@grantjs/server 1.0.0 → 1.1.1

package/dist/grant-client-t3KadxFo.js

@@ -0,0 +1,205 @@
+//#region src/utils/token-extractor.ts
+/**
+* Extract Bearer token from Authorization header
+*/
+function extractBearerToken(authHeader) {
+	if (!authHeader) return null;
+	const parts = authHeader.trim().split(/\s+/);
+	if (parts.length !== 2 || parts[0].toLowerCase() !== "bearer") return null;
+	return parts[1];
+}
+/**
+* Parse cookie header string into key-value pairs
+*/
+function parseCookieHeader(cookieHeader) {
+	const cookies = {};
+	cookieHeader.split(";").forEach((cookie) => {
+		const [name, ...rest] = cookie.trim().split("=");
+		if (name && rest.length > 0) cookies[name.trim()] = rest.join("=").trim();
+	});
+	return cookies;
+}
+/**
+* Extract token from cookies
+*/
+function extractTokenFromCookies(cookieHeader, cookieName) {
+	if (!cookieHeader) return null;
+	return parseCookieHeader(cookieHeader)[cookieName] || null;
+}
+/**
+* Extract token from Express request
+*/
+async function extractTokenFromRequest(request, config) {
+	if (config.getToken) {
+		const token = await config.getToken(request);
+		if (token) return token;
+	}
+	const req = request;
+	if (!req?.headers) return null;
+	const headersGet = req.headers.get;
+	if (typeof headersGet === "function") {
+		const bearerToken = extractBearerToken(headersGet.call(req.headers, "authorization") ?? void 0);
+		if (bearerToken) return bearerToken;
+		const cookieName = config.cookieName || "grant-access-token";
+		const cookieHeader = headersGet.call(req.headers, "cookie");
+		if (cookieHeader) {
+			const cookieToken = extractTokenFromCookies(cookieHeader, cookieName);
+			if (cookieToken) return cookieToken;
+		}
+		return null;
+	}
+	const plainHeaders = req.headers;
+	const authHeader = plainHeaders.authorization;
+	const bearerToken = extractBearerToken(authHeader);
+	if (bearerToken) return bearerToken;
+	const cookieName = config.cookieName || "grant-access-token";
+	if (req.cookies?.[cookieName]) return req.cookies[cookieName];
+	const cookieHeader = plainHeaders.cookie;
+	if (cookieHeader) {
+		const cookieToken = extractTokenFromCookies(cookieHeader, cookieName);
+		if (cookieToken) return cookieToken;
+	}
+	return null;
+}
+//#endregion
+//#region \0@oxc-project+runtime@0.127.0/helpers/typeof.js
+function _typeof(o) {
+	"@babel/helpers - typeof";
+	return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o) {
+		return typeof o;
+	} : function(o) {
+		return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
+	}, _typeof(o);
+}
+//#endregion
+//#region \0@oxc-project+runtime@0.127.0/helpers/toPrimitive.js
+function toPrimitive(t, r) {
+	if ("object" != _typeof(t) || !t) return t;
+	var e = t[Symbol.toPrimitive];
+	if (void 0 !== e) {
+		var i = e.call(t, r || "default");
+		if ("object" != _typeof(i)) return i;
+		throw new TypeError("@@toPrimitive must return a primitive value.");
+	}
+	return ("string" === r ? String : Number)(t);
+}
+//#endregion
+//#region \0@oxc-project+runtime@0.127.0/helpers/toPropertyKey.js
+function toPropertyKey(t) {
+	var i = toPrimitive(t, "string");
+	return "symbol" == _typeof(i) ? i : i + "";
+}
+//#endregion
+//#region \0@oxc-project+runtime@0.127.0/helpers/defineProperty.js
+function _defineProperty(e, r, t) {
