@go-mondo/identity-sdk 0.0.2-beta.12 → 0.0.2-beta.13

package/dist/esm/oauth/authorize/schema/grants/authorization-code.test.js

@@ -1,4 +1,3 @@
-import { type } from 'arktype';
 import { describe, expect, test } from 'vitest';
 import { generateAppId } from '../../../../app/utils.js';
 import { CodeChallengeMethod, ResponseType } from '../../../common/schema.js';
@@ -10,7 +9,7 @@ describe('OAuth Authorization Code Schema', () => {
                 response_type: ResponseType.CODE,
                 client_id: generateAppId(),
             };
-            const result = AuthorizationCodeSchema(minimalPayload);
+            const result = AuthorizationCodeSchema.parse(minimalPayload);
             expect(result).toEqual(minimalPayload);
         });
         test('should validate complete authorization code request', () => {
@@ -28,7 +27,7 @@ describe('OAuth Authorization Code Schema', () => {
                 max_age: 3600,
                 audience: 'https://api.example.com',
             };
-            const result = AuthorizationCodeSchema(completePayload);
+            const result = AuthorizationCodeSchema.parse(completePayload);
             expect(result).toEqual(completePayload);
         });
         test('should validate authorization code request with PKCE', () => {
@@ -41,7 +40,7 @@ describe('OAuth Authorization Code Schema', () => {
                 scope: 'openid',
                 state: 'xyz',
             };
-            const result = AuthorizationCodeSchema(pkcePayload);
+            const result = AuthorizationCodeSchema.parse(pkcePayload);
             expect(result).toEqual(pkcePayload);
         });
         test('should validate authorization code request with plain PKCE', () => {
@@ -51,7 +50,7 @@ describe('OAuth Authorization Code Schema', () => {
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: CodeChallengeMethod.PLAIN,
             };
-            const result = AuthorizationCodeSchema(plainPkcePayload);
+            const result = AuthorizationCodeSchema.parse(plainPkcePayload);
             expect(result).toEqual(plainPkcePayload);
         });
         test('should validate request without PKCE parameters', () => {
@@ -62,7 +61,7 @@ describe('OAuth Authorization Code Schema', () => {
                 scope: 'openid profile',
                 state: 'legacy-state',
             };
-            const result = AuthorizationCodeSchema(noPkcePayload);
+            const result = AuthorizationCodeSchema.parse(noPkcePayload);
             expect(result).toEqual(noPkcePayload);
         });
         test('should validate OIDC specific parameters', () => {
@@ -75,7 +74,7 @@ describe('OAuth Authorization Code Schema', () => {
                 max_age: 7200,
                 scope: 'openid profile email address phone',
             };
-            const result = AuthorizationCodeSchema(oidcPayload);
+            const result = AuthorizationCodeSchema.parse(oidcPayload);
             expect(result).toEqual(oidcPayload);
         });
         test('should validate with optional audience parameter', () => {
@@ -84,7 +83,7 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 audience: 'https://api.myservice.com',
             };
-            const result = AuthorizationCodeSchema(audiencePayload);
+            const result = AuthorizationCodeSchema.parse(audiencePayload);
             expect(result).toEqual(audiencePayload);
         });
     });
@@ -93,31 +92,31 @@ describe('OAuth Authorization Code Schema', () => {
             const invalidPayload = {
                 client_id: generateAppId(),
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid response_type', () => {
             const invalidPayload = {
                 response_type: 'invalid_type',
                 client_id: generateAppId(),
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject missing client_id', () => {
             const invalidPayload = {
                 response_type: ResponseType.CODE,
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid client_id format', () => {
             const invalidPayload = {
                 response_type: ResponseType.CODE,
                 client_id: 'invalid-client-id',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid redirect_uri format', () => {
             const invalidPayload = {
@@ -125,8 +124,8 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 redirect_uri: 'not-a-url',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid code_challenge_method', () => {
             const invalidPayload = {
@@ -135,8 +134,8 @@ describe('OAuth Authorization Code Schema', () => {
                 code_challenge: 'valid-challenge',
                 code_challenge_method: 'invalid_method',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid display value', () => {
             const invalidPayload = {
@@ -144,8 +143,8 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 display: 'invalid_display',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject invalid prompt value', () => {
             const invalidPayload = {
@@ -153,8 +152,8 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 prompt: 'invalid_prompt',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject non-number max_age', () => {
             const invalidPayload = {
@@ -162,8 +161,8 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 max_age: 'not-a-number',
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
         test('should reject negative max_age', () => {
             const invalidPayload = {
@@ -171,8 +170,8 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 max_age: -100,
             };
-            const result = AuthorizationCodeSchema(invalidPayload);
-            expect(result).toBeInstanceOf(type.errors);
+            const result = AuthorizationCodeSchema.safeParse(invalidPayload);
+            expect(result.success).toBe(false);
         });
     });
     describe('PKCE validation edge cases', () => {
@@ -182,15 +181,15 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 code_challenge: 'challenge-without-method',
             };
