@go-mondo/identity-sdk 0.0.2-beta.3 → 0.0.2-beta.31

package/dist/esm/customer/users/schema.test.js

@@ -1,55 +1,94 @@
-import { type } from 'arktype';
 import { describe, expect, test } from 'vitest';
+import { generateUserId } from '../schema.js';
 import { InsertUserPayloadSchema, UserPayloadSchema, UserStatus, } from './schema.js';
 describe('Customer - User', () => {
     describe('User Payload', () => {
         test('should parse attributes successfully', async () => {
             const item = {
                 foo: 'bar',
-                id: '123',
+                id: generateUserId(),
                 phoneNumber: '123',
                 status: UserStatus.ACTIVE,
                 createdAt: new Date(),
                 updatedAt: new Date(),
             };
-            const result = UserPayloadSchema(item);
-            if (result instanceof type.errors) {
-                console.log(result.summary);
+            const result = UserPayloadSchema.safeParse(item);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data.metadata).toBeUndefined();
             }
-            expect(result).not.toBeInstanceOf(type.errors);
-            expect(result?.metadata).to.undefined;
         });
     });
     describe('Insert User Payload', () => {
         test('should parse attributes successfully', async () => {
             const item = {
                 foo: 'bar',
-                id: '123',
+                id: generateUserId(),
+                familyName: 'Foo',
                 phoneNumber: '123',
             };
-            const result = InsertUserPayloadSchema(item);
-            if (result instanceof type.errors) {
-                console.log(result.summary);
+            const result = InsertUserPayloadSchema.safeParse(item);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data.metadata).toBeUndefined();
+                expect(result.data.familyName).toBe(item.familyName);
             }
-            expect(result).not.toBeInstanceOf(type.errors);
-            expect(result?.metadata).to.undefined;
         });
         test('should serialize successfully', async () => {
             const item = {
                 foo: 'bar',
-                id: '123',
+                id: generateUserId(),
                 phoneNumber: '123',
                 metadata: new Map(),
-                // status: UserStatus.ACTIVE,
-                // createdAt: new Date(),
-                // updatedAt: new Date(),
             };
-            const result = InsertUserPayloadSchema(item);
-            if (result instanceof type.errors) {
-                console.log(result.summary);
+            const result = InsertUserPayloadSchema.safeParse(item);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data.metadata).toBeNull();
             }
-            expect(result).not.toBeInstanceOf(type.errors);
-            expect(result?.metadata).to.null;
+        });
+        test('should serialize nulls successfully', async () => {
+            const payload = {
+                id: generateUserId(),
+                status: 'unverified',
+                givenName: null,
+                middleName: null,
+                familyName: null,
+                honorificPrefix: null,
+                honorificSuffix: null,
+                email: null,
+                verifiedEmail: null,
+                phoneNumber: null,
+                verifiedPhoneNumber: null,
+                createdAt: '2025-04-02T03:50:40.812Z',
+                updatedAt: '2025-04-02T03:50:40.812Z',
+            };
+            const result = UserPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+        });
+        test('should serialize nulls successfully', async () => {
+            const payload = {
+                id: generateUserId(),
+                status: 'unverified',
+                givenName: null,
+                middleName: null,
+                familyName: null,
+                honorificPrefix: null,
+                honorificSuffix: null,
+                email: null,
+                verifiedEmail: null,
+                phoneNumber: null,
+                verifiedPhoneNumber: null,
+                createdAt: '2025-04-02T03:50:40.812Z',
+                updatedAt: '2025-04-02T03:50:40.812Z',
+            };
+            const result = UserPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
         });
     });
 });

package/dist/esm/customer/users/utils.d.ts

@@ -0,0 +1,11 @@
+import type { z } from 'zod';
+import type { EmailOrPhonePropertiesSchema, UpdateUserNamePropertiesSchema } from './schema.js';
+type UserName = z.input<typeof UpdateUserNamePropertiesSchema>;
+type UserEmailOrPhone = z.input<typeof EmailOrPhonePropertiesSchema>;
+type User = UserName & UserEmailOrPhone;
+export declare function getInitials(name: string | undefined): string | undefined;
+export declare function buildName(item?: Pick<UserName, 'givenName' | 'familyName'>): string;
+export declare function buildProperName(item?: Pick<UserName, 'givenName' | 'middleName' | 'familyName' | 'honorificPrefix' | 'honorificSuffix'>, includeMiddleName?: boolean): string;
+export declare function buildReference(item?: Pick<User, 'givenName' | 'familyName' | 'email'>): string;
+export {};
+//# sourceMappingURL=utils.d.ts.map

