@gneiss/client-auth 1.0.3 → 1.0.5

package/README.md

@@ -1,76 +1,58 @@
-# js-gneiss-auth-client
-
-A JavaScript client library for integrating with the Gneiss Authentication service. Provides OAuth2 authentication flow with support for access and refresh tokens.
-
-## Installation
-### Installing from npm registry:
-```bash
-npm install @gneiss/client-auth
-```
-### Installing from bitbucket:
-1. Setup SSH keys:
-    * **Windows**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-windows/
-    * **Linux**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-linux/
-    * **MacOS**: https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-macos/
-2. Install the bitbucket npm package via the repository using git+ssh:
-    ```bash
-    npm install git+ssh://git@bitbucket.org:gneissrev/js-client-auth-gneiss.git<branch>
-    ```
-
-## Environment
-You need the following environment variables set:
-```
-NODE_ENV=production
-GNEISS_ENDPOINT=https://auth.gneiss.io
-```
-
-## Usage
-Example for an Express.js application:
-```typescript
-import express from 'express';
-import { ExpressAuthGneissClient } from "@gneiss/client-auth";
-import { AuthGneissCoreConfig } from '@gneiss/client-auth';
-
-// Create express app
-const app = express();
-
-// Initialize auth config
-const config: AuthGneissCoreConfig = {
-  clientId: "<Your app's client ID>,
-  clientSecret: "<Your app's client secret>",
-  baseUrl: "<Your app's base url>",
-  redirectUrl: "/callback"
-};
-
-//Instantiate the auth client with config
-const auth = new ExpressAuthGneissClient(config);
-
-// Login route - redirects to Gneiss login page
-app.get("/login", auth.login);
-
-// Logout route - redirects to Gneiss logout page
-app.get("/logout", auth.logout);
-
-// Callback route - handles OAuth callback from Gneiss
-app.get("/callback", auth.handleCallBack);
-
-// Protected route example
-app.get("/dashboard", auth.requireAuth, (req, res) => {
-    res.send('This is a protected route');
-});
-// Protected user data route
-app.get("/user", auth.requireAuth, auth.getUser);
-
-```
-
-* `ExpressAuthGneissClient` is a class that provides middleware for handling authentication in an Express.js application. Parameters are:
-    * `clientId` - This is the client id of your application. This will be provided to you by the appropriate Gneiss team member.
-    * `clientSecret` - This is the client secret of your application. This will be provided to you by the appropriate Gneiss team member.
-    * `baseUrl` - This is the base url (without any endpoints) of your service/app. Note that this may be different depending on your environment (prod or dev)
-    * `redirectUrl` - This is the route that the user will be redirected to for authentication. This should be the same as your callback route.
-* `auth.login` is a function that redirects the user to the Gneiss authentication service for authentication.
-* `auth.logout` is a function that removes all tokens and logs the user out of the auth system.
-* `auth.handleCallBack` is a function that handles the callback from the Gneiss authentication service. It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
-* `auth.requireAuth` is a middleware function that checks if the user is authenticated. If the user is not authenticated, it redirects the user to the login page.
-* `auth.getUser` is an included utility route to allow one to retrieve the current user's data. It is important to include the `auth.requireAuth` middleware to ensure the access token is present before accessing the user's data. If it is not, an exeption will be thrown.
-
+# js-gneiss-auth-client
+
+A JavaScript client library for integrating with the Gneiss Authentication service. Provides OAuth2 authentication flow with support for access and refresh tokens.
+
+## Installation
+### Installing from npm registry:
+```bash
+npm install @gneiss/client-auth
+```
+## Usage
+Example for an Express.js application:
+```typescript
+import express from 'express';
+import { ExpressAuthGneissClient } from "@gneiss/client-auth";
+import { AuthGneissCoreConfig } from '@gneiss/client-auth';
+
+// Create express app
+const app = express();
+
+// Initialize auth config
+const config: AuthGneissCoreConfig = {
+  clientId: "<Your app's client ID>,
+  clientSecret: "<Your app's client secret>",
+  baseClientUrl: "<Your app's base url>",
+  callbackUrl: "/callback"
+};
+
+//Instantiate the auth client with config
+const auth = new ExpressAuthGneissClient(config);
+
+// Login route - redirects to Gneiss login page
+app.get("/login", auth.login);
+
+// Logout route - redirects to Gneiss logout page
+app.get("/logout", auth.logout);
+
+// Callback route - handles OAuth callback from Gneiss
+app.get("/callback", auth.handleCallBack);
+
+// Protected route example
+app.get("/dashboard", auth.requireAuth, (req, res) => {
+    res.send('This is a protected route');
+});
+// Protected user data route
+app.get("/user", auth.requireAuth, auth.getUser);
+
+```
+
+* `ExpressAuthGneissClient` is a class that provides middleware for handling authentication in an Express.js application. Parameters are:
+    * `clientId` - This is the client id of your application. This will be provided to you by the appropriate Gneiss team member.
+    * `clientSecret` - This is the client secret of your application. This will be provided to you by the appropriate Gneiss team member.
+    * `baseClientUrl` - This is the base url (without any endpoints) of your service/app. Note that this may be different depending on your environment (prod or dev)
+    * `callbackUrl` - This is the route that the user will be redirected to for authentication. This should be the same as your callback route.
+* `auth.login` is a function that redirects the user to the Gneiss authentication service for authentication.
+* `auth.handleCallBack` is a function that handles the callback from the Gneiss authentication service. It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+* `auth.requireAuth` is a middleware function that checks if the user is authenticated. If the user is not authenticated, it redirects the user to the login page.
+* `auth.getUser` is an included utility route to allow one to retrieve the current user's data. It is important to include the `auth.requireAuth` middleware to ensure the access token is present before accessing the user's data. If it is not, an exeption will be thrown.
+

