@geekmidas/auth 0.0.4 → 0.0.5

package/dist/{cacheTokenStorage-BlpcZwef.d.mts → cacheTokenStorage-BzBRJfd-.d.mts}

@@ -67,4 +67,5 @@ declare class CacheTokenStorage implements TokenStorage {
   clearTokens(): Promise<void>;
 }
 //#endregion
-export { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage };
+export { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage };
+//# sourceMappingURL=cacheTokenStorage-BzBRJfd-.d.mts.map

package/dist/cacheTokenStorage-Ca05vf3T.mjs

@@ -28,4 +28,5 @@ var CacheTokenStorage = class {
 };
 
 //#endregion
-export { CacheTokenStorage };
+export { CacheTokenStorage };
+//# sourceMappingURL=cacheTokenStorage-Ca05vf3T.mjs.map

package/dist/cacheTokenStorage-Ca05vf3T.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cacheTokenStorage-Ca05vf3T.mjs","names":["cache: Cache<string>","accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number"],"sources":["../src/cacheTokenStorage.ts"],"sourcesContent":["import type { Cache } from '@geekmidas/cache';\nimport type { TokenStorage } from './client.js';\n\nexport class CacheTokenStorage implements TokenStorage {\n  private cache: Cache<string>;\n  private accessTokenKey: string;\n  private refreshTokenKey: string;\n\n  constructor(\n    cache: Cache<string>,\n    accessTokenKey: string = 'access_token',\n    refreshTokenKey: string = 'refresh_token',\n  ) {\n    this.cache = cache;\n    this.accessTokenKey = accessTokenKey;\n    this.refreshTokenKey = refreshTokenKey;\n  }\n\n  async getAccessToken(): Promise<string | null> {\n    const token = await this.cache.get(this.accessTokenKey);\n    return token || null;\n  }\n\n  async setAccessToken(token: string, ttl?: number): Promise<void> {\n    await this.cache.set(this.accessTokenKey, token, ttl);\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    const token = await this.cache.get(this.refreshTokenKey);\n    return token || null;\n  }\n\n  async setRefreshToken(token: string, ttl?: number): Promise<void> {\n    await this.cache.set(this.refreshTokenKey, token, ttl);\n  }\n\n  async clearTokens(): Promise<void> {\n    await Promise.all([\n      this.cache.delete(this.accessTokenKey),\n      this.cache.delete(this.refreshTokenKey),\n    ]);\n  }\n}\n"],"mappings":";AAGA,IAAa,oBAAb,MAAuD;CACrD,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YACEA,OACAC,iBAAyB,gBACzBC,kBAA0B,iBAC1B;AACA,OAAK,QAAQ;AACb,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACxB;CAED,MAAM,iBAAyC;EAC7C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAI,KAAK,eAAe;AACvD,SAAO,SAAS;CACjB;CAED,MAAM,eAAeC,OAAeC,KAA6B;AAC/D,QAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB,OAAO,IAAI;CACtD;CAED,MAAM,kBAA0C;EAC9C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB;AACxD,SAAO,SAAS;CACjB;CAED,MAAM,gBAAgBD,OAAeC,KAA6B;AAChE,QAAM,KAAK,MAAM,IAAI,KAAK,iBAAiB,OAAO,IAAI;CACvD;CAED,MAAM,cAA6B;AACjC,QAAM,QAAQ,IAAI,CAChB,KAAK,MAAM,OAAO,KAAK,eAAe,EACtC,KAAK,MAAM,OAAO,KAAK,gBAAgB,AACxC,EAAC;CACH;AACF"}

package/dist/cacheTokenStorage-CvptztkW.cjs

@@ -34,4 +34,5 @@ Object.defineProperty(exports, 'CacheTokenStorage', {
   get: function () {
     return CacheTokenStorage;
   }
-});
+});
+//# sourceMappingURL=cacheTokenStorage-CvptztkW.cjs.map

package/dist/cacheTokenStorage-CvptztkW.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cacheTokenStorage-CvptztkW.cjs","names":["cache: Cache<string>","accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number"],"sources":["../src/cacheTokenStorage.ts"],"sourcesContent":["import type { Cache } from '@geekmidas/cache';\nimport type { TokenStorage } from './client.js';\n\nexport class CacheTokenStorage implements TokenStorage {\n  private cache: Cache<string>;\n  private accessTokenKey: string;\n  private refreshTokenKey: string;\n\n  constructor(\n    cache: Cache<string>,\n    accessTokenKey: string = 'access_token',\n    refreshTokenKey: string = 'refresh_token',\n  ) {\n    this.cache = cache;\n    this.accessTokenKey = accessTokenKey;\n    this.refreshTokenKey = refreshTokenKey;\n  }\n\n  async getAccessToken(): Promise<string | null> {\n    const token = await this.cache.get(this.accessTokenKey);\n    return token || null;\n  }\n\n  async setAccessToken(token: string, ttl?: number): Promise<void> {\n    await this.cache.set(this.accessTokenKey, token, ttl);\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    const token = await this.cache.get(this.refreshTokenKey);\n    return token || null;\n  }\n\n  async setRefreshToken(token: string, ttl?: number): Promise<void> {\n    await this.cache.set(this.refreshTokenKey, token, ttl);\n  }\n\n  async clearTokens(): Promise<void> {\n    await Promise.all([\n      this.cache.delete(this.accessTokenKey),\n      this.cache.delete(this.refreshTokenKey),\n    ]);\n  }\n}\n"],"mappings":";;AAGA,IAAa,oBAAb,MAAuD;CACrD,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YACEA,OACAC,iBAAyB,gBACzBC,kBAA0B,iBAC1B;AACA,OAAK,QAAQ;AACb,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACxB;CAED,MAAM,iBAAyC;EAC7C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAI,KAAK,eAAe;AACvD,SAAO,SAAS;CACjB;CAED,MAAM,eAAeC,OAAeC,KAA6B;AAC/D,QAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB,OAAO,IAAI;CACtD;CAED,MAAM,kBAA0C;EAC9C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB;AACxD,SAAO,SAAS;CACjB;CAED,MAAM,gBAAgBD,OAAeC,KAA6B;AAChE,QAAM,KAAK,MAAM,IAAI,KAAK,iBAAiB,OAAO,IAAI;CACvD;CAED,MAAM,cAA6B;AACjC,QAAM,QAAQ,IAAI,CAChB,KAAK,MAAM,OAAO,KAAK,eAAe,EACtC,KAAK,MAAM,OAAO,KAAK,gBAAgB,AACxC,EAAC;CACH;AACF"}

package/dist/cacheTokenStorage-yNUpDD8W.d.cts

@@ -67,4 +67,5 @@ declare class CacheTokenStorage implements TokenStorage {
   clearTokens(): Promise<void>;
 }
 //#endregion
-export { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage };
+export { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage };
+//# sourceMappingURL=cacheTokenStorage-yNUpDD8W.d.cts.map

package/dist/cacheTokenStorage.d.mts

@@ -1,2 +1,2 @@
-import { CacheTokenStorage } from "./cacheTokenStorage-BlpcZwef.mjs";
+import { CacheTokenStorage } from "./cacheTokenStorage-BzBRJfd-.mjs";
 export { CacheTokenStorage };

package/dist/{chunk-DWy1uDak.cjs → chunk-CUT6urMc.cjs}

@@ -5,9 +5,6 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function() {
-	return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -25,12 +22,6 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 //#endregion
 
