@dainprotocol/oauth2-token-manager 0.1.0 → 0.1.1

package/dist/index.d.cts

@@ -106,11 +106,13 @@ interface ProfileBasedTokenOptions {
 }
 interface StorageAdapter {
     createSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
+    getOrCreateSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
     getSystem(id: string): Promise<System | null>;
     updateSystem(id: string, system: Partial<System>): Promise<System>;
     deleteSystem(id: string): Promise<void>;
     listSystems(): Promise<System[]>;
     createScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
+    getOrCreateScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
     getScope(id: string): Promise<Scope | null>;
     getScopesBySystem(systemId: string): Promise<Scope[]>;
     updateScope(id: string, scope: Partial<Scope>): Promise<Scope>;
@@ -352,6 +354,155 @@ declare class OAuth2GranularClient implements OAuth2GranularOperations {
     private isTokenExpired;
 }
 
+interface UserOperationParams {
+    systemId?: string;
+    email?: string;
+    externalId?: string;
+    options?: UserCreationOptions;
+}
+interface TokenQueryParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    email?: string;
+}
+interface TokenSaveParams {
+    userId: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    email: string;
+    token: OAuth2Token;
+}
+interface EmailTokenParams {
+    email: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    options?: TokenOptions;
+}
+interface UserTokenParams {
+    userId: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    options?: TokenOptions;
+}
+interface TokenExistenceParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    email?: string;
+}
+interface TokenDeletionParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    email?: string;
+}
+interface ScopeCreationParams {
+    systemId?: string;
+    name: string;
+    type?: 'authentication' | 'access' | 'custom';
+    permissions?: string[];
+    isolated?: boolean;
+}
+interface ValidTokenResult {
+    provider: string;
+    scopeId: string;
+    token: OAuth2Token;
+    userToken: UserToken;
+}
+interface BulkTokenQueryParams {
+    userId?: string;
+    email?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    options?: TokenOptions;
+}
+interface OAuth2GranularOperationsV2 {
+    ensureDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    createUser(params: UserOperationParams): Promise<User>;
+    getOrCreateUser(params: UserOperationParams): Promise<User>;
+    getUserById(userId: string): Promise<User | null>;
+    findUserByEmail(params: {
+        systemId?: string;
+        email: string;
+    }): Promise<User | null>;
+    findUserByExternalId(params: {
+        systemId?: string;
+        externalId: string;
+    }): Promise<User | null>;
+    getUsersBySystem(systemId?: string): Promise<User[]>;
+    saveToken(params: TokenSaveParams): Promise<UserToken>;
+    getTokens(params: TokenQueryParams): Promise<UserToken[]>;
+    getValidToken(params: EmailTokenParams | UserTokenParams): Promise<OAuth2Token>;
+    getAccessToken(params: EmailTokenParams | UserTokenParams): Promise<string>;
+    withValidToken<T>(params: EmailTokenParams | UserTokenParams, callback: (accessToken: string) => Promise<T>): Promise<T>;
+    getAllValidTokens(params: BulkTokenQueryParams): Promise<ValidTokenResult[]>;
+    hasToken(params: TokenExistenceParams): Promise<boolean>;
+    deleteTokens(params: TokenDeletionParams): Promise<void>;
+    createSystem(name: string, description?: string): Promise<System>;
+    getSystem(systemId?: string): Promise<System | null>;
+    createScope(params: ScopeCreationParams): Promise<Scope>;
+    getScope(scopeId?: string): Promise<Scope | null>;
+    getScopesBySystem(systemId?: string): Promise<Scope[]>;
