@forgerock/oidc-client 0.0.0-beta-20250617173233 → 0.0.0-beta-20250825180717

package/dist/src/lib/exchange.request.js

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+import { Micro } from 'effect';
+import { createValuesµ, handleTokenResponseµ, validateValuesµ } from './exchange.utils.js';
+import { oidcApi } from './oidc.api.js';
+export function buildTokenExchangeµ({ code, config, endpoint, log, state, store, options, }) {
+    return createValuesµ(code, config, state, endpoint, options).pipe(Micro.flatMap((options) => validateValuesµ(options)), Micro.tap((options) => log.debug('Token exchange values created', options)), Micro.tapError((options) => Micro.sync(() => log.error('Error creating token exchange values', options))), Micro.flatMap((requestOptions) => Micro.promise(() => store.dispatch(oidcApi.endpoints.exchange.initiate(requestOptions)))), Micro.flatMap(({ data, error }) => handleTokenResponseµ(data, error)), Micro.tap((data) => log.debug('Token exchange response handled', data)), Micro.tapError((error) => Micro.sync(() => log.error('Error handling token exchange response', error))), Micro.map((data) => {
+        const tokens = {
+            accessToken: data.access_token,
+            idToken: data.id_token,
+            ...(data.refresh_token && { refreshToken: data.refresh_token }),
+            ...(data.expires_in && { expiresAt: data.expires_in }),
+            ...(data.expires_in && { expiryTimestamp: Date.now() + data.expires_in * 1000 }),
+        };
+        return tokens;
+    }));
+}
+//# sourceMappingURL=exchange.request.js.map

package/dist/src/lib/exchange.request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.request.js","sourceRoot":"","sources":["../../../src/lib/exchange.request.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAI/B,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAiBxC,MAAM,UAAU,mBAAmB,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,GAAG,EACH,KAAK,EACL,KAAK,EACL,OAAO,GACmB;IAC1B,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAC/D,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EACpD,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC,EAC3E,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,sCAAsC,EAAE,OAAO,CAAC,CAAC,CAC7E,EACD,KAAK,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAC/B,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CACzF,EACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EACrE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC,EACvE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC,CAC7E,EACD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;SACjF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/lib/exchange.types.d.ts

@@ -0,0 +1,21 @@
+import { OidcConfig } from './config.types.js';
+export interface TokenExchangeResponse {
+    access_token: string;
+    id_token: string;
+    refresh_token?: string;
+    expires_in?: number;
+    scope?: string;
+    token_type?: string;
+}
+export interface TokenExchangeErrorResponse {
+    error: string;
+    message: string;
+    type: 'exchange_error' | 'network_error' | 'state_error' | 'unknown_error';
+}
+export interface TokenRequestOptions {
+    code: string;
+    config: OidcConfig;
+    endpoint: string;
+    verifier?: string;
+}
+//# sourceMappingURL=exchange.types.d.ts.map

package/dist/src/lib/exchange.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.types.d.ts","sourceRoot":"","sources":["../../../src/lib/exchange.types.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,GAAG,eAAe,GAAG,aAAa,GAAG,eAAe,CAAC;CAC5E;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/src/lib/exchange.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=exchange.types.js.map

package/dist/src/lib/exchange.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.types.js","sourceRoot":"","sources":["../../../src/lib/exchange.types.ts"],"names":[],"mappings":""}

package/dist/src/lib/exchange.utils.d.ts

@@ -0,0 +1,28 @@
+import { SerializedError } from '@reduxjs/toolkit';
+import { FetchBaseQueryError } from '@reduxjs/toolkit/query';
+import { Micro } from 'effect';
+import type { GetAuthorizationUrlOptions } from '@forgerock/sdk-types';
+import type { StorageConfig } from '@forgerock/storage';
+import type { TokenExchangeResponse, TokenRequestOptions } from './exchange.types.js';
+import type { TokenExchangeErrorResponse } from './exchange.types.js';
+import type { OidcConfig } from './config.types.js';
+export declare function createValuesµ(code: string, config: OidcConfig, state: string, endpoint: string, options?: Partial<StorageConfig>): Micro.Micro<{
+    code: string;
+    config: OidcConfig;
+    state: string;
+    storedValues: GetAuthorizationUrlOptions;
+    endpoint: string;
+}, never, never>;
+export declare function handleTokenResponseµ(data: TokenExchangeResponse | undefined, error?: FetchBaseQueryError | SerializedError): Micro.Micro<TokenExchangeResponse, TokenExchangeErrorResponse, never>;
+export declare function validateValuesµ({ code, config, state, storedValues, endpoint, }: {
+    code: string;
+    config: OidcConfig;
+    state: string;
+    storedValues: GetAuthorizationUrlOptions;
+    endpoint: string;
+}): Micro.Micro<never, {
+    readonly error: "State mismatch";
+    readonly message: "The provided state does not match the stored state. This is likely due to passing in used, returned, authorize parameters.";
+    readonly type: "state_error";
+}, never> | Micro.Micro<TokenRequestOptions, never, never>;
+//# sourceMappingURL=exchange.utils.d.ts.map

