@geekmidas/auth 10.0.0-alpha.99 → 10.0.0

package/dist/oidc-ChA17wLB.d.cts

@@ -0,0 +1,87 @@
+import { JwtClaims } from "./jwt-3eIuY2dg.cjs";
+
+//#region src/oidc.d.ts
+
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//# sourceMappingURL=oidc.d.ts.map
+//#endregion
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
+//# sourceMappingURL=oidc-ChA17wLB.d.cts.map

package/dist/oidc-ChA17wLB.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-ChA17wLB.d.cts","names":[],"sources":["../src/oidc.ts"],"sourcesContent":[],"mappings":";;;;;AAQA;AAWA;AAiCiB,UA5CA,UAAA,SAAmB,SA4CN,CAAA;EAcb,KAAA,CAAA,EAAA,MAAU;EASd,SAAA,CAAA,EAAA,MAAY;EAAA,OAAA,CAAA,EAAA,MAAA;EAAA,MACR,CAAA,EAAA,MAAA;EAAU,GAAG,CAAA,EAAA,MAAA;;;;;AAaP,UAtEN,YAAA,CAsEM;EAAO,GAwBQ,EAAA,MAAA;EAAO,IAAf,CAAA,EAAA,MAAA;EAAO,UASO,CAAA,EAAA,MAAA;EAAO,WAAf,CAAA,EAAA,MAAA;EAAO,WAQE,CAAA,EAAA,MAAA;EAAS,QAAjB,CAAA,EAAA,MAAA;EAAO,kBAAA,CAAA,EAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;UA9E3B,aAAA;;;;;;;;;;;;;UAcA,UAAA;;;;;;;;cASJ,6BACI,aAAa,8BACX,eAAe;;;;;sBAMI;kBAMf,QAAQ;;yBAwBD,QAAQ;+BASF,QAAQ;gCAQP,QAAQ"}

package/dist/oidc-DTRgBBl6.d.mts

@@ -0,0 +1,87 @@
+import { JwtClaims } from "./jwt-BqLlRkw-.mjs";
+
+//#region src/oidc.d.ts
+
+/**
+ * Standard OIDC claims (extends JWT claims)
+ */
+interface OidcClaims extends JwtClaims {
+  nonce?: string;
+  auth_time?: number;
+  at_hash?: string;
+  c_hash?: string;
+  azp?: string;
+}
+/**
+ * Standard OIDC user info claims
+ */
+interface OidcUserInfo {
+  sub: string;
+  name?: string;
+  given_name?: string;
+  family_name?: string;
+  middle_name?: string;
+  nickname?: string;
+  preferred_username?: string;
+  profile?: string;
+  picture?: string;
+  website?: string;
+  email?: string;
+  email_verified?: boolean;
+  gender?: string;
+  birthdate?: string;
+  zoneinfo?: string;
+  locale?: string;
+  phone_number?: string;
+  phone_number_verified?: boolean;
+  address?: {
+    formatted?: string;
+    street_address?: string;
+    locality?: string;
+    region?: string;
+    postal_code?: string;
+    country?: string;
+  };
+  updated_at?: number;
+}
+/**
+ * OIDC Discovery document
+ */
+interface OidcDiscovery {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  scopes_supported?: string[];
+  response_types_supported: string[];
+  claims_supported?: string[];
+}
+/**
+ * Configuration for OIDC verification
+ */
+interface OidcConfig {
+  issuer: string;
+  audience: string | string[];
+  cacheDiscovery?: boolean;
+}
+/**
+ * OIDC Verifier with auto-discovery and caching
+ */
+declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
+  private readonly config;
+  private discovery;
+  private jwks;
+  private readonly discoveryUrl;
+  constructor(config: OidcConfig);
+  getDiscovery(): Promise<OidcDiscovery>;
+  private getJwks;
+  verify(token: string): Promise<TClaims>;
+  verifyOrNull(token: string): Promise<TClaims | null>;
+  fetchUserInfo(token: string): Promise<TUserInfo | null>;
+  clearCache(): void;
+}
+//# sourceMappingURL=oidc.d.ts.map
+//#endregion
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier };
+//# sourceMappingURL=oidc-DTRgBBl6.d.mts.map

