@geekmidas/auth 10.0.0-alpha.12 → 10.0.0-alpha.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/auth",
-  "version": "10.0.0-alpha.12",
+  "version": "10.0.0-alpha.13",
   "description": "JWT and OIDC authentication with token verification, Hono middleware, and Lambda authorizers",
   "type": "module",
   "exports": {
@@ -114,12 +114,12 @@
   },
   "devDependencies": {
     "@types/jsonwebtoken": "~9.0.10",
-    "@geekmidas/cache": "^10.0.0-alpha.12"
+    "@geekmidas/cache": "^10.0.0-alpha.13"
   },
   "peerDependencies": {
     "@types/aws-lambda": ">=8.10.163",
     "hono": ">=4.13.8",
-    "@geekmidas/cache": "^10.0.0-alpha.12"
+    "@geekmidas/cache": "^10.0.0-alpha.13"
   },
   "peerDependenciesMeta": {
     "@geekmidas/cache": {

package/dist/cacheTokenStorage-16NE8Cd9.mjs

@@ -1,32 +0,0 @@
-//#region src/cacheTokenStorage.ts
-var CacheTokenStorage = class {
-	cache;
-	accessTokenKey;
-	refreshTokenKey;
-	constructor(cache, accessTokenKey = "access_token", refreshTokenKey = "refresh_token") {
-		this.cache = cache;
-		this.accessTokenKey = accessTokenKey;
-		this.refreshTokenKey = refreshTokenKey;
-	}
-	async getAccessToken() {
-		const token = await this.cache.get(this.accessTokenKey);
-		return token ?? null;
-	}
-	async setAccessToken(token, ttl) {
-		await this.cache.set(this.accessTokenKey, token, ttl);
-	}
-	async getRefreshToken() {
-		const token = await this.cache.get(this.refreshTokenKey);
-		return token ?? null;
-	}
-	async setRefreshToken(token, ttl) {
-		await this.cache.set(this.refreshTokenKey, token, ttl);
-	}
-	async clearTokens() {
-		await Promise.all([this.cache.delete(this.accessTokenKey), this.cache.delete(this.refreshTokenKey)]);
-	}
-};
-
-//#endregion
-export { CacheTokenStorage };
-//# sourceMappingURL=cacheTokenStorage-16NE8Cd9.mjs.map

package/dist/cacheTokenStorage-16NE8Cd9.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"cacheTokenStorage-16NE8Cd9.mjs","names":["cache: Cache","accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number"],"sources":["../src/cacheTokenStorage.ts"],"sourcesContent":["import type { Cache } from '@geekmidas/cache';\nimport type { TokenStorage } from './client.js';\n\nexport class CacheTokenStorage implements TokenStorage {\n\tprivate cache: Cache;\n\tprivate accessTokenKey: string;\n\tprivate refreshTokenKey: string;\n\n\tconstructor(\n\t\tcache: Cache,\n\t\taccessTokenKey: string = 'access_token',\n\t\trefreshTokenKey: string = 'refresh_token',\n\t) {\n\t\tthis.cache = cache;\n\t\tthis.accessTokenKey = accessTokenKey;\n\t\tthis.refreshTokenKey = refreshTokenKey;\n\t}\n\n\tasync getAccessToken(): Promise<string | null> {\n\t\tconst token = await this.cache.get<string>(this.accessTokenKey);\n\t\treturn token ?? null;\n\t}\n\n\tasync setAccessToken(token: string, ttl?: number): Promise<void> {\n\t\tawait this.cache.set(this.accessTokenKey, token, ttl);\n\t}\n\n\tasync getRefreshToken(): Promise<string | null> {\n\t\tconst token = await this.cache.get<string>(this.refreshTokenKey);\n\t\treturn token ?? null;\n\t}\n\n\tasync setRefreshToken(token: string, ttl?: number): Promise<void> {\n\t\tawait this.cache.set(this.refreshTokenKey, token, ttl);\n\t}\n\n\tasync clearTokens(): Promise<void> {\n\t\tawait Promise.all([\n\t\t\tthis.cache.delete(this.accessTokenKey),\n\t\t\tthis.cache.delete(this.refreshTokenKey),\n\t\t]);\n\t}\n}\n"],"mappings":";AAGA,IAAa,oBAAb,MAAuD;CACtD,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YACCA,OACAC,iBAAyB,gBACzBC,kBAA0B,iBACzB;AACD,OAAK,QAAQ;AACb,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACvB;CAED,MAAM,iBAAyC;EAC9C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAY,KAAK,eAAe;AAC/D,SAAO,SAAS;CAChB;CAED,MAAM,eAAeC,OAAeC,KAA6B;AAChE,QAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB,OAAO,IAAI;CACrD;CAED,MAAM,kBAA0C;EAC/C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAY,KAAK,gBAAgB;AAChE,SAAO,SAAS;CAChB;CAED,MAAM,gBAAgBD,OAAeC,KAA6B;AACjE,QAAM,KAAK,MAAM,IAAI,KAAK,iBAAiB,OAAO,IAAI;CACtD;CAED,MAAM,cAA6B;AAClC,QAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,OAAO,KAAK,eAAe,EACtC,KAAK,MAAM,OAAO,KAAK,gBAAgB,AACvC,EAAC;CACF;AACD"}

package/dist/cacheTokenStorage-B7sOoysu.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cacheTokenStorage-B7sOoysu.d.cts","names":[],"sources":["../src/client.ts","../src/cacheTokenStorage.ts"],"sourcesContent":[],"mappings":";;;UAAiB,YAAA;oBACE;+CAC2B;EAF7B,eAAY,EAAA,EAGT,OAHS,CAAA,MAAA,GAAA,IAAA,CAAA,GAAA,MAAA,GAAA,IAAA;EAAA,eAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,EAIkB,OAJlB,CAAA,IAAA,CAAA,GAAA,IAAA;EAAA,WACV,EAAA,EAIH,OAJG,CAAA,IAAA,CAAA,GAAA,IAAA;;AAEC,cAKP,wBAAA,YAAoC,YAL7B,CAAA;EAAO,QACoB,cAAA;EAAO,QACtC,eAAA;EAAO,WAAA,CAAA,cAAA,CAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA;EAGV,cAAA,CAAA,CAAA,EAAA,MAAA,GAAyB,IAAA;EAuCzB,cAAA,CAAA,KAAA,EAAmB,MAAA,EAAA,IAAuB,CAAZ,EAAA,MAAY,CAAA,EAAA,IAAA;EA0BtC,eAAA,CAAA,CAAA,EAAA,MAAkB,GAAA,IACxB;EASE,eAAW,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAA,WAAA,CAAA,CAAA,EAAA,IAAA;;AAgBC,cApDZ,kBAAA,YAA8B,YAoDlB,CAAA;EAAO,QAIN,WAAA;EAAO,QAS7B,YAAA;EAAO,cAOW,CAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAAO,cAiBO,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAI,eAYhB,CAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAAO,eA0CD,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAO,WAkBD,CAAA,CAAA,EAAA,IAAA;;AAKK,UA5IxB,kBAAA,CA4IwB;EAAM,OAAd,CAAA,EA3ItB,YA2IsB;EAAO,eAAA,CAAA,EAAA,MAAA;;;;EClN3B,CAAA,EAAA,GAAA,IAAA;EAAkB,cAAA,CAAA,EAAA,GAAA,GAAA,IAAA;;AAeN,cDiEZ,WAAA,CCjEY;EAAO,QAKoB,OAAA;EAAO,QAIjC,eAAA;EAAO,QAKoB,cAAA;EAAO,QAItC,cAAA;EAAO,WAjCa,CAAA,OAAA,CAAA,EDyFpB,kBCzFoB;EAAY,cAAA,CAAA,CAAA,EDgG7B,OChG6B,CAAA,MAAA,GAAA,IAAA,CAAA;qBDoG5B;kGAStB;iBAOkB;;qCAiBc;mBAYZ;yBA0CM;uBAkBF,QAAQ;4BAKH,QAAQ;;;;cClN5B,iBAAA,YAA6B;EDHzB,QAAA,KAAA;EAAY,QAAA,cAAA;EAAA,QACV,eAAA;EAAO,WACoB,CAAA,KAAA,ECOrC,KDPqC,EAAA,cAAA,CAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA;EAAO,cACjC,CAAA,CAAA,ECeK,ODfL,CAAA,MAAA,GAAA,IAAA,CAAA;EAAO,cACoB,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,ECmBK,ODnBL,CAAA,IAAA,CAAA;EAAO,eACtC,CAAA,CAAA,ECsBU,ODtBV,CAAA,MAAA,GAAA,IAAA,CAAA;EAAO,eAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,EC2B8B,OD3B9B,CAAA,IAAA,CAAA;EAGV,WAAA,CAAA,CAAA,EC4BS,OD5BT,CAAA,IAAyB,CAAA;AAuCtC;AA0BA"}

