@fluixi/oauth2 1.0.0-alpha.3 → 1.0.0-alpha.4

package/dist/{browser-QQDMUXPB.mjs → browser-ZDO2EHPH.mjs}

@@ -1,7 +1,7 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 import {
   __export
-} from "./chunk-4GSQS5YG.mjs";
+} from "./chunk-5NSLG6E3.mjs";
 
 // ../../node_modules/.pnpm/jose@5.10.0/node_modules/jose/dist/browser/runtime/webcrypto.js
 var webcrypto_default = crypto;

package/dist/browser.cjs

@@ -165,9 +165,11 @@ async function loadJose2() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose2();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/browser.mjs

@@ -131,9 +131,11 @@ async function loadJose2() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose2();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/{chunk-4GSQS5YG.mjs → chunk-5NSLG6E3.mjs}

@@ -1,4 +1,4 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
   for (var name in all)

package/dist/{chunk-IZ3BKW3J.mjs → chunk-UEAYG4TW.mjs}

@@ -1,4 +1,4 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 
 // src/types.ts
 var OAuthError = class extends Error {

package/dist/{dpop-VQWMNGQD.mjs → dpop-CU42DUAJ.mjs}

@@ -1,13 +1,13 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 import {
   OAuthError
-} from "./chunk-IZ3BKW3J.mjs";
-import "./chunk-4GSQS5YG.mjs";
+} from "./chunk-UEAYG4TW.mjs";
+import "./chunk-5NSLG6E3.mjs";
 
 // src/dpop.ts
 async function loadJose() {
   try {
-    return await import("./browser-QQDMUXPB.mjs");
+    return await import("./browser-ZDO2EHPH.mjs");
   } catch {
     throw new OAuthError(
       "DPoP needs `jose`. Install it: npm i jose. It is an optional peer, so a client not using DPoP does not carry it.",
@@ -15,9 +15,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,
@@ -26,6 +28,22 @@ async function createDpopKey(alg = "ES256") {
     alg
   };
 }
+async function exportDpopKey(key) {
+  const jose = await loadJose();
+  return { jwk: { ...await jose.exportJWK(key.privateKey) }, alg: key.alg };
+}
+var PRIVATE_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth"]);
+async function importDpopKey(stored) {
+  const jose = await loadJose();
+  const privateKey = await jose.importJWK(stored.jwk, stored.alg);
+  const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg: stored.alg
+  };
+}
 async function thumbprintOf(jwk) {
   const jose = await loadJose();
   return jose.calculateJwkThumbprint(jwk, "sha256");
@@ -73,6 +91,8 @@ function boundKeyOf(claims) {
 export {
   boundKeyOf,
   createDpopKey,
+  exportDpopKey,
+  importDpopKey,
   nonceFrom,
   proofFor,
   thumbprintOf,

package/dist/{dpop-NS7NKOWM.mjs → dpop-YPGCGL7S.mjs}

@@ -14,9 +14,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,
@@ -25,6 +27,22 @@ async function createDpopKey(alg = "ES256") {
     alg
   };
 }
+async function exportDpopKey(key) {
+  const jose = await loadJose();
+  return { jwk: { ...await jose.exportJWK(key.privateKey) }, alg: key.alg };
+}
+var PRIVATE_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth"]);
+async function importDpopKey(stored) {
+  const jose = await loadJose();
+  const privateKey = await jose.importJWK(stored.jwk, stored.alg);
+  const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg: stored.alg
+  };
+}
 async function thumbprintOf(jwk) {
   const jose = await loadJose();
   return jose.calculateJwkThumbprint(jwk, "sha256");
@@ -72,6 +90,8 @@ function boundKeyOf(claims) {
 export {
   boundKeyOf,
   createDpopKey,
+  exportDpopKey,
+  importDpopKey,
   nonceFrom,
   proofFor,
   thumbprintOf,

package/dist/dpop-store.cjs

@@ -56,9 +56,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/dpop-store.mjs

