@cloudauth/core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CloudAuth
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/adapter.d.ts

@@ -0,0 +1,20 @@
+import type { User, Account, Session, SessionWithUser, OAuthState, CreateUserInput, UpdateUserInput, CreateAccountInput, CreateSessionInput, UpdateSessionInput, CreateOAuthStateInput } from './types.js';
+export interface AuthAdapter {
+    createUser(data: CreateUserInput): Promise<User>;
+    getUserById(id: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    updateUser(id: string, data: UpdateUserInput): Promise<User>;
+    createAccount(data: CreateAccountInput): Promise<Account>;
+    getAccount(provider: string, providerAccountId: string): Promise<Account | null>;
+    getAccountsByUserId(userId: string): Promise<Account[]>;
+    linkAccount(userId: string, data: CreateAccountInput): Promise<Account>;
+    deleteAccount(accountId: string): Promise<void>;
+    createSession(data: CreateSessionInput): Promise<Session>;
+    getSessionByTokenHash(tokenHash: string): Promise<SessionWithUser | null>;
+    updateSession(id: string, data: UpdateSessionInput): Promise<Session>;
+    deleteSession(tokenHash: string): Promise<void>;
+    deleteExpiredSessions(): Promise<void>;
+    createOAuthState(data: CreateOAuthStateInput): Promise<void>;
+    consumeOAuthState(stateHash: string): Promise<OAuthState | null>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EACJ,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,WAAW;IAE1B,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC7C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACnD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAG5D,aAAa,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzD,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAChF,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACvD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACvE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAG/C,aAAa,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzD,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACzE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAGtC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;CACjE"}

package/dist/adapter.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":""}

package/dist/additional-fields.d.ts

@@ -0,0 +1,31 @@
+import type { User } from './types.js';
+export interface StringField {
+    type: 'string';
+    defaultValue?: string;
+    input?: boolean;
+}
+export interface BooleanField {
+    type: 'boolean';
+    defaultValue?: boolean;
+    input?: boolean;
+}
+export interface NumberField {
+    type: 'number';
+    defaultValue?: number;
+    input?: boolean;
+}
+export interface DateField {
+    type: 'date';
+    defaultValue?: Date;
+    input?: boolean;
+}
+export type AdditionalField = StringField | BooleanField | NumberField | DateField;
+export type AdditionalFieldsConfig = Record<string, AdditionalField>;
+export type InferFieldType<T extends AdditionalField> = T extends StringField ? string : T extends BooleanField ? boolean : T extends NumberField ? number : T extends DateField ? Date : unknown;
+export type InferAdditionalFields<T extends AdditionalFieldsConfig> = {
+    [K in keyof T]: InferFieldType<T[K]>;
+} & {};
+export interface InferTypes<TAdditional extends AdditionalFieldsConfig = Record<string, never>> {
+    User: User & InferAdditionalFields<TAdditional>;
+}
+//# sourceMappingURL=additional-fields.d.ts.map

package/dist/additional-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"additional-fields.d.ts","sourceRoot":"","sources":["../src/additional-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAItC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,CAAC,EAAE,IAAI,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;AAElF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;AAIpE,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,SAAS,WAAW,GACzE,MAAM,GACN,CAAC,SAAS,YAAY,GACpB,OAAO,GACP,CAAC,SAAS,WAAW,GACnB,MAAM,GACN,CAAC,SAAS,SAAS,GACjB,IAAI,GACJ,OAAO,CAAA;AAEjB,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,sBAAsB,IAAI;KACnE,CAAC,IAAI,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CACrC,GAAG,EAAE,CAAA;AAIN,MAAM,WAAW,UAAU,CAAC,WAAW,SAAS,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;IAC5F,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAA;CAChD"}

package/dist/additional-fields.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=additional-fields.js.map

package/dist/additional-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"additional-fields.js","sourceRoot":"","sources":["../src/additional-fields.ts"],"names":[],"mappings":""}

