@dofe/sso-contracts 0.1.2

package/dist/api/mfa.contract.d.ts

@@ -0,0 +1,322 @@
+export declare const mfaContract: {
+    initSetup: {
+        summary: "初始化 MFA 设置（生成 QR Code 和密钥）";
+        method: "POST";
+        body: import("@ts-rest/core").ContractPlainType<object>;
+        path: "/mfa/setup/init";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    qrCodeDataUrl: import("zod").ZodString;
+                    provisioningUri: import("zod").ZodString;
+                    secret: import("zod").ZodString;
+                    issuer: import("zod").ZodString;
+                    accountName: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    verifySetup: {
+        summary: "验证 TOTP 并完成 MFA 绑定";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/setup/verify";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+                    enabled: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    login: {
+        summary: "MFA 二次验证登录";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            mfaToken: import("zod").ZodString;
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/login";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    access: import("zod").ZodString;
+                    refresh: import("zod").ZodString;
+                    expire: import("zod").ZodNumber;
+                    accessExpire: import("zod").ZodNumber;
+                    isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    user: import("zod").ZodObject<{
+                        id: import("zod").ZodString;
+                        isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        isAdmin: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        code: import("zod").ZodNullable<import("zod").ZodString>;
+                        nickname: import("zod").ZodNullable<import("zod").ZodString>;
+                        headerImg: import("zod").ZodNullable<import("zod").ZodString>;
+                        sex: import("zod").ZodNullable<import("zod").ZodString>;
+                        mobile: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                        email: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                    }, import("zod/v4/core").$strip>;
+                    id_token: import("zod").ZodOptional<import("zod").ZodString>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    disable: {
+        summary: "禁用 MFA（需 TOTP 验证）";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/disable";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    success: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    recover: {
+        summary: "使用备用恢复码登录并禁用 MFA";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            mfaToken: import("zod").ZodString;
+            backupCode: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/recover";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    access: import("zod").ZodString;
+                    refresh: import("zod").ZodString;
+                    expire: import("zod").ZodNumber;
+                    accessExpire: import("zod").ZodNumber;
+                    isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    user: import("zod").ZodObject<{
+                        id: import("zod").ZodString;
+                        isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        isAdmin: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        code: import("zod").ZodNullable<import("zod").ZodString>;
+                        nickname: import("zod").ZodNullable<import("zod").ZodString>;
+                        headerImg: import("zod").ZodNullable<import("zod").ZodString>;
+                        sex: import("zod").ZodNullable<import("zod").ZodString>;
+                        mobile: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                        email: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                    }, import("zod/v4/core").$strip>;
+                    id_token: import("zod").ZodOptional<import("zod").ZodString>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    getStatus: {
+        summary: "获取当前用户 MFA 状态";
+        method: "GET";
+        path: "/mfa/status";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    enabled: import("zod").ZodBoolean;
+                    mfaType: import("zod").ZodString;
+                    backupCodesRemaining: import("zod").ZodNumber;
+                    createdAt: import("zod").ZodNullable<import("zod").ZodString>;
+                    globallyDisabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    regenerateBackup: {
+        summary: "重新生成备用恢复码";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/backup/regen";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+                    enabled: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+};
+export declare const mfaContractVersioned: import("@dofe/infra-contracts-base/base").VersionedContract<{
+    initSetup: {
+        summary: "初始化 MFA 设置（生成 QR Code 和密钥）";
+        method: "POST";
+        body: import("@ts-rest/core").ContractPlainType<object>;
+        path: "/mfa/setup/init";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    qrCodeDataUrl: import("zod").ZodString;
+                    provisioningUri: import("zod").ZodString;
+                    secret: import("zod").ZodString;
+                    issuer: import("zod").ZodString;
+                    accountName: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    verifySetup: {
+        summary: "验证 TOTP 并完成 MFA 绑定";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/setup/verify";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+                    enabled: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    login: {
+        summary: "MFA 二次验证登录";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            mfaToken: import("zod").ZodString;
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/login";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    access: import("zod").ZodString;
+                    refresh: import("zod").ZodString;
+                    expire: import("zod").ZodNumber;
+                    accessExpire: import("zod").ZodNumber;
+                    isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    user: import("zod").ZodObject<{
+                        id: import("zod").ZodString;
+                        isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        isAdmin: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        code: import("zod").ZodNullable<import("zod").ZodString>;
+                        nickname: import("zod").ZodNullable<import("zod").ZodString>;
+                        headerImg: import("zod").ZodNullable<import("zod").ZodString>;
+                        sex: import("zod").ZodNullable<import("zod").ZodString>;
+                        mobile: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                        email: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                    }, import("zod/v4/core").$strip>;
+                    id_token: import("zod").ZodOptional<import("zod").ZodString>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    disable: {
+        summary: "禁用 MFA（需 TOTP 验证）";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/disable";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    success: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    recover: {
+        summary: "使用备用恢复码登录并禁用 MFA";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            mfaToken: import("zod").ZodString;
+            backupCode: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/recover";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    access: import("zod").ZodString;
+                    refresh: import("zod").ZodString;
+                    expire: import("zod").ZodNumber;
+                    accessExpire: import("zod").ZodNumber;
+                    isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    user: import("zod").ZodObject<{
+                        id: import("zod").ZodString;
+                        isAnonymity: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        isAdmin: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        code: import("zod").ZodNullable<import("zod").ZodString>;
+                        nickname: import("zod").ZodNullable<import("zod").ZodString>;
+                        headerImg: import("zod").ZodNullable<import("zod").ZodString>;
+                        sex: import("zod").ZodNullable<import("zod").ZodString>;
+                        mobile: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                        email: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                    }, import("zod/v4/core").$strip>;
+                    id_token: import("zod").ZodOptional<import("zod").ZodString>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    getStatus: {
+        summary: "获取当前用户 MFA 状态";
+        method: "GET";
+        path: "/mfa/status";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    enabled: import("zod").ZodBoolean;
+                    mfaType: import("zod").ZodString;
+                    backupCodesRemaining: import("zod").ZodNumber;
+                    createdAt: import("zod").ZodNullable<import("zod").ZodString>;
+                    globallyDisabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+    regenerateBackup: {
+        summary: "重新生成备用恢复码";
+        method: "POST";
+        body: import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        path: "/mfa/backup/regen";
+        responses: {
+            200: import("zod").ZodObject<{
+                code: import("zod").ZodNumber;
+                msg: import("zod").ZodString;
+                data: import("zod").ZodObject<{
+                    backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+                    enabled: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+}>;
+export type MfaContract = typeof mfaContract;
+//# sourceMappingURL=mfa.contract.d.ts.map

