@dotdo/oauth 0.1.0

package/dist/storage.d.ts

@@ -0,0 +1,204 @@
+/**
+ * @dotdo/oauth - Storage interface for OAuth 2.1 server
+ *
+ * This defines the abstract storage interface that must be implemented
+ * by concrete storage backends (e.g., DO SQLite, KV, D1, etc.)
+ */
+import type { OAuthUser, OAuthOrganization, OAuthClient, OAuthAuthorizationCode, OAuthAccessToken, OAuthRefreshToken, OAuthGrant } from './types';
+/**
+ * Storage interface for OAuth 2.1 server
+ *
+ * Implementations of this interface provide persistence for:
+ * - Users and organizations
+ * - OAuth clients (registered applications)
+ * - Authorization codes, tokens, and grants
+ *
+ * @example Implementing with DO SQLite
+ * ```typescript
+ * import type { OAuthStorage } from '@dotdo/oauth'
+ * import { DigitalObject } from '@dotdo/do'
+ *
+ * export class DOAuthStorage implements OAuthStorage {
+ *   constructor(private do: DigitalObject) {}
+ *
+ *   async getUser(id: string) {
+ *     return this.do.state.get(`user:${id}`)
+ *   }
+ *   // ... implement other methods
+ * }
+ * ```
+ */
+export interface OAuthStorage {
+    /**
+     * Get a user by ID
+     */
+    getUser(id: string): Promise<OAuthUser | null>;
+    /**
+     * Get a user by email
+     */
+    getUserByEmail(email: string): Promise<OAuthUser | null>;
+    /**
+     * Save a user (create or update)
+     */
+    saveUser(user: OAuthUser): Promise<void>;
+    /**
+     * Delete a user
+     */
+    deleteUser(id: string): Promise<void>;
+    /**
+     * List users (with optional pagination)
+     */
+    listUsers(options?: ListOptions): Promise<OAuthUser[]>;
+    /**
+     * Get an organization by ID
+     */
+    getOrganization(id: string): Promise<OAuthOrganization | null>;
+    /**
+     * Get an organization by slug
+     */
+    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
+    /**
+     * Save an organization (create or update)
+     */
+    saveOrganization(org: OAuthOrganization): Promise<void>;
+    /**
+     * Delete an organization
+     */
+    deleteOrganization(id: string): Promise<void>;
+    /**
+     * List organizations (with optional pagination)
+     */
+    listOrganizations(options?: ListOptions): Promise<OAuthOrganization[]>;
+    /**
+     * Get a client by client ID
+     */
+    getClient(clientId: string): Promise<OAuthClient | null>;
+    /**
+     * Save a client (create or update)
+     */
+    saveClient(client: OAuthClient): Promise<void>;
+    /**
+     * Delete a client
+     */
+    deleteClient(clientId: string): Promise<void>;
+    /**
+     * List clients (with optional pagination)
+     */
+    listClients(options?: ListOptions): Promise<OAuthClient[]>;
+    /**
+     * Save an authorization code
+     */
+    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
+    /**
+     * Get and consume an authorization code (one-time use)
+     * Returns null if code doesn't exist or has already been used
+     */
+    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
+    /**
+     * Save an access token
+     */
+    saveAccessToken(token: OAuthAccessToken): Promise<void>;
+    /**
+     * Get an access token
+     */
+    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
+    /**
+     * Revoke an access token
+     */
+    revokeAccessToken(token: string): Promise<void>;
+    /**
+     * Save a refresh token
+     */
+    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
+    /**
+     * Get a refresh token
+     */
+    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
+    /**
+     * Revoke a refresh token
+     */
+    revokeRefreshToken(token: string): Promise<void>;
+    /**
+     * Revoke all tokens for a user
+     */
+    revokeAllUserTokens(userId: string): Promise<void>;
+    /**
+     * Revoke all tokens for a client
+     */
+    revokeAllClientTokens(clientId: string): Promise<void>;
+    /**
+     * Get a grant by user and client
+     */
+    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
+    /**
+     * Save a grant (create or update)
+     */
+    saveGrant(grant: OAuthGrant): Promise<void>;
+    /**
+     * Revoke a grant
+     */
+    revokeGrant(userId: string, clientId: string): Promise<void>;
+    /**
+     * List grants for a user
+     */
+    listUserGrants(userId: string): Promise<OAuthGrant[]>;
+}
+/**
+ * Options for list operations
+ */
+export interface ListOptions {
+    /** Maximum number of results to return */
+    limit?: number;
+    /** Cursor for pagination */
+    cursor?: string;
+    /** Filter by organization */
+    organizationId?: string;
+}
+/**
+ * In-memory storage implementation for testing
+ */
+export declare class MemoryOAuthStorage implements OAuthStorage {
+    private users;
+    private usersByEmail;
+    private organizations;
+    private organizationsBySlug;
+    private clients;
+    private authCodes;
+    private accessTokens;
+    private refreshTokens;
