@fluixi/oauth2 1.0.0-alpha.1 → 1.0.0-alpha.100

package/dist/verify.mjs

@@ -1,8 +1,8 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.1 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.100 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 import {
   OAuthError
-} from "./chunk-4NSOGPLM.mjs";
-import "./chunk-25WE6UWI.mjs";
+} from "./chunk-2B3I72DV.mjs";
+import "./chunk-KTGVSZE6.mjs";
 
 // src/client-auth.ts
 var CANONICAL = {
@@ -35,7 +35,7 @@ function assertUsable(auth, who) {
 }
 async function loadJose() {
   try {
-    return await import("./browser-ONMHX3Z3.mjs");
+    return await import("./browser-TV25RBLT.mjs");
   } catch {
     throw new OAuthError(
       "private_key_jwt needs `jose`. Install it: npm i jose. It is an optional peer, so a client using a secret does not carry it.",
@@ -85,8 +85,12 @@ async function discover(issuer, fetcher = fetch) {
     try {
       response = await fetcher(documentUrl(issuer));
     } catch (cause) {
+      const why = cause instanceof Error ? cause.message : String(cause);
       throw new OAuthError(
-        `Could not read the discovery document at ${documentUrl(issuer)}. In a browser this is usually the provider refusing a cross-origin read: give \`endpoints\` directly, or resolve them on a server. (${cause instanceof Error ? cause.message : String(cause)})`,
+        typeof window === "undefined" ? (
+          // On a server nothing blocks the read: the provider is down, or the address is wrong.
+          `Could not reach the provider at ${documentUrl(issuer)}: is it running, and is the issuer right? (${why})`
+        ) : `Could not read the discovery document at ${documentUrl(issuer)}. In a browser this is usually the provider refusing a cross-origin read: give \`endpoints\` directly, or resolve them on a server. (${why})`,
         "discovery_unreachable"
       );
     }
@@ -111,6 +115,7 @@ async function discover(issuer, fetcher = fetch) {
       jwks: doc.jwks_uri,
       introspection: doc.introspection_endpoint,
       revocation: doc.revocation_endpoint,
+      checkSession: doc.check_session_iframe,
       issuer: doc.issuer ?? issuer
     };
   })();
@@ -307,7 +312,7 @@ function bearerOf(request) {
 }
 async function loadJose2() {
   try {
-    return await import("./browser-ONMHX3Z3.mjs");
+    return await import("./browser-TV25RBLT.mjs");
   } catch {
     throw new OAuthError(
       "Token verification needs `jose`. Install it: npm i jose. It is an optional peer so an app that does not verify does not carry it.",
@@ -359,7 +364,7 @@ function createTokenVerifier(options) {
   }
   const checkProof = async (claims, token, request) => {
     const jose = await loadJose2();
-    const { boundKeyOf, thumbprintOf } = await import("./dpop-LVPWWADA.mjs");
+    const { boundKeyOf, thumbprintOf } = await import("./dpop-SGWG3K2I.mjs");
     const bound = boundKeyOf(claims);
     if (!bound) {
       throw new TokenError(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluixi/oauth2",
-  "version": "1.0.0-alpha.1",
+  "version": "1.0.0-alpha.100",
   "license": "MIT",
   "author": "Ibrahima Touré",
   "description": "OAuth2 / OIDC for Fluixi apps: an AuthClient that drives the flow, and an AuthService built on @fluixi/session. Browser PKCE or a server-held session, chosen by config.",
@@ -74,28 +74,34 @@
       "default": "./dist/env-config.js"
     }
   },
-  "dependencies": {},
+  "dependencies": {
+    "@fluixi/auth": "^1.0.0-alpha.100",
+    "@fluixi/session": "^1.0.0-alpha.100"
+  },
   "peerDependencies": {
     "jose": ">=5",
-    "@fluixi/core": "1.0.0-alpha.87",
-    "@fluixi/reactive": "1.0.0-alpha.87",
-    "@fluixi/session": "1.0.0-alpha.87",
-    "@fluixi/start": "0.1.0-alpha.77",
-    "@fluixi/server": "1.0.0-alpha.87",
-    "@fluixi/auth": "1.0.0-alpha.87"
+    "@fluixi/core": "^1.0.0-alpha.100",
+    "@fluixi/di": "^1.0.0-alpha.100",
+    "@fluixi/dom": "^1.0.0-alpha.100",
+    "@fluixi/reactive": "^1.0.0-alpha.100",
+    "@fluixi/server": "^1.0.0-alpha.100",
+    "@fluixi/start": "^1.0.0-alpha.100",
+    "@fluixi/storage": "^1.0.0-alpha.100"
   },
   "devDependencies": {
     "@bambiste/mix-builder": "^0.4.0",
     "cross-env": "^7.0.3",
     "jose": "^5.9.6",
-    "@fluixi/reactive": "1.0.0-alpha.87",
-    "@fluixi/session": "1.0.0-alpha.87",
-    "@fluixi/start": "0.1.0-alpha.77",
-    "@fluixi/server": "1.0.0-alpha.87",
-    "@fluixi/auth": "1.0.0-alpha.87",
-    "@fluixi/core": "1.0.0-alpha.87",
-    "@fluixi/testing": "1.0.0-alpha.35",
-    "@fluixi/dom": "1.0.0-alpha.87"
+    "@fluixi/auth": "1.0.0-alpha.100",
+    "@fluixi/core": "1.0.0-alpha.100",
+    "@fluixi/di": "1.0.0-alpha.100",
+    "@fluixi/dom": "1.0.0-alpha.100",
+    "@fluixi/reactive": "1.0.0-alpha.100",
+    "@fluixi/server": "1.0.0-alpha.100",
+    "@fluixi/session": "1.0.0-alpha.100",
+    "@fluixi/start": "1.0.0-alpha.100",
+    "@fluixi/storage": "1.0.0-alpha.100",
+    "@fluixi/testing": "1.0.0-alpha.100"
   },
   "peerDependenciesMeta": {
     "@fluixi/start": {