@gauts/auth 0.6.3 → 0.7.0

package/dist/social/state.d.ts

@@ -0,0 +1,46 @@
+import type { SocialIdentity, SocialIntent, SocialProviderId } from "./types.js";
+type OAuthPayload = {
+    exp: number;
+    intent: SocialIntent;
+    kind: "oauth";
+    provider: SocialProviderId;
+    state: string;
+    verifier: string;
+};
+type CreateOAuthStateInput = {
+    intent: SocialIntent;
+    now?: () => Date;
+    provider: SocialProviderId;
+    secret: string;
+};
+type ResolveOAuthStateInput = {
+    now?: () => Date;
+    provider: SocialProviderId;
+    secret: string;
+    state: string | null | undefined;
+    value: string | null | undefined;
+};
+type CreateRegistrationStateInput = {
+    identity: SocialIdentity;
+    now?: () => Date;
+    secret: string;
+};
+type ResolveRegistrationStateInput = {
+    now?: () => Date;
+    secret: string;
+    value: string | null | undefined;
+};
+type StoredState<T> = {
+    expires_at: Date;
+    value: string;
+} & T;
+export declare const validateSocialSecret: (secret: string) => void;
+export declare const createOAuthState: ({ intent, now, provider, secret, }: CreateOAuthStateInput) => StoredState<{
+    codeChallenge: string;
+    state: string;
+}>;
+export declare const resolveOAuthState: ({ now, provider, secret, state, value, }: ResolveOAuthStateInput) => Pick<OAuthPayload, "intent" | "verifier"> | null;
+export declare const createRegistrationState: ({ identity, now, secret, }: CreateRegistrationStateInput) => StoredState<object>;
+export declare const resolveRegistrationState: ({ now, secret, value, }: ResolveRegistrationStateInput) => SocialIdentity | null;
+export {};
+//# sourceMappingURL=state.d.ts.map

package/dist/social/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/social/state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjF,KAAK,YAAY,GAAG;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,KAAK,qBAAqB,GAAG;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC1B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACjC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACjB,GAAG,CAAC,CAAC;AAaN,eAAO,MAAM,oBAAoB,GAAI,QAAQ,MAAM,KAAG,IAOrD,CAAC;AAuFF,eAAO,MAAM,gBAAgB,GAAI,oCAK9B,qBAAqB,KAAG,WAAW,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACjB,CAsBA,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,0CAM/B,sBAAsB,KAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG,IAmBvE,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,4BAIrC,4BAA4B,KAAG,WAAW,CAAC,MAAM,CAcnD,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,yBAItC,6BAA6B,KAAG,cAAc,GAAG,IAOnD,CAAC"}