package/dist/cjs/index.js

@@ -31,7 +31,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   AuthGneissCore: () => AuthGneissCore_default,
-  ExpressAuthGneissClient: () => ExpressAuthGneissClient_default
+  ExpressAuthGneissClient: () => ExpressAuthGneissClient_default,
+  parseCookies: () => parseCookies
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -39,19 +40,25 @@ module.exports = __toCommonJS(index_exports);
 var import_axios = __toESM(require("axios"), 1);
 var import_dotenv = __toESM(require("dotenv"), 1);
 var import_axios2 = require("axios");
-import_dotenv.default.config();
+
+// src/config.ts
+var config = {
+  authUrl: process.env.ENV === "prod" ? "auth.gneiss.io" : process.env.ENV === "staging" ? "auth.gneiss.io/testing" : "localhost:5000"
+};
+
+// src/core/AuthGneissCore.ts
+if (!process.env.ENV) {
+  import_dotenv.default.config();
+}
 var AuthGneissCore = class {
-  constructor(config) {
-    this.config = config;
-    this.gneissEnpoint = process.env.GNEISS_ENDPOINT;
-    this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : void 0;
-    this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : void 0;
+  constructor(devConfig) {
+    this.config = { ...devConfig, ...config };
+    this.authUrl = this.config.authUrl;
+    this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : void 0;
+    this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : void 0;
     let errorMsgs = [];
-    if (!process.env.GNEISS_ENDPOINT) {
-      errorMsgs.push("GNEISS_ENDPOINT is not set in environment variables");
-    }
-    if (!process.env.NODE_ENV) {
-      errorMsgs.push("NODE_ENV is not set in environment variables");
+    if (!process.env.ENV) {
+      errorMsgs.push("ENV is not set in environment variables");
     }
     if (errorMsgs.length > 0) {
       throw new Error(errorMsgs.join("\n"));
@@ -65,7 +72,7 @@ var AuthGneissCore = class {
    */
   async getTokens(authCode) {
     try {
-      const url = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;
+      const url = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;
       const encodedClientId = btoa(this.config.clientId);
       const encodedClientSecret = btoa(this.config.clientSecret);
       const response = await import_axios.default.post(url, {}, {
@@ -89,7 +96,7 @@ var AuthGneissCore = class {
    */
   async refreshToken(refreshToken) {
     try {
-      const url = `${this.gneissEnpoint}/auth/refresh`;
+      const url = `${this.authUrl}/auth/refresh`;
       const response = await import_axios.default.post(url, {}, {
         headers: {
           "Authorization": `Bearer ${refreshToken}`
@@ -106,7 +113,7 @@ var AuthGneissCore = class {
    * @returns A promise that resolves to the user data.
    */
   async getUserData(accessToken) {
-    const url = `${this.gneissEnpoint}/resource/user_data`;
+    const url = `${this.authUrl}/resource/user_data`;
     const response = await import_axios.default.get(url, {
       headers: {
         "Authorization": `Bearer ${accessToken}`
@@ -128,7 +135,7 @@ var AuthGneissCore = class {
       if (!token) {
         return false;
       }
-      const url = `${this.gneissEnpoint}/auth/validate_token`;
+      const url = `${this.authUrl}/auth/validate_token`;
       const response = await import_axios.default.get(url, {
         headers: {
           "Authorization": `Bearer ${token}`
@@ -154,7 +161,7 @@ var AuthGneissCore = class {
    * deleteUser deletes the user
    * */
   async deleteUserData(accessToken) {
-    const response = await import_axios.default.post(`${this.gneissEnpoint}/resource/delete_user`, {}, {
+    const response = await import_axios.default.post(`${this.authUrl}/resource/delete_user`, {}, {
       headers: {
         "Authorization": `Bearer ${accessToken}`
       }
@@ -173,7 +180,7 @@ function setAccessToken(res, accessToken) {
   }
   res.cookie("accessToken", accessToken, {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "lax",
     maxAge: decodedToken.exp * 1e3 - Date.now()
   });
@@ -185,7 +192,7 @@ function setRefreshToken(res, refreshToken) {
   }
   res.cookie("refreshToken", refreshToken, {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "lax",
     maxAge: decodedToken.exp * 1e3 - Date.now()
   });
@@ -204,13 +211,13 @@ function parseCookies(req) {
 function clearCookies(res) {
   res.clearCookie("accessToken", {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "strict",
     path: "/"
   });
   res.clearCookie("refreshToken", {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "strict",
     path: "/"
   });
@@ -220,8 +227,8 @@ function clearCookies(res) {
 var import_axios3 = require("axios");
 var import_axios4 = __toESM(require("axios"), 1);
 var ExpressAuthGneissClient = class extends AuthGneissCore_default {
-  constructor(config) {
-    super(config);
+  constructor(config2) {
+    super(config2);
     this.requireAuth = this.requireAuth.bind(this);
     this.handleCallBack = this.handleCallBack.bind(this);
     this.login = this.login.bind(this);
@@ -249,7 +256,7 @@ var ExpressAuthGneissClient = class extends AuthGneissCore_default {
           res.redirect(req.originalUrl);
         } else {
           const returnToUrl = req.originalUrl;
-          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);
         }
       } else {
         next();
@@ -319,7 +326,7 @@ var ExpressAuthGneissClient = class extends AuthGneissCore_default {
       if (!this.loginUrl) {
         throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
       }
-      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);
     } catch (error) {
       console.error("Error in login middleware:", error);
       res.status(500).send("Internal server error");
@@ -369,6 +376,7 @@ var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthGneissCore,
-  ExpressAuthGneissClient
+  ExpressAuthGneissClient,
+  parseCookies
 });
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/index.ts", "../../src/core/AuthGneissCore.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
-  "sourcesContent": ["export { ExpressAuthGneissClient } from \"./frameworks\";\r\nexport { AuthGneissCore } from \"./core\";\r\nexport type { AuthGneissCoreConfig } from \"./core\";\r\n", "import { AuthGneissCoreConfig } from \"@core/types\";\r\nimport axios, { AxiosResponse } from \"axios\";\r\nimport { Tokens } from \"@core/types\";\r\nimport dotenv from \"dotenv\";\r\nimport { AxiosError } from \"axios\";\r\n\r\n//load environment variables\r\ndotenv.config();\r\n\r\n/**\r\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\r\n * It handles token exchange, token refresh, user data fetching, and token validation.\r\n * \r\n * This class serves as a base class that can be extended by framework-specific implementations\r\n * to provide authentication middleware and handlers.\r\n */\r\nclass AuthGneissCore {\r\n    protected config: AuthGneissCoreConfig; // Configuration object\r\n    protected gneissEnpoint : string | undefined\r\n    protected loginUrl : string | undefined\r\n    protected logoutUrl : string | undefined\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        this.config = config;\r\n        this.gneissEnpoint = process.env.GNEISS_ENDPOINT // Gneiss endpoint\r\n        this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : undefined; // Login URL\r\n        this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : undefined; // Logout URL\r\n\r\n        //check if environment variables are set\r\n        let errorMsgs = [];\r\n        if (!process.env.GNEISS_ENDPOINT) {\r\n            errorMsgs.push(\"GNEISS_ENDPOINT is not set in environment variables\");\r\n        }\r\n        if (!process.env.NODE_ENV) {\r\n            errorMsgs.push(\"NODE_ENV is not set in environment variables\");\r\n        }\r\n        if (errorMsgs.length > 0) {\r\n            throw new Error(errorMsgs.join(\"\\n\"));\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\r\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\r\n     * @param authCode - The authentication code received from the Gneiss authentication service.\r\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\r\n     */\r\n    protected async getTokens(authCode : string) : Promise<Tokens> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;\r\n            //Encode in base64 before transport\r\n            const encodedClientId = btoa(this.config.clientId);\r\n            const encodedClientSecret = btoa(this.config.clientSecret);\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\r\n                }\r\n            });\r\n            return {\r\n                accessToken: response.data.access_token,\r\n                refreshToken: response.data.refresh_token,\r\n                tokenType: response.data.token_type\r\n            } as Tokens;\r\n        } catch (error) {\r\n            // console.error(\"Error in getTokens:\", error);\r\n            throw error;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * refreshToken is a method that refreshes the access token using the refresh token.\r\n     * @param refreshToken - The refresh token to be used for token refresh.\r\n     * @returns A promise that resolves to the refreshed access token.\r\n     */\r\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/refresh`;\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                \"Authorization\": `Bearer ${refreshToken}`\r\n            }\r\n            });\r\n            return response.data.access_token as string;\r\n        } catch (error) {\r\n            // console.error(\"Error in refreshToken:\", error);\r\n            return null;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * getUserData is a method that fetches user data using the access token.\r\n     * @param accessToken - The access token to be used for user data fetching.\r\n     * @returns A promise that resolves to the user data.\r\n     */\r\n    protected async getUserData(accessToken: string) {\r\n        const url : string = `${this.gneissEnpoint}/resource/user_data`;\r\n        const response : AxiosResponse = await axios.get(url, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            }\r\n        });\r\n        if (response.status === 200) {\r\n            return response.data;\r\n        }\r\n        throw new Error(\"Failed to fetch user data\");\r\n    }\r\n    \r\n    /**\r\n     * validateToken is a method that validates the access token.\r\n     * @param token - The access token to be validated.\r\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\r\n     */\r\n    protected async validateToken(token: string): Promise<boolean> {\r\n        try {\r\n            console.log(\"DEBUG: token\", token);\r\n            // Token validation logic\r\n            if (!token) {\r\n                return false;\r\n            }\r\n            const url : string = `${this.gneissEnpoint}/auth/validate_token`;\r\n            const response : AxiosResponse = await axios.get(url, {\r\n                headers: {\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            });\r\n            return response.status === 200;\r\n        } catch (error) {\r\n            // console.error(\"Error in validateToken:\", error);\r\n            if (error instanceof AxiosError && error.response?.status === 401) {\r\n                return false;\r\n            } else {\r\n                throw error;\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getLoginUrl is a method that returns the login URL.\r\n     * @returns The login URL.\r\n     */\r\n    public getLoginUrl() : string | undefined {\r\n        return this.loginUrl;\r\n    }\r\n\r\n    /**\r\n     * deleteUser deletes the user\r\n     * */\r\n    protected async deleteUserData(accessToken : string) : Promise<object> {\r\n        const response : AxiosResponse = await axios.post(`${this.gneissEnpoint}/resource/delete_user`, {}, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            } \r\n        });\r\n        return response.data;\r\n    }\r\n}\r\n\r\nexport default AuthGneissCore;\r\n", "import { Response } from \"express\";\r\nimport { JwtPayload, decode } from \"jsonwebtoken\";\r\nimport { Request } from \"express\";\r\n\r\n/**\r\n * Set the access token in the response cookies.\r\n * @param res - The response object.\r\n * @param accessToken - The access token to set.