@geekmidas/auth 0.0.3 → 0.0.5

package/dist/oidc-C0KyYaAK.cjs

@@ -0,0 +1,68 @@
+const require_chunk = require('./chunk-CUT6urMc.cjs');
+const jose = require_chunk.__toESM(require("jose"));
+
+//#region src/oidc.ts
+/**
+* OIDC Verifier with auto-discovery and caching
+*/
+var OidcVerifier = class {
+	discovery = null;
+	jwks = null;
+	discoveryUrl;
+	constructor(config) {
+		this.config = config;
+		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
+	}
+	async getDiscovery() {
+		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
+		const response = await fetch(this.discoveryUrl);
+		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+		this.discovery = await response.json();
+		return this.discovery;
+	}
+	async getJwks() {
+		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
+		const disc = await this.getDiscovery();
+		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
+		return this.jwks;
+	}
+	async verify(token) {
+		const key = await this.getJwks();
+		const { payload } = await jose.jwtVerify(token, key, {
+			issuer: this.config.issuer,
+			audience: this.config.audience
+		});
+		return payload;
+	}
+	async verifyOrNull(token) {
+		try {
+			return await this.verify(token);
+		} catch {
+			return null;
+		}
+	}
+	async fetchUserInfo(token) {
+		try {
+			const disc = await this.getDiscovery();
+			if (!disc.userinfo_endpoint) return null;
+			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
+			if (!response.ok) return null;
+			return await response.json();
+		} catch {
+			return null;
+		}
+	}
+	clearCache() {
+		this.discovery = null;
+		this.jwks = null;
+	}
+};
+
+//#endregion
+Object.defineProperty(exports, 'OidcVerifier', {
+  enumerable: true,
+  get: function () {
+    return OidcVerifier;
+  }
+});
+//# sourceMappingURL=oidc-C0KyYaAK.cjs.map