package/dist/src/lib/exchange.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.utils.d.ts","sourceRoot":"","sources":["../../../src/lib/exchange.utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;;;;;;iBAajC;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,qBAAqB,GAAG,SAAS,EACvC,KAAK,CAAC,EAAE,mBAAmB,GAAG,eAAe,GAC5C,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAyBvE;AAED,wBAAgB,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,KAAK,EACL,YAAY,EACZ,QAAQ,GACT,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,0BAA0B,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;;;;2DAiBA"}

package/dist/src/lib/exchange.utils.js

@@ -0,0 +1,55 @@
+import { Micro } from 'effect';
+import { getStoredAuthUrlValues } from '@forgerock/sdk-oidc';
+export function createValuesµ(code, config, state, endpoint, options) {
+    return Micro.sync(() => {
+        const storedValues = getStoredAuthUrlValues(config.clientId, options?.prefix);
+        return {
+            code,
+            config,
+            state,
+            storedValues,
+            endpoint,
+        };
+    });
+}
+export function handleTokenResponseµ(data, error) {
+    if (error) {
+        let message;
+        if ('status' in error) {
+            message = 'error' in error ? error.error : JSON.stringify(error.data);
+        }
+        else if ('message' in error) {
+            message = error.message;
+        }
+        return Micro.fail({
+            error: 'Token Exchange failure',
+            message: message || 'Unknown error during token exchange',
+            type: 'exchange_error',
+        });
+    }
+    if (!data) {
+        return Micro.fail({
+            error: 'Token Exchange failure',
+            message: 'No data returned from token exchange',
+            type: 'exchange_error',
+        });
+    }
+    return Micro.succeed(data);
+}
+export function validateValuesµ({ code, config, state, storedValues, endpoint, }) {
+    if (!storedValues || storedValues.state !== state) {
+        const err = {
+            error: 'State mismatch',
+            message: 'The provided state does not match the stored state. This is likely due to passing in used, returned, authorize parameters.',
+            type: 'state_error',
+        };
+        return Micro.fail(err);
+    }
+    return Micro.succeed({
+        code,
+        config,
+        endpoint,
+        ...(storedValues.verifier && { verifier: storedValues.verifier }), // Optional PKCE
+    });
+}
+//# sourceMappingURL=exchange.utils.js.map

package/dist/src/lib/exchange.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.utils.js","sourceRoot":"","sources":["../../../src/lib/exchange.utils.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAQ7D,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,MAAkB,EAClB,KAAa,EACb,QAAgB,EAChB,OAAgC;IAEhC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,YAAY,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE9E,OAAO;YACL,IAAI;YACJ,MAAM;YACN,KAAK;YACL,YAAY;YACZ,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAuC,EACvC,KAA6C;IAE7C,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,OAAO,CAAC;QACZ,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;aAAM,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,OAAO,IAAI,qCAAqC;YACzD,IAAI,EAAE,gBAAgB;SACO,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,sCAAsC;YAC/C,IAAI,EAAE,gBAAgB;SACO,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,KAAK,EACL,YAAY,EACZ,QAAQ,GAOT;IACC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG;YACV,KAAK,EAAE,gBAAgB;YACvB,OAAO,EACL,4HAA4H;YAC9H,IAAI,EAAE,aAAa;SACX,CAAC;QAEX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;QACnB,IAAI;QACJ,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,EAAE,gBAAgB;KAC7D,CAAC,CAAC;AAC5B,CAAC"}

