@easecation/iam-client 1.0.0

package/README.md

@@ -0,0 +1,66 @@
+# @easecation/iam-client
+
+IAM V2 client library for EaseCation services. Provides an API wrapper and an Express middleware for validating RS256 access tokens against IAM.
+
+## Install
+
+```bash
+npm install @easecation/iam-client
+```
+
+## Quick Start
+
+```ts
+import { IamClient } from '@easecation/iam-client';
+
+const client = new IamClient({
+  iamBaseUrl: 'http://localhost:8401',
+  clientId: '10007',
+  clientSecret: 'YOUR_CLIENT_SECRET',
+});
+
+// Exchange OAuth code for access + refresh tokens
+const tokens = await client.exchangeOAuthCode(code, redirectUri);
+
+// Verify access token and fetch permissions
+const verify = await client.verifyToken(tokens.access_token);
+```
+
+## Express Middleware
+
+```ts
+import express from 'express';
+import { IamClient, createIamAuthMiddleware } from '@easecation/iam-client';
+
+const client = new IamClient({
+  iamBaseUrl: 'http://localhost:8401',
+  clientId: '10007',
+  clientSecret: 'YOUR_CLIENT_SECRET',
+});
+
+const iamAuth = createIamAuthMiddleware(client);
+
+const router = express.Router();
+router.get('/profile', iamAuth(), (req, res) => {
+  const iamReq = req as any;
+  res.json({ uid: iamReq.iamUid, permissions: iamReq.iamPermissions });
+});
+
+router.post('/admin', iamAuth(['admin.write']), handler);
+```
+
+## API Highlights
+
+- `getAppSessionToken()`
+- `exchangeOAuthCode(code, redirectUri)`
+- `verifyToken(accessToken)`
+- `refreshToken(refreshToken)`
+- `revokeToken(refreshToken)`
+- `getUserProfile(accessToken)`
+- `getUserPermissions(userId, targetApplicationId?)`
+- `getJwks()`
+
+## Notes
+
+- App session authentication uses the `X-App-Session-Token` header.
+- Verify results are cached locally with a TTL that never exceeds the access token expiration.

package/dist/IamClient.d.ts

@@ -0,0 +1,69 @@
+/**
+ * IamClient — IAM V2 API wrapper.
+ *
+ * Usage:
+ *   const client = new IamClient({
+ *     iamBaseUrl: 'http://authapi.easecation.net',
+ *     clientId: '10007',
+ *     clientSecret: 'secret',
+ *   });
+ *
+ *   // Exchange OAuth code during login callback
+ *   const tokens = await client.exchangeOAuthCode(code, redirectUri);
+ *
+ *   // Verify a token on each request
+ *   const result = await client.verifyToken(accessToken);
+ */
+import { IamClientConfig, OAuthTokenData, VerifyTokenData, RefreshTokenData, JwksData, UserProfileData } from './types';
+export declare class IamClient {
+    private readonly config;
+    private readonly http;
+    /** Cached app session token */
+    private cachedAppToken;
+    /** Permission/verify cache keyed by access_token */
+    private verifyCache;
+    constructor(config: IamClientConfig);
+    /**
+     * Get (or return cached) the App Session Token.
+     * This token is used to authenticate subsequent API calls to IAM.
+     */
+    getAppSessionToken(): Promise<string>;
+    /** Invalidate the cached app session token (force re-auth on next call). */
+    invalidateAppToken(): void;
+    /**
+     * Exchange an OAuth2 authorization code for a V2 token pair.
+     * Returns { access_token, expires_in, refresh_token, refresh_token_expires_in }.
+     */
+    exchangeOAuthCode(code: string, redirectUri: string): Promise<OAuthTokenData>;
+    /**
+     * Verify an Access Token and retrieve the associated permissions.
+     * Results are cached for `permissionCacheTtlMs` to avoid hammering IAM.
+     */
+    verifyToken(accessToken: string): Promise<VerifyTokenData>;
+    /** Remove a token from the local verify cache (e.g. after logout). */
+    evictFromVerifyCache(accessToken: string): void;
+    /**
+     * Exchange a Refresh Token for a new Access Token.
+     */
+    refreshToken(refreshToken: string): Promise<RefreshTokenData>;
+    /**
+     * Revoke a session by its Refresh Token (logout).
+     */
+    revokeToken(refreshToken: string): Promise<boolean>;
+    /**
+     * Fetch the JWKS (JSON Web Key Set) from IAM.
+     * Used for local RS256 token verification without a network call.
+     */
+    getJwks(): Promise<JwksData>;
+    /**
+     * Get profile of the user who owns the given Access Token.
+     */
+    getUserProfile(accessToken: string): Promise<UserProfileData>;
+    /**
+     * Get permissions for a specific user+application.
+     * @param userId  IAM uid
+     * @param targetApplicationId  Defaults to the calling application.
+     */
+    getUserPermissions(userId: number, targetApplicationId?: number): Promise<string[]>;
+}
+//# sourceMappingURL=IamClient.d.ts.map