package/dist/oidc-C0KyYaAK.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-C0KyYaAK.cjs","names":["config: OidcConfig","token: string"],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n  nonce?: string;\n  auth_time?: number;\n  at_hash?: string;\n  c_hash?: string;\n  azp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n  sub: string;\n  name?: string;\n  given_name?: string;\n  family_name?: string;\n  middle_name?: string;\n  nickname?: string;\n  preferred_username?: string;\n  profile?: string;\n  picture?: string;\n  website?: string;\n  email?: string;\n  email_verified?: boolean;\n  gender?: string;\n  birthdate?: string;\n  zoneinfo?: string;\n  locale?: string;\n  phone_number?: string;\n  phone_number_verified?: boolean;\n  address?: {\n    formatted?: string;\n    street_address?: string;\n    locality?: string;\n    region?: string;\n    postal_code?: string;\n    country?: string;\n  };\n  updated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n  issuer: string;\n  authorization_endpoint: string;\n  token_endpoint: string;\n  userinfo_endpoint?: string;\n  jwks_uri: string;\n  scopes_supported?: string[];\n  response_types_supported: string[];\n  claims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n  issuer: string;\n  audience: string | string[];\n  cacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n  TClaims extends OidcClaims = OidcClaims,\n  TUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n  private discovery: OidcDiscovery | null = null;\n  private jwks: jose.JWTVerifyGetKey | null = null;\n  private readonly discoveryUrl: string;\n\n  constructor(private readonly config: OidcConfig) {\n    this.discoveryUrl = config.issuer.endsWith('/')\n      ? `${config.issuer}.well-known/openid-configuration`\n      : `${config.issuer}/.well-known/openid-configuration`;\n  }\n\n  async getDiscovery(): Promise<OidcDiscovery> {\n    if (this.discovery && this.config.cacheDiscovery !== false) {\n      return this.discovery;\n    }\n\n    const response = await fetch(this.discoveryUrl);\n    if (!response.ok) {\n      throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n    }\n\n    this.discovery = (await response.json()) as OidcDiscovery;\n    return this.discovery;\n  }\n\n  private async getJwks(): Promise<jose.JWTVerifyGetKey> {\n    if (this.jwks && this.config.cacheDiscovery !== false) {\n      return this.jwks;\n    }\n\n    const disc = await this.getDiscovery();\n    this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n    return this.jwks;\n  }\n\n  async verify(token: string): Promise<TClaims> {\n    const key = await this.getJwks();\n    const { payload } = await jose.jwtVerify(token, key, {\n      issuer: this.config.issuer,\n      audience: this.config.audience,\n    });\n    return payload as unknown as TClaims;\n  }\n\n  async verifyOrNull(token: string): Promise<TClaims | null> {\n    try {\n      return await this.verify(token);\n    } catch {\n      return null;\n    }\n  }\n\n  async fetchUserInfo(token: string): Promise<TUserInfo | null> {\n    try {\n      const disc = await this.getDiscovery();\n      if (!disc.userinfo_endpoint) {\n        return null;\n      }\n\n      const response = await fetch(disc.userinfo_endpoint, {\n        headers: { Authorization: `Bearer ${token}` },\n      });\n\n      if (!response.ok) {\n        return null;\n      }\n\n      return (await response.json()) as TUserInfo;\n    } catch {\n      return null;\n    }\n  }\n\n  clearCache(): void {\n    this.discovery = null;\n    this.jwks = null;\n  }\n}\n"],"mappings":";;;;;;;AA2EA,IAAa,eAAb,MAGE;CACA,AAAQ,YAAkC;CAC1C,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAoB;EAApB;AAC3B,OAAK,eAAe,OAAO,OAAO,SAAS,IAAI,IAC1C,EAAE,OAAO,OAAO,qCAChB,EAAE,OAAO,OAAO;CACtB;CAED,MAAM,eAAuC;AAC3C,MAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,MACnD,QAAO,KAAK;EAGd,MAAM,WAAW,MAAM,MAAM,KAAK,aAAa;AAC/C,OAAK,SAAS,GACZ,OAAM,IAAI,OAAO,kCAAkC,SAAS,WAAW;AAGzE,OAAK,YAAa,MAAM,SAAS,MAAM;AACvC,SAAO,KAAK;CACb;CAED,MAAc,UAAyC;AACrD,MAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,MAC9C,QAAO,KAAK;EAGd,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,OAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,UAAU;AAC3D,SAAO,KAAK;CACb;CAED,MAAM,OAAOC,OAAiC;EAC5C,MAAM,MAAM,MAAM,KAAK,SAAS;EAChC,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,KAAK;GACnD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACvB,EAAC;AACF,SAAO;CACR;CAED,MAAM,aAAaA,OAAwC;AACzD,MAAI;AACF,UAAO,MAAM,KAAK,OAAO,MAAM;EAChC,QAAO;AACN,UAAO;EACR;CACF;CAED,MAAM,cAAcA,OAA0C;AAC5D,MAAI;GACF,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,QAAK,KAAK,kBACR,QAAO;GAGT,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACnD,SAAS,EAAE,gBAAgB,SAAS,MAAM,EAAG,EAC9C,EAAC;AAEF,QAAK,SAAS,GACZ,QAAO;AAGT,UAAQ,MAAM,SAAS,MAAM;EAC9B,QAAO;AACN,UAAO;EACR;CACF;CAED,aAAmB;AACjB,OAAK,YAAY;AACjB,OAAK,OAAO;CACb;AACF"}

package/dist/oidc-CKOGLxjV.d.mts

@@ -0,0 +1,86 @@
+import { JwtClaims } from "./jwt-DH8CJ2xC.mjs";
+
+//#region src/oidc.d.ts
+
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//#endregion
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
+//# sourceMappingURL=oidc-CKOGLxjV.d.mts.map

package/dist/oidc-DDLIB5gb.d.cts

@@ -0,0 +1,86 @@
+import { JwtClaims } from "./jwt-DF9kFbmh.cjs";
+
+//#region src/oidc.d.ts
+
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//#endregion
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
+//# sourceMappingURL=oidc-DDLIB5gb.d.cts.map