package/dist/cacheTokenStorage-CEpMniTi.cjs

@@ -1,38 +0,0 @@
-
-//#region src/cacheTokenStorage.ts
-var CacheTokenStorage = class {
-	cache;
-	accessTokenKey;
-	refreshTokenKey;
-	constructor(cache, accessTokenKey = "access_token", refreshTokenKey = "refresh_token") {
-		this.cache = cache;
-		this.accessTokenKey = accessTokenKey;
-		this.refreshTokenKey = refreshTokenKey;
-	}
-	async getAccessToken() {
-		const token = await this.cache.get(this.accessTokenKey);
-		return token ?? null;
-	}
-	async setAccessToken(token, ttl) {
-		await this.cache.set(this.accessTokenKey, token, ttl);
-	}
-	async getRefreshToken() {
-		const token = await this.cache.get(this.refreshTokenKey);
-		return token ?? null;
-	}
-	async setRefreshToken(token, ttl) {
-		await this.cache.set(this.refreshTokenKey, token, ttl);
-	}
-	async clearTokens() {
-		await Promise.all([this.cache.delete(this.accessTokenKey), this.cache.delete(this.refreshTokenKey)]);
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'CacheTokenStorage', {
-  enumerable: true,
-  get: function () {
-    return CacheTokenStorage;
-  }
-});
-//# sourceMappingURL=cacheTokenStorage-CEpMniTi.cjs.map

package/dist/cacheTokenStorage-CEpMniTi.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"cacheTokenStorage-CEpMniTi.cjs","names":["cache: Cache","accessTokenKey: string","refreshTokenKey: string","token: string","ttl?: number"],"sources":["../src/cacheTokenStorage.ts"],"sourcesContent":["import type { Cache } from '@geekmidas/cache';\nimport type { TokenStorage } from './client.js';\n\nexport class CacheTokenStorage implements TokenStorage {\n\tprivate cache: Cache;\n\tprivate accessTokenKey: string;\n\tprivate refreshTokenKey: string;\n\n\tconstructor(\n\t\tcache: Cache,\n\t\taccessTokenKey: string = 'access_token',\n\t\trefreshTokenKey: string = 'refresh_token',\n\t) {\n\t\tthis.cache = cache;\n\t\tthis.accessTokenKey = accessTokenKey;\n\t\tthis.refreshTokenKey = refreshTokenKey;\n\t}\n\n\tasync getAccessToken(): Promise<string | null> {\n\t\tconst token = await this.cache.get<string>(this.accessTokenKey);\n\t\treturn token ?? null;\n\t}\n\n\tasync setAccessToken(token: string, ttl?: number): Promise<void> {\n\t\tawait this.cache.set(this.accessTokenKey, token, ttl);\n\t}\n\n\tasync getRefreshToken(): Promise<string | null> {\n\t\tconst token = await this.cache.get<string>(this.refreshTokenKey);\n\t\treturn token ?? null;\n\t}\n\n\tasync setRefreshToken(token: string, ttl?: number): Promise<void> {\n\t\tawait this.cache.set(this.refreshTokenKey, token, ttl);\n\t}\n\n\tasync clearTokens(): Promise<void> {\n\t\tawait Promise.all([\n\t\t\tthis.cache.delete(this.accessTokenKey),\n\t\t\tthis.cache.delete(this.refreshTokenKey),\n\t\t]);\n\t}\n}\n"],"mappings":";;AAGA,IAAa,oBAAb,MAAuD;CACtD,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YACCA,OACAC,iBAAyB,gBACzBC,kBAA0B,iBACzB;AACD,OAAK,QAAQ;AACb,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACvB;CAED,MAAM,iBAAyC;EAC9C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAY,KAAK,eAAe;AAC/D,SAAO,SAAS;CAChB;CAED,MAAM,eAAeC,OAAeC,KAA6B;AAChE,QAAM,KAAK,MAAM,IAAI,KAAK,gBAAgB,OAAO,IAAI;CACrD;CAED,MAAM,kBAA0C;EAC/C,MAAM,QAAQ,MAAM,KAAK,MAAM,IAAY,KAAK,gBAAgB;AAChE,SAAO,SAAS;CAChB;CAED,MAAM,gBAAgBD,OAAeC,KAA6B;AACjE,QAAM,KAAK,MAAM,IAAI,KAAK,iBAAiB,OAAO,IAAI;CACtD;CAED,MAAM,cAA6B;AAClC,QAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,OAAO,KAAK,eAAe,EACtC,KAAK,MAAM,OAAO,KAAK,gBAAgB,AACvC,EAAC;CACF;AACD"}

package/dist/cacheTokenStorage-DaqxdNxI.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cacheTokenStorage-DaqxdNxI.d.mts","names":[],"sources":["../src/client.ts","../src/cacheTokenStorage.ts"],"sourcesContent":[],"mappings":";;;UAAiB,YAAA;oBACE;+CAC2B;EAF7B,eAAY,EAAA,EAGT,OAHS,CAAA,MAAA,GAAA,IAAA,CAAA,GAAA,MAAA,GAAA,IAAA;EAAA,eAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,EAIkB,OAJlB,CAAA,IAAA,CAAA,GAAA,IAAA;EAAA,WACV,EAAA,EAIH,OAJG,CAAA,IAAA,CAAA,GAAA,IAAA;;AAEC,cAKP,wBAAA,YAAoC,YAL7B,CAAA;EAAO,QACoB,cAAA;EAAO,QACtC,eAAA;EAAO,WAAA,CAAA,cAAA,CAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA;EAGV,cAAA,CAAA,CAAA,EAAA,MAAA,GAAyB,IAAA;EAuCzB,cAAA,CAAA,KAAA,EAAmB,MAAA,EAAA,IAAW,CAAA,EAAA,MAAA,CAAY,EAAA,IAAA;EA0BtC,eAAA,CAAA,CAAA,EAAA,MAAkB,GAAA,IACxB;EASE,eAAW,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAA,WAAA,CAAA,CAAA,EAAA,IAAA;;AAgBC,cApDZ,kBAAA,YAA8B,YAoDlB,CAAA;EAAO,QAIN,WAAA;EAAO,QAS7B,YAAA;EAAO,cAOW,CAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAAO,cAiBO,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAI,eAYhB,CAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAAO,eA0CD,CAAA,KAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAO,WAkBD,CAAA,CAAA,EAAA,IAAA;;AAKK,UA5IxB,kBAAA,CA4IwB;EAAM,OAAd,CAAA,EA3ItB,YA2IsB;EAAO,eAAA,CAAA,EAAA,MAAA;;;;EClN3B,CAAA,EAAA,GAAA,IAAA;EAAkB,cAAA,CAAA,EAAA,GAAA,GAAA,IAAA;;AAeN,cDiEZ,WAAA,CCjEY;EAAO,QAKoB,OAAA;EAAO,QAIjC,eAAA;EAAO,QAKoB,cAAA;EAAO,QAItC,cAAA;EAAO,WAjCa,CAAA,OAAA,CAAA,EDyFpB,kBCzFoB;EAAY,cAAA,CAAA,CAAA,EDgG7B,OChG6B,CAAA,MAAA,GAAA,IAAA,CAAA;qBDoG5B;kGAStB;iBAOkB;;qCAiBc;mBAYZ;yBA0CM;uBAkBF,QAAQ;4BAKH,QAAQ;;;;cClN5B,iBAAA,YAA6B;EDHzB,QAAA,KAAA;EAAY,QAAA,cAAA;EAAA,QACV,eAAA;EAAO,WACoB,CAAA,KAAA,ECOrC,KDPqC,EAAA,cAAA,CAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA;EAAO,cACjC,CAAA,CAAA,ECeK,ODfL,CAAA,MAAA,GAAA,IAAA,CAAA;EAAO,cACoB,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,ECmBK,ODnBL,CAAA,IAAA,CAAA;EAAO,eACtC,CAAA,CAAA,ECsBU,ODtBV,CAAA,MAAA,GAAA,IAAA,CAAA;EAAO,eAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAA,CAAA,EC2B8B,OD3B9B,CAAA,IAAA,CAAA;EAGV,WAAA,CAAA,CAAA,EC4BS,OD5BT,CAAA,IAAyB,CAAA;AAuCtC;AA0BA"}