package/dist/esm/customer/users/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC/D,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErE,KAAK,IAAI,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAExC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUxE;AAED,wBAAgB,SAAS,CACvB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,CAAC,GAChD,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,CAAC,EAAE,IAAI,CACT,QAAQ,EACN,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CACpB,EACD,iBAAiB,UAAQ,GACxB,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,GACtD,MAAM,CAER"}

package/dist/esm/customer/users/utils.js

@@ -0,0 +1,27 @@
+export function getInitials(name) {
+    if (!name) {
+        return undefined;
+    }
+    return name
+        .split(' ')
+        .map((n) => n[0])
+        .filter(Boolean)
+        .join('');
+}
+export function buildName(item) {
+    return [item?.givenName, item?.familyName].filter(Boolean).join(' ');
+}
+export function buildProperName(item, includeMiddleName = false) {
+    return [
+        item?.honorificPrefix,
+        item?.givenName,
+        includeMiddleName ? item?.middleName : undefined,
+        item?.familyName,
+        item?.honorificSuffix,
+    ]
+        .filter(Boolean)
+        .join(' ');
+}
+export function buildReference(item) {
+    return buildName(item) || item?.email || '';
+}

package/dist/esm/customer/users/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/esm/customer/users/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.test.ts"],"names":[],"mappings":""}

package/dist/esm/customer/users/utils.test.js

@@ -0,0 +1,143 @@
+import { describe, expect, test } from 'vitest';
+import { buildName, buildProperName, buildReference, getInitials, } from './utils.js';
+describe('Customer Users - Utils', () => {
+    describe('getInitials', () => {
+        test('should return initials for single name', () => {
+            expect(getInitials('John')).toBe('J');
+        });
+        test('should return initials for full name', () => {
+            expect(getInitials('John Doe')).toBe('JD');
+        });
+        test('should return initials for multiple names', () => {
+            expect(getInitials('John Michael Doe')).toBe('JMD');
+        });
+        test('should handle names with extra spaces', () => {
+            expect(getInitials('John  Doe')).toBe('JD');
+            expect(getInitials(' John Doe ')).toBe('JD');
+        });
+        test('should return undefined for empty string', () => {
+            expect(getInitials('')).toBeUndefined();
+        });
+        test('should return undefined for undefined input', () => {
+            expect(getInitials(undefined)).toBeUndefined();
+        });
+        test('should handle single character names', () => {
+            expect(getInitials('A B C')).toBe('ABC');
+        });
+        test('should filter out empty parts', () => {
+            expect(getInitials('John  Doe')).toBe('JD');
+        });
+    });
+    describe('buildName', () => {
+        test('should build name from givenName and familyName', () => {
+            const item = { givenName: 'John', familyName: 'Doe' };
+            expect(buildName(item)).toBe('John Doe');
+        });
+        test('should handle only givenName', () => {
+            const item = { givenName: 'John' };
+            expect(buildName(item)).toBe('John');
+        });
+        test('should handle only familyName', () => {
+            const item = { familyName: 'Doe' };
+            expect(buildName(item)).toBe('Doe');
+        });
+        test('should return empty string for empty object', () => {
+            expect(buildName({})).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildName(undefined)).toBe('');
+        });
+        test('should filter out empty strings', () => {
+            const item = { givenName: 'John', familyName: '' };
+            expect(buildName(item)).toBe('John');
+        });
+    });
+    describe('buildProperName', () => {
+        test('should build proper name with all components', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            expect(buildProperName(item, true)).toBe('Dr. John Michael Doe Jr.');
+        });
+        test('should exclude middle name by default', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            expect(buildProperName(item)).toBe('Dr. John Doe Jr.');
+        });
+        test('should handle missing components', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+            };
+            expect(buildProperName(item)).toBe('John Doe');
+        });
+        test('should handle only prefix and suffix', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                honorificSuffix: 'PhD',
+            };
+            expect(buildProperName(item)).toBe('Dr. PhD');
+        });
+        test('should return empty string for empty object', () => {
+            expect(buildProperName({})).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildProperName(undefined)).toBe('');
+        });
+        test('should include middle name when explicitly requested', () => {
+            const item = {
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+            };
+            expect(buildProperName(item, true)).toBe('John Michael Doe');
+            expect(buildProperName(item, false)).toBe('John Doe');
+        });
+    });
+    describe('buildReference', () => {
+        test('should prioritize name over email', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('John Doe');
+        });
+        test('should fallback to email when no name', () => {
+            const item = {
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('john@example.com');
+        });
+        test('should return empty string when no name or email', () => {
+            const item = {};
+            expect(buildReference(item)).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildReference(undefined)).toBe('');
+        });
+        test('should use partial name if available', () => {
+            const item = {
+                givenName: 'John',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('John');
+        });
+        test('should prefer family name over email if no given name', () => {
+            const item = {
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('Doe');
+        });
+    });
+});