package/dist/IamClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IamClient.d.ts","sourceRoot":"","sources":["../src/IamClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACL,eAAe,EAGf,cAAc,EACd,eAAe,EACf,gBAAgB,EAEhB,QAAQ,EACR,eAAe,EAEhB,MAAM,SAAS,CAAC;AAYjB,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IAErC,+BAA+B;IAC/B,OAAO,CAAC,cAAc,CAA+B;IAErD,oDAAoD;IACpD,OAAO,CAAC,WAAW,CAAyC;gBAEhD,MAAM,EAAE,eAAe;IAiBnC;;;OAGG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;IA2B3C,4EAA4E;IAC5E,kBAAkB,IAAI,IAAI;IAM1B;;;OAGG;IACG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAmBnF;;;OAGG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAoChE,sEAAsE;IACtE,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAM/C;;OAEG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmBnE;;OAEG;IACG,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAezD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;IAOlC;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBnE;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAqB1F"}

package/dist/IamClient.js

@@ -0,0 +1,185 @@
+"use strict";
+/**
+ * IamClient — IAM V2 API wrapper.
+ *
+ * Usage:
+ *   const client = new IamClient({
+ *     iamBaseUrl: 'http://authapi.easecation.net',
+ *     clientId: '10007',
+ *     clientSecret: 'secret',
+ *   });
+ *
+ *   // Exchange OAuth code during login callback
+ *   const tokens = await client.exchangeOAuthCode(code, redirectUri);
+ *
+ *   // Verify a token on each request
+ *   const result = await client.verifyToken(accessToken);
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamClient = void 0;
+const axios_1 = __importDefault(require("axios"));
+class IamClient {
+    constructor(config) {
+        /** Cached app session token */
+        this.cachedAppToken = null;
+        /** Permission/verify cache keyed by access_token */
+        this.verifyCache = new Map();
+        this.config = {
+            appTokenCacheTtlMs: 55 * 60 * 1000, // 55 minutes
+            permissionCacheTtlMs: 5 * 60 * 1000, // 5 minutes
+            timeoutMs: 5000,
+            ...config,
+        };
+        this.http = axios_1.default.create({
+            baseURL: this.config.iamBaseUrl,
+            timeout: this.config.timeoutMs,
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    // ── App Session Token ────────────────────────────────────────────────────────
+    /**
+     * Get (or return cached) the App Session Token.
+     * This token is used to authenticate subsequent API calls to IAM.
+     */
+    async getAppSessionToken() {
+        const now = Date.now();
+        if (this.cachedAppToken && now < this.cachedAppToken.expiresAt) {
+            return this.cachedAppToken.token;
+        }
+        const response = await this.http.post('/api/open/v2/token', {
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret,
+        });
+        const data = response.data;
+        if (!data.success || !data.data?.applicationSessionToken) {
+            throw new Error(`IAM: Failed to get app token: ${data.message || data.code}`);
+        }
+        this.cachedAppToken = {
+            token: data.data.applicationSessionToken,
+            expiresAt: now + this.config.appTokenCacheTtlMs,
+        };
+        return this.cachedAppToken.token;
+    }
+    /** Invalidate the cached app session token (force re-auth on next call). */
+    invalidateAppToken() {
+        this.cachedAppToken = null;
+    }
+    // ── OAuth2 Code Exchange ─────────────────────────────────────────────────────
+    /**
+     * Exchange an OAuth2 authorization code for a V2 token pair.
+     * Returns { access_token, expires_in, refresh_token, refresh_token_expires_in }.
+     */
+    async exchangeOAuthCode(code, redirectUri) {
+        const appToken = await this.getAppSessionToken();
+        const response = await this.http.post('/api/open/v2/oauth/token', { code, redirect_uri: redirectUri }, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        if (!data.success || !data.data) {
+            throw new Error(`IAM: OAuth code exchange failed: ${data.message || data.code}`);
+        }
+        return data.data;
+    }
+    // ── Token Verify ─────────────────────────────────────────────────────────────
+    /**
+     * Verify an Access Token and retrieve the associated permissions.
+     * Results are cached for `permissionCacheTtlMs` to avoid hammering IAM.
+     */
