@efficy/tribecrm-mcp-server 0.4.3 → 0.5.0

package/README.md

@@ -47,26 +47,40 @@ TRIBECRM_AUTH=app  # Default - can be omitted
 
 **Use case**: Personal AI assistants, user-specific operations
 
-**Setup**:
-1. Run the authentication helper:
-   ```bash
-   npx @efficy/tribecrm-mcp-server authenticate
-   # or if installed locally:
-   npm run authenticate
-   ```
+**✨ Recommended: Authenticate directly from Claude**
 
-2. Your browser will open for TribeCRM login
+The easiest way to authenticate is directly from your conversation with Claude:
 
-3. After successful authentication, tokens are saved locally to `~/.tribecrm/tokens.json`
+1. Configure your MCP client with `TRIBECRM_AUTH=user` (see Configuration section)
+2. Restart Claude Desktop
+3. Ask Claude: **"Can you authenticate with TribeCRM?"**
+4. Claude will use the `tribecrm_authenticate` tool to generate an authentication link
+5. Click the link, log in to TribeCRM, and accept the consent
+6. Tokens are saved automatically - no restart needed!
 
-4. Configure your MCP client with `TRIBECRM_AUTH=user`
+**Alternative: CLI Authentication**
+
+For testing, debugging, or pre-authentication, you can use the CLI command:
+
+```bash
+npx @efficy/tribecrm-mcp-server authenticate
+# or if installed locally:
+npm run authenticate
+```
+
+Your browser will open for TribeCRM login, and tokens will be saved to `~/.tribecrm/tokens.json`
 
 **Features**:
-- ✅ Browser-based OAuth consent flow
-- ✅ Automatic token refresh (tokens valid for 24 hours)
-- ✅ Secure local token storage
-- ✅ PKCE (Proof Key for Code Exchange) for additional security
-- ✅ User-specific access rights respected
+- ✨ **No terminal needed** - authenticate directly from Claude
+- 🔄 Automatic token refresh (tokens valid for 24 hours)
+- 💾 Secure local token storage (`~/.tribecrm/tokens.json`)
+- ⚡ No restart required after authentication
+- ✅ Standard OAuth2 Authorization Code flow
+- 🔐 User-specific access rights respected
+
+**Requirements**:
+- Both `TRIBECRM_CLIENT_ID` and `TRIBECRM_CLIENT_SECRET` are required for the authentication flow
+- Redirect URI must be pre-registered in your OAuth client configuration (default: `http://localhost:3001/callback`)
 
 ## 📋 Prerequisites
 
@@ -110,7 +124,6 @@ Add to your Claude Desktop config file:
         "TRIBECRM_AUTH_URL": "https://auth.tribecrm.nl",
         "TRIBECRM_CLIENT_ID": "your_client_id",
         "TRIBECRM_CLIENT_SECRET": "your_client_secret",
-        "TRIBECRM_ORGANIZATION_ID": "your_org_id",
         "TRIBECRM_MODE": "read-only",
         "TRIBECRM_AUTH": "app"
       }
@@ -136,7 +149,6 @@ Add to your Claude Desktop config file:
         "TRIBECRM_AUTH_URL": "https://auth.tribecrm.nl",
         "TRIBECRM_CLIENT_ID": "your_client_id",
         "TRIBECRM_CLIENT_SECRET": "your_client_secret",
-        "TRIBECRM_ORGANIZATION_ID": "your_org_id",
         "TRIBECRM_MODE": "read-only",
         "TRIBECRM_AUTH": "app"
       }
@@ -158,8 +170,9 @@ Add to your Claude Desktop config file:
 - `TRIBECRM_API_URL` (required): Your TribeCRM API URL (e.g., https://api.tribecrm.nl or https://api-staging.tribecrm.nl)
 - `TRIBECRM_AUTH_URL` (required): Your TribeCRM OAuth2 authentication URL (e.g., https://auth.tribecrm.nl or https://auth-staging.tribecrm.nl)
 - `TRIBECRM_CLIENT_ID` (required): OAuth2 Client ID
-- `TRIBECRM_CLIENT_SECRET` (required): OAuth2 Client Secret
-- `TRIBECRM_ORGANIZATION_ID` (optional): Organization UUID for multi-tenant setups
+- `TRIBECRM_CLIENT_SECRET` (required for both auth methods): OAuth2 Client Secret
+  - Required when using `TRIBECRM_AUTH=app` (default) - for Client Credentials flow
+  - Required when using `TRIBECRM_AUTH=user` - for Authorization Code token exchange
 - `TRIBECRM_MODE` (optional): Server operation mode - `read-only` (default) or `read-write`
   - `read-only`: Only allows queries and data retrieval (get, query operations). Write tools are hidden.
   - `read-write`: Allows full access including create, update, and delete operations.
@@ -167,11 +180,51 @@ Add to your Claude Desktop config file:
   - `app`: OAuth2 Client Credentials flow for service account authentication
   - `user`: OAuth2 Authorization Code flow for user-specific authentication
 - `TRIBECRM_REDIRECT_URI` (optional): Redirect URI for user authentication (only needed when `TRIBECRM_AUTH=user`)
-  - Default: `http://localhost:3000/callback`
+  - Default: `http://localhost:3001/callback`
   - Must match the redirect URI configured in your TribeCRM OAuth application
 