+    private grants;
+    getUser(id: string): Promise<OAuthUser | null>;
+    getUserByEmail(email: string): Promise<OAuthUser | null>;
+    saveUser(user: OAuthUser): Promise<void>;
+    deleteUser(id: string): Promise<void>;
+    listUsers(options?: ListOptions): Promise<OAuthUser[]>;
+    getOrganization(id: string): Promise<OAuthOrganization | null>;
+    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
+    saveOrganization(org: OAuthOrganization): Promise<void>;
+    deleteOrganization(id: string): Promise<void>;
+    listOrganizations(options?: ListOptions): Promise<OAuthOrganization[]>;
+    getClient(clientId: string): Promise<OAuthClient | null>;
+    saveClient(client: OAuthClient): Promise<void>;
+    deleteClient(clientId: string): Promise<void>;
+    listClients(options?: ListOptions): Promise<OAuthClient[]>;
+    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
+    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
+    saveAccessToken(token: OAuthAccessToken): Promise<void>;
+    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
+    revokeAccessToken(token: string): Promise<void>;
+    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
+    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
+    revokeRefreshToken(token: string): Promise<void>;
+    revokeAllUserTokens(userId: string): Promise<void>;
+    revokeAllClientTokens(clientId: string): Promise<void>;
+    private grantKey;
+    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
+    saveGrant(grant: OAuthGrant): Promise<void>;
+    revokeGrant(userId: string, clientId: string): Promise<void>;
+    listUserGrants(userId: string): Promise<OAuthGrant[]>;
+    /**
+     * Clear all data (for testing)
+     */
+    clear(): void;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACX,MAAM,SAAS,CAAA;AAEhB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,YAAY;IAK3B;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAE9C;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExC;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErC;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAMtD;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAE9D;;OAEG;IACH,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAEtE;;OAEG;IACH,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7C;;OAEG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAMtE;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9C;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7C;;OAEG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IAM1D;;OAEG;IACH,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAElE;;;OAGG;IACH,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;IAM9E;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAE/D;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/C;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzD;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAEjE;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhD;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAElD;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAMtD;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEtE;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3C;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE5D;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6BAA6B;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;GAEG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,aAAa,CAAuC;IAC5D,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,YAAY,CAAsC;IAC1D,OAAO,CAAC,aAAa,CAAuC;IAC5D,OAAO,CAAC,MAAM,CAAgC;IAGxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAI9C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAKxD,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrC,SAAS,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAYtD,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAI9D,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAKtE,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,iBAAiB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAStE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAIxD,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAS1D,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQ9E,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI/D,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAIjE,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAclD,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5D,OAAO,CAAC,QAAQ;IAIV,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAItE,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5D,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI3D;;OAEG;IACH,KAAK,IAAI,IAAI;CAWd"}

package/dist/storage.js

@@ -0,0 +1,191 @@
+/**
+ * @dotdo/oauth - Storage interface for OAuth 2.1 server
+ *
+ * This defines the abstract storage interface that must be implemented
+ * by concrete storage backends (e.g., DO SQLite, KV, D1, etc.)
