt: this.#now() };
+        return metadata;
+    }
+}
+/**
+ * Reads and caches a provider's signing keys, and knows when it is allowed to
+ * look again.
+ */
+export class JwksCache {
+    #minRefetchMs;
+    #now;
+    #keys = [];
+    #fetchedAt = 0;
+    #inFlight;
+    constructor(options = {}) {
+        this.#minRefetchMs = options.minRefetchMs ?? DEFAULT_MIN_REFETCH_MS;
+        this.#now = options.now ?? Date.now;
+    }
+    /**
+     * The key a token names.
+     *
+     * A `kid` that is not held triggers at most one refetch per interval — that
+     * is how a rotated key is picked up, and how a stream of tokens naming
+     * invented keys stays cheap.
+     */
+    async key(uri, kid) {
+        const found = this.#find(kid);
+        if (found)
+            return found;
+        if (this.#keys.length > 0 &&
+            this.#now() - this.#fetchedAt < this.#minRefetchMs) {
+            throw new Error(`[transit] id_token names a signing key ('${kid ?? "no kid"}') the provider did not publish`);
+        }
+        await this.#fetch(uri);
+        const refreshed = this.#find(kid);
+        if (!refreshed) {
+            throw new Error(`[transit] id_token names a signing key ('${kid ?? "no kid"}') the provider did not publish`);
+        }
+        return refreshed;
+    }
+    #find(kid) {
+        const usable = this.#keys.filter((jwk) => jwk.use === undefined || jwk.use === "sig");
+        if (kid !== undefined)
+            return usable.find((jwk) => jwk.kid === kid);
+        // No `kid` is only unambiguous when the provider publishes one key.
+        return usable.length === 1 ? usable[0] : undefined;
+    }
+    async #fetch(uri) {
+        this.#inFlight ??= this.#fetchOnce(uri).finally(() => {
+            this.#inFlight = undefined;
+        });
+        return this.#inFlight;
+    }
+    async #fetchOnce(uri) {
+        const response = await fetch(uri, {
+            headers: { Accept: "application/json" },
+        });
+        if (!response.ok) {
+            throw new Error(`[transit] fetching the provider's signing keys failed (HTTP ${response.status})`);
+        }
+        const body = (await response.json());
+        if (!Array.isArray(body.keys)) {
+            throw new Error("[transit] the provider's JWKS has no `keys` array");
+        }
+        this.#keys = body.keys.filter(isJwk);
+        this.#fetchedAt = this.#now();
+        return this.#keys;
+    }
+}
+function isJwk(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof Reflect.get(value, "kty") === "string");
+}
+function assertMetadata(body, expectedIssuer) {
+    for (const field of [
+        "issuer",
+        "authorization_endpoint",
+        "token_endpoint",
+        "jwks_uri",
+    ]) {
+        if (typeof body[field] !== "string" || body[field] === "") {
+            throw new Error(`[transit] the discovery document of '${expectedIssuer}' has no ${field}`);
+        }
+    }
+    if (body.issuer !== expectedIssuer) {
+        throw new Error(`[transit] discovery answered for issuer '${body.issuer}', not '${expectedIssuer}' — the URL asked is not the authority that replied`);
+    }
+    return body;
+}
+//# sourceMappingURL=oidc.js.map