package/dist/src/lib/logout.request.d.ts

@@ -0,0 +1,17 @@
+import { Micro } from 'effect';
+import { createClientStore } from './client.store.utils.js';
+import { OauthTokens, OidcConfig } from './config.types.js';
+import { WellKnownResponse } from '@forgerock/sdk-types';
+import { createStorage } from '@forgerock/storage';
+export declare function logoutµ({ tokens, config, wellknown, store, storageClient, }: {
+    tokens: OauthTokens;
+    config: OidcConfig;
+    wellknown: WellKnownResponse;
+    store: ReturnType<typeof createClientStore>;
+    storageClient: ReturnType<typeof createStorage<OauthTokens>>;
+}): Micro.Micro<{
+    sessionResponse: import("@forgerock/sdk-types").GenericError | null;
+    revokeResponse: import("@forgerock/sdk-types").GenericError | null;
+    deleteResponse: void;
+}, never, never>;
+//# sourceMappingURL=logout.request.d.ts.map

package/dist/src/lib/logout.request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.request.d.ts","sourceRoot":"","sources":["../../../src/lib/logout.request.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAqB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,wBAAgB,OAAO,CAAC,EACtB,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,EACL,aAAa,GACd,EAAE;IACD,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC5C,aAAa,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;CAC9D;;;;iBAmCA"}

package/dist/src/lib/logout.request.js

@@ -0,0 +1,33 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+import { Micro } from 'effect';
+import { oidcApi } from './oidc.api.js';
+import { createLogoutError } from './client.store.utils.js';
+export function logoutµ({ tokens, config, wellknown, store, storageClient, }) {
+    return Micro.zip(
+    // End session with the ID token
+    Micro.promise(() => store.dispatch(oidcApi.endpoints.endSession.initiate({
+        idToken: tokens.idToken,
+        endpoint: wellknown.ping_end_idp_session_endpoint || wellknown.end_session_endpoint,
+    }))).pipe(Micro.map(({ data, error }) => createLogoutError(data, error))), 
+    // Revoke the access token
+    Micro.promise(() => store.dispatch(oidcApi.endpoints.revoke.initiate({
+        accessToken: tokens.accessToken,
+        clientId: config.clientId,
+        endpoint: wellknown.revocation_endpoint,
+    }))).pipe(Micro.map(({ data, error }) => createLogoutError(data, error)))).pipe(
+    // Delete local token and return combined results
+    Micro.flatMap(([sessionResponse, revokeResponse]) => Micro.promise(async () => {
+        const deleteResponse = await storageClient.remove();
+        return {
+            sessionResponse,
+            revokeResponse,
+            deleteResponse,
+        };
+    })));
+}
+//# sourceMappingURL=logout.request.js.map

package/dist/src/lib/logout.request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.request.js","sourceRoot":"","sources":["../../../src/lib/logout.request.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAqB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAK/E,MAAM,UAAU,OAAO,CAAC,EACtB,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,EACL,aAAa,GAOd;IACC,OAAO,KAAK,CAAC,GAAG;IACd,gCAAgC;IAChC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CACjB,KAAK,CAAC,QAAQ,CACZ,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS,CAAC,6BAA6B,IAAI,SAAS,CAAC,oBAAoB;KACpF,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAEtE,0BAA0B;IAC1B,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CACjB,KAAK,CAAC,QAAQ,CACZ,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,SAAS,CAAC,mBAAmB;KACxC,CAAC,CACH,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CACvE,CAAC,IAAI;IACJ,iDAAiD;IACjD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EAAE,CAClD,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO;YACL,eAAe;YACf,cAAc;YACd,cAAc;SACf,CAAC;IACJ,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC"}