-Object.defineProperty(exports, '__commonJS', {
-  enumerable: true,
-  get: function () {
-    return __commonJS;
-  }
-});
 Object.defineProperty(exports, '__toESM', {
   enumerable: true,
   get: function () {

package/dist/client-DaiUm0UZ.cjs

@@ -152,4 +152,5 @@ Object.defineProperty(exports, 'TokenClient', {
   get: function () {
     return TokenClient;
   }
-});
+});
+//# sourceMappingURL=client-DaiUm0UZ.cjs.map

package/dist/client-DaiUm0UZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-DaiUm0UZ.cjs","names":["accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number","options: TokenClientOptions","accessToken: string","refreshToken?: string","accessTtl?: number","refreshTtl?: number"],"sources":["../src/client.ts"],"sourcesContent":["export interface TokenStorage {\n  getAccessToken(): Promise<string | null> | string | null;\n  setAccessToken(token: string, ttl?: number): Promise<void> | void;\n  getRefreshToken(): Promise<string | null> | string | null;\n  setRefreshToken(token: string, ttl?: number): Promise<void> | void;\n  clearTokens(): Promise<void> | void;\n}\n\nexport class LocalStorageTokenStorage implements TokenStorage {\n  private accessTokenKey: string;\n  private refreshTokenKey: string;\n\n  constructor(\n    accessTokenKey: string = 'access_token',\n    refreshTokenKey: string = 'refresh_token',\n  ) {\n    this.accessTokenKey = accessTokenKey;\n    this.refreshTokenKey = refreshTokenKey;\n  }\n\n  getAccessToken(): string | null {\n    if (typeof window === 'undefined') return null;\n    return localStorage.getItem(this.accessTokenKey);\n  }\n\n  setAccessToken(token: string, ttl?: number): void {\n    if (typeof window === 'undefined') return;\n    localStorage.setItem(this.accessTokenKey, token);\n  }\n\n  getRefreshToken(): string | null {\n    if (typeof window === 'undefined') return null;\n    return localStorage.getItem(this.refreshTokenKey);\n  }\n\n  setRefreshToken(token: string, ttl?: number): void {\n    if (typeof window === 'undefined') return;\n    localStorage.setItem(this.refreshTokenKey, token);\n  }\n\n  clearTokens(): void {\n    if (typeof window === 'undefined') return;\n    localStorage.removeItem(this.accessTokenKey);\n    localStorage.removeItem(this.refreshTokenKey);\n  }\n}\n\nexport class MemoryTokenStorage implements TokenStorage {\n  private accessToken: string | null = null;\n  private refreshToken: string | null = null;\n\n  getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  setAccessToken(token: string, ttl?: number): void {\n    this.accessToken = token;\n  }\n\n  getRefreshToken(): string | null {\n    return this.refreshToken;\n  }\n\n  setRefreshToken(token: string, ttl?: number): void {\n    this.refreshToken = token;\n  }\n\n  clearTokens(): void {\n    this.accessToken = null;\n    this.refreshToken = null;\n  }\n}\n\nexport interface TokenClientOptions {\n  storage?: TokenStorage;\n  refreshEndpoint?: string;\n  onTokenRefresh?: (tokens: {\n    accessToken: string;\n    refreshToken?: string;\n  }) => void;\n  onTokenExpired?: () => void;\n}\n\nexport class TokenClient {\n  private storage: TokenStorage;\n  private refreshEndpoint?: string;\n  private onTokenRefresh?: (tokens: {\n    accessToken: string;\n    refreshToken?: string;\n  }) => void;\n  private onTokenExpired?: () => void;\n\n  constructor(options: TokenClientOptions = {}) {\n    this.storage = options.storage || new LocalStorageTokenStorage();\n    this.refreshEndpoint = options.refreshEndpoint;\n    this.onTokenRefresh = options.onTokenRefresh;\n    this.onTokenExpired = options.onTokenExpired;\n  }\n\n  async getAccessToken(): Promise<string | null> {\n    return await this.storage.getAccessToken();\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    return await this.storage.getRefreshToken();\n  }\n\n  async setTokens(\n    accessToken: string,\n    refreshToken?: string,\n    accessTtl?: number,\n    refreshTtl?: number,\n  ): Promise<void> {\n    await this.storage.setAccessToken(accessToken, accessTtl);\n    if (refreshToken) {\n      await this.storage.setRefreshToken(refreshToken, refreshTtl);\n    }\n  }\n\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens();\n  }\n\n  isTokenExpired(token: string): boolean {\n    try {\n      const payload = JSON.parse(atob(token.split('.')[1]));\n      const now = Math.floor(Date.now() / 1000);\n      return payload.exp < now;\n    } catch {\n      return true;\n    }\n  }\n\n  getTokenExpiration(token: string): Date | null {\n    try {\n      const payload = JSON.parse(atob(token.split('.')[1]));\n      return new Date(payload.exp * 1000);\n    } catch {\n      return null;\n    }\n  }\n\n  async refreshTokens(): Promise<boolean> {\n    const refreshToken = await this.getRefreshToken();\n\n    if (!refreshToken || !this.refreshEndpoint) {\n      return false;\n    }\n\n    try {\n      const response = await fetch(this.refreshEndpoint, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({ refreshToken }),\n      });\n\n      if (!response.ok) {\n        throw new Error('Failed to refresh token');\n      }\n\n      const data = await response.json();\n      const { accessToken, refreshToken: newRefreshToken } = data;\n\n      await this.setTokens(accessToken, newRefreshToken);\n\n      if (this.onTokenRefresh) {\n        this.onTokenRefresh({ accessToken, refreshToken: newRefreshToken });\n      }\n\n      return true;\n    } catch (error) {\n      await this.clearTokens();\n      if (this.onTokenExpired) {\n        this.onTokenExpired();\n      }\n      return false;\n    }\n  }\n\n  async getValidAccessToken(): Promise<string | null> {\n    const accessToken = await this.getAccessToken();\n\n    if (!accessToken) {\n      return null;\n    }\n\n    if (this.isTokenExpired(accessToken)) {\n      const refreshed = await this.refreshTokens();\n      if (!refreshed) {\n        return null;\n      }\n      return await this.getAccessToken();\n    }\n\n    return accessToken;\n  }\n\n  async createAuthHeaders(): Promise<Record<string, string>> {\n    const token = await this.getAccessToken();\n    return token ? { Authorization: `Bearer ${token}` } : {};\n  }\n\n  async createValidAuthHeaders(): Promise<Record<string, string>> {\n    const token = await this.getValidAccessToken();\n    return token ? { Authorization: `Bearer ${token}` } : {};\n  }\n}\n\nexport { CacheTokenStorage } from './cacheTokenStorage.js';\n"],"mappings":";;AAQA,IAAa,2BAAb,MAA8D;CAC5D,AAAQ;CACR,AAAQ;CAER,YACEA,iBAAyB,gBACzBC,kBAA0B,iBAC1B;AACA,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACxB;CAED,iBAAgC;AAC9B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,eAAe;CACjD;CAED,eAAeC,OAAeC,KAAoB;AAChD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,gBAAgB,MAAM;CACjD;CAED,kBAAiC;AAC/B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,gBAAgB;CAClD;CAED,gBAAgBD,OAAeC,KAAoB;AACjD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,iBAAiB,MAAM;CAClD;CAED,cAAoB;AAClB,aAAW,WAAW,YAAa;AACnC,eAAa,WAAW,KAAK,eAAe;AAC5C,eAAa,WAAW,KAAK,gBAAgB;CAC9C;AACF;AAED,IAAa,qBAAb,MAAwD;CACtD,AAAQ,cAA6B;CACrC,AAAQ,eAA8B;CAEtC,iBAAgC;AAC9B,SAAO,KAAK;CACb;CAED,eAAeD,OAAeC,KAAoB;AAChD,OAAK,cAAc;CACpB;CAED,kBAAiC;AAC/B,SAAO,KAAK;CACb;CAED,gBAAgBD,OAAeC,KAAoB;AACjD,OAAK,eAAe;CACrB;CAED,cAAoB;AAClB,OAAK,cAAc;AACnB,OAAK,eAAe;CACrB;AACF;AAYD,IAAa,cAAb,MAAyB;CACvB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAIR,AAAQ;CAER,YAAYC,UAA8B,CAAE,GAAE;AAC5C,OAAK,UAAU,QAAQ,WAAW,IAAI;AACtC,OAAK,kBAAkB,QAAQ;AAC/B,OAAK,iBAAiB,QAAQ;AAC9B,OAAK,iBAAiB,QAAQ;CAC/B;CAED,MAAM,iBAAyC;AAC7C,SAAO,MAAM,KAAK,QAAQ,gBAAgB;CAC3C;CAED,MAAM,kBAA0C;AAC9C,SAAO,MAAM,KAAK,QAAQ,iBAAiB;CAC5C;CAED,MAAM,UACJC,aACAC,cACAC,WACAC,YACe;AACf,QAAM,KAAK,QAAQ,eAAe,aAAa,UAAU;AACzD,MAAI,aACF,OAAM,KAAK,QAAQ,gBAAgB,cAAc,WAAW;CAE/D;CAED,MAAM,cAA6B;AACjC,QAAM,KAAK,QAAQ,aAAa;CACjC;CAED,eAAeN,OAAwB;AACrC,MAAI;GACF,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC;GACrD,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,UAAO,QAAQ,MAAM;EACtB,QAAO;AACN,UAAO;EACR;CACF;CAED,mBAAmBA,OAA4B;AAC7C,MAAI;GACF,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC;AACrD,UAAO,IAAI,KAAK,QAAQ,MAAM;EAC/B,QAAO;AACN,UAAO;EACR;CACF;CAED,MAAM,gBAAkC;EACtC,MAAM,eAAe,MAAM,KAAK,iBAAiB;AAEjD,OAAK,iBAAiB,KAAK,gBACzB,QAAO;AAGT,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,KAAK,iBAAiB;IACjD,QAAQ;IACR,SAAS,EACP,gBAAgB,mBACjB;IACD,MAAM,KAAK,UAAU,EAAE,aAAc,EAAC;GACvC,EAAC;AAEF,QAAK,SAAS,GACZ,OAAM,IAAI,MAAM;GAGlB,MAAM,OAAO,MAAM,SAAS,MAAM;GAClC,MAAM,EAAE,aAAa,cAAc,iBAAiB,GAAG;AAEvD,SAAM,KAAK,UAAU,aAAa,gBAAgB;AAElD,OAAI,KAAK,eACP,MAAK,eAAe;IAAE;IAAa,cAAc;GAAiB,EAAC;AAGrE,UAAO;EACR,SAAQ,OAAO;AACd,SAAM,KAAK,aAAa;AACxB,OAAI,KAAK,eACP,MAAK,gBAAgB;AAEvB,UAAO;EACR;CACF;CAED,MAAM,sBAA8C;EAClD,MAAM,cAAc,MAAM,KAAK,gBAAgB;AAE/C,OAAK,YACH,QAAO;AAGT,MAAI,KAAK,eAAe,YAAY,EAAE;GACpC,MAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,QAAK,UACH,QAAO;AAET,UAAO,MAAM,KAAK,gBAAgB;EACnC;AAED,SAAO;CACR;CAED,MAAM,oBAAqD;EACzD,MAAM,QAAQ,MAAM,KAAK,gBAAgB;AACzC,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACzD;CAED,MAAM,yBAA0D;EAC9D,MAAM,QAAQ,MAAM,KAAK,qBAAqB;AAC9C,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACzD;AACF"}

