@edirect/oidc-client 11.0.62 → 11.0.64

package/dist/README.md

@@ -0,0 +1,136 @@
+# @edirect/oidc-client
+
+OpenID Connect client for eDirect applications. Supports three OAuth2 grant types — `password`, `client_credentials`, and `sso` — with a uniform API for acquiring and refreshing tokens.
+
+## Features
+
+- Three grant types: `password`, `client_credentials`, `sso`
+- Uniform `getAccessToken()` and `getRefreshToken()` API across all grant types
+- OIDC provider discovery via configurable `baseUrl` and `oidcPath`
+- Token set parsing utilities
+
+## Installation
+
+```sh
+pnpm add @edirect/oidc-client
+# or
+npm install @edirect/oidc-client
+```
+
+## Usage
+
+### Password Grant (username + password)
+
+Used when the application authenticates on behalf of a user:
+
+```ts
+import OidcClient from '@edirect/oidc-client';
+
+const client = await OidcClient({
+  grantType: 'password',
+  baseUrl: process.env.OIDC_PROVIDER_URL, // e.g., 'https://keycloak.example.com'
+  oidcPath: process.env.OIDC_PROVIDER_PATH, // e.g., '/realms/my-realm'
+  clientId: process.env.OIDC_CLIENT_ID,
+  clientSecret: process.env.OIDC_CLIENT_SECRET,
+});
+
+// Acquire access token
+const tokenSet = await client.getAccessToken({
+  username: process.env.OIDC_USERNAME,
+  password: process.env.OIDC_PASSWORD,
+});
+
+console.log(tokenSet.access_token);
+console.log(tokenSet.expires_in);
+
+// Refresh token (not available for client_credentials)
+const refreshed = await client.getRefreshToken(tokenSet);
+```
+
+### Client Credentials Grant (service-to-service)
+
+Used for machine-to-machine authentication:
+
+```ts
+import OidcClient from '@edirect/oidc-client';
+
+const client = await OidcClient({
+  grantType: 'client_credentials',
+  baseUrl: process.env.OIDC_PROVIDER_URL,
+  oidcPath: process.env.OIDC_PROVIDER_PATH,
+  clientId: process.env.OIDC_CLIENT_ID,
+  clientSecret: process.env.OIDC_CLIENT_SECRET,
+});
+
+// No login data required for client_credentials
+const tokenSet = await client.getAccessToken();
+console.log(tokenSet.access_token);
+
+// Note: getRefreshToken is not applicable to client_credentials
+```
+
+### SSO Grant
+
+Used for SSO-based authentication flows:
+
+```ts
+const client = await OidcClient({
+  grantType: 'sso',
+  baseUrl: process.env.OIDC_PROVIDER_URL,
+  oidcPath: process.env.OIDC_PROVIDER_PATH,
+  clientId: process.env.OIDC_CLIENT_ID,
+  clientSecret: process.env.OIDC_CLIENT_SECRET,
+  redirectUri: process.env.OIDC_CALLBACK_URL,
+});
+
+const tokenSet = await client.getAccessToken({ code: authorizationCode });
+```
+
+## API
+
+### `OidcClient(params: Connect): Promise<OidcConnect>`
+
+Factory function that initializes the OIDC client for the specified grant type.
+
+| Parameter      | Type                                          | Description                                |
+| -------------- | --------------------------------------------- | ------------------------------------------ |
+| `grantType`    | `'password' \| 'client_credentials' \| 'sso'` | OAuth2 grant type                          |
+| `baseUrl`      | `string`                                      | OIDC provider base URL                     |
+| `oidcPath`     | `string`                                      | OIDC realm path (e.g., `/realms/my-realm`) |
+| `clientId`     | `string`                                      | Client ID registered in the OIDC provider  |
+| `clientSecret` | `string`                                      | Client secret                              |
+| `redirectUri`  | `string`                                      | Callback URL (for `sso` grant)             |
+
+### Client Methods
+
+| Method            | Signature                           | Description                                                  |
+| ----------------- | ----------------------------------- | ------------------------------------------------------------ |
+| `getAccessToken`  | `(loginData?) => Promise<TokenSet>` | Acquire an access token                                      |
+| `getRefreshToken` | `(tokenSet) => Promise<TokenSet>`   | Refresh an existing token set (not for `client_credentials`) |
+
+### `TokenSet`
+
+```ts
+interface TokenSet {
+  access_token: string;
+  token_type: string;
+  expires_in: number;
+  refresh_token?: string; // not present for client_credentials
+  refresh_expires_in?: number;
+  id_token?: string;
+  session_state?: string;
+  scope?: string;
+}
+```
+
+## Environment Variables
+
+| Variable             | Description                                                   |
+| -------------------- | ------------------------------------------------------------- |
+| `OIDC_PROVIDER_URL`  | OIDC provider base URL (e.g., `https://keycloak.example.com`) |
+| `OIDC_PROVIDER_PATH` | OIDC realm path (e.g., `/realms/my-realm`)                    |
+| `OIDC_CLIENT_ID`     | Client ID                                                     |
+| `OIDC_CLIENT_SECRET` | Client secret                                                 |
+| `OIDC_USERNAME`      | Username (for `password` grant)                               |
+| `OIDC_PASSWORD`      | Password (for `password` grant)                               |
+| `OIDC_CALLBACK_URL`  | Redirect URI (for `sso` grant)                                |