package/dist/social/state.js

@@ -0,0 +1,139 @@
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { createError } from "../errors.js";
+import { isRecord } from "../session/guards.js";
+const SOCIAL_CONTEXT = "auth/social";
+const SOCIAL_TTL = 10 * 60;
+const MIN_SECRET_BYTES = 32;
+const signaturePattern = /^[A-Za-z0-9_-]{43}$/;
+const tokenPattern = /^[A-Za-z0-9_-]{43}$/;
+export const validateSocialSecret = (secret) => {
+    if (typeof secret !== "string" || Buffer.byteLength(secret, "utf8") < MIN_SECRET_BYTES) {
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "Authentication secret must contain at least 32 bytes.",
+        });
+    }
+};
+const getSignature = ({ body, secret }) => {
+    return createHmac("sha256", secret)
+        .update(SOCIAL_CONTEXT)
+        .update("\0")
+        .update(body)
+        .digest("base64url");
+};
+const signPayload = ({ payload, secret }) => {
+    const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    return `${body}.${getSignature({ body, secret })}`;
+};
+const parsePayload = ({ secret, value }) => {
+    const [body, signature, extra] = value?.trim().split(".") ?? [];
+    if (!body || !signature || extra !== undefined || !signaturePattern.test(signature)) {
+        return null;
+    }
+    const expected = Buffer.from(getSignature({ body, secret }), "ascii");
+    const received = Buffer.from(signature, "ascii");
+    if (expected.byteLength !== received.byteLength || !timingSafeEqual(expected, received)) {
+        return null;
+    }
+    try {
+        return JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+    }
+    catch {
+        return null;
+    }
+};
+const isProvider = (value) => {
+    return value === "github" || value === "google" || value === "x";
+};
+const isIntent = (value) => {
+    return value === "login" || value === "register";
+};
+const isIdentity = (value) => {
+    return (isRecord(value) &&
+        (typeof value.avatarUrl === "string" || value.avatarUrl === null) &&
+        typeof value.email === "string" &&
+        typeof value.name === "string" &&
+        isProvider(value.provider) &&
+        typeof value.providerId === "string" &&
+        (typeof value.username === "string" || value.username === null));
+};
+const isOAuthPayload = (value) => {
+    return (isRecord(value) &&
+        typeof value.exp === "number" &&
+        Number.isSafeInteger(value.exp) &&
+        isIntent(value.intent) &&
+        value.kind === "oauth" &&
+        isProvider(value.provider) &&
+        typeof value.state === "string" &&
+        tokenPattern.test(value.state) &&
+        typeof value.verifier === "string" &&
+        tokenPattern.test(value.verifier));
+};
+const isRegistrationPayload = (value) => {
+    return (isRecord(value) &&
+        typeof value.exp === "number" &&
+        Number.isSafeInteger(value.exp) &&
+        value.kind === "registration" &&
+        isIdentity(value.identity));
+};
+const matchesState = ({ expected, received }) => {
+    const left = Buffer.from(expected, "ascii");
+    const right = Buffer.from(received, "ascii");
+    return left.byteLength === right.byteLength && timingSafeEqual(left, right);
+};
+export const createOAuthState = ({ intent, now = () => new Date(), provider, secret, }) => {
+    validateSocialSecret(secret);
+    const current = now();
+    const expires_at = new Date(current.getTime() + SOCIAL_TTL * 1000);
+    const state = randomBytes(32).toString("base64url");
+    const verifier = randomBytes(32).toString("base64url");
+    const payload = {
+        exp: expires_at.getTime(),
+        intent,
+        kind: "oauth",
+        provider,
+        state,
+        verifier,
+    };
+    return {
+        codeChallenge: createHash("sha256").update(verifier, "ascii").digest("base64url"),
+        expires_at,
+        state,
+        value: signPayload({ payload, secret }),
+    };
+};
+export const resolveOAuthState = ({ now = () => new Date(), provider, secret, state, value, }) => {
+    validateSocialSecret(secret);
+    if (!state || !tokenPattern.test(state)) {
+        return null;
+    }
+    const payload = parsePayload({ secret, value });
+    if (!isOAuthPayload(payload) ||
+        payload.exp <= now().getTime() ||
+        payload.provider !== provider ||
+        !matchesState({ expected: payload.state, received: state })) {
+        return null;
+    }
+    return { intent: payload.intent, verifier: payload.verifier };
+};
+export const createRegistrationState = ({ identity, now = () => new Date(), secret, }) => {
+    validateSocialSecret(secret);
+    const expires_at = new Date(now().getTime() + SOCIAL_TTL * 1000);
+    const payload = {
+        exp: expires_at.getTime(),
+        identity,
+        kind: "registration",
+    };
+    return {
+        expires_at,
+        value: signPayload({ payload, secret }),
+    };
+};
+export const resolveRegistrationState = ({ now = () => new Date(), secret, value, }) => {
+    validateSocialSecret(secret);
+    const payload = parsePayload({ secret, value });
+    return isRegistrationPayload(payload) && payload.exp > now().getTime()
+        ? payload.identity
+        : null;
+};
+//# sourceMappingURL=state.js.map

package/dist/social/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/social/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAuDhD,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAQ,EAAE;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACrF,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uDAAuD;SACnE,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAoC,EAAU,EAAE;IAChF,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9B,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAuC,EAAU,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,IAAI,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAqB,EAAW,EAAE;IACnE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAEhE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAc,EAA6B,EAAE;IAC7D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,GAAG,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAyB,EAAE;IACvD,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAc,EAA2B,EAAE;IAC3D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QACjE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAClE,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC7D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CACpC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAgC,EAAE;IAC3E,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,IAAI,KAAK,cAAc;QAC7B,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC7B,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA0C,EAAW,EAAE;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAC7B,MAAM,EACN,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,QAAQ,EACR,MAAM,GACc,EAGrB,EAAE;IACD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,OAAO,GAAiB;QAC1B,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;QACzB,MAAM;QACN,IAAI,EAAE,OAAO;QACb,QAAQ;QACR,KAAK;QACL,QAAQ;KACX,CAAC;IAEF,OAAO;QACH,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACjF,UAAU;QACV,KAAK;QACL,KAAK,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAC1C,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAC9B,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,QAAQ,EACR,MAAM,EACN,KAAK,EACL,KAAK,GACgB,EAAoD,EAAE;IAC3E,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEhD,IACI,CAAC,cAAc,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE;QAC9B,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC7B,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAC7D,CAAC;QACC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,EACpC,QAAQ,EACR,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,GACqB,EAAuB,EAAE;IACpD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC;IACjE,MAAM,OAAO,GAAwB;QACjC,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;QACzB,QAAQ;QACR,IAAI,EAAE,cAAc;KACvB,CAAC;IAEF,OAAO;QACH,UAAU;QACV,KAAK,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAC1C,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EACrC,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,EACN,KAAK,GACuB,EAAyB,EAAE;IACvD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEhD,OAAO,qBAAqB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE;QAClE,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,IAAI,CAAC;AACf,CAAC,CAAC"}

