@corti/sdk 1.0.0-alpha.1 → 1.0.0-rc

package/dist/cjs/custom/OAuthAuthProvider.d.ts

@@ -1,99 +0,0 @@
-import type * as Corti from "../api/index.js";
-import type { BaseClientOptions } from "../BaseClient.js";
-import * as core from "../core/index.js";
-import { CLIENT_ID_PARAM, CLIENT_SECRET_PARAM, CODE_PARAM, CODE_VERIFIER_PARAM, PASSWORD_PARAM, REDIRECT_URI_PARAM, USERNAME_PARAM } from "./utils/oauthAuthHelpers.js";
-/** Patch: Re-export for consumers; implementation shared with OAuthRopcAuthProvider, OAuthAuthCodeAuthProvider and OAuthPkceAuthProvider. */
-export { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, PASSWORD_REQUIRED_ERROR_MESSAGE, REDIRECT_URI_PARAM, USERNAME_PARAM, USERNAME_REQUIRED_ERROR_MESSAGE, } from "./utils/oauthAuthHelpers.js";
-declare const TOKEN_PARAM: "token";
-export declare class OAuthAuthProvider implements core.AuthProvider {
-    private readonly options;
-    /**
-     * Patch: Use CortiAuth (real token endpoint) instead of AuthClient (fake-token).
-     */
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: OAuthAuthProvider.Options & OAuthAuthProvider.ClientCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.ClientCredentials & BaseClientOptions>): boolean;
-    private clientIdSupplier;
-    private clientSecretSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}
-export declare class OAuthTokenOverrideAuthProvider implements core.AuthProvider {
-    private readonly authClient;
-    private readonly _tokenSupplier;
-    private readonly _clientIdSupplier;
-    private readonly _refreshAccessToken;
-    private accessToken;
-    private expiresAt;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    private _seedPromise;
-    constructor(options: OAuthAuthProvider.TokenOverride & BaseClientOptions);
-    static canCreate(options?: Partial<OAuthAuthProvider.TokenOverride & BaseClientOptions>): options is OAuthAuthProvider.TokenOverride & BaseClientOptions;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-}
-export declare namespace OAuthAuthProvider {
-    const AUTH_SCHEME: "OAuth";
-    /** Patch: Message extended to mention ROPC (clientId, username, password). */
-    const AUTH_CONFIG_ERROR_MESSAGE: string;
-    type ClientCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CLIENT_SECRET_PARAM]: core.Supplier<string>;
-    };
-    /**
-     * Patch: tokenType and expiresIn made optional — the provider only strictly needs accessToken.
-     * Mirrors AuthTokenResponse but relaxes the two required fields so custom refresh functions
-     * don't need to return fields the provider doesn't use.
-     */
-    type ExpectedTokenResponse = Omit<Corti.AuthTokenResponse, "tokenType" | "expiresIn"> & {
-        tokenType?: string;
-        expiresIn?: number;
-    };
-    /** Patch: Custom refresh function — sync or async, receives the last known refresh token. */
-    type RefreshAccessTokenFunction = (refreshToken?: string) => Promise<OAuthAuthProvider.ExpectedTokenResponse> | OAuthAuthProvider.ExpectedTokenResponse;
-    type TokenOverride = {
-        [TOKEN_PARAM]?: core.Supplier<string>;
-        /** Patch: Custom callback called to obtain/renew the access token. Takes priority over built-in clientId+refreshToken path. */
-        refreshAccessToken?: OAuthAuthProvider.RefreshAccessTokenFunction;
-        expiresIn?: number;
-        refreshToken?: string;
-        refreshExpiresIn?: number;
-        clientId?: core.Supplier<string>;
-        /** Patch: Pre-seeded token response from resolveClientOptions — avoids a second refreshAccessToken call on first API request. */
-        initialTokenResponse?: Promise<OAuthAuthProvider.ExpectedTokenResponse>;
-    };
-    /** Patch: ROPC grant credentials (clientId + username + password) */
-    type RopcCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [USERNAME_PARAM]: core.Supplier<string>;
-        [PASSWORD_PARAM]: core.Supplier<string>;
-    };
-    /** Patch: Authorization code credentials (clientId + clientSecret + code + redirectUri) */
-    type AuthCodeCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CLIENT_SECRET_PARAM]: core.Supplier<string>;
-        [CODE_PARAM]: core.Supplier<string>;
-        [REDIRECT_URI_PARAM]: core.Supplier<string>;
-    };
