@geekmidas/auth 10.0.0-alpha.2 → 10.0.0-alpha.20

package/dist/jwt-clq6I6vG.cjs

@@ -1,70 +0,0 @@
-const require_chunk = require('./chunk-CUT6urMc.cjs');
-const jose = require_chunk.__toESM(require("jose"));
-
-//#region src/jwt.ts
-function isJwksConfig(config) {
-	return "jwksUri" in config;
-}
-/**
-* JWT Verifier with JWKS caching
-*/
-var JwtVerifier = class {
-	jwks = null;
-	verifyOptions;
-	constructor(config) {
-		this.config = config;
-		this.verifyOptions = {
-			issuer: config.issuer,
-			audience: config.audience,
-			algorithms: config.algorithms ?? (isJwksConfig(config) ? void 0 : ["HS256"])
-		};
-	}
-	async verify(token) {
-		if (isJwksConfig(this.config)) {
-			if (!this.jwks) this.jwks = jose.createRemoteJWKSet(new URL(this.config.jwksUri));
-			const { payload: payload$1 } = await jose.jwtVerify(token, this.jwks, this.verifyOptions);
-			return payload$1;
-		}
-		const secret = new TextEncoder().encode(this.config.secret);
-		const { payload } = await jose.jwtVerify(token, secret, this.verifyOptions);
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.jwks = null;
-	}
-};
-/**
-* Decode a JWT without verification
-* WARNING: This does NOT verify the token signature!
-*/
-function decodeJwt(token) {
-	return jose.decodeJwt(token);
-}
-
-//#endregion
-Object.defineProperty(exports, 'JwtVerifier', {
-  enumerable: true,
-  get: function () {
-    return JwtVerifier;
-  }
-});
-Object.defineProperty(exports, 'decodeJwt', {
-  enumerable: true,
-  get: function () {
-    return decodeJwt;
-  }
-});
-Object.defineProperty(exports, 'isJwksConfig', {
-  enumerable: true,
-  get: function () {
-    return isJwksConfig;
-  }
-});
-//# sourceMappingURL=jwt-clq6I6vG.cjs.map

package/dist/jwt-clq6I6vG.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-clq6I6vG.cjs","names":["config: JwtConfig","token: string","payload"],"sources":["../src/jwt.ts"],"sourcesContent":["import * as jose from 'jose';\n\n/**\n * Standard JWT claims\n */\nexport interface JwtClaims {\n\tsub?: string;\n\tiss?: string;\n\taud?: string | string[];\n\texp?: number;\n\tiat?: number;\n\tnbf?: number;\n\tjti?: string;\n}\n\n/**\n * Configuration for JWT verification with a symmetric secret\n */\nexport interface JwtSecretConfig {\n\tsecret: string;\n\tissuer?: string;\n\taudience?: string | string[];\n\talgorithms?: string[];\n}\n\n/**\n * Configuration for JWT verification with JWKS\n */\nexport interface JwtJwksConfig {\n\tjwksUri: string;\n\tissuer?: string;\n\taudience?: string | string[];\n\talgorithms?: string[];\n}\n\nexport type JwtConfig = JwtSecretConfig | JwtJwksConfig;\n\n/**\n * Options for token extraction from requests\n */\nexport interface TokenExtractionOptions {\n\theaderName?: string;\n\tcookieName?: string;\n\ttokenPrefix?: string;\n}\n\nexport function isJwksConfig(config: JwtConfig): config is JwtJwksConfig {\n\treturn 'jwksUri' in config;\n}\n\n/**\n * JWT Verifier with JWKS caching\n */\nexport class JwtVerifier<TClaims extends JwtClaims = JwtClaims> {\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly verifyOptions: jose.JWTVerifyOptions;\n\n\tconstructor(private readonly config: JwtConfig) {\n\t\tthis.verifyOptions = {\n\t\t\tissuer: config.issuer,\n\t\t\taudience: config.audience,\n\t\t\talgorithms:\n\t\t\t\tconfig.algorithms ?? (isJwksConfig(config) ? undefined : ['HS256']),\n\t\t};\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tif (isJwksConfig(this.config)) {\n\t\t\tif (!this.jwks) {\n\t\t\t\tthis.jwks = jose.createRemoteJWKSet(new URL(this.config.jwksUri));\n\t\t\t}\n\t\t\tconst { payload } = await jose.jwtVerify(\n\t\t\t\ttoken,\n\t\t\t\tthis.jwks,\n\t\t\t\tthis.verifyOptions,\n\t\t\t);\n\t\t\treturn payload as unknown as TClaims;\n\t\t}\n\n\t\tconst secret = new TextEncoder().encode(this.config.secret);\n\t\tconst { payload } = await jose.jwtVerify(token, secret, this.verifyOptions);\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.jwks = null;\n\t}\n}\n\n/**\n * Decode a JWT without verification\n * WARNING: This does NOT verify the token signature!\n */\nexport function decodeJwt<TClaims extends JwtClaims = JwtClaims>(\n\ttoken: string,\n): TClaims {\n\treturn jose.decodeJwt(token) as unknown as TClaims;\n}\n"],"mappings":";;;;AA8CA,SAAgB,aAAaA,QAA4C;AACxE,QAAO,aAAa;AACpB;;;;AAKD,IAAa,cAAb,MAAgE;CAC/D,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAmB;EAAnB;AAC5B,OAAK,gBAAgB;GACpB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,YACC,OAAO,eAAe,aAAa,OAAO,YAAe,CAAC,OAAQ;EACnE;CACD;CAED,MAAM,OAAOC,OAAiC;AAC7C,MAAI,aAAa,KAAK,OAAO,EAAE;AAC9B,QAAK,KAAK,KACT,MAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,OAAO,SAAS;GAElE,MAAM,EAAE,oBAAS,GAAG,MAAM,KAAK,UAC9B,OACA,KAAK,MACL,KAAK,cACL;AACD,UAAOC;EACP;EAED,MAAM,SAAS,IAAI,cAAc,OAAO,KAAK,OAAO,OAAO;EAC3D,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,QAAQ,KAAK,cAAc;AAC3E,SAAO;CACP;CAED,MAAM,aAAaD,OAAwC;AAC1D,MAAI;AACH,UAAO,MAAM,KAAK,OAAO,MAAM;EAC/B,QAAO;AACP,UAAO;EACP;CACD;CAED,aAAmB;AAClB,OAAK,OAAO;CACZ;AACD;;;;;AAMD,SAAgB,UACfA,OACU;AACV,QAAO,KAAK,UAAU,MAAM;AAC5B"}