+}
+
+declare class OAuth2GranularClientV2 implements OAuth2GranularOperationsV2 {
+    private storage;
+    private providers;
+    private getContext;
+    private now;
+    private defaultSystem;
+    private defaultScope;
+    private defaultsInitialized;
+    constructor(storage: StorageAdapter, providers: Map<string, OAuth2Provider>, getContext: () => {
+        currentSystem?: System;
+        currentUser?: User;
+        defaultScope?: Scope;
+    }, now?: () => number);
+    ensureDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    private resolveSystemId;
+    private resolveScopeId;
+    createUser(params: UserOperationParams): Promise<User>;
+    getOrCreateUser(params: UserOperationParams): Promise<User>;
+    getUserById(userId: string): Promise<User | null>;
+    findUserByEmail(params: {
+        systemId?: string;
+        email: string;
+    }): Promise<User | null>;
+    findUserByExternalId(params: {
+        systemId?: string;
+        externalId: string;
+    }): Promise<User | null>;
+    getUsersBySystem(systemId?: string): Promise<User[]>;
+    saveToken(params: TokenSaveParams): Promise<UserToken>;
+    getTokens(params: TokenQueryParams): Promise<UserToken[]>;
+    getValidToken(params: EmailTokenParams | UserTokenParams): Promise<OAuth2Token>;
+    getAccessToken(params: EmailTokenParams | UserTokenParams): Promise<string>;
+    withValidToken<T>(params: EmailTokenParams | UserTokenParams, callback: (accessToken: string) => Promise<T>): Promise<T>;
+    getAllValidTokens(params: BulkTokenQueryParams): Promise<ValidTokenResult[]>;
+    hasToken(params: TokenExistenceParams): Promise<boolean>;
+    deleteTokens(params: TokenDeletionParams): Promise<void>;
+    createSystem(name: string, description?: string): Promise<System>;
+    getSystem(systemId?: string): Promise<System | null>;
+    createScope(params: ScopeCreationParams): Promise<Scope>;
+    getScope(scopeId?: string): Promise<Scope | null>;
+    getScopesBySystem(systemId?: string): Promise<Scope[]>;
+    private isTokenExpired;
+}
+
 interface OAuth2Options {
     storage?: StorageAdapter;
     sealKey?: string;
@@ -397,7 +548,11 @@ declare class OAuth2Client {
     private currentSystem?;
     private currentUser?;
     private defaultScope?;
+    /**
+     * @deprecated Use granularV2 instead for better developer experience with optional system/scope
+     */
     readonly granular: OAuth2GranularOperations;
+    readonly granularV2: OAuth2GranularClientV2;
     constructor(options?: OAuth2Options);
     /**
      * Quick setup for common use cases
@@ -407,6 +562,21 @@ declare class OAuth2Client {
      * Register a provider configuration
      */
     registerProvider(name: string, config: OAuth2Config): void;
+    /**
+     * Initialize default system and scope if they don't exist
+     */
+    initializeDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    /**
+     * Get the default system if it exists
+     */
+    getDefaultSystem(): Promise<System | null>;
+    /**
+     * Get the default scope if it exists
+     */
+    getDefaultScope(): Promise<Scope | null>;
     /**
      * Create or select a system to work with
      */
@@ -658,11 +828,13 @@ declare class InMemoryStorageAdapter implements StorageAdapter {
     private states;
     private generateId;
     createSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
+    getOrCreateSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
     getSystem(id: string): Promise<System | null>;
     updateSystem(id: string, updates: Partial<System>): Promise<System>;
     deleteSystem(id: string): Promise<void>;
     listSystems(): Promise<System[]>;
     createScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