package/dist/oidc-DTRgBBl6.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-DTRgBBl6.d.mts","names":[],"sources":["../src/oidc.ts"],"sourcesContent":[],"mappings":";;;;;AAQA;AAWA;AAiCiB,UA5CA,UAAA,SAAmB,SA4CN,CAAA;EAcb,KAAA,CAAA,EAAA,MAAU;EASd,SAAA,CAAA,EAAA,MAAY;EAAA,OAAA,CAAA,EAAA,MAAA;EAAA,MACR,CAAA,EAAA,MAAA;EAAU,GAAG,CAAA,EAAA,MAAA;;;;;AAaP,UAtEN,YAAA,CAsEM;EAAO,GAwBQ,EAAA,MAAA;EAAO,IAAf,CAAA,EAAA,MAAA;EAAO,UASO,CAAA,EAAA,MAAA;EAAO,WAAf,CAAA,EAAA,MAAA;EAAO,WAQE,CAAA,EAAA,MAAA;EAAS,QAAjB,CAAA,EAAA,MAAA;EAAO,kBAAA,CAAA,EAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;UA9E3B,aAAA;;;;;;;;;;;;;UAcA,UAAA;;;;;;;;cASJ,6BACI,aAAa,8BACX,eAAe;;;;;sBAMI;kBAMf,QAAQ;;yBAwBD,QAAQ;+BASF,QAAQ;gCAQP,QAAQ"}

package/dist/oidc-KA30gMlx.mjs

@@ -0,0 +1,62 @@
+import * as jose from "jose";
+
+//#region src/oidc.ts
+/**
+* OIDC Verifier with auto-discovery and caching
+*/
+var OidcVerifier = class {
+	discovery = null;
+	jwks = null;
+	discoveryUrl;
+	constructor(config) {
+		this.config = config;
+		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
+	}
+	async getDiscovery() {
+		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
+		const response = await fetch(this.discoveryUrl);
+		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+		this.discovery = await response.json();
+		return this.discovery;
+	}
+	async getJwks() {
+		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
+		const disc = await this.getDiscovery();
+		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
+		return this.jwks;
+	}
+	async verify(token) {
+		const key = await this.getJwks();
+		const { payload } = await jose.jwtVerify(token, key, {
+			issuer: this.config.issuer,
+			audience: this.config.audience
+		});
+		return payload;
+	}
+	async verifyOrNull(token) {
+		try {
+			return await this.verify(token);
+		} catch {
+			return null;
+		}
+	}
+	async fetchUserInfo(token) {
+		try {
+			const disc = await this.getDiscovery();
+			if (!disc.userinfo_endpoint) return null;
+			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
+			if (!response.ok) return null;
+			return await response.json();
+		} catch {
+			return null;
+		}
+	}
+	clearCache() {
+		this.discovery = null;
+		this.jwks = null;
+	}
+};
+
+//#endregion
+export { OidcVerifier };
+//# sourceMappingURL=oidc-KA30gMlx.mjs.map