package/dist/jwt-kejix7rd.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-kejix7rd.d.mts","names":[],"sources":["../src/jwt.ts"],"sourcesContent":[],"mappings":";;AAKA;AAaA;AAUiB,UAvBA,SAAA,CAuBa;EAOlB,GAAA,CAAA,EAAA,MAAS;EAAA,GAAA,CAAA,EAAA,MAAA;EAAA,GAAG,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAe,GAAG,CAAA,EAAA,MAAA;EAAa,GAAA,CAAA,EAAA,MAAA;EAKtC,GAAA,CAAA,EAAA,MAAA;EAMD,GAAA,CAAA,EAAA,MAAA;;;;AAAwD;AAO3D,UAnCI,eAAA,CAmCO;EAAA,MAAA,EAAA,MAAA;EAAA,MAAiB,CAAA,EAAA,MAAA;EAAS,QAAG,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAS,UAIxB,CAAA,EAAA,MAAA,EAAA;;;;;AA2BK,UAxD1B,aAAA,CAwD0B;EAiB3B,OAAA,EAAA,MAAS;EAAA,MAAA,CAAA,EAAA,MAAA;EAAA,QAAiB,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA;EAAS,UAAG,CAAA,EAAA,MAAA,EAAA;;AAE5C,KApEE,SAAA,GAAY,eAoEd,GApEgC,aAoEhC;;;;UA/DO,sBAAA;;;;;iBAMD,YAAA,SAAqB,sBAAsB;;;;cAO9C,4BAA4B,YAAY;;;;sBAIf;yBASR,QAAQ;+BAkBF,QAAQ;;;;;;;iBAiB5B,0BAA0B,YAAY,2BAEnD"}

package/dist/oidc-BYHREHir.mjs

@@ -1,62 +0,0 @@
-import * as jose from "jose";
-
-//#region src/oidc.ts
-/**
-* OIDC Verifier with auto-discovery and caching
-*/
-var OidcVerifier = class {
-	discovery = null;
-	jwks = null;
-	discoveryUrl;
-	constructor(config) {
-		this.config = config;
-		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
-	}
-	async getDiscovery() {
-		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
-		const response = await fetch(this.discoveryUrl);
-		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
-		this.discovery = await response.json();
-		return this.discovery;
-	}
-	async getJwks() {
-		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
-		const disc = await this.getDiscovery();
-		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
-		return this.jwks;
-	}
-	async verify(token) {
-		const key = await this.getJwks();
-		const { payload } = await jose.jwtVerify(token, key, {
-			issuer: this.config.issuer,
-			audience: this.config.audience
-		});
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	async fetchUserInfo(token) {
-		try {
-			const disc = await this.getDiscovery();
-			if (!disc.userinfo_endpoint) return null;
-			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
-			if (!response.ok) return null;
-			return await response.json();
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.discovery = null;
-		this.jwks = null;
-	}
-};
-
-//#endregion
-export { OidcVerifier };
-//# sourceMappingURL=oidc-BYHREHir.mjs.map