@@ -21,9 +21,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/dpop.cjs

@@ -32,6 +32,8 @@ var dpop_exports = {};
 __export(dpop_exports, {
   boundKeyOf: () => boundKeyOf,
   createDpopKey: () => createDpopKey,
+  exportDpopKey: () => exportDpopKey,
+  importDpopKey: () => importDpopKey,
   nonceFrom: () => nonceFrom,
   proofFor: () => proofFor,
   thumbprintOf: () => thumbprintOf,
@@ -60,9 +62,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,
@@ -71,6 +75,22 @@ async function createDpopKey(alg = "ES256") {
     alg
   };
 }
+async function exportDpopKey(key) {
+  const jose = await loadJose();
+  return { jwk: { ...await jose.exportJWK(key.privateKey) }, alg: key.alg };
+}
+var PRIVATE_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth"]);
+async function importDpopKey(stored) {
+  const jose = await loadJose();
+  const privateKey = await jose.importJWK(stored.jwk, stored.alg);
+  const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg: stored.alg
+  };
+}
 async function thumbprintOf(jwk) {
   const jose = await loadJose();
   return jose.calculateJwkThumbprint(jwk, "sha256");

package/dist/dpop.d.ts

@@ -25,7 +25,24 @@ export interface DpopKey {
  * attacker who can run script can use the key while they are there, and cannot take it
  * away to use later.
  */
-export declare function createDpopKey(alg?: string): Promise<DpopKey>;
+export declare function createDpopKey(alg?: string, options?: {
+    extractable?: boolean;
+}): Promise<DpopKey>;
+/**
+ * A key as a server session stores it: the private JWK and its algorithm.
+ *
+ * Only for a key held by a server, inside an encrypted httpOnly cookie. There it is bytes
+ * no page can read, and the session has nowhere else to keep it between requests. A
+ * browser key stays non-extractable in IndexedDB instead.
+ */
+export interface StoredDpopKey {
+    jwk: Record<string, unknown>;
+    alg: string;
+}
+/** Export a key made with `extractable: true`, for a server session to store. */
+export declare function exportDpopKey(key: DpopKey): Promise<StoredDpopKey>;
+/** Rebuild a key a server session stored. The thumbprint comes out the same, which is the point. */
+export declare function importDpopKey(stored: StoredDpopKey): Promise<DpopKey>;
 /** The thumbprint of a public JWK, for comparing against a token's `cnf.jkt`. */
 export declare function thumbprintOf(jwk: Record<string, unknown>): Promise<string>;
 export interface ProofOptions {

package/dist/dpop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dpop.d.ts","sourceRoot":"","sources":["../src/dpop.ts"],"names":[],"mappings":"AAkBA,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACtB,iEAAiE;IACjE,UAAU,EAAE,SAAS,CAAC;IACtB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;CACb;AAcD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,GAAG,SAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAWnE;AAED,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhF;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCnF;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,CAGvE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAGzE"}
+{"version":3,"file":"dpop.d.ts","sourceRoot":"","sources":["../src/dpop.ts"],"names":[],"mappings":"AAkBA,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACtB,iEAAiE;IACjE,UAAU,EAAE,SAAS,CAAC;IACtB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;CACb;AAcD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CACjC,GAAG,SAAU,EACb,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,OAAO,CAAC,CAalB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,iFAAiF;AACjF,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAGxE;AAID,oGAAoG;AACpG,wBAAsB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAW3E;AAED,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhF;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCnF;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,CAGvE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAGzE"}

package/dist/dpop.js

@@ -35,9 +35,11 @@ async function loadJose() {
  * attacker who can run script can use the key while they are there, and cannot take it
  * away to use later.
  */
-export async function createDpopKey(alg = 'ES256') {
+export async function createDpopKey(alg = 'ES256', options = {}) {
     const jose = await loadJose();
-    const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+    const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+        extractable: options.extractable ?? false,
+    });
     const publicJwk = { ...(await jose.exportJWK(publicKey)) };
     return {
         privateKey: privateKey,
@@ -46,6 +48,25 @@ export async function createDpopKey(alg = 'ES256') {
         alg,
     };
 }
+/** Export a key made with `extractable: true`, for a server session to store. */
+export async function exportDpopKey(key) {
+    const jose = await loadJose();
+    return { jwk: { ...(await jose.exportJWK(key.privateKey)) }, alg: key.alg };
+}
+const PRIVATE_MEMBERS = new Set(['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth']);
+/** Rebuild a key a server session stored. The thumbprint comes out the same, which is the point. */
+export async function importDpopKey(stored) {
+    const jose = await loadJose();
+    const privateKey = (await jose.importJWK(stored.jwk, stored.alg));
+    // The public half is the private JWK without its private members (RFC 7518 §6.2.2, §6.3.2).
+    const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+    return {
+        privateKey,
+        publicJwk,
+        thumbprint: await jose.calculateJwkThumbprint(publicJwk, 'sha256'),
+        alg: stored.alg,
+    };
+}
 /** The thumbprint of a public JWK, for comparing against a token's `cnf.jkt`. */
 export async function thumbprintOf(jwk) {
     const jose = await loadJose();