package/dist/oidc-KA30gMlx.mjs

@@ -0,0 +1,62 @@
+import * as jose from "jose";
+
+//#region src/oidc.ts
+/**
+* OIDC Verifier with auto-discovery and caching
+*/
+var OidcVerifier = class {
+	discovery = null;
+	jwks = null;
+	discoveryUrl;
+	constructor(config) {
+		this.config = config;
+		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
+	}
+	async getDiscovery() {
+		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
+		const response = await fetch(this.discoveryUrl);
+		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+		this.discovery = await response.json();
+		return this.discovery;
+	}
+	async getJwks() {
+		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
+		const disc = await this.getDiscovery();
+		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
+		return this.jwks;
+	}
+	async verify(token) {
+		const key = await this.getJwks();
+		const { payload } = await jose.jwtVerify(token, key, {
+			issuer: this.config.issuer,
+			audience: this.config.audience
+		});
+		return payload;
+	}
+	async verifyOrNull(token) {
+		try {
+			return await this.verify(token);
+		} catch {
+			return null;
+		}
+	}
+	async fetchUserInfo(token) {
+		try {
+			const disc = await this.getDiscovery();
+			if (!disc.userinfo_endpoint) return null;
+			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
+			if (!response.ok) return null;
+			return await response.json();
+		} catch {
+			return null;
+		}
+	}
+	clearCache() {
+		this.discovery = null;
+		this.jwks = null;
+	}
+};
+
+//#endregion
+export { OidcVerifier };
+//# sourceMappingURL=oidc-KA30gMlx.mjs.map

package/dist/oidc-KA30gMlx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-KA30gMlx.mjs","names":["config: OidcConfig","token: string"],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n  nonce?: string;\n  auth_time?: number;\n  at_hash?: string;\n  c_hash?: string;\n  azp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n  sub: string;\n  name?: string;\n  given_name?: string;\n  family_name?: string;\n  middle_name?: string;\n  nickname?: string;\n  preferred_username?: string;\n  profile?: string;\n  picture?: string;\n  website?: string;\n  email?: string;\n  email_verified?: boolean;\n  gender?: string;\n  birthdate?: string;\n  zoneinfo?: string;\n  locale?: string;\n  phone_number?: string;\n  phone_number_verified?: boolean;\n  address?: {\n    formatted?: string;\n    street_address?: string;\n    locality?: string;\n    region?: string;\n    postal_code?: string;\n    country?: string;\n  };\n  updated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n  issuer: string;\n  authorization_endpoint: string;\n  token_endpoint: string;\n  userinfo_endpoint?: string;\n  jwks_uri: string;\n  scopes_supported?: string[];\n  response_types_supported: string[];\n  claims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n  issuer: string;\n  audience: string | string[];\n  cacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n  TClaims extends OidcClaims = OidcClaims,\n  TUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n  private discovery: OidcDiscovery | null = null;\n  private jwks: jose.JWTVerifyGetKey | null = null;\n  private readonly discoveryUrl: string;\n\n  constructor(private readonly config: OidcConfig) {\n    this.discoveryUrl = config.issuer.endsWith('/')\n      ? `${config.issuer}.well-known/openid-configuration`\n      : `${config.issuer}/.well-known/openid-configuration`;\n  }\n\n  async getDiscovery(): Promise<OidcDiscovery> {\n    if (this.discovery && this.config.cacheDiscovery !