package/dist/oidc-BYHREHir.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc-BYHREHir.mjs","names":["config: OidcConfig","token: string"],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n\tnonce?: string;\n\tauth_time?: number;\n\tat_hash?: string;\n\tc_hash?: string;\n\tazp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n\tsub: string;\n\tname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n\tmiddle_name?: string;\n\tnickname?: string;\n\tpreferred_username?: string;\n\tprofile?: string;\n\tpicture?: string;\n\twebsite?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tgender?: string;\n\tbirthdate?: string;\n\tzoneinfo?: string;\n\tlocale?: string;\n\tphone_number?: string;\n\tphone_number_verified?: boolean;\n\taddress?: {\n\t\tformatted?: string;\n\t\tstreet_address?: string;\n\t\tlocality?: string;\n\t\tregion?: string;\n\t\tpostal_code?: string;\n\t\tcountry?: string;\n\t};\n\tupdated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n\tissuer: string;\n\tauthorization_endpoint: string;\n\ttoken_endpoint: string;\n\tuserinfo_endpoint?: string;\n\tjwks_uri: string;\n\tscopes_supported?: string[];\n\tresponse_types_supported: string[];\n\tclaims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n\tissuer: string;\n\taudience: string | string[];\n\tcacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n\tTClaims extends OidcClaims = OidcClaims,\n\tTUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n\tprivate discovery: OidcDiscovery | null = null;\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly discoveryUrl: string;\n\n\tconstructor(private readonly config: OidcConfig) {\n\t\tthis.discoveryUrl = config.issuer.endsWith('/')\n\t\t\t? `${config.issuer}.well-known/openid-configuration`\n\t\t\t: `${config.issuer}/.well-known/openid-configuration`;\n\t}\n\n\tasync getDiscovery(): Promise<OidcDiscovery> {\n\t\tif (this.discovery && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.discovery;\n\t\t}\n\n\t\tconst response = await fetch(this.discoveryUrl);\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n\t\t}\n\n\t\tthis.discovery = (await response.json()) as OidcDiscovery;\n\t\treturn this.discovery;\n\t}\n\n\tprivate async getJwks(): Promise<jose.JWTVerifyGetKey> {\n\t\tif (this.jwks && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.jwks;\n\t\t}\n\n\t\tconst disc = await this.getDiscovery();\n\t\tthis.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n\t\treturn this.jwks;\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tconst key = await this.getJwks();\n\t\tconst { payload } = await jose.jwtVerify(token, key, {\n\t\t\tissuer: this.config.issuer,\n\t\t\taudience: this.config.audience,\n\t\t});\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync fetchUserInfo(token: string): Promise<TUserInfo | null> {\n\t\ttry {\n\t\t\tconst disc = await this.getDiscovery();\n\t\t\tif (!disc.userinfo_endpoint) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tconst response = await fetch(disc.userinfo_endpoint, {\n\t\t\t\theaders: { Authorization: `Bearer ${token}` },\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await response.json()) as TUserInfo;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.discovery = null;\n\t\tthis.jwks = null;\n\t}\n}\n"],"mappings":";;;;;;AA2EA,IAAa,eAAb,MAGE;CACD,AAAQ,YAAkC;CAC1C,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAoB;EAApB;AAC5B,OAAK,eAAe,OAAO,OAAO,SAAS,IAAI,IAC3C,EAAE,OAAO,OAAO,qCAChB,EAAE,OAAO,OAAO;CACpB;CAED,MAAM,eAAuC;AAC5C,MAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,MACpD,QAAO,KAAK;EAGb,MAAM,WAAW,MAAM,MAAM,KAAK,aAAa;AAC/C,OAAK,SAAS,GACb,OAAM,IAAI,OAAO,kCAAkC,SAAS,WAAW;AAGxE,OAAK,YAAa,MAAM,SAAS,MAAM;AACvC,SAAO,KAAK;CACZ;CAED,MAAc,UAAyC;AACtD,MAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,MAC/C,QAAO,KAAK;EAGb,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,OAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,UAAU;AAC3D,SAAO,KAAK;CACZ;CAED,MAAM,OAAOC,OAAiC;EAC7C,MAAM,MAAM,MAAM,KAAK,SAAS;EAChC,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,KAAK;GACpD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACtB,EAAC;AACF,SAAO;CACP;CAED,MAAM,aAAaA,OAAwC;AAC1D,MAAI;AACH,UAAO,MAAM,KAAK,OAAO,MAAM;EAC/B,QAAO;AACP,UAAO;EACP;CACD;CAED,MAAM,cAAcA,OAA0C;AAC7D,MAAI;GACH,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,QAAK,KAAK,kBACT,QAAO;GAGR,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACpD,SAAS,EAAE,gBAAgB,SAAS,MAAM,EAAG,EAC7C,EAAC;AAEF,QAAK,SAAS,GACb,QAAO;AAGR,UAAQ,MAAM,SAAS,MAAM;EAC7B,QAAO;AACP,UAAO;EACP;CACD;CAED,aAAmB;AAClB,OAAK,YAAY;AACjB,OAAK,OAAO;CACZ;AACD"}

package/dist/oidc-Ca7GYwmM.d.mts

@@ -1,87 +0,0 @@
-import { JwtClaims } from "./jwt-kejix7rd.mjs";
-
-//#region src/oidc.d.ts
-
-/**
- * Standard OIDC claims (extends JWT claims)
- */
-interface OidcClaims extends JwtClaims {
-  nonce?: string;
-  auth_time?: number;
-  at_hash?: string;
-  c_hash?: string;
-  azp?: string;
-}
-/**
- * Standard OIDC user info claims
- */
-interface OidcUserInfo {
-  sub: string;
-  name?: string;
-  given_name?: string;
-  family_name?: string;
-  middle_name?: string;
-  nickname?: string;
-  preferred_username?: string;
-  profile?: string;
-  picture?: string;
-  website?: string;
-  email?: string;
-  email_verified?: boolean;
-  gender?: string;
-  birthdate?: string;
-  zoneinfo?: string;
-  locale?: string;
-  phone_number?: string;
-  phone_number_verified?: boolean;
-  address?: {
-    formatted?: string;
-    street_address?: string;
-    locality?: string;
-    region?: string;
-    postal_code?: string;
-    country?: string;
-  };
-  updated_at?: number;
-}
-/**
- * OIDC Discovery document
- */
-interface OidcDiscovery {
-  issuer: string;
-  authorization_endpoint: string;
-  token_endpoint: string;
-  userinfo_endpoint?: string;
-  jwks_uri: string;
-  scopes_supported?: string[];
-  response_types_supported: string[];
-  claims_supported?: string[];
-}
-/**
- * Configuration for OIDC verification
- */
-interface OidcConfig {
-  issuer: string;
-  audience: string | string[];
-  cacheDiscovery?: boolean;
-}
-/**
- * OIDC Verifier with auto-discovery and caching
- */
-declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
-  private readonly config;
-  private discovery;
-  private jwks;
-  private readonly discoveryUrl;
-  constructor(config: OidcConfig);
-  getDiscovery(): Promise<OidcDiscovery>;
-  private getJwks;
-  verify(token: string): Promise<TClaims>;
-  verifyOrNull(token: string): Promise<TClaims | null>;
-  fetchUserInfo(token: string): Promise<TUserInfo | null>;
-  clearCache(): void;
-}
-//# sourceMappingURL=oidc.d.ts.map
-//#endregion
-export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
-//# sourceMappingURL=oidc-Ca7GYwmM.d.mts.map