+	return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
+		value: t,
+		enumerable: !0,
+		configurable: !0,
+		writable: !0
+	}) : e[r] = t, e;
+}
+//#endregion
+//#region src/grant-client.ts
+/**
+* Grant Client for server-side applications
+*
+* Makes HTTP requests to the Grant API to check permissions.
+* Uses API-key exchanged tokens (scope in JWT claims); token-based and cookie-based extraction supported.
+* No caching - server-side caching is handled by grant-api.
+*/
+var GrantClient = class {
+	constructor(config) {
+		_defineProperty(this, "config", void 0);
+		this.config = config;
+	}
+	/**
+	* Check if the current user has a specific permission
+	*
+	* @example
+	* ```ts
+	* const canEdit = await grant.isGranted('document', 'update', { scope });
+	* if (canEdit) {
+	*   // Proceed with operation
+	* }
+	* ```
+	*/
+	async isGranted(resource, action, options, request) {
+		return (await this.isAuthorized(resource, action, options, request)).authorized;
+	}
+	/**
+	* Check authorization with full result details
+	*
+	* @example
+	* ```ts
+	* const result = await grant.isAuthorized('document', 'update', { scope }, request);
+	* if (!result.authorized) {
+	*   console.log('Denied:', result.reason);
+	* }
+	* ```
+	*/
+	async isAuthorized(resource, action, options, request) {
+		try {
+			const response = await this.fetchWithAuth("/api/auth/is-authorized", {
+				method: "POST",
+				body: JSON.stringify({
+					permission: {
+						resource,
+						action
+					},
+					context: { resource: options?.context?.resource || null }
+				})
+			}, request);
+			if (!response.ok) return {
+				authorized: false,
+				reason: (await response.json().catch(() => ({}))).message || `API error: ${response.status}`
+			};
+			const json = await response.json();
+			return json.data ?? json;
+		} catch (error) {
+			return {
+				authorized: false,
+				reason: error instanceof Error ? error.message : "Unknown error"
+			};
+		}
+	}
+	/**
+	* Extract token from a request object
+	* Useful for middleware that needs to extract token before making authorization calls
+	*/
+	async getTokenFromRequest(request) {
+		return extractTokenFromRequest(request, this.config);
+	}
+	/**
+	* Make an authenticated fetch request (token from request; no refresh).
+	*/
+	async fetchWithAuth(url, init, request) {
+		return this.doFetch(url, init, request);
+	}
+	/**
+	* Perform the actual fetch request
+	*/
+	async doFetch(url, init, request) {
+		const fetchFn = this.config.fetch ?? globalThis.fetch;
+		const fullUrl = url.startsWith("http") ? url : `${this.config.apiUrl}${url}`;
+		const headers = {
+			"Content-Type": "application/json",
+			...init?.headers
+		};
+		if (request) {
+			const token = await extractTokenFromRequest(request, this.config);
+			if (token) headers["Authorization"] = `Bearer ${token}`;
+			const req = request;
+			if (req.headers?.cookie) headers["Cookie"] = req.headers.cookie;
+		}
+		return fetchFn(fullUrl, {
+			...init,
+			headers,
+			credentials: this.config.credentials ?? "include"
+		});
+	}
+};
+//#endregion
+export { extractTokenFromRequest as i, _defineProperty as n, extractBearerToken as r, GrantClient as t };
+
+//# sourceMappingURL=grant-client-t3KadxFo.js.map