package/dist/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@edirect/oidc-client",
+  "version": "11.0.64",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/types/index.d.ts",
+  "exports": {
+    ".": {
+      "require": "./dist/cjs/index.js",
+      "import": "./dist/esm/index.js",
+      "types": "./dist/types/index.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "openid-client": "^6.8.6",
+    "tslib": "^2.8.1"
+  },
+  "type": "commonjs"
+}

package/dist/src/connect.d.ts

@@ -0,0 +1,11 @@
+import { Connect } from './types/connect.type';
+import { ErrorHandlerType } from './types/error-handler.type';
+export declare class OidcConnect {
+    configuration: any;
+    baseUrl: string;
+    redirectUri?: string;
+    ErrorHandler: ErrorHandlerType;
+    constructor();
+    connect(params: Connect): Promise<any>;
+}
+//# sourceMappingURL=connect.d.ts.map

package/dist/src/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D,qBAAa,WAAW;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,OAAO,EAAG,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,gBAAgB,CAAC;;IAMzB,OAAO,CAAC,MAAM,EAAE,OAAO;CAsB9B"}

package/dist/src/connect.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcConnect = void 0;
+const tslib_1 = require("tslib");
+const error_handler_1 = tslib_1.__importDefault(require("./utils/error-handler"));
+class OidcConnect {
+    configuration;
+    baseUrl;
+    redirectUri;
+    ErrorHandler;
+    constructor() {
+        this.ErrorHandler = error_handler_1.default;
+    }
+    async connect(params) {
+        this.baseUrl = params.baseUrl;
+        this.redirectUri = params.redirectUri;
+        const issuer = new URL(`${params.baseUrl}/${params.oidcPath}`);
+        const client = await import('openid-client');
+        this.configuration = await client.discovery(issuer, params.clientId, params.clientSecret);
+        // Set additional metadata if needed
+        if (this.configuration) {
+            this.configuration.token_endpoint_auth_method = 'client_secret_post';
+            if (params.responseTypes)
+                this.configuration.response_types = params.responseTypes;
+            if (params.grantTypes)
+                this.configuration.grant_types = params.grantTypes;
+            if (params.redirectUri)
+                this.configuration.redirect_uris = [params.redirectUri];
+        }
+        return this.configuration;
+    }
+}
+exports.OidcConnect = OidcConnect;