package/dist/oidc-Ca7GYwmM.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc-Ca7GYwmM.d.mts","names":[],"sources":["../src/oidc.ts"],"sourcesContent":[],"mappings":";;;;;AAQA;AAWA;AAiCiB,UA5CA,UAAA,SAAmB,SA4CN,CAAA;EAcb,KAAA,CAAA,EAAA,MAAU;EASd,SAAA,CAAA,EAAA,MAAY;EAAA,OAAA,CAAA,EAAA,MAAA;EAAA,MACR,CAAA,EAAA,MAAA;EAAU,GAAG,CAAA,EAAA,MAAA;;;;;AAaP,UAtEN,YAAA,CAsEM;EAAO,GAwBQ,EAAA,MAAA;EAAO,IAAf,CAAA,EAAA,MAAA;EAAO,UASO,CAAA,EAAA,MAAA;EAAO,WAAf,CAAA,EAAA,MAAA;EAAO,WAQE,CAAA,EAAA,MAAA;EAAS,QAAjB,CAAA,EAAA,MAAA;EAAO,kBAAA,CAAA,EAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;UA9E3B,aAAA;;;;;;;;;;;;;UAcA,UAAA;;;;;;;;cASJ,6BACI,aAAa,8BACX,eAAe;;;;;sBAMI;kBAMf,QAAQ;;yBAwBD,QAAQ;+BASF,QAAQ;gCAQP,QAAQ"}

package/dist/oidc-ChA17wLB.d.cts

@@ -1,87 +0,0 @@
-import { JwtClaims } from "./jwt-3eIuY2dg.cjs";
-
-//#region src/oidc.d.ts
-
-/**
- * Standard OIDC claims (extends JWT claims)
- */
-interface OidcClaims extends JwtClaims {
-  nonce?: string;
-  auth_time?: number;
-  at_hash?: string;
-  c_hash?: string;
-  azp?: string;
-}
-/**
- * Standard OIDC user info claims
- */
-interface OidcUserInfo {
-  sub: string;
-  name?: string;
-  given_name?: string;
-  family_name?: string;
-  middle_name?: string;
-  nickname?: string;
-  preferred_username?: string;
-  profile?: string;
-  picture?: string;
-  website?: string;
-  email?: string;
-  email_verified?: boolean;
-  gender?: string;
-  birthdate?: string;
-  zoneinfo?: string;
-  locale?: string;
-  phone_number?: string;
-  phone_number_verified?: boolean;
-  address?: {
-    formatted?: string;
-    street_address?: string;
-    locality?: string;
-    region?: string;
-    postal_code?: string;
-    country?: string;
-  };
-  updated_at?: number;
-}
-/**
- * OIDC Discovery document
- */
-interface OidcDiscovery {
-  issuer: string;
-  authorization_endpoint: string;
-  token_endpoint: string;
-  userinfo_endpoint?: string;
-  jwks_uri: string;
-  scopes_supported?: string[];
-  response_types_supported: string[];
-  claims_supported?: string[];
-}
-/**
- * Configuration for OIDC verification
- */
-interface OidcConfig {
-  issuer: string;
-  audience: string | string[];
-  cacheDiscovery?: boolean;
-}
-/**
- * OIDC Verifier with auto-discovery and caching
- */
-declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
-  private readonly config;
-  private discovery;
-  private jwks;
-  private readonly discoveryUrl;
-  constructor(config: OidcConfig);
-  getDiscovery(): Promise<OidcDiscovery>;
-  private getJwks;
-  verify(token: string): Promise<TClaims>;
-  verifyOrNull(token: string): Promise<TClaims | null>;
-  fetchUserInfo(token: string): Promise<TUserInfo | null>;
-  clearCache(): void;
-}
-//# sourceMappingURL=oidc.d.ts.map
-//#endregion
-export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
-//# sourceMappingURL=oidc-ChA17wLB.d.cts.map

package/dist/oidc-ChA17wLB.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc-ChA17wLB.d.cts","names":[],"sources":["../src/oidc.ts"],"sourcesContent":[],"mappings":";;;;;AAQA;AAWA;AAiCiB,UA5CA,UAAA,SAAmB,SA4CN,CAAA;EAcb,KAAA,CAAA,EAAA,MAAU;EASd,SAAA,CAAA,EAAA,MAAY;EAAA,OAAA,CAAA,EAAA,MAAA;EAAA,MACR,CAAA,EAAA,MAAA;EAAU,GAAG,CAAA,EAAA,MAAA;;;;;AAaP,UAtEN,YAAA,CAsEM;EAAO,GAwBQ,EAAA,MAAA;EAAO,IAAf,CAAA,EAAA,MAAA;EAAO,UASO,CAAA,EAAA,MAAA;EAAO,WAAf,CAAA,EAAA,MAAA;EAAO,WAQE,CAAA,EAAA,MAAA;EAAS,QAAjB,CAAA,EAAA,MAAA;EAAO,kBAAA,CAAA,EAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;UA9E3B,aAAA;;;;;;;;;;;;;UAcA,UAAA;;;;;;;;cASJ,6BACI,aAAa,8BACX,eAAe;;;;;sBAMI;kBAMf,QAAQ;;yBAwBD,QAAQ;+BASF,QAAQ;gCAQP,QAAQ"}