\r\n */\r\nfunction setAccessToken(res: Response, accessToken: string) {\r\n\r\n    const decodedToken = decode(accessToken) as JwtPayload;\r\n    \r\n    // decoded.exp is in seconds since epoch\r\n    // Date.now() returns milliseconds since epoch\r\n    // maxAge needs milliseconds remaining\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Access token does not contain an expiration time\");\r\n    }\r\n    \r\n    res.cookie('accessToken', accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\n/**\r\n * Set the refresh token in the response cookies.\r\n * @param res - The response object.\r\n * @param refreshToken - The refresh token to set.\r\n */\r\nfunction setRefreshToken(res: Response, refreshToken: string) {\r\n\r\n    const decodedToken = decode(refreshToken) as JwtPayload;\r\n\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Refresh token does not contain an expiration time\");\r\n    }\r\n\r\n    res.cookie('refreshToken', refreshToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\nfunction parseCookies(req: Request) : { [key: string]: string } {\r\n    const cookies = req.headers.cookie;\r\n    if (!cookies) {\r\n        return {};\r\n    }\r\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\r\n        const [key, value] = cookie.split('=').map(s => s.trim());\r\n        acc[key] = value;\r\n        return acc;\r\n    }, {});\r\n}\r\n\r\nfunction clearCookies(res: Response) {\r\n    res.clearCookie(\"accessToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n    res.clearCookie(\"refreshToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n}\r\n\r\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\r\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { RequestWithTokens, Tokens } from \"@core/types\";\r\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport { AxiosError } from \"axios\";\r\nimport axios from \"axios\";\r\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\r\n\r\n/**\r\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\r\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\r\n * \r\n * @extends AuthGneissCore\r\n * @example\r\n * const authClient = new ExpressAuthGneissClient({\r\n *   clientId: 'your-client-id',\r\n *   clientSecret: 'your-client-secret',\r\n *   redirectUrl: 'your-redirect-url'\r\n * });\r\n */\r\nclass ExpressAuthGneissClient extends AuthGneissCore {\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        super(config);\r\n        \r\n        // Bind the methods in constructor\r\n        this.requireAuth = this.requireAuth.bind(this);\r\n        this.handleCallBack = this.handleCallBack.bind(this);\r\n        this.login = this.login.bind(this);\r\n        this.logout = this.logout.bind(this);\r\n        this.getUser = this.getUser.bind(this);\r\n        this.deleteUser = this.deleteUser.bind(this)\r\n    }\r\n\r\n    /**\r\n     * requireAuth is a middleware function that checks if the access token is valid.\r\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\r\n     * If the refresh token is not valid, it redirects the user to the login page.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        //Check for the existence of the access token\r\n        console.log(\"DEBUG: cookies\", cookies);\r\n        try {\r\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\r\n            if (!isAccessTokenValid) { //if the access token is not valid\r\n                //try to refresh the token\r\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\r\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\r\n                    setAccessToken(res, newAccessToken);\r\n                    res.redirect(req.originalUrl)\r\n                }\r\n                else {\r\n                    // no access token or valid refresh token, redirect to login\r\n                    const returnToUrl : string | undefined = req.originalUrl as string;\r\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);\r\n                }\r\n            }\r\n            else {\r\n                // access token is valid, continue to the next middleware or route handler\r\n                next();\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in requireAuth middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getUserData is a middleware function that fetches user data using the access token.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async getUser(req: Request, res: Response): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        const accessToken = cookies?.accessToken;\r\n        if (!accessToken) {\r\n            throw new Error(\"No access token found in request cookies\");\r\n        }\r\n        const userData = await this.getUserData(accessToken);\r\n        res.status(200).send(userData);\r\n    }\r\n\r\n    /**\r\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\r\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async handleCallBack(\r\n        req: Request,\r\n        res: Response,\r\n        next: NextFunction\r\n    ): Promise<void> {\r\n        try {\r\n            const authCode: string | undefined = req.query.auth_code as string\r\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\r\n            if (!authCode) {\r\n                throw new Error(\"No auth code found in request url parameters\");\r\n            }\r\n\r\n            const tokens: Tokens = await this.getTokens(authCode);\r\n            \r\n            // Set the access and refresh tokens in the response cookies\r\n            setAccessToken(res, tokens.accessToken);\r\n            setRefreshToken(res, tokens.refreshToken);\r\n\r\n            if (returnToUrl) {\r\n                // Go to the original request url\r\n                res.redirect(returnToUrl);\r\n            }\r\n            else {\r\n                // Go to the root url\r\n                res.redirect(\"/\")\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in handleCallBack middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public login(req: Request, res: Response): void {\r\n        try {\r\n            if (!this.loginUrl) {\r\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);\r\n        } catch (error) {\r\n            console.error('Error in login middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * logout is a function that redirects the user to the Gneiss logout service.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public logout(req: Request, res: Response): void {\r\n        const cookies = parseCookies(req);\r\n        try {\r\n            if (!this.logoutUrl) {\r\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (cookies?.accessToken) { // Only logout if the access token exists\r\n                axios.post(this.logoutUrl, {}, { // Logout\r\n                    headers: {\r\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\r\n                    }\r\n                });\r\n            }\r\n            clearCookies(res); // clear the access and refresh cookies\r\n            res.redirect(\"/\") // Redirect back to home after logout\r\n        } catch (error) {\r\n            console.error('Error in logout middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * Utility route handler for deleting a user\r\n     * This ensures that the user is fully logged out before \r\n     * deleting the user's data\r\n     * \r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public deleteUser(req: Request, res: Response) {\r\n        const cookies = parseCookies(req);\r\n        this.logout(req, res)\r\n        this.deleteUserData(cookies?.accessToken)\r\n    }\r\n}\r\n\r\nexport default ExpressAuthGneissClient;\r\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,mBAAqC;AAErC,oBAAmB;AACnB,IAAAA,gBAA2B;AAG3B,cAAAC,QAAO,OAAO;AASd,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,QACF;AACE,SAAK,SAAS;AACd,SAAK,gBAAgB,QAAQ,IAAI;AACjC,SAAK,WAAW,KAAK,gBAAgB,GAAG,KAAK,aAAa,gBAAgB;AAC1E,SAAK,YAAY,KAAK,gBAAgB,GAAG,KAAK,aAAa,iBAAiB;AAG5E,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,iBAAiB;AAC9B,gBAAU,KAAK,qDAAqD;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,IAAI,UAAU;AACvB,gBAAU,KAAK,8CAA8C;AAAA,IACjE;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa,gCAAgC,QAAQ;AAElF,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,aAAAC,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,YAAY,aAAqB;AAC7C,UAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,UAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,4BAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,GAAG,KAAK,aAAa,yBAAyB,CAAC,GAAG;AAAA,MAChG,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AC9Jf,0BAAmC;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,mBAAe,4BAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,mBAAe,4BAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,IAAAC,gBAA2B;AAC3B,IAAAA,gBAAkB;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACI,QACF;AACE,UAAM,MAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QAC9H;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACjG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,sBAAAC,QAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
-  "names": ["import_axios", "dotenv", "axios", "import_axios", "axios"]
+  "sources": ["../../src/index.ts", "../../src/core/AuthGneissCore.ts", "../../src/config.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["export { ExpressAuthGneissClient } from \"./frameworks\";\nexport { AuthGneissCore } from \"./core\";\nexport { parseCookies } from \"@utils\"\nexport type { AuthGneissCoreConfig } from \"./core\";\n", "import { AuthGneissCoreConfig } from \"@core/types\";\nimport axios, { AxiosResponse } from \"axios\";\nimport { Tokens } from \"@core/types\";\nimport dotenv from \"dotenv\";\nimport { AxiosError } from \"axios\";\nimport { config as generalConfig } from \"@/config\";\nimport { AuthGneissGeneralConfig } from \"@/config\";\n\n//load environment variables if not already set\nif (!process.env.ENV) {\n    dotenv.config();\n}\n\n/**\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\n * It handles token exchange, token refresh, user data fetching, and token validation.\n * \n * This class serves as a base class that can be extended by framework-specific implementations\n * to provide authentication middleware and handlers.\n */\nclass AuthGneissCore {\n    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig; // Configuration object\n    protected authUrl : string | undefined\n    protected loginUrl : string | undefined\n    protected logoutUrl : string | undefined\n\n    constructor(\n        devConfig: AuthGneissCoreConfig\n    ) {\n        this.config = {...devConfig, ...generalConfig};\n        this.authUrl = this.config.authUrl // Gneiss endpoint\n        this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : undefined; // Login URL\n        this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : undefined; // Logout URL\n\n        //check if environment variables are set\n        let errorMsgs = [];\n        if (!process.env.ENV) {\n            errorMsgs.push(\"ENV is not set in environment variables\");\n        }\n        if (errorMsgs.length > 0) {\n            throw new Error(errorMsgs.join(\"\\n\"));\n        }\n    }\n\n    /**\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\n     * @param authCode - The authentication code received from the Gneiss authentication service.\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\n     */\n    protected async getTokens(authCode : string) : Promise<Tokens> {\n        try {\n            const url : string = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;\n            //Encode in base64 before transport\n            const encodedClientId = btoa(this.config.clientId);\n            const encodedClientSecret = btoa(this.config.clientSecret);\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\n                }\n            });\n            return {\n                accessToken: response.data.access_token,\n                refreshToken: response.data.refresh_token,\n                tokenType: response.data.token_type\n            } as Tokens;\n        } catch (error) {\n            // console.error(\"Error in getTokens:\", error);\n            throw error;\n        }\n    }\n    \n    /**\n     * refreshToken is a method that refreshes the access token using the refresh token.\n     * @param refreshToken - The refresh token to be used for token refresh.\n     * @returns A promise that resolves to the refreshed access token.