+    getOrCreateScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
     getScope(id: string): Promise<Scope | null>;
     getScopesBySystem(systemId: string): Promise<Scope[]>;
     updateScope(id: string, updates: Partial<Scope>): Promise<Scope>;
@@ -709,6 +881,11 @@ declare class InMemoryStorageAdapter implements StorageAdapter {
     getTokensBySystemWithProfile(systemId: string): Promise<UserTokenWithProfile[]>;
 }
 
+declare const DEFAULT_SYSTEM_NAME = "oauth2-token-manager-default-system";
+declare const DEFAULT_SCOPE_NAME = "oauth2-token-manager-default-scope";
+declare const DEFAULT_SYSTEM_CONFIG: Omit<System, 'id' | 'createdAt' | 'updatedAt'>;
+declare const DEFAULT_SCOPE_CONFIG: Omit<Scope, 'id' | 'systemId'>;
+
 type ProviderType = 'google' | 'github' | 'microsoft' | 'outlook' | 'facebook' | 'generic';
 interface ProviderFactory {
     createProvider(type: ProviderType, config: OAuth2Config): OAuth2Provider;
@@ -782,4 +959,23 @@ declare const generateState: () => string;
 declare const seal: <T>(d: T, key: string) => Promise<string>;
 declare const unseal: <T>(s: string, key: string) => Promise<T>;
 
-export { type AuthorizationState, type AuthorizationUrlStrategy, BaseProfileFetcher, type CreateUserInput, GenericOAuth2Provider, GenericProfileFetcher, GitHubProfileFetcher, GoogleProfileFetcher, InMemoryStorageAdapter, MicrosoftProfileFetcher, OAuth2Client, type OAuth2Config, OAuth2GranularClient, OAuth2Provider, type OAuth2Token, type ProfileFetcher, ProfileFetcherFactory, type ProfileFetcherOptions, type ProfileMapping, type ProviderFactory, type ProviderType, type Scope, StandardAuthorizationUrlStrategy, StandardTokenExchangeStrategy, type StorageAdapter, type System, type TokenExchangeStrategy, type User, type UserProfile, type UserToken, type UserTokenWithProfile, createCodeChallenge, createCodeVerifier, generateState, seal, unseal };
+/**
+ * Initializes the default system and scope if they don't exist.
+ * Uses getOrCreateSystem and getOrCreateScope to ensure unique names.
+ */
+declare function initializeDefaults(storage: StorageAdapter): Promise<{
+    system: System;
+    scope: Scope;
+}>;
+/**
+ * Gets the default system if it exists.
+ * Returns null if the default system hasn't been initialized.
+ */
+declare function getDefaultSystem(storage: StorageAdapter): Promise<System | null>;
+/**
+ * Gets the default scope if it exists.
+ * Returns null if the default scope hasn't been initialized.
+ */
+declare function getDefaultScope(storage: StorageAdapter): Promise<Scope | null>;
+
+export { type AuthorizationState, type AuthorizationUrlStrategy, BaseProfileFetcher, type BulkTokenQueryParams, type CreateUserInput, DEFAULT_SCOPE_CONFIG, DEFAULT_SCOPE_NAME, DEFAULT_SYSTEM_CONFIG, DEFAULT_SYSTEM_NAME, type EmailTokenParams, GenericOAuth2Provider, GenericProfileFetcher, GitHubProfileFetcher, GoogleProfileFetcher, InMemoryStorageAdapter, MicrosoftProfileFetcher, OAuth2Client, type OAuth2Config, OAuth2GranularClient, OAuth2GranularClientV2, type OAuth2GranularOperationsV2, OAuth2Provider, type OAuth2Token, type ProfileFetcher, ProfileFetcherFactory, type ProfileFetcherOptions, type ProfileMapping, type ProviderFactory, type ProviderType, type Scope, type ScopeCreationParams, StandardAuthorizationUrlStrategy, StandardTokenExchangeStrategy, type StorageAdapter, type System, type TokenDeletionParams, type TokenExchangeStrategy, type TokenExistenceParams, type TokenQueryParams, type TokenSaveParams, type User, type UserOperationParams, type UserProfile, type UserToken, type UserTokenParams, type UserTokenWithProfile, type ValidTokenResult, createCodeChallenge, createCodeVerifier, generateState, getDefaultScope, getDefaultSystem, initializeDefaults, seal, unseal };

package/dist/index.d.ts