package/dist/oidc-jdMfVyyC.cjs

@@ -1,68 +0,0 @@
-const require_chunk = require('./chunk-CUT6urMc.cjs');
-const jose = require_chunk.__toESM(require("jose"));
-
-//#region src/oidc.ts
-/**
-* OIDC Verifier with auto-discovery and caching
-*/
-var OidcVerifier = class {
-	discovery = null;
-	jwks = null;
-	discoveryUrl;
-	constructor(config) {
-		this.config = config;
-		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
-	}
-	async getDiscovery() {
-		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
-		const response = await fetch(this.discoveryUrl);
-		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
-		this.discovery = await response.json();
-		return this.discovery;
-	}
-	async getJwks() {
-		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
-		const disc = await this.getDiscovery();
-		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
-		return this.jwks;
-	}
-	async verify(token) {
-		const key = await this.getJwks();
-		const { payload } = await jose.jwtVerify(token, key, {
-			issuer: this.config.issuer,
-			audience: this.config.audience
-		});
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	async fetchUserInfo(token) {
-		try {
-			const disc = await this.getDiscovery();
-			if (!disc.userinfo_endpoint) return null;
-			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
-			if (!response.ok) return null;
-			return await response.json();
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.discovery = null;
-		this.jwks = null;
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'OidcVerifier', {
-  enumerable: true,
-  get: function () {
-    return OidcVerifier;
-  }
-});
-//# sourceMappingURL=oidc-jdMfVyyC.cjs.map

package/dist/oidc-jdMfVyyC.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc-jdMfVyyC.cjs","names":["config: OidcConfig","token: string"],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n\tnonce?: string;\n\tauth_time?: number;\n\tat_hash?: string;\n\tc_hash?: string;\n\tazp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n\tsub: string;\n\tname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n\tmiddle_name?: string;\n\tnickname?: string;\n\tpreferred_username?: string;\n\tprofile?: string;\n\tpicture?: string;\n\twebsite?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tgender?: string;\n\tbirthdate?: string;\n\tzoneinfo?: string;\n\tlocale?: string;\n\tphone_number?: string;\n\tphone_number_verified?: boolean;\n\taddress?: {\n\t\tformatted?: string;\n\t\tstreet_address?: string;\n\t\tlocality?: string;\n\t\tregion?: string;\n\t\tpostal_code?: string;\n\t\tcountry?: string;\n\t};\n\tupdated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n\tissuer: string;\n\tauthorization_endpoint: string;\n\ttoken_endpoint: string;\n\tuserinfo_endpoint?: string;\n\tjwks_uri: string;\n\tscopes_supported?: string[];\n\tresponse_types_supported: string[];\n\tclaims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n\tissuer: string;\n\taudience: string | string[];\n\tcacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n\tTClaims extends OidcClaims = OidcClaims,\n\tTUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n\tprivate discovery: OidcDiscovery | null = null;\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly discoveryUrl: string;\n\n\tconstructor(private readonly config: OidcConfig) {\n\t\tthis.discoveryUrl = config.issuer.endsWith('/')\n\t\t\t? `${config.issuer}.well-known/openid-configuration`\n\t\t\t: `${config.issuer}/.well-known/openid-configuration`;\n\t}\n\n\tasync getDiscovery(): Promise<OidcDiscovery> {\n\t\tif (this.discovery && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.discovery;\n\t\t}\n\n\t\tconst response = await fetch(this.discoveryUrl);\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n\t\t}\n\n\t\tthis.discovery = (await response.json()) as OidcDiscovery;\n\t\treturn this.discovery;\n\t}\n\n\tprivate async getJwks(): Promise<jose.JWTVerifyGetKey> {\n\t\tif (this.jwks && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.jwks;\n\t\t}\n\n\t\tconst disc = await this.getDiscovery();\n\t\tthis.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n\t\treturn this.jwks;\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tconst key = await this.getJwks();\n\t\tconst { payload } = await jose.jwtVerify(token, key, {\n\t\t\tissuer: this.config.issuer,\n\t\t\taudience: this.config.audience,\n\t\t});\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync fetchUserInfo(token: string): Promise<TUserInfo | null> {\n\t\ttry {\n\t\t\tconst disc = await this.getDiscovery();\n\t\t\tif (!disc.userinfo_endpoint) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tconst response = await fetch(disc.userinfo_endpoint, {\n\t\t\t\theaders: { Authorization: `Bearer ${token}` },\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await response.json()) as TUserInfo;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.discovery = null;\n\t\tthis.jwks = null;\n\t}\n}\n"],"mappings":";;;;;;;AA2EA,IAAa,eAAb,MAGE;CACD,AAAQ,YAAkC;CAC1C,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAoB;EAApB;AAC5B,OAAK,eAAe,OAAO,OAAO,SAAS,IAAI,IAC3C,EAAE,OAAO,OAAO,qCAChB,EAAE,OAAO,OAAO;CACpB;CAED,MAAM,eAAuC;AAC5C,MAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,MACpD,QAAO,KAAK;EAGb,MAAM,WAAW,MAAM,MAAM,KAAK,aAAa;AAC/C,OAAK,SAAS,GACb,OAAM,IAAI,OAAO,kCAAkC,SAAS,WAAW;AAGxE,OAAK,YAAa,MAAM,SAAS,MAAM;AACvC,SAAO,KAAK;CACZ;CAED,MAAc,UAAyC;AACtD,MAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,MAC/C,QAAO,KAAK;EAGb,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,OAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,UAAU;AAC3D,SAAO,KAAK;CACZ;CAED,MAAM,OAAOC,OAAiC;EAC7C,MAAM,MAAM,MAAM,KAAK,SAAS;EAChC,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,KAAK;GACpD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACtB,EAAC;AACF,SAAO;CACP;CAED,MAAM,aAAaA,OAAwC;AAC1D,MAAI;AACH,UAAO,MAAM,KAAK,OAAO,MAAM;EAC/B,QAAO;AACP,UAAO;EACP;CACD;CAED,MAAM,cAAcA,OAA0C;AAC7D,MAAI;GACH,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,QAAK,KAAK,kBACT,QAAO;GAGR,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACpD,SAAS,EAAE,gBAAgB,SAAS,MAAM,EAAG,EAC7C,EAAC;AAEF,QAAK,SAAS,GACb,QAAO;AAGR,UAAQ,MAAM,SAAS,MAAM;EAC7B,QAAO;AACP,UAAO;EACP;CACD;CAED,aAAmB;AAClB,OAAK,YAAY;AACjB,OAAK,OAAO;CACZ;AACD"}

