@geekmidas/auth 10.0.0-alpha.9 → 10.0.0-alpha.91

package/dist/oidc.cjs

@@ -1,3 +1,65 @@
-const require_oidc = require('./oidc-jdMfVyyC.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
+let jose = require("jose");
+jose = require_rolldown_runtime.__toESM(jose, 1);
+//#region src/oidc.ts
+/**
+* OIDC Verifier with auto-discovery and caching
+*/
+var OidcVerifier = class {
+	config;
+	discovery = null;
+	jwks = null;
+	discoveryUrl;
+	constructor(config) {
+		this.config = config;
+		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
+	}
+	async getDiscovery() {
+		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
+		const response = await fetch(this.discoveryUrl);
+		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+		this.discovery = await response.json();
+		return this.discovery;
+	}
+	async getJwks() {
+		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
+		const disc = await this.getDiscovery();
+		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
+		return this.jwks;
+	}
+	async verify(token) {
+		const key = await this.getJwks();
+		const { payload } = await jose.jwtVerify(token, key, {
+			issuer: this.config.issuer,
+			audience: this.config.audience
+		});
+		return payload;
+	}
+	async verifyOrNull(token) {
+		try {
+			return await this.verify(token);
+		} catch {
+			return null;
+		}
+	}
+	async fetchUserInfo(token) {
+		try {
+			const disc = await this.getDiscovery();
+			if (!disc.userinfo_endpoint) return null;
+			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
+			if (!response.ok) return null;
+			return await response.json();
+		} catch {
+			return null;
+		}
+	}
+	clearCache() {
+		this.discovery = null;
+		this.jwks = null;
+	}
+};
+//#endregion
+exports.OidcVerifier = OidcVerifier;
 
-exports.OidcVerifier = require_oidc.OidcVerifier;
+//# sourceMappingURL=oidc.cjs.map

package/dist/oidc.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.cjs","names":[],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n\tnonce?: string;\n\tauth_time?: number;\n\tat_hash?: string;\n\tc_hash?: string;\n\tazp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n\tsub: string;\n\tname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n\tmiddle_name?: string;\n\tnickname?: string;\n\tpreferred_username?: string;\n\tprofile?: string;\n\tpicture?: string;\n\twebsite?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tgender?: string;\n\tbirthdate?: string;\n\tzoneinfo?: string;\n\tlocale?: string;\n\tphone_number?: string;\n\tphone_number_verified?: boolean;\n\taddress?: {\n\t\tformatted?: string;\n\t\tstreet_address?: string;\n\t\tlocality?: string;\n\t\tregion?: string;\n\t\tpostal_code?: string;\n\t\tcountry?: string;\n\t};\n\tupdated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n\tissuer: string;\n\tauthorization_endpoint: string;\n\ttoken_endpoint: string;\n\tuserinfo_endpoint?: string;\n\tjwks_uri: string;\n\tscopes_supported?: string[];\n\tresponse_types_supported: string[];\n\tclaims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n\tissuer: string;\n\taudience: string | string[];\n\tcacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n\tTClaims extends OidcClaims = OidcClaims,\n\tTUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n\tprivate discovery: OidcDiscovery | null = null;\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly discoveryUrl: string;\n\n\tconstructor(private readonly config: OidcConfig) {\n\t\tthis.discoveryUrl = config.issuer.endsWith('/')\n\t\t\t? `${config.issuer}.well-known/openid-configuration`\n\t\t\t: `${config.issuer}/.well-known/openid-configuration`;\n\t}\n\n\tasync getDiscovery(): Promise<OidcDiscovery> {\n\t\tif (this.discovery && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.discovery;\n\t\t}\n\n\t\tconst response = await fetch(this.discoveryUrl);\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n\t\t}\n\n\t\tthis.discovery = (await response.json()) as OidcDiscovery;\n\t\treturn this.discovery;\n\t}\n\n\tprivate async getJwks(): Promise<jose.JWTVerifyGetKey> {\n\t\tif (this.jwks && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.jwks;\n\t\t}\n\n\t\tconst disc = await this.getDiscovery();\n\t\tthis.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n\t\treturn this.jwks;\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tconst key = await this.getJwks();\n\t\tconst { payload } = await jose.jwtVerify(token, key, {\n\t\t\tissuer: this.config.issuer,\n\t\t\taudience: this.config.audience,\n\t\t});\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync fetchUserInfo(token: string): Promise<TUserInfo | null> {\n\t\ttry {\n\t\t\tconst disc = await this.getDiscovery();\n\t\t\tif (!disc.userinfo_endpoint) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tconst response = await fetch(disc.userinfo_endpoint, {\n\t\t\t\theaders: { Authorization: `Bearer ${token}` },\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await response.json()) as TUserInfo;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.discovery = null;\n\t\tthis.jwks = null;\n\t}\n}\n"],"mappings":";;;;;;;;AA2EA,IAAa,eAAb,MAGE;CAK4B;CAJ7B,YAA0C;CAC1C,OAA4C;CAC5C;CAEA,YAAY,QAAqC;EAApB,KAAA,SAAA;EAC5B,KAAK,eAAe,OAAO,OAAO,SAAS,GAAG,IAC3C,GAAG,OAAO,OAAO,oCACjB,GAAG,OAAO,OAAO;CACrB;CAEA,MAAM,eAAuC;EAC5C,IAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,OACpD,OAAO,KAAK;EAGb,MAAM,WAAW,MAAM,MAAM,KAAK,YAAY;EAC9C,IAAI,CAAC,SAAS,IACb,MAAM,IAAI,MAAM,mCAAmC,SAAS,YAAY;EAGzE,KAAK,YAAa,MAAM,SAAS,KAAK;EACtC,OAAO,KAAK;CACb;CAEA,MAAc,UAAyC;EACtD,IAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,OAC/C,OAAO,KAAK;EAGb,MAAM,OAAO,MAAM,KAAK,aAAa;EACrC,KAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,QAAQ,CAAC;EAC1D,OAAO,KAAK;CACb;CAEA,MAAM,OAAO,OAAiC;EAC7C,MAAM,MAAM,MAAM,KAAK,QAAQ;EAC/B,MAAM,EAAE,YAAY,MAAM,KAAK,UAAU,OAAO,KAAK;GACpD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACvB,CAAC;EACD,OAAO;CACR;CAEA,MAAM,aAAa,OAAwC;EAC1D,IAAI;GACH,OAAO,MAAM,KAAK,OAAO,KAAK;EAC/B,QAAQ;GACP,OAAO;EACR;CACD;CAEA,MAAM,cAAc,OAA0C;EAC7D,IAAI;GACH,MAAM,OAAO,MAAM,KAAK,aAAa;GACrC,IAAI,CAAC,KAAK,mBACT,OAAO;GAGR,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACpD,SAAS,EAAE,eAAe,UAAU,QAAQ,EAC7C,CAAC;GAED,IAAI,CAAC,SAAS,IACb,OAAO;GAGR,OAAQ,MAAM,SAAS,KAAK;EAC7B,QAAQ;GACP,OAAO;EACR;CACD;CAEA,aAAmB;EAClB,KAAK,YAAY;EACjB,KAAK,OAAO;CACb;AACD"}