\n     */\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\n        try {\n            const url : string = `${this.authUrl}/auth/refresh`;\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                \"Authorization\": `Bearer ${refreshToken}`\n            }\n            });\n            return response.data.access_token as string;\n        } catch (error) {\n            // console.error(\"Error in refreshToken:\", error);\n            return null;\n        }\n    }\n    \n    /**\n     * getUserData is a method that fetches user data using the access token.\n     * @param accessToken - The access token to be used for user data fetching.\n     * @returns A promise that resolves to the user data.\n     */\n    async getUserData(accessToken: string) {\n        const url : string = `${this.authUrl}/resource/user_data`;\n        const response : AxiosResponse = await axios.get(url, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            }\n        });\n        if (response.status === 200) {\n            return response.data;\n        }\n        throw new Error(\"Failed to fetch user data\");\n    }\n    \n    /**\n     * validateToken is a method that validates the access token.\n     * @param token - The access token to be validated.\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\n     */\n    protected async validateToken(token: string): Promise<boolean> {\n        try {\n            console.log(\"DEBUG: token\", token);\n            // Token validation logic\n            if (!token) {\n                return false;\n            }\n            const url : string = `${this.authUrl}/auth/validate_token`;\n            const response : AxiosResponse = await axios.get(url, {\n                headers: {\n                    \"Authorization\": `Bearer ${token}`\n                }\n            });\n            return response.status === 200;\n        } catch (error) {\n            // console.error(\"Error in validateToken:\", error);\n            if (error instanceof AxiosError && error.response?.status === 401) {\n                return false;\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    /**\n     * getLoginUrl is a method that returns the login URL.\n     * @returns The login URL.\n     */\n    public getLoginUrl() : string | undefined {\n        return this.loginUrl;\n    }\n\n    /**\n     * deleteUser deletes the user\n     * */\n    protected async deleteUserData(accessToken : string) : Promise<object> {\n        const response : AxiosResponse = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            } \n        });\n        return response.data;\n    }\n}\n\nexport default AuthGneissCore;\n", "export type AuthGneissGeneralConfig = {\n    authUrl: string\n}\n\nexport const config : AuthGneissGeneralConfig = {\n    authUrl: process.env.ENV === \"prod\" ? \"auth.gneiss.io\" : \n    process.env.ENV === \"staging\" ? \"auth.gneiss.io/testing\" : \"localhost:5000\"\n}", "import { Response } from \"express\";\nimport { JwtPayload, decode } from \"jsonwebtoken\";\nimport { Request } from \"express\";\n\n/**\n * Set the access token in the response cookies.\n * @param res - The response object.\n * @param accessToken - The access token to set.\n */\nfunction setAccessToken(res: Response, accessToken: string) {\n\n    const decodedToken = decode(accessToken) as JwtPayload;\n    \n    // decoded.exp is in seconds since epoch\n    // Date.now() returns milliseconds since epoch\n    // maxAge needs milliseconds remaining\n    if (!decodedToken.exp) {\n        throw new Error(\"Access token does not contain an expiration time\");\n    }\n    \n    res.cookie('accessToken', accessToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\n/**\n * Set the refresh token in the response cookies.\n * @param res - The response object.\n * @param refreshToken - The refresh token to set.\n */\nfunction setRefreshToken(res: Response, refreshToken: string) {\n\n    const decodedToken = decode(refreshToken) as JwtPayload;\n\n    if (!decodedToken.exp) {\n        throw new Error(\"Refresh token does not contain an expiration time\");\n    }\n\n    res.cookie('refreshToken', refreshToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\nfunction parseCookies(req: Request) : { [key: string]: string } {\n    const cookies = req.headers.cookie;\n    if (!cookies) {\n        return {};\n    }\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\n        const [key, value] = cookie.split('=').map(s => s.trim());\n        acc[key] = value;\n        return acc;\n    }, {});\n}\n\nfunction clearCookies(res: Response) {\n    res.clearCookie(\"accessToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n    res.clearCookie(\"refreshToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n}\n\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\nimport { Request, Response, NextFunction } from \"express\";\nimport { RequestWithTokens, Tokens } from \"@core/types\";\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\nimport { JwtPayload } from \"jsonwebtoken\";\nimport { AxiosError } from \"axios\";\nimport axios from \"axios\";\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\n\n/**\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\n * \n * @extends AuthGneissCore\n * @example\n * const authClient = new ExpressAuthGneissClient({\n *   clientId: 'your-client-id',\n *   clientSecret: 'your-client-secret',\n *   redirectUrl: 'your-redirect-url'\n * });\n */\nclass ExpressAuthGneissClient extends AuthGneissCore {\n\n    constructor(\n        config: AuthGneissCoreConfig\n    ) {\n        super(config);\n        \n        // Bind the methods in constructor\n        this.requireAuth = this.requireAuth.bind(this);\n        this.handleCallBack = this.handleCallBack.bind(this);\n        this.login = this.login.bind(this);\n        this.logout = this.logout.bind(this);\n        this.getUser = this.getUser.bind(this);\n        this.deleteUser = this.deleteUser.bind(this)\n    }\n\n    /**\n     * requireAuth is a middleware function that checks if the access token is valid.\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\n     * If the refresh token is not valid, it redirects the user to the login page.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\n        const cookies = parseCookies(req);\n        //Check for the existence of the access token\n        console.log(\"DEBUG: cookies\", cookies);\n        try {\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\n            if (!isAccessTokenValid) { //if the access token is not valid\n                //try to refresh the token\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\n                    setAccessToken(res, newAccessToken);\n                    res.redirect(req.originalUrl)\n                }\n                else {\n                    // no access token or valid refresh token, redirect to login\n                    const returnToUrl : string | undefined = req.originalUrl as string;\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);\n                }\n            }\n            else {\n                // access token is valid, continue to the next middleware or route handler\n                next();\n            }\n        } catch (error) {\n            // console.error('Error in requireAuth middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n            } else {\n                res.status(500).send('Internal server error');\n            }\n        }\n    }\n\n    /**\n     * getUserData is a middleware function that fetches user data using the access token.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async getUser(req: Request, res: Response): Promise<void> {\n        const cookies = parseCookies(req);\n        const accessToken = cookies?.accessToken;\n        if (!accessToken) {\n            throw new Error(\"No access token found in request cookies\");\n        }\n        const userData = await this.getUserData(accessToken);\n        res.status(200).send(userData);\n    }\n\n    /**\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async handleCallBack(\n        req: Request,\n        res: Response,\n        next: NextFunction\n    ): Promise<void> {\n        try {\n            const authCode: string | undefined = req.query.auth_code as string\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\n            if (!authCode) {\n                throw new Error(\"No auth code found in request url parameters\");\n            }\n\n            const tokens: Tokens = await this.getTokens(authCode);\n            \n            // Set the access and refresh tokens in the response cookies\n            setAccessToken(res, tokens.accessToken);\n            setRefreshToken(res, tokens.refreshToken);\n\n            if (returnToUrl) {\n                // Go to the original request url\n                res.redirect(returnToUrl);\n            }\n            else {\n                // Go to the root url\n                res.redirect(\"/\")\n            }\n        } catch (error) {\n            // console.error('Error in handleCallBack middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n                console.error(\"DEBUG: error\", error);\n            } else {\n                res.status(500).send('Internal server error');\n                console.error(\"DEBUG: error\", error);\n            }\n        }\n    }\n\n    /**\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public login(req: Request, res: Response): void {\n        try {\n            if (!this.loginUrl) {\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);\n        } catch (error) {\n            console.error('Error in login middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * logout is a function that redirects the user to the Gneiss logout service.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public logout(req: Request, res: Response): void {\n        const cookies = parseCookies(req);\n        try {\n            if (!this.logoutUrl) {\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            if (cookies?.accessToken) { // Only logout if the access token exists\n                axios.post(this.logoutUrl, {}, { // Logout\n                    headers: {\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\n                    }\n                });\n            }\n            clearCookies(res); // clear the access and refresh cookies\n            res.redirect(\"/\") // Redirect back to home after logout\n        } catch (error) {\n            console.error('Error in logout middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * Utility route handler for deleting a user\n     * This ensures that the user is fully logged out before \n     * deleting the user's data\n     * \n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public deleteUser(req: Request, res: Response) {\n        const cookies = parseCookies(req);\n        this.logout(req, res)\n        this.deleteUserData(cookies?.accessToken)\n    }\n}\n\nexport default ExpressAuthGneissClient;\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,mBAAqC;AAErC,oBAAmB;AACnB,IAAAA,gBAA2B;;;ACApB,IAAM,SAAmC;AAAA,EAC5C,SAAS,QAAQ,IAAI,QAAQ,SAAS,mBACtC,QAAQ,IAAI,QAAQ,YAAY,2BAA2B;AAC/D;;;ADEA,IAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAAC,QAAO,OAAO;AAClB;AASA,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,WACF;AACE,SAAK,SAAS,EAAC,GAAG,WAAW,GAAG,OAAa;AAC7C,SAAK,UAAU,KAAK,OAAO;AAC3B,SAAK,WAAW,KAAK,UAAU,GAAG,KAAK,OAAO,gBAAgB;AAC9D,SAAK,YAAY,KAAK,UAAU,GAAG,KAAK,OAAO,iBAAiB;AAGhE,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAU,KAAK,yCAAyC;AAAA,IAC5D;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO,gCAAgC,QAAQ;AAE5E,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,aAAAC,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,OAAO;AACpC,UAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,4BAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,GAAG,KAAK,OAAO,yBAAyB,CAAC,GAAG;AAAA,MAC1F,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AE/Jf,0BAAmC;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,mBAAe,4BAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,mBAAe,4BAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,IAAAC,gBAA2B;AAC3B,IAAAA,gBAAkB;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACIC,SACF;AACE,UAAMA,OAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QACpI;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACvG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,sBAAAC,QAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["import_axios", "dotenv", "axios", "import_axios", "config", "axios"]
 }

