@crvouga/mockingbird-service-oauth 1.2.0 → 1.3.0

package/dist/cli.js

@@ -3,8 +3,8 @@ import {
   runCli,
   serveCommand,
   serveTarget
-} from "./chunk-U4WWQUOX.js";
-import "./chunk-XUUSJ73W.js";
+} from "./chunk-MKBPAVYU.js";
+import "./chunk-WHI7Y2UA.js";
 
 // src/cli.ts
 var code = await runCli(

package/dist/index.d.ts

@@ -839,6 +839,16 @@ type NotificationDelivery = {
     status?: number;
     error?: string;
 };
+/** What one client sees for one account: see `OAuthAPI.grant`. */
+type GrantView = {
+    subject: string;
+    granted: boolean;
+    scopes: string[];
+    emailChoice: "share" | "hide" | null;
+    email: string;
+    isPrivateEmail: boolean;
+    userDisclosed: boolean;
+};
 
 /**
  * The slice of OpenAPI 3.1 (and JSON Schema 2020-12) Mockingbird understands.
@@ -1119,6 +1129,16 @@ declare class OAuthAPI {
     private notify;
     /** Drops one client's grant for an account: consent, identity, first-use disclosure, codes, tokens. */
     private forget;
+    /**
+     * What `clientId` sees for `accountId` (a test control mirroring private provider state), or
+     * `null` for an unknown client or account. For a client that never authorized the account,
+     * `subject` is the id token `sub` it would receive and `email` the real address.
+     */
+    grant(clientId: string, accountId: string): Promise<GrantView | null>;
+    /** The grant view of every account that has authorized `clientId`, oldest account first. */
+    grants(clientId: string): Promise<(GrantView & {
+        accountId: string;
+    })[] | null>;
     private paths;
     private supportedScopes;
     private identityKey;
@@ -1140,4 +1160,4 @@ declare class OAuthAPI {
 }
 
 export { OAUTH_PRESETS, OAUTH_SCENARIOS, OAuthAPI, createMultiRuntime, createRuntime, document, operationIds, supportedOperationIds };
-export type { Account, AppleNotificationType, BehaviorEvent, BehaviorInput, Client, EdgeCase, NotificationDelivery, OAuthAPIOptions, OAuthBehavior, OAuthMount, OAuthMultiRuntime, OAuthMultiRuntimeOptions, OAuthRuntime, OAuthRuntimeOptions, OAuthScenario, Provider };
+export type { Account, AppleNotificationType, BehaviorEvent, BehaviorInput, Client, EdgeCase, GrantView, NotificationDelivery, OAuthAPIOptions, OAuthBehavior, OAuthMount, OAuthMultiRuntime, OAuthMultiRuntimeOptions, OAuthRuntime, OAuthRuntimeOptions, OAuthScenario, Provider };

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   document,
   operationIds,
   supportedOperationIds
-} from "./chunk-XUUSJ73W.js";
+} from "./chunk-WHI7Y2UA.js";
 export {
   OAUTH_PRESETS,
   OAUTH_SCENARIOS,

package/dist/server.d.ts

@@ -1378,6 +1378,16 @@ type NotificationDelivery = {
     status?: number;
     error?: string;
 };
+/** What one client sees for one account: see `OAuthAPI.grant`. */
+type GrantView = {
+    subject: string;
+    granted: boolean;
+    scopes: string[];
+    emailChoice: "share" | "hide" | null;
+    email: string;
+    isPrivateEmail: boolean;
+    userDisclosed: boolean;
+};
 
 type OAuthAPIOptions = APIOptions & {
     /** Browser Fetch forbids Cookie/Set-Cookie; local transports may explicitly remap them. */
@@ -1455,6 +1465,16 @@ declare class OAuthAPI {
     private notify;
     /** Drops one client's grant for an account: consent, identity, first-use disclosure, codes, tokens. */
     private forget;
+    /**
+     * What `clientId` sees for `accountId` (a test control mirroring private provider state), or
+     * `null` for an unknown client or account. For a client that never authorized the account,
+     * `subject` is the id token `sub` it would receive and `email` the real address.
+     */
+    grant(clientId: string, accountId: string): Promise<GrantView | null>;
+    /** The grant view of every account that has authorized `clientId`, oldest account first. */
+    grants(clientId: string): Promise<(GrantView & {
+        accountId: string;
+    })[] | null>;
     private paths;
     private supportedScopes;
     private identityKey;

package/dist/server.js

@@ -3,8 +3,8 @@ import {
   createMultiServer,
   createServer,
   serveTarget
-} from "./chunk-U4WWQUOX.js";
-import "./chunk-XUUSJ73W.js";
+} from "./chunk-MKBPAVYU.js";
+import "./chunk-WHI7Y2UA.js";
 export {
   DEFAULT_PORT,
   createMultiServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crvouga/mockingbird-service-oauth",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Portable social-login mock with Google, Apple, Microsoft, GitHub and generic OIDC profiles, private relay identities, reproducible edge cases, signed tokens and an accessible UI.",
   "license": "MIT",
   "type": "module",