package/dist/oidc.d.cts

@@ -1,3 +1,84 @@
-import { TokenExtractionOptions } from "./jwt-3eIuY2dg.cjs";
-import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-ChA17wLB.cjs";
-export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };
+import { o as TokenExtractionOptions, t as JwtClaims } from "./jwt-CoKrpeMB.cjs";
+//#region src/oidc.d.ts
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+export interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+export interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+export interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+export interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+export declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//#endregion
+export type { TokenExtractionOptions };
+//# sourceMappingURL=oidc.d.cts.map

package/dist/oidc.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.cts","names":[],"sources":["../src/oidc.ts"],"mappings":";;;;;iBAQiB,mBAAmB;EACnC;EACA;EACA;EACA;EACA;;;;;iBAMgB;EAChB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACC;IACA;IACA;IACA;IACA;IACA;;EAED;;;;;iBAMgB;EAChB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;iBAMgB;EAChB;EACA;EACA;;;;;qBAMY,aACZ,gBAAgB,aAAa,YAC7B,kBAAkB,eAAe;mBAMJ;UAJrB;UACA;mBACS;EAEjB,YAA6B,QAAQ;EAM/B,gBAAgB,QAAQ;UAchB;EAUR,OAAO,gBAAgB,QAAQ;EAS/B,aAAa,gBAAgB,QAAQ;EAQrC,cAAc,gBAAgB,QAAQ;EAqB5C"}

package/dist/oidc.d.mts

@@ -1,3 +1,84 @@
-import { TokenExtractionOptions } from "./jwt-kejix7rd.mjs";
-import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-Ca7GYwmM.mjs";
-export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };
+import { o as TokenExtractionOptions, t as JwtClaims } from "./jwt-CoKrpeMB.mjs";
+//#region src/oidc.d.ts
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+export interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+export interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+export interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+export interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+export declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//#endregion
+export type { TokenExtractionOptions };
+//# sourceMappingURL=oidc.d.mts.map

package/dist/oidc.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.mts","names":[],"sources":["../src/oidc.ts"],"mappings":";;;;;iBAQiB,mBAAmB;EACnC;EACA;EACA;EACA;EACA;;;;;iBAMgB;EAChB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACC;IACA;IACA;IACA;IACA;IACA;;EAED;;;;;iBAMgB;EAChB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;iBAMgB;EAChB;EACA;EACA;;;;;qBAMY,aACZ,gBAAgB,aAAa,YAC7B,kBAAkB,eAAe;mBAMJ;UAJrB;UACA;mBACS;EAEjB,YAA6B,QAAQ;EAM/B,gBAAgB,QAAQ;UAchB;EAUR,OAAO,gBAAgB,QAAQ;EAS/B,aAAa,gBAAgB,QAAQ;EAQrC,cAAc,gBAAgB,QAAQ;EAqB5C"}