+    async verifyToken(accessToken) {
+        const now = Date.now();
+        const cached = this.verifyCache.get(accessToken);
+        if (cached && now < cached.expiresAt) {
+            return cached.result;
+        }
+        const appToken = await this.getAppSessionToken();
+        const response = await this.http.post('/api/open/v2/verify', { access_token: accessToken }, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        if (!data.success || !data.data) {
+            // Evict any stale cache entry so the next request also hits IAM
+            // (covers the case where IAM revoked the session between cache fills)
+            this.verifyCache.delete(accessToken);
+            throw new Error(`IAM: Token verification failed: ${data.message || data.code}`);
+        }
+        // Cache should never outlive the access token expiration.
+        const expMs = data.data.exp * 1000;
+        const cacheExpiresAt = Math.min(now + this.config.permissionCacheTtlMs, expMs - 1000);
+        if (cacheExpiresAt > now) {
+            this.verifyCache.set(accessToken, {
+                result: data.data,
+                expiresAt: cacheExpiresAt,
+            });
+        }
+        return data.data;
+    }
+    /** Remove a token from the local verify cache (e.g. after logout). */
+    evictFromVerifyCache(accessToken) {
+        this.verifyCache.delete(accessToken);
+    }
+    // ── Token Refresh ─────────────────────────────────────────────────────────────
+    /**
+     * Exchange a Refresh Token for a new Access Token.
+     */
+    async refreshToken(refreshToken) {
+        const appToken = await this.getAppSessionToken();
+        const response = await this.http.post('/api/open/v2/refresh', { refresh_token: refreshToken }, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        if (!data.success || !data.data) {
+            throw new Error(`IAM: Token refresh failed: ${data.message || data.code}`);
+        }
+        return data.data;
+    }
+    // ── Session Revoke ────────────────────────────────────────────────────────────
+    /**
+     * Revoke a session by its Refresh Token (logout).
+     */
+    async revokeToken(refreshToken) {
+        const appToken = await this.getAppSessionToken();
+        const response = await this.http.post('/api/open/v2/revoke', { refresh_token: refreshToken }, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        return !!(data.success && data.data?.revoked);
+    }
+    // ── JWKS ──────────────────────────────────────────────────────────────────────
+    /**
+     * Fetch the JWKS (JSON Web Key Set) from IAM.
+     * Used for local RS256 token verification without a network call.
+     */
+    async getJwks() {
+        const response = await this.http.get('/api/open/v2/jwks');
+        return response.data;
+    }
+    // ── User Profile ──────────────────────────────────────────────────────────────
+    /**
+     * Get profile of the user who owns the given Access Token.
+     */
+    async getUserProfile(accessToken) {
+        const appToken = await this.getAppSessionToken();
+        const response = await this.http.post('/api/open/v2/user/profile', { access_token: accessToken }, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        if (!data.success || !data.data) {
+            throw new Error(`IAM: getUserProfile failed: ${data.message || data.code}`);
+        }
+        return data.data;
+    }
+    // ── User Permissions ──────────────────────────────────────────────────────────
+    /**
+     * Get permissions for a specific user+application.
+     * @param userId  IAM uid
+     * @param targetApplicationId  Defaults to the calling application.
+     */
+    async getUserPermissions(userId, targetApplicationId) {
+        const appToken = await this.getAppSessionToken();
+        const body = { user_id: userId };
+        if (targetApplicationId !== undefined) {
+            body.target_application_id = targetApplicationId;
+        }
+        const response = await this.http.post('/api/open/v2/user/permissions', body, { headers: { 'X-App-Session-Token': appToken } });
+        const data = response.data;
+        if (!data.success || !data.data) {
+            throw new Error(`IAM: getUserPermissions failed: ${data.message || data.code}`);
+        }
+        return data.data.permissions;
+    }
+}
+exports.IamClient = IamClient;
+//# sourceMappingURL=IamClient.js.map