package/dist/src/grant-type/client_credentials.d.ts

@@ -0,0 +1,16 @@
+import { OidcConnect } from '../connect';
+import { Connect } from '../types/connect.type';
+import { GrantTypeErrorHandlerType } from '../types/error-handler.type';
+import { TokenSet } from '../types/token-set.type';
+export declare class OidcClient extends OidcConnect {
+    errorHandler: GrantTypeErrorHandlerType;
+    token: TokenSet | null;
+    getToken: (revert?: boolean) => TokenSet | null;
+    setToken: (token: TokenSet, revert?: boolean) => TokenSet;
+    constructor();
+    connect(params: Connect): Promise<void>;
+    getAccessToken(data: Record<string, unknown>): Promise<TokenSet | null>;
+    getRefreshToken(): Promise<void>;
+}
+export declare const oidc: OidcClient;
+//# sourceMappingURL=client_credentials.d.ts.map

package/dist/src/grant-type/client_credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client_credentials.d.ts","sourceRoot":"","sources":["../../../src/grant-type/client_credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAKnD,qBAAa,UAAW,SAAQ,WAAW;IACzC,YAAY,EAAE,yBAAyB,CAAC;IACxC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC;;IAW3C,OAAO,CAAC,MAAM,EAAE,OAAO;IAQhC,cAAc,CAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAwBrB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;CAKvC;AAED,eAAO,MAAM,IAAI,YAAmB,CAAC"}

package/dist/src/grant-type/client_credentials.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oidc = exports.OidcClient = void 0;
+const tslib_1 = require("tslib");
+const connect_1 = require("../connect");
+const token_1 = require("../token");
+const parse_token_1 = tslib_1.__importDefault(require("../utils/parse-token"));
+const grantType = 'client_credentials';
+class OidcClient extends connect_1.OidcConnect {
+    errorHandler;
+    token;
+    getToken;
+    setToken;
+    constructor() {
+        super();
+        this.errorHandler = this.ErrorHandler(grantType);
+        this.token = null;
+        const tokenHelper = new token_1.Token();
+        this.getToken = tokenHelper.getToken.bind(tokenHelper);
+        this.setToken = tokenHelper.setToken.bind(tokenHelper);
+    }
+    async connect(params) {
+        await super.connect({
+            ...params,
+            responseTypes: ['none'],
+            grantTypes: [grantType],
+        });
+    }
+    async getAccessToken(data) {
+        if (!this.configuration)
+            throw new Error(`[${grantType}] Not initialized.`);
+        if (this.token)
+            return this.token;
+        const params = {
+            grant_type: grantType,
+            ...data,
+        };
+        try {
+            const { clientCredentialsGrant } = await import('openid-client');
+            const tokenSetRaw = await clientCredentialsGrant(this.configuration, params);
+            const tokenSet = (0, parse_token_1.default)(tokenSetRaw);
+            this.token = this.setToken(tokenSet);
+            return this.token;
+        }
+        catch (error) {
+            this.errorHandler(error);
+            return null;
+        }
+    }
+    async getRefreshToken() {
+        throw new Error(`[${grantType}] This method is not allowed to this grant type.`);
+    }
+}
+exports.OidcClient = OidcClient;
+exports.oidc = new OidcClient();

package/dist/src/grant-type/password.d.ts

@@ -0,0 +1,16 @@
+import { OidcConnect } from '../connect';
+import { Connect } from '../types/connect.type';
+import { GrantTypeErrorHandlerType } from '../types/error-handler.type';
+import { TokenSet } from '../types/token-set.type';
+export declare class OidcClient extends OidcConnect {
+    errorHandler: GrantTypeErrorHandlerType;
+    token: TokenSet | null;
+    getToken: (revert?: boolean) => TokenSet | null;
+    setToken: (token: TokenSet, revert?: boolean) => TokenSet;
+    constructor();
+    connect(params: Connect): Promise<void>;
+    getAccessToken(data: Record<string, unknown>): Promise<TokenSet | null>;
+    getRefreshToken(tokenSet: TokenSet): Promise<TokenSet | null>;
+}
+export declare const oidc: OidcClient;
+//# sourceMappingURL=password.d.ts.map