package/dist/oidc.mjs

@@ -1,3 +1,62 @@
-import { OidcVerifier } from "./oidc-BYHREHir.mjs";
+import * as jose from "jose";
+//#region src/oidc.ts
+/**
+* OIDC Verifier with auto-discovery and caching
+*/
+var OidcVerifier = class {
+	config;
+	discovery = null;
+	jwks = null;
+	discoveryUrl;
+	constructor(config) {
+		this.config = config;
+		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
+	}
+	async getDiscovery() {
+		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
+		const response = await fetch(this.discoveryUrl);
+		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+		this.discovery = await response.json();
+		return this.discovery;
+	}
+	async getJwks() {
+		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
+		const disc = await this.getDiscovery();
+		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
+		return this.jwks;
+	}
+	async verify(token) {
+		const key = await this.getJwks();
+		const { payload } = await jose.jwtVerify(token, key, {
+			issuer: this.config.issuer,
+			audience: this.config.audience
+		});
+		return payload;
+	}
+	async verifyOrNull(token) {
+		try {
+			return await this.verify(token);
+		} catch {
+			return null;
+		}
+	}
+	async fetchUserInfo(token) {
+		try {
+			const disc = await this.getDiscovery();
+			if (!disc.userinfo_endpoint) return null;
+			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
+			if (!response.ok) return null;
+			return await response.json();
+		} catch {
+			return null;
+		}
+	}
+	clearCache() {
+		this.discovery = null;
+		this.jwks = null;
+	}
+};
+//#endregion
+export { OidcVerifier };
 
-export { OidcVerifier };
+//# sourceMappingURL=oidc.mjs.map

package/dist/oidc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.mjs","names":[],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n\tnonce?: string;\n\tauth_time?: number;\n\tat_hash?: string;\n\tc_hash?: string;\n\tazp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n\tsub: string;\n\tname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n\tmiddle_name?: string;\n\tnickname?: string;\n\tpreferred_username?: string;\n\tprofile?: string;\n\tpicture?: string;\n\twebsite?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tgender?: string;\n\tbirthdate?: string;\n\tzoneinfo?: string;\n\tlocale?: string;\n\tphone_number?: string;\n\tphone_number_verified?: boolean;\n\taddress?: {\n\t\tformatted?: string;\n\t\tstreet_address?: string;\n\t\tlocality?: string;\n\t\tregion?: string;\n\t\tpostal_code?: string;\n\t\tcountry?: string;\n\t};\n\tupdated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n\tissuer: string;\n\tauthorization_endpoint: string;\n\ttoken_endpoint: string;\n\tuserinfo_endpoint?: string;\n\tjwks_uri: string;\n\tscopes_supported?: string[];\n\tresponse_types_supported: string[];\n\tclaims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n\tissuer: string;\n\taudience: string | string[];\n\tcacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n\tTClaims extends OidcClaims = OidcClaims,\n\tTUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n\tprivate discovery: OidcDiscovery | null = null;\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly discoveryUrl: string;\n\n\tconstructor(private readonly config: OidcConfig) {\n\t\tthis.discoveryUrl = config.issuer.endsWith('/')\n\t\t\t? `${config.issuer}.well-known/openid-configuration`\n\t\t\t: `${config.issuer}/.well-known/openid-configuration`;\n\t}\n\n\tasync getDiscovery(): Promise<OidcDiscovery> {\n\t\tif (this.discovery && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.discovery;\n\t\t}\n\n\t\tconst response = await fetch(this.discoveryUrl);\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n\t\t}\n\n\t\tthis.discovery = (await response.json()) as OidcDiscovery;\n\t\treturn this.discovery;\n\t}\n\n\tprivate async getJwks(): Promise<jose.JWTVerifyGetKey> {\n\t\tif (this.jwks && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.jwks;\n\t\t}\n\n\t\tconst disc = await this.getDiscovery();\n\t\tthis.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n\t\treturn this.jwks;\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tconst key = await this.getJwks();\n\t\tconst { payload } = await jose.jwtVerify(token, key, {\n\t\t\tissuer: this.config.issuer,\n\t\t\taudience: this.config.audience,\n\t\t});\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync fetchUserInfo(token: string): Promise<TUserInfo | null> {\n\t\ttry {\n\t\t\tconst disc = await this.getDiscovery();\n\t\t\tif (!disc.userinfo_endpoint) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tconst response = await fetch(disc.userinfo_endpoint, {\n\t\t\t\theaders: { Authorization: `Bearer ${token}` },\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await response.json()) as TUserInfo;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.discovery = null;\n\t\tthis.jwks = null;\n\t}\n}\n"],"mappings":";;;;;AA2EA,IAAa,eAAb,MAGE;CAK4B;CAJ7B,YAA0C;CAC1C,OAA4C;CAC5C;CAEA,YAAY,QAAqC;EAApB,KAAA,SAAA;EAC5B,KAAK,eAAe,OAAO,OAAO,SAAS,GAAG,IAC3C,GAAG,OAAO,OAAO,oCACjB,GAAG,OAAO,OAAO;CACrB;CAEA,MAAM,eAAuC;EAC5C,IAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,OACpD,OAAO,KAAK;EAGb,MAAM,WAAW,MAAM,MAAM,KAAK,YAAY;EAC9C,IAAI,CAAC,SAAS,IACb,MAAM,IAAI,MAAM,mCAAmC,SAAS,YAAY;EAGzE,KAAK,YAAa,MAAM,SAAS,KAAK;EACtC,OAAO,KAAK;CACb;CAEA,MAAc,UAAyC;EACtD,IAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,OAC/C,OAAO,KAAK;EAGb,MAAM,OAAO,MAAM,KAAK,aAAa;EACrC,KAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,QAAQ,CAAC;EAC1D,OAAO,KAAK;CACb;CAEA,MAAM,OAAO,OAAiC;EAC7C,MAAM,MAAM,MAAM,KAAK,QAAQ;EAC/B,MAAM,EAAE,YAAY,MAAM,KAAK,UAAU,OAAO,KAAK;GACpD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACvB,CAAC;EACD,OAAO;CACR;CAEA,MAAM,aAAa,OAAwC;EAC1D,IAAI;GACH,OAAO,MAAM,KAAK,OAAO,KAAK;EAC/B,QAAQ;GACP,OAAO;EACR;CACD;CAEA,MAAM,cAAc,OAA0C;EAC7D,IAAI;GACH,MAAM,OAAO,MAAM,KAAK,aAAa;GACrC,IAAI,CAAC,KAAK,mBACT,OAAO;GAGR,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACpD,SAAS,EAAE,eAAe,UAAU,QAAQ,EAC7C,CAAC;GAED,IAAI,CAAC,SAAS,IACb,OAAO;GAGR,OAAQ,MAAM,SAAS,KAAK;EAC7B,QAAQ;GACP,OAAO;EACR;CACD;CAEA,aAAmB;EAClB,KAAK,YAAY;EACjB,KAAK,OAAO;CACb;AACD"}