package/dist/grant-client-t3KadxFo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-client-t3KadxFo.js","names":[],"sources":["../src/utils/token-extractor.ts","../src/grant-client.ts"],"sourcesContent":["import type { GrantServerConfig } from '../types';\n\n/**\n * Extract Bearer token from Authorization header\n */\nexport function extractBearerToken(authHeader: string | undefined): string | null {\n  if (!authHeader) return null;\n\n  const parts = authHeader.trim().split(/\\s+/);\n  if (parts.length !== 2 || parts[0].toLowerCase() !== 'bearer') {\n    return null;\n  }\n\n  return parts[1];\n}\n\n/**\n * Parse cookie header string into key-value pairs\n */\nfunction parseCookieHeader(cookieHeader: string): Record<string, string> {\n  const cookies: Record<string, string> = {};\n\n  cookieHeader.split(';').forEach((cookie) => {\n    const [name, ...rest] = cookie.trim().split('=');\n    if (name && rest.length > 0) {\n      cookies[name.trim()] = rest.join('=').trim();\n    }\n  });\n\n  return cookies;\n}\n\n/**\n * Extract token from cookies\n */\nexport function extractTokenFromCookies(\n  cookieHeader: string | undefined,\n  cookieName: string\n): string | null {\n  if (!cookieHeader) return null;\n\n  const cookies = parseCookieHeader(cookieHeader);\n  return cookies[cookieName] || null;\n}\n\n/**\n * Extract token from Express request\n */\nexport async function extractTokenFromRequest(\n  request: unknown,\n  config: GrantServerConfig\n): Promise<string | null> {\n  // Use custom token resolver if provided\n  if (config.getToken) {\n    const token = await config.getToken(request);\n    if (token) return token;\n  }\n\n  // Try to extract from request (Express-style or Web API / NextRequest)\n  const req = request as {\n    headers?:\n      | { authorization?: string; cookie?: string }\n      | { get: (name: string) => string | null };\n    cookies?: Record<string, string>;\n  };\n\n  if (!req?.headers) return null;\n\n  // Web API Headers (NextRequest, Request): headers.get(name)\n  const headersGet = (req.headers as { get?: (name: string) => string | null }).get;\n  if (typeof headersGet === 'function') {\n    const authHeader = headersGet.call(req.headers, 'authorization');\n    const bearerToken = extractBearerToken(authHeader ?? undefined);\n    if (bearerToken) return bearerToken;\n    const cookieName = config.cookieName || 'grant-access-token';\n    const cookieHeader = headersGet.call(req.headers, 'cookie');\n    if (cookieHeader) {\n      const cookieToken = extractTokenFromCookies(cookieHeader, cookieName);\n      if (cookieToken) return cookieToken;\n    }\n    return null;\n  }\n\n  // Express-style: headers.authorization, headers.cookie\n  const plainHeaders = req.headers as { authorization?: string; cookie?: string };\n  const authHeader = plainHeaders.authorization;\n  const bearerToken = extractBearerToken(authHeader);\n  if (bearerToken) return bearerToken;\n\n  const cookieName = config.cookieName || 'grant-access-token';\n\n  if (req.cookies?.[cookieName]) {\n    return req.cookies[cookieName];\n  }\n\n  const cookieHeader = plainHeaders.cookie;\n  if (cookieHeader) {\n    const cookieToken = extractTokenFromCookies(cookieHeader, cookieName);\n    if (cookieToken) return cookieToken;\n  }\n\n  return null;\n}\n","import type { AuthorizationResult, GrantServerConfig, PermissionCheckOptions } from './types';\nimport { extractTokenFromRequest } from './utils/token-extractor';\n\n/**\n * Grant Client for server-side applications\n *\n * Makes HTTP requests to the Grant API to check permissions.