@@ -106,11 +106,13 @@ interface ProfileBasedTokenOptions {
 }
 interface StorageAdapter {
     createSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
+    getOrCreateSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
     getSystem(id: string): Promise<System | null>;
     updateSystem(id: string, system: Partial<System>): Promise<System>;
     deleteSystem(id: string): Promise<void>;
     listSystems(): Promise<System[]>;
     createScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
+    getOrCreateScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
     getScope(id: string): Promise<Scope | null>;
     getScopesBySystem(systemId: string): Promise<Scope[]>;
     updateScope(id: string, scope: Partial<Scope>): Promise<Scope>;
@@ -352,6 +354,155 @@ declare class OAuth2GranularClient implements OAuth2GranularOperations {
     private isTokenExpired;
 }
 
+interface UserOperationParams {
+    systemId?: string;
+    email?: string;
+    externalId?: string;
+    options?: UserCreationOptions;
+}
+interface TokenQueryParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    email?: string;
+}
+interface TokenSaveParams {
+    userId: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    email: string;
+    token: OAuth2Token;
+}
+interface EmailTokenParams {
+    email: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    options?: TokenOptions;
+}
+interface UserTokenParams {
+    userId: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    options?: TokenOptions;
+}
+interface TokenExistenceParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider: string;
+    email?: string;
+}
+interface TokenDeletionParams {
+    userId?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    email?: string;
+}
+interface ScopeCreationParams {
+    systemId?: string;
+    name: string;
+    type?: 'authentication' | 'access' | 'custom';
+    permissions?: string[];
+    isolated?: boolean;
+}
+interface ValidTokenResult {
+    provider: string;
+    scopeId: string;
+    token: OAuth2Token;
+    userToken: UserToken;
+}
+interface BulkTokenQueryParams {
+    userId?: string;
+    email?: string;
+    systemId?: string;
+    scopeId?: string;
+    provider?: string;
+    options?: TokenOptions;
+}
+interface OAuth2GranularOperationsV2 {
+    ensureDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    createUser(params: UserOperationParams): Promise<User>;
+    getOrCreateUser(params: UserOperationParams): Promise<User>;
+    getUserById(userId: string): Promise<User | null>;
+    findUserByEmail(params: {
+        systemId?: string;
+        email: string;
+    }): Promise<User | null>;
+    findUserByExternalId(params: {
+        systemId?: string;
+        externalId: string;
+    }): Promise<User | null>;
+    getUsersBySystem(systemId?: string): Promise<User[]>;
+    saveToken(params: TokenSaveParams): Promise<UserToken>;
+    getTokens(params: TokenQueryParams): Promise<UserToken[]>;
+    getValidToken(params: EmailTokenParams | UserTokenParams): Promise<OAuth2Token>;
+    getAccessToken(params: EmailTokenParams | UserTokenParams): Promise<string>;
+    withValidToken<T>(params: EmailTokenParams | UserTokenParams, callback: (accessToken: string) => Promise<T>): Promise<T>;
+    getAllValidTokens(params: BulkTokenQueryParams): Promise<ValidTokenResult[]>;
+    hasToken(params: TokenExistenceParams): Promise<boolean>;
+    deleteTokens(params: TokenDeletionParams): Promise<void>;
+    createSystem(name: string, description?: string): Promise<System>;
+    getSystem(systemId?: string): Promise<System | null>;
+    createScope(params: ScopeCreationParams): Promise<Scope>;
+    getScope(scopeId?: string): Promise<Scope | null>;
+    getScopesBySystem(systemId?: string): Promise<Scope[]>;