package/dist/src/lib/oidc.api.d.ts

@@ -0,0 +1,25 @@
+import { FetchArgs } from '@reduxjs/toolkit/query';
+import { OidcConfig } from './config.types.js';
+import type { TokenExchangeResponse } from './exchange.types.js';
+export declare const oidcApi: import("@reduxjs/toolkit/query").Api<import("@reduxjs/toolkit/query").BaseQueryFn<string | FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, {
+    endSession: import("@reduxjs/toolkit/query").MutationDefinition<{
+        idToken: string;
+        endpoint: string;
+    }, import("@reduxjs/toolkit/query").BaseQueryFn<string | FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, null, "oidc", unknown>;
+    exchange: import("@reduxjs/toolkit/query").MutationDefinition<{
+        code: string;
+        config: OidcConfig;
+        endpoint: string;
+        verifier?: string;
+    }, import("@reduxjs/toolkit/query").BaseQueryFn<string | FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, TokenExchangeResponse, "oidc", unknown>;
+    revoke: import("@reduxjs/toolkit/query").MutationDefinition<{
+        accessToken: string;
+        clientId?: string;
+        endpoint: string;
+    }, import("@reduxjs/toolkit/query").BaseQueryFn<string | FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, object, "oidc", unknown>;
+    userInfo: import("@reduxjs/toolkit/query").MutationDefinition<{
+        accessToken: string;
+        endpoint: string;
+    }, import("@reduxjs/toolkit/query").BaseQueryFn<string | FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, TokenExchangeResponse, "oidc", unknown>;
+}, "oidc", never, typeof import("@reduxjs/toolkit/query").coreModuleName>;
+//# sourceMappingURL=oidc.api.d.ts.map

package/dist/src/lib/oidc.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.d.ts","sourceRoot":"","sources":["../../../src/lib/oidc.api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,SAAS,EAAkB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAU/C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAOjE,eAAO,MAAM,OAAO;;iBAI8B,MAAM;kBAAY,MAAM;;;cA+C5D,MAAM;gBACJ,UAAU;kBACR,MAAM;mBACL,MAAM;;;qBA6D2B,MAAM;mBAAa,MAAM;kBAAY,MAAM;;;qBAkD1B,MAAM;kBAAY,MAAM;;yEA2C3F,CAAC"}

package/dist/src/lib/oidc.api.js

@@ -0,0 +1,165 @@
+import { createApi, fetchBaseQuery } from '@reduxjs/toolkit/query';
+import { transformError } from './oidc.api.utils.js';
+import { initQuery, } from '@forgerock/sdk-request-middleware';
+export const oidcApi = createApi({
+    reducerPath: 'oidc',
+    baseQuery: fetchBaseQuery(),
+    endpoints: (builder) => ({
+        endSession: builder.mutation({
+            queryFn: async ({ idToken, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const url = new URL(endpoint);
+                url.searchParams.append('id_token_hint', idToken);
+                const request = {
+                    url: url.toString(),
+                    method: 'GET',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                    },
+                };
+                logger.debug('OIDC endSession API request', request);
+                const response = await initQuery(request, 'endSession')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while trying to end the session';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to end session endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to end session endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to end session endpoint';
+                    }
+                    logger.error('End Session API error', message);
+                    response.error.data = transformError('End Session Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC endSession API response', response);
+                return response;
+            },
+        }),
+        exchange: builder.mutation({
+            queryFn: async ({ code, config, endpoint, verifier }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const { clientId, redirectUri } = config;
+                const body = new URLSearchParams({
+                    grant_type: 'authorization_code',
+                    code,
+                    client_id: clientId,
+                    redirect_uri: redirectUri,
+                });
+                if (verifier) {
+                    body.append('code_verifier', verifier);
+                }
+                const request = {
+                    url: endpoint,
+                    method: 'POST',
+                    headers: {
+                        Accept: 'application/json',
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                    body,
+                };
+                logger.debug('OIDC tokenExchange API request', request);
+                const response = await initQuery(request, 'tokenExchange')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while exchanging the authorization code';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to token exchange endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to token exchange endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to token exchange endpoint';
+                    }
+                    logger.error('Token Exchange API error', message);
+                    response.error.data = transformError('Token Exchange Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC tokenExchange API response', response);
+                return response;
+            },
+        }),
+        revoke: builder.mutation({
+            queryFn: async ({ accessToken, clientId, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const body = new URLSearchParams({
+                    ...(clientId ? { client_id: clientId } : {}),
+                    token: accessToken,
+                });
+                const request = {
+                    url: endpoint,
+                    method: 'POST',
+                    credentials: 'include',
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                    body,
+                };
+                logger.debug('OIDC revoke API request', request);
+                const response = await initQuery(request, 'revoke')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while revoking the token';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to revoke endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to revoke endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to revoke endpoint';
+                    }
+                    logger.error('Token Revoke API error', message);
+                    response.error.data = transformError('Token Revoke Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC revoke API response', response);
+                return response;
+            },
+        }),
+        userInfo: builder.mutation({
+            queryFn: async ({ accessToken, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const request = {
+                    url: endpoint,
+                    method: 'GET',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                        Authorization: `Bearer ${accessToken}`,
+                    },
+                };
+                logger.debug('OIDC userInfo API request', request);
+                const response = await initQuery(request, 'userInfo')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                let message = 'An error occurred while fetching user info';
+                if (response.error) {
+                    if (response.error.status === 400) {
+                        message = 'Bad request to user info endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to user info endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to user info endpoint';
+                    }
+                    logger.error('User Info API error', message);
+                    response.error.data = transformError('User Info Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC userInfo API response', response);
+                return response;
+            },
+        }),
+    }),
+});
+//# sourceMappingURL=oidc.api.js.map