package/dist/tokenManager-BbylTW7F.mjs

@@ -1,66 +0,0 @@
-import jwt from "jsonwebtoken";
-
-//#region src/tokenManager.ts
-var TokenManager = class {
-	accessTokenSecret;
-	refreshTokenSecret;
-	accessTokenExpiresIn;
-	refreshTokenExpiresIn;
-	constructor(options) {
-		this.accessTokenSecret = options.accessTokenSecret;
-		this.refreshTokenSecret = options.refreshTokenSecret;
-		this.accessTokenExpiresIn = options.accessTokenExpiresIn || "15m";
-		this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || "7d";
-	}
-	generateTokenPair(payload) {
-		const accessToken = jwt.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
-		const refreshToken = jwt.sign(payload, this.refreshTokenSecret, { expiresIn: this.refreshTokenExpiresIn });
-		return {
-			accessToken,
-			refreshToken
-		};
-	}
-	verifyAccessToken(token) {
-		try {
-			return jwt.verify(token, this.accessTokenSecret);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			throw new Error(`Invalid access token: ${message}`);
-		}
-	}
-	verifyRefreshToken(token) {
-		try {
-			return jwt.verify(token, this.refreshTokenSecret);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			throw new Error(`Invalid refresh token: ${message}`);
-		}
-	}
-	refreshAccessToken(refreshToken) {
-		const decoded = this.verifyRefreshToken(refreshToken);
-		const { iat, exp,...payload } = decoded;
-		return jwt.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
-	}
-	decodeToken(token) {
-		try {
-			return jwt.decode(token);
-		} catch {
-			return null;
-		}
-	}
-	isTokenExpired(token) {
-		const decoded = this.decodeToken(token);
-		if (!decoded) return true;
-		const now = Math.floor(Date.now() / 1e3);
-		return decoded.exp < now;
-	}
-	getTokenExpiration(token) {
-		const decoded = this.decodeToken(token);
-		if (!decoded) return null;
-		return new Date(decoded.exp * 1e3);
-	}
-};
-
-//#endregion
-export { TokenManager };
-//# sourceMappingURL=tokenManager-BbylTW7F.mjs.map