package/dist/oidc-KA30gMlx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-KA30gMlx.mjs","names":["config: OidcConfig","token: string"],"sources":["../src/oidc.ts"],"sourcesContent":["import * as jose from 'jose';\nimport type { JwtClaims, TokenExtractionOptions } from './jwt';\n\nexport type { TokenExtractionOptions };\n\n/**\n * Standard OIDC claims (extends JWT claims)\n */\nexport interface OidcClaims extends JwtClaims {\n\tnonce?: string;\n\tauth_time?: number;\n\tat_hash?: string;\n\tc_hash?: string;\n\tazp?: string;\n}\n\n/**\n * Standard OIDC user info claims\n */\nexport interface OidcUserInfo {\n\tsub: string;\n\tname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n\tmiddle_name?: string;\n\tnickname?: string;\n\tpreferred_username?: string;\n\tprofile?: string;\n\tpicture?: string;\n\twebsite?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tgender?: string;\n\tbirthdate?: string;\n\tzoneinfo?: string;\n\tlocale?: string;\n\tphone_number?: string;\n\tphone_number_verified?: boolean;\n\taddress?: {\n\t\tformatted?: string;\n\t\tstreet_address?: string;\n\t\tlocality?: string;\n\t\tregion?: string;\n\t\tpostal_code?: string;\n\t\tcountry?: string;\n\t};\n\tupdated_at?: number;\n}\n\n/**\n * OIDC Discovery document\n */\nexport interface OidcDiscovery {\n\tissuer: string;\n\tauthorization_endpoint: string;\n\ttoken_endpoint: string;\n\tuserinfo_endpoint?: string;\n\tjwks_uri: string;\n\tscopes_supported?: string[];\n\tresponse_types_supported: string[];\n\tclaims_supported?: string[];\n}\n\n/**\n * Configuration for OIDC verification\n */\nexport interface OidcConfig {\n\tissuer: string;\n\taudience: string | string[];\n\tcacheDiscovery?: boolean;\n}\n\n/**\n * OIDC Verifier with auto-discovery and caching\n */\nexport class OidcVerifier<\n\tTClaims extends OidcClaims = OidcClaims,\n\tTUserInfo extends OidcUserInfo = OidcUserInfo,\n> {\n\tprivate discovery: OidcDiscovery | null = null;\n\tprivate jwks: jose.JWTVerifyGetKey | null = null;\n\tprivate readonly discoveryUrl: string;\n\n\tconstructor(private readonly config: OidcConfig) {\n\t\tthis.discoveryUrl = config.issuer.endsWith('/')\n\t\t\t? `${config.issuer}.well-known/openid-configuration`\n\t\t\t: `${config.issuer}/.well-known/openid-configuration`;\n\t}\n\n\tasync getDiscovery(): Promise<OidcDiscovery> {\n\t\tif (this.discovery && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.discovery;\n\t\t}\n\n\t\tconst response = await fetch(this.discoveryUrl);\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);\n\t\t}\n\n\t\tthis.discovery = (await response.json()) as OidcDiscovery;\n\t\treturn this.discovery;\n\t}\n\n\tprivate async getJwks(): Promise<jose.JWTVerifyGetKey> {\n\t\tif (this.jwks && this.config.cacheDiscovery !== false) {\n\t\t\treturn this.jwks;\n\t\t}\n\n\t\tconst disc = await this.getDiscovery();\n\t\tthis.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));\n\t\treturn this.jwks;\n\t}\n\n\tasync verify(token: string): Promise<TClaims> {\n\t\tconst key = await this.getJwks();\n\t\tconst { payload } = await jose.jwtVerify(token, key, {\n\t\t\tissuer: this.config.issuer,\n\t\t\taudience: this.config.audience,\n\t\t});\n\t\treturn payload as unknown as TClaims;\n\t}\n\n\tasync verifyOrNull(token: string): Promise<TClaims | null> {\n\t\ttry {\n\t\t\treturn await this.verify(token);\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tasync fetchUserInfo(token: string): Promise<TUserInfo | null> {\n\t\ttry {\n\t\t\tconst disc = await this.getDiscovery();\n\t\t\tif (!disc.userinfo_endpoint) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tconst response = await fetch(disc.userinfo_endpoint, {\n\t\t\t\theaders: { Authorization: `Bearer ${token}` },\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await response.json()) as TUserInfo;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\n\tclearCache(): void {\n\t\tthis.discovery = null;\n\t\tthis.jwks = null;\n\t}\n}\n"],"mappings":";;;;;;AA2EA,IAAa,eAAb,MAGE;CACD,AAAQ,YAAkC;CAC1C,AAAQ,OAAoC;CAC5C,AAAiB;CAEjB,YAA6BA,QAAoB;EAApB;AAC5B,OAAK,eAAe,OAAO,OAAO,SAAS,IAAI,IAC3C,EAAE,OAAO,OAAO,qCAChB,EAAE,OAAO,OAAO;CACpB;CAED,MAAM,eAAuC;AAC5C,MAAI,KAAK,aAAa,KAAK,OAAO,mBAAmB,MACpD,QAAO,KAAK;EAGb,MAAM,WAAW,MAAM,MAAM,KAAK,aAAa;AAC/C,OAAK,SAAS,GACb,OAAM,IAAI,OAAO,kCAAkC,SAAS,WAAW;AAGxE,OAAK,YAAa,MAAM,SAAS,MAAM;AACvC,SAAO,KAAK;CACZ;CAED,MAAc,UAAyC;AACtD,MAAI,KAAK,QAAQ,KAAK,OAAO,mBAAmB,MAC/C,QAAO,KAAK;EAGb,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,OAAK,OAAO,KAAK,mBAAmB,IAAI,IAAI,KAAK,UAAU;AAC3D,SAAO,KAAK;CACZ;CAED,MAAM,OAAOC,OAAiC;EAC7C,MAAM,MAAM,MAAM,KAAK,SAAS;EAChC,MAAM,EAAE,SAAS,GAAG,MAAM,KAAK,UAAU,OAAO,KAAK;GACpD,QAAQ,KAAK,OAAO;GACpB,UAAU,KAAK,OAAO;EACtB,EAAC;AACF,SAAO;CACP;CAED,MAAM,aAAaA,OAAwC;AAC1D,MAAI;AACH,UAAO,MAAM,KAAK,OAAO,MAAM;EAC/B,QAAO;AACP,UAAO;EACP;CACD;CAED,MAAM,cAAcA,OAA0C;AAC7D,MAAI;GACH,MAAM,OAAO,MAAM,KAAK,cAAc;AACtC,QAAK,KAAK,kBACT,QAAO;GAGR,MAAM,WAAW,MAAM,MAAM,KAAK,mBAAmB,EACpD,SAAS,EAAE,gBAAgB,SAAS,MAAM,EAAG,EAC7C,EAAC;AAEF,QAAK,SAAS,GACb,QAAO;AAGR,UAAQ,MAAM,SAAS,MAAM;EAC7B,QAAO;AACP,UAAO;EACP;CACD;CAED,aAAmB;AAClB,OAAK,YAAY;AACjB,OAAK,OAAO;CACZ;AACD"}