package/dist/client-DjNZS6vZ.mjs

@@ -134,4 +134,5 @@ var TokenClient = class {
 };
 
 //#endregion
-export { LocalStorageTokenStorage, MemoryTokenStorage, TokenClient };
+export { LocalStorageTokenStorage, MemoryTokenStorage, TokenClient };
+//# sourceMappingURL=client-DjNZS6vZ.mjs.map

package/dist/client-DjNZS6vZ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-DjNZS6vZ.mjs","names":["accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number","options: TokenClientOptions","accessToken: string","refreshToken?: string","accessTtl?: number","refreshTtl?: number"],"sources":["../src/client.ts"],"sourcesContent":["export interface TokenStorage {\n  getAccessToken(): Promise<string | null> | string | null;\n  setAccessToken(token: string, ttl?: number): Promise<void> | void;\n  getRefreshToken(): Promise<string | null> | string | null;\n  setRefreshToken(token: string, ttl?: number): Promise<void> | void;\n  clearTokens(): Promise<void> | void;\n}\n\nexport class LocalStorageTokenStorage implements TokenStorage {\n  private accessTokenKey: string;\n  private refreshTokenKey: string;\n\n  constructor(\n    accessTokenKey: string = 'access_token',\n    refreshTokenKey: string = 'refresh_token',\n  ) {\n    this.accessTokenKey = accessTokenKey;\n    this.refreshTokenKey = refreshTokenKey;\n  }\n\n  getAccessToken(): string | null {\n    if (typeof window === 'undefined') return null;\n    return localStorage.getItem(this.accessTokenKey);\n  }\n\n  setAccessToken(token: string, ttl?: number): void {\n    if (typeof window === 'undefined') return;\n    localStorage.setItem(this.accessTokenKey, token);\n  }\n\n  getRefreshToken(): string | null {\n    if (typeof window === 'undefined') return null;\n    return localStorage.getItem(this.refreshTokenKey);\n  }\n\n  setRefreshToken(token: string, ttl?: number): void {\n    if (typeof window === 'undefined') return;\n    localStorage.setItem(this.refreshTokenKey, token);\n  }\n\n  clearTokens(): void {\n    if (typeof window === 'undefined') return;\n    localStorage.removeItem(this.accessTokenKey);\n    localStorage.removeItem(this.refreshTokenKey);\n  }\n}\n\nexport class MemoryTokenStorage implements TokenStorage {\n  private accessToken: string | null = null;\n  private refreshToken: string | null = null;\n\n  getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  setAccessToken(token: string, ttl?: number): void {\n    this.accessToken = token;\n  }\n\n  getRefreshToken(): string | null {\n    return this.refreshToken;\n  }\n\n  setRefreshToken(token: string, ttl?: number): void {\n    this.refreshToken = token;\n  }\n\n  clearTokens(): void {\n    this.accessToken = null;\n    this.refreshToken = null;\n  }\n}\n\nexport interface TokenClientOptions {\n  storage?: TokenStorage;\n  refreshEndpoint?: string;\n  onTokenRefresh?: (tokens: {\n    accessToken: string;\n    refreshToken?: string;\n  }) => void;\n  onTokenExpired?: () => void;\n}\n\nexport class TokenClient {\n  private storage: TokenStorage;\n  private refreshEndpoint?: string;\n  private onTokenRefresh?: (tokens: {\n    accessToken: string;\n    refreshToken?: string;\n  }) => void;\n  private onTokenExpired?: () => void;\n\n  constructor(options: TokenClientOptions = {}) {\n    this.storage = options.storage || new LocalStorageTokenStorage();\n    this.refreshEndpoint = options.refreshEndpoint;\n    this.onTokenRefresh = options.onTokenRefresh;\n    this.onTokenExpired = options.onTokenExpired;\n  }\n\n  async getAccessToken(): Promise<string | null> {\n    return await this.storage.getAccessToken();\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    return await this.storage.getRefreshToken();\n  }\n\n  async setTokens(\n    accessToken: string,\n    refreshToken?: string,\n    accessTtl?: number,\n    refreshTtl?: number,\n  ): Promise<void> {\n    await this.storage.setAccessToken(accessToken, accessTtl);\n    if (refreshToken) {\n      await this.storage.setRefreshToken(refreshToken, refreshTtl);\n    }\n  }\n\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens();\n  }\n\n  isTokenExpired(token: string): boolean {\n    try {\n      const payload = JSON.parse(atob(token.split('.')[1]));\n      const now = Math.floor(Date.now() / 1000);\n      return payload.exp < now;\n    } catch {\n      return true;\n    }\n  }\n\n  getTokenExpiration(token: string): Date | null {\n    try {\n      const payload = JSON.parse(atob(token.split('.')[1]));\n      return new Date(payload.exp * 1000);\n    } catch {\n      return null;\n    }\n  }\n\n  async refreshTokens(): Promise<boolean> {\n    const refreshToken = await this.getRefreshToken();\n\n    if (!refreshToken || !this.refreshEndpoint) {\n      return false;\n    }\n\n    try {\n      const response = await fetch(this.refreshEndpoint, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({ refreshToken }),\n      });\n\n      if (!response.ok) {\n        throw new Error('Failed to refresh token');\n      }\n\n      const data = await response.json();\n      const { accessToken, refreshToken: newRefreshToken } = data;\n\n      await this.setTokens(accessToken, newRefreshToken);\n\n      if (this.onTokenRefresh) {\n        this.onTokenRefresh({ accessToken, refreshToken: newRefreshToken });\n      }\n\n      return true;\n    } catch (error) {\n      await this.clearTokens();\n      if (this.onTokenExpired) {\n        this.onTokenExpired();\n      }\n      return false;\n    }\n  }\n\n  async getValidAccessToken(): Promise<string | null> {\n    const accessToken = await this.getAccessToken();\n\n    if (!accessToken) {\n      return null;\n    }\n\n    if (this.isTokenExpired(accessToken)) {\n      const refreshed = await this.refreshTokens();\n      if (!refreshed) {\n        return null;\n      }\n      return await this.getAccessToken();\n    }\n\n    return accessToken;\n  }\n\n  async createAuthHeaders(): Promise<Record<string, string>> {\n    const token = await this.getAccessToken();\n    return token ? { Authorization: `Bearer ${token}` } : {};\n  }\n\n  async createValidAuthHeaders(): Promise<Record<string, string>> {\n    const token = await this.getValidAccessToken();\n    return token ? { Authorization: `Bearer ${token}` } : {};\n  }\n}\n\nexport { CacheTokenStorage } from './cacheTokenStorage.js';\n"],"mappings":";AAQA,IAAa,2BAAb,MAA8D;CAC5D,AAAQ;CACR,AAAQ;CAER,YACEA,iBAAyB,gBACzBC,kBAA0B,iBAC1B;AACA,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACxB;CAED,iBAAgC;AAC9B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,eAAe;CACjD;CAED,eAAeC,OAAeC,KAAoB;AAChD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,gBAAgB,MAAM;CACjD;CAED,kBAAiC;AAC/B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,gBAAgB;CAClD;CAED,gBAAgBD,OAAeC,KAAoB;AACjD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,iBAAiB,MAAM;CAClD;CAED,cAAoB;AAClB,aAAW,WAAW,YAAa;AACnC,eAAa,WAAW,KAAK,eAAe;AAC5C,eAAa,WAAW,KAAK,gBAAgB;CAC9C;AACF;AAED,IAAa,qBAAb,MAAwD;CACtD,AAAQ,cAA6B;CACrC,AAAQ,eAA8B;CAEtC,iBAAgC;AAC9B,SAAO,KAAK;CACb;CAED,eAAeD,OAAeC,KAAoB;AAChD,OAAK,cAAc;CACpB;CAED,kBAAiC;AAC/B,SAAO,KAAK;CACb;CAED,gBAAgBD,OAAeC,KAAoB;AACjD,OAAK,eAAe;CACrB;CAED,cAAoB;AAClB,OAAK,cAAc;AACnB,OAAK,eAAe;CACrB;AACF;AAYD,IAAa,cAAb,MAAyB;CACvB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAIR,AAAQ;CAER,YAAYC,UAA8B,CAAE,GAAE;AAC5C,OAAK,UAAU,QAAQ,WAAW,IAAI;AACtC,OAAK,kBAAkB,QAAQ;AAC/B,OAAK,iBAAiB,QAAQ;AAC9B,OAAK,iBAAiB,QAAQ;CAC/B;CAED,MAAM,iBAAyC;AAC7C,SAAO,MAAM,KAAK,QAAQ,gBAAgB;CAC3C;CAED,MAAM,kBAA0C;AAC9C,SAAO,MAAM,KAAK,QAAQ,iBAAiB;CAC5C;CAED,MAAM,UACJC,aACAC,cACAC,WACAC,YACe;AACf,QAAM,KAAK,QAAQ,eAAe,aAAa,UAAU;AACzD,MAAI,aACF,OAAM,KAAK,QAAQ,gBAAgB,cAAc,WAAW;CAE/D;CAED,MAAM,cAA6B;AACjC,QAAM,KAAK,QAAQ,aAAa;CACjC;CAED,eAAeN,OAAwB;AACrC,MAAI;GACF,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC;GACrD,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,UAAO,QAAQ,MAAM;EACtB,QAAO;AACN,UAAO;EACR;CACF;CAED,mBAAmBA,OAA4B;AAC7C,MAAI;GACF,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC;AACrD,UAAO,IAAI,KAAK,QAAQ,MAAM;EAC/B,QAAO;AACN,UAAO;EACR;CACF;CAED,MAAM,gBAAkC;EACtC,MAAM,eAAe,MAAM,KAAK,iBAAiB;AAEjD,OAAK,iBAAiB,KAAK,gBACzB,QAAO;AAGT,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,KAAK,iBAAiB;IACjD,QAAQ;IACR,SAAS,EACP,gBAAgB,mBACjB;IACD,MAAM,KAAK,UAAU,EAAE,aAAc,EAAC;GACvC,EAAC;AAEF,QAAK,SAAS,GACZ,OAAM,IAAI,MAAM;GAGlB,MAAM,OAAO,MAAM,SAAS,MAAM;GAClC,MAAM,EAAE,aAAa,cAAc,iBAAiB,GAAG;AAEvD,SAAM,KAAK,UAAU,aAAa,gBAAgB;AAElD,OAAI,KAAK,eACP,MAAK,eAAe;IAAE;IAAa,cAAc;GAAiB,EAAC;AAGrE,UAAO;EACR,SAAQ,OAAO;AACd,SAAM,KAAK,aAAa;AACxB,OAAI,KAAK,eACP,MAAK,gBAAgB;AAEvB,UAAO;EACR;CACF;CAED,MAAM,sBAA8C;EAClD,MAAM,cAAc,MAAM,KAAK,gBAAgB;AAE/C,OAAK,YACH,QAAO;AAGT,MAAI,KAAK,eAAe,YAAY,EAAE;GACpC,MAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,QAAK,UACH,QAAO;AAET,UAAO,MAAM,KAAK,gBAAgB;EACnC;AAED,SAAO;CACR;CAED,MAAM,oBAAqD;EACzD,MAAM,QAAQ,MAAM,KAAK,gBAAgB;AACzC,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACzD;CAED,MAAM,yBAA0D;EAC9D,MAAM,QAAQ,MAAM,KAAK,qBAAqB;AAC9C,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACzD;AACF"}