\n * Uses API-key exchanged tokens (scope in JWT claims); token-based and cookie-based extraction supported.\n * No caching - server-side caching is handled by grant-api.\n */\nexport class GrantClient {\n  public readonly config: Required<Pick<GrantServerConfig, 'apiUrl'>> & GrantServerConfig;\n\n  constructor(config: GrantServerConfig) {\n    this.config = config;\n  }\n\n  // ============================================================================\n  // Public API - Permission Checks\n  // ============================================================================\n\n  /**\n   * Check if the current user has a specific permission\n   *\n   * @example\n   * ```ts\n   * const canEdit = await grant.isGranted('document', 'update', { scope });\n   * if (canEdit) {\n   *   // Proceed with operation\n   * }\n   * ```\n   */\n  async isGranted(\n    resource: string,\n    action: string,\n    options?: PermissionCheckOptions,\n    request?: unknown\n  ): Promise<boolean> {\n    const result = await this.isAuthorized(resource, action, options, request);\n    return result.authorized;\n  }\n\n  /**\n   * Check authorization with full result details\n   *\n   * @example\n   * ```ts\n   * const result = await grant.isAuthorized('document', 'update', { scope }, request);\n   * if (!result.authorized) {\n   *   console.log('Denied:', result.reason);\n   * }\n   * ```\n   */\n  async isAuthorized(\n    resource: string,\n    action: string,\n    options?: PermissionCheckOptions,\n    request?: unknown\n  ): Promise<AuthorizationResult> {\n    try {\n      // API expects: { permission: { resource, action }, context: { resource?: any }, scope?: { tenant, id } }\n      const response = await this.fetchWithAuth(\n        '/api/auth/is-authorized',\n        {\n          method: 'POST',\n          body: JSON.stringify({\n            permission: {\n              resource,\n              action,\n            },\n            context: {\n              resource: options?.context?.resource || null,\n            },\n          }),\n        },\n        request\n      );\n\n      if (!response.ok) {\n        const error = await response.json().catch(() => ({}));\n        return {\n          authorized: false,\n          reason: error.message || `API error: ${response.status}`,\n        };\n      }\n\n      const json = await response.json();\n      // API returns { success: true, data: { authorized, ... } }\n      const result: AuthorizationResult = json.data ?? json;\n      return result;\n    } catch (error) {\n      return {\n        authorized: false,\n        reason: error instanceof Error ? error.message : 'Unknown error',\n      };\n    }\n  }\n\n  /**\n   * Extract token from a request object\n   * Useful for middleware that needs to extract token before making authorization calls\n   */\n  async getTokenFromRequest(request: unknown): Promise<string | null> {\n    return extractTokenFromRequest(request, this.config);\n  }\n\n  // ============================================================================\n  // Private - HTTP & Authentication\n  // ============================================================================\n\n  /**\n   * Make an authenticated fetch request (token from request; no refresh).