package/dist/social/types.d.ts

@@ -0,0 +1,75 @@
+import type { AuthAccount } from "../session/types.js";
+export type SocialProviderId = "github" | "google" | "x";
+export type SocialIntent = "login" | "register";
+export type SocialIdentity = {
+    avatarUrl: string | null;
+    email: string;
+    name: string;
+    provider: SocialProviderId;
+    providerId: string;
+    username: string | null;
+};
+export type SocialAuthorizationInput = {
+    codeChallenge: string;
+    state: string;
+};
+export type SocialCallbackInput = {
+    code: string;
+    codeVerifier: string;
+};
+export type SocialProvider = {
+    callbackUrl: string;
+    getAuthorizationUrl(input: SocialAuthorizationInput): string;
+    getIdentity(input: SocialCallbackInput): Promise<SocialIdentity>;
+    id: SocialProviderId;
+};
+export type SocialAccountRecord<TAccount extends AuthAccount = AuthAccount> = {
+    account: TAccount;
+    allowed: boolean;
+};
+export type CreateSocialRecord = {
+    account_id: string;
+    created_at: Date;
+    id: string;
+    provider: SocialProviderId;
+    provider_id: string;
+};
+export type SocialDbAdapter<TAccount extends AuthAccount = AuthAccount> = {
+    createAccount(input: {
+        email: string;
+        name: string;
+    }): Promise<string>;
+    createSocial(record: CreateSocialRecord): Promise<void>;
+    findAccount(account_id: string): Promise<SocialAccountRecord<TAccount> | null>;
+    findEmail(email: string): Promise<SocialAccountRecord<TAccount> | null>;
+    findSocial(input: {
+        provider: SocialProviderId;
+        provider_id: string;
+    }): Promise<SocialAccountRecord<TAccount> | null>;
+};
+export type SocialRegistrationInput<TData> = {
+    data: TData;
+    identity: SocialIdentity;
+};
+export type SocialRegistrationResult = {
+    accountId: string;
+};
+export type SocialRegistrationConfig<TData = undefined> = {
+    createAccount?: (input: SocialRegistrationInput<TData>) => Promise<SocialRegistrationResult>;
+    registerUrl?: string;
+};
+export type SocialConfig<TData = undefined> = {
+    cookieName?: string;
+    errorUrl: string;
+    providers: readonly SocialProvider[];
+    registration?: SocialRegistrationConfig<TData>;
+    successUrl: string;
+};
+export type ResolvedSocialConfig<TData = undefined> = {
+    cookieName: string;
+    errorUrl: string;
+    providers: ReadonlyMap<SocialProviderId, SocialProvider>;
+    registration: SocialRegistrationConfig<TData> | null;
+    successUrl: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/social/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/social/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,GAAG,CAAC;AAEzD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAAC;IAC7D,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,EAAE,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,CAAC,QAAQ,SAAS,WAAW,GAAG,WAAW,IAAI;IAC1E,OAAO,EAAE,QAAQ,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,eAAe,CAAC,QAAQ,SAAS,WAAW,GAAG,WAAW,IAAI;IACtE,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IACxE,UAAU,CAAC,KAAK,EAAE;QACd,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,KAAK,IAAI;IACzC,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,EAAE,cAAc,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,KAAK,GAAG,SAAS,IAAI;IACtD,aAAa,CAAC,EAAE,CACZ,KAAK,EAAE,uBAAuB,CAAC,KAAK,CAAC,KACpC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,YAAY,CAAC,KAAK,GAAG,SAAS,IAAI;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,KAAK,GAAG,SAAS,IAAI;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACzD,YAAY,EAAE,wBAAwB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACrD,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/dist/social/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/social/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/social/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@gauts/auth",
-    "version": "0.6.3",
-    "description": "Framework-agnostic password and server-side session authentication for Node.js.",
+    "version": "0.7.0",
+    "description": "Database-backed password, session, and social authentication for Node.js.",
     "license": "MIT",
     "author": "GVALFER",
     "repository": {
@@ -18,6 +18,7 @@
         "bcrypt",
         "hono",
         "nextjs",
+        "oauth",
         "session"
     ],
     "type": "module",
@@ -47,6 +48,10 @@
         "./next": {
             "types": "./dist/adapters/next/index.d.ts",
             "import": "./dist/adapters/next/index.js"
+        },
+        "./providers": {
+            "types": "./dist/providers/index.d.ts",
+            "import": "./dist/providers/index.js"
         }
     },
     "scripts": {