package/dist/auth.d.ts

@@ -0,0 +1,26 @@
+import type { AuthConfig } from './config.js';
+import type { SessionWithUser, User, Session } from './types.js';
+import type { HooksConfig } from './hooks.js';
+export interface AuthResponse {
+    session: Session;
+    user: User;
+    cookieHeader: string;
+}
+/**
+ * Generate the authorization URL to redirect the user to the provider.
+ */
+export declare function createAuthUrl(config: AuthConfig, providerId: string, _request?: Request): Promise<URL>;
+/**
+ * Handle the OAuth callback from the provider.
+ */
+export declare function handleCallback(config: AuthConfig, providerId: string, request: Request, hooks?: HooksConfig): Promise<AuthResponse>;
+/**
+ * Get the current session from a request.
+ * Validates the session cookie, checks expiry, and returns session with user.
+ */
+export declare function getSession(config: AuthConfig, request: Request): Promise<SessionWithUser | null>;
+/**
+ * Sign out a user by deleting their session and returning a cleared cookie.
+ */
+export declare function signOut(config: AuthConfig, request: Request, hooks?: HooksConfig): Promise<string>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAQhE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,IAAI,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,OAAO,GACjB,OAAO,CAAC,GAAG,CAAC,CA6Bd;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,CAAC,CA8JvB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAyCjC;AAED;;GAEG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAyCjB"}