package/dist/src/grant-type/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/grant-type/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAKnD,qBAAa,UAAW,SAAQ,WAAW;IACzC,YAAY,EAAE,yBAAyB,CAAC;IACxC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC;;IAW3C,OAAO,CAAC,MAAM,EAAE,OAAO;IAQhC,cAAc,CAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAkCrB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CA2BpE;AAED,eAAO,MAAM,IAAI,YAAmB,CAAC"}

package/dist/src/grant-type/password.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oidc = exports.OidcClient = void 0;
+const tslib_1 = require("tslib");
+const connect_1 = require("../connect");
+const token_1 = require("../token");
+const parse_token_1 = tslib_1.__importDefault(require("../utils/parse-token"));
+const grantType = 'password';
+class OidcClient extends connect_1.OidcConnect {
+    errorHandler;
+    token;
+    getToken;
+    setToken;
+    constructor() {
+        super();
+        this.errorHandler = this.ErrorHandler(grantType);
+        this.token = null;
+        const tokenHelper = new token_1.Token();
+        this.getToken = tokenHelper.getToken.bind(tokenHelper);
+        this.setToken = tokenHelper.setToken.bind(tokenHelper);
+    }
+    async connect(params) {
+        await super.connect({
+            ...params,
+            responseTypes: ['none'],
+            grantTypes: [grantType, 'refresh_token'],
+        });
+    }
+    async getAccessToken(data) {
+        if (!this.configuration)
+            throw new Error(`[${grantType}] Not initialized.`);
+        if (this.token)
+            return this.token;
+        const tokenEndpoint = this.configuration.server.token_endpoint;
+        const params = new URLSearchParams({
+            grant_type: grantType,
+            client_id: this.configuration.client_id,
+            client_secret: this.configuration.client_secret,
+            ...Object.fromEntries(Object.entries(data).map(([k, v]) => [k, String(v)])),
+        });
+        try {
+            const response = await fetch(tokenEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: params.toString(),
+            });
+            if (!response.ok)
+                throw new Error(`Token endpoint error: ${response.status}`);
+            const tokenSetRaw = (await response.json());
+            const tokenSet = (0, parse_token_1.default)(tokenSetRaw);
+            this.token = this.setToken(tokenSet);
+            return this.token;
+        }
+        catch (error) {
+            this.errorHandler(error);
+            return null;
+        }
+    }
+    async getRefreshToken(tokenSet) {
+        if (!this.configuration)
+            throw new Error(`[${grantType}] Not initialized.`);
+        const tokenEndpoint = this.configuration.server.token_endpoint;
+        const params = new URLSearchParams({
+            grant_type: 'refresh_token',
+            client_id: this.configuration.client_id,
+            client_secret: this.configuration.client_secret,
+            refresh_token: tokenSet.refreshToken,
+        });
+        try {
+            const response = await fetch(tokenEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: params.toString(),
+            });
+            if (!response.ok)
+                throw new Error(`Token endpoint error: ${response.status}`);
+            const refreshTokenSetRaw = (await response.json());
+            const refreshTokenSet = (0, parse_token_1.default)(refreshTokenSetRaw);
+            return this.setToken(refreshTokenSet);
+        }
+        catch (error) {
+            this.errorHandler(error);
+            return null;
+        }
+    }
+}
+exports.OidcClient = OidcClient;
+exports.oidc = new OidcClient();

package/dist/src/grant-type/sso.d.ts

@@ -0,0 +1,16 @@
+import { OidcConnect } from '../connect';
+import { Connect } from '../types/connect.type';
+import { TokenSet } from '../types/token-set.type';
+import { GrantTypeErrorHandlerType } from '../types/error-handler.type';
+export declare class OidcClient extends OidcConnect {
+    errorHandler: GrantTypeErrorHandlerType;
+    token: TokenSet | null;
+    getToken: (revert?: boolean) => TokenSet | null;
+    setToken: (token: TokenSet, revert?: boolean) => TokenSet;
+    constructor();
+    connect(params: Connect): Promise<void>;
+    getAccessToken(data: Record<string, unknown>): Promise<TokenSet | null>;
+    getRefreshToken(tokenSet: TokenSet): Promise<TokenSet | null>;
+}
+export declare const oidc: OidcClient;
+//# sourceMappingURL=sso.d.ts.map

