@cloudflare/workers-oauth-provider 0.0.4 → 0.0.5

package/dist/oauth-provider.js

@@ -433,6 +433,9 @@ var OAuthProviderImpl = class {
     if (redirectUri && !clientInfo.redirectUris.includes(redirectUri)) {
       return this.createErrorResponse("invalid_grant", "Invalid redirect URI");
     }
+    if (!isPkceEnabled && codeVerifier) {
+      return this.createErrorResponse("invalid_request", "code_verifier provided for a flow that did not use PKCE");
+    }
     if (isPkceEnabled) {
       if (!codeVerifier) {
         return this.createErrorResponse("invalid_request", "code_verifier is required for PKCE");
@@ -1071,6 +1074,16 @@ var OAuthHelpersImpl = class {
     if (responseType === "token" && !this.provider.options.allowImplicitFlow) {
       throw new Error("The implicit grant flow is not enabled for this provider");
     }
+    if (clientId) {
+      const clientInfo = await this.lookupClient(clientId);
+      if (clientInfo && redirectUri) {
+        if (!clientInfo.redirectUris.includes(redirectUri)) {
+          throw new Error(
+            `Invalid redirect URI. The redirect URI provided does not match any registered URI for this client.`
+          );
+        }
+      }
+    }
     return {
       responseType,
       clientId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/workers-oauth-provider",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "OAuth provider for Cloudflare Workers",
   "main": "dist/oauth-provider.js",
   "types": "dist/oauth-provider.d.ts",
@@ -13,14 +13,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "build": "tsup",
-    "build:watch": "tsup --watch",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "prepublishOnly": "npm run build",
-    "prettier": "prettier -w ."
-  },
   "dependencies": {
     "@cloudflare/workers-types": "^4.20250311.0"
   },
@@ -29,5 +21,12 @@
     "tsup": "^8.4.0",
     "typescript": "^5.8.2",
     "vitest": "^3.0.8"
+  },
+  "scripts": {
+    "build": "tsup",
+    "build:watch": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prettier": "prettier -w ."
   }
-}
+}