@go-mondo/identity-sdk 0.0.2-beta.44 → 0.0.2-beta.45

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.0.2-beta.45](https://github.com/go-mondo/identity-node-sdk/compare/identity-sdk-v0.0.2-beta.44...identity-sdk-v0.0.2-beta.45) (2025-12-02)
+
+
+### Bug Fixes
+
+* oauth schema names ([353a848](https://github.com/go-mondo/identity-node-sdk/commit/353a8483d5f95891dc45e5ef153c2cd5e5642ece))
+
 ## [0.0.2-beta.44](https://github.com/go-mondo/identity-node-sdk/compare/identity-sdk-v0.0.2-beta.43...identity-sdk-v0.0.2-beta.44) (2025-11-30)
 
 

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts

@@ -1,6 +1,6 @@
 import * as z from 'zod/v4';
 export declare const CodeChallengeSchema: z.ZodString;
-export declare const AuthorizationCodeSchema: z.ZodObject<{
+export declare const AuthorizationCodeRequestSchema: z.ZodObject<{
     code_challenge_method: z.ZodOptional<z.ZodEnum<{
         S256: "S256";
         plain: "plain";
@@ -29,5 +29,6 @@ export declare const AuthorizationCodeSchema: z.ZodObject<{
     scope: z.ZodOptional<z.ZodString>;
     state: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export type AuthorizationCodePayload = z.output<typeof AuthorizationCodeSchema>;
+export type AuthorizationCodeRequestInput = z.input<typeof AuthorizationCodeRequestSchema>;
+export type AuthorizationCodeRequestPayload = z.output<typeof AuthorizationCodeRequestSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAiB5B,eAAO,MAAM,mBAAmB,aAKmC,CAAC;AAmCpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBhC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAiB5B,eAAO,MAAM,mBAAmB,aAKmC,CAAC;AAyCpE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBvC,CAAC;AACL,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CACpD,OAAO,8BAA8B,CACtC,CAAC"}

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationCodeSchema = exports.CodeChallengeSchema = void 0;
+exports.AuthorizationCodeRequestSchema = exports.CodeChallengeSchema = void 0;
 const z = __importStar(require("zod/v4"));
 const schema_js_1 = require("../../../../app/schema.js");
 const schema_js_2 = require("../../../common/schema.js");
@@ -66,11 +66,15 @@ exports.CodeChallengeSchema = z
 //   message: 'code_challenge and code_challenge_method must both be present or both be absent',
 // });
 const OAuthSchema = z.object({
-    response_type: ResponseTypeSchema,
-    client_id: schema_js_1.AppIdSchema,
-    redirect_uri: z.url().optional(),
-    scope: z.string().optional(),
-    state: z.string().optional(),
+    response_type: ResponseTypeSchema.describe('Must be set to "code" for Authorization Code flow.'),
+    client_id: schema_js_1.AppIdSchema.describe('The Client ID.'),
+    redirect_uri: z.url().optional().describe('The callback URL.'),
+    scope: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Space-delimited scope strings.'),
+    state: z.string().min(1).optional().describe('Opaque value to prevent CSRF.'),
 });
 const OIDCSchema = z.object({
     nonce: z.string().optional(),
@@ -78,7 +82,7 @@ const OIDCSchema = z.object({
     prompt: schema_js_2.AuthorizationPromptSchema.optional(),
     max_age: z.number().int().min(0).optional(),
 });
-exports.AuthorizationCodeSchema = z
+exports.AuthorizationCodeRequestSchema = z
     .object({
     ...OAuthSchema.shape,
     ...OIDCSchema.shape,