package/dist/client-BPl_mMvb.cjs

@@ -1,162 +0,0 @@
-
-//#region src/client.ts
-var LocalStorageTokenStorage = class {
-	accessTokenKey;
-	refreshTokenKey;
-	constructor(accessTokenKey = "access_token", refreshTokenKey = "refresh_token") {
-		this.accessTokenKey = accessTokenKey;
-		this.refreshTokenKey = refreshTokenKey;
-	}
-	getAccessToken() {
-		if (typeof window === "undefined") return null;
-		return localStorage.getItem(this.accessTokenKey);
-	}
-	setAccessToken(token, _ttl) {
-		if (typeof window === "undefined") return;
-		localStorage.setItem(this.accessTokenKey, token);
-	}
-	getRefreshToken() {
-		if (typeof window === "undefined") return null;
-		return localStorage.getItem(this.refreshTokenKey);
-	}
-	setRefreshToken(token, _ttl) {
-		if (typeof window === "undefined") return;
-		localStorage.setItem(this.refreshTokenKey, token);
-	}
-	clearTokens() {
-		if (typeof window === "undefined") return;
-		localStorage.removeItem(this.accessTokenKey);
-		localStorage.removeItem(this.refreshTokenKey);
-	}
-};
-var MemoryTokenStorage = class {
-	accessToken = null;
-	refreshToken = null;
-	getAccessToken() {
-		return this.accessToken;
-	}
-	setAccessToken(token, _ttl) {
-		this.accessToken = token;
-	}
-	getRefreshToken() {
-		return this.refreshToken;
-	}
-	setRefreshToken(token, _ttl) {
-		this.refreshToken = token;
-	}
-	clearTokens() {
-		this.accessToken = null;
-		this.refreshToken = null;
-	}
-};
-var TokenClient = class {
-	storage;
-	refreshEndpoint;
-	onTokenRefresh;
-	onTokenExpired;
-	constructor(options = {}) {
-		this.storage = options.storage || new LocalStorageTokenStorage();
-		this.refreshEndpoint = options.refreshEndpoint;
-		this.onTokenRefresh = options.onTokenRefresh;
-		this.onTokenExpired = options.onTokenExpired;
-	}
-	async getAccessToken() {
-		return await this.storage.getAccessToken();
-	}
-	async getRefreshToken() {
-		return await this.storage.getRefreshToken();
-	}
-	async setTokens(accessToken, refreshToken, accessTtl, refreshTtl) {
-		await this.storage.setAccessToken(accessToken, accessTtl);
-		if (refreshToken) await this.storage.setRefreshToken(refreshToken, refreshTtl);
-	}
-	async clearTokens() {
-		await this.storage.clearTokens();
-	}
-	isTokenExpired(token) {
-		try {
-			const parts = token.split(".");
-			const payloadPart = parts[1];
-			if (!payloadPart) return true;
-			const payload = JSON.parse(atob(payloadPart));
-			const now = Math.floor(Date.now() / 1e3);
-			return payload.exp < now;
-		} catch {
-			return true;
-		}
-	}
-	getTokenExpiration(token) {
-		try {
-			const parts = token.split(".");
-			const payloadPart = parts[1];
-			if (!payloadPart) return null;
-			const payload = JSON.parse(atob(payloadPart));
-			return new Date(payload.exp * 1e3);
-		} catch {
-			return null;
-		}
-	}
-	async refreshTokens() {
-		const refreshToken = await this.getRefreshToken();
-		if (!refreshToken || !this.refreshEndpoint) return false;
-		try {
-			const response = await fetch(this.refreshEndpoint, {
-				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body: JSON.stringify({ refreshToken })
-			});
-			if (!response.ok) throw new Error("Failed to refresh token");
-			const data = await response.json();
-			const { accessToken, refreshToken: newRefreshToken } = data;
-			await this.setTokens(accessToken, newRefreshToken);
-			if (this.onTokenRefresh) this.onTokenRefresh({
-				accessToken,
-				refreshToken: newRefreshToken
-			});
-			return true;
-		} catch (_error) {
-			await this.clearTokens();
-			if (this.onTokenExpired) this.onTokenExpired();
-			return false;
-		}
-	}
-	async getValidAccessToken() {
-		const accessToken = await this.getAccessToken();
-		if (!accessToken) return null;
-		if (this.isTokenExpired(accessToken)) {
-			const refreshed = await this.refreshTokens();
-			if (!refreshed) return null;
-			return await this.getAccessToken();
-		}
-		return accessToken;
-	}
-	async createAuthHeaders() {
-		const token = await this.getAccessToken();
-		return token ? { Authorization: `Bearer ${token}` } : {};
-	}
-	async createValidAuthHeaders() {
-		const token = await this.getValidAccessToken();
-		return token ? { Authorization: `Bearer ${token}` } : {};
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'LocalStorageTokenStorage', {
-  enumerable: true,
-  get: function () {
-    return LocalStorageTokenStorage;
-  }
-});
-Object.defineProperty(exports, 'MemoryTokenStorage', {
-  enumerable: true,
-  get: function () {
-    return MemoryTokenStorage;
-  }
-});
-Object.defineProperty(exports, 'TokenClient', {
-  enumerable: true,
-  get: function () {
-    return TokenClient;
-  }
-});
-//# sourceMappingURL=client-BPl_mMvb.cjs.map