+}
+
+declare class OAuth2GranularClientV2 implements OAuth2GranularOperationsV2 {
+    private storage;
+    private providers;
+    private getContext;
+    private now;
+    private defaultSystem;
+    private defaultScope;
+    private defaultsInitialized;
+    constructor(storage: StorageAdapter, providers: Map<string, OAuth2Provider>, getContext: () => {
+        currentSystem?: System;
+        currentUser?: User;
+        defaultScope?: Scope;
+    }, now?: () => number);
+    ensureDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    private resolveSystemId;
+    private resolveScopeId;
+    createUser(params: UserOperationParams): Promise<User>;
+    getOrCreateUser(params: UserOperationParams): Promise<User>;
+    getUserById(userId: string): Promise<User | null>;
+    findUserByEmail(params: {
+        systemId?: string;
+        email: string;
+    }): Promise<User | null>;
+    findUserByExternalId(params: {
+        systemId?: string;
+        externalId: string;
+    }): Promise<User | null>;
+    getUsersBySystem(systemId?: string): Promise<User[]>;
+    saveToken(params: TokenSaveParams): Promise<UserToken>;
+    getTokens(params: TokenQueryParams): Promise<UserToken[]>;
+    getValidToken(params: EmailTokenParams | UserTokenParams): Promise<OAuth2Token>;
+    getAccessToken(params: EmailTokenParams | UserTokenParams): Promise<string>;
+    withValidToken<T>(params: EmailTokenParams | UserTokenParams, callback: (accessToken: string) => Promise<T>): Promise<T>;
+    getAllValidTokens(params: BulkTokenQueryParams): Promise<ValidTokenResult[]>;
+    hasToken(params: TokenExistenceParams): Promise<boolean>;
+    deleteTokens(params: TokenDeletionParams): Promise<void>;
+    createSystem(name: string, description?: string): Promise<System>;
+    getSystem(systemId?: string): Promise<System | null>;
+    createScope(params: ScopeCreationParams): Promise<Scope>;
+    getScope(scopeId?: string): Promise<Scope | null>;
+    getScopesBySystem(systemId?: string): Promise<Scope[]>;
+    private isTokenExpired;
+}
+
 interface OAuth2Options {
     storage?: StorageAdapter;
     sealKey?: string;
@@ -397,7 +548,11 @@ declare class OAuth2Client {
     private currentSystem?;
     private currentUser?;
     private defaultScope?;
+    /**
+     * @deprecated Use granularV2 instead for better developer experience with optional system/scope
+     */
     readonly granular: OAuth2GranularOperations;
+    readonly granularV2: OAuth2GranularClientV2;
     constructor(options?: OAuth2Options);
     /**
      * Quick setup for common use cases
@@ -407,6 +562,21 @@ declare class OAuth2Client {
      * Register a provider configuration
      */
     registerProvider(name: string, config: OAuth2Config): void;
+    /**
+     * Initialize default system and scope if they don't exist
+     */
+    initializeDefaults(): Promise<{
+        system: System;
+        scope: Scope;
+    }>;
+    /**
+     * Get the default system if it exists
+     */
+    getDefaultSystem(): Promise<System | null>;
+    /**
+     * Get the default scope if it exists
+     */
+    getDefaultScope(): Promise<Scope | null>;
     /**
      * Create or select a system to work with
      */
@@ -658,11 +828,13 @@ declare class InMemoryStorageAdapter implements StorageAdapter {
     private states;
     private generateId;
     createSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
+    getOrCreateSystem(system: Omit<System, 'id' | 'createdAt' | 'updatedAt'>): Promise<System>;
     getSystem(id: string): Promise<System | null>;
     updateSystem(id: string, updates: Partial<System>): Promise<System>;
     deleteSystem(id: string): Promise<void>;
     listSystems(): Promise<System[]>;
     createScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