+ */
+/**
+ * In-memory storage implementation for testing
+ */
+export class MemoryOAuthStorage {
+    users = new Map();
+    usersByEmail = new Map();
+    organizations = new Map();
+    organizationsBySlug = new Map();
+    clients = new Map();
+    authCodes = new Map();
+    accessTokens = new Map();
+    refreshTokens = new Map();
+    grants = new Map();
+    // User operations
+    async getUser(id) {
+        return this.users.get(id) ?? null;
+    }
+    async getUserByEmail(email) {
+        const id = this.usersByEmail.get(email.toLowerCase());
+        return id ? this.users.get(id) ?? null : null;
+    }
+    async saveUser(user) {
+        this.users.set(user.id, user);
+        if (user.email) {
+            this.usersByEmail.set(user.email.toLowerCase(), user.id);
+        }
+    }
+    async deleteUser(id) {
+        const user = this.users.get(id);
+        if (user?.email) {
+            this.usersByEmail.delete(user.email.toLowerCase());
+        }
+        this.users.delete(id);
+    }
+    async listUsers(options) {
+        let users = Array.from(this.users.values());
+        if (options?.organizationId) {
+            users = users.filter((u) => u.organizationId === options.organizationId);
+        }
+        if (options?.limit) {
+            users = users.slice(0, options.limit);
+        }
+        return users;
+    }
+    // Organization operations
+    async getOrganization(id) {
+        return this.organizations.get(id) ?? null;
+    }
+    async getOrganizationBySlug(slug) {
+        const id = this.organizationsBySlug.get(slug.toLowerCase());
+        return id ? this.organizations.get(id) ?? null : null;
+    }
+    async saveOrganization(org) {
+        this.organizations.set(org.id, org);
+        if (org.slug) {
+            this.organizationsBySlug.set(org.slug.toLowerCase(), org.id);
+        }
+    }
+    async deleteOrganization(id) {
+        const org = this.organizations.get(id);
+        if (org?.slug) {
+            this.organizationsBySlug.delete(org.slug.toLowerCase());
+        }
+        this.organizations.delete(id);
+    }
+    async listOrganizations(options) {
+        let orgs = Array.from(this.organizations.values());
+        if (options?.limit) {
+            orgs = orgs.slice(0, options.limit);
+        }
+        return orgs;
+    }
+    // Client operations
+    async getClient(clientId) {
+        return this.clients.get(clientId) ?? null;
+    }
+    async saveClient(client) {
+        this.clients.set(client.clientId, client);
+    }
+    async deleteClient(clientId) {
+        this.clients.delete(clientId);
+    }
+    async listClients(options) {
+        let clients = Array.from(this.clients.values());
+        if (options?.limit) {
+            clients = clients.slice(0, options.limit);
+        }
+        return clients;
+    }
+    // Authorization code operations
+    async saveAuthorizationCode(code) {
+        this.authCodes.set(code.code, code);
+    }
+    async consumeAuthorizationCode(code) {
+        const authCode = this.authCodes.get(code);
+        if (!authCode)
+            return null;
+        this.authCodes.delete(code);
+        return authCode;
+    }
+    // Token operations
+    async saveAccessToken(token) {
+        this.accessTokens.set(token.token, token);
+    }
+    async getAccessToken(token) {
+        return this.accessTokens.get(token) ?? null;
+    }
+    async revokeAccessToken(token) {
+        this.accessTokens.delete(token);
+    }
+    async saveRefreshToken(token) {
+        this.refreshTokens.set(token.token, token);
+    }
+    async getRefreshToken(token) {
+        return this.refreshTokens.get(token) ?? null;
+    }
+    async revokeRefreshToken(token) {
+        const rt = this.refreshTokens.get(token);
+        if (rt) {
+            rt.revoked = true;
+            this.refreshTokens.set(token, rt);
+        }
+    }
+    async revokeAllUserTokens(userId) {
+        for (const [key, token] of this.accessTokens) {
+            if (token.userId === userId) {
+                this.accessTokens.delete(key);
+            }
+        }
+        for (const [key, token] of this.refreshTokens) {