package/dist/auth.js

@@ -0,0 +1,280 @@
+import { generateSessionToken, hashToken, generateCodeVerifier, generateCodeChallenge, } from './crypto.js';
+import { signCookie, verifyCookie, serializeCookie } from './cookies.js';
+import { InvalidStateError } from './errors.js';
+/**
+ * Generate the authorization URL to redirect the user to the provider.
+ */
+export async function createAuthUrl(config, providerId, _request) {
+    const provider = findProvider(config.providers, providerId);
+    const adapter = config.database;
+    const codeVerifier = generateCodeVerifier();
+    const state = generateSessionToken();
+    const stateHash = await hashToken(state);
+    const codeChallenge = await generateCodeChallenge(codeVerifier);
+    const callbackUrl = buildCallbackUrl(config, providerId);
+    const redirectUri = buildRedirectUri(config, providerId);
+    // Persist OAuth state for callback validation
+    await adapter.createOAuthState({
+        stateHash,
+        codeVerifier,
+        provider: providerId,
+        callbackUrl,
+        errorUrl: undefined,
+        expiresAt: new Date(Date.now() + 600_000), // 10 minute expiry
+    });
+    const authUrl = provider.authorizationUrl({
+        state,
+        codeVerifier: codeChallenge,
+        redirectUri,
+    });
+    return authUrl;
+}
+/**
+ * Handle the OAuth callback from the provider.
+ */
+export async function handleCallback(config, providerId, request, hooks) {
+    const provider = findProvider(config.providers, providerId);
+    const adapter = config.database;
+    const secret = config.security?.secret;
+    const sessionConfig = config.session ?? {};
+    const url = new URL(request.url);
+    const code = url.searchParams.get('code');
+    const state = url.searchParams.get('state');
+    const error = url.searchParams.get('error');
+    // Handle provider error (user denied consent, etc.)
+    if (error) {
+        throw new Error(`Provider returned error: ${error}`);
+    }
+    if (!code || !state) {
+        throw new InvalidStateError('Missing code or state parameter');
+    }
+    // Validate and consume OAuth state (single-use)
+    const stateHash = await hashToken(state);
+    const storedState = await adapter.consumeOAuthState(stateHash);
+    if (!storedState) {
+        throw new InvalidStateError();
+    }
+    // Exchange code for tokens
+    const redirectUri = buildRedirectUri(config, providerId);
+    const tokenSet = await provider.exchangeCode({
+        code,
+        codeVerifier: storedState.codeVerifier,
+        redirectUri,
+    });
+    // Fetch provider profile
+    const profile = await provider.getProfile(tokenSet);
+    // Run beforeSignIn hook (if configured)
+    if (hooks?.beforeSignIn) {
+        await hooks.beforeSignIn({ adapter, profile, request });
+    }
+    // Find or create user
+    const existingAccount = await adapter.getAccount(providerId, profile.providerAccountId);
+    let user;
+    if (existingAccount) {
+        // Existing account — get the user
+        const existingUser = await adapter.getUserById(existingAccount.userId);
+        if (!existingUser) {
+            throw new Error('User not found for existing account');
+        }
+        user = existingUser;
+    }
+    else {
+        // New account — find or create user by email
+        const existingUser = profile.email ? await adapter.getUserByEmail(profile.email) : null;
+        if (existingUser) {
+            user = existingUser;
+            // Link the new provider account
+            const linkedAccount = await adapter.linkAccount(user.id, {
+                userId: user.id,
+                provider: providerId,
+                providerAccountId: profile.providerAccountId,
+                accessToken: config.security?.storeProviderTokens ? tokenSet.accessToken : null,
+                refreshToken: config.security?.storeProviderTokens ? (tokenSet.refreshToken ?? null) : null,
+                idToken: config.security?.storeProviderTokens ? (tokenSet.idToken ?? null) : null,
+                scope: tokenSet.scope ?? null,
+                tokenType: tokenSet.tokenType ?? null,
+                expiresAt: tokenSet.expiresAt ? new Date(Date.now() + tokenSet.expiresAt * 1000) : null,
+            });
+            if (hooks?.onAccountLinked) {
+                await hooks.onAccountLinked({ adapter, user, account: linkedAccount });
+            }
+        }
+        else {
+            // Create new user
+            user = await adapter.createUser({
+                email: profile.email ?? null,
+                emailVerified: profile.emailVerified ?? false,
+                name: profile.name ?? null,
+                image: profile.image ?? null,
+            });
+            // Create account
+            await adapter.createAccount({
+                userId: user.id,
+                provider: providerId,
+                providerAccountId: profile.providerAccountId,
+                accessToken: config.security?.storeProviderTokens ? tokenSet.accessToken : null,
+                refreshToken: config.security?.storeProviderTokens ? (tokenSet.refreshToken ?? null) : null,
+                idToken: config.security?.storeProviderTokens ? (tokenSet.idToken ?? null) : null,
+                scope: tokenSet.scope ?? null,
+                tokenType: tokenSet.tokenType ?? null,
+                expiresAt: tokenSet.expiresAt ? new Date(Date.now() + tokenSet.expiresAt * 1000) : null,
+            });
+            if (hooks?.onUserCreated) {
+                await hooks.onUserCreated({ adapter, user });
+            }
+        }
+    }
+    // Run afterSignIn hook
+    if (hooks?.afterSignIn) {
+        const fakeSession = {
+            id: '',
+            userId: user.id,
+            tokenHash: '',
+            expiresAt: new Date(),
+            ipAddress: null,
+            userAgent: null,
+            createdAt: new Date(),
+            updatedAt: new Date(),
+        };
+        await hooks.afterSignIn({ adapter, session: fakeSession, user, profile });
+    }
+    // Create session
+    const sessionToken = generateSessionToken();
+    const tokenHash = await hashToken(sessionToken);
+    const expiresInMs = (sessionConfig.expiresIn ?? 30 * 24 * 60 * 60) * 1000;
+    if (hooks?.beforeSessionCreated) {
+        await hooks.beforeSessionCreated({ adapter, user });
+    }
+    const session = await adapter.createSession({
+        userId: user.id,
+        tokenHash,
+        expiresAt: new Date(Date.now() + expiresInMs),
+        ipAddress: request.headers.get('x-forwarded-for') ?? request.headers.get('x-real-ip') ?? null,
+        userAgent: request.headers.get('user-agent') ?? null,
+    });
+    if (hooks?.afterSessionCreated) {
+        await hooks.afterSessionCreated({ adapter, session, user });