+    getOrCreateScope(scope: Omit<Scope, 'id'>): Promise<Scope>;
     getScope(id: string): Promise<Scope | null>;
     getScopesBySystem(systemId: string): Promise<Scope[]>;
     updateScope(id: string, updates: Partial<Scope>): Promise<Scope>;
@@ -709,6 +881,11 @@ declare class InMemoryStorageAdapter implements StorageAdapter {
     getTokensBySystemWithProfile(systemId: string): Promise<UserTokenWithProfile[]>;
 }
 
+declare const DEFAULT_SYSTEM_NAME = "oauth2-token-manager-default-system";
+declare const DEFAULT_SCOPE_NAME = "oauth2-token-manager-default-scope";
+declare const DEFAULT_SYSTEM_CONFIG: Omit<System, 'id' | 'createdAt' | 'updatedAt'>;
+declare const DEFAULT_SCOPE_CONFIG: Omit<Scope, 'id' | 'systemId'>;
+
 type ProviderType = 'google' | 'github' | 'microsoft' | 'outlook' | 'facebook' | 'generic';
 interface ProviderFactory {
     createProvider(type: ProviderType, config: OAuth2Config): OAuth2Provider;
@@ -782,4 +959,23 @@ declare const generateState: () => string;
 declare const seal: <T>(d: T, key: string) => Promise<string>;
 declare const unseal: <T>(s: string, key: string) => Promise<T>;
 
-export { type AuthorizationState, type AuthorizationUrlStrategy, BaseProfileFetcher, type CreateUserInput, GenericOAuth2Provider, GenericProfileFetcher, GitHubProfileFetcher, GoogleProfileFetcher, InMemoryStorageAdapter, MicrosoftProfileFetcher, OAuth2Client, type OAuth2Config, OAuth2GranularClient, OAuth2Provider, type OAuth2Token, type ProfileFetcher, ProfileFetcherFactory, type ProfileFetcherOptions, type ProfileMapping, type ProviderFactory, type ProviderType, type Scope, StandardAuthorizationUrlStrategy, StandardTokenExchangeStrategy, type StorageAdapter, type System, type TokenExchangeStrategy, type User, type UserProfile, type UserToken, type UserTokenWithProfile, createCodeChallenge, createCodeVerifier, generateState, seal, unseal };
+/**
+ * Initializes the default system and scope if they don't exist.
+ * Uses getOrCreateSystem and getOrCreateScope to ensure unique names.
+ */
+declare function initializeDefaults(storage: StorageAdapter): Promise<{
+    system: System;
+    scope: Scope;
+}>;
+/**
+ * Gets the default system if it exists.
+ * Returns null if the default system hasn't been initialized.
+ */
+declare function getDefaultSystem(storage: StorageAdapter): Promise<System | null>;
+/**
+ * Gets the default scope if it exists.
+ * Returns null if the default scope hasn't been initialized.
+ */
+declare function getDefaultScope(storage: StorageAdapter): Promise<Scope | null>;
+
+export { type AuthorizationState, type AuthorizationUrlStrategy, BaseProfileFetcher, type BulkTokenQueryParams, type CreateUserInput, DEFAULT_SCOPE_CONFIG, DEFAULT_SCOPE_NAME, DEFAULT_SYSTEM_CONFIG, DEFAULT_SYSTEM_NAME, type EmailTokenParams, GenericOAuth2Provider, GenericProfileFetcher, GitHubProfileFetcher, GoogleProfileFetcher, InMemoryStorageAdapter, MicrosoftProfileFetcher, OAuth2Client, type OAuth2Config, OAuth2GranularClient, OAuth2GranularClientV2, type OAuth2GranularOperationsV2, OAuth2Provider, type OAuth2Token, type ProfileFetcher, ProfileFetcherFactory, type ProfileFetcherOptions, type ProfileMapping, type ProviderFactory, type ProviderType, type Scope, type ScopeCreationParams, StandardAuthorizationUrlStrategy, StandardTokenExchangeStrategy, type StorageAdapter, type System, type TokenDeletionParams, type TokenExchangeStrategy, type TokenExistenceParams, type TokenQueryParams, type TokenSaveParams, type User, type UserOperationParams, type UserProfile, type UserToken, type UserTokenParams, type UserTokenWithProfile, type ValidTokenResult, createCodeChallenge, createCodeVerifier, generateState, getDefaultScope, getDefaultSystem, initializeDefaults, seal, unseal };