package/dist/dpop.mjs

@@ -21,9 +21,11 @@ async function loadJose() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,
@@ -32,6 +34,22 @@ async function createDpopKey(alg = "ES256") {
     alg
   };
 }
+async function exportDpopKey(key) {
+  const jose = await loadJose();
+  return { jwk: { ...await jose.exportJWK(key.privateKey) }, alg: key.alg };
+}
+var PRIVATE_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth"]);
+async function importDpopKey(stored) {
+  const jose = await loadJose();
+  const privateKey = await jose.importJWK(stored.jwk, stored.alg);
+  const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg: stored.alg
+  };
+}
 async function thumbprintOf(jwk) {
   const jose = await loadJose();
   return jose.calculateJwkThumbprint(jwk, "sha256");
@@ -79,6 +97,8 @@ function boundKeyOf(claims) {
 export {
   boundKeyOf,
   createDpopKey,
+  exportDpopKey,
+  importDpopKey,
   nonceFrom,
   proofFor,
   thumbprintOf,

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -213,9 +213,11 @@ async function loadJose2() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose2();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/index.mjs

@@ -1,5 +1,5 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
-import "./chunk-4GSQS5YG.mjs";
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+import "./chunk-5NSLG6E3.mjs";
 
 // src/service.ts
 import { createSession } from "@fluixi/session";
@@ -111,7 +111,7 @@ function resolveMethod(auth) {
 }
 async function loadJose() {
   try {
-    return await import("./browser-QQDMUXPB.mjs");
+    return await import("./browser-ZDO2EHPH.mjs");
   } catch {
     throw new OAuthError(
       "private_key_jwt needs `jose`. Install it: npm i jose. It is an optional peer, so a client using a secret does not carry it.",
@@ -151,7 +151,7 @@ async function applyClientAuth(auth, endpoint, headers, form) {
 // src/dpop.ts
 async function loadJose2() {
   try {
-    return await import("./browser-QQDMUXPB.mjs");
+    return await import("./browser-ZDO2EHPH.mjs");
   } catch {
     throw new OAuthError(
       "DPoP needs `jose`. Install it: npm i jose. It is an optional peer, so a client not using DPoP does not carry it.",
@@ -159,9 +159,11 @@ async function loadJose2() {
     );
   }
 }
-async function createDpopKey(alg = "ES256") {
+async function createDpopKey(alg = "ES256", options = {}) {
   const jose = await loadJose2();
-  const { privateKey, publicKey } = await jose.generateKeyPair(alg, { extractable: false });
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
   const publicJwk = { ...await jose.exportJWK(publicKey) };
   return {
     privateKey,

package/dist/server.cjs

@@ -1,4 +1,4 @@
-/*! @fluixi/oauth2 v1.0.0-alpha.3 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
+/*! @fluixi/oauth2 v1.0.0-alpha.4 | (c) 2026 Ibrahima Touré and Fluixi contributors | MIT */
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -207,8 +207,106 @@ function expiryFrom(expiresIn, now = Date.now()) {
   return Number.isFinite(seconds) && seconds > 0 ? now + seconds * 1e3 : void 0;
 }
 