package/dist/{chunk-CUT6urMc.cjs → rolldown-runtime-VH7oDXx4.cjs}

@@ -1,4 +1,4 @@
-//#region rolldown:runtime
+//#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -15,16 +15,14 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
-
 //#endregion
-
-Object.defineProperty(exports, '__toESM', {
-  enumerable: true,
-  get: function () {
-    return __toESM;
-  }
-});
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/server.cjs

@@ -1,5 +1,5 @@
-const require_cacheTokenStorage = require('./cacheTokenStorage-CEpMniTi.cjs');
-const require_tokenManager = require('./tokenManager-PQ-OI_NU.cjs');
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_cacheTokenStorage = require("./cacheTokenStorage.cjs");
+const require_tokenManager = require("./tokenManager.cjs");
 exports.CacheTokenStorage = require_cacheTokenStorage.CacheTokenStorage;
-exports.TokenManager = require_tokenManager.TokenManager;
+exports.TokenManager = require_tokenManager.TokenManager;

package/dist/server.d.cts

@@ -1,3 +1,3 @@
-import { CacheTokenStorage } from "./cacheTokenStorage-B7sOoysu.cjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CL3yE06D.cjs";
-export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+import { t as CacheTokenStorage } from "./cacheTokenStorage-B3u8Sf-6.cjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager.cjs";
+export { CacheTokenStorage, type DecodedToken, TokenManager, type TokenManagerOptions, type TokenPair, type TokenPayload };

package/dist/server.d.mts

@@ -1,3 +1,3 @@
-import { CacheTokenStorage } from "./cacheTokenStorage-DaqxdNxI.mjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CosB7J0i.mjs";
-export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+import { t as CacheTokenStorage } from "./cacheTokenStorage-B3u8Sf-6.mjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager.mjs";
+export { CacheTokenStorage, type DecodedToken, TokenManager, type TokenManagerOptions, type TokenPair, type TokenPayload };

package/dist/server.mjs

@@ -1,4 +1,3 @@
-import { CacheTokenStorage } from "./cacheTokenStorage-16NE8Cd9.mjs";
-import { TokenManager } from "./tokenManager-BbylTW7F.mjs";
-
-export { CacheTokenStorage, TokenManager };
+import { CacheTokenStorage } from "./cacheTokenStorage.mjs";
+import { TokenManager } from "./tokenManager.mjs";
+export { CacheTokenStorage, TokenManager };