package/dist/IamClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IamClient.js","sourceRoot":"","sources":["../src/IamClient.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;AAEH,kDAA6C;AAwB7C,MAAa,SAAS;IAUpB,YAAY,MAAuB;QANnC,+BAA+B;QACvB,mBAAc,GAA0B,IAAI,CAAC;QAErD,oDAAoD;QAC5C,gBAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;QAG1D,IAAI,CAAC,MAAM,GAAG;YACZ,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAI,aAAa;YACnD,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,YAAY;YACnD,SAAS,EAAE,IAAI;YACf,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAC/B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC9B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,cAAc,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,oBAAoB,EACpB;YACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACxC,CACF,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,cAAc,GAAG;YACpB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YACxC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;SAChD,CAAC;QAEF,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;QAChB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,WAAmB;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,0BAA0B,EAC1B,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,EACnC,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,qBAAqB,EACrB,EAAE,YAAY,EAAE,WAAW,EAAE,EAC7B,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,gEAAgE;YAChE,sEAAsE;YACtE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,0DAA0D;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACtF,IAAI,cAAc,GAAG,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,SAAS,EAAE,cAAc;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,oBAAoB,CAAC,WAAmB;QACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,iFAAiF;IAEjF;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,sBAAsB,EACtB,EAAE,aAAa,EAAE,YAAY,EAAE,EAC/B,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,iFAAiF;IAEjF;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,YAAoB;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,qBAAqB,EACrB,EAAE,aAAa,EAAE,YAAY,EAAE,EAC/B,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,iFAAiF;IAEjF;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,mBAAmB,CAAC,CAAC;QACpE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,iFAAiF;IAEjF;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,2BAA2B,EAC3B,EAAE,YAAY,EAAE,WAAW,EAAE,EAC7B,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,iFAAiF;IAEjF;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,mBAA4B;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC1D,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,qBAAqB,GAAG,mBAAmB,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,+BAA+B,EAC/B,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;IAC/B,CAAC;CACF;AA1OD,8BA0OC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { IamClient } from './IamClient';
+export { createIamAuthMiddleware } from './middleware';
+export type { IamRequest } from './middleware';
+export type { IamClientConfig, IamApiResponse, AppTokenData, OAuthTokenData, VerifyTokenData, RefreshTokenData, RevokeTokenData, JwkData, JwksData, UserProfileData, UserPermissionsData, DecodedAccessToken, IamAuthRequest, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EACV,eAAe,EACf,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,OAAO,EACP,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,GACf,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIamAuthMiddleware = exports.IamClient = void 0;
+var IamClient_1 = require("./IamClient");
+Object.defineProperty(exports, "IamClient", { enumerable: true, get: function () { return IamClient_1.IamClient; } });
+var middleware_1 = require("./middleware");
+Object.defineProperty(exports, "createIamAuthMiddleware", { enumerable: true, get: function () { return middleware_1.createIamAuthMiddleware; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAClB,2CAAuD;AAA9C,qHAAA,uBAAuB,OAAA"}

package/dist/middleware.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Express middleware factory for IAM V2 authentication.
+ *
+ * Usage:
+ *   import { createIamAuthMiddleware } from '@easecation/iam-client';
+ *
+ *   const iamAuth = createIamAuthMiddleware(iamClient);
+ *
+ *   // Protect a route (no permission requirements)
+ *   router.get('/profile', iamAuth(), handler);
+ *
+ *   // Protect a route and require specific permissions
+ *   router.post('/admin', iamAuth(['admin.write']), handler);
+ */
+import type { Request, Response, NextFunction } from 'express';
+import { IamClient } from './IamClient';
+/** Express Request extended with IAM claims */
+export interface IamRequest extends Request {
+    iamUid: number;
+    iamApplicationId: number;
+    iamPermissions: string[];
+    iamTokenExp: number;
+}
+type IamMiddlewareFn = (req: Request, res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Create an auth middleware factory bound to an IamClient instance.
+ *
+ * @param client  Configured IamClient.
+ * @returns       A function `iamAuth(requiredPermissions?)` that returns an Express middleware.
+ */
+export declare function createIamAuthMiddleware(client: IamClient): (requiredPermissions?: string[]) => IamMiddlewareFn;
+export {};
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,+CAA+C;AAC/C,MAAM,WAAW,UAAW,SAAQ,OAAO;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,eAAe,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,IAC/B,sBAAqB,MAAM,EAAO,KAAG,eAAe,CAwE7E"}