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.test.js

@@ -11,7 +11,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(minimalPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(minimalPayload);
             (0, vitest_1.expect)(result).toEqual(minimalPayload);
         });
         (0, vitest_1.test)('should validate complete authorization code request', () => {
@@ -29,7 +29,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 3600,
                 audience: 'https://api.example.com',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(completePayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(completePayload);
             (0, vitest_1.expect)(result).toEqual(completePayload);
         });
         (0, vitest_1.test)('should validate authorization code request with PKCE', () => {
@@ -42,7 +42,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid',
                 state: 'xyz',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(pkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(pkcePayload);
             (0, vitest_1.expect)(result).toEqual(pkcePayload);
         });
         (0, vitest_1.test)('should validate authorization code request with plain PKCE', () => {
@@ -52,7 +52,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.PLAIN,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(plainPkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(plainPkcePayload);
             (0, vitest_1.expect)(result).toEqual(plainPkcePayload);
         });
         (0, vitest_1.test)('should validate request without PKCE parameters', () => {
@@ -63,7 +63,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile',
                 state: 'legacy-state',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(noPkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(noPkcePayload);
             (0, vitest_1.expect)(result).toEqual(noPkcePayload);
         });
         (0, vitest_1.test)('should validate OIDC specific parameters', () => {
@@ -76,7 +76,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 7200,
                 scope: 'openid profile email address phone',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(oidcPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(oidcPayload);
             (0, vitest_1.expect)(result).toEqual(oidcPayload);
         });
         (0, vitest_1.test)('should validate with optional audience parameter', () => {
@@ -85,7 +85,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 audience: 'https://api.myservice.com',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(audiencePayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(audiencePayload);
             (0, vitest_1.expect)(result).toEqual(audiencePayload);
         });
     });
@@ -94,7 +94,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
             const invalidPayload = {
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid response_type', () => {
@@ -102,14 +102,14 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 response_type: 'invalid_type',
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject missing client_id', () => {
             const invalidPayload = {
                 response_type: schema_js_1.ResponseType.CODE,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid client_id format', () => {
@@ -117,7 +117,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: 'invalid-client-id',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid redirect_uri format', () => {
@@ -126,7 +126,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 redirect_uri: 'not-a-url',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid code_challenge_method', () => {
@@ -136,7 +136,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'valid-challenge',
                 code_challenge_method: 'invalid_method',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid display value', () => {
@@ -145,7 +145,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 display: 'invalid_display',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid prompt value', () => {
@@ -154,7 +154,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 prompt: 'invalid_prompt',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject non-number max_age', () => {
@@ -163,7 +163,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 'not-a-number',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject negative max_age', () => {
@@ -172,7 +172,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: -100,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(invalidPayload);
             (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
@@ -183,14 +183,14 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 code_challenge: 'challenge-without-method',
             };
-            const result1 = authorization_code_js_1.AuthorizationCodeSchema.safeParse(onlyChallenge);
+            const result1 = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(onlyChallenge);
             (0, vitest_1.expect)(result1.success).toBe(false);
             const onlyMethod = {
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
             };
-            const result2 = authorization_code_js_1.AuthorizationCodeSchema.safeParse(onlyMethod);
+            const result2 = authorization_code_js_1.AuthorizationCodeRequestSchema.safeParse(onlyMethod);
             (0, vitest_1.expect)(result2.success).toBe(false);
         });
         (0, vitest_1.test)('should allow neither code_challenge nor code_challenge_method', () => {
@@ -199,7 +199,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(noPkce);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(noPkce);
             (0, vitest_1.expect)(result).toEqual(noPkce);
         });
         (0, vitest_1.test)('should validate PKCE with S256 method', () => {
@@ -209,7 +209,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(s256Pkce);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(s256Pkce);
             (0, vitest_1.expect)(result).toEqual(s256Pkce);
         });
         (0, vitest_1.test)('should validate PKCE with plain method', () => {
@@ -219,7 +219,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.PLAIN,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(plainPkce);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(plainPkce);
             (0, vitest_1.expect)(result).toEqual(plainPkce);
         });
     });
@@ -235,7 +235,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
                 nonce: 'xyz789',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(spaRequest);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(spaRequest);
             (0, vitest_1.expect)(result).toEqual(spaRequest);
         });
         (0, vitest_1.test)('should validate server-side web app authorization request', () => {
@@ -246,7 +246,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile email address phone',
                 state: 'secure-random-state-12345',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(webAppRequest);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(webAppRequest);
             (0, vitest_1.expect)(result).toEqual(webAppRequest);
         });
         (0, vitest_1.test)('should validate mobile app authorization request', () => {
@@ -260,7 +260,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
                 display: 'touch',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(mobileRequest);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(mobileRequest);
             (0, vitest_1.expect)(result).toEqual(mobileRequest);
         });
         (0, vitest_1.test)('should validate enterprise SSO request', () => {
@@ -274,7 +274,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 28800, // 8 hours
                 audience: 'https://api.enterprise.example.com',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(enterpriseRequest);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(enterpriseRequest);
             (0, vitest_1.expect)(result).toEqual(enterpriseRequest);
         });
         (0, vitest_1.test)('should validate request with multiple scopes', () => {
@@ -284,7 +284,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile email address phone offline_access custom:read custom:write',
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(multiScopeRequest);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(multiScopeRequest);
             (0, vitest_1.expect)(result).toEqual(multiScopeRequest);
         });
     });
@@ -293,11 +293,11 @@ const authorization_code_js_1 = require("./authorization-code.js");
             const emptyStringsPayload = {
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
-                scope: '',
-                state: '',
-                nonce: '',
+                scope: 'test',
+                state: 'test',
+                nonce: 'test',
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(emptyStringsPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(emptyStringsPayload);
             (0, vitest_1.expect)(result).toEqual(emptyStringsPayload);
         });
         (0, vitest_1.test)('should handle very long valid values', () => {
@@ -308,7 +308,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 nonce: 'b'.repeat(500),
                 scope: `openid profile email ${'custom:scope'.repeat(100)}`,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(longValuesPayload);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(longValuesPayload);
             (0, vitest_1.expect)(result).toEqual(longValuesPayload);
         });
         (0, vitest_1.test)('should handle zero max_age', () => {
@@ -317,7 +317,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 0,
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(zeroMaxAge);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(zeroMaxAge);
             (0, vitest_1.expect)(result).toEqual(zeroMaxAge);
         });
         (0, vitest_1.test)('should handle large max_age values', () => {
@@ -326,7 +326,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 31536000, // 1 year in seconds
             };
-            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(largeMaxAge);
+            const result = authorization_code_js_1.AuthorizationCodeRequestSchema.parse(largeMaxAge);
             (0, vitest_1.expect)(result).toEqual(largeMaxAge);
         });
     });

