@dreadkn1ght123/auth-core 0.2.0

package/dist/errors.js

@@ -0,0 +1,164 @@
+const CODE_DEFAULTS = {
+    CONFIG_INVALID: ["configuration", "config_invalid"],
+    CLAIMS_INVALID: ["claims", "claims_invalid"],
+    OIDC_DISCOVERY_FAILED: ["discovery", "provider_unavailable"],
+    AUTHORIZATION_FAILED: ["callback", "provider_rejected"],
+    ACCESS_TOKEN_INVALID: ["access_token_validation", "token_claims_invalid"],
+    TOKEN_REFRESH_FAILED: ["token_refresh", "provider_rejected"],
+    SESSION_NOT_FOUND: ["session", "session_not_found"],
+    SESSION_STORE_UNSAFE: ["configuration", "store_unsafe"],
+    RETURN_TO_INVALID: ["authorization", "return_to_invalid"],
+    TRANSACTION_INVALID: ["transaction", "transaction_not_found"],
+    SESSION_PERSISTENCE_FAILED: ["session", "session_persistence_failed"],
+    LOGOUT_FAILED: ["logout", "provider_logout_rejected"],
+};
+const SAFE_LIBRARY_CODES = new Set([
+    "OAUTH_INVALID_RESPONSE",
+    "OAUTH_RESPONSE_IS_NOT_CONFORM",
+    "OAUTH_INVALID_SERVER_RESPONSE",
+    "OAUTH_WWW_AUTHENTICATE_CHALLENGE",
+    "ERR_JWT_EXPIRED",
+    "ERR_JWT_CLAIM_VALIDATION_FAILED",
+    "ERR_JWS_SIGNATURE_VERIFICATION_FAILED",
+    "ERR_JOSE_ALG_NOT_ALLOWED",
+    "ERR_JWKS_NO_MATCHING_KEY",
+    "ERR_JWKS_TIMEOUT",
+]);
+const SAFE_PROVIDER_ERRORS = new Set([
+    "access_denied", "invalid_client", "invalid_grant", "interaction_required",
+    "login_required", "server_error", "temporarily_unavailable",
+]);
+const SAFE_CAUSE_NAMES = new Set([
+    "AuthorizationResponseError", "ClientError", "JWTClaimValidationFailed",
+    "JWTExpired", "JOSEAlgNotAllowed", "JWKSTimeout", "JWKSNoMatchingKey",
+    "JWSSignatureVerificationFailed", "OperationProcessingError",
+    "ResponseBodyError",
+]);
+const SAFE_CLAIMS = new Set([
+    "aud", "azp", "exp", "iat", "iss", "nbf", "nonce", "sub",
+]);
+function record(value) {
+    return value !== null && (typeof value === "object" || typeof value === "function")
+        ? value
+        : undefined;
+}
+/** Extracts only audited scalar fields from supported error families. */
+export function safeAuthErrorDetails(error) {
+    const seen = new Set();
+    let current = error;
+    for (let depth = 0; depth < 5 && current && !seen.has(current); depth += 1) {
+        seen.add(current);
+        const value = record(current);
+        if (!value)
+            break;
+        const name = typeof value["name"] === "string" ? value["name"] : "";
+        const code = typeof value["code"] === "string" ? value["code"] : "";
+        const library = name.startsWith("JWT") || name.startsWith("JWS") ||
+            name.startsWith("JOSE") || name.startsWith("JWK")
+            ? "jose"
+            : name === "OperationProcessingError" || name === "ResponseBodyError"
+                ? "oauth4webapi"
+                : name.includes("ClientError") || name.includes("AuthorizationResponse")
+                    ? "openid-client"
+                    : undefined;
+        if (library) {
+            const claimValue = value["claim"];
+            const claim = typeof claimValue === "string" && SAFE_CLAIMS.has(claimValue) ? claimValue : undefined;
+            const response = record(value["response"]);
+            const statusValue = value["status"] ?? value["statusCode"] ??