+    }
+    // Sign the session cookie
+    const cookieName = sessionConfig.cookieName ?? 'cloud_auth_session';
+    const cookieSecret = secret;
+    if (!cookieSecret) {
+        throw new Error('cloudAuth: security.secret is required for cookie signing');
+    }
+    const signedToken = await signCookie(sessionToken, cookieSecret);
+    const cookieHeader = serializeCookie(cookieName, signedToken, {
+        maxAge: sessionConfig.expiresIn ?? 30 * 24 * 60 * 60,
+        path: '/',
+        secure: sessionConfig.secure ?? true,
+        httpOnly: sessionConfig.httpOnly ?? true,
+        sameSite: sessionConfig.sameSite ?? 'lax',
+    });
+    return { session, user, cookieHeader };
+}
+/**
+ * Get the current session from a request.
+ * Validates the session cookie, checks expiry, and returns session with user.
+ */
+export async function getSession(config, request) {
+    const adapter = config.database;
+    const secret = config.security?.secret;
+    const sessionConfig = config.session ?? {};
+    const cookieName = sessionConfig.cookieName ?? 'cloud_auth_session';
+    if (!secret) {
+        throw new Error('cloudAuth: security.secret is required');
+    }
+    const cookieHeader = request.headers.get('cookie');
+    if (!cookieHeader)
+        return null;
+    const cookies = parseCookies(cookieHeader);
+    const signedToken = cookies[cookieName];
+    if (!signedToken)
+        return null;
+    const token = await verifyCookie(signedToken, secret);
+    if (!token)
+        return null;
+    const tokenHash = await hashToken(token);
+    const sessionWithUser = await adapter.getSessionByTokenHash(tokenHash);
+    if (!sessionWithUser)
+        return null;
+    // Check expiry
+    if (sessionWithUser.session.expiresAt < new Date()) {
+        await adapter.deleteSession(tokenHash);
+        return null;
+    }
+    // Rolling expiration
+    const updateAge = sessionConfig.updateAge;
+    if (updateAge && sessionWithUser.session.expiresAt.getTime() - Date.now() < updateAge * 1000) {
+        const newExpiresAt = new Date(Date.now() + (sessionConfig.expiresIn ?? 30 * 24 * 60 * 60) * 1000);
+        await adapter.updateSession(sessionWithUser.session.id, { expiresAt: newExpiresAt });
+        sessionWithUser.session.expiresAt = newExpiresAt;
+    }
+    return sessionWithUser;
+}
+/**
+ * Sign out a user by deleting their session and returning a cleared cookie.
+ */
+export async function signOut(config, request, hooks) {
+    const adapter = config.database;
+    const secret = config.security?.secret;
+    const sessionConfig = config.session ?? {};
+    const cookieName = sessionConfig.cookieName ?? 'cloud_auth_session';
+    if (!secret) {
+        throw new Error('cloudAuth: security.secret is required');
+    }
+    const cookieHeader = request.headers.get('cookie');
+    if (cookieHeader) {
+        const cookies = parseCookies(cookieHeader);
+        const signedToken = cookies[cookieName];
+        if (signedToken) {
+            const token = await verifyCookie(signedToken, secret);
+            if (token) {
+                const tokenHash = await hashToken(token);
+                const sessionWithUser = await adapter.getSessionByTokenHash(tokenHash);
+                if (sessionWithUser && hooks?.beforeLogout) {
+                    await hooks.beforeLogout({ adapter, session: sessionWithUser.session });
+                }
+                await adapter.deleteSession(tokenHash);
+                if (sessionWithUser && hooks?.afterLogout) {
+                    await hooks.afterLogout({ adapter, session: sessionWithUser.session });
+                }
+            }
+        }
+    }
+    return serializeCookie(cookieName, '', {
+        maxAge: 0,
+        path: '/',
+        secure: sessionConfig.secure ?? true,
+        httpOnly: sessionConfig.httpOnly ?? true,
+        sameSite: sessionConfig.sameSite ?? 'lax',
+    });
+}
+// --- Internal helpers ---
+function findProvider(providers, id) {
+    const provider = providers.find((p) => p.id === id);
+    if (!provider) {
+        throw new Error(`Provider "${id}" not found`);
+    }
+    return provider;
+}
+function buildCallbackUrl(config, providerId) {
+    const base = config.baseURL.replace(/\/+$/, '');
+    return `${base}/auth/${providerId}/callback`;
+}
+function buildRedirectUri(config, providerId) {
+    return buildCallbackUrl(config, providerId);
+}
+function parseCookies(header) {
+    const result = {};
+    for (const pair of header.split(';')) {
+        const idx = pair.indexOf('=');
+        if (idx === -1)
+            continue;
+        const name = pair.slice(0, idx).trim();
+        const value = pair.slice(idx + 1).trim();
+        if (name)
+            result[decodeURIComponent(name)] = decodeURIComponent(value);
+    }
+    return result;
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAQ/C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,UAAkB,EAClB,QAAkB;IAElB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;IAE/B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAE/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAExD,8CAA8C;IAC9C,MAAM,OAAO,CAAC,gBAAgB,CAAC;QAC7B,SAAS;QACT,YAAY;QACZ,QAAQ,EAAE,UAAU;QACpB,WAAW;QACX,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,mBAAmB;KAC/D,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACxC,KAAK;QACL,YAAY,EAAE,aAAa;QAC3B,WAAW;KACZ,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,UAAkB,EAClB,OAAgB,EAChB,KAAmB;IAEnB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAA;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAE1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAE3C,oDAAoD;IACpD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,CAAC,CAAA;IAChE,CAAC;IAED,gDAAgD;IAChD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAE9D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,iBAAiB,EAAE,CAAA;IAC/B,CAAC;IAED,2BAA2B;IAC3B,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;QAC3C,IAAI;QACJ,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,WAAW;KACZ,CAAC,CAAA;IAEF,yBAAyB;IACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAEnD,wCAAwC;IACxC,IAAI,KAAK,EAAE,YAAY,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,sBAAsB;IACtB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvF,IAAI,IAAU,CAAA;IAEd,IAAI,eAAe,EAAE,CAAC;QACpB,kCAAkC;QAClC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QACtE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,GAAG,YAAY,CAAA;IACrB,CAAC;SAAM,CAAC;QACN,6CAA6C;QAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAEvF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,GAAG,YAAY,CAAA;YACnB,gCAAgC;YAChC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE;gBACvD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,UAAU;gBACpB