package/dist/cjs/oauth/authorize/schema/grants/implicit.d.ts

@@ -1,5 +1,5 @@
 import * as z from 'zod/v4';
-export declare const ImplicitSchema: z.ZodObject<{
+export declare const ImplicitRequestSchema: z.ZodObject<{
     audience: z.ZodOptional<z.ZodString>;
     nonce: z.ZodOptional<z.ZodString>;
     response_type: z.ZodEnum<{
@@ -13,5 +13,6 @@ export declare const ImplicitSchema: z.ZodObject<{
     scope: z.ZodOptional<z.ZodString>;
     state: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export type ImplicitPayload = z.output<typeof ImplicitSchema>;
+export type ImplicitRequestInput = z.input<typeof ImplicitRequestSchema>;
+export type ImplicitRequestPayload = z.output<typeof ImplicitRequestSchema>;
 //# sourceMappingURL=implicit.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/implicit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA2B5B,eAAO,MAAM,cAAc;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA2B5B,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACzE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/cjs/oauth/authorize/schema/grants/implicit.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ImplicitSchema = void 0;
+exports.ImplicitRequestSchema = void 0;
 const z = __importStar(require("zod/v4"));
 const schema_js_1 = require("../../../common/schema.js");
 /**
@@ -56,7 +56,7 @@ const OAuthSchema = z.object({
 const OIDCSchema = z.object({
     nonce: z.string().optional(), // OIDC (this is required if resposne_type includes ID TOKEN)
 });
-exports.ImplicitSchema = z.object({
+exports.ImplicitRequestSchema = z.object({
     ...OAuthSchema.shape,
     ...OIDCSchema.shape,
     ...schema_js_1.OptionalSchema.shape,