== false) {\n      return this.discovery;\n    }\n\n    const response = await fetch(this.discoveryUrl);\n    if (!response.ok) {\n      throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n    }\n\n    this.discovery = (await response.json()) as OidcDiscovery;\n    return this.discovery;\n  }\n\n  private async getJwks(): Promise<jose.JWTVerifyGetKey> {\n    if (this.jwks && this.config.cacheDiscovery !== false) {\n      return this.jwks;\n    }\n\n    const disc = await this.getDiscovery();\n    this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n    return this.jwks;\n  }\n\n  async verify(token: string): Promise<TClaims> {\n    const key = await this.getJwks();\n    const { payload } = await jose.jwtVerify(token, key, {\n      issuer: this.config.issuer,\n      audience: this.config.audience,\n    });\n    return payload as unknown as TClaims;\n  }\n\n  async verifyOrNull(token: string): Promise<TClaims | null> {\n    try {\n      return await this.verify(token);\n    } catch {\n      return null;\n    }\n  }\n\n  async fetchUserInfo(token: string): Promise<TUserInfo | null> {\n    try {\n      const disc = await this.getDiscovery();\n      if (!disc.userinfo_endpoint) {\n        return null;\n      }\n\n      const response = await fetch(disc.userinfo_endpoint, {\n        headers: { Authorization: `Bearer ${token}` },\n      });\n\n      if (!response.ok) {\n        return null;\n      }\n\n      return (await response.json()) as TUserInfo;\n    } catch {\n      return null;\n    }\n  }\n\n  clearCache(): void {\n    this.discovery = null;\n    this.jwks = null;\n  }\n}\n"],"mappings":";;;;;;AA2EA,IAAa,eAAb,MAGE;CACA,AAAQ,YAAkC;CAC1C,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAoB;EAApB;AAC3B,OAAK,eAAe,OAAO,OAAO,SAAS,IAAI,IAC1C,EAAE,OAAO,OAAO,qCAChB,EAAE,OAAO,OAAO;CACtB;CAED,MAAM,eAAuC;AAC3C,MAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,MACnD,QAAO,KAAK;EAGd,MAAM,WAAW,MAAM,MAAM,KAAK,aAAa;AAC/C,OAAK,SAAS,GACZ,OAAM,IAAI,OAAO,kCAAkC,SAAS,WAAW;AAGzE,OAAK,YAAa,MAAM,SAAS,MAAM;AACvC,SAAO,KAAK;CACb;CAED,MAAc,UAAyC;AACrD,MAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,MAC9C,QAAO,KAAK;EAGd,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,OAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,UAAU;AAC3D,SAAO,KAAK;CACb;CAED,MAAM,OAAOC,OAAiC;EAC5C,MAAM,MAAM,MAAM,KAAK,SAAS;EAChC,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,KAAK;GACnD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACvB,EAAC;AACF,SAAO;CACR;CAED,MAAM,aAAaA,OAAwC;AACzD,MAAI;AACF,UAAO,MAAM,KAAK,OAAO,MAAM;EAChC,QAAO;AACN,UAAO;EACR;CACF;CAED,MAAM,cAAcA,OAA0C;AAC5D,MAAI;GACF,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,QAAK,KAAK,kBACR,QAAO;GAGT,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACnD,SAAS,EAAE,gBAAgB,SAAS,MAAM,EAAG,EAC9C,EAAC;AAEF,QAAK,SAAS,GACZ,QAAO;AAGT,UAAQ,MAAM,SAAS,MAAM;EAC9B,QAAO;AACN,UAAO;EACR;CACF;CAED,aAAmB;AACjB,OAAK,YAAY;AACjB,OAAK,OAAO;CACb;AACF"}