package/dist/esm/identity/index.d.ts

@@ -1,2 +1,2 @@
-export * from './schema/schema.js';
+export * from './schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/esm/identity/index.js

@@ -1 +1 @@
-export * from './schema/schema.js';
+export * from './schema.js';

package/dist/{cjs/identity/schema → esm/identity}/schema.d.ts

@@ -1,7 +1,11 @@
+import { z } from 'zod';
 export declare const IdentityIdentifier: {
     readonly EMAIL: "email";
     readonly PHONE_NUMBER: "phoneNumber";
 };
 export type AnyIdentityIdentifier = (typeof IdentityIdentifier)[keyof typeof IdentityIdentifier];
-export declare const IdentityIdentifierSchema: import("arktype/out/methods/string").StringType<"email" | "phoneNumber", {}>;
+export declare const IdentityIdentifierSchema: z.ZodEnum<{
+    email: "email";
+    phoneNumber: "phoneNumber";
+}>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/identity/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;EAG1B,CAAC"}

package/dist/esm/identity/schema.js

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+export const IdentityIdentifier = {
+    EMAIL: 'email',
+    PHONE_NUMBER: 'phoneNumber',
+};
+export const IdentityIdentifierSchema = z.enum([
+    IdentityIdentifier.EMAIL,
+    IdentityIdentifier.PHONE_NUMBER,
+]);

package/dist/esm/identity/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/identity/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/identity/schema.test.js

@@ -0,0 +1,43 @@
+import { describe, expect, test } from 'vitest';
+import { IdentityIdentifier, IdentityIdentifierSchema } from './schema.js';
+describe('Identity - Schema', () => {
+    describe('IdentityIdentifier constants', () => {
+        test('should have correct identifier values', () => {
+            expect(IdentityIdentifier.EMAIL).toBe('email');
+            expect(IdentityIdentifier.PHONE_NUMBER).toBe('phoneNumber');
+        });
+    });
+    describe('IdentityIdentifierSchema', () => {
+        test('should accept valid email identifier', () => {
+            const result = IdentityIdentifierSchema.safeParse('email');
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toBe('email');
+            }
+        });
+        test('should accept valid phone number identifier', () => {
+            const result = IdentityIdentifierSchema.safeParse('phoneNumber');
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toBe('phoneNumber');
+            }
+        });
+        test('should reject invalid identifiers', () => {
+            expect(IdentityIdentifierSchema.safeParse('invalid').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('username').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('sms').success).toBe(false);
+        });
+        test('should reject non-string values', () => {
+            expect(IdentityIdentifierSchema.safeParse(123).success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse(null).success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse(undefined).success).toBe(false);
+        });
+        test('should be case sensitive', () => {
+            expect(IdentityIdentifierSchema.safeParse('EMAIL').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('PHONE_NUMBER').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('phonenumber').success).toBe(false);
+        });
+    });
+});