package/dist/client-BPl_mMvb.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-BPl_mMvb.cjs","names":["accessTokenKey: string","refreshTokenKey: string","token: string","_ttl?: number","options: TokenClientOptions","accessToken: string","refreshToken?: string","accessTtl?: number","refreshTtl?: number"],"sources":["../src/client.ts"],"sourcesContent":["export interface TokenStorage {\n\tgetAccessToken(): Promise<string | null> | string | null;\n\tsetAccessToken(token: string, ttl?: number): Promise<void> | void;\n\tgetRefreshToken(): Promise<string | null> | string | null;\n\tsetRefreshToken(token: string, ttl?: number): Promise<void> | void;\n\tclearTokens(): Promise<void> | void;\n}\n\nexport class LocalStorageTokenStorage implements TokenStorage {\n\tprivate accessTokenKey: string;\n\tprivate refreshTokenKey: string;\n\n\tconstructor(\n\t\taccessTokenKey: string = 'access_token',\n\t\trefreshTokenKey: string = 'refresh_token',\n\t) {\n\t\tthis.accessTokenKey = accessTokenKey;\n\t\tthis.refreshTokenKey = refreshTokenKey;\n\t}\n\n\tgetAccessToken(): string | null {\n\t\tif (typeof window === 'undefined') return null;\n\t\treturn localStorage.getItem(this.accessTokenKey);\n\t}\n\n\tsetAccessToken(token: string, _ttl?: number): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.setItem(this.accessTokenKey, token);\n\t}\n\n\tgetRefreshToken(): string | null {\n\t\tif (typeof window === 'undefined') return null;\n\t\treturn localStorage.getItem(this.refreshTokenKey);\n\t}\n\n\tsetRefreshToken(token: string, _ttl?: number): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.setItem(this.refreshTokenKey, token);\n\t}\n\n\tclearTokens(): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.removeItem(this.accessTokenKey);\n\t\tlocalStorage.removeItem(this.refreshTokenKey);\n\t}\n}\n\nexport class MemoryTokenStorage implements TokenStorage {\n\tprivate accessToken: string | null = null;\n\tprivate refreshToken: string | null = null;\n\n\tgetAccessToken(): string | null {\n\t\treturn this.accessToken;\n\t}\n\n\tsetAccessToken(token: string, _ttl?: number): void {\n\t\tthis.accessToken = token;\n\t}\n\n\tgetRefreshToken(): string | null {\n\t\treturn this.refreshToken;\n\t}\n\n\tsetRefreshToken(token: string, _ttl?: number): void {\n\t\tthis.refreshToken = token;\n\t}\n\n\tclearTokens(): void {\n\t\tthis.accessToken = null;\n\t\tthis.refreshToken = null;\n\t}\n}\n\nexport interface TokenClientOptions {\n\tstorage?: TokenStorage;\n\trefreshEndpoint?: string;\n\tonTokenRefresh?: (tokens: {\n\t\taccessToken: string;\n\t\trefreshToken?: string;\n\t}) => void;\n\tonTokenExpired?: () => void;\n}\n\nexport class TokenClient {\n\tprivate storage: TokenStorage;\n\tprivate refreshEndpoint?: string;\n\tprivate onTokenRefresh?: (tokens: {\n\t\taccessToken: string;\n\t\trefreshToken?: string;\n\t}) => void;\n\tprivate onTokenExpired?: () => void;\n\n\tconstructor(options: TokenClientOptions = {}) {\n\t\tthis.storage = options.storage || new LocalStorageTokenStorage();\n\t\tthis.refreshEndpoint = options.refreshEndpoint;\n\t\tthis.onTokenRefresh = options.onTokenRefresh;\n\t\tthis.onTokenExpired = options.onTokenExpired;\n\t}\n\n\tasync getAccessToken(): Promise<string | null> {\n\t\treturn await this.storage.getAccessToken();\n\t}\n\n\tasync getRefreshToken(): Promise<string | null> {\n\t\treturn await this.storage.getRefreshToken();\n\t}\n\n\tasync setTokens(\n\t\taccessToken: string,\n\t\trefreshToken?: string,\n\t\taccessTtl?: number,\n\t\trefreshTtl?: number,\n\t): Promise<void> {\n\t\tawait this.storage.setAccessToken(accessToken, accessTtl);\n\t\tif (refreshToken) {\n\t\t\tawait this.storage.setRefreshToken(refreshToken, refreshTtl);\n\t\t}\n\t}\n\n\tasync clearTokens(): Promise<void> {\n\t\tawait this.storage.clearTokens();\n\t}\n\n\tisTokenExpired(token: string): boolean {\n\t\ttry {\n\t\t\tconst parts = token.split('.');\n\t\t\tconst payloadPart = parts[1];\n\t\t\tif (!payloadPart) return true;\n\t\t\tconst payload = JSON.parse(atob(payloadPart));\n\t\t\tconst now = Math.floor(Date.now() / 1000);\n\t\t\treturn payload.exp < now;\n\t\t} catch {\n\t\t\treturn true;\n\t\t}\n\t}\n\n\tgetTokenExpiration(token: string): Date | null {\n\t\ttry {\n\t\t\tconst parts = token.split('.');\n\t\t\tconst payloadPart = parts[1];\n\t\t\tif (!payloadPart) return null;\n\t\t\tconst payload = JSON.parse(atob(payloadPart));\n\t\t\treturn new Date(payload.exp * 1000);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync refreshTokens(): Promise<boolean> {\n\t\tconst refreshToken = await this.getRefreshToken();\n\n\t\tif (!refreshToken || !this.refreshEndpoint) {\n\t\t\treturn false;\n\t\t}\n\n\t\ttry {\n\t\t\tconst response = await fetch(this.refreshEndpoint, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: {\n\t\t\t\t\t'Content-Type': 'application/json',\n\t\t\t\t},\n\t\t\t\tbody: JSON.stringify({ refreshToken }),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tthrow new Error('Failed to refresh token');\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as {\n\t\t\t\taccessToken: string;\n\t\t\t\trefreshToken: string;\n\t\t\t};\n\t\t\tconst { accessToken, refreshToken: newRefreshToken } = data;\n\n\t\t\tawait this.setTokens(accessToken, newRefreshToken);\n\n\t\t\tif (this.onTokenRefresh) {\n\t\t\t\tthis.onTokenRefresh({ accessToken, refreshToken: newRefreshToken });\n\t\t\t}\n\n\t\t\treturn true;\n\t\t} catch (_error) {\n\t\t\tawait this.clearTokens();\n\t\t\tif (this.onTokenExpired) {\n\t\t\t\tthis.onTokenExpired();\n\t\t\t}\n\t\t\treturn false;\n\t\t}\n\t}\n\n\tasync getValidAccessToken(): Promise<string | null> {\n\t\tconst accessToken = await this.getAccessToken();\n\n\t\tif (!accessToken) {\n\t\t\treturn null;\n\t\t}\n\n\t\tif (this.isTokenExpired(accessToken)) {\n\t\t\tconst refreshed = await this.refreshTokens();\n\t\t\tif (!refreshed) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn await this.getAccessToken();\n\t\t}\n\n\t\treturn accessToken;\n\t}\n\n\tasync createAuthHeaders(): Promise<Record<string, string>> {\n\t\tconst token = await this.getAccessToken();\n\t\treturn token ? { Authorization: `Bearer ${token}` } : {};\n\t}\n\n\tasync createValidAuthHeaders(): Promise<Record<string, string>> {\n\t\tconst token = await this.getValidAccessToken();\n\t\treturn token ? { Authorization: `Bearer ${token}` } : {};\n\t}\n}\n\nexport { CacheTokenStorage } from './cacheTokenStorage.js';\n"],"mappings":";;AAQA,IAAa,2BAAb,MAA8D;CAC7D,AAAQ;CACR,AAAQ;CAER,YACCA,iBAAyB,gBACzBC,kBAA0B,iBACzB;AACD,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACvB;CAED,iBAAgC;AAC/B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,eAAe;CAChD;CAED,eAAeC,OAAeC,MAAqB;AAClD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,gBAAgB,MAAM;CAChD;CAED,kBAAiC;AAChC,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,gBAAgB;CACjD;CAED,gBAAgBD,OAAeC,MAAqB;AACnD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,iBAAiB,MAAM;CACjD;CAED,cAAoB;AACnB,aAAW,WAAW,YAAa;AACnC,eAAa,WAAW,KAAK,eAAe;AAC5C,eAAa,WAAW,KAAK,gBAAgB;CAC7C;AACD;AAED,IAAa,qBAAb,MAAwD;CACvD,AAAQ,cAA6B;CACrC,AAAQ,eAA8B;CAEtC,iBAAgC;AAC/B,SAAO,KAAK;CACZ;CAED,eAAeD,OAAeC,MAAqB;AAClD,OAAK,cAAc;CACnB;CAED,kBAAiC;AAChC,SAAO,KAAK;CACZ;CAED,gBAAgBD,OAAeC,MAAqB;AACnD,OAAK,eAAe;CACpB;CAED,cAAoB;AACnB,OAAK,cAAc;AACnB,OAAK,eAAe;CACpB;AACD;AAYD,IAAa,cAAb,MAAyB;CACxB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAIR,AAAQ;CAER,YAAYC,UAA8B,CAAE,GAAE;AAC7C,OAAK,UAAU,QAAQ,WAAW,IAAI;AACtC,OAAK,kBAAkB,QAAQ;AAC/B,OAAK,iBAAiB,QAAQ;AAC9B,OAAK,iBAAiB,QAAQ;CAC9B;CAED,MAAM,iBAAyC;AAC9C,SAAO,MAAM,KAAK,QAAQ,gBAAgB;CAC1C;CAED,MAAM,kBAA0C;AAC/C,SAAO,MAAM,KAAK,QAAQ,iBAAiB;CAC3C;CAED,MAAM,UACLC,aACAC,cACAC,WACAC,YACgB;AAChB,QAAM,KAAK,QAAQ,eAAe,aAAa,UAAU;AACzD,MAAI,aACH,OAAM,KAAK,QAAQ,gBAAgB,cAAc,WAAW;CAE7D;CAED,MAAM,cAA6B;AAClC,QAAM,KAAK,QAAQ,aAAa;CAChC;CAED,eAAeN,OAAwB;AACtC,MAAI;GACH,MAAM,QAAQ,MAAM,MAAM,IAAI;GAC9B,MAAM,cAAc,MAAM;AAC1B,QAAK,YAAa,QAAO;GACzB,MAAM,UAAU,KAAK,MAAM,KAAK,YAAY,CAAC;GAC7C,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,UAAO,QAAQ,MAAM;EACrB,QAAO;AACP,UAAO;EACP;CACD;CAED,mBAAmBA,OAA4B;AAC9C,MAAI;GACH,MAAM,QAAQ,MAAM,MAAM,IAAI;GAC9B,MAAM,cAAc,MAAM;AAC1B,QAAK,YAAa,QAAO;GACzB,MAAM,UAAU,KAAK,MAAM,KAAK,YAAY,CAAC;AAC7C,UAAO,IAAI,KAAK,QAAQ,MAAM;EAC9B,QAAO;AACP,UAAO;EACP;CACD;CAED,MAAM,gBAAkC;EACvC,MAAM,eAAe,MAAM,KAAK,iBAAiB;AAEjD,OAAK,iBAAiB,KAAK,gBAC1B,QAAO;AAGR,MAAI;GACH,MAAM,WAAW,MAAM,MAAM,KAAK,iBAAiB;IAClD,QAAQ;IACR,SAAS,EACR,gBAAgB,mBAChB;IACD,MAAM,KAAK,UAAU,EAAE,aAAc,EAAC;GACtC,EAAC;AAEF,QAAK,SAAS,GACb,OAAM,IAAI,MAAM;GAGjB,MAAM,OAAQ,MAAM,SAAS,MAAM;GAInC,MAAM,EAAE,aAAa,cAAc,iBAAiB,GAAG;AAEvD,SAAM,KAAK,UAAU,aAAa,gBAAgB;AAElD,OAAI,KAAK,eACR,MAAK,eAAe;IAAE;IAAa,cAAc;GAAiB,EAAC;AAGpE,UAAO;EACP,SAAQ,QAAQ;AAChB,SAAM,KAAK,aAAa;AACxB,OAAI,KAAK,eACR,MAAK,gBAAgB;AAEtB,UAAO;EACP;CACD;CAED,MAAM,sBAA8C;EACnD,MAAM,cAAc,MAAM,KAAK,gBAAgB;AAE/C,OAAK,YACJ,QAAO;AAGR,MAAI,KAAK,eAAe,YAAY,EAAE;GACrC,MAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,QAAK,UACJ,QAAO;AAER,UAAO,MAAM,KAAK,gBAAgB;EAClC;AAED,SAAO;CACP;CAED,MAAM,oBAAqD;EAC1D,MAAM,QAAQ,MAAM,KAAK,gBAAgB;AACzC,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACxD;CAED,MAAM,yBAA0D;EAC/D,MAAM,QAAQ,MAAM,KAAK,qBAAqB;AAC9C,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACxD;AACD"}