package/dist/client.d.mts

@@ -1,2 +1,2 @@
-import { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage } from "./cacheTokenStorage-BlpcZwef.mjs";
+import { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage } from "./cacheTokenStorage-BzBRJfd-.mjs";
 export { CacheTokenStorage, LocalStorageTokenStorage, MemoryTokenStorage, TokenClient, TokenClientOptions, TokenStorage };

package/dist/hono/jwt.cjs

@@ -0,0 +1,92 @@
+const require_jwt = require('../jwt-Bo_eACEi.cjs');
+
+//#region src/hono/jwt.ts
+function extractToken(c, options = {}) {
+	const { headerName = "authorization", cookieName, tokenPrefix = "Bearer " } = options;
+	const headerValue = c.req.header(headerName);
+	if (headerValue) {
+		if (tokenPrefix && headerValue.startsWith(tokenPrefix)) return headerValue.slice(tokenPrefix.length);
+		return headerValue;
+	}
+	if (cookieName) {
+		const cookieHeader = c.req.header("cookie");
+		if (cookieHeader) {
+			const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));
+			if (match) return match[1];
+		}
+	}
+	return null;
+}
+/**
+* JWT Middleware for Hono
+*
+* @example
+* ```typescript
+* const jwt = new JwtMiddleware({
+*   config: { secret: process.env.JWT_SECRET! },
+* });
+*
+* app.use('/api/*', jwt.handler());
+*
+* // Or for optional auth
+* app.use('/public/*', jwt.optional());
+* ```
+*/
+var JwtMiddleware = class {
+	verifier;
+	extraction;
+	contextKey;
+	onError;
+	transformClaims;
+	constructor(options) {
+		this.verifier = new require_jwt.JwtVerifier(options.config);
+		this.extraction = options.extraction ?? {};
+		this.contextKey = options.contextKey ?? "jwtClaims";
+		this.onError = options.onError;
+		this.transformClaims = options.transformClaims;
+	}
+	/**
+	* Returns middleware that requires valid JWT
+	*/
+	handler() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (!token) {
+				if (this.onError) return this.onError(c, new Error("No token provided"));
+				return c.json({ error: "Unauthorized" }, 401);
+			}
+			try {
+				const payload = await this.verifier.verify(token);
+				const claims = this.transformClaims ? this.transformClaims(payload) : payload;
+				c.set(this.contextKey, claims);
+				c.set("jwtToken", token);
+				await next();
+			} catch (error) {
+				if (this.onError) return this.onError(c, error);
+				return c.json({ error: "Invalid token" }, 401);
+			}
+		};
+	}
+	/**
+	* Returns middleware that allows unauthenticated requests
+	*/
+	optional() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (token) {
+				const claims = await this.verifier.verifyOrNull(token);
+				if (claims) {
+					const transformed = this.transformClaims ? this.transformClaims(claims) : claims;
+					c.set(this.contextKey, transformed);
+					c.set("jwtToken", token);
+				}
+			}
+			await next();
+		};
+	}
+};
+
+//#endregion
+exports.JwtMiddleware = JwtMiddleware;
+exports.JwtVerifier = require_jwt.JwtVerifier;
+//# sourceMappingURL=jwt.cjs.map