package/dist/src/grant-type/sso.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso.d.ts","sourceRoot":"","sources":["../../../src/grant-type/sso.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAKxE,qBAAa,UAAW,SAAQ,WAAW;IACzC,YAAY,EAAE,yBAAyB,CAAC;IACxC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC;;IAW3C,OAAO,CAAC,MAAM,EAAE,OAAO;IAQhC,cAAc,CAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAkCrB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CA2BpE;AAED,eAAO,MAAM,IAAI,YAAmB,CAAC"}

package/dist/src/grant-type/sso.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oidc = exports.OidcClient = void 0;
+const tslib_1 = require("tslib");
+const connect_1 = require("../connect");
+const token_1 = require("../token");
+const parse_token_1 = tslib_1.__importDefault(require("../utils/parse-token"));
+const grantType = 'sso';
+class OidcClient extends connect_1.OidcConnect {
+    errorHandler;
+    token;
+    getToken;
+    setToken;
+    constructor() {
+        super();
+        this.errorHandler = this.ErrorHandler(grantType);
+        this.token = null;
+        const tokenHelper = new token_1.Token();
+        this.getToken = tokenHelper.getToken.bind(tokenHelper);
+        this.setToken = tokenHelper.setToken.bind(tokenHelper);
+    }
+    async connect(params) {
+        await super.connect({
+            ...params,
+            responseTypes: ['none'],
+            grantTypes: [grantType, 'refresh_token'],
+        });
+    }
+    async getAccessToken(data) {
+        if (!this.configuration)
+            throw new Error(`[${grantType}] Not initialized.`);
+        if (this.token)
+            return this.token;
+        const tokenEndpoint = this.configuration.server.token_endpoint;
+        const params = new URLSearchParams({
+            grant_type: grantType,
+            client_id: this.configuration.client_id,
+            client_secret: this.configuration.client_secret,
+            ...Object.fromEntries(Object.entries(data).map(([k, v]) => [k, String(v)])),
+        });
+        try {
+            const response = await fetch(tokenEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: params.toString(),
+            });
+            if (!response.ok)
+                throw new Error(`Token endpoint error: ${response.status}`);
+            const tokenSetRaw = (await response.json());
+            const tokenSet = (0, parse_token_1.default)(tokenSetRaw);
+            this.token = this.setToken(tokenSet);
+            return this.token;
+        }
+        catch (error) {
+            this.errorHandler(error);
+            return null;
+        }
+    }
+    async getRefreshToken(tokenSet) {
+        if (!this.configuration)
+            throw new Error(`[${grantType}] Not initialized.`);
+        const tokenEndpoint = this.configuration.server.token_endpoint;
+        const params = new URLSearchParams({
+            grant_type: 'refresh_token',
+            client_id: this.configuration.client_id,
+            client_secret: this.configuration.client_secret,
+            refresh_token: tokenSet.refreshToken,
+        });
+        try {
+            const response = await fetch(tokenEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: params.toString(),
+            });
+            if (!response.ok)
+                throw new Error(`Token endpoint error: ${response.status}`);
+            const refreshTokenSetRaw = (await response.json());
+            const refreshTokenSet = (0, parse_token_1.default)(refreshTokenSetRaw);
+            return this.setToken(refreshTokenSet);
+        }
+        catch (error) {
+            this.errorHandler(error);
+            return null;
+        }
+    }
+}
+exports.OidcClient = OidcClient;
+exports.oidc = new OidcClient();