package/dist/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAwBH,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,IAAI,CAAe;IAC5B,OAAO,CAA4D;IACnE,SAAS,CAAoC;IAE7C,YAAY,MAAc,EAAE,UAAyB,EAAE;QACtD,sEAAsE;QACtE,gDAAgD;QAChD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,IAAI,GAAG;QACN,OAAO,GAAG,IAAI,CAAC,OAAO,mCAAmC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,iEAAiE;QACjE,0CAA0C;QAC1C,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACtC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,kDAAkD,IAAI,CAAC,OAAO,WAAW,QAAQ,CAAC,MAAM,GAAG,CAC3F,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,aAAa,CAAS;IACtB,IAAI,CAAe;IAC5B,KAAK,GAAU,EAAE,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,SAAS,CAA6B;IAEtC,YAAY,UAAyB,EAAE;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,GAAuB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,IACC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACrB,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EACjD,CAAC;YACF,MAAM,IAAI,KAAK,CACd,4CAA4C,GAAG,IAAI,QAAQ,iCAAiC,CAC5F,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,4CAA4C,GAAG,IAAI,QAAQ,iCAAiC,CAC5F,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,GAAuB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CACnD,CAAC;QACF,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACpE,oEAAoE;QACpE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACvB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACpD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,+DAA+D,QAAQ,CAAC,MAAM,GAAG,CACjF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;CACD;AAED,SAAS,KAAK,CAAC,KAAc;IAC5B,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,QAAQ,CAC7C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACtB,IAA2B,EAC3B,cAAsB;IAEtB,KAAK,MAAM,KAAK,IAAI;QACnB,QAAQ;QACR,wBAAwB;QACxB,gBAAgB;QAChB,UAAU;KACD,EAAE,CAAC;QACZ,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACd,wCAAwC,cAAc,YAAY,KAAK,EAAE,CACzE,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACd,4CAA4C,IAAI,CAAC,MAAM,WAAW,cAAc,qDAAqD,CACrI,CAAC;IACH,CAAC;IACD,OAAO,IAAoB,CAAC;AAC7B,CAAC"}

package/dist/quasar.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Resolving a Redis connection by name, from `@c9up/quasar`.
+ *
+ * Transit does not depend on quasar: it is an optional peer, and this module
+ * never imports it statically — the specifier is built at runtime so the
+ * TypeScript build stays free of it too.
+ */
+/**
+ * The named connection, checked for the commands the caller needs before it is
+ * handed over — a connection missing one would fail on the first sign-in, far
+ * from the cause.
+ */
+export declare function quasarConnection<T>(name: string | undefined, required: readonly string[], what: string): Promise<T>;
+//# sourceMappingURL=quasar.d.ts.map

package/dist/quasar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quasar.d.ts","sourceRoot":"","sources":["../src/quasar.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACvC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,IAAI,EAAE,MAAM,GACV,OAAO,CAAC,CAAC,CAAC,CAkCZ"}

package/dist/quasar.js

@@ -0,0 +1,42 @@
+/**
+ * Resolving a Redis connection by name, from `@c9up/quasar`.
+ *
+ * Transit does not depend on quasar: it is an optional peer, and this module
+ * never imports it statically — the specifier is built at runtime so the
+ * TypeScript build stays free of it too.
+ */
+function isConnectionSource(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof Reflect.get(value, "connection") === "function");
+}
+/**
+ * The named connection, checked for the commands the caller needs before it is
+ * handed over — a connection missing one would fail on the first sign-in, far
+ * from the cause.
+ */
+export async function quasarConnection(name, required, what) {
+    const specifier = "@c9up/quasar/services/main";
+    let loaded;
+    try {
+        loaded = await import(/* @vite-ignore */ specifier);
+    }
+    catch (cause) {
+        throw new Error(`[transit] naming a Redis connection needs @c9up/quasar, which is not installed.\n  pnpm add @c9up/quasar`, { cause });
+    }
+    const manager = isConnectionSource(loaded)
+        ? loaded
+        : Reflect.get(Object(loaded), "default");
+    if (!isConnectionSource(manager)) {
+        throw new Error("[transit] @c9up/quasar/services/main did not expose a connection() manager");
+    }
+    const connection = manager.connection(name);
+    const missing = required.filter((command) => typeof connection !== "object" ||
+        connection === null ||
+        typeof Reflect.get(connection, command) !== "function");
+    if (missing.length > 0) {
+        throw new Error(`[transit] the quasar connection${name ? ` '${name}'` : ""} is missing ${missing.join(", ")}, which ${what} issues`);
+    }
+    return connection;
+}
+//# sourceMappingURL=quasar.js.map

package/dist/quasar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quasar.js","sourceRoot":"","sources":["../src/quasar.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,SAAS,kBAAkB,CAAC,KAAc;IACzC,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,UAAU,CACtD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAAwB,EACxB,QAA2B,EAC3B,IAAY;IAEZ,MAAM,SAAS,GAAG,4BAA4B,CAAC;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,0GAA0G,EAC1G,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC;QACzC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACd,4EAA4E,CAC5E,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,OAAO,EAAE,EAAE,CACX,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,KAAK,IAAI;QACnB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,UAAU,CACvD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACd,kCAAkC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,SAAS,CACnH,CAAC;IACH,CAAC;IACD,OAAO,UAAe,CAAC;AACxB,CAAC"}