 ## 📚 Available Tools
 
+### Authentication Operations
+
+#### `tribecrm_authenticate`
+Start user authentication flow (only available when `TRIBECRM_AUTH=user`)
+
+**Use case**: When user authentication is required but no valid tokens are found, this tool generates an authentication URL and starts a background callback server to handle the OAuth flow.
+
+**Parameters:** None
+
+**Returns**: Authentication URL and step-by-step instructions
+
+**Features**:
+- ✨ Authenticate directly from Claude without using the terminal
+- 🔄 Background callback server automatically handles OAuth redirects
+- 💾 Tokens saved automatically to `~/.tribecrm/tokens.json`
+- ⚡ No restart required - tokens work immediately after authentication
+
+**Example workflow**:
+1. User asks: "Can you authenticate with TribeCRM?"
+2. Claude calls `tribecrm_authenticate` tool
+3. User clicks the provided authentication link
+4. User logs in to TribeCRM and accepts consent
+5. Tokens are saved automatically
+6. User can immediately use TribeCRM tools
+
+**Error messages**: If authentication is needed, other TribeCRM tools will display a helpful error message suggesting to use this tool or run `npm run authenticate` manually.
+
+#### `tribecrm_get_current_employee`
+Get information about the currently authenticated employee
+
+**Parameters:**
+- `expand` (string, optional): OData $expand parameter (e.g., "Person")
+
+**Example:**
+```json
+{
+  "expand": "Person"
+}
+```
+
 ### Entity Operations
 
 #### `tribecrm_get_entity`

package/dist/auth/callback-server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=callback-server.test.d.ts.map

package/dist/auth/callback-server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.test.d.ts","sourceRoot":"","sources":["../../src/auth/callback-server.test.ts"],"names":[],"mappings":""}