-            const result1 = AuthorizationCodeSchema(onlyChallenge);
-            expect(result1).toBeInstanceOf(type.errors);
+            const result1 = AuthorizationCodeSchema.safeParse(onlyChallenge);
+            expect(result1.success).toBe(false);
             const onlyMethod = {
                 response_type: ResponseType.CODE,
                 client_id: generateAppId(),
                 code_challenge_method: CodeChallengeMethod.S256,
             };
-            const result2 = AuthorizationCodeSchema(onlyMethod);
-            expect(result2).toBeInstanceOf(type.errors);
+            const result2 = AuthorizationCodeSchema.safeParse(onlyMethod);
+            expect(result2.success).toBe(false);
         });
         test('should allow neither code_challenge nor code_challenge_method', () => {
             const noPkce = {
@@ -198,7 +197,7 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = AuthorizationCodeSchema(noPkce);
+            const result = AuthorizationCodeSchema.parse(noPkce);
             expect(result).toEqual(noPkce);
         });
         test('should validate PKCE with S256 method', () => {
@@ -208,17 +207,17 @@ describe('OAuth Authorization Code Schema', () => {
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: CodeChallengeMethod.S256,
             };
-            const result = AuthorizationCodeSchema(s256Pkce);
+            const result = AuthorizationCodeSchema.parse(s256Pkce);
             expect(result).toEqual(s256Pkce);
         });
         test('should validate PKCE with plain method', () => {
             const plainPkce = {
                 response_type: ResponseType.CODE,
                 client_id: generateAppId(),
-                code_challenge: 'plain-text-challenge',
+                code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
                 code_challenge_method: CodeChallengeMethod.PLAIN,
             };
-            const result = AuthorizationCodeSchema(plainPkce);
+            const result = AuthorizationCodeSchema.parse(plainPkce);
             expect(result).toEqual(plainPkce);
         });
     });
@@ -234,7 +233,7 @@ describe('OAuth Authorization Code Schema', () => {
                 code_challenge_method: CodeChallengeMethod.S256,
                 nonce: 'xyz789',
             };
-            const result = AuthorizationCodeSchema(spaRequest);
+            const result = AuthorizationCodeSchema.parse(spaRequest);
             expect(result).toEqual(spaRequest);
         });
         test('should validate server-side web app authorization request', () => {
@@ -245,7 +244,7 @@ describe('OAuth Authorization Code Schema', () => {
                 scope: 'openid profile email address phone',
                 state: 'secure-random-state-12345',
             };
-            const result = AuthorizationCodeSchema(webAppRequest);
+            const result = AuthorizationCodeSchema.parse(webAppRequest);
             expect(result).toEqual(webAppRequest);
         });
         test('should validate mobile app authorization request', () => {
@@ -259,7 +258,7 @@ describe('OAuth Authorization Code Schema', () => {
                 code_challenge_method: CodeChallengeMethod.S256,
                 display: 'touch',
             };
-            const result = AuthorizationCodeSchema(mobileRequest);
+            const result = AuthorizationCodeSchema.parse(mobileRequest);
             expect(result).toEqual(mobileRequest);
         });
         test('should validate enterprise SSO request', () => {
@@ -273,7 +272,7 @@ describe('OAuth Authorization Code Schema', () => {
                 max_age: 28800, // 8 hours
                 audience: 'https://api.enterprise.example.com',
             };
-            const result = AuthorizationCodeSchema(enterpriseRequest);
+            const result = AuthorizationCodeSchema.parse(enterpriseRequest);
             expect(result).toEqual(enterpriseRequest);
         });
         test('should validate request with multiple scopes', () => {
@@ -283,7 +282,7 @@ describe('OAuth Authorization Code Schema', () => {
                 scope: 'openid profile email address phone offline_access custom:read custom:write',
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = AuthorizationCodeSchema(multiScopeRequest);
+            const result = AuthorizationCodeSchema.parse(multiScopeRequest);
             expect(result).toEqual(multiScopeRequest);
         });
     });
@@ -296,7 +295,7 @@ describe('OAuth Authorization Code Schema', () => {
                 state: '',
                 nonce: '',
             };
-            const result = AuthorizationCodeSchema(emptyStringsPayload);
+            const result = AuthorizationCodeSchema.parse(emptyStringsPayload);
             expect(result).toEqual(emptyStringsPayload);
         });
         test('should handle very long valid values', () => {
@@ -307,7 +306,7 @@ describe('OAuth Authorization Code Schema', () => {
                 nonce: 'b'.repeat(500),
                 scope: `openid profile email ${'custom:scope'.repeat(100)}`,
             };
-            const result = AuthorizationCodeSchema(longValuesPayload);
+            const result = AuthorizationCodeSchema.parse(longValuesPayload);
             expect(result).toEqual(longValuesPayload);
         });
         test('should handle zero max_age', () => {
@@ -316,7 +315,7 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 max_age: 0,
             };
-            const result = AuthorizationCodeSchema(zeroMaxAge);
+            const result = AuthorizationCodeSchema.parse(zeroMaxAge);
             expect(result).toEqual(zeroMaxAge);
         });
         test('should handle large max_age values', () => {
@@ -325,7 +324,7 @@ describe('OAuth Authorization Code Schema', () => {
                 client_id: generateAppId(),
                 max_age: 31536000, // 1 year in seconds
             };
-            const result = AuthorizationCodeSchema(largeMaxAge);
+            const result = AuthorizationCodeSchema.parse(largeMaxAge);
             expect(result).toEqual(largeMaxAge);
         });
     });