+            if (token.userId === userId) {
+                token.revoked = true;
+                this.refreshTokens.set(key, token);
+            }
+        }
+    }
+    async revokeAllClientTokens(clientId) {
+        for (const [key, token] of this.accessTokens) {
+            if (token.clientId === clientId) {
+                this.accessTokens.delete(key);
+            }
+        }
+        for (const [key, token] of this.refreshTokens) {
+            if (token.clientId === clientId) {
+                token.revoked = true;
+                this.refreshTokens.set(key, token);
+            }
+        }
+    }
+    // Grant operations
+    grantKey(userId, clientId) {
+        return `${userId}:${clientId}`;
+    }
+    async getGrant(userId, clientId) {
+        return this.grants.get(this.grantKey(userId, clientId)) ?? null;
+    }
+    async saveGrant(grant) {
+        this.grants.set(this.grantKey(grant.userId, grant.clientId), grant);
+    }
+    async revokeGrant(userId, clientId) {
+        const grant = this.grants.get(this.grantKey(userId, clientId));
+        if (grant) {
+            grant.revoked = true;
+            this.grants.set(this.grantKey(userId, clientId), grant);
+        }
+    }
+    async listUserGrants(userId) {
+        return Array.from(this.grants.values()).filter((g) => g.userId === userId && !g.revoked);
+    }
+    /**
+     * Clear all data (for testing)
+     */
+    clear() {
+        this.users.clear();
+        this.usersByEmail.clear();
+        this.organizations.clear();
+        this.organizationsBySlug.clear();
+        this.clients.clear();
+        this.authCodes.clear();
+        this.accessTokens.clear();
+        this.refreshTokens.clear();
+        this.grants.clear();
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsNH;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAA;IACpC,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAA;IACpD,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IACxC,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAA;IACrD,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAA;IAClD,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAA;IACpD,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAA;IAE9C,kBAAkB;IAClB,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACrD,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAe;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC7B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAqB;QACnC,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3C,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAC3D,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAsB;QAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACnC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtC,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAqB;QAC3C,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAA;QAClD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAqB;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/C,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,qBAAqB,CAAC,IAA4B;QACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,IAAY;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,mBAAmB;IACnB,KAAK,CAAC,eAAe,CAAC,KAAuB;QAC3C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAwB;QAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,EAAE,EAAE,CAAC;YACP,EAAE,CAAC,OAAO,GAAG,IAAI,CAAA;YACjB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;gBACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,QAAgB;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;gBACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACX,QAAQ,CAAC,MAAc,EAAE,QAAgB;QAC/C,OAAO,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,QAAgB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAgB;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC1F,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAA;QAC1B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAA;QAChC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,247 @@
+/**
+ * @dotdo/oauth - Core types for OAuth 2.1 server
+ *
+ * These types define the storage interface and data structures
+ * for the OAuth 2.1 server implementation.