package/dist/hono/jwt.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.cjs","names":["c: Context","options: TokenExtractionOptions","options: JwtMiddlewareOptions<TClaims>","JwtVerifier","next: Next"],"sources":["../../src/hono/jwt.ts"],"sourcesContent":["import type { Context, MiddlewareHandler, Next } from 'hono';\nimport {\n  type JwtClaims,\n  type JwtConfig,\n  JwtVerifier,\n  type TokenExtractionOptions,\n} from '../jwt';\n\nexport {\n  JwtVerifier,\n  type JwtClaims,\n  type JwtConfig,\n  type TokenExtractionOptions,\n};\n\nfunction extractToken(\n  c: Context,\n  options: TokenExtractionOptions = {},\n): string | null {\n  const {\n    headerName = 'authorization',\n    cookieName,\n    tokenPrefix = 'Bearer ',\n  } = options;\n\n  const headerValue = c.req.header(headerName);\n  if (headerValue) {\n    if (tokenPrefix && headerValue.startsWith(tokenPrefix)) {\n      return headerValue.slice(tokenPrefix.length);\n    }\n    return headerValue;\n  }\n\n  if (cookieName) {\n    const cookieHeader = c.req.header('cookie');\n    if (cookieHeader) {\n      const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));\n      if (match) {\n        return match[1];\n      }\n    }\n  }\n\n  return null;\n}\n\nexport interface JwtMiddlewareOptions<TClaims extends JwtClaims = JwtClaims> {\n  config: JwtConfig;\n  extraction?: TokenExtractionOptions;\n  contextKey?: string;\n  onError?: (c: Context, error: Error) => Response | Promise<Response>;\n  transformClaims?: (claims: JwtClaims) => TClaims;\n}\n\n/**\n * JWT Middleware for Hono\n *\n * @example\n * ```typescript\n * const jwt = new JwtMiddleware({\n *   config: { secret: process.env.JWT_SECRET! },\n * });\n *\n * app.use('/api/*', jwt.handler());\n *\n * // Or for optional auth\n * app.use('/public/*', jwt.optional());\n * ```\n */\nexport class JwtMiddleware<TClaims extends JwtClaims = JwtClaims> {\n  private readonly verifier: JwtVerifier<TClaims>;\n  private readonly extraction: TokenExtractionOptions;\n  private readonly contextKey: string;\n  private readonly onError?: (\n    c: Context,\n    error: Error,\n  ) => Response | Promise<Response>;\n  private readonly transformClaims?: (claims: JwtClaims) => TClaims;\n\n  constructor(options: JwtMiddlewareOptions<TClaims>) {\n    this.verifier = new JwtVerifier(options.config);\n    this.extraction = options.extraction ?? {};\n    this.contextKey = options.contextKey ?? 'jwtClaims';\n    this.onError = options.onError;\n    this.transformClaims = options.transformClaims;\n  }\n\n  /**\n   * Returns middleware that requires valid JWT\n   */\n  handler(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (!token) {\n        if (this.onError) {\n          return this.onError(c, new Error('No token provided'));\n        }\n        return c.json({ error: 'Unauthorized' }, 401);\n      }\n\n      try {\n        const payload = await this.verifier.verify(token);\n        const claims = this.transformClaims\n          ? this.transformClaims(payload)\n          : payload;\n\n        c.set(this.contextKey, claims);\n        c.set('jwtToken', token);\n\n        await next();\n      } catch (error) {\n        if (this.onError) {\n          return this.onError(c, error as Error);\n        }\n        return c.json({ error: 'Invalid token' }, 401);\n      }\n    };\n  }\n\n  /**\n   * Returns middleware that allows unauthenticated requests\n   */\n  optional(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (token) {\n        const claims = await this.verifier.verifyOrNull(token);\n        if (claims) {\n          const transformed = this.transformClaims\n            ? this.transformClaims(claims)\n            : claims;\n          c.set(this.contextKey, transformed);\n          c.set('jwtToken', token);\n        }\n      }\n\n      await next();\n    };\n  }\n}\n"],"mappings":";;;AAeA,SAAS,aACPA,GACAC,UAAkC,CAAE,GACrB;CACf,MAAM,EACJ,aAAa,iBACb,YACA,cAAc,WACf,GAAG;CAEJ,MAAM,cAAc,EAAE,IAAI,OAAO,WAAW;AAC5C,KAAI,aAAa;AACf,MAAI,eAAe,YAAY,WAAW,YAAY,CACpD,QAAO,YAAY,MAAM,YAAY,OAAO;AAE9C,SAAO;CACR;AAED,KAAI,YAAY;EACd,MAAM,eAAe,EAAE,IAAI,OAAO,SAAS;AAC3C,MAAI,cAAc;GAChB,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,EAAE,WAAW,WAAW;AACrE,OAAI,MACF,QAAO,MAAM;EAEhB;CACF;AAED,QAAO;AACR;;;;;;;;;;;;;;;;AAyBD,IAAa,gBAAb,MAAkE;CAChE,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAIjB,AAAiB;CAEjB,YAAYC,SAAwC;AAClD,OAAK,WAAW,IAAIC,wBAAY,QAAQ;AACxC,OAAK,aAAa,QAAQ,cAAc,CAAE;AAC1C,OAAK,aAAa,QAAQ,cAAc;AACxC,OAAK,UAAU,QAAQ;AACvB,OAAK,kBAAkB,QAAQ;CAChC;;;;CAKD,UAA6B;AAC3B,SAAO,OAAOH,GAAYI,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,QAAK,OAAO;AACV,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,IAAI,MAAM,qBAAqB;AAExD,WAAO,EAAE,KAAK,EAAE,OAAO,eAAgB,GAAE,IAAI;GAC9C;AAED,OAAI;IACF,MAAM,UAAU,MAAM,KAAK,SAAS,OAAO,MAAM;IACjD,MAAM,SAAS,KAAK,kBAChB,KAAK,gBAAgB,QAAQ,GAC7B;AAEJ,MAAE,IAAI,KAAK,YAAY,OAAO;AAC9B,MAAE,IAAI,YAAY,MAAM;AAExB,UAAM,MAAM;GACb,SAAQ,OAAO;AACd,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,MAAe;AAExC,WAAO,EAAE,KAAK,EAAE,OAAO,gBAAiB,GAAE,IAAI;GAC/C;EACF;CACF;;;;CAKD,WAA8B;AAC5B,SAAO,OAAOJ,GAAYI,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,OAAI,OAAO;IACT,MAAM,SAAS,MAAM,KAAK,SAAS,aAAa,MAAM;AACtD,QAAI,QAAQ;KACV,MAAM,cAAc,KAAK,kBACrB,KAAK,gBAAgB,OAAO,GAC5B;AACJ,OAAE,IAAI,KAAK,YAAY,YAAY;AACnC,OAAE,IAAI,YAAY,MAAM;IACzB;GACF;AAED,SAAM,MAAM;EACb;CACF;AACF"}

package/dist/hono/jwt.d.cts

@@ -0,0 +1,45 @@
+import { JwtClaims, JwtConfig, JwtVerifier, TokenExtractionOptions } from "../jwt-DF9kFbmh.cjs";
+import { Context, MiddlewareHandler } from "hono";
+
+//#region src/hono/jwt.d.ts
+interface JwtMiddlewareOptions<TClaims extends JwtClaims = JwtClaims> {
+  config: JwtConfig;
+  extraction?: TokenExtractionOptions;
+  contextKey?: string;
+  onError?: (c: Context, error: Error) => Response | Promise<Response>;
+  transformClaims?: (claims: JwtClaims) => TClaims;
+}
+/**
+ * JWT Middleware for Hono
+ *
+ * @example
+ * ```typescript
+ * const jwt = new JwtMiddleware({
+ *   config: { secret: process.env.JWT_SECRET! },
+ * });
+ *
+ * app.use('/api/*', jwt.handler());
+ *
+ * // Or for optional auth
+ * app.use('/public/*', jwt.optional());
+ * ```
+ */
+declare class JwtMiddleware<TClaims extends JwtClaims = JwtClaims> {
+  private readonly verifier;
+  private readonly extraction;
+  private readonly contextKey;
+  private readonly onError?;
+  private readonly transformClaims?;
+  constructor(options: JwtMiddlewareOptions<TClaims>);
+  /**
+   * Returns middleware that requires valid JWT
+   */
+  handler(): MiddlewareHandler;
+  /**
+   * Returns middleware that allows unauthenticated requests
+   */
+  optional(): MiddlewareHandler;
+}
+//#endregion
+export { JwtClaims, JwtConfig, JwtMiddleware, JwtMiddlewareOptions, JwtVerifier, TokenExtractionOptions };
+//# sourceMappingURL=jwt.d.cts.map