-    /** Patch: PKCE credentials (clientId + code + redirectUri; no clientSecret) */
-    type PkceCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CODE_PARAM]: core.Supplier<string>;
-        [REDIRECT_URI_PARAM]: core.Supplier<string>;
-        [CODE_VERIFIER_PARAM]?: core.Supplier<string>;
-    };
-    /** Patch: Include RopcCredentials, AuthCodeCredentials and PkceCredentials so CortiClient can use those auth flows. */
-    type AuthOptions = ClientCredentials | TokenOverride | RopcCredentials | AuthCodeCredentials | PkceCredentials;
-    type Options = BaseClientOptions & AuthOptions;
-    function createInstance(options: Options): core.AuthProvider;
-}

package/dist/cjs/custom/OAuthAuthProvider.js

@@ -1,290 +0,0 @@
-"use strict";
-// This file was auto-generated by Fern from our API Definition.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthTokenOverrideAuthProvider = exports.OAuthAuthProvider = exports.USERNAME_REQUIRED_ERROR_MESSAGE = exports.USERNAME_PARAM = exports.REDIRECT_URI_PARAM = exports.PASSWORD_REQUIRED_ERROR_MESSAGE = exports.PASSWORD_PARAM = exports.getExpiresAt = exports.CODE_VERIFIER_PARAM = exports.CODE_PARAM = exports.CLIENT_SECRET_REQUIRED_ERROR_MESSAGE = exports.CLIENT_SECRET_PARAM = exports.CLIENT_ID_REQUIRED_ERROR_MESSAGE = exports.CLIENT_ID_PARAM = exports.BUFFER_IN_MINUTES = void 0;
-const core = __importStar(require("../core/index.js"));
-const CortiAuth_js_1 = require("./CortiAuth.js");
-const OAuthAuthCodeAuthProvider_js_1 = require("./OAuthAuthCodeAuthProvider.js");
-const OAuthPkceAuthProvider_js_1 = require("./OAuthPkceAuthProvider.js");
-const OAuthRopcAuthProvider_js_1 = require("./OAuthRopcAuthProvider.js");
-const oauthAuthHelpers_js_1 = require("./utils/oauthAuthHelpers.js");
-const errors = __importStar(require("../errors/index.js"));
-/** Patch: Re-export for consumers; implementation shared with OAuthRopcAuthProvider, OAuthAuthCodeAuthProvider and OAuthPkceAuthProvider. */
-var oauthAuthHelpers_js_2 = require("./utils/oauthAuthHelpers.js");
-Object.defineProperty(exports, "BUFFER_IN_MINUTES", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.BUFFER_IN_MINUTES; } });
-Object.defineProperty(exports, "CLIENT_ID_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CLIENT_ID_PARAM; } });
-Object.defineProperty(exports, "CLIENT_ID_REQUIRED_ERROR_MESSAGE", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CLIENT_ID_REQUIRED_ERROR_MESSAGE; } });
-Object.defineProperty(exports, "CLIENT_SECRET_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CLIENT_SECRET_PARAM; } });
-Object.defineProperty(exports, "CLIENT_SECRET_REQUIRED_ERROR_MESSAGE", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CLIENT_SECRET_REQUIRED_ERROR_MESSAGE; } });
-Object.defineProperty(exports, "CODE_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CODE_PARAM; } });
-Object.defineProperty(exports, "CODE_VERIFIER_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.CODE_VERIFIER_PARAM; } });
-Object.defineProperty(exports, "getExpiresAt", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.getExpiresAt; } });
-Object.defineProperty(exports, "PASSWORD_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.PASSWORD_PARAM; } });
-Object.defineProperty(exports, "PASSWORD_REQUIRED_ERROR_MESSAGE", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.PASSWORD_REQUIRED_ERROR_MESSAGE; } });
-Object.defineProperty(exports, "REDIRECT_URI_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.REDIRECT_URI_PARAM; } });
-Object.defineProperty(exports, "USERNAME_PARAM", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.USERNAME_PARAM; } });
-Object.defineProperty(exports, "USERNAME_REQUIRED_ERROR_MESSAGE", { enumerable: true, get: function () { return oauthAuthHelpers_js_2.USERNAME_REQUIRED_ERROR_MESSAGE; } });
-const TOKEN_PARAM = "token";
-const TOKEN_PARAM_REQUIRED_ERROR_MESSAGE = `${TOKEN_PARAM} is required. Please provide it in options.`;
-class OAuthAuthProvider {
-    constructor(options) {
-        this.options = options;
-        /**
-         * Patch: Use CortiAuth (real token endpoint) instead of AuthClient (fake-token).
-         */
-        this.authClient = new CortiAuth_js_1.CortiAuth(options);
-        this.expiresAt = new Date();
-    }
-    static canCreate(options) {