+ */
+/**
+ * OAuth 2.1 User - represents an authenticated user
+ */
+export interface OAuthUser {
+    /** Unique user identifier */
+    id: string;
+    /** User's email address */
+    email?: string;
+    /** User's display name */
+    name?: string;
+    /** Organization/tenant the user belongs to */
+    organizationId?: string;
+    /** User roles for RBAC */
+    roles?: string[];
+    /** User permissions for fine-grained access */
+    permissions?: string[];
+    /** Additional user metadata */
+    metadata?: Record<string, unknown>;
+    /** When the user was created */
+    createdAt: number;
+    /** When the user was last updated */
+    updatedAt: number;
+    /** When the user last logged in */
+    lastLoginAt?: number;
+}
+/**
+ * OAuth 2.1 Organization - represents a tenant/organization
+ */
+export interface OAuthOrganization {
+    /** Unique organization identifier */
+    id: string;
+    /** Organization name */
+    name: string;
+    /** Organization slug (URL-safe identifier) */
+    slug?: string;
+    /** Organization metadata */
+    metadata?: Record<string, unknown>;
+    /** When the organization was created */
+    createdAt: number;
+    /** When the organization was last updated */
+    updatedAt: number;
+}
+/**
+ * OAuth 2.1 Client - represents a registered OAuth client (e.g., Claude, ChatGPT)
+ */
+export interface OAuthClient {
+    /** Unique client identifier */
+    clientId: string;
+    /** Client secret (hashed) - optional for public clients */
+    clientSecretHash?: string;
+    /** Client name for display */
+    clientName: string;
+    /** Allowed redirect URIs */
+    redirectUris: string[];
+    /** Allowed grant types */
+    grantTypes: ('authorization_code' | 'refresh_token' | 'client_credentials')[];
+    /** Allowed response types */
+    responseTypes: ('code' | 'token')[];
+    /** Token endpoint auth method */
+    tokenEndpointAuthMethod: 'none' | 'client_secret_basic' | 'client_secret_post';
+    /** Allowed scopes */
+    scope?: string;
+    /** Client metadata (logo, contacts, etc.) */
+    metadata?: Record<string, unknown>;
+    /** When the client was registered */
+    createdAt: number;
+    /** When the client registration expires (0 = never) */
+    expiresAt?: number;
+}
+/**
+ * OAuth 2.1 Authorization Code - short-lived code exchanged for tokens
+ */
+export interface OAuthAuthorizationCode {
+    /** The authorization code */
+    code: string;
+    /** Client that requested the code */
+    clientId: string;
+    /** User who authorized the request */
+    userId: string;
+    /** Redirect URI used in the authorization request */
+    redirectUri: string;
+    /** Granted scopes */
+    scope?: string;
+    /** PKCE code challenge */
+    codeChallenge?: string;
+    /** PKCE code challenge method (always S256 for OAuth 2.1) */
+    codeChallengeMethod?: 'S256';
+    /** When the code was issued */
+    issuedAt: number;
+    /** When the code expires (typically 10 minutes) */
+    expiresAt: number;
+    /** State parameter for CSRF protection */
+    state?: string;
+}
+/**
+ * OAuth 2.1 Access Token metadata
+ */
+export interface OAuthAccessToken {
+    /** The access token (or token identifier) */
+    token: string;
+    /** Token type (always 'Bearer' for OAuth 2.1) */
+    tokenType: 'Bearer';
+    /** Client the token was issued to */
+    clientId: string;
+    /** User the token represents */
+    userId: string;
+    /** Granted scopes */
+    scope?: string;
+    /** When the token was issued */
+    issuedAt: number;
+    /** When the token expires */
+    expiresAt: number;
+}
+/**
+ * OAuth 2.1 Refresh Token metadata
+ */
+export interface OAuthRefreshToken {
+    /** The refresh token */
+    token: string;
+    /** Client the token was issued to */
+    clientId: string;
+    /** User the token represents */
+    userId: string;
+    /** Granted scopes */
+    scope?: string;
+    /** When the token was issued */
+    issuedAt: number;
+    /** When the token expires (0 = never) */
+    expiresAt?: number;
+    /** Whether the token has been revoked */
+    revoked?: boolean;
+}
+/**
+ * OAuth 2.1 Grant - represents a user's authorization grant to a client
+ */
+export interface OAuthGrant {
+    /** Unique grant identifier */
+    id: string;
+    /** User who granted authorization */
+    userId: string;
+    /** Client that received authorization */
+    clientId: string;
+    /** Granted scopes */
+    scope?: string;
+    /** When the grant was created */
+    createdAt: number;
+    /** When the grant was last used */