package/dist/tokenManager-BbylTW7F.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenManager-BbylTW7F.mjs","names":["options: TokenManagerOptions","payload: TokenPayload","token: string","refreshToken: string"],"sources":["../src/tokenManager.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\nimport type ms from 'ms';\n\nexport interface TokenPayload {\n\tuserId: string;\n\temail?: string;\n\t[key: string]: any;\n}\n\nexport interface TokenPair {\n\taccessToken: string;\n\trefreshToken: string;\n}\n\nexport interface TokenManagerOptions {\n\taccessTokenSecret: string;\n\trefreshTokenSecret: string;\n\taccessTokenExpiresIn?: ms.StringValue;\n\trefreshTokenExpiresIn?: ms.StringValue;\n}\n\nexport interface DecodedToken extends TokenPayload {\n\tiat: number;\n\texp: number;\n}\n\nexport class TokenManager {\n\tprivate accessTokenSecret: string;\n\tprivate refreshTokenSecret: string;\n\tprivate accessTokenExpiresIn: ms.StringValue;\n\tprivate refreshTokenExpiresIn: ms.StringValue;\n\n\tconstructor(options: TokenManagerOptions) {\n\t\tthis.accessTokenSecret = options.accessTokenSecret;\n\t\tthis.refreshTokenSecret = options.refreshTokenSecret;\n\t\tthis.accessTokenExpiresIn = options.accessTokenExpiresIn || '15m';\n\t\tthis.refreshTokenExpiresIn = options.refreshTokenExpiresIn || '7d';\n\t}\n\n\tgenerateTokenPair(payload: TokenPayload): TokenPair {\n\t\tconst accessToken = jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\n\t\tconst refreshToken = jwt.sign(payload, this.refreshTokenSecret, {\n\t\t\texpiresIn: this.refreshTokenExpiresIn,\n\t\t});\n\n\t\treturn {\n\t\t\taccessToken,\n\t\t\trefreshToken,\n\t\t};\n\t}\n\n\tverifyAccessToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.accessTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid access token: ${message}`);\n\t\t}\n\t}\n\n\tverifyRefreshToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.refreshTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid refresh token: ${message}`);\n\t\t}\n\t}\n\n\trefreshAccessToken(refreshToken: string): string {\n\t\tconst decoded = this.verifyRefreshToken(refreshToken);\n\n\t\t// Remove JWT specific fields before creating new token\n\t\tconst { iat, exp, ...payload } = decoded;\n\n\t\treturn jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\t}\n\n\tdecodeToken(token: string): DecodedToken | null {\n\t\ttry {\n\t\t\treturn jwt.decode(token) as DecodedToken;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tisTokenExpired(token: string): boolean {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return true;\n\n\t\tconst now = Math.floor(Date.now() / 1000);\n\t\treturn decoded.exp < now;\n\t}\n\n\tgetTokenExpiration(token: string): Date | null {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return null;\n\n\t\treturn new Date(decoded.exp * 1000);\n\t}\n}\n"],"mappings":";;;AA0BA,IAAa,eAAb,MAA0B;CACzB,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAYA,SAA8B;AACzC,OAAK,oBAAoB,QAAQ;AACjC,OAAK,qBAAqB,QAAQ;AAClC,OAAK,uBAAuB,QAAQ,wBAAwB;AAC5D,OAAK,wBAAwB,QAAQ,yBAAyB;CAC9D;CAED,kBAAkBC,SAAkC;EACnD,MAAM,cAAc,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAC7D,WAAW,KAAK,qBAChB,EAAC;EAEF,MAAM,eAAe,IAAI,KAAK,SAAS,KAAK,oBAAoB,EAC/D,WAAW,KAAK,sBAChB,EAAC;AAEF,SAAO;GACN;GACA;EACA;CACD;CAED,kBAAkBC,OAA6B;AAC9C,MAAI;AACH,UAAO,IAAI,OAAO,OAAO,KAAK,kBAAkB;EAChD,SAAQ,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,SAAM,IAAI,OAAO,wBAAwB,QAAQ;EACjD;CACD;CAED,mBAAmBA,OAA6B;AAC/C,MAAI;AACH,UAAO,IAAI,OAAO,OAAO,KAAK,mBAAmB;EACjD,SAAQ,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,SAAM,IAAI,OAAO,yBAAyB,QAAQ;EAClD;CACD;CAED,mBAAmBC,cAA8B;EAChD,MAAM,UAAU,KAAK,mBAAmB,aAAa;EAGrD,MAAM,EAAE,KAAK,IAAK,GAAG,SAAS,GAAG;AAEjC,SAAO,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAChD,WAAW,KAAK,qBAChB,EAAC;CACF;CAED,YAAYD,OAAoC;AAC/C,MAAI;AACH,UAAO,IAAI,OAAO,MAAM;EACxB,QAAO;AACP,UAAO;EACP;CACD;CAED,eAAeA,OAAwB;EACtC,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;EAErB,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AACzC,SAAO,QAAQ,MAAM;CACrB;CAED,mBAAmBA,OAA4B;EAC9C,MAAM,UAAU,KAAK,YAAY,MAAM;AACvC,OAAK,QAAS,QAAO;AAErB,SAAO,IAAI,KAAK,QAAQ,MAAM;CAC9B;AACD"}

package/dist/tokenManager-CL3yE06D.d.cts

@@ -1,40 +0,0 @@
-import ms from "ms";
-
-//#region src/tokenManager.d.ts
-interface TokenPayload {
-  userId: string;
-  email?: string;
-  [key: string]: any;
-}
-interface TokenPair {
-  accessToken: string;
-  refreshToken: string;
-}
-interface TokenManagerOptions {
-  accessTokenSecret: string;
-  refreshTokenSecret: string;
-  accessTokenExpiresIn?: ms.StringValue;
-  refreshTokenExpiresIn?: ms.StringValue;
-}
-interface DecodedToken extends TokenPayload {
-  iat: number;
-  exp: number;
-}
-declare class TokenManager {
-  private accessTokenSecret;
-  private refreshTokenSecret;
-  private accessTokenExpiresIn;
-  private refreshTokenExpiresIn;
-  constructor(options: TokenManagerOptions);
-  generateTokenPair(payload: TokenPayload): TokenPair;
-  verifyAccessToken(token: string): DecodedToken;
-  verifyRefreshToken(token: string): DecodedToken;
-  refreshAccessToken(refreshToken: string): string;
-  decodeToken(token: string): DecodedToken | null;
-  isTokenExpired(token: string): boolean;
-  getTokenExpiration(token: string): Date | null;
-}
-//# sourceMappingURL=tokenManager.d.ts.map
-//#endregion
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
-//# sourceMappingURL=tokenManager-CL3yE06D.d.cts.map

package/dist/tokenManager-CL3yE06D.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenManager-CL3yE06D.d.cts","names":[],"sources":["../src/tokenManager.ts"],"sourcesContent":[],"mappings":";;;UAGiB,YAAA;;EAAA,KAAA,CAAA,EAAA,MAAA;EAMA,CAAA,GAAA,EAAA,MAAS,CAAA,EAAA,GAAA;AAK1B;AAAoC,UALnB,SAAA,CAKmB;EAAA,WAGT,EAAA,MAAA;EAAW,YACV,EAAA,MAAA;AAAW;AAGtB,UAPA,mBAAA,CAOqB;EAKzB,iBAAY,EAAA,MAAA;EAAA,kBAAA,EAAA,MAAA;EAAA,oBAMH,CAAA,EAfE,EAAA,CAAG,WAeL;EAAmB,qBAOb,CAAA,EArBH,EAAA,CAAG,WAqBA;;AAeO,UAjClB,YAAA,SAAqB,YAiCH,CAAA;EAAY,GASX,EAAA,MAAA;EAAY,GAoBnB,EAAA,MAAA;;AAgBW,cAzE3B,YAAA,CAyE2B;;;;;uBAnElB;6BAOM,eAAe;oCAeR;qCASC;;8BAoBP;;qCAgBO"}