package/dist/esm/oauth/authorize/schema/grants/implicit.d.ts

@@ -1,11 +1,17 @@
-export declare const ImplicitSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    response_type: "token" | "id_token" | "string string" | "string number" | "string bigint" | "string boolean" | "string symbol" | "string undefined" | "string object" | "string function" | "number string" | "number number" | "number bigint" | "number boolean" | "number symbol" | "number undefined" | "number object" | "number function" | "bigint string" | "bigint number" | "bigint bigint" | "bigint boolean" | "bigint symbol" | "bigint undefined" | "bigint object" | "bigint function" | "boolean string" | "boolean number" | "boolean bigint" | "boolean boolean" | "boolean symbol" | "boolean undefined" | "boolean object" | "boolean function" | "symbol string" | "symbol number" | "symbol bigint" | "symbol boolean" | "symbol symbol" | "symbol undefined" | "symbol object" | "symbol function" | "undefined string" | "undefined number" | "undefined bigint" | "undefined boolean" | "undefined symbol" | "undefined undefined" | "undefined object" | "undefined function" | "object string" | "object number" | "object bigint" | "object boolean" | "object symbol" | "object undefined" | "object object" | "object function" | "function string" | "function number" | "function bigint" | "function boolean" | "function symbol" | "function undefined" | "function object" | "function function";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    audience?: string | undefined;
-}, {}>;
-export type ImplicitPayload = typeof ImplicitSchema.inferOut;
+import { z } from 'zod';
+export declare const ImplicitSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    response_type: z.ZodEnum<{
+        token: "token";
+        id_token: "id_token";
+        "id_token token": "id_token token";
+        "token id_token": "token id_token";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ImplicitPayload = z.output<typeof ImplicitSchema>;
 //# sourceMappingURL=implicit.d.ts.map

package/dist/esm/oauth/authorize/schema/grants/implicit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,cAAc;;;;;;;;MAAkD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,cAAc,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/esm/oauth/authorize/schema/grants/implicit.js