package/dist/tokenManager.cjs

@@ -1,3 +1,65 @@
-const require_tokenManager = require('./tokenManager-PQ-OI_NU.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
+let jsonwebtoken = require("jsonwebtoken");
+jsonwebtoken = require_rolldown_runtime.__toESM(jsonwebtoken, 1);
+//#region src/tokenManager.ts
+var TokenManager = class {
+	accessTokenSecret;
+	refreshTokenSecret;
+	accessTokenExpiresIn;
+	refreshTokenExpiresIn;
+	constructor(options) {
+		this.accessTokenSecret = options.accessTokenSecret;
+		this.refreshTokenSecret = options.refreshTokenSecret;
+		this.accessTokenExpiresIn = options.accessTokenExpiresIn || "15m";
+		this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || "7d";
+	}
+	generateTokenPair(payload) {
+		return {
+			accessToken: jsonwebtoken.default.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn }),
+			refreshToken: jsonwebtoken.default.sign(payload, this.refreshTokenSecret, { expiresIn: this.refreshTokenExpiresIn })
+		};
+	}
+	verifyAccessToken(token) {
+		try {
+			return jsonwebtoken.default.verify(token, this.accessTokenSecret);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			throw new Error(`Invalid access token: ${message}`);
+		}
+	}
+	verifyRefreshToken(token) {
+		try {
+			return jsonwebtoken.default.verify(token, this.refreshTokenSecret);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			throw new Error(`Invalid refresh token: ${message}`);
+		}
+	}
+	refreshAccessToken(refreshToken) {
+		const { iat, exp, ...payload } = this.verifyRefreshToken(refreshToken);
+		return jsonwebtoken.default.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
+	}
+	decodeToken(token) {
+		try {
+			return jsonwebtoken.default.decode(token);
+		} catch {
+			return null;
+		}
+	}
+	isTokenExpired(token) {
+		const decoded = this.decodeToken(token);
+		if (!decoded) return true;
+		const now = Math.floor(Date.now() / 1e3);
+		return decoded.exp < now;
+	}
+	getTokenExpiration(token) {
+		const decoded = this.decodeToken(token);
+		if (!decoded) return null;
+		return /* @__PURE__ */ new Date(decoded.exp * 1e3);
+	}
+};
+//#endregion
+exports.TokenManager = TokenManager;
 
-exports.TokenManager = require_tokenManager.TokenManager;
+//# sourceMappingURL=tokenManager.cjs.map

package/dist/tokenManager.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager.cjs","names":["jwt"],"sources":["../src/tokenManager.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\nimport type ms from 'ms';\n\nexport interface TokenPayload {\n\tuserId: string;\n\temail?: string;\n\t[key: string]: any;\n}\n\nexport interface TokenPair {\n\taccessToken: string;\n\trefreshToken: string;\n}\n\nexport interface TokenManagerOptions {\n\taccessTokenSecret: string;\n\trefreshTokenSecret: string;\n\taccessTokenExpiresIn?: ms.StringValue;\n\trefreshTokenExpiresIn?: ms.StringValue;\n}\n\nexport interface DecodedToken extends TokenPayload {\n\tiat: number;\n\texp: number;\n}\n\nexport class TokenManager {\n\tprivate accessTokenSecret: string;\n\tprivate refreshTokenSecret: string;\n\tprivate accessTokenExpiresIn: ms.StringValue;\n\tprivate refreshTokenExpiresIn: ms.StringValue;\n\n\tconstructor(options: TokenManagerOptions) {\n\t\tthis.accessTokenSecret = options.accessTokenSecret;\n\t\tthis.refreshTokenSecret = options.refreshTokenSecret;\n\t\tthis.accessTokenExpiresIn = options.accessTokenExpiresIn || '15m';\n\t\tthis.refreshTokenExpiresIn = options.refreshTokenExpiresIn || '7d';\n\t}\n\n\tgenerateTokenPair(payload: TokenPayload): TokenPair {\n\t\tconst accessToken = jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\n\t\tconst refreshToken = jwt.sign(payload, this.refreshTokenSecret, {\n\t\t\texpiresIn: this.refreshTokenExpiresIn,\n\t\t});\n\n\t\treturn {\n\t\t\taccessToken,\n\t\t\trefreshToken,\n\t\t};\n\t}\n\n\tverifyAccessToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.accessTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid access token: ${message}`);\n\t\t}\n\t}\n\n\tverifyRefreshToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.refreshTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid refresh token: ${message}`);\n\t\t}\n\t}\n\n\trefreshAccessToken(refreshToken: string): string {\n\t\tconst decoded = this.verifyRefreshToken(refreshToken);\n\n\t\t// Remove JWT specific fields before creating new token\n\t\tconst { iat, exp, ...payload } = decoded;\n\n\t\treturn jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\t}\n\n\tdecodeToken(token: string): DecodedToken | null {\n\t\ttry {\n\t\t\treturn jwt.decode(token) as DecodedToken;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tisTokenExpired(token: string): boolean {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return true;\n\n\t\tconst now = Math.floor(Date.now() / 1000);\n\t\treturn decoded.exp < now;\n\t}\n\n\tgetTokenExpiration(token: string): Date | null {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return null;\n\n\t\treturn new Date(decoded.exp * 1000);\n\t}\n}\n"],"mappings":";;;;;AA0BA,IAAa,eAAb,MAA0B;CACzB;CACA;CACA;CACA;CAEA,YAAY,SAA8B;EACzC,KAAK,oBAAoB,QAAQ;EACjC,KAAK,qBAAqB,QAAQ;EAClC,KAAK,uBAAuB,QAAQ,wBAAwB;EAC5D,KAAK,wBAAwB,QAAQ,yBAAyB;CAC/D;CAEA,kBAAkB,SAAkC;EASnD,OAAO;GACN,aATmBA,aAAAA,QAAI,KAAK,SAAS,KAAK,mBAAmB,EAC7D,WAAW,KAAK,qBACjB,CAOW;GACV,cANoBA,aAAAA,QAAI,KAAK,SAAS,KAAK,oBAAoB,EAC/D,WAAW,KAAK,sBACjB,CAIY;EACZ;CACD;CAEA,kBAAkB,OAA6B;EAC9C,IAAI;GACH,OAAOA,aAAAA,QAAI,OAAO,OAAO,KAAK,iBAAiB;EAChD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,IAAI,MAAM,yBAAyB,SAAS;EACnD;CACD;CAEA,mBAAmB,OAA6B;EAC/C,IAAI;GACH,OAAOA,aAAAA,QAAI,OAAO,OAAO,KAAK,kBAAkB;EACjD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,IAAI,MAAM,0BAA0B,SAAS;EACpD;CACD;CAEA,mBAAmB,cAA8B;EAIhD,MAAM,EAAE,KAAK,KAAK,GAAG,YAHL,KAAK,mBAAmB,YAGD;EAEvC,OAAOA,aAAAA,QAAI,KAAK,SAAS,KAAK,mBAAmB,EAChD,WAAW,KAAK,qBACjB,CAAC;CACF;CAEA,YAAY,OAAoC;EAC/C,IAAI;GACH,OAAOA,aAAAA,QAAI,OAAO,KAAK;EACxB,QAAQ;GACP,OAAO;EACR;CACD;CAEA,eAAe,OAAwB;EACtC,MAAM,UAAU,KAAK,YAAY,KAAK;EACtC,IAAI,CAAC,SAAS,OAAO;EAErB,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EACxC,OAAO,QAAQ,MAAM;CACtB;CAEA,mBAAmB,OAA4B;EAC9C,MAAM,UAAU,KAAK,YAAY,KAAK;EACtC,IAAI,CAAC,SAAS,OAAO;EAErB,uBAAO,IAAI,KAAK,QAAQ,MAAM,GAAI;CACnC;AACD"}