+// src/dpop.ts
+async function loadJose2() {
+  try {
+    return await import("jose");
+  } catch {
+    throw new OAuthError(
+      "DPoP needs `jose`. Install it: npm i jose. It is an optional peer, so a client not using DPoP does not carry it.",
+      "jose_missing"
+    );
+  }
+}
+async function createDpopKey(alg = "ES256", options = {}) {
+  const jose = await loadJose2();
+  const { privateKey, publicKey } = await jose.generateKeyPair(alg, {
+    extractable: options.extractable ?? false
+  });
+  const publicJwk = { ...await jose.exportJWK(publicKey) };
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg
+  };
+}
+async function exportDpopKey(key) {
+  const jose = await loadJose2();
+  return { jwk: { ...await jose.exportJWK(key.privateKey) }, alg: key.alg };
+}
+var PRIVATE_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth"]);
+async function importDpopKey(stored) {
+  const jose = await loadJose2();
+  const privateKey = await jose.importJWK(stored.jwk, stored.alg);
+  const publicJwk = Object.fromEntries(Object.entries(stored.jwk).filter(([k]) => !PRIVATE_MEMBERS.has(k)));
+  return {
+    privateKey,
+    publicJwk,
+    thumbprint: await jose.calculateJwkThumbprint(publicJwk, "sha256"),
+    alg: stored.alg
+  };
+}
+async function proofFor(key, options) {
+  const jose = await loadJose2();
+  const htu = (() => {
+    try {
+      const url = new URL(options.url);
+      url.search = "";
+      url.hash = "";
+      return url.toString();
+    } catch {
+      return options.url;
+    }
+  })();
+  const claims = {
+    htm: options.method.toUpperCase(),
+    htu,
+    jti: crypto.randomUUID()
+  };
+  if (options.accessToken) {
+    const digest = await crypto.subtle.digest(
+      "SHA-256",
+      new TextEncoder().encode(options.accessToken)
+    );
+    let binary = "";
+    for (const byte of new Uint8Array(digest)) binary += String.fromCharCode(byte);
+    claims.ath = btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  }
+  if (options.nonce) claims.nonce = options.nonce;
+  return new jose.SignJWT(claims).setProtectedHeader({ typ: "dpop+jwt", alg: key.alg, jwk: key.publicJwk }).setIssuedAt().sign(key.privateKey);
+}
+function nonceFrom(response) {
+  return response.headers.get("dpop-nonce");
+}
+
 // src/server.ts
 var import_app = require("@fluixi/start/app");
+var dpopNonces = /* @__PURE__ */ new Map();
+async function prove(headers, key, method, url, accessToken) {
+  headers.dpop = await proofFor(key, { method, url, accessToken, nonce: dpopNonces.get(new URL(url).origin) });
+}
+function learnNonce(url, response) {
+  const offered = nonceFrom(response);
+  if (!offered) return false;
+  const origin = new URL(url).origin;
+  const fresh = offered !== dpopNonces.get(origin);
+  dpopNonces.set(origin, offered);
+  return fresh && !response.ok;
+}
+async function withToken(url, session) {
+  const key = session.dpop && session.tokenType?.toLowerCase() === "dpop" ? await importDpopKey(session.dpop) : null;
+  const send = async () => {
+    const headers = {
+      authorization: `${key ? "DPoP" : "Bearer"} ${session.accessToken}`
+    };
+    if (key) await prove(headers, key, "GET", url, session.accessToken);
+    return fetch(url, { headers });
+  };
+  let response = await send();
+  if (key && learnNonce(url, response)) response = await send();
+  return response;
+}
 function oauthRoutes(config) {
   const base = (config.basePath ?? "/auth").replace(/\/$/, "");
   const scopes = config.scopes ?? ["openid", "profile", "email"];
@@ -240,14 +338,19 @@ function oauthRoutes(config) {
     keyId: config.keyId,
     assertionAlgorithm: config.assertionAlgorithm
   };
-  async function tokenRequest(body) {
+  async function tokenRequest(body, key = null) {
     const { token } = await resolve();
-    const headers = {
-      "content-type": "application/x-www-form-urlencoded"
+    const attempt = async () => {
+      const headers = {
+        "content-type": "application/x-www-form-urlencoded"
+      };
+      const form = new URLSearchParams(body);
+      await applyClientAuth(clientAuth, token, headers, form);
+      if (key) await prove(headers, key, "POST", token);
+      return fetch(token, { method: "POST", headers, body: form.toString() });
     };
-    const form = new URLSearchParams(body);
-    await applyClientAuth(clientAuth, token, headers, form);
-    const response = await fetch(token, { method: "POST", headers, body: form.toString() });
+    let response = await attempt();
+    if (key && learnNonce(token, response)) response = await attempt();
     const payload = await response.json().catch(() => ({}));
     if (!response.ok) {
       throw new OAuthError(