+                response?.["status"];
+            const httpStatus = typeof statusValue === "number" &&
+                Number.isInteger(statusValue) && statusValue >= 400 && statusValue <= 599
+                ? statusValue
+                : undefined;
+            const providerValue = value["error"];
+            const providerError = typeof providerValue === "string" &&
+                SAFE_PROVIDER_ERRORS.has(providerValue)
+                ? providerValue
+                : undefined;
+            return {
+                library,
+                ...(SAFE_LIBRARY_CODES.has(code) ? { libraryCode: code } : {}),
+                ...(httpStatus ? { httpStatus } : {}),
+                ...(claim ? { claim } : {}),
+                ...(SAFE_CAUSE_NAMES.has(name) ? { causeName: name } : {}),
+                ...(SAFE_LIBRARY_CODES.has(code) ? { causeCode: code } : {}),
+                ...(providerError ? { providerError } : {}),
+                ...(httpStatus ? { providerStatus: httpStatus } : {}),
+                ...(claim ? { failedClaim: claim, claimFailureReason: "check_failed" } : {}),
+            };
+        }
+        current = value["cause"];
+    }
+    return {};
+}
+export function classifyAuthError(error) {
+    if (error instanceof AuthError) {
+        return { reason: error.reason, details: error.details };
+    }
+    const details = safeAuthErrorDetails(error);
+    switch (details.libraryCode) {
+        case "ERR_JWT_EXPIRED": return { reason: "token_expired", details };
+        case "ERR_JWS_SIGNATURE_VERIFICATION_FAILED":
+        case "ERR_JWKS_NO_MATCHING_KEY":
+        case "ERR_JOSE_ALG_NOT_ALLOWED":
+            return { reason: "access_token_signature_invalid", details };
+        case "ERR_JWT_CLAIM_VALIDATION_FAILED":
+            return {
+                reason: details.claim === "nonce" ? "nonce_mismatch"
+                    : details.claim === "iss" ? "issuer_mismatch"
+                        : details.claim === "aud" ? "audience_mismatch"
+                            : "required_claim_missing",
+                details,
+            };
+        default:
+            return {
+                reason: details.providerError === "invalid_client" ? "invalid_client"
+                    : details.providerError === "access_denied" ? "authorization_denied"
+                        : details.providerError === "invalid_grant" ? "pkce_validation_failed"
+                            : details.providerError === "temporarily_unavailable" ||
+                                details.providerError === "server_error" ? "provider_unavailable"
+                                : details.library === "jose" ? "id_token_invalid"
+                                    : details.library ? "token_endpoint_rejected" : "callback_failed_unknown",
+                details,
+            };
+    }
+}
+export function toSafeAuthErrorFields(error, correlationId) {
+    if (error instanceof AuthError) {
+        return {
+            authErrorCode: error.code,
+            stage: error.stage,
+            reason: error.reason,
+            ...error.safeDetails,
+            ...(correlationId ? { correlationId } : {}),
+        };
+    }
+    return {
+        ...safeAuthErrorDetails(error),
+        ...(correlationId ? { correlationId } : {}),
+    };
+}
+export class AuthError extends Error {
+    code;
+    stage;
+    reason;
+    details;
+    safeDetails;
+    cause;
+    constructor(code, message, options = {}) {
+        super(message);
+        this.name = "AuthError";
+        this.code = code;
+        this.stage = options.stage ?? CODE_DEFAULTS[code][0];
+        this.reason = options.reason ?? CODE_DEFAULTS[code][1];
+        this.details = options.safeDetails ?? options.details ?? (options.cause
+            ? safeAuthErrorDetails(options.cause)
+            : {});
+        this.safeDetails = this.details;
+        if ("cause" in options) {
+            this.cause = options.cause;
+        }