-        return (options === null || options === void 0 ? void 0 : options[oauthAuthHelpers_js_1.CLIENT_ID_PARAM]) != null && (options === null || options === void 0 ? void 0 : options[oauthAuthHelpers_js_1.CLIENT_SECRET_PARAM]) != null;
-    }
-    clientIdSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.CLIENT_ID_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({
-                    message: oauthAuthHelpers_js_1.CLIENT_ID_REQUIRED_ERROR_MESSAGE,
-                });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    clientSecretSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.CLIENT_SECRET_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({
-                    message: oauthAuthHelpers_js_1.CLIENT_SECRET_REQUIRED_ERROR_MESSAGE,
-                });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const token = yield this.getToken({ endpointMetadata });
-            return {
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                },
-            };
-        });
-    }
-    getToken() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            if (this.accessToken && this.expiresAt > new Date()) {
-                return this.accessToken;
-            }
-            // If a refresh is already in progress, return the existing promise
-            if (this.refreshPromise != null) {
-                return this.refreshPromise;
-            }
-            return this.refresh({ endpointMetadata });
-        });
-    }
-    refresh() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
-                try {
-                    const clientId = yield this.clientIdSupplier({ endpointMetadata });
-                    const clientSecret = yield this.clientSecretSupplier({ endpointMetadata });
-                    const tokenResponse = clientId && this.storedRefreshToken && this.refreshExpiresAt && this.refreshExpiresAt > new Date()
-                        ? yield this.authClient.refreshToken({
-                            clientId,
-                            refreshToken: this.storedRefreshToken,
-                        })
-                        : yield this.authClient.getToken({ clientId, clientSecret });
-                    this.accessToken = tokenResponse.accessToken;
-                    this.expiresAt = (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES);
-                    if (tokenResponse.refreshToken) {
-                        this.storedRefreshToken = tokenResponse.refreshToken;
-                        this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                            ? (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-                            : undefined;
-                    }
-                    return this.accessToken;
-                }
-                finally {
-                    this.refreshPromise = undefined;
-                }
-            }))();
-            return this.refreshPromise;
-        });
-    }
-}
-exports.OAuthAuthProvider = OAuthAuthProvider;
-class OAuthTokenOverrideAuthProvider {
-    constructor(options) {
-        this._tokenSupplier = options[TOKEN_PARAM];
-        this._clientIdSupplier = options.clientId;
-        // Patch: store custom refresh callback
-        this._refreshAccessToken = options.refreshAccessToken;
-        this.expiresAt = options.expiresIn ? (0, oauthAuthHelpers_js_1.getExpiresAt)(options.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES) : undefined;
-        this.storedRefreshToken = options.refreshToken;
-        this.refreshExpiresAt = options.refreshExpiresIn
-            ? (0, oauthAuthHelpers_js_1.getExpiresAt)(options.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-            : undefined;
-        if (options.clientId && options.refreshToken) {
-            this.authClient = new CortiAuth_js_1.CortiAuth(options);
-        }
-        // Patch: pre-seed token from discovery promise so getAuthRequest doesn't call refreshAccessToken again
-        if (options.initialTokenResponse) {
-            this._seedPromise = options.initialTokenResponse
-                .then((resp) => {
-                this.accessToken = resp.accessToken;
-                this.expiresAt = resp.expiresIn ? (0, oauthAuthHelpers_js_1.getExpiresAt)(resp.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES) : undefined;