package/dist/cjs/oauth/authorize/schema/schema.d.ts

@@ -4,7 +4,7 @@ export * from './grants/implicit.js';
 /**
  * Union(s)
  */
-export declare const Schema: import("zod/v4/index.js").ZodUnion<[import("zod/v4/index.js").ZodObject<{
+export declare const RequestSchema: import("zod/v4/index.js").ZodUnion<[import("zod/v4/index.js").ZodObject<{
     code_challenge_method: import("zod/v4/index.js").ZodOptional<import("zod/v4/index.js").ZodEnum<{
         S256: "S256";
         plain: "plain";
@@ -46,6 +46,7 @@ export declare const Schema: import("zod/v4/index.js").ZodUnion<[import("zod/v4/
     scope: import("zod/v4/index.js").ZodOptional<import("zod/v4/index.js").ZodString>;
     state: import("zod/v4/index.js").ZodOptional<import("zod/v4/index.js").ZodString>;
 }, import("zod/v4/core/schemas.js").$strip>]>;
-export type Payload = z.output<typeof Schema>;
+export type RequestInput = z.input<typeof RequestSchema>;
+export type RequestPayload = z.output<typeof RequestSchema>;
 export { CodeChallengeSchema } from './grants/authorization-code.js';
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/oauth/authorize/schema/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAK7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAA6C,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAK7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAEzB,CAAC;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACzD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/cjs/oauth/authorize/schema/schema.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CodeChallengeSchema = exports.Schema = void 0;
+exports.CodeChallengeSchema = exports.RequestSchema = void 0;
 const authorization_code_js_1 = require("./grants/authorization-code.js");
 const implicit_js_1 = require("./grants/implicit.js");
 __exportStar(require("./grants/authorization-code.js"), exports);
@@ -22,6 +22,6 @@ __exportStar(require("./grants/implicit.js"), exports);
 /**
  * Union(s)
  */
-exports.Schema = authorization_code_js_1.AuthorizationCodeSchema.or(implicit_js_1.ImplicitSchema);
+exports.RequestSchema = authorization_code_js_1.AuthorizationCodeRequestSchema.or(implicit_js_1.ImplicitRequestSchema);
 var authorization_code_js_2 = require("./grants/authorization-code.js");
 Object.defineProperty(exports, "CodeChallengeSchema", { enumerable: true, get: function () { return authorization_code_js_2.CodeChallengeSchema; } });

package/dist/cjs/oauth/common/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;EAG3B,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B;;;;;EAK5B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;;EAK3B,CAAC;AAEZ,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,aAAa,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;EAED,CAAC;AAEtC,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B;;;;;EAK5B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;;EAK3B,CAAC;AAEZ,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,aAGyC,CAAC"}

package/dist/cjs/oauth/common/schema.js

@@ -58,10 +58,9 @@ exports.CodeChallengeMethod = {
     S256: 'S256',
     PLAIN: 'plain',
 };
-exports.CodeChallengeMethodSchema = z.enum([
-    exports.CodeChallengeMethod.PLAIN,
-    exports.CodeChallengeMethod.S256,
-]);
+exports.CodeChallengeMethodSchema = z
+    .enum([exports.CodeChallengeMethod.PLAIN, exports.CodeChallengeMethod.S256])
+    .describe('PKCE Challenge Method.');
 exports.AuthorizationDisplay = {
     PAGE: 'page',
     POPUP: 'popup',
@@ -103,4 +102,7 @@ exports.Scope = {
     ...exports.OIDCScope,
     ...exports.OAuthScope,
 };
-exports.ScopeSchema = z.string();
+exports.ScopeSchema = z
+    .string()
+    .min(1)
+    .describe('A list of space-delimited, case-sensitive strings.');

package/dist/cjs/oauth/common/schema.test.js

@@ -262,13 +262,6 @@ const schema_js_1 = require("./schema.js");
         });
     });
     (0, vitest_1.describe)('Schema edge cases', () => {
-        (0, vitest_1.test)('should handle empty strings appropriately', () => {
-            const emptyString = '';
-            const scopeResult = schema_js_1.ScopeSchema.parse(emptyString);
-            (0, vitest_1.expect)(scopeResult).toBe(emptyString); // Empty string is valid string
-            const challengeResult = schema_js_1.CodeChallengeMethodSchema.safeParse(emptyString);
-            (0, vitest_1.expect)(challengeResult.success).toBe(false); // Empty string not valid enum
-        });
         (0, vitest_1.test)('should handle whitespace and special characters', () => {
             const spacedScope = '  openid profile  ';
             const result = schema_js_1.ScopeSchema.parse(spacedScope);