@@ -1,18 +1,27 @@
-import { type } from 'arktype';
+import { z } from 'zod';
 import { OptionalSchema, ResponseType } from '../../../common/schema.js';
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.2.2.1
  */
-const ResponseTypeSchema = type.enumerated(ResponseType.TOKEN, ResponseType.ID_TOKEN, `${typeof ResponseType.ID_TOKEN} ${typeof ResponseType.TOKEN}`, `${typeof ResponseType.TOKEN} ${typeof ResponseType.ID_TOKEN}`);
-const OAuthSchema = type({
+const ResponseTypeSchema = z.enum([
+    ResponseType.TOKEN,
+    ResponseType.ID_TOKEN,
+    `${ResponseType.ID_TOKEN} ${ResponseType.TOKEN}`,
+    `${ResponseType.TOKEN} ${ResponseType.ID_TOKEN}`,
+]);
+const OAuthSchema = z.object({
     response_type: ResponseTypeSchema,
-    client_id: type('string'),
-    redirect_uri: type('string.url').optional(),
-    scope: type('string').optional(),
-    state: type('string').optional(),
+    client_id: z.string(),
+    redirect_uri: z.url().optional(),
+    scope: z.string().optional(),
+    state: z.string().optional(),
 });
-const OIDCSchema = type({
-    nonce: type('string').optional(), // OIDC (this is required if resposne_type includes ID TOKEN)
+const OIDCSchema = z.object({
+    nonce: z.string().optional(), // OIDC (this is required if resposne_type includes ID TOKEN)
+});
+export const ImplicitSchema = z.object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...OptionalSchema.shape,
 });
-export const ImplicitSchema = OAuthSchema.and(OIDCSchema).and(OptionalSchema);

package/dist/esm/oauth/authorize/schema/schema.d.ts

@@ -1,42 +1,50 @@
+import type { z } from 'zod';
 export * from './grants/authorization-code.js';
 export * from './grants/implicit.js';
 /**
  * Union(s)
  */
-export declare const Schema: import("arktype/internal/methods/object.ts").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-} | {
-    response_type: "token" | "id_token" | "string string" | "string number" | "string bigint" | "string boolean" | "string symbol" | "string undefined" | "string object" | "string function" | "number string" | "number number" | "number bigint" | "number boolean" | "number symbol" | "number undefined" | "number object" | "number function" | "bigint string" | "bigint number" | "bigint bigint" | "bigint boolean" | "bigint symbol" | "bigint undefined" | "bigint object" | "bigint function" | "boolean string" | "boolean number" | "boolean bigint" | "boolean boolean" | "boolean symbol" | "boolean undefined" | "boolean object" | "boolean function" | "symbol string" | "symbol number" | "symbol bigint" | "symbol boolean" | "symbol symbol" | "symbol undefined" | "symbol object" | "symbol function" | "undefined string" | "undefined number" | "undefined bigint" | "undefined boolean" | "undefined symbol" | "undefined undefined" | "undefined object" | "undefined function" | "object string" | "object number" | "object bigint" | "object boolean" | "object symbol" | "object undefined" | "object object" | "object function" | "function string" | "function number" | "function bigint" | "function boolean" | "function symbol" | "function undefined" | "function object" | "function function";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    audience?: string | undefined;
-}, {}>;
-export type Payload = typeof Schema.inferOut;
+export declare const Schema: z.ZodUnion<[z.ZodObject<{
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    response_type: z.ZodEnum<{
+        token: "token";
+        id_token: "id_token";
+        "id_token token": "id_token token";
+        "token id_token": "token id_token";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>]>;
+export type Payload = z.output<typeof Schema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/authorize/schema/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAGA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAA6C,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAK7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAA6C,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC"}