package/dist/api/mfa.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.contract.d.ts","sourceRoot":"","sources":["../../src/api/mfa.contract.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0EvB,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG/B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC"}

package/dist/api/mfa.contract.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mfaContractVersioned = exports.mfaContract = void 0;
+const core_1 = require("@ts-rest/core");
+const base_1 = require("../base");
+const mfa_schema_1 = require("../schemas/mfa.schema");
+const sign_schema_1 = require("../schemas/sign.schema");
+const c = (0, core_1.initContract)();
+exports.mfaContract = c.router({
+    initSetup: {
+        method: 'POST',
+        path: '/setup/init',
+        body: c.type(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(mfa_schema_1.MfaSetupInitResponseSchema),
+        },
+        summary: '初始化 MFA 设置（生成 QR Code 和密钥）',
+    },
+    verifySetup: {
+        method: 'POST',
+        path: '/setup/verify',
+        body: mfa_schema_1.MfaSetupVerifyBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(mfa_schema_1.MfaSetupVerifyResponseSchema),
+        },
+        summary: '验证 TOTP 并完成 MFA 绑定',
+    },
+    login: {
+        method: 'POST',
+        path: '/login',
+        body: mfa_schema_1.MfaLoginBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(sign_schema_1.LoginSuccessSchema),
+        },
+        summary: 'MFA 二次验证登录',
+    },
+    disable: {
+        method: 'POST',
+        path: '/disable',
+        body: mfa_schema_1.MfaDisableBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '禁用 MFA（需 TOTP 验证）',
+    },
+    recover: {
+        method: 'POST',
+        path: '/recover',
+        body: mfa_schema_1.MfaRecoverBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(sign_schema_1.LoginSuccessSchema),
+        },
+        summary: '使用备用恢复码登录并禁用 MFA',
+    },
+    getStatus: {
+        method: 'GET',
+        path: '/status',
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(mfa_schema_1.MfaStatusResponseSchema),
+        },
+        summary: '获取当前用户 MFA 状态',
+    },
+    regenerateBackup: {
+        method: 'POST',
+        path: '/backup/regen',
+        body: mfa_schema_1.MfaRegenBackupBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(mfa_schema_1.MfaSetupVerifyResponseSchema),
+        },
+        summary: '重新生成备用恢复码',
+    },
+}, {
+    pathPrefix: '/mfa',
+});
+exports.mfaContractVersioned = (0, base_1.withVersion)(exports.mfaContract, {
+    version: base_1.API_VERSION.V1,
+    pathPrefix: '/mfa',
+});
+//# sourceMappingURL=mfa.contract.js.map