package/dist/client-eidYNJSH.mjs

@@ -1,144 +0,0 @@
-//#region src/client.ts
-var LocalStorageTokenStorage = class {
-	accessTokenKey;
-	refreshTokenKey;
-	constructor(accessTokenKey = "access_token", refreshTokenKey = "refresh_token") {
-		this.accessTokenKey = accessTokenKey;
-		this.refreshTokenKey = refreshTokenKey;
-	}
-	getAccessToken() {
-		if (typeof window === "undefined") return null;
-		return localStorage.getItem(this.accessTokenKey);
-	}
-	setAccessToken(token, _ttl) {
-		if (typeof window === "undefined") return;
-		localStorage.setItem(this.accessTokenKey, token);
-	}
-	getRefreshToken() {
-		if (typeof window === "undefined") return null;
-		return localStorage.getItem(this.refreshTokenKey);
-	}
-	setRefreshToken(token, _ttl) {
-		if (typeof window === "undefined") return;
-		localStorage.setItem(this.refreshTokenKey, token);
-	}
-	clearTokens() {
-		if (typeof window === "undefined") return;
-		localStorage.removeItem(this.accessTokenKey);
-		localStorage.removeItem(this.refreshTokenKey);
-	}
-};
-var MemoryTokenStorage = class {
-	accessToken = null;
-	refreshToken = null;
-	getAccessToken() {
-		return this.accessToken;
-	}
-	setAccessToken(token, _ttl) {
-		this.accessToken = token;
-	}
-	getRefreshToken() {
-		return this.refreshToken;
-	}
-	setRefreshToken(token, _ttl) {
-		this.refreshToken = token;
-	}
-	clearTokens() {
-		this.accessToken = null;
-		this.refreshToken = null;
-	}
-};
-var TokenClient = class {
-	storage;
-	refreshEndpoint;
-	onTokenRefresh;
-	onTokenExpired;
-	constructor(options = {}) {
-		this.storage = options.storage || new LocalStorageTokenStorage();
-		this.refreshEndpoint = options.refreshEndpoint;
-		this.onTokenRefresh = options.onTokenRefresh;
-		this.onTokenExpired = options.onTokenExpired;
-	}
-	async getAccessToken() {
-		return await this.storage.getAccessToken();
-	}
-	async getRefreshToken() {
-		return await this.storage.getRefreshToken();
-	}
-	async setTokens(accessToken, refreshToken, accessTtl, refreshTtl) {
-		await this.storage.setAccessToken(accessToken, accessTtl);
-		if (refreshToken) await this.storage.setRefreshToken(refreshToken, refreshTtl);
-	}
-	async clearTokens() {
-		await this.storage.clearTokens();
-	}
-	isTokenExpired(token) {
-		try {
-			const parts = token.split(".");
-			const payloadPart = parts[1];
-			if (!payloadPart) return true;
-			const payload = JSON.parse(atob(payloadPart));
-			const now = Math.floor(Date.now() / 1e3);
-			return payload.exp < now;
-		} catch {
-			return true;
-		}
-	}
-	getTokenExpiration(token) {
-		try {
-			const parts = token.split(".");
-			const payloadPart = parts[1];
-			if (!payloadPart) return null;
-			const payload = JSON.parse(atob(payloadPart));
-			return new Date(payload.exp * 1e3);
-		} catch {
-			return null;
-		}
-	}
-	async refreshTokens() {
-		const refreshToken = await this.getRefreshToken();
-		if (!refreshToken || !this.refreshEndpoint) return false;
-		try {
-			const response = await fetch(this.refreshEndpoint, {
-				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body: JSON.stringify({ refreshToken })
-			});
-			if (!response.ok) throw new Error("Failed to refresh token");
-			const data = await response.json();
-			const { accessToken, refreshToken: newRefreshToken } = data;
-			await this.setTokens(accessToken, newRefreshToken);
-			if (this.onTokenRefresh) this.onTokenRefresh({
-				accessToken,
-				refreshToken: newRefreshToken
-			});
-			return true;
-		} catch (_error) {
-			await this.clearTokens();
-			if (this.onTokenExpired) this.onTokenExpired();
-			return false;
-		}
-	}
-	async getValidAccessToken() {
-		const accessToken = await this.getAccessToken();
-		if (!accessToken) return null;
-		if (this.isTokenExpired(accessToken)) {
-			const refreshed = await this.refreshTokens();
-			if (!refreshed) return null;
-			return await this.getAccessToken();
-		}
-		return accessToken;
-	}
-	async createAuthHeaders() {
-		const token = await this.getAccessToken();
-		return token ? { Authorization: `Bearer ${token}` } : {};
-	}
-	async createValidAuthHeaders() {
-		const token = await this.getValidAccessToken();
-		return token ? { Authorization: `Bearer ${token}` } : {};
-	}
-};
-
-//#endregion
-export { LocalStorageTokenStorage, MemoryTokenStorage, TokenClient };
-//# sourceMappingURL=client-eidYNJSH.mjs.map