package/dist/auth/callback-server.test.js

@@ -0,0 +1,233 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { CallbackServer } from './callback-server.js';
+import http from 'http';
+describe('CallbackServer', () => {
+    let callbackServer;
+    const testPort = 3456; // Use non-standard port to avoid conflicts
+    beforeEach(() => {
+        callbackServer = new CallbackServer(testPort);
+    });
+    afterEach(() => {
+        callbackServer.stop();
+    });
+    describe('constructor', () => {
+        it('should create instance with default port', () => {
+            const server = new CallbackServer();
+            expect(server.getPort()).toBe(3000);
+        });
+        it('should create instance with custom port', () => {
+            const server = new CallbackServer(4567);
+            expect(server.getPort()).toBe(4567);
+        });
+    });
+    describe('getPort', () => {
+        it('should return configured port', () => {
+            expect(callbackServer.getPort()).toBe(testPort);
+        });
+    });
+    describe('waitForCallback - success scenarios', () => {
+        it('should resolve with code and state on successful callback', async () => {
+            const expectedState = 'test-state-123';
+            const authCode = 'auth-code-456';
+            // Start waiting for callback
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            // Give server time to start
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Simulate OAuth callback
+            const response = await fetch(`http://localhost:${testPort}/callback?code=${authCode}&state=${expectedState}`);
+            const result = await callbackPromise;
+            expect(result.code).toBe(authCode);
+            expect(result.state).toBe(expectedState);
+            expect(response.status).toBe(200);
+            const html = await response.text();
+            expect(html).toContain('Authentication Successful');
+        });
+        it('should serve success HTML page', async () => {
+            const expectedState = 'state-abc';
+            const authCode = 'code-xyz';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const response = await fetch(`http://localhost:${testPort}/callback?code=${authCode}&state=${expectedState}`);
+            await callbackPromise;
+            const html = await response.text();
+            expect(html).toContain('<!DOCTYPE html>');
+            expect(html).toContain('Authentication Successful!');
+            expect(html).toContain('close this window');
+            expect(html).toContain('✓');
+        }, 10000);
+    });
+    describe('waitForCallback - error scenarios', () => {
+        it('should reject on timeout', async () => {
+            const expectedState = 'test-state';
+            const shortTimeout = 100; // 100ms timeout
+            await expect(callbackServer.waitForCallback(expectedState, shortTimeout)).rejects.toThrow('OAuth callback timeout');
+        });
+        it('should reject when OAuth error parameter is present', async () => {
+            const expectedState = 'state-123';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Make fetch request and wait for rejection before checking response
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?error=access_denied&error_description=User%20cancelled`);
+            // Wait for callback promise to reject first
+            await expect(callbackPromise).rejects.toThrow('OAuth error: User cancelled');
+            // Then check the response
+            const response = await fetchPromise;
+            expect(response.status).toBe(400);
+            const html = await response.text();
+            expect(html).toContain('Authentication Failed');
+            expect(html).toContain('User cancelled');
+        });
+        it('should reject when OAuth error without description', async () => {
+            const expectedState = 'state-456';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?error=server_error`);
+            await expect(callbackPromise).rejects.toThrow('OAuth error: server_error');
+            const response = await fetchPromise;
+            expect(response.status).toBe(400);
+        }, 10000);
+        it('should reject when code parameter is missing', async () => {
+            const expectedState = 'state-789';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?state=${expectedState}`);
+            await expect(callbackPromise).rejects.toThrow('Invalid callback: missing code or state');
+            const response = await fetchPromise;
+            expect(response.status).toBe(400);
+            const html = await response.text();
+            expect(html).toContain('Missing code or state parameter');
+        });
+        it('should reject when state parameter is missing', async () => {
+            const expectedState = 'state-abc';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?code=some-code`);
+            await expect(callbackPromise).rejects.toThrow('Invalid callback: missing code or state');
+            const response = await fetchPromise;
+            expect(response.status).toBe(400);
+        }, 10000);
+        it('should reject when state does not match (CSRF protection)', async () => {
+            const expectedState = 'correct-state';
+            const wrongState = 'wrong-state';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?code=auth-code&state=${wrongState}`);
+            await expect(callbackPromise).rejects.toThrow('State validation failed - possible CSRF attack');
+            const response = await fetchPromise;
+            expect(response.status).toBe(400);
+            const html = await response.text();
+            expect(html).toContain('Invalid state parameter');
+            expect(html).toContain('CSRF attack');
+        });
+        it('should return 404 for non-callback paths', async () => {
+            const expectedState = 'state-def';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 1000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const response = await fetch(`http://localhost:${testPort}/other-path`);
+            expect(response.status).toBe(404);
+            const html = await response.text();
+            expect(html).toContain('404 Not Found');
+            // Clean up - don't wait for timeout, just stop
+            callbackServer.stop();
+        }, 10000);
+        it('should handle port already in use error', async () => {
+            // Start first server
+            const server1 = new CallbackServer(testPort + 1);
+            const promise1 = server1.waitForCallback('state1', 1000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Try to start second server on same port
+            const server2 = new CallbackServer(testPort + 1);
+            await expect(server2.waitForCallback('state2', 1000)).rejects.toThrow(`Port ${testPort + 1} is already in use`);
+            // Clean up
+            server1.stop();
+        }, 10000);
+    });
+    describe('stop', () => {
+        it('should stop the server gracefully', async () => {
+            const expectedState = 'state-ghi';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 1000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Stop server before callback arrives
+            callbackServer.stop();
+            // Give server time to shut down
+            await new Promise(resolve => setTimeout(resolve, 200));
+            // Server should be stopped, fetch should fail with connection error
+            try {
+                await fetch(`http://localhost:${testPort}/callback?code=code&state=${expectedState}`);
+                expect.fail('Fetch should have failed');
+            }
+            catch (error) {
+                // Connection error expected (ECONNREFUSED or similar)
+                expect(error.cause?.code).toMatch(/ECONNREFUSED|ECONNRESET/);
+            }
+        }, 10000);
+        it('should handle multiple stop calls safely', () => {
+            callbackServer.stop();
+            callbackServer.stop(); // Should not throw
+            callbackServer.stop(); // Should not throw
+        });
+    });
+    describe('HTML escaping', () => {
+        it('should escape HTML in error messages to prevent XSS', async () => {
+            const expectedState = 'state-xss';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Try XSS attack via error_description
+            const xssAttempt = '<script>alert("xss")</script>';
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?error=test&error_description=${encodeURIComponent(xssAttempt)}`);
+            await expect(callbackPromise).rejects.toThrow();
+            const response = await fetchPromise;
+            const html = await response.text();
+            // Check that script tags are escaped
+            expect(html).not.toContain('<script>');
+            expect(html).toContain('&lt;script&gt;');
+            expect(html).toContain('&lt;/script&gt;');
+        }, 10000);
+        it('should escape special characters in error messages', async () => {
+            const expectedState = 'state-special';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            const specialChars = '& < > " \'';
+            const fetchPromise = fetch(`http://localhost:${testPort}/callback?error=test&error_description=${encodeURIComponent(specialChars)}`);
+            await expect(callbackPromise).rejects.toThrow();
+            const response = await fetchPromise;
+            const html = await response.text();
+            expect(html).toContain('&amp;');
+            expect(html).toContain('&lt;');
+            expect(html).toContain('&gt;');
+            expect(html).toContain('&quot;');
+            expect(html).toContain('&#039;');
+        }, 10000);
+    });
+    describe('edge cases', () => {
+        it('should handle empty callback URL', async () => {
+            const expectedState = 'state-empty';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 1000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Create a manual HTTP request with empty URL
+            const req = http.request({
+                hostname: 'localhost',
+                port: testPort,
+                path: '',
+                method: 'GET'
+            });
+            req.end();
+            await new Promise(resolve => setTimeout(resolve, 200));
+            // Should still be waiting (404 response doesn't reject)
+            callbackServer.stop();
+        }, 10000);
+        it('should handle callback with extra parameters', async () => {
+            const expectedState = 'state-extra';
+            const authCode = 'code-extra';
+            const callbackPromise = callbackServer.waitForCallback(expectedState, 5000);
+            await new Promise(resolve => setTimeout(resolve, 100));
+            // Include extra parameters that should be ignored
+            const response = await fetch(`http://localhost:${testPort}/callback?code=${authCode}&state=${expectedState}&extra=ignored&foo=bar`);
+            const result = await callbackPromise;
+            expect(result.code).toBe(authCode);
+            expect(result.state).toBe(expectedState);
+            expect(response.status).toBe(200);
+        }, 10000);
+    });
+});
+//# sourceMappingURL=callback-server.test.js.map