-                if (resp.refreshToken) {
-                    this.storedRefreshToken = resp.refreshToken;
-                    this.refreshExpiresAt = resp.refreshExpiresIn
-                        ? (0, oauthAuthHelpers_js_1.getExpiresAt)(resp.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-            })
-                .finally(() => {
-                this._seedPromise = undefined;
-            });
-        }
-    }
-    static canCreate(options) {
-        // Patch: either token or refreshAccessToken is sufficient
-        return (options === null || options === void 0 ? void 0 : options[TOKEN_PARAM]) != null || (options === null || options === void 0 ? void 0 : options.refreshAccessToken) != null;
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            // Patch: await seed promise so the initial token from resolveClientOptions is set before checking expiry
-            if (this._seedPromise) {
-                yield this._seedPromise;
-            }
-            const isExpiredOrAbsent = !this.accessToken || (this.expiresAt != null && this.expiresAt <= new Date());
-            // Patch: custom refreshAccessToken takes priority — call it when token is absent or expired
-            if (this._refreshAccessToken && isExpiredOrAbsent) {
-                const result = yield this._refreshAccessToken(this.storedRefreshToken);
-                this.accessToken = result.accessToken;
-                this.expiresAt = result.expiresIn ? (0, oauthAuthHelpers_js_1.getExpiresAt)(result.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES) : undefined;
-                if (result.refreshToken) {
-                    this.storedRefreshToken = result.refreshToken;
-                    this.refreshExpiresAt = result.refreshExpiresIn
-                        ? (0, oauthAuthHelpers_js_1.getExpiresAt)(result.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-            }
-            // Built-in: if access token is expired and we have a valid SDK refresh token, use it
-            if (this.expiresAt != null &&
-                this.expiresAt <= new Date() &&
-                this._clientIdSupplier &&
-                this.storedRefreshToken &&
-                this.refreshExpiresAt &&
-                this.refreshExpiresAt > new Date() &&
-                this.authClient) {
-                const clientId = yield core.EndpointSupplier.get(this._clientIdSupplier, { endpointMetadata });
-                const tokenResponse = yield this.authClient.refreshToken({
-                    clientId,
-                    refreshToken: this.storedRefreshToken,
-                });
-                this.accessToken = tokenResponse.accessToken;
-                this.expiresAt = (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES);
-                if (tokenResponse.refreshToken) {
-                    this.storedRefreshToken = tokenResponse.refreshToken;
-                    this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                        ? (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-            }
-            // Token not yet acquired — resolve from supplier (static token / initial value)
-            if (!this.accessToken) {
-                if (this._tokenSupplier == null) {
-                    throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
-                }
-                this.accessToken = yield core.EndpointSupplier.get(this._tokenSupplier, { endpointMetadata });
-            }
-            if (!this.accessToken) {
-                throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
-            }
-            return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-        });
-    }
-}
-exports.OAuthTokenOverrideAuthProvider = OAuthTokenOverrideAuthProvider;
-(function (OAuthAuthProvider) {
-    OAuthAuthProvider.AUTH_SCHEME = "OAuth";
-    /** Patch: Message extended to mention ROPC (clientId, username, password). */
-    OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE = `Insufficient options to create OAuthAuthProvider. Please provide '${oauthAuthHelpers_js_1.CLIENT_ID_PARAM}' and '${oauthAuthHelpers_js_1.CLIENT_SECRET_PARAM}', or ${TOKEN_PARAM}, or ROPC (${oauthAuthHelpers_js_1.CLIENT_ID_PARAM}, username, password).`;