package/dist/client-eidYNJSH.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-eidYNJSH.mjs","names":["accessTokenKey: string","refreshTokenKey: string","token: string","_ttl?: number","options: TokenClientOptions","accessToken: string","refreshToken?: string","accessTtl?: number","refreshTtl?: number"],"sources":["../src/client.ts"],"sourcesContent":["export interface TokenStorage {\n\tgetAccessToken(): Promise<string | null> | string | null;\n\tsetAccessToken(token: string, ttl?: number): Promise<void> | void;\n\tgetRefreshToken(): Promise<string | null> | string | null;\n\tsetRefreshToken(token: string, ttl?: number): Promise<void> | void;\n\tclearTokens(): Promise<void> | void;\n}\n\nexport class LocalStorageTokenStorage implements TokenStorage {\n\tprivate accessTokenKey: string;\n\tprivate refreshTokenKey: string;\n\n\tconstructor(\n\t\taccessTokenKey: string = 'access_token',\n\t\trefreshTokenKey: string = 'refresh_token',\n\t) {\n\t\tthis.accessTokenKey = accessTokenKey;\n\t\tthis.refreshTokenKey = refreshTokenKey;\n\t}\n\n\tgetAccessToken(): string | null {\n\t\tif (typeof window === 'undefined') return null;\n\t\treturn localStorage.getItem(this.accessTokenKey);\n\t}\n\n\tsetAccessToken(token: string, _ttl?: number): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.setItem(this.accessTokenKey, token);\n\t}\n\n\tgetRefreshToken(): string | null {\n\t\tif (typeof window === 'undefined') return null;\n\t\treturn localStorage.getItem(this.refreshTokenKey);\n\t}\n\n\tsetRefreshToken(token: string, _ttl?: number): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.setItem(this.refreshTokenKey, token);\n\t}\n\n\tclearTokens(): void {\n\t\tif (typeof window === 'undefined') return;\n\t\tlocalStorage.removeItem(this.accessTokenKey);\n\t\tlocalStorage.removeItem(this.refreshTokenKey);\n\t}\n}\n\nexport class MemoryTokenStorage implements TokenStorage {\n\tprivate accessToken: string | null = null;\n\tprivate refreshToken: string | null = null;\n\n\tgetAccessToken(): string | null {\n\t\treturn this.accessToken;\n\t}\n\n\tsetAccessToken(token: string, _ttl?: number): void {\n\t\tthis.accessToken = token;\n\t}\n\n\tgetRefreshToken(): string | null {\n\t\treturn this.refreshToken;\n\t}\n\n\tsetRefreshToken(token: string, _ttl?: number): void {\n\t\tthis.refreshToken = token;\n\t}\n\n\tclearTokens(): void {\n\t\tthis.accessToken = null;\n\t\tthis.refreshToken = null;\n\t}\n}\n\nexport interface TokenClientOptions {\n\tstorage?: TokenStorage;\n\trefreshEndpoint?: string;\n\tonTokenRefresh?: (tokens: {\n\t\taccessToken: string;\n\t\trefreshToken?: string;\n\t}) => void;\n\tonTokenExpired?: () => void;\n}\n\nexport class TokenClient {\n\tprivate storage: TokenStorage;\n\tprivate refreshEndpoint?: string;\n\tprivate onTokenRefresh?: (tokens: {\n\t\taccessToken: string;\n\t\trefreshToken?: string;\n\t}) => void;\n\tprivate onTokenExpired?: () => void;\n\n\tconstructor(options: TokenClientOptions = {}) {\n\t\tthis.storage = options.storage || new LocalStorageTokenStorage();\n\t\tthis.refreshEndpoint = options.refreshEndpoint;\n\t\tthis.onTokenRefresh = options.onTokenRefresh;\n\t\tthis.onTokenExpired = options.onTokenExpired;\n\t}\n\n\tasync getAccessToken(): Promise<string | null> {\n\t\treturn await this.storage.getAccessToken();\n\t}\n\n\tasync getRefreshToken(): Promise<string | null> {\n\t\treturn await this.storage.getRefreshToken();\n\t}\n\n\tasync setTokens(\n\t\taccessToken: string,\n\t\trefreshToken?: string,\n\t\taccessTtl?: number,\n\t\trefreshTtl?: number,\n\t): Promise<void> {\n\t\tawait this.storage.setAccessToken(accessToken, accessTtl);\n\t\tif (refreshToken) {\n\t\t\tawait this.storage.setRefreshToken(refreshToken, refreshTtl);\n\t\t}\n\t}\n\n\tasync clearTokens(): Promise<void> {\n\t\tawait this.storage.clearTokens();\n\t}\n\n\tisTokenExpired(token: string): boolean {\n\t\ttry {\n\t\t\tconst parts = token.split('.');\n\t\t\tconst payloadPart = parts[1];\n\t\t\tif (!payloadPart) return true;\n\t\t\tconst payload = JSON.parse(atob(payloadPart));\n\t\t\tconst now = Math.floor(Date.now() / 1000);\n\t\t\treturn payload.exp < now;\n\t\t} catch {\n\t\t\treturn true;\n\t\t}\n\t}\n\n\tgetTokenExpiration(token: string): Date | null {\n\t\ttry {\n\t\t\tconst parts = token.split('.');\n\t\t\tconst payloadPart = parts[1];\n\t\t\tif (!payloadPart) return null;\n\t\t\tconst payload = JSON.parse(atob(payloadPart));\n\t\t\treturn new Date(payload.exp * 1000);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync refreshTokens(): Promise<boolean> {\n\t\tconst refreshToken = await this.getRefreshToken();\n\n\t\tif (!refreshToken || !this.refreshEndpoint) {\n\t\t\treturn false;\n\t\t}\n\n\t\ttry {\n\t\t\tconst response = await fetch(this.refreshEndpoint, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: {\n\t\t\t\t\t'Content-Type': 'application/json',\n\t\t\t\t},\n\t\t\t\tbody: JSON.stringify({ refreshToken }),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tthrow new Error('Failed to refresh token');\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as {\n\t\t\t\taccessToken: string;\n\t\t\t\trefreshToken: string;\n\t\t\t};\n\t\t\tconst { accessToken, refreshToken: newRefreshToken } = data;\n\n\t\t\tawait this.setTokens(accessToken, newRefreshToken);\n\n\t\t\tif (this.onTokenRefresh) {\n\t\t\t\tthis.onTokenRefresh({ accessToken, refreshToken: newRefreshToken });\n\t\t\t}\n\n\t\t\treturn true;\n\t\t} catch (_error) {\n\t\t\tawait this.clearTokens();\n\t\t\tif (this.onTokenExpired) {\n\t\t\t\tthis.onTokenExpired();\n\t\t\t}\n\t\t\treturn false;\n\t\t}\n\t}\n\n\tasync getValidAccessToken(): Promise<string | null> {\n\t\tconst accessToken = await this.getAccessToken();\n\n\t\tif (!accessToken) {\n\t\t\treturn null;\n\t\t}\n\n\t\tif (this.isTokenExpired(accessToken)) {\n\t\t\tconst refreshed = await this.refreshTokens();\n\t\t\tif (!refreshed) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn await this.getAccessToken();\n\t\t}\n\n\t\treturn accessToken;\n\t}\n\n\tasync createAuthHeaders(): Promise<Record<string, string>> {\n\t\tconst token = await this.getAccessToken();\n\t\treturn token ? { Authorization: `Bearer ${token}` } : {};\n\t}\n\n\tasync createValidAuthHeaders(): Promise<Record<string, string>> {\n\t\tconst token = await this.getValidAccessToken();\n\t\treturn token ? { Authorization: `Bearer ${token}` } : {};\n\t}\n}\n\nexport { CacheTokenStorage } from './cacheTokenStorage.js';\n"],"mappings":";AAQA,IAAa,2BAAb,MAA8D;CAC7D,AAAQ;CACR,AAAQ;CAER,YACCA,iBAAyB,gBACzBC,kBAA0B,iBACzB;AACD,OAAK,iBAAiB;AACtB,OAAK,kBAAkB;CACvB;CAED,iBAAgC;AAC/B,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,eAAe;CAChD;CAED,eAAeC,OAAeC,MAAqB;AAClD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,gBAAgB,MAAM;CAChD;CAED,kBAAiC;AAChC,aAAW,WAAW,YAAa,QAAO;AAC1C,SAAO,aAAa,QAAQ,KAAK,gBAAgB;CACjD;CAED,gBAAgBD,OAAeC,MAAqB;AACnD,aAAW,WAAW,YAAa;AACnC,eAAa,QAAQ,KAAK,iBAAiB,MAAM;CACjD;CAED,cAAoB;AACnB,aAAW,WAAW,YAAa;AACnC,eAAa,WAAW,KAAK,eAAe;AAC5C,eAAa,WAAW,KAAK,gBAAgB;CAC7C;AACD;AAED,IAAa,qBAAb,MAAwD;CACvD,AAAQ,cAA6B;CACrC,AAAQ,eAA8B;CAEtC,iBAAgC;AAC/B,SAAO,KAAK;CACZ;CAED,eAAeD,OAAeC,MAAqB;AAClD,OAAK,cAAc;CACnB;CAED,kBAAiC;AAChC,SAAO,KAAK;CACZ;CAED,gBAAgBD,OAAeC,MAAqB;AACnD,OAAK,eAAe;CACpB;CAED,cAAoB;AACnB,OAAK,cAAc;AACnB,OAAK,eAAe;CACpB;AACD;AAYD,IAAa,cAAb,MAAyB;CACxB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAIR,AAAQ;CAER,YAAYC,UAA8B,CAAE,GAAE;AAC7C,OAAK,UAAU,QAAQ,WAAW,IAAI;AACtC,OAAK,kBAAkB,QAAQ;AAC/B,OAAK,iBAAiB,QAAQ;AAC9B,OAAK,iBAAiB,QAAQ;CAC9B;CAED,MAAM,iBAAyC;AAC9C,SAAO,MAAM,KAAK,QAAQ,gBAAgB;CAC1C;CAED,MAAM,kBAA0C;AAC/C,SAAO,MAAM,KAAK,QAAQ,iBAAiB;CAC3C;CAED,MAAM,UACLC,aACAC,cACAC,WACAC,YACgB;AAChB,QAAM,KAAK,QAAQ,eAAe,aAAa,UAAU;AACzD,MAAI,aACH,OAAM,KAAK,QAAQ,gBAAgB,cAAc,WAAW;CAE7D;CAED,MAAM,cAA6B;AAClC,QAAM,KAAK,QAAQ,aAAa;CAChC;CAED,eAAeN,OAAwB;AACtC,MAAI;GACH,MAAM,QAAQ,MAAM,MAAM,IAAI;GAC9B,MAAM,cAAc,MAAM;AAC1B,QAAK,YAAa,QAAO;GACzB,MAAM,UAAU,KAAK,MAAM,KAAK,YAAY,CAAC;GAC7C,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,UAAO,QAAQ,MAAM;EACrB,QAAO;AACP,UAAO;EACP;CACD;CAED,mBAAmBA,OAA4B;AAC9C,MAAI;GACH,MAAM,QAAQ,MAAM,MAAM,IAAI;GAC9B,MAAM,cAAc,MAAM;AAC1B,QAAK,YAAa,QAAO;GACzB,MAAM,UAAU,KAAK,MAAM,KAAK,YAAY,CAAC;AAC7C,UAAO,IAAI,KAAK,QAAQ,MAAM;EAC9B,QAAO;AACP,UAAO;EACP;CACD;CAED,MAAM,gBAAkC;EACvC,MAAM,eAAe,MAAM,KAAK,iBAAiB;AAEjD,OAAK,iBAAiB,KAAK,gBAC1B,QAAO;AAGR,MAAI;GACH,MAAM,WAAW,MAAM,MAAM,KAAK,iBAAiB;IAClD,QAAQ;IACR,SAAS,EACR,gBAAgB,mBAChB;IACD,MAAM,KAAK,UAAU,EAAE,aAAc,EAAC;GACtC,EAAC;AAEF,QAAK,SAAS,GACb,OAAM,IAAI,MAAM;GAGjB,MAAM,OAAQ,MAAM,SAAS,MAAM;GAInC,MAAM,EAAE,aAAa,cAAc,iBAAiB,GAAG;AAEvD,SAAM,KAAK,UAAU,aAAa,gBAAgB;AAElD,OAAI,KAAK,eACR,MAAK,eAAe;IAAE;IAAa,cAAc;GAAiB,EAAC;AAGpE,UAAO;EACP,SAAQ,QAAQ;AAChB,SAAM,KAAK,aAAa;AACxB,OAAI,KAAK,eACR,MAAK,gBAAgB;AAEtB,UAAO;EACP;CACD;CAED,MAAM,sBAA8C;EACnD,MAAM,cAAc,MAAM,KAAK,gBAAgB;AAE/C,OAAK,YACJ,QAAO;AAGR,MAAI,KAAK,eAAe,YAAY,EAAE;GACrC,MAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,QAAK,UACJ,QAAO;AAER,UAAO,MAAM,KAAK,gBAAgB;EAClC;AAED,SAAO;CACP;CAED,MAAM,oBAAqD;EAC1D,MAAM,QAAQ,MAAM,KAAK,gBAAgB;AACzC,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACxD;CAED,MAAM,yBAA0D;EAC/D,MAAM,QAAQ,MAAM,KAAK,qBAAqB;AAC9C,SAAO,QAAQ,EAAE,gBAAgB,SAAS,MAAM,EAAG,IAAG,CAAE;CACxD;AACD"}