package/dist/esm/index.js

@@ -2,19 +2,25 @@
 import axios from "axios";
 import dotenv from "dotenv";
 import { AxiosError } from "axios";
-dotenv.config();
+
+// src/config.ts
+var config = {
+  authUrl: process.env.ENV === "prod" ? "auth.gneiss.io" : process.env.ENV === "staging" ? "auth.gneiss.io/testing" : "localhost:5000"
+};
+
+// src/core/AuthGneissCore.ts
+if (!process.env.ENV) {
+  dotenv.config();
+}
 var AuthGneissCore = class {
-  constructor(config) {
-    this.config = config;
-    this.gneissEnpoint = process.env.GNEISS_ENDPOINT;
-    this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : void 0;
-    this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : void 0;
+  constructor(devConfig) {
+    this.config = { ...devConfig, ...config };
+    this.authUrl = this.config.authUrl;
+    this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : void 0;
+    this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : void 0;
     let errorMsgs = [];
-    if (!process.env.GNEISS_ENDPOINT) {
-      errorMsgs.push("GNEISS_ENDPOINT is not set in environment variables");
-    }
-    if (!process.env.NODE_ENV) {
-      errorMsgs.push("NODE_ENV is not set in environment variables");
+    if (!process.env.ENV) {
+      errorMsgs.push("ENV is not set in environment variables");
     }
     if (errorMsgs.length > 0) {
       throw new Error(errorMsgs.join("\n"));
@@ -28,7 +34,7 @@ var AuthGneissCore = class {
    */
   async getTokens(authCode) {
     try {
-      const url = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;
+      const url = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;
       const encodedClientId = btoa(this.config.clientId);
       const encodedClientSecret = btoa(this.config.clientSecret);
       const response = await axios.post(url, {}, {
@@ -52,7 +58,7 @@ var AuthGneissCore = class {
    */
   async refreshToken(refreshToken) {
     try {
-      const url = `${this.gneissEnpoint}/auth/refresh`;
+      const url = `${this.authUrl}/auth/refresh`;
       const response = await axios.post(url, {}, {
         headers: {
           "Authorization": `Bearer ${refreshToken}`
@@ -69,7 +75,7 @@ var AuthGneissCore = class {
    * @returns A promise that resolves to the user data.
    */
   async getUserData(accessToken) {
-    const url = `${this.gneissEnpoint}/resource/user_data`;
+    const url = `${this.authUrl}/resource/user_data`;
     const response = await axios.get(url, {
       headers: {
         "Authorization": `Bearer ${accessToken}`
@@ -91,7 +97,7 @@ var AuthGneissCore = class {
       if (!token) {
         return false;
       }
-      const url = `${this.gneissEnpoint}/auth/validate_token`;
+      const url = `${this.authUrl}/auth/validate_token`;
       const response = await axios.get(url, {
         headers: {
           "Authorization": `Bearer ${token}`
@@ -117,7 +123,7 @@ var AuthGneissCore = class {
    * deleteUser deletes the user
    * */
   async deleteUserData(accessToken) {
-    const response = await axios.post(`${this.gneissEnpoint}/resource/delete_user`, {}, {
+    const response = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {
       headers: {
         "Authorization": `Bearer ${accessToken}`
       }
@@ -136,7 +142,7 @@ function setAccessToken(res, accessToken) {
   }
   res.cookie("accessToken", accessToken, {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "lax",
     maxAge: decodedToken.exp * 1e3 - Date.now()
   });
@@ -148,7 +154,7 @@ function setRefreshToken(res, refreshToken) {
   }
   res.cookie("refreshToken", refreshToken, {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "lax",
     maxAge: decodedToken.exp * 1e3 - Date.now()
   });
@@ -167,13 +173,13 @@ function parseCookies(req) {
 function clearCookies(res) {
   res.clearCookie("accessToken", {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "strict",
     path: "/"
   });
   res.clearCookie("refreshToken", {
     httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
     sameSite: "strict",
     path: "/"
   });
@@ -183,8 +189,8 @@ function clearCookies(res) {
 import { AxiosError as AxiosError2 } from "axios";
 import axios2 from "axios";
 var ExpressAuthGneissClient = class extends AuthGneissCore_default {
-  constructor(config) {
-    super(config);
+  constructor(config2) {
+    super(config2);
     this.requireAuth = this.requireAuth.bind(this);
     this.handleCallBack = this.handleCallBack.bind(this);
     this.login = this.login.bind(this);
@@ -212,7 +218,7 @@ var ExpressAuthGneissClient = class extends AuthGneissCore_default {
           res.redirect(req.originalUrl);
         } else {
           const returnToUrl = req.originalUrl;
-          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);
         }
       } else {
         next();
@@ -282,7 +288,7 @@ var ExpressAuthGneissClient = class extends AuthGneissCore_default {
       if (!this.loginUrl) {
         throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
       }
-      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);
     } catch (error) {
       console.error("Error in login middleware:", error);
       res.status(500).send("Internal server error");
@@ -331,6 +337,7 @@ var ExpressAuthGneissClient = class extends AuthGneissCore_default {
 var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
 export {
   AuthGneissCore_default as AuthGneissCore,
-  ExpressAuthGneissClient_default as ExpressAuthGneissClient
+  ExpressAuthGneissClient_default as ExpressAuthGneissClient,
+  parseCookies
 };
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/core/AuthGneissCore.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
-  "sourcesContent": ["import { AuthGneissCoreConfig } from \"@core/types\";\r\nimport axios, { AxiosResponse } from \"axios\";\r\nimport { Tokens } from \"@core/types\";\r\nimport dotenv from \"dotenv\";\r\nimport { AxiosError } from \"axios\";\r\n\r\n//load environment variables\r\ndotenv.config();\r\n\r\n/**\r\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\r\n * It handles token exchange, token refresh, user data fetching, and token validation.\r\n * \r\n * This class serves as a base class that can be extended by framework-specific implementations\r\n * to provide authentication middleware and handlers.\r\n */\r\nclass AuthGneissCore {\r\n    protected config: AuthGneissCoreConfig; // Configuration object\r\n    protected gneissEnpoint : string | undefined\r\n    protected loginUrl : string | undefined\r\n    protected logoutUrl : string | undefined\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        this.config = config;\r\n        this.gneissEnpoint = process.env.GNEISS_ENDPOINT // Gneiss endpoint\r\n        this.loginUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/login` : undefined; // Login URL\r\n        this.logoutUrl = this.gneissEnpoint ? `${this.gneissEnpoint}/auth/logout` : undefined; // Logout URL\r\n\r\n        //check if environment variables are set\r\n        let errorMsgs = [];\r\n        if (!process.env.GNEISS_ENDPOINT) {\r\n            errorMsgs.push(\"GNEISS_ENDPOINT is not set in environment variables\");\r\n        }\r\n        if (!process.env.NODE_ENV) {\r\n            errorMsgs.push(\"NODE_ENV is not set in environment variables\");\r\n        }\r\n        if (errorMsgs.length > 0) {\r\n            throw new Error(errorMsgs.join(\"\\n\"));\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\r\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\r\n     * @param authCode - The authentication code received from the Gneiss authentication service.\r\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\r\n     */\r\n    protected async getTokens(authCode : string) : Promise<Tokens> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/access_token?auth_code=${authCode}`;\r\n            //Encode in base64 before transport\r\n            const encodedClientId = btoa(this.config.clientId);\r\n            const encodedClientSecret = btoa(this.config.clientSecret);\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\r\n                }\r\n            });\r\n            return {\r\n                accessToken: response.data.access_token,\r\n                refreshToken: response.data.refresh_token,\r\n                tokenType: response.data.token_type\r\n            } as Tokens;\r\n        } catch (error) {\r\n            // console.error(\"Error in getTokens:\", error);\r\n            throw error;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * refreshToken is a method that refreshes the access token using the refresh token.\r\n     * @param refreshToken - The refresh token to be used for token refresh.\r\n     * @returns A promise that resolves to the refreshed access token.\r\n     */\r\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\r\n        try {\r\n            const url : string = `${this.gneissEnpoint}/auth/refresh`;\r\n            const response : AxiosResponse = await axios.post(url, {}, {\r\n                headers: {\r\n                \"Authorization\": `Bearer ${refreshToken}`\r\n            }\r\n            });\r\n            return response.data.access_token as string;\r\n        } catch (error) {\r\n            // console.error(\"Error in refreshToken:\", error);\r\n            return null;\r\n        }\r\n    }\r\n    \r\n    /**\r\n     * getUserData is a method that fetches user data using the access token.\r\n     * @param accessToken - The access token to be used for user data fetching.\r\n     * @returns A promise that resolves to the user data.\r\n     */\r\n    protected async getUserData(accessToken: string) {\r\n        const url : string = `${this.gneissEnpoint}/resource/user_data`;\r\n        const response : AxiosResponse = await axios.get(url, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            }\r\n        });\r\n        if (response.status === 200) {\r\n            return response.data;\r\n        }\r\n        throw new Error(\"Failed to fetch user data\");\r\n    }\r\n    \r\n    /**\r\n     * validateToken is a method that validates the access token.\r\n     * @param token - The access token to be validated.\r\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\r\n     */\r\n    protected async validateToken(token: string): Promise<boolean> {\r\n        try {\r\n            console.log(\"DEBUG: token\", token);\r\n            // Token validation logic\r\n            if (!token) {\r\n                return false;\r\n            }\r\n            const url : string = `${this.gneissEnpoint}/auth/validate_token`;\r\n            const response : AxiosResponse = await axios.get(url, {\r\n                headers: {\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            });\r\n            return response.status === 200;\r\n        } catch (error) {\r\n            // console.error(\"Error in validateToken:\", error);\r\n            if (error instanceof AxiosError && error.response?.status === 401) {\r\n                return false;\r\n            } else {\r\n                throw error;\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getLoginUrl is a method that returns the login URL.\r\n     * @returns The login URL.\r\n     */\r\n    public getLoginUrl() : string | undefined {\r\n        return this.loginUrl;\r\n    }\r\n\r\n    /**\r\n     * deleteUser deletes the user\r\n     * */\r\n    protected async deleteUserData(accessToken : string) : Promise<object> {\r\n        const response : AxiosResponse = await axios.post(`${this.gneissEnpoint}/resource/delete_user`, {}, {\r\n            headers: {\r\n                \"Authorization\": `Bearer ${accessToken}`\r\n            } \r\n        });\r\n        return response.data;\r\n    }\r\n}\r\n\r\nexport default AuthGneissCore;\r\n", "import { Response } from \"express\";\r\nimport { JwtPayload, decode } from \"jsonwebtoken\";\r\nimport { Request } from \"express\";\r\n\r\n/**\r\n * Set the access token in the response cookies.\r\n * @param res - The response object.\r\n * @param accessToken - The access token to set.\r\n */\r\nfunction setAccessToken(res: Response, accessToken: string) {\r\n\r\n    const decodedToken = decode(accessToken) as JwtPayload;\r\n    \r\n    // decoded.exp is in seconds since epoch\r\n    // Date.now() returns milliseconds since epoch\r\n    // maxAge needs milliseconds remaining\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Access token does not contain an expiration time\");\r\n    }\r\n    \r\n    res.cookie('accessToken', accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\n/**\r\n * Set the refresh token in the response cookies.\r\n * @param res - The response object.\r\n * @param refreshToken - The refresh token to set.