\n   */\n  private async fetchWithAuth(\n    url: string,\n    init?: RequestInit,\n    request?: unknown\n  ): Promise<Response> {\n    return this.doFetch(url, init, request);\n  }\n\n  /**\n   * Perform the actual fetch request\n   */\n  private async doFetch(url: string, init?: RequestInit, request?: unknown): Promise<Response> {\n    const fetchFn = this.config.fetch ?? globalThis.fetch;\n    const fullUrl = url.startsWith('http') ? url : `${this.config.apiUrl}${url}`;\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      ...(init?.headers as Record<string, string>),\n    };\n\n    // Add authorization header if token is available\n    if (request) {\n      const token = await extractTokenFromRequest(request, this.config);\n      if (token) {\n        headers['Authorization'] = `Bearer ${token}`;\n      }\n\n      // Forward cookies if using cookie-based auth\n      const req = request as { headers?: { cookie?: string } };\n      if (req.headers?.cookie) {\n        headers['Cookie'] = req.headers.cookie;\n      }\n    }\n\n    return fetchFn(fullUrl, {\n      ...init,\n      headers,\n      // Include cookies for same-origin requests (supports cookie-based auth)\n      credentials: this.config.credentials ?? 'include',\n    });\n  }\n}\n"],"mappings":";;;;AAKA,SAAgB,mBAAmB,YAA+C;AAChF,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,QAAQ,WAAW,MAAM,CAAC,MAAM,MAAM;AAC5C,KAAI,MAAM,WAAW,KAAK,MAAM,GAAG,aAAa,KAAK,SACnD,QAAO;AAGT,QAAO,MAAM;;;;;AAMf,SAAS,kBAAkB,cAA8C;CACvE,MAAM,UAAkC,EAAE;AAE1C,cAAa,MAAM,IAAI,CAAC,SAAS,WAAW;EAC1C,MAAM,CAAC,MAAM,GAAG,QAAQ,OAAO,MAAM,CAAC,MAAM,IAAI;AAChD,MAAI,QAAQ,KAAK,SAAS,EACxB,SAAQ,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM;GAE9C;AAEF,QAAO;;;;;AAMT,SAAgB,wBACd,cACA,YACe;AACf,KAAI,CAAC,aAAc,QAAO;AAG1B,QADgB,kBAAkB,aAC3B,CAAQ,eAAe;;;;;AAMhC,eAAsB,wBACpB,SACA,QACwB;AAExB,KAAI,OAAO,UAAU;EACnB,MAAM,QAAQ,MAAM,OAAO,SAAS,QAAQ;AAC5C,MAAI,MAAO,QAAO;;CAIpB,MAAM,MAAM;AAOZ,KAAI,CAAC,KAAK,QAAS,QAAO;CAG1B,MAAM,aAAc,IAAI,QAAsD;AAC9E,KAAI,OAAO,eAAe,YAAY;EAEpC,MAAM,cAAc,mBADD,WAAW,KAAK,IAAI,SAAS,gBACT,IAAc,KAAA,EAAU;AAC/D,MAAI,YAAa,QAAO;EACxB,MAAM,aAAa,OAAO,cAAc;EACxC,MAAM,eAAe,WAAW,KAAK,IAAI,SAAS,SAAS;AAC3D,MAAI,cAAc;GAChB,MAAM,cAAc,wBAAwB,cAAc,WAAW;AACrE,OAAI,YAAa,QAAO;;AAE1B,SAAO;;CAIT,MAAM,eAAe,IAAI;CACzB,MAAM,aAAa,aAAa;CAChC,MAAM,cAAc,mBAAmB,WAAW;AAClD,KAAI,YAAa,QAAO;CAExB,MAAM,aAAa,OAAO,cAAc;AAExC,KAAI,IAAI,UAAU,YAChB,QAAO,IAAI,QAAQ;CAGrB,MAAM,eAAe,aAAa;AAClC,KAAI,cAAc;EAChB,MAAM,cAAc,wBAAwB,cAAc,WAAW;AACrE,MAAI,YAAa,QAAO;;AAG1B,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC3FT,IAAa,cAAb,MAAyB;CAGvB,YAAY,QAA2B;wBAFvC,UAAA,KAAA,EAAgB;AAGd,OAAK,SAAS;;;;;;;;;;;;;CAkBhB,MAAM,UACJ,UACA,QACA,SACA,SACkB;AAElB,UAAO,MADc,KAAK,aAAa,UAAU,QAAQ,SAAS,QAAQ,EAC5D;;;;;;;;;;;;;CAchB,MAAM,aACJ,UACA,QACA,SACA,SAC8B;AAC9B,MAAI;GAEF,MAAM,WAAW,MAAM,KAAK,cAC1B,2BACA;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,YAAY;MACV;MACA;MACD;KACD,SAAS,EACP,UAAU,SAAS,SAAS,YAAY,MACzC;KACF,CAAC;IACH,EACD,QACD;AAED,OAAI,CAAC,SAAS,GAEZ,QAAO;IACL,YAAY;IACZ,SAAQ,MAHU,SAAS,MAAM,CAAC,aAAa,EAAE,EAAE,EAGrC,WAAW,cAAc,SAAS;IACjD;GAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAGlC,UADoC,KAAK,QAAQ;WAE1C,OAAO;AACd,UAAO;IACL,YAAY;IACZ,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;IAClD;;;;;;;CAQL,MAAM,oBAAoB,SAA0C;AAClE,SAAO,wBAAwB,SAAS,KAAK,OAAO;;;;;CAUtD,MAAc,cACZ,KACA,MACA,SACmB;AACnB,SAAO,KAAK,QAAQ,KAAK,MAAM,QAAQ;;;;;CAMzC,MAAc,QAAQ,KAAa,MAAoB,SAAsC;EAC3F,MAAM,UAAU,KAAK,OAAO,SAAS,WAAW;EAChD,MAAM,UAAU,IAAI,WAAW,OAAO,GAAG,MAAM,GAAG,KAAK,OAAO,SAAS;EAEvE,MAAM,UAAkC;GACtC,gBAAgB;GAChB,GAAI,MAAM;GACX;AAGD,MAAI,SAAS;GACX,MAAM,QAAQ,MAAM,wBAAwB,SAAS,KAAK,OAAO;AACjE,OAAI,MACF,SAAQ,mBAAmB,UAAU;GAIvC,MAAM,MAAM;AACZ,OAAI,IAAI,SAAS,OACf,SAAQ,YAAY,IAAI,QAAQ;;AAIpC,SAAO,QAAQ,SAAS;GACtB,GAAG;GACH;GAEA,aAAa,KAAK,OAAO,eAAe;GACzC,CAAC"}