-    function createInstance(options) {
-        if (OAuthTokenOverrideAuthProvider.canCreate(options)) {
-            return new OAuthTokenOverrideAuthProvider(options);
-        }
-        /** Patch: ROPC provider before client credentials so ROPC auth is used when username+password provided. */
-        if (OAuthRopcAuthProvider_js_1.OAuthRopcAuthProvider.canCreate(options)) {
-            return new OAuthRopcAuthProvider_js_1.OAuthRopcAuthProvider(options);
-        }
-        /** Patch: PKCE provider before auth code — both have clientId+code+redirectUri, but PKCE has no clientSecret. */
-        if (OAuthPkceAuthProvider_js_1.OAuthPkceAuthProvider.canCreate(options)) {
-            return new OAuthPkceAuthProvider_js_1.OAuthPkceAuthProvider(options);
-        }
-        /** Patch: Auth code provider before client credentials — both have clientId+clientSecret, code+redirectUri distinguishes auth code. */
-        if (OAuthAuthCodeAuthProvider_js_1.OAuthAuthCodeAuthProvider.canCreate(options)) {
-            return new OAuthAuthCodeAuthProvider_js_1.OAuthAuthCodeAuthProvider(options);
-        }
-        if (OAuthAuthProvider.canCreate(options)) {
-            return new OAuthAuthProvider(options);
-        }
-        /** Patch: No credentials provided — proxy/passthrough mode; requests are sent without an Authorization header. */
-        const partialOptions = options;
-        const hasNoCredentials = partialOptions[oauthAuthHelpers_js_1.CLIENT_ID_PARAM] == null &&
-            partialOptions[oauthAuthHelpers_js_1.CLIENT_SECRET_PARAM] == null &&
-            partialOptions[TOKEN_PARAM] == null &&
-            partialOptions.refreshAccessToken == null &&
-            partialOptions[oauthAuthHelpers_js_1.USERNAME_PARAM] == null;
-        if (hasNoCredentials) {
-            return new core.NoOpAuthProvider();
-        }
-        throw new errors.CortiError({
-            message: OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE,
-        });
-    }
-    OAuthAuthProvider.createInstance = createInstance;
-})(OAuthAuthProvider || (exports.OAuthAuthProvider = OAuthAuthProvider = {}));

package/dist/cjs/custom/OAuthPkceAuthProvider.d.ts

@@ -1,23 +0,0 @@
-import type { OAuthAuthProvider } from "../auth/OAuthAuthProvider.js";
-import type { BaseClientOptions } from "../BaseClient.js";
-import * as core from "../core/index.js";
-export declare class OAuthPkceAuthProvider implements core.AuthProvider {
-    private readonly options;
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: BaseClientOptions & OAuthAuthProvider.PkceCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.PkceCredentials & BaseClientOptions>): options is BaseClientOptions & OAuthAuthProvider.PkceCredentials;
-    private clientIdSupplier;
-    private codeSupplier;
-    private redirectUriSupplier;
-    private codeVerifierSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}

package/dist/cjs/custom/OAuthPkceAuthProvider.js

@@ -1,164 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthPkceAuthProvider = void 0;
-const core = __importStar(require("../core/index.js"));
-const errors = __importStar(require("../errors/index.js"));
-const CortiAuth_js_1 = require("./CortiAuth.js");
-const oauthAuthHelpers_js_1 = require("./utils/oauthAuthHelpers.js");
-class OAuthPkceAuthProvider {
-    constructor(options) {
-        this.options = options;
-        this.authClient = new CortiAuth_js_1.CortiAuth(options);
-        this.expiresAt = new Date();
-    }
-    static canCreate(options) {
-        const opts = options;
-        return ((opts === null || opts === void 0 ? void 0 : opts[oauthAuthHelpers_js_1.CLIENT_ID_PARAM]) != null &&
-            (opts === null || opts === void 0 ? void 0 : opts[oauthAuthHelpers_js_1.CLIENT_SECRET_PARAM]) == null &&
-            (opts === null || opts === void 0 ? void 0 : opts[oauthAuthHelpers_js_1.CODE_PARAM]) != null &&
-            (opts === null || opts === void 0 ? void 0 : opts[oauthAuthHelpers_js_1.REDIRECT_URI_PARAM]) != null);
-    }