package/dist/tokenManager.d.cts

@@ -1,2 +1,37 @@
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CL3yE06D.cjs";
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+import ms from "ms";
+//#region src/tokenManager.d.ts
+export interface TokenPayload {
+  userId: string;
+  email?: string;
+  [key: string]: any;
+}
+export interface TokenPair {
+  accessToken: string;
+  refreshToken: string;
+}
+export interface TokenManagerOptions {
+  accessTokenSecret: string;
+  refreshTokenSecret: string;
+  accessTokenExpiresIn?: ms.StringValue;
+  refreshTokenExpiresIn?: ms.StringValue;
+}
+export interface DecodedToken extends TokenPayload {
+  iat: number;
+  exp: number;
+}
+export declare class TokenManager {
+  private accessTokenSecret;
+  private refreshTokenSecret;
+  private accessTokenExpiresIn;
+  private refreshTokenExpiresIn;
+  constructor(options: TokenManagerOptions);
+  generateTokenPair(payload: TokenPayload): TokenPair;
+  verifyAccessToken(token: string): DecodedToken;
+  verifyRefreshToken(token: string): DecodedToken;
+  refreshAccessToken(refreshToken: string): string;
+  decodeToken(token: string): DecodedToken | null;
+  isTokenExpired(token: string): boolean;
+  getTokenExpiration(token: string): Date | null;
+}
+//#endregion
+//# sourceMappingURL=tokenManager.d.cts.map

package/dist/tokenManager.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager.d.cts","names":[],"sources":["../src/tokenManager.ts"],"mappings":";;iBAGiB;EAChB;EACA;GACC;;iBAGe;EAChB;EACA;;iBAGgB;EAChB;EACA;EACA,uBAAuB,GAAG;EAC1B,wBAAwB,GAAG;;iBAGX,qBAAqB;EACrC;EACA;;qBAGY;UACJ;UACA;UACA;UACA;EAER,YAAY,SAAS;EAOrB,kBAAkB,SAAS,eAAe;EAe1C,kBAAkB,gBAAgB;EASlC,mBAAmB,gBAAgB;EASnC,mBAAmB;EAWnB,YAAY,gBAAgB;EAQ5B,eAAe;EAQf,mBAAmB,gBAAgB"}