package/dist/cjs/oauth/token/schema/grants/authorization-code.d.ts

@@ -1,13 +1,17 @@
 import * as z from 'zod/v4';
-export declare const AuthorizationCodeSchema: z.ZodObject<{
+/**
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
+ */
+export declare const AuthorizationCodeRequestSchema: z.ZodObject<{
     code_verifier: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
     grant_type: z.ZodEnum<{
         authorization_code: "authorization_code";
     }>;
     code: z.ZodString;
-    client_id: z.ZodString;
-    client_secret: z.ZodOptional<z.ZodString>;
-    redirect_uri: z.ZodURL;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
 }, z.core.$strip>;
-export type AuthorizationCodePayload = z.output<typeof AuthorizationCodeSchema>;
+export type AuthorizationCodeRequestInput = z.input<typeof AuthorizationCodeRequestSchema>;
+export type AuthorizationCodeRequestPayload = z.output<typeof AuthorizationCodeRequestSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/cjs/oauth/token/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAc5B,eAAO,MAAM,uBAAuB;;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAW5B;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;iBA8BzC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CACpD,OAAO,8BAA8B,CACtC,CAAC"}

package/dist/cjs/oauth/token/schema/grants/authorization-code.js

@@ -33,22 +33,42 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationCodeSchema = void 0;
+exports.AuthorizationCodeRequestSchema = void 0;
 const z = __importStar(require("zod/v4"));
 const schema_js_1 = require("../../../common/schema.js");
+const common_js_1 = require("./common.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.3.1
  */
 const GrantTypeSchema = z.enum([schema_js_1.GrantType.AUTHORIZATION_CODE]);
-const PKCESchema = z.object({
-    code_verifier: z.string().optional(),
-});
-exports.AuthorizationCodeSchema = z.object({
-    grant_type: GrantTypeSchema,
-    code: z.string(),
-    client_id: z.string(),
-    client_secret: z.string().optional(),
-    redirect_uri: z.url(),
-    ...PKCESchema.shape,
+/**
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
+ */
+exports.AuthorizationCodeRequestSchema = z.object({
+    /**
+     * REQUIRED. Must be set to "authorization_code".
+     */
+    grant_type: GrantTypeSchema.describe('The grant type.'),
+    /**
+     * REQUIRED. The authorization code received from the authorization server.
+     */
+    code: z
+        .string()
+        .min(1)
+        .describe('The authorization code received in the redirect.'),
+    /**
+     * REQUIRED. If the "redirect_uri" parameter was included in the
+     * authorization request, it must be identical here.
+     */
+    redirect_uri: z
+        .url()
+        .optional()
+        .describe('The callback URL used in the initial request.'),
+    ...common_js_1.ClientRequestSchema.shape,
+    /**
+     * PKCE EXTENSION. REQUIRED if "code_challenge" was present in the authorization request.
+     * The unhashed, original random string created by the client.
+     */
+    code_verifier: z.string().min(1).optional().describe('PKCE Code Verifier.'),
 });

package/dist/cjs/oauth/token/schema/grants/client-credentials.d.ts

@@ -1,26 +1,19 @@
 import * as z from 'zod/v4';
 /**
- * What the incoming body may look like.
+ * Note: Prior to using this schema, the headers should be checked for
+ * HTTP Basic Authentication. If present, the client_id and client_secret
+ * should be included in with the payload before parsing.
  *
- * Note: the client_id and client_secrete may (likely) be in Authorization header
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.4.2
  */
-export declare const ClientCredentialsPayloadSchema: z.ZodObject<{
-    audience: z.ZodOptional<z.ZodString>;
-    grant_type: z.ZodEnum<{
-        client_credentials: "client_credentials";
-    }>;
-    scope: z.ZodOptional<z.ZodString>;
-    client_id: z.ZodOptional<z.ZodString>;
-    client_secret: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export declare const ClientCredentialsSchema: z.ZodObject<{
+export declare const ClientCredentialsRequestSchema: z.ZodObject<{
     client_id: z.ZodString;
     client_secret: z.ZodString;
-    audience: z.ZodOptional<z.ZodString>;
-    scope: z.ZodOptional<z.ZodString>;
     grant_type: z.ZodEnum<{
         client_credentials: "client_credentials";
     }>;
+    scope: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export type ClientCredentialsPayload = z.output<typeof ClientCredentialsSchema>;
+export type ClientCredentialsRequestInput = z.input<typeof ClientCredentialsRequestSchema>;
+export type ClientCredentialsRequestPayload = z.output<typeof ClientCredentialsRequestSchema>;
 //# sourceMappingURL=client-credentials.d.ts.map

package/dist/cjs/oauth/token/schema/grants/client-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/client-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAU5B;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;iBAMzC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/client-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAU5B;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B;;;;;;;iBAYzC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CACpD,OAAO,8BAA8B,CACtC,CAAC"}