\r\n */\r\nfunction setRefreshToken(res: Response, refreshToken: string) {\r\n\r\n    const decodedToken = decode(refreshToken) as JwtPayload;\r\n\r\n    if (!decodedToken.exp) {\r\n        throw new Error(\"Refresh token does not contain an expiration time\");\r\n    }\r\n\r\n    res.cookie('refreshToken', refreshToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        maxAge: (decodedToken.exp * 1000) - Date.now()\r\n    });\r\n}\r\n\r\nfunction parseCookies(req: Request) : { [key: string]: string } {\r\n    const cookies = req.headers.cookie;\r\n    if (!cookies) {\r\n        return {};\r\n    }\r\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\r\n        const [key, value] = cookie.split('=').map(s => s.trim());\r\n        acc[key] = value;\r\n        return acc;\r\n    }, {});\r\n}\r\n\r\nfunction clearCookies(res: Response) {\r\n    res.clearCookie(\"accessToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n    res.clearCookie(\"refreshToken\", {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'strict',\r\n        path: '/'\r\n    });\r\n}\r\n\r\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\r\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { RequestWithTokens, Tokens } from \"@core/types\";\r\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\r\nimport { JwtPayload } from \"jsonwebtoken\";\r\nimport { AxiosError } from \"axios\";\r\nimport axios from \"axios\";\r\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\r\n\r\n/**\r\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\r\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\r\n * \r\n * @extends AuthGneissCore\r\n * @example\r\n * const authClient = new ExpressAuthGneissClient({\r\n *   clientId: 'your-client-id',\r\n *   clientSecret: 'your-client-secret',\r\n *   redirectUrl: 'your-redirect-url'\r\n * });\r\n */\r\nclass ExpressAuthGneissClient extends AuthGneissCore {\r\n\r\n    constructor(\r\n        config: AuthGneissCoreConfig\r\n    ) {\r\n        super(config);\r\n        \r\n        // Bind the methods in constructor\r\n        this.requireAuth = this.requireAuth.bind(this);\r\n        this.handleCallBack = this.handleCallBack.bind(this);\r\n        this.login = this.login.bind(this);\r\n        this.logout = this.logout.bind(this);\r\n        this.getUser = this.getUser.bind(this);\r\n        this.deleteUser = this.deleteUser.bind(this)\r\n    }\r\n\r\n    /**\r\n     * requireAuth is a middleware function that checks if the access token is valid.\r\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\r\n     * If the refresh token is not valid, it redirects the user to the login page.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        //Check for the existence of the access token\r\n        console.log(\"DEBUG: cookies\", cookies);\r\n        try {\r\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\r\n            if (!isAccessTokenValid) { //if the access token is not valid\r\n                //try to refresh the token\r\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\r\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\r\n                    setAccessToken(res, newAccessToken);\r\n                    res.redirect(req.originalUrl)\r\n                }\r\n                else {\r\n                    // no access token or valid refresh token, redirect to login\r\n                    const returnToUrl : string | undefined = req.originalUrl as string;\r\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}&return_to_url=${returnToUrl}`);\r\n                }\r\n            }\r\n            else {\r\n                // access token is valid, continue to the next middleware or route handler\r\n                next();\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in requireAuth middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * getUserData is a middleware function that fetches user data using the access token.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async getUser(req: Request, res: Response): Promise<void> {\r\n        const cookies = parseCookies(req);\r\n        const accessToken = cookies?.accessToken;\r\n        if (!accessToken) {\r\n            throw new Error(\"No access token found in request cookies\");\r\n        }\r\n        const userData = await this.getUserData(accessToken);\r\n        res.status(200).send(userData);\r\n    }\r\n\r\n    /**\r\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\r\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     * @param next - The next middleware function.\r\n     */\r\n    public async handleCallBack(\r\n        req: Request,\r\n        res: Response,\r\n        next: NextFunction\r\n    ): Promise<void> {\r\n        try {\r\n            const authCode: string | undefined = req.query.auth_code as string\r\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\r\n            if (!authCode) {\r\n                throw new Error(\"No auth code found in request url parameters\");\r\n            }\r\n\r\n            const tokens: Tokens = await this.getTokens(authCode);\r\n            \r\n            // Set the access and refresh tokens in the response cookies\r\n            setAccessToken(res, tokens.accessToken);\r\n            setRefreshToken(res, tokens.refreshToken);\r\n\r\n            if (returnToUrl) {\r\n                // Go to the original request url\r\n                res.redirect(returnToUrl);\r\n            }\r\n            else {\r\n                // Go to the root url\r\n                res.redirect(\"/\")\r\n            }\r\n        } catch (error) {\r\n            // console.error('Error in handleCallBack middleware:', error);\r\n            if (error instanceof AxiosError) {\r\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            } else {\r\n                res.status(500).send('Internal server error');\r\n                console.error(\"DEBUG: error\", error);\r\n            }\r\n        }\r\n    }\r\n\r\n    /**\r\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public login(req: Request, res: Response): void {\r\n        try {\r\n            if (!this.loginUrl) {\r\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseUrl}${this.config.redirectUrl}`);\r\n        } catch (error) {\r\n            console.error('Error in login middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * logout is a function that redirects the user to the Gneiss logout service.\r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public logout(req: Request, res: Response): void {\r\n        const cookies = parseCookies(req);\r\n        try {\r\n            if (!this.logoutUrl) {\r\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\r\n            }\r\n            if (cookies?.accessToken) { // Only logout if the access token exists\r\n                axios.post(this.logoutUrl, {}, { // Logout\r\n                    headers: {\r\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\r\n                    }\r\n                });\r\n            }\r\n            clearCookies(res); // clear the access and refresh cookies\r\n            res.redirect(\"/\") // Redirect back to home after logout\r\n        } catch (error) {\r\n            console.error('Error in logout middleware:', error);\r\n            res.status(500).send('Internal server error');\r\n        }\r\n    }\r\n\r\n    /**\r\n     * Utility route handler for deleting a user\r\n     * This ensures that the user is fully logged out before \r\n     * deleting the user's data\r\n     * \r\n     * @param req - The request object.\r\n     * @param res - The response object.\r\n     */\r\n    public deleteUser(req: Request, res: Response) {\r\n        const cookies = parseCookies(req);\r\n        this.logout(req, res)\r\n        this.deleteUserData(cookies?.accessToken)\r\n    }\r\n}\r\n\r\nexport default ExpressAuthGneissClient;\r\n"],
-  "mappings": ";AACA,OAAO,WAA8B;AAErC,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAG3B,OAAO,OAAO;AASd,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,QACF;AACE,SAAK,SAAS;AACd,SAAK,gBAAgB,QAAQ,IAAI;AACjC,SAAK,WAAW,KAAK,gBAAgB,GAAG,KAAK,aAAa,gBAAgB;AAC1E,SAAK,YAAY,KAAK,gBAAgB,GAAG,KAAK,aAAa,iBAAiB;AAG5E,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,iBAAiB;AAC9B,gBAAU,KAAK,qDAAqD;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,IAAI,UAAU;AACvB,gBAAU,KAAK,8CAA8C;AAAA,IACjE;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa,gCAAgC,QAAQ;AAElF,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,YAAY,aAAqB;AAC7C,UAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,UAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,aAAa;AAC1C,YAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,cAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,MAAM,KAAK,GAAG,KAAK,aAAa,yBAAyB,CAAC,GAAG;AAAA,MAChG,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AC9Jf,SAAqB,cAAc;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,eAAe,OAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,eAAe,OAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,SAAS,cAAAA,mBAAkB;AAC3B,OAAOC,YAAW;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACI,QACF;AACE,UAAM,MAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QAC9H;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBC,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBA,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,OAAO,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACjG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,QAAAC,OAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
-  "names": ["AxiosError", "axios", "AxiosError", "axios"]
+  "sources": ["../../src/core/AuthGneissCore.ts", "../../src/config.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["import { AuthGneissCoreConfig } from \"@core/types\";\nimport axios, { AxiosResponse } from \"axios\";\nimport { Tokens } from \"@core/types\";\nimport dotenv from \"dotenv\";\nimport { AxiosError } from \"axios\";\nimport { config as generalConfig } from \"@/config\";\nimport { AuthGneissGeneralConfig } from \"@/config\";\n\n//load environment variables if not already set\nif (!process.env.ENV) {\n    dotenv.config();\n}\n\n/**\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\n * It handles token exchange, token refresh, user data fetching, and token validation.\n * \n * This class serves as a base class that can be extended by framework-specific implementations\n * to provide authentication middleware and handlers.\n */\nclass AuthGneissCore {\n    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig; // Configuration object\n    protected authUrl : string | undefined\n    protected loginUrl : string | undefined\n    protected logoutUrl : string | undefined\n\n    constructor(\n        devConfig: AuthGneissCoreConfig\n    ) {\n        this.config = {...devConfig, ...generalConfig};\n        this.authUrl = this.config.authUrl // Gneiss endpoint\n        this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : undefined; // Login URL\n        this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : undefined; // Logout URL\n\n        //check if environment variables are set\n        let errorMsgs = [];\n        if (!process.env.ENV) {\n            errorMsgs.push(\"ENV is not set in environment variables\");\n        }\n        if (errorMsgs.length > 0) {\n            throw new Error(errorMsgs.join(\"\\n\"));\n        }\n    }\n\n    /**\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\n     * @param authCode - The authentication code received from the Gneiss authentication service.\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\n     */\n    protected async getTokens(authCode : string) : Promise<Tokens> {\n        try {\n            const url : string = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;\n            //Encode in base64 before transport\n            const encodedClientId = btoa(this.config.clientId);\n            const encodedClientSecret = btoa(this.config.clientSecret);\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\n                }\n            });\n            return {\n                accessToken: response.data.access_token,\n                refreshToken: response.data.refresh_token,\n                tokenType: response.data.token_type\n            } as Tokens;\n        } catch (error) {\n            // console.error(\"Error in getTokens:\", error);\n            throw error;\n        }\n    }\n    \n    /**\n     * refreshToken is a method that refreshes the access token using the refresh token.\n     * @param refreshToken - The refresh token to be used for token refresh.\n     * @returns A promise that resolves to the refreshed access token.