package/dist/cookies-Bc6gUjb6.cjs

@@ -1,30 +0,0 @@
-
-//#region src/cookies.ts
-/**
-* Reads one cookie out of a `Cookie` header.
-*
-* The header is a list of `name=value` pairs, so the name has to be matched
-* against a whole pair. Searching the raw header for `name=` instead lets an
-* attacker prefix their own cookie — `evil_session=ATTACKER; session=REAL`
-* contains `session=ATTACKER` — and the first match wins.
-*/
-function readCookie(cookieHeader, name) {
-	if (!cookieHeader) return null;
-	for (const pair of cookieHeader.split(";")) {
-		const separator = pair.indexOf("=");
-		if (separator === -1) continue;
-		if (pair.slice(0, separator).trim() !== name) continue;
-		const value = pair.slice(separator + 1).trim();
-		return value === "" ? null : value;
-	}
-	return null;
-}
-
-//#endregion
-Object.defineProperty(exports, 'readCookie', {
-  enumerable: true,
-  get: function () {
-    return readCookie;
-  }
-});
-//# sourceMappingURL=cookies-Bc6gUjb6.cjs.map

package/dist/cookies-Bc6gUjb6.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"cookies-Bc6gUjb6.cjs","names":["cookieHeader: string | undefined","name: string"],"sources":["../src/cookies.ts"],"sourcesContent":["/**\n * Reads one cookie out of a `Cookie` header.\n *\n * The header is a list of `name=value` pairs, so the name has to be matched\n * against a whole pair. Searching the raw header for `name=` instead lets an\n * attacker prefix their own cookie — `evil_session=ATTACKER; session=REAL`\n * contains `session=ATTACKER` — and the first match wins.\n */\nexport function readCookie(\n\tcookieHeader: string | undefined,\n\tname: string,\n): string | null {\n\tif (!cookieHeader) {\n\t\treturn null;\n\t}\n\n\tfor (const pair of cookieHeader.split(';')) {\n\t\tconst separator = pair.indexOf('=');\n\t\tif (separator === -1) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (pair.slice(0, separator).trim() !== name) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst value = pair.slice(separator + 1).trim();\n\t\treturn value === '' ? null : value;\n\t}\n\n\treturn null;\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,WACfA,cACAC,MACgB;AAChB,MAAK,aACJ,QAAO;AAGR,MAAK,MAAM,QAAQ,aAAa,MAAM,IAAI,EAAE;EAC3C,MAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,MAAI,cAAc,GACjB;AAGD,MAAI,KAAK,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KACvC;EAGD,MAAM,QAAQ,KAAK,MAAM,YAAY,EAAE,CAAC,MAAM;AAC9C,SAAO,UAAU,KAAK,OAAO;CAC7B;AAED,QAAO;AACP"}

package/dist/cookies-C80f8JtE.mjs

@@ -1,24 +0,0 @@
-//#region src/cookies.ts
-/**
-* Reads one cookie out of a `Cookie` header.
-*
-* The header is a list of `name=value` pairs, so the name has to be matched
-* against a whole pair. Searching the raw header for `name=` instead lets an
-* attacker prefix their own cookie — `evil_session=ATTACKER; session=REAL`
-* contains `session=ATTACKER` — and the first match wins.
-*/
-function readCookie(cookieHeader, name) {
-	if (!cookieHeader) return null;
-	for (const pair of cookieHeader.split(";")) {
-		const separator = pair.indexOf("=");
-		if (separator === -1) continue;
-		if (pair.slice(0, separator).trim() !== name) continue;
-		const value = pair.slice(separator + 1).trim();
-		return value === "" ? null : value;
-	}
-	return null;
-}
-
-//#endregion
-export { readCookie };
-//# sourceMappingURL=cookies-C80f8JtE.mjs.map

package/dist/cookies-C80f8JtE.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"cookies-C80f8JtE.mjs","names":["cookieHeader: string | undefined","name: string"],"sources":["../src/cookies.ts"],"sourcesContent":["/**\n * Reads one cookie out of a `Cookie` header.\n *\n * The header is a list of `name=value` pairs, so the name has to be matched\n * against a whole pair. Searching the raw header for `name=` instead lets an\n * attacker prefix their own cookie — `evil_session=ATTACKER; session=REAL`\n * contains `session=ATTACKER` — and the first match wins.\n */\nexport function readCookie(\n\tcookieHeader: string | undefined,\n\tname: string,\n): string | null {\n\tif (!cookieHeader) {\n\t\treturn null;\n\t}\n\n\tfor (const pair of cookieHeader.split(';')) {\n\t\tconst separator = pair.indexOf('=');\n\t\tif (separator === -1) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (pair.slice(0, separator).trim() !== name) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst value = pair.slice(separator + 1).trim();\n\t\treturn value === '' ? null : value;\n\t}\n\n\treturn null;\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,WACfA,cACAC,MACgB;AAChB,MAAK,aACJ,QAAO;AAGR,MAAK,MAAM,QAAQ,aAAa,MAAM,IAAI,EAAE;EAC3C,MAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,MAAI,cAAc,GACjB;AAGD,MAAI,KAAK,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KACvC;EAGD,MAAM,QAAQ,KAAK,MAAM,YAAY,EAAE,CAAC,MAAM;AAC9C,SAAO,UAAU,KAAK,OAAO;CAC7B;AAED,QAAO;AACP"}