package/dist/auth/callback-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.test.js","sourceRoot":"","sources":["../../src/auth/callback-server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAM,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,cAA8B,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,2CAA2C;IAElE,UAAU,CAAC,GAAG,EAAE;QACd,cAAc,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,cAAc,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,aAAa,GAAG,gBAAgB,CAAC;YACvC,MAAM,QAAQ,GAAG,eAAe,CAAC;YAEjC,6BAA6B;YAC7B,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAE5E,4BAA4B;YAC5B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,oBAAoB,QAAQ,kBAAkB,QAAQ,UAAU,aAAa,EAAE,CAChF,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YAErC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,aAAa,GAAG,WAAW,CAAC;YAClC,MAAM,QAAQ,GAAG,UAAU,CAAC;YAE5B,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,oBAAoB,QAAQ,kBAAkB,QAAQ,UAAU,aAAa,EAAE,CAChF,CAAC;YAEF,MAAM,eAAe,CAAC;YAEtB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,aAAa,GAAG,YAAY,CAAC;YACnC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,gBAAgB;YAE1C,MAAM,MAAM,CACV,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,YAAY,CAAC,CAC5D,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,qEAAqE;YACrE,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,kEAAkE,CAC/F,CAAC;YAEF,4CAA4C;YAC5C,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAE7E,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,8BAA8B,CAC3D,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAE3E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,mBAAmB,aAAa,EAAE,CAC/D,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;YAEzF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,0BAA0B,CACvD,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;YAEzF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,aAAa,GAAG,eAAe,CAAC;YACtC,MAAM,UAAU,GAAG,aAAa,CAAC;YAEjC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,kCAAkC,UAAU,EAAE,CAC3E,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;YAEhG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,QAAQ,aAAa,CAAC,CAAC;YAExE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAExC,+CAA+C;YAC/C,cAAc,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,qBAAqB;YACrB,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,0CAA0C;YAC1C,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,MAAM,CACV,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CACxC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,QAAQ,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAE5D,WAAW;YACX,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,sCAAsC;YACtC,cAAc,CAAC,IAAI,EAAE,CAAC;YAEtB,gCAAgC;YAChC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,oEAAoE;YACpE,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,oBAAoB,QAAQ,6BAA6B,aAAa,EAAE,CAAC,CAAC;gBACtF,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,sDAAsD;gBACtD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,cAAc,CAAC,IAAI,EAAE,CAAC;YACtB,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB;YAC1C,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,aAAa,GAAG,WAAW,CAAC;YAElC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,uCAAuC;YACvC,MAAM,UAAU,GAAG,+BAA+B,CAAC;YACnD,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,0CAA0C,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACvG,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,qCAAqC;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,aAAa,GAAG,eAAe,CAAC;YAEtC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,MAAM,YAAY,GAAG,YAAY,CAAC;YAClC,MAAM,YAAY,GAAG,KAAK,CACxB,oBAAoB,QAAQ,0CAA0C,kBAAkB,CAAC,YAAY,CAAC,EAAE,CACzG,CAAC;YAEF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,aAAa,GAAG,aAAa,CAAC;YAEpC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,8CAA8C;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;gBACvB,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;YAEV,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,wDAAwD;YACxD,cAAc,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,aAAa,GAAG,aAAa,CAAC;YACpC,MAAM,QAAQ,GAAG,YAAY,CAAC;YAE9B,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,kDAAkD;YAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,oBAAoB,QAAQ,kBAAkB,QAAQ,UAAU,aAAa,wBAAwB,CACtG,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YAErC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/oauth-flow.d.ts