package/dist/hono/jwt.d.mts

@@ -0,0 +1,45 @@
+import { JwtClaims, JwtConfig, JwtVerifier, TokenExtractionOptions } from "../jwt-DH8CJ2xC.mjs";
+import { Context, MiddlewareHandler } from "hono";
+
+//#region src/hono/jwt.d.ts
+interface JwtMiddlewareOptions<TClaims extends JwtClaims = JwtClaims> {
+  config: JwtConfig;
+  extraction?: TokenExtractionOptions;
+  contextKey?: string;
+  onError?: (c: Context, error: Error) => Response | Promise<Response>;
+  transformClaims?: (claims: JwtClaims) => TClaims;
+}
+/**
+ * JWT Middleware for Hono
+ *
+ * @example
+ * ```typescript
+ * const jwt = new JwtMiddleware({
+ *   config: { secret: process.env.JWT_SECRET! },
+ * });
+ *
+ * app.use('/api/*', jwt.handler());
+ *
+ * // Or for optional auth
+ * app.use('/public/*', jwt.optional());
+ * ```
+ */
+declare class JwtMiddleware<TClaims extends JwtClaims = JwtClaims> {
+  private readonly verifier;
+  private readonly extraction;
+  private readonly contextKey;
+  private readonly onError?;
+  private readonly transformClaims?;
+  constructor(options: JwtMiddlewareOptions<TClaims>);
+  /**
+   * Returns middleware that requires valid JWT
+   */
+  handler(): MiddlewareHandler;
+  /**
+   * Returns middleware that allows unauthenticated requests
+   */
+  optional(): MiddlewareHandler;
+}
+//#endregion
+export { JwtClaims, JwtConfig, JwtMiddleware, JwtMiddlewareOptions, JwtVerifier, TokenExtractionOptions };
+//# sourceMappingURL=jwt.d.mts.map

package/dist/hono/jwt.mjs

@@ -0,0 +1,91 @@
+import { JwtVerifier } from "../jwt-D88cPJyT.mjs";
+
+//#region src/hono/jwt.ts
+function extractToken(c, options = {}) {
+	const { headerName = "authorization", cookieName, tokenPrefix = "Bearer " } = options;
+	const headerValue = c.req.header(headerName);
+	if (headerValue) {
+		if (tokenPrefix && headerValue.startsWith(tokenPrefix)) return headerValue.slice(tokenPrefix.length);
+		return headerValue;
+	}
+	if (cookieName) {
+		const cookieHeader = c.req.header("cookie");
+		if (cookieHeader) {
+			const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));
+			if (match) return match[1];
+		}
+	}
+	return null;
+}
+/**
+* JWT Middleware for Hono
+*
+* @example
+* ```typescript
+* const jwt = new JwtMiddleware({
+*   config: { secret: process.env.JWT_SECRET! },
+* });
+*
+* app.use('/api/*', jwt.handler());
+*
+* // Or for optional auth
+* app.use('/public/*', jwt.optional());
+* ```
+*/
+var JwtMiddleware = class {
+	verifier;
+	extraction;
+	contextKey;
+	onError;
+	transformClaims;
+	constructor(options) {
+		this.verifier = new JwtVerifier(options.config);
+		this.extraction = options.extraction ?? {};
+		this.contextKey = options.contextKey ?? "jwtClaims";
+		this.onError = options.onError;
+		this.transformClaims = options.transformClaims;
+	}
+	/**
+	* Returns middleware that requires valid JWT
+	*/
+	handler() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (!token) {
+				if (this.onError) return this.onError(c, new Error("No token provided"));
+				return c.json({ error: "Unauthorized" }, 401);
+			}
+			try {
+				const payload = await this.verifier.verify(token);
+				const claims = this.transformClaims ? this.transformClaims(payload) : payload;
+				c.set(this.contextKey, claims);
+				c.set("jwtToken", token);
+				await next();
+			} catch (error) {
+				if (this.onError) return this.onError(c, error);
+				return c.json({ error: "Invalid token" }, 401);
+			}
+		};
+	}
+	/**
+	* Returns middleware that allows unauthenticated requests
+	*/
+	optional() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (token) {
+				const claims = await this.verifier.verifyOrNull(token);
+				if (claims) {
+					const transformed = this.transformClaims ? this.transformClaims(claims) : claims;
+					c.set(this.contextKey, transformed);
+					c.set("jwtToken", token);
+				}
+			}
+			await next();
+		};
+	}
+};
+
+//#endregion
+export { JwtMiddleware, JwtVerifier };
+//# sourceMappingURL=jwt.mjs.map

package/dist/hono/jwt.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.mjs","names":["c: Context","options: TokenExtractionOptions","options: JwtMiddlewareOptions<TClaims>","next: Next"],"sources":["../../src/hono/jwt.ts"],"sourcesContent":["import type { Context, MiddlewareHandler, Next } from 'hono';\nimport {\n  type JwtClaims,\n  type JwtConfig,\n  JwtVerifier,\n  type TokenExtractionOptions,\n} from '../jwt';\n\nexport {\n  JwtVerifier,\n  type JwtClaims,\n  type JwtConfig,\n  type TokenExtractionOptions,\n};\n\nfunction extractToken(\n  c: Context,\n  options: TokenExtractionOptions = {},\n): string | null {\n  const {\n    headerName = 'authorization',\n    cookieName,\n    tokenPrefix = 'Bearer ',\n  } = options;\n\n  const headerValue = c.req.header(headerName);\n  if (headerValue) {\n    if (tokenPrefix && headerValue.startsWith(tokenPrefix)) {\n      return headerValue.slice(tokenPrefix.length);\n    }\n    return headerValue;\n  }\n\n  if (cookieName) {\n    const cookieHeader = c.req.header('cookie');\n    if (cookieHeader) {\n      const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));\n      if (match) {\n        return match[1];\n      }\n    }\n  }\n\n  return null;\n}\n\nexport interface JwtMiddlewareOptions<TClaims extends JwtClaims = JwtClaims> {\n  config: JwtConfig;\n  extraction?: TokenExtractionOptions;\n  contextKey?: string;\n  onError?: (c: Context, error: Error) => Response | Promise<Response>;\n  transformClaims?: (claims: JwtClaims) => TClaims;\n}\n\n/**\n * JWT Middleware for Hono\n *\n * @example\n * ```typescript\n * const jwt = new JwtMiddleware({\n *   config: { secret: process.env.JWT_SECRET! },\n * });\n *\n * app.use('/api/*', jwt.handler());\n *\n * // Or for optional auth\n * app.use('/public/*', jwt.optional());\n * ```\n */\nexport class JwtMiddleware<TClaims extends JwtClaims = JwtClaims> {\n  private readonly verifier: JwtVerifier<TClaims>;\n  private readonly extraction: TokenExtractionOptions;\n  private readonly contextKey: string;\n  private readonly onError?: (\n    c: Context,\n    error: Error,\n  ) => Response | Promise<Response>;\n  private readonly transformClaims?: (claims: JwtClaims) => TClaims;\n\n  constructor(options: JwtMiddlewareOptions<TClaims>) {\n    this.verifier = new JwtVerifier(options.config);\n    this.extraction = options.extraction ?? {};\n    this.contextKey = options.contextKey ?? 'jwtClaims';\n    this.onError = options.onError;\n    this.transformClaims = options.transformClaims;\n  }\n\n  /**\n   * Returns middleware that requires valid JWT\n   */\n  handler(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (!token) {\n        if (this.onError) {\n          return this.onError(c, new Error('No token provided'));\n        }\n        return c.json({ error: 'Unauthorized' }, 401);\n      }\n\n      try {\n        const payload = await this.verifier.verify(token);\n        const claims = this.transformClaims\n          ? this.transformClaims(payload)\n          : payload;\n\n        c.set(this.contextKey, claims);\n        c.set('jwtToken', token);\n\n        await next();\n      } catch (error) {\n        if (this.onError) {\n          return this.onError(c, error as Error);\n        }\n        return c.json({ error: 'Invalid token' }, 401);\n      }\n    };\n  }\n\n  /**\n   * Returns middleware that allows unauthenticated requests\n   */\n  optional(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (token) {\n        const claims = await this.verifier.verifyOrNull(token);\n        if (claims) {\n          const transformed = this.transformClaims\n            ? this.transformClaims(claims)\n            : claims;\n          c.set(this.contextKey, transformed);\n          c.set('jwtToken', token);\n        }\n      }\n\n      await next();\n    };\n  }\n}\n"],"mappings":";;;AAeA,SAAS,aACPA,GACAC,UAAkC,CAAE,GACrB;CACf,MAAM,EACJ,aAAa,iBACb,YACA,cAAc,WACf,GAAG;CAEJ,MAAM,cAAc,EAAE,IAAI,OAAO,WAAW;AAC5C,KAAI,aAAa;AACf,MAAI,eAAe,YAAY,WAAW,YAAY,CACpD,QAAO,YAAY,MAAM,YAAY,OAAO;AAE9C,SAAO;CACR;AAED,KAAI,YAAY;EACd,MAAM,eAAe,EAAE,IAAI,OAAO,SAAS;AAC3C,MAAI,cAAc;GAChB,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,EAAE,WAAW,WAAW;AACrE,OAAI,MACF,QAAO,MAAM;EAEhB;CACF;AAED,QAAO;AACR;;;;;;;;;;;;;;;;AAyBD,IAAa,gBAAb,MAAkE;CAChE,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAIjB,AAAiB;CAEjB,YAAYC,SAAwC;AAClD,OAAK,WAAW,IAAI,YAAY,QAAQ;AACxC,OAAK,aAAa,QAAQ,cAAc,CAAE;AAC1C,OAAK,aAAa,QAAQ,cAAc;AACxC,OAAK,UAAU,QAAQ;AACvB,OAAK,kBAAkB,QAAQ;CAChC;;;;CAKD,UAA6B;AAC3B,SAAO,OAAOF,GAAYG,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,QAAK,OAAO;AACV,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,IAAI,MAAM,qBAAqB;AAExD,WAAO,EAAE,KAAK,EAAE,OAAO,eAAgB,GAAE,IAAI;GAC9C;AAED,OAAI;IACF,MAAM,UAAU,MAAM,KAAK,SAAS,OAAO,MAAM;IACjD,MAAM,SAAS,KAAK,kBAChB,KAAK,gBAAgB,QAAQ,GAC7B;AAEJ,MAAE,IAAI,KAAK,YAAY,OAAO;AAC9B,MAAE,IAAI,YAAY,MAAM;AAExB,UAAM,MAAM;GACb,SAAQ,OAAO;AACd,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,MAAe;AAExC,WAAO,EAAE,KAAK,EAAE,OAAO,gBAAiB,GAAE,IAAI;GAC/C;EACF;CACF;;;;CAKD,WAA8B;AAC5B,SAAO,OAAOH,GAAYG,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,OAAI,OAAO;IACT,MAAM,SAAS,MAAM,KAAK,SAAS,aAAa,MAAM;AACtD,QAAI,QAAQ;KACV,MAAM,cAAc,KAAK,kBACrB,KAAK,gBAAgB,OAAO,GAC5B;AACJ,OAAE,IAAI,KAAK,YAAY,YAAY;AACnC,OAAE,IAAI,YAAY,MAAM;IACzB;GACF;AAED,SAAM,MAAM;EACb;CACF;AACF"}