package/dist/src/lib/oidc.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.js","sourceRoot":"","sources":["../../../src/lib/oidc.api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EACL,SAAS,GAGV,MAAM,mCAAmC,CAAC;AAS3C,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,cAAc,EAAE;IAC3B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC,QAAQ,CAA8C;YACxE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBAC1D,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9B,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBAElD,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;gBAErD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;qBACpD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,mDAAmD,CAAC;oBAElE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,qCAAqC,CAAC;oBAClD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,8CAA8C,CAAC;oBAC3D,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,2CAA2C,CAAC;oBACxD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;oBAE/C,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1F,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;gBAEvD,OAAO,QAA0B,CAAC;YACpC,CAAC;SACF,CAAC;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAQxB;YACA,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBACzE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;gBACzC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,UAAU,EAAE,oBAAoB;oBAChC,IAAI;oBACJ,SAAS,EAAE,QAAQ;oBACnB,YAAY,EAAE,WAAW;iBAC1B,CAAC,CAAC;gBAEH,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;gBACzC,CAAC;gBAED,MAAM,OAAO,GAAG;oBACd,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI;iBACL,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;gBAExD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;qBACvD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,2DAA2D,CAAC;oBAE1E,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,wCAAwC,CAAC;oBACrD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,iDAAiD,CAAC;oBAC9D,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,8CAA8C,CAAC;oBAC3D,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;oBAElD,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAClC,sBAAsB,EACtB,OAAO,EACP,QAAQ,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC;oBAEF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC;gBAE1D,OAAO,QAA2C,CAAC;YACrD,CAAC;SACF,CAAC;QACF,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAuE;YAC7F,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBACxE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;gBACH,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,MAAM;oBACd,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI;iBACL,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;gBAEjD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC;qBAChD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,4CAA4C,CAAC;oBAE3D,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,gCAAgC,CAAC;oBAC7C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,yCAAyC,CAAC;oBACtD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,sCAAsC,CAAC;oBACnD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;oBAEhD,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAClC,oBAAoB,EACpB,OAAO,EACP,QAAQ,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC;oBACF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;gBAEnD,OAAO,QAA4B,CAAC;YACtC,CAAC;SACF,CAAC;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAmE;YAC3F,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBAC9D,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,aAAa,EAAE,UAAU,WAAW,EAAE;qBACvC;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;gBAEnD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;qBAClD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,OAAO,GAAG,4CAA4C,CAAC;gBAE3D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,mCAAmC,CAAC;oBAChD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,4CAA4C,CAAC;oBACzD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,yCAAyC,CAAC;oBACtD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;oBAE7C,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACxF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;gBAErD,OAAO,QAA2C,CAAC;YACrD,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}

package/dist/src/lib/oidc.api.utils.d.ts

@@ -0,0 +1,3 @@
+import { GenericError } from '@forgerock/sdk-types';
+export declare function transformError(error: string, message: string, status: number | string): GenericError;
+//# sourceMappingURL=oidc.api.utils.d.ts.map

package/dist/src/lib/oidc.api.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.utils.d.ts","sourceRoot":"","sources":["../../../src/lib/oidc.api.utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,MAAM,GACtB,YAAY,CAOd"}

package/dist/src/lib/oidc.api.utils.js

@@ -0,0 +1,9 @@
+export function transformError(error, message, status) {
+    return {
+        error,
+        message,
+        status,
+        type: 'network_error',
+    };
+}
+//# sourceMappingURL=oidc.api.utils.js.map