package/dist/tokenManager.d.mts

@@ -1,2 +1,37 @@
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CosB7J0i.mjs";
-export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+import ms from "ms";
+//#region src/tokenManager.d.ts
+export interface TokenPayload {
+  userId: string;
+  email?: string;
+  [key: string]: any;
+}
+export interface TokenPair {
+  accessToken: string;
+  refreshToken: string;
+}
+export interface TokenManagerOptions {
+  accessTokenSecret: string;
+  refreshTokenSecret: string;
+  accessTokenExpiresIn?: ms.StringValue;
+  refreshTokenExpiresIn?: ms.StringValue;
+}
+export interface DecodedToken extends TokenPayload {
+  iat: number;
+  exp: number;
+}
+export declare class TokenManager {
+  private accessTokenSecret;
+  private refreshTokenSecret;
+  private accessTokenExpiresIn;
+  private refreshTokenExpiresIn;
+  constructor(options: TokenManagerOptions);
+  generateTokenPair(payload: TokenPayload): TokenPair;
+  verifyAccessToken(token: string): DecodedToken;
+  verifyRefreshToken(token: string): DecodedToken;
+  refreshAccessToken(refreshToken: string): string;
+  decodeToken(token: string): DecodedToken | null;
+  isTokenExpired(token: string): boolean;
+  getTokenExpiration(token: string): Date | null;
+}
+//#endregion
+//# sourceMappingURL=tokenManager.d.mts.map

package/dist/tokenManager.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager.d.mts","names":[],"sources":["../src/tokenManager.ts"],"mappings":";;iBAGiB;EAChB;EACA;GACC;;iBAGe;EAChB;EACA;;iBAGgB;EAChB;EACA;EACA,uBAAuB,GAAG;EAC1B,wBAAwB,GAAG;;iBAGX,qBAAqB;EACrC;EACA;;qBAGY;UACJ;UACA;UACA;UACA;EAER,YAAY,SAAS;EAOrB,kBAAkB,SAAS,eAAe;EAe1C,kBAAkB,gBAAgB;EASlC,mBAAmB,gBAAgB;EASnC,mBAAmB;EAWnB,YAAY,gBAAgB;EAQ5B,eAAe;EAQf,mBAAmB,gBAAgB"}

package/dist/tokenManager.mjs

@@ -1,3 +1,62 @@
-import { TokenManager } from "./tokenManager-BbylTW7F.mjs";
+import jwt from "jsonwebtoken";
+//#region src/tokenManager.ts
+var TokenManager = class {
+	accessTokenSecret;
+	refreshTokenSecret;
+	accessTokenExpiresIn;
+	refreshTokenExpiresIn;
+	constructor(options) {
+		this.accessTokenSecret = options.accessTokenSecret;
+		this.refreshTokenSecret = options.refreshTokenSecret;
+		this.accessTokenExpiresIn = options.accessTokenExpiresIn || "15m";
+		this.refreshTokenExpiresIn = options.refreshTokenExpiresIn || "7d";
+	}
+	generateTokenPair(payload) {
+		return {
+			accessToken: jwt.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn }),
+			refreshToken: jwt.sign(payload, this.refreshTokenSecret, { expiresIn: this.refreshTokenExpiresIn })
+		};
+	}
+	verifyAccessToken(token) {
+		try {
+			return jwt.verify(token, this.accessTokenSecret);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			throw new Error(`Invalid access token: ${message}`);
+		}
+	}
+	verifyRefreshToken(token) {
+		try {
+			return jwt.verify(token, this.refreshTokenSecret);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			throw new Error(`Invalid refresh token: ${message}`);
+		}
+	}
+	refreshAccessToken(refreshToken) {
+		const { iat, exp, ...payload } = this.verifyRefreshToken(refreshToken);
+		return jwt.sign(payload, this.accessTokenSecret, { expiresIn: this.accessTokenExpiresIn });
+	}
+	decodeToken(token) {
+		try {
+			return jwt.decode(token);
+		} catch {
+			return null;
+		}
+	}
+	isTokenExpired(token) {
+		const decoded = this.decodeToken(token);
+		if (!decoded) return true;
+		const now = Math.floor(Date.now() / 1e3);
+		return decoded.exp < now;
+	}
+	getTokenExpiration(token) {
+		const decoded = this.decodeToken(token);
+		if (!decoded) return null;
+		return /* @__PURE__ */ new Date(decoded.exp * 1e3);
+	}
+};
+//#endregion
+export { TokenManager };
 