package/dist/replay.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Refusing an assertion that has already been used.
+ *
+ * A SAML assertion is a bearer token: whoever holds it is who it says they
+ * are, until it expires. A signature does not change that, and neither does
+ * any condition on it — a response captured once and posted twice is valid
+ * both times. Remembering the id until the assertion expires is what makes the
+ * second time fail.
+ *
+ * The window is short, so what is stored stays small: an id is forgotten as
+ * soon as the assertion it names could no longer have been accepted anyway.
+ */
+export interface AssertionReplayStore {
+    /**
+     * Remember `assertionId` until `expiresAt` (epoch seconds).
+     *
+     * Answers `true` when this is the first time, `false` when the assertion
+     * has already been used. Implementations must decide that atomically:
+     * checking and then storing lets two concurrent posts of the same response
+     * both win.
+     */
+    remember(assertionId: string, expiresAt: number): Promise<boolean>;
+}
+/**
+ * Remembers in this process's memory.
+ *
+ * Correct while the application runs in one process, and only then: two
+ * replicas each keep their own table, so the same assertion is accepted once
+ * per replica. Reach for the Redis store the moment a second one exists.
+ */
+export declare class MemoryAssertionReplayStore implements AssertionReplayStore {
+    #private;
+    remember(assertionId: string, expiresAt: number): Promise<boolean>;
+}
+/** The commands the Redis store issues. */
+export interface ReplayRedisClient {
+    /** `SET key value EX <ttl> NX` — answers null when the key already exists. */
+    set(key: string, value: string, ...args: unknown[]): Promise<unknown>;
+}
+export type ReplayRedisResolver = ReplayRedisClient | (() => ReplayRedisClient | Promise<ReplayRedisClient>);
+export interface RedisReplayOptions {
+    /** Key prefix. Default `"transit:saml:assertion:"`. */
+    prefix?: string;
+}
+/**
+ * Remembers in Redis, so every replica refuses the assertion the first one
+ * accepted.
+ *
+ * `SET … NX` decides in one round trip, atomically on the server, which is
+ * what stops two concurrent posts of the same response from both winning.
+ */
+export declare class RedisAssertionReplayStore implements AssertionReplayStore {
+    #private;
+    constructor(client: ReplayRedisResolver, options?: RedisReplayOptions);
+    remember(assertionId: string, expiresAt: number): Promise<boolean>;
+}
+/** The replay stores a config names. */
+export declare const replayStores: {
+    /** In this process's memory. Bounds nothing across replicas. */
+    memory(): () => AssertionReplayStore;
+    /**
+     * Redis. `connection` takes a client, a function answering one, or the NAME
+     * of a `@c9up/quasar` connection.
+     */
+    redis(options: {
+        connection: ReplayRedisResolver | string;
+        prefix?: string;
+    }): () => AssertionReplayStore;
+};
+//# sourceMappingURL=replay.d.ts.map

package/dist/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../src/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,oBAAoB;IACpC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,oBAAoB;;IAGhE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAWxE;AAED,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IACjC,8EAA8E;IAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,MAAM,MAAM,mBAAmB,GAC5B,iBAAiB,GACjB,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAClC,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,qBAAa,yBAA0B,YAAW,oBAAoB;;gBAKzD,MAAM,EAAE,mBAAmB,EAAE,OAAO,GAAE,kBAAuB;IAKnE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAwBxE;AAED,wCAAwC;AACxC,eAAO,MAAM,YAAY;IACxB,gEAAgE;cACtD,MAAM,oBAAoB;IAIpC;;;OAGG;mBACY;QACd,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAAC;QACzC,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,MAAM,oBAAoB;CAa9B,CAAC"}