package/dist/src/index.d.ts

@@ -0,0 +1,4 @@
+import { Connect } from './types/connect.type';
+declare const _default: (params: Connect) => Promise<unknown>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;yBAWzB,QAAQ,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;AAAxD,wBAWE"}

package/dist/src/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const client_credentials_1 = require("./grant-type/client_credentials");
+const password_1 = require("./grant-type/password");
+const sso_1 = require("./grant-type/sso");
+const clients = {
+    client_credentials: client_credentials_1.oidc,
+    password: password_1.oidc,
+    sso: sso_1.oidc,
+};
+exports.default = async (params) => {
+    const oidc = clients[params.grantType];
+    await oidc.connect({
+        baseUrl: params.baseUrl,
+        oidcPath: params.oidcPath,
+        clientId: params.clientId,
+        clientSecret: params.clientSecret,
+    });
+    return oidc;
+};

package/dist/src/token.d.ts

@@ -0,0 +1,7 @@
+import { TokenSet } from './types/token-set.type';
+export declare class Token {
+    token: TokenSet;
+    setToken(token: TokenSet, revert?: boolean): TokenSet;
+    getToken(revert?: boolean): TokenSet | null;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/src/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGlD,qBAAa,KAAK;IAChB,KAAK,EAAG,QAAQ,CAAC;IAEjB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAQ,GAAG,QAAQ;IAKnD,QAAQ,CAAC,MAAM,UAAQ,GAAG,QAAQ,GAAG,IAAI;CAO1C"}

package/dist/src/token.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Token = void 0;
+const tslib_1 = require("tslib");
+const parse_token_1 = tslib_1.__importDefault(require("./utils/parse-token"));
+class Token {
+    token;
+    setToken(token, revert = false) {
+        this.token = (0, parse_token_1.default)(token, revert);
+        return this.token;
+    }
+    getToken(revert = false) {
+        if (!this.token)
+            return null;
+        const expiresAt = this.token.expiresAt || this.token.expires_at;
+        const now = Math.floor(new Date().getTime() / 1000);
+        if (expiresAt - 60 <= now)
+            return null;
+        return (revert && (0, parse_token_1.default)(this.token, revert)) || this.token;
+    }
+}
+exports.Token = Token;

package/dist/src/types/connect.type.d.ts

@@ -0,0 +1,12 @@
+export type Connect = {
+    grantType?: string;
+    baseUrl: string;
+    oidcPath: string;
+    clientId: string;
+    clientSecret: string;
+    responseTypes?: string[];
+    grantTypes?: string[];
+    timeout?: number;
+    redirectUri?: string;
+};
+//# sourceMappingURL=connect.type.d.ts.map

package/dist/src/types/connect.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.type.d.ts","sourceRoot":"","sources":["../../../src/types/connect.type.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/dist/src/types/connect.type.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/types/error-handler.type.d.ts

@@ -0,0 +1,6 @@
+export type GrantTypeErrorHandlerType = (error: Error & {
+    code?: number;
+    url?: string;
+}) => void;
+export type ErrorHandlerType = (grantType: string) => GrantTypeErrorHandlerType;
+//# sourceMappingURL=error-handler.type.d.ts.map

package/dist/src/types/error-handler.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.type.d.ts","sourceRoot":"","sources":["../../../src/types/error-handler.type.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAC3C,IAAI,CAAC;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,yBAAyB,CAAC"}

package/dist/src/types/error-handler.type.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/types/token-set.type.d.ts

@@ -0,0 +1,22 @@
+export type TokenSetParsed = {
+    accessToken: string;
+    expiresAt: number;
+    expiresIn: number;
+    idToken: string;
+    refreshToken: string;
+    scope: string;
+    sessionState: string;
+    tokenType: string;
+};
+export type TokenSetSource = {
+    access_token: string;
+    expires_at: number;
+    expires_in: number;
+    id_token: string;
+    refresh_token: string;
+    scope: string;
+    session_state: string;
+    token_type: string;
+};
+export type TokenSet = TokenSetSource & TokenSetParsed;
+//# sourceMappingURL=token-set.type.d.ts.map

package/dist/src/types/token-set.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-set.type.d.ts","sourceRoot":"","sources":["../../../src/types/token-set.type.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,cAAc,CAAC"}

package/dist/src/types/token-set.type.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/utils/error-handler.d.ts

