@dereekb/oauth-resource 14.4.0

package/express/src/lib/well-known.router.d.ts

@@ -0,0 +1,35 @@
+import { type BuildProtectedResourceMetadataConfig, type OAuthProtectedResourceMetadata } from '@dereekb/oauth-resource';
+import { type Maybe, type Seconds } from '@dereekb/util';
+import { Router } from 'express';
+/**
+ * How long a client may cache the protected-resource metadata document, in seconds.
+ */
+export declare const DEFAULT_PROTECTED_RESOURCE_METADATA_MAX_AGE: Seconds;
+export interface CreateWellKnownRouterConfig extends BuildProtectedResourceMetadataConfig {
+    /**
+     * Path of the resource on this origin, used to serve the RFC 9728 §3.1 path-suffixed well-known
+     * path (e.g. `/mcp` → `/.well-known/oauth-protected-resource/mcp`, the path clients try first).
+     *
+     * Defaults to the path component of {@link BuildProtectedResourceMetadataConfig.resource}.
+     */
+    readonly resourcePath?: Maybe<string>;
+    /**
+     * `cache-control: public, max-age=` value in seconds. Defaults to
+     * {@link DEFAULT_PROTECTED_RESOURCE_METADATA_MAX_AGE}.
+     */
+    readonly maxAge?: Maybe<Seconds>;
+}
+/**
+ * Serves the RFC 9728 metadata at both the path-suffixed (`…/oauth-protected-resource/mcp`,
+ * what clients try first) and bare well-known paths. Public and CORS-open so a browser-based
+ * client can discover the issuer, and built once at construction.
+ *
+ * @param config - The metadata document's inputs plus the resource path and cache lifetime.
+ * @returns The router.
+ */
+export declare function createWellKnownRouter(config: CreateWellKnownRouterConfig): Router;
+/**
+ * Re-exported for callers that want the document without the router (e.g. to serve it from
+ * another framework).
+ */
+export type { OAuthProtectedResourceMetadata };

package/firebase/index.d.ts

@@ -0,0 +1 @@
+export * from "./src/index";