@@ -2,9 +2,9 @@ import { AuthToken } from '../types.js';
 export interface OAuthConfig {
     authUrl: string;
     clientId: string;
-    clientSecret: string;
+    clientSecret?: string;
     redirectUri: string;
-    organizationId?: string;
+    usePKCE?: boolean;
 }
 export interface PKCEPair {
     verifier: string;
@@ -25,17 +25,17 @@ export declare class OAuthFlow {
     /**
      * Generate OAuth consent URL
      * @param state Random state parameter for CSRF protection
-     * @param codeChallenge PKCE code challenge
+     * @param codeChallenge PKCE code challenge (optional, only used if usePKCE is true)
      * @returns Consent URL for user to visit
      */
-    generateConsentUrl(state: string, codeChallenge: string): string;
+    generateConsentUrl(state: string, codeChallenge?: string): string;
     /**
      * Exchange authorization code for tokens
      * @param code Authorization code from OAuth callback
-     * @param codeVerifier PKCE code verifier
+     * @param codeVerifier PKCE code verifier (optional, only used if usePKCE is true)
      * @returns Token response with access_token, refresh_token, etc.
      */
-    exchangeCodeForTokens(code: string, codeVerifier: string): Promise<AuthToken & {
+    exchangeCodeForTokens(code: string, codeVerifier?: string): Promise<AuthToken & {
         refresh_token?: string;
     }>;
     /**