package/dist/oidc.cjs

@@ -0,0 +1,3 @@
+const require_oidc = require('./oidc-C0KyYaAK.cjs');
+
+exports.OidcVerifier = require_oidc.OidcVerifier;

package/dist/oidc.d.cts

@@ -0,0 +1,3 @@
+import { TokenExtractionOptions } from "./jwt-DF9kFbmh.cjs";
+import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-DDLIB5gb.cjs";
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };

package/dist/oidc.d.mts

@@ -0,0 +1,3 @@
+import { TokenExtractionOptions } from "./jwt-DH8CJ2xC.mjs";
+import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-CKOGLxjV.mjs";
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };

package/dist/oidc.mjs

@@ -0,0 +1,3 @@
+import { OidcVerifier } from "./oidc-KA30gMlx.mjs";
+
+export { OidcVerifier };

package/dist/server.cjs

@@ -1,5 +1,5 @@
 const require_cacheTokenStorage = require('./cacheTokenStorage-CvptztkW.cjs');
-const require_tokenManager = require('./tokenManager-B60gFnEF.cjs');
+const require_tokenManager = require('./tokenManager-EPmwgai2.cjs');
 
 exports.CacheTokenStorage = require_cacheTokenStorage.CacheTokenStorage;
 exports.TokenManager = require_tokenManager.TokenManager;

package/dist/server.d.cts

@@ -1,3 +1,3 @@
 import { CacheTokenStorage } from "./cacheTokenStorage-yNUpDD8W.cjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-mpzJKLvX.cjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-H6-lWEah.cjs";
 export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/dist/server.d.mts