package/dist/esm/oauth/common/schema.d.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod';
 export declare const GrantType: {
     readonly CLIENT_CREDENTIALS: "client_credentials";
     readonly AUTHORIZATION_CODE: "authorization_code";
@@ -23,7 +24,10 @@ export declare const CodeChallengeMethod: {
     readonly PLAIN: "plain";
 };
 export type AnyCodeChallengeMethod = (typeof CodeChallengeMethod)[keyof typeof CodeChallengeMethod];
-export declare const CodeChallengeMethodSchema: import("arktype/internal/methods/string.ts").StringType<"S256" | "plain", {}>;
+export declare const CodeChallengeMethodSchema: z.ZodEnum<{
+    S256: "S256";
+    plain: "plain";
+}>;
 export declare const AuthorizationDisplay: {
     readonly PAGE: "page";
     readonly POPUP: "popup";
@@ -31,7 +35,12 @@ export declare const AuthorizationDisplay: {
     readonly WAP: "wap";
 };
 export type AnyAuthorizationDisplay = (typeof AuthorizationDisplay)[keyof typeof AuthorizationDisplay];
-export declare const AuthorizationDisplaySchema: import("arktype/internal/methods/string.ts").StringType<"page" | "popup" | "touch" | "wap", {}>;
+export declare const AuthorizationDisplaySchema: z.ZodEnum<{
+    page: "page";
+    popup: "popup";
+    touch: "touch";
+    wap: "wap";
+}>;
 export declare const AuthorizationPrompt: {
     readonly NONE: "none";
     readonly LOGIN: "login";
@@ -39,10 +48,15 @@ export declare const AuthorizationPrompt: {
     readonly SELECT_ACCOUNT: "select_account";
 };
 export type AnyAuthorizationPrompt = (typeof AuthorizationPrompt)[keyof typeof AuthorizationPrompt];
-export declare const AuthorizationPromptSchema: import("arktype/internal/methods/string.ts").StringType<"none" | "login" | "consent" | "select_account", {}>;
-export declare const OptionalSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    audience?: string | undefined;
-}, {}>;
+export declare const AuthorizationPromptSchema: z.ZodEnum<{
+    none: "none";
+    login: "login";
+    consent: "consent";
+    select_account: "select_account";
+}>;
+export declare const OptionalSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const OIDCScope: {
     readonly OPENID: "openid";
     readonly PROFILE: "profile";
@@ -64,5 +78,5 @@ export declare const Scope: {
     PHONE: "phone";
 };
 export type AnyScope = AnyOAuthScope | AnyOIDCScope | string;
-export declare const ScopeSchema: import("arktype/internal/methods/string.ts").StringType<string, {}>;
+export declare const ScopeSchema: z.ZodString;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/common/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,+EAGrC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B,iGAKtC,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,8GAKrC,CAAC;AAEF,eAAO,MAAM,cAAc;;MAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,qEAAiB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;EAG3B,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B;;;;;EAK5B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;;EAK3B,CAAC;AAEZ,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,aAAa,CAAC"}

package/dist/esm/oauth/common/schema.js

@@ -1,4 +1,4 @@
-import { type } from 'arktype';
+import { z } from 'zod';
 export const GrantType = {
     CLIENT_CREDENTIALS: 'client_credentials',
     AUTHORIZATION_CODE: 'authorization_code',
@@ -22,23 +22,36 @@ export const CodeChallengeMethod = {
     S256: 'S256',
     PLAIN: 'plain',
 };
-export const CodeChallengeMethodSchema = type.enumerated(CodeChallengeMethod.PLAIN, CodeChallengeMethod.S256);
+export const CodeChallengeMethodSchema = z.enum([
+    CodeChallengeMethod.PLAIN,
+    CodeChallengeMethod.S256,
+]);
 export const AuthorizationDisplay = {
     PAGE: 'page',
     POPUP: 'popup',
     TOUCH: 'touch',
     WAP: 'wap',
 };
-export const AuthorizationDisplaySchema = type.enumerated(AuthorizationDisplay.PAGE, AuthorizationDisplay.POPUP, AuthorizationDisplay.TOUCH, AuthorizationDisplay.WAP);
+export const AuthorizationDisplaySchema = z.enum([
+    AuthorizationDisplay.PAGE,
+    AuthorizationDisplay.POPUP,
+    AuthorizationDisplay.TOUCH,
+    AuthorizationDisplay.WAP,
+]);
 export const AuthorizationPrompt = {
     NONE: 'none',
     LOGIN: 'login',
     CONSENT: 'consent',
     SELECT_ACCOUNT: 'select_account',
 };
-export const AuthorizationPromptSchema = type.enumerated(AuthorizationPrompt.NONE, AuthorizationPrompt.LOGIN, AuthorizationPrompt.CONSENT, AuthorizationPrompt.SELECT_ACCOUNT);
-export const OptionalSchema = type({
-    audience: type('string').optional(),
+export const AuthorizationPromptSchema = z.enum([
+    AuthorizationPrompt.NONE,
+    AuthorizationPrompt.LOGIN,
+    AuthorizationPrompt.CONSENT,
+    AuthorizationPrompt.SELECT_ACCOUNT,
+]);
+export const OptionalSchema = z.object({
+    audience: z.string().optional(),
 });
 export const OIDCScope = {
     OPENID: 'openid',
@@ -54,4 +67,4 @@ export const Scope = {
     ...OIDCScope,
     ...OAuthScope,
 };
-export const ScopeSchema = type('string');
+export const ScopeSchema = z.string();