package/dist/oidc.cjs

@@ -1,65 +1,3 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
-let jose = require("jose");
-jose = require_rolldown_runtime.__toESM(jose, 1);
-//#region src/oidc.ts
-/**
-* OIDC Verifier with auto-discovery and caching
-*/
-var OidcVerifier = class {
-	config;
-	discovery = null;
-	jwks = null;
-	discoveryUrl;
-	constructor(config) {
-		this.config = config;
-		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
-	}
-	async getDiscovery() {
-		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
-		const response = await fetch(this.discoveryUrl);
-		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
-		this.discovery = await response.json();
-		return this.discovery;
-	}
-	async getJwks() {
-		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
-		const disc = await this.getDiscovery();
-		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
-		return this.jwks;
-	}
-	async verify(token) {
-		const key = await this.getJwks();
-		const { payload } = await jose.jwtVerify(token, key, {
-			issuer: this.config.issuer,
-			audience: this.config.audience
-		});
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	async fetchUserInfo(token) {
-		try {
-			const disc = await this.getDiscovery();
-			if (!disc.userinfo_endpoint) return null;
-			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
-			if (!response.ok) return null;
-			return await response.json();
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.discovery = null;
-		this.jwks = null;
-	}
-};
-//#endregion
-exports.OidcVerifier = OidcVerifier;
+const require_oidc = require('./oidc-C0KyYaAK.cjs');
 