package/dist/replay.js

@@ -0,0 +1,82 @@
+/**
+ * Refusing an assertion that has already been used.
+ *
+ * A SAML assertion is a bearer token: whoever holds it is who it says they
+ * are, until it expires. A signature does not change that, and neither does
+ * any condition on it — a response captured once and posted twice is valid
+ * both times. Remembering the id until the assertion expires is what makes the
+ * second time fail.
+ *
+ * The window is short, so what is stored stays small: an id is forgotten as
+ * soon as the assertion it names could no longer have been accepted anyway.
+ */
+import { quasarConnection } from "./quasar.js";
+/**
+ * Remembers in this process's memory.
+ *
+ * Correct while the application runs in one process, and only then: two
+ * replicas each keep their own table, so the same assertion is accepted once
+ * per replica. Reach for the Redis store the moment a second one exists.
+ */
+export class MemoryAssertionReplayStore {
+    #seen = new Map();
+    async remember(assertionId, expiresAt) {
+        const now = Math.floor(Date.now() / 1000);
+        // An opportunistic sweep, bounded by the map's own size: the window is
+        // minutes, so nothing accumulates.
+        for (const [id, expiry] of this.#seen) {
+            if (expiry <= now)
+                this.#seen.delete(id);
+        }
+        if (this.#seen.has(assertionId))
+            return false;
+        this.#seen.set(assertionId, expiresAt);
+        return true;
+    }
+}
+/**
+ * Remembers in Redis, so every replica refuses the assertion the first one
+ * accepted.
+ *
+ * `SET … NX` decides in one round trip, atomically on the server, which is
+ * what stops two concurrent posts of the same response from both winning.
+ */
+export class RedisAssertionReplayStore {
+    #source;
+    #prefix;
+    #resolved;
+    constructor(client, options = {}) {
+        this.#source = client;
+        this.#prefix = options.prefix ?? "transit:saml:assertion:";
+    }
+    async remember(assertionId, expiresAt) {
+        const client = await this.#client();
+        // The key outlives the assertion by a minute, so an assertion accepted
+        // at the edge of its window cannot be replayed just after it.
+        const ttl = Math.max(1, Math.ceil(expiresAt - Math.floor(Date.now() / 1000)) + 60);
+        const stored = await client.set(`${this.#prefix}${assertionId}`, "1", "EX", ttl, "NX");
+        return stored !== null && stored !== undefined;
+    }
+    #client() {
+        this.#resolved ??= Promise.resolve(typeof this.#source === "function" ? this.#source() : this.#source);
+        return this.#resolved;
+    }
+}
+/** The replay stores a config names. */
+export const replayStores = {
+    /** In this process's memory. Bounds nothing across replicas. */
+    memory() {
+        return () => new MemoryAssertionReplayStore();
+    },
+    /**
+     * Redis. `connection` takes a client, a function answering one, or the NAME
+     * of a `@c9up/quasar` connection.
+     */
+    redis(options) {
+        const client = typeof options.connection === "string"
+            ? () => quasarConnection(options.connection, ["set"], "the assertion replay store")
+            : options.connection;
+        return () => new RedisAssertionReplayStore(client, { prefix: options.prefix });
+    },
+};
+//# sourceMappingURL=replay.js.map

package/dist/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../src/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAc/C;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IAC7B,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,SAAiB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,uEAAuE;QACvE,mCAAmC;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,MAAM,IAAI,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACb,CAAC;CACD;AAiBD;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IAC5B,OAAO,CAAsB;IAC7B,OAAO,CAAS;IACzB,SAAS,CAAyC;IAElD,YAAY,MAA2B,EAAE,UAA8B,EAAE;QACxE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,SAAiB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CACzD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC9B,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,EAC/B,GAAG,EACH,IAAI,EACJ,GAAG,EACH,IAAI,CACJ,CAAC;QACF,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC;IAChD,CAAC;IAED,OAAO;QACN,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,CACjC,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAClE,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;CACD;AAED,wCAAwC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,gEAAgE;IAChE,MAAM;QACL,OAAO,GAAG,EAAE,CAAC,IAAI,0BAA0B,EAAE,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAGL;QACA,MAAM,MAAM,GACX,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YACrC,CAAC,CAAC,GAAG,EAAE,CACL,gBAAgB,CACf,OAAO,CAAC,UAAoB,EAC5B,CAAC,KAAK,CAAC,EACP,4BAA4B,CAC5B;YACH,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACvB,OAAO,GAAG,EAAE,CACX,IAAI,yBAAyB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;CACD,CAAC"}