@@ -314,17 +417,23 @@ function oauthRoutes(config) {
       if (!pending || !state || !timingSafeEqual(pending.state, state)) {
         return json({ error: "state_mismatch" }, 400);
       }
-      const payload = await tokenRequest({
-        grant_type: "authorization_code",
-        code,
-        redirect_uri: config.redirectUri,
-        code_verifier: pending.verifier
-      });
+      const key = config.dpop ? await createDpopKey(config.dpopAlgorithm, { extractable: true }) : null;
+      const payload = await tokenRequest(
+        {
+          grant_type: "authorization_code",
+          code,
+          redirect_uri: config.redirectUri,
+          code_verifier: pending.verifier
+        },
+        key
+      );
       const signedIn = await cookie.write({
         accessToken: String(payload.access_token ?? ""),
         refreshToken: typeof payload.refresh_token === "string" ? payload.refresh_token : void 0,
         idToken: typeof payload.id_token === "string" ? payload.id_token : void 0,
-        expiresAt: expiryFrom(payload.expires_in)
+        expiresAt: expiryFrom(payload.expires_in),
+        tokenType: typeof payload.token_type === "string" ? payload.token_type : void 0,
+        dpop: key ? await exportDpopKey(key) : void 0
       });
       return new Response(null, {
         status: 302,
@@ -344,17 +453,20 @@ function oauthRoutes(config) {
     if (route === "/refresh") {
       const current = await session();
       if (!current?.refreshToken) return json({ error: "no_session" }, 401);
-      const payload = await tokenRequest({
-        grant_type: "refresh_token",
-        refresh_token: current.refreshToken
-      });
+      const key = current.dpop ? await importDpopKey(current.dpop) : null;
+      const payload = await tokenRequest(
+        { grant_type: "refresh_token", refresh_token: current.refreshToken },
+        key
+      );
       const refreshed = await cookie.write({
         accessToken: String(payload.access_token ?? ""),
         // A provider that rotates refresh tokens sends a new one; one that does not
         // expects the old one to keep working.
         refreshToken: typeof payload.refresh_token === "string" ? payload.refresh_token : current.refreshToken,
         idToken: current.idToken,
-        expiresAt: expiryFrom(payload.expires_in)
+        expiresAt: expiryFrom(payload.expires_in),
+        tokenType: typeof payload.token_type === "string" ? payload.token_type : current.tokenType,
+        dpop: current.dpop
       });
       return json({ ok: true }, 200, { "set-cookie": refreshed });
     }
@@ -363,9 +475,7 @@ function oauthRoutes(config) {
       if (!current?.accessToken) return json({ error: "no_session" }, 401);
       const { userinfo } = await resolve();
       if (!userinfo) return json({ error: "no_userinfo" }, 501);
-      const response = await fetch(userinfo, {
-        headers: { authorization: `Bearer ${current.accessToken}` }
-      });
+      const response = await withToken(userinfo, current);
       if (!response.ok) return json({ error: "userinfo_failed" }, response.status);
       const claims = await response.json();
       return json(config.mapUser ? config.mapUser(claims, current.accessToken) : claims);
@@ -455,9 +565,7 @@ function sessionLocals(config) {
     try {
       const endpoints = config.endpoints ?? (config.issuer ? await discover(config.issuer) : null);
       if (endpoints?.userinfo) {
-        const response = await fetch(endpoints.userinfo, {
-          headers: { authorization: `Bearer ${session.accessToken}` }
-        });
+        const response = await withToken(endpoints.userinfo, session);
         if (response.ok) {
           const claims = await response.json();
           user = config.mapUser ? config.mapUser(claims, session.accessToken) : claims;

package/dist/server.d.ts

@@ -53,6 +53,17 @@ export interface OAuthRoutesConfig {
     userCacheMs?: number;
     /** Map the provider's userinfo onto the app's own shape. */
     mapUser?: (claims: Record<string, unknown>, accessToken: string) => unknown;
+    /**
+     * Bind tokens to a key with DPoP (RFC 9449), which a provider may require: an Okta org
+     * that mandates it refuses a server-mode client without it.
+     *
+     * The key is made per session at the code exchange and kept in the encrypted session
+     * cookie, since a refresh token is bound to the key that obtained it and a refresh with
+     * another key is refused. Needs `jose`.
+     */
+    dpop?: boolean;
+    /** Default `ES256`. Must be in the provider's `dpop_signing_alg_values_supported`. */
+    dpopAlgorithm?: string;
 }
 /**
  * The middleware.