package/dist/auth/oauth-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-flow.d.ts","sourceRoot":"","sources":["../../src/auth/oauth-flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAc;gBAEhB,MAAM,EAAE,WAAW;IAI/B;;;OAGG;IACH,YAAY,IAAI,QAAQ;IAaxB;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAkBhE;;;;;OAKG;IACG,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0BlD;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwBlD;;;OAGG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;CAG/B"}
+{"version":3,"file":"oauth-flow.d.ts","sourceRoot":"","sources":["../../src/auth/oauth-flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAc;gBAEhB,MAAM,EAAE,WAAW;IAI/B;;;OAGG;IACH,YAAY,IAAI,QAAQ;IAaxB;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM;IAsBjE;;;;;OAKG;IACG,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,SAAS,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAoClD;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8BlD;;;OAGG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;CAG/B"}

package/dist/auth/oauth-flow.js

@@ -26,7 +26,7 @@ export class OAuthFlow {
     /**
      * Generate OAuth consent URL
      * @param state Random state parameter for CSRF protection
-     * @param codeChallenge PKCE code challenge
+     * @param codeChallenge PKCE code challenge (optional, only used if usePKCE is true)
      * @returns Consent URL for user to visit
      */
     generateConsentUrl(state, codeChallenge) {
@@ -36,30 +36,40 @@ export class OAuthFlow {
             state: state,
             response_type: 'code',
             scope: 'read write offline',
-            code_challenge: codeChallenge,
-            code_challenge_method: 'S256',
         });
-        if (this.config.organizationId) {
-            params.append('organization_id', this.config.organizationId);
+        // Only add PKCE parameters if usePKCE is enabled
+        if (this.config.usePKCE && codeChallenge) {
+            params.append('code_challenge', codeChallenge);
+            params.append('code_challenge_method', 'S256');
         }
+        // NOTE: organization_id is NOT included in the authorization URL
+        // Including it causes HTTP 500 errors at the consent endpoint
+        // It can be used in API calls after authentication, but not in the OAuth flow
         return `${this.config.authUrl}/oauth2/auth?${params.toString()}`;
     }
     /**
      * Exchange authorization code for tokens
      * @param code Authorization code from OAuth callback
-     * @param codeVerifier PKCE code verifier
+     * @param codeVerifier PKCE code verifier (optional, only used if usePKCE is true)
      * @returns Token response with access_token, refresh_token, etc.
      */
     async exchangeCodeForTokens(code, codeVerifier) {
         try {
-            const response = await axios.post(`${this.config.authUrl}/oauth2/token`, new URLSearchParams({
+            const params = {
                 grant_type: 'authorization_code',
                 client_id: this.config.clientId,
-                client_secret: this.config.clientSecret,
                 redirect_uri: this.config.redirectUri,
                 code: code,
-                code_verifier: codeVerifier,
-            }), {
+            };
+            // Only include code_verifier if usePKCE is enabled
+            if (this.config.usePKCE && codeVerifier) {
+                params.code_verifier = codeVerifier;
+            }
+            // Include client_secret (required for traditional OAuth2, optional for PKCE)
+            if (this.config.clientSecret) {
+                params.client_secret = this.config.clientSecret;
+            }
+            const response = await axios.post(`${this.config.authUrl}/oauth2/token`, new URLSearchParams(params), {
                 headers: {
                     'Content-Type': 'application/x-www-form-urlencoded',
                 },
@@ -78,12 +88,16 @@ export class OAuthFlow {
      */
     async refreshAccessToken(refreshToken) {
         try {
-            const response = await axios.post(`${this.config.authUrl}/oauth2/token`, new URLSearchParams({
+            const params = {
                 grant_type: 'refresh_token',
                 client_id: this.config.clientId,
-                client_secret: this.config.clientSecret,
                 refresh_token: refreshToken,
-            }), {
+            };
+            // Only include client_secret if provided (optional for PKCE flow)
+            if (this.config.clientSecret) {
+                params.client_secret = this.config.clientSecret;
+            }
+            const response = await axios.post(`${this.config.authUrl}/oauth2/token`, new URLSearchParams(params), {
                 headers: {
                     'Content-Type': 'application/x-www-form-urlencoded',
                 },