package/dist/middleware.js

@@ -0,0 +1,87 @@
+"use strict";
+/**
+ * Express middleware factory for IAM V2 authentication.
+ *
+ * Usage:
+ *   import { createIamAuthMiddleware } from '@easecation/iam-client';
+ *
+ *   const iamAuth = createIamAuthMiddleware(iamClient);
+ *
+ *   // Protect a route (no permission requirements)
+ *   router.get('/profile', iamAuth(), handler);
+ *
+ *   // Protect a route and require specific permissions
+ *   router.post('/admin', iamAuth(['admin.write']), handler);
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIamAuthMiddleware = createIamAuthMiddleware;
+/**
+ * Create an auth middleware factory bound to an IamClient instance.
+ *
+ * @param client  Configured IamClient.
+ * @returns       A function `iamAuth(requiredPermissions?)` that returns an Express middleware.
+ */
+function createIamAuthMiddleware(client) {
+    return function iamAuth(requiredPermissions = []) {
+        return async (req, res, next) => {
+            const authHeader = req.headers['authorization'];
+            if (!authHeader) {
+                res.status(401).json({ success: false, message: 'Missing authorization header' });
+                return;
+            }
+            const parts = authHeader.split(' ');
+            if (parts.length !== 2 || parts[0] !== 'Bearer') {
+                res.status(401).json({ success: false, message: 'Invalid authorization format' });
+                return;
+            }
+            const accessToken = parts[1];
+            try {
+                const result = await client.verifyToken(accessToken);
+                if (!result.valid) {
+                    res.status(401).json({ success: false, message: 'Invalid access token' });
+                    return;
+                }
+                // Permission check
+                if (requiredPermissions.length > 0) {
+                    const hasAll = requiredPermissions.every(p => result.permissions.includes(p));
+                    if (!hasAll) {
+                        res.status(403).json({ success: false, message: 'Insufficient permissions' });
+                        return;
+                    }
+                }
+                // Attach claims to request
+                const iamReq = req;
+                iamReq.iamUid = result.uid;
+                iamReq.iamApplicationId = result.application_id;
+                iamReq.iamPermissions = result.permissions;
+                iamReq.iamTokenExp = result.exp;
+                next();
+            }
+            catch (error) {
+                // Distinguish IAM-reported token errors from network / server errors.
+                // IamClient.verifyToken throws "IAM: Token verification failed: <CODE>"
+                // for token-level rejections.  Network errors carry an error.code.
+                const msg = error?.message || '';
+                const isTokenError = msg.startsWith('IAM: Token verification failed:') ||
+                    msg === 'IAM: Token verification failed: ERROR_V2_INVALID_TOKEN' ||
+                    msg === 'IAM: Token verification failed: ERROR_V2_TOKEN_EXPIRED';
+                const isNetworkError = error?.code === 'ECONNREFUSED' ||
+                    error?.code === 'ENOTFOUND' ||
+                    error?.code === 'ETIMEDOUT' ||
+                    (error?.response?.status != null && error.response.status >= 500);
+                if (isTokenError) {
+                    res.status(401).json({ success: false, message: 'Invalid or expired access token' });
+                    return;
+                }
+                if (isNetworkError) {
+                    console.error('[IamClient] IAM unreachable:', error?.code || error?.message);
+                    res.status(503).json({ success: false, message: 'Authentication service temporarily unavailable' });
+                    return;
+                }
+                console.error('[IamClient] Auth middleware error:', error);
+                res.status(500).json({ success: false, message: 'Authentication service error' });
+            }
+        };