package/dist/hono/oidc.cjs

@@ -0,0 +1,104 @@
+const require_oidc = require('../oidc-C0KyYaAK.cjs');
+
+//#region src/hono/oidc.ts
+function extractToken(c, options = {}) {
+	const { headerName = "authorization", cookieName, tokenPrefix = "Bearer " } = options;
+	const headerValue = c.req.header(headerName);
+	if (headerValue) {
+		if (tokenPrefix && headerValue.startsWith(tokenPrefix)) return headerValue.slice(tokenPrefix.length);
+		return headerValue;
+	}
+	if (cookieName) {
+		const cookieHeader = c.req.header("cookie");
+		if (cookieHeader) {
+			const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));
+			if (match) return match[1];
+		}
+	}
+	return null;
+}
+/**
+* OIDC Middleware for Hono
+*
+* @example
+* ```typescript
+* const oidc = new OidcMiddleware({
+*   config: {
+*     issuer: 'https://auth.example.com',
+*     audience: 'my-client-id',
+*   },
+* });
+*
+* app.use('/api/*', oidc.handler());
+*
+* // With user info
+* const oidcWithUserInfo = new OidcMiddleware({
+*   config: { issuer: '...', audience: '...' },
+*   fetchUserInfo: true,
+* });
+* ```
+*/
+var OidcMiddleware = class {
+	verifier;
+	extraction;
+	contextKey;
+	fetchUserInfo;
+	onError;
+	transformClaims;
+	constructor(options) {
+		this.verifier = new require_oidc.OidcVerifier(options.config);
+		this.extraction = options.extraction ?? {};
+		this.contextKey = options.contextKey ?? "oidcClaims";
+		this.fetchUserInfo = options.fetchUserInfo ?? false;
+		this.onError = options.onError;
+		this.transformClaims = options.transformClaims;
+	}
+	handler() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (!token) {
+				if (this.onError) return this.onError(c, new Error("No token provided"));
+				return c.json({ error: "Unauthorized" }, 401);
+			}
+			try {
+				const payload = await this.verifier.verify(token);
+				let userInfo;
+				if (this.fetchUserInfo) {
+					userInfo = await this.verifier.fetchUserInfo(token) ?? void 0;
+					c.set("oidcUserInfo", userInfo);
+				}
+				const claims = this.transformClaims ? this.transformClaims(payload, userInfo) : payload;
+				c.set(this.contextKey, claims);
+				c.set("oidcToken", token);
+				await next();
+			} catch (error) {
+				if (this.onError) return this.onError(c, error);
+				return c.json({ error: "Invalid token" }, 401);
+			}
+		};
+	}
+	optional() {
+		return async (c, next) => {
+			const token = extractToken(c, this.extraction);
+			if (token) {
+				const payload = await this.verifier.verifyOrNull(token);
+				if (payload) {
+					let userInfo;
+					if (this.fetchUserInfo) {
+						userInfo = await this.verifier.fetchUserInfo(token) ?? void 0;
+						c.set("oidcUserInfo", userInfo);
+					}
+					const claims = this.transformClaims ? this.transformClaims(payload, userInfo) : payload;
+					c.set(this.contextKey, claims);
+					c.set("oidcToken", token);
+				}
+			}
+			await next();
+		};
+	}
+};
+
+//#endregion
+exports.OidcMiddleware = OidcMiddleware;
+exports.OidcVerifier = require_oidc.OidcVerifier;
+//# sourceMappingURL=oidc.cjs.map