package/dist/grant-client.d.ts

@@ -1,4 +1,4 @@
-import { GrantServerConfig, AuthorizationResult, PermissionCheckOptions } from './types';
+import { AuthorizationResult, GrantServerConfig, PermissionCheckOptions } from './types';
 /**
  * Grant Client for server-side applications
  *

package/dist/grant-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant-client.d.ts","sourceRoot":"","sources":["../src/grant-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAE9F;;;;;;GAMG;AACH,qBAAa,WAAW;IACtB,SAAgB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,GAAG,iBAAiB,CAAC;gBAE5E,MAAM,EAAE,iBAAiB;IAQrC;;;;;;;;;;OAUG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;OAUG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,mBAAmB,CAAC;IAwC/B;;;OAGG;IACG,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQnE;;OAEG;YACW,aAAa;IAQ3B;;OAEG;YACW,OAAO;CA8BtB"}
+{"version":3,"file":"grant-client.d.ts","sourceRoot":"","sources":["../src/grant-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAG9F;;;;;;GAMG;AACH,qBAAa,WAAW;IACtB,SAAgB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,GAAG,iBAAiB,CAAC;gBAE5E,MAAM,EAAE,iBAAiB;IAQrC;;;;;;;;;;OAUG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;OAUG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,mBAAmB,CAAC;IAwC/B;;;OAGG;IACG,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQnE;;OAEG;YACW,aAAa;IAQ3B;;OAEG;YACW,OAAO;CA8BtB"}

package/dist/index.cjs

@@ -1,50 +1,11 @@
-"use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const grantClient = require("./grant-client-DywfJN5P.cjs");
-class GrantServerError extends Error {
-  constructor(message, code, statusCode = 500) {
-    super(message);
-    this.code = code;
-    this.statusCode = statusCode;
-    this.name = "GrantServerError";
-    Object.setPrototypeOf(this, GrantServerError.prototype);
-  }
-}
-class AuthenticationError extends GrantServerError {
-  constructor(message = "Unauthorized", code = "UNAUTHENTICATED") {
-    super(message, code, 401);
-    this.name = "AuthenticationError";
-    Object.setPrototypeOf(this, AuthenticationError.prototype);
-  }
-}
-class AuthorizationError extends GrantServerError {
-  constructor(message = "Forbidden", code = "FORBIDDEN", reason) {
-    super(message, code, 403);
-    this.reason = reason;
-    this.name = "AuthorizationError";
-    Object.setPrototypeOf(this, AuthorizationError.prototype);
-  }
-}
-class BadRequestError extends GrantServerError {
-  constructor(message = "Bad Request", code = "BAD_REQUEST") {
-    super(message, code, 400);
-    this.name = "BadRequestError";
-    Object.setPrototypeOf(this, BadRequestError.prototype);
-  }
-}
-class NotFoundError extends GrantServerError {
-  constructor(message = "Not Found", code = "NOT_FOUND") {
-    super(message, code, 404);
-    this.name = "NotFoundError";
-    Object.setPrototypeOf(this, NotFoundError.prototype);
-  }
-}
-exports.GrantClient = grantClient.GrantClient;
-exports.extractBearerToken = grantClient.extractBearerToken;
-exports.extractTokenFromRequest = grantClient.extractTokenFromRequest;
-exports.AuthenticationError = AuthenticationError;
-exports.AuthorizationError = AuthorizationError;
-exports.BadRequestError = BadRequestError;
-exports.GrantServerError = GrantServerError;
-exports.NotFoundError = NotFoundError;
-//# sourceMappingURL=index.cjs.map
+const require_grant_client = require("./grant-client-f6IKMyk5.cjs");
+const require_errors = require("./errors-BUeTn_3G.cjs");
+exports.AuthenticationError = require_errors.AuthenticationError;
+exports.AuthorizationError = require_errors.AuthorizationError;
+exports.BadRequestError = require_errors.BadRequestError;
+exports.GrantClient = require_grant_client.GrantClient;
+exports.GrantServerError = require_errors.GrantServerError;
+exports.NotFoundError = require_errors.NotFoundError;
+exports.extractBearerToken = require_grant_client.extractBearerToken;
+exports.extractTokenFromRequest = require_grant_client.extractTokenFromRequest;