@@ -1,3 +1,3 @@
-import { CacheTokenStorage } from "./cacheTokenStorage-BlpcZwef.mjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CCcFk2Py.mjs";
+import { CacheTokenStorage } from "./cacheTokenStorage-BzBRJfd-.mjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager--Q93eNYr.mjs";
 export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/dist/{tokenManager-CCcFk2Py.d.mts → tokenManager--Q93eNYr.d.mts}

@@ -35,4 +35,5 @@ declare class TokenManager {
   getTokenExpiration(token: string): Date | null;
 }
 //#endregion
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+//# sourceMappingURL=tokenManager--Q93eNYr.d.mts.map

package/dist/tokenManager-BVXxfHRa.mjs

@@ -60,4 +60,5 @@ var TokenManager = class {
 };
 
 //#endregion
-export { TokenManager };
+export { TokenManager };
+//# sourceMappingURL=tokenManager-BVXxfHRa.mjs.map

package/dist/tokenManager-BVXxfHRa.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager-BVXxfHRa.mjs","names":["options: TokenManagerOptions","payload: TokenPayload","token: string","refreshToken: string"],"sources":["../src/tokenManager.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\nimport type ms from 'ms';\n\nexport interface TokenPayload {\n  userId: string;\n  email?: string;\n  [key: string]: any;\n}\n\nexport interface TokenPair {\n  accessToken: string;\n  refreshToken: string;\n}\n\nexport interface TokenManagerOptions {\n  accessTokenSecret: string;\n  refreshTokenSecret: string;\n  accessTokenExpiresIn?: ms.StringValue;\n  refreshTokenExpiresIn?: ms.StringValue;\n}\n\nexport interface DecodedToken extends TokenPayload {\n  iat: number;\n  exp: number;\n}\n\nexport class TokenManager {\n  private accessTokenSecret: string;\n  private refreshTokenSecret: string;\n  private accessTokenExpiresIn: ms.StringValue;\n  private refreshTokenExpiresIn: ms.StringValue;\n\n  constructor(options: TokenManagerOptions) {\n    this.accessTokenSecret = options.accessTokenSecret;\n    this.refreshTokenSecret = options.refreshTokenSecret;\n    this.accessTokenExpiresIn = options.accessTokenExpiresIn || '15m';\n    this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || '7d';\n  }\n\n  generateTokenPair(payload: TokenPayload): TokenPair {\n    const accessToken = jwt.sign(payload, this.accessTokenSecret, {\n      expiresIn: this.accessTokenExpiresIn,\n    });\n\n    const refreshToken = jwt.sign(payload, this.refreshTokenSecret, {\n      expiresIn: this.refreshTokenExpiresIn,\n    });\n\n    return {\n      accessToken,\n      refreshToken,\n    };\n  }\n\n  verifyAccessToken(token: string): DecodedToken {\n    try {\n      return jwt.verify(token, this.accessTokenSecret) as DecodedToken;\n    } catch (error) {\n      throw new Error(`Invalid access token: ${error.message}`);\n    }\n  }\n\n  verifyRefreshToken(token: string): DecodedToken {\n    try {\n      return jwt.verify(token, this.refreshTokenSecret) as DecodedToken;\n    } catch (error) {\n      throw new Error(`Invalid refresh token: ${error.message}`);\n    }\n  }\n\n  refreshAccessToken(refreshToken: string): string {\n    const decoded = this.verifyRefreshToken(refreshToken);\n\n    // Remove JWT specific fields before creating new token\n    const { iat, exp, ...payload } = decoded;\n\n    return jwt.sign(payload, this.accessTokenSecret, {\n      expiresIn: this.accessTokenExpiresIn,\n    });\n  }\n\n  decodeToken(token: string): DecodedToken | null {\n    try {\n      return jwt.decode(token) as DecodedToken;\n    } catch {\n      return null;\n    }\n  }\n\n  isTokenExpired(token: string): boolean {\n    const decoded = this.decodeToken(token);\n    if (!decoded) return true;\n\n    const now = Math.floor(Date.now() / 1000);\n    return decoded.exp < now;\n  }\n\n  getTokenExpiration(token: string): Date | null {\n    const decoded = this.decodeToken(token);\n    if (!decoded) return null;\n\n    return new Date(decoded.exp * 1000);\n  }\n}\n"],"mappings":";;;AA0BA,IAAa,eAAb,MAA0B;CACxB,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAYA,SAA8B;AACxC,OAAK,oBAAoB,QAAQ;AACjC,OAAK,qBAAqB,QAAQ;AAClC,OAAK,uBAAuB,QAAQ,wBAAwB;AAC5D,OAAK,wBAAwB,QAAQ,yBAAyB;CAC/D;CAED,kBAAkBC,SAAkC;EAClD,MAAM,cAAc,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAC5D,WAAW,KAAK,qBACjB,EAAC;EAEF,MAAM,eAAe,IAAI,KAAK,SAAS,KAAK,oBAAoB,EAC9D,WAAW,KAAK,sBACjB,EAAC;AAEF,SAAO;GACL;GACA;EACD;CACF;CAED,kBAAkBC,OAA6B;AAC7C,MAAI;AACF,UAAO,IAAI,OAAO,OAAO,KAAK,kBAAkB;EACjD,SAAQ,OAAO;AACd,SAAM,IAAI,OAAO,wBAAwB,MAAM,QAAQ;EACxD;CACF;CAED,mBAAmBA,OAA6B;AAC9C,MAAI;AACF,UAAO,IAAI,OAAO,OAAO,KAAK,mBAAmB;EAClD,SAAQ,OAAO;AACd,SAAM,IAAI,OAAO,yBAAyB,MAAM,QAAQ;EACzD;CACF;CAED,mBAAmBC,cAA8B;EAC/C,MAAM,UAAU,KAAK,mBAAmB,aAAa;EAGrD,MAAM,EAAE,KAAK,IAAK,GAAG,SAAS,GAAG;AAEjC,SAAO,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAC/C,WAAW,KAAK,qBACjB,EAAC;CACH;CAED,YAAYD,OAAoC;AAC9C,MAAI;AACF,UAAO,IAAI,OAAO,MAAM;EACzB,QAAO;AACN,UAAO;EACR;CACF;CAED,eAAeA,OAAwB;EACrC,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;EAErB,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,SAAO,QAAQ,MAAM;CACtB;CAED,mBAAmBA,OAA4B;EAC7C,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;AAErB,SAAO,IAAI,KAAK,QAAQ,MAAM;CAC/B;AACF"}