-export { TokenManager };
+//# sourceMappingURL=tokenManager.mjs.map

package/dist/tokenManager.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager.mjs","names":[],"sources":["../src/tokenManager.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\nimport type ms from 'ms';\n\nexport interface TokenPayload {\n\tuserId: string;\n\temail?: string;\n\t[key: string]: any;\n}\n\nexport interface TokenPair {\n\taccessToken: string;\n\trefreshToken: string;\n}\n\nexport interface TokenManagerOptions {\n\taccessTokenSecret: string;\n\trefreshTokenSecret: string;\n\taccessTokenExpiresIn?: ms.StringValue;\n\trefreshTokenExpiresIn?: ms.StringValue;\n}\n\nexport interface DecodedToken extends TokenPayload {\n\tiat: number;\n\texp: number;\n}\n\nexport class TokenManager {\n\tprivate accessTokenSecret: string;\n\tprivate refreshTokenSecret: string;\n\tprivate accessTokenExpiresIn: ms.StringValue;\n\tprivate refreshTokenExpiresIn: ms.StringValue;\n\n\tconstructor(options: TokenManagerOptions) {\n\t\tthis.accessTokenSecret = options.accessTokenSecret;\n\t\tthis.refreshTokenSecret = options.refreshTokenSecret;\n\t\tthis.accessTokenExpiresIn = options.accessTokenExpiresIn || '15m';\n\t\tthis.refreshTokenExpiresIn = options.refreshTokenExpiresIn || '7d';\n\t}\n\n\tgenerateTokenPair(payload: TokenPayload): TokenPair {\n\t\tconst accessToken = jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\n\t\tconst refreshToken = jwt.sign(payload, this.refreshTokenSecret, {\n\t\t\texpiresIn: this.refreshTokenExpiresIn,\n\t\t});\n\n\t\treturn {\n\t\t\taccessToken,\n\t\t\trefreshToken,\n\t\t};\n\t}\n\n\tverifyAccessToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.accessTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid access token: ${message}`);\n\t\t}\n\t}\n\n\tverifyRefreshToken(token: string): DecodedToken {\n\t\ttry {\n\t\t\treturn jwt.verify(token, this.refreshTokenSecret) as DecodedToken;\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthrow new Error(`Invalid refresh token: ${message}`);\n\t\t}\n\t}\n\n\trefreshAccessToken(refreshToken: string): string {\n\t\tconst decoded = this.verifyRefreshToken(refreshToken);\n\n\t\t// Remove JWT specific fields before creating new token\n\t\tconst { iat, exp, ...payload } = decoded;\n\n\t\treturn jwt.sign(payload, this.accessTokenSecret, {\n\t\t\texpiresIn: this.accessTokenExpiresIn,\n\t\t});\n\t}\n\n\tdecodeToken(token: string): DecodedToken | null {\n\t\ttry {\n\t\t\treturn jwt.decode(token) as DecodedToken;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tisTokenExpired(token: string): boolean {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return true;\n\n\t\tconst now = Math.floor(Date.now() / 1000);\n\t\treturn decoded.exp < now;\n\t}\n\n\tgetTokenExpiration(token: string): Date | null {\n\t\tconst decoded = this.decodeToken(token);\n\t\tif (!decoded) return null;\n\n\t\treturn new Date(decoded.exp * 1000);\n\t}\n}\n"],"mappings":";;AA0BA,IAAa,eAAb,MAA0B;CACzB;CACA;CACA;CACA;CAEA,YAAY,SAA8B;EACzC,KAAK,oBAAoB,QAAQ;EACjC,KAAK,qBAAqB,QAAQ;EAClC,KAAK,uBAAuB,QAAQ,wBAAwB;EAC5D,KAAK,wBAAwB,QAAQ,yBAAyB;CAC/D;CAEA,kBAAkB,SAAkC;EASnD,OAAO;GACN,aATmB,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAC7D,WAAW,KAAK,qBACjB,CAOW;GACV,cANoB,IAAI,KAAK,SAAS,KAAK,oBAAoB,EAC/D,WAAW,KAAK,sBACjB,CAIY;EACZ;CACD;CAEA,kBAAkB,OAA6B;EAC9C,IAAI;GACH,OAAO,IAAI,OAAO,OAAO,KAAK,iBAAiB;EAChD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,IAAI,MAAM,yBAAyB,SAAS;EACnD;CACD;CAEA,mBAAmB,OAA6B;EAC/C,IAAI;GACH,OAAO,IAAI,OAAO,OAAO,KAAK,kBAAkB;EACjD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,IAAI,MAAM,0BAA0B,SAAS;EACpD;CACD;CAEA,mBAAmB,cAA8B;EAIhD,MAAM,EAAE,KAAK,KAAK,GAAG,YAHL,KAAK,mBAAmB,YAGD;EAEvC,OAAO,IAAI,KAAK,SAAS,KAAK,mBAAmB,EAChD,WAAW,KAAK,qBACjB,CAAC;CACF;CAEA,YAAY,OAAoC;EAC/C,IAAI;GACH,OAAO,IAAI,OAAO,KAAK;EACxB,QAAQ;GACP,OAAO;EACR;CACD;CAEA,eAAe,OAAwB;EACtC,MAAM,UAAU,KAAK,YAAY,KAAK;EACtC,IAAI,CAAC,SAAS,OAAO;EAErB,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EACxC,OAAO,QAAQ,MAAM;CACtB;CAEA,mBAAmB,OAA4B;EAC9C,MAAM,UAAU,KAAK,YAAY,KAAK;EACtC,IAAI,CAAC,SAAS,OAAO;EAErB,uBAAO,IAAI,KAAK,QAAQ,MAAM,GAAI;CACnC;AACD"}