-//# sourceMappingURL=oidc.cjs.map
+exports.OidcVerifier = require_oidc.OidcVerifier;

package/dist/oidc.d.cts

@@ -1,84 +1,3 @@
-import { o as TokenExtractionOptions, t as JwtClaims } from "./jwt-CoKrpeMB.cjs";
-//#region src/oidc.d.ts
-/**
- * Standard OIDC claims (extends JWT claims)
- */
-export interface OidcClaims extends JwtClaims {
-  nonce?: string;
-  auth_time?: number;
-  at_hash?: string;
-  c_hash?: string;
-  azp?: string;
-}
-/**
- * Standard OIDC user info claims
- */
-export interface OidcUserInfo {
-  sub: string;
-  name?: string;
-  given_name?: string;
-  family_name?: string;
-  middle_name?: string;
-  nickname?: string;
-  preferred_username?: string;
-  profile?: string;
-  picture?: string;
-  website?: string;
-  email?: string;
-  email_verified?: boolean;
-  gender?: string;
-  birthdate?: string;
-  zoneinfo?: string;
-  locale?: string;
-  phone_number?: string;
-  phone_number_verified?: boolean;
-  address?: {
-    formatted?: string;
-    street_address?: string;
-    locality?: string;
-    region?: string;
-    postal_code?: string;
-    country?: string;
-  };
-  updated_at?: number;
-}
-/**
- * OIDC Discovery document
- */
-export interface OidcDiscovery {
-  issuer: string;
-  authorization_endpoint: string;
-  token_endpoint: string;
-  userinfo_endpoint?: string;
-  jwks_uri: string;
-  scopes_supported?: string[];
-  response_types_supported: string[];
-  claims_supported?: string[];
-}
-/**
- * Configuration for OIDC verification
- */
-export interface OidcConfig {
-  issuer: string;
-  audience: string | string[];
-  cacheDiscovery?: boolean;
-}
-/**
- * OIDC Verifier with auto-discovery and caching
- */
-export declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
-  private readonly config;
-  private discovery;
-  private jwks;
-  private readonly discoveryUrl;
-  constructor(config: OidcConfig);
-  getDiscovery(): Promise<OidcDiscovery>;
-  private getJwks;
-  verify(token: string): Promise<TClaims>;
-  verifyOrNull(token: string): Promise<TClaims | null>;
-  fetchUserInfo(token: string): Promise<TUserInfo | null>;
-  clearCache(): void;
-}
-//#endregion
-export type { TokenExtractionOptions };
-//# sourceMappingURL=oidc.d.cts.map
+import { TokenExtractionOptions } from "./jwt-3eIuY2dg.cjs";
+import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-ChA17wLB.cjs";
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };

package/dist/oidc.d.mts

@@ -1,84 +1,3 @@
-import { o as TokenExtractionOptions, t as JwtClaims } from "./jwt-CoKrpeMB.mjs";
-//#region src/oidc.d.ts
-/**
- * Standard OIDC claims (extends JWT claims)
- */
-export interface OidcClaims extends JwtClaims {
-  nonce?: string;
-  auth_time?: number;
-  at_hash?: string;
-  c_hash?: string;
-  azp?: string;
-}
-/**
- * Standard OIDC user info claims
- */
-export interface OidcUserInfo {
-  sub: string;
-  name?: string;
-  given_name?: string;
-  family_name?: string;
-  middle_name?: string;
-  nickname?: string;
-  preferred_username?: string;
-  profile?: string;
-  picture?: string;
-  website?: string;
-  email?: string;
-  email_verified?: boolean;
-  gender?: string;
-  birthdate?: string;
-  zoneinfo?: string;
-  locale?: string;
-  phone_number?: string;
-  phone_number_verified?: boolean;
-  address?: {
-    formatted?: string;
-    street_address?: string;
-    locality?: string;
-    region?: string;
-    postal_code?: string;
-    country?: string;
-  };
-  updated_at?: number;
-}
-/**
- * OIDC Discovery document
- */
-export interface OidcDiscovery {
-  issuer: string;
-  authorization_endpoint: string;
-  token_endpoint: string;
-  userinfo_endpoint?: string;
-  jwks_uri: string;
-  scopes_supported?: string[];
-  response_types_supported: string[];
-  claims_supported?: string[];
-}
-/**
- * Configuration for OIDC verification
- */
-export interface OidcConfig {
-  issuer: string;
-  audience: string | string[];
-  cacheDiscovery?: boolean;
-}
-/**
- * OIDC Verifier with auto-discovery and caching
- */
-export declare class OidcVerifier<TClaims extends OidcClaims = OidcClaims, TUserInfo extends OidcUserInfo = OidcUserInfo> {
-  private readonly config;
-  private discovery;
-  private jwks;
-  private readonly discoveryUrl;
-  constructor(config: OidcConfig);
-  getDiscovery(): Promise<OidcDiscovery>;
-  private getJwks;
-  verify(token: string): Promise<TClaims>;
-  verifyOrNull(token: string): Promise<TClaims | null>;
-  fetchUserInfo(token: string): Promise<TUserInfo | null>;
-  clearCache(): void;
-}
-//#endregion
-export type { TokenExtractionOptions };
-//# sourceMappingURL=oidc.d.mts.map
+import { TokenExtractionOptions } from "./jwt-BqLlRkw-.mjs";
+import { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier } from "./oidc-DTRgBBl6.mjs";
+export { OidcClaims, OidcConfig, OidcDiscovery, OidcUserInfo, OidcVerifier, TokenExtractionOptions };