package/dist/auth/oauth-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-flow.js","sourceRoot":"","sources":["../../src/auth/oauth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,MAAM,OAAO,CAAC;AAgB1B;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,MAAM,CAAc;IAE5B,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE9D,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,KAAa,EAAE,aAAqB;QACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,oBAAoB;YAC3B,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,EACrC,IAAI,eAAe,CAAC;gBAClB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACrC,IAAI,EAAE,IAAI;gBACV,aAAa,EAAE,YAAY;aAC5B,CAAC,EACF;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CACF,CAAC;YAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,EACrC,IAAI,eAAe,CAAC;gBAClB,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,aAAa,EAAE,YAAY;aAC5B,CAAC,EACF;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CACF,CAAC;YAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa;QAClB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;CACF"}
+{"version":3,"file":"oauth-flow.js","sourceRoot":"","sources":["../../src/auth/oauth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,MAAM,OAAO,CAAC;AAgB1B;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,MAAM,CAAc;IAE5B,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE9D,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,KAAa,EAAE,aAAsB;QACtD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,oBAAoB;SAC5B,CAAC,CAAC;QAEH,iDAAiD;QACjD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,8EAA8E;QAE9E,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,MAAM,GAA2B;gBACrC,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACrC,IAAI,EAAE,IAAI;aACX,CAAC;YAEF,mDAAmD;YACnD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;gBACxC,MAAM,CAAC,aAAa,GAAG,YAAY,CAAC;YACtC,CAAC;YAED,6EAA6E;YAC7E,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,EACrC,IAAI,eAAe,CAAC,MAAM,CAAC,EAC3B;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CACF,CAAC;YAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,MAAM,GAA2B;gBACrC,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,YAAY;aAC5B,CAAC;YAEF,kEAAkE;YAClE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,EACrC,IAAI,eAAe,CAAC,MAAM,CAAC,EAC3B;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CACF,CAAC;YAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa;QAClB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/auth/oauth-flow.test.js

@@ -14,7 +14,6 @@ describe('OAuthFlow', () => {
             clientId: 'test-client-id',
             clientSecret: 'test-client-secret',
             redirectUri: 'http://localhost:3000/callback',
-            organizationId: 'test-org-id',
         };
         oauthFlow = new OAuthFlow(config);
     });
@@ -54,12 +53,7 @@ describe('OAuthFlow', () => {
             expect(url).toContain('scope=read+write+offline');
             expect(url).toContain(`code_challenge=${codeChallenge}`);
             expect(url).toContain('code_challenge_method=S256');
-            expect(url).toContain(`organization_id=${config.organizationId}`);
-        });
-        it('should not include organization_id if not provided', () => {
-            const configWithoutOrg = { ...config, organizationId: undefined };
-            const oauthFlowWithoutOrg = new OAuthFlow(configWithoutOrg);
-            const url = oauthFlowWithoutOrg.generateConsentUrl('state', 'challenge');
+            // organization_id is NOT included (removed as it causes HTTP 500 errors)
             expect(url).not.toContain('organization_id');
         });
     });