\n     */\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\n        try {\n            const url : string = `${this.authUrl}/auth/refresh`;\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                \"Authorization\": `Bearer ${refreshToken}`\n            }\n            });\n            return response.data.access_token as string;\n        } catch (error) {\n            // console.error(\"Error in refreshToken:\", error);\n            return null;\n        }\n    }\n    \n    /**\n     * getUserData is a method that fetches user data using the access token.\n     * @param accessToken - The access token to be used for user data fetching.\n     * @returns A promise that resolves to the user data.\n     */\n    async getUserData(accessToken: string) {\n        const url : string = `${this.authUrl}/resource/user_data`;\n        const response : AxiosResponse = await axios.get(url, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            }\n        });\n        if (response.status === 200) {\n            return response.data;\n        }\n        throw new Error(\"Failed to fetch user data\");\n    }\n    \n    /**\n     * validateToken is a method that validates the access token.\n     * @param token - The access token to be validated.\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\n     */\n    protected async validateToken(token: string): Promise<boolean> {\n        try {\n            console.log(\"DEBUG: token\", token);\n            // Token validation logic\n            if (!token) {\n                return false;\n            }\n            const url : string = `${this.authUrl}/auth/validate_token`;\n            const response : AxiosResponse = await axios.get(url, {\n                headers: {\n                    \"Authorization\": `Bearer ${token}`\n                }\n            });\n            return response.status === 200;\n        } catch (error) {\n            // console.error(\"Error in validateToken:\", error);\n            if (error instanceof AxiosError && error.response?.status === 401) {\n                return false;\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    /**\n     * getLoginUrl is a method that returns the login URL.\n     * @returns The login URL.\n     */\n    public getLoginUrl() : string | undefined {\n        return this.loginUrl;\n    }\n\n    /**\n     * deleteUser deletes the user\n     * */\n    protected async deleteUserData(accessToken : string) : Promise<object> {\n        const response : AxiosResponse = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            } \n        });\n        return response.data;\n    }\n}\n\nexport default AuthGneissCore;\n", "export type AuthGneissGeneralConfig = {\n    authUrl: string\n}\n\nexport const config : AuthGneissGeneralConfig = {\n    authUrl: process.env.ENV === \"prod\" ? \"auth.gneiss.io\" : \n    process.env.ENV === \"staging\" ? \"auth.gneiss.io/testing\" : \"localhost:5000\"\n}", "import { Response } from \"express\";\nimport { JwtPayload, decode } from \"jsonwebtoken\";\nimport { Request } from \"express\";\n\n/**\n * Set the access token in the response cookies.\n * @param res - The response object.\n * @param accessToken - The access token to set.\n */\nfunction setAccessToken(res: Response, accessToken: string) {\n\n    const decodedToken = decode(accessToken) as JwtPayload;\n    \n    // decoded.exp is in seconds since epoch\n    // Date.now() returns milliseconds since epoch\n    // maxAge needs milliseconds remaining\n    if (!decodedToken.exp) {\n        throw new Error(\"Access token does not contain an expiration time\");\n    }\n    \n    res.cookie('accessToken', accessToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\n/**\n * Set the refresh token in the response cookies.\n * @param res - The response object.\n * @param refreshToken - The refresh token to set.\n */\nfunction setRefreshToken(res: Response, refreshToken: string) {\n\n    const decodedToken = decode(refreshToken) as JwtPayload;\n\n    if (!decodedToken.exp) {\n        throw new Error(\"Refresh token does not contain an expiration time\");\n    }\n\n    res.cookie('refreshToken', refreshToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\nfunction parseCookies(req: Request) : { [key: string]: string } {\n    const cookies = req.headers.cookie;\n    if (!cookies) {\n        return {};\n    }\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\n        const [key, value] = cookie.split('=').map(s => s.trim());\n        acc[key] = value;\n        return acc;\n    }, {});\n}\n\nfunction clearCookies(res: Response) {\n    res.clearCookie(\"accessToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n    res.clearCookie(\"refreshToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n}\n\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\nimport { Request, Response, NextFunction } from \"express\";\nimport { RequestWithTokens, Tokens } from \"@core/types\";\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\nimport { JwtPayload } from \"jsonwebtoken\";\nimport { AxiosError } from \"axios\";\nimport axios from \"axios\";\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\n\n/**\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\n * \n * @extends AuthGneissCore\n * @example\n * const authClient = new ExpressAuthGneissClient({\n *   clientId: 'your-client-id',\n *   clientSecret: 'your-client-secret',\n *   redirectUrl: 'your-redirect-url'\n * });\n */\nclass ExpressAuthGneissClient extends AuthGneissCore {\n\n    constructor(\n        config: AuthGneissCoreConfig\n    ) {\n        super(config);\n        \n        // Bind the methods in constructor\n        this.requireAuth = this.requireAuth.bind(this);\n        this.handleCallBack = this.handleCallBack.bind(this);\n        this.login = this.login.bind(this);\n        this.logout = this.logout.bind(this);\n        this.getUser = this.getUser.bind(this);\n        this.deleteUser = this.deleteUser.bind(this)\n    }\n\n    /**\n     * requireAuth is a middleware function that checks if the access token is valid.\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\n     * If the refresh token is not valid, it redirects the user to the login page.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\n        const cookies = parseCookies(req);\n        //Check for the existence of the access token\n        console.log(\"DEBUG: cookies\", cookies);\n        try {\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\n            if (!isAccessTokenValid) { //if the access token is not valid\n                //try to refresh the token\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\n                    setAccessToken(res, newAccessToken);\n                    res.redirect(req.originalUrl)\n                }\n                else {\n                    // no access token or valid refresh token, redirect to login\n                    const returnToUrl : string | undefined = req.originalUrl as string;\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);\n                }\n            }\n            else {\n                // access token is valid, continue to the next middleware or route handler\n                next();\n            }\n        } catch (error) {\n            // console.error('Error in requireAuth middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n            } else {\n                res.status(500).send('Internal server error');\n            }\n        }\n    }\n\n    /**\n     * getUserData is a middleware function that fetches user data using the access token.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async getUser(req: Request, res: Response): Promise<void> {\n        const cookies = parseCookies(req);\n        const accessToken = cookies?.accessToken;\n        if (!accessToken) {\n            throw new Error(\"No access token found in request cookies\");\n        }\n        const userData = await this.getUserData(accessToken);\n        res.status(200).send(userData);\n    }\n\n    /**\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async handleCallBack(\n        req: Request,\n        res: Response,\n        next: NextFunction\n    ): Promise<void> {\n        try {\n            const authCode: string | undefined = req.query.auth_code as string\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\n            if (!authCode) {\n                throw new Error(\"No auth code found in request url parameters\");\n            }\n\n            const tokens: Tokens = await this.getTokens(authCode);\n            \n            // Set the access and refresh tokens in the response cookies\n            setAccessToken(res, tokens.accessToken);\n            setRefreshToken(res, tokens.refreshToken);\n\n            if (returnToUrl) {\n                // Go to the original request url\n                res.redirect(returnToUrl);\n            }\n            else {\n                // Go to the root url\n                res.redirect(\"/\")\n            }\n        } catch (error) {\n            // console.error('Error in handleCallBack middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n                console.error(\"DEBUG: error\", error);\n            } else {\n                res.status(500).send('Internal server error');\n                console.error(\"DEBUG: error\", error);\n            }\n        }\n    }\n\n    /**\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public login(req: Request, res: Response): void {\n        try {\n            if (!this.loginUrl) {\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);\n        } catch (error) {\n            console.error('Error in login middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * logout is a function that redirects the user to the Gneiss logout service.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public logout(req: Request, res: Response): void {\n        const cookies = parseCookies(req);\n        try {\n            if (!this.logoutUrl) {\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            if (cookies?.accessToken) { // Only logout if the access token exists\n                axios.post(this.logoutUrl, {}, { // Logout\n                    headers: {\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\n                    }\n                });\n            }\n            clearCookies(res); // clear the access and refresh cookies\n            res.redirect(\"/\") // Redirect back to home after logout\n        } catch (error) {\n            console.error('Error in logout middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * Utility route handler for deleting a user\n     * This ensures that the user is fully logged out before \n     * deleting the user's data\n     * \n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public deleteUser(req: Request, res: Response) {\n        const cookies = parseCookies(req);\n        this.logout(req, res)\n        this.deleteUserData(cookies?.accessToken)\n    }\n}\n\nexport default ExpressAuthGneissClient;\n"],
+  "mappings": ";AACA,OAAO,WAA8B;AAErC,OAAO,YAAY;AACnB,SAAS,kBAAkB;;;ACApB,IAAM,SAAmC;AAAA,EAC5C,SAAS,QAAQ,IAAI,QAAQ,SAAS,mBACtC,QAAQ,IAAI,QAAQ,YAAY,2BAA2B;AAC/D;;;ADEA,IAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,SAAO,OAAO;AAClB;AASA,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,WACF;AACE,SAAK,SAAS,EAAC,GAAG,WAAW,GAAG,OAAa;AAC7C,SAAK,UAAU,KAAK,OAAO;AAC3B,SAAK,WAAW,KAAK,UAAU,GAAG,KAAK,OAAO,gBAAgB;AAC9D,SAAK,YAAY,KAAK,UAAU,GAAG,KAAK,OAAO,iBAAiB;AAGhE,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAU,KAAK,yCAAyC;AAAA,IAC5D;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO,gCAAgC,QAAQ;AAE5E,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,OAAO;AACpC,UAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,cAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,MAAM,KAAK,GAAG,KAAK,OAAO,yBAAyB,CAAC,GAAG;AAAA,MAC1F,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AE/Jf,SAAqB,cAAc;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,eAAe,OAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,eAAe,OAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,SAAS,cAAAA,mBAAkB;AAC3B,OAAOC,YAAW;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACIC,SACF;AACE,UAAMA,OAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QACpI;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBC,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBA,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACvG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,QAAAC,OAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["AxiosError", "axios", "config", "AxiosError", "axios"]
 }

