@corvushold/guard-sdk 0.16.0 → 0.17.0

package/dist/index.cjs

@@ -279,7 +279,7 @@ var HttpClient = class {
 
 // package.json
 var package_default = {
-  version: "0.16.0"};
+  version: "0.17.0"};
 
 // src/client.ts
 function isTenantSelectionRequired(data) {
@@ -1103,6 +1103,47 @@ var GuardClient = class {
   async getOAuth2Metadata() {
     return this.request("/.well-known/oauth-authorization-server", { method: "GET" });
   }
+  /**
+   * Exchange an OAuth2 authorization code for tokens (Authorization Code + PKCE).
+   */
+  async exchangeOAuth2Code(input) {
+    const code = input.code?.trim();
+    const clientID = input.client_id?.trim();
+    const redirectURI = input.redirect_uri?.trim();
+    const codeVerifier = input.code_verifier?.trim();
+    if (!code) throw new Error("code is required");
+    if (!clientID) throw new Error("client_id is required");
+    if (!redirectURI) throw new Error("redirect_uri is required");
+    if (!codeVerifier) throw new Error("code_verifier is required");
+    const body = new URLSearchParams();
+    body.set("grant_type", "authorization_code");
+    body.set("code", code);
+    body.set("client_id", clientID);
+    body.set("redirect_uri", redirectURI);
+    body.set("code_verifier", codeVerifier);
+    const res = await this.request("/oauth/token", {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: body.toString()
+    });
+    if (res.meta.status >= 200 && res.meta.status < 300) this.persistTokensFrom(res.data);
+    return res;
+  }
+  /**
+   * Revoke an OAuth2 token (RFC7009). Server returns 200 for unknown tokens as well.
+   */
+  async revokeOAuth2Token(input) {
+    const token = input.token?.trim();
+    if (!token) throw new Error("token is required");
+    const body = new URLSearchParams();
+    body.set("token", token);
+    if (input.token_type_hint) body.set("token_type_hint", input.token_type_hint);
+    return this.request("/oauth/revoke", {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: body.toString()
+    });
+  }
   /**
    * Static helper to discover OAuth2 metadata from any Guard API base URL.
    * Useful for auto-configuration before creating a GuardClient instance.