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAqBH,0DAyEC;AA/ED;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,MAAiB;IACvD,OAAO,SAAS,OAAO,CAAC,sBAAgC,EAAE;QACxD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;YAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;gBAErD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBAC1E,OAAO;gBACT,CAAC;gBAED,mBAAmB;gBACnB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9E,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,MAAM,GAAG,GAAiB,CAAC;gBACjC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC3B,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC;gBAChD,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC3C,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;gBAEhC,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,wEAAwE;gBACxE,mEAAmE;gBACnE,MAAM,GAAG,GAAW,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;gBACzC,MAAM,YAAY,GAChB,GAAG,CAAC,UAAU,CAAC,iCAAiC,CAAC;oBACjD,GAAG,KAAK,wDAAwD;oBAChE,GAAG,KAAK,wDAAwD,CAAC;gBACnE,MAAM,cAAc,GAClB,KAAK,EAAE,IAAI,KAAK,cAAc;oBAC9B,KAAK,EAAE,IAAI,KAAK,WAAW;oBAC3B,KAAK,EAAE,IAAI,KAAK,WAAW;oBAC3B,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;gBAEpE,IAAI,YAAY,EAAE,CAAC;oBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;oBACrF,OAAO;gBACT,CAAC;gBAED,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,OAAO,CAAC,CAAC;oBAC7E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;oBACpG,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Types for the @easecation/iam-client package.
+ */
+export interface IamApiResponse<T = unknown> {
+    success: boolean;
+    data?: T;
+    message?: string;
+    code?: string;
+}
+export interface AppTokenData {
+    applicationSessionToken: string;
+    applicationId: number;
+}
+export interface OAuthTokenData {
+    access_token: string;
+    expires_in: number;
+    refresh_token: string;
+    refresh_token_expires_in: number;
+    token_type: 'Bearer';
+}
+export interface VerifyTokenData {
+    valid: boolean;
+    uid: number;
+    application_id: number;
+    permissions: string[];
+    exp: number;
+}
+export interface RefreshTokenData {
+    access_token: string;
+    expires_in: number;
+    token_type: 'Bearer';
+}
+export interface RevokeTokenData {
+    revoked: boolean;
+}
+export interface JwkData {
+    kty: 'RSA';
+    use: 'sig';
+    alg: 'RS256';
+    kid: string;
+    n: string;
+    e: string;
+}
+export interface JwksData {
+    keys: JwkData[];
+}
+export interface UserProfileData {
+    uid: number;
+    name: string;
+    email: string;
+    status: string;
+}
+export interface UserPermissionsData {
+    permissions: string[];
+    application_id: number;
+    user_id: number;
+}
+export interface IamClientConfig {
+    /** IAM backend URL, e.g. http://authapi.easecation.net */
+    iamBaseUrl: string;
+    /** Application client_id */
+    clientId: string;
+    /** Application client_secret */
+    clientSecret: string;
+    /**
+     * How long (ms) to cache the App Session Token.
+     * Defaults to 55 minutes (token lifetime is 1h by default in V1).
+     */
+    appTokenCacheTtlMs?: number;
+    /**
+     * How long (ms) to cache permission verification results locally.
+     * Defaults to 5 minutes.
+     */
+    permissionCacheTtlMs?: number;
+    /**
+     * Request timeout (ms). Defaults to 5000.
+     */
+    timeoutMs?: number;
+}
+export interface DecodedAccessToken {
+    uid: number;
+    app: number;
+    jti: string;
+    iat: number;
+    exp: number;
+    iss: string;
+}
+/** Augment Express Request with IAM claims */
+export interface IamAuthRequest {
+    iamUid: number;
+    iamApplicationId: number;
+    iamPermissions: string[];
+    iamTokenExp: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,QAAQ,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,QAAQ,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAID,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Types for the @easecation/iam-client package.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@easecation/iam-client",
+  "version": "1.0.0",
+  "description": "IAM V2 client library for EaseCation services",
+  "license": "UNLICENSED",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "keywords": [
+    "iam",
+    "oauth",
+    "jwt",
+    "rbac",
+    "easecation"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch"
+  },
+  "dependencies": {
+    "axios": "^1.6.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "express": {
+      "optional": true
+    }
+  }
+}