package/dist/{tokenManager-B60gFnEF.cjs → tokenManager-EPmwgai2.cjs}

@@ -1,4 +1,4 @@
-const require_chunk = require('./chunk-DWy1uDak.cjs');
+const require_chunk = require('./chunk-CUT6urMc.cjs');
 const jsonwebtoken = require_chunk.__toESM(require("jsonwebtoken"));
 
 //#region src/tokenManager.ts
@@ -66,4 +66,5 @@ Object.defineProperty(exports, 'TokenManager', {
   get: function () {
     return TokenManager;
   }
-});
+});
+//# sourceMappingURL=tokenManager-EPmwgai2.cjs.map

package/dist/tokenManager-EPmwgai2.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager-EPmwgai2.cjs","names":["options: TokenManagerOptions","payload: TokenPayload","token: string","refreshToken: string"],"sources":["../src/tokenManager.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\nimport type ms from 'ms';\n\nexport interface TokenPayload {\n  userId: string;\n  email?: string;\n  [key: string]: any;\n}\n\nexport interface TokenPair {\n  accessToken: string;\n  refreshToken: string;\n}\n\nexport interface TokenManagerOptions {\n  accessTokenSecret: string;\n  refreshTokenSecret: string;\n  accessTokenExpiresIn?: ms.StringValue;\n  refreshTokenExpiresIn?: ms.StringValue;\n}\n\nexport interface DecodedToken extends TokenPayload {\n  iat: number;\n  exp: number;\n}\n\nexport class TokenManager {\n  private accessTokenSecret: string;\n  private refreshTokenSecret: string;\n  private accessTokenExpiresIn: ms.StringValue;\n  private refreshTokenExpiresIn: ms.StringValue;\n\n  constructor(options: TokenManagerOptions) {\n    this.accessTokenSecret = options.accessTokenSecret;\n    this.refreshTokenSecret = options.refreshTokenSecret;\n    this.accessTokenExpiresIn = options.accessTokenExpiresIn || '15m';\n    this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || '7d';\n  }\n\n  generateTokenPair(payload: TokenPayload): TokenPair {\n    const accessToken = jwt.sign(payload, this.accessTokenSecret, {\n      expiresIn: this.accessTokenExpiresIn,\n    });\n\n    const refreshToken = jwt.sign(payload, this.refreshTokenSecret, {\n      expiresIn: this.refreshTokenExpiresIn,\n    });\n\n    return {\n      accessToken,\n      refreshToken,\n    };\n  }\n\n  verifyAccessToken(token: string): DecodedToken {\n    try {\n      return jwt.verify(token, this.accessTokenSecret) as DecodedToken;\n    } catch (error) {\n      throw new Error(`Invalid access token: ${error.message}`);\n    }\n  }\n\n  verifyRefreshToken(token: string): DecodedToken {\n    try {\n      return jwt.verify(token, this.refreshTokenSecret) as DecodedToken;\n    } catch (error) {\n      throw new Error(`Invalid refresh token: ${error.message}`);\n    }\n  }\n\n  refreshAccessToken(refreshToken: string): string {\n    const decoded = this.verifyRefreshToken(refreshToken);\n\n    // Remove JWT specific fields before creating new token\n    const { iat, exp, ...payload } = decoded;\n\n    return jwt.sign(payload, this.accessTokenSecret, {\n      expiresIn: this.accessTokenExpiresIn,\n    });\n  }\n\n  decodeToken(token: string): DecodedToken | null {\n    try {\n      return jwt.decode(token) as DecodedToken;\n    } catch {\n      return null;\n    }\n  }\n\n  isTokenExpired(token: string): boolean {\n    const decoded = this.decodeToken(token);\n    if (!decoded) return true;\n\n    const now = Math.floor(Date.now() / 1000);\n    return decoded.exp < now;\n  }\n\n  getTokenExpiration(token: string): Date | null {\n    const decoded = this.decodeToken(token);\n    if (!decoded) return null;\n\n    return new Date(decoded.exp * 1000);\n  }\n}\n"],"mappings":";;;;AA0BA,IAAa,eAAb,MAA0B;CACxB,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAYA,SAA8B;AACxC,OAAK,oBAAoB,QAAQ;AACjC,OAAK,qBAAqB,QAAQ;AAClC,OAAK,uBAAuB,QAAQ,wBAAwB;AAC5D,OAAK,wBAAwB,QAAQ,yBAAyB;CAC/D;CAED,kBAAkBC,SAAkC;EAClD,MAAM,cAAc,qBAAI,KAAK,SAAS,KAAK,mBAAmB,EAC5D,WAAW,KAAK,qBACjB,EAAC;EAEF,MAAM,eAAe,qBAAI,KAAK,SAAS,KAAK,oBAAoB,EAC9D,WAAW,KAAK,sBACjB,EAAC;AAEF,SAAO;GACL;GACA;EACD;CACF;CAED,kBAAkBC,OAA6B;AAC7C,MAAI;AACF,UAAO,qBAAI,OAAO,OAAO,KAAK,kBAAkB;EACjD,SAAQ,OAAO;AACd,SAAM,IAAI,OAAO,wBAAwB,MAAM,QAAQ;EACxD;CACF;CAED,mBAAmBA,OAA6B;AAC9C,MAAI;AACF,UAAO,qBAAI,OAAO,OAAO,KAAK,mBAAmB;EAClD,SAAQ,OAAO;AACd,SAAM,IAAI,OAAO,yBAAyB,MAAM,QAAQ;EACzD;CACF;CAED,mBAAmBC,cAA8B;EAC/C,MAAM,UAAU,KAAK,mBAAmB,aAAa;EAGrD,MAAM,EAAE,KAAK,IAAK,GAAG,SAAS,GAAG;AAEjC,SAAO,qBAAI,KAAK,SAAS,KAAK,mBAAmB,EAC/C,WAAW,KAAK,qBACjB,EAAC;CACH;CAED,YAAYD,OAAoC;AAC9C,MAAI;AACF,UAAO,qBAAI,OAAO,MAAM;EACzB,QAAO;AACN,UAAO;EACR;CACF;CAED,eAAeA,OAAwB;EACrC,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;EAErB,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,SAAO,QAAQ,MAAM;CACtB;CAED,mBAAmBA,OAA4B;EAC7C,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;AAErB,SAAO,IAAI,KAAK,QAAQ,MAAM;CAC/B;AACF"}