package/dist/esm/oauth/authorize/schema/grants/authorization-code.d.ts

@@ -1,29 +1,33 @@
-export declare const AuthorizationCodeSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-}, {}>;
-export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+import { z } from 'zod';
+export declare const CodeChallengeSchema: z.ZodString;
+export declare const AuthorizationCodeSchema: z.ZodObject<{
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthorizationCodePayload = z.output<typeof AuthorizationCodeSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/esm/oauth/authorize/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAwCA,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;MAEd,CAAC;AACvB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,eAAO,MAAM,mBAAmB,aAKmC,CAAC;AAmCpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBhC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/esm/oauth/authorize/schema/grants/authorization-code.js

@@ -1,31 +1,69 @@
-import { type } from 'arktype';
-import { AppIdSchema } from '../../../../app/schema/app.js';
+import { z } from 'zod';
+import { AppIdSchema } from '../../../../app/schema.js';
 import { AuthorizationDisplaySchema, AuthorizationPromptSchema, CodeChallengeMethodSchema, OptionalSchema, ResponseType, } from '../../../common/schema.js';
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.1
  */
-const ResponseTypeSchema = type.enumerated(ResponseType.CODE);
-const PKCESchema = type({
-    code_challenge_method: CodeChallengeMethodSchema.optional(),
-    code_challenge: type('string').optional(),
-}).or({
-    code_challenge_method: CodeChallengeMethodSchema,
-    code_challenge: type('string'),
-});
-const OAuthSchema = type({
+const ResponseTypeSchema = z.enum([ResponseType.CODE]);
+export const CodeChallengeSchema = z
+    .string()
+    .min(43, 'Code challenge must be at least 43 characters long.')
+    .max(128, 'Code challenge must be at most 128 characters long.')
+    .regex(/^[A-Za-z0-9\-_.~]+$/, 'Code challenge contains invalid characters.') // Base64url-encoded string
+    .describe('PKCE code challenge, derived from the code verifier.');
+// const PKCESchema = z.union([
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema.optional(),
+//     code_challenge: z.string().optional(),
+//   }),
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema,
+//     code_challenge: z.string().min(1),
+//   })
+// ]).refine((data) => {
+//   return (
+//     (data.code_challenge_method && data.code_challenge) ||
+//     (!data.code_challenge_method && !data.code_challenge)
+//   );
+// }, {
+//   message: 'code_challenge and code_challenge_method must both be present or both be absent',
+// });
+const OAuthSchema = z.object({
     response_type: ResponseTypeSchema,
     client_id: AppIdSchema,
-    redirect_uri: type('string.url').optional(),
-    scope: type('string').optional(),
-    state: type('string').optional(),
+    redirect_uri: z.url().optional(),
+    scope: z.string().optional(),
+    state: z.string().optional(),
 });
-const OIDCSchema = type({
-    nonce: type('string').optional(),
+const OIDCSchema = z.object({
+    nonce: z.string().optional(),
     display: AuthorizationDisplaySchema.optional(),
     prompt: AuthorizationPromptSchema.optional(),
-    max_age: type('number').optional(),
+    max_age: z.number().int().min(0).optional(),
+});
+export const AuthorizationCodeSchema = z
+    .object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...OptionalSchema.shape,
+    code_challenge_method: CodeChallengeMethodSchema.optional(),
+    code_challenge: CodeChallengeSchema.optional(),
+})
+    .superRefine((data, ctx) => {
+    // If one is present, the other must also be present
+    if (data.code_challenge && !data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge_method is required when code_challenge is present',
+            path: ['code_challenge_method'],
+        });
+    }
+    else if (!data.code_challenge && data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge is required when code_challenge_method is present',
+            path: ['code_challenge'],
+        });
+    }
 });
-export const AuthorizationCodeSchema = OAuthSchema.and(OIDCSchema)
-    .and(PKCESchema)
-    .and(OptionalSchema);

package/dist/esm/oauth/authorize/schema/grants/authorization-code.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorization-code.test.d.ts.map

package/dist/esm/oauth/authorize/schema/grants/authorization-code.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.test.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.test.ts"],"names":[],"mappings":""}