package/dist/tokenManager-CosB7J0i.d.mts

@@ -1,40 +0,0 @@
-import ms from "ms";
-
-//#region src/tokenManager.d.ts
-interface TokenPayload {
-  userId: string;
-  email?: string;
-  [key: string]: any;
-}
-interface TokenPair {
-  accessToken: string;
-  refreshToken: string;
-}
-interface TokenManagerOptions {
-  accessTokenSecret: string;
-  refreshTokenSecret: string;
-  accessTokenExpiresIn?: ms.StringValue;
-  refreshTokenExpiresIn?: ms.StringValue;
-}
-interface DecodedToken extends TokenPayload {
-  iat: number;
-  exp: number;
-}
-declare class TokenManager {
-  private accessTokenSecret;
-  private refreshTokenSecret;
-  private accessTokenExpiresIn;
-  private refreshTokenExpiresIn;
-  constructor(options: TokenManagerOptions);
-  generateTokenPair(payload: TokenPayload): TokenPair;
-  verifyAccessToken(token: string): DecodedToken;
-  verifyRefreshToken(token: string): DecodedToken;
-  refreshAccessToken(refreshToken: string): string;
-  decodeToken(token: string): DecodedToken | null;
-  isTokenExpired(token: string): boolean;
-  getTokenExpiration(token: string): Date | null;
-}
-//# sourceMappingURL=tokenManager.d.ts.map
-//#endregion
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
-//# sourceMappingURL=tokenManager-CosB7J0i.d.mts.map

package/dist/tokenManager-CosB7J0i.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenManager-CosB7J0i.d.mts","names":[],"sources":["../src/tokenManager.ts"],"sourcesContent":[],"mappings":";;;UAGiB,YAAA;;EAAA,KAAA,CAAA,EAAA,MAAA;EAMA,CAAA,GAAA,EAAA,MAAS,CAAA,EAAA,GAAA;AAK1B;AAAoC,UALnB,SAAA,CAKmB;EAAA,WAGT,EAAA,MAAA;EAAW,YACV,EAAA,MAAA;AAAW;AAGtB,UAPA,mBAAA,CAOqB;EAKzB,iBAAY,EAAA,MAAA;EAAA,kBAAA,EAAA,MAAA;EAAA,oBAMH,CAAA,EAfE,EAAA,CAAG,WAeL;EAAmB,qBAOb,CAAA,EArBH,EAAA,CAAG,WAqBA;;AAeO,UAjClB,YAAA,SAAqB,YAiCH,CAAA;EAAY,GASX,EAAA,MAAA;EAAY,GAoBnB,EAAA,MAAA;;AAgBW,cAzE3B,YAAA,CAyE2B;;;;;uBAnElB;6BAOM,eAAe;oCAeR;qCASC;;8BAoBP;;qCAgBO"}

package/dist/tokenManager-PQ-OI_NU.cjs

@@ -1,72 +0,0 @@
-const require_chunk = require('./chunk-CUT6urMc.cjs');
-const jsonwebtoken = require_chunk.__toESM(require("jsonwebtoken"));
-
-//#region src/tokenManager.ts
-var TokenManager = class {
-	accessTokenSecret;
-	refreshTokenSecret;
-	accessTokenExpiresIn;
-	refreshTokenExpiresIn;
-	constructor(options) {
-		this.accessTokenSecret = options.accessTokenSecret;
-		this.refreshTokenSecret = options.refreshTokenSecret;
-		this.accessTokenExpiresIn = options.accessTokenExpiresIn || "15m";
-		this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || "7d";
-	}
-	generateTokenPair(payload) {
-		const accessToken = jsonwebtoken.default.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
-		const refreshToken = jsonwebtoken.default.sign(payload, this.refreshTokenSecret, { expiresIn: this.refreshTokenExpiresIn });
-		return {
-			accessToken,
-			refreshToken
-		};
-	}
-	verifyAccessToken(token) {
-		try {
-			return jsonwebtoken.default.verify(token, this.accessTokenSecret);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			throw new Error(`Invalid access token: ${message}`);
-		}
-	}
-	verifyRefreshToken(token) {
-		try {
-			return jsonwebtoken.default.verify(token, this.refreshTokenSecret);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			throw new Error(`Invalid refresh token: ${message}`);
-		}
-	}
-	refreshAccessToken(refreshToken) {
-		const decoded = this.verifyRefreshToken(refreshToken);
-		const { iat, exp,...payload } = decoded;
-		return jsonwebtoken.default.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
-	}
-	decodeToken(token) {
-		try {
-			return jsonwebtoken.default.decode(token);
-		} catch {
-			return null;
-		}
-	}
-	isTokenExpired(token) {
-		const decoded = this.decodeToken(token);
-		if (!decoded) return true;
-		const now = Math.floor(Date.now() / 1e3);
-		return decoded.exp < now;
-	}
-	getTokenExpiration(token) {
-		const decoded = this.decodeToken(token);
-		if (!decoded) return null;
-		return new Date(decoded.exp * 1e3);
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'TokenManager', {
-  enumerable: true,
-  get: function () {
-    return TokenManager;
-  }
-});
-//# sourceMappingURL=tokenManager-PQ-OI_NU.cjs.map