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBAC/E,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3F,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACjF,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;aACxF,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE,eAAe,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,kBAAkB;YAClB,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;gBAC5B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;gBAC7C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;aAC7B,CAAC,CAAA;YAEF,iBAAiB;YACjB,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,UAAU;gBACpB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBAC/E,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3F,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACjF,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;aACxF,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE,aAAa,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG;YAClB,EAAE,EAAE,EAAE;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAA;QACD,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,iBAAiB;IACjB,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAA;IAEzE,IAAI,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC7C,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI;QAC7F,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI;KACrD,CAAC,CAAA;IAEF,IAAI,KAAK,EAAE,mBAAmB,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,0BAA0B;IAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,IAAI,oBAAoB,CAAA;IACnE,MAAM,YAAY,GAAG,MAAM,CAAA;IAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE;QAC5D,MAAM,EAAE,aAAa,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;QACpD,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,IAAI;QACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,IAAI;QACxC,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,KAAK;KAC1C,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAkB,EAClB,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAA;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,IAAI,oBAAoB,CAAA;IAEnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAClD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAA;IAE9B,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACvC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAE7B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACtE,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAA;IAEjC,eAAe;IACf,IAAI,eAAe,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,qBAAqB;IACrB,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAA;IACzC,IAAI,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC;QAC7F,MAAM,YAAY,GAAG,IAAI,IAAI,CAC3B,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CACnE,CAAA;QACD,MAAM,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;QACpF,eAAe,CAAC,OAAO,CAAC,SAAS,GAAG,YAAY,CAAA;IAClD,CAAC;IAED,OAAO,eAAe,CAAA;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAkB,EAClB,OAAgB,EAChB,KAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAA;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,IAAI,oBAAoB,CAAA;IAEnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;QAEvC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACrD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;gBACxC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAA;gBAEtE,IAAI,eAAe,IAAI,KAAK,EAAE,YAAY,EAAE,CAAC;oBAC3C,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzE,CAAC;gBAED,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;gBAEtC,IAAI,eAAe,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;oBAC1C,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE;QACrC,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,IAAI;QACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,IAAI;QACxC,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,KAAK;KAC1C,CAAC,CAAA;AACJ,CAAC;AAED,2BAA2B;AAE3B,SAAS,YAAY,CAAC,SAAyB,EAAE,EAAU;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAkB,EAAE,UAAkB;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/C,OAAO,GAAG,IAAI,SAAS,UAAU,WAAW,CAAA;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAkB,EAAE,UAAkB;IAC9D,OAAO,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAQ;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACxC,IAAI,IAAI;YAAE,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,55 @@
+import type { AuthProvider } from './provider.js';
+import type { AuthAdapter } from './adapter.js';
+import type { AdditionalFieldsConfig } from './additional-fields.js';
+import type { HooksConfig } from './hooks.js';
+export interface SessionConfig {
+    cookieName?: string;
+    expiresIn?: number;
+    updateAge?: number;
+    sameSite?: 'lax' | 'strict' | 'none';
+    secure?: boolean;
+    httpOnly?: boolean;
+}
+export interface UserConfig {
+    additionalFields?: AdditionalFieldsConfig;
+    mapProfileToUser?: (profile: import('./types.js').ProviderProfile) => Promise<Record<string, unknown>>;
+}
+export interface AccountLinkingConfig {
+    enabled?: boolean;
+    trustedProviders?: string[];
+    requireVerifiedEmail?: boolean;
+    providerTrust?: Record<string, 'high' | 'medium' | 'low'>;
+}
+export interface SecurityConfig {
+    storeProviderTokens?: boolean;
+    encryptProviderTokens?: boolean;
+    pkce?: boolean;
+    secret?: string;
+    providerHttp?: {
+        timeout?: number;
+        retries?: number;
+        retryDelay?: number;
+    };
+}
+export interface AuthConfig {
+    appName: string;
+    baseURL: string;
+    trustedOrigins?: string[];
+    providers: AuthProvider[];
+    database: AuthAdapter;
+    session?: SessionConfig;
+    user?: UserConfig;
+    accountLinking?: AccountLinkingConfig;
+    security?: SecurityConfig;
+    hooks?: HooksConfig;
+}
+export interface CloudAuthInstance {
+    $Infer: {
+        User: import('./types.js').User;
+    };
+    createAuthUrl(providerId: string, request?: Request): Promise<URL>;
+    handleCallback(providerId: string, request: Request): Promise<import('./auth.js').AuthResponse>;
+    getSession(request: Request): Promise<import('./types.js').SessionWithUser | null>;
+    signOut(request: Request): Promise<string>;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IACzC,gBAAgB,CAAC,EAAE,CACjB,OAAO,EAAE,OAAO,YAAY,EAAE,eAAe,KAC1C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,cAAc;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,cAAc,CAAC,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE;QACN,IAAI,EAAE,OAAO,YAAY,EAAE,IAAI,CAAA;KAChC,CAAA;IACD,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAClE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,WAAW,EAAE,YAAY,CAAC,CAAA;IAC/F,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,YAAY,EAAE,eAAe,GAAG,IAAI,CAAC,CAAA;IAClF,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC3C"}