-    clientIdSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.CLIENT_ID_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: oauthAuthHelpers_js_1.CLIENT_ID_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    codeSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.CODE_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: oauthAuthHelpers_js_1.CODE_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    redirectUriSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.REDIRECT_URI_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: oauthAuthHelpers_js_1.REDIRECT_URI_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    codeVerifierSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[oauthAuthHelpers_js_1.CODE_VERIFIER_PARAM];
-            if (supplier == null) {
-                return undefined;
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const token = yield this.getToken({ endpointMetadata });
-            return {
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                },
-            };
-        });
-    }
-    getToken() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            if (this.accessToken && this.expiresAt > new Date()) {
-                return this.accessToken;
-            }
-            if (this.refreshPromise != null) {
-                return this.refreshPromise;
-            }
-            return this.refresh({ endpointMetadata });
-        });
-    }
-    refresh() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
-                try {
-                    const clientId = yield this.clientIdSupplier({ endpointMetadata });
-                    let tokenResponse;
-                    if (clientId &&
-                        this.storedRefreshToken &&
-                        this.refreshExpiresAt &&
-                        this.refreshExpiresAt > new Date()) {
-                        tokenResponse = yield this.authClient.refreshToken({
-                            clientId,
-                            refreshToken: this.storedRefreshToken,
-                        });
-                    }
-                    else {
-                        const code = yield this.codeSupplier({ endpointMetadata });
-                        const redirectUri = yield this.redirectUriSupplier({ endpointMetadata });
-                        const codeVerifier = yield this.codeVerifierSupplier({ endpointMetadata });
-                        tokenResponse = yield this.authClient.getPkceFlowToken({
-                            clientId,
-                            code,
-                            redirectUri,
-                            codeVerifier,
-                        });
-                    }
-                    this.accessToken = tokenResponse.accessToken;
-                    this.expiresAt = (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.expiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES);
-                    if (tokenResponse.refreshToken) {
-                        this.storedRefreshToken = tokenResponse.refreshToken;
-                        this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                            ? (0, oauthAuthHelpers_js_1.getExpiresAt)(tokenResponse.refreshExpiresIn, oauthAuthHelpers_js_1.BUFFER_IN_MINUTES)
-                            : undefined;
-                    }
-                    return this.accessToken;
-                }
-                finally {
-                    this.refreshPromise = undefined;
-                }
-            }))();
-            return this.refreshPromise;
-        });
-    }
-}
-exports.OAuthPkceAuthProvider = OAuthPkceAuthProvider;

package/dist/cjs/custom/OAuthRopcAuthProvider.d.ts

@@ -1,22 +0,0 @@
-import type { OAuthAuthProvider } from "../auth/OAuthAuthProvider.js";
-import type { BaseClientOptions } from "../BaseClient.js";
-import * as core from "../core/index.js";
-export declare class OAuthRopcAuthProvider implements core.AuthProvider {
-    private readonly options;
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: BaseClientOptions & OAuthAuthProvider.RopcCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.RopcCredentials & BaseClientOptions>): options is BaseClientOptions & OAuthAuthProvider.RopcCredentials;
-    private clientIdSupplier;
-    private usernameSupplier;
-    private passwordSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}