package/dist/{tokenManager-mpzJKLvX.d.cts → tokenManager-H6-lWEah.d.cts}

@@ -35,4 +35,5 @@ declare class TokenManager {
   getTokenExpiration(token: string): Date | null;
 }
 //#endregion
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+//# sourceMappingURL=tokenManager-H6-lWEah.d.cts.map

package/dist/tokenManager.cjs

@@ -1,3 +1,3 @@
-const require_tokenManager = require('./tokenManager-B60gFnEF.cjs');
+const require_tokenManager = require('./tokenManager-EPmwgai2.cjs');
 
 exports.TokenManager = require_tokenManager.TokenManager;

package/dist/tokenManager.d.cts

@@ -1,2 +1,2 @@
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-mpzJKLvX.cjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-H6-lWEah.cjs";
 export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/dist/tokenManager.d.mts

@@ -1,2 +1,2 @@
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CCcFk2Py.mjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager--Q93eNYr.mjs";
 export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/auth",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "type": "module",
   "exports": {
     ".": {
@@ -17,21 +17,68 @@
       "types": "./dist/client.d.ts",
       "import": "./dist/client.mjs",
       "require": "./dist/client.cjs"
+    },
+    "./jwt": {
+      "types": "./dist/jwt.d.ts",
+      "import": "./dist/jwt.mjs",
+      "require": "./dist/jwt.cjs"
+    },
+    "./hono/jwt": {
+      "types": "./dist/hono/jwt.d.ts",
+      "import": "./dist/hono/jwt.mjs",
+      "require": "./dist/hono/jwt.cjs"
+    },
+    "./lambda/jwt": {
+      "types": "./dist/lambda/jwt.d.ts",
+      "import": "./dist/lambda/jwt.mjs",
+      "require": "./dist/lambda/jwt.cjs"
+    },
+    "./oidc": {
+      "types": "./dist/oidc.d.ts",
+      "import": "./dist/oidc.mjs",
+      "require": "./dist/oidc.cjs"
+    },
+    "./hono/oidc": {
+      "types": "./dist/hono/oidc.d.ts",
+      "import": "./dist/hono/oidc.mjs",
+      "require": "./dist/hono/oidc.cjs"
+    },
+    "./lambda/oidc": {
+      "types": "./dist/lambda/oidc.d.ts",
+      "import": "./dist/lambda/oidc.mjs",
+      "require": "./dist/lambda/oidc.cjs"
     }
   },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/geekmidas/toolbox"
+  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
     "access": "public"
   },
   "dependencies": {
     "@openauthjs/openauth": "~0.4.3",
+    "jose": "~5.10.0",
     "jsonwebtoken": "^9.0.2",
     "@types/ms": "~2.1.0",
-    "@geekmidas/cache": "0.0.6"
+    "@geekmidas/cache": "0.0.7"
   },
   "devDependencies": {
     "@types/jsonwebtoken": "^9.0.5"
   },
+  "peerDependencies": {
+    "@types/aws-lambda": ">=8.10.92",
+    "hono": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@types/aws-lambda": {
+      "optional": true
+    },
+    "hono": {
+      "optional": true
+    }
+  },
   "scripts": {
     "play": "tsx src/playground.ts"
   }