package/dist/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":""}

package/dist/cookies.d.ts

@@ -0,0 +1,29 @@
+export interface CookieOptions {
+    maxAge?: number;
+    expires?: Date;
+    path?: string;
+    domain?: string;
+    secure?: boolean;
+    httpOnly?: boolean;
+    sameSite?: 'lax' | 'strict' | 'none';
+}
+/**
+ * Serialize a cookie name-value pair into a Set-Cookie header string.
+ */
+export declare function serializeCookie(name: string, value: string, options?: CookieOptions): string;
+/**
+ * Parse a Cookie header string into a key-value record.
+ * Ignores known cookie attribute names (Path, Domain, Secure, etc.).
+ */
+export declare function parseCookie(header: string): Record<string, string>;
+/**
+ * Sign a cookie value using HMAC-SHA256.
+ * Returns a string in the format: `value.base64url-signature`.
+ */
+export declare function signCookie(value: string, secret: string): Promise<string>;
+/**
+ * Verify a signed cookie value.
+ * Returns the original value if the signature is valid, or null if tampered.
+ */
+export declare function verifyCookie(signed: string, secret: string): Promise<string | null>;
+//# sourceMappingURL=cookies.d.ts.map

package/dist/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../src/cookies.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;CACrC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CA0B5F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4BlE;AAoBD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ/E;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASzF"}