package/dist/oidc.mjs

@@ -1,62 +1,3 @@
-import * as jose from "jose";
-//#region src/oidc.ts
-/**
-* OIDC Verifier with auto-discovery and caching
-*/
-var OidcVerifier = class {
-	config;
-	discovery = null;
-	jwks = null;
-	discoveryUrl;
-	constructor(config) {
-		this.config = config;
-		this.discoveryUrl = config.issuer.endsWith("/") ? `${config.issuer}.well-known/openid-configuration` : `${config.issuer}/.well-known/openid-configuration`;
-	}
-	async getDiscovery() {
-		if (this.discovery && this.config.cacheDiscovery !== false) return this.discovery;
-		const response = await fetch(this.discoveryUrl);
-		if (!response.ok) throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
-		this.discovery = await response.json();
-		return this.discovery;
-	}
-	async getJwks() {
-		if (this.jwks && this.config.cacheDiscovery !== false) return this.jwks;
-		const disc = await this.getDiscovery();
-		this.jwks = jose.createRemoteJWKSet(new URL(disc.jwks_uri));
-		return this.jwks;
-	}
-	async verify(token) {
-		const key = await this.getJwks();
-		const { payload } = await jose.jwtVerify(token, key, {
-			issuer: this.config.issuer,
-			audience: this.config.audience
-		});
-		return payload;
-	}
-	async verifyOrNull(token) {
-		try {
-			return await this.verify(token);
-		} catch {
-			return null;
-		}
-	}
-	async fetchUserInfo(token) {
-		try {
-			const disc = await this.getDiscovery();
-			if (!disc.userinfo_endpoint) return null;
-			const response = await fetch(disc.userinfo_endpoint, { headers: { Authorization: `Bearer ${token}` } });
-			if (!response.ok) return null;
-			return await response.json();
-		} catch {
-			return null;
-		}
-	}
-	clearCache() {
-		this.discovery = null;
-		this.jwks = null;
-	}
-};
-//#endregion
-export { OidcVerifier };
+import { OidcVerifier } from "./oidc-KA30gMlx.mjs";
 
-//# sourceMappingURL=oidc.mjs.map
+export { OidcVerifier };

package/dist/server.cjs

@@ -1,5 +1,5 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cacheTokenStorage = require("./cacheTokenStorage.cjs");
-const require_tokenManager = require("./tokenManager.cjs");
+const require_cacheTokenStorage = require('./cacheTokenStorage-CEpMniTi.cjs');
+const require_tokenManager = require('./tokenManager-CvEMgxOp.cjs');
+
 exports.CacheTokenStorage = require_cacheTokenStorage.CacheTokenStorage;
-exports.TokenManager = require_tokenManager.TokenManager;
+exports.TokenManager = require_tokenManager.TokenManager;

package/dist/server.d.cts

@@ -1,3 +1,3 @@
-import { t as CacheTokenStorage } from "./cacheTokenStorage-B3u8Sf-6.cjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager.cjs";
-export { CacheTokenStorage, type DecodedToken, TokenManager, type TokenManagerOptions, type TokenPair, type TokenPayload };
+import { CacheTokenStorage } from "./cacheTokenStorage-B7sOoysu.cjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-CL3yE06D.cjs";
+export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/dist/server.d.mts