package/dist/src/lib/oidc.api.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.utils.js","sourceRoot":"","sources":["../../../src/lib/oidc.api.utils.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,OAAe,EACf,MAAuB;IAEvB,OAAO;QACL,KAAK;QACL,OAAO;QACP,MAAM;QACN,IAAI,EAAE,eAAe;KACtB,CAAC;AACJ,CAAC"}

package/dist/src/lib/token.utils.d.ts

@@ -0,0 +1,2 @@
+export declare function isExpiryWithinThreshold(oauthThreshold?: number, tokenExpiry?: number): boolean;
+//# sourceMappingURL=token.utils.d.ts.map

package/dist/src/lib/token.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.utils.d.ts","sourceRoot":"","sources":["../../../src/lib/token.utils.ts"],"names":[],"mappings":"AAMA,wBAAgB,uBAAuB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAQ9F"}

package/dist/src/lib/token.utils.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+export function isExpiryWithinThreshold(oauthThreshold, tokenExpiry) {
+    if (oauthThreshold && tokenExpiry) {
+        const expiryTimeMinusThreshold = tokenExpiry - oauthThreshold;
+        const result = expiryTimeMinusThreshold < Date.now();
+        return result;
+    }
+    return false;
+}
+//# sourceMappingURL=token.utils.js.map

package/dist/src/lib/token.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.utils.js","sourceRoot":"","sources":["../../../src/lib/token.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,cAAuB,EAAE,WAAoB;IACnF,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,wBAAwB,GAAG,WAAW,GAAG,cAAc,CAAC;QAC9D,MAAM,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAErD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/lib/wellknown.api.d.ts

@@ -0,0 +1,7 @@
+import { WellKnownResponse } from '@forgerock/sdk-types';
+import type { RootState } from './client.store.utils.js';
+export declare const wellknownApi: import("@reduxjs/toolkit/query").Api<import("@reduxjs/toolkit/query").BaseQueryFn<string | import("@reduxjs/toolkit/query").FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, {
+    configuration: import("@reduxjs/toolkit/query").QueryDefinition<string, import("@reduxjs/toolkit/query").BaseQueryFn<string | import("@reduxjs/toolkit/query").FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, WellKnownResponse, "wellknown", unknown>;
+}, "wellknown", never, typeof import("@reduxjs/toolkit/query").coreModuleName>;
+export declare function wellknownSelector(wellknownUrl: string, state: RootState): WellKnownResponse | undefined;
+//# sourceMappingURL=wellknown.api.d.ts.map

package/dist/src/lib/wellknown.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellknown.api.d.ts","sourceRoot":"","sources":["../../../src/lib/wellknown.api.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,eAAO,MAAM,YAAY;;8EAQvB,CAAC;AAEH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,iCAMvE"}

package/dist/src/lib/wellknown.api.js

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+import { createSelector } from '@reduxjs/toolkit';
+import { createApi, fetchBaseQuery } from '@reduxjs/toolkit/query';
+export const wellknownApi = createApi({
+    reducerPath: 'wellknown',
+    baseQuery: fetchBaseQuery(),
+    endpoints: (builder) => ({
+        configuration: builder.query({
+            query: (endpoint) => `${endpoint}`,
+        }),
+    }),
+});
+export function wellknownSelector(wellknownUrl, state) {
+    const selector = createSelector(wellknownApi.endpoints.configuration.select(wellknownUrl), (result) => result?.data);
+    return selector(state);
+}
+//# sourceMappingURL=wellknown.api.js.map

package/dist/src/lib/wellknown.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellknown.api.js","sourceRoot":"","sources":["../../../src/lib/wellknown.api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMnE,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,WAAW;IACxB,SAAS,EAAE,cAAc,EAAE;IAC3B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvB,aAAa,EAAE,OAAO,CAAC,KAAK,CAA4B;YACtD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE;SACnC,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,KAAgB;IACtE,MAAM,QAAQ,GAAG,cAAc,CAC7B,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,EACzD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CACzB,CAAC;IACF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,5 @@
+export * from './lib/client.types.js';
+export * from './lib/config.types.js';
+export * from './lib/authorize.request.types.js';
+export * from './lib/exchange.types.js';
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAKA,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC"}

package/dist/src/types.js

@@ -0,0 +1,10 @@
+/* Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+export * from './lib/client.types.js';
+export * from './lib/config.types.js';
+export * from './lib/authorize.request.types.js';
+export * from './lib/exchange.types.js';
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC"}