package/dist/cookies.js

@@ -0,0 +1,98 @@
+import { constantTimeEqual } from './crypto.js';
+/**
+ * Serialize a cookie name-value pair into a Set-Cookie header string.
+ */
+export function serializeCookie(name, value, options) {
+    let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`;
+    if (options?.maxAge !== undefined) {
+        cookie += `; Max-Age=${String(options.maxAge)}`;
+    }
+    if (options?.expires) {
+        cookie += `; Expires=${options.expires.toUTCString()}`;
+    }
+    if (options?.path) {
+        cookie += `; Path=${options.path}`;
+    }
+    if (options?.domain) {
+        cookie += `; Domain=${options.domain}`;
+    }
+    if (options?.secure) {
+        cookie += `; Secure`;
+    }
+    if (options?.httpOnly) {
+        cookie += `; HttpOnly`;
+    }
+    if (options?.sameSite) {
+        cookie += `; SameSite=${options.sameSite}`;
+    }
+    return cookie;
+}
+/**
+ * Parse a Cookie header string into a key-value record.
+ * Ignores known cookie attribute names (Path, Domain, Secure, etc.).
+ */
+export function parseCookie(header) {
+    const result = {};
+    const knownAttributes = new Set([
+        'path',
+        'domain',
+        'secure',
+        'httponly',
+        'samesite',
+        'max-age',
+        'expires',
+    ]);
+    for (const pair of header.split(';')) {
+        const separatorIndex = pair.indexOf('=');
+        if (separatorIndex === -1)
+            continue;
+        const rawName = pair.slice(0, separatorIndex).trim();
+        const rawValue = pair.slice(separatorIndex + 1).trim();
+        if (!rawName)
+            continue;
+        const name = decodeURIComponent(rawName);
+        // Skip known cookie attribute names
+        if (knownAttributes.has(name.toLowerCase()))
+            continue;
+        result[name] = decodeURIComponent(rawValue);
+    }
+    return result;
+}
+// Cache HMAC keys per secret to avoid re-importing on every sign/verify
+const hmacKeyCache = new Map();
+async function getHmacKey(secret) {
+    const cached = hmacKeyCache.get(secret);
+    if (cached)
+        return cached;
+    const keyPromise = crypto.subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign', 'verify']);
+    hmacKeyCache.set(secret, keyPromise);
+    return keyPromise;
+}
+/**
+ * Sign a cookie value using HMAC-SHA256.
+ * Returns a string in the format: `value.base64url-signature`.
+ */
+export async function signCookie(value, secret) {
+    const key = await getHmacKey(secret);
+    const signature = await crypto.subtle.sign('HMAC', key, new TextEncoder().encode(value));
+    const encoded = btoa(String.fromCharCode(...new Uint8Array(signature)))
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+    return `${value}.${encoded}`;
+}
+/**
+ * Verify a signed cookie value.
+ * Returns the original value if the signature is valid, or null if tampered.
+ */
+export async function verifyCookie(signed, secret) {
+    const lastDot = signed.lastIndexOf('.');
+    if (lastDot === -1)
+        return null;
+    const value = signed.slice(0, lastDot);
+    if (!value)
+        return null;
+    const expected = await signCookie(value, secret);
+    return constantTimeEqual(signed, expected) ? value : null;
+}
+//# sourceMappingURL=cookies.js.map

package/dist/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../src/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAY/C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,OAAuB;IAClF,IAAI,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;IAEvE,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA;IACjD,CAAC;IACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAA;IACpC,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,OAAO,CAAC,MAAM,EAAE,CAAA;IACxC,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAA;IACtB,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAA;IACxB,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAA;IAC5C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;QAC9B,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,UAAU;QACV,SAAS;QACT,SAAS;KACV,CAAC,CAAA;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,cAAc,KAAK,CAAC,CAAC;YAAE,SAAQ;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE,CAAA;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,IAAI,CAAC,OAAO;YAAE,SAAQ;QAEtB,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACxC,oCAAoC;QACpC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAQ;QAErD,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC7C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAA;AAE1D,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAA;IACD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpC,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,MAAc;IAC5D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACrB,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE,CAAA;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAChD,OAAO,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3D,CAAC"}