package/dist/hono/oidc.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.cjs","names":["c: Context","options: TokenExtractionOptions","options: OidcMiddlewareOptions<TClaims, TUserInfo>","OidcVerifier","next: Next","userInfo: TUserInfo | undefined"],"sources":["../../src/hono/oidc.ts"],"sourcesContent":["import type { Context, MiddlewareHandler, Next } from 'hono';\nimport {\n  type OidcClaims,\n  type OidcConfig,\n  type OidcUserInfo,\n  OidcVerifier,\n  type TokenExtractionOptions,\n} from '../oidc';\n\nexport {\n  OidcVerifier,\n  type OidcClaims,\n  type OidcConfig,\n  type OidcUserInfo,\n  type TokenExtractionOptions,\n};\n\nfunction extractToken(\n  c: Context,\n  options: TokenExtractionOptions = {},\n): string | null {\n  const {\n    headerName = 'authorization',\n    cookieName,\n    tokenPrefix = 'Bearer ',\n  } = options;\n\n  const headerValue = c.req.header(headerName);\n  if (headerValue) {\n    if (tokenPrefix && headerValue.startsWith(tokenPrefix)) {\n      return headerValue.slice(tokenPrefix.length);\n    }\n    return headerValue;\n  }\n\n  if (cookieName) {\n    const cookieHeader = c.req.header('cookie');\n    if (cookieHeader) {\n      const match = cookieHeader.match(new RegExp(`${cookieName}=([^;]+)`));\n      if (match) {\n        return match[1];\n      }\n    }\n  }\n\n  return null;\n}\n\nexport interface OidcMiddlewareOptions<\n  TClaims extends OidcClaims = OidcClaims,\n  TUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n  config: OidcConfig;\n  extraction?: TokenExtractionOptions;\n  contextKey?: string;\n  fetchUserInfo?: boolean;\n  onError?: (c: Context, error: Error) => Response | Promise<Response>;\n  transformClaims?: (claims: OidcClaims, userInfo?: TUserInfo) => TClaims;\n}\n\n/**\n * OIDC Middleware for Hono\n *\n * @example\n * ```typescript\n * const oidc = new OidcMiddleware({\n *   config: {\n *     issuer: 'https://auth.example.com',\n *     audience: 'my-client-id',\n *   },\n * });\n *\n * app.use('/api/*', oidc.handler());\n *\n * // With user info\n * const oidcWithUserInfo = new OidcMiddleware({\n *   config: { issuer: '...', audience: '...' },\n *   fetchUserInfo: true,\n * });\n * ```\n */\nexport class OidcMiddleware<\n  TClaims extends OidcClaims = OidcClaims,\n  TUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n  private readonly verifier: OidcVerifier<TClaims, TUserInfo>;\n  private readonly extraction: TokenExtractionOptions;\n  private readonly contextKey: string;\n  private readonly fetchUserInfo: boolean;\n  private readonly onError?: (\n    c: Context,\n    error: Error,\n  ) => Response | Promise<Response>;\n  private readonly transformClaims?: (\n    claims: OidcClaims,\n    userInfo?: TUserInfo,\n  ) => TClaims;\n\n  constructor(options: OidcMiddlewareOptions<TClaims, TUserInfo>) {\n    this.verifier = new OidcVerifier(options.config);\n    this.extraction = options.extraction ?? {};\n    this.contextKey = options.contextKey ?? 'oidcClaims';\n    this.fetchUserInfo = options.fetchUserInfo ?? false;\n    this.onError = options.onError;\n    this.transformClaims = options.transformClaims;\n  }\n\n  handler(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (!token) {\n        if (this.onError) {\n          return this.onError(c, new Error('No token provided'));\n        }\n        return c.json({ error: 'Unauthorized' }, 401);\n      }\n\n      try {\n        const payload = await this.verifier.verify(token);\n\n        let userInfo: TUserInfo | undefined;\n        if (this.fetchUserInfo) {\n          userInfo = (await this.verifier.fetchUserInfo(token)) ?? undefined;\n          c.set('oidcUserInfo', userInfo);\n        }\n\n        const claims = this.transformClaims\n          ? this.transformClaims(payload, userInfo)\n          : payload;\n\n        c.set(this.contextKey, claims);\n        c.set('oidcToken', token);\n\n        await next();\n      } catch (error) {\n        if (this.onError) {\n          return this.onError(c, error as Error);\n        }\n        return c.json({ error: 'Invalid token' }, 401);\n      }\n    };\n  }\n\n  optional(): MiddlewareHandler {\n    return async (c: Context, next: Next) => {\n      const token = extractToken(c, this.extraction);\n\n      if (token) {\n        const payload = await this.verifier.verifyOrNull(token);\n        if (payload) {\n          let userInfo: TUserInfo | undefined;\n          if (this.fetchUserInfo) {\n            userInfo = (await this.verifier.fetchUserInfo(token)) ?? undefined;\n            c.set('oidcUserInfo', userInfo);\n          }\n\n          const claims = this.transformClaims\n            ? this.transformClaims(payload, userInfo)\n            : payload;\n\n          c.set(this.contextKey, claims);\n          c.set('oidcToken', token);\n        }\n      }\n\n      await next();\n    };\n  }\n}\n"],"mappings":";;;AAiBA,SAAS,aACPA,GACAC,UAAkC,CAAE,GACrB;CACf,MAAM,EACJ,aAAa,iBACb,YACA,cAAc,WACf,GAAG;CAEJ,MAAM,cAAc,EAAE,IAAI,OAAO,WAAW;AAC5C,KAAI,aAAa;AACf,MAAI,eAAe,YAAY,WAAW,YAAY,CACpD,QAAO,YAAY,MAAM,YAAY,OAAO;AAE9C,SAAO;CACR;AAED,KAAI,YAAY;EACd,MAAM,eAAe,EAAE,IAAI,OAAO,SAAS;AAC3C,MAAI,cAAc;GAChB,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,EAAE,WAAW,WAAW;AACrE,OAAI,MACF,QAAO,MAAM;EAEhB;CACF;AAED,QAAO;AACR;;;;;;;;;;;;;;;;;;;;;;AAmCD,IAAa,iBAAb,MAGE;CACA,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAIjB,AAAiB;CAKjB,YAAYC,SAAoD;AAC9D,OAAK,WAAW,IAAIC,0BAAa,QAAQ;AACzC,OAAK,aAAa,QAAQ,cAAc,CAAE;AAC1C,OAAK,aAAa,QAAQ,cAAc;AACxC,OAAK,gBAAgB,QAAQ,iBAAiB;AAC9C,OAAK,UAAU,QAAQ;AACvB,OAAK,kBAAkB,QAAQ;CAChC;CAED,UAA6B;AAC3B,SAAO,OAAOH,GAAYI,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,QAAK,OAAO;AACV,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,IAAI,MAAM,qBAAqB;AAExD,WAAO,EAAE,KAAK,EAAE,OAAO,eAAgB,GAAE,IAAI;GAC9C;AAED,OAAI;IACF,MAAM,UAAU,MAAM,KAAK,SAAS,OAAO,MAAM;IAEjD,IAAIC;AACJ,QAAI,KAAK,eAAe;AACtB,gBAAY,MAAM,KAAK,SAAS,cAAc,MAAM;AACpD,OAAE,IAAI,gBAAgB,SAAS;IAChC;IAED,MAAM,SAAS,KAAK,kBAChB,KAAK,gBAAgB,SAAS,SAAS,GACvC;AAEJ,MAAE,IAAI,KAAK,YAAY,OAAO;AAC9B,MAAE,IAAI,aAAa,MAAM;AAEzB,UAAM,MAAM;GACb,SAAQ,OAAO;AACd,QAAI,KAAK,QACP,QAAO,KAAK,QAAQ,GAAG,MAAe;AAExC,WAAO,EAAE,KAAK,EAAE,OAAO,gBAAiB,GAAE,IAAI;GAC/C;EACF;CACF;CAED,WAA8B;AAC5B,SAAO,OAAOL,GAAYI,SAAe;GACvC,MAAM,QAAQ,aAAa,GAAG,KAAK,WAAW;AAE9C,OAAI,OAAO;IACT,MAAM,UAAU,MAAM,KAAK,SAAS,aAAa,MAAM;AACvD,QAAI,SAAS;KACX,IAAIC;AACJ,SAAI,KAAK,eAAe;AACtB,iBAAY,MAAM,KAAK,SAAS,cAAc,MAAM;AACpD,QAAE,IAAI,gBAAgB,SAAS;KAChC;KAED,MAAM,SAAS,KAAK,kBAChB,KAAK,gBAAgB,SAAS,SAAS,GACvC;AAEJ,OAAE,IAAI,KAAK,YAAY,OAAO;AAC9B,OAAE,IAAI,aAAa,MAAM;IAC1B;GACF;AAED,SAAM,MAAM;EACb;CACF;AACF"}

package/dist/hono/oidc.d.cts

@@ -0,0 +1,48 @@
+import { TokenExtractionOptions } from "../jwt-DF9kFbmh.cjs";
+import { OidcClaims, OidcConfig, OidcUserInfo, OidcVerifier } from "../oidc-DDLIB5gb.cjs";
+import { Context, MiddlewareHandler } from "hono";
+
+//#region src/hono/oidc.d.ts
+interface OidcMiddlewareOptions<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  config: OidcConfig;
+  extraction?: TokenExtractionOptions;
+  contextKey?: string;
+  fetchUserInfo?: boolean;
+  onError?: (c: Context, error: Error) => Response | Promise<Response>;
+  transformClaims?: (claims: OidcClaims, userInfo?: TUserInfo) => TClaims;
+}
+/**
+ * OIDC Middleware for Hono
+ *
+ * @example
+ * ```typescript
+ * const oidc = new OidcMiddleware({
+ *   config: {
+ *     issuer: 'https://auth.example.com',
+ *     audience: 'my-client-id',
+ *   },
+ * });
+ *
+ * app.use('/api/*', oidc.handler());
+ *
+ * // With user info
+ * const oidcWithUserInfo = new OidcMiddleware({
+ *   config: { issuer: '...', audience: '...' },
+ *   fetchUserInfo: true,
+ * });
+ * ```
+ */
+declare class OidcMiddleware<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly verifier;
+  private readonly extraction;
+  private readonly contextKey;
+  private readonly fetchUserInfo;
+  private readonly onError?;
+  private readonly transformClaims?;
+  constructor(options: OidcMiddlewareOptions<TClaims, TUserInfo>);
+  handler(): MiddlewareHandler;
+  optional(): MiddlewareHandler;
+}
+//#endregion
+export { OidcClaims, OidcConfig, OidcMiddleware, OidcMiddlewareOptions, OidcUserInfo, OidcVerifier, TokenExtractionOptions };
+//# sourceMappingURL=oidc.d.cts.map