package/dist/jwt-3eIuY2dg.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-3eIuY2dg.d.cts","names":[],"sources":["../src/jwt.ts"],"sourcesContent":[],"mappings":";;AAKA;AAaA;AAUiB,UAvBA,SAAA,CAuBa;EAOlB,GAAA,CAAA,EAAA,MAAS;EAAA,GAAA,CAAA,EAAA,MAAA;EAAA,GAAG,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAe,GAAG,CAAA,EAAA,MAAA;EAAa,GAAA,CAAA,EAAA,MAAA;EAKtC,GAAA,CAAA,EAAA,MAAA;EAMD,GAAA,CAAA,EAAA,MAAA;;;;AAAwD;AAO3D,UAnCI,eAAA,CAmCO;EAAA,MAAA,EAAA,MAAA;EAAA,MAAiB,CAAA,EAAA,MAAA;EAAS,QAAG,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAS,UAIxB,CAAA,EAAA,MAAA,EAAA;;;;;AA2BK,UAxD1B,aAAA,CAwD0B;EAiB3B,OAAA,EAAA,MAAS;EAAA,MAAA,CAAA,EAAA,MAAA;EAAA,QAAiB,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAS,UAAG,CAAA,EAAA,MAAA,EAAA;;AAE5C,KApEE,SAAA,GAAY,eAoEd,GApEgC,aAoEhC;;;;UA/DO,sBAAA;;;;;iBAMD,YAAA,SAAqB,sBAAsB;;;;cAO9C,4BAA4B,YAAY;;;;sBAIf;yBASR,QAAQ;+BAkBF,QAAQ;;;;;;;iBAiB5B,0BAA0B,YAAY,2BAEnD"}

package/dist/jwt-bZR2_t8F.mjs

@@ -1,52 +0,0 @@
-import * as jose from "jose";
-
-//#region src/jwt.ts
-function isJwksConfig(config) {
-	return "jwksUri" in config;
-}
-/**
-* JWT Verifier with JWKS caching
-*/
-var JwtVerifier = class {
-	jwks = null;
-	verifyOptions;
-	constructor(config) {
-		this.config = config;
-		this.verifyOptions = {
-			issuer: config.issuer,
-			audience: config.audience,
-			algorithms: config.algorithms ?? (isJwksConfig(config) ? void 0 : ["HS256"])
-		};
-	}
-	async verify(token) {
-		if (isJwksConfig(this.config)) {
-			if (!this.jwks) this.jwks = jose.createRemoteJWKSet(new URL(this.config.jwksUri));
-			const { payload: payload$1 } = await jose.jwtVerify(token, this.jwks, this.verifyOptions);
-			return payload$1;
-		}
-		const secret = new TextEncoder().encode(this.config.secret);
-		const { payload } = await jose.jwtVerify(token, secret, this.verifyOptions);
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.jwks = null;
-	}
-};
-/**
-* Decode a JWT without verification
-* WARNING: This does NOT verify the token signature!
-*/
-function decodeJwt(token) {
-	return jose.decodeJwt(token);
-}
-
-//#endregion
-export { JwtVerifier, decodeJwt, isJwksConfig };
-//# sourceMappingURL=jwt-bZR2_t8F.mjs.map

package/dist/jwt-bZR2_t8F.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-bZR2_t8F.mjs","names":["config: JwtConfig","token: string","payload"],"sources":["../src/jwt.ts"],"sourcesContent":["import * as jose from 'jose';\n\n/**\n * Standard JWT claims\n */\nexport interface JwtClaims {\n\tsub?: string;\n\tiss?: string;\n\taud?: string | string[];\n\texp?: number;\n\tiat?: number;\n\tnbf?: number;\n\tjti?: string;\n}\n\n/**\n * Configuration for JWT verification with a symmetric secret\n */\nexport interface JwtSecretConfig {\n\tsecret: string;\n\tissuer?: string;\n\taudience?: string | string[];\n\talgorithms?: string[];\n}\n\n/**\n * Configuration for JWT verification with JWKS\n */\nexport interface JwtJwksConfig {\n\tjwksUri: string;\n\tissuer?: string;\n\taudience?: string | string[];\n\talgorithms?: string[];\n}\n\nexport type JwtConfig = JwtSecretConfig | JwtJwksConfig;\n\n/**\n * Options for token extraction from requests\n */\nexport interface TokenExtractionOptions {\n\theaderName?: string;\n\tcookieName?: string;\n\ttokenPrefix?: string;\n}\n\nexport function isJwksConfig(config: JwtConfig): config is JwtJwksConfig {\n\treturn 'jwksUri' in config;\n}\n\n/**\n * JWT Verifier with JWKS caching\n */\nexport class JwtVerifier<TClaims extends JwtClaims = JwtClaims> {\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly verifyOptions: jose.JWTVerifyOptions;\n\n\tconstructor(private readonly config: JwtConfig) {\n\t\tthis.verifyOptions = {\n\t\t\tissuer: config.issuer,\n\t\t\taudience: config.audience,\n\t\t\talgorithms:\n\t\t\t\tconfig.algorithms ?? (isJwksConfig(config) ? undefined : ['HS256']),\n\t\t};\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tif (isJwksConfig(this.config)) {\n\t\t\tif (!this.jwks) {\n\t\t\t\tthis.jwks = jose.createRemoteJWKSet(new URL(this.config.jwksUri));\n\t\t\t}\n\t\t\tconst { payload } = await jose.jwtVerify(\n\t\t\t\ttoken,\n\t\t\t\tthis.jwks,\n\t\t\t\tthis.verifyOptions,\n\t\t\t);\n\t\t\treturn payload as unknown as TClaims;\n\t\t}\n\n\t\tconst secret = new TextEncoder().encode(this.config.secret);\n\t\tconst { payload } = await jose.jwtVerify(token, secret, this.verifyOptions);\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.jwks = null;\n\t}\n}\n\n/**\n * Decode a JWT without verification\n * WARNING: This does NOT verify the token signature!\n */\nexport function decodeJwt<TClaims extends JwtClaims = JwtClaims>(\n\ttoken: string,\n): TClaims {\n\treturn jose.decodeJwt(token) as unknown as TClaims;\n}\n"],"mappings":";;;AA8CA,SAAgB,aAAaA,QAA4C;AACxE,QAAO,aAAa;AACpB;;;;AAKD,IAAa,cAAb,MAAgE;CAC/D,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAmB;EAAnB;AAC5B,OAAK,gBAAgB;GACpB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,YACC,OAAO,eAAe,aAAa,OAAO,YAAe,CAAC,OAAQ;EACnE;CACD;CAED,MAAM,OAAOC,OAAiC;AAC7C,MAAI,aAAa,KAAK,OAAO,EAAE;AAC9B,QAAK,KAAK,KACT,MAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,OAAO,SAAS;GAElE,MAAM,EAAE,oBAAS,GAAG,MAAM,KAAK,UAC9B,OACA,KAAK,MACL,KAAK,cACL;AACD,UAAOC;EACP;EAED,MAAM,SAAS,IAAI,cAAc,OAAO,KAAK,OAAO,OAAO;EAC3D,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,QAAQ,KAAK,cAAc;AAC3E,SAAO;CACP;CAED,MAAM,aAAaD,OAAwC;AAC1D,MAAI;AACH,UAAO,MAAM,KAAK,OAAO,MAAM;EAC/B,QAAO;AACP,UAAO;EACP;CACD;CAED,aAAmB;AAClB,OAAK,OAAO;CACZ;AACD;;;;;AAMD,SAAgB,UACfA,OACU;AACV,QAAO,KAAK,UAAU,MAAM;AAC5B"}