+    lastUsedAt?: number;
+    /** Whether the grant has been revoked */
+    revoked?: boolean;
+}
+/**
+ * OAuth 2.1 Authorization Server Metadata
+ * As defined in RFC 8414
+ */
+export interface OAuthServerMetadata {
+    /** Authorization server's issuer identifier (URL) */
+    issuer: string;
+    /** URL of the authorization endpoint */
+    authorization_endpoint: string;
+    /** URL of the token endpoint */
+    token_endpoint: string;
+    /** URL of the dynamic client registration endpoint */
+    registration_endpoint?: string;
+    /** URL of the JWKS endpoint */
+    jwks_uri?: string;
+    /** Supported scopes */
+    scopes_supported?: string[];
+    /** Supported response types */
+    response_types_supported: string[];
+    /** Supported grant types */
+    grant_types_supported: string[];
+    /** Supported token endpoint auth methods */
+    token_endpoint_auth_methods_supported: string[];
+    /** Supported PKCE code challenge methods */
+    code_challenge_methods_supported: string[];
+    /** URL of the token revocation endpoint */
+    revocation_endpoint?: string;
+    /** URL of the token introspection endpoint */
+    introspection_endpoint?: string;
+}
+/**
+ * OAuth 2.1 Protected Resource Metadata
+ * As defined in draft-ietf-oauth-resource-metadata
+ */
+export interface OAuthResourceMetadata {
+    /** Resource server identifier (URL) */
+    resource: string;
+    /** Authorization servers that can issue tokens for this resource */
+    authorization_servers?: string[];
+    /** Scopes required to access this resource */
+    scopes_supported?: string[];
+    /** Bearer token methods supported */
+    bearer_methods_supported?: ('header' | 'body' | 'query')[];
+    /** Resource documentation URL */
+    resource_documentation?: string;
+}
+/**
+ * Token response from the token endpoint
+ */
+export interface TokenResponse {
+    /** The access token */
+    access_token: string;
+    /** Token type (always 'Bearer') */
+    token_type: 'Bearer';
+    /** Token lifetime in seconds */
+    expires_in: number;
+    /** Refresh token (if granted) */
+    refresh_token?: string;
+    /** Granted scopes (if different from requested) */
+    scope?: string;
+}
+/**
+ * Error response from OAuth endpoints
+ */
+export interface OAuthError {
+    /** Error code */
+    error: string;
+    /** Human-readable error description */
+    error_description?: string;
+    /** URI for more information */
+    error_uri?: string;
+}
+/**
+ * Upstream OAuth provider configuration (e.g., WorkOS)
+ */
+export interface UpstreamOAuthConfig {
+    /** Provider type */
+    provider: 'workos' | 'auth0' | 'okta' | 'custom';
+    /** API key or client secret */
+    apiKey: string;
+    /** Client ID */
+    clientId: string;
+    /** Authorization endpoint (for custom providers) */
+    authorizationEndpoint?: string;
+    /** Token endpoint (for custom providers) */
+    tokenEndpoint?: string;
+    /** JWKS URI (for custom providers) */
+    jwksUri?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,0BAA0B;IAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,0BAA0B;IAC1B,UAAU,EAAE,CAAC,oBAAoB,GAAG,eAAe,GAAG,oBAAoB,CAAC,EAAE,CAAA;IAC7E,6BAA6B;IAC7B,aAAa,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;IACnC,iCAAiC;IACjC,uBAAuB,EAAE,MAAM,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;IAC9E,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,SAAS,EAAE,QAAQ,CAAA;IACnB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,wCAAwC;IACxC,sBAAsB,EAAE,MAAM,CAAA;IAC9B,gCAAgC;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uBAAuB;IACvB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,+BAA+B;IAC/B,wBAAwB,EAAE,MAAM,EAAE,CAAA;IAClC,4BAA4B;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAA;IAC/B,4CAA4C;IAC5C,qCAAqC,EAAE,MAAM,EAAE,CAAA;IAC/C,4CAA4C;IAC5C,gCAAgC,EAAE,MAAM,EAAE,CAAA;IAC1C,2CAA2C;IAC3C,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,qCAAqC;IACrC,wBAAwB,CAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;IAC1D,iCAAiC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,mCAAmC;IACnC,UAAU,EAAE,QAAQ,CAAA;IACpB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,iCAAiC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,uCAAuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;IAChD,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * @dotdo/oauth - Core types for OAuth 2.1 server
+ *
+ * These types define the storage interface and data structures
+ * for the OAuth 2.1 server implementation.
+ */
+export {};
+//# sourceMappingURL=types.js.map