package/dist/api/mfa.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.contract.js","sourceRoot":"","sources":["../../src/api/mfa.contract.ts"],"names":[],"mappings":";;;AAAA,wCAA6C;AAC7C,kCAA6F;AAC7F,sDAS+B;AAC/B,wDAA4D;AAE5D,MAAM,CAAC,GAAG,IAAA,mBAAY,GAAE,CAAC;AAEZ,QAAA,WAAW,GAAG,CAAC,CAAC,MAAM,CACjC;IACE,SAAS,EAAE;QACT,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAU;QACtB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,uCAA0B,CAAC;SACnD;QACD,OAAO,EAAE,4BAA4B;KACtC;IAED,WAAW,EAAE;QACX,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,qCAAwB;QAC9B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,yCAA4B,CAAC;SACrD;QACD,OAAO,EAAE,oBAAoB;KAC9B;IAED,KAAK,EAAE;QACL,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,+BAAkB;QACxB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,gCAAkB,CAAC;SAC3C;QACD,OAAO,EAAE,YAAY;KACtB;IAED,OAAO,EAAE;QACP,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,iCAAoB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,mBAAmB;KAC7B;IAED,OAAO,EAAE;QACP,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,iCAAoB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,gCAAkB,CAAC;SAC3C;QACD,OAAO,EAAE,kBAAkB;KAC5B;IAED,SAAS,EAAE;QACT,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,SAAS;QACf,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,oCAAuB,CAAC;SAChD;QACD,OAAO,EAAE,eAAe;KACzB;IAED,gBAAgB,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,qCAAwB;QAC9B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,yCAA4B,CAAC;SACrD;QACD,OAAO,EAAE,WAAW;KACrB;CACF,EACD;IACE,UAAU,EAAE,MAAM;CACnB,CACF,CAAC;AAEW,QAAA,oBAAoB,GAAG,IAAA,kBAAW,EAAC,mBAAW,EAAE;IAC3D,OAAO,EAAE,kBAAW,CAAC,EAAE;IACvB,UAAU,EAAE,MAAM;CACnB,CAAC,CAAC"}

package/dist/api/oidc.contract.d.ts

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+export declare const oidcContract: {
+    registerClient: {
+        summary: "注册 OAuth 客户端";
+        method: "POST";
+        body: z.ZodObject<{
+            clientName: z.ZodString;
+            clientUri: z.ZodOptional<z.ZodString>;
+            redirectUris: z.ZodArray<z.ZodString>;
+            grantTypes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+            }>>>;
+            scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            isConfidential: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>;
+        path: "/oauth/register";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    listClients: {
+        summary: "列出 OAuth 客户端";
+        method: "GET";
+        path: "/oauth/clients";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientName: z.ZodString;
+                    clientUri: z.ZodOptional<z.ZodString>;
+                    redirectUris: z.ZodArray<z.ZodString>;
+                    grantTypes: z.ZodArray<z.ZodString>;
+                    scopes: z.ZodArray<z.ZodString>;
+                    isConfidential: z.ZodBoolean;
+                    isActive: z.ZodBoolean;
+                    createdAt: z.ZodOptional<z.ZodDate>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    revokeClient: {
+        summary: "吊销 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        path: "/oauth/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+};
+//# sourceMappingURL=oidc.contract.d.ts.map

package/dist/api/oidc.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.contract.d.ts","sourceRoot":"","sources":["../../src/api/oidc.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyCxB,CAAC"}

package/dist/api/oidc.contract.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oidcContract = void 0;
+const core_1 = require("@ts-rest/core");
+const zod_1 = require("zod");
+const base_1 = require("../base");
+const oidc_schema_1 = require("../schemas/oidc.schema");
+const c = (0, core_1.initContract)();
+exports.oidcContract = c.router({
+    registerClient: {
+        method: 'POST',
+        path: '/register',
+        body: oidc_schema_1.RegisterOAuthClientBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.object({
+                clientId: zod_1.z.string(),
+                clientSecret: zod_1.z.string(),
+            })),
+        },
+        summary: '注册 OAuth 客户端',
+    },
+    listClients: {
+        method: 'GET',
+        path: '/clients',
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.array(oidc_schema_1.OAuthClientSchema)),
+        },
+        summary: '列出 OAuth 客户端',
+    },
+    revokeClient: {
+        method: 'DELETE',
+        path: '/clients/:clientId',
+        pathParams: zod_1.z.object({
+            clientId: zod_1.z.string(),
+        }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '吊销 OAuth 客户端',
+    },
+}, {
+    pathPrefix: '/oauth',
+});
+//# sourceMappingURL=oidc.contract.js.map

package/dist/api/oidc.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.contract.js","sourceRoot":"","sources":["../../src/api/oidc.contract.ts"],"names":[],"mappings":";;;AAAA,wCAA6C;AAC7C,6BAAwB;AACxB,kCAAmE;AACnE,wDAGgC;AAEhC,MAAM,CAAC,GAAG,IAAA,mBAAY,GAAE,CAAC;AAEZ,QAAA,YAAY,GAAG,CAAC,CAAC,MAAM,CAClC;IACE,cAAc,EAAE;QACd,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,2CAA6B;QACnC,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EACpB,OAAC,CAAC,MAAM,CAAC;gBACP,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;gBACpB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;aACzB,CAAC,CACH;SACF;QACD,OAAO,EAAE,cAAc;KACxB;IAED,WAAW,EAAE;QACX,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,OAAC,CAAC,KAAK,CAAC,+BAAiB,CAAC,CAAC;SACnD;QACD,OAAO,EAAE,cAAc;KACxB;IAED,YAAY,EAAE;QACZ,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;SACrB,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,cAAc;KACxB;CACF,EACD;IACE,UAAU,EAAE,QAAQ;CACrB,CACF,CAAC"}