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAgBA,MAAM,aAAa,GAAuE;IACxF,cAAc,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACnD,cAAc,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAC5C,qBAAqB,EAAE,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC5D,oBAAoB,EAAE,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACvD,oBAAoB,EAAE,CAAC,yBAAyB,EAAE,sBAAsB,CAAC;IACzE,oBAAoB,EAAE,CAAC,eAAe,EAAE,mBAAmB,CAAC;IAC5D,iBAAiB,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACnD,oBAAoB,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;IACvD,iBAAiB,EAAE,CAAC,eAAe,EAAE,mBAAmB,CAAC;IACzD,mBAAmB,EAAE,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAC7D,0BAA0B,EAAE,CAAC,SAAS,EAAE,4BAA4B,CAAC;IACrE,aAAa,EAAE,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CACtD,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,wBAAwB;IACxB,+BAA+B;IAC/B,+BAA+B;IAC/B,kCAAkC;IAClC,iBAAiB;IACjB,iCAAiC;IACjC,uCAAuC;IACvC,0BAA0B;IAC1B,0BAA0B;IAC1B,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAwC;IAC1E,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB;IAC1E,gBAAgB,EAAE,cAAc,EAAE,yBAAyB;CAC5D,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,4BAA4B,EAAE,aAAa,EAAE,0BAA0B;IACvE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB;IACrE,gCAAgC,EAAE,0BAA0B;IAC5D,mBAAmB;CACpB,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAgC;IACzD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;CACzD,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC;QACjF,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,MAAM;QAClB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAC/C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,KAAK,0BAA0B,IAAI,IAAI,KAAK,mBAAmB;gBACnE,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;oBACtE,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,SAAS,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAC7D,UAA2C,CAC5C,CAAC,CAAC,CAAC,UAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC;gBACxD,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,OAAO,WAAW,KAAK,QAAQ;gBAChD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG;gBACzE,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,OAAO,aAAa,KAAK,QAAQ;gBACrD,oBAAoB,CAAC,GAAG,CAAC,aAAsD,CAAC;gBAChF,CAAC,CAAC,aAAsD;gBACxD,CAAC,CAAC,SAAS,CAAC;YACd,OAAO;gBACL,OAAO;gBACP,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAI9C,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5B,KAAK,iBAAiB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;QACpE,KAAK,uCAAuC,CAAC;QAC7C,KAAK,0BAA0B,CAAC;QAChC,KAAK,0BAA0B;YAC7B,OAAO,EAAE,MAAM,EAAE,gCAAgC,EAAE,OAAO,EAAE,CAAC;QAC/D,KAAK,iCAAiC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB;oBAClD,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB;wBAC7C,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,mBAAmB;4BAC/C,CAAC,CAAC,wBAAwB;gBAC5B,OAAO;aACR,CAAC;QACJ;YACE,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,aAAa,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;oBACnE,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,CAAC,CAAC,sBAAsB;wBACpE,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,CAAC,CAAC,wBAAwB;4BACtE,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,yBAAyB;gCACjD,OAAO,CAAC,aAAa,KAAK,cAAc,CAAC,CAAC,CAAC,sBAAsB;gCACrE,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,kBAAkB;oCACjD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB;gBAC3E,OAAO;aACR,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,aAAsB;IAEtB,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,IAAI;YACzB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,KAAK,CAAC,WAAW;YACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,oBAAoB,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAgB;IACpB,KAAK,CAAsB;IAC3B,MAAM,CAAuB;IAC7B,OAAO,CAAiC;IACxC,WAAW,CAAiC;IACnC,KAAK,CAAW;IAElC,YAAY,IAAmB,EAAE,OAAe,EAAE,UAA4B,EAAE;QAC9E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;YACrE,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { KeycloakJwtAccessTokenValidator, type AccessTokenValidator, } from "./access-token.js";
+export { actorFromClaims, createClientRoleHelpers, hasAnyClientRole, hasClientRole, hasRealmRole, isVvpClaims, normalizeRoles, } from "./claims.js";
+export { normalizeAuthRoutes, validateConfig, withAuthRoutes } from "./config.js";
+export { AuthError, classifyAuthError, safeAuthErrorDetails, toSafeAuthErrorFields, type AuthErrorOptions, } from "./errors.js";
+export { VvpOidcClient, toPublicSession, type AuthorizationOptions, type AuthorizationTransaction, type CallbackInput, } from "./oidc.js";
+export { safeReturnTo, type ReturnToOptions, } from "./return-to.js";
+export { MemorySessionStore } from "./session-store.js";
+export { assertProductionSafeStore, isProductionSafeStore } from "./store-security.js";
+export { transactionConsumeError } from "./transaction.js";