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { GrantClient } from './grant-client';
-export type { GrantServerConfig, AuthorizationResult, PermissionCheckOptions } from './types';
-export { GrantServerError, AuthenticationError, AuthorizationError, BadRequestError, NotFoundError, } from './errors';
-export { extractTokenFromRequest, extractBearerToken } from './utils/token-extractor';
-export type { Scope, Tenant, ResourceResolver, ResourceResolverParams, ResourceResolverResult, } from './types';
+export type { AuthorizationResult, GrantServerConfig, PermissionCheckOptions } from './types';
+export { AuthenticationError, AuthorizationError, BadRequestError, GrantServerError, NotFoundError, } from './errors';
+export { extractBearerToken, extractTokenFromRequest } from './utils/token-extractor';
+export type { ResourceResolver, ResourceResolverParams, ResourceResolverResult, Scope, Tenant, } from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAG9F,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGtF,YAAY,EACV,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAG9F,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGtF,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,EACL,MAAM,GACP,MAAM,SAAS,CAAC"}

package/dist/index.mjs

@@ -1,50 +1,3 @@
-import { G, a, e } from "./grant-client-D1LZI2f4.js";
-class GrantServerError extends Error {
-  constructor(message, code, statusCode = 500) {
-    super(message);
-    this.code = code;
-    this.statusCode = statusCode;
-    this.name = "GrantServerError";
-    Object.setPrototypeOf(this, GrantServerError.prototype);
-  }
-}
-class AuthenticationError extends GrantServerError {
-  constructor(message = "Unauthorized", code = "UNAUTHENTICATED") {
-    super(message, code, 401);
-    this.name = "AuthenticationError";
-    Object.setPrototypeOf(this, AuthenticationError.prototype);
-  }
-}
-class AuthorizationError extends GrantServerError {
-  constructor(message = "Forbidden", code = "FORBIDDEN", reason) {
-    super(message, code, 403);
-    this.reason = reason;
-    this.name = "AuthorizationError";
-    Object.setPrototypeOf(this, AuthorizationError.prototype);
-  }
-}
-class BadRequestError extends GrantServerError {
-  constructor(message = "Bad Request", code = "BAD_REQUEST") {
-    super(message, code, 400);
-    this.name = "BadRequestError";
-    Object.setPrototypeOf(this, BadRequestError.prototype);
-  }
-}
-class NotFoundError extends GrantServerError {
-  constructor(message = "Not Found", code = "NOT_FOUND") {
-    super(message, code, 404);
-    this.name = "NotFoundError";
-    Object.setPrototypeOf(this, NotFoundError.prototype);
-  }
-}
-export {
-  AuthenticationError,
-  AuthorizationError,
-  BadRequestError,
-  G as GrantClient,
-  GrantServerError,
-  NotFoundError,
-  a as extractBearerToken,
-  e as extractTokenFromRequest
-};
-//# sourceMappingURL=index.mjs.map
+import { i as extractTokenFromRequest, r as extractBearerToken, t as GrantClient } from "./grant-client-t3KadxFo.js";
+import { a as NotFoundError, i as GrantServerError, n as AuthorizationError, r as BadRequestError, t as AuthenticationError } from "./errors-CSC_Z_KP.js";
+export { AuthenticationError, AuthorizationError, BadRequestError, GrantClient, GrantServerError, NotFoundError, extractBearerToken, extractTokenFromRequest };