package/dist/types/src/config.d.ts

@@ -0,0 +1,5 @@
+export type AuthGneissGeneralConfig = {
+    authUrl: string;
+};
+export declare const config: AuthGneissGeneralConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/types/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,MAAM,EAAG,uBAGrB,CAAA"}

package/dist/types/src/core/AuthGneissCore.d.ts

@@ -1,5 +1,6 @@
 import { AuthGneissCoreConfig } from "@core/types";
 import { Tokens } from "@core/types";
+import { AuthGneissGeneralConfig } from "@/config";
 /**
  * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.
  * It handles token exchange, token refresh, user data fetching, and token validation.
@@ -8,11 +9,11 @@ import { Tokens } from "@core/types";
  * to provide authentication middleware and handlers.
  */
 declare class AuthGneissCore {
-    protected config: AuthGneissCoreConfig;
-    protected gneissEnpoint: string | undefined;
+    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig;
+    protected authUrl: string | undefined;
     protected loginUrl: string | undefined;
     protected logoutUrl: string | undefined;
-    constructor(config: AuthGneissCoreConfig);
+    constructor(devConfig: AuthGneissCoreConfig);
     /**
      * getTokens is a method that exchanges an authentication code for access and refresh tokens.
      * The client id and secret are passed as basic auth headers to authenticate the client itself.
@@ -31,7 +32,7 @@ declare class AuthGneissCore {
      * @param accessToken - The access token to be used for user data fetching.
      * @returns A promise that resolves to the user data.
      */
-    protected getUserData(accessToken: string): Promise<any>;
+    getUserData(accessToken: string): Promise<any>;
     /**
      * validateToken is a method that validates the access token.
      * @param token - The access token to be validated.

package/dist/types/src/core/AuthGneissCore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthGneissCore.d.ts","sourceRoot":"","sources":["../../../../src/core/AuthGneissCore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAOrC;;;;;;GAMG;AACH,cAAM,cAAc;IAChB,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACvC,SAAS,CAAC,aAAa,EAAG,MAAM,GAAG,SAAS,CAAA;IAC5C,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAG,SAAS,CAAA;IACvC,SAAS,CAAC,SAAS,EAAG,MAAM,GAAG,SAAS,CAAA;gBAGpC,MAAM,EAAE,oBAAoB;IAoBhC;;;;;OAKG;cACa,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAsB9D;;;;OAIG;cACa,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAe1E;;;;OAIG;cACa,WAAW,CAAC,WAAW,EAAE,MAAM;IAa/C;;;;OAIG;cACa,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB9D;;;OAGG;IACI,WAAW,IAAK,MAAM,GAAG,SAAS;IAIzC;;SAEK;cACW,cAAc,CAAC,WAAW,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;CAQzE;AAED,eAAe,cAAc,CAAC"}
+{"version":3,"file":"AuthGneissCore.d.ts","sourceRoot":"","sources":["../../../../src/core/AuthGneissCore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAIrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAOnD;;;;;;GAMG;AACH,cAAM,cAAc;IAChB,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAAC;IACjE,SAAS,CAAC,OAAO,EAAG,MAAM,GAAG,SAAS,CAAA;IACtC,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAG,SAAS,CAAA;IACvC,SAAS,CAAC,SAAS,EAAG,MAAM,GAAG,SAAS,CAAA;gBAGpC,SAAS,EAAE,oBAAoB;IAiBnC;;;;;OAKG;cACa,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAsB9D;;;;OAIG;cACa,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAe1E;;;;OAIG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM;IAarC;;;;OAIG;cACa,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB9D;;;OAGG;IACI,WAAW,IAAK,MAAM,GAAG,SAAS;IAIzC;;SAEK;cACW,cAAc,CAAC,WAAW,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;CAQzE;AAED,eAAe,cAAc,CAAC"}

package/dist/types/src/core/types.d.ts

@@ -2,8 +2,8 @@ import { Request } from "express";
 interface AuthGneissCoreConfig {
     clientId: string;
     clientSecret: string;
-    baseUrl: string;
-    redirectUrl: string;
+    baseClientUrl: string;
+    callbackUrl: string;
 }
 interface Tokens {
     accessToken: string;

package/dist/types/src/core/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,UAAU,oBAAoB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,MAAM;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IACvC,OAAO,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAA;CACJ;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,UAAU,oBAAoB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,MAAM;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IACvC,OAAO,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAA;CACJ;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/types/src/index.d.ts

@@ -1,4 +1,5 @@
 export { ExpressAuthGneissClient } from "./frameworks";
 export { AuthGneissCore } from "./core";
+export { parseCookies } from "@utils";
 export type { AuthGneissCoreConfig } from "./core";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,YAAY,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,YAAY,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gneiss/client-auth",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/types/src/index.d.ts",