+export type { Actor, ActorType, KnownActorType, AuthConfig, AuthConfigInput, AuthErrorCode, AuthDiagnostic, AuthFailureReason, AuthLogger, AuthRouteSettings, AuthRouteSettingsInput, AuthRoutes, AuthRoutesInput, AuthRoutesOption, AuthUiConfig, AuthUiConfigInput, AuthUiLocale, AuthStoreCapabilities, AuthStage, AuthDiagnosticReason, AuthDiagnosticStage, CallbackAuthStage, CallbackFailureReason, AtomicTransactionStore, ClientAuthenticationMethod, ConsumeTransactionResult, ClientAccess, PublicSession, RealmAccess, Role, RuntimeEnvironment, SafeLogFields, SafeLogValue, ServerSession, ServerTokens, SessionStore, SafeAuthErrorDetails, SafeAuthErrorFields, TransactionConsumeOutcome, VvpClaims, VvpRealmRole, } from "@dreadkn1ght123/auth-types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,oBAAoB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,YAAY,EACZ,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,YAAY,EACV,KAAK,EACL,SAAS,EACT,cAAc,EACd,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,IAAI,EACJ,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,SAAS,EACT,YAAY,GACb,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { KeycloakJwtAccessTokenValidator, } from "./access-token.js";
+export { actorFromClaims, createClientRoleHelpers, hasAnyClientRole, hasClientRole, hasRealmRole, isVvpClaims, normalizeRoles, } from "./claims.js";
+export { normalizeAuthRoutes, validateConfig, withAuthRoutes } from "./config.js";
+export { AuthError, classifyAuthError, safeAuthErrorDetails, toSafeAuthErrorFields, } from "./errors.js";
+export { VvpOidcClient, toPublicSession, } from "./oidc.js";
+export { safeReturnTo, } from "./return-to.js";
+export { MemorySessionStore } from "./session-store.js";
+export { assertProductionSafeStore, isProductionSafeStore } from "./store-security.js";
+export { transactionConsumeError } from "./transaction.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,eAAe,GAIhB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,YAAY,GAEb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/oidc.d.ts

@@ -0,0 +1,38 @@
+import type { AuthConfig, AuthLogger, PublicSession, ServerSession, SessionStore } from "@dreadkn1ght123/auth-types";
+import { type AccessTokenValidator } from "./access-token.js";
+export interface AuthorizationTransaction {
+    /** URL to redirect the user agent to. */
+    authorizationUrl: URL;
+    /** Keep these values server-side until the callback. */
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+}
+export interface CallbackInput {
+    callbackUrl: URL;
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+    correlationId?: string;
+}
+export interface AuthorizationOptions {
+    loginHint?: string;
+    prompt?: string;
+    returnTo?: string;
+    additionalParameters?: Readonly<Record<string, string>>;
+}
+export declare class VvpOidcClient {
+    #private;
+    private constructor();
+    static discover(config: AuthConfig, sessions: SessionStore, options?: {
+        logger?: AuthLogger;
+        now?: () => number;
+        accessTokenValidator?: AccessTokenValidator;
+    }): Promise<VvpOidcClient>;
+    createAuthorizationRequest(options?: AuthorizationOptions): Promise<AuthorizationTransaction>;
+    handleCallback(input: CallbackInput): Promise<ServerSession>;
+    refreshSession(sessionId: string): Promise<ServerSession>;
+    logout(sessionId: string): Promise<URL>;
+}
+export declare function toPublicSession(session: ServerSession): PublicSession;
+//# sourceMappingURL=oidc.d.ts.map

package/dist/oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,aAAa,EAEb,aAAa,EAEb,YAAY,EACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAK3B,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,gBAAgB,EAAE,GAAG,CAAC;IACtB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,GAAG,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAqLD,qBAAa,aAAa;;IAQxB,OAAO;WAgBM,QAAQ,CACnB,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE;QACP,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;KACxC,GACL,OAAO,CAAC,aAAa,CAAC;IA+FnB,0BAA0B,CAC9B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC;IA0B9B,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAmG5D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsFzD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CA0C9C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAKrE"}