@@ -0,0 +1,6 @@
+declare const _default: (grantType: string) => (error: Error & {
+    code?: number;
+    url?: string;
+}) => never;
+export default _default;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/src/utils/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../../src/utils/error-handler.ts"],"names":[],"mappings":"yBAAgB,WAAW,MAAM,MAC9B,OAAO,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;AADjD,wBAeI"}

package/dist/src/utils/error-handler.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = (grantType) => (error) => {
+    const { name, code, url, message } = error;
+    if (name && code && url) {
+        throw new Error(`[${grantType}] Error: ${JSON.stringify({ name, code, url })}`);
+    }
+    if (message) {
+        throw new Error(`[${grantType}] Error: ${message}`);
+    }
+    throw error;
+};

package/dist/src/utils/parse-token.d.ts

@@ -0,0 +1,4 @@
+import { TokenSet } from '../types/token-set.type';
+declare const _default: (tokenSet: TokenSet, revert?: boolean) => TokenSet;
+export default _default;
+//# sourceMappingURL=parse-token.d.ts.map

package/dist/src/utils/parse-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-token.d.ts","sourceRoot":"","sources":["../../../src/utils/parse-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAGT,MAAM,yBAAyB,CAAC;yBAajB,UAAU,QAAQ,EAAE,gBAAc,KAAG,QAAQ;AAA7D,wBAgBE"}

package/dist/src/utils/parse-token.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tokenMapper = {
+    accessToken: 'access_token',
+    expiresAt: 'expires_at',
+    expiresIn: 'expires_in',
+    idToken: 'id_token',
+    refreshToken: 'refresh_token',
+    scope: 'scope',
+    sessionState: 'session_state',
+    tokenType: 'token_type',
+};
+exports.default = (tokenSet, revert = false) => {
+    const tokenSetParsed = {};
+    Object.keys(tokenMapper).forEach(mapperKey => {
+        const key = ((revert && tokenMapper[mapperKey]) ||
+            mapperKey);
+        const value = (revert && tokenSet[mapperKey]) ||
+            tokenSet[tokenMapper[mapperKey]];
+        if (typeof value !== 'undefined') {
+            tokenSetParsed[key] = value;
+        }
+    });
+    return tokenSetParsed;
+};

package/dist/tsconfig.lib.tsbuildinfo

@@ -0,0 +1 @@
+{"version":"5.9.3"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@edirect/oidc-client",
-  "version": "11.0.62",
+  "version": "11.0.64",
+  "packageScope": "@edirect",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "types": "./dist/types/index.d.ts",
@@ -19,5 +20,26 @@
     "openid-client": "^6.8.6",
     "tslib": "^2.8.1"
   },
-  "type": "commonjs"
-}
+  "nx": {
+    "name": "@edirect/oidc-client",
+    "targets": {
+      "build": {
+        "executor": "@nx/js:tsc",
+        "options": {
+          "main": "{workspaceRoot}/packages/edirect-oidc-client/src/index.ts",
+          "tsConfig": "{workspaceRoot}/packages/edirect-oidc-client/tsconfig.lib.json",
+          "outputPath": "{workspaceRoot}/packages/edirect-oidc-client/dist",
+          "assets": [
+            "{workspaceRoot}/packages/edirect-oidc-client/package.json",
+            "{workspaceRoot}/packages/edirect-oidc-client/README.md"
+          ]
+        }
+      }
+    }
+  },
+  "scripts": {
+    "build:cjs": "tsc -p tsconfig.cjs.json",
+    "build:esm": "tsc -p tsconfig.esm.json",
+    "build": "pnpm run build:cjs && pnpm run build:esm"
+  }
+}