@@ -1,3 +1,3 @@
-import { t as CacheTokenStorage } from "./cacheTokenStorage-B3u8Sf-6.mjs";
-import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager.mjs";
-export { CacheTokenStorage, type DecodedToken, TokenManager, type TokenManagerOptions, type TokenPair, type TokenPayload };
+import { CacheTokenStorage } from "./cacheTokenStorage-_tq4Kmhc.mjs";
+import { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload } from "./tokenManager-RrwjL0y-.mjs";
+export { CacheTokenStorage, DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };

package/dist/server.mjs

@@ -1,3 +1,4 @@
-import { CacheTokenStorage } from "./cacheTokenStorage.mjs";
-import { TokenManager } from "./tokenManager.mjs";
-export { CacheTokenStorage, TokenManager };
+import { CacheTokenStorage } from "./cacheTokenStorage-16NE8Cd9.mjs";
+import { TokenManager } from "./tokenManager-Ci2Tgxp8.mjs";
+
+export { CacheTokenStorage, TokenManager };

package/dist/tokenManager-CL3yE06D.d.cts

@@ -0,0 +1,40 @@
+import ms from "ms";
+
+//#region src/tokenManager.d.ts
+interface TokenPayload {
+  userId: string;
+  email?: string;
+  [key: string]: any;
+}
+interface TokenPair {
+  accessToken: string;
+  refreshToken: string;
+}
+interface TokenManagerOptions {
+  accessTokenSecret: string;
+  refreshTokenSecret: string;
+  accessTokenExpiresIn?: ms.StringValue;
+  refreshTokenExpiresIn?: ms.StringValue;
+}
+interface DecodedToken extends TokenPayload {
+  iat: number;
+  exp: number;
+}
+declare class TokenManager {
+  private accessTokenSecret;
+  private refreshTokenSecret;
+  private accessTokenExpiresIn;
+  private refreshTokenExpiresIn;
+  constructor(options: TokenManagerOptions);
+  generateTokenPair(payload: TokenPayload): TokenPair;
+  verifyAccessToken(token: string): DecodedToken;
+  verifyRefreshToken(token: string): DecodedToken;
+  refreshAccessToken(refreshToken: string): string;
+  decodeToken(token: string): DecodedToken | null;
+  isTokenExpired(token: string): boolean;
+  getTokenExpiration(token: string): Date | null;
+}
+//# sourceMappingURL=tokenManager.d.ts.map
+//#endregion
+export { DecodedToken, TokenManager, TokenManagerOptions, TokenPair, TokenPayload };
+//# sourceMappingURL=tokenManager-CL3yE06D.d.cts.map

package/dist/tokenManager-CL3yE06D.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenManager-CL3yE06D.d.cts","names":[],"sources":["../src/tokenManager.ts"],"sourcesContent":[],"mappings":";;;UAGiB,YAAA;;EAAA,KAAA,CAAA,EAAA,MAAA;EAMA,CAAA,GAAA,EAAA,MAAS,CAAA,EAAA,GAAA;AAK1B;AAAoC,UALnB,SAAA,CAKmB;EAAA,WAGT,EAAA,MAAA;EAAW,YACV,EAAA,MAAA;AAAW;AAGtB,UAPA,mBAAA,CAOqB;EAKzB,iBAAY,EAAA,MAAA;EAAA,kBAAA,EAAA,MAAA;EAAA,oBAMH,CAAA,EAfE,EAAA,CAAG,WAeL;EAAmB,qBAOb,CAAA,EArBH,EAAA,CAAG,WAqBA;;AAeO,UAjClB,YAAA,SAAqB,YAiCH,CAAA;EAAY,GASX,EAAA,MAAA;EAAY,GAoBnB,EAAA,MAAA;;AAgBW,cAzE3B,YAAA,CAyE2B;;;;;uBAnElB;6BAOM,eAAe;oCAeR;qCASC;;8BAoBP;;qCAgBO"}