package/dist/auth/oauth-flow.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-flow.test.js","sourceRoot":"","sources":["../../src/auth/oauth-flow.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAe,MAAM,iBAAiB,CAAC;AAEzD,aAAa;AACb,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjB,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE3C,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,SAAoB,CAAC;IACzB,IAAI,MAAmB,CAAC;IAExB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,MAAM,GAAG;YACP,OAAO,EAAE,+BAA+B;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,gCAAgC;YAC7C,cAAc,EAAE,aAAa;SAC9B,CAAC;QAEF,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEtC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEtC,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,MAAM,aAAa,GAAG,gBAAgB,CAAC;YAEvC,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE/D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;YAClE,MAAM,mBAAmB,GAAG,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAE5D,MAAM,GAAG,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAEzE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,oBAAoB;gBAC3B,aAAa,EAAE,oBAAoB;aACpC,CAAC;YAEF,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAEnF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC3C,4CAA4C,EAC5C,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAC3B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CAAC,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,CAAC;YACxE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,KAAK,EAAE,eAAe;wBACtB,iBAAiB,EAAE,4BAA4B;qBAChD;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,CACV,SAAS,CAAC,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CACxD,CAAC,OAAO,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAE/D,MAAM,MAAM,CACV,SAAS,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CACpD,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,oBAAoB;gBAC3B,aAAa,EAAE,mBAAmB;aACnC,CAAC;YAEF,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YAEvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC3C,4CAA4C,EAC5C,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAC3B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CAAC,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,CAAC;YACxE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC3D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,KAAK,EAAE,eAAe;wBACtB,iBAAiB,EAAE,uBAAuB;qBAC3C;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,CACV,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAC9C,CAAC,OAAO,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAExC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAExC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"oauth-flow.test.js","sourceRoot":"","sources":["../../src/auth/oauth-flow.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAe,MAAM,iBAAiB,CAAC;AAEzD,aAAa;AACb,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjB,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE3C,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,SAAoB,CAAC;IACzB,IAAI,MAAmB,CAAC;IAExB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,MAAM,GAAG;YACP,OAAO,EAAE,+BAA+B;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,gCAAgC;SAC9C,CAAC;QAEF,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEtC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;YAEtC,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,MAAM,aAAa,GAAG,gBAAgB,CAAC;YAEvC,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE/D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACpD,yEAAyE;YACzE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,oBAAoB;gBAC3B,aAAa,EAAE,oBAAoB;aACpC,CAAC;YAEF,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAEnF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC3C,4CAA4C,EAC5C,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAC3B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CAAC,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,CAAC;YACxE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,KAAK,EAAE,eAAe;wBACtB,iBAAiB,EAAE,4BAA4B;qBAChD;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,CACV,SAAS,CAAC,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CACxD,CAAC,OAAO,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAE/D,MAAM,MAAM,CACV,SAAS,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CACpD,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,oBAAoB;gBAC3B,aAAa,EAAE,mBAAmB;aACnC,CAAC;YAEF,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YAEvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC3C,4CAA4C,EAC5C,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAC3B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;aACF,CAAC,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,CAAC;YACxE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC3D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,KAAK,EAAE,eAAe;wBACtB,iBAAiB,EAAE,uBAAuB;qBAC3C;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,CACV,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAC9C,CAAC,OAAO,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAExC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAExC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/user-auth.d.ts

@@ -1,7 +1,11 @@
-import { OAuthConfig } from './oauth-flow.js';
-export interface UserAuthConfig extends OAuthConfig {
+export interface UserAuthConfig {
+    authUrl: string;
+    clientId: string;
+    clientSecret?: string;
+    redirectUri: string;
     callbackPort?: number;
     tokenFilePath?: string;
+    usePKCE?: boolean;
 }
 /**
  * User Authentication Coordinator

package/dist/auth/user-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-auth.d.ts","sourceRoot":"","sources":["../../src/auth/user-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAIzD,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAAyD;IAC7E,OAAO,CAAC,WAAW,CAAa;gBAEpB,MAAM,EAAE,cAAc;IAYlC;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IA2CvC;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA2DnC;;OAEG;IACH,eAAe,IAAI,OAAO;IAgB1B;;OAEG;IACH,MAAM,IAAI,IAAI;IAOd;;OAEG;IACH,YAAY,IAAI,MAAM;IAItB;;OAEG;YACW,WAAW;CAuB1B"}
+{"version":3,"file":"user-auth.d.ts","sourceRoot":"","sources":["../../src/auth/user-auth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAAyD;IAC7E,OAAO,CAAC,WAAW,CAAa;gBAEpB,MAAM,EAAE,cAAc;IAYlC;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAwDvC;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA2DnC;;OAEG;IACH,eAAe,IAAI,OAAO;IAgB1B;;OAEG;IACH,MAAM,IAAI,IAAI;IAOd;;OAEG;IACH,YAAY,IAAI,MAAM;IAItB;;OAEG;YACW,WAAW;CAuB1B"}