package/dist/nest/grant.guard.d.ts

@@ -1,7 +1,7 @@
 import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { GrantClient } from '../grant-client';
-import { ResourceResolver, AuthorizationResult } from '../types';
+import { AuthorizationResult, ResourceResolver } from '../types';
 /** Injection token for GrantGuard. Use with @UseGuards(GRANT_GUARD) so Nest resolves the guard from the container (with GrantClient injected). */
 export declare const GRANT_GUARD = "GrantGuard";
 /**

package/dist/nest/grant.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant.guard.d.ts","sourceRoot":"","sources":["../../src/nest/grant.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAO9C,kJAAkJ;AAClJ,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAGtE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AA6BD,qBACa,UAAW,YAAW,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAY;gBAGE,MAAM,EAAE,WAAW,EAC1D,kBAAkB,CAAC,EAAE,SAAS,GAAG,iBAAiB;IASpD,OAAO,CAAC,qBAAqB;IAsBvB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CA0E/D"}
+{"version":3,"file":"grant.guard.d.ts","sourceRoot":"","sources":["../../src/nest/grant.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAM9C,kJAAkJ;AAClJ,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGtE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AA6BD,qBACa,UAAW,YAAW,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAY;gBAGE,MAAM,EAAE,WAAW,EAC1D,kBAAkB,CAAC,EAAE,SAAS,GAAG,iBAAiB;IASpD,OAAO,CAAC,qBAAqB;IAsBvB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CA0E/D"}

package/dist/nest/grant.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant.module.d.ts","sourceRoot":"","sources":["../../src/nest/grant.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAI/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAEa,WAAW;IACtB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa;CAWzD"}
+{"version":3,"file":"grant.module.d.ts","sourceRoot":"","sources":["../../src/nest/grant.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAG/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAEa,WAAW;IACtB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa;CAWzD"}

package/dist/nest/index.d.ts

@@ -1,8 +1,8 @@
-export { GrantGuard, GRANT_GUARD } from './grant.guard';
-export type { AuthorizedRequest, GrantGuardOptions } from './grant.guard';
-export { Grant, GRANT_OPTIONS_KEY } from './grant.decorator';
-export type { GrantOptions } from './grant.decorator';
-export { GrantModule, GRANT_CLIENT } from './grant.module';
-export type { GrantServerConfig, AuthorizationResult, PermissionCheckOptions, Scope, ResourceResolver, } from '../types';
 export { GrantClient } from '../grant-client';
+export type { AuthorizationResult, GrantServerConfig, PermissionCheckOptions, ResourceResolver, Scope, } from '../types';
+export type { GrantOptions } from './grant.decorator';
+export { Grant, GRANT_OPTIONS_KEY } from './grant.decorator';
+export type { AuthorizedRequest, GrantGuardOptions } from './grant.guard';
+export { GRANT_GUARD, GrantGuard } from './grant.guard';
+export { GRANT_CLIENT, GrantModule } from './grant.module';
 //# sourceMappingURL=index.d.ts.map

package/dist/nest/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE3D,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,EACL,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,GACN,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}